)]}' { "log": [ { "commit": "21a7f44fd0765fcc5194130b28767786eba1d1e7", "tree": "fd0caac36e8ce4eb477f0d3aa37655fe94ba09e4", "parents": [ "89d2d7bf0698b7fdfc914bfd219e739e9308d332", "e8ff9af18e80279b80cf7063244db91b12f5e27e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 20:11:23 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 20:11:23 2026 -1000" }, "message": "Merge tag \u0027devicetree-for-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux\n\nPull devicetree updates from Rob Herring:\n\n - A bunch of improvements in dt-check-style. Fix various bindings based\n on these additional checks.\n\n - Convert hisilicon,hix5hd2-ir, hisilicon,hi6220-ade,\n hisilicon,hi6220-dsi, hisilicon,hip05-sas-v1, MediaTek RT5650 codecs,\n mediatek,g3dsys, mediatek,mt2701-scpsys, ti,omap-mpu, and\n ti,omap-ocp2scp to DT schema format\n\n - Add schemas for ST STM32MP2 DWC3 xHCI USB, ST STM32MP25 USB2-FEMTO\n PHY, spacemit,k1-gpu and spacemit,k3-gpu, HiSilicon local bus,\n HiSilicon HIP05 CPLD, SDMC DM2016, and QCom SM7250 and Kuno PDC\n\n - Various binding updates to fix schema warnings in .dts files\n\n - Drop obsolete .txt bindings for STM32(MP1) RCC, VExpress hwmon and\n regulator, and mailbox.txt\n\n - Remove the unused of_overlay_remove_all() function\n\n - Fixes for of_check_msi_parent()\n\n - Add \"i2c-parent\" tracking to fw_devlink\n\n* tag \u0027devicetree-for-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux: (72 commits)\n dt-bindings: usb: dwc3: Document ST STM32MP2 DWC3 xHCI USB controller\n dt-bindings: iommu: Describe MT8195 infra IRQs\n dt-bindings: clock: mediatek: Add MT8516 fallbacks\n dt-bindings: media: Convert hisilicon,hix5hd2-ir to DT schema\n dt-bindings: display: Convert hisilicon,hi6220-ade to DT schema\n dt-bindings: display: Convert hisilicon,hi6220-dsi to DT schema\n dt-bindings: phy: Document ST STM32MP25 USB2-FEMTO PHY\n of: overlay: remove unused of_overlay_remove_all()\n dt-bindings: power: Convert mediatek,mt2701-scpsys to DT schema\n dt-bindings: bus: Add HiSilicon local bus\n dt-bindings: gpu: img,powervr-rogue: add spacemit,k1-gpu and spacemit,k3-gpu\n dt-bindings: interrupt-controller: qcom,pdc: Document SM7250 PDC\n dt-bindings: vendor-prefixes: add Ambarella\n dt-bindings: reset: Drop obsolete STM32(MP1) RCC bindings\n dt-bindings: arm: keystone: ti,sci: Correct reg and mboxes constraints\n dt-bindings: ASoC: Convert MediaTek RT5650 codecs bindings to DT schema\n dt-bindings: scsi: Convert hisilicon,hip05-sas-v1 to DT schema\n of/irq: Stop the MSI walk at the first msi-parent\n of/irq: Fix device node refcount leak in of_check_msi_parent()\n dt-bindings: display: faraday,tve200: Use a level-high interrupt\n ...\n" }, { "commit": "89d2d7bf0698b7fdfc914bfd219e739e9308d332", "tree": "d568e43e3d67daccda400e6e4c720b65b1e1718a", "parents": [ "9628ee0c2219daaa6374b0c5f5a5c0d55e0e263b", "2c493ac8c347167eec9e4e985d2b58d5fa6fd420" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 20:07:00 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 20:07:00 2026 -1000" }, "message": "Merge tag \u0027efi-next-for-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/efi/efi\n\nPull EFI updates from Ard Biesheuvel:\n\n - Set the LoaderDevicePartUUID EFI variable from the stub to help\n systemd discover the file system layout when booting straight into\n Linux without GRUB or systemd-boot (Vincent Mailhol)\n\n - Some GUID deduplication work from Vincent\n\n - Remove pointless UTF16-\u003eUTF8 and vice versa conversions from the stub\n\n - Some kmap() -\u003e kmap_local_page() conversions in the capsule loader\n\n - Add a runtime control to en/disable EFI runtime services so that\n PREEMPT_RT systems can enable them as needed\n\n - Add a \u0027nostatfs\u0027 mount option to efivarfs so that the cost of\n querying the EFI variable store (which is already rate limited) can\n be avoided entirely on systems where it is disproportionately costly\n\n - Rework the EFI libstub Makefile to align x86 with other\n architectures, and inherit/adapt the global CFLAGS variable rather\n than reconstruct it from scratch\n\n - Constify attributes of statically allocated sysfs nodes\n\n - Avoid register x18 when building the arm64 EFI stub, in order to\n comply with the UEFI spec, and to permit it to execute in a context\n where x18 is special\n\n - Preserve the physical addresses of all EFI config tables that may be\n of interest to an incoming kexec kernel\n\n - Add some LKDTM tests for EFI runtime crashes where the faulting\n address is inside a EFI memory region\n\n - Other minor bug fixes and cosmetic cleanups\n\n* tag \u0027efi-next-for-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/efi/efi: (35 commits)\n lkdtm: Add more EFI runtime tests\n efi: Initialize all configuration table addresses to EFI_INVALID_TABLE_ADDR\n efi: Retain the address of the LINUX_EFI_MEMRESERVE table\n efi/libstub: Don\u0027t replace an existing LINUX_EFI_MEMRESERVE table\n efi/runtime-wrappers: Don\u0027t park the worker after a recovered firmware fault\n efi: Use sysfs_emit() not sprintf() to generate sysfs file contents\n efi: Constify sysfs attributes\n efi/libstub: Disable kernel stack erasing in the common flags\n efi/libstub: Build the x86 stub from KBUILD_CFLAGS\n efi/libstub: Declare the x86 stub\u0027s assembly entry points\n efi/libstub: arm64: Don\u0027t use the platform register x18\n efi/libstub: Free cmdline_ptr in efi_pe_entry\n efi/riscv: libstub: Don\u0027t set image_size in handle_kernel_image()\n efi/libstub: Fix error unwind freeing fdt in allocate_new_fdt_and_exit_boot()\n efivarfs: add nostatfs mount option to skip QueryVariableInfo()\n efi/libstub: add initial Boot Loader Interface support\n efi/libstub: Add efi_snprintf() to construct wide strings\n efi/libstub: Add support for printing human readable GUIDs\n efi/libstub: Output UTF-16 directly from vsnprintf()\n efi/libstub: Avoid efi_puts() for compile time constant strings\n ...\n" }, { "commit": "9628ee0c2219daaa6374b0c5f5a5c0d55e0e263b", "tree": "43c5168bdacd79bd2f2356d2902b82db4e5e877e", "parents": [ "44388c8f3e22b578c9089df53301ef7e53e7fb01", "dae739137441667d67fbfcc4d303a0ecc6618662" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 20:02:48 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 20:02:48 2026 -1000" }, "message": "Merge tag \u0027gpio-fixes-for-v7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux\n\nPull gpio fixes from Bartosz Golaszewski:\n\n - add ACPI quirks for Thinkpad L13 Gen 2a and Acer Nitro 16S AI to\n ignore a wrong GPIO interrupt declaration\n\n - add missing return value check of devm_gpiochip_add_data() to\n gpio-lpc32xx\n\n - don\u0027t set GPIOD_FLAG_IS_OUT from character device code as GPIO core\n already does it where needed and it can lead to providing invalid\n info to user-space on request errors\n\n - don\u0027t report a bogus -ENOMEM for a line requested without a label\n\n - propagate errors occurring when setting line values for pins for\n which we emulate open-drain or open-source drive settings\n\n - fix interrupt handling bugs in gpio-pca953x and gpio-davinci\n\n - fix more memory leaks in GPIO core\n\n - clear event clock flags from pins on GPIO release\n\n* tag \u0027gpio-fixes-for-v7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux:\n gpiolib: don\u0027t report -ENOMEM for a requested line without a label\n gpiolib: Propagate emulated drive errors when setting arrays\n gpio: pca953x: Handle direction register read errors in IRQ paths\n gpio: pca953x: Preserve wakeup accounting on parent IRQ failure\n gpio: davinci: Clear interrupt status in every bank on suspend\n gpiolib: Free chip resources when allocating the label fails\n gpiolib: cdev: don\u0027t set GPIOD_FLAG_IS_OUT\n gpiolib: clear the event clock flags when a line is released\n gpiolib: fix memory leak in gpiod_set_array_value_complex() EPERM error path\n gpiolib: acpi: Ignore GPIO 11 interrupt on Acer Nitro 16S AI\n gpio: lpc32xx: check devm_gpiochip_add_data() return value\n gpiolib: acpi: Ignore GPIO 11 interrupt on ThinkPad L13 Gen 2a\n" }, { "commit": "44388c8f3e22b578c9089df53301ef7e53e7fb01", "tree": "77c4a6f6237cdb483cc471a01cc500406fdcd553", "parents": [ "a8c2facb7b2cef4d110e3b25037bc29703485c71", "0ef71adafaa9b36a06dd5b823aebcd2fa9b9b9c2" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 19:49:58 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 19:49:58 2026 -1000" }, "message": "Merge tag \u0027mtd/for-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mtd/linux\n\nPull MTD updates from Miquel Raynal:\n \"Core MTD:\n - Fixes to the virt-concat driver\n - Added INT0800 firmware-flash map driver\n - mtdblock: prevent reclaim I/O during request processing\n - cfi_cmdset_0002: cap the write-buffer chunk at 256 bytes on an x8 device\n\n Raw NAND:\n - Clean up the Qualcomm controller driver again\n - Improve / create Arasan and IBM\n - Reflect that ESMT and GigaDevice share ID 0xc8, and disable broken\n timings feature on GD9FU2G8F3A\n - Drop platform data support from the lpc32xx drivers\n\n SPI NAND:\n - Heyangtek uses two bytes for the BBM like every other device\n - Winbond: Add support for W25N04LW and W25N08LW\n - Support for ISSI SPI NAND flashes\n\n SPI NOR:\n - Support for new Macronix and (lots of) Winbond flash devices\n - Rewrite the status register handling. There were many small helper\n functions to enable quad I/O mode in many different ways. That\u0027s\n now consolidated in one generic function.\n - Rework the SFPD handling. It used to be only parsed for flashes\n present in the in-kernel database which had any of the multi-I/O\n bit set - or with the addition of generic flash driver for any\n unknown flashes. This left a gap where SFDP wasn\u0027t handled and it\n turns out newer flashes (with SFDP support) will reused IDs of just\n these old flashed. With the rework, SFDP is tried to be parsed for\n any flashes and will amend the information which is already present\n in the in-kernel database.\n - Increase SFDP size limit to 16KiB. There are flashes which have\n some larger gaps between tables and thus exceeds the former 4KiB\n limit.\n - Flash fixups are getting more and more common. Due to this, the\n fixups are now a separate list (per manufacturer) instead of being\n attached to a specific flash. A new .match() callback makes them\n more flexible, when one is applied.\n - Support 1-1-8 and 1-8-8 modes with larger flashes which need 4byte\n addresses\n\n Then there is the load of API updates and misc AI fixes\"\n\n* tag \u0027mtd/for-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mtd/linux: (155 commits)\n mtd: spi-nor: sfdp: reduce stack usage in spi_nor_parse_sfdp()\n mtd: spi-nor: sfdp: fix missing kernel-doc\n mtd: parsers: qcom: fix offset/size overflow on large partitions\n mtd: spinand: heyangtek: Reserve both bad block marker bytes\n mtd: rawnand: pl353: fix clk reference leak in pl35x_nfc_setup_interface()\n mtd: nand: use dmaengine_submit() instead of -\u003etx_submit()\n dt-bindings: mtd: convert IBM NDFC binding to YAML\n mtd: rawnand: fsl_ifc: allocate shared ctrl with devm_kzalloc\n mtd: rawnand: qcom: fix read location register usage in config_nand_cw_read()\n mtd: rawnand: qcom: move common code to the \u0027qpic_common\u0027 module\n mtd: rawnand: qcom: rename \u0027nand_stats\u0027 structure\n mtd: rawnand: qcom: make nandc_set_read_loc_last() more generic\n mtd: rawnand: qcom: make nandc_set_read_loc_first() more generic\n mtd: rawnand: qcom: make config_nand_cw_write() more generic\n mtd: rawnand: qcom: make config_nand_page_write() more generic\n mtd: rawnand: qcom: make config_nand_page_read() more generic\n mtd: rawnand: qcom: make check_flash_errors() more generic\n dt-bindings: mtd: arasan: Add \"power-domains\" for ZynqMP\n mtd: virt-concat: unlink discarded items before freeing\n mtd: virt-concat: unlink concat node before freeing it\n ...\n" }, { "commit": "a8c2facb7b2cef4d110e3b25037bc29703485c71", "tree": "7de712b46fddd7bddc14c3ee2a0425a22b38badc", "parents": [ "a32e63a613aa80dfdb9acc0a09efab940e96054f", "f33a24cc012d34f25bb9942681bd478a1757b806" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 19:44:48 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 19:44:48 2026 -1000" }, "message": "Merge tag \u0027pinctrl-v7.4-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl\n\nPull pin control updates from Linus Walleij:\n \"Nothing special really, some new drivers, the usual trickle of fixes.\n\n Oddly not even vary many LLM-assisted fixes, I guess they haven\u0027t\n found their way into this subsystem yet.\n\n Core changes:\n\n - Support input-debounce-ns pin config property.\n\n New drivers:\n\n - Qualcomm:\n - Hawi SoC TLMM and LPASS LPI TLMM\n - Kuno (ARM32!) SoC TLMM\n - MSM8952 SoC TLMM\n - PMAU0102 SPMIO GPIO\n\n - Starfive JHB100 SoC sys0, sys0h, sys1, sys2, per0, per1,\n per2 per2pok and per3 (apparently strongly modularized silicon)\n\n - Ambarella CV75\n\n - Apple T8140 SoC used in iPhone 16 [Pro] and MacBook Neo\n\n - Econet EN7528\n\n - Allwinner Sunxi A733\n\n - Mediatek MT6735\n\n Improvements:\n\n - Renesas RZ/3GL: SD channel PoC, I2C power source etc\n\n - The SCMI pin controller uses generic helpers for handling\n groups and functions\"\n\n* tag \u0027pinctrl-v7.4-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl: (106 commits)\n pinctrl: stm32: program the EXTI mux from .alloc instead of .activate\n pinctrl: stm32: Fix the unit of the hwspinlock timeout\n pinctrl: stm32: Fix fwnode reference leak in stm32_gpiolib_register_bank()\n dt-bindings: pinctrl: brcm,nsp-gpio: Convert to DT schema\n pinctrl: mediatek: Add MT6735 pinctrl driver\n dt-bindings: pinctrl: mediatek,mt6779-pinctrl: Add bindings for MT6735 pin controller\n dt-bindings: pinctrl: mediatek,mt6779-pinctrl: Document MT6765 pin controller\n dt-bindings: pinctrl: mediatek,mt6779-pinctrl: Add MT6795\n dt-bindings: pinctrl: mediatek,mt6779-pinctrl: Improve pinctrl subnode and property descriptions\n dt-bindings: pinctrl: mediatek,mt6779-pinctrl: Pull pinctrl node changes from MT6795 document\n pinctrl: tegra: xusb: free maps on DT map failure\n pinctrl: sprd: free maps on DT map failure\n pinctrl: kconfig: Select generic pinctrl helpers for scmi pinctrl\n pinctrl: scmi: Replace pinctrl ops get group info with generics\n pinctrl: scmi: Replace pinmux ops get function info with generics\n pinctrl: ambarella: fix NULL vs IS_ERR() bug in amb_pinctrl_register()\n pinctrl: starfive: fix missing CONFIG_OF dependencies\n pinctrl: ambarella: add CONFIG_OF dependency\n pinctrl: apple: Add t8140-pinctrl support\n dt-bindings: pinctrl: apple,pinctrl: Add t8140 compatible\n ...\n" }, { "commit": "a32e63a613aa80dfdb9acc0a09efab940e96054f", "tree": "67752eeb602e5fab1777df29b7d23f4191bd4635", "parents": [ "065af32bd4c4be5907ef45660cde59f13be08246", "f57202d55333f750a18e21c3b3f35f48ef14a61e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 19:42:04 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 19:42:04 2026 -1000" }, "message": "Merge tag \u0027input-for-v7.4-rc0\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input\n\nPull input updates from Dmitry Torokhov:\n\n - Updates to input core to reject parent device overrides on managed\n input devices so devres lifetime management is not split across\n different devices, along with fixes for da7280, drv2665, drv2667, and\n tps6507x-ts that were reparenting managed input devices, and removal\n of redundant parent assignments across multiple drivers\n\n - A fix in input core to always accept EV_SYN events in input_event()\n and input_inject_event() so events seeded before device registration\n are properly flushed by input_sync()\n\n - A fix in matrix-keymap helper to reject keycodes above KEY_MAX and\n prevent out-of-bounds bitmap writes\n\n - Fixes and cleanups for HP GSC PS/2 (gscps2) serio driver to resolve\n race conditions in port list management, ring buffer access, and\n interrupt handling, return IRQ_NONE for unhandled shared interrupts,\n and drop busy-waiting on transmit\n\n - Fixes for maple_keyb driver to correct inverted key press detection,\n implement open and close methods so polling only runs while the\n device is open, and clean up unused driver fields\n\n - Fixes for maplecontrol driver to emit EV_SYN after reporting events,\n only enable axes reported by the controller with corrected hat\n limits, and stop polling and clear the callback on close\n\n - Updates to maplemouse driver to stop polling and clear the callback\n on close and drop redundant driver data cleanup\n\n - Fixes for matrix_keypad driver reverting forced switching of row\n GPIOs to input mode that broke row interrupts on platforms with\n separate GPIO and interrupt pinmux functions, and propagating the\n actual error code from matrix_keypad_build_keymap()\n\n - A fix for st-keyscan driver to keep the interrupt disabled while the\n peripheral clock is gated off to prevent bus faults, along with probe\n error handling improvements\n\n - A fix for mms114 touchscreen driver to disable interrupts before\n synthesizing touch release events during suspend so concurrent\n interrupts do not leave stuck active touch slots\n\n - Updates to xpad driver to support GameSir Nova Lite controller\n\n - A number of updates to device tree bindings, including a new schema\n for Analog Devices AD7147 CapTouch controller, conversion of SiS 9200\n I2C touchscreen binding to DT schema format, and allowing the\n wakeup-source property on Dialog DA9062 onkey\n\n - Other assorted driver cleanups, style fixes, and conversions,\n including switching to named initializers for acpi_device_id tables\n and converting cyttsp5 to DEFINE_SIMPLE_DEV_PM_OPS.\n\n* tag \u0027input-for-v7.4-rc0\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input: (94 commits)\n Revert \"Input: matrix_keypad - force switch rows to input mode\"\n Input: s6sy761 - drop duplicate axis initialization in s6sy761_probe()\n Input: always accept EV_SYN in input_event()\n dt-bindings: input: dlg,da9062-onkey: Allow wakeup-source property\n Input: xpad - add GameSir Nova Lite support\n Input: touchscreen - use named initializers for acpi_device_id\n Input: mouse - cyapa: use named initializers for acpi_device_id\n Input: misc - use named initializers for acpi_device_id\n Input: keyboard - use named initializers for acpi_device_id\n Input: reject parent overrides on managed input devices\n Input: tps6507x-ts - fix input device parent assignment\n Input: drv2667 - fix input device parent assignment\n Input: drv2665 - fix input device parent assignment\n Input: da7280 - fix input device parent assignment\n Input: maple_keyb - remove unused mdev-\u003edriver assignment\n Input: maplecontrol - remove unused mdev-\u003edriver assignment\n Input: maplemouse - remove unused mdev-\u003edriver assignment\n Input: maplecontrol - remove redundant drvdata resetting\n Input: maple_keyb - remove redundant drvdata resetting\n Input: maplemouse - remove redundant drvdata resetting\n ...\n" }, { "commit": "065af32bd4c4be5907ef45660cde59f13be08246", "tree": "538616b6376bb79c5f3da4c979e2a3d158d1c25b", "parents": [ "42e6549eafc66f3648319585680ba0c71c2461da", "06d410ba93d33a6c78e917d54e821355492e3ce4" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 19:39:46 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 19:39:46 2026 -1000" }, "message": "Merge tag \u0027firewire-updates-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ieee1394/linux1394\n\nPull firewire updates from Takashi Sakamoto:\n\n - Guarantee asynchronous packet and transaction callbacks in process\n context\n\n Both the 1394 OHCI driver and the core transaction layer have been\n changed to guarantee that asynchronous packet and transaction\n callbacks are invoked in process context. In v6.17, the execution\n context depended on the transaction destination: callbacks for\n transactions destined for remote nodes were invoked from a workqueue,\n whereas callbacks for transactions destined for the local node or\n terminated due to internal errors were invoked in the transaction\n initiator\u0027s context.\n\n All such callbacks are now guaranteed to execute in process context,\n eliminating the need to account for different execution contexts when\n implementing callback functions.\n\n - Fill kerneldoc for transaction layer\n\n The above change guarantees a consistent execution context for packet\n and transaction callbacks, making it possible to document their\n execution context in kerneldoc.\n\n - Enable compiler-based context analysis for the transaction layer\n\n The core transaction layer is sufficiently complex that\n compiler-based context analysis can help detect invalid call paths.\n\n - Fix a reference count leak in the cdev layer\n\n A reference count leak was reported when a user space application\n delegated isochronous resource management. This issue has now been\n fixed.\n\n - Add KUnit tests for the configuration ROM parser and generator\n\n In recent years, questions have been raised about how the\n configuration ROM parser and generator handle boundary conditions and\n edge cases. KUnit tests have been added to verify their behavior in\n these situations. KUNIT_STATIC_STUB_REDIRECT is used to stub the\n transaction responder so that it returns the configuration ROM\n contents.\n\n - Misc fixes for kerneldoc and nosy-dump application\n\n* tag \u0027firewire-updates-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ieee1394/linux1394: (88 commits)\n firewire: core: replace drain_workqueue() with flush_workqueue()\n firewire: core: adjust context_unsafe() usage for lockdep checks\n firewire: core: invoke packet callback from workqueue when removing card instance\n firewire: core: use designated initializer for dummy driver on card removal\n firewire: core: use context analysis to check lock state when scheduling error callbacks\n firewire: core: check precondition when scheduling error callbacks\n firewire: core: use workqueue to cancel all pending transactions on card removal\n firewire: core: reuse helper function for scheduling error callbacks\n firewire: core: don\u0027t disable error work for transaction\n firewire: core: use release/acquire pair when replacing underlying driver on card removal\n firewire: core: add kerneldoc for inbound transaction-related symbols\n firewire: core: add kerneldoc for outbound transaction-related symbols\n firewire: core: use appropriate spinlock variants for transaction-related locks\n firewire: core: narrow the card lock scope when accessing node_id\n firewire: core: use context analysis annotations and lockdep checks for topology map lock\n firewire: core: use context analysis annotations and lockdep checks for split timeout lock\n firewire: core: use context analysis annotations and lockdep checks for transactions lock\n firewire: core: enable context analysis for transaction layer\n firewire: core: add might_sleep() checks to transaction layer\n firewire: core: fulfill kerneldoc for fw_cancel_transaction()\n ...\n" }, { "commit": "42e6549eafc66f3648319585680ba0c71c2461da", "tree": "193b190eeffd9a74add00d8f0ff9e06f32fef8b3", "parents": [ "75c1cb8178fe84403fd95236ddf21754f0a4156c", "d7e7bca7169873b46e857c025c10f3336c1258d8" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 19:27:32 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 19:27:32 2026 -1000" }, "message": "Merge tag \u0027media/v7.4-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media\n\nPull media updates from Mauro Carvalho Chehab:\n\n - v4l2 core:\n - improve subdev and pixformat kAPI;\n - fix P010 format info and add Y12 format info;\n - add fwnode_graph_for_each_endpoint_scoped();\n\n - New sensor drivers:\n - Sony IMX576\n - OmniVision OS02G10, OV05C10 and OG0VA1B\n - Samsung S5KJN5\n - Himax HM1246\n\n - Maxim GMSL2/3: add support for MAX9296A, MAX96717, and MAX96724\n\n - Intel IPU6: add support for IPU7, IPU7.5 and IPU8\n\n - NXP: add support for i.MX95 CSI pixel formatter driver\n\n - ITE: add driver for IT6625/IT6626 HDMI bridge\n\n - Qualcomm: add CSI2 3ph DPHY driver\n\n - Rockchip: add rk3576 MIPI capture vicap driver\n\n - STM32 DCMIPP: Add STM32MP25 subdevices\n\n - Lots of driver fixes and cleanups\n\n* tag \u0027media/v7.4-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media: (596 commits)\n media: i2c: imx576: Fix line length register\n media: ov05c10: Remove duplicated writes to analogue gain register\n media: ov05c10: Power management fixes\n media: ov05c10: Set reset GPIO high when acquiring it\n media: ov05c10: Small cleanups\n media: maxim-serdes: Disable test pattern generator for now\n media: mc: Keep INTERNAL pad flags just for the kernel, for now\n media: i2c: imx576: select VIDEO_CCS_PLL to repair build error\n media: Documentation: mc: Fix Stream reference\n media: i2c: add imx576 image sensor driver\n dt-bindings: media: i2c: Add imx576 sensor\n media: i2c: maxim-serdes: add MAX9296A driver\n media: i2c: remove MAX96714 driver\n media: i2c: maxim-serdes: add MAX96724 driver\n staging: media: remove MAX96712 driver\n arm64: defconfig: disable deprecated MAX96712 driver\n media: i2c: maxim-serdes: add MAX96717 driver\n media: i2c: remove MAX96717 driver\n media: i2c: add Maxim GMSL2/3 deserializer framework\n media: i2c: add Maxim GMSL2/3 serializer framework\n ...\n" }, { "commit": "75c1cb8178fe84403fd95236ddf21754f0a4156c", "tree": "67ef192f2cd38b0254865ea2afea36a75e9f3e39", "parents": [ "0dfc0090b925243490b5b71bc9a229517cda499a", "ed7995e4ec3789a90e37eb826bfccf43cc85d2fd" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 19:16:20 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 19:16:20 2026 -1000" }, "message": "Merge tag \u0027sound-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound\n\nPull sound updates from Takashi Iwai:\n \"The AI flood continues, which brought us a fairly busy development\n cycle again with changes spread across the subsystem, ranging from\n (lots of) core hardening to new platforms and codecs.\n\n Here are some highlights.\n\n ALSA core:\n - PCM: race fixes around channel-map controls, draining/unlink, drop\n sync-stop handling, and DMA buffer delay sync\n - Compress-offload: state and geometry validations, buffer leak fix,\n and stream/card lifetime management\n - Jack: module pinning during debugfs access, control removal race\n fix, and early injection exposure\n - Timer \u0026 sequencer: module pinning for user timers, RCU grace period\n wait on port deletion, UMP bounds fixes\n - Mark OSS sequencer emulation as deprecated\n - RawMIDI: proper disconnect handling and input work drain cleanup\n - Control: fixes for vmaster racy setups and control callback\n serialization, UAF fix on card disconnect\n\n ASoC core:\n - Continued framework refactoring, deployment of\n auto_selectable_formats across codecs and platform DAIs\n - Generic card cleanup: free jack GPIOs on card remove for\n simple-card and audio-graph-card variants\n - SDCA improvements: SimpleJack function type support, library\n helpers, and non-ACPI build support\n - Conversion of deprecated DMA API calls\n\n ASoC SOF:\n - Support for compressed audio playback on SOF IPC4 with Intel TGL+\n - AMD ACP 7.B / 7.F SoundWire and PDM controller support, ASP\n carveout firmware loading\n - Function topology support for Intel I2S machines\n\n ASoC platforms \u0026 codecs:\n - Qualcomm: New QAIF driver for Shikra platform, WCD9378 SDCA codec,\n Nord Ride/RRD and Motorola Edge 30 boards, LPASS macro cache\n converted to maple tree\n - New codec drivers: ESS ES9039Q2M, Nuvoton NAU83G60 amplifier,\n Senary SN624x SoundWire SDCA codec\n - MediaTek / Airoha: New Airoha AN7581 AFE and WM8960 machine\n drivers, extensive clock and error-handling cleanups across\n MediaTek SoCs\n - NVIDIA Tegra: WM8994 machine driver and CS35L45 MDSYNC support\n - Realtek: RT766/RT767, RT721_U, RT718 variants, RT712 GPIO LED\n control\n - Cirrus Logic: CS35L45 MDSYNC support, CS35L56 regmap default tests\n - TI: TAS2573 DSP support in TAS2781, TAS2783 SoundWire fixes\n - Everest Semi: ES8326 standby / HPF controls, ES8389 / ES8375 resume\n fixes\n - Removal of obsolete ST-Ericsson Ux500 MOP500 machine driver\n\n HD-audio:\n - ACPI controller runtime PM suspend/resume support\n - Controller shutdown and unbind race fixes for unsol events and jack\n polling\n - HDMI: High Bit Rate (HBR) audio capability enabled, ELD proc and\n converter bounds checks\n - AW88399 side codec SSID-specific firmware naming and Lenovo Legion\n R9000P enablement\n - Realtek / Conexant / Cirrus / TI quirks for numerous laptops\n (Lenovo, ASUS, HP, Acer, HONOR, Minisforum, MSI, etc.)\n - Creative CA0132 Sound BlasterX AE-5 external RGB LED strip support\n\n USB-audio:\n - Dedicated mixer driver for Audient EVO4\n - Native Instruments Kore controller LCD support and keymap fix\n - Pioneer DJ DDJ-SZ and Roland (OCTA-CAPTURE / QUAD-CAPTURE\n multirate, TD-11) support\n - UAC2/3 mixer unit matrix evaluation and bounds checking\n - Hardening for LINE6 and caiaq drivers against malformed packets and\n races\n - Device-specific quirks for PreSonus, TASCAM, Logitech, Mayflower,\n MOONDROP, Yamaha, etc.\n\n Misc:\n - Auto-cleanup conversion for snd_card_free() and devres migration\n across dozens of legacy PCI, ISA, and Sparc drivers\n - ALSA loopback (aloop) timer lifecycle fixes and new aloop selftest\n - pcmtest driver fixes and kselftest updates\"\n\n* tag \u0027sound-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound: (924 commits)\n ALSA: hda/realtek: Add mute and mic-mute LEDs for HP ENVY 16 (103c:8be5)\n selftests: ALSA: pcmtest: Compare all captured bytes in ni_capture\n ALSA: usb-audio: Use strscpy() in append_ctl_name()\n ALSA: caiaq: Use strscpy() in snd_usb_caiaq_input_init()\n ALSA: hiface: Use scnprintf() in hiface_chip_create()\n selftests/alsa: Check the aloop PCM Slave controls for a matching playback\n ALSA: aloop: Update the PCM Slave controls for a matching playback\n selftests: ALSA: pcmtest: Make room for the longest fill pattern\n selftests: ALSA: pcmtest: Check the frame count of each transfer\n ALSA: hda/realtek: Fix speakers on COLORFUL L1 Plus\n ALSA: hda/realtek: enable AW88399 on Lenovo Legion R9000P AFR10\n ALSA: line6: Handle period elapsed calls outside the locks\n ALSA: emux: Stop voices before freeing zones in all cases\n ALSA: emux: Fix UAF of soundfont zones at note-on\n ALSA: mtpav: restore negation dropped in guard() conversion\n ALSA: compress: reject restarting an ACTIVE task via origin_seqno\n ALSA: compress: add missing OPEN-state gate to SET_METADATA\n ALSA: compress: reject buffer geometry change on gapless next_track\n ALSA: compress: fix buffer leak on failed SET_PARAMS\n ALSA: hda/realtek: Enable jack detection on Minisforum AI X1\n ...\n" }, { "commit": "0dfc0090b925243490b5b71bc9a229517cda499a", "tree": "5da880dd09d65579c35966af1b1191f79a8bb309", "parents": [ "330517c63aa9b48227b6ab45f01003effac77ae4", "61e1a43ca5825acb137a10ac7d52746632bfb124" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 19:11:27 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 19:11:27 2026 -1000" }, "message": "Merge tag \u0027fbdev-for-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev\n\nPull fbdev updates from Helge Deller:\n \"A whole lot of small fixes all over many drivers, but the majority of\n changes are related to code cleanups regarding the cursor handling in\n vt and fbcon.\n\n Fixes:\n - core: initialize modelist in framebuffer_alloc()\n - core: bitblit: fix glyph clipping when fbcon pans\n - fbcon: restore font geometry if font rotation fails\n - sh_mobile_lcdcfb: restore the per-overlay sysfs attributes\n - udlfb: don\u0027t rebuild the mode list while the framebuffer is in use\n - atmel_lcdfb: prevent FIFO work after removal\n\n Cleanups:\n - vt, fbcon, vgacon: cursor code rework \u0026 cleanups\n - MAINTAINERS: name the deller/linux-fbdev for-next branch\n - drop unused FB_IOMEM_HELPERS_DEFERRED Kconfig option\n - acornfb: remove unused code\n - atafb: fix sparse warnings and avoid casts\n - sstfb: use managed PCI device enable\n - gxt4500, kyro, nvidia: release write-combining handle on probe failure\n - various drivers: typo fixes in comments\n - various drivers: fix error path on fb_deferred_io_init() failure\n - various drivers: use FB blanking constants instead of VESA constants\"\n\n* tag \u0027fbdev-for-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev: (53 commits)\n fbdev: xilinxfb: Use FB blanking constants\n fbdev: platinumfb: Use FB blanking constants\n fbdev: sa1100fb: Remove comment on VESA DPMS modes\n fbdev: i810fb: Use FB blanking constants\n fbdev: au1100fb: Use FB blanking constants\n fbcon: Retry rotated font allocation after failure\n fbcon: Rebuild rotated font buffer on font change\n fbcon: Include font geometry in the rotated font cache\n fbdev: bitblit: Fix glyph clipping when fbcon pans\n fbcon: Replace fbcon_fill_cursor_mask() with fbcon_cursor_glyph()\n lib/fonts: Add font_glyph_cursor() helper\n vgacon: Use vt_cursor_{start,end}()\n vgacon: Remove trailing whitespaces\n vt: Add cursor-size helpers\n MAINTAINERS: name the deller/linux-fbdev for-next branch\n fbdev: atafb: avoid cast when assigning buffer address pointer\n fbdev: atafb: fix sparse warnings\n fbdev: atyfb_base: fix typos in comments\n fbdev: aty128fb: fix typos in comments\n fbdev: mach64: fix typos in comments\n ...\n" }, { "commit": "330517c63aa9b48227b6ab45f01003effac77ae4", "tree": "51b6e38214a50c0253eba6dc05eeed6ae0f5b995", "parents": [ "168151cdb0f93d26557f9f3c7aae659b8d6b1863", "985955d8e6b2b15cfd65b7ac6893e3a5a90c5870" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 15:44:26 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 15:44:26 2026 -1000" }, "message": "Merge tag \u0027char-misc-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc\n\nPull Char/Misc/IIO/others driver updates from Greg KH:\n \"Here is the big set of char/misc/android/iio and other small driver\n subsystem patches for 7.4-rc1. Loads of stuff in here, larger than\n normal. Highlights include:\n\n - removal of the C binder code, the rust version is stable and will\n be used going forward in a few billion devices. Great job by those\n developers\n\n - loads and loads of IIO driver updates and feature additions\n\n - speakup driver fixes and updates\n\n - mhi driver updates\n\n - mei driver updates\n\n - xillybus driver fixes\n\n - comedi driver fixes\n\n - lots of coresight driver updates\n\n - Interconnect driver updates\n\n - nvmem driver updates and fixes\n\n - slimbus driver updates and fixes\n\n - spmi driver updates and fixes\n\n - lots of tiny misc and char driver fixes based on people scanning\n for things\n\n All of these have been in linux-next for a while with no reported\n issues, other than a merge conflict with one of the rust tree files,\n which should be simple to resolve\"\n\n* tag \u0027char-misc-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc: (446 commits)\n rust_binder: wake epoll on self-work queued to poll thread\n rust_binder: avoid overflow in get_node_debug_info()\n MAINTAINERS: Add Abel as SPMI co-maintainer\n spmi: mtk-pmif: Fix clock reference leak in mtk_spmi_bus_probe()\n iio: adc: qcom-spmi-iadc: Remove regmap R/W wrapper functions\n iio: adc: qcom-spmi-iadc: Migrate to devm_spmi_subdevice_alloc_and_add()\n misc: qcom-coincell: Migrate to devm_spmi_subdevice_alloc_and_add()\n phy: qualcomm: eusb2-repeater: Migrate to devm_spmi_subdevice_alloc_and_add()\n power: reset: qcom-pon: Migrate to devm_spmi_subdevice_alloc_and_add()\n nvmem: qcom-spmi-sdam: Migrate to devm_spmi_subdevice_alloc_and_add()\n spmi: Add helper to get a parent SPMI device\n spmi: Implement spmi_subdevice_alloc_and_add() and devm variant\n spmi: Remove unneeded goto in spmi_device_add() error path\n spmi: Print error status with %pe format\n spmi: Remove redundant dev_name() print in spmi_device_add()\n spmi: Fix potential use-after-free by grabbing of_node reference\n spmi: mtk-pmif: Add workaround for FSM lockup/error in read operation\n MAINTAINERS: Add Qualcomm SPMI controller entry\n spmi: pmic-arb: return 0 in spmi_pmic_arb_register_buses() on success\n comedi: addi_apci_3xxx: fix subdevice count underallocation\n ...\n" }, { "commit": "168151cdb0f93d26557f9f3c7aae659b8d6b1863", "tree": "803156129b8f6098e07426b2e2105dd203be7485", "parents": [ "cb8fef4b07f71da01843457b66e579ad248a625e", "bdf12cde30830d46a8ef1ba93986356f1164b4f1" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 15:31:19 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 15:31:19 2026 -1000" }, "message": "Merge tag \u0027usb-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb\n\nPull USB / Thunderbolt update from Greg KH:\n \"Here is the big set of USB and Thunderbolt changes for 7.4-rc1.\n Included in here are:\n\n - thunderbolt driver updates and fixes\n\n - lots of dt schema conversions\n\n - usb gadget driver fixes (and a new maintainer!)\n\n - usb core fixups with some interactions with the driver core\n\n - usb serial updates and fixes for scan-found \"issues\"\n\n - xhci driver updates\n\n - typec driver updates\n\n - dwc3 driver updates\n\n - lots of usb gadget driver fixes for syzbot found \"problems\"\n\n - lots of other small USB driver fixes for randomly reported problems.\n\n All of these have been in linux-next with no reported issues\"\n\n* tag \u0027usb-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb: (158 commits)\n usb: gadget: dummy_hcd: prevent unbind via sysfs\n usb: gadget: dummy_hcd: add tick_us module parameter for timer-rate tuning\n usb: gadget: dummy_hcd: set no_sg_constraint only on the SuperSpeed bus\n usb: gadget: dummy_hcd: fix SuperSpeed ep0 maxpacket\n usb: gadget: fix refcount underflow in gadgetfs_bind() error path\n USB: core: document purpose of interface parent reference\n MAINTAINERS: add Neill Kapron as USB Gadget maintainer\n USB: Documentation: Update description of completion callback context\n USB: serial: mxuport: support RS485 mode configuration\n USB: serial: mxuport: handle SEND_NEXT transmit flow control\n USB: serial: add generic write control callbacks\n USB: serial: mxuport: add MUX50U-based device support\n USB: serial: mxuport: clean up firmware version handling\n USB: serial: mxuport: clean up product ID definitions and device table\n USB: serial: sierra: fix urb leak on write completion\n usb: typec: ucsi_ccg: Add retry mechanism in ccg_read\n usb: host: xhci-tegra: Add Tegra264 XHCI support\n usb: host: xhci-tegra: Skip MBOX MSG_ENABLED on Tegra264\n dt-bindings: usb: Add Tegra264 XUSB host support\n usb: xhci-pci: Add TUSB73x0 definitions\n ...\n" }, { "commit": "cb8fef4b07f71da01843457b66e579ad248a625e", "tree": "3088f5ab48aadf079688cb0bb874196bc97b7a81", "parents": [ "e1cff82880d13f62c64f20c36172a76aba7d989c", "1184f87e2790e8af9be3116f608d2e86b4792d7d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 15:25:54 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 15:25:54 2026 -1000" }, "message": "Merge tag \u0027tty-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty\n\nPull tty / serial driver updates from Greg KH:\n \"Here is the \"big\" set of tty and serial driver updates for 7.4-rc1.\n\n It\u0027s not really all that big, it\u0027s been kind of quiet in this area of\n the tree this development cycle in relation to other parts of the\n tree. But still, included in here are:\n\n - 8250 port updates and fixes\n\n - 8250 driver cleanups by Jiri\n\n - deletion of the obsolete moxa driver (making this pull request\n remove more lines than added!)\n\n - different serial driver updates for dma and other reported issues\n\n All of these have been in linux-next with no reported problems\"\n\n* tag \u0027tty-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty: (91 commits)\n tty: hvc: dcc: Detect JTAG connection only on CPU core 0\n serial: earlycon: Use isdigit() in earlycon_init()\n serial: core: Use isdigit() in uart_parse_options()\n dt-bindings: serial: snps-dw-apb-uart: Add Synaptics sl2610 uart\n serial: amba-pl011: drive the bus during break in RS485 mode\n serial: mcf: update author email address\n serial: pmac_zilog: report received breaks\n serial: pmac_zilog: push received data to the port that received it\n serial: amba-pl011: keep transmitter enabled when disabling RS485\n serial: ma35d1: Do not force-enable an unselected console\n serial: amba-pl011: honour delay_rts_before_send for every write\n Revert \"serial: 8250_port: Drop duplicate NULL check\"\n serial: 8250: make port operations work on struct uart_8250_port\n serial: 8250_omap: set priv-\u003eline before enabling the IRQ\n serial: 8250_lpss: do not touch uninitialized line in ehl_serial_exit()\n serial: 8250_exar: store the GPIO platform device in struct exar8250\n serial: 8250_exar: remove useless void * casts\n serial: 8250: drop err label from serial8250_register_8250_port()\n serial: core: fix TIOCSSERIAL and TIOCSERCONFIG on uninitialised ports\n serial: max310x: don\u0027t transmit while an RS485 reconfigure is pending\n ...\n" }, { "commit": "e1cff82880d13f62c64f20c36172a76aba7d989c", "tree": "08e7e31ca792be76a03e11a090e8bb124217003a", "parents": [ "6fba331225f5040e93d0947d1027e9712238291f", "4a177d5e688e8e82113f7a32d6f75f0bab9658c4" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 15:07:12 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 15:07:12 2026 -1000" }, "message": "Merge tag \u0027staging-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging\n\nPull staging driver updates from Greg KH:\n \"Here is the big set of staging driver updates for 7.4-rc1.\n\n The huge majority of changes in here were to the rtl8723bs driver,\n which ended up being deleted entirely through the wifi driver tree, so\n while the work here was nice to have done to get experience by people,\n the overall goal was achieved in that we have a solid working and sane\n driver in the real part of the tree now.\n\n Other than that, included in here are:\n - some greybus driver removal of broken drivers that no one ever used\n - minor coding style cleanups for other staging drivers\n\n All of these have been in linux-next with no reported issues, other\n than the merge conflict of the driver being removed, but that\u0027s an\n obvious one to resolve :)\"\n\n* tag \u0027staging-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging: (145 commits)\n staging: rtl8723bs: remove unnecessary parentheses\n rtl8723bs: Remove redundant macro in basic_types.h\n staging: rtl8723bs: remove spaces before tabs in hal_com_reg.h\n staging: greybus: Align function arguments\n staging: greybus: uart: fix argument alignment\n staging: greybus: Remove unused header declaration to_fw_mgmt_connection\n staging: most: fix typo in driver_usage.txt\n staging: vme_user: avoid iterator variable access outside list loop\n staging: greybus: Remove unused function \u0027to_fw_mgmt_connection\u0027\n staging: greybus: replace PTR_ERR() with %pe in error messages\n staging: octeon: fix misuse of kernel-doc comment\n staging: nvec: fix GPIO descriptor documentation\n staging: fbtft: update outdated struct fbtft_ops comment\n greybus: Discard pm_runtime_put_autosuspend() return value\n staging: rtl8723bs: remove unused defines in odm.h\n staging: rtl8723bs: remove commented out code in hal/ files\n staging: rtl8723bs: remove unused defines in HalBtcOutSrc.h\n staging: rtl8723bs: remove unused PCI ASPM OSC definitions\n staging: rtl8723bs: remove unused EEPROM definitions\n staging: rtl8723bs: return bool from check_pending_xmitbuf\n ...\n" }, { "commit": "6fba331225f5040e93d0947d1027e9712238291f", "tree": "43cbfcbd0d85c3a4774a86653692a1950cb5eafb", "parents": [ "b23545529c21737dd7939e86b6f649f06480796d", "2f4880c22e838d54eae9ab153b0f8dce60531bf1" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 14:30:22 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 14:30:22 2026 -1000" }, "message": "Merge tag \u0027scsi-misc\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi\n\nPull SCSI updates from James Bottomley:\n \"Small number of driver updates (mpi3mr, ufs, scsi_debug).\n\n By far the biggest core change (at 4000+ lines) is the sense code\n rework to make our sense handling follow the 16 bit defines in the\n SCSI standard rather than our split ASC and ASCQ handling which ends\n up being confusing and difficult to grep.\n\n The changes should all be functionally equivalent and so far the bots\n and AI seem to agree; the code has been incubating in -next since 16\n September with one reported issue fixed.\n\n The remaining updates are minor\"\n\n* tag \u0027scsi-misc\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi: (114 commits)\n scsi: ufs: rpmb: Fix power-on UNIT ATTENTION retry\n scsi: bfa: Use snprintf() in bfa_fcs_fabric_psymb_init()\n scsi: bfa: Use snprintf() in bfa_fcs_fabric_nsymb_init()\n scsi: MAINTAINERS: Remove Avri Altman as UFS reviewer\n scsi: st: Relock the door after a reset\n scsi: st: Restore the drive buffering mode after reset\n scsi: st: Record the tape position after a successful MTLOAD\n scsi: st: Restore changed drive settings after reset also for MTLOAD and MTRETEN\n scsi: scsi_debug: Validate the access parameters of WRITE ATOMIC (16)\n scsi: scsi_debug: Map the region written by WRITE ATOMIC (16)\n scsi: scsi_debug: Refuse a short WRITE ATOMIC (16) before writing it\n scsi: scsi_debug: Advance the write pointer over the data written\n scsi: scsi_debug: Do not write a partial physical block to a zoned device\n scsi: scsi_debug: Enforce physical block alignment of zoned writes\n scsi: scsi_debug: Report the residual of a write\n scsi: scsi_debug: Avoid 32-bit overflow in WRITE SCATTERED offsets\n scsi: scsi_debug: Evaluate scsi_debug_lbp() only once\n scsi: scsi_debug: Take the zone metadata lock before the data lock\n scsi: scsi_debug: Refuse a negative physblk_exp\n scsi: scsi_debug: Make atomic writes and ZBC emulation mutually exclusive\n ...\n" }, { "commit": "b23545529c21737dd7939e86b6f649f06480796d", "tree": "9c681fa42d931f0a1662ec8bca9230237d79d547", "parents": [ "fa899d500a0e1eb1ebe25246eaa718f78768c308", "40d070cbb1906896d6fd65c39722d2411830ed9f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 14:14:00 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 14:14:00 2026 -1000" }, "message": "Merge tag \u0027for-7.4/block-20261021\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux\n\nPull block updates from Jens Axboe:\n\n - NVMe updates via Keith:\n - Apple M4 (t8132) ANS2 NVMe support\n - nvme-multipath sysfs attributes for path_state, iopolicies, and\n fail_on_ctrl_loss, plus path state evaluation fixes\n - nvme-tcp parallelized I/O queue allocation and startup, and using\n the caller\u0027s network namespace\n - nvmet passthru UAF fix and rework, PR preempt use-after-free\n fixes, auth hardening, and traffic based keep alive support\n - DH-HMAC-CHAP secret attributes readable by root only\n - Various other fixes and cleanups\n\n - swim driver overhaul and fixes, plus floppy fixes, via a pull from\n Denis\n\n - Block device buffered and direct I/O rework from Tal: use\n iomap_dirty_folio, take i_rwsem for the write fallback and splice\n read, honor IOCB_NOWAIT in the buffered read path, and reject atomic\n write fallback to buffered I/O\n\n - Large zone revalidation rework: serialize revalidation, handle\n capacity changes by dropping and retrying zone write plugs, propagate\n read-only and offline conditions, and treat offline and read-only\n zones as dead\n\n - ublk robustness work around canceled FETCH rounds and going live over\n canceled io commands, dropping the default I/O scheduler, and a batch\n of selftest additions\n\n - blk-iocost flush cost support and zone append accounting\n\n - rust block fixes for Send/Sync bounds on GenDisk and TagSet, and\n import style cleanups\n\n - Atomic write fixes capping size by the PI buffer constraints and\n failing short atomic pins\n\n - Skip the redundant flush for O_DSYNC direct writes, and only use\n REQ_FUA when the device supports it\n\n - Store GPT attributes as a raw value\n\n - Remove support for swapping loop fds\n\n - Various other fixes and cleanups all over\n\n* tag \u0027for-7.4/block-20261021\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux: (144 commits)\n block: restore the iterator when rejecting a misaligned bio\n blk-mq: clear stale inactive flag on hctx reuse\n block, bfq: initialize active lists for all actuators\n zloop: print device that had errors\n ublk: pin module while release work is pending\n blk-mq: drop the tag_set argument from blk_mq_free_rq_map/tags\n blk-mq: share one tags_srcu instance across all tag sets\n blk-iocost: fix stale comment in ioc_rqos_throttle()\n blk-iocost: account zone append completions in latency stats\n blk-iocost: charge zone appends as writes\n blk-iocost: add flush cost support with the flushiops model parameter\n ublk: use global index for reported zones\n selftests: ublk: add test for going live over canceled io commands\n selftests: ublk: stop a batch thread when PREP_IO_CMDS fails\n selftests: ublk: move the control command helpers into ctrl.c\n ublk: refuse to go live after an io command was canceled\n ublk: let STOP_DEV cancel the server\u0027s commands before its release\n ublk: allow a NULL io-\u003ecmd in the cancel callback\n ublk: reset the FETCH round under ub-\u003emutex\n ublk: reset the FETCH round in release also without a disk\n ...\n" }, { "commit": "fa899d500a0e1eb1ebe25246eaa718f78768c308", "tree": "c2d0d9d0709d6553b82ddb2c5d49c24899ea3d28", "parents": [ "696e75b3a616649cf50a63b1d7b816c8e31b235c", "ecb6817b769fd7d71af2c9f446188649020b2e53" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 13:43:13 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 13:43:13 2026 -1000" }, "message": "Merge tag \u0027for-7.4/io_uring-20261021\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux\n\nPull io_uring updates from Jens Axboe:\n \"The bulk of this is a big robustness pass over cancelation, io-wq,\n timeouts, and poll. Outside of that:\n\n - Large series from Josef hardening the cancelation, io-wq, timeout,\n poll, and wait paths. Fixes for lost wakeups and lost cancels as\n io-wq arms poll/timeouts, work stranding on worker exit, CQE32\n resize handling, napi entry timeouts, and a pile of smaller\n correctness issues across the board\n\n - Rework of how io-wq posts completions, posting from the last\n request reference and dropping the request file before the\n completion, and running ring release cancelations synchronously -\n canceling and waiting for all in-flight requests and dropping\n registered files and buffers at release time\n\n - Don\u0027t charge the SQ/CQ rings or provided buffer rings to\n RLIMIT_MEMLOCK, which the region API conversion had started doing\n\n - Split io_uring_cmd_set_res() out from io_uring_cmd_done() so a\n command can set the result from its -\u003eend_io() handler, used by\n nvme\n\n - CQE32 ring fixes for the free entry check, aux CQE big_cqe zeroing,\n and the dummy skip CQE\n\n - Timeout fixes for sequence handling and multishot updates\n\n - net fixes for MSG_TRUNC buffer overconsumption and keeping recv\n buffer select length within MAX_RW_COUNT\n\n - Wake real-time waiters from hard interrupt context\n\n - Don\u0027t spin on local work an exiting task can\u0027t run, reachable by an\n unprivileged user\n\n - Various other fixes and cleanups\"\n\n* tag \u0027for-7.4/io_uring-20261021\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux: (75 commits)\n io_uring: end the drain when the drain request completes\n io_uring/futex: return a wait\u0027s data to the cache when it fails to arm\n io_uring/wait: wake real-time waiters from hard interrupt context\n io_uring/waitid: return -EAGAIN for a non-blocking pidfd\n io_uring/net: keep recv buffer select length within MAX_RW_COUNT\n io_uring/waitid: prevent cancel reference wrap\n io_uring/poll: don\u0027t loop on HUP with multiple references\n io_uring/timeout: don\u0027t lose a cancel as io-wq arms a timeout\n io_uring/timeout: don\u0027t flush with the sequence behind the last flush\n io_uring/timeout: don\u0027t put a sequence target behind the last flush\n io_uring/poll: avoid retry wakeup loss when dropping ownership\n io_uring: look up the file before queueing to io-wq\n io_uring/timeout: don\u0027t end a linked timeout with 1\n io_uring/timeout: no ABS update of multishot timeouts\n io_uring/net: don\u0027t retry recv on uncommitted buffers\n io_uring: don\u0027t pass restart error codes to userspace\n io_uring/openclose: keep the lock in io_pipe_fixed()\n io_uring/sqpoll: let the thread sleep on disabled rings\n io_uring/kbuf: handle index wrap in last buffer check\n io_uring/zcrx: fix buffer offsets in areas above 4GB\n ...\n" }, { "commit": "696e75b3a616649cf50a63b1d7b816c8e31b235c", "tree": "bfa8df82e9743a004a54cbeef00fb28b7a2be685", "parents": [ "5b0764a53235d3c77e1ed674e836e1b3fe1a4b1f", "334714e4bdf8868c17a7650a7502ba1c90a8721f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 13:40:26 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 24 13:40:26 2026 -1000" }, "message": "Merge tag \u0027for-7.4/dm-changes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm\n\nPull device mapper updates from Mikulas Patocka:\n \"dm:\n - fix a bug in dm_accept_partial_bio that broke dm-writecache\n in persistent-memory mode\n - use assign_bit()\n\n dm-vdo:\n - fix misbehavior on invalid metadata\n\n dm-crypt:\n - use memzero_explicit\n - reject malformed keys\n - allow sector size up to page size\n\n dm-delay:\n - advertise flush support if the user wants to delay flushes\n\n dm-writecache:\n - reduce per-block metadata overhead by 8 bytes\n - report I/O error when flush failed\n - fix a quirk in statistics\n - fix a crash if we attempt to use a non-dax device\n - fix uncommitted_blocks underflow\n - fix REQ_FUA processing\n\n dm-verity:\n - add the option DM_VERITY_VERIFY_ROOTHASH_SIG_FORCE\n - clear LSM integrity state on suspend\n\n dm-thin:\n - remove unnecessary locking in pool_map\n\n dm-mpath:\n - small refactoring of the historical service time path selector\n\n dm-snapshot:\n - fix crash if dm_io_client_create fails\n - make the chunk list being sorted by the chunk number\n\n dm-bufio:\n - fix non-working memory limit\n - fix a race leading to an unsigned integer underflow\n - clean-up cache limit reading\"\n\n* tag \u0027for-7.4/dm-changes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm: (29 commits)\n dm-verity: clear LSM integrity state on suspend\n dm-bufio: clean-up cache size reading\n dm-bufio: fix a race leading to an unsigned integer underflow\n dm-bufio: fix non-working memory limit\n dm-snapshot: make the chunk list sorted by the chunk number\n dm-snapshot: fix crash if dm_io_client_create fails\n dm-crypt: allow encryption sector size up to PAGE_SIZE\n dm-mpath: check values in hst_status while holding spinlock\n dm-mpath: standardize repeat_count handling in the HST path selector\n dm-mpath: streamline setup work in the HST path selector\n dm-writecache: fix REQ_FUA processing\n dm-writecache: fix uncommitted_blocks underflow\n dm-writecache: fix a crash if we attempt to use non-dax device\n dm-writecache: fix a quirk in statistics\n dm-writecache: report I/O error if flush failed\n dm: fix a bug in dm_accept_partial_bio\n dm thin: Remove unnecessary locking from pool_map()\n dm-verity: add DM_VERITY_VERIFY_ROOTHASH_SIG_FORCE\n dm: use assign_bit() where applicable\n dm-writecache: Reduce metadata memory use by 8 bytes per cache block\n ...\n" }, { "commit": "5b0764a53235d3c77e1ed674e836e1b3fe1a4b1f", "tree": "61666e82efa4901ddb00101ec9d36bab2d0b6662", "parents": [ "17bb0e2f6c8043f70a693a5f3797471cbed354c8", "fad06cfaf385787b9ffa2f73f049d42dbe1de57f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 18:29:02 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 18:29:02 2026 -1000" }, "message": "Merge tag \u0027drm-next-2026-10-21\u0027 of https://gitlab.freedesktop.org/drm/kernel\n\nPull drm updates from Dave Airlie:\n \"Highlights:\n\n - core: a lot of atomic refactoring in progress, panic got split into\n a core/helpers model\n\n - amdgpu: enables HDMI 2.1 FRL and other good things finally, UAlink\n over Ethernet support\n\n - xe: has a bunch of CRI support, ras error for bad vram, memory\n offlining support.\n\n - msm: enables a bunch more GPUs.\n\n Otherwise it\u0027s a the usual mountain of stuff all over the place.\n Details:\n\n rust:\n - I/O tree shared with driver-core\n - DMA tree shared with driver-core\n - allow aux registration data closures to return covariant sub-fields\n - Implement Send and Sync for MapleTree\n - add pci resource flags and IORESOURCE_MEM_64\n\n drm/rust:\n - add dma_fence abstraction\n - init DRM registrations and their data in place\n - drop unused flags argument to registration\n\n vgaarb:\n - rework API to pass a private ptr instead of pci device\n\n sound:\n - adapt to omapdrm changes\n\n gem:\n - add callback for handle count going to 0\n\n gpusvm:\n - share one HMM fault and keep single mappings inline\n\n pagemap:\n - Prevent CPU stalls during unbounded pagemap teardown\n\n dma-fence:\n - fix docs\n\n vga_switcheroo:\n - disconnect from fbcon\n - update fbcon from within fbdev emulation\n\n atomic:\n - move DRM from state reset callbacks to atomic_create_state\n - remove drm_simple_encoder_init\n\n panic:\n - split into core and helpers\n\n buddy:\n - improve dirty tracking\n\n clients:\n - improve vmap handling\n - fbdev: Move helpers from drm_kms_helper.ko to drm_client_lib.ko\n\n display:\n - export HDMI SCDC status data via debugfs\n - rework SCDC for better HDMI 2.0 support\n - dp/mst: improve DPCD compliance\n\n edid:\n - parse AMD VSDB\n - parse ALLM/VRR capabilities\n - support detecting panel size\n\n log:\n - add drm_warn_ratelimited\n\n sched:\n - cleanup interface\n - add missing locking\n - fix run-queue cleanup\n - fix locking\n\n sysfb:\n - remove obsolete quirk for Lenovo D330\n - fix panel orientation for non-native display modes\n - drop drm_class_device_register\n\n colorop:\n - provide DRM_COLOR_OP_FIXED_MATRIX\n\n bridge:\n - analogix: Support eDP lane mapping\n - ti-sn65dsi83: Support LVDS Channel B on SN65DSI84\n - Select DRM_PANEL_BRIDGE for various drivers that require it\n - add chrontel ch7218a support\n\n panel:\n - panel-edp: Support MNE007QS3-F, TM140VDXP15, and KD116N36-30NB-A001\n - samsung-s6d16d0: Use mipi_dsi_*_multi() functions\n - support Ilitek ILI7836A OLED plus DT bindings\n - support Novatek NT36532 plus DT bindings\n - convert several drivers to managed cleanup\n - fix Kconfig selections\n - edp:\n - Add support for BOE NV140FHM-T0A\n - Support CSOT MNE007QB1-1\n - NV140WU2-M70\n - ebbg-ft8719: Fix MODULE_LICENSE() string; Improve initialization\n - samsung: Share test-key helpers\n - ilitek-ili9882t: Support Ilitek IL79600A plus DT bindings\n - simple: Support Truly TFT320240-229-E plus DT bindings; Support BOE\n DV215FHM-R01 plus DT bindings\n - Refactor struct drm_panel to contain struct drm_bridge plus fallout\n in various panel drivers\n - Add support for BOE Novatek NT51021, Retroid Pocket 6, Raydium\n RM69220 DDIC panels, Sharp LQ138P1JX61 eDP, BOE NV140FHD-N43, AUO\n B140HAN04.0, AUO 0x0db3, panels.\n\n amdgpu:\n - use AMD VSDB for freesync\n - implement YUV-to-RGB with fixed-matrix colorop\n - enable FRL for HDMI\n - HDMI 2.1 freesync support\n - HDMI 2.1 ALLM support\n - HDMI 2.1 VRR support\n - UALoE (UALink over Ethernet) support\n - add syncobj_points to userq signal ioctl\n - drop unused kunit tests\n - NBIO/GC/MMHUB/SMU updates/fixes\n - GPU spatial partitioning updates\n - display kunit fixes\n - userq fixes\n - RGB quantization fixes\n - DC RMCM refactor\n - DP MST fixes\n - USB4 fixes\n - add new trace events\n - Rework display instance handling\n - stack frame size fixes for various compilers/configs\n - VCN 4/5 reset fixes\n - freesync updates\n - cursor refactor\n - Fix direct scanout alpha on some DRM_FORMATs\n - Expand Mac reserved memory workaround\n - Make runtime pm more fine grained\n\n amdkfd:\n - updates and fixes\n - GC 10 CU occupancy support\n\n radeon:\n - eDP fix for DCE3.2 iMacs\n\n xe:\n - add drm_ras netlink error event support\n - add memory page offlining support\n - introduce error threshold to drm_ras\n - fix stale GTT mappings on unmap\n - reject page faults for non-page fault mode scratch VM\n - enable CRI package and VRAM temperatures\n - introduce cold reset recovery\n - handle CRI+ power interval encoding\n - VF migration for multi-queue\n - handle exec queue teardown after hot unplug\n - alerts and controller enabling modifications\n - use IBCv3 on PTL\n - VRAM health check\n - report GT TDR and VM rebind faults using SIGID\n - add multi_queue_active_lrca debugfs\n - shrinker: Runtime PM reference for non-system memory\n - guc: Add simple KLV decoder helpers\n - debugfs: Expose per-engine idle status\n - Keep walking on SVM eviction failure\n - Nuke PTs only after unlinking contested VMAs\n - limit sg segment size to PAGE_SIZE on Xen PV\n - keep VF LMEM bar size low if no VFs\n - CPU binds and ULLS on migration queue\n - New PTL PCI ID\n - Enable PXP for NVL-S\n - Do not dma_fence_put zero fences in err_out path\n - Refresh TTM LRU on SVM prefetch\n - export device UID in sysfs\n\n i915:\n - rename GEN6_PCODE_DATA to match spec\n - fix incorrect RCU teardown order\n - fix potential UAF in command parsing\n - avoid WARN splat during RPS boosting race\n - use simpler min functions\n - Fixes to make i915 work well with PREEMPT_RT\n\n i915/display:\n - Enable CMRR (Content Match Refresh Rate) in fixed-RR VRR path\n - Switch DG2 MPLL to DPLL framework\n - DP-HDMI PCON DSC fixes\n - limit invalid joiner combinations\n - CDCLK related fixes and refactor around PCODE integration\n - Gate UHBR SST SDP splitting on sink caps\n - add HDMI TMDS audio bandwidth check\n - vswing/preemph override\n - enable AS SDP Skip frames\n - Handle negative configuration index on DP link caps for robustness\n - Preparation for enabling SDR plane color pipeline\n - An eDP quirk for HP Pavilion Plus\n - Introduce PME (Power Management Event) support on display hotplug\n - Handle VSC SDP revision 7 in unpack\n\n msm:\n - CI:\n - Dropped sc7180 trogdor lazor from the CI\n - Core:\n - Fixed msm_ioremap for resources without a name\n - Changed msm.separate_gpu_kms to default to auto selection\n - GPU:\n - Enable CLX (Current Limit eXtension) for gen8 to avoid exceeding\n limits on CX/GX rails\n - New GPUs: a830 (Pakala), a845 (Maili), a850 (Hawi), x2-85\n (Mahua)\n - Fix VBIF halt mask on a306, which was preventing runpm suspend\n - Enable THP support for GEM buffers\n - Add modparam to disable waiting on fences in shrinker\n - Drop use of drm_prime_sg_to_page_array()\n - a5xx: don\u0027t read the GPMU registers on GPUs without a GPMU\n - a2xx/a3xx/a5xx: hangcheck progress detection\n - a6xx: gmuwrapper runpm fix\n - Calculate reported GMEM size based on active slices\n - Split a6xx/a7xx/a8xx catalog\n - DP:\n - Picked up some preparation patches for the MST support\n - Fixed reported status of the link training\n - DPU:\n - Fixed CRTC bandwidth computation\n - Fixed DSC programming\n - Fixed encoder disablement path\n - DSI:\n - Fixed VM leak in error path\n - Indention fix\n - MDP5:\n - Added MSM8952 configuration\n - Dropped incorrect cursor pipe on MSM8976/56\n - HDMI:\n - Small fixes\n\n nouveau:\n - improve runtime PM on R570 GSP firmware\n - various fixes throughout the driver\n - dispnv50: support 2.147 GHz pixel clock in GB20x\n\n nova:\n - add initial uapi concept\n - add initial PRAMIN access support\n - add GpuMm centralized memory manager\n - add GPU VM and BAR1 support\n - add GPU interrupts and GSP events support\n - GSP messaging fixes\n\n tyr:\n - use bitfield!\n - zero unsupported and newly added GPU info fields\n - limit doorbell array to 17 entries\n\n exynos:\n - FIMD fixes\n - Fix clock leak on resume error path\n - Fix Sparse warnings by adding missing __iomem annotation\n - VIDI cleanup\n - Replace kmalloc() and copy_from_user() with memdup_user()\n\n amdxdna:\n - fix BO handling\n - Support AIE2 rev 9\n - Fix UAF access in scheduler fences\n - Update workqueue interface\n - expose busy time via fdinfo\n\n ast:\n - support 256-byte EDID\n\n hyperv_drm:\n - remove support for pre win10 hosts\n\n komeda:\n - fix GLB_CORE_ID usage\n\n omap:\n - report HDMI hotplug events to ASoC HDMI codec\n\n panthor:\n - provide gpu_cache_flush tracepoint\n - improve dma_fence signalling latency\n - improve locking\n - export scheduling information via debugfs\n - Validate user-space input against firmware limits\n\n qaic:\n - reject BOs that exceed maximum page count\n - add missing include statements\n\n verisilicon:\n - fix hardware cursor offsets\n\n vkms:\n - implement YUV-to-RGB with fixed-matrix colorop\n\n gma500:\n - avoid unsupported ARGB formats in primary plane\n\n hibmc:\n - handle vblank interrupts correctly\n\n ivpu:\n - add DRM_IVPU_CAP_CMDQ_SET_PRIORITY\n - support command-queue priority ioctl\n - Simplify NULL-pointer handling in cleanup code\n\n arcpgu:\n - replace simple-display pipeline with regular atomic helpers\n\n aspeed:\n - replace simple-display pipeline with regular atomic helpers\n\n gm12u320:\n - replace simple-display pipeline with regular atomic helpers\n\n imagination:\n - various improvement to firmware interaction\n - add job to pvr_job_submit_fw trace event\n\n mali-dp:\n - fix runtime PM leak\n\n mcde:\n - replace simple-display pipeline with regular atomic helpers\n\n p111:\n - replace simple-display pipeline with regular atomic helpers\n - drop unsupported alpha formats from primary plane\n\n rcar-du:\n - support Renesas R-Car V4H DSC\n - dsi: Support larger transfers with AXI memory\n - Support RZ/G3L SoC\n\n repaper:\n - replace simple-display pipeline with regular atomic helpers\n\n rockchip:\n - dsi: improve PHY timings\n\n ssd130x:\n - support Solomon SSD1351 OLED plus DT bindings\n - ssd133x: upgrade color format to RGB565\n - ssd132x: Set correct hardware window when clearing screen\n\n tve200:\n - replace simple-display pipeline with regular atomic helpers\n\n xen:\n - replace simple-display pipeline with regular atomic helpers\n\n v3d:\n - improve job handling under perfmon\n\n vc4:\n - reliably reset V3D\n - drop brcm,vc4-v3d compatible\n\n virtio:\n - fix damage handling\n - Support ARGB8888 for virtio primary planes.\n\n host1x:\n - Support partitioning\n\n imx:\n - Replace simple-display with regular atomic helpers\n\n mxsfb:\n - Support bus formats plus DT bindings\n\n tegra:\n - improve syncobj handling on submit\n\n panfrost:\n - add Mali-G68 support\n - improve GPU reset handling\n\n rockchip:\n - add HDMI 2.0 support to dw-hdmi-qp\n - improve HPD handling\"\n\n* tag \u0027drm-next-2026-10-21\u0027 of https://gitlab.freedesktop.org/drm/kernel: (2324 commits)\n drm/adp: Switch to drm_atomic_helper_connector_create_state\n drm/malidp: Convert to atomic_create_state\n drm/vc4: Switch to drm_atomic_helper_connector_create_state\n drm/sysfb: Switch to drm_atomic_helper_connector_create_state\n drm/solomon: ssd130x: Switch to drm_atomic_helper_connector_create_state\n drm/imx: ipuv3: Switch to drm_atomic_helper_connector_create_state\n drm/hyperv: Switch to drm_atomic_helper_connector_create_state\n drm/bridge: megachips: Switch to drm_atomic_helper_connector_create_state\n drm/bridge: lontium-lt8912b: Switch to drm_atomic_helper_connector_create_state\n drm/arm: komeda: Switch to drm_atomic_helper_connector_create_state\n drm/appletbdrm: Fix incorrect error message on encoder attach failure\n drm/sun4i: hdmi: Convert to drmm_connector_hdmi_init()\n drm/rockchip: rk3066_hdmi: Advertise HDMI 1.4 capabilities\n drm/bridge: lontium-lt9611: Advertise HDMI 1.4 capabilities\n drm/bridge: ite-it66121: Advertise HDMI 1.2 capabilities\n drm/bridge: ite-it6263: Advertise HDMI 1.3 capabilities\n drm/bridge: ite-it6263: Drop redundant .mode_valid hook\n drm/bridge: inno-hdmi: Advertise HDMI 1.2 capabilities\n drm/bridge: adv7511: Advertise HDMI 1.2 capabilities\n drm/sched: Document entity-\u003estopped is protected by entity-\u003elock\n ...\n" }, { "commit": "17bb0e2f6c8043f70a693a5f3797471cbed354c8", "tree": "d330ca8bd3d9515c7639dacd8d45458224349c04", "parents": [ "4da9dedf3fc59137fd86d664693776aa38cb97f5", "f4319f548f7d8cb595ac1c91bfd459876399eeb3" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 15:34:47 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 15:34:47 2026 -1000" }, "message": "Merge tag \u0027pci-v7.4-changes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/pci/pci\n\nPull PCI updates from Bjorn Helgaas:\n \"Enumeration:\n\n - Set supported_speeds in set_pcie_port_type() so sparc64 and\n powerpc, which call it via of_create_pci_dev() instead of the usual\n pci_setup_device(), correctly set the supported PCIe link speeds\n (Stian Halseth)\n\n - When pcie_set_mps() changes MPS, update the value in the saved\n state so a subsequent restore doesn\u0027t restore an invalid value\n (Niklas Cassel)\n\n - Skip Target Speed quirk on clamped ports with no link (Maciej W.\n Rozycki)\n\n Driver binding:\n\n - Assume control of portdrv-related features only when portdrv is\n enabled, since we can\u0027t use them without portdrv (Kuppuswamy\n Sathyanarayanan)\n\n - Centralize feature ownership checking so code only needs to check\n \u0027host-\u003enative_X\u0027 and doesn\u0027t need to also check \u0027pcie_ports_native\u0027\n (Kuppuswamy Sathyanarayanan)\n\n Error handling:\n\n - Fix leaks when ACPI APEI/GHES error events overflow the kfifo or\n mention a device that no longer exists (Priyank Rathod)\n\n - Fix aer_process_err_devices() leak when a device is recorded as an\n error source purely by being mentioned in the Root Port Error\n Source and the device is inaccessible or logged only masked errors\n (Priyank Rathod)\n\n ASPM:\n\n - Disable ASPM when drivers request that, even if the OS doesn\u0027t own\n ASPM; otherwise drivers do it on their own, which is worse (Ilpo\n Järvinen)\n\n Power management:\n\n - Align hibernate poweroff flow with suspend flow for bridges so they\n can be powered down at hibernate as they are for suspend (Mario\n Limonciello)\n\n - Restore BARs after powering up during enumeration to fix a\n regression on devices that don\u0027t preserve state in D3hot (Keng-Yu\n Lin)\n\n - Avoid D3 on PLX PEX 8532/8533/8548 downstream ports, where putting\n them in D3hot takes down the whole switch (Imre Kaloz)\n\n Power control:\n\n - Add GPIO driver for Toshiba TC9563 embedded GPIO controller (Alex\n Elder)\n\n - Add DT documentation and pwrctrl driver support for TC9563 embedded\n GPIO controller (Lorenzo Bianconi)\n\n - Switch the tc9563 per-port reset to use the GPIO descriptor API\n instead of direct regmap accesses (Lorenzo Bianconi)\n\n - Only destroy devices created by pwrctrl core, so that when removing\n a PCIe controller driver that uses pwrctrl, we don\u0027t remove devices\n populated by another mechanism (Shawn Lin)\n\n - Power off child devices on power-on failure (Lorenzo Bianconi)\n\n PCIe native device hotplug:\n\n - Make the \u0027pciehp_poll_mode\u0027 parameter read-only to prevent changes\n via sysfs, which can cause errors when unbinding (Runyu Xiao)\n\n Virtualization:\n\n - Read SR-IOV VF Revision ID and Subsystem ID from VF instead of\n assuming they\u0027re the same as VF 0; they may differ (Logan Odell)\n\n - Add ACS quirk for Pericom PI7C9X2G304 switches (Hans de Goede)\n\n Peer-to-peer DMA:\n\n - Add Zhaoxin KX-6000, KH-40000, KX-6000G, KX-7000, and KH-50000 host\n bridges to allowlist (LeoLiu-oc)\n\n - Add Alibaba T-HEAD Yitian 710 host bridge to allowlist (Feng Tang)\n\n - Add Intel Haswell client host bridge to allowlist (Scott Lee)\n\n - Intel Xeon E3/E5/E7 0x6f00 host bridge to allowlist (kai zhang)\n\n - Fix handling of errors in pci_p2pdma_add_resource() to avoid (a)\n unmapping a BAR if registering another fails and (b) use after free\n of p2p_pgmap (Leon Romanovsky)\n\n - Wait for RCU readers before freeing state to avoid use-after-free\n of pdev-\u003ep2pdma (Leon Romanovsky)\n\n - Restrict pci_p2pmem_find_many() to providers backed by a pool (Leon\n Romanovsky)\n\n - Safely terminate ACS redirect lists to avoid out-of-bounds access\n to the buffer (Leon Romanovsky)\n\n - Silence \u0027Host bridge not in P2PDMA whitelist\u0027 warnings unless\n caller, e.g., pci_p2pmem_find_many(), requests \u0027verbose\u0027 (Leon\n Romanovsky)\n\n Sysfs:\n\n - Return -ENODEV or -EIO sysfs \u0027label\u0027 or \u0027acpi_index\u0027 attributes\n when Device Name _DSM fails, not -1, which is interpreted as -EPERM\n (Krzysztof Wilczyński)\n\n - Return valid sysfs \u0027acpi_index\u0027 attribute even if the Device Name\n _DSM returned an invalid \u0027label\u0027 (Krzysztof Wilczyński)\n\n - Expose sysfs \u0027acpi_index\u0027 and \u0027label\u0027 based on whether the Device\n Name _DSM returns valid data, not merely whether the _DSM is\n implemented (Krzysztof Wilczyński)\n\n - Avoid out-of-bounds reads of the label returned by the Device Name\n _DSM, which is in UTF-16 characters, not bytes (Krzysztof\n Wilczyński)\n\n - Reject unaligned resource I/O port accesses, which can oops on\n arm64 (Deepanshu Kartikey)\n\nEndpoint framework:\n\n - Pass the correct physical and virtual endpoint function numbers\n when setting translation of inbound memory windows (Koichiro Den)\n\n - Make embedded doorbell IRQ non-shared, since currently only the\n first EPF can allocate doorbells (Koichiro Den)\n\n - MSI doorbells currently target the first EPF attached to an EPC;\n let other EPFs try the embedded doorbell instead of failing when\n they can\u0027t use the MSI doorbell (Koichiro Den)\n\n - Serialize scan of vNTB virtual PCI bus with other PCI topology\n changes (Koichiro Den)\n\n - Manage vNTB lifetimes to avoid leaking virtual devices and buses\n and allow removal (Koichiro Den)\n\n - Track vNTB link state from both sides so both see the same\n effective link state (Koichiro Den)\n\n - Configure vNTB MSI-X when supported to avoid IOMMU faults and\n failure to deliver doorbell interrupts on RC (Koichiro Den)\n\n APM X-Gene PCIe controller driver:\n\n - Use devm for clocks so they\u0027re automatically disabled, unprepared,\n and released if errors happen during probe (Yuho Choi)\n\n ASPEED PCIe controller driver:\n\n - Fix clk and PHY leaks in aspeed_pcie_port_init() error paths (Liu\n Zhenlong)\n\n Broadcom iProc PCIe controller driver:\n\n - Expose devm_pci_alloc_host_bridge_release() so drivers can share a\n devm release function even if they don\u0027t need the device tree\n parsing done by devm_pci_alloc_host_bridge() (Bjorn Helgaas)\n\n - Request only the memory window from BCMA Enumeration ROM and warn\n if it doesn\u0027t match the one in DT, which fixes an iproc-bcma probe\n failure (Semih Baskan)\n\n Broadcom STB PCIe controller driver:\n\n - Replace bool properties for each SoC configuration with a u32\n bitvector and a BFLAG() helper (Jim Quinlan)\n\n - Use a similar BQUIRK() helper to test various SoC quirks (Jim\n Quinlan)\n\n Cadence PCIe controller driver:\n\n - Remove device links to PHY, which are redundant because the PHY\n core itself adds them (Vladimir Oltean)\n\n - Return error (not success) from cdns_plat_pcie_probe() if\n pm_runtime_get_sync() or cdns_pcie_ep_setup() failed (Vladimir\n Oltean)\n\n - Correct the driver data pointer usage; previously .probe() stored\n \u0027struct cdns_plat_pcie *\u0027, but .shutdown() used the pointer as\n \u0027struct cdns_pcie *\u0027, resulting in accessing garbage (Linmao Li)\n\n ESWIN PCIe controller driver:\n\n - Publish the platform driver MODULE_DEVICE_TABLE so the driver can\n be autoloaded when built as a module (Pengpeng Hou)\n\n Freescale i.MX6 PCIe controller driver:\n\n - Fix resource and pwrctrl device leaks .probe() (Zhijian Han)\n\n - Improve i.MX95 Gen3 link stability by changing MPLLB_BANDWIDTH from\n default 120 to 140 (Richard Zhu)\n\n - Use dev_err_probe() in host init error path to silence\n -EPROBE_DEFER messages (Alexander Stein)\n\n - Avoid dereferencing NULL clock names when \u0027clocks\u0027 includes more\n phandles than \u0027clock-names\u0027 has names (Rudi Heitbaum)\n\n - Add suspend_poweroff flag so platforms like i.MX that power off RC\n controllers during suspend can enter L2 so endpoints can get\n PME_Turn_Off notifications before power loss (Richard Zhu)\n\n Freescale Layerscape PCIe controller driver:\n\n - Enable PROBE_PREFER_ASYNCHRONOUS to reduce probe time of the four\n controllers on LX2160A (Vincent Jardin)\n\n Intel VMD host bridge driver:\n\n - Flush DMA writes before handling MSI on Meteor Lake: MSI may arrive\n before write has completed, resulting in an nvme 30 second stall\n before a QID timeout and possibly other similar problems (Rickey\n Bartlett)\n\n - Flush DMA writes before handling MSI on Arrow Lake (Vladimir\n Nedoshivin)\n\n Marvell Aardvark PCIe controller driver:\n\n - Disable PHY on probe failures (Myeonghun Pak)\n\n Marvell MVEBU PCIe controller driver:\n\n - Refcount child OF nodes during .probe() to make a concurrent OF\n overlay removal safe (Krzysztof Kozlowski)\n\n MediaTek PCIe controller driver:\n\n - Find INTx DT property by \u0027interrupt-controller\u0027 name instead of\n assuming it\u0027s the first child node (Zhengping Zhang)\n\n MediaTek PCIe Gen3 controller driver:\n\n - Fix a 64-bit type truncation in mtk_pcie_set_trans_table() to avoid\n issues with windows above or larger than 4GB (Sreeraj S Kurup)\n\n NVIDIA Tegra264 PCIe controller driver:\n\n - Fix the Link Capabilities offset so we read the correct register\n (Bjorn Helgaas)\n\n Qualcomm PCIe controller driver:\n\n - Only collect reset GPIOs from PCI bridge DT nodes to avoid stealing\n resets used by downstream devices like USB controllers (Christopher\n Obbard)\n\n - Block accesses to downstream devices on link down to reduce a storm\n of Completion Timeout AER interrupts (Qiang Yu)\n\n - Skip system suspend/resume for firmware-managed PCIe, where\n firmware manages clocks, regulators, resets, etc (Mrinmay Sarkar)\n\n - Honor IOMMU provider\u0027s #iommu-cells in qcom_pcie_config_sid_1_9_0()\n (Manivannan Sadhasivam)\n\n - Deinitialize endpoint on remove (Guangshuo Li)\n\n - Treat Root Port error recovery as successful even if link doesn\u0027t\n come up after reset because the device was hot-unplugged (Konrad\n Dybcio)\n\n - Skip unnecessary iMSI-RX initialization if DT \u0027msi-map\u0027 is present,\n indicating an external MSI controller (Ayiluri Naga Rashmi)\n\n Renesas R-Car PCIe controller driver:\n\n - Limit Max_Read_Request_Size to 256 to avoid hardware erratum (Marek\n Vasut)\n\n - Support PERST# via reset subsystem as well as the existing GPIO\n support to prepare for R-Car Gen5 SoCs (Marek Vasut)\n\n - Add DT and driver support for the R-Car Gen 5 X5H (R8A78000) PCIe\n Gen 4 core (Marek Vasut)\n\n - Add Application/Local register reset DT description and driver\n support for both host and endpoint mode (Marek Vasut)\n\n - Add PM ops so controller works after suspend/resume (Marek Vasut)\n\n Renesas RZ/G3S PCIe controller driver:\n\n - Disable refclk on probe failure (Lad Prabhakar)\n\n - Propagate platform_get_irq_byname() errors so probe deferral works\n correctly (Lad Prabhakar)\n\n - Tear down INTx handlers if subsequent initialization fails (Lad\n Prabhakar)\n\n - Add RZ/G3L (R9A08G046) DT and driver support (Biju Das)\n\n Rockchip PCIe controller driver:\n\n - Limit host and endpoint controllers to 2.5 GT/s since 5.0 GT/s is\n unsafe per Rockchip (Geraldo Nascimento)\n\n Synopsys DesignWare PCIe controller driver:\n\n - Set DMA_BYPASS bit in outbound IATU CTRL2 register to avoid data\n corruption if the iATU translates DMA engine transactions (Sumit\n Kumar)\n\n - Use FIELD_PREP() to remove need for *_SHIFT definitions (Hans\n Zhang)\n\n TI DRA7xx PCIe controller driver:\n\n - Remove device links to PHY, which are redundant because the PHY\n core itself adds them (Vladimir Oltean)\n\n - Fix optional clock leak when .probe() fails by using\n devm_clk_get_optional_enabled() (Felix Gu)\n\n TI Keystone PCIe controller driver:\n\n - Remove device links to PHY, which are redundant because the PHY\n core itself adds them (Vladimir Oltean)\n\n UltraRISC PCIe controller driver:\n\n - Allow DWC drivers to skip outbound iATU setup if they don\u0027t need\n translation between CPU and PCI addresses (Xincheng Zhang)\n\n - Skip MEM outbound iATU setup on DP1000 (Xincheng Zhang)\n\n Xilinx Versal CPM PCIe controller driver:\n\n - Add DT and driver support for optional PERST# for use in warm reset\n scenarios (Sai Krishna Musham)\n\n Xilinx XDMA PCIe controller driver:\n\n - Fix device node reference leak in xilinx_pl_dma_pcie_init_irq_domain()\n (Wentao Liang)\"\n\n* tag \u0027pci-v7.4-changes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/pci/pci: (139 commits)\n PCI/pwrctrl: Power off child devices on power-on failure\n PCI/pwrctrl: Only destroy devices created by pwrctrl core\n PCI/pwrctrl: generic: Fix leaking array from of_regulator_bulk_get_all()\n PCI/pwrctrl: tc9563: Switch per-port reset to GPIO descriptor API\n PCI/pwrctrl: tc9563: Add GPIO auxiliary device support\n dt-bindings: PCI: toshiba,tc9563: Document embedded GPIO controller\n gpio: tc9563: Add support for the embedded GPIO controller\n PCI: qcom: Skip DWC MSI host initialization when DT \u0027msi-map\u0027 is present\n PCI: qcom: Ignore -ENODEV after Root Port reset\n PCI: qcom-ep: Deinitialize endpoint on remove\n PCI/sysfs: Reject unaligned resource I/O port accesses\n PCI: rcar-gen4: Add missing PM ops\n PCI: endpoint: pci-epf-vntb: Honor MSI-X selection\n PCI: endpoint: pci-epf-vntb: Use a local epf pointer in interrupt setup\n PCI: dwc: imx6: Use regmap_assign_bits() for conditional set/clear\n PCI: dwc: Describe DWC PCIe fields with full masks and FIELD_PREP()\n PCI: dwc: Rename pp-\u003eirq_domain to pp-\u003emsi_irq_domain\n PCI: dwc: Rename dw_pcie_allocate_domains() to dw_pcie_allocate_msi_domains()\n PCI: dwc: Correct PCIE_DW_PLAT_EP reference in Kconfig help\n PCI/ASPM: Disable ASPM when driver requests it\n ...\n" }, { "commit": "4da9dedf3fc59137fd86d664693776aa38cb97f5", "tree": "9470f80ec290e88346f39407a8669f187306e340", "parents": [ "906b6e1d8c782a8442b30bdf8b8992f5031ffc59", "20bfd25757659ff8229eeed6f048c76f9a11a4a3" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 14:48:26 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 14:48:26 2026 -1000" }, "message": "Merge tag \u0027iommu-updates-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/iommu/linux\n\nPull IOMMU updates from Joerg Roedel:\n \"Core:\n - Detect scatterlist length overflows and finalize deferred domain\n attachments before mapping MSI pages\n - Consolidate x86 MSI reserved-region handling and clean up internal\n DMA and SVA helpers\n\n AMD IOMMU:\n - Add IOMMU PerfOpt support, enabled by amdgpu for supported\n integrated GPUs in identity domains\n - Restrict forced identity mapping to GPUs that require it\n - Fix kdump device-table allocation and reuse, ATS configuration\n error handling, and an interrupt-remapping allocation leak\n - Clean up device probing and initialization\n - Add Vasant Hegde as an AMD IOMMU maintainer\n\n ARM SMMUv2:\n - Device-tree binding updates for Qualcomm Maili and Nord SoCs\n\n ARM SMMUv3:\n - Work around hardware integration issue on Google Tensor G5 SoCs\n where all DMA transactions appear as instruction fetches\n - Allow command queue size to be configured on the kernel\n command-line\n - Reduce queue sizes when running as a kdump kernel\n - Fix some pre-existing issues in the driver and kunit tests reported\n by Sashiko\n - Fix handling of Arm hardware errata relating to the contiguous hint\n when using SVA\n - Rework the TLB invalidation logic in preparation for enabling\n iommu-pt in future\n - Minor cleanups in preparation for improving support for kdump\n\n Apple DART:\n - Support device-tree DMA aperture specifications\n\n Broadcom:\n - Add BCM2712 IOMMU support for Raspberry Pi 5 display and multimedia\n devices, including the generic page-table format and shared TLB\n cache management\n\n Hyper-V:\n - Add a para-virtualized guest IOMMU driver with guest-managed\n stage-1 page tables and page-selective IOTLB invalidation\n\n Intel VT-d:\n - Enhanced IQE fault handling for batched multiple descriptors,\n - Optimization of page-table level calculation in\n compute_vasz_lg2_ss(),\n - Fixes for several pre-existing issues reported by Sashiko,\n - General cleanup and refinement\n\n RISC-V:\n - Report cache-coherency capability for coherent devices, enabling\n VFIO/iommufd use\n\n Samsung Exynos:\n - Support SysMMUs without BLOCK mode, fixing their enable sequence\n and TLB invalidation\n - Improve v7 fault diagnostics with transaction information\"\n\n* tag \u0027iommu-updates-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/iommu/linux: (69 commits)\n MAINTAINERS: Make Vasant Hegde AMD IOMMU maintainer\n iommu/hyperv: Make hv_iommu_device static\n iommu/hyperv: Add missing PCI dependency for the guest IOMMU driver\n iommu/amd: Don\u0027t allocate kdump device table from DMA32\n iommu/amd: Program device table when kdump reuse fails\n iommu/dma: Clean up redundant MSI cookie check\n iommu/dma: Catch scatterlist length overflows\n iommu/hyperv: Add page-selective IOTLB flush support\n iommu/hyperv: Add para-virtualized IOMMU support for Hyper-V guest\n iommu/x86: Add architectural MSI reserved region helper\n Drivers: hv: Add logical device ID registry for vPCI devices\n hyperv: Introduce new hypercall interfaces used by Hyper-V guest IOMMU\n iommu: Make iommu-dma helpers private\n iommu/arm-smmu-v3: Don\u0027t rb_erase() a never-inserted stream node\n iommu/arm-smmu-v3: Add Q_POS() macro\n iommu/arm-smmu-v3: Add arm_smmu_attach_release()\n iommu/arm-smmu-v3: Disable the impl before disabling the SMMU on shutdown\n iommu/arm-smmu-v3: Populate the tlbi at the top of the call chain\n iommu/arm-smmu-v3: Precompute the invalidation commands\n iommu/arm-smmu-v3: Keep track in arm_smmu_invs if range invalidation is used\n ...\n" }, { "commit": "906b6e1d8c782a8442b30bdf8b8992f5031ffc59", "tree": "a8284e728cae55deb17801e8eb5bf01add5f1477", "parents": [ "26344c0dd32af8790d8474d233619db825441138", "4733f2966433b7f926f70c9dc461c33cd5c10835" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 14:31:51 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 14:31:51 2026 -1000" }, "message": "Merge tag \u0027dma-mapping-7.4-2026-10-21\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mszyprowski/linux\n\nPull dma-mapping updates from Marek Szyprowski:\n\n - several SWIOTLB initialization cleanups (Aneesh Kumar K.V, Francesco\n Valla)\n\n - exact page allocation for DMA pages (Qingfang Deng)\n\n - tools/dma build fixes (Sasha Levin)\n\n - minor fixes for various corner cases (Marek Szyprowski, Leon\n Romanovsky) and code cleanup (John Garry)\n\n* tag \u0027dma-mapping-7.4-2026-10-21\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mszyprowski/linux:\n dma-debug: Skip cacheline tracking for MMIO mappings\n tools/dma: fix building from the top level with O\u003d\n tools/dma: fix building with O\u003d\n dma: swiotlb: Track whether the pool size was explicitly set\n dma: swiotlb: Consolidate slab rounding\n dma: swiotlb: Rename swiotlb_size_or_default()\n dma: swiotlb: use KiB in restricted pool allocation log\n dma-direct: Restore arch_dma_alloc() for the DMA_ATTR_NO_KERNEL_MAPPING case\n MAINTAINERS: Add files to the DMA MAPPING HELPERS entry\n dma-mapping: use exact allocation for DMA pages\n dma-mapping: rename dma_opt_mapping_size()\n" }, { "commit": "26344c0dd32af8790d8474d233619db825441138", "tree": "e0965df49f27418a3adee33643915220d042a618", "parents": [ "9f2516f45b7cfca237f4d8e1c91c1f307e295dc5", "076d7e989cb69f6ded7d60f2a080eb909930061b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 14:22:52 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 14:22:52 2026 -1000" }, "message": "Merge tag \u0027vfio-v7.4-rc1\u0027 of https://github.com/awilliam/linux-vfio\n\nPull VFIO updates from Alex Williamson:\n\n - Fix missing selftest \u003clibgen.h\u003e include for basename() to support\n non-glibc builds (Hisam Mehboob)\n\n - Add vfio selftest documentation covering the libvfio helper library\n and guidance for developers to aid in adding and understanding the\n framework (David Matlack)\n\n - Fix vfio cdev open path to prevent a second open from clobbering the\n vf_token or clearing the KVM reference. Add a selftest to avoid\n future recurrences (Alex Williamson)\n\n - Extend vfio selftest mix_and_match timeouts, in particular to account\n for systems where generated faults can induce heavy SMM load,\n delaying internal timeouts. Also extend timeout for execution via\n runner to account for various tests exceeding default 45s timeout\n (Alex Williamson)\n\n - Add tracking for non-reserved mappings into a vfio_dma object in\n order to optimize the tear-down paths where per-page tests can be\n entirely skipped. This resolves a soft lockup for large memory GPUs\n (Samuel Crossley)\n\n - Add vfio selftest driver for mlx5, providing another target for\n exercising DMA and interrupts against a physical device (Jason\n Gunthorpe)\n\n - Hardening against read-only region promotion, preserving vm_pgoff for\n unmap_mapping_range(), and reject non-shared MMIO mmaps as necessary\n through vfio-platform, vfio-fsl-mc, and vfio-cdx. These prevent\n future issues, though none are currently reachable (Abdifatah Suruur)\n\n - Fix 8-byte ioeventfd support, removing a static error test that was\n erroneously left in place when generalizing 8-byte io accesses (Li\n RongQing)\n\n - Fix missed RCU drain on module exit (Jiale Yao)\n\n - Fix off-by-one boundary check in migration support within the mlx5\n vfio-pci variant driver (Seongjun Hong)\n\n - Remove drvdata usage convention across vfio-pci-core, allowing\n variant drivers to freely create their own conventions and enabling a\n future Rust-based variant driver. A DRM topic branch is also merged\n in support of this effort, modifying the vga arbiter API to more\n cleanly remove the drvdata dependency (Simon Song)\n\n - Fix hisi_acc vfio-pci variant driver to avoid NULL pointer accesses\n when bound to unsupported devices and also disabling migration\n support when running on 64K host page size due to BAR mapping\n constraints (Longfang Liu)\n\n - Add device IDs for Crescent Island and Nova Lake devices to the Xe\n vfio-pci variant driver (Satyanarayana K V P)\n\n - Fix fallback mode in nvgrace-gpu variant driver to use symmetric open\n and close handlers to avoid reported use-after-free issue. Remove the\n resulting unnecessary test in the now single-purpose open function\n (Andrea Parri)\n\n* tag \u0027vfio-v7.4-rc1\u0027 of https://github.com/awilliam/linux-vfio: (35 commits)\n vfio/nvgrace-gpu: Drop the usemem length check in open_device\n vfio/nvgrace-gpu: Use a core-only open_device in fallback mode\n vfio/xe: Add CRI and NVL device IDs\n hisi_acc_vfio_pci: reject live migration on 64KB page with QM_HW_V3 hardware\n hisi_acc_vfio_pci: fix NULL dereference in reset_prepare on PF passthrough\n vfio/pci: Remove the core dependency on driver data\n vfio/mlx5: Fix boundary check in set_report_output()\n vfio/pci: Drain eventfd RCU callbacks on module exit\n PCI/VGA: pass a data pointer to be used in the decode callback (v2)\n vfio/pci: Restore 8-byte ioeventfd support\n vfio/cdx: reject non-shared MMIO mmaps\n vfio/cdx: keep logical vm_pgoff in MMIO region mmap\n vfio/fsl-mc: keep logical vm_pgoff in MMIO region mmap\n vfio/platform: keep logical vm_pgoff in MMIO region mmap\n vfio/cdx: prevent read-only region mappings from becoming writable\n vfio/fsl-mc: prevent read-only region mappings from becoming writable\n vfio/platform: prevent read-only region mappings from becoming writable\n vfio: selftests: Verify a failed second open preserves the vf_token\n vfio: selftests: mlx5 driver - add send_msi support\n vfio: selftests: Add mlx5 driver - data path and memcpy ops\n ...\n" }, { "commit": "9f2516f45b7cfca237f4d8e1c91c1f307e295dc5", "tree": "03787c9585a74dbbe13f96a8438c6c4c2c996846", "parents": [ "4169c9c90532df9585c0a2ae513337a58f5e59ab", "c69023b5e16e5ffe9368603dca76d85bd544ee57" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 14:19:27 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 14:19:27 2026 -1000" }, "message": "Merge tag \u0027for_linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost\n\nPull vhost,virtio updates from Michael Tsirkin:\n \"This adds CPR support for vhost.\n\n Plus some fixes, notably for a host of races we had when callback fire\n around device reset\"\n\n* tag \u0027for_linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost:\n tools/virtio: add missing device-id/virtio.h wrapper header\n vhost/vsock: add VHOST_RESET_OWNER ioctl\n vhost: synchronize with RCU readers when freeing workers\n vhost/vsock: re-scan TX virtqueue on device start\n vhost/vsock: suppress EHOSTUNREACH fast-fail during CPR pause\n vhost/vsock: split out vhost_vsock_drop_backends helper\n virtio_pci: drop callback sync on reset\n virtio_pci_modern: move avq cleanup from reset to del_vqs\n virtio: synchronize callbacks after device reset\n virtio_vdpa: implement synchronize_cbs()\n platform/mellanox: mlxbf-tmfifo: implement synchronize_cbs()\n um: virtio_uml: implement synchronize_cbs()\n remoteproc: implement synchronize_cbs() for virtio devices\n virtio_ccw: always take irq_lock in the classic interrupt handler\n virtio_ccw: fix synchronize_cbs() after interrupt fallback\n" }, { "commit": "4169c9c90532df9585c0a2ae513337a58f5e59ab", "tree": "afade8cb06592bfc2f696592a83a1f7a4cb4805b", "parents": [ "56070f00d07e30caa9a66c3660045f5f2956a629" ], "author": { "name": "Sasha Levin", "email": "sashal@kernel.org", "time": "Fri Oct 23 17:15:03 2026 -0400" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 13:49:34 2026 -1000" }, "message": "powerpc/irq: Fix build with CONFIG_PROC_FS\u003dn\n\nCommit fbb22ceaaf8f (\"powerpc/irq: Make irqstats array based\") made\narch_show_interrupts() call irq_proc_emit_counts(). That function lives\nin kernel/irq/proc.c, which is only built with CONFIG_PROC_FS, so\nkernels without procfs no longer link:\n\n powerpc64-linux-ld: arch/powerpc/kernel/irq.o: in function `arch_show_interrupts\u0027:\n arch/powerpc/kernel/irq.c:134:(.text+0x4b8c): undefined reference to `irq_proc_emit_counts\u0027\n\narch_show_interrupts() is only called from irq_seq_show(), which is in\nkernel/irq/proc.c as well, so build it only with CONFIG_PROC_FS, as x86\nalready does.\n\nFixes: fbb22ceaaf8f (\"powerpc/irq: Make irqstats array based\")\nReported-by: kernel test robot \u003clkp@intel.com\u003e\nCloses: https://lore.kernel.org/oe-kbuild-all/202609271531.8kf2NTjK-lkp@intel.com/\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "56070f00d07e30caa9a66c3660045f5f2956a629", "tree": "4c7e1d5213252303cdab572120c6d7963d74ad51", "parents": [ "55fbedcec622a943cb09a969aef1ddcba87ee40a", "164405e8e9a0378c7e1aff2254625a6553a291f1" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 13:37:12 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 13:37:12 2026 -1000" }, "message": "Merge tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/virt/kvm/kvm\n\nPull KVM updates from Paolo Bonzini:\n \"ARM:\n\n - pKVM state isolation: years after pKVM started being enabled\n upstream, we finally get the basics in the form of state isolation.\n The vcpu state is now off-limit for the host for protected VMs\n\n - pKVM also grows a hypervisor-private memory allocator, allowing it\n to deal with sub-page allocation, much like everywhere else\n\n - pKVM also lands a trace_printk() equivalent, which hopefully will\n make debugging a bit easier\n\n - First shot at annotating portions of the KVM/arm64 code to be\n extracted and built on s390. The real fun is yet to come\n\n - Allow pre-faulting of stage-2 canonical mappings from userspace,\n joining x86 and s390 in implementing this feature\n\n - Add a reverse mapping infrastructure for shadow stage-2,\n significantly improving performance when MMU notifiers kick in, and\n avoiding full unmap of all shadow tables for this VM\n\n - Next step of GICv5 enablement, adding support for the IRS block,\n and providing both SPI and LPI support. This is the first point\n where KVM/arm64 can support an SMP GICv5 guest\n\n - As a preliminary to eventually enabling CCA, add a bunch of\n infrastructure to KVM/arm64, splitting some of the basic operations\n into individual backends (normal VM, normal pKVM VM, protected pKVM\n VM). This allows CCA to later slot in without polluting the rest of\n KVM with its firmware-driven nonsense\n\n - Make ID registers immutable from the point where a vcpu is able to\n run, even if it fails to run. This prevents KVM from sampling\n untrusted values\n\n - Restore some type checking to the EL2 object. KVM/arm64 originally\n had some strong type checking between the kernel and the EL2\n object, but lost it along the way when the private hypercall\n interface was (somewhat pointlessly) converted to SMCCC. Type\n checking is back, syscall style, and with added sparse goodies\n\n - Expand the FFA support to FFA_NOTIFICATION_*, and add some\n sanitisation of the protocol that pKVM relays to the \"trusted\"\n runtime\n\n - Make GICv3 RD assignment more robust to userspace nonsense\n\n - Convert the remaining MMU fault handler backends to\n kvm_s2_fault_vma_info and co., fixing a number of bugs in the\n process\n\n - Fix the SError/SEA selftests to be both more robust and less\n braindead\n\n - Fix a smattering of documentation bugs, some of them as a result of\n our AI friends spitting out credible assertions based on\n non-existing symbols\n\n - The usual collection of low impact bug fixes (SMCCC, timers, PMU)\n\n Loongarch:\n\n - Add separate vmid support\n\n - Simplify MSI interrupt injection\n\n - Add crash hypercall support\n\n - Allow to set pv_feature until vCPU run\n\n - Enable HW page table walk automatically in selftests\n\n s390:\n\n - rework page allocation for secure guest variable storage\n\n - Selftests and documentation improvements\n\n - Replace get_zeroed_page with kzalloc\n\n - Fix corner cases of floating interrupt injection\n\n - Initial arm64 on s390 support\n\n x86:\n\n - Clean up the handling of vcpu-\u003earch.xen.long_mode to be consistent\n and correctly handle 32-bit/64-bit alignment, and various other bug\n fixes have accumulated over the months since v1\n\n - Grab KVM\u0027s SRCU \"lock\" in kvm_zap_gfn_range() to fix a recurring\n bug where callers fail to do so\n\n - Fix a variety of issues in the pre-fault code that are mostly\n benign in the current code base, but will show up in big ways\n if/when the pre-faulting logic is used to implementing\n prefetch-on-fault for the TDP MMU\n\n - For PREEMPT_RT\u003dy kernels, drop the rmaps\u0027 individual bit-spinlock\n and just walk the rmaps\u0027 with mmu_lock taken. On the write side\n (which always uses mmu_lock), the bit-spinlock was assuming that\n preemption was disabled, but that is *not* true when rwlocks become\n sleepable\n\n - Prepare a memory_fault exit (paired with -EFAULT) when KVM hits an\n error PFN, e.g. so that userspace can resolve transient issues\n instead of killing the guest. Convert a variety of WARN()+EFAULT\n paths into KVM_BUG_ON()+EIO so that KVM can hard commit to filling\n memory_fault on -EFAULTs that occur in the page fault path\n\n - Fix a NX hugepage un-accounting bug where KVM would always uncharge\n the shadow MMU, even when handling TDP MMU pages\n\n - Mask off the address space ID when checking for illegal usage of\n kvm_set_internal_memslot() to prevent false negatives on the sanity\n check\n\n - Explicitly zero reserved flags when delivering a SynIC message to\n avoid leaking a byte of stack information to the guest\n\n - Rework TDX\u0027s handling of the canonical MMU root level to not rely\n on userspace to fill CPUID correctly, as doing so lets userspace\n trivially trigger a KVM_BUG_ON()\n\n - Reject KVM_SET_NESTED_STATE if userspace \"restores\" L1 with\n EFER.LMA\u003d1 \u0026\u0026 EFER.LME\u003d0, which confuses KVM into trying to\n configure an 64-bit MMU without PAE\n\n - Ignore EFER.LMA (clear it from KVM\u0027s cached save state) if\n EFER.LME\u003d0 when preparing L2 state, to fix another way to confuse\n KVM\u0027s MMU (and because real hardware also ignores EFER.LMA)\n\n - Improve KVM\u0027s sanity checks for a misconfigured MMU to (hopefully)\n detect all of the ways KVM can botch EFER.LMA vs. CR4.PAE\n\n - Remove the \"full\" out-param from kvm_x86_ops.flush_tlb_gva() as the\n param is only used to avoid what effectively amounts to a single\n memory write\n\n - Fix a mostly-benign bug where KVM can write through a guest\u0027s\n read-only mapping due to not checking the error code when\n expediting emulated MMIO page faults\n\n - Honor the guest\u0027s view of the \"EFER.LMSLE must be zero\" defeature\n so that userspace can provide migration compatibility between Rome\n and Milan+\n\n - Pend a KVM_REQ_EVENT request when an exception is morphed into a\n nested VM-Exit, otherwise KVM can fail to actually deliver the\n nested VM-Exit, e.g. when injecting a page fault\n\n - Add support for PML on SVM\n\n - Add support for virtualizing Bus Lock Detect on SVM, and fix a\n number of DR6 bugs and warts along the way\n\n - Fix a variety of warts in KVM\u0027s handling of guest TSC, kvmclock,\n and timekeeping in general, as a (big) first step towards\n addressing several longstanding problems with the kvmclock\n implementation. Most notably, fix a precision issue where\n get_kvmclock_ns() computed the clock from the *host* TSC without\n applying guest TSC scaling, causing systemic drift from the values\n the guest computes from its own TSC\n\n - Rip out KVM\u0027s shadow timekeeping structures, now that ktime\n snapshots are powerful enough to replace it\n\n - Misc fixes and cleanups\n\n x86 (AMD):\n\n - Fix a benign-in-practice bug where KVM unintentionally sets a\n non-zero error code when delivering exceptions to SEV-ES+ guests\n\n - Force a new ASID in both VMCBs on pCPU migration to fix a bug where\n KVM can run a VMCB with a stale ASID due to the tracking being\n per-CPU, not per-VMCB\n\n - Return INVALID_INPUT to the guest instead of exiting to userspace\n with -EIO if KVM can\u0027t access \"guest request\" buffer, i.e. try to\n keep the guest alive if the guest or userspace goofs\n\n x86 (Intel):\n\n - Enable Notify VM-Exits (now called Instruction Timeout in the SDM)\n and Bus Lock VM-Exits for TDX guests when they\u0027re enabled by\n userspace (KVM forgot to wire up the TDX Module knobs)\n\n - Move all common (between VMX and TDX) APIs/helpers to\n common.h/main.c, and change all namespace prefixes from \"vmx\" to\n \"vt\"\n\n - Fix a thankfully benign bug (due to other areas of KVM being\n hardened) where userspace can bypass INIT_MEM_REGION\u0027s address wrap\n check by providing a nr_pages that will overflow a u64 when\n converted to bytes, and fix an also- benign off-by-one bug in the\n check (inclusive vs. exclusive)\n\n - Set the vmcs.GUEST_ACTIVITY_STATE back to ACTIVE when userspace\n sets KVM\u0027s mp_state to anything other than HALTED, e.g. so that a\n vCPU doesn\u0027t get stuck in HLT if userspace emulates RESET\n\n guest_memfd:\n\n - Take the invalidate lock when unbinding a dying file to fix a race\n with kvm_gmem_invalidate_end() that results in KVM leaving the MMU\n invalidation count elevated. Not taking the lock in the first place\n was pure misguided paranoid\n\n - When binding a memslot, purge the bindings if storing the new\n memslot fails, as Xarray\u0027s \"store range\" API can subtly fail\n partway through\n\n - Establish memslot\u003c\u003d\u003eguest_memfd bindings *after* the memslot is\n ready, as the memslot becomes reachable the instant the binding is\n installed\n\n - Don\u0027t grab a page refcount when reloading an SNP VMSA and stop\n returning a \"struct page\" from guest_memfd\u0027s PFN lookup altogether,\n to ensure that KVM doesn\u0027t hold any unnecessary refcounts (the\n lifetime of the page is ensured by MMU notifiers and similar\n hooks). Preventing unnecessary refcounts greatly simplifies\n supporting in-place SHARED\u003d\u003ePRIVATE conversions\n\n - Add support for in-place PRIVATE\u003c\u003d\u003eSHARED conversion, i.e. allow a\n single guest_memfd instance to be used for both PRIVATE and SHARED\n variations of CoCo guests\u0027 memory (though not at the same time).\n This eliminates the need to double allocate guest memory for TDX\n and SNP, and is basically a hard requirement for pKVM, which relies\n on being able to preserve memory contents on conversions\n\n - Hack-a-fix a deadlock bug in -\u003eerror_remove_folio() by returning\n -EBUSY if the filemap invalidate lock is contended. Punt on a\n proper fix for the moment, as a proper fix likely involves\n reworking truncate_error_folio()\n\n - Add a pile of selftests for in-place conversions\n\n - Misc guest_memfd cleanups\n\n Generic:\n\n - Move some configuration items to preprocessor symbols, to help with\n arm-on-s390\u0027s need to compile the same code twice with different\n values\n\n - Allow KVM implementations to choose alternative device names, also\n for s390\u0027s support of ARM virtualmachines\n\n - Switch the KVM-VFIO interface and external consumers over to\n standard file-based reference counting, eliminating all external\n KVM symbol exports\n\n Selftests:\n\n - Rework KVM selftest\u0027s handling of memory regions all so that PPC\n can force its page table allocations to be naturally aligned\n\n - PPC support\n\n - Fix emulation of VMPTRST and VMPTRLD when eVMCS is in-use to match\n real Hyper-V\u0027s behavior\n\n - Saturate L2\u0027s TSC frequency if stacking L1 and L2 scaling\n multipliers exceeds what hardware supports, as attempting to run L2\n with an illegal multiplier will either cause VM-Entry to fail (VMX)\n or trigger a #GP when writing MSR_AMD64_TSC_RATIO (SVM). The #GP is\n thankfully benign in the grand scheme as even \"unsafe\" WRMSRs have\n exception fixup\n\n - Rework KVM selftest\u0027s handling of memory regions so that PPC can\n force its page table allocations to be naturally aligned\n\n - Clean up selftest\u0027s VMX instruction helpers, and drop an absurd\n number of completely useless return values, e.g. functions that\n unconditionally return %true and then have every caller assert\n success\n\n - Add selftests support for Zhaoxin CPUs\n\n - Overhaul the TSC scaling test to add a regression test for the\n saturation behavior, and to increase its coverage in general\n\n - Fix selftests usage various NUMA syscalls to account for an\n undocumented, but known since 2007, off-by-one kernel bug. Add\n helpers to try and avoid re-introducing the same flaws in the\n future\n\n - Automatically run xAPIC IPI migration test (between NUMA nodes)\n when possible, as the entire point of the test is verify KVM\u0027s\n handling of page migration of the APIC backing page\n\n - Misc cleanups\"\n\n* tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/virt/kvm/kvm: (506 commits)\n KVM: always make in-place conversion a compile-time constant when possible\n KVM: x86: leave the legacy private attribute in for TDX and SEV\n KVM: split CONFIG_KVM_PRIVATE_MEMATTR_VM out of KVM_VM_MEMORY_ATTRIBUTES\n selftests: kvm: remove useless comma operator\n arm64: Use proper include variant\n MAINTAINERS: Add entry for ARM on s390 KVM\n KVM: s390: arm64: Integrate arm on s390\n KVM: s390: arm64: Implement basic page fault handler\n KVM: s390: arm64: Implement vCPU IOCTLs\n KVM: s390: arm64: Implement vm/vcpu create destroy\n KVM: s390: arm64: Implement required functions\n KVM: s390: Add basic arm64 kvm module\n s390/hwcaps: Report SAE support as hwcap\n KVM: s390: arm64: Introduce host definitions\n s390: Introduce Start Arm Execution instruction\n KVM: s390: Use arm64 code\n s390/tools: Use arm64 headers\n KVM: s390: Use dedicated function for migration mode\n s390/Kconfig: remove PCI dependency from HAS_IOMEM\n KVM: s390: Kick PV cpus at the right time for service irqs\n ...\n" }, { "commit": "55fbedcec622a943cb09a969aef1ddcba87ee40a", "tree": "99bf57398ef32396f831f31efffb5d917ce22e0c", "parents": [ "90b754d40117b2889bbe847ce7bb4dcf968e7cb8", "b116ac6087541d3d98031e786adbe9c733cd6df3" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 13:08:49 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 13:08:49 2026 -1000" }, "message": "Merge tag \u0027bpf-next-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next\n\nPull bpf updates from Alexei Starovoitov:\n \"Major changes:\n\n - Introduce scalar evolution (SCEV) analysis in the verifier.\n\n It infers how registers and stack slots change in a loop and lets\n the verifier check bounded loops with induction variables as ranges\n instead of walking every iteration. The number of processed insns\n drops ten fold in programs with loops (Eduard Zingerman)\n\n - Add \u0027callx\u0027 instruction: indirect call of a static BPF subprogram.\n\n The address is taken with ld_imm64 or loaded from read-only data.\n Supported by x86-64, arm64 and riscv64 JITs (Alexei Starovoitov, Pu\n Lehui)\n\n - Add unwind_goto and unwind_exit instructions, so that Rust panic or\n C++ exception can run destructors of every frame it passes through.\n The normal path is free of unwind code. Supported by x86-64 and\n arm64 JITs (Alexei Starovoitov)\n\n - Support programs compiled by rust-bpf: treat load and store through\n a number as arena access with BPF_F_ARENA_SCALAR, accept rust names\n in BTF (Alexei Starovoitov)\n\n - Raise BPF program stack size from 512 bytes to 2 KiB on x86-64 and\n arm64 (Kumar Kartikeya Dwivedi)\n\n - Support struct, union and __int128 up to 16 bytes passed and\n returned by value in BPF subprograms and kfuncs, and fix x86-64 and\n arm64 trampolines for such arguments (Yonghong Song)\n\n - Introduce a common way to attach struct_ops to a cgroup via\n bpf_link. bpf_tcp_ops is the first user and mirrors TCP sock_ops\n callbacks (Martin KaFai Lau, Amery Hung)\n\n - Describe inlined functions in BTF. New kinds tell where the inline\n sites are and how to fetch the arguments there.\n\n CONFIG_DEBUG_INFO_BTF_INLINE keeps it apart from the main BTF in\n .BTF.inline section or in btf_vmlinux_inline.ko (Alan Maguire)\n\n - Fix many memory safety, lifetime and locking bugs in BPF core,\n verifier, iterators, local storage, dynptr, devmap, cpumap and\n seg6local (Josef Bacik, Alexei Starovoitov)\n\n - Diff stat is dominated by selftests and by removal of\n lib/test_bpf.c. Its 16k lines of instruction tests were converted\n to BPF selftests that BPF CI runs on every architecture it covers\n (Daniel Borkmann)\n\n Other features and fixes:\n\n - Add KASAN checks to memory accesses of JITed programs on x86-64\n (Alexis Lothoré)\n\n - Complete unification of helper, kfunc and subprog argument checks\n in the verifier (Amery Hung)\n\n - Add bpf_copy_from_user_mm[_str]() kfuncs (Anastasios Papagiannis)\n\n - Various features and fixes (Daniel Borkmann):\n - Add .bpf keyring for program signature verification, modelled\n after dm-verity keyring, and support ML-DSA in signing tools\n - Emit shorter and faster code in x86-64 JIT for patterns that\n LLVM generates\n - Fix various issues in gotox handling\n\n - Let BPF LSM set xattrs at inode creation with bpf_inode_init_xattr()\n (David Windsor, Daniel Borkmann)\n\n - Use sleepable page allocation in sleepable arena paths. Fix races\n between arena free, allocation and user page fault (Emil Tsalapatis)\n\n - Switch BPF crypto from lskcipher to AES-CBC and AES-ECB libraries\n (Eric Biggers)\n\n - Add bpf_proactive_reclaim() kfunc (Hui Zhu)\n\n - Render decl_tags in libbpf btf_dump and add tests for bpftool C\n dump (Ihor Solodrai)\n\n - Speed up tracing_multi attach on x86 (Jiri Olsa)\n\n - Various features and fixes (Kumar Kartikeya Dwivedi):\n - Add BPF_PROG_STREAM_OPEN command to read BPF streams through a\n file descriptor with poll support\n - Let kernel structs publish arena pointers with __arena type tag\n - Fix __uninit kfunc output buffers and fastcall rewrite with\n indirect stack accesses\n - Refuse CO-RE relocations for signed programs\n\n - Add enqueue_rcvq and dequeue_rcvq hooks to bpf_tcp_ops to adjust\n sk_rcvlowat and avoid unnecessary wakeups (Kuniyuki Iwashima)\n\n - Add bpf_ksock_sendto() kfunc and allow ksock connect and send from\n bpf_wq (Mahe Tardy)\n\n - Fix racy plt target update in arm64 bpf_arch_text_poke()\n (Matthew Wood)\n\n - Restructure BPF selftests Makefile as a layered build\n (Mykola Lysenko)\n\n - Speed up hash map lookups for u32 and u64 keys (Mykyta Yatsenko)\n\n - Add signed div/mod, movsx, bswap and gotol to MIPS JITs, signed\n div/mod to parisc JITs (Nicholas Dudar, Johan Almbladh)\n\n - Fix stack overflow in build ID parser on 32-bit (Nickolai\n Zeldovich)\n\n - Add stack arguments, signed arena loads and gotox to riscv64 JIT.\n Pu Lehui is now co-maintainer of riscv BPF JITs (Pu Lehui, Chen\n Pei, Feng Jiang)\n\n - Add bpf_call_rcu() and bpf_call_rcu_tasks_trace() kfuncs. Support\n fetching and/or/xor atomics in arena on x86-64 (Puranjay Mohan)\n\n - Fix flaky selftests, selftests with clang 23 and bpf-gcc\n (Qiliang Yuan, KaFai Wan, Vineet Gupta)\n\n - Fix builds broken by fatal resolve_btfids warnings, BTF generation\n on ARC, and define arch_cmpxchg_local() on arc, hexagon and\n openrisc (Sasha Levin)\n\n - Reduce memory use of hash maps by up to 50% per element\n (T.J. Mercier)\n\n - Mark pointer fields of sched_ext ops arguments as trusted (Tejun\n Heo)\n\n - Remove legacy bpf_asm, bpf_dbg and bpf_jit_disasm tools (Xia Yan)\n\n - Fix index overflow in queue and stack maps, arena range tree after\n allocation failure, tail call loop after freplace detach, lost\n signal in bpf_send_signal() (Yuan Chen)\n\n - Many more fixes and cleanups\"\n\n* tag \u0027bpf-next-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next: (660 commits)\n selftests/bpf: Time tc_edt from its first packet with data\n selftests/bpf: Test unwind_exit of an exception callback\n selftests/bpf: Tests for 32-bit scalar evolution bounds computation\n bpf: Reject unwind_goto and unwind_exit in offloaded progs\n bpf: Support 32-bit linear scalar evolution\n bpf: Make unwind_exit of an exception callback exit in JITs\n selftests/bpf: Test forbidden bpf_ksock_sendto() LSM attach\n selftests/bpf: Test ksock sendto()\n bpf: Add bpf_ksock_sendto() kfunc\n selftests/bpf: Test unwinding from R0: R2 subprog\n selftests/bpf: Add a C++ prog with exceptions\n selftests/bpf: Add tests for unwind_goto and unwind_exit\n bpf, arm64: Support unwind_goto and unwind_exit\n bpf, x86: Support unwind_goto and unwind_exit\n bpf: Add unwind_goto and unwind_exit insns\n tools/bpf: Remove legacy BPF tools\n bpf: Annotate data races on bpf_lru_node type\n selftests/bpf: Add arena allocation race tests\n bpf: Fix arena race between page free and alloc leading to incoherency\n bpf: Revalidate faulted arena pages before installing user mappings\n ...\n" }, { "commit": "90b754d40117b2889bbe847ce7bb4dcf968e7cb8", "tree": "95c8c91b5a5b33cc7ed7837768fe54dbccd58339", "parents": [ "3f942403bbad36a120432be69445154891b65398", "677f83795fdfc25ddc51b665a9111f5ff199f7ca" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 12:20:54 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 12:20:54 2026 -1000" }, "message": "Merge tag \u0027bootconfig-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace\n\nPull bootconfig updates from Masami Hiramatsu:\n \"Parser robustness and validation improvements:\n\n - Skip printing early params to cmdline from bootconfig\n\n Suppress early_param keys from /proc/cmdline and warn the user,\n since bootconfig does not invoke early_param handlers and silently\n ignoring them is misleading\n\n - Reject unexpected data after null character\n\n Detect and reject non-null data following an intermediate null\n character in the bootconfig buffer, preventing silently ignored\n configuration after an early termination\n\n Code cleanups:\n\n - Merge _xbc_exit() into xbc_exit()\n\n Since memblock_free() now handles late freeing and NULL addresses,\n the separate _xbc_exit() helper and its early argument are\n unnecessary. Inline it into xbc_exit()\n\n - Remove redundant assignment in xbc_parse_array()\n\n The node-\u003echild \u003d 0 assignment after the loop duplicates what\n xbc_init_node() already did\n\n - Skip internal tree sanity checks in kernel\n\n Move the node index bounds loop from xbc_verify_tree() into a\n userspace-only xbc_sanity_check_tree() to reduce boot-time\n overhead, since out-of-bounds indices cannot be produced by\n malformed input\n\n - Move BOOTCONFIG_FOOTER_SIZE to include/linux/bootconfig.h\n\n Share the footer size constant between kernel and user-space tools,\n replacing the hardcoded (BOOTCONFIG_MAGIC_LEN + 8) expression in\n init/main.c\n\n Tooling improvements:\n\n - Remove unused PAGE_SIZE macro from the bootconfig tool\n\n - Consolidate xbc_init() to error message wrapper\n\n Use init_xbc_with_error() for all bootconfig initialization paths\n in the tool for simpler and more consistent error handling\"\n\n* tag \u0027bootconfig-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace:\n bootconfig: Move BOOTCONFIG_FOOTER_SIZE to include/linux/bootconfig.h\n bootconfig: Skip internal tree sanity checks in kernel\n tools/bootconfig: Consolidate xbc_init() to error message wrapper\n bootconfig: Reject unexpected data after null character\n bootconfig: Skip printing early params to cmdline from bootconfig\n tools/bootconfig: remove unused PAGE_SIZE macro\n bootconfig: remove redundant assignment in xbc_parse_array()\n bootconfig: merge _xbc_exit() into xbc_exit()\n" }, { "commit": "3f942403bbad36a120432be69445154891b65398", "tree": "9cf2219eb0764e5f8fb692be672a96834cc828d5", "parents": [ "d1679c8713221d257aee54dbe3dc2064aff776f1", "d4d028a7ae6401ce70825a3eb663f0a2dfc49db6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 12:12:26 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 12:12:26 2026 -1000" }, "message": "Merge tag \u0027probes-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace\n\nPull probes updates from Masami Hiramatsu:\n \"Asynchronous optprobe optimizer and cleanups:\n\n - Make optprobe optimizer multi-generational and asynchronous\n\n Rework the optimizer as a state machine to avoid calling\n time-consuming synchronize_rcu_tasks() while holding kprobe_mutex,\n text_mutex, and cpus_read_lock(). Uses call_rcu_tasks() and a fixed\n ring of generation slots instead, so locks are only held during the\n brief instruction- patching window\n\n - Use DEFINE_DEBUGFS_ATTRIBUTE for the kprobes enabled knob\n\n Replace a hand-rolled debugfs read/write pair (dating from 2007)\n with the proper DEFINE_DEBUGFS_ATTRIBUTE macro, removing dead code\n and the stale XXX comment\n\n Code quality and documentation cleanups:\n\n - Add const qualifier to new_argv allocation type in trace_probe.c,\n preparing for the type-aware kmalloc_obj allocator conversion\n\n - Clarify btf_find_struct_member() container parameter\n\n Rename the misleading @member_type parameter to @container_type and\n add proper kernel-doc documentation for all parameters and return\n values\n\n Boot tracing test framework and testcases:\n\n - Add a generic boot tracing test framework under\n tools/testing/selftests/ftrace/boottime/\n\n The test runner builds a minimal initramfs with busybox, boots\n QEMU, and runs tracefs checker scripts, supporting bootconfig,\n kernel command-line options, and multi-boot crash/reboot scenarios\n\n - Add boot-time tracing testcases\n\n Verify dynamic kprobe, synthetic events, eprobe, fprobe, tprobe,\n and trace instance creation via bootconfig\n\n - Add kernel cmdline tracing testcases\n\n Verify ftrace, trace_event, trace_buf_size, trace_options,\n trace_clock, and trace_instance kernel parameters\n\n - Add persistent ring buffer testcases:\n\n Verify memory reservation via reserve_mem\u003d and trace data retention\n across guest crash/reboot, as well as backup instance creation and\n boot log preservation\n\n - Change non-unique test symbol from name_show to init_once in\n kprobe_non_uniq_symbol.tc for more reliable cross-architecture\n testing\"\n\n* tag \u0027probes-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace:\n ftrace/selftests: Change non-unique test symbol to init_once\n tracing/probes: Clarify btf_find_struct_member() container parameter and add kernel-doc\n kprobes: Make optprobe optimizer multi-generational and asynchronous\n tracing/probes: Add const to new_argv allocation type\n kprobes: use DEFINE_DEBUGFS_ATTRIBUTE for the enabled knob\n selftests/ftrace: Add persistent ring buffer testcases\n selftests/ftrace: Add kernel cmdline tracing testcases\n selftests/ftrace: Add boot-time tracing testcases\n selftests/ftrace: Add generic boot tracing test framework\n" }, { "commit": "d1679c8713221d257aee54dbe3dc2064aff776f1", "tree": "35c6bf8ceab902eb97b6c076ede5f6e7e422d564", "parents": [ "b8a7a86e48927472cc84463c1f038783bd52093f", "453d0f47b174cac387af48d303c503b84f82212e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 12:07:27 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 12:07:27 2026 -1000" }, "message": "Merge tag \u0027trace-ringbuffer-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace\n\nPull ring-buffer updates from Steven Rostedt:\n\n - Add Vincent Donnefort as ring-buffer maintainer\n\n Vincent has been doing a lot of updates to the ftrace ring buffer\n lately. I\u0027m going to start delegating updates for the ring buffer to\n him.\n\n - Use RING_BUFFER_MIN_NR_PAGES instead of open coding the number 2\n\n Instead of using the number 2 as the minimum number of pages that a\n ring buffer may have, create and use a macro\n RING_BUFFER_MIN_NR_PAGES.\n\n - Clean up the resize_disabled_checks\n\n There\u0027s duplication of code to check for resize disabled. Create a\n helper function rb_resize_disabled() and use that. Not only does it\n put the code in one place, it also removed a redundant check.\n\n - Remove unnecessary cpumask_test_cpu checks\n\n The loop for_each_buffer_cpu(buffer, cpu) only loops over CPUs in the\n buffer-\u003ecpumask. There\u0027s no reason to test if the CPU is set in that\n same loop.\n\n - Take cpus_read_lock() when changing the subbuf order\n\n A CPU coming on line for the first time allocates its CPU buffer. But\n if this happens while the subbuffer is being resized, it can cause an\n inconsistent state of subbufer sizes in the buffer. Add a\n cpus_read_lock() to ring_buffer_subbuf_order_set() to prevent this\n race.\n\n* tag \u0027trace-ringbuffer-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace:\n ring-buffer: Take cpus_read_lock() when changing the subbuf order\n ring-buffer: Remove unnecessary cpumask_test_cpu\n ring-buffer: Clean up resize_disabled checks\n ring-buffer: Unify ring buffer minimum page calculations\n ring-buffer: Add a MAINTAINERS category specific for the tracing ring-buffer\n" }, { "commit": "b8a7a86e48927472cc84463c1f038783bd52093f", "tree": "872c24e7377dd1e7edb93024a96f641670105f27", "parents": [ "9ec665e5e7a955f0f5637e420ac5075bef475e33", "e1f339ff3b83857b93baf8b88186275a413d445e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 12:05:34 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 12:05:34 2026 -1000" }, "message": "Merge tag \u0027trace-ftrace-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace\n\nPull ftrace updates from Steven Rostedt:\n\n - Have the stacktrace option work with func-args\n\n The func_stack_trace option has it\u0027s own ftrace handler and so does\n the func-args option. When they are both set, neither would run. The\n function tracer itself would error out.\n\n Allow the stacktrace and function args to work together.\n\n - Avoid BTF lookup in atomic context\n\n The ftrace_dump() can call function graph tracing output from an\n atomic context (like an NMI watchdog going off). The BTF lookup is\n not safe to call from atomic context. Have btf_find_func_proto()\n return if in atomic context.\n\n - Build trace_btf.c when CONFIG_DEBUG_INFO_BTF is enabled\n\n New code is depending on trace_btf.c but that only gets built when\n BPF_SYSCALL is also enabled. As the new code doesn\u0027t depend on that,\n have trace_btf.c get built with just DEBUG_INFO_BTF set.\n\n - Have function graph return values have BTF processing\n\n Have the return values printed by the function graph tracer use BTF\n to print the values in better format. For example, if it\u0027s a char,\n short, signed or unsigned, print according to the value defined by\n BTF.\n\n - Add a \"max\" field to the function profiler stats\n\n The function profiler shows all the functions run in the kernel, the\n number of times they are called, and the total time they took up.\n Also add a \"max\" field which holds the longest time a function ran\n for.\n\n - Fix memory leak in module with all skipped functions\n\n On module load, the ftrace entries are recorded to keep track of what\n functions can be traced or not. Some functions may be skipped for\n various reasons (some defined by the architecture). If all functions\n in the module are skipped, its data page is not freed and can leak.\n Catch this case and free the empty page.\n\n - Allow architectures to reject functions from being traced\n\n Allow architectures to skip a function address by returning zero from\n ftrace_call_adjust().\n\n - Initialize modname and offset in print_rec()\n\n The variables modname and offset are initialized by\n kallsyms_lookup(). If that fails, the values are not set, but the\n code continues to print other information. The modname and offset are\n used later, but if the kallsyms_lookup() failed, they will not be\n set.\n\n If a module is being loaded and unloaded at the same time as reading\n the available_filter_functions file, it can cause a fault due to the\n lookup failing and modname and offset being used uninitialized.\n\n* tag \u0027trace-ftrace-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace:\n ftrace: Initialize modname and offset in print_rec()\n ftrace: Let ftrace_call_adjust() reject a patch site\n ftrace: Do not leak a module\u0027s empty page group\n ftrace: Add max field to function profiler stats\n tracing: Update funcgraph-retval documentation\n fgraph: Enhance funcgraph-retval with BTF-based type-aware output\n ftrace: Build trace_btf.c when CONFIG_DEBUG_INFO_BTF is enabled\n tracing: Avoid BTF lookup in atomic context\n ftrace: Have stacktrace option work with func-args\n" }, { "commit": "9ec665e5e7a955f0f5637e420ac5075bef475e33", "tree": "f958f4ad067c43a5d45bce6b5fca128f325b2844", "parents": [ "ff5b1cefb4b211d4853b7ae1d20ce51c859b1619", "5ddc4497508a628b6c18653a0d5208edc6228aaf" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 12:03:45 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 12:03:45 2026 -1000" }, "message": "Merge tag \u0027trace-tools-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace\n\nPull RTLA tooling updates from Steven Rostedt:\n\n - Test actions in absence of threshold\n\n Cover the case which regressed in the past in tests.\n\n - More robust CPU count detection\n\n Parse /sys/devices/system/cpu/possible directly instead of going\n through libc for CPU count and sanity check against any mismatch with\n the number reported by tracefs / osnoise.\n\n - Add option to record IPI count in osnoise top\n\n In addition to counting IRQs, add an option to enable counting IPIs\n targetting the measurement CPU to the rtla-osnoise-top tool.\n\n - Improve runtime test usability\n\n Catch up with increased complexity of runtime tests with better\n defaults and more options available to the developer running the\n tests.\n\n - Simplify osnoise tracer option setting code\n\n Deduplicate osnoise tracer option setting code with macros to make it\n less error-prone and to make it easier to add new tracer options in\n the future.\n\n* tag \u0027trace-tools-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace:\n rtla: Simplify osnoise tracer option setting code\n rtla/tests: Add $SUBTESTS and $STOPONFAIL\n rtla/tests: Show the command line for failing tests\n rtla/tests: Use absolute path for $RTLA\n rtla/osnoise: Trace IPI events when recording a trace file\n rtla: Unconditionally clean any pre-existing filters for user-provided events\n rtla: Enable and disable events in the user-defined order\n rtla: Make struct trace_events double linked\n rtla/osnoise: Allow IPI filters to gracefully fail\n rtla/osnoise: Leverage IPI event filters when tracing a subset of CPUs\n rtla/osnoise: Record IPI count in osnoise top\n rtla/osnoise: Add IPI tracking cmdline option\n rtla/tests: Add unit test for get_max_cpu_from_list()\n rtla/tests: Add unit test for cpu_list_iterate()\n rtla: Abort on nr_cpus mismatch with tracer\n rtla: Discard trace entries with cpu \u003e\u003d nr_cpus\n rtla: Replace get_nprocs_conf() with sysfs possible cpus\n rtla/tests: Test actions in absence of threshold\n" }, { "commit": "ff5b1cefb4b211d4853b7ae1d20ce51c859b1619", "tree": "0459c620035133c01fc831ce18ad28bfc34082cd", "parents": [ "f1e818b239dd11397f9a379b84a7a4985e8afdfe", "5e9bdf2924c9041ff1520b528db6104626e9ef41" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 12:02:13 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 12:02:13 2026 -1000" }, "message": "Merge tag \u0027trace-rv-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace\n\nPull runtime verifier updates from Steven Rostedt:\n\n - Improve lockdep annotation for reactors\n\n Reactors are not supposed to take locks, so they fit the LD_WAIT_FREE\n lockdep class. However, reactors may run in preemptible context and\n if the preempting code (tick or simply the scheduler) takes locks, we\n see a lockdep splat. Switch to LD_WAIT_SPIN to avoid the splat while\n documenting that reactors should still not take locks.\n\n - Add KUnit tests for reactors\n\n Add KUnit test cases to validate registration and reaction, this\n requires exporting some symbols and other minor fixes.\n\n - Use the right rv_this variable in the wakeup monitor\n\n LTL monitors were updated to use the generic rv_this static variable\n but this change wasn\u0027t propagated to the newly introduced wakeup\n monitor. This broke reactors for the monitor: update the it.\n\n* tag \u0027trace-rv-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace:\n rv/rtapp/wakeup: Use \"rv_this\" the rv_monitor variable\n rv: Add KUnit tests for reactor registration and dispatch\n rv: Export rv_register_reactor() and rv_unregister_reactor()\n rv: Propagate rv_register_reactor() error from reactor init\n rv: Use LD_WAIT_SPIN as the reactor lockdep wait type\n" }, { "commit": "f1e818b239dd11397f9a379b84a7a4985e8afdfe", "tree": "d55ff5235c20b07c150ca0cf042f7ed51cd1dc05", "parents": [ "7a78f7ba9f24962c8033e0152bf34a7903ff61ba", "cc53a1e0981bf296479d10fd646f73e28ed5fccd" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 11:59:33 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 11:59:33 2026 -1000" }, "message": "Merge tag \u0027livepatching-for-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/livepatching/livepatching\n\nPull livepatching updates from Petr Mladek:\n\n - Update maintainers list: added Joe and Song, removed Jiri\n\n - Prevent removing the livepatch module before releasing all kobjects\n\n - Ignore debug messages from other subsystems in livepatch selftests\n\n* tag \u0027livepatching-for-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/livepatching/livepatching:\n livepatch: Add Joe and Song as maintainers\n livepatch: remove myself from MAINTAINERS\n selftests/livepatch: filter debug messages in check_result()\n livepatch: Fix UAF of unregistered patch kobjects\n" }, { "commit": "7a78f7ba9f24962c8033e0152bf34a7903ff61ba", "tree": "6d3947b6c0faab0ff4390ff85db425812a6da557", "parents": [ "5b212610d0b8f474f1eef70b9a5aa4b2ecfff788", "d15d7703166daf7bd62c844a3cb1b3a6279adb4c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 09:51:16 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 09:51:16 2026 -1000" }, "message": "Merge tag \u0027slab-for-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mm/slab\n\nPull slab updates from Harry Yoo:\n\n - Performance improvement of the sheaf prefill API, by allowing the\n barn to hold a partial sheaf and refilling sheaves from the barn.\n This improves will-it-scale mmap1 throughput by 24% on the maple_node\n cache (Hao Li)\n\n - Restore memcg accounting of ipc msg_msg allocations, lost with e.g.\n CONFIG_SLAB_BUCKETS\u003dn where the allocations fall back to the general\n kmalloc caches (Kees Cook)\n\n - Fix an old race between kmem_cache_destroy() and slab_late_init(),\n where a cache destroyed late in the boot process tries to release a\n kobject that was never initialized (Imre Kaloz)\n\n - Remove slab_folio(), the last use of struct folio in slab code\n (Matthew Wilcox)\n\n - Reject kmalloc() requests above KMALLOC_MAX_SIZE explicitly with a\n warning and NULL return instead of relying on the page allocator\u0027s\n order check (Zi Yan)\n\n - Various minor fixes and cleanups (Hao Li, Karl Mehltretter, Kees\n Cook, Longlong Xia)\n\n* tag \u0027slab-for-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mm/slab:\n mm/slub: initialize the free pointer of the bootstrap kmem_cache_node\n mm/slab: sample slab_state once in kmem_cache_destroy()\n ipc, msg: Account msg_msg allocations with GFP_KERNEL_ACCOUNT again\n mm/slab: Mark the kmem_buckets_create() context as a Context: section\n slab: Remove slab_folio()\n mm/slub: refill prefilled sheaves from the barn\n mm/slub: make the case handling in __slab_free() easier to follow\n mm/slub: unify slub stat definitions to simplify metric additions\n mm/slab_common: reject zero object_size before calculate_alignment\n mm/slab: reject unsupported kmalloc() sizes\n" }, { "commit": "5b212610d0b8f474f1eef70b9a5aa4b2ecfff788", "tree": "66d53c4ebc7b8367be22030425ec398736935b91", "parents": [ "845f394e462fb1bd67b9779c467be478631a4daf", "111153e8280b4fa8b5537c941264ee6dc71d71d8" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 09:44:53 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 09:44:53 2026 -1000" }, "message": "Merge tag \u0027printk-for-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/printk/linux\n\nPull printk updates from Petr Mladek:\n\n - John Ogness became PRINTK co-maintainer\n\n - Unregister boot consoles when any proper console is registered at the\n end of the boot phase. Before they were removed only when the\n so-called preferred console, usually set via the last \u0027console\u003d\u0027\n parameter, got registered\n\n - Fix computation for increasing the printk ringbuffer on systems with\n many CPUs and possibly long backtraces from all CPUs\n\n - Cleaned up irq_works handling for deferred printk operations\n\n - Use acquire/release semantic for filled_random_ptr_key\n\n - Allow to use \u0027:\u0027 in console options\n\n - More code clean up\n\n* tag \u0027printk-for-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/printk/linux:\n MAINTAINERS: Make John PRINTK co-maintainer\n lib/vsprintf: Use EXPORT_SYMBOL_IF_KUNIT() to export symbols\n printk: Remove console options before decoding the name\n printk: increase the ring buffer for more than 16 CPUs by default\n printk_ringbuffer: Avoid needless read of prb_desc\n printk: Use two irq_works instead per-CPU\n lib/vsprintf: Use acquire/release for ptr_key publication\n printk: Remove remaining boot consoles when a real console exists\n" }, { "commit": "845f394e462fb1bd67b9779c467be478631a4daf", "tree": "883fd716e0584dc55acf520361f9ec0f9951d2d1", "parents": [ "c0e8d301378775e6e1946389f3ff621f8601fa85", "7b08e5851884e4ad207a6401b1dcffdb03d43c28" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 09:37:09 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 09:37:09 2026 -1000" }, "message": "Merge tag \u0027sysctl-7.04-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/sysctl/sysctl\n\nPull sysctl updates from Joel Granados:\n\n - Disallow partial vector updates\n\n Stage sysctl vector writes before updating. Removes the chance of\n leaving a sysctl vector partially updated due to erroneous input.\n This is not an atomic write; a concurrent reader can still see a\n partially updated vector.\n\n - Remove redundant sysctl config guards\n\n Remove locations where (CONFIG_SYSCTL \u0026\u0026 CONFIG_PROC_FS) was checked.\n They are superfluous as CONFIG_SYSCTL now depends directly on\n CONFIG_PROC_FS.\n\n - Rewrite selftests using KTAP helpers\n\n Each test now reports its own KTAP result and runs in a subshell.\n Test suite continues after failure.\n\n - Misc\n\n Fix a use-after-free in the selftests test_sysctl module. Quiet an\n unused variable warning in fs/proc/proc_sysctl.c:init_header(). Add\n tests for partial vector updates and the int jiffies converters.\n\n* tag \u0027sysctl-7.04-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/sysctl/sysctl:\n selftests: sysctl: Check the sign of a negative jiffies read\n sysctl: Add jiffies converter entries to the test module\n sysctl: quiet unused variable warning in fs/proc/proc_sysctl.c:init_header()\n sysctl: unregister tables before freeing bitmap\n sysctl: Rewrite selftests on top of KTAP helpers\n sysctl: remove redundant CONFIG_PROC_FS checks\n sysctl: consolidate CONFIG_SYSCTL into a single block in kernel/sysctl.c\n sysctl: collapse redundant CONFIG_SYSCTL nesting in kernel/sysctl.c\n sysctl: Add 0013 to test partially updated vectors\n sysctl: Disallow partial updates for erroneous sysctl vectors\n sysctl: Reject uint arrays before calling the general proc_vec\n sysctl: Split data conversion and file position handling\n" }, { "commit": "c0e8d301378775e6e1946389f3ff621f8601fa85", "tree": "1636e84fe829498409a0139a313199719a26f3d5", "parents": [ "88442d9f0d6084cb986cd9d635efc7744199e3fe", "08abfa5a161e1b6e6244cb2090b0530bc0920798" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 09:32:44 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 09:32:44 2026 -1000" }, "message": "Merge tag \u0027modules-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/modules/linux\n\nPull module updates from Petr Pavlu:\n\n - Ignore local labels and mapping symbols during module load\n\n These symbols were already ignored during kallsyms address-to-symbol\n lookups. Filter them out earlier during module loading to reduce\n lookup overhead and prevent them from appearing in /proc/kallsyms.\n\n - Fix potentially incorrect access of SetOnce\u003cT\u003e when setting Rust\n module parameters.\n\n - Fix a potential read of an uninitialized count when printing taint\n information for unloaded modules.\n\n - Allocate the kmod argument array using kmalloc_array() in preparation\n for conversion to type-aware allocators.\n\n - Clean up includes in linux/kmod.h\n\n Add explicit includes of linux/umh.h to files that use usermode\n helpers. Then clean up the #include list in linux/kmod.h, notably\n removing the compatibility linux/umh.h include.\n\n - Remove the error-injection.h include from linux/module.h\n\n Add explicit includes of linux/error-injection.h to files that use\n the ALLOW_ERROR_INJECTION() macro and currently rely on it being\n provided indirectly via linux/module.h. Then remove the unnecessary\n linux/error-injection.h include from linux/module.h.\n\n - Replace __MODULE_STRING() with __stringify() in various drivers in\n preparation for removing the former macro.\n\n* tag \u0027modules-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/modules/linux:\n drivers: Replace __MODULE_STRING() with __stringify()\n module: Fix uninitialized count read of unloaded taint tracking record\n rust: module_param: Fix potentially incorrect access of `SetOnce\u003cT\u003e`\n module: Remove the error-injection.h include from linux/module.h\n drm/xe: Include error-injection.h for ALLOW_ERROR_INJECTION()\n drm/i915: Include error-injection.h for ALLOW_ERROR_INJECTION()\n syscalls: Include error-injection.h for ALLOW_ERROR_INJECTION()\n net: Include error-injection.h for ALLOW_ERROR_INJECTION()\n block: Include error-injection.h for ALLOW_ERROR_INJECTION()\n module: Bring includes in linux/kmod.h up to date\n time/jiffies: Include linux/sysctl.h for proc_int_u2k_conv_uop(), ...\n umh, treewide: Explicitly include linux/umh.h where needed\n modules/kmod: Allocate argv with kmalloc_array()\n module/kallsyms: Ignore local labels and mapping symbols during module load\n module/kallsyms: Refactor current symbol filtering into is_core_symbol()\n module/kallsyms: Rename is_mapping_symbol() to is_ignored_kernel_symbol()\n" }, { "commit": "88442d9f0d6084cb986cd9d635efc7744199e3fe", "tree": "27b8f1f0f73674fc96dcc2edf87f1dc82d41cdf2", "parents": [ "2ee2475e15b4ff8fda89a9edcb77dfd871de1386", "bd3cc16d1d7d584911f856adc458f242b1c7e85f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 09:27:26 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 09:27:26 2026 -1000" }, "message": "Merge tag \u0027kcsan-20261020-v7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/melver/linux\n\nPull KCSAN updates from Marco Elver:\n\n - Avoid division by zero in kcsan_prandom_u32_max()\n\n - test: Do not count report printing time against test duration\n\n* tag \u0027kcsan-20261020-v7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/melver/linux:\n kcsan: test: Do not count report printing time against test duration\n kcsan: Avoid division by zero in kcsan_prandom_u32_max()\n" }, { "commit": "2ee2475e15b4ff8fda89a9edcb77dfd871de1386", "tree": "36b481233e66ff1c92891d91a7bf7344a6a744bd", "parents": [ "c5fd5e67c7812bc40cd897422c1e0d6dd9ed1e2e", "07ae95d933b84db98696f23e24de078b251561ff" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 09:13:11 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 09:13:11 2026 -1000" }, "message": "Merge tag \u0027mm-core-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mm/core\n\nPull core memory management updates from David Hildenbrand:\n \"This includes updates to:\n\n - MEMHP (Memory Hotplug)\n\n - GUP (Get User Pages)\n\n The main change is:\n\n - Reduce zone contiguity checking overhead during memory hot(un)plug\n (Yuan Liu)\n\n Other changes include smaller fixes along with various cleanups\"\n\n* tag \u0027mm-core-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mm/core:\n mm/memory_hotplug: fix missing rollback in __add_pages()\n mm/memory_hotplug: optimize zone contiguous check when changing pfn range\n mm/memory_hotplug: make shrink_zone_span() more robust\n mm/gup: honour FOLL_PIN in NOMMU __get_user_pages_locked()\n mm/gup_test: report actual pinned bytes\n mm/gup_test: safely calculate GUP batch size\n mm: gup: cleanup the gup_fast_*() call chain\n mm: gup: move pmd_protnone() into gup_fast_pmd_leaf()\n" }, { "commit": "c5fd5e67c7812bc40cd897422c1e0d6dd9ed1e2e", "tree": "04562cf87097533872cc43e4714d7b737a603cf4", "parents": [ "734bef548a96e8774d6eef5dfa2026c6edc4e80b", "2967f3ccdb5fae956f1b085370ec292bab5c7e25" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 07:42:11 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 23 07:42:11 2026 -1000" }, "message": "Merge tag \u0027mm-stable-2026-10-19-21-33\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm\n\nPull MM updates from Andrew Morton:\n\n - \"selftests/mm: improve khugepaged coverage\" (Kiryl Shutsemau):\n\n Give khugepaged a proper workout. Extend the tests to all supported\n mTHP orders, check exactly which windows collapsed, and make scan\n completion deterministic. Race collapse against faults, pinning, fork\n and remap; verify that the contents survive.\n\n Add coverage for whole-page-table zaps and memory pressure too.\n\n - \"selftests/mm: separate GUP microbenchmarking from functional testing\"\n (Sarthak Sharma):\n\n Untangle GUP benchmarking from correctness testing. Move the\n benchmark into tools/mm, add a standalone harness-based GUP selftest,\n and move shared helpers into tools/lib/mm. Give each tool one job\n instead of mixing timing measurements with correctness checks.\n\n Cover the mapping, pinning and batch-size combinations explicitly.\n\n - \"mm: Switch device DAX to section-based vmemmap optimization\" (Muchun\n Song):\n\n Apply section-based vmemmap optimization to device DAX. Rework the\n backing metadata layout to save memory while preserving the handling\n of device memory hotplug and its different alignment and lifetime\n requirements.\n\n - \"mm: Introduce section-based vmemmap optimization for HugeTLB\"\n (Muchun Song):\n\n Cut the memory consumed by HugeTLB\u0027s struct page array with\n section-based vmemmap optimization. Arrange the metadata so large\n huge pages need fewer backing pages, while keeping initialization,\n teardown and the various hugepage configurations straight.\n\n - \"mm/huge_memory: clean up and decouple the anon and file split\n helpers\" (Kairui Song):\n\n Separate anonymous and file-backed folio splitting, which have rather\n different locking and bookkeeping requirements. Move the work into\n separate helpers, drop dead checks and tidy swap-cache handling. Fix\n error paths, including one that could leave a folio frozen.\n\n Keep the swap cache cases separate from file-cache splitting.\n\n - \"mm: Unconditional per-VMA locks and cleanups\" (Dave Hansen):\n\n Make per-VMA locking unconditional and clean up the old conditional\n code around it. This removes configuration-dependent plumbing and\n lets callers depend on one locking model rather than carrying both\n cases along.\n\n - \"memcg: remove the v1 soft limit\" (Shakeel Butt):\n\n Remove the old cgroup v1 memory soft-limit machinery. This has long\n since been superseded by the newer memory-control interfaces; hauling\n around a separate reclaim scheme for it no longer buys us much.\n\n - \"read proc/pid/smaps_rollup under per-vma lock\" (Suren Baghdasaryan):\n\n Read /proc/PID/smaps_rollup using per-VMA locks where possible,\n rather than holding mmap_lock across the entire walk. Retain the\n contention fallback and add tearing tests. This considerably reduces\n latency when another thread is busy changing its mappings.\n\n - \"mm/damon: introduce data access-as-a-data attribute\" (SJ Park):\n\n Teach DAMON to expose memory access observations as data attributes,\n making them available to the probe and filtering machinery. Extend\n the interfaces, documentation and tests so the new information can be\n used rather than merely collected.\n\n - \"Remove PG_private by using page/folio-\u003eprivate checks instead\" (Zi\n Yan):\n\n Get rid of PG_private and use the folio\u0027s private pointer to say\n whether private data is attached. Convert the filesystem users,\n including erofs, f2fs and md, and clean up the old accessors and\n flags. There are a few special cases, notably swapcache and hugetlb,\n which need explicit care.\n\n - \"mm: make userland page table freeing RCU-safe\" (Lorenzo Stoakes):\n\n Make freeing userspace page tables safe against RCU readers. Sort out\n the page-table lifetime and locking rules so walkers cannot stumble\n over freed tables while mappings are being torn down.\n\n - \"make unused huge shrinker memcg aware\" (Qi Zheng):\n\n Make shmem\u0027s unused-huge-folio shrinker aware of memory cgroups, so\n reclaim can find those folios under the right memcg. Wire up the\n per-memcg tracking and its lifetime rules, and give the shrinklist\n its own lockdep class to avoid spurious dependency reports.\n\n - \"mm: Drop pxd_ERROR()\" (Anshuman Khandual):\n\n Remove the old pxd_ERROR() page-table checks and their\n architecture-specific baggage. Simplify the common page-table\n interfaces and callers now that these checks no longer serve a\n useful purpose.\n\n - \"memcg: group struct fields by access pattern\" (Shakeel Butt):\n\n Rearrange memcg\u0027s hot and cold fields according to how they\u0027re\n actually accessed. Keep frequently updated counters and their\n neighboring state from fighting over cachelines and reduce needless\n cacheline traffic.\n\n - \"mm/damon/core: fix the size charged for a filter-trimmed region\"\n (Donggeun Yoo):\n\n Fix DAMOS quota accounting when a filter trims a monitoring region.\n Charge only the part left after filtering, not the original region,\n and add KUnit coverage. Previously the excluded memory could eat into\n the quota and make schemes run more slowly than requested.\n\n - \"mm/damon: add kunit and selftests for probes and probe weights\" (SJ\n Park):\n\n Add more tests for DAMON probes and their weights, including\n validation and the results reported to userspace. This is mostly\n about catching regressions in the newer probe infrastructure before\n they become harder to diagnose.\n\n - \"mm: memcontrol: constify the read side of the read side of the memcg\n API\" (Tal Zussman):\n\n Mark the read-only parts of the memcg interface const, from folio and\n lruvec accessors to counters and swap helpers. Most of this is\n mechanical, but it makes the contracts clearer and lets the compiler\n catch accidental writes.\n\n - \"mm/damon/vaddr: support {prep,apply}_probes\" (SJ Park):\n\n Support the new prepare/apply probe operations in DAMON\u0027s\n virtual-address backend. This brings vaddr monitoring into line with\n the probe infrastructure and makes the added probe types useful there\n too.\n\n - \"mm/mglru: clean up folio counters and flag usage\" (Kairui Song):\n\n Simplify MGLRU\u0027s folio counters and flag handling. Remove redundant\n accounting paths and make the state transitions easier to follow\n without changing the intended reclaim policy.\n\n - \"arch, mm/execmem: resolve confusion about set_direct_map_valid_noflush()\"\n (Mike Rapoport (Microsoft)):\n\n Clarify and straighten out the set_direct_map_valid_noflush()\n interface across architectures and execmem. Make the requested\n mapping changes and the callers\u0027 expectations agree, rather than\n relying on subtly different architecture behavior.\n\n - \"mm: zswap: free cold writeback folios promptly\" (Alexandre Ghiti):\n\n Free zswap writeback folios as soon as their disk write completes.\n They are cold temporary buffers, so putting them on the LRU only\n makes reclaim rediscover them later. Extend swap-cache dropbehind and\n let zswap keep these folios off the LRU altogether.\n\n - \"mm: gup: cleanup gup_fast call chain\" (Aristeu Rozanski):\n\n Clean up the GUP-fast call chain and simplify how the fast-path\n helpers pass their arguments and results around. Keep the page-pin\n behavior the same while making the call sequence easier to maintain.\n\n - \"mm: optimize zone-device memmap initialization\" (Li Zhe):\n\n Speed up initialization of zone-device struct pages. Avoid redundant\n work when setting up large device-memory ranges, where touching every\n descriptor can get expensive.\n\n - \"mm/zswap: shrink zswap_entry via a pool id\" (Jianyue Wu):\n\n Reduce the size of zswap_entry by storing a compact pool identifier\n instead of a full pointer. Keep the pool lookup and lifetime handling\n correct while saving per-entry metadata.\n\n - \"mm/damon: support access monitoring of hugetlb-backed memory\"\n (Krishna Iyer):\n\n Let DAMON monitor hugetlb-backed memory too. Extend the relevant\n access checks and add coverage so those mappings no longer fall\n through a hole in the monitoring machinery.\n\n - \"mm/execmem: fixes and cleanups for the ROX cache\" (Mike Rapoport):\n\n Tidy execmem\u0027s read-only-executable cache and fix its handling of the\n awkward allocation and release cases. The aim is to make the cache\u0027s\n ownership and permission transitions more predictable.\n\n - \"zsmallc: remove old object read API\" (Sergey Senozhatsky):\n\n Drop zsmalloc\u0027s old object-read API and move its remaining users to\n the supported access mechanism. This removes a duplicate interface\n which we no longer need.\n\n - \"mm/mempolicy: stop copying state in the interleave paths\" (Gregory\n Price):\n\n Stop copying mempolicy state in the interleave paths when a reference\n to the existing policy will do. This avoids extra work and makes the\n ownership rules less obscure.\n\n - \"mm/mglru: speed up inc_min_seq() and fix cold/hot inversions\" (Barry\n Song):\n\n Make MGLRU\u0027s generation advancement cheaper and fix cases where cold\n and hot folios end up in the wrong order. Adjust the counter and list\n handling so reclaim doesn\u0027t keep passing over the better eviction\n candidates.\n\n - \"mm: Fix MF_DELAYED handling on memory failure\" (Lisa Wang):\n\n Treat MF_DELAYED as a partially completed memory-failure operation,\n not an outright failure. Propagate that result correctly through\n shmem and the generic handler, fix the extra-reference accounting,\n and add tests for the resulting SIGBUS behavior.\n\n - \"tools/mm/page_owner_sort: fix --sort, add module filter, improve\n usage\" (Ye Liu):\n\n Fix page_owner_sort\u0027s --sort handling, add module-based filtering and\n make the usage output more helpful. This makes the tool less\n frustrating when tracking down who is holding on to pages.\n\n - \"mm/damon: move damos filter range arguments validation to core\" (SJ\n Park):\n\n Move DAMOS filter range validation into the core, where all callers\n can share it. Also close the sysfs read-twice races which could pass\n inconsistent ranges, and add tests for invalid input.\n\n - \"mm/damon: misc cleanups\" (Zenghui Yu):\n\n Clean up a collection of small DAMON rough edges in the core,\n interfaces and tests. No large behavior change here, just simpler\n code and fewer opportunities for confusion.\n\n - \"mm/damon: cleanup code, add test cases, and update guidances in\n docs\" (SJ Park):\n\n Clean up DAMON\u0027s core and interfaces, add missing test cases and\n bring the documentation into line with the code. These changes should\n make the newer facilities easier to understand and maintain.\n\n - \"mm/damon: introduce hugepage_size probe filter\" (SJ Park):\n\n Add a DAMON probe filter for hugepage size. Let users select a range\n of folio sizes through sysfs, validate the range and document the new\n interface, so monitoring can concentrate on memory backed by the\n desired hugepage sizes.\n\n - \"selftests/mm: pagemap_ioctl test fixes and cleanups\" (Zenghui Yu):\n\n Fix some pagemap ioctl test assumptions and clean up their setup and\n reporting. Make failures point to the operation that went wrong\n rather than to test harness bookkeeping.\n\n - \"mm: avoid large folio splits when swap is unavailable\" (Johannes\n Weiner):\n\n Avoid splitting large folios merely to attempt swap when no swap\n space is available. There is little point paying for an expensive\n split when reclaim cannot actually swap the resulting pages out.\n\n - \"mm: workingset: fix the shadow node budget under MGLRU\" (Hui Zhu):\n\n Fix the workingset shadow-node budget with MGLRU enabled. Keep the\n shadow entries within the intended limits so refault tracking does\n not quietly consume more metadata than it should.\n\n - \"selftests/mm: TAP output and global-state fixes\" (Song Hu):\n\n Fix selftests which produce misleading TAP output or fail to restore\n global settings after a run. A test ought to leave the system as it\n found it, particularly when a whole suite follows behind.\n\n - \"mm: remove page_swap_entry()\" (Tal Zussman):\n\n Remove page_swap_entry() and convert its remaining users to the folio\n and swap-entry helpers. Lose an old page-level interface and make the\n swap paths a little more consistent.\n\n - \"mm: refactor zonelist constructors and iterators\" (Gregory Price):\n\n Refactor the zonelist construction and walk helpers to reduce\n duplicated logic. Keep the allocation ordering rules intact while\n making it clearer how zones are selected.\n\n - \"mm: kmemleak: batch the struct page scan\" (Breno Leitao):\n\n Scan adjacent struct pages in batches instead of taking kmemleak_lock\n once for every single page. This preserves scan coverage and the\n lock-hold bound, while cutting overhead substantially on debug\n kernels.\n\n - \"mm/damon: misc improvements in tests and documents\" (Zenghui Yu):\n\n Fix some DAMON selftests which leave kdamond running or fail under\n Python safe-path mode, and improve the KUnit coverage and\n documentation. Nothing especially glamorous, but these are worth\n doing.\n\n - \"mm/damon: introduce probe_hits_wsum DAMOS core filter\" (SJ Park):\n\n Add a DAMOS core filter using weighted probe-hit counts. This gives\n schemes another way to select regions based on what the monitoring\n probes observed.\n\n - \"mm/mglru: fix ineffective memory protection for non-kswapd reclaim\"\n (Ridong Chen):\n\n Fix MGLRU\u0027s memory protection handling for reclaim outside kswapd.\n The protection settings weren\u0027t having the intended effect in these\n paths, leaving protected memory more exposed than requested.\n\n - \"mm/damon: improve readability, clarity and test coverage\" (SJ Park):\n\n Simplify a handful of DAMON core helpers, clarify their behavior and\n expand test coverage. There are no intended userspace-visible changes\n in this batch.\n\n - \"mm: replace PF_KCOMPACTD/PF_KSWAPD with kthread_func()\" (Kefeng\n Wang):\n\n Stop identifying reclaim and compaction workers through the PF_KSWAPD\n and PF_KCOMPACTD task flags. Use their kthread functions instead and\n remove the redundant flag plumbing.\n\n - \"mm/hugetlb: fix surplus accounting and availability checks during\n demotion\" (Longlong Xia):\n\n Fix HugeTLB surplus accounting and availability checks when demoting\n huge pages. Keep the counters and reservation decisions consistent as\n one huge page turns into several smaller ones.\n\n - \"mm/damon: add kunit tests for probe_hits handling and probe params\n validation\" (Jason Angelov):\n\n Add KUnit tests for DAMON probe-hit handling and invalid probe\n parameters. These cover edge cases that were too easy to miss in\n ordinary monitoring tests.\n\n - \"mm/damon: fix misc bugs in kunit, quota goals and sysfs refresh_ms\"\n (SJ Park):\n\n Fix a few DAMON bugs in KUnit tests, quota-goal handling and the\n sysfs refresh interval. Small fixes, but the incorrect results and\n control behavior were real.\n\n - \"mm: zswap: optimize zswap invalidate and store\" (Kefeng Wang):\n\n Simplify zswap\u0027s invalidate and store paths to avoid avoidable\n lookups and work. Keep the entry lifetime rules intact while making\n those frequent operations cheaper.\n\n - \"mm: replace custom ratelimiting logic\" (Pedro Falcato):\n\n Replace hand-rolled MM rate limiting with the common kernel helpers.\n There is no need to maintain another local version of the same\n mechanism.\n\n - \"mm/vmalloc: minor cleanups\" (Ye Liu):\n\n Tidy some vmalloc initialization and reporting code, and pull\n duplicated vmap-area insertion work into a helper. No functional\n changes are intended.\n\n - \"mm/mglru: clean up isolate_folios for readability and clarity\"\n (Ridong Chen):\n\n Clean up MGLRU\u0027s isolate_folios() so the decisions are easier to read\n and verify. Keep reclaim behavior unchanged while removing\n unnecessary twists in the control flow.\n\n - \"Catch automatic storage in IDA and Maple Tree definitions\" (Yury\n Norov):\n\n Catch IDA and maple-tree definitions placed in automatic storage\n where the lifetime rules are wrong or easy to get wrong. Add checks\n so such mistakes are harder to slip through unnoticed.\n\n - \"mm, swap: some random fixes and cleanups\" (Kemeng Shi):\n\n Fix and simplify a few unrelated swap paths, removing redundant work\n and tidying up error handling. A small collection of things which\n were better fixed than left lying around.\n\n - \"mm/page_io: folio conversion cleanups\" (Tal Zussman):\n\n Finish some page-to-folio conversions in swap I/O, removing obsolete\n wrappers and using folio operations consistently. The I/O behavior is\n intended to remain the same.\n\n - \"mm/swap: skip empty clusters in the swapoff scan\" (Youngjun Park):\n\n Skip empty swap clusters during swapoff instead of walking slots\n which have nothing to release. This avoids pointless work on sparsely\n used swap devices.\n\n - \"mm: trace: decode architecture-specific VMA flags\" (Meijing Zhao):\n\n Teach the VMA trace output to decode architecture-specific flags,\n rather than leaving them as unexplained bits. That should make\n tracing a good deal more useful when debugging unusual mappings.\n\n - \"mm, swap: don\u0027t spin on a bad swap entry\" (Breno Leitao):\n\n Stop repeatedly retrying a swap entry which is already known to be\n bad. Make the error path terminate cleanly instead of wasting CPU\n chasing an entry that cannot be used.\n\n - \"mm/page_isolation: fix UBSAN shift-out-of-bounds in\n isolate_single_pageblock\" (Qi Xi):\n\n Fix an out-of-range shift in isolate_single_pageblock() and tighten\n its associated boundary handling. UBSAN found the issue; the result\n should be more robust pageblock isolation.\n\n - \"mm: khugepaged: fix tracepoint UAF\" (Vernon Yang):\n\n Fix a use-after-free in khugepaged tracepoint handling. Make sure the\n information recorded by tracing stays valid for as long as the trace\n event needs it.\n\n - \"mm/damon: fix DAMOS bugs in core, paddr and vaddr\" (SJ Park):\n\n Fix several DAMOS problems across the core and physical- and\n virtual-address backends. The changes close error cases and bring the\n implementations back into agreement.\n\n - \"mm/hugetlb_cgroup: move the per-node usage along with the folio\"\n (Hongfu Li):\n\n Move HugeTLB per-node usage accounting when folios migrate between\n nodes or are reparented to another cgroup. Otherwise numa_stat can\n retain stale charges and even underflow when the folio is freed.\n\n - \"docs/core-api: memory-allocation: add k[mz]alloc_obj() and clarify\n kmalloc\" (Mike Rapoport):\n\n Document the typed k[mz]alloc_obj() allocation helpers and clear up\n some kmalloc guidance. Make it easier for callers to choose the right\n interface.\n\n - \"selftests/mm: Validate selections and scope memfd_secret setup\"\n (Tianyi Chen):\n\n Check selftest selections before running and confine memfd_secret\n setup to the cases that actually need it. Avoid confusing failures\n caused by the test harness itself.\n\n - \"mm/damon: move zero damos quota target_value handling to the core\n layer\" (SJ Park):\n\n Handle a zero DAMOS quota goal target in the core rather than making\n each user of the interface invent its own rule. Keep quota decisions\n consistent across callers.\n\n - \"mm/damon: Introduce a huge page collapsing mechanism using auto\n tuning\" (Asier Gutierrez):\n\n Add an auto-tuned DAMON mechanism for collapsing huge pages. Use\n monitoring feedback to decide when collapse is worthwhile rather than\n forcing one fixed policy onto every workload.\n\n - \"kmemleak: fix stale documentation and raise the verbose default\"\n (Breno Leitao):\n\n Bring the kmemleak documentation up to date and require a third\n confirming scan before verbose kernels print a suspected leak. The\n extra scan helps suppress transient false positives in noisy debug\n builds.\n\n - \"mm/memory: improve insert_pages() error handling\" (Avi Weiss):\n\n Tighten insert_pages() error handling so partial failures are\n reported and cleaned up consistently. The caller should not have to\n guess how far the operation got.\n\n - \"mm/damon: allow NULL or unstarted damon_ctx parameter for\n damon_call()\" (SJ Park):\n\n Make damon_call() handle NULL and not-yet-started contexts safely.\n Simplify the rules for callers and avoid an indefinite wait on an\n invalid state.\n\n - \"mm/damon: introduce pgidle_set probe filter type\" (SJ Park):\n\n Add a pgidle_set DAMON probe filter, giving monitoring users another\n way to select pages by their idle-tracking state. Wire it through the\n filter interfaces and tests.\n\n - \"mm/damon/core: remove unused helper functions\" (Cheng-Han Wu):\n\n Remove DAMON core helpers which no longer have callers. Keep the API\n surface smaller rather than retaining dead code just in case.\n\n - \"mm: stop calling pmd_folio() on special PMDs\" (Gregory Price):\n\n Avoid calling pmd_folio() on special PMD mappings that have no struct\n page. The old assumption could fault in procfs walkers; use the\n normal-folio checks and handle those mappings properly.\n\n - \"mm: remove three unused helpers from mm.h\" (Tal Zussman):\n\n Remove three unused helpers from mm.h. Fewer obsolete interfaces for\n the next person to stumble over.\n\n - \"mm/damon: improvements in efficiency, error handling, documents\"\n (Liew Rui Yan):\n\n Skip needless DAMOS quota work once the quota is full, propagate a\n missing sysfs error and tidy a couple of comments. The ignored error\n could make a monitoring-start request appear successful when it\n wasn\u0027t.\n\n - \"docs/mm/damon/design: add explanation of nr_snapshots\" (Liew Rui\n Yan):\n\n Explain DAMON\u0027s nr_snapshots accounting in the design documentation\n and straighten out the associated terminology. Make it clearer what\n users should expect from that counter.\n\n - \"selftests/cgroup: fixes for test_zswap on single core VM\" (Wilson\n Felipe Pereira):\n\n Fix two test_zswap failures on single-CPU VMs. Wait for the exiting\n child\u0027s cgroup to become unpopulated before reconfiguring it, and\n avoid another test assumption which breaks under constrained\n scheduling.\n\n - \"docs/ksm: fix advisor documentation and comment\" (Jinjiang Tu):\n\n Correct the KSM advisor documentation and a misleading code comment.\n Keep the description aligned with how the advisor actually works.\n\n - \"Fix bugs in HugeTLB allocation when mem_cgroup_charge_hugetlb()\n fails\" (Ackerley Tng):\n\n Fix HugeTLB allocation cleanup when the memcg charge fails. Make sure\n failure exits undo what was allocated rather than leaving stale\n accounting or resources behind.\n\n - \"mm, memcg: fix memory.peak reset clobbering other fds\u0027 watermark\"\n (Ridong Chen):\n\n Fix memory.peak reset handling so resetting one file descriptor\n doesn\u0027t overwrite the watermark kept for another. Keep those per-open\n measurements independent as intended.\n\n - \"mm: reject zone device folios in more folio walkers\" (Gregory\n Price):\n\n Reject zone-device folios in page walkers that cannot safely handle\n them. Extend the existing checks rather than assuming every folio has\n ordinary system-memory backing.\n\n - \"percpu: remove code with no effect\" (Sang-Heon Jeon):\n\n Remove a few pieces of percpu code which no longer do anything. There\n is no reason to keep maintaining dead paths.\n\n* tag \u0027mm-stable-2026-10-19-21-33\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm: (539 commits)\n mm: shmem: assign a lock class to the unused huge shrinklist\n mm: vmscan: put rotation-missed folios at the LRU tail\n mm: kmemleak: scan the struct page array in MAX_SCAN_SIZE batches\n mm: kmemleak: move the struct page scan into a helper\n mm/damon: document that a zero sample_interval is accepted\n mm/damon: fix typos in comments\n mm/damon/sysfs: propagate damon_call() error in turn_damon_on\n mm/damon/core: skip quota score setup when the quota is full\n mm/damon/tests/core-kunit: test the size charged for a filter-trimmed region\n mm/damon/core: charge only the part of a region the filter left\n mm: disallow raw PFN mappings of huge/shared zeropage\n selftests/mm: zap whole PTE tables in the khugepaged race harness\n selftests/mm: add memory-pressure threads to the khugepaged race harness\n selftests/mm: race the collapse of windows with holes\n selftests/mm: add khugepaged race harness\n selftests/mm: check that one khugepaged pass collapses one window\n selftests/mm: run every supported collapse order by default\n selftests/mm: cover a shared-source collapse write race\n selftests/mm: parameterize the mixed-source collapse case by source order\n selftests/mm: add order-parameterized khugepaged collapse cases\n ...\n" }, { "commit": "0ef71adafaa9b36a06dd5b823aebcd2fa9b9b9c2", "tree": "29da1e0ecbafefa2e05db502eeda3cd66b6b6b94", "parents": [ "76ebe529a48518d0fa671091a8c2f1a01069aa49", "d7040c620d8b22f839af7750860b96e39cc58b7c" ], "author": { "name": "Miquel Raynal", "email": "miquel.raynal@bootlin.com", "time": "Fri Oct 23 18:50:09 2026 +0200" }, "committer": { "name": "Miquel Raynal", "email": "miquel.raynal@bootlin.com", "time": "Fri Oct 23 18:50:09 2026 +0200" }, "message": "Merge tag \u0027spi-nor/for-7.4\u0027 into mtd/next\n\nSPI NOR changes for 7.4\n\n- Support for new Macronix and (lots of) Winbond flash devices\n- The addition of the Winbond flashes was accompanied by a big rewrite of the\n status register handling. There were many small helper functions to enable\n quad I/O mode in many different ways. That\u0027s now consolidated in one generic\n function.\n- The SFPD handling was reworked. It used to be only parsed for flashes present\n in the in-kernel database which had any of the multi-I/O bit set - or with the\n addition of generic flash driver for any unknown flashes. This left a gap\n where SFDP wasn\u0027t handled and it turns out newer flashes (with SFDP support)\n will reused IDs of just these old flashed. With the rework, SFDP is tried to\n be parsed for any flashes and will amend the information which is already\n present in the in-kernel database.\n- SFDP size limit was increased to 16KiB. There are flashes which have some\n larger gaps between tables and thus exceeds the former 4KiB limit.\n- Flash fixups are getting more and more common. Due to this, the fixups are now\n a separate list (per manufacturer) instead of being attached to a specific\n flash. A new .match() callback makes them more flexible, when one is applied.\n- 1-1-8 and 1-8-8 modes are now supported with larger flashes which needs 4byte\n addresses.\n" }, { "commit": "76ebe529a48518d0fa671091a8c2f1a01069aa49", "tree": "26dd81a02d188de286ee5e25d17194f30fb8d9b1", "parents": [ "2f7fa8d90694d21dce68ceabd8383252b111cfea", "30daaf3e7897b4a8d9b72e5b0c86dd6e2a4d7d85" ], "author": { "name": "Miquel Raynal", "email": "miquel.raynal@bootlin.com", "time": "Fri Oct 23 18:49:30 2026 +0200" }, "committer": { "name": "Miquel Raynal", "email": "miquel.raynal@bootlin.com", "time": "Fri Oct 23 18:49:30 2026 +0200" }, "message": "Merge tag \u0027nand/for-7.4\u0027 into mtd/next\n\nRaw NAND:\n- The Qualcomm controller driver has been cleaned up again.\n- Arasan and IBM have been improved/created.\n- Reflect that ESMT and GigaDevice share ID 0xc8, and disable broken\n timings feature on GD9FU2G8F3A.\n- Platform data support has been dropped from the lpc32xx drivers.\n\nSPI NAND:\n- Heyangtek uses two bytes for the BBM like every other device.\n- Winbond: Add support for W25N04LW and W25N08LW.\n- Support for ISSI SPI NAND flashes.\n\nThen there is the load of API updates and misc AI fixes.\n" }, { "commit": "dae739137441667d67fbfcc4d303a0ecc6618662", "tree": "9146df5f4646e593e92a19b84c64f267b59df436", "parents": [ "15665047024e30f9c2227563d03034061c99ac2c" ], "author": { "name": "Adrian Ambrozewicz", "email": "aambrozewicz@nvidia.com", "time": "Thu Oct 22 11:33:44 2026 +0300" }, "committer": { "name": "Bartosz Golaszewski", "email": "bartosz.golaszewski@oss.qualcomm.com", "time": "Fri Oct 23 09:48:36 2026 +0200" }, "message": "gpiolib: don\u0027t report -ENOMEM for a requested line without a label\n\ngpiod_request_commit() sets GPIOD_FLAG_REQUESTED, calls -\u003erequest() and\nonly then sets the label. A line in between has no label, so\ngpiochip_dup_line_label() passes NULL to kstrdup() and returns\nERR_PTR(-ENOMEM), which for_each_hwgpio() then passes to kfree():\n\n BUG: unable to handle page fault for address: ffcc73074355ffc8\n Call Trace:\n gpio_sim_dbg_show\n gpiolib_seq_show\n seq_read_iter\n\nReturn NULL for such a line, as for an unrequested one.\n\nReproduced with gpio-sim: reading /sys/kernel/debug/gpio in a loop while\nlines are requested and released oopses within seconds; with this\nchange, 100000 cycles pass.\n\nFixes: 35b545332b80 (\"gpio: remove gpio_lock\")\nCc: stable@vger.kernel.org\nReported-by: Sashiko \u003csashiko-bot@kernel.org\u003e\nCloses: https://sashiko.dev/#/patchset/20261020-gpiolib-chip-removal-v3-0-aambrozewicz@nvidia.com?part\u003d2\nAssisted-by: LLM\nSigned-off-by: Adrian Ambrozewicz \u003caambrozewicz@nvidia.com\u003e\nLink: https://patch.msgid.link/20261022083343.3905973-3-aambrozewicz@nvidia.com\nSigned-off-by: Bartosz Golaszewski \u003cbartosz.golaszewski@oss.qualcomm.com\u003e\n" }, { "commit": "734bef548a96e8774d6eef5dfa2026c6edc4e80b", "tree": "ce2520b2602ce3b82f9842490d21836f9838d441", "parents": [ "864c07de0c7dcbca58b61625dfa2e461ae63b242", "1a2c35c49cc7c6be860038b8442b52424a8f123c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 15:58:00 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 15:58:00 2026 -1000" }, "message": "Merge tag \u0027net-next-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next\n\nPull networking updates from Paolo Abeni:\n \"This includes a significant number of low-priority fixes - especially\n in the NIC drivers area - that we deferred from the last few RCs in\n the previous cycle, which can\u0027t be easily outlined in the synopsis\n below.\n\n Core \u0026 protocols:\n\n - Continue the work on removing rtnl_lock dependencies:\n - per-netns ARP and ND neighbour tables, with the default settings\n now configurable per netns (inheritance from init_net is\n controlled by the new net.core.neigh_inherit_init_net sysctl)\n - RCU-protected configuration and rtnl_lock-less fill_info() for\n hsr, netkit, sit, vlan and vxlan devices\n - per-netns device unregistration for ip tunnel and gre devices\n - use the netdev instance lock instead of rtnl_lock when reading\n speed and duplex via sysfs\n - batch the flushing of uncached routes at device unregistration\n time, relieving rtnl_lock contention on netns dismantle.\n\n - Add hardware pacing offload support, admin-controlled via a new\n rtnetlink attribute, with sch_fq integration (implemented in idpf).\n\n - Re-segment BIG TCP GSO packets into GSO packets fitting the egress\n device limits instead of plain MSS-sized segments, improving\n throughput for mixed BIG TCP / non-BIG TCP paths by up to 70%.\n\n - Generate RSS keys that spread flows over all the RX queues; the\n previous random keys could leave some queues unused.\n\n - Optimize the bridge VLAN forwarding paths: cache the port-VLAN in\n fdb entries and consider only VLAN members when flooding, for ~10%\n more Mpps in the fdb forwarding path.\n\n - A few TCP/IP performance improvements aimed at efficient cache\n usage and reducing contention.\n\n - Add the TCP ROCCET congestion control, a CUBIC variant aimed at\n avoiding bufferbloat in cellular networks.\n\n - Continue the conversion of getsockopt callbacks to sockopt_t.\n\n - Add an ethtool command to list the front-facing ports of an\n interface, including SFP cages and modules, using the phy_port\n representation.\n\n - Enable BIG TCP support for bareudp tunnels.\n\n - Remove the IPV6_ADDRFORM socket option and disallow buggy TCP state\n transitions (listen() + shutdown() + connect() and connect() +\n connect(AF_UNSPEC) + listen()).\n\n - Remove most BUG_ON()s from core packet processing, replacing them\n with error paths.\n\n Wireless:\n\n - Latency improvements, including lockless station get/dump and\n beacon updates, plus RTNL reduction and locking cleanups.\n\n - Infrastructure for non-station TX/RX with MLO.\n\n - NAN (Wi-Fi Aware) Instant Communication support and other NAN\n improvements.\n\n - Control frame Integrity Protocol (CIP) and protected TWT support.\n\n - Improvements for AP regulatory checks.\n\n Netfilter:\n\n - Disable br_netfilter in user namespaces and schedule it for removal\n in 2027.\n\n - Restrict the raw table in nft_compat to the specific family, hook\n and priority.\n\n - Prepare the flowtable for mixed IPv4-over-IPv6 tunneling (and vice\n versa).\n\n - Use GFP_KERNEL_ACCOUNT for most netfilter allocations, for better\n integration with memcg.\n\n - Allow discovering conntrack zone filtering support in ctnetlink\n dumps, and fix nfnetlink_hook handling of large dumps.\n\n Deletions:\n\n - Move the LLC type 2 sockets out of tree. There are no known users\n and the code attracts a never-ending stream of LLM-driven fixes.\n\n Device drivers:\n\n - New drivers:\n - Meta Platforms NIC (mpnic), the second-generation NIC from Meta\n - initial skeleton of the Nebula-matrix NICs driver (nbl)\n - X-Powers AC200/AC300 Fast Ethernet PHYs\n\n - Ethernet high-speed NICs:\n - Intel:\n - i40e: XDP metadata support for RX hash and VLAN tag\n - ice: expose the E825 TSPLL state via the DPLL subsystem\n - nVidia/Mellanox:\n - move the data direct infrastructure from IB to core, in\n preparation for netdev support.\n - reduce the memory used per offloaded TC rule\n - Meta (fbnic):\n - support large io_uring zero-copy RX buffers\n - Microsoft vNIC (mana):\n - add BQL support\n\n - Ethernet NICs consumer, and embedded:\n - Airoha:\n - LRO offload support\n - Cadence (macb):\n - context swapping for ringparam and MTU changes, avoiding\n buffer loss under memory pressure\n - Mucse (rnpgbe):\n - TX/RX and link status support\n - NXP (enetc):\n - SR-IOV improvements and VF support for ENETC v4\n - Qualcomm (ppe):\n - IPQ5424 support\n - Realtek PCI (r8169):\n - phylink support\n - RSS support for RTL8127\n - Renesas (ravb):\n - gPTP support for R-Car Gen4\n - Synopsys (stmmac):\n - XDP multi-buffer support on the TX side\n - tc mqprio hw queue priority offload\n - support for RK3568 SGMII, Allwinner H616 EMAC1, UltraRISC\n DP1000 and Qualcomm sa8255p\n\n - Ethernet switches:\n - Mediatek (mt7530):\n - fast age and change conduit support\n - Microchip (ksz):\n - support for KSZ8995XA/KS8995XA\n - Microchip (lan966x):\n - PCIe FDMA support, ~20x throughput increase in PCIe endpoint\n - Microchip (sparx5):\n - Time Aware Shaper (taprio) offload\n - Motorcomm (yt921x):\n - LED and SerDes PCS support\n - Realtek (rtl8365mb):\n - EEE support\n\n - Ethernet PHYs:\n - Broadcom:\n - enable jumbo frames on BCM54xx\n - Realtek:\n - support for RTL8261CE_CG and RTL8261D_VM\n - MDIO support for RTL838x and RTL839x\n\n - WiFi drivers:\n - Broadcom (brcmfmac):\n - FT/OKC roaming offload\n - Intel (iwlwifi):\n - UHR sniffer support\n - support for newer UEFI/BIOS tables\n - MediaTek (mt76):\n - mt7925 NAN improvements\n - offchannel/scan improvements and MLO fixes\n - Morse Micro (mm81x):\n - monitor mode support\n - Qualcomm (ath12k):\n - IPQ5332 platform infrastructure\n - Realtek (rtw88):\n - RTL8723BS support\n - SDIO TX performance improvements\n - Realtek (rtw89):\n - P2P_DEVICE support\n - BT-coex updates for RTL8922D\n\n - Bluetooth:\n - move H:4 reassembly into the Bluetooth core\n - add generic support for vendor packets\n - MGMT: add security level changed event\n\n - Bluetooth drivers:\n - btusb: support Bulk Serialization Mode\n - Intel: support Draco and Titan Lake, allow unsigned firmware\n - Mediatek: MT7928 support\n - Qualcomm: QCC2072 support\n - Broadcom: Synaptics 4384 support\"\n\n* tag \u0027net-next-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next: (2126 commits)\n Bluetooth: btusb: disable by default Qualcomm multi-subsystem\n tipc: fix broadcast sender hang on last acker departure\n tipc: fix use-after-free of broadcast reception link at node release\n r8169: clear TX LPI on RTL8168h at link up after phylink conversion\n tun: Require CAP_NET_ADMIN to attach to an ownerless device\n net/sched/sch_cake: drop dead nla_nest_end() error check\n net/sched/sch_cake: widen buffer_used to u64\n net/sched/sch_cake: reduce parent backlog when clearing a tin\n net/sched/sch_cake: serialize reconfiguration with the datapath\n tg3: Add Datto SIRIS 5 1U Server to restart AER quirk table\n net/mlx5e: Stop asserting for RTNL when closing channels\n net: shrink the payload-only part of skb dataref to one bit\n net: wwan: iosm: validate msg_head before indexing msg_ring\n net: bgmac: rate limit RX error messages\n selftests: net: veth: test XDP_TX to a peer with GRO enabled\n veth: schedule the peer\u0027s NAPI after XDP_TX when only GRO is enabled\n pppoe: delete session hash entries by pointer match\n net: lan969x: don\u0027t disable hardirqs in fdma tx clear\n net: sparx5/lan969x: do not clobber the PSFP cycle timer update period\n net: lan969x: fix DSM calendar for empty taxis\n ...\n" }, { "commit": "864c07de0c7dcbca58b61625dfa2e461ae63b242", "tree": "4d2c5f0962b95b99c8f5b04f62ff729086ac5f34", "parents": [ "5b193d6a8973655f19de87a7873ce31dee2d5fe6", "2f70a9b7e9c74b92a85a2584090f0f5c4cbaa4be" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 15:01:57 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 15:01:57 2026 -1000" }, "message": "Merge tag \u0027hardening-v7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux\n\nPull hardening updates from Kees Cook:\n\n - Provide kmalloc_obj*-style API for devm_kmalloc()\n\n - Improve seq_buf API for saner C String handling with several bug\n fixes along the way (Kees Cook, Bill Wendling)\n\n - Overflow helper readability improvements (Bill Wendling)\n\n - Unexport native_write_cr4() (Dennis Chen)\n\n - um: fix CONFIG_GCOV for built-in code (Johannes Berg)\n\n - Improve stackinit test coverage (Justin Stitt)\n\n - KMSAN: fix memset() when using fortify-source, again (Arnd Bergmann)\n\n - lkdtm: use kmalloc() instead of __get_free_page (Mahad Ibrahim)\n\n - signalfd: don\u0027t dequeue the forced fatal signals (Oleg Nesterov)\n\n - Fix randstruct to recognize new container_of() behavior\n\n - coccinelle: kmalloc_obj: Convert multi-byte integral allocations too\n\n - Fix a couple remaining allocation return type mismatches\n\n* tag \u0027hardening-v7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux: (29 commits)\n overflow: Match arithmetic in both parts of __builtin_choose_expr\n lkdtm: Make UNSET_SMEP built-in-only and unexport native_write_cr4()\n extcon: realtek: Remove const from type_c_cfg allocation type\n coresight: cti: Add const to con_groups allocation type\n docs: core-api: Document the seq_buf API\n nvdimm: ndtest: Return the string length from flags_show()\n powerpc/papr_scm: Return the string length from the sysfs show functions\n seq_buf: Add seq_buf_init_append()\n bpf: Remove dead newline stripping from format_disasm_line()\n seq_buf: Add seq_buf_terminate()\n seq_buf: Add seq_buf_strlen()\n seq_buf: Clear what a writer did not claim when a seq_buf overflows\n seq_buf: Copy what fits when seq_buf_puts() and seq_buf_putmem() overflow\n scsi: lpfc: Print rx monitor records straight into the seq_buf\n seq_buf: Do not pop from an overflowed seq_buf\n seq_buf: Do not print an empty line from an overflowed seq_buf_do_printk()\n .get_maintainer.ignore: Add Kees Cook\n devres: Provide kmalloc_obj*-style API for devm_kmalloc\n mm: Move default_gfp() into gfp_types.h\n kunit/stackinit: Clean up XFAIL under instrumentation\n ...\n" }, { "commit": "5b193d6a8973655f19de87a7873ce31dee2d5fe6", "tree": "e4028271892aa34ad12ffae196b884401412646b", "parents": [ "79132ddf81d78d9b84d9b8f05c7c5c3a3e912537", "b36b990c50b1f581b9a7f35ae256f5542415fa69" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 14:57:31 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 14:57:31 2026 -1000" }, "message": "Merge tag \u0027execve-v7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux\n\nPull execve update Kees Cook:\n \"Make CIs happier about the execve tests: report the skipped\n binfmt_misc_bpf test on stderr (Sasha Levin)\"\n\n* tag \u0027execve-v7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux:\n selftests/exec: report the skipped binfmt_misc_bpf test on stderr\n" }, { "commit": "79132ddf81d78d9b84d9b8f05c7c5c3a3e912537", "tree": "024dee3cf10e3d1f2da0f95c83884f5ba7dd0c3b", "parents": [ "075e3396ebf5dfd0030bfe12642fa82cecd0c6ee", "e32008340585a12783045c4426fbb963cfa11b7e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 14:49:03 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 14:49:03 2026 -1000" }, "message": "Merge tag \u0027seccomp-v7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux\n\nPull seccomp updates from Kees Cook:\n\n - allow addfd to transfer O_PATH descriptors (Cong Wang)\n\n - allow restarting interrupted unreceived notifications (Cong Wang)\n\n - fix SECCOMP_ADDFD_FLAG_SEND when interrupted (Hui Peng)\n\n - Various docs and test clean-ups\n\n* tag \u0027seccomp-v7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux:\n selftests/seccomp: Split fork_and_close into clone and close tests\n seccomp: Document RESTART_BEFORE_RECV and O_PATH addfd\n selftests/seccomp: test addfd with an O_PATH descriptor\n seccomp: allow addfd to transfer O_PATH descriptors\n docs/seccomp: describe the SECCOMP_FILTER_FLAG_RESTART_BEFORE_RECV flag\n selftests/seccomp: cover restart of unreceived notifications\n seccomp: allow restarting interrupted unreceived notifications\n seccomp: restore knotif-\u003estate when SECCOMP_ADDFD_FLAG_SEND is interrupted\n" }, { "commit": "075e3396ebf5dfd0030bfe12642fa82cecd0c6ee", "tree": "24b207306f24350761a0bfec7cb5914c6e875917", "parents": [ "3ac032ef6ca8e47bb06d1e189dfcf88fa0a09c75", "7c756181175d50200be487affa905e973f6cbaf5" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 14:45:56 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 14:45:56 2026 -1000" }, "message": "Merge tag \u0027pstore-v7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux\n\nPull pstore updates from Kees Cook:\n\n - don\u0027t leave an ERR_PTR in the ramoops zone pointer (Andrea Parri)\n\n - reject persistent RAM zones too small for the buffer header (Andrea Parri)\n\n - publish big_oops_buf after max_compressed_size (Jaidev Shastri)\n\n* tag \u0027pstore-v7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux:\n pstore: publish big_oops_buf after max_compressed_size\n pstore: reject persistent RAM zones too small for the buffer header\n pstore: don\u0027t leave an ERR_PTR in the ramoops zone pointer\n" }, { "commit": "3ac032ef6ca8e47bb06d1e189dfcf88fa0a09c75", "tree": "7dd7d10849e50e38721db3bce4285e585e0e77c7", "parents": [ "fcb92ecd733e11f37c32e7485da976a40d878e72", "bc6f2a284c63313e789d8cd294531e1cc2dc8c99" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 13:56:36 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 13:56:36 2026 -1000" }, "message": "Merge tag \u0027for-linus-fwctl\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/fwctl/fwctl\n\nPull fwctl update from Jason Gunthorpe:\n\n - One bug fix for a CFI issue in the Rust bindings\n\n* tag \u0027for-linus-fwctl\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/fwctl/fwctl:\n rust: fwctl: declare cfi_encoding for fwctl_rpc_scope\n" }, { "commit": "fcb92ecd733e11f37c32e7485da976a40d878e72", "tree": "a890fddbbb6804eb812cc3b7c7e605fc8ddbe12f", "parents": [ "1021679bed5acc46e1b2dac78bdd006bd50970f4", "c3e8e9451e6f1b69f685b75e0fbf14f3d0fb2539" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 13:51:18 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 13:51:18 2026 -1000" }, "message": "Merge tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma\n\nPull rdma updates from Jason Gunthorpe:\n \"A smaller cycle for features, still mostly AI and tool found bug fixes\n for long standing issues:\n\n - Bug fixes and minor cleanups across bnxt_re, cxgb4, EFA, ERDMA,\n HFI1, HNS, ionic, iRDMA, mlx4/mlx5, rdmavt, rtrs, RXE, SIW, SRP,\n isert and IPoIB. Lots of error unwind leaks, integer overflows, and\n use after free during teardown from timers/work that was not\n cancelled\n\n - Core fixes for uverbs DMABUF lifetime, RMPP reassembly use after\n free, multicast rb-tree corruption, restrack, and a user\n triggerable NULL deref when creating a WQ without a CQ\n\n - Prevent userspace from getting a writable mmap of the cxgb4 status\n page and the mlx4 clock page\n\n - Many rxe hardening fixes for bad user and network input, plus\n netdev and tunnel socket lifetime fixes\n\n - Peer supplied values are now validated in rtrs-clt, which is remote\n triggerable\n\n - umem now picks the DMA direction from the access flags instead of\n always using DMA_BIDIRECTIONAL, so an IOMMU can stop the device\n from writing to read-only memory. Several drivers were fixed to pin\n CQ and queue memory as writable to go along with this\n\n - SRQ support, firmware assigned CQ IDs and RCQ userspace support for\n ionic\n\n - RC QP improvements in MANA: MMQ creation, fixed size send WQEs and\n power of two send queues. Also multi-port GSI QPs and a rework of\n the UD send/receive and CQ polling paths\n\n - Relaxed ordering MRs for EFA\n\n - Non-contiguous kernel QP and CQ buffers for ERDMA\n\n - Move the mlx5 data direct infrastructure from mlx5_ib to mlx5_core\n so netdev can use it too. The data direct PCI driver is now named\n \"mlx5_dd\"\n\n - debugfs knob in hns to fix the SL used by the GSI QP, working\n around a HW problem with dropped CQEs\n\n - Selftest fixes, removal of the qib sysfs ABI docs, DT schema\n conversion for hns, and MANA maintainer handover\"\n\n* tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma: (153 commits)\n RDMA/irdma: Bound in-flight CQP ops across deferred completions\n RDMA/mlx5: Validate priority in STEERING_ANCHOR_CREATE handler\n RDMA/mlx5: Fix CQ resize destination index mask\n RDMA/usnic: Bound buffer size to sizeof(buf) in flowinfo_read()\n RDMA/rxe: Clear pkt-\u003eqp before the early drop exits in rxe_rcv()\n dt-bindings: infiniband: Convert hisilicon,hns-roce-v1 to DT schema\n RDMA/srp: Avoid reading uninitialized has_port on srp_parse_in() failure\n RDMA/irdma: Fix PBLE_LEVEL_2 FRWR generation\n RDMA/core: Reject LAG selection when source MAC lookup fails\n RDMA/core: Free unpublished port statistics after initial-read failure\n RDMA/core: Preserve the selected source GID on failed AH modification\n RDMA/uverbs: Fix DMABUF use-after-free during ufile cleanup\n RDMA/uverbs: Fix uobject leak in DMABUF release\n RDMA/irdma: Fix FRWR IRDMAQPSQ_PBLADDR field population\n IB/rdmavt: Fix error unwind path for qp_priv_init() in rvt_create_qp()\n RDMA/irdma: Check MR contiguity before PBLE alloc\n IB/mlx4: Avoid requeueing executing CM timeout work\n RDMA/rxe: bound the WQE opcode before indexing rxe_wr_opcode_info[]\n RDMA/rxe: Fix out-of-range unsigned-to-signed conversion for RDMA message in 2GiB size\n RDMA/rxe: validate inline sge_offset in finish_packet() before indexing inline_data[]\n ...\n" }, { "commit": "1021679bed5acc46e1b2dac78bdd006bd50970f4", "tree": "d5fecc3721d2041d1798a6ff003dac481e54f634", "parents": [ "a1c2b1da93f5f612aa7a33190c4900c98e51f6da", "04bcf84613346b973a8cc0c59238b6b5bc902688" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 13:48:30 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 13:48:30 2026 -1000" }, "message": "Merge tag \u0027for-linus-iommufd\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jgg/iommufd\n\nPull iommufd updates from Jason Gunthorpe:\n \"Several bug fixes, probably found by AI based on the emails:\n\n - Several edge cases in the self test\n\n - Reject malformed invalidation commands in case the VMM let them\n through\n\n - Rework how the invalidation interface works to the drivers to be\n more robust and fix several Sashiko issues\n\n - Correct several error unwind paths\n\n - UAF during eventq file release\n\n - Reject more malformed usage of the dirty tracking by the VMM\"\n\n* tag \u0027for-linus-iommufd\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jgg/iommufd:\n iommupt: Do not allow PTEs to be split when dirty logging\n iommufd/iova_bitmap: Ensure that iova_bitmap_set() handles the full IOVA\n iommufd: Reject a zero-length dirty bitmap request\n iommufd/iova_bitmap: Fail GET_DIRTY_BITMAP when a bitmap page cannot be pinned\n iommufd: Fix event queue release use-after-free\n iommufd: Keep dmabuf PFNs MMIO when filling another domain\n iommufd: Keep reserved IOVA ranges when a replace within one IOAS fails\n iommufd: Fix iommufd_hw_capabilities reference in kernel-doc\n iommu/vt-d: Convert nested cache invalidation to the core array loop\n iommu/arm-smmu-v3-iommufd: Convert cache invalidation to the core array loop\n iommufd/selftest: Convert cache invalidation mocks to the core array loop\n iommufd: Iterate the cache invalidation array in the core\n iommu/arm-smmu-v3-iommufd: Reject unsupported bits in invalidation commands\n iommufd/selftest: Skip when the mock device is not there\n iommufd/selftest: Return dmabuf fd from IOMMU_TEST_OP_DMABUF_GET again\n" }, { "commit": "a1c2b1da93f5f612aa7a33190c4900c98e51f6da", "tree": "d321c6eb9b42aa7a9b7f9a14056760b9530400cc", "parents": [ "98aec86f8c6bf2e1091fefb99eaba8b910e8eef1", "47193113641e5e1f9b5758b73d7b7a0273acb836" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 10:41:18 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 10:41:18 2026 -1000" }, "message": "Merge tag \u0027for-linus-tsm\u0027 of https://github.com/jgunthorpe/linux\n\nPull TSM update from Jason Gunthorpe:\n \"One patch to update the maintainers file following Dan\u0027s passing for\n TSM subsystem. Three people have volunteered to help complete this\n work\"\n\n* tag \u0027for-linus-tsm\u0027 of https://github.com/jgunthorpe/linux:\n coco/tsm: Update maintainership\n" }, { "commit": "98aec86f8c6bf2e1091fefb99eaba8b910e8eef1", "tree": "262edefdccfcca1df2cd15ffef6bfc7563ad48ef", "parents": [ "77f77fb7923feab3edd0accf793235623ef4b342", "1f5dde349ac2fca1f119ae8de3f0d2f1c2a8d338" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 10:37:35 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 10:37:35 2026 -1000" }, "message": "Merge tag \u0027sched_ext-for-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/sched_ext\n\nPull sched_ext updates from Tejun Heo:\n\n - Proxy execution can now be enabled together with sched_ext. A BPF\n scheduler can opt in to receive mutex-blocked tasks that donate their\n scheduling context to the lock owner and place them itself.\n\n - Lazy preemption: a BPF scheduler can preempt or kick a CPU lazily,\n deferring the switch to the next return to user space or tick, as the\n fair class can.\n\n - Sub-schedulers: a parent now learns which child runs on each CPU it\n delegated and when a cap change takes effect. A detaching child loses\n its caps before the parent restores the CPUs.\n\n - New kfuncs re-enqueue single tasks from a dispatch queue iteration\n and report a cgroup\u0027s CPU count and a CID\u0027s NUMA node. The CID\n topology now includes clusters.\n\n - Hot path optimizations: dispatch queue and task lookups compare keys\n inline, remote task moves no longer take a dispatch queue lock twice,\n and sub-scheduler hooks cost nothing without sub-schedulers.\n\n - Kfuncs callable from tracing programs are hardened against NMI and\n IRQ nesting, which could hard-lock the CPU or pick a wrong idle CPU.\n\n - Built-in dispatch queues no longer allocate per-CPU state that grew\n with the square of the CPU count.\n\n - Header syncs with the scx repo, a BTF workaround for pahole 1.32, and\n selftest fixes and coverage.\n\n* tag \u0027sched_ext-for-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/sched_ext: (69 commits)\n sched_ext: Drop the locks periodically while walking a user DSQ for re-enqueue\n sched_ext: scx_qmap: Also re-enqueue stranded tasks with scx_bpf_dsq_reenq_task()\n sched_ext: Add scx_bpf_dsq_reenq_task() to re-enqueue single tasks from a DSQ iteration\n sched_ext: Factor out the rq lock switch of scx_dsq_move()\n sched_ext: Don\u0027t queue balance callbacks from a core-sched pick\n sched_ext: Don\u0027t leave balance callbacks queued across a pick retry\n sched_ext: Fix a bypassed task stalling on a cpu its scheduler has no caps on\n sched_ext: Fix the running task keeping its protection into bypass\n sched_ext: Fix use-after-free of a local reenq node left on an inactive cpu\n sched_ext: Keep proxy donors with slice left on the local DSQ\n selftests/sched_ext: Report reload_loop attach failures\n selftests/sched_ext: Bound exit waits\n selftests/sched_ext: Add SCX_ASSERT_ALIVE and adopt it\n selftests/sched_ext: Fail loudly when EXIT_KIND is missing from BTF\n sched_ext: Add SCX_ECODE_RSN_CGROUP_OFFLINE to user_exit_info.h\n selftests/sched_ext: Fix reload_loop error-path use-after-free\n selftests/sched_ext: Fix build error in dequeue_remote selftest\n sched_ext: scx_qmap: Reset a child\u0027s cpuperf targets once its PERF revoke takes effect\n sched_ext: Add ops.sub_child_ecaps_updated() to report a child\u0027s effective cap changes\n sched_ext: scx_qmap: Show actual cid use per participant\n ...\n" }, { "commit": "77f77fb7923feab3edd0accf793235623ef4b342", "tree": "b29b6def51ee7717014c6e1d7a757622eddd26f0", "parents": [ "031cb4ccf803f15b73e153d71024d75031bef5f3", "1850c669516cb8568150937497a9a16a7bfa1582" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 10:28:11 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 10:28:11 2026 -1000" }, "message": "Merge tag \u0027cgroup-for-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup\n\nPull cgroup updates from Tejun Heo:\n\n - A write to cgroup.subtree_control or cgroup.type could hang in D\n state for as long as a task pinning a dying controller took to exit,\n as syzbot reported. The wait is now interruptible.\n\n - cpuset: the deadline bandwidth check ran on cpusets that weren\u0027t\n valid partition roots, failing cpuset writes with -EBUSY while\n deadline tasks existed. The CPU count the fair class takes from\n cpuset assumed a shared hierarchy that cgroup1 may not have.\n\n - Finding a cgroup\u0027s effective controller state no longer walks up the\n hierarchy, for per-I/O users such as nvmet. io.stat reads of cgroups\n without block devices skip the stat flush.\n\n - cpuset v1-only code moved to the v1 file and the exclusive flag\n dropped from v2, with documentation corrections for partition roots\n and boot-isolated CPUs.\n\n - Dead cgroups fail writes with -ENODEV consistently, plus small\n cleanups.\n\n - Selftest fixes, most visibly for tests that skipped on machines with\n many mounts, and a new pids.events notification test.\n\n* tag \u0027cgroup-for-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup: (27 commits)\n selftests/cgroup: test pids.events notification\n selftests: cgroup: make test_memcg_sock check flushed sock stats\n selftests: cgroup: skip test_memcg_sock under cgroup.memory\u003dnosocket\n selftests/cgroup: Free the paths returned by cg_control()\n selftests: memcg: Don\u0027t close an uninitialized fd\n cgroup: Track the effective css in each cgroup\n cgroup/cpuset: Move cpuset_update_flag() to cpuset-v1.c\n selftests: cgroup: Preserve command arguments in with_stress.sh\n selftests: cgroup: Enable the cpu controller in test_cpu\n cgroup/cpuset: Use cpuset_v2() in cpuset_num_cpus()\n selftests/cgroup: add settings file with a longer timeout\n cgroup/cpuset: Remove CS_CPU_EXCLUSIVE handling code from v2\n cgroup/cpuset: Run SCHED_DEADLINE shrink test on valid partition root only\n docs: cgroup-v2: Describe effective CPUs of partition roots\n docs: cgroup-v2: Describe boot-isolated CPUs in cpuset.cpus.isolated\n cgroup/cpuset: Remove redundant sched domain rebuild from update_prstate()\n selftests/cgroup: don\u0027t crash on a truncated mount entry in cg_find_root()\n selftests/cgroup: read the entire file in read_text()\n blk-cgroup: skip rstat flush for cgroups without blkgs\n cgroup: use assign_bit() where applicable\n ...\n" }, { "commit": "031cb4ccf803f15b73e153d71024d75031bef5f3", "tree": "3c72a2a510e46d594870fb3bb22c52f7e8d416c3", "parents": [ "14785eff402944f56466ef0058408334cfc2f91d", "bda345b3fc59f2899c50379c64a0734a3e720683" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 10:25:52 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 10:25:52 2026 -1000" }, "message": "Merge tag \u0027wq-for-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/wq\n\nPull workqueue updates from Tejun Heo:\n\n - Flushing a workqueue now visits only the queues used since the last\n flush instead of one per possible CPU. Idle flushes get 10 to 100\n times faster on large machines, which XFS hits on every log force.\n\n - Per-cpu workqueues are built through the same attribute path as\n unbound ones and get a max_active of their own, continuing the work\n to turn them into an affinity scope of unbound workqueues.\n\n - New tracepoints for work items turning CPU-intensive, rescuer mayday\n and rescue events, and BH workers yielding with work pending.\n\n - A KCSAN annotation and small cleanups\n\n* tag \u0027wq-for-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/wq:\n workqueue: mark pool-\u003enr_running as __data_racy\n workqueue: BUG_ON() a pwq release before workqueue_init()\n workqueue: Derive the standard attrs from the workqueue flags\n workqueue: Give percpu workqueues their own max_active\n workqueue: Make flush_workqueue() visit only pwqs active since the last flush\n workqueue: Maintain pwq-\u003etotal_in_flight\n workqueue: Add for_each_node_with_fallback()\n workqueue: Fix typo \"upto\" in comment\n workqueue: Add workqueue_bh_budget_yield tracepoint\n workqueue: Add workqueue_mayday and workqueue_rescued tracepoints\n workqueue: Add workqueue_cpu_intensive tracepoint\n workqueue: rename the pwq slot helpers shared with percpu\n workqueue: build percpu pwqs through the attrs path\n workqueue: make the default pwq optional\n workqueue: resolve the backing pool in alloc_pwq()\n workqueue: move the unbound-only attrs check to apply_workqueue_attrs()\n" }, { "commit": "14785eff402944f56466ef0058408334cfc2f91d", "tree": "b61a8af6aa38f266bb7ee6a34de837a295a1853a", "parents": [ "3815f7d55ae18564f4eac57557479f8b3548af95", "722658cac48a6ba49f5506fd74d010ad9dbb2f05" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 10:02:37 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 10:02:37 2026 -1000" }, "message": "Merge tag \u0027keys-v7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd\n\nPull keys updates from Jarkko Sakkinen:\n \"Highlight:\n\n - Don\u0027t leak local kernel addresses (and complement the ongoing\n rhashtable migration) (Kyle Zeng)\n\n The index value for the associative array has been calculated with\n the following formula:\n\n\tmult_64x32_and_fold(description + type address + domain address)\n\n By creating a sequence of dummy keys (e.g., \"A\", \"B\", \"C\", ...), it\n is trivial to form a group of equations with a predictable hash\n function, and ultimately break KASLR.\n\n Kyle\u0027s solution is based on an ephemeral SipHash key and an atomic\n 64-bit counter, which is encapsulated to a key_index_id(). This\n function is then used to assign identifiers for types and domains,\n and since the IDs are unique for each power on, they are as unique\n as memory addresses are.\n\n With these ingredients the index value calculation can be changed\n into form, which is not leaking any kernel addresses:\n\n\tSipHash(description + type id + domain id)\n\n Features and improvements:\n\n - TPM fields were moved from trusted_key_options to the TPM backend.\n They cost memory for non-TPM backends.\n\n - A TPM trusted key now caches tpm_is_tpm2() at the root of each call\n chain, and passes the result as a parameter. This decreases the\n amount of I/O traffic given that tpm_is_tpm2() starts and stops the\n chip via tpm_try_get_ops() and tpm_put_ops().\n\n Bugfixes:\n\n - A TPM trusted key corrupted the return value of a failed key\n unsealing operation if the pcrlock feature was used.\n\n - A TPM 2 trusted key allocated an off-by-four too large buffer for\n the decoded ASN.1 blob coming from keyctl add trusted.\n\n - Sometimes a TPM 2 trusted key rejected created keys based on the\n TPM2_Create response size, treating them as too large. Now it\n correctly checks the extracted TPM2 key blob size.\n\n - The keyctl reject operation raced with keyctl restrict_keyring\n because keyring-\u003esem was not held in key_reject_and_link() before\n accessing keyring-\u003erestrict_link.\n\n - keyctl_describe_key() was not holding key-\u003esem while accessing its\n fields, which can lead to use-after-free of a retired key type.\n\n - find_keyring_by_name() and procfs code were reading the UID from\n key-\u003euser-\u003euid instead of key-\u003euid. The latter is the cached value\n and is meant to protect against a use-after-free caused by keyctl\n chown.\n\n - search_process_keyrings_rcu() did not properly RCU-dereference the\n authorization key payload, which could cause a null dereference if\n the payload was revoked.\n\n - keyctl_read_key() checked key-\u003etype-\u003eread without holding key-\u003esem,\n which can lead to use-after-free if the type is retired. Based on\n my suggestion, this was addressed in __keyctl_read_key(), which\n already did take key-\u003esem\"\n\n* tag \u0027keys-v7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd:\n keys/trusted_keys: reuse TPM version in option handling\n security: keys: Fix comment of search_process_keyrings_rcu()\n keys/trusted/tpm2: Validate TPM2_Create object sizes separately\n keys/trusted_keys: move TPM-specific fields into struct trusted_key_tpm\n keys: Protect the read method check against type removal\n keys: Avoid owner account dereferences in /proc/keys\n keys: make keyring indexes independent of kernel addresses\n keys: Check the authorization payload in process keyring searches\n keys: Avoid the owner account dereference in named keyring lookup\n keys: Protect the type name while describing a key\n KEYS: Fix key_reject_and_link() race with keyring restriction\n KEYS: trusted: Fix blob allocation size in tpm2_key_decode()\n keys/trusted_keys: return immediately after TPM unseal failure\n" }, { "commit": "3815f7d55ae18564f4eac57557479f8b3548af95", "tree": "e8ec39efb4107e35910700c2ea8bc91c9a0bf77e", "parents": [ "bbc48daecac6c69ccbce4005aa2a681298e2fc7d", "3e271a27c46fd591d1011c7de5a644a41e2010f1" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 09:58:44 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 09:58:44 2026 -1000" }, "message": "Merge tag \u0027landlock-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux\n\nPull Landlock update from Mickaël Salaün:\n \"The main change adds composable Landlock controls for namespace types\n and Linux capabilities, thanks to new LSM hooks (merged via the LSM\n tree). A umount race condition is also fixed\"\n\n* tag \u0027landlock-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux:\n landlock: Fix superblock use-after-free in release_inode()\n selftests/landlock: Fix snprintf truncation checks in test files\n landlock: Add documentation for capability and namespace restrictions\n samples/landlock: Add capability and namespace restriction support\n selftests/landlock: Add capability restriction tests\n selftests/landlock: Add namespace restriction tests\n landlock: Enforce capability restrictions\n landlock: Enforce namespace use restrictions\n landlock: Wrap per-layer access masks in struct layer_config\n landlock: Rename quiet_masks to quiet_access\n" }, { "commit": "bbc48daecac6c69ccbce4005aa2a681298e2fc7d", "tree": "b5c0b56132d8479e376f3491ed30b8af38e4465b", "parents": [ "31aa19260278943f8539da6837f03fdeadf4aa7e", "e2f08fadb48509c239e47cdaf81438c162395932" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 09:55:12 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 09:55:12 2026 -1000" }, "message": "Merge tag \u0027ipe-pr-20261019\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wufan/ipe\n\nPull IPE updates from Fan Wu:\n\n - Fix an extra empty audit record on enforcement changes\n\n ipe_audit_enforce() started an audit buffer but logged the state\n change with audit_log(), which emits its own record. Ending the\n unused buffer produced an additional empty AUDIT_MAC_STATUS record\n every time the enforcement state was changed.\n\n - Keep the name and token tables in sync with their enums\n\n The audit name tables now use designated initializers, so each name\n stays bound to its enum value, and static assertions on the policy\n parser token tables break the build if an enum value is added without\n a matching token.\n\n - Constify token_default() and correct a comment about policy text\n ownership, with no functional changes\n\n - Fix an invalid sgid value in an audit event example in the docs\n\n - Point the docs to the new IPE website and test suite repository\n\n* tag \u0027ipe-pr-20261019\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wufan/ipe:\n ipe: update the project and test suite links\n ipe: fix enforcement audit\n ipe: correct policy text ownership comment\n ipe: check parser token table sizes\n ipe: use designated initializers for audit name tables\n ipe: constify token_default()\n ipe: fix invalid sgid value in audit event documentation\n" }, { "commit": "31aa19260278943f8539da6837f03fdeadf4aa7e", "tree": "d89756dea1d72b52387189e2fd15258de0021f49", "parents": [ "bf2325084583daaea91084b25069f121d5d8832b", "ceb24c7052cc4649e3b52a51a7cca7dfe4896cec" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 09:53:20 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 09:53:20 2026 -1000" }, "message": "Merge tag \u0027integrity-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity\n\nPull IMA updates from Mimi Zohar:\n \"Cleanup:\n\n - Update ima_audit_msg() to report errno directly, revert making it a\n wrapper for ima_audit_message(), and remove ima_audit_message()\n\n Two bug fixes when carrying the IMA measurement list across kexec:\n\n - Restore the number of violations in the IMA measurement list\n\n - Reject restoring IMA measurement list record(s) beyond the expected\n buffer size (out-of-bounds)\"\n\n* tag \u0027integrity-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity:\n ima: reject a kexec buffer whose declared size exceeds the buffer\n ima: recover number of violations after kexec\n integrity: Replace integrity_audit_message() with integrity_audit_msg()\n integrity: Report error code in integrity_audit_msg() call sites\n" }, { "commit": "bf2325084583daaea91084b25069f121d5d8832b", "tree": "92934f2b651890d36f1a2177c31a246b25b412c0", "parents": [ "2a08195e4db5aba84600db6518089a1dbe2d04c7", "178aff4cf425b3fc51ff09c571fa1bfbc1eb8ea4" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 09:36:46 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 09:36:46 2026 -1000" }, "message": "Merge tag \u0027v7.4-p1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6\n\nPull crypto updates from Herbert Xu:\n \"API:\n - Fix algif_skcipher source SG overrun\n - Allow hmac(sha512) for non-root users\n\n Algorithms:\n - Add wrapper for zeroing AES key context\n - Avoid redundant stream initialisations in zstd\n\n Drivers:\n - Remove hisilicon/sec.\n - Handle digest-only authenc requests in atmel\n - Handle zero-length skcipher requests in mxs-dcp\n - Lower the default priority of caam/qi2\n\n Others:\n - Optimise key comparison in rhashtable lookup that uses constant\n parameters\"\n\n* tag \u0027v7.4-p1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6: (146 commits)\n crypto: atmel-tdes - consolidate error paths in atmel_tdes_dma_init()\n crypto: atmel-tdes - reuse fast in atmel_tdes_crypt_start()\n crypto: atmel-tdes - use separate DMA scatterlists\n MAINTAINERS: delete entry for John Allen\n hwrng: amd - use PMBASE_OFFSET consistently\n hwrng: cctrng - simplify cctrng_probe()\n hwrng: intel - simplify intel_rng_mod_init()\n crypto: qat - fix use of destroyed vf2pf_lock on VF restart\n crypto: qat - initialise state_lock on every path in adf_devmgr_add_dev()\n hwrng: imx-rngc - Use optional clock\n crypto: talitos - init tasklets before requesting IRQs\n crypto: algif_skcipher - rewind rounded output bytes\n crypto: algif_hash - Allow hmac(sha512) for unpriviledged users\n crypto: sa2ul - Remove unused fields\n hwrng: stm32 - use devm_platform_ioremap_resource() in stm32_rng_probe()\n hwrng: stm32 - drop redundant initializations\n hwrng: amd - simplify control flow in amd_rng_mod_init()\n hwrng: stm32 - reuse clock rate in stm32_rng_clock_freq_restrain()\n hwrng: stm32 - use swap() in stm32_rng_probe()\n hwrng: cctrng - drop redundant initializations\n ...\n" }, { "commit": "2a08195e4db5aba84600db6518089a1dbe2d04c7", "tree": "5053309d3c336648459a7673be388b3d5fd23355", "parents": [ "968de9d17980a0e538fc4e4394af49465294386d", "e38f53f0482468efd04397f66bda4648b70ac9fa" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 08:23:28 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 08:23:28 2026 -1000" }, "message": "Merge tag \u0027linux_kselftest-kunit-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest\n\nPull kunit update from Shuah Khan:\n \"A single fix to kunit_run_all_tests() to return void since callers\n don\u0027t check the return value and the integer return type is a remnant\n from when the function was executed as initcall which is no longer the\n case\"\n\n* tag \u0027linux_kselftest-kunit-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest:\n kunit: Return void from kunit_run_all_tests()\n" }, { "commit": "968de9d17980a0e538fc4e4394af49465294386d", "tree": "9e091112c98c09b034805c67637b118148c1d67f", "parents": [ "7cd80b8168c9269e4b11788ce815c0f446ab5b34", "368e5d4d12a802ee3708800319cd13904721286f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 08:20:22 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 08:20:22 2026 -1000" }, "message": "Merge tag \u0027linux_kselftest-next-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest\n\nPull kselftest updates from Shuah Khan:\n\n - Improve selftest build, run-time, and install framework\n\n Install even when some modules fail to build, print summary of test\n results at the end of the default test run, keep the build status\n from wrapping to success so build errors are reported, and optionally\n record per-suite build and install results.\n\n - Add LLVM support to kselftest_deps.sh\n\n - Fix resctrl, breakpoints suspend, ftrace, and tracing tests\n\n - Fix and enhance resctrl test\n\n* tag \u0027linux_kselftest-next-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest:\n selftests: breakpoints: Skip step_after_suspend_test on systems without a wakeup capable RTC\n selftests: optionally record per-suite build and install results\n selftests: keep the build status from wrapping to success\n selftests/ftrace: Add nice dependency\n selftests: kselftest_deps.sh: Support LLVM\n selftests: lib.mk: Don\u0027t fail install if no modules were built\n selftests/ftrace: Avoid unlink error on first run\n tracing/selftests: Fix incorrect invocation of exit_fail\n selftests/lib.mk: run_tests: print summary at the end\n selftests/ftrace: skip gcov symbols when picking a function to probe\n selftests/resctrl: Enable dynamic management of IMC counters via linked list\n selftests/resctrl: Replace counter index references with pointers\n selftests/resctrl: Introduce linked list management for IMC counters\n selftests/resctrl: Skip L3_CAT when no exclusive cache portion exists\n" }, { "commit": "7cd80b8168c9269e4b11788ce815c0f446ab5b34", "tree": "070863419ab62749f44af44a1ba3174c315fff29", "parents": [ "bb2235894a8a604c08b3f93f4e1082b9df03265a", "4ad423aa2108485f8bc5dde51fdf9c1ed979ee4b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 08:12:31 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 08:12:31 2026 -1000" }, "message": "Merge tag \u0027uml-for-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/uml/linux\n\nPull UML updates from Johannes Berg:\n\n - NOMMU support, mostly for mm/ testing\n\n The only bigger change, we added support for building with\n !CONFIG_MMU, mostly for testing, e.g. via kunit. Some new\n selftests targetted to NOMMU are moving elsewhere, but are\n runnable on ARCH\u003dum without MMU.\n\n - Tighter page permissions\n\n Tighten page permissions to catch more bugs (ARCH\u003dum is,\n after all, often used for testing), and also mark __init\n memory inaccessible for the same reason.\n\n - Various maintenance/cleanups\n\n Fix build on really old hosts, fix leaks, make the code a\n bit more robust, header cleanups, typo fixes, the usual.\n\n* tag \u0027uml-for-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/uml/linux: (38 commits)\n um: place large BSS inputs in an output section\n um: fix shutdown __inittext access\n um: time-travel: fix sched_yield() behaviour\n um: require MMU for UML PCI support\n um: vector: avoid NULL queue dereference in legacy RX mode\n um: use %pB to print functions in stack traces\n um: mprotect() __init memory\n um: move init text between __init_begin/end\n um: improve checking for --no-warn-rwx-segments\n um: make stub compilation more robust\n um: link .lbss/.ldata/.lrodata correctly\n um: add perf-event support\n x86/um: remove unused \u003casm/required-features.h\u003e header\n um: fix typo \"hander\" in comment\n um: Add definition of __NR_close_range for older host OSs\n um: virtio_uml: switch to dynamic root device\n um: Tighten exec permissions on page mappings\n Documentation: um: document nommu UML\n um: allow deselecting CONFIG_MMU\n um: nommu: add userspace runner processes\n ...\n" }, { "commit": "bb2235894a8a604c08b3f93f4e1082b9df03265a", "tree": "c6e58a900d8e77472ecd8d5c7837985f2023055b", "parents": [ "979fac3eaaa02fa887c7dfe6509248b21dca3872", "129f5d395fd66b6587a5ac156b232cca060d6512" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 08:05:19 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 08:05:19 2026 -1000" }, "message": "Merge tag \u0027powerpc-7.4-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux\n\nPull powerpc updates from Madhavan Srinivasan:\n\n - powerpc/numa: Support coregroup on PowerNV\n\n - powerpc/irq: Move __softirq_pending out of irq_stat\n\n - powerpc/512x: Remove pdm360ng platform setup in favor of mpc512x_generic\n\n - powerpc/ps3: Simplify control flow in ps3_{virq,irq_plug}_setup()\n\n - KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users\n\n - powerpc/syscall: Avoid atomic test_and_clear_thread_flag on fast path\n\n - pseries/plpks cleanup and fixes\n\n - Misc fixes and cleanup\n\nThanks to Abhishek Dubey, Amit Machhiwal, Anushree Mathur, Bui Nguyen\nNhu Quynh, Christophe Leroy (CS GROUP), Dmitry Torokhov, Gaurav Batra,\nGautam Menghani, Geert Uytterhoeven, Greg Joyce, Hari Bathini, Harsh\nPrateek Bora, Karl Mehltretter, Link Mauve, Michal Suchánek, Mukesh\nKumar Chaurasiya (IBM), Nayna Jain, Ritesh Harjani (IBM), R Nageswara\nSastry, Saket Kumar Bhaskar, Samir Mulani, Shivang Upadhyay, Shrikanth\nHegde, Sourabh Jain, Srikar Dronamraju, Srish Srinivasan, Thorsten Blum,\nVaibhav Jain (IBM), Venkat Rao Bagalkote, and Yeswanth Krishna Tellakula\n\n* tag \u0027powerpc-7.4-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux: (44 commits)\n powerpc/numa: Support coregroup on PowerNV\n powerpc/numa: Allow cpu_to_coregroup_id without PPC_SPLPAR\n powerpc/numa: Simplify find_primary_domain_index\n powerpc/fadump: collect dump when CPU_STATE_DATA is less than reserved\n powerpc/syscall: Avoid atomic test_and_clear_thread_flag on fast path\n powerpc/kasan: fix r2 corruption in mem*() on GENERIC_ENTRY with old compilers\n powerpc: fix NMI exit ordering: restore soft masks after irqentry_nmi_exit()\n powerpc/pseries/iommu: Add TCEs for 16GB pages when RAM is pre-mapped\n KVM: PPC: Book3S HV: Free the queue pages in error path\n KVM: PPC: Book3S HV: Add missing mappings for tracing exits\n powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard\n KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form\n KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users\n KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls\n pseries/plpks: update PKS documentation and MAINTAINERS entry\n pseries/plpks: rename the default wrapping key macro\n pseries/plpks: make narrowing conversions explicit\n pseries/plpks: hide wrapping_features when unsupported\n pseries/plpks: fix self-reference in plpks_var initializer\n pseries/plpks: clear SED key data after use\n ...\n" }, { "commit": "979fac3eaaa02fa887c7dfe6509248b21dca3872", "tree": "feba5ab6a2305c92162cd09549fd7832b8aaa22a", "parents": [ "5b6eaf4aeba0aab8cc757d79102aa9662d148f97", "b74843b38da8f1186fd7d447646c835b47096a15" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 08:02:35 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 08:02:35 2026 -1000" }, "message": "Merge tag \u0027alpha-fixes-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mattst88/alpha\n\nPull alpha floating point emulation fix from Matt Turner:\n \"Make the FP emulation determine tininess after rounding, as the\n hardware does.\n\n soft-fp always determined it before rounding, so an operation that\n trapped for software completion could report an underflow the same\n operation would not report when it did not trap. glibc\u0027s math\n testsuite catches the disagreement.\n\n This adds _FP_TININESS_AFTER_ROUNDING to the shared soft-fp code in\n include/math-emu/, as glibc\u0027s copy already has, and sets it only for\n alpha. It defaults to zero, so powerpc, sh and sparc are unchanged.\n\n This is the last patch of a three-patch series; the first two were\n merged for v7.3\"\n\n* tag \u0027alpha-fixes-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mattst88/alpha:\n alpha: determine tininess after rounding in the FP emulation\n" }, { "commit": "5b6eaf4aeba0aab8cc757d79102aa9662d148f97", "tree": "b6ad7d0f455a40d0297b01357fc2f44680240bc3", "parents": [ "aad73b807cd1a5bff9c5277e8a42e75bbdc8adab", "01330dac0fa7c16ef0f3da39757e9509653a2e3f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:58:09 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:58:09 2026 -1000" }, "message": "Merge tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rmk/linux\n\nPull ARM updates from Russell King:\n\n - remove supersection support\n\n - set \"current\" earlier to avoid KASAN issues\n\n - fix a couple of corner cases in the alignment handler\n\n - fix wrong free function in iommu allocation path\n\n - cacheinfo updates\n\n - properly align hugetlb mappings\n\n - always set endianness on xscale\n\n - fix clang backtracer\n\n - avoid replacing active_asids if already 0\n\n* tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rmk/linux:\n ARM: 9493/1: asid: Do not replace active_asids if already 0\n ARM: 9490/1: backtrace-clang: fix wrong sp usage for unwinding\n ARM: 9482/5: decompressor: always set endianess on xscale\n ARM: 9524/1: mm: align hugetlb mappings to the huge page size\n ARM: 9523/1: topology: allocate the cacheinfo early on the boot CPU\n ARM: 9522/1: cacheinfo: guard the CLIDR read in populate_cache_leaves()\n ARM: 9521/1: cacheinfo: count external caches in early_cache_level()\n ARM: 9520/1: cacheinfo: avoid out-of-bounds write in populate_cache_leaves()\n ARM: 9519/1: dma-mapping: Fix wrong free function in __iommu_alloc_simple() error path\n ARM: 9492/1: alignment: fix LSR #32 and ASR #32 offset decoding\n ARM: 9491/1: alignment: restore uaccess state on emulation fault\n ARM: 9488/1: smp: set current pointer in assembly before jumping into C\n ARM: 9486/1: set !LPAE MAX_PHYSMEM_BITS to 32 and remove supersection mappings\n" }, { "commit": "aad73b807cd1a5bff9c5277e8a42e75bbdc8adab", "tree": "8c1f0864efd1be92f97e2d804a7bf619173922db", "parents": [ "4e092c2be4320f06dde1206652746ce0d83540b7", "cfe69169c03e71e2a22870317ef4cffb51f6f06d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:56:27 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:56:27 2026 -1000" }, "message": "Merge tag \u0027soc-arm-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc\n\nPull ARM SoC board file updates from Arnd Bergmann:\n \"These are mostly smaller cleanups for the remaining platform code in\n arch/arm/, the most notable one being the conversion of the\n s3c/crag6410 board to use software nodes for GPIO references in place\n of plain GPIO numbers.\n\n The earlier plan was to drop the deprecated (since 7.3) board files\n here, which would have been a much larger set of changes, but that is\n now deferred to 7.5\"\n\n* tag \u0027soc-arm-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc:\n MAINTAINERS: Drop arm64 dts/intel path from ARM/SOCFPGA ARCHITECTURE\n ARM: tegra: Fix Trun -\u003e Turn typo\n ARM: vexpress: fix device_node refcount leak in vexpress_smp_dt_prepare_cpus()\n ARM: vexpress: fix device_node refcount leak in vexpress_flags_set()\n MAINTAINERS: Change ARM Visconti5 architecture maintenance status to Odd Fixes\n ARM: mvebu: fix Cortex-A9 errata selection for Armada 38x\n ARM: OMAP2+: remove unused ctrl_module_wkup_44xx.h header\n ARM: EXYNOS: Replace __ASSEMBLY__ with __ASSEMBLER__\n ARM: s3c: crag6410: use software nodes/properties to set up GPIO keys\n Input: samsung-keypad - remove support for platform data\n ARM: s3c: crag6410: switch keypad device to software properties\n ARM: s3c: register and attach software nodes for Samsung gpio_chips\n Input: samsung-keypad - handle compact binding\n dt-bindings: input: samsung,s3c6410-keypad: introduce compact binding\n ARM: imx6q: remove KSZ9021 PHY fixup\n ARM: imx: Fix suspend/resume crash with Clang CFI\n ARM: OMAP2+: Replace __ASSEMBLY__ with __ASSEMBLER__\n soc: imx: Replace __ASSEMBLY__ with __ASSEMBLER__ in header file\n ARM: imx: Replace __ASSEMBLY__ with __ASSEMBLER__\n MAINTAINERS: Add git tree for TI K3 ARCHITECTURE\n" }, { "commit": "4e092c2be4320f06dde1206652746ce0d83540b7", "tree": "306a7c29df7e142235a7ffde7eab3582a0ce28e3", "parents": [ "2e51c645fee243dbcb5cee3eb063b5713317444c", "6db3ea21a541d34e45f3727b71575424495df44c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:55:27 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:55:27 2026 -1000" }, "message": "Merge tag \u0027soc-defconfig-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc\n\nPull SoC defconfig updates from Arnd Bergmann:\n \"Only a few new drivers get enabled this time.\n\n The size of the defconfigs actually shrinks here, though that is only\n the result of all the Qualcomm clock drivers now being configured as\n modules by default when the corresponding platforms are enabled\"\n\n* tag \u0027soc-defconfig-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc:\n arm64: defconfig: Update coreboot firmware symbols\n arm64: defconfig: Enable I3C and SPD5118 hwmon\n arm64: defconfig: Enable EMC2305 and PCA963x drivers\n arm64: defconfig: Switch Qualcomm SDM845, SM8150 and SM8250 drivers to modules\n ARM/arm64: defconfig: Drop redundant Qualcomm clock entries\n arm64: configs: defconfig: Convert TISCI to modules\n arm64: defconfig: Enable PMIC5 Gen3 ADC thermal monitor\n arm64: defconfig: Enable QMP PCIe Multi-PHY driver\n ARM: shmobile: defconfig: Refresh for v7.3-rc1\n arm: multi_v7_defconfig: Enable SND_ALOOP\n arm64: defconfig: enable the necessary drivers for the Ayaneo Pocket S2\n ARM: omap2plus_defconfig: Support for compressed firmware\n ARM: omap2plus_defconfig: Enable SND_ALOOP\n" }, { "commit": "2e51c645fee243dbcb5cee3eb063b5713317444c", "tree": "ee6bfb3eabdc46763c050c98a7549e504313a286", "parents": [ "7b9a0e857b427cdda5a08b662dbea7321e6bb470", "0045cd6b8ab2319e9d8de46e5e329cdc35ce6d05" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:52:50 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:52:50 2026 -1000" }, "message": "Merge tag \u0027soc-drivers-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc\n\nPull SoC driver updates from Arnd Bergmann:\n \"There are lots of minor updates for driver subsystems managed through\n the soc tree (turris-omnia platform, cache driver, tee drivers,\n arm-cci, bus, memory) as well as soc vendor specific drivers\n (starfive, xilinx, microchip, nxp, amlogic, imx, renesas, samsung, ti,\n nvidia).\n\n The more notable changes are:\n\n - Larger updates for Qualcomm SoCs including support for SM8950\n (Maili) SM8975 (Hawi), Glymur, Shikra, and IPQ5424\n\n - Added SoC support for Exynos5515, Tegra264, Tegra410, R8A774A3, and\n MT8167 in existing drivers\n\n - Arm SCMI firmware driver support for ACPI PCC transport and module\n autoloading of protocol specific drivers\n\n - Apple crash log support for CrgA embedded controller\"\n\n* tag \u0027soc-drivers-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc: (176 commits)\n platform: cznic: turris-omnia-mcu: stop button emulation producers\n cache: Make cpu_cache_invalidate_memregion() error out if there are no handlers\n soc: mpfs: use kref cleanup on probe failure\n arm64: enable HAVE_SHARED_GPIOS for all ARM64 platforms\n bus: arm-cci: Drop cci-control-port node reference in __cci_ace_get_port()\n bus: arm-cci: Drop CPU node reference in cci_ace_init_ports()\n soc: fsl: dpio: Free the IRQ before releasing the I/O object\n soc: fsl: dpio: Fix cleanup on IRQ registration failure\n bus: fsl-mc: Annotate fsl_mc_io.portal_virt_addr with __counted_by_ptr\n bus: fsl-mc: drop the fwnode links of the dpmacs nodes\n soc: fsl: cpm1: tsa: Fix clock leak in tsa_of_parse_tdms()\n soc: qcom: geni-se: Drop unused icc_ddr parameter from geni_icc_get()\n firmware: qcom: scm: Allow QSEECOM on ThinkPad T14s Gen 7\n dt-bindings: mailbox: qcom: Document Maili CPUCP mailbox controller\n dt-bindings: spmi: glymur-spmi-pmic-arb: Add compatible for Qualcomm Maili SoC\n soc: qcom: pmic_pdcharger_ulog: prevent work requeue during remove\n ASoC: dt-bindings: qcom,apr: Add modem_apps GLINK channel for shikra\n firmware: qcom: tzmem: disable SHM bridge for SM7125 platform\n soc: qcom: ubwc: Add Kalambo UBWC config\n firmware: qcom: scm: Allow QSEECOM on Kalambo CRD\n ...\n" }, { "commit": "7b9a0e857b427cdda5a08b662dbea7321e6bb470", "tree": "f54d9637f27a40a848ed29eba6eff73a1afb880d", "parents": [ "6876634d0fc254362ed6cc4f475c16ddd5e2c0eb", "15644868ad522eac914d368fd08c340051f1076c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:48:17 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:48:17 2026 -1000" }, "message": "Merge tag \u0027soc-dt-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc\n\nPull SoC devicetree updates from Arnd Bergmann:\n \"This is a rather large update of over 1000 non-merge commits touching\n devicetree files and bindings.\n\n A few notable SoC were added this time:\n\n - Apple M4 and A18 Pro are used in laptops, these follow the M3 model\n added in 7.2.\n\n - Google Laguna (aka Tensor G5) is used last year\u0027s Pixel phone\n generation. Unlike the earlier Tensor chips, this is not based on\n Samsung\u0027s Exynos family design but starts a new chip family.\n\n - Qualcomm\u0027s Hawi and Nord SoCs are two powerful chips using the\n custom Oryon cores. Product names and applications are so far not\n known, which means that Qualcomm is doing something right by\n upstreaming kernel support early.\n\n The ST stm32mp23xc/stm32mp25xc SoC support was previously removed\n because there were no users upstream, but they are back now that\n boards have shown up. Renesas RZ/G2M v3.0 (R8A774A3) is just a minor\n variation of the already supported SoC.\n\n In total, there are 81 new dts files for individual boards, and they\n are all over the place. Only one riscv based machine is added, the\n Milk-V Meles SBC using the T-Head th1520 chip. For 32-bit Arm, we have\n 13 new boards. About half are industrial embedded boards using NXP\n i.MX6/7 chips, the rest are older products: two Amazon tablets, two\n Motorola phones and two SoM boards.\n\n Everything else is 64-bit Arm:\n\n - many industrial embedded boards using NXP layerscape, NXP i.MX8/9,\n Qualcomm Hamoa, ST stm32mp2, Rockchip rk35xx, and Renesas RZ/G2\n SoCs\n\n - Laptops and tablets using Apple M4, Qualcomm Snapdragon X2,\n Snapdragon X1 Elite and Allwinner A133 chips\n\n - Valve Steam Frame VR headset using Snapdragon 8 Gen 3\n\n - Seven handheld game consoles using Qualcomm Dragonwing qcs8550\n\n - Mobile phones using Google Tensor G5, Samsung Exynos 850, and\n various Qualcomm Snapdragon chips\n\n Aside from the new stuff, there is still a lot going on for existing\n socs and boards, including GPU hardware support on MediaTek MT8173\n based laptops. Most patches actually add features this time, as the\n compile-time diagnostic changes are slowing down\"\n\n* tag \u0027soc-dt-7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc: (1022 commits)\n arm64: dts: rockchip: Add Radxa E54C\n dt-bindings: arm: rockchip: Add Radxa E54C\n arm64: dts: rockchip: remove FRL GPIO for 100ASK DshanPi A1\n arm64: dts: rockchip: fix M.2 E-key reset pinctrl on rk3588 rock-5-itx\n arm64: dts: rockchip: add pcie30phy data-lanes on rk3588 coolpi-cm5-evb\n arm64: dts: rockchip: Add the fan tachometers to Kobol Helios64\n arm64: dts: rockchip: enable NPU on Radxa E52C\n arm64: dts: rockchip: fix adc button voltage on Radxa E52C\n riscv: dts: sophgo: sg2002-milkv-duo256m: drop reserved memory node\n riscv: dts: sophgo: cv1800b-milkv-duo: drop reserved memory node\n arm64: dts: nuvoton: npcm845-evb: Add peripheral nodes\n arm64: dts: nuvoton: npcm845-evb: Fix DTS coding style\n arm64: dts: nuvoton: npcm845: Add peripheral nodes\n arm64: dts: nuvoton: npcm845: Split APB address ranges\n riscv: dts: sophgo: cv180x: Fix internal ephy node name\n riscv: dts: sophgo: add Milk-V Duo 256M ethernet support overlay\n riscv: dts: sophgo: Limit SG2042 SPI NOR to 12.5 MHz\n riscv: dts: sophgo: Enable SPI NOR on SRD3-10\n riscv: dts: spacemit: set ETH MAC from eeprom for OrangePi\n arm64: dts: allwinner: sun50i-h616: Add video engine\n ...\n" }, { "commit": "6876634d0fc254362ed6cc4f475c16ddd5e2c0eb", "tree": "c81988632f72bd9ccea6dbb4d1a80d3103c0dab2", "parents": [ "2c2fe95ab19b09bef7391e3e5cdf8146d09792b6", "01a40ad5a9687ea5a837857d4b21ddd764be7aa3" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:44:26 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:44:26 2026 -1000" }, "message": "Merge tag \u0027mailbox-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jassibrar/mailbox\n\nPull mailbox updates from Jassi Brar:\n\n - altera: shut down RX polling timer on channel teardown\n\n - arm-mhu: timeout if receiver never comes up in mhuv2, keep combined\n IRQ enabled during suspend in mhuv3, and drop redundant unregister on\n probe failure in doorbell\n\n - axiado: fix RX frame draining and error handling, and fix debugfs\n name truncation warning\n\n - bcm74110: cap rx_svc_init_list growth to prevent PMC-induced OOM\n\n - hisilicon: convert Hi3660 and Hi6220 bindings to DT schema\n\n - mtk-cmdq: fix runtime PM leak in cmdq_mbox_flush()\n\n - pcc: free channel before unmapping shared memory and serialize\n channel updates with teardown\n\n - qcom: guard against NULL con_priv race in IPCC send_data, use\n dev_name() for IRQ names, drop stray disable_irq_wake(), read 64-bit\n register with readq() in CPUCP, drop redundant unregister on probe\n failure, and add SDM670 and IPQ9650 APCS bindings\n\n - rockchip: prefix register defines, simplify device variant handling,\n and convert to use dev_err_probe()\n\n - ti-msgmgr: add TDA54 main secure-proxy support and DT bindings, read\n exact trailing bytes for non-word-aligned messages, and do not report\n RX poll timeout as a send failure\n\n - misc: use designated initializers for acpi_device_id across drivers\n\n* tag \u0027mailbox-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jassibrar/mailbox: (27 commits)\n mailbox: Use named initializers for acpi_device_id\n mailbox: qcom-cpucp: read mbox hardware register using readq()\n mailbox: qcom-ipcc: remove stray disable_irq_wake() call\n mailbox: qcom-ipcc: Use dev_name() as IRQ name instead of a static counter\n mailbox: qcom-ipcc: Guard against NULL con_priv in send_data()\n mailbox: mtk-cmdq: Fix runtime PM leak in cmdq_mbox_flush()\n mailbox: bcm74110: Cap rx_svc_init_list growth to prevent PMC-induced OOM\n mailbox: arm_mhuv2: time out if the receiver never comes up\n mailbox: altera: shut down RX polling timer on channel teardown\n dt-bindings: mailbox: qcom: Add IPQ9650 APCS compatible\n dt-bindings: mailbox: Convert hisilicon,hi6220-mbox to DT schema\n dt-bindings: mailbox: Convert hisilicon,hi3660-mbox to DT schema\n mailbox: ti-msgmgr: Read exact number of trailing message bytes\n mailbox: ti-msgmgr: Do not report rx poll timeout as a send failure\n mailbox: arm_mhuv3: Keep the combined IRQ enabled during system suspend\n mailbox: arm_mhu_db: Remove redundant mbox_controller_unregister() on probe failure\n mailbox: qcom-ipcc: Remove redundant mbox_controller_unregister() on probe failure\n dt-bindings: mailbox: qcom: Add SDM670 APCS compatible\n mailbox: rockchip: Convert to use dev_err_probe()\n mailbox: rockchip: Simplify device variant handling\n ...\n" }, { "commit": "2c2fe95ab19b09bef7391e3e5cdf8146d09792b6", "tree": "6c7c7a675bf70ad1ad3ffc37d8620a58f0303d00", "parents": [ "7e3f52ef2fe67ae9689496760ab6bd3d5d68ea6f", "60ccbc2343d37c65a76b736eb7cf41ce0ec343b8" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:40:27 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:40:27 2026 -1000" }, "message": "Merge tag \u0027hid-for-linus-2026102101\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid\n\nPull HID updates from Jiri Kosina:\n \"Core:\n - OOB fix in s32ton() (Alan Stern)\n - switch to named initializers for acpi_device_id (Pawel Zalewski)\n - UAF fix in hiddev (Yousef Alhouseen)\n\n AMD SFH:\n - support for newer AMD SoCs (Basavaraj Natikar)\n - sysfs attributes of operating-mode telemetry (Basavaraj Natikar)\n\n Apple:\n - power management fix for Apple Touch Bar (Andre Eikmeyer)\n - fix for trackpad hanling on T2 Macs (Aditya Garg)\n\n ASUS:\n - power management fix for ROG Ally (Deni Benato)\n - asus_work() hardening (Denis Benato)\n\n Intel-THC:\n - conversion of intel-thc-hid to hid_safe_input_report() (Even Xu)\n\n Nintendo:\n - support for Switch 2 controller (Vicki Pfau)\n - support for PDP Afterglow controller (Aiman Najjar)\n\n Roccat:\n - fixes for proper handling of short reports (Jiale Yao)\n\n Wacom:\n - UAF fixes (Lee Jones)\n\n .. other assorted fixes, device ID additions and code cleanups\"\n\n* tag \u0027hid-for-linus-2026102101\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid: (80 commits)\n HID: nintendo: introduce dependency in USB_HID\n HID: asus: add keyboard dock of the ASUS Transformer Book T302CHI device ID\n HID: wacom: fix wacom_intuos_irq NULL pen_input deref\n HID: hid-lenovo-go-s: Use devm_kzalloc for drvdata\n HID: hid-lenovo-go-s: Move static led_classdev_mc to drvdata struct\n HID: hid-lenovo-go-s: Reorganize and rename hid_gos_cfg\n HID: hid-lenovo-go-s: Move attribute init to after device query\n HID: hid-lenovo-go-s: Add suspend function and gate access under bool.\n HID: hid-lenovo-go-s: Add kobject_uevent notify during reset-resume\n HID: hid-lenovo-go-s: Use pm_ptr for reset_resume callback\n HID: hid-lenovo-go-s: Prevent deadlock if device removed during setup\n HID: hid-lenovo-go-s: Bound stale reply window before reusing send_cmd_complete\n HID: hid-lenovo-go-s: Return ret instead of 0 in mcu_property_out()\n HID: logitech-hidpp: cancel reset_hi_res_work on probe failure\n HID: apple: ignore the trackpad on T2 Macs\n HID: usbhid: skip interrupt IN polling for devices with no input reports\n HID: mcp2221: always initialize and cancel init_work\n HID: magicmouse: fix null pointer dereference in magicmouse_event()\n HID: core: Fix out-of-bounds left shift by 32 in s32ton()\n HID: asus: add support for xgm led\n ...\n" }, { "commit": "7e3f52ef2fe67ae9689496760ab6bd3d5d68ea6f", "tree": "ace6e4a6949fe4fd73c13e2b7bc799f106837df4", "parents": [ "bb436f2a8568d14f176475c79b0d5069f0a6f9e3", "f63dc0eea92d07c5bb799a406571b555cd2bbd97" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:38:51 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:38:51 2026 -1000" }, "message": "Merge tag \u0027auxdisplay-v7.4-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/andy/linux-auxdisplay\n\nPull auxdisplay updates from Andy Shevchenko:\n \"A tiny batch of auxdisplay changes, which resided in Linux next for\n more than enough without any regression reports:\n\n - Fix ABI documentation formatting\n\n - Miscellaneous cleanups\"\n\n* tag \u0027auxdisplay-v7.4-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/andy/linux-auxdisplay:\n docs: ABI: auxdisplay: use literal blocks for commands\n auxdisplay: panel: use assign_bit() where applicable\n auxdisplay: arm-charlcd: Use DEFINE_SIMPLE_DEV_PM_OPS for power management\n" }, { "commit": "bb436f2a8568d14f176475c79b0d5069f0a6f9e3", "tree": "3dac357c4e7176ec0e1b3e42bdc9c14d4201659d", "parents": [ "8279fb300585e0a8ee69bd0a12d343e59b6fe7be", "0f6be986ad0eb6fe7338d963a14eaf0dee87677d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:36:22 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:36:22 2026 -1000" }, "message": "Merge tag \u0027i2c-7.4-part1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/andi.shyti/linux\n\nPull i2c updates from Andi Shyti:\n \"The main changes are the new Novatek NT72676 driver, the qcom-cci\n clock and timing updates and a collection of smaller driver, core and\n DT binding improvements.\n\n Core and helpers:\n - acpi: run ASUS and Dell touchpads at 100 kHz to avoid lag\n - core: return bool from check_functionality() and update users\n - smbus: limit block reads to the caller\u0027s buffer size\n - acpi: mark I2C transfer buffers as DMA-safe\n\n Drivers:\n - qcom-geni: several firmware node and runtime PM improvements\n - qcom-cci: several patches rework clock selection and timings\n - qcom-cci: enable SCL clock stretching\n - imx-lpi2c: fix DMA mapping device selection and cleanup\n - designware: tune RX FIFO thresholds to reduce interrupts\n - i801: respect SPD write protection when probing DDR5 modules\n - bcm2835: fully initialize clock configuration data\n\n Generic cleanups:\n - mux: simplify channel lookup and firmware node handling\n - core, busses: tidy up ACPI device ID tables\n - docs: clarify adapter lookup and fix a client driver example\n - xlnx: update maintainer for Xilinx IIC bindings\n - ljca: remove redundant adapter deletion\n\n New support and DT bindings:\n - add DW compatibles for Synaptics SL2610 and UltraRISC DP1000\n - allow six DMA channels for R-Car Gen5\n - add Allwinner A733 compatible to mv64xxx bindings\n - add support for Novatek NT72676 (new driver)\"\n\n* tag \u0027i2c-7.4-part1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/andi.shyti/linux: (37 commits)\n i2c: imx-lpi2c: remove dmaengine_desc_free()\n i2c: busses: use named initializers for acpi_device_id\n i2c: i2c-core-acpi: use named initializers for acpi_device_id\n i2c: i801: Gate SPD instantiation on SPD Write Disable bit\n i2c: acpi: Use I2C_M_DMA_SAFE in acpi_gsb_i2c_[read|write]_bytes()\n dt-bindings: i2c: dw: Add Synaptics sl2610 i2c\n i2c: designware: size the RX FIFO threshold to the queued transfer\n i2c: imx-lpi2c: use dmaengine_get_dma_device() for DMA mapping\n docs: i2c: writing-clients: Add missing end of command\n i2c: qcom-cci: skip core clock rates the clock cannot provide\n i2c: core: document preference for i2c_get_adapter_by_fwnode()\n i2c: qcom-cci: always enable SCL clock stretching\n MAINTAINERS: Add entry for Novatek NT72676 I2C controller driver\n i2c: nt72676: Add Novatek NT72676 I2C controller driver\n dt-bindings: i2c: Add Novatek NT72676 I2C controller\n i2c: acpi: Force ASUE140D touchpads to 100 kHz\n i2c: qcom-cci: Enforce the required CCI clock rate\n i2c: qcom-cci: Share the timing table across CCI revisions\n i2c: qcom-cci: Add 19.2 MHz timings for the v2 CCI\n i2c: qcom-cci: Support per-mode CCI clock rates\n ...\n" }, { "commit": "8279fb300585e0a8ee69bd0a12d343e59b6fe7be", "tree": "92d16536982b12ab0d7110a7b176c458104d5d4a", "parents": [ "22cbcdafe135752082853355168460c730d1c4aa", "30167fadbf87fa901a2fee49c30a5c5a506a43e8" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:34:52 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:34:52 2026 -1000" }, "message": "Merge tag \u0027for-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/pateldipen1984/linux\n\nPull hte updates from Dipen Patel:\n\n - prevent releasing GPIO before time expires in the test code\n\n - initialize spin lock before registering the chip in the provider\n driver\n\n* tag \u0027for-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/pateldipen1984/linux:\n hte: tegra194-test: shut down timer before GPIO release\n hte: tegra194: Initialize slice locks before registering chip\n hte: tegra194: Remove redundant dev_err()\n" }, { "commit": "22cbcdafe135752082853355168460c730d1c4aa", "tree": "db72161f4ac6693ead6ee146a366512e1c7abec0", "parents": [ "0e557fc68a1667183b5f4649ee76e833160c6714", "6276c8195e598361942082423114877265c17692" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:32:49 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:32:49 2026 -1000" }, "message": "Merge tag \u0027watchdog-for-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging\n\nPull watchdog updates from Guenter Roeck:\n \"Core/generic:\n - Replace __MODULE_STRING() with __stringify()\n - Use assign_bit() where applicable\n - Use DEFINE_SIMPLE_DEV_PM_OPS and pm_sleep_ptr for dev_pm_ops\n - Fix repeated words and typos in comments\n - Differentiate scenarios when watchdog is closed\n\n Added device support in existing drivers:\n - mtk_wdt: Support for MediaTek MT8167 and MT8127\n - apple_wdt: Support for T8140\n - s3c2410_wdt: Support for Exynos 5515\n\n Various other minor bug fixes and improvements\"\n\n* tag \u0027watchdog-for-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging: (22 commits)\n watchdog: mediatek: Apply the driver\u0027s mode to a watchdog left running\n dt-bindings: watchdog: apple,wdt: Add t8140 compatible\n watchdog: Replace __MODULE_STRING() with __stringify()\n watchdog: use assign_bit() where applicable\n watchdog: mediatek: Add support for mt8167 toprgu/watchdog\n dt-bindings: watchdog: Add compatible for MediaTek mt8167\n watchdog: sp805_wdt: fix suspend/resume handling of HW_RUNNING watchdog\n watchdog: PM: use DEFINE_SIMPLE_DEV_PM_OPS and pm_sleep_ptr for dev_pm_ops\n watchdog: mediatek: Add wdt/toprgu resets for mt6589\n watchdog: msc313e: Replace commas with semicolons in probe()\n watchdog: sp805: Replace SIMPLE_DEV_PM_OPS with DEFINE_SIMPLE_DEV_PM_OPS\n watchdog: fix repeated words in comments\n watchdog: fix typos in comments\n watchdog: i6300esb: do not stop an already running watchdog\n dt-bindings: watchdog: mediatek: Add MT8127\n watchdog: Differentiate scenarios when watchdog is closed\n dt-bindings: watchdog: renesas,r9a09g057-wdt: Add CPG/MSSR syscon support\n watchdog: mediatek: acknowledge pretimeout interrupt\n watchdog: s3c2410_wdt: Add exynos5515-wdt compatible data\n dt-bindings: watchdog: samsung-wdt: Add exynos5515-wdt compatible\n ...\n" }, { "commit": "0e557fc68a1667183b5f4649ee76e833160c6714", "tree": "9ba10d6cbfc66303c188bc8abf7c2563d9279969", "parents": [ "03480653ddfd1b004dc622acb4fa913b05c3edaa", "6d318db9ffcb611f9b3b6b3201c963690541a943" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:31:02 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:31:02 2026 -1000" }, "message": "Merge tag \u0027pmdomain-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/linux-pm\n\nPull pmdomain updates from Ulf Hansson:\n \"pmdomain core:\n - Add a genpd config to support unknown initial status\n - Add support system wide resume latency constraints\n - Enable a non-CPU device in a CPU PM domain to do power on\n - Fall back to use device node name for domain idle states\n\n pmdomain providers:\n - cpuidle-psci: Initialize the PM domains in powered off state for OSI\n - cpuidle-psci: Move initialization a bit earlier in the boot sequence\n - qcom: Add NMXC power domain for Nord\n - qcom: Add support for SM7250, Kuno and MSM8952 power domains\n - renesas: Add support for r8a774a3 SYSC power domains\n - renesas: Fix lockdep false positive for r8a78000\n - riscv: Add RPMI device power service\n - st: Add the actual power domains on U8500\n - st: Convert Ux500 PM domains to schema\n\n pm qos:\n - Add a flag for system wide latency constraints\n - Add lockless read for flags\"\n\n* tag \u0027pmdomain-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/linux-pm: (36 commits)\n dt-bindings: arm: Add the actual power domains on U8500\n dt-bindings: arm: ux500: Drop NR_DOMAINS\n dt-bindings: power: Convert Ux500 PM domains to schema\n dt-bindings: power: rpmpd: Add MSM8952 power domains\n pmdomain: rockchip: drop duplicated errno from supply failure message\n pmdomain: core: add support system-wide resume latency constraints\n pmdomain: core: add genpd_for_each_child() helper\n PM / QoS: add lockless read for flags\n PM / QoS: add flag to indicate latency applies system-wide\n pmdomain: renesas: rcar-sys: Add r8a774a3 support\n dt-bindings: power: Add r8a774a3 SYSC power domain definitions\n dt-bindings: power: renesas,rcar-sysc: Document vendor-prefixed header paths\n pmdomain: imx93-blk-ctrl: Use pm_runtime_resume_and_get()\n pmdomain: imx8m-blk-ctrl: Use pm_runtime_resume_and_get()\n pmdomain: imx: gpcv2: Use pm_runtime_resume_and_get()\n pmdomain: rockchip: Fix domain check in rockchip_pm_add_one_domain()\n pmdomain: core: Fall back to node name for idle states\n pmdomain: renesas: r8a78000: Fix lockdep false positive\n pmdomain: fix typo \"releated\" in comment\n pmdomain: imx: Propagate SCU provider registration failures\n ...\n" }, { "commit": "03480653ddfd1b004dc622acb4fa913b05c3edaa", "tree": "5523a2d035f09a3dfbb57c09f359b13c0ddf026f", "parents": [ "9aa54fb74ead1737b92a9dc2f7a5d9d5e48dc7b5", "fd9af27f6c2319713bb23832066585f8a59a1771" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:29:07 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:29:07 2026 -1000" }, "message": "Merge tag \u0027mmc-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/mmc\n\nPull MMC updates from Ulf Hansson:\n \"MMC core:\n - Add a power-off-delay-us DT property to support HW specific delays\n - Add mmc_send_tuning_timeout() to allow hosts to specify a timeout\n - Enable hosts to control the re-programming of the crypto keys\n\n MMC host:\n - dw_mmc: Add a common watchdog and convert the various timeouts to use it\n - dw_mmc: Expose the watchdog state in debugfs\n - dw_mmc-rockchip: Use a tighter per command tuning timeout\n - greybus-sdio: Convert to devm_mmc_alloc_host()\n - meson-gx: Enable the bus pipeline clock on T7\n - rtsx_usb_sdmmc: Start card power-up at 3.3V\n - sdhci-cadence: Add Altera Agilex5 SD6HC support\n - sdhci-cadence: Add Cadence SD6HC support\n - sdhci-msm: Add support for the MSM8952 and Maili variants\n - sdhci-msm: Use pm ops to better manage restoring of crypto keys\n - sdhci-of-dwcmshc: Disable CQE error halt request for Rockchip\n - sdhci-pxav3: Disable clock inversion for SD HS cards\n - sunplus: Fixup initialization for DDR modes\n - sunxi: Add support for Allwinner B288\n - vub300: Remove the driver for the obsolete HW\"\n\n* tag \u0027mmc-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/mmc: (43 commits)\n dt-bindings: mmc: sun4i-a10-mmc: add Allwinner B288\n mmc: dw_mmc-rockchip: use a tighter per-command tuning timeout\n mmc: core: add mmc_send_tuning_timeout()\n mmc: sdhci-of-dwcmshc: Disable CQE error halt request for Rockchip\n dt-bindings: mmc: sdhci-msm: Add MSM8952 compatible\n mmc: use assign_bit() where applicable\n mmc: sdhci-pci: Replace deprecated PCI functions\n mmc: sunplus: initialise rd_crc_dly\u003d1 for DDR modes\n mmc: core: fix stale mmc_start_req() references in comments\n docs: mmc: fix stale async request documentation\n docs: mmc: document eMMC health status support in mmc-tools\n mmc: cavium-thunderx: Drop redundant calls to get|put_device()\n mmc: core: Turn mmc_alloc|free_host() into static functions\n staging: greybus: sdio: Convert to devm_mmc_alloc_host()\n mmc: vub300: Remove the driver for the obsolete HW\n mmc: dw_mmc: remove unused slot member\n mmc: sdhci-pxav3: avoid of_node\n CREDITS: Add Pierre Ossman\n mmc: fix typos in comments\n mmc: meson-gx: enable the bus pipeline clock on T7\n ...\n" }, { "commit": "9aa54fb74ead1737b92a9dc2f7a5d9d5e48dc7b5", "tree": "c6c88491978082614d156ae91e58aa9e2169a2a0", "parents": [ "6ef8f742f9008132db003313bf7a6ca2edb8bbae", "2dee91ee94eec85d09c13c7ca83e3005906d3732" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:23:27 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:23:27 2026 -1000" }, "message": "Merge tag \u0027regmap-v7.4-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap\n\nPull regmap updates from Mark Brown:\n \"This is a relatively busy release, mostly due to the general cleanup\n work which people have been doing throughout the kernel - for regmap\n that\u0027s mostly been some work from Peng Fan.\n\n I also added some more tests for the sparse caches to catch some\n gotchas people might run into trying to improve the maple cache.\n\n - Test very high register numbers to help people avoid a nasty gotcha\n trying to optimise the maple cache\n\n - Make more use of scoped lock and allocation guards\n\n - A couple of other smaller improvements and fixes\"\n\n* tag \u0027regmap-v7.4-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap:\n regmap: debugfs: Use __free(kfree) for regmap_reg_ranges_read_file\n regmap: debugfs: Use guard to simplify code\n regmap: debugfs: Use __free(kfree) in regmap_name_read_file()\n regmap: fix potential double-free of map-\u003ereg_defaults on cache reinit\n regmap: use krealloc_array() in regmap_register_patch()\n regcache: simplify control flow and reduce nesting\n regcache: extract __regcache_sync() to deduplicate sync dispatch\n regcache: extract locked helpers to replace open-coded lock/unlock pairs\n regmap: debugfs: use the regmap scoped lock guard\n regcache: rbtree: use the regmap scoped lock guard\n regcache: use the regmap scoped lock guard\n regmap: convert lock/unlock to a scoped guard\n regmap: fix typo \"asynchrnous\" in comment\n regmap: Test rbtree and maple caches for very high register numbers\n regmap: Allow a base register to be specified for the RAM regmap\n" }, { "commit": "6ef8f742f9008132db003313bf7a6ca2edb8bbae", "tree": "a0320a0403df3621a688d2e9424c676aa81ae850", "parents": [ "003e5a0c479e16f06b7684a1b82543aa941a5043", "d5acef12e819c1627c8bf6a0325845ab39d8c99d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:16:16 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:16:16 2026 -1000" }, "message": "Merge tag \u0027spi-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi\n\nPull spi updates from Mark Brown:\n \"Quite a lot of work in the SPI subsystem this time around, almost all\n in drivers rather than the core.\n\n As well as the general cleanup/fix work we\u0027re seeing over most of the\n kernel there\u0027s been some substantial performance work to two existing\n drivers and support for a number of new devices including a couple of\n new drivers. There was also a big overhaul of the spidev_test utility\n from the Pengutronix people.\n\n - Improvements for spidev_test to cover additional use cases, plus be\n a bit easier to use.\n\n - Substantial performance work in both DesignWare and Tegra210 QSPI\n drivers, making their interrupt handling more efficient to drive up\n hardware utilisation.\n\n - Documentation clarifications.\n\n - Fixes for some runtime PM and error handling issues.\n\n - Support for Nuvoton MA35D1, Qualcomm QPIC SNAND v2, Renesas R-Car\n Gen5 and X5H and Realtek RTD1625\"\n\n* tag \u0027spi-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi: (136 commits)\n spi: ch341: handle transfers without a TX or RX buffer\n spi: dt-bindings: spi-qpic-snand: Add IPQ9650 compatible\n spi: spi-pci1xxxx: quiesce DMA engines on transfer timeout\n spi: amd: fix len\u003d\u003d0 underflow and FIFO overflow\n spi: tegra114: initialize native chip selects inactive\n spi: bcm-qspi: reject oversized dummy bytes in mspi exec_mem_op\n spi: npcm-fiu: limit UMA data_size to the 16-byte staging buffer\n spi: omap2-mcspi: handle DMA setup failures\n spi: jcore: fix divide-by-zero when speed_hz is zero\n spi: cadence-xspi: fix stack buffer overflow in the Marvell b0 path\n spi: cadence-xspi: reject SDMA transfers larger than the requested length\n spi: meson-spicc: fix invalid DMA unmap on mapping failure\n spi: s3c64xx: Use snprintf() instead of sprintf()\n spi: omap2-mcspi: Use snprintf() instead of sprintf()\n spi: tle62x0: Use kstrtoul() instead of simple_strtoul()\n spi: lm70llp: Use strscpy() instead of strcpy()\n spi: butterfly: Use strscpy() instead of strcpy()\n spi: jcore: Use devm_platform_ioremap_resource()\n spi: sh-hspi: Use devm_platform_ioremap_resource()\n spi: ljca: validate the response length before copying the data\n ...\n" }, { "commit": "003e5a0c479e16f06b7684a1b82543aa941a5043", "tree": "1e03fe19b81e1d03b99de0cca5830cb2dbf7b588", "parents": [ "5a12cbf26134d417531289e89375bbe580803dec", "ba83dd4a47bb47da3d2791b2ad6cd816a851b5d0" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:08:48 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:08:48 2026 -1000" }, "message": "Merge tag \u0027regulator-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator\n\nPull regulator updates from Mark Brown:\n \"This is quite a quiet release, especially given the general onslaught\n of cleanup patches seen elsewhere. There is some of that, but not as\n much as I\u0027m seeing elsewhere relatively to the size of the subsystem.\n We do have some new drivers as well, plus Linus Walleij has done a big\n overhaul of the AB8500 driver including feature buildout.\n\n - Substantial cleanups and feature additions for the ST Ericsson AB8500\n\n - Overhaul of the configuration for the LP872x.\n\n - A bunch of DT binding conversions\n\n - Support for Maxim MAX20024, MPS MPQ4210, Nexperia NEX10000UB\"\n\n* tag \u0027regulator-v7.4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator: (60 commits)\n regulator: rpi-panel-attiny: Fix probe failure after a host cold boot\n regulator: lp872x: Use macro to fill regulator descriptor\n regulator: lp872x: Add support for input and regulator power supplies\n regulator: lp872x: Remove platform_data based probing\n regulator: lp872x: Remove redundant regmap wrappers\n regulator: lp872x: Fold driver header into driver file\n regulator: dt-bindings: ti,lp872x: Document input supplies\n regulator: dt-bindings: ti,lp872x: Deprecate ti,dvs-gpio and ti,update-config\n regulator: dt-bindings: sy8827n: support standard properties\n regulator: dt-bindings: Reference Tegra regulator coupling schema\n regulator: dt-bindings: nvidia,tegra-regulators-coupling: Convert to DT schema\n regulator: dt-bindings: ti,lp872x: Convert to DT schema\n regulator: dt-bindings: Drop obsolete MAX8925 .txt binding\n regulator: 88pm886: Add Vbus regulator\n regulator: core: Export helpers used by regulator couplers\n regulator: core: Fix coupled regulators reference leak on removal\n regulator: dt-bindings: ti,tps6586x: Convert to DT schema\n regulator: dt-bindings: Add MAX20024 sd4\n regulator: dt-bindings: Convert mediatek,mt6380-regulator to DT schema\n regulator: mp886x: fix pontential division by zero\n ...\n" }, { "commit": "5a12cbf26134d417531289e89375bbe580803dec", "tree": "c694976186da755776bcae583317495ec608e851", "parents": [ "bfa231bb4c7eae56b9967da19d1678bf0847259d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:03:40 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 07:03:40 2026 -1000" }, "message": "rust: missed rustfmt fix up in rust/kernel/mem.rs\n\nMiguel had mentioned this rustfmt issue, but I overlooked this one when\ndoing the driver core merge.\n\nMake rustfmt happy again.\n\nReminded-by: Miguel Ojeda \u003cojeda@kernel.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "bfa231bb4c7eae56b9967da19d1678bf0847259d", "tree": "857a1be5784d9e9600ea1dac5fcd6e4bd67a7eec", "parents": [ "74b1dbf6f236f4fe88bd1077ae4657ca4b2c339e", "47f16cf7a6017212230985f6bc7f1b55b6d234d9" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 06:59:20 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 06:59:20 2026 -1000" }, "message": "Merge tag \u0027gpio-updates-for-v7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux\n\nPull gpio updates from Bartosz Golaszewski:\n \"Nothing stands out as particularly interesting, it\u0027s been a calm\n cycle. We have three new drivers, support for more models and lots of\n updates across many modules (details are in the signed tag as usual).\n There are also some minor changes and additions to the in-kernel GPIO\n API.\n\n GPIO core:\n - provide a new controller API: gpiochip_generic_get_config()\n - return -EOPNOTSUPP instead of -ENODEV to user-space if it requests\n hardware timestamping on systems where it\u0027s unavailable (no\n user-space regressions reported)\n\n New drivers:\n - add a driver for ROHM BD73800 PMIC GPIO controller\n - add a driver for Axiado AX3005 SGPIO controller\n - add a driver for Analog Devices AD7768 GPIO controller\n\n New hardware support:\n - extend gpio-rcar with support for R-Car X5H (R8A78000)\n - extend gpio-tegra186 with support for Tegra 268\n\n Driver changes:\n - refactor and improve gpio-rtd1625: switch to modern or better\n fitting interfaces and improve coding style\n - improve error handling of return values of\n platform_get_irq_optional() in several drivers\n - normalize the return value of the gpio_chip::get() callback in\n gpio-siox in order to not propagate invalid values up to the GPIO\n core\n - implement gpio_chip::get_direction() for gpio-pcf857x\n - use managed variants of notifier registration functions in several\n drivers\n - remove legacy gpio_set_value_cansleep() as it has no more users\n - add pinctrl support to gpio-realtek-otto\n - add runtime PM support to the gpio-regmap helper module\n - add more ACPI GPIO quirks for various hardware\n - stop needlessly reading gpio_chip::base in gpio-pxa\n - add support for tracking of direction of generic GPIO chips with no\n direction registers via pinctrl backend to gpio-mmio (use the new\n core API: gpiochip_generic_get_config())\n - use the \"safe\" variants of debugfs_create_file() in\n gpio-sloppy-analyzer\n - use device name as GPIO chip label in gpio-omap\n - refactor bit ops in gpio-dln2\n - prepare gpio-it87 for upcoming kmalloc_obj() conversion\n\n Devicetree bindings:\n - document new model in gpio-pca95xx\n - allow the gpio-hogs property in gpio-zynq and fsl,qoriq-gpio\n - allow the gpio-ranges property in gpio-realtek-otto\n\n Misc fixes:\n - add missing MODULE_ALIAS() to gpio-crystalcove\n - fix a comment typo in example GPIO tools\n - fix unbalanced brackets in documentation\n - add names to regmaps in gpio-mvebu to avoid collisions in debugfs\n output\n - fix GPIO lookup using relative paths in GPIO ACPI\"\n\n* tag \u0027gpio-updates-for-v7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux: (63 commits)\n gpiolib: acpi: Fix GPIO lookup using relative path\n gpio: legacy: Kill gpio_set_value_cansleep()\n dt-bindings: gpio: pca95xx: add onnn,pca9655 with nxp,pca9555 fallback\n gpiolib: acpi: Ignore GPIO 11 interrupt on Acer Nitro V 16S AI\n gpio: pxa: stop reading gpio_chip::base in direction callbacks\n gpio: axiado: add AX3005 SGPIO controller support\n dt-bindings: gpio: add Axiado AX3005 SGPIO controller\n gpiolib: acpi: Add quirk for Lenovo IdeaPad Slim 3 15ABR8\n MAINTAINERS: Add ROHM BD73800 PMIC files\n gpio: bd73800: Support ROHM BD73800 PMIC GPIOs\n clk: bd718x7: Support ROHM BD73800\n regulator: bd71828: Support ROHM BD73800\n rtc: bd70528: Support RTC on ROHM BD73800\n mfd: Support for ROHM BD73800 PMIC core\n dt-bindings: mfd: ROHM BD73800 PMIC\n dt-bindings: regulator: ROHM BD73800 regulators\n dt-bindings: rohm,bd*: Ref common ROHM bindings\n dt-bindings: mfd: Common ROHM PMIC properties\n gpio: siox: normalize return value of gpio_get()\n gpio: dln2: use assign_bit() where applicable\n ...\n" }, { "commit": "74b1dbf6f236f4fe88bd1077ae4657ca4b2c339e", "tree": "8ac15152cc01c612f89c25232b7e2738ae902b48", "parents": [ "b0e1eda687a2f19a8fa3958303fbb45d493ea46b", "eadea156f11b2c9a780b60c1699c2da145c9d1f2" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 06:56:33 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 06:56:33 2026 -1000" }, "message": "Merge tag \u0027pwrseq-updates-for-v7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux\n\nPull power sequencing updates from Bartosz Golaszewski:\n \"The bulk of added lines are kunit tests that comprehensively verify\n the core functionality of the power sequencing framework.\n\n Other than that, we have another pwrseq driver: Renesas RZ/G3L Power\n Ready and support for more models in pwrseq-pcie-m2. We also added a\n new consumer-facing API in the form of pwrseq_is_controllable()\n function which allows consumers to check if a given target resource is\n actually host-controllable.\n\n Summary:\n\n Power sequencing core:\n - add a suite of kunit test cases for the power sequencing core\n functionalities\n - provide a new consumer API: pwrseq_is_controllable()\n\n New Drivers:\n - add the Renesas RZ/G3L Power Ready driver which provides\n information on power readiness for various IPs on RZ/G3L\n\n Driver changes:\n - use pwrseq_is_controllable() to report controllability to consumers\n in pwrseq-qcom-wcn and pwrseq-pcie-m2\n - add support for PCIe switch topologies to pwrseq-pcie-m2\n - add the PCI ID for Foxconn WCN7850 to pwrseq-pcie-m2\"\n\n* tag \u0027pwrseq-updates-for-v7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux:\n power: sequencing: pcie-m2: Add Foxconn WCN7850 subsystem PCI ID\n power: sequencing: qcom-wcn: Report power controllability\n power: sequencing: pcie-m2: Report power controllability\n power: sequencing: Add pwrseq_is_controllable() API\n power: sequencing: add kunit test cases\n power: sequencing: pwrseq-pcie-m2: Support PCIe switch topologies\n power: sequencing: Add Renesas RZ/G3L Power Ready driver\n" }, { "commit": "b0e1eda687a2f19a8fa3958303fbb45d493ea46b", "tree": "5b93d55489e7299b5649c5afbd66e24c55cacbe7", "parents": [ "7be4bc52fd9e0e55dc9a2e0232b89427d2c4b614", "00e917df050d79ac26ec700717680ad6421d2808" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 06:44:27 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 22 06:44:27 2026 -1000" }, "message": "Merge tag \u0027pwm/for-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ukleinek/linux\n\nPull pwm updates from Uwe Kleine-König:\n \"The usual mix of fixes for older issues, devicetree changes and\n cleanups.\n\n Part of this is a shared branch that introduces device-managed\n variants of atomic_notifier_chain_register() and\n blocking_notifier_chain_register()\"\n\n* tag \u0027pwm/for-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ukleinek/linux:\n dt-bindings: pwm: Add IPQ5210 binding\n pwm: tiehrpwm: Clear period on disable to allow reconfiguration\n pwm: Allow 32-bit tasks to use the character device\n pwm: lp3943: fix NULL pointer dereference for an unconfigured channel\n pwm: mtk-disp: Fix period readback\n pwm: ipq: Prevent potential 32-bit integer overflow in hi_div calculation\n pwm: loongson: Reload PWM configuration through counter reset\n pwm: Fix typos in comments\n dt-bindings: pwm: Convert TI PWM Subsystem to DT schema\n docs: pwm: Fix bracket and punctuation\n pwm: iqs620a: Use devm_blocking_notifier_chain_register()\n pwm: renesas-tpu: Fix runtime PM reference leak\n notifier: add device-managed registration APIs\n" }, { "commit": "1a2c35c49cc7c6be860038b8442b52424a8f123c", "tree": "74a0a06d9a09392c4f117115593686889c689cc6", "parents": [ "207dd12bc195153fe6ca614d8add9ecb0b636270" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 22 17:21:01 2026 +0200" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 22 17:45:45 2026 +0200" }, "message": "Bluetooth: btusb: disable by default Qualcomm multi-subsystem\n\nNew knobs should default to \u0027n\u0027. The mentioned one depends on\nBT_HCIBTUSB, but the latter is enabled on most systems.\n\nAcked-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\nReviewed-by: Luiz Augusto von Dentz \u003cluiz.von.dentz@intel.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "e8ff9af18e80279b80cf7063244db91b12f5e27e", "tree": "a7d42b4253257909dc6aa33e1f8d6b85506b90e2", "parents": [ "88f43648d5e29aac2bc853984a2813724aa423b7" ], "author": { "name": "Marek Vasut", "email": "marex@nabladev.com", "time": "Thu Sep 10 07:22:40 2026 +0200" }, "committer": { "name": "Rob Herring (Arm)", "email": "robh@kernel.org", "time": "Thu Oct 22 10:30:06 2026 -0500" }, "message": "dt-bindings: usb: dwc3: Document ST STM32MP2 DWC3 xHCI USB controller\n\nThe ST STM32MP2 SoC contains single instance of DWC3 USB controller with\nglue logic wrapper around it controlled by syscon. Document the glue\nlogic and DWC3 controller.\n\nCo-developed-by: Pankaj Dev \u003cpankaj.dev@st.com\u003e\nSigned-off-by: Pankaj Dev \u003cpankaj.dev@st.com\u003e\nCo-developed-by: Clément Le Goffic \u003cclement.legoffic@foss.st.com\u003e\nSigned-off-by: Clément Le Goffic \u003cclement.legoffic@foss.st.com\u003e\nCo-developed-by: Gatien Chevallier \u003cgatien.chevallier@foss.st.com\u003e\nSigned-off-by: Gatien Chevallier \u003cgatien.chevallier@foss.st.com\u003e\nSigned-off-by: Marek Vasut \u003cmarex@nabladev.com\u003e\nAcked-by: Fabrice Gasnier \u003cfabrice.gasnier@foss.st.com\u003e\nReviewed-by: Rob Herring (Arm) \u003crobh@kernel.org\u003e\nLink: https://patch.msgid.link/20260910052340.246717-1-marex@nabladev.com\nSigned-off-by: Rob Herring (Arm) \u003crobh@kernel.org\u003e\n" }, { "commit": "47193113641e5e1f9b5758b73d7b7a0273acb836", "tree": "6eeec07677ff10922fe134ffb3bbb140b27f7380", "parents": [ "72d3fcf802c45d00b300f25b848a93c3a2bd7c7e" ], "author": { "name": "Jason Gunthorpe", "email": "jgg@nvidia.com", "time": "Mon Sep 28 20:17:32 2026 -0300" }, "committer": { "name": "Jason Gunthorpe", "email": "jgg@nvidia.com", "time": "Thu Oct 22 10:31:23 2026 -0300" }, "message": "coco/tsm: Update maintainership\n\nWith Dan\u0027s passing Alexey, Aneesh and Jason have volunteered to take this\non, with the support of their employers.\n\nReviewed-by: Dave Hansen \u003cdave.hansen@linux.intel.com\u003e\nReviewed-by: Leon Romanovsky \u003cleon@kernel.org\u003e\nReviewed-by: Lukas Wunner \u003clukas@wunner.de\u003e\nAcked-by: Aneesh Kumar K.V (Arm) \u003caneesh.kumar@kernel.org\u003e\nAcked-by: Suzuki K Poulose \u003csuzuki.poulose@arm.com\u003e\nAcked-by: Mathieu Poirier \u003cmathieu.poirier@linaro.org\u003e\nAcked-by: Jonathan Cameron \u003cjonathan.cameron@oss.qualcomm.com\u003e\nAcked-by: Dave Jiang \u003cdave.jiang@intel.com\u003e\nAcked-by: Ankit Agrawal \u003cankita@nvidia.com\u003e\nSigned-off-by: Jason Gunthorpe \u003cjgg@nvidia.com\u003e\n" }, { "commit": "cc53a1e0981bf296479d10fd646f73e28ed5fccd", "tree": "bc365294cbe01cbe01cb7b7fba95e228389d5fd5", "parents": [ "9f0deab7285811d13b61bb441653de9e5ce0a1d0", "5d791d3396ca4c9e5fd9d20b49386c20d8179eb8" ], "author": { "name": "Petr Mladek", "email": "pmladek@suse.com", "time": "Thu Oct 22 14:42:31 2026 +0200" }, "committer": { "name": "Petr Mladek", "email": "pmladek@suse.com", "time": "Thu Oct 22 14:42:31 2026 +0200" }, "message": "Merge branch \u0027for-7.4/kobject-release\u0027 into for-linus\n" }, { "commit": "207dd12bc195153fe6ca614d8add9ecb0b636270", "tree": "dbaa855c271985e94a813cea919eb9396c99da84", "parents": [ "f71ff7d406523748bfb8236830c7eaa6a308aaa1", "f4377bf85887f57b59abb5479f7660a81ffe4449" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 22 11:41:47 2026 +0200" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 22 11:45:58 2026 +0200" }, "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net\n\nMerge in late fixes in preparation for the net-next PR.\n\nConflicts:\n\nnet/netfilter/nf_conntrack_netlink.c\n cd37ab22a74e0 (\"netfilter: nf_conntrack_netlink: fix inverted IPv6 tuple filter\")\n 1ae2d094b0200 (\"netfilter: ctnetlink: fix inverted IPv6 address match in dump filter\")\n\nAdjacent changes:\n\ndrivers/net/ethernet/marvell/octeontx2/af/rvu_nix.c\n 8830e65ed46de (\"net: use assign_bit() where applicable\")\n 07bd391eb957 (\"octeontx2-af: Fix CQ enable state tracking after AQ writes\")\n\nnet/core/sock.c\n 31c5ea8a3296 (\"ipv6: Remove IPV6_ADDRFORM.\")\n 31b564f70d88 (\"net: use the full socket in sk_mc_loop()\")\n\nnet/mptcp/protocol.h\n 0cb6910130a3 (\"mptcp: remove thmac from subflow ctx\")\n 7538fa33bb2f (\"mptcp: fix subflow bitfield misuse\")\n\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "f4377bf85887f57b59abb5479f7660a81ffe4449", "tree": "28bf081d9b549d234587a2de4621971a294b19a6", "parents": [ "473167593f42551ce6b00c05cee8cd20309d45ac" ], "author": { "name": "Henry Martin", "email": "bsdhenrymartin@gmail.com", "time": "Mon Oct 19 19:58:59 2026 +0800" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 22 11:05:31 2026 +0200" }, "message": "tipc: fix broadcast sender hang on last acker departure\n\nTIPC group broadcast senders are blocked while a replicast still has\noutstanding member acks: tipc_group_bc_cong() returns true as long as\ngrp-\u003ebc_ackers is non-zero, and clears *grp-\u003eopen, which is what\ntipc_poll() uses to report EPOLLOUT (via tsk-\u003egroup_is_open).\n\nWhen the last outstanding acker departs before acking,\ntipc_group_delete_member() decrements grp-\u003ebc_ackers to zero but\nnever restores *grp-\u003eopen. As a result poll(EPOLLOUT) never fires\nagain. A writer blocked in sendmsg() is only released if some other\nwakeup happens after the deletion: with TIPC_GROUP_MEMBER_EVTS the\nleave event delivery calls sk_data_ready() and wakes it, but without\nmember events nothing does and it sleeps indefinitely, since the\ndefault send timeout is MAX_SCHEDULE_TIMEOUT.\n\nCommit 99cc2a62e07a (\"tipc: reject invalid and unexpected\nGRP_ACK_MSG to prevent bc_ackers underflow\") already calls this out\nin its changelog as a pre-existing issue.\n\nRestore the open state exactly on the 1-\u003e0 transition in the delete\npath, mirroring the GRP_ACK_MSG completion path, and invoke\nsk-\u003esk_write_space() from tipc_sk_filter_rcv() when the group just\nbecame writable again.\n\nAlso make the ack accounting precise. The delete path used to test\nless(m-\u003ebc_acked, grp-\u003ebc_snd_nxt - 1), which also matches members\nthat were never counted for the current replicast (JOINING/LEAVING\nmembers keep a stale bc_acked), and the GRP_ACK_MSG handler accepted\nan ack from any member whose bc_acked differed from the expected\nvalue. Either could zero bc_ackers on behalf of a member that owes\nnothing and silently void an ack still owed by a real acker. Track\nwhether a member owes an ack for the current replicast in a new\nper-member bc_pending flag, set when the member is counted and\ncleared when its ack arrives, and use it both to accept an ack and\nto decide on deletion. bc_acked has no remaining user and is\nremoved. Suggested by Tung Quang Nguyen.\n\nThis issue was discovered by Tencent CodeBuddy Security.\n\nCc: stable@vger.kernel.org\nFixes: 2f487712b893 (\"tipc: guarantee that group broadcast doesn\u0027t bypass group unicast\")\nSigned-off-by: Henry Martin \u003cbsdhenrymartin@gmail.com\u003e\nReviewed-by: Tung Nguyen \u003ctung.quang.nguyen@est.tech\u003e\nLink: https://patch.msgid.link/20261019115859.3471295-1-bsdhenrymartin@gmail.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "473167593f42551ce6b00c05cee8cd20309d45ac", "tree": "b6a8ce95b6694066b02969f999ab8b6a73ea492a", "parents": [ "ffdf678dd16610e3f006dac904bd37c09684673c" ], "author": { "name": "Binbin Deng", "email": "18983559317@163.com", "time": "Mon Oct 19 18:43:52 2026 +0800" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 22 10:42:23 2026 +0200" }, "message": "tipc: fix use-after-free of broadcast reception link at node release\n\nWhen the last reference to a tipc_node is dropped, the node itself is\ndeferred to the RCU callback tipc_node_free(), but the nested broadcast\nreception link, n-\u003ebc_entry.link, is kfree()d synchronously in\ntipc_node_kref_release(), before call_rcu(), and the pointer is never\ncleared. Readers that obtained the node from node_list and then\ndereference bc_entry.link deep into the link (tipc_link_name() in\ntipc_nl_node_reset_link_stats(), bcl-\u003ename/stats in\ntipc_nl_add_bc_link() on the link dump path) therefore touch freed\nmemory although the enclosing node stays alive for a full grace period.\nThe sibling per-bearer links get \"kfree + NULL\" under the node write\nlock in tipc_node_clear_links(); the broadcast entry was missed.\n\nThe race is reachable through the node cleanup timer: once a peer has\nbeen unreachable for NODE_CLEANUP_AFTER (300 s), tipc_node_timeout() -\u003e\ntipc_node_cleanup() unlinks the node under the write lock, and the\nfinal tipc_node_put() at the caller runs outside node_list_lock, so the\nkfree executes in timer softirq context, concurrently with genl dump/\nreset walkers that hold only rcu_read_lock(). (A netlink \"peer remove\"\ncannot race those walkers itself: tipc_genl_family has no parallel_ops,\nso all doit/dumpit calls serialize on the global genl lock.)\n\nReproduced in a QEMU/KVM guest running v7.3.0 with KASAN and\nPREEMPT(full): 10 TIPC peer namespaces on veth bearers, bearer removal\nstaggered so the 300 s node cleanup timers expire while other tasks\nloop link dumps with the broadcast filter and reset-link-stats lookups.\nKASAN hit within two cleanup cycles:\n\n BUG: KASAN: slab-use-after-free in strlen+0x85/0xa0\n Read of size 1 at addr ffff88800b54a004 by task poc_eth/371\n strlen+0x85/0xa0\n tipc_nl_add_bc_link+0x2f9/0xd40\n __tipc_nl_add_node_links+0x10c/0x140\n tipc_nl_node_dump_link+0x8d5/0xd50\n Freed by task 0:\n kfree+0x121/0x380\n tipc_node_timeout+0xa33/0xcf0\n run_timer_softirq+0x144/0x250\n sysvec_apic_timer_interrupt\n\nwith the freed object being the kmalloc-1k tipc_link allocated by\ntipc_link_bc_create() during peer discovery. The same defect fires in\nstrcmp() called from tipc_nl_node_reset_link_stats().\n\nMove the kfree of n-\u003ebc_entry.link into the tipc_node_free() RCU\ncallback so the broadcast link lives exactly as long as the enclosing\nnode. All readers are covered: the netlink walkers are inside\nrcu_read_lock(), and the packet reception path reaches the node via\ntipc_node_find(), whose kref defers kref_release itself.\n\nFound during a static-analysis-assisted audit: candidate sites were\nsurfaced by a Coccinelle rule, and the reader/writer paths were\nconfirmed by LLM-assisted (GLM-5.3) code inspection.\n\nFixes: d25a01257e42 (\"tipc: fix crash during node removal\")\nAssisted-by: GLM-5.3 coccinelle\nSigned-off-by: Binbin Deng \u003c18983559317@163.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nReviewed-by: Tung Nguyen \u003ctung.quang.nguyen@est.tech\u003e\nLink: https://patch.msgid.link/20261019104352.488347-1-18983559317@163.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "111153e8280b4fa8b5537c941264ee6dc71d71d8", "tree": "099a9518d9704cdfb84c261fba234f7042381e59", "parents": [ "046d687e58ed60d917f91b348f70125acc345088", "2dd7ee9638a0d9d94a574c60f221da00514e6146" ], "author": { "name": "Petr Mladek", "email": "pmladek@suse.com", "time": "Thu Oct 22 10:22:29 2026 +0200" }, "committer": { "name": "Petr Mladek", "email": "pmladek@suse.com", "time": "Thu Oct 22 10:22:29 2026 +0200" }, "message": "Merge branch \u0027for-7.4-console-registration\u0027 into for-linus\n" }, { "commit": "046d687e58ed60d917f91b348f70125acc345088", "tree": "214bf388924c06fc5e7b52374af3f4e225caf62c", "parents": [ "9d586910e3d858fb25d061b7bf3f9642eca89213", "c56e202c1a48918392c61cbdd3caf04afe425970" ], "author": { "name": "Petr Mladek", "email": "pmladek@suse.com", "time": "Thu Oct 22 10:21:06 2026 +0200" }, "committer": { "name": "Petr Mladek", "email": "pmladek@suse.com", "time": "Thu Oct 22 10:21:06 2026 +0200" }, "message": "Merge branch \u0027for-7.4\u0027 into for-linus\n" }, { "commit": "15665047024e30f9c2227563d03034061c99ac2c", "tree": "c33fced29b770394a0202ead958eb84088fa3e46", "parents": [ "a0fe269293509acdd93b9cfb3f46636f7b91b33a" ], "author": { "name": "Baek Kyu, Kim", "email": "pocj8ur4in@gmail.com", "time": "Wed Oct 21 02:26:01 2026 +0900" }, "committer": { "name": "Bartosz Golaszewski", "email": "bartosz.golaszewski@oss.qualcomm.com", "time": "Thu Oct 22 10:15:50 2026 +0200" }, "message": "gpiolib: Propagate emulated drive errors when setting arrays\n\ngpiod_set_array_value_complex() ignores errors from the open-drain and\nopen-source emulation helpers. If a direction change fails,\nGPIO_V2_LINE_SET_VALUES_IOCTL still reports success, including when\nupdating a single line.\n\nReturn the first emulation error after freeing the temporary bitmaps.\nKeep updates already made to earlier lines and stop processing the\nremaining lines, as for errors from gpiochip_set_multiple().\n\nFixes: 8ce258f62f90 (\"gpiolib: make value setters have return values\")\nSigned-off-by:\nLink: https://patch.msgid.link/20261020172601.221861-1-pocj8ur4in@gmail.com\nSigned-off-by: Bartosz Golaszewski \u003cbartosz.golaszewski@oss.qualcomm.com\u003e\n" }, { "commit": "7be4bc52fd9e0e55dc9a2e0232b89427d2c4b614", "tree": "c5705f05f97dd869c257a1c35db062eba3fbd5c6", "parents": [ "4403278e4ea2f654f8130a5c03eb8b4516a0f201", "d4ffc4896b3e709c6a5d7e5a78a1fddfc774fa25" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Oct 21 18:53:14 2026 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Oct 21 18:53:14 2026 -1000" }, "message": "Merge tag \u0027driver-core-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/driver-core/driver-core\n\nPull driver core updates from Danilo Krummrich:\n \"Core:\n\n - Add TAINT_FORCED_BIND to taint the kernel and driver module before\n manual sysfs bind/unbind operations; make add_taint_module()\n available to driver core and update taint decoding tools and\n documentation\n\n - Constify device_show/store_*() attribute parameters and adapt x86\n MCE and perf users to prepare for const dev_ext_attribute instances\n\n - Fix UAF in NUMA access node registration failure handling by\n dropping the device reference with put_device() instead of directly\n freeing the node\n\n debugfs:\n\n - Make debugfs_create_str() read-only to eliminate double-free races\n between concurrent writers; reject writable modes; convert\n interconnect and SoundWire users to local file operations with\n mutex-protected strings\n\n kobject:\n\n - Fix out-of-bounds access in kobject_action_type() when parsing\n action strings containing embedded NUL bytes\n\n - Fix the kobject_set_name() reference in kset_register() kernel-doc\n\n Rust:\n\n - DMA:\n\n - Tie Coherent, CoherentBox and CoherentHandle to the device\u0027s\n bound lifetime to prevent retaining DMA allocations beyond\n driver unbind; propagate the lifetime through nova-core and the\n DMA sample driver\n\n - I/O:\n\n - Require explicit base types for registers and replace relative\n registers with typed subregion projections; reimplement\n register!() as a proc macro, support registers using existing\n types without inline bitfields, and convert nova-core, Tyr and\n the PCI sample; add AsRepr/AsReprMut and transmute helpers with\n deferred size checks for representation conversions\n\n - Wrap ResourceSize in a transparent newtype with explicit\n conversions, including checked conversion to usize\n\n - PCI:\n\n - Add typed PCIe extended capability lookup and SR-IOV accessors\n for the First VF Offset and decoded VF BAR addresses and widths,\n keeping raw SR-IOV registers private to preserve PCI core\n ownership of their state\n\n - scatterlist:\n\n - Honor the device\u0027s maximum segment size as well as the DMA\n mapping limit when constructing SG tables\n\n - Return u32 from SGEntry::dma_len() to match the C segment length\n type\n\n - misc:\n\n - Validate auxiliary DeviceId name length explicitly to improve\n compile-time diagnostics for oversized device ID table entries\n\n - Drop unnecessary \u0027static bounds from debugfs ScopedDir file\n creation methods to support data containing non-\u0027static\n references, including DMA buffers\n\n Misc:\n\n - Add Johan Hovold as driver core maintainer\n\n - Simplify platform_device_alloc() by returning early on allocation\n failure\n\n - Fix typos in driver core and kernfs comments\"\n\n* tag \u0027driver-core-7.4-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/driver-core/driver-core: (41 commits)\n rust: pci: add extended capability and SR-IOV support\n kobject: Fix the kobj_set_name reference in kset_register() kernel-doc\n rust: io: convert ResourceSize into a transparent newtype\n rust: scatterlist: return u32 from SGEntry::dma_len()\n MAINTAINERS: add myself as driver core maintainer\n debugfs: make debugfs_create_str() read-only\n soundwire: debugfs: replace writable string helper\n interconnect: debugfs: replace writable string helper\n docs: admin-guide: Handle TAINT_FORCED_BIND when parsing /proc/sys/kernel/tainted\n driver core: platform: Simplify platform_device_alloc()\n kobject: fix out-of-bounds access in kobject_action_type()\n rust: scatterlist: honor the device\u0027s maximum segment size\n driver core: add TAINT_FORCED_BIND for when userspace manually messes with devices and drivers\n module: fix up documentation for add_taint() and add_taint_module()\n module: pull out add_taint_module() to be public\n driver core: Constify the signature of device_show/store_*()\n drivers: perf: Use __DEVICE_ATTR() macro to initialize dev_ext_attribute\n x86/mce: Use __DEVICE_ATTR() macro to initialize dev_ext_attribute\n rust: auxiliary: validate DeviceId name length\n driver core: fix typos in comments\n ...\n" }, { "commit": "f71ff7d406523748bfb8236830c7eaa6a308aaa1", "tree": "b44ca64862c2b2dea4e9fe2c572bbc40f3d046c4", "parents": [ "82858f249d65126539aa4297677b468fd6619041" ], "author": { "name": "Sasha Levin", "email": "sashal@kernel.org", "time": "Tue Oct 20 12:15:42 2026 -0400" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 21 18:07:08 2026 -0700" }, "message": "r8169: clear TX LPI on RTL8168h at link up after phylink conversion\n\nCommit 3cdeaef1754a (\"r8169: disable EEE on RTL8168h/8111h\") disables\nEEE on RTL_GIGA_MAC_VER_46 with phy_disable_eee() but keeps the version\nEEE-capable, so that link up still calls rtl_enable_tx_lpi(tp, false)\nand clears the MAC TX-LPI bits (ERI 0x1b0[1:0]). rtl_hw_start_8168h_1()\ndoes not clear them, so a warm reboot from an EEE-active state could\notherwise leave TX-LPI asserted while the PHY no longer negotiates EEE.\n\nIn net-next, commit 8a3c76523e44 (\"r8169: add support for phylink\")\nmoved link handling to phylink, and rtl_mac_link_up() does not touch\nthe TX-LPI bits. The merge of net into net-next kept the\nphy_disable_eee() quirk and its comment, but not the link-up clear it\ndepends on. The only remaining clear is rtl_mac_disable_tx_lpi(), which\nphylink calls from phylink_deactivate_lpi() only after\nphylink_activate_lpi() has enabled LPI. With EEE disabled on this chip\nthat never happens, so the bits are never cleared and the comment in\nr8169_mdio_register() no longer holds.\n\nClear TX-LPI explicitly in rtl_mac_link_up() for RTL_GIGA_MAC_VER_46.\n\nFixes: f49defea7668 (\"Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net\")\nLink: https://lore.kernel.org/all/0e0b727e94d046b19ad463e7a1a9fe68@realsil.com.cn/\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\nLink: https://patch.msgid.link/20261020161543.3712208-1-sashal@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "ffdf678dd16610e3f006dac904bd37c09684673c", "tree": "5573d6630e8790e7a8bcfd10ca2752d3fa7c813a", "parents": [ "a55eb6a622141352131aa6156bbd6ce5da79d9b5" ], "author": { "name": "David Woodhouse", "email": "dwmw@amazon.co.uk", "time": "Tue Oct 20 10:48:10 2026 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 21 18:05:49 2026 -0700" }, "message": "tun: Require CAP_NET_ADMIN to attach to an ownerless device\n\nTwenty years ago I made creating a tuntap device require CAP_NET_ADMIN\nin commit ca6bb5d7ab22 (\"[NET]: Require CAP_NET_ADMIN to create tuntap\ndevices.\")\n\nThe idea was to allow the permissions on /dev/net/tun to be relaxed to\n0666 and thus allow owners of tun devices assigned with TUNSETOWNER to\nactually open it and get at their devices.\n\nWhat we missed at the time was that persistent devices with *no* owner\nwere already essentially world-consumable, and anyone who could open\nthe device node could also attach to those.\n\nEven then, using persistent devices with no explicitly set owner — on\nthe (false) presumption that CAP_NET_ADMIN would be required to open\nthem — wasn\u0027t an egregious userspace bug. There are cases where it does\nmake sense to separate the creation/configuration of the netdevice, from\nthe process which shovels packets into it.\n\nSince then, TUNSETGROUP was added a year later in commit 8c644623fe7e\n(\"[NET]: Allow group ownership of TUN/TAP devices.\"). Its commit message\nnoted that if both uid and gid are set, both have to match (in itself a\nbizarre choice) — but still not that with *neither* set, no permission\nat all was required.\n\nThen in 2012 commit c8d68e6be1c3 (\"tuntap: multiqueue support\") allowed\nnew queues to be attached to a device from the moment of its creation,\nwith no way for userspace to close the race between creation and a\nsubsequent TUNSET{OWNER,GROUP}.\n\nIn 2024, commit 3ca459eaba1bf (\"tun: fix group permission check\") tried\nto fix things to be saner: only require the user *or* the group to\nmatch, in line with standard POSIX permissions, and require\nCAP_NET_ADMIN if neither the user nor group authorised the access\n(although it put the CAP_NET_ADMIN check first, and would wrongly have\nreported the capability as having been used even when it was not).\n\nThat fix was reverted in commit a70c7b3cbc06 (\"tun: revert fix group\npermission check\") due to allegedly causing a regression in an selinux\ntest suite which *expected* the attachment to succeed when authorised\nby none of user, group, nor CAP_NET_ADMIN:\nhttps://lore.kernel.org/netdev/CAFqZXNtkCBT4f+PwyVRmQGoT3p1eVa01fCG_aNtpt6dakXncUg@mail.gmail.com/\n\nWe should not break UAPI. But we don\u0027t have to consider an selinux test\ncase which deliberately exercises a security flaw to be UAPI worth\npreserving either. To which end, I have fixed it in selinux-testsuite\ncommit b2f894f0016b (\"tests/tun_tap: set an owner on the device for the\nrelabel tests\").\n\nSo: fix the lack of CAP_NET_ADMIN check on devices which *haven\u0027t* been\nassigned an owner or group, while leaving the weird tun ownership model\nas it was (user *and* group have to match, if both are set). If someone\nstill wants to fix the latter (which wasn\u0027t actually the reason the\nprevious attempt was reverted), they can do it under separate cover.\n\nPermit attaching to an existing device only if an owner and/or group was\nset and the caller matches all that were set, or if the caller has\nCAP_NET_ADMIN. The only behavioural change is that a device with no\nowner or group now requires CAP_NET_ADMIN to attach — precisely the\nloophole we want to close.\n\nAnd put the CAP_NET_ADMIN check in the right place this time.\n\nFixes: ca6bb5d7ab22 (\"[NET]: Require CAP_NET_ADMIN to create tuntap devices.\")\nReported-by: Andrew Lutomirski \u003cluto@kernel.org\u003e\nSigned-off-by: David Woodhouse \u003cdwmw@amazon.co.uk\u003e\nCc: stable@vger.kernel.org\nReviewed-by: Willem de Bruijn \u003cwillemb@google.com\u003e\nLink: https://patch.msgid.link/3c77f88acff5b3c2617b22d64faad15f6212619c.camel@infradead.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "82858f249d65126539aa4297677b468fd6619041", "tree": "a018db54f936f95c4f746f9d30fda25d6c3cf09f", "parents": [ "46cbf85155e5451b6682ea0c17bc62ec564aec36", "700b4c6c70d6a36e6878c5ea092c4877da3f10d8" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 21 17:58:25 2026 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 21 17:58:25 2026 -0700" }, "message": "Merge branch \u0027net-sched-sch_cake-fixes-for-accounting-and-reconfiguration\u0027\n\nJamal Hadi Salim says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nnet/sched: sch_cake: fixes for accounting and reconfiguration\n\nFour independent fixes in the CAKE qdisc. Three are follow-ups to the\nautorate reconfiguration work around commit 7cbfb180945c (\"net/sched:\nsch_cake: fix autorate reconfiguration throttling\") and the 32-bit\nadmission-counter wraps fixed in gred/bfifo/plug by commit 4c660ee8c809\n(\"net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue\");\nthe fourth is a dead-code cleanup found while auditing the dump path.\n\nPatch 1 serializes a \u0027tc qdisc change\u0027 with the datapath\u0027s autorate\nupdate under the qdisc lock, so the netlink writer and the autorate\nwriter can no longer lose the configured rate. rate_bps needs no atomic\n(it is only loaded and stored), so it stays a plain u64 with\nREAD_ONCE()/WRITE_ONCE() annotations.\n\nPatch 2 propagates the backlog reduction of the reconfigure-time tin\npurge to classful parents, so a CAKE leaf under HTB no longer leaves the\npurged packets in the parent\u0027s qlen/backlog forever.\n\nPatch 3 widens buffer_used and buffer_max_used to u64. The u32\naccumulator wraps once the resident truesize passes 2^32, bypassing the\nover-limit drop loop while the configured limit is a u32 attribute; the\nu32 MEMORY_USED export is clamped so widening the counter does not\ntruncate the reported value.\n\nPatch 4 drops an unreachable \u0027nla_nest_end() \u003c 0\u0027 error check: the\nhelper never returns a negative value.\n\nAll four are hardening for net-next (no Fixes:, no Cc: stable): the\ncounter wrap, the missing parent-backlog propagation and the\nreconfiguration race all predate any contract we could anchor a\nregression on. Patches 1-2 were reported by Sashiko (gemini) and patch\n3 comes from the gred 32-bit-wrap family; patch 4 is a static cleanup.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/QDISC-5RTM.v3.r0.20261020053711@mojatatu.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" } ], "next": "700b4c6c70d6a36e6878c5ea092c4877da3f10d8" }