)]}' { "log": [ { "commit": "2ef5971ff345d3c000873725db555085e0131961", "tree": "4f499571c0402e207d42e102ab2b1adbcff2c72e", "parents": [ "83a7eefedc9b56fe7bfeff13b6c7356688ffa670", "f5ceb1bbc98c69536d4673a97315e8427e67de1b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Jun 11 12:04:21 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Jun 11 12:04:21 2024 -0700" }, "message": "Merge tag \u0027vfs-6.10-rc4.fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs\n\nPull vfs fixes from Christian Brauner:\n \"Misc:\n - Restore debugfs behavior of ignoring unknown mount options\n - Fix kernel doc for netfs_wait_for_oustanding_io()\n - Fix struct statx comment after new addition for this cycle\n - Fix a check in find_next_fd()\n\n iomap:\n - Fix data zeroing behavior when an extent spans the block that\n contains i_size\n - Restore i_size increasing in iomap_write_end() for now to avoid\n stale data exposure on xfs with a realtime device\n\n Cachefiles:\n - Remove unneeded fdtable.h include\n - Improve trace output for cachefiles_obj_{get,put}_ondemand_fd()\n - Remove requests from the request list to prevent accessing already\n freed requests\n - Fix UAF when issuing restore command while the daemon is still\n alive by adding an additional reference count to requests\n - Fix UAF by grabbing a reference during xarray lookup with xa_lock()\n held\n - Simplify error handling in cachefiles_ondemand_daemon_read()\n - Add consistency checks read and open requests to avoid crashes\n - Add a spinlock to protect ondemand_id variable which is used to\n determine whether an anonymous cachefiles fd has already been\n closed\n - Make on-demand reads killable allowing to handle broken cachefiles\n daemon better\n - Flush all requests after the kernel has been marked dead via\n CACHEFILES_DEAD to avoid hung-tasks\n - Ensure that closed requests are marked as such to avoid reusing\n them with a reopen request\n - Defer fd_install() until after copy_to_user() succeeded and thereby\n get rid of having to use close_fd()\n - Ensure that anonymous cachefiles on-demand fds are reused while\n they are valid to avoid pinning already freed cookies\"\n\n* tag \u0027vfs-6.10-rc4.fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs:\n iomap: Fix iomap_adjust_read_range for plen calculation\n iomap: keep on increasing i_size in iomap_write_end()\n cachefiles: remove unneeded include of \u003clinux/fdtable.h\u003e\n fs/file: fix the check in find_next_fd()\n cachefiles: make on-demand read killable\n cachefiles: flush all requests after setting CACHEFILES_DEAD\n cachefiles: Set object to close if ondemand_id \u003c 0 in copen\n cachefiles: defer exposing anon_fd until after copy_to_user() succeeds\n cachefiles: never get a new anonymous fd if ondemand_id is valid\n cachefiles: add spin_lock for cachefiles_ondemand_info\n cachefiles: add consistency check for copen/cread\n cachefiles: remove err_put_fd label in cachefiles_ondemand_daemon_read()\n cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()\n cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()\n cachefiles: remove requests from xarray during flushing requests\n cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd\n statx: Update offset commentary for struct statx\n netfs: fix kernel doc for nets_wait_for_outstanding_io()\n debugfs: continue to ignore unknown mount options\n" }, { "commit": "83a7eefedc9b56fe7bfeff13b6c7356688ffa670", "tree": "5f2e5cdee3e379d8951a4dd3c21b3436bba99f15", "parents": [ "b8481381d4e2549f06812eb6069198144696340c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jun 09 14:19:43 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jun 09 14:19:43 2024 -0700" }, "message": "Linux 6.10-rc3\n" }, { "commit": "b8481381d4e2549f06812eb6069198144696340c", "tree": "f89a2db5e640f6f601b40ca6a4d5e9028e00bcb1", "parents": [ "637c2dfcd9f5e194ab2e879704460840edcde537", "ca9680821dfec73c9100860bda4fab1f1309722e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jun 09 09:04:51 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jun 09 09:04:51 2024 -0700" }, "message": "Merge tag \u0027perf-tools-fixes-for-v6.10-2-2024-06-09\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/perf/perf-tools\n\nPull perf tools fixes from Arnaldo Carvalho de Melo:\n\n - Update copies of kernel headers, which resulted in support for the\n new \u0027mseal\u0027 syscall, SUBVOL statx return mask bit, RISC-V and PPC\n prctls, fcntl\u0027s DUPFD_QUERY, POSTED_MSI_NOTIFICATION IRQ vector,\n \u0027map_shadow_stack\u0027 syscall for x86-32.\n\n - Revert perf.data record memory allocation optimization that ended up\n causing a regression, work is being done to re-introduce it in the\n next merge window.\n\n - Fix handling of minimal vmlinux.h file used with BPF\u0027s CO-RE when\n interrupting the build.\n\n* tag \u0027perf-tools-fixes-for-v6.10-2-2024-06-09\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/perf/perf-tools:\n perf bpf: Fix handling of minimal vmlinux.h file when interrupting the build\n Revert \"perf record: Reduce memory for recording PERF_RECORD_LOST_SAMPLES event\"\n tools headers arm64: Sync arm64\u0027s cputype.h with the kernel sources\n tools headers uapi: Sync linux/stat.h with the kernel sources to pick STATX_SUBVOL\n tools headers UAPI: Update i915_drm.h with the kernel sources\n tools headers UAPI: Sync kvm headers with the kernel sources\n tools arch x86: Sync the msr-index.h copy with the kernel sources\n tools headers: Update the syscall tables and unistd.h, mostly to support the new \u0027mseal\u0027 syscall\n perf trace beauty: Update the arch/x86/include/asm/irq_vectors.h copy with the kernel sources to pick POSTED_MSI_NOTIFICATION\n perf beauty: Update copy of linux/socket.h with the kernel sources\n tools headers UAPI: Sync fcntl.h with the kernel sources to pick F_DUPFD_QUERY\n tools headers UAPI: Sync linux/prctl.h with the kernel sources\n tools include UAPI: Sync linux/stat.h with the kernel sources\n" }, { "commit": "637c2dfcd9f5e194ab2e879704460840edcde537", "tree": "93f2c05c6b34e64dede0da4481ac7d2866682f84", "parents": [ "771ed66105de9106a6f3e4311e06451881cdac5e", "f8367a74aebf88dc8b58a0db6a6c90b4cb8fc9d3" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jun 09 08:49:13 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jun 09 08:49:13 2024 -0700" }, "message": "Merge tag \u0027edac_urgent_for_v6.10_rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ras/ras\n\nPull EDAC fixes from Borislav Petkov:\n\n - Convert PCI core error codes to proper error numbers since latter get\n propagated all the way up to the module loading functions\n\n* tag \u0027edac_urgent_for_v6.10_rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ras/ras:\n EDAC/igen6: Convert PCIBIOS_* return codes to errnos\n EDAC/amd64: Convert PCIBIOS_* return codes to errnos\n" }, { "commit": "771ed66105de9106a6f3e4311e06451881cdac5e", "tree": "ab1870ddd7f82baf6ea6542b672267185d87d054", "parents": [ "c5dbc2ed0006d1a910b5496202a280138ce596e4", "2607133196c35f31892ee199ce7ffa717bea4ad1" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 19:14:02 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 19:14:02 2024 -0700" }, "message": "Merge tag \u0027clk-fixes-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux\n\nPull clk fix from Stephen Boyd:\n \"One fix for the SiFive PRCI clocks so that the device boots again.\n\n This driver was registering clkdev lookups that were always going to\n be useless. This wasn\u0027t a problem until clkdev started returning an\n error in these cases, causing this driver to fail probe, and thus boot\n to fail because clks are essential for most drivers. The fix is\n simple, don\u0027t use clkdev because this is a DT based system where\n clkdev isn\u0027t used\"\n\n* tag \u0027clk-fixes-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux:\n clk: sifive: Do not register clkdevs for PRCI clocks\n" }, { "commit": "c5dbc2ed0006d1a910b5496202a280138ce596e4", "tree": "ef71203a29389a98276fc24e999065a450538381", "parents": [ "061d1af7b0305227182bd9da60c7706c079348b7", "a88d60903696c01de577558080ec4fc738a70475" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 19:07:18 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 19:07:18 2024 -0700" }, "message": "Merge tag \u00276.10-rc2-smb3-client-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6\n\nPull smb client fixes from Steve French:\n \"Two small smb3 client fixes:\n\n - fix deadlock in umount\n\n - minor cleanup due to netfs change\"\n\n* tag \u00276.10-rc2-smb3-client-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6:\n cifs: Don\u0027t advance the I/O iterator before terminating subrequest\n smb: client: fix deadlock in smb2_find_smb_tcon()\n" }, { "commit": "061d1af7b0305227182bd9da60c7706c079348b7", "tree": "e7e9948c1a629bc86c36e22ebf5c22cff36ebbbc", "parents": [ "329f70c5beaefe0e1197b7919e776dc005213b59", "a3a5a37efba11b7cf1a86abe7bccfbcdb521764e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 10:48:11 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 10:48:11 2024 -0700" }, "message": "Merge tag \u0027for-linus-2024060801\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid\n\nPull HID fixes from Benjamin Tissoires:\n\n - fix potential read out of bounds in hid-asus (Andrew Ballance)\n\n - fix endian-conversion on little endian systems in intel-ish-hid (Arnd\n Bergmann)\n\n - A couple of new input event codes (Aseda Aboagye)\n\n - errors handling fixes in hid-nvidia-shield (Chen Ni), hid-nintendo\n (Christophe JAILLET), hid-logitech-dj (José Expósito)\n\n - current leakage fix while the device is in suspend on a i2c-hid\n laptop (Johan Hovold)\n\n - other assorted smaller fixes and device ID / quirk entry additions\n\n* tag \u0027for-linus-2024060801\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid:\n HID: Ignore battery for ELAN touchscreens 2F2C and 4116\n HID: i2c-hid: elan: fix reset suspend current leakage\n dt-bindings: HID: i2c-hid: elan: add \u0027no-reset-on-power-off\u0027 property\n dt-bindings: HID: i2c-hid: elan: add Elan eKTH5015M\n dt-bindings: HID: i2c-hid: add dedicated Ilitek ILI2901 schema\n input: Add support for \"Do Not Disturb\"\n input: Add event code for accessibility key\n hid: asus: asus_report_fixup: fix potential read out of bounds\n HID: logitech-hidpp: add missing MODULE_DESCRIPTION() macro\n HID: intel-ish-hid: fix endian-conversion\n HID: nintendo: Fix an error handling path in nintendo_hid_probe()\n HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()\n HID: core: remove unnecessary WARN_ON() in implement()\n HID: nvidia-shield: Add missing check for input_ff_create_memless\n HID: intel-ish-hid: Fix build error for COMPILE_TEST\n" }, { "commit": "329f70c5beaefe0e1197b7919e776dc005213b59", "tree": "5a4b9687e6d15fcfa935384979114c463ad1df15", "parents": [ "1e7ccdd3255c9d146cc077d681c56e4559f90cda", "9185afeac2a3dcce8300a5684291a43c2838cfd6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 10:12:33 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 10:12:33 2024 -0700" }, "message": "Merge tag \u0027kbuild-fixes-v6.10-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild\n\nPull Kbuild fixes from Masahiro Yamada:\n\n - Fix the initial state of the save button in \u0027make gconfig\u0027\n\n - Improve the Kconfig documentation\n\n - Fix a Kconfig bug regarding property visibility\n\n - Fix build breakage for systems where \u0027sed\u0027 is not installed in /bin\n\n - Fix a false warning about missing MODULE_DESCRIPTION()\n\n* tag \u0027kbuild-fixes-v6.10-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild:\n modpost: do not warn about missing MODULE_DESCRIPTION() for vmlinux.o\n kbuild: explicitly run mksysmap as sed script from link-vmlinux.sh\n kconfig: remove wrong expr_trans_bool()\n kconfig: doc: document behavior of \u0027select\u0027 and \u0027imply\u0027 followed by \u0027if\u0027\n kconfig: doc: fix a typo in the note about \u0027imply\u0027\n kconfig: gconf: give a proper initial state to the Save button\n kconfig: remove unneeded code for user-supplied values being out of range\n" }, { "commit": "1e7ccdd3255c9d146cc077d681c56e4559f90cda", "tree": "8dc2292551cfe45d5da91d9b4ab914f718e2bdd1", "parents": [ "36714d69b186ab38f2f9eb833a2dfa57878095c6", "ffb9072bce200a4d004006e8b40c366933cf517b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 09:57:09 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 09:57:09 2024 -0700" }, "message": "Merge tag \u0027media/v6.10-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media\n\nPull media fixes from Mauro Carvalho Chehab:\n\n - fixes for the new ipu6 driver (and related fixes to mei csi driver)\n\n - fix a double debugfs remove logic at mgb4 driver\n\n - a documentation fix\n\n* tag \u0027media/v6.10-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media:\n media: intel/ipu6: add csi2 port sanity check in notifier bound\n media: intel/ipu6: update the maximum supported csi2 port number to 6\n media: mei: csi: Warn less verbosely of a missing device fwnode\n media: mei: csi: Put the IPU device reference\n media: intel/ipu6: fix the buffer flags caused by wrong parentheses\n media: intel/ipu6: Fix an error handling path in isys_probe()\n media: intel/ipu6: Move isys_remove() close to isys_probe()\n media: intel/ipu6: Fix some redundant resources freeing in ipu6_pci_remove()\n media: Documentation: v4l: Fix ACTIVE route flag\n media: mgb4: Fix double debugfs remove\n" }, { "commit": "36714d69b186ab38f2f9eb833a2dfa57878095c6", "tree": "97a98dfc94aedce84df667b1004427dcf720a349", "parents": [ "7cedb020d537105acdc9e9311a0c30d110043491", "b97e8a2f7130a4b30d1502003095833d16c028b3" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 09:44:50 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 09:44:50 2024 -0700" }, "message": "Merge tag \u0027irq-urgent-2024-06-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull irq fixes from Ingo Molnar:\n\n - Fix possible memory leak the riscv-intc irqchip driver load failures\n\n - Fix boot crash in the sifive-plic irqchip driver caused by recently\n changed boot initialization order\n\n - Fix race condition in the gic-v3-its irqchip driver\n\n* tag \u0027irq-urgent-2024-06-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n irqchip/gic-v3-its: Fix potential race condition in its_vlpi_prop_update()\n irqchip/sifive-plic: Chain to parent IRQ after handlers are ready\n irqchip/riscv-intc: Prevent memory leak when riscv_intc_init_common() fails\n" }, { "commit": "7cedb020d537105acdc9e9311a0c30d110043491", "tree": "a7b26f0ee01dfb0cef1ad25a40735b9fa4ebe332", "parents": [ "7cec2e16cb62ed597791fb2d266e5ddd5818f1b3", "c625dabbf1c4a8e77e4734014f2fde7aa9071a1f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 09:36:08 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 09:36:08 2024 -0700" }, "message": "Merge tag \u0027x86-urgent-2024-06-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull x86 fixes from Ingo Molnar:\n \"Miscellaneous fixes:\n\n - Fix kexec() crash if call depth tracking is enabled\n\n - Fix SMN reads on inaccessible registers on certain AMD systems\"\n\n* tag \u0027x86-urgent-2024-06-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n x86/amd_nb: Check for invalid SMN reads\n x86/kexec: Fix bug with call depth tracking\n" }, { "commit": "7cec2e16cb62ed597791fb2d266e5ddd5818f1b3", "tree": "c6cefa738f5c236b9a785b02de5f1fe8e3787ef4", "parents": [ "bbc5332b8cda95cd081cff9c405c1cfece872f20", "74751ef5c1912ebd3e65c3b65f45587e05ce5d36" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 09:26:59 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 09:26:59 2024 -0700" }, "message": "Merge tag \u0027perf-urgent-2024-06-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull perf event fix from Ingo Molnar:\n \"Fix race between perf_event_free_task() and perf_event_release_kernel()\n that can result in missed wakeups and hung tasks\"\n\n* tag \u0027perf-urgent-2024-06-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n perf/core: Fix missing wakeup when waiting for context reference\n" }, { "commit": "bbc5332b8cda95cd081cff9c405c1cfece872f20", "tree": "5dde6c2ace35b3c72111edcc41db6752c17df293", "parents": [ "dc772f8237f9b0c9ea3f34d0dc4a57d1f6a5070d", "f92a59f6d12e31ead999fee9585471b95a8ae8a3" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 09:03:46 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 09:03:46 2024 -0700" }, "message": "Merge tag \u0027locking-urgent-2024-06-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull locking doc fix from Ingo Molnar:\n \"Fix typos in the kerneldoc of some of the atomic APIs\"\n\n* tag \u0027locking-urgent-2024-06-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n locking/atomic: scripts: fix ${atomic}_sub_and_test() kerneldoc\n" }, { "commit": "dc772f8237f9b0c9ea3f34d0dc4a57d1f6a5070d", "tree": "15988a93518b4479cdd02e4f5a50dcecdc27d160", "parents": [ "e60721bf3ccaebcaff8dec3548a2daa6578f9361", "7373a51e7998b508af7136530f3a997b286ce81c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 17:01:10 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 17:01:10 2024 -0700" }, "message": "Merge tag \u0027mm-hotfixes-stable-2024-06-07-15-24\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm\n\nPull misc fixes from Andrew Morton:\n \"14 hotfixes, 6 of which are cc:stable.\n\n All except the nilfs2 fix affect MM and all are singletons - see the\n chagelogs for details\"\n\n* tag \u0027mm-hotfixes-stable-2024-06-07-15-24\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm:\n nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors\n mm: fix xyz_noprof functions calling profiled functions\n codetag: avoid race at alloc_slab_obj_exts\n mm/hugetlb: do not call vma_add_reservation upon ENOMEM\n mm/ksm: fix ksm_zero_pages accounting\n mm/ksm: fix ksm_pages_scanned accounting\n kmsan: do not wipe out origin when doing partial unpoisoning\n vmalloc: check CONFIG_EXECMEM in is_vmalloc_or_module_addr()\n mm: page_alloc: fix highatomic typing in multi-block buddies\n nilfs2: fix potential kernel bug due to lack of writeback flag waiting\n memcg: remove the lockdep assert from __mod_objcg_mlstate()\n mm: arm64: fix the out-of-bounds issue in contpte_clear_young_dirty_ptes\n mm: huge_mm: fix undefined reference to `mthp_stats\u0027 for CONFIG_SYSFS\u003dn\n mm: drop the \u0027anon_\u0027 prefix for swap-out mTHP counters\n" }, { "commit": "e60721bf3ccaebcaff8dec3548a2daa6578f9361", "tree": "d0a7290af0d1de4289a0a59205d3da7c3e7546a8", "parents": [ "602079a0a13c69d190e16297d123ad3d279364e5", "64054eb716db52e4246527dc9414377c5bc5b01d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 16:54:57 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 16:54:57 2024 -0700" }, "message": "Merge tag \u0027gpio-fixes-for-v6.10-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux\n\nPull gpio fixes from Bartosz Golaszewski:\n\n - interrupt handling and Kconfig fixes for gpio-tqmx86\n\n - add a buffer for storing output values in gpio-tqmx86 as reading back\n the registers always returns the input values\n\n - add missing MODULE_DESCRIPTION()s to several GPIO drivers\n\n* tag \u0027gpio-fixes-for-v6.10-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux:\n gpio: add missing MODULE_DESCRIPTION() macros\n gpio: tqmx86: fix broken IRQ_TYPE_EDGE_BOTH interrupt type\n gpio: tqmx86: store IRQ trigger type and unmask status separately\n gpio: tqmx86: introduce shadow register for GPIO output value\n gpio: tqmx86: fix typo in Kconfig label\n" }, { "commit": "602079a0a13c69d190e16297d123ad3d279364e5", "tree": "0fda3276365ec9a697389f341f5086573bc20fc7", "parents": [ "e33915892d8871b28d17675fecc1b5b36b0d5721", "27d024235bdb16af917809d33916392452c3ac85" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 16:45:48 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 16:45:48 2024 -0700" }, "message": "Merge tag \u0027block-6.10-20240607\u0027 of git://git.kernel.dk/linux\n\nPull block fixes from Jens Axboe:\n\n - Fix for null_blk block size validation (Andreas)\n\n - NVMe pull request via Keith:\n - Use reserved tags for special fabrics operations (Chunguang)\n - Persistent Reservation status masking fix (Weiwen)\n\n* tag \u0027block-6.10-20240607\u0027 of git://git.kernel.dk/linux:\n null_blk: fix validation of block size\n nvme: fix nvme_pr_* status code parsing\n nvme-fabrics: use reserved tag for reg read/write command\n" }, { "commit": "e33915892d8871b28d17675fecc1b5b36b0d5721", "tree": "a2ede66bd79c2cebc0e2b660e3a20023b2ba2f31", "parents": [ "07978330e63456a75a6d5c1c5053de24bdc9d16f", "73254a297c2dd094abec7c9efee32455ae875bdf" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 16:43:07 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 16:43:07 2024 -0700" }, "message": "Merge tag \u0027io_uring-6.10-20240607\u0027 of git://git.kernel.dk/linux\n\nPull io_uring fixes from Jens Axboe:\n\n - Fix a locking order issue with setting max async thread workers\n (Hagar)\n\n - Fix for a NULL pointer dereference for failed async flagged requests\n using ring provided buffers. This doesn\u0027t affect the current kernel,\n but it does affect older kernels, and is being queued up for 6.10\n just to make the stable process easier (me)\n\n - Fix for NAPI timeout calculations for how long to busy poll, and\n subsequently how much to sleep post that if a wait timeout is passed\n in (me)\n\n - Fix for a regression in this release cycle, where we could end up\n using a partially unitialized match value for io-wq (Su)\n\n* tag \u0027io_uring-6.10-20240607\u0027 of git://git.kernel.dk/linux:\n io_uring: fix possible deadlock in io_register_iowq_max_workers()\n io_uring/io-wq: avoid garbage value of \u0027match\u0027 in io_wq_enqueue()\n io_uring/napi: fix timeout calculation\n io_uring: check for non-NULL file pointer in io_file_can_poll()\n" }, { "commit": "07978330e63456a75a6d5c1c5053de24bdc9d16f", "tree": "5ccf7ba79236f2ba48a5825d8b27782421097370", "parents": [ "eecba7c070283f053434808fa69abda36cf154b4", "f3a5367c679d31473d3fbb391675055b4792c309" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 15:13:12 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 15:13:12 2024 -0700" }, "message": "Merge tag \u0027for-6.10-rc2-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux\n\nPull btrfs fixes from David Sterba:\n\n - fix handling of folio private changes.\n\n The private value holds pointer to our extent buffer structure\n representing a metadata range. Release and create of the range was\n not properly synchronized when updating the private bit which ended\n up in double folio_put, leading to all sorts of breakage\n\n - fix a crash, reported as duplicate key in metadata, but caused by a\n race of fsync and size extending write. Requires prealloc target\n range + fsync and other conditions (log tree state, timing)\n\n - fix leak of qgroup extent records after transaction abort\n\n* tag \u0027for-6.10-rc2-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux:\n btrfs: protect folio::private when attaching extent buffer folios\n btrfs: fix leak of qgroup extent records after transaction abort\n btrfs: fix crash on racing fsync and size-extending write into prealloc\n" }, { "commit": "eecba7c070283f053434808fa69abda36cf154b4", "tree": "fc8b46081c2c812b5a7b316647a3dd4f50c30a7c", "parents": [ "0a02756d9145725c1b9979f0486c268f91471a48", "4a77c3dead97339478c7422eb07bf4bf63577008" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 15:07:57 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 15:07:57 2024 -0700" }, "message": "Merge tag \u0027nfsd-6.10-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/cel/linux\n\nPull nfsd fix from Chuck Lever:\n\n - Fix an occasional memory overwrite caused by a fix added in 6.10\n\n* tag \u0027nfsd-6.10-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/cel/linux:\n SUNRPC: Fix loop termination condition in gss_free_in_token_pages()\n" }, { "commit": "0a02756d9145725c1b9979f0486c268f91471a48", "tree": "749ab67639ff95a259262028b5ff0f60fd72f426", "parents": [ "8d6b029e15ab47986e486f52b2b768ca6faa5cbe", "e2c79b4c5c4d83520abb570ca633ded09621c0a6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 14:47:38 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 14:47:38 2024 -0700" }, "message": "Merge tag \u0027riscv-for-linus-6.10-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux\n\nPull RISC-V fixes from Palmer Dabbelt:\n\n - Another fix to avoid allocating pages that overlap with ERR_PTR,\n which manifests on rv32\n\n - A revert for the badaccess patch I incorrectly picked up an early\n version of\n\n* tag \u0027riscv-for-linus-6.10-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux:\n Revert \"riscv: mm: accelerate pagefault when badaccess\"\n riscv: fix overlap of allocated page and PTR_ERR\n" }, { "commit": "8d6b029e15ab47986e486f52b2b768ca6faa5cbe", "tree": "9b55a7f9cb3a6eb0ebe07959411acd8607a4ed77", "parents": [ "8d437867bafd8b5cfd209bdedddf1ca065f04a96", "01c51a32dc18f128d2e55a7b2128b77fc01a2285" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 14:44:53 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 14:44:53 2024 -0700" }, "message": "Merge tag \u0027s390-6.10-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux\n\nPull s390 fixes from Alexander Gordeev:\n\n - Do not create PT_LOAD program header for the kenel image when the\n virtual memory informaton in OS_INFO data is not available. That\n fixes stand-alone dump failures against kernels that do not provide\n the virtual memory informaton\n\n - Add KVM s390 shared zeropage selftest\n\n* tag \u0027s390-6.10-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux:\n KVM: s390x: selftests: Add shared zeropage test\n s390/crash: Do not use VM info if os_info does not have it\n" }, { "commit": "8d437867bafd8b5cfd209bdedddf1ca065f04a96", "tree": "acc0c36949097dbc022a2fdf9de27153f9cdb8bb", "parents": [ "96e09b8f81668278e2bb70db4cbf80d7549bf7a1", "5c40e428aea644c9d924e491b1bc22fa9f272bcc" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 14:36:57 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 14:36:57 2024 -0700" }, "message": "Merge tag \u0027arm64-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux\n\nPull arm64 fixes from Will Deacon:\n\n - Fix spurious CPU hotplug warning message from SETEND emulation code\n\n - Fix the build when GCC wasn\u0027t inlining our I/O accessor internals\n\n* tag \u0027arm64-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:\n arm64/io: add constant-argument check\n arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process\n" }, { "commit": "96e09b8f81668278e2bb70db4cbf80d7549bf7a1", "tree": "d71a4ead770882e86ee7b5cebeeb98f424e77783", "parents": [ "f24b46ea10d7d2096ea1c9ce5746a0c85920ec62", "77f1972bdcf7513293e8bbe376b9fe837310ee9c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 14:13:46 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 14:13:46 2024 -0700" }, "message": "Merge tag \u0027platform-drivers-x86-v6.10-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/pdx86/platform-drivers-x86\n\nPull x86 platform driver fixes from Hans de Goede:\n\n - Default silead touchscreen driver to 10 fingers and drop 10 finger\n setting from all DMI quirks. More of a cleanup then a pure fix, but\n since the DMI quirks always get updated through the fixes branch\n this avoids conflicts.\n\n - Kconfig fix for randconfig builds\n\n - dell-smbios: Fix wrong token data in sysfs\n\n - amd-hsmp: Fix driver poking unsupported hw when loaded manually\n\n* tag \u0027platform-drivers-x86-v6.10-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/pdx86/platform-drivers-x86:\n platform/x86/amd/hsmp: Check HSMP support on AMD family of processors\n platform/x86: dell-smbios: Simplify error handling\n platform/x86: dell-smbios: Fix wrong token data in sysfs\n platform/x86: yt2-1380: add CONFIG_EXTCON dependency\n platform/x86: touchscreen_dmi: Use 2-argument strscpy()\n platform/x86: touchscreen_dmi: Drop \"silead,max-fingers\" property\n Input: silead - Always support 10 fingers\n" }, { "commit": "f24b46ea10d7d2096ea1c9ce5746a0c85920ec62", "tree": "7b5897d93945799da7f2636683272f1bf939d3d4", "parents": [ "e693c5026c28ab2ca1f718f66f47a6a041ec8f3a", "526606b0a1998b0791b42c199d53550c3ba724b5" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 13:34:53 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 13:34:53 2024 -0700" }, "message": "Merge tag \u0027iommu-fixes-v6.10-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu\n\nPull iommu fixes from Joerg Roedel:\n \"Core:\n\n - Make iommu-dma code recognize \u0027force_aperture\u0027 again\n\n - Fix for potential NULL-ptr dereference from iommu_sva_bind_device()\n return value\n\n AMD IOMMU fixes:\n\n - Fix lockdep splat for invalid wait context\n\n - Add feature bit check before enabling PPR\n\n - Make workqueue name fit into buffer\n\n - Fix memory leak in sysfs code\"\n\n* tag \u0027iommu-fixes-v6.10-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu:\n iommu/amd: Fix Invalid wait context issue\n iommu/amd: Check EFR[EPHSup] bit before enabling PPR\n iommu/amd: Fix workqueue name\n iommu: Return right value in iommu_sva_bind_device()\n iommu/dma: Fix domain init\n iommu/amd: Fix sysfs leak in iommu init\n" }, { "commit": "e693c5026c28ab2ca1f718f66f47a6a041ec8f3a", "tree": "3affbf3d1ff54114a4fb3e23193639c113486d4c", "parents": [ "2e32d580757362edc95fdd7a86d3b869b78e58d8", "09fe2bfa6b83f865126ce3964744863f69a4a030" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 12:47:20 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 12:47:20 2024 -0700" }, "message": "Merge tag \u0027ata-6.10-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/libata/linux\n\nPull ata fix from Niklas Cassel:\n\n - Fix a regression for the PATA MacIO driver were it would fail to\n probe because of the recent changes of initializing the limits in\n SCSI core\n\n* tag \u0027ata-6.10-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/libata/linux:\n ata: pata_macio: Fix max_segment_size with PAGE_SIZE \u003d\u003d 64K\n" }, { "commit": "2e32d580757362edc95fdd7a86d3b869b78e58d8", "tree": "1c08620cbce49f5becc5bf9da788f3291e5f12c4", "parents": [ "8a92980606e3585d72d510a03b59906e96755b8a", "eb55943aab89be99a26e34fc2175ebb3583a2778" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 12:35:56 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 12:35:56 2024 -0700" }, "message": "Merge tag \u0027drm-fixes-2024-06-07\u0027 of https://gitlab.freedesktop.org/drm/kernel\n\nPull drm fixes from Dave Airlie:\n \"Weekly fixes: vmwgfx leads the way this week, with minor changes in xe\n and amdgpu and a couple of other small fixes.\n\n Seems quiet enough.\n\n xe:\n - Update the LMTT when freeing VF GT config\n\n amdgpu:\n - Fix shutdown issues on some SMU 13.x platforms\n - Silence some UBSAN flexible array warnings\n\n panel:\n - sitronix-st7789v: handle of_drm_get_panel_orientation failing\n error\n\n vmwgfx:\n - filter modes greater than available graphics memory\n - fix 3D vs STDU enable\n - remove STDU logic from mode valid\n - logging fix\n - memcmp pointers fix\n - remove unused struct\n - screen target lifetime fix\n\n komeda:\n - unused struct removal\"\n\n* tag \u0027drm-fixes-2024-06-07\u0027 of https://gitlab.freedesktop.org/drm/kernel:\n drm/vmwgfx: Don\u0027t memcmp equivalent pointers\n drm/vmwgfx: remove unused struct \u0027vmw_stdu_dma\u0027\n drm/vmwgfx: Don\u0027t destroy Screen Target when CRTC is enabled but inactive\n drm/vmwgfx: Standardize use of kibibytes when logging\n drm/vmwgfx: Remove STDU logic from generic mode_valid function\n drm/vmwgfx: 3D disabled should not effect STDU memory limits\n drm/vmwgfx: Filter modes which exceed graphics memory\n drm/amdgpu/pptable: Fix UBSAN array-index-out-of-bounds\n drm/amd: Fix shutdown (again) on some SMU v13.0.4/11 platforms\n drm/xe/pf: Update the LMTT when freeing VF GT config\n drm/panel: sitronix-st7789v: Add check for of_drm_get_panel_orientation\n drm/komeda: remove unused struct \u0027gamma_curve_segment\u0027\n" }, { "commit": "a3a5a37efba11b7cf1a86abe7bccfbcdb521764e", "tree": "5dbfe2cfb2118a40c489ac38f63ac1e3b26c3bd5", "parents": [ "0eafc58f2194dbd01d4be40f99a697681171995b" ], "author": { "name": "Louis Dalibard", "email": "ontake@ontake.dev", "time": "Fri Jun 07 16:53:43 2024 +0200" }, "committer": { "name": "Jiri Kosina", "email": "jkosina@suse.com", "time": "Fri Jun 07 17:02:56 2024 +0200" }, "message": "HID: Ignore battery for ELAN touchscreens 2F2C and 4116\n\nAt least ASUS Zenbook 14 (2023) and ASUS Zenbook 14 Pro (2023) are affected.\n\nThe touchscreen reports a battery status of 0% and jumps to 1% when a\nstylus is used.\n\nThe device ID was added and the battery ignore quirk was enabled for it.\n\n[jkosina@suse.com: reformatted changelog a bit]\nSigned-off-by: Louis Dalibard \u003contake@ontake.dev\u003e\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.com\u003e\n" }, { "commit": "0eafc58f2194dbd01d4be40f99a697681171995b", "tree": "7b6fe3f15df40d4a0d35738e7012310a0162cf70", "parents": [ "e538d4b85b8f1e3534dfbb42c2273f18bbb59d6e" ], "author": { "name": "Johan Hovold", "email": "johan+linaro@kernel.org", "time": "Tue May 07 16:48:18 2024 +0200" }, "committer": { "name": "Benjamin Tissoires", "email": "bentiss@kernel.org", "time": "Fri Jun 07 11:18:11 2024 +0200" }, "message": "HID: i2c-hid: elan: fix reset suspend current leakage\n\nThe Elan eKTH5015M touch controller found on the Lenovo ThinkPad X13s\nshares the VCC33 supply with other peripherals that may remain powered\nduring suspend (e.g. when enabled as wakeup sources).\n\nThe reset line is also wired so that it can be left deasserted when the\nsupply is off.\n\nThis is important as it avoids holding the controller in reset for\nextended periods of time when it remains powered, which can lead to\nincreased power consumption, and also avoids leaking current through the\nX13s reset circuitry during suspend (and after driver unbind).\n\nUse the new \u0027no-reset-on-power-off\u0027 devicetree property to determine\nwhen reset needs to be asserted on power down.\n\nNotably this also avoids wasting power on machine variants without a\ntouchscreen for which the driver would otherwise exit probe with reset\nasserted.\n\nFixes: bd3cba00dcc6 (\"HID: i2c-hid: elan: Add support for Elan eKTH6915 i2c-hid touchscreens\")\nCc: \u003cstable@vger.kernel.org\u003e\t# 6.0\nCc: Douglas Anderson \u003cdianders@chromium.org\u003e\nTested-by: Steev Klimaszewski \u003csteev@kali.org\u003e\nSigned-off-by: Johan Hovold \u003cjohan+linaro@kernel.org\u003e\nReviewed-by: Douglas Anderson \u003cdianders@chromium.org\u003e\nLink: https://lore.kernel.org/r/20240507144821.12275-5-johan+linaro@kernel.org\nSigned-off-by: Benjamin Tissoires \u003cbentiss@kernel.org\u003e\n" }, { "commit": "e538d4b85b8f1e3534dfbb42c2273f18bbb59d6e", "tree": "01d9dddb797270f22976b4447967061b1888843f", "parents": [ "07fc16fa55522520f5e4b2e35c72650f11079c35" ], "author": { "name": "Johan Hovold", "email": "johan+linaro@kernel.org", "time": "Tue May 07 16:48:17 2024 +0200" }, "committer": { "name": "Benjamin Tissoires", "email": "bentiss@kernel.org", "time": "Fri Jun 07 11:16:55 2024 +0200" }, "message": "dt-bindings: HID: i2c-hid: elan: add \u0027no-reset-on-power-off\u0027 property\n\nWhen the power supply is shared with other peripherals the reset line\ncan be wired in such a way that it can remain deasserted regardless of\nwhether the supply is on or not.\n\nThis is important as it can be used to avoid holding the controller in\nreset for extended periods of time when it remains powered, something\nwhich can lead to increased power consumption. Leaving reset deasserted\nalso avoids leaking current through the reset circuitry pull-up\nresistors.\n\nAdd a new \u0027no-reset-on-power-off\u0027 devicetree property which can be used\nby the OS to determine when reset needs to be asserted on power down.\n\nNote that this property can also be used when the supply cannot be\nturned off by the OS at all.\n\nSigned-off-by: Johan Hovold \u003cjohan+linaro@kernel.org\u003e\nReviewed-by: Krzysztof Kozlowski \u003ckrzysztof.kozlowski@linaro.org\u003e\nReviewed-by: Linus Walleij \u003clinus.walleij@linaro.org\u003e\nLink: https://lore.kernel.org/r/20240507144821.12275-4-johan+linaro@kernel.org\nSigned-off-by: Benjamin Tissoires \u003cbentiss@kernel.org\u003e\n" }, { "commit": "07fc16fa55522520f5e4b2e35c72650f11079c35", "tree": "3d3ae64c243d761dac01846fd659c117a9741567", "parents": [ "8d3ae46c64336b538898af76b4f504dfbe89b886" ], "author": { "name": "Johan Hovold", "email": "johan+linaro@kernel.org", "time": "Tue May 07 16:48:16 2024 +0200" }, "committer": { "name": "Benjamin Tissoires", "email": "bentiss@kernel.org", "time": "Fri Jun 07 11:16:55 2024 +0200" }, "message": "dt-bindings: HID: i2c-hid: elan: add Elan eKTH5015M\n\nAdd a compatible string for the Elan eKTH5015M touch controller.\n\nJudging from the current binding and commit bd3cba00dcc6 (\"HID: i2c-hid:\nelan: Add support for Elan eKTH6915 i2c-hid touchscreens\"), eKTH5015M\nappears to be compatible with eKTH6915. Notably the power-on sequence is\nthe same.\n\nWhile at it, drop a redundant label from the example.\n\nReviewed-by: Krzysztof Kozlowski \u003ckrzysztof.kozlowski@linaro.org\u003e\nSigned-off-by: Johan Hovold \u003cjohan+linaro@kernel.org\u003e\nLink: https://lore.kernel.org/r/20240507144821.12275-3-johan+linaro@kernel.org\nSigned-off-by: Benjamin Tissoires \u003cbentiss@kernel.org\u003e\n" }, { "commit": "8d3ae46c64336b538898af76b4f504dfbe89b886", "tree": "adbc20f16fc17e16f46bb17971465e67d79dc941", "parents": [ "22d6d060ac77955291deb43efc2f3f4f9632c6cb" ], "author": { "name": "Johan Hovold", "email": "johan+linaro@kernel.org", "time": "Tue May 07 16:48:15 2024 +0200" }, "committer": { "name": "Benjamin Tissoires", "email": "bentiss@kernel.org", "time": "Fri Jun 07 11:16:55 2024 +0200" }, "message": "dt-bindings: HID: i2c-hid: add dedicated Ilitek ILI2901 schema\n\nThe Ilitek ILI2901 touch screen controller was apparently incorrectly\nadded to the Elan eKTH6915 schema simply because it also has a reset\ngpio and is currently managed by the Elan driver in Linux.\n\nThe two controllers are not related even if an unfortunate wording in\nthe commit message adding the Ilitek compatible made it sound like they\nwere.\n\nAdd a dedicated schema for the ILI2901 which does not specify the I2C\naddress (which is likely 0x41 rather than 0x10 as for other Ilitek touch\ncontrollers) to avoid cluttering the Elan schema with unrelated devices\nand to make it easier to find the correct schema when adding further\nIlitek controllers.\n\nFixes: d74ac6f60a7e (\"dt-bindings: HID: i2c-hid: elan: Introduce Ilitek ili2901\")\nCc: Zhengqiao Xia \u003cxiazhengqiao@huaqin.corp-partner.google.com\u003e\nReviewed-by: Krzysztof Kozlowski \u003ckrzysztof.kozlowski@linaro.org\u003e\nSigned-off-by: Johan Hovold \u003cjohan+linaro@kernel.org\u003e\nLink: https://lore.kernel.org/r/20240507144821.12275-2-johan+linaro@kernel.org\nSigned-off-by: Benjamin Tissoires \u003cbentiss@kernel.org\u003e\n" }, { "commit": "22d6d060ac77955291deb43efc2f3f4f9632c6cb", "tree": "4c070cfd49eb664153c61b49121b12eac1d27390", "parents": [ "0c7dd00de018ff70b3452c424901816e26366a8a" ], "author": { "name": "Aseda Aboagye", "email": "aaboagye@chromium.org", "time": "Tue Jun 04 23:16:32 2024 +0000" }, "committer": { "name": "Benjamin Tissoires", "email": "bentiss@kernel.org", "time": "Fri Jun 07 11:08:07 2024 +0200" }, "message": "input: Add support for \"Do Not Disturb\"\n\nHUTRR94 added support for a new usage titled \"System Do Not Disturb\"\nwhich toggles a system-wide Do Not Disturb setting. This commit simply\nadds a new event code for the usage.\n\nSigned-off-by: Aseda Aboagye \u003caaboagye@chromium.org\u003e\nAcked-by: Dmitry Torokhov \u003cdmitry.torokhov@gmail.com\u003e\nLink: https://lore.kernel.org/r/Zl-gUHE70s7wCAoB@google.com\nSigned-off-by: Benjamin Tissoires \u003cbentiss@kernel.org\u003e\n" }, { "commit": "0c7dd00de018ff70b3452c424901816e26366a8a", "tree": "bf9a0e0936659701c37a2caaeceb127b20705c87", "parents": [ "89e1ee118d6f0ee6bd6e80d8fe08839875daa241" ], "author": { "name": "Aseda Aboagye", "email": "aaboagye@chromium.org", "time": "Tue Jun 04 23:10:47 2024 +0000" }, "committer": { "name": "Benjamin Tissoires", "email": "bentiss@kernel.org", "time": "Fri Jun 07 11:08:07 2024 +0200" }, "message": "input: Add event code for accessibility key\n\nHUTRR116 added support for a new usage titled \"System Accessibility\nBinding\" which toggles a system-wide bound accessibility UI or command.\nThis commit simply adds a new event code for the usage.\n\nSigned-off-by: Aseda Aboagye \u003caaboagye@chromium.org\u003e\nAcked-by: Dmitry Torokhov \u003cdmitry.torokhov@gmail.com\u003e\nLink: https://lore.kernel.org/r/Zl-e97O9nvudco5z@google.com\nSigned-off-by: Benjamin Tissoires \u003cbentiss@kernel.org\u003e\n" }, { "commit": "89e1ee118d6f0ee6bd6e80d8fe08839875daa241", "tree": "ac54c344b51509934bb2bf2fdaef17f336d53730", "parents": [ "9c8f05cf1d7abd1bfb53cebe691bf3acb7baee99" ], "author": { "name": "Andrew Ballance", "email": "andrewjballance@gmail.com", "time": "Sun Jun 02 03:50:23 2024 -0500" }, "committer": { "name": "Benjamin Tissoires", "email": "bentiss@kernel.org", "time": "Fri Jun 07 11:07:40 2024 +0200" }, "message": "hid: asus: asus_report_fixup: fix potential read out of bounds\n\nsyzbot reported a potential read out of bounds in asus_report_fixup.\n\nthis patch adds checks so that a read out of bounds will not occur\n\nSigned-off-by: Andrew Ballance \u003candrewjballance@gmail.com\u003e\nReported-by: \u003csyzbot+07762f019fd03d01f04c@syzkaller.appspotmail.com\u003e\nCloses: https://syzkaller.appspot.com/bug?extid\u003d07762f019fd03d01f04c\nFixes: 59d2f5b7392e (\"HID: asus: fix more n-key report descriptors if n-key quirked\")\nLink: https://lore.kernel.org/r/20240602085023.1720492-1-andrewjballance@gmail.com\nSigned-off-by: Benjamin Tissoires \u003cbentiss@kernel.org\u003e\n" }, { "commit": "64054eb716db52e4246527dc9414377c5bc5b01d", "tree": "199694a22a9a95aeb8647aed9a4aa4e026d3b1b2", "parents": [ "90dd7de4ef7ba584823dfbeba834c2919a4bb55b" ], "author": { "name": "Jeff Johnson", "email": "quic_jjohnson@quicinc.com", "time": "Thu Jun 06 20:23:50 2024 -0700" }, "committer": { "name": "Bartosz Golaszewski", "email": "bartosz.golaszewski@linaro.org", "time": "Fri Jun 07 10:05:21 2024 +0200" }, "message": "gpio: add missing MODULE_DESCRIPTION() macros\n\nOn x86, make allmodconfig \u0026\u0026 make W\u003d1 C\u003d1 reports:\nWARNING: modpost: missing MODULE_DESCRIPTION() in drivers/gpio/gpio-gw-pld.o\nWARNING: modpost: missing MODULE_DESCRIPTION() in drivers/gpio/gpio-mc33880.o\nWARNING: modpost: missing MODULE_DESCRIPTION() in drivers/gpio/gpio-pcf857x.o\n\nAdd the missing invocations of the MODULE_DESCRIPTION() macro,\nincluding the one missing in gpio-pl061.c, which is not built for x86.\n\nSigned-off-by: Jeff Johnson \u003cquic_jjohnson@quicinc.com\u003e\nLink: https://lore.kernel.org/r/20240606-md-drivers-gpio-v1-1-cb42d240ca5c@quicinc.com\nSigned-off-by: Bartosz Golaszewski \u003cbartosz.golaszewski@linaro.org\u003e\n" }, { "commit": "a88d60903696c01de577558080ec4fc738a70475", "tree": "1cacacd3139dfc91bb2062056595d3c78203c4ce", "parents": [ "02c418774f76a0a36a6195c9dbf8971eb4130a15" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri May 31 15:53:42 2024 +0100" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Fri Jun 07 01:05:26 2024 -0500" }, "message": "cifs: Don\u0027t advance the I/O iterator before terminating subrequest\n\nThere\u0027s now no need to make sure subreq-\u003eio_iter is advanced to match\nsubreq-\u003etransferred before calling one of the netfs subrequest termination\nfunctions as the check has been removed netfslib and the iterator is reset\nprior to retrying a subreq.\n\nFixes: 3ee1a1fc3981 (\"cifs: Cut over to using netfslib\")\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\ncc: Steve French \u003csfrench@samba.org\u003e\ncc: Paulo Alcantara \u003cpc@manguebit.com\u003e\ncc: Shyam Prasad N \u003cnspmangalore@gmail.com\u003e\ncc: Rohith Surabattula \u003crohiths.msft@gmail.com\u003e\ncc: Jeff Layton \u003cjlayton@kernel.org\u003e\ncc: linux-cifs@vger.kernel.org\ncc: netfs@lists.linux.dev\ncc: linux-fsdevel@vger.kernel.org\ncc: linux-mm@kvack.org\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "02c418774f76a0a36a6195c9dbf8971eb4130a15", "tree": "56904ad28f049e7936f3e2a7f9a9d18ceac779e3", "parents": [ "c3f38fa61af77b49866b006939479069cd451173" ], "author": { "name": "Enzo Matsumiya", "email": "ematsumiya@suse.de", "time": "Thu Jun 06 13:13:13 2024 -0300" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Fri Jun 07 01:05:07 2024 -0500" }, "message": "smb: client: fix deadlock in smb2_find_smb_tcon()\n\nUnlock cifs_tcp_ses_lock before calling cifs_put_smb_ses() to avoid such\ndeadlock.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Enzo Matsumiya \u003cematsumiya@suse.de\u003e\nReviewed-by: Shyam Prasad N \u003csprasad@microsoft.com\u003e\nReviewed-by: Paulo Alcantara (Red Hat) \u003cpc@manguebit.com\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "9185afeac2a3dcce8300a5684291a43c2838cfd6", "tree": "0ee5a974fa62a682673a5fc321b2ee8cf9285103", "parents": [ "96c965667b9dbbd713acdffa95ebab8c225f8595" ], "author": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Fri Jun 07 03:36:12 2024 +0900" }, "committer": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Fri Jun 07 08:42:31 2024 +0900" }, "message": "modpost: do not warn about missing MODULE_DESCRIPTION() for vmlinux.o\n\nBuilding with W\u003d1 incorrectly emits the following warning:\n\n WARNING: modpost: missing MODULE_DESCRIPTION() in vmlinux.o\n\nThis check should apply only to modules.\n\nFixes: 1fffe7a34c89 (\"script: modpost: emit a warning when the description is missing\")\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nReviewed-by: Vincenzo Palazzo \u003cvincenzopalazzodev@gmail.com\u003e\n" }, { "commit": "96c965667b9dbbd713acdffa95ebab8c225f8595", "tree": "71f7fbc4d1eccde00d10d8d70e1e68c75c149013", "parents": [ "77a92660d8fe8d29503fae768d9f5eb529c88b36" ], "author": { "name": "Richard Acayan", "email": "mailingradian@gmail.com", "time": "Wed Jun 05 13:58:09 2024 -0400" }, "committer": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Fri Jun 07 08:42:14 2024 +0900" }, "message": "kbuild: explicitly run mksysmap as sed script from link-vmlinux.sh\n\nIn commit b18b047002b7 (\"kbuild: change scripts/mksysmap into sed\nscript\"), the mksysmap script was transformed into a sed script,\nmade directly executable with \"#!/bin/sed -f\". Apparently, the path to\nsed is different on NixOS.\n\nThe shebang can\u0027t use the env command, otherwise the \"sed -f\" command\nwould be treated as a single argument. This can be solved with the -S\nflag, but that is a GNU extension. Explicitly use sed instead of relying\non the executable shebang to fix NixOS builds without breaking build\nenvironments using Busybox.\n\nFixes: b18b047002b7 (\"kbuild: change scripts/mksysmap into sed script\")\nReported-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\nSigned-off-by: Richard Acayan \u003cmailingradian@gmail.com\u003e\nReviewed-by: Nathan Chancellor \u003cnathan@kernel.org\u003e\nTested-by: Dmitry Safonov \u003c0x7f454c46@gmail.com\u003e\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\n" }, { "commit": "eb55943aab89be99a26e34fc2175ebb3583a2778", "tree": "90d5f2b03f460418f8d3ed161abe83432a6d2a80", "parents": [ "26033424ed0897deecbbc82ae348c12e27bfb29c", "539d33b5783804f22a62bd62ff463dfd1cef4265" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jun 07 08:40:57 2024 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jun 07 08:40:58 2024 +1000" }, "message": "Merge tag \u0027drm-misc-next-fixes-2024-06-07\u0027 of https://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes\n\ndrm-misc-next-fixes for v6.10-rc3:\n- Single unused struct removal that should have been in -fixes.\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nFrom: Maarten Lankhorst \u003cmaarten.lankhorst@linux.intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/0251b6ae-bffa-44b2-b698-955712c25a27@linux.intel.com\n" }, { "commit": "26033424ed0897deecbbc82ae348c12e27bfb29c", "tree": "c565ce775abfa918b602134426a0f0f2a905314b", "parents": [ "2d4218311071389682cc1f74b23eb85bb677909a", "5703fc058efdafcdd6b70776ee562478f0753acb" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jun 07 08:37:25 2024 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jun 07 08:37:25 2024 +1000" }, "message": "Merge tag \u0027drm-misc-fixes-2024-06-07\u0027 of https://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes\n\ndrm-misc-fixes for v6.10-rc3:\n- Robustness fixes for vmwgfx.\n- Error check for of_drm_get_panel_orientation failing in\n sitronix-st7789v.\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nFrom: Maarten Lankhorst \u003cmaarten.lankhorst@linux.intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/d5645d00-a8cf-47d9-a2a0-4ff55842fc7d@linux.intel.com\n" }, { "commit": "2d4218311071389682cc1f74b23eb85bb677909a", "tree": "7714bda8a015c830c9aa6a06e306bdbdaa4c8abb", "parents": [ "1cfa043fc012150ced0b8b60c44ebdd481335f9d", "c6c4dd54012551cce5cde408b35468f2c62b0cce" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jun 07 08:22:08 2024 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jun 07 08:22:59 2024 +1000" }, "message": "Merge tag \u0027amd-drm-fixes-6.10-2024-06-06\u0027 of https://gitlab.freedesktop.org/agd5f/linux into drm-fixes\n\namd-drm-fixes-6.10-2024-06-06:\n\namdgpu:\n- Fix shutdown issues on some SMU 13.x platforms\n- Silence some UBSAN flexible array warnings\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Alex Deucher \u003calexander.deucher@amd.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20240606192348.3620805-1-alexander.deucher@amd.com\n" }, { "commit": "8a92980606e3585d72d510a03b59906e96755b8a", "tree": "bf30ec58b916713ebd184ceafd2af4af33362944", "parents": [ "d91e656262aeef16f6a296a2b6c8b0f7243f408a", "d53b681ce9ca7db5ef4ecb8d2cf465ae4a031264" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 06 14:40:51 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 06 14:40:51 2024 -0700" }, "message": "Merge tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi\n\nPull SCSI fixes from James Bottomley:\n \"The core change is to detect unusually large number of VPD pages\n (caused by device manufacturers having an endiannes issue) and reject\n them rather than trying to parse a huge non-existent array.\n\n The remaining fixes are in drivers the most user visible of which is\n the ALUA state transition recognition (leads to intermittent I/O\n errors in some situations otherwise)\"\n\n* tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:\n scsi: ufs: mcq: Fix error output and clean up ufshcd_mcq_abort()\n scsi: core: Handle devices which return an unusually large VPD page count\n scsi: mpt3sas: Add missing kerneldoc parameter descriptions\n scsi: qedf: Set qed_slowpath_params to zero before use\n scsi: qedf: Wait for stag work during unload\n scsi: qedf: Don\u0027t process stag work during unload and recovery\n scsi: sr: Fix unintentional arithmetic wraparound\n scsi: core: alua: I/O errors for ALUA state transitions\n scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add()\n" }, { "commit": "d91e656262aeef16f6a296a2b6c8b0f7243f408a", "tree": "a541b0b5155a5713352720e61947af5da99b4a8c", "parents": [ "d30d0e49da71de8df10bf3ff1b3de880653af562", "c9d52fb313d3719d69a040f4ca78a3e2e95fba21" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 06 14:28:11 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 06 14:28:11 2024 -0700" }, "message": "Merge tag \u0027pci-v6.10-fixes-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/pci/pci\n\nPull pci fix from Bjorn Helgaas:\n\n - Revert lockdep checking on locking that protects device resets from\n user-space config accesses; it exposed issues for which fixes are in\n the works but are too risky for this cycle (Dan Williams)\n\n* tag \u0027pci-v6.10-fixes-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/pci/pci:\n PCI: Revert the cfg_access_lock lockdep mechanism\n" }, { "commit": "f3a5367c679d31473d3fbb391675055b4792c309", "tree": "df0713ce21dc0a559f06c56379307092133cd533", "parents": [ "fb33eb2ef0d88e75564983ef057b44c5b7e4fded" ], "author": { "name": "Qu Wenruo", "email": "wqu@suse.com", "time": "Thu Jun 06 11:01:51 2024 +0930" }, "committer": { "name": "David Sterba", "email": "dsterba@suse.com", "time": "Thu Jun 06 21:42:22 2024 +0200" }, "message": "btrfs: protect folio::private when attaching extent buffer folios\n\n[BUG]\nSince v6.8 there are rare kernel crashes reported by various people,\nthe common factor is bad page status error messages like this:\n\n BUG: Bad page state in process kswapd0 pfn:d6e840\n page: refcount:0 mapcount:0 mapping:000000007512f4f2 index:0x2796c2c7c\n pfn:0xd6e840\n aops:btree_aops ino:1\n flags: 0x17ffffe0000008(uptodate|node\u003d0|zone\u003d2|lastcpupid\u003d0x3fffff)\n page_type: 0xffffffff()\n raw: 0017ffffe0000008 dead000000000100 dead000000000122 ffff88826d0be4c0\n raw: 00000002796c2c7c 0000000000000000 00000000ffffffff 0000000000000000\n page dumped because: non-NULL mapping\n\n[CAUSE]\nCommit 09e6cef19c9f (\"btrfs: refactor alloc_extent_buffer() to\nallocate-then-attach method\") changes the sequence when allocating a new\nextent buffer.\n\nPreviously we always called grab_extent_buffer() under\nmapping-\u003ei_private_lock, to ensure the safety on modification on\nfolio::private (which is a pointer to extent buffer for regular\nsectorsize).\n\nThis can lead to the following race:\n\nThread A is trying to allocate an extent buffer at bytenr X, with 4\n4K pages, meanwhile thread B is trying to release the page at X + 4K\n(the second page of the extent buffer at X).\n\n Thread A | Thread B\n-----------------------------------+-------------------------------------\n | btree_release_folio()\n\t\t\t\t | | This is for the page at X + 4K,\n\t\t\t\t | | Not page X.\n\t\t\t\t | |\nalloc_extent_buffer() | |- release_extent_buffer()\n|- filemap_add_folio() for the | | |- atomic_dec_and_test(eb-\u003erefs)\n| page at bytenr X (the first | | |\n| page). | | |\n| Which returned -EEXIST. | | |\n| | | |\n|- filemap_lock_folio() | | |\n| Returned the first page locked. | | |\n| | | |\n|- grab_extent_buffer() | | |\n| |- atomic_inc_not_zero() | | |\n| | Returned false | | |\n| |- folio_detach_private() | | |- folio_detach_private() for X\n| |- folio_test_private() | | |- folio_test_private()\n | Returned true | | | Returned true\n |- folio_put() | |- folio_put()\n\nNow there are two puts on the same folio at folio X, leading to refcount\nunderflow of the folio X, and eventually causing the BUG_ON() on the\npage-\u003emapping.\n\nThe condition is not that easy to hit:\n\n- The release must be triggered for the middle page of an eb\n If the release is on the same first page of an eb, page lock would kick\n in and prevent the race.\n\n- folio_detach_private() has a very small race window\n It\u0027s only between folio_test_private() and folio_clear_private().\n\nThat\u0027s exactly when mapping-\u003ei_private_lock is used to prevent such race,\nand commit 09e6cef19c9f (\"btrfs: refactor alloc_extent_buffer() to\nallocate-then-attach method\") screwed that up.\n\nAt that time, I thought the page lock would kick in as\nfilemap_release_folio() also requires the page to be locked, but forgot\nthe filemap_release_folio() only locks one page, not all pages of an\nextent buffer.\n\n[FIX]\nMove all the code requiring i_private_lock into\nattach_eb_folio_to_filemap(), so that everything is done with proper\nlock protection.\n\nFurthermore to prevent future problems, add an extra\nlockdep_assert_locked() to ensure we\u0027re holding the proper lock.\n\nTo reproducer that is able to hit the race (takes a few minutes with\ninstrumented code inserting delays to alloc_extent_buffer()):\n\n #!/bin/sh\n drop_caches () {\n\t while(true); do\n\t\t echo 3 \u003e /proc/sys/vm/drop_caches\n\t\t echo 1 \u003e /proc/sys/vm/compact_memory\n\t done\n }\n\n run_tar () {\n\t while(true); do\n\t\t for x in `seq 1 80` ; do\n\t\t\t tar cf /dev/zero /mnt \u003e /dev/null \u0026\n\t\t done\n\t\t wait\n\t done\n }\n\n mkfs.btrfs -f -d single -m single /dev/vda\n mount -o noatime /dev/vda /mnt\n # create 200,000 files, 1K each\n ./simoop -n 200000 -E -f 1k /mnt\n drop_caches \u0026\n (run_tar)\n\nReported-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nLink: https://lore.kernel.org/linux-btrfs/CAHk-\u003dwgt362nGfScVOOii8cgKn2LVVHeOvOA7OBwg1OwbuJQcw@mail.gmail.com/\nReported-by: Mikhail Gavrilov \u003cmikhail.v.gavrilov@gmail.com\u003e\nLink: https://lore.kernel.org/lkml/CABXGCsPktcHQOvKTbPaTwegMExije\u003dGpgci5NW\u003dhqORo-s7diA@mail.gmail.com/\nReported-by: Toralf Förster \u003ctoralf.foerster@gmx.de\u003e\nLink: https://lore.kernel.org/linux-btrfs/e8b3311c-9a75-4903-907f-fc0f7a3fe423@gmx.de/\nReported-by: syzbot+f80b066392366b4af85e@syzkaller.appspotmail.com\nFixes: 09e6cef19c9f (\"btrfs: refactor alloc_extent_buffer() to allocate-then-attach method\")\nCC: stable@vger.kernel.org # 6.8+\nCC: Chris Mason \u003cclm@fb.com\u003e\nReviewed-by: Filipe Manana \u003cfdmanana@suse.com\u003e\nReviewed-by: Josef Bacik \u003cjosef@toxicpanda.com\u003e\nSigned-off-by: Qu Wenruo \u003cwqu@suse.com\u003e\nReviewed-by: David Sterba \u003cdsterba@suse.com\u003e\nSigned-off-by: David Sterba \u003cdsterba@suse.com\u003e\n" }, { "commit": "d30d0e49da71de8df10bf3ff1b3de880653af562", "tree": "65c58dfad109ecfa19de9a50cbc0937c7698ecaf", "parents": [ "2faf6332c506fc3bd23815f8fe8f6d0c35271c17", "27bc86540899ee793ab2f4c846e745aa0de443f1" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 06 09:55:27 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 06 09:55:27 2024 -0700" }, "message": "Merge tag \u0027net-6.10-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net\n\nPull networking fixes from Jakub Kicinski:\n \"Including fixes from BPF and big collection of fixes for WiFi core and\n drivers.\n\n Current release - regressions:\n\n - vxlan: fix regression when dropping packets due to invalid src\n addresses\n\n - bpf: fix a potential use-after-free in bpf_link_free()\n\n - xdp: revert support for redirect to any xsk socket bound to the\n same UMEM as it can result in a corruption\n\n - virtio_net:\n - add missing lock protection when reading return code from\n control_buf\n - fix false-positive lockdep splat in DIM\n - Revert \"wifi: wilc1000: convert list management to RCU\"\n\n - wifi: ath11k: fix error path in ath11k_pcic_ext_irq_config\n\n Previous releases - regressions:\n\n - rtnetlink: make the \"split\" NLM_DONE handling generic, restore the\n old behavior for two cases where we started coalescing those\n messages with normal messages, breaking sloppily-coded userspace\n\n - wifi:\n - cfg80211: validate HE operation element parsing\n - cfg80211: fix 6 GHz scan request building\n - mt76: mt7615: add missing chanctx ops\n - ath11k: move power type check to ASSOC stage, fix connecting to\n 6 GHz AP\n - ath11k: fix WCN6750 firmware crash caused by 17 num_vdevs\n - rtlwifi: ignore IEEE80211_CONF_CHANGE_RETRY_LIMITS\n - iwlwifi: mvm: fix a crash on 7265\n\n Previous releases - always broken:\n\n - ncsi: prevent multi-threaded channel probing, a spec violation\n\n - vmxnet3: disable rx data ring on dma allocation failure\n\n - ethtool: init tsinfo stats if requested, prevent unintentionally\n reporting all-zero stats on devices which don\u0027t implement any\n\n - dst_cache: fix possible races in less common IPv6 features\n\n - tcp: auth: don\u0027t consider TCP_CLOSE to be in TCP_AO_ESTABLISHED\n\n - ax25: fix two refcounting bugs\n\n - eth: ionic: fix kernel panic in XDP_TX action\n\n Misc:\n\n - tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB\"\n\n* tag \u0027net-6.10-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net: (107 commits)\n selftests: net: lib: set \u0027i\u0027 as local\n selftests: net: lib: avoid error removing empty netns name\n selftests: net: lib: support errexit with busywait\n net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool()\n ipv6: fix possible race in __fib6_drop_pcpu_from()\n af_unix: Annotate data-race of sk-\u003esk_shutdown in sk_diag_fill().\n af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen().\n af_unix: Use skb_queue_empty_lockless() in unix_release_sock().\n af_unix: Use unix_recvq_full_lockless() in unix_stream_connect().\n af_unix: Annotate data-race of net-\u003eunx.sysctl_max_dgram_qlen.\n af_unix: Annotate data-races around sk-\u003esk_sndbuf.\n af_unix: Annotate data-races around sk-\u003esk_state in UNIX_DIAG.\n af_unix: Annotate data-race of sk-\u003esk_state in unix_stream_read_skb().\n af_unix: Annotate data-races around sk-\u003esk_state in sendmsg() and recvmsg().\n af_unix: Annotate data-race of sk-\u003esk_state in unix_accept().\n af_unix: Annotate data-race of sk-\u003esk_state in unix_stream_connect().\n af_unix: Annotate data-races around sk-\u003esk_state in unix_write_space() and poll().\n af_unix: Annotate data-race of sk-\u003esk_state in unix_inq_len().\n af_unix: Annodate data-races around sk-\u003esk_state for writers.\n af_unix: Set sk-\u003esk_state under unix_state_lock() for truly disconencted peer.\n ...\n" }, { "commit": "2faf6332c506fc3bd23815f8fe8f6d0c35271c17", "tree": "07fd8e6a4d7b1663280b6549f6cae5e2340538ba", "parents": [ "a34adf6010d723abc26c9f50ac2b326bf5ae0b9e", "c6144a21169fe7d0d70f1a0dae6f6301e5918d30" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 06 09:48:57 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 06 09:48:57 2024 -0700" }, "message": "Merge tag \u0027tomoyo-pr-20240606\u0027 of git://git.code.sf.net/p/tomoyo/tomoyo\n\nPull tomoyo fixlet from Tetsuo Handa:\n \"Single patch to update project links, no behavior changes\"\n\n* tag \u0027tomoyo-pr-20240606\u0027 of git://git.code.sf.net/p/tomoyo/tomoyo:\n tomoyo: update project links\n" }, { "commit": "a34adf6010d723abc26c9f50ac2b326bf5ae0b9e", "tree": "7fdc774c95a9afbfa8e33ec32194d2b6988f3601", "parents": [ "2df0193e62cf887f373995fb8a91068562784adc", "99280413a5b785f22d91e8a8a66dc38f4a214495" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 06 09:39:36 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 06 09:39:36 2024 -0700" }, "message": "Merge tag \u0027efi-fixes-for-v6.10-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/efi/efi\n\nPull EFI fixes from Ard Biesheuvel:\n\n - Ensure that .discard sections are really discarded in the EFI zboot\n image build\n\n - Return proper error numbers from efi-pstore\n\n - Add __nocfi annotations to EFI runtime wrappers\n\n* tag \u0027efi-fixes-for-v6.10-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/efi/efi:\n efi: Add missing __nocfi annotations to runtime wrappers\n efi: pstore: Return proper errors on UEFI failures\n efi/libstub: zboot.lds: Discard .discard sections\n" }, { "commit": "27bc86540899ee793ab2f4c846e745aa0de443f1", "tree": "e759994fef9a02076b1e854955db06869bf1fdb6", "parents": [ "0dcc53abf58d572d34c5313de85f607cd33fc691", "84a8bc3ec225b28067b168e9410e452c83d706da" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 06 08:23:44 2024 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 06 08:29:07 2024 -0700" }, "message": "Merge branch \u0027selftests-net-lib-small-fixes\u0027\n\nMatthieu Baerts says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nselftests: net: lib: small fixes\n\nWhile looking at using \u0027lib.sh\u0027 for the MPTCP selftests [1], we found\nsome small issues with \u0027lib.sh\u0027. Here they are:\n\n- Patch 1: fix \u0027errexit\u0027 (set -e) support with busywait. \u0027errexit\u0027 is\n supported in some functions, not all. A fix for v6.8+.\n\n- Patch 2: avoid confusing error messages linked to the cleaning part\n when the netns setup fails. A fix for v6.8+.\n\n- Patch 3: set a variable as local to avoid accidentally changing the\n value of a another one with the same name on the caller side. A fix\n for v6.10-rc1+.\n\nLink: https://lore.kernel.org/mptcp/5f4615c3-0621-43c5-ad25-55747a4350ce@kernel.org/T/ [1]\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://lore.kernel.org/r/20240605-upstream-net-20240605-selftests-net-lib-fixes-v1-0-b3afadd368c9@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "84a8bc3ec225b28067b168e9410e452c83d706da", "tree": "e759994fef9a02076b1e854955db06869bf1fdb6", "parents": [ "79322174bcc780b99795cb89d237b26006a8b94b" ], "author": { "name": "Matthieu Baerts (NGI0)", "email": "matttbe@kernel.org", "time": "Wed Jun 05 11:21:18 2024 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 06 08:29:07 2024 -0700" }, "message": "selftests: net: lib: set \u0027i\u0027 as local\n\nWithout this, the \u0027i\u0027 variable declared before could be overridden by\naccident, e.g.\n\n for i in \"${@}\"; do\n __ksft_status_merge \"${i}\" ## \u0027i\u0027 has been modified\n foo \"${i}\" ## using \u0027i\u0027 with an unexpected value\n done\n\nAfter a quick look, it looks like \u0027i\u0027 is currently not used after having\nbeen modified in __ksft_status_merge(), but still, better be safe than\nsorry. I saw this while modifying the same file, not because I suspected\nan issue somewhere.\n\nFixes: 596c8819cb78 (\"selftests: forwarding: Have RET track kselftest framework constants\")\nAcked-by: Geliang Tang \u003cgeliang@kernel.org\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nReviewed-by: Hangbin Liu \u003cliuhangbin@gmail.com\u003e\nLink: https://lore.kernel.org/r/20240605-upstream-net-20240605-selftests-net-lib-fixes-v1-3-b3afadd368c9@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "79322174bcc780b99795cb89d237b26006a8b94b", "tree": "d2b93cdba177f829f4c90306e8d63ea4235f8170", "parents": [ "41b02ea4c0adfcc6761fbfed42c3ce6b6412d881" ], "author": { "name": "Matthieu Baerts (NGI0)", "email": "matttbe@kernel.org", "time": "Wed Jun 05 11:21:17 2024 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 06 08:29:07 2024 -0700" }, "message": "selftests: net: lib: avoid error removing empty netns name\n\nIf there is an error to create the first netns with \u0027setup_ns()\u0027,\n\u0027cleanup_ns()\u0027 will be called with an empty string as first parameter.\n\nThe consequences is that \u0027cleanup_ns()\u0027 will try to delete an invalid\nnetns, and wait 20 seconds if the netns list is empty.\n\nInstead of just checking if the name is not empty, convert the string\nseparated by spaces to an array. Manipulating the array is cleaner, and\ncalling \u0027cleanup_ns()\u0027 with an empty array will be a no-op.\n\nFixes: 25ae948b4478 (\"selftests/net: add lib.sh\")\nCc: stable@vger.kernel.org\nAcked-by: Geliang Tang \u003cgeliang@kernel.org\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nReviewed-by: Petr Machata \u003cpetrm@nvidia.com\u003e\nReviewed-by: Hangbin Liu \u003cliuhangbin@gmail.com\u003e\nLink: https://lore.kernel.org/r/20240605-upstream-net-20240605-selftests-net-lib-fixes-v1-2-b3afadd368c9@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "41b02ea4c0adfcc6761fbfed42c3ce6b6412d881", "tree": "16c19156a186722fd91eebd98275a9cf4f4f6325", "parents": [ "0dcc53abf58d572d34c5313de85f607cd33fc691" ], "author": { "name": "Matthieu Baerts (NGI0)", "email": "matttbe@kernel.org", "time": "Wed Jun 05 11:21:16 2024 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 06 08:29:07 2024 -0700" }, "message": "selftests: net: lib: support errexit with busywait\n\nIf errexit is enabled (\u0027set -e\u0027), loopy_wait -- or busywait and others\nusing it -- will stop after the first failure.\n\nNote that if the returned status of loopy_wait is checked, and even if\nerrexit is enabled, Bash will not stop at the first error.\n\nFixes: 25ae948b4478 (\"selftests/net: add lib.sh\")\nCc: stable@vger.kernel.org\nAcked-by: Geliang Tang \u003cgeliang@kernel.org\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nReviewed-by: Hangbin Liu \u003cliuhangbin@gmail.com\u003e\nLink: https://lore.kernel.org/r/20240605-upstream-net-20240605-selftests-net-lib-fixes-v1-1-b3afadd368c9@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "09fe2bfa6b83f865126ce3964744863f69a4a030", "tree": "926c7252abbdedb7eb6d75a166ef4bd4d544aecd", "parents": [ "3cb648c4dd3e8dde800fb3659250ed11f2d9efa5" ], "author": { "name": "Michael Ellerman", "email": "mpe@ellerman.id.au", "time": "Thu Jun 06 21:14:45 2024 +1000" }, "committer": { "name": "Niklas Cassel", "email": "cassel@kernel.org", "time": "Thu Jun 06 14:53:34 2024 +0200" }, "message": "ata: pata_macio: Fix max_segment_size with PAGE_SIZE \u003d\u003d 64K\n\nThe pata_macio driver advertises a max_segment_size of 0xff00, because\nthe hardware doesn\u0027t cope with requests \u003e\u003d 64K.\n\nHowever the SCSI core requires max_segment_size to be at least\nPAGE_SIZE, which is a problem for pata_macio when the kernel is built\nwith 64K pages.\n\nIn older kernels the SCSI core would just increase the segment size to\nbe equal to PAGE_SIZE, however since the commit tagged below it causes a\nwarning and the device fails to probe:\n\n WARNING: CPU: 0 PID: 26 at block/blk-settings.c:202 .blk_validate_limits+0x2f8/0x35c\n CPU: 0 PID: 26 Comm: kworker/u4:1 Not tainted 6.10.0-rc1 #1\n Hardware name: PowerMac7,2 PPC970 0x390202 PowerMac\n ...\n NIP .blk_validate_limits+0x2f8/0x35c\n LR .blk_alloc_queue+0xc0/0x2f8\n Call Trace:\n .blk_alloc_queue+0xc0/0x2f8\n .blk_mq_alloc_queue+0x60/0xf8\n .scsi_alloc_sdev+0x208/0x3c0\n .scsi_probe_and_add_lun+0x314/0x52c\n .__scsi_add_device+0x170/0x1a4\n .ata_scsi_scan_host+0x2bc/0x3e4\n .async_port_probe+0x6c/0xa0\n .async_run_entry_fn+0x60/0x1bc\n .process_one_work+0x228/0x510\n .worker_thread+0x360/0x530\n .kthread+0x134/0x13c\n .start_kernel_thread+0x10/0x14\n ...\n scsi_alloc_sdev: Allocation failure during SCSI scanning, some SCSI devices might not be configured\n\nAlthough the hardware can\u0027t cope with a 64K segment, the driver\nalready deals with that internally by splitting large requests in\npata_macio_qc_prep(). That is how the driver has managed to function\nuntil now on 64K kernels.\n\nSo fix the driver to advertise a max_segment_size of 64K, which avoids\nthe warning and keeps the SCSI core happy.\n\nFixes: afd53a3d8528 (\"scsi: core: Initialize scsi midlayer limits before allocating the queue\")\nReported-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nCloses: https://lore.kernel.org/all/ce2bf6af-4382-4fe1-b392-cc6829f5ceb2@roeck-us.net/\nReported-by: Doru Iorgulescu \u003cdoru.iorgulescu1@gmail.com\u003e\nCloses: https://bugzilla.kernel.org/show_bug.cgi?id\u003d218858\nSigned-off-by: Michael Ellerman \u003cmpe@ellerman.id.au\u003e\nReviewed-by: Christoph Hellwig \u003chch@lst.de\u003e\nReviewed-by: Damien Le Moal \u003cdlemoal@kernel.org\u003e\nReviewed-by: John Garry \u003cjohn.g.garry@oracle.com\u003e\nSigned-off-by: Niklas Cassel \u003ccassel@kernel.org\u003e\n" }, { "commit": "0dcc53abf58d572d34c5313de85f607cd33fc691", "tree": "fccc039dfb5a35dbdf38fed559628a85187126aa", "parents": [ "b01e1c030770ff3b4fe37fc7cc6bca03f594133f" ], "author": { "name": "Su Hui", "email": "suhui@nfschina.com", "time": "Wed Jun 05 11:47:43 2024 +0800" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jun 06 13:34:33 2024 +0200" }, "message": "net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool()\n\nClang static checker (scan-build) warning:\nnet/ethtool/ioctl.c:line 2233, column 2\nCalled function pointer is null (null dereference).\n\nReturn \u0027-EOPNOTSUPP\u0027 when \u0027ops-\u003eget_ethtool_phy_stats\u0027 is NULL to fix\nthis typo error.\n\nFixes: 201ed315f967 (\"net/ethtool/ioctl: split ethtool_get_phy_stats into multiple helpers\")\nSigned-off-by: Su Hui \u003csuhui@nfschina.com\u003e\nReviewed-by: Przemek Kitszel \u003cprzemyslaw.kitszel@intel.com\u003e\nReviewed-by: Hariprasad Kelam \u003chkelam@marvell.com\u003e\nLink: https://lore.kernel.org/r/20240605034742.921751-1-suhui@nfschina.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "77a92660d8fe8d29503fae768d9f5eb529c88b36", "tree": "c52b053593190fe11f55a4a038769f5188ea3e49", "parents": [ "45c7f555bf5e716d9c6ffb737e97d4cc9b4c21ef" ], "author": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Tue Jun 04 01:19:04 2024 +0900" }, "committer": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Thu Jun 06 20:09:10 2024 +0900" }, "message": "kconfig: remove wrong expr_trans_bool()\n\nexpr_trans_bool() performs an incorrect transformation.\n\n[Test Code]\n\n config MODULES\n def_bool y\n modules\n\n config A\n def_bool y\n select C if B !\u003d n\n\n config B\n def_tristate m\n\n config C\n tristate\n\n[Result]\n\n CONFIG_MODULES\u003dy\n CONFIG_A\u003dy\n CONFIG_B\u003dm\n CONFIG_C\u003dm\n\nThis output is incorrect because CONFIG_C\u003dy is expected.\n\nDocumentation/kbuild/kconfig-language.rst clearly explains the function\nof the \u0027!\u003d\u0027 operator:\n\n If the values of both symbols are equal, it returns \u0027n\u0027,\n otherwise \u0027y\u0027.\n\nTherefore, the statement:\n\n select C if B !\u003d n\n\nshould be equivalent to:\n\n select C if y\n\nOr, more simply:\n\n select C\n\nHence, the symbol C should be selected by the value of A, which is \u0027y\u0027.\n\nHowever, expr_trans_bool() wrongly transforms it to:\n\n select C if B\n\nTherefore, the symbol C is selected by (A \u0026\u0026 B), which is \u0027m\u0027.\n\nThe comment block of expr_trans_bool() correctly explains its intention:\n\n * bool FOO!\u003dn \u003d\u003e FOO\n ^^^^\n\nIf FOO is bool, FOO!\u003dn can be simplified into FOO. This is correct.\n\nHowever, the actual code performs this transformation when FOO is\ntristate:\n\n if (e-\u003eleft.sym-\u003etype \u003d\u003d S_TRISTATE) {\n ^^^^^^^^^^\n\nWhile it can be fixed to S_BOOLEAN, there is no point in doing so\nbecause expr_tranform() already transforms FOO!\u003dn to FOO when FOO is\nbool. (see the \"case E_UNEQUAL\" part)\n\nexpr_trans_bool() is wrong and unnecessary.\n\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nAcked-by: Randy Dunlap \u003crdunlap@infradead.org\u003e\n" }, { "commit": "b01e1c030770ff3b4fe37fc7cc6bca03f594133f", "tree": "99a73ff436c24c38a744f4cb67ad8065a8ecf948", "parents": [ "411c0ea696cc4fcd14a32f2093c909e0c59c5dd7" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Tue Jun 04 19:35:49 2024 +0000" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jun 06 13:05:54 2024 +0200" }, "message": "ipv6: fix possible race in __fib6_drop_pcpu_from()\n\nsyzbot found a race in __fib6_drop_pcpu_from() [1]\n\nIf compiler reads more than once (*ppcpu_rt),\nsecond read could read NULL, if another cpu clears\nthe value in rt6_get_pcpu_route().\n\nAdd a READ_ONCE() to prevent this race.\n\nAlso add rcu_read_lock()/rcu_read_unlock() because\nwe rely on RCU protection while dereferencing pcpu_rt.\n\n[1]\n\nOops: general protection fault, probably for non-canonical address 0xdffffc0000000012: 0000 [#1] PREEMPT SMP KASAN PTI\nKASAN: null-ptr-deref in range [0x0000000000000090-0x0000000000000097]\nCPU: 0 PID: 7543 Comm: kworker/u8:17 Not tainted 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024\nWorkqueue: netns cleanup_net\n RIP: 0010:__fib6_drop_pcpu_from.part.0+0x10a/0x370 net/ipv6/ip6_fib.c:984\nCode: f8 48 c1 e8 03 80 3c 28 00 0f 85 16 02 00 00 4d 8b 3f 4d 85 ff 74 31 e8 74 a7 fa f7 49 8d bf 90 00 00 00 48 89 f8 48 c1 e8 03 \u003c80\u003e 3c 28 00 0f 85 1e 02 00 00 49 8b 87 90 00 00 00 48 8b 0c 24 48\nRSP: 0018:ffffc900040df070 EFLAGS: 00010206\nRAX: 0000000000000012 RBX: 0000000000000001 RCX: ffffffff89932e16\nRDX: ffff888049dd1e00 RSI: ffffffff89932d7c RDI: 0000000000000091\nRBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000007\nR10: 0000000000000001 R11: 0000000000000006 R12: ffff88807fa080b8\nR13: fffffbfff1a9a07d R14: ffffed100ff41022 R15: 0000000000000001\nFS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000001b32c26000 CR3: 000000005d56e000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n __fib6_drop_pcpu_from net/ipv6/ip6_fib.c:966 [inline]\n fib6_drop_pcpu_from net/ipv6/ip6_fib.c:1027 [inline]\n fib6_purge_rt+0x7f2/0x9f0 net/ipv6/ip6_fib.c:1038\n fib6_del_route net/ipv6/ip6_fib.c:1998 [inline]\n fib6_del+0xa70/0x17b0 net/ipv6/ip6_fib.c:2043\n fib6_clean_node+0x426/0x5b0 net/ipv6/ip6_fib.c:2205\n fib6_walk_continue+0x44f/0x8d0 net/ipv6/ip6_fib.c:2127\n fib6_walk+0x182/0x370 net/ipv6/ip6_fib.c:2175\n fib6_clean_tree+0xd7/0x120 net/ipv6/ip6_fib.c:2255\n __fib6_clean_all+0x100/0x2d0 net/ipv6/ip6_fib.c:2271\n rt6_sync_down_dev net/ipv6/route.c:4906 [inline]\n rt6_disable_ip+0x7ed/0xa00 net/ipv6/route.c:4911\n addrconf_ifdown.isra.0+0x117/0x1b40 net/ipv6/addrconf.c:3855\n addrconf_notify+0x223/0x19e0 net/ipv6/addrconf.c:3778\n notifier_call_chain+0xb9/0x410 kernel/notifier.c:93\n call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:1992\n call_netdevice_notifiers_extack net/core/dev.c:2030 [inline]\n call_netdevice_notifiers net/core/dev.c:2044 [inline]\n dev_close_many+0x333/0x6a0 net/core/dev.c:1585\n unregister_netdevice_many_notify+0x46d/0x19f0 net/core/dev.c:11193\n unregister_netdevice_many net/core/dev.c:11276 [inline]\n default_device_exit_batch+0x85b/0xae0 net/core/dev.c:11759\n ops_exit_list+0x128/0x180 net/core/net_namespace.c:178\n cleanup_net+0x5b7/0xbf0 net/core/net_namespace.c:640\n process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231\n process_scheduled_works kernel/workqueue.c:3312 [inline]\n worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393\n kthread+0x2c1/0x3a0 kernel/kthread.c:389\n ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\nFixes: d52d3997f843 (\"ipv6: Create percpu rt6_info\")\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nCc: Martin KaFai Lau \u003ckafai@fb.com\u003e\nLink: https://lore.kernel.org/r/20240604193549.981839-1-edumazet@google.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "45c7f555bf5e716d9c6ffb737e97d4cc9b4c21ef", "tree": "426e7abc7cb9e4b62085222a1675db697c54d1c9", "parents": [ "bf83266a1eef8251e2f126dba635039de069104a" ], "author": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Tue Jun 04 01:19:03 2024 +0900" }, "committer": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Thu Jun 06 20:05:15 2024 +0900" }, "message": "kconfig: doc: document behavior of \u0027select\u0027 and \u0027imply\u0027 followed by \u0027if\u0027\n\nDocumentation/kbuild/kconfig-language.rst explains the behavior of\n\u0027select\u0027 as follows:\n\n reverse dependencies can be used to force a lower limit of\n another symbol. The value of the current menu symbol is used as the\n minimal value \u003csymbol\u003e can be set to.\n\nThis is not true when the \u0027select\u0027 property is followed by \u0027if\u0027.\n\n[Test Code]\n\n config MODULES\n def_bool y\n modules\n\n config A\n def_tristate y\n select C if B\n\n config B\n def_tristate m\n\n config C\n tristate\n\n[Result]\n\n CONFIG_MODULES\u003dy\n CONFIG_A\u003dy\n CONFIG_B\u003dm\n CONFIG_C\u003dm\n\nIf \"the value of A is used as the minimal value C can be set to\",\nC must be \u0027y\u0027.\n\nThe actual behavior is \"C is selected by (A \u0026\u0026 B)\". The lower limit of\nC is downgraded due to B being \u0027m\u0027.\n\nThis behavior is kind of weird, and this has arisen several times in\nthe mailing list.\n\nI do not know whether it is a bug or intended behavior. Anyway, it is\nnot feasible to change it now because many Kconfig files are written\nbased on this behavior. The same applies to \u0027imply\u0027.\n\nDocument this (but reserve the possibility for a future change).\n\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nReviewed-by: Randy Dunlap \u003crdunlap@infradead.org\u003e\n" }, { "commit": "bf83266a1eef8251e2f126dba635039de069104a", "tree": "64fd37174465cb671404c2af1f8485db5aa361f3", "parents": [ "46edf4372e336ef3a61c3126e49518099d2e2e6d" ], "author": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Tue Jun 04 01:19:02 2024 +0900" }, "committer": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Thu Jun 06 20:03:16 2024 +0900" }, "message": "kconfig: doc: fix a typo in the note about \u0027imply\u0027\n\nThis sentence does not make sense due to a typo. Fix it.\n\nFixes: def2fbffe62c (\"kconfig: allow symbols implied by y to become m\")\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nReviewed-by: Randy Dunlap \u003crdunlap@infradead.org\u003e\n" }, { "commit": "46edf4372e336ef3a61c3126e49518099d2e2e6d", "tree": "6741cb883d7da0f4d7b6cb6ad5ac8b7c95c5b566", "parents": [ "c181689bc479d3b2300f91fc4d53e089d7631898" ], "author": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Sun Jun 02 03:20:40 2024 +0900" }, "committer": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Thu Jun 06 20:03:16 2024 +0900" }, "message": "kconfig: gconf: give a proper initial state to the Save button\n\nCurrently, the initial state of the \"Save\" button is always active.\n\nIf none of the CONFIG options are changed while loading the .config\nfile, the \"Save\" button should be greyed out.\n\nThis can be fixed by calling conf_read() after widget initialization.\n\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\n" }, { "commit": "c181689bc479d3b2300f91fc4d53e089d7631898", "tree": "55599dc510bd4bd2319472dd6bd9f342f5bf8377", "parents": [ "c3f38fa61af77b49866b006939479069cd451173" ], "author": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Sun Jun 02 03:20:38 2024 +0900" }, "committer": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Thu Jun 06 20:03:14 2024 +0900" }, "message": "kconfig: remove unneeded code for user-supplied values being out of range\n\nThis is a leftover from commit ce1fc9345a59 (\"kconfig: do not clear\nSYMBOL_DEF_USER when the value is out of range\").\n\nThis code is now redundant because if a user-supplied value is out\nof range, the value adjusted by sym_validate_range() differs, and\nconf_unsaved has already been incremented a few lines above.\n\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\n" }, { "commit": "411c0ea696cc4fcd14a32f2093c909e0c59c5dd7", "tree": "42ca942ab931b6967d93e9183b4712b902993697", "parents": [ "b0c9a26435413b81799047a7be53255640432547", "efaf24e30ec39ebbea9112227485805a48b0ceb1" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jun 06 12:57:17 2024 +0200" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jun 06 12:57:18 2024 +0200" }, "message": "Merge branch \u0027af_unix-fix-lockless-access-of-sk-sk_state-and-others-fields\u0027\n\nKuniyuki Iwashima says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\naf_unix: Fix lockless access of sk-\u003esk_state and others fields.\n\nThe patch 1 fixes a bug where SOCK_DGRAM\u0027s sk-\u003esk_state is changed\nto TCP_CLOSE even if the socket is connect()ed to another socket.\n\nThe rest of this series annotates lockless accesses to the following\nfields.\n\n * sk-\u003esk_state\n * sk-\u003esk_sndbuf\n * net-\u003eunx.sysctl_max_dgram_qlen\n * sk-\u003esk_receive_queue.qlen\n * sk-\u003esk_shutdown\n\nNote that with this series there is skb_queue_empty() left in\nunix_dgram_disconnected() that needs to be changed to lockless\nversion, and unix_peer(other) access there should be protected\nby unix_state_lock().\n\nThis will require some refactoring, so another series will follow.\n\nChanges:\n v2:\n * Patch 1: Fix wrong double lock\n\n v1: https://lore.kernel.org/netdev/20240603143231.62085-1-kuniyu@amazon.com/\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://lore.kernel.org/r/20240604165241.44758-1-kuniyu@amazon.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "efaf24e30ec39ebbea9112227485805a48b0ceb1", "tree": "42ca942ab931b6967d93e9183b4712b902993697", "parents": [ "5d915e584d8408211d4567c22685aae8820bfc55" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@amazon.com", "time": "Tue Jun 04 09:52:41 2024 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jun 06 12:57:15 2024 +0200" }, "message": "af_unix: Annotate data-race of sk-\u003esk_shutdown in sk_diag_fill().\n\nWhile dumping sockets via UNIX_DIAG, we do not hold unix_state_lock().\n\nLet\u0027s use READ_ONCE() to read sk-\u003esk_shutdown.\n\nFixes: e4e541a84863 (\"sock-diag: Report shutdown for inet and unix sockets (v2)\")\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "5d915e584d8408211d4567c22685aae8820bfc55", "tree": "5b53da9233db0adf0c085411637d4c1d12eecac5", "parents": [ "83690b82d228b3570565ebd0b41873933238b97f" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@amazon.com", "time": "Tue Jun 04 09:52:40 2024 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jun 06 12:57:15 2024 +0200" }, "message": "af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen().\n\nWe can dump the socket queue length via UNIX_DIAG by specifying\nUDIAG_SHOW_RQLEN.\n\nIf sk-\u003esk_state is TCP_LISTEN, we return the recv queue length,\nbut here we do not hold recvq lock.\n\nLet\u0027s use skb_queue_len_lockless() in sk_diag_show_rqlen().\n\nFixes: c9da99e6475f (\"unix_diag: Fixup RQLEN extension report\")\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "83690b82d228b3570565ebd0b41873933238b97f", "tree": "9f413da3100800b7802347361c77333bce00a073", "parents": [ "45d872f0e65593176d880ec148f41ad7c02e40a7" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@amazon.com", "time": "Tue Jun 04 09:52:39 2024 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jun 06 12:57:15 2024 +0200" }, "message": "af_unix: Use skb_queue_empty_lockless() in unix_release_sock().\n\nIf the socket type is SOCK_STREAM or SOCK_SEQPACKET, unix_release_sock()\nchecks the length of the peer socket\u0027s recvq under unix_state_lock().\n\nHowever, unix_stream_read_generic() calls skb_unlink() after releasing\nthe lock. Also, for SOCK_SEQPACKET, __skb_try_recv_datagram() unlinks\nskb without unix_state_lock().\n\nThues, unix_state_lock() does not protect qlen.\n\nLet\u0027s use skb_queue_empty_lockless() in unix_release_sock().\n\nFixes: 1da177e4c3f4 (\"Linux-2.6.12-rc2\")\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "45d872f0e65593176d880ec148f41ad7c02e40a7", "tree": "8a6a71d8fedbb2afe251cafb9099e85dad2abf21", "parents": [ "bd9f2d05731f6a112d0c7391a0d537bfc588dbe6" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@amazon.com", "time": "Tue Jun 04 09:52:38 2024 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jun 06 12:57:15 2024 +0200" }, "message": "af_unix: Use unix_recvq_full_lockless() in unix_stream_connect().\n\nOnce sk-\u003esk_state is changed to TCP_LISTEN, it never changes.\n\nunix_accept() takes advantage of this characteristics; it does not\nhold the listener\u0027s unix_state_lock() and only acquires recvq lock\nto pop one skb.\n\nIt means unix_state_lock() does not prevent the queue length from\nchanging in unix_stream_connect().\n\nThus, we need to use unix_recvq_full_lockless() to avoid data-race.\n\nNow we remove unix_recvq_full() as no one uses it.\n\nNote that we can remove READ_ONCE() for sk-\u003esk_max_ack_backlog in\nunix_recvq_full_lockless() because of the following reasons:\n\n (1) For SOCK_DGRAM, it is a written-once field in unix_create1()\n\n (2) For SOCK_STREAM and SOCK_SEQPACKET, it is changed under the\n listener\u0027s unix_state_lock() in unix_listen(), and we hold\n the lock in unix_stream_connect()\n\nFixes: 1da177e4c3f4 (\"Linux-2.6.12-rc2\")\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "bd9f2d05731f6a112d0c7391a0d537bfc588dbe6", "tree": "ee79208fb687f270e67903ebdd83667de7b1a92e", "parents": [ "b0632e53e0da8054e36bc973f0eec69d30f1b7c6" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@amazon.com", "time": "Tue Jun 04 09:52:37 2024 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jun 06 12:57:15 2024 +0200" }, "message": "af_unix: Annotate data-race of net-\u003eunx.sysctl_max_dgram_qlen.\n\nnet-\u003eunx.sysctl_max_dgram_qlen is exposed as a sysctl knob and can be\nchanged concurrently.\n\nLet\u0027s use READ_ONCE() in unix_create1().\n\nFixes: 1da177e4c3f4 (\"Linux-2.6.12-rc2\")\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "b0632e53e0da8054e36bc973f0eec69d30f1b7c6", "tree": "55f9a3cbd54faf873a66fd7b5f973ce927433a98", "parents": [ "0aa3be7b3e1f8f997312cc4705f8165e02806f8f" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@amazon.com", "time": "Tue Jun 04 09:52:36 2024 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jun 06 12:57:15 2024 +0200" }, "message": "af_unix: Annotate data-races around sk-\u003esk_sndbuf.\n\nsk_setsockopt() changes sk-\u003esk_sndbuf under lock_sock(), but it\u0027s\nnot used in af_unix.c.\n\nLet\u0027s use READ_ONCE() to read sk-\u003esk_sndbuf in unix_writable(),\nunix_dgram_sendmsg(), and unix_stream_sendmsg().\n\nFixes: 1da177e4c3f4 (\"Linux-2.6.12-rc2\")\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "0aa3be7b3e1f8f997312cc4705f8165e02806f8f", "tree": "a8b4eb18a920cabd991a98032090ec8ca9f61f65", "parents": [ "af4c733b6b1aded4dc808fafece7dfe6e9d2ebb3" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@amazon.com", "time": "Tue Jun 04 09:52:35 2024 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jun 06 12:57:15 2024 +0200" }, "message": "af_unix: Annotate data-races around sk-\u003esk_state in UNIX_DIAG.\n\nWhile dumping AF_UNIX sockets via UNIX_DIAG, sk-\u003esk_state is read\nlocklessly.\n\nLet\u0027s use READ_ONCE() there.\n\nNote that the result could be inconsistent if the socket is dumped\nduring the state change. This is common for other SOCK_DIAG and\nsimilar interfaces.\n\nFixes: c9da99e6475f (\"unix_diag: Fixup RQLEN extension report\")\nFixes: 2aac7a2cb0d9 (\"unix_diag: Pending connections IDs NLA\")\nFixes: 45a96b9be6ec (\"unix_diag: Dumping all sockets core\")\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "af4c733b6b1aded4dc808fafece7dfe6e9d2ebb3", "tree": "7c3c42ace6d46f7cce5604ea5bc3d651769b0435", "parents": [ "8a34d4e8d9742a24f74998f45a6a98edd923319b" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@amazon.com", "time": "Tue Jun 04 09:52:34 2024 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jun 06 12:57:14 2024 +0200" }, "message": "af_unix: Annotate data-race of sk-\u003esk_state in unix_stream_read_skb().\n\nunix_stream_read_skb() is called from sk-\u003esk_data_ready() context\nwhere unix_state_lock() is not held.\n\nLet\u0027s use READ_ONCE() there.\n\nFixes: 77462de14a43 (\"af_unix: Add read_sock for stream socket types\")\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "8a34d4e8d9742a24f74998f45a6a98edd923319b", "tree": "0688dde70f33a26539899657383a8bf424416445", "parents": [ "1b536948e805aab61a48c5aa5db10c9afee880bd" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@amazon.com", "time": "Tue Jun 04 09:52:33 2024 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jun 06 12:57:14 2024 +0200" }, "message": "af_unix: Annotate data-races around sk-\u003esk_state in sendmsg() and recvmsg().\n\nThe following functions read sk-\u003esk_state locklessly and proceed only if\nthe state is TCP_ESTABLISHED.\n\n * unix_stream_sendmsg\n * unix_stream_read_generic\n * unix_seqpacket_sendmsg\n * unix_seqpacket_recvmsg\n\nLet\u0027s use READ_ONCE() there.\n\nFixes: a05d2ad1c1f3 (\"af_unix: Only allow recv on connected seqpacket sockets.\")\nFixes: 1da177e4c3f4 (\"Linux-2.6.12-rc2\")\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "1b536948e805aab61a48c5aa5db10c9afee880bd", "tree": "4f2a729d92553182deb5e397f931f1408a4a323e", "parents": [ "a9bf9c7dc6a5899c01cb8f6e773a66315a5cd4b7" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@amazon.com", "time": "Tue Jun 04 09:52:32 2024 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jun 06 12:57:14 2024 +0200" }, "message": "af_unix: Annotate data-race of sk-\u003esk_state in unix_accept().\n\nOnce sk-\u003esk_state is changed to TCP_LISTEN, it never changes.\n\nunix_accept() takes the advantage and reads sk-\u003esk_state without\nholding unix_state_lock().\n\nLet\u0027s use READ_ONCE() there.\n\nFixes: 1da177e4c3f4 (\"Linux-2.6.12-rc2\")\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "a9bf9c7dc6a5899c01cb8f6e773a66315a5cd4b7", "tree": "f03bcb7441f9301a0030360666961331997af287", "parents": [ "eb0718fb3e97ad0d6f4529b810103451c90adf94" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@amazon.com", "time": "Tue Jun 04 09:52:31 2024 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jun 06 12:57:14 2024 +0200" }, "message": "af_unix: Annotate data-race of sk-\u003esk_state in unix_stream_connect().\n\nAs small optimisation, unix_stream_connect() prefetches the client\u0027s\nsk-\u003esk_state without unix_state_lock() and checks if it\u0027s TCP_CLOSE.\n\nLater, sk-\u003esk_state is checked again under unix_state_lock().\n\nLet\u0027s use READ_ONCE() for the first check and TCP_CLOSE directly for\nthe second check.\n\nFixes: 1da177e4c3f4 (\"Linux-2.6.12-rc2\")\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "eb0718fb3e97ad0d6f4529b810103451c90adf94", "tree": "65dc6bc0c97752c8ac14bb622b9da3581b2affed", "parents": [ "3a0f38eb285c8c2eead4b3230c7ac2983707599d" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@amazon.com", "time": "Tue Jun 04 09:52:30 2024 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jun 06 12:57:14 2024 +0200" }, "message": "af_unix: Annotate data-races around sk-\u003esk_state in unix_write_space() and poll().\n\nunix_poll() and unix_dgram_poll() read sk-\u003esk_state locklessly and\ncalls unix_writable() which also reads sk-\u003esk_state without holding\nunix_state_lock().\n\nLet\u0027s use READ_ONCE() in unix_poll() and unix_dgram_poll() and pass\nit to unix_writable().\n\nWhile at it, we remove TCP_SYN_SENT check in unix_dgram_poll() as\nthat state does not exist for AF_UNIX socket since the code was added.\n\nFixes: 1586a5877db9 (\"af_unix: do not report POLLOUT on listeners\")\nFixes: 3c73419c09a5 (\"af_unix: fix \u0027poll for write\u0027/ connected DGRAM sockets\")\nFixes: 1da177e4c3f4 (\"Linux-2.6.12-rc2\")\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "3a0f38eb285c8c2eead4b3230c7ac2983707599d", "tree": "f09fc28897bf150f7e88fa18ca979758d58759d4", "parents": [ "942238f9735a4a4ebf8274b218d9a910158941d1" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@amazon.com", "time": "Tue Jun 04 09:52:29 2024 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jun 06 12:57:14 2024 +0200" }, "message": "af_unix: Annotate data-race of sk-\u003esk_state in unix_inq_len().\n\nioctl(SIOCINQ) calls unix_inq_len() that checks sk-\u003esk_state first\nand returns -EINVAL if it\u0027s TCP_LISTEN.\n\nThen, for SOCK_STREAM sockets, unix_inq_len() returns the number of\nbytes in recvq.\n\nHowever, unix_inq_len() does not hold unix_state_lock(), and the\nconcurrent listen() might change the state after checking sk-\u003esk_state.\n\nIf the race occurs, 0 is returned for the listener, instead of -EINVAL,\nbecause the length of skb with embryo is 0.\n\nWe could hold unix_state_lock() in unix_inq_len(), but it\u0027s overkill\ngiven the result is true for pre-listen() TCP_CLOSE state.\n\nSo, let\u0027s use READ_ONCE() for sk-\u003esk_state in unix_inq_len().\n\nFixes: 1da177e4c3f4 (\"Linux-2.6.12-rc2\")\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "942238f9735a4a4ebf8274b218d9a910158941d1", "tree": "9239edf0c4e347bfa3f75e465f6027958c8e6c2b", "parents": [ "26bfb8b57063f52b867f9b6c8d1742fcb5bd656c" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@amazon.com", "time": "Tue Jun 04 09:52:28 2024 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jun 06 12:57:14 2024 +0200" }, "message": "af_unix: Annodate data-races around sk-\u003esk_state for writers.\n\nsk-\u003esk_state is changed under unix_state_lock(), but it\u0027s read locklessly\nin many places.\n\nThis patch adds WRITE_ONCE() on the writer side.\n\nWe will add READ_ONCE() to the lockless readers in the following patches.\n\nFixes: 83301b5367a9 (\"af_unix: Set TCP_ESTABLISHED for datagram sockets too\")\nFixes: 1da177e4c3f4 (\"Linux-2.6.12-rc2\")\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "26bfb8b57063f52b867f9b6c8d1742fcb5bd656c", "tree": "20bee45a0ecf8d84df8e96a310a53abd97cc207e", "parents": [ "b0c9a26435413b81799047a7be53255640432547" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@amazon.com", "time": "Tue Jun 04 09:52:27 2024 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jun 06 12:57:14 2024 +0200" }, "message": "af_unix: Set sk-\u003esk_state under unix_state_lock() for truly disconencted peer.\n\nWhen a SOCK_DGRAM socket connect()s to another socket, the both sockets\u0027\nsk-\u003esk_state are changed to TCP_ESTABLISHED so that we can register them\nto BPF SOCKMAP.\n\nWhen the socket disconnects from the peer by connect(AF_UNSPEC), the state\nis set back to TCP_CLOSE.\n\nThen, the peer\u0027s state is also set to TCP_CLOSE, but the update is done\nlocklessly and unconditionally.\n\nLet\u0027s say socket A connect()ed to B, B connect()ed to C, and A disconnects\nfrom B.\n\nAfter the first two connect()s, all three sockets\u0027 sk-\u003esk_state are\nTCP_ESTABLISHED:\n\n $ ss -xa\n Netid State Recv-Q Send-Q Local Address:Port Peer Address:PortProcess\n u_dgr ESTAB 0 0 @A 641 * 642\n u_dgr ESTAB 0 0 @B 642 * 643\n u_dgr ESTAB 0 0 @C 643 * 0\n\nAnd after the disconnect, B\u0027s state is TCP_CLOSE even though it\u0027s still\nconnected to C and C\u0027s state is TCP_ESTABLISHED.\n\n $ ss -xa\n Netid State Recv-Q Send-Q Local Address:Port Peer Address:PortProcess\n u_dgr UNCONN 0 0 @A 641 * 0\n u_dgr UNCONN 0 0 @B 642 * 643\n u_dgr ESTAB 0 0 @C 643 * 0\n\nIn this case, we cannot register B to SOCKMAP.\n\nSo, when a socket disconnects from the peer, we should not set TCP_CLOSE to\nthe peer if the peer is connected to yet another socket, and this must be\ndone under unix_state_lock().\n\nNote that we use WRITE_ONCE() for sk-\u003esk_state as there are many lockless\nreaders. These data-races will be fixed in the following patches.\n\nFixes: 83301b5367a9 (\"af_unix: Set TCP_ESTABLISHED for datagram sockets too\")\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "b0c9a26435413b81799047a7be53255640432547", "tree": "afd0780f02f39bf810212176bd2ff12de07ade06", "parents": [ "5899c885131a7b2926ed26f6a5df1fc3c878418d" ], "author": { "name": "Aleksandr Mishin", "email": "amishin@t-argos.ru", "time": "Tue Jun 04 11:25:00 2024 +0300" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jun 06 10:15:14 2024 +0200" }, "message": "net: wwan: iosm: Fix tainted pointer delete is case of region creation fail\n\nIn case of region creation fail in ipc_devlink_create_region(), previously\ncreated regions delete process starts from tainted pointer which actually\nholds error code value.\nFix this bug by decreasing region index before delete.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.\n\nFixes: 4dcd183fbd67 (\"net: wwan: iosm: devlink registration\")\nSigned-off-by: Aleksandr Mishin \u003camishin@t-argos.ru\u003e\nAcked-by: Sergey Ryazanov \u003cryazanov.s.a@gmail.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://lore.kernel.org/r/20240604082500.20769-1-amishin@t-argos.ru\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "5703fc058efdafcdd6b70776ee562478f0753acb", "tree": "47737f0df8eec5e16cac067489bea7be7f0a774b", "parents": [ "b91e05f1fcf755c9d2c4ca10907383e39def05bd" ], "author": { "name": "Ian Forbes", "email": "ian.forbes@broadcom.com", "time": "Thu Mar 28 14:07:16 2024 -0500" }, "committer": { "name": "Zack Rusin", "email": "zack.rusin@broadcom.com", "time": "Wed Jun 05 22:38:40 2024 -0400" }, "message": "drm/vmwgfx: Don\u0027t memcmp equivalent pointers\n\nThese pointers are frequently the same and memcmp does not compare the\npointers before comparing their contents so this was wasting cycles\ncomparing 16 KiB of memory which will always be equal.\n\nFixes: bb6780aa5a1d (\"drm/vmwgfx: Diff cursors when using cmds\")\nSigned-off-by: Ian Forbes \u003cian.forbes@broadcom.com\u003e\nSigned-off-by: Zack Rusin \u003czack.rusin@broadcom.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20240328190716.27367-1-ian.forbes@broadcom.com\n" }, { "commit": "5899c885131a7b2926ed26f6a5df1fc3c878418d", "tree": "4cb6faca8dd7c6e27e47ec75bf9e106493624f80", "parents": [ "886bf9172da06a85de3c68a651477d7d625fd6cc", "7d67d11fbe194f71298263f48e33ae2afa38197e" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Jun 05 19:28:05 2024 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Jun 05 19:28:06 2024 -0700" }, "message": "Merge branch \u0027intel-wired-lan-driver-updates-2024-05-29-ice-igc\u0027\n\nJacob Keller says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nIntel Wired LAN Driver Updates 2024-05-29 (ice, igc)\n\nThis series includes fixes for the ice driver as well as a fix for the igc\ndriver.\n\nJacob fixes two issues in the ice driver with reading the NVM for providing\nfirmware data via devlink info. First, fix an off-by-one error when reading\nthe Preserved Fields Area, resolving an infinite loop triggered on some\nNVMs which lack certain data in the NVM. Second, fix the reading of the NVM\nShadow RAM on newer E830 and E825-C devices which have a variable sized CSS\nheader rather than assuming this header is always the same fixed size as in\nthe E810 devices.\n\nLarysa fixes three issues with the ice driver XDP logic that could occur if\nthe number of queues is changed after enabling an XDP program. First, the\naf_xdp_zc_qps bitmap is removed and replaced by simpler logic to track\nwhether queues are in zero-copy mode. Second, the reset and .ndo_bpf flows\nare distinguished to avoid potential races with a PF reset occuring\nsimultaneously to .ndo_bpf callback from userspace. Third, the logic for\nmapping XDP queues to vectors is fixed so that XDP state is restored for\nXDP queues after a reconfiguration.\n\nSasha fixes reporting of Energy Efficient Ethernet support via ethtool in\nthe igc driver.\n\nv1: https://lore.kernel.org/r/20240530-net-2024-05-30-intel-net-fixes-v1-0-8b11c8c9bff8@intel.com\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://lore.kernel.org/r/20240603-net-2024-05-30-intel-net-fixes-v2-0-e3563aa89b0c@intel.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "7d67d11fbe194f71298263f48e33ae2afa38197e", "tree": "4cb6faca8dd7c6e27e47ec75bf9e106493624f80", "parents": [ "f3df4044254c98128890b512bf19cc05588f1fe5" ], "author": { "name": "Sasha Neftin", "email": "sasha.neftin@intel.com", "time": "Mon Jun 03 14:42:35 2024 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Jun 05 19:27:56 2024 -0700" }, "message": "igc: Fix Energy Efficient Ethernet support declaration\n\nThe commit 01cf893bf0f4 (\"net: intel: i40e/igc: Remove setting Autoneg in\nEEE capabilities\") removed SUPPORTED_Autoneg field but left inappropriate\nethtool_keee structure initialization. When \"ethtool --show \u003cdevice\u003e\"\n(get_eee) invoke, the \u0027ethtool_keee\u0027 structure was accidentally overridden.\nRemove the \u0027ethtool_keee\u0027 overriding and add EEE declaration as per IEEE\nspecification that allows reporting Energy Efficient Ethernet capabilities.\n\nExamples:\nBefore fix:\nethtool --show-eee enp174s0\nEEE settings for enp174s0:\n\tEEE status: not supported\n\nAfter fix:\nEEE settings for enp174s0:\n\tEEE status: disabled\n\tTx LPI: disabled\n\tSupported EEE link modes: 100baseT/Full\n\t 1000baseT/Full\n\t 2500baseT/Full\n\nFixes: 01cf893bf0f4 (\"net: intel: i40e/igc: Remove setting Autoneg in EEE capabilities\")\nSuggested-by: Dima Ruinskiy \u003cdima.ruinskiy@intel.com\u003e\nSigned-off-by: Sasha Neftin \u003csasha.neftin@intel.com\u003e\nTested-by: Naama Meir \u003cnaamax.meir@linux.intel.com\u003e\nSigned-off-by: Jacob Keller \u003cjacob.e.keller@intel.com\u003e\nLink: https://lore.kernel.org/r/20240603-net-2024-05-30-intel-net-fixes-v2-6-e3563aa89b0c@intel.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "f3df4044254c98128890b512bf19cc05588f1fe5", "tree": "09c7452f1b084e7918c0cdce028c8866ba58eb90", "parents": [ "744d197162c2070a6045a71e2666ed93a57cc65d" ], "author": { "name": "Larysa Zaremba", "email": "larysa.zaremba@intel.com", "time": "Mon Jun 03 14:42:34 2024 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Jun 05 19:27:56 2024 -0700" }, "message": "ice: map XDP queues to vectors in ice_vsi_map_rings_to_vectors()\n\nice_pf_dcb_recfg() re-maps queues to vectors with\nice_vsi_map_rings_to_vectors(), which does not restore the previous\nstate for XDP queues. This leads to no AF_XDP traffic after rebuild.\n\nMap XDP queues to vectors in ice_vsi_map_rings_to_vectors().\nAlso, move the code around, so XDP queues are mapped independently only\nthrough .ndo_bpf().\n\nFixes: 6624e780a577 (\"ice: split ice_vsi_setup into smaller functions\")\nReviewed-by: Przemek Kitszel \u003cprzemyslaw.kitszel@intel.com\u003e\nSigned-off-by: Larysa Zaremba \u003clarysa.zaremba@intel.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nTested-by: Chandan Kumar Rout \u003cchandanx.rout@intel.com\u003e\nSigned-off-by: Jacob Keller \u003cjacob.e.keller@intel.com\u003e\nLink: https://lore.kernel.org/r/20240603-net-2024-05-30-intel-net-fixes-v2-5-e3563aa89b0c@intel.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "744d197162c2070a6045a71e2666ed93a57cc65d", "tree": "bf5fb21ba711a6cb451fe69519c997880ad449b6", "parents": [ "adbf5a42341f6ea038d3626cd4437d9f0ad0b2dd" ], "author": { "name": "Larysa Zaremba", "email": "larysa.zaremba@intel.com", "time": "Mon Jun 03 14:42:33 2024 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Jun 05 19:27:56 2024 -0700" }, "message": "ice: add flag to distinguish reset from .ndo_bpf in XDP rings config\n\nCommit 6624e780a577 (\"ice: split ice_vsi_setup into smaller functions\")\nhas placed ice_vsi_free_q_vectors() after ice_destroy_xdp_rings() in\nthe rebuild process. The behaviour of the XDP rings config functions is\ncontext-dependent, so the change of order has led to\nice_destroy_xdp_rings() doing additional work and removing XDP prog, when\nit was supposed to be preserved.\n\nAlso, dependency on the PF state reset flags creates an additional,\nfortunately less common problem:\n\n* PFR is requested e.g. by tx_timeout handler\n* .ndo_bpf() is asked to delete the program, calls ice_destroy_xdp_rings(),\n but reset flag is set, so rings are destroyed without deleting the\n program\n* ice_vsi_rebuild tries to delete non-existent XDP rings, because the\n program is still on the VSI\n* system crashes\n\nWith a similar race, when requested to attach a program,\nice_prepare_xdp_rings() can actually skip setting the program in the VSI\nand nevertheless report success.\n\nInstead of reverting to the old order of function calls, add an enum\nargument to both ice_prepare_xdp_rings() and ice_destroy_xdp_rings() in\norder to distinguish between calls from rebuild and .ndo_bpf().\n\nFixes: efc2214b6047 (\"ice: Add support for XDP\")\nReviewed-by: Igor Bagnucki \u003cigor.bagnucki@intel.com\u003e\nSigned-off-by: Larysa Zaremba \u003clarysa.zaremba@intel.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nTested-by: Chandan Kumar Rout \u003cchandanx.rout@intel.com\u003e\nSigned-off-by: Jacob Keller \u003cjacob.e.keller@intel.com\u003e\nLink: https://lore.kernel.org/r/20240603-net-2024-05-30-intel-net-fixes-v2-4-e3563aa89b0c@intel.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "adbf5a42341f6ea038d3626cd4437d9f0ad0b2dd", "tree": "a4c9f031f73686f03f3d3635588caca1334b4f42", "parents": [ "cfa747a66e5da34793ac08c26b814e7709613fab" ], "author": { "name": "Larysa Zaremba", "email": "larysa.zaremba@intel.com", "time": "Mon Jun 03 14:42:32 2024 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Jun 05 19:27:56 2024 -0700" }, "message": "ice: remove af_xdp_zc_qps bitmap\n\nReferenced commit has introduced a bitmap to distinguish between ZC and\ncopy-mode AF_XDP queues, because xsk_get_pool_from_qid() does not do this\nfor us.\n\nThe bitmap would be especially useful when restoring previous state after\nrebuild, if only it was not reallocated in the process. This leads to e.g.\nxdpsock dying after changing number of queues.\n\nInstead of preserving the bitmap during the rebuild, remove it completely\nand distinguish between ZC and copy-mode queues based on the presence of\na device associated with the pool.\n\nFixes: e102db780e1c (\"ice: track AF_XDP ZC enabled queues in bitmap\")\nReviewed-by: Przemek Kitszel \u003cprzemyslaw.kitszel@intel.com\u003e\nSigned-off-by: Larysa Zaremba \u003clarysa.zaremba@intel.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nTested-by: Chandan Kumar Rout \u003cchandanx.rout@intel.com\u003e\nSigned-off-by: Jacob Keller \u003cjacob.e.keller@intel.com\u003e\nLink: https://lore.kernel.org/r/20240603-net-2024-05-30-intel-net-fixes-v2-3-e3563aa89b0c@intel.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "cfa747a66e5da34793ac08c26b814e7709613fab", "tree": "9000147b246a0f87e0e47a61a1adfed52c3c7ee4", "parents": [ "03e4a092be8ce3de7c1baa7ae14e68b64e3ea644" ], "author": { "name": "Jacob Keller", "email": "jacob.e.keller@intel.com", "time": "Mon Jun 03 14:42:31 2024 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Jun 05 19:27:55 2024 -0700" }, "message": "ice: fix reads from NVM Shadow RAM on E830 and E825-C devices\n\nThe ice driver reads data from the Shadow RAM portion of the NVM during\ninitialization, including data used to identify the NVM image and device,\nsuch as the ETRACK ID used to populate devlink dev info fw.bundle.\n\nCurrently it is using a fixed offset defined by ICE_CSS_HEADER_LENGTH to\ncompute the appropriate offset. This worked fine for E810 and E822 devices\nwhich both have CSS header length of 330 words.\n\nOther devices, including both E825-C and E830 devices have different sizes\nfor their CSS header. The use of a hard coded value results in the driver\nreading from the wrong block in the NVM when attempting to access the\nShadow RAM copy. This results in the driver reporting the fw.bundle as 0x0\nin both the devlink dev info and ethtool -i output.\n\nThe first E830 support was introduced by commit ba20ecb1d1bb (\"ice: Hook up\n4 E830 devices by adding their IDs\") and the first E825-C support was\nintroducted by commit f64e18944233 (\"ice: introduce new E825C devices\nfamily\")\n\nThe NVM actually contains the CSS header length embedded in it. Remove the\nhard coded value and replace it with logic to read the length from the NVM\ndirectly. This is more resilient against all existing and future hardware,\nvs looking up the expected values from a table. It ensures the driver will\nread from the appropriate place when determining the ETRACK ID value used\nfor populating the fw.bundle_id and for reporting in ethtool -i.\n\nThe CSS header length for both the active and inactive flash bank is stored\nin the ice_bank_info structure to avoid unnecessary duplicate work when\naccessing multiple words of the Shadow RAM. Both banks are read in the\nunlikely event that the header length is different for the NVM in the\ninactive bank, rather than being different only by the overall device\nfamily.\n\nFixes: ba20ecb1d1bb (\"ice: Hook up 4 E830 devices by adding their IDs\")\nCo-developed-by: Paul Greenwalt \u003cpaul.greenwalt@intel.com\u003e\nSigned-off-by: Paul Greenwalt \u003cpaul.greenwalt@intel.com\u003e\nReviewed-by: Przemek Kitszel \u003cprzemyslaw.kitszel@intel.com\u003e\nTested-by: Pucha Himasekhar Reddy \u003chimasekharx.reddy.pucha@intel.com\u003e\nSigned-off-by: Jacob Keller \u003cjacob.e.keller@intel.com\u003e\nLink: https://lore.kernel.org/r/20240603-net-2024-05-30-intel-net-fixes-v2-2-e3563aa89b0c@intel.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "03e4a092be8ce3de7c1baa7ae14e68b64e3ea644", "tree": "f85b3938d509145995ab2e1649701f974f131b21", "parents": [ "886bf9172da06a85de3c68a651477d7d625fd6cc" ], "author": { "name": "Jacob Keller", "email": "jacob.e.keller@intel.com", "time": "Mon Jun 03 14:42:30 2024 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Jun 05 19:27:55 2024 -0700" }, "message": "ice: fix iteration of TLVs in Preserved Fields Area\n\nThe ice_get_pfa_module_tlv() function iterates over the Type-Length-Value\nstructures in the Preserved Fields Area (PFA) of the NVM. This is used by\nthe driver to access data such as the Part Board Assembly identifier.\n\nThe function uses simple logic to iterate over the PFA. First, the pointer\nto the PFA in the NVM is read. Then the total length of the PFA is read\nfrom the first word.\n\nA pointer to the first TLV is initialized, and a simple loop iterates over\neach TLV. The pointer is moved forward through the NVM until it exceeds the\nPFA area.\n\nThe logic seems sound, but it is missing a key detail. The Preserved\nFields Area length includes one additional final word. This is documented\nin the device data sheet as a dummy word which contains 0xFFFF. All NVMs\nhave this extra word.\n\nIf the driver tries to scan for a TLV that is not in the PFA, it will read\npast the size of the PFA. It reads and interprets the last dummy word of\nthe PFA as a TLV with type 0xFFFF. It then reads the word following the PFA\nas a length.\n\nThe PFA resides within the Shadow RAM portion of the NVM, which is\nrelatively small. All of its offsets are within a 16-bit size. The PFA\npointer and TLV pointer are stored by the driver as 16-bit values.\n\nIn almost all cases, the word following the PFA will be such that\ninterpreting it as a length will result in 16-bit arithmetic overflow. Once\noverflowed, the new next_tlv value is now below the maximum offset of the\nPFA. Thus, the driver will continue to iterate the data as TLVs. In the\nworst case, the driver hits on a sequence of reads which loop back to\nreading the same offsets in an endless loop.\n\nTo fix this, we need to correct the loop iteration check to account for\nthis extra word at the end of the PFA. This alone is sufficient to resolve\nthe known cases of this issue in the field. However, it is plausible that\nan NVM could be misconfigured or have corrupt data which results in the\nsame kind of overflow. Protect against this by using check_add_overflow\nwhen calculating both the maximum offset of the TLVs, and when calculating\nthe next_tlv offset at the end of each loop iteration. This ensures that\nthe driver will not get stuck in an infinite loop when scanning the PFA.\n\nFixes: e961b679fb0b (\"ice: add board identifier info to devlink .info_get\")\nCo-developed-by: Paul Greenwalt \u003cpaul.greenwalt@intel.com\u003e\nSigned-off-by: Paul Greenwalt \u003cpaul.greenwalt@intel.com\u003e\nReviewed-by: Przemek Kitszel \u003cprzemyslaw.kitszel@intel.com\u003e\nTested-by: Pucha Himasekhar Reddy \u003chimasekharx.reddy.pucha@intel.com\u003e\nSigned-off-by: Jacob Keller \u003cjacob.e.keller@intel.com\u003e\nLink: https://lore.kernel.org/r/20240603-net-2024-05-30-intel-net-fixes-v2-1-e3563aa89b0c@intel.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "b91e05f1fcf755c9d2c4ca10907383e39def05bd", "tree": "83e09f662fc56a02f9bef79014eff56a25219362", "parents": [ "7ef91dcba172441582962602ff6899bfec6078b7" ], "author": { "name": "Dr. David Alan Gilbert", "email": "linux@treblig.org", "time": "Sat May 18 00:28:58 2024 +0100" }, "committer": { "name": "Zack Rusin", "email": "zack.rusin@broadcom.com", "time": "Wed Jun 05 22:20:25 2024 -0400" }, "message": "drm/vmwgfx: remove unused struct \u0027vmw_stdu_dma\u0027\n\n\u0027vmw_stdu_dma\u0027 is unused since\ncommit 39985eea5a6d (\"drm/vmwgfx: Abstract placement selection\")\nRemove it.\n\nSigned-off-by: Dr. David Alan Gilbert \u003clinux@treblig.org\u003e\nSigned-off-by: Zack Rusin \u003czack.rusin@broadcom.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20240517232858.230860-1-linux@treblig.org\n" }, { "commit": "7373a51e7998b508af7136530f3a997b286ce81c", "tree": "c388e304c10333a95050f27c350db6ebe4385b44", "parents": [ "9415983599413f847ec9f081e9f9e5ed6cdeb342" ], "author": { "name": "Ryusuke Konishi", "email": "konishi.ryusuke@gmail.com", "time": "Tue Jun 04 22:42:55 2024 +0900" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Jun 05 19:19:27 2024 -0700" }, "message": "nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors\n\nThe error handling in nilfs_empty_dir() when a directory folio/page read\nfails is incorrect, as in the old ext2 implementation, and if the\nfolio/page cannot be read or nilfs_check_folio() fails, it will falsely\ndetermine the directory as empty and corrupt the file system.\n\nIn addition, since nilfs_empty_dir() does not immediately return on a\nfailed folio/page read, but continues to loop, this can cause a long loop\nwith I/O if i_size of the directory\u0027s inode is also corrupted, causing the\nlog writer thread to wait and hang, as reported by syzbot.\n\nFix these issues by making nilfs_empty_dir() immediately return a false\nvalue (0) if it fails to get a directory folio/page.\n\nLink: https://lkml.kernel.org/r/20240604134255.7165-1-konishi.ryusuke@gmail.com\nSigned-off-by: Ryusuke Konishi \u003ckonishi.ryusuke@gmail.com\u003e\nReported-by: syzbot+c8166c541d3971bf6c87@syzkaller.appspotmail.com\nCloses: https://syzkaller.appspot.com/bug?extid\u003dc8166c541d3971bf6c87\nFixes: 2ba466d74ed7 (\"nilfs2: directory entry operations\")\nTested-by: Ryusuke Konishi \u003ckonishi.ryusuke@gmail.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "9415983599413f847ec9f081e9f9e5ed6cdeb342", "tree": "da34b5488c7324ed2dbad65ea990b94cedb76779", "parents": [ "3f0c44c8c21cfa3bb6b756b939491b7a60932cd1" ], "author": { "name": "Suren Baghdasaryan", "email": "surenb@google.com", "time": "Fri May 31 13:53:50 2024 -0700" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Jun 05 19:19:26 2024 -0700" }, "message": "mm: fix xyz_noprof functions calling profiled functions\n\nGrepping /proc/allocinfo for \"noprof\" reveals several xyz_noprof\nfunctions, which means internally they are calling profiled functions. \nThis should never happen as such calls move allocation charge from a\nhigher level location where it should be accounted for into these lower\nlevel helpers. Fix this by replacing profiled function calls with noprof\nones.\n\nLink: https://lkml.kernel.org/r/20240531205350.3973009-1-surenb@google.com\nFixes: b951aaff5035 (\"mm: enable page allocation tagging\")\nFixes: e26d8769da6d (\"mempool: hook up to memory allocation profiling\")\nFixes: 88ae5fb755b0 (\"mm: vmalloc: enable memory allocation profiling\")\nSigned-off-by: Suren Baghdasaryan \u003csurenb@google.com\u003e\nCc: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\nReviewed-by: Kees Cook \u003ckees@kernel.org\u003e\nAcked-by: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: Pasha Tatashin \u003cpasha.tatashin@soleen.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "3f0c44c8c21cfa3bb6b756b939491b7a60932cd1", "tree": "c5246bfdc0bfb3ec00315b8ea37b32a501685b41", "parents": [ "8daf9c702ee7f825f0de8600abff764acfedea13" ], "author": { "name": "Thadeu Lima de Souza Cascardo", "email": "cascardo@igalia.com", "time": "Mon May 27 15:30:06 2024 -0300" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Jun 05 19:19:26 2024 -0700" }, "message": "codetag: avoid race at alloc_slab_obj_exts\n\nWhen CONFIG_MEM_ALLOC_PROFILING_DEBUG is enabled, the following warning\nmay be noticed:\n\n[ 48.299584] ------------[ cut here ]------------\n[ 48.300092] alloc_tag was not set\n[ 48.300528] WARNING: CPU: 2 PID: 1361 at include/linux/alloc_tag.h:130 alloc_tagging_slab_free_hook+0x84/0xc7\n[ 48.301305] Modules linked in:\n[ 48.301553] CPU: 2 PID: 1361 Comm: systemd-udevd Not tainted 6.10.0-rc1-00003-gac8755535862 #176\n[ 48.302196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\n[ 48.302752] RIP: 0010:alloc_tagging_slab_free_hook+0x84/0xc7\n[ 48.303169] Code: 8d 1c c4 48 85 db 74 4d 48 83 3b 00 75 1e 80 3d 65 02 86 04 00 75 15 48 c7 c7 11 48 1d 85 c6 05 55 02 86 04 01 e8 64 44 a5 ff \u003c0f\u003e 0b 48 8b 03 48 85 c0 74 21 48 83 f8 01 74 14 48 8b 50 20 48 f7\n[ 48.304411] RSP: 0018:ffff8880111b7d40 EFLAGS: 00010282\n[ 48.304916] RAX: 0000000000000000 RBX: ffff88800fcc9008 RCX: 0000000000000000\n[ 48.305455] RDX: 0000000080000000 RSI: ffff888014060000 RDI: ffffed1002236f97\n[ 48.305979] RBP: 0000000000001100 R08: fffffbfff0aa73a1 R09: 0000000000000000\n[ 48.306473] R10: ffffffff814515e5 R11: 0000000000000003 R12: ffff88800fcc9000\n[ 48.306943] R13: ffff88800b2e5cc0 R14: ffff8880111b7d90 R15: 0000000000000000\n[ 48.307529] FS: 00007faf5d1908c0(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000\n[ 48.308223] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 48.308710] CR2: 000058fb220c9118 CR3: 00000000110cc000 CR4: 0000000000750ef0\n[ 48.309274] PKRU: 55555554\n[ 48.309804] Call Trace:\n[ 48.310029] \u003cTASK\u003e\n[ 48.310290] ? show_regs+0x84/0x8d\n[ 48.310722] ? alloc_tagging_slab_free_hook+0x84/0xc7\n[ 48.311298] ? __warn+0x13b/0x2ff\n[ 48.311580] ? alloc_tagging_slab_free_hook+0x84/0xc7\n[ 48.311987] ? report_bug+0x2ce/0x3ab\n[ 48.312292] ? handle_bug+0x8c/0x107\n[ 48.312563] ? exc_invalid_op+0x34/0x6f\n[ 48.312842] ? asm_exc_invalid_op+0x1a/0x20\n[ 48.313173] ? this_cpu_in_panic+0x1c/0x72\n[ 48.313503] ? alloc_tagging_slab_free_hook+0x84/0xc7\n[ 48.313880] ? putname+0x143/0x14e\n[ 48.314152] kmem_cache_free+0xe9/0x214\n[ 48.314454] putname+0x143/0x14e\n[ 48.314712] do_unlinkat+0x413/0x45e\n[ 48.315001] ? __pfx_do_unlinkat+0x10/0x10\n[ 48.315388] ? __check_object_size+0x4d7/0x525\n[ 48.315744] ? __sanitizer_cov_trace_pc+0x20/0x4a\n[ 48.316167] ? __sanitizer_cov_trace_pc+0x20/0x4a\n[ 48.316757] ? getname_flags+0x4ed/0x500\n[ 48.317261] __x64_sys_unlink+0x42/0x4a\n[ 48.317741] do_syscall_64+0xe2/0x149\n[ 48.318171] entry_SYSCALL_64_after_hwframe+0x76/0x7e\n[ 48.318602] RIP: 0033:0x7faf5d8850ab\n[ 48.318891] Code: fd ff ff e8 27 dd 01 00 0f 1f 80 00 00 00 00 f3 0f 1e fa b8 5f 00 00 00 0f 05 c3 0f 1f 40 00 f3 0f 1e fa b8 57 00 00 00 0f 05 \u003c48\u003e 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 8b 15 41 2d 0e 00 f7 d8\n[ 48.320649] RSP: 002b:00007ffc44982b38 EFLAGS: 00000246 ORIG_RAX: 0000000000000057\n[ 48.321182] RAX: ffffffffffffffda RBX: 00005ba344a44680 RCX: 00007faf5d8850ab\n[ 48.321667] RDX: 0000000000000000 RSI: 00005ba344a44430 RDI: 00007ffc44982b40\n[ 48.322139] RBP: 00007ffc44982c00 R08: 0000000000000000 R09: 0000000000000007\n[ 48.322598] R10: 00005ba344a44430 R11: 0000000000000246 R12: 0000000000000000\n[ 48.323071] R13: 00007ffc44982b40 R14: 0000000000000000 R15: 0000000000000000\n[ 48.323596] \u003c/TASK\u003e\n\nThis is due to a race when two objects are allocated from the same slab,\nwhich did not have an obj_exts allocated for.\n\nIn such a case, the two threads will notice the NULL obj_exts and after\none assigns slab-\u003eobj_exts, the second one will happily do the exchange if\nit reads this new assigned value.\n\nIn order to avoid that, verify that the read obj_exts does not point to an\nallocated obj_exts before doing the exchange.\n\nLink: https://lkml.kernel.org/r/20240527183007.1595037-1-cascardo@igalia.com\nFixes: 09c46563ff6d (\"codetag: debug: introduce OBJEXTS_ALLOC_FAIL to mark failed slab_ext allocations\")\nSigned-off-by: Thadeu Lima de Souza Cascardo \u003ccascardo@igalia.com\u003e\nAcked-by: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: Suren Baghdasaryan \u003csurenb@google.com\u003e\nCc: Christoph Lameter \u003ccl@linux.com\u003e\nCc: David Rientjes \u003crientjes@google.com\u003e\nCc: Gustavo A. R. Silva \u003cgustavoars@kernel.org\u003e\nCc: Hyeonggon Yoo \u003c42.hyeyoo@gmail.com\u003e\nCc: Joonsoo Kim \u003ciamjoonsoo.kim@lge.com\u003e\nCc: Kees Cook \u003ckeescook@chromium.org\u003e\nCc: Pekka Enberg \u003cpenberg@kernel.org\u003e\nCc: Roman Gushchin \u003croman.gushchin@linux.dev\u003e\nCc: Thadeu Lima de Souza Cascardo \u003ccascardo@igalia.com\u003e\nCc: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "8daf9c702ee7f825f0de8600abff764acfedea13", "tree": "85e566f73d554ad7a37e1054b02b3f0ed7aa9e14", "parents": [ "c2dc78b86e0821ecf9a9d0c35dba2618279a5bb6" ], "author": { "name": "Oscar Salvador", "email": "osalvador@suse.de", "time": "Tue May 28 22:53:23 2024 +0200" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Jun 05 19:19:26 2024 -0700" }, "message": "mm/hugetlb: do not call vma_add_reservation upon ENOMEM\n\nsysbot reported a splat [1] on __unmap_hugepage_range(). This is because\nvma_needs_reservation() can return -ENOMEM if\nallocate_file_region_entries() fails to allocate the file_region struct\nfor the reservation.\n\nCheck for that and do not call vma_add_reservation() if that is the case,\notherwise region_abort() and region_del() will see that we do not have any\nfile_regions.\n\nIf we detect that vma_needs_reservation() returned -ENOMEM, we clear the\nhugetlb_restore_reserve flag as if this reservation was still consumed, so\nfree_huge_folio() will not increment the resv count.\n\n[1] https://lore.kernel.org/linux-mm/0000000000004096100617c58d54@google.com/T/#ma5983bc1ab18a54910da83416b3f89f3c7ee43aa\n\nLink: https://lkml.kernel.org/r/20240528205323.20439-1-osalvador@suse.de\nFixes: df7a6d1f6405 (\"mm/hugetlb: restore the reservation if needed\")\nSigned-off-by: Oscar Salvador \u003cosalvador@suse.de\u003e\nReported-and-tested-by: syzbot+d3fe2dc5ffe9380b714b@syzkaller.appspotmail.com\nCloses: https://lore.kernel.org/linux-mm/0000000000004096100617c58d54@google.com/\nCc: Breno Leitao \u003cleitao@debian.org\u003e\nCc: Muchun Song \u003cmuchun.song@linux.dev\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "c2dc78b86e0821ecf9a9d0c35dba2618279a5bb6", "tree": "b023d4ec8ba10a50829dae578c56b2edf698f4ee", "parents": [ "730cdc2c72c6905a2eda2fccbbf67dcef1206590" ], "author": { "name": "Chengming Zhou", "email": "chengming.zhou@linux.dev", "time": "Tue May 28 13:15:22 2024 +0800" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Jun 05 19:19:26 2024 -0700" }, "message": "mm/ksm: fix ksm_zero_pages accounting\n\nWe normally ksm_zero_pages++ in ksmd when page is merged with zero page,\nbut ksm_zero_pages-- is done from page tables side, where there is no any\naccessing protection of ksm_zero_pages.\n\nSo we can read very exceptional value of ksm_zero_pages in rare cases,\nsuch as -1, which is very confusing to users.\n\nFix it by changing to use atomic_long_t, and the same case with the\nmm-\u003eksm_zero_pages.\n\nLink: https://lkml.kernel.org/r/20240528-b4-ksm-counters-v3-2-34bb358fdc13@linux.dev\nFixes: e2942062e01d (\"ksm: count all zero pages placed by KSM\")\nFixes: 6080d19f0704 (\"ksm: add ksm zero pages for each process\")\nSigned-off-by: Chengming Zhou \u003cchengming.zhou@linux.dev\u003e\nAcked-by: David Hildenbrand \u003cdavid@redhat.com\u003e\nCc: Andrea Arcangeli \u003caarcange@redhat.com\u003e\nCc: Hugh Dickins \u003chughd@google.com\u003e\nCc: Ran Xiaokai \u003cran.xiaokai@zte.com.cn\u003e\nCc: Stefan Roesch \u003cshr@devkernel.io\u003e\nCc: xu xin \u003cxu.xin16@zte.com.cn\u003e\nCc: Yang Yang \u003cyang.yang29@zte.com.cn\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "730cdc2c72c6905a2eda2fccbbf67dcef1206590", "tree": "b91b5e676add3d633ed2f1e928f075ecddd98b1b", "parents": [ "2ef3cec44c60ae171b287db7fc2aa341586d65ba" ], "author": { "name": "Chengming Zhou", "email": "chengming.zhou@linux.dev", "time": "Tue May 28 13:15:21 2024 +0800" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Jun 05 19:19:25 2024 -0700" }, "message": "mm/ksm: fix ksm_pages_scanned accounting\n\nPatch series \"mm/ksm: fix some accounting problems\", v3.\n\nWe encountered some abnormal ksm_pages_scanned and ksm_zero_pages during\nsome random tests.\n\n1. ksm_pages_scanned unchanged even ksmd scanning has progress.\n2. ksm_zero_pages maybe -1 in some rare cases.\n\n\nThis patch (of 2):\n\nDuring testing, I found ksm_pages_scanned is unchanged although the\nscan_get_next_rmap_item() did return valid rmap_item that is not NULL.\n\nThe reason is the scan_get_next_rmap_item() will return NULL after a full\nscan, so ksm_do_scan() just return without accounting of the\nksm_pages_scanned.\n\nFix it by just putting ksm_pages_scanned accounting in that loop, and it\nwill be accounted more timely if that loop would last for a long time.\n\nLink: https://lkml.kernel.org/r/20240528-b4-ksm-counters-v3-0-34bb358fdc13@linux.dev\nLink: https://lkml.kernel.org/r/20240528-b4-ksm-counters-v3-1-34bb358fdc13@linux.dev\nFixes: b348b5fe2b5f (\"mm/ksm: add pages scanned metric\")\nSigned-off-by: Chengming Zhou \u003cchengming.zhou@linux.dev\u003e\nAcked-by: David Hildenbrand \u003cdavid@redhat.com\u003e\nReviewed-by: xu xin \u003cxu.xin16@zte.com.cn\u003e\nCc: Andrea Arcangeli \u003caarcange@redhat.com\u003e\nCc: Hugh Dickins \u003chughd@google.com\u003e\nCc: Ran Xiaokai \u003cran.xiaokai@zte.com.cn\u003e\nCc: Stefan Roesch \u003cshr@devkernel.io\u003e\nCc: Yang Yang \u003cyang.yang29@zte.com.cn\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "2ef3cec44c60ae171b287db7fc2aa341586d65ba", "tree": "f55c92430f01a4c594020af42344ec8dee417f2a", "parents": [ "0105eaabb27f31d9b8d340aca6fb6a3420cab30f" ], "author": { "name": "Alexander Potapenko", "email": "glider@google.com", "time": "Tue May 28 12:48:06 2024 +0200" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Jun 05 19:19:25 2024 -0700" }, "message": "kmsan: do not wipe out origin when doing partial unpoisoning\n\nAs noticed by Brian, KMSAN should not be zeroing the origin when\nunpoisoning parts of a four-byte uninitialized value, e.g.:\n\n char a[4];\n kmsan_unpoison_memory(a, 1);\n\nThis led to false negatives, as certain poisoned values could receive zero\norigins, preventing those values from being reported.\n\nTo fix the problem, check that kmsan_internal_set_shadow_origin() writes\nzero origins only to slots which have zero shadow.\n\nLink: https://lkml.kernel.org/r/20240528104807.738758-1-glider@google.com\nFixes: f80be4571b19 (\"kmsan: add KMSAN runtime core\")\nSigned-off-by: Alexander Potapenko \u003cglider@google.com\u003e\nReported-by: Brian Johannesmeyer \u003cbjohannesmeyer@gmail.com\u003e\n Link: https://lore.kernel.org/lkml/20240524232804.1984355-1-bjohannesmeyer@gmail.com/T/\nReviewed-by: Marco Elver \u003celver@google.com\u003e\nTested-by: Brian Johannesmeyer \u003cbjohannesmeyer@gmail.com\u003e\nCc: Dmitry Vyukov \u003cdvyukov@google.com\u003e\nCc: Kees Cook \u003ckeescook@chromium.org\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "0105eaabb27f31d9b8d340aca6fb6a3420cab30f", "tree": "c6b52ebebd80146ee3395737d292cdcc4d3330bb", "parents": [ "7cc5a5d65011983952a9c62f170f5b79e24b1239" ], "author": { "name": "Cong Wang", "email": "cong.wang@bytedance.com", "time": "Tue May 28 09:08:38 2024 -0700" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Jun 05 19:19:25 2024 -0700" }, "message": "vmalloc: check CONFIG_EXECMEM in is_vmalloc_or_module_addr()\n\nAfter commit 2c9e5d4a0082 (\"bpf: remove CONFIG_BPF_JIT dependency on\nCONFIG_MODULES of\") CONFIG_BPF_JIT does not depend on CONFIG_MODULES any\nmore and bpf jit also uses the [MODULES_VADDR, MODULES_END] memory region.\nBut is_vmalloc_or_module_addr() still checks CONFIG_MODULES, which then\nreturns false for a bpf jit memory region when CONFIG_MODULES is not\ndefined. It leads to the following kernel BUG:\n\n[ 1.567023] ------------[ cut here ]------------\n[ 1.567883] kernel BUG at mm/vmalloc.c:745!\n[ 1.568477] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI\n[ 1.569367] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 6.9.0+ #448\n[ 1.570247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014\n[ 1.570786] RIP: 0010:vmalloc_to_page+0x48/0x1ec\n[ 1.570786] Code: 0f 00 00 e8 eb 1a 05 00 b8 37 00 00 00 48 ba fe ff ff ff ff 1f 00 00 4c 03 25 76 49 c6 02 48 c1 e0 28 48 01 e8 48 39 d0 76 02 \u003c0f\u003e 0b 4c 89 e7 e8 bf 1a 05 00 49 8b 04 24 48 a9 9f ff ff ff 0f 84\n[ 1.570786] RSP: 0018:ffff888007787960 EFLAGS: 00010212\n[ 1.570786] RAX: 000036ffa0000000 RBX: 0000000000000640 RCX: ffffffff8147e93c\n[ 1.570786] RDX: 00001ffffffffffe RSI: dffffc0000000000 RDI: ffffffff840e32c8\n[ 1.570786] RBP: ffffffffa0000000 R08: 0000000000000000 R09: 0000000000000000\n[ 1.570786] R10: ffff888007787a88 R11: ffffffff8475d8e7 R12: ffffffff83e80ff8\n[ 1.570786] R13: 0000000000000640 R14: 0000000000000640 R15: 0000000000000640\n[ 1.570786] FS: 0000000000000000(0000) GS:ffff88806cc00000(0000) knlGS:0000000000000000\n[ 1.570786] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 1.570786] CR2: ffff888006a01000 CR3: 0000000003e80000 CR4: 0000000000350ef0\n[ 1.570786] Call Trace:\n[ 1.570786] \u003cTASK\u003e\n[ 1.570786] ? __die_body+0x1b/0x58\n[ 1.570786] ? die+0x31/0x4b\n[ 1.570786] ? do_trap+0x9d/0x138\n[ 1.570786] ? vmalloc_to_page+0x48/0x1ec\n[ 1.570786] ? do_error_trap+0xcd/0x102\n[ 1.570786] ? vmalloc_to_page+0x48/0x1ec\n[ 1.570786] ? vmalloc_to_page+0x48/0x1ec\n[ 1.570786] ? handle_invalid_op+0x2f/0x38\n[ 1.570786] ? vmalloc_to_page+0x48/0x1ec\n[ 1.570786] ? exc_invalid_op+0x2b/0x41\n[ 1.570786] ? asm_exc_invalid_op+0x16/0x20\n[ 1.570786] ? vmalloc_to_page+0x26/0x1ec\n[ 1.570786] ? vmalloc_to_page+0x48/0x1ec\n[ 1.570786] __text_poke+0xb6/0x458\n[ 1.570786] ? __pfx_text_poke_memcpy+0x10/0x10\n[ 1.570786] ? __pfx___mutex_lock+0x10/0x10\n[ 1.570786] ? __pfx___text_poke+0x10/0x10\n[ 1.570786] ? __pfx_get_random_u32+0x10/0x10\n[ 1.570786] ? srso_return_thunk+0x5/0x5f\n[ 1.570786] text_poke_copy_locked+0x70/0x84\n[ 1.570786] text_poke_copy+0x32/0x4f\n[ 1.570786] bpf_arch_text_copy+0xf/0x27\n[ 1.570786] bpf_jit_binary_pack_finalize+0x26/0x5a\n[ 1.570786] bpf_int_jit_compile+0x576/0x8ad\n[ 1.570786] ? __pfx_bpf_int_jit_compile+0x10/0x10\n[ 1.570786] ? srso_return_thunk+0x5/0x5f\n[ 1.570786] ? __kmalloc_node_track_caller+0x2b5/0x2e0\n[ 1.570786] bpf_prog_select_runtime+0x7c/0x199\n[ 1.570786] bpf_prepare_filter+0x1e9/0x25b\n[ 1.570786] ? __pfx_bpf_prepare_filter+0x10/0x10\n[ 1.570786] ? srso_return_thunk+0x5/0x5f\n[ 1.570786] ? _find_next_bit+0x29/0x7e\n[ 1.570786] bpf_prog_create+0xb8/0xe0\n[ 1.570786] ptp_classifier_init+0x75/0xa1\n[ 1.570786] ? __pfx_ptp_classifier_init+0x10/0x10\n[ 1.570786] ? srso_return_thunk+0x5/0x5f\n[ 1.570786] ? register_pernet_subsys+0x36/0x42\n[ 1.570786] ? srso_return_thunk+0x5/0x5f\n[ 1.570786] sock_init+0x99/0xa3\n[ 1.570786] ? __pfx_sock_init+0x10/0x10\n[ 1.570786] do_one_initcall+0x104/0x2c4\n[ 1.570786] ? __pfx_do_one_initcall+0x10/0x10\n[ 1.570786] ? parameq+0x25/0x2d\n[ 1.570786] ? rcu_is_watching+0x1c/0x3c\n[ 1.570786] ? trace_kmalloc+0x81/0xb2\n[ 1.570786] ? srso_return_thunk+0x5/0x5f\n[ 1.570786] ? __kmalloc+0x29c/0x2c7\n[ 1.570786] ? srso_return_thunk+0x5/0x5f\n[ 1.570786] do_initcalls+0xf9/0x123\n[ 1.570786] kernel_init_freeable+0x24f/0x289\n[ 1.570786] ? __pfx_kernel_init+0x10/0x10\n[ 1.570786] kernel_init+0x19/0x13a\n[ 1.570786] ret_from_fork+0x24/0x41\n[ 1.570786] ? __pfx_kernel_init+0x10/0x10\n[ 1.570786] ret_from_fork_asm+0x1a/0x30\n[ 1.570786] \u003c/TASK\u003e\n[ 1.570819] ---[ end trace 0000000000000000 ]---\n[ 1.571463] RIP: 0010:vmalloc_to_page+0x48/0x1ec\n[ 1.572111] Code: 0f 00 00 e8 eb 1a 05 00 b8 37 00 00 00 48 ba fe ff ff ff ff 1f 00 00 4c 03 25 76 49 c6 02 48 c1 e0 28 48 01 e8 48 39 d0 76 02 \u003c0f\u003e 0b 4c 89 e7 e8 bf 1a 05 00 49 8b 04 24 48 a9 9f ff ff ff 0f 84\n[ 1.574632] RSP: 0018:ffff888007787960 EFLAGS: 00010212\n[ 1.575129] RAX: 000036ffa0000000 RBX: 0000000000000640 RCX: ffffffff8147e93c\n[ 1.576097] RDX: 00001ffffffffffe RSI: dffffc0000000000 RDI: ffffffff840e32c8\n[ 1.577084] RBP: ffffffffa0000000 R08: 0000000000000000 R09: 0000000000000000\n[ 1.578077] R10: ffff888007787a88 R11: ffffffff8475d8e7 R12: ffffffff83e80ff8\n[ 1.578810] R13: 0000000000000640 R14: 0000000000000640 R15: 0000000000000640\n[ 1.579823] FS: 0000000000000000(0000) GS:ffff88806cc00000(0000) knlGS:0000000000000000\n[ 1.580992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 1.581869] CR2: ffff888006a01000 CR3: 0000000003e80000 CR4: 0000000000350ef0\n[ 1.582800] Kernel panic - not syncing: Fatal exception\n[ 1.583765] ---[ end Kernel panic - not syncing: Fatal exception ]---\n\nFix this by checking CONFIG_EXECMEM instead.\n\nLink: https://lkml.kernel.org/r/20240528160838.102223-1-xiyou.wangcong@gmail.com\nFixes: 2c9e5d4a0082 (\"bpf: remove CONFIG_BPF_JIT dependency on CONFIG_MODULES of\")\nSigned-off-by: Cong Wang \u003ccong.wang@bytedance.com\u003e\nAcked-by: Mike Rapoport (IBM) \u003crppt@kernel.org\u003e\nCc: Luis Chamberlain \u003cmcgrof@kernel.org\u003e\nCc: Daniel Borkmann \u003cdaniel@iogearbox.net\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "7cc5a5d65011983952a9c62f170f5b79e24b1239", "tree": "ed5c31be8226dac16165d84179c03fd0b986b226", "parents": [ "a4ca369ca221bb7e06c725792ac107f0e48e82e7" ], "author": { "name": "Johannes Weiner", "email": "hannes@cmpxchg.org", "time": "Wed May 29 18:18:12 2024 -0400" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Jun 05 19:19:25 2024 -0700" }, "message": "mm: page_alloc: fix highatomic typing in multi-block buddies\n\nChristoph reports a page allocator splat triggered by xfstests:\n\ngeneric/176 214s ... [ 1204.507931] run fstests generic/176 at 2024-05-27 12:52:30\nXFS (nvme0n1): Mounting V5 Filesystem cd936307-415f-48a3-b99d-a2d52ae1f273\nXFS (nvme0n1): Ending clean mount\nXFS (nvme1n1): Mounting V5 Filesystem ab3ee1a4-af62-4934-9a6a-6c2fde321850\nXFS (nvme1n1): Ending clean mount\nXFS (nvme1n1): Unmounting Filesystem ab3ee1a4-af62-4934-9a6a-6c2fde321850\nXFS (nvme1n1): Mounting V5 Filesystem 7099b02d-9c58-4d1d-be1d-2cc472d12cd9\nXFS (nvme1n1): Ending clean mount\n------------[ cut here ]------------\npage type is 3, passed migratetype is 1 (nr\u003d512)\nWARNING: CPU: 0 PID: 509870 at mm/page_alloc.c:645 expand+0x1c5/0x1f0\nModules linked in: i2c_i801 crc32_pclmul i2c_smbus [last unloaded: scsi_debug]\nCPU: 0 PID: 509870 Comm: xfs_io Not tainted 6.10.0-rc1+ #2437\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\nRIP: 0010:expand+0x1c5/0x1f0\nCode: 05 16 70 bf 02 01 e8 ca fc ff ff 8b 54 24 34 44 89 e1 48 c7 c7 80 a2 28 83 48 89 c6 b8 01 00 3\nRSP: 0018:ffffc90003b2b968 EFLAGS: 00010082\nRAX: 0000000000000000 RBX: ffffffff83fa9480 RCX: 0000000000000000\nRDX: 0000000000000005 RSI: 0000000000000027 RDI: 00000000ffffffff\nRBP: 00000000001f2600 R08: 00000000fffeffff R09: 0000000000000001\nR10: 0000000000000000 R11: ffffffff83676200 R12: 0000000000000009\nR13: 0000000000000200 R14: 0000000000000001 R15: ffffea0007c98000\nFS: 00007f72ca3d5780(0000) GS:ffff8881f9c00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f72ca1fff38 CR3: 00000001aa0c6002 CR4: 0000000000770ef0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000ffff07f0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n \u003cTASK\u003e\n ? __warn+0x7b/0x120\n ? expand+0x1c5/0x1f0\n ? report_bug+0x191/0x1c0\n ? handle_bug+0x3c/0x80\n ? exc_invalid_op+0x17/0x70\n ? asm_exc_invalid_op+0x1a/0x20\n ? expand+0x1c5/0x1f0\n ? expand+0x1c5/0x1f0\n __rmqueue_pcplist+0x3a9/0x730\n get_page_from_freelist+0x7a0/0xf00\n __alloc_pages_noprof+0x153/0x2e0\n __folio_alloc_noprof+0x10/0xa0\n __filemap_get_folio+0x16b/0x370\n iomap_write_begin+0x496/0x680\n\nWhile trying to service a movable allocation (page type 1), the page\nallocator runs into a two-pageblock buddy on the movable freelist whose\nsecond block is typed as highatomic (page type 3).\n\nThis inconsistency is caused by the highatomic reservation system\noperating on single pageblocks, while MAX_ORDER can be bigger than that -\nin this configuration, pageblock_order is 9 while MAX_PAGE_ORDER is 10. \nThe test case is observed to make several adjacent order-3 requests with\n__GFP_DIRECT_RECLAIM cleared, which marks the surrounding block as\nhighatomic. Upon freeing, the blocks merge into an order-10 buddy. When\nthe highatomic pool is drained later on, this order-10 buddy gets moved\nback to the movable list, but only the first pageblock is marked movable\nagain. A subsequent expand() of this buddy warns about the tail being of\na different type.\n\nThis is a long-standing bug that\u0027s surfaced by the recent block type\nwarnings added to the allocator. The consequences seem mostly benign, it\njust results in odd behavior: the highatomic tail blocks are not properly\ndrained, instead they end up on the movable list first, then go back to\nthe highatomic list after an alloc-free cycle.\n\nTo fix this, make the highatomic reservation code aware that\nallocations/buddies can be larger than a pageblock.\n\nWhile it\u0027s an old quirk, the recently added type consistency warnings seem\nto be the most prominent consequence of it. Set the Fixes: tag\naccordingly to highlight this backporting dependency.\n\nLink: https://lkml.kernel.org/r/20240530114203.GA1222079@cmpxchg.org\nFixes: e0932b6c1f94 (\"mm: page_alloc: consolidate free page accounting\")\nSigned-off-by: Johannes Weiner \u003channes@cmpxchg.org\u003e\nReported-by: Christoph Hellwig \u003chch@infradead.org\u003e\nReviewed-by: Zi Yan \u003cziy@nvidia.com\u003e\nTested-by: Christoph Hellwig \u003chch@lst.de\u003e\nCc: Andy Shevchenko \u003candriy.shevchenko@linux.intel.com\u003e\nCc: Baolin Wang \u003cbaolin.wang@linux.alibaba.com\u003e\nCc: Mel Gorman \u003cmgorman@techsingularity.net\u003e\nCc: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "a4ca369ca221bb7e06c725792ac107f0e48e82e7", "tree": "4017963dd3ed02aa42620471f45132895d27d71a", "parents": [ "36eef400c2d571d05b6e41a9a61f874d4a7b82c5" ], "author": { "name": "Ryusuke Konishi", "email": "konishi.ryusuke@gmail.com", "time": "Thu May 30 23:15:56 2024 +0900" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Jun 05 19:19:24 2024 -0700" }, "message": "nilfs2: fix potential kernel bug due to lack of writeback flag waiting\n\nDestructive writes to a block device on which nilfs2 is mounted can cause\na kernel bug in the folio/page writeback start routine or writeback end\nroutine (__folio_start_writeback in the log below):\n\n kernel BUG at mm/page-writeback.c:3070!\n Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI\n ...\n RIP: 0010:__folio_start_writeback+0xbaa/0x10e0\n Code: 25 ff 0f 00 00 0f 84 18 01 00 00 e8 40 ca c6 ff e9 17 f6 ff ff\n e8 36 ca c6 ff 4c 89 f7 48 c7 c6 80 c0 12 84 e8 e7 b3 0f 00 90 \u003c0f\u003e\n 0b e8 1f ca c6 ff 4c 89 f7 48 c7 c6 a0 c6 12 84 e8 d0 b3 0f 00\n ...\n Call Trace:\n \u003cTASK\u003e\n nilfs_segctor_do_construct+0x4654/0x69d0 [nilfs2]\n nilfs_segctor_construct+0x181/0x6b0 [nilfs2]\n nilfs_segctor_thread+0x548/0x11c0 [nilfs2]\n kthread+0x2f0/0x390\n ret_from_fork+0x4b/0x80\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n\nThis is because when the log writer starts a writeback for segment summary\nblocks or a super root block that use the backing device\u0027s page cache, it\ndoes not wait for the ongoing folio/page writeback, resulting in an\ninconsistent writeback state.\n\nFix this issue by waiting for ongoing writebacks when putting\nfolios/pages on the backing device into writeback state.\n\nLink: https://lkml.kernel.org/r/20240530141556.4411-1-konishi.ryusuke@gmail.com\nFixes: 9ff05123e3bf (\"nilfs2: segment constructor\")\nSigned-off-by: Ryusuke Konishi \u003ckonishi.ryusuke@gmail.com\u003e\nTested-by: Ryusuke Konishi \u003ckonishi.ryusuke@gmail.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "36eef400c2d571d05b6e41a9a61f874d4a7b82c5", "tree": "572affcd5b3e28c543e361fc4f3bbecd622d069b", "parents": [ "6434e69814b159608a23135ca2be36024f402717" ], "author": { "name": "Sebastian Andrzej Siewior", "email": "bigeasy@linutronix.de", "time": "Tue May 28 16:13:41 2024 +0200" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Jun 05 19:19:24 2024 -0700" }, "message": "memcg: remove the lockdep assert from __mod_objcg_mlstate()\n\nThe assert was introduced in the commit cited below as an insurance that\nthe semantic is the same after the local_irq_save() has been removed and\nthe function has been made static.\n\nThe original requirement to disable interrupt was due the modification\nof per-CPU counters which require interrupts to be disabled because the\ncounter update operation is not atomic and some of the counters are\nupdated from interrupt context.\n\nAll callers of __mod_objcg_mlstate() acquire a lock\n(memcg_stock.stock_lock) which disables interrupts on !PREEMPT_RT and\nthe lockdep assert is satisfied. On PREEMPT_RT the interrupts are not\ndisabled and the assert triggers.\n\nThe safety of the counter update is already ensured by\nVM_WARN_ON_IRQS_ENABLED() which is part of __mod_memcg_lruvec_state() and\ndoes not require yet another check.\n\nRemove the lockdep assert from __mod_objcg_mlstate().\n\nLink: https://lkml.kernel.org/r/20240528141341.rz_rytN_@linutronix.de\nFixes: 91882c1617c1 (\"memcg: simple cleanup of stats update functions\")\nSigned-off-by: Sebastian Andrzej Siewior \u003cbigeasy@linutronix.de\u003e\nAcked-by: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nAcked-by: Shakeel Butt \u003cshakeel.butt@linux.dev\u003e\nAcked-by: Michal Hocko \u003cmhocko@suse.com\u003e\nReviewed-by: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: Johannes Weiner \u003channes@cmpxchg.org\u003e\nCc: Muchun Song \u003cmuchun.song@linux.dev\u003e\nCc: Roman Gushchin \u003croman.gushchin@linux.dev\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "6434e69814b159608a23135ca2be36024f402717", "tree": "5c796f3537b4226742247c016c9ff18a26abafc3", "parents": [ "94d46bf17916965e918bd2f3d2eec057f7c5578d" ], "author": { "name": "Barry Song", "email": "v-songbaohua@oppo.com", "time": "Fri May 24 12:54:44 2024 +1200" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Jun 05 19:19:24 2024 -0700" }, "message": "mm: arm64: fix the out-of-bounds issue in contpte_clear_young_dirty_ptes\n\nWe are passing a huge nr to __clear_young_dirty_ptes() right now. While\nwe should pass the number of pages, we are actually passing CONT_PTE_SIZE.\nThis is causing lots of crashes of MADV_FREE, panic oops could vary\neverytime.\n\nLink: https://lkml.kernel.org/r/20240524005444.135417-1-21cnbao@gmail.com\nFixes: 89e86854fb0a (\"mm/arm64: override clear_young_dirty_ptes() batch helper\")\nSigned-off-by: Barry Song \u003cv-songbaohua@oppo.com\u003e\nReviewed-by: Baolin Wang \u003cbaolin.wang@linux.alibaba.com\u003e\nAcked-by: Lance Yang \u003cioworker0@gmail.com\u003e\nAcked-by: David Hildenbrand \u003cdavid@redhat.com\u003e\nAcked-by: Chris Li \u003cchrisl@kernel.org\u003e\nCc: Barry Song \u003c21cnbao@gmail.com\u003e\nCc: Ryan Roberts \u003cryan.roberts@arm.com\u003e\nCc: Jeff Xie \u003cxiehuan09@gmail.com\u003e\nCc: Kefeng Wang \u003cwangkefeng.wang@huawei.com\u003e\nCc: Michal Hocko \u003cmhocko@suse.com\u003e\nCc: Minchan Kim \u003cminchan@kernel.org\u003e\nCc: Muchun Song \u003csongmuchun@bytedance.com\u003e\nCc: Peter Xu \u003cpeterx@redhat.com\u003e\nCc: Yang Shi \u003cshy828301@gmail.com\u003e\nCc: Yin Fengwei \u003cfengwei.yin@intel.com\u003e\nCc: Zach O\u0027Keefe \u003czokeefe@google.com\u003e\nCc: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nCc: Will Deacon \u003cwill@kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "94d46bf17916965e918bd2f3d2eec057f7c5578d", "tree": "9ff0e548a1fa602b3606916bc9212fc3fc9b0cbd", "parents": [ "0d648dd5c899f33154b98a6aef6e3dab0f4de613" ], "author": { "name": "Barry Song", "email": "v-songbaohua@oppo.com", "time": "Fri May 24 08:50:48 2024 +1200" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Jun 05 19:19:24 2024 -0700" }, "message": "mm: huge_mm: fix undefined reference to `mthp_stats\u0027 for CONFIG_SYSFS\u003dn\n\nif CONFIG_SYSFS is not enabled in config, we get the below error,\n\nAll errors (new ones prefixed by \u003e\u003e):\n\n s390-linux-ld: mm/memory.o: in function `count_mthp_stat\u0027:\n\u003e\u003e include/linux/huge_mm.h:285:(.text+0x191c): undefined reference to `mthp_stats\u0027\n s390-linux-ld: mm/huge_memory.o:(.rodata+0x10): undefined reference to `mthp_stats\u0027\n\nvim +285 include/linux/huge_mm.h\n\n 279\n 280 static inline void count_mthp_stat(int order, enum mthp_stat_item item)\n 281 {\n 282 if (order \u003c\u003d 0 || order \u003e PMD_ORDER)\n 283 return;\n 284\n \u003e 285 this_cpu_inc(mthp_stats.stats[order][item]);\n 286 }\n 287\n\nLink: https://lkml.kernel.org/r/20240523210045.40444-1-21cnbao@gmail.com\nFixes: ec33687c6749 (\"mm: add per-order mTHP anon_fault_alloc and anon_fault_fallback counters\")\nReported-by: kernel test robot \u003clkp@intel.com\u003e\nCloses: https://lore.kernel.org/oe-kbuild-all/202405231728.tCAogiSI-lkp@intel.com/\nSigned-off-by: Barry Song \u003cv-songbaohua@oppo.com\u003e\nTested-by: Yujie Liu \u003cyujie.liu@intel.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "0d648dd5c899f33154b98a6aef6e3dab0f4de613", "tree": "a09d07656356d594bc973ce74bcb9c4db41d9067", "parents": [ "1613e604df0cd359cf2a7fbd9be7a0bcfacfabd0" ], "author": { "name": "Baolin Wang", "email": "baolin.wang@linux.alibaba.com", "time": "Thu May 23 10:36:39 2024 +0800" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Jun 05 19:19:23 2024 -0700" }, "message": "mm: drop the \u0027anon_\u0027 prefix for swap-out mTHP counters\n\nThe mTHP swap related counters: \u0027anon_swpout\u0027 and \u0027anon_swpout_fallback\u0027\nare confusing with an \u0027anon_\u0027 prefix, since the shmem can swap out\nnon-anonymous pages. So drop the \u0027anon_\u0027 prefix to keep consistent with\nthe old swap counter names.\n\nThis is needed in 6.10-rcX to avoid having an inconsistent ABI out in the\nfield.\n\nLink: https://lkml.kernel.org/r/7a8989c13299920d7589007a30065c3e2c19f0e0.1716431702.git.baolin.wang@linux.alibaba.com\nFixes: d0f048ac39f6 (\"mm: add per-order mTHP anon_swpout and anon_swpout_fallback counters\")\nFixes: 42248b9d34ea (\"mm: add docs for per-order mTHP counters and transhuge_page ABI\")\nSigned-off-by: Baolin Wang \u003cbaolin.wang@linux.alibaba.com\u003e\nSuggested-by: \"Huang, Ying\" \u003cying.huang@intel.com\u003e\nAcked-by: Barry Song \u003cbaohua@kernel.org\u003e\nCc: David Hildenbrand \u003cdavid@redhat.com\u003e\nCc: Lance Yang \u003cioworker0@gmail.com\u003e\nCc: Matthew Wilcox (Oracle) \u003cwilly@infradead.org\u003e\nCc: Ryan Roberts \u003cryan.roberts@arm.com\u003e\nCc: Zi Yan \u003cziy@nvidia.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" } ], "next": "7ef91dcba172441582962602ff6899bfec6078b7" }