)]}' { "log": [ { "commit": "4427259cc7f7571a157fbc9b5011e1ef6fe0a4a8", "tree": "2bc97cf0b7784d1528c0658e4c643c50256dd1f7", "parents": [ "4ea7c1717f3f2344f7a1cdab4f5875cfa89c87a9", "dc20452e6caf962f04ede7f364267b0c37784ab4" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Nov 10 15:35:45 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Nov 10 15:35:45 2025 -0800" }, "message": "Merge tag \u0027riscv-for-linus-6.18-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux\n\nPull RISC-V fixes from Paul Walmsley:\n\n - fix broken clang build on versions earlier than 19 and binutils\n versions earlier than 2.38.\n\n (This exposed that we\u0027re not properly testing earlier toolchain\n versions in our linux-next builds and PR submissions. This was fixed\n for this PR, and is being addressed more generally for -next builds.)\n\n - remove some redundant Makefile code\n\n - avoid building Canaan Kendryte K210-specific code on targets that\n don\u0027t build for the K210\n\n* tag \u0027riscv-for-linus-6.18-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux:\n riscv: Fix CONFIG_AS_HAS_INSN for new .insn usage\n riscv: Remove redundant judgment for the default build target\n riscv: Build loader.bin exclusively for Canaan K210\n" }, { "commit": "4ea7c1717f3f2344f7a1cdab4f5875cfa89c87a9", "tree": "981d445641d11f9a623f7250fe233293742d4ec7", "parents": [ "e9a6fb0bcdd7609be6969112f3fbfcce3b1d4a7c", "8a4821412cf2c1429fffa07c012dd150f2edf78c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Nov 10 08:54:36 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Nov 10 08:54:36 2025 -0800" }, "message": "Merge tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/virt/kvm/kvm\n\nPull kvm fixes from Paolo Bonzini:\n \"Arm:\n\n - Fix trapping regression when no in-kernel irqchip is present\n\n - Check host-provided, untrusted ranges and offsets in pKVM\n\n - Fix regression restoring the ID_PFR1_EL1 register\n\n - Fix vgic ITS locking issues when LPIs are not directly injected\n\n Arm selftests:\n\n - Correct target CPU programming in vgic_lpi_stress selftest\n\n - Fix exposure of SCTLR2_EL2 and ZCR_EL2 in get-reg-list selftest\n\n RISC-V:\n\n - Fix check for local interrupts on riscv32\n\n - Read HGEIP CSR on the correct cpu when checking for IMSIC\n interrupts\n\n - Remove automatic I/O mapping from kvm_arch_prepare_memory_region()\n\n x86:\n\n - Inject #UD if the guest attempts to execute SEAMCALL or TDCALL as\n KVM doesn\u0027t support virtualization the instructions, but the\n instructions are gated only by VMXON. That is, they will VM-Exit\n instead of taking a #UD and until now this resulted in KVM exiting\n to userspace with an emulation error.\n\n - Unload the \"FPU\" when emulating INIT of XSTATE features if and only\n if the FPU is actually loaded, instead of trying to predict when\n KVM will emulate an INIT (CET support missed the MP_STATE path).\n Add sanity checks to detect and harden against similar bugs in the\n future.\n\n - Unregister KVM\u0027s GALog notifier (for AVIC) when kvm-amd.ko is\n unloaded.\n\n - Use a raw spinlock for svm-\u003eir_list_lock as the lock is taken\n during schedule(), and \"normal\" spinlocks are sleepable locks when\n PREEMPT_RT\u003dy.\n\n - Remove guest_memfd bindings on memslot deletion when a gmem file is\n dying to fix a use-after-free race found by syzkaller.\n\n - Fix a goof in the EPT Violation handler where KVM checks the wrong\n variable when determining if the reported GVA is valid.\n\n - Fix and simplify the handling of LBR virtualization on AMD, which\n was made buggy and unnecessarily complicated by nested VM support\n\n Misc:\n\n - Update Oliver\u0027s email address\"\n\n* tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/virt/kvm/kvm: (28 commits)\n KVM: nSVM: Fix and simplify LBR virtualization handling with nested\n KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv()\n KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated\n MAINTAINERS: Switch myself to using kernel.org address\n KVM: arm64: vgic-v3: Release reserved slot outside of lpi_xa\u0027s lock\n KVM: arm64: vgic-v3: Reinstate IRQ lock ordering for LPI xarray\n KVM: arm64: Limit clearing of ID_{AA64PFR0,PFR1}_EL1.GIC to userspace irqchip\n KVM: arm64: Set ID_{AA64PFR0,PFR1}_EL1.GIC when GICv3 is configured\n KVM: arm64: Make all 32bit ID registers fully writable\n KVM: VMX: Fix check for valid GVA on an EPT violation\n KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying\n KVM: SVM: switch to raw spinlock for svm-\u003eir_list_lock\n KVM: SVM: Make avic_ga_log_notifier() local to avic.c\n KVM: SVM: Unregister KVM\u0027s GALog notifier on kvm-amd.ko exit\n KVM: SVM: Initialize per-CPU svm_data at the end of hardware setup\n KVM: x86: Call out MSR_IA32_S_CET is not handled by XSAVES\n KVM: x86: Harden KVM against imbalanced load/put of guest FPU state\n KVM: x86: Unload \"FPU\" state on INIT if and only if its currently in-use\n KVM: arm64: Check the untrusted offset in FF-A memory share\n KVM: arm64: Check range args for pKVM mem transitions\n ...\n" }, { "commit": "e9a6fb0bcdd7609be6969112f3fbfcce3b1d4a7c", "tree": "6354d377842650f6d3b735e6940db1d9939c1983", "parents": [ "f850568efe3a7a9ec4df357cfad1f997f0058924" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Nov 09 15:10:19 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Nov 09 15:10:19 2025 -0800" }, "message": "Linux 6.18-rc5\n" }, { "commit": "f850568efe3a7a9ec4df357cfad1f997f0058924", "tree": "ac8b8c5a591b2fb5054a5a0aec1849e83a91d3f0", "parents": [ "3461e958c1052111f9729d74861cdf44fa2eda61", "6a0dddc53f6f04281b27254a7d940fb9bb2d5a3b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Nov 09 09:29:44 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Nov 09 09:29:44 2025 -0800" }, "message": "Merge tag \u0027i2c-for-6.18-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux\n\nPull i2c fix from Wolfram Sang:\n \"Two reverts merged into one commit to handle a regression caused by a\n wrong cleanup because the underlying implications were unclear\"\n\n* tag \u0027i2c-for-6.18-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux:\n i2c: muxes: pca954x: Fix broken reset-gpio usage\n" }, { "commit": "3461e958c1052111f9729d74861cdf44fa2eda61", "tree": "f12b8bd61e6d54d3f239f11ed92768774575def7", "parents": [ "439fc29dfd3b9c072dfff292d91cfa2f6cfb702b", "002621a4df3c166fab1427e8e502bc15acc26b13" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Nov 09 09:22:08 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Nov 09 09:22:08 2025 -0800" }, "message": "Merge tag \u0027kbuild-fixes-6.18-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kbuild/linux\n\nPull Kbuild fixes from Nathan Chancellor:\n\n - Strip trailing padding bytes from modules.builtin.modinfo to fix\n error during modules_install with certain versions of kmod\n\n - Drop unused static inline function warning in .c files with clang\n from W\u003d1 to W\u003d2\n\n - Ensure kernel-doc.py invocations use the PYTHON3 make variable to\n ensure user\u0027s choice of Python interpreter is always respected\n\n* tag \u0027kbuild-fixes-6.18-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kbuild/linux:\n kbuild: Let kernel-doc.py use PYTHON3 override\n compiler_types: Move unused static inline functions warning to W\u003d2\n kbuild: Strip trailing padding bytes from modules.builtin.modinfo\n" }, { "commit": "8a4821412cf2c1429fffa07c012dd150f2edf78c", "tree": "8df83bff036010c86955182b0b5ce91960e094c5", "parents": [ "fbe5e5f030c22ae717ee422aaab0e00ea84fab5e" ], "author": { "name": "Yosry Ahmed", "email": "yosry.ahmed@linux.dev", "time": "Sat Nov 08 00:45:21 2025 +0000" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Sun Nov 09 08:50:13 2025 +0100" }, "message": "KVM: nSVM: Fix and simplify LBR virtualization handling with nested\n\nThe current scheme for handling LBRV when nested is used is very\ncomplicated, especially when L1 does not enable LBRV (i.e. does not set\nLBR_CTL_ENABLE_MASK).\n\nTo avoid copying LBRs between VMCB01 and VMCB02 on every nested\ntransition, the current implementation switches between using VMCB01 or\nVMCB02 as the source of truth for the LBRs while L2 is running. If L2\nenables LBR, VMCB02 is used as the source of truth. When L2 disables\nLBR, the LBRs are copied to VMCB01 and VMCB01 is used as the source of\ntruth. This introduces significant complexity, and incorrect behavior in\nsome cases.\n\nFor example, on a nested #VMEXIT, the LBRs are only copied from VMCB02\nto VMCB01 if LBRV is enabled in VMCB01. This is because L2\u0027s writes to\nMSR_IA32_DEBUGCTLMSR to enable LBR are intercepted and propagated to\nVMCB01 instead of VMCB02. However, LBRV is only enabled in VMCB02 when\nL2 is running.\n\nThis means that if L2 enables LBR and exits to L1, the LBRs will not be\npropagated from VMCB02 to VMCB01, because LBRV is disabled in VMCB01.\n\nThere is no meaningful difference in CPUID rate in L2 when copying LBRs\non every nested transition vs. the current approach, so do the simple\nand correct thing and always copy LBRs between VMCB01 and VMCB02 on\nnested transitions (when LBRV is disabled by L1). Drop the conditional\nLBRs copying in __svm_{enable/disable}_lbrv() as it is now unnecessary.\n\nVMCB02 becomes the only source of truth for LBRs when L2 is running,\nregardless of LBRV being enabled by L1, drop svm_get_lbr_vmcb() and use\nsvm-\u003evmcb directly in its place.\n\nFixes: 1d5a1b5860ed (\"KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running\")\nCc: stable@vger.kernel.org\nSigned-off-by: Yosry Ahmed \u003cyosry.ahmed@linux.dev\u003e\nLink: https://patch.msgid.link/20251108004524.1600006-4-yosry.ahmed@linux.dev\nSigned-off-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\n" }, { "commit": "fbe5e5f030c22ae717ee422aaab0e00ea84fab5e", "tree": "4868c2c722fc5487190202a8aa34245241171271", "parents": [ "dc55b3c3f61246e483e50c85d8d5366f9567e188" ], "author": { "name": "Yosry Ahmed", "email": "yosry.ahmed@linux.dev", "time": "Sat Nov 08 00:45:20 2025 +0000" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Sun Nov 09 08:49:52 2025 +0100" }, "message": "KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv()\n\nsvm_update_lbrv() is called when MSR_IA32_DEBUGCTLMSR is updated, and on\nnested transitions where LBRV is used. It checks whether LBRV enablement\nneeds to be changed in the current VMCB, and if it does, it also\nrecalculate intercepts to LBR MSRs.\n\nHowever, there are cases where intercepts need to be updated even when\nLBRV enablement doesn\u0027t. Example scenario:\n- L1 has MSR_IA32_DEBUGCTLMSR cleared.\n- L1 runs L2 without LBR_CTL_ENABLE (no LBRV).\n- L2 sets DEBUGCTLMSR_LBR in MSR_IA32_DEBUGCTLMSR, svm_update_lbrv()\n sets LBR_CTL_ENABLE in VMCB02 and disables intercepts to LBR MSRs.\n- L2 exits to L1, svm_update_lbrv() is not called on this transition.\n- L1 clears MSR_IA32_DEBUGCTLMSR, svm_update_lbrv() finds that\n LBR_CTL_ENABLE is already cleared in VMCB01 and does nothing.\n- Intercepts remain disabled, L1 reads to LBR MSRs read the host MSRs.\n\nFix it by always recalculating intercepts in svm_update_lbrv().\n\nFixes: 1d5a1b5860ed (\"KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running\")\nCc: stable@vger.kernel.org\nSigned-off-by: Yosry Ahmed \u003cyosry.ahmed@linux.dev\u003e\nLink: https://patch.msgid.link/20251108004524.1600006-3-yosry.ahmed@linux.dev\nSigned-off-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\n" }, { "commit": "dc55b3c3f61246e483e50c85d8d5366f9567e188", "tree": "94b3d5c28d3a2bb02076c1d01e0c80584effe0f3", "parents": [ "ca00c3af8ede65d16097d322be330146d9231bd2" ], "author": { "name": "Yosry Ahmed", "email": "yosry.ahmed@linux.dev", "time": "Sat Nov 08 00:45:19 2025 +0000" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Sun Nov 09 08:49:48 2025 +0100" }, "message": "KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated\n\nThe APM lists the DbgCtlMsr field as being tracked by the VMCB_LBR clean\nbit. Always clear the bit when MSR_IA32_DEBUGCTLMSR is updated.\n\nThe history is complicated, it was correctly cleared for L1 before\ncommit 1d5a1b5860ed (\"KVM: x86: nSVM: correctly virtualize LBR msrs when\nL2 is running\"). At that point svm_set_msr() started to rely on\nsvm_update_lbrv() to clear the bit, but when nested virtualization\nis enabled the latter does not always clear it even if MSR_IA32_DEBUGCTLMSR\nchanged. Go back to clearing it directly in svm_set_msr().\n\nFixes: 1d5a1b5860ed (\"KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running\")\nReported-by: Matteo Rizzo \u003cmatteorizzo@google.com\u003e\nReported-by: evn@google.com\nCo-developed-by: Jim Mattson \u003cjmattson@google.com\u003e\nSigned-off-by: Jim Mattson \u003cjmattson@google.com\u003e\nSigned-off-by: Yosry Ahmed \u003cyosry.ahmed@linux.dev\u003e\nLink: https://patch.msgid.link/20251108004524.1600006-2-yosry.ahmed@linux.dev\nCc: stable@vger.kernel.org\nSigned-off-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\n" }, { "commit": "ca00c3af8ede65d16097d322be330146d9231bd2", "tree": "ae6e1bc56ee2ae7bb07740fbcb122761dfcc1d4e", "parents": [ "0e5ba55750c1f7fb194a0022b8c887e6413da9b1", "4af235bf645516481a82227d82d1352b9788903a" ], "author": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Sun Nov 09 08:07:55 2025 +0100" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Sun Nov 09 08:07:55 2025 +0100" }, "message": "Merge tag \u0027kvmarm-fixes-6.18-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kvmarm/kvmarm into HEAD\n\nKVM/arm654 fixes for 6.18, take #2\n\n* Core fixes\n\n - Fix trapping regression when no in-kernel irqchip is present\n (20251021094358.1963807-1-sascha.bischoff@arm.com)\n\n - Check host-provided, untrusted ranges and offsets in pKVM\n (20251016164541.3771235-1-vdonnefort@google.com)\n (20251017075710.2605118-1-sebastianene@google.com)\n\n - Fix regression restoring the ID_PFR1_EL1 register\n (20251030122707.2033690-1-maz@kernel.org\n\n - Fix vgic ITS locking issues when LPIs are not directly injected\n (20251107184847.1784820-1-oupton@kernel.org)\n\n* Test fixes\n\n - Correct target CPU programming in vgic_lpi_stress selftest\n (20251020145946.48288-1-mdittgen@amazon.de)\n\n - Fix exposure of SCTLR2_EL2 and ZCR_EL2 in get-reg-list selftest\n (20251023-b4-kvm-arm64-get-reg-list-sctlr-el2-v1-1-088f88ff992a@kernel.org)\n (20251024-kvm-arm64-get-reg-list-zcr-el2-v1-1-0cd0ff75e22f@kernel.org)\n\n* Misc\n\n - Update Oliver\u0027s email address\n (20251107012830.1708225-1-oupton@kernel.org)\n" }, { "commit": "0e5ba55750c1f7fb194a0022b8c887e6413da9b1", "tree": "bccd6a8e43ecdd462739aed7bf10620dfba35389", "parents": [ "36567f1de1b3324ab0cfef313882842dd3d75524", "d0164c161923ac303bd843e04ebe95cfd03c6e19" ], "author": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Sun Nov 09 08:07:32 2025 +0100" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Sun Nov 09 08:07:32 2025 +0100" }, "message": "Merge tag \u0027kvm-x86-fixes-6.18-rc5\u0027 of https://github.com/kvm-x86/linux into HEAD\n\nKVM x86 fixes for 6.18:\n\n - Inject #UD if the guest attempts to execute SEAMCALL or TDCALL as KVM\n doesn\u0027t support virtualization the instructions, but the instructions\n are gated only by VMXON, i.e. will VM-Exit instead of taking a #UD and\n thus result in KVM exiting to userspace with an emulation error.\n\n - Unload the \"FPU\" when emulating INIT of XSTATE features if and only if\n the FPU is actually loaded, instead of trying to predict when KVM will\n emulate an INIT (CET support missed the MP_STATE path). Add sanity\n checks to detect and harden against similar bugs in the future.\n\n - Unregister KVM\u0027s GALog notifier (for AVIC) when kvm-amd.ko is unloaded.\n\n - Use a raw spinlock for svm-\u003eir_list_lock as the lock is taken during\n schedule(), and \"normal\" spinlocks are sleepable locks when PREEMPT_RT\u003dy.\n\n - Remove guest_memfd bindings on memslot deletion when a gmem file is dying\n to fix a use-after-free race found by syzkaller.\n\n - Fix a goof in the EPT Violation handler where KVM checks the wrong\n variable when determining if the reported GVA is valid.\n" }, { "commit": "36567f1de1b3324ab0cfef313882842dd3d75524", "tree": "92b2979ad49e90979986e00d4ee171148e7afa55", "parents": [ "6146a0f1dfae5d37442a9ddcba012add260bceb0", "8c5fa3764facaad6d38336e90f406c2c11d69733" ], "author": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Sun Nov 09 08:07:03 2025 +0100" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Sun Nov 09 08:07:03 2025 +0100" }, "message": "Merge tag \u0027kvm-riscv-fixes-6.18-2\u0027 of https://github.com/kvm-riscv/linux into HEAD\n\nKVM/riscv fixes for 6.18, take #2\n\n- Fix check for local interrupts on riscv32\n- Read HGEIP CSR on the correct cpu when checking for IMSIC interrupts\n- Remove automatic I/O mapping from kvm_arch_prepare_memory_region()\n" }, { "commit": "002621a4df3c166fab1427e8e502bc15acc26b13", "tree": "f3aa2828207a3c0e103ca741300249207ef7f298", "parents": [ "9818af18db4bfefd320d0fef41390a616365e6f7" ], "author": { "name": "Jean Delvare", "email": "jdelvare@suse.de", "time": "Fri Nov 07 19:29:33 2025 +0100" }, "committer": { "name": "Nathan Chancellor", "email": "nathan@kernel.org", "time": "Sat Nov 08 19:42:22 2025 -0700" }, "message": "kbuild: Let kernel-doc.py use PYTHON3 override\n\nIt is possible to force a specific version of python to be used when\nbuilding the kernel by passing PYTHON3\u003d on the make command line.\nHowever kernel-doc.py is currently called with python3 hard-coded and\nthus ignores this setting.\n\nUse $(PYTHON3) to run $(KERNELDOC) so that the desired version of\npython is used.\n\nSigned-off-by: Jean Delvare \u003cjdelvare@suse.de\u003e\nReviewed-by: Nicolas Schier \u003cnsc@kernel.org\u003e\nReviewed-by: Mauro Carvalho Chehab \u003cmchehab+huawei@kernel.org\u003e\nLink: https://patch.msgid.link/20251107192933.2bfe9e57@endymion\nSigned-off-by: Nathan Chancellor \u003cnathan@kernel.org\u003e\n" }, { "commit": "439fc29dfd3b9c072dfff292d91cfa2f6cfb702b", "tree": "dd04a973f949da731229a702b19a624717a2e9bd", "parents": [ "41d318c47fa2090dbca7329037e5d63abeddebdf", "411336159064c5e89e8b89d30c6855db4bb92814" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 08 15:37:03 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 08 15:37:03 2025 -0800" }, "message": "Merge tag \u0027drm-fixes-2025-11-09\u0027 of https://gitlab.freedesktop.org/drm/kernel\n\nPull drm fix from Dave Airlie:\n \"Brown paper bag, the dma mask fix which I applied and actually looked\n through for bad things, actually broke newer GPUs, there might be some\n latent part in the boot path that is assuming 32-bit still, but we\n will figure that out elsewhere.\n\n nouveau:\n - revert DMA mask change\"\n\n* tag \u0027drm-fixes-2025-11-09\u0027 of https://gitlab.freedesktop.org/drm/kernel:\n Revert \"drm/nouveau: set DMA mask before creating the flush page\"\n" }, { "commit": "41d318c47fa2090dbca7329037e5d63abeddebdf", "tree": "99afb2a49d78d7ca9ef7cd5ad03c683804e29fa3", "parents": [ "7bb4d6512545a792a6cd8d6c8be5718920b9b11a", "162f24cbb0f6ec596e7e9f3e91610d79dc805229" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 08 15:34:23 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 08 15:34:23 2025 -0800" }, "message": "Merge tag \u0027rtc-6.18-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/abelloni/linux\n\nPull RTC fixes from Alexandre Belloni:\n \"The two reverts are for patches that I shouldn\u0027t have applied. The\n rx8025 patch fixes an issue present since 2022:\n\n - cpcap, tps6586x: revert incorrect irq enable/disable balance fix\n\n - rx8025: fix incorrect register reference\"\n\n* tag \u0027rtc-6.18-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/abelloni/linux:\n rtc: rx8025: fix incorrect register reference\n Revert \"rtc: cpcap: Fix initial enable_irq/disable_irq balance\"\n Revert \"rtc: tps6586x: Fix initial enable_irq/disable_irq balance\"\n" }, { "commit": "162f24cbb0f6ec596e7e9f3e91610d79dc805229", "tree": "4e5b1201d206ff7bbdf7f386c46ee27c53c8d115", "parents": [ "0d510778c2f4913b5ca062b8a538929bff94e0be" ], "author": { "name": "Yuta Hayama", "email": "hayama@lineo.co.jp", "time": "Wed Oct 15 12:07:05 2025 +0900" }, "committer": { "name": "Alexandre Belloni", "email": "alexandre.belloni@bootlin.com", "time": "Sat Nov 08 20:56:12 2025 +0100" }, "message": "rtc: rx8025: fix incorrect register reference\n\nThis code is intended to operate on the CTRL1 register, but ctrl[1] is\nactually CTRL2. Correctly, ctrl[0] is CTRL1.\n\nSigned-off-by: Yuta Hayama \u003chayama@lineo.co.jp\u003e\nFixes: 71af91565052 (\"rtc: rx8025: fix 12/24 hour mode detection on RX-8035\")\nCc: stable@vger.kernel.org\nLink: https://patch.msgid.link/eae5f479-5d28-4a37-859d-d54794e7628c@lineo.co.jp\nSigned-off-by: Alexandre Belloni \u003calexandre.belloni@bootlin.com\u003e\n" }, { "commit": "7bb4d6512545a792a6cd8d6c8be5718920b9b11a", "tree": "795d72ec3d432b4e7dd7d0d63015f4945b9d3df6", "parents": [ "0d7bee10beeb59b1133bf5a4749b17a4ef3bbb01", "4012abe8a78fbb8869634130024266eaef7081fe" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 08 10:17:30 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 08 10:17:30 2025 -0800" }, "message": "Merge tag \u0027v6.18rc4-SMB-client-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6\n\nPull smb client fixes from Steve French:\n\n - Fix change notify packet validation check\n\n - Refcount fix (e.g. rename error paths)\n\n - Fix potential UAF due to missing locks on directory lease refcount\n\n* tag \u0027v6.18rc4-SMB-client-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6:\n smb: client: validate change notify buffer before copy\n smb: client: fix refcount leak in smb2_set_path_attr\n smb: client: fix potential UAF in smb2_close_cached_fid()\n" }, { "commit": "0d7bee10beeb59b1133bf5a4749b17a4ef3bbb01", "tree": "2e18fabc6065cf3b304d652caee38e6acf7e8b1d", "parents": [ "b5c0946029200d93f1239d3f310efa3f075abf79", "d23550efc6800841b4d1639784afaebdea946ae0" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 08 09:01:11 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 08 09:01:11 2025 -0800" }, "message": "Merge tag \u0027x86-urgent-2025-11-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull x86 fixes from Ingo Molnar:\n\n - Fix AMD PCI root device caching regression that triggers\n on certain firmware variants\n\n - Fix the zen5_rdseed_microcode[] array to be NULL-terminated\n\n - Add more AMD models to microcode signature checking\n\n* tag \u0027x86-urgent-2025-11-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n x86/microcode/AMD: Add more known models to entry sign checking\n x86/CPU/AMD: Add missing terminator for zen5_rdseed_microcode\n x86/amd_node: Fix AMD root device caching\n" }, { "commit": "b5c0946029200d93f1239d3f310efa3f075abf79", "tree": "70f9477d6a3d2e39e2f7d6a79d611a37e91e4698", "parents": [ "133262cae98fcc0d36fec97213b69268eb166fd5", "956dfda6a70885f18c0f8236a461aa2bc4f556ad" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 08 08:59:05 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 08 08:59:05 2025 -0800" }, "message": "Merge tag \u0027sched-urgent-2025-11-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull scheduler fix from Ingo Molnar:\n \"Fix a group-throttling bug in the fair scheduler\"\n\n* tag \u0027sched-urgent-2025-11-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n sched/fair: Prevent cfs_rq from being unthrottled with zero runtime_remaining\n" }, { "commit": "133262cae98fcc0d36fec97213b69268eb166fd5", "tree": "e19491104bb7a3e95d13d2ef8042d4e5b8bb0539", "parents": [ "e6f55fe790a698aba6f98bf6ae4f1c04246c5040", "eb3182ef0405ff2f6668fd3e5ff9883f60ce8801" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 08 08:54:13 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 08 08:54:13 2025 -0800" }, "message": "Merge tag \u0027perf-urgent-2025-11-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull perf event fix from Ingo Molnar:\n \"Fix a system hang caused by cpu-clock events deadlock\"\n\n* tag \u0027perf-urgent-2025-11-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n perf/core: Fix system hang caused by cpu-clock usage\n" }, { "commit": "e6f55fe790a698aba6f98bf6ae4f1c04246c5040", "tree": "431a16b87d584c502cd84d02330d6bcc35d81532", "parents": [ "3636cfa745e6a4ff0142e29068750439059867b0", "4cb5ac2626b5704ed712ac1d46b9d89fdfc12c5d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 08 08:51:22 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 08 08:51:22 2025 -0800" }, "message": "Merge tag \u0027locking-urgent-2025-11-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull locking fix from Ingo Molnar:\n \"Fix (well, cut in half) a futex performance regression on PowerPC\"\n\n* tag \u0027locking-urgent-2025-11-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n futex: Optimize per-cpu reference counting\n" }, { "commit": "3636cfa745e6a4ff0142e29068750439059867b0", "tree": "1144be8aaa4fcac672f83f4ecdf86e403c1e9ed7", "parents": [ "e284d5118ac3e430da32820215c08b2787de8eef", "146eb58629f45f8297e83d69e64d4eea4b28d972" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 08 08:47:31 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 08 08:47:31 2025 -0800" }, "message": "Merge tag \u0027io_uring-6.18-20251107\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux\n\nPull io_uring fix from Jens Axboe:\n \"Single fix in there, fixing an overflow in calculating the needed\n segments for converting into a bvec array\"\n\n* tag \u0027io_uring-6.18-20251107\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux:\n io_uring: fix regbuf vector size truncation\n" }, { "commit": "e284d5118ac3e430da32820215c08b2787de8eef", "tree": "7bec2588f4d85e92842338dae0c6b22187a72e50", "parents": [ "e811c33b1f137be26a20444b79db8cbc1fca1c89", "d8a823c6f04ef03e3bd7249d2e796da903e7238d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 08 08:43:01 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 08 08:43:01 2025 -0800" }, "message": "Merge tag \u0027xfs-fixes-6.18-rc5\u0027 of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux\n\nPull xfs fixes from Carlos Maiolino:\n \"This contain fixes for the RT and zoned allocator, and a few fixes for\n atomic writes\"\n\n* tag \u0027xfs-fixes-6.18-rc5\u0027 of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux:\n xfs: free xfs_busy_extents structure when no RT extents are queued\n xfs: fix zone selection in xfs_select_open_zone_mru\n xfs: fix a rtgroup leak when xfs_init_zone fails\n xfs: fix various problems in xfs_atomic_write_cow_iomap_begin\n xfs: fix delalloc write failures in software-provided atomic writes\n" }, { "commit": "4af235bf645516481a82227d82d1352b9788903a", "tree": "be3987451b80bcf2c2709936c9ca9669e9bfe633", "parents": [ "66768669f27d98b45b20ed401cca913c387a9934" ], "author": { "name": "Oliver Upton", "email": "oupton@kernel.org", "time": "Thu Nov 06 17:28:25 2025 -0800" }, "committer": { "name": "Marc Zyngier", "email": "maz@kernel.org", "time": "Sat Nov 08 11:21:20 2025 +0000" }, "message": "MAINTAINERS: Switch myself to using kernel.org address\n\nI\u0027ve been running into issues with the linux.dev email\nsemi-periodically, switching to my kernel.org address while I go figure\nout a better home for my inbox.\n\nSigned-off-by: Oliver Upton \u003coupton@kernel.org\u003e\nLink: https://patch.msgid.link/20251107012830.1708225-1-oupton@kernel.org\nSigned-off-by: Marc Zyngier \u003cmaz@kernel.org\u003e\n" }, { "commit": "66768669f27d98b45b20ed401cca913c387a9934", "tree": "1778be58e551f654c67aa20683a005a5fa28af3f", "parents": [ "75360a9a338580990c1ee188d40a838c025bbd30" ], "author": { "name": "Oliver Upton", "email": "oupton@kernel.org", "time": "Fri Nov 07 10:48:47 2025 -0800" }, "committer": { "name": "Marc Zyngier", "email": "maz@kernel.org", "time": "Sat Nov 08 11:19:32 2025 +0000" }, "message": "KVM: arm64: vgic-v3: Release reserved slot outside of lpi_xa\u0027s lock\n\nxa_release() expects to be called outside of the xa_lock. Fix\nvgic_add_lpi() to drop the lock before calling and restructure to get\nrid of the goto label.\n\nReported-by: Zenghui Yu \u003cyuzenghui@huawei.com\u003e\nCloses: https://lore.kernel.org/kvmarm/d0853e82-7d95-5025-7abf-c6f1e0cdf7b5@huawei.com/\nFixes: 481c9ee846d2 (\"KVM: arm64: vgic-its: Get rid of the lpi_list_lock\")\nSigned-off-by: Oliver Upton \u003coupton@kernel.org\u003e\nLink: https://patch.msgid.link/20251107184847.1784820-3-oupton@kernel.org\nSigned-off-by: Marc Zyngier \u003cmaz@kernel.org\u003e\n" }, { "commit": "75360a9a338580990c1ee188d40a838c025bbd30", "tree": "7aae4dc636ee0a70ecf2ed2bef6e9905739ce28a", "parents": [ "50e7cce81b9b2fbd6f0104c1698959d45ce3cf58" ], "author": { "name": "Oliver Upton", "email": "oupton@kernel.org", "time": "Fri Nov 07 10:48:46 2025 -0800" }, "committer": { "name": "Marc Zyngier", "email": "maz@kernel.org", "time": "Sat Nov 08 11:19:32 2025 +0000" }, "message": "KVM: arm64: vgic-v3: Reinstate IRQ lock ordering for LPI xarray\n\nZenghui reports that running a KVM guest with an assigned device and\nlockdep enabled produces an unfriendly splat due to an inconsistent irq\ncontext when taking the lpi_xa\u0027s spinlock.\n\nThis is no good as in rare cases the last reference to an LPI can get\ndropped after injection of a cached LPI translation. In this case,\nvgic_put_irq() will release the IRQ struct and take the lpi_xa\u0027s\nspinlock to erase it from the xarray.\n\nReinstate the IRQ ordering and update the lockdep hint accordingly. Note\nthat there is no irqsave equivalent of might_lock(), so just explictly\ngrab and release the spinlock on lockdep kernels.\n\nReported-by: Zenghui Yu \u003cyuzenghui@huawei.com\u003e\nCloses: https://lore.kernel.org/kvmarm/b4d7cb0f-f007-0b81-46d1-998b15cc14bc@huawei.com/\nFixes: 982f31bbb5b0 (\"KVM: arm64: vgic-v3: Don\u0027t require IRQs be disabled for LPI xarray lock\")\nSigned-off-by: Oliver Upton \u003coupton@kernel.org\u003e\nLink: https://patch.msgid.link/20251107184847.1784820-2-oupton@kernel.org\nSigned-off-by: Marc Zyngier \u003cmaz@kernel.org\u003e\n" }, { "commit": "50e7cce81b9b2fbd6f0104c1698959d45ce3cf58", "tree": "8e5b776685d3274344a4b804debcf3922f07c781", "parents": [ "8a9866ff860052efc5f9766f3f87fae30c983156" ], "author": { "name": "Marc Zyngier", "email": "maz@kernel.org", "time": "Thu Oct 30 12:27:07 2025 +0000" }, "committer": { "name": "Marc Zyngier", "email": "maz@kernel.org", "time": "Sat Nov 08 11:17:28 2025 +0000" }, "message": "KVM: arm64: Limit clearing of ID_{AA64PFR0,PFR1}_EL1.GIC to userspace irqchip\n\nNow that the idreg\u0027s GIC field is in sync with the irqchip, limit\nthe runtime clearing of these fields to the pathological case where\nwe do not have an in-kernel GIC.\n\nWhile we\u0027re at it, use the existing API instead of open-coded\naccessors to access the ID regs.\n\nFixes: 5cb57a1aff755 (\"KVM: arm64: Zero ID_AA64PFR0_EL1.GIC when no GICv3 is presented to the guest\")\nReviewed-by: Oliver Upton \u003coupton@kernel.org\u003e\nLink: https://patch.msgid.link/20251030122707.2033690-4-maz@kernel.org\nSigned-off-by: Marc Zyngier \u003cmaz@kernel.org\u003e\n" }, { "commit": "8a9866ff860052efc5f9766f3f87fae30c983156", "tree": "d0c151131fe80c76d33e596a228c0da360b48f8f", "parents": [ "3f9eacf4f0705876a5d6526d7d320ca91d7d7a16" ], "author": { "name": "Marc Zyngier", "email": "maz@kernel.org", "time": "Thu Oct 30 12:27:06 2025 +0000" }, "committer": { "name": "Marc Zyngier", "email": "maz@kernel.org", "time": "Sat Nov 08 11:17:28 2025 +0000" }, "message": "KVM: arm64: Set ID_{AA64PFR0,PFR1}_EL1.GIC when GICv3 is configured\n\nDrive the idreg fields indicating the presence of GICv3 directly from\nthe vgic code. This avoids having to do any sort of runtime clearing\nof the idreg.\n\nFixes: 5cb57a1aff755 (\"KVM: arm64: Zero ID_AA64PFR0_EL1.GIC when no GICv3 is presented to the guest\")\nReviewed-by: Oliver Upton \u003coupton@kernel.org\u003e\nLink: https://patch.msgid.link/20251030122707.2033690-3-maz@kernel.org\nSigned-off-by: Marc Zyngier \u003cmaz@kernel.org\u003e\n" }, { "commit": "3f9eacf4f0705876a5d6526d7d320ca91d7d7a16", "tree": "fa87851f1b8976875ea24c94fda8338f45d17ee1", "parents": [ "103e17aac09cdd358133f9e00998b75d6c1f1518" ], "author": { "name": "Marc Zyngier", "email": "maz@kernel.org", "time": "Thu Oct 30 12:27:05 2025 +0000" }, "committer": { "name": "Marc Zyngier", "email": "maz@kernel.org", "time": "Sat Nov 08 11:17:28 2025 +0000" }, "message": "KVM: arm64: Make all 32bit ID registers fully writable\n\n32bit ID registers aren\u0027t getting much love these days, and are\noften missed in updates. One of these updates broke restoring\na GICv2 guest on a GICv3 machine.\n\nInstead of performing a piecemeal fix, just bite the bullet\nand make all 32bit ID regs fully writable. KVM itself never\nrelies on them for anything, and if the VMM wants to mess up\nthe guest, so be it.\n\nFixes: 5cb57a1aff755 (\"KVM: arm64: Zero ID_AA64PFR0_EL1.GIC when no GICv3 is presented to the guest\")\nReported-by: Peter Maydell \u003cpeter.maydell@linaro.org\u003e\nCc: stable@vger.kernel.org\nReviewed-by: Oliver Upton \u003coupton@kernel.org\u003e\nLink: https://patch.msgid.link/20251030122707.2033690-2-maz@kernel.org\nSigned-off-by: Marc Zyngier \u003cmaz@kernel.org\u003e\n" }, { "commit": "411336159064c5e89e8b89d30c6855db4bb92814", "tree": "7d882d86045288e28ee8381e1931d6119cbd57a3", "parents": [ "d439acbbfb9a982f152c5f806b4592431a80c4fd" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Sat Nov 08 19:41:09 2025 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Sat Nov 08 19:41:09 2025 +1000" }, "message": "Revert \"drm/nouveau: set DMA mask before creating the flush page\"\n\nThis reverts commit ebe755605082eddff80eafe0c50915b1366ee98f.\n\nTested the latest kernel on my GB203 and this seems to break it somehow.\n\nNov 09 04:16:14 bighp kernel: nouveau 0000:02:00.0: gsp: GSP-FMC boot failed (mbox: 0x0000000b)\nNov 09 04:16:14 bighp kernel: nouveau 0000:02:00.0: gsp: init failed, -5\nNov 09 04:16:14 bighp kernel: nouveau 0000:02:00.0: init failed with -5\nNov 09 04:16:14 bighp kernel: nouveau: drm:00000000:00000080: init failed with -5\nNov 09 04:16:14 bighp kernel: nouveau 0000:02:00.0: drm: Device allocation failed: -5\nNov 09 04:16:14 bighp kernel: nouveau 0000:02:00.0: probe with driver nouveau failed with error -5\n\nNot sure why, I went over the patch and thought it should have worked, but there must be some\n32-bit problem maybe in the FMC boot path.\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n" }, { "commit": "dc20452e6caf962f04ede7f364267b0c37784ab4", "tree": "3b52ae8c61beaaabb858a6db3e3dd8a330af9cd3", "parents": [ "5e8632987dd1882ed4d1e1039032ab1b0c1ec12b" ], "author": { "name": "Nathan Chancellor", "email": "nathan@kernel.org", "time": "Fri Nov 07 14:56:59 2025 -0700" }, "committer": { "name": "Paul Walmsley", "email": "pjw@kernel.org", "time": "Fri Nov 07 17:39:07 2025 -0700" }, "message": "riscv: Fix CONFIG_AS_HAS_INSN for new .insn usage\n\nAfter commit 44aa25c000b4 (\"riscv: asm: use .insn for making custom\ninstructions\"), builds using LLVM older that 19 or binutils older than\n2.38 fail with:\n\n arch/riscv/include/asm/vdso/processor.h: Assembler messages:\n arch/riscv/include/asm/vdso/processor.h:27: Error: unrecognized opcode `0x100000f\u0027\n arch/riscv/include/asm/vdso/processor.h:27: Error: unrecognized opcode `0x100000f\u0027\n arch/riscv/include/asm/vdso/processor.h:27: Error: unrecognized opcode `0x100000f\u0027\n arch/riscv/include/asm/vdso/processor.h:27: Error: unrecognized opcode `0x100000f\u0027\n make[4]: *** [scripts/Makefile.build:287: arch/riscv/kernel/vdso/vgettimeofday.o] Error 1\n\n In file included from \u003cbuilt-in\u003e:4:\n In file included from lib/vdso/gettimeofday.c:6:\n In file included from include/vdso/datapage.h:21:\n In file included from include/vdso/processor.h:10:\n arch/riscv/include/asm/vdso/processor.h:23:2: error: expected instruction format\n 23 | ALT_RISCV_PAUSE();\n | ^\n arch/riscv/include/asm/errata_list.h:47:3: note: expanded from macro \u0027ALT_RISCV_PAUSE\u0027\n 47 | RISCV_PAUSE, /* Original RISC‑V pause insn */ \\\n | ^\n arch/riscv/include/asm/insn-def.h:259:21: note: expanded from macro \u0027RISCV_PAUSE\u0027\n 259 | #define RISCV_PAUSE ASM_INSN_I(\"0x100000f\")\n | ^\n arch/riscv/include/asm/asm.h:16:26: note: expanded from macro \u0027ASM_INSN_I\u0027\n 16 | #define ASM_INSN_I(__x) \".insn \" __x\n | ^\n \u003cinline asm\u003e:5:7: note: instantiated into assembly here\n 5 | .insn 0x100000f\n | ^\n\nbinutils gained support for \u0027.insn \u003cvalue\u003e\u0027 in 2.38 [1] and LLVM gained\nsupport in 19 [2]. Adjust the test for CONFIG_AS_HAS_INSN to ensure that\nall versions of .insn are supported before being used.\n\nFixes: 44aa25c000b4 (\"riscv: asm: use .insn for making custom instructions\")\nLink: https://sourceware.org/git/?p\u003dbinutils-gdb.git;a\u003dcommit;h\u003da262b82fdbf4cda3b0648b1adc32245ca3f78b7a [1]\nLink: https://github.com/llvm/llvm-project/commit/2a086dce691e3cc34a2fc27f4fb255bb2cbbfac9 [2]\nSuggested-by: Andrew Jones \u003cajones@ventanamicro.com\u003e\nSigned-off-by: Nathan Chancellor \u003cnathan@kernel.org\u003e\nReviewed-by: Andrew Jones \u003cajones@ventanamicro.com\u003e\nLink: https://patch.msgid.link/20251107-riscv-fix-new-insn-usage-v1-1-9a186c5928a0@kernel.org\nSigned-off-by: Paul Walmsley \u003cpjw@kernel.org\u003e" }, { "commit": "5e8632987dd1882ed4d1e1039032ab1b0c1ec12b", "tree": "265326d33fce73a25e6d599a94b3b58f9ab0816d", "parents": [ "3ad1b71fdc5707d14332d9ae710a237de936be9b" ], "author": { "name": "Feng Jiang", "email": "jiangfeng@kylinos.cn", "time": "Wed Oct 29 17:44:29 2025 +0800" }, "committer": { "name": "Paul Walmsley", "email": "pjw@kernel.org", "time": "Fri Nov 07 17:39:07 2025 -0700" }, "message": "riscv: Remove redundant judgment for the default build target\n\nThe value of KBUILD_IMAGE is derived from $(boot-image-y),\nso there\u0027s no need for redundant checks before this.\n\nSigned-off-by: Feng Jiang \u003cjiangfeng@kylinos.cn\u003e\nReviewed-by: Emil Renner Berthing \u003cemil.renner.berthing@canonical.com\u003e\nLink: https://lore.kernel.org/r/20251029094429.553842-2-jiangfeng@kylinos.cn\nSigned-off-by: Paul Walmsley \u003cpjw@kernel.org\u003e" }, { "commit": "3ad1b71fdc5707d14332d9ae710a237de936be9b", "tree": "e011c75180c33b1193151fd2015a81c10946eaa0", "parents": [ "225a97d6d45456a7627633da09cb842a43ef1b85" ], "author": { "name": "Feng Jiang", "email": "jiangfeng@kylinos.cn", "time": "Wed Oct 29 17:44:28 2025 +0800" }, "committer": { "name": "Paul Walmsley", "email": "pjw@kernel.org", "time": "Fri Nov 07 17:39:06 2025 -0700" }, "message": "riscv: Build loader.bin exclusively for Canaan K210\n\nAccording to the explanation in commit ef10bdf9c3e6 (\"riscv:\nKconfig.socs: Split ARCH_CANAAN and SOC_CANAAN_K210\"),\nloader.bin is a special feature of the Canaan K210 and\nis not applicable to other SoCs.\n\nFixes: e79dfcbfb902 (\"riscv: make image compression configurable\")\nSigned-off-by: Feng Jiang \u003cjiangfeng@kylinos.cn\u003e\nReviewed-by: Emil Renner Berthing \u003cemil.renner.berthing@canonical.com\u003e\nLink: https://lore.kernel.org/r/20251029094429.553842-1-jiangfeng@kylinos.cn\nSigned-off-by: Paul Walmsley \u003cpjw@kernel.org\u003e" }, { "commit": "146eb58629f45f8297e83d69e64d4eea4b28d972", "tree": "535b9a688444edf6b4cba37695920c3370473d48", "parents": [ "1fd5367391bf0eeb09e624c4ab45121b54eaab96" ], "author": { "name": "Pavel Begunkov", "email": "asml.silence@gmail.com", "time": "Fri Nov 07 18:41:26 2025 +0000" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Fri Nov 07 17:17:13 2025 -0700" }, "message": "io_uring: fix regbuf vector size truncation\n\nThere is a report of io_estimate_bvec_size() truncating the calculated\nnumber of segments that leads to corruption issues. Check it doesn\u0027t\noverflow \"int\"s used later. Rough but simple, can be improved on top.\n\nCc: stable@vger.kernel.org\nFixes: 9ef4cbbcb4ac3 (\"io_uring: add infra for importing vectored reg buffers\")\nReported-by: Google Big Sleep \u003cbig-sleep-vuln-reports+bigsleep-458654612@google.com\u003e\nSigned-off-by: Pavel Begunkov \u003casml.silence@gmail.com\u003e\nReviewed-by: Günther Noack \u003cgnoack@google.com\u003e\nTested-by: Günther Noack \u003cgnoack@google.com\u003e\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "e811c33b1f137be26a20444b79db8cbc1fca1c89", "tree": "009ad1aba702d82e96b9a5f10c8860180e65c426", "parents": [ "38a2c275c3d3f7d7180d012386cd6fcf87854400", "d439acbbfb9a982f152c5f806b4592431a80c4fd" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Nov 07 14:51:11 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Nov 07 14:51:11 2025 -0800" }, "message": "Merge tag \u0027drm-fixes-2025-11-08\u0027 of https://gitlab.freedesktop.org/drm/kernel\n\nPull drm fixes from Dave Airlie:\n \"Back from travel, thanks to Simona for handling things. regular fixes,\n seems about the right size, but spread out a bit.\n\n amdgpu has the usual range of fixes, xe has a few fixes, and nouveau\n has a couple of fixes, one for blackwell modifiers on 8/16 bit\n surfaces.\n\n Otherwise a few small fixes for mediatek, sched, imagination and\n pixpaper.\n\n sched:\n - Fix deadlock\n\n amdgpu:\n - Reset fixes\n - Misc fixes\n - Panel scaling fixes\n - HDMI fix\n - S0ix fixes\n - Hibernation fix\n - Secure display fix\n - Suspend fix\n - MST fix\n\n amdkfd:\n - Process cleanup fix\n\n xe:\n - Fix missing synchronization on unbind\n - Fix device shutdown when doing FLR\n - Fix user fence signaling order\n\n i915:\n - Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD\n - Fix conversion between clock ticks and nanoseconds\n\n mediatek:\n - Disable AFBC support on Mediatek DRM driver\n - Add pm_runtime support for GCE power control\n\n imagination:\n - kconfig: Fix dependencies\n\n nouveau:\n - Set DMA mask earlier\n - Advertize correct modifiers for GB20x\n\n pixpaper:\n - kconfig: Fix dependencies\"\n\n* tag \u0027drm-fixes-2025-11-08\u0027 of https://gitlab.freedesktop.org/drm/kernel: (26 commits)\n drm/xe: Enforce correct user fence signaling order using\n drm/xe: Do clean shutdown also when using flr\n drm/xe: Move declarations under conditional branch\n drm/xe/guc: Synchronize Dead CT worker with unbind\n drm/amd/display: Enable mst when it\u0027s detected but yet to be initialized\n drm/amdgpu: Fix wait after reset sequence in S3\n drm/amd: Fix suspend failure with secure display TA\n drm/amdgpu: fix gpu page fault after hibernation on PF passthrough\n drm/tiny: pixpaper: add explicit dependency on MMU\n drm/nouveau: Advertise correct modifiers on GB20x\n drm: define NVIDIA DRM format modifiers for GB20x\n drm/nouveau: set DMA mask before creating the flush page\n drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb\n drm/amd/display: Fix NULL deref in debugfs odm_combine_segments\n drm/amdkfd: Don\u0027t clear PT after process killed\n drm/amdgpu/smu: Handle S0ix for vangogh\n drm/amdgpu: Drop PMFW RLC notifier from amdgpu_device_suspend()\n drm/amd/display: Fix black screen with HDMI outputs\n drm/amd/display: Don\u0027t stretch non-native images by default in eDP\n drm/amd/pm: fix missing device_attr cleanup in amdgpu_pm_sysfs_init()\n ...\n" }, { "commit": "d439acbbfb9a982f152c5f806b4592431a80c4fd", "tree": "5a844f4689de7f8fd5ad66ff9c886f0a37a2593b", "parents": [ "a18033f1309cdfd6772799a9b9e72a098c52268b", "0995c2fc39b0f998d40f5d276f67ae22fc1c37c3" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Sat Nov 08 07:39:11 2025 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Sat Nov 08 07:39:54 2025 +1000" }, "message": "Merge tag \u0027drm-xe-fixes-2025-11-07\u0027 of https://gitlab.freedesktop.org/drm/xe/kernel into drm-fixes\n\nDriver Changes:\n - Fix missing synchronization on unbind (Balasubramani Vivekanandan)\n - Fix device shutdown when doing FLR (Jouni Högander)\n - Fix user fence signaling order (Matthew Brost)\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Lucas De Marchi \u003clucas.demarchi@intel.com\u003e\nLink: https://patch.msgid.link/mvfyflloncy76a7nmkatpj6f2afddavwsibz3y4u4wo6gznro5@rdulkuh5wvje\n" }, { "commit": "38a2c275c3d3f7d7180d012386cd6fcf87854400", "tree": "176f85d140e387535ad993a4b3c6e3cb3dfa26f6", "parents": [ "a2e33fb92649f4efcc9e81c1d1a1905ca2a76d03", "fd9f30d1038ee1624baa17a6ff11effe5f7617cb" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Nov 07 13:19:18 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Nov 07 13:19:18 2025 -0800" }, "message": "Merge tag \u0027parisc-for-6.18-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux\n\nPull parisc fix from Helge Deller:\n\n - fix crash triggered by unaligned access in parisc unwinder\n\n* tag \u0027parisc-for-6.18-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux:\n parisc: Avoid crash due to unaligned access in unwinder\n" }, { "commit": "a2e33fb92649f4efcc9e81c1d1a1905ca2a76d03", "tree": "ccf17970b76af683700f781812b1b27402c60352", "parents": [ "da32d155f4a8937952ca6fd55d3270fec1c3799f", "afb47765f9235181fddc61c8633b5a8cfae29fd2" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Nov 07 13:13:09 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Nov 07 13:13:09 2025 -0800" }, "message": "Merge tag \u0027for-linus-iommufd\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jgg/iommufd\n\nPull iommufd fixes from Jason Gunthorpe:\n\n - Syzkaller found a case where maths overflows can cause divide by 0\n\n - Typo in a compiler bug warning fix in the selftests broke the\n selftests\n\n - type1 compatability had a mismatch when unmapping an already unmapped\n range, it should succeed\n\n* tag \u0027for-linus-iommufd\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jgg/iommufd:\n iommufd: Make vfio_compat\u0027s unmap succeed if the range is already empty\n iommufd/selftest: Fix ioctl return value in _test_cmd_trigger_vevents()\n iommufd: Don\u0027t overflow during division for dirty tracking\n" }, { "commit": "9818af18db4bfefd320d0fef41390a616365e6f7", "tree": "4432249ac7e7223ce4d7bde095502578209fca67", "parents": [ "a26a6c93edfeee82cb73f55e87d995eea59ddfe8" ], "author": { "name": "Peter Zijlstra", "email": "peterz@infradead.org", "time": "Thu Nov 06 11:50:00 2025 +0100" }, "committer": { "name": "Nathan Chancellor", "email": "nathan@kernel.org", "time": "Fri Nov 07 11:19:53 2025 -0700" }, "message": "compiler_types: Move unused static inline functions warning to W\u003d2\n\nPer Nathan, clang catches unused \"static inline\" functions in C files\nsince commit 6863f5643dd7 (\"kbuild: allow Clang to find unused static\ninline functions for W\u003d1 build\").\n\nLinus said:\n\n\u003e So I entirely ignore W\u003d1 issues, because I think so many of the extra\n\u003e warnings are bogus.\n\u003e\n\u003e But if this one in particular is causing more problems than most -\n\u003e some teams do seem to use W\u003d1 as part of their test builds - it\u0027s fine\n\u003e to send me a patch that just moves bad warnings to W\u003d2.\n\u003e\n\u003e And if anybody uses W\u003d2 for their test builds, that\u0027s THEIR problem..\n\nHere is the change to bump the warning from W\u003d1 to W\u003d2.\n\nFixes: 6863f5643dd7 (\"kbuild: allow Clang to find unused static inline functions for W\u003d1 build\")\nSigned-off-by: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nSigned-off-by: Andy Shevchenko \u003candriy.shevchenko@linux.intel.com\u003e\nLink: https://patch.msgid.link/20251106105000.2103276-1-andriy.shevchenko@linux.intel.com\n[nathan: Adjust comment as well]\nSigned-off-by: Nathan Chancellor \u003cnathan@kernel.org\u003e\n" }, { "commit": "4012abe8a78fbb8869634130024266eaef7081fe", "tree": "45dd4c2e376debf671f20d08041b2476b9338192", "parents": [ "b540de9e3b4fab3b9e10f30714a6f5c1b2a50ec3" ], "author": { "name": "Joshua Rogers", "email": "linux@joshua.hu", "time": "Fri Nov 07 00:09:37 2025 +0800" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Fri Nov 07 10:15:43 2025 -0600" }, "message": "smb: client: validate change notify buffer before copy\n\nSMB2_change_notify called smb2_validate_iov() but ignored the return\ncode, then kmemdup()ed using server provided OutputBufferOffset/Length.\n\nCheck the return of smb2_validate_iov() and bail out on error.\n\nDiscovered with help from the ZeroPath security tooling.\n\nSigned-off-by: Joshua Rogers \u003clinux@joshua.hu\u003e\nReviewed-by: Paulo Alcantara (Red Hat) \u003cpc@manguebit.org\u003e\nCc: stable@vger.kernel.org\nFixes: e3e9463414f61 (\"smb3: improve SMB3 change notification support\")\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "da32d155f4a8937952ca6fd55d3270fec1c3799f", "tree": "6f77520036adad56c5854f179ea5f198a909124c", "parents": [ "5b95a50001f1fbcae6b7fe211a02f37a04dd9a4b", "4436f484cb437ba28dc58b7f787a6f80a65aa5c3" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Nov 07 08:10:55 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Nov 07 08:10:55 2025 -0800" }, "message": "Merge tag \u0027gpio-fixes-for-v6.18-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux\n\nPull gpio fixes from Bartosz Golaszewski:\n\n - use the firmware node of the GPIO chip, not its label for software\n node lookup\n\n - fix invalid pointer access in GPIO debugfs\n\n - drop unused functions from gpio-tb10x\n\n - fix a regression in gpio-aggregator: restore the set_config()\n callback in the driver\n\n - correct schema $id path in ti,twl4030 DT bindings\n\n* tag \u0027gpio-fixes-for-v6.18-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux:\n gpio: tb10x: Drop unused tb10x_set_bits() function\n gpio: aggregator: restore the set_config operation\n gpiolib: fix invalid pointer access in debugfs\n gpio: swnode: don\u0027t use the swnode\u0027s name as the key for GPIO lookup\n dt-bindings: gpio: ti,twl4030: Correct the schema $id path\n" }, { "commit": "5b95a50001f1fbcae6b7fe211a02f37a04dd9a4b", "tree": "724345959bfe7d8a6cd42bd60d802e16f89619ff", "parents": [ "a80abfbb1013ffec7aa7e574b5ba9bcf02bd5462", "53afec2c8fb2a562222948cb1c2aac48598578c9" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Nov 07 08:07:11 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Nov 07 08:07:11 2025 -0800" }, "message": "Merge tag \u0027trace-v6.18-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace\n\nPull tracing fixes from Steven Rostedt:\n\n - Check for reader catching up in ring_buffer_map_get_reader()\n\n If the reader catches up to the writer in the memory mapped ring\n buffer then calling rb_get_reader_page() will return NULL as there\u0027s\n no pages left. But this isn\u0027t checked for before calling\n rb_get_reader_page() and the return of NULL causes a warning.\n\n If it is detected that the reader caught up to the writer, then\n simply exit the routine\n\n - Fix memory leak in histogram create_field_var()\n\n The couple of the error paths in create_field_var() did not properly\n clean up what was allocated. Make sure everything is freed properly\n on error\n\n - Fix help message of tools latency_collector\n\n The help message incorrectly stated that \"-t\" was the same as\n \"--threads\" whereas \"--threads\" is actually represented by \"-e\"\n\n* tag \u0027trace-v6.18-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace:\n tracing/tools: Fix incorrcet short option in usage text for --threads\n tracing: Fix memory leaks in create_field_var()\n ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up\n" }, { "commit": "a80abfbb1013ffec7aa7e574b5ba9bcf02bd5462", "tree": "900386508626cdf41760bcd915a5cce292754ee8", "parents": [ "9dc520632a0dd3bdc37540528040771a96bdc8ff", "c379b745e12a99f0a54bafaaf75fc710614511ce" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Nov 07 08:01:58 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Nov 07 08:01:58 2025 -0800" }, "message": "Merge tag \u0027slab-for-6.18-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vbabka/slab\n\nPull slab fix from Vlastimil Babka:\n\n - Fix for potential infinite loop in kmalloc_nolock() when debugging\n is enabled for the cache (Vlastimil Babka)\n\n* tag \u0027slab-for-6.18-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vbabka/slab:\n slab: prevent infinite loop in kmalloc_nolock() with debugging\n" }, { "commit": "9dc520632a0dd3bdc37540528040771a96bdc8ff", "tree": "2b2858dd30593bcde4cc08444d98c9b9f9cd826a", "parents": [ "11a6afabb4b38e70b6d697fd90fddedb9ad0ec43", "1fd5367391bf0eeb09e624c4ab45121b54eaab96" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Nov 07 07:52:45 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Nov 07 07:52:45 2025 -0800" }, "message": "Merge tag \u0027io_uring-6.18-20251106\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux\n\nPull io_uring fixes from Jens Axboe:\n\n - Remove the sync refill API that was added in this release, in\n anticipation of doing it in a better way for the next release\n\n - Fix type extension for calculating size off nr_pages, like we do\n in other spots\n\n* tag \u0027io_uring-6.18-20251106\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux:\n io_uring: fix types for region size calulation\n io_uring/zcrx: remove sync refill uapi\n" }, { "commit": "11a6afabb4b38e70b6d697fd90fddedb9ad0ec43", "tree": "10e918aa24fa551695f45c0dddda92c17f727a31", "parents": [ "cff0a1be08ae4ee609362fc6500cec4724e79e18", "a2b32bc1d9e359a9f90d0de6af16699facb10935" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Nov 07 07:47:08 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Nov 07 07:47:08 2025 -0800" }, "message": "Merge tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi\n\nPull SCSI fixes from James Bottomley:\n \"All fixes in the UFS driver.\n\n The big contributor to the diffstats is the Intel controller S0ix/S3\n fix which has to special case the suspend/resume patch for intel\n controllers in ufshcd-pci.c\"\n\n* tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:\n scsi: ufs: core: Fix invalid probe error return value\n scsi: ufs: ufs-pci: Set UFSHCD_QUIRK_PERFORM_LINK_STARTUP_ONCE for Intel ADL\n scsi: ufs: core: Add a quirk to suppress link_startup_again\n scsi: ufs: ufs-pci: Fix S0ix/S3 for Intel controllers\n scsi: ufs: core: Revert \"Make HID attributes visible\"\n scsi: ufs: core: Reduce link startup failure logging\n scsi: ufs: core: Fix a race condition related to the \"hid\" attribute group\n scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC\u003d3)\n" }, { "commit": "cff0a1be08ae4ee609362fc6500cec4724e79e18", "tree": "3bbec2f52ce9790190cf13aaa51079435137e73f", "parents": [ "4a0c9b3391999818e2c5b93719699b255be1f682", "e6187655acfa2dd566ea2aed4522083f0bb940c3" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Nov 07 07:39:57 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Nov 07 07:39:57 2025 -0800" }, "message": "Merge tag \u0027v6.18-rc4-smb-server-fixes\u0027 of git://git.samba.org/ksmbd\n\nPull smb server fixes from Steve French:\n\n - More safely detect RDMA capable devices correctly\n\n* tag \u0027v6.18-rc4-smb-server-fixes\u0027 of git://git.samba.org/ksmbd:\n ksmbd: detect RDMA capable netdevs include IPoIB\n ksmbd: detect RDMA capable lower devices when bridge and vlan netdev is used\n" }, { "commit": "53afec2c8fb2a562222948cb1c2aac48598578c9", "tree": "fb68478798b3d0274eb0a9d2912f9db20f652f8c", "parents": [ "80f0d631dcc76ee1b7755bfca1d8417d91d71414" ], "author": { "name": "Zhang Chujun", "email": "zhangchujun@cmss.chinamobile.com", "time": "Thu Nov 06 11:10:40 2025 +0800" }, "committer": { "name": "Steven Rostedt (Google)", "email": "rostedt@goodmis.org", "time": "Fri Nov 07 07:59:37 2025 -0500" }, "message": "tracing/tools: Fix incorrcet short option in usage text for --threads\n\nThe help message incorrectly listed \u0027-t\u0027 as the short option for\n--threads, but the actual getopt_long configuration uses \u0027-e\u0027.\nThis mismatch can confuse users and lead to incorrect command-line\nusage. This patch updates the usage string to correctly show:\n\t\"-e, --threads NRTHR\"\nto match the implementation.\n\nNote: checkpatch.pl reports a false-positive spelling warning on\n\u0027Run\u0027, which is intentional.\n\nLink: https://patch.msgid.link/20251106031040.1869-1-zhangchujun@cmss.chinamobile.com\nSigned-off-by: Zhang Chujun \u003czhangchujun@cmss.chinamobile.com\u003e\nSigned-off-by: Steven Rostedt (Google) \u003crostedt@goodmis.org\u003e\n" }, { "commit": "0995c2fc39b0f998d40f5d276f67ae22fc1c37c3", "tree": "dd7b742e3844a448fcbbc23e92182e3765d4e56d", "parents": [ "b11a020d914c3b7628f56a9ea476a5b03679489b" ], "author": { "name": "Matthew Brost", "email": "matthew.brost@intel.com", "time": "Fri Oct 31 16:40:45 2025 -0700" }, "committer": { "name": "Lucas De Marchi", "email": "lucas.demarchi@intel.com", "time": "Fri Nov 07 03:55:19 2025 -0800" }, "message": "drm/xe: Enforce correct user fence signaling order using\n\nPrevent application hangs caused by out-of-order fence signaling when\nuser fences are attached. Use drm_syncobj (via dma-fence-chain) to\nguarantee that each user fence signals in order, regardless of the\nsignaling order of the attached fences. Ensure user fence writebacks to\nuser space occur in the correct sequence.\n\nv7:\n - Skip drm_syncbj create of error (CI)\n\nFixes: dd08ebf6c352 (\"drm/xe: Introduce a new DRM driver for Intel GPUs\")\nSigned-off-by: Matthew Brost \u003cmatthew.brost@intel.com\u003e\nReviewed-by: Thomas Hellström \u003cthomas.hellstrom@linux.intel.com\u003e\nLink: https://patch.msgid.link/20251031234050.3043507-2-matthew.brost@intel.com\n(cherry picked from commit adda4e855ab6409a3edaa585293f1f2069ab7299)\nSigned-off-by: Lucas De Marchi \u003clucas.demarchi@intel.com\u003e\n" }, { "commit": "d23550efc6800841b4d1639784afaebdea946ae0", "tree": "6944258a2cd809d1c9d3c2f2643057c45a2a2276", "parents": [ "f1fdffe0afea02ba783acfe815b6a60e7180df40" ], "author": { "name": "Mario Limonciello (AMD)", "email": "superm1@kernel.org", "time": "Thu Nov 06 12:28:54 2025 -0600" }, "committer": { "name": "Borislav Petkov (AMD)", "email": "bp@alien8.de", "time": "Fri Nov 07 12:12:21 2025 +0100" }, "message": "x86/microcode/AMD: Add more known models to entry sign checking\n\nTwo Zen5 systems are missing from need_sha_check(). Add them.\n\nFixes: 50cef76d5cb0 (\"x86/microcode/AMD: Load only SHA256-checksummed patches\")\nSigned-off-by: Mario Limonciello (AMD) \u003csuperm1@kernel.org\u003e\nSigned-off-by: Borislav Petkov (AMD) \u003cbp@alien8.de\u003e\nCc: \u003cstable@kernel.org\u003e\nLink: https://patch.msgid.link/20251106182904.4143757-1-superm1@kernel.org\n" }, { "commit": "b11a020d914c3b7628f56a9ea476a5b03679489b", "tree": "4126ec4c67b6bad855f552bff4ae06584d099a9e", "parents": [ "9cd27eec872f0b95dcdd811edc39d2d32e4158c8" ], "author": { "name": "Jouni Högander", "email": "jouni.hogander@intel.com", "time": "Fri Oct 31 14:23:11 2025 +0200" }, "committer": { "name": "Lucas De Marchi", "email": "lucas.demarchi@intel.com", "time": "Fri Nov 07 03:05:32 2025 -0800" }, "message": "drm/xe: Do clean shutdown also when using flr\n\nCurrently Xe driver is triggering flr without any clean-up on\nshutdown. This is causing random warnings from pending related works as the\nunderlying hardware is reset in the middle of their execution.\n\nFix this by performing clean shutdown also when using flr.\n\nFixes: 501d799a47e2 (\"drm/xe: Wire up device shutdown handler\")\nCc: Maarten Lankhorst \u003cmaarten.lankhorst@linux.intel.com\u003e\nSigned-off-by: Jouni Högander \u003cjouni.hogander@intel.com\u003e\nReviewed-by: Maarten Lankhorst \u003cdev@lankhorst.se\u003e\nLink: https://patch.msgid.link/20251031122312.1836534-1-jouni.hogander@intel.com\nSigned-off-by: Maarten Lankhorst \u003cdev@lankhorst.se\u003e\n(cherry picked from commit a4ff26b7c8ef38e4dd34f77cbcd73576fdde6dd4)\nSigned-off-by: Lucas De Marchi \u003clucas.demarchi@intel.com\u003e\n" }, { "commit": "9cd27eec872f0b95dcdd811edc39d2d32e4158c8", "tree": "a2081287a7f5a697629fab6fce50d79af9bb8664", "parents": [ "95af8f4fdce8349a5fe75264007f1af2aa1082ea" ], "author": { "name": "Tejas Upadhyay", "email": "tejas.upadhyay@intel.com", "time": "Tue Oct 07 15:32:08 2025 +0530" }, "committer": { "name": "Lucas De Marchi", "email": "lucas.demarchi@intel.com", "time": "Fri Nov 07 03:05:20 2025 -0800" }, "message": "drm/xe: Move declarations under conditional branch\n\nThe xe_device_shutdown() function was needing a few declarations\nthat were only required under a specific condition. This change\nmoves those declarations to be within that conditional branch\nto avoid unnecessary declarations.\n\nReviewed-by: Nitin Gote \u003cnitin.r.gote@intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20251007100208.1407021-1-tejas.upadhyay@intel.com\nSigned-off-by: Tejas Upadhyay \u003ctejas.upadhyay@intel.com\u003e\n(cherry picked from commit 15b3036045188f4da4ca62b2ed01b0f160252e9b)\nSigned-off-by: Lucas De Marchi \u003clucas.demarchi@intel.com\u003e\n" }, { "commit": "95af8f4fdce8349a5fe75264007f1af2aa1082ea", "tree": "d3c428d56a731040cab67910067b53a4be67c2e8", "parents": [ "6146a0f1dfae5d37442a9ddcba012add260bceb0" ], "author": { "name": "Balasubramani Vivekanandan", "email": "balasubramani.vivekanandan@intel.com", "time": "Mon Nov 03 18:01:47 2025 +0530" }, "committer": { "name": "Lucas De Marchi", "email": "lucas.demarchi@intel.com", "time": "Fri Nov 07 03:01:54 2025 -0800" }, "message": "drm/xe/guc: Synchronize Dead CT worker with unbind\n\nCancel and wait for any Dead CT worker to complete before continuing\nwith device unbinding. Else the worker will end up using resources freed\nby the undind operation.\n\nCc: Zhanjun Dong \u003czhanjun.dong@intel.com\u003e\nFixes: d2c5a5a926f4 (\"drm/xe/guc: Dead CT helper\")\nSigned-off-by: Balasubramani Vivekanandan \u003cbalasubramani.vivekanandan@intel.com\u003e\nReviewed-by: Stuart Summers \u003cstuart.summers@intel.com\u003e\nLink: https://patch.msgid.link/20251103123144.3231829-6-balasubramani.vivekanandan@intel.com\nSigned-off-by: Lucas De Marchi \u003clucas.demarchi@intel.com\u003e\n(cherry picked from commit 492671339114e376aaa38626d637a2751cdef263)\nSigned-off-by: Lucas De Marchi \u003clucas.demarchi@intel.com\u003e\n" }, { "commit": "a18033f1309cdfd6772799a9b9e72a098c52268b", "tree": "7c089b47107eb499ec7111ac4960e21da7217490", "parents": [ "b57b47741ec15a7e15190c93ce5aa3198bd3cba4", "afcfb6c8474d9e750880aaa77952cc588f859613" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Nov 07 12:41:23 2025 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Nov 07 12:41:42 2025 +1000" }, "message": "Merge tag \u0027mediatek-drm-fixes-20251105\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/chunkuang.hu/linux into drm-fixes\n\nMediatek DRM Fixes - 20251105\n\n1. Disable AFBC support on Mediatek DRM driver\n2. Add pm_runtime support for GCE power control\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Chun-Kuang Hu \u003cchunkuang.hu@kernel.org\u003e\nLink: https://patch.msgid.link/20251105151443.3909-1-chunkuang.hu@kernel.org\n" }, { "commit": "80f0d631dcc76ee1b7755bfca1d8417d91d71414", "tree": "e128e32a12b0d5f283b4c256e5473ca25901138d", "parents": [ "aa997d2d2a0b2e76f4df0f1f12829f02acb4fb6b" ], "author": { "name": "Zilin Guan", "email": "zilin@seu.edu.cn", "time": "Thu Nov 06 12:01:32 2025 +0000" }, "committer": { "name": "Steven Rostedt (Google)", "email": "rostedt@goodmis.org", "time": "Thu Nov 06 19:51:33 2025 -0500" }, "message": "tracing: Fix memory leaks in create_field_var()\n\nThe function create_field_var() allocates memory for \u0027val\u0027 through\ncreate_hist_field() inside parse_atom(), and for \u0027var\u0027 through\ncreate_var(), which in turn allocates var-\u003etype and var-\u003evar.name\ninternally. Simply calling kfree() to release these structures will\nresult in memory leaks.\n\nUse destroy_hist_field() to properly free \u0027val\u0027, and explicitly release\nthe memory of var-\u003etype and var-\u003evar.name before freeing \u0027var\u0027 itself.\n\nLink: https://patch.msgid.link/20251106120132.3639920-1-zilin@seu.edu.cn\nFixes: 02205a6752f22 (\"tracing: Add support for \u0027field variables\u0027\")\nSigned-off-by: Zilin Guan \u003czilin@seu.edu.cn\u003e\nSigned-off-by: Steven Rostedt (Google) \u003crostedt@goodmis.org\u003e\n" }, { "commit": "aa997d2d2a0b2e76f4df0f1f12829f02acb4fb6b", "tree": "b390c0a10b39ca16251cd49654b5df4e1d451867", "parents": [ "dcb6fa37fd7bc9c3d2b066329b0d27dedf8becaa" ], "author": { "name": "Steven Rostedt", "email": "rostedt@goodmis.org", "time": "Thu Oct 16 13:28:48 2025 -0400" }, "committer": { "name": "Steven Rostedt (Google)", "email": "rostedt@goodmis.org", "time": "Thu Nov 06 19:38:54 2025 -0500" }, "message": "ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up\n\nThe function ring_buffer_map_get_reader() is a bit more strict than the\nother get reader functions, and except for certain situations the\nrb_get_reader_page() should not return NULL. If it does, it triggers a\nwarning.\n\nThis warning was triggering but after looking at why, it was because\nanother acceptable situation was happening and it wasn\u0027t checked for.\n\nIf the reader catches up to the writer and there\u0027s still data to be read\non the reader page, then the rb_get_reader_page() will return NULL as\nthere\u0027s no new page to get.\n\nIn this situation, the reader page should not be updated and no warning\nshould trigger.\n\nCc: stable@vger.kernel.org\nCc: Masami Hiramatsu \u003cmhiramat@kernel.org\u003e\nCc: Mathieu Desnoyers \u003cmathieu.desnoyers@efficios.com\u003e\nCc: Vincent Donnefort \u003cvdonnefort@google.com\u003e\nReported-by: syzbot+92a3745cea5ec6360309@syzkaller.appspotmail.com\nCloses: https://lore.kernel.org/all/690babec.050a0220.baf87.0064.GAE@google.com/\nLink: https://lore.kernel.org/20251016132848.1b11bb37@gandalf.local.home\nFixes: 117c39200d9d7 (\"ring-buffer: Introducing ring-buffer mapping functions\")\nSigned-off-by: Steven Rostedt (Google) \u003crostedt@goodmis.org\u003e\n" }, { "commit": "4a0c9b3391999818e2c5b93719699b255be1f682", "tree": "51e97ec54280ed65a4bb4e7e5adfd32eb440a033", "parents": [ "f5f2e20b1cbc5f9ea20b372d15967b24921ede19", "c91afa7610235f89a5e8f5686aac23892ab227ed" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Nov 06 16:24:12 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Nov 06 16:24:12 2025 -0800" }, "message": "Merge tag \u0027probes-fixes-v6.18-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace\n\nPull probe fixes from Masami Hiramatsu:\n\n - tprobe-events: Fix to register tracepoint correctly\n\n tprobe-events missed to set tracepoint data structure before\n registering callback when enabling it. This sets it correctly.\n\n - tprobe-events: Fix to put tracepoint_user when disable the event\n\n tprobe-events missed to unregister tracepoint callback when the event\n is disabled. This ensures to unregister it.\n\n* tag \u0027probes-fixes-v6.18-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace:\n tracing: tprobe-events: Fix to put tracepoint_user when disable the tprobe\n tracing: tprobe-events: Fix to register tracepoint correctly\n" }, { "commit": "f5f2e20b1cbc5f9ea20b372d15967b24921ede19", "tree": "7ca2f898d32614f7184fd8682cf4f58a85608ef4", "parents": [ "225a97d6d45456a7627633da09cb842a43ef1b85", "7f17ef0d47b9aa01b89a92b2514fbfe800d8aeca" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Nov 06 16:05:33 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Nov 06 16:05:33 2025 -0800" }, "message": "Merge tag \u0027perf-tools-fixes-for-v6.18-1-2025-11-06\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/perf/perf-tools\n\nPull perf tools fixes from Arnaldo Carvalho de Melo:\n\n - Add James Clark as a perf tools reviewer\n\n - Handle \u00271\u0027 type symbols in /proc/kallsyms, related to anonymous\n Rust closures in the DRM panic QR encoder, caught by \u0027perf test\u0027\n\n - Sync kernel header copies: MSRs, uprobe syscall,\n DRM_IOCTL_GEM_CHANGE_HANDLE, KVM exit reasons, etc\n\n* tag \u0027perf-tools-fixes-for-v6.18-1-2025-11-06\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/perf/perf-tools:\n perf symbols: Handle \u00271\u0027 symbols in /proc/kallsyms\n tools headers asm: Sync fls headers header with the kernel sources\n tools headers UAPI: Sync KVM\u0027s vmx.h header with the kernel sources to handle new exit reasons\n tools headers svm: Sync svm headers with the kernel sources\n tools headers UAPI: Sync x86\u0027s asm/kvm.h with the kernel sources\n MAINTAINERS: Add James Clark as a perf tools reviewer\n tools headers UAPI: Sync linux/kvm.h with the kernel sources\n tools headers UAPI: Update tools\u0027s copy of drm.h to pick DRM_IOCTL_GEM_CHANGE_HANDLE\n tools headers x86 cpufeatures: Sync with the kernel sources\n tools headers x86: Sync table due to introducion of uprobe syscall\n tools headers: Sync uapi/linux/fcntl.h with the kernel sources\n tools headers: Sync uapi/linux/prctl.h with the kernel source\n tools headers uapi: Update fs.h with the kernel sources\n tools arch x86: Sync msr-index.h to pick AMD64_{PERF_CNTR_GLOBAL_STATUS_SET,SAVIC_CONTROL}, IA32_L3_QOS_{ABMC,EXT}_CFG\n" }, { "commit": "225a97d6d45456a7627633da09cb842a43ef1b85", "tree": "10dfeb82f4579849d83afa9f95eedb26e9b6fab8", "parents": [ "3a157bdfc8d23c3fbfbeea47ff721fe9ef254b25", "2e448567839c65768486d56612c88cb327d26050" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Nov 06 15:44:18 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Nov 06 15:44:18 2025 -0800" }, "message": "Merge tag \u0027riscv-for-linus-6.18-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux\n\nPull RISC-V fixes from Paul Walmsley:\n\n - A fix to disable KASAN checks while walking a non-current task\u0027s\n stackframe (following x86)\n\n - A fix for a kvrealloc()-related memory leak in\n module_frob_arch_sections()\n\n - Two replacements of strcpy() with strscpy()\n\n - A change to use the RISC-V .insn assembler directive when possible to\n assemble instructions from hex opcodes\n\n - Some low-impact fixes in the ptdump code and kprobes test code\n\n* tag \u0027riscv-for-linus-6.18-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux:\n cpuidle: riscv-sbi: Replace deprecated strcpy in sbi_cpuidle_init_cpu\n riscv: KGDB: Replace deprecated strcpy in kgdb_arch_handle_qxfer_pkt\n riscv: asm: use .insn for making custom instructions\n riscv: tests: Make RISCV_KPROBES_KUNIT tristate\n riscv: tests: Rename kprobes_test_riscv to kprobes_riscv\n riscv: Fix memory leak in module_frob_arch_sections()\n riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro\n riscv: stacktrace: Disable KASAN checks for non-current tasks\n" }, { "commit": "3a157bdfc8d23c3fbfbeea47ff721fe9ef254b25", "tree": "e8526cedf89dca98f4c114e34992bb0a0fa0b5dd", "parents": [ "a1388fcb52fcad3e0b06e2cdd0ed757a82a5be30", "771e8f483583728cd2ef164f7c2256c4bf2adf4c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Nov 06 15:40:14 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Nov 06 15:40:14 2025 -0800" }, "message": "Merge tag \u0027acpi-6.18-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull ACPI fixes from Rafael Wysocki:\n \"These fix a coding mistake in the ACPI Smart Battery Subsystem (SBS)\n driver and two documentation issues:\n\n - Fix computation of the battery-\u003epresent value in acpi_battery_read()\n to work when battery-\u003eid is not zero (Dan Carpenter)\n\n - Fix comment typo in the ACPI CPPC library (Chu Guangqing)\n\n - Fix I2C device references in two ASL examples in the firmware guide\n that were broken by a previous update (Jonas Gorski)\"\n\n* tag \u0027acpi-6.18-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n ACPI: SBS: Fix present test in acpi_battery_read()\n ACPI: CPPC: Fix typo in a comment\n Documentation: ACPI: i2c-muxes: fix I2C device references\n" }, { "commit": "b57b47741ec15a7e15190c93ce5aa3198bd3cba4", "tree": "46811b0585a17c04a4497591c14c34b28fe3e127", "parents": [ "6ec8a47c553007aa97afb357bc24112effbabe5e", "3c6a743c6961cc2cab453b343bb157d6bbbf8120" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Nov 07 09:20:30 2025 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Nov 07 09:20:48 2025 +1000" }, "message": "Merge tag \u0027amd-drm-fixes-6.18-2025-11-06\u0027 of https://gitlab.freedesktop.org/agd5f/linux into drm-fixes\n\namd-drm-fixes-6.18-2025-11-06:\n\namdgpu:\n- Reset fixes\n- Misc fixes\n- Panel scaling fixes\n- HDMI fix\n- S0ix fixes\n- Hibernation fix\n- Secure display fix\n- Suspend fix\n- MST fix\n\namdkfd:\n- Process cleanup fix\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Alex Deucher \u003calexander.deucher@amd.com\u003e\nLink: https://patch.msgid.link/20251106201326.807230-1-alexander.deucher@amd.com\n" }, { "commit": "6ec8a47c553007aa97afb357bc24112effbabe5e", "tree": "ce052b7db70599f1532a2510b2a3b476f41eed89", "parents": [ "faf66a71079b5d916028fab51a9b537df7b28b9f", "7d44ad6b43d0be43d080180413a1b6c24cfbd266" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Nov 07 09:14:55 2025 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Nov 07 09:15:31 2025 +1000" }, "message": "Merge tag \u0027drm-intel-fixes-2025-11-06\u0027 of https://gitlab.freedesktop.org/drm/i915/kernel into drm-fixes\n\n- Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD (Janusz)\n- Fix conversion between clock ticks and nanoseconds (Umesh)\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Rodrigo Vivi \u003crodrigo.vivi@intel.com\u003e\nLink: https://patch.msgid.link/aQyxT1D8IW-xcDbM@intel.com\n" }, { "commit": "faf66a71079b5d916028fab51a9b537df7b28b9f", "tree": "3673814a783baa2d9377296529f1b60371e39418", "parents": [ "6146a0f1dfae5d37442a9ddcba012add260bceb0", "b750f5a9d64df6cfe9103c7feb7314694318818d" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Nov 07 08:21:15 2025 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Nov 07 09:14:31 2025 +1000" }, "message": "Merge tag \u0027drm-misc-fixes-2025-11-06\u0027 of https://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes\n\nShort summary of fixes pull:\n\nimagination:\n- kconfig: Fix dependencies\n\nnouveau:\n- Set DMA mask earlier\n- Advertize correct modifiers for GB20x\n\npixpaper:\n- kconfig: Fix dependencies\n\nsched:\n- Fix deadlock\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Thomas Zimmermann \u003ctzimmermann@suse.de\u003e\nLink: https://patch.msgid.link/20251106131244.GA155679@2a02-2454-fd5e-fd00-d540-1fd5-75b4-d5e2.dyn6.pyur.net\n" }, { "commit": "c91afa7610235f89a5e8f5686aac23892ab227ed", "tree": "0b99b6e5096e4c1d09480b1e70c15df448c93d4b", "parents": [ "10d9dda426d684e98b17161f02f77894c6de9b60" ], "author": { "name": "Masami Hiramatsu (Google)", "email": "mhiramat@kernel.org", "time": "Fri Nov 07 01:52:24 2025 +0900" }, "committer": { "name": "Masami Hiramatsu (Google)", "email": "mhiramat@kernel.org", "time": "Fri Nov 07 07:36:20 2025 +0900" }, "message": "tracing: tprobe-events: Fix to put tracepoint_user when disable the tprobe\n\n__unregister_trace_fprobe() checks tf-\u003etuser to put it when removing\ntprobe. However, disable_trace_fprobe() does not use it and only calls\nunregister_fprobe(). Thus it forgets to disable tracepoint_user.\n\nIf the trace_fprobe has tuser, put it for unregistering the tracepoint\ncallbacks when disabling tprobe correctly.\n\nLink: https://lore.kernel.org/all/176244794466.155515.3971904050506100243.stgit@devnote2/\n\nFixes: 2867495dea86 (\"tracing: tprobe-events: Register tracepoint when enable tprobe event\")\nCc: stable@vger.kernel.org\nSigned-off-by: Masami Hiramatsu (Google) \u003cmhiramat@kernel.org\u003e\nTested-by: Beau Belgrave \u003cbeaub@linux.microsoft.com\u003e\nReviewed-by: Beau Belgrave \u003cbeaub@linux.microsoft.com\u003e\n" }, { "commit": "10d9dda426d684e98b17161f02f77894c6de9b60", "tree": "0ccfb835f96c873257a8e8a007f92ba1916d4c5b", "parents": [ "6146a0f1dfae5d37442a9ddcba012add260bceb0" ], "author": { "name": "Masami Hiramatsu (Google)", "email": "mhiramat@kernel.org", "time": "Fri Nov 07 01:52:15 2025 +0900" }, "committer": { "name": "Masami Hiramatsu (Google)", "email": "mhiramat@kernel.org", "time": "Fri Nov 07 07:32:55 2025 +0900" }, "message": "tracing: tprobe-events: Fix to register tracepoint correctly\n\nSince __tracepoint_user_init() calls tracepoint_user_register() without\ninitializing tuser-\u003etpoint with given tracpoint, it does not register\ntracepoint stub function as callback correctly, and tprobe does not work.\n\nInitializing tuser-\u003etpoint correctly before tracepoint_user_register()\nso that it sets up tracepoint callback.\n\nI confirmed below example works fine again.\n\necho \"t sched_switch preempt prev_pid\u003dprev-\u003epid next_pid\u003dnext-\u003epid\" \u003e /sys/kernel/tracing/dynamic_events\necho 1 \u003e /sys/kernel/tracing/events/tracepoints/sched_switch/enable\ncat /sys/kernel/tracing/trace_pipe\n\nLink: https://lore.kernel.org/all/176244793514.155515.6466348656998627773.stgit@devnote2/\n\nFixes: 2867495dea86 (\"tracing: tprobe-events: Register tracepoint when enable tprobe event\")\nReported-by: Beau Belgrave \u003cbeaub@linux.microsoft.com\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Masami Hiramatsu (Google) \u003cmhiramat@kernel.org\u003e\nTested-by: Beau Belgrave \u003cbeaub@linux.microsoft.com\u003e\nReviewed-by: Beau Belgrave \u003cbeaub@linux.microsoft.com\u003e\n" }, { "commit": "771e8f483583728cd2ef164f7c2256c4bf2adf4c", "tree": "79a08dec73d7b92356be1b3e15203d9bbc0d6bf9", "parents": [ "01e11d18da818eabdb3769081e7123ed8bfe863c", "1642fabff19f768e9a8fea85d55a2d6d43ecffe3", "bd9e119951b527724938ff55fb0ca3daa54f5c18" ], "author": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Thu Nov 06 22:10:27 2025 +0100" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Thu Nov 06 22:10:27 2025 +0100" }, "message": "Merge branches \u0027acpi-cppc\u0027 and \u0027acpi-docs\u0027\n\nMerge two documentation fixes for 6.18-rc5, a commet typo fix in the\nACPI CPPC library (Chu Guangqing) and fixes for two ASL examples in the\nfirmware guide (Jonas Gorski).\n\n* acpi-cppc:\n ACPI: CPPC: Fix typo in a comment\n\n* acpi-docs:\n Documentation: ACPI: i2c-muxes: fix I2C device references\n" }, { "commit": "a1388fcb52fcad3e0b06e2cdd0ed757a82a5be30", "tree": "ad3465230d0d64c6887503903fb463a905adef63", "parents": [ "c668da99b923bc0527f19e361bb8496be087970f", "44e8241c51f762aafa50ed116da68fd6ecdcc954" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Nov 06 12:48:18 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Nov 06 12:48:18 2025 -0800" }, "message": "Merge tag \u0027libcrypto-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux\n\nPull crypto library fixes from Eric Biggers:\n \"Two Curve25519 related fixes:\n\n - Re-enable KASAN support on curve25519-hacl64.c with gcc.\n\n - Disable the arm optimized Curve25519 code on CPU_BIG_ENDIAN\n kernels. It has always been broken in that configuration\"\n\n* tag \u0027libcrypto-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux:\n lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN\n lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC\n" }, { "commit": "c668da99b923bc0527f19e361bb8496be087970f", "tree": "9fe1693f92b7933650c714837dfcd394b49e8a61", "parents": [ "c90841db3524657204c096fd47283817cfdbd2f9", "1e39da974ce621ed874c6d3aaf65ad14848c9f0d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Nov 06 12:45:15 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Nov 06 12:45:15 2025 -0800" }, "message": "Merge tag \u0027fscrypt-for-linus\u0027 of git://git.kernel.org/pub/scm/fs/fscrypt/linux\n\nPull fscrypt fix from Eric Biggers:\n \"Fix an UBSAN warning that started occurring when the block layer\n started supporting logical_block_size \u003e PAGE_SIZE\"\n\n* tag \u0027fscrypt-for-linus\u0027 of git://git.kernel.org/pub/scm/fs/fscrypt/linux:\n fscrypt: fix left shift underflow when inode-\u003ei_blkbits \u003e PAGE_SHIFT\n" }, { "commit": "c90841db3524657204c096fd47283817cfdbd2f9", "tree": "c4afd66c44d8b3832c3004d2492234c3b9444d9b", "parents": [ "c2c2ccfd4ba72718266a56f3ecc34c989cb5b7a0", "c57f5fee54dfc83ee1d7f70f7beb9410b8466e9e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Nov 06 11:54:59 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Nov 06 11:54:59 2025 -0800" }, "message": "Merge tag \u0027hardening-v6.18-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux\n\nPull hardening fixes from Kees Cook:\n \"This is a work-around for a (now fixed) corner case in the arm32 build\n with Clang KCFI enabled.\n\n - Introduce __nocfi_generic for arm32 Clang (Nathan Chancellor)\"\n\n* tag \u0027hardening-v6.18-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux:\n libeth: xdp: Disable generic kCFI pass for libeth_xdp_tx_xmit_bulk()\n ARM: Select ARCH_USES_CFI_GENERIC_LLVM_PASS\n compiler_types: Introduce __nocfi_generic\n" }, { "commit": "4436f484cb437ba28dc58b7f787a6f80a65aa5c3", "tree": "f542074e5a4d359c3d8b12fab488d25cc59b1141", "parents": [ "5232334baec371a3c9d9192ba7d2da2d88a85333" ], "author": { "name": "Krzysztof Kozlowski", "email": "krzysztof.kozlowski@linaro.org", "time": "Thu Nov 06 17:16:25 2025 +0100" }, "committer": { "name": "Bartosz Golaszewski", "email": "bartosz.golaszewski@linaro.org", "time": "Thu Nov 06 18:19:44 2025 +0100" }, "message": "gpio: tb10x: Drop unused tb10x_set_bits() function\n\ntb10x_set_bits() is not referenced anywhere leading to W\u003d1 warning:\n\n gpio-tb10x.c:59:20: error: unused function \u0027tb10x_set_bits\u0027 [-Werror,-Wunused-function]\n\nAfter its removal, tb10x_reg_write() becomes unused as well.\n\nSigned-off-by: Krzysztof Kozlowski \u003ckrzysztof.kozlowski@linaro.org\u003e\nLink: https://lore.kernel.org/r/20251106-gpio-of-match-v1-1-50c7115a045e@linaro.org\nSigned-off-by: Bartosz Golaszewski \u003cbartosz.golaszewski@linaro.org\u003e\n" }, { "commit": "3c6a743c6961cc2cab453b343bb157d6bbbf8120", "tree": "6a30034f42a295ea0645dde3e03829399a0e702a", "parents": [ "570a66b48c22214851949fcd71816fee280aa096" ], "author": { "name": "Wayne Lin", "email": "Wayne.Lin@amd.com", "time": "Wed Nov 05 10:36:31 2025 +0800" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Thu Nov 06 11:58:55 2025 -0500" }, "message": "drm/amd/display: Enable mst when it\u0027s detected but yet to be initialized\n\n[Why]\ndrm_dp_mst_topology_queue_probe() is used under the assumption that\nmst is already initialized. If we connect system with SST first\nthen switch to the mst branch during suspend, we will fail probing\ntopology by calling the wrong API since the mst manager is yet to\nbe initialized.\n\n[How]\nAt dm_resume(), once it\u0027s detected as mst branc connected, check if\nthe mst is initialized already. If not, call\ndm_helpers_dp_mst_start_top_mgr() instead to initialize mst\n\nV2: Adjust the commit msg a bit\n\nFixes: bc068194f548 (\"drm/amd/display: Don\u0027t write DP_MSTM_CTRL after LT\")\nCc: Fangzhi Zuo \u003cjerry.zuo@amd.com\u003e\nCc: Mario Limonciello \u003cmario.limonciello@amd.com\u003e\nCc: Alex Deucher \u003calexander.deucher@amd.com\u003e\nReviewed-by: Tom Chung \u003cchiahsuan.chung@amd.com\u003e\nSigned-off-by: Wayne Lin \u003cWayne.Lin@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n(cherry picked from commit 62320fb8d91a0bddc44a228203cfa9bfbb5395bd)\nCc: stable@vger.kernel.org\n" }, { "commit": "570a66b48c22214851949fcd71816fee280aa096", "tree": "44202953bdc02094ad4419330c9946cb75e32a1f", "parents": [ "b09cb2996cdf50cd1ab4020e002c95d742c81313" ], "author": { "name": "Lijo Lazar", "email": "lijo.lazar@amd.com", "time": "Mon Nov 03 16:21:50 2025 +0530" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Thu Nov 06 11:58:32 2025 -0500" }, "message": "drm/amdgpu: Fix wait after reset sequence in S3\n\nFor a mode-1 reset done at the end of S3 on PSPv11 dGPUs, only check if\nTOS is unloaded.\n\nFixes: 32f73741d6ee (\"drm/amdgpu: Wait for bootloader after PSPv11 reset\")\nCloses: https://gitlab.freedesktop.org/drm/amd/-/issues/4649\nSigned-off-by: Lijo Lazar \u003clijo.lazar@amd.com\u003e\nAcked-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n(cherry picked from commit 1ad25fd272753db14c5d1cc8c68e20ce01f3f888)\n" }, { "commit": "b09cb2996cdf50cd1ab4020e002c95d742c81313", "tree": "ed6890086ee669739cad4b56942abc9d0dc6fe9c", "parents": [ "eb6e7f520d6efa4d4ebf1671455abe4a681f7a05" ], "author": { "name": "Mario Limonciello", "email": "mario.limonciello@amd.com", "time": "Tue Nov 04 13:38:02 2025 -0600" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Thu Nov 06 11:58:10 2025 -0500" }, "message": "drm/amd: Fix suspend failure with secure display TA\n\ncommit c760bcda83571 (\"drm/amd: Check whether secure display TA loaded\nsuccessfully\") attempted to fix extra messages, but failed to port the\ncleanup that was in commit 5c6d52ff4b61e (\"drm/amd: Don\u0027t try to enable\nsecure display TA multiple times\") to prevent multiple tries.\n\nAdd that to the failure handling path even on a quick failure.\n\nCloses: https://gitlab.freedesktop.org/drm/amd/-/issues/4679\nFixes: c760bcda8357 (\"drm/amd: Check whether secure display TA loaded successfully\")\nSigned-off-by: Mario Limonciello \u003cmario.limonciello@amd.com\u003e\nReviewed-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n(cherry picked from commit 4104c0a454f6a4d1e0d14895d03c0e7bdd0c8240)\n" }, { "commit": "eb6e7f520d6efa4d4ebf1671455abe4a681f7a05", "tree": "5efaa6b3a81fe5ebcb5fb639842cd7bce071c24b", "parents": [ "6dd97ceb645c08aca9fc871a3006e47fe699f0ac" ], "author": { "name": "Samuel Zhang", "email": "guoqing.zhang@amd.com", "time": "Wed Nov 05 03:04:08 2025 +0000" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Thu Nov 06 11:57:08 2025 -0500" }, "message": "drm/amdgpu: fix gpu page fault after hibernation on PF passthrough\n\nOn PF passthrough environment, after hibernate and then resume, coralgemm\nwill cause gpu page fault.\n\nMode1 reset happens during hibernate, but partition mode is not restored\non resume, register mmCP_HYP_XCP_CTL and mmCP_PSP_XCP_CTL is not right\nafter resume. When CP access the MQD BO, wrong stride size is used,\nthis will cause out of bound access on the MQD BO, resulting page fault.\n\nThe fix is to ensure gfx_v9_4_3_switch_compute_partition() is called\nwhen resume from a hibernation.\nKFD resume is called separately during a reset recovery or resume from\nsuspend sequence. Hence it\u0027s not required to be called as part of\npartition switch.\n\nSigned-off-by: Samuel Zhang \u003cguoqing.zhang@amd.com\u003e\nReviewed-by: Lijo Lazar \u003clijo.lazar@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n(cherry picked from commit 5d1b32cfe4a676fe552416cb5ae847b215463a1a)\n" }, { "commit": "c2c2ccfd4ba72718266a56f3ecc34c989cb5b7a0", "tree": "d1d81d63b9180a731cc995e992709addc4c77715", "parents": [ "dc77806cf3b4788d328fddf245e86c5b529f31a2", "3534e03e0ec2e00908765549828a69df5ebefb91" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Nov 06 08:52:30 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Nov 06 08:52:30 2025 -0800" }, "message": "Merge tag \u0027net-6.18-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net\n\nPull networking fixes from Jakub Kicinski:\n Including fixes from bluetooth and wireless.\n\n Current release - new code bugs:\n\n - ptp: expose raw cycles only for clocks with free-running counter\n\n - bonding: fix null-deref in actor_port_prio setting\n\n - mdio: ERR_PTR-check regmap pointer returned by\n device_node_to_regmap()\n\n - eth: libie: depend on DEBUG_FS when building LIBIE_FWLOG\n\n Previous releases - regressions:\n\n - virtio_net: fix perf regression due to bad alignment of\n virtio_net_hdr_v1_hash\n\n - Revert \"wifi: ath10k: avoid unnecessary wait for service ready\n message\" caused regressions for QCA988x and QCA9984\n\n - Revert \"wifi: ath12k: Fix missing station power save configuration\"\n caused regressions for WCN7850\n\n - eth: bnxt_en: shutdown FW DMA in bnxt_shutdown(), fix memory\n corruptions after kexec\n\n Previous releases - always broken:\n\n - virtio-net: fix received packet length check for big packets\n\n - sctp: fix races in socket diag handling\n\n - wifi: add an hrtimer-based delayed work item to avoid low\n granularity of timers set relatively far in the future, and use it\n where it matters (e.g. when performing AP-scheduled channel switch)\n\n - eth: mlx5e:\n - correctly propagate error in case of module EEPROM read failure\n - fix HW-GRO on systems with PAGE_SIZE \u003d\u003d 64kB\n\n - dsa: b53: fixes for tagging, link configuration / RMII, FDB,\n multicast\n\n - phy: lan8842: implement latest errata\"\n\n* tag \u0027net-6.18-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net: (63 commits)\n selftests/vsock: avoid false-positives when checking dmesg\n net: bridge: fix MST static key usage\n net: bridge: fix use-after-free due to MST port state bypass\n lan966x: Fix sleeping in atomic context\n bonding: fix NULL pointer dereference in actor_port_prio setting\n net: dsa: microchip: Fix reserved multicast address table programming\n net: wan: framer: pef2256: Switch to devm_mfd_add_devices()\n net: libwx: fix device bus LAN ID\n net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages\n net/mlx5e: SHAMPO, Fix skb size check for 64K pages\n net/mlx5e: SHAMPO, Fix header mapping for 64K pages\n net: ti: icssg-prueth: Fix fdb hash size configuration\n net/mlx5e: Fix return value in case of module EEPROM read error\n net: gro_cells: Reduce lock scope in gro_cell_poll\n libie: depend on DEBUG_FS when building LIBIE_FWLOG\n wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup\n netpoll: Fix deadlock in memory allocation under spinlock\n net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error\n virtio-net: fix received length check in big packets\n bnxt_en: Fix warning in bnxt_dl_reload_down()\n ...\n" }, { "commit": "a26a6c93edfeee82cb73f55e87d995eea59ddfe8", "tree": "3622af9225c4236c55b06444e67a82b19676e026", "parents": [ "6146a0f1dfae5d37442a9ddcba012add260bceb0" ], "author": { "name": "Nathan Chancellor", "email": "nathan@kernel.org", "time": "Wed Nov 05 15:30:27 2025 -0700" }, "committer": { "name": "Nathan Chancellor", "email": "nathan@kernel.org", "time": "Thu Nov 06 09:50:23 2025 -0700" }, "message": "kbuild: Strip trailing padding bytes from modules.builtin.modinfo\n\nAfter commit d50f21091358 (\"kbuild: align modinfo section for Secureboot\nAuthenticode EDK2 compat\"), running modules_install with certain\nversions of kmod (such as 29.1 in Ubuntu Jammy) in certain\nconfigurations may fail with:\n\n depmod: ERROR: kmod_builtin_iter_next: unexpected string without modname prefix\n\nThe additional padding bytes to ensure .modinfo is aligned within\nvmlinux.unstripped are unexpected by kmod, as this section has always\njust been null-terminated strings.\n\nStrip the trailing padding bytes from modules.builtin.modinfo after it\nhas been extracted from vmlinux.unstripped to restore the format that\nkmod expects while keeping .modinfo aligned within vmlinux.unstripped to\navoid regressing the Authenticode calculation fix for EDK2.\n\nCc: stable@vger.kernel.org\nFixes: d50f21091358 (\"kbuild: align modinfo section for Secureboot Authenticode EDK2 compat\")\nReported-by: Omar Sandoval \u003cosandov@fb.com\u003e\nReported-by: Samir M \u003csamir@linux.ibm.com\u003e\nReported-by: Venkat Rao Bagalkote \u003cvenkat88@linux.ibm.com\u003e\nCloses: https://lore.kernel.org/7fef7507-ad64-4e51-9bb8-c9fb6532e51e@linux.ibm.com/\nTested-by: Omar Sandoval \u003cosandov@fb.com\u003e\nTested-by: Samir M \u003csamir@linux.ibm.com\u003e\nTested-by: Venkat Rao Bagalkote \u003cvenkat88@linux.ibm.com\u003e\nReviewed-by: Nicolas Schier \u003cnsc@kernel.org\u003e\nLink: https://patch.msgid.link/20251105-kbuild-fix-builtin-modinfo-for-kmod-v1-1-b419d8ad4606@kernel.org\nSigned-off-by: Nathan Chancellor \u003cnathan@kernel.org\u003e\n" }, { "commit": "3534e03e0ec2e00908765549828a69df5ebefb91", "tree": "30e2ed4397e0824e8e90a3a225d49a1390dd1f8b", "parents": [ "13fef4fb0536c80e8c4a77e69fe0b5deeb7c331b" ], "author": { "name": "Bobby Eshleman", "email": "bobbyeshleman@meta.com", "time": "Wed Nov 05 07:59:19 2025 -0800" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Nov 06 07:34:50 2025 -0800" }, "message": "selftests/vsock: avoid false-positives when checking dmesg\n\nSometimes VMs will have some intermittent dmesg warnings that are\nunrelated to vsock. Change the dmesg parsing to filter on strings\ncontaining \u0027vsock\u0027 to avoid false positive failures that are unrelated\nto vsock. The downside is that it is possible for some vsock related\nwarnings to not contain the substring \u0027vsock\u0027, so those will be missed.\n\nFixes: a4a65c6fe08b (\"selftests/vsock: add initial vmtest.sh for vsock\")\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nSigned-off-by: Bobby Eshleman \u003cbobbyeshleman@meta.com\u003e\nReviewed-by: Stefano Garzarella \u003csgarzare@redhat.com\u003e\nLink: https://patch.msgid.link/20251105-vsock-vmtest-dmesg-fix-v2-1-1a042a14892c@meta.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "13fef4fb0536c80e8c4a77e69fe0b5deeb7c331b", "tree": "5154c08d1659da8b3070ce628c9eca994c1c911f", "parents": [ "0216721ce71252f60d89af49c8dff613358058d3", "ee87c63f9b2a418f698d79c2991347e31a7d2c27" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Nov 06 07:32:19 2025 -0800" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Nov 06 07:32:20 2025 -0800" }, "message": "Merge branch \u0027net-bridge-fix-two-mst-bugs\u0027\n\nNikolay Aleksandrov says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nnet: bridge: fix two MST bugs\n\nPatch 01 fixes a race condition that exists between expired fdb deletion\nand port deletion when MST is enabled. Learning can happen after the\nport\u0027s state has been changed to disabled which could lead to that\nport\u0027s memory being used after it\u0027s been freed. The issue was reported\nby syzbot, more information in patch 01. Patch 02 fixes an issue with\nMST\u0027s static key which Ido spotted, we can have multiple bridges with MST\nand a single bridge can erroneously disable it for all.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20251105111919.1499702-1-razor@blackwall.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "ee87c63f9b2a418f698d79c2991347e31a7d2c27", "tree": "5154c08d1659da8b3070ce628c9eca994c1c911f", "parents": [ "8dca36978aa80bab9d4da130c211db75c9e00048" ], "author": { "name": "Nikolay Aleksandrov", "email": "razor@blackwall.org", "time": "Wed Nov 05 13:19:19 2025 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Nov 06 07:32:17 2025 -0800" }, "message": "net: bridge: fix MST static key usage\n\nAs Ido pointed out, the static key usage in MST is buggy and should use\ninc/dec instead of enable/disable because we can have multiple bridges\nwith MST enabled which means a single bridge can disable MST for all.\nUse static_branch_inc/dec to avoid that. When destroying a bridge decrement\nthe key if MST was enabled.\n\nFixes: ec7328b59176 (\"net: bridge: mst: Multiple Spanning Tree (MST) mode\")\nReported-by: Ido Schimmel \u003cidosch@nvidia.com\u003e\nCloses: https://lore.kernel.org/netdev/20251104120313.1306566-1-razor@blackwall.org/T/#m6888d87658f94ed1725433940f4f4ebb00b5a68b\nSigned-off-by: Nikolay Aleksandrov \u003crazor@blackwall.org\u003e\nReviewed-by: Ido Schimmel \u003cidosch@nvidia.com\u003e\nLink: https://patch.msgid.link/20251105111919.1499702-3-razor@blackwall.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "8dca36978aa80bab9d4da130c211db75c9e00048", "tree": "669d9c7c63b9c8bf475a0c68ce3bf8b5f2e03a8b", "parents": [ "0216721ce71252f60d89af49c8dff613358058d3" ], "author": { "name": "Nikolay Aleksandrov", "email": "razor@blackwall.org", "time": "Wed Nov 05 13:19:18 2025 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Nov 06 07:32:17 2025 -0800" }, "message": "net: bridge: fix use-after-free due to MST port state bypass\n\nsyzbot reported[1] a use-after-free when deleting an expired fdb. It is\ndue to a race condition between learning still happening and a port being\ndeleted, after all its fdbs have been flushed. The port\u0027s state has been\ntoggled to disabled so no learning should happen at that time, but if we\nhave MST enabled, it will bypass the port\u0027s state, that together with VLAN\nfiltering disabled can lead to fdb learning at a time when it shouldn\u0027t\nhappen while the port is being deleted. VLAN filtering must be disabled\nbecause we flush the port VLANs when it\u0027s being deleted which will stop\nlearning. This fix adds a check for the port\u0027s vlan group which is\ninitialized to NULL when the port is getting deleted, that avoids the port\nstate bypass. When MST is enabled there would be a minimal new overhead\nin the fast-path because the port\u0027s vlan group pointer is cache-hot.\n\n[1] https://syzkaller.appspot.com/bug?extid\u003ddd280197f0f7ab3917be\n\nFixes: ec7328b59176 (\"net: bridge: mst: Multiple Spanning Tree (MST) mode\")\nReported-by: syzbot+dd280197f0f7ab3917be@syzkaller.appspotmail.com\nCloses: https://lore.kernel.org/netdev/69088ffa.050a0220.29fc44.003d.GAE@google.com/\nSigned-off-by: Nikolay Aleksandrov \u003crazor@blackwall.org\u003e\nReviewed-by: Ido Schimmel \u003cidosch@nvidia.com\u003e\nLink: https://patch.msgid.link/20251105111919.1499702-2-razor@blackwall.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "0216721ce71252f60d89af49c8dff613358058d3", "tree": "5b7afc0b567145d7b26dd9761a3f4a0e81789c8c", "parents": [ "067bf016e99ad72aa4ff869d6dec1fd62a9c6202" ], "author": { "name": "Horatiu Vultur", "email": "horatiu.vultur@microchip.com", "time": "Wed Nov 05 08:49:55 2025 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Nov 06 07:31:34 2025 -0800" }, "message": "lan966x: Fix sleeping in atomic context\n\nThe following warning was seen when we try to connect using ssh to the device.\n\nBUG: sleeping function called from invalid context at kernel/locking/mutex.c:575\nin_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 104, name: dropbear\npreempt_count: 1, expected: 0\nINFO: lockdep is turned off.\nCPU: 0 UID: 0 PID: 104 Comm: dropbear Tainted: G W 6.18.0-rc2-00399-g6f1ab1b109b9-dirty #530 NONE\nTainted: [W]\u003dWARN\nHardware name: Generic DT based system\nCall trace:\n unwind_backtrace from show_stack+0x10/0x14\n show_stack from dump_stack_lvl+0x7c/0xac\n dump_stack_lvl from __might_resched+0x16c/0x2b0\n __might_resched from __mutex_lock+0x64/0xd34\n __mutex_lock from mutex_lock_nested+0x1c/0x24\n mutex_lock_nested from lan966x_stats_get+0x5c/0x558\n lan966x_stats_get from dev_get_stats+0x40/0x43c\n dev_get_stats from dev_seq_printf_stats+0x3c/0x184\n dev_seq_printf_stats from dev_seq_show+0x10/0x30\n dev_seq_show from seq_read_iter+0x350/0x4ec\n seq_read_iter from seq_read+0xfc/0x194\n seq_read from proc_reg_read+0xac/0x100\n proc_reg_read from vfs_read+0xb0/0x2b0\n vfs_read from ksys_read+0x6c/0xec\n ksys_read from ret_fast_syscall+0x0/0x1c\nException stack(0xf0b11fa8 to 0xf0b11ff0)\n1fa0: 00000001 00001000 00000008 be9048d8 00001000 00000001\n1fc0: 00000001 00001000 00000008 00000003 be905920 0000001e 00000000 00000001\n1fe0: 0005404c be9048c0 00018684 b6ec2cd8\n\nIt seems that we are using a mutex in a atomic context which is wrong.\nChange the mutex with a spinlock.\n\nFixes: 12c2d0a5b8e2 (\"net: lan966x: add ethtool configuration and statistics\")\nSigned-off-by: Horatiu Vultur \u003choratiu.vultur@microchip.com\u003e\nReviewed-by: Jacob Keller \u003cjacob.e.keller@intel.com\u003e\nLink: https://patch.msgid.link/20251105074955.1766792-1-horatiu.vultur@microchip.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "067bf016e99ad72aa4ff869d6dec1fd62a9c6202", "tree": "4380a30c12a04b9bfe65c3f847a6683a867e1380", "parents": [ "96baf482ca1f69f0da9d10a5bd8422c87ea9039e" ], "author": { "name": "Hangbin Liu", "email": "liuhangbin@gmail.com", "time": "Wed Nov 05 07:26:20 2025 +0000" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Nov 06 07:16:37 2025 -0800" }, "message": "bonding: fix NULL pointer dereference in actor_port_prio setting\n\nLiang reported an issue where setting a slave’s actor_port_prio to\npredefined values such as 0, 255, or 65535 would cause a system crash.\n\nThe problem occurs because in bond_opt_parse(), when the provided value\nmatches a predefined table entry, the function returns that table entry,\nwhich does not contain slave information. Later, in\nbond_option_actor_port_prio_set(), calling bond_slave_get_rtnl() leads\nto a NULL pointer dereference.\n\nSince actor_port_prio is defined as a u16 and initialized to the default\nvalue of 255 in ad_initialize_port(), there is no need for the\nbond_actor_port_prio_tbl. Using the BOND_OPTFLAG_RAWVAL flag is sufficient.\n\nFixes: 6b6dc81ee7e8 (\"bonding: add support for per-port LACP actor priority\")\nReported-by: Liang Li \u003cliali@redhat.com\u003e\nSigned-off-by: Hangbin Liu \u003cliuhangbin@gmail.com\u003e\nLink: https://patch.msgid.link/20251105072620.164841-1-liuhangbin@gmail.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "96baf482ca1f69f0da9d10a5bd8422c87ea9039e", "tree": "797b850ab2fac44807f331403399c3a31375ff86", "parents": [ "7d1988a943850c584e8e2e4bcc7a3b5275024072" ], "author": { "name": "Tristram Ha", "email": "tristram.ha@microchip.com", "time": "Tue Nov 04 19:37:41 2025 -0800" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Nov 06 07:11:36 2025 -0800" }, "message": "net: dsa: microchip: Fix reserved multicast address table programming\n\nKSZ9477/KSZ9897 and LAN937X families of switches use a reserved multicast\naddress table for some specific forwarding with some multicast addresses,\nlike the one used in STP. The hardware assumes the host port is the last\nport in KSZ9897 family and port 5 in LAN937X family. Most of the time\nthis assumption is correct but not in other cases like KSZ9477.\nOriginally the function just setups the first entry, but the others still\nneed update, especially for one common multicast address that is used by\nPTP operation.\n\nLAN937x also uses different register bits when accessing the reserved\ntable.\n\nFixes: 457c182af597 (\"net: dsa: microchip: generic access to ksz9477 static and reserved table\")\nSigned-off-by: Tristram Ha \u003ctristram.ha@microchip.com\u003e\nTested-by: Łukasz Majewski \u003clukma@nabladev.com\u003e\nLink: https://patch.msgid.link/20251105033741.6455-1-Tristram.Ha@microchip.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "d0164c161923ac303bd843e04ebe95cfd03c6e19", "tree": "ed41845392eadfb6cea8edb8484110e8b6cdfba7", "parents": [ "ae431059e75d36170a5ae6b44cc4d06d43613215" ], "author": { "name": "Sukrit Bhatnagar", "email": "Sukrit.Bhatnagar@sony.com", "time": "Thu Nov 06 14:28:51 2025 +0900" }, "committer": { "name": "Sean Christopherson", "email": "seanjc@google.com", "time": "Thu Nov 06 06:06:18 2025 -0800" }, "message": "KVM: VMX: Fix check for valid GVA on an EPT violation\n\nOn an EPT violation, bit 7 of the exit qualification is set if the\nguest linear-address is valid. The derived page fault error code\nshould not be checked for this bit.\n\nFixes: f3009482512e (\"KVM: VMX: Set PFERR_GUEST_{FINAL,PAGE}_MASK if and only if the GVA is valid\")\nCc: stable@vger.kernel.org\nSigned-off-by: Sukrit Bhatnagar \u003cSukrit.Bhatnagar@sony.com\u003e\nReviewed-by: Xiaoyao Li \u003cxiaoyao.li@intel.com\u003e\nLink: https://patch.msgid.link/20251106052853.3071088-1-Sukrit.Bhatnagar@sony.com\nSigned-off-by: Sean Christopherson \u003cseanjc@google.com\u003e\n" }, { "commit": "b750f5a9d64df6cfe9103c7feb7314694318818d", "tree": "c7358c17ff981e35bb2775e3b01c4b8fa7022f0b", "parents": [ "664ce10246ba00746af94a08b7fbda8ccaacd930" ], "author": { "name": "LiangCheng Wang", "email": "zaq14760@gmail.com", "time": "Tue Oct 28 10:55:38 2025 +0800" }, "committer": { "name": "Thomas Zimmermann", "email": "tzimmermann@suse.de", "time": "Thu Nov 06 13:47:29 2025 +0100" }, "message": "drm/tiny: pixpaper: add explicit dependency on MMU\n\nThe DRM_GEM_SHMEM_HELPER helper requires MMU enabled because it uses\nvmf_insert_pfn() in its mmap implementation. On NOMMU configurations\n(e.g. some RISC-V randconfig builds), this symbol is unavailable and\nselecting DRM_GEM_SHMEM_HELPER causes a modpost undefined reference:\n\n ERROR: modpost: \"vmf_insert_pfn\" [drivers/gpu/drm/drm_shmem_helper.ko] undefined!\n\nNormally, Kconfig prevents this helper from being selected when\nCONFIG_MMU\u003dn. However, in some randconfig builds (such as those used by\n0day CI), select statements can override unmet dependencies, triggering\nthe issue.\n\nAdd an explicit dependency on MMU to DRM_PIXPAPER to prevent this.\n\nReported-by: kernel test robot \u003clkp@intel.com\u003e\nCloses: https://lore.kernel.org/oe-kbuild-all/202510280213.0rlYA4T3-lkp@intel.com/\nFixes: 0c4932f6ddf8 (\"drm/tiny: pixpaper: Fix missing dependency on DRM_GEM_SHMEM_HELPER\")\nAcked-by: Thomas Zimmermann \u003ctzimmermann@suse.de\u003e\nSigned-off-by: LiangCheng Wang \u003czaq14760@gmail.com\u003e\nSigned-off-by: Thomas Zimmermann \u003ctzimmermann@suse.de\u003e\nLink: https://patch.msgid.link/20251028-bar-v1-1-edfbd13fafff@gmail.com\n" }, { "commit": "4cb5ac2626b5704ed712ac1d46b9d89fdfc12c5d", "tree": "380d4b2b28a61b57971999698e9956e409ec2632", "parents": [ "6146a0f1dfae5d37442a9ddcba012add260bceb0" ], "author": { "name": "Peter Zijlstra", "email": "peterz@infradead.org", "time": "Wed Jul 16 16:29:46 2025 +0200" }, "committer": { "name": "Peter Zijlstra", "email": "peterz@infradead.org", "time": "Thu Nov 06 12:30:54 2025 +0100" }, "message": "futex: Optimize per-cpu reference counting\n\nShrikanth noted that the per-cpu reference counter was still some 10%\nslower than the old immutable option (which removes the reference\ncounting entirely).\n\nFurther optimize the per-cpu reference counter by:\n\n - switching from RCU to preempt;\n - using __this_cpu_*() since we now have preempt disabled;\n - switching from smp_load_acquire() to READ_ONCE().\n\nThis is all safe because disabling preemption inhibits the RCU grace\nperiod exactly like rcu_read_lock().\n\nHaving preemption disabled allows using __this_cpu_*() provided the\nonly access to the variable is in task context -- which is the case\nhere.\n\nFurthermore, since we know changing fph-\u003estate to FR_ATOMIC demands a\nfull RCU grace period we can rely on the implied smp_mb() from that to\nreplace the acquire barrier().\n\nThis is very similar to the percpu_down_read_internal() fast-path.\n\nThe reason this is significant for PowerPC is that it uses the generic\nthis_cpu_*() implementation which relies on local_irq_disable() (the\nx86 implementation relies on it being a single memop instruction to be\nIRQ-safe). Switching to preempt_disable() and __this_cpu*() avoids\nthis IRQ state swizzling. Also, PowerPC needs LWSYNC for the ACQUIRE\nbarrier, not having to use explicit barriers safes a bunch.\n\nCombined this reduces the performance gap by half, down to some 5%.\n\nFixes: 760e6f7befba (\"futex: Remove support for IMMUTABLE\")\nReported-by: Shrikanth Hegde \u003csshegde@linux.ibm.com\u003e\nTested-by: Shrikanth Hegde \u003csshegde@linux.ibm.com\u003e\nSigned-off-by: Peter Zijlstra (Intel) \u003cpeterz@infradead.org\u003e\nReviewed-by: Sebastian Andrzej Siewior \u003cbigeasy@linutronix.de\u003e\nLink: https://patch.msgid.link/20251106092929.GR4067720@noisy.programming.kicks-ass.net\n" }, { "commit": "956dfda6a70885f18c0f8236a461aa2bc4f556ad", "tree": "3583f1a2126deaebc81387fc25a5a93d10c00c03", "parents": [ "6146a0f1dfae5d37442a9ddcba012add260bceb0" ], "author": { "name": "Aaron Lu", "email": "ziqianlu@bytedance.com", "time": "Thu Oct 30 11:27:55 2025 +0800" }, "committer": { "name": "Peter Zijlstra", "email": "peterz@infradead.org", "time": "Thu Nov 06 12:30:52 2025 +0100" }, "message": "sched/fair: Prevent cfs_rq from being unthrottled with zero runtime_remaining\n\nWhen a cfs_rq is to be throttled, its limbo list should be empty and\nthat\u0027s why there is a warn in tg_throttle_down() for non empty\ncfs_rq-\u003ethrottled_limbo_list.\n\nWhen running a test with the following hierarchy:\n\n root\n / \\\n A* ...\n / | \\ ...\n B\n / \\\n C*\n\nwhere both A and C have quota settings, that warn on non empty limbo list\nis triggered for a cfs_rq of C, let\u0027s call it cfs_rq_c(and ignore the cpu\npart of the cfs_rq for the sake of simpler representation).\n\nDebug showed it happened like this:\nTask group C is created and quota is set, so in tg_set_cfs_bandwidth(),\ncfs_rq_c is initialized with runtime_enabled set, runtime_remaining\nequals to 0 and *unthrottled*. Before any tasks are enqueued to cfs_rq_c,\n*multiple* throttled tasks can migrate to cfs_rq_c (e.g., due to task\ngroup changes). When enqueue_task_fair(cfs_rq_c, throttled_task) is\ncalled and cfs_rq_c is in a throttled hierarchy (e.g., A is throttled),\nthese throttled tasks are directly placed into cfs_rq_c\u0027s limbo list by\nenqueue_throttled_task().\n\nLater, when A is unthrottled, tg_unthrottle_up(cfs_rq_c) enqueues these\ntasks. The first enqueue triggers check_enqueue_throttle(), and with zero\nruntime_remaining, cfs_rq_c can be throttled in throttle_cfs_rq() if it\ncan\u0027t get more runtime and enters tg_throttle_down(), where the warning\nis hit due to remaining tasks in the limbo list.\n\nI think it\u0027s a chaos to trigger throttle on unthrottle path, the status\nof a being unthrottled cfs_rq can be in a mixed state in the end, so fix\nthis by granting 1ns to cfs_rq in tg_set_cfs_bandwidth(). This ensures\ncfs_rq_c has a positive runtime_remaining when initialized as unthrottled\nand cannot enter tg_unthrottle_up() with zero runtime_remaining.\n\nAlso, update outdated comments in tg_throttle_down() since\nunthrottle_cfs_rq() is no longer called with zero runtime_remaining.\nWhile at it, remove a redundant assignment to se in tg_throttle_down().\n\nFixes: e1fad12dcb66 (\"sched/fair: Switch to task based throttle model\")\nReviewed-By: Benjamin Segall \u003cbsegall@google.com\u003e\nSuggested-by: Benjamin Segall \u003cbsegall@google.com\u003e\nSigned-off-by: Aaron Lu \u003cziqianlu@bytedance.com\u003e\nSigned-off-by: Peter Zijlstra (Intel) \u003cpeterz@infradead.org\u003e\nReviewed-by: K Prateek Nayak \u003ckprateek.nayak@amd.com\u003e\nTested-by: K Prateek Nayak \u003ckprateek.nayak@amd.com\u003e\nTested-by: Hao Jia \u003cjiahao1@lixiang.com\u003e\nLink: https://patch.msgid.link/20251030032755.560-1-ziqianlu@bytedance.com\n" }, { "commit": "d8a823c6f04ef03e3bd7249d2e796da903e7238d", "tree": "8b69078e7a6da49c009e615994c26e9cd3a727ba", "parents": [ "21ab5179aafa2ded7f3851bfe7e043f8a3b6199d" ], "author": { "name": "Christoph Hellwig", "email": "hch@lst.de", "time": "Tue Nov 04 05:43:01 2025 -0500" }, "committer": { "name": "Carlos Maiolino", "email": "cem@kernel.org", "time": "Thu Nov 06 08:59:19 2025 +0100" }, "message": "xfs: free xfs_busy_extents structure when no RT extents are queued\n\nkmemleak occasionally reports leaking xfs_busy_extents structure\nfrom xfs_scrub calls after running xfs/528 (but attributed to following\ntests), which seems to be caused by not freeing the xfs_busy_extents\nstructure when tr.queued is 0 and xfs_trim_rtgroup_extents breaks out\nof the main loop. Free the structure in this case.\n\nFixes: a3315d11305f (\"xfs: use rtgroup busy extent list for FITRIM\")\nSigned-off-by: Christoph Hellwig \u003chch@lst.de\u003e\nReviewed-by: Darrick J. Wong \u003cdjwong@kernel.org\u003e\nSigned-off-by: Carlos Maiolino \u003ccem@kernel.org\u003e\n" }, { "commit": "c379b745e12a99f0a54bafaaf75fc710614511ce", "tree": "d7c58fd5e3635bb3ccdf3dd9cd2dfd326685407e", "parents": [ "7f434e1d9a17ca5f567c9796c9c105a65c18db9a" ], "author": { "name": "Vlastimil Babka", "email": "vbabka@suse.cz", "time": "Mon Nov 03 13:24:15 2025 +0100" }, "committer": { "name": "Vlastimil Babka", "email": "vbabka@suse.cz", "time": "Thu Nov 06 08:13:12 2025 +0100" }, "message": "slab: prevent infinite loop in kmalloc_nolock() with debugging\n\nIn review of a followup work, Harry noticed a potential infinite loop.\nUpon closed inspection, it already exists for kmalloc_nolock() on a\ncache with debugging enabled, since commit af92793e52c3 (\"slab:\nIntroduce kmalloc_nolock() and kfree_nolock().\")\n\nWhen alloc_single_from_new_slab() fails to trylock node list_lock, we\nkeep retrying to get partial slab or allocate a new slab. If we indeed\ninterrupted somebody holding the list_lock, the trylock fill fail\ndeterministically and we end up allocating and defer-freeing slabs\nindefinitely with no progress.\n\nTo fix it, fail the allocation if spinning is not allowed. This is\nacceptable in the restricted context of kmalloc_nolock(), especially\nwith debugging enabled.\n\nReported-by: Harry Yoo \u003charry.yoo@oracle.com\u003e\nCloses: https://lore.kernel.org/all/aQLqZjjq1SPD3Fml@hyeyoo/\nFixes: af92793e52c3 (\"slab: Introduce kmalloc_nolock() and kfree_nolock().\")\nAcked-by: Alexei Starovoitov \u003cast@kernel.org\u003e\nReviewed-by: Harry Yoo \u003charry.yoo@oracle.com\u003e\nLink: https://patch.msgid.link/20251103-fix-nolock-loop-v1-1-6e2b3e82b9da@suse.cz\nSigned-off-by: Vlastimil Babka \u003cvbabka@suse.cz\u003e\n" }, { "commit": "7d1988a943850c584e8e2e4bcc7a3b5275024072", "tree": "8b111f2f7226467e78d9fc7861f4b096c9a1d070", "parents": [ "4d6ec3a7932ca5b168426f7b5b40abab2b41d2da", "4c740c4d8bac5569c5bf5f86db65ce779178f9a2" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Nov 05 18:04:54 2025 -0800" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Nov 05 18:04:55 2025 -0800" }, "message": "Merge tag \u0027wireless-2025-11-05\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless\n\nJohannes Berg says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nJust two small fixes:\n\n - ath12k: revert a change that caused performance regressions\n - hwsim: don\u0027t ignore netns on netlink socket matching\n\n* tag \u0027wireless-2025-11-05\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless:\n wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup\n Revert \"wifi: ath12k: Fix missing station power save configuration\"\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20251105152827.53254-3-johannes@sipsolutions.net\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "4d6ec3a7932ca5b168426f7b5b40abab2b41d2da", "tree": "ce90ed49eee19f6617095ae7e4675096ec220dea", "parents": [ "a04ea57aae375bdda1cb57034d8bcbb351e1f973" ], "author": { "name": "Haotian Zhang", "email": "vulab@iscas.ac.cn", "time": "Wed Nov 05 11:47:16 2025 +0800" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Nov 05 18:02:34 2025 -0800" }, "message": "net: wan: framer: pef2256: Switch to devm_mfd_add_devices()\n\nThe driver calls mfd_add_devices() but fails to call mfd_remove_devices()\nin error paths after successful MFD device registration and in the remove\nfunction. This leads to resource leaks where MFD child devices are not\nproperly unregistered.\n\nReplace mfd_add_devices with devm_mfd_add_devices to automatically\nmanage the device resources.\n\nFixes: c96e976d9a05 (\"net: wan: framer: Add support for the Lantiq PEF2256 framer\")\nSuggested-by: Herve Codina \u003cherve.codina@bootlin.com\u003e\nSigned-off-by: Haotian Zhang \u003cvulab@iscas.ac.cn\u003e\nAcked-by: Herve Codina \u003cherve.codina@bootlin.com\u003e\nLink: https://patch.msgid.link/20251105034716.662-1-vulab@iscas.ac.cn\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "a04ea57aae375bdda1cb57034d8bcbb351e1f973", "tree": "0f6525367bd5ad486635c0979938eb29d9d9fa48", "parents": [ "b1d9154878ce310d46dde5a8545366d807179b28" ], "author": { "name": "Jiawen Wu", "email": "jiawenwu@trustnetic.com", "time": "Tue Nov 04 14:23:21 2025 +0800" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Nov 05 17:52:13 2025 -0800" }, "message": "net: libwx: fix device bus LAN ID\n\nThe device bus LAN ID was obtained from PCI_FUNC(), but when a PF\nport is passthrough to a virtual machine, the function number may not\nmatch the actual port index on the device. This could cause the driver\nto perform operations such as LAN reset on the wrong port.\n\nFix this by reading the LAN ID from port status register.\n\nFixes: a34b3e6ed8fb (\"net: txgbe: Store PCI info\")\nCc: stable@vger.kernel.org\nSigned-off-by: Jiawen Wu \u003cjiawenwu@trustnetic.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/B60A670C1F52CB8E+20251104062321.40059-1-jiawenwu@trustnetic.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "b1d9154878ce310d46dde5a8545366d807179b28", "tree": "98c790b246448327f5995da58ca1b719386c1c6f", "parents": [ "ae4789affd1e181ae46e72e2b5fbe2d6d7b6616a", "d8a7ed9586c7579a99e9e2d90988c9eceeee61ff" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Nov 05 17:48:40 2025 -0800" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Nov 05 17:48:41 2025 -0800" }, "message": "Merge branch \u0027net-mlx5e-shampo-fixes-for-64kb-page-size\u0027\n\nTariq Toukan says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nnet/mlx5e: SHAMPO fixes for 64KB page size\n\nThis series by Dragos contains fixes for HW-GRO issues found on systems\nwith 64KB page size.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/1762238915-1027590-1-git-send-email-tariqt@nvidia.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "d8a7ed9586c7579a99e9e2d90988c9eceeee61ff", "tree": "98c790b246448327f5995da58ca1b719386c1c6f", "parents": [ "bacd8d80181ebe34b599a39aa26bf73a44c91e55" ], "author": { "name": "Dragos Tatulea", "email": "dtatulea@nvidia.com", "time": "Tue Nov 04 08:48:35 2025 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Nov 05 17:48:37 2025 -0800" }, "message": "net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages\n\nThe MLX5E_SHAMPO_WQ_HEADER_PER_PAGE and\nMLX5E_SHAMPO_LOG_MAX_HEADER_ENTRY_SIZE macros are used directly in\nseveral places under the assumption that there will always be more\nheaders per WQE than headers per page. However, this assumption doesn\u0027t\nhold for 64K page sizes and higher MTUs (\u003e 4K). This can be first\nobserved during header page allocation: ksm_entries will become 0 during\nalignment to MLX5E_SHAMPO_WQ_HEADER_PER_PAGE.\n\nThis patch introduces 2 additional members to the mlx5e_shampo_hd struct\nwhich are meant to be used instead of the macrose mentioned above.\nWhen the number of headers per WQE goes below\nMLX5E_SHAMPO_WQ_HEADER_PER_PAGE, clamp the number of headers per\npage and expand the header size accordingly so that the headers\nfor one WQE cover a full page.\n\nAll the formulas are adapted to use these two new members.\n\nFixes: 945ca432bfd0 (\"net/mlx5e: SHAMPO, Drop info array\")\nSigned-off-by: Dragos Tatulea \u003cdtatulea@nvidia.com\u003e\nSigned-off-by: Tariq Toukan \u003ctariqt@nvidia.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/1762238915-1027590-4-git-send-email-tariqt@nvidia.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "bacd8d80181ebe34b599a39aa26bf73a44c91e55", "tree": "4a01eafe12bafcb9eab3036049ec02716c3e5cc6", "parents": [ "665a7e13c220bbde55531a24bd5524320648df10" ], "author": { "name": "Dragos Tatulea", "email": "dtatulea@nvidia.com", "time": "Tue Nov 04 08:48:34 2025 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Nov 05 17:48:36 2025 -0800" }, "message": "net/mlx5e: SHAMPO, Fix skb size check for 64K pages\n\nmlx5e_hw_gro_skb_has_enough_space() uses a formula to check if there is\nenough space in the skb frags to store more data. This formula is\nincorrect for 64K page sizes and it triggers early GRO session\ntermination because the first fragment will blow up beyond\nGRO_LEGACY_MAX_SIZE.\n\nThis patch adds a special case for page sizes \u003e\u003d GRO_LEGACY_MAX_SIZE\n(64K) which uses the skb-\u003elen instead. Within this context,\nthe check is safe from fragment overflow because the hardware\nwill continuously fill the data up to the reservation size of 64K\nand the driver will coalesce all data from the same page to the same\nfragment. This means that the data will span one fragment or at most\ntwo for such a large page size.\n\nIt is expected that the if statement will be optimized out as the\ncheck is done with constants.\n\nFixes: 92552d3abd32 (\"net/mlx5e: HW_GRO cqe handler implementation\")\nSigned-off-by: Dragos Tatulea \u003cdtatulea@nvidia.com\u003e\nSigned-off-by: Tariq Toukan \u003ctariqt@nvidia.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/1762238915-1027590-3-git-send-email-tariqt@nvidia.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "665a7e13c220bbde55531a24bd5524320648df10", "tree": "bcae602e010e71dfd50d3a9b196862d000f8fb45", "parents": [ "ae4789affd1e181ae46e72e2b5fbe2d6d7b6616a" ], "author": { "name": "Dragos Tatulea", "email": "dtatulea@nvidia.com", "time": "Tue Nov 04 08:48:33 2025 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Nov 05 17:48:36 2025 -0800" }, "message": "net/mlx5e: SHAMPO, Fix header mapping for 64K pages\n\nHW-GRO is broken on mlx5 for 64K page sizes. The patch in the fixes tag\ndidn\u0027t take into account larger page sizes when doing an align down\nof max_ksm_entries. For 64K page size, max_ksm_entries is 0 which will skip\nmapping header pages via WQE UMR. This breaks header-data split\nand will result in the following syndrome:\n\nmlx5_core 0000:00:08.0 eth2: Error cqe on cqn 0x4c9, ci 0x0, qn 0x1133, opcode 0xe, syndrome 0x4, vendor syndrome 0x32\n00000000: 00 00 00 00 04 4a 00 00 00 00 00 00 20 00 93 32\n00000010: 55 00 00 00 fb cc 00 00 00 00 00 00 07 18 00 00\n00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4a\n00000030: 00 00 3b c7 93 01 32 04 00 00 00 00 00 00 bf e0\nmlx5_core 0000:00:08.0 eth2: ERR CQE on RQ: 0x1133\n\nFurthermore, the function that fills in WQE UMRs for the headers\n(mlx5e_build_shampo_hd_umr()) only supports mapping page sizes that\nfit in a single UMR WQE.\n\nThis patch goes back to the old non-aligned max_ksm_entries value and it\nchanges mlx5e_build_shampo_hd_umr() to support mapping a large page over\nmultiple UMR WQEs.\n\nThis means that mlx5e_build_shampo_hd_umr() can now leave a page only\npartially mapped. The caller, mlx5e_alloc_rx_hd_mpwqe(), ensures that\nthere are enough UMR WQEs to cover complete pages by working on\nksm_entries that are multiples of MLX5E_SHAMPO_WQ_HEADER_PER_PAGE.\n\nFixes: 8a0ee54027b1 (\"net/mlx5e: SHAMPO, Simplify UMR allocation for headers\")\nSigned-off-by: Dragos Tatulea \u003cdtatulea@nvidia.com\u003e\nSigned-off-by: Tariq Toukan \u003ctariqt@nvidia.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/1762238915-1027590-2-git-send-email-tariqt@nvidia.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "ae4789affd1e181ae46e72e2b5fbe2d6d7b6616a", "tree": "3508469648be9915701f075225162784aed12a83", "parents": [ "d1c94bc5b90c21b65469d30d4a6bc8ed715c1bfe" ], "author": { "name": "Meghana Malladi", "email": "m-malladi@ti.com", "time": "Tue Nov 04 16:14:15 2025 +0530" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Nov 05 17:43:08 2025 -0800" }, "message": "net: ti: icssg-prueth: Fix fdb hash size configuration\n\nThe ICSSG driver does the initial FDB configuration which\nincludes setting the control registers. Other run time\nmanagement like learning is managed by the PRU\u0027s. The default\nFDB hash size used by the firmware is 512 slots, which is\ncurrently missing in the current driver. Update the driver\nFDB config to include FDB hash size as well.\n\nPlease refer trm [1] 6.4.14.12.17 section on how the FDB config\nregister gets configured. From the table 6-1404, there is a reset\nfield for FDB_HAS_SIZE which is 4, meaning 1024 slots. Currently\nthe driver is not updating this reset value from 4(1024 slots) to\n3(512 slots). This patch fixes this by updating the reset value\nto 512 slots.\n\n[1]: https://www.ti.com/lit/pdf/spruim2\nFixes: abd5576b9c57f (\"net: ti: icssg-prueth: Add support for ICSSG switch firmware\")\nSigned-off-by: Meghana Malladi \u003cm-malladi@ti.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/20251104104415.3110537-1-m-malladi@ti.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "d1c94bc5b90c21b65469d30d4a6bc8ed715c1bfe", "tree": "be3cbad415fa42725d873f517315edd8d1aa9c6b", "parents": [ "d917c217b612971ea05ae1582e8740b747e0e7e8" ], "author": { "name": "Gal Pressman", "email": "gal@nvidia.com", "time": "Tue Nov 04 16:15:36 2025 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Nov 05 17:42:37 2025 -0800" }, "message": "net/mlx5e: Fix return value in case of module EEPROM read error\n\nmlx5e_get_module_eeprom_by_page() has weird error handling.\n\nFirst, it is treating -EINVAL as a special case, but it is unclear why.\n\nSecond, it tries to fail \"gracefully\" by returning the number of bytes\nread even in case of an error. This results in wrongly returning\nsuccess (0 return value) if the error occurs before any bytes were\nread.\n\nSimplify the error handling by returning an error when such occurs. This\nalso aligns with the error handling we have in mlx5e_get_module_eeprom()\nfor the old API.\n\nThis fixes the following case where the query fails, but userspace\nethtool wrongly treats it as success and dumps an output:\n\n # ethtool -m eth2\n netlink warning: mlx5_core: Query module eeprom by page failed, read 0 bytes, err -5\n netlink warning: mlx5_core: Query module eeprom by page failed, read 0 bytes, err -5\n Offset\t\tValues\n ------\t\t------\n 0x0000:\t\t00 00 00 00 05 00 04 00 00 00 00 00 05 00 05 00\n 0x0010:\t\t00 00 00 00 05 00 06 00 50 00 00 00 67 65 20 66\n 0x0020:\t\t61 69 6c 65 64 2c 20 72 65 61 64 20 30 20 62 79\n 0x0030:\t\t74 65 73 2c 20 65 72 72 20 2d 35 00 14 00 03 00\n 0x0040:\t\t08 00 01 00 03 00 00 00 08 00 02 00 1a 00 00 00\n 0x0050:\t\t14 00 04 00 08 00 01 00 04 00 00 00 08 00 02 00\n 0x0060:\t\t0e 00 00 00 14 00 05 00 08 00 01 00 05 00 00 00\n 0x0070:\t\t08 00 02 00 1a 00 00 00 14 00 06 00 08 00 01 00\n\nFixes: e109d2b204da (\"net/mlx5: Implement get_module_eeprom_by_page()\")\nSigned-off-by: Gal Pressman \u003cgal@nvidia.com\u003e\nReviewed-by: Alex Lazar \u003calazar@nvidia.com\u003e\nSigned-off-by: Tariq Toukan \u003ctariqt@nvidia.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/1762265736-1028868-1-git-send-email-tariqt@nvidia.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "d917c217b612971ea05ae1582e8740b747e0e7e8", "tree": "1826d13dd0fff057c7479cc85ba94add800db080", "parents": [ "b1d16f7c0063b7209fd3251ce40c77d37b477b83" ], "author": { "name": "Sebastian Andrzej Siewior", "email": "bigeasy@linutronix.de", "time": "Tue Nov 04 16:34:35 2025 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Nov 05 17:41:29 2025 -0800" }, "message": "net: gro_cells: Reduce lock scope in gro_cell_poll\n\nOne GRO-cell device\u0027s NAPI callback can nest into the GRO-cell of\nanother device if the underlying device is also using GRO-cell.\nThis is the case for IPsec over vxlan.\nThese two GRO-cells are separate devices. From lockdep\u0027s point of view\nit is the same because each device is sharing the same lock class and so\nit reports a possible deadlock assuming one device is nesting into\nitself.\n\nHold the bh_lock only while accessing gro_cell::napi_skbs in\ngro_cell_poll(). This reduces the locking scope and avoids acquiring the\nsame lock class multiple times.\n\nFixes: 25718fdcbdd2 (\"net: gro_cells: Use nested-BH locking for gro_cell\")\nReported-by: Gal Pressman \u003cgal@nvidia.com\u003e\nCloses: https://lore.kernel.org/all/66664116-edb8-48dc-ad72-d5223696dd19@nvidia.com/\nSigned-off-by: Sebastian Andrzej Siewior \u003cbigeasy@linutronix.de\u003e\nLink: https://patch.msgid.link/20251104153435.ty88xDQt@linutronix.de\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "b1d16f7c0063b7209fd3251ce40c77d37b477b83", "tree": "ddb200bd271b2ee3b8e92254c9c35f5310142980", "parents": [ "327c20c21d80e0d87834b392d83ae73c955ad8ff" ], "author": { "name": "Michal Swiatkowski", "email": "michal.swiatkowski@linux.intel.com", "time": "Tue Nov 04 09:23:31 2025 -0800" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Nov 05 17:38:03 2025 -0800" }, "message": "libie: depend on DEBUG_FS when building LIBIE_FWLOG\n\nLIBIE_FWLOG is unusable without DEBUG_FS. Mark it in Kconfig.\n\nFix build error on ixgbe when DEBUG_FS is not set. To not add another\nlayer of #if IS_ENABLED(LIBIE_FWLOG) in ixgbe fwlog code define debugfs\ndentry even when DEBUG_FS isn\u0027t enabled. In this case the dummy\nfunctions of LIBIE_FWLOG will be used, so not initialized dentry isn\u0027t a\nproblem.\n\nFixes: 641585bc978e (\"ixgbe: fwlog support for e610\")\nReported-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nCloses: https://lore.kernel.org/lkml/f594c621-f9e1-49f2-af31-23fbcb176058@roeck-us.net/\nSigned-off-by: Michal Swiatkowski \u003cmichal.swiatkowski@linux.intel.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nReviewed-by: Aleksandr Loktionov \u003caleksandr.loktionov@intel.com\u003e\nTested-by: Rinitha S \u003csx.rinitha@intel.com\u003e (A Contingent worker at Intel)\nSigned-off-by: Tony Nguyen \u003canthony.l.nguyen@intel.com\u003e\nLink: https://patch.msgid.link/20251104172333.752445-1-anthony.l.nguyen@intel.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "664ce10246ba00746af94a08b7fbda8ccaacd930", "tree": "bccd33f5a3cbd8d5e76e9be261a166453f01a5a2", "parents": [ "1cf52a0d4ba079fb354fa1339f5fb34142228dae" ], "author": { "name": "James Jones", "email": "jajones@nvidia.com", "time": "Thu Oct 30 11:11:53 2025 -0700" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Thu Nov 06 11:02:08 2025 +1000" }, "message": "drm/nouveau: Advertise correct modifiers on GB20x\n\n8 and 16 bit formats use a different layout on\nGB20x than they did on prior chips. Add the\ncorresponding DRM format modifiers to the list of\nmodifiers supported by the display engine on such\nchips, and filter the supported modifiers for each\nformat based on its bytes per pixel in\nnv50_plane_format_mod_supported().\n\nNote this logic will need to be updated when GB10\nsupport is added, since it is a GB20x chip that\nuses the pre-GB20x sector layout for all formats.\n\nFixes: 6cc6e08d4542 (\"drm/nouveau/kms: add support for GB20x\")\nSigned-off-by: James Jones \u003cjajones@nvidia.com\u003e\nReviewed-by: Faith Ekstrand \u003cfaith.ekstrand@collabora.com\u003e\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nCc: stable@vger.kernel.org\nLink: https://patch.msgid.link/20251030181153.1208-3-jajones@nvidia.com\n" }, { "commit": "1cf52a0d4ba079fb354fa1339f5fb34142228dae", "tree": "2e8501344fe109f1b4d8f19ef1046e7c5041fa9e", "parents": [ "ebe755605082eddff80eafe0c50915b1366ee98f" ], "author": { "name": "James Jones", "email": "jajones@nvidia.com", "time": "Thu Oct 30 11:11:52 2025 -0700" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Thu Nov 06 11:01:45 2025 +1000" }, "message": "drm: define NVIDIA DRM format modifiers for GB20x\n\nThe layout of bits within the individual tiles\n(referred to as sectors in the\nDRM_FORMAT_MOD_NVIDIA_BLOCK_LINEAR_2D() macro)\nchanged for 8 and 16-bit surfaces starting in\nBlackwell 2 GPUs (With the exception of GB10).\nTo denote the difference, extend the sector field\nin the parametric format modifier definition used\nto generate modifier values for NVIDIA hardware.\n\nWithout this change, it would be impossible to\ndifferentiate the two layouts based on modifiers,\nand as a result software could attempt to share\nsurfaces directly between pre-GB20x and GB20x\ncards, resulting in corruption when the surface\nwas accessed on one of the GPUs after being\npopulated with content by the other.\n\nOf note: This change causes the\nDRM_FORMAT_MOD_NVIDIA_BLOCK_LINEAR_2D() macro to\nevaluate its \"s\" parameter twice, with the side\neffects that entails. I surveyed all usage of the\nmodifier in the kernel and Mesa code, and that\ndoes not appear to be problematic in any current\nusage, but I thought it was worth calling out.\n\nFixes: 6cc6e08d4542 (\"drm/nouveau/kms: add support for GB20x\")\nSigned-off-by: James Jones \u003cjajones@nvidia.com\u003e\nReviewed-by: Faith Ekstrand \u003cfaith.ekstrand@collabora.com\u003e\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nCc: stable@vger.kernel.org\nLink: https://patch.msgid.link/20251030181153.1208-2-jajones@nvidia.com\n" } ], "next": "ebe755605082eddff80eafe0c50915b1366ee98f" }