)]}' { "log": [ { "commit": "f338e77383789c0cae23ca3d48adcc5e9e137e3c", "tree": "2f91182ae4ddfac70d07ca74bc88be9c3028d9e8", "parents": [ "5c2fe8d11ae05411566f9d69321375ea686603d4" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Mar 15 13:52:05 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Mar 15 13:52:05 2026 -0700" }, "message": "Linux 7.0-rc4\n" }, { "commit": "5c2fe8d11ae05411566f9d69321375ea686603d4", "tree": "20f06562cd9c74a9b50ab8e847b471de4e695205", "parents": [ "d9bf296c398d093f9641568411dee16285302113", "8ddc0c26916574395447ebf4cff684314f6873a9" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Mar 15 13:15:39 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Mar 15 13:15:39 2026 -0700" }, "message": "Merge tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi\n\nPull SCSI fixes from James Bottomley:\n \"The one core change is a re-roll of the tag allocation fix from the\n last pull request that uses the correct goto to unroll all the\n allocations. The remianing fixes are all small ones in drivers\"\n\n* tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:\n scsi: hisi_sas: Fix NULL pointer exception during user_scan()\n scsi: qla2xxx: Completely fix fcport double free\n scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend\n scsi: core: Fix error handling for scsi_alloc_sdev()\n" }, { "commit": "d9bf296c398d093f9641568411dee16285302113", "tree": "7df16e53a79473b78591e66cd2fa0d8ff0582607", "parents": [ "62cda74c79da1ebd46be7362e8329c6fa5d0caf3", "5ef268cb7a0aac55521fd9881f1939fa94a8988e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Mar 15 13:08:05 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Mar 15 13:08:05 2026 -0700" }, "message": "Merge tag \u0027probes-fixes-v7.0-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace\n\nPull probes fixes from Masami Hiramatsu:\n\n - Avoid crash when rmmod/insmod after ftrace killed\n\n This fixes a kernel crash caused by kprobes on the symbol in a module\n which is unloaded after ftrace_kill() is called.\n\n - Remove unneeded warnings from __arm_kprobe_ftrace()\n\n Remove unneeded WARN messages which can be triggered if the kprobe is\n using ftrace and it fails to enable the ftrace. Since kprobes\n correctly handle such failure, we don\u0027t need to warn it.\n\n* tag \u0027probes-fixes-v7.0-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace:\n kprobes: Remove unneeded warnings from __arm_kprobe_ftrace()\n kprobes: avoid crash when rmmod/insmod after ftrace killed\n" }, { "commit": "62cda74c79da1ebd46be7362e8329c6fa5d0caf3", "tree": "5a8d83220730885d22c027abb0ab2226c0aff340", "parents": [ "11e8c7e9471cf8e6ae6ec7324a3174191cd965e3", "e2715ea5fb352cd43fce437b91aa0fd50aaaf384" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Mar 15 12:50:05 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Mar 15 12:50:05 2026 -0700" }, "message": "Merge tag \u0027bootconfig-fixes-v7.0-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace\n\nPull bootconfig fixes from Masami Hiramatsu:\n\n - fix off-by-one in xbc_verify_tree() unclosed brace error. This fixes\n a wrong error place in unclosed brace error message\n\n - check bounds before writing in __xbc_open_brace(). This fixes to\n check the array index before setting array, so that the bootconfig\n can support 16th-depth nested brace correctly\n\n - fix snprintf truncation check in xbc_node_compose_key_after(). This\n fixes to handle the return value of snprintf() correctly in case of\n the return value \u003d\u003d size\n\n - Add bootconfig tests about braces Add test cases for checking error\n position about unclosed brace and ensuring supporting 16th depth\n nested braces correctly\n\n* tag \u0027bootconfig-fixes-v7.0-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace:\n bootconfig: Add bootconfig tests about braces\n lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after()\n lib/bootconfig: check bounds before writing in __xbc_open_brace()\n lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error\n" }, { "commit": "11e8c7e9471cf8e6ae6ec7324a3174191cd965e3", "tree": "4e18e18bf7c1ff66b5f5a0d609766215ecc56472", "parents": [ "4f3df2e5ea69f5717d2721922aff263c31957548", "d2ea4ff1ce50787a98a3900b3fb1636f3620b7cf" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Mar 15 12:22:10 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Mar 15 12:22:10 2026 -0700" }, "message": "Merge tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/virt/kvm/kvm\n\nPull kvm fixes from Paolo Bonzini:\n \"Quite a large pull request, partly due to skipping last week and\n therefore having material from ~all submaintainers in this one. About\n a fourth of it is a new selftest, and a couple more changes are large\n in number of files touched (fixing a -Wflex-array-member-not-at-end\n compiler warning) or lines changed (reformatting of a table in the API\n documentation, thanks rST).\n\n But who am I kidding---it\u0027s a lot of commits and there are a lot of\n bugs being fixed here, some of them on the nastier side like the\n RISC-V ones.\n\n ARM:\n\n - Correctly handle deactivation of interrupts that were activated\n from LRs. Since EOIcount only denotes deactivation of interrupts\n that are not present in an LR, start EOIcount deactivation walk\n *after* the last irq that made it into an LR\n\n - Avoid calling into the stubs to probe for ICH_VTR_EL2.TDS when pKVM\n is already enabled -- not only thhis isn\u0027t possible (pKVM will\n reject the call), but it is also useless: this can only happen for\n a CPU that has already booted once, and the capability will not\n change\n\n - Fix a couple of low-severity bugs in our S2 fault handling path,\n affecting the recently introduced LS64 handling and the even more\n esoteric handling of hwpoison in a nested context\n\n - Address yet another syzkaller finding in the vgic initialisation,\n where we would end-up destroying an uninitialised vgic with nasty\n consequences\n\n - Address an annoying case of pKVM failing to boot when some of the\n memblock regions that the host is faulting in are not page-aligned\n\n - Inject some sanity in the NV stage-2 walker by checking the limits\n against the advertised PA size, and correctly report the resulting\n faults\n\n PPC:\n\n - Fix a PPC e500 build error due to a long-standing wart that was\n exposed by the recent conversion to kmalloc_obj(); rip out all the\n ugliness that led to the wart\n\n RISC-V:\n\n - Prevent speculative out-of-bounds access using array_index_nospec()\n in APLIC interrupt handling, ONE_REG regiser access, AIA CSR\n access, float register access, and PMU counter access\n\n - Fix potential use-after-free issues in kvm_riscv_gstage_get_leaf(),\n kvm_riscv_aia_aplic_has_attr(), and kvm_riscv_aia_imsic_has_attr()\n\n - Fix potential null pointer dereference in\n kvm_riscv_vcpu_aia_rmw_topei()\n\n - Fix off-by-one array access in SBI PMU\n\n - Skip THP support check during dirty logging\n\n - Fix error code returned for Smstateen and Ssaia ONE_REG interface\n\n - Check host Ssaia extension when creating AIA irqchip\n\n x86:\n\n - Fix cases where CPUID mitigation features were incorrectly marked\n as available whenever the kernel used scattered feature words for\n them\n\n - Validate _all_ GVAs, rather than just the first GVA, when\n processing a range of GVAs for Hyper-V\u0027s TLB flush hypercalls\n\n - Fix a brown paper bug in add_atomic_switch_msr()\n\n - Use hlist_for_each_entry_srcu() when traversing mask_notifier_list,\n to fix a lockdep warning; KVM doesn\u0027t hold RCU, just irq_srcu\n\n - Ensure AVIC VMCB fields are initialized if the VM has an in-kernel\n local APIC (and AVIC is enabled at the module level)\n\n - Update CR8 write interception when AVIC is (de)activated, to fix a\n bug where the guest can run in perpetuity with the CR8 intercept\n enabled\n\n - Add a quirk to skip the consistency check on FREEZE_IN_SMM, i.e. to\n allow L1 hypervisors to set FREEZE_IN_SMM. This reverts (by\n default) an unintentional tightening of userspace ABI in 6.17, and\n provides some amount of backwards compatibility with hypervisors\n who want to freeze PMCs on VM-Entry\n\n - Validate the VMCS/VMCB on return to a nested guest from SMM,\n because either userspace or the guest could stash invalid values in\n memory and trigger the processor\u0027s consistency checks\n\n Generic:\n\n - Remove a subtle pseudo-overlay of kvm_stats_desc, which, aside from\n being unnecessary and confusing, triggered compiler warnings due to\n -Wflex-array-member-not-at-end\n\n - Document that vcpu-\u003emutex is take outside of kvm-\u003eslots_lock and\n kvm-\u003eslots_arch_lock, which is intentional and desirable despite\n being rather unintuitive\n\n Selftests:\n\n - Increase the maximum number of NUMA nodes in the guest_memfd\n selftest to 64 (from 8)\"\n\n* tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/virt/kvm/kvm: (43 commits)\n KVM: selftests: Verify SEV+ guests can read and write EFER, CR0, CR4, and CR8\n Documentation: kvm: fix formatting of the quirks table\n KVM: x86: clarify leave_smm() return value\n selftests: kvm: add a test that VMX validates controls on RSM\n selftests: kvm: extract common functionality out of smm_test.c\n KVM: SVM: check validity of VMCB controls when returning from SMM\n KVM: VMX: check validity of VMCS controls when returning from SMM\n KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated\n KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC\n KVM: x86: Introduce KVM_X86_QUIRK_VMCS12_ALLOW_FREEZE_IN_SMM\n KVM: x86: Fix SRCU list traversal in kvm_fire_mask_notifiers()\n KVM: VMX: Fix a wrong MSR update in add_atomic_switch_msr()\n KVM: x86: hyper-v: Validate all GVAs during PV TLB flush\n KVM: x86: synthesize CPUID bits only if CPU capability is set\n KVM: PPC: e500: Rip out \"struct tlbe_ref\"\n KVM: PPC: e500: Fix build error due to using kmalloc_obj() with wrong type\n KVM: selftests: Increase \u0027maxnode\u0027 for guest_memfd tests\n KVM: arm64: pkvm: Don\u0027t reprobe for ICH_VTR_EL2.TDS on CPU hotplug\n KVM: arm64: vgic: Pick EOIcount deactivations from AP-list tail\n KVM: arm64: Remove the redundant ISB in __kvm_at_s1e2()\n ...\n" }, { "commit": "4f3df2e5ea69f5717d2721922aff263c31957548", "tree": "f9f7eb3368ef182fe2c26d6d1f1af2c46c2b074e", "parents": [ "13af67f599c9f177ac7ca4442be967a91c9ebae4", "82f73ef9c41e0623e0a8bdce4fa44a7237709f0c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Mar 15 11:36:11 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Mar 15 11:36:11 2026 -0700" }, "message": "Merge tag \u0027powerpc-7.0-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux\n\nPull powerpc fixes from Madhavan Srinivasan:\n\n - Fix KUAP warning in VMX usercopy path\n\n - Fix lockdep warning during PCI enumeration\n\n - Fix to move CMA reservations to arch_mm_preinit\n\n - Fix to check current-\u003emm is alive before getting user callchain\n\nThanks to Aboorva Devarajan, Christophe Leroy (CS GROUP), Dan Horák,\nNicolin Chen, Nilay Shroff, Qiao Zhao, Ritesh Harjani (IBM), Saket Kumar\nBhaskar, Sayali Patil, Shrikanth Hegde, Venkat Rao Bagalkote, and Viktor\nMalik.\n\n* tag \u0027powerpc-7.0-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:\n powerpc/iommu: fix lockdep warning during PCI enumeration\n powerpc/selftests/copyloops: extend selftest to exercise __copy_tofrom_user_power7_vmx\n powerpc: fix KUAP warning in VMX usercopy path\n powerpc, perf: Check that current-\u003emm is alive before getting user callchain\n powerpc/mem: Move CMA reservations to arch_mm_preinit\n" }, { "commit": "13af67f599c9f177ac7ca4442be967a91c9ebae4", "tree": "83c8f6fd0d8c7427ab55bbf2aaa11020f6ddc621", "parents": [ "164cb546e9999637e26eac76971e6c4438a400a9", "8cc7dd77a1466f0ec58c03478b2e735a5b289b96" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Mar 15 11:26:36 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Mar 15 11:26:36 2026 -0700" }, "message": "Merge tag \u0027x86-urgent-2026-03-15\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull x86 fix from Ingo Molnar:\n \"Work around S2RAM hang if the firmware unexpectedly re-enables the\n x2apic hardware while it was disabled by the kernel.\n\n Force-disable it again and issue a warning into the syslog\"\n\n* tag \u0027x86-urgent-2026-03-15\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n x86/apic: Disable x2apic on resume if the kernel expects so\n" }, { "commit": "164cb546e9999637e26eac76971e6c4438a400a9", "tree": "da31a7f614cab64cea1d1099fd173f0201346a20", "parents": [ "63724e9519a312d7d0b8767d0aeb53bc15a7fdd5", "755a648e78f12574482d4698d877375793867fa1" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Mar 15 11:14:09 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Mar 15 11:14:09 2026 -0700" }, "message": "Merge tag \u0027timers-urgent-2026-03-15\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull timer fix from Ingo Molnar:\n \"Fix function tracer recursion bug by marking jiffies_64_to_clock_t()\n notrace\"\n\n* tag \u0027timers-urgent-2026-03-15\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n time/jiffies: Mark jiffies_64_to_clock_t() notrace\n" }, { "commit": "63724e9519a312d7d0b8767d0aeb53bc15a7fdd5", "tree": "236a236c3090af7befc357012dacc780d3df4670", "parents": [ "97450311306e95e2feb87c088acd6af216a3b077", "192d852129b1b7c4f0ddbab95d0de1efd5ee1405" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Mar 15 10:49:47 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Mar 15 10:49:47 2026 -0700" }, "message": "Merge tag \u0027sched-urgent-2026-03-15\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull scheduler fixes from Ingo Molnar:\n \"More MM-CID fixes, mostly fixing hangs/races:\n\n - Fix CID hangs due to a race between concurrent forks\n\n - Fix vfork()/CLONE_VM MMCID bug causing hangs\n\n - Remove pointless preemption guard\n\n - Fix CID task list walk performance regression on large systems\n by removing the known-flaky and slow counting logic using\n for_each_process_thread() in mm_cid_*fixup_tasks_to_cpus(), and\n implementing a simple sched_mm_cid::node list instead\"\n\n* tag \u0027sched-urgent-2026-03-15\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n sched/mmcid: Avoid full tasklist walks\n sched/mmcid: Remove pointless preempt guard\n sched/mmcid: Handle vfork()/CLONE_VM correctly\n sched/mmcid: Prevent CID stalls due to concurrent forks\n" }, { "commit": "97450311306e95e2feb87c088acd6af216a3b077", "tree": "58f3ee025f81de5919ce970986a0bb2a6a6eca62", "parents": [ "be2e3750ce0ce1b9ba77b521fee7f3e9166e64e9", "9a73f085dc91980ab7fcc5e9716f4449424b3b59" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Mar 15 10:36:01 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Mar 15 10:36:01 2026 -0700" }, "message": "Merge tag \u0027objtool-urgent-2026-03-15\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull objtool fixes from Ingo Molnar:\n\n - Fix cross-build bug by using HOSTCFLAGS for HAVE_XXHASH test\n\n - Fix klp bug by fixing detection of corrupt static branch/call entries\n\n - Handle unsupported pr_debug() usage more gracefully\n\n - Fix hypothetical klp bug by avoiding NULL pointer dereference when\n printing code symbol name\n\n - Fix data alignment bug in elf_add_data() causing mangled strings\n\n - Fix confusing ERROR_INSN() error message\n\n - Handle unexpected Clang RSP musical chairs causing false positive\n warnings\n\n - Fix another objtool stack overflow in validate_branch()\n\n* tag \u0027objtool-urgent-2026-03-15\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n objtool: Fix another stack overflow in validate_branch()\n objtool: Handle Clang RSP musical chairs\n objtool: Fix ERROR_INSN() error message\n objtool: Fix data alignment in elf_add_data()\n objtool: Use HOSTCFLAGS for HAVE_XXHASH test\n objtool/klp: Avoid NULL pointer dereference when printing code symbol name\n objtool/klp: Disable unsupported pr_debug() usage\n objtool/klp: Fix detection of corrupt static branch/call entries\n" }, { "commit": "be2e3750ce0ce1b9ba77b521fee7f3e9166e64e9", "tree": "efe93fbd8a5441fc2d577731c9df13ea26df6d41", "parents": [ "9a48d4a130871bea7a7ae2d83cda0326b1922d3e", "b330fbfd34d7624bec62b99ad88dba2614326a19" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Mar 15 10:32:57 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Mar 15 10:32:57 2026 -0700" }, "message": "Merge tag \u0027irq-urgent-2026-03-15\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull irq fixes from Ingo Molnar:\n \"Two fixes for the riscv-aplic irqchip driver:\n\n - Fix probing dependency bug on probing failure\n\n - Fix double register_syscore() bug\"\n\n* tag \u0027irq-urgent-2026-03-15\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n irqchip/riscv-aplic: Register syscore operations only once\n irqchip/riscv-aplic: Do not clear ACPI dependencies on probe failure\n" }, { "commit": "9a48d4a130871bea7a7ae2d83cda0326b1922d3e", "tree": "549539f2c43adb3ad133ea02f22dbe954332c037", "parents": [ "f26de90c68a66ec95accc50555692d545e04a135", "f311a05784634febd299f03476b80f3f18489767" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 14 16:25:10 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 14 16:25:10 2026 -0700" }, "message": "Merge tag \u0027i3c/fixes-for-7.0\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/i3c/linux\n\nPull i3c fixes from Alexandre Belloni:\n \"This introduces the I3C_OR_I2C symbol which is not a fix per se but is\n affecting multiple subsystems so it is included to ease\n synchronization.\n\n Apart from that, Adrian is mostly fixing the mipi-i3c-hci driver DMA\n handling, and I took the opportunity to add two fixes for the dw-i3c\n driver.\n\n Subsystem:\n - simplify combined i3c/i2c dependencies\n\n Drivers:\n - dw: handle 2C properly, fix possible race condition\n - mipi-i3c-hci: many DMA related fixes\"\n\n* tag \u0027i3c/fixes-for-7.0\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/i3c/linux:\n i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach\n i3c: master: dw-i3c: Fix missing of_node for virtual I2C adapter\n i3c: mipi-i3c-hci: Fallback to software reset when bus disable fails\n i3c: mipi-i3c-hci: Fix handling of shared IRQs during early initialization\n i3c: mipi-i3c-hci: Fix race in DMA error handling in interrupt context\n i3c: mipi-i3c-hci: Consolidate common xfer processing logic\n i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort\n i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor\n i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue\n i3c: mipi-i3c-hci: Fix race between DMA ring dequeue and interrupt handler\n i3c: mipi-i3c-hci: Fix race in DMA ring dequeue\n i3c: mipi-i3c-hci: Fix race in DMA ring enqueue for parallel xfers\n i3c: mipi-i3c-hci: Consolidate spinlocks\n i3c: mipi-i3c-hci: Factor out DMA mapping from queuing path\n i3c: mipi-i3c-hci: Fix Hot-Join NACK\n i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors\n i3c: simplify combined i3c/i2c dependencies\n" }, { "commit": "f26de90c68a66ec95accc50555692d545e04a135", "tree": "e297b76fdf255943bdba568b4638059950134374", "parents": [ "267594792a71018788af69e836c52e34bb8054af", "d800d0bb2009a73630a096d7c7a80a2e64c1e41e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 14 16:15:49 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 14 16:15:49 2026 -0700" }, "message": "Merge tag \u0027i2c-for-7.0-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux\n\nPull i2c fix from Wolfram Sang:\n \"Designware DT binding maintainer update\"\n\n* tag \u0027i2c-for-7.0-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux:\n dt-bindings: i2c: dw: Update maintainer\n" }, { "commit": "267594792a71018788af69e836c52e34bb8054af", "tree": "e08fd00efa4903caaaf089db2b3d037747d6f564", "parents": [ "69237f8c1f69112cca7388af7fab6d0ee45a2525", "592c61f3bfceaa29f8275696bd67c3dfad7ef72e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 14 12:35:16 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 14 12:35:16 2026 -0700" }, "message": "Merge tag \u0027rust-fixes-7.0-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ojeda/linux\n\nPull Rust fixes from Miguel Ojeda:\n \"Toolchain and infrastructure:\n\n - Remap paths to avoid absolute ones starting with the upcoming Rust\n 1.95.0 release. This improves build reproducibility, avoids leaking\n the exact path and avoids having the same path appear in two forms\n\n The approach here avoids remapping debug information as well, in\n order to avoid breaking tools that used the paths to access source\n files, which was the previous attempt that needed to be reverted\n\n - Allow \u0027unused_features\u0027 lint for the upcoming Rust 1.96.0 release.\n While well-intentioned, we do not benefit much from the new lint\n\n - Emit dependency information into \u0027$(depfile)\u0027 directly to avoid a\n temporary \u0027.d\u0027 file (it was an old approach)\n\n \u0027kernel\u0027 crate:\n\n - \u0027str\u0027 module: fix warning under \u0027!CONFIG_BLOCK\u0027 by making\n \u0027NullTerminatedFormatter\u0027 public\n\n - \u0027cpufreq\u0027 module: suppress false positive Clippy warning\n\n \u0027pin-init\u0027 crate:\n\n - Remove \u0027#[disable_initialized_field_access]\u0027 attribute which was\n unsound. This means removing the support for structs with unaligned\n fields (through the \u0027repr(packed)\u0027 attribute), for now\n\n And document the load-bearing fact of field accessors (i.e. that\n they are required for soundness)\n\n - Replace shadowed return token by \u0027unsafe\u0027-to-create token in order\n to remain sound in the face of the likely upcoming Type Alias Impl\n Trait (TAIT) and the next trait solver in upstream Rust\"\n\n* tag \u0027rust-fixes-7.0-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ojeda/linux:\n rust: kbuild: allow `unused_features`\n rust: cpufreq: suppress clippy::double_parens in Policy doctest\n rust: pin-init: replace shadowed return token by `unsafe`-to-create token\n rust: pin-init: internal: init: document load-bearing fact of field accessors\n rust: pin-init: internal: init: remove `#[disable_initialized_field_access]`\n rust: build: remap path to avoid absolute path\n rust: kbuild: emit dep-info into $(depfile) directly\n rust: str: make NullTerminatedFormatter public\n" }, { "commit": "69237f8c1f69112cca7388af7fab6d0ee45a2525", "tree": "5d7a2afcfaae96354c65b17326d7ea4cb74f37ee", "parents": [ "5c75125672443a209a40033f0df5fb823e356452", "d0d9b1f4f5391e6a00cee81d73ed2e8f98446d5f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 14 09:43:12 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 14 09:43:12 2026 -0700" }, "message": "Merge tag \u0027usb-7.0-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb\n\nPull USB fixes from Greg KH:\n \"Here is a large chunk of USB driver fixes for 7.0-rc4. Included in\n here are:\n\n - usb gadget reverts due to reported issues, and then a follow-on fix\n to hopefully resolve the reported overall problem\n\n - xhci driver fixes\n\n - dwc3 driver fixes\n\n - usb core \"killable\" bulk message api addition to fix a usbtmc\n driver bug where userspace could hang the driver for forever\n\n - small USB driver fixes for reported issues\n\n - new usb device quirks\n\n All except the last USB device quirk change have been in linux-next\n with no reported issues. That one came in too late, and is \u0027obviously\n correct\u0027 :)\"\n\n* tag \u0027usb-7.0-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb: (35 commits)\n USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed\n usb: roles: get usb role switch from parent only for usb-b-connector\n Revert \"tcpm: allow looking for role_sw device in the main node\"\n usb: gadget: f_ncm: Fix net_device lifecycle with device_move\n Revert \"usb: gadget: u_ether: add gether_opts for config caching\"\n Revert \"usb: gadget: u_ether: use \u003clinux/hex.h\u003e header file\"\n Revert \"usb: gadget: u_ether: Add auto-cleanup helper for freeing net_device\"\n Revert \"usb: gadget: f_ncm: align net_device lifecycle with bind/unbind\"\n Revert \"usb: legacy: ncm: Fix NPE in gncm_bind\"\n Revert \"usb: gadget: f_ncm: Fix atomic context locking issue\"\n usb: typec: altmode/displayport: set displayport signaling rate in configure message\n usb: dwc3: pci: add support for the Intel Nova Lake -H\n usb/core/quirks: Add Huawei ME906S-device to wakeup quirk\n usb: gadget: uvc: fix interval_duration calculation\n xhci: Fix NULL pointer dereference when reading portli debugfs files\n usb: xhci: Prevent interrupt storm on host controller error (HCE)\n usb: xhci: Fix memory leak in xhci_disable_slot()\n usb: class: cdc-wdm: fix reordering issue in read code path\n usb: renesas_usbhs: fix use-after-free in ISR during device removal\n usb: cdc-acm: Restore CAP_BRK functionnality to CH343\n ...\n" }, { "commit": "5c75125672443a209a40033f0df5fb823e356452", "tree": "4e453eea7960fb1f8958e7e8cb402221c51a8f9b", "parents": [ "4dad25aa60daced1d3bfbdd531c901620e8fb88f", "163cc462dea7d5b75be4db49ca78a2b99c55375e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 14 09:38:49 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 14 09:38:49 2026 -0700" }, "message": "Merge tag \u0027char-misc-7.0-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc\n\nPull char / misc / IIO driver fixes from Greg KH:\n \"Here are some char/misc/iio/binder fixes for 7.0-rc4. Nothing major in\n here, just the usual:\n\n - lots of iio driver fixes for reported issues\n\n - rust binder fixes for problems found\n\n - gpib driver binding to the wrong device fix\n\n - firmware driver fix\n\n All of these have been in linux-next with no reported issues\"\n\n* tag \u0027char-misc-7.0-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc: (28 commits)\n gpib: lpvo_usb: fix unintended binding of FTDI 8U232AM devices\n firmware: stratix10-svc: Add Multi SVC clients support\n rust_binder: use lock_vma_under_rcu() in use_page_slow()\n rust_binder: call set_notification_done() without proc lock\n rust_binder: avoid reading the written value in offsets array\n rust_binder: check ownership before using vma\n rust_binder: fix oneway spam detection\n firmware: stratix10-rsu: Fix NULL pointer dereference when RSU is disabled\n iio: imu: adis: Fix NULL pointer dereference in adis_init\n iio: imu: inv_icm45600: fix regulator put warning when probe fails\n iio: buffer: Fix wait_queue not being removed\n iio: gyro: mpu3050-core: fix pm_runtime error handling\n iio: gyro: mpu3050-i2c: fix pm_runtime error handling\n iio: adc: ad7768-1: Fix ERR_PTR dereference in ad7768_fill_scale_tbl\n iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas()\n iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas()\n iio: magnetometer: tlv493d: remove erroneous shift in X-axis data\n iio: proximity: hx9023s: Protect against division by zero in set_samp_freq\n iio: proximity: hx9023s: fix assignment order for __counted_by\n iio: chemical: bme680: Fix measurement wait duration calculation\n ...\n" }, { "commit": "4dad25aa60daced1d3bfbdd531c901620e8fb88f", "tree": "c397b8faea9786f4236555ca93612ba243b2389a", "parents": [ "1c9982b4961334c1edb0745a04cabd34bc2de675", "a75281626fc8fa6dc6c9cc314ee423e8bc45203b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 14 09:33:58 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 14 09:33:58 2026 -0700" }, "message": "Merge tag \u0027staging-7.0-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging\n\nPull staging driver fixes from Greg KH:\n \"Here are three small staging driver fixes for 7.0-rc4 that resolve\n some reported problems. They are:\n\n - two rtl8723bs data validation bugfixes\n\n - sm750fb removal path bugfix\n\n All of these have been in linux-next for many weeks with no reported\n issues\"\n\n* tag \u0027staging-7.0-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging:\n staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie\n staging: rtl8723bs: properly validate the data in rtw_get_ie_ex()\n staging: sm750fb: add missing pci_release_region on error and removal\n" }, { "commit": "1c9982b4961334c1edb0745a04cabd34bc2de675", "tree": "1148e9e556f05ab4d827b671596fb8a04befd02f", "parents": [ "9abff5748e4fb2055a54de6b8e43f4395d2481d9", "b28913e897edfeedc4e33b03b28068b27d002e6c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 15:38:55 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 15:38:55 2026 -0700" }, "message": "Merge tag \u0027drm-fixes-2026-03-14\u0027 of https://gitlab.freedesktop.org/drm/kernel\n\nPull drm fixes from Dave Airlie:\n \"The weekly drm fixes. This is mostly msm fixes across the functions,\n with amdgpu and i915. It also has a core rust fix and changes in\n nova-core to take advantage of it, and otherwise just has some minor\n driver fixes, and marks loongsoon as orphaned.\n\n rust:\n - Fix safety issue in dma_read! and dma_write!\n\n nova-core:\n - Fix UB in DmaGspMem pointer accessors\n - Fix stack overflow in GSP memory allocation\n\n loongsoon:\n - mark drm driver as unmaintained\n\n msm:\n - Core:\n - Adjusted msm_iommu_pagetable_prealloc_allocate() allocation type\n - DPU:\n - Fixed blue screens on Hamoa laptops by reverting the LM\n reservation\n - Fixed the size of the LM block on several platforms\n - Dropped usage of %pK (again)\n - Fixed smatch warning on SSPP v13+ code\n - Fixed INTF_6 interrupts on Lemans\n - DSI:\n - Fixed DSI PHY revision on Kaanapali\n - Fixed pixel clock calculation for the bonded DSI mode panels\n with compression enabled\n - DT bindings:\n - Fixed DisplayPort description on Glymur\n - Fixed model name in SM8750 MDSS schema\n - GPU:\n - Added MODULE_DEVICE_TABLE to the GPU driver\n - Fix bogus protect error on X2-85\n - Fix dma_free_attrs() buffer size\n - Gen8 UBWC fix for Glymur\n\n i915:\n - Avoid hang when configuring VRR [icl]\n - Fix sg_table overflow with \u003e4GB folios\n - Fix PSR Selective Update handling\n - Fix eDP ALPM read-out sequence\n\n amdgpu:\n - SMU13 fix\n - SMU14 fix\n - Fixes for bringup hw testing\n - Kerneldoc fix\n - GC12 idle power fix for compute workloads\n - DCCG fixes\n\n amdkfd:\n - Fix missing BO unreserve in an error path\n\n ivpu:\n - drop unnecessary bootparams register setting\n\n amdxdna:\n - fix runtime/suspend resume deadlock\n\n bridge:\n - ti-sn65dsi83: fix DSI rounding and dual LVDS\n\n gud:\n - fix NULL crtc dereference on display disable\"\n\n* tag \u0027drm-fixes-2026-03-14\u0027 of https://gitlab.freedesktop.org/drm/kernel: (44 commits)\n drm/amd: Set num IP blocks to 0 if discovery fails\n drm/amdkfd: Unreserve bo if queue update failed\n drm/amd/display: Check for S0i3 to be done before DCCG init on DCN21\n drm/amd/display: Add missing DCCG register entries for DCN20-DCN316\n gpu: nova-core: gsp: fix UB in DmaGspMem pointer accessors\n drm/loongson: Mark driver as orphaned\n accel/amdxdna: Fix runtime suspend deadlock when there is pending job\n gpu: nova-core: fix stack overflow in GSP memory allocation\n accel/ivpu: Remove boot params address setting via MMIO register\n drm/i915/dp: Read ALPM caps after DPCD init\n drm/i915/psr: Write DSC parameters on Selective Update in ET mode\n drm/i915/dsc: Add helper for writing DSC Selective Update ET parameters\n drm/i915/dsc: Add Selective Update register definitions\n drm/i915/psr: Repeat Selective Update area alignment\n drm/i915: Fix potential overflow of shmem scatterlist length\n drm/i915/vrr: Configure VRR timings after enabling TRANS_DDI_FUNC_CTL\n drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output\n drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding\n drm/gud: fix NULL crtc dereference on display disable\n drm/sitronix/st7586: fix bad pixel data due to byte swap\n ...\n" }, { "commit": "9abff5748e4fb2055a54de6b8e43f4395d2481d9", "tree": "32cadfb6e5fdc5ba29c400f7c09f530ab2753c7b", "parents": [ "b073bcb8d43fd39f00ef07df5a47818a99c999eb", "98c790b100764102d877e9339471b8c4c9233f2c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 15:11:05 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 15:11:05 2026 -0700" }, "message": "Merge tag \u0027wq-for-7.0-rc3-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/wq\n\nPull workqueue fixes from Tejun Heo:\n\n - Improve workqueue stall diagnostics: dump all busy workers (not just\n running ones), show wall-clock duration of in-flight work items, and\n add a sample module for reproducing stalls\n\n - Fix POOL_BH vs WQ_BH flag namespace mismatch in pr_cont_worker_id()\n\n - Rename pool-\u003ewatchdog_ts to pool-\u003elast_progress_ts and related\n functions for clarity\n\n* tag \u0027wq-for-7.0-rc3-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/wq:\n workqueue: Rename show_cpu_pool{s,}_hog{s,}() to reflect broadened scope\n workqueue: Add stall detector sample module\n workqueue: Show all busy workers in stall diagnostics\n workqueue: Show in-flight work item duration in stall diagnostics\n workqueue: Rename pool-\u003ewatchdog_ts to pool-\u003elast_progress_ts\n workqueue: Use POOL_BH instead of WQ_BH when checking pool flags\n" }, { "commit": "b073bcb8d43fd39f00ef07df5a47818a99c999eb", "tree": "78f5708363ce0b870355772931761c8976622910", "parents": [ "8369b2e97d806537dcdba1d6b3bb46fb1407dab0", "a72f73c4dd9b209c53cf8b03b6e97fcefad4262c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 15:06:31 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 15:06:31 2026 -0700" }, "message": "Merge tag \u0027cgroup-for-7.0-rc3-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup\n\nPull cgroup fixes from Tejun Heo:\n\n - Hide PF_EXITING tasks from cgroup.procs to avoid exposing dead tasks\n that haven\u0027t been removed yet, fixing a systemd timeout issue on\n PREEMPT_RT\n\n - Call rebuild_sched_domains() directly in CPU hotplug instead of\n deferring to a workqueue, fixing a race where online/offline CPUs\n could briefly appear in stale sched domains\n\n* tag \u0027cgroup-for-7.0-rc3-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup:\n cgroup: Don\u0027t expose dead tasks in cgroup\n cgroup/cpuset: Call rebuild_sched_domains() directly in hotplug\n" }, { "commit": "8369b2e97d806537dcdba1d6b3bb46fb1407dab0", "tree": "7cb3697c8da354bbea9e9c788fadb2e0960c74ba", "parents": [ "8040dc41d272658ac22939ed9cb5ff24240ad851", "2fcfe5951eb2e8440fc5e1dd6ea977336ff83a1d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 14:54:56 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 14:54:56 2026 -0700" }, "message": "Merge tag \u0027sched_ext-for-7.0-rc3-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/sched_ext\n\nPull sched_ext fixes from Tejun Heo:\n\n - Fix data races flagged by KCSAN: add missing READ_ONCE()/WRITE_ONCE()\n annotations for lock-free accesses to module parameters and dsq-\u003eseq\n\n - Fix silent truncation of upper 32 enqueue flags (SCX_ENQ_PREEMPT and\n above) when passed through the int sched_class interface\n\n - Documentation updates: scheduling class precedence, task ownership\n state machine, example scheduler descriptions, config list cleanup\n\n - Selftest fix for format specifier and buffer length in\n file_write_long()\n\n* tag \u0027sched_ext-for-7.0-rc3-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/sched_ext:\n sched_ext: Use WRITE_ONCE() for the write side of scx_enable helper pointer\n sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags\n sched_ext: Documentation: Update sched-ext.rst\n sched_ext: Use READ_ONCE() for scx_slice_bypass_us in scx_bypass()\n sched_ext: Documentation: Mention scheduling class precedence\n sched_ext: Document task ownership state machine\n sched_ext: Use READ_ONCE() for lock-free reads of module param variables\n sched_ext/selftests: Fix format specifier and buffer length in file_write_long()\n sched_ext: Use WRITE_ONCE() for the write side of dsq-\u003eseq update\n" }, { "commit": "8040dc41d272658ac22939ed9cb5ff24240ad851", "tree": "3d0e452f289bdbb8319b51d697c711e285a6d7fe", "parents": [ "8d9968859cf4efabf39b4c22eacdb990e5f7178e", "35b16a7a2c4fc458304447128b86514ce9f70f3c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 14:24:15 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 14:24:15 2026 -0700" }, "message": "Merge tag \u0027perf-tools-fixes-for-v7.0-1-2026-03-13\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/perf/perf-tools\n\nPull perf tools fixes from Arnaldo Carvalho de Melo:\n\n - Fix stale build ID in module MMAP2 records in events synthesized for\n pre-existing processes\n\n - Fix rust cross compilation\n\n - hashmap__new() error pointer return handling fixes\n\n - Fix off-by-one bug in outside of functions check on the disasm code\n\n - Update header copies of kernel headers, including prctl.h, mount.h,\n fs.h, irq_vectors.h, perf_event.h, gfp_types.h, kvm.h, cpufeatures.h\n msr-index.h, also the syscall tables files that introduced the\n \u0027rseq_slice_yield\u0027 syscall\n\n - Finish removal of ETM_OPT_* on the ARM coresight support, needed to\n sync the coresight-pmu.h header with the kernel sources\n\n - Make in-target rule robust against too long argument error\n\n* tag \u0027perf-tools-fixes-for-v7.0-1-2026-03-13\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/perf/perf-tools: (22 commits)\n perf synthetic-events: Fix stale build ID in module MMAP2 records\n perf annotate loongarch: Fix off-by-one bug in outside check\n perf ftrace: Fix hashmap__new() error checking\n perf annotate: Fix hashmap__new() error checking\n perf cs-etm: Sync coresight-pmu.h header with the kernel sources\n perf cs-etm: Finish removal of ETM_OPT_*\n tools headers UAPI: Update tools\u0027 copy of linux/coresight-pmu.h\n tools headers: Update the syscall tables and unistd.h, to support the new \u0027rseq_slice_yield\u0027 syscall\n perf disasm: Fix off-by-one bug in outside check\n tools arch x86: Sync msr-index.h to pick MSR_{OMR_[0-3],CORE_PERF_GLOBAL_STATUS_SET}\n tools headers UAPI: Sync x86\u0027s asm/kvm.h with the kernel sources\n tools headers x86 cpufeatures: Sync with the kernel sources\n tools headers UAPI: Sync linux/kvm.h with the kernel sources\n tools headers: Update the linux/gfp_types.h copy with the kernel sources\n perf beauty: Update the linux/perf_event.h copy with the kernel sources\n perf beauty: Update the arch/x86/include/asm/irq_vectors.h copy with the kernel sources\n perf beauty: Sync UAPI linux/fs.h with kernel sources\n perf beauty: Sync linux/mount.h copy with the kernel sources\n tools build: Fix rust cross compilation\n perf build: Prevent \"argument list too long\" error\n ...\n" }, { "commit": "8d9968859cf4efabf39b4c22eacdb990e5f7178e", "tree": "39a3283af0d182bccd5007036313ed48d8eee982", "parents": [ "2c361c9b7f452cf5331fe0d1230ab23c374a1fd2", "598bbefa8032cc58b564a81d1ad68bd815c8dc0f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 14:18:13 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 14:18:13 2026 -0700" }, "message": "Merge tag \u0027s390-7.0-5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux\n\nPull s390 fixes from Vasily Gorbik:\n\n - Revert IRQ entry/exit path optimization that incorrectly cleared\n some PSW bits before irqentry_exit(), causing boot failures with\n linux-next and HRTIMER_REARM_DEFERRED (which only uncovered the\n problem)\n\n - Fix zcrypt code to show CCA card serial numbers even when the\n default crypto domain is offline by selecting any domain available,\n preventing empty sysfs entries\n\n* tag \u0027s390-7.0-5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux:\n s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute\n s390: Revert \"s390/irq/idle: Remove psw bits early\"\n" }, { "commit": "2c361c9b7f452cf5331fe0d1230ab23c374a1fd2", "tree": "0f6174f103596214256fa953e58b18ccc4d86174", "parents": [ "399af66228cfd7df79dc360810b6b673000f8090", "b282c43ed156ae15ea76748fc15cd5c39dc9ab72" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 14:03:58 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 14:03:58 2026 -0700" }, "message": "Merge tag \u0027ceph-for-7.0-rc4\u0027 of https://github.com/ceph/ceph-client\n\nPull ceph fixes from Ilya Dryomov:\n \"A small pile of CephFS and messenger bug fixes, all marked for stable\"\n\n* tag \u0027ceph-for-7.0-rc4\u0027 of https://github.com/ceph/ceph-client:\n libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()\n libceph: Use u32 for non-negative values in ceph_monmap_decode()\n MAINTAINERS: update email address of Dongsheng Yang\n libceph: reject preamble if control segment is empty\n libceph: admit message frames only in CEPH_CON_S_OPEN state\n libceph: prevent potential out-of-bounds reads in process_message_header()\n ceph: do not skip the first folio of the next object in writeback\n ceph: fix memory leaks in ceph_mdsc_build_path()\n ceph: add a bunch of missing ceph_path_info initializers\n ceph: fix i_nlink underrun during async unlink\n" }, { "commit": "399af66228cfd7df79dc360810b6b673000f8090", "tree": "69be367f431555217d41c937e38eee96795cb4ea", "parents": [ "d874ca0522389405e26bc2ba38b59c9849c52cc1", "362c490980867930a098b99f421268fbd7ca05fd" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 10:49:15 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 10:49:15 2026 -0700" }, "message": "Merge tag \u0027xfs-fixes-7.0-rc4\u0027 of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux\n\nPull xfs fixes from Carlos Maiolino:\n \"A couple race fixes found on the new healthmon mechanism, and another\n flushing dquots during filesystem shutdown\"\n\n* tag \u0027xfs-fixes-7.0-rc4\u0027 of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux:\n xfs: fix integer overflow in bmap intent sort comparator\n xfs: fix undersized l_iclog_roundoff values\n xfs: ensure dquot item is deleted from AIL only after log shutdown\n xfs: remove redundant set null for ip-\u003ei_itemp\n xfs: fix returned valued from xfs_defer_can_append\n xfs: Remove redundant NULL check after __GFP_NOFAIL\n xfs: fix race between healthmon unmount and read_iter\n xfs: remove scratch field from struct xfs_gc_bio\n" }, { "commit": "d874ca0522389405e26bc2ba38b59c9849c52cc1", "tree": "548558472a729e84c477b824ed91973abc99c580", "parents": [ "b36eb6e3f5d8d48798617e554fc886d277921f69", "e3beefd3af09f8e460ddaf39063d3d7664d7ab59" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 10:46:32 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 10:46:32 2026 -0700" }, "message": "Merge tag \u0027v7.0-rc3-smb3-client-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6\n\nPull smb client fixes from Steve French:\n - Fix reconnect when using non-default port\n - Fix default retransmission behavior\n - Fix open handle reuse in cifs_open\n - Fix export for smb2-mapperror-test\n - Fix potential corruption on write retry\n - Fix potentially uninitialized superblock flags\n - Fix missing O_DIRECT and O_SYNC flags on create\n\n* tag \u0027v7.0-rc3-smb3-client-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6:\n cifs: make default value of retrans as zero\n smb: client: fix open handle lookup in cifs_open()\n smb: client: fix iface port assignment in parse_server_interfaces\n smb/client: only export symbol for \u0027smb2maperror-test\u0027 module\n smb: client: fix in-place encryption corruption in SMB2_write()\n smb: client: fix sbflags initialization\n smb: client: fix atomic open with O_DIRECT \u0026 O_SYNC\n" }, { "commit": "b36eb6e3f5d8d48798617e554fc886d277921f69", "tree": "2f4b5d68bae56502b3809a318d62271337b9cc64", "parents": [ "ff30ea1fb1c0f3077ce02781641e240964b7fb89", "f879365c5bb210ed0d0b0aae1a0202d0c0b4b9d0" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 10:31:10 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 10:31:10 2026 -0700" }, "message": "Merge tag \u0027spi-fix-v7.0-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi\n\nPull spi fixes from Mark Brown:\n \"A couple of device ID and quirk updates, plus a bunch of small fixes\n most of which (other than the Cadence one) are unremarkable error\n handling fixes\"\n\n* tag \u0027spi-fix-v7.0-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi:\n spi: atcspi200: Handle invalid buswidth and fix compiler warning\n spi: dt-bindings: sun6i: Allow Dual SPI and Quad SPI for newer SoCs\n spi: intel-pci: Add support for Nova Lake mobile SPI flash\n spi: cadence-qspi: Fix requesting of APB and AHB clocks on JH7110\n spi: rockchip-sfc: Fix double-free in remove() callback\n spi: atcspi200: Fix double-free in atcspi_configure_dma()\n spi: amlogic: spifc-a4: Fix DMA mapping error handling\n" }, { "commit": "ff30ea1fb1c0f3077ce02781641e240964b7fb89", "tree": "2f29a3e206fe581b9c07fd193fe230f35f046b02", "parents": [ "56cf10db2ae0bb90c69b644d639b559106d52a8d", "21b3fb7dc19caa488d285e3c47999f7f1a179334" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 10:29:45 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 10:29:45 2026 -0700" }, "message": "Merge tag \u0027regulator-fix-v7.0-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator\n\nPull regulator fixes from Mark Brown:\n \"A couple of small driver specific fixes for pca9450, cleaning up\n logging and fixing warnings due to confusion with interrupt type\"\n\n* tag \u0027regulator-fix-v7.0-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator:\n regulator: pca9450: Correct probed name for PCA9452\n regulator: pca9450: Correct interrupt type\n" }, { "commit": "d0d9b1f4f5391e6a00cee81d73ed2e8f98446d5f", "tree": "7ac6bf46f6656d953990ba0bc931942979c1f20b", "parents": [ "8345b1539faa49fcf9c9439c3cbd97dac6eca171" ], "author": { "name": "Vyacheslav Vahnenko", "email": "vahnenko2003@gmail.com", "time": "Fri Mar 13 15:36:38 2026 +0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Mar 13 18:19:07 2026 +0100" }, "message": "USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed\n\nAdd USB_QUIRK_NO_BOS for ezcap401 capture card, without it dmesg will show\n\"unable to get BOS descriptor or descriptor too short\" and \"unable to\nread config index 0 descriptor/start: -71\" errors and device will not\nable to work at full speed at 10gbs\n\nSigned-off-by: Vyacheslav Vahnenko \u003cvahnenko2003@gmail.com\u003e\nCc: stable \u003cstable@kernel.org\u003e\nLink: https://patch.msgid.link/20260313123638.20481-1-vahnenko2003@gmail.com\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "56cf10db2ae0bb90c69b644d639b559106d52a8d", "tree": "7cf178df155f6442d47e2329d2cbb80a69801538", "parents": [ "73548503dca50d2c2aa8c8cbb6eb8c1bf5959b21", "9250673cf23572b08c51bcdbb2919e9982bfc36b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 10:15:14 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 10:15:14 2026 -0700" }, "message": "Merge tag \u0027sound-7.0-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound\n\nPull sound fixes from Takashi Iwai:\n \"There have been continuous flux but most of them are device-specific\n small fixes, while we see a few core fixes at this time (minor PCM fix\n for linked streams and a few ASoC core fixes for delayed work, etc)\n\n Core:\n - PCM: Fix use-after-free in linked stream drain\n\n ASoC:\n - core: Fixes for delayed works, empty DMI string handling and DT overlay\n - qcom: qdsp6: Fix ADSP stop/start crash via component removal ordering\n - tegra: Add support for Tegra238 audio graph card\n - amd: Fix missing error checks for clock acquisition\n - rt1011: Fix incorrect DAPM context retrieval helper\n\n HD-audio:\n - Add quirk for Gigabyte H610M, ASUS UM6702RC, HP 14s-dr5xxx, and\n ThinkPad X390\n\n USB-audio:\n - Scarlett2: Fix NULL dereference for malformed endpoint descriptors\n - Add quirk for SPACETOUCH\"\n\n* tag \u0027sound-7.0-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound:\n ASoC: amd: acp-mach-common: Add missing error check for clock acquisition\n ASoC: detect empty DMI strings\n ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition\n ALSA: usb-audio: Add iface reset and delay quirk for SPACETOUCH USB Audio\n ASoC: codecs: rt1011: Use component to get the dapm context in spk_mode_put\n ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces\n ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays\n ASoC: soc-core: flush delayed work before removing DAIs and widgets\n ASoC: soc-core: drop delayed_work_pending() check before flush\n ASoC: tegra: Add support for Tegra238 soundcard\n ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390\n ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk\n ALSA: hda/realtek: add quirk for ASUS UM6702RC\n ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain()\n ALSA: hda/realtek: Add quirk for Gigabyte Technology to fix headphone\n firmware: cs_dsp: Fix fragmentation regression in firmware download\n ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start\n" }, { "commit": "73548503dca50d2c2aa8c8cbb6eb8c1bf5959b21", "tree": "e95b6cc2d9b613766865d13843795dc9ef4fdfff", "parents": [ "e67bf352a0847a65a157d5b02a6024c65a781e08", "7d0abefec48dfefeec28dc7c3105a88c43747d02" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 10:13:06 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 10:13:06 2026 -0700" }, "message": "Merge tag \u0027block-7.0-20260312\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux\n\nPull block fixes from Jens Axboe:\n\n - NVMe pull request via Keith:\n - Fix nvme-pci IRQ race and slab-out-of-bounds access\n - Fix recursive workqueue locking for target async events\n - Various cleanups\n\n - Fix a potential NULL pointer dereference in ublk on size setting\n\n - ublk automatic partition scanning fix\n\n - Two s390 dasd fixes\n\n* tag \u0027block-7.0-20260312\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux:\n nvme: Annotate struct nvme_dhchap_key with __counted_by\n nvme-core: do not pass empty queue_limits to blk_mq_alloc_queue()\n nvme-pci: Fix race bug in nvme_poll_irqdisable()\n nvmet: move async event work off nvmet-wq\n nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set\n s390/dasd: Copy detected format information to secondary device\n s390/dasd: Move quiesce state with pprc swap\n ublk: don\u0027t clear GD_SUPPRESS_PART_SCAN for unprivileged daemons\n ublk: fix NULL pointer dereference in ublk_ctrl_set_size()\n" }, { "commit": "e67bf352a0847a65a157d5b02a6024c65a781e08", "tree": "c903bd4fc63eadb518ad9fce5d3effb5a82a9125", "parents": [ "8174dafb2d9a85c895d3bfb9cc3e7c236107c93f", "c2c185be5c85d37215397c8e8781abf0a69bec1f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 10:09:35 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 10:09:35 2026 -0700" }, "message": "Merge tag \u0027io_uring-7.0-20260312\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux\n\nPull io_uring fixes from Jens Axboe:\n\n - Fix an inverted true/false comment on task_no_new_privs, from the\n BPF filtering changes merged in this release\n\n - Use the migration disabling way of running the BPF filters, as the\n io_uring side doesn\u0027t do that already\n\n - Fix an issue with -\u003erings stability under resize, both for local\n task_work additions and for eventfd signaling\n\n - Fix an issue with SQE mixed mode, where a bounds check wasn\u0027t correct\n for having a 128b SQE\n\n - Fix an issue where a legacy provided buffer group is changed to to\n ring mapped one while legacy buffers from that group are in flight\n\n* tag \u0027io_uring-7.0-20260312\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux:\n io_uring/kbuf: check if target buffer list is still legacy on recycle\n io_uring: fix physical SQE bounds check for SQE_MIXED 128-byte ops\n io_uring/eventfd: use ctx-\u003erings_rcu for flags checking\n io_uring: ensure ctx-\u003erings is stable for task work flags manipulation\n io_uring/bpf_filter: use bpf_prog_run_pin_on_cpu() to prevent migration\n io_uring/register: fix comment about task_no_new_privs\n" }, { "commit": "8174dafb2d9a85c895d3bfb9cc3e7c236107c93f", "tree": "7fdfb0d7fd07ef274b3189a152cd8b1fb4fc3db0", "parents": [ "92e989acfb83493e0305bc9fdcc666275ddd46c9", "464b1c115852fe025635ae2065e00caced184d92" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 10:07:33 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 10:07:33 2026 -0700" }, "message": "Merge tag \u0027slab-for-7.0-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vbabka/slab\n\nPull slab fixes from Vlastimil Babka:\n\n - Fix for a memory leak that can occur when already so low on memory\n that we can\u0027t allocate a new slab anymore (Qing Wang)\n\n - Fix for a case where slabobj_ext array for a slab might be allocated\n from the same slab, making it permanently non-freeable (Harry Yoo)\n\n* tag \u0027slab-for-7.0-rc3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vbabka/slab:\n slab: fix memory leak when refill_sheaf() fails\n mm/slab: fix an incorrect check in obj_exts_alloc_size()\n" }, { "commit": "92e989acfb83493e0305bc9fdcc666275ddd46c9", "tree": "c079d612d14d5ccec0061fc48c4a7f32293626e3", "parents": [ "0257f64bdac7fdca30fa3cae0df8b9ecbec7733a", "5c3daa5301693d2e5364483a3405649a0fdaed98" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 10:06:00 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 13 10:06:00 2026 -0700" }, "message": "Merge tag \u0027pwrseq-fixes-for-v7.0-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux\n\nPull power sequencing fix from Bartosz Golaszewski:\n\n - fix OF-node reference leak in pwrseq-pcie-m2\n\n* tag \u0027pwrseq-fixes-for-v7.0-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux:\n power: sequencing: pcie-m2: Fix device node reference leak in probe\n" }, { "commit": "5ef268cb7a0aac55521fd9881f1939fa94a8988e", "tree": "8bed35bcc7360db90481a5bbc43c038f6bb599c3", "parents": [ "e113f0b46d19626ec15388bcb91432c9a4fd6261" ], "author": { "name": "Masami Hiramatsu (Google)", "email": "mhiramat@kernel.org", "time": "Fri Mar 13 23:04:11 2026 +0900" }, "committer": { "name": "Masami Hiramatsu (Google)", "email": "mhiramat@kernel.org", "time": "Fri Mar 13 23:15:26 2026 +0900" }, "message": "kprobes: Remove unneeded warnings from __arm_kprobe_ftrace()\n\nRemove unneeded warnings for handled errors from __arm_kprobe_ftrace()\nbecause all caller handled the error correctly.\n\nLink: https://lore.kernel.org/all/177261531182.1312989.8737778408503961141.stgit@mhiramat.tok.corp.google.com/\n\nReported-by: Zw Tang \u003cshicenci@gmail.com\u003e\nCloses: https://lore.kernel.org/all/CAPHJ_V+J6YDb_wX2nhXU6kh466Dt_nyDSas-1i_Y8s7tqY-Mzw@mail.gmail.com/\nFixes: 9c89bb8e3272 (\"kprobes: treewide: Cleanup the error messages for kprobes\")\nCc: stable@vger.kernel.org\nSigned-off-by: Masami Hiramatsu (Google) \u003cmhiramat@kernel.org\u003e\n" }, { "commit": "e113f0b46d19626ec15388bcb91432c9a4fd6261", "tree": "15058f0c74f356e92d2e730ba43aa5c5145da409", "parents": [ "1f318b96cc84d7c2ab792fcc0bfd42a7ca890681" ], "author": { "name": "Masami Hiramatsu (Google)", "email": "mhiramat@kernel.org", "time": "Fri Mar 13 23:14:14 2026 +0900" }, "committer": { "name": "Masami Hiramatsu (Google)", "email": "mhiramat@kernel.org", "time": "Fri Mar 13 23:14:14 2026 +0900" }, "message": "kprobes: avoid crash when rmmod/insmod after ftrace killed\n\nAfter we hit ftrace is killed by some errors, the kernel crash if\nwe remove modules in which kprobe probes.\n\nBUG: unable to handle page fault for address: fffffbfff805000d\nPGD 817fcc067 P4D 817fcc067 PUD 817fc8067 PMD 101555067 PTE 0\nOops: Oops: 0000 [#1] SMP KASAN PTI\nCPU: 4 UID: 0 PID: 2012 Comm: rmmod Tainted: G W OE\nTainted: [W]\u003dWARN, [O]\u003dOOT_MODULE, [E]\u003dUNSIGNED_MODULE\nRIP: 0010:kprobes_module_callback+0x89/0x790\nRSP: 0018:ffff88812e157d30 EFLAGS: 00010a02\nRAX: 1ffffffff805000d RBX: dffffc0000000000 RCX: ffffffff86a8de90\nRDX: ffffed1025c2af9b RSI: 0000000000000008 RDI: ffffffffc0280068\nRBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1025c2af9a\nR10: ffff88812e157cd7 R11: 205d323130325420 R12: 0000000000000002\nR13: ffffffffc0290488 R14: 0000000000000002 R15: ffffffffc0280040\nFS: 00007fbc450dd740(0000) GS:ffff888420331000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: fffffbfff805000d CR3: 000000010f624000 CR4: 00000000000006f0\nCall Trace:\n \u003cTASK\u003e\n notifier_call_chain+0xc6/0x280\n blocking_notifier_call_chain+0x60/0x90\n __do_sys_delete_module.constprop.0+0x32a/0x4e0\n do_syscall_64+0x5d/0xfa0\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nThis is because the kprobe on ftrace does not correctly handles\nthe kprobe_ftrace_disabled flag set by ftrace_kill().\n\nTo prevent this error, check kprobe_ftrace_disabled in\n__disarm_kprobe_ftrace() and skip all ftrace related operations.\n\nLink: https://lore.kernel.org/all/176473947565.1727781.13110060700668331950.stgit@mhiramat.tok.corp.google.com/\n\nReported-by: Ye Bin \u003cyebin10@huawei.com\u003e\nCloses: https://lore.kernel.org/all/20251125020536.2484381-1-yebin@huaweicloud.com/\nFixes: ae6aa16fdc16 (\"kprobes: introduce ftrace based optimization\")\nCc: stable@vger.kernel.org\nSigned-off-by: Masami Hiramatsu (Google) \u003cmhiramat@kernel.org\u003e\nAcked-by: Steven Rostedt (Google) \u003crostedt@goodmis.org\u003e\n" }, { "commit": "e2715ea5fb352cd43fce437b91aa0fd50aaaf384", "tree": "b88fc56642d7d787c450495cfba7bccb22d735f0", "parents": [ "1120a36bb1e9b9e22de75ecb4ef0b998f73a97f1" ], "author": { "name": "Masami Hiramatsu (Google)", "email": "mhiramat@kernel.org", "time": "Fri Mar 13 13:18:55 2026 +0900" }, "committer": { "name": "Masami Hiramatsu (Google)", "email": "mhiramat@kernel.org", "time": "Fri Mar 13 17:49:30 2026 +0900" }, "message": "bootconfig: Add bootconfig tests about braces\n\nAdd more bootconfig tests for checking the error message of\nnon closing brace and max number of nested braces.\n\nLink: https://lore.kernel.org/all/177337553551.416919.11217619471547711262.stgit@devnote2/\n\nSigned-off-by: Masami Hiramatsu (Google) \u003cmhiramat@kernel.org\u003e" }, { "commit": "1120a36bb1e9b9e22de75ecb4ef0b998f73a97f1", "tree": "e3763927e2c2343b13c0196626f0f28e8a2c63ab", "parents": [ "560f763baa0f2c9a44da4294c06af071405ac46f" ], "author": { "name": "Josh Law", "email": "objecting@objecting.org", "time": "Thu Mar 12 19:11:43 2026 +0000" }, "committer": { "name": "Masami Hiramatsu (Google)", "email": "mhiramat@kernel.org", "time": "Fri Mar 13 17:48:27 2026 +0900" }, "message": "lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after()\n\nsnprintf() returns the number of characters that would have been\nwritten excluding the NUL terminator. Output is truncated when the\nreturn value is \u003e\u003d the buffer size, not just \u003e the buffer size.\n\nWhen ret \u003d\u003d size, the current code takes the non-truncated path,\nadvancing buf by ret and reducing size to 0. This is wrong because\nthe output was actually truncated (the last character was replaced by\nNUL). Fix by using \u003e\u003d so the truncation path is taken correctly.\n\nLink: https://lore.kernel.org/all/20260312191143.28719-4-objecting@objecting.org/\n\nFixes: 76db5a27a827 (\"bootconfig: Add Extra Boot Config support\")\nCc: stable@vger.kernel.org\nSigned-off-by: Josh Law \u003cobjecting@objecting.org\u003e\nSigned-off-by: Masami Hiramatsu (Google) \u003cmhiramat@kernel.org\u003e\n" }, { "commit": "560f763baa0f2c9a44da4294c06af071405ac46f", "tree": "01b8b6603e0d7e9f70223b00992acea28c042ce5", "parents": [ "39ebc8d7f561e1b64eca87353ef9b18e2825e591" ], "author": { "name": "Josh Law", "email": "objecting@objecting.org", "time": "Thu Mar 12 19:11:42 2026 +0000" }, "committer": { "name": "Masami Hiramatsu (Google)", "email": "mhiramat@kernel.org", "time": "Fri Mar 13 17:46:09 2026 +0900" }, "message": "lib/bootconfig: check bounds before writing in __xbc_open_brace()\n\nThe bounds check for brace_index happens after the array write.\nWhile the current call pattern prevents an actual out-of-bounds\naccess (the previous call would have returned an error), the\nwrite-before-check pattern is fragile and would become a real\nout-of-bounds write if the error return were ever not propagated.\n\nMove the bounds check before the array write so the function is\nself-contained and safe regardless of caller behavior.\n\nLink: https://lore.kernel.org/all/20260312191143.28719-3-objecting@objecting.org/\n\nFixes: ead1e19ad905 (\"lib/bootconfig: Fix a bug of breaking existing tree nodes\")\nCc: stable@vger.kernel.org\nSigned-off-by: Josh Law \u003cobjecting@objecting.org\u003e\nSigned-off-by: Masami Hiramatsu (Google) \u003cmhiramat@kernel.org\u003e\n" }, { "commit": "82f73ef9c41e0623e0a8bdce4fa44a7237709f0c", "tree": "3ceb09e6b6d1e22708f2895745031147a32e095b", "parents": [ "146c9ab38b48004b40735b6c1e1c2b5adf6436f9" ], "author": { "name": "Nilay Shroff", "email": "nilay@linux.ibm.com", "time": "Tue Mar 10 13:51:24 2026 +0530" }, "committer": { "name": "Madhavan Srinivasan", "email": "maddy@linux.ibm.com", "time": "Fri Mar 13 12:13:35 2026 +0530" }, "message": "powerpc/iommu: fix lockdep warning during PCI enumeration\n\nCommit a75b2be249d6 (\"iommu: Add iommu_driver_get_domain_for_dev()\nhelper\") introduced iommu_driver_get_domain_for_dev() for driver\ncode paths that hold iommu_group-\u003emutex while attaching a device\nto an IOMMU domain.\n\nThe same commit also added a lockdep assertion in\niommu_get_domain_for_dev() to ensure that callers do not hold\niommu_group-\u003emutex when invoking it.\n\nOn powerpc platforms, when PCI device ownership is switched from\nBLOCKED to the PLATFORM domain, the attach callback\nspapr_tce_platform_iommu_attach_dev() still calls\niommu_get_domain_for_dev(). This happens while iommu_group-\u003emutex\nis held during domain switching, which triggers the lockdep warning\nbelow during PCI enumeration:\n\nWARNING: drivers/iommu/iommu.c:2252 at iommu_get_domain_for_dev+0x38/0x80, CPU#2: swapper/0/1\nModules linked in:\nCPU: 2 UID: 0 PID: 1 Comm: swapper/0 Not tainted 7.0.0-rc2+ #35 PREEMPT\nHardware name: IBM,9105-22A Power11 (architected) 0x820200 0xf000007 of:IBM,FW1120.00 (RB1120_115) hv:phyp pSeries\nNIP: c000000000c244c4 LR: c00000000005b5a4 CTR: c00000000005b578\nREGS: c00000000a7bf280 TRAP: 0700 Not tainted (7.0.0-rc2+)\nMSR: 8000000002029033 \u003cSF,VEC,EE,ME,IR,DR,RI,LE\u003e CR: 22004422 XER: 0000000a\nCFAR: c000000000c24508 IRQMASK: 0\nGPR00: c00000000005b5a4 c00000000a7bf520 c000000001dc8100 0000000000000001\nGPR04: c00000000f972f10 0000000000000000 0000000000000000 0000000000000001\nGPR08: 0000001ffbc60000 0000000000000001 0000000000000000 0000000000000000\nGPR12: c00000000005b578 c000001fffffe480 c000000000011618 0000000000000000\nGPR16: 0000000000000000 0000000000000000 0000000000000000 0000000000000000\nGPR20: ffffffffffffefff 0000000000000000 c000000002d30eb0 0000000000000001\nGPR24: c0000000017881f8 0000000000000000 0000000000000001 c00000000f972e00\nGPR28: c00000000bbba0d0 0000000000000000 c00000000bbba0d0 c00000000f972e00\nNIP [c000000000c244c4] iommu_get_domain_for_dev+0x38/0x80\nLR [c00000000005b5a4] spapr_tce_platform_iommu_attach_dev+0x2c/0x98\nCall Trace:\n iommu_get_domain_for_dev+0x68/0x80 (unreliable)\n spapr_tce_platform_iommu_attach_dev+0x2c/0x98\n __iommu_attach_device+0x44/0x220\n __iommu_device_set_domain+0xf4/0x194\n __iommu_group_set_domain_internal+0xec/0x228\n iommu_setup_default_domain+0x5f4/0x6a4\n __iommu_probe_device+0x674/0x724\n iommu_probe_device+0x50/0xb4\n iommu_add_device+0x48/0x198\n pci_dma_dev_setup_pSeriesLP+0x198/0x4f0\n pcibios_bus_add_device+0x80/0x464\n pci_bus_add_device+0x40/0x100\n pci_bus_add_devices+0x54/0xb0\n pcibios_init+0xd8/0x140\n do_one_initcall+0x8c/0x598\n kernel_init_freeable+0x3ec/0x850\n kernel_init+0x34/0x270\n ret_from_kernel_user_thread+0x14/0x1c\n\nFix this by using iommu_driver_get_domain_for_dev() instead of\niommu_get_domain_for_dev() in spapr_tce_platform_iommu_attach_dev(),\nwhich is the appropriate helper for callers holding the group mutex.\n\nCc: stable@vger.kernel.org\nFixes: a75b2be249d6 (\"iommu: Add iommu_driver_get_domain_for_dev() helper\")\nCloses: https://patchwork.ozlabs.org/project/linuxppc-dev/patch/d5c834ff-4c95-44dd-8bef-57242d63aeee@linux.ibm.com/\nSigned-off-by: Nilay Shroff \u003cnilay@linux.ibm.com\u003e\nReviewed-by: Nicolin Chen \u003cnicolinc@nvidia.com\u003e\nTested-by: Venkat Rao Bagalkote \u003cvenkat88@linux.ibm.com\u003e\n[Maddy: Added Closes, tested and reviewed by tags]\nSigned-off-by: Madhavan Srinivasan \u003cmaddy@linux.ibm.com\u003e\nLink: https://patch.msgid.link/20260310082129.3630996-1-nilay@linux.ibm.com\n" }, { "commit": "39ebc8d7f561e1b64eca87353ef9b18e2825e591", "tree": "a9fdee2ae1c738549f1f0698c52f684b5629ff78", "parents": [ "1f318b96cc84d7c2ab792fcc0bfd42a7ca890681" ], "author": { "name": "Josh Law", "email": "objecting@objecting.org", "time": "Thu Mar 12 19:11:41 2026 +0000" }, "committer": { "name": "Masami Hiramatsu (Google)", "email": "mhiramat@kernel.org", "time": "Fri Mar 13 10:29:21 2026 +0900" }, "message": "lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error\n\n__xbc_open_brace() pushes entries with post-increment\n(open_brace[brace_index++]), so brace_index always points one past\nthe last valid entry. xbc_verify_tree() reads open_brace[brace_index]\nto report which brace is unclosed, but this is one past the last\npushed entry and contains stale/zero data, causing the error message\nto reference the wrong node.\n\nUse open_brace[brace_index - 1] to correctly identify the unclosed\nbrace. brace_index is known to be \u003e 0 here since we are inside the\nif (brace_index) guard.\n\nLink: https://lore.kernel.org/all/20260312191143.28719-2-objecting@objecting.org/\n\nFixes: ead1e19ad905 (\"lib/bootconfig: Fix a bug of breaking existing tree nodes\")\nCc: stable@vger.kernel.org\nSigned-off-by: Josh Law \u003cobjecting@objecting.org\u003e\nReviewed-by: Steven Rostedt (Google) \u003crostedt@goodmis.org\u003e\nSigned-off-by: Masami Hiramatsu (Google) \u003cmhiramat@kernel.org\u003e\n" }, { "commit": "b28913e897edfeedc4e33b03b28068b27d002e6c", "tree": "37f1b32aed1ddcc88cf6dab0f4e98bed628a3e82", "parents": [ "dd0365021be3e8693680bb1d2616edf7d5e17800", "0073a17b466684413ac87cf8ff6c19560db44e7a" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Mar 13 10:39:57 2026 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Mar 13 10:40:17 2026 +1000" }, "message": "Merge tag \u0027drm-rust-fixes-2026-03-12\u0027 of https://gitlab.freedesktop.org/drm/rust/kernel into drm-fixes\n\nCore Changes:\n\n- Fix safety issue in dma_read! and dma_write!.\n\nDriver Changes (Nova Core):\n\n- Fix UB in DmaGspMem pointer accessors.\n- Fix stack overflow in GSP memory allocation.\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Alice Ryhl \u003caliceryhl@google.com\u003e\nLink: https://patch.msgid.link/abNBSol3CLRCqlkZ@google.com\n" }, { "commit": "dd0365021be3e8693680bb1d2616edf7d5e17800", "tree": "0a93edc6a69a0bcc7c32a6caa408cdc77ce1b610", "parents": [ "8c835a10c021c08c3781305b806b15656c2dd7c8", "3646ff28780b4c52c5b5081443199e7a430110e5" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Mar 13 09:04:51 2026 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Mar 13 10:34:41 2026 +1000" }, "message": "Merge tag \u0027amd-drm-fixes-7.0-2026-03-12\u0027 of https://gitlab.freedesktop.org/agd5f/linux into drm-fixes\n\namd-drm-fixes-7.0-2026-03-12:\n\namdgpu:\n- SMU13 fix\n- SMU14 fix\n- Fixes for bringup hw testing\n- Kerneldoc fix\n- GC12 idle power fix for compute workloads\n- DCCG fixes\n\namdkfd:\n- Fix missing BO unreserve in an error path\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Alex Deucher \u003calexander.deucher@amd.com\u003e\nLink: https://patch.msgid.link/20260312180351.3874990-1-alexander.deucher@amd.com\n" }, { "commit": "8c835a10c021c08c3781305b806b15656c2dd7c8", "tree": "2148cd98b69e00bef6acf6480358ce531d708909", "parents": [ "3c9eced53749be418128170f89979f5d50547fd1", "335b237d902c7362cb7228802e68374406b24acf" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Mar 13 08:47:59 2026 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Mar 13 08:48:00 2026 +1000" }, "message": "Merge tag \u0027drm-intel-fixes-2026-03-12\u0027 of https://gitlab.freedesktop.org/drm/i915/kernel into drm-fixes\n\n- Avoid hang when configuring VRR [icl] (Ville Syrjälä)\n- Fix sg_table overflow with \u003e4GB folios (Janusz Krzysztofik)\n- Fix PSR Selective Update handling [psr] (Jouni Högander)\n- Fix eDP ALPM read-out sequence [dp] (Arun R Murthy)\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nFrom: Tvrtko Ursulin \u003ctursulin@igalia.com\u003e\nLink: https://patch.msgid.link/abJ_MQ7o-5ghyaNW@linux\n" }, { "commit": "3c9eced53749be418128170f89979f5d50547fd1", "tree": "5b53070afd19555f498ac9aa73a6bbc391480733", "parents": [ "50ae4ce2a6ace992025be3fdb14e244e88ddae18", "49973e2a4156a88e46ba1c1c484b7c214199a181" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Mar 13 08:32:14 2026 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Mar 13 08:32:23 2026 +1000" }, "message": "Merge tag \u0027drm-misc-fixes-2026-03-12\u0027 of https://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes\n\nA pixel byte swap fix for st7586, a null pointer dereference fix for\ngud, two timings fixes for ti-sn65dsi83, an initialization fix for ivpu,\nand a runtime suspend deadlock fix for amdxdna.\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Maxime Ripard \u003cmripard@redhat.com\u003e\nLink: https://patch.msgid.link/20260312-accurate-ambrosial-trout-bfabf8@houat\n" }, { "commit": "7d0abefec48dfefeec28dc7c3105a88c43747d02", "tree": "5a2fe139205a0b613dafb30b1d896555077c4fb5", "parents": [ "4c527c7e030672efd788d0806d7a68972a7ba3c1", "fa655a9ca73f7df32b8ca4d14ce11742f9578288" ], "author": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Mar 12 15:15:53 2026 -0600" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Mar 12 15:15:53 2026 -0600" }, "message": "Merge tag \u0027nvme-7.0-2026-03-12\u0027 of git://git.infradead.org/nvme into block-7.0\n\nPull NVMe fixes from Keith:\n\n\"- Fix nvme-pci IRQ race and slab-out-of-bounds access (Sungwoo Kim)\n - Fix recursive workqueue locking for target async events (Chaitanya)\n - Various cleanups (Maurizio Lombardi, Thorsten Blum)\"\n\n* tag \u0027nvme-7.0-2026-03-12\u0027 of git://git.infradead.org/nvme:\n nvme: Annotate struct nvme_dhchap_key with __counted_by\n nvme-core: do not pass empty queue_limits to blk_mq_alloc_queue()\n nvme-pci: Fix race bug in nvme_poll_irqdisable()\n nvmet: move async event work off nvmet-wq\n nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set\n" }, { "commit": "0257f64bdac7fdca30fa3cae0df8b9ecbec7733a", "tree": "65dae98b02dff81f8882eb5fe287bac66ba94f0c", "parents": [ "61c0b2ae734fc9d33ede9cbf7d3cad67a7b0ce28", "a076cc74744d83fb9f70147a154b99278945a3d2" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 12 13:01:37 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 12 13:01:37 2026 -0700" }, "message": "Merge tag \u0027pm-7.0-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull power management fixes from Rafael Wysocki:\n\n - Make the idle loop skip the cpuidle governor .reflect() callback\n after it has skipped the .select() one (Rafael Wysocki)\n\n - Fix swapped power/energy unit labels in cpupower (Kaushlendra Kumar)\n\n - Add support for setting EPP via systemd service and intel_pstate\n turbo boost support to cpupower (Jan Kiszka, Zhang Rui)\n\n* tag \u0027pm-7.0-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n sched: idle: Make skipping governor callbacks more consistent\n cpupower: Add intel_pstate turbo boost support for Intel platforms\n cpupower: Add support for setting EPP via systemd service\n cpupower: fix swapped power/energy unit labels\n" }, { "commit": "61c0b2ae734fc9d33ede9cbf7d3cad67a7b0ce28", "tree": "4def659b70b24bd00f256769d944d54028a611a6", "parents": [ "8004279c41adf3238ba71931219205cd1f59343b", "97d9960f355cca99960eb44cd1bba1d7ba1073ee" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 12 12:43:19 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 12 12:43:19 2026 -0700" }, "message": "Merge tag \u0027acpi-7.0-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull ACPI fixes from Rafael Wysocki:\n\n - On some platforms, the ACPI companion object of the ACPI video bus\n platform device is shared with multiple other platform devices which\n leads to driver probe issues, so replace that device with an\n auxiliary one (which arguably is a better match for the given use\n case) and update the ACPI video bus driver accordingly (Rafael\n Wysocki)\n\n - Address sparse warnings in acpi_os_initialize() by adding __iomem to\n a local variable declaration (Ben Dooks)\n\n* tag \u0027acpi-7.0-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address()\n ACPI: video: Switch over to auxiliary bus type\n" }, { "commit": "8004279c41adf3238ba71931219205cd1f59343b", "tree": "6f4c63a8fe74764c9cd16f3dd179a65b72bfbc05", "parents": [ "e0b38d286eef4633d231859e47679772db07db07", "4529e0015432977af3ecc3b9f940fc2a1ef1b265" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 12 12:38:17 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 12 12:38:17 2026 -0700" }, "message": "Merge tag \u0027nfs-for-7.0-2\u0027 of git://git.linux-nfs.org/projects/anna/linux-nfs\n\nPull NFS client fixes from Anna Schumaker:\n\n - Fix NFS KConfig typos\n\n - Decrement re_receiving on the early exit paths\n\n - return EISDIR on nfs3_proc_create if d_alias is a dir\n\n* tag \u0027nfs-for-7.0-2\u0027 of git://git.linux-nfs.org/projects/anna/linux-nfs:\n NFS: Fix NFS KConfig typos\n xprtrdma: Decrement re_receiving on the early exit paths\n nfs: return EISDIR on nfs3_proc_create if d_alias is a dir\n" }, { "commit": "e0b38d286eef4633d231859e47679772db07db07", "tree": "8d4dd22b87d624355e6479d24be49893b101eeac", "parents": [ "2c7e63d702f6c4209c5af833308e7fcbc7d4ab17", "0749cab6174dc035b1628fb6db03abf758cfda6f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 12 12:15:27 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 12 12:15:27 2026 -0700" }, "message": "Merge tag \u0027for-7.0-rc3-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux\n\nPull btrfs fixes from David Sterba:\n\n - detect possible file name hash collision earlier so it does not lead\n to transaction abort\n\n - handle b-tree leaf overflows when snapshotting a subvolume with set\n received UUID, leading to transaction abort\n\n - in zoned mode, reorder relocation block group initialization after\n the transaction kthread start\n\n - fix orphan cleanup state tracking of subvolume, this could lead to\n invalid dentries under some conditions\n\n - add locking around updates of dynamic reclain state update\n\n - in subpage mode, add missing RCU unlock when trying to releae extent\n buffer\n\n - remap tree fixes:\n - add missing description strings for the newly added remap tree\n - properly update search key when iterating backrefs\n\n* tag \u0027for-7.0-rc3-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux:\n btrfs: remove duplicated definition of btrfs_printk_in_rcu()\n btrfs: remove unnecessary transaction abort in the received subvol ioctl\n btrfs: abort transaction on failure to update root in the received subvol ioctl\n btrfs: fix transaction abort on set received ioctl due to item overflow\n btrfs: fix transaction abort when snapshotting received subvolumes\n btrfs: fix transaction abort on file creation due to name hash collision\n btrfs: read key again after incrementing slot in move_existing_remaps()\n btrfs: add missing RCU unlock in error path in try_release_subpage_extent_buffer()\n btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create\n btrfs: zoned: move btrfs_zoned_reserve_data_reloc_bg() after kthread start\n btrfs: hold space_info-\u003elock when clearing periodic reclaim ready\n btrfs: print-tree: add remap tree definitions\n" }, { "commit": "2c7e63d702f6c4209c5af833308e7fcbc7d4ab17", "tree": "e46b218ced108b588a1d83364397d57334121efd", "parents": [ "281f36d4a9970c206c2c44042904d4e34c092fbe", "c38b8f5f791ecce13ab77e2257f8fd2444ba80f6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 12 11:33:35 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 12 11:33:35 2026 -0700" }, "message": "Merge tag \u0027net-7.0-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net\n\nPull networking fixes from Paolo Abeni:\n \"Including fixes from CAN and netfilter.\n\n Current release - regressions:\n\n - eth: mana: Null service_wq on setup error to prevent double destroy\n\n Previous releases - regressions:\n\n - nexthop: fix percpu use-after-free in remove_nh_grp_entry\n\n - sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit\n\n - bpf: fix nd_tbl NULL dereference when IPv6 is disabled\n\n - neighbour: restore protocol !\u003d 0 check in pneigh update\n\n - tipc: fix divide-by-zero in tipc_sk_filter_connect()\n\n - eth:\n - mlx5:\n - fix crash when moving to switchdev mode\n - fix DMA FIFO desync on error CQE SQ recovery\n - iavf: fix PTP use-after-free during reset\n - bonding: fix type confusion in bond_setup_by_slave()\n - lan78xx: fix WARN in __netif_napi_del_locked on disconnect\n\n Previous releases - always broken:\n\n - core: add xmit recursion limit to tunnel xmit functions\n\n - net-shapers: don\u0027t free reply skb after genlmsg_reply()\n\n - netfilter:\n - fix stack out-of-bounds read in pipapo_drop()\n - fix OOB read in nfnl_cthelper_dump_table()\n\n - mctp:\n - fix device leak on probe failure\n - i2c: fix skb memory leak in receive path\n\n - can: keep the max bitrate error at 5%\n\n - eth:\n - bonding: fix nd_tbl NULL dereference when IPv6 is disabled\n - bnxt_en: fix RSS table size check when changing ethtool channels\n - amd-xgbe: prevent CRC errors during RX adaptation with AN disabled\n - octeontx2-af: devlink: fix NIX RAS reporter recovery condition\"\n\n* tag \u0027net-7.0-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net: (71 commits)\n net: prevent NULL deref in ip[6]tunnel_xmit()\n octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status\n octeontx2-af: devlink: fix NIX RAS reporter recovery condition\n net: ethernet: ti: am65-cpsw-nuss: Fix rx_filter value for PTP support\n net/mana: Null service_wq on setup error to prevent double destroy\n selftests: rtnetlink: add neighbour update test\n neighbour: restore protocol !\u003d 0 check in pneigh update\n net: dsa: realtek: Fix LED group port bit for non-zero LED group\n tipc: fix divide-by-zero in tipc_sk_filter_connect()\n net: dsa: microchip: Fix error path in PTP IRQ setup\n bpf: bpf_out_neigh_v6: Fix nd_tbl NULL dereference when IPv6 is disabled\n bpf: bpf_out_neigh_v4: Fix nd_tbl NULL dereference when IPv6 is disabled\n net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled\n ipv6: move the disable_ipv6_mod knob to core code\n net: bcmgenet: fix broken EEE by converting to phylib-managed state\n net-shapers: don\u0027t free reply skb after genlmsg_reply()\n net: dsa: mxl862xx: don\u0027t set user_mii_bus\n net: ethernet: arc: emac: quiesce interrupts before requesting IRQ\n page_pool: store detach_time as ktime_t to avoid false-negatives\n net: macb: Shuffle the tx ring before enabling tx\n ...\n" }, { "commit": "a076cc74744d83fb9f70147a154b99278945a3d2", "tree": "9be18f68e87b0121f5b01cd4b1b41cbea7641e3d", "parents": [ "d557640e4ce589a24dca5ca7ce3b9680f471325f", "06c2a67e90c1f04de10ac3091b97665beacb48ce" ], "author": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Thu Mar 12 19:00:30 2026 +0100" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Thu Mar 12 19:00:30 2026 +0100" }, "message": "Merge branch \u0027pm-tools\u0027\n\nMerge cpupower utility updates, including a fix and improvements of the\nexisting functionality, for 7.0-rc4.\n\n* pm-tools:\n cpupower: Add intel_pstate turbo boost support for Intel platforms\n cpupower: Add support for setting EPP via systemd service\n cpupower: fix swapped power/energy unit labels\n" }, { "commit": "281f36d4a9970c206c2c44042904d4e34c092fbe", "tree": "7b2929fbf31fc694f0598b910239a9b8023a2fdf", "parents": [ "80234b5ab240f52fa45d201e899e207b9265ef91", "8e135b8aee5a06c52a4347a5a6d51223c6f36ba3" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 12 10:58:02 2026 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 12 10:58:02 2026 -0700" }, "message": "Merge tag \u0027apparmor-pr-mainline-2026-03-09\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor\n\nPull AppArmor fixes from John Johansen:\n - fix race between freeing data and fs accessing it\n - fix race on unreferenced rawdata dereference\n - fix differential encoding verification\n - fix unconfined unprivileged local user can do privileged policy management\n - Fix double free of ns_name in aa_replace_profiles()\n - fix missing bounds check on DEFAULT table in verify_dfa()\n - fix side-effect bug in match_char() macro usage\n - fix: limit the number of levels of policy namespaces\n - replace recursive profile removal with iterative approach\n - fix memory leak in verify_header\n - validate DFA start states are in bounds in unpack_pdb\n\n* tag \u0027apparmor-pr-mainline-2026-03-09\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor:\n apparmor: fix race between freeing data and fs accessing it\n apparmor: fix race on rawdata dereference\n apparmor: fix differential encoding verification\n apparmor: fix unprivileged local user can do privileged policy management\n apparmor: Fix double free of ns_name in aa_replace_profiles()\n apparmor: fix missing bounds check on DEFAULT table in verify_dfa()\n apparmor: fix side-effect bug in match_char() macro usage\n apparmor: fix: limit the number of levels of policy namespaces\n apparmor: replace recursive profile removal with iterative approach\n apparmor: fix memory leak in verify_header\n apparmor: validate DFA start states are in bounds in unpack_pdb\n" }, { "commit": "97d9960f355cca99960eb44cd1bba1d7ba1073ee", "tree": "71bd7c8c52304d88d43f613b8c8b38bd16bb4b0d", "parents": [ "6ab3532b4c98f4e51969f0e5f3fc919c535f3ce1", "393815f57651101f1590632092986d1d5a3a41bd" ], "author": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Thu Mar 12 18:42:41 2026 +0100" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Thu Mar 12 18:42:41 2026 +0100" }, "message": "Merge branch \u0027acpi-osl\u0027\n\nMerge an ACPI OS services layer (OSL) fix that addresses sparse warnings\nin acpi_os_initialize() (Ben Dooks)\n\n* acpi-osl:\n ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address()\n" }, { "commit": "d2ea4ff1ce50787a98a3900b3fb1636f3620b7cf", "tree": "4a9789600248f71fbf00755ba1cb7afa7df21ae9", "parents": [ "dca01b0a264642929732c4db4a07e7b213304c15" ], "author": { "name": "Sean Christopherson", "email": "seanjc@google.com", "time": "Tue Mar 10 14:18:41 2026 -0700" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Thu Mar 12 17:31:53 2026 +0100" }, "message": "KVM: selftests: Verify SEV+ guests can read and write EFER, CR0, CR4, and CR8\n\nAdd \"do no harm\" testing of EFER, CR0, CR4, and CR8 for SEV+ guests to\nverify that the guest can read and write the registers, without hitting\ne.g. a #VC on SEV-ES guests due to KVM incorrectly trying to intercept a\nregister.\n\nSigned-off-by: Sean Christopherson \u003cseanjc@google.com\u003e\nMessage-ID: \u003c20260310211841.2552361-3-seanjc@google.com\u003e\nSigned-off-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\n" }, { "commit": "c38b8f5f791ecce13ab77e2257f8fd2444ba80f6", "tree": "d12f2dd1c32a6d73f1049cca8c3f5cfcb8e6a70e", "parents": [ "87f7dff3ec75b91def0024ebaaf732457f47a63b" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Thu Mar 12 04:39:08 2026 +0000" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Mar 12 16:03:41 2026 +0100" }, "message": "net: prevent NULL deref in ip[6]tunnel_xmit()\n\nBlamed commit missed that both functions can be called with dev \u003d\u003d NULL.\n\nAlso add unlikely() hints for these conditions that only fuzzers can hit.\n\nFixes: 6f1a9140ecda (\"net: add xmit recursion limit to tunnel xmit functions\")\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nCC: Weiming Shi \u003cbestswngs@gmail.com\u003e\nLink: https://patch.msgid.link/20260312043908.2790803-1-edumazet@google.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "c2c185be5c85d37215397c8e8781abf0a69bec1f", "tree": "904d5a38e0ecaf3e5a5805cea2e28e5cad19bda3", "parents": [ "6f02c6b196036dbb6defb4647d8707d29b7fe95b" ], "author": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Mar 12 08:59:25 2026 -0600" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Mar 12 08:59:25 2026 -0600" }, "message": "io_uring/kbuf: check if target buffer list is still legacy on recycle\n\nThere\u0027s a gap between when the buffer was grabbed and when it\npotentially gets recycled, where if the list is empty, someone could\u0027ve\nupgraded it to a ring provided type. This can happen if the request\nis forced via io-wq. The legacy recycling is missing checking if the\nbuffer_list still exists, and if it\u0027s of the correct type. Add those\nchecks.\n\nCc: stable@vger.kernel.org\nFixes: c7fb19428d67 (\"io_uring: add support for ring mapped supplied buffers\")\nReported-by: Keenan Dong \u003ckeenanat2000@gmail.com\u003e\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "592c61f3bfceaa29f8275696bd67c3dfad7ef72e", "tree": "a526f50531acfe9ab97d509b036d355c3742cf45", "parents": [ "487f9b3dc6e507a982f1b984aa6bfbd9dc4b0567" ], "author": { "name": "Miguel Ojeda", "email": "ojeda@kernel.org", "time": "Thu Mar 12 12:10:14 2026 +0100" }, "committer": { "name": "Miguel Ojeda", "email": "ojeda@kernel.org", "time": "Thu Mar 12 15:15:16 2026 +0100" }, "message": "rust: kbuild: allow `unused_features`\n\nStarting with the upcoming Rust 1.96.0 (to be released 2026-05-28),\n`rustc` introduces the new lint `unused_features` [1], which warns [2]:\n\n warning: feature `used_with_arg` is declared but not used\n --\u003e \u003ccrate attribute\u003e:1:93\n |\n 1 | #![feature(asm_const,asm_goto,arbitrary_self_types,lint_reasons,offset_of_nested,raw_ref_op,used_with_arg)]\n | ^^^^^^^^^^^^^\n |\n \u003d note: `#[warn(unused_features)]` (part of `#[warn(unused)]`) on by default\n\nThe original goal of using `-Zcrate-attr` automatically was that there\nis a consistent set of features enabled and managed globally for all\nRust kernel code (modulo exceptions like the `rust/` crated).\n\nWhile we could require crates to enable features manually (even if we\nstill keep the `-Zallow-features\u003d` list, i.e. removing the `-Zcrate-attr`\nlist), it is not really worth making all developers worry about it just\nfor a new lint.\n\nThe features are expected to eventually become stable anyway (most already\ndid), and thus having to remove features in every file that may use them\nis not worth it either.\n\nThus just allow the new lint globally.\n\nThe lint actually existed for a long time, which is why `rustc` does\nnot complain about an unknown lint in the stable versions we support,\nbut it was \"disabled\" years ago [3], and now it was made to work again.\n\nFor extra context, the new implementation of the lint has already been\nimproved to avoid linting about features that became stable thanks to\nBenno\u0027s report and the ensuing discussion [4] [5], but while that helps,\nit is still the case that we may have features enabled that are not used\nfor one reason or another in a particular crate.\n\nCc: stable@vger.kernel.org # Needed in 6.12.y and later (Rust is pinned in older LTSs).\nLink: https://github.com/rust-lang/rust/pull/152164 [1]\nLink: https://github.com/Rust-for-Linux/pin-init/pull/114 [2]\nLink: https://github.com/rust-lang/rust/issues/44232 [3]\nLink: https://github.com/rust-lang/rust/issues/153523 [4]\nLink: https://github.com/rust-lang/rust/pull/153610 [5]\nReviewed-by: Benno Lossin \u003clossin@kernel.org\u003e\nReviewed-by: Gary Guo \u003cgary@garyguo.net\u003e\nLink: https://patch.msgid.link/20260312111014.74198-1-ojeda@kernel.org\nSigned-off-by: Miguel Ojeda \u003cojeda@kernel.org\u003e\n" }, { "commit": "9250673cf23572b08c51bcdbb2919e9982bfc36b", "tree": "b511cc8f3c7ffaa304ccb5da1bfd6705e01f1928", "parents": [ "5182e5ec4355dd690307f5d5c28cbfc5b2c06a97", "30c64fb9839949f085c8eb55b979cbd8a4c51f00" ], "author": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Thu Mar 12 12:59:28 2026 +0100" }, "committer": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Thu Mar 12 12:59:28 2026 +0100" }, "message": "Merge tag \u0027asoc-fix-v7.0-rc3\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linus\n\nASoC: Fixes for v7.0\n\nQuite a large pull request, but nothing too concerning here - everything\nis fairly small. We\u0027ve got a couple of smaller core fixes for races on\ncard teardown from Matteo Cotifava, a fix for handling dodgy DMI\ninformation generated by u-boot, some driver specific fixes and some new\ndevice IDs for Tegra.\n" }, { "commit": "487f9b3dc6e507a982f1b984aa6bfbd9dc4b0567", "tree": "763c69147ea31e0f669d7b1bc2c6c7c4541adb28", "parents": [ "fdbaa9d2b78e0da9e1aeb303bbdc3adfe6d8e749" ], "author": { "name": "John Hubbard", "email": "jhubbard@nvidia.com", "time": "Wed Mar 11 21:19:34 2026 -0700" }, "committer": { "name": "Miguel Ojeda", "email": "ojeda@kernel.org", "time": "Thu Mar 12 11:01:23 2026 +0100" }, "message": "rust: cpufreq: suppress clippy::double_parens in Policy doctest\n\nThe kernel fmt! proc macro wraps each format argument as \u0026(arg). Passing a\ntuple such as (a, b) produces \u0026((a, b)) after expansion. Clippy flags that\nas double_parens, but it is a false positive fixed in Clippy 1.92 [1] [2].\n\nSuppress the warning on the affected doctest function with a reason\nattribute so it can be removed once the minimum toolchain moves past 1.92.\n\n[ We may end up deciding to support per-version Clippy lints, in which\n case we will need [3].\n\n In the future, if [4] gets fixed, we may be able to use\n `Delimiter::None` as Gary suggested in [5].\n\n Link: https://lore.kernel.org/rust-for-linux/20260307170929.153892-1-ojeda@kernel.org/ [3]\n Link: https://github.com/rust-lang/rust/issues/67062 [4]\n Link: https://lore.kernel.org/rust-for-linux/DGUA5GY2DGYN.3PG0FKLG7GFN1@garyguo.net/ [5]\n\n - Miguel ]\n\nLink: https://github.com/rust-lang/rust-clippy/issues/15852 [1]\nLink: https://github.com/rust-lang/rust-clippy/pull/15939 [2]\nSuggested-by: Gary Guo \u003cgary@garyguo.net\u003e\nSigned-off-by: John Hubbard \u003cjhubbard@nvidia.com\u003e\nAcked-by: Viresh Kumar \u003cviresh.kumar@linaro.org\u003e\nLink: https://patch.msgid.link/20260312041934.362840-2-jhubbard@nvidia.com\n[ Reworded to replace GitHub-like short link with full URLs in Link tags.\n Reworded reason string to match the style of a couple others we have\n elsewhere. - Miguel ]\nSigned-off-by: Miguel Ojeda \u003cojeda@kernel.org\u003e\n" }, { "commit": "fdbaa9d2b78e0da9e1aeb303bbdc3adfe6d8e749", "tree": "b62c4d274fb92e643f427aaca9bbff57483d0cf3", "parents": [ "580cc37b1de4fcd9997c48d7080e744533f09f36" ], "author": { "name": "Benno Lossin", "email": "lossin@kernel.org", "time": "Wed Mar 11 11:50:49 2026 +0100" }, "committer": { "name": "Miguel Ojeda", "email": "ojeda@kernel.org", "time": "Thu Mar 12 08:46:17 2026 +0100" }, "message": "rust: pin-init: replace shadowed return token by `unsafe`-to-create token\n\nWe use a unit struct `__InitOk` in the closure generated by the\ninitializer macros as the return value. We shadow it by creating a\nstruct with the same name again inside of the closure, preventing early\nreturns of `Ok` in the initializer (before all fields have been\ninitialized).\n\nIn the face of Type Alias Impl Trait (TAIT) and the next trait solver,\nthis solution no longer works [1]. The shadowed struct can be named\nthrough type inference. In addition, there is an RFC proposing to add\nthe feature of path inference to Rust, which would similarly allow [2].\n\nThus remove the shadowed token and replace it with an `unsafe` to create\ntoken.\n\nThe reason we initially used the shadowing solution was because an\nalternative solution used a builder pattern. Gary writes [3]:\n\n In the early builder-pattern based InitOk, having a single InitOk\n type for token is unsound because one can launder an InitOk token\n used for one place to another initializer. I used a branded lifetime\n solution, and then you figured out that using a shadowed type would\n work better because nobody could construct it at all.\n\nThe laundering issue does not apply to the approach we ended up with\ntoday.\n\nWith this change, the example by Tim Chirananthavat in [1] no longer\ncompiles and results in this error:\n\n error: cannot construct `pin_init::__internal::InitOk` with struct literal syntax due to private fields\n --\u003e src/main.rs:26:17\n |\n 26 | InferredType {}\n | ^^^^^^^^^^^^\n |\n \u003d note: private field `0` that was not provided\n help: you might have meant to use the `new` associated function\n |\n 26 - InferredType {}\n 26 + InferredType::new()\n |\n\nApplying the suggestion of using the `::new()` function, results in\nanother expected error:\n\n error[E0133]: call to unsafe function `pin_init::__internal::InitOk::new` is unsafe and requires unsafe block\n --\u003e src/main.rs:26:17\n |\n 26 | InferredType::new()\n | ^^^^^^^^^^^^^^^^^^^ call to unsafe function\n |\n \u003d note: consult the function\u0027s documentation for information on how to avoid undefined behavior\n\nReported-by: Tim Chirananthavat \u003ctheemathas@gmail.com\u003e\nLink: https://github.com/rust-lang/rust/issues/153535 [1]\nLink: https://github.com/rust-lang/rfcs/pull/3444#issuecomment-4016145373 [2]\nLink: https://github.com/rust-lang/rust/issues/153535#issuecomment-4017620804 [3]\nFixes: fc6c6baa1f40 (\"rust: init: add initialization macros\")\nCc: stable@vger.kernel.org\nSigned-off-by: Benno Lossin \u003clossin@kernel.org\u003e\nReviewed-by: Alice Ryhl \u003caliceryhl@google.com\u003e\nReviewed-by: Gary Guo \u003cgary@garyguo.net\u003e\nLink: https://patch.msgid.link/20260311105056.1425041-1-lossin@kernel.org\n[ Added period as mentioned. - Miguel ]\nSigned-off-by: Miguel Ojeda \u003cojeda@kernel.org\u003e\n" }, { "commit": "146c9ab38b48004b40735b6c1e1c2b5adf6436f9", "tree": "9780a93edf83ea0e98d0d0170c2cd1d73fd1f5ef", "parents": [ "6bc9c0a905228bea5c53ec195fe54f5f0233dccc" ], "author": { "name": "Sayali Patil", "email": "sayalip@linux.ibm.com", "time": "Wed Mar 04 17:52:01 2026 +0530" }, "committer": { "name": "Madhavan Srinivasan", "email": "maddy@linux.ibm.com", "time": "Thu Mar 12 11:03:48 2026 +0530" }, "message": "powerpc/selftests/copyloops: extend selftest to exercise __copy_tofrom_user_power7_vmx\n\nThe new PowerPC VMX fast path (__copy_tofrom_user_power7_vmx) is not\nexercised by existing copyloops selftests. This patch updates\nthe selftest to exercise the VMX variant, ensuring the VMX copy path\nis validated.\n\nChanges include:\n - COPY_LOOP\u003dtest___copy_tofrom_user_power7_vmx with -D VMX_TEST is used\n in existing selftest build targets.\n - Inclusion of ../utils.c to provide get_auxv_entry() for hardware\n feature detection.\n - At runtime, the test skips execution if Altivec is not available.\n - Copy sizes above VMX_COPY_THRESHOLD are used to ensure the VMX\n path is taken.\n\nThis enables validation of the VMX fast path without affecting systems\nthat do not support Altivec.\n\nSigned-off-by: Sayali Patil \u003csayalip@linux.ibm.com\u003e\nTested-by: Venkat Rao Bagalkote \u003cvenkat88@linux.ibm.com\u003e\nSigned-off-by: Madhavan Srinivasan \u003cmaddy@linux.ibm.com\u003e\nLink: https://patch.msgid.link/20260304122201.153049-2-sayalip@linux.ibm.com\n\n" }, { "commit": "6bc9c0a905228bea5c53ec195fe54f5f0233dccc", "tree": "31395bf788c29d4ca3def1caef4c938488ca5732", "parents": [ "e9bbfb4bfa86c6b5515b868d6982ac60505d7e39" ], "author": { "name": "Sayali Patil", "email": "sayalip@linux.ibm.com", "time": "Wed Mar 04 17:52:00 2026 +0530" }, "committer": { "name": "Madhavan Srinivasan", "email": "maddy@linux.ibm.com", "time": "Thu Mar 12 11:03:47 2026 +0530" }, "message": "powerpc: fix KUAP warning in VMX usercopy path\n\nOn powerpc with PREEMPT_FULL or PREEMPT_LAZY and function tracing enabled,\nKUAP warnings can be triggered from the VMX usercopy path under memory\nstress workloads.\n\nKUAP requires that no subfunctions are called once userspace access has\nbeen enabled. The existing VMX copy implementation violates this\nrequirement by invoking enter_vmx_usercopy() from the assembly path after\nuserspace access has already been enabled. If preemption occurs\nin this window, the AMR state may not be preserved correctly,\nleading to unexpected userspace access state and resulting in\nKUAP warnings.\n\nFix this by restructuring the VMX usercopy flow so that VMX selection\nand VMX state management are centralized in raw_copy_tofrom_user(),\nwhich is invoked by the raw_copy_{to,from,in}_user() wrappers.\n\nThe new flow is:\n\n - raw_copy_{to,from,in}_user() calls raw_copy_tofrom_user()\n - raw_copy_tofrom_user() decides whether to use the VMX path\n based on size and CPU capability\n - Call enter_vmx_usercopy() before enabling userspace access\n - Enable userspace access as per the copy direction\n and perform the VMX copy\n - Disable userspace access as per the copy direction\n - Call exit_vmx_usercopy()\n - Fall back to the base copy routine if the VMX copy faults\n\nWith this change, the VMX assembly routines no longer perform VMX state\nmanagement or call helper functions; they only implement the\ncopy operations.\nThe previous feature-section based VMX selection inside\n__copy_tofrom_user_power7() is removed, and a dedicated\n__copy_tofrom_user_power7_vmx() entry point is introduced.\n\nThis ensures correct KUAP ordering, avoids subfunction calls\nwhile KUAP is unlocked, and eliminates the warnings while preserving\nthe VMX fast path.\n\nFixes: de78a9c42a79 (\"powerpc: Add a framework for Kernel Userspace Access Protection\")\nReported-by: Shrikanth Hegde \u003csshegde@linux.ibm.com\u003e\nCloses: https://lore.kernel.org/all/20260109064917.777587-2-sshegde@linux.ibm.com/\nSuggested-by: Christophe Leroy (CS GROUP) \u003cchleroy@kernel.org\u003e\nReviewed-by: Christophe Leroy (CS GROUP) \u003cchleroy@kernel.org\u003e\nCo-developed-by: Aboorva Devarajan \u003caboorvad@linux.ibm.com\u003e\nSigned-off-by: Aboorva Devarajan \u003caboorvad@linux.ibm.com\u003e\nSigned-off-by: Sayali Patil \u003csayalip@linux.ibm.com\u003e\nTested-by: Shrikanth Hegde \u003csshegde@linux.ibm.com\u003e\nTested-by: Venkat Rao Bagalkote \u003cvenkat88@linux.ibm.com\u003e\nSigned-off-by: Madhavan Srinivasan \u003cmaddy@linux.ibm.com\u003e\nLink: https://patch.msgid.link/20260304122201.153049-1-sayalip@linux.ibm.com\n\n" }, { "commit": "e9bbfb4bfa86c6b5515b868d6982ac60505d7e39", "tree": "a2b2569d7f57cedf125a5ae6eba06d7d994ed103", "parents": [ "0a8321dde01ffdbd9455a028194d57484def59eb" ], "author": { "name": "Viktor Malik", "email": "vmalik@redhat.com", "time": "Mon Mar 09 15:40:45 2026 +0100" }, "committer": { "name": "Madhavan Srinivasan", "email": "maddy@linux.ibm.com", "time": "Thu Mar 12 11:02:55 2026 +0530" }, "message": "powerpc, perf: Check that current-\u003emm is alive before getting user callchain\n\nIt may happen that mm is already released, which leads to kernel panic.\nThis adds the NULL check for current-\u003emm, similarly to\ncommit 20afc60f892d (\"x86, perf: Check that current-\u003emm is alive before getting user callchain\").\n\nI was getting this panic when running a profiling BPF program\n(profile.py from bcc-tools):\n\n [26215.051935] Kernel attempted to read user page (588) - exploit attempt? (uid: 0)\n [26215.051950] BUG: Kernel NULL pointer dereference on read at 0x00000588\n [26215.051952] Faulting instruction address: 0xc00000000020fac0\n [26215.051957] Oops: Kernel access of bad area, sig: 11 [#1]\n [...]\n [26215.052049] Call Trace:\n [26215.052050] [c000000061da6d30] [c00000000020fc10] perf_callchain_user_64+0x2d0/0x490 (unreliable)\n [26215.052054] [c000000061da6dc0] [c00000000020f92c] perf_callchain_user+0x1c/0x30\n [26215.052057] [c000000061da6de0] [c0000000005ab2a0] get_perf_callchain+0x100/0x360\n [26215.052063] [c000000061da6e70] [c000000000573bc8] bpf_get_stackid+0x88/0xf0\n [26215.052067] [c000000061da6ea0] [c008000000042258] bpf_prog_16d4ab9ab662f669_do_perf_event+0xf8/0x274\n [...]\n\nIn addition, move storing the top-level stack entry to generic\nperf_callchain_user to make sure the top-evel entry is always captured,\neven if current-\u003emm is NULL.\n\nFixes: 20002ded4d93 (\"perf_counter: powerpc: Add callchain support\")\nSigned-off-by: Viktor Malik \u003cvmalik@redhat.com\u003e\nTested-by: Qiao Zhao \u003cqzhao@redhat.com\u003e\nTested-by: Venkat Rao Bagalkote \u003cvenkat88@linux.ibm.com\u003e\nReviewed-by: Saket Kumar Bhaskar \u003cskb99@linux.ibm.com\u003e\n[Maddy: fixed message to avoid checkpatch format style error]\nSigned-off-by: Madhavan Srinivasan \u003cmaddy@linux.ibm.com\u003e\nLink: https://patch.msgid.link/20260309144045.169427-1-vmalik@redhat.com\n" }, { "commit": "0a8321dde01ffdbd9455a028194d57484def59eb", "tree": "b307bb9ef1bf2b954fc2f5544d593b60dea5b180", "parents": [ "35e4f2a17eb40288f9bcdb09549fa04a63a96279" ], "author": { "name": "Ritesh Harjani (IBM)", "email": "ritesh.list@gmail.com", "time": "Sun Mar 01 00:17:59 2026 +0530" }, "committer": { "name": "Madhavan Srinivasan", "email": "maddy@linux.ibm.com", "time": "Thu Mar 12 10:57:31 2026 +0530" }, "message": "powerpc/mem: Move CMA reservations to arch_mm_preinit\n\ncommit 4267739cabb8 (\"arch, mm: consolidate initialization of SPARSE memory model\"),\nchanged the initialization order of \"pageblock_order\" from...\nstart_kernel()\n - setup_arch()\n - initmem_init()\n - sparse_init()\n - set_pageblock_order(); // this sets the pageblock_order\n - xxx_cma_reserve();\n\nto...\nstart_kernel()\n - setup_arch()\n - xxx_cma_reserve();\n - mm_core_init_early()\n - free_area_init()\n - sparse_init()\n - set_pageblock_order() // this sets the pageblock_order.\n\nSo this means, pageblock_order is not initialized before these cma\nreservation function calls, hence we are seeing CMA failures like...\n\n[ 0.000000] kvm_cma_reserve: reserving 3276 MiB for global area\n[ 0.000000] cma: pageblock_order not yet initialized. Called during early boot?\n[ 0.000000] cma: Failed to reserve 3276 MiB\n....\n[ 0.000000][ T0] cma: pageblock_order not yet initialized. Called during early boot?\n[ 0.000000][ T0] cma: Failed to reserve 1024 MiB\n\nThis patch moves these CMA reservations to arch_mm_preinit() which\nhappens in mm_core_init() (which happens after pageblock_order is\ninitialized), but before the memblock moves the free memory to buddy.\n\nFixes: 4267739cabb8 (\"arch, mm: consolidate initialization of SPARSE memory model\")\nSuggested-by: Mike Rapoport \u003crppt@kernel.org\u003e\nReported-and-tested-by: Sourabh Jain \u003csourabhjain@linux.ibm.com\u003e\nCloses: https://lore.kernel.org/linuxppc-dev/4c338a29-d190-44f3-8874-6cfa0a031f0b@linux.ibm.com/\nSigned-off-by: Ritesh Harjani (IBM) \u003critesh.list@gmail.com\u003e\nTested-by: Dan Horák \u003cdan@danny.cz\u003e\nSigned-off-by: Madhavan Srinivasan \u003cmaddy@linux.ibm.com\u003e\nLink: https://patch.msgid.link/6e532cf0db5be99afbe20eed699163d5e86cd71f.1772303986.git.ritesh.list@gmail.com\n\n" }, { "commit": "50ae4ce2a6ace992025be3fdb14e244e88ddae18", "tree": "fa940cf4e79909a73c3bde7b74a1df3d8ab7dd9f", "parents": [ "1f318b96cc84d7c2ab792fcc0bfd42a7ca890681", "e4eb11b34d6c84f398d8f08d7cb4d6c38e739dd2" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Thu Mar 12 14:38:07 2026 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Thu Mar 12 14:38:07 2026 +1000" }, "message": "Merge tag \u0027drm-msm-fixes-2026-03-06\u0027 of https://gitlab.freedesktop.org/drm/msm into drm-fixes\n\nFixes for v7.0:\n\nCore:\n- Adjusted msm_iommu_pagetable_prealloc_allocate() allocation type\n\nDPU:\n- Fixed blue screens on Hamoa laptops by reverting the LM reservation\n- Fixed the size of the LM block on several platforms\n- Dropped usage of %pK (again)\n- Fixed smatch warning on SSPP v13+ code\n- Fixed INTF_6 interrupts on Lemans\n\nDSI:\n- Fixed DSI PHY revision on Kaanapali\n- Fixed pixel clock calculation for the bonded DSI mode panels with\n compression enabled\n\nDT bindings:\n- Fixed DisplayPort description on Glymur\n- Fixed model name in SM8750 MDSS schema\n\nGPU:\n- Added MODULE_DEVICE_TABLE to the GPU driver\n- Fix bogus protect error on X2-85\n- Fix dma_free_attrs() buffer size\n- Gen8 UBWC fix for Glymur\n\nFrom: Rob Clark \u003crob.clark@oss.qualcomm.com\u003e\nLink: https://patch.msgid.link/CACSVV00wZ95gFDLfzJ0Ywb8rsjPSjZ1aHdwE4smnyuZ\u003dFg-g8Q@mail.gmail.com\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n" }, { "commit": "87f7dff3ec75b91def0024ebaaf732457f47a63b", "tree": "3069d101966273960035a54288c9019a4893cd1c", "parents": [ "dc26ca99b835e21e76a58b1463b84adb0ca34f58" ], "author": { "name": "Alok Tiwari", "email": "alok.a.tiwari@oracle.com", "time": "Tue Mar 10 11:48:17 2026 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Mar 11 20:39:19 2026 -0700" }, "message": "octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status\n\nThe NIX RAS health report path uses nix_af_rvu_err when handling the\nNIX_AF_RVU_RAS case, so the report prints the ERR interrupt status rather\nthan the RAS interrupt status.\n\nUse nix_af_rvu_ras for the NIX_AF_RVU_RAS report.\n\nFixes: 5ed66306eab6 (\"octeontx2-af: Add devlink health reporters for NIX\")\nSigned-off-by: Alok Tiwari \u003calok.a.tiwari@oracle.com\u003e\nLink: https://patch.msgid.link/20260310184824.1183651-2-alok.a.tiwari@oracle.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "dc26ca99b835e21e76a58b1463b84adb0ca34f58", "tree": "8c554d0fbe07634c3a1ee3ec432c624cd74e6cde", "parents": [ "840c9d13cb1ca96683a5307ee8e221be163a2c1e" ], "author": { "name": "Alok Tiwari", "email": "alok.a.tiwari@oracle.com", "time": "Tue Mar 10 11:48:16 2026 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Mar 11 20:39:19 2026 -0700" }, "message": "octeontx2-af: devlink: fix NIX RAS reporter recovery condition\n\nThe NIX RAS health reporter recovery routine checks nix_af_rvu_int to\ndecide whether to re-enable NIX_AF_RAS interrupts. This is the RVU\ninterrupt status field and is unrelated to RAS events, so the recovery\nflow may incorrectly skip re-enabling NIX_AF_RAS interrupts.\n\nCheck nix_af_rvu_ras instead before writing NIX_AF_RAS_ENA_W1S.\n\nFixes: 5ed66306eab6 (\"octeontx2-af: Add devlink health reporters for NIX\")\nSigned-off-by: Alok Tiwari \u003calok.a.tiwari@oracle.com\u003e\nLink: https://patch.msgid.link/20260310184824.1183651-1-alok.a.tiwari@oracle.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "840c9d13cb1ca96683a5307ee8e221be163a2c1e", "tree": "a438b7e70304bae22660e12776c5d7d0c32f6739", "parents": [ "87c2302813abc55c46485711a678e3c312b00666" ], "author": { "name": "Chintan Vankar", "email": "c-vankar@ti.com", "time": "Tue Mar 10 21:39:40 2026 +0530" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Mar 11 20:28:37 2026 -0700" }, "message": "net: ethernet: ti: am65-cpsw-nuss: Fix rx_filter value for PTP support\n\nThe \"rx_filter\" member of \"hwtstamp_config\" structure is an enum field and\ndoes not support bitwise OR combination of multiple filter values. It\ncauses error while linuxptp application tries to match rx filter version.\nFix this by storing the requested filter type in a new port field.\n\nFixes: 97248adb5a3b (\"net: ti: am65-cpsw: Update hw timestamping filter for PTPv1 RX packets\")\nSigned-off-by: Chintan Vankar \u003cc-vankar@ti.com\u003e\nLink: https://patch.msgid.link/20260310160940.109822-1-c-vankar@ti.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "87c2302813abc55c46485711a678e3c312b00666", "tree": "6e053ef56cbbaa147636ff89b722c5bdb97e5052", "parents": [ "ead054054874d7de4c1724e18c1adf90fdb5d7db" ], "author": { "name": "Shiraz Saleem", "email": "shirazsaleem@microsoft.com", "time": "Mon Mar 09 10:24:43 2026 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Mar 11 20:21:45 2026 -0700" }, "message": "net/mana: Null service_wq on setup error to prevent double destroy\n\nIn mana_gd_setup() error path, set gc-\u003eservice_wq to NULL after\ndestroy_workqueue() to match the cleanup in mana_gd_cleanup().\nThis prevents a use-after-free if the workqueue pointer is checked\nafter a failed setup.\n\nFixes: f975a0955276 (\"net: mana: Fix double destroy_workqueue on service rescan PCI path\")\nSigned-off-by: Shiraz Saleem \u003cshirazsaleem@microsoft.com\u003e\nSigned-off-by: Konstantin Taranov \u003ckotaranov@microsoft.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/20260309172443.688392-1-kotaranov@linux.microsoft.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "ead054054874d7de4c1724e18c1adf90fdb5d7db", "tree": "e772db4c1e48add264d80da5c9249f62cf36e176", "parents": [ "14ad51036c57e91e85b83f61df1d27e347912c32", "329f0b9b48ee6ab59d1ab72fef55fe8c6463a6cf" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Mar 11 19:12:59 2026 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Mar 11 19:12:59 2026 -0700" }, "message": "Merge tag \u0027nf-26-03-10\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf\n\nFlorian Westphal says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nnetfilter: updates for net\n\nDue to large volume of backlogged patches its unlikely I will make the\n2nd planned PR this week, so several legit fixes will be pushed back\nto next week. Sorry for the inconvenience but I am out of ideas and\nalternatives.\n\n1) syzbot managed to add/remove devices to a flowtable, due to a bug in\n the flowtable netdevice notifier this gets us a double-add and\n eventually UaF when device is removed again (we only expect one\n entry, duplicate remains past net_device end-of-life).\n From Phil Sutter, bug added in 6.16.\n\n2) Yiming Qian reports another nf_tables transaction handling bug:\n in some cases error unwind misses to undo certain set elements,\n resulting in refcount underflow and use-after-free, bug added in 6.4.\n\n3) Jenny Guanni Qu found out-of-bounds read in pipapo set type.\n While the value is never used, it still rightfully triggers KASAN\n splats. Bug exists since this set type was added in 5.6.\n\n4) a few x_tables modules contain copypastry tcp option parsing code which\n can read 1 byte past the option area. This bug is ancient, fix from\n David Dull.\n\n5) nfnetlink_queue leaks kernel memory if userspace provides bad\n NFQA_VLAN/NFQA_L2HDR attributes. From Hyunwoo Kim, bug stems from\n from 4.7 days.\n\n6) nfnetlink_cthelper has incorrect loop restart logic which may result\n in reading one pointer past end of array. From 3.6 days, fix also from\n Hyunwoo Kim.\n\n7) xt_IDLETIMER v0 extension must reject working with timers added\n by revision v1, else we get list corruption. Bug added in v5.7.\n From Yifan Wu, Juefei Pu and Yuan Tan via Xin Lu.\n\n* tag \u0027nf-26-03-10\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf:\n netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels\n netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()\n netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path\n netfilter: x_tables: guard option walkers against 1-byte tail reads\n netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop()\n netfilter: nf_tables: always walk all pending catchall elements\n netfilter: nf_tables: Fix for duplicate device in netdev hooks\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20260310132050.630-1-fw@strlen.de\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "14ad51036c57e91e85b83f61df1d27e347912c32", "tree": "f4b7af0cccd83b15c064301451190c8dda7a1cc7", "parents": [ "e62a22f43475624ea466fd9b766f62e8458f4cd9", "e94eaef11142b01f77bf8ba4d0b59720b7858109" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Mar 11 19:08:15 2026 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Mar 11 19:08:16 2026 -0700" }, "message": "Merge branch \u0027100GbE\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/net-queue\n\nTony Nguyen says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nIntel Wired LAN Driver Updates 2026-03-10 (ice, iavf, i40e, e1000e, e1000)\n\nNikolay Aleksandrov changes return code of RDMA related ice devlink get\nparameters when irdma is not enabled to -EOPNOTSUPP as current return\nof -ENODEV causes issues with devlink output.\n\nPetr Oros resolves a couple of issues in iavf; freeing PTP resources\nbefore reset and disable. Fixing contention issues with the netdev lock\nbetween reset and some ethtool operations.\n\nAlok Tiwari corrects an incorrect comparison of cloud filter values and\nadjust some passed arguments to sizeof() for consistency on i40e.\n\nMatt Vollrath removes an incorrect decrement for DMA error on e1000 and\ne1000e drivers.\n\n* \u0027100GbE\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/net-queue:\n e1000/e1000e: Fix leak in DMA error cleanup\n i40e: fix src IP mask checks and memcpy argument names in cloud filter\n iavf: fix incorrect reset handling in callbacks\n iavf: fix PTP use-after-free during reset\n drivers: net: ice: fix devlink parameters get without irdma\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20260310205654.4109072-1-anthony.l.nguyen@intel.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "e62a22f43475624ea466fd9b766f62e8458f4cd9", "tree": "6e111b4fad09f0afa1691679259dd77df0e32fef", "parents": [ "e8f0dc024ce55451ebd54bad975134ba802e4fcc", "68e76fc12df091b04ede5f6244385a35abae0a80" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Mar 11 19:04:58 2026 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Mar 11 19:04:58 2026 -0700" }, "message": "Merge branch \u0027neighbour-fix-update-of-proxy-neighbour\u0027\n\nSabrina Dubroca says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nneighbour: fix update of proxy neighbour\n\nWhile re-reading some \"old\" patches I ran into a small change of\nbehavior in commit dc2a27e524ac (\"neighbour: Update pneigh_entry in\npneigh_create().\").\n\nThe old behavior was not consistent between -\u003eprotocol and -\u003eflags,\nand didn\u0027t offer a way to clear protocol, so maybe it\u0027s better to\nchange that (7-years-old [1]) behavior. But then we should change\nnon-proxy neighbours as well to keep neigh/pneigh consistent.\n\n[1] df9b0e30d44c (\"neighbor: Add protocol attribute\")\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/cover.1772894876.git.sd@queasysnail.net\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "68e76fc12df091b04ede5f6244385a35abae0a80", "tree": "6e111b4fad09f0afa1691679259dd77df0e32fef", "parents": [ "cbada1048847a348797aec63a1d8056621cbe653" ], "author": { "name": "Sabrina Dubroca", "email": "sd@queasysnail.net", "time": "Tue Mar 10 22:59:17 2026 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Mar 11 19:04:55 2026 -0700" }, "message": "selftests: rtnetlink: add neighbour update test\n\nCheck that protocol and flags are updated correctly for\nneighbour and pneigh entries.\n\nSigned-off-by: Sabrina Dubroca \u003csd@queasysnail.net\u003e\nReviewed-by: Kuniyuki Iwashima \u003ckuniyu@google.com\u003e\nLink: https://patch.msgid.link/d28f72b5b4ff4c9ecbbbde06146a938dcc4c264a.1772894876.git.sd@queasysnail.net\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "cbada1048847a348797aec63a1d8056621cbe653", "tree": "96b6a23f094f693d841c73a59d177dbd7e289283", "parents": [ "e8f0dc024ce55451ebd54bad975134ba802e4fcc" ], "author": { "name": "Sabrina Dubroca", "email": "sd@queasysnail.net", "time": "Tue Mar 10 22:59:16 2026 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Mar 11 19:04:55 2026 -0700" }, "message": "neighbour: restore protocol !\u003d 0 check in pneigh update\n\nPrior to commit dc2a27e524ac (\"neighbour: Update pneigh_entry in\npneigh_create().\"), a pneigh\u0027s protocol was updated only when the\nvalue of the NDA_PROTOCOL attribute was non-0. While moving the code,\nthat check was removed. This is a small change of user-visible\nbehavior, and inconsistent with the (non-proxy) neighbour behavior.\n\nFixes: dc2a27e524ac (\"neighbour: Update pneigh_entry in pneigh_create().\")\nSigned-off-by: Sabrina Dubroca \u003csd@queasysnail.net\u003e\nReviewed-by: David Ahern \u003cdsahern@kernel.org\u003e\nReviewed-by: Kuniyuki Iwashima \u003ckuniyu@google.com\u003e\nLink: https://patch.msgid.link/38c61de1bb032871a886aff9b9b52fe1cdd4cada.1772894876.git.sd@queasysnail.net\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "e8f0dc024ce55451ebd54bad975134ba802e4fcc", "tree": "6006f774cc4cac984adea67bf1a7aa0decf12519", "parents": [ "6c5a9baa15de240e747263aba435a0951da8d8d2" ], "author": { "name": "Marek Behún", "email": "kabel@kernel.org", "time": "Wed Mar 11 12:12:37 2026 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Mar 11 19:03:21 2026 -0700" }, "message": "net: dsa: realtek: Fix LED group port bit for non-zero LED group\n\nThe rtl8366rb_led_group_port_mask() function always returns LED port\nbit in LED group 0; the switch statement returns the same thing in all\nnon-default cases.\n\nThis means that the driver does not currently support configuring LEDs\nin non-zero LED groups.\n\nFix this.\n\nFixes: 32d617005475a71e (\"net: dsa: realtek: add LED drivers for rtl8366rb\")\nSigned-off-by: Marek Behún \u003ckabel@kernel.org\u003e\nReviewed-by: Andrew Lunn \u003candrew@lunn.ch\u003e\nLink: https://patch.msgid.link/20260311111237.29002-1-kabel@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "6c5a9baa15de240e747263aba435a0951da8d8d2", "tree": "cc179222c8fed20e8773be04c7380852f74cfb66", "parents": [ "99c8c16a4aad0b37293cae213e15957c573cf79b" ], "author": { "name": "Mehul Rao", "email": "mehulrao@gmail.com", "time": "Tue Mar 10 13:07:30 2026 -0400" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Mar 11 18:56:28 2026 -0700" }, "message": "tipc: fix divide-by-zero in tipc_sk_filter_connect()\n\nA user can set conn_timeout to any value via\nsetsockopt(TIPC_CONN_TIMEOUT), including values less than 4. When a\nSYN is rejected with TIPC_ERR_OVERLOAD and the retry path in\ntipc_sk_filter_connect() executes:\n\n delay %\u003d (tsk-\u003econn_timeout / 4);\n\nIf conn_timeout is in the range [0, 3], the integer division yields 0,\nand the modulo operation triggers a divide-by-zero exception, causing a\nkernel oops/panic.\n\nFix this by clamping conn_timeout to a minimum of 4 at the point of use\nin tipc_sk_filter_connect().\n\nOops: divide error: 0000 [#1] SMP KASAN NOPTI\nCPU: 0 UID: 0 PID: 119 Comm: poc-F144 Not tainted 7.0.0-rc2+\nRIP: 0010:tipc_sk_filter_rcv (net/tipc/socket.c:2236 net/tipc/socket.c:2362)\nCall Trace:\n tipc_sk_backlog_rcv (include/linux/instrumented.h:82 include/linux/atomic/atomic-instrumented.h:32 include/net/sock.h:2357 net/tipc/socket.c:2406)\n __release_sock (include/net/sock.h:1185 net/core/sock.c:3213)\n release_sock (net/core/sock.c:3797)\n tipc_connect (net/tipc/socket.c:2570)\n __sys_connect (include/linux/file.h:62 include/linux/file.h:83 net/socket.c:2098)\n\nFixes: 6787927475e5 (\"tipc: buffer overflow handling in listener socket\")\nCc: stable@vger.kernel.org\nSigned-off-by: Mehul Rao \u003cmehulrao@gmail.com\u003e\nReviewed-by: Tung Nguyen \u003ctung.quang.nguyen@est.tech\u003e\nLink: https://patch.msgid.link/20260310170730.28841-1-mehulrao@gmail.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "99c8c16a4aad0b37293cae213e15957c573cf79b", "tree": "dd5087d3f5ab616b200d18927b7812dc9c5e556f", "parents": [ "20c1be4cc86fa34bd68496a1b8168f1af0a2ee72" ], "author": { "name": "Bastien Curutchet (Schneider Electric)", "email": "bastien.curutchet@bootlin.com", "time": "Mon Mar 09 14:15:43 2026 +0100" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Mar 11 18:06:22 2026 -0700" }, "message": "net: dsa: microchip: Fix error path in PTP IRQ setup\n\nIf request_threaded_irq() fails during the PTP message IRQ setup, the\nnewly created IRQ mapping is never disposed. Indeed, the\nksz_ptp_irq_setup()\u0027s error path only frees the mappings that were\nsuccessfully set up.\n\nDispose the newly created mapping if the associated\nrequest_threaded_irq() fails at setup.\n\nCc: stable@vger.kernel.org\nFixes: d0b8fec8ae505 (\"net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}()\")\nSigned-off-by: Bastien Curutchet (Schneider Electric) \u003cbastien.curutchet@bootlin.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nReviewed-by: Vladimir Oltean \u003colteanv@gmail.com\u003e\nLink: https://patch.msgid.link/20260309-ksz-ptp-irq-fix-v1-1-757b3b985955@bootlin.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "20c1be4cc86fa34bd68496a1b8168f1af0a2ee72", "tree": "03864ff6b9d721b605319cb1c19f6aa77154e40b", "parents": [ "908c344d5cfac4160f49715da9efacdf5b6a28bd", "d56b5d163458c45ab8fa1f00bd875af01b3ce28c" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Mar 11 17:53:40 2026 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Mar 11 17:53:41 2026 -0700" }, "message": "Merge branch \u0027net-bpf-nd_tbl-fixes-for-when-ipv6-disable-1\u0027\n\nRicardo B. Marlière says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n{net,bpf}: nd_tbl fixes for when ipv6.disable\u003d1\n\nPlease consider merging these four patches to fix three crashes that were\nfound after this report:\n\nhttps://lore.kernel.org/all/CAHXs0ORzd62QOG-Fttqa2Cx_A_VFp\u003dutE2H2VTX5nqfgs7LDxQ@mail.gmail.com\n\nThe first patch from Jakub Kicinski is a preparation in order to enable\nthe use ipv6_mod_enabled() even when CONFIG_IPV6\u003dn.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20260307-net-nd_tbl_fixes-v4-0-e2677e85628c@suse.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "d56b5d163458c45ab8fa1f00bd875af01b3ce28c", "tree": "03864ff6b9d721b605319cb1c19f6aa77154e40b", "parents": [ "dcb4e2231469523d20cf0a2477d68245795c205d" ], "author": { "name": "Ricardo B. Marlière", "email": "rbm@suse.com", "time": "Sat Mar 07 17:50:56 2026 -0300" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Mar 11 17:53:38 2026 -0700" }, "message": "bpf: bpf_out_neigh_v6: Fix nd_tbl NULL dereference when IPv6 is disabled\n\nWhen booting with the \u0027ipv6.disable\u003d1\u0027 parameter, the nd_tbl is never\ninitialized because inet6_init() exits before ndisc_init() is called which\ninitializes it. If bpf_redirect_neigh() is called with explicit AF_INET6\nnexthop parameters, __bpf_redirect_neigh_v6() can skip the IPv6 FIB lookup\nand call bpf_out_neigh_v6() directly. bpf_out_neigh_v6() then calls\nip_neigh_gw6(), which uses ipv6_stub-\u003end_tbl.\n\n BUG: kernel NULL pointer dereference, address: 0000000000000248\n Oops: Oops: 0000 [#1] SMP NOPTI\n RIP: 0010:skb_do_redirect+0x44f/0xf40\n Call Trace:\n \u003cTASK\u003e\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? __tcf_classify.constprop.0+0x83/0x160\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? tcf_classify+0x2b/0x50\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? tc_run+0xb8/0x120\n ? srso_alias_return_thunk+0x5/0xfbef5\n __dev_queue_xmit+0x6fa/0x1000\n ? srso_alias_return_thunk+0x5/0xfbef5\n packet_sendmsg+0x10da/0x1700\n ? srso_alias_return_thunk+0x5/0xfbef5\n __sys_sendto+0x1f3/0x220\n __x64_sys_sendto+0x24/0x30\n do_syscall_64+0x101/0xf80\n ? exc_page_fault+0x6e/0x170\n ? srso_alias_return_thunk+0x5/0xfbef5\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n \u003c/TASK\u003e\n\nFix this by adding an early check in bpf_out_neigh_v6(). If IPv6 is\ndisabled, drop the packet before neighbor lookup.\n\nSuggested-by: Fernando Fernandez Mancera \u003cfmancera@suse.de\u003e\nFixes: ba452c9e996d (\"bpf: Fix bpf_redirect_neigh helper api to support supplying nexthop\")\nSigned-off-by: Ricardo B. Marlière \u003crbm@suse.com\u003e\nAcked-by: Daniel Borkmann \u003cdaniel@iogearbox.net\u003e\nLink: https://patch.msgid.link/20260307-net-nd_tbl_fixes-v4-4-e2677e85628c@suse.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "dcb4e2231469523d20cf0a2477d68245795c205d", "tree": "0e325e88bb88bac5311a29dc195757028adfe9cb", "parents": [ "30021e969d48e5819d5ae56936c2f34c0f7ce997" ], "author": { "name": "Ricardo B. Marlière", "email": "rbm@suse.com", "time": "Sat Mar 07 17:50:55 2026 -0300" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Mar 11 17:53:38 2026 -0700" }, "message": "bpf: bpf_out_neigh_v4: Fix nd_tbl NULL dereference when IPv6 is disabled\n\nWhen booting with the \u0027ipv6.disable\u003d1\u0027 parameter, the nd_tbl is never\ninitialized because inet6_init() exits before ndisc_init() is called which\ninitializes it. If bpf_redirect_neigh() is called from tc with an explicit\nnexthop of nh_family \u003d\u003d AF_INET6, bpf_out_neigh_v4() takes the AF_INET6\nbranch and calls ip_neigh_gw6(), which relies on ipv6_stub-\u003end_tbl.\n\n BUG: kernel NULL pointer dereference, address: 0000000000000248\n Oops: Oops: 0000 [#1] SMP NOPTI\n RIP: 0010:skb_do_redirect+0xb93/0xf00\n Call Trace:\n \u003cTASK\u003e\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? __tcf_classify.constprop.0+0x83/0x160\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? tcf_classify+0x2b/0x50\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? tc_run+0xb8/0x120\n ? srso_alias_return_thunk+0x5/0xfbef5\n __dev_queue_xmit+0x6fa/0x1000\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? alloc_skb_with_frags+0x58/0x200\n packet_sendmsg+0x10da/0x1700\n ? srso_alias_return_thunk+0x5/0xfbef5\n __sys_sendto+0x1f3/0x220\n __x64_sys_sendto+0x24/0x30\n do_syscall_64+0x101/0xf80\n ? exc_page_fault+0x6e/0x170\n ? srso_alias_return_thunk+0x5/0xfbef5\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n \u003c/TASK\u003e\n\nFix this by adding an early check in the AF_INET6 branch of\nbpf_out_neigh_v4(). If IPv6 is disabled, unlock RCU and drop the packet.\n\nSuggested-by: Fernando Fernandez Mancera \u003cfmancera@suse.de\u003e\nFixes: ba452c9e996d (\"bpf: Fix bpf_redirect_neigh helper api to support supplying nexthop\")\nSigned-off-by: Ricardo B. Marlière \u003crbm@suse.com\u003e\nAcked-by: Daniel Borkmann \u003cdaniel@iogearbox.net\u003e\nLink: https://patch.msgid.link/20260307-net-nd_tbl_fixes-v4-3-e2677e85628c@suse.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "30021e969d48e5819d5ae56936c2f34c0f7ce997", "tree": "24a31220d95130049f2bd2f69d27b52186f3b4a9", "parents": [ "94a4b1f959989de9c54d43c3a102fb1ee92e1414" ], "author": { "name": "Ricardo B. Marlière", "email": "rbm@suse.com", "time": "Sat Mar 07 17:50:54 2026 -0300" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Mar 11 17:53:37 2026 -0700" }, "message": "net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled\n\nWhen booting with the \u0027ipv6.disable\u003d1\u0027 parameter, the nd_tbl is never\ninitialized because inet6_init() exits before ndisc_init() is called\nwhich initializes it. If bonding ARP/NS validation is enabled, an IPv6\nNS/NA packet received on a slave can reach bond_validate_na(), which\ncalls bond_has_this_ip6(). That path calls ipv6_chk_addr() and can\ncrash in __ipv6_chk_addr_and_flags().\n\n BUG: kernel NULL pointer dereference, address: 00000000000005d8\n Oops: Oops: 0000 [#1] SMP NOPTI\n RIP: 0010:__ipv6_chk_addr_and_flags+0x69/0x170\n Call Trace:\n \u003cIRQ\u003e\n ipv6_chk_addr+0x1f/0x30\n bond_validate_na+0x12e/0x1d0 [bonding]\n ? __pfx_bond_handle_frame+0x10/0x10 [bonding]\n bond_rcv_validate+0x1a0/0x450 [bonding]\n bond_handle_frame+0x5e/0x290 [bonding]\n ? srso_alias_return_thunk+0x5/0xfbef5\n __netif_receive_skb_core.constprop.0+0x3e8/0xe50\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? update_cfs_rq_load_avg+0x1a/0x240\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? __enqueue_entity+0x5e/0x240\n __netif_receive_skb_one_core+0x39/0xa0\n process_backlog+0x9c/0x150\n __napi_poll+0x30/0x200\n ? srso_alias_return_thunk+0x5/0xfbef5\n net_rx_action+0x338/0x3b0\n handle_softirqs+0xc9/0x2a0\n do_softirq+0x42/0x60\n \u003c/IRQ\u003e\n \u003cTASK\u003e\n __local_bh_enable_ip+0x62/0x70\n __dev_queue_xmit+0x2d3/0x1000\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? packet_parse_headers+0x10a/0x1a0\n packet_sendmsg+0x10da/0x1700\n ? kick_pool+0x5f/0x140\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? __queue_work+0x12d/0x4f0\n __sys_sendto+0x1f3/0x220\n __x64_sys_sendto+0x24/0x30\n do_syscall_64+0x101/0xf80\n ? exc_page_fault+0x6e/0x170\n ? srso_alias_return_thunk+0x5/0xfbef5\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n \u003c/TASK\u003e\n\nFix this by checking ipv6_mod_enabled() before dispatching IPv6 packets to\nbond_na_rcv(). If IPv6 is disabled, return early from bond_rcv_validate()\nand avoid the path to ipv6_chk_addr().\n\nSuggested-by: Fernando Fernandez Mancera \u003cfmancera@suse.de\u003e\nFixes: 4e24be018eb9 (\"bonding: add new parameter ns_targets\")\nSigned-off-by: Ricardo B. Marlière \u003crbm@suse.com\u003e\nReviewed-by: Hangbin Liu \u003cliuhangbin@gmail.com\u003e\nLink: https://patch.msgid.link/20260307-net-nd_tbl_fixes-v4-2-e2677e85628c@suse.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "94a4b1f959989de9c54d43c3a102fb1ee92e1414", "tree": "2c9d33898362608986b5b7044df674641f0ca8b5", "parents": [ "908c344d5cfac4160f49715da9efacdf5b6a28bd" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Sat Mar 07 17:50:53 2026 -0300" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Mar 11 17:53:37 2026 -0700" }, "message": "ipv6: move the disable_ipv6_mod knob to core code\n\nFrom: Jakub Kicinski \u003ckuba@kernel.org\u003e\n\nMake sure disable_ipv6_mod itself is not part of the IPv6 module,\nin case core code wants to refer to it. We will remove support\nfor IPv6\u003dm soon, this change helps make fixes we commit before\nthat less messy.\n\nLink: https://patch.msgid.link/20260307-net-nd_tbl_fixes-v4-1-e2677e85628c@suse.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "e3beefd3af09f8e460ddaf39063d3d7664d7ab59", "tree": "d9ef258aff215d753402468017acdec2c8478b41", "parents": [ "40e75e42f49ca54b4ff41f3edb94f5ef0299140c" ], "author": { "name": "Shyam Prasad N", "email": "sprasad@microsoft.com", "time": "Wed Mar 11 10:48:54 2026 +0530" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Wed Mar 11 18:46:42 2026 -0500" }, "message": "cifs: make default value of retrans as zero\n\nWhen retrans mount option was introduced, the default value was set\nas 1. However, in the light of some bugs that this has exposed recently\nwe should change it to 0 and retain the old behaviour before this option\nwas introduced.\n\nCc: \u003cstable@vger.kernel.org\u003e\nReviewed-by: Bharath SM \u003cbharathsm@microsoft.com\u003e\nSigned-off-by: Shyam Prasad N \u003csprasad@microsoft.com\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "40e75e42f49ca54b4ff41f3edb94f5ef0299140c", "tree": "b6e12e468920c29bb1914d3b40b1e39485f5c856", "parents": [ "d4c7210d2f3ea481a6481f03040a64d9077a6172" ], "author": { "name": "Paulo Alcantara", "email": "pc@manguebit.org", "time": "Wed Mar 11 15:00:52 2026 -0300" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Wed Mar 11 18:46:40 2026 -0500" }, "message": "smb: client: fix open handle lookup in cifs_open()\n\nWhen looking up open handles to be re-used in cifs_open(), calling\ncifs_get_{writable,readable}_path() is wrong as it will look up for\nthe first matching open handle, and if @file-\u003ef_flags doesn\u0027t match,\nit will ignore the remaining open handles in\ncifsInodeInfo::openFileList that might potentially match\n@file-\u003ef_flags.\n\nFor writable and readable handles, fix this by calling\n__cifs_get_writable_file() and __find_readable_file(), respectively,\nwith FIND_OPEN_FLAGS set.\n\nWith the patch, the following program ends up with two opens instead\nof three sent over the wire.\n\n```\n #define _GNU_SOURCE\n #include \u003cunistd.h\u003e\n #include \u003cstring.h\u003e\n #include \u003cfcntl.h\u003e\n\n int main(int argc, char *argv[])\n {\n int fd;\n\n fd \u003d open(\"/mnt/1/foo\", O_CREAT | O_WRONLY | O_TRUNC, 0664);\n close(fd);\n fd \u003d open(\"/mnt/1/foo\", O_DIRECT | O_WRONLY);\n close(fd);\n fd \u003d open(\"/mnt/1/foo\", O_WRONLY);\n close(fd);\n fd \u003d open(\"/mnt/1/foo\", O_DIRECT | O_WRONLY);\n close(fd);\n return 0;\n }\n```\n\n```\n$ mount.cifs //srv/share /mnt/1 -o ...\n$ gcc test.c \u0026\u0026 ./a.out\n```\n\nSigned-off-by: Paulo Alcantara (Red Hat) \u003cpc@manguebit.org\u003e\nReviewed-by: ChenXiaoSong \u003cchenxiaosong@kylinos.cn\u003e\nCc: David Howells \u003cdhowells@redhat.com\u003e\nCc: linux-cifs@vger.kernel.org\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "d4c7210d2f3ea481a6481f03040a64d9077a6172", "tree": "5a870c3034a913e85fea7b7c89a78cebe81820bb", "parents": [ "88d37abb366be95d772ceb4c7f26772e78447252" ], "author": { "name": "Henrique Carvalho", "email": "henrique.carvalho@suse.com", "time": "Wed Mar 11 20:17:23 2026 -0300" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Wed Mar 11 18:46:28 2026 -0500" }, "message": "smb: client: fix iface port assignment in parse_server_interfaces\n\nparse_server_interfaces() initializes interface socket addresses with\nCIFS_PORT. When the mount uses a non-default port this overwrites the\nconfigured destination port.\n\nLater, cifs_chan_update_iface() copies this sockaddr into server-\u003edstaddr,\ncausing reconnect attempts to use the wrong port after server interface\nupdates.\n\nUse the existing port from server-\u003edstaddr instead.\n\nCc: stable@vger.kernel.org\nFixes: fe856be475f7 (\"CIFS: parse and store info on iface queries\")\nTested-by: Dr. Thomas Orgis \u003cthomas.orgis@uni-hamburg.de\u003e\nReviewed-by: Enzo Matsumiya \u003cematsumiya@suse.de\u003e\nSigned-off-by: Henrique Carvalho \u003chenrique.carvalho@suse.com\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "f311a05784634febd299f03476b80f3f18489767", "tree": "ce814769a0751fecc59354a70b584cfd73e8ae36", "parents": [ "f26ecaa0f0abfe5db173416214098a00d3b7db79" ], "author": { "name": "Adrian Ng Ho Yin", "email": "adrianhoyin.ng@altera.com", "time": "Fri Feb 13 14:00:48 2026 +0800" }, "committer": { "name": "Alexandre Belloni", "email": "alexandre.belloni@bootlin.com", "time": "Wed Mar 11 22:50:29 2026 +0100" }, "message": "i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach\n\nThe DesignWare I3C master controller ACKs IBIs as soon as a valid\nDevice Address Table (DAT) entry is present. This can create a race\nbetween device attachment (after DAA) and the point where the client\ndriver enables IBIs via i3c_device_enable_ibi().\n\nSet DEV_ADDR_TABLE_SIR_REJECT in the DAT entry during\nattach_i3c_dev() and reattach_i3c_dev() so that IBIs are rejected\nby default. The bit is managed thereafter by the existing\ndw_i3c_master_set_sir_enabled() function, which clears it in\nenable_ibi() after ENEC is issued, and restores it in disable_ibi()\nafter DISEC.\n\nFixes: 1dd728f5d4d4 (\"i3c: master: Add driver for Synopsys DesignWare IP\")\nSigned-off-by: Adrian Ng Ho Yin \u003cadrianhoyin.ng@altera.com\u003e\nReviewed-by: Frank Li \u003cFrank.Li@nxp.com\u003e\nLink: https://patch.msgid.link/53f5b8cbdd8af789ec38b95b02873f32f9182dd6.1770962368.git.adrianhoyin.ng@altera.com\nSigned-off-by: Alexandre Belloni \u003calexandre.belloni@bootlin.com\u003e\n" }, { "commit": "f26ecaa0f0abfe5db173416214098a00d3b7db79", "tree": "5d9ad268fc0502060afd598a79dfc140841f078e", "parents": [ "9a258d1336f7ff3add8b92d566d3a421f03bf4d2" ], "author": { "name": "Peter Yin", "email": "peteryin.openbmc@gmail.com", "time": "Mon Mar 02 15:56:42 2026 +0800" }, "committer": { "name": "Alexandre Belloni", "email": "alexandre.belloni@bootlin.com", "time": "Wed Mar 11 22:48:26 2026 +0100" }, "message": "i3c: master: dw-i3c: Fix missing of_node for virtual I2C adapter\n\nThe DesignWare I3C master driver creates a virtual I2C adapter to\nprovide backward compatibility with I2C devices. However, the current\nimplementation does not associate this virtual adapter with any\nDevice Tree node.\n\nPropagate the of_node from the I3C master platform device to the\nvirtual I2C adapter\u0027s device structure. This ensures that standard\nI2C aliases are correctly resolved and bus numbering remains consistent.\n\nSigned-off-by: Peter Yin \u003cpeteryin.openbmc@gmail.com\u003e\nReviewed-by: Frank Li \u003cFrank.Li@nxp.com\u003e\nLink: https://patch.msgid.link/20260302075645.1492766-1-peteryin.openbmc@gmail.com\nSigned-off-by: Alexandre Belloni \u003calexandre.belloni@bootlin.com\u003e\n" }, { "commit": "9a258d1336f7ff3add8b92d566d3a421f03bf4d2", "tree": "ecc7d9b4724254e2f9ebf8bef0451b46290ec5d7", "parents": [ "c6396b835a5e599c4df656112140f065bb544a24" ], "author": { "name": "Adrian Hunter", "email": "adrian.hunter@intel.com", "time": "Fri Mar 06 09:24:51 2026 +0200" }, "committer": { "name": "Alexandre Belloni", "email": "alexandre.belloni@bootlin.com", "time": "Wed Mar 11 22:10:02 2026 +0100" }, "message": "i3c: mipi-i3c-hci: Fallback to software reset when bus disable fails\n\nDisruption of the MIPI I3C HCI controller\u0027s internal state can cause\ni3c_hci_bus_disable() to fail when attempting to shut down the bus.\n\nIn the code paths where bus disable is invoked - bus clean-up and runtime\nsuspend - the controller does not need to remain operational afterward, so\na full controller reset is a safe recovery mechanism.\n\nAdd a fallback to issue a software reset when disabling the bus fails.\nThis ensures the bus is reliably halted even if the controller\u0027s state\nmachine is stuck or unresponsive.\n\nThe fallback is used both during bus clean-up and in the runtime suspend\npath. In the latter case, ensure interrupts are quiesced after reset.\n\nFixes: 9ad9a52cce282 (\"i3c/master: introduce the mipi-i3c-hci driver\")\nCc: stable@vger.kernel.org\nSigned-off-by: Adrian Hunter \u003cadrian.hunter@intel.com\u003e\nReviewed-by: Frank Li \u003cFrank.Li@nxp.com\u003e\nLink: https://patch.msgid.link/20260306072451.11131-15-adrian.hunter@intel.com\nSigned-off-by: Alexandre Belloni \u003calexandre.belloni@bootlin.com\u003e\n" }, { "commit": "c6396b835a5e599c4df656112140f065bb544a24", "tree": "a77899f8707b03af4ff89a61cccc9db55ff4fc47", "parents": [ "e44d2719225e618dde74c7056f8e6949f884095e" ], "author": { "name": "Adrian Hunter", "email": "adrian.hunter@intel.com", "time": "Fri Mar 06 09:24:50 2026 +0200" }, "committer": { "name": "Alexandre Belloni", "email": "alexandre.belloni@bootlin.com", "time": "Wed Mar 11 22:10:02 2026 +0100" }, "message": "i3c: mipi-i3c-hci: Fix handling of shared IRQs during early initialization\n\nShared interrupts may fire unexpectedly, including during periods when the\ncontroller is not yet fully initialized. Commit b9a15012a1452\n(\"i3c: mipi-i3c-hci: Add optional Runtime PM support\") addressed this issue\nfor the runtime-suspended state, but the same problem can also occur before\nthe bus is enabled for the first time.\n\nEnsure the IRQ handler ignores interrupts until initialization is complete\nby making consistent use of the existing irq_inactive flag. The flag is\nnow set to false immediately before enabling the bus.\n\nTo guarantee correct ordering with respect to the IRQ handler, protect\nall transitions of irq_inactive with the same spinlock used inside the\nhandler.\n\nFixes: b8460480f62e1 (\"i3c: mipi-i3c-hci: Allow for Multi-Bus Instances\")\nCc: stable@vger.kernel.org\nSigned-off-by: Adrian Hunter \u003cadrian.hunter@intel.com\u003e\nReviewed-by: Frank Li \u003cFrank.Li@nxp.com\u003e\nLink: https://patch.msgid.link/20260306072451.11131-14-adrian.hunter@intel.com\nSigned-off-by: Alexandre Belloni \u003calexandre.belloni@bootlin.com\u003e\n" }, { "commit": "e44d2719225e618dde74c7056f8e6949f884095e", "tree": "5b9e0c3980425f53ab7b8844c306d7f18d41f8f6", "parents": [ "7ac45bc68f089887ab3a70358057edb7e6b6084e" ], "author": { "name": "Adrian Hunter", "email": "adrian.hunter@intel.com", "time": "Fri Mar 06 09:24:49 2026 +0200" }, "committer": { "name": "Alexandre Belloni", "email": "alexandre.belloni@bootlin.com", "time": "Wed Mar 11 22:10:02 2026 +0100" }, "message": "i3c: mipi-i3c-hci: Fix race in DMA error handling in interrupt context\n\nThe DMA ring halts whenever a transfer encounters an error. The interrupt\nhandler previously attempted to detect this situation and restart the ring\nif a transfer completed at the same time. However, this restart logic runs\nentirely in interrupt context and is inherently racy: it interacts with\nother paths manipulating the ring state, and fully serializing it within\nthe interrupt handler is not practical.\n\nMove this error-recovery logic out of the interrupt handler and into the\ntransfer-processing path (i3c_hci_process_xfer()), where serialization and\nstate management are already controlled. Introduce a new optional I/O-ops\ncallback, handle_error(), invoked when a completed transfer reports an\nerror. For DMA operation, the implementation simply calls the existing\ndequeue function, which safely aborts and restarts the ring when needed.\n\nThis removes the fragile ring-restart logic from the interrupt handler and\ncentralizes error handling where proper sequencing can be ensured.\n\nFixes: ccdb2e0e3b00d (\"i3c: mipi-i3c-hci: Add Intel specific quirk to ring resuming\")\nCc: stable@vger.kernel.org\nSigned-off-by: Adrian Hunter \u003cadrian.hunter@intel.com\u003e\nReviewed-by: Frank Li \u003cFrank.Li@nxp.com\u003e\nLink: https://patch.msgid.link/20260306072451.11131-13-adrian.hunter@intel.com\nSigned-off-by: Alexandre Belloni \u003calexandre.belloni@bootlin.com\u003e\n" }, { "commit": "7ac45bc68f089887ab3a70358057edb7e6b6084e", "tree": "ebc4d70ecc7da3bc48a93c6aa92d4a48a9111f36", "parents": [ "b6d586431ae20d5157ee468d0ef62ad26798ef13" ], "author": { "name": "Adrian Hunter", "email": "adrian.hunter@intel.com", "time": "Fri Mar 06 09:24:48 2026 +0200" }, "committer": { "name": "Alexandre Belloni", "email": "alexandre.belloni@bootlin.com", "time": "Wed Mar 11 22:10:02 2026 +0100" }, "message": "i3c: mipi-i3c-hci: Consolidate common xfer processing logic\n\nSeveral parts of the MIPI I3C HCI driver duplicate the same sequence for\nqueuing a transfer, waiting for completion, and handling timeouts. This\nlogic appears in five separate locations and will be affected by an\nupcoming fix.\n\nRefactor the repeated code into a new helper, i3c_hci_process_xfer(), and\nstore the timeout value in the hci_xfer structure so that callers do not\nneed to pass it as a separate parameter.\n\nFixes: 9ad9a52cce282 (\"i3c/master: introduce the mipi-i3c-hci driver\")\nCc: stable@vger.kernel.org\nSigned-off-by: Adrian Hunter \u003cadrian.hunter@intel.com\u003e\nReviewed-by: Frank Li \u003cFrank.Li@nxp.com\u003e\nLink: https://patch.msgid.link/20260306072451.11131-12-adrian.hunter@intel.com\nSigned-off-by: Alexandre Belloni \u003calexandre.belloni@bootlin.com\u003e\n" }, { "commit": "b6d586431ae20d5157ee468d0ef62ad26798ef13", "tree": "c19994340251413f2593210fb9df2187201ceb18", "parents": [ "ec3cfd835f7c4bbd23bc9ad909d2fdc772a578bb" ], "author": { "name": "Adrian Hunter", "email": "adrian.hunter@intel.com", "time": "Fri Mar 06 09:24:47 2026 +0200" }, "committer": { "name": "Alexandre Belloni", "email": "alexandre.belloni@bootlin.com", "time": "Wed Mar 11 22:10:02 2026 +0100" }, "message": "i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort\n\nThe DMA dequeue path attempts to restart the ring after aborting an\nin-flight transfer, but the current sequence is incomplete. The controller\nmust be brought out of the aborted state and the ring control registers\nmust be programmed in the correct order: first clearing ABORT, then\nre-enabling the ring and asserting RUN_STOP to resume operation.\n\nAdd the missing controller resume step and update the ring control writes\nso that the ring is restarted using the proper sequence.\n\nFixes: 9ad9a52cce282 (\"i3c/master: introduce the mipi-i3c-hci driver\")\nCc: stable@vger.kernel.org\nSigned-off-by: Adrian Hunter \u003cadrian.hunter@intel.com\u003e\nReviewed-by: Frank Li \u003cFrank.Li@nxp.com\u003e\nLink: https://patch.msgid.link/20260306072451.11131-11-adrian.hunter@intel.com\nSigned-off-by: Alexandre Belloni \u003calexandre.belloni@bootlin.com\u003e\n" }, { "commit": "ec3cfd835f7c4bbd23bc9ad909d2fdc772a578bb", "tree": "2dd32b3a03298d4237ab3163e9631a693d9aed24", "parents": [ "b795e68bf3073d67bebbb5a44d93f49efc5b8cc7" ], "author": { "name": "Adrian Hunter", "email": "adrian.hunter@intel.com", "time": "Fri Mar 06 09:24:46 2026 +0200" }, "committer": { "name": "Alexandre Belloni", "email": "alexandre.belloni@bootlin.com", "time": "Wed Mar 11 22:10:02 2026 +0100" }, "message": "i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor\n\nThe internal control command descriptor used for no-op commands includes a\nTransaction ID (TID) field, but the no-op command constructed in\nhci_dma_dequeue_xfer() omitted it. As a result, the hardware receives a\nno-op descriptor without the expected TID.\n\nThis bug has gone unnoticed because the TID is currently not validated in\nthe no-op completion path, but the descriptor format requires it to be\npresent.\n\nAdd the missing TID field when generating a no-op descriptor so that its\nlayout matches the defined command structure.\n\nFixes: 9ad9a52cce282 (\"i3c/master: introduce the mipi-i3c-hci driver\")\nCc: stable@vger.kernel.org\nSigned-off-by: Adrian Hunter \u003cadrian.hunter@intel.com\u003e\nReviewed-by: Frank Li \u003cFrank.Li@nxp.com\u003e\nLink: https://patch.msgid.link/20260306072451.11131-10-adrian.hunter@intel.com\nSigned-off-by: Alexandre Belloni \u003calexandre.belloni@bootlin.com\u003e\n" }, { "commit": "b795e68bf3073d67bebbb5a44d93f49efc5b8cc7", "tree": "b731a939beb7d08e1df0370aef10a7fb2a76a131", "parents": [ "f0b5159637ca0b8feaaa95de0f5ea38f1ba26729" ], "author": { "name": "Adrian Hunter", "email": "adrian.hunter@intel.com", "time": "Fri Mar 06 09:24:45 2026 +0200" }, "committer": { "name": "Alexandre Belloni", "email": "alexandre.belloni@bootlin.com", "time": "Wed Mar 11 22:10:02 2026 +0100" }, "message": "i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue\n\nThe logic used to abort the DMA ring contains several flaws:\n\n 1. The driver unconditionally issues a ring abort even when the ring has\n already stopped.\n 2. The completion used to wait for abort completion is never\n re-initialized, resulting in incorrect wait behavior.\n 3. The abort sequence unintentionally clears RING_CTRL_ENABLE, which\n resets hardware ring pointers and disrupts the controller state.\n 4. If the ring is already stopped, the abort operation should be\n considered successful without attempting further action.\n\nFix the abort handling by checking whether the ring is running before\nissuing an abort, re-initializing the completion when needed, ensuring that\nRING_CTRL_ENABLE remains asserted during abort, and treating an already\nstopped ring as a successful condition.\n\nFixes: 9ad9a52cce282 (\"i3c/master: introduce the mipi-i3c-hci driver\")\nCc: stable@vger.kernel.org\nSigned-off-by: Adrian Hunter \u003cadrian.hunter@intel.com\u003e\nReviewed-by: Frank Li \u003cFrank.Li@nxp.com\u003e\nLink: https://patch.msgid.link/20260306072451.11131-9-adrian.hunter@intel.com\nSigned-off-by: Alexandre Belloni \u003calexandre.belloni@bootlin.com\u003e\n" }, { "commit": "f0b5159637ca0b8feaaa95de0f5ea38f1ba26729", "tree": "62e5ae3d91f4fea39c45511c2a99a63f4a68e320", "parents": [ "1dca8aee80eea76d2aae21265de5dd64f6ba0f09" ], "author": { "name": "Adrian Hunter", "email": "adrian.hunter@intel.com", "time": "Fri Mar 06 09:24:44 2026 +0200" }, "committer": { "name": "Alexandre Belloni", "email": "alexandre.belloni@bootlin.com", "time": "Wed Mar 11 22:10:01 2026 +0100" }, "message": "i3c: mipi-i3c-hci: Fix race between DMA ring dequeue and interrupt handler\n\nThe DMA ring bookkeeping in the MIPI I3C HCI driver is updated from two\ncontexts: the DMA ring dequeue path (hci_dma_dequeue_xfer()) and the\ninterrupt handler (hci_dma_xfer_done()). Both modify the ring\u0027s\nin-flight transfer state - specifically rh-\u003esrc_xfers[] and\nxfer-\u003ering_entry - but without any serialization. This allows the two\npaths to race, potentially leading to inconsistent ring state.\n\nSerialize access to the shared ring state by extending the existing\nspinlock to cover the DMA dequeue path and the entire interrupt handler.\nSince the core IRQ handler now holds this lock, remove the per-function\nlocking from the PIO and DMA sub-handlers.\n\nAdditionally, clear the completed entry in rh-\u003esrc_xfers[] in\nhci_dma_xfer_done() so it cannot be matched or completed again.\n\nFinally, place the ring restart sequence under the same lock in\nhci_dma_dequeue_xfer() to avoid concurrent enqueue or completion\noperations while the ring state is being modified.\n\nFixes: 9ad9a52cce282 (\"i3c/master: introduce the mipi-i3c-hci driver\")\nCc: stable@vger.kernel.org\nSigned-off-by: Adrian Hunter \u003cadrian.hunter@intel.com\u003e\nReviewed-by: Frank Li \u003cFrank.Li@nxp.com\u003e\nLink: https://patch.msgid.link/20260306072451.11131-8-adrian.hunter@intel.com\nSigned-off-by: Alexandre Belloni \u003calexandre.belloni@bootlin.com\u003e\n" }, { "commit": "1dca8aee80eea76d2aae21265de5dd64f6ba0f09", "tree": "9d0c1eb75aee322bf342be8e3b90bbf7bc3f571e", "parents": [ "4decbbc8a8cf0a69ab011d7c2c88ed3cd0a00ddd" ], "author": { "name": "Adrian Hunter", "email": "adrian.hunter@intel.com", "time": "Fri Mar 06 09:24:43 2026 +0200" }, "committer": { "name": "Alexandre Belloni", "email": "alexandre.belloni@bootlin.com", "time": "Wed Mar 11 22:10:01 2026 +0100" }, "message": "i3c: mipi-i3c-hci: Fix race in DMA ring dequeue\n\nThe HCI DMA dequeue path (hci_dma_dequeue_xfer()) may be invoked for\nmultiple transfers that timeout around the same time. However, the\nfunction is not serialized and can race with itself.\n\nWhen a timeout occurs, hci_dma_dequeue_xfer() stops the ring, processes\nincomplete transfers, and then restarts the ring. If another timeout\ntriggers a parallel call into the same function, the two instances may\ninterfere with each other - stopping or restarting the ring at unexpected\ntimes.\n\nAdd a mutex so that hci_dma_dequeue_xfer() is serialized with respect to\nitself.\n\nFixes: 9ad9a52cce282 (\"i3c/master: introduce the mipi-i3c-hci driver\")\nCc: stable@vger.kernel.org\nSigned-off-by: Adrian Hunter \u003cadrian.hunter@intel.com\u003e\nReviewed-by: Frank Li \u003cFrank.Li@nxp.com\u003e\nLink: https://patch.msgid.link/20260306072451.11131-7-adrian.hunter@intel.com\nSigned-off-by: Alexandre Belloni \u003calexandre.belloni@bootlin.com\u003e\n" }, { "commit": "4decbbc8a8cf0a69ab011d7c2c88ed3cd0a00ddd", "tree": "65cceb5250fad6fbaecf3f483743626e3046d907", "parents": [ "fa12bb903bc3ed1826e355d267fe134bde95e23c" ], "author": { "name": "Adrian Hunter", "email": "adrian.hunter@intel.com", "time": "Fri Mar 06 09:24:42 2026 +0200" }, "committer": { "name": "Alexandre Belloni", "email": "alexandre.belloni@bootlin.com", "time": "Wed Mar 11 22:10:01 2026 +0100" }, "message": "i3c: mipi-i3c-hci: Fix race in DMA ring enqueue for parallel xfers\n\nThe I3C subsystem allows multiple transfers to be queued concurrently.\nHowever, the MIPI I3C HCI driver\u0027s DMA enqueue path, hci_dma_queue_xfer(),\nlacks sufficient serialization.\n\nIn particular, the allocation of the enqueue_ptr and its subsequent update\nin the RING_OPERATION1 register, must be done atomically. Otherwise, for\nexample, it would be possible for 2 transfers to be allocated the same\nenqueue_ptr.\n\nExtend the use of the existing spinlock for that purpose. Keep a count of\nthe number of xfers enqueued so that it is easy to determine if the ring\nhas enough space.\n\nFixes: 9ad9a52cce282 (\"i3c/master: introduce the mipi-i3c-hci driver\")\nCc: stable@vger.kernel.org\nSigned-off-by: Adrian Hunter \u003cadrian.hunter@intel.com\u003e\nReviewed-by: Frank Li \u003cFrank.Li@nxp.com\u003e\nLink: https://patch.msgid.link/20260306072451.11131-6-adrian.hunter@intel.com\nSigned-off-by: Alexandre Belloni \u003calexandre.belloni@bootlin.com\u003e\n" }, { "commit": "fa12bb903bc3ed1826e355d267fe134bde95e23c", "tree": "8b9c120a74d123225eca1b5c4db307a75c4e47d2", "parents": [ "f3bcbfe1b8b0b836b772927f75f8cb6e759eb00a" ], "author": { "name": "Adrian Hunter", "email": "adrian.hunter@intel.com", "time": "Fri Mar 06 09:24:41 2026 +0200" }, "committer": { "name": "Alexandre Belloni", "email": "alexandre.belloni@bootlin.com", "time": "Wed Mar 11 22:10:01 2026 +0100" }, "message": "i3c: mipi-i3c-hci: Consolidate spinlocks\n\nThe MIPI I3C HCI driver currently uses separate spinlocks for different\ncontexts (PIO vs. DMA rings). This split is unnecessary and complicates\nupcoming fixes. The driver does not support concurrent PIO and DMA\noperation, and it only supports a single DMA ring, so a single lock is\nsufficient for all paths.\n\nIntroduce a unified spinlock in struct i3c_hci, switch both PIO and DMA\ncode to use it, and remove the per-context locks.\n\nNo functional change is intended in this patch.\n\nFixes: 9ad9a52cce282 (\"i3c/master: introduce the mipi-i3c-hci driver\")\nCc: stable@vger.kernel.org\nSigned-off-by: Adrian Hunter \u003cadrian.hunter@intel.com\u003e\nReviewed-by: Frank Li \u003cFrank.Li@nxp.com\u003e\nLink: https://patch.msgid.link/20260306072451.11131-5-adrian.hunter@intel.com\nSigned-off-by: Alexandre Belloni \u003calexandre.belloni@bootlin.com\u003e\n" }, { "commit": "f3bcbfe1b8b0b836b772927f75f8cb6e759eb00a", "tree": "52294fa94f51a0eaa4e4336f6bdb3476a0d683a7", "parents": [ "fa9586bd77ada1e3861c7bef65f6bb9dcf8d9481" ], "author": { "name": "Adrian Hunter", "email": "adrian.hunter@intel.com", "time": "Fri Mar 06 09:24:40 2026 +0200" }, "committer": { "name": "Alexandre Belloni", "email": "alexandre.belloni@bootlin.com", "time": "Wed Mar 11 22:10:01 2026 +0100" }, "message": "i3c: mipi-i3c-hci: Factor out DMA mapping from queuing path\n\nPrepare for fixing a race in the DMA ring enqueue path when handling\nparallel transfers. Move all DMA mapping out of hci_dma_queue_xfer()\nand into a new helper that performs the mapping up front.\n\nThis refactoring allows the upcoming fix to extend the spinlock coverage\naround the enqueue operation without performing DMA mapping under the\nspinlock.\n\nNo functional change is intended in this patch.\n\nFixes: 9ad9a52cce282 (\"i3c/master: introduce the mipi-i3c-hci driver\")\nCc: stable@vger.kernel.org\nSigned-off-by: Adrian Hunter \u003cadrian.hunter@intel.com\u003e\nReviewed-by: Frank Li \u003cFrank.Li@nxp.com\u003e\nLink: https://patch.msgid.link/20260306072451.11131-4-adrian.hunter@intel.com\nSigned-off-by: Alexandre Belloni \u003calexandre.belloni@bootlin.com\u003e\n" } ], "next": "fa9586bd77ada1e3861c7bef65f6bb9dcf8d9481" }