)]}' { "log": [ { "commit": "d20f6b3d747c36889b7ce75ee369182af3decb6b", "tree": "d3c29e8bb743c465d59e06a8748764ff6221c012", "parents": [ "fd88e181d80579afbc56b9d69ef884c81abc2df0", "a9b9741854a9fe9df948af49ca5514e0ed0429df" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 13 11:11:53 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 13 11:11:53 2024 -0700" }, "message": "Merge tag \u0027net-6.10-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net\n\nPull networking fixes from Jakub Kicinski:\n \"Including fixes from bluetooth and netfilter.\n\n Slim pickings this time, probably a combination of summer, DevConf.cz,\n and the end of first half of the year at corporations.\n\n Current release - regressions:\n\n - Revert \"igc: fix a log entry using uninitialized netdev\", it traded\n lack of netdev name in a printk() for a crash\n\n Previous releases - regressions:\n\n - Bluetooth: L2CAP: fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ\n\n - geneve: fix incorrectly setting lengths of inner headers in the\n skb, confusing the drivers and causing mangled packets\n\n - sched: initialize noop_qdisc owner to avoid false-positive\n recursion detection (recursing on CPU 0), which bubbles up to user\n space as a sendmsg() error, while noop_qdisc should silently drop\n\n - netdevsim: fix backwards compatibility in nsim_get_iflink()\n\n Previous releases - always broken:\n\n - netfilter: ipset: fix race between namespace cleanup and gc in the\n list:set type\"\n\n* tag \u0027net-6.10-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net: (35 commits)\n bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send()\n af_unix: Read with MSG_PEEK loops if the first unread byte is OOB\n bnxt_en: Cap the size of HWRM_PORT_PHY_QCFG forwarded response\n gve: Clear napi-\u003eskb before dev_kfree_skb_any()\n ionic: fix use after netif_napi_del()\n Revert \"igc: fix a log entry using uninitialized netdev\"\n net: bridge: mst: fix suspicious rcu usage in br_mst_set_state\n net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state\n net/ipv6: Fix the RT cache flush via sysctl using a previous delay\n net: stmmac: replace priv-\u003espeed with the portTransmitRate from the tc-cbs parameters\n gve: ignore nonrelevant GSO type bits when processing TSO headers\n net: pse-pd: Use EOPNOTSUPP error code instead of ENOTSUPP\n netfilter: Use flowlabel flow key when re-routing mangled packets\n netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type\n netfilter: nft_inner: validate mandatory meta and payload\n tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()\n mailmap: map Geliang\u0027s new email address\n mptcp: pm: update add_addr counters after connect\n mptcp: pm: inc RmAddr MIB counter once per RM_ADDR ID\n mptcp: ensure snd_una is properly initialized on connect\n ...\n" }, { "commit": "fd88e181d80579afbc56b9d69ef884c81abc2df0", "tree": "88973190a995fd45ec86c0cfa2a6772a095f1618", "parents": [ "3572597ca844f625a3c9ba629ed0872b64c16179", "99bc9f2eb3f79a2b4296d9bf43153e1d10ca50d3" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 13 11:07:32 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 13 11:07:32 2024 -0700" }, "message": "Merge tag \u0027nfs-for-6.10-2\u0027 of git://git.linux-nfs.org/projects/trondmy/linux-nfs\n\nPull NFS client fixes from Trond Myklebust:\n \"Bugfixes:\n - NFSv4.2: Fix a memory leak in nfs4_set_security_label\n - NFSv2/v3: abort nfs_atomic_open_v23 if the name is too long.\n - NFS: Add appropriate memory barriers to the sillyrename code\n - Propagate readlink errors in nfs_symlink_filler\n - NFS: don\u0027t invalidate dentries on transient errors\n - NFS: fix unnecessary synchronous writes in random write workloads\n - NFSv4.1: enforce rootpath check when deciding whether or not to trunk\n\n Other:\n - Change email address for Trond Myklebust due to email server concerns\"\n\n* tag \u0027nfs-for-6.10-2\u0027 of git://git.linux-nfs.org/projects/trondmy/linux-nfs:\n NFS: add barriers when testing for NFS_FSDATA_BLOCKED\n SUNRPC: return proper error from gss_wrap_req_priv\n NFSv4.1 enforce rootpath check in fs_location query\n NFS: abort nfs_atomic_open_v23 if name is too long.\n nfs: don\u0027t invalidate dentries on transient errors\n nfs: Avoid flushing many pages with NFS_FILE_SYNC\n nfs: propagate readlink errors in nfs_symlink_filler\n MAINTAINERS: Change email address for Trond Myklebust\n NFSv4: Fix memory leak in nfs4_set_security_label\n" }, { "commit": "3572597ca844f625a3c9ba629ed0872b64c16179", "tree": "bed719dc9309aa9734faf1c7776513f007518133", "parents": [ "2ccbdf43d5e758f8493a95252073cf9078a5fea5", "3ac36aa7307363b7247ccb6f6a804e11496b2b36" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 13 10:09:29 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jun 13 10:09:29 2024 -0700" }, "message": "Merge tag \u0027fixes-2024-06-13\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rppt/memblock\n\nPull memblock fixes from Mike Rapoport:\n \"Fix validation of NUMA coverage.\n\n memblock_validate_numa_coverage() was checking for a unset node ID\n using NUMA_NO_NODE, but x86 used MAX_NUMNODES when no node ID was\n specified by buggy firmware.\n\n Update memblock to substitute MAX_NUMNODES with NUMA_NO_NODE in\n memblock_set_node() and use NUMA_NO_NODE in x86::numa_init()\"\n\n* tag \u0027fixes-2024-06-13\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rppt/memblock:\n x86/mm/numa: Use NUMA_NO_NODE when calling memblock_set_node()\n memblock: make memblock_set_node() also warn about use of MAX_NUMNODES\n" }, { "commit": "a9b9741854a9fe9df948af49ca5514e0ed0429df", "tree": "94ee74d5bc0af17a1b7b0ad476d84d8a36894e89", "parents": [ "a6736a0addd60fccc3a3508461d72314cc609772" ], "author": { "name": "Aleksandr Mishin", "email": "amishin@t-argos.ru", "time": "Tue Jun 11 11:25:46 2024 +0300" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 13 08:05:46 2024 -0700" }, "message": "bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send()\n\nIn case of token is released due to token-\u003estate \u003d\u003d BNXT_HWRM_DEFERRED,\nreleased token (set to NULL) is used in log messages. This issue is\nexpected to be prevented by HWRM_ERR_CODE_PF_UNAVAILABLE error code. But\nthis error code is returned by recent firmware. So some firmware may not\nreturn it. This may lead to NULL pointer dereference.\nAdjust this issue by adding token pointer check.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.\n\nFixes: 8fa4219dba8e (\"bnxt_en: add dynamic debug support for HWRM messages\")\nSuggested-by: Michael Chan \u003cmichael.chan@broadcom.com\u003e\nSigned-off-by: Aleksandr Mishin \u003camishin@t-argos.ru\u003e\nReviewed-by: Wojciech Drewek \u003cwojciech.drewek@intel.com\u003e\nReviewed-by: Michael Chan \u003cmichael.chan@broadcom.com\u003e\nLink: https://lore.kernel.org/r/20240611082547.12178-1-amishin@t-argos.ru\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "a6736a0addd60fccc3a3508461d72314cc609772", "tree": "1eb74d550261442efbc98b5ed239771526296083", "parents": [ "7d9df38c9c037ab84502ce7eeae9f1e1e7e72603" ], "author": { "name": "Rao Shoaib", "email": "Rao.Shoaib@oracle.com", "time": "Tue Jun 11 01:46:39 2024 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 13 08:03:55 2024 -0700" }, "message": "af_unix: Read with MSG_PEEK loops if the first unread byte is OOB\n\nRead with MSG_PEEK flag loops if the first byte to read is an OOB byte.\ncommit 22dd70eb2c3d (\"af_unix: Don\u0027t peek OOB data without MSG_OOB.\")\naddresses the loop issue but does not address the issue that no data\nbeyond OOB byte can be read.\n\n\u003e\u003e\u003e from socket import *\n\u003e\u003e\u003e c1, c2 \u003d socketpair(AF_UNIX, SOCK_STREAM)\n\u003e\u003e\u003e c1.send(b\u0027a\u0027, MSG_OOB)\n1\n\u003e\u003e\u003e c1.send(b\u0027b\u0027)\n1\n\u003e\u003e\u003e c2.recv(1, MSG_PEEK | MSG_DONTWAIT)\nb\u0027b\u0027\n\n\u003e\u003e\u003e from socket import *\n\u003e\u003e\u003e c1, c2 \u003d socketpair(AF_UNIX, SOCK_STREAM)\n\u003e\u003e\u003e c2.setsockopt(SOL_SOCKET, SO_OOBINLINE, 1)\n\u003e\u003e\u003e c1.send(b\u0027a\u0027, MSG_OOB)\n1\n\u003e\u003e\u003e c1.send(b\u0027b\u0027)\n1\n\u003e\u003e\u003e c2.recv(1, MSG_PEEK | MSG_DONTWAIT)\nb\u0027a\u0027\n\u003e\u003e\u003e c2.recv(1, MSG_PEEK | MSG_DONTWAIT)\nb\u0027a\u0027\n\u003e\u003e\u003e c2.recv(1, MSG_DONTWAIT)\nb\u0027a\u0027\n\u003e\u003e\u003e c2.recv(1, MSG_PEEK | MSG_DONTWAIT)\nb\u0027b\u0027\n\u003e\u003e\u003e\n\nFixes: 314001f0bf92 (\"af_unix: Add OOB support\")\nSigned-off-by: Rao Shoaib \u003cRao.Shoaib@oracle.com\u003e\nReviewed-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nLink: https://lore.kernel.org/r/20240611084639.2248934-1-Rao.Shoaib@oracle.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "7d9df38c9c037ab84502ce7eeae9f1e1e7e72603", "tree": "c504bead1fea50f83c916b79270e5ba8dfff7103", "parents": [ "6f4d93b78ade0a4c2cafd587f7b429ce95abb02e" ], "author": { "name": "Michael Chan", "email": "michael.chan@broadcom.com", "time": "Wed Jun 12 16:17:36 2024 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 13 07:50:16 2024 -0700" }, "message": "bnxt_en: Cap the size of HWRM_PORT_PHY_QCFG forwarded response\n\nFirmware interface 1.10.2.118 has increased the size of\nHWRM_PORT_PHY_QCFG response beyond the maximum size that can be\nforwarded. When the VF\u0027s link state is not the default auto state,\nthe PF will need to forward the response back to the VF to indicate\nthe forced state. This regression may cause the VF to fail to\ninitialize.\n\nFix it by capping the HWRM_PORT_PHY_QCFG response to the maximum\n96 bytes. The SPEEDS2_SUPPORTED flag needs to be cleared because the\nnew speeds2 fields are beyond the legacy structure. Also modify\nbnxt_hwrm_fwd_resp() to print a warning if the message size exceeds 96\nbytes to make this failure more obvious.\n\nFixes: 84a911db8305 (\"bnxt_en: Update firmware interface to 1.10.2.118\")\nReviewed-by: Somnath Kotur \u003csomnath.kotur@broadcom.com\u003e\nReviewed-by: Pavan Chebbi \u003cpavan.chebbi@broadcom.com\u003e\nSigned-off-by: Michael Chan \u003cmichael.chan@broadcom.com\u003e\nLink: https://lore.kernel.org/r/20240612231736.57823-1-michael.chan@broadcom.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "6f4d93b78ade0a4c2cafd587f7b429ce95abb02e", "tree": "eaf1eeac3b91df556b34ae9d7b61dd8a538be187", "parents": [ "79f18a41dd056115d685f3b0a419c7cd40055e13" ], "author": { "name": "Ziwei Xiao", "email": "ziweixiao@google.com", "time": "Wed Jun 12 00:16:54 2024 +0000" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 13 07:37:35 2024 -0700" }, "message": "gve: Clear napi-\u003eskb before dev_kfree_skb_any()\n\ngve_rx_free_skb incorrectly leaves napi-\u003eskb referencing an skb after it\nis freed with dev_kfree_skb_any(). This can result in a subsequent call\nto napi_get_frags returning a dangling pointer.\n\nFix this by clearing napi-\u003eskb before the skb is freed.\n\nFixes: 9b8dd5e5ea48 (\"gve: DQO: Add RX path\")\nCc: stable@vger.kernel.org\nReported-by: Shailend Chand \u003cshailend@google.com\u003e\nSigned-off-by: Ziwei Xiao \u003cziweixiao@google.com\u003e\nReviewed-by: Harshitha Ramamurthy \u003chramamurthy@google.com\u003e\nReviewed-by: Shailend Chand \u003cshailend@google.com\u003e\nReviewed-by: Praveen Kaligineedi \u003cpkaligineedi@google.com\u003e\nLink: https://lore.kernel.org/r/20240612001654.923887-1-ziweixiao@google.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "79f18a41dd056115d685f3b0a419c7cd40055e13", "tree": "f8bb0f692522a711b9db7f6496c83b194200edb7", "parents": [ "8eef5c3cea65f248c99cd9dcb3f84c6509b78162" ], "author": { "name": "Taehee Yoo", "email": "ap420073@gmail.com", "time": "Wed Jun 12 06:04:46 2024 +0000" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 13 07:30:06 2024 -0700" }, "message": "ionic: fix use after netif_napi_del()\n\nWhen queues are started, netif_napi_add() and napi_enable() are called.\nIf there are 4 queues and only 3 queues are used for the current\nconfiguration, only 3 queues\u0027 napi should be registered and enabled.\nThe ionic_qcq_enable() checks whether the .poll pointer is not NULL for\nenabling only the using queue\u0027 napi. Unused queues\u0027 napi will not be\nregistered by netif_napi_add(), so the .poll pointer indicates NULL.\nBut it couldn\u0027t distinguish whether the napi was unregistered or not\nbecause netif_napi_del() doesn\u0027t reset the .poll pointer to NULL.\nSo, ionic_qcq_enable() calls napi_enable() for the queue, which was\nunregistered by netif_napi_del().\n\nReproducer:\n ethtool -L \u003cinterface name\u003e rx 1 tx 1 combined 0\n ethtool -L \u003cinterface name\u003e rx 0 tx 0 combined 1\n ethtool -L \u003cinterface name\u003e rx 0 tx 0 combined 4\n\nSplat looks like:\nkernel BUG at net/core/dev.c:6666!\nOops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI\nCPU: 3 PID: 1057 Comm: kworker/3:3 Not tainted 6.10.0-rc2+ #16\nWorkqueue: events ionic_lif_deferred_work [ionic]\nRIP: 0010:napi_enable+0x3b/0x40\nCode: 48 89 c2 48 83 e2 f6 80 b9 61 09 00 00 00 74 0d 48 83 bf 60 01 00 00 00 74 03 80 ce 01 f0 4f\nRSP: 0018:ffffb6ed83227d48 EFLAGS: 00010246\nRAX: 0000000000000000 RBX: ffff97560cda0828 RCX: 0000000000000029\nRDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff97560cda0a28\nRBP: ffffb6ed83227d50 R08: 0000000000000400 R09: 0000000000000001\nR10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000\nR13: ffff97560ce3c1a0 R14: 0000000000000000 R15: ffff975613ba0a20\nFS: 0000000000000000(0000) GS:ffff975d5f780000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f8f734ee200 CR3: 0000000103e50000 CR4: 00000000007506f0\nPKRU: 55555554\nCall Trace:\n \u003cTASK\u003e\n ? die+0x33/0x90\n ? do_trap+0xd9/0x100\n ? napi_enable+0x3b/0x40\n ? do_error_trap+0x83/0xb0\n ? napi_enable+0x3b/0x40\n ? napi_enable+0x3b/0x40\n ? exc_invalid_op+0x4e/0x70\n ? napi_enable+0x3b/0x40\n ? asm_exc_invalid_op+0x16/0x20\n ? napi_enable+0x3b/0x40\n ionic_qcq_enable+0xb7/0x180 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8]\n ionic_start_queues+0xc4/0x290 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8]\n ionic_link_status_check+0x11c/0x170 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8]\n ionic_lif_deferred_work+0x129/0x280 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8]\n process_one_work+0x145/0x360\n worker_thread+0x2bb/0x3d0\n ? __pfx_worker_thread+0x10/0x10\n kthread+0xcc/0x100\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x2d/0x50\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1a/0x30\n\nFixes: 0f3154e6bcb3 (\"ionic: Add Tx and Rx handling\")\nSigned-off-by: Taehee Yoo \u003cap420073@gmail.com\u003e\nReviewed-by: Brett Creeley \u003cbrett.creeley@amd.com\u003e\nReviewed-by: Shannon Nelson \u003cshannon.nelson@amd.com\u003e\nLink: https://lore.kernel.org/r/20240612060446.1754392-1-ap420073@gmail.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "8eef5c3cea65f248c99cd9dcb3f84c6509b78162", "tree": "76561fb103ddcc23536a901355459ad4ff29faae", "parents": [ "b60b1bdc1888f51da7a2a22c48c5f1eb2bd12e97" ], "author": { "name": "Sasha Neftin", "email": "sasha.neftin@intel.com", "time": "Tue Jun 11 09:24:55 2024 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Thu Jun 13 07:24:52 2024 -0700" }, "message": "Revert \"igc: fix a log entry using uninitialized netdev\"\n\nThis reverts commit 86167183a17e03ec77198897975e9fdfbd53cb0b.\n\nigc_ptp_init() needs to be called before igc_reset(), otherwise kernel\ncrash could be observed. Following the corresponding discussion [1] and\n[2] revert this commit.\n\nLink: https://lore.kernel.org/all/8fb634f8-7330-4cf4-a8ce-485af9c0a61a@intel.com/ [1]\nLink: https://lore.kernel.org/all/87o78rmkhu.fsf@intel.com/ [2]\nFixes: 86167183a17e (\"igc: fix a log entry using uninitialized netdev\")\nSigned-off-by: Sasha Neftin \u003csasha.neftin@intel.com\u003e\nTested-by: Naama Meir \u003cnaamax.meir@linux.intel.com\u003e\nSigned-off-by: Tony Nguyen \u003canthony.l.nguyen@intel.com\u003e\nLink: https://lore.kernel.org/r/20240611162456.961631-1-anthony.l.nguyen@intel.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "b60b1bdc1888f51da7a2a22c48c5f1eb2bd12e97", "tree": "1615fa29d71e6178b5e203beccf93a891c54416a", "parents": [ "14a20e5b4ad998793c5f43b0330d9e1388446cf3", "546ceb1dfdac866648ec959cbc71d9525bd73462" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Jun 12 18:24:26 2024 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Jun 12 18:24:26 2024 -0700" }, "message": "Merge branch \u0027net-bridge-mst-fix-suspicious-rcu-usage-warning\u0027\n\nNikolay Aleksandrov says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nnet: bridge: mst: fix suspicious rcu usage warning\n\nThis set fixes a suspicious RCU usage warning triggered by syzbot[1] in\nthe bridge\u0027s MST code. After I converted br_mst_set_state to RCU, I\nforgot to update the vlan group dereference helper. Fix it by using\nthe proper helper, in order to do that we need to pass the vlan group\nwhich is already obtained correctly by the callers for their respective\ncontext. Patch 01 is a requirement for the fix in patch 02.\n\nNote I did consider rcu_dereference_rtnl() but the churn is much bigger\nand in every part of the bridge. We can do that as a cleanup in\nnet-next.\n\n[1] https://syzkaller.appspot.com/bug?extid\u003d9bbe2de1bc9d470eb5fe\n \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n WARNING: suspicious RCU usage\n 6.10.0-rc2-syzkaller-00235-g8a92980606e3 #0 Not tainted\n -----------------------------\n net/bridge/br_private.h:1599 suspicious rcu_dereference_protected() usage!\n\n other info that might help us debug this:\n\n rcu_scheduler_active \u003d 2, debug_locks \u003d 1\n 4 locks held by syz-executor.1/5374:\n #0: ffff888022d50b18 (\u0026mm-\u003emmap_lock){++++}-{3:3}, at: mmap_read_lock include/linux/mmap_lock.h:144 [inline]\n #0: ffff888022d50b18 (\u0026mm-\u003emmap_lock){++++}-{3:3}, at: __mm_populate+0x1b0/0x460 mm/gup.c:2111\n #1: ffffc90000a18c00 ((\u0026p-\u003eforward_delay_timer)){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 kernel/time/timer.c:1789\n #2: ffff88805fb2ccb8 (\u0026br-\u003elock){+.-.}-{2:2}, at: spin_lock include/linux/spinlock.h:351 [inline]\n #2: ffff88805fb2ccb8 (\u0026br-\u003elock){+.-.}-{2:2}, at: br_forward_delay_timer_expired+0x50/0x440 net/bridge/br_stp_timer.c:86\n #3: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline]\n #3: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:781 [inline]\n #3: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: br_mst_set_state+0x171/0x7a0 net/bridge/br_mst.c:105\n\n stack backtrace:\n CPU: 1 PID: 5374 Comm: syz-executor.1 Not tainted 6.10.0-rc2-syzkaller-00235-g8a92980606e3 #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024\n Call Trace:\n \u003cIRQ\u003e\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114\n lockdep_rcu_suspicious+0x221/0x340 kernel/locking/lockdep.c:6712\n nbp_vlan_group net/bridge/br_private.h:1599 [inline]\n br_mst_set_state+0x29e/0x7a0 net/bridge/br_mst.c:106\n br_set_state+0x28a/0x7b0 net/bridge/br_stp.c:47\n br_forward_delay_timer_expired+0x176/0x440 net/bridge/br_stp_timer.c:88\n call_timer_fn+0x18e/0x650 kernel/time/timer.c:1792\n expire_timers kernel/time/timer.c:1843 [inline]\n __run_timers kernel/time/timer.c:2417 [inline]\n __run_timer_base+0x66a/0x8e0 kernel/time/timer.c:2428\n run_timer_base kernel/time/timer.c:2437 [inline]\n run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2447\n handle_softirqs+0x2c4/0x970 kernel/softirq.c:554\n __do_softirq kernel/softirq.c:588 [inline]\n invoke_softirq kernel/softirq.c:428 [inline]\n __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637\n irq_exit_rcu+0x9/0x30 kernel/softirq.c:649\n instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]\n sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043\n \u003c/IRQ\u003e\n \u003cTASK\u003e\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://lore.kernel.org/r/20240609103654.914987-1-razor@blackwall.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "546ceb1dfdac866648ec959cbc71d9525bd73462", "tree": "1615fa29d71e6178b5e203beccf93a891c54416a", "parents": [ "36c92936e868601fa1f43da6758cf55805043509" ], "author": { "name": "Nikolay Aleksandrov", "email": "razor@blackwall.org", "time": "Sun Jun 09 13:36:54 2024 +0300" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Jun 12 18:24:24 2024 -0700" }, "message": "net: bridge: mst: fix suspicious rcu usage in br_mst_set_state\n\nI converted br_mst_set_state to RCU to avoid a vlan use-after-free\nbut forgot to change the vlan group dereference helper. Switch to vlan\ngroup RCU deref helper to fix the suspicious rcu usage warning.\n\nFixes: 3a7c1661ae13 (\"net: bridge: mst: fix vlan use-after-free\")\nReported-by: syzbot+9bbe2de1bc9d470eb5fe@syzkaller.appspotmail.com\nCloses: https://syzkaller.appspot.com/bug?extid\u003d9bbe2de1bc9d470eb5fe\nSigned-off-by: Nikolay Aleksandrov \u003crazor@blackwall.org\u003e\nLink: https://lore.kernel.org/r/20240609103654.914987-3-razor@blackwall.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "36c92936e868601fa1f43da6758cf55805043509", "tree": "acc9e7274eb8968851aeca33c093645fcc5ac13b", "parents": [ "14a20e5b4ad998793c5f43b0330d9e1388446cf3" ], "author": { "name": "Nikolay Aleksandrov", "email": "razor@blackwall.org", "time": "Sun Jun 09 13:36:53 2024 +0300" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Jun 12 18:24:24 2024 -0700" }, "message": "net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state\n\nPass the already obtained vlan group pointer to br_mst_vlan_set_state()\ninstead of dereferencing it again. Each caller has already correctly\ndereferenced it for their context. This change is required for the\nfollowing suspicious RCU dereference fix. No functional changes\nintended.\n\nFixes: 3a7c1661ae13 (\"net: bridge: mst: fix vlan use-after-free\")\nReported-by: syzbot+9bbe2de1bc9d470eb5fe@syzkaller.appspotmail.com\nCloses: https://syzkaller.appspot.com/bug?extid\u003d9bbe2de1bc9d470eb5fe\nSigned-off-by: Nikolay Aleksandrov \u003crazor@blackwall.org\u003e\nLink: https://lore.kernel.org/r/20240609103654.914987-2-razor@blackwall.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "14a20e5b4ad998793c5f43b0330d9e1388446cf3", "tree": "83551b4724edbbcfe688e58c4c94264f8aa0a282", "parents": [ "d92589f8fd551b8e362d7ac09317e01717e1636d" ], "author": { "name": "Petr Pavlu", "email": "petr.pavlu@suse.com", "time": "Fri Jun 07 13:28:28 2024 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Jun 12 17:51:35 2024 -0700" }, "message": "net/ipv6: Fix the RT cache flush via sysctl using a previous delay\n\nThe net.ipv6.route.flush system parameter takes a value which specifies\na delay used during the flush operation for aging exception routes. The\nwritten value is however not used in the currently requested flush and\ninstead utilized only in the next one.\n\nA problem is that ipv6_sysctl_rtcache_flush() first reads the old value\nof net-\u003eipv6.sysctl.flush_delay into a local delay variable and then\ncalls proc_dointvec() which actually updates the sysctl based on the\nprovided input.\n\nFix the problem by switching the order of the two operations.\n\nFixes: 4990509f19e8 (\"[NETNS][IPV6]: Make sysctls route per namespace.\")\nSigned-off-by: Petr Pavlu \u003cpetr.pavlu@suse.com\u003e\nReviewed-by: David Ahern \u003cdsahern@kernel.org\u003e\nLink: https://lore.kernel.org/r/20240607112828.30285-1-petr.pavlu@suse.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "2ccbdf43d5e758f8493a95252073cf9078a5fea5", "tree": "a6e13b68fce7b82e6e2bc09189d29c51bfb17c5a", "parents": [ "0b4989ebe8a608c68d5ec54d61078aba47baed22", "594ce0b8a998aa4d05827cd7c0d0dcec9a1e3ae2" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Jun 12 16:58:05 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Jun 12 16:58:05 2024 -0700" }, "message": "Merge tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rmk/linux\n\nPull ARM and clkdev fixes from Russell King:\n\n - Fix clkdev - erroring out on long strings causes boot failures, so\n don\u0027t do this. Still warn about the over-sized strings (which will\n never match and thus their registration with clkdev is useless)\n\n - Fix for ftrace with frame pointer unwinder with recent GCC changing\n the way frames are stacked.\n\n* tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rmk/linux:\n ARM: 9405/1: ftrace: Don\u0027t assume stack frames are contiguous in memory\n clkdev: don\u0027t fail clkdev_alloc() if over-sized\n" }, { "commit": "d92589f8fd551b8e362d7ac09317e01717e1636d", "tree": "0b24cb38c2b5477d1c8035360a709073fa2ccbcb", "parents": [ "be27b896529787e23a35ae4befb6337ce73fcca0", "6f8f132cc7bac2ac76911e47d5baa378aafda4cb" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Jun 12 16:28:59 2024 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Jun 12 16:29:00 2024 -0700" }, "message": "Merge tag \u0027nf-24-06-11\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf\n\nPablo Neira Ayuso says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nNetfilter fixes for net\n\nThe following patchset contains Netfilter fixes for net:\n\nPatch #1 fixes insufficient sanitization of netlink attributes for the\n\t inner expression which can trigger nul-pointer dereference,\n\t from Davide Ornaghi.\n\nPatch #2 address a report that there is a race condition between\n namespace cleanup and the garbage collection of the list:set\n type. This patch resolves this issue with other minor issues\n\t as well, from Jozsef Kadlecsik.\n\nPatch #3 ip6_route_me_harder() ignores flowlabel/dsfield when ip dscp\n\t has been mangled, this unbreaks ip6 dscp set $v,\n\t from Florian Westphal.\n\nAll of these patches address issues that are present in several releases.\n\n* tag \u0027nf-24-06-11\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf:\n netfilter: Use flowlabel flow key when re-routing mangled packets\n netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type\n netfilter: nft_inner: validate mandatory meta and payload\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://lore.kernel.org/r/20240611220323.413713-1-pablo@netfilter.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "0b4989ebe8a608c68d5ec54d61078aba47baed22", "tree": "52360aba9a7fea8907f8912fe371695756890fba", "parents": [ "cea2a26553ace13ee36b56dc09ad548b5e6907df", "f2736b9c791a126ecb9cfc1aef1c7b4152b66e2d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Jun 12 15:08:23 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Jun 12 15:08:23 2024 -0700" }, "message": "Merge tag \u0027bcachefs-2024-06-12\u0027 of https://evilpiepirate.org/git/bcachefs\n\nPull bcachefs fixes from Kent Overstreet:\n\n - fix kworker explosion, due to calling submit_bio() (which can block)\n from a multithreaded workqueue\n\n - fix error handling in btree node scan\n\n - forward compat fix: kill an old debug assert\n\n - key cache shrinker fixes\n\n This is a partial fix for stalls doing multithreaded creates - there\n were various O(n^2) issues the key cache shrinker was hitting [1].\n\n There\u0027s more work coming here; I\u0027m working on a patch to delete the\n key cache lock, which initial testing shows to be a pretty drastic\n performance improvement\n\n - assorted syzbot fixes\n\nLink: https://lore.kernel.org/linux-bcachefs/CAGudoHGenxzk0ZqPXXi1_QDbfqQhGHu+wUwzyS6WmfkUZ1HiXA@mail.gmail.com/ [1]\n\n* tag \u0027bcachefs-2024-06-12\u0027 of https://evilpiepirate.org/git/bcachefs:\n bcachefs: Fix rcu_read_lock() leak in drop_extra_replicas\n bcachefs: Add missing bch_inode_info.ei_flags init\n bcachefs: Add missing synchronize_srcu_expedited() call when shutting down\n bcachefs: Check for invalid bucket from bucket_gen(), gc_bucket()\n bcachefs: Replace bucket_valid() asserts in bucket lookup with proper checks\n bcachefs: Fix snapshot_create_lock lock ordering\n bcachefs: Fix refcount leak in check_fix_ptrs()\n bcachefs: Leave a buffer in the btree key cache to avoid lock thrashing\n bcachefs: Fix reporting of freed objects from key cache shrinker\n bcachefs: set sb-\u003es_shrinker-\u003eseeks \u003d 0\n bcachefs: increase key cache shrinker batch size\n bcachefs: Enable automatic shrinking for rhashtables\n bcachefs: fix the display format for show-super\n bcachefs: fix stack frame size in fsck.c\n bcachefs: Delete incorrect BTREE_ID_NR assertion\n bcachefs: Fix incorrect error handling found_btree_node_is_readable()\n bcachefs: Split out btree_write_submit_wq\n" }, { "commit": "cea2a26553ace13ee36b56dc09ad548b5e6907df", "tree": "0461ddbb13abbb10129293a07d06624d296a2b13", "parents": [ "2ef5971ff345d3c000873725db555085e0131961" ], "author": { "name": "Andy Shevchenko", "email": "andriy.shevchenko@linux.intel.com", "time": "Tue Jun 11 17:58:57 2024 +0300" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Jun 12 09:28:04 2024 -0700" }, "message": "mailmap: Add my outdated addresses to the map file\n\nThere is a couple of outdated addresses that are still visible\nin the Git history, add them to .mailmap.\n\nWhile at it, replace one in the comment.\n\nSigned-off-by: Andy Shevchenko \u003candriy.shevchenko@linux.intel.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "be27b896529787e23a35ae4befb6337ce73fcca0", "tree": "2433b6854a071183ba17b94a7178e33247c054a8", "parents": [ "1b9f756344416e02b41439bf2324b26aa25e141c" ], "author": { "name": "Xiaolei Wang", "email": "xiaolei.wang@windriver.com", "time": "Sat Jun 08 22:35:24 2024 +0800" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Tue Jun 11 19:58:18 2024 -0700" }, "message": "net: stmmac: replace priv-\u003espeed with the portTransmitRate from the tc-cbs parameters\n\nThe current cbs parameter depends on speed after uplinking,\nwhich is not needed and will report a configuration error\nif the port is not initially connected. The UAPI exposed by\ntc-cbs requires userspace to recalculate the send slope anyway,\nbecause the formula depends on port_transmit_rate (see man tc-cbs),\nwhich is not an invariant from tc\u0027s perspective. Therefore, we\nuse offload-\u003esendslope and offload-\u003eidleslope to derive the\noriginal port_transmit_rate from the CBS formula.\n\nFixes: 1f705bc61aee (\"net: stmmac: Add support for CBS QDISC\")\nSigned-off-by: Xiaolei Wang \u003cxiaolei.wang@windriver.com\u003e\nReviewed-by: Wojciech Drewek \u003cwojciech.drewek@intel.com\u003e\nReviewed-by: Vladimir Oltean \u003colteanv@gmail.com\u003e\nLink: https://lore.kernel.org/r/20240608143524.2065736-1-xiaolei.wang@windriver.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "1b9f756344416e02b41439bf2324b26aa25e141c", "tree": "7995aef444ac7820882ac2d4b568e0b96f99e51c", "parents": [ "f6b2f578df8d1cb993e0951b786820410a04268c" ], "author": { "name": "Joshua Washington", "email": "joshwash@google.com", "time": "Mon Jun 10 15:57:18 2024 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Tue Jun 11 19:42:35 2024 -0700" }, "message": "gve: ignore nonrelevant GSO type bits when processing TSO headers\n\nTSO currently fails when the skb\u0027s gso_type field has more than one bit\nset.\n\nTSO packets can be passed from userspace using PF_PACKET, TUNTAP and a\nfew others, using virtio_net_hdr (e.g., PACKET_VNET_HDR). This includes\nvirtualization, such as QEMU, a real use-case.\n\nThe gso_type and gso_size fields as passed from userspace in\nvirtio_net_hdr are not trusted blindly by the kernel. It adds gso_type\n|\u003d SKB_GSO_DODGY to force the packet to enter the software GSO stack\nfor verification.\n\nThis issue might similarly come up when the CWR bit is set in the TCP\nheader for congestion control, causing the SKB_GSO_TCP_ECN gso_type bit\nto be set.\n\nFixes: a57e5de476be (\"gve: DQO: Add TX path\")\nSigned-off-by: Joshua Washington \u003cjoshwash@google.com\u003e\nReviewed-by: Praveen Kaligineedi \u003cpkaligineedi@google.com\u003e\nReviewed-by: Harshitha Ramamurthy \u003chramamurthy@google.com\u003e\nReviewed-by: Willem de Bruijn \u003cwillemb@google.com\u003e\nSuggested-by: Eric Dumazet \u003cedumazet@google.com\u003e\nAcked-by: Andrei Vagin \u003cavagin@gmail.com\u003e\n\nv2 - Remove unnecessary comments, remove line break between fixes tag\nand signoffs.\n\nv3 - Add back unrelated empty line removal.\n\nLink: https://lore.kernel.org/r/20240610225729.2985343-1-joshwash@google.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "f6b2f578df8d1cb993e0951b786820410a04268c", "tree": "67f1de9f89c8cec98ed6932f5640bfa7927fe090", "parents": [ "144ba8580bcb82b2686c3d1a043299d844b9a682", "c695439d198d30e10553a3b98360c5efe77b6903" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Tue Jun 11 19:40:27 2024 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Tue Jun 11 19:40:27 2024 -0700" }, "message": "Merge tag \u0027for-net-2024-06-10\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth\n\nLuiz Augusto von Dentz says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nbluetooth pull request for net:\n\n - hci_sync: fix not using correct handle\n - L2CAP: fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ\n - L2CAP: fix connection setup in l2cap_connect\n\n* tag \u0027for-net-2024-06-10\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth:\n Bluetooth: fix connection setup in l2cap_connect\n Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ\n Bluetooth: hci_sync: Fix not using correct handle\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://lore.kernel.org/r/20240610135803.920662-1-luiz.dentz@gmail.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "144ba8580bcb82b2686c3d1a043299d844b9a682", "tree": "c34f2f9325d75bd331d1697797be136fb6df5b50", "parents": [ "36534d3c54537bf098224a32dc31397793d4594d" ], "author": { "name": "Kory Maincent", "email": "kory.maincent@bootlin.com", "time": "Mon Jun 10 10:34:26 2024 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Tue Jun 11 19:33:37 2024 -0700" }, "message": "net: pse-pd: Use EOPNOTSUPP error code instead of ENOTSUPP\n\nENOTSUPP is not a SUSV4 error code, prefer EOPNOTSUPP as reported by\ncheckpatch script.\n\nFixes: 18ff0bcda6d1 (\"ethtool: add interface to interact with Ethernet Power Equipment\")\nReviewed-by: Andrew Lunn \u003candrew@lunn.ch\u003e\nAcked-by: Oleksij Rempel \u003co.rempel@pengutronix.de\u003e\nSigned-off-by: Kory Maincent \u003ckory.maincent@bootlin.com\u003e\nLink: https://lore.kernel.org/r/20240610083426.740660-1-kory.maincent@bootlin.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "f2736b9c791a126ecb9cfc1aef1c7b4152b66e2d", "tree": "eea9dc26a54f06a935f06dd111ef7f8a29966bed", "parents": [ "7124a8982b621e1a8af81c17f44b90587cdd161c" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Tue Jun 11 18:59:08 2024 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Tue Jun 11 18:59:08 2024 -0400" }, "message": "bcachefs: Fix rcu_read_lock() leak in drop_extra_replicas\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "2ef5971ff345d3c000873725db555085e0131961", "tree": "4f499571c0402e207d42e102ab2b1adbcff2c72e", "parents": [ "83a7eefedc9b56fe7bfeff13b6c7356688ffa670", "f5ceb1bbc98c69536d4673a97315e8427e67de1b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Jun 11 12:04:21 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Jun 11 12:04:21 2024 -0700" }, "message": "Merge tag \u0027vfs-6.10-rc4.fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs\n\nPull vfs fixes from Christian Brauner:\n \"Misc:\n - Restore debugfs behavior of ignoring unknown mount options\n - Fix kernel doc for netfs_wait_for_oustanding_io()\n - Fix struct statx comment after new addition for this cycle\n - Fix a check in find_next_fd()\n\n iomap:\n - Fix data zeroing behavior when an extent spans the block that\n contains i_size\n - Restore i_size increasing in iomap_write_end() for now to avoid\n stale data exposure on xfs with a realtime device\n\n Cachefiles:\n - Remove unneeded fdtable.h include\n - Improve trace output for cachefiles_obj_{get,put}_ondemand_fd()\n - Remove requests from the request list to prevent accessing already\n freed requests\n - Fix UAF when issuing restore command while the daemon is still\n alive by adding an additional reference count to requests\n - Fix UAF by grabbing a reference during xarray lookup with xa_lock()\n held\n - Simplify error handling in cachefiles_ondemand_daemon_read()\n - Add consistency checks read and open requests to avoid crashes\n - Add a spinlock to protect ondemand_id variable which is used to\n determine whether an anonymous cachefiles fd has already been\n closed\n - Make on-demand reads killable allowing to handle broken cachefiles\n daemon better\n - Flush all requests after the kernel has been marked dead via\n CACHEFILES_DEAD to avoid hung-tasks\n - Ensure that closed requests are marked as such to avoid reusing\n them with a reopen request\n - Defer fd_install() until after copy_to_user() succeeded and thereby\n get rid of having to use close_fd()\n - Ensure that anonymous cachefiles on-demand fds are reused while\n they are valid to avoid pinning already freed cookies\"\n\n* tag \u0027vfs-6.10-rc4.fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs:\n iomap: Fix iomap_adjust_read_range for plen calculation\n iomap: keep on increasing i_size in iomap_write_end()\n cachefiles: remove unneeded include of \u003clinux/fdtable.h\u003e\n fs/file: fix the check in find_next_fd()\n cachefiles: make on-demand read killable\n cachefiles: flush all requests after setting CACHEFILES_DEAD\n cachefiles: Set object to close if ondemand_id \u003c 0 in copen\n cachefiles: defer exposing anon_fd until after copy_to_user() succeeds\n cachefiles: never get a new anonymous fd if ondemand_id is valid\n cachefiles: add spin_lock for cachefiles_ondemand_info\n cachefiles: add consistency check for copen/cread\n cachefiles: remove err_put_fd label in cachefiles_ondemand_daemon_read()\n cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()\n cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()\n cachefiles: remove requests from xarray during flushing requests\n cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd\n statx: Update offset commentary for struct statx\n netfs: fix kernel doc for nets_wait_for_outstanding_io()\n debugfs: continue to ignore unknown mount options\n" }, { "commit": "6f8f132cc7bac2ac76911e47d5baa378aafda4cb", "tree": "77c52a319703eb834f5bb03a71879b7cc2b25e22", "parents": [ "4e7aaa6b82d63e8ddcbfb56b4fd3d014ca586f10" ], "author": { "name": "Florian Westphal", "email": "fw@strlen.de", "time": "Thu Jun 06 12:23:31 2024 +0200" }, "committer": { "name": "Pablo Neira Ayuso", "email": "pablo@netfilter.org", "time": "Tue Jun 11 18:46:04 2024 +0200" }, "message": "netfilter: Use flowlabel flow key when re-routing mangled packets\n\n\u0027ip6 dscp set $v\u0027 in an nftables outpute route chain has no effect.\nWhile nftables does detect the dscp change and calls the reroute hook.\nBut ip6_route_me_harder never sets the dscp/flowlabel:\nflowlabel/dsfield routing rules are ignored and no reroute takes place.\n\nThanks to Yi Chen for an excellent reproducer script that I used\nto validate this change.\n\nFixes: 1da177e4c3f4 (\"Linux-2.6.12-rc2\")\nReported-by: Yi Chen \u003cyiche@redhat.com\u003e\nSigned-off-by: Florian Westphal \u003cfw@strlen.de\u003e\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\n" }, { "commit": "4e7aaa6b82d63e8ddcbfb56b4fd3d014ca586f10", "tree": "36eb78cbe6d417fb885d8571bc649b7674df98bc", "parents": [ "c4ab9da85b9df3692f861512fe6c9812f38b7471" ], "author": { "name": "Jozsef Kadlecsik", "email": "kadlec@netfilter.org", "time": "Tue Jun 04 15:58:03 2024 +0200" }, "committer": { "name": "Pablo Neira Ayuso", "email": "pablo@netfilter.org", "time": "Tue Jun 11 18:46:04 2024 +0200" }, "message": "netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type\n\nLion Ackermann reported that there is a race condition between namespace cleanup\nin ipset and the garbage collection of the list:set type. The namespace\ncleanup can destroy the list:set type of sets while the gc of the set type is\nwaiting to run in rcu cleanup. The latter uses data from the destroyed set which\nthus leads use after free. The patch contains the following parts:\n\n- When destroying all sets, first remove the garbage collectors, then wait\n if needed and then destroy the sets.\n- Fix the badly ordered \"wait then remove gc\" for the destroy a single set\n case.\n- Fix the missing rcu locking in the list:set type in the userspace test\n case.\n- Use proper RCU list handlings in the list:set type.\n\nThe patch depends on c1193d9bbbd3 (netfilter: ipset: Add list flush to cancel_gc).\n\nFixes: 97f7cf1cd80e (netfilter: ipset: fix performance regression in swap operation)\nReported-by: Lion Ackermann \u003cnnamrec@gmail.com\u003e\nTested-by: Lion Ackermann \u003cnnamrec@gmail.com\u003e\nSigned-off-by: Jozsef Kadlecsik \u003ckadlec@netfilter.org\u003e\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\n" }, { "commit": "c4ab9da85b9df3692f861512fe6c9812f38b7471", "tree": "40f367fd39317bc07a0eed8f9947c0e6e711ca83", "parents": [ "36534d3c54537bf098224a32dc31397793d4594d" ], "author": { "name": "Davide Ornaghi", "email": "d.ornaghi97@gmail.com", "time": "Wed Jun 05 13:03:45 2024 +0200" }, "committer": { "name": "Pablo Neira Ayuso", "email": "pablo@netfilter.org", "time": "Tue Jun 11 18:46:04 2024 +0200" }, "message": "netfilter: nft_inner: validate mandatory meta and payload\n\nCheck for mandatory netlink attributes in payload and meta expression\nwhen used embedded from the inner expression, otherwise NULL pointer\ndereference is possible from userspace.\n\nFixes: a150d122b6bd (\"netfilter: nft_meta: add inner match support\")\nFixes: 3a07327d10a0 (\"netfilter: nft_inner: support for inner tunnel header matching\")\nSigned-off-by: Davide Ornaghi \u003cd.ornaghi97@gmail.com\u003e\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\n" }, { "commit": "36534d3c54537bf098224a32dc31397793d4594d", "tree": "74e1e08dbe4c54a9d2841bf054b86aa09d2010d9", "parents": [ "70b3c88cec7eed6080c8c37f0d2cc4bc46c08852" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Fri Jun 07 12:56:52 2024 +0000" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Mon Jun 10 19:50:10 2024 -0700" }, "message": "tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()\n\nDue to timer wheel implementation, a timer will usually fire\nafter its schedule.\n\nFor instance, for HZ\u003d1000, a timeout between 512ms and 4s\nhas a granularity of 64ms.\nFor this range of values, the extra delay could be up to 63ms.\n\nFor TCP, this means that tp-\u003ercv_tstamp may be after\ninet_csk(sk)-\u003eicsk_timeout whenever the timer interrupt\nfinally triggers, if one packet came during the extra delay.\n\nWe need to make sure tcp_rtx_probe0_timed_out() handles this case.\n\nFixes: e89688e3e978 (\"net: tcp: fix unexcepted socket die when snd_wnd is 0\")\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nCc: Menglong Dong \u003cimagedong@tencent.com\u003e\nAcked-by: Neal Cardwell \u003cncardwell@google.com\u003e\nReviewed-by: Jason Xing \u003ckerneljasonxing@gmail.com\u003e\nLink: https://lore.kernel.org/r/20240607125652.1472540-1-edumazet@google.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "70b3c88cec7eed6080c8c37f0d2cc4bc46c08852", "tree": "7e456f49d95cad47ac0462164ed4ce4734d78552", "parents": [ "44180feaccf266d9b0b28cc4ceaac019817deb5c", "74acb250e103f42be372177628f9272b6e888c49" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Mon Jun 10 19:49:13 2024 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Mon Jun 10 19:49:14 2024 -0700" }, "message": "Merge branch \u0027mptcp-various-fixes\u0027\n\nMatthieu Baerts says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nmptcp: various fixes\n\nThe different patches here are some unrelated fixes for MPTCP:\n\n- Patch 1 ensures \u0027snd_una\u0027 is initialised on connect in case of MPTCP\n fallback to TCP followed by retransmissions before the processing of\n any other incoming packets. A fix for v5.9+.\n\n- Patch 2 makes sure the RmAddr MIB counter is incremented, and only\n once per ID, upon the reception of a RM_ADDR. A fix for v5.10+.\n\n- Patch 3 doesn\u0027t update \u0027add addr\u0027 related counters if the connect()\n was not possible. A fix for v5.7+.\n\n- Patch 4 updates the mailmap file to add Geliang\u0027s new email address.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://lore.kernel.org/r/20240607-upstream-net-20240607-misc-fixes-v1-0-1ab9ddfa3d00@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "74acb250e103f42be372177628f9272b6e888c49", "tree": "7e456f49d95cad47ac0462164ed4ce4734d78552", "parents": [ "40eec1795cc27b076d49236649a29507c7ed8c2d" ], "author": { "name": "Geliang Tang", "email": "geliang@kernel.org", "time": "Fri Jun 07 17:01:51 2024 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Mon Jun 10 19:49:11 2024 -0700" }, "message": "mailmap: map Geliang\u0027s new email address\n\nJust like my other email addresses, map my new one to kernel.org\naccount too.\n\nMy new email address uses \"last name, first name\" format, which is\ndifferent from my other email addresses. This mailmap is also used\nto indicate that it is actually the same person.\n\nSuggested-by: Mat Martineau \u003cmartineau@kernel.org\u003e\nSuggested-by: Matthieu Baerts \u003cmatttbe@kernel.org\u003e\nSigned-off-by: Geliang Tang \u003cgeliang@kernel.org\u003e\nReviewed-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nLink: https://lore.kernel.org/r/20240607-upstream-net-20240607-misc-fixes-v1-4-1ab9ddfa3d00@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "40eec1795cc27b076d49236649a29507c7ed8c2d", "tree": "88f4d027ea1561c0a44a0fc5cc6740694d00103d", "parents": [ "6a09788c1a66e3d8b04b3b3e7618cc817bb60ae9" ], "author": { "name": "YonglongLi", "email": "liyonglong@chinatelecom.cn", "time": "Fri Jun 07 17:01:50 2024 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Mon Jun 10 19:49:10 2024 -0700" }, "message": "mptcp: pm: update add_addr counters after connect\n\nThe creation of new subflows can fail for different reasons. If no\nsubflow have been created using the received ADD_ADDR, the related\ncounters should not be updated, otherwise they will never be decremented\nfor events related to this ID later on.\n\nFor the moment, the number of accepted ADD_ADDR is only decremented upon\nthe reception of a related RM_ADDR, and only if the remote address ID is\ncurrently being used by at least one subflow. In other words, if no\nsubflow can be created with the received address, the counter will not\nbe decremented. In this case, it is then important not to increment\npm.add_addr_accepted counter, and not to modify pm.accept_addr bit.\n\nNote that this patch does not modify the behaviour in case of failures\nlater on, e.g. if the MP Join is dropped or rejected.\n\nThe \"remove invalid addresses\" MP Join subtest has been modified to\nvalidate this case. The broadcast IP address is added before the \"valid\"\naddress that will be used to successfully create a subflow, and the\nlimit is decreased by one: without this patch, it was not possible to\ncreate the last subflow, because:\n\n- the broadcast address would have been accepted even if it was not\n usable: the creation of a subflow to this address results in an error,\n\n- the limit of 2 accepted ADD_ADDR would have then been reached.\n\nFixes: 01cacb00b35c (\"mptcp: add netlink-based PM\")\nCc: stable@vger.kernel.org\nCo-developed-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nSigned-off-by: YonglongLi \u003cliyonglong@chinatelecom.cn\u003e\nReviewed-by: Mat Martineau \u003cmartineau@kernel.org\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nLink: https://lore.kernel.org/r/20240607-upstream-net-20240607-misc-fixes-v1-3-1ab9ddfa3d00@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "6a09788c1a66e3d8b04b3b3e7618cc817bb60ae9", "tree": "bbb8d866207d76defe68fc972592c8e538669208", "parents": [ "8031b58c3a9b1db3ef68b3bd749fbee2e1e1aaa3" ], "author": { "name": "YonglongLi", "email": "liyonglong@chinatelecom.cn", "time": "Fri Jun 07 17:01:49 2024 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Mon Jun 10 19:49:10 2024 -0700" }, "message": "mptcp: pm: inc RmAddr MIB counter once per RM_ADDR ID\n\nThe RmAddr MIB counter is supposed to be incremented once when a valid\nRM_ADDR has been received. Before this patch, it could have been\nincremented as many times as the number of subflows connected to the\nlinked address ID, so it could have been 0, 1 or more than 1.\n\nThe \"RmSubflow\" is incremented after a local operation. In this case,\nit is normal to tied it with the number of subflows that have been\nactually removed.\n\nThe \"remove invalid addresses\" MP Join subtest has been modified to\nvalidate this case. A broadcast IP address is now used instead: the\nclient will not be able to create a subflow to this address. The\nconsequence is that when receiving the RM_ADDR with the ID attached to\nthis broadcast IP address, no subflow linked to this ID will be found.\n\nFixes: 7a7e52e38a40 (\"mptcp: add RM_ADDR related mibs\")\nCc: stable@vger.kernel.org\nCo-developed-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nSigned-off-by: YonglongLi \u003cliyonglong@chinatelecom.cn\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nLink: https://lore.kernel.org/r/20240607-upstream-net-20240607-misc-fixes-v1-2-1ab9ddfa3d00@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "8031b58c3a9b1db3ef68b3bd749fbee2e1e1aaa3", "tree": "cd7a26a80cd752e166482cbed0fe7b4d56a13f24", "parents": [ "44180feaccf266d9b0b28cc4ceaac019817deb5c" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Fri Jun 07 17:01:48 2024 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Mon Jun 10 19:49:10 2024 -0700" }, "message": "mptcp: ensure snd_una is properly initialized on connect\n\nThis is strictly related to commit fb7a0d334894 (\"mptcp: ensure snd_nxt\nis properly initialized on connect\"). It turns out that syzkaller can\ntrigger the retransmit after fallback and before processing any other\nincoming packet - so that snd_una is still left uninitialized.\n\nAddress the issue explicitly initializing snd_una together with snd_nxt\nand write_seq.\n\nSuggested-by: Mat Martineau \u003cmartineau@kernel.org\u003e\nFixes: 8fd738049ac3 (\"mptcp: fallback in case of simultaneous connect\")\nCc: stable@vger.kernel.org\nReported-by: Christoph Paasch \u003ccpaasch@apple.com\u003e\nCloses: https://github.com/multipath-tcp/mptcp_net-next/issues/485\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\nReviewed-by: Mat Martineau \u003cmartineau@kernel.org\u003e\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nLink: https://lore.kernel.org/r/20240607-upstream-net-20240607-misc-fixes-v1-1-1ab9ddfa3d00@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "44180feaccf266d9b0b28cc4ceaac019817deb5c", "tree": "17cae917ba6f0002a17d93e878861926da9405f1", "parents": [ "93792130a9387b26d825aa78947e4065deb95d15" ], "author": { "name": "Johannes Berg", "email": "johannes.berg@intel.com", "time": "Fri Jun 07 17:53:32 2024 +0200" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Mon Jun 10 19:36:49 2024 -0700" }, "message": "net/sched: initialize noop_qdisc owner\n\nWhen the noop_qdisc owner isn\u0027t initialized, then it will be 0,\nso packets will erroneously be regarded as having been subject\nto recursion as long as only CPU 0 queues them. For non-SMP,\nthat\u0027s all packets, of course. This causes a change in what\u0027s\nreported to userspace, normally noop_qdisc would drop packets\nsilently, but with this change the syscall returns -ENOBUFS if\nRECVERR is also set on the socket.\n\nFix this by initializing the owner field to -1, just like it\nwould be for dynamically allocated qdiscs by qdisc_alloc().\n\nFixes: 0f022d32c3ec (\"net/sched: Fix mirred deadlock on device recursion\")\nSigned-off-by: Johannes Berg \u003cjohannes.berg@intel.com\u003e\nReviewed-by: Eric Dumazet \u003cedumazet@google.com\u003e\nLink: https://lore.kernel.org/r/20240607175340.786bfb938803.I493bf8422e36be4454c08880a8d3703cea8e421a@changeid\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "7124a8982b621e1a8af81c17f44b90587cdd161c", "tree": "3c1576da4d273fc8d2c27f165b98cebc08d4f533", "parents": [ "b79922009214e6ab23c07db32a5606a45710f86e" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Mon Jun 10 20:48:41 2024 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Mon Jun 10 20:50:14 2024 -0400" }, "message": "bcachefs: Add missing bch_inode_info.ei_flags init\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "b79922009214e6ab23c07db32a5606a45710f86e", "tree": "9f80a63b165cb4924b0645d1089cbcda54455b85", "parents": [ "9432e90df1b8a544f220fd455b2fa39eed8a535d" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Sat Jun 08 17:36:24 2024 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Mon Jun 10 13:17:16 2024 -0400" }, "message": "bcachefs: Add missing synchronize_srcu_expedited() call when shutting down\n\nWe use the polling interface to srcu for tracking pending frees; when\nshutting down we don\u0027t need to wait for an srcu barrier to free them,\nbut SRCU still gets confused if we shutdown with an outstanding grace\nperiod.\n\nReported-by: syzbot+6a038377f0a594d7d44e@syzkaller.appspotmail.com\nReported-by: syzbot+0ece6edfd05ed20e32d9@syzkaller.appspotmail.com\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "9432e90df1b8a544f220fd455b2fa39eed8a535d", "tree": "b1360af4e6c3d4cd8d4a52e6b38311d405b939de", "parents": [ "9c4acd19bbff5db4629c193366f82960e38d1c6f" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Thu Jun 06 15:06:22 2024 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Mon Jun 10 13:17:16 2024 -0400" }, "message": "bcachefs: Check for invalid bucket from bucket_gen(), gc_bucket()\n\nTurn more asserts into proper recoverable error paths.\n\nReported-by: syzbot+246b47da27f8e7e7d6fb@syzkaller.appspotmail.com\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "9c4acd19bbff5db4629c193366f82960e38d1c6f", "tree": "ee853ec9fa0cfa2587fbd9aac8cb0af453af1963", "parents": [ "e0cb5722e112811d32d600ef750f9b39e6f684ca" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Thu Jun 06 14:50:06 2024 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Mon Jun 10 13:17:16 2024 -0400" }, "message": "bcachefs: Replace bucket_valid() asserts in bucket lookup with proper checks\n\nThe bucket_gens array and gc_buckets array known their own size; we\nshould be using those members, and returning an error.\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "e0cb5722e112811d32d600ef750f9b39e6f684ca", "tree": "dbe94ecf3ab34725fa9e8d6208433fb51fa9a744", "parents": [ "f9035b0ce60cfaf8abd7e1cd5c55690c739aaaf6" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Fri Jun 07 21:02:06 2024 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Mon Jun 10 13:17:16 2024 -0400" }, "message": "bcachefs: Fix snapshot_create_lock lock ordering\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nWARNING: possible circular locking dependency detected\n6.10.0-rc2-ktest-00018-gebd1d148b278 #144 Not tainted\n------------------------------------------------------\nfio/1345 is trying to acquire lock:\nffff88813e200ab8 (\u0026c-\u003esnapshot_create_lock){++++}-{3:3}, at: bch2_truncate+0x76/0xf0\n\nbut task is already holding lock:\nffff888105a1fa38 (\u0026sb-\u003es_type-\u003ei_mutex_key#13){+.+.}-{3:3}, at: do_truncate+0x7b/0xc0\n\nwhich lock already depends on the new lock.\n\nthe existing dependency chain (in reverse order) is:\n\n-\u003e #2 (\u0026sb-\u003es_type-\u003ei_mutex_key#13){+.+.}-{3:3}:\n down_write+0x3d/0xd0\n bch2_write_iter+0x1c0/0x10f0\n vfs_write+0x24a/0x560\n __x64_sys_pwrite64+0x77/0xb0\n x64_sys_call+0x17e5/0x1ab0\n do_syscall_64+0x68/0x130\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n\n-\u003e #1 (sb_writers#10){.+.+}-{0:0}:\n mnt_want_write+0x4a/0x1d0\n filename_create+0x69/0x1a0\n user_path_create+0x38/0x50\n bch2_fs_file_ioctl+0x315/0xbf0\n __x64_sys_ioctl+0x297/0xaf0\n x64_sys_call+0x10cb/0x1ab0\n do_syscall_64+0x68/0x130\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n\n-\u003e #0 (\u0026c-\u003esnapshot_create_lock){++++}-{3:3}:\n __lock_acquire+0x1445/0x25b0\n lock_acquire+0xbd/0x2b0\n down_read+0x40/0x180\n bch2_truncate+0x76/0xf0\n bchfs_truncate+0x240/0x3f0\n bch2_setattr+0x7b/0xb0\n notify_change+0x322/0x4b0\n do_truncate+0x8b/0xc0\n do_ftruncate+0x110/0x270\n __x64_sys_ftruncate+0x43/0x80\n x64_sys_call+0x1373/0x1ab0\n do_syscall_64+0x68/0x130\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n\nother info that might help us debug this:\n\nChain exists of:\n \u0026c-\u003esnapshot_create_lock --\u003e sb_writers#10 --\u003e \u0026sb-\u003es_type-\u003ei_mutex_key#13\n\n Possible unsafe locking scenario:\n\n CPU0 CPU1\n ---- ----\n lock(\u0026sb-\u003es_type-\u003ei_mutex_key#13);\n lock(sb_writers#10);\n lock(\u0026sb-\u003es_type-\u003ei_mutex_key#13);\n rlock(\u0026c-\u003esnapshot_create_lock);\n\n *** DEADLOCK ***\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "f9035b0ce60cfaf8abd7e1cd5c55690c739aaaf6", "tree": "4372b255a512a9c9edecf18901299bb0825f777f", "parents": [ "bf2b356afdcafa18db1b409f7039059d1fd6f25f" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Thu Jun 06 21:59:12 2024 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Mon Jun 10 13:17:16 2024 -0400" }, "message": "bcachefs: Fix refcount leak in check_fix_ptrs()\n\nfsck_err() does a goto fsck_err on error; factor out check_fix_ptr() so\nthat our error label can drop our device ref.\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "bf2b356afdcafa18db1b409f7039059d1fd6f25f", "tree": "009ba8cab984853f0b950e09fb1e5ea77cf0a73e", "parents": [ "2760bfe38826f65b1806f1cc62744404b5917dea" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Fri Jun 07 14:25:18 2024 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Mon Jun 10 13:17:16 2024 -0400" }, "message": "bcachefs: Leave a buffer in the btree key cache to avoid lock thrashing\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "2760bfe38826f65b1806f1cc62744404b5917dea", "tree": "a674dde0d7c4149127fd4a66a1f79bd5cf9d35bb", "parents": [ "9ac3e660cac3e29cfc817b6a23735b70f12bd16a" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Thu Jun 06 20:01:34 2024 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Mon Jun 10 13:17:16 2024 -0400" }, "message": "bcachefs: Fix reporting of freed objects from key cache shrinker\n\nWe count objects as freed when we move them to the srcu-pending lists\nbecause we\u0027re doing the equivalent of a kfree_srcu(); the only\ndifference is managing the pending list ourself means we can allocate\nfrom the pending list.\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "9ac3e660cac3e29cfc817b6a23735b70f12bd16a", "tree": "6380b95120a38de465c446a63c5c0040673c8c74", "parents": [ "bc65e98e68dac2c0b588e67ea75ee8674c208fc7" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Thu Jun 06 19:30:41 2024 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Mon Jun 10 13:17:16 2024 -0400" }, "message": "bcachefs: set sb-\u003es_shrinker-\u003eseeks \u003d 0\n\ninodes and dentries are still present in the btree node cache, in much\nmore compact form\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "bc65e98e68dac2c0b588e67ea75ee8674c208fc7", "tree": "d7b6efce697bd3ccd15d9bc698f55044b5fde595", "parents": [ "5ae67abcdfdfa49de84be00320ffe8a669ef674f" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Thu Jun 06 19:12:11 2024 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Mon Jun 10 13:17:16 2024 -0400" }, "message": "bcachefs: increase key cache shrinker batch size\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "5ae67abcdfdfa49de84be00320ffe8a669ef674f", "tree": "9cfe080089fc9f1f5978def0ab34cd62dd9567ab", "parents": [ "26447d224a7f48f669bf95a98fa29c8f50da4d63" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Thu Jun 06 18:56:59 2024 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Mon Jun 10 13:17:16 2024 -0400" }, "message": "bcachefs: Enable automatic shrinking for rhashtables\n\nSince the key cache shrinker walks the rhashtable, a mostly empty\nrhashtable leads to really nasty reclaim performance issues.\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "26447d224a7f48f669bf95a98fa29c8f50da4d63", "tree": "9f92c6997df2128ec440d12ad416478323b31f3e", "parents": [ "dab1870439a1176969c5bf06247e088ad0a3551d" ], "author": { "name": "Hongbo Li", "email": "lihongbo22@huawei.com", "time": "Mon Jun 03 21:23:35 2024 +0800" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Mon Jun 10 13:17:16 2024 -0400" }, "message": "bcachefs: fix the display format for show-super\n\nThere are three keys displayed in non-uniform format.\nLet\u0027s fix them.\n\n[Before]\n```\nLabel:\ttestbcachefs\nVersion:\t1.9: (unknown version)\nVersion upgrade complete:\t0.0: (unknown version)\n```\n\n[After]\n```\nLabel:\t\t\t\t\ttestbcachefs\nVersion:\t\t\t\t1.9: (unknown version)\nVersion upgrade complete:\t\t0.0: (unknown version)\n```\n\nFixes: 7423330e30ab (\"bcachefs: prt_printf() now respects \\r\\n\\t\")\nSigned-off-by: Hongbo Li \u003clihongbo22@huawei.com\u003e\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "dab1870439a1176969c5bf06247e088ad0a3551d", "tree": "dba78f0d4a50a699ee25513ad4c17fdfbaf2b46a", "parents": [ "04f635ede85b2e7457f3029b9179079a8ac42ff4" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 05 21:45:24 2024 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Mon Jun 10 13:17:16 2024 -0400" }, "message": "bcachefs: fix stack frame size in fsck.c\n\nfsck.c always runs top of the stack so we\u0027re not too concerned here;\nnoinline_for_stack is sufficient\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "04f635ede85b2e7457f3029b9179079a8ac42ff4", "tree": "013f9a9717808058d2ac62ef5500696f10e7fd8d", "parents": [ "1c8cc24eef4a0e824f75e38f82766e4baede24ca" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Thu Jun 06 14:02:11 2024 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Mon Jun 10 13:17:16 2024 -0400" }, "message": "bcachefs: Delete incorrect BTREE_ID_NR assertion\n\nfor forwards compat we now explicitly allow mounting and using\nfilesystems with unknown btrees, and we have to walk them for fsck.\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "1c8cc24eef4a0e824f75e38f82766e4baede24ca", "tree": "08a7e2ba8180e03177b45a1821b323d34d45cd4d", "parents": [ "161f73c2c7d061a78390388811e3a6d11e99ce9d" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 05 21:16:29 2024 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Mon Jun 10 13:17:15 2024 -0400" }, "message": "bcachefs: Fix incorrect error handling found_btree_node_is_readable()\n\nerror handling here is slightly odd, which is why we were accidently\ncalling evict() on an error pointer\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "161f73c2c7d061a78390388811e3a6d11e99ce9d", "tree": "466c81634b845b48c7dc407e97c58cf750df957f", "parents": [ "83a7eefedc9b56fe7bfeff13b6c7356688ffa670" ], "author": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Wed Jun 05 11:08:20 2024 -0400" }, "committer": { "name": "Kent Overstreet", "email": "kent.overstreet@linux.dev", "time": "Mon Jun 10 13:17:15 2024 -0400" }, "message": "bcachefs: Split out btree_write_submit_wq\n\nSplit the workqueues for btree read completions and btree write\nsubmissions; we don\u0027t want concurrency control on btree read\ncompletions, but we do want concurrency control on write submissions,\nelse blocking in submit_bio() will cause a ton of kworkers to be\nallocated.\n\nSigned-off-by: Kent Overstreet \u003ckent.overstreet@linux.dev\u003e\n" }, { "commit": "c695439d198d30e10553a3b98360c5efe77b6903", "tree": "1c1da4a709f7b019564dcda3bbd62100d2a8c90e", "parents": [ "806a5198c05987b748b50f3d0c0cfb3d417381a4" ], "author": { "name": "Pauli Virtanen", "email": "pav@iki.fi", "time": "Sun Jun 09 18:06:20 2024 +0300" }, "committer": { "name": "Luiz Augusto von Dentz", "email": "luiz.von.dentz@intel.com", "time": "Mon Jun 10 09:48:30 2024 -0400" }, "message": "Bluetooth: fix connection setup in l2cap_connect\n\nThe amp_id argument of l2cap_connect() was removed in\ncommit 84a4bb6548a2 (\"Bluetooth: HCI: Remove HCI_AMP support\")\n\nIt was always called with amp_id \u003d\u003d 0, i.e. AMP_ID_BREDR \u003d\u003d 0x00 (ie.\nnon-AMP controller). In the above commit, the code path for amp_id !\u003d 0\nwas preserved, although it should have used the amp_id \u003d\u003d 0 one.\n\nRestore the previous behavior of the non-AMP code path, to fix problems\nwith L2CAP connections.\n\nFixes: 84a4bb6548a2 (\"Bluetooth: HCI: Remove HCI_AMP support\")\nSigned-off-by: Pauli Virtanen \u003cpav@iki.fi\u003e\nSigned-off-by: Luiz Augusto von Dentz \u003cluiz.von.dentz@intel.com\u003e\n" }, { "commit": "806a5198c05987b748b50f3d0c0cfb3d417381a4", "tree": "43938df711ab7e047496ff01b45042dac4de6891", "parents": [ "86fbd9f63a6b42b8f158361334f5a25762aea358" ], "author": { "name": "Luiz Augusto von Dentz", "email": "luiz.von.dentz@intel.com", "time": "Mon May 20 16:03:07 2024 -0400" }, "committer": { "name": "Luiz Augusto von Dentz", "email": "luiz.von.dentz@intel.com", "time": "Mon Jun 10 09:48:27 2024 -0400" }, "message": "Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ\n\nThis removes the bogus check for max \u003e hcon-\u003ele_conn_max_interval since\nthe later is just the initial maximum conn interval not the maximum the\nstack could support which is really 3200\u003d4000ms.\n\nIn order to pass GAP/CONN/CPUP/BV-05-C one shall probably enter values\nof the following fields in IXIT that would cause hci_check_conn_params\nto fail:\n\nTSPX_conn_update_int_min\nTSPX_conn_update_int_max\nTSPX_conn_update_peripheral_latency\nTSPX_conn_update_supervision_timeout\n\nLink: https://github.com/bluez/bluez/issues/847\nFixes: e4b019515f95 (\"Bluetooth: Enforce validation on max value of connection interval\")\nSigned-off-by: Luiz Augusto von Dentz \u003cluiz.von.dentz@intel.com\u003e\n" }, { "commit": "86fbd9f63a6b42b8f158361334f5a25762aea358", "tree": "90f992c3c1194c6d3c4984cc392e9e4a41dd5191", "parents": [ "93792130a9387b26d825aa78947e4065deb95d15" ], "author": { "name": "Luiz Augusto von Dentz", "email": "luiz.von.dentz@intel.com", "time": "Wed May 15 10:32:01 2024 -0400" }, "committer": { "name": "Luiz Augusto von Dentz", "email": "luiz.von.dentz@intel.com", "time": "Mon Jun 10 09:48:25 2024 -0400" }, "message": "Bluetooth: hci_sync: Fix not using correct handle\n\nWhen setting up an advertisement the code shall always attempt to use\nthe handle set by the instance since it may not be equal to the instance\nID.\n\nFixes: e77f43d531af (\"Bluetooth: hci_core: Fix not handling hdev-\u003ele_num_of_adv_sets\u003d1\")\nSigned-off-by: Luiz Augusto von Dentz \u003cluiz.von.dentz@intel.com\u003e\n" }, { "commit": "93792130a9387b26d825aa78947e4065deb95d15", "tree": "e1b8faa6ea4f1490174a1f4527d07a7e406baf83", "parents": [ "d029edefed39647c797c2710aedd9d31f84c069e", "791b4089e326271424b78f2fae778b20e53d071b" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jun 10 13:18:09 2024 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jun 10 13:18:09 2024 +0100" }, "message": "Merge branch \u0027geneve-fixes\u0027\n\nTariq Toukan says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\ngeneve fixes\n\nThis small patchset by Gal provides bug fixes to the geneve tunnels flows.\n\nPatch 1 fixes an incorrect value returned by the inner network header\noffset helper.\nPatch 2 fixes an issue inside the mlx5e tunneling flow. It \u0027happened\u0027 to\nbe harmless so far, before applying patch 1.\n\nSeries generated against:\ncommit d30d0e49da71 (\"Merge tag \u0027net-6.10-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net\")\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "791b4089e326271424b78f2fae778b20e53d071b", "tree": "e1b8faa6ea4f1490174a1f4527d07a7e406baf83", "parents": [ "c6ae073f5903f6c6439d0ac855836a4da5c0a701" ], "author": { "name": "Gal Pressman", "email": "gal@nvidia.com", "time": "Thu Jun 06 23:32:49 2024 +0300" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jun 10 13:18:09 2024 +0100" }, "message": "net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets\n\nMove the vxlan_features_check() call to after we verified the packet is\na tunneled VXLAN packet.\n\nWithout this, tunneled UDP non-VXLAN packets (for ex. GENENVE) might\nwrongly not get offloaded.\nIn some cases, it worked by chance as GENEVE header is the same size as\nVXLAN, but it is obviously incorrect.\n\nFixes: e3cfc7e6b7bd (\"net/mlx5e: TX, Add geneve tunnel stateless offload support\")\nSigned-off-by: Gal Pressman \u003cgal@nvidia.com\u003e\nReviewed-by: Dragos Tatulea \u003cdtatulea@nvidia.com\u003e\nSigned-off-by: Tariq Toukan \u003ctariqt@nvidia.com\u003e\nReviewed-by: Wojciech Drewek \u003cwojciech.drewek@intel.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c6ae073f5903f6c6439d0ac855836a4da5c0a701", "tree": "ec391872380c1b3b0b5f0dc6b1d42277ae341232", "parents": [ "d029edefed39647c797c2710aedd9d31f84c069e" ], "author": { "name": "Gal Pressman", "email": "gal@nvidia.com", "time": "Thu Jun 06 23:32:48 2024 +0300" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jun 10 13:18:08 2024 +0100" }, "message": "geneve: Fix incorrect inner network header offset when innerprotoinherit is set\n\nWhen innerprotoinherit is set, the tunneled packets do not have an inner\nEthernet header.\nChange \u0027maclen\u0027 to not always assume the header length is ETH_HLEN, as\nthere might not be a MAC header.\n\nThis resolves issues with drivers (e.g. mlx5, in\nmlx5e_tx_tunnel_accel()) who rely on the skb inner network header offset\nto be correct, and use it for TX offloads.\n\nFixes: d8a6213d70ac (\"geneve: fix header validation in geneve[6]_xmit_skb\")\nSigned-off-by: Gal Pressman \u003cgal@nvidia.com\u003e\nSigned-off-by: Tariq Toukan \u003ctariqt@nvidia.com\u003e\nReviewed-by: Wojciech Drewek \u003cwojciech.drewek@intel.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d029edefed39647c797c2710aedd9d31f84c069e", "tree": "f531355004a616089af90756121b6c208a12edc8", "parents": [ "d37fe4255abe8e7b419b90c5847e8ec2b8debb08" ], "author": { "name": "Andy Shevchenko", "email": "andriy.shevchenko@linux.intel.com", "time": "Thu Jun 06 19:13:03 2024 +0300" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jun 10 13:12:14 2024 +0100" }, "message": "net dsa: qca8k: fix usages of device_get_named_child_node()\n\nThe documentation for device_get_named_child_node() mentions this\nimportant point:\n\n\"\nThe caller is responsible for calling fwnode_handle_put() on the\nreturned fwnode pointer.\n\"\n\nAdd fwnode_handle_put() to avoid leaked references.\n\nFixes: 1e264f9d2918 (\"net: dsa: qca8k: add LEDs basic support\")\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nSigned-off-by: Andy Shevchenko \u003candriy.shevchenko@linux.intel.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d37fe4255abe8e7b419b90c5847e8ec2b8debb08", "tree": "b673e099e58133c68a248c87d757e8a43958dd5b", "parents": [ "5add2f7288468f35a374620dabf126c13baaea9c" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Thu Jun 06 15:46:51 2024 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jun 10 13:11:22 2024 +0100" }, "message": "tcp: fix race in tcp_v6_syn_recv_sock()\n\ntcp_v6_syn_recv_sock() calls ip6_dst_store() before\ninet_sk(newsk)-\u003epinet6 has been set up.\n\nThis means ip6_dst_store() writes over the parent (listener)\nnp-\u003edst_cookie.\n\nThis is racy because multiple threads could share the same\nparent and their final np-\u003edst_cookie could be wrong.\n\nMove ip6_dst_store() call after inet_sk(newsk)-\u003epinet6\nhas been changed and after the copy of parent ipv6_pinfo.\n\nFixes: e994b2f0fb92 (\"tcp: do not lock listener to process SYN packets\")\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "594ce0b8a998aa4d05827cd7c0d0dcec9a1e3ae2", "tree": "070bd60a8fda15e5f47339d3f6888a0fe2ca6fe9", "parents": [ "616501eccb58615f8f352a29239ea6c6fc5e6546", "e3cf20e5c68df604315ab30bdbe15dc8a5da556b" ], "author": { "name": "Russell King (Oracle)", "email": "rmk+kernel@armlinux.org.uk", "time": "Mon Jun 10 12:03:21 2024 +0100" }, "committer": { "name": "Russell King (Oracle)", "email": "rmk+kernel@armlinux.org.uk", "time": "Mon Jun 10 12:03:21 2024 +0100" }, "message": "Merge topic branches \u0027clkdev\u0027 and \u0027fixes\u0027 into for-linus\n" }, { "commit": "e3cf20e5c68df604315ab30bdbe15dc8a5da556b", "tree": "8627483dbdce74ece6dd84763594e69ac10024f0", "parents": [ "1613e604df0cd359cf2a7fbd9be7a0bcfacfabd0" ], "author": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Tue Jun 04 22:32:34 2024 +0100" }, "committer": { "name": "Russell King (Oracle)", "email": "rmk+kernel@armlinux.org.uk", "time": "Mon Jun 10 12:00:27 2024 +0100" }, "message": "ARM: 9405/1: ftrace: Don\u0027t assume stack frames are contiguous in memory\n\nThe frame pointer unwinder relies on a standard layout of the stack\nframe, consisting of (in downward order)\n\n Calling frame:\n PC \u003c---------+\n LR |\n SP |\n FP |\n .. locals .. |\n Callee frame: |\n PC |\n LR |\n SP |\n FP ----------+\n\nwhere after storing its previous value on the stack, FP is made to point\nat the location of PC in the callee stack frame, using the canonical\nprologue:\n\n mov ip, sp\n stmdb sp!, {fp, ip, lr, pc}\n sub fp, ip, #4\n\nThe ftrace code assumes that this activation record is pushed first, and\nthat any stack space for locals is allocated below this. Strict\nadherence to this would imply that the caller\u0027s value of SP at the time\nof the function call can always be obtained by adding 4 to FP (which\npoints to PC in the callee frame).\n\nHowever, recent versions of GCC appear to deviate from this rule, and so\nthe only reliable way to obtain the caller\u0027s value of SP is to read it\nfrom the activation record. Since this involves a read from memory\nrather than simple arithmetic, we need to use the uaccess API here which\nprotects against inadvertent data aborts resulting from attempts to\ndereference bogus FP values.\n\nThe plain uaccess API is ftrace instrumented itself, so to avoid\nunbounded recursion, use the __get_kernel_nofault() primitive directly.\n\nCloses: https://lore.kernel.org/all/alp44tukzo6mvcwl4ke4ehhmojrqnv6xfcdeuliybxfjfvgd3e@gpjvwj33cc76\n\nCloses: https://lore.kernel.org/all/d870c149-4363-43de-b0ea-7125dec5608e@broadcom.com/\n\nReported-by: Uwe Kleine-König \u003cu.kleine-koenig@pengutronix.de\u003e\nReported-by: Justin Chen \u003cjustin.chen@broadcom.com\u003e\nTested-by: Thorsten Scherer \u003ct.scherer@eckelmann.de\u003e\nReviewed-by: Linus Walleij \u003clinus.walleij@linaro.org\u003e\nSigned-off-by: Ard Biesheuvel \u003cardb@kernel.org\u003e\nSigned-off-by: Russell King (Oracle) \u003crmk+kernel@armlinux.org.uk\u003e\n" }, { "commit": "5add2f7288468f35a374620dabf126c13baaea9c", "tree": "339666a05cbfd21809538d016bc81df4f4d19e6c", "parents": [ "0579f27249047006a818e463ee66a6c314d04cea" ], "author": { "name": "David Wei", "email": "dw@davidwei.uk", "time": "Thu Jun 06 07:59:08 2024 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jun 10 11:51:04 2024 +0100" }, "message": "netdevsim: fix backwards compatibility in nsim_get_iflink()\n\nThe default ndo_get_iflink() implementation returns the current ifindex\nof the netdev. But the overridden nsim_get_iflink() returns 0 if the\ncurrent nsim is not linked, breaking backwards compatibility for\nuserspace that depend on this behaviour.\n\nFix the problem by returning the current ifindex if not linked to a\npeer.\n\nFixes: 8debcf5832c3 (\"netdevsim: add ndo_get_iflink() implementation\")\nReported-by: Yu Watanabe \u003cwatanabe.yu@gmail.com\u003e\nSuggested-by: Yu Watanabe \u003cwatanabe.yu@gmail.com\u003e\nSigned-off-by: David Wei \u003cdw@davidwei.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "83a7eefedc9b56fe7bfeff13b6c7356688ffa670", "tree": "5f2e5cdee3e379d8951a4dd3c21b3436bba99f15", "parents": [ "b8481381d4e2549f06812eb6069198144696340c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jun 09 14:19:43 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jun 09 14:19:43 2024 -0700" }, "message": "Linux 6.10-rc3\n" }, { "commit": "b8481381d4e2549f06812eb6069198144696340c", "tree": "f89a2db5e640f6f601b40ca6a4d5e9028e00bcb1", "parents": [ "637c2dfcd9f5e194ab2e879704460840edcde537", "ca9680821dfec73c9100860bda4fab1f1309722e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jun 09 09:04:51 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jun 09 09:04:51 2024 -0700" }, "message": "Merge tag \u0027perf-tools-fixes-for-v6.10-2-2024-06-09\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/perf/perf-tools\n\nPull perf tools fixes from Arnaldo Carvalho de Melo:\n\n - Update copies of kernel headers, which resulted in support for the\n new \u0027mseal\u0027 syscall, SUBVOL statx return mask bit, RISC-V and PPC\n prctls, fcntl\u0027s DUPFD_QUERY, POSTED_MSI_NOTIFICATION IRQ vector,\n \u0027map_shadow_stack\u0027 syscall for x86-32.\n\n - Revert perf.data record memory allocation optimization that ended up\n causing a regression, work is being done to re-introduce it in the\n next merge window.\n\n - Fix handling of minimal vmlinux.h file used with BPF\u0027s CO-RE when\n interrupting the build.\n\n* tag \u0027perf-tools-fixes-for-v6.10-2-2024-06-09\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/perf/perf-tools:\n perf bpf: Fix handling of minimal vmlinux.h file when interrupting the build\n Revert \"perf record: Reduce memory for recording PERF_RECORD_LOST_SAMPLES event\"\n tools headers arm64: Sync arm64\u0027s cputype.h with the kernel sources\n tools headers uapi: Sync linux/stat.h with the kernel sources to pick STATX_SUBVOL\n tools headers UAPI: Update i915_drm.h with the kernel sources\n tools headers UAPI: Sync kvm headers with the kernel sources\n tools arch x86: Sync the msr-index.h copy with the kernel sources\n tools headers: Update the syscall tables and unistd.h, mostly to support the new \u0027mseal\u0027 syscall\n perf trace beauty: Update the arch/x86/include/asm/irq_vectors.h copy with the kernel sources to pick POSTED_MSI_NOTIFICATION\n perf beauty: Update copy of linux/socket.h with the kernel sources\n tools headers UAPI: Sync fcntl.h with the kernel sources to pick F_DUPFD_QUERY\n tools headers UAPI: Sync linux/prctl.h with the kernel sources\n tools include UAPI: Sync linux/stat.h with the kernel sources\n" }, { "commit": "637c2dfcd9f5e194ab2e879704460840edcde537", "tree": "93f2c05c6b34e64dede0da4481ac7d2866682f84", "parents": [ "771ed66105de9106a6f3e4311e06451881cdac5e", "f8367a74aebf88dc8b58a0db6a6c90b4cb8fc9d3" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jun 09 08:49:13 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jun 09 08:49:13 2024 -0700" }, "message": "Merge tag \u0027edac_urgent_for_v6.10_rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ras/ras\n\nPull EDAC fixes from Borislav Petkov:\n\n - Convert PCI core error codes to proper error numbers since latter get\n propagated all the way up to the module loading functions\n\n* tag \u0027edac_urgent_for_v6.10_rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ras/ras:\n EDAC/igen6: Convert PCIBIOS_* return codes to errnos\n EDAC/amd64: Convert PCIBIOS_* return codes to errnos\n" }, { "commit": "0579f27249047006a818e463ee66a6c314d04cea", "tree": "f49a7d04813989d0bbffaa8b4fcb435307cfdd29", "parents": [ "c44711b78608c98a3e6b49ce91678cd0917d5349" ], "author": { "name": "Sagar Cheluvegowda", "email": "quic_scheluve@quicinc.com", "time": "Wed Jun 05 11:57:18 2024 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Jun 09 15:52:52 2024 +0100" }, "message": "net: stmmac: dwmac-qcom-ethqos: Configure host DMA width\n\nCommit 070246e4674b (\"net: stmmac: Fix for mismatched host/device DMA\naddress width\") added support in the stmmac driver for platform drivers\nto indicate the host DMA width, but left it up to authors of the\nspecific platforms to indicate if their width differed from the addr64\nregister read from the MAC itself.\n\nQualcomm\u0027s EMAC4 integration supports only up to 36 bit width (as\nopposed to the addr64 register indicating 40 bit width). Let\u0027s indicate\nthat in the platform driver to avoid a scenario where the driver will\nallocate descriptors of size that is supported by the CPU which in our\ncase is 36 bit, but as the addr64 register is still capable of 40 bits\nthe device will use two descriptors as one address.\n\nFixes: 8c4d92e82d50 (\"net: stmmac: dwmac-qcom-ethqos: add support for emac4 on sa8775p platforms\")\nSigned-off-by: Sagar Cheluvegowda \u003cquic_scheluve@quicinc.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nReviewed-by: Andrew Halaney \u003cahalaney@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "771ed66105de9106a6f3e4311e06451881cdac5e", "tree": "ab1870ddd7f82baf6ea6542b672267185d87d054", "parents": [ "c5dbc2ed0006d1a910b5496202a280138ce596e4", "2607133196c35f31892ee199ce7ffa717bea4ad1" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 19:14:02 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 19:14:02 2024 -0700" }, "message": "Merge tag \u0027clk-fixes-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux\n\nPull clk fix from Stephen Boyd:\n \"One fix for the SiFive PRCI clocks so that the device boots again.\n\n This driver was registering clkdev lookups that were always going to\n be useless. This wasn\u0027t a problem until clkdev started returning an\n error in these cases, causing this driver to fail probe, and thus boot\n to fail because clks are essential for most drivers. The fix is\n simple, don\u0027t use clkdev because this is a DT based system where\n clkdev isn\u0027t used\"\n\n* tag \u0027clk-fixes-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux:\n clk: sifive: Do not register clkdevs for PRCI clocks\n" }, { "commit": "c5dbc2ed0006d1a910b5496202a280138ce596e4", "tree": "ef71203a29389a98276fc24e999065a450538381", "parents": [ "061d1af7b0305227182bd9da60c7706c079348b7", "a88d60903696c01de577558080ec4fc738a70475" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 19:07:18 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 19:07:18 2024 -0700" }, "message": "Merge tag \u00276.10-rc2-smb3-client-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6\n\nPull smb client fixes from Steve French:\n \"Two small smb3 client fixes:\n\n - fix deadlock in umount\n\n - minor cleanup due to netfs change\"\n\n* tag \u00276.10-rc2-smb3-client-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6:\n cifs: Don\u0027t advance the I/O iterator before terminating subrequest\n smb: client: fix deadlock in smb2_find_smb_tcon()\n" }, { "commit": "061d1af7b0305227182bd9da60c7706c079348b7", "tree": "e7e9948c1a629bc86c36e22ebf5c22cff36ebbbc", "parents": [ "329f70c5beaefe0e1197b7919e776dc005213b59", "a3a5a37efba11b7cf1a86abe7bccfbcdb521764e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 10:48:11 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 10:48:11 2024 -0700" }, "message": "Merge tag \u0027for-linus-2024060801\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid\n\nPull HID fixes from Benjamin Tissoires:\n\n - fix potential read out of bounds in hid-asus (Andrew Ballance)\n\n - fix endian-conversion on little endian systems in intel-ish-hid (Arnd\n Bergmann)\n\n - A couple of new input event codes (Aseda Aboagye)\n\n - errors handling fixes in hid-nvidia-shield (Chen Ni), hid-nintendo\n (Christophe JAILLET), hid-logitech-dj (José Expósito)\n\n - current leakage fix while the device is in suspend on a i2c-hid\n laptop (Johan Hovold)\n\n - other assorted smaller fixes and device ID / quirk entry additions\n\n* tag \u0027for-linus-2024060801\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid:\n HID: Ignore battery for ELAN touchscreens 2F2C and 4116\n HID: i2c-hid: elan: fix reset suspend current leakage\n dt-bindings: HID: i2c-hid: elan: add \u0027no-reset-on-power-off\u0027 property\n dt-bindings: HID: i2c-hid: elan: add Elan eKTH5015M\n dt-bindings: HID: i2c-hid: add dedicated Ilitek ILI2901 schema\n input: Add support for \"Do Not Disturb\"\n input: Add event code for accessibility key\n hid: asus: asus_report_fixup: fix potential read out of bounds\n HID: logitech-hidpp: add missing MODULE_DESCRIPTION() macro\n HID: intel-ish-hid: fix endian-conversion\n HID: nintendo: Fix an error handling path in nintendo_hid_probe()\n HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()\n HID: core: remove unnecessary WARN_ON() in implement()\n HID: nvidia-shield: Add missing check for input_ff_create_memless\n HID: intel-ish-hid: Fix build error for COMPILE_TEST\n" }, { "commit": "329f70c5beaefe0e1197b7919e776dc005213b59", "tree": "5a4b9687e6d15fcfa935384979114c463ad1df15", "parents": [ "1e7ccdd3255c9d146cc077d681c56e4559f90cda", "9185afeac2a3dcce8300a5684291a43c2838cfd6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 10:12:33 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 10:12:33 2024 -0700" }, "message": "Merge tag \u0027kbuild-fixes-v6.10-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild\n\nPull Kbuild fixes from Masahiro Yamada:\n\n - Fix the initial state of the save button in \u0027make gconfig\u0027\n\n - Improve the Kconfig documentation\n\n - Fix a Kconfig bug regarding property visibility\n\n - Fix build breakage for systems where \u0027sed\u0027 is not installed in /bin\n\n - Fix a false warning about missing MODULE_DESCRIPTION()\n\n* tag \u0027kbuild-fixes-v6.10-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild:\n modpost: do not warn about missing MODULE_DESCRIPTION() for vmlinux.o\n kbuild: explicitly run mksysmap as sed script from link-vmlinux.sh\n kconfig: remove wrong expr_trans_bool()\n kconfig: doc: document behavior of \u0027select\u0027 and \u0027imply\u0027 followed by \u0027if\u0027\n kconfig: doc: fix a typo in the note about \u0027imply\u0027\n kconfig: gconf: give a proper initial state to the Save button\n kconfig: remove unneeded code for user-supplied values being out of range\n" }, { "commit": "1e7ccdd3255c9d146cc077d681c56e4559f90cda", "tree": "8dc2292551cfe45d5da91d9b4ab914f718e2bdd1", "parents": [ "36714d69b186ab38f2f9eb833a2dfa57878095c6", "ffb9072bce200a4d004006e8b40c366933cf517b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 09:57:09 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 09:57:09 2024 -0700" }, "message": "Merge tag \u0027media/v6.10-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media\n\nPull media fixes from Mauro Carvalho Chehab:\n\n - fixes for the new ipu6 driver (and related fixes to mei csi driver)\n\n - fix a double debugfs remove logic at mgb4 driver\n\n - a documentation fix\n\n* tag \u0027media/v6.10-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media:\n media: intel/ipu6: add csi2 port sanity check in notifier bound\n media: intel/ipu6: update the maximum supported csi2 port number to 6\n media: mei: csi: Warn less verbosely of a missing device fwnode\n media: mei: csi: Put the IPU device reference\n media: intel/ipu6: fix the buffer flags caused by wrong parentheses\n media: intel/ipu6: Fix an error handling path in isys_probe()\n media: intel/ipu6: Move isys_remove() close to isys_probe()\n media: intel/ipu6: Fix some redundant resources freeing in ipu6_pci_remove()\n media: Documentation: v4l: Fix ACTIVE route flag\n media: mgb4: Fix double debugfs remove\n" }, { "commit": "36714d69b186ab38f2f9eb833a2dfa57878095c6", "tree": "97a98dfc94aedce84df667b1004427dcf720a349", "parents": [ "7cedb020d537105acdc9e9311a0c30d110043491", "b97e8a2f7130a4b30d1502003095833d16c028b3" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 09:44:50 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 09:44:50 2024 -0700" }, "message": "Merge tag \u0027irq-urgent-2024-06-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull irq fixes from Ingo Molnar:\n\n - Fix possible memory leak the riscv-intc irqchip driver load failures\n\n - Fix boot crash in the sifive-plic irqchip driver caused by recently\n changed boot initialization order\n\n - Fix race condition in the gic-v3-its irqchip driver\n\n* tag \u0027irq-urgent-2024-06-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n irqchip/gic-v3-its: Fix potential race condition in its_vlpi_prop_update()\n irqchip/sifive-plic: Chain to parent IRQ after handlers are ready\n irqchip/riscv-intc: Prevent memory leak when riscv_intc_init_common() fails\n" }, { "commit": "7cedb020d537105acdc9e9311a0c30d110043491", "tree": "a7b26f0ee01dfb0cef1ad25a40735b9fa4ebe332", "parents": [ "7cec2e16cb62ed597791fb2d266e5ddd5818f1b3", "c625dabbf1c4a8e77e4734014f2fde7aa9071a1f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 09:36:08 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 09:36:08 2024 -0700" }, "message": "Merge tag \u0027x86-urgent-2024-06-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull x86 fixes from Ingo Molnar:\n \"Miscellaneous fixes:\n\n - Fix kexec() crash if call depth tracking is enabled\n\n - Fix SMN reads on inaccessible registers on certain AMD systems\"\n\n* tag \u0027x86-urgent-2024-06-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n x86/amd_nb: Check for invalid SMN reads\n x86/kexec: Fix bug with call depth tracking\n" }, { "commit": "7cec2e16cb62ed597791fb2d266e5ddd5818f1b3", "tree": "c6cefa738f5c236b9a785b02de5f1fe8e3787ef4", "parents": [ "bbc5332b8cda95cd081cff9c405c1cfece872f20", "74751ef5c1912ebd3e65c3b65f45587e05ce5d36" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 09:26:59 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 09:26:59 2024 -0700" }, "message": "Merge tag \u0027perf-urgent-2024-06-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull perf event fix from Ingo Molnar:\n \"Fix race between perf_event_free_task() and perf_event_release_kernel()\n that can result in missed wakeups and hung tasks\"\n\n* tag \u0027perf-urgent-2024-06-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n perf/core: Fix missing wakeup when waiting for context reference\n" }, { "commit": "bbc5332b8cda95cd081cff9c405c1cfece872f20", "tree": "5dde6c2ace35b3c72111edcc41db6752c17df293", "parents": [ "dc772f8237f9b0c9ea3f34d0dc4a57d1f6a5070d", "f92a59f6d12e31ead999fee9585471b95a8ae8a3" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 09:03:46 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 08 09:03:46 2024 -0700" }, "message": "Merge tag \u0027locking-urgent-2024-06-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull locking doc fix from Ingo Molnar:\n \"Fix typos in the kerneldoc of some of the atomic APIs\"\n\n* tag \u0027locking-urgent-2024-06-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n locking/atomic: scripts: fix ${atomic}_sub_and_test() kerneldoc\n" }, { "commit": "dc772f8237f9b0c9ea3f34d0dc4a57d1f6a5070d", "tree": "15988a93518b4479cdd02e4f5a50dcecdc27d160", "parents": [ "e60721bf3ccaebcaff8dec3548a2daa6578f9361", "7373a51e7998b508af7136530f3a997b286ce81c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 17:01:10 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 17:01:10 2024 -0700" }, "message": "Merge tag \u0027mm-hotfixes-stable-2024-06-07-15-24\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm\n\nPull misc fixes from Andrew Morton:\n \"14 hotfixes, 6 of which are cc:stable.\n\n All except the nilfs2 fix affect MM and all are singletons - see the\n chagelogs for details\"\n\n* tag \u0027mm-hotfixes-stable-2024-06-07-15-24\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm:\n nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors\n mm: fix xyz_noprof functions calling profiled functions\n codetag: avoid race at alloc_slab_obj_exts\n mm/hugetlb: do not call vma_add_reservation upon ENOMEM\n mm/ksm: fix ksm_zero_pages accounting\n mm/ksm: fix ksm_pages_scanned accounting\n kmsan: do not wipe out origin when doing partial unpoisoning\n vmalloc: check CONFIG_EXECMEM in is_vmalloc_or_module_addr()\n mm: page_alloc: fix highatomic typing in multi-block buddies\n nilfs2: fix potential kernel bug due to lack of writeback flag waiting\n memcg: remove the lockdep assert from __mod_objcg_mlstate()\n mm: arm64: fix the out-of-bounds issue in contpte_clear_young_dirty_ptes\n mm: huge_mm: fix undefined reference to `mthp_stats\u0027 for CONFIG_SYSFS\u003dn\n mm: drop the \u0027anon_\u0027 prefix for swap-out mTHP counters\n" }, { "commit": "e60721bf3ccaebcaff8dec3548a2daa6578f9361", "tree": "d0a7290af0d1de4289a0a59205d3da7c3e7546a8", "parents": [ "602079a0a13c69d190e16297d123ad3d279364e5", "64054eb716db52e4246527dc9414377c5bc5b01d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 16:54:57 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 16:54:57 2024 -0700" }, "message": "Merge tag \u0027gpio-fixes-for-v6.10-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux\n\nPull gpio fixes from Bartosz Golaszewski:\n\n - interrupt handling and Kconfig fixes for gpio-tqmx86\n\n - add a buffer for storing output values in gpio-tqmx86 as reading back\n the registers always returns the input values\n\n - add missing MODULE_DESCRIPTION()s to several GPIO drivers\n\n* tag \u0027gpio-fixes-for-v6.10-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux:\n gpio: add missing MODULE_DESCRIPTION() macros\n gpio: tqmx86: fix broken IRQ_TYPE_EDGE_BOTH interrupt type\n gpio: tqmx86: store IRQ trigger type and unmask status separately\n gpio: tqmx86: introduce shadow register for GPIO output value\n gpio: tqmx86: fix typo in Kconfig label\n" }, { "commit": "602079a0a13c69d190e16297d123ad3d279364e5", "tree": "0fda3276365ec9a697389f341f5086573bc20fc7", "parents": [ "e33915892d8871b28d17675fecc1b5b36b0d5721", "27d024235bdb16af917809d33916392452c3ac85" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 16:45:48 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 16:45:48 2024 -0700" }, "message": "Merge tag \u0027block-6.10-20240607\u0027 of git://git.kernel.dk/linux\n\nPull block fixes from Jens Axboe:\n\n - Fix for null_blk block size validation (Andreas)\n\n - NVMe pull request via Keith:\n - Use reserved tags for special fabrics operations (Chunguang)\n - Persistent Reservation status masking fix (Weiwen)\n\n* tag \u0027block-6.10-20240607\u0027 of git://git.kernel.dk/linux:\n null_blk: fix validation of block size\n nvme: fix nvme_pr_* status code parsing\n nvme-fabrics: use reserved tag for reg read/write command\n" }, { "commit": "e33915892d8871b28d17675fecc1b5b36b0d5721", "tree": "a2ede66bd79c2cebc0e2b660e3a20023b2ba2f31", "parents": [ "07978330e63456a75a6d5c1c5053de24bdc9d16f", "73254a297c2dd094abec7c9efee32455ae875bdf" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 16:43:07 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 16:43:07 2024 -0700" }, "message": "Merge tag \u0027io_uring-6.10-20240607\u0027 of git://git.kernel.dk/linux\n\nPull io_uring fixes from Jens Axboe:\n\n - Fix a locking order issue with setting max async thread workers\n (Hagar)\n\n - Fix for a NULL pointer dereference for failed async flagged requests\n using ring provided buffers. This doesn\u0027t affect the current kernel,\n but it does affect older kernels, and is being queued up for 6.10\n just to make the stable process easier (me)\n\n - Fix for NAPI timeout calculations for how long to busy poll, and\n subsequently how much to sleep post that if a wait timeout is passed\n in (me)\n\n - Fix for a regression in this release cycle, where we could end up\n using a partially unitialized match value for io-wq (Su)\n\n* tag \u0027io_uring-6.10-20240607\u0027 of git://git.kernel.dk/linux:\n io_uring: fix possible deadlock in io_register_iowq_max_workers()\n io_uring/io-wq: avoid garbage value of \u0027match\u0027 in io_wq_enqueue()\n io_uring/napi: fix timeout calculation\n io_uring: check for non-NULL file pointer in io_file_can_poll()\n" }, { "commit": "07978330e63456a75a6d5c1c5053de24bdc9d16f", "tree": "5ccf7ba79236f2ba48a5825d8b27782421097370", "parents": [ "eecba7c070283f053434808fa69abda36cf154b4", "f3a5367c679d31473d3fbb391675055b4792c309" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 15:13:12 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 15:13:12 2024 -0700" }, "message": "Merge tag \u0027for-6.10-rc2-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux\n\nPull btrfs fixes from David Sterba:\n\n - fix handling of folio private changes.\n\n The private value holds pointer to our extent buffer structure\n representing a metadata range. Release and create of the range was\n not properly synchronized when updating the private bit which ended\n up in double folio_put, leading to all sorts of breakage\n\n - fix a crash, reported as duplicate key in metadata, but caused by a\n race of fsync and size extending write. Requires prealloc target\n range + fsync and other conditions (log tree state, timing)\n\n - fix leak of qgroup extent records after transaction abort\n\n* tag \u0027for-6.10-rc2-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux:\n btrfs: protect folio::private when attaching extent buffer folios\n btrfs: fix leak of qgroup extent records after transaction abort\n btrfs: fix crash on racing fsync and size-extending write into prealloc\n" }, { "commit": "eecba7c070283f053434808fa69abda36cf154b4", "tree": "fc8b46081c2c812b5a7b316647a3dd4f50c30a7c", "parents": [ "0a02756d9145725c1b9979f0486c268f91471a48", "4a77c3dead97339478c7422eb07bf4bf63577008" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 15:07:57 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 15:07:57 2024 -0700" }, "message": "Merge tag \u0027nfsd-6.10-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/cel/linux\n\nPull nfsd fix from Chuck Lever:\n\n - Fix an occasional memory overwrite caused by a fix added in 6.10\n\n* tag \u0027nfsd-6.10-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/cel/linux:\n SUNRPC: Fix loop termination condition in gss_free_in_token_pages()\n" }, { "commit": "0a02756d9145725c1b9979f0486c268f91471a48", "tree": "749ab67639ff95a259262028b5ff0f60fd72f426", "parents": [ "8d6b029e15ab47986e486f52b2b768ca6faa5cbe", "e2c79b4c5c4d83520abb570ca633ded09621c0a6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 14:47:38 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 14:47:38 2024 -0700" }, "message": "Merge tag \u0027riscv-for-linus-6.10-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux\n\nPull RISC-V fixes from Palmer Dabbelt:\n\n - Another fix to avoid allocating pages that overlap with ERR_PTR,\n which manifests on rv32\n\n - A revert for the badaccess patch I incorrectly picked up an early\n version of\n\n* tag \u0027riscv-for-linus-6.10-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux:\n Revert \"riscv: mm: accelerate pagefault when badaccess\"\n riscv: fix overlap of allocated page and PTR_ERR\n" }, { "commit": "8d6b029e15ab47986e486f52b2b768ca6faa5cbe", "tree": "9b55a7f9cb3a6eb0ebe07959411acd8607a4ed77", "parents": [ "8d437867bafd8b5cfd209bdedddf1ca065f04a96", "01c51a32dc18f128d2e55a7b2128b77fc01a2285" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 14:44:53 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 14:44:53 2024 -0700" }, "message": "Merge tag \u0027s390-6.10-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux\n\nPull s390 fixes from Alexander Gordeev:\n\n - Do not create PT_LOAD program header for the kenel image when the\n virtual memory informaton in OS_INFO data is not available. That\n fixes stand-alone dump failures against kernels that do not provide\n the virtual memory informaton\n\n - Add KVM s390 shared zeropage selftest\n\n* tag \u0027s390-6.10-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux:\n KVM: s390x: selftests: Add shared zeropage test\n s390/crash: Do not use VM info if os_info does not have it\n" }, { "commit": "8d437867bafd8b5cfd209bdedddf1ca065f04a96", "tree": "acc0c36949097dbc022a2fdf9de27153f9cdb8bb", "parents": [ "96e09b8f81668278e2bb70db4cbf80d7549bf7a1", "5c40e428aea644c9d924e491b1bc22fa9f272bcc" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 14:36:57 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 14:36:57 2024 -0700" }, "message": "Merge tag \u0027arm64-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux\n\nPull arm64 fixes from Will Deacon:\n\n - Fix spurious CPU hotplug warning message from SETEND emulation code\n\n - Fix the build when GCC wasn\u0027t inlining our I/O accessor internals\n\n* tag \u0027arm64-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:\n arm64/io: add constant-argument check\n arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process\n" }, { "commit": "96e09b8f81668278e2bb70db4cbf80d7549bf7a1", "tree": "d71a4ead770882e86ee7b5cebeeb98f424e77783", "parents": [ "f24b46ea10d7d2096ea1c9ce5746a0c85920ec62", "77f1972bdcf7513293e8bbe376b9fe837310ee9c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 14:13:46 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 14:13:46 2024 -0700" }, "message": "Merge tag \u0027platform-drivers-x86-v6.10-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/pdx86/platform-drivers-x86\n\nPull x86 platform driver fixes from Hans de Goede:\n\n - Default silead touchscreen driver to 10 fingers and drop 10 finger\n setting from all DMI quirks. More of a cleanup then a pure fix, but\n since the DMI quirks always get updated through the fixes branch\n this avoids conflicts.\n\n - Kconfig fix for randconfig builds\n\n - dell-smbios: Fix wrong token data in sysfs\n\n - amd-hsmp: Fix driver poking unsupported hw when loaded manually\n\n* tag \u0027platform-drivers-x86-v6.10-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/pdx86/platform-drivers-x86:\n platform/x86/amd/hsmp: Check HSMP support on AMD family of processors\n platform/x86: dell-smbios: Simplify error handling\n platform/x86: dell-smbios: Fix wrong token data in sysfs\n platform/x86: yt2-1380: add CONFIG_EXTCON dependency\n platform/x86: touchscreen_dmi: Use 2-argument strscpy()\n platform/x86: touchscreen_dmi: Drop \"silead,max-fingers\" property\n Input: silead - Always support 10 fingers\n" }, { "commit": "f24b46ea10d7d2096ea1c9ce5746a0c85920ec62", "tree": "7b5897d93945799da7f2636683272f1bf939d3d4", "parents": [ "e693c5026c28ab2ca1f718f66f47a6a041ec8f3a", "526606b0a1998b0791b42c199d53550c3ba724b5" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 13:34:53 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 13:34:53 2024 -0700" }, "message": "Merge tag \u0027iommu-fixes-v6.10-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu\n\nPull iommu fixes from Joerg Roedel:\n \"Core:\n\n - Make iommu-dma code recognize \u0027force_aperture\u0027 again\n\n - Fix for potential NULL-ptr dereference from iommu_sva_bind_device()\n return value\n\n AMD IOMMU fixes:\n\n - Fix lockdep splat for invalid wait context\n\n - Add feature bit check before enabling PPR\n\n - Make workqueue name fit into buffer\n\n - Fix memory leak in sysfs code\"\n\n* tag \u0027iommu-fixes-v6.10-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu:\n iommu/amd: Fix Invalid wait context issue\n iommu/amd: Check EFR[EPHSup] bit before enabling PPR\n iommu/amd: Fix workqueue name\n iommu: Return right value in iommu_sva_bind_device()\n iommu/dma: Fix domain init\n iommu/amd: Fix sysfs leak in iommu init\n" }, { "commit": "e693c5026c28ab2ca1f718f66f47a6a041ec8f3a", "tree": "3affbf3d1ff54114a4fb3e23193639c113486d4c", "parents": [ "2e32d580757362edc95fdd7a86d3b869b78e58d8", "09fe2bfa6b83f865126ce3964744863f69a4a030" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 12:47:20 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 12:47:20 2024 -0700" }, "message": "Merge tag \u0027ata-6.10-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/libata/linux\n\nPull ata fix from Niklas Cassel:\n\n - Fix a regression for the PATA MacIO driver were it would fail to\n probe because of the recent changes of initializing the limits in\n SCSI core\n\n* tag \u0027ata-6.10-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/libata/linux:\n ata: pata_macio: Fix max_segment_size with PAGE_SIZE \u003d\u003d 64K\n" }, { "commit": "2e32d580757362edc95fdd7a86d3b869b78e58d8", "tree": "1c08620cbce49f5becc5bf9da788f3291e5f12c4", "parents": [ "8a92980606e3585d72d510a03b59906e96755b8a", "eb55943aab89be99a26e34fc2175ebb3583a2778" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 12:35:56 2024 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jun 07 12:35:56 2024 -0700" }, "message": "Merge tag \u0027drm-fixes-2024-06-07\u0027 of https://gitlab.freedesktop.org/drm/kernel\n\nPull drm fixes from Dave Airlie:\n \"Weekly fixes: vmwgfx leads the way this week, with minor changes in xe\n and amdgpu and a couple of other small fixes.\n\n Seems quiet enough.\n\n xe:\n - Update the LMTT when freeing VF GT config\n\n amdgpu:\n - Fix shutdown issues on some SMU 13.x platforms\n - Silence some UBSAN flexible array warnings\n\n panel:\n - sitronix-st7789v: handle of_drm_get_panel_orientation failing\n error\n\n vmwgfx:\n - filter modes greater than available graphics memory\n - fix 3D vs STDU enable\n - remove STDU logic from mode valid\n - logging fix\n - memcmp pointers fix\n - remove unused struct\n - screen target lifetime fix\n\n komeda:\n - unused struct removal\"\n\n* tag \u0027drm-fixes-2024-06-07\u0027 of https://gitlab.freedesktop.org/drm/kernel:\n drm/vmwgfx: Don\u0027t memcmp equivalent pointers\n drm/vmwgfx: remove unused struct \u0027vmw_stdu_dma\u0027\n drm/vmwgfx: Don\u0027t destroy Screen Target when CRTC is enabled but inactive\n drm/vmwgfx: Standardize use of kibibytes when logging\n drm/vmwgfx: Remove STDU logic from generic mode_valid function\n drm/vmwgfx: 3D disabled should not effect STDU memory limits\n drm/vmwgfx: Filter modes which exceed graphics memory\n drm/amdgpu/pptable: Fix UBSAN array-index-out-of-bounds\n drm/amd: Fix shutdown (again) on some SMU v13.0.4/11 platforms\n drm/xe/pf: Update the LMTT when freeing VF GT config\n drm/panel: sitronix-st7789v: Add check for of_drm_get_panel_orientation\n drm/komeda: remove unused struct \u0027gamma_curve_segment\u0027\n" }, { "commit": "a3a5a37efba11b7cf1a86abe7bccfbcdb521764e", "tree": "5dbfe2cfb2118a40c489ac38f63ac1e3b26c3bd5", "parents": [ "0eafc58f2194dbd01d4be40f99a697681171995b" ], "author": { "name": "Louis Dalibard", "email": "ontake@ontake.dev", "time": "Fri Jun 07 16:53:43 2024 +0200" }, "committer": { "name": "Jiri Kosina", "email": "jkosina@suse.com", "time": "Fri Jun 07 17:02:56 2024 +0200" }, "message": "HID: Ignore battery for ELAN touchscreens 2F2C and 4116\n\nAt least ASUS Zenbook 14 (2023) and ASUS Zenbook 14 Pro (2023) are affected.\n\nThe touchscreen reports a battery status of 0% and jumps to 1% when a\nstylus is used.\n\nThe device ID was added and the battery ignore quirk was enabled for it.\n\n[jkosina@suse.com: reformatted changelog a bit]\nSigned-off-by: Louis Dalibard \u003contake@ontake.dev\u003e\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.com\u003e\n" }, { "commit": "c44711b78608c98a3e6b49ce91678cd0917d5349", "tree": "94d4dbfccfb3f1ccbe1f488672b97071ceef0230", "parents": [ "dbfb8864650ec0b69e0a1b9b667bf79c25ca33ca" ], "author": { "name": "Aleksandr Mishin", "email": "amishin@t-argos.ru", "time": "Wed Jun 05 13:11:35 2024 +0300" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Jun 07 14:22:19 2024 +0100" }, "message": "liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet\n\nIn lio_vf_rep_copy_packet() pg_info-\u003epage is compared to a NULL value,\nbut then it is unconditionally passed to skb_add_rx_frag() which looks\nstrange and could lead to null pointer dereference.\n\nlio_vf_rep_copy_packet() call trace looks like:\n\tocteon_droq_process_packets\n\t octeon_droq_fast_process_packets\n\t octeon_droq_dispatch_pkt\n\t octeon_create_recv_info\n\t ...search in the dispatch_list...\n\t -\u003edisp_fn(rdisp-\u003erinfo, ...)\n\t lio_vf_rep_pkt_recv(struct octeon_recv_info *recv_info, ...)\nIn this path there is no code which sets pg_info-\u003epage to NULL.\nSo this check looks unneeded and doesn\u0027t solve potential problem.\nBut I guess the author had reason to add a check and I have no such card\nand can\u0027t do real test.\nIn addition, the code in the function liquidio_push_packet() in\nliquidio/lio_core.c does exactly the same.\n\nBased on this, I consider the most acceptable compromise solution to\nadjust this issue by moving skb_add_rx_frag() into conditional scope.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.\n\nFixes: 1f233f327913 (\"liquidio: switchdev support for LiquidIO NIC\")\nSigned-off-by: Aleksandr Mishin \u003camishin@t-argos.ru\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "dbfb8864650ec0b69e0a1b9b667bf79c25ca33ca", "tree": "48d34b4cbc01bf25c0ed72ca619ec151d05e0cae", "parents": [ "b472b996a43404a912c5cb4f27050022fdbce10c", "968fde83841a8c23558dfbd0a0c69d636db52b55" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Jun 07 12:20:28 2024 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Jun 07 12:20:28 2024 +0100" }, "message": "Merge branch \u0027hns3-fixes\u0027\n\nJijie Shao says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nThere are some bugfix for the HNS3 ethernet driver\n\nThere are some bugfix for the HNS3 ethernet driver\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "968fde83841a8c23558dfbd0a0c69d636db52b55", "tree": "48d34b4cbc01bf25c0ed72ca619ec151d05e0cae", "parents": [ "12cda920212a49fa22d9e8b9492ac4ea013310a4" ], "author": { "name": "Jie Wang", "email": "wangjie125@huawei.com", "time": "Wed Jun 05 15:20:58 2024 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Jun 07 12:20:28 2024 +0100" }, "message": "net: hns3: add cond_resched() to hns3 ring buffer init process\n\nCurrently hns3 ring buffer init process would hold cpu too long with big\nTx/Rx ring depth. This could cause soft lockup.\n\nSo this patch adds cond_resched() to the process. Then cpu can break to\nrun other tasks instead of busy looping.\n\nFixes: a723fb8efe29 (\"net: hns3: refine for set ring parameters\")\nSigned-off-by: Jie Wang \u003cwangjie125@huawei.com\u003e\nSigned-off-by: Jijie Shao \u003cshaojijie@huawei.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "12cda920212a49fa22d9e8b9492ac4ea013310a4", "tree": "e3e46182c019a6cab58b623cc9d8f9fe608ffa7f", "parents": [ "b472b996a43404a912c5cb4f27050022fdbce10c" ], "author": { "name": "Yonglong Liu", "email": "liuyonglong@huawei.com", "time": "Wed Jun 05 15:20:57 2024 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Jun 07 12:20:28 2024 +0100" }, "message": "net: hns3: fix kernel crash problem in concurrent scenario\n\nWhen link status change, the nic driver need to notify the roce\ndriver to handle this event, but at this time, the roce driver\nmay uninit, then cause kernel crash.\n\nTo fix the problem, when link status change, need to check\nwhether the roce registered, and when uninit, need to wait link\nupdate finish.\n\nFixes: 45e92b7e4e27 (\"net: hns3: add calling roce callback function when link status change\")\nSigned-off-by: Yonglong Liu \u003cliuyonglong@huawei.com\u003e\nSigned-off-by: Jijie Shao \u003cshaojijie@huawei.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b472b996a43404a912c5cb4f27050022fdbce10c", "tree": "2b4ce5e403d63ee3425d4ceb087603bf12220294", "parents": [ "e96b2933152fd87b6a41765b2f58b158fde855b6" ], "author": { "name": "Udit Kumar", "email": "u-kumar1@ti.com", "time": "Fri May 31 22:27:25 2024 +0530" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Jun 07 12:16:22 2024 +0100" }, "message": "dt-bindings: net: dp8386x: Add MIT license along with GPL-2.0\n\nModify license to include dual licensing as GPL-2.0-only OR MIT\nlicense for TI specific phy header files. This allows for Linux\nkernel files to be used in other Operating System ecosystems\nsuch as Zephyr or FreeBSD.\n\nWhile at this, update the GPL-2.0 to be GPL-2.0-only to be in sync\nwith latest SPDX conventions (GPL-2.0 is deprecated).\n\nWhile at this, update the TI copyright year to sync with current year\nto indicate license change.\n\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Trent Piepho \u003ctpiepho@impinj.com\u003e\nCc: Wadim Egorov \u003cw.egorov@phytec.de\u003e\nCc: Kip Broadhurst \u003ckbroadhurst@ti.com\u003e\nSigned-off-by: Udit Kumar \u003cu-kumar1@ti.com\u003e\nAcked-by: Wadim Egorov \u003cw.egorov@phytec.de\u003e\nAcked-by: Rob Herring \u003crobh@kernel.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0eafc58f2194dbd01d4be40f99a697681171995b", "tree": "7b6fe3f15df40d4a0d35738e7012310a0162cf70", "parents": [ "e538d4b85b8f1e3534dfbb42c2273f18bbb59d6e" ], "author": { "name": "Johan Hovold", "email": "johan+linaro@kernel.org", "time": "Tue May 07 16:48:18 2024 +0200" }, "committer": { "name": "Benjamin Tissoires", "email": "bentiss@kernel.org", "time": "Fri Jun 07 11:18:11 2024 +0200" }, "message": "HID: i2c-hid: elan: fix reset suspend current leakage\n\nThe Elan eKTH5015M touch controller found on the Lenovo ThinkPad X13s\nshares the VCC33 supply with other peripherals that may remain powered\nduring suspend (e.g. when enabled as wakeup sources).\n\nThe reset line is also wired so that it can be left deasserted when the\nsupply is off.\n\nThis is important as it avoids holding the controller in reset for\nextended periods of time when it remains powered, which can lead to\nincreased power consumption, and also avoids leaking current through the\nX13s reset circuitry during suspend (and after driver unbind).\n\nUse the new \u0027no-reset-on-power-off\u0027 devicetree property to determine\nwhen reset needs to be asserted on power down.\n\nNotably this also avoids wasting power on machine variants without a\ntouchscreen for which the driver would otherwise exit probe with reset\nasserted.\n\nFixes: bd3cba00dcc6 (\"HID: i2c-hid: elan: Add support for Elan eKTH6915 i2c-hid touchscreens\")\nCc: \u003cstable@vger.kernel.org\u003e\t# 6.0\nCc: Douglas Anderson \u003cdianders@chromium.org\u003e\nTested-by: Steev Klimaszewski \u003csteev@kali.org\u003e\nSigned-off-by: Johan Hovold \u003cjohan+linaro@kernel.org\u003e\nReviewed-by: Douglas Anderson \u003cdianders@chromium.org\u003e\nLink: https://lore.kernel.org/r/20240507144821.12275-5-johan+linaro@kernel.org\nSigned-off-by: Benjamin Tissoires \u003cbentiss@kernel.org\u003e\n" }, { "commit": "e538d4b85b8f1e3534dfbb42c2273f18bbb59d6e", "tree": "01d9dddb797270f22976b4447967061b1888843f", "parents": [ "07fc16fa55522520f5e4b2e35c72650f11079c35" ], "author": { "name": "Johan Hovold", "email": "johan+linaro@kernel.org", "time": "Tue May 07 16:48:17 2024 +0200" }, "committer": { "name": "Benjamin Tissoires", "email": "bentiss@kernel.org", "time": "Fri Jun 07 11:16:55 2024 +0200" }, "message": "dt-bindings: HID: i2c-hid: elan: add \u0027no-reset-on-power-off\u0027 property\n\nWhen the power supply is shared with other peripherals the reset line\ncan be wired in such a way that it can remain deasserted regardless of\nwhether the supply is on or not.\n\nThis is important as it can be used to avoid holding the controller in\nreset for extended periods of time when it remains powered, something\nwhich can lead to increased power consumption. Leaving reset deasserted\nalso avoids leaking current through the reset circuitry pull-up\nresistors.\n\nAdd a new \u0027no-reset-on-power-off\u0027 devicetree property which can be used\nby the OS to determine when reset needs to be asserted on power down.\n\nNote that this property can also be used when the supply cannot be\nturned off by the OS at all.\n\nSigned-off-by: Johan Hovold \u003cjohan+linaro@kernel.org\u003e\nReviewed-by: Krzysztof Kozlowski \u003ckrzysztof.kozlowski@linaro.org\u003e\nReviewed-by: Linus Walleij \u003clinus.walleij@linaro.org\u003e\nLink: https://lore.kernel.org/r/20240507144821.12275-4-johan+linaro@kernel.org\nSigned-off-by: Benjamin Tissoires \u003cbentiss@kernel.org\u003e\n" }, { "commit": "07fc16fa55522520f5e4b2e35c72650f11079c35", "tree": "3d3ae64c243d761dac01846fd659c117a9741567", "parents": [ "8d3ae46c64336b538898af76b4f504dfbe89b886" ], "author": { "name": "Johan Hovold", "email": "johan+linaro@kernel.org", "time": "Tue May 07 16:48:16 2024 +0200" }, "committer": { "name": "Benjamin Tissoires", "email": "bentiss@kernel.org", "time": "Fri Jun 07 11:16:55 2024 +0200" }, "message": "dt-bindings: HID: i2c-hid: elan: add Elan eKTH5015M\n\nAdd a compatible string for the Elan eKTH5015M touch controller.\n\nJudging from the current binding and commit bd3cba00dcc6 (\"HID: i2c-hid:\nelan: Add support for Elan eKTH6915 i2c-hid touchscreens\"), eKTH5015M\nappears to be compatible with eKTH6915. Notably the power-on sequence is\nthe same.\n\nWhile at it, drop a redundant label from the example.\n\nReviewed-by: Krzysztof Kozlowski \u003ckrzysztof.kozlowski@linaro.org\u003e\nSigned-off-by: Johan Hovold \u003cjohan+linaro@kernel.org\u003e\nLink: https://lore.kernel.org/r/20240507144821.12275-3-johan+linaro@kernel.org\nSigned-off-by: Benjamin Tissoires \u003cbentiss@kernel.org\u003e\n" }, { "commit": "8d3ae46c64336b538898af76b4f504dfbe89b886", "tree": "adbc20f16fc17e16f46bb17971465e67d79dc941", "parents": [ "22d6d060ac77955291deb43efc2f3f4f9632c6cb" ], "author": { "name": "Johan Hovold", "email": "johan+linaro@kernel.org", "time": "Tue May 07 16:48:15 2024 +0200" }, "committer": { "name": "Benjamin Tissoires", "email": "bentiss@kernel.org", "time": "Fri Jun 07 11:16:55 2024 +0200" }, "message": "dt-bindings: HID: i2c-hid: add dedicated Ilitek ILI2901 schema\n\nThe Ilitek ILI2901 touch screen controller was apparently incorrectly\nadded to the Elan eKTH6915 schema simply because it also has a reset\ngpio and is currently managed by the Elan driver in Linux.\n\nThe two controllers are not related even if an unfortunate wording in\nthe commit message adding the Ilitek compatible made it sound like they\nwere.\n\nAdd a dedicated schema for the ILI2901 which does not specify the I2C\naddress (which is likely 0x41 rather than 0x10 as for other Ilitek touch\ncontrollers) to avoid cluttering the Elan schema with unrelated devices\nand to make it easier to find the correct schema when adding further\nIlitek controllers.\n\nFixes: d74ac6f60a7e (\"dt-bindings: HID: i2c-hid: elan: Introduce Ilitek ili2901\")\nCc: Zhengqiao Xia \u003cxiazhengqiao@huaqin.corp-partner.google.com\u003e\nReviewed-by: Krzysztof Kozlowski \u003ckrzysztof.kozlowski@linaro.org\u003e\nSigned-off-by: Johan Hovold \u003cjohan+linaro@kernel.org\u003e\nLink: https://lore.kernel.org/r/20240507144821.12275-2-johan+linaro@kernel.org\nSigned-off-by: Benjamin Tissoires \u003cbentiss@kernel.org\u003e\n" }, { "commit": "22d6d060ac77955291deb43efc2f3f4f9632c6cb", "tree": "4c070cfd49eb664153c61b49121b12eac1d27390", "parents": [ "0c7dd00de018ff70b3452c424901816e26366a8a" ], "author": { "name": "Aseda Aboagye", "email": "aaboagye@chromium.org", "time": "Tue Jun 04 23:16:32 2024 +0000" }, "committer": { "name": "Benjamin Tissoires", "email": "bentiss@kernel.org", "time": "Fri Jun 07 11:08:07 2024 +0200" }, "message": "input: Add support for \"Do Not Disturb\"\n\nHUTRR94 added support for a new usage titled \"System Do Not Disturb\"\nwhich toggles a system-wide Do Not Disturb setting. This commit simply\nadds a new event code for the usage.\n\nSigned-off-by: Aseda Aboagye \u003caaboagye@chromium.org\u003e\nAcked-by: Dmitry Torokhov \u003cdmitry.torokhov@gmail.com\u003e\nLink: https://lore.kernel.org/r/Zl-gUHE70s7wCAoB@google.com\nSigned-off-by: Benjamin Tissoires \u003cbentiss@kernel.org\u003e\n" }, { "commit": "0c7dd00de018ff70b3452c424901816e26366a8a", "tree": "bf9a0e0936659701c37a2caaeceb127b20705c87", "parents": [ "89e1ee118d6f0ee6bd6e80d8fe08839875daa241" ], "author": { "name": "Aseda Aboagye", "email": "aaboagye@chromium.org", "time": "Tue Jun 04 23:10:47 2024 +0000" }, "committer": { "name": "Benjamin Tissoires", "email": "bentiss@kernel.org", "time": "Fri Jun 07 11:08:07 2024 +0200" }, "message": "input: Add event code for accessibility key\n\nHUTRR116 added support for a new usage titled \"System Accessibility\nBinding\" which toggles a system-wide bound accessibility UI or command.\nThis commit simply adds a new event code for the usage.\n\nSigned-off-by: Aseda Aboagye \u003caaboagye@chromium.org\u003e\nAcked-by: Dmitry Torokhov \u003cdmitry.torokhov@gmail.com\u003e\nLink: https://lore.kernel.org/r/Zl-e97O9nvudco5z@google.com\nSigned-off-by: Benjamin Tissoires \u003cbentiss@kernel.org\u003e\n" }, { "commit": "89e1ee118d6f0ee6bd6e80d8fe08839875daa241", "tree": "ac54c344b51509934bb2bf2fdaef17f336d53730", "parents": [ "9c8f05cf1d7abd1bfb53cebe691bf3acb7baee99" ], "author": { "name": "Andrew Ballance", "email": "andrewjballance@gmail.com", "time": "Sun Jun 02 03:50:23 2024 -0500" }, "committer": { "name": "Benjamin Tissoires", "email": "bentiss@kernel.org", "time": "Fri Jun 07 11:07:40 2024 +0200" }, "message": "hid: asus: asus_report_fixup: fix potential read out of bounds\n\nsyzbot reported a potential read out of bounds in asus_report_fixup.\n\nthis patch adds checks so that a read out of bounds will not occur\n\nSigned-off-by: Andrew Ballance \u003candrewjballance@gmail.com\u003e\nReported-by: \u003csyzbot+07762f019fd03d01f04c@syzkaller.appspotmail.com\u003e\nCloses: https://syzkaller.appspot.com/bug?extid\u003d07762f019fd03d01f04c\nFixes: 59d2f5b7392e (\"HID: asus: fix more n-key report descriptors if n-key quirked\")\nLink: https://lore.kernel.org/r/20240602085023.1720492-1-andrewjballance@gmail.com\nSigned-off-by: Benjamin Tissoires \u003cbentiss@kernel.org\u003e\n" }, { "commit": "64054eb716db52e4246527dc9414377c5bc5b01d", "tree": "199694a22a9a95aeb8647aed9a4aa4e026d3b1b2", "parents": [ "90dd7de4ef7ba584823dfbeba834c2919a4bb55b" ], "author": { "name": "Jeff Johnson", "email": "quic_jjohnson@quicinc.com", "time": "Thu Jun 06 20:23:50 2024 -0700" }, "committer": { "name": "Bartosz Golaszewski", "email": "bartosz.golaszewski@linaro.org", "time": "Fri Jun 07 10:05:21 2024 +0200" }, "message": "gpio: add missing MODULE_DESCRIPTION() macros\n\nOn x86, make allmodconfig \u0026\u0026 make W\u003d1 C\u003d1 reports:\nWARNING: modpost: missing MODULE_DESCRIPTION() in drivers/gpio/gpio-gw-pld.o\nWARNING: modpost: missing MODULE_DESCRIPTION() in drivers/gpio/gpio-mc33880.o\nWARNING: modpost: missing MODULE_DESCRIPTION() in drivers/gpio/gpio-pcf857x.o\n\nAdd the missing invocations of the MODULE_DESCRIPTION() macro,\nincluding the one missing in gpio-pl061.c, which is not built for x86.\n\nSigned-off-by: Jeff Johnson \u003cquic_jjohnson@quicinc.com\u003e\nLink: https://lore.kernel.org/r/20240606-md-drivers-gpio-v1-1-cb42d240ca5c@quicinc.com\nSigned-off-by: Bartosz Golaszewski \u003cbartosz.golaszewski@linaro.org\u003e\n" } ], "next": "a88d60903696c01de577558080ec4fc738a70475" }