)]}' { "log": [ { "commit": "6146a0f1dfae5d37442a9ddcba012add260bceb0", "tree": "f54e81b1a159f6594aac1d85398315700275d433", "parents": [ "691d401c7e0e5ea34ac6f8151bc0696db1b2500a" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Nov 02 11:28:02 2025 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Nov 02 11:28:02 2025 -0800" }, "message": "Linux 6.18-rc4\n" }, { "commit": "691d401c7e0e5ea34ac6f8151bc0696db1b2500a", "tree": "8a4695935a4501cf5ecd422f48dc4edc12d3a25e", "parents": [ "bfeeb4a1bdf5d255ea885f16be80968d1f31281b", "e7dbfe6f15b4df34bb169d180bd10f1a3c043814" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 01 10:50:43 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 01 10:50:43 2025 -0700" }, "message": "Merge tag \u0027spi-fix-v6.18-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi\n\nPull spi fix from Mark Brown:\n \"One new device ID for an Intel SoC\"\n\n* tag \u0027spi-fix-v6.18-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi:\n spi: intel: Add support for Oak Stream SPI serial flash\n" }, { "commit": "bfeeb4a1bdf5d255ea885f16be80968d1f31281b", "tree": "3ef1c067153958fa29967d3386636104d626b250", "parents": [ "963bf1619472d954d04ed8851be17df633c6afd6", "47a0925ee4bd2689f0aef4dbd67dd46442fe1ca2" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 01 10:49:12 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 01 10:49:12 2025 -0700" }, "message": "Merge tag \u0027regulator-fix-v6.18-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator\n\nPull regulator fix from Mark Brown:\n \"A simple fix for a missed part of an API conversion in the bd718x7\n driver\"\n\n* tag \u0027regulator-fix-v6.18-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator:\n regulator: bd718x7: Fix voltages scaled by resistor divider\n" }, { "commit": "963bf1619472d954d04ed8851be17df633c6afd6", "tree": "abde0ef1d8d46e717257b3bb1383877d20d1719e", "parents": [ "e3e0141d3dc55eb71792dd703e3f726cc29a6430", "48cbf50531d8eca15b8a811717afdebb8677de9b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 01 10:45:39 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 01 10:45:39 2025 -0700" }, "message": "Merge tag \u0027regmap-fix-v6.18-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap\n\nPull regmap fixes from Mark Brown:\n \"One documentation fix and a fix for a problem with the slimbus regmap\n which was uncovered by some changes in one of the drivers\"\n\n* tag \u0027regmap-fix-v6.18-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap:\n regmap: irq: Correct documentation of wake_invert flag\n regmap: slimbus: fix bus_context pointer in regmap init calls\n" }, { "commit": "e3e0141d3dc55eb71792dd703e3f726cc29a6430", "tree": "06fa4953b40e6e21c151edbb4297081c182d83b3", "parents": [ "f9bc8e0912b8f6b1d60608a715a1da575670e038", "9b041a4b66b3b62c30251e700b5688324cf66625" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 01 10:20:07 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 01 10:20:07 2025 -0700" }, "message": "Merge tag \u0027x86-urgent-2025-11-01\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull misc x86 fixes from Ingo Molnar:\n\n - Limit AMD microcode Entrysign sha256 signature checking to\n known CPU generations\n\n - Disable AMD RDSEED32 on certain Zen5 CPUs that have a\n microcode version before when the microcode-based fix was\n issued for the AMD-SB-7055 erratum\n\n - Fix FPU AMD XFD state synchronization on signal delivery\n\n - Fix (work around) a SSE4a-disassembly related build failure\n on X86_NATIVE_CPU\u003dy builds\n\n - Extend the AMD Zen6 model space with a new range of models\n\n - Fix \u003casm/intel-family.h\u003e CPU model comments\n\n - Fix the CONFIG_CFI\u003dy and CONFIG_LTO_CLANG_FULL\u003dy build, which\n was unhappy due to missing kCFI type annotations of clear_page()\n variants\n\n* tag \u0027x86-urgent-2025-11-01\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n x86/mm: Ensure clear_page() variants always have __kcfi_typeid_ symbols\n x86/cpu: Add/fix core comments for {Panther,Nova} Lake\n x86/CPU/AMD: Extend Zen6 model range\n x86/build: Disable SSE4a\n x86/fpu: Ensure XFD state on signal delivery\n x86/CPU/AMD: Add RDSEED fix for Zen5\n x86/microcode/AMD: Limit Entrysign signature checking to known generations\n" }, { "commit": "f9bc8e0912b8f6b1d60608a715a1da575670e038", "tree": "f332565479f6673663189d15bbc30a3554b071cc", "parents": [ "74131a0f1b9efc1364871a04b704e54309861668", "f4c12e5cefc8ec2eda93bc17ea734407228449ab" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 01 10:17:40 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 01 10:17:40 2025 -0700" }, "message": "Merge tag \u0027perf-urgent-2025-11-01\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull perf event fixes from Ingo Molnar:\n \"Miscellaneous fixes and CPU model updates:\n\n - Fix an out-of-bounds access on non-hybrid platforms in the Intel\n PMU DS code, reported by KASAN\n\n - Add WildcatLake PMU and uncore support: it\u0027s identical to the\n PantherLake version\"\n\n* tag \u0027perf-urgent-2025-11-01\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n perf/x86/intel/uncore: Add uncore PMU support for Wildcat Lake\n perf/x86/intel: Add PMU support for WildcatLake\n perf/x86/intel: Fix KASAN global-out-of-bounds warning\n" }, { "commit": "74131a0f1b9efc1364871a04b704e54309861668", "tree": "a11bf4072bea6de1734d5d2828087219421034f4", "parents": [ "9db0d7c5a5be25e56c3eacc1f03d296b7b0b960f", "c44b4b9eeb71f5b0b617abf6fd66d1ef0aab6200" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 01 10:07:35 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 01 10:07:35 2025 -0700" }, "message": "Merge tag \u0027objtool-urgent-2025-11-01\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull objtool fix from Ingo Molnar:\n \"Fix objtool warning when faced with raw STAC/CLAC instructions\"\n\n* tag \u0027objtool-urgent-2025-11-01\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n objtool: Fix skip_alt_group() for non-alternative STAC/CLAC\n" }, { "commit": "9db0d7c5a5be25e56c3eacc1f03d296b7b0b960f", "tree": "391eeeb5bfa6c8bb80b9b6159c5349120d8abb10", "parents": [ "cb7f9fc3725a11447a4af69dfe8d648e4320acdc", "0db22d7ee462c42c1284e98d47840932792c1adb" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 01 10:04:35 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 01 10:04:35 2025 -0700" }, "message": "Merge tag \u0027xfs-fixes-6.18-rc4\u0027 of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux\n\nPull xfs fixes from Carlos Maiolino:\n \"Just a single bug fix (and documentation for the issue)\"\n\n* tag \u0027xfs-fixes-6.18-rc4\u0027 of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux:\n xfs: document another racy GC case in xfs_zoned_map_extent\n xfs: prevent gc from picking the same zone twice\n" }, { "commit": "cb7f9fc3725a11447a4af69dfe8d648e4320acdc", "tree": "18babb5e374cf884d28c3f14574011df4722c288", "parents": [ "ba36dd5ee6fd4643ebbf6ee6eefcecf0b07e35c7", "43c2931a95e6b295bfe9e3b90dbe0f7596933e91" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 01 10:00:53 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Nov 01 10:00:53 2025 -0700" }, "message": "Merge tag \u0027kbuild-fixes-6.18-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kbuild/linux\n\nPull Kbuild fixes from Nathan Chancellor:\n\n - Formally adopt Kconfig in MAINTAINERS\n\n - Fix install-extmod-build for more O\u003d paths\n\n - Align end of .modinfo to fix Authenticode calculation in EDK2\n\n - Restore dynamic check for \u0027-fsanitize\u003dkernel-memory\u0027 in\n CONFIG_HAVE_KMSAN_COMPILER to ensure backend target has support\n for it\n\n - Initialize locale in menuconfig and nconfig to fix UTF-8 terminals\n that may not support VT100 ACS by default like PuTTY\n\n* tag \u0027kbuild-fixes-6.18-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kbuild/linux:\n kconfig/nconf: Initialize the default locale at startup\n kconfig/mconf: Initialize the default locale at startup\n KMSAN: Restore dynamic check for \u0027-fsanitize\u003dkernel-memory\u0027\n kbuild: align modinfo section for Secureboot Authenticode EDK2 compat\n kbuild: install-extmod-build: Fix when given dir outside the build dir\n MAINTAINERS: Update Kconfig section\n" }, { "commit": "c44b4b9eeb71f5b0b617abf6fd66d1ef0aab6200", "tree": "6ad00c41efeac41986bcd8cf0ca856209993d4fe", "parents": [ "ba36dd5ee6fd4643ebbf6ee6eefcecf0b07e35c7" ], "author": { "name": "Josh Poimboeuf", "email": "jpoimboe@kernel.org", "time": "Wed Oct 29 12:54:08 2025 -0700" }, "committer": { "name": "Ingo Molnar", "email": "mingo@kernel.org", "time": "Sat Nov 01 07:43:20 2025 +0100" }, "message": "objtool: Fix skip_alt_group() for non-alternative STAC/CLAC\n\nIf an insn-\u003ealt points to a STAC/CLAC instruction, skip_alt_group()\nassumes it\u0027s part of an alternative (\"alt group\") as opposed to some\nother kind of \"alt\" such as an exception fixup.\n\nWhile that assumption may hold true in the current code base, Linus has\nan out-of-tree patch which breaks that assumption by replacing the\nSTAC/CLAC alternatives with raw STAC/CLAC instructions.\n\nMake skip_alt_group() more robust by making sure it\u0027s actually an alt\ngroup before continuing.\n\nReported-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nFixes: 2d12c6fb7875 (\"objtool: Remove ANNOTATE_IGNORE_ALTERNATIVE from CLAC/STAC\")\nCloses: https://lore.kernel.org/CAHk-\u003dwi6goUT36sR8GE47_P-aVrd5g38\u003dVTRHpktWARbyE-0ow@mail.gmail.com\nSigned-off-by: Josh Poimboeuf \u003cjpoimboe@kernel.org\u003e\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\nTested-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nLink: https://patch.msgid.link/3d22415f7b8e06a64e0873b21f48389290eeaa49.1761767616.git.jpoimboe@kernel.org\n" }, { "commit": "43c2931a95e6b295bfe9e3b90dbe0f7596933e91", "tree": "d955c6feea7a6f4b712ef60bf2f47e0043484c8b", "parents": [ "3927c4a1084c48ef97f11281a0a43ecb2cb4d6f1" ], "author": { "name": "Jakub Horký", "email": "jakub.git@horky.net", "time": "Tue Oct 14 16:44:06 2025 +0200" }, "committer": { "name": "Nathan Chancellor", "email": "nathan@kernel.org", "time": "Sat Nov 01 00:23:22 2025 -0400" }, "message": "kconfig/nconf: Initialize the default locale at startup\n\nFix bug where make nconfig doesn\u0027t initialize the default locale, which\ncauses ncurses menu borders to be displayed incorrectly (lqqqqk) in\nUTF-8 terminals that don\u0027t support VT100 ACS by default, such as PuTTY.\n\nSigned-off-by: Jakub Horký \u003cjakub.git@horky.net\u003e\nLink: https://patch.msgid.link/20251014144405.3975275-2-jakub.git@horky.net\n[nathan: Alphabetize locale.h include]\nSigned-off-by: Nathan Chancellor \u003cnathan@kernel.org\u003e\n" }, { "commit": "3927c4a1084c48ef97f11281a0a43ecb2cb4d6f1", "tree": "5817921ead66a6e1b3cd9c6d34398f133e082183", "parents": [ "cf20852500d2895d1db22b69d87281aca2e7b5d0" ], "author": { "name": "Jakub Horký", "email": "jakub.git@horky.net", "time": "Tue Oct 14 17:49:32 2025 +0200" }, "committer": { "name": "Nathan Chancellor", "email": "nathan@kernel.org", "time": "Sat Nov 01 00:21:23 2025 -0400" }, "message": "kconfig/mconf: Initialize the default locale at startup\n\nFix bug where make menuconfig doesn\u0027t initialize the default locale, which\ncauses ncurses menu borders to be displayed incorrectly (lqqqqk) in\nUTF-8 terminals that don\u0027t support VT100 ACS by default, such as PuTTY.\n\nSigned-off-by: Jakub Horký \u003cjakub.git@horky.net\u003e\nLink: https://patch.msgid.link/20251014154933.3990990-1-jakub.git@horky.net\n[nathan: Alphabetize locale.h include]\nSigned-off-by: Nathan Chancellor \u003cnathan@kernel.org\u003e\n" }, { "commit": "ba36dd5ee6fd4643ebbf6ee6eefcecf0b07e35c7", "tree": "b0fae49109aeb6969f168f999ee9935ffef69e21", "parents": [ "ec0b62ccc986c06552c57f54116171cfd186ef92", "be708ed300e1ebd32978b4092b909f0d9be0958f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 31 18:22:26 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 31 18:22:26 2025 -0700" }, "message": "Merge tag \u0027bpf-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf\n\nPull bpf fixes from Alexei Starovoitov:\n\n - Mark migrate_disable/enable() as always_inline to avoid issues with\n partial inlining (Yonghong Song)\n\n - Fix powerpc stack register definition in libbpf bpf_tracing.h (Andrii\n Nakryiko)\n\n - Reject negative head_room in __bpf_skb_change_head (Daniel Borkmann)\n\n - Conditionally include dynptr copy kfuncs (Malin Jonsson)\n\n - Sync pending IRQ work before freeing BPF ring buffer (Noorain Eqbal)\n\n - Do not audit capability check in x86 do_jit() (Ondrej Mosnacek)\n\n - Fix arm64 JIT of BPF_ST insn when it writes into arena memory\n (Puranjay Mohan)\n\n* tag \u0027bpf-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf:\n bpf/arm64: Fix BPF_ST into arena memory\n bpf: Make migrate_disable always inline to avoid partial inlining\n bpf: Reject negative head_room in __bpf_skb_change_head\n bpf: Conditionally include dynptr copy kfuncs\n libbpf: Fix powerpc\u0027s stack register definition in bpf_tracing.h\n bpf: Do not audit capability check in do_jit()\n bpf: Sync pending IRQ work before freeing ring buffer\n" }, { "commit": "9b041a4b66b3b62c30251e700b5688324cf66625", "tree": "75ece247d5f6667266b8b9656e62dd2828717e9a", "parents": [ "89216c9051ef6635f1514f8e0d2f9cd63b37a3b6" ], "author": { "name": "Nathan Chancellor", "email": "nathan@kernel.org", "time": "Mon Oct 13 14:27:36 2025 -0700" }, "committer": { "name": "Borislav Petkov (AMD)", "email": "bp@alien8.de", "time": "Fri Oct 31 22:47:24 2025 +0100" }, "message": "x86/mm: Ensure clear_page() variants always have __kcfi_typeid_ symbols\n\nWhen building with CONFIG_CFI\u003dy and CONFIG_LTO_CLANG_FULL\u003dy, there is a series\nof errors from the various versions of clear_page() not having __kcfi_typeid_\nsymbols.\n\n $ cat kernel/configs/repro.config\n CONFIG_CFI\u003dy\n # CONFIG_LTO_NONE is not set\n CONFIG_LTO_CLANG_FULL\u003dy\n\n $ make -skj\"$(nproc)\" ARCH\u003dx86_64 LLVM\u003d1 clean defconfig repro.config bzImage\n ld.lld: error: undefined symbol: __kcfi_typeid_clear_page_rep\n \u003e\u003e\u003e referenced by ld-temp.o\n \u003e\u003e\u003e vmlinux.o:(__cfi_clear_page_rep)\n\n ld.lld: error: undefined symbol: __kcfi_typeid_clear_page_orig\n \u003e\u003e\u003e referenced by ld-temp.o\n \u003e\u003e\u003e vmlinux.o:(__cfi_clear_page_orig)\n\n ld.lld: error: undefined symbol: __kcfi_typeid_clear_page_erms\n \u003e\u003e\u003e referenced by ld-temp.o\n \u003e\u003e\u003e vmlinux.o:(__cfi_clear_page_erms)\n\nWith full LTO, it is possible for LLVM to realize that these functions never\nhave their address taken (as they are only used within an alternative, which\nwill make them a direct call) across the whole kernel and either drop or skip\ngenerating their kCFI type identification symbols.\n\nclear_page_{rep,orig,erms}() are defined in clear_page_64.S with\nSYM_TYPED_FUNC_START as a result of\n\n 2981557cb040 (\"x86,kcfi: Fix EXPORT_SYMBOL vs kCFI\"),\n\nas exported functions are free to be called indirectly thus need kCFI type\nidentifiers.\n\nUse KCFI_REFERENCE with these clear_page() functions to force LLVM to see\nthese functions as address-taken and generate then keep the kCFI type\nidentifiers.\n\nFixes: 2981557cb040 (\"x86,kcfi: Fix EXPORT_SYMBOL vs kCFI\")\nCloses: https://github.com/ClangBuiltLinux/linux/issues/2128\nSigned-off-by: Nathan Chancellor \u003cnathan@kernel.org\u003e\nSigned-off-by: Borislav Petkov (AMD) \u003cbp@alien8.de\u003e\nReviewed-by: Sami Tolvanen \u003csamitolvanen@google.com\u003e\nLink: https://patch.msgid.link/20251013-x86-fix-clear_page-cfi-full-lto-errors-v1-1-d69534c0be61@kernel.org\n" }, { "commit": "ec0b62ccc986c06552c57f54116171cfd186ef92", "tree": "8fb535ad6b51b76ba3213fd3aa9fe497c2f7089b", "parents": [ "f414f9fd68797182f8de4e1cd9855b6b28abde99", "41dacb39fe79cd2fce42d31fa6658d926489a548" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 31 14:47:02 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 31 14:47:02 2025 -0700" }, "message": "Merge tag \u0027drm-fixes-2025-10-31\u0027 of https://gitlab.freedesktop.org/drm/kernel\n\nPull drm fixes from Simona Vetter:\n \"Looks like stochastics conspired to make this one a bit bigger, but\n nothing scary at all. Also first examples of the new Link: tags, yay!\n\n Next week Dave should be back.\n\n Drivers:\n - mediatek: uaf in unbind, fixes -rc2 boot regression\n - radeon: devm conversion fixes\n - amdgpu: VPE idle handler, re-enable DM idle optimization, DCN3,\n SMU, vblank, HDP eDP, powerplay fixes for fiji/iceland\n - msm: bunch of gem error path fixes, gmu fw parsing fix, dpu fixes\n - intel: fix dmc/dc6 asserts on ADL-S\n - xe: fix xe_validation_guard(), wake device handling around gt reset\n - ast: fix display output on AST2300\n - etnaviv: fix gpu flush\n - imx: fix parallel bridge handling\n - nouveau: scheduler locking fix\n - panel: fixes for kingdisplay-kd097d04 and sitronix-st7789v\n\n Core Changes:\n - CI: disable broken sanity job\n - sysfb: fix NULL pointer access\n - sched: fix SIGKILL handling, locking for race condition\n - dma_fence: better timeline name for signalled fences\"\n\n* tag \u0027drm-fixes-2025-10-31\u0027 of https://gitlab.freedesktop.org/drm/kernel: (44 commits)\n drm/ast: Clear preserved bits from register output value\n drm/imx: parallel-display: add the bridge before attaching it\n drm/imx: parallel-display: convert to devm_drm_bridge_alloc() API\n drm/panel: kingdisplay-kd097d04: Disable EoTp\n drm/panel: sitronix-st7789v: fix sync flags for t28cp45tn89\n drm/xe: Do not wake device during a GT reset\n drm/xe: Fix uninitialized return value from xe_validation_guard()\n drm/msm/dpu: Fix adjusted mode clock check for 3d merge\n drm/msm/dpu: Disable broken YUV on QSEED2 hardware\n drm/msm/dpu: Require linear modifier for writeback framebuffers\n drm/msm/dpu: Fix pixel extension sub-sampling\n drm/msm/dpu: Disable scaling for unsupported scaler types\n drm/msm/dpu: Propagate error from dpu_assign_plane_resources\n drm/msm/dpu: Fix allocation of RGB SSPPs without scaling\n drm/msm: dsi: fix PLL init in bonded mode\n drm/i915/dmc: Clear HRR EVT_CTL/HTP to zero on ADL-S\n drm/amd/display: Fix incorrect return of vblank enable on unconfigured crtc\n drm/amd/display: Add HDR workaround for a specific eDP\n drm/amdgpu: fix SPDX header on cyan_skillfish_reg_init.c\n drm/amdgpu: fix SPDX header on irqsrcs_vcn_5_0.h\n ...\n" }, { "commit": "f414f9fd68797182f8de4e1cd9855b6b28abde99", "tree": "26321b000b69d6f3bb0dc078dc7e3ed8bb400158", "parents": [ "39bcf0f7d415fee440d2eba877b9b618cbd6d824", "437aa64c8e32b724fc6d60100ef0eb313d32c88f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 31 14:24:32 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 31 14:24:32 2025 -0700" }, "message": "Merge tag \u0027pci-v6.18-fixes-4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/pci/pci\n\nPull pci fixes from Bjorn Helgaas:\n\n - Restore custom qcom ASPM enablement code so L1 PM Substates are\n enabled as they were in v6.17 even though the PCI core now enables\n just L0s and L1 by default (Bjorn Helgaas)\n\n - Size prefetchable bridge windows only when they actually exist, to\n avoid a WARN_ON() regression (Ilpo Järvinen)\n\n* tag \u0027pci-v6.18-fixes-4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/pci/pci:\n PCI: Do not size non-existing prefetchable window\n Revert \"PCI: qcom: Remove custom ASPM enablement code\"\n" }, { "commit": "39bcf0f7d415fee440d2eba877b9b618cbd6d824", "tree": "94ef0ba5f785341e7b93d035202b216ba5227735", "parents": [ "a5beb58e53092f77b89181bec9d30c8bdced3103", "de8d1f2fd5a510bf2c1c25b84e1a718a0f0af105" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 31 14:20:09 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 31 14:20:09 2025 -0700" }, "message": "Merge tag \u0027vfio-v6.18-rc4\u0027 of https://github.com/awilliam/linux-vfio\n\nPull VFIO fixes from Alex Williamson:\n\n - Fix overflows in vfio type1 backend for mappings at the end of the\n 64-bit address space, resulting in leaked pinned memory.\n\n New selftest support included to avoid such issues in the future\n (Alex Mastro)\n\n* tag \u0027vfio-v6.18-rc4\u0027 of https://github.com/awilliam/linux-vfio:\n vfio: selftests: add end of address space DMA map/unmap tests\n vfio: selftests: update DMA map/unmap helpers to support more test kinds\n vfio/type1: handle DMA map/unmap up to the addressable limit\n vfio/type1: move iova increment to unmap_unpin_*() caller\n vfio/type1: sanitize for overflow using check_*_overflow()\n" }, { "commit": "437aa64c8e32b724fc6d60100ef0eb313d32c88f", "tree": "e1cf7b7dd0126e90d6719065d0e8e8e294bc3c1c", "parents": [ "057f1652feb9be78587dae53866371e7fcce81e9" ], "author": { "name": "Ilpo Järvinen", "email": "ilpo.jarvinen@linux.intel.com", "time": "Mon Oct 27 15:24:23 2025 +0200" }, "committer": { "name": "Bjorn Helgaas", "email": "bhelgaas@google.com", "time": "Fri Oct 31 15:07:21 2025 -0500" }, "message": "PCI: Do not size non-existing prefetchable window\n\npbus_size_mem() should only be called for bridge windows that exist but\n__pci_bus_size_bridges() may point \u0027pref\u0027 to a resource that does not exist\n(has zero flags) in case of non-root buses.\n\nWhen prefetchable bridge window does not exist, the same non-prefetchable\nbridge window is sized more than once which may result in duplicating\nentries into the realloc_head list. Duplicated entries are shown in this\nlog and trigger a WARN_ON() because realloc_head had residual entries after\nthe resource assignment algorithm:\n\n pci 0000:00:03.0: [11ab:6820] type 01 class 0x060400 PCIe Root Port\n pci 0000:00:03.0: PCI bridge to [bus 00]\n pci 0000:00:03.0: bridge window [io 0x0000-0x0fff]\n pci 0000:00:03.0: bridge window [mem 0x00000000-0x000fffff]\n pci 0000:00:03.0: bridge window [mem 0x00200000-0x003fffff] to [bus 02] add_size 200000 add_align 200000\n pci 0000:00:03.0: bridge window [mem 0x00200000-0x003fffff] to [bus 02] add_size 200000 add_align 200000\n pci 0000:00:03.0: bridge window [mem 0xe0000000-0xe03fffff]: assigned\n pci 0000:00:03.0: PCI bridge to [bus 02]\n pci 0000:00:03.0: bridge window [mem 0xe0000000-0xe03fffff]\n ------------[ cut here ]------------\n WARNING: CPU: 0 PID: 1 at drivers/pci/setup-bus.c:2373 pci_assign_unassigned_root_bus_resources+0x1bc/0x234\n\nCheck resource flags of \u0027pref\u0027 and only size the prefetchable window if the\nresource has the IORESOURCE_PREFETCH flag.\n\nFixes: ae88d0b9c57f (\"PCI: Use pbus_select_window_for_type() during mem window sizing\")\nReported-by: Klaus Kudielka \u003cklaus.kudielka@gmail.com\u003e\nCloses: https://lore.kernel.org/r/51e8cf1c62b8318882257d6b5a9de7fdaaecc343.camel@gmail.com/\nSigned-off-by: Ilpo Järvinen \u003cilpo.jarvinen@linux.intel.com\u003e\nSigned-off-by: Bjorn Helgaas \u003cbhelgaas@google.com\u003e\nTested-by: Klaus Kudielka \u003cklaus.kudielka@gmail.com\u003e\nLink: https://patch.msgid.link/20251027132423.8841-1-ilpo.jarvinen@linux.intel.com\n" }, { "commit": "057f1652feb9be78587dae53866371e7fcce81e9", "tree": "a2b49abe4eff300fd842d45644cc0fcd763e3678", "parents": [ "3a8660878839faadb4f1a6dd72c3179c1df56787" ], "author": { "name": "Bjorn Helgaas", "email": "bhelgaas@google.com", "time": "Fri Oct 24 14:41:40 2025 -0500" }, "committer": { "name": "Bjorn Helgaas", "email": "bhelgaas@google.com", "time": "Fri Oct 31 15:04:19 2025 -0500" }, "message": "Revert \"PCI: qcom: Remove custom ASPM enablement code\"\n\nThis reverts commit a729c16646198872e345bf6c48dbe540ad8a9753.\n\nPrior to a729c1664619 (\"PCI: qcom: Remove custom ASPM enablement code\"),\nthe qcom controller driver enabled ASPM, including L0s, L1, and L1 PM\nSubstates, for all devices powered on at the time the controller driver\nenumerates them.\n\nASPM was *not* enabled for devices powered on later by pwrctrl (unless the\nkernel was built with PCIEASPM_POWERSAVE or PCIEASPM_POWER_SUPERSAVE, or\nthe user enabled ASPM via module parameter or sysfs).\n\nAfter f3ac2ff14834 (\"PCI/ASPM: Enable all ClockPM and ASPM states for\ndevicetree platforms\"), the PCI core enabled all ASPM states for all\ndevices whether powered on initially or by pwrctrl, so a729c1664619 was\nunnecessary and reverted.\n\nBut f3ac2ff14834 was too aggressive and broke platforms that didn\u0027t support\nCLKREQ# or required device-specific configuration for L1 Substates, so\ndf5192d9bb0e (\"PCI/ASPM: Enable only L0s and L1 for devicetree platforms\")\nenabled only L0s and L1.\n\nOn Qualcomm platforms, this left L1 Substates disabled, which was a\nregression. Revert a729c1664619 so L1 Substates will be enabled on devices\nthat are initially powered on. Devices powered on by pwrctrl will be\naddressed later.\n\nFixes: df5192d9bb0e (\"PCI/ASPM: Enable only L0s and L1 for devicetree platforms\")\nReported-by: Johan Hovold \u003cjohan@kernel.org\u003e\nCloses: https://lore.kernel.org/lkml/aPuXZlaawFmmsLmX@hovoldconsulting.com/\nSigned-off-by: Bjorn Helgaas \u003cbhelgaas@google.com\u003e\nTested-by: Johan Hovold \u003cjohan@kernel.org\u003e\nReviewed-by: Manivannan Sadhasivam \u003cmani@kernel.org\u003e\nLink: https://patch.msgid.link/20251024210514.1365996-1-helgaas@kernel.org\n" }, { "commit": "a5beb58e53092f77b89181bec9d30c8bdced3103", "tree": "0479fb55c5b28b32d877a9a6663ba771fd641539", "parents": [ "b4f7f01ea14fe3654a0f7b7152ded7c15acd5e5f", "0d92a3eaa6726e64a18db74ece806c2c021aaac3" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 31 12:57:19 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 31 12:57:19 2025 -0700" }, "message": "Merge tag \u0027block-6.18-20251031\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux\n\nPull block fixes from Jens Axboe:\n\n - Fix blk-crypto reporting EIO when EINVAL is the correct error code\n\n - Two bug fixes for the block zone support\n\n - NVME pull request via Keith:\n - Target side authentication fixup\n - Peer-to-peer metadata fixup\n\n - null_blk DMA alignment fix\n\n* tag \u0027block-6.18-20251031\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux:\n null_blk: set dma alignment to logical block size\n blk-crypto: use BLK_STS_INVAL for alignment errors\n block: make REQ_OP_ZONE_OPEN a write operation\n block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL\n nvme-pci: use blk_map_iter for p2p metadata\n nvmet-auth: update sc_c in host response\n" }, { "commit": "b4f7f01ea14fe3654a0f7b7152ded7c15acd5e5f", "tree": "06ec2e85c1c4adac836ca066ad4f70f65c64ae56", "parents": [ "b909d77359b82821e1c6b6a3a8a51b355b06fdb5", "64e2f60f355e556337fcffe80b9bcff1b22c9c42" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 31 12:50:35 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 31 12:50:35 2025 -0700" }, "message": "Merge tag \u0027s390-6.18-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux\n\nPull s390 fixes from Heiko Carstens:\n\n - Use correct locking in zPCI event code to avoid deadlock\n\n - Get rid of irqs_registered flag in zpci_dev structure and restore IRQ\n unconditionally for zPCI devices. This fixes sit uations where the\n flag was not correctly updated\n\n - Fix potential memory leak kernel page table dumper code\n\n - Disable (revert) ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP for s390 again.\n\n The optimized hugetlb vmemmap code modifies kernel page tables in a\n way which does not work on s390 and leads to reproducible kernel\n crashes due to stale TLB entries. This needs to be addressed with\n some larger changes. For now simply disable the feature\n\n - Update defconfigs\n\n* tag \u0027s390-6.18-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux:\n s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP\n s390/mm: Fix memory leak in add_marker() when kvrealloc() fails\n s390/pci: Restore IRQ unconditionally for the zPCI device\n s390: Update defconfigs\n s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump\n" }, { "commit": "be708ed300e1ebd32978b4092b909f0d9be0958f", "tree": "e24714cf4ae07f7c883b6e031b1ada8ba69043e3", "parents": [ "14a7f2392f42bbb71c1a5ea68930006221fcd80a" ], "author": { "name": "Puranjay Mohan", "email": "puranjay@kernel.org", "time": "Thu Oct 30 12:17:14 2025 +0000" }, "committer": { "name": "Alexei Starovoitov", "email": "ast@kernel.org", "time": "Fri Oct 31 11:20:53 2025 -0700" }, "message": "bpf/arm64: Fix BPF_ST into arena memory\n\nThe arm64 JIT supports BPF_ST with BPF_PROBE_MEM32 (arena) by using the\ntmp2 register to hold the dst + arena_vm_base value and using tmp2 as the\nnew dst register. But this is broken because in case is_lsi_offset()\nreturns false the tmp2 will be clobbered by emit_a64_mov_i(1, tmp2, off,\nctx); and hence the emitted store instruction will be of the form:\n\tstrb w10, [x11, x11]\nFix this by using the third temporary register to hold the dst +\narena_vm_base.\n\nFixes: 339af577ec05 (\"bpf: Add arm64 JIT support for PROBE_MEM32 pseudo instructions.\")\nSigned-off-by: Puranjay Mohan \u003cpuranjay@kernel.org\u003e\nLink: https://lore.kernel.org/r/20251030121715.55214-1-puranjay@kernel.org\nSigned-off-by: Alexei Starovoitov \u003cast@kernel.org\u003e\n" }, { "commit": "14a7f2392f42bbb71c1a5ea68930006221fcd80a", "tree": "4752d151e0c4c11929b6b0f30e77027132468797", "parents": [ "2cbb259ec4f8e12dade80b388b81d41fa22187d2" ], "author": { "name": "Yonghong Song", "email": "yonghong.song@linux.dev", "time": "Wed Oct 29 11:36:46 2025 -0700" }, "committer": { "name": "Alexei Starovoitov", "email": "ast@kernel.org", "time": "Fri Oct 31 11:14:54 2025 -0700" }, "message": "bpf: Make migrate_disable always inline to avoid partial inlining\n\nThe build fails with llvm 21/22:\n\n $ make LLVM\u003d1 -j\n ...\n LD vmlinux.o\n GEN .vmlinux.objs\n ...\n BTF .tmp_vmlinux1.btf.o\n ...\n AS .tmp_vmlinux2.kallsyms.o\n LD vmlinux.unstripped\n BTFIDS vmlinux.unstripped\n WARN: resolve_btfids: unresolved symbol migrate_enable\n WARN: resolve_btfids: unresolved symbol migrate_disable\n make[2]: *** [vmlinux.unstripped] Error 255\n make[2]: *** Deleting file \u0027vmlinux.unstripped\u0027\n make[1]: *** [Makefile:1242: vmlinux] Error 2\n make: *** [Makefile:248: __sub-make] Error 2\n\nTwo functions with identical names but different addresses are\nconsidered ambiguous and removed by \"pahole\" from vmlinux BTF.\nLater resolve_btfids warns since it cannot find them.\n\nCommit 378b7708194f (\"sched: Make migrate_{en,dis}able() inline\") made\nthem inlineable in most places, but in vmlinux built with llvm 21 and 22\nthere are four symbols for migrate_{enable,disable}:\nthree static functions and one global function.\n\nFix the issue by marking migrate_{enable,disable} as always inline.\nThe alternative is to mark them as notrace/nokprobe which is more\ndrastic. Only bpf programs are prevented from attaching to these\nfunctions. The rest of the tracing shouldn\u0027t be affected.\n\n[note: Peter ok-ed the patch, Alexei rewrote commit log]\n\nFixes: 378b7708194f (\"sched: Make migrate_{en,dis}able() inline\")\nSigned-off-by: Yonghong Song \u003cyonghong.song@linux.dev\u003e\nAcked-by: Menglong Dong \u003cmenglong.dong@linux.dev\u003e\nLink: https://lore.kernel.org/r/20251029183646.3811774-1-yonghong.song@linux.dev\nSigned-off-by: Alexei Starovoitov \u003cast@kernel.org\u003e\n" }, { "commit": "41dacb39fe79cd2fce42d31fa6658d926489a548", "tree": "e22abe5701baa17362e43bec7adcc9a443054c5b", "parents": [ "b095398586181010d3cfad4ec2cea723f2c1d582", "b3fbda1a630a9439c885b2a5dc5230cc49a87e9e" ], "author": { "name": "Simona Vetter", "email": "simona.vetter@ffwll.ch", "time": "Fri Oct 31 19:11:16 2025 +0100" }, "committer": { "name": "Simona Vetter", "email": "simona.vetter@ffwll.ch", "time": "Fri Oct 31 19:11:16 2025 +0100" }, "message": "Merge tag \u0027drm-xe-fixes-2025-10-30\u0027 of https://gitlab.freedesktop.org/drm/xe/kernel into drm-fixes\n\nDriver Changes:\n - Fix xe_validation_guard() not guarding (Thomas Hellström)\n - Do not wake device during a GT reset (Matthew Brost)\n\nSigned-off-by: Simona Vetter \u003csimona.vetter@ffwll.ch\u003e\nFrom: Lucas De Marchi \u003clucas.demarchi@intel.com\u003e\nLink: https://patch.msgid.link/o2b3lucyitafbbcd5bewpfqnslavtnnpc6ck4qatnou2wwukix@rz6seyfw75uy\n" }, { "commit": "b095398586181010d3cfad4ec2cea723f2c1d582", "tree": "16bf6575c4e1df591debd6c80dda2e6c9d647890", "parents": [ "e28e383da32a6396e37c3f68964dc92eb9b6f0ed", "a9fb41b5def8e1e0103d5fd1453787993587281e" ], "author": { "name": "Simona Vetter", "email": "simona.vetter@ffwll.ch", "time": "Fri Oct 31 19:10:04 2025 +0100" }, "committer": { "name": "Simona Vetter", "email": "simona.vetter@ffwll.ch", "time": "Fri Oct 31 19:10:04 2025 +0100" }, "message": "Merge tag \u0027drm-misc-fixes-2025-10-30\u0027 of https://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes\n\nShort summary of fixes pull:\n\nast:\n- Preserve correct bits on register I/O\n\ndma-fence:\n- Use correct timeline name\n\netnaviv:\n- Use correct GPU adress space for flush\n\nimx:\n- parallel-display: Fix bridge handling\n\nnouveau:\n- Fix locking in scheduler\n\npanel:\n- kingdisplay-kd097d04: Disable EOT packet\n- sitronix-st7789v: Use correct SYNC flags\n\nsched:\n- Fix locking to avoid race condition\n- Fix SIGKILL handling\n\nsysfb:\n- Avoid NULL-pointer access\n\nSigned-off-by: Simona Vetter \u003csimona.vetter@ffwll.ch\u003e\nFrom: Thomas Zimmermann \u003ctzimmermann@suse.de\u003e\nLink: https://patch.msgid.link/20251030195644.GA188441@localhost.localdomain\n" }, { "commit": "e28e383da32a6396e37c3f68964dc92eb9b6f0ed", "tree": "ab012bcb07cc632fc21d1fa4d7ff7e60ff1fbc0e", "parents": [ "3d8d35bf8dc8893e34d92212d413d7cfd89c560e", "dc8aa0cb87a7836b59422cc02d969c8df849ee39" ], "author": { "name": "Simona Vetter", "email": "simona.vetter@ffwll.ch", "time": "Fri Oct 31 19:08:36 2025 +0100" }, "committer": { "name": "Simona Vetter", "email": "simona.vetter@ffwll.ch", "time": "Fri Oct 31 19:08:36 2025 +0100" }, "message": "Merge tag \u0027drm-intel-fixes-2025-10-30\u0027 of https://gitlab.freedesktop.org/drm/i915/kernel into drm-fixes\n\n- Fix DMC/DC6 asserts on ADL-S (Ville)\n\nSigned-off-by: Simona Vetter \u003csimona.vetter@ffwll.ch\u003e\nFrom: Rodrigo Vivi \u003crodrigo.vivi@intel.com\u003e\nLink: https://patch.msgid.link/aQNtTV75vPaDhnXh@intel.com\n" }, { "commit": "3d8d35bf8dc8893e34d92212d413d7cfd89c560e", "tree": "0fbf0710a112181778f2f540fe2a397e7f8eb91c", "parents": [ "3a9f6bd54e20d0eaf89ca3ec6d82e5263cac93e8", "f5d079564c44baaeedf5e25f4b943aa042ea0eb1" ], "author": { "name": "Simona Vetter", "email": "simona.vetter@ffwll.ch", "time": "Fri Oct 31 19:07:39 2025 +0100" }, "committer": { "name": "Simona Vetter", "email": "simona.vetter@ffwll.ch", "time": "Fri Oct 31 19:07:39 2025 +0100" }, "message": "Merge tag \u0027drm-msm-fixes-2025-10-29\u0027 of https://gitlab.freedesktop.org/drm/msm into drm-fixes\n\nFixes for v6.18-rc4\n\nCI\n- Disable broken sanity job\n\nGEM\n- Fix vm_bind prealloc error path\n- Fix dma-buf import free\n- Fix last-fence update\n- Reject MAP_NULL if PRR is unsupported\n- Ensure vm is created in VM_BIND ioctl\n\nGPU\n- GMU fw parsing fix\n\nDPU:\n- Fixed mode_valid callback\n- Fixed planes on DPU 1.x devices.\n\nSigned-off-by: Simona Vetter \u003csimona.vetter@ffwll.ch\u003e\nFrom: Rob Clark \u003crob.clark@oss.qualcomm.com\u003e\nLink: https://patch.msgid.link/CACSVV03kUm1ms7FBg0m9U4ZcyickSWbnayAWqYqs0XH4UjWf+A@mail.gmail.com\n" }, { "commit": "3a9f6bd54e20d0eaf89ca3ec6d82e5263cac93e8", "tree": "579edfac1325f0e363555229f2b47e34a6cebdf1", "parents": [ "ef54548455190f3d28462787eb33d08c3cfadc4e", "b3656b355b5522cef1b52a7469010009c98156db" ], "author": { "name": "Simona Vetter", "email": "simona.vetter@ffwll.ch", "time": "Fri Oct 31 19:00:01 2025 +0100" }, "committer": { "name": "Simona Vetter", "email": "simona.vetter@ffwll.ch", "time": "Fri Oct 31 19:00:01 2025 +0100" }, "message": "Merge tag \u0027amd-drm-fixes-6.18-2025-10-29\u0027 of https://gitlab.freedesktop.org/agd5f/linux into drm-fixes\n\namd-drm-fixes-6.18-2025-10-29:\n\namdgpu:\n- VPE idle handler fix\n- Re-enable DM idle optimizations\n- DCN3.0 fix\n- SMU fix\n- Powerplay fixes for fiji/iceland\n- License fixes\n- HDP eDP panel fix\n- Vblank fix\n\nradeon:\n- devm migration fixes\n\nSigned-off-by: Simona Vetter \u003csimona.vetter@ffwll.ch\u003e\nFrom: Alex Deucher \u003calexander.deucher@amd.com\u003e\nLink: https://patch.msgid.link/20251029201342.8813-1-alexander.deucher@amd.com\n" }, { "commit": "ef54548455190f3d28462787eb33d08c3cfadc4e", "tree": "e4d2a6b5599d795624b945eb0b155805825417fc", "parents": [ "dcb6fa37fd7bc9c3d2b066329b0d27dedf8becaa", "926d002e6d7e2f1fd5c1b53cf6208153ee7d380d" ], "author": { "name": "Simona Vetter", "email": "simona.vetter@ffwll.ch", "time": "Fri Oct 31 18:54:21 2025 +0100" }, "committer": { "name": "Simona Vetter", "email": "simona.vetter@ffwll.ch", "time": "Fri Oct 31 18:54:22 2025 +0100" }, "message": "Merge tag \u0027mediatek-drm-fixes-20251028\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/chunkuang.hu/linux into drm-fixes\n\nMediatek DRM Fixes - 20251028\n\n1. Fix device use-after-free on unbind\n\nSigned-off-by: Simona Vetter \u003csimona.vetter@ffwll.ch\u003e\nFrom: Chun-Kuang Hu \u003cchunkuang.hu@kernel.org\u003e\nLink: https://patch.msgid.link/20251028151548.3944-1-chunkuang.hu@kernel.org\n" }, { "commit": "b909d77359b82821e1c6b6a3a8a51b355b06fdb5", "tree": "0464a6493f7b05e8e7d1120a1ebe4a7148bdfa58", "parents": [ "58fdd8484c05a19942690008304228ad784771e9", "895ad6f7083b0c9f1902b23b84136298a492cbeb" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 31 09:34:21 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 31 09:34:21 2025 -0700" }, "message": "Merge tag \u00276.18-rc3-smb-client-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6\n\nPull smb client fixes from Steve French:\n\n - fix potential UAF in statfs\n\n - DFS fix for expired referrals\n\n - fix minor modinfo typo\n\n - small improvement to reconnect for smbdirect\n\n* tag \u00276.18-rc3-smb-client-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6:\n smb: client: call smbd_destroy() in the same splace as kernel_sock_shutdown()/sock_release()\n smb: client: handle lack of IPC in dfs_cache_refresh()\n smb: client: fix potential cfid UAF in smb2_query_info_compound\n cifs: fix typo in enable_gcm_256 module parameter\n" }, { "commit": "0d92a3eaa6726e64a18db74ece806c2c021aaac3", "tree": "fe97f1280a126437cd10d7f14fc02d920b1defce", "parents": [ "08d33390248f9e248bca970afc731a16aad4e348" ], "author": { "name": "Hans Holmberg", "email": "hans.holmberg@wdc.com", "time": "Fri Oct 31 10:48:26 2025 +0100" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Fri Oct 31 09:03:12 2025 -0600" }, "message": "null_blk: set dma alignment to logical block size\n\nThis driver assumes that bio vectors are memory aligned to the logical\nblock size, so set the queue limit to reflect that.\n\nUnless we set up the limit based on the logical block size, we will go\nout of page bounds in copy_to_nullb / copy_from_nullb.\n\nApparently this wasn\u0027t noticed so far because none of the tests generate\nsuch buffers, but since commit 851c4c96db00 (\"xfs: implement\nXFS_IOC_DIOINFO in terms of vfs_getattr\") xfstests generates unaligned\nI/O, which now lead to memory corruption when using null_blk devices\nwith 4k block size.\n\nFixes: bf8d08532bc1 (\"iomap: add support for dma aligned direct-io\")\nFixes: b1a000d3b8ec (\"block: relax direct io memory alignment\")\nReviewed-by: Christoph Hellwig \u003chch@lst.de\u003e\nReviewed-by: Keith Busch \u003ckbusch@kernel.org\u003e\nSigned-off-by: Hans Holmberg \u003chans.holmberg@wdc.com\u003e\nReviewed-by: Johannes Thumshirn \u003cjohannes.thumshirn@wdc.com\u003e\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "58fdd8484c05a19942690008304228ad784771e9", "tree": "776e11f18e3c2ea8247b960ae01a9132bcf78179", "parents": [ "3ad81aa52085a7e67edfa4bc8f518e5962196bb3", "390db60f8e2bd21fae544917eb3a8618265c058c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 31 07:29:09 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 31 07:29:09 2025 -0700" }, "message": "Merge tag \u0027sound-6.18-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound\n\nPull sound fixes from Takashi Iwai:\n \"A collection of small fixes. It became slightly bigger than usual due\n to timing issues (holidays, etc), but all changes are rather\n device-specific fixes, so not really worrisome.\n\n - ASoC Cirrus codec fixes for AMD\n\n - Various fixes for ASoC Intel AVS, Qualcomm, SoundWire, FSL,\n Mediatek, Renesas\n\n - A few HD-audio quirks, and USB-audio regression fixes for Presonus\"\n\n* tag \u0027sound-6.18-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound: (24 commits)\n ALSA: hda/realtek: Enable mic on Vaio RPL\n ASoC: dt-bindings: pm4125-sdw: correct number of soundwire ports\n ASoC: renesas: rz-ssi: Use proper dma_buffer_pos after resume\n ASoC: soc_sdw_utils: remove cs42l43 component_name\n ASoC: fsl_sai: Fix sync error in consumer mode\n ASoC: Fix build for sdw_utils\n ALSA: hda/realtek: Fix mute led for HP Victus 15-fa1xxx (MB 8C2D)\n ASoC: rt721: fix prepare clock stop failed\n ALSA: usb-audio: don\u0027t log messages meant for 1810c when initializing 1824c\n ASoC: mediatek: Fix double pm_runtime_disable in remove functions\n ASoC: fsl_micfil: correct the endian format for DSD\n ASoC: fsl_sai: fix bit order for DSD format\n ASoC: Intel: avs: Use snd_codec format when initializing probe\n ASoC: Intel: avs: Disable periods-elapsed work when closing PCM\n ASoC: Intel: avs: Unprepare a stream when XRUN occurs\n ASoC: sdw_utils: add name_prefix for rt1321 part id\n ASoC: qdsp6: q6asm: do not sleep while atomic\n ASoC: Intel: soc-acpi-intel-ptl-match: Remove cs42l43 match from sdw link3\n ASOC: max98090/91: fix for filter configuration: AHPF removed DMIC2_HPF added\n ASoC: amd: acp: Add ACP7.0 match entries for cs35l56 and cs42l43\n ...\n" }, { "commit": "3ad81aa52085a7e67edfa4bc8f518e5962196bb3", "tree": "dab9cbb2ad9031294ce23bf8618fdc43d6020119", "parents": [ "2d51cb1792c7b1d8d5daf55cc3eecf19ddc4500c", "3c9bf72cc1ced1297b235f9422d62b613a3fdae9" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 31 07:25:10 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 31 07:25:10 2025 -0700" }, "message": "Merge tag \u0027v6.18-p4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6\n\nPull crypto fixes from Herbert Xu:\n\n - Fix double free in aspeed\n\n - Fix req-\u003enbytes clobbering in s390/phmac\n\n* tag \u0027v6.18-p4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:\n crypto: aspeed - fix double free caused by devm\n crypto: s390/phmac - Do not modify the req-\u003enbytes value\n" }, { "commit": "2d51cb1792c7b1d8d5daf55cc3eecf19ddc4500c", "tree": "909da7c7afb6e7bc4e6abc3dfd2400cb174d8486", "parents": [ "d127176862a93c4b3216bda533d2bee170af5e71", "d54c676d4fe0543d1642ab7a68ffdd31e8639a5d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 31 07:08:47 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 31 07:08:47 2025 -0700" }, "message": "Merge tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi\n\nPull SCSI fixes from James Bottomley:\n \"ufs driver plus two core fixes.\n\n One core fix makes the unit attention counters atomic (just in case\n multiple commands detect them) and the other is fixing a merge window\n regression caused by changes in the block tree\"\n\n* tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:\n scsi: core: Fix the unit attention counter implementation\n scsi: ufs: core: Declare tx_lanes witout initialization\n scsi: ufs: core: Initialize value of an attribute returned by uic cmd\n scsi: ufs: core: Fix error handler host_sem issue\n scsi: core: Fix a regression triggered by scsi_host_busy()\n" }, { "commit": "0db22d7ee462c42c1284e98d47840932792c1adb", "tree": "fe37b798ef67300c30521a5a69e1172b532ba675", "parents": [ "83bac569c762651ac6dff9a86f54ecc13d911f7d" ], "author": { "name": "Christoph Hellwig", "email": "hch@lst.de", "time": "Thu Oct 23 17:17:03 2025 +0200" }, "committer": { "name": "Carlos Maiolino", "email": "cem@kernel.org", "time": "Fri Oct 31 12:06:03 2025 +0100" }, "message": "xfs: document another racy GC case in xfs_zoned_map_extent\n\nBesides blocks being invalidated, there is another case when the original\nmapping could have changed between querying the rmap for GC and calling\nxfs_zoned_map_extent. Document it there as it took us quite some time\nto figure out what is going on while developing the multiple-GC\nprotection fix.\n\nSigned-off-by: Christoph Hellwig \u003chch@lst.de\u003e\nReviewed-by: Hans Holmberg \u003chans.holmberg@wdc.com\u003e\nReviewed-by: Damien Le Moal \u003cdlemoal@kernel.org\u003e\nReviewed-by: Carlos Maiolino \u003ccmaiolino@redhat.com\u003e\nReviewed-by: Darrick J. Wong \u003cdjwong@kernel.org\u003e\nSigned-off-by: Carlos Maiolino \u003ccem@kernel.org\u003e\n" }, { "commit": "83bac569c762651ac6dff9a86f54ecc13d911f7d", "tree": "7e0047a7af06091ab8298ca56dafdc86bbd9dcaf", "parents": [ "f477af0cfa0487eddec66ffe10fd9df628ba6f52" ], "author": { "name": "Christoph Hellwig", "email": "hch@lst.de", "time": "Thu Oct 23 17:17:02 2025 +0200" }, "committer": { "name": "Carlos Maiolino", "email": "cem@kernel.org", "time": "Fri Oct 31 12:06:03 2025 +0100" }, "message": "xfs: prevent gc from picking the same zone twice\n\nWhen we are picking a zone for gc it might already be in the pipeline\nwhich can lead to us moving the same data twice resulting in in write\namplification and a very unfortunate case where we keep on garbage\ncollecting the zone we just filled with migrated data stopping all\nforward progress.\n\nFix this by introducing a count of on-going GC operations on a zone, and\nskip any zone with ongoing GC when picking a new victim.\n\nFixes: 080d01c41 (\"xfs: implement zoned garbage collection\")\nSigned-off-by: Hans Holmberg \u003chans.holmberg@wdc.com\u003e\nCo-developed-by: Hans Holmberg \u003chans.holmberg@wdc.com\u003e\nSigned-off-by: Christoph Hellwig \u003chch@lst.de\u003e\nReviewed-by: Damien Le Moal \u003cdlemoal@kernel.org\u003e\nReviewed-by: Carlos Maiolino \u003ccmaiolino@redhat.com\u003e\nReviewed-by: Darrick J. Wong \u003cdjwong@kernel.org\u003e\nTested-by: Damien Le Moal \u003cdlemoal@kernel.org\u003e\nSigned-off-by: Carlos Maiolino \u003ccem@kernel.org\u003e\n" }, { "commit": "d127176862a93c4b3216bda533d2bee170af5e71", "tree": "7d00a83180a2eea0c617ec8a8c6c62434f8118e4", "parents": [ "1806838686ef74cde74e590d13984dec7c0233d6", "920aa3a7705a061cb3004572d8b7932b54463dbf" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 30 19:48:13 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 30 19:48:13 2025 -0700" }, "message": "Merge tag \u0027linux_kselftest-fixes-6.18-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest\n\nPull kselftest fixes from Shuah Khan:\n \"Fix build warning in cachestat found during clang build and add\n tmpshmcstat to .gitignore\"\n\n* tag \u0027linux_kselftest-fixes-6.18-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest:\n selftests: cachestat: Fix warning on declaration under label\n selftests/cachestat: add tmpshmcstat file to .gitignore\n" }, { "commit": "1806838686ef74cde74e590d13984dec7c0233d6", "tree": "2b0968577fc193583183857cbe3252eaa6003efe", "parents": [ "a5355e98accb20d8ea06008fd8fb5755cc52e8c0", "f3903ec76ae6afcdba0347681d1dda005fb145cd" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 30 19:11:27 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 30 19:11:27 2025 -0700" }, "message": "Merge tag \u0027linux_kselftest-kunit-fixes-6.18-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest\n\nPull kunit fixes from Shuah Khan:\n \"Fix log overwrite in param_tests and fixes incorrect cast of priv\n pointer in test_dev_action().\n\n Update email address for Rae Moar in MAINTAINERS KUnit entry\"\n\n* tag \u0027linux_kselftest-kunit-fixes-6.18-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest:\n MAINTAINERS: Update KUnit email address for Rae Moar\n kunit: prevent log overwrite in param_tests\n kunit: test_dev_action: Correctly cast \u0027priv\u0027 pointer to long*\n" }, { "commit": "a5355e98accb20d8ea06008fd8fb5755cc52e8c0", "tree": "9d9bddb0c5b5dba9be637802bf8d921fa00fdb8e", "parents": [ "a5dbbb39e11d50a8c426b8d88f5b12031fee49f3", "8907226bed1ebd10d069f6f70ff0aaa8840f3267" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 30 19:05:46 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 30 19:05:46 2025 -0700" }, "message": "Merge tag \u0027acpi-6.18-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull ACPI fixes from Rafael Wysocki:\n \"These fix three ACPI driver issues and add version checks to two ACPI\n table parsers:\n\n - Call input_free_device() on failing input device registration as\n necessary (and mentioned in the input subsystem documentation) in\n the ACPI button driver (Kaushlendra Kumar)\n\n - Fix use-after-free in acpi_video_switch_brightness() by canceling a\n delayed work during tear-down (Yuhao Jiang)\n\n - Use platform device for devres-related actions in the ACPI fan\n driver to allow device-managed resources to be cleaned up properly\n (Armin Wolf)\n\n - Add version checks to the MRRM and SPCR table parsers (Tony Luck\n and Punit Agrawal)\"\n\n* tag \u0027acpi-6.18-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n ACPI: SPCR: Check for table version when using precise baudrate\n ACPI: MRRM: Check revision of MRRM table\n ACPI: fan: Use platform device for devres-related actions\n ACPI: fan: Use ACPI handle when retrieving _FST\n ACPI: video: Fix use-after-free in acpi_video_switch_brightness()\n ACPI: button: Call input_free_device() on failing input device registration\n" }, { "commit": "a5dbbb39e11d50a8c426b8d88f5b12031fee49f3", "tree": "eb8a708c229565fce666b8af5025bf6b434f0f90", "parents": [ "a4819ac1913e78e41c8406df481a661d9469c350", "590c5cd10675a6ae49f6019502dec5c87aba07e4" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 30 19:02:16 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 30 19:02:16 2025 -0700" }, "message": "Merge tag \u0027pm-6.18-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull power management fixes from Rafael Wysocki:\n \"These fix three regressions, two recent ones and one introduced during\n the 6.17 development cycle:\n\n - Add an exit latency check to the menu cpuidle governor in the case\n when it considers using a real idle state instead of a polling one\n to address a performance regression (Rafael Wysocki)\n\n - Revert an attempted cleanup of a system suspend code path that\n introduced a regression elsewhere (Samuel Wu)\n\n - Allow pm_restrict_gfp_mask() to be called multiple times in a row\n and adjust pm_restore_gfp_mask() accordingly to avoid having to\n play nasty games with these calls during hibernation (Rafael\n Wysocki)\"\n\n* tag \u0027pm-6.18-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n PM: sleep: Allow pm_restrict_gfp_mask() stacking\n cpuidle: governors: menu: Select polling state in some more cases\n Revert \"PM: sleep: Make pm_wakeup_clear() call more clear\"\n" }, { "commit": "a4819ac1913e78e41c8406df481a661d9469c350", "tree": "046ae10a7416e391e461493bed4e97cfe343f5be", "parents": [ "e5763491237ffee22d9b554febc2d00669f81dee", "7073c7fc8d8ba47194e5fc58fcafc0efe7586e9b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 30 18:58:49 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 30 18:58:49 2025 -0700" }, "message": "Merge tag \u0027fbdev-for-6.18-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev\n\nPull fbdev fixes from Helge Deller:\n\n - atyfb: Avoid hard lock up when PLL not initialized (Daniel Palmer)\n\n - pvr2fb: Fix build error when CONFIG_PVR2_DMA enabled (Florian Fuchs)\n\n - bitblit: Fix out-of-bounds read in bit_putcs* (Junjie Cao)\n\n - valkyriefb: Fix reference count leak (Miaoqian Lin)\n\n - fbcon: Fix slab-use-after-free in fb_mode_is_equal (Quanmin Yan)\n\n - fb.h: Fix typo in \"vertical\" (Piyush Choudhary)\n\n* tag \u0027fbdev-for-6.18-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev:\n fbdev: atyfb: Check if pll_ops-\u003einit_pll failed\n fbcon: Set fb_display[i]-\u003emode to NULL when the mode is released\n fbdev: bitblit: bound-check glyph index in bit_putcs*\n fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS\n fbdev: valkyriefb: Fix reference count leak in valkyriefb_init\n video: fb: Fix typo in comment in fb.h\n" }, { "commit": "e5763491237ffee22d9b554febc2d00669f81dee", "tree": "c46fbb1676e90a7dd57113f820113286f495a317", "parents": [ "e53642b87a4f4b03a8d7e5f8507fc3cd0c595ea6", "51e5ad549c43b557c7da1e4d1a1dcf061b4a5f6c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 30 18:35:35 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 30 18:35:35 2025 -0700" }, "message": "Merge tag \u0027net-6.18-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net\n\nPull networking fixes from Paolo Abeni:\n \"Including fixes from wireless, Bluetooth and netfilter.\n\n Current release - regressions:\n\n - tcp: fix too slow tcp_rcvbuf_grow() action\n\n - bluetooth: fix corruption in h4_recv_buf() after cleanup\n\n Previous releases - regressions:\n\n - mptcp: restore window probe\n\n - bluetooth:\n - fix connection cleanup with BIG with 2 or more BIS\n - fix crash in set_mesh_sync and set_mesh_complete\n\n - batman-adv: release references to inactive interfaces\n\n - nic:\n - ice: fix usage of logical PF id\n - sfc: fix potential memory leak in efx_mae_process_mport()\n\n Previous releases - always broken:\n\n - devmem: refresh devmem TX dst in case of route invalidation\n\n - netfilter: add seqadj extension for natted connections\n\n - wifi:\n - iwlwifi: fix potential use after free in iwl_mld_remove_link()\n - brcmfmac: fix crash while sending action frames in standalone AP Mode\n\n - eth:\n - mlx5e: cancel tls RX async resync request in error flows\n - ixgbe: fix memory leak and use-after-free in ixgbe_recovery_probe()\n - hibmcge: fix rx buf avl irq is not re-enabled in irq_handle issue\n - cxgb4: fix potential use-after-free in ipsec callback\n - nfp: fix memory leak in nfp_net_alloc()\"\n\n* tag \u0027net-6.18-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net: (75 commits)\n net: sctp: fix KMSAN uninit-value in sctp_inq_pop\n net: devmem: refresh devmem TX dst in case of route invalidation\n net: stmmac: est: Fix GCL bounds checks\n net: stmmac: Consider Tx VLAN offload tag length for maxSDU\n net: stmmac: vlan: Disable 802.1AD tag insertion offload\n net/mlx5e: kTLS, Cancel RX async resync request in error flows\n net: tls: Cancel RX async resync request on rcd_delta overflow\n net: tls: Change async resync helpers argument\n net: phy: dp83869: fix STRAP_OPMODE bitmask\n selftests: net: use BASH for bareudp testing\n net: mctp: Fix tx queue stall\n net/mlx5: Don\u0027t zero user_count when destroying FDB tables\n net: usb: asix_devices: Check return value of usbnet_get_endpoints\n mptcp: zero window probe mib\n mptcp: restore window probe\n mptcp: fix MSG_PEEK stream corruption\n mptcp: drop bogus optimization in __mptcp_check_push()\n netconsole: Fix race condition in between reader and writer of userdata\n Documentation: netconsole: Remove obsolete contact people\n nfp: xsk: fix memory leak in nfp_net_alloc()\n ...\n" }, { "commit": "08d33390248f9e248bca970afc731a16aad4e348", "tree": "10cd2b9232fc860e3335649319101a563d77dabc", "parents": [ "0b39ca457241aeca07a613002512573e8804f93a", "0194b65ab571430130a11f8500894bb88f7af2c0" ], "author": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Oct 30 19:26:19 2025 -0600" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Oct 30 19:26:19 2025 -0600" }, "message": "Merge tag \u0027nvme-6.18-2025-10-30\u0027 of git://git.infradead.org/nvme into block-6.18\n\nPull NVMe fixes from Keith:\n\n\"- Target side authentication fixup (Hannes)\n - Peer-to-peer metadata fixup (Keith)\"\n\n* tag \u0027nvme-6.18-2025-10-30\u0027 of git://git.infradead.org/nvme:\n nvme-pci: use blk_map_iter for p2p metadata\n nvmet-auth: update sc_c in host response\n" }, { "commit": "a9fb41b5def8e1e0103d5fd1453787993587281e", "tree": "50e38ce66185128c673ce48b8ee190994540775c", "parents": [ "bf7e97910b9f4d9679e075a39be371a4ed65dbd4" ], "author": { "name": "Thomas Zimmermann", "email": "tzimmermann@suse.de", "time": "Fri Oct 24 09:35:53 2025 +0200" }, "committer": { "name": "Thomas Zimmermann", "email": "tzimmermann@suse.de", "time": "Thu Oct 30 20:44:44 2025 +0100" }, "message": "drm/ast: Clear preserved bits from register output value\n\nPreserve the I/O register bits in __ast_write8_i_masked() as specified\nby preserve_mask. Accidentally OR-ing the output value into these will\noverwrite the register\u0027s previous settings.\n\nFixes display output on the AST2300, where the screen can go blank at\nboot. The driver\u0027s original commit 312fec1405dd (\"drm: Initial KMS\ndriver for AST (ASpeed Technologies) 2000 series (v2)\") already added\nthe broken code. Commit 6f719373b943 (\"drm/ast: Blank with VGACR17 sync\nenable, always clear VGACRB6 sync off\") triggered the bug.\n\nSigned-off-by: Thomas Zimmermann \u003ctzimmermann@suse.de\u003e\nReported-by: Peter Schneider \u003cpschneider1968@googlemail.com\u003e\nCloses: https://lore.kernel.org/dri-devel/a40caf8e-58ad-4f9c-af7f-54f6f69c29bb@googlemail.com/\nTested-by: Peter Schneider \u003cpschneider1968@googlemail.com\u003e\nReviewed-by: Jocelyn Falempe \u003cjfalempe@redhat.com\u003e\nFixes: 6f719373b943 (\"drm/ast: Blank with VGACR17 sync enable, always clear VGACRB6 sync off\")\nFixes: 312fec1405dd (\"drm: Initial KMS driver for AST (ASpeed Technologies) 2000 series (v2)\")\nCc: Thomas Zimmermann \u003ctzimmermann@suse.de\u003e\nCc: Nick Bowler \u003cnbowler@draconx.ca\u003e\nCc: Douglas Anderson \u003cdianders@chromium.org\u003e\nCc: Dave Airlie \u003cairlied@redhat.com\u003e\nCc: Jocelyn Falempe \u003cjfalempe@redhat.com\u003e\nCc: dri-devel@lists.freedesktop.org\nCc: \u003cstable@vger.kernel.org\u003e # v3.5+\nLink: https://patch.msgid.link/20251024073626.129032-1-tzimmermann@suse.de\n" }, { "commit": "8907226bed1ebd10d069f6f70ff0aaa8840f3267", "tree": "cf87003b1ce6c2053f37bf3f6e92663fbe4ff01f", "parents": [ "543d35004007a06ef247acf2fc55efa8388aa741", "20594cd104abaaabb676c7a2915b150ae5ff093d", "8f067aa59430266386b83c18b983ca583faa6a11", "d91a1d129b63614fa4c2e45e60918409ce36db7e" ], "author": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Thu Oct 30 20:40:49 2025 +0100" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Thu Oct 30 20:40:49 2025 +0100" }, "message": "Merge branches \u0027acpi-button\u0027, \u0027acpi-video\u0027 and \u0027acpi-fan\u0027\n\nMerge ACPI button, ACPI backlight (video), and ACPI fan driver fixes for\n6.18-rc4:\n\n - Call input_free_device() on failing input device registration as\n necessary (and mentioned in the input subsystem documentation) in the\n ACPI button driver (Kaushlendra Kumar)\n\n - Fix use-after-free in acpi_video_switch_brightness() by canceling\n a delayed work during tear-down (Yuhao Jiang)\n\n - Use platform device for devres-related actions in the ACPI fan driver\n to allow device-managed resources to be cleaned up properly (Armin\n Wolf)\n\n* acpi-button:\n ACPI: button: Call input_free_device() on failing input device registration\n\n* acpi-video:\n ACPI: video: Fix use-after-free in acpi_video_switch_brightness()\n\n* acpi-fan:\n ACPI: fan: Use platform device for devres-related actions\n ACPI: fan: Use ACPI handle when retrieving _FST\n" }, { "commit": "590c5cd10675a6ae49f6019502dec5c87aba07e4", "tree": "bc3f65f91e6100fec1470093b6cce86ea584d3de", "parents": [ "db86f55bf81a3a297be05ee8775ae9a8c6e3a599", "35e4a69b2003f20a69e7d19ae96ab1eef1aa8e8d" ], "author": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Thu Oct 30 20:25:18 2025 +0100" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Thu Oct 30 20:25:18 2025 +0100" }, "message": "Merge branches \u0027pm-cpuidle\u0027 and \u0027pm-sleep\u0027\n\nMerge a cpuidle fix and two fixes related to system sleep for 6.18-rc4:\n\n - Add an exit latency check to the menu cpuidle governor in the case\n when it considers using a real idle state instead of a polling one to\n address a performance regression (Rafael Wysocki)\n\n - Revert an attempted cleanup of a system suspend code path that\n introduced a regression elsewhere (Samuel Wu)\n\n - Allow pm_restrict_gfp_mask() to be called multiple times in a row\n and adjust pm_restore_gfp_mask() accordingly to avoid having to play\n nasty games with these calls during hibernation (Rafael Wysocki)\n\n* pm-cpuidle:\n cpuidle: governors: menu: Select polling state in some more cases\n\n* pm-sleep:\n PM: sleep: Allow pm_restrict_gfp_mask() stacking\n Revert \"PM: sleep: Make pm_wakeup_clear() call more clear\"\n" }, { "commit": "64e2f60f355e556337fcffe80b9bcff1b22c9c42", "tree": "868089b3d5a7afc3eaac27bda39dd536cd95aa26", "parents": [ "07ad45e06b4039adf96882aefcb1d3299fb7c305" ], "author": { "name": "Heiko Carstens", "email": "hca@linux.ibm.com", "time": "Thu Oct 30 15:55:05 2025 +0100" }, "committer": { "name": "Heiko Carstens", "email": "hca@linux.ibm.com", "time": "Thu Oct 30 16:59:28 2025 +0100" }, "message": "s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP\n\nAs reported by Luiz Capitulino enabling HVO on s390 leads to reproducible\ncrashes. The problem is that kernel page tables are modified without\nflushing corresponding TLB entries.\n\nEven if it looks like the empty flush_tlb_all() implementation on s390 is\nthe problem, it is actually a different problem: on s390 it is not allowed\nto replace an active/valid page table entry with another valid page table\nentry without the detour over an invalid entry. A direct replacement may\nlead to random crashes and/or data corruption.\n\nIn order to invalidate an entry special instructions have to be used\n(e.g. ipte or idte). Alternatively there are also special instructions\navailable which allow to replace a valid entry with a different valid\nentry (e.g. crdte or cspg).\n\nGiven that the HVO code currently does not provide the hooks to allow for\nan implementation which is compliant with the s390 architecture\nrequirements, disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP again, which is\nbasically a revert of the original patch which enabled it.\n\nReported-by: Luiz Capitulino \u003cluizcap@redhat.com\u003e\nCloses: https://lore.kernel.org/all/20251028153930.37107-1-luizcap@redhat.com/\nFixes: 00a34d5a99c0 (\"s390: select ARCH_WANT_HUGETLB_PAGE_OPTIMIZE_VMEMMAP\")\nCc: stable@vger.kernel.org\nTested-by: Luiz Capitulino \u003cluizcap@redhat.com\u003e\nReviewed-by: Gerald Schaefer \u003cgerald.schaefer@linux.ibm.com\u003e\nReviewed-by: David Hildenbrand \u003cdavid@redhat.com\u003e\nSigned-off-by: Heiko Carstens \u003chca@linux.ibm.com\u003e\n" }, { "commit": "bf7e97910b9f4d9679e075a39be371a4ed65dbd4", "tree": "02ddb50b4b24d58ef76a95e748ca6b414883a142", "parents": [ "3257bd193fa1702791978d8418c9a96e3def082c" ], "author": { "name": "Luca Ceresoli", "email": "luca.ceresoli@bootlin.com", "time": "Tue Oct 14 13:30:52 2025 +0200" }, "committer": { "name": "Philipp Zabel", "email": "p.zabel@pengutronix.de", "time": "Thu Oct 30 16:55:19 2025 +0100" }, "message": "drm/imx: parallel-display: add the bridge before attaching it\n\nInvoking drm_bridge_add() is good practice, so add it to this driver.\n\nLink: https://lore.kernel.org/all/DDHZ5GO9MPF0.CGYTVBI74FOZ@bootlin.com\nSigned-off-by: Luca Ceresoli \u003cluca.ceresoli@bootlin.com\u003e\nReviewed-by: Louis Chauvet \u003clouis.chauvet@bootlin.com\u003e\nLink: https://patch.msgid.link/20251014-drm-bridge-alloc-imx-ipuv3-v1-2-a1bb1dcbff50@bootlin.com\nSigned-off-by: Philipp Zabel \u003cp.zabel@pengutronix.de\u003e\n" }, { "commit": "3257bd193fa1702791978d8418c9a96e3def082c", "tree": "aaa548c80bf3abaf589350fa16febbb45dbd6dd4", "parents": [ "d8eb00bbc628c8916ab0da2bb80059d48aa4512e" ], "author": { "name": "Luca Ceresoli", "email": "luca.ceresoli@bootlin.com", "time": "Tue Oct 14 13:30:51 2025 +0200" }, "committer": { "name": "Philipp Zabel", "email": "p.zabel@pengutronix.de", "time": "Thu Oct 30 16:55:19 2025 +0100" }, "message": "drm/imx: parallel-display: convert to devm_drm_bridge_alloc() API\n\nThis is the new API for allocating DRM bridges.\n\nThis conversion was missed during the initial conversion of all bridges to\nthe new API. Thus all kernels with commit 94d50c1a2ca3 (\"drm/bridge:\nget/put the bridge reference in drm_bridge_attach/detach()\") and using this\ndriver now warn due to drm_bridge_attach() incrementing the refcount, which\nis not initialized without using devm_drm_bridge_alloc() for allocation.\n\nTo make the conversion simple and straightforward without messing up with\nthe drmm_simple_encoder_alloc(), move the struct drm_bridge from struct\nimx_parallel_display_encoder to struct imx_parallel_display.\n\nAlso remove the \u0027struct imx_parallel_display *pd\u0027 from struct\nimx_parallel_display_encoder, not needed anymore.\n\nFixes: 94d50c1a2ca3 (\"drm/bridge: get/put the bridge reference in drm_bridge_attach/detach()\")\nReported-by: Ernest Van Hoecke \u003cernestvanhoecke@gmail.com\u003e\nCloses: https://lore.kernel.org/all/hlf4wdopapxnh4rekl5s3kvoi6egaga3lrjfbx6r223ar3txri@3ik53xw5idyh/\nSigned-off-by: Luca Ceresoli \u003cluca.ceresoli@bootlin.com\u003e\nReviewed-by: Louis Chauvet \u003clouis.chauvet@bootlin.com\u003e\nTested-by: Ernest Van Hoecke \u003cernest.vanhoecke@toradex.com\u003e\nLink: https://patch.msgid.link/20251014-drm-bridge-alloc-imx-ipuv3-v1-1-a1bb1dcbff50@bootlin.com\nSigned-off-by: Philipp Zabel \u003cp.zabel@pengutronix.de\u003e\n" }, { "commit": "0b39ca457241aeca07a613002512573e8804f93a", "tree": "83059c2b005b931ce94df578bff8179cff463a1f", "parents": [ "19de03b312d69a7e9bacb51c806c6e3f4207376c" ], "author": { "name": "Carlos Llamas", "email": "cmllamas@google.com", "time": "Thu Oct 30 04:39:18 2025 +0000" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Oct 30 08:52:57 2025 -0600" }, "message": "blk-crypto: use BLK_STS_INVAL for alignment errors\n\nMake __blk_crypto_bio_prep() propagate BLK_STS_INVAL when IO segments\nfail the data unit alignment check.\n\nThis was flagged by an LTP test that expects EINVAL when performing an\nO_DIRECT read with a misaligned buffer [1].\n\nCc: Eric Biggers \u003cebiggers@kernel.org\u003e\nCc: Christoph Hellwig \u003chch@lst.de\u003e\nLink: https://lore.kernel.org/all/aP-c5gPjrpsn0vJA@google.com/ [1]\nSigned-off-by: Carlos Llamas \u003ccmllamas@google.com\u003e\nReviewed-by: Eric Biggers \u003cebiggers@kernel.org\u003e\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "390db60f8e2bd21fae544917eb3a8618265c058c", "tree": "49a086a3568f26f6bd42773291d304707273a29b", "parents": [ "4f4c654f5a0f6560b938a5ab05ec5940aa6c1c29", "5e5c8aa73d99f1daa9f2ec1474b7fc1a6952764b" ], "author": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Thu Oct 30 13:08:08 2025 +0100" }, "committer": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Thu Oct 30 13:08:08 2025 +0100" }, "message": "Merge tag \u0027asoc-fix-v6.18-rc2\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linus\n\nASoC: Fixes for v6.18\n\nA bigger batch of fixes than I\u0027d like, things built up due to holidays\nand some last minute issues which caused me to hold off on sending a pul\nrequest. None of these are super remarkable, and there\u0027s a few new\ndevice IDs in here too including a relatively big block of AMD devices.\n\nThe Cirrus Logic CS530x support subject line is actually a fix that was\non the start of that series and got pulled in here, I forgot to fix the\nsubject up when merging.\n" }, { "commit": "47a0925ee4bd2689f0aef4dbd67dd46442fe1ca2", "tree": "07d2b4e54b9bbd847e36b9a2aa706f339467e333", "parents": [ "dcb6fa37fd7bc9c3d2b066329b0d27dedf8becaa" ], "author": { "name": "Maud Spierings", "email": "maudspierings@gocontroll.com", "time": "Thu Oct 30 07:35:38 2025 +0100" }, "committer": { "name": "Mark Brown", "email": "broonie@kernel.org", "time": "Thu Oct 30 11:30:23 2025 +0000" }, "message": "regulator: bd718x7: Fix voltages scaled by resistor divider\n\nThe .min_sel and .max_sel fields remained uninitialized in the new\nlinear_range, causing an error further down the line. Copy the old\nvalues of these fields to the new one as they represent the range of\nregister values, which does not change.\n\nFixes: d2ad981151b3a (\"regulator: bd718x7: Support external connection to scale voltages\")\nSigned-off-by: Maud Spierings \u003cmaudspierings@gocontroll.com\u003e\nReviewed-by: Matti Vaittinen \u003cmazziesaccount@gmail.com\u003e\nLink: https://patch.msgid.link/20251030-mini_iv-v3-2-ef56c4d9f219@gocontroll.com\nSigned-off-by: Mark Brown \u003cbroonie@kernel.org\u003e\n" }, { "commit": "89216c9051ef6635f1514f8e0d2f9cd63b37a3b6", "tree": "f4e0b6fc9ed413862745b457b5d56bd72a409600", "parents": [ "847ebc4476714f81d7dea73e5ea69448d7fe9d3a" ], "author": { "name": "Tony Luck", "email": "tony.luck@intel.com", "time": "Tue Oct 28 10:29:48 2025 -0700" }, "committer": { "name": "Ingo Molnar", "email": "mingo@kernel.org", "time": "Thu Oct 30 11:34:02 2025 +0100" }, "message": "x86/cpu: Add/fix core comments for {Panther,Nova} Lake\n\nThe E-core in Panther Lake is Darkmont, not Crestmont.\n\nNova Lake is built from Coyote Cove (P-core) and Arctic Wolf (E-core).\n\nFixes: 43bb700cff6b (\"x86/cpu: Update Intel Family comments\")\nSigned-off-by: Tony Luck \u003ctony.luck@intel.com\u003e\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\nAcked-by: Dave Hansen \u003cdave.hansen@linux.intel.com\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nLink: https://patch.msgid.link/20251028172948.6721-1-tony.luck@intel.com\n" }, { "commit": "847ebc4476714f81d7dea73e5ea69448d7fe9d3a", "tree": "ad252e1447d00bfe539db191add215586ff908f7", "parents": [ "0d6e9ec80cebf9b378a1d3a01144e576d731c397" ], "author": { "name": "Borislav Petkov (AMD)", "email": "bp@alien8.de", "time": "Wed Oct 29 12:34:31 2025 +0100" }, "committer": { "name": "Ingo Molnar", "email": "mingo@kernel.org", "time": "Thu Oct 30 11:33:55 2025 +0100" }, "message": "x86/CPU/AMD: Extend Zen6 model range\n\nAdd some more Zen6 models.\n\nSigned-off-by: Borislav Petkov (AMD) \u003cbp@alien8.de\u003e\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\nLink: https://patch.msgid.link/20251029123056.19987-1-bp@kernel.org\n" }, { "commit": "51e5ad549c43b557c7da1e4d1a1dcf061b4a5f6c", "tree": "e62cff853ad04428f9f97a771096038d8eca1c3a", "parents": [ "6a2108c78069fda000729b88c97b1eba0405e6d7" ], "author": { "name": "Ranganath V N", "email": "vnranganath.20@gmail.com", "time": "Sun Oct 26 22:03:12 2025 +0530" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 30 11:21:05 2025 +0100" }, "message": "net: sctp: fix KMSAN uninit-value in sctp_inq_pop\n\nFix an issue detected by syzbot:\n\nKMSAN reported an uninitialized-value access in sctp_inq_pop\nBUG: KMSAN: uninit-value in sctp_inq_pop\n\nThe issue is actually caused by skb trimming via sk_filter() in sctp_rcv().\nIn the reproducer, skb-\u003elen becomes 1 after sk_filter(), which bypassed the\noriginal check:\n\n if (skb-\u003elen \u003c sizeof(struct sctphdr) + sizeof(struct sctp_chunkhdr) +\n skb_transport_offset(skb))\nTo handle this safely, a new check should be performed after sk_filter().\n\nReported-by: syzbot+d101e12bccd4095460e7@syzkaller.appspotmail.com\nTested-by: syzbot+d101e12bccd4095460e7@syzkaller.appspotmail.com\nCloses: https://syzkaller.appspot.com/bug?extid\u003dd101e12bccd4095460e7\nFixes: 1da177e4c3f4 (\"Linux-2.6.12-rc2\")\nSuggested-by: Xin Long \u003clucien.xin@gmail.com\u003e\nSigned-off-by: Ranganath V N \u003cvnranganath.20@gmail.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/20251026-kmsan_fix-v3-1-2634a409fa5f@gmail.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "4f4c654f5a0f6560b938a5ab05ec5940aa6c1c29", "tree": "0edc857b38f15de4e99c8f0493636363a982d950", "parents": [ "28935ee5e4789ad86c08ba9f2426edd6203d13fa" ], "author": { "name": "Edson Juliano Drosdeck", "email": "edson.drosdeck@gmail.com", "time": "Wed Oct 29 15:11:52 2025 -0300" }, "committer": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Thu Oct 30 07:26:47 2025 +0100" }, "message": "ALSA: hda/realtek: Enable mic on Vaio RPL\n\nVaio RPL is equipped with ACL256, and needs a\nfix to make the internal mic and headphone mic to work.\nAlso must to limits the internal microphone boost.\n\nSigned-off-by: Edson Juliano Drosdeck \u003cedson.drosdeck@gmail.com\u003e\nLink: https://patch.msgid.link/20251029181152.389302-1-edson.drosdeck@gmail.com\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\n" }, { "commit": "6a2108c78069fda000729b88c97b1eba0405e6d7", "tree": "7a56110f8266d555adef1201a988782b7185c9d2", "parents": [ "a38eeecfe3232283c0ae34d0f4302e5a3e60f3ee" ], "author": { "name": "Shivaji Kant", "email": "shivajikant@google.com", "time": "Wed Oct 29 06:54:19 2025 +0000" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 19:23:21 2025 -0700" }, "message": "net: devmem: refresh devmem TX dst in case of route invalidation\n\nThe zero-copy Device Memory (Devmem) transmit path\nrelies on the socket\u0027s route cache (`dst_entry`) to\nvalidate that the packet is being sent via the network\ndevice to which the DMA buffer was bound.\n\nHowever, this check incorrectly fails and returns `-ENODEV`\nif the socket\u0027s route cache entry (`dst`) is merely missing\nor expired (`dst \u003d\u003d NULL`). This scenario is observed during\nnetwork events, such as when flow steering rules are deleted,\nleading to a temporary route cache invalidation.\n\nThis patch fixes -ENODEV error for `net_devmem_get_binding()`\nby doing the following:\n\n1. It attempts to rebuild the route via `rebuild_header()`\nif the route is initially missing (`dst \u003d\u003d NULL`). This\nallows the TCP/IP stack to recover from transient route\ncache misses.\n2. It uses `rcu_read_lock()` and `dst_dev_rcu()` to safely\naccess the network device pointer (`dst_dev`) from the\nroute, preventing use-after-free conditions if the\ndevice is concurrently removed.\n3. It maintains the critical safety check by validating\nthat the retrieved destination device (`dst_dev`) is\nexactly the device registered in the Devmem binding\n(`binding-\u003edev`).\n\nThese changes prevent unnecessary ENODEV failures while\nmaintaining the critical safety requirement that the\nDevmem resources are only used on the bound network device.\n\nReviewed-by: Bobby Eshleman \u003cbobbyeshleman@meta.com\u003e\nReported-by: Eric Dumazet \u003cedumazet@google.com\u003e\nReported-by: Vedant Mathur \u003cvedantmathur@google.com\u003e\nSuggested-by: Eric Dumazet \u003cedumazet@google.com\u003e\nFixes: bd61848900bf (\"net: devmem: Implement TX path\")\nSigned-off-by: Shivaji Kant \u003cshivajikant@google.com\u003e\nLink: https://patch.msgid.link/20251029065420.3489943-1-shivajikant@google.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "a38eeecfe3232283c0ae34d0f4302e5a3e60f3ee", "tree": "abf14d073f7b2dc3b1ccf341c77728d241eea924", "parents": [ "0dd1be4fe06a1f3a14a517446b49afaa6ac5fa94", "48b2e323c018c4c908ae5acabff326647bab5240" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 18:49:26 2025 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 18:49:27 2025 -0700" }, "message": "Merge branch \u0027net-stmmac-fixes-for-stmmac-tx-vlan-insert-and-est\u0027\n\nRohan G Thomas says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nnet: stmmac: Fixes for stmmac Tx VLAN insert and EST\n\nThis patchset includes following fixes for stmmac Tx VLAN insert and\nEST implementations:\n 1. Disable STAG insertion offloading, as DWMAC IPs doesn\u0027t support\n offload of STAG for double VLAN packets and CTAG for single VLAN\n packets when using the same register configuration. The current\n configuration in the driver is undocumented and is adding an\n additional 802.1Q tag with VLAN ID 0 for double VLAN packets.\n 2. Consider Tx VLAN offload tag length for maxSDU estimation.\n 3. Fix GCL bounds check\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20251028-qbv-fixes-v4-0-26481c7634e3@altera.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "48b2e323c018c4c908ae5acabff326647bab5240", "tree": "abf14d073f7b2dc3b1ccf341c77728d241eea924", "parents": [ "ded9813d17d3dd50a08e7a2ca1495769ef9c6673" ], "author": { "name": "Rohan G Thomas", "email": "rohan.g.thomas@altera.com", "time": "Tue Oct 28 11:18:45 2025 +0800" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 18:49:24 2025 -0700" }, "message": "net: stmmac: est: Fix GCL bounds checks\n\nFix the bounds checks for the hw supported maximum GCL entry\ncount and gate interval time.\n\nFixes: b60189e0392f (\"net: stmmac: Integrate EST with TAPRIO scheduler API\")\nSigned-off-by: Rohan G Thomas \u003crohan.g.thomas@altera.com\u003e\nReviewed-by: Matthew Gerlach \u003cmatthew.gerlach@altera.com\u003e\nLink: https://patch.msgid.link/20251028-qbv-fixes-v4-3-26481c7634e3@altera.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "ded9813d17d3dd50a08e7a2ca1495769ef9c6673", "tree": "6fa100b750339254e37f13f0c04aee7cf21a1241", "parents": [ "c657f86106c8729240e1f50a62c6606b578ecf20" ], "author": { "name": "Rohan G Thomas", "email": "rohan.g.thomas@altera.com", "time": "Tue Oct 28 11:18:44 2025 +0800" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 18:49:24 2025 -0700" }, "message": "net: stmmac: Consider Tx VLAN offload tag length for maxSDU\n\nQueue maxSDU requirement of 802.1 Qbv standard requires mac to drop\npackets that exceeds maxSDU length and maxSDU doesn\u0027t include\npreamble, destination and source address, or FCS but includes\nethernet type and VLAN header.\n\nOn hardware with Tx VLAN offload enabled, VLAN header length is not\nincluded in the skb-\u003elen, when Tx VLAN offload is requested. This\nleads to incorrect length checks and allows transmission of\noversized packets. Add the VLAN_HLEN to the skb-\u003elen before checking\nthe Qbv maxSDU if Tx VLAN offload is requested for the packet.\n\nFixes: c5c3e1bfc9e0 (\"net: stmmac: Offload queueMaxSDU from tc-taprio\")\nSigned-off-by: Rohan G Thomas \u003crohan.g.thomas@altera.com\u003e\nReviewed-by: Matthew Gerlach \u003cmatthew.gerlach@altera.com\u003e\nLink: https://patch.msgid.link/20251028-qbv-fixes-v4-2-26481c7634e3@altera.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "c657f86106c8729240e1f50a62c6606b578ecf20", "tree": "0084427c5fff98864b8dad82536e3455fae19215", "parents": [ "0dd1be4fe06a1f3a14a517446b49afaa6ac5fa94" ], "author": { "name": "Rohan G Thomas", "email": "rohan.g.thomas@altera.com", "time": "Tue Oct 28 11:18:43 2025 +0800" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 18:49:24 2025 -0700" }, "message": "net: stmmac: vlan: Disable 802.1AD tag insertion offload\n\nThe DWMAC IP\u0027s VLAN tag insertion offload does not support inserting\nSTAG (802.1AD) and CTAG (802.1Q) types in bytes 13 and 14 using the\nsame MAC_VLAN_Incl and MAC_VLAN_Inner_Incl register configurations.\n\nCurrently, MAC_VLAN_Incl is configured to offload only STAG type\ninsertion. However, the DWMAC IP inserts a CTAG type when the inner\nVLAN ID field of the descriptor is not configured, and a STAG type\nwhen it is configured. This behavior is not documented and leads to\ninconsistent double VLAN tagging.\n\nAdditionally, an unexpected CTAG with VLAN ID 0 is inserted, resulting\nin frames like:\n\nFrame 1: 110 bytes on wire (880 bits), 110 bytes captured (880 bits)\nEthernet II, Src: \u003csrc\u003e (\u003csrc\u003e), Dst: \u003cdst\u003e (\u003cdst\u003e)\nIEEE 802.1ad, ID: 100\n802.1Q Virtual LAN, PRI: 0, DEI: 0, ID: 0 (unexpected)\n802.1Q Virtual LAN, PRI: 0, DEI: 0, ID: 200\nInternet Protocol Version 4, Src: 192.168.4.10, Dst: 192.168.4.11\nInternet Control Message Protocol\n\nTo avoid this undocumented and incorrect behavior, disable 802.1AD tag\ninsertion offload. Also, don\u0027t set CSVL bit. As per the data book,\nwhen this bit is set, S-VLAN type (0x88A8) is inserted in the 13th and\n14th bytes of transmitted packets and when this bit is reset, C-VLAN\ntype (0x8100) is inserted in the 13th and 14th bytes of transmitted\npackets.\n\nFixes: 30d932279dc2 (\"net: stmmac: Add support for VLAN Insertion Offload\")\nFixes: e94e3f3b51ce (\"net: stmmac: Add support for VLAN Insertion Offload in GMAC4+\")\nFixes: 1d2c7a5fee31 (\"net: stmmac: Refactor VLAN implementation\")\nSigned-off-by: Rohan G Thomas \u003crohan.g.thomas@altera.com\u003e\nReviewed-by: Boon Khai Ng \u003cboon.khai.ng@altera.com\u003e\nLink: https://patch.msgid.link/20251028-qbv-fixes-v4-1-26481c7634e3@altera.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "0dd1be4fe06a1f3a14a517446b49afaa6ac5fa94", "tree": "32f105d8c471e8cbf409d141bed45fd81b1ec5ad", "parents": [ "e98cda764aa9c27f6810d08bd7bf2e8071535990", "426e9da3b28404b1edcbae401231fb378150d99d" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 18:32:23 2025 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 18:32:24 2025 -0700" }, "message": "Merge branch \u0027tls-introduce-and-use-rx-async-resync-request-cancel-function\u0027\n\nTariq Toukan says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\ntls: Introduce and use RX async resync request cancel function\n\nThis series by Shahar introduces RX async resync request cancel function\nin tls module, and uses it in mlx5e driver.\n\nFor a device-offloaded TLS RX connection, the TLS module increments\nrcd_delta each time a new TLS record is received, tracking the distance\nfrom the original resync request. In the meanwhile, the device is\nqueried and is expected to respond, asynchronously.\n\nHowever, if the device response is delayed or fails (e.g due to unstable\nconnection and device getting out of tracking, hardware errors, resource\nexhaustion etc.), the TLS module keeps logging and incrementing\nrcd_delta, which can lead to a WARN() when rcd_delta exceeds the\nthreshold.\n\nThis series improves this code area by canceling the resync request when\nspotting an issue with the device response.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/1761508983-937977-1-git-send-email-tariqt@nvidia.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "426e9da3b28404b1edcbae401231fb378150d99d", "tree": "32f105d8c471e8cbf409d141bed45fd81b1ec5ad", "parents": [ "c15d5c62ab313c19121f10e25d4fec852bd1c40c" ], "author": { "name": "Shahar Shitrit", "email": "shshitrit@nvidia.com", "time": "Sun Oct 26 22:03:03 2025 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 18:32:18 2025 -0700" }, "message": "net/mlx5e: kTLS, Cancel RX async resync request in error flows\n\nWhen device loses track of TLS records, it attempts to resync by\nmonitoring records and requests an asynchronous resynchronization\nfrom software for this TLS connection.\n\nThe TLS module handles such device RX resync requests by logging record\nheaders and comparing them with the record tcp_sn when provided by the\ndevice. It also increments rcd_delta to track how far the current\nrecord tcp_sn is from the tcp_sn of the original resync request.\nIf the device later responds with a matching tcp_sn, the TLS module\napproves the tcp_sn for resync.\n\nHowever, the device response may be delayed or never arrive,\nparticularly due to traffic-related issues such as packet drops or\nreordering. In such cases, the TLS module remains unaware that resync\nwill not complete, and continues performing unnecessary work by logging\nheaders and incrementing rcd_delta, which can eventually exceed the\nthreshold and trigger a WARN(). For example, this was observed when the\ndevice got out of tracking, causing\nmlx5e_ktls_handle_get_psv_completion() to fail and ultimately leading\nto the rcd_delta warning.\n\nTo address this, call tls_offload_rx_resync_async_request_cancel()\nto cancel the resync request and stop resync tracking in such error\ncases. Also, increment the tls_resync_req_skip counter to track these\ncancellations.\n\nFixes: 0419d8c9d8f8 (\"net/mlx5e: kTLS, Add kTLS RX resync support\")\nSigned-off-by: Shahar Shitrit \u003cshshitrit@nvidia.com\u003e\nSigned-off-by: Tariq Toukan \u003ctariqt@nvidia.com\u003e\nLink: https://patch.msgid.link/1761508983-937977-4-git-send-email-tariqt@nvidia.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "c15d5c62ab313c19121f10e25d4fec852bd1c40c", "tree": "2fe8283376f23cf80ba2987db4857c49ae8af297", "parents": [ "34892cfec0c2d96787c4be7bda0d5f18d7dacf85" ], "author": { "name": "Shahar Shitrit", "email": "shshitrit@nvidia.com", "time": "Sun Oct 26 22:03:02 2025 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 18:32:18 2025 -0700" }, "message": "net: tls: Cancel RX async resync request on rcd_delta overflow\n\nWhen a netdev issues a RX async resync request for a TLS connection,\nthe TLS module handles it by logging record headers and attempting to\nmatch them to the tcp_sn provided by the device. If a match is found,\nthe TLS module approves the tcp_sn for resynchronization.\n\nWhile waiting for a device response, the TLS module also increments\nrcd_delta each time a new TLS record is received, tracking the distance\nfrom the original resync request.\n\nHowever, if the device response is delayed or fails (e.g due to\nunstable connection and device getting out of tracking, hardware\nerrors, resource exhaustion etc.), the TLS module keeps logging and\nincrementing, which can lead to a WARN() when rcd_delta exceeds the\nthreshold.\n\nTo address this, introduce tls_offload_rx_resync_async_request_cancel()\nto explicitly cancel resync requests when a device response failure is\ndetected. Call this helper also as a final safeguard when rcd_delta\ncrosses its threshold, as reaching this point implies that earlier\ncancellation did not occur.\n\nSigned-off-by: Shahar Shitrit \u003cshshitrit@nvidia.com\u003e\nReviewed-by: Sabrina Dubroca \u003csd@queasysnail.net\u003e\nSigned-off-by: Tariq Toukan \u003ctariqt@nvidia.com\u003e\nLink: https://patch.msgid.link/1761508983-937977-3-git-send-email-tariqt@nvidia.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "34892cfec0c2d96787c4be7bda0d5f18d7dacf85", "tree": "6e5435bc9fc843655043cbc5a2deb77612e7a9c1", "parents": [ "e98cda764aa9c27f6810d08bd7bf2e8071535990" ], "author": { "name": "Shahar Shitrit", "email": "shshitrit@nvidia.com", "time": "Sun Oct 26 22:03:01 2025 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 18:32:17 2025 -0700" }, "message": "net: tls: Change async resync helpers argument\n\nUpdate tls_offload_rx_resync_async_request_start() and\ntls_offload_rx_resync_async_request_end() to get a struct\ntls_offload_resync_async parameter directly, rather than\nextracting it from struct sock.\n\nThis change aligns the function signatures with the upcoming\ntls_offload_rx_resync_async_request_cancel() helper, which\nwill be introduced in a subsequent patch.\n\nSigned-off-by: Shahar Shitrit \u003cshshitrit@nvidia.com\u003e\nReviewed-by: Sabrina Dubroca \u003csd@queasysnail.net\u003e\nSigned-off-by: Tariq Toukan \u003ctariqt@nvidia.com\u003e\nLink: https://patch.msgid.link/1761508983-937977-2-git-send-email-tariqt@nvidia.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "e98cda764aa9c27f6810d08bd7bf2e8071535990", "tree": "ce37aecd93756967c4bd456e69c9b7019bb4886b", "parents": [ "298574936a6c4ebbe655e15d971ddb1a96c7dc0b", "90918e3b6404c2a37837b8f11692471b4c512de2" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 18:25:12 2025 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 18:25:12 2025 -0700" }, "message": "Merge tag \u0027nf-25-10-29\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf\n\nFlorian Westphal says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nnetfilter: updates for net\n\n1) its not possible to attach conntrack labels via ctnetlink\n unless one creates a dummy \u0027ct labels set\u0027 rule in nftables.\n This is an oversight, the \u0027ruleset tests presence, userspace\n (netlink) sets\u0027 use-case is valid and should \u0027just work\u0027.\n Always broken since this got added in Linux 4.7.\n\n2) nft_connlimit reads count value without holding the relevant\n lock, add a READ_ONCE annotation. From Fernando Fernandez Mancera.\n\n3) There is a long-standing bug (since 4.12) in nftables helper infra\n when NAT is in use: if the helper gets assigned after the nat binding\n was set up, we fail to initialise the \u0027seqadj\u0027 extension, which is\n needed in case NAT payload rewrites need to add (or remove) from the\n packet payload. Fix from Andrii Melnychenko.\n\n* tag \u0027nf-25-10-29\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf:\n netfilter: nft_ct: add seqadj extension for natted connections\n netfilter: nft_connlimit: fix possible data race on connection count\n netfilter: nft_ct: enable labels for get case too\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20251029135617.18274-1-fw@strlen.de\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "895ad6f7083b0c9f1902b23b84136298a492cbeb", "tree": "262affab01cbd60c56f08bc68740578caa323945", "parents": [ "fac56c4651ae95f3f2b468c2cf1884cf0e6d18c1" ], "author": { "name": "Stefan Metzmacher", "email": "metze@samba.org", "time": "Tue Oct 28 18:43:46 2025 +0100" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Wed Oct 29 20:13:13 2025 -0500" }, "message": "smb: client: call smbd_destroy() in the same splace as kernel_sock_shutdown()/sock_release()\n\nWith commit b0432201a11b (\"smb: client: let destroy_mr_list() keep\nsmbdirect_mr_io memory if registered\") the changes from commit\n214bab448476 (\"cifs: Call MID callback before destroying transport\") and\ncommit 1d2a4f57cebd (\"cifs:smbd When reconnecting to server, call\nsmbd_destroy() after all MIDs have been called\") are no longer needed.\n\nAnd it\u0027s better to use the same logic flow, so that\nthe chance of smbdirect related problems is smaller.\n\nFixes: 214bab448476 (\"cifs: Call MID callback before destroying transport\")\nFixes: 1d2a4f57cebd (\"cifs:smbd When reconnecting to server, call smbd_destroy() after all MIDs have been called\")\nCc: Steve French \u003csmfrench@gmail.com\u003e\nCc: Tom Talpey \u003ctom@talpey.com\u003e\nCc: Long Li \u003clongli@microsoft.com\u003e\nCc: Namjae Jeon \u003clinkinjeon@kernel.org\u003e\nCc: linux-cifs@vger.kernel.org\nCc: samba-technical@lists.samba.org\nSigned-off-by: Stefan Metzmacher \u003cmetze@samba.org\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "fac56c4651ae95f3f2b468c2cf1884cf0e6d18c1", "tree": "5c9a61433d3561218d916054418bde4d29e3b0a0", "parents": [ "5c76f9961c170552c1d07c830b5e145475151600" ], "author": { "name": "Paulo Alcantara", "email": "pc@manguebit.org", "time": "Thu Oct 23 18:59:47 2025 -0300" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Wed Oct 29 20:13:05 2025 -0500" }, "message": "smb: client: handle lack of IPC in dfs_cache_refresh()\n\nIn very rare cases, DFS mounts could end up with SMB sessions without\nany IPC connections. These mounts are only possible when having\nunexpired cached DFS referrals, hence not requiring any IPC\nconnections during the mount process.\n\nTry to establish those missing IPC connections when refreshing DFS\nreferrals. If the server is still rejecting it, then simply ignore\nand leave expired cached DFS referral for any potential DFS failovers.\n\nReported-by: Jay Shin \u003cjaeshin@redhat.com\u003e\nSigned-off-by: Paulo Alcantara (Red Hat) \u003cpc@manguebit.org\u003e\nCc: David Howells \u003cdhowells@redhat.com\u003e\nCc: linux-cifs@vger.kernel.org\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "298574936a6c4ebbe655e15d971ddb1a96c7dc0b", "tree": "4418af720274d6377a49bc9c9f7e2833352708a5", "parents": [ "9311e9540a8b406d9f028aa87fb072a3819d4c82" ], "author": { "name": "Thanh Quan", "email": "thanh.quan.xn@renesas.com", "time": "Mon Oct 27 15:02:43 2025 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 17:59:09 2025 -0700" }, "message": "net: phy: dp83869: fix STRAP_OPMODE bitmask\n\nAccording to the TI DP83869HM datasheet Revision D (June 2025), section\n7.6.1.41 STRAP_STS Register, the STRAP_OPMODE bitmask is bit [11:9].\nFix this.\n\nIn case the PHY is auto-detected via PHY ID registers, or not described\nin DT, or, in case the PHY is described in DT but the optional DT property\n\"ti,op-mode\" is not present, then the driver reads out the PHY functional\nmode (RGMII, SGMII, ...) from hardware straps.\n\nCurrently, all upstream users of this PHY specify both DT compatible string\n\"ethernet-phy-id2000.a0f1\" and ti,op-mode \u003d \u003cDP83869_RGMII_COPPER_ETHERNET\u003e\nproperty, therefore it seems no upstream users are affected by this bug.\n\nThe driver currently interprets bits [2:0] of STRAP_STS register as PHY\nfunctional mode. Those bits are controlled by ANEG_DIS, ANEGSEL_0 straps\nand an always-zero reserved bit. Systems that use RGMII-to-Copper functional\nmode are unlikely to disable auto-negotiation via ANEG_DIS strap, or change\nauto-negotiation behavior via ANEGSEL_0 strap. Therefore, even with this bug\nin place, the STRAP_STS register content is likely going to be interpreted\nby the driver as RGMII-to-Copper mode.\n\nHowever, for a system with PHY functional mode strapping set to other mode\nthan RGMII-to-Copper, the driver is likely to misinterpret the strapping\nas RGMII-to-Copper and misconfigure the PHY.\n\nFor example, on a system with SGMII-to-Copper strapping, the STRAP_STS\nregister reads as 0x0c20, but the PHY ends up being configured for\nincompatible RGMII-to-Copper mode.\n\nFixes: 0eaf8ccf2047 (\"net: phy: dp83869: Set opmode from straps\")\nReviewed-by: Andrew Lunn \u003candrew@lunn.ch\u003e\nSigned-off-by: Thanh Quan \u003cthanh.quan.xn@renesas.com\u003e\nSigned-off-by: Hai Pham \u003chai.pham.ud@renesas.com\u003e\nSigned-off-by: Marek Vasut \u003cmarek.vasut+renesas@mailbox.org\u003e # Port from U-Boot to Linux\nLink: https://patch.msgid.link/20251027140320.8996-1-marek.vasut+renesas@mailbox.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "9311e9540a8b406d9f028aa87fb072a3819d4c82", "tree": "9ba75786a6cda869227b6d19064fd838740716b2", "parents": [ "da2522df3fcc6f57068470cbdcd6516d9eb76b37" ], "author": { "name": "Po-Hsu Lin", "email": "po-hsu.lin@canonical.com", "time": "Mon Oct 27 17:57:10 2025 +0800" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 17:56:03 2025 -0700" }, "message": "selftests: net: use BASH for bareudp testing\n\nIn bareudp.sh, this script uses /bin/sh and it will load another lib.sh\nBASH script at the very beginning.\n\nBut on some operating systems like Ubuntu, /bin/sh is actually pointed to\nDASH, thus it will try to run BASH commands with DASH and consequently\nleads to syntax issues:\n # ./bareudp.sh: 4: ./lib.sh: Bad substitution\n # ./bareudp.sh: 5: ./lib.sh: source: not found\n # ./bareudp.sh: 24: ./lib.sh: Syntax error: \"(\" unexpected\n\nFix this by explicitly using BASH for bareudp.sh. This fixes test\nexecution failures on systems where /bin/sh is not BASH.\n\nReported-by: Edoardo Canepa \u003cedoardo.canepa@canonical.com\u003e\nLink: https://bugs.launchpad.net/bugs/2129812\nSigned-off-by: Po-Hsu Lin \u003cpo-hsu.lin@canonical.com\u003e\nReviewed-by: Przemek Kitszel \u003cprzemyslaw.kitszel@intel.com\u003e\nLink: https://patch.msgid.link/20251027095710.2036108-2-po-hsu.lin@canonical.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "da2522df3fcc6f57068470cbdcd6516d9eb76b37", "tree": "5485c4c38de982255fdb272476205d10ea87ada7", "parents": [ "53110232c95ff56067fd96c75a1a1c53d10dcd98" ], "author": { "name": "Jinliang Wang", "email": "jinliangw@google.com", "time": "Sun Oct 26 23:55:30 2025 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 17:55:14 2025 -0700" }, "message": "net: mctp: Fix tx queue stall\n\nThe tx queue can become permanently stuck in a stopped state due to a\nrace condition between the URB submission path and its completion\ncallback.\n\nThe URB completion callback can run immediately after usb_submit_urb()\nreturns, before the submitting function calls netif_stop_queue(). If\nthis occurs, the queue state management becomes desynchronized, leading\nto a stall where the queue is never woken.\n\nFix this by moving the netif_stop_queue() call to before submitting the\nURB. This closes the race window by ensuring the network stack is aware\nthe queue is stopped before the URB completion can possibly run.\n\nFixes: 0791c0327a6e (\"net: mctp: Add MCTP USB transport driver\")\nSigned-off-by: Jinliang Wang \u003cjinliangw@google.com\u003e\nAcked-by: Jeremy Kerr \u003cjk@codeconstruct.com.au\u003e\nLink: https://patch.msgid.link/20251027065530.2045724-1-jinliangw@google.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "53110232c95ff56067fd96c75a1a1c53d10dcd98", "tree": "703fbfbabc339b49717ae3fcae083e60ea136413", "parents": [ "dc89548c6926d68dfdda11bebc1a5258bc41d887" ], "author": { "name": "Cosmin Ratiu", "email": "cratiu@nvidia.com", "time": "Sun Oct 26 22:20:19 2025 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 17:53:37 2025 -0700" }, "message": "net/mlx5: Don\u0027t zero user_count when destroying FDB tables\n\nesw-\u003euser_count tracks how many TC rules are added on an esw via\nmlx5e_configure_flower -\u003e mlx5_esw_get -\u003e atomic64_inc(\u0026esw-\u003euser_count)\n\nesw.user_count was unconditionally set to 0 in\nesw_destroy_legacy_fdb_table and esw_destroy_offloads_fdb_tables.\n\nThese two together can lead to the following sequence of events:\n1. echo 1 \u003e /sys/class/net/eth2/device/sriov_numvfs\n - mlx5_core_sriov_configure -...-\u003e esw_create_legacy_table -\u003e\n atomic64_set(\u0026esw-\u003euser_count, 0)\n2. tc qdisc add dev eth2 ingress \u0026\u0026 \\\n tc filter replace dev eth2 pref 1 protocol ip chain 0 ingress \\\n handle 1 flower action ct nat zone 64000 pipe\n - mlx5e_configure_flower -\u003e mlx5_esw_get -\u003e\n atomic64_inc(\u0026esw-\u003euser_count)\n3. echo 0 \u003e /sys/class/net/eth2/device/sriov_numvfs\n - mlx5_core_sriov_configure -..-\u003e esw_destroy_legacy_fdb_table\n -\u003e atomic64_set(\u0026esw-\u003euser_count, 0)\n4. devlink dev eswitch set pci/0000:08:00.0 mode switchdev\n - mlx5_devlink_eswitch_mode_set -\u003e mlx5_esw_try_lock -\u003e\n atomic64_read(\u0026esw-\u003euser_count) \u003d\u003d 0\n - then proceed to a WARN_ON in:\n esw_offloads_start -\u003e mlx5_eswitch_enable_locke -\u003e esw_offloads_enable\n -\u003e mlx5_esw_offloads_rep_load -\u003e mlx5e_vport_rep_load -\u003e\n mlx5e_netdev_change_profile -\u003e mlx5e_detach_netdev -\u003e\n mlx5e_cleanup_nic_rx -\u003e mlx5e_tc_nic_cleanup -\u003e\n mlx5e_mod_hdr_tbl_destroy\n\nFix this by not clearing out the user_count when destroying FDB tables,\nso that the check in mlx5_esw_try_lock can prevent the mode change when\nthere are TC rules configured, as originally intended.\n\nFixes: 2318b8bb94a3 (\"net/mlx5: E-switch, Destroy legacy fdb table when needed\")\nSigned-off-by: Cosmin Ratiu \u003ccratiu@nvidia.com\u003e\nReviewed-by: Dragos Tatulea \u003cdtatulea@nvidia.com\u003e\nSigned-off-by: Tariq Toukan \u003ctariqt@nvidia.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/1761510019-938772-1-git-send-email-tariqt@nvidia.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "dc89548c6926d68dfdda11bebc1a5258bc41d887", "tree": "32ef7da576a2d23a12e5ae636b04fdf9a46488f0", "parents": [ "ac345c5fff55262a51dad43bf8724c3d5d1fb006" ], "author": { "name": "Miaoqian Lin", "email": "linmq006@gmail.com", "time": "Mon Oct 27 00:43:16 2025 +0800" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 17:51:48 2025 -0700" }, "message": "net: usb: asix_devices: Check return value of usbnet_get_endpoints\n\nThe code did not check the return value of usbnet_get_endpoints.\nAdd checks and return the error if it fails to transfer the error.\n\nFound via static anlaysis and this is similar to\ncommit 07161b2416f7 (\"sr9800: Add check for usbnet_get_endpoints\").\n\nFixes: 933a27d39e0e (\"USB: asix - Add AX88178 support and many other changes\")\nFixes: 2e55cc7210fe (\"[PATCH] USB: usbnet (3/9) module for ASIX Ethernet adapters\")\nCc: stable@vger.kernel.org\nSigned-off-by: Miaoqian Lin \u003clinmq006@gmail.com\u003e\nLink: https://patch.msgid.link/20251026164318.57624-1-linmq006@gmail.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "ac345c5fff55262a51dad43bf8724c3d5d1fb006", "tree": "7a28015ad1fcba5a9441885e332a75235a817a61", "parents": [ "00764aa5c9bbb2044eb04d6d78584a436666b231", "fe11dfa10919ce594682c76f5f648a0840d80a2b" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 17:44:30 2025 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 17:44:30 2025 -0700" }, "message": "Merge branch \u0027mptcp-various-rare-sending-issues\u0027\n\nMatthieu Baerts says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nmptcp: various rare sending issues\n\nHere are various fixes from Paolo, addressing very occasional issues on\nthe sending side:\n\n- Patch 1: drop an optimisation that could lead to timeout in case of\n race conditions. A fix for up to v5.11.\n\n- Patch 2: fix stream corruption under very specific conditions.\n A fix for up to v5.13.\n\n- Patch 3: restore MPTCP-level zero window probe after a recent fix.\n A fix for up to v5.16.\n\n- Patch 4: new MIB counter to track MPTCP-level zero windows probe to\n help catching issues similar to the one fixed by the previous patch.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20251028-net-mptcp-send-timeout-v1-0-38ffff5a9ec8@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "fe11dfa10919ce594682c76f5f648a0840d80a2b", "tree": "7a28015ad1fcba5a9441885e332a75235a817a61", "parents": [ "a824084b98d8a1dbd6e85d0842a8eb5e73467f59" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Tue Oct 28 09:16:55 2025 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 17:44:28 2025 -0700" }, "message": "mptcp: zero window probe mib\n\nExplicitly account for MPTCP-level zero windows probe, to catch\nhopefully earlier issues alike the one addressed by the previous\npatch.\n\nReviewed-by: Mat Martineau \u003cmartineau@kernel.org\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\nTested-by: Geliang Tang \u003cgeliang@kernel.org\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nLink: https://patch.msgid.link/20251028-net-mptcp-send-timeout-v1-4-38ffff5a9ec8@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "a824084b98d8a1dbd6e85d0842a8eb5e73467f59", "tree": "574d05ba09f6711d9797e8bbed486e06d5622075", "parents": [ "8e04ce45a8db7a080220e86e249198fa676b83dc" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Tue Oct 28 09:16:54 2025 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 17:44:28 2025 -0700" }, "message": "mptcp: restore window probe\n\nSince commit 72377ab2d671 (\"mptcp: more conservative check for zero\nprobes\") the MPTCP-level zero window probe check is always disabled, as\nthe TCP-level write queue always contains at least the newly allocated\nskb.\n\nRefine the relevant check tacking in account that the above condition\nand that such skb can have zero length.\n\nFixes: 72377ab2d671 (\"mptcp: more conservative check for zero probes\")\nCc: stable@vger.kernel.org\nReported-by: Geliang Tang \u003cgeliang@kernel.org\u003e\nCloses: https://lore.kernel.org/d0a814c364e744ca6b836ccd5b6e9146882e8d42.camel@kernel.org\nReviewed-by: Mat Martineau \u003cmartineau@kernel.org\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\nTested-by: Geliang Tang \u003cgeliang@kernel.org\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nLink: https://patch.msgid.link/20251028-net-mptcp-send-timeout-v1-3-38ffff5a9ec8@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "8e04ce45a8db7a080220e86e249198fa676b83dc", "tree": "8a38c7577dea018fd265a29f8f9f68090ce4a4f0", "parents": [ "27b0e701d3872ba59c5b579a9e8a02ea49ad3d3b" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Tue Oct 28 09:16:53 2025 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 17:44:28 2025 -0700" }, "message": "mptcp: fix MSG_PEEK stream corruption\n\nIf a MSG_PEEK | MSG_WAITALL read operation consumes all the bytes in the\nreceive queue and recvmsg() need to waits for more data - i.e. it\u0027s a\nblocking one - upon arrival of the next packet the MPTCP protocol will\nstart again copying the oldest data present in the receive queue,\ncorrupting the data stream.\n\nAddress the issue explicitly tracking the peeked sequence number,\nrestarting from the last peeked byte.\n\nFixes: ca4fb892579f (\"mptcp: add MSG_PEEK support\")\nCc: stable@vger.kernel.org\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\nReviewed-by: Geliang Tang \u003cgeliang@kernel.org\u003e\nTested-by: Geliang Tang \u003cgeliang@kernel.org\u003e\nReviewed-by: Mat Martineau \u003cmartineau@kernel.org\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nLink: https://patch.msgid.link/20251028-net-mptcp-send-timeout-v1-2-38ffff5a9ec8@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "27b0e701d3872ba59c5b579a9e8a02ea49ad3d3b", "tree": "7180da13eeb06ec6212a8c3a941a99725211cdc2", "parents": [ "00764aa5c9bbb2044eb04d6d78584a436666b231" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Tue Oct 28 09:16:52 2025 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 17:44:28 2025 -0700" }, "message": "mptcp: drop bogus optimization in __mptcp_check_push()\n\nAccessing the transmit queue without owning the msk socket lock is\ninherently racy, hence __mptcp_check_push() could actually quit early\neven when there is pending data.\n\nThat in turn could cause unexpected tx lock and timeout.\n\nDropping the early check avoids the race, implicitly relaying on later\ntests under the relevant lock. With such change, all the other\nmptcp_send_head() call sites are now under the msk socket lock and we\ncan additionally drop the now unneeded annotation on the transmit head\npointer accesses.\n\nFixes: 6e628cd3a8f7 (\"mptcp: use mptcp release_cb for delayed tasks\")\nCc: stable@vger.kernel.org\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\nReviewed-by: Geliang Tang \u003cgeliang@kernel.org\u003e\nTested-by: Geliang Tang \u003cgeliang@kernel.org\u003e\nReviewed-by: Mat Martineau \u003cmartineau@kernel.org\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nLink: https://patch.msgid.link/20251028-net-mptcp-send-timeout-v1-1-38ffff5a9ec8@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "00764aa5c9bbb2044eb04d6d78584a436666b231", "tree": "340b369e8f3a0fd7f337925d1576831ce19cd652", "parents": [ "a43303809868b22bd1303739ba334e982b234d45" ], "author": { "name": "Gustavo Luiz Duarte", "email": "gustavold@gmail.com", "time": "Tue Oct 28 15:06:32 2025 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 17:41:00 2025 -0700" }, "message": "netconsole: Fix race condition in between reader and writer of userdata\n\nThe update_userdata() function constructs the complete userdata string\nin nt-\u003eextradata_complete and updates nt-\u003euserdata_length. This data\nis then read by write_msg() and write_ext_msg() when sending netconsole\nmessages. However, update_userdata() was not holding target_list_lock\nduring this process, allowing concurrent message transmission to read\npartially updated userdata.\n\nThis race condition could result in netconsole messages containing\nincomplete or inconsistent userdata - for example, reading the old\nuserdata_length with new extradata_complete content, or vice versa,\nleading to truncated or corrupted output.\n\nFix this by acquiring target_list_lock with spin_lock_irqsave() before\nupdating extradata_complete and userdata_length, and releasing it after\nboth fields are fully updated. This ensures that readers see a\nconsistent view of the userdata, preventing corruption during concurrent\naccess.\n\nThe fix aligns with the existing locking pattern used throughout the\nnetconsole code, where target_list_lock protects access to target\nfields including buf[] and msgcounter that are accessed during message\ntransmission.\n\nAlso get rid of the unnecessary variable complete_idx, which makes it\neasier to bail out of update_userdata().\n\nFixes: df03f830d099 (\"net: netconsole: cache userdata formatted string in netconsole_target\")\nSigned-off-by: Gustavo Luiz Duarte \u003cgustavold@gmail.com\u003e\nLink: https://patch.msgid.link/20251028-netconsole-fix-race-v4-1-63560b0ae1a0@meta.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "a43303809868b22bd1303739ba334e982b234d45", "tree": "8525dbb8fa36f8f9e02e697d08f83557164d15f6", "parents": [ "a4384d786e38d5ff172f0908aae01c2c30719245" ], "author": { "name": "Bagas Sanjaya", "email": "bagasdotme@gmail.com", "time": "Tue Oct 28 20:20:27 2025 +0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 17:40:19 2025 -0700" }, "message": "Documentation: netconsole: Remove obsolete contact people\n\nBreno Leitao has been listed in MAINTAINERS as netconsole maintainer\nsince 7c938e438c56db (\"MAINTAINERS: make Breno the netconsole\nmaintainer\"), but the documentation says otherwise that bug reports\nshould be sent to original netconsole authors.\n\nRemove obsolate contact info.\n\nSigned-off-by: Bagas Sanjaya \u003cbagasdotme@gmail.com\u003e\nReviewed-by: Randy Dunlap \u003crdunlap@infradead.org\u003e\nTested-by: Randy Dunlap \u003crdunlap@infradead.org\u003e\nLink: https://patch.msgid.link/20251028132027.48102-1-bagasdotme@gmail.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "a4384d786e38d5ff172f0908aae01c2c30719245", "tree": "099f17effcfac6dfe38f68b0b17b22f1fc029456", "parents": [ "bcc843bb0e7468de7f2de8bc2e3fa5a54dd1f3d0" ], "author": { "name": "Abdun Nihaal", "email": "nihaal@cse.iitm.ac.in", "time": "Tue Oct 28 21:38:41 2025 +0530" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 17:38:23 2025 -0700" }, "message": "nfp: xsk: fix memory leak in nfp_net_alloc()\n\nIn nfp_net_alloc(), the memory allocated for xsk_pools is not freed in\nthe subsequent error paths, leading to a memory leak. Fix that by\nfreeing it in the error path.\n\nFixes: 6402528b7a0b (\"nfp: xsk: add AF_XDP zero-copy Rx and Tx support\")\nSigned-off-by: Abdun Nihaal \u003cnihaal@cse.iitm.ac.in\u003e\nLink: https://patch.msgid.link/20251028160845.126919-1-nihaal@cse.iitm.ac.in\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "bcc843bb0e7468de7f2de8bc2e3fa5a54dd1f3d0", "tree": "64bc4c5d5bba2bc7f17bd38e1edcaa4cfc789afa", "parents": [ "f99c579211f5c77da6750b90c6bec9b264188120", "aa251c84636c326471ca9d53723816ba8fffe2bf" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 17:30:45 2025 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 17:30:45 2025 -0700" }, "message": "Merge branch \u0027tcp-fix-receive-autotune-again\u0027\n\nMatthieu Baerts says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\ntcp: fix receive autotune again\n\nNeal Cardwell found that recent kernels were having RWIN limited\nissues, even when net.ipv4.tcp_rmem[2] was set to a very big value like\n512MB.\n\nHe suspected that tcp_stream default buffer size (64KB) was triggering\nheuristic added in ea33537d8292 (\"tcp: add receive queue awareness\nin tcp_rcv_space_adjust()\").\n\nAfter more testing, it turns out the bug was added earlier\nwith commit 65c5287892e9 (\"tcp: fix sk_rcvbuf overshoot\").\n\nI forgot once again that DRS has one RTT latency.\n\nMPTCP also got the same issue.\n\nThis series :\n - Prevents calling tcp_rcvbuf_grow() on some MPTCP subflows.\n - adds rcv_ssthresh, window_clamp and rcv_wnd to trace_tcp_rcvbuf_grow().\n - Refactors code in a patch with no functional changes.\n - Fixes the issue in the final patch.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20251028-net-tcp-recv-autotune-v3-0-74b43ba4c84c@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "aa251c84636c326471ca9d53723816ba8fffe2bf", "tree": "64bc4c5d5bba2bc7f17bd38e1edcaa4cfc789afa", "parents": [ "b1e014a1f3275a6f3d0f2b30b8117447fc3915f5" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Tue Oct 28 12:58:02 2025 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 17:30:19 2025 -0700" }, "message": "tcp: fix too slow tcp_rcvbuf_grow() action\n\nWhile the blamed commits apparently avoided an overshoot,\nthey also limited how fast a sender can increase BDP at each RTT.\n\nThis is not exactly a revert, we do not add the 16 * tp-\u003eadvmss\ncushion we had, and we are keeping the out_of_order_queue\ncontribution.\n\nDo the same in mptcp_rcvbuf_grow().\n\nTested:\n\nemulated 50ms rtt (tcp_stream --tcp-tx-delay 50000), cubic 20 second flow.\nnet.ipv4.tcp_rmem set to \"4096 131072 67000000\"\n\nperf record -a -e tcp:tcp_rcvbuf_grow sleep 20\nperf script\n\nBefore:\n\nWe can see we fail to roughly double RWIN at each RTT.\nSender is RWIN limited while CWND is ramping up (before getting tcp_wmem\nlimited).\n\ntcp_stream 33793 [010] 825.717525: tcp:tcp_rcvbuf_grow: time\u003d100869 rtt_us\u003d50428 copied\u003d49152 inq\u003d0 space\u003d40960 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d131072 rcv_ssthresh\u003d103970 window_clamp\u003d112128 rcv_wnd\u003d106496\ntcp_stream 33793 [010] 825.768966: tcp:tcp_rcvbuf_grow: time\u003d51447 rtt_us\u003d50362 copied\u003d86016 inq\u003d0 space\u003d49152 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d131072 rcv_ssthresh\u003d107474 window_clamp\u003d112128 rcv_wnd\u003d106496\ntcp_stream 33793 [010] 825.821539: tcp:tcp_rcvbuf_grow: time\u003d52577 rtt_us\u003d50243 copied\u003d114688 inq\u003d0 space\u003d86016 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d201096 rcv_ssthresh\u003d167377 window_clamp\u003d172031 rcv_wnd\u003d167936\ntcp_stream 33793 [010] 825.871781: tcp:tcp_rcvbuf_grow: time\u003d50248 rtt_us\u003d50237 copied\u003d167936 inq\u003d0 space\u003d114688 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d268129 rcv_ssthresh\u003d224722 window_clamp\u003d229375 rcv_wnd\u003d225280\ntcp_stream 33793 [010] 825.922475: tcp:tcp_rcvbuf_grow: time\u003d50698 rtt_us\u003d50183 copied\u003d241664 inq\u003d0 space\u003d167936 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d392617 rcv_ssthresh\u003d331217 window_clamp\u003d335871 rcv_wnd\u003d323584\ntcp_stream 33793 [010] 825.973326: tcp:tcp_rcvbuf_grow: time\u003d50855 rtt_us\u003d50213 copied\u003d339968 inq\u003d0 space\u003d241664 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d564986 rcv_ssthresh\u003d478674 window_clamp\u003d483327 rcv_wnd\u003d462848\ntcp_stream 33793 [010] 826.023970: tcp:tcp_rcvbuf_grow: time\u003d50647 rtt_us\u003d50248 copied\u003d491520 inq\u003d0 space\u003d339968 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d794811 rcv_ssthresh\u003d671778 window_clamp\u003d679935 rcv_wnd\u003d651264\ntcp_stream 33793 [010] 826.074612: tcp:tcp_rcvbuf_grow: time\u003d50648 rtt_us\u003d50227 copied\u003d700416 inq\u003d0 space\u003d491520 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d1149124 rcv_ssthresh\u003d974881 window_clamp\u003d983039 rcv_wnd\u003d942080\ntcp_stream 33793 [010] 826.125452: tcp:tcp_rcvbuf_grow: time\u003d50845 rtt_us\u003d50225 copied\u003d987136 inq\u003d8192 space\u003d700416 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d1637502 rcv_ssthresh\u003d1392674 window_clamp\u003d1400831 rcv_wnd\u003d1339392\ntcp_stream 33793 [010] 826.175698: tcp:tcp_rcvbuf_grow: time\u003d50250 rtt_us\u003d50198 copied\u003d1347584 inq\u003d0 space\u003d978944 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d2288672 rcv_ssthresh\u003d1949729 window_clamp\u003d1957887 rcv_wnd\u003d1945600\ntcp_stream 33793 [010] 826.225947: tcp:tcp_rcvbuf_grow: time\u003d50252 rtt_us\u003d50240 copied\u003d1945600 inq\u003d0 space\u003d1347584 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d3150516 rcv_ssthresh\u003d2687010 window_clamp\u003d2695167 rcv_wnd\u003d2691072\ntcp_stream 33793 [010] 826.276175: tcp:tcp_rcvbuf_grow: time\u003d50233 rtt_us\u003d50224 copied\u003d2691072 inq\u003d0 space\u003d1945600 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d4548617 rcv_ssthresh\u003d3883041 window_clamp\u003d3891199 rcv_wnd\u003d3887104\ntcp_stream 33793 [010] 826.326403: tcp:tcp_rcvbuf_grow: time\u003d50233 rtt_us\u003d50229 copied\u003d3887104 inq\u003d0 space\u003d2691072 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d6291456 rcv_ssthresh\u003d5370482 window_clamp\u003d5382144 rcv_wnd\u003d5373952\ntcp_stream 33793 [010] 826.376723: tcp:tcp_rcvbuf_grow: time\u003d50323 rtt_us\u003d50218 copied\u003d5373952 inq\u003d0 space\u003d3887104 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d9087658 rcv_ssthresh\u003d7755537 window_clamp\u003d7774207 rcv_wnd\u003d7757824\ntcp_stream 33793 [010] 826.426991: tcp:tcp_rcvbuf_grow: time\u003d50274 rtt_us\u003d50196 copied\u003d7757824 inq\u003d180224 space\u003d5373952 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d12563759 rcv_ssthresh\u003d10729233 window_clamp\u003d10747903 rcv_wnd\u003d10575872\ntcp_stream 33793 [010] 826.477229: tcp:tcp_rcvbuf_grow: time\u003d50241 rtt_us\u003d50078 copied\u003d10731520 inq\u003d180224 space\u003d7577600 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d17715667 rcv_ssthresh\u003d15136529 window_clamp\u003d15155199 rcv_wnd\u003d14983168\ntcp_stream 33793 [010] 826.527482: tcp:tcp_rcvbuf_grow: time\u003d50258 rtt_us\u003d50153 copied\u003d15138816 inq\u003d360448 space\u003d10551296 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d24667870 rcv_ssthresh\u003d21073410 window_clamp\u003d21102591 rcv_wnd\u003d20766720\ntcp_stream 33793 [010] 826.577712: tcp:tcp_rcvbuf_grow: time\u003d50234 rtt_us\u003d50228 copied\u003d21073920 inq\u003d0 space\u003d14778368 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d34550339 rcv_ssthresh\u003d29517041 window_clamp\u003d29556735 rcv_wnd\u003d29519872\ntcp_stream 33793 [010] 826.627982: tcp:tcp_rcvbuf_grow: time\u003d50275 rtt_us\u003d50220 copied\u003d29519872 inq\u003d540672 space\u003d21073920 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d49268707 rcv_ssthresh\u003d42090625 window_clamp\u003d42147839 rcv_wnd\u003d41627648\ntcp_stream 33793 [010] 826.678274: tcp:tcp_rcvbuf_grow: time\u003d50296 rtt_us\u003d50185 copied\u003d42053632 inq\u003d761856 space\u003d28979200 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d67000000 rcv_ssthresh\u003d57238168 window_clamp\u003d57316406 rcv_wnd\u003d56606720\ntcp_stream 33793 [010] 826.728627: tcp:tcp_rcvbuf_grow: time\u003d50357 rtt_us\u003d50128 copied\u003d43913216 inq\u003d851968 space\u003d41291776 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d67000000 rcv_ssthresh\u003d57290728 window_clamp\u003d57316406 rcv_wnd\u003d56524800\ntcp_stream 33793 [010] 827.131364: tcp:tcp_rcvbuf_grow: time\u003d50239 rtt_us\u003d50127 copied\u003d43843584 inq\u003d655360 space\u003d43061248 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d67000000 rcv_ssthresh\u003d57290728 window_clamp\u003d57316406 rcv_wnd\u003d56696832\ntcp_stream 33793 [010] 827.181613: tcp:tcp_rcvbuf_grow: time\u003d50254 rtt_us\u003d50115 copied\u003d43843584 inq\u003d524288 space\u003d43188224 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d67000000 rcv_ssthresh\u003d57290728 window_clamp\u003d57316406 rcv_wnd\u003d56807424\ntcp_stream 33793 [010] 828.339635: tcp:tcp_rcvbuf_grow: time\u003d50283 rtt_us\u003d50110 copied\u003d43843584 inq\u003d458752 space\u003d43319296 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d67000000 rcv_ssthresh\u003d57290728 window_clamp\u003d57316406 rcv_wnd\u003d56864768\ntcp_stream 33793 [010] 828.440350: tcp:tcp_rcvbuf_grow: time\u003d50404 rtt_us\u003d50099 copied\u003d43843584 inq\u003d393216 space\u003d43384832 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d67000000 rcv_ssthresh\u003d57290728 window_clamp\u003d57316406 rcv_wnd\u003d56922112\ntcp_stream 33793 [010] 829.195106: tcp:tcp_rcvbuf_grow: time\u003d50154 rtt_us\u003d50077 copied\u003d43843584 inq\u003d196608 space\u003d43450368 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d67000000 rcv_ssthresh\u003d57290728 window_clamp\u003d57316406 rcv_wnd\u003d57090048\n\nAfter:\n\nIt takes few steps to increase RWIN. Sender is no longer RWIN limited.\n\ntcp_stream 50826 [010] 935.634212: tcp:tcp_rcvbuf_grow: time\u003d100788 rtt_us\u003d50315 copied\u003d49152 inq\u003d0 space\u003d40960 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d131072 rcv_ssthresh\u003d103970 window_clamp\u003d112128 rcv_wnd\u003d106496\ntcp_stream 50826 [010] 935.685642: tcp:tcp_rcvbuf_grow: time\u003d51437 rtt_us\u003d50361 copied\u003d86016 inq\u003d0 space\u003d49152 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d160875 rcv_ssthresh\u003d132969 window_clamp\u003d137623 rcv_wnd\u003d131072\ntcp_stream 50826 [010] 935.738299: tcp:tcp_rcvbuf_grow: time\u003d52660 rtt_us\u003d50256 copied\u003d139264 inq\u003d0 space\u003d86016 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d502741 rcv_ssthresh\u003d411497 window_clamp\u003d430079 rcv_wnd\u003d413696\ntcp_stream 50826 [010] 935.788544: tcp:tcp_rcvbuf_grow: time\u003d50249 rtt_us\u003d50233 copied\u003d307200 inq\u003d0 space\u003d139264 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d728690 rcv_ssthresh\u003d618717 window_clamp\u003d623371 rcv_wnd\u003d618496\ntcp_stream 50826 [010] 935.838796: tcp:tcp_rcvbuf_grow: time\u003d50258 rtt_us\u003d50202 copied\u003d618496 inq\u003d0 space\u003d307200 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d2450338 rcv_ssthresh\u003d1855709 window_clamp\u003d2096187 rcv_wnd\u003d1859584\ntcp_stream 50826 [010] 935.889140: tcp:tcp_rcvbuf_grow: time\u003d50347 rtt_us\u003d50166 copied\u003d1261568 inq\u003d0 space\u003d618496 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d4376503 rcv_ssthresh\u003d3725291 window_clamp\u003d3743961 rcv_wnd\u003d3706880\ntcp_stream 50826 [010] 935.939435: tcp:tcp_rcvbuf_grow: time\u003d50300 rtt_us\u003d50185 copied\u003d2478080 inq\u003d24576 space\u003d1261568 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d9082648 rcv_ssthresh\u003d7733731 window_clamp\u003d7769921 rcv_wnd\u003d7692288\ntcp_stream 50826 [010] 935.989681: tcp:tcp_rcvbuf_grow: time\u003d50251 rtt_us\u003d50221 copied\u003d4915200 inq\u003d114688 space\u003d2453504 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d16574936 rcv_ssthresh\u003d14108110 window_clamp\u003d14179339 rcv_wnd\u003d14024704\ntcp_stream 50826 [010] 936.039967: tcp:tcp_rcvbuf_grow: time\u003d50289 rtt_us\u003d50279 copied\u003d9830400 inq\u003d114688 space\u003d4800512 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d32695050 rcv_ssthresh\u003d27896187 window_clamp\u003d27969593 rcv_wnd\u003d27815936\ntcp_stream 50826 [010] 936.090172: tcp:tcp_rcvbuf_grow: time\u003d50211 rtt_us\u003d50200 copied\u003d19841024 inq\u003d114688 space\u003d9715712 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d67000000 rcv_ssthresh\u003d57245176 window_clamp\u003d57316406 rcv_wnd\u003d57163776\ntcp_stream 50826 [010] 936.140430: tcp:tcp_rcvbuf_grow: time\u003d50262 rtt_us\u003d50197 copied\u003d39501824 inq\u003d114688 space\u003d19726336 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d67000000 rcv_ssthresh\u003d57245176 window_clamp\u003d57316406 rcv_wnd\u003d57163776\ntcp_stream 50826 [010] 936.190527: tcp:tcp_rcvbuf_grow: time\u003d50101 rtt_us\u003d50071 copied\u003d43655168 inq\u003d262144 space\u003d39387136 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d67000000 rcv_ssthresh\u003d57259192 window_clamp\u003d57316406 rcv_wnd\u003d57032704\ntcp_stream 50826 [010] 936.240719: tcp:tcp_rcvbuf_grow: time\u003d50197 rtt_us\u003d50057 copied\u003d43843584 inq\u003d262144 space\u003d43393024 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d67000000 rcv_ssthresh\u003d57259192 window_clamp\u003d57316406 rcv_wnd\u003d57032704\ntcp_stream 50826 [010] 936.341271: tcp:tcp_rcvbuf_grow: time\u003d50297 rtt_us\u003d50123 copied\u003d43843584 inq\u003d131072 space\u003d43581440 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d67000000 rcv_ssthresh\u003d57259192 window_clamp\u003d57316406 rcv_wnd\u003d57147392\ntcp_stream 50826 [010] 936.642503: tcp:tcp_rcvbuf_grow: time\u003d50131 rtt_us\u003d50084 copied\u003d43843584 inq\u003d0 space\u003d43712512 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d67000000 rcv_ssthresh\u003d57259192 window_clamp\u003d57316406 rcv_wnd\u003d57262080\n\nFixes: 65c5287892e9 (\"tcp: fix sk_rcvbuf overshoot\")\nFixes: e118cdc34dd1 (\"mptcp: rcvbuf auto-tuning improvement\")\nReported-by: Neal Cardwell \u003cncardwell@google.com\u003e\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nCloses: https://github.com/multipath-tcp/mptcp_net-next/issues/589\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nReviewed-by: Neal Cardwell \u003cncardwell@google.com\u003e\nLink: https://patch.msgid.link/20251028-net-tcp-recv-autotune-v3-4-74b43ba4c84c@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "b1e014a1f3275a6f3d0f2b30b8117447fc3915f5", "tree": "e0fad09ad90c88c977b5eefaa3544586b1f72f1e", "parents": [ "24990d89c23de4dbef6b0b3d58383cafefdd6983" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Tue Oct 28 12:58:01 2025 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 17:30:19 2025 -0700" }, "message": "tcp: add newval parameter to tcp_rcvbuf_grow()\n\nThis patch has no functional change, and prepares the following one.\n\ntcp_rcvbuf_grow() will need to have access to tp-\u003ercvq_space.space\nold and new values.\n\nChange mptcp_rcvbuf_grow() in a similar way.\n\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\n[ Moved \u0027oldval\u0027 declaration to the next patch to avoid warnings at\n build time. ]\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nReviewed-by: Neal Cardwell \u003cncardwell@google.com\u003e\nLink: https://patch.msgid.link/20251028-net-tcp-recv-autotune-v3-3-74b43ba4c84c@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "24990d89c23de4dbef6b0b3d58383cafefdd6983", "tree": "30bccc38ffad59e738f1b16d5a583b0afe26608a", "parents": [ "a6f0459aadf1b41a9b9fae02006b1db024d60856" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Tue Oct 28 12:58:00 2025 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 17:30:18 2025 -0700" }, "message": "trace: tcp: add three metrics to trace_tcp_rcvbuf_grow()\n\nWhile chasing yet another receive autotuning bug,\nI found useful to add rcv_ssthresh, window_clamp and rcv_wnd.\n\ntcp_stream 40597 [068] 2172.978198: tcp:tcp_rcvbuf_grow: time\u003d50307 rtt_us\u003d50179 copied\u003d77824 inq\u003d0 space\u003d40960 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d131072 rcv_ssthresh\u003d107474 window_clamp\u003d112128 rcv_wnd\u003d110592\ntcp_stream 40597 [068] 2173.028528: tcp:tcp_rcvbuf_grow: time\u003d50336 rtt_us\u003d50206 copied\u003d110592 inq\u003d0 space\u003d77824 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d509444 rcv_ssthresh\u003d328658 window_clamp\u003d435813 rcv_wnd\u003d331776\ntcp_stream 40597 [068] 2173.078830: tcp:tcp_rcvbuf_grow: time\u003d50305 rtt_us\u003d50070 copied\u003d270336 inq\u003d0 space\u003d110592 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d509444 rcv_ssthresh\u003d431159 window_clamp\u003d435813 rcv_wnd\u003d434176\ntcp_stream 40597 [068] 2173.129137: tcp:tcp_rcvbuf_grow: time\u003d50313 rtt_us\u003d50118 copied\u003d434176 inq\u003d0 space\u003d270336 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d2457847 rcv_ssthresh\u003d1299511 window_clamp\u003d2102611 rcv_wnd\u003d1302528\ntcp_stream 40597 [068] 2173.179451: tcp:tcp_rcvbuf_grow: time\u003d50318 rtt_us\u003d50041 copied\u003d1019904 inq\u003d0 space\u003d434176 ooo\u003d0 scaling_ratio\u003d219 rcvbuf\u003d2457847 rcv_ssthresh\u003d2087445 window_clamp\u003d2102611 rcv_wnd\u003d2088960\n\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nReviewed-by: Neal Cardwell \u003cncardwell@google.com\u003e\nLink: https://patch.msgid.link/20251028-net-tcp-recv-autotune-v3-2-74b43ba4c84c@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "a6f0459aadf1b41a9b9fae02006b1db024d60856", "tree": "b1572f0e0263bc561e098f50a223ca6927d2f3d2", "parents": [ "f99c579211f5c77da6750b90c6bec9b264188120" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Tue Oct 28 12:57:59 2025 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 17:30:18 2025 -0700" }, "message": "mptcp: fix subflow rcvbuf adjust\n\nThe mptcp PM can add subflow to the conn_list before tcp_init_transfer().\nCalling tcp_rcvbuf_grow() on such subflow is not correct as later\ninit will overwrite the update.\n\nFix the issue calling tcp_rcvbuf_grow() only after init buffer\ninitialization.\n\nFixes: e118cdc34dd1 (\"mptcp: rcvbuf auto-tuning improvement\")\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nLink: https://patch.msgid.link/20251028-net-tcp-recv-autotune-v3-1-74b43ba4c84c@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "f99c579211f5c77da6750b90c6bec9b264188120", "tree": "4b39133c91649b1380650945ba8f21ee44f03457", "parents": [ "8df206f7b63611dbaeb8628661d87fe994dcdf71", "f82acf6fb42115c87d3809968a2e0ab2fedba15b" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 17:23:11 2025 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 29 17:23:11 2025 -0700" }, "message": "Merge branch \u0027100GbE\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/net-queue\n\nTony Nguyen says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nIntel Wired LAN Driver Updates 2025-10-28 (ice, ixgbe, igb, igc)\n\nFor ice, Grzegorz fixes setting of PHY lane number and logical PF ID for\nE82x devices. He also corrects access of CGU (Clock Generation Unit) on\ndual complex devices.\n\nKohei Enju resolves issues with error path cleanup for probe when in\nrecovery mode on ixgbe and ensures PHY is powered on for link testing\non igc. Lastly, he converts incorrect use of -ENOTSUPP to -EOPNOTSUPP\non igb, igc, and ixgbe.\n\n* \u0027100GbE\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/net-queue:\n ixgbe: use EOPNOTSUPP instead of ENOTSUPP in ixgbe_ptp_feature_enable()\n igc: use EOPNOTSUPP instead of ENOTSUPP in igc_ethtool_get_sset_count()\n igb: use EOPNOTSUPP instead of ENOTSUPP in igb_get_sset_count()\n igc: power up the PHY before the link test\n ixgbe: fix memory leak and use-after-free in ixgbe_recovery_probe()\n ice: fix usage of logical PF id\n ice: fix destination CGU for dual complex E825\n ice: fix lane number calculation\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20251028202515.675129-1-anthony.l.nguyen@intel.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "f3903ec76ae6afcdba0347681d1dda005fb145cd", "tree": "9aeed4439eb7ab80efc4f6660185732d4d88ce7c", "parents": [ "8080c67dd57cb968150b668ecbd4a4e4afd56ad4" ], "author": { "name": "Rae Moar", "email": "rmoar@google.com", "time": "Tue Oct 28 19:40:10 2025 +0000" }, "committer": { "name": "Shuah Khan", "email": "skhan@linuxfoundation.org", "time": "Wed Oct 29 14:57:54 2025 -0600" }, "message": "MAINTAINERS: Update KUnit email address for Rae Moar\n\nUpdate Rae\u0027s email address for the KUnit entry. Also add an entry to\n.mailmap to map former google email to current gmail address.\n\nSigned-off-by: Rae Moar \u003crmoar@google.com\u003e\nReviewed-by: David Gow \u003cdavidgow@google.com\u003e\nSigned-off-by: Shuah Khan \u003cskhan@linuxfoundation.org\u003e\n" }, { "commit": "d8eb00bbc628c8916ab0da2bb80059d48aa4512e", "tree": "a5f1f023877a986cbc1dac76b9036706e96c5ae1", "parents": [ "056d76f7cb9fa68c8bbf85b4055aeb84af6139d5" ], "author": { "name": "Sebastian Fleer", "email": "dev@dwurp.de", "time": "Wed Oct 29 13:35:28 2025 +0100" }, "committer": { "name": "Neil Armstrong", "email": "neil.armstrong@linaro.org", "time": "Wed Oct 29 21:57:42 2025 +0100" }, "message": "drm/panel: kingdisplay-kd097d04: Disable EoTp\n\nSince commit d97e71e44937 (\"drm/bridge: synopsys: dw-mipi-dsi: enable EoTp by\ndefault\") panel output on an Acer Chromebook Tab 10 (google-dru) is corrupted.\nThe tablet I use is equipped with a kingdisplay-kd097d04 panel, disabling EoTp\nrestores the correct functionality.\n\nFixes: 2a994cbed6b2 (\"drm/panel: Add Kingdisplay KD097D04 panel driver\")\nSuggested-by: Jens Reidel \u003cadrian@postmarketos.org\u003e\nSigned-off-by: Sebastian Fleer \u003cdev@dwurp.de\u003e\nReviewed-by: Neil Armstrong \u003cneil.armstrong@linaro.org\u003e\nSigned-off-by: Neil Armstrong \u003cneil.armstrong@linaro.org\u003e\nLink: https://lore.kernel.org/r/20251029124007.232333-1-dev@dwurp.de\n" }, { "commit": "056d76f7cb9fa68c8bbf85b4055aeb84af6139d5", "tree": "86ce45c63032c21cb7b99a09f9e655d97cfa509f", "parents": [ "9e8b3201c7302d5b522ba3535630bed21cc03c27" ], "author": { "name": "Sebastian Reichel", "email": "sebastian.reichel@collabora.com", "time": "Wed Oct 01 01:59:42 2025 +0200" }, "committer": { "name": "Neil Armstrong", "email": "neil.armstrong@linaro.org", "time": "Wed Oct 29 21:57:42 2025 +0100" }, "message": "drm/panel: sitronix-st7789v: fix sync flags for t28cp45tn89\n\nI planned to set the polarity of horizontal and vertical sync, but\naccidentally described vertical sync twice with different polarity\ninstead.\n\nNote, that there is no functional change, because the driver only\nmakes use of DRM_MODE_FLAG_P[HV]SYNC to divert from the default\nactive-low polarity.\n\nReported-by: Laurent Pinchart \u003claurent.pinchart+renesas@ideasonboard.com\u003e\nCloses: https://lore.kernel.org/all/20250923132616.GH20765@pendragon.ideasonboard.com/\nFixes: a411558cc143 (\"drm/panel: sitronix-st7789v: add Inanbo T28CP45TN89 support\")\nReviewed-by: Laurent Pinchart \u003claurent.pinchart+renesas@ideasonboard.com\u003e\nReviewed-by: Marek Vasut \u003cmarek.vasut+renesas@mailbox.org\u003e\nSigned-off-by: Sebastian Reichel \u003csebastian.reichel@collabora.com\u003e\nSigned-off-by: Neil Armstrong \u003cneil.armstrong@linaro.org\u003e\nLink: https://lore.kernel.org/r/20251001-t28cp45tn89-fix-v2-1-67fe8e3046ca@collabora.com\n" }, { "commit": "b3fbda1a630a9439c885b2a5dc5230cc49a87e9e", "tree": "0bdf4f63d1af0e135efa61eefe0989bec7da515a", "parents": [ "edce042da7984586ea5c7ed18ea5f58002afb969" ], "author": { "name": "Matthew Brost", "email": "matthew.brost@intel.com", "time": "Tue Oct 21 17:55:37 2025 -0700" }, "committer": { "name": "Lucas De Marchi", "email": "lucas.demarchi@intel.com", "time": "Wed Oct 29 11:43:30 2025 -0700" }, "message": "drm/xe: Do not wake device during a GT reset\n\nWaking the device during a GT reset can lead to unintended memory\nallocation, which is not allowed since GT resets occur in the reclaim\npath. Prevent this by holding a PM reference while a reset is in flight.\n\nFixes: dd08ebf6c352 (\"drm/xe: Introduce a new DRM driver for Intel GPUs\")\nCc: stable@vger.kernel.org\nSigned-off-by: Matthew Brost \u003cmatthew.brost@intel.com\u003e\nReviewed-by: Matthew Auld \u003cmatthew.auld@intel.com\u003e\nLink: https://lore.kernel.org/r/20251022005538.828980-3-matthew.brost@intel.com\n(cherry picked from commit 480b358e7d8ef69fd8f1b0cad6e07c7d70a36ee4)\nSigned-off-by: Lucas De Marchi \u003clucas.demarchi@intel.com\u003e\n" }, { "commit": "35e4a69b2003f20a69e7d19ae96ab1eef1aa8e8d", "tree": "f83aea40520cf4e7a4f706958b6ebe5c00a824ba", "parents": [ "79816d4b9e9b9bb03d5d871c04c97b1bce102b14" ], "author": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Tue Oct 28 21:52:31 2025 +0100" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Wed Oct 29 18:55:32 2025 +0100" }, "message": "PM: sleep: Allow pm_restrict_gfp_mask() stacking\n\nAllow pm_restrict_gfp_mask() to be called many times in a row to avoid\nissues with calling dpm_suspend_start() when the GFP mask has been\nalready restricted.\n\nOnly the first invocation of pm_restrict_gfp_mask() will actually\nrestrict the GFP mask and the subsequent calls will warn if there is\na mismatch between the expected allowed GFP mask and the actual one.\n\nMoreover, if pm_restrict_gfp_mask() is called many times in a row,\npm_restore_gfp_mask() needs to be called matching number of times in\na row to actually restore the GFP mask. Calling it when the GFP mask\nhas not been restricted will cause it to warn.\n\nThis is necessary for the GFP mask restriction starting in\nhibernation_snapshot() to continue throughout the entire hibernation\nflow until it completes or it is aborted (either by a wakeup event or\nby an error).\n\nFixes: 449c9c02537a1 (\"PM: hibernate: Restrict GFP mask in hibernation_snapshot()\")\nFixes: 469d80a3712c (\"PM: hibernate: Fix hybrid-sleep\")\nReported-by: Askar Safin \u003csafinaskar@gmail.com\u003e\nCloses: https://lore.kernel.org/linux-pm/20251025050812.421905-1-safinaskar@gmail.com/\nLink: https://lore.kernel.org/linux-pm/20251028111730.2261404-1-safinaskar@gmail.com/\nSigned-off-by: Rafael J. Wysocki \u003crafael.j.wysocki@intel.com\u003e\nReviewed-by: Mario Limonciello (AMD) \u003csuperm1@kernel.org\u003e\nTested-by: Mario Limonciello (AMD) \u003csuperm1@kernel.org\u003e\nCc: 6.16+ \u003cstable@vger.kernel.org\u003e # 6.16+\nLink: https://patch.msgid.link/5935682.DvuYhMxLoT@rafael.j.wysocki\n" }, { "commit": "edce042da7984586ea5c7ed18ea5f58002afb969", "tree": "81aac797e31c73cc80f29134a0d315136712ea3c", "parents": [ "dcb6fa37fd7bc9c3d2b066329b0d27dedf8becaa" ], "author": { "name": "Thomas Hellström", "email": "thomas.hellstrom@linux.intel.com", "time": "Mon Oct 27 14:12:28 2025 +0100" }, "committer": { "name": "Lucas De Marchi", "email": "lucas.demarchi@intel.com", "time": "Wed Oct 29 10:44:48 2025 -0700" }, "message": "drm/xe: Fix uninitialized return value from xe_validation_guard()\n\nthe DEFINE_CLASS() macro creates an inline function and\nthe init args are passed down to it; since _ret is passed as an int,\nwhatever value is set inside the function is not visible to the caller.\nPass _ret as a pointer so its value propagates to the caller.\n\nFixes: c460bc2311df (\"drm/xe: Introduce an xe_validation wrapper around drm_exec\")\nCloses: https://gitlab.freedesktop.org/drm/xe/kernel/-/issues/6220\nCc: Maarten Lankhorst \u003cmaarten.lankhorst@intel.com\u003e\nCc: Matthew Brost \u003cmatthew.brost@intel.com\u003e\nCc: intel-xe@lists.freedesktop.org\nSigned-off-by: Thomas Hellström \u003cthomas.hellstrom@linux.intel.com\u003e\nReviewed-by: Lucas De Marchi \u003clucas.demarchi@intel.com\u003e\nReviewed-by: Maarten Lankhorst \u003cmaarten.lankhorst@linux.intel.com\u003e\nReviewed-by: Matthew Brost \u003cmatthew.brost@intel.com\u003e\nLink: https://patch.msgid.link/20251027131228.12098-1-thomas.hellstrom@linux.intel.com\n(cherry picked from commit fcb8c304f4673747d535c74b340b5b8a4823727b)\nSigned-off-by: Lucas De Marchi \u003clucas.demarchi@intel.com\u003e\n" }, { "commit": "5e5c8aa73d99f1daa9f2ec1474b7fc1a6952764b", "tree": "f1efb86dff4971dbe7d8f7552e08d2ee06cc5c70", "parents": [ "22897e568646de5907d4981eae6cc895be2978d1" ], "author": { "name": "Srinivas Kandagatla", "email": "srinivas.kandagatla@oss.qualcomm.com", "time": "Wed Oct 29 14:46:36 2025 +0000" }, "committer": { "name": "Mark Brown", "email": "broonie@kernel.org", "time": "Wed Oct 29 14:54:47 2025 +0000" }, "message": "ASoC: dt-bindings: pm4125-sdw: correct number of soundwire ports\n\nFor some reason we ended up limiting the number of soundwire ports to 2\nin the bindings, the actual codec supports 4 rx and 5 tx ports.\n\nFixes: 88d0d17192c5 (\"ASoC: dt-bindings: add bindings for pm4125 audio codec\")\nSigned-off-by: Srinivas Kandagatla \u003csrinivas.kandagatla@oss.qualcomm.com\u003e\nLink: https://patch.msgid.link/20251029144636.357203-1-srinivas.kandagatla@oss.qualcomm.com\nSigned-off-by: Mark Brown \u003cbroonie@kernel.org\u003e\n" }, { "commit": "22897e568646de5907d4981eae6cc895be2978d1", "tree": "fcbeb4e06e0761fe211f9426b1967ad9af4d919a", "parents": [ "45f5c9eec43a9bf448f46562f146810831916cc9" ], "author": { "name": "Claudiu Beznea", "email": "claudiu.beznea.uj@bp.renesas.com", "time": "Wed Oct 29 16:11:34 2025 +0200" }, "committer": { "name": "Mark Brown", "email": "broonie@kernel.org", "time": "Wed Oct 29 14:54:46 2025 +0000" }, "message": "ASoC: renesas: rz-ssi: Use proper dma_buffer_pos after resume\n\nWhen the driver supports DMA, it enqueues four DMA descriptors per\nsubstream before the substream is started. New descriptors are enqueued in\nthe DMA completion callback, and each time a new descriptor is queued, the\ndma_buffer_pos is incremented.\n\nDuring suspend, the DMA transactions are terminated. There might be cases\nwhere the four extra enqueued DMA descriptors are not completed and are\ninstead canceled on suspend. However, the cancel operation does not take\ninto account that the dma_buffer_pos was already incremented.\n\nPreviously, the suspend code reinitialized dma_buffer_pos to zero, but this\nis not always correct.\n\nTo avoid losing any audio periods during suspend/resume and to prevent\nclip sound, save the completed DMA buffer position in the DMA callback and\nreinitialize dma_buffer_pos on resume.\n\nCc: stable@vger.kernel.org\nFixes: 1fc778f7c833a (\"ASoC: renesas: rz-ssi: Add suspend to RAM support\")\nSigned-off-by: Claudiu Beznea \u003cclaudiu.beznea.uj@bp.renesas.com\u003e\nLink: https://patch.msgid.link/20251029141134.2556926-3-claudiu.beznea.uj@bp.renesas.com\nSigned-off-by: Mark Brown \u003cbroonie@kernel.org\u003e\n" }, { "commit": "90918e3b6404c2a37837b8f11692471b4c512de2", "tree": "aa6a0229ed9e10990a709d5710dc30c1a601deb6", "parents": [ "8d96dfdcabef00e28f0c851b1502adb679dfc6d9" ], "author": { "name": "Andrii Melnychenko", "email": "a.melnychenko@vyos.io", "time": "Fri Oct 24 18:22:16 2025 +0200" }, "committer": { "name": "Florian Westphal", "email": "fw@strlen.de", "time": "Wed Oct 29 14:47:59 2025 +0100" }, "message": "netfilter: nft_ct: add seqadj extension for natted connections\n\nSequence adjustment may be required for FTP traffic with PASV/EPSV modes.\ndue to need to re-write packet payload (IP, port) on the ftp control\nconnection. This can require changes to the TCP length and expected\nseq / ack_seq.\n\nThe easiest way to reproduce this issue is with PASV mode.\nExample ruleset:\ntable inet ftp_nat {\n ct helper ftp_helper {\n type \"ftp\" protocol tcp\n l3proto inet\n }\n\n chain prerouting {\n type filter hook prerouting priority 0; policy accept;\n tcp dport 21 ct state new ct helper set \"ftp_helper\"\n }\n}\ntable ip nat {\n chain prerouting {\n type nat hook prerouting priority -100; policy accept;\n tcp dport 21 dnat ip prefix to ip daddr map {\n\t\t\t192.168.100.1 : 192.168.13.2/32 }\n }\n\n chain postrouting {\n type nat hook postrouting priority 100 ; policy accept;\n tcp sport 21 snat ip prefix to ip saddr map {\n\t\t\t192.168.13.2 : 192.168.100.1/32 }\n }\n}\n\nNote that the ftp helper gets assigned *after* the dnat setup.\n\nThe inverse (nat after helper assign) is handled by an existing\ncheck in nf_nat_setup_info() and will not show the problem.\n\nTopoloy:\n\n +-------------------+ +----------------------------------+\n | FTP: 192.168.13.2 | \u003c-\u003e | NAT: 192.168.13.3, 192.168.100.1 |\n +-------------------+ +----------------------------------+\n |\n +-----------------------+\n | Client: 192.168.100.2 |\n +-----------------------+\n\nftp nat changes do not work as expected in this case:\nConnected to 192.168.100.1.\n[..]\nftp\u003e epsv\nEPSV/EPRT on IPv4 off.\nftp\u003e ls\n227 Entering passive mode (192,168,100,1,209,129).\n421 Service not available, remote server has closed connection.\n\nKernel logs:\nMissing nfct_seqadj_ext_add() setup call\nWARNING: CPU: 1 PID: 0 at net/netfilter/nf_conntrack_seqadj.c:41\n[..]\n __nf_nat_mangle_tcp_packet+0x100/0x160 [nf_nat]\n nf_nat_ftp+0x142/0x280 [nf_nat_ftp]\n help+0x4d1/0x880 [nf_conntrack_ftp]\n nf_confirm+0x122/0x2e0 [nf_conntrack]\n nf_hook_slow+0x3c/0xb0\n ..\n\nFix this by adding the required extension when a conntrack helper is assigned\nto a connection that has a nat binding.\n\nFixes: 1a64edf54f55 (\"netfilter: nft_ct: add helper set support\")\nSigned-off-by: Andrii Melnychenko \u003ca.melnychenko@vyos.io\u003e\nSigned-off-by: Florian Westphal \u003cfw@strlen.de\u003e\n" }, { "commit": "8d96dfdcabef00e28f0c851b1502adb679dfc6d9", "tree": "0594169fc27f9bb3cdd8271ec32ea43fb008bc04", "parents": [ "514f1dc8f2ca3101e04cdf452e53baca3a76e544" ], "author": { "name": "Fernando Fernandez Mancera", "email": "fmancera@suse.de", "time": "Fri Oct 24 17:54:39 2025 +0200" }, "committer": { "name": "Florian Westphal", "email": "fw@strlen.de", "time": "Wed Oct 29 14:47:59 2025 +0100" }, "message": "netfilter: nft_connlimit: fix possible data race on connection count\n\nnft_connlimit_eval() reads priv-\u003elist-\u003ecount to check if the connection\nlimit has been exceeded. This value is being read without a lock and can\nbe modified by a different process. Use READ_ONCE() for correctness.\n\nFixes: df4a90250976 (\"netfilter: nf_conncount: merge lookup and add functions\")\nSigned-off-by: Fernando Fernandez Mancera \u003cfmancera@suse.de\u003e\nSigned-off-by: Florian Westphal \u003cfw@strlen.de\u003e\n" }, { "commit": "514f1dc8f2ca3101e04cdf452e53baca3a76e544", "tree": "3e1e7861b61c48279b16529fe4136885e1c20923", "parents": [ "8df206f7b63611dbaeb8628661d87fe994dcdf71" ], "author": { "name": "Florian Westphal", "email": "fw@strlen.de", "time": "Wed Oct 22 17:18:10 2025 +0200" }, "committer": { "name": "Florian Westphal", "email": "fw@strlen.de", "time": "Wed Oct 29 14:47:59 2025 +0100" }, "message": "netfilter: nft_ct: enable labels for get case too\n\nconntrack labels can only be set when the conntrack has been created\nwith the \"ctlabel\" extension.\n\nFor older iptables (connlabel match), adding an \"-m connlabel\" rule\nturns on the ctlabel extension allocation for all future conntrack\nentries.\n\nFor nftables, its only enabled for \u0027ct label set foo\u0027, but not for\n\u0027ct label foo\u0027 (i.e. check).\nBut users could have a ruleset that only checks for presence, and rely\non userspace to set a label bit via ctnetlink infrastructure.\n\nThis doesn\u0027t work without adding a dummy \u0027ct label set\u0027 rule.\nWe could also enable extension infra for the first (failing) ctnetlink\nrequest, but unlike ruleset we would not be able to disable the\nextension again.\n\nTherefore turn on ctlabel extension allocation if an nftables ruleset\nchecks for a connlabel too.\n\nFixes: 1ad8f48df6f6 (\"netfilter: nftables: add connlabel set support\")\nReported-by: Antonio Ojea \u003caojea@google.com\u003e\nCloses: https://lore.kernel.org/netfilter-devel/aPi_VdZpVjWujZ29@strlen.de/\nSigned-off-by: Florian Westphal \u003cfw@strlen.de\u003e\n" }, { "commit": "07ad45e06b4039adf96882aefcb1d3299fb7c305", "tree": "b5745a57ebc502d54cf608fd421939f720f2b090", "parents": [ "b45873c3f09153d1ad9b3a7bf9e5c0b0387fd2ea" ], "author": { "name": "Miaoqian Lin", "email": "linmq006@gmail.com", "time": "Mon Oct 27 23:08:38 2025 +0800" }, "committer": { "name": "Heiko Carstens", "email": "hca@linux.ibm.com", "time": "Wed Oct 29 14:17:50 2025 +0100" }, "message": "s390/mm: Fix memory leak in add_marker() when kvrealloc() fails\n\nThe function has a memory leak when kvrealloc() fails.\nThe function directly assigns NULL to the markers pointer, losing the\nreference to the previously allocated memory. This causes kvfree() in\npt_dump_init() to free NULL instead of the leaked memory.\n\nFix by:\n1. Using kvrealloc() uniformly for all allocations\n2. Using a temporary variable to preserve the original pointer until\n allocation succeeds\n3. Removing the error path that sets markers_cnt\u003d0 to keep\n consistency between markers and markers_cnt\n\nFound via static analysis and this is similar to commit 42378a9ca553\n(\"bpf, verifier: Fix memory leak in array reallocation for stack state\")\n\nFixes: d0e7915d2ad3 (\"s390/mm/ptdump: Generate address marker array dynamically\")\nCc: stable@vger.kernel.org\nSigned-off-by: Miaoqian Lin \u003clinmq006@gmail.com\u003e\nSigned-off-by: Heiko Carstens \u003chca@linux.ibm.com\u003e\n" }, { "commit": "e7dbfe6f15b4df34bb169d180bd10f1a3c043814", "tree": "fc472359125c10abfb27b3df3d10333549043d7c", "parents": [ "dcb6fa37fd7bc9c3d2b066329b0d27dedf8becaa" ], "author": { "name": "Heikki Krogerus", "email": "heikki.krogerus@linux.intel.com", "time": "Wed Oct 29 07:50:20 2025 +0100" }, "committer": { "name": "Mark Brown", "email": "broonie@kernel.org", "time": "Wed Oct 29 12:53:45 2025 +0000" }, "message": "spi: intel: Add support for Oak Stream SPI serial flash\n\nAdd Oak Stream PCI ID to the driver list of supported devices.\n\nThis patch was originally written by Zeng Guang.\n\nSigned-off-by: Heikki Krogerus \u003cheikki.krogerus@linux.intel.com\u003e\nSigned-off-by: Mika Westerberg \u003cmika.westerberg@linux.intel.com\u003e\nLink: https://patch.msgid.link/20251029065020.2920213-1-mika.westerberg@linux.intel.com\nSigned-off-by: Mark Brown \u003cbroonie@kernel.org\u003e\n" } ], "next": "f4c12e5cefc8ec2eda93bc17ea734407228449ab" }