)]}' { "log": [ { "commit": "6e4436539ae182dc86d57d13849862bcafaa4709", "tree": "fbfe48a893f811e20d7f77343a3b96ba5c8aab68", "parents": [ "b0da640826ba3b6506b4996a6b23a429235e6923", "1b8f9c1fb464968a5b18d3acc1da8c00bad24fad" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Aug 19 11:02:13 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Aug 19 11:02:13 2024 -0700" }, "message": "Merge tag \u0027hid-for-linus-2024081901\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid\n\nPull HID fixes from Jiri Kosina:\n\n - memory corruption fixes for hid-cougar (Camila Alvarez) and\n hid-amd_sfh (Olivier Sobrie)\n\n - fix for regression in Wacom driver of twist gesture handling (Jason\n Gerecke)\n\n - two new device IDs for hid-multitouch (Dmitry Savin) and hid-asus\n (Luke D. Jones)\n\n* tag \u0027hid-for-linus-2024081901\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid:\n HID: wacom: Defer calculation of resolution until resolution_code is known\n HID: multitouch: Add support for GT7868Q\n HID: amd_sfh: free driver_data after destroying hid device\n hid-asus: add ROG Ally X prod ID to quirk list\n HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup\n" }, { "commit": "b0da640826ba3b6506b4996a6b23a429235e6923", "tree": "7f555acbdc20681a97f33c9676719bbd586bae5f", "parents": [ "47ac09b91befbb6a235ab620c32af719f8208399", "bcc954c6caba01fca143162d5fbb90e46aa1ad80" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Aug 19 09:26:35 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Aug 19 09:26:35 2024 -0700" }, "message": "Merge tag \u0027printk-for-6.11-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/printk/linux\n\nPull printk fix from Petr Mladek:\n\n - Do not block printk on non-panic CPUs when they are dumping\n backtraces\n\n* tag \u0027printk-for-6.11-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/printk/linux:\n printk/panic: Allow cpu backtraces to be written into ringbuffer during panic\n" }, { "commit": "47ac09b91befbb6a235ab620c32af719f8208399", "tree": "6c786401ef8303cf8dd719cb97c9a70c905540a0", "parents": [ "ccdbf91fdf5a71881ef32b41797382c4edd6f670" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 13:17:27 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 13:17:27 2024 -0700" }, "message": "Linux 6.11-rc4\n" }, { "commit": "ccdbf91fdf5a71881ef32b41797382c4edd6f670", "tree": "38287d87455cca815d1359ee373dc5917d4050d4", "parents": [ "e1bc113215ab2875ab52fbbd76a54b5583f67e61", "cdd1fa91a6b8c7cd93b3abf9f3ef05b8ce741b61" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 10:19:49 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 10:19:49 2024 -0700" }, "message": "Merge tag \u0027driver-core-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core\n\nPull driver core fixes from Greg KH:\n \"Here are two driver fixes for regressions from 6.11-rc1 due to the\n driver core change making a structure in a driver core callback const.\n\n These were missed by all testing EXCEPT for what Bart happened to be\n running, so I appreciate the fixes provided here for some\n odd/not-often-used driver subsystems that nothing else happened to\n catch.\n\n Both of these fixes have been in linux-next all week with no reported\n issues\"\n\n* tag \u0027driver-core-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core:\n mips: sgi-ip22: Fix the build\n ARM: riscpc: ecard: Fix the build\n" }, { "commit": "e1bc113215ab2875ab52fbbd76a54b5583f67e61", "tree": "a44212417895a2503474cb78c15f7884da278589", "parents": [ "394f33f9b3f40dcdd0304f17186d28a0342e8763", "2374bf7558de915edc6ec8cb10ec3291dfab9594" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 10:16:34 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 10:16:34 2024 -0700" }, "message": "Merge tag \u0027char-misc-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc\n\nPull char / misc fixes from Greg KH:\n \"Here are some small char/misc fixes for 6.11-rc4 to resolve reported\n problems. Included in here are:\n\n - fastrpc revert of a change that broke userspace\n\n - xillybus fixes for reported issues\n\n Half of these have been in linux-next this week with no reported\n problems, I don\u0027t know if the last bit of xillybus driver changes made\n it in, but they are \u0027obviously correct\u0027 so will be safe :)\"\n\n* tag \u0027char-misc-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc:\n char: xillybus: Check USB endpoints when probing device\n char: xillybus: Refine workqueue handling\n Revert \"misc: fastrpc: Restrict untrusted app to attach to privileged PD\"\n char: xillybus: Don\u0027t destroy workqueue from work item running on it\n" }, { "commit": "394f33f9b3f40dcdd0304f17186d28a0342e8763", "tree": "3b4f0475c094d896a83eebc187de37f4f07f591e", "parents": [ "3d9061d22bef282dfd993f9481a1f0cb755bd7f6", "0863bffda1131fd2fa9c05b653ad9ee3d8db127e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 10:10:48 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 10:10:48 2024 -0700" }, "message": "Merge tag \u0027tty-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty\n\nPull tty / serial fixes from Greg KH:\n \"Here are some small tty and serial driver fixes for 6.11-rc4 to\n resolve some reported problems. Included in here are:\n\n - conmakehash.c userspace build issues\n\n - fsl_lpuart driver fix\n\n - 8250_omap revert for reported regression\n\n - atmel_serial rts flag fix\n\n All of these have been in linux-next this week with no reported\n issues\"\n\n* tag \u0027tty-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty:\n Revert \"serial: 8250_omap: Set the console genpd always on if no console suspend\"\n tty: atmel_serial: use the correct RTS flag.\n tty: vt: conmakehash: remove non-portable code printing comment header\n tty: serial: fsl_lpuart: mark last busy before uart_add_one_port\n" }, { "commit": "3d9061d22bef282dfd993f9481a1f0cb755bd7f6", "tree": "6dee79d1e850a56fcdfa0f00c7d7e343881f0d2a", "parents": [ "57b14823ea68592bd67e4992a2bf0dd67abb68d6", "af8e119f52e9c13e556be9e03f27957554a84656" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 09:59:06 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 09:59:06 2024 -0700" }, "message": "Merge tag \u0027usb-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb\n\nPull USB / Thunderbolt driver fixes from Greg KH:\n \"Here are some small USB and Thunderbolt driver fixes for 6.11-rc4 to\n resolve some reported issues. Included in here are:\n\n - thunderbolt driver fixes for reported problems\n\n - typec driver fixes\n\n - xhci fixes\n\n - new device id for ljca usb driver\n\n All of these have been in linux-next this week with no reported\n issues\"\n\n* tag \u0027usb-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb:\n xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration\n usb: misc: ljca: Add Lunar Lake ljca GPIO HID to ljca_gpio_hids[]\n Revert \"usb: typec: tcpm: clear pd_event queue in PORT_RESET\"\n usb: typec: ucsi: Fix the return value of ucsi_run_command()\n usb: xhci: fix duplicate stall handling in handle_tx_event()\n usb: xhci: Check for xhci-\u003einterrupters being allocated in xhci_mem_clearup()\n thunderbolt: Mark XDomain as unplugged when router is removed\n thunderbolt: Fix memory leaks in {port|retimer}_sb_regs_write()\n" }, { "commit": "57b14823ea68592bd67e4992a2bf0dd67abb68d6", "tree": "fe73317f6280667f785c46f887df4f82f0ab109c", "parents": [ "3c0da3d163eb32f1f91891efaade027fa9b245b9", "534f7eff9239c1b0af852fc33f5af2b62c00eddf" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 08:50:36 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 08:50:36 2024 -0700" }, "message": "Merge tag \u0027for-6.11-rc3-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux\n\nPull more btrfs fixes from David Sterba:\n \"A more fixes. We got reports that shrinker added in 6.10 still causes\n latency spikes and the fixes don\u0027t handle all corner cases. Due to\n summer holidays we\u0027re taking a shortcut to disable it for release\n builds and will fix it in the near future.\n\n - only enable extent map shrinker for DEBUG builds, temporary quick\n fix to avoid latency spikes for regular builds\n\n - update target inode\u0027s ctime on unlink, mandated by POSIX\n\n - properly take lock to read/update block group\u0027s zoned variables\n\n - add counted_by() annotations\"\n\n* tag \u0027for-6.11-rc3-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux:\n btrfs: only enable extent map shrinker for DEBUG builds\n btrfs: zoned: properly take lock to read/update block group\u0027s zoned variables\n btrfs: tree-checker: add dev extent item checks\n btrfs: update target inode\u0027s ctime on unlink\n btrfs: send: annotate struct name_cache_entry with __counted_by()\n" }, { "commit": "3c0da3d163eb32f1f91891efaade027fa9b245b9", "tree": "044d7125e167dff4b438d662533ac955d6dd067d", "parents": [ "c3f2d783a459980eafd24c5af94ccd56a615961f" ], "author": { "name": "Jann Horn", "email": "jannh@google.com", "time": "Tue Aug 06 21:51:42 2024 +0200" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 08:45:39 2024 -0700" }, "message": "fuse: Initialize beyond-EOF page contents before setting uptodate\n\nfuse_notify_store(), unlike fuse_do_readpage(), does not enable page\nzeroing (because it can be used to change partial page contents).\n\nSo fuse_notify_store() must be more careful to fully initialize page\ncontents (including parts of the page that are beyond end-of-file)\nbefore marking the page uptodate.\n\nThe current code can leave beyond-EOF page contents uninitialized, which\nmakes these uninitialized page contents visible to userspace via mmap().\n\nThis is an information leak, but only affects systems which do not\nenable init-on-alloc (via CONFIG_INIT_ON_ALLOC_DEFAULT_ON\u003dy or the\ncorresponding kernel command line parameter).\n\nLink: https://bugs.chromium.org/p/project-zero/issues/detail?id\u003d2574\nCc: stable@kernel.org\nFixes: a1d75f258230 (\"fuse: add store request\")\nSigned-off-by: Jann Horn \u003cjannh@google.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "c3f2d783a459980eafd24c5af94ccd56a615961f", "tree": "a4c25eb4b94110ba42efdeb6f67c1f65c5c77add", "parents": [ "810996a36309a56a39b406d9ad2903115714228f", "2e6506e1c4eed2676a8412231046f31e10e240da" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 19:50:16 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 19:50:16 2024 -0700" }, "message": "Merge tag \u0027mm-hotfixes-stable-2024-08-17-19-34\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm\n\nPull misc fixes from Andrew Morton:\n \"16 hotfixes. All except one are for MM. 10 of these are cc:stable and\n the others pertain to post-6.10 issues.\n\n As usual with these merges, singletons and doubletons all over the\n place, no identifiable-by-me theme. Please see the lovingly curated\n changelogs to get the skinny\"\n\n* tag \u0027mm-hotfixes-stable-2024-08-17-19-34\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm:\n mm/migrate: fix deadlock in migrate_pages_batch() on large folios\n alloc_tag: mark pages reserved during CMA activation as not tagged\n alloc_tag: introduce clear_page_tag_ref() helper function\n crash: fix riscv64 crash memory reserve dead loop\n selftests: memfd_secret: don\u0027t build memfd_secret test on unsupported arches\n mm: fix endless reclaim on machines with unaccepted memory\n selftests/mm: compaction_test: fix off by one in check_compaction()\n mm/numa: no task_numa_fault() call if PMD is changed\n mm/numa: no task_numa_fault() call if PTE is changed\n mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0\n mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu\n mm: don\u0027t account memmap per-node\n mm: add system wide stats items category\n mm: don\u0027t account memmap on failure\n mm/hugetlb: fix hugetlb vs. core-mm PT locking\n mseal: fix is_madv_discard()\n" }, { "commit": "810996a36309a56a39b406d9ad2903115714228f", "tree": "5aa988aab3ed044635441d07e6b807c8b38f81d1", "parents": [ "e0fac5fc8b7657ee82a7d23eeac564182dbf51fd", "227bbaabe64b6f9cd98aa051454c1d4a194a8c6a" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 19:23:02 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 19:23:02 2024 -0700" }, "message": "Merge tag \u0027powerpc-6.11-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux\n\nPull powerpc fixes from Michael Ellerman:\n\n - Fix crashes on 85xx with some configs since the recent hugepd rework.\n\n - Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL on some\n platforms.\n\n - Don\u0027t enable offline cores when changing SMT modes, to match existing\n userspace behaviour.\n\nThanks to Christophe Leroy, Dr. David Alan Gilbert, Guenter Roeck, Nysal\nJan K.A, Shrikanth Hegde, Thomas Gleixner, and Tyrel Datwyler.\n\n* tag \u0027powerpc-6.11-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:\n powerpc/topology: Check if a core is online\n cpu/SMT: Enable SMT only if a core is online\n powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL\n powerpc/mm: Fix size of allocated PGDIR\n soc: fsl: qbman: remove unused struct \u0027cgr_comp\u0027\n" }, { "commit": "e0fac5fc8b7657ee82a7d23eeac564182dbf51fd", "tree": "d39125a90f06cfb4b0e272961810d6c415faf393", "parents": [ "98a1b2d71f9fac01c7aba80f30235b1b2e8234da", "5b4f3af39b6588e8de4444d8e1ccf759b40f9414" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 16:31:12 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 16:31:12 2024 -0700" }, "message": "Merge tag \u0027v6.11-rc3-smb3-client-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6\n\nPull smb client fixes from Steve French:\n\n - fix for clang warning - additional null check\n\n - fix for cached write with posix locks\n\n - flexible structure fix\n\n* tag \u0027v6.11-rc3-smb3-client-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6:\n smb: smb2pdu.h: Use static_assert() to check struct sizes\n smb3: fix lock breakage for cached writes\n smb/client: avoid possible NULL dereference in cifs_free_subrequest()\n" }, { "commit": "98a1b2d71f9fac01c7aba80f30235b1b2e8234da", "tree": "003bfbe8f54709fc5813b34122f1c14e58a32100", "parents": [ "df6cbc62cc9b3bcf593d13400dd58cd339a0f56d", "87cea484951eba1d0342033241f80e49303d802c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 16:23:05 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 16:23:05 2024 -0700" }, "message": "Merge tag \u0027i2c-for-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux\n\nPull i2c fixes from Wolfram Sang:\n \"I2C core fix replacing IS_ENABLED() with IS_REACHABLE()\n\n For host drivers, there are two fixes:\n\n - Tegra I2C Controller: Addresses a potential double-locking issue\n during probe. ACPI devices are not IRQ-safe when invoking runtime\n suspend and resume functions, so the irq_safe flag should not be\n set.\n\n - Qualcomm GENI I2C Controller: Fixes an oversight in the exit path\n of the runtime_resume() function, which was missed in the previous\n release\"\n\n* tag \u0027i2c-for-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux:\n i2c: tegra: Do not mark ACPI devices as irq safe\n i2c: Use IS_REACHABLE() for substituting empty ACPI functions\n i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume\n" }, { "commit": "df6cbc62cc9b3bcf593d13400dd58cd339a0f56d", "tree": "5e477106c1ef7f4a39ebbda64863fb2506297cf7", "parents": [ "d09840f8b362d16a0722d300a6c7c8cca626e628", "8c6b808c8c2a9de21503944bd6308979410fd812" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 10:04:01 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 10:04:01 2024 -0700" }, "message": "Merge tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi\n\nPull SCSI fixes from James Bottomley:\n \"Two small fixes to the mpi3mr driver. One to avoid oversize\n allocations in tracing and the other to fix an uninitialized spinlock\n in the user to driver feature request code (used to trigger dumps and\n the like)\"\n\n* tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:\n scsi: mpi3mr: Avoid MAX_PAGE_ORDER WARNING for buffer allocations\n scsi: mpi3mr: Add missing spin_lock_init() for mrioc-\u003etrigger_lock\n" }, { "commit": "d09840f8b362d16a0722d300a6c7c8cca626e628", "tree": "58bbfc06fb553f02baf68c15d9bbddbab5bb94bb", "parents": [ "b71817585383d96ddc51ebd126f6253fdb9a8568", "8d16762047c627073955b7ed171a36addaf7b1ff" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 09:51:28 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 09:51:28 2024 -0700" }, "message": "Merge tag \u0027xfs-6.11-fixes-3\u0027 of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux\n\nPull xfs fixes from Chandan Babu:\n\n - Check for presence of only \u0027attr\u0027 feature before scrubbing an inode\u0027s\n attribute fork.\n\n - Restore the behaviour of setting AIL thread to TASK_INTERRUPTIBLE for\n long (i.e. 50ms) sleep durations to prevent high load averages.\n\n - Do not allow users to change the realtime flag of a file unless the\n datadev and rtdev both support fsdax access modes.\n\n* tag \u0027xfs-6.11-fixes-3\u0027 of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux:\n xfs: conditionally allow FS_XFLAG_REALTIME changes if S_DAX is set\n xfs: revert AIL TASK_KILLABLE threshold\n xfs: attr forks require attr, not attr2\n" }, { "commit": "b71817585383d96ddc51ebd126f6253fdb9a8568", "tree": "ee5abfab7eba20a871637574752483980f68176d", "parents": [ "e5fa841af679cb830da6c609c740a37bdc0b8b35", "0e49d3ff12501adaafaf6fdb19699f021d1eda1c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 09:46:10 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 09:46:10 2024 -0700" }, "message": "Merge tag \u0027bcachefs-2024-08-16\u0027 of git://evilpiepirate.org/bcachefs\n\nPull bcachefs fixes from Kent OverstreetL\n\n - New on disk format version, bcachefs_metadata_version_disk_accounting_inum\n\n This adds one more disk accounting counter, which counts disk usage\n and number of extents per inode number. This lets us track\n fragmentation, for implementing defragmentation later, and it also\n counts disk usage per inode in all snapshots, which will be a useful\n thing to expose to users.\n\n - One performance issue we\u0027ve observed is threads spinning when they\n should be waiting for dirty keys in the key cache to be flushed by\n journal reclaim, so we now have hysteresis for the waiting thread, as\n well as improving the tracepoint and a new time_stat, for tracking\n time blocked waiting on key cache flushing.\n\n... and various assorted smaller fixes.\n\n* tag \u0027bcachefs-2024-08-16\u0027 of git://evilpiepirate.org/bcachefs:\n bcachefs: Fix locking in __bch2_trans_mark_dev_sb()\n bcachefs: fix incorrect i_state usage\n bcachefs: avoid overflowing LRU_TIME_BITS for cached data lru\n bcachefs: Fix forgetting to pass trans to fsck_err()\n bcachefs: Increase size of cuckoo hash table on too many rehashes\n bcachefs: bcachefs_metadata_version_disk_accounting_inum\n bcachefs: Kill __bch2_accounting_mem_mod()\n bcachefs: Make bkey_fsck_err() a wrapper around fsck_err()\n bcachefs: Fix warning in __bch2_fsck_err() for trans not passed in\n bcachefs: Add a time_stat for blocked on key cache flush\n bcachefs: Improve trans_blocked_journal_reclaim tracepoint\n bcachefs: Add hysteresis to waiting on btree key cache flush\n lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()\n bcachefs: Convert for_each_btree_node() to lockrestart_do()\n bcachefs: Add missing downgrade table entry\n bcachefs: disk accounting: ignore unknown types\n bcachefs: bch2_accounting_invalid() fixup\n bcachefs: Fix bch2_trigger_alloc when upgrading from old versions\n bcachefs: delete faulty fastpath in bch2_btree_path_traverse_cached()\n" }, { "commit": "0e49d3ff12501adaafaf6fdb19699f021d1eda1c", "tree": "0546fa9b62c5d2bd35602890d1a230ac7a03cff0", "parents": [ "99c87fe0f584f8d778a323141504d1ba5c89a4a5" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Sat May 04 23:48:58 2024 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Fri Aug 16 20:45:15 2024 -0400" }, "message": "bcachefs: Fix locking in __bch2_trans_mark_dev_sb()\n\nWe run this in full RW mode now, so we have to guard against the\nsuperblock buffer being reallocated.\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "e5fa841af679cb830da6c609c740a37bdc0b8b35", "tree": "7f1c0bec28c2875a6cdc2e1615be126d93959a04", "parents": [ "c2cdb13a34d950e61e3b53af0c5f9eb828710beb", "046667c4d3196938e992fba0dfcde570aa85cd0e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 17:08:02 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 17:08:02 2024 -0700" }, "message": "Merge tag \u0027pull-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs\n\nPull memcg-v1 fix from Al Viro:\n \"memcg_write_event_control() oops fix\"\n\n* tag \u0027pull-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs:\n memcg_write_event_control(): fix a user-triggerable oops\n" }, { "commit": "c2cdb13a34d950e61e3b53af0c5f9eb828710beb", "tree": "1c61b8b7b92ffcb36eb2008b22334711f0978c5f", "parents": [ "216595b708dac1707fc68d48042738d6d559ddd5", "f75c235565f90c4a17b125e47f1c68ef6b8c2bce" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 17:02:32 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 17:02:32 2024 -0700" }, "message": "Merge tag \u0027arm64-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux\n\nPull arm64 fixes from Catalin Marinas:\n\n - Fix the arm64 __get_mem_asm() to use the _ASM_EXTABLE_##type##ACCESS()\n macro instead of the *_ERR() one in order to avoid writing -EFAULT to\n the value register in case of a fault\n\n - Initialise all elements of the acpi_early_node_map[] to NUMA_NO_NODE.\n Prior to this fix, only the first element was initialised\n\n - Move the KASAN random tag seed initialisation after the per-CPU areas\n have been initialised (prng_state is __percpu)\n\n* tag \u0027arm64-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:\n arm64: Fix KASAN random tag seed initialization\n arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE\n arm64: uaccess: correct thinko in __get_mem_asm()\n" }, { "commit": "216595b708dac1707fc68d48042738d6d559ddd5", "tree": "a0895b4e0221904efacb166e5951d5bd1ea1a45c", "parents": [ "85652baa895b59b94bea29c77cb9b51cf7120deb", "39a3396558fb97e6e7d4c1eb04c2166da31904a9" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 16:59:05 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 16:59:05 2024 -0700" }, "message": "Merge tag \u0027clk-fixes-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux\n\nPull clk fix from Stephen Boyd:\n \"One fix for the new T-Head TH1520 clk driver that marks a bus clk\n critical so that it isn\u0027t turned off during late init which breaks\n emmc-sdio\"\n\n* tag \u0027clk-fixes-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux:\n clk: thead: fix dependency on clk_ignore_unused\n" }, { "commit": "85652baa895b59b94bea29c77cb9b51cf7120deb", "tree": "923d4cc8e49835cc1bdda55fa35172b1281f29b4", "parents": [ "c5ac744cdddae82916d4cd35d962d3f47065e68a", "b313a8c835516bdda85025500be866ac8a74e022" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 14:03:31 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 14:03:31 2024 -0700" }, "message": "Merge tag \u0027block-6.11-20240824\u0027 of git://git.kernel.dk/linux\n\nPull block fixes from Jens Axboe:\n\n - Fix corruption issues with s390/dasd (Eric, Stefan)\n\n - Fix a misuse of non irq locking grab of a lock (Li)\n\n - MD pull request with a single data corruption fix for raid1 (Yu)\n\n* tag \u0027block-6.11-20240824\u0027 of git://git.kernel.dk/linux:\n block: Fix lockdep warning in blk_mq_mark_tag_wait\n md/raid1: Fix data corruption for degraded array with slow disk\n s390/dasd: fix error recovery leading to data corruption on ESE devices\n s390/dasd: Remove DMA alignment\n" }, { "commit": "c5ac744cdddae82916d4cd35d962d3f47065e68a", "tree": "8e47c66705418d7d80520be0cbce7cf2310356aa", "parents": [ "2731835f3f2e5b0642ad82a3a0265c98a552283e", "1fc2ac428ef7d2ab9e8e19efe7ec3e58aea51bf3" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 14:00:05 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 14:00:05 2024 -0700" }, "message": "Merge tag \u0027io_uring-6.11-20240824\u0027 of git://git.kernel.dk/linux\n\nPull io_uring fixes from Jens Axboe:\n\n - Fix a comment in the uapi header using the wrong member name (Caleb)\n\n - Fix KCSAN warning for a debug check in sqpoll (me)\n\n - Two more NAPI tweaks (Olivier)\n\n* tag \u0027io_uring-6.11-20240824\u0027 of git://git.kernel.dk/linux:\n io_uring: fix user_data field name in comment\n io_uring/sqpoll: annotate debug task \u003d\u003d current with data_race()\n io_uring/napi: remove duplicate io_napi_entry timeout assignation\n io_uring/napi: check napi_enabled in io_napi_add() before proceeding\n" }, { "commit": "2731835f3f2e5b0642ad82a3a0265c98a552283e", "tree": "19a628abcf30c5979a35408ac0c0701243930d9a", "parents": [ "296c871d2904cff2b4742702ef94512ab467a8e3", "b739dffa5d570b411d4bdf4bb9b8dfd6b7d72305" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 13:50:33 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 13:50:33 2024 -0700" }, "message": "Merge tag \u0027devicetree-fixes-for-6.11-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux\n\nPull devicetree fixes from Rob Herring:\n\n - Fix a possible (but unlikely) out-of-bounds read in interrupts\n parsing code\n\n - Add AT25 EEPROM \"fujitsu,mb85rs256\" compatible\n\n - Update Konrad Dybcio\u0027s email\n\n* tag \u0027devicetree-fixes-for-6.11-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux:\n of/irq: Prevent device address out-of-bounds read in interrupt map walk\n dt-bindings: eeprom: at25: add fujitsu,mb85rs256 compatible\n dt-bindings: Batch-update Konrad Dybcio\u0027s email\n" }, { "commit": "534f7eff9239c1b0af852fc33f5af2b62c00eddf", "tree": "5b863ceb3a2f48ca5eae914528d783321867274b", "parents": [ "e30729d4bd4001881be4d1ad4332a5d4985398f8" ], "author": { "name": "Qu Wenruo", "email": "wqu@suse.com", "time": "Fri Aug 16 10:40:38 2024 +0930" }, "committer": { "name": "David Sterba", "email": "dsterba@suse.com", "time": "Fri Aug 16 21:22:39 2024 +0200" }, "message": "btrfs: only enable extent map shrinker for DEBUG builds\n\nAlthough there are several patches improving the extent map shrinker,\nthere are still reports of too frequent shrinker behavior, taking too\nmuch CPU for the kswapd process.\n\nSo let\u0027s only enable extent shrinker for now, until we got more\ncomprehensive understanding and a better solution.\n\nLink: https://lore.kernel.org/linux-btrfs/3df4acd616a07ef4d2dc6bad668701504b412ffc.camel@intelfx.name/\nLink: https://lore.kernel.org/linux-btrfs/c30fd6b3-ca7a-4759-8a53-d42878bf84f7@gmail.com/\nFixes: 956a17d9d050 (\"btrfs: add a shrinker for extent maps\")\nCC: stable@vger.kernel.org # 6.10+\nSigned-off-by: Qu Wenruo \u003cwqu@suse.com\u003e\nReviewed-by: David Sterba \u003cdsterba@suse.com\u003e\nSigned-off-by: David Sterba \u003cdsterba@suse.com\u003e\n" }, { "commit": "296c871d2904cff2b4742702ef94512ab467a8e3", "tree": "92eeb181cfa082322fbc472abe34105ea67ea5ea", "parents": [ "64ab5e4039cd713afdb7c1b1d6a693efdd2050d8", "6e6f58a170ea98e44075b761f2da42a5aec47dfb" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 11:49:07 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 11:49:07 2024 -0700" }, "message": "Merge tag \u0027thermal-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull thermal control fix from Rafael Wysocki:\n \"Fix a Bang-bang thermal governor issue causing it to fail to reset the\n state of cooling devices if they are \u0027on\u0027 to start with, but the\n thermal zone temperature is always below the corresponding trip point\n (Rafael Wysocki)\"\n\n* tag \u0027thermal-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n thermal: gov_bang_bang: Use governor_data to reduce overhead\n thermal: gov_bang_bang: Add .manage() callback\n thermal: gov_bang_bang: Split bang_bang_control()\n thermal: gov_bang_bang: Call __thermal_cdev_update() directly\n" }, { "commit": "64ab5e4039cd713afdb7c1b1d6a693efdd2050d8", "tree": "757c167cf103c58d0e4f2edf53e50d9eefc3fa70", "parents": [ "e4a55b555db6d2a006551605ef4404529e878cd2", "71bf41b8e913ec9fc91f0d39ab8fb320229ec604" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 11:43:54 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 11:43:54 2024 -0700" }, "message": "Merge tag \u0027acpi-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull ACPI fix from Rafael Wysocki:\n \"Fix an issue related to the ACPI EC device handling that causes the\n _REG control method to be evaluated for EC operation regions that are\n not expected to be used.\n\n This confuses the platform firmware and provokes various types of\n misbehavior on some systems (Rafael Wysocki)\"\n\n* tag \u0027acpi-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n ACPI: EC: Evaluate _REG outside the EC scope more carefully\n ACPICA: Add a depth argument to acpi_execute_reg_methods()\n Revert \"ACPI: EC: Evaluate orphan _REG under EC device\"\n" }, { "commit": "e4a55b555db6d2a006551605ef4404529e878cd2", "tree": "0d9c63a4f687aac41fba3a0f7eeedcdc952a9abb", "parents": [ "60cb1da6ed4a62ec8331e25ad4be87115cd28feb", "d5240fa65db071909e9d1d5adcc5fd1abc8e96fe" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 11:36:40 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 11:36:40 2024 -0700" }, "message": "Merge tag \u0027libnvdimm-fixes-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm\n\nPull libnvdimm fix from Ira Weiny:\n \"Commit f467fee48da4 (\"block: move the dax flag to queue_limits\") broke\n the DAX tests by skipping over the legacy pmem mapping pages case.\n\n Set the DAX flag in this case as well\"\n\n* tag \u0027libnvdimm-fixes-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm:\n nvdimm/pmem: Set dax flag for all \u0027PFN_MAP\u0027 cases\n" }, { "commit": "1fc2ac428ef7d2ab9e8e19efe7ec3e58aea51bf3", "tree": "e9ba33bc343363ab05c58e6080f7d25a835a4897", "parents": [ "e4956dc7a84da074fd8dc10f7abd147f15b3ae58" ], "author": { "name": "Caleb Sander Mateos", "email": "csander@purestorage.com", "time": "Fri Aug 16 12:15:23 2024 -0600" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Fri Aug 16 12:31:26 2024 -0600" }, "message": "io_uring: fix user_data field name in comment\n\nio_uring_cqe\u0027s user_data field refers to `sqe-\u003edata`, but io_uring_sqe\ndoes not have a data field. Fix the comment to say `sqe-\u003euser_data`.\n\nSigned-off-by: Caleb Sander Mateos \u003ccsander@purestorage.com\u003e\nLink: https://github.com/axboe/liburing/pull/1206\nLink: https://lore.kernel.org/r/20240816181526.3642732-1-csander@purestorage.com\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "60cb1da6ed4a62ec8331e25ad4be87115cd28feb", "tree": "c3854354c712faf531d4330843b70e56542c8a32", "parents": [ "5b179fe052334ea81c9f1841bf782bb0878b61d2", "0eba65f0310d3c7d5516c7fd4c172d0bfa8b285b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 11:24:06 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 11:24:06 2024 -0700" }, "message": "Merge tag \u0027rust-fixes-6.11\u0027 of https://github.com/Rust-for-Linux/linux\n\nPull rust fixes from Miguel Ojeda:\n\n - Fix \u0027-Os\u0027 Rust 1.80.0+ builds adding more intrinsics (also tweaked in\n upstream Rust for the upcoming 1.82.0).\n\n - Fix support for the latest version of rust-analyzer due to a change\n on rust-analyzer config file semantics (considered a fix since most\n developers use the latest version of the tool, which is the only one\n actually supported by upstream). I am discussing stability of the\n config file with upstream -- they may be able to start versioning it.\n\n - Fix GCC 14 builds due to \u0027-fmin-function-alignment\u0027 not skipped for\n libclang (bindgen).\n\n - A couple Kconfig fixes around \u0027{RUSTC,BINDGEN}_VERSION_TEXT\u0027 to\n suppress error messages in a foreign architecture chroot and to use a\n proper default format.\n\n - Clean \u0027rust-analyzer\u0027 target warning due to missing recursive make\n invocation mark.\n\n - Clean Clippy warning due to missing indentation in docs.\n\n - Clean LLVM 19 build warning due to removed 3dnow feature upstream.\n\n* tag \u0027rust-fixes-6.11\u0027 of https://github.com/Rust-for-Linux/linux:\n rust: x86: remove `-3dnow{,a}` from target features\n kbuild: rust-analyzer: mark `rust_is_available.sh` invocation as recursive\n rust: add intrinsics to fix `-Os` builds\n kbuild: rust: skip -fmin-function-alignment in bindgen flags\n rust: Support latest version of `rust-analyzer`\n rust: macros: indent list item in `module!`\u0027s docs\n rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT\n rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT\n" }, { "commit": "5b179fe052334ea81c9f1841bf782bb0878b61d2", "tree": "177c83587548abb28285df77eb8acac25611b568", "parents": [ "4a621e291000c3756c353c5671ade4837ba68e3e", "32d5f7add080a936e28ab4142bfeea6b06999789" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 11:18:09 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 11:18:09 2024 -0700" }, "message": "Merge tag \u0027riscv-for-linus-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux\n\nPull RISC-V fixes from Palmer Dabbelt:\n\n - reintroduce the text patching global icache flush\n\n - fix syscall entry code to correctly initialize a0, which manifested\n as a strace bug\n\n - XIP kernels now map the entire kernel, which fixes boot under at\n least DEBUG_VIRTUAL\u003dy\n\n - initialize all nodes in the acpi_early_node_map initializer\n\n - fix OOB access in the Andes vendor extension probing code\n\n - A new key for scalar misaligned access performance in hwprobe, which\n correctly treat the values as an enum (as opposed to a bitmap)\n\n* tag \u0027riscv-for-linus-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux:\n riscv: Fix out-of-bounds when accessing Andes per hart vendor extension array\n RISC-V: hwprobe: Add SCALAR to misaligned perf defines\n RISC-V: hwprobe: Add MISALIGNED_PERF key\n RISC-V: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE\n riscv: change XIP\u0027s kernel_map.size to be size of the entire kernel\n riscv: entry: always initialize regs-\u003ea0 to -ENOSYS\n riscv: Re-introduce global icache flush in patch_text_XXX()\n" }, { "commit": "4a621e291000c3756c353c5671ade4837ba68e3e", "tree": "c72611f4d343ec3d6dd232097ea1d3ad9e6b713e", "parents": [ "1486141ad8e79956e393f9af0ce076a5942e8feb", "90574d2a675947858b47008df8d07f75ea50d0d0" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 11:12:29 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 11:12:29 2024 -0700" }, "message": "Merge tag \u0027trace-v6.11-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace\n\nPull tracing fixes from Steven Rostedt:\n \"A couple of fixes for tracing:\n\n - Prevent a NULL pointer dereference in the error path of RTLA tool\n\n - Fix an infinite loop bug when reading from the ring buffer when\n closed. If there\u0027s a thread trying to read the ring buffer and it\n gets closed by another thread, the one reading will go into an\n infinite loop when the buffer is empty instead of exiting back to\n user space\"\n\n* tag \u0027trace-v6.11-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace:\n rtla/osnoise: Prevent NULL dereference in error handling\n tracing: Return from tracing_buffers_read() if the file has been closed\n" }, { "commit": "1486141ad8e79956e393f9af0ce076a5942e8feb", "tree": "ae3937337465d1c24be88bef56e8481b12b579c7", "parents": [ "670c12ce09a8180ebe0c608d8a789a7e58fe7d8e", "0e28bf61a5f9ab30be3f3b4eafb8d097e39446bb" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 11:05:25 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 11:05:25 2024 -0700" }, "message": "Merge tag \u0027keys-trusted-next-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd\n\nPull key fixes from Jarkko Sakkinen:\n \"Two bug fixes for a memory corruption bug and a memory leak bug in the\n DCP trusted keys type.\n\n Just as a reminder DCP was a crypto coprocessor in i.MX SoCs\"\n\n* tag \u0027keys-trusted-next-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd:\n KEYS: trusted: dcp: fix leak of blob encryption key\n KEYS: trusted: fix DCP blob payload length assignment\n" }, { "commit": "99c87fe0f584f8d778a323141504d1ba5c89a4a5", "tree": "ad28ded5ffd492747b2ab86bd0d5c235708cb050", "parents": [ "9482f3b05332a624508a91c2ab2cf3527328a6a4" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Fri Aug 16 12:44:49 2024 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Fri Aug 16 12:46:40 2024 -0400" }, "message": "bcachefs: fix incorrect i_state usage\n\nReported-by: syzbot+95e40eae71609e40d851@syzkaller.appspotmail.com\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "9482f3b05332a624508a91c2ab2cf3527328a6a4", "tree": "dc068002690c4ee91ec1646a486d389e7760a566", "parents": [ "075cabf324c3fd790d6ba39ff9db33a30b954fe2" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Fri Aug 16 12:41:46 2024 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Fri Aug 16 12:46:40 2024 -0400" }, "message": "bcachefs: avoid overflowing LRU_TIME_BITS for cached data lru\n\nReported-by: syzbot+510b0b28f8e6de64d307@syzkaller.appspotmail.com\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "075cabf324c3fd790d6ba39ff9db33a30b954fe2", "tree": "c0a2f6d05291b12d4ba8e8392043fb98fcf43da6", "parents": [ "c2f6e16a6771eaefba6bb35f6803fe7217822d41" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Fri Aug 16 12:31:29 2024 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Fri Aug 16 12:46:40 2024 -0400" }, "message": "bcachefs: Fix forgetting to pass trans to fsck_err()\n\nReported-by: syzbot+e3938cd6d761b78750e6@syzkaller.appspotmail.com\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "c2f6e16a6771eaefba6bb35f6803fe7217822d41", "tree": "9297d2fd01df13846a07f053db2e713ae51dbf3e", "parents": [ "58474f76a770bcc79d4b2d7232e4d6650e732b50" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Thu Aug 15 13:02:55 2024 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Fri Aug 16 12:46:40 2024 -0400" }, "message": "bcachefs: Increase size of cuckoo hash table on too many rehashes\n\nAlso, improve the calculation of the new table size, so that it can\nshrink when needed.\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "670c12ce09a8180ebe0c608d8a789a7e58fe7d8e", "tree": "f848b4d76f7952a6e74f600f84d6ae7936a82407", "parents": [ "de53959e001b73ceeb631e04491b473157e1b1a2", "faada2174c08662ae98b439c69efe3e79382c538" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 09:07:34 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 09:07:34 2024 -0700" }, "message": "Merge tag \u0027for-6.11/dm-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm\n\nPull device mapper fixes from Mikulas Patocka:\n\n - fix misbehavior if suspend or resume is interrupted by a signal\n\n - fix wrong indentation in dm-crypt.rst\n\n - fix memory allocation failure in dm-persistent-data\n\n* tag \u0027for-6.11/dm-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm:\n dm persistent data: fix memory allocation failure\n Documentation: dm-crypt.rst warning + error fix\n dm resume: don\u0027t return EINVAL when signalled\n dm suspend: return -ERESTARTSYS instead of -EINTR\n" }, { "commit": "de53959e001b73ceeb631e04491b473157e1b1a2", "tree": "335dcee2e9ad12c94ac310b806da421959b34199", "parents": [ "9bd40f824a7fed9ffdd1660ea7567f4133f8b672", "92567a5f92bc947fb7aa4351979db1b7b71a554c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 08:56:45 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 08:56:45 2024 -0700" }, "message": "Merge tag \u0027iommu-fixes-v6.11-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/iommu/linux\n\nPull iommu fixes from Joerg Roedel:\n\n - Bring back a lost return statement in io-page-fault code\n\n - Remove an unused function declaration\n\n* tag \u0027iommu-fixes-v6.11-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/iommu/linux:\n iommu: Remove unused declaration iommu_sva_unbind_gpasid()\n iommu: Restore lost return in iommu_report_device_fault()\n" }, { "commit": "9bd40f824a7fed9ffdd1660ea7567f4133f8b672", "tree": "dcc1fbc3de6015f4d4c9f27d1637d1c8087ce06c", "parents": [ "d58c542a33e719029ae3fc1343b4cb09c125cb09", "aad41832326723627ad8ac9ee8a543b6dca4454d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 08:47:50 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 08:47:50 2024 -0700" }, "message": "Merge tag \u0027gpio-fixes-for-v6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux\n\nPull gpio fix from Bartosz Golaszewski:\n\n - add the shutdown() callback to gpio-mlxbf3 in order to disable\n interrupts during graceful reboot\n\n* tag \u0027gpio-fixes-for-v6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux:\n gpio: mlxbf3: Support shutdown() function\n" }, { "commit": "d58c542a33e719029ae3fc1343b4cb09c125cb09", "tree": "2bf6427456a20cc8e235422bfa4665b69f92f73f", "parents": [ "37b20e9a5810e132a21c54f858043b22671396dd", "829e2a23121fb36ee30ea5145c2a85199f68e2c8" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 08:39:41 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 08:39:41 2024 -0700" }, "message": "Merge tag \u0027sound-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound\n\nPull sound fixes from Takashi Iwai:\n \"All small fixes, mostly for usual suspects, HD-audio and USB-audio\n device-specific fixes / quirks. The Cirrus codec support took the\n update of SPI header as well. Other than that, there is a regression\n fix in the sanity check of ALSA timer code\"\n\n* tag \u0027sound-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound:\n ALSA: hda/tas2781: Use correct endian conversion\n ALSA: usb-audio: Support Yamaha P-125 quirk entry\n ALSA: hda: cs35l41: Remove redundant call to hda_cs_dsp_control_remove()\n ALSA: hda: cs35l56: Remove redundant call to hda_cs_dsp_control_remove()\n ALSA: hda/tas2781: fix wrong calibrated data order\n ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET\n ALSA: hda/realtek: Add support for new HP G12 laptops\n ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7\n ALSA: timer: Relax start tick time check for slave timer elements\n spi: Add empty versions of ACPI functions\n" }, { "commit": "37b20e9a5810e132a21c54f858043b22671396dd", "tree": "3f342e4d34684240787bd7ef35bc5d83fc46c04c", "parents": [ "d7a5aa4b3c007fae50405ca75c40258d90300e96", "fee9d135e2fd5963a7f466cd1ef2060731a1ab29" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 08:35:50 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 08:35:50 2024 -0700" }, "message": "Merge tag \u0027drm-fixes-2024-08-16\u0027 of https://gitlab.freedesktop.org/drm/kernel\n\nPull drm fixes from Dave Airlie:\n \"Weekly drm fixes, mostly amdgpu and xe. The larger amdgpu fix is for a\n new IP block introduced in rc1, so should be fine. The xe fixes\n contain some missed fixes from the end of the previous round along\n with some fixes which required precursor changes, but otherwise\n everything seems fine,\n\n mediatek:\n - fix cursor crash\n\n amdgpu:\n - Fix MES ring buffer overflow\n - DCN 3.5 fix\n - DCN 3.2.1 fix\n - DP MST fix\n - Cursor fixes\n - JPEG fixes\n - Context ops validation\n - MES 12 fixes\n - VCN 5.0 fix\n - HDP fix\n\n panel:\n - dt bindings style fix\n - orientation quirks\n\n rockchip:\n - inno-hdmi: fix infoframe upload\n\n v3d:\n - fix OOB access in v3d_csd_job_run()\n\n xe:\n - Validate user fence during creation\n - Fix use after free when client stats are captured\n - SRIOV fixes\n - Runtime PM fixes\"\n\n* tag \u0027drm-fixes-2024-08-16\u0027 of https://gitlab.freedesktop.org/drm/kernel: (37 commits)\n drm/xe: Hold a PM ref when GT TLB invalidations are inflight\n drm/xe: Drop xe_gt_tlb_invalidation_wait\n drm/xe: Add xe_gt_tlb_invalidation_fence_init helper\n drm/xe/pf: Fix VF config validation on multi-GT platforms\n drm/xe: Build PM into GuC CT layer\n drm/xe/vf: Fix register value lookup\n drm/xe: Fix use after free when client stats are captured\n drm/xe: Take a ref to xe file when user creates a VM\n drm/xe: Add ref counting for xe_file\n drm/xe: Move part of xe_file cleanup to a helper\n drm/xe: Validate user fence during creation\n drm/rockchip: inno-hdmi: Fix infoframe upload\n drm/amd/amdgpu: add HDP_SD support on gc 12.0.0/1\n drm/amdgpu: Update kmd_fw_shared for VCN5\n drm/amd/amdgpu: command submission parser for JPEG\n drm/amdgpu/mes12: fix suspend issue\n drm/amdgpu/mes12: sw/hw fini for unified mes\n drm/amdgpu/mes12: configure two pipes hardware resources\n drm/amdgpu/mes12: adjust mes12 sw/hw init for multiple pipes\n drm/amdgpu/mes12: add mes pipe switch support\n ...\n" }, { "commit": "87cea484951eba1d0342033241f80e49303d802c", "tree": "2027462a5e9492efba33745067122846c9fcafca", "parents": [ "71833e79a42178d8a50b5081c98c78ace9325628", "14d069d92951a3e150c0a81f2ca3b93e54da913b" ], "author": { "name": "Wolfram Sang", "email": "wsa+renesas@sang-engineering.com", "time": "Fri Aug 16 16:23:51 2024 +0200" }, "committer": { "name": "Wolfram Sang", "email": "wsa+renesas@sang-engineering.com", "time": "Fri Aug 16 16:23:51 2024 +0200" }, "message": "Merge tag \u0027i2c-host-fixes-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/andi.shyti/linux into i2c/for-current\n\nTwo fixes in this update:\n\nTegra I2C Controller: Addresses a potential double-locking issue\nduring probe. ACPI devices are not IRQ-safe when invoking runtime\nsuspend and resume functions, so the irq_safe flag should not be\nset.\n\nQualcomm GENI I2C Controller: Fixes an oversight in the exit path\nof the runtime_resume() function, which was missed in the\nprevious release.\n" }, { "commit": "6e6f58a170ea98e44075b761f2da42a5aec47dfb", "tree": "9737c20afa4430d792cd6028d15f8ed2a4e37b28", "parents": [ "5f64b4a1ab1b0412446d42e1fc2964c2cdb60b27" ], "author": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Tue Aug 13 16:29:11 2024 +0200" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Fri Aug 16 13:13:59 2024 +0200" }, "message": "thermal: gov_bang_bang: Use governor_data to reduce overhead\n\nAfter running once, the for_each_trip_desc() loop in\nbang_bang_manage() is pure needless overhead because it is not going to\nmake any changes unless a new cooling device has been bound to one of\nthe trips in the thermal zone or the system is resuming from sleep.\n\nFor this reason, make bang_bang_manage() set governor_data for the\nthermal zone and check it upfront to decide whether or not it needs to\ndo anything.\n\nHowever, governor_data needs to be reset in some cases to let\nbang_bang_manage() know that it should walk the trips again, so add an\n.update_tz() callback to the governor and make the core additionally\ninvoke it during system resume.\n\nTo avoid affecting the other users of that callback unnecessarily, add\na special notification reason for system resume, THERMAL_TZ_RESUME, and\nalso pass it to __thermal_zone_device_update() called during system\nresume for consistency.\n\nSigned-off-by: Rafael J. Wysocki \u003crafael.j.wysocki@intel.com\u003e\nAcked-by: Peter Kästle \u003cpeter@piie.net\u003e\nReviewed-by: Zhang Rui \u003crui.zhang@intel.com\u003e\nCc: 6.10+ \u003cstable@vger.kernel.org\u003e # 6.10+\nLink: https://patch.msgid.link/2285575.iZASKD2KPV@rjwysocki.net\n" }, { "commit": "5f64b4a1ab1b0412446d42e1fc2964c2cdb60b27", "tree": "677442c80e1eb9594b1c63063aff407d048e2d69", "parents": [ "84248e35d9b60e03df7276627e4e91fbaf80f73d" ], "author": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Tue Aug 13 16:27:33 2024 +0200" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Fri Aug 16 13:13:49 2024 +0200" }, "message": "thermal: gov_bang_bang: Add .manage() callback\n\nAfter recent changes, the Bang-bang governor may not adjust the\ninitial configuration of cooling devices to the actual situation.\n\nNamely, if a cooling device bound to a certain trip point starts in\nthe \"on\" state and the thermal zone temperature is below the threshold\nof that trip point, the trip point may never be crossed on the way up\nin which case the state of the cooling device will never be adjusted\nbecause the thermal core will never invoke the governor\u0027s\n.trip_crossed() callback. [Note that there is no issue if the zone\ntemperature is at the trip threshold or above it to start with because\n.trip_crossed() will be invoked then to indicate the start of thermal\nmitigation for the given trip.]\n\nTo address this, add a .manage() callback to the Bang-bang governor\nand use it to ensure that all of the thermal instances managed by the\ngovernor have been initialized properly and the states of all of the\ncooling devices involved have been adjusted to the current zone\ntemperature as appropriate.\n\nFixes: 530c932bdf75 (\"thermal: gov_bang_bang: Use .trip_crossed() instead of .throttle()\")\nLink: https://lore.kernel.org/linux-pm/1bfbbae5-42b0-4c7d-9544-e98855715294@piie.net/\nCc: 6.10+ \u003cstable@vger.kernel.org\u003e # 6.10+\nSigned-off-by: Rafael J. Wysocki \u003crafael.j.wysocki@intel.com\u003e\nAcked-by: Peter Kästle \u003cpeter@piie.net\u003e\nReviewed-by: Zhang Rui \u003crui.zhang@intel.com\u003e\nLink: https://patch.msgid.link/8419356.T7Z3S40VBb@rjwysocki.net\n" }, { "commit": "84248e35d9b60e03df7276627e4e91fbaf80f73d", "tree": "829f014836ea99492816ebbe7c228bc180e7da06", "parents": [ "b9b6ee6fe258ce4d89592593efcd3d798c418859" ], "author": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Tue Aug 13 16:26:42 2024 +0200" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Fri Aug 16 13:13:42 2024 +0200" }, "message": "thermal: gov_bang_bang: Split bang_bang_control()\n\nMove the setting of the thermal instance target state from\nbang_bang_control() into a separate function that will be also called\nin a different place going forward.\n\nNo intentional functional impact.\n\nSigned-off-by: Rafael J. Wysocki \u003crafael.j.wysocki@intel.com\u003e\nAcked-by: Peter Kästle \u003cpeter@piie.net\u003e\nReviewed-by: Zhang Rui \u003crui.zhang@intel.com\u003e\nCc: 6.10+ \u003cstable@vger.kernel.org\u003e # 6.10+\nLink: https://patch.msgid.link/3313587.aeNJFYEL58@rjwysocki.net\n" }, { "commit": "b9b6ee6fe258ce4d89592593efcd3d798c418859", "tree": "02e98c0f8f546a67459ae01497dbf5d588f3eab6", "parents": [ "7c626ce4bae1ac14f60076d00eafe71af30450ba" ], "author": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Tue Aug 13 16:25:19 2024 +0200" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Fri Aug 16 13:13:33 2024 +0200" }, "message": "thermal: gov_bang_bang: Call __thermal_cdev_update() directly\n\nInstead of clearing the \"updated\" flag for each cooling device\naffected by the trip point crossing in bang_bang_control() and\nwalking all thermal instances to run thermal_cdev_update() for all\nof the affected cooling devices, call __thermal_cdev_update()\ndirectly for each of them.\n\nNo intentional functional impact.\n\nSigned-off-by: Rafael J. Wysocki \u003crafael.j.wysocki@intel.com\u003e\nAcked-by: Peter Kästle \u003cpeter@piie.net\u003e\nReviewed-by: Zhang Rui \u003crui.zhang@intel.com\u003e\nCc: 6.10+ \u003cstable@vger.kernel.org\u003e # 6.10+\nLink: https://patch.msgid.link/13583081.uLZWGnKmhe@rjwysocki.net\n" }, { "commit": "2374bf7558de915edc6ec8cb10ec3291dfab9594", "tree": "802b3dbad8336e3889c5be84592bf88c57538d7f", "parents": [ "ad899c301c880766cc709aad277991b3ab671b66" ], "author": { "name": "Eli Billauer", "email": "eli.billauer@gmail.com", "time": "Fri Aug 16 10:02:00 2024 +0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Aug 16 09:57:56 2024 +0200" }, "message": "char: xillybus: Check USB endpoints when probing device\n\nEnsure, as the driver probes the device, that all endpoints that the\ndriver may attempt to access exist and are of the correct type.\n\nAll XillyUSB devices must have a Bulk IN and Bulk OUT endpoint at\naddress 1. This is verified in xillyusb_setup_base_eps().\n\nOn top of that, a XillyUSB device may have additional Bulk OUT\nendpoints. The information about these endpoints\u0027 addresses is deduced\nfrom a data structure (the IDT) that the driver fetches from the device\nwhile probing it. These endpoints are checked in setup_channels().\n\nA XillyUSB device never has more than one IN endpoint, as all data\ntowards the host is multiplexed in this single Bulk IN endpoint. This is\nwhy setup_channels() only checks OUT endpoints.\n\nReported-by: syzbot+eac39cba052f2e750dbe@syzkaller.appspotmail.com\nCc: stable \u003cstable@kernel.org\u003e\nCloses: https://lore.kernel.org/all/0000000000001d44a6061f7a54ee@google.com/T/\nFixes: a53d1202aef1 (\"char: xillybus: Add driver for XillyUSB (Xillybus variant for USB)\").\nSigned-off-by: Eli Billauer \u003celi.billauer@gmail.com\u003e\nLink: https://lore.kernel.org/r/20240816070200.50695-2-eli.billauer@gmail.com\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "ad899c301c880766cc709aad277991b3ab671b66", "tree": "fd8cd7fb48657ce3d521f76c17b7edb4044530fb", "parents": [ "9bb5e74b2bf88fbb024bb15ded3b011e02c673be" ], "author": { "name": "Eli Billauer", "email": "eli.billauer@gmail.com", "time": "Fri Aug 16 10:01:59 2024 +0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Aug 16 09:57:50 2024 +0200" }, "message": "char: xillybus: Refine workqueue handling\n\nAs the wakeup work item now runs on a separate workqueue, it needs to be\nflushed separately along with flushing the device\u0027s workqueue.\n\nAlso, move the destroy_workqueue() call to the end of the exit method,\nso that deinitialization is done in the opposite order of\ninitialization.\n\nFixes: ccbde4b128ef (\"char: xillybus: Don\u0027t destroy workqueue from work item running on it\")\nCc: stable \u003cstable@kernel.org\u003e\nSigned-off-by: Eli Billauer \u003celi.billauer@gmail.com\u003e\nLink: https://lore.kernel.org/r/20240816070200.50695-1-eli.billauer@gmail.com\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "2e6506e1c4eed2676a8412231046f31e10e240da", "tree": "d36bd676573f913ec02fa4a9accb8782c1c4930c", "parents": [ "766c163c2068b45330664fb67df67268e588a22d" ], "author": { "name": "Gao Xiang", "email": "hsiangkao@linux.alibaba.com", "time": "Mon Jul 29 10:13:06 2024 +0800" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Aug 15 22:26:02 2024 -0700" }, "message": "mm/migrate: fix deadlock in migrate_pages_batch() on large folios\n\nCurrently, migrate_pages_batch() can lock multiple locked folios with an\narbitrary order. Although folio_trylock() is used to avoid deadlock as\ncommit 2ef7dbb26990 (\"migrate_pages: try migrate in batch asynchronously\nfirstly\") mentioned, it seems try_split_folio() is still missing.\n\nIt was found by compaction stress test when I explicitly enable EROFS\ncompressed files to use large folios, which case I cannot reproduce with\nthe same workload if large folio support is off (current mainline). \nTypically, filesystem reads (with locked file-backed folios) could use\nanother bdev/meta inode to load some other I/Os (e.g. inode extent\nmetadata or caching compressed data), so the locking order will be:\n\n file-backed folios (A)\n bdev/meta folios (B)\n\nThe following calltrace shows the deadlock:\n Thread 1 takes (B) lock and tries to take folio (A) lock\n Thread 2 takes (A) lock and tries to take folio (B) lock\n\n[Thread 1]\nINFO: task stress:1824 blocked for more than 30 seconds.\n Tainted: G OE 6.10.0-rc7+ #6\n\"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\ntask:stress state:D stack:0 pid:1824 tgid:1824 ppid:1822 flags:0x0000000c\nCall trace:\n __switch_to+0xec/0x138\n __schedule+0x43c/0xcb0\n schedule+0x54/0x198\n io_schedule+0x44/0x70\n folio_wait_bit_common+0x184/0x3f8\n\t\t\t\u003c-- folio mapping ffff00036d69cb18 index 996 (**)\n __folio_lock+0x24/0x38\n migrate_pages_batch+0x77c/0xea0\t// try_split_folio (mm/migrate.c:1486:2)\n\t\t\t\t\t// migrate_pages_batch (mm/migrate.c:1734:16)\n\t\t\u003c--- LIST_HEAD(unmap_folios) has\n\t\t\t..\n\t\t\tfolio mapping 0xffff0000d184f1d8 index 1711; (*)\n\t\t\tfolio mapping 0xffff0000d184f1d8 index 1712;\n\t\t\t..\n migrate_pages+0xb28/0xe90\n compact_zone+0xa08/0x10f0\n compact_node+0x9c/0x180\n sysctl_compaction_handler+0x8c/0x118\n proc_sys_call_handler+0x1a8/0x280\n proc_sys_write+0x1c/0x30\n vfs_write+0x240/0x380\n ksys_write+0x78/0x118\n __arm64_sys_write+0x24/0x38\n invoke_syscall+0x78/0x108\n el0_svc_common.constprop.0+0x48/0xf0\n do_el0_svc+0x24/0x38\n el0_svc+0x3c/0x148\n el0t_64_sync_handler+0x100/0x130\n el0t_64_sync+0x190/0x198\n\n[Thread 2]\nINFO: task stress:1825 blocked for more than 30 seconds.\n Tainted: G OE 6.10.0-rc7+ #6\n\"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\ntask:stress state:D stack:0 pid:1825 tgid:1825 ppid:1822 flags:0x0000000c\nCall trace:\n __switch_to+0xec/0x138\n __schedule+0x43c/0xcb0\n schedule+0x54/0x198\n io_schedule+0x44/0x70\n folio_wait_bit_common+0x184/0x3f8\n\t\t\t\u003c-- folio \u003d 0xfffffdffc6b503c0 (mapping \u003d\u003d 0xffff0000d184f1d8 index \u003d\u003d 1711) (*)\n __folio_lock+0x24/0x38\n z_erofs_runqueue+0x384/0x9c0 [erofs]\n z_erofs_readahead+0x21c/0x350 [erofs] \u003c-- folio mapping 0xffff00036d69cb18 range from [992, 1024] (**)\n read_pages+0x74/0x328\n page_cache_ra_order+0x26c/0x348\n ondemand_readahead+0x1c0/0x3a0\n page_cache_sync_ra+0x9c/0xc0\n filemap_get_pages+0xc4/0x708\n filemap_read+0x104/0x3a8\n generic_file_read_iter+0x4c/0x150\n vfs_read+0x27c/0x330\n ksys_pread64+0x84/0xd0\n __arm64_sys_pread64+0x28/0x40\n invoke_syscall+0x78/0x108\n el0_svc_common.constprop.0+0x48/0xf0\n do_el0_svc+0x24/0x38\n el0_svc+0x3c/0x148\n el0t_64_sync_handler+0x100/0x130\n el0t_64_sync+0x190/0x198\n\nLink: https://lkml.kernel.org/r/20240729021306.398286-1-hsiangkao@linux.alibaba.com\nFixes: 5dfab109d519 (\"migrate_pages: batch _unmap and _move\")\nSigned-off-by: Gao Xiang \u003chsiangkao@linux.alibaba.com\u003e\nReviewed-by: \"Huang, Ying\" \u003cying.huang@intel.com\u003e\nAcked-by: David Hildenbrand \u003cdavid@redhat.com\u003e\nCc: Matthew Wilcox \u003cwilly@infradead.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "766c163c2068b45330664fb67df67268e588a22d", "tree": "dd06c2f510f7ddade3a7e4a6956df47c24fe37f1", "parents": [ "a8fc28dad6d574582cdf2f7e78c73c59c623df30" ], "author": { "name": "Suren Baghdasaryan", "email": "surenb@google.com", "time": "Tue Aug 13 08:07:57 2024 -0700" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Aug 15 22:16:16 2024 -0700" }, "message": "alloc_tag: mark pages reserved during CMA activation as not tagged\n\nDuring CMA activation, pages in CMA area are prepared and then freed\nwithout being allocated. This triggers warnings when memory allocation\ndebug config (CONFIG_MEM_ALLOC_PROFILING_DEBUG) is enabled. Fix this by\nmarking these pages not tagged before freeing them.\n\nLink: https://lkml.kernel.org/r/20240813150758.855881-2-surenb@google.com\nFixes: d224eb0287fb (\"codetag: debug: mark codetags for reserved pages as empty\")\nSigned-off-by: Suren Baghdasaryan \u003csurenb@google.com\u003e\nAcked-by: David Hildenbrand \u003cdavid@redhat.com\u003e\nCc: Kees Cook \u003ckeescook@chromium.org\u003e\nCc: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\nCc: Pasha Tatashin \u003cpasha.tatashin@soleen.com\u003e\nCc: Sourav Panda \u003csouravpanda@google.com\u003e\nCc: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: \u003cstable@vger.kernel.org\u003e\t[6.10]\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "a8fc28dad6d574582cdf2f7e78c73c59c623df30", "tree": "ce85507c0014d9eec05a149b689312fad719bcea", "parents": [ "edb907a6133323e19311901a39dee68b1c6a2ef8" ], "author": { "name": "Suren Baghdasaryan", "email": "surenb@google.com", "time": "Tue Aug 13 08:07:56 2024 -0700" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Aug 15 22:16:16 2024 -0700" }, "message": "alloc_tag: introduce clear_page_tag_ref() helper function\n\nIn several cases we are freeing pages which were not allocated using\ncommon page allocators. For such cases, in order to keep allocation\naccounting correct, we should clear the page tag to indicate that the page\nbeing freed is expected to not have a valid allocation tag. Introduce\nclear_page_tag_ref() helper function to be used for this.\n\nLink: https://lkml.kernel.org/r/20240813150758.855881-1-surenb@google.com\nFixes: d224eb0287fb (\"codetag: debug: mark codetags for reserved pages as empty\")\nSigned-off-by: Suren Baghdasaryan \u003csurenb@google.com\u003e\nSuggested-by: David Hildenbrand \u003cdavid@redhat.com\u003e\nAcked-by: David Hildenbrand \u003cdavid@redhat.com\u003e\nReviewed-by: Pasha Tatashin \u003cpasha.tatashin@soleen.com\u003e\nCc: Kees Cook \u003ckeescook@chromium.org\u003e\nCc: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\nCc: Sourav Panda \u003csouravpanda@google.com\u003e\nCc: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: \u003cstable@vger.kernel.org\u003e\t[6.10]\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "edb907a6133323e19311901a39dee68b1c6a2ef8", "tree": "5374fefb370825d804f2b4a7b2391404fa7a2b9d", "parents": [ "7c5e8d212d7d81991a580e7de3904ea213d9a852" ], "author": { "name": "Jinjie Ruan", "email": "ruanjinjie@huawei.com", "time": "Mon Aug 12 14:20:17 2024 +0800" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Aug 15 22:16:16 2024 -0700" }, "message": "crash: fix riscv64 crash memory reserve dead loop\n\nOn RISCV64 Qemu machine with 512MB memory, cmdline \"crashkernel\u003d500M,high\"\nwill cause system stall as below:\n\n\t Zone ranges:\n\t DMA32 [mem 0x0000000080000000-0x000000009fffffff]\n\t Normal empty\n\t Movable zone start for each node\n\t Early memory node ranges\n\t node 0: [mem 0x0000000080000000-0x000000008005ffff]\n\t node 0: [mem 0x0000000080060000-0x000000009fffffff]\n\t Initmem setup node 0 [mem 0x0000000080000000-0x000000009fffffff]\n\t(stall here)\n\ncommit 5d99cadf1568 (\"crash: fix x86_32 crash memory reserve dead loop\nbug\") fix this on 32-bit architecture. However, the problem is not\ncompletely solved. If `CRASH_ADDR_LOW_MAX \u003d CRASH_ADDR_HIGH_MAX` on\n64-bit architecture, for example, when system memory is equal to\nCRASH_ADDR_LOW_MAX on RISCV64, the following infinite loop will also\noccur:\n\n\t-\u003e reserve_crashkernel_generic() and high is true\n\t -\u003e alloc at [CRASH_ADDR_LOW_MAX, CRASH_ADDR_HIGH_MAX] fail\n\t -\u003e alloc at [0, CRASH_ADDR_LOW_MAX] fail and repeatedly\n\t (because CRASH_ADDR_LOW_MAX \u003d CRASH_ADDR_HIGH_MAX).\n\nAs Catalin suggested, do not remove the \",high\" reservation fallback to\n\",low\" logic which will change arm64\u0027s kdump behavior, but fix it by\nskipping the above situation similar to commit d2f32f23190b (\"crash: fix\nx86_32 crash memory reserve dead loop\").\n\nAfter this patch, it print:\n\tcannot allocate crashkernel (size:0x1f400000)\n\nLink: https://lkml.kernel.org/r/20240812062017.2674441-1-ruanjinjie@huawei.com\nSigned-off-by: Jinjie Ruan \u003cruanjinjie@huawei.com\u003e\nSuggested-by: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nReviewed-by: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nAcked-by: Baoquan He \u003cbhe@redhat.com\u003e\nCc: Albert Ou \u003caou@eecs.berkeley.edu\u003e\nCc: Dave Young \u003cdyoung@redhat.com\u003e\nCc: Palmer Dabbelt \u003cpalmer@dabbelt.com\u003e\nCc: Paul Walmsley \u003cpaul.walmsley@sifive.com\u003e\nCc: Vivek Goyal \u003cvgoyal@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "7c5e8d212d7d81991a580e7de3904ea213d9a852", "tree": "5d9143de0af51e314919973fc270efd330a51275", "parents": [ "807174a93d24c456503692dc3f5af322ee0b640a" ], "author": { "name": "Muhammad Usama Anjum", "email": "usama.anjum@collabora.com", "time": "Fri Aug 09 12:56:42 2024 +0500" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Aug 15 22:16:15 2024 -0700" }, "message": "selftests: memfd_secret: don\u0027t build memfd_secret test on unsupported arches\n\n[1] mentions that memfd_secret is only supported on arm64, riscv, x86 and\nx86_64 for now. It doesn\u0027t support other architectures. I found the\nbuild error on arm and decided to send the fix as it was creating noise on\nKernelCI:\n\nmemfd_secret.c: In function \u0027memfd_secret\u0027:\nmemfd_secret.c:42:24: error: \u0027__NR_memfd_secret\u0027 undeclared (first use in this function);\ndid you mean \u0027memfd_secret\u0027?\n 42 | return syscall(__NR_memfd_secret, flags);\n | ^~~~~~~~~~~~~~~~~\n | memfd_secret\n\nHence I\u0027m adding condition that memfd_secret should only be compiled on\nsupported architectures.\n\nAlso check in run_vmtests script if memfd_secret binary is present before\nexecuting it.\n\nLink: https://lkml.kernel.org/r/20240812061522.1933054-1-usama.anjum@collabora.com\nLink: https://lore.kernel.org/all/20210518072034.31572-7-rppt@kernel.org/ [1]\nLink: https://lkml.kernel.org/r/20240809075642.403247-1-usama.anjum@collabora.com\nFixes: 76fe17ef588a (\"secretmem: test: add basic selftest for memfd_secret(2)\")\nSigned-off-by: Muhammad Usama Anjum \u003cusama.anjum@collabora.com\u003e\nReviewed-by: Shuah Khan \u003cskhan@linuxfoundation.org\u003e\nAcked-by: Mike Rapoport (Microsoft) \u003crppt@kernel.org\u003e\nCc: Albert Ou \u003caou@eecs.berkeley.edu\u003e\nCc: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\nCc: Mike Rapoport (Microsoft) \u003crppt@kernel.org\u003e\nCc: Palmer Dabbelt \u003cpalmer@dabbelt.com\u003e\nCc: Paul Walmsley \u003cpaul.walmsley@sifive.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "807174a93d24c456503692dc3f5af322ee0b640a", "tree": "1779e21bfb5546dcdec0b1ac389084e1004afe92", "parents": [ "af3b7d09a9934220a8136065a0e6985fe0b67a1b" ], "author": { "name": "Kirill A. Shutemov", "email": "kirill.shutemov@linux.intel.com", "time": "Fri Aug 09 14:48:47 2024 +0300" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Aug 15 22:16:15 2024 -0700" }, "message": "mm: fix endless reclaim on machines with unaccepted memory\n\nUnaccepted memory is considered unusable free memory, which is not counted\nas free on the zone watermark check. This causes get_page_from_freelist()\nto accept more memory to hit the high watermark, but it creates problems\nin the reclaim path.\n\nThe reclaim path encounters a failed zone watermark check and attempts to\nreclaim memory. This is usually successful, but if there is little or no\nreclaimable memory, it can result in endless reclaim with little to no\nprogress. This can occur early in the boot process, just after start of\nthe init process when the only reclaimable memory is the page cache of the\ninit executable and its libraries.\n\nMake unaccepted memory free from watermark check point of view. This way\nunaccepted memory will never be the trigger of memory reclaim. Accept\nmore memory in the get_page_from_freelist() if needed.\n\nLink: https://lkml.kernel.org/r/20240809114854.3745464-2-kirill.shutemov@linux.intel.com\nFixes: dcdfdd40fa82 (\"mm: Add support for unaccepted memory\")\nSigned-off-by: Kirill A. Shutemov \u003ckirill.shutemov@linux.intel.com\u003e\nReported-by: Jianxiong Gao \u003cjxgao@google.com\u003e\nAcked-by: David Hildenbrand \u003cdavid@redhat.com\u003e\nTested-by: Jianxiong Gao \u003cjxgao@google.com\u003e\nCc: Borislav Petkov \u003cbp@alien8.de\u003e\nCc: Johannes Weiner \u003channes@cmpxchg.org\u003e\nCc: Kirill A. Shutemov \u003ckirill.shutemov@linux.intel.com\u003e\nCc: Matthew Wilcox \u003cwilly@infradead.org\u003e\nCc: Mel Gorman \u003cmgorman@suse.de\u003e\nCc: Mike Rapoport (Microsoft) \u003crppt@kernel.org\u003e\nCc: Tom Lendacky \u003cthomas.lendacky@amd.com\u003e\nCc: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: \u003cstable@vger.kernel.org\u003e\t[6.5+]\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "af3b7d09a9934220a8136065a0e6985fe0b67a1b", "tree": "a94088eb6c3bd235e633cc90c5f0e404b7b77c34", "parents": [ "fd8c35a92910f4829b7c99841f39b1b952c259d5" ], "author": { "name": "Dan Carpenter", "email": "dan.carpenter@linaro.org", "time": "Fri Aug 09 15:32:30 2024 +0300" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Aug 15 22:16:15 2024 -0700" }, "message": "selftests/mm: compaction_test: fix off by one in check_compaction()\n\nThe \"initial_nr_hugepages\" variable is unsigned long so it takes up to 20\ncharacters to print, plus 1 more character for the NUL terminator. \nUnfortunately, this buffer is not quite large enough for the terminator to\nfit. Also use snprintf() for a belt and suspenders approach.\n\nLink: https://lkml.kernel.org/r/87470c06-b45a-4e83-92ff-aac2e7b9c6ba@stanley.mountain\nFixes: fb9293b6b015 (\"selftests/mm: compaction_test: fix bogus test success and reduce probability of OOM-killer invocation\")\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@linaro.org\u003e\nCc: Shuah Khan \u003cshuah@kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "fd8c35a92910f4829b7c99841f39b1b952c259d5", "tree": "8926d5d7b1d97371674130cf28470e91f20b1ae0", "parents": [ "40b760cfd44566bca791c80e0720d70d75382b84" ], "author": { "name": "Zi Yan", "email": "ziy@nvidia.com", "time": "Fri Aug 09 10:59:05 2024 -0400" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Aug 15 22:16:15 2024 -0700" }, "message": "mm/numa: no task_numa_fault() call if PMD is changed\n\nWhen handling a numa page fault, task_numa_fault() should be called by a\nprocess that restores the page table of the faulted folio to avoid\nduplicated stats counting. Commit c5b5a3dd2c1f (\"mm: thp: refactor NUMA\nfault handling\") restructured do_huge_pmd_numa_page() and did not avoid\ntask_numa_fault() call in the second page table check after a numa\nmigration failure. Fix it by making all !pmd_same() return immediately.\n\nThis issue can cause task_numa_fault() being called more than necessary\nand lead to unexpected numa balancing results (It is hard to tell whether\nthe issue will cause positive or negative performance impact due to\nduplicated numa fault counting).\n\nLink: https://lkml.kernel.org/r/20240809145906.1513458-3-ziy@nvidia.com\nFixes: c5b5a3dd2c1f (\"mm: thp: refactor NUMA fault handling\")\nReported-by: \"Huang, Ying\" \u003cying.huang@intel.com\u003e\nCloses: https://lore.kernel.org/linux-mm/87zfqfw0yw.fsf@yhuang6-desk2.ccr.corp.intel.com/\nSigned-off-by: Zi Yan \u003cziy@nvidia.com\u003e\nAcked-by: David Hildenbrand \u003cdavid@redhat.com\u003e\nCc: Baolin Wang \u003cbaolin.wang@linux.alibaba.com\u003e\nCc: \"Huang, Ying\" \u003cying.huang@intel.com\u003e\nCc: Kefeng Wang \u003cwangkefeng.wang@huawei.com\u003e\nCc: Mel Gorman \u003cmgorman@suse.de\u003e\nCc: Yang Shi \u003cshy828301@gmail.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "40b760cfd44566bca791c80e0720d70d75382b84", "tree": "045c9eee503dd7264cc0ebf78862f7171281e70e", "parents": [ "61ebe5a747da649057c37be1c37eb934b4af79ca" ], "author": { "name": "Zi Yan", "email": "ziy@nvidia.com", "time": "Fri Aug 09 10:59:04 2024 -0400" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Aug 15 22:16:15 2024 -0700" }, "message": "mm/numa: no task_numa_fault() call if PTE is changed\n\nWhen handling a numa page fault, task_numa_fault() should be called by a\nprocess that restores the page table of the faulted folio to avoid\nduplicated stats counting. Commit b99a342d4f11 (\"NUMA balancing: reduce\nTLB flush via delaying mapping on hint page fault\") restructured\ndo_numa_page() and did not avoid task_numa_fault() call in the second page\ntable check after a numa migration failure. Fix it by making all\n!pte_same() return immediately.\n\nThis issue can cause task_numa_fault() being called more than necessary\nand lead to unexpected numa balancing results (It is hard to tell whether\nthe issue will cause positive or negative performance impact due to\nduplicated numa fault counting).\n\nLink: https://lkml.kernel.org/r/20240809145906.1513458-2-ziy@nvidia.com\nFixes: b99a342d4f11 (\"NUMA balancing: reduce TLB flush via delaying mapping on hint page fault\")\nSigned-off-by: Zi Yan \u003cziy@nvidia.com\u003e\nReported-by: \"Huang, Ying\" \u003cying.huang@intel.com\u003e\nCloses: https://lore.kernel.org/linux-mm/87zfqfw0yw.fsf@yhuang6-desk2.ccr.corp.intel.com/\nAcked-by: David Hildenbrand \u003cdavid@redhat.com\u003e\nCc: Baolin Wang \u003cbaolin.wang@linux.alibaba.com\u003e\nCc: Kefeng Wang \u003cwangkefeng.wang@huawei.com\u003e\nCc: Mel Gorman \u003cmgorman@suse.de\u003e\nCc: Yang Shi \u003cshy828301@gmail.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "61ebe5a747da649057c37be1c37eb934b4af79ca", "tree": "79d13f730c6785afc8d23a803eacf8427c093b09", "parents": [ "d75abd0d0bc29e6ebfebbf76d11b4067b35844af" ], "author": { "name": "Hailong Liu", "email": "hailong.liu@oppo.com", "time": "Thu Aug 08 20:19:56 2024 +0800" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Aug 15 22:16:14 2024 -0700" }, "message": "mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0\n\nThe __vmap_pages_range_noflush() assumes its argument pages** contains\npages with the same page shift. However, since commit e9c3cda4d86e (\"mm,\nvmalloc: fix high order __GFP_NOFAIL allocations\"), if gfp_flags includes\n__GFP_NOFAIL with high order in vm_area_alloc_pages() and page allocation\nfailed for high order, the pages** may contain two different page shifts\n(high order and order-0). This could lead __vmap_pages_range_noflush() to\nperform incorrect mappings, potentially resulting in memory corruption.\n\nUsers might encounter this as follows (vmap_allow_huge \u003d true, 2M is for\nPMD_SIZE):\n\nkvmalloc(2M, __GFP_NOFAIL|GFP_X)\n __vmalloc_node_range_noprof(vm_flags\u003dVM_ALLOW_HUGE_VMAP)\n vm_area_alloc_pages(order\u003d9) ---\u003e order-9 allocation failed and fallback to order-0\n vmap_pages_range()\n vmap_pages_range_noflush()\n __vmap_pages_range_noflush(page_shift \u003d 21) ----\u003e wrong mapping happens\n\nWe can remove the fallback code because if a high-order allocation fails,\n__vmalloc_node_range_noprof() will retry with order-0. Therefore, it is\nunnecessary to fallback to order-0 here. Therefore, fix this by removing\nthe fallback code.\n\nLink: https://lkml.kernel.org/r/20240808122019.3361-1-hailong.liu@oppo.com\nFixes: e9c3cda4d86e (\"mm, vmalloc: fix high order __GFP_NOFAIL allocations\")\nSigned-off-by: Hailong Liu \u003chailong.liu@oppo.com\u003e\nReported-by: Tangquan Zheng \u003czhengtangquan@oppo.com\u003e\nReviewed-by: Baoquan He \u003cbhe@redhat.com\u003e\nReviewed-by: Uladzislau Rezki (Sony) \u003curezki@gmail.com\u003e\nAcked-by: Barry Song \u003cbaohua@kernel.org\u003e\nAcked-by: Michal Hocko \u003cmhocko@suse.com\u003e\nCc: Matthew Wilcox \u003cwilly@infradead.org\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "d75abd0d0bc29e6ebfebbf76d11b4067b35844af", "tree": "1e6d3c8e9840d77276cca30856dc49bb012c57b8", "parents": [ "9d85731110241fb8ca9445ea4177d816041a8825" ], "author": { "name": "Waiman Long", "email": "longman@redhat.com", "time": "Tue Aug 06 12:41:07 2024 -0400" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Aug 15 22:16:14 2024 -0700" }, "message": "mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu\n\nThe memory_failure_cpu structure is a per-cpu structure. Access to its\ncontent requires the use of get_cpu_var() to lock in the current CPU and\ndisable preemption. The use of a regular spinlock_t for locking purpose\nis fine for a non-RT kernel.\n\nSince the integration of RT spinlock support into the v5.15 kernel, a\nspinlock_t in a RT kernel becomes a sleeping lock and taking a sleeping\nlock in a preemption disabled context is illegal resulting in the\nfollowing kind of warning.\n\n [12135.732244] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48\n [12135.732248] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 270076, name: kworker/0:0\n [12135.732252] preempt_count: 1, expected: 0\n [12135.732255] RCU nest depth: 2, expected: 2\n :\n [12135.732420] Hardware name: Dell Inc. PowerEdge R640/0HG0J8, BIOS 2.10.2 02/24/2021\n [12135.732423] Workqueue: kacpi_notify acpi_os_execute_deferred\n [12135.732433] Call Trace:\n [12135.732436] \u003cTASK\u003e\n [12135.732450] dump_stack_lvl+0x57/0x81\n [12135.732461] __might_resched.cold+0xf4/0x12f\n [12135.732479] rt_spin_lock+0x4c/0x100\n [12135.732491] memory_failure_queue+0x40/0xe0\n [12135.732503] ghes_do_memory_failure+0x53/0x390\n [12135.732516] ghes_do_proc.constprop.0+0x229/0x3e0\n [12135.732575] ghes_proc+0xf9/0x1a0\n [12135.732591] ghes_notify_hed+0x6a/0x150\n [12135.732602] notifier_call_chain+0x43/0xb0\n [12135.732626] blocking_notifier_call_chain+0x43/0x60\n [12135.732637] acpi_ev_notify_dispatch+0x47/0x70\n [12135.732648] acpi_os_execute_deferred+0x13/0x20\n [12135.732654] process_one_work+0x41f/0x500\n [12135.732695] worker_thread+0x192/0x360\n [12135.732715] kthread+0x111/0x140\n [12135.732733] ret_from_fork+0x29/0x50\n [12135.732779] \u003c/TASK\u003e\n\nFix it by using a raw_spinlock_t for locking instead.\n\nAlso move the pr_err() out of the lock critical section and after\nput_cpu_ptr() to avoid indeterminate latency and the possibility of sleep\nwith this call.\n\n[longman@redhat.com: don\u0027t hold percpu ref across pr_err(), per Miaohe]\n Link: https://lkml.kernel.org/r/20240807181130.1122660-1-longman@redhat.com\nLink: https://lkml.kernel.org/r/20240806164107.1044956-1-longman@redhat.com\nFixes: 0f383b6dc96e (\"locking/spinlock: Provide RT variant\")\nSigned-off-by: Waiman Long \u003clongman@redhat.com\u003e\nAcked-by: Miaohe Lin \u003clinmiaohe@huawei.com\u003e\nCc: \"Huang, Ying\" \u003cying.huang@intel.com\u003e\nCc: Juri Lelli \u003cjuri.lelli@redhat.com\u003e\nCc: Len Brown \u003clen.brown@intel.com\u003e\nCc: Naoya Horiguchi \u003cnao.horiguchi@gmail.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "9d85731110241fb8ca9445ea4177d816041a8825", "tree": "328174232de66e6629bd88925c900a4ba20ec737", "parents": [ "f4cb78af91e3b2b7aa76dbf8213b898fa8811b12" ], "author": { "name": "Pasha Tatashin", "email": "pasha.tatashin@soleen.com", "time": "Thu Aug 08 21:34:36 2024 +0000" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Aug 15 22:16:14 2024 -0700" }, "message": "mm: don\u0027t account memmap per-node\n\nFix invalid access to pgdat during hot-remove operation:\nndctl users reported a GPF when trying to destroy a namespace:\n$ ndctl destroy-namespace all -r all -f\n Segmentation fault\n dmesg:\n Oops: general protection fault, probably for\n non-canonical address 0xdffffc0000005650: 0000 [#1] PREEMPT SMP KASAN\n PTI\n KASAN: probably user-memory-access in range\n [0x000000000002b280-0x000000000002b287]\n CPU: 26 UID: 0 PID: 1868 Comm: ndctl Not tainted 6.11.0-rc1 #1\n Hardware name: Dell Inc. PowerEdge R640/08HT8T, BIOS\n 2.20.1 09/13/2023\n RIP: 0010:mod_node_page_state+0x2a/0x110\n\ncxl-test users report a GPF when trying to unload the test module:\n$ modrpobe -r cxl-test\n dmesg\n BUG: unable to handle page fault for address: 0000000000004200\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not-present page\n PGD 0 P4D 0\n Oops: Oops: 0000 [#1] PREEMPT SMP PTI\n CPU: 0 UID: 0 PID: 1076 Comm: modprobe Tainted: G O N 6.11.0-rc1 #197\n Tainted: [O]\u003dOOT_MODULE, [N]\u003dTEST\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/15\n RIP: 0010:mod_node_page_state+0x6/0x90\n\nCurrently, when memory is hot-plugged or hot-removed the accounting is\ndone based on the assumption that memmap is allocated from the same node\nas the hot-plugged/hot-removed memory, which is not always the case.\n\nIn addition, there are challenges with keeping the node id of the memory\nthat is being remove to the time when memmap accounting is actually\nperformed: since this is done after remove_pfn_range_from_zone(), and\nalso after remove_memory_block_devices(). Meaning that we cannot use\npgdat nor walking though memblocks to get the nid.\n\nGiven all of that, account the memmap overhead system wide instead.\n\nFor this we are going to be using global atomic counters, but given that\nmemmap size is rarely modified, and normally is only modified either\nduring early boot when there is only one CPU, or under a hotplug global\nmutex lock, therefore there is no need for per-cpu optimizations.\n\nAlso, while we are here rename nr_memmap to nr_memmap_pages, and\nnr_memmap_boot to nr_memmap_boot_pages to be self explanatory that the\nunits are in page count.\n\n[pasha.tatashin@soleen.com: address a few nits from David Hildenbrand]\n Link: https://lkml.kernel.org/r/20240809191020.1142142-4-pasha.tatashin@soleen.com\nLink: https://lkml.kernel.org/r/20240809191020.1142142-4-pasha.tatashin@soleen.com\nLink: https://lkml.kernel.org/r/20240808213437.682006-4-pasha.tatashin@soleen.com\nFixes: 15995a352474 (\"mm: report per-page metadata information\")\nSigned-off-by: Pasha Tatashin \u003cpasha.tatashin@soleen.com\u003e\nReported-by: Yi Zhang \u003cyi.zhang@redhat.com\u003e\nCloses: https://lore.kernel.org/linux-cxl/CAHj4cs9Ax1\u003dCoJkgBGP_+sNu6-6\u003d6v\u003d_L-ZBZY0bVLD3wUWZQg@mail.gmail.com\nReported-by: Alison Schofield \u003calison.schofield@intel.com\u003e\nCloses: https://lore.kernel.org/linux-mm/Zq0tPd2h6alFz8XF@aschofie-mobl2/#t\nTested-by: Dan Williams \u003cdan.j.williams@intel.com\u003e\nTested-by: Alison Schofield \u003calison.schofield@intel.com\u003e\nAcked-by: David Hildenbrand \u003cdavid@redhat.com\u003e\nAcked-by: David Rientjes \u003crientjes@google.com\u003e\nTested-by: Yi Zhang \u003cyi.zhang@redhat.com\u003e\nCc: Domenico Cerasuolo \u003ccerasuolodomenico@gmail.com\u003e\nCc: Fan Ni \u003cfan.ni@samsung.com\u003e\nCc: Joel Granados \u003cj.granados@samsung.com\u003e\nCc: Johannes Weiner \u003channes@cmpxchg.org\u003e\nCc: Li Zhijian \u003clizhijian@fujitsu.com\u003e\nCc: Matthew Wilcox (Oracle) \u003cwilly@infradead.org\u003e\nCc: Mike Rapoport \u003crppt@kernel.org\u003e\nCc: Muchun Song \u003cmuchun.song@linux.dev\u003e\nCc: Nhat Pham \u003cnphamcs@gmail.com\u003e\nCc: Sourav Panda \u003csouravpanda@google.com\u003e\nCc: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: Yosry Ahmed \u003cyosryahmed@google.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "f4cb78af91e3b2b7aa76dbf8213b898fa8811b12", "tree": "d5bd675d0ba32111f9287bb40f614ecc9c09d978", "parents": [ "ace0741a55e453c265cbf3d965eea7f687cd6d45" ], "author": { "name": "Pasha Tatashin", "email": "pasha.tatashin@soleen.com", "time": "Thu Aug 08 21:34:35 2024 +0000" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Aug 15 22:16:14 2024 -0700" }, "message": "mm: add system wide stats items category\n\n/proc/vmstat contains events and stats, events can only grow, but stats\ncan grow and shrink.\n\nvmstat has the following:\n-------------------------\nNR_VM_ZONE_STAT_ITEMS:\tper-zone stats\nNR_VM_NUMA_EVENT_ITEMS:\tper-numa events\nNR_VM_NODE_STAT_ITEMS:\tper-numa stats\nNR_VM_WRITEBACK_STAT_ITEMS:\tsystem-wide background-writeback and\n\t\t\t\tdirty-throttling tresholds.\nNR_VM_EVENT_ITEMS:\tsystem-wide events\n-------------------------\n\nRename NR_VM_WRITEBACK_STAT_ITEMS to NR_VM_STAT_ITEMS, to track the\nsystem-wide stats, we are going to add per-page metadata stats to this\ncategory in the next patch.\n\nAlso delete unused writeback_stat_name().\n\nLink: https://lkml.kernel.org/r/20240809191020.1142142-2-pasha.tatashin@soleen.com\nLink: https://lkml.kernel.org/r/20240808213437.682006-3-pasha.tatashin@soleen.com\nFixes: 15995a352474 (\"mm: report per-page metadata information\")\nSigned-off-by: Pasha Tatashin \u003cpasha.tatashin@soleen.com\u003e\nSuggested-by: Yosry Ahmed \u003cyosryahmed@google.com\u003e\nTested-by: Alison Schofield \u003calison.schofield@intel.com\u003e\nAcked-by: David Hildenbrand \u003cdavid@redhat.com\u003e\nAcked-by: David Rientjes \u003crientjes@google.com\u003e\nCc: Dan Williams \u003cdan.j.williams@intel.com\u003e\nCc: Domenico Cerasuolo \u003ccerasuolodomenico@gmail.com\u003e\nCc: Joel Granados \u003cj.granados@samsung.com\u003e\nCc: Johannes Weiner \u003channes@cmpxchg.org\u003e\nCc: Li Zhijian \u003clizhijian@fujitsu.com\u003e\nCc: Matthew Wilcox (Oracle) \u003cwilly@infradead.org\u003e\nCc: Mike Rapoport \u003crppt@kernel.org\u003e\nCc: Muchun Song \u003cmuchun.song@linux.dev\u003e\nCc: Nhat Pham \u003cnphamcs@gmail.com\u003e\nCc: Sourav Panda \u003csouravpanda@google.com\u003e\nCc: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: Yi Zhang \u003cyi.zhang@redhat.com\u003e\nCc: Fan Ni \u003cfan.ni@samsung.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "ace0741a55e453c265cbf3d965eea7f687cd6d45", "tree": "6af90807055f0e0157a4202b893685ce6176779e", "parents": [ "5f75cfbd6bb02295ddaed48adf667b6c828ce07b" ], "author": { "name": "Pasha Tatashin", "email": "pasha.tatashin@soleen.com", "time": "Thu Aug 08 21:34:34 2024 +0000" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Aug 15 22:16:13 2024 -0700" }, "message": "mm: don\u0027t account memmap on failure\n\nPatch series \"Fixes for memmap accounting\", v4.\n\nMemmap accounting provides us with observability of how much memory is\nused for per-page metadata: i.e. \"struct page\"\u0027s and \"struct page_ext\".\nIt also provides with information of how much was allocated using\nboot allocator (i.e. not part of MemTotal), and how much was allocated\nusing buddy allocated (i.e. part of MemTotal).\n\nThis small series fixes a few problems that were discovered with the\noriginal patch.\n\n\nThis patch (of 3):\n\nWhen we fail to allocate the mmemmap in alloc_vmemmap_page_list(), do not\naccount any already-allocated pages: we\u0027re going to free all them before\nwe return from the function.\n\nLink: https://lkml.kernel.org/r/20240809191020.1142142-1-pasha.tatashin@soleen.com\nLink: https://lkml.kernel.org/r/20240808213437.682006-1-pasha.tatashin@soleen.com\nLink: https://lkml.kernel.org/r/20240808213437.682006-2-pasha.tatashin@soleen.com\nFixes: 15995a352474 (\"mm: report per-page metadata information\")\nSigned-off-by: Pasha Tatashin \u003cpasha.tatashin@soleen.com\u003e\nReviewed-by: Fan Ni \u003cfan.ni@samsung.com\u003e\nReviewed-by: Yosry Ahmed \u003cyosryahmed@google.com\u003e\nAcked-by: David Hildenbrand \u003cdavid@redhat.com\u003e\nTested-by: Alison Schofield \u003calison.schofield@intel.com\u003e\nReviewed-by: Muchun Song \u003cmuchun.song@linux.dev\u003e\nAcked-by: David Rientjes \u003crientjes@google.com\u003e\nCc: Dan Williams \u003cdan.j.williams@intel.com\u003e\nCc: Domenico Cerasuolo \u003ccerasuolodomenico@gmail.com\u003e\nCc: Joel Granados \u003cj.granados@samsung.com\u003e\nCc: Johannes Weiner \u003channes@cmpxchg.org\u003e\nCc: Li Zhijian \u003clizhijian@fujitsu.com\u003e\nCc: Matthew Wilcox (Oracle) \u003cwilly@infradead.org\u003e\nCc: Mike Rapoport \u003crppt@kernel.org\u003e\nCc: Nhat Pham \u003cnphamcs@gmail.com\u003e\nCc: Sourav Panda \u003csouravpanda@google.com\u003e\nCc: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: Yi Zhang \u003cyi.zhang@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "5f75cfbd6bb02295ddaed48adf667b6c828ce07b", "tree": "9ae8764526d266de94789dd1b5ce95424ff735e9", "parents": [ "e46bc2e7eb90a370bc27fa2fd98cb8251e7da1ec" ], "author": { "name": "David Hildenbrand", "email": "david@redhat.com", "time": "Thu Aug 01 22:47:48 2024 +0200" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Aug 15 22:16:13 2024 -0700" }, "message": "mm/hugetlb: fix hugetlb vs. core-mm PT locking\n\nWe recently made GUP\u0027s common page table walking code to also walk hugetlb\nVMAs without most hugetlb special-casing, preparing for the future of\nhaving less hugetlb-specific page table walking code in the codebase. \nTurns out that we missed one page table locking detail: page table locking\nfor hugetlb folios that are not mapped using a single PMD/PUD.\n\nAssume we have hugetlb folio that spans multiple PTEs (e.g., 64 KiB\nhugetlb folios on arm64 with 4 KiB base page size). GUP, as it walks the\npage tables, will perform a pte_offset_map_lock() to grab the PTE table\nlock.\n\nHowever, hugetlb that concurrently modifies these page tables would\nactually grab the mm-\u003epage_table_lock: with USE_SPLIT_PTE_PTLOCKS, the\nlocks would differ. Something similar can happen right now with hugetlb\nfolios that span multiple PMDs when USE_SPLIT_PMD_PTLOCKS.\n\nThis issue can be reproduced [1], for example triggering:\n\n[ 3105.936100] ------------[ cut here ]------------\n[ 3105.939323] WARNING: CPU: 31 PID: 2732 at mm/gup.c:142 try_grab_folio+0x11c/0x188\n[ 3105.944634] Modules linked in: [...]\n[ 3105.974841] CPU: 31 PID: 2732 Comm: reproducer Not tainted 6.10.0-64.eln141.aarch64 #1\n[ 3105.980406] Hardware name: QEMU KVM Virtual Machine, BIOS edk2-20240524-4.fc40 05/24/2024\n[ 3105.986185] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE\u003d--)\n[ 3105.991108] pc : try_grab_folio+0x11c/0x188\n[ 3105.994013] lr : follow_page_pte+0xd8/0x430\n[ 3105.996986] sp : ffff80008eafb8f0\n[ 3105.999346] x29: ffff80008eafb900 x28: ffffffe8d481f380 x27: 00f80001207cff43\n[ 3106.004414] x26: 0000000000000001 x25: 0000000000000000 x24: ffff80008eafba48\n[ 3106.009520] x23: 0000ffff9372f000 x22: ffff7a54459e2000 x21: ffff7a546c1aa978\n[ 3106.014529] x20: ffffffe8d481f3c0 x19: 0000000000610041 x18: 0000000000000001\n[ 3106.019506] x17: 0000000000000001 x16: ffffffffffffffff x15: 0000000000000000\n[ 3106.024494] x14: ffffb85477fdfe08 x13: 0000ffff9372ffff x12: 0000000000000000\n[ 3106.029469] x11: 1fffef4a88a96be1 x10: ffff7a54454b5f0c x9 : ffffb854771b12f0\n[ 3106.034324] x8 : 0008000000000000 x7 : ffff7a546c1aa980 x6 : 0008000000000080\n[ 3106.038902] x5 : 00000000001207cf x4 : 0000ffff9372f000 x3 : ffffffe8d481f000\n[ 3106.043420] x2 : 0000000000610041 x1 : 0000000000000001 x0 : 0000000000000000\n[ 3106.047957] Call trace:\n[ 3106.049522] try_grab_folio+0x11c/0x188\n[ 3106.051996] follow_pmd_mask.constprop.0.isra.0+0x150/0x2e0\n[ 3106.055527] follow_page_mask+0x1a0/0x2b8\n[ 3106.058118] __get_user_pages+0xf0/0x348\n[ 3106.060647] faultin_page_range+0xb0/0x360\n[ 3106.063651] do_madvise+0x340/0x598\n\nLet\u0027s make huge_pte_lockptr() effectively use the same PT locks as any\ncore-mm page table walker would. Add ptep_lockptr() to obtain the PTE\npage table lock using a pte pointer -- unfortunately we cannot convert\npte_lockptr() because virt_to_page() doesn\u0027t work with kmap\u0027ed page tables\nwe can have with CONFIG_HIGHPTE.\n\nHandle CONFIG_PGTABLE_LEVELS correctly by checking in reverse order, such\nthat when e.g., CONFIG_PGTABLE_LEVELS\u003d\u003d2 with\nPGDIR_SIZE\u003d\u003dP4D_SIZE\u003d\u003dPUD_SIZE\u003d\u003dPMD_SIZE will work as expected. Document\nwhy that works.\n\nThere is one ugly case: powerpc 8xx, whereby we have an 8 MiB hugetlb\nfolio being mapped using two PTE page tables. While hugetlb wants to take\nthe PMD table lock, core-mm would grab the PTE table lock of one of both\nPTE page tables. In such corner cases, we have to make sure that both\nlocks match, which is (fortunately!) currently guaranteed for 8xx as it\ndoes not support SMP and consequently doesn\u0027t use split PT locks.\n\n[1] https://lore.kernel.org/all/1bbfcc7f-f222-45a5-ac44-c5a1381c596d@redhat.com/\n\nLink: https://lkml.kernel.org/r/20240801204748.99107-1-david@redhat.com\nFixes: 9cb28da54643 (\"mm/gup: handle hugetlb in the generic follow_page_mask code\")\nSigned-off-by: David Hildenbrand \u003cdavid@redhat.com\u003e\nAcked-by: Peter Xu \u003cpeterx@redhat.com\u003e\nReviewed-by: Baolin Wang \u003cbaolin.wang@linux.alibaba.com\u003e\nTested-by: Baolin Wang \u003cbaolin.wang@linux.alibaba.com\u003e\nCc: Peter Xu \u003cpeterx@redhat.com\u003e\nCc: Oscar Salvador \u003cosalvador@suse.de\u003e\nCc: Muchun Song \u003cmuchun.song@linux.dev\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "e46bc2e7eb90a370bc27fa2fd98cb8251e7da1ec", "tree": "52b1322b4b246211b918524ac7ed61c6e6f8168c", "parents": [ "7c626ce4bae1ac14f60076d00eafe71af30450ba" ], "author": { "name": "Pedro Falcato", "email": "pedro.falcato@gmail.com", "time": "Wed Aug 07 18:33:35 2024 +0100" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Aug 15 22:16:13 2024 -0700" }, "message": "mseal: fix is_madv_discard()\n\nis_madv_discard did its check wrong. MADV_ flags are not bitwise,\nthey\u0027re normal sequential numbers. So, for instance:\n\tbehavior \u0026 (/* ... */ | MADV_REMOVE)\n\ntagged both MADV_REMOVE and MADV_RANDOM (bit 0 set) as discard\noperations.\n\nAs a result the kernel could erroneously block certain madvises (e.g\nMADV_RANDOM or MADV_HUGEPAGE) on sealed VMAs due to them sharing bits\nwith blocked MADV operations (e.g REMOVE or WIPEONFORK).\n\nThis is obviously incorrect, so use a switch statement instead.\n\nLink: https://lkml.kernel.org/r/20240807173336.2523757-1-pedro.falcato@gmail.com\nLink: https://lkml.kernel.org/r/20240807173336.2523757-2-pedro.falcato@gmail.com\nFixes: 8be7258aad44 (\"mseal: add mseal syscall\")\nSigned-off-by: Pedro Falcato \u003cpedro.falcato@gmail.com\u003e\nTested-by: Jeff Xu \u003cjeffxu@chromium.org\u003e\nReviewed-by: Jeff Xu \u003cjeffxu@chromium.org\u003e\nCc: Kees Cook \u003ckees@kernel.org\u003e\nCc: Liam R. Howlett \u003cLiam.Howlett@oracle.com\u003e\nCc: Shuah Khan \u003cshuah@kernel.org\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "fee9d135e2fd5963a7f466cd1ef2060731a1ab29", "tree": "3414d6e3c2348155d335ddf24dad1b6a706b58ab", "parents": [ "f8e170a3dd723c29d7fedcd584c468e1fedd5e5b", "042b8711a0beafb2c3b888bebe3c300ab4c817fa" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Aug 16 13:16:43 2024 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Aug 16 13:16:47 2024 +1000" }, "message": "Merge tag \u0027mediatek-drm-fixes-20240805\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/chunkuang.hu/linux into drm-fixes\n\nMediatek DRM Fixes - 20240805\n\n1. Set sensible cursor width/height values to fix crash\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Chun-Kuang Hu \u003cchunkuang.hu@kernel.org\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20240810084605.3435-1-chunkuang.hu@kernel.org\n" }, { "commit": "f8e170a3dd723c29d7fedcd584c468e1fedd5e5b", "tree": "0e8a65dd8c91bdadea921340833189fc7f96e245", "parents": [ "75eac7e8bb77597fa199a056710f9ebba5b1995b", "f002702290fccbd473f5bb94e52f25c96917fff2" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Aug 16 12:06:07 2024 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Aug 16 12:06:13 2024 +1000" }, "message": "Merge tag \u0027drm-xe-fixes-2024-08-15\u0027 of https://gitlab.freedesktop.org/drm/xe/kernel into drm-fixes\n\n- Validate user fence during creation (Brost)\n- Fix use after free when client stats are captured (Umesh)\n- SRIOV fixes (Michal)\n- Runtime PM fixes (Brost)\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Rodrigo Vivi \u003crodrigo.vivi@intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/Zr4KWF5nM1YvnT8H@intel.com\n" }, { "commit": "75eac7e8bb77597fa199a056710f9ebba5b1995b", "tree": "68e401c64aae89be3c7d6ef4c3400578425503d4", "parents": [ "9370e43071ba157b73d717b3bfa0f6aa628148d7", "fd45cc614b8acca5bb435ba37fe9b3f9a17fab84" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Aug 16 11:21:31 2024 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Aug 16 11:33:37 2024 +1000" }, "message": "Merge tag \u0027drm-misc-fixes-2024-08-15\u0027 of https://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes\n\nShort summary of fixes pull:\n\npanel:\n- dt-bindings style fixes\n\npanel-orientation:\n- add quirk for Any Loki Max\n- add quirk for Any Loki Zero\n\nrockchip:\n- inno-hdmi: fix infoframe upload\n\nv3d:\n- fix OOB access in v3d_csd_job_run()\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Thomas Zimmermann \u003ctzimmermann@suse.de\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20240815131751.GA151031@linux.fritz.box\n" }, { "commit": "b313a8c835516bdda85025500be866ac8a74e022", "tree": "101d8c5fc26877a965b871b250781e1dee29c2b2", "parents": [ "50faba777177e80fd29a249fcd9f8aa18348d65b" ], "author": { "name": "Li Lingfeng", "email": "lilingfeng3@huawei.com", "time": "Thu Aug 15 10:47:36 2024 +0800" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Aug 15 19:25:03 2024 -0600" }, "message": "block: Fix lockdep warning in blk_mq_mark_tag_wait\n\nLockdep reported a warning in Linux version 6.6:\n\n[ 414.344659] \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n[ 414.345155] WARNING: inconsistent lock state\n[ 414.345658] 6.6.0-07439-gba2303cacfda #6 Not tainted\n[ 414.346221] --------------------------------\n[ 414.346712] inconsistent {IN-SOFTIRQ-W} -\u003e {SOFTIRQ-ON-W} usage.\n[ 414.347545] kworker/u10:3/1152 [HC0[0]:SC0[0]:HE0:SE1] takes:\n[ 414.349245] ffff88810edd1098 (\u0026sbq-\u003ews[i].wait){+.?.}-{2:2}, at: blk_mq_dispatch_rq_list+0x131c/0x1ee0\n[ 414.351204] {IN-SOFTIRQ-W} state was registered at:\n[ 414.351751] lock_acquire+0x18d/0x460\n[ 414.352218] _raw_spin_lock_irqsave+0x39/0x60\n[ 414.352769] __wake_up_common_lock+0x22/0x60\n[ 414.353289] sbitmap_queue_wake_up+0x375/0x4f0\n[ 414.353829] sbitmap_queue_clear+0xdd/0x270\n[ 414.354338] blk_mq_put_tag+0xdf/0x170\n[ 414.354807] __blk_mq_free_request+0x381/0x4d0\n[ 414.355335] blk_mq_free_request+0x28b/0x3e0\n[ 414.355847] __blk_mq_end_request+0x242/0xc30\n[ 414.356367] scsi_end_request+0x2c1/0x830\n[ 414.345155] WARNING: inconsistent lock state\n[ 414.345658] 6.6.0-07439-gba2303cacfda #6 Not tainted\n[ 414.346221] --------------------------------\n[ 414.346712] inconsistent {IN-SOFTIRQ-W} -\u003e {SOFTIRQ-ON-W} usage.\n[ 414.347545] kworker/u10:3/1152 [HC0[0]:SC0[0]:HE0:SE1] takes:\n[ 414.349245] ffff88810edd1098 (\u0026sbq-\u003ews[i].wait){+.?.}-{2:2}, at: blk_mq_dispatch_rq_list+0x131c/0x1ee0\n[ 414.351204] {IN-SOFTIRQ-W} state was registered at:\n[ 414.351751] lock_acquire+0x18d/0x460\n[ 414.352218] _raw_spin_lock_irqsave+0x39/0x60\n[ 414.352769] __wake_up_common_lock+0x22/0x60\n[ 414.353289] sbitmap_queue_wake_up+0x375/0x4f0\n[ 414.353829] sbitmap_queue_clear+0xdd/0x270\n[ 414.354338] blk_mq_put_tag+0xdf/0x170\n[ 414.354807] __blk_mq_free_request+0x381/0x4d0\n[ 414.355335] blk_mq_free_request+0x28b/0x3e0\n[ 414.355847] __blk_mq_end_request+0x242/0xc30\n[ 414.356367] scsi_end_request+0x2c1/0x830\n[ 414.356863] scsi_io_completion+0x177/0x1610\n[ 414.357379] scsi_complete+0x12f/0x260\n[ 414.357856] blk_complete_reqs+0xba/0xf0\n[ 414.358338] __do_softirq+0x1b0/0x7a2\n[ 414.358796] irq_exit_rcu+0x14b/0x1a0\n[ 414.359262] sysvec_call_function_single+0xaf/0xc0\n[ 414.359828] asm_sysvec_call_function_single+0x1a/0x20\n[ 414.360426] default_idle+0x1e/0x30\n[ 414.360873] default_idle_call+0x9b/0x1f0\n[ 414.361390] do_idle+0x2d2/0x3e0\n[ 414.361819] cpu_startup_entry+0x55/0x60\n[ 414.362314] start_secondary+0x235/0x2b0\n[ 414.362809] secondary_startup_64_no_verify+0x18f/0x19b\n[ 414.363413] irq event stamp: 428794\n[ 414.363825] hardirqs last enabled at (428793): [\u003cffffffff816bfd1c\u003e] ktime_get+0x1dc/0x200\n[ 414.364694] hardirqs last disabled at (428794): [\u003cffffffff85470177\u003e] _raw_spin_lock_irq+0x47/0x50\n[ 414.365629] softirqs last enabled at (428444): [\u003cffffffff85474780\u003e] __do_softirq+0x540/0x7a2\n[ 414.366522] softirqs last disabled at (428419): [\u003cffffffff813f65ab\u003e] irq_exit_rcu+0x14b/0x1a0\n[ 414.367425]\n other info that might help us debug this:\n[ 414.368194] Possible unsafe locking scenario:\n[ 414.368900] CPU0\n[ 414.369225] ----\n[ 414.369548] lock(\u0026sbq-\u003ews[i].wait);\n[ 414.370000] \u003cInterrupt\u003e\n[ 414.370342] lock(\u0026sbq-\u003ews[i].wait);\n[ 414.370802]\n *** DEADLOCK ***\n[ 414.371569] 5 locks held by kworker/u10:3/1152:\n[ 414.372088] #0: ffff88810130e938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x357/0x13f0\n[ 414.373180] #1: ffff88810201fdb8 ((work_completion)(\u0026(\u0026wb-\u003edwork)-\u003ework)){+.+.}-{0:0}, at: process_scheduled_works+0x3a3/0x13f0\n[ 414.374384] #2: ffffffff86ffbdc0 (rcu_read_lock){....}-{1:2}, at: blk_mq_run_hw_queue+0x637/0xa00\n[ 414.375342] #3: ffff88810edd1098 (\u0026sbq-\u003ews[i].wait){+.?.}-{2:2}, at: blk_mq_dispatch_rq_list+0x131c/0x1ee0\n[ 414.376377] #4: ffff888106205a08 (\u0026hctx-\u003edispatch_wait_lock){+.-.}-{2:2}, at: blk_mq_dispatch_rq_list+0x1337/0x1ee0\n[ 414.378607]\n stack backtrace:\n[ 414.379177] CPU: 0 PID: 1152 Comm: kworker/u10:3 Not tainted 6.6.0-07439-gba2303cacfda #6\n[ 414.380032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014\n[ 414.381177] Workqueue: writeback wb_workfn (flush-253:0)\n[ 414.381805] Call Trace:\n[ 414.382136] \u003cTASK\u003e\n[ 414.382429] dump_stack_lvl+0x91/0xf0\n[ 414.382884] mark_lock_irq+0xb3b/0x1260\n[ 414.383367] ? __pfx_mark_lock_irq+0x10/0x10\n[ 414.383889] ? stack_trace_save+0x8e/0xc0\n[ 414.384373] ? __pfx_stack_trace_save+0x10/0x10\n[ 414.384903] ? graph_lock+0xcf/0x410\n[ 414.385350] ? save_trace+0x3d/0xc70\n[ 414.385808] mark_lock.part.20+0x56d/0xa90\n[ 414.386317] mark_held_locks+0xb0/0x110\n[ 414.386791] ? __pfx_do_raw_spin_lock+0x10/0x10\n[ 414.387320] lockdep_hardirqs_on_prepare+0x297/0x3f0\n[ 414.387901] ? _raw_spin_unlock_irq+0x28/0x50\n[ 414.388422] trace_hardirqs_on+0x58/0x100\n[ 414.388917] _raw_spin_unlock_irq+0x28/0x50\n[ 414.389422] __blk_mq_tag_busy+0x1d6/0x2a0\n[ 414.389920] __blk_mq_get_driver_tag+0x761/0x9f0\n[ 414.390899] blk_mq_dispatch_rq_list+0x1780/0x1ee0\n[ 414.391473] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10\n[ 414.392070] ? sbitmap_get+0x2b8/0x450\n[ 414.392533] ? __blk_mq_get_driver_tag+0x210/0x9f0\n[ 414.393095] __blk_mq_sched_dispatch_requests+0xd99/0x1690\n[ 414.393730] ? elv_attempt_insert_merge+0x1b1/0x420\n[ 414.394302] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10\n[ 414.394970] ? lock_acquire+0x18d/0x460\n[ 414.395456] ? blk_mq_run_hw_queue+0x637/0xa00\n[ 414.395986] ? __pfx_lock_acquire+0x10/0x10\n[ 414.396499] blk_mq_sched_dispatch_requests+0x109/0x190\n[ 414.397100] blk_mq_run_hw_queue+0x66e/0xa00\n[ 414.397616] blk_mq_flush_plug_list.part.17+0x614/0x2030\n[ 414.398244] ? __pfx_blk_mq_flush_plug_list.part.17+0x10/0x10\n[ 414.398897] ? writeback_sb_inodes+0x241/0xcc0\n[ 414.399429] blk_mq_flush_plug_list+0x65/0x80\n[ 414.399957] __blk_flush_plug+0x2f1/0x530\n[ 414.400458] ? __pfx___blk_flush_plug+0x10/0x10\n[ 414.400999] blk_finish_plug+0x59/0xa0\n[ 414.401467] wb_writeback+0x7cc/0x920\n[ 414.401935] ? __pfx_wb_writeback+0x10/0x10\n[ 414.402442] ? mark_held_locks+0xb0/0x110\n[ 414.402931] ? __pfx_do_raw_spin_lock+0x10/0x10\n[ 414.403462] ? lockdep_hardirqs_on_prepare+0x297/0x3f0\n[ 414.404062] wb_workfn+0x2b3/0xcf0\n[ 414.404500] ? __pfx_wb_workfn+0x10/0x10\n[ 414.404989] process_scheduled_works+0x432/0x13f0\n[ 414.405546] ? __pfx_process_scheduled_works+0x10/0x10\n[ 414.406139] ? do_raw_spin_lock+0x101/0x2a0\n[ 414.406641] ? assign_work+0x19b/0x240\n[ 414.407106] ? lock_is_held_type+0x9d/0x110\n[ 414.407604] worker_thread+0x6f2/0x1160\n[ 414.408075] ? __kthread_parkme+0x62/0x210\n[ 414.408572] ? lockdep_hardirqs_on_prepare+0x297/0x3f0\n[ 414.409168] ? __kthread_parkme+0x13c/0x210\n[ 414.409678] ? __pfx_worker_thread+0x10/0x10\n[ 414.410191] kthread+0x33c/0x440\n[ 414.410602] ? __pfx_kthread+0x10/0x10\n[ 414.411068] ret_from_fork+0x4d/0x80\n[ 414.411526] ? __pfx_kthread+0x10/0x10\n[ 414.411993] ret_from_fork_asm+0x1b/0x30\n[ 414.412489] \u003c/TASK\u003e\n\nWhen interrupt is turned on while a lock holding by spin_lock_irq it\nthrows a warning because of potential deadlock.\n\nblk_mq_prep_dispatch_rq\n blk_mq_get_driver_tag\n __blk_mq_get_driver_tag\n __blk_mq_alloc_driver_tag\n blk_mq_tag_busy -\u003e tag is already busy\n // failed to get driver tag\n blk_mq_mark_tag_wait\n spin_lock_irq(\u0026wq-\u003elock) -\u003e lock A (\u0026sbq-\u003ews[i].wait)\n __add_wait_queue(wq, wait) -\u003e wait queue active\n blk_mq_get_driver_tag\n __blk_mq_tag_busy\n-\u003e 1) tag must be idle, which means there can\u0027t be inflight IO\n spin_lock_irq(\u0026tags-\u003elock) -\u003e lock B (hctx-\u003etags)\n spin_unlock_irq(\u0026tags-\u003elock) -\u003e unlock B, turn on interrupt accidentally\n-\u003e 2) context must be preempt by IO interrupt to trigger deadlock.\n\nAs shown above, the deadlock is not possible in theory, but the warning\nstill need to be fixed.\n\nFix it by using spin_lock_irqsave to get lockB instead of spin_lock_irq.\n\nFixes: 4f1731df60f9 (\"blk-mq: fix potential io hang by wrong \u0027wake_batch\u0027\")\nSigned-off-by: Li Lingfeng \u003clilingfeng3@huawei.com\u003e\nReviewed-by: Ming Lei \u003cming.lei@redhat.com\u003e\nReviewed-by: Yu Kuai \u003cyukuai3@huawei.com\u003e\nReviewed-by: Bart Van Assche \u003cbvanassche@acm.org\u003e\nLink: https://lore.kernel.org/r/20240815024736.2040971-1-lilingfeng@huaweicloud.com\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "9370e43071ba157b73d717b3bfa0f6aa628148d7", "tree": "6306e56b7968855c65ca78bd4c80164edc9daa22", "parents": [ "7c626ce4bae1ac14f60076d00eafe71af30450ba", "23acd1f344e8102f803119d0c8fc4df4628d694f" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Aug 16 10:57:05 2024 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Aug 16 10:57:10 2024 +1000" }, "message": "Merge tag \u0027amd-drm-fixes-6.11-2024-08-14\u0027 of https://gitlab.freedesktop.org/agd5f/linux into drm-fixes\n\namd-drm-fixes-6.11-2024-08-14:\n\namdgpu:\n- Fix MES ring buffer overflow\n- DCN 3.5 fix\n- DCN 3.2.1 fix\n- DP MST fix\n- Cursor fixes\n- JPEG fixes\n- Context ops validation\n- MES 12 fixes\n- VCN 5.0 fix\n- HDP fix\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Alex Deucher \u003calexander.deucher@amd.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20240814213846.1331827-1-alexander.deucher@amd.com\n" }, { "commit": "d7a5aa4b3c007fae50405ca75c40258d90300e96", "tree": "cf3e90562d93e2c9378c846d1558f313770c6926", "parents": [ "e724918b3786252b985b0c2764c16a57d1937707", "4bbe6002931954bbe82b25f25990b987b0392e18" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Aug 15 16:08:59 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Aug 15 16:08:59 2024 -0700" }, "message": "Merge tag \u0027perf-tools-fixes-for-v6.11-2024-08-15\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/perf/perf-tools\n\nPull perf tools fixes from Namhyung Kim:\n \"The usual header file sync-ups and one more build fix:\n\n - Add README file to explain why we copy the headers\n\n - Sync UAPI and other header files with kernel source\n\n - Fix build on MIPS 32-bit\"\n\n* tag \u0027perf-tools-fixes-for-v6.11-2024-08-15\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/perf/perf-tools:\n perf daemon: Fix the build on 32-bit architectures\n tools/include: Sync arm64 headers with the kernel sources\n tools/include: Sync x86 headers with the kernel sources\n tools/include: Sync filesystem headers with the kernel sources\n tools/include: Sync network socket headers with the kernel sources\n tools/include: Sync uapi/asm-generic/unistd.h with the kernel sources\n tools/include: Sync uapi/sound/asound.h with the kernel sources\n tools/include: Sync uapi/linux/perf.h with the kernel sources\n tools/include: Sync uapi/linux/kvm.h with the kernel sources\n tools/include: Sync uapi/drm/i915_drm.h with the kernel sources\n perf tools: Add tools/include/uapi/README\n" }, { "commit": "5b4f3af39b6588e8de4444d8e1ccf759b40f9414", "tree": "929020f58be85d03768ec1867ca1dc4d6ce48200", "parents": [ "836bb3268db405cf9021496ac4dbc26d3e4758fe" ], "author": { "name": "Gustavo A. R. Silva", "email": "gustavoars@kernel.org", "time": "Thu Aug 08 16:04:04 2024 -0600" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Thu Aug 15 16:06:55 2024 -0500" }, "message": "smb: smb2pdu.h: Use static_assert() to check struct sizes\n\nCommit 9f9bef9bc5c6 (\"smb: smb2pdu.h: Avoid -Wflex-array-member-not-at-end\nwarnings\") introduced tagged `struct create_context_hdr`. We want to\nensure that when new members need to be added to the flexible structure,\nthey are always included within this tagged struct.\n\nSo, we use `static_assert()` to ensure that the memory layout for\nboth the flexible structure and the tagged struct is the same after\nany changes.\n\nAcked-by: Namjae Jeon \u003clinkinjeon@kernel.org\u003e\nSigned-off-by: Gustavo A. R. Silva \u003cgustavoars@kernel.org\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "836bb3268db405cf9021496ac4dbc26d3e4758fe", "tree": "dd840c1adb699998087426c07fe63389ec7b1a38", "parents": [ "74c2ab6d653b4c2354df65a7f7f2df1925a40a51" ], "author": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Thu Aug 15 14:03:43 2024 -0500" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Thu Aug 15 16:04:47 2024 -0500" }, "message": "smb3: fix lock breakage for cached writes\n\nMandatory locking is enforced for cached writes, which violates\ndefault posix semantics, and also it is enforced inconsistently.\nThis apparently breaks recent versions of libreoffice, but can\nalso be demonstrated by opening a file twice from the same\nclient, locking it from handle one and writing to it from\nhandle two (which fails, returning EACCES).\n\nSince there was already a mount option \"forcemandatorylock\"\n(which defaults to off), with this change only when the user\nintentionally specifies \"forcemandatorylock\" on mount will we\nbreak posix semantics on write to a locked range (ie we will\nonly fail the write in this case, if the user mounts with\n\"forcemandatorylock\").\n\nFixes: 85160e03a79e (\"CIFS: Implement caching mechanism for mandatory brlocks\")\nCc: stable@vger.kernel.org\nCc: Pavel Shilovsky \u003cpiastryyy@gmail.com\u003e\nReported-by: abartlet@samba.org\nReported-by: Kevin Ottens \u003ckevin.ottens@enioka.com\u003e\nReviewed-by: David Howells \u003cdhowells@redhat.com\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "50faba777177e80fd29a249fcd9f8aa18348d65b", "tree": "b6555d198877e184e09b9d9b90ddaad51fc77639", "parents": [ "7db4042336580dfd75cb5faa82c12cd51098c90b", "c916ca35308d3187c9928664f9be249b22a3a701" ], "author": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Aug 15 14:53:08 2024 -0600" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Aug 15 14:53:08 2024 -0600" }, "message": "Merge tag \u0027md-6.11-20240815\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/song/md into block-6.11\n\nPull MD fix from Song:\n\n\"This patch fixes a potential data corruption in degraded raid0 array\n with slow (WriteMostly) drives. This issue was introduced in upstream\n 6.9 kernel.\"\n\n* tag \u0027md-6.11-20240815\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/song/md:\n md/raid1: Fix data corruption for degraded array with slow disk\n" }, { "commit": "c916ca35308d3187c9928664f9be249b22a3a701", "tree": "b6555d198877e184e09b9d9b90ddaad51fc77639", "parents": [ "7db4042336580dfd75cb5faa82c12cd51098c90b" ], "author": { "name": "Yu Kuai", "email": "yukuai3@huawei.com", "time": "Sat Aug 03 17:11:37 2024 +0800" }, "committer": { "name": "Song Liu", "email": "song@kernel.org", "time": "Thu Aug 15 13:38:17 2024 -0700" }, "message": "md/raid1: Fix data corruption for degraded array with slow disk\n\nread_balance() will avoid reading from slow disks as much as possible,\nhowever, if valid data only lands in slow disks, and a new normal disk\nis still in recovery, unrecovered data can be read:\n\nraid1_read_request\n read_balance\n raid1_should_read_first\n -\u003e return false\n choose_best_rdev\n -\u003e normal disk is not recovered, return -1\n choose_bb_rdev\n -\u003e missing the checking of recovery, return the normal disk\n -\u003e read unrecovered data\n\nRoot cause is that the checking of recovery is missing in\nchoose_bb_rdev(). Hence add such checking to fix the problem.\n\nAlso fix similar problem in choose_slow_rdev().\n\nCc: stable@vger.kernel.org\nFixes: 9f3ced792203 (\"md/raid1: factor out choose_bb_rdev() from read_balance()\")\nFixes: dfa8ecd167c1 (\"md/raid1: factor out choose_slow_rdev() from read_balance()\")\nReported-and-tested-by: Mateusz Jończyk \u003cmat.jonczyk@o2.pl\u003e\nCloses: https://lore.kernel.org/all/9952f532-2554-44bf-b906-4880b2e88e3a@o2.pl/\nSigned-off-by: Yu Kuai \u003cyukuai3@huawei.com\u003e\nLink: https://lore.kernel.org/r/20240803091137.3197008-1-yukuai1@huaweicloud.com\nSigned-off-by: Song Liu \u003csong@kernel.org\u003e\n" }, { "commit": "74c2ab6d653b4c2354df65a7f7f2df1925a40a51", "tree": "7023b5c25ac30814e680d9a8863f4bac9bce535e", "parents": [ "7c626ce4bae1ac14f60076d00eafe71af30450ba" ], "author": { "name": "Su Hui", "email": "suhui@nfschina.com", "time": "Thu Aug 08 20:23:32 2024 +0800" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Thu Aug 15 15:32:30 2024 -0500" }, "message": "smb/client: avoid possible NULL dereference in cifs_free_subrequest()\n\nClang static checker (scan-build) warning:\n\tcifsglob.h:line 890, column 3\n\tAccess to field \u0027ops\u0027 results in a dereference of a null pointer.\n\nCommit 519be989717c (\"cifs: Add a tracepoint to track credits involved in\nR/W requests\") adds a check for \u0027rdata-\u003eserver\u0027, and let clang throw this\nwarning about NULL dereference.\n\nWhen \u0027rdata-\u003ecredits.value !\u003d 0 \u0026\u0026 rdata-\u003eserver \u003d\u003d NULL\u0027 happens,\nadd_credits_and_wake_if() will call rdata-\u003eserver-\u003eops-\u003eadd_credits().\nThis will cause NULL dereference problem. Add a check for \u0027rdata-\u003eserver\u0027\nto avoid NULL dereference.\n\nCc: stable@vger.kernel.org\nFixes: 69c3c023af25 (\"cifs: Implement netfslib hooks\")\nReviewed-by: David Howells \u003cdhowells@redhat.com\u003e\nSigned-off-by: Su Hui \u003csuhui@nfschina.com\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "32d5f7add080a936e28ab4142bfeea6b06999789", "tree": "cdc02d299aae5f7fdf22e68bec3ecc58cb47533b", "parents": [ "e01d48c699bbe015d887cb598e4047f08f3998a8", "1f5288874de776412041022607513ffac74ae1a6" ], "author": { "name": "Palmer Dabbelt", "email": "palmer@rivosinc.com", "time": "Wed Aug 14 13:13:26 2024 -0700" }, "committer": { "name": "Palmer Dabbelt", "email": "palmer@rivosinc.com", "time": "Thu Aug 15 13:12:21 2024 -0700" }, "message": "Merge patch series \"RISC-V: hwprobe: Misaligned scalar perf fix and rename\"\n\nEvan Green \u003cevan@rivosinc.com\u003e says:\n\nThe CPUPERF0 hwprobe key was documented and identified in code as\na bitmask value, but its contents were an enum. This produced\nincorrect behavior in conjunction with the WHICH_CPUS hwprobe flag.\nThe first patch in this series fixes the bitmask/enum problem by\ncreating a new hwprobe key that returns the same data, but is\nproperly described as a value instead of a bitmask. The second patch\nrenames the value definitions in preparation for adding vector misaligned\naccess info. As of this version, the old defines are kept in place to\nmaintain source compatibility with older userspace programs.\n\n* b4-shazam-merge:\n RISC-V: hwprobe: Add SCALAR to misaligned perf defines\n RISC-V: hwprobe: Add MISALIGNED_PERF key\n\nLink: https://lore.kernel.org/r/20240809214444.3257596-1-evan@rivosinc.com\nSigned-off-by: Palmer Dabbelt \u003cpalmer@rivosinc.com\u003e\n" }, { "commit": "e01d48c699bbe015d887cb598e4047f08f3998a8", "tree": "0299cfcd35073fd37f1b7383c7a3847ac21c363a", "parents": [ "a445699879f989f6700df81f497b70bf94cc6163" ], "author": { "name": "Alexandre Ghiti", "email": "alexghiti@rivosinc.com", "time": "Wed Aug 14 21:26:19 2024 +0200" }, "committer": { "name": "Palmer Dabbelt", "email": "palmer@rivosinc.com", "time": "Thu Aug 15 13:12:16 2024 -0700" }, "message": "riscv: Fix out-of-bounds when accessing Andes per hart vendor extension array\n\nThe out-of-bounds access is reported by UBSAN:\n\n[ 0.000000] UBSAN: array-index-out-of-bounds in ../arch/riscv/kernel/vendor_extensions.c:41:66\n[ 0.000000] index -1 is out of range for type \u0027riscv_isavendorinfo [32]\u0027\n[ 0.000000] CPU: 0 UID: 0 PID: 0 Comm: swapper Not tainted 6.11.0-rc2ubuntu-defconfig #2\n[ 0.000000] Hardware name: riscv-virtio,qemu (DT)\n[ 0.000000] Call Trace:\n[ 0.000000] [\u003cffffffff94e078ba\u003e] dump_backtrace+0x32/0x40\n[ 0.000000] [\u003cffffffff95c83c1a\u003e] show_stack+0x38/0x44\n[ 0.000000] [\u003cffffffff95c94614\u003e] dump_stack_lvl+0x70/0x9c\n[ 0.000000] [\u003cffffffff95c94658\u003e] dump_stack+0x18/0x20\n[ 0.000000] [\u003cffffffff95c8bbb2\u003e] ubsan_epilogue+0x10/0x46\n[ 0.000000] [\u003cffffffff95485a82\u003e] __ubsan_handle_out_of_bounds+0x94/0x9c\n[ 0.000000] [\u003cffffffff94e09442\u003e] __riscv_isa_vendor_extension_available+0x90/0x92\n[ 0.000000] [\u003cffffffff94e043b6\u003e] riscv_cpufeature_patch_func+0xc4/0x148\n[ 0.000000] [\u003cffffffff94e035f8\u003e] _apply_alternatives+0x42/0x50\n[ 0.000000] [\u003cffffffff95e04196\u003e] apply_boot_alternatives+0x3c/0x100\n[ 0.000000] [\u003cffffffff95e05b52\u003e] setup_arch+0x85a/0x8bc\n[ 0.000000] [\u003cffffffff95e00ca0\u003e] start_kernel+0xa4/0xfb6\n\nThe dereferencing using cpu should actually not happen, so remove it.\n\nFixes: 23c996fc2bc1 (\"riscv: Extend cpufeature.c to detect vendor extensions\")\nSigned-off-by: Alexandre Ghiti \u003calexghiti@rivosinc.com\u003e\nLink: https://lore.kernel.org/r/20240814192619.276794-1-alexghiti@rivosinc.com\nSigned-off-by: Palmer Dabbelt \u003cpalmer@rivosinc.com\u003e\n" }, { "commit": "0e28bf61a5f9ab30be3f3b4eafb8d097e39446bb", "tree": "c05586db1ab076793dac76f6040b35e0b400384d", "parents": [ "6486cad00a8b7f8585983408c152bbe33dda529b" ], "author": { "name": "David Gstir", "email": "david@sigma-star.at", "time": "Wed Jul 17 13:28:45 2024 +0200" }, "committer": { "name": "Jarkko Sakkinen", "email": "jarkko@kernel.org", "time": "Thu Aug 15 22:01:14 2024 +0300" }, "message": "KEYS: trusted: dcp: fix leak of blob encryption key\n\nTrusted keys unseal the key blob on load, but keep the sealed payload in\nthe blob field so that every subsequent read (export) will simply\nconvert this field to hex and send it to userspace.\n\nWith DCP-based trusted keys, we decrypt the blob encryption key (BEK)\nin the Kernel due hardware limitations and then decrypt the blob payload.\nBEK decryption is done in-place which means that the trusted key blob\nfield is modified and it consequently holds the BEK in plain text.\nEvery subsequent read of that key thus send the plain text BEK instead\nof the encrypted BEK to userspace.\n\nThis issue only occurs when importing a trusted DCP-based key and\nthen exporting it again. This should rarely happen as the common use cases\nare to either create a new trusted key and export it, or import a key\nblob and then just use it without exporting it again.\n\nFix this by performing BEK decryption and encryption in a dedicated\nbuffer. Further always wipe the plain text BEK buffer to prevent leaking\nthe key via uninitialized memory.\n\nCc: stable@vger.kernel.org # v6.10+\nFixes: 2e8a0f40a39c (\"KEYS: trusted: Introduce NXP DCP-backed trusted keys\")\nSigned-off-by: David Gstir \u003cdavid@sigma-star.at\u003e\nReviewed-by: Jarkko Sakkinen \u003cjarkko@kernel.org\u003e\nSigned-off-by: Jarkko Sakkinen \u003cjarkko@kernel.org\u003e\n" }, { "commit": "6486cad00a8b7f8585983408c152bbe33dda529b", "tree": "f7f5e5b412a73f80e830e3b001f4144be5ae956c", "parents": [ "a4a35f6cbebbf9466b6c412506ab89299d567f51" ], "author": { "name": "David Gstir", "email": "david@sigma-star.at", "time": "Wed Jul 17 13:28:44 2024 +0200" }, "committer": { "name": "Jarkko Sakkinen", "email": "jarkko@kernel.org", "time": "Thu Aug 15 22:01:14 2024 +0300" }, "message": "KEYS: trusted: fix DCP blob payload length assignment\n\nThe DCP trusted key type uses the wrong helper function to store\nthe blob\u0027s payload length which can lead to the wrong byte order\nbeing used in case this would ever run on big endian architectures.\n\nFix by using correct helper function.\n\nCc: stable@vger.kernel.org # v6.10+\nFixes: 2e8a0f40a39c (\"KEYS: trusted: Introduce NXP DCP-backed trusted keys\")\nSuggested-by: Richard Weinberger \u003crichard@nod.at\u003e\nReported-by: kernel test robot \u003clkp@intel.com\u003e\nCloses: https://lore.kernel.org/oe-kbuild-all/202405240610.fj53EK0q-lkp@intel.com/\nSigned-off-by: David Gstir \u003cdavid@sigma-star.at\u003e\nReviewed-by: Jarkko Sakkinen \u003cjarkko@kernel.org\u003e\nSigned-off-by: Jarkko Sakkinen \u003cjarkko@kernel.org\u003e\n" }, { "commit": "e724918b3786252b985b0c2764c16a57d1937707", "tree": "af1edc7958a77a7da94becf684c7f429252fdb51", "parents": [ "a4a35f6cbebbf9466b6c412506ab89299d567f51", "fb6a421fb6153d97cf3058f9bd550b377b76a490" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Aug 15 11:50:07 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Aug 15 11:50:07 2024 -0700" }, "message": "Merge tag \u0027hardening-v6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux\n\nPull hardening fixes from Kees Cook:\n\n - gcc-plugins: randstruct: Remove GCC 4.7 or newer requirement\n (Thorsten Blum)\n\n - kallsyms: Clean up interaction with LTO suffixes (Song Liu)\n\n - refcount: Report UAF for refcount_sub_and_test(0) when counter\u003d\u003d0\n (Petr Pavlu)\n\n - kunit/overflow: Avoid misallocation of driver name (Ivan Orlov)\n\n* tag \u0027hardening-v6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux:\n kallsyms: Match symbols exactly with CONFIG_LTO_CLANG\n kallsyms: Do not cleanup .llvm.\u003chash\u003e suffix before sorting symbols\n kunit/overflow: Fix UB in overflow_allocation_test\n gcc-plugins: randstruct: Remove GCC 4.7 or newer requirement\n refcount: Report UAF for refcount_sub_and_test(0) when counter\u003d\u003d0\n" }, { "commit": "e30729d4bd4001881be4d1ad4332a5d4985398f8", "tree": "fd65b63f6016619dcdb203c443d52993fea3aac2", "parents": [ "008e2512dc5696ab2dc5bf264e98a9fe9ceb830e" ], "author": { "name": "Naohiro Aota", "email": "naohiro.aota@wdc.com", "time": "Thu Aug 01 16:47:52 2024 +0900" }, "committer": { "name": "David Sterba", "email": "dsterba@suse.com", "time": "Thu Aug 15 20:35:56 2024 +0200" }, "message": "btrfs: zoned: properly take lock to read/update block group\u0027s zoned variables\n\n__btrfs_add_free_space_zoned() references and modifies bg\u0027s alloc_offset,\nro, and zone_unusable, but without taking the lock. It is mostly safe\nbecause they monotonically increase (at least for now) and this function is\nmostly called by a transaction commit, which is serialized by itself.\n\nStill, taking the lock is a safer and correct option and I\u0027m going to add a\nchange to reset zone_unusable while a block group is still alive. So, add\nlocking around the operations.\n\nFixes: 169e0da91a21 (\"btrfs: zoned: track unusable bytes for zones\")\nCC: stable@vger.kernel.org # 5.15+\nReviewed-by: Johannes Thumshirn \u003cjohannes.thumshirn@wdc.com\u003e\nSigned-off-by: Naohiro Aota \u003cnaohiro.aota@wdc.com\u003e\nReviewed-by: David Sterba \u003cdsterba@suse.com\u003e\nSigned-off-by: David Sterba \u003cdsterba@suse.com\u003e\n" }, { "commit": "008e2512dc5696ab2dc5bf264e98a9fe9ceb830e", "tree": "5aaeba4a3c16b1438fe794a37822c0215a3f363d", "parents": [ "3bc2ac2f8f0b78a13140fc72022771efe0c9b778" ], "author": { "name": "Qu Wenruo", "email": "wqu@suse.com", "time": "Sun Aug 11 15:00:22 2024 +0930" }, "committer": { "name": "David Sterba", "email": "dsterba@suse.com", "time": "Thu Aug 15 20:35:52 2024 +0200" }, "message": "btrfs: tree-checker: add dev extent item checks\n\n[REPORT]\nThere is a corruption report that btrfs refused to mount a fs that has\noverlapping dev extents:\n\n BTRFS error (device sdc): dev extent devid 4 physical offset 14263979671552 overlap with previous dev extent end 14263980982272\n BTRFS error (device sdc): failed to verify dev extents against chunks: -117\n BTRFS error (device sdc): open_ctree failed\n\n[CAUSE]\nThe direct cause is very obvious, there is a bad dev extent item with\nincorrect length.\n\nWith btrfs check reporting two overlapping extents, the second one shows\nsome clue on the cause:\n\n ERROR: dev extent devid 4 offset 14263979671552 len 6488064 overlap with previous dev extent end 14263980982272\n ERROR: dev extent devid 13 offset 2257707008000 len 6488064 overlap with previous dev extent end 2257707270144\n ERROR: errors found in extent allocation tree or chunk allocation\n\nThe second one looks like a bitflip happened during new chunk\nallocation:\nhex(2257707008000) \u003d 0x20da9d30000\nhex(2257707270144) \u003d 0x20da9d70000\ndiff \u003d 0x00000040000\n\nSo it looks like a bitflip happened during new dev extent allocation,\nresulting the second overlap.\n\nCurrently we only do the dev-extent verification at mount time, but if the\ncorruption is caused by memory bitflip, we really want to catch it before\nwriting the corruption to the storage.\n\nFurthermore the dev extent items has the following key definition:\n\n\t(\u003cdevice id\u003e DEV_EXTENT \u003cphysical offset\u003e)\n\nThus we can not just rely on the generic key order check to make sure\nthere is no overlapping.\n\n[ENHANCEMENT]\nIntroduce dedicated dev extent checks, including:\n\n- Fixed member checks\n * chunk_tree should always be BTRFS_CHUNK_TREE_OBJECTID (3)\n * chunk_objectid should always be\n BTRFS_FIRST_CHUNK_CHUNK_TREE_OBJECTID (256)\n\n- Alignment checks\n * chunk_offset should be aligned to sectorsize\n * length should be aligned to sectorsize\n * key.offset should be aligned to sectorsize\n\n- Overlap checks\n If the previous key is also a dev-extent item, with the same\n device id, make sure we do not overlap with the previous dev extent.\n\nReported: Stefan N \u003cstefannnau@gmail.com\u003e\nLink: https://lore.kernel.org/linux-btrfs/CA+W5K0rSO3koYTo\u003dnzxxTm1-Pdu1HYgVxEpgJ\u003daGc7d\u003dE8mGEg@mail.gmail.com/\nCC: stable@vger.kernel.org # 5.10+\nReviewed-by: Anand Jain \u003canand.jain@oracle.com\u003e\nSigned-off-by: Qu Wenruo \u003cwqu@suse.com\u003e\nReviewed-by: David Sterba \u003cdsterba@suse.com\u003e\nSigned-off-by: David Sterba \u003cdsterba@suse.com\u003e\n" }, { "commit": "3bc2ac2f8f0b78a13140fc72022771efe0c9b778", "tree": "9e76fc7c339646aadcf53501d8e5fbc3eddc136a", "parents": [ "c0247d289e73e18f6ddb0895de30c09770fbed95" ], "author": { "name": "Jeff Layton", "email": "jlayton@kernel.org", "time": "Mon Aug 12 12:30:52 2024 -0400" }, "committer": { "name": "David Sterba", "email": "dsterba@suse.com", "time": "Thu Aug 15 20:35:44 2024 +0200" }, "message": "btrfs: update target inode\u0027s ctime on unlink\n\nUnlink changes the link count on the target inode. POSIX mandates that\nthe ctime must also change when this occurs.\n\nAccording to https://pubs.opengroup.org/onlinepubs/9699919799/functions/unlink.html:\n\n\"Upon successful completion, unlink() shall mark for update the last data\n modification and last file status change timestamps of the parent\n directory. Also, if the file\u0027s link count is not 0, the last file status\n change timestamp of the file shall be marked for update.\"\n\nSigned-off-by: Jeff Layton \u003cjlayton@kernel.org\u003e\nReviewed-by: David Sterba \u003cdsterba@suse.com\u003e\n[ add link to the opengroup docs ]\nSigned-off-by: David Sterba \u003cdsterba@suse.com\u003e\n" }, { "commit": "c0247d289e73e18f6ddb0895de30c09770fbed95", "tree": "40f5c7af1b0a089c70e810e3bc092602c6f68aac", "parents": [ "6252690f7e1b173b86a4c27dfc046b351ab423e7" ], "author": { "name": "Thorsten Blum", "email": "thorsten.blum@toblux.com", "time": "Tue Aug 13 12:53:15 2024 +0200" }, "committer": { "name": "David Sterba", "email": "dsterba@suse.com", "time": "Thu Aug 15 20:35:32 2024 +0200" }, "message": "btrfs: send: annotate struct name_cache_entry with __counted_by()\n\nAdd the __counted_by compiler attribute to the flexible array member\nname to improve access bounds-checking via CONFIG_UBSAN_BOUNDS and\nCONFIG_FORTIFY_SOURCE.\n\nSigned-off-by: Thorsten Blum \u003cthorsten.blum@toblux.com\u003e\nReviewed-by: David Sterba \u003cdsterba@suse.com\u003e\nSigned-off-by: David Sterba \u003cdsterba@suse.com\u003e\n" }, { "commit": "a4a35f6cbebbf9466b6c412506ab89299d567f51", "tree": "edc5df58c8f5ed10813cdbceb5022fe473d0fc86", "parents": [ "20573d8e1c2801d6f0cc08d26003248fd118962b", "9c5af2d7dfe18e3a36f85fad8204cd2442ecd82b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Aug 15 10:35:20 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Aug 15 10:35:20 2024 -0700" }, "message": "Merge tag \u0027net-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net\n\nPull networking fixes from Paolo Abeni:\n \"Including fixes from wireless and netfilter\n\n Current release - regressions:\n\n - udp: fall back to software USO if IPv6 extension headers are\n present\n\n - wifi: iwlwifi: correctly lookup DMA address in SG table\n\n Current release - new code bugs:\n\n - eth: mlx5e: fix queue stats access to non-existing channels splat\n\n Previous releases - regressions:\n\n - eth: mlx5e: take state lock during tx timeout reporter\n\n - eth: mlxbf_gige: disable RX filters until RX path initialized\n\n - eth: igc: fix reset adapter logics when tx mode change\n\n Previous releases - always broken:\n\n - tcp: update window clamping condition\n\n - netfilter:\n - nf_queue: drop packets with cloned unconfirmed conntracks\n - nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests\n\n - vsock: fix recursive -\u003erecvmsg calls\n\n - dsa: vsc73xx: fix MDIO bus access and PHY opera\n\n - eth: gtp: pull network headers in gtp_dev_xmit()\n\n - eth: igc: fix packet still tx after gate close by reducing i226 MAC\n retry buffer\n\n - eth: mana: fix RX buf alloc_size alignment and atomic op panic\n\n - eth: hns3: fix a deadlock problem when config TC during resetting\"\n\n* tag \u0027net-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net: (58 commits)\n net: hns3: use correct release function during uninitialization\n net: hns3: void array out of bound when loop tnl_num\n net: hns3: fix a deadlock problem when config TC during resetting\n net: hns3: use the user\u0027s cfg after reset\n net: hns3: fix wrong use of semaphore up\n selftests: net: lib: kill PIDs before del netns\n pse-core: Conditionally set current limit during PI regulator registration\n net: thunder_bgx: Fix netdev structure allocation\n net: ethtool: Allow write mechanism of LPL and both LPL and EPL\n vsock: fix recursive -\u003erecvmsg calls\n selftest: af_unix: Fix kselftest compilation warnings\n netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests\n netfilter: nf_tables: Introduce nf_tables_getobj_single\n netfilter: nf_tables: Audit log dump reset after the fact\n selftests: netfilter: add test for br_netfilter+conntrack+queue combination\n netfilter: nf_queue: drop packets with cloned unconfirmed conntracks\n netfilter: flowtable: initialise extack before use\n netfilter: nfnetlink: Initialise extack before use in ACKs\n netfilter: allow ipv6 fragments to arrive on different devices\n tcp: Update window clamping condition\n ...\n" }, { "commit": "20573d8e1c2801d6f0cc08d26003248fd118962b", "tree": "0835b02c3641eb30c353daccbaa3ee59bf1fa032", "parents": [ "6e80a1fd99fd71a2e104f45f2aeafb0cb19da44a", "63de936b513f7a9ce559194d3269ac291f4f4662" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Aug 15 10:23:19 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Aug 15 10:23:19 2024 -0700" }, "message": "Merge tag \u0027media/v6.11-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media\n\nPull media fixes from Mauro Carvalho Chehab:\n \"Two regression fixes:\n\n - fix atomisp support for ISP2400\n\n - fix dvb-usb regression for TeVii s480 dual DVB-S2 S660 board\"\n\n* tag \u0027media/v6.11-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media:\n media: atomisp: Fix streaming no longer working on BYT / ISP2400 devices\n media: Revert \"media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()\"\n" }, { "commit": "6e80a1fd99fd71a2e104f45f2aeafb0cb19da44a", "tree": "7b38fa22e7b1f66546f940ac9e7516b173d111d7", "parents": [ "1fb918967b56df3262ee984175816f0acb310501", "fa0db8e568787c665384430eaf2221b299b85367" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Aug 15 10:10:59 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Aug 15 10:10:59 2024 -0700" }, "message": "Merge tag \u0027ata-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/libata/linux\n\nPull ata fix from Niklas Cassel:\n\n - Revert a recent change to sense data generation.\n\n Sense data can be in either fixed format or descriptor format.\n\n The D_SENSE bit in the Control mode page controls which format to\n generate. All places but one respected the D_SENSE bit.\n\n The recent change fixed the one place that didn\u0027t respect the D_SENSE\n bit. However, it turns out that hdparm, hddtemp and udisks\n (incorrectly) assumes sense data in descriptor format.\n\n Therefore, even while the change was technically correct, revert it,\n since even if these user space programs are fixed to (correctly) look\n at the format type before parsing the data, older versions of these\n tools will be around roughly forever.\n\n* tag \u0027ata-6.11-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/libata/linux:\n Revert \"ata: libata-scsi: Honor the D_SENSE bit for CK_COND\u003d1 and no error\"\n" }, { "commit": "fb6a421fb6153d97cf3058f9bd550b377b76a490", "tree": "2b7d12e681ef5ed11ca5b9cb14ccf5bde56ec623", "parents": [ "020925ce92990c3bf59ab2cde386ac6d9ec734ff" ], "author": { "name": "Song Liu", "email": "song@kernel.org", "time": "Wed Aug 07 15:05:13 2024 -0700" }, "committer": { "name": "Kees Cook", "email": "kees@kernel.org", "time": "Thu Aug 15 09:33:35 2024 -0700" }, "message": "kallsyms: Match symbols exactly with CONFIG_LTO_CLANG\n\nWith CONFIG_LTO_CLANG\u003dy, the compiler may add .llvm.\u003chash\u003e suffix to\nfunction names to avoid duplication. APIs like kallsyms_lookup_name()\nand kallsyms_on_each_match_symbol() tries to match these symbol names\nwithout the .llvm.\u003chash\u003e suffix, e.g., match \"c_stop\" with symbol\nc_stop.llvm.17132674095431275852. This turned out to be problematic\nfor use cases that require exact match, for example, livepatch.\n\nFix this by making the APIs to match symbols exactly.\n\nAlso cleanup kallsyms_selftests accordingly.\n\nSigned-off-by: Song Liu \u003csong@kernel.org\u003e\nFixes: 8cc32a9bbf29 (\"kallsyms: strip LTO-only suffixes from promoted global functions\")\nTested-by: Masami Hiramatsu (Google) \u003cmhiramat@kernel.org\u003e\nReviewed-by: Masami Hiramatsu (Google) \u003cmhiramat@kernel.org\u003e\nAcked-by: Petr Mladek \u003cpmladek@suse.com\u003e\nReviewed-by: Sami Tolvanen \u003csamitolvanen@google.com\u003e\nReviewed-by: Luis Chamberlain \u003cmcgrof@kernel.org\u003e\nLink: https://lore.kernel.org/r/20240807220513.3100483-3-song@kernel.org\nSigned-off-by: Kees Cook \u003ckees@kernel.org\u003e\n" }, { "commit": "020925ce92990c3bf59ab2cde386ac6d9ec734ff", "tree": "f7212fd3cbd2bcd9521da7c1198e4e1c8e2c43f8", "parents": [ "92e9bac18124682c4b99ede9ee3bcdd68f121e92" ], "author": { "name": "Song Liu", "email": "song@kernel.org", "time": "Wed Aug 07 15:05:12 2024 -0700" }, "committer": { "name": "Kees Cook", "email": "kees@kernel.org", "time": "Thu Aug 15 09:33:34 2024 -0700" }, "message": "kallsyms: Do not cleanup .llvm.\u003chash\u003e suffix before sorting symbols\n\nCleaning up the symbols causes various issues afterwards. Let\u0027s sort\nthe list based on original name.\n\nSigned-off-by: Song Liu \u003csong@kernel.org\u003e\nFixes: 8cc32a9bbf29 (\"kallsyms: strip LTO-only suffixes from promoted global functions\")\nReviewed-by: Masami Hiramatsu (Google) \u003cmhiramat@kernel.org\u003e\nTested-by: Masami Hiramatsu (Google) \u003cmhiramat@kernel.org\u003e\nAcked-by: Petr Mladek \u003cpmladek@suse.com\u003e\nReviewed-by: Sami Tolvanen \u003csamitolvanen@google.com\u003e\nReviewed-by: Luis Chamberlain \u003cmcgrof@kernel.org\u003e\nLink: https://lore.kernel.org/r/20240807220513.3100483-2-song@kernel.org\nSigned-off-by: Kees Cook \u003ckees@kernel.org\u003e\n" }, { "commit": "92e9bac18124682c4b99ede9ee3bcdd68f121e92", "tree": "2ff0778c0fc107fb57c8400e4f03d0dad4771585", "parents": [ "f32e90c0688a3d1f8079ac18ed39b752d22e92bd" ], "author": { "name": "Ivan Orlov", "email": "ivan.orlov0322@gmail.com", "time": "Thu Aug 15 01:04:31 2024 +0100" }, "committer": { "name": "Kees Cook", "email": "kees@kernel.org", "time": "Thu Aug 15 09:24:55 2024 -0700" }, "message": "kunit/overflow: Fix UB in overflow_allocation_test\n\nThe \u0027device_name\u0027 array doesn\u0027t exist out of the\n\u0027overflow_allocation_test\u0027 function scope. However, it is being used as\na driver name when calling \u0027kunit_driver_create\u0027 from\n\u0027kunit_device_register\u0027. It produces the kernel panic with KASAN\nenabled.\n\nSince this variable is used in one place only, remove it and pass the\ndevice name into kunit_device_register directly as an ascii string.\n\nSigned-off-by: Ivan Orlov \u003civan.orlov0322@gmail.com\u003e\nReviewed-by: David Gow \u003cdavidgow@google.com\u003e\nLink: https://lore.kernel.org/r/20240815000431.401869-1-ivan.orlov0322@gmail.com\nSigned-off-by: Kees Cook \u003ckees@kernel.org\u003e\n" }, { "commit": "9bb5e74b2bf88fbb024bb15ded3b011e02c673be", "tree": "2cb591d45aba467d850a7554c1aae5294680400c", "parents": [ "ccbde4b128ef9c73d14d0d7817d68ef795f6d131" ], "author": { "name": "Griffin Kroah-Hartman", "email": "griffin@kroah.com", "time": "Thu Aug 15 11:49:20 2024 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 15 16:59:14 2024 +0200" }, "message": "Revert \"misc: fastrpc: Restrict untrusted app to attach to privileged PD\"\n\nThis reverts commit bab2f5e8fd5d2f759db26b78d9db57412888f187.\n\nJoel reported that this commit breaks userspace and stops sensors in\nSDM845 from working. Also breaks other qcom SoC devices running postmarketOS.\n\nCc: stable \u003cstable@kernel.org\u003e\nCc: Ekansh Gupta \u003cquic_ekangupt@quicinc.com\u003e\nCc: Dmitry Baryshkov \u003cdmitry.baryshkov@linaro.org\u003e\nReported-by: Joel Selvaraj \u003cjoelselvaraj.oss@gmail.com\u003e\nLink: https://lore.kernel.org/r/9a9f5646-a554-4b65-8122-d212bb665c81@umsystem.edu\nSigned-off-by: Griffin Kroah-Hartman \u003cgriffin@kroah.com\u003e\nAcked-by: Srinivas Kandagatla \u003csrinivas.kandagatla@linaro.org\u003e\nFixes: bab2f5e8fd5d (\"misc: fastrpc: Restrict untrusted app to attach to privileged PD\")\nLink: https://lore.kernel.org/r/20240815094920.8242-1-griffin@kroah.com\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "af8e119f52e9c13e556be9e03f27957554a84656", "tree": "ac1de23ac28c6cd6d3eaaaba039bf6489d85a2ec", "parents": [ "3ed486e383ccee9b0c8d727608f12a937c6603ca" ], "author": { "name": "Mathias Nyman", "email": "mathias.nyman@linux.intel.com", "time": "Thu Aug 15 17:11:17 2024 +0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 15 16:29:46 2024 +0200" }, "message": "xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration\n\nre-enumerating full-speed devices after a failed address device command\ncan trigger a NULL pointer dereference.\n\nFull-speed devices may need to reconfigure the endpoint 0 Max Packet Size\nvalue during enumeration. Usb core calls usb_ep0_reinit() in this case,\nwhich ends up calling xhci_configure_endpoint().\n\nOn Panther point xHC the xhci_configure_endpoint() function will\nadditionally check and reserve bandwidth in software. Other hosts do\nthis in hardware\n\nIf xHC address device command fails then a new xhci_virt_device structure\nis allocated as part of re-enabling the slot, but the bandwidth table\npointers are not set up properly here.\nThis triggers the NULL pointer dereference the next time usb_ep0_reinit()\nis called and xhci_configure_endpoint() tries to check and reserve\nbandwidth\n\n[46710.713538] usb 3-1: new full-speed USB device number 5 using xhci_hcd\n[46710.713699] usb 3-1: Device not responding to setup address.\n[46710.917684] usb 3-1: Device not responding to setup address.\n[46711.125536] usb 3-1: device not accepting address 5, error -71\n[46711.125594] BUG: kernel NULL pointer dereference, address: 0000000000000008\n[46711.125600] #PF: supervisor read access in kernel mode\n[46711.125603] #PF: error_code(0x0000) - not-present page\n[46711.125606] PGD 0 P4D 0\n[46711.125610] Oops: Oops: 0000 [#1] PREEMPT SMP PTI\n[46711.125615] CPU: 1 PID: 25760 Comm: kworker/1:2 Not tainted 6.10.3_2 #1\n[46711.125620] Hardware name: Gigabyte Technology Co., Ltd.\n[46711.125623] Workqueue: usb_hub_wq hub_event [usbcore]\n[46711.125668] RIP: 0010:xhci_reserve_bandwidth (drivers/usb/host/xhci.c\n\nFix this by making sure bandwidth table pointers are set up correctly\nafter a failed address device command, and additionally by avoiding\nchecking for bandwidth in cases like this where no actual endpoints are\nadded or removed, i.e. only context for default control endpoint 0 is\nevaluated.\n\nReported-by: Karel Balej \u003cbalejk@matfyz.cz\u003e\nCloses: https://lore.kernel.org/linux-usb/D3CKQQAETH47.1MUO22RTCH2O3@matfyz.cz/\nCc: stable@vger.kernel.org\nFixes: 651aaf36a7d7 (\"usb: xhci: Handle USB transaction error on address command\")\nSigned-off-by: Mathias Nyman \u003cmathias.nyman@linux.intel.com\u003e\nLink: https://lore.kernel.org/r/20240815141117.2702314-2-mathias.nyman@linux.intel.com\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "f002702290fccbd473f5bb94e52f25c96917fff2", "tree": "0a06f61b305f6095ba930f58f049b555895e2a59", "parents": [ "58bfe6674467f4c037e89111e6007f25b34d8bb3" ], "author": { "name": "Matthew Brost", "email": "matthew.brost@intel.com", "time": "Fri Jul 19 10:29:04 2024 -0700" }, "committer": { "name": "Rodrigo Vivi", "email": "rodrigo.vivi@intel.com", "time": "Thu Aug 15 09:44:22 2024 -0400" }, "message": "drm/xe: Hold a PM ref when GT TLB invalidations are inflight\n\nAvoid GT TLB invalidation timeouts by holding a PM ref when\ninvalidations are inflight.\n\nv2:\n - Drop PM ref before signaling fence (CI)\nv3:\n - Move invalidation_fence_signal helper in tlb timeout to previous\n patch (Matthew Auld)\n\nFixes: dd08ebf6c352 (\"drm/xe: Introduce a new DRM driver for Intel GPUs\")\nCc: Rodrigo Vivi \u003crodrigo.vivi@intel.com\u003e\nCc: Nirmoy Das \u003cnirmoy.das@intel.com\u003e\nSigned-off-by: Matthew Brost \u003cmatthew.brost@intel.com\u003e\nReviewed-by: Nirmoy Das \u003cnirmoy.das@intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20240719172905.1527927-4-matthew.brost@intel.com\n(cherry picked from commit 0a382f9bc5dc4744a33970a5ed4df8f9c702ee9e)\nRequires: 46209ce5287b (\"drm/xe: Add xe_gt_tlb_invalidation_fence_init\nhelper\")\nRequires: 0e414ab036e0 (\"drm/xe: Drop xe_gt_tlb_invalidation_wait\")\nSigned-off-by: Rodrigo Vivi \u003crodrigo.vivi@intel.com\u003e\n" }, { "commit": "58bfe6674467f4c037e89111e6007f25b34d8bb3", "tree": "01943138e5614b9575d8701afdfee8dadae565f9", "parents": [ "90be4cc6f7674a1478c4c750beeee3edd14aee38" ], "author": { "name": "Matthew Brost", "email": "matthew.brost@intel.com", "time": "Fri Jul 19 10:29:03 2024 -0700" }, "committer": { "name": "Rodrigo Vivi", "email": "rodrigo.vivi@intel.com", "time": "Thu Aug 15 09:44:22 2024 -0400" }, "message": "drm/xe: Drop xe_gt_tlb_invalidation_wait\n\nHaving two methods to wait on GT TLB invalidations is not ideal. Remove\nxe_gt_tlb_invalidation_wait and only use GT TLB invalidation fences.\n\nIn addition to two methods being less than ideal, once GT TLB\ninvalidations are coalesced the seqno cannot be assigned during\nxe_gt_tlb_invalidation_ggtt/range. Thus xe_gt_tlb_invalidation_wait\nwould not have a seqno to wait one. A fence however can be armed and\nlater signaled.\n\nv3:\n - Add explaination about coalescing to commit message\nv4:\n - Don\u0027t put dma fence if defined on stack (CI)\nv5:\n - Initialize ret to zero (CI)\nv6:\n - Use invalidation_fence_signal helper in tlb timeout (Matthew Auld)\n\nSigned-off-by: Matthew Brost \u003cmatthew.brost@intel.com\u003e\nReviewed-by: Nirmoy Das \u003cnirmoy.das@intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20240719172905.1527927-3-matthew.brost@intel.com\n(cherry picked from commit 61ac035361ae555ee5a17a7667fe96afdde3d59a)\nSigned-off-by: Rodrigo Vivi \u003crodrigo.vivi@intel.com\u003e\n" }, { "commit": "90be4cc6f7674a1478c4c750beeee3edd14aee38", "tree": "6cb8aaaa797f8617348d3865c408ad6099fbf34f", "parents": [ "4f7652dcd339aca6678084d42fda999ecb19b624" ], "author": { "name": "Matthew Brost", "email": "matthew.brost@intel.com", "time": "Fri Jul 19 10:29:02 2024 -0700" }, "committer": { "name": "Rodrigo Vivi", "email": "rodrigo.vivi@intel.com", "time": "Thu Aug 15 09:44:22 2024 -0400" }, "message": "drm/xe: Add xe_gt_tlb_invalidation_fence_init helper\n\nOther layers should not be touching struct xe_gt_tlb_invalidation_fence\ndirectly, add helper for initialization.\n\nv2:\n - Add dma_fence_get and list init to xe_gt_tlb_invalidation_fence_init\n\nSigned-off-by: Matthew Brost \u003cmatthew.brost@intel.com\u003e\nReviewed-by: Nirmoy Das \u003cnirmoy.das@intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20240719172905.1527927-2-matthew.brost@intel.com\n(cherry picked from commit a522b285c6b4b611406d59612a8d7241714d2e31)\nSigned-off-by: Rodrigo Vivi \u003crodrigo.vivi@intel.com\u003e\n" }, { "commit": "4f7652dcd339aca6678084d42fda999ecb19b624", "tree": "0262ef3360ecc36b067fd469ad472aff155de8e7", "parents": [ "55ea73aacfb9a92def840a7110a468c5a76caeb5" ], "author": { "name": "Michal Wajdeczko", "email": "michal.wajdeczko@intel.com", "time": "Tue Aug 06 20:05:16 2024 +0200" }, "committer": { "name": "Rodrigo Vivi", "email": "rodrigo.vivi@intel.com", "time": "Thu Aug 15 09:44:22 2024 -0400" }, "message": "drm/xe/pf: Fix VF config validation on multi-GT platforms\n\nWhen validating VF config on the media GT, we may wrongly report\nthat VF is already partially configured on it, as we consider GGTT\nand LMEM provisioning done on the primary GT (since both GGTT and\nLMEM are tile-level resources, not a GT-level).\n\nThis will cause skipping a VF auto-provisioning on the media-GT and\nin result will block a VF from successfully initialize that GT.\n\nFix that by considering GGTT and LMEM configurations only when\nchecking if a VF provisioning is complete, and omit GGTT and LMEM\nwhen reporting empty/partial provisioning.\n\nFixes: 234670cea9a2 (\"drm/xe/pf: Skip fair VFs provisioning if already provisioned\")\nSigned-off-by: Michal Wajdeczko \u003cmichal.wajdeczko@intel.com\u003e\nCc: Piotr Piórkowski \u003cpiotr.piorkowski@intel.com\u003e\nReviewed-by: Jonathan Cavitt \u003cjonathan.cavitt@intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20240806180516.618-1-michal.wajdeczko@intel.com\n(cherry picked from commit 5bdacb0907c1f531995b6ba47b832ac3a0182ae9)\nSigned-off-by: Rodrigo Vivi \u003crodrigo.vivi@intel.com\u003e\n" }, { "commit": "55ea73aacfb9a92def840a7110a468c5a76caeb5", "tree": "5014553236e54b1201f62993b7c48a7295614825", "parents": [ "64da63cd3f7d771bf8f240e72203da1f72aa3728" ], "author": { "name": "Matthew Brost", "email": "matthew.brost@intel.com", "time": "Fri Jul 19 10:29:05 2024 -0700" }, "committer": { "name": "Rodrigo Vivi", "email": "rodrigo.vivi@intel.com", "time": "Thu Aug 15 09:44:22 2024 -0400" }, "message": "drm/xe: Build PM into GuC CT layer\n\nTake PM ref when any G2H are outstanding, drop when none are\noutstanding.\n\nTo safely ensure we have PM ref when in the GuC CT layer, a PM ref needs\nto be held when scheduler messages are pending too.\n\nv2:\n - Add outer PM protections to xe_file_close (CI)\nv3:\n - Only take PM ref 0-\u003e1 and drop on 1-\u003e0 (Matthew Auld)\nv4:\n - Add assert to G2H increment function\nv5:\n - Rebase\nv6:\n - Declare xe as local variable in xe_file_close (CI)\n\nFixes: dd08ebf6c352 (\"drm/xe: Introduce a new DRM driver for Intel GPUs\")\nCc: Matthew Auld \u003cmatthew.auld@intel.com\u003e\nCc: Rodrigo Vivi \u003crodrigo.vivi@intel.com\u003e\nCc: Nirmoy Das \u003cnirmoy.das@intel.com\u003e\nSigned-off-by: Matthew Brost \u003cmatthew.brost@intel.com\u003e\nReviewed-by: Matthew Auld \u003cmatthew.auld@intel.com\u003e\nReviewed-by: Nirmoy Das \u003cnirmoy.das@intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20240719172905.1527927-5-matthew.brost@intel.com\n(cherry picked from commit d930c19fdff3109e97b610fa10943b7602efcabd)\nSigned-off-by: Rodrigo Vivi \u003crodrigo.vivi@intel.com\u003e\n" }, { "commit": "64da63cd3f7d771bf8f240e72203da1f72aa3728", "tree": "32396069aaa6e48bb492e01ee35bf3f07e9bd8e6", "parents": [ "817c70e2ba278e9d5360833b1137ef8855ac1728" ], "author": { "name": "Michal Wajdeczko", "email": "michal.wajdeczko@intel.com", "time": "Thu Jul 18 22:31:55 2024 +0200" }, "committer": { "name": "Rodrigo Vivi", "email": "rodrigo.vivi@intel.com", "time": "Thu Aug 15 09:44:22 2024 -0400" }, "message": "drm/xe/vf: Fix register value lookup\n\nWe should use the number of actual entries stored in the runtime\nregister buffer, not the maximum number of entries that this buffer\ncan hold, otherwise bsearch() may fail and we may miss the data and\nwrongly report unexpected access to some registers.\n\nFixes: 4edadc41a3a4 (\"drm/xe/vf: Use register values obtained from the PF\")\nSigned-off-by: Michal Wajdeczko \u003cmichal.wajdeczko@intel.com\u003e\nCc: Piotr Piórkowski \u003cpiotr.piorkowski@intel.com\u003e\nCc: Matt Roper \u003cmatthew.d.roper@intel.com\u003e\nReviewed-by: Matt Roper \u003cmatthew.d.roper@intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20240718203155.486-1-michal.wajdeczko@intel.com\n(cherry picked from commit ad16682db18f4414e53bba1ce0db75b08bdc4dff)\nSigned-off-by: Rodrigo Vivi \u003crodrigo.vivi@intel.com\u003e\n" }, { "commit": "817c70e2ba278e9d5360833b1137ef8855ac1728", "tree": "ea93c843d9db798c99a1bb90b0821311edf8a4eb", "parents": [ "6309f9b1fc4de2daa1293fe12a488d765e60507d" ], "author": { "name": "Umesh Nerlige Ramappa", "email": "umesh.nerlige.ramappa@intel.com", "time": "Thu Jul 18 14:05:48 2024 -0700" }, "committer": { "name": "Rodrigo Vivi", "email": "rodrigo.vivi@intel.com", "time": "Thu Aug 15 09:44:22 2024 -0400" }, "message": "drm/xe: Fix use after free when client stats are captured\n\nxe_file_close triggers an asynchronous queue cleanup and then frees up\nthe xef object. Since queue cleanup flushes all pending jobs and the KMD\nstores client usage stats into the xef object after jobs are flushed, we\nsee a use-after-free for the xef object. Resolve this by taking a\nreference to xef from xe_exec_queue.\n\nWhile at it, revert an earlier change that contained a partial work\naround for this issue.\n\nv2:\n- Take a ref to xef even for the VM bind queue (Matt)\n- Squash patches relevant to that fix and work around (Lucas)\n\nv3: Fix typo (Lucas)\n\nFixes: ce62827bc294 (\"drm/xe: Do not access xe file when updating exec queue run_ticks\")\nFixes: 6109f24f87d7 (\"drm/xe: Add helper to accumulate exec queue runtime\")\nCloses: https://gitlab.freedesktop.org/drm/xe/kernel/issues/1908\nSigned-off-by: Umesh Nerlige Ramappa \u003cumesh.nerlige.ramappa@intel.com\u003e\nReviewed-by: Matthew Brost \u003cmatthew.brost@intel.com\u003e\nReviewed-by: Lucas De Marchi \u003clucas.demarchi@intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20240718210548.3580382-5-umesh.nerlige.ramappa@intel.com\nSigned-off-by: Lucas De Marchi \u003clucas.demarchi@intel.com\u003e\n(cherry picked from commit 2149ded63079449b8dddf9da38392632f155e6b5)\nSigned-off-by: Rodrigo Vivi \u003crodrigo.vivi@intel.com\u003e\n" }, { "commit": "6309f9b1fc4de2daa1293fe12a488d765e60507d", "tree": "ed73564cd38cdd1bd34b8917753efc13c53c8c9d", "parents": [ "d28bb0120f360e772458a7cf295d6d0ae3dc18a4" ], "author": { "name": "Umesh Nerlige Ramappa", "email": "umesh.nerlige.ramappa@intel.com", "time": "Thu Jul 18 14:05:47 2024 -0700" }, "committer": { "name": "Rodrigo Vivi", "email": "rodrigo.vivi@intel.com", "time": "Thu Aug 15 09:44:21 2024 -0400" }, "message": "drm/xe: Take a ref to xe file when user creates a VM\n\nTake a reference to xef when user creates the VM and put the reference\nwhen user destroys the VM.\n\nSigned-off-by: Umesh Nerlige Ramappa \u003cumesh.nerlige.ramappa@intel.com\u003e\nReviewed-by: Matthew Brost \u003cmatthew.brost@intel.com\u003e\nReviewed-by: Lucas De Marchi \u003clucas.demarchi@intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20240718210548.3580382-4-umesh.nerlige.ramappa@intel.com\nSigned-off-by: Lucas De Marchi \u003clucas.demarchi@intel.com\u003e\n(cherry picked from commit a2387e69493df3de706f14e4573ee123d23d5d34)\nSigned-off-by: Rodrigo Vivi \u003crodrigo.vivi@intel.com\u003e\n" } ], "next": "d28bb0120f360e772458a7cf295d6d0ae3dc18a4" }