)]}' { "log": [ { "commit": "c45323b7560ec87c37c729b703c86ee65f136d75", "tree": "518353fdc1e6ad2b4aaa13d2bfbbf49c20318f36", "parents": [ "5bc55a333a2f7316b58edc7573e8e893f7acb532", "cbc5dde0a461240046e8a41c43d7c3b76d5db952" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Jan 13 09:03:18 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Jan 13 09:03:18 2025 -0800" }, "message": "Merge tag \u0027mm-hotfixes-stable-2025-01-13-00-03\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm\n\nPull misc fixes from Andrew Morton:\n \"18 hotfixes. 11 are cc:stable. 13 are MM and 5 are non-MM.\n\n All patches are singletons - please see the relevant changelogs for\n details\"\n\n* tag \u0027mm-hotfixes-stable-2025-01-13-00-03\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm:\n fs/proc: fix softlockup in __read_vmcore (part 2)\n mm: fix assertion in folio_end_read()\n mm: vmscan : pgdemote vmstat is not getting updated when MGLRU is enabled.\n vmstat: disable vmstat_work on vmstat_cpu_down_prep()\n zram: fix potential UAF of zram table\n selftests/mm: set allocated memory to non-zero content in cow test\n mm: clear uffd-wp PTE/PMD state on mremap()\n module: fix writing of livepatch relocations in ROX text\n mm: zswap: properly synchronize freeing resources during CPU hotunplug\n Revert \"mm: zswap: fix race between [de]compression and CPU hotunplug\"\n hugetlb: fix NULL pointer dereference in trace_hugetlbfs_alloc_inode\n mm: fix div by zero in bdi_ratio_from_pages\n x86/execmem: fix ROX cache usage in Xen PV guests\n filemap: avoid truncating 64-bit offset to 32 bits\n tools: fix atomic_set() definition to set the value correctly\n mm/mempolicy: count MPOL_WEIGHTED_INTERLEAVE to \"interleave_hit\"\n scripts/decode_stacktrace.sh: fix decoding of lines with an additional info\n mm/kmemleak: fix percpu memory leak detection failure\n" }, { "commit": "cbc5dde0a461240046e8a41c43d7c3b76d5db952", "tree": "234a069ca24ea1ea3efdb3b5ea16afba711b88bd", "parents": [ "1c47c57818ad73d2d09ddbcb4839708aab5ff2e3" ], "author": { "name": "Rik van Riel", "email": "riel@surriel.com", "time": "Fri Jan 10 10:28:21 2025 -0500" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Sun Jan 12 19:03:38 2025 -0800" }, "message": "fs/proc: fix softlockup in __read_vmcore (part 2)\n\nSince commit 5cbcb62dddf5 (\"fs/proc: fix softlockup in __read_vmcore\") the\nnumber of softlockups in __read_vmcore at kdump time have gone down, but\nthey still happen sometimes.\n\nIn a memory constrained environment like the kdump image, a softlockup is\nnot just a harmless message, but it can interfere with things like RCU\nfreeing memory, causing the crashdump to get stuck.\n\nThe second loop in __read_vmcore has a lot more opportunities for natural\nsleep points, like scheduling out while waiting for a data write to\nhappen, but apparently that is not always enough.\n\nAdd a cond_resched() to the second loop in __read_vmcore to (hopefully)\nget rid of the softlockups.\n\nLink: https://lkml.kernel.org/r/20250110102821.2a37581b@fangorn\nFixes: 5cbcb62dddf5 (\"fs/proc: fix softlockup in __read_vmcore\")\nSigned-off-by: Rik van Riel \u003criel@surriel.com\u003e\nReported-by: Breno Leitao \u003cleitao@debian.org\u003e\nCc: Baoquan He \u003cbhe@redhat.com\u003e\nCc: Dave Young \u003cdyoung@redhat.com\u003e\nCc: Vivek Goyal \u003cvgoyal@redhat.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "1c47c57818ad73d2d09ddbcb4839708aab5ff2e3", "tree": "bebbfa6ba18806cc50da78d8fe52d55cafb69cb7", "parents": [ "bd3d56ffa2c450364acf02663ba88996da37079d" ], "author": { "name": "Matthew Wilcox (Oracle)", "email": "willy@infradead.org", "time": "Fri Jan 10 16:32:57 2025 +0000" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Sun Jan 12 19:03:38 2025 -0800" }, "message": "mm: fix assertion in folio_end_read()\n\nWe only need to assert that the uptodate flag is clear if we\u0027re going to\nset it. This hasn\u0027t been a problem before now because we have only used\nfolio_end_read() when completing with an error, but it\u0027s convenient to use\nit in squashfs if we discover the folio is already uptodate.\n\nLink: https://lkml.kernel.org/r/20250110163300.3346321-1-willy@infradead.org\nSigned-off-by: Matthew Wilcox (Oracle) \u003cwilly@infradead.org\u003e\nCc: Phillip Lougher \u003cphillip@squashfs.org.uk\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "bd3d56ffa2c450364acf02663ba88996da37079d", "tree": "f825273f2084d13c343ced630d9430421cac93a6", "parents": [ "9fd8fcf171dcc39d2a8ecf221388820fb5fbc00e" ], "author": { "name": "Donet Tom", "email": "donettom@linux.ibm.com", "time": "Thu Jan 09 00:05:39 2025 -0600" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Sun Jan 12 19:03:38 2025 -0800" }, "message": "mm: vmscan : pgdemote vmstat is not getting updated when MGLRU is enabled.\n\nWhen MGLRU is enabled, the pgdemote_kswapd, pgdemote_direct, and\npgdemote_khugepaged stats in vmstat are not being updated.\n\nCommit f77f0c751478 (\"mm,memcg: provide per-cgroup counters for NUMA\nbalancing operations\") moved the pgdemote vmstat update from\ndemote_folio_list() to shrink_inactive_list(), which is in the normal LRU\npath. As a result, the pgdemote stats are updated correctly for the\nnormal LRU but not for MGLRU.\n\nTo address this, we have added the pgdemote stat update in the\nevict_folios() function, which is in the MGLRU path. With this patch, the\npgdemote stats will now be updated correctly when MGLRU is enabled.\n\nWithout this patch vmstat output when MGLRU is enabled\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\npgdemote_kswapd 0\npgdemote_direct 0\npgdemote_khugepaged 0\n\nWith this patch vmstat output when MGLRU is enabled\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\npgdemote_kswapd 43234\npgdemote_direct 4691\npgdemote_khugepaged 0\n\nLink: https://lkml.kernel.org/r/20250109060540.451261-1-donettom@linux.ibm.com\nFixes: f77f0c751478 (\"mm,memcg: provide per-cgroup counters for NUMA balancing operations\")\nSigned-off-by: Donet Tom \u003cdonettom@linux.ibm.com\u003e\nAcked-by: Yu Zhao \u003cyuzhao@google.com\u003e\nTested-by: Li Zhijian \u003clizhijian@fujitsu.com\u003e\nReviewed-by: Li Zhijian \u003clizhijian@fujitsu.com\u003e\nCc: Aneesh Kumar K.V (Arm) \u003caneesh.kumar@kernel.org\u003e\nCc: David Rientjes \u003crientjes@google.com\u003e\nCc: Johannes Weiner \u003channes@cmpxchg.org\u003e\nCc: Kaiyang Zhao \u003ckaiyang2@cs.cmu.edu\u003e\nCc: Michal Hocko \u003cmhocko@kernel.org\u003e\nCc: Muchun Song \u003cmuchun.song@linux.dev\u003e\nCc: Ritesh Harjani (IBM) \u003critesh.list@gmail.com\u003e\nCc: Roman Gushchin \u003croman.gushchin@linux.dev\u003e\nCc: Shakeel Butt \u003cshakeel.butt@linux.dev\u003e\nCc: Wei Xu \u003cweixugc@google.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "9fd8fcf171dcc39d2a8ecf221388820fb5fbc00e", "tree": "a54d677fdc2035cc4dde0e39cb93df23ccda376f", "parents": [ "212fe1c0df4a150fb6298db2cfff267ceaba5402" ], "author": { "name": "Koichiro Den", "email": "koichiro.den@canonical.com", "time": "Wed Jan 08 13:28:07 2025 +0900" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Sun Jan 12 19:03:38 2025 -0800" }, "message": "vmstat: disable vmstat_work on vmstat_cpu_down_prep()\n\nThe upstream commit adcfb264c3ed (\"vmstat: disable vmstat_work on\nvmstat_cpu_down_prep()\") introduced another warning during the boot phase\nso was soon reverted on upstream by commit cd6313beaeae (\"Revert \"vmstat:\ndisable vmstat_work on vmstat_cpu_down_prep()\"\"). This commit resolves it\nand reattempts the original fix.\n\nEven after mm/vmstat:online teardown, shepherd may still queue work for\nthe dying cpu until the cpu is removed from online mask. While it\u0027s quite\nrare, this means that after unbind_workers() unbinds a per-cpu kworker, it\npotentially runs vmstat_update for the dying CPU on an irrelevant cpu\nbefore entering atomic AP states. When CONFIG_DEBUG_PREEMPT\u003dy, it results\nin the following error with the backtrace.\n\n BUG: using smp_processor_id() in preemptible [00000000] code: \\\n kworker/7:3/1702\n caller is refresh_cpu_vm_stats+0x235/0x5f0\n CPU: 0 UID: 0 PID: 1702 Comm: kworker/7:3 Tainted: G\n Tainted: [N]\u003dTEST\n Workqueue: mm_percpu_wq vmstat_update\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x8d/0xb0\n check_preemption_disabled+0xce/0xe0\n refresh_cpu_vm_stats+0x235/0x5f0\n vmstat_update+0x17/0xa0\n process_one_work+0x869/0x1aa0\n worker_thread+0x5e5/0x1100\n kthread+0x29e/0x380\n ret_from_fork+0x2d/0x70\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n\nSo, for mm/vmstat:online, disable vmstat_work reliably on teardown and\nsymmetrically enable it on startup.\n\nFor secondary CPUs during CPU hotplug scenarios, ensure the delayed work\nis disabled immediately after the initialization. These CPUs are not yet\nonline when start_shepherd_timer() runs on boot CPU. vmstat_cpu_online()\nwill enable the work for them.\n\nLink: https://lkml.kernel.org/r/20250108042807.3429745-1-koichiro.den@canonical.com\nSigned-off-by: Huacai Chen \u003cchenhuacai@kernel.org\u003e\nSigned-off-by: Koichiro Den \u003ckoichiro.den@canonical.com\u003e\nSuggested-by: Huacai Chen \u003cchenhuacai@kernel.org\u003e\nTested-by: Charalampos Mitrodimas \u003ccharmitro@posteo.net\u003e\nCc: Lorenzo Stoakes \u003clorenzo.stoakes@oracle.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "212fe1c0df4a150fb6298db2cfff267ceaba5402", "tree": "ede7fb9e7142bab77a0481f45304244462af815e", "parents": [ "a32bf5bb7933fde6f39747499f8ec232b5b5400f" ], "author": { "name": "Kairui Song", "email": "kasong@tencent.com", "time": "Tue Jan 07 14:54:46 2025 +0800" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Sun Jan 12 19:03:37 2025 -0800" }, "message": "zram: fix potential UAF of zram table\n\nIf zram_meta_alloc failed early, it frees allocated zram-\u003etable without\nsetting it NULL. Which will potentially cause zram_meta_free to access\nthe table if user reset an failed and uninitialized device.\n\nLink: https://lkml.kernel.org/r/20250107065446.86928-1-ryncsn@gmail.com\nFixes: 74363ec674cb (\"zram: fix uninitialized ZRAM not releasing backing device\")\nSigned-off-by: Kairui Song \u003ckasong@tencent.com\u003e\nReviewed-by: Sergey Senozhatsky \u003csenozhatsky@chromium.org\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "a32bf5bb7933fde6f39747499f8ec232b5b5400f", "tree": "d377f4ec92126d31a567bb246c2f90c036b5c455", "parents": [ "0cef0bb836e3cfe00f08f9606c72abd72fe78ca3" ], "author": { "name": "Ryan Roberts", "email": "ryan.roberts@arm.com", "time": "Tue Jan 07 14:25:53 2025 +0000" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Sun Jan 12 19:03:37 2025 -0800" }, "message": "selftests/mm: set allocated memory to non-zero content in cow test\n\nAfter commit b1f202060afe (\"mm: remap unused subpages to shared zeropage\nwhen splitting isolated thp\"), cow test cases involving swapping out THPs\nvia madvise(MADV_PAGEOUT) started to be skipped due to the subsequent\ncheck via pagemap determining that the memory was not actually swapped\nout. Logs similar to this were emitted:\n\n ...\n\n # [RUN] Basic COW after fork() ... with swapped-out, PTE-mapped THP (16 kB)\n ok 2 # SKIP MADV_PAGEOUT did not work, is swap enabled?\n # [RUN] Basic COW after fork() ... with single PTE of swapped-out THP (16 kB)\n ok 3 # SKIP MADV_PAGEOUT did not work, is swap enabled?\n # [RUN] Basic COW after fork() ... with swapped-out, PTE-mapped THP (32 kB)\n ok 4 # SKIP MADV_PAGEOUT did not work, is swap enabled?\n\n ...\n\nThe commit in question introduces the behaviour of scanning THPs and if\ntheir content is predominantly zero, it splits them and replaces the pages\nwhich are wholly zero with the zero page. These cow test cases were\ngetting caught up in this.\n\nSo let\u0027s avoid that by filling the contents of all allocated memory with\na non-zero value. With this in place, the tests are passing again.\n\nLink: https://lkml.kernel.org/r/20250107142555.1870101-1-ryan.roberts@arm.com\nFixes: b1f202060afe (\"mm: remap unused subpages to shared zeropage when splitting isolated thp\")\nSigned-off-by: Ryan Roberts \u003cryan.roberts@arm.com\u003e\nAcked-by: David Hildenbrand \u003cdavid@redhat.com\u003e\nCc: Usama Arif \u003cusamaarif642@gmail.com\u003e\nCc: Yu Zhao \u003cyuzhao@google.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "0cef0bb836e3cfe00f08f9606c72abd72fe78ca3", "tree": "de24157ced63489add74731da3f5ca4222ae37bc", "parents": [ "4bcf29741145e73440323e3e9af8b1a6f4961183" ], "author": { "name": "Ryan Roberts", "email": "ryan.roberts@arm.com", "time": "Tue Jan 07 14:47:52 2025 +0000" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Sun Jan 12 19:03:37 2025 -0800" }, "message": "mm: clear uffd-wp PTE/PMD state on mremap()\n\nWhen mremap()ing a memory region previously registered with userfaultfd as\nwrite-protected but without UFFD_FEATURE_EVENT_REMAP, an inconsistency in\nflag clearing leads to a mismatch between the vma flags (which have\nuffd-wp cleared) and the pte/pmd flags (which do not have uffd-wp\ncleared). This mismatch causes a subsequent mprotect(PROT_WRITE) to\ntrigger a warning in page_table_check_pte_flags() due to setting the pte\nto writable while uffd-wp is still set.\n\nFix this by always explicitly clearing the uffd-wp pte/pmd flags on any\nsuch mremap() so that the values are consistent with the existing clearing\nof VM_UFFD_WP. Be careful to clear the logical flag regardless of its\nphysical form; a PTE bit, a swap PTE bit, or a PTE marker. Cover PTE,\nhuge PMD and hugetlb paths.\n\nLink: https://lkml.kernel.org/r/20250107144755.1871363-2-ryan.roberts@arm.com\nCo-developed-by: Mikołaj Lenczewski \u003cmiko.lenczewski@arm.com\u003e\nSigned-off-by: Mikołaj Lenczewski \u003cmiko.lenczewski@arm.com\u003e\nSigned-off-by: Ryan Roberts \u003cryan.roberts@arm.com\u003e\nCloses: https://lore.kernel.org/linux-mm/810b44a8-d2ae-4107-b665-5a42eae2d948@arm.com/\nFixes: 63b2d4174c4a (\"userfaultfd: wp: add the writeprotect API to userfaultfd ioctl\")\nCc: David Hildenbrand \u003cdavid@redhat.com\u003e\nCc: Jann Horn \u003cjannh@google.com\u003e\nCc: Liam R. Howlett \u003cLiam.Howlett@Oracle.com\u003e\nCc: Lorenzo Stoakes \u003clorenzo.stoakes@oracle.com\u003e\nCc: Mark Rutland \u003cmark.rutland@arm.com\u003e\nCc: Muchun Song \u003cmuchun.song@linux.dev\u003e\nCc: Peter Xu \u003cpeterx@redhat.com\u003e\nCc: Shuah Khan \u003cshuah@kernel.org\u003e\nCc: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "4bcf29741145e73440323e3e9af8b1a6f4961183", "tree": "53ba36eb8eb71c1d204ee9769355e27bd335b2c2", "parents": [ "12dcb0ef540629a281533f9dedc1b6b8e14cfb65" ], "author": { "name": "Petr Pavlu", "email": "petr.pavlu@suse.com", "time": "Tue Jan 07 16:34:57 2025 +0100" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Sun Jan 12 19:03:37 2025 -0800" }, "message": "module: fix writing of livepatch relocations in ROX text\n\nA livepatch module can contain a special relocation section\n.klp.rela.\u003cobjname\u003e.\u003csecname\u003e to apply its relocations at the appropriate\ntime and to additionally access local and unexported symbols. When\n\u003cobjname\u003e points to another module, such relocations are processed\nseparately from the regular module relocation process. For instance, only\nwhen the target \u003cobjname\u003e actually becomes loaded.\n\nWith CONFIG_STRICT_MODULE_RWX, when the livepatch core decides to apply\nthese relocations, their processing results in the following bug:\n\n[ 25.827238] BUG: unable to handle page fault for address: 00000000000012ba\n[ 25.827819] #PF: supervisor read access in kernel mode\n[ 25.828153] #PF: error_code(0x0000) - not-present page\n[ 25.828588] PGD 0 P4D 0\n[ 25.829063] Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI\n[ 25.829742] CPU: 2 UID: 0 PID: 452 Comm: insmod Tainted: G O K 6.13.0-rc4-00078-g059dd502b263 #7820\n[ 25.830417] Tainted: [O]\u003dOOT_MODULE, [K]\u003dLIVEPATCH\n[ 25.830768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.0-20220807_005459-localhost 04/01/2014\n[ 25.831651] RIP: 0010:memcmp+0x24/0x60\n[ 25.832190] Code: [...]\n[ 25.833378] RSP: 0018:ffffa40b403a3ae8 EFLAGS: 00000246\n[ 25.833637] RAX: 0000000000000000 RBX: ffff93bc81d8e700 RCX: ffffffffc0202000\n[ 25.834072] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000000012ba\n[ 25.834548] RBP: ffffa40b403a3b68 R08: ffffa40b403a3b30 R09: 0000004a00000002\n[ 25.835088] R10: ffffffffffffd222 R11: f000000000000000 R12: 0000000000000000\n[ 25.835666] R13: ffffffffc02032ba R14: ffffffffc007d1e0 R15: 0000000000000004\n[ 25.836139] FS: 00007fecef8c3080(0000) GS:ffff93bc8f900000(0000) knlGS:0000000000000000\n[ 25.836519] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 25.836977] CR2: 00000000000012ba CR3: 0000000002f24000 CR4: 00000000000006f0\n[ 25.837442] Call Trace:\n[ 25.838297] \u003cTASK\u003e\n[ 25.841083] __write_relocate_add.constprop.0+0xc7/0x2b0\n[ 25.841701] apply_relocate_add+0x75/0xa0\n[ 25.841973] klp_write_section_relocs+0x10e/0x140\n[ 25.842304] klp_write_object_relocs+0x70/0xa0\n[ 25.842682] klp_init_object_loaded+0x21/0xf0\n[ 25.842972] klp_enable_patch+0x43d/0x900\n[ 25.843572] do_one_initcall+0x4c/0x220\n[ 25.844186] do_init_module+0x6a/0x260\n[ 25.844423] init_module_from_file+0x9c/0xe0\n[ 25.844702] idempotent_init_module+0x172/0x270\n[ 25.845008] __x64_sys_finit_module+0x69/0xc0\n[ 25.845253] do_syscall_64+0x9e/0x1a0\n[ 25.845498] entry_SYSCALL_64_after_hwframe+0x77/0x7f\n[ 25.846056] RIP: 0033:0x7fecef9eb25d\n[ 25.846444] Code: [...]\n[ 25.847563] RSP: 002b:00007ffd0c5d6de8 EFLAGS: 00000246 ORIG_RAX: 0000000000000139\n[ 25.848082] RAX: ffffffffffffffda RBX: 000055b03f05e470 RCX: 00007fecef9eb25d\n[ 25.848456] RDX: 0000000000000000 RSI: 000055b001e74e52 RDI: 0000000000000003\n[ 25.848969] RBP: 00007ffd0c5d6ea0 R08: 0000000000000040 R09: 0000000000004100\n[ 25.849411] R10: 00007fecefac7b20 R11: 0000000000000246 R12: 000055b001e74e52\n[ 25.849905] R13: 0000000000000000 R14: 000055b03f05e440 R15: 0000000000000000\n[ 25.850336] \u003c/TASK\u003e\n[ 25.850553] Modules linked in: deku(OK+) uinput\n[ 25.851408] CR2: 00000000000012ba\n[ 25.852085] ---[ end trace 0000000000000000 ]---\n\nThe problem is that the .klp.rela.\u003cobjname\u003e.\u003csecname\u003e relocations are\nprocessed after the module was already formed and mod-\u003erw_copy was reset. \nHowever, the code in __write_relocate_add() calls\nmodule_writable_address() which translates the target address \u0027loc\u0027 still\nto \u0027loc + (mem-\u003erw_copy - mem-\u003ebase)\u0027, with mem-\u003erw_copy now being 0.\n\nFix the problem by returning directly \u0027loc\u0027 in module_writable_address()\nwhen the module is already formed. Function __write_relocate_add() knows\nto use text_poke() in such a case.\n\nLink: https://lkml.kernel.org/r/20250107153507.14733-1-petr.pavlu@suse.com\nFixes: 0c133b1e78cd (\"module: prepare to handle ROX allocations for text\")\nSigned-off-by: Petr Pavlu \u003cpetr.pavlu@suse.com\u003e\nReported-by: Marek Maslanka \u003cmmaslanka@google.com\u003e\nCloses: https://lore.kernel.org/linux-modules/CAGcaFA2hdThQV6mjD_1_U+GNHThv84+MQvMWLgEuX+LVbAyDxg@mail.gmail.com/\nReviewed-by: Petr Mladek \u003cpmladek@suse.com\u003e\nTested-by: Petr Mladek \u003cpmladek@suse.com\u003e\nCc: Joe Lawrence \u003cjoe.lawrence@redhat.com\u003e\nCc: Josh Poimboeuf \u003cjpoimboe@kernel.org\u003e\nCc: Luis Chamberlain \u003cmcgrof@kernel.org\u003e\nCc: Mike Rapoport (Microsoft) \u003crppt@kernel.org\u003e\nCc: Petr Mladek \u003cpmladek@suse.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "12dcb0ef540629a281533f9dedc1b6b8e14cfb65", "tree": "dd8e24df56dd8a9e63c8ee4df3900a4b78cc7436", "parents": [ "4dff389c9f1dd787e8058930b3fbd3248a6238c5" ], "author": { "name": "Yosry Ahmed", "email": "yosryahmed@google.com", "time": "Wed Jan 08 22:24:41 2025 +0000" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Sun Jan 12 19:03:36 2025 -0800" }, "message": "mm: zswap: properly synchronize freeing resources during CPU hotunplug\n\nIn zswap_compress() and zswap_decompress(), the per-CPU acomp_ctx of the\ncurrent CPU at the beginning of the operation is retrieved and used\nthroughout. However, since neither preemption nor migration are disabled,\nit is possible that the operation continues on a different CPU.\n\nIf the original CPU is hotunplugged while the acomp_ctx is still in use,\nwe run into a UAF bug as some of the resources attached to the acomp_ctx\nare freed during hotunplug in zswap_cpu_comp_dead() (i.e. \nacomp_ctx.buffer, acomp_ctx.req, or acomp_ctx.acomp).\n\nThe problem was introduced in commit 1ec3b5fe6eec (\"mm/zswap: move to use\ncrypto_acomp API for hardware acceleration\") when the switch to the\ncrypto_acomp API was made. Prior to that, the per-CPU crypto_comp was\nretrieved using get_cpu_ptr() which disables preemption and makes sure the\nCPU cannot go away from under us. Preemption cannot be disabled with the\ncrypto_acomp API as a sleepable context is needed.\n\nUse the acomp_ctx.mutex to synchronize CPU hotplug callbacks allocating\nand freeing resources with compression/decompression paths. Make sure\nthat acomp_ctx.req is NULL when the resources are freed. In the\ncompression/decompression paths, check if acomp_ctx.req is NULL after\nacquiring the mutex (meaning the CPU was offlined) and retry on the new\nCPU.\n\nThe initialization of acomp_ctx.mutex is moved from the CPU hotplug\ncallback to the pool initialization where it belongs (where the mutex is\nallocated). In addition to adding clarity, this makes sure that CPU\nhotplug cannot reinitialize a mutex that is already locked by\ncompression/decompression.\n\nPreviously a fix was attempted by holding cpus_read_lock() [1]. This\nwould have caused a potential deadlock as it is possible for code already\nholding the lock to fall into reclaim and enter zswap (causing a\ndeadlock). A fix was also attempted using SRCU for synchronization, but\nJohannes pointed out that synchronize_srcu() cannot be used in CPU hotplug\nnotifiers [2].\n\nAlternative fixes that were considered/attempted and could have worked:\n- Refcounting the per-CPU acomp_ctx. This involves complexity in\n handling the race between the refcount dropping to zero in\n zswap_[de]compress() and the refcount being re-initialized when the\n CPU is onlined.\n- Disabling migration before getting the per-CPU acomp_ctx [3], but\n that\u0027s discouraged and is a much bigger hammer than needed, and could\n result in subtle performance issues.\n\n[1]https://lkml.kernel.org/20241219212437.2714151-1-yosryahmed@google.com/\n[2]https://lkml.kernel.org/20250107074724.1756696-2-yosryahmed@google.com/\n[3]https://lkml.kernel.org/20250107222236.2715883-2-yosryahmed@google.com/\n\n[yosryahmed@google.com: remove comment]\n Link: https://lkml.kernel.org/r/CAJD7tkaxS1wjn+swugt8QCvQ-rVF5RZnjxwPGX17k8x9zSManA@mail.gmail.com\nLink: https://lkml.kernel.org/r/20250108222441.3622031-1-yosryahmed@google.com\nFixes: 1ec3b5fe6eec (\"mm/zswap: move to use crypto_acomp API for hardware acceleration\")\nSigned-off-by: Yosry Ahmed \u003cyosryahmed@google.com\u003e\nReported-by: Johannes Weiner \u003channes@cmpxchg.org\u003e\nCloses: https://lore.kernel.org/lkml/20241113213007.GB1564047@cmpxchg.org/\nReported-by: Sam Sun \u003csamsun1006219@gmail.com\u003e\nCloses: https://lore.kernel.org/lkml/CAEkJfYMtSdM5HceNsXUDf5haghD5+o2e7Qv4OcuruL4tPg6OaQ@mail.gmail.com/\nCc: Barry Song \u003cbaohua@kernel.org\u003e\nCc: Chengming Zhou \u003cchengming.zhou@linux.dev\u003e\nCc: Kanchana P Sridhar \u003ckanchana.p.sridhar@intel.com\u003e\nCc: Nhat Pham \u003cnphamcs@gmail.com\u003e\nCc: Vitaly Wool \u003cvitalywool@gmail.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "4dff389c9f1dd787e8058930b3fbd3248a6238c5", "tree": "2ed0eda61130e7bab3c9675e29788af8da8548b9", "parents": [ "9ab96b524dce598c041388a599e3a227c7a7926c" ], "author": { "name": "Yosry Ahmed", "email": "yosryahmed@google.com", "time": "Tue Jan 07 22:22:34 2025 +0000" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Sun Jan 12 19:03:36 2025 -0800" }, "message": "Revert \"mm: zswap: fix race between [de]compression and CPU hotunplug\"\n\nThis reverts commit eaebeb93922ca6ab0dd92027b73d0112701706ef.\n\nCommit eaebeb93922c (\"mm: zswap: fix race between [de]compression and CPU\nhotunplug\") used the CPU hotplug lock in zswap compress/decompress\noperations to protect against a race with CPU hotunplug making some\nper-CPU resources go away.\n\nHowever, zswap compress/decompress can be reached through reclaim while\nthe lock is held, resulting in a potential deadlock as reported by syzbot:\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nWARNING: possible circular locking dependency detected\n6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 Not tainted\n------------------------------------------------------\nkswapd0/89 is trying to acquire lock:\n ffffffff8e7d2ed0 (cpu_hotplug_lock){++++}-{0:0}, at: acomp_ctx_get_cpu mm/zswap.c:886 [inline]\n ffffffff8e7d2ed0 (cpu_hotplug_lock){++++}-{0:0}, at: zswap_compress mm/zswap.c:908 [inline]\n ffffffff8e7d2ed0 (cpu_hotplug_lock){++++}-{0:0}, at: zswap_store_page mm/zswap.c:1439 [inline]\n ffffffff8e7d2ed0 (cpu_hotplug_lock){++++}-{0:0}, at: zswap_store+0xa74/0x1ba0 mm/zswap.c:1546\n\nbut task is already holding lock:\n ffffffff8ea355a0 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat mm/vmscan.c:6871 [inline]\n ffffffff8ea355a0 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xb58/0x2f30 mm/vmscan.c:7253\n\nwhich lock already depends on the new lock.\n\nthe existing dependency chain (in reverse order) is:\n\n-\u003e #1 (fs_reclaim){+.+.}-{0:0}:\n lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849\n __fs_reclaim_acquire mm/page_alloc.c:3853 [inline]\n fs_reclaim_acquire+0x88/0x130 mm/page_alloc.c:3867\n might_alloc include/linux/sched/mm.h:318 [inline]\n slab_pre_alloc_hook mm/slub.c:4070 [inline]\n slab_alloc_node mm/slub.c:4148 [inline]\n __kmalloc_cache_node_noprof+0x40/0x3a0 mm/slub.c:4337\n kmalloc_node_noprof include/linux/slab.h:924 [inline]\n alloc_worker kernel/workqueue.c:2638 [inline]\n create_worker+0x11b/0x720 kernel/workqueue.c:2781\n workqueue_prepare_cpu+0xe3/0x170 kernel/workqueue.c:6628\n cpuhp_invoke_callback+0x48d/0x830 kernel/cpu.c:194\n __cpuhp_invoke_callback_range kernel/cpu.c:965 [inline]\n cpuhp_invoke_callback_range kernel/cpu.c:989 [inline]\n cpuhp_up_callbacks kernel/cpu.c:1020 [inline]\n _cpu_up+0x2b3/0x580 kernel/cpu.c:1690\n cpu_up+0x184/0x230 kernel/cpu.c:1722\n cpuhp_bringup_mask+0xdf/0x260 kernel/cpu.c:1788\n cpuhp_bringup_cpus_parallel+0xf9/0x160 kernel/cpu.c:1878\n bringup_nonboot_cpus+0x2b/0x50 kernel/cpu.c:1892\n smp_init+0x34/0x150 kernel/smp.c:1009\n kernel_init_freeable+0x417/0x5d0 init/main.c:1569\n kernel_init+0x1d/0x2b0 init/main.c:1466\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\n-\u003e #0 (cpu_hotplug_lock){++++}-{0:0}:\n check_prev_add kernel/locking/lockdep.c:3161 [inline]\n check_prevs_add kernel/locking/lockdep.c:3280 [inline]\n validate_chain+0x18ef/0x5920 kernel/locking/lockdep.c:3904\n __lock_acquire+0x1397/0x2100 kernel/locking/lockdep.c:5226\n lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849\n percpu_down_read include/linux/percpu-rwsem.h:51 [inline]\n cpus_read_lock+0x42/0x150 kernel/cpu.c:490\n acomp_ctx_get_cpu mm/zswap.c:886 [inline]\n zswap_compress mm/zswap.c:908 [inline]\n zswap_store_page mm/zswap.c:1439 [inline]\n zswap_store+0xa74/0x1ba0 mm/zswap.c:1546\n swap_writepage+0x647/0xce0 mm/page_io.c:279\n shmem_writepage+0x1248/0x1610 mm/shmem.c:1579\n pageout mm/vmscan.c:696 [inline]\n shrink_folio_list+0x35ee/0x57e0 mm/vmscan.c:1374\n shrink_inactive_list mm/vmscan.c:1967 [inline]\n shrink_list mm/vmscan.c:2205 [inline]\n shrink_lruvec+0x16db/0x2f30 mm/vmscan.c:5734\n mem_cgroup_shrink_node+0x385/0x8e0 mm/vmscan.c:6575\n mem_cgroup_soft_reclaim mm/memcontrol-v1.c:312 [inline]\n memcg1_soft_limit_reclaim+0x346/0x810 mm/memcontrol-v1.c:362\n balance_pgdat mm/vmscan.c:6975 [inline]\n kswapd+0x17b3/0x2f30 mm/vmscan.c:7253\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\nother info that might help us debug this:\n\n Possible unsafe locking scenario:\n\n CPU0 CPU1\n ---- ----\n lock(fs_reclaim);\n lock(cpu_hotplug_lock);\n lock(fs_reclaim);\n rlock(cpu_hotplug_lock);\n\n *** DEADLOCK ***\n\n1 lock held by kswapd0/89:\n #0: ffffffff8ea355a0 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat mm/vmscan.c:6871 [inline]\n #0: ffffffff8ea355a0 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xb58/0x2f30 mm/vmscan.c:7253\n\nstack backtrace:\nCPU: 0 UID: 0 PID: 89 Comm: kswapd0 Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_circular_bug+0x13a/0x1b0 kernel/locking/lockdep.c:2074\n check_noncircular+0x36a/0x4a0 kernel/locking/lockdep.c:2206\n check_prev_add kernel/locking/lockdep.c:3161 [inline]\n check_prevs_add kernel/locking/lockdep.c:3280 [inline]\n validate_chain+0x18ef/0x5920 kernel/locking/lockdep.c:3904\n __lock_acquire+0x1397/0x2100 kernel/locking/lockdep.c:5226\n lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849\n percpu_down_read include/linux/percpu-rwsem.h:51 [inline]\n cpus_read_lock+0x42/0x150 kernel/cpu.c:490\n acomp_ctx_get_cpu mm/zswap.c:886 [inline]\n zswap_compress mm/zswap.c:908 [inline]\n zswap_store_page mm/zswap.c:1439 [inline]\n zswap_store+0xa74/0x1ba0 mm/zswap.c:1546\n swap_writepage+0x647/0xce0 mm/page_io.c:279\n shmem_writepage+0x1248/0x1610 mm/shmem.c:1579\n pageout mm/vmscan.c:696 [inline]\n shrink_folio_list+0x35ee/0x57e0 mm/vmscan.c:1374\n shrink_inactive_list mm/vmscan.c:1967 [inline]\n shrink_list mm/vmscan.c:2205 [inline]\n shrink_lruvec+0x16db/0x2f30 mm/vmscan.c:5734\n mem_cgroup_shrink_node+0x385/0x8e0 mm/vmscan.c:6575\n mem_cgroup_soft_reclaim mm/memcontrol-v1.c:312 [inline]\n memcg1_soft_limit_reclaim+0x346/0x810 mm/memcontrol-v1.c:362\n balance_pgdat mm/vmscan.c:6975 [inline]\n kswapd+0x17b3/0x2f30 mm/vmscan.c:7253\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e\n\nRevert the change. A different fix for the race with CPU hotunplug will\nfollow.\n\nLink: https://lkml.kernel.org/r/20250107222236.2715883-1-yosryahmed@google.com\nSigned-off-by: Yosry Ahmed \u003cyosryahmed@google.com\u003e\nReported-by: syzbot \u003csyzkaller@googlegroups.com\u003e\nCc: Barry Song \u003cbaohua@kernel.org\u003e\nCc: Chengming Zhou \u003cchengming.zhou@linux.dev\u003e\nCc: Johannes Weiner \u003channes@cmpxchg.org\u003e\nCc: Kanchana P Sridhar \u003ckanchana.p.sridhar@intel.com\u003e\nCc: Nhat Pham \u003cnphamcs@gmail.com\u003e\nCc: Sam Sun \u003csamsun1006219@gmail.com\u003e\nCc: Vitaly Wool \u003cvitalywool@gmail.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "9ab96b524dce598c041388a599e3a227c7a7926c", "tree": "f81087317bc2068f5b501e68cbfac95ce9540eb4", "parents": [ "4ce718f39776b5e162ea6b8010da7a6f02b13dc0" ], "author": { "name": "Muchun Song", "email": "songmuchun@bytedance.com", "time": "Mon Jan 06 11:31:17 2025 +0800" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Sun Jan 12 19:03:36 2025 -0800" }, "message": "hugetlb: fix NULL pointer dereference in trace_hugetlbfs_alloc_inode\n\nhugetlb_file_setup() will pass a NULL @dir to hugetlbfs_get_inode(), so we\nwill access a NULL pointer for @dir. Fix it and set __entry-\u003edr to 0 if\n@dir is NULL. Because -\u003ei_ino cannot be 0 (see get_next_ino()), there is\nno confusing if user sees a 0 inode number.\n\nLink: https://lkml.kernel.org/r/20250106033118.4640-1-songmuchun@bytedance.com\nFixes: 318580ad7f28 (\"hugetlbfs: support tracepoint\")\nSigned-off-by: Muchun Song \u003csongmuchun@bytedance.com\u003e\nReported-by: Cheung Wall \u003czzqq0103.hey@gmail.com\u003e\nCloses: https://lore.kernel.org/linux-mm/02858D60-43C1-4863-A84F-3C76A8AF1F15@linux.dev/T/#\nReviewed-by: Hongbo Li \u003clihongbo22@huawei.com\u003e\nCc: cheung wall \u003czzqq0103.hey@gmail.com\u003e\nCc: Christian Brauner \u003cbrauner@kernel.org\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "4ce718f39776b5e162ea6b8010da7a6f02b13dc0", "tree": "8cf2757f251fb3d016c38d463c674af7a42aba69", "parents": [ "59f59108475e8fadd5f9fc9a5d79563203df40f1" ], "author": { "name": "Stefan Roesch", "email": "shr@devkernel.io", "time": "Fri Jan 03 17:20:37 2025 -0800" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Sun Jan 12 19:03:36 2025 -0800" }, "message": "mm: fix div by zero in bdi_ratio_from_pages\n\nDuring testing it has been detected, that it is possible to get div by\nzero error in bdi_set_min_bytes. The error is caused by the function\nbdi_ratio_from_pages(). bdi_ratio_from_pages() calls global_dirty_limits.\nIf the dirty threshold is 0, the div by zero is raised. This can happen\nif the root user is setting:\n\necho 0 \u003e /proc/sys/vm/dirty_ratio\n\nThe following is a test case:\n\necho 0 \u003e /proc/sys/vm/dirty_ratio\ncd /sys/class/bdi/\u003cdevice\u003e\necho 1 \u003e strict_limit\necho 8192 \u003e min_bytes\n\n\u003d\u003d\u003e error is raised.\n\nThe problem is addressed by returning -EINVAL if dirty_ratio or\ndirty_bytes is set to 0.\n\n[shr@devkernel.io: check for -EINVAL in bdi_set_min_bytes() and bdi_set_max_bytes()]\n Link: https://lkml.kernel.org/r/20250108014723.166637-1-shr@devkernel.io\n[shr@devkernel.io: v3]\n Link: https://lkml.kernel.org/r/20250109063411.6591-1-shr@devkernel.io\nLink: https://lkml.kernel.org/r/20250104012037.159386-1-shr@devkernel.io\nSigned-off-by: Stefan Roesch \u003cshr@devkernel.io\u003e\nReported-by: cheung wall \u003czzqq0103.hey@gmail.com\u003e\nCloses: https://lore.kernel.org/linux-mm/87pll35yd0.fsf@devkernel.io/T/#t\nAcked-by: David Hildenbrand \u003cdavid@redhat.com\u003e\nCc: Matthew Wilcox (Oracle) \u003cwilly@infradead.org\u003e\nCc: Qiang Zhang \u003czzqq0103.hey@gmail.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "59f59108475e8fadd5f9fc9a5d79563203df40f1", "tree": "80925732b063933bf74bbd7f0593e1ef745684fa", "parents": [ "f505e6c91e7a22d10316665a86d79f84d9f0ba76" ], "author": { "name": "Juergen Gross", "email": "jgross@suse.com", "time": "Fri Jan 03 07:56:31 2025 +0100" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Sun Jan 12 19:03:35 2025 -0800" }, "message": "x86/execmem: fix ROX cache usage in Xen PV guests\n\nThe recently introduced ROX cache for modules is assuming large page\nsupport in 64-bit mode without testing the related feature bit. This\nresults in breakage when running as a Xen PV guest, as in this mode large\npages are not supported.\n\nFix that by testing the X86_FEATURE_PSE capability when deciding whether\nto enable the ROX cache.\n\nLink: https://lkml.kernel.org/r/20250103065631.26459-1-jgross@suse.com\nFixes: 2e45474ab14f (\"execmem: add support for cache of large ROX pages\")\nSigned-off-by: Juergen Gross \u003cjgross@suse.com\u003e\nReported-by: Marek Marczykowski-Górecki \u003cmarmarek@invisiblethingslab.com\u003e\nTested-by: Marek Marczykowski-Górecki \u003cmarmarek@invisiblethingslab.com\u003e\nCc: Luis Chamberlain \u003cmcgrof@kernel.org\u003e\nCc: Andy Lutomirski \u003cluto@kernel.org\u003e\nCc: Dave Hansen \u003cdave.hansen@linux.intel.com\u003e\nCc: \"H. Peter Anvin\" \u003chpa@zytor.com\u003e\nCc: Ingo Molnar \u003cmingo@redhat.com\u003e\nCc: Mike Rapoport (Microsoft) \u003crppt@kernel.org\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "f505e6c91e7a22d10316665a86d79f84d9f0ba76", "tree": "018447b6a0a1d132d5ac764fc54ae4d11d0131e7", "parents": [ "4bbb6df62c54e6a2c1fcce4908df768f0cfa1e91" ], "author": { "name": "Marco Nelissen", "email": "marco.nelissen@gmail.com", "time": "Thu Jan 02 11:04:11 2025 -0800" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Sun Jan 12 19:03:35 2025 -0800" }, "message": "filemap: avoid truncating 64-bit offset to 32 bits\n\nOn 32-bit kernels, folio_seek_hole_data() was inadvertently truncating a\n64-bit value to 32 bits, leading to a possible infinite loop when writing\nto an xfs filesystem.\n\nLink: https://lkml.kernel.org/r/20250102190540.1356838-1-marco.nelissen@gmail.com\nFixes: 54fa39ac2e00 (\"iomap: use mapping_seek_hole_data\")\nSigned-off-by: Marco Nelissen \u003cmarco.nelissen@gmail.com\u003e\nCc: Matthew Wilcox (Oracle) \u003cwilly@infradead.org\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "4bbb6df62c54e6a2c1fcce4908df768f0cfa1e91", "tree": "ef076ed68a3875de19bdabc50384555ad29f9069", "parents": [ "264a88cafdbd0f4579af903145ac605d030f3f66" ], "author": { "name": "Suren Baghdasaryan", "email": "surenb@google.com", "time": "Fri Dec 27 14:22:20 2024 -0800" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Sun Jan 12 19:03:35 2025 -0800" }, "message": "tools: fix atomic_set() definition to set the value correctly\n\nCurrently vma test is failing because of the new vma_assert_attached()\nassertion. The check is failing because previous refcount_set() inside\nvma_mark_attached() is a NoOp. Fix the definition of atomic_set() to\ncorrectly set the value of the atomic.\n\nLink: https://lkml.kernel.org/r/20241227222220.1726384-1-surenb@google.com\nFixes: 9325b8b5a1cb (\"tools: add skeleton code for userland testing of VMA logic\")\nSigned-off-by: Suren Baghdasaryan \u003csurenb@google.com\u003e\nReviewed-by: Lorenzo Stoakes \u003clorenzo.stoakes@oracle.com\u003e\nCc: Jann Horn \u003cjannh@google.com\u003e\nCc: Liam R. Howlett \u003cLiam.Howlett@Oracle.com\u003e\nCc: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "264a88cafdbd0f4579af903145ac605d030f3f66", "tree": "a784a441d0275b258221c38569673044d859ac2d", "parents": [ "2bff77c665edd854a09c479effe75b3b0e3fedef" ], "author": { "name": "Honggyu Kim", "email": "honggyu.kim@sk.com", "time": "Fri Dec 27 18:57:37 2024 +0900" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Sun Jan 12 19:03:35 2025 -0800" }, "message": "mm/mempolicy: count MPOL_WEIGHTED_INTERLEAVE to \"interleave_hit\"\n\nCommit fa3bea4e1f82 introduced MPOL_WEIGHTED_INTERLEAVE but it missed\nadding its counter to \"interleave_hit\" of numastat, which is located at\n/sys/devices/system/node/nodeN/ directory.\n\nIt\u0027d be better to add weighted interleving counter info to the existing\n\"interleave_hit\" instead of introducing a new counter\n\"weighted_interleave_hit\".\n\nLink: https://lkml.kernel.org/r/20241227095737.645-1-honggyu.kim@sk.com\nFixes: fa3bea4e1f82 (\"mm/mempolicy: introduce MPOL_WEIGHTED_INTERLEAVE for weighted interleaving\")\nSigned-off-by: Honggyu Kim \u003chonggyu.kim@sk.com\u003e\nReviewed-by: Gregory Price \u003cgourry@gourry.net\u003e\nReviewed-by: Hyeonggon Yoo \u003chyeonggon.yoo@sk.com\u003e\nTested-by: Yunjeong Mun \u003cyunjeong.mun@sk.com\u003e\nCc: Andi Kleen \u003cak@linux.intel.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "2bff77c665edd854a09c479effe75b3b0e3fedef", "tree": "ccc7fa220b6abe2f639e7a17e558b0505e946d17", "parents": [ "76d5d4c53e68719c018691b19a961e78524a155c" ], "author": { "name": "Luca Ceresoli", "email": "luca.ceresoli@bootlin.com", "time": "Mon Dec 30 22:55:10 2024 +0100" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Sun Jan 12 19:03:34 2025 -0800" }, "message": "scripts/decode_stacktrace.sh: fix decoding of lines with an additional info\n\nSince commit bdf8eafbf7f5 (\"arm64: stacktrace: report source of unwind\ndata\") a stack trace line can contain an additional info field that was not\npresent before, in the form of one or more letters in parentheses. E.g.:\n\n [ 504.517915] led_sysfs_enable+0x54/0x80 (P)\n ^^^\n\nWhen this is present, decode_stacktrace decodes the line incorrectly:\n\n [ 504.517915] led_sysfs_enable+0x54/0x80 P\n\nExtend parsing to decode it correctly:\n\n [ 504.517915] led_sysfs_enable (drivers/leds/led-core.c:455 (discriminator 7)) (P)\n\nThe regex to match such lines assumes the info can be extended in the\nfuture to other uppercase characters, and will need to be extended in case\nother characters will be used. Using a much more generic regex might incur\nin false positives, so this looked like a good tradeoff.\n\nLink: https://lkml.kernel.org/r/20241230-decode_stacktrace-fix-info-v1-1-984910659173@bootlin.com\nFixes: bdf8eafbf7f5 (\"arm64: stacktrace: report source of unwind data\")\nSigned-off-by: Luca Ceresoli \u003cluca.ceresoli@bootlin.com\u003e\nCc: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nCc: Mark Brown \u003cbroonie@kernel.org\u003e\nCc: Mark Rutland \u003cmark.rutland@arm.com\u003e\nCc: Miroslav Benes \u003cmbenes@suse.cz\u003e\nCc: Puranjay Mohan \u003cpuranjay@kernel.org\u003e\nCc: Thomas Petazzoni \u003cthomas.petazzoni@bootlin.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "76d5d4c53e68719c018691b19a961e78524a155c", "tree": "2570532e15005cb1eae4718aeac221a30cfd7147", "parents": [ "cd6313beaeaea0b2e6d428afef7a86a986b50abe" ], "author": { "name": "Guo Weikang", "email": "guoweikang.kernel@gmail.com", "time": "Fri Dec 27 17:23:10 2024 +0800" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Sun Jan 12 19:03:34 2025 -0800" }, "message": "mm/kmemleak: fix percpu memory leak detection failure\n\nkmemleak_alloc_percpu gives an incorrect min_count parameter, causing\npercpu memory to be considered a gray object.\n\nLink: https://lkml.kernel.org/r/20241227092311.3572500-1-guoweikang.kernel@gmail.com\nFixes: 8c8685928910 (\"mm/kmemleak: use IS_ERR_PCPU() for pointer in the percpu address space\")\nSigned-off-by: Guo Weikang \u003cguoweikang.kernel@gmail.com\u003e\nAcked-by: Uros Bizjak \u003cubizjak@gmail.com\u003e\nAcked-by: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nCc: Guo Weikang \u003cguoweikang.kernel@gmail.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "5bc55a333a2f7316b58edc7573e8e893f7acb532", "tree": "86f515671914376cfdbee41f34577edf2c5c95e3", "parents": [ "0cbe10470b4473ab5e290f1d39033fdb6d6c69c9" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jan 12 14:37:56 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jan 12 14:37:56 2025 -0800" }, "message": "Linux 6.13-rc7\n" }, { "commit": "0cbe10470b4473ab5e290f1d39033fdb6d6c69c9", "tree": "a1089b355de7491fe1e819e5ff614c4c0a9124ac", "parents": [ "083f9fac673dca75b355b6bc6c1b4bf4792ad949", "c7a5378a0f707686de3ddb489f1653c523bb7dcc" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jan 12 14:34:00 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jan 12 14:34:00 2025 -0800" }, "message": "Merge tag \u0027char-misc-6.13-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc\n\nPull char/misc/IIO driver fixes from Greg KH:\n \"Here are a bunch of small IIO and interconnect and other driver fixes\n to resolve reported issues. Included in here are:\n\n - loads of iio driver fixes as a result of an audit of places where\n uninitialized data would leak to userspace.\n\n - other smaller, and normal, iio driver fixes.\n\n - mhi driver fix\n\n - interconnect driver fixes\n\n - pci1xxxx driver fix\n\n All of these have been in linux-next for a while with no reported\n issues\"\n\n* tag \u0027char-misc-6.13-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc: (32 commits)\n misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config\n misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling\n interconnect: icc-clk: check return values of devm_kasprintf()\n interconnect: qcom: icc-rpm: Set the count member before accessing the flex array\n iio: adc: ti-ads1119: fix sample size in scan struct for triggered buffer\n iio: temperature: tmp006: fix information leak in triggered buffer\n iio: inkern: call iio_device_put() only on mapped devices\n iio: adc: ad9467: Fix the \"don\u0027t allow reading vref if not available\" case\n iio: adc: at91: call input_free_device() on allocated iio_dev\n iio: adc: ad7173: fix using shared static info struct\n iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()\n iio: adc: ti-ads1119: fix information leak in triggered buffer\n iio: pressure: zpa2326: fix information leak in triggered buffer\n iio: adc: rockchip_saradc: fix information leak in triggered buffer\n iio: imu: kmx61: fix information leak in triggered buffer\n iio: light: vcnl4035: fix information leak in triggered buffer\n iio: light: bh1745: fix information leak in triggered buffer\n iio: adc: ti-ads8688: fix information leak in triggered buffer\n iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer\n iio: test: Fix GTS test config\n ...\n" }, { "commit": "083f9fac673dca75b355b6bc6c1b4bf4792ad949", "tree": "faad1da7d4769b8d65e686afc11c9587e0d22bd1", "parents": [ "91fff6fa94cbe13d28caa978ce3f600749304e11", "67510d7e2e5f5bdc020bf9d759aa575cce48c8e1" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jan 12 14:26:31 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jan 12 14:26:31 2025 -0800" }, "message": "Merge tag \u0027driver-core-6.13-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core\n\nPull driver core and debugfs fixes from Greg KH:\n \"Here are some small driver core and debugfs fixes that resolve some\n reported problems:\n\n - debugfs runtime error reporting fixes\n\n - topology cpumask race-condition fix\n\n - MAINTAINERS file email update\n\n All of these have been in linux-next this week with no reported\n issues\"\n\n* tag \u0027driver-core-6.13-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core:\n fs: debugfs: fix open proxy for unsafe files\n MAINTAINERS: align Danilo\u0027s maintainer entries\n topology: Keep the cpumask unchanged when printing cpumap\n debugfs: fix missing mutex_destroy() in short_fops case\n fs: debugfs: differentiate short fops with proxy ops\n" }, { "commit": "91fff6fa94cbe13d28caa978ce3f600749304e11", "tree": "07ae1fa9285bb598d00e06dfb86e29635acb8488", "parents": [ "4bd9e3b4c514781ac96276fbb96985066d4dff2f", "6f79db028e827b023623a6ff825952e0d5fb619f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jan 12 14:22:13 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jan 12 14:22:13 2025 -0800" }, "message": "Merge tag \u0027staging-6.13-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging\n\nPull staging driver fixes from Greg KH:\n \"Here are some small staging driver fixes that resolve some reported\n issues and have been in my tree for too long due to the holiday break.\n They resolve the following issues:\n\n - lots of gpib build-time fixes as reported by testers and 0-day\n\n - gpib logical fixes\n\n - mailmap fix\n\n All of these have been in linux-next for a while, with no reported\n issues other than the duplicated change\"\n\n* tag \u0027staging-6.13-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging:\n staging: gpib: mite: remove unused global functions\n staging: gpib: refer to correct config symbol in tnt4882 Makefile\n mailmap: update Bingwu Zhang\u0027s email address\n staging: gpib: fix address space mixup\n staging: gpib: use ioport_map\n staging: gpib: fix pcmcia dependencies\n staging: gpib: add module author and description fields\n staging: gpib: fix Makefiles\n staging: gpib: make global \u0027usec_diff\u0027 functions static\n staging: gpib: Modify mismatched function name\n staging: gpib: Add lower bound check for secondary address\n staging: gpib: Fix erroneous removal of blank before newline\n" }, { "commit": "4bd9e3b4c514781ac96276fbb96985066d4dff2f", "tree": "943f7b3467839ed5b9d3f1aa1f60b577101718a3", "parents": [ "196856db7c792b0f4a8213e29dbddf9acbb1e910", "0cfc36ea51684b5932cd3951ded523777d807af2" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jan 12 13:27:15 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jan 12 13:27:15 2025 -0800" }, "message": "Merge tag \u0027tty-6.13-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty\n\nPull serial driver fixes from Greg KH:\n \"Here are three small serial driver fixes tree. They resolve some\n reported issues:\n\n - stm32 break control fix\n\n - 8250 runtime pm usage counter fix\n\n - imx driver locking fix\n\n All have been in my tree and linux-next for three weeks now, with no\n reported issues\"\n\n* tag \u0027tty-6.13-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty:\n serial: stm32: use port lock wrappers for break control\n serial: imx: Use uart_port_lock_irq() instead of uart_port_lock()\n tty: serial: 8250: Fix another runtime PM usage counter underflow\n" }, { "commit": "196856db7c792b0f4a8213e29dbddf9acbb1e910", "tree": "a3ed6b162b972d8ad141797d3c7471f91bd7da2e", "parents": [ "be548645527a131a097fdc884b7fca40c8b86231", "f3149ed697dd0c4fc1d696fef78129fa2fe4ca12" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jan 12 13:09:00 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jan 12 13:09:00 2025 -0800" }, "message": "Merge tag \u0027usb-6.13-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb\n\nPull USB fixes from Greg KH:\n \"Here are some small USB driver fixes and new device ids for 6.13-rc7.\n Included in here are:\n\n - usb serial new device ids\n\n - typec bugfixes for reported issues\n\n - dwc3 driver fixes\n\n - chipidea driver fixes\n\n - gadget driver fixes\n\n - other minor fixes for reported problems.\n\n All of these have been in linux-next for a while, with no reported\n issues\"\n\n* tag \u0027usb-6.13-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb:\n USB: serial: option: add Neoway N723-EA support\n USB: serial: option: add MeiG Smart SRM815\n USB: serial: cp210x: add Phoenix Contact UPS Device\n usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control()\n usb-storage: Add max sectors quirk for Nokia 208\n usb: gadget: midi2: Reverse-select at the right place\n usb: gadget: f_fs: Remove WARN_ON in functionfs_bind\n USB: core: Disable LPM only for non-suspended ports\n usb: fix reference leak in usb_new_device()\n usb: typec: tcpci: fix NULL pointer issue on shared irq case\n usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null\n usb: chipidea: ci_hdrc_imx: decrement device\u0027s refcount in .remove() and in the error path of .probe()\n usb: typec: ucsi: Set orientation as none when connector is unplugged\n usb: gadget: configfs: Ignore trailing LF for user strings to cdev\n USB: usblp: return error when setting unsupported protocol\n usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints\n usb: typec: tcpm/tcpci_maxim: fix error code in max_contaminant_read_resistance_kohm()\n usb: host: xhci-plat: set skip_phy_initialization if software node has XHCI_SKIP_PHY_INIT property\n usb: dwc3-am62: Disable autosuspend during remove\n usb: dwc3: gadget: fix writing NYET threshold\n" }, { "commit": "be548645527a131a097fdc884b7fca40c8b86231", "tree": "7ce4d60c8a57b53a3a128375cfd086a67ff2c5ee", "parents": [ "a603abe345d6301f04dc2ceb5fbdaa19e4c8f7da", "a5546c2f0dc4f84727a4bb8a91633917929735f5" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jan 12 12:04:53 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jan 12 12:04:53 2025 -0800" }, "message": "Merge tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/virt/kvm/kvm\n\nPull kvm fixes from Paolo Bonzini:\n \"The largest part here is for KVM/PPC, where a NULL pointer dereference\n was introduced in the 6.13 merge window and is now fixed.\n\n There\u0027s some \"holiday-induced lateness\", as the s390 submaintainer put\n it, but otherwise things looks fine.\n\n s390:\n\n - fix a latent bug when the kernel is compiled in debug mode\n\n - two small UCONTROL fixes and their selftests\n\n arm64:\n\n - always check page state in hyp_ack_unshare()\n\n - align set_id_regs selftest with the fact that ASIDBITS field is RO\n\n - various vPMU fixes for bugs that only affect nested virt\n\n PPC e500:\n\n - Fix a mostly impossible (but just wrong) case where IRQs were never\n re-enabled\n\n - Observe host permissions instead of mapping readonly host pages as\n guest-writable. This fixes a NULL-pointer dereference in 6.13\n\n - Replace brittle VMA-based attempts at building huge shadow TLB\n entries with PTE lookups\"\n\n* tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/virt/kvm/kvm:\n KVM: e500: perform hugepage check after looking up the PFN\n KVM: e500: map readonly host pages for read\n KVM: e500: track host-writability of pages\n KVM: e500: use shadow TLB entry as witness for writability\n KVM: e500: always restore irqs\n KVM: s390: selftests: Add has device attr check to uc_attr_mem_limit selftest\n KVM: s390: selftests: Add ucontrol gis routing test\n KVM: s390: Reject KVM_SET_GSI_ROUTING on ucontrol VMs\n KVM: s390: selftests: Add ucontrol flic attr selftests\n KVM: s390: Reject setting flic pfault attributes on ucontrol VMs\n KVM: s390: vsie: fix virtual/physical address in unpin_scb()\n KVM: arm64: Only apply PMCR_EL0.P to the guest range of counters\n KVM: arm64: nv: Reload PMU events upon MDCR_EL2.HPME change\n KVM: arm64: Use KVM_REQ_RELOAD_PMU to handle PMCR_EL0.E change\n KVM: arm64: Add unified helper for reprogramming counters by mask\n KVM: arm64: Always check the state from hyp_ack_unshare()\n KVM: arm64: Fix set_id_regs selftest for ASIDBITS becoming unwritable\n" }, { "commit": "a603abe345d6301f04dc2ceb5fbdaa19e4c8f7da", "tree": "223163c1186ffe48025526a327f13093103acc39", "parents": [ "f31acaef553fb3cff8f2f6bdf4e5fc76b83e082d", "b583ef82b671c9a752fbe3e95bd4c1c51eab764d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jan 12 11:57:45 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jan 12 11:57:45 2025 -0800" }, "message": "Merge tag \u0027perf_urgent_for_v6.13_rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull perf fix from Borislav Petkov:\n\n - Fix a #GP in the perf user callchain code caused by a race between\n uprobe freeing the task and the bpf profiler unwinding the task\u0027s\n user stack\n\n* tag \u0027perf_urgent_for_v6.13_rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n uprobes: Fix race in uprobe_free_utask\n" }, { "commit": "f31acaef553fb3cff8f2f6bdf4e5fc76b83e082d", "tree": "591233390113dd8b472ba25ca8cd3686f3cb203b", "parents": [ "a87d1203bb232a2bec674879b62f87322b20c2c8", "a9d9c33132d49329ada647e4514d210d15e31d81" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jan 12 11:55:48 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jan 12 11:55:48 2025 -0800" }, "message": "Merge tag \u0027x86_urgent_for_v6.13_rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull x86 fixes from Borislav Petkov:\n\n - Check whether shadow stack is active before using the ptrace regset\n getter\n\n - Remove a wrong BUG_ON in the early static call code which breaks Xen\n PVH when booting as dom0\n\n* tag \u0027x86_urgent_for_v6.13_rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n x86/fpu: Ensure shadow stack is active before \"getting\" registers\n x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0\n" }, { "commit": "a5546c2f0dc4f84727a4bb8a91633917929735f5", "tree": "e611827e5b41f7cbb03bc07bbf7cb698c0e65feb", "parents": [ "5c99a684c9ad4dd5e26e83e08bddacd0bf6e2b44", "e376d958871c0eeb7e97cf95655015fc343d209c" ], "author": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Sun Jan 12 12:51:05 2025 +0100" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Sun Jan 12 12:51:05 2025 +0100" }, "message": "Merge tag \u0027kvm-s390-master-6.13-1\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/kvms390/linux into HEAD\n\nKVM: s390: three small bugfixes\n\nFix a latent bug when the kernel is compiled in debug mode.\nTwo small UCONTROL fixes and their selftests.\n" }, { "commit": "5c99a684c9ad4dd5e26e83e08bddacd0bf6e2b44", "tree": "4ea3573be35b8d7a2840fcbd7363b92bad708efa", "parents": [ "71b7bf1702c9f8b04c0eae78df6845db19e2bc28", "e96d8b80afd3f63ffad58c0fdd5e0c380c4c404e" ], "author": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Sun Jan 12 12:50:39 2025 +0100" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Sun Jan 12 12:50:39 2025 +0100" }, "message": "Merge tag \u0027kvmarm-fixes-6.13-3\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/kvmarm/kvmarm into HEAD\n\nKVM/arm64 changes for 6.13, part #3\n\n - Always check page state in hyp_ack_unshare()\n\n - Align set_id_regs selftest with the fact that ASIDBITS field is RO\n\n - Various vPMU fixes for bugs that only affect nested virt\n" }, { "commit": "71b7bf1702c9f8b04c0eae78df6845db19e2bc28", "tree": "dfe7198be8b44ce7c9cdd909ae60a70c284bb678", "parents": [ "f07044dd0df0c9d0ad177c3098b62ccddb735a2d", "55f4db79c4d94d4bb757f7a31a7f14de22fe517d" ], "author": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Sun Jan 12 12:48:14 2025 +0100" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Sun Jan 12 12:48:14 2025 +0100" }, "message": "Merge branch \u0027kvm-e500-check-writable-pfn\u0027 into HEAD\n\nThe new __kvm_faultin_pfn() function is upset by the fact that e500\nKVM ignores host page permissions - __kvm_faultin requires a \"writable\"\noutgoing argument, but e500 KVM is passing NULL.\n\nWhile a simple fix would be possible that simply allows writable to\nbe NULL, it is quite ugly to have e500 KVM ignore completely the host\npermissions and map readonly host pages as guest-writable. Merge a more\ncomplete fix and remove the VMA-based attempts at building huge shadow TLB\nentries. Using a PTE lookup, similar to what is done for x86, is better\nand works with remap_pfn_range() because it does not assume that VM_PFNMAP\nareas are contiguous. Note that the same incorrect logic is there in\nARM\u0027s get_vma_page_shift() and RISC-V\u0027s kvm_riscv_gstage_ioremap().\n\nFortunately, for e500 most of the code is already there; it just has to\nbe changed to compute the range from find_linux_pte()\u0027s output rather\nthan find_vma(). The new code works for both VM_PFNMAP and hugetlb\nmappings, so the latter is removed.\n\nPatches 2-5 were tested by the reporter, Christian Zigotzky. Since\nthe difference with v1 is minimal, I am going to send it to Linus\ntoday.\n" }, { "commit": "55f4db79c4d94d4bb757f7a31a7f14de22fe517d", "tree": "dfe7198be8b44ce7c9cdd909ae60a70c284bb678", "parents": [ "03b755b2aa48d242440cbfbd365e153b4b20fe54" ], "author": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Wed Jan 08 16:49:50 2025 +0100" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Sun Jan 12 10:53:00 2025 +0100" }, "message": "KVM: e500: perform hugepage check after looking up the PFN\n\ne500 KVM tries to bypass __kvm_faultin_pfn() in order to map VM_PFNMAP\nVMAs as huge pages. This is a Bad Idea because VM_PFNMAP VMAs could\nbecome noncontiguous as a result of callsto remap_pfn_range().\n\nInstead, use the already existing host PTE lookup to retrieve a\nvalid host-side mapping level after __kvm_faultin_pfn() has\nreturned. Then find the largest size that will satisfy the\nguest\u0027s request while staying within a single host PTE.\n\nSigned-off-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\n" }, { "commit": "03b755b2aa48d242440cbfbd365e153b4b20fe54", "tree": "ea54ce1223a3251fb74021846d8be99eb6b42108", "parents": [ "f2104bf22f0475a08a0feeee40d8e45ce38ed5a1" ], "author": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Wed Jan 08 16:14:55 2025 +0100" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Sun Jan 12 10:35:45 2025 +0100" }, "message": "KVM: e500: map readonly host pages for read\n\nThe new __kvm_faultin_pfn() function is upset by the fact that e500 KVM\nignores host page permissions - __kvm_faultin requires a \"writable\"\noutgoing argument, but e500 KVM is nonchalantly passing NULL.\n\nIf the host page permissions do not include writability, the shadow\nTLB entry is forcibly mapped read-only.\n\nSigned-off-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\n" }, { "commit": "f2104bf22f0475a08a0feeee40d8e45ce38ed5a1", "tree": "d492f6b80d35c1ba060e863e28181b1021009706", "parents": [ "e97fbb43fb1b2e909dfd726204af3cdcb971517e" ], "author": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Wed Jan 08 16:21:38 2025 +0100" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Sun Jan 12 10:35:41 2025 +0100" }, "message": "KVM: e500: track host-writability of pages\n\nAdd the possibility of marking a page so that the UW and SW bits are\nforce-cleared. This is stored in the private info so that it persists\nacross multiple calls to kvmppc_e500_setup_stlbe.\n\nSigned-off-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\n" }, { "commit": "e97fbb43fb1b2e909dfd726204af3cdcb971517e", "tree": "5f31d0f93d77206af60245d98419a2c9436a22df", "parents": [ "87ecfdbc699cc95fac73291b52650283ddcf929d" ], "author": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Wed Jan 08 16:19:28 2025 +0100" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Sun Jan 12 10:35:36 2025 +0100" }, "message": "KVM: e500: use shadow TLB entry as witness for writability\n\nkvmppc_e500_ref_setup is returning whether the guest TLB entry is writable,\nwhich is than passed to kvm_release_faultin_page. This makes little sense\nfor two reasons: first, because the function sets up the private data for\nthe page and the return value feels like it has been bolted on the side;\nsecond, because what really matters is whether the _shadow_ TLB entry is\nwritable. If it is not writable, the page can be released as non-dirty.\nShift from using tlbe_is_writable(gtlbe) to doing the same check on\nthe shadow TLB entry.\n\nSigned-off-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\n" }, { "commit": "87ecfdbc699cc95fac73291b52650283ddcf929d", "tree": "1ac2ff55839e590e0f0a5fe5013ed5abcfa34123", "parents": [ "f07044dd0df0c9d0ad177c3098b62ccddb735a2d" ], "author": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Sun Jan 12 10:34:44 2025 +0100" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Sun Jan 12 10:34:44 2025 +0100" }, "message": "KVM: e500: always restore irqs\n\nIf find_linux_pte fails, IRQs will not be restored. This is unlikely\nto happen in practice since it would have been reported as hanging\nhosts, but it should of course be fixed anyway.\n\nCc: stable@vger.kernel.org\nReported-by: Sean Christopherson \u003cseanjc@google.com\u003e\nSigned-off-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\n" }, { "commit": "a87d1203bb232a2bec674879b62f87322b20c2c8", "tree": "7a2430dd811b722d74b4c4c50433d1034764445c", "parents": [ "b62cef9a5c673f1b8083159f5dc03c1c5daced2f", "30c8fd31c571db486a5331a92d03eb60a0fb277c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jan 11 20:34:12 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jan 11 20:34:12 2025 -0800" }, "message": "Merge tag \u0027probes-fixes-v6.13-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace\n\nPull probes fix from Masami Hiramatsu:\n \"Fix to free trace_kprobe objects at a failure path in\n __trace_kprobe_create() function. This fixes a memory leak\"\n\n* tag \u0027probes-fixes-v6.13-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace:\n tracing/kprobes: Fix to free objects when failed to copy a symbol\n" }, { "commit": "b62cef9a5c673f1b8083159f5dc03c1c5daced2f", "tree": "27ab0f4eea05cf415bc174186613aaeee3d15385", "parents": [ "05c2d1f2728240f7cd750ea389d4ad87fba0ad03", "82163d63ae7a4c36142cd252388737205bb7e4b9" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jan 11 11:42:48 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jan 11 11:42:48 2025 -0800" }, "message": "Merge tag \u0027hwmon-for-v6.13-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging\n\nPull hwmon fix from Guenter Roeck:\n \"One patch to fix error handling in drivetemp driver\"\n\n* tag \u0027hwmon-for-v6.13-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging:\n hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur\n" }, { "commit": "05c2d1f2728240f7cd750ea389d4ad87fba0ad03", "tree": "c2164503de812bed7b0e04442515c4d56bbc5695", "parents": [ "52a5a22d8afe3bd195f7b470c7535c63717f5ff7", "fcede1f0a043ccefe9bc6ad57f12718e42f63f1d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jan 11 11:17:08 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jan 11 11:17:08 2025 -0800" }, "message": "Merge tag \u0027block-6.13-20250111\u0027 of git://git.kernel.dk/linux\n\nPull block fix from Jens Axboe:\n \"A single fix for a use-after-free in the BFQ IO scheduler\"\n\n* tag \u0027block-6.13-20250111\u0027 of git://git.kernel.dk/linux:\n block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()\n" }, { "commit": "52a5a22d8afe3bd195f7b470c7535c63717f5ff7", "tree": "1e4c753681c12d6335e88d67deb4e24ce23a5828", "parents": [ "57162361c3c5405e9be836d06fc9db7efd499217", "bd2703b42decebdcddf76e277ba76b4c4a142d73" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jan 11 10:59:43 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jan 11 10:59:43 2025 -0800" }, "message": "Merge tag \u0027io_uring-6.13-20250111\u0027 of git://git.kernel.dk/linux\n\nPull io_uring fixes from Jens Axboe:\n\n - Fix for multishot timeout updates only using the updated value for\n the first invocation, not subsequent ones\n\n - Silence a false positive lockdep warning\n\n - Fix the eventfd signaling and putting RCU logic\n\n - Fix fault injected SQPOLL setup not clearing the task pointer in the\n error path\n\n - Fix local task_work looking at the SQPOLL thread rather than just\n signaling the safe variant. Again one of those theoretical issues,\n which should be closed up none the less.\n\n* tag \u0027io_uring-6.13-20250111\u0027 of git://git.kernel.dk/linux:\n io_uring: don\u0027t touch sqd-\u003ethread off tw add\n io_uring/sqpoll: zero sqd-\u003ethread on tctx errors\n io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period\n io_uring: silence false positive warnings\n io_uring/timeout: fix multishot updates\n" }, { "commit": "57162361c3c5405e9be836d06fc9db7efd499217", "tree": "0dcef064107cb030a705660f0f190f05f97553d7", "parents": [ "da60d1547deea5d597a0a70d43a547e6148b719c", "20b1aa912316ffb7fbb5f407f17c330f2a22ddff" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jan 11 10:49:50 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jan 11 10:49:50 2025 -0800" }, "message": "Merge tag \u00276.13-rc6-SMB3-client-fix\u0027 of git://git.samba.org/sfrench/cifs-2.6\n\nPull smb client fix from Steve French:\n\n - fix unneeded session setup retry due to stale password e.g. for DFS\n automounts\n\n* tag \u00276.13-rc6-SMB3-client-fix\u0027 of git://git.samba.org/sfrench/cifs-2.6:\n smb: client: sync the root session and superblock context passwords before automounting\n" }, { "commit": "da60d1547deea5d597a0a70d43a547e6148b719c", "tree": "13f42213a7576f938dcd8262a04be2732d3087a1", "parents": [ "77a903cd8e5a91d120ee014c8f8eae74d6c5d0f6", "5391c5d8e60610bf914f767a6a749004e2d223f0" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jan 11 10:42:05 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jan 11 10:42:05 2025 -0800" }, "message": "Merge tag \u0027soc-fixes-6.13-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc\n\nPull SoC fixes from Arnd Bergmann:\n \"Over the Christmas break a couple of devicetree fixes came in for\n Rockchips, Qualcomm and NXP/i.MX. These add some missing board\n specific properties, address build time warnings,\n\n The USB/TOG supoprt on X1 Elite regressed, so two earlier DT changes\n get reverted for now.\n\n Aside from the devicetree fixes, there is One build fix for the stm32\n firewall driver, and a defconfig change to enable SPDIF support for\n i.MX\"\n\n* tag \u0027soc-fixes-6.13-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc:\n firewall: remove misplaced semicolon from stm32_firewall_get_firewall\n arm64: dts: rockchip: add hevc power domain clock to rk3328\n arm64: dts: rockchip: Fix the SD card detection on NanoPi R6C/R6S\n arm64: dts: qcom: sa8775p: fix the secure device bootup issue\n Revert \"arm64: dts: qcom: x1e80100: enable OTG on USB-C controllers\"\n Revert \"arm64: dts: qcom: x1e80100-crd: enable otg on usb ports\"\n arm64: dts: qcom: x1e80100: Fix up BAR space size for PCIe6a\n Revert \"arm64: dts: qcom: x1e78100-t14s: enable otg on usb-c ports\"\n ARM: dts: imxrt1050: Fix clocks for mmc\n ARM: imx_v6_v7_defconfig: enable SND_SOC_SPDIF\n arm64: dts: imx95: correct the address length of netcmix_blk_ctrl\n arm64: dts: imx8-ss-audio: add fallback compatible string fsl,imx6ull-esai for esai\n arm64: dts: rockchip: rename rfkill label for Radxa ROCK 5B\n arm64: dts: rockchip: add reset-names for combphy on rk3568\n arm64: dts: qcom: sa8775p: Fix the size of \u0027addr_space\u0027 regions\n" }, { "commit": "77a903cd8e5a91d120ee014c8f8eae74d6c5d0f6", "tree": "d7c8091daefe9ca741a7081f5fc216f0678a7663", "parents": [ "2e3f3090bd8bf61633b36ae3b13d4a6e777f182a" ], "author": { "name": "Michael Ellerman", "email": "mpe@ellerman.id.au", "time": "Sat Jan 11 10:57:38 2025 +1100" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 17:19:33 2025 -0800" }, "message": "MAINTAINERS: powerpc: Update my status\n\nMaddy is taking over the day-to-day maintenance of powerpc. I will still\nbe around to help, and as a backup.\n\nRe-order the main POWERPC list to put Maddy first to reflect that.\n\nKVM/powerpc patches will be handled by Maddy via the powerpc tree with\nreview from Nick, so replace myself with Maddy there.\n\nRemove myself from BPF, leaving Hari \u0026 Christophe as maintainers.\n\nSigned-off-by: Michael Ellerman \u003cmpe@ellerman.id.au\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "20b1aa912316ffb7fbb5f407f17c330f2a22ddff", "tree": "c98b59512e830cb71f8f75bd7913748260a5bcf8", "parents": [ "9d89551994a430b50c4fffcb1e617a057fa76e20" ], "author": { "name": "Meetakshi Setiya", "email": "msetiya@microsoft.com", "time": "Wed Jan 08 05:10:34 2025 -0500" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Fri Jan 10 17:55:35 2025 -0600" }, "message": "smb: client: sync the root session and superblock context passwords before automounting\n\nIn some cases, when password2 becomes the working password, the\nclient swaps the two password fields in the root session struct, but\nnot in the smb3_fs_context struct in cifs_sb. DFS automounts inherit\nfs context from their parent mounts. Therefore, they might end up\ngetting the passwords in the stale order.\nThe automount should succeed, because the mount function will end up\nretrying with the actual password anyway. But to reduce these\nunnecessary session setup retries for automounts, we can sync the\nparent context\u0027s passwords with the root session\u0027s passwords before\nduplicating it to the child\u0027s fs context.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Meetakshi Setiya \u003cmsetiya@microsoft.com\u003e\nReviewed-by: Shyam Prasad N \u003csprasad@microsoft.com\u003e\nAcked-by: Paulo Alcantara (Red Hat) \u003cpc@manguebit.com\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "2e3f3090bd8bf61633b36ae3b13d4a6e777f182a", "tree": "cdb8b05b4983bd6680b0783a7e32b1adece23cdd", "parents": [ "58624e4bc876198a5dc41be1d7dd39e7c944b9c6", "a2a3374c47c428c0edb0bbc693638d4783f81e31" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 15:11:58 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 15:11:58 2025 -0800" }, "message": "Merge tag \u0027sched_ext-for-6.13-rc6-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/sched_ext\n\nPull sched_ext fixes from Tejun Heo:\n\n - Fix corner case bug where ops.dispatch() couldn\u0027t extend the\n execution of the current task if SCX_OPS_ENQ_LAST is set.\n\n - Fix ops.cpu_release() not being called when a SCX task is preempted\n by a higher priority sched class task.\n\n - Fix buitin idle mask being incorrectly left as busy after an idle CPU\n is picked and kicked.\n\n - scx_ops_bypass() was unnecessarily using rq_lock() which comes with\n rq pinning related sanity checks which could trigger spuriously.\n Switch to raw_spin_rq_lock().\n\n* tag \u0027sched_ext-for-6.13-rc6-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/sched_ext:\n sched_ext: idle: Refresh idle masks during idle-to-idle transitions\n sched_ext: switch class when preempted by higher priority scheduler\n sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass()\n sched_ext: keep running prev when prev-\u003escx.slice !\u003d 0\n" }, { "commit": "58624e4bc876198a5dc41be1d7dd39e7c944b9c6", "tree": "a6c7b7377869c24ff7741203b73ce209b7c43276", "parents": [ "257a8be4e9a6fc3e821c337275256416750afa5b", "3cb97a927fffe443e1e7e8eddbfebfdb062e86ed" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 15:03:02 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 15:03:02 2025 -0800" }, "message": "Merge tag \u0027cgroup-for-6.13-rc6-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup\n\nPull cgroup fixes from Tejun Heo:\n \"Cpuset fixes:\n\n - Fix isolated CPUs leaking into sched domains\n\n - Remove now unnecessary kernfs active break which can trigger a\n warning\n\n - Comment updates\"\n\n* tag \u0027cgroup-for-6.13-rc6-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup:\n cgroup/cpuset: remove kernfs active break\n cgroup/cpuset: Prevent leakage of isolated CPUs into sched domains\n cgroup/cpuset: Remove stale text\n" }, { "commit": "257a8be4e9a6fc3e821c337275256416750afa5b", "tree": "fdc4ad9d0866b12a1fc281dfab1b122e56a3f71e", "parents": [ "da13af839228cc3ec51d9caabea9c0b411dc464a", "da30ba227c41762ac98e993a1453460450b3e642" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 14:52:30 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 14:52:30 2025 -0800" }, "message": "Merge tag \u0027wq-for-6.13-rc6-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/wq\n\nPull workqueue fix from Tejun Heo:\n\n - Add a WARN_ON_ONCE() on queue_delayed_work_on() on an offline CPU as\n such work items won\u0027t get executed till the CPU comes back online\n\n* tag \u0027wq-for-6.13-rc6-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/wq:\n workqueue: warn if delayed_work is queued to an offlined cpu.\n" }, { "commit": "da13af839228cc3ec51d9caabea9c0b411dc464a", "tree": "3f8aeb466ae28e85809d5191f69f934d75c33930", "parents": [ "475c9f5854d3c68ac9aa0239c1db14ae0fcc1d8b", "9164e0912af206a72ddac4915f7784e470a04ace" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 14:46:49 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 14:46:49 2025 -0800" }, "message": "Merge tag \u0027thermal-6.13-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull thermal control fix from Rafael Wysocki:\n \"Fix an OF node leak in the code parsing thermal zone DT properties\n (Joe Hattori)\"\n\n* tag \u0027thermal-6.13-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n thermal: of: fix OF node leak in of_thermal_zone_find()\n" }, { "commit": "475c9f5854d3c68ac9aa0239c1db14ae0fcc1d8b", "tree": "d6e53473fccbdd27cb57d7b0ec543fea40f3c6af", "parents": [ "e0daef7de1acecdb64c1fa31abc06529abb98710", "cd4a7b2e6a2437a5502910c08128ea3bad55a80b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 14:41:46 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 14:41:46 2025 -0800" }, "message": "Merge tag \u0027acpi-6.13-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull ACPI fixes from Rafael Wysocki:\n \"Add two more ACPI IRQ override quirks and update the code using them\n to avoid unnecessary overhead (Hans de Goede)\"\n\n* tag \u0027acpi-6.13-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n ACPI: resource: acpi_dev_irq_override(): Check DMI match last\n ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[]\n ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[]\n" }, { "commit": "a2a3374c47c428c0edb0bbc693638d4783f81e31", "tree": "5ac30e2694f936f6f99885cad43ab84d1cd4d6b6", "parents": [ "68e449d849fd50bd5e61d8bd32b3458dbd3a3df6" ], "author": { "name": "Andrea Righi", "email": "arighi@nvidia.com", "time": "Fri Jan 10 23:16:31 2025 +0100" }, "committer": { "name": "Tejun Heo", "email": "tj@kernel.org", "time": "Fri Jan 10 12:40:42 2025 -1000" }, "message": "sched_ext: idle: Refresh idle masks during idle-to-idle transitions\n\nWith the consolidation of put_prev_task/set_next_task(), see\ncommit 436f3eed5c69 (\"sched: Combine the last put_prev_task() and the\nfirst set_next_task()\"), we are now skipping the transition between\nthese two functions when the previous and the next tasks are the same.\n\nAs a result, the scx idle state of a CPU is updated only when\ntransitioning to or from the idle thread. While this is generally\ncorrect, it can lead to uneven and inefficient core utilization in\ncertain scenarios [1].\n\nA typical scenario involves proactive wake-ups: scx_bpf_pick_idle_cpu()\nselects and marks an idle CPU as busy, followed by a wake-up via\nscx_bpf_kick_cpu(), without dispatching any tasks. In this case, the CPU\ncontinues running the idle thread, returns to idle, but remains marked\nas busy, preventing it from being selected again as an idle CPU (until a\ntask eventually runs on it and releases the CPU).\n\nFor example, running a workload that uses 20% of each CPU, combined with\nan scx scheduler using proactive wake-ups, results in the following core\nutilization:\n\n CPU 0: 25.7%\n CPU 1: 29.3%\n CPU 2: 26.5%\n CPU 3: 25.5%\n CPU 4: 0.0%\n CPU 5: 25.5%\n CPU 6: 0.0%\n CPU 7: 10.5%\n\nTo address this, refresh the idle state also in pick_task_idle(), during\nidle-to-idle transitions, but only trigger ops.update_idle() on actual\nstate changes to prevent unnecessary updates to the scx scheduler and\nmaintain balanced state transitions.\n\nWith this change in place, the core utilization in the previous example\nbecomes the following:\n\n CPU 0: 18.8%\n CPU 1: 19.4%\n CPU 2: 18.0%\n CPU 3: 18.7%\n CPU 4: 19.3%\n CPU 5: 18.9%\n CPU 6: 18.7%\n CPU 7: 19.3%\n\n[1] https://github.com/sched-ext/scx/pull/1139\n\nFixes: 7c65ae81ea86 (\"sched_ext: Don\u0027t call put_prev_task_scx() before picking the next task\")\nSigned-off-by: Andrea Righi \u003carighi@nvidia.com\u003e\nSigned-off-by: Tejun Heo \u003ctj@kernel.org\u003e\n" }, { "commit": "bd2703b42decebdcddf76e277ba76b4c4a142d73", "tree": "fb40c213c149d6bc89a6ca538b87ac07ce5491c6", "parents": [ "4b7cfa8b6c28a9fa22b86894166a1a34f6d630ba" ], "author": { "name": "Pavel Begunkov", "email": "asml.silence@gmail.com", "time": "Fri Jan 10 20:36:45 2025 +0000" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Fri Jan 10 14:00:25 2025 -0700" }, "message": "io_uring: don\u0027t touch sqd-\u003ethread off tw add\n\nWith IORING_SETUP_SQPOLL all requests are created by the SQPOLL task,\nwhich means that req-\u003etask should always match sqd-\u003ethread. Since\naccesses to sqd-\u003ethread should be separately protected, use req-\u003etask\nin io_req_normal_work_add() instead.\n\nNote, in the eyes of io_req_normal_work_add(), the SQPOLL task struct\nis always pinned and alive, and sqd-\u003ethread can either be the task or\nNULL. It\u0027s only problematic if the compiler decides to reload the value\nafter the null check, which is not so likely.\n\nCc: stable@vger.kernel.org\nCc: Bui Quang Minh \u003cminhquangbui99@gmail.com\u003e\nReported-by: lizetao \u003clizetao1@huawei.com\u003e\nFixes: 78f9b61bd8e54 (\"io_uring: wake SQPOLL task when task_work is added to an empty queue\")\nSigned-off-by: Pavel Begunkov \u003casml.silence@gmail.com\u003e\nLink: https://lore.kernel.org/r/1cbbe72cf32c45a8fee96026463024cd8564a7d7.1736541357.git.asml.silence@gmail.com\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "4b7cfa8b6c28a9fa22b86894166a1a34f6d630ba", "tree": "180f17f087ecc989f46e00518cf4c5861981ad6c", "parents": [ "c9a40292a44e78f71258b8522655bffaf5753bdb" ], "author": { "name": "Pavel Begunkov", "email": "asml.silence@gmail.com", "time": "Fri Jan 10 14:31:23 2025 +0000" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Fri Jan 10 14:00:19 2025 -0700" }, "message": "io_uring/sqpoll: zero sqd-\u003ethread on tctx errors\n\nSyzkeller reports:\n\nBUG: KASAN: slab-use-after-free in thread_group_cputime+0x409/0x700 kernel/sched/cputime.c:341\nRead of size 8 at addr ffff88803578c510 by task syz.2.3223/27552\n Call Trace:\n \u003cTASK\u003e\n ...\n kasan_report+0x143/0x180 mm/kasan/report.c:602\n thread_group_cputime+0x409/0x700 kernel/sched/cputime.c:341\n thread_group_cputime_adjusted+0xa6/0x340 kernel/sched/cputime.c:639\n getrusage+0x1000/0x1340 kernel/sys.c:1863\n io_uring_show_fdinfo+0xdfe/0x1770 io_uring/fdinfo.c:197\n seq_show+0x608/0x770 fs/proc/fd.c:68\n ...\n\nThat\u0027s due to sqd-\u003etask not being cleared properly in cases where\nSQPOLL task tctx setup fails, which can essentially only happen with\nfault injection to insert allocation errors.\n\nCc: stable@vger.kernel.org\nFixes: 1251d2025c3e1 (\"io_uring/sqpoll: early exit thread if task_context wasn\u0027t allocated\")\nReported-by: syzbot+3d92cfcfa84070b0a470@syzkaller.appspotmail.com\nSigned-off-by: Pavel Begunkov \u003casml.silence@gmail.com\u003e\nLink: https://lore.kernel.org/r/efc7ec7010784463b2e7466d7b5c02c2cb381635.1736519461.git.asml.silence@gmail.com\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "e0daef7de1acecdb64c1fa31abc06529abb98710", "tree": "a470bc749497e64c6ba9ba05274678ba2c55637a", "parents": [ "f8c6263347e1740edf159584775332f4abf693a1", "fddb4fd91a955636baa451fe82ad0266f55c7ede" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 12:35:46 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 12:35:46 2025 -0800" }, "message": "Merge tag \u0027drm-fixes-2025-01-11\u0027 of https://gitlab.freedesktop.org/drm/kernel\n\nPull drm fixes from Dave Airlie:\n \"Regular weekly fixes, this has the usual amdgpu/xe/i915 bits.\n\n There is a bigger bunch of mediatek patches that I considered not\n including at this stage, but all the changes (except for one were\n obvious small fixes, and the rotation one is a few lines, and I\n suppose will help someone have their screen up the right way), I\n decided to include it since I expect it got slowed down by holidays\n etc, and it\u0027s not that mainstream a hw platform.\n\n i915:\n - Revert \"drm/i915/hdcp: Don\u0027t enable HDCP1.4 directly from\n check_link\"\n\n amdgpu:\n - Display interrupt fixes\n - Fix display max surface mismatches\n - Fix divide error in DM plane scale calcs\n - Display divide by 0 checks in dml helpers\n - SMU 13 AD/DC interrrupt handling fix\n - Fix locking around buddy trim handling\n\n amdkfd:\n - Fix page fault with shader debugger enabled\n - Fix eviction fence wq handling\n\n xe:\n - Avoid a NULL ptr deref when wedging\n - Fix power gate sequence on DG1\n\n mediatek:\n - Revert \"drm/mediatek: dsi: Correct calculation formula of PHY\n Timing\"\n - Set private-\u003eall_drm_private[i]-\u003edrm to NULL if mtk_drm_bind\n returns err\n - Move mtk_crtc_finish_page_flip() to ddp_cmdq_cb()\n - Only touch DISP_REG_OVL_PITCH_MSB if AFBC is supported\n - Add support for 180-degree rotation in the display driver\n - Stop selecting foreign drivers\n - Revert \"drm/mediatek: Switch to for_each_child_of_node_scoped()\"\n - Fix YCbCr422 color format issue for DP\n - Fix mode valid issue for dp\n - dp: Reference common DAI properties\n - dsi: Add registers to pdata to fix MT8186/MT8188\n - Remove unneeded semicolon\n - Add return value check when reading DPCD\n - Initialize pointer in mtk_drm_of_ddp_path_build_one()\"\n\n* tag \u0027drm-fixes-2025-01-11\u0027 of https://gitlab.freedesktop.org/drm/kernel: (26 commits)\n drm/xe/dg1: Fix power gate sequence.\n drm/xe: Fix tlb invalidation when wedging\n Revert \"drm/i915/hdcp: Don\u0027t enable HDCP1.4 directly from check_link\"\n drm/amdgpu: Add a lock when accessing the buddy trim function\n drm/amd/pm: fix BUG: scheduling while atomic\n drm/amdkfd: wq_release signals dma_fence only when available\n drm/amd/display: Add check for granularity in dml ceil/floor helpers\n drm/amdkfd: fixed page fault when enable MES shader debugger\n drm/amd/display: fix divide error in DM plane scale calcs\n drm/amd/display: increase MAX_SURFACES to the value supported by hw\n drm/amd/display: fix page fault due to max surface definition mismatch\n drm/amd/display: Remove unnecessary amdgpu_irq_get/put\n drm/mediatek: Initialize pointer in mtk_drm_of_ddp_path_build_one()\n drm/mediatek: Add return value check when reading DPCD\n drm/mediatek: Remove unneeded semicolon\n drm/mediatek: mtk_dsi: Add registers to pdata to fix MT8186/MT8188\n dt-bindings: display: mediatek: dp: Reference common DAI properties\n drm/mediatek: Fix mode valid issue for dp\n drm/mediatek: Fix YCbCr422 color format issue for DP\n Revert \"drm/mediatek: Switch to for_each_child_of_node_scoped()\"\n ...\n" }, { "commit": "f8c6263347e1740edf159584775332f4abf693a1", "tree": "bad566311b447dc6e59506b01d5bf9fb60918932", "parents": [ "7110f24f9e33979fd704f7a4a595a9d3e9bdacb7", "6f6ecce59d99ef95a31a137c51e61c3d7b4ab278" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 10:50:30 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 10:50:30 2025 -0800" }, "message": "Merge tag \u0027riscv-for-linus-6.13-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux\n\nPull RISC-V fixes from Palmer Dabbelt:\n\n - a handful of selftest fixes\n\n - fix a memory leak in relocation processing during module loading\n\n - avoid sleeping in die()\n\n - fix kprobe instruction slot address calculations\n\n - fix DT node reference leak in SBI idle probing\n\n - avoid initializing out of bounds pages on sparse vmemmap systems with\n a gap at the start of their physical memory map\n\n - fix backtracing through exceptions\n\n - _Q_PENDING_LOOPS is now defined whenever QUEUED_SPINLOCKS\u003dy\n\n - local labels in entry.S are now marked with \".L\", which prevents them\n from trashing backtraces\n\n - a handful of fixes for SBI-based performance counters\n\n* tag \u0027riscv-for-linus-6.13-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux:\n drivers/perf: riscv: Do not allow invalid raw event config\n drivers/perf: riscv: Return error for default case\n drivers/perf: riscv: Fix Platform firmware event data\n tools: selftests: riscv: Add test count for vstate_prctl\n tools: selftests: riscv: Add pass message for v_initval_nolibc\n riscv: use local label names instead of global ones in assembly\n riscv: qspinlock: Fixup _Q_PENDING_LOOPS definition\n riscv: stacktrace: fix backtracing through exceptions\n riscv: mm: Fix the out of bound issue of vmemmap address\n cpuidle: riscv-sbi: fix device node release in early exit of for_each_possible_cpu\n riscv: kprobes: Fix incorrect address calculation\n riscv: Fix sleeping in invalid context in die()\n riscv: module: remove relocation_head rel_entry member allocation\n riscv: selftests: Fix warnings pointer masking test\n" }, { "commit": "da30ba227c41762ac98e993a1453460450b3e642", "tree": "2ba32c4bb6118f4e0a00f13d609a9ac6e41df6c9", "parents": [ "d57212f281fda9056412cd6cca983d9d2eb89f53" ], "author": { "name": "Imran Khan", "email": "imran.f.khan@oracle.com", "time": "Fri Jan 10 10:27:11 2025 +1100" }, "committer": { "name": "Tejun Heo", "email": "tj@kernel.org", "time": "Fri Jan 10 08:33:39 2025 -1000" }, "message": "workqueue: warn if delayed_work is queued to an offlined cpu.\n\ndelayed_work submitted to an offlined cpu, will not get executed,\nafter the specified delay if the cpu remains offline. If the cpu\nnever comes online the work will never get executed.\nchecking for online cpu in __queue_delayed_work, does not sound\nlike a good idea because to do this reliably we need hotplug lock\nand since work may be submitted from atomic contexts, we would\nhave to use cpus_read_trylock. But if trylock fails we would queue\nthe work on any cpu and this may not be optimal because our intended\ncpu might still be online.\n\nPutting a WARN_ON_ONCE for an already offlined cpu, will indicate users\nof queue_delayed_work_on, if they are (wrongly) trying to queue\ndelayed_work on offlined cpu. Also indicate the problem of using\nofflined cpu with queue_delayed_work_on, in its description.\n\nSigned-off-by: Imran Khan \u003cimran.f.khan@oracle.com\u003e\nSigned-off-by: Tejun Heo \u003ctj@kernel.org\u003e\n" }, { "commit": "5391c5d8e60610bf914f767a6a749004e2d223f0", "tree": "fa0cdf782ec724fa7d64e1107829a33c2510017d", "parents": [ "155c5bf26f983e9988333eeb0ef217138304d13b", "3699f2c43ea9984e00d70463f8c29baaf260ea97" ], "author": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Fri Jan 10 18:20:46 2025 +0100" }, "committer": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Fri Jan 10 18:20:59 2025 +0100" }, "message": "Merge tag \u0027v6.13-rockchip-dtsfixes1\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/mmind/linux-rockchip into arm/fixes\n\nFixed card-detect on one board and some missing properties added.\n\n* tag \u0027v6.13-rockchip-dtsfixes1\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/mmind/linux-rockchip:\n arm64: dts: rockchip: add hevc power domain clock to rk3328\n arm64: dts: rockchip: Fix the SD card detection on NanoPi R6C/R6S\n arm64: dts: rockchip: rename rfkill label for Radxa ROCK 5B\n arm64: dts: rockchip: add reset-names for combphy on rk3568\n\nLink: https://lore.kernel.org/r/2914560.yaVYbkx8dN@diego\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\n" }, { "commit": "7110f24f9e33979fd704f7a4a595a9d3e9bdacb7", "tree": "465892660faf92b7a61fa2fd7a1993e7f6765d0f", "parents": [ "36eb21945a19d82c5b4bb1e995ca798104cb85ec", "1623bc27a85a93e82194c8d077eccc464efa67db" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 09:11:11 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 09:11:11 2025 -0800" }, "message": "Merge tag \u0027vfs-6.13-rc7.fixes.2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs\n\nPull vfs fixes from Christian Brauner:\n \"afs:\n\n - Fix the maximum cell name length\n\n - Fix merge preference rule failure condition\n\n fuse:\n\n - Fix fuse_get_user_pages() so it doesn\u0027t risk misleading the caller\n to think pages have been allocated when they actually haven\u0027t\n\n - Fix direct-io folio offset and length calculation\n\n netfs:\n\n - Fix async direct-io handling\n\n - Fix read-retry for filesystems that don\u0027t provide a\n -\u003eprepare_read() method\n\n vfs:\n\n - Prevent truncating 64-bit offsets to 32-bits in iomap\n\n - Fix memory barrier interactions when polling\n\n - Remove MNT_ONRB to fix concurrent modification of @mnt-\u003emnt_flags\n leading to MNT_ONRB to not be raised and invalid access to a list\n member\"\n\n* tag \u0027vfs-6.13-rc7.fixes.2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs:\n poll: kill poll_does_not_wait()\n sock_poll_wait: kill the no longer necessary barrier after poll_wait()\n io_uring_poll: kill the no longer necessary barrier after poll_wait()\n poll_wait: kill the obsolete wait_address check\n poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll()\n afs: Fix merge preference rule failure condition\n netfs: Fix read-retry for fs with no -\u003eprepare_read()\n netfs: Fix kernel async DIO\n fs: kill MNT_ONRB\n iomap: avoid avoid truncating 64-bit offset to 32 bits\n afs: Fix the maximum cell name length\n fuse: Set *nbytesp\u003d0 in fuse_get_user_pages on allocation failure\n fuse: fix direct io folio offset and length calculation\n" }, { "commit": "36eb21945a19d82c5b4bb1e995ca798104cb85ec", "tree": "979d253f54a0cd9474215d2d42053dffbecb9ca5", "parents": [ "8c8d54116fa289e4d559c0a8fb27d11de9a3a8bc", "111d36d6278756128b7d7fab787fdcbf8221cd98" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 09:04:27 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 09:04:27 2025 -0800" }, "message": "Merge tag \u0027xfs-fixes-6.13-rc7\u0027 of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux\n\nPull xfs fixes from Carlos Maiolino:\n\n - Fix a missing lock while detaching a dquot buffer\n\n - Fix failure on xfs_update_last_rtgroup_size for !XFS_RT\n\n* tag \u0027xfs-fixes-6.13-rc7\u0027 of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux:\n xfs: lock dquot buffer before detaching dquot from b_li_list\n xfs: don\u0027t return an error from xfs_update_last_rtgroup_size for !XFS_RT\n" }, { "commit": "8c8d54116fa289e4d559c0a8fb27d11de9a3a8bc", "tree": "b78e9e1369de5808394a3e0450abc4790e46115b", "parents": [ "b999e7f92e24e32a785934e5c561c0999e8c14bb", "1d7461d0c8330689117286169106af6531a747ed" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 08:14:22 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 08:14:22 2025 -0800" }, "message": "Merge tag \u0027platform-drivers-x86-v6.13-5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/pdx86/platform-drivers-x86\n\nPull x86 platform driver fixes from Ilpo Järvinen:\n \"Fixes and new HW support:\n\n - amd/pmc: Match IRQ1 wakeup disable with the enable on i8042 side\n\n - intel: power-domains: Clearwater Forest support\n\n - intel/pmc: Skip SSRAM setup when no additional devices are present\n\n - ISST: Clearwater Forest support\"\n\n* tag \u0027platform-drivers-x86-v6.13-5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/pdx86/platform-drivers-x86:\n platform/x86: intel/pmc: Fix ioremap() of bad address\n platform/x86: ISST: Add Clearwater Forest to support list\n platform/x86/intel: power-domains: Add Clearwater Forest support\n platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it\n" }, { "commit": "b999e7f92e24e32a785934e5c561c0999e8c14bb", "tree": "b0c20c15990735f1d1136db7761bff62cd1ee285", "parents": [ "9d64558493fef271a38672d048f16e3617e3290a", "907af7d6e0c8cf4086b1bc5218281b2ca09f130b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 08:05:32 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 08:05:32 2025 -0800" }, "message": "Merge tag \u0027regulator-fix-v6.13-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator\n\nPull regulator fixes from Mark Brown:\n \"A couple of fixes for !REGULATOR and !OF configurations, adding\n missing stubs\"\n\n* tag \u0027regulator-fix-v6.13-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator:\n regulator: Move OF_ API declarations/definitions outside CONFIG_REGULATOR\n regulator: Guard of_regulator_bulk_get_all() with CONFIG_OF\n" }, { "commit": "9d64558493fef271a38672d048f16e3617e3290a", "tree": "a422518da59862b76a12c4227fce31d936fd3159", "parents": [ "2144da25584eb10b84252230319b5783f6a83041", "e59f4c97172de0c302894cfd5616161c1f0c4d85" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 07:59:47 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jan 10 07:59:47 2025 -0800" }, "message": "Merge tag \u0027gpio-fixes-for-v6.13-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux\n\nPull gpio fixes from Bartosz Golaszewski:\n \"There\u0027s one small fix for real HW - gpio-loongson.\n\n The rest concern two virtual testing drivers in which some issues were\n recently found and addressed:\n\n - fix resource leaks in error path in gpio-virtuser (and one\n consistent memory leak triggered on every device removal))\n\n - fix the use-case of having multiple con_ids in a lookup table in\n gpio-virtuser which has never worked (despite being advertised)\n\n - don\u0027t allow rmdir() on configfs directories when they are in use in\n gpio-sim and gpio-virtuser\n\n - fix register offsets in gpio-loongson-64\"\n\n* tag \u0027gpio-fixes-for-v6.13-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux:\n gpio: loongson: Fix Loongson-2K2000 ACPI GPIO register offset\n gpio: sim: lock up configfs that an instantiated device depends on\n gpio: virtuser: lock up configfs that an instantiated device depends on\n gpio: virtuser: fix handling of multiple conn_ids in lookup table\n gpio: virtuser: fix missing lookup table cleanups\n" }, { "commit": "f3149ed697dd0c4fc1d696fef78129fa2fe4ca12", "tree": "7d1a5ea02acb6a1230e6996e6b4b0b77dd959a86", "parents": [ "b0e525d7a22ea350e75e2aec22e47fcfafa4cacd", "f5b435be70cb126866fa92ffc6f89cda9e112c75" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Jan 10 14:59:20 2025 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Jan 10 14:59:20 2025 +0100" }, "message": "Merge tag \u0027usb-serial-6.13-rc7\u0027 of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/johan/usb-serial into usb-linus\n\nJohan writes:\n\nUSB-serial device ids for 6.13-rc7\n\nHere are some new modem and cp210x device ids.\n\nAll have been in linux-next with no reported issues.\n\n* tag \u0027usb-serial-6.13-rc7\u0027 of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/johan/usb-serial:\n USB: serial: option: add Neoway N723-EA support\n USB: serial: option: add MeiG Smart SRM815\n USB: serial: cp210x: add Phoenix Contact UPS Device\n" }, { "commit": "1623bc27a85a93e82194c8d077eccc464efa67db", "tree": "491bd1e87d00a93d474579365add4d0dceb54fc1", "parents": [ "17a4fde81d3a7478d97d15304a6d61094a10c2e3", "67cd2e23c0f353803f182ae790a7d5074d4c1a4d" ], "author": { "name": "Christian Brauner", "email": "brauner@kernel.org", "time": "Fri Jan 10 12:01:21 2025 +0100" }, "committer": { "name": "Christian Brauner", "email": "brauner@kernel.org", "time": "Fri Jan 10 12:01:21 2025 +0100" }, "message": "Merge branch \u0027vfs-6.14.poll\u0027 into vfs.fixes\n\nBring in the fixes for __pollwait() and waitqueue_active() interactions.\n\nSigned-off-by: Christian Brauner \u003cbrauner@kernel.org\u003e\n" }, { "commit": "67cd2e23c0f353803f182ae790a7d5074d4c1a4d", "tree": "21b4329a819a52e988be56b5faefd9a78255f896", "parents": [ "40384c840ea1944d7c5a392e8975ed088ecf0b37", "f005bf18a57aadf3af1e85a0f0151cb3688ee606" ], "author": { "name": "Christian Brauner", "email": "brauner@kernel.org", "time": "Fri Jan 10 11:59:08 2025 +0100" }, "committer": { "name": "Christian Brauner", "email": "brauner@kernel.org", "time": "Fri Jan 10 11:59:45 2025 +0100" }, "message": "Merge patch series \"poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll()\"\n\nOleg Nesterov \u003coleg@redhat.com\u003e says:\n\nThe waitqueue_active() helper can only be used if both waker and waiter\nhave memory barriers that pair with each other. But __pollwait() is\nbroken in this respect. Fix it.\n\n* patches from https://lore.kernel.org/r/20250107162649.GA18886@redhat.com:\n poll: kill poll_does_not_wait()\n sock_poll_wait: kill the no longer necessary barrier after poll_wait()\n io_uring_poll: kill the no longer necessary barrier after poll_wait()\n poll_wait: kill the obsolete wait_address check\n poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll()\n\nLink: https://lore.kernel.org/r/20250107162649.GA18886@redhat.com\nSigned-off-by: Christian Brauner \u003cbrauner@kernel.org\u003e\n" }, { "commit": "f005bf18a57aadf3af1e85a0f0151cb3688ee606", "tree": "21b4329a819a52e988be56b5faefd9a78255f896", "parents": [ "b2849867b3a70c2d675ddca01c4e4540f7d3b8e9" ], "author": { "name": "Oleg Nesterov", "email": "oleg@redhat.com", "time": "Tue Jan 07 17:27:43 2025 +0100" }, "committer": { "name": "Christian Brauner", "email": "brauner@kernel.org", "time": "Fri Jan 10 11:59:00 2025 +0100" }, "message": "poll: kill poll_does_not_wait()\n\nIt no longer has users.\n\nSigned-off-by: Oleg Nesterov \u003coleg@redhat.com\u003e\nLink: https://lore.kernel.org/r/20250107162743.GA18947@redhat.com\nSigned-off-by: Christian Brauner \u003cbrauner@kernel.org\u003e\n" }, { "commit": "b2849867b3a70c2d675ddca01c4e4540f7d3b8e9", "tree": "21e06ac2875801bb7ab52c764ec16331629f92e7", "parents": [ "4e15fa8305deecdf20233558ed9f7a8a62b708fd" ], "author": { "name": "Oleg Nesterov", "email": "oleg@redhat.com", "time": "Tue Jan 07 17:27:36 2025 +0100" }, "committer": { "name": "Christian Brauner", "email": "brauner@kernel.org", "time": "Fri Jan 10 11:59:00 2025 +0100" }, "message": "sock_poll_wait: kill the no longer necessary barrier after poll_wait()\n\nNow that poll_wait() provides a full barrier we can remove smp_mb() from\nsock_poll_wait().\n\nAlso, the poll_does_not_wait() check before poll_wait() just adds the\nunnecessary confusion, kill it. poll_wait() does the same \"p \u0026\u0026 p-\u003e_qproc\"\ncheck.\n\nSigned-off-by: Oleg Nesterov \u003coleg@redhat.com\u003e\nLink: https://lore.kernel.org/r/20250107162736.GA18944@redhat.com\nSigned-off-by: Christian Brauner \u003cbrauner@kernel.org\u003e\n" }, { "commit": "4e15fa8305deecdf20233558ed9f7a8a62b708fd", "tree": "ca141fdf4f9f7340cb8d787354f4244ed629eada", "parents": [ "10b02a2cfec2f106db4897ad87732db56d71e6fd" ], "author": { "name": "Oleg Nesterov", "email": "oleg@redhat.com", "time": "Tue Jan 07 17:27:30 2025 +0100" }, "committer": { "name": "Christian Brauner", "email": "brauner@kernel.org", "time": "Fri Jan 10 11:58:59 2025 +0100" }, "message": "io_uring_poll: kill the no longer necessary barrier after poll_wait()\n\nNow that poll_wait() provides a full barrier we can remove smp_rmb() from\nio_uring_poll().\n\nIn fact I don\u0027t think smp_rmb() was correct, it can\u0027t serialize LOADs and\nSTOREs.\n\nSigned-off-by: Oleg Nesterov \u003coleg@redhat.com\u003e\nLink: https://lore.kernel.org/r/20250107162730.GA18940@redhat.com\nSigned-off-by: Christian Brauner \u003cbrauner@kernel.org\u003e\n" }, { "commit": "10b02a2cfec2f106db4897ad87732db56d71e6fd", "tree": "06b136a7fb28bb8f591820ac1b453993ea24fbbb", "parents": [ "cacd9ae4bf801ff4125d8961bb9a3ba955e51680" ], "author": { "name": "Oleg Nesterov", "email": "oleg@redhat.com", "time": "Tue Jan 07 17:27:24 2025 +0100" }, "committer": { "name": "Christian Brauner", "email": "brauner@kernel.org", "time": "Fri Jan 10 11:58:59 2025 +0100" }, "message": "poll_wait: kill the obsolete wait_address check\n\nThis check is historical and no longer needed, wait_address is never NULL.\nThese days we rely on the poll_table-\u003e_qproc check. NULL if select/poll\nis not going to sleep, or it already has a data to report, or all waiters\nhave already been registered after the 1st iteration.\n\nHowever, poll_table *p can be NULL, see p9_fd_poll() for example, so we\ncan\u0027t remove the \"p !\u003d NULL\" check.\n\nLink: https://lore.kernel.org/all/20250106180325.GF7233@redhat.com/\nSigned-off-by: Oleg Nesterov \u003coleg@redhat.com\u003e\nLink: https://lore.kernel.org/r/20250107162724.GA18926@redhat.com\nSigned-off-by: Christian Brauner \u003cbrauner@kernel.org\u003e\n" }, { "commit": "cacd9ae4bf801ff4125d8961bb9a3ba955e51680", "tree": "7c931c54895633e30d9ea7c3e8725d0a16bd57fc", "parents": [ "40384c840ea1944d7c5a392e8975ed088ecf0b37" ], "author": { "name": "Oleg Nesterov", "email": "oleg@redhat.com", "time": "Tue Jan 07 17:27:17 2025 +0100" }, "committer": { "name": "Christian Brauner", "email": "brauner@kernel.org", "time": "Fri Jan 10 11:58:59 2025 +0100" }, "message": "poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll()\n\nAs the comment above waitqueue_active() explains, it can only be used\nif both waker and waiter have mb()\u0027s that pair with each other. However\n__pollwait() is broken in this respect.\n\nThis is not pipe-specific, but let\u0027s look at pipe_poll() for example:\n\n\tpoll_wait(...); // -\u003e __pollwait() -\u003e add_wait_queue()\n\n\tLOAD(pipe-\u003ehead);\n\tLOAD(pipe-\u003ehead);\n\nIn theory these LOAD()\u0027s can leak into the critical section inside\nadd_wait_queue() and can happen before list_add(entry, wq_head), in this\ncase pipe_poll() can race with wakeup_pipe_readers/writers which do\n\n\tsmp_mb();\n\tif (waitqueue_active(wq_head))\n\t\twake_up_interruptible(wq_head);\n\nThere are more __pollwait()-like functions (grep init_poll_funcptr), and\nit seems that at least ep_ptable_queue_proc() has the same problem, so the\npatch adds smp_mb() into poll_wait().\n\nLink: https://lore.kernel.org/all/20250102163320.GA17691@redhat.com/\nSigned-off-by: Oleg Nesterov \u003coleg@redhat.com\u003e\nLink: https://lore.kernel.org/r/20250107162717.GA18922@redhat.com\nSigned-off-by: Christian Brauner \u003cbrauner@kernel.org\u003e\n" }, { "commit": "111d36d6278756128b7d7fab787fdcbf8221cd98", "tree": "cf867df59d783bdb656178379743c1a6b6afb82d", "parents": [ "7ee7c9b39ed36caf983706f5b893cc5c37a79071" ], "author": { "name": "Darrick J. Wong", "email": "djwong@kernel.org", "time": "Wed Jan 08 16:54:02 2025 -0800" }, "committer": { "name": "Carlos Maiolino", "email": "cem@kernel.org", "time": "Fri Jan 10 10:12:48 2025 +0100" }, "message": "xfs: lock dquot buffer before detaching dquot from b_li_list\n\nWe have to lock the buffer before we can delete the dquot log item from\nthe buffer\u0027s log item list.\n\nCc: stable@vger.kernel.org # v6.13-rc3\nFixes: acc8f8628c3737 (\"xfs: attach dquot buffer to dquot log item buffer\")\nSigned-off-by: Darrick J. Wong \u003cdjwong@kernel.org\u003e\nReviewed-by: Christoph Hellwig \u003chch@lst.de\u003e\nSigned-off-by: Carlos Maiolino \u003ccem@kernel.org\u003e\n" }, { "commit": "67510d7e2e5f5bdc020bf9d759aa575cce48c8e1", "tree": "6ce9993409fd982bfaa76857daecafdc183e555f", "parents": [ "b4aee757f1baf20fa2650fc23a7b0335696e005c" ], "author": { "name": "Johannes Berg", "email": "johannes.berg@intel.com", "time": "Fri Jan 10 08:58:14 2025 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Jan 10 09:41:53 2025 +0100" }, "message": "fs: debugfs: fix open proxy for unsafe files\n\nIn the previous commit referenced below, I had to split\nthe short fops handling into different proxy fops. This\nnecessitated knowing out-of-band whether or not the ops\nare short or full, when attempting to convert from fops\nto allocated fsdata.\n\nUnfortunately, I only converted full_proxy_open() which\nis used for the new full_proxy_open_regular() and\nfull_proxy_open_short(), but forgot about the call in\nopen_proxy_open(), used for debugfs_create_file_unsafe().\n\nFix that, it never has short fops.\n\nFixes: f8f25893a477 (\"fs: debugfs: differentiate short fops with proxy ops\")\nReported-by: Suresh Kumar Kurmi \u003csuresh.kumar.kurmi@intel.com\u003e\nReported-by: kernel test robot \u003coliver.sang@intel.com\u003e\nCloses: https://lore.kernel.org/oe-lkp/202501101055.bb8bf3e7-lkp@intel.com\nReported-by: Venkat Rao Bagalkote \u003cvenkat88@linux.vnet.ibm.com\u003e\nSigned-off-by: Johannes Berg \u003cjohannes.berg@intel.com\u003e\nLink: https://lore.kernel.org/r/20250110085826.cd74f3b7a36b.I430c79c82ec3f954c2ff9665753bf6ac9e63eef8@changeid\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "b583ef82b671c9a752fbe3e95bd4c1c51eab764d", "tree": "5f8ae23fb14a26a1f10d572cc2a9875c00176d1d", "parents": [ "9d89551994a430b50c4fffcb1e617a057fa76e20" ], "author": { "name": "Jiri Olsa", "email": "jolsa@kernel.org", "time": "Thu Jan 09 15:14:40 2025 +0100" }, "committer": { "name": "Peter Zijlstra", "email": "peterz@infradead.org", "time": "Fri Jan 10 09:28:01 2025 +0100" }, "message": "uprobes: Fix race in uprobe_free_utask\n\nMax Makarov reported kernel panic [1] in perf user callchain code.\n\nThe reason for that is the race between uprobe_free_utask and bpf\nprofiler code doing the perf user stack unwind and is triggered\nwithin uprobe_free_utask function:\n - after current-\u003eutask is freed and\n - before current-\u003eutask is set to NULL\n\n general protection fault, probably for non-canonical address 0x9e759c37ee555c76: 0000 [#1] SMP PTI\n RIP: 0010:is_uprobe_at_func_entry+0x28/0x80\n ...\n ? die_addr+0x36/0x90\n ? exc_general_protection+0x217/0x420\n ? asm_exc_general_protection+0x26/0x30\n ? is_uprobe_at_func_entry+0x28/0x80\n perf_callchain_user+0x20a/0x360\n get_perf_callchain+0x147/0x1d0\n bpf_get_stackid+0x60/0x90\n bpf_prog_9aac297fb833e2f5_do_perf_event+0x434/0x53b\n ? __smp_call_single_queue+0xad/0x120\n bpf_overflow_handler+0x75/0x110\n ...\n asm_sysvec_apic_timer_interrupt+0x1a/0x20\n RIP: 0010:__kmem_cache_free+0x1cb/0x350\n ...\n ? uprobe_free_utask+0x62/0x80\n ? acct_collect+0x4c/0x220\n uprobe_free_utask+0x62/0x80\n mm_release+0x12/0xb0\n do_exit+0x26b/0xaa0\n __x64_sys_exit+0x1b/0x20\n do_syscall_64+0x5a/0x80\n\nIt can be easily reproduced by running following commands in\nseparate terminals:\n\n # while :; do bpftrace -e \u0027uprobe:/bin/ls:_start { printf(\"hit\\n\"); }\u0027 -c ls; done\n # bpftrace -e \u0027profile:hz:100000 { @[ustack()] \u003d count(); }\u0027\n\nFixing this by making sure current-\u003eutask pointer is set to NULL\nbefore we start to release the utask object.\n\n[1] https://github.com/grafana/pyroscope/issues/3673\n\nFixes: cfa7f3d2c526 (\"perf,x86: avoid missing caller address in stack traces captured in uprobe\")\nReported-by: Max Makarov \u003cmaxpain@linux.com\u003e\nSigned-off-by: Jiri Olsa \u003cjolsa@kernel.org\u003e\nSigned-off-by: Peter Zijlstra (Intel) \u003cpeterz@infradead.org\u003e\nAcked-by: Oleg Nesterov \u003coleg@redhat.com\u003e\nAcked-by: Andrii Nakryiko \u003candrii@kernel.org\u003e\nLink: https://lore.kernel.org/r/20250109141440.2692173-1-jolsa@kernel.org\n" }, { "commit": "fddb4fd91a955636baa451fe82ad0266f55c7ede", "tree": "2308ce991a26b6b9ae4889235e28ea51d4edf7dd", "parents": [ "85bf89f2684e354b692b3d684f72b62376f5ff66", "f563dd9ca6cb6ed52c5fb6e4285d1ef26cfa7e8a" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jan 10 16:57:45 2025 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jan 10 16:57:59 2025 +1000" }, "message": "Merge tag \u0027mediatek-drm-fixes-20250104\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/chunkuang.hu/linux into drm-fixes\n\nMediatek DRM Fixes - 20250104\n\n1. Revert \"drm/mediatek: dsi: Correct calculation formula of PHY Timing\"\n2. Set private-\u003eall_drm_private[i]-\u003edrm to NULL if mtk_drm_bind returns err\n3. Move mtk_crtc_finish_page_flip() to ddp_cmdq_cb()\n4. Only touch DISP_REG_OVL_PITCH_MSB if AFBC is supported\n5. Add support for 180-degree rotation in the display driver\n6. Stop selecting foreign drivers\n7. Revert \"drm/mediatek: Switch to for_each_child_of_node_scoped()\"\n8. Fix YCbCr422 color format issue for DP\n9. Fix mode valid issue for dp\n10. dp: Reference common DAI properties\n11. dsi: Add registers to pdata to fix MT8186/MT8188\n12. Remove unneeded semicolon\n13. Add return value check when reading DPCD\n14. Initialize pointer in mtk_drm_of_ddp_path_build_one()\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Chun-Kuang Hu \u003cchunkuang.hu@kernel.org\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20250104124227.45505-1-chunkuang.hu@kernel.org\n" }, { "commit": "85bf89f2684e354b692b3d684f72b62376f5ff66", "tree": "cff091acaf06b2ac3ccf2a1ee732f26056913df0", "parents": [ "66d4709abcf85369b23554cfb4d43e09bb5da703", "b84e1cd22f8a8c03b7b1051372560c7017c8be92" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jan 10 16:41:59 2025 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jan 10 16:43:32 2025 +1000" }, "message": "Merge tag \u0027drm-xe-fixes-2025-01-09\u0027 of https://gitlab.freedesktop.org/drm/xe/kernel into drm-fixes\n\nDriver Changes:\n- Avoid a NULL ptr deref when wedging (Lucas)\n- Fix power gate sequence on DG1 (Rodrigo)\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Thomas Hellstrom \u003cthomas.hellstrom@linux.intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/Z4AcqP3Io_r0pEsR@fedora\n" }, { "commit": "66d4709abcf85369b23554cfb4d43e09bb5da703", "tree": "5cca77f7dcf6e3806682c288ed3bdf5372b7d54b", "parents": [ "7ac9f3366fb83aa4a1b25f6e84ad96c06549e95f", "75c8b703e5bded1e33b08fb09b829e7c2c1ed50a" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jan 10 16:12:25 2025 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jan 10 16:12:28 2025 +1000" }, "message": "Merge tag \u0027amd-drm-fixes-6.13-2025-01-09\u0027 of https://gitlab.freedesktop.org/agd5f/linux into drm-fixes\n\namd-drm-fixes-6.13-2025-01-09:\n\namdgpu:\n- Display interrupt fixes\n- Fix display max surface mismatches\n- Fix divide error in DM plane scale calcs\n- Display divide by 0 checks in dml helpers\n- SMU 13 AD/DC interrrupt handling fix\n- Fix locking around buddy trim handling\n\namdkfd:\n- Fix page fault with shader debugger enabled\n- Fix eviction fence wq handling\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Alex Deucher \u003calexander.deucher@amd.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20250109164236.477295-1-alexander.deucher@amd.com\n" }, { "commit": "7ac9f3366fb83aa4a1b25f6e84ad96c06549e95f", "tree": "b19d5354ad2a65ec6b84c111a3a5183b4e81be2e", "parents": [ "9d89551994a430b50c4fffcb1e617a057fa76e20", "77bf21a03a2ad45cf66f73f13154b1669d9cf52a" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jan 10 14:50:19 2025 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jan 10 14:50:21 2025 +1000" }, "message": "Merge tag \u0027drm-intel-fixes-2025-01-08\u0027 of https://gitlab.freedesktop.org/drm/i915/kernel into drm-fixes\n\n- Revert \"drm/i915/hdcp: Don\u0027t enable HDCP1.4 directly from check_link\" [hdcp] (Suraj Kandpal)\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nFrom: Tvrtko Ursulin \u003ctursulin@igalia.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/Z37BPchEzY0ovIqF@linux\n" }, { "commit": "2144da25584eb10b84252230319b5783f6a83041", "tree": "a1833c274f824d3958903428afc6776b9c245fbd", "parents": [ "c77cd47cee041bc1664b8e5fcd23036e5aab8e2a", "e8580b4c600e085b3c8e6404392de2f822d4c132" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jan 09 18:19:59 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jan 09 18:19:59 2025 -0800" }, "message": "Merge tag \u00276.13-rc6-ksmbd-server-fixes\u0027 of git://git.samba.org/ksmbd\n\nPull smb server fixes from Steve French:\n \"Four ksmbd server fixes, most also for stable:\n\n - fix for reporting special file type more accurately when POSIX\n extensions negotiated\n\n - minor cleanup\n\n - fix possible incorrect creation path when dirname is not present.\n In some cases, Windows apps create files without checking if they\n exist.\n\n - fix potential NULL pointer dereference sending interim response\"\n\n* tag \u00276.13-rc6-ksmbd-server-fixes\u0027 of git://git.samba.org/ksmbd:\n ksmbd: Implement new SMB3 POSIX type\n ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked\n ksmbd: Remove unneeded if check in ksmbd_rdma_capable_netdev()\n ksmbd: fix a missing return value check bug\n" }, { "commit": "30c8fd31c571db486a5331a92d03eb60a0fb277c", "tree": "2c2cd5279b9cc98af7809d10103a1654c080e332", "parents": [ "9d89551994a430b50c4fffcb1e617a057fa76e20" ], "author": { "name": "Masami Hiramatsu (Google)", "email": "mhiramat@kernel.org", "time": "Thu Jan 09 23:29:37 2025 +0900" }, "committer": { "name": "Masami Hiramatsu (Google)", "email": "mhiramat@kernel.org", "time": "Fri Jan 10 08:57:18 2025 +0900" }, "message": "tracing/kprobes: Fix to free objects when failed to copy a symbol\n\nIn __trace_kprobe_create(), if something fails it must goto error block\nto free objects. But when strdup() a symbol, it returns without that.\nFix it to goto the error block to free objects correctly.\n\nLink: https://lore.kernel.org/all/173643297743.1514810.2408159540454241947.stgit@devnote2/\n\nFixes: 6212dd29683e (\"tracing/kprobes: Use dyn_event framework for kprobe events\")\nSigned-off-by: Masami Hiramatsu (Google) \u003cmhiramat@kernel.org\u003e\nReviewed-by: Steven Rostedt (Google) \u003crostedt@goodmis.org\u003e" }, { "commit": "155c5bf26f983e9988333eeb0ef217138304d13b", "tree": "edf071b10f541915dc4dcbbb6cfed13741c2d593", "parents": [ "00f63a0f5fa53f65d4bc167c7367e686d7810ada" ], "author": { "name": "guanjing", "email": "guanjing@cmss.chinamobile.com", "time": "Fri Dec 20 09:33:35 2024 +0100" }, "committer": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Thu Jan 09 22:57:34 2025 +0100" }, "message": "firewall: remove misplaced semicolon from stm32_firewall_get_firewall\n\nRemove misplaced colon in stm32_firewall_get_firewall()\nwhich results in a syntax error when the code is compiled\nwithout CONFIG_STM32_FIREWALL.\n\nFixes: 5c9668cfc6d7 (\"firewall: introduce stm32_firewall framework\")\nSigned-off-by: guanjing \u003cguanjing@cmss.chinamobile.com\u003e\nReviewed-by: Gatien Chevallier \u003cgatien.chevallier@foss.st.com\u003e\nSigned-off-by: Alexandre Torgue \u003calexandre.torgue@foss.st.com\u003e\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\n" }, { "commit": "00f63a0f5fa53f65d4bc167c7367e686d7810ada", "tree": "21c337e4ec6b8f2d8f61de734b000d8edd39a54d", "parents": [ "627522c8bf4be82d3540ff3fcb816af9ad37ba72", "5f122030061db3e5d2bddd9cf5c583deaa6c54ff" ], "author": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Thu Jan 09 22:56:14 2025 +0100" }, "committer": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Thu Jan 09 22:56:15 2025 +0100" }, "message": "Merge tag \u0027imx-fixes-6.13\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/shawnguo/linux into arm/fixes\n\ni.MX fixes for 6.13:\n\n- Add fallback for i.MX8QM ESAI compatible to fix a dt-schema warning\n caused by bindings update\n- Fix uSDHC1 clock for i.MX RT1050\n- Enable SND_SOC_SPDIF in imx_v6_v7_defconfig to fix a regression caused\n by an i.MX6 SPDIF sound card change in DT\n- Fix address length of i.MX95 netcmix_blk_ctrl\n\n* tag \u0027imx-fixes-6.13\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/shawnguo/linux:\n ARM: dts: imxrt1050: Fix clocks for mmc\n ARM: imx_v6_v7_defconfig: enable SND_SOC_SPDIF\n arm64: dts: imx95: correct the address length of netcmix_blk_ctrl\n arm64: dts: imx8-ss-audio: add fallback compatible string fsl,imx6ull-esai for esai\n\nLink: https://lore.kernel.org/r/Z3Jf9zbv/xH3YzuB@dragon\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\n" }, { "commit": "627522c8bf4be82d3540ff3fcb816af9ad37ba72", "tree": "1bfdad1556bbddb6a9852abf935ad69002d84c6b", "parents": [ "9d89551994a430b50c4fffcb1e617a057fa76e20", "8a6442ec3437083348f32a6159b9a67bf66417bc" ], "author": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Thu Jan 09 22:54:39 2025 +0100" }, "committer": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Thu Jan 09 22:54:53 2025 +0100" }, "message": "Merge tag \u0027qcom-arm64-fixes-for-6.13\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/qcom/linux into arm/fixes\n\nQualcomm Arm64 DeviceTree fixes for v6.13\n\nRevert the enablement of OTG support on primary and secondary USB Type-C\ncontrollers of X1 Elite, for now, as this broke support for USB hotplug.\n\nDisable the TPDM DCC device on SA8775P, as this is inaccessible per\ncurrent firmware configuration. Also correct the PCIe \"addr_space\"\nregion to enable larger BAR sizes.\n\nAlso fix the address space of PCIe6a found in X1 Elite.\n\n* tag \u0027qcom-arm64-fixes-for-6.13\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/qcom/linux:\n arm64: dts: qcom: sa8775p: fix the secure device bootup issue\n Revert \"arm64: dts: qcom: x1e80100: enable OTG on USB-C controllers\"\n Revert \"arm64: dts: qcom: x1e80100-crd: enable otg on usb ports\"\n arm64: dts: qcom: x1e80100: Fix up BAR space size for PCIe6a\n Revert \"arm64: dts: qcom: x1e78100-t14s: enable otg on usb-c ports\"\n arm64: dts: qcom: sa8775p: Fix the size of \u0027addr_space\u0027 regions\n\nLink: https://lore.kernel.org/r/20250103024945.4649-1-andersson@kernel.org\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\n" }, { "commit": "c77cd47cee041bc1664b8e5fcd23036e5aab8e2a", "tree": "eaa8f3ab687956241c4a6b5c7c140542a84bc445", "parents": [ "643e2e259c2b25a2af0ae4c23c6e16586d9fd19c", "b5cf67a8f716afbd7f8416edfe898c2df460811a" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jan 09 12:40:58 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jan 09 12:40:58 2025 -0800" }, "message": "Merge tag \u0027net-6.13-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net\n\nPull networking fixes from Jakub Kicinski:\n \"Including fixes from netfilter, Bluetooth and WPAN.\n\n No outstanding fixes / investigations at this time.\n\n Current release - new code bugs:\n\n - eth: fbnic: revert HWMON support, it doesn\u0027t work at all and revert\n is similar size as the fixes\n\n Previous releases - regressions:\n\n - tcp: allow a connection when sk_max_ack_backlog is zero\n\n - tls: fix tls_sw_sendmsg error handling\n\n Previous releases - always broken:\n\n - netdev netlink family:\n - prevent accessing NAPI instances from another namespace\n - don\u0027t dump Tx and uninitialized NAPIs\n\n - net: sysctl: avoid using current-\u003ensproxy, fix null-deref if task\n is exiting and stick to opener\u0027s netns\n\n - sched: sch_cake: add bounds checks to host bulk flow fairness\n counts\n\n Misc:\n\n - annual cleanup of inactive maintainers\"\n\n* tag \u0027net-6.13-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net: (57 commits)\n rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current-\u003ensproxy\n sctp: sysctl: plpmtud_probe_interval: avoid using current-\u003ensproxy\n sctp: sysctl: udp_port: avoid using current-\u003ensproxy\n sctp: sysctl: auth_enable: avoid using current-\u003ensproxy\n sctp: sysctl: rto_min/max: avoid using current-\u003ensproxy\n sctp: sysctl: cookie_hmac_alg: avoid using current-\u003ensproxy\n mptcp: sysctl: blackhole timeout: avoid using current-\u003ensproxy\n mptcp: sysctl: sched: avoid using current-\u003ensproxy\n mptcp: sysctl: avail sched: remove write access\n MAINTAINERS: remove Lars Povlsen from Microchip Sparx5 SoC\n MAINTAINERS: remove Noam Dagan from AMAZON ETHERNET\n MAINTAINERS: remove Ying Xue from TIPC\n MAINTAINERS: remove Mark Lee from MediaTek Ethernet\n MAINTAINERS: mark stmmac ethernet as an Orphan\n MAINTAINERS: remove Andy Gospodarek from bonding\n MAINTAINERS: update maintainers for Microchip LAN78xx\n MAINTAINERS: mark Synopsys DW XPCS as Orphan\n net/mlx5: Fix variable not being completed when function returns\n rtase: Fix a check for error in rtase_alloc_msix()\n net: stmmac: dwmac-tegra: Read iommu stream id from device tree\n ...\n" }, { "commit": "643e2e259c2b25a2af0ae4c23c6e16586d9fd19c", "tree": "8da2fb1ae28a6e2ba336bcc45125debe8149dbaa", "parents": [ "eea6e4b4dfb8859446177c32961c96726d0117be", "0ee4736c003daded513de0ff112d4a1e9c85bbab" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jan 09 10:16:45 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jan 09 10:16:45 2025 -0800" }, "message": "Merge tag \u0027for-6.13-rc6-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux\n\nPull btrfs fixes from David Sterba:\n \"A few more fixes.\n\n Besides the one-liners in Btrfs there\u0027s fix to the io_uring and\n encoded read integration (added in this development cycle). The update\n to io_uring provides more space for the ongoing command that is then\n used in Btrfs to handle some cases.\n\n - io_uring and encoded read:\n - provide stable storage for io_uring command data\n - make a copy of encoded read ioctl call, reuse that in case the\n call would block and will be called again\n\n - properly initialize zlib context for hardware compression on s390\n\n - fix max extent size calculation on filesystems with non-zoned\n devices\n\n - fix crash in scrub on crafted image due to invalid extent tree\"\n\n* tag \u0027for-6.13-rc6-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux:\n btrfs: zlib: fix avail_in bytes for s390 zlib HW compression path\n btrfs: zoned: calculate max_extent_size properly on non-zoned setup\n btrfs: avoid NULL pointer dereference if no valid extent tree\n btrfs: don\u0027t read from userspace twice in btrfs_uring_encoded_read()\n io_uring: add io_uring_cmd_get_async_data helper\n io_uring/cmd: add per-op data to struct io_uring_cmd_data\n io_uring/cmd: rename struct uring_cache to io_uring_cmd_data\n" }, { "commit": "6f6ecce59d99ef95a31a137c51e61c3d7b4ab278", "tree": "065ed9d616e497427215a8ee7a0a75b8b7148449", "parents": [ "89726fb01a12d639fbf1172f74f8215b1c2ebf24", "3aff4cdbe506652da77570baccad623511628250" ], "author": { "name": "Palmer Dabbelt", "email": "palmer@rivosinc.com", "time": "Thu Jan 09 09:37:12 2025 -0800" }, "committer": { "name": "Palmer Dabbelt", "email": "palmer@rivosinc.com", "time": "Thu Jan 09 09:37:12 2025 -0800" }, "message": "Merge patch series \"SBI PMU event related fixes\"\n\nAtish Patra \u003catishp@rivosinc.com\u003e says:\n\nHere are two minor improvement/fixes in the PMU event path. The first patch\nwas part of the series[1]. The 2nd patch was suggested during the series\nreview.\n\nWhile the series can only be merged once SBI v3.0 is frozen, these two\npatches can be independent of SBI v3.0 and can be merged sooner. Hence, these\ntwo patches are sent as a separate series.\n\n* b4-shazam-merge:\n drivers/perf: riscv: Do not allow invalid raw event config\n drivers/perf: riscv: Return error for default case\n drivers/perf: riscv: Fix Platform firmware event data\n\nLink: https://lore.kernel.org/r/20241212-pmu_event_fixes_v2-v2-0-813e8a4f5962@rivosinc.com\nSigned-off-by: Palmer Dabbelt \u003cpalmer@rivosinc.com\u003e\n" }, { "commit": "3aff4cdbe506652da77570baccad623511628250", "tree": "f28fb27755efb607fa5b684fd9d560b4c5869ada", "parents": [ "2c206cdede567f53035c622e846678a996f39d69" ], "author": { "name": "Atish Patra", "email": "atishp@rivosinc.com", "time": "Thu Dec 12 16:09:34 2024 -0800" }, "committer": { "name": "Palmer Dabbelt", "email": "palmer@rivosinc.com", "time": "Thu Jan 09 09:37:09 2025 -0800" }, "message": "drivers/perf: riscv: Do not allow invalid raw event config\n\nThe SBI specification allows only lower 48bits of hpmeventX to be\nconfigured via SBI PMU. Currently, the driver masks of the higher\nbits but doesn\u0027t return an error. This will lead to an additional\nSBI call for config matching which should return for an invalid\nevent error in most of the cases.\n\nHowever, if a platform(i.e Rocket and sifive cores) implements a\nbitmap of all bits in the event encoding this will lead to an\nincorrect event being programmed leading to user confusion.\n\nReport the error to the user if higher bits are set during the\nevent mapping itself to avoid the confusion and save an additional\nSBI call.\n\nSuggested-by: Samuel Holland \u003csamuel.holland@sifive.com\u003e\nSigned-off-by: Atish Patra \u003catishp@rivosinc.com\u003e\nLink: https://lore.kernel.org/r/20241212-pmu_event_fixes_v2-v2-3-813e8a4f5962@rivosinc.com\nSigned-off-by: Palmer Dabbelt \u003cpalmer@rivosinc.com\u003e\n" }, { "commit": "2c206cdede567f53035c622e846678a996f39d69", "tree": "66ef78ac00ef400b423c2628fe8ab371f887df3d", "parents": [ "fc58db9aeb15e89b69ff5e9abc69ecf9e5f888ed" ], "author": { "name": "Atish Patra", "email": "atishp@rivosinc.com", "time": "Thu Dec 12 16:09:33 2024 -0800" }, "committer": { "name": "Palmer Dabbelt", "email": "palmer@rivosinc.com", "time": "Thu Jan 09 09:37:09 2025 -0800" }, "message": "drivers/perf: riscv: Return error for default case\n\nIf the upper two bits has an invalid valid (0x1), the event mapping\nis not reliable as it returns an uninitialized variable.\n\nReturn appropriate value for the default case.\n\nFixes: f0c9363db2dd (\"perf/riscv-sbi: Add platform specific firmware event handling\")\n\nSigned-off-by: Atish Patra \u003catishp@rivosinc.com\u003e\nLink: https://lore.kernel.org/r/20241212-pmu_event_fixes_v2-v2-2-813e8a4f5962@rivosinc.com\nSigned-off-by: Palmer Dabbelt \u003cpalmer@rivosinc.com\u003e\n" }, { "commit": "fc58db9aeb15e89b69ff5e9abc69ecf9e5f888ed", "tree": "a7a8789ef9d5b0e209bfd50ed95a0b54689ccf09", "parents": [ "40384c840ea1944d7c5a392e8975ed088ecf0b37" ], "author": { "name": "Atish Patra", "email": "atishp@rivosinc.com", "time": "Thu Dec 12 16:09:32 2024 -0800" }, "committer": { "name": "Palmer Dabbelt", "email": "palmer@rivosinc.com", "time": "Thu Jan 09 09:37:08 2025 -0800" }, "message": "drivers/perf: riscv: Fix Platform firmware event data\n\nPlatform firmware event data field is allowed to be 62 bits for\nLinux as uppper most two bits are reserved to indicate SBI fw or\nplatform specific firmware events.\nHowever, the event data field is masked as per the hardware raw\nevent mask which is not correct.\n\nFix the platform firmware event data field with proper mask.\n\nFixes: f0c9363db2dd (\"perf/riscv-sbi: Add platform specific firmware event handling\")\n\nSigned-off-by: Atish Patra \u003catishp@rivosinc.com\u003e\nLink: https://lore.kernel.org/r/20241212-pmu_event_fixes_v2-v2-1-813e8a4f5962@rivosinc.com\nSigned-off-by: Palmer Dabbelt \u003cpalmer@rivosinc.com\u003e\n" }, { "commit": "89726fb01a12d639fbf1172f74f8215b1c2ebf24", "tree": "ca6018652870dd6b71bed763a3890da05b88eb5a", "parents": [ "5cd900b8b7e42c492431eb4261c18927768db1f9", "ebdc22c51acee963e26cacb2cb63f8fa2f483808" ], "author": { "name": "Palmer Dabbelt", "email": "palmer@rivosinc.com", "time": "Thu Jan 09 09:35:42 2025 -0800" }, "committer": { "name": "Palmer Dabbelt", "email": "palmer@rivosinc.com", "time": "Thu Jan 09 09:35:42 2025 -0800" }, "message": "Merge patch series \"selftest: fix riscv/vector tests\"\n\nThis contains a pair of fixes for the vector self tests, which avoids\nsome warnings and provides proper status messages.\n\n* b4-shazam-merge:\n tools: selftests: riscv: Add test count for vstate_prctl\n tools: selftests: riscv: Add pass message for v_initval_nolibc\n\nLink: https://lore.kernel.org/r/20241220091730.28006-1-yongxuan.wang@sifive.com\nSigned-off-by: Palmer Dabbelt \u003cpalmer@rivosinc.com\u003e\n" }, { "commit": "ebdc22c51acee963e26cacb2cb63f8fa2f483808", "tree": "095f4cd1a015d4280a1276420d6d0b6c1a5f8cf0", "parents": [ "503465d4dc40849af3cc18a517a5c06e155c5e33" ], "author": { "name": "Yong-Xuan Wang", "email": "yongxuan.wang@sifive.com", "time": "Fri Dec 20 17:17:27 2024 +0800" }, "committer": { "name": "Palmer Dabbelt", "email": "palmer@rivosinc.com", "time": "Thu Jan 09 09:35:40 2025 -0800" }, "message": "tools: selftests: riscv: Add test count for vstate_prctl\n\nAdd the test count to drop the warning message.\n\"Planned tests !\u003d run tests (0 !\u003d 1)\"\n\nFixes: 7cf6198ce22d (\"selftests: Test RISC-V Vector prctl interface\")\nSigned-off-by: Yong-Xuan Wang \u003cyongxuan.wang@sifive.com\u003e\nReviewed-by: Andrew Jones \u003cajones@ventanamicro.com\u003e\nReviewed-by: Andy Chiu \u003cAndybnAC@gmail.com\u003e\nLink: https://lore.kernel.org/r/20241220091730.28006-3-yongxuan.wang@sifive.com\nSigned-off-by: Palmer Dabbelt \u003cpalmer@rivosinc.com\u003e\n" }, { "commit": "503465d4dc40849af3cc18a517a5c06e155c5e33", "tree": "dc10222dae5c08fb1f12fcf840849fc4bbfb7f7d", "parents": [ "40384c840ea1944d7c5a392e8975ed088ecf0b37" ], "author": { "name": "Yong-Xuan Wang", "email": "yongxuan.wang@sifive.com", "time": "Fri Dec 20 17:17:26 2024 +0800" }, "committer": { "name": "Palmer Dabbelt", "email": "palmer@rivosinc.com", "time": "Thu Jan 09 09:35:36 2025 -0800" }, "message": "tools: selftests: riscv: Add pass message for v_initval_nolibc\n\nAdd the pass message after we successfully complete the test.\n\nFixes: 5c93c4c72fbc (\"selftests: Test RISC-V Vector\u0027s first-use handler\")\nSigned-off-by: Yong-Xuan Wang \u003cyongxuan.wang@sifive.com\u003e\nReviewed-by: Andrew Jones \u003cajones@ventanamicro.com\u003e\nReviewed-by: Andy Chiu \u003cAndybnAC@gmail.com\u003e\nLink: https://lore.kernel.org/r/20241220091730.28006-2-yongxuan.wang@sifive.com\nSigned-off-by: Palmer Dabbelt \u003cpalmer@rivosinc.com\u003e\n" }, { "commit": "b5cf67a8f716afbd7f8416edfe898c2df460811a", "tree": "3eb08e8300e0309e5cf267cb5f333c33a8905782", "parents": [ "2664bc9c7d59086e27415b66245f7d83b6c36b40", "b541ba7d1f5a5b7b3e2e22dc9e40e18a7d6dbc13" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jan 09 08:54:49 2025 -0800" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jan 09 08:54:49 2025 -0800" }, "message": "Merge tag \u0027nf-25-01-09\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf\n\nPablo Neira Ayuso says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nNetfilter fixes for net\n\nThe following patchset contains Netfilter fixes for net:\n\n1) Fix imbalance between flowtable BIND and UNBIND calls to configure\n hardware offload, this fixes a possible kmemleak.\n\n2) Clamp maximum conntrack hashtable size to INT_MAX to fix a possible\n WARN_ON_ONCE splat coming from kvmalloc_array(), only possible from\n init_netns.\n\n* tag \u0027nf-25-01-09\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf:\n netfilter: conntrack: clamp maximum hashtable size to INT_MAX\n netfilter: nf_tables: imbalance in flowtable binding\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20250109123532.41768-1-pablo@netfilter.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "2664bc9c7d59086e27415b66245f7d83b6c36b40", "tree": "a865532db4e0b0838bd448a6d8570c64b3864997", "parents": [ "92afd9f3bc22c92a88a8972eb34a9ef814d3286b", "7f5611cbc4871c7fb1ad36c2e5a9edad63dca95c" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jan 09 08:53:37 2025 -0800" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jan 09 08:53:37 2025 -0800" }, "message": "Merge branch \u0027net-sysctl-avoid-using-current-nsproxy\u0027\n\nMatthieu Baerts says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nnet: sysctl: avoid using current-\u003ensproxy\n\nAs pointed out by Al Viro and Eric Dumazet in [1], using the \u0027net\u0027\nstructure via \u0027current\u0027 is not recommended for different reasons:\n\n- Inconsistency: getting info from the reader\u0027s/writer\u0027s netns vs only\n from the opener\u0027s netns as it is usually done. This could cause\n unexpected issues when other operations are done on the wrong netns.\n\n- current-\u003ensproxy can be NULL in some cases, resulting in an \u0027Oops\u0027\n (null-ptr-deref), e.g. when the current task is exiting, as spotted by\n syzbot [1] using acct(2).\n\nThe \u0027net\u0027 or \u0027pernet\u0027 structure can be obtained from the table-\u003edata\nusing container_of().\n\nNote that table-\u003edata could also be used directly in more places, but\nthat would increase the size of this fix to replace all accesses via\n\u0027net\u0027. Probably best to avoid that for fixes.\n\nPatches 2-9 remove access of net via current-\u003ensproxy in sysfs handlers\nin MPTCP, SCTP and RDS. There are multiple patches doing almost the same\nthing, but the reason is to ease the backports.\n\nPatch 1 is not directly linked to this, but it is a small fix for MPTCP\navailable_schedulers sysctl knob to explicitly mark it as read-only.\n\nPlease note that this series does not address Al\u0027s comment [2]. In SCTP,\nsome sysctl knobs set other sysfs-exposed variables for the min/max: two\nprocesses could then write two linked values at the same time, resulting\nin new values being outside the new boundaries. It would be great if\nSCTP developers can look at this problem.\n\nLink: https://lore.kernel.org/67769ecb.050a0220.3a8527.003f.GAE@google.com [1]\nLink: https://lore.kernel.org/20250105211158.GL1977892@ZenIV [2]\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20250108-net-sysctl-current-nsproxy-v1-0-5df34b2083e8@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "7f5611cbc4871c7fb1ad36c2e5a9edad63dca95c", "tree": "a865532db4e0b0838bd448a6d8570c64b3864997", "parents": [ "6259d2484d0ceff42245d1f09cc8cb6ee72d847a" ], "author": { "name": "Matthieu Baerts (NGI0)", "email": "matttbe@kernel.org", "time": "Wed Jan 08 16:34:37 2025 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jan 09 08:53:35 2025 -0800" }, "message": "rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current-\u003ensproxy\n\nAs mentioned in a previous commit of this series, using the \u0027net\u0027\nstructure via \u0027current\u0027 is not recommended for different reasons:\n\n- Inconsistency: getting info from the reader\u0027s/writer\u0027s netns vs only\n from the opener\u0027s netns.\n\n- current-\u003ensproxy can be NULL in some cases, resulting in an \u0027Oops\u0027\n (null-ptr-deref), e.g. when the current task is exiting, as spotted by\n syzbot [1] using acct(2).\n\nThe per-netns structure can be obtained from the table-\u003edata using\ncontainer_of(), then the \u0027net\u0027 one can be retrieved from the listen\nsocket (if available).\n\nFixes: c6a58ffed536 (\"RDS: TCP: Add sysctl tunables for sndbuf/rcvbuf on rds-tcp socket\")\nCc: stable@vger.kernel.org\nLink: https://lore.kernel.org/67769ecb.050a0220.3a8527.003f.GAE@google.com [1]\nSuggested-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nLink: https://patch.msgid.link/20250108-net-sysctl-current-nsproxy-v1-9-5df34b2083e8@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "6259d2484d0ceff42245d1f09cc8cb6ee72d847a", "tree": "a69d9b39e86b199c21674d1c783eda7534b66854", "parents": [ "c10377bbc1972d858eaf0ab366a311b39f8ef1b6" ], "author": { "name": "Matthieu Baerts (NGI0)", "email": "matttbe@kernel.org", "time": "Wed Jan 08 16:34:36 2025 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jan 09 08:53:35 2025 -0800" }, "message": "sctp: sysctl: plpmtud_probe_interval: avoid using current-\u003ensproxy\n\nAs mentioned in a previous commit of this series, using the \u0027net\u0027\nstructure via \u0027current\u0027 is not recommended for different reasons:\n\n- Inconsistency: getting info from the reader\u0027s/writer\u0027s netns vs only\n from the opener\u0027s netns.\n\n- current-\u003ensproxy can be NULL in some cases, resulting in an \u0027Oops\u0027\n (null-ptr-deref), e.g. when the current task is exiting, as spotted by\n syzbot [1] using acct(2).\n\nThe \u0027net\u0027 structure can be obtained from the table-\u003edata using\ncontainer_of().\n\nNote that table-\u003edata could also be used directly, as this is the only\nmember needed from the \u0027net\u0027 structure, but that would increase the size\nof this fix, to use \u0027*data\u0027 everywhere \u0027net-\u003esctp.probe_interval\u0027 is\nused.\n\nFixes: d1e462a7a5f3 (\"sctp: add probe_interval in sysctl and sock/asoc/transport\")\nCc: stable@vger.kernel.org\nLink: https://lore.kernel.org/67769ecb.050a0220.3a8527.003f.GAE@google.com [1]\nSuggested-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nLink: https://patch.msgid.link/20250108-net-sysctl-current-nsproxy-v1-8-5df34b2083e8@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "c10377bbc1972d858eaf0ab366a311b39f8ef1b6", "tree": "b8e7cf4cc508fad32d8edd12827d9e7dc3aa0455", "parents": [ "15649fd5415eda664ef35780c2013adeb5d9c695" ], "author": { "name": "Matthieu Baerts (NGI0)", "email": "matttbe@kernel.org", "time": "Wed Jan 08 16:34:35 2025 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jan 09 08:53:35 2025 -0800" }, "message": "sctp: sysctl: udp_port: avoid using current-\u003ensproxy\n\nAs mentioned in a previous commit of this series, using the \u0027net\u0027\nstructure via \u0027current\u0027 is not recommended for different reasons:\n\n- Inconsistency: getting info from the reader\u0027s/writer\u0027s netns vs only\n from the opener\u0027s netns.\n\n- current-\u003ensproxy can be NULL in some cases, resulting in an \u0027Oops\u0027\n (null-ptr-deref), e.g. when the current task is exiting, as spotted by\n syzbot [1] using acct(2).\n\nThe \u0027net\u0027 structure can be obtained from the table-\u003edata using\ncontainer_of().\n\nNote that table-\u003edata could also be used directly, but that would\nincrease the size of this fix, while \u0027sctp.ctl_sock\u0027 still needs to be\nretrieved from \u0027net\u0027 structure.\n\nFixes: 046c052b475e (\"sctp: enable udp tunneling socks\")\nCc: stable@vger.kernel.org\nLink: https://lore.kernel.org/67769ecb.050a0220.3a8527.003f.GAE@google.com [1]\nSuggested-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nLink: https://patch.msgid.link/20250108-net-sysctl-current-nsproxy-v1-7-5df34b2083e8@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "15649fd5415eda664ef35780c2013adeb5d9c695", "tree": "9edc89c9b7a78fa87827b82561c83f95617f70d1", "parents": [ "9fc17b76fc70763780aa78b38fcf4742384044a5" ], "author": { "name": "Matthieu Baerts (NGI0)", "email": "matttbe@kernel.org", "time": "Wed Jan 08 16:34:34 2025 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jan 09 08:53:35 2025 -0800" }, "message": "sctp: sysctl: auth_enable: avoid using current-\u003ensproxy\n\nAs mentioned in a previous commit of this series, using the \u0027net\u0027\nstructure via \u0027current\u0027 is not recommended for different reasons:\n\n- Inconsistency: getting info from the reader\u0027s/writer\u0027s netns vs only\n from the opener\u0027s netns.\n\n- current-\u003ensproxy can be NULL in some cases, resulting in an \u0027Oops\u0027\n (null-ptr-deref), e.g. when the current task is exiting, as spotted by\n syzbot [1] using acct(2).\n\nThe \u0027net\u0027 structure can be obtained from the table-\u003edata using\ncontainer_of().\n\nNote that table-\u003edata could also be used directly, but that would\nincrease the size of this fix, while \u0027sctp.ctl_sock\u0027 still needs to be\nretrieved from \u0027net\u0027 structure.\n\nFixes: b14878ccb7fa (\"net: sctp: cache auth_enable per endpoint\")\nCc: stable@vger.kernel.org\nLink: https://lore.kernel.org/67769ecb.050a0220.3a8527.003f.GAE@google.com [1]\nSuggested-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nLink: https://patch.msgid.link/20250108-net-sysctl-current-nsproxy-v1-6-5df34b2083e8@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "9fc17b76fc70763780aa78b38fcf4742384044a5", "tree": "425397f829a534e642559c259f190c1417038f42", "parents": [ "ea62dd1383913b5999f3d16ae99d411f41b528d4" ], "author": { "name": "Matthieu Baerts (NGI0)", "email": "matttbe@kernel.org", "time": "Wed Jan 08 16:34:33 2025 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jan 09 08:53:34 2025 -0800" }, "message": "sctp: sysctl: rto_min/max: avoid using current-\u003ensproxy\n\nAs mentioned in a previous commit of this series, using the \u0027net\u0027\nstructure via \u0027current\u0027 is not recommended for different reasons:\n\n- Inconsistency: getting info from the reader\u0027s/writer\u0027s netns vs only\n from the opener\u0027s netns.\n\n- current-\u003ensproxy can be NULL in some cases, resulting in an \u0027Oops\u0027\n (null-ptr-deref), e.g. when the current task is exiting, as spotted by\n syzbot [1] using acct(2).\n\nThe \u0027net\u0027 structure can be obtained from the table-\u003edata using\ncontainer_of().\n\nNote that table-\u003edata could also be used directly, as this is the only\nmember needed from the \u0027net\u0027 structure, but that would increase the size\nof this fix, to use \u0027*data\u0027 everywhere \u0027net-\u003esctp.rto_min/max\u0027 is used.\n\nFixes: 4f3fdf3bc59c (\"sctp: add check rto_min and rto_max in sysctl\")\nCc: stable@vger.kernel.org\nLink: https://lore.kernel.org/67769ecb.050a0220.3a8527.003f.GAE@google.com [1]\nSuggested-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nLink: https://patch.msgid.link/20250108-net-sysctl-current-nsproxy-v1-5-5df34b2083e8@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "ea62dd1383913b5999f3d16ae99d411f41b528d4", "tree": "414924839cdd9ab6ba6b67991929db5b439a927b", "parents": [ "92cf7a51bdae24a32c592adcdd59a773ae149289" ], "author": { "name": "Matthieu Baerts (NGI0)", "email": "matttbe@kernel.org", "time": "Wed Jan 08 16:34:32 2025 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jan 09 08:53:34 2025 -0800" }, "message": "sctp: sysctl: cookie_hmac_alg: avoid using current-\u003ensproxy\n\nAs mentioned in a previous commit of this series, using the \u0027net\u0027\nstructure via \u0027current\u0027 is not recommended for different reasons:\n\n- Inconsistency: getting info from the reader\u0027s/writer\u0027s netns vs only\n from the opener\u0027s netns.\n\n- current-\u003ensproxy can be NULL in some cases, resulting in an \u0027Oops\u0027\n (null-ptr-deref), e.g. when the current task is exiting, as spotted by\n syzbot [1] using acct(2).\n\nThe \u0027net\u0027 structure can be obtained from the table-\u003edata using\ncontainer_of().\n\nNote that table-\u003edata could also be used directly, as this is the only\nmember needed from the \u0027net\u0027 structure, but that would increase the size\nof this fix, to use \u0027*data\u0027 everywhere \u0027net-\u003esctp.sctp_hmac_alg\u0027 is\nused.\n\nFixes: 3c68198e7511 (\"sctp: Make hmac algorithm selection for cookie generation dynamic\")\nCc: stable@vger.kernel.org\nLink: https://lore.kernel.org/67769ecb.050a0220.3a8527.003f.GAE@google.com [1]\nSuggested-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nLink: https://patch.msgid.link/20250108-net-sysctl-current-nsproxy-v1-4-5df34b2083e8@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "92cf7a51bdae24a32c592adcdd59a773ae149289", "tree": "b479ef8febb691eb1f699d15b25488cd1dda3d7b", "parents": [ "d38e26e36206ae3d544d496513212ae931d1da0a" ], "author": { "name": "Matthieu Baerts (NGI0)", "email": "matttbe@kernel.org", "time": "Wed Jan 08 16:34:31 2025 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jan 09 08:53:34 2025 -0800" }, "message": "mptcp: sysctl: blackhole timeout: avoid using current-\u003ensproxy\n\nAs mentioned in the previous commit, using the \u0027net\u0027 structure via\n\u0027current\u0027 is not recommended for different reasons:\n\n- Inconsistency: getting info from the reader\u0027s/writer\u0027s netns vs only\n from the opener\u0027s netns.\n\n- current-\u003ensproxy can be NULL in some cases, resulting in an \u0027Oops\u0027\n (null-ptr-deref), e.g. when the current task is exiting, as spotted by\n syzbot [1] using acct(2).\n\nThe \u0027pernet\u0027 structure can be obtained from the table-\u003edata using\ncontainer_of().\n\nFixes: 27069e7cb3d1 (\"mptcp: disable active MPTCP in case of blackhole\")\nCc: stable@vger.kernel.org\nLink: https://lore.kernel.org/67769ecb.050a0220.3a8527.003f.GAE@google.com [1]\nSuggested-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nReviewed-by: Mat Martineau \u003cmartineau@kernel.org\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nLink: https://patch.msgid.link/20250108-net-sysctl-current-nsproxy-v1-3-5df34b2083e8@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "d38e26e36206ae3d544d496513212ae931d1da0a", "tree": "f93e5986e07b9c9a12db54fa4bbf6bc1a5af035c", "parents": [ "771ec78dc8b48d562e6015bb535ed3cd37043d78" ], "author": { "name": "Matthieu Baerts (NGI0)", "email": "matttbe@kernel.org", "time": "Wed Jan 08 16:34:30 2025 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jan 09 08:53:34 2025 -0800" }, "message": "mptcp: sysctl: sched: avoid using current-\u003ensproxy\n\nUsing the \u0027net\u0027 structure via \u0027current\u0027 is not recommended for different\nreasons.\n\nFirst, if the goal is to use it to read or write per-netns data, this is\ninconsistent with how the \"generic\" sysctl entries are doing: directly\nby only using pointers set to the table entry, e.g. table-\u003edata. Linked\nto that, the per-netns data should always be obtained from the table\nlinked to the netns it had been created for, which may not coincide with\nthe reader\u0027s or writer\u0027s netns.\n\nAnother reason is that access to current-\u003ensproxy-\u003enetns can oops if\nattempted when current-\u003ensproxy had been dropped when the current task\nis exiting. This is what syzbot found, when using acct(2):\n\n Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN PTI\n KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]\n CPU: 1 UID: 0 PID: 5924 Comm: syz-executor Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n RIP: 0010:proc_scheduler+0xc6/0x3c0 net/mptcp/ctrl.c:125\n Code: 03 42 80 3c 38 00 0f 85 fe 02 00 00 4d 8b a4 24 08 09 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7c 24 28 48 89 fa 48 c1 ea 03 \u003c80\u003e 3c 02 00 0f 85 cc 02 00 00 4d 8b 7c 24 28 48 8d 84 24 c8 00 00\n RSP: 0018:ffffc900034774e8 EFLAGS: 00010206\n\n RAX: dffffc0000000000 RBX: 1ffff9200068ee9e RCX: ffffc90003477620\n RDX: 0000000000000005 RSI: ffffffff8b08f91e RDI: 0000000000000028\n RBP: 0000000000000001 R08: ffffc90003477710 R09: 0000000000000040\n R10: 0000000000000040 R11: 00000000726f7475 R12: 0000000000000000\n R13: ffffc90003477620 R14: ffffc90003477710 R15: dffffc0000000000\n FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00007fee3cd452d8 CR3: 000000007d116000 CR4: 00000000003526f0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n Call Trace:\n \u003cTASK\u003e\n proc_sys_call_handler+0x403/0x5d0 fs/proc/proc_sysctl.c:601\n __kernel_write_iter+0x318/0xa80 fs/read_write.c:612\n __kernel_write+0xf6/0x140 fs/read_write.c:632\n do_acct_process+0xcb0/0x14a0 kernel/acct.c:539\n acct_pin_kill+0x2d/0x100 kernel/acct.c:192\n pin_kill+0x194/0x7c0 fs/fs_pin.c:44\n mnt_pin_kill+0x61/0x1e0 fs/fs_pin.c:81\n cleanup_mnt+0x3ac/0x450 fs/namespace.c:1366\n task_work_run+0x14e/0x250 kernel/task_work.c:239\n exit_task_work include/linux/task_work.h:43 [inline]\n do_exit+0xad8/0x2d70 kernel/exit.c:938\n do_group_exit+0xd3/0x2a0 kernel/exit.c:1087\n get_signal+0x2576/0x2610 kernel/signal.c:3017\n arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337\n exit_to_user_mode_loop kernel/entry/common.c:111 [inline]\n exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]\n __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]\n syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218\n do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n RIP: 0033:0x7fee3cb87a6a\n Code: Unable to access opcode bytes at 0x7fee3cb87a40.\n RSP: 002b:00007fffcccac688 EFLAGS: 00000202 ORIG_RAX: 0000000000000037\n RAX: 0000000000000000 RBX: 00007fffcccac710 RCX: 00007fee3cb87a6a\n RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003\n RBP: 0000000000000003 R08: 00007fffcccac6ac R09: 00007fffcccacac7\n R10: 00007fffcccac710 R11: 0000000000000202 R12: 00007fee3cd49500\n R13: 00007fffcccac6ac R14: 0000000000000000 R15: 00007fee3cd4b000\n \u003c/TASK\u003e\n Modules linked in:\n ---[ end trace 0000000000000000 ]---\n RIP: 0010:proc_scheduler+0xc6/0x3c0 net/mptcp/ctrl.c:125\n Code: 03 42 80 3c 38 00 0f 85 fe 02 00 00 4d 8b a4 24 08 09 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7c 24 28 48 89 fa 48 c1 ea 03 \u003c80\u003e 3c 02 00 0f 85 cc 02 00 00 4d 8b 7c 24 28 48 8d 84 24 c8 00 00\n RSP: 0018:ffffc900034774e8 EFLAGS: 00010206\n RAX: dffffc0000000000 RBX: 1ffff9200068ee9e RCX: ffffc90003477620\n RDX: 0000000000000005 RSI: ffffffff8b08f91e RDI: 0000000000000028\n RBP: 0000000000000001 R08: ffffc90003477710 R09: 0000000000000040\n R10: 0000000000000040 R11: 00000000726f7475 R12: 0000000000000000\n R13: ffffc90003477620 R14: ffffc90003477710 R15: dffffc0000000000\n FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00007fee3cd452d8 CR3: 000000007d116000 CR4: 00000000003526f0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n ----------------\n Code disassembly (best guess), 1 bytes skipped:\n 0:\t42 80 3c 38 00 \tcmpb $0x0,(%rax,%r15,1)\n 5:\t0f 85 fe 02 00 00 \tjne 0x309\n b:\t4d 8b a4 24 08 09 00 \tmov 0x908(%r12),%r12\n 12:\t00\n 13:\t48 b8 00 00 00 00 00 \tmovabs $0xdffffc0000000000,%rax\n 1a:\tfc ff df\n 1d:\t49 8d 7c 24 28 \tlea 0x28(%r12),%rdi\n 22:\t48 89 fa \tmov %rdi,%rdx\n 25:\t48 c1 ea 03 \tshr $0x3,%rdx\n * 29:\t80 3c 02 00 \tcmpb $0x0,(%rdx,%rax,1) \u003c-- trapping instruction\n 2d:\t0f 85 cc 02 00 00 \tjne 0x2ff\n 33:\t4d 8b 7c 24 28 \tmov 0x28(%r12),%r15\n 38:\t48 \trex.W\n 39:\t8d \t.byte 0x8d\n 3a:\t84 24 c8 \ttest %ah,(%rax,%rcx,8)\n\nHere with \u0027net.mptcp.scheduler\u0027, the \u0027net\u0027 structure is not really\nneeded, because the table-\u003edata already has a pointer to the current\nscheduler, the only thing needed from the per-netns data.\nSimply use \u0027data\u0027, instead of getting (most of the time) the same thing,\nbut from a longer and indirect way.\n\nFixes: 6963c508fd7a (\"mptcp: only allow set existing scheduler for net.mptcp.scheduler\")\nCc: stable@vger.kernel.org\nReported-by: syzbot+e364f774c6f57f2c86d1@syzkaller.appspotmail.com\nCloses: https://lore.kernel.org/67769ecb.050a0220.3a8527.003f.GAE@google.com\nSuggested-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nReviewed-by: Mat Martineau \u003cmartineau@kernel.org\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nLink: https://patch.msgid.link/20250108-net-sysctl-current-nsproxy-v1-2-5df34b2083e8@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" } ], "next": "771ec78dc8b48d562e6015bb535ed3cd37043d78" }