)]}' { "log": [ { "commit": "586de92313fcab8ed84ac5f78f4d2aae2db92c59", "tree": "96fc09436c627cd9706f66a77cd0dc78999336be", "parents": [ "183601b78a9b1c3da2b59f2bee915f97ba745c0b", "807d47a6dc054859eef90066516ae4f44fe22e6d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 22 17:33:38 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 22 17:33:38 2025 -0700" }, "message": "Merge tag \u0027i2c-for-6.14-rc8\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux\n\nPull i2c fix from Wolfram Sang:\n \"Fix double free of irq in amd-mp2 driver\"\n\n* tag \u0027i2c-for-6.14-rc8\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux:\n i2c: amd-mp2: drop free_irq() of devm_request_irq() allocated irq\n" }, { "commit": "183601b78a9b1c3da2b59f2bee915f97ba745c0b", "tree": "3a704ff99a5311d5b386403001651fcceda82958", "parents": [ "fcea541800539899ba0073259cd35d615488a415", "50a53b60e141d7e31368a87e222e4dd5597bd4ae" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 22 14:40:27 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 22 14:40:27 2025 -0700" }, "message": "Merge tag \u0027perf-urgent-2025-03-22\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull x86 perf events fix from Ingo Molnar:\n \"Fix an information leak regression in the AMD IBS PMU code\"\n\n* tag \u0027perf-urgent-2025-03-22\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n perf/amd/ibs: Prevent leaking sensitive data to userspace\n" }, { "commit": "fcea541800539899ba0073259cd35d615488a415", "tree": "b40cac95446261209cea5aea9a7d677ed9a4fdee", "parents": [ "bb18645ac1ee5b655f07a70e63ad27213a2596c8", "75845c6c1a64483e9985302793dbf0dfa5f71e32" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 22 14:10:07 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 22 14:10:07 2025 -0700" }, "message": "Merge tag \u0027keys-next-6.14-rc8\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd\n\nPull keys fix from Jarkko Sakkinen:\n \"Fix potential use-after-free in key_put()\"\n\n* tag \u0027keys-next-6.14-rc8\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd:\n keys: Fix UAF in key_put()\n" }, { "commit": "bb18645ac1ee5b655f07a70e63ad27213a2596c8", "tree": "c147d68a6fe5ad801202e211cb85703d4877fea8", "parents": [ "88d324e69ea9f3ae1c1905ea75d717c08bdb8e15", "67c007d6c12da3e456c005083696c20d4498ae72" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 22 10:45:44 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 22 10:45:44 2025 -0700" }, "message": "Merge tag \u0027io_uring-6.14-20250322\u0027 of git://git.kernel.dk/linux\n\nPull io_uring fix from Jens Axboe:\n \"Just a single fix for the commit that went into your tree yesterday,\n which exposed an issue with not always clearing notifications. That\n could cause them to be used more than once\"\n\n* tag \u0027io_uring-6.14-20250322\u0027 of git://git.kernel.dk/linux:\n io_uring/net: fix sendzc double notif flush\n" }, { "commit": "67c007d6c12da3e456c005083696c20d4498ae72", "tree": "21780762933668adb8f359cd3a847add6f9c4297", "parents": [ "cc34d8330e036b6bffa88db9ea537bae6b03948f" ], "author": { "name": "Pavel Begunkov", "email": "asml.silence@gmail.com", "time": "Sat Mar 22 11:47:27 2025 +0000" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Sat Mar 22 08:14:36 2025 -0600" }, "message": "io_uring/net: fix sendzc double notif flush\n\nrefcount_t: underflow; use-after-free.\nWARNING: CPU: 0 PID: 5823 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 lib/refcount.c:28\nRIP: 0010:refcount_warn_saturate+0x15a/0x1d0 lib/refcount.c:28\nCall Trace:\n \u003cTASK\u003e\n io_notif_flush io_uring/notif.h:40 [inline]\n io_send_zc_cleanup+0x121/0x170 io_uring/net.c:1222\n io_clean_op+0x58c/0x9a0 io_uring/io_uring.c:406\n io_free_batch_list io_uring/io_uring.c:1429 [inline]\n __io_submit_flush_completions+0xc16/0xd20 io_uring/io_uring.c:1470\n io_submit_flush_completions io_uring/io_uring.h:159 [inline]\n\nBefore the blamed commit, sendzc relied on io_req_msg_cleanup() to clear\nREQ_F_NEED_CLEANUP, so after the following snippet the request will\nnever hit the core io_uring cleanup path.\n\nio_notif_flush();\nio_req_msg_cleanup();\n\nThe easiest fix is to null the notification. io_send_zc_cleanup() can\nstill be called after, but it\u0027s tolerated.\n\nReported-by: syzbot+cf285a028ffba71b2ef5@syzkaller.appspotmail.com\nTested-by: syzbot+cf285a028ffba71b2ef5@syzkaller.appspotmail.com\nFixes: cc34d8330e036 (\"io_uring/net: don\u0027t clear REQ_F_NEED_CLEANUP unconditionally\")\nSigned-off-by: Pavel Begunkov \u003casml.silence@gmail.com\u003e\nLink: https://lore.kernel.org/r/e1306007458b8891c88c4f20c966a17595f766b0.1742643795.git.asml.silence@gmail.com\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "75845c6c1a64483e9985302793dbf0dfa5f71e32", "tree": "316418c4f9e9c03773df0fc93937b8904c3f907c", "parents": [ "88d324e69ea9f3ae1c1905ea75d717c08bdb8e15" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Mar 19 15:57:46 2025 +0000" }, "committer": { "name": "Jarkko Sakkinen", "email": "jarkko@kernel.org", "time": "Sat Mar 22 15:36:49 2025 +0200" }, "message": "keys: Fix UAF in key_put()\n\nOnce a key\u0027s reference count has been reduced to 0, the garbage collector\nthread may destroy it at any time and so key_put() is not allowed to touch\nthe key after that point. The most key_put() is normally allowed to do is\nto touch key_gc_work as that\u0027s a static global variable.\n\nHowever, in an effort to speed up the reclamation of quota, this is now\ndone in key_put() once the key\u0027s usage is reduced to 0 - but now the code\nis looking at the key after the deadline, which is forbidden.\n\nFix this by using a flag to indicate that a key can be gc\u0027d now rather than\nlooking at the key\u0027s refcount in the garbage collector.\n\nFixes: 9578e327b2b4 (\"keys: update key quotas in key_put()\")\nReported-by: syzbot+6105ffc1ded71d194d6d@syzkaller.appspotmail.com\nCloses: https://lore.kernel.org/all/673b6aec.050a0220.87769.004a.GAE@google.com/\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nTested-by: syzbot+6105ffc1ded71d194d6d@syzkaller.appspotmail.com\nReviewed-by: Oleg Nesterov \u003coleg@redhat.com\u003e\nSigned-off-by: Jarkko Sakkinen \u003cjarkko@kernel.org\u003e\n" }, { "commit": "50a53b60e141d7e31368a87e222e4dd5597bd4ae", "tree": "983d1679ce2ec928492138a15ba77f6ab6579cce", "parents": [ "5c7474b5449ccda2f0139e87425845baa2dae15a" ], "author": { "name": "Namhyung Kim", "email": "namhyung@kernel.org", "time": "Sat Mar 22 08:13:01 2025 +0100" }, "committer": { "name": "Ingo Molnar", "email": "mingo@kernel.org", "time": "Sat Mar 22 08:18:24 2025 +0100" }, "message": "perf/amd/ibs: Prevent leaking sensitive data to userspace\n\nAlthough IBS \"swfilt\" can prevent leaking samples with kernel RIP to the\nuserspace, there are few subtle cases where a \u0027data\u0027 address and/or a\n\u0027branch target\u0027 address can fall under kernel address range although RIP\nis from userspace. Prevent leaking kernel \u0027data\u0027 addresses by discarding\nsuch samples when {exclude_kernel\u003d1,swfilt\u003d1}.\n\nIBS can now be invoked by unprivileged user with the introduction of\n\"swfilt\". However, this creates a loophole in the interface where an\nunprivileged user can get physical address of the userspace virtual\naddresses through IBS register raw dump (PERF_SAMPLE_RAW). Prevent this\nas well.\n\nThis upstream commit fixed the most obvious leak:\n\n 65a99264f5e5 perf/x86: Check data address for IBS software filter\n\nFollow that up with a more complete fix.\n\nFixes: d29e744c7167 (\"perf/x86: Relax privilege filter restriction on AMD IBS\")\nSuggested-by: Matteo Rizzo \u003cmatteorizzo@google.com\u003e\nCo-developed-by: Ravi Bangoria \u003cravi.bangoria@amd.com\u003e\nSigned-off-by: Namhyung Kim \u003cnamhyung@kernel.org\u003e\nSigned-off-by: Ravi Bangoria \u003cravi.bangoria@amd.com\u003e\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nLink: https://lore.kernel.org/r/20250321161251.1033-1-ravi.bangoria@amd.com\n" }, { "commit": "88d324e69ea9f3ae1c1905ea75d717c08bdb8e15", "tree": "aa942eba62d5d2e024adf18f12eb184d8f400f50", "parents": [ "21d1ccf0e97d533d5dee470f5adce45358a0f996", "176fda56d72a267731f82aa4a3aeca430394f10e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 21 14:07:40 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 21 14:07:40 2025 -0700" }, "message": "Merge tag \u0027spi-fix-v6.14-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi\n\nPull spi fix from Mark Brown:\n \"This is a straightforward fix for a reference count leak in the rarely\n used SPI device mode functionality\"\n\n* tag \u0027spi-fix-v6.14-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi:\n spi: Fix reference count leak in slave_show()\n" }, { "commit": "21d1ccf0e97d533d5dee470f5adce45358a0f996", "tree": "6a1c58b01cd547b037e6f4fe594e0dcd991f3b9b", "parents": [ "3e49db00df1f8959a6323bc0b21f44653677b302", "b65439d9015024c37c6b8a17c0569ec44675a979" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 21 13:42:55 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 21 13:42:55 2025 -0700" }, "message": "Merge tag \u0027regulator-fix-v6.14-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator\n\nPull regulator fixes from Mark Brown:\n \"More fixes than I\u0027d like at this point, some of which is due to me\n cooking things in -next for a bit and resetting that cooking time as\n more fixes came in.\n\n - Christian Eggers fixed some race conditions with the dummy\n regulator not being available very early in boot due to the use of\n asynchronous probing, both the provider side (ensuring that it\u0027s\n availalbe) and consumer side (handling things if that goes wrong)\n are fixed\n\n - Ludvig Pärsson fixed some lockdep issues with the debugfs\n registration for regulators holding more locks than it really needs\n causing issues later when looking at the resulting debugfs.boot\n\n - Some device specific fixes for incorrect descriptions of the\n RTQ2208 from ChiYuan Huang\"\n\n* tag \u0027regulator-fix-v6.14-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator:\n regulator: rtq2208: Fix the LDO DVS capability\n regulator: rtq2208: Fix incorrect buck converter phase mapping\n regulator: check that dummy regulator has been probed before using it\n regulator: dummy: force synchronous probing\n regulator: core: Fix deadlock in create_regulator()\n" }, { "commit": "3e49db00df1f8959a6323bc0b21f44653677b302", "tree": "a0d099f65186627e87ca7041b7ac23f2c05e01d2", "parents": [ "d07de43e3f05576fd275c8c82e413d91932119a5", "c746ff4a67f4842e90fe232d2c9fc983f4034848" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 21 13:02:28 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 21 13:02:28 2025 -0700" }, "message": "Merge tag \u0027pinctrl-v6.14-4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl\n\nPull pin control fix from Linus Walleij:\n\n - A single patch for Spacemit K1 fixing up the Kconfig to not default\n to \"y\"\n\n* tag \u0027pinctrl-v6.14-4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl:\n pinctrl: spacemit: PINCTRL_SPACEMIT_K1 should not default to y unconditionally\n" }, { "commit": "d07de43e3f05576fd275c8c82e413d91932119a5", "tree": "1f323aa1de34b05e30332006e43ea5ccc022fa0c", "parents": [ "5c7474b5449ccda2f0139e87425845baa2dae15a", "cc34d8330e036b6bffa88db9ea537bae6b03948f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 21 10:30:15 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 21 10:30:15 2025 -0700" }, "message": "Merge tag \u0027io_uring-6.14-20250321\u0027 of git://git.kernel.dk/linux\n\nPull io_uring fix from Jens Axboe:\n \"Single fix heading to stable, fixing an issue with io_req_msg_cleanup()\n sometimes too eagerly clearing cleanup flags\"\n\n* tag \u0027io_uring-6.14-20250321\u0027 of git://git.kernel.dk/linux:\n io_uring/net: don\u0027t clear REQ_F_NEED_CLEANUP unconditionally\n" }, { "commit": "5c7474b5449ccda2f0139e87425845baa2dae15a", "tree": "19c49ea2fcd6ecbfedaf719fa05e04ac6c687b35", "parents": [ "cb90c8df91d08aebb62ef77bd1c7f41a31bdc924", "7e512f5ad24458e2c930b5be5d96ddf9e176e05d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 21 08:52:31 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 21 08:52:31 2025 -0700" }, "message": "Merge tag \u0027perf-urgent-2025-03-21\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull x86 perf events fixes from Ingo Molnar:\n \"Two fixes: an RAPL PMU driver error handling fix, and an AMD IBS\n software filter fix\"\n\n* tag \u0027perf-urgent-2025-03-21\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n perf/x86/rapl: Fix error handling in init_rapl_pmus()\n perf/x86: Check data address for IBS software filter\n" }, { "commit": "cb90c8df91d08aebb62ef77bd1c7f41a31bdc924", "tree": "9c5da28e5b7777996ba46dc9f3f2a4b8dcb61b69", "parents": [ "b3ee1e4609512dfff642a96b34d7e5dfcdc92d05", "76f970ce51c80f625eb6ddbb24e9cb51b977b598" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 21 08:48:40 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 21 08:48:40 2025 -0700" }, "message": "Merge tag \u0027sched-urgent-2025-03-21\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull scheduler fix from Ingo Molnar:\n \"Revert a scheduler performance optimization that regressed other\n workloads\"\n\n* tag \u0027sched-urgent-2025-03-21\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n Revert \"sched/core: Reduce cost of sched_move_task when config autogroup\"\n" }, { "commit": "807d47a6dc054859eef90066516ae4f44fe22e6d", "tree": "5917ac8d5ca75e3d9039acb346b174f94eeef952", "parents": [ "4701f33a10702d5fc577c32434eb62adde0a1ae1", "6ea39cc388899a121b5b19b6968692e9460ee4a3" ], "author": { "name": "Wolfram Sang", "email": "wsa+renesas@sang-engineering.com", "time": "Fri Mar 21 16:18:59 2025 +0100" }, "committer": { "name": "Wolfram Sang", "email": "wsa+renesas@sang-engineering.com", "time": "Fri Mar 21 16:18:59 2025 +0100" }, "message": "Merge tag \u0027i2c-host-fixes-6.14-rc8\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/andi.shyti/linux into i2c/for-current\n\ni2c-host-fixes for v6.14-rc8\n\namd-mp2: fix double free of irq.\n" }, { "commit": "b3ee1e4609512dfff642a96b34d7e5dfcdc92d05", "tree": "25d90358ef1946c490e8168bc67753fca2983e52", "parents": [ "a7ea35b61e37149963d975814104302fe8d69862", "41e09ef6c26f0bd89f93691ef967fd621a38d759" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 20 21:29:58 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 20 21:29:58 2025 -0700" }, "message": "Merge tag \u0027drm-fixes-2025-03-21\u0027 of https://gitlab.freedesktop.org/drm/kernel\n\nPull drm fixes from Dave Airlie:\n \"Just the usual spread of a bunch for amdgpu, and small changes to\n others.\n\n scheduler:\n - fix fence reference leak\n\n xe:\n - Fix for an error if exporting a dma-buf multiple time\n\n amdgpu:\n - Fix video caps limits on several asics\n - SMU 14.x fixes\n - GC 12 fixes\n - eDP fixes\n - DMUB fix\n\n amdkfd:\n - GC 12 trap handler fix\n - GC 7/8 queue validation fix\n\n radeon:\n - VCE IB parsing fix\n\n v3d:\n - fix job error handling bugs\n\n qaic:\n - fix two integer overflows\n\n host1x:\n - fix NULL domain handling\"\n\n* tag \u0027drm-fixes-2025-03-21\u0027 of https://gitlab.freedesktop.org/drm/kernel: (21 commits)\n drm/xe: Fix exporting xe buffers multiple times\n gpu: host1x: Do not assume that a NULL domain means no DMA IOMMU\n drm/amdgpu/pm: Handle SCLK offset correctly in overdrive for smu 14.0.2\n drm/amd/display: Fix incorrect fw_state address in dmub_srv\n drm/amd/display: Use HW lock mgr for PSR1 when only one eDP\n drm/amd/display: Fix message for support_edp0_on_dp1\n drm/amdkfd: Fix user queue validation on Gfx7/8\n drm/amdgpu: Restore uncached behaviour on GFX12\n drm/amdgpu/gfx12: correct cleanup of \u0027me\u0027 field with gfx_v12_0_me_fini()\n drm/amdkfd: Fix instruction hazard in gfx12 trap handler\n drm/amdgpu/pm: wire up hwmon fan speed for smu 14.0.2\n drm/amd/pm: add unique_id for gfx12\n drm/amdgpu: Remove JPEG from vega and carrizo video caps\n drm/amdgpu: Fix JPEG video caps max size for navi1x and raven\n drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size\n drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()\n accel/qaic: Fix integer overflow in qaic_validate_req()\n accel/qaic: Fix possible data corruption in BOs \u003e 2G\n drm/v3d: Set job pointer to NULL when the job\u0027s fence has an error\n drm/v3d: Don\u0027t run jobs that have errors flagged in its fence\n ...\n" }, { "commit": "a7ea35b61e37149963d975814104302fe8d69862", "tree": "2aced5a3cd62154e99a2f563a0f32b4e11b98d52", "parents": [ "a1cffe8cc8aef85f1b07c4464f0998b9785b795a", "7643dbd9db09fffebb4a62cd27599f17f4148b17" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 20 20:50:45 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 20 20:50:45 2025 -0700" }, "message": "Merge tag \u0027v6.14-rc7-smb3-client-fix\u0027 of git://git.samba.org/sfrench/cifs-2.6\n\nPull smb client fix from Steve French:\n \"smb3 client reconnect fix\"\n\n* tag \u0027v6.14-rc7-smb3-client-fix\u0027 of git://git.samba.org/sfrench/cifs-2.6:\n smb: client: don\u0027t retry IO on failed negprotos with soft mounts\n" }, { "commit": "41e09ef6c26f0bd89f93691ef967fd621a38d759", "tree": "8aa9f6cc537cad60ae43372e69bc32ac222367b6", "parents": [ "5854df5017a570298dc272d7274c92ce4c12804f", "d9d4cb224e4140f51847642aa5a4a5c3eb998af0" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Mar 21 11:59:29 2025 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Mar 21 11:59:49 2025 +1000" }, "message": "Merge tag \u0027amd-drm-fixes-6.14-2025-03-20\u0027 of https://gitlab.freedesktop.org/agd5f/linux into drm-fixes\n\namd-drm-fixes-6.14-2025-03-20:\n\namdgpu:\n- Fix video caps limits on several asics\n- SMU 14.x fixes\n- GC 12 fixes\n- eDP fixes\n- DMUB fix\n\namdkfd:\n- GC 12 trap handler fix\n- GC 7/8 queue validation fix\n\nradeon:\n- VCE IB parsing fix\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Alex Deucher \u003calexander.deucher@amd.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20250320210800.1358992-1-alexander.deucher@amd.com\n" }, { "commit": "5854df5017a570298dc272d7274c92ce4c12804f", "tree": "2a24e47c8e9846ac602ea7abfd3c94d9fb69f46f", "parents": [ "d2738724e41c94774785ab9e1111c24fa3bfca63", "50af7cab7520e46680cf4633bba6801443b75856" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Mar 21 11:31:23 2025 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Mar 21 11:31:40 2025 +1000" }, "message": "Merge tag \u0027drm-xe-fixes-2025-03-20\u0027 of https://gitlab.freedesktop.org/drm/xe/kernel into drm-fixes\n\nDriver Changes:\n- Fix for an error if exporting a dma-buf multiple time (Tomasz)\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Thomas Hellstrom \u003cthomas.hellstrom@linux.intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/Z9xalLaCWsNbh0P0@fedora\n" }, { "commit": "d2738724e41c94774785ab9e1111c24fa3bfca63", "tree": "f6b180ed2f6e3c6352bcf534218520275dc0299e", "parents": [ "4701f33a10702d5fc577c32434eb62adde0a1ae1", "cb83f4b965a66d85e9a03621ef3b22c044f4a033" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Mar 21 10:41:36 2025 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Mar 21 10:41:51 2025 +1000" }, "message": "Merge tag \u0027drm-misc-fixes-2025-03-20\u0027 of ssh://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes\n\nA sched fence reference leak fix, two fence fixes for v3d, two overflow\nfixes for quaic, and a iommu handling fix for host1x.\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Maxime Ripard \u003cmripard@redhat.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20250320-valiant-outstanding-nightingale-e9acae@houat\n" }, { "commit": "a1cffe8cc8aef85f1b07c4464f0998b9785b795a", "tree": "935afa2e12dd937177ee6f0a4ab82328b58ba9b1", "parents": [ "b5329d5a35582abbef57562f9fb6cb26a643f252", "8324993f60305e50f27b98358b01b9837e10d159" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 20 16:55:24 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 20 16:55:24 2025 -0700" }, "message": "Merge tag \u0027dma-mapping-6.14-2025-03-21\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mszyprowski/linux\n\nPull dma-mapping fix from Marek Szyprowski:\n\n - fix missing clear bdr in check_ram_in_range_map() (Baochen Qiang)\n\n* tag \u0027dma-mapping-6.14-2025-03-21\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mszyprowski/linux:\n dma-mapping: fix missing clear bdr in check_ram_in_range_map()\n" }, { "commit": "b5329d5a35582abbef57562f9fb6cb26a643f252", "tree": "90eaf9f414282761c5be3d2a15a46ec239bc039d", "parents": [ "f45f8f0ed4c6d3a9be27ff27347408e1c1bbb364", "f70681e9e6066ab7b102e6b46a336a8ed67812ae" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 20 14:13:50 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 20 14:13:50 2025 -0700" }, "message": "Merge tag \u0027vfs-6.14-final.fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs\n\nPull vfs fixes from Christian Brauner:\n \"A final set of fixes for this cycle:\n\n VFS:\n\n - Ensure that the stable offset api doesn\u0027t return duplicate\n directory entries when userspace has to perform the getdents call\n multiple times on large directories\n\n afs:\n\n - Prevent invalid pointer dereference during get_link RCU pathwalk\n\n fuse:\n\n - Fix deadlock caused by uninitialized rings when using io_uring with\n fuse\n\n - Handle race condition when using io_uring with fuse to prevent NULL\n dereference\n\n libnetfs:\n\n - Ensure that invalidate_cache is only called if implemented\n\n - Fix collection of results during pause when collection is\n offloaded\n\n - Ensure rolling_buffer_load_from_ra() doesn\u0027t clear mark bits\n\n - Make netfs_unbuffered_read() return ssize_t rather than int\"\n\n* tag \u0027vfs-6.14-final.fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs:\n libfs: Fix duplicate directory entry in offset_dir_lookup\n fuse: fix possible deadlock if rings are never initialized\n netfs: Fix netfs_unbuffered_read() to return ssize_t rather than int\n netfs: Fix rolling_buffer_load_from_ra() to not clear mark bits\n netfs: Call `invalidate_cache` only if implemented\n netfs: Fix collection of results during pause when collection offloaded\n fuse: fix uring race condition for null dereference of fc\n afs: Fix afs_atcell_get_link() to check if ws_cell is unset first\n" }, { "commit": "7e512f5ad24458e2c930b5be5d96ddf9e176e05d", "tree": "41e5dcf385acf8b64c0adf0a93a156e689691525", "parents": [ "65a99264f5e5a2bcc8c905f7b2d633e8991672ac" ], "author": { "name": "Dhananjay Ugwekar", "email": "dhananjay.ugwekar@amd.com", "time": "Thu Mar 20 10:06:19 2025 +0000" }, "committer": { "name": "Ingo Molnar", "email": "mingo@kernel.org", "time": "Thu Mar 20 21:03:55 2025 +0100" }, "message": "perf/x86/rapl: Fix error handling in init_rapl_pmus()\n\nIf init_rapl_pmu() fails while allocating memory for \"rapl_pmu\" objects,\nwe miss freeing the \"rapl_pmus\" object in the error path. Fix that.\n\nFixes: 9b99d65c0bb4 (\"perf/x86/rapl: Move the pmu allocation out of CPU hotplug\")\nSigned-off-by: Dhananjay Ugwekar \u003cdhananjay.ugwekar@amd.com\u003e\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nLink: https://lore.kernel.org/r/20250320100617.4480-1-dhananjay.ugwekar@amd.com\n" }, { "commit": "f45f8f0ed4c6d3a9be27ff27347408e1c1bbb364", "tree": "326bea915eee005504ec31adebefc9738787a5ce", "parents": [ "5fc31936081919a8572a3d644f3fbb258038f337", "abab683b972cb99378e0a1426c8f9db835fa43b4" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 20 11:34:30 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 20 11:34:30 2025 -0700" }, "message": "Merge tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/virt/kvm/kvm\n\nPull kvm fix from Paolo Bonzini:\n \"A lone fix for a s390 regression. An earlier 6.14 commit stopped\n taking the pte lock for pages that are being converted to secure, but\n it was needed to avoid races.\n\n The patch was in development for a while and is finally ready, but I\n wish it was split into 3-4 commits at least\"\n\n* tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/virt/kvm/kvm:\n KVM: s390: pv: fix race when making a page secure\n" }, { "commit": "cc34d8330e036b6bffa88db9ea537bae6b03948f", "tree": "46b5282ac9aa17ff3ab674641c47ac63ff79c7d9", "parents": [ "bcb0fda3c2da9fe4721d3e73d80e778c038e7d27" ], "author": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Mar 20 12:25:12 2025 -0600" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Mar 20 12:27:27 2025 -0600" }, "message": "io_uring/net: don\u0027t clear REQ_F_NEED_CLEANUP unconditionally\n\nio_req_msg_cleanup() relies on the fact that io_netmsg_recycle() will\nalways fully recycle, but that may not be the case if the msg cache\nwas already full. To ensure that normal cleanup always gets run,\nlet io_netmsg_recycle() deal with clearing the relevant cleanup flags,\nas it knows exactly when that should be done.\n\nCc: stable@vger.kernel.org\nReported-by: David Wei \u003cdw@davidwei.uk\u003e\nFixes: 75191341785e (\"io_uring/net: add iovec recycling\")\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "50af7cab7520e46680cf4633bba6801443b75856", "tree": "e0fd7351536e0f7584d37d53f6d43a60dd24f709", "parents": [ "f5d4e81774c42d9c2ea3980e570f3330ff2ed5d2" ], "author": { "name": "Tomasz Rusinowicz", "email": "tomasz.rusinowicz@intel.com", "time": "Tue Feb 18 11:03:53 2025 +0100" }, "committer": { "name": "Thomas Hellström", "email": "thomas.hellstrom@linux.intel.com", "time": "Thu Mar 20 17:59:49 2025 +0100" }, "message": "drm/xe: Fix exporting xe buffers multiple times\n\nThe `struct ttm_resource-\u003eplacement` contains TTM_PL_FLAG_* flags, but\nit was incorrectly tested for XE_PL_* flags.\nThis caused xe_dma_buf_pin() to always fail when invoked for\nthe second time. Fix this by checking the `mem_type` field instead.\n\nFixes: 7764222d54b7 (\"drm/xe: Disallow pinning dma-bufs in VRAM\")\nCc: Thomas Hellström \u003cthomas.hellstrom@linux.intel.com\u003e\nCc: Rodrigo Vivi \u003crodrigo.vivi@intel.com\u003e\nCc: Lucas De Marchi \u003clucas.demarchi@intel.com\u003e\nCc: \"Thomas Hellström\" \u003cthomas.hellstrom@linux.intel.com\u003e\nCc: Michal Wajdeczko \u003cmichal.wajdeczko@intel.com\u003e\nCc: Matthew Brost \u003cmatthew.brost@intel.com\u003e\nCc: Matthew Auld \u003cmatthew.auld@intel.com\u003e\nCc: Nirmoy Das \u003cnirmoy.das@intel.com\u003e\nCc: Jani Nikula \u003cjani.nikula@intel.com\u003e\nCc: intel-xe@lists.freedesktop.org\nCc: \u003cstable@vger.kernel.org\u003e # v6.8+\nSigned-off-by: Tomasz Rusinowicz \u003ctomasz.rusinowicz@intel.com\u003e\nSigned-off-by: Jacek Lawrynowicz \u003cjacek.lawrynowicz@linux.intel.com\u003e\nReviewed-by: Matthew Brost \u003cmatthew.brost@intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20250218100353.2137964-1-jacek.lawrynowicz@linux.intel.com\nSigned-off-by: Thomas Hellström \u003cthomas.hellstrom@linux.intel.com\u003e\n(cherry picked from commit b96dabdba9b95f71ded50a1c094ee244408b2a8e)\nSigned-off-by: Thomas Hellström \u003cthomas.hellstrom@linux.intel.com\u003e\n" }, { "commit": "5fc31936081919a8572a3d644f3fbb258038f337", "tree": "207a9880c68449ef12050c5cc3179314d998a9d3", "parents": [ "80c4c25460849f441d35810555539aa3adc52929", "feaee98c6c505494e2188e5c644b881f5c81ee59" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 20 09:39:15 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 20 09:39:15 2025 -0700" }, "message": "Merge tag \u0027net-6.14-rc8\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net\n\nPull networking fixes from Paolo Abeni:\n \"Including fixes from can, bluetooth and ipsec.\n\n This contains a last minute revert of a recent GRE patch, mostly to\n allow me stating there are no known regressions outstanding.\n\n Current release - regressions:\n\n - revert \"gre: Fix IPv6 link-local address generation.\"\n\n - eth: ti: am65-cpsw: fix NAPI registration sequence\n\n Previous releases - regressions:\n\n - ipv6: fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().\n\n - mptcp: fix data stream corruption in the address announcement\n\n - bluetooth: fix connection regression between LE and non-LE adapters\n\n - can:\n - flexcan: only change CAN state when link up in system PM\n - ucan: fix out of bound read in strscpy() source\n\n Previous releases - always broken:\n\n - lwtunnel: fix reentry loops\n\n - ipv6: fix TCP GSO segmentation with NAT\n\n - xfrm: force software GSO only in tunnel mode\n\n - eth: ti: icssg-prueth: add lock to stats\n\n Misc:\n\n - add Andrea Mayer as a maintainer of SRv6\"\n\n* tag \u0027net-6.14-rc8\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net: (33 commits)\n MAINTAINERS: Add Andrea Mayer as a maintainer of SRv6\n Revert \"gre: Fix IPv6 link-local address generation.\"\n Revert \"selftests: Add IPv6 link-local address generation tests for GRE devices.\"\n net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES\n tools headers: Sync uapi/asm-generic/socket.h with the kernel sources\n mptcp: Fix data stream corruption in the address announcement\n selftests: net: test for lwtunnel dst ref loops\n net: ipv6: ioam6: fix lwtunnel_output() loop\n net: lwtunnel: fix recursion loops\n net: ti: icssg-prueth: Add lock to stats\n net: atm: fix use after free in lec_send()\n xsk: fix an integer overflow in xp_create_and_assign_umem()\n net: stmmac: dwc-qos-eth: use devm_kzalloc() for AXI data\n selftests: drv-net: use defer in the ping test\n phy: fix xa_alloc_cyclic() error handling\n dpll: fix xa_alloc_cyclic() error handling\n devlink: fix xa_alloc_cyclic() error handling\n ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().\n ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().\n net: ipv6: fix TCP GSO segmentation with NAT\n ...\n" }, { "commit": "80c4c25460849f441d35810555539aa3adc52929", "tree": "40bde025e8a75e82dba510e7d4d829a7fea9d73e", "parents": [ "05b880b1dc66641222e8e189844a3cfd229744b6", "6b5e41a8b51fce520bb09bd651a29ef495e990de" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 20 09:25:25 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 20 09:25:25 2025 -0700" }, "message": "Merge tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma\n\nPull rdma fixes from Jason Gunthorpe:\n \"Collected driver fixes from the last few weeks, I was surprised how\n significant many of them seemed to be.\n\n - Fix rdma-core test failures due to wrong startup ordering in rxe\n\n - Don\u0027t crash in bnxt_re if the FW supports more than 64k QPs\n\n - Fix wrong QP table indexing math in bnxt_re\n\n - Calculate the max SRQs for userspace properly in bnxt_re\n\n - Don\u0027t try to do math on errno for mlx5\u0027s rate calculation\n\n - Properly allow userspace to control the VLAN in the QP state during\n INIT-\u003eRTR for bnxt_re\n\n - 6 bug fixes for HNS:\n - Soft lockup when processing huge MRs, add a cond_resched()\n - Fix missed error unwind for doorbell allocation\n - Prevent bad send queue parameters from userspace\n - Wrong error unwind in qp creation\n - Missed xa_destroy during driver shutdown\n - Fix reporting to userspace of max_sge_rd, hns doesn\u0027t have a\n read/write difference\"\n\n* tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma:\n RDMA/hns: Fix wrong value of max_sge_rd\n RDMA/hns: Fix missing xa_destroy()\n RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()\n RDMA/hns: Fix invalid sq params not being blocked\n RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()\n RDMA/hns: Fix soft lockup during bt pages loop\n RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path\n RDMA/mlx5: Handle errors returned from mlx5r_ib_rate()\n RDMA/bnxt_re: Fix reporting maximum SRQs on P7 chips\n RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx\n RDMA/bnxt_re: Fix allocation of QP table\n RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests\n" }, { "commit": "05b880b1dc66641222e8e189844a3cfd229744b6", "tree": "56c65c75ee42337f2bee21c913e900b39aaf8ff3", "parents": [ "a4f586a9fc9b295ad1eb5c914ef48ff3c43bb8e5", "723ef0e20dbb2aa1b5406d2bb75374fc48187daa" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 20 09:22:11 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 20 09:22:11 2025 -0700" }, "message": "Merge tag \u0027mmc-v6.14-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/mmc\n\nPull MMC host fixes from Ulf Hansson:\n\n - sdhci-brcmstb: Fix CQE suspend/resume support\n\n - atmel-mci: Add a missing clk_disable_unprepare() in -\u003eprobe()\n\n* tag \u0027mmc-v6.14-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/mmc:\n mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops\n mmc: atmel-mci: Add missing clk_disable_unprepare()\n" }, { "commit": "a4f586a9fc9b295ad1eb5c914ef48ff3c43bb8e5", "tree": "07f5a38662cb3aae3a1d47ed66640dcd11d1cf21", "parents": [ "a7f2e10ecd8f18b83951b0bab47ddaf48f93bf47", "11092db5b57377ac99e6339cfd16ca35ef011f3c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 20 09:18:38 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 20 09:18:38 2025 -0700" }, "message": "Merge tag \u0027efi-fixes-for-v6.14-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/efi/efi\n\nPull EFI fixes from Ard Biesheuvel:\n \"Here\u0027s a final batch of EFI fixes for v6.14.\n\n The efivarfs ones are fixes for changes that were made this cycle.\n James\u0027s fix is somewhat of a band-aid, but it was blessed by the VFS\n folks, who are working with James to come up with something better for\n the next cycle.\n\n - Avoid physical address 0x0 for random page allocations\n\n - Add correct lockdep annotation when traversing efivarfs on resume\n\n - Avoid NULL mount in kernel_file_open() when traversing efivarfs on\n resume\"\n\n* tag \u0027efi-fixes-for-v6.14-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/efi/efi:\n efivarfs: fix NULL dereference on resume\n efivarfs: use I_MUTEX_CHILD nested lock to traverse variables on resume\n efi/libstub: Avoid physical address 0x0 when doing random allocation\n" }, { "commit": "feaee98c6c505494e2188e5c644b881f5c81ee59", "tree": "3ef4f6619e072577194edd69e13e95d43a41272b", "parents": [ "8417db0be5bb98255f69a14ca8140ad1566f8109" ], "author": { "name": "David Ahern", "email": "dsahern@kernel.org", "time": "Wed Mar 12 10:22:12 2025 +0100" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Mar 20 15:49:00 2025 +0100" }, "message": "MAINTAINERS: Add Andrea Mayer as a maintainer of SRv6\n\nAndrea has made significant contributions to SRv6 support in Linux.\nAcknowledge the work and on-going interest in Srv6 support with a\nmaintainers entry for these files so hopefully he is included\non patches going forward.\n\nSigned-off-by: David Ahern \u003cdsahern@kernel.org\u003e\nAcked-by: Andrea Mayer \u003candrea.mayer@uniroma2.it\u003e\nLink: https://patch.msgid.link/20250312092212.46299-1-dsahern@kernel.org\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "8417db0be5bb98255f69a14ca8140ad1566f8109", "tree": "33be60d2e7be957e6d4b05f8fdaef2875cb0f3a3", "parents": [ "84761651dd46c5fac3a8361736894910abddcbc3", "fc486c2d060f67d672ddad81724f7c8a4d329570" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Mar 20 15:46:19 2025 +0100" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Mar 20 15:46:20 2025 +0100" }, "message": "Merge branch \u0027gre-revert-ipv6-link-local-address-fix\u0027\n\nGuillaume Nault says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\ngre: Revert IPv6 link-local address fix.\n\nFollowing Paolo\u0027s suggestion, let\u0027s revert the IPv6 link-local address\ngeneration fix for GRE devices. The patch introduced regressions in the\nupstream CI, which are still under investigation.\n\nStart by reverting the kselftest that depend on that fix (patch 1), then\nrevert the kernel code itself (patch 2).\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/cover.1742418408.git.gnault@redhat.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "fc486c2d060f67d672ddad81724f7c8a4d329570", "tree": "33be60d2e7be957e6d4b05f8fdaef2875cb0f3a3", "parents": [ "355d940f4d5ae56ed082a455ce2cc737c7e898e8" ], "author": { "name": "Guillaume Nault", "email": "gnault@redhat.com", "time": "Wed Mar 19 22:26:50 2025 +0100" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Mar 20 15:46:16 2025 +0100" }, "message": "Revert \"gre: Fix IPv6 link-local address generation.\"\n\nThis reverts commit 183185a18ff96751db52a46ccf93fff3a1f42815.\n\nThis patch broke net/forwarding/ip6gre_custom_multipath_hash.sh in some\ncircumstances (https://lore.kernel.org/netdev/Z9RIyKZDNoka53EO@mini-arch/).\nLet\u0027s revert it while the problem is being investigated.\n\nFixes: 183185a18ff9 (\"gre: Fix IPv6 link-local address generation.\")\nSigned-off-by: Guillaume Nault \u003cgnault@redhat.com\u003e\nLink: https://patch.msgid.link/8b1ce738eb15dd841aab9ef888640cab4f6ccfea.1742418408.git.gnault@redhat.com\nAcked-by: Stanislav Fomichev \u003csdf@fomichev.me\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "355d940f4d5ae56ed082a455ce2cc737c7e898e8", "tree": "843f268508b09cb34dc4955069e92a71d1f58f44", "parents": [ "84761651dd46c5fac3a8361736894910abddcbc3" ], "author": { "name": "Guillaume Nault", "email": "gnault@redhat.com", "time": "Wed Mar 19 22:26:45 2025 +0100" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Mar 20 15:46:16 2025 +0100" }, "message": "Revert \"selftests: Add IPv6 link-local address generation tests for GRE devices.\"\n\nThis reverts commit 6f50175ccad4278ed3a9394c00b797b75441bd6e.\n\nCommit 183185a18ff9 (\"gre: Fix IPv6 link-local address generation.\") is\ngoing to be reverted. So let\u0027s revert the corresponding kselftest\nfirst.\n\nSigned-off-by: Guillaume Nault \u003cgnault@redhat.com\u003e\nLink: https://patch.msgid.link/259a9e98f7f1be7ce02b53d0b4afb7c18a8ff747.1742418408.git.gnault@redhat.com\nAcked-by: Stanislav Fomichev \u003csdf@fomichev.me\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "84761651dd46c5fac3a8361736894910abddcbc3", "tree": "cfbb20ac56e72c13a498dccadd7c9d2a597b0810", "parents": [ "2fdf0880caa0e1e708b5e24848a2d27830c0d7ee", "0aae2867aa6067f73d066bc98385e23c8454a1d7" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Mar 20 15:39:05 2025 +0100" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Mar 20 15:39:05 2025 +0100" }, "message": "Merge tag \u0027ipsec-2025-03-19\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec\n\nSteffen Klassert says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\npull request (net): ipsec 2025-03-19\n\n1) Fix tunnel mode TX datapath in packet offload mode\n by directly putting it to the xmit path.\n From Alexandre Cassen.\n\n2) Force software GSO only in tunnel mode in favor\n of potential HW GSO. From Cosmin Ratiu.\n\nipsec-2025-03-19\n\n* tag \u0027ipsec-2025-03-19\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec:\n xfrm_output: Force software GSO only in tunnel mode\n xfrm: fix tunnel mode TX datapath in packet offload mode\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20250319065513.987135-1-steffen.klassert@secunet.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "2fdf0880caa0e1e708b5e24848a2d27830c0d7ee", "tree": "db52e231e075c3163b0617dceea387086a47cd1b", "parents": [ "90a7138619a0c55e2aefaad27b12ffc2ddbeed78", "548b0c5de7619ef53bbde5590700693f2f6d2a56" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Mar 20 15:29:59 2025 +0100" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Mar 20 15:30:00 2025 +0100" }, "message": "Merge tag \u0027batadv-net-pullrequest-20250318\u0027 of git://git.open-mesh.org/linux-merge\n\nSimon Wunderlich says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nHere is batman-adv bugfix:\n\n- Ignore own maximum aggregation size during RX, Sven Eckelmann\n\n* tag \u0027batadv-net-pullrequest-20250318\u0027 of git://git.open-mesh.org/linux-merge:\n batman-adv: Ignore own maximum aggregation size during RX\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20250318150035.35356-1-sw@simonwunderlich.de\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "90a7138619a0c55e2aefaad27b12ffc2ddbeed78", "tree": "7d52af3a075c30d6ab598887f2a4e1adefa0d262", "parents": [ "23b763302ce068d7c97441e75434dc9f903adc7d" ], "author": { "name": "Lin Ma", "email": "linma@zju.edu.cn", "time": "Sun Mar 16 00:51:13 2025 +0800" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Mar 20 15:23:29 2025 +0100" }, "message": "net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES\n\nPrevious commit 8b5c171bb3dc (\"neigh: new unresolved queue limits\")\nintroduces new netlink attribute NDTPA_QUEUE_LENBYTES to represent\napproximative value for deprecated QUEUE_LEN. However, it forgot to add\nthe associated nla_policy in nl_ntbl_parm_policy array. Fix it with one\nsimple NLA_U32 type policy.\n\nFixes: 8b5c171bb3dc (\"neigh: new unresolved queue limits\")\nSigned-off-by: Lin Ma \u003clinma@zju.edu.cn\u003e\nLink: https://patch.msgid.link/20250315165113.37600-1-linma@zju.edu.cn\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "23b763302ce068d7c97441e75434dc9f903adc7d", "tree": "45de7826d33dd0e9e943ba6c7c2ebe5aee128087", "parents": [ "2c1f97a52cb827a5f2768e67a9dddffae1ed47ab" ], "author": { "name": "Alexander Mikhalitsyn", "email": "aleksandr.mikhalitsyn@canonical.com", "time": "Fri Mar 14 22:41:54 2025 +0100" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Mar 20 15:14:46 2025 +0100" }, "message": "tools headers: Sync uapi/asm-generic/socket.h with the kernel sources\n\nThis also fixes a wrong definitions for SCM_TS_OPT_ID \u0026 SO_RCVPRIORITY.\n\nAccidentally found while working on another patchset.\n\nCc: linux-kernel@vger.kernel.org\nCc: netdev@vger.kernel.org\nCc: Eric Dumazet \u003cedumazet@google.com\u003e\nCc: Jakub Kicinski \u003ckuba@kernel.org\u003e\nCc: Vadim Fedorenko \u003cvadim.fedorenko@linux.dev\u003e\nCc: Willem de Bruijn \u003cwillemb@google.com\u003e\nCc: Jason Xing \u003ckerneljasonxing@gmail.com\u003e\nCc: Anna Emese Nyiri \u003cannaemesenyiri@gmail.com\u003e\nCc: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nCc: Paolo Abeni \u003cpabeni@redhat.com\u003e\nFixes: a89568e9be75 (\"selftests: txtimestamp: add SCM_TS_OPT_ID test\")\nFixes: e45469e594b2 (\"sock: Introduce SO_RCVPRIORITY socket option\")\nLink: https://lore.kernel.org/netdev/20250314195257.34854-1-kuniyu@amazon.com/\nReviewed-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nSigned-off-by: Alexander Mikhalitsyn \u003caleksandr.mikhalitsyn@canonical.com\u003e\nReviewed-by: Willem de Bruijn \u003cwillemb@google.com\u003e\nReviewed-by: Jason Xing \u003ckerneljasonxing@gmail.com\u003e\nLink: https://patch.msgid.link/20250314214155.16046-1-aleksandr.mikhalitsyn@canonical.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "2c1f97a52cb827a5f2768e67a9dddffae1ed47ab", "tree": "a045b60c84954b0a8ffb630f4b008d23a5123356", "parents": [ "f31b6fbfe8c7f1da319b5a51a08ed730bf7e7fc2" ], "author": { "name": "Arthur Mongodin", "email": "amongodin@randorisec.fr", "time": "Fri Mar 14 21:11:31 2025 +0100" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Mar 20 15:12:22 2025 +0100" }, "message": "mptcp: Fix data stream corruption in the address announcement\n\nBecause of the size restriction in the TCP options space, the MPTCP\nADD_ADDR option is exclusive and cannot be sent with other MPTCP ones.\nFor this reason, in the linked mptcp_out_options structure, group of\nfields linked to different options are part of the same union.\n\nThere is a case where the mptcp_pm_add_addr_signal() function can modify\nopts-\u003eaddr, but not ended up sending an ADD_ADDR. Later on, back in\nmptcp_established_options, other options will be sent, but with\nunexpected data written in other fields due to the union, e.g. in\nopts-\u003eext_copy. This could lead to a data stream corruption in the next\npacket.\n\nUsing an intermediate variable, prevents from corrupting previously\nestablished DSS option. The assignment of the ADD_ADDR option\nparameters is now done once we are sure this ADD_ADDR option can be set\nin the packet, e.g. after having dropped other suboptions.\n\nFixes: 1bff1e43a30e (\"mptcp: optimize out option generation\")\nCc: stable@vger.kernel.org\nSuggested-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\nSigned-off-by: Arthur Mongodin \u003camongodin@randorisec.fr\u003e\nReviewed-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\n[ Matt: the commit message has been updated: long lines splits and some\n clarifications. ]\nSigned-off-by: Matthieu Baerts (NGI0) \u003cmatttbe@kernel.org\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/20250314-net-mptcp-fix-data-stream-corr-sockopt-v1-1-122dbb249db3@kernel.org\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "6ea39cc388899a121b5b19b6968692e9460ee4a3", "tree": "5917ac8d5ca75e3d9039acb346b174f94eeef952", "parents": [ "4701f33a10702d5fc577c32434eb62adde0a1ae1" ], "author": { "name": "Yang Yingliang", "email": "yangyingliang@huawei.com", "time": "Thu Nov 03 20:11:46 2022 +0800" }, "committer": { "name": "Andi Shyti", "email": "andi.shyti@kernel.org", "time": "Thu Mar 20 14:37:47 2025 +0100" }, "message": "i2c: amd-mp2: drop free_irq() of devm_request_irq() allocated irq\n\nirq allocated with devm_request_irq() will be freed in devm_irq_release(),\nusing free_irq() in -\u003eremove() will causes a dangling pointer, and a\nsubsequent double free. So remove the free_irq() in the error path and\nremove path.\n\nFixes: 969864efae78 (\"i2c: amd-mp2: use msix/msi if the hardware supports\")\nSigned-off-by: Yang Yingliang \u003cyangyingliang@huawei.com\u003e\nAcked-by: Shyam Sundar S K \u003cShyam-sundar.S-k@amd.com\u003e\nLink: https://lore.kernel.org/r/20221103121146.99836-1-yangyingliang@huawei.com\nSigned-off-by: Andi Shyti \u003candi.shyti@kernel.org\u003e\n" }, { "commit": "f70681e9e6066ab7b102e6b46a336a8ed67812ae", "tree": "7db3bb105d979087e18e02996dddb59ffc0d6eed", "parents": [ "d55011469b41d9da6c06cb1c4a4da7a87fe155bc" ], "author": { "name": "Yongjian Sun", "email": "sunyongjian1@huawei.com", "time": "Thu Mar 20 11:44:17 2025 +0800" }, "committer": { "name": "Christian Brauner", "email": "brauner@kernel.org", "time": "Thu Mar 20 14:28:18 2025 +0100" }, "message": "libfs: Fix duplicate directory entry in offset_dir_lookup\n\nThere is an issue in the kernel:\n\nIn tmpfs, when using the \"ls\" command to list the contents\nof a directory with a large number of files, glibc performs\nthe getdents call in multiple rounds. If a concurrent unlink\noccurs between these getdents calls, it may lead to duplicate\ndirectory entries in the ls output. One possible reproduction\nscenario is as follows:\n\nCreate 1026 files and execute ls and rm concurrently:\n\nfor i in {1..1026}; do\n echo \"This is file $i\" \u003e /tmp/dir/file$i\ndone\n\nls /tmp/dir\t\t\t\trm /tmp/dir/file4\n\t-\u003egetdents(file1026-file5)\n\t\t\t\t\t\t-\u003eunlink(file4)\n\n\t-\u003egetdents(file5,file3,file2,file1)\n\nIt is expected that the second getdents call to return file3\nthrough file1, but instead it returns an extra file5.\n\nThe root cause of this problem is in the offset_dir_lookup\nfunction. It uses mas_find to determine the starting position\nfor the current getdents call. Since mas_find locates the first\nposition that is greater than or equal to mas-\u003eindex, when file4\nis deleted, it ends up returning file5.\n\nIt can be fixed by replacing mas_find with mas_find_rev, which\nfinds the first position that is less than or equal to mas-\u003eindex.\n\nFixes: b9b588f22a0c (\"libfs: Use d_children list to iterate simple_offset directories\")\nSigned-off-by: Yongjian Sun \u003csunyongjian1@huawei.com\u003e\nLink: https://lore.kernel.org/r/20250320034417.555810-1-sunyongjian@huaweicloud.com\nReviewed-by: Chuck Lever \u003cchuck.lever@oracle.com\u003e\nSigned-off-by: Christian Brauner \u003cbrauner@kernel.org\u003e\n" }, { "commit": "f31b6fbfe8c7f1da319b5a51a08ed730bf7e7fc2", "tree": "601a74870b5582f60ed6cb23a7980fa33facb172", "parents": [ "47a9b5e52abd2b717dfc8b9460589f89936d93cf", "3ed61b8938c66680e13a1d1929afb9b145c26a86" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Mar 20 11:25:55 2025 +0100" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Mar 20 11:25:56 2025 +0100" }, "message": "Merge branch \u0027net-fix-lwtunnel-reentry-loops\u0027\n\nJustin Iurman says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nnet: fix lwtunnel reentry loops\n\nWhen the destination is the same after the transformation, we enter a\nlwtunnel loop. This is true for most of lwt users: ioam6, rpl, seg6,\nseg6_local, ila_lwt, and lwt_bpf. It can happen in their input() and\noutput() handlers respectively, where either dst_input() or dst_output()\nis called at the end. It can also happen in xmit() handlers.\n\nHere is an example for rpl_input():\n\ndump_stack_lvl+0x60/0x80\nrpl_input+0x9d/0x320\nlwtunnel_input+0x64/0xa0\nlwtunnel_input+0x64/0xa0\nlwtunnel_input+0x64/0xa0\nlwtunnel_input+0x64/0xa0\nlwtunnel_input+0x64/0xa0\n[...]\nlwtunnel_input+0x64/0xa0\nlwtunnel_input+0x64/0xa0\nlwtunnel_input+0x64/0xa0\nlwtunnel_input+0x64/0xa0\nlwtunnel_input+0x64/0xa0\nip6_sublist_rcv_finish+0x85/0x90\nip6_sublist_rcv+0x236/0x2f0\n\n... until rpl_do_srh() fails, which means skb_cow_head() failed.\n\nThis series provides a fix at the core level of lwtunnel to catch such\nloops when they\u0027re not caught by the respective lwtunnel users, and\nhandle the loop case in ioam6 which is one of the users. This series\nalso comes with a new selftest to detect some dst cache reference loops\nin lwtunnel users.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20250314120048.12569-1-justin.iurman@uliege.be\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "3ed61b8938c66680e13a1d1929afb9b145c26a86", "tree": "601a74870b5582f60ed6cb23a7980fa33facb172", "parents": [ "3e7a60b368eadf6c30a4a79dea1eb8f88b6d620d" ], "author": { "name": "Justin Iurman", "email": "justin.iurman@uliege.be", "time": "Fri Mar 14 13:00:48 2025 +0100" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Mar 20 11:25:52 2025 +0100" }, "message": "selftests: net: test for lwtunnel dst ref loops\n\nAs recently specified by commit 0ea09cbf8350 (\"docs: netdev: add a note\non selftest posting\") in net-next, the selftest is therefore shipped in\nthis series. However, this selftest does not really test this series. It\nneeds this series to avoid crashing the kernel. What it really tests,\nthanks to kmemleak, is what was fixed by the following commits:\n- commit c71a192976de (\"net: ipv6: fix dst refleaks in rpl, seg6 and\nioam6 lwtunnels\")\n- commit 92191dd10730 (\"net: ipv6: fix dst ref loops in rpl, seg6 and\nioam6 lwtunnels\")\n- commit c64a0727f9b1 (\"net: ipv6: fix dst ref loop on input in seg6\nlwt\")\n- commit 13e55fbaec17 (\"net: ipv6: fix dst ref loop on input in rpl\nlwt\")\n- commit 0e7633d7b95b (\"net: ipv6: fix dst ref loop in ila lwtunnel\")\n- commit 5da15a9c11c1 (\"net: ipv6: fix missing dst ref drop in ila\nlwtunnel\")\n\nSigned-off-by: Justin Iurman \u003cjustin.iurman@uliege.be\u003e\nLink: https://patch.msgid.link/20250314120048.12569-4-justin.iurman@uliege.be\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "3e7a60b368eadf6c30a4a79dea1eb8f88b6d620d", "tree": "79bb670fe75071a04e97f2bbd828cfb541b56cba", "parents": [ "986ffb3a57c5650fb8bf6d59a8f0f07046abfeb6" ], "author": { "name": "Justin Iurman", "email": "justin.iurman@uliege.be", "time": "Fri Mar 14 13:00:47 2025 +0100" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Mar 20 11:25:52 2025 +0100" }, "message": "net: ipv6: ioam6: fix lwtunnel_output() loop\n\nFix the lwtunnel_output() reentry loop in ioam6_iptunnel when the\ndestination is the same after transformation. Note that a check on the\ndestination address was already performed, but it was not enough. This\nis the example of a lwtunnel user taking care of loops without relying\nonly on the last resort detection offered by lwtunnel.\n\nFixes: 8cb3bf8bff3c (\"ipv6: ioam: Add support for the ip6ip6 encapsulation\")\nSigned-off-by: Justin Iurman \u003cjustin.iurman@uliege.be\u003e\nLink: https://patch.msgid.link/20250314120048.12569-3-justin.iurman@uliege.be\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "986ffb3a57c5650fb8bf6d59a8f0f07046abfeb6", "tree": "58d9ecee81b7b5bf17e8e89087a308179e505186", "parents": [ "47a9b5e52abd2b717dfc8b9460589f89936d93cf" ], "author": { "name": "Justin Iurman", "email": "justin.iurman@uliege.be", "time": "Fri Mar 14 13:00:46 2025 +0100" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Mar 20 11:25:52 2025 +0100" }, "message": "net: lwtunnel: fix recursion loops\n\nThis patch acts as a parachute, catch all solution, by detecting\nrecursion loops in lwtunnel users and taking care of them (e.g., a loop\nbetween routes, a loop within the same route, etc). In general, such\nloops are the consequence of pathological configurations. Each lwtunnel\nuser is still free to catch such loops early and do whatever they want\nwith them. It will be the case in a separate patch for, e.g., seg6 and\nseg6_local, in order to provide drop reasons and update statistics.\nAnother example of a lwtunnel user taking care of loops is ioam6, which\nhas valid use cases that include loops (e.g., inline mode), and which is\naddressed by the next patch in this series. Overall, this patch acts as\na last resort to catch loops and drop packets, since we don\u0027t want to\nleak something unintentionally because of a pathological configuration\nin lwtunnels.\n\nThe solution in this patch reuses dev_xmit_recursion(),\ndev_xmit_recursion_inc(), and dev_xmit_recursion_dec(), which seems fine\nconsidering the context.\n\nCloses: https://lore.kernel.org/netdev/2bc9e2079e864a9290561894d2a602d6@akamai.com/\nCloses: https://lore.kernel.org/netdev/Z7NKYMY7fJT5cYWu@shredder/\nFixes: ffce41962ef6 (\"lwtunnel: support dst output redirect function\")\nFixes: 2536862311d2 (\"lwt: Add support to redirect dst.input\")\nFixes: 14972cbd34ff (\"net: lwtunnel: Handle fragmentation\")\nSigned-off-by: Justin Iurman \u003cjustin.iurman@uliege.be\u003e\nLink: https://patch.msgid.link/20250314120048.12569-2-justin.iurman@uliege.be\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "47a9b5e52abd2b717dfc8b9460589f89936d93cf", "tree": "43d143c8033e99b81d78556b087636902f15086c", "parents": [ "f3009d0d6ab78053117f8857b921a8237f4d17b3" ], "author": { "name": "MD Danish Anwar", "email": "danishanwar@ti.com", "time": "Fri Mar 14 15:57:21 2025 +0530" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Mar 20 11:11:14 2025 +0100" }, "message": "net: ti: icssg-prueth: Add lock to stats\n\nCurrently the API emac_update_hardware_stats() reads different ICSSG\nstats without any lock protection.\n\nThis API gets called by .ndo_get_stats64() which is only under RCU\nprotection and nothing else. Add lock to this API so that the reading of\nstatistics happens during lock.\n\nFixes: c1e10d5dc7a1 (\"net: ti: icssg-prueth: Add ICSSG Stats\")\nSigned-off-by: MD Danish Anwar \u003cdanishanwar@ti.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/20250314102721.1394366-1-danishanwar@ti.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "f3009d0d6ab78053117f8857b921a8237f4d17b3", "tree": "5da7071af45a6b53f57c77d9f4efb98551c20afd", "parents": [ "559847f56769037e5b2e0474d3dbff985b98083d" ], "author": { "name": "Dan Carpenter", "email": "dan.carpenter@linaro.org", "time": "Fri Mar 14 13:10:57 2025 +0300" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Mar 20 10:45:29 2025 +0100" }, "message": "net: atm: fix use after free in lec_send()\n\nThe -\u003esend() operation frees skb so save the length before calling\n-\u003esend() to avoid a use after free.\n\nFixes: 1da177e4c3f4 (\"Linux-2.6.12-rc2\")\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@linaro.org\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/c751531d-4af4-42fe-affe-6104b34b791d@stanley.mountain\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "559847f56769037e5b2e0474d3dbff985b98083d", "tree": "37e47070cb15e8a4719bb928229dab6c4d0bea47", "parents": [ "a0aff75e1553913bfbff10ebb372c7dc0971d2dd" ], "author": { "name": "Gavrilov Ilia", "email": "Ilia.Gavrilov@infotecs.ru", "time": "Thu Mar 13 08:50:08 2025 +0000" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Wed Mar 19 22:57:04 2025 +0100" }, "message": "xsk: fix an integer overflow in xp_create_and_assign_umem()\n\nSince the i and pool-\u003echunk_size variables are of type \u0027u32\u0027,\ntheir product can wrap around and then be cast to \u0027u64\u0027.\nThis can lead to two different XDP buffers pointing to the same\nmemory area.\n\nFound by InfoTeCS on behalf of Linux Verification Center\n(linuxtesting.org) with SVACE.\n\nFixes: 94033cd8e73b (\"xsk: Optimize for aligned case\")\nCc: stable@vger.kernel.org\nSigned-off-by: Ilia Gavrilov \u003cIlia.Gavrilov@infotecs.ru\u003e\nLink: https://patch.msgid.link/20250313085007.3116044-1-Ilia.Gavrilov@infotecs.ru\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "a0aff75e1553913bfbff10ebb372c7dc0971d2dd", "tree": "54bc14c92f2b2bae33ce61ca7306c874ca7cb423", "parents": [ "c9cb135bc604ad6e457e06c19e0857c9cd0eef7f", "f6685a96c8c8a07e260e39bac86d4163cfb38a4d" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Wed Mar 19 19:44:05 2025 +0100" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Wed Mar 19 19:44:05 2025 +0100" }, "message": "Merge tag \u0027for-net-2025-03-14\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth\n\nLuiz Augusto von Dentz says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nbluetooth pull request for net:\n\n - hci_event: Fix connection regression between LE and non-LE adapters\n - Fix error code in chan_alloc_skb_cb()\n\n* tag \u0027for-net-2025-03-14\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth:\n Bluetooth: hci_event: Fix connection regression between LE and non-LE adapters\n Bluetooth: Fix error code in chan_alloc_skb_cb()\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20250314163847.110069-1-luiz.dentz@gmail.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "a7f2e10ecd8f18b83951b0bab47ddaf48f93bf47", "tree": "92d359cf44dd1f54c17e44819c6618602f889f85", "parents": [ "281e239698357d60e1e2acd9eef1308c2ae2d73f", "815f80ad20b63830949a77c816e35395d5d55144" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Mar 19 11:12:18 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Mar 19 11:12:18 2025 -0700" }, "message": "Merge tag \u0027hwmon-fixes-for-v6.14-rc8/6.14\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging\n\nPull hwmon fixes from Guenter Roeck:\n\n - Fix an entry in MAINTAINERS to avoid sending hwmon review requests to\n the i2c mailing list\n\n - Fix an out-of-bounds access in nct6775 driver\n\n* tag \u0027hwmon-fixes-for-v6.14-rc8/6.14\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging:\n hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}\n MAINTAINERS: correct list and scope of LTC4286 HARDWARE MONITOR\n" }, { "commit": "c9cb135bc604ad6e457e06c19e0857c9cd0eef7f", "tree": "e0a5d3cd420cd4a8d20872bfd2106534865e4c8f", "parents": [ "acf10a8c0b3a36d5ff35f91585e9755ea0b62ac3" ], "author": { "name": "Russell King (Oracle)", "email": "rmk+kernel@armlinux.org.uk", "time": "Wed Mar 12 19:43:09 2025 +0000" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Wed Mar 19 19:08:29 2025 +0100" }, "message": "net: stmmac: dwc-qos-eth: use devm_kzalloc() for AXI data\n\nEverywhere else in the driver uses devm_kzalloc() when allocating the\nAXI data, so there is no kfree() of this structure. However,\ndwc-qos-eth uses kzalloc(), which leads to this memory being leaked.\nSwitch to use devm_kzalloc().\n\nFixes: d8256121a91a (\"stmmac: adding new glue driver dwmac-dwc-qos-eth\")\nSigned-off-by: Russell King (Oracle) \u003crmk+kernel@armlinux.org.uk\u003e\nReviewed-by: Andrew Lunn \u003candrew@lunn.ch\u003e\nLink: https://patch.msgid.link/E1tsRyv-0064nU-O9@rmk-PC.armlinux.org.uk\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "cb83f4b965a66d85e9a03621ef3b22c044f4a033", "tree": "af34bad91e7b574dd665ce1d1bded22f05d47602", "parents": [ "67d15c7aa0864dfd82325c7e7e7d8548b5224c7b" ], "author": { "name": "Jason Gunthorpe", "email": "jgg@nvidia.com", "time": "Tue Feb 04 15:18:19 2025 -0400" }, "committer": { "name": "Thierry Reding", "email": "treding@nvidia.com", "time": "Wed Mar 19 19:05:40 2025 +0100" }, "message": "gpu: host1x: Do not assume that a NULL domain means no DMA IOMMU\n\nPreviously with tegra-smmu, even with CONFIG_IOMMU_DMA, the default domain\ncould have been left as NULL. The NULL domain is specially recognized by\nhost1x_iommu_attach() as meaning it is not the DMA domain and\nshould be replaced with the special shared domain.\n\nThis happened prior to the below commit because tegra-smmu was using the\nNULL domain to mean IDENTITY.\n\nNow that the domain is properly labled the test in DRM doesn\u0027t see NULL.\nCheck for IDENTITY as well to enable the special domains.\n\nThis is the same issue and basic fix as seen in\ncommit fae6e669cdc5 (\"drm/tegra: Do not assume that a NULL domain means no\nDMA IOMMU\").\n\nFixes: c8cc2655cc6c (\"iommu/tegra-smmu: Implement an IDENTITY domain\")\nReported-by: Diogo Ivo \u003cdiogo.ivo@tecnico.ulisboa.pt\u003e\nCloses: https://lore.kernel.org/all/c6a6f114-3acd-4d56-a13b-b88978e927dc@tecnico.ulisboa.pt/\nTested-by: Diogo Ivo \u003cdiogo.ivo@tecnico.ulisboa.pt\u003e\nSigned-off-by: Jason Gunthorpe \u003cjgg@nvidia.com\u003e\nSigned-off-by: Thierry Reding \u003ctreding@nvidia.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/0-v1-10dcc8ce3869+3a7-host1x_identity_jgg@nvidia.com\n" }, { "commit": "acf10a8c0b3a36d5ff35f91585e9755ea0b62ac3", "tree": "6dfe321d0666a5aef0424818ef84b0d221e2014a", "parents": [ "d9c743b6990b1ee3925f3ced1844cafa955bacb0" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Mar 12 14:10:40 2025 +0100" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Wed Mar 19 18:21:13 2025 +0100" }, "message": "selftests: drv-net: use defer in the ping test\n\nMake sure the test cleans up after itself. The XDP off statements\nat the end of the test may not be reached.\n\nFixes: 75cc19c8ff89 (\"selftests: drv-net: add xdp cases for ping.py\")\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/20250312131040.660386-1-kuba@kernel.org\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "281e239698357d60e1e2acd9eef1308c2ae2d73f", "tree": "a82d9ed82fdafa94cf6814dd6ee460d978a322a9", "parents": [ "81e4f8d68c66da301bb881862735bd74c6241a19", "f2aac4c73c9945cce156fd58a9a2f31f2c8a90c7" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Mar 19 07:31:43 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Mar 19 07:31:43 2025 -0700" }, "message": "Merge tag \u0027ata-6.14-final\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/libata/linux\n\nPull ata fix from Niklas Cassel:\n\n - Fix a regression on ATI AHCI controllers, where certain Samsung\n drives fails to be detected on a warm boot when LPM is enabled.\n\n LPM on ATI AHCI works fine with other drives. Likewise, the\n Samsung drives works fine with LPM with other AHI controllers.\n\n Thus, just like the weirdo ATA_QUIRK_NO_NCQ_ON_ATI quirk, add a\n new ATA_QUIRK_NO_LPM_ON_ATI quirk to disable LPM only on ATI\n AHCI controllers.\n\n* tag \u0027ata-6.14-final\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/libata/linux:\n ata: libata-core: Add ATA_QUIRK_NO_LPM_ON_ATI for certain Samsung SSDs\n" }, { "commit": "abab683b972cb99378e0a1426c8f9db835fa43b4", "tree": "269b249de0ed80beb7ab5989409028218bb3f720", "parents": [ "4701f33a10702d5fc577c32434eb62adde0a1ae1", "d8dfda5af0be6e48178b6f4b46c6af30b06335b2" ], "author": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Wed Mar 19 09:01:53 2025 -0400" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Wed Mar 19 09:01:53 2025 -0400" }, "message": "Merge tag \u0027kvm-s390-master-6.14-1\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/kvms390/linux into HEAD\n\nHolding the pte lock for the page that is being converted to secure is\nneeded to avoid races. A previous commit removed the locking, which\ncaused issues. Fix by locking the pte again.\n" }, { "commit": "d55011469b41d9da6c06cb1c4a4da7a87fe155bc", "tree": "36778d40dccf1051aa1b88f4a0683b537ddd659c", "parents": [ "613218fc74b32095152275fc11d5ab8e3f05d5e8" ], "author": { "name": "Luis Henriques", "email": "luis@igalia.com", "time": "Thu Mar 06 11:12:18 2025 +0000" }, "committer": { "name": "Christian Brauner", "email": "brauner@kernel.org", "time": "Wed Mar 19 14:00:11 2025 +0100" }, "message": "fuse: fix possible deadlock if rings are never initialized\n\nWhen mounting a user-space filesystem using io_uring, the initialization\nof the rings is done separately in the server side. If for some reason\n(e.g. a server bug) this step is not performed it will be impossible to\nunmount the filesystem if there are already requests waiting.\n\nThis issue is easily reproduced with the libfuse passthrough_ll example,\nif the queue depth is set to \u00270\u0027 and a request is queued before trying to\nunmount the filesystem. When trying to force the unmount, fuse_abort_conn()\nwill try to wake up all tasks waiting in fc-\u003eblocked_waitq, but because the\nrings were never initialized, fuse_uring_ready() will never return \u0027true\u0027.\n\nFixes: 3393ff964e0f (\"fuse: block request allocation until io-uring init is complete\")\nSigned-off-by: Luis Henriques \u003cluis@igalia.com\u003e\nLink: https://lore.kernel.org/r/20250306111218.13734-1-luis@igalia.com\nAcked-by: Miklos Szeredi \u003cmszeredi@redhat.com\u003e\nReviewed-by: Bernd Schubert \u003cbschubert@ddn.com\u003e\nSigned-off-by: Christian Brauner \u003cbrauner@kernel.org\u003e\n" }, { "commit": "176fda56d72a267731f82aa4a3aeca430394f10e", "tree": "d7cff8d6e5e18cc9ec1b74d5580ce98b54969e49", "parents": [ "4701f33a10702d5fc577c32434eb62adde0a1ae1" ], "author": { "name": "Miaoqian Lin", "email": "linmq006@gmail.com", "time": "Wed Mar 19 11:23:04 2025 +0800" }, "committer": { "name": "Mark Brown", "email": "broonie@kernel.org", "time": "Wed Mar 19 12:47:50 2025 +0000" }, "message": "spi: Fix reference count leak in slave_show()\n\nFix a reference count leak in slave_show() by properly putting the device\nreference obtained from device_find_any_child().\n\nFixes: 6c364062bfed (\"spi: core: Add support for registering SPI slave controllers\")\nFixes: c21b0837983d (\"spi: Use device_find_any_child() instead of custom approach\")\nSigned-off-by: Miaoqian Lin \u003clinmq006@gmail.com\u003e\nReviewed-by: Geert Uytterhoeven \u003cgeert+renesas@glider.be\u003e\nLink: https://patch.msgid.link/20250319032305.70340-1-linmq006@gmail.com\nSigned-off-by: Mark Brown \u003cbroonie@kernel.org\u003e\n" }, { "commit": "d9c743b6990b1ee3925f3ced1844cafa955bacb0", "tree": "730c91319266d5994452fcbf31590f3661acf348", "parents": [ "9a81fc3480bf5dbe2bf80e278c440770f6ba2692", "3178d2b048365fe2c078cd53f85f2abf1487733b" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 19 09:57:37 2025 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 19 09:57:37 2025 +0000" }, "message": "Merge branch \u0027xa_alloc_cyclic-checks\u0027\n\nMichal Swiatkowski says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nfix xa_alloc_cyclic() return checks\n\nPierre Riteau \u003cpierre@stackhpc.com\u003e found suspicious handling an error\nfrom xa_alloc_cyclic() in scheduler code [1]. The same is done in few\nother places.\n\nv1 --\u003e v2: [2]\n * add fixes tags\n * fix also the same usage in dpll and phy\n\n[1] https://lore.kernel.org/netdev/20250213223610.320278-1-pierre@stackhpc.com/\n[2] https://lore.kernel.org/netdev/20250214132453.4108-1-michal.swiatkowski@linux.intel.com/\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3178d2b048365fe2c078cd53f85f2abf1487733b", "tree": "730c91319266d5994452fcbf31590f3661acf348", "parents": [ "3614bf90130d60f191a5fe218d04f6251c678e13" ], "author": { "name": "Michal Swiatkowski", "email": "michal.swiatkowski@linux.intel.com", "time": "Wed Mar 12 10:52:51 2025 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 19 09:57:37 2025 +0000" }, "message": "phy: fix xa_alloc_cyclic() error handling\n\nxa_alloc_cyclic() can return 1, which isn\u0027t an error. To prevent\nsituation when the caller of this function will treat it as no error do\na check only for negative here.\n\nFixes: 384968786909 (\"net: phy: Introduce ethernet link topology representation\")\nSigned-off-by: Michal Swiatkowski \u003cmichal.swiatkowski@linux.intel.com\u003e\nReviewed-by: Maxime Chevallier \u003cmaxime.chevallier@bootlin.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3614bf90130d60f191a5fe218d04f6251c678e13", "tree": "6592b550316758d0f8b209de935e21aede94fb9e", "parents": [ "f3b97b7d4bf316c3991e5634c9f4847c2df35478" ], "author": { "name": "Michal Swiatkowski", "email": "michal.swiatkowski@linux.intel.com", "time": "Wed Mar 12 10:52:50 2025 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 19 09:57:37 2025 +0000" }, "message": "dpll: fix xa_alloc_cyclic() error handling\n\nIn case of returning 1 from xa_alloc_cyclic() (wrapping) ERR_PTR(1) will\nbe returned, which will cause IS_ERR() to be false. Which can lead to\ndereference not allocated pointer (pin).\n\nFix it by checking if err is lower than zero.\n\nThis wasn\u0027t found in real usecase, only noticed. Credit to Pierre.\n\nFixes: 97f265ef7f5b (\"dpll: allocate pin ids in cycle\")\nSigned-off-by: Michal Swiatkowski \u003cmichal.swiatkowski@linux.intel.com\u003e\nReviewed-by: Vadim Fedorenko \u003cvadim.fedorenko@linux.dev\u003e\nReviewed-by: Arkadiusz Kubalewski \u003carkadiusz.kubalewski@intel.com\u003e\nReviewed-by: Jiri Pirko \u003cjiri@nvidia.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f3b97b7d4bf316c3991e5634c9f4847c2df35478", "tree": "f4d0a6c051a2a2ee4a241f32e033b58c5f07c5c6", "parents": [ "9a81fc3480bf5dbe2bf80e278c440770f6ba2692" ], "author": { "name": "Michal Swiatkowski", "email": "michal.swiatkowski@linux.intel.com", "time": "Wed Mar 12 10:52:49 2025 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 19 09:57:36 2025 +0000" }, "message": "devlink: fix xa_alloc_cyclic() error handling\n\nIn case of returning 1 from xa_alloc_cyclic() (wrapping) ERR_PTR(1) will\nbe returned, which will cause IS_ERR() to be false. Which can lead to\ndereference not allocated pointer (rel).\n\nFix it by checking if err is lower than zero.\n\nThis wasn\u0027t found in real usecase, only noticed. Credit to Pierre.\n\nFixes: c137743bce02 (\"devlink: introduce object and nested devlink relationship infra\")\nSigned-off-by: Michal Swiatkowski \u003cmichal.swiatkowski@linux.intel.com\u003e\nReviewed-by: Andrew Lunn \u003candrew@lunn.ch\u003e\nReviewed-by: Jiri Pirko \u003cjiri@nvidia.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "613218fc74b32095152275fc11d5ab8e3f05d5e8", "tree": "5109724f0b9226e4ed063d4f8c5ebb1023cadd95", "parents": [ "d9ecc77193cad25402ff5517fb26fb22b4db0e10", "07c574eb53d4cc9aa7b985bc8bfcb302e5dc4694" ], "author": { "name": "Christian Brauner", "email": "brauner@kernel.org", "time": "Wed Mar 19 10:04:29 2025 +0100" }, "committer": { "name": "Christian Brauner", "email": "brauner@kernel.org", "time": "Wed Mar 19 10:04:29 2025 +0100" }, "message": "Merge patch series \"netfs: Miscellaneous fixes\"\n\nDavid Howells \u003cdhowells@redhat.com\u003e says:\n\nHere are some miscellaneous fixes and changes for netfslib:\n\n (1) Fix the collection of results during a pause in transmission.\n\n (2) Call -\u003einvalidate_cache() only if provided.\n\n (3) Fix the rolling buffer to not hammer atomic bit clears when loading\n from readahead.\n\n (4) Fix netfs_unbuffered_read() to return ssize_t.\n\n* patches from https://lore.kernel.org/r/20250314164201.1993231-1-dhowells@redhat.com:\n netfs: Fix netfs_unbuffered_read() to return ssize_t rather than int\n netfs: Fix rolling_buffer_load_from_ra() to not clear mark bits\n netfs: Call `invalidate_cache` only if implemented\n netfs: Fix collection of results during pause when collection offloaded\n\nLink: https://lore.kernel.org/r/20250314164201.1993231-1-dhowells@redhat.com\nSigned-off-by: Christian Brauner \u003cbrauner@kernel.org\u003e\n" }, { "commit": "07c574eb53d4cc9aa7b985bc8bfcb302e5dc4694", "tree": "5109724f0b9226e4ed063d4f8c5ebb1023cadd95", "parents": [ "15e9aaf9fc494d1a7280bf1184b4b5830c095209" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Mar 14 16:41:59 2025 +0000" }, "committer": { "name": "Christian Brauner", "email": "brauner@kernel.org", "time": "Wed Mar 19 10:04:23 2025 +0100" }, "message": "netfs: Fix netfs_unbuffered_read() to return ssize_t rather than int\n\nFix netfs_unbuffered_read() to return an ssize_t rather than an int as\nnetfs_wait_for_read() returns ssize_t and this gets implicitly truncated.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nLink: https://lore.kernel.org/r/20250314164201.1993231-5-dhowells@redhat.com\nAcked-by: \"Paulo Alcantara (Red Hat)\" \u003cpc@manguebit.com\u003e\ncc: Jeff Layton \u003cjlayton@kernel.org\u003e\ncc: Viacheslav Dubeyko \u003cslava@dubeyko.com\u003e\ncc: Alex Markuze \u003camarkuze@redhat.com\u003e\ncc: Ilya Dryomov \u003cidryomov@gmail.com\u003e\ncc: ceph-devel@vger.kernel.org\ncc: linux-fsdevel@vger.kernel.org\nSigned-off-by: Christian Brauner \u003cbrauner@kernel.org\u003e\n" }, { "commit": "15e9aaf9fc494d1a7280bf1184b4b5830c095209", "tree": "e06e06e1a73cd82a39fc3db3ac47b3770c60915c", "parents": [ "344b7ef248f420ed4ba3a3539cb0a0fc18df9a6c" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Mar 14 16:41:58 2025 +0000" }, "committer": { "name": "Christian Brauner", "email": "brauner@kernel.org", "time": "Wed Mar 19 10:04:22 2025 +0100" }, "message": "netfs: Fix rolling_buffer_load_from_ra() to not clear mark bits\n\nrolling_buffer_load_from_ra() looms large in the perf report because it\nloops around doing an atomic clear for each of the three mark bits per\nfolio. However, this is both inefficient (it would be better to build a\nmask and atomically AND them out) and unnecessary as they shouldn\u0027t be set.\n\nFix this by removing the loop.\n\nFixes: ee4cdf7ba857 (\"netfs: Speed up buffered reading\")\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nLink: https://lore.kernel.org/r/20250314164201.1993231-4-dhowells@redhat.com\nAcked-by: \"Paulo Alcantara (Red Hat)\" \u003cpc@manguebit.com\u003e\ncc: Jeff Layton \u003cjlayton@kernel.org\u003e\ncc: Steve French \u003csfrench@samba.org\u003e\ncc: Paulo Alcantara \u003cpc@manguebit.com\u003e\ncc: netfs@lists.linux.dev\ncc: linux-cifs@vger.kernel.org\ncc: linux-fsdevel@vger.kernel.org\nSigned-off-by: Christian Brauner \u003cbrauner@kernel.org\u003e\n" }, { "commit": "344b7ef248f420ed4ba3a3539cb0a0fc18df9a6c", "tree": "d068a63c46a258a28c11cc06ed4fda84d55fc966", "parents": [ "f298e37655288272fad3766b82db0c3c03facbf9" ], "author": { "name": "Max Kellermann", "email": "max.kellermann@ionos.com", "time": "Fri Mar 14 16:41:57 2025 +0000" }, "committer": { "name": "Christian Brauner", "email": "brauner@kernel.org", "time": "Wed Mar 19 10:04:22 2025 +0100" }, "message": "netfs: Call `invalidate_cache` only if implemented\n\nMany filesystems such as NFS and Ceph do not implement the\n`invalidate_cache` method. On those filesystems, if writing to the\ncache (`NETFS_WRITE_TO_CACHE`) fails for some reason, the kernel\ncrashes like this:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000000\n #PF: supervisor instruction fetch in kernel mode\n #PF: error_code(0x0010) - not-present page\n PGD 0 P4D 0\n Oops: Oops: 0010 [#1] SMP PTI\n CPU: 9 UID: 0 PID: 3380 Comm: kworker/u193:11 Not tainted 6.13.3-cm4all1-hp #437\n Hardware name: HP ProLiant DL380 Gen9/ProLiant DL380 Gen9, BIOS P89 10/17/2018\n Workqueue: events_unbound netfs_write_collection_worker\n RIP: 0010:0x0\n Code: Unable to access opcode bytes at 0xffffffffffffffd6.\n RSP: 0018:ffff9b86e2ca7dc0 EFLAGS: 00010202\n RAX: 0000000000000000 RBX: 0000000000000000 RCX: 7fffffffffffffff\n RDX: 0000000000000001 RSI: ffff89259d576a18 RDI: ffff89259d576900\n RBP: ffff89259d5769b0 R08: ffff9b86e2ca7d28 R09: 0000000000000002\n R10: ffff89258ceaca80 R11: 0000000000000001 R12: 0000000000000020\n R13: ffff893d158b9338 R14: ffff89259d576900 R15: ffff89259d5769b0\n FS: 0000000000000000(0000) GS:ffff893c9fa40000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: ffffffffffffffd6 CR3: 000000054442e003 CR4: 00000000001706f0\n Call Trace:\n \u003cTASK\u003e\n ? __die+0x1f/0x60\n ? page_fault_oops+0x15c/0x460\n ? try_to_wake_up+0x2d2/0x530\n ? exc_page_fault+0x5e/0x100\n ? asm_exc_page_fault+0x22/0x30\n netfs_write_collection_worker+0xe9f/0x12b0\n ? xs_poll_check_readable+0x3f/0x80\n ? xs_stream_data_receive_workfn+0x8d/0x110\n process_one_work+0x134/0x2d0\n worker_thread+0x299/0x3a0\n ? __pfx_worker_thread+0x10/0x10\n kthread+0xba/0xe0\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x30/0x50\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n Modules linked in:\n CR2: 0000000000000000\n\nThis patch adds the missing `NULL` check.\n\nFixes: 0e0f2dfe880f (\"netfs: Dispatch write requests to process a writeback slice\")\nFixes: 288ace2f57c9 (\"netfs: New writeback implementation\")\nSigned-off-by: Max Kellermann \u003cmax.kellermann@ionos.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nLink: https://lore.kernel.org/r/20250314164201.1993231-3-dhowells@redhat.com\nAcked-by: \"Paulo Alcantara (Red Hat)\" \u003cpc@manguebit.com\u003e\ncc: netfs@lists.linux.dev\ncc: linux-cifs@vger.kernel.org\ncc: linux-fsdevel@vger.kernel.org\ncc: stable@vger.kernel.org\nSigned-off-by: Christian Brauner \u003cbrauner@kernel.org\u003e\n" }, { "commit": "f298e37655288272fad3766b82db0c3c03facbf9", "tree": "35c8e2995882ff8d73d7db224286c5eee668d9cd", "parents": [ "d9ecc77193cad25402ff5517fb26fb22b4db0e10" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Mar 14 16:41:56 2025 +0000" }, "committer": { "name": "Christian Brauner", "email": "brauner@kernel.org", "time": "Wed Mar 19 10:04:22 2025 +0100" }, "message": "netfs: Fix collection of results during pause when collection offloaded\n\nA netfs read request can run in one of two modes: for synchronous reads\nwrites, the app thread does the collection of results and for asynchronous\nreads, this is offloaded to a worker thread. This is controlled by the\nNETFS_RREQ_OFFLOAD_COLLECTION flag.\n\nNow, if a subrequest incurs an error, the NETFS_RREQ_PAUSE flag is set to\nstop the issuing loop temporarily from issuing more subrequests until a\nretry is successful or the request is abandoned.\n\nWhen the issuing loop sees NETFS_RREQ_PAUSE, it jumps to\nnetfs_wait_for_pause() which will wait for the PAUSE flag to be cleared -\nand whilst it is waiting, it will call out to the collector as more results\nacrue... But this is the wrong thing to do if OFFLOAD_COLLECTION is set as\nwe can then end up with both the app thread and the work item collecting\nresults simultaneously.\n\nThis manifests itself occasionally when running the generic/323 xfstest\nagainst multichannel cifs as an oops that\u0027s a bit random but frequently\ninvolving io_submit() (the test does lots of simultaneous async DIO reads).\n\nFix this by only doing the collection in netfs_wait_for_pause() if the\nNETFS_RREQ_OFFLOAD_COLLECTION is not set.\n\nFixes: e2d46f2ec332 (\"netfs: Change the read result collector to only use one work item\")\nReported-by: Steve French \u003cstfrench@microsoft.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nLink: https://lore.kernel.org/r/20250314164201.1993231-2-dhowells@redhat.com\nAcked-by: \"Paulo Alcantara (Red Hat)\" \u003cpc@manguebit.com\u003e\ncc: Paulo Alcantara \u003cpc@manguebit.com\u003e\ncc: Jeff Layton \u003cjlayton@kernel.org\u003e\ncc: linux-cifs@vger.kernel.org\ncc: netfs@lists.linux.dev\ncc: linux-fsdevel@vger.kernel.org\nSigned-off-by: Christian Brauner \u003cbrauner@kernel.org\u003e\n" }, { "commit": "d9ecc77193cad25402ff5517fb26fb22b4db0e10", "tree": "d2d1d22ae4a3df3ba148cfc9cbd422eec22c4f72", "parents": [ "0307d16f3610eb29ad0b7529846de7d62fed60ca" ], "author": { "name": "Joanne Koong", "email": "joannelkoong@gmail.com", "time": "Mon Mar 17 17:30:28 2025 -0700" }, "committer": { "name": "Christian Brauner", "email": "brauner@kernel.org", "time": "Wed Mar 19 09:24:03 2025 +0100" }, "message": "fuse: fix uring race condition for null dereference of fc\n\nThere is a race condition leading to a kernel crash from a null\ndereference when attemping to access fc-\u003elock in\nfuse_uring_create_queue(). fc may be NULL in the case where another\nthread is creating the uring in fuse_uring_create() and has set\nfc-\u003ering but has not yet set ring-\u003efc when fuse_uring_create_queue()\nreads ring-\u003efc. There is another race condition as well where in\nfuse_uring_register(), ring-\u003enr_queues may still be 0 and not yet set\nto the new value when we compare qid against it.\n\nThis fix sets fc-\u003ering only after ring-\u003efc and ring-\u003enr_queues have been\nset, which guarantees now that ring-\u003efc is a proper pointer when any\nqueues are created and ring-\u003enr_queues reflects the right number of\nqueues if ring is not NULL. We must use smp_store_release() and\nsmp_load_acquire() semantics to ensure the ordering will remain correct\nwhere fc-\u003ering is assigned only after ring-\u003efc and ring-\u003enr_queues have\nbeen assigned.\n\nSigned-off-by: Joanne Koong \u003cjoannelkoong@gmail.com\u003e\nLink: https://lore.kernel.org/r/20250318003028.3330599-1-joannelkoong@gmail.com\nFixes: 24fe962c86f5 (\"fuse: {io-uring} Handle SQEs - register commands\")\nAcked-by: Miklos Szeredi \u003cmszeredi@redhat.com\u003e\nReviewed-by: Bernd Schubert \u003cbschubert@ddn.com\u003e\nSigned-off-by: Christian Brauner \u003cbrauner@kernel.org\u003e\n" }, { "commit": "0307d16f3610eb29ad0b7529846de7d62fed60ca", "tree": "518118e8c1f67c891f4b24532dafc73c32d5b1be", "parents": [ "4701f33a10702d5fc577c32434eb62adde0a1ae1" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Mar 18 11:20:19 2025 +0000" }, "committer": { "name": "Christian Brauner", "email": "brauner@kernel.org", "time": "Wed Mar 19 09:23:05 2025 +0100" }, "message": "afs: Fix afs_atcell_get_link() to check if ws_cell is unset first\n\nFix afs_atcell_get_link() to check if the workstation cell is unset before\ndoing the RCU pathwalk bit where we dereference that.\n\nFixes: 823869e1e616 (\"afs: Fix afs_atcell_get_link() to handle RCU pathwalk\")\nReported-by: syzbot+76a6f18e3af82e84f264@syzkaller.appspotmail.com\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nLink: https://lore.kernel.org/r/2481796.1742296819@warthog.procyon.org.uk\nTested-by: syzbot+76a6f18e3af82e84f264@syzkaller.appspotmail.com\ncc: Marc Dionne \u003cmarc.dionne@auristor.com\u003e\ncc: linux-afs@lists.infradead.org\ncc: linux-fsdevel@vger.kernel.org\nSigned-off-by: Christian Brauner \u003cbrauner@kernel.org\u003e\n" }, { "commit": "d9d4cb224e4140f51847642aa5a4a5c3eb998af0", "tree": "e70fe9de9fb6ca4d75b81eeb1e3fa110a5d47c73", "parents": [ "d60073294cc3b46b73d6de247e0e5ae8684a6241" ], "author": { "name": "Tomasz Pakuła", "email": "tomasz.pakula.oficjalny@gmail.com", "time": "Tue Mar 11 22:38:33 2025 +0100" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Mar 18 16:34:06 2025 -0400" }, "message": "drm/amdgpu/pm: Handle SCLK offset correctly in overdrive for smu 14.0.2\n\nCurrently, it seems like the code was carried over from RDNA3 because\nit assumes two possible values to set. RDNA4, instead of having:\n0: min SCLK\n1: max SCLK\nonly has\n0: SCLK offset\n\nThis change makes it so it only reports current offset value instead of\nshowing possible min/max values and their indices. Moreover, it now only\naccepts the offset as a value, without the indice index.\n\nAdditionally, the lower bound was printed as %u by mistake.\n\nOld:\nOD_SCLK_OFFSET:\n0: -500Mhz\n1: 1000Mhz\nOD_MCLK:\n0: 97Mhz\n1: 1259MHz\nOD_VDDGFX_OFFSET:\n0mV\nOD_RANGE:\nSCLK_OFFSET: -500Mhz 1000Mhz\nMCLK: 97Mhz 1500Mhz\nVDDGFX_OFFSET: -200mv 0mv\n\nNew:\nOD_SCLK_OFFSET:\n0Mhz\nOD_MCLK:\n0: 97Mhz\n1: 1259MHz\nOD_VDDGFX_OFFSET:\n0mV\nOD_RANGE:\nSCLK_OFFSET: -500Mhz 1000Mhz\nMCLK: 97Mhz 1500Mhz\nVDDGFX_OFFSET: -200mv 0mv\n\nSetting this offset:\nOld: \"s 1 \u003coffset\u003e\"\nNew: \"s \u003coffset\u003e\"\n\nCloses: https://gitlab.freedesktop.org/drm/amd/-/issues/4036\nReviewed-by: Yang Wang \u003ckevinyang.wang@amd.com\u003e\nSigned-off-by: Tomasz Pakuła \u003ctomasz.pakula.oficjalny@gmail.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n(cherry picked from commit 1cfeb60e6e8837b1de5eb4e17df7cf31f4442144)\nCc: stable@vger.kernel.org # 6.12.x\n" }, { "commit": "d60073294cc3b46b73d6de247e0e5ae8684a6241", "tree": "240b0c2b308af6783a78ab40fd4f4a629c44cc37", "parents": [ "acbf16a6ae775b4db86f537448cc466288aa307e" ], "author": { "name": "Lo-an Chen", "email": "lo-an.chen@amd.com", "time": "Mon Mar 10 14:52:22 2025 +0800" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Mar 18 16:33:38 2025 -0400" }, "message": "drm/amd/display: Fix incorrect fw_state address in dmub_srv\n\n[WHY]\nThe fw_state in dmub_srv was assigned with wrong address.\nThe address was pointed to the firmware region.\n\n[HOW]\nFix the firmware state by using DMUB_DEBUG_FW_STATE_OFFSET\nin dmub_cmd.h.\n\nReviewed-by: Nicholas Kazlauskas \u003cnicholas.kazlauskas@amd.com\u003e\nSigned-off-by: Lo-an Chen \u003clo-an.chen@amd.com\u003e\nSigned-off-by: Alex Hung \u003calex.hung@amd.com\u003e\nTested-by: Daniel Wheeler \u003cdaniel.wheeler@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n(cherry picked from commit f57b38ac85a01bf03020cc0a9761d63e5c0ce197)\n" }, { "commit": "acbf16a6ae775b4db86f537448cc466288aa307e", "tree": "5c694eb74e76a487e10a10563c70332ee19742de", "parents": [ "35f0f9f421390f66cb062f4d79f4924af5f55b04" ], "author": { "name": "Mario Limonciello", "email": "mario.limonciello@amd.com", "time": "Fri Mar 07 15:55:20 2025 -0600" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Mar 18 16:33:11 2025 -0400" }, "message": "drm/amd/display: Use HW lock mgr for PSR1 when only one eDP\n\n[WHY]\nDMUB locking is important to make sure that registers aren\u0027t accessed\nwhile in PSR. Previously it was enabled but caused a deadlock in\nsituations with multiple eDP panels.\n\n[HOW]\nDetect if multiple eDP panels are in use to decide whether to use\nlock. Refactor the function so that the first check is for PSR-SU\nand then replay is in use to prevent having to look up number\nof eDP panels for those configurations.\n\nFixes: f245b400a223 (\"Revert \"drm/amd/display: Use HW lock mgr for PSR1\"\")\nCloses: https://gitlab.freedesktop.org/drm/amd/-/issues/3965\nReviewed-by: ChiaHsuan Chung \u003cchiahsuan.chung@amd.com\u003e\nSigned-off-by: Mario Limonciello \u003cmario.limonciello@amd.com\u003e\nSigned-off-by: Alex Hung \u003calex.hung@amd.com\u003e\nTested-by: Daniel Wheeler \u003cdaniel.wheeler@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n(cherry picked from commit ed569e1279a3045d6b974226c814e071fa0193a6)\nCc: stable@vger.kernel.org\n" }, { "commit": "35f0f9f421390f66cb062f4d79f4924af5f55b04", "tree": "aa7f2ff483d935e4fdead17b22b30bc7138bf91b", "parents": [ "542c3bb836733a1325874310d54d25b4907ed10e" ], "author": { "name": "Yilin Chen", "email": "Yilin.Chen@amd.com", "time": "Wed Mar 05 12:19:49 2025 -0500" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Mar 18 16:32:33 2025 -0400" }, "message": "drm/amd/display: Fix message for support_edp0_on_dp1\n\n[WHY]\nThe info message was wrong when support_edp0_on_dp1 is enabled\n\n[HOW]\nUse correct info message for support_edp0_on_dp1\n\nFixes: f6d17270d18a (\"drm/amd/display: add a quirk to enable eDP0 on DP1\")\nReviewed-by: Aurabindo Pillai \u003caurabindo.pillai@amd.com\u003e\nSigned-off-by: Yilin Chen \u003cYilin.Chen@amd.com\u003e\nSigned-off-by: Alex Hung \u003calex.hung@amd.com\u003e\nTested-by: Daniel Wheeler \u003cdaniel.wheeler@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n(cherry picked from commit 79538e6365c99d7b1c3e560d1ea8d11ef8313465)\nCc: stable@vger.kernel.org\n" }, { "commit": "542c3bb836733a1325874310d54d25b4907ed10e", "tree": "264a0d30db0a8cca24f4e4655754e0e5f0753bf0", "parents": [ "35b6162bb790555ad56b7f0d120e307b8334d778" ], "author": { "name": "Philip Yang", "email": "Philip.Yang@amd.com", "time": "Wed Jan 29 12:37:30 2025 -0500" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Mar 18 16:31:25 2025 -0400" }, "message": "drm/amdkfd: Fix user queue validation on Gfx7/8\n\nTo workaround queue full h/w issue on Gfx7/8, when application create\nAQL queue, the ring buffer bo allocate size is queue_size/2 and\nmap queue_size ring buffer to GPU in 2 pieces using 2 attachments, each\nattachment map size is queue_size/2, with same ring_bo backing memory.\n\nFor Gfx7/8, user queue buffer validation should use queue_size/2 to\nverify ring_bo allocation and mapping size.\n\nFixes: 68e599db7a54 (\"drm/amdkfd: Validate user queue buffers\")\nSuggested-by: Tomáš Trnka \u003ctrnka@scm.com\u003e\nSigned-off-by: Philip Yang \u003cPhilip.Yang@amd.com\u003e\nAcked-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n(cherry picked from commit e7a477735f1771b9a9346a5fbd09d7ff0641723a)\nCc: stable@vger.kernel.org\n" }, { "commit": "35b6162bb790555ad56b7f0d120e307b8334d778", "tree": "2716d5d9f368958bd23e48c8953ef63583b33886", "parents": [ "86730b5261d4d8dae3f5b97709d40d694ecf1ddf" ], "author": { "name": "David Belanger", "email": "david.belanger@amd.com", "time": "Tue Jul 02 17:56:41 2024 -0400" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Mar 18 16:29:52 2025 -0400" }, "message": "drm/amdgpu: Restore uncached behaviour on GFX12\n\nAlways use MTYPE_UC if UNCACHED flag is specified.\n\nThis makes kernarg region uncached and it restores\nusermode cache disable debug flag functionality.\n\nDo not set MTYPE_UC for COHERENT flag, on GFX12 coherence is handled by\nshader code.\n\nSigned-off-by: David Belanger \u003cdavid.belanger@amd.com\u003e\nReviewed-by: Felix Kuehling \u003cfelix.kuehling@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n(cherry picked from commit eb6cdfb807d038d9b9986b5c87188f28a4071eae)\nCc: stable@vger.kernel.org # 6.12.x\n" }, { "commit": "86730b5261d4d8dae3f5b97709d40d694ecf1ddf", "tree": "195d7b6729f35f04c4831633e9a218f8d957a1d4", "parents": [ "424648c3838133f93a34fdfe4f9d5597551e7b3b" ], "author": { "name": "Wentao Liang", "email": "vulab@iscas.ac.cn", "time": "Wed Mar 12 14:31:06 2025 +0800" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Mar 18 16:29:16 2025 -0400" }, "message": "drm/amdgpu/gfx12: correct cleanup of \u0027me\u0027 field with gfx_v12_0_me_fini()\n\nIn gfx_v12_0_cp_gfx_load_me_microcode_rs64(), gfx_v12_0_pfp_fini() is\nincorrectly used to free \u0027me\u0027 field of \u0027gfx\u0027, since gfx_v12_0_pfp_fini()\ncan only release \u0027pfp\u0027 field of \u0027gfx\u0027. The release function of \u0027me\u0027 field\nshould be gfx_v12_0_me_fini().\n\nFixes: 52cb80c12e8a (\"drm/amdgpu: Add gfx v12_0 ip block support (v6)\")\nSigned-off-by: Wentao Liang \u003cvulab@iscas.ac.cn\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n(cherry picked from commit ebdc52607a46cda08972888178c6aa9cd6965141)\nCc: stable@vger.kernel.org # 6.12.x\n" }, { "commit": "424648c3838133f93a34fdfe4f9d5597551e7b3b", "tree": "505e1bbfbfee3e404bb24cf91769d61f3988ee16", "parents": [ "5ca0040ecfe8ba0dee9df1f559e8d7587f12bf89" ], "author": { "name": "Jay Cornwall", "email": "jay.cornwall@amd.com", "time": "Fri Feb 07 16:40:34 2025 -0500" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Mar 18 16:28:34 2025 -0400" }, "message": "drm/amdkfd: Fix instruction hazard in gfx12 trap handler\n\nVALU instructions with SGPR source need wait states to avoid hazard\nwith SALU using different SGPR.\n\nv2: Eliminate some hazards to reduce code explosion\n\nSigned-off-by: Jay Cornwall \u003cjay.cornwall@amd.com\u003e\nReviewed-by: Lancelot Six \u003clancelot.six@amd.com\u003e\nAcked-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n(cherry picked from commit 7e0459d453b911435673edd7a86eadc600c63238)\nCc: stable@vger.kernel.org # 6.12.x\n" }, { "commit": "5ca0040ecfe8ba0dee9df1f559e8d7587f12bf89", "tree": "851cdf625938392f48138c2358588f27b157cb25", "parents": [ "19b53f96856b5316ee1fd6ca485af0889e001677" ], "author": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Mar 11 10:34:36 2025 -0400" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Mar 18 16:27:56 2025 -0400" }, "message": "drm/amdgpu/pm: wire up hwmon fan speed for smu 14.0.2\n\nAdd callbacks for fan speed fetching.\n\nCloses: https://gitlab.freedesktop.org/drm/amd/-/issues/4034\nReviewed-by: Kenneth Feng \u003ckenneth.feng@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n(cherry picked from commit 90df6db62fa78a8ab0b705ec38db99c7973b95d6)\nCc: stable@vger.kernel.org # 6.12.x\n" }, { "commit": "19b53f96856b5316ee1fd6ca485af0889e001677", "tree": "3485f33978785bfe7ad86157415e9df09777a002", "parents": [ "7fc0765208502e53297ce72c49ca43729f9d6ff3" ], "author": { "name": "Harish Kasiviswanathan", "email": "Harish.Kasiviswanathan@amd.com", "time": "Tue Mar 11 14:15:18 2025 -0400" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Mar 18 16:26:53 2025 -0400" }, "message": "drm/amd/pm: add unique_id for gfx12\n\nExpose unique_id for gfx12\n\nSigned-off-by: Harish Kasiviswanathan \u003cHarish.Kasiviswanathan@amd.com\u003e\nReviewed-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n(cherry picked from commit 16fbc18cb07470cd33fb5f37ad181b51583e6dc0)\nCc: stable@vger.kernel.org # 6.12.x\n" }, { "commit": "7fc0765208502e53297ce72c49ca43729f9d6ff3", "tree": "980d56857df6c42fa23b1ba917a4e233d625a767", "parents": [ "ec33964d9d88488fa954a03d476a8b811efc6e85" ], "author": { "name": "David Rosca", "email": "david.rosca@amd.com", "time": "Fri Feb 28 14:12:10 2025 +0100" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Mar 18 16:26:12 2025 -0400" }, "message": "drm/amdgpu: Remove JPEG from vega and carrizo video caps\n\nJPEG is only supported for VCN1+.\n\nSigned-off-by: David Rosca \u003cdavid.rosca@amd.com\u003e\nAcked-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nReviewed-by: Ruijing Dong \u003cruijing.dong@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n(cherry picked from commit 0a6e7b06bdbead2e43d56a2274b7e0c9c86d536e)\nCc: stable@vger.kernel.org\n" }, { "commit": "ec33964d9d88488fa954a03d476a8b811efc6e85", "tree": "fa8e49c9f0a7cdef3a9adba403ed77d7274f096b", "parents": [ "f0105e173103c9d30a2bb959f7399437d536c848" ], "author": { "name": "David Rosca", "email": "david.rosca@amd.com", "time": "Fri Feb 28 13:34:49 2025 +0100" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Mar 18 16:25:46 2025 -0400" }, "message": "drm/amdgpu: Fix JPEG video caps max size for navi1x and raven\n\n8192x8192 is the maximum supported resolution.\n\nSigned-off-by: David Rosca \u003cdavid.rosca@amd.com\u003e\nAcked-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nReviewed-by: Ruijing Dong \u003cruijing.dong@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n(cherry picked from commit 6e0d2fde3ae8fdb5b47e10389f23ed2cb4daec5d)\nCc: stable@vger.kernel.org\n" }, { "commit": "f0105e173103c9d30a2bb959f7399437d536c848", "tree": "b0e2b7a545d78713f7e51a50b2d80ced9ae506ae", "parents": [ "dd8689b52a24807c2d5ce0a17cb26dc87f75235c" ], "author": { "name": "David Rosca", "email": "david.rosca@amd.com", "time": "Fri Feb 28 13:32:46 2025 +0100" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Mar 18 16:25:16 2025 -0400" }, "message": "drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size\n\n1920x1088 is the maximum supported resolution.\n\nSigned-off-by: David Rosca \u003cdavid.rosca@amd.com\u003e\nAcked-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nReviewed-by: Ruijing Dong \u003cruijing.dong@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n(cherry picked from commit 1a0807feb97082bff2b1342dbbe55a2a9a8bdb88)\nCc: stable@vger.kernel.org\n" }, { "commit": "dd8689b52a24807c2d5ce0a17cb26dc87f75235c", "tree": "edfd4a083e7e7a5d5e2d8ade35741332400d7ab9", "parents": [ "6cc30748e17ea2a64051ceaf83a8372484e597f1" ], "author": { "name": "Nikita Zhandarovich", "email": "n.zhandarovich@fintech.ru", "time": "Tue Mar 11 14:14:59 2025 +0300" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Mar 18 16:24:44 2025 -0400" }, "message": "drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()\n\nOn the off chance that command stream passed from userspace via\nioctl() call to radeon_vce_cs_parse() is weirdly crafted and\nfirst command to execute is to encode (case 0x03000001), the function\nin question will attempt to call radeon_vce_cs_reloc() with size\nargument that has not been properly initialized. Specifically, \u0027size\u0027\nwill point to \u0027tmp\u0027 variable before the latter had a chance to be\nassigned any value.\n\nPlay it safe and init \u0027tmp\u0027 with 0, thus ensuring that\nradeon_vce_cs_reloc() will catch an early error in cases like these.\n\nFound by Linux Verification Center (linuxtesting.org) with static\nanalysis tool SVACE.\n\nFixes: 2fc5703abda2 (\"drm/radeon: check VCE relocation buffer range v3\")\nSigned-off-by: Nikita Zhandarovich \u003cn.zhandarovich@fintech.ru\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n(cherry picked from commit 2d52de55f9ee7aaee0e09ac443f77855989c6b68)\nCc: stable@vger.kernel.org\n" }, { "commit": "81e4f8d68c66da301bb881862735bd74c6241a19", "tree": "e1dc2750770302724bbb9e59f701b1e613081799", "parents": [ "76b6905c11fd3c6dc4562aefc3e8c4429fefae1e", "ef17b519088ee0c167cf507820609732ec8bad1a" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Mar 18 09:58:12 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Mar 18 09:58:12 2025 -0700" }, "message": "Merge tag \u0027pmdomain-v6.14-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/linux-pm\n\nPull pmdomain fix from Ulf Hansson:\n\n - Fix amlogic T7 ISP secpower\n\n* tag \u0027pmdomain-v6.14-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/linux-pm:\n pmdomain: amlogic: fix T7 ISP secpower\n" }, { "commit": "c746ff4a67f4842e90fe232d2c9fc983f4034848", "tree": "18dcc4bc177bf75a6154a55aa10b59c302c1543c", "parents": [ "4701f33a10702d5fc577c32434eb62adde0a1ae1" ], "author": { "name": "Geert Uytterhoeven", "email": "geert+renesas@glider.be", "time": "Mon Mar 17 09:06:42 2025 +0100" }, "committer": { "name": "Linus Walleij", "email": "linus.walleij@linaro.org", "time": "Tue Mar 18 14:11:46 2025 +0100" }, "message": "pinctrl: spacemit: PINCTRL_SPACEMIT_K1 should not default to y unconditionally\n\nMerely enabling compile-testing should not enable additional\nfunctionality.\n\nFixes: 7ff4faba63571c51 (\"pinctrl: spacemit: enable config option\")\nSigned-off-by: Geert Uytterhoeven \u003cgeert+renesas@glider.be\u003e\nReviewed-by: Yixun Lan \u003cdlan@gentoo.org\u003e\nReviewed-by: Javier Martinez Canillas \u003cjavierm@redhat.com\u003e\nTested-by: Alex Elder \u003celder@riscstar.com\u003e\nReviewed-by: Alex Elder \u003celder@riscstar.com\u003e\nLink: https://lore.kernel.org/6881b8d1ad74ac780af8a974e604b5ef3f5d4aad.1742198691.git.geert+renesas@glider.be\nSigned-off-by: Linus Walleij \u003clinus.walleij@linaro.org\u003e\n" }, { "commit": "9a81fc3480bf5dbe2bf80e278c440770f6ba2692", "tree": "6b2f3b4b4ac72a9e0f0e7600421b7dc314dab712", "parents": [ "9740890ee20e01f99ff1dde84c63dcf089fabb98" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@amazon.com", "time": "Tue Mar 11 18:38:48 2025 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Tue Mar 18 12:58:08 2025 +0100" }, "message": "ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().\n\nWhile creating a new IPv6, we could get a weird -ENOMEM when\nRTA_NH_ID is set and either of the conditions below is true:\n\n 1) CONFIG_IPV6_SUBTREES is enabled and rtm_src_len is specified\n 2) nexthop_get() fails\n\ne.g.)\n\n # strace ip -6 route add fe80::dead:beef:dead:beef nhid 1 from ::\n recvmsg(3, {msg_iov\u003d[{iov_base\u003d[...[\n {error\u003d-ENOMEM, msg\u003d[... [...]]},\n [{nla_len\u003d49, nla_type\u003dNLMSGERR_ATTR_MSG}, \"Nexthops can not be used with so\"...]\n ]], iov_len\u003d32768}], msg_iovlen\u003d1, msg_controllen\u003d0, msg_flags\u003d0}, 0) \u003d 148\n\nLet\u0027s set err explicitly after ip_fib_metrics_init() in\nip6_route_info_create().\n\nFixes: f88d8ea67fbd (\"ipv6: Plumb support for nexthop object in a fib6_info\")\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nReviewed-by: David Ahern \u003cdsahern@kernel.org\u003e\nLink: https://patch.msgid.link/20250312013854.61125-1-kuniyu@amazon.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "9740890ee20e01f99ff1dde84c63dcf089fabb98", "tree": "b29b97c989d93f65915729137d2d7670a8778b84", "parents": [ "d509d129be7a44a970a871ffd6f4d1abaae65bce" ], "author": { "name": "Kuniyuki Iwashima", "email": "kuniyu@amazon.com", "time": "Tue Mar 11 18:03:25 2025 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Tue Mar 18 12:55:11 2025 +0100" }, "message": "ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().\n\nfib_check_nh_v6_gw() expects that fib6_nh_init() cleans up everything\nwhen it fails.\n\nCommit 7dd73168e273 (\"ipv6: Always allocate pcpu memory in a fib6_nh\")\nmoved fib_nh_common_init() before alloc_percpu_gfp() within fib6_nh_init()\nbut forgot to add cleanup for fib6_nh-\u003enh_common.nhc_pcpu_rth_output in\ncase it fails to allocate fib6_nh-\u003ert6i_pcpu, resulting in memleak.\n\nLet\u0027s call fib_nh_common_release() and clear nhc_pcpu_rth_output in the\nerror path.\n\nNote that we can remove the fib6_nh_release() call in nh_create_ipv6()\nlater in net-next.git.\n\nFixes: 7dd73168e273 (\"ipv6: Always allocate pcpu memory in a fib6_nh\")\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nLink: https://patch.msgid.link/20250312010333.56001-1-kuniyu@amazon.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "d509d129be7a44a970a871ffd6f4d1abaae65bce", "tree": "52681639277587c2cded2261f64b0fe5a1d7f067", "parents": [ "daa624d3c2ddffdcbad140a9625a4064371db44f", "52d48a3d67e9288c6c51589e3a05040f57ccaa89" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Tue Mar 18 12:31:02 2025 +0100" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Tue Mar 18 12:31:03 2025 +0100" }, "message": "Merge tag \u0027linux-can-fixes-for-6.14-20250314\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can\n\nMarc Kleine-Budde says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\npull-request: can 2025-03-14\n\nthis is a pull request of 6 patches for net/main.\n\nThe first patch is by Vincent Mailhol and fixes an out of bound read\nin strscpy() in the ucan driver.\n\nOliver Hartkopp contributes a patch for the af_can statistics to use\natomic access in the hot path.\n\nThe next 2 patches are by Biju Das, target the rcar_canfd driver and\nfix the page entries in the AFL list.\n\nThe 2 patches by Haibo Chen for the flexcan driver fix the suspend and\nresume functions.\n\nlinux-can-fixes-for-6.14-20250314\n\n* tag \u0027linux-can-fixes-for-6.14-20250314\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can:\n can: flexcan: disable transceiver during system PM\n can: flexcan: only change CAN state when link up in system PM\n can: rcar_canfd: Fix page entries in the AFL list\n dt-bindings: can: renesas,rcar-canfd: Fix typo in pattern properties for R-Car V4M\n can: statistics: use atomic access in hot path\n can: ucan: fix out of bound read in strscpy() source\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20250314130909.2890541-1-mkl@pengutronix.de\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "daa624d3c2ddffdcbad140a9625a4064371db44f", "tree": "c7cf260ea2d8e3dfd4130750d1fe19dbfba8b47f", "parents": [ "2fc8a346625eb1abfe202062c7e6a13d76cde5ea" ], "author": { "name": "Felix Fietkau", "email": "nbd@nbd.name", "time": "Tue Mar 11 22:25:30 2025 +0100" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Tue Mar 18 11:50:22 2025 +0100" }, "message": "net: ipv6: fix TCP GSO segmentation with NAT\n\nWhen updating the source/destination address, the TCP/UDP checksum needs to\nbe updated as well.\n\nFixes: bee88cd5bd83 (\"net: add support for segmenting TCP fraglist GSO packets\")\nSigned-off-by: Felix Fietkau \u003cnbd@nbd.name\u003e\nLink: https://patch.msgid.link/20250311212530.91519-1-nbd@nbd.name\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "2fc8a346625eb1abfe202062c7e6a13d76cde5ea", "tree": "1a605dbb93939efb747cc83463452d94e2b3cf6f", "parents": [ "5f079290e5913a0060e059500b7d440990ac1066" ], "author": { "name": "Haiyang Zhang", "email": "haiyangz@microsoft.com", "time": "Tue Mar 11 13:12:54 2025 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Tue Mar 18 11:32:15 2025 +0100" }, "message": "net: mana: Support holes in device list reply msg\n\nAccording to GDMA protocol, holes (zeros) are allowed at the beginning\nor middle of the gdma_list_devices_resp message. The existing code\ncannot properly handle this, and may miss some devices in the list.\n\nTo fix, scan the entire list until the num_of_devs are found, or until\nthe end of the list.\n\nCc: stable@vger.kernel.org\nFixes: ca9c54d2d6a5 (\"net: mana: Add a driver for Microsoft Azure Network Adapter (MANA)\")\nSigned-off-by: Haiyang Zhang \u003chaiyangz@microsoft.com\u003e\nReviewed-by: Long Li \u003clongli@microsoft.com\u003e\nReviewed-by: Shradha Gupta \u003cshradhagupta@microsoft.com\u003e\nReviewed-by: Michal Swiatkowski \u003cmichal.swiatkowski@linux.intel.com\u003e\nLink: https://patch.msgid.link/1741723974-1534-1-git-send-email-haiyangz@microsoft.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "5f079290e5913a0060e059500b7d440990ac1066", "tree": "ee02612c979b38661cdb743ff95783318539169c", "parents": [ "4003c9e78778e93188a09d6043a74f7154449d43" ], "author": { "name": "Vignesh Raghavendra", "email": "vigneshr@ti.com", "time": "Tue Mar 11 21:12:59 2025 +0530" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Tue Mar 18 11:14:35 2025 +0100" }, "message": "net: ethernet: ti: am65-cpsw: Fix NAPI registration sequence\n\nRegistering the interrupts for TX or RX DMA Channels prior to registering\ntheir respective NAPI callbacks can result in a NULL pointer dereference.\nThis is seen in practice as a random occurrence since it depends on the\nrandomness associated with the generation of traffic by Linux and the\nreception of traffic from the wire.\n\nFixes: 681eb2beb3ef (\"net: ethernet: ti: am65-cpsw: ensure proper channel cleanup in error path\")\nSigned-off-by: Vignesh Raghavendra \u003cvigneshr@ti.com\u003e\nCo-developed-by: Siddharth Vadapalli \u003cs-vadapalli@ti.com\u003e\nSigned-off-by: Siddharth Vadapalli \u003cs-vadapalli@ti.com\u003e\nReviewed-by: Alexander Sverdlin \u003calexander.sverdlin@siemens.com\u003e\nReviewed-by: Roger Quadros \u003crogerq@kernel.org\u003e\nLink: https://patch.msgid.link/20250311154259.102865-1-s-vadapalli@ti.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "f2aac4c73c9945cce156fd58a9a2f31f2c8a90c7", "tree": "3d33152a180ff290dc9baaa6334f0686b1dd01c6", "parents": [ "a2f925a2f62254119cdaa360cfc9c0424bccd531" ], "author": { "name": "Niklas Cassel", "email": "cassel@kernel.org", "time": "Mon Mar 17 18:03:49 2025 +0100" }, "committer": { "name": "Niklas Cassel", "email": "cassel@kernel.org", "time": "Tue Mar 18 10:11:28 2025 +0100" }, "message": "ata: libata-core: Add ATA_QUIRK_NO_LPM_ON_ATI for certain Samsung SSDs\n\nBefore commit 7627a0edef54 (\"ata: ahci: Drop low power policy board type\")\nthe ATI AHCI controllers specified board type \u0027board_ahci\u0027 rather than\nboard type \u0027board_ahci\u0027. This means that LPM was historically not enabled\nfor the ATI AHCI controllers.\n\nBy looking at commit 7a8526a5cd51 (\"libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI\nfor Samsung 860 and 870 SSD.\"), it is clear that, for some unknown reason,\nthat Samsung SSDs do not play nice with ATI AHCI controllers. (When using\nother AHCI controllers, NCQ can be enabled on these Samsung SSDs without\nissues.)\n\nIn a similar way, from user reports, it is clear the ATI AHCI controllers\ncan enable LPM on e.g. Maxtor HDDs perfectly fine, but when enabling LPM\non certain Samsung SSDs, things break. (E.g. the SSDs will not get detected\nby the ATI AHCI controller even after a COMRESET.)\n\nYet, when using LPM on these Samsung SSDs with other AHCI controllers, e.g.\nIntel AHCI controllers, these Samsung drives appear to work perfectly fine.\n\nConsidering that the combination of ATI + Samsung, for some unknown reason,\ndoes not seem to work well, disable LPM when detecting an ATI AHCI\ncontroller with a problematic Samsung SSD.\n\nApply this new ATA_QUIRK_NO_LPM_ON_ATI quirk for all Samsung SSDs that have\nalready been reported to not play nice with ATI (ATA_QUIRK_NO_NCQ_ON_ATI).\n\nFixes: 7627a0edef54 (\"ata: ahci: Drop low power policy board type\")\nSuggested-by: Hans de Goede \u003chdegoede@redhat.com\u003e\nReported-by: Eric \u003ceric.4.debian@grabatoulnz.fr\u003e\nCloses: https://lore.kernel.org/linux-ide/Z8SBZMBjvVXA7OAK@eldamar.lan/\nTested-by: Eric \u003ceric.4.debian@grabatoulnz.fr\u003e\nReviewed-by: Damien Le Moal \u003cdlemoal@kernel.org\u003e\nLink: https://lore.kernel.org/r/20250317170348.1748671-2-cassel@kernel.org\nSigned-off-by: Niklas Cassel \u003ccassel@kernel.org\u003e\n" }, { "commit": "11092db5b57377ac99e6339cfd16ca35ef011f3c", "tree": "826afcbcff13ec4d4b10b3535db7932dbdac01c8", "parents": [ "dec1277875a5974413068bfb67df7e87e51a189b" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Mon Mar 17 23:06:01 2025 -0400" }, "committer": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Tue Mar 18 08:46:08 2025 +0100" }, "message": "efivarfs: fix NULL dereference on resume\n\nLSMs often inspect the path.mnt of files in the security hooks, and this\ncauses a NULL deref in efivarfs_pm_notify() because the path is\nconstructed with a NULL path.mnt.\n\nFix by obtaining from vfs_kern_mount() instead, and being very careful\nto ensure that deactivate_super() (potentially triggered by a racing\nuserspace umount) is not called directly from the notifier, because it\nwould deadlock when efivarfs_kill_sb() tried to unregister the notifier\nchain.\n\n[ Al notes:\n\tUmm... That\u0027s probably safe, but not as a long-term solution -\n\tit\u0027s too intimately dependent upon fs/super.c internals. The\n\treasons why you can\u0027t run into -\u003es_umount deadlock here are\n\tnon-trivial... ]\n\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\nLink: https://lore.kernel.org/r/e54e6a2f-1178-4980-b771-4d9bafc2aa47@tnxip.de\nLink: https://lore.kernel.org/r/3e998bf87638a442cbc6864cdcd3d8d9e08ce3e3.camel@HansenPartnership.com\nSigned-off-by: Ard Biesheuvel \u003cardb@kernel.org\u003e\n" }, { "commit": "76b6905c11fd3c6dc4562aefc3e8c4429fefae1e", "tree": "e8eaee7c89f7974293d893509f12ab68df5cdc21", "parents": [ "9130945f81613bf1b7103e27accbbea924d97c18", "800f1059c99e2b39899bdc67a7593a7bea6375d8" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Mar 17 22:27:27 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Mar 17 22:27:27 2025 -0700" }, "message": "Merge tag \u0027mm-hotfixes-stable-2025-03-17-20-09\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm\n\nPull misc hotfixes from Andrew Morton:\n \"15 hotfixes. 7 are cc:stable and the remainder address post-6.13\n issues or aren\u0027t considered necessary for -stable kernels.\n\n 13 are for MM and the other two are for squashfs and procfs.\n\n All are singletons. Please see the individual changelogs for details\"\n\n* tag \u0027mm-hotfixes-stable-2025-03-17-20-09\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm:\n mm/page_alloc: fix memory accept before watermarks gets initialized\n mm: decline to manipulate the refcount on a slab page\n memcg: drain obj stock on cpu hotplug teardown\n mm/huge_memory: drop beyond-EOF folios with the right number of refs\n selftests/mm: run_vmtests.sh: fix half_ufd_size_MB calculation\n mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT\n mm: memcontrol: fix swap counter leak from offline cgroup\n mm/vma: do not register private-anon mappings with khugepaged during mmap\n squashfs: fix invalid pointer dereference in squashfs_cache_delete\n mm/migrate: fix shmem xarray update during migration\n mm/hugetlb: fix surplus pages in dissolve_free_huge_page()\n mm/damon/core: initialize damos-\u003ewalk_completed in damon_new_scheme()\n mm/damon: respect core layer filters\u0027 allowance decision on ops layer\n filemap: move prefaulting out of hot write path\n proc: fix UAF in proc_get_inode()\n" }, { "commit": "9130945f81613bf1b7103e27accbbea924d97c18", "tree": "2020a2bbcfc032aacfe70341545f2c6fdc734d01", "parents": [ "fc444ada131001812c5d10b380837238c9cf7c8c" ], "author": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Mon Mar 17 08:47:30 2025 -0500" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Mar 17 22:20:48 2025 -0700" }, "message": "MAINTAINERS: Remove myself\n\nUnfortunately I no longer have time to meaningfully take part in the\nlinux kernel development.\n\nSigned-off-by: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "65a99264f5e5a2bcc8c905f7b2d633e8991672ac", "tree": "cd1c55aab643bbdfd2aecd405f793d8f4f503e1f", "parents": [ "4701f33a10702d5fc577c32434eb62adde0a1ae1" ], "author": { "name": "Namhyung Kim", "email": "namhyung@kernel.org", "time": "Mon Mar 17 09:37:55 2025 -0700" }, "committer": { "name": "Ingo Molnar", "email": "mingo@kernel.org", "time": "Mon Mar 17 23:37:31 2025 +0100" }, "message": "perf/x86: Check data address for IBS software filter\n\nThe IBS software filter is filtering kernel samples for regular users in\nthe PMI handler. It checks the instruction address in the IBS register to\ndetermine if it was in kernel mode or not.\n\nBut it turns out that it\u0027s possible to report a kernel data address even\nif the instruction address belongs to user-space. Matteo Rizzo\nfound that when an instruction raises an exception, IBS can report some\nkernel data addresses like IDT while holding the faulting instruction\u0027s\nRIP. To prevent an information leak, it should double check if the data\naddress in PERF_SAMPLE_DATA is in the kernel space as well.\n\n[ mingo: Clarified the changelog ]\n\nSuggested-by: Matteo Rizzo \u003cmatteorizzo@google.com\u003e\nSigned-off-by: Namhyung Kim \u003cnamhyung@kernel.org\u003e\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nLink: https://lore.kernel.org/r/20250317163755.1842589-1-namhyung@kernel.org\n" }, { "commit": "7643dbd9db09fffebb4a62cd27599f17f4148b17", "tree": "53a3acc29d35d2ca5692fcf1723872660f27d0d4", "parents": [ "4701f33a10702d5fc577c32434eb62adde0a1ae1" ], "author": { "name": "Paulo Alcantara", "email": "pc@manguebit.com", "time": "Mon Mar 17 16:39:22 2025 -0300" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Mon Mar 17 17:33:13 2025 -0500" }, "message": "smb: client: don\u0027t retry IO on failed negprotos with soft mounts\n\nIf @server-\u003etcpStatus is set to CifsNeedReconnect after acquiring\n@ses-\u003esession_mutex in smb2_reconnect() or cifs_reconnect_tcon(), it\nmeans that a concurrent thread failed to negotiate, in which case the\nserver is no longer responding to any SMB requests, so there is no\npoint making the caller retry the IO by returning -EAGAIN.\n\nFix this by returning -EHOSTDOWN to the callers on soft mounts.\n\nCc: David Howells \u003cdhowells@redhat.com\u003e\nReported-by: Jay Shin \u003cjaeshin@redhat.com\u003e\nSigned-off-by: Paulo Alcantara (Red Hat) \u003cpc@manguebit.com\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "fc444ada131001812c5d10b380837238c9cf7c8c", "tree": "896360a1ee43cfcbf10d571105162fe38df5ec01", "parents": [ "47c7efa4f0c335d039d9f5795022ba9b589cbe4a", "45d5fe1c53baaed1fb3043f45d1e15ebb4bbe86a" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Mar 17 14:40:40 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Mar 17 14:40:40 2025 -0700" }, "message": "Merge tag \u0027soc-fixes-6.14-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc\n\nPull SoC fixes from Arnd Bergmann:\n \"The majority of these last fixes are for devicetree files.\n\n These address two important regressions for the Qualcomm SMMU and the\n Raspberry Pi 4 USB controller, as well as a larger number of patches\n fixing minor mistakes in board specific files for Rockchips, i.MX,\n starfive and broadcom.\n\n The non-DT changes are\n\n - A fix for an old boot regression on Renesas shmobile chips\n\n - Another boot time regression for for the Qualcomm PDR SoC driver,\n among a few other Qualcomm firmware driver fixes for efivars and\n tzmem\n\n - Minor Kconfig fixes for davinci and OMAP1\n\n - Minor code fixes for sparx5 reset controllers, OMAP memory\n controller, i.MX SCU, cpufreq and SoC drivers and a Hisilicon SoC\n driver\n\n - One more update to the Asahi maintainers, adding Neal Gompa as a\n reviewer\"\n\n* tag \u0027soc-fixes-6.14-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc: (35 commits)\n ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX\n soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly\n memory: omap-gpmc: drop no compatible check\n reset: mchp: sparx5: Fix for lan966x\n ARM: shmobile: smp: Enforce shmobile_smp_* alignment\n MAINTAINERS: Add myself (Neal Gompa) as a reviewer for ARM Apple support\n MAINTAINERS: Add apple-spi driver \u0026 binding files\n arm64: dts: rockchip: slow down emmc freq for rock 5 itx\n ARM: dts: BCM5301X: Fix switch port labels of ASUS RT-AC3200\n ARM: dts: BCM5301X: Fix switch port labels of ASUS RT-AC5300\n ARM: dts: bcm2711: Don\u0027t mark timer regs unconfigured\n ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP\n arm64: dts: rockchip: Add missing PCIe supplies to RockPro64 board dtsi\n arm64: dts: rockchip: Add avdd HDMI supplies to RockPro64 board dtsi\n arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1\n arm64: dts: rockchip: fix pinmux of UART5 for PX30 Ringneck on Haikou\n arm64: dts: rockchip: fix pinmux of UART0 for PX30 Ringneck on Haikou\n arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S\n arm64: dts: bcm2712: PL011 UARTs are actually r1p5\n ARM: dts: bcm2711: PL011 UARTs are actually r1p5\n ...\n" }, { "commit": "47c7efa4f0c335d039d9f5795022ba9b589cbe4a", "tree": "05f46dca4b734c61df2c6f01e654eda303c5f955", "parents": [ "4701f33a10702d5fc577c32434eb62adde0a1ae1", "ac91052f0ae5be9e46211ba92cc31c0e3b0a933a" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Mar 17 14:30:31 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Mar 17 14:30:31 2025 -0700" }, "message": "Merge tag \u0027probes-fixes-v6.14-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace\n\nPull probes fixes from Masami Hiramatsu:\n\n - Clean up tprobe correctly when module unload\n\n Tracepoint probes do not set TRACEPOINT_STUB on the \u0027tpoint\u0027 pointer\n when unloading a module, thus they show as a normal \u0027fprobe\u0027 instead\n of \u0027tprobe\u0027 and never come back\n\n - Fix leakage of tprobe module refcount\n\n When a tprobe\u0027s target module is loaded, it gets the module\u0027s\n refcount in the module notifier but forgot to put it after\n registering the probe on it.\n\n Fix it by getting the refcount only when registering tprobe.\n\n* tag \u0027probes-fixes-v6.14-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace:\n tracing: tprobe-events: Fix leakage of module refcount\n tracing: tprobe-events: Fix to clean up tprobe correctly when module unload\n" }, { "commit": "dec1277875a5974413068bfb67df7e87e51a189b", "tree": "76c2fc5a217054ec4877cd55296bc34306b755ba", "parents": [ "cb16dfed0093217a68c0faa9394fa5823927e04c" ], "author": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Mon Mar 17 08:23:11 2025 +0100" }, "committer": { "name": "Ard Biesheuvel", "email": "ardb@kernel.org", "time": "Mon Mar 17 18:19:02 2025 +0100" }, "message": "efivarfs: use I_MUTEX_CHILD nested lock to traverse variables on resume\n\nsyzbot warns about a potential deadlock, but this is a false positive\nresulting from a missing lockdep annotation: iterate_dir() locks the\nparent whereas the inode_lock() it warns about locks the child, which is\nguaranteed to be a different lock.\n\nSo use inode_lock_nested() instead with the appropriate lock class.\n\nReported-by: syzbot+019072ad24ab1d948228@syzkaller.appspotmail.com\nSuggested-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: Ard Biesheuvel \u003cardb@kernel.org\u003e\n" }, { "commit": "b65439d9015024c37c6b8a17c0569ec44675a979", "tree": "3f46ba4e739a23fef8fa3c0e54faf5aeed96db19", "parents": [ "1742e7e978babb0f548f85c4c6bcfebe13b88722" ], "author": { "name": "ChiYuan Huang", "email": "cy_huang@richtek.com", "time": "Mon Mar 17 18:06:22 2025 +0800" }, "committer": { "name": "Mark Brown", "email": "broonie@kernel.org", "time": "Mon Mar 17 12:45:37 2025 +0000" }, "message": "regulator: rtq2208: Fix the LDO DVS capability\n\nUse the hidden bank register to identify whether the LDO voltage is\nfixed or variable. Remove the read of \u0027richtek,fixed-microvolt\u0027\nproperty.\n\nFixes: af1296d15d89 (\"regulator: rtq2208: Add fixed LDO VOUT property and check that matches the constraints\")\nSigned-off-by: ChiYuan Huang \u003ccy_huang@richtek.com\u003e\nLink: https://patch.msgid.link/dae0321b710518ce32260336e3cc9caf2ba84215.1742204502.git.cy_huang@richtek.com\nSigned-off-by: Mark Brown \u003cbroonie@kernel.org\u003e\n" }, { "commit": "1742e7e978babb0f548f85c4c6bcfebe13b88722", "tree": "4fff041ae51c5c4b24e849b474827887bf4c95d3", "parents": [ "2c7a50bec4958f1d1c84d19cde518d0e96a676fd" ], "author": { "name": "ChiYuan Huang", "email": "cy_huang@richtek.com", "time": "Mon Mar 17 18:06:21 2025 +0800" }, "committer": { "name": "Mark Brown", "email": "broonie@kernel.org", "time": "Mon Mar 17 12:45:36 2025 +0000" }, "message": "regulator: rtq2208: Fix incorrect buck converter phase mapping\n\nUse the hidden bank RG to get the correct buck converter phase mapping.\n\nFixes: 85a11f55621a (\"regulator: rtq2208: Add Richtek RTQ2208 SubPMIC\")\nSigned-off-by: ChiYuan Huang \u003ccy_huang@richtek.com\u003e\nLink: https://patch.msgid.link/ae3245aa713f76000dbd20b4ad6f66d30611d3b8.1742204502.git.cy_huang@richtek.com\nSigned-off-by: Mark Brown \u003cbroonie@kernel.org\u003e\n" } ], "next": "815f80ad20b63830949a77c816e35395d5d55144" }