)]}' { "log": [ { "commit": "e04c78d86a9699d136910cfc0bdcf01087e3267e", "tree": "1d1b2271952b26c680a34055ccdf342487134614", "parents": [ "08215f5486ec4d7c39cf14987ffb133e1e1f6c10" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jun 15 13:49:41 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jun 15 13:49:41 2025 -0700" }, "message": "Linux 6.16-rc2\n" }, { "commit": "08215f5486ec4d7c39cf14987ffb133e1e1f6c10", "tree": "58974ad49ce82593465974cc259af43824dde77b", "parents": [ "8c6bc74c7f8910ed4c969ccec52e98716f98700a", "2f6b47b295518c3ba16fabb1dddbe6a319899acb" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jun 15 09:14:27 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jun 15 09:14:27 2025 -0700" }, "message": "Merge tag \u0027kbuild-fixes-v6.16\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild\n\nPull Kbuild fixes from Masahiro Yamada:\n\n - Move warnings about linux/export.h from W\u003d1 to W\u003d2\n\n - Fix structure type overrides in gendwarfksyms\n\n* tag \u0027kbuild-fixes-v6.16\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild:\n gendwarfksyms: Fix structure type overrides\n kbuild: move warnings about linux/export.h from W\u003d1 to W\u003d2\n" }, { "commit": "2f6b47b295518c3ba16fabb1dddbe6a319899acb", "tree": "4cb55609ba629badde8c189603f7fbfa5e034aad", "parents": [ "a6a7946bd691940cfe7289ae6dfb1f077516df72" ], "author": { "name": "Sami Tolvanen", "email": "samitolvanen@google.com", "time": "Sat Jun 14 00:55:33 2025 +0000" }, "committer": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Mon Jun 16 00:49:48 2025 +0900" }, "message": "gendwarfksyms: Fix structure type overrides\n\nAs we always iterate through the entire die_map when expanding\ntype strings, recursively processing referenced types in\ntype_expand_child() is not actually necessary. Furthermore,\nthe type_string kABI rule added in commit c9083467f7b9\n(\"gendwarfksyms: Add a kABI rule to override type strings\") can\nfail to override type strings for structures due to a missing\nkabi_get_type_string() check in this function.\n\nFix the issue by dropping the unnecessary recursion and moving\nthe override check to type_expand(). Note that symbol versions\nare otherwise unchanged with this patch.\n\nFixes: c9083467f7b9 (\"gendwarfksyms: Add a kABI rule to override type strings\")\nReported-by: Giuliano Procida \u003cgprocida@google.com\u003e\nSigned-off-by: Sami Tolvanen \u003csamitolvanen@google.com\u003e\nReviewed-by: Petr Pavlu \u003cpetr.pavlu@suse.com\u003e\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\n" }, { "commit": "a6a7946bd691940cfe7289ae6dfb1f077516df72", "tree": "879cdf432b6ab970b2068839dff506a50f9c231a", "parents": [ "19272b37aa4f83ca52bdf9c16d5d81bdd1354494" ], "author": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Fri Jun 13 01:08:48 2025 +0900" }, "committer": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Mon Jun 16 00:41:40 2025 +0900" }, "message": "kbuild: move warnings about linux/export.h from W\u003d1 to W\u003d2\n\nThis hides excessive warnings, as nobody builds with W\u003d2.\n\nFixes: a934a57a42f6 (\"scripts/misc-check: check missing #include \u003clinux/export.h\u003e when W\u003d1\")\nFixes: 7d95680d64ac (\"scripts/misc-check: check unnecessary #include \u003clinux/export.h\u003e when W\u003d1\")\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nAcked-by: Arnd Bergmann \u003carnd@arndb.de\u003e\nReviewed-by: Nathan Chancellor \u003cnathan@kernel.org\u003e\nAcked-by: Heiko Carstens \u003chca@linux.ibm.com\u003e\n" }, { "commit": "8c6bc74c7f8910ed4c969ccec52e98716f98700a", "tree": "800b9946e503d7ea77a601f35eef77d2430b977a", "parents": [ "ac91b4de4492bfdbbf46b265fb6c5c0ed4b66504", "72dd7961a4bb4fa1fc456169a61dd12e68e50645" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 14 10:13:32 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 14 10:13:32 2025 -0700" }, "message": "Merge tag \u0027v6.16-rc1-smb3-client-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6\n\nPull smb client fixes from Steve French:\n\n - SMB3.1.1 POSIX extensions fix for char remapping\n\n - Fix for repeated directory listings when directory leases enabled\n\n - deferred close handle reuse fix\n\n* tag \u0027v6.16-rc1-smb3-client-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6:\n smb: improve directory cache reuse for readdir operations\n smb: client: fix perf regression with deferred closes\n smb: client: disable path remapping with POSIX extensions\n" }, { "commit": "ac91b4de4492bfdbbf46b265fb6c5c0ed4b66504", "tree": "d04d38323522daec6eba808e25d2627a95f63a49", "parents": [ "f713ffa3639cd57673754a5e83aedebf50dce332", "f9705d66fa7107fcd619083f7aae2afb0554a593" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 14 10:01:47 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 14 10:01:47 2025 -0700" }, "message": "Merge tag \u0027iommu-fixes-v6.16-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/iommu/linux\n\nPull iommu fix from Joerg Roedel:\n\n - Fix PTE size calculation for NVidia Tegra\n\n* tag \u0027iommu-fixes-v6.16-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/iommu/linux:\n iommu/tegra: Fix incorrect size calculation\n" }, { "commit": "f713ffa3639cd57673754a5e83aedebf50dce332", "tree": "b606bfdfc398b3a9a2c12bc8bfcccb0618290619", "parents": [ "6d13760ea3a746c329d534b90d2b38a0ef7690d2", "9ce6c9875f3e995be5fd720b65835291f8a609b1" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 14 09:25:22 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 14 09:25:22 2025 -0700" }, "message": "Merge tag \u0027block-6.16-20250614\u0027 of git://git.kernel.dk/linux\n\nPull block fixes from Jens Axboe:\n\n - Fix for a deadlock on queue freeze with zoned writes\n\n - Fix for zoned append emulation\n\n - Two bio folio fixes, for sparsemem and for very large folios\n\n - Fix for a performance regression introduced in 6.13 when plug\n insertion was changed\n\n - Fix for NVMe passthrough handling for polled IO\n\n - Document the ublk auto registration feature\n\n - loop lockdep warning fix\n\n* tag \u0027block-6.16-20250614\u0027 of git://git.kernel.dk/linux:\n nvme: always punt polled uring_cmd end_io work to task_work\n Documentation: ublk: Separate UBLK_F_AUTO_BUF_REG fallback behavior sublists\n block: Fix bvec_set_folio() for very large folios\n bio: Fix bio_first_folio() for SPARSEMEM without VMEMMAP\n block: use plug request list tail for one-shot backmerge attempt\n block: don\u0027t use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work\n block: Clear BIO_EMULATES_ZONE_APPEND flag on BIO completion\n ublk: document auto buffer registration(UBLK_F_AUTO_BUF_REG)\n loop: move lo_set_size() out of queue freeze\n" }, { "commit": "6d13760ea3a746c329d534b90d2b38a0ef7690d2", "tree": "6295fc8a795896d80e66031bfee01452d2fb6dbd", "parents": [ "588adb24b757d5d9a438056ac0347d8b3ac38dde", "b62e0efd8a8571460d05922862a451855ebdf3c6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 14 08:44:54 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 14 08:44:54 2025 -0700" }, "message": "Merge tag \u0027io_uring-6.16-20250614\u0027 of git://git.kernel.dk/linux\n\nPull io_uring fixes from Jens Axboe:\n\n - Fix for a race between SQPOLL exit and fdinfo reading.\n\n It\u0027s slim and I was only able to reproduce this with an artificial\n delay in the kernel. Followup sparse fix as well to unify the access\n to -\u003ethread.\n\n - Fix for multiple buffer peeking, avoiding truncation if possible.\n\n - Run local task_work for IOPOLL reaping when the ring is exiting.\n\n This currently isn\u0027t done due to an assumption that polled IO will\n never need task_work, but a fix on the block side is going to change\n that.\n\n* tag \u0027io_uring-6.16-20250614\u0027 of git://git.kernel.dk/linux:\n io_uring: run local task_work from ring exit IOPOLL reaping\n io_uring/kbuf: don\u0027t truncate end buffer for multiple buffer peeks\n io_uring: consistently use rcu semantics with sqpoll thread\n io_uring: fix use-after-free of sq-\u003ethread in __io_uring_show_fdinfo()\n" }, { "commit": "588adb24b757d5d9a438056ac0347d8b3ac38dde", "tree": "b85dd72e80397a578ea68698ca06f62c28817f57", "parents": [ "27b9989b87119da2f33f2c0fcbb8984ab4ebdf1a", "5b2d595efbfc9c46823bdb9ef11e1f9fa46adf9d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 14 08:38:34 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 14 08:38:34 2025 -0700" }, "message": "Merge tag \u0027rust-fixes-6.16\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ojeda/linux\n\nPull Rust fix from Miguel Ojeda:\n\n - \u0027hrtimer\u0027: fix future compile error when the \u0027impl_has_hr_timer!\u0027\n macro starts to get called\n\n* tag \u0027rust-fixes-6.16\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ojeda/linux:\n rust: time: Fix compile error in impl_has_hr_timer macro\n" }, { "commit": "27b9989b87119da2f33f2c0fcbb8984ab4ebdf1a", "tree": "be292b2777957fdd56cd18e3d1b021071baf98a4", "parents": [ "4774cfe3543abb8ee98089f535e28ebfd45b975a", "bb666b7c27073b986b75699e51a7102910f58060" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 14 08:18:09 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 14 08:18:09 2025 -0700" }, "message": "Merge tag \u0027mm-hotfixes-stable-2025-06-13-21-56\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm\n\nPull misc fixes from Andrew Morton:\n \"9 hotfixes. 3 are cc:stable and the remainder address post-6.15 issues\n or aren\u0027t considered necessary for -stable kernels. Only 4 are for MM\"\n\n* tag \u0027mm-hotfixes-stable-2025-06-13-21-56\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm:\n mm: add mmap_prepare() compatibility layer for nested file systems\n init: fix build warnings about export.h\n MAINTAINERS: add Barry as a THP reviewer\n drivers/rapidio/rio_cm.c: prevent possible heap overwrite\n mm: close theoretical race where stale TLB entries could linger\n mm/vma: reset VMA iterator on commit_merge() OOM failure\n docs: proc: update VmFlags documentation in smaps\n scatterlist: fix extraneous \u0027@\u0027-sign kernel-doc notation\n selftests/mm: skip failed memfd setups in gup_longterm\n" }, { "commit": "4774cfe3543abb8ee98089f535e28ebfd45b975a", "tree": "2da25e3f777bd8eada1ccdf7fc81e78959753bde", "parents": [ "25294cb8a404e8116eecaf2f151ee2fd6c17fb9b", "5c3ba81923e02adae354ec8afd006f93289b4a3c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 13 16:49:39 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 13 16:49:39 2025 -0700" }, "message": "Merge tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi\n\nPull SCSI fixes from James Bottomley:\n \"All fixes for drivers.\n\n The core change in the error handler is simply to translate an ALUA\n specific sense code into a retry the ALUA components can handle and\n won\u0027t impact any other devices\"\n\n* tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:\n scsi: error: alua: I/O errors for ALUA state transitions\n scsi: storvsc: Increase the timeouts to storvsc_timeout\n scsi: s390: zfcp: Ensure synchronous unit_add\n scsi: iscsi: Fix incorrect error path labels for flashnode operations\n scsi: mvsas: Fix typos in per-phy comments and SAS cmd port registers\n scsi: core: ufs: Fix a hang in the error handler\n" }, { "commit": "25294cb8a404e8116eecaf2f151ee2fd6c17fb9b", "tree": "7e184fe1377b359165a46f8bbea827d2b57a1d2c", "parents": [ "18531f4d1c8c47c4796289dbbc1ab657ffa063d2", "1364af9cb2c5716f1905113cc84ff77ddf16a22e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 13 16:27:27 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 13 16:27:27 2025 -0700" }, "message": "Merge tag \u0027drm-fixes-2025-06-14\u0027 of https://gitlab.freedesktop.org/drm/kernel\n\nPull drm fixes from Dave Airlie:\n \"Quiet week, only two pull requests came my way, xe has a couple of\n fixes and then a bunch of fixes across the board, vc4 probably fixes\n the biggest problem:\n\n vc4:\n - Fix infinite EPROBE_DEFER loop in vc4 probing\n\n amdxdna:\n - Fix amdxdna firmware size\n\n meson:\n - modesetting fixes\n\n sitronix:\n - Kconfig fix for st7171-i2c\n\n dma-buf:\n - Fix -EBUSY WARN_ON_ONCE in dma-buf\n\n udmabuf:\n - Use dma_sync_sgtable_for_cpu in udmabuf\n\n xe:\n - Fix regression disallowing 64K SVM migration\n - Use a bounce buffer for WA BB\"\n\n* tag \u0027drm-fixes-2025-06-14\u0027 of https://gitlab.freedesktop.org/drm/kernel:\n drm/xe/lrc: Use a temporary buffer for WA BB\n udmabuf: use sgtable-based scatterlist wrappers\n dma-buf: fix compare in WARN_ON_ONCE\n drm/sitronix: st7571-i2c: Select VIDEOMODE_HELPERS\n drm/meson: fix more rounding issues with 59.94Hz modes\n drm/meson: use vclk_freq instead of pixel_freq in debug print\n drm/meson: fix debug log statement when setting the HDMI clocks\n drm/vc4: fix infinite EPROBE_DEFER loop\n drm/xe/svm: Fix regression disallowing 64K SVM migration\n accel/amdxdna: Fix incorrect PSP firmware size\n" }, { "commit": "b62e0efd8a8571460d05922862a451855ebdf3c6", "tree": "39588df6d03e0622b94c9d39156f772459785386", "parents": [ "26ec15e4b0c1d7b25214d9c0be1d50492e2f006c" ], "author": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Fri Jun 13 15:24:53 2025 -0600" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Fri Jun 13 15:26:17 2025 -0600" }, "message": "io_uring: run local task_work from ring exit IOPOLL reaping\n\nIn preparation for needing to shift NVMe passthrough to always use\ntask_work for polled IO completions, ensure that those are suitably\nrun at exit time. See commit:\n\n9ce6c9875f3e (\"nvme: always punt polled uring_cmd end_io work to task_work\")\n\nfor details on why that is necessary.\n\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "9ce6c9875f3e995be5fd720b65835291f8a609b1", "tree": "6e6bba15cdeeb8737d03b322017c5d159a2795ac", "parents": [ "db3dfae1a2f662e69d535827703bcdbb04b8d72b" ], "author": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Fri Jun 13 13:37:41 2025 -0600" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Fri Jun 13 15:18:34 2025 -0600" }, "message": "nvme: always punt polled uring_cmd end_io work to task_work\n\nCurrently NVMe uring_cmd completions will complete locally, if they are\npolled. This is done because those completions are always invoked from\ntask context. And while that is true, there\u0027s no guarantee that it\u0027s\ninvoked under the right ring context, or even task. If someone does\nNVMe passthrough via multiple threads and with a limited number of\npoll queues, then ringA may find completions from ringB. For that case,\ncompleting the request may not be sound.\n\nAlways just punt the passthrough completions via task_work, which will\nredirect the completion, if needed.\n\nCc: stable@vger.kernel.org\nFixes: 585079b6e425 (\"nvme: wire up async polling for io passthrough commands\")\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "18531f4d1c8c47c4796289dbbc1ab657ffa063d2", "tree": "565ef5e4e76283931e6181650ee9ff7212f0cacb", "parents": [ "f688b599d711d169b22e99f2d055847d66c4e0d3", "28b069933d39708af872d9739e78315317b93031" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 13 13:39:15 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 13 13:39:15 2025 -0700" }, "message": "Merge tag \u0027acpi-6.16-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull ACPI fixes from Rafael Wysocki:\n \"These fix an ACPI APEI error injection driver failure that started to\n occur after switching it over to using a faux device, address an EC\n driver issue related to invalid ECDT tables, clean up the usage of\n mwait_idle_with_hints() in the ACPI PAD driver, add a new IRQ override\n quirk, and fix a NULL pointer dereference related to nosmp:\n\n - Update the faux device handling code in the driver core and address\n an ACPI APEI error injection driver failure that started to occur\n after switching it over to using a faux device on top of that (Dan\n Williams)\n\n - Update data types of variables passed as arguments to\n mwait_idle_with_hints() in the ACPI PAD (processor aggregator\n device) driver to match the function definition after recent\n changes (Uros Bizjak)\n\n - Fix a NULL pointer dereference in the ACPI CPPC library that occurs\n when nosmp is passed to the kernel in the command line (Yunhui Cui)\n\n - Ignore ECDT tables with an invalid ID string to prevent using an\n incorrect GPE for signaling events on some systems (Armin Wolf)\n\n - Add a new IRQ override quirk for MACHENIKE 16P (Wentao Guan)\"\n\n* tag \u0027acpi-6.16-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n ACPI: resource: Use IRQ override on MACHENIKE 16P\n ACPI: EC: Ignore ECDT tables with an invalid ID string\n ACPI: CPPC: Fix NULL pointer dereference when nosmp is used\n ACPI: PAD: Update arguments of mwait_idle_with_hints()\n ACPI: APEI: EINJ: Do not fail einj_init() on faux_device_create() failure\n driver core: faux: Quiet probe failures\n driver core: faux: Suppress bind attributes\n" }, { "commit": "f688b599d711d169b22e99f2d055847d66c4e0d3", "tree": "e64fd54a841bf844931279249f4cce9d411eb9f6", "parents": [ "02adc1490e6d8681cc81057ed86d123d0240909b", "dd3581853c5f190c3a7bd1de78f5ecb2905a77a7" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 13 13:27:41 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 13 13:27:41 2025 -0700" }, "message": "Merge tag \u0027pm-6.16-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull power management fixes from Rafael Wysocki:\n \"These fix the cpupower utility installation, fix up the recently added\n Rust abstractions for cpufreq and OPP, restore the x86 update\n eliminating mwait_play_dead_cpuid_hint() that has been reverted during\n the 6.16 merge window along with preventing the failure caused by it\n from happening, and clean up mwait_idle_with_hints() usage in\n intel_idle:\n\n - Implement CpuId Rust abstraction and use it to fix doctest failure\n related to the recently introduced cpumask abstraction (Viresh\n Kumar)\n\n - Do minor cleanups in the `# Safety` sections for cpufreq\n abstractions added recently (Viresh Kumar)\n\n - Unbreak cpupower systemd service units installation on some systems\n by adding a unitdir variable for specifying the location to install\n them (Francesco Poli)\n\n - Eliminate mwait_play_dead_cpuid_hint() again after reverting its\n elimination during the 6.16 merge window due to a problem with\n handling \"dead\" SMT siblings, but this time prevent leaving them in\n C1 after initialization by taking them online and back offline when\n a proper cpuidle driver for the platform has been registered\n (Rafael Wysocki)\n\n - Update data types of variables passed as arguments to\n mwait_idle_with_hints() to match the function definition after\n recent changes (Uros Bizjak)\"\n\n* tag \u0027pm-6.16-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n rust: cpu: Add CpuId::current() to retrieve current CPU ID\n rust: Use CpuId in place of raw CPU numbers\n rust: cpu: Introduce CpuId abstraction\n intel_idle: Update arguments of mwait_idle_with_hints()\n cpufreq: Convert `/// SAFETY` lines to `# Safety` sections\n cpupower: split unitdir from libdir in Makefile\n Reapply \"x86/smp: Eliminate mwait_play_dead_cpuid_hint()\"\n ACPI: processor: Rescan \"dead\" SMT siblings during initialization\n intel_idle: Rescan \"dead\" SMT siblings during initialization\n x86/smp: PM/hibernate: Split arch_resume_nosmt()\n intel_idle: Use subsys_initcall_sync() for initialization\n" }, { "commit": "28b069933d39708af872d9739e78315317b93031", "tree": "5d1f29a7e64f85d1e899c80cc250a0e3a2a9ba2e", "parents": [ "162457f5853ce3348e7956666916f5e5e31be51f", "2f76d269073bdb2971b253ef87d1f96f1a94c50e", "15eece6c5b05e5f9db0711978c3e3b7f1a2cfe12", "7a0d59f6a913a2bc7680c663b8cf1e45d1bdbf26", "c99ad987d3e9b550e9839d5df22de97d90462e5f" ], "author": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Fri Jun 13 21:55:30 2025 +0200" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Fri Jun 13 21:55:30 2025 +0200" }, "message": "Merge branches \u0027acpi-pad\u0027, \u0027acpi-cppc\u0027, \u0027acpi-ec\u0027 and \u0027acpi-resource\u0027\n\nMerge assorted ACPI updates for 6.16-rc2:\n\n - Update data types of variables passed as arguments to\n mwait_idle_with_hints() in the ACPI PAD (processor aggregator device)\n driver to match the function definition after recent changes (Uros\n Bizjak).\n\n - Fix a NULL pointer dereference in the ACPI CPPC library that occurs\n when nosmp is passed to the kernel in the command line (Yunhui Cui).\n\n - Ignore ECDT tables with an invalid ID string to prevent using an\n incorrect GPE for signaling events on some systems (Armin Wolf).\n\n - Add a new IRQ override quirk for MACHENIKE 16P (Wentao Guan).\n\n* acpi-pad:\n ACPI: PAD: Update arguments of mwait_idle_with_hints()\n\n* acpi-cppc:\n ACPI: CPPC: Fix NULL pointer dereference when nosmp is used\n\n* acpi-ec:\n ACPI: EC: Ignore ECDT tables with an invalid ID string\n\n* acpi-resource:\n ACPI: resource: Use IRQ override on MACHENIKE 16P\n" }, { "commit": "dd3581853c5f190c3a7bd1de78f5ecb2905a77a7", "tree": "8b3e904835058cbdd74065f77da5813f328924fd", "parents": [ "ea2867608b311a4bcf4f231cd065825b5d8dc4f9", "72840238e2bcb8fb24cb35d8d1d5a822c04e62a4" ], "author": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Fri Jun 13 21:28:07 2025 +0200" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Fri Jun 13 21:28:07 2025 +0200" }, "message": "Merge branch \u0027pm-cpuidle\u0027\n\nMerge cpuidle updates for 6.16-rc2:\n\n - Update data types of variables passed as arguments to\n mwait_idle_with_hints() to match the function definition\n after recent changes (Uros Bizjak).\n\n - Eliminate mwait_play_dead_cpuid_hint() again after reverting its\n elimination during the merge window due to a problem with handling\n \"dead\" SMT siblings, but this time prevent leaving them in C1 after\n initialization by taking them online and back offline when a proper\n cpuidle driver for the platform has been registered (Rafael Wysocki).\n\n* pm-cpuidle:\n intel_idle: Update arguments of mwait_idle_with_hints()\n Reapply \"x86/smp: Eliminate mwait_play_dead_cpuid_hint()\"\n ACPI: processor: Rescan \"dead\" SMT siblings during initialization\n intel_idle: Rescan \"dead\" SMT siblings during initialization\n x86/smp: PM/hibernate: Split arch_resume_nosmt()\n intel_idle: Use subsys_initcall_sync() for initialization\n" }, { "commit": "ea2867608b311a4bcf4f231cd065825b5d8dc4f9", "tree": "ff8d8a5bb53fbd69d1f6e99fd360f97b507c14ab", "parents": [ "332d6a94ce80efae2e6b38e01a46e92230577354", "d08293ef1ede6a558b9cf2577aa34473f6298ca7" ], "author": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Fri Jun 13 21:25:38 2025 +0200" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Fri Jun 13 21:25:38 2025 +0200" }, "message": "Merge branch \u0027pm-tools\u0027\n\nMerge a cpupower utility fix for 6.16-rc2 that unbreaks systemd service\nunits installation on some sysems (Francesco Poli).\n\n* pm-tools:\n cpupower: split unitdir from libdir in Makefile\n" }, { "commit": "02adc1490e6d8681cc81057ed86d123d0240909b", "tree": "35ac0f4b9531b335d11e57d7eec812a9c1769e35", "parents": [ "601dddb6c5d6bf63c63b2efba98231db5f861696", "9f0ad43b158d07bc7144d219ceabdea36e28e392" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 13 11:01:44 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 13 11:01:44 2025 -0700" }, "message": "Merge tag \u0027spi-fix-v6.16-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi\n\nPull spi fixes from Mark Brown:\n \"A collection of driver specific fixes, most minor apart from the OMAP\n ones which disable some recent performance optimisations in some\n non-standard cases where we could start driving the bus incorrectly.\n\n The change to the stm32-ospi driver to use the newer reset APIs is a\n fix for interactions with other IP sharing the same reset line in some\n SoCs\"\n\n* tag \u0027spi-fix-v6.16-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi:\n spi: spi-pci1xxxx: Drop MSI-X usage as unsupported by DMA engine\n spi: stm32-ospi: clean up on error in probe()\n spi: stm32-ospi: Make usage of reset_control_acquire/release() API\n spi: offload: check offload ops existence before disabling the trigger\n spi: spi-pci1xxxx: Fix error code in probe\n spi: loongson: Fix build warnings about export.h\n spi: omap2-mcspi: Disable multi-mode when the previous message kept CS asserted\n spi: omap2-mcspi: Disable multi mode when CS should be kept asserted after message\n" }, { "commit": "601dddb6c5d6bf63c63b2efba98231db5f861696", "tree": "edd35d0c14b4892a2716a9e0ec94bd8b50bcb957", "parents": [ "f90fff1e152dedf52b932240ebbd670d83330eca", "06118ae36855b7d3d22688298e74a766ccf0cb7a" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 13 11:00:19 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 13 11:00:19 2025 -0700" }, "message": "Merge tag \u0027regulator-fix-v6.16-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator\n\nPull regulator fix from Mark Brown:\n \"One minor fix for a leak in the DT parsing code in the max20086 driver\"\n\n* tag \u0027regulator-fix-v6.16-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator:\n regulator: max20086: Fix refcount leak in max20086_parse_regulators_dt()\n" }, { "commit": "f90fff1e152dedf52b932240ebbd670d83330eca", "tree": "82091a26b42acc31e985cad32197d08485fd07a3", "parents": [ "3ca933aad0aca463512d2f54a79fc65b8ecb0f48" ], "author": { "name": "Oleg Nesterov", "email": "oleg@redhat.com", "time": "Fri Jun 13 19:26:50 2025 +0200" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 13 10:55:49 2025 -0700" }, "message": "posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()\n\nIf an exiting non-autoreaping task has already passed exit_notify() and\ncalls handle_posix_cpu_timers() from IRQ, it can be reaped by its parent\nor debugger right after unlock_task_sighand().\n\nIf a concurrent posix_cpu_timer_del() runs at that moment, it won\u0027t be\nable to detect timer-\u003eit.cpu.firing !\u003d 0: cpu_timer_task_rcu() and/or\nlock_task_sighand() will fail.\n\nAdd the tsk-\u003eexit_state check into run_posix_cpu_timers() to fix this.\n\nThis fix is not needed if CONFIG_POSIX_CPU_TIMERS_TASK_WORK\u003dy, because\nexit_task_work() is called before exit_notify(). But the check still\nmakes sense, task_work_add(\u0026tsk-\u003eposix_cputimers_work.work) will fail\nanyway in this case.\n\nCc: stable@vger.kernel.org\nReported-by: Benoît Sevens \u003cbsevens@google.com\u003e\nFixes: 0bdd2ed4138e (\"sched: run_posix_cpu_timers: Don\u0027t check -\u003eexit_state, use lock_task_sighand()\")\nSigned-off-by: Oleg Nesterov \u003coleg@redhat.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "3ca933aad0aca463512d2f54a79fc65b8ecb0f48", "tree": "6d32c8c22aa3ded7c5f7e714f767db79e3bf21f8", "parents": [ "dde63797055cf3615bdac744d641e19e165467bb", "8a157d8a00e815cab4432653cb50c9cedbbb4931" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 13 10:51:11 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 13 10:51:11 2025 -0700" }, "message": "Merge tag \u0027trace-v6.16-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace\n\nPull tracing fix from Steven Rostedt:\n\n - Do not free \"head\" variable in filter_free_subsystem_filters()\n\n The first error path jumps to \"free_now\" label but first frees the\n newly allocated \"head\" variable. But the \"free_now\" code checks this\n variable, and if it is not NULL, it will iterate the list. As this\n list variable was already initialized, the \"free_now\" code will not\n do anything as it is empty. But freeing it will cause a UAF bug.\n\n The error path should simply jump to the \"free_now\" label and leave\n the \"head\" variable alone.\n\n* tag \u0027trace-v6.16-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace:\n tracing: Do not free \"head\" on error path of filter_free_subsystem_filters()\n" }, { "commit": "dde63797055cf3615bdac744d641e19e165467bb", "tree": "0ab9e78e603205c9dbbd59e672495d1bb10eebb9", "parents": [ "ad6159087fbbd754bfe940bd62b6322307925faa", "8046d29dde17002523f94d3e6e0ebe486ce52166" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 13 10:05:31 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 13 10:05:31 2025 -0700" }, "message": "Merge tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/virt/kvm/kvm\n\nPull kvm fixes from Paolo Bonzini:\n \"ARM:\n\n - Rework of system register accessors for system registers that are\n directly writen to memory, so that sanitisation of the in-memory\n value happens at the correct time (after the read, or before the\n write). For convenience, RMW-style accessors are also provided.\n\n - Multiple fixes for the so-called \"arch-timer-edge-cases\u0027 selftest,\n which was always broken.\n\n x86:\n\n - Make KVM_PRE_FAULT_MEMORY stricter for TDX, allowing userspace to\n pass only the \"untouched\" addresses and flipping the shared/private\n bit in the implementation.\n\n - Disable SEV-SNP support on initialization failure\n\n* tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/virt/kvm/kvm:\n KVM: x86/mmu: Reject direct bits in gpa passed to KVM_PRE_FAULT_MEMORY\n KVM: x86/mmu: Embed direct bits into gpa for KVM_PRE_FAULT_MEMORY\n KVM: SEV: Disable SEV-SNP support on initialization failure\n KVM: arm64: selftests: Determine effective counter width in arch_timer_edge_cases\n KVM: arm64: selftests: Fix xVAL init in arch_timer_edge_cases\n KVM: arm64: selftests: Fix thread migration in arch_timer_edge_cases\n KVM: arm64: selftests: Fix help text for arch_timer_edge_cases\n KVM: arm64: Make __vcpu_sys_reg() a pure rvalue operand\n KVM: arm64: Don\u0027t use __vcpu_sys_reg() to get the address of a sysreg\n KVM: arm64: Add RMW specific sysreg accessor\n KVM: arm64: Add assignment-specific sysreg accessor\n" }, { "commit": "26ec15e4b0c1d7b25214d9c0be1d50492e2f006c", "tree": "e64962f55304b3f98a518a8dd3a434f027692909", "parents": [ "c538f400fae22725580842deb2bef546701b64bd" ], "author": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Fri Jun 13 11:01:49 2025 -0600" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Fri Jun 13 11:01:49 2025 -0600" }, "message": "io_uring/kbuf: don\u0027t truncate end buffer for multiple buffer peeks\n\nIf peeking a bunch of buffers, normally io_ring_buffers_peek() will\ntruncate the end buffer. This isn\u0027t optimal as presumably more data will\nbe arriving later, and hence it\u0027s better to stop with the last full\nbuffer rather than truncate the end buffer.\n\nCc: stable@vger.kernel.org\nFixes: 35c8711c8fc4 (\"io_uring/kbuf: add helpers for getting/peeking multiple buffers\")\nReported-by: Christian Mazakas \u003cchristian.mazakas@gmail.com\u003e\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "ad6159087fbbd754bfe940bd62b6322307925faa", "tree": "6991dc04f8f1f01a909ece321e2ef4af2ef74f84", "parents": [ "36df6f734a7ad69880c5262543165c47cb57169f", "40a98e702b528c631094f2e524d309faf33dc774" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 13 09:59:29 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 13 09:59:29 2025 -0700" }, "message": "Merge tag \u0027v6.16-p4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6\n\nPull crypto fix from Herbert Xu:\n \"Fix a broken self-test in hkdf (new regression)\"\n\n* tag \u0027v6.16-p4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:\n crypto: hkdf - move to late_initcall\n" }, { "commit": "36df6f734a7ad69880c5262543165c47cb57169f", "tree": "26f55c6437c309c13e61f5eb41869a672bf864df", "parents": [ "d080d3b54448501ddb0f9e1f85a8043253100f55", "aef22f6fe7a630d536f9eaa0a7a2ed0f90ea369e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 13 09:49:07 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 13 09:49:07 2025 -0700" }, "message": "Merge tag \u0027bcachefs-2025-06-12\u0027 of git://evilpiepirate.org/bcachefs\n\nPull bcachefs fixes from Kent Overstreet:\n \"As usual, highlighting the ones users have been noticing:\n\n - Fix a small issue with has_case_insensitive not being propagated on\n snapshot creation; this led to fsck errors, which we\u0027re harmless\n because we\u0027re not using this flag yet (it\u0027s for overlayfs +\n casefolding).\n\n - Log the error being corrected in the journal when we\u0027re doing fsck\n repair: this was one of the \"lessons learned\" from the i_nlink 0 -\u003e\n subvolume deletion bug, where reconstructing what had happened by\n analyzing the journal was a bit more difficult than it needed to\n be.\n\n - Don\u0027t schedule btree node scan to run in the superblock: this fixes\n a regression from the 6.16 recovery passes rework, and let to it\n running unnecessarily.\n\n The real issue here is that we don\u0027t have online, \"self healing\"\n style topology repair yet: topology repair currently has to run\n before we go RW, which means that we may schedule it unnecessarily\n after a transient error. This will be fixed in the future.\n\n - We now track, in btree node flags, the reason it was scheduled to\n be rewritten. We discovered a deadlock in recovery when many btree\n nodes need to be rewritten because they\u0027re degraded: fully fixing\n this will take some work but it\u0027s now easier to see what\u0027s going\n on.\n\n For the bug report where this came up, a device had been kicked RO\n due to transient errors: manually setting it back to RW was\n sufficient to allow recovery to succeed.\n\n - Mark a few more fsck errors as autofix: as a reminder to users,\n please do keep reporting cases where something needs to be repaired\n and is not repaired automatically (i.e. cases where -o fix_errors\n or fsck -y is required).\n\n - rcu_pending.c now works with PREEMPT_RT\n\n - \u0027bcachefs device add\u0027, then umount, then remount wasn\u0027t working -\n we now emit a uevent so that the new device\u0027s new superblock is\n correctly picked up\n\n - Assorted repair fixes: btree node scan will no longer incorrectly\n update sb-\u003eversion_min,\n\n - Assorted syzbot fixes\"\n\n* tag \u0027bcachefs-2025-06-12\u0027 of git://evilpiepirate.org/bcachefs: (23 commits)\n bcachefs: Don\u0027t trace should_be_locked unless changing\n bcachefs: Ensure that snapshot creation propagates has_case_insensitive\n bcachefs: Print devices we\u0027re mounting on multi device filesystems\n bcachefs: Don\u0027t trust sb-\u003enr_devices in members_to_text()\n bcachefs: Fix version checks in validate_bset()\n bcachefs: ioctl: avoid stack overflow warning\n bcachefs: Don\u0027t pass trans to fsck_err() in gc_accounting_done\n bcachefs: Fix leak in bch2_fs_recovery() error path\n bcachefs: Fix rcu_pending for PREEMPT_RT\n bcachefs: Fix downgrade_table_extra()\n bcachefs: Don\u0027t put rhashtable on stack\n bcachefs: Make sure opts.read_only gets propagated back to VFS\n bcachefs: Fix possible console lock involved deadlock\n bcachefs: mark more errors autofix\n bcachefs: Don\u0027t persistently run scan_for_btree_nodes\n bcachefs: Read error message now prints if self healing\n bcachefs: Only run \u0027increase_depth\u0027 for keys from btree node csan\n bcachefs: Mark need_discard_freespace_key_bad autofix\n bcachefs: Update /dev/disk/by-uuid on device add\n bcachefs: Add more flags to btree nodes for rewrite reason\n ...\n" }, { "commit": "db3dfae1a2f662e69d535827703bcdbb04b8d72b", "tree": "d62cbe3875f5a39b8f9c326e02103d53d6fa7b5f", "parents": [ "5e223e06ee7c6d8f630041a0645ac90e39a42cc6" ], "author": { "name": "Bagas Sanjaya", "email": "bagasdotme@gmail.com", "time": "Fri Jun 13 09:38:57 2025 +0700" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Fri Jun 13 09:25:42 2025 -0600" }, "message": "Documentation: ublk: Separate UBLK_F_AUTO_BUF_REG fallback behavior sublists\n\nStephen Rothwell reports htmldocs warning on ublk docs:\n\nDocumentation/block/ublk.rst:414: ERROR: Unexpected indentation. [docutils]\n\nFix the warning by separating sublists of auto buffer registration\nfallback behavior from their appropriate parent list item.\n\nFixes: ff20c516485e (\"ublk: document auto buffer registration(UBLK_F_AUTO_BUF_REG)\")\nReported-by: Stephen Rothwell \u003csfr@canb.auug.org.au\u003e\nCloses: https://lore.kernel.org/linux-next/20250612132638.193de386@canb.auug.org.au/\nSigned-off-by: Bagas Sanjaya \u003cbagasdotme@gmail.com\u003e\nLink: https://lore.kernel.org/r/20250613023857.15971-1-bagasdotme@gmail.com\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "f9705d66fa7107fcd619083f7aae2afb0554a593", "tree": "4bb0858641aa719b023a8d4a8aaa3ab70be554f7", "parents": [ "19272b37aa4f83ca52bdf9c16d5d81bdd1354494" ], "author": { "name": "Jason Gunthorpe", "email": "jgg@nvidia.com", "time": "Tue Jun 03 16:14:45 2025 -0300" }, "committer": { "name": "Joerg Roedel", "email": "joerg.roedel@amd.com", "time": "Fri Jun 13 17:02:31 2025 +0200" }, "message": "iommu/tegra: Fix incorrect size calculation\n\nThis driver uses a mixture of ways to get the size of a PTE,\ntegra_smmu_set_pde() did it as sizeof(*pd) which became wrong when pd\nswitched to a struct tegra_pd.\n\nSwitch pd back to a u32* in tegra_smmu_set_pde() so the sizeof(*pd)\nreturns 4.\n\nFixes: 50568f87d1e2 (\"iommu/terga: Do not use struct page as the handle for as-\u003epd memory\")\nReported-by: Diogo Ivo \u003cdiogo.ivo@tecnico.ulisboa.pt\u003e\nCloses: https://lore.kernel.org/all/62e7f7fe-6200-4e4f-ad42-d58ad272baa6@tecnico.ulisboa.pt/\nSigned-off-by: Jason Gunthorpe \u003cjgg@nvidia.com\u003e\nAcked-by: Thierry Reding \u003ctreding@nvidia.com\u003e\nReviewed-by: Jerry Snitselaar \u003cjsnitsel@redhat.com\u003e\nTested-by: Diogo Ivo \u003cdiogo.ivo@tecnico.ulisboa.pt\u003e\nLink: https://lore.kernel.org/r/0-v1-da7b8b3d57eb+ce-iommu_terga_sizeof_jgg@nvidia.com\nSigned-off-by: Joerg Roedel \u003cjoerg.roedel@amd.com\u003e\n" }, { "commit": "5e223e06ee7c6d8f630041a0645ac90e39a42cc6", "tree": "38254089b2a8e0e1ec1cf316a95818c01a6d0c0d", "parents": [ "f826ec7966a63d48e16e0868af4e038bf9a1a3ae" ], "author": { "name": "Matthew Wilcox (Oracle)", "email": "willy@infradead.org", "time": "Thu Jun 12 15:42:53 2025 +0100" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Fri Jun 13 06:20:17 2025 -0600" }, "message": "block: Fix bvec_set_folio() for very large folios\n\nSimilarly to 26064d3e2b4d (\"block: fix adding folio to bio\"), if\nwe attempt to add a folio that is larger than 4GB, we\u0027ll silently\ntruncate the offset and len. Widen the parameters to size_t, assert\nthat the length is less than 4GB and set the first page that contains\nthe interesting data rather than the first page of the folio.\n\nFixes: 26db5ee15851 (block: add a bvec_set_folio helper)\nSigned-off-by: Matthew Wilcox (Oracle) \u003cwilly@infradead.org\u003e\nLink: https://lore.kernel.org/r/20250612144255.2850278-1-willy@infradead.org\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "f826ec7966a63d48e16e0868af4e038bf9a1a3ae", "tree": "319b61a8534bb101e46271c7effe1647985bb610", "parents": [ "961296e89dc3800e6a3abc3f5d5bb4192cf31e98" ], "author": { "name": "Matthew Wilcox (Oracle)", "email": "willy@infradead.org", "time": "Thu Jun 12 15:41:25 2025 +0100" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Fri Jun 13 06:19:34 2025 -0600" }, "message": "bio: Fix bio_first_folio() for SPARSEMEM without VMEMMAP\n\nIt is possible for physically contiguous folios to have discontiguous\nstruct pages if SPARSEMEM is enabled and SPARSEMEM_VMEMMAP is not.\nThis is correctly handled by folio_page_idx(), so remove this open-coded\nimplementation.\n\nFixes: 640d1930bef4 (block: Add bio_for_each_folio_all())\nSigned-off-by: Matthew Wilcox (Oracle) \u003cwilly@infradead.org\u003e\nLink: https://lore.kernel.org/r/20250612144126.2849931-1-willy@infradead.org\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "9f0ad43b158d07bc7144d219ceabdea36e28e392", "tree": "b175282a88f19e445c959285fee67e7b7b1b5c4f", "parents": [ "83f066fac3c231e58e9adf3b307e96fee172dfb3" ], "author": { "name": "Thangaraj Samynathan", "email": "thangaraj.s@microchip.com", "time": "Thu Jun 12 08:00:59 2025 +0530" }, "committer": { "name": "Mark Brown", "email": "broonie@kernel.org", "time": "Fri Jun 13 12:25:31 2025 +0100" }, "message": "spi: spi-pci1xxxx: Drop MSI-X usage as unsupported by DMA engine\n\nRemoves MSI-X from the interrupt request path, as the DMA engine used by\nthe SPI controller does not support MSI-X interrupts.\n\nSigned-off-by: Thangaraj Samynathan \u003cthangaraj.s@microchip.com\u003e\nLink: https://patch.msgid.link/20250612023059.71726-1-thangaraj.s@microchip.com\nSigned-off-by: Mark Brown \u003cbroonie@kernel.org\u003e\n" }, { "commit": "1364af9cb2c5716f1905113cc84ff77ddf16a22e", "tree": "b4ebc9a5eed7540fa1f52458077e66e505df3edf", "parents": [ "a24823d14b2d35909e1299d10c34d85dfbf23434", "afe382843717d44b24ef5014d57dcbaab75a4052" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jun 13 14:57:09 2025 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jun 13 14:57:09 2025 +1000" }, "message": "Merge tag \u0027drm-misc-fixes-2025-06-12\u0027 of https://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes\n\ndrm-misc-fixes for v6.16-rc2:\n- Fix infinite EPROBE_DEFER loop in vc4 probing.\n- Fix amdxdna firmware size.\n- mode fixes for meson.\n- Kconfig fix for st7171-i2c.\n- Fix -EBUSY WARN_ON_ONCE in dma-buf\n- Use dma_sync_sgtable_for_cpu in udmabuf.\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nFrom: Maarten Lankhorst \u003cmaarten.lankhorst@linux.intel.com\u003e\nLink: https://lore.kernel.org/r/62c06195-8bc1-4dae-8777-e86d94e4d9d9@linux.intel.com\n" }, { "commit": "bb666b7c27073b986b75699e51a7102910f58060", "tree": "bc19ea68f4c08f4b9f4b1514c3a4f4b36ba56b48", "parents": [ "66ac1a4d366d3faa95fcf6082b555f8d77f1e8db" ], "author": { "name": "Lorenzo Stoakes", "email": "lorenzo.stoakes@oracle.com", "time": "Mon Jun 09 17:57:49 2025 +0100" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Jun 12 21:39:02 2025 -0700" }, "message": "mm: add mmap_prepare() compatibility layer for nested file systems\n\nNested file systems, that is those which invoke call_mmap() within their\nown f_op-\u003emmap() handlers, may encounter underlying file systems which\nprovide the f_op-\u003emmap_prepare() hook introduced by commit c84bf6dd2b83\n(\"mm: introduce new .mmap_prepare() file callback\").\n\nWe have a chicken-and-egg scenario here - until all file systems are\nconverted to using .mmap_prepare(), we cannot convert these nested\nhandlers, as we can\u0027t call f_op-\u003emmap from an .mmap_prepare() hook.\n\nSo we have to do it the other way round - invoke the .mmap_prepare() hook\nfrom an .mmap() one.\n\nin order to do so, we need to convert VMA state into a struct vm_area_desc\ndescriptor, invoking the underlying file system\u0027s f_op-\u003emmap_prepare()\ncallback passing a pointer to this, and then setting VMA state accordingly\nand safely.\n\nThis patch achieves this via the compat_vma_mmap_prepare() function, which\nwe invoke from call_mmap() if f_op-\u003emmap_prepare() is specified in the\npassed in file pointer.\n\nWe place the fundamental logic into mm/vma.h where VMA manipulation\nbelongs. We also update the VMA userland tests to accommodate the\nchanges.\n\nThe compat_vma_mmap_prepare() function and its associated machinery is\ntemporary, and will be removed once the conversion of file systems is\ncomplete.\n\nWe carefully place this code so it can be used with CONFIG_MMU and also\nwith cutting edge nommu silicon.\n\n[akpm@linux-foundation.org: export compat_vma_mmap_prepare tp fix build]\n[lorenzo.stoakes@oracle.com: remove unused declarations]\n Link: https://lkml.kernel.org/r/ac3ae324-4c65-432a-8c6d-2af988b18ac8@lucifer.local\nLink: https://lkml.kernel.org/r/20250609165749.344976-1-lorenzo.stoakes@oracle.com\nFixes: c84bf6dd2b83 (\"mm: introduce new .mmap_prepare() file callback\").\nSigned-off-by: Lorenzo Stoakes \u003clorenzo.stoakes@oracle.com\u003e\nReported-by: Jann Horn \u003cjannh@google.com\u003e\nCloses: https://lore.kernel.org/linux-mm/CAG48ez04yOEVx1ekzOChARDDBZzAKwet8PEoPM4Ln3_rk91AzQ@mail.gmail.com/\nReviewed-by: Pedro Falcato \u003cpfalcato@suse.de\u003e\nReviewed-by: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: Christian Brauner \u003cbrauner@kernel.org\u003e\nCc: Jan Kara \u003cjack@suse.cz\u003e\nCc: Jann Horn \u003cjannh@google.com\u003e\nCc: Liam Howlett \u003cliam.howlett@oracle.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "a24823d14b2d35909e1299d10c34d85dfbf23434", "tree": "a3caa0de2c8e91d4ea9a0d961155677db97d2de2", "parents": [ "19272b37aa4f83ca52bdf9c16d5d81bdd1354494", "9c7632faad434c98f1f2cc06f3647a5a5d05ddbf" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jun 13 11:05:23 2025 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jun 13 11:05:28 2025 +1000" }, "message": "Merge tag \u0027drm-xe-fixes-2025-06-12\u0027 of https://gitlab.freedesktop.org/drm/xe/kernel into drm-fixes\n\nDriver Changes:\n- Fix regression disallowing 64K SVM migration (Maarten)\n- Use a bounce buffer for WA BB (Lucas)\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Thomas Hellstrom \u003cthomas.hellstrom@linux.intel.com\u003e\nLink: https://lore.kernel.org/r/aEsBQoh5Si3ouPgE@fedora\n" }, { "commit": "d080d3b54448501ddb0f9e1f85a8043253100f55", "tree": "6a1ba9466aa1dd3e2b34f28c9612f5cc93d4a09e", "parents": [ "27605c8c0f69e319df156b471974e4e223035378", "11fcf368506d347088e613edf6cd2604d70c454f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 12 12:32:09 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 12 12:32:09 2025 -0700" }, "message": "Merge tag \u0027bitmap-for-6.16-rc2\u0027 of https://github.com/norov/linux\n\nPull bitmap fix from Yury Norov:\n \"Fix for __GENMASK() and __GENMASK_ULL() in UAPI\"\n\n* tag \u0027bitmap-for-6.16-rc2\u0027 of https://github.com/norov/linux:\n uapi: bitops: use UAPI-safe variant of BITS_PER_LONG again\n" }, { "commit": "72dd7961a4bb4fa1fc456169a61dd12e68e50645", "tree": "798f77af2d54fafdc22fe8d15e7b071ed5be5314", "parents": [ "b64af6bcd3b0f3fc633d6a70adb0991737abfef4" ], "author": { "name": "Bharath SM", "email": "bharathsm.hsk@gmail.com", "time": "Wed Jun 11 16:59:02 2025 +0530" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Thu Jun 12 13:38:21 2025 -0500" }, "message": "smb: improve directory cache reuse for readdir operations\n\nCurrently, cached directory contents were not reused across subsequent\n\u0027ls\u0027 operations because the cache validity check relied on comparing\nthe ctx pointer, which changes with each readdir invocation. As a\nresult, the cached dir entries was not marked as valid and the cache was\nnot utilized for subsequent \u0027ls\u0027 operations.\n\nThis change uses the file pointer, which remains consistent across all\nreaddir calls for a given directory instance, to associate and validate\nthe cache. As a result, cached directory contents can now be\ncorrectly reused, improving performance for repeated directory listings.\n\nPerformance gains with local windows SMB server:\n\nWithout the patch and default actimeo\u003d1:\n 1000 directory enumeration operations on dir with 10k files took 135.0s\n\nWith this patch and actimeo\u003d0:\n 1000 directory enumeration operations on dir with 10k files took just 5.1s\n\nSigned-off-by: Bharath SM \u003cbharathsm@microsoft.com\u003e\nReviewed-by: Shyam Prasad N \u003csprasad@microsoft.com\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "b64af6bcd3b0f3fc633d6a70adb0991737abfef4", "tree": "e91dfccd3cbcd9dd65dd5f9a07a8fb50878d597e", "parents": [ "93310053663ba647e402ef67e4bb18ec06ff8dc4" ], "author": { "name": "Paulo Alcantara", "email": "pc@manguebit.org", "time": "Thu Jun 12 12:45:04 2025 -0300" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Thu Jun 12 12:42:48 2025 -0500" }, "message": "smb: client: fix perf regression with deferred closes\n\nCustomer reported that one of their applications started failing to\nopen files with STATUS_INSUFFICIENT_RESOURCES due to NetApp server\nhitting the maximum number of opens to same file that it would allow\nfor a single client connection.\n\nIt turned out the client was failing to reuse open handles with\ndeferred closes because matching -\u003ef_flags directly without masking\noff O_CREAT|O_EXCL|O_TRUNC bits first broke the comparision and then\nclient ended up with thousands of deferred closes to same file. Those\nbits are already satisfied on the original open, so no need to check\nthem against existing open handles.\n\nReproducer:\n\n #include \u003cstdio.h\u003e\n #include \u003cstdlib.h\u003e\n #include \u003cstring.h\u003e\n #include \u003cunistd.h\u003e\n #include \u003cfcntl.h\u003e\n #include \u003cpthread.h\u003e\n\n #define NR_THREADS 4\n #define NR_ITERATIONS 2500\n #define TEST_FILE \"/mnt/1/test/dir/foo\"\n\n static char buf[64];\n\n static void *worker(void *arg)\n {\n int i, j;\n int fd;\n\n for (i \u003d 0; i \u003c NR_ITERATIONS; i++) {\n fd \u003d open(TEST_FILE, O_WRONLY|O_CREAT|O_APPEND, 0666);\n for (j \u003d 0; j \u003c 16; j++)\n write(fd, buf, sizeof(buf));\n close(fd);\n }\n }\n\n int main(int argc, char *argv[])\n {\n pthread_t t[NR_THREADS];\n int fd;\n int i;\n\n fd \u003d open(TEST_FILE, O_WRONLY|O_CREAT|O_TRUNC, 0666);\n close(fd);\n memset(buf, \u0027a\u0027, sizeof(buf));\n for (i \u003d 0; i \u003c NR_THREADS; i++)\n pthread_create(\u0026t[i], NULL, worker, NULL);\n for (i \u003d 0; i \u003c NR_THREADS; i++)\n pthread_join(t[i], NULL);\n return 0;\n }\n\nBefore patch:\n\n$ mount.cifs //srv/share /mnt/1 -o ...\n$ mkdir -p /mnt/1/test/dir\n$ gcc repro.c \u0026\u0026 ./a.out\n...\nnumber of opens: 1391\n\nAfter patch:\n\n$ mount.cifs //srv/share /mnt/1 -o ...\n$ mkdir -p /mnt/1/test/dir\n$ gcc repro.c \u0026\u0026 ./a.out\n...\nnumber of opens: 1\n\nCc: linux-cifs@vger.kernel.org\nCc: David Howells \u003cdhowells@redhat.com\u003e\nCc: Jay Shin \u003cjaeshin@redhat.com\u003e\nCc: Pierguido Lambri \u003cplambri@redhat.com\u003e\nFixes: b8ea3b1ff544 (\"smb: enable reuse of deferred file handles for write operations\")\nAcked-by: Shyam Prasad N \u003csprasad@microsoft.com\u003e\nSigned-off-by: Paulo Alcantara (Red Hat) \u003cpc@manguebit.org\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "27605c8c0f69e319df156b471974e4e223035378", "tree": "3bdb1fd46320b450987de7de9d60a12937fc249c", "parents": [ "9cc7d5904bab74f54aad4948a04535c1f07c74d8", "d5705afbaca2f5b3fb8766391ca6c43105d229b2" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 12 09:50:36 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 12 09:50:36 2025 -0700" }, "message": "Merge tag \u0027net-6.16-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net\n\nPull networking fixes from Jakub Kicinski:\n \"Including fixes from bluetooth and wireless.\n\n Current release - regressions:\n\n - af_unix: allow passing cred for embryo without SO_PASSCRED/SO_PASSPIDFD\n\n Current release - new code bugs:\n\n - eth: airoha: correct enable mask for RX queues 16-31\n\n - veth: prevent NULL pointer dereference in veth_xdp_rcv when peer\n disappears under traffic\n\n - ipv6: move fib6_config_validate() to ip6_route_add(), prevent\n invalid routes\n\n Previous releases - regressions:\n\n - phy: phy_caps: don\u0027t skip better duplex match on non-exact match\n\n - dsa: b53: fix untagged traffic sent via cpu tagged with VID 0\n\n - Revert \"wifi: mwifiex: Fix HT40 bandwidth issue.\", it caused\n transient packet loss, exact reason not fully understood, yet\n\n Previous releases - always broken:\n\n - net: clear the dst when BPF is changing skb protocol (IPv4 \u003c\u003e IPv6)\n\n - sched: sfq: fix a potential crash on gso_skb handling\n\n - Bluetooth: intel: improve rx buffer posting to avoid causing issues\n in the firmware\n\n - eth: intel: i40e: make reset handling robust against multiple\n requests\n\n - eth: mlx5: ensure FW pages are always allocated on the local NUMA\n node, even when device is configure to \u0027serve\u0027 another node\n\n - wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850,\n prevent kernel crashes\n\n - wifi: ath11k: avoid burning CPU in ath11k_debugfs_fw_stats_request()\n for 3 sec if fw_stats_done is not set\"\n\n* tag \u0027net-6.16-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net: (70 commits)\n selftests: drv-net: rss_ctx: Add test for ntuple rules targeting default RSS context\n net: ethtool: Don\u0027t check if RSS context exists in case of context 0\n af_unix: Allow passing cred for embryo without SO_PASSCRED/SO_PASSPIDFD.\n ipv6: Move fib6_config_validate() to ip6_route_add().\n net: drv: netdevsim: don\u0027t napi_complete() from netpoll\n net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get()\n veth: prevent NULL pointer dereference in veth_xdp_rcv\n net_sched: remove qdisc_tree_flush_backlog()\n net_sched: ets: fix a race in ets_qdisc_change()\n net_sched: tbf: fix a race in tbf_change()\n net_sched: red: fix a race in __red_change()\n net_sched: prio: fix a race in prio_tune()\n net_sched: sch_sfq: reject invalid perturb period\n net: phy: phy_caps: Don\u0027t skip better duplex macth on non-exact match\n MAINTAINERS: Update Kuniyuki Iwashima\u0027s email address.\n selftests: net: add test case for NAT46 looping back dst\n net: clear the dst when changing skb protocol\n net/mlx5e: Fix number of lanes to UNKNOWN when using data_rate_oper\n net/mlx5e: Fix leak of Geneve TLV option object\n net/mlx5: HWS, make sure the uplink is the last destination\n ...\n" }, { "commit": "9c7632faad434c98f1f2cc06f3647a5a5d05ddbf", "tree": "a3caa0de2c8e91d4ea9a0d961155677db97d2de2", "parents": [ "d6fb4f01736a1d18cc981eb04fa2907a7121fc27" ], "author": { "name": "Lucas De Marchi", "email": "lucas.demarchi@intel.com", "time": "Wed Jun 04 08:03:05 2025 -0700" }, "committer": { "name": "Thomas Hellström", "email": "thomas.hellstrom@linux.intel.com", "time": "Thu Jun 12 18:09:50 2025 +0200" }, "message": "drm/xe/lrc: Use a temporary buffer for WA BB\n\nIn case the BO is in iomem, we can\u0027t simply take the vaddr and write to\nit. Instead, prepare a separate buffer that is later copied into io\nmemory. Right now it\u0027s just a few words that could be using\nxe_map_write32(), but the intention is to grow the WA BB for other\nuses.\n\nFixes: 617d824c5323 (\"drm/xe: Add WA BB to capture active context utilization\")\nCc: Umesh Nerlige Ramappa \u003cumesh.nerlige.ramappa@intel.com\u003e\nCc: Tvrtko Ursulin \u003ctvrtko.ursulin@igalia.com\u003e\nReviewed-by: Matthew Brost \u003cmatthew.brost@intel.com\u003e\nReviewed-by: Umesh Nerlige Ramappa \u003cumesh.nerlige.ramappa@intel.com\u003e\nLink: https://lore.kernel.org/r/20250604-wa-bb-fix-v1-1-0dfc5dafcef0@intel.com\nSigned-off-by: Lucas De Marchi \u003clucas.demarchi@intel.com\u003e\n(cherry picked from commit ef48715b2d3df17c060e23b9aa636af3d95652f8)\nSigned-off-by: Thomas Hellström \u003cthomas.hellstrom@linux.intel.com\u003e\n" }, { "commit": "9cc7d5904bab74f54aad4948a04535c1f07c74d8", "tree": "349945ef3a9370f892b02d8b9c8fc3ba81720e93", "parents": [ "3d853391c441965d30cc94d00d59e8bb2dd0668c", "5558f27a58459a4038ebb23bcb5bd40c1e345c57" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 12 08:21:13 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 12 08:21:13 2025 -0700" }, "message": "Merge tag \u0027pinctrl-v6.16-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl\n\nPull pin control fixes from Linus Walleij:\n\n - Add some missing pins on the Qualcomm QCM2290, along with a managed\n resources patch that make it clean and nice\n\n - Drop an unused function in the ST Micro driver\n\n - Drop bouncing MAINTAINER entry\n\n - Drop of_match_ptr() macro to rid compile warnings in the TB10x\n driver\n\n - Fix up calculation of pin numbers from base in the Sunxi driver\n\n* tag \u0027pinctrl-v6.16-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl:\n pinctrl: sunxi: dt: Consider pin base when calculating bank number from pin\n pinctrl: tb10x: Drop of_match_ptr for ID table\n pinctrl: MAINTAINERS: Drop bouncing Jianlong Huang\n pinctrl: st: Drop unused st_gpio_bank() function\n pinctrl: qcom: pinctrl-qcm2290: Add missing pins\n pinctrl: qcom: switch to devm_gpiochip_add_data()\n" }, { "commit": "3d853391c441965d30cc94d00d59e8bb2dd0668c", "tree": "1502b1a37f2faf70a9b50b4c882aebe1e4706a9a", "parents": [ "2c4a1f3fe03edab80db66688360685031802160a", "179e949719fe81219a3e23f1e716ac2d02eea845" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 12 08:17:56 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 12 08:17:56 2025 -0700" }, "message": "Merge tag \u0027arc-6.16-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vgupta/arc\n\nPull ARC fixes from Vineet Gupta:\n\n - arch_atomic64_cmpxchg relaxed variant [Jason]\n\n - use of inbuilt swap in stack unwinder [Yu-Chun Lin]\n\n - use of __ASSEMBLER__ in kernel headers [Thomas Huth]\n\n* tag \u0027arc-6.16-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vgupta/arc:\n ARC: Replace __ASSEMBLY__ with __ASSEMBLER__ in the non-uapi headers\n ARC: Replace __ASSEMBLY__ with __ASSEMBLER__ in uapi headers\n ARC: unwind: Use built-in sort swap to reduce code size and improve performance\n ARC: atomics: Implement arch_atomic64_cmpxchg using _relaxed\n" }, { "commit": "d5705afbaca2f5b3fb8766391ca6c43105d229b2", "tree": "599fabec6a7902ac5f955a435a008d5d48257a51", "parents": [ "613fd52ea75d70275fa67de0af5af2b5d65bed16", "f87586598fffac31afc1141471b789251b030a76" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 12 08:16:47 2025 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 12 08:16:47 2025 -0700" }, "message": "Merge tag \u0027wireless-2025-06-12\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless\n\nJohannes Berg says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nAnother quick round of updates:\n\n - revert mwifiex HT40 that was causing issues\n - many ath10k/ath11k/ath12k fixes\n - re-add some iwlwifi code I lost in a merge\n - use kfree_sensitive() on an error path in cfg80211\n\n* tag \u0027wireless-2025-06-12\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless:\n wifi: cfg80211: use kfree_sensitive() for connkeys cleanup\n wifi: iwlwifi: fix merge damage related to iwl_pci_resume\n Revert \"wifi: mwifiex: Fix HT40 bandwidth issue.\"\n wifi: ath12k: fix uaf in ath12k_core_init()\n wifi: ath12k: Fix hal_reo_cmd_status kernel-doc\n wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850\n wifi: ath11k: validate ath11k_crypto_mode on top of ath11k_core_qmi_firmware_ready\n wifi: ath11k: consistently use ath11k_mac_get_fw_stats()\n wifi: ath11k: move locking outside of ath11k_mac_get_fw_stats()\n wifi: ath11k: adjust unlock sequence in ath11k_update_stats_event()\n wifi: ath11k: move some firmware stats related functions outside of debugfs\n wifi: ath11k: don\u0027t wait when there is no vdev started\n wifi: ath11k: don\u0027t use static variables in ath11k_debugfs_fw_stats_process()\n wifi: ath11k: avoid burning CPU in ath11k_debugfs_fw_stats_request()\n wil6210: fix support for sparrow chipsets\n wifi: ath10k: Avoid vdev delete timeout when firmware is already down\n ath10k: snoc: fix unbalanced IRQ enable in crash recovery\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20250612082519.11447-3-johannes@sipsolutions.net\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "613fd52ea75d70275fa67de0af5af2b5d65bed16", "tree": "6db2c9fd8a5cbf848df1236a8e318e58edeeabdc", "parents": [ "d5441acae780c346c04213a62d3eb189216daab1", "56c5d291e88538621029e5c7c5f60540d37846a8" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 12 08:15:37 2025 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 12 08:15:38 2025 -0700" }, "message": "Merge branch \u0027fix-ntuple-rules-targeting-default-rss\u0027\n\nGal Pressman says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nFix ntuple rules targeting default RSS\n\nThis series addresses a regression in ethtool flow steering where rules\ntargeting the default RSS context (context 0) were incorrectly rejected.\n\nThe default RSS context always exists but is not stored in the rss_ctx\nxarray like additional contexts. The current validation logic was\nchecking for the existence of context 0 in this array, causing valid\nflow steering rules to be rejected.\n\nThis prevented configurations such as:\n- High priority rules directing specific traffic to the default context\n- Low priority catch-all rules directing remaining traffic to additional\n contexts\n\nPatch 1 fixes the validation logic to skip the existence check for\ncontext 0.\n\nPatch 2 adds a selftest that verifies this behavior.\n\nv3: https://lore.kernel.org/20250609120250.1630125-1-gal@nvidia.com\nv2: https://lore.kernel.org/20250225071348.509432-1-gal@nvidia.com\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20250612071958.1696361-1-gal@nvidia.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "56c5d291e88538621029e5c7c5f60540d37846a8", "tree": "6db2c9fd8a5cbf848df1236a8e318e58edeeabdc", "parents": [ "d78ebc772c7ceccf6e655ddb93099f49a1268af4" ], "author": { "name": "Gal Pressman", "email": "gal@nvidia.com", "time": "Thu Jun 12 10:19:58 2025 +0300" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 12 08:15:35 2025 -0700" }, "message": "selftests: drv-net: rss_ctx: Add test for ntuple rules targeting default RSS context\n\nAdd test_rss_default_context_rule() to verify that ntuple rules can\ncorrectly direct traffic to the default RSS context (context 0).\n\nThe test creates two ntuple rules with explicit location priorities:\n- A high-priority rule (loc 0) directing specific port traffic to\n context 0.\n- A low-priority rule (loc 1) directing all other TCP traffic to context\n 1.\n\nThis validates that:\n1. Rules targeting the default context function properly.\n2. Traffic steering works as expected when mixing default and\n additional RSS contexts.\n\nThe test was written by AI, and reviewed by humans.\n\nReviewed-by: Nimrod Oren \u003cnoren@nvidia.com\u003e\nSigned-off-by: Gal Pressman \u003cgal@nvidia.com\u003e\nLink: https://patch.msgid.link/20250612071958.1696361-3-gal@nvidia.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "d78ebc772c7ceccf6e655ddb93099f49a1268af4", "tree": "4da3aa4cae9d37eaf3ae9efa806da68d4f4cf311", "parents": [ "d5441acae780c346c04213a62d3eb189216daab1" ], "author": { "name": "Gal Pressman", "email": "gal@nvidia.com", "time": "Thu Jun 12 10:19:57 2025 +0300" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 12 08:15:35 2025 -0700" }, "message": "net: ethtool: Don\u0027t check if RSS context exists in case of context 0\n\nContext 0 (default context) always exists, there is no need to check\nwhether it exists or not when adding a flow steering rule.\n\nThe existing check fails when creating a flow steering rule for context\n0 as it is not stored in the rss_ctx xarray.\n\nFor example:\n$ ethtool --config-ntuple eth2 flow-type tcp4 dst-ip 194.237.147.23 dst-port 19983 context 0 loc 618\nrmgr: Cannot insert RX class rule: Invalid argument\nCannot insert classification rule\n\nAn example usecase for this could be:\n- A high-priority rule (loc 0) directing specific port traffic to\n context 0.\n- A low-priority rule (loc 1) directing all other TCP traffic to context\n 1.\n\nThis is a user-visible regression that was caught in our testing\nenvironment, it was not reported by a user yet.\n\nFixes: de7f7582dff2 (\"net: ethtool: prevent flow steering to RSS contexts which don\u0027t exist\")\nReviewed-by: Tariq Toukan \u003ctariqt@nvidia.com\u003e\nReviewed-by: Nimrod Oren \u003cnoren@nvidia.com\u003e\nSigned-off-by: Gal Pressman \u003cgal@nvidia.com\u003e\nReviewed-by: Joe Damato \u003cjdamato@fastly.com\u003e\nReviewed-by: Edward Cree \u003cecree.xilinx@gmail.com\u003e\nLink: https://patch.msgid.link/20250612071958.1696361-2-gal@nvidia.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "d5441acae780c346c04213a62d3eb189216daab1", "tree": "94b077d8d9b2ac7a495ae8704d0d1b4fb2e80b47", "parents": [ "43fb2b30eea7cfc40214484935b026ec29838a91", "7dd38ba4acbea9875b4ee061e20a26413e39d9f4" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 12 08:13:47 2025 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 12 08:13:48 2025 -0700" }, "message": "Merge tag \u0027for-net-2025-06-11\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth\n\nLuiz Augusto von Dentz says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nbluetooth pull request for net:\n\n - eir: Fix NULL pointer deference on eir_get_service_data\n - eir: Fix possible crashes on eir_create_adv_data\n - hci_sync: Fix broadcast/PA when using an existing instance\n - ISO: Fix using BT_SK_PA_SYNC to detect BIS sockets\n - ISO: Fix not using bc_sid as advertisement SID\n - MGMT: Fix sparse errors\n\n* tag \u0027for-net-2025-06-11\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth:\n Bluetooth: MGMT: Fix sparse errors\n Bluetooth: ISO: Fix not using bc_sid as advertisement SID\n Bluetooth: ISO: Fix using BT_SK_PA_SYNC to detect BIS sockets\n Bluetooth: eir: Fix possible crashes on eir_create_adv_data\n Bluetooth: hci_sync: Fix broadcast/PA when using an existing instance\n Bluetooth: Fix NULL pointer deference on eir_get_service_data\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20250611204944.1559356-1-luiz.dentz@gmail.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "43fb2b30eea7cfc40214484935b026ec29838a91", "tree": "54b31f4aa6315d9bfea2f50786829dddfdb55c80", "parents": [ "b3979e3d2fc92bf1a2da614fc383b75b9859ef58" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@google.com", "time": "Wed Jun 11 13:27:35 2025 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 12 08:13:06 2025 -0700" }, "message": "af_unix: Allow passing cred for embryo without SO_PASSCRED/SO_PASSPIDFD.\n\nBefore the cited commit, the kernel unconditionally embedded SCM\ncredentials to skb for embryo sockets even when both the sender\nand listener disabled SO_PASSCRED and SO_PASSPIDFD.\n\nNow, the credentials are added to skb only when configured by the\nsender or the listener.\n\nHowever, as reported in the link below, it caused a regression for\nsome programs that assume credentials are included in every skb,\nbut sometimes not now.\n\nThe only problematic scenario would be that a socket starts listening\nbefore setting the option. Then, there will be 2 types of non-small\nrace window, where a client can send skb without credentials, which\nthe peer receives as an \"invalid\" message (and aborts the connection\nit seems ?):\n\n Client Server\n ------ ------\n s1.listen() \u003c-- No SO_PASS{CRED,PIDFD}\n s2.connect()\n s2.send() \u003c-- w/o cred\n s1.setsockopt(SO_PASS{CRED,PIDFD})\n s2.send() \u003c-- w/ cred\n\nor\n\n Client Server\n ------ ------\n s1.listen() \u003c-- No SO_PASS{CRED,PIDFD}\n s2.connect()\n s2.send() \u003c-- w/o cred\n s3, _ \u003d s1.accept() \u003c-- Inherit cred options\n s2.send() \u003c-- w/o cred but not set yet\n\n s3.setsockopt(SO_PASS{CRED,PIDFD})\n s2.send() \u003c-- w/ cred\n\nIt\u0027s unfortunate that buggy programs depend on the behaviour,\nbut let\u0027s restore the previous behaviour.\n\nFixes: 3f84d577b79d (\"af_unix: Inherit sk_flags at connect().\")\nReported-by: Jacek Łuczak \u003cdifrost.kernel@gmail.com\u003e\nCloses: https://lore.kernel.org/all/68d38b0b-1666-4974-85d4-15575789c8d4@gmail.com/\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@google.com\u003e\nTested-by: Christian Heusel \u003cchristian@heusel.eu\u003e\nTested-by: André Almeida \u003candrealmeid@igalia.com\u003e\nTested-by: Jacek Łuczak \u003cdifrost.kernel@gmail.com\u003e\nLink: https://patch.msgid.link/20250611202758.3075858-1-kuni1840@gmail.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "b3979e3d2fc92bf1a2da614fc383b75b9859ef58", "tree": "ca568adab1b86de11ee6c80caf6733751e185eb0", "parents": [ "1264971017b4d7141352a7fe29021bdfce5d885d" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@google.com", "time": "Wed Jun 11 12:35:02 2025 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 12 08:12:35 2025 -0700" }, "message": "ipv6: Move fib6_config_validate() to ip6_route_add().\n\nsyzkaller created an IPv6 route from a malformed packet, which has\na prefix len \u003e 128, triggering the splat below. [0]\n\nThis is a similar issue fixed by commit 586ceac9acb7 (\"ipv6: Restore\nfib6_config validation for SIOCADDRT.\").\n\nThe cited commit removed fib6_config validation from some callers\nof ip6_add_route().\n\nLet\u0027s move the validation back to ip6_route_add() and\nip6_route_multipath_add().\n\n[0]:\nUBSAN: array-index-out-of-bounds in ./include/net/ipv6.h:616:34\nindex 20 is out of range for type \u0027__u8 [16]\u0027\nCPU: 1 UID: 0 PID: 7444 Comm: syz.0.708 Not tainted 6.16.0-rc1-syzkaller-g19272b37aa4f #0 PREEMPT\nHardware name: riscv-virtio,qemu (DT)\nCall Trace:\n[\u003cffffffff80078a80\u003e] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:132\n[\u003cffffffff8000327a\u003e] show_stack+0x30/0x3c arch/riscv/kernel/stacktrace.c:138\n[\u003cffffffff80061012\u003e] __dump_stack lib/dump_stack.c:94 [inline]\n[\u003cffffffff80061012\u003e] dump_stack_lvl+0x12e/0x1a6 lib/dump_stack.c:120\n[\u003cffffffff800610a6\u003e] dump_stack+0x1c/0x24 lib/dump_stack.c:129\n[\u003cffffffff8001c0ea\u003e] ubsan_epilogue+0x14/0x46 lib/ubsan.c:233\n[\u003cffffffff819ba290\u003e] __ubsan_handle_out_of_bounds+0xf6/0xf8 lib/ubsan.c:455\n[\u003cffffffff85b363a4\u003e] ipv6_addr_prefix include/net/ipv6.h:616 [inline]\n[\u003cffffffff85b363a4\u003e] ip6_route_info_create+0x8f8/0x96e net/ipv6/route.c:3793\n[\u003cffffffff85b635da\u003e] ip6_route_add+0x2a/0x1aa net/ipv6/route.c:3889\n[\u003cffffffff85b02e08\u003e] addrconf_prefix_route+0x2c4/0x4e8 net/ipv6/addrconf.c:2487\n[\u003cffffffff85b23bb2\u003e] addrconf_prefix_rcv+0x1720/0x1e62 net/ipv6/addrconf.c:2878\n[\u003cffffffff85b92664\u003e] ndisc_router_discovery+0x1a06/0x3504 net/ipv6/ndisc.c:1570\n[\u003cffffffff85b99038\u003e] ndisc_rcv+0x500/0x600 net/ipv6/ndisc.c:1874\n[\u003cffffffff85bc2c18\u003e] icmpv6_rcv+0x145e/0x1e0a net/ipv6/icmp.c:988\n[\u003cffffffff85af6798\u003e] ip6_protocol_deliver_rcu+0x18a/0x1976 net/ipv6/ip6_input.c:436\n[\u003cffffffff85af8078\u003e] ip6_input_finish+0xf4/0x174 net/ipv6/ip6_input.c:480\n[\u003cffffffff85af8262\u003e] NF_HOOK include/linux/netfilter.h:317 [inline]\n[\u003cffffffff85af8262\u003e] NF_HOOK include/linux/netfilter.h:311 [inline]\n[\u003cffffffff85af8262\u003e] ip6_input+0x16a/0x70c net/ipv6/ip6_input.c:491\n[\u003cffffffff85af8dcc\u003e] ip6_mc_input+0x5c8/0x1268 net/ipv6/ip6_input.c:588\n[\u003cffffffff85af6112\u003e] dst_input include/net/dst.h:469 [inline]\n[\u003cffffffff85af6112\u003e] ip6_rcv_finish net/ipv6/ip6_input.c:79 [inline]\n[\u003cffffffff85af6112\u003e] NF_HOOK include/linux/netfilter.h:317 [inline]\n[\u003cffffffff85af6112\u003e] NF_HOOK include/linux/netfilter.h:311 [inline]\n[\u003cffffffff85af6112\u003e] ipv6_rcv+0x5ae/0x6e0 net/ipv6/ip6_input.c:309\n[\u003cffffffff85087e84\u003e] __netif_receive_skb_one_core+0x106/0x16e net/core/dev.c:5977\n[\u003cffffffff85088104\u003e] __netif_receive_skb+0x2c/0x144 net/core/dev.c:6090\n[\u003cffffffff850883c6\u003e] netif_receive_skb_internal net/core/dev.c:6176 [inline]\n[\u003cffffffff850883c6\u003e] netif_receive_skb+0x1aa/0xbf2 net/core/dev.c:6235\n[\u003cffffffff8328656e\u003e] tun_rx_batched.isra.0+0x430/0x686 drivers/net/tun.c:1485\n[\u003cffffffff8329ed3a\u003e] tun_get_user+0x2952/0x3d6c drivers/net/tun.c:1938\n[\u003cffffffff832a21e0\u003e] tun_chr_write_iter+0xc4/0x21c drivers/net/tun.c:1984\n[\u003cffffffff80b9b9ae\u003e] new_sync_write fs/read_write.c:593 [inline]\n[\u003cffffffff80b9b9ae\u003e] vfs_write+0x56c/0xa9a fs/read_write.c:686\n[\u003cffffffff80b9c2be\u003e] ksys_write+0x126/0x228 fs/read_write.c:738\n[\u003cffffffff80b9c42e\u003e] __do_sys_write fs/read_write.c:749 [inline]\n[\u003cffffffff80b9c42e\u003e] __se_sys_write fs/read_write.c:746 [inline]\n[\u003cffffffff80b9c42e\u003e] __riscv_sys_write+0x6e/0x94 fs/read_write.c:746\n[\u003cffffffff80076912\u003e] syscall_handler+0x94/0x118 arch/riscv/include/asm/syscall.h:112\n[\u003cffffffff8637e31e\u003e] do_trap_ecall_u+0x396/0x530 arch/riscv/kernel/traps.c:341\n[\u003cffffffff863a69e2\u003e] handle_exception+0x146/0x152 arch/riscv/kernel/entry.S:197\n\nFixes: fa76c1674f2e (\"ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config().\")\nReported-by: syzbot+4c2358694722d304c44e@syzkaller.appspotmail.com\nCloses: https://lore.kernel.org/netdev/6849b8c3.a00a0220.1eb5f5.00f0.GAE@google.com/\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@google.com\u003e\nReviewed-by: Eric Dumazet \u003cedumazet@google.com\u003e\nLink: https://patch.msgid.link/20250611193551.2999991-1-kuni1840@gmail.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "1264971017b4d7141352a7fe29021bdfce5d885d", "tree": "982623c1fc9c27731f81ce453a43bdce623b3eee", "parents": [ "1619bdf4389c829f16af5c7d5b4fa5f1673614d7" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Jun 11 10:46:43 2025 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 12 08:11:52 2025 -0700" }, "message": "net: drv: netdevsim: don\u0027t napi_complete() from netpoll\n\nnetdevsim supports netpoll. Make sure we don\u0027t call napi_complete()\nfrom it, since it may not be scheduled. Breno reports hitting a\nwarning in napi_complete_done():\n\nWARNING: CPU: 14 PID: 104 at net/core/dev.c:6592 napi_complete_done+0x2cc/0x560\n __napi_poll+0x2d8/0x3a0\n handle_softirqs+0x1fe/0x710\n\nThis is presumably after netpoll stole the SCHED bit prematurely.\n\nReported-by: Breno Leitao \u003cleitao@debian.org\u003e\nFixes: 3762ec05a9fb (\"netdevsim: add NAPI support\")\nTested-by: Breno Leitao \u003cleitao@debian.org\u003e\nLink: https://patch.msgid.link/20250611174643.2769263-1-kuba@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "1619bdf4389c829f16af5c7d5b4fa5f1673614d7", "tree": "ea5881ac77e142e57c0554bb8b1bd30ccb4fcf5e", "parents": [ "9337c54401a5bb6ac3c9f6c71dd2a9130cfba82e" ], "author": { "name": "Dan Carpenter", "email": "dan.carpenter@linaro.org", "time": "Wed Jun 11 16:14:32 2025 +0300" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 12 08:10:07 2025 -0700" }, "message": "net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get()\n\nCheck for if ida_alloc() or rhashtable_lookup_get_insert_fast() fails.\n\nFixes: 17e0accac577 (\"net/mlx5: HWS, support complex matchers\")\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@linaro.org\u003e\nReviewed-by: Yevgeny Kliteynik \u003ckliteyn@nvidia.com\u003e\nLink: https://patch.msgid.link/aEmBONjyiF6z5yCV@stanley.mountain\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "9337c54401a5bb6ac3c9f6c71dd2a9130cfba82e", "tree": "e8e037d9be70415c3c1111c1d7bcbadd5a23127e", "parents": [ "a844b0c864a28e43affa3f1a048414b7122def40" ], "author": { "name": "Jesper Dangaard Brouer", "email": "hawk@kernel.org", "time": "Wed Jun 11 14:40:04 2025 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 12 08:08:32 2025 -0700" }, "message": "veth: prevent NULL pointer dereference in veth_xdp_rcv\n\nThe veth peer device is RCU protected, but when the peer device gets\ndeleted (veth_dellink) then the pointer is assigned NULL (via\nRCU_INIT_POINTER).\n\nThis patch adds a necessary NULL check in veth_xdp_rcv when accessing\nthe veth peer net_device.\n\nThis fixes a bug introduced in commit dc82a33297fc (\"veth: apply qdisc\nbackpressure on full ptr_ring to reduce TX drops\"). The bug is a race\nand only triggers when having inflight packets on a veth that is being\ndeleted.\n\nReported-by: Ihor Solodrai \u003cihor.solodrai@linux.dev\u003e\nCloses: https://lore.kernel.org/all/fecfcad0-7a16-42b8-bff2-66ee83a6e5c4@linux.dev/\nReported-by: syzbot+c4c7bf27f6b0c4bd97fe@syzkaller.appspotmail.com\nCloses: https://lore.kernel.org/all/683da55e.a00a0220.d8eae.0052.GAE@google.com/\nFixes: dc82a33297fc (\"veth: apply qdisc backpressure on full ptr_ring to reduce TX drops\")\nSigned-off-by: Jesper Dangaard Brouer \u003chawk@kernel.org\u003e\nAcked-by: Ihor Solodrai \u003cihor.solodrai@linux.dev\u003e\nLink: https://patch.msgid.link/174964557873.519608.10855046105237280978.stgit@firesoul\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "a844b0c864a28e43affa3f1a048414b7122def40", "tree": "a6165aa8a0efc5c088197762988e235f749ee277", "parents": [ "7ca52541c05c832d32b112274f81a985101f9ba8", "adcaa890c7a4a91a422168d8fb629183fff07b2f" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 12 08:05:53 2025 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 12 08:05:54 2025 -0700" }, "message": "Merge branch \u0027net_sched-no-longer-use-qdisc_tree_flush_backlog\u0027\n\nEric Dumazet says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nnet_sched: no longer use qdisc_tree_flush_backlog()\n\nThis series is based on a report from Gerrard Tai.\n\nEssentially, all users of qdisc_tree_flush_backlog() are racy.\n\nWe must instead use qdisc_purge_queue().\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20250611111515.1983366-1-edumazet@google.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "adcaa890c7a4a91a422168d8fb629183fff07b2f", "tree": "a6165aa8a0efc5c088197762988e235f749ee277", "parents": [ "d92adacdd8c2960be856e0b82acc5b7c5395fddb" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Wed Jun 11 11:15:15 2025 +0000" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 12 08:05:50 2025 -0700" }, "message": "net_sched: remove qdisc_tree_flush_backlog()\n\nThis function is no longer used after the four prior fixes.\n\nGiven all prior uses were wrong, it seems better to remove it.\n\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nLink: https://patch.msgid.link/20250611111515.1983366-6-edumazet@google.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "d92adacdd8c2960be856e0b82acc5b7c5395fddb", "tree": "47f8d3e61bd87a9abe67ef44ad33a9ea3a87b2a3", "parents": [ "43eb466041216d25dedaef1c383ad7bd89929cbc" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Wed Jun 11 11:15:14 2025 +0000" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 12 08:05:50 2025 -0700" }, "message": "net_sched: ets: fix a race in ets_qdisc_change()\n\nGerrard Tai reported a race condition in ETS, whenever SFQ perturb timer\nfires at the wrong time.\n\nThe race is as follows:\n\nCPU 0 CPU 1\n[1]: lock root\n[2]: qdisc_tree_flush_backlog()\n[3]: unlock root\n |\n | [5]: lock root\n | [6]: rehash\n | [7]: qdisc_tree_reduce_backlog()\n |\n[4]: qdisc_put()\n\nThis can be abused to underflow a parent\u0027s qlen.\n\nCalling qdisc_purge_queue() instead of qdisc_tree_flush_backlog()\nshould fix the race, because all packets will be purged from the qdisc\nbefore releasing the lock.\n\nFixes: b05972f01e7d (\"net: sched: tbf: don\u0027t call qdisc_put() while holding tree lock\")\nReported-by: Gerrard Tai \u003cgerrard.tai@starlabs.sg\u003e\nSuggested-by: Gerrard Tai \u003cgerrard.tai@starlabs.sg\u003e\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nLink: https://patch.msgid.link/20250611111515.1983366-5-edumazet@google.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "43eb466041216d25dedaef1c383ad7bd89929cbc", "tree": "23e2b2fa7716bbc39e9f19585d2143f489b6a73f", "parents": [ "85a3e0ede38450ea3053b8c45d28cf55208409b8" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Wed Jun 11 11:15:13 2025 +0000" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 12 08:05:50 2025 -0700" }, "message": "net_sched: tbf: fix a race in tbf_change()\n\nGerrard Tai reported a race condition in TBF, whenever SFQ perturb timer\nfires at the wrong time.\n\nThe race is as follows:\n\nCPU 0 CPU 1\n[1]: lock root\n[2]: qdisc_tree_flush_backlog()\n[3]: unlock root\n |\n | [5]: lock root\n | [6]: rehash\n | [7]: qdisc_tree_reduce_backlog()\n |\n[4]: qdisc_put()\n\nThis can be abused to underflow a parent\u0027s qlen.\n\nCalling qdisc_purge_queue() instead of qdisc_tree_flush_backlog()\nshould fix the race, because all packets will be purged from the qdisc\nbefore releasing the lock.\n\nFixes: b05972f01e7d (\"net: sched: tbf: don\u0027t call qdisc_put() while holding tree lock\")\nReported-by: Gerrard Tai \u003cgerrard.tai@starlabs.sg\u003e\nSuggested-by: Gerrard Tai \u003cgerrard.tai@starlabs.sg\u003e\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nCc: Zhengchao Shao \u003cshaozhengchao@huawei.com\u003e\nLink: https://patch.msgid.link/20250611111515.1983366-4-edumazet@google.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "85a3e0ede38450ea3053b8c45d28cf55208409b8", "tree": "888a3280cf551a7d946eedd5bcb547b191e68cee", "parents": [ "d35acc1be3480505b5931f17e4ea9b7617fea4d3" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Wed Jun 11 11:15:12 2025 +0000" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 12 08:05:49 2025 -0700" }, "message": "net_sched: red: fix a race in __red_change()\n\nGerrard Tai reported a race condition in RED, whenever SFQ perturb timer\nfires at the wrong time.\n\nThe race is as follows:\n\nCPU 0 CPU 1\n[1]: lock root\n[2]: qdisc_tree_flush_backlog()\n[3]: unlock root\n |\n | [5]: lock root\n | [6]: rehash\n | [7]: qdisc_tree_reduce_backlog()\n |\n[4]: qdisc_put()\n\nThis can be abused to underflow a parent\u0027s qlen.\n\nCalling qdisc_purge_queue() instead of qdisc_tree_flush_backlog()\nshould fix the race, because all packets will be purged from the qdisc\nbefore releasing the lock.\n\nFixes: 0c8d13ac9607 (\"net: sched: red: delay destroying child qdisc on replace\")\nReported-by: Gerrard Tai \u003cgerrard.tai@starlabs.sg\u003e\nSuggested-by: Gerrard Tai \u003cgerrard.tai@starlabs.sg\u003e\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nLink: https://patch.msgid.link/20250611111515.1983366-3-edumazet@google.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "d35acc1be3480505b5931f17e4ea9b7617fea4d3", "tree": "d44cad1a7efeca952eafc00c513ad15c50758e29", "parents": [ "7ca52541c05c832d32b112274f81a985101f9ba8" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Wed Jun 11 11:15:11 2025 +0000" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 12 08:05:49 2025 -0700" }, "message": "net_sched: prio: fix a race in prio_tune()\n\nGerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer\nfires at the wrong time.\n\nThe race is as follows:\n\nCPU 0 CPU 1\n[1]: lock root\n[2]: qdisc_tree_flush_backlog()\n[3]: unlock root\n |\n | [5]: lock root\n | [6]: rehash\n | [7]: qdisc_tree_reduce_backlog()\n |\n[4]: qdisc_put()\n\nThis can be abused to underflow a parent\u0027s qlen.\n\nCalling qdisc_purge_queue() instead of qdisc_tree_flush_backlog()\nshould fix the race, because all packets will be purged from the qdisc\nbefore releasing the lock.\n\nFixes: 7b8e0b6e6599 (\"net: sched: prio: delay destroying child qdiscs on change\")\nReported-by: Gerrard Tai \u003cgerrard.tai@starlabs.sg\u003e\nSuggested-by: Gerrard Tai \u003cgerrard.tai@starlabs.sg\u003e\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nLink: https://patch.msgid.link/20250611111515.1983366-2-edumazet@google.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "7ca52541c05c832d32b112274f81a985101f9ba8", "tree": "35c607f64f4d8096cda7eec0a87ccd4f1ac92434", "parents": [ "d4e6cb324dcc952618fec6b25aa3fc7bfc2750b4" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Wed Jun 11 08:35:01 2025 +0000" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 12 08:03:08 2025 -0700" }, "message": "net_sched: sch_sfq: reject invalid perturb period\n\nGerrard Tai reported that SFQ perturb_period has no range check yet,\nand this can be used to trigger a race condition fixed in a separate patch.\n\nWe want to make sure ctl-\u003eperturb_period * HZ will not overflow\nand is positive.\n\nTested:\n\ntc qd add dev lo root sfq perturb -10 # negative value : error\nError: sch_sfq: invalid perturb period.\n\ntc qd add dev lo root sfq perturb 1000000000 # too big : error\nError: sch_sfq: invalid perturb period.\n\ntc qd add dev lo root sfq perturb 2000000 # acceptable value\ntc -s -d qd sh dev lo\nqdisc sfq 8005: root refcnt 2 limit 127p quantum 64Kb depth 127 flows 128 divisor 1024 perturb 2000000sec\n Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)\n backlog 0b 0p requeues 0\n\nFixes: 1da177e4c3f4 (\"Linux-2.6.12-rc2\")\nReported-by: Gerrard Tai \u003cgerrard.tai@starlabs.sg\u003e\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nCc: stable@vger.kernel.org\nLink: https://patch.msgid.link/20250611083501.1810459-1-edumazet@google.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "d4e6cb324dcc952618fec6b25aa3fc7bfc2750b4", "tree": "5c8934d36976db891d242bd83cf7f6cf4b407af0", "parents": [ "27cea0e419d2f9dc6f51bbce5a44c70bc3774b9a" ], "author": { "name": "Maxime Chevallier", "email": "maxime.chevallier@bootlin.com", "time": "Fri Jun 06 11:43:20 2025 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 12 08:00:53 2025 -0700" }, "message": "net: phy: phy_caps: Don\u0027t skip better duplex macth on non-exact match\n\nWhen performing a non-exact phy_caps lookup, we are looking for a\nsupported mode that matches as closely as possible the passed speed/duplex.\n\nBlamed patch broke that logic by returning a match too early in case\nthe caller asks for half-duplex, as a full-duplex linkmode may match\nfirst, and returned as a non-exact match without even trying to mach on\nhalf-duplex modes.\n\nReported-by: Jijie Shao \u003cshaojijie@huawei.com\u003e\nCloses: https://lore.kernel.org/netdev/20250603102500.4ec743cf@fedora/T/#m22ed60ca635c67dc7d9cbb47e8995b2beb5c1576\nTested-by: Jijie Shao \u003cshaojijie@huawei.com\u003e\nReviewed-by: Larysa Zaremba \u003clarysa.zaremba@intel.com\u003e\nFixes: fc81e257d19f (\"net: phy: phy_caps: Allow looking-up link caps based on speed and duplex\")\nSigned-off-by: Maxime Chevallier \u003cmaxime.chevallier@bootlin.com\u003e\nLink: https://patch.msgid.link/20250606094321.483602-1-maxime.chevallier@bootlin.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "c538f400fae22725580842deb2bef546701b64bd", "tree": "99abc87d444307a7060fd281078a45746cd1f3d3", "parents": [ "ac0b8b327a5677dc6fecdf353d808161525b1ff0" ], "author": { "name": "Keith Busch", "email": "kbusch@kernel.org", "time": "Wed Jun 11 13:53:43 2025 -0700" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Jun 12 08:17:09 2025 -0600" }, "message": "io_uring: consistently use rcu semantics with sqpoll thread\n\nThe sqpoll thread is dereferenced with rcu read protection in one place,\nso it needs to be annotated as an __rcu type, and should consistently\nuse rcu helpers for access and assignment to make sparse happy.\n\nSince most of the accesses occur under the sqd-\u003elock, we can use\nrcu_dereference_protected() without declaring an rcu read section.\nProvide a simple helper to get the thread from a locked context.\n\nFixes: ac0b8b327a5677d (\"io_uring: fix use-after-free of sq-\u003ethread in __io_uring_show_fdinfo()\")\nSigned-off-by: Keith Busch \u003ckbusch@kernel.org\u003e\nLink: https://lore.kernel.org/r/20250611205343.1821117-1-kbusch@meta.com\n[axboe: fold in fix for register.c]\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "332d6a94ce80efae2e6b38e01a46e92230577354", "tree": "ca697ecc8168ed4d9ca9315ac08ed530ac204c61", "parents": [ "19272b37aa4f83ca52bdf9c16d5d81bdd1354494", "c7f005f70d22cd5613cac30bf6d34867189e36a9" ], "author": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Thu Jun 12 13:23:56 2025 +0200" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Thu Jun 12 13:23:56 2025 +0200" }, "message": "Merge tag \u0027cpufreq-arm-fixes-6.16-rc\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vireshk/pm\n\nMerge CPUFreq fixes for 6.16-rc from Viresh Kumar:\n\n\"- Implement CpuId rust abstraction and use it to fix doctest failure\n (Viresh Kumar).\n - Minor cleanups in the `# Safety` sections for cpufreq abstractions\n (Viresh Kumar).\"\n\n* tag \u0027cpufreq-arm-fixes-6.16-rc\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vireshk/pm:\n rust: cpu: Add CpuId::current() to retrieve current CPU ID\n rust: Use CpuId in place of raw CPU numbers\n rust: cpu: Introduce CpuId abstraction\n cpufreq: Convert `/// SAFETY` lines to `# Safety` sections\n" }, { "commit": "66ac1a4d366d3faa95fcf6082b555f8d77f1e8db", "tree": "a5d49963b29f1eb45d82c66e73cc6a5b3763eee8", "parents": [ "02fb36505c61c35d5fd879f5a66a97935dbcb2ee" ], "author": { "name": "Huacai Chen", "email": "chenhuacai@loongson.cn", "time": "Sun Jun 08 22:12:35 2025 +0800" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Jun 11 22:42:36 2025 -0700" }, "message": "init: fix build warnings about export.h\n\nAfter commit a934a57a42f64a4 (\"scripts/misc-check: check missing #include\n\u003clinux/export.h\u003e when W\u003d1\") and 7d95680d64ac8e836c (\"scripts/misc-check:\ncheck unnecessary #include \u003clinux/export.h\u003e when W\u003d1\"), we get some build\nwarnings with W\u003d1:\n\ninit/main.c: warning: EXPORT_SYMBOL() is used, but #include \u003clinux/export.h\u003e is missing\ninit/initramfs.c: warning: EXPORT_SYMBOL() is used, but #include \u003clinux/export.h\u003e is missing\n\nSo fix these build warnings for the init code.\n\nLink: https://lkml.kernel.org/r/20250608141235.155206-1-chenhuacai@loongson.cn\nFixes: a934a57a42f6 (\"scripts/misc-check: check missing #include \u003clinux/export.h\u003e when W\u003d1\")\nSigned-off-by: Huacai Chen \u003cchenhuacai@loongson.cn\u003e\nReviewed-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: Christian Brauner \u003cbrauner@kernel.org\u003e\nCc: Jan Kara \u003cjack@suse.cz\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "02fb36505c61c35d5fd879f5a66a97935dbcb2ee", "tree": "029a15dcc5d64bb7352768562f465e069a6e57bd", "parents": [ "50695153d7ddde3b1696dbf0085be0033bf3ddb3" ], "author": { "name": "Barry Song", "email": "baohua@kernel.org", "time": "Mon Jun 09 12:24:42 2025 +1200" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Jun 11 22:42:36 2025 -0700" }, "message": "MAINTAINERS: add Barry as a THP reviewer\n\nI have been actively contributing to mTHP and reviewing related patches\nfor an extended period, and I would like to continue supporting patch\nreviews.\n\nLink: https://lkml.kernel.org/r/20250609002442.1856-1-21cnbao@gmail.com\nSigned-off-by: Barry Song \u003cbaohua@kernel.org\u003e\nAcked-by: Zi Yan \u003cziy@nvidia.com\u003e\nAcked-by: Baolin Wang \u003cbaolin.wang@linux.alibaba.com\u003e\nAcked-by: Dev Jain \u003cdev.jain@arm.com\u003e\nAcked-by: Lorenzo Stoakes \u003clorenzo.stoakes@oracle.com\u003e\nReviewed-by: Ryan Roberts \u003cryan.roberts@arm.com\u003e\nCc: David Hildenbrand \u003cdavid@redhat.com\u003e\nCc: Liam R. Howlett \u003cLiam.Howlett@oracle.com\u003e\nCc: Nico Pache \u003cnpache@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "50695153d7ddde3b1696dbf0085be0033bf3ddb3", "tree": "a698a261d85c01acb5067b778a0ace02a5ab86b9", "parents": [ "383c4613c67c26e90e8eebb72e3083457d02033f" ], "author": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Sat Jun 07 17:43:18 2025 -0700" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Jun 11 22:42:36 2025 -0700" }, "message": "drivers/rapidio/rio_cm.c: prevent possible heap overwrite\n\nIn\n\nriocm_cdev_ioctl(RIO_CM_CHAN_SEND)\n -\u003e cm_chan_msg_send()\n -\u003e riocm_ch_send()\n\ncm_chan_msg_send() checks that userspace didn\u0027t send too much data but\nriocm_ch_send() failed to check that userspace sent sufficient data. The\nresult is that riocm_ch_send() can write to fields in the rio_ch_chan_hdr\nwhich were outside the bounds of the space which cm_chan_msg_send()\nallocated.\n\nAddress this by teaching riocm_ch_send() to check that the entire\nrio_ch_chan_hdr was copied in from userspace.\n\nReported-by: maher azz \u003cmaherazz04@gmail.com\u003e\nCc: Matt Porter \u003cmporter@kernel.crashing.org\u003e\nCc: Alexandre Bounine \u003calex.bou9@gmail.com\u003e\nCc: Linus Torvalds \u003ctorvalds@linuxfoundation.org\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "383c4613c67c26e90e8eebb72e3083457d02033f", "tree": "72d7a64a154380b2d51e58772defca4256a233ff", "parents": [ "0cf4b1687a187ba9247c71721d8b064634eda1f7" ], "author": { "name": "Ryan Roberts", "email": "ryan.roberts@arm.com", "time": "Fri Jun 06 10:28:07 2025 +0100" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Jun 11 22:42:35 2025 -0700" }, "message": "mm: close theoretical race where stale TLB entries could linger\n\nCommit 3ea277194daa (\"mm, mprotect: flush TLB if potentially racing with a\nparallel reclaim leaving stale TLB entries\") described a theoretical race\nas such:\n\n\n\"\"\"\nNadav Amit identified a theoretical race between page reclaim and mprotect\ndue to TLB flushes being batched outside of the PTL being held.\n\nHe described the race as follows:\n\n\tCPU0 CPU1\n\t---- ----\n\t\t\t\t\tuser accesses memory using RW PTE\n\t\t\t\t\t[PTE now cached in TLB]\n\ttry_to_unmap_one()\n\t\u003d\u003d\u003e ptep_get_and_clear()\n\t\u003d\u003d\u003e set_tlb_ubc_flush_pending()\n\t\t\t\t\tmprotect(addr, PROT_READ)\n\t\t\t\t\t\u003d\u003d\u003e change_pte_range()\n\t\t\t\t\t\u003d\u003d\u003e [ PTE non-present - no flush ]\n\n\t\t\t\t\tuser writes using cached RW PTE\n\t...\n\n\ttry_to_unmap_flush()\n\nThe same type of race exists for reads when protecting for PROT_NONE and\nalso exists for operations that can leave an old TLB entry behind such as\nmunmap, mremap and madvise.\n\"\"\"\n\nThe solution was to introduce flush_tlb_batched_pending() and call it\nunder the PTL from mprotect/madvise/munmap/mremap to complete any pending\ntlb flushes.\n\nHowever, while madvise_free_pte_range() and\nmadvise_cold_or_pageout_pte_range() were both retro-fitted to call\nflush_tlb_batched_pending() immediately after initially acquiring the PTL,\nthey both temporarily release the PTL to split a large folio if they\nstumble upon one. In this case, where re-acquiring the PTL\nflush_tlb_batched_pending() must be called again, but it previously was\nnot. Let\u0027s fix that.\n\nThere are 2 Fixes: tags here: the first is the commit that fixed\nmadvise_free_pte_range(). The second is the commit that added\nmadvise_cold_or_pageout_pte_range(), which looks like it copy/pasted the\nfaulty pattern from madvise_free_pte_range().\n\nThis is a theoretical bug discovered during code review.\n\nLink: https://lkml.kernel.org/r/20250606092809.4194056-1-ryan.roberts@arm.com\nFixes: 3ea277194daa (\"mm, mprotect: flush TLB if potentially racing with a parallel reclaim leaving stale TLB entries\")\nFixes: 9c276cc65a58 (\"mm: introduce MADV_COLD\")\nSigned-off-by: Ryan Roberts \u003cryan.roberts@arm.com\u003e\nReviewed-by: Jann Horn \u003cjannh@google.com\u003e\nAcked-by: David Hildenbrand \u003cdavid@redhat.com\u003e\nCc: Liam Howlett \u003cliam.howlett@oracle.com\u003e\nCc: Lorenzo Stoakes \u003clorenzo.stoakes@oracle.com\u003e\nCc: Mel Gorman \u003cmgorman \u003cmgorman@suse.de\u003e\nCc: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "0cf4b1687a187ba9247c71721d8b064634eda1f7", "tree": "3f1c049f4deb6b1ca1e8a81752911681ca1a4087", "parents": [ "1b8e4091ffb4655c761354eb33f41b618e809427" ], "author": { "name": "Lorenzo Stoakes", "email": "lorenzo.stoakes@oracle.com", "time": "Fri Jun 06 13:50:32 2025 +0100" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Jun 11 22:42:35 2025 -0700" }, "message": "mm/vma: reset VMA iterator on commit_merge() OOM failure\n\nWhile an OOM failure in commit_merge() isn\u0027t really feasible due to the\nallocation which might fail (a maple tree pre-allocation) being \u0027too small\nto fail\u0027, we do need to handle this case correctly regardless.\n\nIn vma_merge_existing_range(), we can theoretically encounter failures\nwhich result in an OOM error in two ways - firstly dup_anon_vma() might\nfail with an OOM error, and secondly commit_merge() failing, ultimately,\nto pre-allocate a maple tree node.\n\nThe abort logic for dup_anon_vma() resets the VMA iterator to the initial\nrange, ensuring that any logic looping on this iterator will correctly\nproceed to the next VMA.\n\nHowever the commit_merge() abort logic does not do the same thing. This\nresulted in a syzbot report occurring because mlockall() iterates through\nVMAs, is tolerant of errors, but ended up with an incorrect previous VMA\nbeing specified due to incorrect iterator state.\n\nWhile making this change, it became apparent we are duplicating logic -\nthe logic introduced in commit 41e6ddcaa0f1 (\"mm/vma: add give_up_on_oom\noption on modify/merge, use in uffd release\") duplicates the\nvmg-\u003egive_up_on_oom check in both abort branches.\n\nAdditionally, we observe that we can perform the anon_dup check safely on\ndup_anon_vma() failure, as this will not be modified should this call\nfail.\n\nFinally, we need to reset the iterator in both cases, so now we can simply\nuse the exact same code to abort for both.\n\nWe remove the VM_WARN_ON(err !\u003d -ENOMEM) as it would be silly for this to\nbe otherwise and it allows us to implement the abort check more neatly.\n\nLink: https://lkml.kernel.org/r/20250606125032.164249-1-lorenzo.stoakes@oracle.com\nFixes: 47b16d0462a4 (\"mm: abort vma_modify() on merge out of memory failure\")\nSigned-off-by: Lorenzo Stoakes \u003clorenzo.stoakes@oracle.com\u003e\nReported-by: syzbot+d16409ea9ecc16ed261a@syzkaller.appspotmail.com\nCloses: https://lore.kernel.org/linux-mm/6842cc67.a00a0220.29ac89.003b.GAE@google.com/\nReviewed-by: Pedro Falcato \u003cpfalcato@suse.de\u003e\nReviewed-by: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nReviewed-by: Liam R. Howlett \u003cLiam.Howlett@oracle.com\u003e\nCc: Jann Horn \u003cjannh@google.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "1b8e4091ffb4655c761354eb33f41b618e809427", "tree": "a16fd58e3a55e7a8a960c7d273786479b75915a1", "parents": [ "331843c845d15413e9d89fd91cdcfa6912e291c3" ], "author": { "name": "wangfushuai", "email": "wangfushuai@baidu.com", "time": "Sat Jun 07 23:36:14 2025 +0800" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Jun 11 22:42:35 2025 -0700" }, "message": "docs: proc: update VmFlags documentation in smaps\n\nRemove outdated VM_DENYWRITE(\"dw\") reference and add missing\nVM_LOCKONFAULT(\"lf\") and VM_UFFD_MINOR(\"ui\") flags.\n\n[akpm@linux-foundation.org: add \"dp\" (VM_DROPPABLE), per Tal]\nLink: https://lkml.kernel.org/r/20250607153614.81914-1-wangfushuai@baidu.com\nSigned-off-by: wangfushuai \u003cwangfushuai@baidu.com\u003e\nCc: Andrii Nakryiko \u003candrii@kernel.org\u003e\nCc: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nCc: David Hildenbrand \u003cdavid@redhat.com\u003e\nCc: Jonathan Corbet \u003ccorbet@lwn.net\u003e\nCc: Mariano Pache \u003cnpache@redhat.com\u003e\nCc: xu xin \u003cxu.xin16@zte.com.cn\u003e\nCc: Tal Zussman \u003ctz2294@columbia.edu\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "331843c845d15413e9d89fd91cdcfa6912e291c3", "tree": "6c527ea2610a75f056e6a52c6d6d1126b20fe680", "parents": [ "b1a529bdb9641392b4f5fc91545598793c0b3b96" ], "author": { "name": "Randy Dunlap", "email": "rdunlap@infradead.org", "time": "Wed Jun 04 17:23:37 2025 -0700" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Jun 11 22:42:35 2025 -0700" }, "message": "scatterlist: fix extraneous \u0027@\u0027-sign kernel-doc notation\n\nUsing \"@argname@\" in kernel-doc produces \"argname****\" (with \"argname\" in\nbold) in the generated html output, so use the expected kernel-doc\nnotation of just \"@argname\" instead.\n\n\"Fixes:\" lines are added in case Matthew\u0027s patch [1] is backported.\n\nLink: https://lkml.kernel.org/r/20250605002337.2842659-1-rdunlap@infradead.org\nLink: https://lore.kernel.org/linux-doc/3bc4e779-7a79-42c1-8867-024f643a22fc@infradead.org/T/#m5d2bd9d21fb34f297aa4e7db069f09bc27b89007 [1]\nFixes: 0db9299f48eb (\"SG: Move functions to lib/scatterlist.c and add sg chaining allocator helpers\")\nFixes: 8d1d4b538bb1 (\"scatterlist: inline sg_next()\")\nFixes: 18dabf473e15 (\"Change table chaining layout\")\nSigned-off-by: Randy Dunlap \u003crdunlap@infradead.org\u003e\nReviewed-by: Matthew Wilcox (Oracle) \u003cwilly@infradead.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "b1a529bdb9641392b4f5fc91545598793c0b3b96", "tree": "495e117f0827b7479831e05803ea36d9bc55fd11", "parents": [ "19272b37aa4f83ca52bdf9c16d5d81bdd1354494" ], "author": { "name": "Mark Brown", "email": "broonie@kernel.org", "time": "Thu Jun 05 22:34:31 2025 +0100" }, "committer": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Jun 11 22:42:34 2025 -0700" }, "message": "selftests/mm: skip failed memfd setups in gup_longterm\n\nUnlike the other cases gup_longterm\u0027s memfd tests previously skipped the\ntest when failing to set up the file descriptor to test. Restore this\nbehavior to avoid hitting failures when hugetlb isn\u0027t configured.\n\nLink: https://lkml.kernel.org/r/20250605-selftest-mm-gup-longterm-tweaks-v1-1-2fae34b05958@kernel.org\nFixes: 66bce7afbaca (\"selftests/mm: fix test result reporting in gup_longterm\")\nSigned-off-by: Mark Brown \u003cbroonie@kernel.org\u003e\nReported-by: Lorenzo Stoakes \u003clorenzo.stoakes@oracle.com\u003e\nCloses: https://lkml.kernel.org/r/a76fc252-0fe3-4d4b-a9a1-4a2895c2680d@lucifer.local\nReviewed-by: Lorenzo Stoakes \u003clorenzo.stoakes@oracle.com\u003e\nTested-by: Lorenzo Stoakes \u003clorenzo.stoakes@oracle.com\u003e\nAcked-by: David Hildenbrand \u003cdavid@redhat.com\u003e\nCc: Shuah Khan \u003cshuah@kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\n" }, { "commit": "c7f005f70d22cd5613cac30bf6d34867189e36a9", "tree": "ca697ecc8168ed4d9ca9315ac08ed530ac204c61", "parents": [ "33db8c97b4cfa0328054fb755dfbcd6e7f3c7a9d" ], "author": { "name": "Viresh Kumar", "email": "viresh.kumar@linaro.org", "time": "Mon Jun 09 16:44:16 2025 +0530" }, "committer": { "name": "Viresh Kumar", "email": "viresh.kumar@linaro.org", "time": "Thu Jun 12 10:31:28 2025 +0530" }, "message": "rust: cpu: Add CpuId::current() to retrieve current CPU ID\n\nIntroduce `CpuId::current()`, a constructor that wraps the C function\n`raw_smp_processor_id()` to retrieve the current CPU identifier without\nguaranteeing stability.\n\nThis function should be used only when the caller can ensure that\nthe CPU ID won\u0027t change unexpectedly due to preemption or migration.\n\nSuggested-by: Boqun Feng \u003cboqun.feng@gmail.com\u003e\nSigned-off-by: Viresh Kumar \u003cviresh.kumar@linaro.org\u003e\nReviewed-by: Boqun Feng \u003cboqun.feng@gmail.com\u003e\n" }, { "commit": "33db8c97b4cfa0328054fb755dfbcd6e7f3c7a9d", "tree": "3db65f245ab9adc5b35895cae803528edefd43a6", "parents": [ "ebf2e500e06f707654572bc7d8bc569a8caa51aa" ], "author": { "name": "Viresh Kumar", "email": "viresh.kumar@linaro.org", "time": "Mon Jun 09 14:26:54 2025 +0530" }, "committer": { "name": "Viresh Kumar", "email": "viresh.kumar@linaro.org", "time": "Thu Jun 12 10:31:28 2025 +0530" }, "message": "rust: Use CpuId in place of raw CPU numbers\n\nUse the newly defined `CpuId` abstraction instead of raw CPU numbers.\n\nThis also fixes a doctest failure for configurations where `nr_cpu_ids \u003c\n4`.\n\nThe C `cpumask_{set|clear}_cpu()` APIs emit a warning when given an\ninvalid CPU number — but only if `CONFIG_DEBUG_PER_CPU_MAPS\u003dy` is set.\n\nMeanwhile, `cpumask_weight()` only considers CPUs up to `nr_cpu_ids`,\nwhich can cause inconsistencies: a CPU number greater than `nr_cpu_ids`\nmay be set in the mask, yet the weight calculation won\u0027t reflect it.\n\nThis leads to doctest failures when `nr_cpu_ids \u003c 4`, as the test tries\nto set CPUs 2 and 3:\n\n rust_doctest_kernel_cpumask_rs_0.location: rust/kernel/cpumask.rs:180\n rust_doctest_kernel_cpumask_rs_0: ASSERTION FAILED at rust/kernel/cpumask.rs:190\n\nFixes: 8961b8cb3099 (\"rust: cpumask: Add initial abstractions\")\nReported-by: Miguel Ojeda \u003cojeda@kernel.org\u003e\nCloses: https://lore.kernel.org/rust-for-linux/CANiq72k3ozKkLMinTLQwvkyg9K\u003dBeRxs1oYZSKhJHY-veEyZdg@mail.gmail.com/\nReported-by: Andreas Hindborg \u003ca.hindborg@kernel.org\u003e\nCloses: https://lore.kernel.org/all/87qzzy3ric.fsf@kernel.org/\nSuggested-by: Boqun Feng \u003cboqun.feng@gmail.com\u003e\nSigned-off-by: Viresh Kumar \u003cviresh.kumar@linaro.org\u003e\nReviewed-by: Boqun Feng \u003cboqun.feng@gmail.com\u003e\n" }, { "commit": "8046d29dde17002523f94d3e6e0ebe486ce52166", "tree": "8fae8cdb87a817126365595643df883f16b5e979", "parents": [ "aa2024c01a9afba6728b362626f868811ca872ee" ], "author": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Thu Jun 12 00:47:44 2025 -0400" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Thu Jun 12 00:51:42 2025 -0400" }, "message": "KVM: x86/mmu: Reject direct bits in gpa passed to KVM_PRE_FAULT_MEMORY\n\nOnly let userspace pass the same addresses that were used in KVM_SET_USER_MEMORY_REGION\n(or KVM_SET_USER_MEMORY_REGION2); gpas in the the upper half of the address space\nare an implementation detail of TDX and KVM.\n\nExtracted from a patch by Sean Christopherson \u003cseanjc@google.com\u003e.\n\nSigned-off-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\n" }, { "commit": "aa2024c01a9afba6728b362626f868811ca872ee", "tree": "b6f667cde3395a97721995715e73f8226e873b86", "parents": [ "179a8427fcbffe36ccfed5e138d7c9b6180caff9" ], "author": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Tue Jun 10 20:10:18 2025 -0400" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Thu Jun 12 00:43:39 2025 -0400" }, "message": "KVM: x86/mmu: Embed direct bits into gpa for KVM_PRE_FAULT_MEMORY\n\nBug[*] reported for TDX case when enabling KVM_PRE_FAULT_MEMORY in QEMU.\n\nIt turns out that @gpa passed to kvm_mmu_do_page_fault() doesn\u0027t have\nshared bit set when the memory attribute of it is shared, and it leads\nto wrong root in tdp_mmu_get_root_for_fault().\n\nFix it by embedding the direct bits in the gpa that is passed to\nkvm_tdp_map_page(), when the memory of the gpa is not private.\n\n[*] https://lore.kernel.org/qemu-devel/4a757796-11c2-47f1-ae0d-335626e818fd@intel.com/\n\nReported-by: Xiaoyao Li \u003cxiaoyao.li@intel.com\u003e\nCloses: https://lore.kernel.org/qemu-devel/4a757796-11c2-47f1-ae0d-335626e818fd@intel.com/\nSigned-off-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\nSigned-off-by: Xiaoyao Li \u003cxiaoyao.li@intel.com\u003e\nMessage-ID: \u003c20250611001018.2179964-1-xiaoyao.li@intel.com\u003e\nSigned-off-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\n" }, { "commit": "aef22f6fe7a630d536f9eaa0a7a2ed0f90ea369e", "tree": "882a2c277ea48fb4ce575b9f1d7e63b1ffe429e1", "parents": [ "cd1124244be30fd3e87da9186508aab371e9307d" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Tue Jun 10 22:32:14 2025 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 23:25:41 2025 -0400" }, "message": "bcachefs: Don\u0027t trace should_be_locked unless changing\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "cd1124244be30fd3e87da9186508aab371e9307d", "tree": "33997ed5a97678c40f38932712b2378ab31116c6", "parents": [ "b68baf9a87330148d3ad074e48503a4e9c5c3929" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Sun Jun 08 12:35:20 2025 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 23:24:21 2025 -0400" }, "message": "bcachefs: Ensure that snapshot creation propagates has_case_insensitive\n\nWe normally can\u0027t create a new directory with the case-insensitive\noption already set - except when we\u0027re creating a snapshot.\n\nAnd if casefolding is enabled filesystem wide, we should still set it\neven though not strictly required, for consistency.\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "b68baf9a87330148d3ad074e48503a4e9c5c3929", "tree": "04da6429957d45792cae87d63664cb0fb5ec02e4", "parents": [ "205da7c026739d965e605d39001049c7b6728e87" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 15:57:48 2025 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 23:24:21 2025 -0400" }, "message": "bcachefs: Print devices we\u0027re mounting on multi device filesystems\n\nPreviously, we only ever logged the filesystem UUID.\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "205da7c026739d965e605d39001049c7b6728e87", "tree": "af8507f9cbf587a17021008a7a614a5d9bdeb698", "parents": [ "625c494db95624f09f5e7b81b64d4da34e45bd2a" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Sun Jun 08 11:31:23 2025 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 23:24:20 2025 -0400" }, "message": "bcachefs: Don\u0027t trust sb-\u003enr_devices in members_to_text()\n\nWe have to be able to print superblock sections even if they fail to\nvalidate (for debugging), so we have to calculate the number of entries\nfrom the field size.\n\nReported-by: syzbot+5138f00559ffb3cb3610@syzkaller.appspotmail.com\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "625c494db95624f09f5e7b81b64d4da34e45bd2a", "tree": "52ffc175e134dfb8a208dc561bf0c9ad10a837ac", "parents": [ "e82b3a63a9a91cc5c585efb3e28f32100f24e3e1" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 13:32:58 2025 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 23:21:30 2025 -0400" }, "message": "bcachefs: Fix version checks in validate_bset()\n\nIt seems btree node scan picked up a partially overwritten btree node,\nand corrected the \"bset version older than sb version_min\" error -\nresulting in an invalid superblock with a bad version_min field.\n\nDon\u0027t run this check at all when we\u0027re in btree node scan, and when we\ndo run it, do something saner if the bset version is totally crazy.\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "e82b3a63a9a91cc5c585efb3e28f32100f24e3e1", "tree": "d39c501123601ef9c883b6973ad3c041b3f00a36", "parents": [ "c3dd25319c1818e067f41f41127f935f153498e6" ], "author": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Tue Jun 10 11:24:04 2025 +0200" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 23:21:30 2025 -0400" }, "message": "bcachefs: ioctl: avoid stack overflow warning\n\nMultiple ioctl handlers individually use a lot of stack space, and clang chooses\nto inline them into the bch2_fs_ioctl() function, blowing through the warning\nlimit:\n\nfs/bcachefs/chardev.c:655:6: error: stack frame size (1032) exceeds limit (1024) in \u0027bch2_fs_ioctl\u0027 [-Werror,-Wframe-larger-than]\n 655 | long bch2_fs_ioctl(struct bch_fs *c, unsigned cmd, void __user *arg)\n\nBy marking the largest two of them as noinline_for_stack, no indidual code path\nends up using this much, which avoids the warning and reduces the possible\ntotal stack usage in the ioctl handler.\n\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "c3dd25319c1818e067f41f41127f935f153498e6", "tree": "8c9d841ec91492e1d909621c5dc8cd415ddb90f7", "parents": [ "9e48f574e55731106b26dc33d8b0be1adedf3f20" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Mon Jun 09 17:28:00 2025 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 23:21:30 2025 -0400" }, "message": "bcachefs: Don\u0027t pass trans to fsck_err() in gc_accounting_done\n\nfsck_err() can return a transaction restart if passed a transaction\nobject - this has always been true when it has to drop locks to prompt\nfor user input, but we\u0027re seeing this more now that we\u0027re logging the\nerror being corrected in the journal.\n\ngc_accounting_done() doesn\u0027t call fsck_err() from an actual commit loop,\nand it doesn\u0027t need to be holding btree locks when it calls fsck_err(),\nso the easy fix here for the unhandled transaction restart is to just\nnot pass it the transaction object. We\u0027ll miss out on the fancy new\nlogging, but that\u0027s ok.\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "9e48f574e55731106b26dc33d8b0be1adedf3f20", "tree": "80ebee72ed56d3065df97ba2ca4574473a8143f8", "parents": [ "54aacfe3976893ee04582a0bd61967bbee5a7e04" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Mon Jun 09 17:30:40 2025 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 23:21:30 2025 -0400" }, "message": "bcachefs: Fix leak in bch2_fs_recovery() error path\n\nFix a small leak of the superblock \u0027clean\u0027 section.\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "54aacfe3976893ee04582a0bd61967bbee5a7e04", "tree": "ce1369882da924fec421e812df462672505e75f3", "parents": [ "082c74411491f8b0d31465fc104b8342e66c4056" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Sun Jun 08 12:17:02 2025 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 23:21:30 2025 -0400" }, "message": "bcachefs: Fix rcu_pending for PREEMPT_RT\n\nPREEMPT_RT redefines how standard spinlocks work, so local_irq_save() +\nspin_lock() is no longer equivalent to spin_lock_irqsave(). Fortunately,\nwe don\u0027t strictly need to do it that way.\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "082c74411491f8b0d31465fc104b8342e66c4056", "tree": "9719aaa2f4a1807e6891e6aa9ade1440180ff9bf", "parents": [ "757601ef853359fe2d57d75c00b5045f62efc608" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Sun Jun 08 11:58:59 2025 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 23:21:30 2025 -0400" }, "message": "bcachefs: Fix downgrade_table_extra()\n\nFix a UAF: we were calling darray_make_room() and retaining a pointer to\nthe old buffer.\n\nAnd fix an UBSAN warning: struct bch_sb_field_downgrade_entry uses\n__counted_by, so set dst-\u003enr_errors before assigning to the array entry.\n\nReported-by: syzbot+14c52d86ddbd89bea13e@syzkaller.appspotmail.com\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "757601ef853359fe2d57d75c00b5045f62efc608", "tree": "7417a3f730cf0ce103ddbdc20c3666758a6fd914", "parents": [ "f946ce0be45e75801583a5371fccf7466961d9d0" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Sun Jun 08 11:40:00 2025 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 23:21:30 2025 -0400" }, "message": "bcachefs: Don\u0027t put rhashtable on stack\n\nObject debugging generally needs special provisions for putting said\nobjects on the stack, which rhashtable does not have.\n\nReported-by: syzbot+bcc38a9556d0324c2ec2@syzkaller.appspotmail.com\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "f946ce0be45e75801583a5371fccf7466961d9d0", "tree": "1c5ffd52b0ffdbee372911a38584ccdd2aaa4513", "parents": [ "0acb385ec19c99b213d28a309a941790758c53a8" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Sat Jun 07 20:18:16 2025 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 23:21:30 2025 -0400" }, "message": "bcachefs: Make sure opts.read_only gets propagated back to VFS\n\nIf we think we\u0027re read-only but the VFS doesn\u0027t, fun will ensue.\n\nAnd now that we know we have to be able to do this safely, just make\nnochanges imply ro.\n\nReported-by: syzbot+a7d6ceaba099cc21dee4@syzkaller.appspotmail.com\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "0acb385ec19c99b213d28a309a941790758c53a8", "tree": "1986801130ff4d0ded5ce5e8761cd7eab0b0a8c6", "parents": [ "3315113af178041ab474723804e1322cee7d0a97" ], "author": { "name": "Alan Huang", "email": "mmpgouride@gmail.com", "time": "Tue May 20 15:34:28 2025 +0800" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 23:21:30 2025 -0400" }, "message": "bcachefs: Fix possible console lock involved deadlock\n\nLink: https://lore.kernel.org/all/6822ab02.050a0220.f2294.00cb.GAE@google.com/T/\nReported-by: syzbot+2c3ef91c9523c3d1a25c@syzkaller.appspotmail.com\nSigned-off-by: Alan Huang \u003cmmpgouride@gmail.com\u003e\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "3315113af178041ab474723804e1322cee7d0a97", "tree": "26b1891b7ccd54aa4023de07bb9b23a3d00ecfd4", "parents": [ "263561649ee5875a922f4358e96d3deb17a91021" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Sat Jun 07 18:56:28 2025 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 23:21:30 2025 -0400" }, "message": "bcachefs: mark more errors autofix\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "263561649ee5875a922f4358e96d3deb17a91021", "tree": "08862e63f0336f97bed877fa75c6b4511072ddca", "parents": [ "dd22844f48a71a414bd7e08cd4a9a5847974c07e" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Sat Jun 07 14:27:35 2025 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 23:21:30 2025 -0400" }, "message": "bcachefs: Don\u0027t persistently run scan_for_btree_nodes\n\nbch2_btree_lost_data() gets called on btree node read error, but the\nerror might be transient.\n\nbtree_node_scan is expensive, and there\u0027s no need to run it persistently\n(marking it in the superblock as required to run) - check_topology\nwill run it if required, via bch2_get_scanned_nodes().\n\nRunning it non-persistently is fine, to avoid check_topology having to\nrewind recovery to run it.\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "dd22844f48a71a414bd7e08cd4a9a5847974c07e", "tree": "c20e7272f3dae7ebf6e3d1239d9ed567c96ff6e4", "parents": [ "b47a82ff4772ea9d7091b85ef5f34dc78c866a02" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Sat Jun 07 14:22:24 2025 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 23:21:30 2025 -0400" }, "message": "bcachefs: Read error message now prints if self healing\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "b47a82ff4772ea9d7091b85ef5f34dc78c866a02", "tree": "34eba1ccaeed900cff35ea40cf65bce24477f734", "parents": [ "7b0e6b198e4ef39ec89285d953778c5a3a04d390" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Sat Jun 07 12:56:33 2025 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 23:21:30 2025 -0400" }, "message": "bcachefs: Only run \u0027increase_depth\u0027 for keys from btree node csan\n\nbch2_btree_increase_depth() was originally for disaster recovery, to get\nsome data back from the journal when a btree root was bad.\n\nWe don\u0027t need it for that purpose anymore; on bad btree root we\u0027ll\nlaunch btree node scan and reconstruct all the interior nodes.\n\nIf there\u0027s a key in the journal for a depth that doesn\u0027t exists, and\nit\u0027s not from check_topology/btree node scan, we should just ignore it.\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "7b0e6b198e4ef39ec89285d953778c5a3a04d390", "tree": "9515a377507490494615998beb99ed6f469412d7", "parents": [ "af5b88618a38371545251ad92ce42bc4bfa1142a" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Sat Jun 07 12:56:15 2025 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 23:21:30 2025 -0400" }, "message": "bcachefs: Mark need_discard_freespace_key_bad autofix\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "af5b88618a38371545251ad92ce42bc4bfa1142a", "tree": "cab03f293c6c24662e8550b9bf4b185a90615ba4", "parents": [ "b76cce12700b8bb8d59b9ff444504b94db96dd4b" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Sat Jun 07 12:01:22 2025 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 23:21:30 2025 -0400" }, "message": "bcachefs: Update /dev/disk/by-uuid on device add\n\nInvalidate pagecache after we write the new superblock and send a\nuevent.\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "b76cce12700b8bb8d59b9ff444504b94db96dd4b", "tree": "af934aaf9968cd1af5928a1bcc42b9e696a275ab", "parents": [ "c7e351be7aa4e176223f0128e4d1b959ffad9598" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Thu Jun 05 20:53:01 2025 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 23:21:30 2025 -0400" }, "message": "bcachefs: Add more flags to btree nodes for rewrite reason\n\nIt seems excessive forced btree node rewrites can cause interior btree\nupdates to become wedged during recovery, before we\u0027re using the write\nbuffer for backpointer updates.\n\nAdd more flags so we can determine where these are coming from.\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "c7e351be7aa4e176223f0128e4d1b959ffad9598", "tree": "930d9c352f91d60e2f2f21924e4f6decfb9763ad", "parents": [ "b43f724927686387589b98eb762e1a4109bb1bac" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Thu Jun 05 19:00:11 2025 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 23:21:29 2025 -0400" }, "message": "bcachefs: Add range being updated to btree_update_to_text()\n\nWe had a deadlock during recovery where interior btree updates became\nwedged and all open_buckets were consumed; start adding more\nintrospection.\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "b43f724927686387589b98eb762e1a4109bb1bac", "tree": "271005db6d994b8eebe14472c80fdfbb223959c3", "parents": [ "47fe65b105f29ef22f463c17ab8a4c0eeb741045" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Sun Jun 01 13:07:31 2025 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 23:21:29 2025 -0400" }, "message": "bcachefs: Log fsck errors in the journal\n\nLog the specific error being corrected in the journal when we\u0027re\nrepairing, this helps greatly with \u0027bcachefs list_journal\u0027 analysis.\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "47fe65b105f29ef22f463c17ab8a4c0eeb741045", "tree": "ecab39f32052798ac2fc5de0fbcb5de5ffbea1fa", "parents": [ "19272b37aa4f83ca52bdf9c16d5d81bdd1354494" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Sun Jun 01 20:22:17 2025 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 11 23:21:29 2025 -0400" }, "message": "bcachefs: Add missing restart handling to check_topology()\n\nThe next patch will add logging of the specific error being corrected in\nrepair paths to the journal; this means __bch2_fsck_err() can return\ntransaction restarts in places that previously weren\u0027t expecting them.\n\ncheck_topology() is old code that doesn\u0027t use btree iterators for btree\nnode locking - it\u0027ll have to be rewritten in the future to work online.\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "ebf2e500e06f707654572bc7d8bc569a8caa51aa", "tree": "89b07360817f430c2e6fb8fcd9fda2f9d44f057f", "parents": [ "4823a58093c6dfa20df62b5c18da613621b9716e" ], "author": { "name": "Viresh Kumar", "email": "viresh.kumar@linaro.org", "time": "Mon Jun 09 12:38:43 2025 +0530" }, "committer": { "name": "Viresh Kumar", "email": "viresh.kumar@linaro.org", "time": "Thu Jun 12 08:45:19 2025 +0530" }, "message": "rust: cpu: Introduce CpuId abstraction\n\nThis adds abstraction for representing a CPU identifier.\n\nSuggested-by: Boqun Feng \u003cboqun.feng@gmail.com\u003e\nSigned-off-by: Viresh Kumar \u003cviresh.kumar@linaro.org\u003e\nReviewed-by: Boqun Feng \u003cboqun.feng@gmail.com\u003e\n" }, { "commit": "2c4a1f3fe03edab80db66688360685031802160a", "tree": "8e797b3cb031f4bf4ec95020e250e1bdd21f4236", "parents": [ "403d1338a4a59cfebb4ded53fa35fbd5119f36b1", "9cf1e25053c269d64b9e9fa25e8697d6d58028d4" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Jun 11 19:00:20 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Jun 11 19:00:20 2025 -0700" }, "message": "Merge tag \u0027bpf-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf\n\nPull BPF fixes from Alexei Starovoitov\n\n - Fix libbpf backward compatibility (Andrii Nakryiko)\n\n - Add Stanislav Fomichev as bpf/net reviewer\n\n - Fix resolve_btfid build when cross compiling (Suleiman Souhlal)\n\n* tag \u0027bpf-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf:\n MAINTAINERS: Add myself as bpf networking reviewer\n tools/resolve_btfids: Fix build when cross compiling kernel with clang.\n libbpf: Handle unsupported mmap-based /sys/kernel/btf/vmlinux correctly\n" }, { "commit": "27cea0e419d2f9dc6f51bbce5a44c70bc3774b9a", "tree": "a233ce05d91a164e2d172ef33e48a9a98a49cac2", "parents": [ "567766954b2d5d6c29f568ad4382d6351ea48079" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@google.com", "time": "Tue Jun 10 23:56:58 2025 +0000" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Jun 11 17:43:15 2025 -0700" }, "message": "MAINTAINERS: Update Kuniyuki Iwashima\u0027s email address.\n\nI left Amazon and joined Google, so let\u0027s map the email\naddresses accordingly.\n\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@google.com\u003e\nLink: https://patch.msgid.link/20250610235734.88540-1-kuniyu@google.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" } ], "next": "567766954b2d5d6c29f568ad4382d6351ea48079" }