)]}' { "log": [ { "commit": "eca631b8fe808748d7585059c4307005ca5c5820", "tree": "e4950b522bc285b15370f7cf1aa6cd2f3d2de4cb", "parents": [ "63fa605041843b50ebc8dca6483dbfa6e835c61a", "332fade75d0ecd88cd19556fce0f9cc8322de434" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Oct 14 11:19:19 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Oct 14 11:19:19 2024 -0700" }, "message": "Merge tag \u0027f2fs-6.12-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jaegeuk/f2fs\n\nPull f2fs fix from Jaegeuk Kim:\n \"An urgent fix to resolve DIO read performance regression caused by\n \u0027f2fs: fix to avoid racing in between read and OPU dio write\u0027\"\n\n* tag \u0027f2fs-6.12-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jaegeuk/f2fs:\n f2fs: allow parallel DIO reads\n" }, { "commit": "63fa605041843b50ebc8dca6483dbfa6e835c61a", "tree": "0aff9d90bafb9bb6e1d86c159aa7623d88163d34", "parents": [ "6485cf5ea253d40d507cd71253c9568c5470cd27", "ae54567eaa87fd863ab61084a3828e1c36b0ffb0" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Oct 14 11:12:09 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Oct 14 11:12:09 2024 -0700" }, "message": "Merge tag \u0027erofs-for-6.12-rc4-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/xiang/erofs\n\nPull erofs fixes from Gao Xiang:\n \"The main one fixes a syzbot issue due to the invalid inode type out of\n file-backed mounts. The others are minor cleanups without actual logic\n changes.\n\n Summary:\n\n - Make sure only regular inodes can be used for file-backed mounts\n\n - Two minor codebase cleanups\"\n\n* tag \u0027erofs-for-6.12-rc4-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/xiang/erofs:\n erofs: get rid of kaddr in `struct z_erofs_maprecorder`\n erofs: get rid of z_erofs_try_to_claim_pcluster()\n erofs: ensure regular inodes for file-backed mounts\n" }, { "commit": "6485cf5ea253d40d507cd71253c9568c5470cd27", "tree": "0bb1d8c2cfaa9cdb80bd5c3e46ee34fd5289d6ab", "parents": [ "8e929cb546ee42c9a61d24fae60605e9e3192354", "2934b12281abf4eb5f915086fd5699de5c497ccd" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Oct 13 16:35:20 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Oct 13 16:35:20 2024 -0700" }, "message": "Merge tag \u0027hid-for-linus-2024101301\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid\n\nPull HID fixes from Jiri Kosina:\n\n - fix for memory corruption regression in amd_sfh driver (Basavaraj\n Natikar)\n\n - fix for mis-reporting of BTN_TOOL_PEN and BTN_TOOL_RUBBER for AES\n sensors tools in Wacom driver (Jason Gerecke)\n\n - fix for unitialized variable use in intel-ish-hid driver\n (SurajSonawane2415)\n\n - a few device-specific quirks / device ID additions\n\n* tag \u0027hid-for-linus-2024101301\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid:\n HID: wacom: Hardcode (non-inverted) AES pens as BTN_TOOL_PEN\n HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()\n HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad\n HID: multitouch: Add support for B2402FVA track point\n HID: plantronics: Workaround for an unexcepted opposite volume key\n hid: intel-ish-hid: Fix uninitialized variable \u0027rv\u0027 in ish_fw_xfer_direct_dma\n" }, { "commit": "8e929cb546ee42c9a61d24fae60605e9e3192354", "tree": "c14c13b25d1b0faf47ee7fe56d5da1576890a556", "parents": [ "cfea70e835b9180029257d8b772c9e99c3305a9a" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Oct 13 14:33:32 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Oct 13 14:33:32 2024 -0700" }, "message": "Linux 6.12-rc3\n" }, { "commit": "cfea70e835b9180029257d8b772c9e99c3305a9a", "tree": "474fcdd36c98da1b30f9b60c281ca78937a5df50", "parents": [ "ba01565ced22c04749a6f71aa8a658d3a64734bc", "63271b7d569fbe924bccc7dadc17d3d07a4e5f7a" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Oct 13 10:52:39 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Oct 13 10:52:39 2024 -0700" }, "message": "Merge tag \u00276.12-rc2-cifs-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6\n\nPull smb client fixes from Steve French:\n \"Two fixes for Windows symlink handling\"\n\n* tag \u00276.12-rc2-cifs-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6:\n cifs: Fix creating native symlinks pointing to current or parent directory\n cifs: Improve creating native symlinks pointing to directory\n" }, { "commit": "ba01565ced22c04749a6f71aa8a658d3a64734bc", "tree": "935cc1198d1fd676238b5fe16baf2fe33ae1fc61", "parents": [ "f683c9b134f2b0cb5d917296a142db1211468a78", "faa34159d08089036b6119c85e279fb36abb8bb5" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Oct 13 09:21:36 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Oct 13 09:21:36 2024 -0700" }, "message": "Merge tag \u0027usb-6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb\n\nPull USB fixes from Greg KH:\n \"Here are some small USB fixes for some reported problems for 6.12-rc3.\n Include in here is:\n\n - fix for yurex driver that was caused in -rc1\n\n - build error fix for usbg network filesystem code\n\n - onboard_usb_dev build fix\n\n - dwc3 driver fixes for reported errors\n\n - gadget driver fix\n\n - new USB storage driver quirk\n\n - xhci resume bugfix\n\n All of these have been in linux-next for a while with no reported\n issues\"\n\n* tag \u0027usb-6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb:\n net/9p/usbg: Fix build error\n USB: yurex: kill needless initialization in yurex_read\n Revert \"usb: yurex: Replace snprintf() with the safer scnprintf() variant\"\n usb: xhci: Fix problem with xhci resume from suspend\n usb: misc: onboard_usb_dev: introduce new config symbol for usb5744 SMBus support\n usb: dwc3: core: Stop processing of pending events if controller is halted\n usb: dwc3: re-enable runtime PM after failed resume\n usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip\n usb: gadget: core: force synchronous registration\n" }, { "commit": "f683c9b134f2b0cb5d917296a142db1211468a78", "tree": "3eaa4a63afc4de9b1674e46b4eb45a83f20ca521", "parents": [ "36c254515dc6592c44db77b84908358979dd6b50", "bd2b7f62a0d5feda8b21c7371058e8cd2956151a" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Oct 13 09:10:52 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Oct 13 09:10:52 2024 -0700" }, "message": "Merge tag \u0027driver-core-6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core\n\nPull driver core fixes from Greg KH:\n \"Here is a single driver core fix, and a .mailmap update.\n\n The fix is for the rust driver core bindings, turned out that the\n from_raw binding wasn\u0027t a good idea (don\u0027t want to pass a pointer to a\n reference counted object without actually incrementing the pointer.)\n So this change fixes it up as the from_raw binding came in in -rc1.\n\n The other change is a .mailmap update.\n\n Both have been in linux-next for a while with no reported issues\"\n\n* tag \u0027driver-core-6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core:\n mailmap: update mail for Fiona Behrens\n rust: device: change the from_raw() function\n" }, { "commit": "36c254515dc6592c44db77b84908358979dd6b50", "tree": "3e9d74dcef89b3f04342fb79a4ecfa593086c60f", "parents": [ "7234e2ea0edd00bfb6bb2159e55878c19885ce68", "8956c582ac6b1693a351230179f898979dd00bdf" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 12 17:16:21 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 12 17:16:21 2024 -0700" }, "message": "Merge tag \u0027powerpc-6.12-4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux\n\nPull powerpc fix from Michael Ellerman:\n\n - Fix crash in memcpy on 8xx due to dcbz workaround since recent\n changes\n\nThanks to Christophe Leroy.\n\n* tag \u0027powerpc-6.12-4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:\n powerpc/8xx: Fix kernel DTLB miss on dcbz\n" }, { "commit": "7234e2ea0edd00bfb6bb2159e55878c19885ce68", "tree": "c67ad5486fd5be2ef2669833246ec2a03dc91d4a", "parents": [ "05749ecf5d52e28a1eeb494498e2d51ebbbec11a", "d539a871ae47a1f27a609a62e06093fa69d7ce99" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 12 09:24:13 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 12 09:24:13 2024 -0700" }, "message": "Merge tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi\n\nPull SCSI fixes from James Bottomley:\n \"Four small fixes, three in drivers and one in the FC transport class\n to add idempotence to state setting\"\n\n* tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:\n scsi: scsi_transport_fc: Allow setting rport state to current state\n scsi: wd33c93: Don\u0027t use stale scsi_pointer value\n scsi: fnic: Move flush_work initialization out of if block\n scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()\n" }, { "commit": "05749ecf5d52e28a1eeb494498e2d51ebbbec11a", "tree": "051d3ee2c780bf87cc1e087cf3c1270c7f112605", "parents": [ "09f6b0c8904bfaa1e0601bc102e1b6aa6de8c98f", "2d6c668902e5834f54d7eb673318455492730cbf" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 12 09:09:04 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Oct 12 09:09:04 2024 -0700" }, "message": "Merge tag \u0027hwmon-for-v6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging\n\nPull hwmon fixes from Guenter Roeck:\n\n - Add missing dependencies on REGMAP_I2C for several drivers\n\n - Fix memory leak in adt7475 driver\n\n - Relabel Columbiaville temperature sensor in intel-m10-bmc-hwmon\n driver to match other sensor labels\n\n* tag \u0027hwmon-for-v6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging:\n hwmon: (max1668) Add missing dependency on REGMAP_I2C\n hwmon: (ltc2991) Add missing dependency on REGMAP_I2C\n hwmon: (adt7470) Add missing dependency on REGMAP_I2C\n hwmon: (adm9240) Add missing dependency on REGMAP_I2C\n hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C\n hwmon: (tmp513) Add missing dependency on REGMAP_I2C\n hwmon: (adt7475) Fix memory leak in adt7475_fan_pwm_config()\n hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature\n" }, { "commit": "09f6b0c8904bfaa1e0601bc102e1b6aa6de8c98f", "tree": "73bb6146cd5476eb4999ac8b9bce586c599f5190", "parents": [ "974099e40e924a911000541fea0b59d075a3d1d0", "4ee5ca9a29384fcf3f18232fdf8474166dea8dca" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 16:12:45 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 16:12:45 2024 -0700" }, "message": "Merge tag \u0027linux_kselftest-fixes-6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest\n\nPull kselftest fixes from Shuah Khan:\n \"Fixes for build, run-time errors, and reporting errors:\n\n - ftrace: regression test for a kernel crash when running function\n graph tracing and then enabling function profiler.\n\n - rseq: fix for mm_cid test failure.\n\n - vDSO:\n - fixes to reporting skip and other error conditions\n - changes unconditionally build chacha and getrandom tests on all\n architectures to make it easier for them to run in CIs\n - build error when sched.h to bring in CLONE_NEWTIME define\"\n\n* tag \u0027linux_kselftest-fixes-6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest:\n ftrace/selftest: Test combination of function_graph tracer and function profiler\n selftests/rseq: Fix mm_cid test failure\n selftests: vDSO: Explicitly include sched.h\n selftests: vDSO: improve getrandom and chacha error messages\n selftests: vDSO: unconditionally build getrandom test\n selftests: vDSO: unconditionally build chacha test\n" }, { "commit": "974099e40e924a911000541fea0b59d075a3d1d0", "tree": "2cdef6dbc29d5930cbaefbcd53d0275aecac81dd", "parents": [ "9066258d0a533530c2508f784e85c53b44f5d9e4", "6e0391e48cf9fb8b1b5e27c0cbbaf2e4639f2c33" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 16:07:15 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 16:07:15 2024 -0700" }, "message": "Merge tag \u0027devicetree-fixes-for-6.12-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux\n\nPull devicetree fixes from Rob Herring:\n\n - Disable kunit tests for arm64+ACPI\n\n - Fix refcount issue in kunit tests\n\n - Drop constraints on non-conformant \u0027interrupt-map\u0027 in fsl,ls-extirq\n\n - Drop type ref on \u0027msi-parent in fsl,qoriq-mc binding\n\n - Move elgin,jg10309-01 to its own binding from trivial-devices\n\n* tag \u0027devicetree-fixes-for-6.12-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux:\n of: Skip kunit tests when arm64+ACPI doesn\u0027t populate root node\n of: Fix unbalanced of node refcount and memory leaks\n dt-bindings: interrupt-controller: fsl,ls-extirq: workaround wrong interrupt-map number\n dt-bindings: misc: fsl,qoriq-mc: remove ref for msi-parent\n dt-bindings: display: elgin,jg10309-01: Add own binding\n" }, { "commit": "9066258d0a533530c2508f784e85c53b44f5d9e4", "tree": "b84a5cd05ccbe061559725d71a8033c854f8c61c", "parents": [ "547fc3225a4187c25e296240a3371115821c5850", "01ecc142ef7c8c5081a39be81c1d8ab7c10dd7b8" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 15:56:02 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 15:56:02 2024 -0700" }, "message": "Merge tag \u0027fbdev-for-6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev\n\nPull fbdev platform driver fix from Helge Deller:\n \"Switch fbdev drivers back to struct platform_driver::remove()\n\n Now that \u0027remove()\u0027 has been converted to the sane new API, there\u0027s\n no reason for the \u0027remove_new()\u0027 use, so this converts back to the\n traditional and simpler name.\n\n See commits\n\n 5c5a7680e67b (\"platform: Provide a remove callback that returns no value\")\n 0edb555a65d1 (\"platform: Make platform_driver::remove() return void\")\n\n for background to this all\"\n\n* tag \u0027fbdev-for-6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev:\n fbdev: Switch back to struct platform_driver::remove()\n" }, { "commit": "547fc3225a4187c25e296240a3371115821c5850", "tree": "1e7d5e36c9166c0e2c25684a4626906f9a6758d6", "parents": [ "6254d537277947fc086324954ddfba1188ba8212", "a6191a3d18119184237f4ee600039081ad992320" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 15:42:26 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 15:42:26 2024 -0700" }, "message": "Merge tag \u0027gpio-fixes-for-v6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux\n\nPull gpio fixes from Bartosz Golaszewski:\n\n - fix clock handle leak in probe() error path in gpio-aspeed\n\n - add a dummy register read to ensure the write actually completed\n\n* tag \u0027gpio-fixes-for-v6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux:\n gpio: aspeed: Use devm_clk api to manage clock source\n gpio: aspeed: Add the flush write to ensure the write complete.\n" }, { "commit": "6254d537277947fc086324954ddfba1188ba8212", "tree": "fd12da2b356c88324a2e2f122855b209a3046686", "parents": [ "a1029768f3931b31aa52790f1dde0c7d6a6552eb", "7ef60108069b7e3cc66432304e1dd197d5c0a9b5" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 15:37:15 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 15:37:15 2024 -0700" }, "message": "Merge tag \u0027nfs-for-6.12-2\u0027 of git://git.linux-nfs.org/projects/anna/linux-nfs\n\nPull NFS client fixes from Anna Schumaker:\n \"Localio Bugfixes:\n - remove duplicated include in localio.c\n - fix race in NFS calls to nfsd_file_put_local() and nfsd_serv_put()\n - fix Kconfig for NFS_COMMON_LOCALIO_SUPPORT\n - fix nfsd_file tracepoints to handle NULL rqstp pointers\n\n Other Bugfixes:\n - fix program selection loop in svc_process_common\n - fix integer overflow in decode_rc_list()\n - prevent NULL-pointer dereference in nfs42_complete_copies()\n - fix CB_RECALL performance issues when using a large number of\n delegations\"\n\n* tag \u0027nfs-for-6.12-2\u0027 of git://git.linux-nfs.org/projects/anna/linux-nfs:\n NFS: remove revoked delegation from server\u0027s delegation list\n nfsd/localio: fix nfsd_file tracepoints to handle NULL rqstp\n nfs_common: fix Kconfig for NFS_COMMON_LOCALIO_SUPPORT\n nfs_common: fix race in NFS calls to nfsd_file_put_local() and nfsd_serv_put()\n NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()\n SUNRPC: Fix integer overflow in decode_rc_list()\n sunrpc: fix prog selection loop in svc_process_common\n nfs: Remove duplicated include in localio.c\n" }, { "commit": "a1029768f3931b31aa52790f1dde0c7d6a6552eb", "tree": "10c41d3ebf4f3921d43ac482cd0be11d532d7ee6", "parents": [ "d947d6848a790616d6d2ca64097b6e818ffe3017", "f7345ccc62a4b880cf76458db5f320725f28e400" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 14:42:27 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 14:42:27 2024 -0700" }, "message": "Merge tag \u0027rcu.fixes.6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rcu/linux\n\nPull RCU fix from Neeraj Upadhyay:\n \"Fix rcuog kthread wakeup invocation from softirq context on a CPU\n which has been marked offline.\n\n This can happen when new callbacks are enqueued from a softirq on an\n offline CPU before it calls rcutree_report_cpu_dead(). When this\n happens on NOCB configuration, the rcuog wake-up is deferred through\n an IPI to an online CPU. This is done to avoid call into the scheduler\n which can risk arming the RT-bandwidth after hrtimers have been\n migrated out and disabled.\n\n However, doing IPI call from softirq is not allowed: Fix this by\n forcing deferred rcuog wakeup through the NOCB timer when the CPU is\n offline\"\n\n* tag \u0027rcu.fixes.6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rcu/linux:\n rcu/nocb: Fix rcuog wake-up from offline softirq\n" }, { "commit": "d947d6848a790616d6d2ca64097b6e818ffe3017", "tree": "136c1263f3c0794794dbb1332de9f5aa0280de14", "parents": [ "9e4c6c1ad9a195f28ec3d3d5054e25f6bdde87bd", "bf56c410162dbf2e27906acbdcd904cbbfdba302" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 14:34:18 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 14:34:18 2024 -0700" }, "message": "Merge tag \u0027for-linus-6.12a-rc3-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip\n\nPull xen fix from Juergen Gross:\n \"A fix for topology information of Xen PV guests\"\n\n* tag \u0027for-linus-6.12a-rc3-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip:\n x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE\n" }, { "commit": "4ee5ca9a29384fcf3f18232fdf8474166dea8dca", "tree": "04260a807277195acd8a1c9db09b0081c8a78f51", "parents": [ "a0cc649353bb726d4aa0db60dce467432197b746" ], "author": { "name": "Steven Rostedt", "email": "rostedt@goodmis.org", "time": "Thu Oct 10 16:52:35 2024 -0400" }, "committer": { "name": "Shuah Khan", "email": "skhan@linuxfoundation.org", "time": "Fri Oct 11 15:05:16 2024 -0600" }, "message": "ftrace/selftest: Test combination of function_graph tracer and function profiler\n\nMasami reported a bug when running function graph tracing then the\nfunction profiler. The following commands would cause a kernel crash:\n\n # cd /sys/kernel/tracing/\n # echo function_graph \u003e current_tracer\n # echo 1 \u003e function_profile_enabled\n\nIn that order. Create a test to test this two to make sure this does not\ncome back as a regression.\n\nLink: https://lore.kernel.org/172398528350.293426.8347220120333730248.stgit@devnote2\n\nLink: https://lore.kernel.org/all/20241010165235.35122877@gandalf.local.home/\nAcked-by: Masami Hiramatsu (Google) \u003cmhiramat@kernel.org\u003e\nSigned-off-by: Steven Rostedt (Google) \u003crostedt@goodmis.org\u003e\nSigned-off-by: Shuah Khan \u003cskhan@linuxfoundation.org\u003e\n" }, { "commit": "a0cc649353bb726d4aa0db60dce467432197b746", "tree": "51808f6c6e8810a103fe07e9a1021d5bf729385d", "parents": [ "34d5b600172b846161e507bdce132c98d9cc9701" ], "author": { "name": "Mathieu Desnoyers", "email": "mathieu.desnoyers@efficios.com", "time": "Tue Oct 08 21:28:01 2024 -0400" }, "committer": { "name": "Shuah Khan", "email": "skhan@linuxfoundation.org", "time": "Fri Oct 11 15:05:05 2024 -0600" }, "message": "selftests/rseq: Fix mm_cid test failure\n\nAdapt the rseq.c/rseq.h code to follow GNU C library changes introduced by:\n\nglibc commit 2e456ccf0c34 (\"Linux: Make __rseq_size useful for feature detection (bug 31965)\")\n\nWithout this fix, rseq selftests for mm_cid fail:\n\n./run_param_test.sh\nDefault parameters\nRunning test spinlock\nRunning compare-twice test spinlock\nRunning mm_cid test spinlock\nError: cpu id getter unavailable\n\nFixes: 18c2355838e7 (\"selftests/rseq: Implement rseq mm_cid field support\")\nSigned-off-by: Mathieu Desnoyers \u003cmathieu.desnoyers@efficios.com\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nCC: Boqun Feng \u003cboqun.feng@gmail.com\u003e\nCC: \"Paul E. McKenney\" \u003cpaulmck@kernel.org\u003e\nCc: Shuah Khan \u003cskhan@linuxfoundation.org\u003e\nCC: Carlos O\u0027Donell \u003ccarlos@redhat.com\u003e\nCC: Florian Weimer \u003cfweimer@redhat.com\u003e\nCC: linux-kselftest@vger.kernel.org\nCC: stable@vger.kernel.org\nSigned-off-by: Shuah Khan \u003cskhan@linuxfoundation.org\u003e\n" }, { "commit": "9e4c6c1ad9a195f28ec3d3d5054e25f6bdde87bd", "tree": "731cb2849bb8c08657f1a89b930a825f1d836735", "parents": [ "e643edac700637dbfb13d8cafd5754898486e666", "f7c9134385331c5ef36252895130aa01a92de907" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 12:00:21 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 12:00:21 2024 -0700" }, "message": "Merge tag \u0027io_uring-6.12-20241011\u0027 of git://git.kernel.dk/linux\n\nPull io_uring fixes from Jens Axboe:\n\n - Explicitly have a mshot_finished condition for IORING_OP_RECV in\n multishot mode, similarly to what IORING_OP_RECVMSG has. This doesn\u0027t\n fix a bug right now, but it makes it harder to actually have a bug\n here if a request takes multiple iterations to finish.\n\n - Fix handling of retry of read/write of !FMODE_NOWAIT files. If they\n are pollable, that\u0027s all we need.\n\n* tag \u0027io_uring-6.12-20241011\u0027 of git://git.kernel.dk/linux:\n io_uring/rw: allow pollable non-blocking attempts for !FMODE_NOWAIT\n io_uring/rw: fix cflags posting for single issue multishot read\n" }, { "commit": "e643edac700637dbfb13d8cafd5754898486e666", "tree": "7732046b0e5c6d90a5283f19f1704459bd405476", "parents": [ "f8fafb690b7c2dfd6e388248a817fd7d1fd2420f", "3fb0eea8a1c4be5884e0731ea76cbd3ce126e1f3" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 11:41:20 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 11:41:20 2024 -0700" }, "message": "Merge tag \u0027pm-6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull power management fixes from Rafael Wysocki:\n \"These address two issues in the TPMI module of the Intel RAPL power\n capping driver and one issue in the processor part of the Intel\n int340x thermal driver, update a CPU ID list and register definitions\n needed for RAPL PL4 support and remove some unused code.\n\n Specifics:\n\n - Fix the TPMI_RAPL_REG_DOMAIN_INFO register offset in the TPMI part\n of the Intel RAPL power capping driver, make it ignore minor\n hardware version mismatches (which only indicate exposing\n additional features) and update register definitions in it to\n enable PL4 support (Zhang Rui)\n\n - Add Arrow Lake-U to the list of processors supporting PL4 in the\n MSR part of the Intel RAPL power capping driver (Sumeet Pawnikar)\n\n - Remove excess pci_disable_device() calls from the processor part of\n the int340x thermal driver to address a warning triggered during\n module unload and remove unused CPU hotplug code related to RAPL\n support from it (Zhang Rui)\"\n\n* tag \u0027pm-6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n thermal: intel: int340x: processor: Add MMIO RAPL PL4 support\n thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support\n powercap: intel_rapl_msr: Add PL4 support for Arrowlake-U\n powercap: intel_rapl_tpmi: Ignore minor version change\n thermal: intel: int340x: processor: Fix warning during module unload\n powercap: intel_rapl_tpmi: Fix bogus register reading\n" }, { "commit": "f8fafb690b7c2dfd6e388248a817fd7d1fd2420f", "tree": "ba1b6e793d83eeb2b006d8fe9c4123bfb6c8362e", "parents": [ "325354cf00c7031c32618feaadc0f22eadee790c", "827a07525c099f54d3b15110408824541ec66b3c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 11:35:30 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 11:35:30 2024 -0700" }, "message": "Merge tag \u0027thermal-6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull thermal control fixes from Rafael Wysocki:\n \"Address possible use-after-free scenarios during the processing of\n thermal netlink commands and during thermal zone removal (Rafael\n Wysocki)\"\n\n* tag \u0027thermal-6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n thermal: core: Free tzp copy along with the thermal zone\n thermal: core: Reference count the zone in thermal_zone_get_by_id()\n" }, { "commit": "325354cf00c7031c32618feaadc0f22eadee790c", "tree": "23fb264e869498a951efb5f8c4f7ce2345c1a8ab", "parents": [ "22e6abaa7263b3cbfce3c1d1f80307571ec66f7a", "1af7e441feb08cdaab8f4a320577ed0bba1f5896" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 11:32:10 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 11:32:10 2024 -0700" }, "message": "Merge tag \u0027acpi-6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull ACPI fixes from Rafael Wysocki:\n \"Reduce the number of ACPI IRQ override DMI quirks by combining quirks\n that cover similar systems while making them cover additional models\n at the same time (Hans de Goede)\"\n\n* tag \u0027acpi-6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n ACPI: resource: Fold Asus Vivobook Pro N6506M* DMI quirks together\n ACPI: resource: Fold Asus ExpertBook B1402C* and B1502C* DMI quirks together\n ACPI: resource: Make Asus ExpertBook B2502 matches cover more models\n ACPI: resource: Make Asus ExpertBook B2402 matches cover more models\n" }, { "commit": "22e6abaa7263b3cbfce3c1d1f80307571ec66f7a", "tree": "e435084ceecd8c50973ba0aa07e5baac10c48f7d", "parents": [ "7351a8793d8dc7e3aca09f2d9ec624ce46c42a0f", "7738568885f2eaecfc10a3f530a2693e5f0ae3d0" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 11:26:15 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 11:26:15 2024 -0700" }, "message": "Merge tag \u0027pmdomain-v6.12-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/linux-pm\n\nPull pmdomain fixes from Ulf Hansson:\n \"pmdomain core:\n - Fix alloc/free in dev_pm_domain_attach|detach_list()\n\n pmdomain providers:\n - qcom: Fix the return of uninitialized variable\n\n pmdomain consumers:\n - drm/tegra/gr3d: Revert conversion to dev_pm_domain_attach|detach_list()\n\n OPP core:\n - Fix error code in dev_pm_opp_set_config()\"\n\n* tag \u0027pmdomain-v6.12-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/linux-pm:\n PM: domains: Fix alloc/free in dev_pm_domain_attach|detach_list()\n Revert \"drm/tegra: gr3d: Convert into dev_pm_domain_attach|detach_list()\"\n pmdomain: qcom-cpr: Fix the return of uninitialized variable\n OPP: fix error code in dev_pm_opp_set_config()\n" }, { "commit": "7351a8793d8dc7e3aca09f2d9ec624ce46c42a0f", "tree": "ed5fde7f9bcb534be292712de42c72ca1777faf4", "parents": [ "3700dc91b39aa9675047f7aae232b9d4a1b70e20", "27e8fe0da3b75520edfba9cee0030aeb5aef1505" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 11:23:21 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 11:23:21 2024 -0700" }, "message": "Merge tag \u0027mmc-v6.12-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/mmc\n\nPull MMC fixes from Ulf Hansson:\n \"MMC core:\n - Prevent splat from warning when setting maximum DMA segment\n\n MMC host:\n - mvsdio: Drop sg_miter support for PIO as it didn\u0027t work\n - sdhci-of-dwcmshc: Prevent stale interrupt for the T-Head 1520\n variant\"\n\n* tag \u0027mmc-v6.12-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/mmc:\n mmc: sdhci-of-dwcmshc: Prevent stale command interrupt handling\n Revert \"mmc: mvsdio: Use sg_miter for PIO\"\n mmc: core: Only set maximum DMA segment size if DMA is supported\n" }, { "commit": "3700dc91b39aa9675047f7aae232b9d4a1b70e20", "tree": "9e33cb9a853eb91fa40120eceb76ea7bec3b8ac5", "parents": [ "befcc89362383208f62b15887592758165459e3d", "0df4b9d91488922859db8dde4ee56936e01d547c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 11:18:31 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 11:18:31 2024 -0700" }, "message": "Merge tag \u0027ata-6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/libata/linux\n\nPull ata fixes from Niklas Cassel:\n\n - Fix a hibernate regression where the disk was needlessly spun down\n and then immediately spun up both when entering and when resuming\n from hibernation (me)\n\n - Update the MAINTAINERS file to remove remnants from Jens\n maintainership of libata (Damien)\n\n* tag \u0027ata-6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/libata/linux:\n ata: libata: Update MAINTAINERS file\n ata: libata: avoid superfluous disk spin down + spin up during hibernation\n" }, { "commit": "befcc89362383208f62b15887592758165459e3d", "tree": "5b0e7d8fa892ed05b1c0e20a98c06f50995b5c0c", "parents": [ "1d227fcc72223cbdd34d0ce13541cbaab5e0d72f", "ac44ff7cec33d5c2d4b72d52603552ec64c1a8bf" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 11:13:05 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 11 11:13:05 2024 -0700" }, "message": "Merge tag \u0027drm-fixes-2024-10-11\u0027 of https://gitlab.freedesktop.org/drm/kernel\n\nPull drm fixes from Dave Airlie:\n \"Weekly fixes haul for drm, lots of small fixes all over, amdgpu, xe\n lead the way, some minor nouveau and radeon fixes, and then a bunch of\n misc all over.\n\n Nothing too scary or out of the unusual.\n\n sched:\n - Avoid leaking lockdep map\n\n fbdev-dma:\n - Only clean up deferred I/O if instanciated\n\n amdgpu:\n - Fix invalid UBSAN warnings\n - Fix artifacts in MPO transitions\n - Hibernation fix\n\n amdkfd:\n - Fix an eviction fence leak\n\n radeon:\n - Add late register for connectors\n - Always set GEM function pointers\n\n i915:\n - HDCP refcount fix\n\n nouveau:\n - dmem: Fix privileged error in copy engine channel; Fix possible\n data leak in migrate_to_ram()\n - gsp: Fix coding style\n\n v3d:\n - Stop active perfmon before destroying it\n\n vc4:\n - Stop active perfmon before destroying it\n\n xe:\n - Drop GuC submit_wq pool\n - Fix error checking with xa_store()\n - Fix missing freq restore on GSC load error\n - Fix wedged_mode file permission\n - Fix use-after-free in ct communication\"\n\n* tag \u0027drm-fixes-2024-10-11\u0027 of https://gitlab.freedesktop.org/drm/kernel:\n drm/fbdev-dma: Only cleanup deferred I/O if necessary\n drm/xe: Make wedged_mode debugfs writable\n drm/xe: Restore GT freq on GSC load error\n drm/xe/guc_submit: fix xa_store() error checking\n drm/xe/ct: fix xa_store() error checking\n drm/xe/ct: prevent UAF in send_recv()\n drm/radeon: always set GEM function pointer\n nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error\n nouveau/dmem: Fix privileged error in copy engine channel\n drm/amd/display: fix hibernate entry for DCN35+\n drm/amd/display: Clear update flags after update has been applied\n drm/amdgpu: partially revert powerplay `__counted_by` changes\n drm/radeon: add late_register for connector\n drm/amdkfd: Fix an eviction fence leak\n drm/vc4: Stop the active perfmon before being destroyed\n drm/v3d: Stop the active perfmon before being destroyed\n drm/i915/hdcp: fix connector refcounting\n drm/nouveau/gsp: remove extraneous ; after mutex\n drm/xe: Drop GuC submit_wq pool\n drm/sched: Use drm sched lockdep map for submit_wq\n" }, { "commit": "332fade75d0ecd88cd19556fce0f9cc8322de434", "tree": "cd36a836b754e383f527b34817da17bbb3cdc737", "parents": [ "8cf0b93919e13d1e8d4466eb4080a4c4d9d66d7b" ], "author": { "name": "Jaegeuk Kim", "email": "jaegeuk@kernel.org", "time": "Wed Oct 09 19:40:07 2024 +0000" }, "committer": { "name": "Jaegeuk Kim", "email": "jaegeuk@kernel.org", "time": "Fri Oct 11 15:12:07 2024 +0000" }, "message": "f2fs: allow parallel DIO reads\n\nThis fixes a regression which prevents parallel DIO reads.\n\nFixes: 0cac51185e65 (\"f2fs: fix to avoid racing in between read and OPU dio write\")\nReviewed-by: Daeho Jeong \u003cdaehojeong@google.com\u003e\nSigned-off-by: Jaegeuk Kim \u003cjaegeuk@kernel.org\u003e\n" }, { "commit": "2934b12281abf4eb5f915086fd5699de5c497ccd", "tree": "e55d0c3f01d528cb0b3e22ea2ed3657a736972a1", "parents": [ "c56f9ecb7fb6a3a90079c19eb4c8daf3bbf514b3" ], "author": { "name": "Jason Gerecke", "email": "jason.gerecke@wacom.com", "time": "Wed Oct 09 09:41:21 2024 -0700" }, "committer": { "name": "Jiri Kosina", "email": "jkosina@suse.com", "time": "Fri Oct 11 11:12:19 2024 +0200" }, "message": "HID: wacom: Hardcode (non-inverted) AES pens as BTN_TOOL_PEN\n\nUnlike EMR tools which encode type information in their tool ID, tools\nfor AES sensors are all \"generic pens\". It is inappropriate to make use\nof the wacom_intuos_get_tool_type function when dealing with these kinds\nof devices. Instead, we should only ever report BTN_TOOL_PEN or\nBTN_TOOL_RUBBER, as depending on the state of the Eraser and Invert\nbits.\n\nReported-by: Daniel Jutz \u003cdaniel@djutz.com\u003e\nCloses: https://lore.kernel.org/linux-input/3cd82004-c5b8-4f2a-9a3b-d88d855c65e4@heusel.eu/\nBisected-by: Christian Heusel \u003cchristian@heusel.eu\u003e\nFixes: 9c2913b962da (\"HID: wacom: more appropriate tool type categorization\")\nLink: https://gitlab.freedesktop.org/libinput/libinput/-/issues/1041\nLink: https://github.com/linuxwacom/input-wacom/issues/440\nSigned-off-by: Jason Gerecke \u003cjason.gerecke@wacom.com\u003e\nCc: stable@vger.kernel.org\nAcked-by: Benjamin Tissoires \u003cbentiss@kernel.org\u003e\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.com\u003e\n" }, { "commit": "ae54567eaa87fd863ab61084a3828e1c36b0ffb0", "tree": "c43711a5fd109056674376f2f1f991dccad97cee", "parents": [ "2402082e5332a2d27be82b4a2bb42490f9c5134b" ], "author": { "name": "Gao Xiang", "email": "hsiangkao@linux.alibaba.com", "time": "Fri Oct 11 07:58:30 2024 +0800" }, "committer": { "name": "Gao Xiang", "email": "hsiangkao@linux.alibaba.com", "time": "Fri Oct 11 13:36:58 2024 +0800" }, "message": "erofs: get rid of kaddr in `struct z_erofs_maprecorder`\n\n`kaddr` becomes useless after switching to metabuf.\n\nReviewed-by: Chao Yu \u003cchao@kernel.org\u003e\nSigned-off-by: Gao Xiang \u003chsiangkao@linux.alibaba.com\u003e\nLink: https://lore.kernel.org/r/20241010235830.1535616-1-hsiangkao@linux.alibaba.com\n" }, { "commit": "2402082e5332a2d27be82b4a2bb42490f9c5134b", "tree": "e49d521a9b56c157acbb97710654d266cc6ee0b8", "parents": [ "416a8b2c02fe2a5a9fbdf2a35ea294b78d939f84" ], "author": { "name": "Gao Xiang", "email": "hsiangkao@linux.alibaba.com", "time": "Thu Oct 10 17:04:19 2024 +0800" }, "committer": { "name": "Gao Xiang", "email": "hsiangkao@linux.alibaba.com", "time": "Fri Oct 11 13:36:58 2024 +0800" }, "message": "erofs: get rid of z_erofs_try_to_claim_pcluster()\n\nJust fold it into the caller for simplicity.\n\nReviewed-by: Chao Yu \u003cchao@kernel.org\u003e\nSigned-off-by: Gao Xiang \u003chsiangkao@linux.alibaba.com\u003e\nLink: https://lore.kernel.org/r/20241010090420.405871-1-hsiangkao@linux.alibaba.com\n" }, { "commit": "416a8b2c02fe2a5a9fbdf2a35ea294b78d939f84", "tree": "138579c557a06651b1bd958322e51cf2324ef954", "parents": [ "9852d85ec9d492ebef56dc5f229416c925758edc" ], "author": { "name": "Gao Xiang", "email": "hsiangkao@linux.alibaba.com", "time": "Tue Sep 17 21:08:03 2024 +0800" }, "committer": { "name": "Gao Xiang", "email": "hsiangkao@linux.alibaba.com", "time": "Fri Oct 11 13:36:41 2024 +0800" }, "message": "erofs: ensure regular inodes for file-backed mounts\n\nOnly regular inodes are allowed for file-backed mounts, not directories\n(as seen in the original syzbot case) or special inodes.\n\nAlso ensure that .read_folio() is implemented on the underlying fs\nfor the primary device.\n\nFixes: fb176750266a (\"erofs: add file-backed mount support\")\nReported-by: syzbot+001306cd9c92ce0df23f@syzkaller.appspotmail.com\nCloses: https://lore.kernel.org/r/00000000000011bdde0622498ee3@google.com\nTested-by: syzbot+001306cd9c92ce0df23f@syzkaller.appspotmail.com\nReviewed-by: Chao Yu \u003cchao@kernel.org\u003e\nSigned-off-by: Gao Xiang \u003chsiangkao@linux.alibaba.com\u003e\nLink: https://lore.kernel.org/r/20240917130803.32418-1-hsiangkao@linux.alibaba.com\n" }, { "commit": "8956c582ac6b1693a351230179f898979dd00bdf", "tree": "bf4f16ea974a34604914811ebfccf236c9eed1bd", "parents": [ "8cf0b93919e13d1e8d4466eb4080a4c4d9d66d7b" ], "author": { "name": "Christophe Leroy", "email": "christophe.leroy@csgroup.eu", "time": "Sat Oct 05 10:53:29 2024 +0200" }, "committer": { "name": "Michael Ellerman", "email": "mpe@ellerman.id.au", "time": "Fri Oct 11 15:53:06 2024 +1100" }, "message": "powerpc/8xx: Fix kernel DTLB miss on dcbz\n\nFollowing OOPS is encountered while loading test_bpf module\non powerpc 8xx:\n\n[ 218.835567] BUG: Unable to handle kernel data access on write at 0xcb000000\n[ 218.842473] Faulting instruction address: 0xc0017a80\n[ 218.847451] Oops: Kernel access of bad area, sig: 11 [#1]\n[ 218.852854] BE PAGE_SIZE\u003d16K PREEMPT CMPC885\n[ 218.857207] SAF3000 DIE NOTIFICATION\n[ 218.860713] Modules linked in: test_bpf(+) test_module\n[ 218.865867] CPU: 0 UID: 0 PID: 527 Comm: insmod Not tainted 6.11.0-s3k-dev-09856-g3de3d71ae2e6-dirty #1280\n[ 218.875546] Hardware name: MIAE 8xx 0x500000 CMPC885\n[ 218.880521] NIP: c0017a80 LR: beab859c CTR: 000101d4\n[ 218.885584] REGS: cac2bc90 TRAP: 0300 Not tainted (6.11.0-s3k-dev-09856-g3de3d71ae2e6-dirty)\n[ 218.894308] MSR: 00009032 \u003cEE,ME,IR,DR,RI\u003e CR: 55005555 XER: a0007100\n[ 218.901290] DAR: cb000000 DSISR: c2000000\n[ 218.901290] GPR00: 000185d1 cac2bd50 c21b9580 caf7c030 c3883fcc 00000008 cafffffc 00000000\n[ 218.901290] GPR08: 00040000 18300000 20000000 00000004 99005555 100d815e ca669d08 00000369\n[ 218.901290] GPR16: ca730000 00000000 ca2c004c 00000000 00000000 0000035d 00000311 00000369\n[ 218.901290] GPR24: ca732240 00000001 00030ba3 c3800000 00000000 00185d48 caf7c000 ca2c004c\n[ 218.941087] NIP [c0017a80] memcpy+0x88/0xec\n[ 218.945277] LR [beab859c] test_bpf_init+0x22c/0x3c90 [test_bpf]\n[ 218.951476] Call Trace:\n[ 218.953916] [cac2bd50] [beab8570] test_bpf_init+0x200/0x3c90 [test_bpf] (unreliable)\n[ 218.962034] [cac2bde0] [c0004c04] do_one_initcall+0x4c/0x1fc\n[ 218.967706] [cac2be40] [c00a2ec4] do_init_module+0x68/0x360\n[ 218.973292] [cac2be60] [c00a5194] init_module_from_file+0x8c/0xc0\n[ 218.979401] [cac2bed0] [c00a5568] sys_finit_module+0x250/0x3f0\n[ 218.985248] [cac2bf20] [c000e390] system_call_exception+0x8c/0x15c\n[ 218.991444] [cac2bf30] [c00120a8] ret_from_syscall+0x0/0x28\n\nThis happens in the main loop of memcpy()\n\n \u003d\u003d\u003e\tc0017a80:\t7c 0b 37 ec \tdcbz r11,r6\n\tc0017a84:\t80 e4 00 04 \tlwz r7,4(r4)\n\tc0017a88:\t81 04 00 08 \tlwz r8,8(r4)\n\tc0017a8c:\t81 24 00 0c \tlwz r9,12(r4)\n\tc0017a90:\t85 44 00 10 \tlwzu r10,16(r4)\n\tc0017a94:\t90 e6 00 04 \tstw r7,4(r6)\n\tc0017a98:\t91 06 00 08 \tstw r8,8(r6)\n\tc0017a9c:\t91 26 00 0c \tstw r9,12(r6)\n\tc0017aa0:\t95 46 00 10 \tstwu r10,16(r6)\n\tc0017aa4:\t42 00 ff dc \tbdnz c0017a80 \u003cmemcpy+0x88\u003e\n\nCommit ac9f97ff8b32 (\"powerpc/8xx: Inconditionally use task PGDIR in\nDTLB misses\") relies on re-reading DAR register to know if an error is\ndue to a missing copy of a PMD entry in task\u0027s PGDIR, allthough DAR\nwas already read in the exception prolog and copied into thread\nstruct. This is because is it done very early in the exception and\nthere are not enough registers available to keep a pointer to thread\nstruct.\n\nHowever, dcbz instruction is buggy and doesn\u0027t update DAR register on\nfault. That is detected and generates a call to FixupDAR workaround\nwhich updates DAR copy in thread struct but doesn\u0027t fix DAR register.\n\nLet\u0027s fix DAR in addition to the update of DAR copy in thread struct.\n\nFixes: ac9f97ff8b32 (\"powerpc/8xx: Inconditionally use task PGDIR in DTLB misses\")\nSigned-off-by: Christophe Leroy \u003cchristophe.leroy@csgroup.eu\u003e\nSigned-off-by: Michael Ellerman \u003cmpe@ellerman.id.au\u003e\nLink: https://msgid.link/2b851399bd87e81c6ccb87ea3a7a6b32c7aa04d7.1728118396.git.christophe.leroy@csgroup.eu\n\n" }, { "commit": "ac44ff7cec33d5c2d4b72d52603552ec64c1a8bf", "tree": "d1fd20e823ef61042a19a39ce0f82d16291f50fb", "parents": [ "b634acb2a070c072900c56154aa43e2ec2d45b2d", "1badf482816417dca71f8120b4c540cdc82aa03c" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Oct 11 13:54:05 2024 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Oct 11 13:54:10 2024 +1000" }, "message": "Merge tag \u0027drm-xe-fixes-2024-10-10\u0027 of https://gitlab.freedesktop.org/drm/xe/kernel into drm-fixes\n\nDriver Changes:\n- Fix error checking with xa_store() (Matthe Auld)\n- Fix missing freq restore on GSC load error (Vinay)\n- Fix wedged_mode file permission (Matt Roper)\n- Fix use-after-free in ct communication (Matthew Auld)\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Lucas De Marchi \u003clucas.demarchi@intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/jri65tmv3bjbhqhxs5smv45nazssxzhtwphojem4uufwtjuliy@gsdhlh6kzsdy\n" }, { "commit": "b634acb2a070c072900c56154aa43e2ec2d45b2d", "tree": "1e6d889641cc79d27c91783f3912b2efdde076e1", "parents": [ "fe4a435bd0c20beb6d7caf87b49bc49a2233b18b", "fcddc71ec7ecf15b4df3c41288c9cf0b8e886111" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Oct 11 09:03:20 2024 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Oct 11 09:03:30 2024 +1000" }, "message": "Merge tag \u0027drm-misc-fixes-2024-10-10\u0027 of https://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes\n\nShort summary of fixes pull:\n\nfbdev-dma:\n- Only clean up deferred I/O if instanciated\n\nnouveau:\n- dmem: Fix privileged error in copy engine channel; Fix possible\ndata leak in migrate_to_ram()\n- gsp: Fix coding style\n\nsched:\n- Avoid leaking lockdep map\n\nv3d:\n- Stop active perfmon before destroying it\n\nvc4:\n- Stop active perfmon before destroying it\n\nxe:\n- Drop GuC submit_wq pool\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Thomas Zimmermann \u003ctzimmermann@suse.de\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20241010133708.GA461532@localhost.localdomain\n" }, { "commit": "fe4a435bd0c20beb6d7caf87b49bc49a2233b18b", "tree": "2a893016f5af68f1a448fb103637b2f46fbc7d84", "parents": [ "fc4d262721705f2a7b860946504e7b8a313f06e1", "4cc2718f621a6a57a02581125bb6d914ce74d23b" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Oct 11 08:55:26 2024 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Oct 11 08:55:27 2024 +1000" }, "message": "Merge tag \u0027drm-intel-fixes-2024-10-10\u0027 of https://gitlab.freedesktop.org/drm/i915/kernel into drm-fixes\n\n- HDCP refcount fix\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nFrom: Joonas Lahtinen \u003cjoonas.lahtinen@linux.intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/Zwd78Tnw8t3w9F16@jlahtine-mobl.ger.corp.intel.com\n" }, { "commit": "1d227fcc72223cbdd34d0ce13541cbaab5e0d72f", "tree": "6ca1140052b7e09aa1eb42671612a20bfd5d5cc0", "parents": [ "0edab8d1324dfeee52aad763236c9015e413c4c2", "7b43ba65019e83b55cfacfcfc0c3a08330af54c1" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 10 12:36:35 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 10 12:36:35 2024 -0700" }, "message": "Merge tag \u0027net-6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net\n\nPull networking fixes from Jakub Kicinski:\n \"Including fixes from bluetooth and netfilter.\n\n Current release - regressions:\n\n - dsa: sja1105: fix reception from VLAN-unaware bridges\n\n - Revert \"net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is\n enabled\"\n\n - eth: fec: don\u0027t save PTP state if PTP is unsupported\n\n Current release - new code bugs:\n\n - smc: fix lack of icsk_syn_mss with IPPROTO_SMC, prevent null-deref\n\n - eth: airoha: update Tx CPU DMA ring idx at the end of xmit loop\n\n - phy: aquantia: AQR115c fix up PMA capabilities\n\n Previous releases - regressions:\n\n - tcp: 3 fixes for retrans_stamp and undo logic\n\n Previous releases - always broken:\n\n - net: do not delay dst_entries_add() in dst_release()\n\n - netfilter: restrict xtables extensions to families that are safe,\n syzbot found a way to combine ebtables with extensions that are\n never used by userspace tools\n\n - sctp: ensure sk_state is set to CLOSED if hashing fails in\n sctp_listen_start\n\n - mptcp: handle consistently DSS corruption, and prevent corruption\n due to large pmtu xmit\"\n\n* tag \u0027net-6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net: (87 commits)\n MAINTAINERS: Add headers and mailing list to UDP section\n MAINTAINERS: consistently exclude wireless files from NETWORKING [GENERAL]\n slip: make slhc_remember() more robust against malicious packets\n net/smc: fix lacks of icsk_syn_mss with IPPROTO_SMC\n ppp: fix ppp_async_encode() illegal access\n docs: netdev: document guidance on cleanup patches\n phonet: Handle error of rtnl_register_module().\n mpls: Handle error of rtnl_register_module().\n mctp: Handle error of rtnl_register_module().\n bridge: Handle error of rtnl_register_module().\n vxlan: Handle error of rtnl_register_module().\n rtnetlink: Add bulk registration helpers for rtnetlink message handlers.\n net: do not delay dst_entries_add() in dst_release()\n mptcp: pm: do not remove closing subflows\n mptcp: fallback when MPTCP opts are dropped after 1st data\n tcp: fix mptcp DSS corruption due to large pmtu xmit\n mptcp: handle consistently DSS corruption\n net: netconsole: fix wrong warning\n net: dsa: refuse cross-chip mirroring operations\n net: fec: don\u0027t save PTP state if PTP is unsupported\n ...\n" }, { "commit": "0edab8d1324dfeee52aad763236c9015e413c4c2", "tree": "178700158c02c7e55c1849266eff4acb623f6ae1", "parents": [ "eb952c47d154ba2aac794b99c66c3c45eb4cc4ec", "912da2c384d510ce40c5af9c3adc316afa4ec547" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 10 12:25:32 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 10 12:25:32 2024 -0700" }, "message": "Merge tag \u0027trace-ringbuffer-v6.12-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace\n\nPull tracing fix from Steven Rostedt:\n \"Ring-buffer fix: do not have boot-mapped buffers use CPU hotplug\n callbacks\n\n When a ring buffer is mapped to memory assigned at boot, it also\n splits it up evenly between the possible CPUs. But the allocation code\n still attached a CPU notifier callback to this ring buffer. When a CPU\n is added, the callback will happen and another per-cpu buffer is\n created for the ring buffer.\n\n But for boot mapped buffers, there is no room to add another one (as\n they were all created already). The result of calling the CPU hotplug\n notifier on a boot mapped ring buffer is unpredictable and could lead\n to a system crash.\n\n If the ring buffer is boot mapped simply do not attach the CPU\n notifier to it\"\n\n* tag \u0027trace-ringbuffer-v6.12-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace:\n ring-buffer: Do not have boot mapped buffers hook to CPU hotplug\n" }, { "commit": "6e0391e48cf9fb8b1b5e27c0cbbaf2e4639f2c33", "tree": "e402b0ed53f46ae4e3fed4e113a27ac4b27f20a5", "parents": [ "b68694a95373c79e5d3290352e59ce031ce68ece" ], "author": { "name": "Stephen Boyd", "email": "sboyd@kernel.org", "time": "Wed Oct 09 13:41:31 2024 -0700" }, "committer": { "name": "Rob Herring (Arm)", "email": "robh@kernel.org", "time": "Thu Oct 10 12:43:01 2024 -0500" }, "message": "of: Skip kunit tests when arm64+ACPI doesn\u0027t populate root node\n\nA root node is required to apply DT overlays. A root node is usually\npresent after commit 7b937cc243e5 (\"of: Create of_root if no dtb\nprovided by firmware\"), except for on arm64 systems booted with ACPI\ntables. In that case, the root node is intentionally not populated\nbecause it would \"allow DT devices to be instantiated atop an ACPI base\nsystem\"[1].\n\nIntroduce an OF function that skips the kunit test if the root node\nisn\u0027t populated. Limit the test to when both CONFIG_ARM64 and\nCONFIG_ACPI are set, because otherwise the lack of a root node is a bug.\nMake the function private and take a kunit test parameter so that it\ncan\u0027t be abused to test for the presence of the root node in non-test\ncode.\n\nUse this function to skip tests that require the root node. Currently\nthat\u0027s the DT tests and any tests that apply overlays.\n\nReported-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nCloses: https://lore.kernel.org/r/6cd337fb-38f0-41cb-b942-5844b84433db@roeck-us.net\nLink: https://lore.kernel.org/r/Zd4dQpHO7em1ji67@FVFF77S0Q05N.cambridge.arm.com [1]\nFixes: 893ecc6d2d61 (\"of: Add KUnit test to confirm DTB is loaded\")\nSigned-off-by: Stephen Boyd \u003csboyd@kernel.org\u003e\nTested-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nAcked-by: Mark Rutland \u003cmark.rutland@arm.com\u003e\nLink: https://lore.kernel.org/r/20241009204133.1169931-1-sboyd@kernel.org\nSigned-off-by: Rob Herring (Arm) \u003crobh@kernel.org\u003e\n" }, { "commit": "eb952c47d154ba2aac794b99c66c3c45eb4cc4ec", "tree": "7b894cbdd9475d52d7c988484a7b22df42124d48", "parents": [ "5870963f6c0e2dc7f3330c6cfdbda6b81bfdd3a5", "e761be2a0744086fc4793a4870d4b5746b7fe8cd" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 10 10:02:59 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 10 10:02:59 2024 -0700" }, "message": "Merge tag \u0027for-6.12-rc2-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux\n\nPull btrfs fixes from David Sterba:\n\n - update fstrim loop and add more cancellation points, fix reported\n delayed or blocked suspend if there\u0027s a huge chunk queued\n\n - fix error handling in recent qgroup xarray conversion\n\n - in zoned mode, fix warning printing device path without RCU\n protection\n\n - again fix invalid extent xarray state (6252690f7e1b), lost due to\n refactoring\n\n* tag \u0027for-6.12-rc2-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux:\n btrfs: fix clear_dirty and writeback ordering in submit_one_sector()\n btrfs: zoned: fix missing RCU locking in error message when loading zone info\n btrfs: fix missing error handling when adding delayed ref with qgroups enabled\n btrfs: add cancellation points to trim loops\n btrfs: split remaining space to discard in chunks\n" }, { "commit": "5870963f6c0e2dc7f3330c6cfdbda6b81bfdd3a5", "tree": "6fe3732f1f1a1e40d51c251f3ea114463b5dee18", "parents": [ "825ec756afeeb082395ac6430e7b07e3a9997665", "c88c150a467fcb670a1608e2272beeee3e86df6e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 10 09:52:49 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 10 09:52:49 2024 -0700" }, "message": "Merge tag \u0027nfsd-6.12-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/cel/linux\n\nPull nfsd fixes from Chuck Lever:\n\n - Fix NFSD bring-up / shutdown\n\n - Fix a UAF when releasing a stateid\n\n* tag \u0027nfsd-6.12-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/cel/linux:\n nfsd: fix possible badness in FREE_STATEID\n nfsd: nfsd_destroy_serv() must call svc_destroy() even if nfsd_startup_net() failed\n NFSD: Mark filecache \"down\" if init fails\n" }, { "commit": "f7345ccc62a4b880cf76458db5f320725f28e400", "tree": "e4d1b5064e9b37daab3610de7620fd4a99c6dc2a", "parents": [ "8cf0b93919e13d1e8d4466eb4080a4c4d9d66d7b" ], "author": { "name": "Frederic Weisbecker", "email": "frederic@kernel.org", "time": "Thu Oct 10 18:36:09 2024 +0200" }, "committer": { "name": "Neeraj Upadhyay", "email": "neeraj.upadhyay@kernel.org", "time": "Thu Oct 10 22:18:19 2024 +0530" }, "message": "rcu/nocb: Fix rcuog wake-up from offline softirq\n\nAfter a CPU has set itself offline and before it eventually calls\nrcutree_report_cpu_dead(), there are still opportunities for callbacks\nto be enqueued, for example from a softirq. When that happens on NOCB,\nthe rcuog wake-up is deferred through an IPI to an online CPU in order\nnot to call into the scheduler and risk arming the RT-bandwidth after\nhrtimers have been migrated out and disabled.\n\nBut performing a synchronized IPI from a softirq is buggy as reported in\nthe following scenario:\n\n WARNING: CPU: 1 PID: 26 at kernel/smp.c:633 smp_call_function_single\n Modules linked in: rcutorture torture\n CPU: 1 UID: 0 PID: 26 Comm: migration/1 Not tainted 6.11.0-rc1-00012-g9139f93209d1 #1\n Stopper: multi_cpu_stop+0x0/0x320 \u003c- __stop_cpus+0xd0/0x120\n RIP: 0010:smp_call_function_single\n \u003cIRQ\u003e\n swake_up_one_online\n __call_rcu_nocb_wake\n __call_rcu_common\n ? rcu_torture_one_read\n call_timer_fn\n __run_timers\n run_timer_softirq\n handle_softirqs\n irq_exit_rcu\n ? tick_handle_periodic\n sysvec_apic_timer_interrupt\n \u003c/IRQ\u003e\n\nFix this with forcing deferred rcuog wake up through the NOCB timer when\nthe CPU is offline. The actual wake up will happen from\nrcutree_report_cpu_dead().\n\nReported-by: kernel test robot \u003coliver.sang@intel.com\u003e\nCloses: https://lore.kernel.org/oe-lkp/202409231644.4c55582d-lkp@intel.com\nFixes: 9139f93209d1 (\"rcu/nocb: Fix RT throttling hrtimer armed from offline CPU\")\nReviewed-by: \"Joel Fernandes (Google)\" \u003cjoel@joelfernandes.org\u003e\nSigned-off-by: Frederic Weisbecker \u003cfrederic@kernel.org\u003e\nSigned-off-by: Neeraj Upadhyay \u003cneeraj.upadhyay@kernel.org\u003e\n" }, { "commit": "825ec756afeeb082395ac6430e7b07e3a9997665", "tree": "19f64ce7c6ac48b36cc392919b295c126d9e9613", "parents": [ "d3d1556696c1a993eec54ac585fe5bf677e07474", "77bfe1b11ea0c0c4b0ce19b742cd1aa82f60e45d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 10 09:45:45 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 10 09:45:45 2024 -0700" }, "message": "Merge tag \u0027xfs-6.12-fixes-3\u0027 of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux\n\nPull xfs fixes from Carlos Maiolino:\n\n - A few small typo fixes\n\n - fstests xfs/538 DEBUG-only fix\n\n - Performance fix on blockgc on COW\u0027ed files, by skipping trims on\n cowblock inodes currently opened for write\n\n - Prevent cowblocks to be freed under dirty pagecache during unshare\n\n - Update MAINTAINERS file to quote the new maintainer\n\n* tag \u0027xfs-6.12-fixes-3\u0027 of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux:\n xfs: fix a typo\n xfs: don\u0027t free cowblocks from under dirty pagecache on unshare\n xfs: skip background cowblock trims on inodes open for write\n xfs: support lowmode allocations in xfs_bmap_exact_minlen_extent_alloc\n xfs: call xfs_bmap_exact_minlen_extent_alloc from xfs_bmap_btalloc\n xfs: don\u0027t ifdef around the exact minlen allocations\n xfs: fold xfs_bmap_alloc_userdata into xfs_bmapi_allocate\n xfs: distinguish extra split from real ENOSPC from xfs_attr_node_try_addname\n xfs: distinguish extra split from real ENOSPC from xfs_attr3_leaf_split\n xfs: return bool from xfs_attr3_leaf_add\n xfs: merge xfs_attr_leaf_try_add into xfs_attr_leaf_addname\n xfs: Use try_cmpxchg() in xlog_cil_insert_pcp_aggregate()\n xfs: scrub: convert comma to semicolon\n xfs: Remove empty declartion in header file\n MAINTAINERS: add Carlos Maiolino as XFS release manager\n" }, { "commit": "7b43ba65019e83b55cfacfcfc0c3a08330af54c1", "tree": "7f87f1824289bf9e97fcdbc8d006f9d7ffa4f90f", "parents": [ "7d3fce8cbe3a70a1c7c06c9b53696be5d5d8dd5c", "5404b5a2fea9831a1f5be4ab9a94de07d976b177" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Oct 10 09:35:50 2024 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Oct 10 09:35:51 2024 -0700" }, "message": "Merge branch \u0027maintainers-networking-file-coverage-updates\u0027\n\nSimon Horman says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nMAINTAINERS: Networking file coverage updates\n\nThe aim of this proposal is to make the handling of some files,\nrelated to Networking and Wireless, more consistently. It does so by:\n\n1. Adding some more headers to the UDP section, making it consistent\n with the TCP section.\n\n2. Excluding some files relating to Wireless from NETWORKING [GENERAL],\n making their handling consistent with other files related to\n Wireless.\n\nThe aim of this is to make things more consistent. And for MAINTAINERS\nto better reflect the situation on the ground. I am more than happy to\nbe told that the current state of affairs is fine. Or for other ideas to\nbe discussed.\n\nv1: https://lore.kernel.org/20241004-maint-net-hdrs-v1-0-41fd555aacc5@kernel.org\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20241009-maint-net-hdrs-v2-0-f2c86e7309c8@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "5404b5a2fea9831a1f5be4ab9a94de07d976b177", "tree": "7f87f1824289bf9e97fcdbc8d006f9d7ffa4f90f", "parents": [ "9937aae39bc09645cd67d53e0320926cd91570de" ], "author": { "name": "Simon Horman", "email": "horms@kernel.org", "time": "Wed Oct 09 09:47:23 2024 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Oct 10 09:35:48 2024 -0700" }, "message": "MAINTAINERS: Add headers and mailing list to UDP section\n\nAdd netdev mailing list and some more udp.h headers to the UDP section.\nThis is now more consistent with the TCP section.\n\nAcked-by: Willem de Bruijn \u003cwillemb@google.com\u003e\nSigned-off-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/20241009-maint-net-hdrs-v2-2-f2c86e7309c8@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "9937aae39bc09645cd67d53e0320926cd91570de", "tree": "78885037f4a00c89d46c869c18fa951a88857b25", "parents": [ "7d3fce8cbe3a70a1c7c06c9b53696be5d5d8dd5c" ], "author": { "name": "Simon Horman", "email": "horms@kernel.org", "time": "Wed Oct 09 09:47:22 2024 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Oct 10 09:35:48 2024 -0700" }, "message": "MAINTAINERS: consistently exclude wireless files from NETWORKING [GENERAL]\n\nWe already exclude wireless drivers from the netdev@ traffic, to\ndelegate it to linux-wireless@, and avoid overwhelming netdev@.\n\nMany of the following wireless-related sections MAINTAINERS\nare already not included in the NETWORKING [GENERAL] section.\nFor consistency, exclude those that are.\n\n* 802.11 (including CFG80211/NL80211)\n* MAC80211\n* RFKILL\n\nAcked-by: Johannes Berg \u003cjohannes@sipsolutions.net\u003e\nSigned-off-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/20241009-maint-net-hdrs-v2-1-f2c86e7309c8@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "7d3fce8cbe3a70a1c7c06c9b53696be5d5d8dd5c", "tree": "085590ce9a7ccd502baab5e8b2ba2dce14dfe8e4", "parents": [ "6fd27ea183c208e478129a85e11d880fc70040f2" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Wed Oct 09 09:11:32 2024 +0000" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Oct 10 09:06:32 2024 -0700" }, "message": "slip: make slhc_remember() more robust against malicious packets\n\nsyzbot found that slhc_remember() was missing checks against\nmalicious packets [1].\n\nslhc_remember() only checked the size of the packet was at least 20,\nwhich is not good enough.\n\nWe need to make sure the packet includes the IPv4 and TCP header\nthat are supposed to be carried.\n\nAdd iph and th pointers to make the code more readable.\n\n[1]\n\nBUG: KMSAN: uninit-value in slhc_remember+0x2e8/0x7b0 drivers/net/slip/slhc.c:666\n slhc_remember+0x2e8/0x7b0 drivers/net/slip/slhc.c:666\n ppp_receive_nonmp_frame+0xe45/0x35e0 drivers/net/ppp/ppp_generic.c:2455\n ppp_receive_frame drivers/net/ppp/ppp_generic.c:2372 [inline]\n ppp_do_recv+0x65f/0x40d0 drivers/net/ppp/ppp_generic.c:2212\n ppp_input+0x7dc/0xe60 drivers/net/ppp/ppp_generic.c:2327\n pppoe_rcv_core+0x1d3/0x720 drivers/net/ppp/pppoe.c:379\n sk_backlog_rcv+0x13b/0x420 include/net/sock.h:1113\n __release_sock+0x1da/0x330 net/core/sock.c:3072\n release_sock+0x6b/0x250 net/core/sock.c:3626\n pppoe_sendmsg+0x2b8/0xb90 drivers/net/ppp/pppoe.c:903\n sock_sendmsg_nosec net/socket.c:729 [inline]\n __sock_sendmsg+0x30f/0x380 net/socket.c:744\n ____sys_sendmsg+0x903/0xb60 net/socket.c:2602\n ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2656\n __sys_sendmmsg+0x3c1/0x960 net/socket.c:2742\n __do_sys_sendmmsg net/socket.c:2771 [inline]\n __se_sys_sendmmsg net/socket.c:2768 [inline]\n __x64_sys_sendmmsg+0xbc/0x120 net/socket.c:2768\n x64_sys_call+0xb6e/0x3ba0 arch/x86/include/generated/asm/syscalls_64.h:308\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nUninit was created at:\n slab_post_alloc_hook mm/slub.c:4091 [inline]\n slab_alloc_node mm/slub.c:4134 [inline]\n kmem_cache_alloc_node_noprof+0x6bf/0xb80 mm/slub.c:4186\n kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:587\n __alloc_skb+0x363/0x7b0 net/core/skbuff.c:678\n alloc_skb include/linux/skbuff.h:1322 [inline]\n sock_wmalloc+0xfe/0x1a0 net/core/sock.c:2732\n pppoe_sendmsg+0x3a7/0xb90 drivers/net/ppp/pppoe.c:867\n sock_sendmsg_nosec net/socket.c:729 [inline]\n __sock_sendmsg+0x30f/0x380 net/socket.c:744\n ____sys_sendmsg+0x903/0xb60 net/socket.c:2602\n ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2656\n __sys_sendmmsg+0x3c1/0x960 net/socket.c:2742\n __do_sys_sendmmsg net/socket.c:2771 [inline]\n __se_sys_sendmmsg net/socket.c:2768 [inline]\n __x64_sys_sendmmsg+0xbc/0x120 net/socket.c:2768\n x64_sys_call+0xb6e/0x3ba0 arch/x86/include/generated/asm/syscalls_64.h:308\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nCPU: 0 UID: 0 PID: 5460 Comm: syz.2.33 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n\nFixes: b5451d783ade (\"slip: Move the SLIP drivers\")\nReported-by: syzbot+2ada1bc857496353be5a@syzkaller.appspotmail.com\nCloses: https://lore.kernel.org/netdev/670646db.050a0220.3f80e.0027.GAE@google.com/T/#u\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nLink: https://patch.msgid.link/20241009091132.2136321-1-edumazet@google.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "6fd27ea183c208e478129a85e11d880fc70040f2", "tree": "441ed932f0b978fd8c78fa40fcee0754153b4aec", "parents": [ "40dddd4b8bd08a69471efd96107a4e1c73fabefc" ], "author": { "name": "D. Wythe", "email": "alibuda@linux.alibaba.com", "time": "Wed Oct 09 14:55:16 2024 +0800" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Oct 10 08:48:11 2024 -0700" }, "message": "net/smc: fix lacks of icsk_syn_mss with IPPROTO_SMC\n\nEric report a panic on IPPROTO_SMC, and give the facts\nthat when INET_PROTOSW_ICSK was set, icsk-\u003eicsk_sync_mss must be set too.\n\nBug: Unable to handle kernel NULL pointer dereference at virtual address\n0000000000000000\nMem abort info:\nESR \u003d 0x0000000086000005\nEC \u003d 0x21: IABT (current EL), IL \u003d 32 bits\nSET \u003d 0, FnV \u003d 0\nEA \u003d 0, S1PTW \u003d 0\nFSC \u003d 0x05: level 1 translation fault\nuser pgtable: 4k pages, 48-bit VAs, pgdp\u003d00000001195d1000\n[0000000000000000] pgd\u003d0800000109c46003, p4d\u003d0800000109c46003,\npud\u003d0000000000000000\nInternal error: Oops: 0000000086000005 [#1] PREEMPT SMP\nModules linked in:\nCPU: 1 UID: 0 PID: 8037 Comm: syz.3.265 Not tainted\n6.11.0-rc7-syzkaller-g5f5673607153 #0\nHardware name: Google Google Compute Engine/Google Compute Engine,\nBIOS Google 08/06/2024\npstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE\u003d--)\npc : 0x0\nlr : cipso_v4_sock_setattr+0x2a8/0x3c0 net/ipv4/cipso_ipv4.c:1910\nsp : ffff80009b887a90\nx29: ffff80009b887aa0 x28: ffff80008db94050 x27: 0000000000000000\nx26: 1fffe0001aa6f5b3 x25: dfff800000000000 x24: ffff0000db75da00\nx23: 0000000000000000 x22: ffff0000d8b78518 x21: 0000000000000000\nx20: ffff0000d537ad80 x19: ffff0000d8b78000 x18: 1fffe000366d79ee\nx17: ffff8000800614a8 x16: ffff800080569b84 x15: 0000000000000001\nx14: 000000008b336894 x13: 00000000cd96feaa x12: 0000000000000003\nx11: 0000000000040000 x10: 00000000000020a3 x9 : 1fffe0001b16f0f1\nx8 : 0000000000000000 x7 : 0000000000000000 x6 : 000000000000003f\nx5 : 0000000000000040 x4 : 0000000000000001 x3 : 0000000000000000\nx2 : 0000000000000002 x1 : 0000000000000000 x0 : ffff0000d8b78000\nCall trace:\n0x0\nnetlbl_sock_setattr+0x2e4/0x338 net/netlabel/netlabel_kapi.c:1000\nsmack_netlbl_add+0xa4/0x154 security/smack/smack_lsm.c:2593\nsmack_socket_post_create+0xa8/0x14c security/smack/smack_lsm.c:2973\nsecurity_socket_post_create+0x94/0xd4 security/security.c:4425\n__sock_create+0x4c8/0x884 net/socket.c:1587\nsock_create net/socket.c:1622 [inline]\n__sys_socket_create net/socket.c:1659 [inline]\n__sys_socket+0x134/0x340 net/socket.c:1706\n__do_sys_socket net/socket.c:1720 [inline]\n__se_sys_socket net/socket.c:1718 [inline]\n__arm64_sys_socket+0x7c/0x94 net/socket.c:1718\n__invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]\ninvoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49\nel0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132\ndo_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151\nel0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:712\nel0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730\nel0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598\nCode: ???????? ???????? ???????? ???????? (????????)\n---[ end trace 0000000000000000 ]---\n\nThis patch add a toy implementation that performs a simple return to\nprevent such panic. This is because MSS can be set in sock_create_kern\nor smc_setsockopt, similar to how it\u0027s done in AF_SMC. However, for\nAF_SMC, there is currently no way to synchronize MSS within\n__sys_connect_file. This toy implementation lays the groundwork for us\nto support such feature for IPPROTO_SMC in the future.\n\nFixes: d25a92ccae6b (\"net/smc: Introduce IPPROTO_SMC\")\nReported-by: Eric Dumazet \u003cedumazet@google.com\u003e\nSigned-off-by: D. Wythe \u003calibuda@linux.alibaba.com\u003e\nReviewed-by: Eric Dumazet \u003cedumazet@google.com\u003e\nReviewed-by: Wenjia Zhang \u003cwenjia@linux.ibm.com\u003e\nLink: https://patch.msgid.link/1728456916-67035-1-git-send-email-alibuda@linux.alibaba.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "40dddd4b8bd08a69471efd96107a4e1c73fabefc", "tree": "6f1f3af25e175a32dc610b763f2fe8d28cd835ac", "parents": [ "aeb218d900e3ea2cc3878ba92cb4758227075358" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Wed Oct 09 18:58:02 2024 +0000" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Oct 10 08:47:13 2024 -0700" }, "message": "ppp: fix ppp_async_encode() illegal access\n\nsyzbot reported an issue in ppp_async_encode() [1]\n\nIn this case, pppoe_sendmsg() is called with a zero size.\nThen ppp_async_encode() is called with an empty skb.\n\nBUG: KMSAN: uninit-value in ppp_async_encode drivers/net/ppp/ppp_async.c:545 [inline]\n BUG: KMSAN: uninit-value in ppp_async_push+0xb4f/0x2660 drivers/net/ppp/ppp_async.c:675\n ppp_async_encode drivers/net/ppp/ppp_async.c:545 [inline]\n ppp_async_push+0xb4f/0x2660 drivers/net/ppp/ppp_async.c:675\n ppp_async_send+0x130/0x1b0 drivers/net/ppp/ppp_async.c:634\n ppp_channel_bridge_input drivers/net/ppp/ppp_generic.c:2280 [inline]\n ppp_input+0x1f1/0xe60 drivers/net/ppp/ppp_generic.c:2304\n pppoe_rcv_core+0x1d3/0x720 drivers/net/ppp/pppoe.c:379\n sk_backlog_rcv+0x13b/0x420 include/net/sock.h:1113\n __release_sock+0x1da/0x330 net/core/sock.c:3072\n release_sock+0x6b/0x250 net/core/sock.c:3626\n pppoe_sendmsg+0x2b8/0xb90 drivers/net/ppp/pppoe.c:903\n sock_sendmsg_nosec net/socket.c:729 [inline]\n __sock_sendmsg+0x30f/0x380 net/socket.c:744\n ____sys_sendmsg+0x903/0xb60 net/socket.c:2602\n ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2656\n __sys_sendmmsg+0x3c1/0x960 net/socket.c:2742\n __do_sys_sendmmsg net/socket.c:2771 [inline]\n __se_sys_sendmmsg net/socket.c:2768 [inline]\n __x64_sys_sendmmsg+0xbc/0x120 net/socket.c:2768\n x64_sys_call+0xb6e/0x3ba0 arch/x86/include/generated/asm/syscalls_64.h:308\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nUninit was created at:\n slab_post_alloc_hook mm/slub.c:4092 [inline]\n slab_alloc_node mm/slub.c:4135 [inline]\n kmem_cache_alloc_node_noprof+0x6bf/0xb80 mm/slub.c:4187\n kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:587\n __alloc_skb+0x363/0x7b0 net/core/skbuff.c:678\n alloc_skb include/linux/skbuff.h:1322 [inline]\n sock_wmalloc+0xfe/0x1a0 net/core/sock.c:2732\n pppoe_sendmsg+0x3a7/0xb90 drivers/net/ppp/pppoe.c:867\n sock_sendmsg_nosec net/socket.c:729 [inline]\n __sock_sendmsg+0x30f/0x380 net/socket.c:744\n ____sys_sendmsg+0x903/0xb60 net/socket.c:2602\n ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2656\n __sys_sendmmsg+0x3c1/0x960 net/socket.c:2742\n __do_sys_sendmmsg net/socket.c:2771 [inline]\n __se_sys_sendmmsg net/socket.c:2768 [inline]\n __x64_sys_sendmmsg+0xbc/0x120 net/socket.c:2768\n x64_sys_call+0xb6e/0x3ba0 arch/x86/include/generated/asm/syscalls_64.h:308\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nCPU: 1 UID: 0 PID: 5411 Comm: syz.1.14 Not tainted 6.12.0-rc1-syzkaller-00165-g360c1f1f24c6 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n\nFixes: 1da177e4c3f4 (\"Linux-2.6.12-rc2\")\nReported-by: syzbot+1d121645899e7692f92a@syzkaller.appspotmail.com\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/20241009185802.3763282-1-edumazet@google.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "aeb218d900e3ea2cc3878ba92cb4758227075358", "tree": "98bf3c537fced1dee939c880f17e301dad1a1d35", "parents": [ "ffc8fa91bef547ed419fb093e5e1703567552d2a" ], "author": { "name": "Simon Horman", "email": "horms@kernel.org", "time": "Wed Oct 09 10:12:19 2024 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Oct 10 08:35:20 2024 -0700" }, "message": "docs: netdev: document guidance on cleanup patches\n\nThe purpose of this section is to document what is the current practice\nregarding clean-up patches which address checkpatch warnings and similar\nproblems. I feel there is a value in having this documented so others\ncan easily refer to it.\n\nClearly this topic is subjective. And to some extent the current\npractice discourages a wider range of patches than is described here.\nBut I feel it is best to start somewhere, with the most well established\npart of the current practice.\n\nSigned-off-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/20241009-doc-mc-clean-v2-1-e637b665fa81@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "ffc8fa91bef547ed419fb093e5e1703567552d2a", "tree": "e4dce5ab51ea4be31ef0c8dc6687634bcb940197", "parents": [ "9a3cd877dc93061fbbe0c834d53d89639e7ea46a", "b5e837c86041bef60f36cf9f20a641a30764379a" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 10 15:39:37 2024 +0200" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 10 15:39:38 2024 +0200" }, "message": "Merge branch \u0027rtnetlink-handle-error-of-rtnl_register_module\u0027\n\nKuniyuki Iwashima says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nrtnetlink: Handle error of rtnl_register_module().\n\nWhile converting phonet to per-netns RTNL, I found a weird comment\n\n /* Further rtnl_register_module() cannot fail */\n\nthat was true but no longer true after commit addf9b90de22 (\"net:\nrtnetlink: use rcu to free rtnl message handlers\").\n\nMany callers of rtnl_register_module() just ignore the returned\nvalue but should handle them properly.\n\nThis series introduces two helpers, rtnl_register_many() and\nrtnl_unregister_many(), to do that easily and fix such callers.\n\nAll rtnl_register() and rtnl_register_module() will be converted\nto _many() variant and some rtnl_lock() will be saved in _many()\nlater in net-next.\n\nChanges:\n v4:\n * Add more context in changelog of each patch\n\n v3: https://lore.kernel.org/all/20241007124459.5727-1-kuniyu@amazon.com/\n * Move module *owner to struct rtnl_msg_handler\n * Make struct rtnl_msg_handler args/vars const\n * Update mctp goto labels\n\n v2: https://lore.kernel.org/netdev/20241004222358.79129-1-kuniyu@amazon.com/\n * Remove __exit from mctp_neigh_exit().\n\n v1: https://lore.kernel.org/netdev/20241003205725.5612-1-kuniyu@amazon.com/\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20241008184737.9619-1-kuniyu@amazon.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "b5e837c86041bef60f36cf9f20a641a30764379a", "tree": "e4dce5ab51ea4be31ef0c8dc6687634bcb940197", "parents": [ "5be2062e3080e3ff6707816caa445ec0c6eaacf7" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@amazon.com", "time": "Tue Oct 08 11:47:37 2024 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 10 15:39:36 2024 +0200" }, "message": "phonet: Handle error of rtnl_register_module().\n\nBefore commit addf9b90de22 (\"net: rtnetlink: use rcu to free rtnl\nmessage handlers\"), once the first rtnl_register_module() allocated\nrtnl_msg_handlers[PF_PHONET], the following calls never failed.\n\nHowever, after the commit, rtnl_register_module() could fail silently\nto allocate rtnl_msg_handlers[PF_PHONET][msgtype] and requires error\nhandling for each call.\n\nHandling the error allows users to view a module as an all-or-nothing\nthing in terms of the rtnetlink functionality. This prevents syzkaller\nfrom reporting spurious errors from its tests, where OOM often occurs\nand module is automatically loaded.\n\nLet\u0027s use rtnl_register_many() to handle the errors easily.\n\nFixes: addf9b90de22 (\"net: rtnetlink: use rcu to free rtnl message handlers\")\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nAcked-by: Rémi Denis-Courmont \u003ccourmisch@gmail.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "5be2062e3080e3ff6707816caa445ec0c6eaacf7", "tree": "879ba5e14150362810f9a2c8b9f5de5883f6b5c8", "parents": [ "d51705614f668254cc5def7490df76f9680b4659" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@amazon.com", "time": "Tue Oct 08 11:47:36 2024 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 10 15:39:35 2024 +0200" }, "message": "mpls: Handle error of rtnl_register_module().\n\nSince introduced, mpls_init() has been ignoring the returned\nvalue of rtnl_register_module(), which could fail silently.\n\nHandling the error allows users to view a module as an all-or-nothing\nthing in terms of the rtnetlink functionality. This prevents syzkaller\nfrom reporting spurious errors from its tests, where OOM often occurs\nand module is automatically loaded.\n\nLet\u0027s handle the errors by rtnl_register_many().\n\nFixes: 03c0566542f4 (\"mpls: Netlink commands to add, remove, and dump routes\")\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "d51705614f668254cc5def7490df76f9680b4659", "tree": "d727ba8071a9dc4dd6f67905fe87ba70633a4850", "parents": [ "cba5e43b0b757734b1e79f624d93a71435e31136" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@amazon.com", "time": "Tue Oct 08 11:47:35 2024 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 10 15:39:35 2024 +0200" }, "message": "mctp: Handle error of rtnl_register_module().\n\nSince introduced, mctp has been ignoring the returned value of\nrtnl_register_module(), which could fail silently.\n\nHandling the error allows users to view a module as an all-or-nothing\nthing in terms of the rtnetlink functionality. This prevents syzkaller\nfrom reporting spurious errors from its tests, where OOM often occurs\nand module is automatically loaded.\n\nLet\u0027s handle the errors by rtnl_register_many().\n\nFixes: 583be982d934 (\"mctp: Add device handling and netlink interface\")\nFixes: 831119f88781 (\"mctp: Add neighbour netlink interface\")\nFixes: 06d2f4c583a7 (\"mctp: Add netlink route management\")\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nReviewed-by: Jeremy Kerr \u003cjk@codeconstruct.com.au\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "cba5e43b0b757734b1e79f624d93a71435e31136", "tree": "c89dd3e5acabd3cf74c64cc602bf3ef5bb7faa94", "parents": [ "78b7b991838a4a6baeaad934addc4db2c5917eb8" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@amazon.com", "time": "Tue Oct 08 11:47:34 2024 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 10 15:39:35 2024 +0200" }, "message": "bridge: Handle error of rtnl_register_module().\n\nSince introduced, br_vlan_rtnl_init() has been ignoring the returned\nvalue of rtnl_register_module(), which could fail silently.\n\nHandling the error allows users to view a module as an all-or-nothing\nthing in terms of the rtnetlink functionality. This prevents syzkaller\nfrom reporting spurious errors from its tests, where OOM often occurs\nand module is automatically loaded.\n\nLet\u0027s handle the errors by rtnl_register_many().\n\nFixes: 8dcea187088b (\"net: bridge: vlan: add rtm definitions and dump support\")\nFixes: f26b296585dc (\"net: bridge: vlan: add new rtm message support\")\nFixes: adb3ce9bcb0f (\"net: bridge: vlan: add del rtm message support\")\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nAcked-by: Nikolay Aleksandrov \u003crazor@blackwall.org\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "78b7b991838a4a6baeaad934addc4db2c5917eb8", "tree": "429cce9636b94c8216fd4b1713d246e2f14a4700", "parents": [ "07cc7b0b942bf55ef1a471470ecda8d2a6a6541f" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@amazon.com", "time": "Tue Oct 08 11:47:33 2024 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 10 15:39:35 2024 +0200" }, "message": "vxlan: Handle error of rtnl_register_module().\n\nSince introduced, vxlan_vnifilter_init() has been ignoring the\nreturned value of rtnl_register_module(), which could fail silently.\n\nHandling the error allows users to view a module as an all-or-nothing\nthing in terms of the rtnetlink functionality. This prevents syzkaller\nfrom reporting spurious errors from its tests, where OOM often occurs\nand module is automatically loaded.\n\nLet\u0027s handle the errors by rtnl_register_many().\n\nFixes: f9c4bb0b245c (\"vxlan: vni filtering support on collect metadata device\")\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nReviewed-by: Nikolay Aleksandrov \u003crazor@blackwall.org\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "07cc7b0b942bf55ef1a471470ecda8d2a6a6541f", "tree": "198326270f4756e9313806fec12a8f0cfe691b53", "parents": [ "9a3cd877dc93061fbbe0c834d53d89639e7ea46a" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@amazon.com", "time": "Tue Oct 08 11:47:32 2024 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 10 15:39:35 2024 +0200" }, "message": "rtnetlink: Add bulk registration helpers for rtnetlink message handlers.\n\nBefore commit addf9b90de22 (\"net: rtnetlink: use rcu to free rtnl message\nhandlers\"), once rtnl_msg_handlers[protocol] was allocated, the following\nrtnl_register_module() for the same protocol never failed.\n\nHowever, after the commit, rtnl_msg_handler[protocol][msgtype] needs to\nbe allocated in each rtnl_register_module(), so each call could fail.\n\nMany callers of rtnl_register_module() do not handle the returned error,\nand we need to add many error handlings.\n\nTo handle that easily, let\u0027s add wrapper functions for bulk registration\nof rtnetlink message handlers.\n\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "7738568885f2eaecfc10a3f530a2693e5f0ae3d0", "tree": "c7bdeaf7dc0d1f2f2a2d9e6e55b9f28d326531e8", "parents": [ "fa36b4bc9234f1538580737a7d77a5344c9a4afe" ], "author": { "name": "Ulf Hansson", "email": "ulf.hansson@linaro.org", "time": "Wed Oct 02 14:22:23 2024 +0200" }, "committer": { "name": "Ulf Hansson", "email": "ulf.hansson@linaro.org", "time": "Thu Oct 10 13:55:17 2024 +0200" }, "message": "PM: domains: Fix alloc/free in dev_pm_domain_attach|detach_list()\n\nThe dev_pm_domain_attach|detach_list() functions are not resource managed,\nhence they should not use devm_* helpers to manage allocation/freeing of\ndata. Let\u0027s fix this by converting to the traditional alloc/free functions.\n\nFixes: 161e16a5e50a (\"PM: domains: Add helper functions to attach/detach multiple PM domains\")\nCc: stable@vger.kernel.org\nSigned-off-by: Ulf Hansson \u003culf.hansson@linaro.org\u003e\nAcked-by: Viresh Kumar \u003cviresh.kumar@linaro.org\u003e\nLink: https://lore.kernel.org/r/20241002122232.194245-3-ulf.hansson@linaro.org\n" }, { "commit": "fa36b4bc9234f1538580737a7d77a5344c9a4afe", "tree": "8bec4affc7fc383b24901e6f0548bc4b995afd0c", "parents": [ "500580c7ae7bbd38c7641102059fa9308f35d26c" ], "author": { "name": "Ulf Hansson", "email": "ulf.hansson@linaro.org", "time": "Wed Oct 02 14:22:22 2024 +0200" }, "committer": { "name": "Ulf Hansson", "email": "ulf.hansson@linaro.org", "time": "Thu Oct 10 13:54:50 2024 +0200" }, "message": "Revert \"drm/tegra: gr3d: Convert into dev_pm_domain_attach|detach_list()\"\n\nThis reverts commit f790b5c09665cab0d51dfcc84832d79d2b1e6c0e.\n\nThe reverted commit was not ready to be applied due to dependency on other\nOPP/pmdomain changes that didn\u0027t make it for the last release cycle. Let\u0027s\nrevert it to fix the behaviour.\n\nSigned-off-by: Ulf Hansson \u003culf.hansson@linaro.org\u003e\nAcked-by: Viresh Kumar \u003cviresh.kumar@linaro.org\u003e\nLink: https://lore.kernel.org/r/20241002122232.194245-2-ulf.hansson@linaro.org\n" }, { "commit": "9a3cd877dc93061fbbe0c834d53d89639e7ea46a", "tree": "8e870cb2ad9a9321453c87a3e4cd92d2643a6530", "parents": [ "ac888d58869bb99753e7652be19a151df9ecb35d", "c6a0862bee696cfb236a4e160a7f376c0ecdcf0c" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 10 13:50:55 2024 +0200" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 10 13:50:55 2024 +0200" }, "message": "Merge tag \u0027nf-24-10-09\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf\n\nPablo Neira Ayuso says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nNetfilter fixes for net\n\nThe following patchset contains Netfilter fixes for net:\n\n1) Restrict xtables extensions to families that are safe, syzbot found\n a way to combine ebtables with extensions that are never used by\n userspace tools. From Florian Westphal.\n\n2) Set l3mdev inconditionally whenever possible in nft_fib to fix lookup\n mismatch, also from Florian.\n\nnetfilter pull request 24-10-09\n\n* tag \u0027nf-24-10-09\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf:\n selftests: netfilter: conntrack_vrf.sh: add fib test case\n netfilter: fib: check correct rtable in vrf setups\n netfilter: xtables: avoid NFPROTO_UNSPEC where needed\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20241009213858.3565808-1-pablo@netfilter.org\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "27e8fe0da3b75520edfba9cee0030aeb5aef1505", "tree": "b9b72367b01b1333b01ad1310dd40dace94df444", "parents": [ "5b35746a0fdc73063a4c7fc6208b7abd644f9ef5" ], "author": { "name": "Michal Wilczynski", "email": "m.wilczynski@samsung.com", "time": "Tue Oct 08 12:03:27 2024 +0200" }, "committer": { "name": "Ulf Hansson", "email": "ulf.hansson@linaro.org", "time": "Thu Oct 10 13:30:48 2024 +0200" }, "message": "mmc: sdhci-of-dwcmshc: Prevent stale command interrupt handling\n\nWhile working with the T-Head 1520 LicheePi4A SoC, certain conditions\narose that allowed me to reproduce a race issue in the sdhci code.\n\nTo reproduce the bug, you need to enable the sdio1 controller in the\ndevice tree file\n`arch/riscv/boot/dts/thead/th1520-lichee-module-4a.dtsi` as follows:\n\n\u0026sdio1 {\n\tbus-width \u003d \u003c4\u003e;\n\tmax-frequency \u003d \u003c100000000\u003e;\n\tno-sd;\n\tno-mmc;\n\tbroken-cd;\n\tcap-sd-highspeed;\n\tpost-power-on-delay-ms \u003d \u003c50\u003e;\n\tstatus \u003d \"okay\";\n\twakeup-source;\n\tkeep-power-in-suspend;\n};\n\nWhen resetting the SoC using the reset button, the following messages\nappear in the dmesg log:\n\n[ 8.164898] mmc2: Got command interrupt 0x00000001 even though no\ncommand operation was in progress.\n[ 8.174054] mmc2: sdhci: \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d SDHCI REGISTER DUMP \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n[ 8.180503] mmc2: sdhci: Sys addr: 0x00000000 | Version: 0x00000005\n[ 8.186950] mmc2: sdhci: Blk size: 0x00000000 | Blk cnt: 0x00000000\n[ 8.193395] mmc2: sdhci: Argument: 0x00000000 | Trn mode: 0x00000000\n[ 8.199841] mmc2: sdhci: Present: 0x03da0000 | Host ctl: 0x00000000\n[ 8.206287] mmc2: sdhci: Power: 0x0000000f | Blk gap: 0x00000000\n[ 8.212733] mmc2: sdhci: Wake-up: 0x00000000 | Clock: 0x0000decf\n[ 8.219178] mmc2: sdhci: Timeout: 0x00000000 | Int stat: 0x00000000\n[ 8.225622] mmc2: sdhci: Int enab: 0x00ff1003 | Sig enab: 0x00ff1003\n[ 8.232068] mmc2: sdhci: ACmd stat: 0x00000000 | Slot int: 0x00000000\n[ 8.238513] mmc2: sdhci: Caps: 0x3f69c881 | Caps_1: 0x08008177\n[ 8.244959] mmc2: sdhci: Cmd: 0x00000502 | Max curr: 0x00191919\n[ 8.254115] mmc2: sdhci: Resp[0]: 0x00001009 | Resp[1]: 0x00000000\n[ 8.260561] mmc2: sdhci: Resp[2]: 0x00000000 | Resp[3]: 0x00000000\n[ 8.267005] mmc2: sdhci: Host ctl2: 0x00001000\n[ 8.271453] mmc2: sdhci: ADMA Err: 0x00000000 | ADMA Ptr:\n0x0000000000000000\n[ 8.278594] mmc2: sdhci: \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nI also enabled some traces to better understand the problem:\n\n kworker/3:1-62 [003] ..... 8.163538: mmc_request_start:\nmmc2: start struct mmc_request[000000000d30cc0c]: cmd_opcode\u003d5\ncmd_arg\u003d0x0 cmd_flags\u003d0x2e1 cmd_retries\u003d0 stop_opcode\u003d0 stop_arg\u003d0x0\nstop_flags\u003d0x0 stop_retries\u003d0 sbc_opcode\u003d0 sbc_arg\u003d0x0 sbc_flags\u003d0x0\nsbc_retires\u003d0 blocks\u003d0 block_size\u003d0 blk_addr\u003d0 data_flags\u003d0x0 tag\u003d0\ncan_retune\u003d0 doing_retune\u003d0 retune_now\u003d0 need_retune\u003d0 hold_retune\u003d1\nretune_period\u003d0\n \u003cidle\u003e-0 [000] d.h2. 8.164816: sdhci_cmd_irq:\nhw_name\u003dffe70a0000.mmc quirks\u003d0x2008008 quirks2\u003d0x8 intmask\u003d0x10000\nintmask_p\u003d0x18000\n irq/24-mmc2-96 [000] ..... 8.164840: sdhci_thread_irq:\nmsg\u003d\n irq/24-mmc2-96 [000] d.h2. 8.164896: sdhci_cmd_irq:\nhw_name\u003dffe70a0000.mmc quirks\u003d0x2008008 quirks2\u003d0x8 intmask\u003d0x1\nintmask_p\u003d0x1\n irq/24-mmc2-96 [000] ..... 8.285142: mmc_request_done:\nmmc2: end struct mmc_request[000000000d30cc0c]: cmd_opcode\u003d5\ncmd_err\u003d-110 cmd_resp\u003d0x0 0x0 0x0 0x0 cmd_retries\u003d0 stop_opcode\u003d0\nstop_err\u003d0 stop_resp\u003d0x0 0x0 0x0 0x0 stop_retries\u003d0 sbc_opcode\u003d0\nsbc_err\u003d0 sbc_resp\u003d0x0 0x0 0x0 0x0 sbc_retries\u003d0 bytes_xfered\u003d0\ndata_err\u003d0 tag\u003d0 can_retune\u003d0 doing_retune\u003d0 retune_now\u003d0 need_retune\u003d0\nhold_retune\u003d1 retune_period\u003d0\n\nHere\u0027s what happens: the __mmc_start_request function is called with\nopcode 5. Since the power to the Wi-Fi card, which resides on this SDIO\nbus, is initially off after the reset, an interrupt SDHCI_INT_TIMEOUT is\ntriggered. Immediately after that, a second interrupt SDHCI_INT_RESPONSE\nis triggered. Depending on the exact timing, these conditions can\ntrigger the following race problem:\n\n1) The sdhci_cmd_irq top half handles the command as an error. It sets\n host-\u003ecmd to NULL and host-\u003epending_reset to true.\n2) The sdhci_thread_irq bottom half is scheduled next and executes faster\n than the second interrupt handler for SDHCI_INT_RESPONSE. It clears\n host-\u003epending_reset before the SDHCI_INT_RESPONSE handler runs.\n3) The pending interrupt SDHCI_INT_RESPONSE handler gets called, triggering\n a code path that prints: \"mmc2: Got command interrupt 0x00000001 even\n though no command operation was in progress.\"\n\nTo solve this issue, we need to clear pending interrupts when resetting\nhost-\u003epending_reset. This ensures that after sdhci_threaded_irq restores\ninterrupts, there are no pending stale interrupts.\n\nThe behavior observed here is non-compliant with the SDHCI standard.\nPlace the code in the sdhci-of-dwcmshc driver to account for a\nhardware-specific quirk instead of the core SDHCI code.\n\nSigned-off-by: Michal Wilczynski \u003cm.wilczynski@samsung.com\u003e\nAcked-by: Adrian Hunter \u003cadrian.hunter@intel.com\u003e\nFixes: 43658a542ebf (\"mmc: sdhci-of-dwcmshc: Add support for T-Head TH1520\")\nCc: stable@vger.kernel.org\nLink: https://lore.kernel.org/r/20241008100327.4108895-1-m.wilczynski@samsung.com\nSigned-off-by: Ulf Hansson \u003culf.hansson@linaro.org\u003e\n" }, { "commit": "ac888d58869bb99753e7652be19a151df9ecb35d", "tree": "24afe62b0418baa860cbcf0ab5303350d0e0bdbc", "parents": [ "a354733c738d905eb8c446fca43b872d2a985f8b" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Tue Oct 08 14:31:10 2024 +0000" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 10 11:28:17 2024 +0200" }, "message": "net: do not delay dst_entries_add() in dst_release()\n\ndst_entries_add() uses per-cpu data that might be freed at netns\ndismantle from ip6_route_net_exit() calling dst_entries_destroy()\n\nBefore ip6_route_net_exit() can be called, we release all\nthe dsts associated with this netns, via calls to dst_release(),\nwhich waits an rcu grace period before calling dst_destroy()\n\ndst_entries_add() use in dst_destroy() is racy, because\ndst_entries_destroy() could have been called already.\n\nDecrementing the number of dsts must happen sooner.\n\nNotes:\n\n1) in CONFIG_XFRM case, dst_destroy() can call\n dst_release_immediate(child), this might also cause UAF\n if the child does not have DST_NOCOUNT set.\n IPSEC maintainers might take a look and see how to address this.\n\n2) There is also discussion about removing this count of dst,\n which might happen in future kernels.\n\nFixes: f88649721268 (\"ipv4: fix dst race in sk_dst_get()\")\nCloses: https://lore.kernel.org/lkml/CANn89iLCCGsP7SFn9HKpvnKu96Td4KD08xf7aGtiYgZnkjaL\u003dw@mail.gmail.com/T/\nReported-by: Naresh Kamboju \u003cnaresh.kamboju@linaro.org\u003e\nTested-by: Linux Kernel Functional Testing \u003clkft@linaro.org\u003e\nTested-by: Naresh Kamboju \u003cnaresh.kamboju@linaro.org\u003e\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nCc: Xin Long \u003clucien.xin@gmail.com\u003e\nCc: Steffen Klassert \u003csteffen.klassert@secunet.com\u003e\nReviewed-by: Xin Long \u003clucien.xin@gmail.com\u003e\nLink: https://patch.msgid.link/20241008143110.1064899-1-edumazet@google.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "0df4b9d91488922859db8dde4ee56936e01d547c", "tree": "d168f8b56f51a5ea179305dcf54561f170e00414", "parents": [ "a38719e3157118428e34fbd45b0d0707a5877784" ], "author": { "name": "Damien Le Moal", "email": "dlemoal@kernel.org", "time": "Thu Oct 10 11:01:17 2024 +0900" }, "committer": { "name": "Niklas Cassel", "email": "cassel@kernel.org", "time": "Thu Oct 10 10:58:27 2024 +0200" }, "message": "ata: libata: Update MAINTAINERS file\n\nModify the entry for the ahci_platform driver (LIBATA SATA\nAHCI PLATFORM devices support) in the MAINTAINERS file to remove Jens\nas maintainer. Also remove all references to Jens block tree from the\nvarious LIBATA driver entries as the tree reference for these is defined\nby the LIBATA SUBSYSTEM entry.\n\nSigned-off-by: Damien Le Moal \u003cdlemoal@kernel.org\u003e\nAcked-by: Jens Axboe \u003caxboe@kernel.dk\u003e\nLink: https://lore.kernel.org/r/20241010020117.416333-1-dlemoal@kernel.org\nSigned-off-by: Niklas Cassel \u003ccassel@kernel.org\u003e\n" }, { "commit": "fcddc71ec7ecf15b4df3c41288c9cf0b8e886111", "tree": "f2a1afa8ba60da67dc6721253cfe5ec2effa66e5", "parents": [ "835745a377a4519decd1a36d6b926e369b3033e2" ], "author": { "name": "Janne Grunau", "email": "j@jannau.net", "time": "Sun Oct 06 19:49:45 2024 +0200" }, "committer": { "name": "Thomas Zimmermann", "email": "tzimmermann@suse.de", "time": "Thu Oct 10 09:49:25 2024 +0200" }, "message": "drm/fbdev-dma: Only cleanup deferred I/O if necessary\n\nCommit 5a498d4d06d6 (\"drm/fbdev-dma: Only install deferred I/O if\nnecessary\") initializes deferred I/O only if it is used.\ndrm_fbdev_dma_fb_destroy() however calls fb_deferred_io_cleanup()\nunconditionally with struct fb_info.fbdefio \u003d\u003d NULL. KASAN with the\nout-of-tree Apple silicon display driver posts following warning from\n__flush_work() of a random struct work_struct instead of the expected\nNULL pointer derefs.\n\n[ 22.053799] ------------[ cut here ]------------\n[ 22.054832] WARNING: CPU: 2 PID: 1 at kernel/workqueue.c:4177 __flush_work+0x4d8/0x580\n[ 22.056597] Modules linked in: uhid bnep uinput nls_ascii ip6_tables ip_tables i2c_dev loop fuse dm_multipath nfnetlink zram hid_magicmouse btrfs xor xor_neon brcmfmac_wcc raid6_pq hci_bcm4377 bluetooth brcmfmac hid_apple brcmutil nvmem_spmi_mfd simple_mfd_spmi dockchannel_hid cfg80211 joydev regmap_spmi nvme_apple ecdh_generic ecc macsmc_hid rfkill dwc3 appledrm snd_soc_macaudio macsmc_power nvme_core apple_isp phy_apple_atc apple_sart apple_rtkit_helper apple_dockchannel tps6598x macsmc_hwmon snd_soc_cs42l84 videobuf2_v4l2 spmi_apple_controller nvmem_apple_efuses videobuf2_dma_sg apple_z2 videobuf2_memops spi_nor panel_summit videobuf2_common asahi videodev pwm_apple apple_dcp snd_soc_apple_mca apple_admac spi_apple clk_apple_nco i2c_pasemi_platform snd_pcm_dmaengine mc i2c_pasemi_core mux_core ofpart adpdrm drm_dma_helper apple_dart apple_soc_cpufreq leds_pwm phram\n[ 22.073768] CPU: 2 UID: 0 PID: 1 Comm: systemd-shutdow Not tainted 6.11.2-asahi+ #asahi-dev\n[ 22.075612] Hardware name: Apple MacBook Pro (13-inch, M2, 2022) (DT)\n[ 22.077032] pstate: 01400005 (nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE\u003d--)\n[ 22.078567] pc : __flush_work+0x4d8/0x580\n[ 22.079471] lr : __flush_work+0x54/0x580\n[ 22.080345] sp : ffffc000836ef820\n[ 22.081089] x29: ffffc000836ef880 x28: 0000000000000000 x27: ffff80002ddb7128\n[ 22.082678] x26: dfffc00000000000 x25: 1ffff000096f0c57 x24: ffffc00082d3e358\n[ 22.084263] x23: ffff80004b7862b8 x22: dfffc00000000000 x21: ffff80005aa1d470\n[ 22.085855] x20: ffff80004b786000 x19: ffff80004b7862a0 x18: 0000000000000000\n[ 22.087439] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000005\n[ 22.089030] x14: 1ffff800106ddf0a x13: 0000000000000000 x12: 0000000000000000\n[ 22.090618] x11: ffffb800106ddf0f x10: dfffc00000000000 x9 : 1ffff800106ddf0e\n[ 22.092206] x8 : 0000000000000000 x7 : aaaaaaaaaaaaaaaa x6 : 0000000000000001\n[ 22.093790] x5 : ffffc000836ef728 x4 : 0000000000000000 x3 : 0000000000000020\n[ 22.095368] x2 : 0000000000000008 x1 : 00000000000000aa x0 : 0000000000000000\n[ 22.096955] Call trace:\n[ 22.097505] __flush_work+0x4d8/0x580\n[ 22.098330] flush_delayed_work+0x80/0xb8\n[ 22.099231] fb_deferred_io_cleanup+0x3c/0x130\n[ 22.100217] drm_fbdev_dma_fb_destroy+0x6c/0xe0 [drm_dma_helper]\n[ 22.101559] unregister_framebuffer+0x210/0x2f0\n[ 22.102575] drm_fb_helper_unregister_info+0x48/0x60\n[ 22.103683] drm_fbdev_dma_client_unregister+0x4c/0x80 [drm_dma_helper]\n[ 22.105147] drm_client_dev_unregister+0x1cc/0x230\n[ 22.106217] drm_dev_unregister+0x58/0x570\n[ 22.107125] apple_drm_unbind+0x50/0x98 [appledrm]\n[ 22.108199] component_del+0x1f8/0x3a8\n[ 22.109042] dcp_platform_shutdown+0x24/0x38 [apple_dcp]\n[ 22.110357] platform_shutdown+0x70/0x90\n[ 22.111219] device_shutdown+0x368/0x4d8\n[ 22.112095] kernel_restart+0x6c/0x1d0\n[ 22.112946] __arm64_sys_reboot+0x1c8/0x328\n[ 22.113868] invoke_syscall+0x78/0x1a8\n[ 22.114703] do_el0_svc+0x124/0x1a0\n[ 22.115498] el0_svc+0x3c/0xe0\n[ 22.116181] el0t_64_sync_handler+0x70/0xc0\n[ 22.117110] el0t_64_sync+0x190/0x198\n[ 22.117931] ---[ end trace 0000000000000000 ]---\n\nSigned-off-by: Janne Grunau \u003cj@jannau.net\u003e\nFixes: 5a498d4d06d6 (\"drm/fbdev-dma: Only install deferred I/O if necessary\")\nReviewed-by: Thomas Zimmermann \u003ctzimmermann@suse.de\u003e\nReviewed-by: Linus Walleij \u003clinus.walleij@linaro.org\u003e\nSigned-off-by: Thomas Zimmermann \u003ctzimmermann@suse.de\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/ZwLNuZL-8Gh5UUQb@robin\n" }, { "commit": "b68694a95373c79e5d3290352e59ce031ce68ece", "tree": "9f7daf0b9e48f31e738a085d25a20711b95ddea4", "parents": [ "6df1197815142f968d9bdf8b82f76b0b20a0b7bb" ], "author": { "name": "Jinjie Ruan", "email": "ruanjinjie@huawei.com", "time": "Thu Oct 10 11:44:16 2024 +0800" }, "committer": { "name": "Rob Herring (Arm)", "email": "robh@kernel.org", "time": "Wed Oct 09 22:52:00 2024 -0500" }, "message": "of: Fix unbalanced of node refcount and memory leaks\n\nGot following report when doing overlay_test:\n\n\tOF: ERROR: memory leak, expected refcount 1 instead of 2,\n\tof_node_get()/of_node_put() unbalanced - destroy cset entry:\n\tattach overlay node /kunit-test\n\n\tOF: ERROR: memory leak before free overlay changeset, /kunit-test\n\nIn of_overlay_apply_kunit_cleanup(), the \"np\" should be associated with\nfake instead of test to call of_node_put(), so the node is put before\nthe overlay is removed.\n\nIt also fix the following memory leaks:\n\n\tunreferenced object 0xffffff80c7d22800 (size 256):\n\t comm \"kunit_try_catch\", pid 236, jiffies 4294894764\n\t hex dump (first 32 bytes):\n\t d0 26 d4 c2 80 ff ff ff 00 00 00 00 00 00 00 00 .\u0026..............\n\t 60 19 75 c1 80 ff ff ff 00 00 00 00 00 00 00 00 `.u.............\n\t backtrace (crc ee0a471c):\n\t [\u003c0000000058ea1340\u003e] kmemleak_alloc+0x34/0x40\n\t [\u003c00000000c538ac7e\u003e] __kmalloc_cache_noprof+0x26c/0x2f4\n\t [\u003c00000000119f34f3\u003e] __of_node_dup+0x4c/0x328\n\t [\u003c00000000b212ca39\u003e] build_changeset_next_level+0x2cc/0x4c0\n\t [\u003c00000000eb208e87\u003e] of_overlay_fdt_apply+0x930/0x1334\n\t [\u003c000000005bdc53a3\u003e] of_overlay_fdt_apply_kunit+0x54/0x10c\n\t [\u003c00000000143acd5d\u003e] of_overlay_apply_kunit_cleanup+0x12c/0x524\n\t [\u003c00000000a813abc8\u003e] kunit_try_run_case+0x13c/0x3ac\n\t [\u003c00000000d77ab00c\u003e] kunit_generic_run_threadfn_adapter+0x80/0xec\n\t [\u003c000000000b296be1\u003e] kthread+0x2e8/0x374\n\t [\u003c0000000007bd1c51\u003e] ret_from_fork+0x10/0x20\n\tunreferenced object 0xffffff80c1751960 (size 16):\n\t comm \"kunit_try_catch\", pid 236, jiffies 4294894764\n\t hex dump (first 16 bytes):\n\t 6b 75 6e 69 74 2d 74 65 73 74 00 c1 80 ff ff ff kunit-test......\n\t backtrace (crc 18196259):\n\t [\u003c0000000058ea1340\u003e] kmemleak_alloc+0x34/0x40\n\t [\u003c0000000071006e2c\u003e] __kmalloc_node_track_caller_noprof+0x300/0x3e0\n\t [\u003c00000000b16ac6cb\u003e] kstrdup+0x48/0x84\n\t [\u003c0000000050e3373b\u003e] __of_node_dup+0x60/0x328\n\t [\u003c00000000b212ca39\u003e] build_changeset_next_level+0x2cc/0x4c0\n\t [\u003c00000000eb208e87\u003e] of_overlay_fdt_apply+0x930/0x1334\n\t [\u003c000000005bdc53a3\u003e] of_overlay_fdt_apply_kunit+0x54/0x10c\n\t [\u003c00000000143acd5d\u003e] of_overlay_apply_kunit_cleanup+0x12c/0x524\n\t [\u003c00000000a813abc8\u003e] kunit_try_run_case+0x13c/0x3ac\n\t [\u003c00000000d77ab00c\u003e] kunit_generic_run_threadfn_adapter+0x80/0xec\n\t [\u003c000000000b296be1\u003e] kthread+0x2e8/0x374\n\t [\u003c0000000007bd1c51\u003e] ret_from_fork+0x10/0x20\n\tunreferenced object 0xffffff80c2e96e00 (size 192):\n\t comm \"kunit_try_catch\", pid 236, jiffies 4294894764\n\t hex dump (first 32 bytes):\n\t 80 19 75 c1 80 ff ff ff 0b 00 00 00 00 00 00 00 ..u.............\n\t a0 19 75 c1 80 ff ff ff 00 6f e9 c2 80 ff ff ff ..u......o......\n\t backtrace (crc 1924cba4):\n\t [\u003c0000000058ea1340\u003e] kmemleak_alloc+0x34/0x40\n\t [\u003c00000000c538ac7e\u003e] __kmalloc_cache_noprof+0x26c/0x2f4\n\t [\u003c000000009fdd35ad\u003e] __of_prop_dup+0x7c/0x2ec\n\t [\u003c00000000aa4e0111\u003e] add_changeset_property+0x548/0x9e0\n\t [\u003c000000004777e25b\u003e] build_changeset_next_level+0xd4/0x4c0\n\t [\u003c00000000a9c93f8a\u003e] build_changeset_next_level+0x3a8/0x4c0\n\t [\u003c00000000eb208e87\u003e] of_overlay_fdt_apply+0x930/0x1334\n\t [\u003c000000005bdc53a3\u003e] of_overlay_fdt_apply_kunit+0x54/0x10c\n\t [\u003c00000000143acd5d\u003e] of_overlay_apply_kunit_cleanup+0x12c/0x524\n\t [\u003c00000000a813abc8\u003e] kunit_try_run_case+0x13c/0x3ac\n\t [\u003c00000000d77ab00c\u003e] kunit_generic_run_threadfn_adapter+0x80/0xec\n\t [\u003c000000000b296be1\u003e] kthread+0x2e8/0x374\n\t [\u003c0000000007bd1c51\u003e] ret_from_fork+0x10/0x20\n\tunreferenced object 0xffffff80c1751980 (size 16):\n\t comm \"kunit_try_catch\", pid 236, jiffies 4294894764\n\t hex dump (first 16 bytes):\n\t 63 6f 6d 70 61 74 69 62 6c 65 00 c1 80 ff ff ff compatible......\n\t backtrace (crc 42df3c87):\n\t [\u003c0000000058ea1340\u003e] kmemleak_alloc+0x34/0x40\n\t [\u003c0000000071006e2c\u003e] __kmalloc_node_track_caller_noprof+0x300/0x3e0\n\t [\u003c00000000b16ac6cb\u003e] kstrdup+0x48/0x84\n\t [\u003c00000000a8888fd8\u003e] __of_prop_dup+0xb0/0x2ec\n\t [\u003c00000000aa4e0111\u003e] add_changeset_property+0x548/0x9e0\n\t [\u003c000000004777e25b\u003e] build_changeset_next_level+0xd4/0x4c0\n\t [\u003c00000000a9c93f8a\u003e] build_changeset_next_level+0x3a8/0x4c0\n\t [\u003c00000000eb208e87\u003e] of_overlay_fdt_apply+0x930/0x1334\n\t [\u003c000000005bdc53a3\u003e] of_overlay_fdt_apply_kunit+0x54/0x10c\n\t [\u003c00000000143acd5d\u003e] of_overlay_apply_kunit_cleanup+0x12c/0x524\n\t [\u003c00000000a813abc8\u003e] kunit_try_run_case+0x13c/0x3ac\n\t [\u003c00000000d77ab00c\u003e] kunit_generic_run_threadfn_adapter+0x80/0xec\n\t [\u003c000000000b296be1\u003e] kthread+0x2e8/0x374\n\tunreferenced object 0xffffff80c2e96f00 (size 192):\n\t comm \"kunit_try_catch\", pid 236, jiffies 4294894764\n\t hex dump (first 32 bytes):\n\t 40 f7 bb c6 80 ff ff ff 0b 00 00 00 00 00 00 00 @...............\n\t c0 19 75 c1 80 ff ff ff 00 00 00 00 00 00 00 00 ..u.............\n\t backtrace (crc f2f57ea7):\n\t [\u003c0000000058ea1340\u003e] kmemleak_alloc+0x34/0x40\n\t [\u003c00000000c538ac7e\u003e] __kmalloc_cache_noprof+0x26c/0x2f4\n\t [\u003c000000009fdd35ad\u003e] __of_prop_dup+0x7c/0x2ec\n\t [\u003c00000000aa4e0111\u003e] add_changeset_property+0x548/0x9e0\n\t [\u003c000000004777e25b\u003e] build_changeset_next_level+0xd4/0x4c0\n\t [\u003c00000000a9c93f8a\u003e] build_changeset_next_level+0x3a8/0x4c0\n\t [\u003c00000000eb208e87\u003e] of_overlay_fdt_apply+0x930/0x1334\n\t [\u003c000000005bdc53a3\u003e] of_overlay_fdt_apply_kunit+0x54/0x10c\n\t [\u003c00000000143acd5d\u003e] of_overlay_apply_kunit_cleanup+0x12c/0x524\n\t [\u003c00000000a813abc8\u003e] kunit_try_run_case+0x13c/0x3ac\n\t [\u003c00000000d77ab00c\u003e] kunit_generic_run_threadfn_adapter+0x80/0xec\n\t [\u003c000000000b296be1\u003e] kthread+0x2e8/0x374\n\t [\u003c0000000007bd1c51\u003e] ret_from_fork+0x10/0x20\n\t......\n\nHow to reproduce:\n\tCONFIG_OF_OVERLAY_KUNIT_TEST\u003dy, CONFIG_DEBUG_KMEMLEAK\u003dy\n\tand CONFIG_DEBUG_KMEMLEAK_AUTO_SCAN\u003dy, launch the kernel.\n\nFixes: 5c9dd72d8385 (\"of: Add a KUnit test for overlays and test managed APIs\")\nReviewed-by: Stephen Boyd \u003csboyd@kernel.org\u003e\nSigned-off-by: Jinjie Ruan \u003cruanjinjie@huawei.com\u003e\nLink: https://lore.kernel.org/r/20241010034416.2324196-1-ruanjinjie@huawei.com\nSigned-off-by: Rob Herring (Arm) \u003crobh@kernel.org\u003e\n" }, { "commit": "a354733c738d905eb8c446fca43b872d2a985f8b", "tree": "dabe4788988fba27ed639bd921afbdc954c21664", "parents": [ "5151a35c9b5f86a5899dd32c5fe286bfe5436479", "9d9e5347b035412daa844f884b94a05bac94f864" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 09 20:01:20 2024 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 09 20:01:20 2024 -0700" }, "message": "Merge branch \u0027100GbE\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/net-queue\n\nTony Nguyen says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nIntel Wired LAN Driver Updates 2024-10-08 (ice, i40e, igb, e1000e)\n\nThis series contains updates to ice, i40e, igb, and e1000e drivers.\n\nFor ice:\n\nMarcin allows driver to load, into safe mode, when DDP package is\nmissing or corrupted and adjusts the netif_is_ice() check to\naccount for when the device is in safe mode. He also fixes an\nout-of-bounds issue when MSI-X are increased for VFs.\n\nWojciech clears FDB entries on reset to match the hardware state.\n\nFor i40e:\n\nAleksandr adds locking around MACVLAN filters to prevent memory leaks\ndue to concurrency issues.\n\nFor igb:\n\nMohamed Khalfella adds a check to not attempt to bring up an already\nrunning interface on non-fatal PCIe errors.\n\nFor e1000e:\n\nVitaly changes board type for I219 to more closely match the hardware\nand stop PHY issues.\n\n* \u0027100GbE\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/net-queue:\n e1000e: change I219 (19) devices to ADP\n igb: Do not bring the device up after non-fatal error\n i40e: Fix macvlan leak by synchronizing access to mac_filter_hash\n ice: Fix increasing MSI-X on VF\n ice: Flush FDB entries before reset\n ice: Fix netif_is_ice() in Safe Mode\n ice: Fix entering Safe Mode\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20241008230050.928245-1-anthony.l.nguyen@intel.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "5151a35c9b5f86a5899dd32c5fe286bfe5436479", "tree": "5646c135f52ca6941f2cc8c7754ff0deacdf8489", "parents": [ "d94785bb46b6167382b1de3290eccc91fa98df53", "db0a37b7ac27d8ca27d3dc676a16d081c16ec7b9" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 09 19:43:46 2024 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 09 19:43:47 2024 -0700" }, "message": "Merge branch \u0027mptcp-misc-fixes-involving-fallback-to-tcp\u0027\n\nMatthieu Baerts says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nmptcp: misc. fixes involving fallback to TCP\n\n- Patch 1: better handle DSS corruptions from a bugged peer: reducing\n warnings, doing a fallback or a reset depending on the subflow state.\n For \u003e\u003d v5.7.\n\n- Patch 2: fix DSS corruption due to large pmtu xmit, where MPTCP was\n not taken into account. For \u003e\u003d v5.6.\n\n- Patch 3: fallback when MPTCP opts are dropped after the first data\n packet, instead of resetting the connection. For \u003e\u003d v5.6.\n\n- Patch 4: restrict the removal of a subflow to other closing states, a\n better fix, for a recent one. For \u003e\u003d v5.10.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20241008-net-mptcp-fallback-fixes-v1-0-c6fb8e93e551@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "db0a37b7ac27d8ca27d3dc676a16d081c16ec7b9", "tree": "5646c135f52ca6941f2cc8c7754ff0deacdf8489", "parents": [ "119d51e225febc8152476340a880f5415a01e99e" ], "author": { "name": "Matthieu Baerts (NGI0)", "email": "matttbe@kernel.org", "time": "Tue Oct 08 13:04:55 2024 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 09 19:43:44 2024 -0700" }, "message": "mptcp: pm: do not remove closing subflows\n\nIn a previous fix, the in-kernel path-manager has been modified not to\nretrigger the removal of a subflow if it was already closed, e.g. when\nthe initial subflow is removed, but kept in the subflows list.\n\nTo be complete, this fix should also skip the subflows that are in any\nclosing state: mptcp_close_ssk() will initiate the closure, but the\nswitch to the TCP_CLOSE state depends on the other peer.\n\nFixes: 58e1b66b4e4b (\"mptcp: pm: do not remove already closed subflows\")\nCc: stable@vger.kernel.org\nSuggested-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\nAcked-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nLink: https://patch.msgid.link/20241008-net-mptcp-fallback-fixes-v1-4-c6fb8e93e551@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "119d51e225febc8152476340a880f5415a01e99e", "tree": "715573250d38fc8b1d06454cdb1f00f14ef860e6", "parents": [ "4dabcdf581217e60690467a37c956a5b8dbc6bd9" ], "author": { "name": "Matthieu Baerts (NGI0)", "email": "matttbe@kernel.org", "time": "Tue Oct 08 13:04:54 2024 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 09 19:43:44 2024 -0700" }, "message": "mptcp: fallback when MPTCP opts are dropped after 1st data\n\nAs reported by Christoph [1], before this patch, an MPTCP connection was\nwrongly reset when a host received a first data packet with MPTCP\noptions after the 3wHS, but got the next ones without.\n\nAccording to the MPTCP v1 specs [2], a fallback should happen in this\ncase, because the host didn\u0027t receive a DATA_ACK from the other peer,\nnor receive data for more than the initial window which implies a\nDATA_ACK being received by the other peer.\n\nThe patch here re-uses the same logic as the one used in other places:\nby looking at allow_infinite_fallback, which is disabled at the creation\nof an additional subflow. It\u0027s not looking at the first DATA_ACK (or\nimplying one received from the other side) as suggested by the RFC, but\nit is in continuation with what was already done, which is safer, and it\nfixes the reported issue. The next step, looking at this first DATA_ACK,\nis tracked in [4].\n\nThis patch has been validated using the following Packetdrill script:\n\n 0 socket(..., SOCK_STREAM, IPPROTO_MPTCP) \u003d 3\n +0 setsockopt(3, SOL_SOCKET, SO_REUSEADDR, [1], 4) \u003d 0\n +0 bind(3, ..., ...) \u003d 0\n +0 listen(3, 1) \u003d 0\n\n // 3WHS is OK\n +0.0 \u003c S 0:0(0) win 65535 \u003cmss 1460, sackOK, nop, nop, nop, wscale 6, mpcapable v1 flags[flag_h] nokey\u003e\n +0.0 \u003e S. 0:0(0) ack 1 \u003cmss 1460, nop, nop, sackOK, nop, wscale 8, mpcapable v1 flags[flag_h] key[skey]\u003e\n +0.1 \u003c . 1:1(0) ack 1 win 2048 \u003cmpcapable v1 flags[flag_h] key[ckey\u003d2, skey]\u003e\n +0 accept(3, ..., ...) \u003d 4\n\n // Data from the client with valid MPTCP options (no DATA_ACK: normal)\n +0.1 \u003c P. 1:501(500) ack 1 win 2048 \u003cmpcapable v1 flags[flag_h] key[skey, ckey] mpcdatalen 500, nop, nop\u003e\n // From here, the MPTCP options will be dropped by a middlebox\n +0.0 \u003e . 1:1(0) ack 501 \u003cdss dack8\u003d501 dll\u003d0 nocs\u003e\n\n +0.1 read(4, ..., 500) \u003d 500\n +0 write(4, ..., 100) \u003d 100\n\n // The server replies with data, still thinking MPTCP is being used\n +0.0 \u003e P. 1:101(100) ack 501 \u003cdss dack8\u003d501 dsn8\u003d1 ssn\u003d1 dll\u003d100 nocs, nop, nop\u003e\n // But the client already did a fallback to TCP, because the two previous packets have been received without MPTCP options\n +0.1 \u003c . 501:501(0) ack 101 win 2048\n\n +0.0 \u003c P. 501:601(100) ack 101 win 2048\n // The server should fallback to TCP, not reset: it didn\u0027t get a DATA_ACK, nor data for more than the initial window\n +0.0 \u003e . 101:101(0) ack 601\n\nNote that this script requires Packetdrill with MPTCP support, see [3].\n\nFixes: dea2b1ea9c70 (\"mptcp: do not reset MP_CAPABLE subflow on mapping errors\")\nCc: stable@vger.kernel.org\nReported-by: Christoph Paasch \u003ccpaasch@apple.com\u003e\nCloses: https://github.com/multipath-tcp/mptcp_net-next/issues/518 [1]\nLink: https://datatracker.ietf.org/doc/html/rfc8684#name-fallback [2]\nLink: https://github.com/multipath-tcp/packetdrill [3]\nLink: https://github.com/multipath-tcp/mptcp_net-next/issues/519 [4]\nReviewed-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nLink: https://patch.msgid.link/20241008-net-mptcp-fallback-fixes-v1-3-c6fb8e93e551@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "4dabcdf581217e60690467a37c956a5b8dbc6bd9", "tree": "8658190e0aac0c244a412ad6b194c9946b134c41", "parents": [ "e32d262c89e2b22cb0640223f953b548617ed8a6" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Tue Oct 08 13:04:53 2024 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 09 19:43:44 2024 -0700" }, "message": "tcp: fix mptcp DSS corruption due to large pmtu xmit\n\nSyzkaller was able to trigger a DSS corruption:\n\n TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.\n ------------[ cut here ]------------\n WARNING: CPU: 0 PID: 5227 at net/mptcp/protocol.c:695 __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 net/mptcp/protocol.c:695\n Modules linked in:\n CPU: 0 UID: 0 PID: 5227 Comm: syz-executor350 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024\n RIP: 0010:__mptcp_move_skbs_from_subflow+0x20a9/0x21f0 net/mptcp/protocol.c:695\n Code: 0f b6 dc 31 ff 89 de e8 b5 dd ea f5 89 d8 48 81 c4 50 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 98 da ea f5 90 \u003c0f\u003e 0b 90 e9 47 ff ff ff e8 8a da ea f5 90 0f 0b 90 e9 99 e0 ff ff\n RSP: 0018:ffffc90000006db8 EFLAGS: 00010246\n RAX: ffffffff8ba9df18 RBX: 00000000000055f0 RCX: ffff888030023c00\n RDX: 0000000000000100 RSI: 00000000000081e5 RDI: 00000000000055f0\n RBP: 1ffff110062bf1ae R08: ffffffff8ba9cf12 R09: 1ffff110062bf1b8\n R10: dffffc0000000000 R11: ffffed10062bf1b9 R12: 0000000000000000\n R13: dffffc0000000000 R14: 00000000700cec61 R15: 00000000000081e5\n FS: 000055556679c380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000000020287000 CR3: 0000000077892000 CR4: 00000000003506f0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n Call Trace:\n \u003cIRQ\u003e\n move_skbs_to_msk net/mptcp/protocol.c:811 [inline]\n mptcp_data_ready+0x29c/0xa90 net/mptcp/protocol.c:854\n subflow_data_ready+0x34a/0x920 net/mptcp/subflow.c:1490\n tcp_data_queue+0x20fd/0x76c0 net/ipv4/tcp_input.c:5283\n tcp_rcv_established+0xfba/0x2020 net/ipv4/tcp_input.c:6237\n tcp_v4_do_rcv+0x96d/0xc70 net/ipv4/tcp_ipv4.c:1915\n tcp_v4_rcv+0x2dc0/0x37f0 net/ipv4/tcp_ipv4.c:2350\n ip_protocol_deliver_rcu+0x22e/0x440 net/ipv4/ip_input.c:205\n ip_local_deliver_finish+0x341/0x5f0 net/ipv4/ip_input.c:233\n NF_HOOK+0x3a4/0x450 include/linux/netfilter.h:314\n NF_HOOK+0x3a4/0x450 include/linux/netfilter.h:314\n __netif_receive_skb_one_core net/core/dev.c:5662 [inline]\n __netif_receive_skb+0x2bf/0x650 net/core/dev.c:5775\n process_backlog+0x662/0x15b0 net/core/dev.c:6107\n __napi_poll+0xcb/0x490 net/core/dev.c:6771\n napi_poll net/core/dev.c:6840 [inline]\n net_rx_action+0x89b/0x1240 net/core/dev.c:6962\n handle_softirqs+0x2c5/0x980 kernel/softirq.c:554\n do_softirq+0x11b/0x1e0 kernel/softirq.c:455\n \u003c/IRQ\u003e\n \u003cTASK\u003e\n __local_bh_enable_ip+0x1bb/0x200 kernel/softirq.c:382\n local_bh_enable include/linux/bottom_half.h:33 [inline]\n rcu_read_unlock_bh include/linux/rcupdate.h:919 [inline]\n __dev_queue_xmit+0x1764/0x3e80 net/core/dev.c:4451\n dev_queue_xmit include/linux/netdevice.h:3094 [inline]\n neigh_hh_output include/net/neighbour.h:526 [inline]\n neigh_output include/net/neighbour.h:540 [inline]\n ip_finish_output2+0xd41/0x1390 net/ipv4/ip_output.c:236\n ip_local_out net/ipv4/ip_output.c:130 [inline]\n __ip_queue_xmit+0x118c/0x1b80 net/ipv4/ip_output.c:536\n __tcp_transmit_skb+0x2544/0x3b30 net/ipv4/tcp_output.c:1466\n tcp_transmit_skb net/ipv4/tcp_output.c:1484 [inline]\n tcp_mtu_probe net/ipv4/tcp_output.c:2547 [inline]\n tcp_write_xmit+0x641d/0x6bf0 net/ipv4/tcp_output.c:2752\n __tcp_push_pending_frames+0x9b/0x360 net/ipv4/tcp_output.c:3015\n tcp_push_pending_frames include/net/tcp.h:2107 [inline]\n tcp_data_snd_check net/ipv4/tcp_input.c:5714 [inline]\n tcp_rcv_established+0x1026/0x2020 net/ipv4/tcp_input.c:6239\n tcp_v4_do_rcv+0x96d/0xc70 net/ipv4/tcp_ipv4.c:1915\n sk_backlog_rcv include/net/sock.h:1113 [inline]\n __release_sock+0x214/0x350 net/core/sock.c:3072\n release_sock+0x61/0x1f0 net/core/sock.c:3626\n mptcp_push_release net/mptcp/protocol.c:1486 [inline]\n __mptcp_push_pending+0x6b5/0x9f0 net/mptcp/protocol.c:1625\n mptcp_sendmsg+0x10bb/0x1b10 net/mptcp/protocol.c:1903\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg+0x1a6/0x270 net/socket.c:745\n ____sys_sendmsg+0x52a/0x7e0 net/socket.c:2603\n ___sys_sendmsg net/socket.c:2657 [inline]\n __sys_sendmsg+0x2aa/0x390 net/socket.c:2686\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n RIP: 0033:0x7fb06e9317f9\n Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48\n RSP: 002b:00007ffe2cfd4f98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e\n RAX: ffffffffffffffda RBX: 00007fb06e97f468 RCX: 00007fb06e9317f9\n RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005\n RBP: 00007fb06e97f446 R08: 0000555500000000 R09: 0000555500000000\n R10: 0000555500000000 R11: 0000000000000246 R12: 00007fb06e97f406\n R13: 0000000000000001 R14: 00007ffe2cfd4fe0 R15: 0000000000000003\n \u003c/TASK\u003e\n\nAdditionally syzkaller provided a nice reproducer. The repro enables\npmtu on the loopback device, leading to tcp_mtu_probe() generating\nvery large probe packets.\n\ntcp_can_coalesce_send_queue_head() currently does not check for\nmptcp-level invariants, and allowed the creation of cross-DSS probes,\nleading to the mentioned corruption.\n\nAddress the issue teaching tcp_can_coalesce_send_queue_head() about\nmptcp using the tcp_skb_can_collapse(), also reducing the code\nduplication.\n\nFixes: 85712484110d (\"tcp: coalesce/collapse must respect MPTCP extensions\")\nCc: stable@vger.kernel.org\nReported-by: syzbot+d1bff73460e33101f0e7@syzkaller.appspotmail.com\nCloses: https://github.com/multipath-tcp/mptcp_net-next/issues/513\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\nAcked-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nLink: https://patch.msgid.link/20241008-net-mptcp-fallback-fixes-v1-2-c6fb8e93e551@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "e32d262c89e2b22cb0640223f953b548617ed8a6", "tree": "aa5c02296b9d5ebe22a19d9a1643eaf524ecbc0e", "parents": [ "d94785bb46b6167382b1de3290eccc91fa98df53" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Tue Oct 08 13:04:52 2024 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 09 19:43:44 2024 -0700" }, "message": "mptcp: handle consistently DSS corruption\n\nBugged peer implementation can send corrupted DSS options, consistently\nhitting a few warning in the data path. Use DEBUG_NET assertions, to\navoid the splat on some builds and handle consistently the error, dumping\nrelated MIBs and performing fallback and/or reset according to the\nsubflow type.\n\nFixes: 6771bfd9ee24 (\"mptcp: update mptcp ack sequence from work queue\")\nCc: stable@vger.kernel.org\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\nReviewed-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nLink: https://patch.msgid.link/20241008-net-mptcp-fallback-fixes-v1-1-c6fb8e93e551@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "d94785bb46b6167382b1de3290eccc91fa98df53", "tree": "44cc9992418b850c0704e01221a8f0d27296d735", "parents": [ "8c924369cb56c3054dca504c2c9c3eb208272865" ], "author": { "name": "Breno Leitao", "email": "leitao@debian.org", "time": "Tue Oct 08 02:43:24 2024 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 09 19:42:43 2024 -0700" }, "message": "net: netconsole: fix wrong warning\n\nA warning is triggered when there is insufficient space in the buffer\nfor userdata. However, this is not an issue since userdata will be sent\nin the next iteration.\n\nCurrent warning message:\n\n ------------[ cut here ]------------\n WARNING: CPU: 13 PID: 3013042 at drivers/net/netconsole.c:1122 write_ext_msg+0x3b6/0x3d0\n ? write_ext_msg+0x3b6/0x3d0\n console_flush_all+0x1e9/0x330\n\nThe code incorrectly issues a warning when this_chunk is zero, which is\na valid scenario. The warning should only be triggered when this_chunk\nis negative.\n\nFixes: 1ec9daf95093 (\"net: netconsole: append userdata to fragmented netconsole messages\")\nSigned-off-by: Breno Leitao \u003cleitao@debian.org\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/20241008094325.896208-1-leitao@debian.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "8c924369cb56c3054dca504c2c9c3eb208272865", "tree": "da3623bb8f5ae2c71b1d0bfc439006ee61fd3f4b", "parents": [ "6be063071a457767ee229db13f019c2ec03bfe44" ], "author": { "name": "Vladimir Oltean", "email": "vladimir.oltean@nxp.com", "time": "Tue Oct 08 12:43:20 2024 +0300" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 09 19:41:35 2024 -0700" }, "message": "net: dsa: refuse cross-chip mirroring operations\n\nIn case of a tc mirred action from one switch to another, the behavior\nis not correct. We simply tell the source switch driver to program a\nmirroring entry towards mirror-\u003eto_local_port \u003d to_dp-\u003eindex, but it is\nnot even guaranteed that the to_dp belongs to the same switch as dp.\n\nFor proper cross-chip support, we would need to go through the\ncross-chip notifier layer in switch.c, program the entry on cascade\nports, and introduce new, explicit API for cross-chip mirroring, given\nthat intermediary switches should have introspection into the DSA tags\npassed through the cascade port (and not just program a port mirror on\nthe entire cascade port). None of that exists today.\n\nReject what is not implemented so that user space is not misled into\nthinking it works.\n\nFixes: f50f212749e8 (\"net: dsa: Add plumbing for port mirroring\")\nSigned-off-by: Vladimir Oltean \u003cvladimir.oltean@nxp.com\u003e\nReviewed-by: Andrew Lunn \u003candrew@lunn.ch\u003e\nLink: https://patch.msgid.link/20241008094320.3340980-1-vladimir.oltean@nxp.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "6be063071a457767ee229db13f019c2ec03bfe44", "tree": "b471aefb43f7ac1f63bf9e40f3d3d621bf993055", "parents": [ "080ddc22f3b0a58500f87e8e865aabbf96495eea" ], "author": { "name": "Wei Fang", "email": "wei.fang@nxp.com", "time": "Tue Oct 08 14:11:53 2024 +0800" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 09 19:37:55 2024 -0700" }, "message": "net: fec: don\u0027t save PTP state if PTP is unsupported\n\nSome platforms (such as i.MX25 and i.MX27) do not support PTP, so on\nthese platforms fec_ptp_init() is not called and the related members\nin fep are not initialized. However, fec_ptp_save_state() is called\nunconditionally, which causes the kernel to panic. Therefore, add a\ncondition so that fec_ptp_save_state() is not called if PTP is not\nsupported.\n\nFixes: a1477dc87dc4 (\"net: fec: Restart PPS after link state change\")\nReported-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nCloses: https://lore.kernel.org/lkml/353e41fe-6bb4-4ee9-9980-2da2a9c1c508@roeck-us.net/\nSigned-off-by: Wei Fang \u003cwei.fang@nxp.com\u003e\nReviewed-by: Csókás, Bence \u003ccsokas.bence@prolan.hu\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nTested-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nLink: https://patch.msgid.link/20241008061153.1977930-1-wei.fang@nxp.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "080ddc22f3b0a58500f87e8e865aabbf96495eea", "tree": "d5e05c353045659332482e965964344fb79b69d5", "parents": [ "70a0da8c113555fe14bb6db8e5180f8fc2c18385" ], "author": { "name": "Rosen Penev", "email": "rosenp@gmail.com", "time": "Tue Oct 08 16:30:50 2024 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 09 19:27:09 2024 -0700" }, "message": "net: ibm: emac: mal: add dcr_unmap to _remove\n\nIt\u0027s done in probe so it should be undone here.\n\nFixes: 1d3bb996481e (\"Device tree aware EMAC driver\")\nSigned-off-by: Rosen Penev \u003crosenp@gmail.com\u003e\nReviewed-by: Breno Leitao \u003cleitao@debian.org\u003e\nLink: https://patch.msgid.link/20241008233050.9422-1-rosenp@gmail.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "70a0da8c113555fe14bb6db8e5180f8fc2c18385", "tree": "6105b7bd3a31e6ca634b0c74722194844083f505", "parents": [ "983e35ce2e1ee4037f6f5d5398dfc107b22ad569" ], "author": { "name": "Jacky Chou", "email": "jacky_chou@aspeedtech.com", "time": "Mon Oct 07 11:24:35 2024 +0800" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Oct 09 17:56:55 2024 -0700" }, "message": "net: ftgmac100: fixed not check status from fixed phy\n\nAdd error handling from calling fixed_phy_register.\nIt may return some error, therefore, need to check the status.\n\nAnd fixed_phy_register needs to bind a device node for mdio.\nAdd the mac device node for fixed_phy_register function.\nThis is a reference to this function, of_phy_register_fixed_link().\n\nFixes: e24a6c874601 (\"net: ftgmac100: Get link speed and duplex for NC-SI\")\nSigned-off-by: Jacky Chou \u003cjacky_chou@aspeedtech.com\u003e\nLink: https://patch.msgid.link/20241007032435.787892-1-jacky_chou@aspeedtech.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "d3d1556696c1a993eec54ac585fe5bf677e07474", "tree": "422087800590d472315f7a1e59569af05e765afd", "parents": [ "b983b271662bd6104d429b0fd97af3333ba760bf", "aa5f0fa6af38d96bc6f1b7e1534f5b5c025930a6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Oct 09 16:01:40 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Oct 09 16:01:40 2024 -0700" }, "message": "Merge tag \u0027mm-hotfixes-stable-2024-10-09-15-46\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm\n\nPull misc fixes from Andrew Morton:\n \"12 hotfixes, 5 of which are c:stable. All singletons, about half of\n which are MM\"\n\n* tag \u0027mm-hotfixes-stable-2024-10-09-15-46\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm:\n mm: zswap: delete comments for \"value\" member of \u0027struct zswap_entry\u0027.\n CREDITS: sort alphabetically by name\n secretmem: disable memfd_secret() if arch cannot set direct map\n .mailmap: update Fangrui\u0027s email\n mm/huge_memory: check pmd_special() only after pmd_present()\n resource, kunit: fix user-after-free in resource_test_region_intersects()\n fs/proc/kcore.c: allow translation of physical memory addresses\n selftests/mm: fix incorrect buffer-\u003emirror size in hmm2 double_map test\n device-dax: correct pgoff align in dax_set_mapping()\n kthread: unpark only parked kthread\n Revert \"mm: introduce PF_MEMALLOC_NORECLAIM, PF_MEMALLOC_NOWARN\"\n bcachefs: do not use PF_MEMALLOC_NORECLAIM\n" }, { "commit": "c6a0862bee696cfb236a4e160a7f376c0ecdcf0c", "tree": "368ba28b7fc2cfb79e8c6c9eb5350bba381d9830", "parents": [ "05ef7055debc804e8083737402127975e7244fc4" ], "author": { "name": "Florian Westphal", "email": "fw@strlen.de", "time": "Wed Oct 09 09:19:03 2024 +0200" }, "committer": { "name": "Pablo Neira Ayuso", "email": "pablo@netfilter.org", "time": "Wed Oct 09 23:31:15 2024 +0200" }, "message": "selftests: netfilter: conntrack_vrf.sh: add fib test case\n\nmeta iifname veth0 ip daddr ... fib daddr oif\n\n... is expected to return \"dummy0\" interface which is part of same vrf\nas veth0.\n\nSigned-off-by: Florian Westphal \u003cfw@strlen.de\u003e\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\n" }, { "commit": "05ef7055debc804e8083737402127975e7244fc4", "tree": "59200e4c8bafb8033fc51e99a1a296aae8e7b96d", "parents": [ "0bfcb7b71e735560077a42847f69597ec7dcc326" ], "author": { "name": "Florian Westphal", "email": "fw@strlen.de", "time": "Wed Oct 09 09:19:02 2024 +0200" }, "committer": { "name": "Pablo Neira Ayuso", "email": "pablo@netfilter.org", "time": "Wed Oct 09 23:30:31 2024 +0200" }, "message": "netfilter: fib: check correct rtable in vrf setups\n\nWe need to init l3mdev unconditionally, else main routing table is searched\nand incorrect result is returned unless strict (iif keyword) matching is\nrequested.\n\nNext patch adds a selftest for this.\n\nFixes: 2a8a7c0eaa87 (\"netfilter: nft_fib: Fix for rpath check with VRF devices\")\nCloses: https://bugzilla.netfilter.org/show_bug.cgi?id\u003d1761\nSigned-off-by: Florian Westphal \u003cfw@strlen.de\u003e\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\n" }, { "commit": "0bfcb7b71e735560077a42847f69597ec7dcc326", "tree": "a5aa0bd62718ca242dc76f53c86465df2d1c3416", "parents": [ "983e35ce2e1ee4037f6f5d5398dfc107b22ad569" ], "author": { "name": "Florian Westphal", "email": "fw@strlen.de", "time": "Mon Oct 07 11:28:16 2024 +0200" }, "committer": { "name": "Pablo Neira Ayuso", "email": "pablo@netfilter.org", "time": "Wed Oct 09 23:20:46 2024 +0200" }, "message": "netfilter: xtables: avoid NFPROTO_UNSPEC where needed\n\nsyzbot managed to call xt_cluster match via ebtables:\n\n WARNING: CPU: 0 PID: 11 at net/netfilter/xt_cluster.c:72 xt_cluster_mt+0x196/0x780\n [..]\n ebt_do_table+0x174b/0x2a40\n\nModule registers to NFPROTO_UNSPEC, but it assumes ipv4/ipv6 packet\nprocessing. As this is only useful to restrict locally terminating\nTCP/UDP traffic, register this for ipv4 and ipv6 family only.\n\nPablo points out that this is a general issue, direct users of the\nset/getsockopt interface can call into targets/matches that were only\nintended for use with ip(6)tables.\n\nCheck all UNSPEC matches and targets for similar issues:\n\n- matches and targets are fine except if they assume skb_network_header()\n is valid -- this is only true when called from inet layer: ip(6) stack\n pulls the ip/ipv6 header into linear data area.\n- targets that return XT_CONTINUE or other xtables verdicts must be\n restricted too, they are incompatbile with the ebtables traverser, e.g.\n EBT_CONTINUE is a completely different value than XT_CONTINUE.\n\nMost matches/targets are changed to register for NFPROTO_IPV4/IPV6, as\nthey are provided for use by ip(6)tables.\n\nThe MARK target is also used by arptables, so register for NFPROTO_ARP too.\n\nWhile at it, bail out if connbytes fails to enable the corresponding\nconntrack family.\n\nThis change passes the selftests in iptables.git.\n\nReported-by: syzbot+256c348558aa5cf611a9@syzkaller.appspotmail.com\nCloses: https://lore.kernel.org/netfilter-devel/66fec2e2.050a0220.9ec68.0047.GAE@google.com/\nFixes: 0269ea493734 (\"netfilter: xtables: add cluster match\")\nSigned-off-by: Florian Westphal \u003cfw@strlen.de\u003e\nCo-developed-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\n" }, { "commit": "aa5f0fa6af38d96bc6f1b7e1534f5b5c025930a6", "tree": "d75fc4da67c7946bd5177e5c82f8fef24192832c", "parents": [ "b1815690289449c2973b7ca77aea0e155677176f" ], "author": { "name": "Kanchana P Sridhar", "email": "kanchana.p.sridhar@intel.com", "time": "Wed Oct 02 12:42:13 2024 -0700" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Oct 09 12:47:19 2024 -0700" }, "message": "mm: zswap: delete comments for \"value\" member of \u0027struct zswap_entry\u0027.\n\nMade a minor edit in the comments for \u0027struct zswap_entry\u0027 to delete the\ndescription of the \u0027value\u0027 member that was deleted in commit 20a5532ffa53\n(\"mm: remove code to handle same filled pages\").\n\nLink: https://lkml.kernel.org/r/20241002194213.30041-1-kanchana.p.sridhar@intel.com\nSigned-off-by: Kanchana P Sridhar \u003ckanchana.p.sridhar@intel.com\u003e\nFixes: 20a5532ffa53 (\"mm: remove code to handle same filled pages\")\nReviewed-by: Nhat Pham \u003cnphamcs@gmail.com\u003e\nAcked-by: Yosry Ahmed \u003cyosryahmed@google.com\u003e\nReviewed-by: Usama Arif \u003cusamaarif642@gmail.com\u003e\nCc: Chengming Zhou \u003cchengming.zhou@linux.dev\u003e\nCc: Huang Ying \u003cying.huang@intel.com\u003e\nCc: Johannes Weiner \u003channes@cmpxchg.org\u003e\nCc: Kanchana P Sridhar \u003ckanchana.p.sridhar@intel.com\u003e\nCc: Ryan Roberts \u003cryan.roberts@arm.com\u003e\nCc: Wajdi Feghali \u003cwajdi.k.feghali@intel.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "b1815690289449c2973b7ca77aea0e155677176f", "tree": "8da6c34a07ec6c1b1d7c60d28da3f9d3e1b9233d", "parents": [ "532b53cebe58f34ce1c0f34d866f5c0e335c53c6" ], "author": { "name": "Krzysztof Kozlowski", "email": "krzysztof.kozlowski@linaro.org", "time": "Wed Oct 02 13:19:32 2024 +0200" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Oct 09 12:47:19 2024 -0700" }, "message": "CREDITS: sort alphabetically by name\n\nRe-sort few misplaced entries in the CREDITS file.\n\nLink: https://lkml.kernel.org/r/20241002111932.46012-1-krzysztof.kozlowski@linaro.org\nSigned-off-by: Krzysztof Kozlowski \u003ckrzysztof.kozlowski@linaro.org\u003e\nCc: Arnd Bergmann \u003carnd@arndb.de\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "532b53cebe58f34ce1c0f34d866f5c0e335c53c6", "tree": "b6708c9d3444c91318b20545d235bb30ff3a2155", "parents": [ "71e32fe63cb654fbf23933b10613714b2429118b" ], "author": { "name": "Patrick Roy", "email": "roypat@amazon.co.uk", "time": "Tue Oct 01 09:00:41 2024 +0100" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Oct 09 12:47:19 2024 -0700" }, "message": "secretmem: disable memfd_secret() if arch cannot set direct map\n\nReturn -ENOSYS from memfd_secret() syscall if !can_set_direct_map(). This\nis the case for example on some arm64 configurations, where marking 4k\nPTEs in the direct map not present can only be done if the direct map is\nset up at 4k granularity in the first place (as ARM\u0027s break-before-make\nsemantics do not easily allow breaking apart large/gigantic pages).\n\nMore precisely, on arm64 systems with !can_set_direct_map(),\nset_direct_map_invalid_noflush() is a no-op, however it returns success\n(0) instead of an error. This means that memfd_secret will seemingly\n\"work\" (e.g. syscall succeeds, you can mmap the fd and fault in pages),\nbut it does not actually achieve its goal of removing its memory from the\ndirect map.\n\nNote that with this patch, memfd_secret() will start erroring on systems\nwhere can_set_direct_map() returns false (arm64 with\nCONFIG_RODATA_FULL_DEFAULT_ENABLED\u003dn, CONFIG_DEBUG_PAGEALLOC\u003dn and\nCONFIG_KFENCE\u003dn), but that still seems better than the current silent\nfailure. Since CONFIG_RODATA_FULL_DEFAULT_ENABLED defaults to \u0027y\u0027, most\narm64 systems actually have a working memfd_secret() and aren\u0027t be\naffected.\n\nFrom going through the iterations of the original memfd_secret patch\nseries, it seems that disabling the syscall in these scenarios was the\nintended behavior [1] (preferred over having\nset_direct_map_invalid_noflush return an error as that would result in\nSIGBUSes at page-fault time), however the check for it got dropped between\nv16 [2] and v17 [3], when secretmem moved away from CMA allocations.\n\n[1]: https://lore.kernel.org/lkml/20201124164930.GK8537@kernel.org/\n[2]: https://lore.kernel.org/lkml/20210121122723.3446-11-rppt@kernel.org/#t\n[3]: https://lore.kernel.org/lkml/20201125092208.12544-10-rppt@kernel.org/\n\nLink: https://lkml.kernel.org/r/20241001080056.784735-1-roypat@amazon.co.uk\nFixes: 1507f51255c9 (\"mm: introduce memfd_secret system call to create \"secret\" memory areas\")\nSigned-off-by: Patrick Roy \u003croypat@amazon.co.uk\u003e\nReviewed-by: Mike Rapoport (Microsoft) \u003crppt@kernel.org\u003e\nCc: Alexander Graf \u003cgraf@amazon.com\u003e\nCc: David Hildenbrand \u003cdavid@redhat.com\u003e\nCc: James Gowans \u003cjgowans@amazon.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "71e32fe63cb654fbf23933b10613714b2429118b", "tree": "01ecd980ca93c34bc1014af8cdd3576fba60e614", "parents": [ "47fa30118f02dc50e1c57242c6b72542c871b178" ], "author": { "name": "Fangrui Song", "email": "i@maskray.me", "time": "Fri Sep 27 12:29:12 2024 -0700" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Oct 09 12:47:19 2024 -0700" }, "message": ".mailmap: update Fangrui\u0027s email\n\nI\u0027m leaving Google.\n\nLink: https://lkml.kernel.org/r/20240927192912.31532-1-i@maskray.me\nSigned-off-by: Fangrui Song \u003ci@maskray.me\u003e\nAcked-by: Nathan Chancellor \u003cnathan@kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "47fa30118f02dc50e1c57242c6b72542c871b178", "tree": "e2ad21ea7396c4b0ad95cc718b329d1fe1fa1843", "parents": [ "0665d7a39bdf92c8ac3dc390501f303907c87f62" ], "author": { "name": "David Hildenbrand", "email": "david@redhat.com", "time": "Thu Sep 26 17:42:34 2024 +0200" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Oct 09 12:47:19 2024 -0700" }, "message": "mm/huge_memory: check pmd_special() only after pmd_present()\n\nWe should only check for pmd_special() after we made sure that we have a\npresent PMD. For example, if we have a migration PMD, pmd_special() might\nindicate that we have a special PMD although we really don\u0027t.\n\nThis fixes confusing migration entries as PFN mappings, and not doing what\nwe are supposed to do in the \"is_swap_pmd()\" case further down in the\nfunction -- including messing up COW, page table handling and accounting.\n\nLink: https://lkml.kernel.org/r/20240926154234.2247217-1-david@redhat.com\nFixes: bc02afbd4d73 (\"mm/fork: accept huge pfnmap entries\")\nSigned-off-by: David Hildenbrand \u003cdavid@redhat.com\u003e\nReported-by: syzbot+bf2c35fa302ebe3c7471@syzkaller.appspotmail.com\nCloses: https://lore.kernel.org/lkml/66f15c8d.050a0220.c23dd.000f.GAE@google.com/\nReviewed-by: Peter Xu \u003cpeterx@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "0665d7a39bdf92c8ac3dc390501f303907c87f62", "tree": "760b1297c514385b937c2367fb8a1e2532ffdbf6", "parents": [ "3d5854d75e3187147613130561b58f0b06166172" ], "author": { "name": "Huang Ying", "email": "ying.huang@intel.com", "time": "Mon Sep 30 15:06:11 2024 +0800" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Oct 09 12:47:19 2024 -0700" }, "message": "resource, kunit: fix user-after-free in resource_test_region_intersects()\n\nIn resource_test_insert_resource(), the pointer is used in error message\nafter kfree(). This is user-after-free. To fix this, we need to call\nkunit_add_action_or_reset() to schedule memory freeing after usage. But\nkunit_add_action_or_reset() itself may fail and free the memory. So, its\nreturn value should be checked and abort the test for failure. Then, we\nfound that other usage of kunit_add_action_or_reset() in\nresource_test_region_intersects() needs to be fixed too. We fix all these\nuser-after-free bugs in this patch.\n\nLink: https://lkml.kernel.org/r/20240930070611.353338-1-ying.huang@intel.com\nFixes: 99185c10d5d9 (\"resource, kunit: add test case for region_intersects()\")\nSigned-off-by: \"Huang, Ying\" \u003cying.huang@intel.com\u003e\nReported-by: Kees Bakker \u003ckees@ijzerbout.nl\u003e\nCloses: https://lore.kernel.org/lkml/87ldzaotcg.fsf@yhuang6-desk2.ccr.corp.intel.com/\nCc: Dan Williams \u003cdan.j.williams@intel.com\u003e\nCc: David Hildenbrand \u003cdavid@redhat.com\u003e\nCc: Bjorn Helgaas \u003cbhelgaas@google.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "3d5854d75e3187147613130561b58f0b06166172", "tree": "acaf406a23a546d445a542e2573f6cefaf4154d8", "parents": [ "76503e1fa1a53ef041a120825d5ce81c7fe7bdd7" ], "author": { "name": "Alexander Gordeev", "email": "agordeev@linux.ibm.com", "time": "Mon Sep 30 14:21:19 2024 +0200" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Oct 09 12:47:19 2024 -0700" }, "message": "fs/proc/kcore.c: allow translation of physical memory addresses\n\nWhen /proc/kcore is read an attempt to read the first two pages results in\nHW-specific page swap on s390 and another (so called prefix) pages are\naccessed instead. That leads to a wrong read.\n\nAllow architecture-specific translation of memory addresses using\nkc_xlate_dev_mem_ptr() and kc_unxlate_dev_mem_ptr() callbacks similarily\nto /dev/mem xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() callbacks. That\nway an architecture can deal with specific physical memory ranges.\n\nRe-use the existing /dev/mem callback implementation on s390, which\nhandles the described prefix pages swapping correctly.\n\nFor other architectures the default callback is basically NOP. It is\nexpected the condition (vaddr \u003d\u003d __va(__pa(vaddr))) always holds true for\nKCORE_RAM memory type.\n\nLink: https://lkml.kernel.org/r/20240930122119.1651546-1-agordeev@linux.ibm.com\nSigned-off-by: Alexander Gordeev \u003cagordeev@linux.ibm.com\u003e\nSuggested-by: Heiko Carstens \u003chca@linux.ibm.com\u003e\nCc: Vasily Gorbik \u003cgor@linux.ibm.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "76503e1fa1a53ef041a120825d5ce81c7fe7bdd7", "tree": "891ab9f81f8ca8f3ab6887f011e8c8e18c03a5b2", "parents": [ "7fcbd9785d4c17ea533c42f20a9083a83f301fa6" ], "author": { "name": "Donet Tom", "email": "donettom@linux.ibm.com", "time": "Fri Sep 27 00:07:52 2024 -0500" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Oct 09 12:47:19 2024 -0700" }, "message": "selftests/mm: fix incorrect buffer-\u003emirror size in hmm2 double_map test\n\nThe hmm2 double_map test was failing due to an incorrect buffer-\u003emirror\nsize. The buffer-\u003emirror size was 6, while buffer-\u003eptr size was 6 *\nPAGE_SIZE. The test failed because the kernel\u0027s copy_to_user function was\nattempting to copy a 6 * PAGE_SIZE buffer to buffer-\u003emirror. Since the\nsize of buffer-\u003emirror was incorrect, copy_to_user failed.\n\nThis patch corrects the buffer-\u003emirror size to 6 * PAGE_SIZE.\n\nTest Result without this patch\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n # RUN hmm2.hmm2_device_private.double_map ...\n # hmm-tests.c:1680:double_map:Expected ret (-14) \u003d\u003d 0 (0)\n # double_map: Test terminated by assertion\n # FAIL hmm2.hmm2_device_private.double_map\n not ok 53 hmm2.hmm2_device_private.double_map\n\nTest Result with this patch\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n # RUN hmm2.hmm2_device_private.double_map ...\n # OK hmm2.hmm2_device_private.double_map\n ok 53 hmm2.hmm2_device_private.double_map\n\nLink: https://lkml.kernel.org/r/20240927050752.51066-1-donettom@linux.ibm.com\nFixes: fee9f6d1b8df (\"mm/hmm/test: add selftests for HMM\")\nSigned-off-by: Donet Tom \u003cdonettom@linux.ibm.com\u003e\nReviewed-by: Muhammad Usama Anjum \u003cusama.anjum@collabora.com\u003e\nCc: Jérôme Glisse \u003cjglisse@redhat.com\u003e\nCc: Kees Cook \u003ckeescook@chromium.org\u003e\nCc: Mark Brown \u003cbroonie@kernel.org\u003e\nCc: Przemek Kitszel \u003cprzemyslaw.kitszel@intel.com\u003e\nCc: Ritesh Harjani (IBM) \u003critesh.list@gmail.com\u003e\nCc: Shuah Khan \u003cshuah@kernel.org\u003e\nCc: Ralph Campbell \u003crcampbell@nvidia.com\u003e\nCc: Jason Gunthorpe \u003cjgg@mellanox.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "7fcbd9785d4c17ea533c42f20a9083a83f301fa6", "tree": "98da4d5685a2d006e9e25bcdbd08c79fc3494df6", "parents": [ "214e01ad4ed7158cab66498810094fac5d09b218" ], "author": { "name": "Kun(llfl)", "email": "llfl@linux.alibaba.com", "time": "Fri Sep 27 15:45:09 2024 +0800" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Oct 09 12:47:19 2024 -0700" }, "message": "device-dax: correct pgoff align in dax_set_mapping()\n\npgoff should be aligned using ALIGN_DOWN() instead of ALIGN(). Otherwise,\nvmf-\u003eaddress not aligned to fault_size will be aligned to the next\nalignment, that can result in memory failure getting the wrong address.\n\nIt\u0027s a subtle situation that only can be observed in\npage_mapped_in_vma() after the page is page fault handled by\ndev_dax_huge_fault. Generally, there is little chance to perform\npage_mapped_in_vma in dev-dax\u0027s page unless in specific error injection\nto the dax device to trigger an MCE - memory-failure. In that case,\npage_mapped_in_vma() will be triggered to determine which task is\naccessing the failure address and kill that task in the end.\n\n\nWe used self-developed dax device (which is 2M aligned mapping) , to\nperform error injection to random address. It turned out that error\ninjected to non-2M-aligned address was causing endless MCE until panic.\nBecause page_mapped_in_vma() kept resulting wrong address and the task\naccessing the failure address was never killed properly:\n\n\n[ 3783.719419] Memory failure: 0x200c9742: recovery action for dax page: \nRecovered\n[ 3784.049006] mce: Uncorrected hardware memory error in user-access at \n200c9742380\n[ 3784.049190] Memory failure: 0x200c9742: recovery action for dax page: \nRecovered\n[ 3784.448042] mce: Uncorrected hardware memory error in user-access at \n200c9742380\n[ 3784.448186] Memory failure: 0x200c9742: recovery action for dax page: \nRecovered\n[ 3784.792026] mce: Uncorrected hardware memory error in user-access at \n200c9742380\n[ 3784.792179] Memory failure: 0x200c9742: recovery action for dax page: \nRecovered\n[ 3785.162502] mce: Uncorrected hardware memory error in user-access at \n200c9742380\n[ 3785.162633] Memory failure: 0x200c9742: recovery action for dax page: \nRecovered\n[ 3785.461116] mce: Uncorrected hardware memory error in user-access at \n200c9742380\n[ 3785.461247] Memory failure: 0x200c9742: recovery action for dax page: \nRecovered\n[ 3785.764730] mce: Uncorrected hardware memory error in user-access at \n200c9742380\n[ 3785.764859] Memory failure: 0x200c9742: recovery action for dax page: \nRecovered\n[ 3786.042128] mce: Uncorrected hardware memory error in user-access at \n200c9742380\n[ 3786.042259] Memory failure: 0x200c9742: recovery action for dax page: \nRecovered\n[ 3786.464293] mce: Uncorrected hardware memory error in user-access at \n200c9742380\n[ 3786.464423] Memory failure: 0x200c9742: recovery action for dax page: \nRecovered\n[ 3786.818090] mce: Uncorrected hardware memory error in user-access at \n200c9742380\n[ 3786.818217] Memory failure: 0x200c9742: recovery action for dax page: \nRecovered\n[ 3787.085297] mce: Uncorrected hardware memory error in user-access at \n200c9742380\n[ 3787.085424] Memory failure: 0x200c9742: recovery action for dax page: \nRecovered\n\nIt took us several weeks to pinpoint this problem,  but we eventually\nused bpftrace to trace the page fault and mce address and successfully\nidentified the issue.\n\n\nJoao added:\n\n; Likely we never reproduce in production because we always pin\n: device-dax regions in the region align they provide (Qemu does\n: similarly with prealloc in hugetlb/file backed memory). I think this\n: bug requires that we touch *unpinned* device-dax regions unaligned to\n: the device-dax selected alignment (page size i.e. 4K/2M/1G)\n\nLink: https://lkml.kernel.org/r/23c02a03e8d666fef11bbe13e85c69c8b4ca0624.1727421694.git.llfl@linux.alibaba.com\nFixes: b9b5777f09be (\"device-dax: use ALIGN() for determining pgoff\")\nSigned-off-by: Kun(llfl) \u003cllfl@linux.alibaba.com\u003e\nTested-by: JianXiong Zhao \u003czhaojianxiong.zjx@alibaba-inc.com\u003e\nReviewed-by: Joao Martins \u003cjoao.m.martins@oracle.com\u003e\nCc: Dan Williams \u003cdan.j.williams@intel.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "214e01ad4ed7158cab66498810094fac5d09b218", "tree": "4bc026aea1ddf33d5653ae0fb2d0ed524b25156b", "parents": [ "9a8da05d7ad619beb84d0c6904c3fa7022c6fb9b" ], "author": { "name": "Frederic Weisbecker", "email": "frederic@kernel.org", "time": "Fri Sep 13 23:46:34 2024 +0200" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Oct 09 12:47:19 2024 -0700" }, "message": "kthread: unpark only parked kthread\n\nCalling into kthread unparking unconditionally is mostly harmless when\nthe kthread is already unparked. The wake up is then simply ignored\nbecause the target is not in TASK_PARKED state.\n\nHowever if the kthread is per CPU, the wake up is preceded by a call\nto kthread_bind() which expects the task to be inactive and in\nTASK_PARKED state, which obviously isn\u0027t the case if it is unparked.\n\nAs a result, calling kthread_stop() on an unparked per-cpu kthread\ntriggers such a warning:\n\n\tWARNING: CPU: 0 PID: 11 at kernel/kthread.c:525 __kthread_bind_mask kernel/kthread.c:525\n\t \u003cTASK\u003e\n\t kthread_stop+0x17a/0x630 kernel/kthread.c:707\n\t destroy_workqueue+0x136/0xc40 kernel/workqueue.c:5810\n\t wg_destruct+0x1e2/0x2e0 drivers/net/wireguard/device.c:257\n\t netdev_run_todo+0xe1a/0x1000 net/core/dev.c:10693\n\t default_device_exit_batch+0xa14/0xa90 net/core/dev.c:11769\n\t ops_exit_list net/core/net_namespace.c:178 [inline]\n\t cleanup_net+0x89d/0xcc0 net/core/net_namespace.c:640\n\t process_one_work kernel/workqueue.c:3231 [inline]\n\t process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312\n\t worker_thread+0x86d/0xd70 kernel/workqueue.c:3393\n\t kthread+0x2f0/0x390 kernel/kthread.c:389\n\t ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n\t ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\t \u003c/TASK\u003e\n\nFix this with skipping unecessary unparking while stopping a kthread.\n\nLink: https://lkml.kernel.org/r/20240913214634.12557-1-frederic@kernel.org\nFixes: 5c25b5ff89f0 (\"workqueue: Tag bound workers with KTHREAD_IS_PER_CPU\")\nSigned-off-by: Frederic Weisbecker \u003cfrederic@kernel.org\u003e\nReported-by: syzbot+943d34fa3cf2191e3068@syzkaller.appspotmail.com\nTested-by: syzbot+943d34fa3cf2191e3068@syzkaller.appspotmail.com\nSuggested-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Hillf Danton \u003chdanton@sina.com\u003e\nCc: Tejun Heo \u003ctj@kernel.org\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "9a8da05d7ad619beb84d0c6904c3fa7022c6fb9b", "tree": "b80f92181d1fb56236fc273454c2f9dbdc44561b", "parents": [ "9897713fe1077c90b4a86c9af0a878d56c8888a2" ], "author": { "name": "Michal Hocko", "email": "mhocko@suse.com", "time": "Thu Sep 26 19:11:51 2024 +0200" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Oct 09 12:47:19 2024 -0700" }, "message": "Revert \"mm: introduce PF_MEMALLOC_NORECLAIM, PF_MEMALLOC_NOWARN\"\n\nThis reverts commit eab0af905bfc3e9c05da2ca163d76a1513159aa4.\n\nThere is no existing user of those flags. PF_MEMALLOC_NOWARN is dangerous\nbecause a nested allocation context can use GFP_NOFAIL which could cause\nunexpected failure. Such a code would be hard to maintain because it\ncould be deeper in the call chain.\n\nPF_MEMALLOC_NORECLAIM has been added even when it was pointed out [1] that\nsuch a allocation contex is inherently unsafe if the context doesn\u0027t fully\ncontrol all allocations called from this context.\n\nWhile PF_MEMALLOC_NOWARN is not dangerous the way PF_MEMALLOC_NORECLAIM is\nit doesn\u0027t have any user and as Matthew has pointed out we are running out\nof those flags so better reclaim it without any real users.\n\n[1] https://lore.kernel.org/all/ZcM0xtlKbAOFjv5n@tiehlicka/\n\nLink: https://lkml.kernel.org/r/20240926172940.167084-3-mhocko@kernel.org\nSigned-off-by: Michal Hocko \u003cmhocko@suse.com\u003e\nReviewed-by: Matthew Wilcox (Oracle) \u003cwilly@infradead.org\u003e\nReviewed-by: Christoph Hellwig \u003chch@lst.de\u003e\nReviewed-by: Dave Chinner \u003cdchinner@redhat.com\u003e\nReviewed-by: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: Christian Brauner \u003cbrauner@kernel.org\u003e\nCc: James Morris \u003cjmorris@namei.org\u003e\nCc: Jan Kara \u003cjack@suse.cz\u003e\nCc: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\nCc: Paul Moore \u003cpaul@paul-moore.com\u003e\nCc: Serge E. Hallyn \u003cserge@hallyn.com\u003e\nCc: Yafang Shao \u003claoar.shao@gmail.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "9897713fe1077c90b4a86c9af0a878d56c8888a2", "tree": "f4f3844a614280099b9258ec46e436a8a3c66a33", "parents": [ "8cf0b93919e13d1e8d4466eb4080a4c4d9d66d7b" ], "author": { "name": "Michal Hocko", "email": "mhocko@suse.com", "time": "Thu Sep 26 19:11:50 2024 +0200" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Oct 09 12:47:18 2024 -0700" }, "message": "bcachefs: do not use PF_MEMALLOC_NORECLAIM\n\nPatch series \"remove PF_MEMALLOC_NORECLAIM\" v3.\n\n\nThis patch (of 2):\n\nbch2_new_inode relies on PF_MEMALLOC_NORECLAIM to try to allocate a new\ninode to achieve GFP_NOWAIT semantic while holding locks. If this\nallocation fails it will drop locks and use GFP_NOFS allocation context.\n\nWe would like to drop PF_MEMALLOC_NORECLAIM because it is really\ndangerous to use if the caller doesn\u0027t control the full call chain with\nthis flag set. E.g. if any of the function down the chain needed\nGFP_NOFAIL request the PF_MEMALLOC_NORECLAIM would override this and\ncause unexpected failure.\n\nWhile this is not the case in this particular case using the scoped gfp\nsemantic is not really needed bacause we can easily pus the allocation\ncontext down the chain without too much clutter.\n\n[akpm@linux-foundation.org: fix kerneldoc warnings]\nLink: https://lkml.kernel.org/r/20240926172940.167084-1-mhocko@kernel.org\nLink: https://lkml.kernel.org/r/20240926172940.167084-2-mhocko@kernel.org\nSigned-off-by: Michal Hocko \u003cmhocko@suse.com\u003e\nReviewed-by: Christoph Hellwig \u003chch@lst.de\u003e\nReviewed-by: Dave Chinner \u003cdchinner@redhat.com\u003e\nReviewed-by: Jan Kara \u003cjack@suse.cz\u003e # For vfs changes\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: Christian Brauner \u003cbrauner@kernel.org\u003e\nCc: James Morris \u003cjmorris@namei.org\u003e\nCc: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\nCc: Paul Moore \u003cpaul@paul-moore.com\u003e\nCc: Serge E. Hallyn \u003cserge@hallyn.com\u003e\nCc: Yafang Shao \u003claoar.shao@gmail.com\u003e\nCc: Matthew Wilcox (Oracle) \u003cwilly@infradead.org\u003e\nCc: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "b983b271662bd6104d429b0fd97af3333ba760bf", "tree": "2d745af2b1cf000b1d2f8100a11d6936f338f3d9", "parents": [ "ff9d4099e6abe7062b1d81f003b1efce72da2fb3" ], "author": { "name": "Dimitri Sivanich", "email": "sivanich@hpe.com", "time": "Thu Sep 19 07:34:50 2024 -0500" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Oct 09 12:47:01 2024 -0700" }, "message": "misc: sgi-gru: Don\u0027t disable preemption in GRU driver\n\nDisabling preemption in the GRU driver is unnecessary, and clashes with\nsleeping locks in several code paths. Remove preempt_disable and\npreempt_enable from the GRU driver.\n\nSigned-off-by: Dimitri Sivanich \u003csivanich@hpe.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "7ef60108069b7e3cc66432304e1dd197d5c0a9b5", "tree": "22f3c889d509e1520aa74204bd42e6c6874cadb0", "parents": [ "76f5af9952064dc88d41be6fde1fce793ee7eabe" ], "author": { "name": "Dai Ngo", "email": "dai.ngo@oracle.com", "time": "Tue Oct 08 15:58:07 2024 -0700" }, "committer": { "name": "Anna Schumaker", "email": "anna.schumaker@oracle.com", "time": "Wed Oct 09 15:39:22 2024 -0400" }, "message": "NFS: remove revoked delegation from server\u0027s delegation list\n\nAfter the delegation is returned to the NFS server remove it\nfrom the server\u0027s delegations list to reduce the time it takes\nto scan this list.\n\nNetwork trace captured while running the below script shows the\ntime taken to service the CB_RECALL increases gradually due to\nthe overhead of traversing the delegation list in\nnfs_delegation_find_inode_server.\n\nThe NFS server in this test is a Solaris server which issues\nCB_RECALL when receiving the all-zero stateid in the SETATTR.\n\nmount\u003d/mnt/data\nfor i in $(seq 1 20)\ndo\n echo $i\n mkdir $mount/testtarfile$i\n time tar -C $mount/testtarfile$i -xf 5000_files.tar\ndone\n\nSigned-off-by: Dai Ngo \u003cdai.ngo@oracle.com\u003e\nReviewed-by: Trond Myklebust \u003ctrond.myklebust@hammerspace.com\u003e\nSigned-off-by: Anna Schumaker \u003canna.schumaker@oracle.com\u003e\n" }, { "commit": "ff9d4099e6abe7062b1d81f003b1efce72da2fb3", "tree": "470f6bcf9a305e21a1c9f27136404076395b83c1", "parents": [ "75b607fab38d149f232f01eae5e6392b394dd659", "5c26d2f1d3f5e4be3e196526bead29ecb139cf91" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Oct 09 12:22:02 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Oct 09 12:22:02 2024 -0700" }, "message": "Merge tag \u0027unicode-fixes-6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/krisman/unicode\n\nPull unicode fix from Gabriel Krisman Bertazi:\n\n - Handle code-points with the Ignorable property as regular character\n instead of treating them as an empty string (me)\n\n* tag \u0027unicode-fixes-6.12-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/krisman/unicode:\n unicode: Don\u0027t special case ignorable code points\n" }, { "commit": "5c26d2f1d3f5e4be3e196526bead29ecb139cf91", "tree": "3907409ecf9b89987f66e1cf8d9f402d07f35616", "parents": [ "8cf0b93919e13d1e8d4466eb4080a4c4d9d66d7b" ], "author": { "name": "Gabriel Krisman Bertazi", "email": "krisman@suse.de", "time": "Tue Oct 08 18:43:16 2024 -0400" }, "committer": { "name": "Gabriel Krisman Bertazi", "email": "krisman@suse.de", "time": "Wed Oct 09 13:34:01 2024 -0400" }, "message": "unicode: Don\u0027t special case ignorable code points\n\nWe don\u0027t need to handle them separately. Instead, just let them\ndecompose/casefold to themselves.\n\nSigned-off-by: Gabriel Krisman Bertazi \u003ckrisman@suse.de\u003e\n" }, { "commit": "c56f9ecb7fb6a3a90079c19eb4c8daf3bbf514b3", "tree": "8fb94425a4e96b016c44bb6baf2c074a2525d254", "parents": [ "7a5ab8071114344f62a8b1e64ed3452a77257d76" ], "author": { "name": "Basavaraj Natikar", "email": "Basavaraj.Natikar@amd.com", "time": "Wed Oct 09 20:17:57 2024 +0530" }, "committer": { "name": "Jiri Kosina", "email": "jkosina@suse.com", "time": "Wed Oct 09 17:18:57 2024 +0200" }, "message": "HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()\n\nUsing the device-managed version allows to simplify clean-up in probe()\nerror path.\n\nAdditionally, this device-managed ensures proper cleanup, which helps to\nresolve memory errors, page faults, btrfs going read-only, and btrfs\ndisk corruption.\n\nFixes: 4b2c53d93a4b (\"SFH:Transport Driver to add support of AMD Sensor Fusion Hub (SFH)\")\nTested-by: Chris Hixon \u003clinux-kernel-bugs@hixontech.com\u003e\nTested-by: Richard \u003chobbes1069@gmail.com\u003e\nTested-by: Skyler \u003cskpu@pm.me\u003e\nReported-by: Chris Hixon \u003clinux-kernel-bugs@hixontech.com\u003e\nCloses: https://lore.kernel.org/all/3b129b1f-8636-456a-80b4-0f6cce0eef63@hixontech.com/\nLink: https://bugzilla.kernel.org/show_bug.cgi?id\u003d219331\nSigned-off-by: Basavaraj Natikar \u003cBasavaraj.Natikar@amd.com\u003e\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.com\u003e\n" }, { "commit": "a38719e3157118428e34fbd45b0d0707a5877784", "tree": "4bc0be09e38650b847fa17493f47e9d1d387052f", "parents": [ "8cf0b93919e13d1e8d4466eb4080a4c4d9d66d7b" ], "author": { "name": "Niklas Cassel", "email": "cassel@kernel.org", "time": "Tue Oct 08 15:58:44 2024 +0200" }, "committer": { "name": "Niklas Cassel", "email": "cassel@kernel.org", "time": "Wed Oct 09 16:21:19 2024 +0200" }, "message": "ata: libata: avoid superfluous disk spin down + spin up during hibernation\n\nA user reported that commit aa3998dbeb3a (\"ata: libata-scsi: Disable scsi\ndevice manage_system_start_stop\") introduced a spin down + immediate spin\nup of the disk both when entering and when resuming from hibernation.\nThis behavior was not there before, and causes an increased latency both\nwhen entering and when resuming from hibernation.\n\nHibernation is done by three consecutive PM events, in the following order:\n1) PM_EVENT_FREEZE\n2) PM_EVENT_THAW\n3) PM_EVENT_HIBERNATE\n\nCommit aa3998dbeb3a (\"ata: libata-scsi: Disable scsi device\nmanage_system_start_stop\") modified ata_eh_handle_port_suspend() to call\nata_dev_power_set_standby() (which spins down the disk), for both event\nPM_EVENT_FREEZE and event PM_EVENT_HIBERNATE.\n\nDocumentation/driver-api/pm/devices.rst, section \"Entering Hibernation\",\nexplicitly mentions that PM_EVENT_FREEZE does not have to be put the device\nin a low-power state, and actually recommends not doing so. Thus, let\u0027s not\nspin down the disk on PM_EVENT_FREEZE. (The disk will instead be spun down\nduring the subsequent PM_EVENT_HIBERNATE event.)\n\nThis way, PM_EVENT_FREEZE will behave as it did before commit aa3998dbeb3a\n(\"ata: libata-scsi: Disable scsi device manage_system_start_stop\"), while\nPM_EVENT_HIBERNATE will continue to spin down the disk.\n\nThis will avoid the superfluous spin down + spin up when entering and\nresuming from hibernation, while still making sure that the disk is spun\ndown before actually entering hibernation.\n\nCc: stable@vger.kernel.org # v6.6+\nFixes: aa3998dbeb3a (\"ata: libata-scsi: Disable scsi device manage_system_start_stop\")\nReviewed-by: Damien Le Moal \u003cdlemoal@kernel.org\u003e\nLink: https://lore.kernel.org/r/20241008135843.1266244-2-cassel@kernel.org\nSigned-off-by: Niklas Cassel \u003ccassel@kernel.org\u003e\n" }, { "commit": "912da2c384d510ce40c5af9c3adc316afa4ec547", "tree": "57ff1afea34fc813e0e4e0179a22a74bb28de05a", "parents": [ "8cf0b93919e13d1e8d4466eb4080a4c4d9d66d7b" ], "author": { "name": "Steven Rostedt", "email": "rostedt@goodmis.org", "time": "Tue Oct 08 14:32:42 2024 -0400" }, "committer": { "name": "Steven Rostedt (Google)", "email": "rostedt@goodmis.org", "time": "Wed Oct 09 09:24:35 2024 -0400" }, "message": "ring-buffer: Do not have boot mapped buffers hook to CPU hotplug\n\nThe boot mapped ring buffer has its buffer mapped at a fixed location\nfound at boot up. It is not dynamic. It cannot grow or be expanded when\nnew CPUs come online.\n\nDo not hook fixed memory mapped ring buffers to the CPU hotplug callback,\notherwise it can cause a crash when it tries to add the buffer to the\nmemory that is already fully occupied.\n\nCc: Masami Hiramatsu \u003cmhiramat@kernel.org\u003e\nCc: Mathieu Desnoyers \u003cmathieu.desnoyers@efficios.com\u003e\nLink: https://lore.kernel.org/20241008143242.25e20801@gandalf.local.home\nFixes: be68d63a139bd (\"ring-buffer: Add ring_buffer_alloc_range()\")\nSigned-off-by: Steven Rostedt (Google) \u003crostedt@goodmis.org\u003e\n" }, { "commit": "983e35ce2e1ee4037f6f5d5398dfc107b22ad569", "tree": "3e479357070b784d303a4ec8518d2383755c8954", "parents": [ "4d5c70e6155d5eae198bade4afeab3c1b15073b6" ], "author": { "name": "Jijie Shao", "email": "shaojijie@huawei.com", "time": "Tue Oct 08 10:48:36 2024 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 09 13:40:42 2024 +0100" }, "message": "net: hns3/hns: Update the maintainer for the HNS3/HNS ethernet driver\n\nYisen Zhuang has left the company in September.\nJian Shen will be responsible for maintaining the\nhns3/hns driver\u0027s code in the future,\nso add Jian Shen to the hns3/hns driver\u0027s matainer list.\n\nSigned-off-by: Jijie Shao \u003cshaojijie@huawei.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" } ], "next": "4d5c70e6155d5eae198bade4afeab3c1b15073b6" }