)]}' { "log": [ { "commit": "4da34b7d175dc99b8befebd69e96546c960d526c", "tree": "710b004b47bd4a560a9e7841ec14bfbb830df335", "parents": [ "20df09614775475fecc37a786a382755ba3d7d2b", "4bb7f6c2781e46fc5bd00475a66df2ea30ef330d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 18:26:00 2022 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 18:26:00 2022 -0700" }, "message": "Merge tag \u0027thermal-6.1-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull thermal control fix from Rafael Wysocki:\n \"This fixes the control CPU selection in the intel_powerclamp thermal\n driver\"\n\n* tag \u0027thermal-6.1-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n thermal: intel_powerclamp: Use first online CPU as control_cpu\n" }, { "commit": "20df09614775475fecc37a786a382755ba3d7d2b", "tree": "3d0cf7a76379510f49f7c0b6baf79bac16178391", "parents": [ "9d6e681d33943e7e5b26b945e680a71311683795", "a6991d623de02c42c44ddfffde66ec18608069d3" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 18:19:42 2022 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 18:19:42 2022 -0700" }, "message": "Merge tag \u0027pm-6.1-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull power management fixes from Rafael Wysocki:\n \"These fix some issues and clean up code in ARM cpufreq drivers.\n\n Specifics:\n\n - Fix module loading in the Tegra124 cpufreq driver (Jon Hunter)\n\n - Fix memory leak and update to read-only region in the qcom cpufreq\n driver (Fabien Parent)\n\n - Miscellaneous minor cleanups to cpufreq drivers (Fabien Parent,\n Yang Yingliang)\"\n\n* tag \u0027pm-6.1-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n cpufreq: sun50i: Switch to use dev_err_probe() helper\n cpufreq: qcom-nvmem: Switch to use dev_err_probe() helper\n cpufreq: imx6q: Switch to use dev_err_probe() helper\n cpufreq: dt: Switch to use dev_err_probe() helper\n cpufreq: qcom: remove unused parameter in function definition\n cpufreq: qcom: fix writes in read-only memory region\n cpufreq: qcom: fix memory leak in error path\n cpufreq: tegra194: Fix module loading\n" }, { "commit": "9d6e681d33943e7e5b26b945e680a71311683795", "tree": "1ee25d4a788f2965e4e04446cdc351f921e08796", "parents": [ "ec4cf5dbb1887adadba2f7cbe8131facbd27a5d5", "3f8deab61ea86d738a1e7fdf95e9ad2bf08d14b8" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 18:08:30 2022 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 18:08:30 2022 -0700" }, "message": "Merge tag \u0027acpi-6.1-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull ACPI fixes from Rafael Wysocki:\n \"These fix issues introduced during this merge window (ACPI/PCI, device\n enumeration and documentation) and some other ones found recently.\n\n Specifics:\n\n - Add missing device reference counting to acpi_get_pci_dev() after\n changing it recently (Rafael Wysocki)\n\n - Fix resource list walk in acpi_dma_get_range() (Robin Murphy)\n\n - Add IRQ override quirk for LENOVO IdeaPad and extend the IRQ\n override warning message (Jiri Slaby)\n\n - Fix integer overflow in ghes_estatus_pool_init() (Ashish Kalra)\n\n - Fix multiple error records handling in one of the ACPI extlog\n driver code paths (Tony Luck)\n\n - Prune DSDT override documentation from index after dropping it\n (Bagas Sanjaya)\"\n\n* tag \u0027acpi-6.1-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n ACPI: scan: Fix DMA range assignment\n ACPI: PCI: Fix device reference counting in acpi_get_pci_dev()\n ACPI: resource: note more about IRQ override\n ACPI: resource: do IRQ override on LENOVO IdeaPad\n ACPI: extlog: Handle multiple records\n ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init()\n Documentation: ACPI: Prune DSDT override documentation from index\n" }, { "commit": "ec4cf5dbb1887adadba2f7cbe8131facbd27a5d5", "tree": "fd3e110933e20b591ecaefe81554b2d650a1c039", "parents": [ "e97eace635a42da4644290179aea496178e64988", "37926f96302d8b6c2bc97990d33e316a3ed6d67f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 18:02:36 2022 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 18:02:36 2022 -0700" }, "message": "Merge tag \u0027efi-fixes-for-v6.1-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/efi/efi\n\nPull EFI fixes from Ard Biesheuvel:\n\n - fixes for the EFI variable store refactor that landed in v6.0\n\n - fixes for issues that were introduced during the merge window\n\n - back out some changes related to EFI zboot signing - we\u0027ll add a\n better solution for this during the next cycle\n\n* tag \u0027efi-fixes-for-v6.1-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/efi/efi:\n efi: runtime: Don\u0027t assume virtual mappings are missing if VA \u003d\u003d PA \u003d\u003d 0\n efi: libstub: Fix incorrect payload size in zboot header\n efi: libstub: Give efi_main() asmlinkage qualification\n efi: efivars: Fix variable writes without query_variable_store()\n efi: ssdt: Don\u0027t free memory if ACPI table was loaded successfully\n efi: libstub: Remove zboot signing from build options\n" }, { "commit": "e97eace635a42da4644290179aea496178e64988", "tree": "8f9fed17b6f2cbaa78fd4e7f8e77c78a9560cb22", "parents": [ "334fe5d3a99aea2e92b934b4c58fffee9b056c5d", "620bf9f981365c18cc2766c53d92bf8131c63f32" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 17:47:39 2022 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 17:47:39 2022 -0700" }, "message": "Merge tag \u0027iommu-fixes-v6.1-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu\n\nPull iommu fixes from Joerg Roedel:\n \"Intel VT-d fixes:\n\n - Fix a lockdep splat issue in intel_iommu_init()\n\n - Allow NVS regions to pass RMRR check\n\n - Domain cleanup in error path\"\n\n* tag \u0027iommu-fixes-v6.1-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu:\n iommu/vt-d: Clean up si_domain in the init_dmars() error path\n iommu/vt-d: Allow NVS regions in arch_rmrr_sanity_check()\n iommu/vt-d: Use rcu_lock in get_resv_regions\n iommu: Add gfp parameter to iommu_alloc_resv_region\n" }, { "commit": "334fe5d3a99aea2e92b934b4c58fffee9b056c5d", "tree": "5c96cb601a3bab86b6788d2b987ddfb083666597", "parents": [ "bd8e963412c8e676fc73ae456f311cdcabe8642d", "e66928af3667a9d844a674976ba7765757ab68e2" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 17:41:57 2022 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 17:41:57 2022 -0700" }, "message": "Merge tag \u0027for-linus-2022102101\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid\n\nPull HID fixes from Benjamin Tissoires:\n\n - a 12 year old bug fix for the Apple Magic Trackpad v1 (José Expósito)\n\n - a fix for a potential crash on removal of the Playstation controllers\n (Roderick Colenbrander)\n\n - a few new device IDs and device-specific quirks, most notably support\n of the new Playstation DualSense Edge controller\n\n* tag \u0027for-linus-2022102101\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid:\n HID: lenovo: Make array tp10ubkbd_led static const\n HID: saitek: add madcatz variant of MMO7 mouse device ID\n HID: playstation: support updated DualSense rumble mode.\n HID: playstation: add initial DualSense Edge controller support\n HID: playstation: stop DualSense output work on remove.\n HID: magicmouse: Do not set BTN_MOUSE on double report\n" }, { "commit": "bd8e963412c8e676fc73ae456f311cdcabe8642d", "tree": "ed9cf09112d0987b26297baf4a09b251cb39d684", "parents": [ "022c028f4cfd6af728fcb9314712257a327d47e0", "73b1b8d25e39a1478b3792a7075f43e053ee62c2" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 16:01:53 2022 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 16:01:53 2022 -0700" }, "message": "Merge tag \u00276.1-rc1-smb3-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6\n\nPull cifs fixes from Steve French:\n\n - memory leak fixes\n\n - fixes for directory leases, including an important one which fixes a\n problem noticed by git functional tests\n\n - fixes relating to missing free_xid calls (helpful for\n tracing/debugging of entry/exit into cifs.ko)\n\n - a multichannel fix\n\n - a small cleanup fix (use of list_move instead of list_del/list_add)\n\n* tag \u00276.1-rc1-smb3-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6:\n cifs: update internal module number\n cifs: fix memory leaks in session setup\n cifs: drop the lease for cached directories on rmdir or rename\n smb3: interface count displayed incorrectly\n cifs: Fix memory leak when build ntlmssp negotiate blob failed\n cifs: set rc to -ENOENT if we can not get a dentry for the cached dir\n cifs: use LIST_HEAD() and list_move() to simplify code\n cifs: Fix xid leak in cifs_get_file_info_unix()\n cifs: Fix xid leak in cifs_ses_add_channel()\n cifs: Fix xid leak in cifs_flock()\n cifs: Fix xid leak in cifs_copy_file_range()\n cifs: Fix xid leak in cifs_create()\n" }, { "commit": "022c028f4cfd6af728fcb9314712257a327d47e0", "tree": "08581654371dcc0765d2457b4f76e32308ef50ff", "parents": [ "ed5377958cfd43a2291f25f5e88845b90b9aee3f", "93c128e709aec23b10f3a2f78a824080d4085318" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 15:51:30 2022 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 15:51:30 2022 -0700" }, "message": "Merge tag \u0027nfsd-6.1-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/cel/linux\n\nPull nfsd fixes from Chuck Lever:\n \"Fixes for patches merged in v6.1\"\n\n* tag \u0027nfsd-6.1-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/cel/linux:\n nfsd: ensure we always call fh_verify_error tracepoint\n NFSD: unregister shrinker when nfsd_init_net() fails\n" }, { "commit": "ed5377958cfd43a2291f25f5e88845b90b9aee3f", "tree": "e32093e15c22fb42c599abea0e07fe7892697492", "parents": [ "d4b7332eef46ed403061e27b03c71ad26b2f5353", "dc8e483f684a24cc06e1d5fa958b54db58855093" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 15:19:43 2022 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 15:19:43 2022 -0700" }, "message": "Merge tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi\n\nPull SCSI fixes from James Bottomley:\n \"Two small changes, one in the lpfc driver and the other in the core.\n\n The core change is an additional footgun guard which prevents users\n from writing the wrong state to sysfs and causing a hang\"\n\n* tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:\n scsi: lpfc: Fix memory leak in lpfc_create_port()\n scsi: core: Restrict legal sdev_state transitions via sysfs\n" }, { "commit": "d4b7332eef46ed403061e27b03c71ad26b2f5353", "tree": "8e6abe26a8fcf3c7c1f091d954fc12633b703c03", "parents": [ "294e73ffb0efac4c8bac2d9e6a896225098bd419", "2db96217e7e515071726ca4ec791742c4202a1b2" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 15:14:14 2022 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 15:14:14 2022 -0700" }, "message": "Merge tag \u0027block-6.1-2022-10-20\u0027 of git://git.kernel.dk/linux\n\nPull block fixes from Jens Axboe:\n\n - NVMe pull request via Christoph:\n - fix nvme-hwmon for DMA non-cohehrent architectures (Serge Semin)\n - add a nvme-hwmong maintainer (Christoph Hellwig)\n - fix error pointer dereference in error handling (Dan Carpenter)\n - fix invalid memory reference in nvmet_subsys_attr_qid_max_show\n (Daniel Wagner)\n - don\u0027t limit the DMA segment size in nvme-apple (Russell King)\n - fix workqueue MEM_RECLAIM flushing dependency (Sagi Grimberg)\n - disable write zeroes on various Kingston SSDs (Xander Li)\n\n - fix a memory leak with block device tracing (Ye)\n\n - flexible-array fix for ublk (Yushan)\n\n - document the ublk recovery feature from this merge window\n (ZiyangZhang)\n\n - remove dead bfq variable in struct (Yuwei)\n\n - error handling rq clearing fix (Yu)\n\n - add an IRQ safety check for the cached bio freeing (Pavel)\n\n - drbd bio cloning fix (Christoph)\n\n* tag \u0027block-6.1-2022-10-20\u0027 of git://git.kernel.dk/linux:\n blktrace: remove unnessary stop block trace in \u0027blk_trace_shutdown\u0027\n blktrace: fix possible memleak in \u0027__blk_trace_remove\u0027\n blktrace: introduce \u0027blk_trace_{start,stop}\u0027 helper\n bio: safeguard REQ_ALLOC_CACHE bio put\n block, bfq: remove unused variable for bfq_queue\n drbd: only clone bio if we have a backing device\n ublk_drv: use flexible-array member instead of zero-length array\n nvmet: fix invalid memory reference in nvmet_subsys_attr_qid_max_show\n nvmet: fix workqueue MEM_RECLAIM flushing dependency\n nvme-hwmon: kmalloc the NVME SMART log buffer\n nvme-hwmon: consistently ignore errors from nvme_hwmon_init\n nvme: add Guenther as nvme-hwmon maintainer\n nvme-apple: don\u0027t limit DMA segement size\n nvme-pci: disable write zeroes on various Kingston SSD\n nvme: fix error pointer dereference in error handling\n Documentation: document ublk user recovery feature\n blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping()\n" }, { "commit": "294e73ffb0efac4c8bac2d9e6a896225098bd419", "tree": "1c2f6517b52f4b7a71716ee36de14816106d730f", "parents": [ "1d61754caa8c69f566504e63c8b3f3a2df0954c8", "996d3efeb091c503afd3ee6b5e20eabf446fd955" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 15:09:10 2022 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 15:09:10 2022 -0700" }, "message": "Merge tag \u0027io_uring-6.1-2022-10-20\u0027 of git://git.kernel.dk/linux\n\nPull io_uring fixes from Jens Axboe:\n\n - Fix a potential memory leak in the error handling path of io-wq setup\n (Rafael)\n\n - Kill an errant debug statement that got added in this release (me)\n\n - Fix an oops with an invalid direct descriptor with IORING_OP_MSG_RING\n (Harshit)\n\n - Remove unneeded FFS_SCM flagging (Pavel)\n\n - Remove polling off the exit path (Pavel)\n\n - Move out direct descriptor debug check to the cleanup path (Pavel)\n\n - Use the proper helper rather than open-coding cached request get\n (Pavel)\n\n* tag \u0027io_uring-6.1-2022-10-20\u0027 of git://git.kernel.dk/linux:\n io-wq: Fix memory leak in worker creation\n io_uring/msg_ring: Fix NULL pointer dereference in io_msg_send_fd()\n io_uring/rw: remove leftover debug statement\n io_uring: don\u0027t iopoll from io_ring_ctx_wait_and_kill()\n io_uring: reuse io_alloc_req()\n io_uring: kill hot path fixed file bitmap debug checks\n io_uring: remove FFS_SCM\n" }, { "commit": "1d61754caa8c69f566504e63c8b3f3a2df0954c8", "tree": "742c3079be306565bbe9d41ddae275d9270233c2", "parents": [ "0de0b76837c2e958ad0e8fa9abd9846843fbf3f8", "a383dcb1cca8305497877119fba0a320f41fe853" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 14:43:09 2022 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 14:43:09 2022 -0700" }, "message": "Merge tag \u0027for-linus-6.1-rc2-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip\n\nPull xen fixes from Juergen Gross:\n \"Just two fixes for the new \u0027virtio with grants\u0027 feature\"\n\n* tag \u0027for-linus-6.1-rc2-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip:\n xen/virtio: Convert PAGE_SIZE/PAGE_SHIFT/PFN_UP to Xen counterparts\n xen/virtio: Handle cases when page offset \u003e PAGE_SIZE properly\n" }, { "commit": "0de0b76837c2e958ad0e8fa9abd9846843fbf3f8", "tree": "bf068481b5f492be9c1d99e40cc9138a2dd539a3", "parents": [ "440b7895c990a63869a9d55e5c2502dd501a124e", "abe3c631447dcd1ba7af972fe6f054bee6f136fa" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 14:33:36 2022 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 14:33:36 2022 -0700" }, "message": "Merge tag \u0027selinux-pr-20221020\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux\n\nPull selinux fix from Paul Moore:\n \"A small SELinux fix for a GFP_KERNEL allocation while a spinlock is\n held.\n\n The patch, while still fairly small, is a bit larger than one might\n expect from a simple s/GFP_KERNEL/GFP_ATOMIC/ conversion because we\n added support for the function to be called with different gfp flags\n depending on the context, preserving GFP_KERNEL for those cases that\n can safely sleep\"\n\n* tag \u0027selinux-pr-20221020\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux:\n selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()\n" }, { "commit": "440b7895c990a63869a9d55e5c2502dd501a124e", "tree": "463423cf20f1cae854dab17fca77aa1d33bae12b", "parents": [ "ce3d90a87776053ec367c0eb083d389e9979c7e9", "97061d441110528dc02972818f2f1dad485107f9" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 12:33:03 2022 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 12:33:03 2022 -0700" }, "message": "Merge tag \u0027mm-hotfixes-stable-2022-10-20\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm\n\nPull misc fixes from Andrew Morron:\n \"Seventeen hotfixes, mainly for MM.\n\n Five are cc:stable and the remainder address post-6.0 issues\"\n\n* tag \u0027mm-hotfixes-stable-2022-10-20\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm:\n nouveau: fix migrate_to_ram() for faulting page\n mm/huge_memory: do not clobber swp_entry_t during THP split\n hugetlb: fix memory leak associated with vma_lock structure\n mm/page_alloc: reduce potential fragmentation in make_alloc_exact()\n mm: /proc/pid/smaps_rollup: fix maple tree search\n mm,hugetlb: take hugetlb_lock before decrementing h-\u003eresv_huge_pages\n mm/mmap: fix MAP_FIXED address return on VMA merge\n mm/mmap.c: __vma_adjust(): suppress uninitialized var warning\n mm/mmap: undo -\u003emmap() when mas_preallocate() fails\n init: Kconfig: fix spelling mistake \"satify\" -\u003e \"satisfy\"\n ocfs2: clear dinode links count in case of error\n ocfs2: fix BUG when iput after ocfs2_mknod fails\n gcov: support GCC 12.1 and newer compilers\n zsmalloc: zs_destroy_pool: add size_class NULL check\n mm/mempolicy: fix mbind_range() arguments to vma_merge()\n mailmap: update email for Qais Yousef\n mailmap: update Dan Carpenter\u0027s email address\n" }, { "commit": "ce3d90a87776053ec367c0eb083d389e9979c7e9", "tree": "49515b1d892b847b7bd7bb0d21db4770e48b3995", "parents": [ "4f1e0c18bc8324ae05646c34759fd8dbe87f6582", "21a1994b6492b12e55dbf39d15271430ef6839f0" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 12:29:52 2022 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 12:29:52 2022 -0700" }, "message": "Merge tag \u0027trace-tools-6.1-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace\n\nPull tracing tool update from Steven Rostedt:\n\n - Make dot2c generate monitor\u0027s automata definition static\n\n* tag \u0027trace-tools-6.1-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace:\n rv/dot2c: Make automaton definition static\n" }, { "commit": "4f1e0c18bc8324ae05646c34759fd8dbe87f6582", "tree": "6705e3002fb3dc2cec6bc9e9a27d9647b9373f63", "parents": [ "e35184f321518acadb681928a016da21a9a20c13", "e25b091bed4946078c0998e4be77bc56824a9adf" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 12:25:39 2022 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 21 12:25:39 2022 -0700" }, "message": "Merge tag \u0027linux-watchdog-6.1-rc2\u0027 of git://www.linux-watchdog.org/linux-watchdog\n\nPull watchdog updates from Wim Van Sebroeck:\n\n - Add tracing events for the most common watchdog events\n\n* tag \u0027linux-watchdog-6.1-rc2\u0027 of git://www.linux-watchdog.org/linux-watchdog:\n watchdog: Add tracing events for the most usual watchdog events\n" }, { "commit": "3f8deab61ea86d738a1e7fdf95e9ad2bf08d14b8", "tree": "cedf39fc209e3b0a8d5d978624846b3191fe20f0", "parents": [ "eb1d39260ee6477e2971f81cec18ba5f6583259d", "64d23ff38ac9ea822c9810b60a616e39e2c2c82d", "4ef96d4dc8e1c418260abf817a90a3adb2d386ac", "43d2748394c3feb86c0c771466f5847e274fc043", "f6ec01da40e4139b41179f046044ee7c4f6370dc", "83439a0f1ce6a592f95e41338320b5f01b98a356" ], "author": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Fri Oct 21 20:07:41 2022 +0200" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Fri Oct 21 20:07:41 2022 +0200" }, "message": "Merge branches \u0027acpi-scan\u0027, \u0027acpi-resource\u0027, \u0027acpi-apei\u0027, \u0027acpi-extlog\u0027 and \u0027acpi-docs\u0027\n\nMerge assorted ACPI fixes for 6.1-rc2:\n\n - Fix resource list walk in acpi_dma_get_range() (Robin Murphy).\n\n - Add IRQ override quirk for LENOVO IdeaPad and extend the IRQ\n override warning message (Jiri Slaby).\n\n - Fix integer overflow in ghes_estatus_pool_init() (Ashish Kalra).\n\n - Fix multiple error records handling in one of the ACPI extlog driver\n code paths (Tony Luck).\n\n - Prune DSDT override documentation from index after dropping it (Bagas\n Sanjaya).\n\n* acpi-scan:\n ACPI: scan: Fix DMA range assignment\n\n* acpi-resource:\n ACPI: resource: note more about IRQ override\n ACPI: resource: do IRQ override on LENOVO IdeaPad\n\n* acpi-apei:\n ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init()\n\n* acpi-extlog:\n ACPI: extlog: Handle multiple records\n\n* acpi-docs:\n Documentation: ACPI: Prune DSDT override documentation from index\n" }, { "commit": "37926f96302d8b6c2bc97990d33e316a3ed6d67f", "tree": "0b60b29e2fa95de6d198043055027ef3044b2005", "parents": [ "53a7ea284de9eabc0e3b7dee54c2cb670b8e087a" ], "author": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Thu Oct 20 15:16:09 2022 +0200" }, "committer": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Fri Oct 21 11:09:41 2022 +0200" }, "message": "efi: runtime: Don\u0027t assume virtual mappings are missing if VA \u003d\u003d PA \u003d\u003d 0\n\nThe generic EFI stub can be instructed to avoid SetVirtualAddressMap(),\nand simply run with the firmware\u0027s 1:1 mapping. In this case, it\npopulates the virtual address fields of the runtime regions in the\nmemory map with the physical address of each region, so that the mapping\ncode has to be none the wiser. Only if SetVirtualAddressMap() fails, the\nvirtual addresses are wiped and the kernel code knows that the regions\ncannot be mapped.\n\nHowever, wiping amounts to setting it to zero, and if a runtime region\nhappens to live at physical address 0, its valid 1:1 mapped virtual\naddress could be mistaken for a wiped field, resulting on loss of access\nto the EFI services at runtime.\n\nSo let\u0027s only assume that VA \u003d\u003d 0 means \u0027no runtime services\u0027 if the\nregion in question does not live at PA 0x0.\n\nSigned-off-by: Ard Biesheuvel \u003cardb@kernel.org\u003e\n" }, { "commit": "53a7ea284de9eabc0e3b7dee54c2cb670b8e087a", "tree": "560d3781a671108fc25817a347edd582f99e38af", "parents": [ "db14655ad7854b69a2efda348e30d02dbc19e8a1" ], "author": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Thu Oct 20 11:26:42 2022 +0200" }, "committer": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Fri Oct 21 11:09:41 2022 +0200" }, "message": "efi: libstub: Fix incorrect payload size in zboot header\n\nThe linker script symbol definition that captures the size of the\ncompressed payload inside the zboot decompressor (which is exposed via\nthe image header) refers to \u0027.\u0027 for the end of the region, which does\nnot give the correct result as the expression is not placed at the end\nof the payload. So use the symbol name explicitly.\n\nSigned-off-by: Ard Biesheuvel \u003cardb@kernel.org\u003e\n" }, { "commit": "db14655ad7854b69a2efda348e30d02dbc19e8a1", "tree": "76da81ebe910c3de84aa100df009a53e18bb212a", "parents": [ "8a254d90a77580244ec57e82bca7eb65656cc167" ], "author": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Fri Oct 14 19:29:57 2022 +0200" }, "committer": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Fri Oct 21 11:09:40 2022 +0200" }, "message": "efi: libstub: Give efi_main() asmlinkage qualification\n\nTo stop the bots from sending sparse warnings to me and the list about\nefi_main() not having a prototype, decorate it with asmlinkage so that\nit is clear that it is called from assembly, and therefore needs to\nremain external, even if it is never declared in a header file.\n\nSigned-off-by: Ard Biesheuvel \u003cardb@kernel.org\u003e\n" }, { "commit": "8a254d90a77580244ec57e82bca7eb65656cc167", "tree": "070e9b3229edbf81b724c919be3e0d8b10e79ca2", "parents": [ "4b017e59f01097f19b938f6dc4dc2c4720701610" ], "author": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Wed Oct 19 23:29:58 2022 +0200" }, "committer": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Fri Oct 21 11:09:40 2022 +0200" }, "message": "efi: efivars: Fix variable writes without query_variable_store()\n\nCommit bbc6d2c6ef22 (\"efi: vars: Switch to new wrapper layer\")\nrefactored the efivars layer so that the \u0027business logic\u0027 related to\nwhich UEFI variables affect the boot flow in which way could be moved\nout of it, and into the efivarfs driver.\n\nThis inadvertently broke setting variables on firmware implementations\nthat lack the QueryVariableInfo() boot service, because we no longer\ntolerate a EFI_UNSUPPORTED result from check_var_size() when calling\nefivar_entry_set_get_size(), which now ends up calling check_var_size()\na second time inadvertently.\n\nIf QueryVariableInfo() is missing, we support writes of up to 64k -\nlet\u0027s move that logic into check_var_size(), and drop the redundant\ncall.\n\nCc: \u003cstable@vger.kernel.org\u003e # v6.0\nFixes: bbc6d2c6ef22 (\"efi: vars: Switch to new wrapper layer\")\nSigned-off-by: Ard Biesheuvel \u003cardb@kernel.org\u003e\n" }, { "commit": "4b017e59f01097f19b938f6dc4dc2c4720701610", "tree": "403cdf74e256b38e383983ad6e8b99675c3076de", "parents": [ "f57fb375a203e28bf7c08ca01d5ee72028b391d9" ], "author": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Fri Oct 14 12:25:52 2022 +0200" }, "committer": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Fri Oct 21 11:09:40 2022 +0200" }, "message": "efi: ssdt: Don\u0027t free memory if ACPI table was loaded successfully\n\nAmadeusz reports KASAN use-after-free errors introduced by commit\n3881ee0b1edc (\"efi: avoid efivars layer when loading SSDTs from\nvariables\"). The problem appears to be that the memory that holds the\nnew ACPI table is now freed unconditionally, instead of only when the\nACPI core reported a failure to load the table.\n\nSo let\u0027s fix this, by omitting the kfree() on success.\n\nCc: \u003cstable@vger.kernel.org\u003e # v6.0\nLink: https://lore.kernel.org/all/a101a10a-4fbb-5fae-2e3c-76cf96ed8fbd@linux.intel.com/\nFixes: 3881ee0b1edc (\"efi: avoid efivars layer when loading SSDTs from variables\")\nReported-by: Amadeusz Sławiński \u003camadeuszx.slawinski@linux.intel.com\u003e\nSigned-off-by: Ard Biesheuvel \u003cardb@kernel.org\u003e\n" }, { "commit": "f57fb375a203e28bf7c08ca01d5ee72028b391d9", "tree": "b06887f5877fe1d602d1603cc33efba9bd965738", "parents": [ "9abf2313adc1ca1b6180c508c25f22f9395cc780" ], "author": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Mon Oct 17 12:48:46 2022 +0200" }, "committer": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Fri Oct 21 11:09:40 2022 +0200" }, "message": "efi: libstub: Remove zboot signing from build options\n\nThe zboot decompressor series introduced a feature to sign the PE/COFF\nkernel image for secure boot as part of the kernel build. This was\nnecessary because there are actually two images that need to be signed:\nthe kernel with the EFI stub attached, and the decompressor application.\n\nThis is a bit of a burden, because it means that the images must be\nsigned on the the same system that performs the build, and this is not\nrealistic for distros.\n\nDuring the next cycle, we will introduce changes to the zboot code so\nthat the inner image no longer needs to be signed. This means that the\nouter PE/COFF image can be handled as usual, and be signed later in the\nrelease process.\n\nLet\u0027s remove the associated Kconfig options now so that they don\u0027t end\nup in a LTS release while already being deprecated.\n\nSigned-off-by: Ard Biesheuvel \u003cardb@kernel.org\u003e\n" }, { "commit": "620bf9f981365c18cc2766c53d92bf8131c63f32", "tree": "ac29866b2cfd8a40b051ed79cbbd3b1fd3d2202d", "parents": [ "5566e68d829f5d87670d5984c1c2ccb4c518405f" ], "author": { "name": "Jerry Snitselaar", "email": "jsnitsel@redhat.com", "time": "Wed Oct 19 08:44:47 2022 +0800" }, "committer": { "name": "Joerg Roedel", "email": "jroedel@suse.de", "time": "Fri Oct 21 10:49:35 2022 +0200" }, "message": "iommu/vt-d: Clean up si_domain in the init_dmars() error path\n\nA splat from kmem_cache_destroy() was seen with a kernel prior to\ncommit ee2653bbe89d (\"iommu/vt-d: Remove domain and devinfo mempool\")\nwhen there was a failure in init_dmars(), because the iommu_domain\ncache still had objects. While the mempool code is now gone, there\nstill is a leak of the si_domain memory if init_dmars() fails. So\nclean up si_domain in the init_dmars() error path.\n\nCc: Lu Baolu \u003cbaolu.lu@linux.intel.com\u003e\nCc: Joerg Roedel \u003cjoro@8bytes.org\u003e\nCc: Will Deacon \u003cwill@kernel.org\u003e\nCc: Robin Murphy \u003crobin.murphy@arm.com\u003e\nFixes: 86080ccc223a (\"iommu/vt-d: Allocate si_domain in init_dmars()\")\nSigned-off-by: Jerry Snitselaar \u003cjsnitsel@redhat.com\u003e\nLink: https://lore.kernel.org/r/20221010144842.308890-1-jsnitsel@redhat.com\nSigned-off-by: Lu Baolu \u003cbaolu.lu@linux.intel.com\u003e\nSigned-off-by: Joerg Roedel \u003cjroedel@suse.de\u003e\n" }, { "commit": "5566e68d829f5d87670d5984c1c2ccb4c518405f", "tree": "4fc90ec9ca7910ef0fe796111f30f3863b61d23c", "parents": [ "bf638a6513dda3021e3e90bdacb71c606bd0c305" ], "author": { "name": "Charlotte Tan", "email": "charlotte@extrahop.com", "time": "Wed Oct 19 08:44:46 2022 +0800" }, "committer": { "name": "Joerg Roedel", "email": "jroedel@suse.de", "time": "Fri Oct 21 10:49:35 2022 +0200" }, "message": "iommu/vt-d: Allow NVS regions in arch_rmrr_sanity_check()\n\narch_rmrr_sanity_check() warns if the RMRR is not covered by an ACPI\nReserved region, but it seems like it should accept an NVS region as\nwell. The ACPI spec\nhttps://uefi.org/specs/ACPI/6.5/15_System_Address_Map_Interfaces.html\nuses similar wording for \"Reserved\" and \"NVS\" region types; for NVS\nregions it says \"This range of addresses is in use or reserved by the\nsystem and must not be used by the operating system.\"\n\nThere is an old comment on this mailing list that also suggests NVS\nregions should pass the arch_rmrr_sanity_check() test:\n\n The warnings come from arch_rmrr_sanity_check() since it checks whether\n the region is E820_TYPE_RESERVED. However, if the purpose of the check\n is to detect RMRR has regions that may be used by OS as free memory,\n isn\u0027t E820_TYPE_NVS safe, too?\n\nThis patch overlaps with another proposed patch that would add the region\ntype to the log since sometimes the bug reporter sees this log on the\nconsole but doesn\u0027t know to include the kernel log:\n\nhttps://lore.kernel.org/lkml/20220611204859.234975-3-atomlin@redhat.com/\n\nHere\u0027s an example of the \"Firmware Bug\" apparent false positive (wrapped\nfor line length):\n\n DMAR: [Firmware Bug]: No firmware reserved region can cover this RMRR\n [0x000000006f760000-0x000000006f762fff], contact BIOS vendor for\n fixes\n DMAR: [Firmware Bug]: Your BIOS is broken; bad RMRR\n [0x000000006f760000-0x000000006f762fff]\n\nThis is the snippet from the e820 table:\n\n BIOS-e820: [mem 0x0000000068bff000-0x000000006ebfefff] reserved\n BIOS-e820: [mem 0x000000006ebff000-0x000000006f9fefff] ACPI NVS\n BIOS-e820: [mem 0x000000006f9ff000-0x000000006fffefff] ACPI data\n\nFixes: f036c7fa0ab6 (\"iommu/vt-d: Check VT-d RMRR region in BIOS is reported as reserved\")\nCc: Will Mortensen \u003cwill@extrahop.com\u003e\nLink: https://lore.kernel.org/linux-iommu/64a5843d-850d-e58c-4fc2-0a0eeeb656dc@nec.com/\nLink: https://bugzilla.kernel.org/show_bug.cgi?id\u003d216443\nSigned-off-by: Charlotte Tan \u003ccharlotte@extrahop.com\u003e\nReviewed-by: Aaron Tomlin \u003catomlin@redhat.com\u003e\nLink: https://lore.kernel.org/r/20220929044449.32515-1-charlotte@extrahop.com\nSigned-off-by: Lu Baolu \u003cbaolu.lu@linux.intel.com\u003e\nSigned-off-by: Joerg Roedel \u003cjroedel@suse.de\u003e\n" }, { "commit": "bf638a6513dda3021e3e90bdacb71c606bd0c305", "tree": "71cbea98fd5acdd92eadfaaca82f12a752f688cd", "parents": [ "0251d0107cfb0bb5ab2d3f97710487b9522db020" ], "author": { "name": "Lu Baolu", "email": "baolu.lu@linux.intel.com", "time": "Wed Oct 19 08:44:45 2022 +0800" }, "committer": { "name": "Joerg Roedel", "email": "jroedel@suse.de", "time": "Fri Oct 21 10:49:34 2022 +0200" }, "message": "iommu/vt-d: Use rcu_lock in get_resv_regions\n\nCommit 5f64ce5411b46 (\"iommu/vt-d: Duplicate iommu_resv_region objects\nper device list\") converted rcu_lock in get_resv_regions to\ndmar_global_lock to allow sleeping in iommu_alloc_resv_region(). This\nintroduced possible recursive locking if get_resv_regions is called from\nwithin a section where intel_iommu_init() already holds dmar_global_lock.\n\nEspecially, after commit 57365a04c921 (\"iommu: Move bus setup to IOMMU\ndevice registration\"), below lockdep splats could always be seen.\n\n \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n WARNING: possible recursive locking detected\n 6.0.0-rc4+ #325 Tainted: G I\n --------------------------------------------\n swapper/0/1 is trying to acquire lock:\n ffffffffa8a18c90 (dmar_global_lock){++++}-{3:3}, at:\n intel_iommu_get_resv_regions+0x25/0x270\n\n but task is already holding lock:\n ffffffffa8a18c90 (dmar_global_lock){++++}-{3:3}, at:\n intel_iommu_init+0x36d/0x6ea\n\n ...\n\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x48/0x5f\n __lock_acquire.cold.73+0xad/0x2bb\n lock_acquire+0xc2/0x2e0\n ? intel_iommu_get_resv_regions+0x25/0x270\n ? lock_is_held_type+0x9d/0x110\n down_read+0x42/0x150\n ? intel_iommu_get_resv_regions+0x25/0x270\n intel_iommu_get_resv_regions+0x25/0x270\n iommu_create_device_direct_mappings.isra.28+0x8d/0x1c0\n ? iommu_get_dma_cookie+0x6d/0x90\n bus_iommu_probe+0x19f/0x2e0\n iommu_device_register+0xd4/0x130\n intel_iommu_init+0x3e1/0x6ea\n ? iommu_setup+0x289/0x289\n ? rdinit_setup+0x34/0x34\n pci_iommu_init+0x12/0x3a\n do_one_initcall+0x65/0x320\n ? rdinit_setup+0x34/0x34\n ? rcu_read_lock_sched_held+0x5a/0x80\n kernel_init_freeable+0x28a/0x2f3\n ? rest_init+0x1b0/0x1b0\n kernel_init+0x1a/0x130\n ret_from_fork+0x1f/0x30\n \u003c/TASK\u003e\n\nThis rolls back dmar_global_lock to rcu_lock in get_resv_regions to avoid\nthe lockdep splat.\n\nFixes: 57365a04c921 (\"iommu: Move bus setup to IOMMU device registration\")\nSigned-off-by: Lu Baolu \u003cbaolu.lu@linux.intel.com\u003e\nTested-by: Alex Williamson \u003calex.williamson@redhat.com\u003e\nLink: https://lore.kernel.org/r/20220927053109.4053662-3-baolu.lu@linux.intel.com\nSigned-off-by: Joerg Roedel \u003cjroedel@suse.de\u003e\n" }, { "commit": "0251d0107cfb0bb5ab2d3f97710487b9522db020", "tree": "d009578f582aed73a50f4083957dfb747f9287e1", "parents": [ "9abf2313adc1ca1b6180c508c25f22f9395cc780" ], "author": { "name": "Lu Baolu", "email": "baolu.lu@linux.intel.com", "time": "Wed Oct 19 08:44:44 2022 +0800" }, "committer": { "name": "Joerg Roedel", "email": "jroedel@suse.de", "time": "Fri Oct 21 10:49:32 2022 +0200" }, "message": "iommu: Add gfp parameter to iommu_alloc_resv_region\n\nAdd gfp parameter to iommu_alloc_resv_region() for the callers to specify\nthe memory allocation behavior. Thus iommu_alloc_resv_region() could also\nbe available in critical contexts.\n\nSigned-off-by: Lu Baolu \u003cbaolu.lu@linux.intel.com\u003e\nTested-by: Alex Williamson \u003calex.williamson@redhat.com\u003e\nLink: https://lore.kernel.org/r/20220927053109.4053662-2-baolu.lu@linux.intel.com\nSigned-off-by: Joerg Roedel \u003cjroedel@suse.de\u003e\n" }, { "commit": "97061d441110528dc02972818f2f1dad485107f9", "tree": "6192201818f25a50a4d262e80e500027da73db9b", "parents": [ "71e2d666ef85d51834d658830f823560c402b8b6" ], "author": { "name": "Alistair Popple", "email": "apopple@nvidia.com", "time": "Wed Oct 19 23:29:34 2022 +1100" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Oct 20 21:27:24 2022 -0700" }, "message": "nouveau: fix migrate_to_ram() for faulting page\n\nCommit 16ce101db85d (\"mm/memory.c: fix race when faulting a device private\npage\") changed the migrate_to_ram() callback to take a reference on the\ndevice page to ensure it can\u0027t be freed while handling the fault. \nUnfortunately the corresponding update to Nouveau to accommodate this\nchange was inadvertently dropped from that patch causing GPU to CPU\nmigration to fail so add it here.\n\nLink: https://lkml.kernel.org/r/20221019122934.866205-1-apopple@nvidia.com\nFixes: 16ce101db85d (\"mm/memory.c: fix race when faulting a device private page\")\nSigned-off-by: Alistair Popple \u003capopple@nvidia.com\u003e\nCc: John Hubbard \u003cjhubbard@nvidia.com\u003e\nCc: Ralph Campbell \u003crcampbell@nvidia.com\u003e\nCc: Lyude Paul \u003clyude@redhat.com\u003e\nCc: Ben Skeggs \u003cbskeggs@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "71e2d666ef85d51834d658830f823560c402b8b6", "tree": "f213841303524253b19e458490ab7417fe6b4b36", "parents": [ "612b8a317023e1396965aacac43d80053c6e77db" ], "author": { "name": "Mel Gorman", "email": "mgorman@techsingularity.net", "time": "Wed Oct 19 14:41:56 2022 +0100" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Oct 20 21:27:24 2022 -0700" }, "message": "mm/huge_memory: do not clobber swp_entry_t during THP split\n\nThe following has been observed when running stressng mmap since commit\nb653db77350c (\"mm: Clear page-\u003eprivate when splitting or migrating a page\")\n\n watchdog: BUG: soft lockup - CPU#75 stuck for 26s! [stress-ng:9546]\n CPU: 75 PID: 9546 Comm: stress-ng Tainted: G E 6.0.0-revert-b653db77-fix+ #29 0357d79b60fb09775f678e4f3f64ef0579ad1374\n Hardware name: SGI.COM C2112-4GP3/X10DRT-P-Series, BIOS 2.0a 05/09/2016\n RIP: 0010:xas_descend+0x28/0x80\n Code: cc cc 0f b6 0e 48 8b 57 08 48 d3 ea 83 e2 3f 89 d0 48 83 c0 04 48 8b 44 c6 08 48 89 77 18 48 89 c1 83 e1 03 48 83 f9 02 75 08 \u003c48\u003e 3d fd 00 00 00 76 08 88 57 12 c3 cc cc cc cc 48 c1 e8 02 89 c2\n RSP: 0018:ffffbbf02a2236a8 EFLAGS: 00000246\n RAX: ffff9cab7d6a0002 RBX: ffffe04b0af88040 RCX: 0000000000000002\n RDX: 0000000000000030 RSI: ffff9cab60509b60 RDI: ffffbbf02a2236c0\n RBP: 0000000000000000 R08: ffff9cab60509b60 R09: ffffbbf02a2236c0\n R10: 0000000000000001 R11: ffffbbf02a223698 R12: 0000000000000000\n R13: ffff9cab4e28da80 R14: 0000000000039c01 R15: ffff9cab4e28da88\n FS: 00007fab89b85e40(0000) GS:ffff9cea3fcc0000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00007fab84e00000 CR3: 00000040b73a4003 CR4: 00000000003706e0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n Call Trace:\n \u003cTASK\u003e\n xas_load+0x3a/0x50\n __filemap_get_folio+0x80/0x370\n ? put_swap_page+0x163/0x360\n pagecache_get_page+0x13/0x90\n __try_to_reclaim_swap+0x50/0x190\n scan_swap_map_slots+0x31e/0x670\n get_swap_pages+0x226/0x3c0\n folio_alloc_swap+0x1cc/0x240\n add_to_swap+0x14/0x70\n shrink_page_list+0x968/0xbc0\n reclaim_page_list+0x70/0xf0\n reclaim_pages+0xdd/0x120\n madvise_cold_or_pageout_pte_range+0x814/0xf30\n walk_pgd_range+0x637/0xa30\n __walk_page_range+0x142/0x170\n walk_page_range+0x146/0x170\n madvise_pageout+0xb7/0x280\n ? asm_common_interrupt+0x22/0x40\n madvise_vma_behavior+0x3b7/0xac0\n ? find_vma+0x4a/0x70\n ? find_vma+0x64/0x70\n ? madvise_vma_anon_name+0x40/0x40\n madvise_walk_vmas+0xa6/0x130\n do_madvise+0x2f4/0x360\n __x64_sys_madvise+0x26/0x30\n do_syscall_64+0x5b/0x80\n ? do_syscall_64+0x67/0x80\n ? syscall_exit_to_user_mode+0x17/0x40\n ? do_syscall_64+0x67/0x80\n ? syscall_exit_to_user_mode+0x17/0x40\n ? do_syscall_64+0x67/0x80\n ? do_syscall_64+0x67/0x80\n ? common_interrupt+0x8b/0xa0\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nThe problem can be reproduced with the mmtests config\nconfig-workload-stressng-mmap. It does not always happen and when it\ntriggers is variable but it has happened on multiple machines.\n\nThe intent of commit b653db77350c patch was to avoid the case where\nPG_private is clear but folio-\u003eprivate is not-NULL. However, THP tail\npages uses page-\u003eprivate for \"swp_entry_t if folio_test_swapcache()\" as\nstated in the documentation for struct folio. This patch only clobbers\npage-\u003eprivate for tail pages if the head page was not in swapcache and\nwarns once if page-\u003eprivate had an unexpected value.\n\nLink: https://lkml.kernel.org/r/20221019134156.zjyyn5aownakvztf@techsingularity.net\nFixes: b653db77350c (\"mm: Clear page-\u003eprivate when splitting or migrating a page\")\nSigned-off-by: Mel Gorman \u003cmgorman@techsingularity.net\u003e\nCc: Matthew Wilcox (Oracle) \u003cwilly@infradead.org\u003e\nCc: Mel Gorman \u003cmgorman@techsingularity.net\u003e\nCc: Yang Shi \u003cshy828301@gmail.com\u003e\nCc: Brian Foster \u003cbfoster@redhat.com\u003e\nCc: Dan Streetman \u003cddstreet@ieee.org\u003e\nCc: Miaohe Lin \u003clinmiaohe@huawei.com\u003e\nCc: Oleksandr Natalenko \u003coleksandr@natalenko.name\u003e\nCc: Seth Jennings \u003csjenning@redhat.com\u003e\nCc: Vitaly Wool \u003cvitaly.wool@konsulko.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "612b8a317023e1396965aacac43d80053c6e77db", "tree": "6009fbe6327fcd61f17138200213ae696a4fe965", "parents": [ "df48a5f7a3bbac6a700026b554922943ecee1fb0" ], "author": { "name": "Mike Kravetz", "email": "mike.kravetz@oracle.com", "time": "Wed Oct 19 13:19:57 2022 -0700" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Oct 20 21:27:23 2022 -0700" }, "message": "hugetlb: fix memory leak associated with vma_lock structure\n\nThe hugetlb vma_lock structure hangs off the vm_private_data pointer of\nsharable hugetlb vmas. The structure is vma specific and can not be\nshared between vmas. At fork and various other times, vmas are duplicated\nvia vm_area_dup(). When this happens, the pointer in the newly created\nvma must be cleared and the structure reallocated. Two hugetlb specific\nroutines deal with this hugetlb_dup_vma_private and hugetlb_vm_op_open. \nBoth routines are called for newly created vmas. hugetlb_dup_vma_private\nwould always clear the pointer and hugetlb_vm_op_open would allocate the\nnew vms_lock structure. This did not work in the case of this calling\nsequence pointed out in [1].\n\n move_vma\n copy_vma\n new_vma \u003d vm_area_dup(vma);\n new_vma-\u003evm_ops-\u003eopen(new_vma); --\u003e new_vma has its own vma lock.\n is_vm_hugetlb_page(vma)\n clear_vma_resv_huge_pages\n hugetlb_dup_vma_private --\u003e vma-\u003evm_private_data is set to NULL\n\nWhen clearing hugetlb_dup_vma_private we actually leak the associated\nvma_lock structure.\n\nThe vma_lock structure contains a pointer to the associated vma. This\ninformation can be used in hugetlb_dup_vma_private and hugetlb_vm_op_open\nto ensure we only clear the vm_private_data of newly created (copied)\nvmas. In such cases, the vma-\u003evma_lock-\u003evma field will not point to the\nvma.\n\nUpdate hugetlb_dup_vma_private and hugetlb_vm_op_open to not clear\nvm_private_data if vma-\u003evma_lock-\u003evma \u003d\u003d vma. Also, log a warning if\nhugetlb_vm_op_open ever encounters the case where vma_lock has already\nbeen correctly allocated for the vma.\n\n[1] https://lore.kernel.org/linux-mm/5154292a-4c55-28cd-0935-82441e512fc3@huawei.com/\n\nLink: https://lkml.kernel.org/r/20221019201957.34607-1-mike.kravetz@oracle.com\nFixes: 131a79b474e9 (\"hugetlb: fix vma lock handling during split vma and range unmapping\")\nSigned-off-by: Mike Kravetz \u003cmike.kravetz@oracle.com\u003e\nReviewed-by: Miaohe Lin \u003clinmiaohe@huawei.com\u003e\nCc: Andrea Arcangeli \u003caarcange@redhat.com\u003e\nCc: \"Aneesh Kumar K.V\" \u003caneesh.kumar@linux.vnet.ibm.com\u003e\nCc: Axel Rasmussen \u003caxelrasmussen@google.com\u003e\nCc: David Hildenbrand \u003cdavid@redhat.com\u003e\nCc: Davidlohr Bueso \u003cdave@stgolabs.net\u003e\nCc: James Houghton \u003cjthoughton@google.com\u003e\nCc: \"Kirill A. Shutemov\" \u003ckirill.shutemov@linux.intel.com\u003e\nCc: Michal Hocko \u003cmhocko@suse.com\u003e\nCc: Mina Almasry \u003calmasrymina@google.com\u003e\nCc: Muchun Song \u003csongmuchun@bytedance.com\u003e\nCc: Naoya Horiguchi \u003cnaoya.horiguchi@linux.dev\u003e\nCc: Pasha Tatashin \u003cpasha.tatashin@soleen.com\u003e\nCc: Peter Xu \u003cpeterx@redhat.com\u003e\nCc: Prakash Sangappa \u003cprakash.sangappa@oracle.com\u003e\nCc: Sven Schnelle \u003csvens@linux.ibm.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "df48a5f7a3bbac6a700026b554922943ecee1fb0", "tree": "d210bb01c9e8cdf4070ca9d3b61db8830c966349", "parents": [ "08ac85521cb2e26f25b885492180815ce8eaf4b7" ], "author": { "name": "Liam R. Howlett", "email": "Liam.Howlett@Oracle.com", "time": "Tue May 31 09:20:51 2022 -0400" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Oct 20 21:27:23 2022 -0700" }, "message": "mm/page_alloc: reduce potential fragmentation in make_alloc_exact()\n\nTry to avoid using the left over split page on the next request for a page\nby calling __free_pages_ok() with FPI_TO_TAIL. This increases the\npotential of defragmenting memory when it\u0027s used for a short period of\ntime.\n\nLink: https://lkml.kernel.org/r/20220531185626.yvlmymbxyoe5vags@revolver\nSigned-off-by: Liam R. Howlett \u003cLiam.Howlett@oracle.com\u003e\nSuggested-by: Matthew Wilcox (Oracle) \u003cwilly@infradead.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "08ac85521cb2e26f25b885492180815ce8eaf4b7", "tree": "72275d36947628e0e1c6e207ac5353466f564d04", "parents": [ "12df140f0bdfae5dcfc81800970dd7f6f632e00c" ], "author": { "name": "Hugh Dickins", "email": "hughd@google.com", "time": "Tue Oct 18 20:18:38 2022 -0700" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Oct 20 21:27:23 2022 -0700" }, "message": "mm: /proc/pid/smaps_rollup: fix maple tree search\n\n/proc/pid/smaps_rollup showed 0 kB for everything: now find first vma.\n\nLink: https://lkml.kernel.org/r/3011bee7-182-97a2-1083-d5f5b688e54b@google.com\nFixes: c4c84f06285e (\"fs/proc/task_mmu: stop using linked list and highest_vm_end\")\nSigned-off-by: Hugh Dickins \u003chughd@google.com\u003e\nReviewed-by: Liam R. Howlett \u003cLiam.Howlett@oracle.com\u003e\nCc: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nCc: Matthew Wilcox (Oracle) \u003cwilly@infradead.org\u003e\nCc: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "12df140f0bdfae5dcfc81800970dd7f6f632e00c", "tree": "4f01975b2e74e627bd9bdba5863b2f97622504c5", "parents": [ "a57b70519d1f7c53be98478623652738e5ac70d5" ], "author": { "name": "Rik van Riel", "email": "riel@surriel.com", "time": "Mon Oct 17 20:25:05 2022 -0400" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Oct 20 21:27:23 2022 -0700" }, "message": "mm,hugetlb: take hugetlb_lock before decrementing h-\u003eresv_huge_pages\n\nThe h-\u003e*_huge_pages counters are protected by the hugetlb_lock, but\nalloc_huge_page has a corner case where it can decrement the counter\noutside of the lock.\n\nThis could lead to a corrupted value of h-\u003eresv_huge_pages, which we have\nobserved on our systems.\n\nTake the hugetlb_lock before decrementing h-\u003eresv_huge_pages to avoid a\npotential race.\n\nLink: https://lkml.kernel.org/r/20221017202505.0e6a4fcd@imladris.surriel.com\nFixes: a88c76954804 (\"mm: hugetlb: fix hugepage memory leak caused by wrong reserve count\")\nSigned-off-by: Rik van Riel \u003criel@surriel.com\u003e\nReviewed-by: Mike Kravetz \u003cmike.kravetz@oracle.com\u003e\nCc: Naoya Horiguchi \u003cn-horiguchi@ah.jp.nec.com\u003e\nCc: Glen McCready \u003cgkmccready@meta.com\u003e\nCc: Mike Kravetz \u003cmike.kravetz@oracle.com\u003e\nCc: Muchun Song \u003csongmuchun@bytedance.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "a57b70519d1f7c53be98478623652738e5ac70d5", "tree": "625e504bf350f9a976ed21978855ca851cb349ff", "parents": [ "1cd916d0340d0f45b151599c24ec40b5b2fd8e4a" ], "author": { "name": "Liam Howlett", "email": "liam.howlett@oracle.com", "time": "Tue Oct 18 19:17:12 2022 +0000" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Oct 20 21:27:23 2022 -0700" }, "message": "mm/mmap: fix MAP_FIXED address return on VMA merge\n\nmmap should return the start address of newly mapped area when successful.\nOn a successful merge of a VMA, the return address was changed and thus\nwas violating that expectation from userspace.\n\nThis is a restoration of functionality provided by 309d08d9b3a3\n(mm/mmap.c: fix mmap return value when vma is merged after call_mmap()). \nFor completeness of fixing MAP_FIXED, implement the comments from the\nprevious discussion to never update the address and fail if the address\nchanges. Leaving the error as a WARN_ON() to avoid crashing the kernel.\n\nLink: https://lkml.kernel.org/r/20221018191613.4133459-1-Liam.Howlett@oracle.com\nLink: https://lore.kernel.org/all/Y06yk66SKxlrwwfb@lakrids/\nLink: https://lore.kernel.org/all/20201203085350.22624-1-liuzixian4@huawei.com/\nFixes: 4dd1b84140c1 (\"mm/mmap: use advanced maple tree API for mmap_region()\")\nSigned-off-by: Liam R. Howlett \u003cLiam.Howlett@oracle.com\u003e\nReported-by: Mark Rutland \u003cmark.rutland@arm.com\u003e\nCc: Liu Zixian \u003cliuzixian4@huawei.com\u003e\nCc: David Hildenbrand \u003cdavid@redhat.com\u003e\nCc: Jason Gunthorpe \u003cjgg@nvidia.com\u003e\nCc: Matthew Wilcox \u003cwilly@infradead.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "1cd916d0340d0f45b151599c24ec40b5b2fd8e4a", "tree": "a17ce4b989ec61dcff82dc09885a80c255cadc21", "parents": [ "5789151e48acc3fd34d2109bf2021dc4df5e33e9" ], "author": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Tue Oct 18 13:57:37 2022 -0700" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Oct 20 21:27:23 2022 -0700" }, "message": "mm/mmap.c: __vma_adjust(): suppress uninitialized var warning\n\nThe code is OK, but it fools gcc.\n\nmm/mmap.c:802 __vma_adjust() error: uninitialized symbol \u0027next_next\u0027.\n\nFixes: 524e00b36e8c5 (\"mm: remove rb tree.\")\nReported-by: kernel test robot \u003clkp@intel.com\u003e\nCc: Liam R. Howlett \u003cLiam.Howlett@Oracle.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "5789151e48acc3fd34d2109bf2021dc4df5e33e9", "tree": "e2d09b2ac8beca11692a13ef1c7a9e925efab146", "parents": [ "eacf96d23f23e5bfd175be07048246efd0be4cc6" ], "author": { "name": "Mike Kravetz", "email": "mike.kravetz@oracle.com", "time": "Mon Oct 17 19:49:45 2022 -0700" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Oct 20 21:27:22 2022 -0700" }, "message": "mm/mmap: undo -\u003emmap() when mas_preallocate() fails\n\nA memory leak in hugetlb_reserve_pages was reported in [1]. The root\ncause was traced to an error path in mmap_region when mas_preallocate()\nfails. In this case, the vma is freed after a successful call to\nfilesystem specific mmap. The hugetlbfs mmap routine may allocate data\nstructures pointed to by m_private_data. These need to be cleaned up by\nthe hugetlb vm_ops-\u003eclose() routine.\n\nThe same issue was addressed by commit deb0f6562884 (\"mm/mmap: undo\n-\u003emmap() when arch_validate_flags() fails\") for the arch_validate_flags()\ntest. Go to the same close_and_free_vma label if mas_preallocate() fails.\n\n[1] https://lore.kernel.org/linux-mm/CAKXUXMxf7OiCwbxib7MwfR4M1b5+b3cNTU7n5NV9Zm4967\u003dFPQ@mail.gmail.com/\n\nLink: https://lkml.kernel.org/r/20221018024945.415036-1-mike.kravetz@oracle.com\nFixes: d4af56c5c7c6 (\"mm: start tracking VMAs with maple tree\")\nSigned-off-by: Mike Kravetz \u003cmike.kravetz@oracle.com\u003e\nReported-by: Lukas Bulwahn \u003clukas.bulwahn@gmail.com\u003e\nReviewed-by: Liam R. Howlett \u003cLiam.Howlett@oracle.com\u003e\nCc: Andrii Nakryiko \u003candrii@kernel.org\u003e\nCc: Carlos Llamas \u003ccmllamas@google.com\u003e\nCc: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nCc: Muchun Song \u003csongmuchun@bytedance.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "eacf96d23f23e5bfd175be07048246efd0be4cc6", "tree": "59a5cc6e13891f12c19eb34bf95bacea9a01500b", "parents": [ "28f4821b1b53e0649706912e810c6c232fc506f9" ], "author": { "name": "Colin Ian King", "email": "colin.i.king@gmail.com", "time": "Fri Oct 07 21:43:39 2022 +0100" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Oct 20 21:27:22 2022 -0700" }, "message": "init: Kconfig: fix spelling mistake \"satify\" -\u003e \"satisfy\"\n\nThere is a spelling mistake in a Kconfig description. Fix it.\n\nLink: https://lkml.kernel.org/r/20221007204339.2757753-1-colin.i.king@gmail.com\nSigned-off-by: Colin Ian King \u003ccolin.i.king@gmail.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "28f4821b1b53e0649706912e810c6c232fc506f9", "tree": "690c8db824575a59ad93cbb29e5e3d40b4a1490c", "parents": [ "759a7c6126eef5635506453e9b9d55a6a3ac2084" ], "author": { "name": "Joseph Qi", "email": "joseph.qi@linux.alibaba.com", "time": "Mon Oct 17 21:02:27 2022 +0800" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Oct 20 21:27:22 2022 -0700" }, "message": "ocfs2: clear dinode links count in case of error\n\nIn ocfs2_mknod(), if error occurs after dinode successfully allocated,\nocfs2 i_links_count will not be 0.\n\nSo even though we clear inode i_nlink before iput in error handling, it\nstill won\u0027t wipe inode since we\u0027ll refresh inode from dinode during inode\nlock. So just like clear inode i_nlink, we clear ocfs2 i_links_count as\nwell. Also do the same change for ocfs2_symlink().\n\nLink: https://lkml.kernel.org/r/20221017130227.234480-2-joseph.qi@linux.alibaba.com\nSigned-off-by: Joseph Qi \u003cjoseph.qi@linux.alibaba.com\u003e\nReported-by: Yan Wang \u003cwangyan122@huawei.com\u003e\nCc: Mark Fasheh \u003cmark@fasheh.com\u003e\nCc: Joel Becker \u003cjlbec@evilplan.org\u003e\nCc: Junxiao Bi \u003cjunxiao.bi@oracle.com\u003e\nCc: Changwei Ge \u003cgechangwei@live.cn\u003e\nCc: Gang He \u003cghe@suse.com\u003e\nCc: Jun Piao \u003cpiaojun@huawei.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "759a7c6126eef5635506453e9b9d55a6a3ac2084", "tree": "7fc5a0aaa2a7a884623644b0dcb705f0483e4a79", "parents": [ "977ef30a7d888eeb52fb6908f99080f33e5309a8" ], "author": { "name": "Joseph Qi", "email": "joseph.qi@linux.alibaba.com", "time": "Mon Oct 17 21:02:26 2022 +0800" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Oct 20 21:27:22 2022 -0700" }, "message": "ocfs2: fix BUG when iput after ocfs2_mknod fails\n\nCommit b1529a41f777 \"ocfs2: should reclaim the inode if\n\u0027__ocfs2_mknod_locked\u0027 returns an error\" tried to reclaim the claimed\ninode if __ocfs2_mknod_locked() fails later. But this introduce a race,\nthe freed bit may be reused immediately by another thread, which will\nupdate dinode, e.g. i_generation. Then iput this inode will lead to BUG:\ninode-\u003ei_generation !\u003d le32_to_cpu(fe-\u003ei_generation)\n\nWe could make this inode as bad, but we did want to do operations like\nwipe in some cases. Since the claimed inode bit can only affect that an\ndinode is missing and will return back after fsck, it seems not a big\nproblem. So just leave it as is by revert the reclaim logic.\n\nLink: https://lkml.kernel.org/r/20221017130227.234480-1-joseph.qi@linux.alibaba.com\nFixes: b1529a41f777 (\"ocfs2: should reclaim the inode if \u0027__ocfs2_mknod_locked\u0027 returns an error\")\nSigned-off-by: Joseph Qi \u003cjoseph.qi@linux.alibaba.com\u003e\nReported-by: Yan Wang \u003cwangyan122@huawei.com\u003e\nCc: Mark Fasheh \u003cmark@fasheh.com\u003e\nCc: Joel Becker \u003cjlbec@evilplan.org\u003e\nCc: Junxiao Bi \u003cjunxiao.bi@oracle.com\u003e\nCc: Changwei Ge \u003cgechangwei@live.cn\u003e\nCc: Gang He \u003cghe@suse.com\u003e\nCc: Jun Piao \u003cpiaojun@huawei.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "977ef30a7d888eeb52fb6908f99080f33e5309a8", "tree": "f0962f42a84a64fda7917344e3b347af74750042", "parents": [ "4249a05ff670e7b1aeea77f1a5451080ea86c88d" ], "author": { "name": "Martin Liska", "email": "mliska@suse.cz", "time": "Thu Oct 13 09:40:59 2022 +0200" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Oct 20 21:27:22 2022 -0700" }, "message": "gcov: support GCC 12.1 and newer compilers\n\nStarting with GCC 12.1, the created .gcda format can\u0027t be read by gcov\ntool. There are 2 significant changes to the .gcda file format that\nneed to be supported:\n\na) [gcov: Use system IO buffering]\n (23eb66d1d46a34cb28c4acbdf8a1deb80a7c5a05) changed that all sizes in\n the format are in bytes and not in words (4B)\n\nb) [gcov: make profile merging smarter]\n (72e0c742bd01f8e7e6dcca64042b9ad7e75979de) add a new checksum to the\n file header.\n\nTested with GCC 7.5, 10.4, 12.2 and the current master.\n\nLink: https://lkml.kernel.org/r/624bda92-f307-30e9-9aaa-8cc678b2dfb2@suse.cz\nSigned-off-by: Martin Liska \u003cmliska@suse.cz\u003e\nTested-by: Peter Oberparleiter \u003coberpar@linux.ibm.com\u003e\nReviewed-by: Peter Oberparleiter \u003coberpar@linux.ibm.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "4249a05ff670e7b1aeea77f1a5451080ea86c88d", "tree": "b8a5f83ae93d34f55c4a3119b5d8612691b09705", "parents": [ "7329e3ebe3594b425955ab591ecea335e85842c2" ], "author": { "name": "Alexey Romanov", "email": "avromanov@sberdevices.ru", "time": "Thu Oct 13 14:28:25 2022 +0300" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Oct 20 21:27:21 2022 -0700" }, "message": "zsmalloc: zs_destroy_pool: add size_class NULL check\n\nInside the zs_destroy_pool() function, there can still be NULL size_class\npointers: if when the next size_class is allocated, inside\nzs_create_pool() function, kzalloc will return NULL and handling the error\ncondition, zs_create_pool() will call zs_destroy_pool().\n\nLink: https://lkml.kernel.org/r/20221013112825.61869-1-avromanov@sberdevices.ru\nFixes: f24263a5a076 (\"zsmalloc: remove unnecessary size_class NULL check\")\nSigned-off-by: Alexey Romanov \u003cavromanov@sberdevices.ru\u003e\nReviewed-by: Sergey Senozhatsky \u003csenozhatsky@chromium.org\u003e\nCc: Minchan Kim \u003cminchan@kernel.org\u003e\nCc: Nitin Gupta \u003cngupta@vflare.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "7329e3ebe3594b425955ab591ecea335e85842c2", "tree": "38b72459b233ace549fe1a9940cf145faa632606", "parents": [ "cef408e70e9b0c175a874b9d9fe6acc7e12f569f" ], "author": { "name": "Liam Howlett", "email": "liam.howlett@oracle.com", "time": "Sat Oct 15 02:12:33 2022 +0000" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Oct 20 21:27:21 2022 -0700" }, "message": "mm/mempolicy: fix mbind_range() arguments to vma_merge()\n\nFuzzing produced an invalid argument to vma_merge() which was caught by\nthe newly added verification of the number of VMAs being removed on\nprocess exit. Analyzing the failure eventually resulted in finding an\nissue with the search of a VMA that started at address 0, which caused an\nunderflow and thus the loss of many VMAs being tracked in the tree. Fix\nthe underflow by changing the search of the maple tree to use the start\naddress directly.\n\nLink: https://lkml.kernel.org/r/20221015021135.2816178-1-Liam.Howlett@oracle.com\nFixes: 66850be55e8e (\"mm/mempolicy: use vma iterator \u0026 maple state instead of vma linked list\")\nSigned-off-by: Liam R. Howlett \u003cLiam.Howlett@oracle.com\u003e\nReported-by: kernel test robot \u003coliver.sang@intel.com\u003e\n Link: https://lore.kernel.org/r/202210052318.5ad10912-oliver.sang@intel.com\nCc: Yu Zhao \u003cyuzhao@google.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "cef408e70e9b0c175a874b9d9fe6acc7e12f569f", "tree": "f3e13b4ea7f27378a0ed64ebc05c20b6edaa1c9f", "parents": [ "5ad15f1b32f4a9cb7653b5ab1eccf285b4045007" ], "author": { "name": "Qais Yousef", "email": "qyousef@layalina.io", "time": "Fri Oct 14 15:10:16 2022 +0100" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Oct 20 21:27:21 2022 -0700" }, "message": "mailmap: update email for Qais Yousef\n\nUpdate my email address for old entry and add a new entry for my\ncontribution while working with arm to continue support that work.\n\nLink: https://lkml.kernel.org/r/20221014141016.539625-1-qyousef@layalina.io\nSigned-off-by: Qais Yousef \u003cqyousef@layalina.io\u003e\nAcked-by: Qais Yousef \u003cqais.yousef@arm.com\u003e\nAcked-by: Qais Yousef \u003cqsyousef@gmail.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "5ad15f1b32f4a9cb7653b5ab1eccf285b4045007", "tree": "726a4aae886ced7dfa40ee38f746afe2956c678e", "parents": [ "8048b8358031ae742c1c8f16f196f6d8070bb09f" ], "author": { "name": "Dan Carpenter", "email": "dan.carpenter@oracle.com", "time": "Wed Oct 12 16:19:39 2022 +0300" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Oct 20 21:27:21 2022 -0700" }, "message": "mailmap: update Dan Carpenter\u0027s email address\n\nMy time at Oracle is ending at the end of the month. Update my email\naddress accordingly.\n\nLink: https://lkml.kernel.org/r/Y0a+6+5SHMdvUnpg@kili\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nCc: Joe Perches \u003cjoe@perches.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "e35184f321518acadb681928a016da21a9a20c13", "tree": "f4dc9b0bdeb4879ab21ce69d451e416c23e267d6", "parents": [ "6d36c728bc2e2d632f4b0dea00df5532e20dfdab", "cbc543c59e8e7c8bc8604d6ac3e18a029e3d5118" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 20 18:28:32 2022 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 20 18:28:32 2022 -0700" }, "message": "Merge tag \u0027drm-fixes-2022-10-21\u0027 of git://anongit.freedesktop.org/drm/drm\n\nPull drm fixes from Dave Airlie:\n \"Usual fixes for the week.\n\n The amdgpu contains fixes for two regressions, one reported in\n response to rc1 which broke on SI GPUs, and one gfx9 APU regression.\n\n Otherwise it\u0027s mostly fixes for new IP, and some GPU reset fixes. vc4\n is just HDMI fixes, and panfrost has some mnor types fixes.\n\n Core:\n - fix connector DDC pointer\n - fix buffer overflow in format_helper_test\n\n amdgpu:\n - Mode2 reset fixes for Sienna Cichlid\n - Revert broken fan speed sensor fix\n - SMU 13.x fixes\n - GC 11.x fixes\n - RAS fixes\n - SR-IOV fixes\n - Fix BO move breakage on SI\n - Misc compiler fixes\n - Fix gfx9 APU regression caused by PCI AER fix\n\n vc4:\n - HDMI fixes\n\n panfrost:\n - compiler fixes\"\n\n* tag \u0027drm-fixes-2022-10-21\u0027 of git://anongit.freedesktop.org/drm/drm: (35 commits)\n drm/amdgpu: fix sdma doorbell init ordering on APUs\n drm/panfrost: replace endian-specific types with native ones\n drm/panfrost: Remove type name from internal structs\n drm/connector: Set DDC pointer in drmm_connector_init\n drm: tests: Fix a buffer overflow in format_helper_test\n drm/amdgpu: use DRM_SCHED_FENCE_DONT_PIPELINE for VM updates\n drm/sched: add DRM_SCHED_FENCE_DONT_PIPELINE flag\n drm/amdgpu: Fix for BO move issue\n drm/amdgpu: dequeue mes scheduler during fini\n drm/amd/pm: enable thermal alert on smu_v13_0_10\n drm/amdgpu: Program GC registers through RLCG interface in gfx_v11/gmc_v11\n drm/amdkfd: Fix type of reset_type parameter in hqd_destroy() callback\n drm/amd/display: Increase frame size limit for display_mode_vba_util_32.o\n drm/amd/pm: add SMU IP v13.0.4 IF version define to V7\n drm/amd/pm: update SMU IP v13.0.4 driver interface version\n drm/amd/pm: Init pm_attr_list when dpm is disabled\n drm/amd/pm: disable cstate feature for gpu reset scenario\n drm/amd/pm: fulfill SMU13.0.7 cstate control interface\n drm/amd/pm: fulfill SMU13.0.0 cstate control interface\n drm/amdgpu: Add sriov vf ras support in amdgpu_ras_asic_supported\n ...\n" }, { "commit": "6d36c728bc2e2d632f4b0dea00df5532e20dfdab", "tree": "96046e69448fdf16dfe14b1428c36e9014f07c2a", "parents": [ "c7b006525bb0673f2373f04b5b8263b022ff367b", "7f378c03aa4952507521174fb0da7b24a9ad0be6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 20 17:24:59 2022 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 20 17:24:59 2022 -0700" }, "message": "Merge tag \u0027net-6.1-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net\n\nPull networking fixes from Paolo Abeni:\n \"Including fixes from netfilter.\n\n Current release - regressions:\n\n - revert \"net: fix cpu_max_bits_warn() usage in\n netif_attrmask_next{,_and}\"\n\n - revert \"net: sched: fq_codel: remove redundant resource cleanup in\n fq_codel_init()\"\n\n - dsa: uninitialized variable in dsa_slave_netdevice_event()\n\n - eth: sunhme: uninitialized variable in happy_meal_init()\n\n Current release - new code bugs:\n\n - eth: octeontx2: fix resource not freed after malloc\n\n Previous releases - regressions:\n\n - sched: fix return value of qdisc ingress handling on success\n\n - sched: fix race condition in qdisc_graft()\n\n - udp: update reuse-\u003ehas_conns under reuseport_lock.\n\n - tls: strp: make sure the TCP skbs do not have overlapping data\n\n - hsr: avoid possible NULL deref in skb_clone()\n\n - tipc: fix an information leak in tipc_topsrv_kern_subscr\n\n - phylink: add mac_managed_pm in phylink_config structure\n\n - eth: i40e: fix DMA mappings leak\n\n - eth: hyperv: fix a RX-path warning\n\n - eth: mtk: fix memory leaks\n\n Previous releases - always broken:\n\n - sched: cake: fix null pointer access issue when cake_init() fails\"\n\n* tag \u0027net-6.1-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net: (43 commits)\n net: phy: dp83822: disable MDI crossover status change interrupt\n net: sched: fix race condition in qdisc_graft()\n net: hns: fix possible memory leak in hnae_ae_register()\n wwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new()\n sfc: include vport_id in filter spec hash and equal()\n genetlink: fix kdoc warnings\n selftests: add selftest for chaining of tc ingress handling to egress\n net: Fix return value of qdisc ingress handling on success\n net: sched: sfb: fix null pointer access issue when sfb_init() fails\n Revert \"net: sched: fq_codel: remove redundant resource cleanup in fq_codel_init()\"\n net: sched: cake: fix null pointer access issue when cake_init() fails\n ethernet: marvell: octeontx2 Fix resource not freed after malloc\n netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements\n netfilter: rpfilter/fib: Set -\u003eflowic_uid correctly for user namespaces.\n ionic: catch NULL pointer issue on reconfig\n net: hsr: avoid possible NULL deref in skb_clone()\n bnxt_en: fix memory leak in bnxt_nvm_test()\n ip6mr: fix UAF issue in ip6mr_sk_done() when addrconf_init_net() failed\n udp: Update reuse-\u003ehas_conns under reuseport_lock.\n net: ethernet: mediatek: ppe: Remove the unused function mtk_foe_entry_usable()\n ...\n" }, { "commit": "c7b006525bb0673f2373f04b5b8263b022ff367b", "tree": "0dba29e5d715142883950713050430a5de059b0e", "parents": [ "a3ccea6ed80db39e8aaed22d896099be477e1f85", "2ce3a0bf2010b16c78b78cc35a97fa913f1be0ca" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 20 17:07:54 2022 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 20 17:07:54 2022 -0700" }, "message": "Merge tag \u0027ata-6.1-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/dlemoal/libata\n\nPull ata fixes from Damien Le Moal:\n \"Several minor fixes:\n\n - Fix the module alias for the ahci_imx driver to get autoloading to\n work (Alexander)\n\n - Fix a potential array-index-out-of-bounds problem with the\n enclosure managment support in the ahci driver (Kai-Heng)\n\n - Several patches to fix compilation warnings thrown by clang in the\n ahci_st, sata_rcar, ahci_brcm, ahci_xgene, ahci_imx and ahci_qoriq\n drivers (me)\"\n\n* tag \u0027ata-6.1-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/dlemoal/libata:\n ata: ahci_qoriq: Fix compilation warning\n ata: ahci_imx: Fix compilation warning\n ata: ahci_xgene: Fix compilation warning\n ata: ahci_brcm: Fix compilation warning\n ata: sata_rcar: Fix compilation warning\n ata: ahci_st: Fix compilation warning\n ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS\n ata: ahci-imx: Fix MODULE_ALIAS\n" }, { "commit": "a3ccea6ed80db39e8aaed22d896099be477e1f85", "tree": "b8078a6e9431fa5c665765360064360c435177a4", "parents": [ "aae703b02f92bde9264366c545e87cec451de471", "5434ee8d28575b2e784bd5b4dbfc912e5da90759" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 20 17:00:54 2022 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 20 17:00:54 2022 -0700" }, "message": "Merge tag \u0027for-6.1/dm-changes-v2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm\n\nPull device mapper updates from Mike Snitzer:\n\n - Fix dm-bufio to use test_bit_acquire to properly test_bit on arches\n with weaker memory ordering.\n\n - DM core replace DMWARN with DMERR or DMCRIT for fatal errors.\n\n - Enable WQ_HIGHPRI on DM verity target\u0027s verify_wq.\n\n - Add documentation for DM verity\u0027s try_verify_in_tasklet option.\n\n - Various typo and redundant word fixes in code and/or comments.\n\n* tag \u0027for-6.1/dm-changes-v2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm:\n dm clone: Fix typo in block_device format specifier\n dm: remove unnecessary assignment statement in alloc_dev()\n dm verity: Add documentation for try_verify_in_tasklet option\n dm cache: delete the redundant word \u0027each\u0027 in comment\n dm raid: fix typo in analyse_superblocks code comment\n dm verity: enable WQ_HIGHPRI on verify_wq\n dm raid: delete the redundant word \u0027that\u0027 in comment\n dm: change from DMWARN to DMERR or DMCRIT for fatal errors\n dm bufio: use the acquire memory barrier when testing for B_READING\n" }, { "commit": "cbc543c59e8e7c8bc8604d6ac3e18a029e3d5118", "tree": "1acc5f6dc68d4ff19d34e4a030456335e92b00aa", "parents": [ "a4294d5c77152ba38bd6b3167a5fd1eb8a325c49", "72655fb942c1e3d9e71e48e87ee439abe52f3a90" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Oct 21 09:56:07 2022 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Oct 21 09:56:14 2022 +1000" }, "message": "Merge tag \u0027drm-misc-fixes-2022-10-20\u0027 of git://anongit.freedesktop.org/drm/drm-misc into drm-fixes\n\ndrm-misc-fixes for v6.1-rc2:\n- Fix a buffer overflow in format_helper_test.\n- Set DDC pointer in drmm_connector_init.\n- Compiler fixes for panfrost.\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Maarten Lankhorst \u003cmaarten.lankhorst@linux.intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/c4d05683-8ebe-93b8-d24c-d1d2c68f12c4@linux.intel.com\n" }, { "commit": "a4294d5c77152ba38bd6b3167a5fd1eb8a325c49", "tree": "7d72f3189953f5e98b97afe257d4ee375b30f2fa", "parents": [ "f046ca4a18a071517baf581952c41e7c41a0038e", "50b0e4d4da09fa501e722af886f97e60a4f820d6" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Oct 21 08:10:31 2022 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Oct 21 08:10:32 2022 +1000" }, "message": "Merge tag \u0027amd-drm-fixes-6.1-2022-10-20\u0027 of https://gitlab.freedesktop.org/agd5f/linux into drm-fixes\n\namd-drm-fixes-6.1-2022-10-20:\n\namdgpu:\n- Fix gfx9 APU regression caused by PCI AER fix\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nFrom: Alex Deucher \u003calexander.deucher@amd.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20221020135225.562807-1-alexander.deucher@amd.com\n" }, { "commit": "f046ca4a18a071517baf581952c41e7c41a0038e", "tree": "fbe672f186b921261f9f2d472a764833c638d2e4", "parents": [ "8865dd756f92e6745cac64f4dd50e4dc3b9864cc", "8273b4048664fff356fd10059033f0e2f5a422a1" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Oct 21 08:10:15 2022 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Oct 21 08:10:16 2022 +1000" }, "message": "Merge tag \u0027amd-drm-fixes-6.1-2022-10-19\u0027 of https://gitlab.freedesktop.org/agd5f/linux into drm-fixes\n\namd-drm-fixes-6.1-2022-10-19:\n\namdgpu:\n- Mode2 reset fixes for Sienna Cichlid\n- Revert broken fan speed sensor fix\n- SMU 13.x fixes\n- GC 11.x fixes\n- RAS fixes\n- SR-IOV fixes\n- Fix BO move breakage on SI\n- Misc compiler fixes\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nFrom: Alex Deucher \u003calexander.deucher@amd.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20221019191357.6208-1-alexander.deucher@amd.com\n" }, { "commit": "8865dd756f92e6745cac64f4dd50e4dc3b9864cc", "tree": "0ee1b346ec597c227a0af2512176cb517d593614", "parents": [ "9abf2313adc1ca1b6180c508c25f22f9395cc780", "4190e8bbcbc77a9c36724681801cedc5229e7fc2" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Oct 21 08:08:25 2022 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Oct 21 08:08:30 2022 +1000" }, "message": "Merge tag \u0027drm-misc-fixes-2022-10-13\u0027 of git://anongit.freedesktop.org/drm/drm-misc into drm-fixes\n\nShort summary of fixes pull:\n\n * vc4: HDMI fixes\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Thomas Zimmermann \u003ctzimmermann@suse.de\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/Y0gGdlujszCstDeP@linux-uq9g\n" }, { "commit": "21a1994b6492b12e55dbf39d15271430ef6839f0", "tree": "6e29a1db9ee2a0ac4ce05ce0c800844f3a840dde", "parents": [ "9abf2313adc1ca1b6180c508c25f22f9395cc780" ], "author": { "name": "Daniel Bristot de Oliveira", "email": "bristot@kernel.org", "time": "Tue Aug 23 17:20:28 2022 +0200" }, "committer": { "name": "Steven Rostedt (Google)", "email": "rostedt@goodmis.org", "time": "Thu Oct 20 16:02:45 2022 -0400" }, "message": "rv/dot2c: Make automaton definition static\n\nMonitor\u0027s automata definition is only used locally, so make dot2c generate\na static definition.\n\nLink: https://lore.kernel.org/all/202208210332.gtHXje45-lkp@intel.com\nLink: https://lore.kernel.org/all/202208210358.6HH3OrVs-lkp@intel.com\nLink: https://lkml.kernel.org/r/ffbb92010f643307766c9307fd42f416e5b85fa0.1661266564.git.bristot@kernel.org\n\nCc: Steven Rostedt \u003crostedt@goodmis.org\u003e\nFixes: e3c9fc78f096 (\"tools/rv: Add dot2c\")\nReported-by: kernel test robot \u003clkp@intel.com\u003e\nSigned-off-by: Daniel Bristot de Oliveira \u003cbristot@kernel.org\u003e\nSigned-off-by: Steven Rostedt (Google) \u003crostedt@goodmis.org\u003e\n" }, { "commit": "50b0e4d4da09fa501e722af886f97e60a4f820d6", "tree": "28edac2615ec8b428d1198b24b2661f85bbeef21", "parents": [ "8273b4048664fff356fd10059033f0e2f5a422a1" ], "author": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Wed Oct 19 16:57:42 2022 -0400" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Thu Oct 20 09:35:51 2022 -0400" }, "message": "drm/amdgpu: fix sdma doorbell init ordering on APUs\n\nCommit 8795e182b02d (\"PCI/portdrv: Don\u0027t disable AER reporting in get_port_device_capability()\")\nuncovered a bug in amdgpu that required a reordering of the driver\ninit sequence to avoid accessing a special register on the GPU\nbefore it was properly set up leading to an PCI AER error. This\nreordering uncovered a different hw programming ordering dependency\nin some APUs where the SDMA doorbells need to be programmed before\nthe GFX doorbells. To fix this, move the SDMA doorbell programming\nback into the soc15 common code, but use the actual doorbell range\nvalues directly rather than the values stored in the ring structure\nsince those will not be initialized at this point.\n\nThis is a partial revert, but with the doorbell assignment\nfixed so the proper doorbell index is set before it\u0027s used.\n\nFixes: e3163bc8ffdfdb (\"drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega\")\nAcked-by: Christian König \u003cchristian.koenig@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nCc: skhan@linuxfoundation.org\nCc: stable@vger.kernel.org\n" }, { "commit": "2db96217e7e515071726ca4ec791742c4202a1b2", "tree": "6794f4fbfafbefa6b2ddf6dbc6de0d6d36aa8465", "parents": [ "dcd1a59c62dc49da75539213611156d6db50ab5d" ], "author": { "name": "Ye Bin", "email": "yebin10@huawei.com", "time": "Wed Oct 19 11:36:02 2022 +0800" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Oct 20 06:02:52 2022 -0700" }, "message": "blktrace: remove unnessary stop block trace in \u0027blk_trace_shutdown\u0027\n\nAs previous commit, \u0027blk_trace_cleanup\u0027 will stop block trace if\nblock trace\u0027s state is \u0027Blktrace_running\u0027.\nSo remove unnessary stop block trace in \u0027blk_trace_shutdown\u0027.\n\nSigned-off-by: Ye Bin \u003cyebin10@huawei.com\u003e\nReviewed-by: Christoph Hellwig \u003chch@lst.de\u003e\nLink: https://lore.kernel.org/r/20221019033602.752383-4-yebin@huaweicloud.com\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "dcd1a59c62dc49da75539213611156d6db50ab5d", "tree": "dcc916f53d7bed51de41f1473c55688d998d6698", "parents": [ "60a9bb9048f9e95029df10a9bc346f6b066c593c" ], "author": { "name": "Ye Bin", "email": "yebin10@huawei.com", "time": "Wed Oct 19 11:36:01 2022 +0800" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Oct 20 06:02:52 2022 -0700" }, "message": "blktrace: fix possible memleak in \u0027__blk_trace_remove\u0027\n\nWhen test as follows:\nstep1: ioctl(sda, BLKTRACESETUP, \u0026arg)\nstep2: ioctl(sda, BLKTRACESTART, NULL)\nstep3: ioctl(sda, BLKTRACETEARDOWN, NULL)\nstep4: ioctl(sda, BLKTRACESETUP, \u0026arg)\nGot issue as follows:\ndebugfs: File \u0027dropped\u0027 in directory \u0027sda\u0027 already present!\ndebugfs: File \u0027msg\u0027 in directory \u0027sda\u0027 already present!\ndebugfs: File \u0027trace0\u0027 in directory \u0027sda\u0027 already present!\n\nAnd also find syzkaller report issue like \"KASAN: use-after-free Read in relay_switch_subbuf\"\n\"https://syzkaller.appspot.com/bug?id\u003d13849f0d9b1b818b087341691be6cc3ac6a6bfb7\"\n\nIf remove block trace without stop(BLKTRACESTOP) block trace, \u0027__blk_trace_remove\u0027\nwill just set \u0027q-\u003eblk_trace\u0027 with NULL. However, debugfs file isn\u0027t removed, so\nwill report file already present when call BLKTRACESETUP.\nstatic int __blk_trace_remove(struct request_queue *q)\n{\n struct blk_trace *bt;\n\n bt \u003d rcu_replace_pointer(q-\u003eblk_trace, NULL,\n lockdep_is_held(\u0026q-\u003edebugfs_mutex));\n if (!bt)\n return -EINVAL;\n\n\tif (bt-\u003etrace_state !\u003d Blktrace_running)\n \tblk_trace_cleanup(q, bt);\n\n return 0;\n}\n\nIf do test as follows:\nstep1: ioctl(sda, BLKTRACESETUP, \u0026arg)\nstep2: ioctl(sda, BLKTRACESTART, NULL)\nstep3: ioctl(sda, BLKTRACETEARDOWN, NULL)\nstep4: remove sda\n\nThere will remove debugfs directory which will remove recursively all file\nunder directory.\n\u003e\u003e blk_release_queue\n\u003e\u003e\tdebugfs_remove_recursive(q-\u003edebugfs_dir)\nSo all files which created in \u0027do_blk_trace_setup\u0027 are removed, and\n\u0027dentry-\u003ed_inode\u0027 is NULL. But \u0027q-\u003eblk_trace\u0027 is still in \u0027running_trace_lock\u0027,\n\u0027trace_note_tsk\u0027 will traverse \u0027running_trace_lock\u0027 all nodes.\n\u003e\u003etrace_note_tsk\n\u003e\u003e trace_note\n\u003e\u003e relay_reserve\n\u003e\u003e relay_switch_subbuf\n\u003e\u003e d_inode(buf-\u003edentry)-\u003ei_size\n\nTo solve above issues, reference commit \u00275afedf670caf\u0027, call \u0027blk_trace_cleanup\u0027\nunconditionally in \u0027__blk_trace_remove\u0027 and first stop block trace in\n\u0027blk_trace_cleanup\u0027.\n\nSigned-off-by: Ye Bin \u003cyebin10@huawei.com\u003e\nReviewed-by: Christoph Hellwig \u003chch@lst.de\u003e\nLink: https://lore.kernel.org/r/20221019033602.752383-3-yebin@huaweicloud.com\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "60a9bb9048f9e95029df10a9bc346f6b066c593c", "tree": "265d6d228c5e7aad3b3acaae4b91b099ae39091b", "parents": [ "d4347d50407daea6237872281ece64c4bdf1ec99" ], "author": { "name": "Ye Bin", "email": "yebin10@huawei.com", "time": "Wed Oct 19 11:36:00 2022 +0800" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Oct 20 06:02:52 2022 -0700" }, "message": "blktrace: introduce \u0027blk_trace_{start,stop}\u0027 helper\n\nIntroduce \u0027blk_trace_{start,stop}\u0027 helper. No functional changed.\n\nSigned-off-by: Ye Bin \u003cyebin10@huawei.com\u003e\nReviewed-by: Christoph Hellwig \u003chch@lst.de\u003e\nLink: https://lore.kernel.org/r/20221019033602.752383-2-yebin@huaweicloud.com\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "d4347d50407daea6237872281ece64c4bdf1ec99", "tree": "fb609912c4deb0ac37524b3067c0324b81598d91", "parents": [ "33566f92cd5f1c1d462920978f6dc102c744270d" ], "author": { "name": "Pavel Begunkov", "email": "asml.silence@gmail.com", "time": "Tue Oct 18 20:50:55 2022 +0100" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Oct 20 05:50:29 2022 -0700" }, "message": "bio: safeguard REQ_ALLOC_CACHE bio put\n\nbio_put() with REQ_ALLOC_CACHE assumes that it\u0027s executed not from\nan irq context. Let\u0027s add a warning if the invariant is not respected,\nespecially since there is a couple of places removing REQ_POLLED by hand\nwithout also clearing REQ_ALLOC_CACHE.\n\nSigned-off-by: Pavel Begunkov \u003casml.silence@gmail.com\u003e\nReviewed-by: Christoph Hellwig \u003chch@lst.de\u003e\nLink: https://lore.kernel.org/r/558d78313476c4e9c233902efa0092644c3d420a.1666122465.git.asml.silence@gmail.com\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "996d3efeb091c503afd3ee6b5e20eabf446fd955", "tree": "187f45814eade85a8548fb61e20eda6652344bf1", "parents": [ "16bbdfe5fb0e78e0acb13e45fc127e9a296913f2" ], "author": { "name": "Rafael Mendonca", "email": "rafaelmendsr@gmail.com", "time": "Wed Oct 19 22:47:09 2022 -0300" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Oct 20 05:48:59 2022 -0700" }, "message": "io-wq: Fix memory leak in worker creation\n\nIf the CPU mask allocation for a node fails, then the memory allocated for\nthe \u0027io_wqe\u0027 struct of the current node doesn\u0027t get freed on the error\nhandling path, since it has not yet been added to the \u0027wqes\u0027 array.\n\nThis was spotted when fuzzing v6.1-rc1 with Syzkaller:\nBUG: memory leak\nunreferenced object 0xffff8880093d5000 (size 1024):\n comm \"syz-executor.2\", pid 7701, jiffies 4295048595 (age 13.900s)\n hex dump (first 32 bytes):\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace:\n [\u003c00000000cb463369\u003e] __kmem_cache_alloc_node+0x18e/0x720\n [\u003c00000000147a3f9c\u003e] kmalloc_node_trace+0x2a/0x130\n [\u003c000000004e107011\u003e] io_wq_create+0x7b9/0xdc0\n [\u003c00000000c38b2018\u003e] io_uring_alloc_task_context+0x31e/0x59d\n [\u003c00000000867399da\u003e] __io_uring_add_tctx_node.cold+0x19/0x1ba\n [\u003c000000007e0e7a79\u003e] io_uring_setup.cold+0x1b80/0x1dce\n [\u003c00000000b545e9f6\u003e] __x64_sys_io_uring_setup+0x5d/0x80\n [\u003c000000008a8a7508\u003e] do_syscall_64+0x5d/0x90\n [\u003c000000004ac08bec\u003e] entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nFixes: 0e03496d1967 (\"io-wq: use private CPU mask\")\nCc: stable@vger.kernel.org\nSigned-off-by: Rafael Mendonca \u003crafaelmendsr@gmail.com\u003e\nLink: https://lore.kernel.org/r/20221020014710.902201-1-rafaelmendsr@gmail.com\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "33566f92cd5f1c1d462920978f6dc102c744270d", "tree": "a1bd81cb20da8a53e1bd3849d461e58bc2b9e15a", "parents": [ "6d42ddf7f27b6723549ee6d4c8b1b418b59bf6b5" ], "author": { "name": "Yuwei Guan", "email": "ssawgyw@gmail.com", "time": "Tue Oct 18 11:01:39 2022 +0800" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Oct 20 05:46:49 2022 -0700" }, "message": "block, bfq: remove unused variable for bfq_queue\n\nit defined in d0edc2473be9d, but there\u0027s nowhere to use it,\nso remove it.\n\nSigned-off-by: Yuwei Guan \u003cYuwei.Guan@zeekrlife.com\u003e\nAcked-by: Paolo Valente \u003cpaolo.valente@linaro.org\u003e\nLink: https://lore.kernel.org/r/20221018030139.159-1-Yuwei.Guan@zeekrlife.com\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "6d42ddf7f27b6723549ee6d4c8b1b418b59bf6b5", "tree": "8428578275365a3e9a8871bfbce3231c22b2a680", "parents": [ "70ee4a4c97d7332519b2072ead0ef9f65ea43662" ], "author": { "name": "Christoph Böhmwalder", "email": "christoph.boehmwalder@linbit.com", "time": "Thu Oct 20 10:52:05 2022 +0200" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Oct 20 05:45:21 2022 -0700" }, "message": "drbd: only clone bio if we have a backing device\n\nCommit c347a787e34cb (drbd: set -\u003ebi_bdev in drbd_req_new) moved a\nbio_set_dev call (which has since been removed) to \"earlier\", from\ndrbd_request_prepare to drbd_req_new.\n\nThe problem is that this accesses device-\u003eldev-\u003ebacking_bdev, which is\nnot NULL-checked at this point. When we don\u0027t have an ldev (i.e. when\nthe DRBD device is diskless), this leads to a null pointer deref.\n\nSo, only allocate the private_bio if we actually have a disk. This is\nalso a small optimization, since we don\u0027t clone the bio to only to\nimmediately free it again in the diskless case.\n\nFixes: c347a787e34cb (\"drbd: set -\u003ebi_bdev in drbd_req_new\")\nCo-developed-by: Christoph Böhmwalder \u003cchristoph.boehmwalder@linbit.com\u003e\nSigned-off-by: Christoph Böhmwalder \u003cchristoph.boehmwalder@linbit.com\u003e\nCo-developed-by: Joel Colledge \u003cjoel.colledge@linbit.com\u003e\nSigned-off-by: Joel Colledge \u003cjoel.colledge@linbit.com\u003e\nReviewed-by: Christoph Hellwig \u003chch@lst.de\u003e\nLink: https://lore.kernel.org/r/20221020085205.129090-1-christoph.boehmwalder@linbit.com\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "70ee4a4c97d7332519b2072ead0ef9f65ea43662", "tree": "ab040ea78ce6387f8062227a981cb989c359ec0a", "parents": [ "72495b5ab456ec9f05d587238d1e2fa8e9ea63ec", "94f5a06884074dcd99606d7b329e133ee65ea6ad" ], "author": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Oct 20 05:43:58 2022 -0700" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Oct 20 05:43:58 2022 -0700" }, "message": "Merge tag \u0027nvme-6.1-2022-10-22\u0027 of git://git.infradead.org/nvme into block-6.1\n\nPull NVMe fixes from Christoph:\n\n\"nvme fixes for Linux 6.1\n\n - fix nvme-hwmon for DMA non-cohehrent architectures (Serge Semin)\n - add a nvme-hwmong maintainer (Christoph Hellwig)\n - fix error pointer dereference in error handling (Dan Carpenter)\n - fix invalid memory reference in nvmet_subsys_attr_qid_max_show\n (Daniel Wagner)\n - don\u0027t limit the DMA segment size in nvme-apple (Russell King)\n - fix workqueue MEM_RECLAIM flushing dependency (Sagi Grimberg)\n - disable write zeroes on various Kingston SSDs (Xander Li)\"\n\n* tag \u0027nvme-6.1-2022-10-22\u0027 of git://git.infradead.org/nvme:\n nvmet: fix invalid memory reference in nvmet_subsys_attr_qid_max_show\n nvmet: fix workqueue MEM_RECLAIM flushing dependency\n nvme-hwmon: kmalloc the NVME SMART log buffer\n nvme-hwmon: consistently ignore errors from nvme_hwmon_init\n nvme: add Guenther as nvme-hwmon maintainer\n nvme-apple: don\u0027t limit DMA segement size\n nvme-pci: disable write zeroes on various Kingston SSD\n nvme: fix error pointer dereference in error handling\n" }, { "commit": "72655fb942c1e3d9e71e48e87ee439abe52f3a90", "tree": "403f3899ce1cfd8bea438ca4e145f0e1eedeeba3", "parents": [ "7228d9d79248bd0c8af56a7667a88a875c674e0c" ], "author": { "name": "Steven Price", "email": "steven.price@arm.com", "time": "Mon Oct 17 11:46:02 2022 +0100" }, "committer": { "name": "Steven Price", "email": "steven.price@arm.com", "time": "Thu Oct 20 11:02:11 2022 +0100" }, "message": "drm/panfrost: replace endian-specific types with native ones\n\n__le32 and __le64 types aren\u0027t portable and are not available on\nFreeBSD (which uses the same uAPI).\n\nInstead of attempting to always output little endian, just use native\nendianness in the dumps. Tools can detect the endianness in use by\nlooking at the \u0027magic\u0027 field, but equally we don\u0027t expect big-endian to\nbe used with Mali (there are no known implementations out there).\n\nBug: https://gitlab.freedesktop.org/mesa/mesa/-/issues/7252\nFixes: 730c2bf4ad39 (\"drm/panfrost: Add support for devcoredump\")\nReviewed-by: Alyssa Rosenzweig \u003calyssa.rosenzweig@collabora.com\u003e\nSigned-off-by: Steven Price \u003csteven.price@arm.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20221017104602.142992-3-steven.price@arm.com\n" }, { "commit": "7228d9d79248bd0c8af56a7667a88a875c674e0c", "tree": "edd4403afa3b51a219d0c0249ad28c1dc3f68342", "parents": [ "a91e5e3e2216354e27ee6adf9cb2d5d9548cad8c" ], "author": { "name": "Steven Price", "email": "steven.price@arm.com", "time": "Mon Oct 17 11:46:01 2022 +0100" }, "committer": { "name": "Steven Price", "email": "steven.price@arm.com", "time": "Thu Oct 20 11:02:01 2022 +0100" }, "message": "drm/panfrost: Remove type name from internal structs\n\nThe two structs internal to struct panfrost_dump_object_header were\nnamed, but sadly that is incompatible with C++, causing an error: \"an\nanonymous union may only have public non-static data members\".\n\nHowever nothing refers to struct pan_reg_hdr and struct pan_bomap_hdr\nand there\u0027s no need to export these definitions, so lets drop them. This\nfixes the C++ build error with the minimum change in userspace API.\n\nReported-by: Adrián Larumbe \u003cadrian.larumbe@collabora.com\u003e\nFixes: 730c2bf4ad39 (\"drm/panfrost: Add support for devcoredump\")\nReviewed-by: Alyssa Rosenzweig \u003calyssa.rosenzweig@collabora.com\u003e\nSigned-off-by: Steven Price \u003csteven.price@arm.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20221017104602.142992-2-steven.price@arm.com\n" }, { "commit": "a91e5e3e2216354e27ee6adf9cb2d5d9548cad8c", "tree": "63127caa53c1654ba0f3564e83176ac293739d1c", "parents": [ "7089003304c67658caead22f841840fc4a26b198" ], "author": { "name": "Maxime Ripard", "email": "maxime@cerno.tech", "time": "Wed Oct 19 16:34:42 2022 +0200" }, "committer": { "name": "Maxime Ripard", "email": "maxime@cerno.tech", "time": "Thu Oct 20 10:53:13 2022 +0200" }, "message": "drm/connector: Set DDC pointer in drmm_connector_init\n\nCommit 35a3b82f1bdd (\"drm/connector: Introduce drmm_connector_init\")\nintroduced the function drmm_connector_init() with a parameter for an\noptional ddc pointer to the i2c controller used to access the DDC bus.\n\nHowever, the underlying call to __drm_connector_init() was always\nsetting it to NULL instead of passing the ddc argument around.\n\nThis resulted in unexpected null pointer dereference on platforms\nexpecting to get a DDC controller.\n\nFixes: 35a3b82f1bdd (\"drm/connector: Introduce drmm_connector_init\")\nReviewed-by: Thomas Zimmermann \u003ctzimmermann@suse.de\u003e\nLink: https://lore.kernel.org/r/20221019143442.1798964-1-maxime@cerno.tech\nSigned-off-by: Maxime Ripard \u003cmaxime@cerno.tech\u003e\n" }, { "commit": "7089003304c67658caead22f841840fc4a26b198", "tree": "7a6eda7da42ee147ea23de75dd0e796e03439cf7", "parents": [ "1aca5ce036e3499336d1a2ace3070f908381c055" ], "author": { "name": "David Gow", "email": "davidgow@google.com", "time": "Wed Oct 19 15:32:40 2022 +0800" }, "committer": { "name": "Javier Martinez Canillas", "email": "javierm@redhat.com", "time": "Thu Oct 20 09:56:05 2022 +0200" }, "message": "drm: tests: Fix a buffer overflow in format_helper_test\n\nThe xrgb2101010 format conversion test (unlike for other formats) does\nan endianness conversion on the results. However, it always converts\nTEST_BUF_SIZE 32-bit integers, which results in reading from (and\nwriting to) more memory than in present in the result buffer. Instead,\nuse the buffer size, divided by sizeof(u32).\n\nThe issue could be reproduced with KASAN:\n./tools/testing/kunit/kunit.py run --kunitconfig drivers/gpu/drm/tests \\\n\t--kconfig_add CONFIG_KASAN\u003dy --kconfig_add CONFIG_KASAN_VMALLOC\u003dy \\\n\t--kconfig_add CONFIG_KASAN_KUNIT_TEST\u003dy \\\n\tdrm_format_helper_test.*xrgb2101010\n\nReported-by: Linux Kernel Functional Testing \u003clkft@linaro.org\u003e\nFixes: 453114319699 (\"drm/format-helper: Add KUnit tests for drm_fb_xrgb8888_to_xrgb2101010()\")\nSigned-off-by: David Gow \u003cdavidgow@google.com\u003e\nReviewed-by: Maíra Canal \u003cmairacanal@riseup.net\u003e\nReviewed-by: Javier Martinez Canillas \u003cjavierm@redhat.com\u003e\nReviewed-by: José Expósito \u003cjose.exposito89@gmail.com\u003e\nSigned-off-by: Javier Martinez Canillas \u003cjavierm@redhat.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20221019073239.3779180-1-davidgow@google.com\n" }, { "commit": "1aca5ce036e3499336d1a2ace3070f908381c055", "tree": "32b53fca3cff8c6c084d9c1d94d1761c3618e739", "parents": [ "01f2cf53844b01e691516b465df1b6ab01b03230", "9abf2313adc1ca1b6180c508c25f22f9395cc780" ], "author": { "name": "Thomas Zimmermann", "email": "tzimmermann@suse.de", "time": "Thu Oct 20 09:09:00 2022 +0200" }, "committer": { "name": "Thomas Zimmermann", "email": "tzimmermann@suse.de", "time": "Thu Oct 20 09:09:00 2022 +0200" }, "message": "Merge drm/drm-fixes into drm-misc-fixes\n\nBackmerging to get v6.1-rc1.\n\nSigned-off-by: Thomas Zimmermann \u003ctzimmermann@suse.de\u003e\n" }, { "commit": "7f378c03aa4952507521174fb0da7b24a9ad0be6", "tree": "0a8af85a8fee149d3b559f78b04325048c185227", "parents": [ "ebda44da44f6f309d302522b049f43d6f829f7aa" ], "author": { "name": "Felix Riemann", "email": "felix.riemann@sma.de", "time": "Tue Oct 18 12:47:54 2022 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 19 18:46:17 2022 -0700" }, "message": "net: phy: dp83822: disable MDI crossover status change interrupt\n\nIf the cable is disconnected the PHY seems to toggle between MDI and\nMDI-X modes. With the MDI crossover status interrupt active this causes\nroughly 10 interrupts per second.\n\nAs the crossover status isn\u0027t checked by the driver, the interrupt can\nbe disabled to reduce the interrupt load.\n\nFixes: 87461f7a58ab (\"net: phy: DP83822 initial driver submission\")\nSigned-off-by: Felix Riemann \u003cfelix.riemann@sma.de\u003e\nReviewed-by: Andrew Lunn \u003candrew@lunn.ch\u003e\nLink: https://lore.kernel.org/r/20221018104755.30025-1-svc.sw.rte.linux@sma.de\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "72495b5ab456ec9f05d587238d1e2fa8e9ea63ec", "tree": "622b0c18c87185d0c84c0ed3247ede4c123cd9d2", "parents": [ "e0539ae012ba5d618eb19665ff990b87b960c643" ], "author": { "name": "Yushan Zhou", "email": "katrinzhou@tencent.com", "time": "Tue Oct 18 18:01:32 2022 +0800" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Wed Oct 19 18:27:23 2022 -0700" }, "message": "ublk_drv: use flexible-array member instead of zero-length array\n\nEliminate the following coccicheck warning:\n./drivers/block/ublk_drv.c:127:16-19: WARNING use flexible-array member instead\n\nSigned-off-by: Yushan Zhou \u003ckatrinzhou@tencent.com\u003e\nLink: https://lore.kernel.org/r/20221018100132.355393-1-zys.zljxml@gmail.com\nReviewed-by: Ming Lei \u003cming.lei@redhat.com\u003e\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "ebda44da44f6f309d302522b049f43d6f829f7aa", "tree": "9262cdb49bb1be9b26431fef57f8dbda7ac16736", "parents": [ "ff2f5ec5d009844ec28f171123f9e58750cef4bf" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Tue Oct 18 20:32:58 2022 +0000" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 19 17:35:30 2022 -0700" }, "message": "net: sched: fix race condition in qdisc_graft()\n\nWe had one syzbot report [1] in syzbot queue for a while.\nI was waiting for more occurrences and/or a repro but\nDmitry Vyukov spotted the issue right away.\n\n\u003cquoting Dmitry\u003e\nqdisc_graft() drops reference to qdisc in notify_and_destroy\nwhile it\u0027s still assigned to dev-\u003eqdisc\n\u003c/quoting\u003e\n\nIndeed, RCU rules are clear when replacing a data structure.\nThe visible pointer (dev-\u003eqdisc in this case) must be updated\nto the new object _before_ RCU grace period is started\n(qdisc_put(old) in this case).\n\n[1]\nBUG: KASAN: use-after-free in __tcf_qdisc_find.part.0+0xa3a/0xac0 net/sched/cls_api.c:1066\nRead of size 4 at addr ffff88802065e038 by task syz-executor.4/21027\n\nCPU: 0 PID: 21027 Comm: syz-executor.4 Not tainted 6.0.0-rc3-syzkaller-00363-g7726d4c3e60b #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022\nCall Trace:\n\u003cTASK\u003e\n__dump_stack lib/dump_stack.c:88 [inline]\ndump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106\nprint_address_description mm/kasan/report.c:317 [inline]\nprint_report.cold+0x2ba/0x719 mm/kasan/report.c:433\nkasan_report+0xb1/0x1e0 mm/kasan/report.c:495\n__tcf_qdisc_find.part.0+0xa3a/0xac0 net/sched/cls_api.c:1066\n__tcf_qdisc_find net/sched/cls_api.c:1051 [inline]\ntc_new_tfilter+0x34f/0x2200 net/sched/cls_api.c:2018\nrtnetlink_rcv_msg+0x955/0xca0 net/core/rtnetlink.c:6081\nnetlink_rcv_skb+0x153/0x420 net/netlink/af_netlink.c:2501\nnetlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]\nnetlink_unicast+0x543/0x7f0 net/netlink/af_netlink.c:1345\nnetlink_sendmsg+0x917/0xe10 net/netlink/af_netlink.c:1921\nsock_sendmsg_nosec net/socket.c:714 [inline]\nsock_sendmsg+0xcf/0x120 net/socket.c:734\n____sys_sendmsg+0x6eb/0x810 net/socket.c:2482\n___sys_sendmsg+0x110/0x1b0 net/socket.c:2536\n__sys_sendmsg+0xf3/0x1c0 net/socket.c:2565\ndo_syscall_x64 arch/x86/entry/common.c:50 [inline]\ndo_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80\nentry_SYSCALL_64_after_hwframe+0x63/0xcd\nRIP: 0033:0x7f5efaa89279\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f5efbc31168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e\nRAX: ffffffffffffffda RBX: 00007f5efab9bf80 RCX: 00007f5efaa89279\nRDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005\nRBP: 00007f5efaae32e9 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 00007f5efb0cfb1f R14: 00007f5efbc31300 R15: 0000000000022000\n\u003c/TASK\u003e\n\nAllocated by task 21027:\nkasan_save_stack+0x1e/0x40 mm/kasan/common.c:38\nkasan_set_track mm/kasan/common.c:45 [inline]\nset_alloc_info mm/kasan/common.c:437 [inline]\n____kasan_kmalloc mm/kasan/common.c:516 [inline]\n____kasan_kmalloc mm/kasan/common.c:475 [inline]\n__kasan_kmalloc+0xa9/0xd0 mm/kasan/common.c:525\nkmalloc_node include/linux/slab.h:623 [inline]\nkzalloc_node include/linux/slab.h:744 [inline]\nqdisc_alloc+0xb0/0xc50 net/sched/sch_generic.c:938\nqdisc_create_dflt+0x71/0x4a0 net/sched/sch_generic.c:997\nattach_one_default_qdisc net/sched/sch_generic.c:1152 [inline]\nnetdev_for_each_tx_queue include/linux/netdevice.h:2437 [inline]\nattach_default_qdiscs net/sched/sch_generic.c:1170 [inline]\ndev_activate+0x760/0xcd0 net/sched/sch_generic.c:1229\n__dev_open+0x393/0x4d0 net/core/dev.c:1441\n__dev_change_flags+0x583/0x750 net/core/dev.c:8556\nrtnl_configure_link+0xee/0x240 net/core/rtnetlink.c:3189\nrtnl_newlink_create net/core/rtnetlink.c:3371 [inline]\n__rtnl_newlink+0x10b8/0x17e0 net/core/rtnetlink.c:3580\nrtnl_newlink+0x64/0xa0 net/core/rtnetlink.c:3593\nrtnetlink_rcv_msg+0x43a/0xca0 net/core/rtnetlink.c:6090\nnetlink_rcv_skb+0x153/0x420 net/netlink/af_netlink.c:2501\nnetlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]\nnetlink_unicast+0x543/0x7f0 net/netlink/af_netlink.c:1345\nnetlink_sendmsg+0x917/0xe10 net/netlink/af_netlink.c:1921\nsock_sendmsg_nosec net/socket.c:714 [inline]\nsock_sendmsg+0xcf/0x120 net/socket.c:734\n____sys_sendmsg+0x6eb/0x810 net/socket.c:2482\n___sys_sendmsg+0x110/0x1b0 net/socket.c:2536\n__sys_sendmsg+0xf3/0x1c0 net/socket.c:2565\ndo_syscall_x64 arch/x86/entry/common.c:50 [inline]\ndo_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80\nentry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nFreed by task 21020:\nkasan_save_stack+0x1e/0x40 mm/kasan/common.c:38\nkasan_set_track+0x21/0x30 mm/kasan/common.c:45\nkasan_set_free_info+0x20/0x30 mm/kasan/generic.c:370\n____kasan_slab_free mm/kasan/common.c:367 [inline]\n____kasan_slab_free+0x166/0x1c0 mm/kasan/common.c:329\nkasan_slab_free include/linux/kasan.h:200 [inline]\nslab_free_hook mm/slub.c:1754 [inline]\nslab_free_freelist_hook+0x8b/0x1c0 mm/slub.c:1780\nslab_free mm/slub.c:3534 [inline]\nkfree+0xe2/0x580 mm/slub.c:4562\nrcu_do_batch kernel/rcu/tree.c:2245 [inline]\nrcu_core+0x7b5/0x1890 kernel/rcu/tree.c:2505\n__do_softirq+0x1d3/0x9c6 kernel/softirq.c:571\n\nLast potentially related work creation:\nkasan_save_stack+0x1e/0x40 mm/kasan/common.c:38\n__kasan_record_aux_stack+0xbe/0xd0 mm/kasan/generic.c:348\ncall_rcu+0x99/0x790 kernel/rcu/tree.c:2793\nqdisc_put+0xcd/0xe0 net/sched/sch_generic.c:1083\nnotify_and_destroy net/sched/sch_api.c:1012 [inline]\nqdisc_graft+0xeb1/0x1270 net/sched/sch_api.c:1084\ntc_modify_qdisc+0xbb7/0x1a00 net/sched/sch_api.c:1671\nrtnetlink_rcv_msg+0x43a/0xca0 net/core/rtnetlink.c:6090\nnetlink_rcv_skb+0x153/0x420 net/netlink/af_netlink.c:2501\nnetlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]\nnetlink_unicast+0x543/0x7f0 net/netlink/af_netlink.c:1345\nnetlink_sendmsg+0x917/0xe10 net/netlink/af_netlink.c:1921\nsock_sendmsg_nosec net/socket.c:714 [inline]\nsock_sendmsg+0xcf/0x120 net/socket.c:734\n____sys_sendmsg+0x6eb/0x810 net/socket.c:2482\n___sys_sendmsg+0x110/0x1b0 net/socket.c:2536\n__sys_sendmsg+0xf3/0x1c0 net/socket.c:2565\ndo_syscall_x64 arch/x86/entry/common.c:50 [inline]\ndo_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80\nentry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nSecond to last potentially related work creation:\nkasan_save_stack+0x1e/0x40 mm/kasan/common.c:38\n__kasan_record_aux_stack+0xbe/0xd0 mm/kasan/generic.c:348\nkvfree_call_rcu+0x74/0x940 kernel/rcu/tree.c:3322\nneigh_destroy+0x431/0x630 net/core/neighbour.c:912\nneigh_release include/net/neighbour.h:454 [inline]\nneigh_cleanup_and_release+0x1f8/0x330 net/core/neighbour.c:103\nneigh_del net/core/neighbour.c:225 [inline]\nneigh_remove_one+0x37d/0x460 net/core/neighbour.c:246\nneigh_forced_gc net/core/neighbour.c:276 [inline]\nneigh_alloc net/core/neighbour.c:447 [inline]\n___neigh_create+0x18b5/0x29a0 net/core/neighbour.c:642\nip6_finish_output2+0xfb8/0x1520 net/ipv6/ip6_output.c:125\n__ip6_finish_output net/ipv6/ip6_output.c:195 [inline]\nip6_finish_output+0x690/0x1160 net/ipv6/ip6_output.c:206\nNF_HOOK_COND include/linux/netfilter.h:296 [inline]\nip6_output+0x1ed/0x540 net/ipv6/ip6_output.c:227\ndst_output include/net/dst.h:451 [inline]\nNF_HOOK include/linux/netfilter.h:307 [inline]\nNF_HOOK include/linux/netfilter.h:301 [inline]\nmld_sendpack+0xa09/0xe70 net/ipv6/mcast.c:1820\nmld_send_cr net/ipv6/mcast.c:2121 [inline]\nmld_ifc_work+0x71c/0xdc0 net/ipv6/mcast.c:2653\nprocess_one_work+0x991/0x1610 kernel/workqueue.c:2289\nworker_thread+0x665/0x1080 kernel/workqueue.c:2436\nkthread+0x2e4/0x3a0 kernel/kthread.c:376\nret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306\n\nThe buggy address belongs to the object at ffff88802065e000\nwhich belongs to the cache kmalloc-1k of size 1024\nThe buggy address is located 56 bytes inside of\n1024-byte region [ffff88802065e000, ffff88802065e400)\n\nThe buggy address belongs to the physical page:\npage:ffffea0000819600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20658\nhead:ffffea0000819600 order:3 compound_mapcount:0 compound_pincount:0\nflags: 0xfff00000010200(slab|head|node\u003d0|zone\u003d1|lastcpupid\u003d0x7ff)\nraw: 00fff00000010200 0000000000000000 dead000000000001 ffff888011841dc0\nraw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000\npage dumped because: kasan: bad access detected\npage_owner tracks the page as allocated\npage last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3523, tgid 3523 (sshd), ts 41495190986, free_ts 41417713212\nprep_new_page mm/page_alloc.c:2532 [inline]\nget_page_from_freelist+0x109b/0x2ce0 mm/page_alloc.c:4283\n__alloc_pages+0x1c7/0x510 mm/page_alloc.c:5515\nalloc_pages+0x1a6/0x270 mm/mempolicy.c:2270\nalloc_slab_page mm/slub.c:1824 [inline]\nallocate_slab+0x27e/0x3d0 mm/slub.c:1969\nnew_slab mm/slub.c:2029 [inline]\n___slab_alloc+0x7f1/0xe10 mm/slub.c:3031\n__slab_alloc.constprop.0+0x4d/0xa0 mm/slub.c:3118\nslab_alloc_node mm/slub.c:3209 [inline]\n__kmalloc_node_track_caller+0x2f2/0x380 mm/slub.c:4955\nkmalloc_reserve net/core/skbuff.c:358 [inline]\n__alloc_skb+0xd9/0x2f0 net/core/skbuff.c:430\nalloc_skb_fclone include/linux/skbuff.h:1307 [inline]\ntcp_stream_alloc_skb+0x38/0x580 net/ipv4/tcp.c:861\ntcp_sendmsg_locked+0xc36/0x2f80 net/ipv4/tcp.c:1325\ntcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1483\ninet_sendmsg+0x99/0xe0 net/ipv4/af_inet.c:819\nsock_sendmsg_nosec net/socket.c:714 [inline]\nsock_sendmsg+0xcf/0x120 net/socket.c:734\nsock_write_iter+0x291/0x3d0 net/socket.c:1108\ncall_write_iter include/linux/fs.h:2187 [inline]\nnew_sync_write fs/read_write.c:491 [inline]\nvfs_write+0x9e9/0xdd0 fs/read_write.c:578\nksys_write+0x1e8/0x250 fs/read_write.c:631\npage last free stack trace:\nreset_page_owner include/linux/page_owner.h:24 [inline]\nfree_pages_prepare mm/page_alloc.c:1449 [inline]\nfree_pcp_prepare+0x5e4/0xd20 mm/page_alloc.c:1499\nfree_unref_page_prepare mm/page_alloc.c:3380 [inline]\nfree_unref_page+0x19/0x4d0 mm/page_alloc.c:3476\n__unfreeze_partials+0x17c/0x1a0 mm/slub.c:2548\nqlink_free mm/kasan/quarantine.c:168 [inline]\nqlist_free_all+0x6a/0x170 mm/kasan/quarantine.c:187\nkasan_quarantine_reduce+0x180/0x200 mm/kasan/quarantine.c:294\n__kasan_slab_alloc+0xa2/0xc0 mm/kasan/common.c:447\nkasan_slab_alloc include/linux/kasan.h:224 [inline]\nslab_post_alloc_hook mm/slab.h:727 [inline]\nslab_alloc_node mm/slub.c:3243 [inline]\nslab_alloc mm/slub.c:3251 [inline]\n__kmem_cache_alloc_lru mm/slub.c:3258 [inline]\nkmem_cache_alloc+0x267/0x3b0 mm/slub.c:3268\nkmem_cache_zalloc include/linux/slab.h:723 [inline]\nalloc_buffer_head+0x20/0x140 fs/buffer.c:2974\nalloc_page_buffers+0x280/0x790 fs/buffer.c:829\ncreate_empty_buffers+0x2c/0xee0 fs/buffer.c:1558\next4_block_write_begin+0x1004/0x1530 fs/ext4/inode.c:1074\next4_da_write_begin+0x422/0xae0 fs/ext4/inode.c:2996\ngeneric_perform_write+0x246/0x560 mm/filemap.c:3738\next4_buffered_write_iter+0x15b/0x460 fs/ext4/file.c:270\next4_file_write_iter+0x44a/0x1660 fs/ext4/file.c:679\ncall_write_iter include/linux/fs.h:2187 [inline]\nnew_sync_write fs/read_write.c:491 [inline]\nvfs_write+0x9e9/0xdd0 fs/read_write.c:578\n\nFixes: af356afa010f (\"net_sched: reintroduce dev-\u003eqdisc for use by sch_api\")\nReported-by: syzbot \u003csyzkaller@googlegroups.com\u003e\nDiagnosed-by: Dmitry Vyukov \u003cdvyukov@google.com\u003e\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nLink: https://lore.kernel.org/r/20221018203258.2793282-1-edumazet@google.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "ff2f5ec5d009844ec28f171123f9e58750cef4bf", "tree": "9dd6bd7596db03e34bb1fa379bd600657dd17621", "parents": [ "258ad2fe5ede773625adfda88b173f4123e59f45" ], "author": { "name": "Yang Yingliang", "email": "yangyingliang@huawei.com", "time": "Tue Oct 18 20:24:51 2022 +0800" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 19 17:28:52 2022 -0700" }, "message": "net: hns: fix possible memory leak in hnae_ae_register()\n\nInject fault while probing module, if device_register() fails,\nbut the refcount of kobject is not decreased to 0, the name\nallocated in dev_set_name() is leaked. Fix this by calling\nput_device(), so that name can be freed in callback function\nkobject_cleanup().\n\nunreferenced object 0xffff00c01aba2100 (size 128):\n comm \"systemd-udevd\", pid 1259, jiffies 4294903284 (age 294.152s)\n hex dump (first 32 bytes):\n 68 6e 61 65 30 00 00 00 18 21 ba 1a c0 00 ff ff hnae0....!......\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace:\n [\u003c0000000034783f26\u003e] slab_post_alloc_hook+0xa0/0x3e0\n [\u003c00000000748188f2\u003e] __kmem_cache_alloc_node+0x164/0x2b0\n [\u003c00000000ab0743e8\u003e] __kmalloc_node_track_caller+0x6c/0x390\n [\u003c000000006c0ffb13\u003e] kvasprintf+0x8c/0x118\n [\u003c00000000fa27bfe1\u003e] kvasprintf_const+0x60/0xc8\n [\u003c0000000083e10ed7\u003e] kobject_set_name_vargs+0x3c/0xc0\n [\u003c000000000b87affc\u003e] dev_set_name+0x7c/0xa0\n [\u003c000000003fd8fe26\u003e] hnae_ae_register+0xcc/0x190 [hnae]\n [\u003c00000000fe97edc9\u003e] hns_dsaf_ae_init+0x9c/0x108 [hns_dsaf]\n [\u003c00000000c36ff1eb\u003e] hns_dsaf_probe+0x548/0x748 [hns_dsaf]\n\nFixes: 6fe6611ff275 (\"net: add Hisilicon Network Subsystem hnae framework support\")\nSigned-off-by: Yang Yingliang \u003cyangyingliang@huawei.com\u003e\nReviewed-by: Leon Romanovsky \u003cleonro@nvidia.com\u003e\nLink: https://lore.kernel.org/r/20221018122451.1749171-1-yangyingliang@huawei.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "258ad2fe5ede773625adfda88b173f4123e59f45", "tree": "06556f35c4d6482e75be5a3feb1f84137a6c6788", "parents": [ "c2bf23e4a5af37a4d77901d9ff14c50a269f143d" ], "author": { "name": "Yang Yingliang", "email": "yangyingliang@huawei.com", "time": "Tue Oct 18 21:16:07 2022 +0800" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 19 17:25:10 2022 -0700" }, "message": "wwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new()\n\nInject fault while probing module, if device_register() fails,\nbut the refcount of kobject is not decreased to 0, the name\nallocated in dev_set_name() is leaked. Fix this by calling\nput_device(), so that name can be freed in callback function\nkobject_cleanup().\n\nunreferenced object 0xffff88810152ad20 (size 8):\n comm \"modprobe\", pid 252, jiffies 4294849206 (age 22.713s)\n hex dump (first 8 bytes):\n 68 77 73 69 6d 30 00 ff hwsim0..\n backtrace:\n [\u003c000000009c3504ed\u003e] __kmalloc_node_track_caller+0x44/0x1b0\n [\u003c00000000c0228a5e\u003e] kvasprintf+0xb5/0x140\n [\u003c00000000cff8c21f\u003e] kvasprintf_const+0x55/0x180\n [\u003c0000000055a1e073\u003e] kobject_set_name_vargs+0x56/0x150\n [\u003c000000000a80b139\u003e] dev_set_name+0xab/0xe0\n\nFixes: f36a111a74e7 (\"wwan_hwsim: WWAN device simulator\")\nSigned-off-by: Yang Yingliang \u003cyangyingliang@huawei.com\u003e\nReviewed-by: Loic Poulain \u003cloic.poulain@linaro.org\u003e\nAcked-by: Sergey Ryazanov \u003cryazanov.s.a@gmail.com\u003e\nLink: https://lore.kernel.org/r/20221018131607.1901641-1-yangyingliang@huawei.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "c2bf23e4a5af37a4d77901d9ff14c50a269f143d", "tree": "4ea1a19db10833364e287170fe37610923e70b85", "parents": [ "d753a0501996600e06e7df5f53959670835e91f2" ], "author": { "name": "Pieter Jansen van Vuuren", "email": "pieter.jansen-van-vuuren@amd.com", "time": "Tue Oct 18 10:28:41 2022 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 19 17:08:43 2022 -0700" }, "message": "sfc: include vport_id in filter spec hash and equal()\n\nFilters on different vports are qualified by different implicit MACs and/or\nVLANs, so shouldn\u0027t be considered equal even if their other match fields\nare identical.\n\nFixes: 7c460d9be610 (\"sfc: Extend and abstract efx_filter_spec to cover Huntington/EF10\")\nCo-developed-by: Edward Cree \u003cecree.xilinx@gmail.com\u003e\nSigned-off-by: Edward Cree \u003cecree.xilinx@gmail.com\u003e\nSigned-off-by: Pieter Jansen van Vuuren \u003cpieter.jansen-van-vuuren@amd.com\u003e\nReviewed-by: Martin Habets \u003chabetsm.xilinx@gmail.com\u003e\nLink: https://lore.kernel.org/r/20221018092841.32206-1-pieter.jansen-van-vuuren@amd.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "73b1b8d25e39a1478b3792a7075f43e053ee62c2", "tree": "cddd057bd825bc8cead9486803390d060cff23d9", "parents": [ "01f2ee7e325611524078009d70392a5d5eca0945" ], "author": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Wed Oct 19 00:30:04 2022 -0500" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Wed Oct 19 17:57:51 2022 -0500" }, "message": "cifs: update internal module number\n\nTo 2.40\n\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "01f2ee7e325611524078009d70392a5d5eca0945", "tree": "9bc7b3a7b2ddf3c66126693d53492b873f573b22", "parents": [ "8e77860c62b6eac8bb5b567efe6b8cd232d5f72f" ], "author": { "name": "Paulo Alcantara", "email": "pc@cjr.nz", "time": "Wed Oct 19 11:25:37 2022 -0300" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Wed Oct 19 17:57:51 2022 -0500" }, "message": "cifs: fix memory leaks in session setup\n\nWe were only zeroing out the ntlmssp blob but forgot to free the\nallocated buffer in the end of SMB2_sess_auth_rawntlmssp_negotiate()\nand SMB2_sess_auth_rawntlmssp_authenticate() functions.\n\nThis fixes below kmemleak reports:\n\nunreferenced object 0xffff88800ddcfc60 (size 96):\n comm \"mount.cifs\", pid 758, jiffies 4294696066 (age 42.967s)\n hex dump (first 32 bytes):\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace:\n [\u003c00000000d0beeb29\u003e] __kmalloc+0x39/0xa0\n [\u003c00000000e3834047\u003e] build_ntlmssp_smb3_negotiate_blob+0x2c/0x110 [cifs]\n [\u003c00000000e85f5ab2\u003e] SMB2_sess_auth_rawntlmssp_negotiate+0xd3/0x230 [cifs]\n [\u003c0000000080fdb897\u003e] SMB2_sess_setup+0x16c/0x2a0 [cifs]\n [\u003c000000009af320a8\u003e] cifs_setup_session+0x13b/0x370 [cifs]\n [\u003c00000000f15d5982\u003e] cifs_get_smb_ses+0x643/0xb90 [cifs]\n [\u003c00000000fe15eb90\u003e] mount_get_conns+0x63/0x3e0 [cifs]\n [\u003c00000000768aba03\u003e] mount_get_dfs_conns+0x16/0xa0 [cifs]\n [\u003c00000000cf1cf146\u003e] cifs_mount+0x1c2/0x9a0 [cifs]\n [\u003c000000000d66b51e\u003e] cifs_smb3_do_mount+0x10e/0x710 [cifs]\n [\u003c0000000077a996c5\u003e] smb3_get_tree+0xf4/0x200 [cifs]\n [\u003c0000000094dbd041\u003e] vfs_get_tree+0x23/0xc0\n [\u003c000000003a8561de\u003e] path_mount+0x2d3/0xb50\n [\u003c00000000ed5c86d6\u003e] __x64_sys_mount+0x102/0x140\n [\u003c00000000142142f3\u003e] do_syscall_64+0x3b/0x90\n [\u003c00000000e2b89731\u003e] entry_SYSCALL_64_after_hwframe+0x63/0xcd\nunreferenced object 0xffff88801437f000 (size 512):\n comm \"mount.cifs\", pid 758, jiffies 4294696067 (age 42.970s)\n hex dump (first 32 bytes):\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace:\n [\u003c00000000d0beeb29\u003e] __kmalloc+0x39/0xa0\n [\u003c00000000004f53d2\u003e] build_ntlmssp_auth_blob+0x4f/0x340 [cifs]\n [\u003c000000005f333084\u003e] SMB2_sess_auth_rawntlmssp_authenticate+0xd4/0x250 [cifs]\n [\u003c0000000080fdb897\u003e] SMB2_sess_setup+0x16c/0x2a0 [cifs]\n [\u003c000000009af320a8\u003e] cifs_setup_session+0x13b/0x370 [cifs]\n [\u003c00000000f15d5982\u003e] cifs_get_smb_ses+0x643/0xb90 [cifs]\n [\u003c00000000fe15eb90\u003e] mount_get_conns+0x63/0x3e0 [cifs]\n [\u003c00000000768aba03\u003e] mount_get_dfs_conns+0x16/0xa0 [cifs]\n [\u003c00000000cf1cf146\u003e] cifs_mount+0x1c2/0x9a0 [cifs]\n [\u003c000000000d66b51e\u003e] cifs_smb3_do_mount+0x10e/0x710 [cifs]\n [\u003c0000000077a996c5\u003e] smb3_get_tree+0xf4/0x200 [cifs]\n [\u003c0000000094dbd041\u003e] vfs_get_tree+0x23/0xc0\n [\u003c000000003a8561de\u003e] path_mount+0x2d3/0xb50\n [\u003c00000000ed5c86d6\u003e] __x64_sys_mount+0x102/0x140\n [\u003c00000000142142f3\u003e] do_syscall_64+0x3b/0x90\n [\u003c00000000e2b89731\u003e] entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nFixes: a4e430c8c8ba (\"cifs: replace kfree() with kfree_sensitive() for sensitive data\")\nSigned-off-by: Paulo Alcantara (SUSE) \u003cpc@cjr.nz\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "8e77860c62b6eac8bb5b567efe6b8cd232d5f72f", "tree": "cddd5d8128c02ebe156070c0767a90aaf70a3baf", "parents": [ "096bbeec7bd6fb683831a9ca4850a6b6a3f04740" ], "author": { "name": "Ronnie Sahlberg", "email": "lsahlber@redhat.com", "time": "Tue Oct 18 17:39:10 2022 +1000" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Wed Oct 19 17:57:41 2022 -0500" }, "message": "cifs: drop the lease for cached directories on rmdir or rename\n\nWhen we delete or rename a directory we must also drop any cached lease we have\non the directory.\n\nFixes: a350d6e73f5e (\"cifs: enable caching of directories for which a lease is held\")\nReviewed-by: Paulo Alcantara (SUSE) \u003cpc@cjr.nz\u003e\nSigned-off-by: Ronnie Sahlberg \u003clsahlber@redhat.com\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "d753a0501996600e06e7df5f53959670835e91f2", "tree": "319859252c544902bb60c0f37b248ec08a7d0c30", "parents": [ "a1a824f448ba96c610b85288d844adc9f781828e", "96df8360dbb435cc69f7c3c8db44bf8b1c24cd7b" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 19 15:45:54 2022 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 19 15:45:54 2022 -0700" }, "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf\n\nPablo Neira Ayuso says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nNetfilter fixes for net\n\n1) Missing flowi uid field in nft_fib expression, from Guillaume Nault.\n This is broken since the creation of the fib expression.\n\n2) Relax sanity check to fix bogus EINVAL error when deleting elements\n belonging set intervals. Broken since 6.0-rc.\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf:\n netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements\n netfilter: rpfilter/fib: Set -\u003eflowic_uid correctly for user namespaces.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://lore.kernel.org/r/20221019065225.1006344-1-pablo@netfilter.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "a1a824f448ba96c610b85288d844adc9f781828e", "tree": "1e2518d3a7145f928721a26ef4075dce4d553414", "parents": [ "6109ecbfd10475309d3e5a1a39bf167547da878e" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Tue Oct 18 16:13:10 2022 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 19 13:08:30 2022 -0700" }, "message": "genetlink: fix kdoc warnings\n\nAddress a bunch of kdoc warnings:\n\ninclude/net/genetlink.h:81: warning: Function parameter or member \u0027module\u0027 not described in \u0027genl_family\u0027\ninclude/net/genetlink.h:243: warning: expecting prototype for struct genl_info. Prototype was for struct genl_dumpit_info instead\ninclude/net/genetlink.h:419: warning: Function parameter or member \u0027net\u0027 not described in \u0027genlmsg_unicast\u0027\ninclude/net/genetlink.h:438: warning: expecting prototype for gennlmsg_data(). Prototype was for genlmsg_data() instead\ninclude/net/genetlink.h:244: warning: Function parameter or member \u0027op\u0027 not described in \u0027genl_dumpit_info\u0027\n\nLink: https://lore.kernel.org/r/20221018231310.1040482-1-kuba@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "16bbdfe5fb0e78e0acb13e45fc127e9a296913f2", "tree": "46e04a0069bf0249e2ce920d815c8af2f6401bdd", "parents": [ "5c61795ea97c170347c5c4af0c159bd877b8af71" ], "author": { "name": "Harshit Mogalapalli", "email": "harshit.m.mogalapalli@oracle.com", "time": "Wed Oct 19 10:12:18 2022 -0700" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Wed Oct 19 12:33:33 2022 -0700" }, "message": "io_uring/msg_ring: Fix NULL pointer dereference in io_msg_send_fd()\n\nSyzkaller produced the below call trace:\n\n BUG: KASAN: null-ptr-deref in io_msg_ring+0x3cb/0x9f0\n Write of size 8 at addr 0000000000000070 by task repro/16399\n\n CPU: 0 PID: 16399 Comm: repro Not tainted 6.1.0-rc1 #28\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.11.0-2.el7\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0xcd/0x134\n ? io_msg_ring+0x3cb/0x9f0\n kasan_report+0xbc/0xf0\n ? io_msg_ring+0x3cb/0x9f0\n kasan_check_range+0x140/0x190\n io_msg_ring+0x3cb/0x9f0\n ? io_msg_ring_prep+0x300/0x300\n io_issue_sqe+0x698/0xca0\n io_submit_sqes+0x92f/0x1c30\n __do_sys_io_uring_enter+0xae4/0x24b0\n....\n RIP: 0033:0x7f2eaf8f8289\n RSP: 002b:00007fff40939718 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa\n RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2eaf8f8289\n RDX: 0000000000000000 RSI: 0000000000006f71 RDI: 0000000000000004\n RBP: 00007fff409397a0 R08: 0000000000000000 R09: 0000000000000039\n R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004006d0\n R13: 00007fff40939880 R14: 0000000000000000 R15: 0000000000000000\n \u003c/TASK\u003e\n Kernel panic - not syncing: panic_on_warn set ...\n\nWe don\u0027t have a NULL check on file_ptr in io_msg_send_fd() function,\nso when file_ptr is NUL src_file is also NULL and get_file()\ndereferences a NULL pointer and leads to above crash.\n\nAdd a NULL check to fix this issue.\n\nFixes: e6130eba8a84 (\"io_uring: add support for passing fixed file descriptors\")\nReported-by: syzkaller \u003csyzkaller@googlegroups.com\u003e\nSigned-off-by: Harshit Mogalapalli \u003charshit.m.mogalapalli@oracle.com\u003e\nLink: https://lore.kernel.org/r/20221019171218.1337614-1-harshit.m.mogalapalli@oracle.com\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "64d23ff38ac9ea822c9810b60a616e39e2c2c82d", "tree": "2f61067bba9144a677849b335d2dedf7f1cfafb6", "parents": [ "9abf2313adc1ca1b6180c508c25f22f9395cc780" ], "author": { "name": "Robin Murphy", "email": "robin.murphy@arm.com", "time": "Tue Oct 18 14:14:04 2022 +0100" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Wed Oct 19 20:27:31 2022 +0200" }, "message": "ACPI: scan: Fix DMA range assignment\n\nAssigning the device\u0027s dma_range_map from the iterator variable after\nthe loop means it always points to the empty terminator at the end of\nthe map, which is not what we want. Similarly, freeing the iterator on\nerror when it points to somwhere in the middle of the allocated array\nwon\u0027t work either. Fix this.\n\nFixes: bf2ee8d0c385 (\"ACPI: scan: Support multiple DMA windows with different offsets\")\nSigned-off-by: Robin Murphy \u003crobin.murphy@arm.com\u003e\nReviewed-by: Jianmin Lv \u003clvjianmin@loongson.cn\u003e\nTested-by: Jeremy Linton \u003cjeremy.linton@arm.com\u003e\nTested-by: Yicong Yang \u003cyangyicong@hisilicon.com\u003e\nReviewed-by: Lorenzo Pieralisi \u003clpieralisi@kernel.org\u003e\nSigned-off-by: Rafael J. Wysocki \u003crafael.j.wysocki@intel.com\u003e\n" }, { "commit": "096bbeec7bd6fb683831a9ca4850a6b6a3f04740", "tree": "47bc48af4029615cf5093d7730416eed2558622c", "parents": [ "30b2d7f8f13664655480d6af45f60270b3eb6736" ], "author": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Sat Oct 15 17:02:30 2022 -0500" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Wed Oct 19 10:06:23 2022 -0500" }, "message": "smb3: interface count displayed incorrectly\n\nThe \"Server interfaces\" count in /proc/fs/cifs/DebugData increases\nas the interfaces are requeried, rather than being reset to the new\nvalue. This could cause a problem if the server disabled\nmultichannel as the iface_count is checked in try_adding_channels\nto see if multichannel still supported.\n\nAlso fixes a coverity warning:\n\nAddresses-Coverity: 1526374 (\"Concurrent data access violations (MISSING_LOCK)\")\nCc: \u003cstable@vger.kernel.org\u003e\nReviewed-by: Bharath SM \u003cbharathsm@microsoft.com\u003e\nReviewed-by: Shyam Prasad N \u003csprasad@microsoft.com\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "abe3c631447dcd1ba7af972fe6f054bee6f136fa", "tree": "18195112f8c26e0f9a61f02c90ffad90e4e613fd", "parents": [ "9abf2313adc1ca1b6180c508c25f22f9395cc780" ], "author": { "name": "GONG, Ruiqi", "email": "gongruiqi1@huawei.com", "time": "Wed Oct 19 10:57:10 2022 +0800" }, "committer": { "name": "Paul Moore", "email": "paul@paul-moore.com", "time": "Wed Oct 19 09:55:53 2022 -0400" }, "message": "selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()\n\nThe following warning was triggered on a hardware environment:\n\n SELinux: Converting 162 SID table entries...\n BUG: sleeping function called from invalid context at\n __might_sleep+0x60/0x74 0x0\n in_atomic(): 1, irqs_disabled(): 128, non_block: 0, pid: 5943, name: tar\n CPU: 7 PID: 5943 Comm: tar Tainted: P O 5.10.0 #1\n Call trace:\n dump_backtrace+0x0/0x1c8\n show_stack+0x18/0x28\n dump_stack+0xe8/0x15c\n ___might_sleep+0x168/0x17c\n __might_sleep+0x60/0x74\n __kmalloc_track_caller+0xa0/0x7dc\n kstrdup+0x54/0xac\n convert_context+0x48/0x2e4\n sidtab_context_to_sid+0x1c4/0x36c\n security_context_to_sid_core+0x168/0x238\n security_context_to_sid_default+0x14/0x24\n inode_doinit_use_xattr+0x164/0x1e4\n inode_doinit_with_dentry+0x1c0/0x488\n selinux_d_instantiate+0x20/0x34\n security_d_instantiate+0x70/0xbc\n d_splice_alias+0x4c/0x3c0\n ext4_lookup+0x1d8/0x200 [ext4]\n __lookup_slow+0x12c/0x1e4\n walk_component+0x100/0x200\n path_lookupat+0x88/0x118\n filename_lookup+0x98/0x130\n user_path_at_empty+0x48/0x60\n vfs_statx+0x84/0x140\n vfs_fstatat+0x20/0x30\n __se_sys_newfstatat+0x30/0x74\n __arm64_sys_newfstatat+0x1c/0x2c\n el0_svc_common.constprop.0+0x100/0x184\n do_el0_svc+0x1c/0x2c\n el0_svc+0x20/0x34\n el0_sync_handler+0x80/0x17c\n el0_sync+0x13c/0x140\n SELinux: Context system_u:object_r:pssp_rsyslog_log_t:s0:c0 is\n not valid (left unmapped).\n\nIt was found that within a critical section of spin_lock_irqsave in\nsidtab_context_to_sid(), convert_context() (hooked by\nsidtab_convert_params.func) might cause the process to sleep via\nallocating memory with GFP_KERNEL, which is problematic.\n\nAs Ondrej pointed out [1], convert_context()/sidtab_convert_params.func\nhas another caller sidtab_convert_tree(), which is okay with GFP_KERNEL.\nTherefore, fix this problem by adding a gfp_t argument for\nconvert_context()/sidtab_convert_params.func and pass GFP_KERNEL/_ATOMIC\nproperly in individual callers.\n\nCc: stable@vger.kernel.org\nLink: https://lore.kernel.org/all/20221018120111.1474581-1-gongruiqi1@huawei.com/ [1]\nReported-by: Tan Ninghao \u003ctanninghao1@huawei.com\u003e\nFixes: ee1a84fdfeed (\"selinux: overhaul sidtab to fix bug and improve performance\")\nSigned-off-by: GONG, Ruiqi \u003cgongruiqi1@huawei.com\u003e\nReviewed-by: Ondrej Mosnacek \u003comosnace@redhat.com\u003e\n[PM: wrap long BUG() output lines, tweak subject line]\nSigned-off-by: Paul Moore \u003cpaul@paul-moore.com\u003e\n" }, { "commit": "6109ecbfd10475309d3e5a1a39bf167547da878e", "tree": "cdb037f5c481254bb1f306e9bef5085a194b0e45", "parents": [ "e38cf36695c9473f3d0a08bb9f27e33a8dc0ff53", "fd602f5cb52e336d8c06f8da2d80c76ce2905030" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 19 14:04:36 2022 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 19 14:04:36 2022 +0100" }, "message": "Merge branch \u0027qdisc-ingress-success\u0027\n\nPaul Blakey says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nnet: Fix return value of qdisc ingress handling on success\n\nFix patch + self-test with the currently broken scenario.\n\nv4-\u003ev3:\n Removed new line in self test and rebase (Paolo).\n\nv2-\u003ev3:\n Added DROP return to TC_ACT_SHOT case (Cong).\n\nv1-\u003ev2:\n Changed blamed commit\n Added self-test\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "fd602f5cb52e336d8c06f8da2d80c76ce2905030", "tree": "cdb037f5c481254bb1f306e9bef5085a194b0e45", "parents": [ "672e97ef689a38cb20c2cc6a1814298fea34461e" ], "author": { "name": "Paul Blakey", "email": "paulb@nvidia.com", "time": "Tue Oct 18 10:34:39 2022 +0300" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 19 14:04:36 2022 +0100" }, "message": "selftests: add selftest for chaining of tc ingress handling to egress\n\nThis test runs a simple ingress tc setup between two veth pairs,\nthen adds a egress-\u003eingress rule to test the chaining of tc ingress\npipeline to tc egress piepline.\n\nSigned-off-by: Paul Blakey \u003cpaulb@nvidia.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "672e97ef689a38cb20c2cc6a1814298fea34461e", "tree": "eb303d0347ae12a22a8ed0c6808f3d96fd530dee", "parents": [ "e38cf36695c9473f3d0a08bb9f27e33a8dc0ff53" ], "author": { "name": "Paul Blakey", "email": "paulb@nvidia.com", "time": "Tue Oct 18 10:34:38 2022 +0300" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 19 14:04:36 2022 +0100" }, "message": "net: Fix return value of qdisc ingress handling on success\n\nCurrently qdisc ingress handling (sch_handle_ingress()) doesn\u0027t\nset a return value and it is left to the old return value of\nthe caller (__netif_receive_skb_core()) which is RX drop, so if\nthe packet is consumed, caller will stop and return this value\nas if the packet was dropped.\n\nThis causes a problem in the kernel tcp stack when having a\negress tc rule forwarding to a ingress tc rule.\nThe tcp stack sending packets on the device having the egress rule\nwill see the packets as not successfully transmitted (although they\nactually were), will not advance it\u0027s internal state of sent data,\nand packets returning on such tcp stream will be dropped by the tcp\nstack with reason ack-of-unsent-data. See reproduction in [0] below.\n\nFix that by setting the return value to RX success if\nthe packet was handled successfully.\n\n[0] Reproduction steps:\n $ ip link add veth1 type veth peer name peer1\n $ ip link add veth2 type veth peer name peer2\n $ ifconfig peer1 5.5.5.6/24 up\n $ ip netns add ns0\n $ ip link set dev peer2 netns ns0\n $ ip netns exec ns0 ifconfig peer2 5.5.5.5/24 up\n $ ifconfig veth2 0 up\n $ ifconfig veth1 0 up\n\n #ingress forwarding veth1 \u003c-\u003e veth2\n $ tc qdisc add dev veth2 ingress\n $ tc qdisc add dev veth1 ingress\n $ tc filter add dev veth2 ingress prio 1 proto all flower \\\n action mirred egress redirect dev veth1\n $ tc filter add dev veth1 ingress prio 1 proto all flower \\\n action mirred egress redirect dev veth2\n\n #steal packet from peer1 egress to veth2 ingress, bypassing the veth pipe\n $ tc qdisc add dev peer1 clsact\n $ tc filter add dev peer1 egress prio 20 proto ip flower \\\n action mirred ingress redirect dev veth1\n\n #run iperf and see connection not running\n $ iperf3 -s\u0026\n $ ip netns exec ns0 iperf3 -c 5.5.5.6 -i 1\n\n #delete egress rule, and run again, now should work\n $ tc filter del dev peer1 egress\n $ ip netns exec ns0 iperf3 -c 5.5.5.6 -i 1\n\nFixes: f697c3e8b35c (\"[NET]: Avoid unnecessary cloning for ingress filtering\")\nSigned-off-by: Paul Blakey \u003cpaulb@nvidia.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e38cf36695c9473f3d0a08bb9f27e33a8dc0ff53", "tree": "dde5d70f99ffb7429ce32c5c0f9eae2c18d4a342", "parents": [ "7b55c2ed2ba061b65fc51d7a18d37e017085997f", "2a3fc78210b9f0e85372a2435368962009f480fc" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 19 13:47:09 2022 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 19 13:47:09 2022 +0100" }, "message": "Merge branch \u0027qdisc-null-deref\u0027\n\nZhengchao Shao says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nnet: fix null pointer access issue in qdisc\n\nThese three patches fix the same type of problem. Set the default qdisc,\nand then construct an init failure scenario when the dev qdisc is\nconfigured on mqprio to trigger the reset process. NULL pointer access\nmay occur during the reset process.\n\n---\nv2: for fq_codel, revert the patch\n---\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "2a3fc78210b9f0e85372a2435368962009f480fc", "tree": "dde5d70f99ffb7429ce32c5c0f9eae2c18d4a342", "parents": [ "f5ffa3b1197395501b72c10b35518bf58ef24475" ], "author": { "name": "Zhengchao Shao", "email": "shaozhengchao@huawei.com", "time": "Tue Oct 18 14:32:01 2022 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 19 13:47:09 2022 +0100" }, "message": "net: sched: sfb: fix null pointer access issue when sfb_init() fails\n\nWhen the default qdisc is sfb, if the qdisc of dev_queue fails to be\ninited during mqprio_init(), sfb_reset() is invoked to clear resources.\nIn this case, the q-\u003eqdisc is NULL, and it will cause gpf issue.\n\nThe process is as follows:\nqdisc_create_dflt()\n\tsfb_init()\n\t\ttcf_block_get() ---\u003efailed, q-\u003eqdisc is NULL\n\t...\n\tqdisc_put()\n\t\t...\n\t\tsfb_reset()\n\t\t\tqdisc_reset(q-\u003eqdisc) ---\u003eq-\u003eqdisc is NULL\n\t\t\t\tops \u003d qdisc-\u003eops\n\nThe following is the Call Trace information:\ngeneral protection fault, probably for non-canonical address\n0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN\nKASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f]\nRIP: 0010:qdisc_reset+0x2b/0x6f0\nCall Trace:\n\u003cTASK\u003e\nsfb_reset+0x37/0xd0\nqdisc_reset+0xed/0x6f0\nqdisc_destroy+0x82/0x4c0\nqdisc_put+0x9e/0xb0\nqdisc_create_dflt+0x2c3/0x4a0\nmqprio_init+0xa71/0x1760\nqdisc_create+0x3eb/0x1000\ntc_modify_qdisc+0x408/0x1720\nrtnetlink_rcv_msg+0x38e/0xac0\nnetlink_rcv_skb+0x12d/0x3a0\nnetlink_unicast+0x4a2/0x740\nnetlink_sendmsg+0x826/0xcc0\nsock_sendmsg+0xc5/0x100\n____sys_sendmsg+0x583/0x690\n___sys_sendmsg+0xe8/0x160\n__sys_sendmsg+0xbf/0x160\ndo_syscall_64+0x35/0x80\nentry_SYSCALL_64_after_hwframe+0x46/0xb0\nRIP: 0033:0x7f2164122d04\n\u003c/TASK\u003e\n\nFixes: e13e02a3c68d (\"net_sched: SFB flow scheduler\")\nSigned-off-by: Zhengchao Shao \u003cshaozhengchao@huawei.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f5ffa3b1197395501b72c10b35518bf58ef24475", "tree": "656555e0d9a2b09063ebed6d79b9e2d90bc0a7d6", "parents": [ "51f9a8921ceacd7bf0d3f47fa867a64988ba1dcb" ], "author": { "name": "Zhengchao Shao", "email": "shaozhengchao@huawei.com", "time": "Tue Oct 18 14:32:00 2022 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 19 13:47:09 2022 +0100" }, "message": "Revert \"net: sched: fq_codel: remove redundant resource cleanup in fq_codel_init()\"\n\nThis reverts commit 494f5063b86cd6e972cb41a27e083c9a3664319d.\n\nWhen the default qdisc is fq_codel, if the qdisc of dev_queue fails to be\ninited during mqprio_init(), fq_codel_reset() is invoked to clear\nresources. In this case, the flow is NULL, and it will cause gpf issue.\n\nThe process is as follows:\nqdisc_create_dflt()\n\tfq_codel_init()\n\t\t...\n\t\tq-\u003eflows_cnt \u003d 1024;\n\t\t...\n\t\tq-\u003eflows \u003d kvcalloc(...) ---\u003efailed, q-\u003eflows is NULL\n\t...\n\tqdisc_put()\n\t\t...\n\t\tfq_codel_reset()\n\t\t\t...\n\t\t\tflow \u003d q-\u003eflows + i ---\u003eq-\u003eflows is NULL\n\nThe following is the Call Trace information:\ngeneral protection fault, probably for non-canonical address\n0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN\nKASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]\nRIP: 0010:fq_codel_reset+0x14d/0x350\nCall Trace:\n\u003cTASK\u003e\nqdisc_reset+0xed/0x6f0\nqdisc_destroy+0x82/0x4c0\nqdisc_put+0x9e/0xb0\nqdisc_create_dflt+0x2c3/0x4a0\nmqprio_init+0xa71/0x1760\nqdisc_create+0x3eb/0x1000\ntc_modify_qdisc+0x408/0x1720\nrtnetlink_rcv_msg+0x38e/0xac0\nnetlink_rcv_skb+0x12d/0x3a0\nnetlink_unicast+0x4a2/0x740\nnetlink_sendmsg+0x826/0xcc0\nsock_sendmsg+0xc5/0x100\n____sys_sendmsg+0x583/0x690\n___sys_sendmsg+0xe8/0x160\n__sys_sendmsg+0xbf/0x160\ndo_syscall_64+0x35/0x80\nentry_SYSCALL_64_after_hwframe+0x46/0xb0\nRIP: 0033:0x7fd272b22d04\n\u003c/TASK\u003e\n\nSigned-off-by: Zhengchao Shao \u003cshaozhengchao@huawei.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "51f9a8921ceacd7bf0d3f47fa867a64988ba1dcb", "tree": "fe87a0804765a7eaa0462cba3c0944b8ed54d18b", "parents": [ "7b55c2ed2ba061b65fc51d7a18d37e017085997f" ], "author": { "name": "Zhengchao Shao", "email": "shaozhengchao@huawei.com", "time": "Tue Oct 18 14:31:59 2022 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 19 13:47:09 2022 +0100" }, "message": "net: sched: cake: fix null pointer access issue when cake_init() fails\n\nWhen the default qdisc is cake, if the qdisc of dev_queue fails to be\ninited during mqprio_init(), cake_reset() is invoked to clear\nresources. In this case, the tins is NULL, and it will cause gpf issue.\n\nThe process is as follows:\nqdisc_create_dflt()\n\tcake_init()\n\t\tq-\u003etins \u003d kvcalloc(...) ---\u003efailed, q-\u003etins is NULL\n\t...\n\tqdisc_put()\n\t\t...\n\t\tcake_reset()\n\t\t\t...\n\t\t\tcake_dequeue_one()\n\t\t\t\tb \u003d \u0026q-\u003etins[...] ---\u003eq-\u003etins is NULL\n\nThe following is the Call Trace information:\ngeneral protection fault, probably for non-canonical address\n0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN\nKASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\nRIP: 0010:cake_dequeue_one+0xc9/0x3c0\nCall Trace:\n\u003cTASK\u003e\ncake_reset+0xb1/0x140\nqdisc_reset+0xed/0x6f0\nqdisc_destroy+0x82/0x4c0\nqdisc_put+0x9e/0xb0\nqdisc_create_dflt+0x2c3/0x4a0\nmqprio_init+0xa71/0x1760\nqdisc_create+0x3eb/0x1000\ntc_modify_qdisc+0x408/0x1720\nrtnetlink_rcv_msg+0x38e/0xac0\nnetlink_rcv_skb+0x12d/0x3a0\nnetlink_unicast+0x4a2/0x740\nnetlink_sendmsg+0x826/0xcc0\nsock_sendmsg+0xc5/0x100\n____sys_sendmsg+0x583/0x690\n___sys_sendmsg+0xe8/0x160\n__sys_sendmsg+0xbf/0x160\ndo_syscall_64+0x35/0x80\nentry_SYSCALL_64_after_hwframe+0x46/0xb0\nRIP: 0033:0x7f89e5122d04\n\u003c/TASK\u003e\n\nFixes: 046f6fd5daef (\"sched: Add Common Applications Kept Enhanced (cake) qdisc\")\nSigned-off-by: Zhengchao Shao \u003cshaozhengchao@huawei.com\u003e\nAcked-by: Toke Høiland-Jørgensen \u003ctoke@toke.dk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "7b55c2ed2ba061b65fc51d7a18d37e017085997f", "tree": "7bb11d107a408320999cb8c48534aecfa0ac0ce4", "parents": [ "aa1d7e1267c12e07d979aa34c613716a89029db2" ], "author": { "name": "Manank Patel", "email": "pmanank200502@gmail.com", "time": "Tue Oct 18 11:03:18 2022 +0530" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 19 13:43:41 2022 +0100" }, "message": "ethernet: marvell: octeontx2 Fix resource not freed after malloc\n\nfix rxsc and txsc not getting freed before going out of scope\n\nFixes: c54ffc73601c (\"octeontx2-pf: mcs: Introduce MACSEC hardware offloading\")\nSigned-off-by: Manank Patel \u003cpmanank200502@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "eb1d39260ee6477e2971f81cec18ba5f6583259d", "tree": "4081129ab0ca1415e8ffad09c4a973ad4b58c7df", "parents": [ "9abf2313adc1ca1b6180c508c25f22f9395cc780" ], "author": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Tue Oct 18 19:34:03 2022 +0200" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Wed Oct 19 13:28:30 2022 +0200" }, "message": "ACPI: PCI: Fix device reference counting in acpi_get_pci_dev()\n\nCommit 63f534b8bad9 (\"ACPI: PCI: Rework acpi_get_pci_dev()\") failed\nto reference count the device returned by acpi_get_pci_dev() as\nexpected by its callers which in some cases may cause device objects\nto be dropped prematurely.\n\nAdd the missing get_device() to acpi_get_pci_dev().\n\nFixes: 63f534b8bad9 (\"ACPI: PCI: Rework acpi_get_pci_dev()\")\nReported-by: Ville Syrjälä \u003cville.syrjala@linux.intel.com\u003e\nSigned-off-by: Rafael J. Wysocki \u003crafael.j.wysocki@intel.com\u003e\n" }, { "commit": "01f2cf53844b01e691516b465df1b6ab01b03230", "tree": "61880f8c6964143b2a54749808fa68734243c771", "parents": [ "7b476affcccfc7e644541a0a719f53fc7bd34c53" ], "author": { "name": "Christian König", "email": "christian.koenig@amd.com", "time": "Fri Oct 07 10:59:58 2022 +0200" }, "committer": { "name": "Christian König", "email": "christian.koenig@amd.com", "time": "Wed Oct 19 12:45:00 2022 +0200" }, "message": "drm/amdgpu: use DRM_SCHED_FENCE_DONT_PIPELINE for VM updates\n\nMake sure that we always have a CPU round trip to let the submission\ncode correctly decide if a TLB flush is necessary or not.\n\nSigned-off-by: Christian König \u003cchristian.koenig@amd.com\u003e\nBug: https://gitlab.freedesktop.org/drm/amd/-/issues/2113#note_1579296\nReviewed-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nAcked-by: Luben Tuikov \u003cluben.tuikov@amd.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20221014081553.114899-2-christian.koenig@amd.com\n" }, { "commit": "94f5a06884074dcd99606d7b329e133ee65ea6ad", "tree": "f45a99916e583dd8c721b8084057993686e3455c", "parents": [ "ddd2b8de9f85b388925e7dc46b3890fc1a0d8d24" ], "author": { "name": "Daniel Wagner", "email": "dwagner@suse.de", "time": "Fri Oct 07 09:29:34 2022 +0200" }, "committer": { "name": "Christoph Hellwig", "email": "hch@lst.de", "time": "Wed Oct 19 12:43:13 2022 +0200" }, "message": "nvmet: fix invalid memory reference in nvmet_subsys_attr_qid_max_show\n\nThe item passed into nvmet_subsys_attr_qid_max_show is not a member of\nstruct nvmet_port, it is part of nvmet_subsys. Hence, don\u0027t try to\ndereference it as struct nvme_ctrl pointer.\n\nFixes: 3e980f5995e0 (\"nvmet: Expose max queues to configfs\")\nReported-by: Shinichiro Kawasaki \u003cshinichiro.kawasaki@wdc.com\u003e\nLink: https://lore.kernel.org/r/20220913064203.133536-1-dwagner@suse.de\nSigned-off-by: Daniel Wagner \u003cdwagner@suse.de\u003e\nReviewed-by: Hannes Reinecke \u003chare@suse.de\u003e\nAcked-by: Sagi Grimberg \u003csagi@grimberg.me\u003e\nSigned-off-by: Christoph Hellwig \u003chch@lst.de\u003e\n" }, { "commit": "ddd2b8de9f85b388925e7dc46b3890fc1a0d8d24", "tree": "565761b751fd1423e3ab77401e274806de63263c", "parents": [ "c94b7f9bab22ac504f9153767676e659988575ad" ], "author": { "name": "Sagi Grimberg", "email": "sagi@grimberg.me", "time": "Wed Sep 28 09:39:10 2022 +0300" }, "committer": { "name": "Christoph Hellwig", "email": "hch@lst.de", "time": "Wed Oct 19 12:43:13 2022 +0200" }, "message": "nvmet: fix workqueue MEM_RECLAIM flushing dependency\n\nThe keep alive timer needs to stay on nvmet_wq, and not\nmodified to reschedule on the system_wq.\n\nThis fixes a warning:\n------------[ cut here ]------------\nworkqueue: WQ_MEM_RECLAIM\nnvmet-wq:nvmet_rdma_release_queue_work [nvmet_rdma] is flushing\n!WQ_MEM_RECLAIM events:nvmet_keep_alive_timer [nvmet]\nWARNING: CPU: 3 PID: 1086 at kernel/workqueue.c:2628\ncheck_flush_dependency+0x16c/0x1e0\n\nReported-by: Yi Zhang \u003cyi.zhang@redhat.com\u003e\nFixes: 8832cf922151 (\"nvmet: use a private workqueue instead of the system workqueue\")\nSigned-off-by: Sagi Grimberg \u003csagi@grimberg.me\u003e\nReviewed-by: Chaitanya Kulkarni \u003ckch@nvidia.com\u003e\nSigned-off-by: Christoph Hellwig \u003chch@lst.de\u003e\n" }, { "commit": "c94b7f9bab22ac504f9153767676e659988575ad", "tree": "2739123e390f960cf7bfb25bc98db5667d26b79e", "parents": [ "6b8cf94005187952f794c0c4ed3920a1e8accfa3" ], "author": { "name": "Serge Semin", "email": "Sergey.Semin@baikalelectronics.ru", "time": "Tue Oct 18 17:33:52 2022 +0200" }, "committer": { "name": "Christoph Hellwig", "email": "hch@lst.de", "time": "Wed Oct 19 12:43:13 2022 +0200" }, "message": "nvme-hwmon: kmalloc the NVME SMART log buffer\n\nRecent commit 52fde2c07da6 (\"nvme: set dma alignment to dword\") has\ncaused a regression on our platform.\n\nIt turned out that the nvme_get_log() method invocation caused the\nnvme_hwmon_data structure instance corruption. In particular the\nnvme_hwmon_data.ctrl pointer was overwritten either with zeros or with\ngarbage. After some research we discovered that the problem happened\neven before the actual NVME DMA execution, but during the buffer mapping.\nSince our platform is DMA-noncoherent, the mapping implied the cache-line\ninvalidations or write-backs depending on the DMA-direction parameter.\nIn case of the NVME SMART log getting the DMA was performed\nfrom-device-to-memory, thus the cache-invalidation was activated during\nthe buffer mapping. Since the log-buffer isn\u0027t cache-line aligned, the\ncache-invalidation caused the neighbour data to be discarded. The\nneighbouring data turned to be the data surrounding the buffer in the\nframework of the nvme_hwmon_data structure.\n\nIn order to fix that we need to make sure that the whole log-buffer is\ndefined within the cache-line-aligned memory region so the\ncache-invalidation procedure wouldn\u0027t involve the adjacent data. One of\nthe option to guarantee that is to kmalloc the DMA-buffer [1]. Seeing the\nrest of the NVME core driver prefer that method it has been chosen to fix\nthis problem too.\n\nNote after a deeper researches we found out that the denoted commit wasn\u0027t\na root cause of the problem. It just revealed the invalidity by activating\nthe DMA-based NVME SMART log getting performed in the framework of the\nNVME hwmon driver. The problem was here since the initial commit of the\ndriver.\n\n[1] Documentation/core-api/dma-api-howto.rst\n\nFixes: 400b6a7b13a3 (\"nvme: Add hardware monitoring support\")\nSigned-off-by: Serge Semin \u003cSergey.Semin@baikalelectronics.ru\u003e\nSigned-off-by: Christoph Hellwig \u003chch@lst.de\u003e\n" }, { "commit": "6b8cf94005187952f794c0c4ed3920a1e8accfa3", "tree": "a11e6ba1ce89a371e46394c033a5a35349e602f9", "parents": [ "6ff5ba97960821fb872ad981eb30374f5cee1fd9" ], "author": { "name": "Christoph Hellwig", "email": "hch@lst.de", "time": "Tue Oct 18 16:55:55 2022 +0200" }, "committer": { "name": "Christoph Hellwig", "email": "hch@lst.de", "time": "Wed Oct 19 12:42:58 2022 +0200" }, "message": "nvme-hwmon: consistently ignore errors from nvme_hwmon_init\n\nAn NVMe controller works perfectly fine even when the hwmon\ninitialization fails. Stop returning errors that do not come from a\ncontroller reset from nvme_hwmon_init to handle this case consistently.\n\nSigned-off-by: Christoph Hellwig \u003chch@lst.de\u003e\nReviewed-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nReviewed-by: Serge Semin \u003cfancer.lancer@gmail.com\u003e\n" }, { "commit": "7b476affcccfc7e644541a0a719f53fc7bd34c53", "tree": "ff498887be93406d2304f22a729173c083ddc860", "parents": [ "4190e8bbcbc77a9c36724681801cedc5229e7fc2" ], "author": { "name": "Christian König", "email": "christian.koenig@amd.com", "time": "Fri Oct 07 09:51:13 2022 +0200" }, "committer": { "name": "Christian König", "email": "christian.koenig@amd.com", "time": "Wed Oct 19 12:42:51 2022 +0200" }, "message": "drm/sched: add DRM_SCHED_FENCE_DONT_PIPELINE flag\n\nSetting this flag on a scheduler fence prevents pipelining of jobs\ndepending on this fence. In other words we always insert a full CPU\nround trip before dependent jobs are pushed to the pipeline.\n\nSigned-off-by: Christian König \u003cchristian.koenig@amd.com\u003e\nBug: https://gitlab.freedesktop.org/drm/amd/-/issues/2113#note_1579296\nReviewed-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nAcked-by: Luben Tuikov \u003cluben.tuikov@amd.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20221014081553.114899-1-christian.koenig@amd.com\n" }, { "commit": "6ff5ba97960821fb872ad981eb30374f5cee1fd9", "tree": "af1bb9386591cfb11b44e7b617939d1b2f4d8ac0", "parents": [ "d622f8477a8018974f8df961440dca58224f9c6b" ], "author": { "name": "Christoph Hellwig", "email": "hch@lst.de", "time": "Tue Oct 18 16:59:16 2022 +0200" }, "committer": { "name": "Christoph Hellwig", "email": "hch@lst.de", "time": "Wed Oct 19 12:42:43 2022 +0200" }, "message": "nvme: add Guenther as nvme-hwmon maintainer\n\nGiven that non of the overall NVMe maintainers knows this code very\ndeeply it probably makes sense to add Guenther as an additional\nMAINTAINER for it.\n\nSigned-off-by: Christoph Hellwig \u003chch@lst.de\u003e\nReviewed-by: Sagi Grimberg \u003csagi@grimberg.me\u003e\nAcked-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\n" }, { "commit": "d622f8477a8018974f8df961440dca58224f9c6b", "tree": "463ce10fcf03e774d9395b66f60c09ab98bcf7db", "parents": [ "ac9b57d4e1e3ecf0122e915bbba1bd4c90ec3031" ], "author": { "name": "Russell King (Oracle)", "email": "rmk+kernel@armlinux.org.uk", "time": "Wed Oct 12 12:46:06 2022 +0100" }, "committer": { "name": "Christoph Hellwig", "email": "hch@lst.de", "time": "Wed Oct 19 10:36:39 2022 +0200" }, "message": "nvme-apple: don\u0027t limit DMA segement size\n\nNVMe uses PRPs for data transfers and has no specific limit for a single\nDMA segement. Limiting the size will cause problems because the block\nlayer assumes PRP-ish devices using a virt boundary mask don\u0027t have a\nsegment limit. And while this is true, we also really need to tell the\nDMA mapping layer about it, otherwise dma-debug will trip over it.\n\nFixes: 5bd2927aceba (\"nvme-apple: Add initial Apple SoC NVMe driver\")\nSuggested-by: Sven Peter \u003csven@svenpeter.dev\u003e\nSigned-off-by: Russell King (Oracle) \u003crmk+kernel@armlinux.org.uk\u003e\n[hch: rewrote the commit message based on the PCIe commit]\nSigned-off-by: Christoph Hellwig \u003chch@lst.de\u003e\nReviewed-by: Eric Curtin \u003cecurtin@redhat.com\u003e\nReviewed-by: Sven Peter \u003csven@svenpeter.dev\u003e\n" }, { "commit": "ac9b57d4e1e3ecf0122e915bbba1bd4c90ec3031", "tree": "fa85f916973cb451a7fb67bf69a91f4354b7d49d", "parents": [ "4739824e2d7878dcea88397a6758e31e3c5c124e" ], "author": { "name": "Xander Li", "email": "xander_li@kingston.com.tw", "time": "Tue Oct 11 04:06:42 2022 -0700" }, "committer": { "name": "Christoph Hellwig", "email": "hch@lst.de", "time": "Wed Oct 19 10:36:39 2022 +0200" }, "message": "nvme-pci: disable write zeroes on various Kingston SSD\n\nKingston SSDs do support NVMe Write_Zeroes cmd but take long time to\nprocess. The firmware version is locked by these SSDs, we can not expect\nfirmware improvement, so disable Write_Zeroes cmd.\n\nSigned-off-by: Xander Li \u003cxander_li@kingston.com.tw\u003e\nSigned-off-by: Christoph Hellwig \u003chch@lst.de\u003e\n" } ], "next": "4739824e2d7878dcea88397a6758e31e3c5c124e" }