)]}' { "log": [ { "commit": "0739473694c4878513031006829f1030ec850bc2", "tree": "aa1680b0e2e9ae0f8ad631639fb803f2991f0863", "parents": [ "284fc30e66e602a5df58393860f67477d6a79339", "32058c38d3b79a28963a59ac0353644dc24775cd" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 14:06:02 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 14:06:02 2025 -0700" }, "message": "Merge tag \u0027for-6.18/hpfs-changes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm\n\nPull hpfs updates from Mikulas Patocka:\n\n - Avoid -Wflex-array-member-not-at-end warnings\n\n - Replace simple_strtoul with kstrtoint\n\n - Fix error code for new_inode() failure\n\n* tag \u0027for-6.18/hpfs-changes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm:\n fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink\n hpfs: Replace simple_strtoul with kstrtoint in hpfs_parse_param\n fs: hpfs: Avoid multiple -Wflex-array-member-not-at-end warnings\n" }, { "commit": "284fc30e66e602a5df58393860f67477d6a79339", "tree": "d55041b765fc05e69575f65bea05cf5a81ccdd3d", "parents": [ "1e5d41b981bc550f41b198706e259a45686f3b5a", "c4b6ddcf01f63a710c24a128d134d3fa51978d6c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 14:02:14 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 14:02:14 2025 -0700" }, "message": "Merge tag \u0027drm-next-2025-10-11-1\u0027 of https://gitlab.freedesktop.org/drm/kernel\n\nPull more drm fixes from Dave Airlie:\n \"Just the follow up fixes for rc1 from the next branch, amdgpu and xe\n mostly with a single v3d fix in there.\n\n amdgpu:\n - DC DCE6 fixes\n - GPU reset fixes\n - Secure diplay messaging cleanup\n - MES fix\n - GPUVM locking fixes\n - PMFW messaging cleanup\n - PCI US/DS switch handling fix\n - VCN queue reset fix\n - DC FPU handling fix\n - DCN 3.5 fix\n - DC mirroring fix\n\n amdkfd:\n - Fix kfd process ref leak\n - mmap write lock handling fix\n - Fix comments in IOCTL\n\n xe:\n - Fix build with clang 16\n - Fix handling of invalid configfs syntax usage and spell out the\n expected syntax in the documentation\n - Do not try late bind firmware when running as VF since it shouldn\u0027t\n handle firmware loading\n - Fix idle assertion for local BOs\n - Fix uninitialized variable for late binding\n - Do not require perfmon_capable to expose free memory at page\n granularity. Handle it like other drm drivers do\n - Fix lock handling on suspend error path\n - Fix I2C controller resume after S3\n\n v3d:\n - fix fence locking\"\n\n* tag \u0027drm-next-2025-10-11-1\u0027 of https://gitlab.freedesktop.org/drm/kernel: (34 commits)\n drm/amd/display: Incorrect Mirror Cositing\n drm/amd/display: Enable Dynamic DTBCLK Switch\n drm/amdgpu: Report individual reset error\n drm/amdgpu: partially revert \"revert to old status lock handling v3\"\n drm/amd/display: Fix unsafe uses of kernel mode FPU\n drm/amd/pm: Disable VCN queue reset on SMU v13.0.6 due to regression\n drm/amdgpu: Fix general protection fault in amdgpu_vm_bo_reset_state_machine\n drm/amdgpu: Check swus/ds for switch state save\n drm/amdkfd: Fix two comments in kfd_ioctl.h\n drm/amd/pm: Avoid interface mismatch messaging\n drm/amdgpu: Merge amdgpu_vm_set_pasid into amdgpu_vm_init\n drm/amd/amdgpu: Fix the mes version that support inv_tlbs\n drm/amd: Check whether secure display TA loaded successfully\n drm/amdkfd: Fix mmap write lock not release\n drm/amdkfd: Fix kfd process ref leaking when userptr unmapping\n drm/amdgpu: Fix for GPU reset being blocked by KIQ I/O.\n drm/amd/display: Disable scaling on DCE6 for now\n drm/amd/display: Properly disable scaling on DCE6\n drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6\n drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs\n ...\n" }, { "commit": "1e5d41b981bc550f41b198706e259a45686f3b5a", "tree": "ed48a6e8d51a655fabfa519e6ccac41cc00ec9cf", "parents": [ "f76b1683d16dcd5299a9b67d8ef45fe8d29cb2e6", "5ca5f00a167cdd28bcfeeae6ddd370b13ac00a2a" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 13:59:38 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 13:59:38 2025 -0700" }, "message": "Merge tag \u0027drm-fixes-2025-10-11\u0027 of https://gitlab.freedesktop.org/drm/kernel\n\nPull drm fixes from Dave Airlie:\n \"Some fixes leftover from our fixes branch, just nouveau and vmwgfx:\n\n nouveau:\n - Return errno code from TTM move helper\n\n vmwgfx:\n - Fix null-ptr access in cursor code\n - Fix UAF in validation\n - Use correct iterator in validation\"\n\n* tag \u0027drm-fixes-2025-10-11\u0027 of https://gitlab.freedesktop.org/drm/kernel:\n drm/nouveau: fix bad ret code in nouveau_bo_move_prep\n drm/vmwgfx: Fix copy-paste typo in validation\n drm/vmwgfx: Fix Use-after-free in validation\n drm/vmwgfx: Fix a null-ptr access in the cursor snooper\n" }, { "commit": "5ca5f00a167cdd28bcfeeae6ddd370b13ac00a2a", "tree": "f86f00b3e19667f9b636bcaa007d63b0e1b65393", "parents": [ "e5f0a698b34ed76002dc5cff3804a61c80233a7a", "e4bea919584ff292c9156cf7d641a2ab3cbe27b0" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Sat Oct 11 06:17:06 2025 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Sat Oct 11 06:17:13 2025 +1000" }, "message": "Merge tag \u0027drm-misc-fixes-2025-10-09\u0027 of https://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes\n\nShort summary of fixes pull:\n\nnouveau:\n- Return errno code from TTM move helper\n\nvmwgfx:\n- Fix null-ptr access in cursor code\n- Fix UAF in validation\n- Use correct iterator in validation\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Thomas Zimmermann \u003ctzimmermann@suse.de\u003e\nLink: https://lore.kernel.org/r/20251009120004.GA17570@linux.fritz.box\n" }, { "commit": "f76b1683d16dcd5299a9b67d8ef45fe8d29cb2e6", "tree": "6f8e70550df6ea347b030cdcee779aadcf5e0569", "parents": [ "8bd9238e511d02831022ff0270865c54ccc482d6", "ce740955b238761ec1d8cf0590d7e6802d3a813a" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 13:05:40 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 13:05:40 2025 -0700" }, "message": "Merge tag \u0027devicetree-fixes-for-6.18-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux\n\nPull devicetree fixes from Rob Herring:\n\n - Allow child nodes on renesas-bsc bus binding\n\n - Drop node name pattern on allwinner,sun50i-a64-de2 bus binding\n\n - Switch DT patchwork to kernel.org from ozlabs.org\n\n - Fix some typos in docs and bindings\n\n - Fix reference count in PCI node unittest\n\n* tag \u0027devicetree-fixes-for-6.18-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux:\n dt-bindings: bus: renesas-bsc: allow additional properties\n dt-bindings: bus: allwinner,sun50i-a64-de2: don\u0027t check node names\n MAINTAINERS: Move DT patchwork to kernel.org\n of: unittest: Fix device reference count leak in of_unittest_pci_node_verify\n of: doc: Fix typo in doc comments.\n dt-bindings: mmc: Correct typo \"upto\" to \"up to\"\n" }, { "commit": "ce740955b238761ec1d8cf0590d7e6802d3a813a", "tree": "17e8968c3df0c2dc733d9ece400266b70f56e438", "parents": [ "f7045387a6816d51d462447af4522785e1c7251c" ], "author": { "name": "Wolfram Sang", "email": "wsa+renesas@sang-engineering.com", "time": "Thu Oct 09 20:34:53 2025 +0200" }, "committer": { "name": "Rob Herring (Arm)", "email": "robh@kernel.org", "time": "Fri Oct 10 13:51:15 2025 -0500" }, "message": "dt-bindings: bus: renesas-bsc: allow additional properties\n\nAllow additional properties to enable devices attached to the bus.\nFixes warnings like these:\n\narch/arm/boot/dts/renesas/sh73a0-kzm9g.dtb: bus@fec10000 (renesas,bsc-sh73a0): Unevaluated properties are not allowed (\u0027ethernet@10000000\u0027 was unexpected)\narch/arm/boot/dts/renesas/r8a73a4-ape6evm.dtb: bus@fec10000 (renesas,bsc-r8a73a4): Unevaluated properties are not allowed (\u0027ethernet@8000000\u0027, \u0027flash@0\u0027 were unexpected)\n\nReviewed-by: Geert Uytterhoeven \u003cgeert+renesas@glider.be\u003e\nSigned-off-by: Wolfram Sang \u003cwsa+renesas@sang-engineering.com\u003e\nSigned-off-by: Rob Herring (Arm) \u003crobh@kernel.org\u003e\n" }, { "commit": "f7045387a6816d51d462447af4522785e1c7251c", "tree": "ab9f6a9bd546b25719ee0413379748f5ef7e2415", "parents": [ "dc6b724974018c1b3b6fd704899782da3f12f145" ], "author": { "name": "Wolfram Sang", "email": "wsa+renesas@sang-engineering.com", "time": "Thu Oct 09 20:37:43 2025 +0200" }, "committer": { "name": "Rob Herring (Arm)", "email": "robh@kernel.org", "time": "Fri Oct 10 13:50:30 2025 -0500" }, "message": "dt-bindings: bus: allwinner,sun50i-a64-de2: don\u0027t check node names\n\nNode names are already and properly checked by the core schema. No need\nto do it again.\n\nSigned-off-by: Wolfram Sang \u003cwsa+renesas@sang-engineering.com\u003e\n[robh: Also drop [A-F] in unit address]\nSigned-off-by: Rob Herring (Arm) \u003crobh@kernel.org\u003e\n" }, { "commit": "8bd9238e511d02831022ff0270865c54ccc482d6", "tree": "1aa0a3996b9409a150a983ed1ad65203fd5c804e", "parents": [ "91b436fc925ca58625e4230f53238e955223c385", "d74d6c0e98958aa0bdb6f0a93258a856bda58b97" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 11:30:19 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 11:30:19 2025 -0700" }, "message": "Merge tag \u0027ceph-for-6.18-rc1\u0027 of https://github.com/ceph/ceph-client\n\nPull ceph updates from Ilya Dryomov:\n\n - some messenger improvements (Eric and Max)\n\n - address an issue (also affected userspace) of incorrect permissions\n being granted to users who have access to multiple different CephFS\n instances within the same cluster (Kotresh)\n\n - a bunch of assorted CephFS fixes (Slava)\n\n* tag \u0027ceph-for-6.18-rc1\u0027 of https://github.com/ceph/ceph-client:\n ceph: add bug tracking system info to MAINTAINERS\n ceph: fix multifs mds auth caps issue\n ceph: cleanup in ceph_alloc_readdir_reply_buffer()\n ceph: fix potential NULL dereference issue in ceph_fill_trace()\n libceph: add empty check to ceph_con_get_out_msg()\n libceph: pass the message pointer instead of loading con-\u003eout_msg\n libceph: make ceph_con_get_out_msg() return the message pointer\n ceph: fix potential race condition on operations with CEPH_I_ODIRECT flag\n ceph: refactor wake_up_bit() pattern of calling\n ceph: fix potential race condition in ceph_ioctl_lazyio()\n ceph: fix overflowed constant issue in ceph_do_objects_copy()\n ceph: fix wrong sizeof argument issue in register_session()\n ceph: add checking of wait_for_completion_killable() return value\n ceph: make ceph_start_io_*() killable\n libceph: Use HMAC-SHA256 library instead of crypto_shash\n" }, { "commit": "91b436fc925ca58625e4230f53238e955223c385", "tree": "a388b43fc810e25c6cfc75612886619c4c02c889", "parents": [ "917167ed1211b7037534b6e6d7815778b57d310b", "b30c32c784bf29735dabff15443a5feeafd26d1c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 11:23:57 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 11:23:57 2025 -0700" }, "message": "Merge tag \u0027v6.18-rc-part2-smb-client-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6\n\nPull more smb client updates from Steve French:\n\n - fix i_size in fallocate\n\n - two truncate fixes\n\n - utime fix\n\n - minor cleanups\n\n - SMB1 fixes\n\n - improve error check in read\n\n - improve perf of copy file_range (copy_chunk)\n\n* tag \u0027v6.18-rc-part2-smb-client-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6:\n cifs: update internal version number\n cifs: Add comments for DeletePending assignments in open functions\n cifs: Add fallback code path for cifs_mkdir_setinfo()\n cifs: Allow fallback code in smb_set_file_info() also for directories\n cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points\n smb: client: remove cfids_invalidation_worker\n smb: client: remove redudant assignment in cifs_strict_fsync()\n smb: client: fix race with fallocate(2) and AIO+DIO\n smb: client: fix missing timestamp updates after utime(2)\n smb: client: fix missing timestamp updates after ftruncate(2)\n smb: client: fix missing timestamp updates with O_TRUNC\n cifs: Fix copy_to_iter return value check\n smb: client: batch SRV_COPYCHUNK entries to cut round trips\n smb: client: Omit an if branch in smb2_find_smb_tcon()\n smb: client: Return directly after a failed genlmsg_new() in cifs_swn_send_register_message()\n smb: client: Use common code in cifs_do_create()\n smb: client: Improve unlocking of a mutex in cifs_get_swn_reg()\n smb: client: Return a status code only as a constant in cifs_spnego_key_instantiate()\n smb: client: Use common code in cifs_lookup()\n smb: client: Reduce the scopes for a few variables in two functions\n" }, { "commit": "917167ed1211b7037534b6e6d7815778b57d310b", "tree": "197930bb2e93277c17149cfb9adb05c218ab1043", "parents": [ "1b1391b9c4bfadcaeb89a87edf6c3520dd349e35", "4c8bad3ed035ab85ad9b0d247154be43a53ef84d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 11:20:19 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 11:20:19 2025 -0700" }, "message": "Merge tag \u0027xtensa-20251010\u0027 of https://github.com/jcmvbkbc/linux-xtensa\n\nPull Xtensa updates from Max Filippov:\n\n - minor cleanups\n\n* tag \u0027xtensa-20251010\u0027 of https://github.com/jcmvbkbc/linux-xtensa:\n xtensa: use HZ_PER_MHZ in platform_calibrate_ccount\n xtensa: simdisk: add input size check in proc_write_simdisk\n" }, { "commit": "1b1391b9c4bfadcaeb89a87edf6c3520dd349e35", "tree": "dd540f1727e470ae457a2a18c6cc095e3177f0ec", "parents": [ "eba41c0173c8c27702b720730ed9d399088409f0", "455281c0ef4e2cabdfe2e8b83fa6010d5210811c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 10:37:13 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 10:37:13 2025 -0700" }, "message": "Merge tag \u0027block-6.18-20251009\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux\n\nPull block fixes from Jens Axboe:\n\n - Don\u0027t include __GFP_NOWARN for loop worker allocation, as it already\n uses GFP_NOWAIT which has __GFP_NOWARN set already\n\n - Small series cleaning up the recent bio_iov_iter_get_pages() changes\n\n - loop fix for leaking the backing reference file, if validation fails\n\n - Update of a comment pertaining to disk/partition stat locking\n\n* tag \u0027block-6.18-20251009\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux:\n loop: remove redundant __GFP_NOWARN flag\n block: move bio_iov_iter_get_bdev_pages to block/fops.c\n iomap: open code bio_iov_iter_get_bdev_pages\n block: rename bio_iov_iter_get_pages_aligned to bio_iov_iter_get_pages\n block: remove bio_iov_iter_get_pages\n block: Update a comment of disk statistics\n loop: fix backing file reference leak on validation error\n" }, { "commit": "eba41c0173c8c27702b720730ed9d399088409f0", "tree": "e44c1e5a1a303c6cb7678e502d03763b4196e33d", "parents": [ "8cc8ea228c4199482cf087fc6ed2d6e31b7a49e2", "e9a9dcb4ccb32446165800a9d83058e95c4833d2" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 10:25:24 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 10:25:24 2025 -0700" }, "message": "Merge tag \u0027io_uring-6.18-20251009\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux\n\nPull io_uring fixes from Jens Axboe:\n\n - Fixup indentation in the UAPI header\n\n - Two fixes for zcrx. One fixes receiving too much in some cases, and\n the other deals with not correctly incrementing the source in the\n fallback copy loop\n\n - Fix for a race in the IORING_OP_WAITID command, where there was a\n small window where the request would be left on the wait_queue_head\n list even though it was being canceled/completed\n\n - Update liburing git URL in the kernel tree\n\n* tag \u0027io_uring-6.18-20251009\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux:\n io_uring/zcrx: increment fallback loop src offset\n io_uring/zcrx: fix overshooting recv limit\n io_uring: use tab indentation for IORING_SEND_VECTORIZED comment\n io_uring/waitid: always prune wait queue entry in io_waitid_wait()\n io_uring: update liburing git URL\n" }, { "commit": "8cc8ea228c4199482cf087fc6ed2d6e31b7a49e2", "tree": "d1a5b15066f0e6d92f921df1075ebaa1bebce693", "parents": [ "fdfa38e95e1229ec2fb2f18540987c97f861d470", "f4edb5c52c93b1bc676064472fb517566a3e2129" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 10:01:55 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 10:01:55 2025 -0700" }, "message": "Merge tag \u0027parisc-for-6.18-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux\n\nPull parisc updates from Helge Deller:\n \"Minor enhancements and fixes, specifically:\n\n - report emulation and alignment faults via perf\n\n - add initial kernel-side support for perf_events\n\n - small initialization fixes in the parisc firmware layer\n\n - adjust TC* constants and avoid referencing termio structs to avoid\n userspace build errors\"\n\n* tag \u0027parisc-for-6.18-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux:\n parisc: Fix iodc and device path return values on old machines\n parisc: Firmware: Fix returned path for PDC_MODULE_FIND on older machines\n parisc: Add initial kernel-side perf_event support\n parisc: Report software alignment faults via perf\n parisc: Report emulation faults via perf\n parisc: don\u0027t reference obsolete termio struct for TC* constants\n parisc: Remove spurious if statement from raw_copy_from_user()\n" }, { "commit": "fdfa38e95e1229ec2fb2f18540987c97f861d470", "tree": "1923b5623c5c697c09ad8923ce1cd7ba40c1f9e4", "parents": [ "06a88f47990974f1322c2bf2e8c5125f8a2f69fe", "ca7a2317993efa26eb2100a1523548f1b3a07af0" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 09:55:19 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 09:55:19 2025 -0700" }, "message": "Merge tag \u0027sound-fix-6.18-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound\n\nPull sound fixes from Takashi Iwai:\n \"A few more small fixes for 6.18-rc1.\n\n Most of changes are about ASoC Intel and SOF drivers, while a few\n other device-specific fixes are found for HD-audio, USB-audio, ASoC\n RT722VB and Meson\"\n\n* tag \u0027sound-fix-6.18-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound:\n ASoC: rt722: add settings for rt722VB\n ASoC: meson: aiu-encoder-i2s: fix bit clock polarity\n ALSA: usb: fpc: replace kmalloc_array followed by copy_from_user with memdup_array_user\n ALSA: hda/tas2781: Enable init_profile_id for device initialization\n ALSA: emu10k1: Fix typo in docs\n ALSA: hda/realtek: Add quirk for ASUS ROG Zephyrus Duo\n ASoC: SOF: Intel: Read the LLP via the associated Link DMA channel\n ASoC: SOF: ipc4-pcm: do not report invalid delay values\n ASoC: SOF: sof-audio: add dev_dbg_ratelimited wrapper\n ASoC: SOF: Intel: hda-pcm: Place the constraint on period time instead of buffer time\n ASoC: SOF: ipc4-topology: Account for different ChainDMA host buffer size\n ASoC: SOF: ipc4-topology: Correct the minimum host DMA buffer size\n ASoC: SOF: ipc4-pcm: fix start offset calculation for chain DMA\n ASoC: SOF: ipc4-pcm: fix delay calculation when DSP resamples\n ASoC: SOF: ipc3-topology: Fix multi-core and static pipelines tear down\n ALSA: hda/hdmi: Add pin fix for HP ProDesk model\n" }, { "commit": "06a88f47990974f1322c2bf2e8c5125f8a2f69fe", "tree": "e421715a593f8f328c66f9cf153d12cd0fcda70f", "parents": [ "9976831f401eeb302d699b2d37624153d7cd2892", "15df28699b28d6b49dc305040c4e26a9553df07a" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 09:36:23 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 09:36:23 2025 -0700" }, "message": "Merge tag \u0027fbdev-for-6.18-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev\n\nPull fbdev updates from Helge Deller:\n \"Beside the usual bunch of smaller bug fixes, the majority of changes\n were by Zsolt Kajtar to improve the s3fb driver.\n\n Bug fixes:\n - Bounds checking to fix vmalloc-out-of-bounds (Albin Babu Varghese)\n - Fix logic error in \"offb\" name match (Finn Thain)\n - simplefb: Fix use after free in (Janne Grunau)\n - s3fb: Various fixes and powersave improvements (Zsolt Kajtar)\n\n Enhancements \u0026 code cleanups:\n - Various fixes in the documentation (Bagas Sanjaya)\n - Use string choices helpers (Chelsy Ratnawat)\n - xenfb: Use vmalloc_array to simplify code (Qianfeng Rong)\n - mb862xxfb: use signed type for error codes (Qianfeng Rong)\n - Make drivers depend on LCD_CLASS_DEVICE (Thomas Zimmermann)\n - radeonfb: Remove stale product link in Kconfig (Sukrut Heroorkar)\"\n\n* tag \u0027fbdev-for-6.18-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev:\n fbdev: Fix logic error in \"offb\" name match\n fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds\n fbdev: Make drivers depend on LCD_CLASS_DEVICE\n fbdev: radeonfb: Remove stale product link in Kconfig\n Documentation: fb: Retitle driver docs\n Documentation: fb: ep93xx: Demote section headings\n Documentation: fb: Split toctree\n fbdev: simplefb: Fix use after free in simplefb_detach_genpds()\n fbdev: s3fb: Revert mclk stop in suspend\n fbdev: mb862xxfb: Use int type to store negative error codes\n fbdev: Use string choices helpers\n fbdev: core: Fix ubsan warning in pixel_to_pat\n fbdev: s3fb: Implement 1 and 2 BPP modes, improve 4 BPP\n fbdev: s3fb: Implement powersave for S3 FB\n fbdev: xenfb: Use vmalloc_array to simplify code\n" }, { "commit": "9976831f401eeb302d699b2d37624153d7cd2892", "tree": "3030bc1e70fdd6074b73ac1c44db0d3ef096f612", "parents": [ "dcf50ca7823506fb3f20b8ffd3f928003cddaeed", "b5f8aa8d4bde0cf3e4595af5a536da337e5f1c78" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 09:22:39 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 09:22:39 2025 -0700" }, "message": "Merge tag \u0027gpio-fixes-for-v6.18-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux\n\nPull gpio fixes from Bartosz Golaszewski:\n\n - add a missing ACPI ID for MTL-CVF devices in gpio-usbio\n\n - mark the gpio-wcd934x controller as \"sleeping\" as it uses a mutex for\n locking internally\n\n* tag \u0027gpio-fixes-for-v6.18-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux:\n gpio: wcd934x: mark the GPIO controller as sleeping\n gpio: usbio: Add ACPI device-id for MTL-CVF devices\n" }, { "commit": "dcf50ca7823506fb3f20b8ffd3f928003cddaeed", "tree": "0542abf08b508ac462cd1a32ac9395b62cfc6cc8", "parents": [ "aac31903329ba73ef24674df78252b6610cc9d60", "006824a1cb3bd4001745a2b1cc83c43fad522851" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 09:18:19 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 09:18:19 2025 -0700" }, "message": "Merge tag \u0027ntb-6.18\u0027 of https://github.com/jonmason/ntb\n\nPull NTB updates from Jon Mason:\n\n - Add support for Renesas R-Car and allow arbitrary BAR mapping in EPF\n\n - Update ntb_hw_amd to support the latest generation secondary topology\n and add a new maintainer\n\n - Fix a bug by adding a mutex to ensure `link_event_callback` executes\n sequentially\n\n* tag \u0027ntb-6.18\u0027 of https://github.com/jonmason/ntb:\n NTB: epf: Add Renesas rcar support\n NTB: epf: Allow arbitrary BAR mapping\n ntb: Add mutex to make link_event_callback executed linearly.\n MAINTAINERS: Update for the NTB AMD driver maintainer\n ntb_hw_amd: Update amd_ntb_get_link_status to support latest generation secondary topology\n" }, { "commit": "aac31903329ba73ef24674df78252b6610cc9d60", "tree": "a97e284f3a5b265dbd8a5d81aab597ff14bb0dae", "parents": [ "0ae452440cb9fee9079dc925f40cd824c1a9de2a", "eb4faf6343889fcd7edba3deeae49fc5a06531fd" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 09:13:11 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 09:13:11 2025 -0700" }, "message": "Merge tag \u0027i2c-for-6.18-rc1-part2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux\n\nPull more i2c updates from Wolfram Sang:\n\n - Second part of rtl9300 updates since dependencies are in now:\n - general cleanups\n - implement block read/write support\n - add RTL9310 support\n\n - DT schema conversion of hix5hd2 binding\n\n - namespace cleanup for i2c-algo-pca\n\n - minor simplification for mt65xx\n\n* tag \u0027i2c-for-6.18-rc1-part2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux:\n dt-bindings: i2c: hisilicon,hix5hd2: convert to DT schema\n i2c: mt65xx: convert set_speed function to void\n i2c: rename wait_for_completion callback to wait_for_completion_cb\n i2c: rtl9300: add support for RTL9310 I2C controller\n dt-bindings: i2c: realtek,rtl9301-i2c: extend for RTL9310 support\n i2c: rtl9300: use scoped guard instead of explicit lock/unlock\n i2c: rtl9300: separate xfer configuration and execution\n i2c: rtl9300: do not set read mode on every transfer\n i2c: rtl9300: move setting SCL frequency to config_io\n i2c: rtl9300: rename internal sda_pin to sda_num\n dt-bindings: i2c: realtek,rtl9301-i2c: fix wording and typos\n i2c: rtl9300: use regmap fields and API for registers\n i2c: rtl9300: Implement I2C block read and write\n" }, { "commit": "b30c32c784bf29735dabff15443a5feeafd26d1c", "tree": "fe3da10cad8e09d874b971ca64b0455b54828e46", "parents": [ "fa9fe8715055f8b9bcee38904065b2f1eb9197f0" ], "author": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Sat Oct 04 19:50:31 2025 -0500" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Fri Oct 10 11:10:01 2025 -0500" }, "message": "cifs: update internal version number\n\n to 2.57\n\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "0ae452440cb9fee9079dc925f40cd824c1a9de2a", "tree": "af429d38766833a3b3c732a6a6c5393298772b43", "parents": [ "84d4e8b613e073d9dfde782c471aedbcefdede6c", "6bb73db6948c2de23e407fe1b7ef94bf02b7529f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 08:56:16 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 08:56:16 2025 -0700" }, "message": "Merge tag \u0027v6.18-p3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6\n\nPull crypto fixes from Herbert Xu:\n\n - Fix bug in crypto_skcipher that breaks the new ti driver\n\n - Check for invalid assoclen in essiv\n\n* tag \u0027v6.18-p3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:\n crypto: essiv - Check ssize for decryption and in-place encryption\n crypto: skcipher - Fix reqsize handling\n" }, { "commit": "84d4e8b613e073d9dfde782c471aedbcefdede6c", "tree": "a15fd3608ea08d446b8e1b3714695904b61704fb", "parents": [ "5472d60c129f75282d94ae5ad072ee6dfb7c7246", "a29ad21b988652dc60aa99c6d3b1e3d52dc69c30" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 08:34:11 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Oct 10 08:34:11 2025 -0700" }, "message": "Merge tag \u0027tpmdd-next-v6.18-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd\n\nPull tpm updates from Jarkko Sakkinen:\n\n - Disable TCG_TPM2_HMAC from defconfig\n\n It causes performance issues, and breaks some atypical\n configurations.\n\n - simplify code using the new crypto library\n\n - misc fixes and cleanups\n\n* tag \u0027tpmdd-next-v6.18-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd:\n tpm: Prevent local DOS via tpm/tpm0/ppi/*operations\n tpm: use a map for tpm2_calc_ordinal_duration()\n tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single\n tpm: Use HMAC-SHA256 library instead of open-coded HMAC\n tpm: Compare HMAC values in constant time\n tpm: Disable TPM2_TCG_HMAC by default\n" }, { "commit": "dc6b724974018c1b3b6fd704899782da3f12f145", "tree": "3b5db10c69c346c5308500bc5b4ee9bdbfe5bf62", "parents": [ "a8de554774ae48efbe48ace79f8badae2daa2bf1" ], "author": { "name": "Rob Herring (Arm)", "email": "robh@kernel.org", "time": "Fri Oct 10 08:04:46 2025 -0500" }, "committer": { "name": "Rob Herring (Arm)", "email": "robh@kernel.org", "time": "Fri Oct 10 08:04:46 2025 -0500" }, "message": "MAINTAINERS: Move DT patchwork to kernel.org\n\nThe ozlabs.org PW instance is slow due to being geographically far away\nfrom any of the maintainers and seems to have gotten slower as of late\n(AI scrapers perhaps). The kernel.org PW also has some additional\nfeatures (i.e. pwbot) we want to use.\n\nDT core patches also go into PW, so add the PW link for it.\n\nSigned-off-by: Rob Herring (Arm) \u003crobh@kernel.org\u003e\n" }, { "commit": "b5f8aa8d4bde0cf3e4595af5a536da337e5f1c78", "tree": "831b0faaf42ef61c94838562b20fb975bc717bd8", "parents": [ "434689e971955f487355b3f01e84ee269032bc87" ], "author": { "name": "Bartosz Golaszewski", "email": "bartosz.golaszewski@linaro.org", "time": "Wed Sep 24 16:51:29 2025 +0200" }, "committer": { "name": "Bartosz Golaszewski", "email": "bartosz.golaszewski@linaro.org", "time": "Fri Oct 10 09:37:19 2025 +0200" }, "message": "gpio: wcd934x: mark the GPIO controller as sleeping\n\nThe slimbus regmap passed to the GPIO driver down from MFD does not use\nfast_io. This means a mutex is used for locking and thus this GPIO chip\nmust not be used in atomic context. Change the can_sleep switch in\nstruct gpio_chip to true.\n\nFixes: 59c324683400 (\"gpio: wcd934x: Add support to wcd934x gpio controller\")\nSigned-off-by: Bartosz Golaszewski \u003cbartosz.golaszewski@linaro.org\u003e\n" }, { "commit": "a29ad21b988652dc60aa99c6d3b1e3d52dc69c30", "tree": "a15fd3608ea08d446b8e1b3714695904b61704fb", "parents": [ "207696b17f38e869e59889b44d395ab24bb678d3" ], "author": { "name": "Denis Aleksandrov", "email": "daleksan@redhat.com", "time": "Mon Sep 15 17:08:29 2025 -0400" }, "committer": { "name": "Jarkko Sakkinen", "email": "jarkko@kernel.org", "time": "Fri Oct 10 08:21:45 2025 +0300" }, "message": "tpm: Prevent local DOS via tpm/tpm0/ppi/*operations\n\nReads on tpm/tpm0/ppi/*operations can become very long on\nmisconfigured systems. Reading the TPM is a blocking operation,\nthus a user could effectively trigger a DOS.\n\nResolve this by caching the results and avoiding the blocking\noperations after the first read.\n\n[ jarkko: fixed atomic sleep:\n sed -i \u0027s/spin_/mutex_/g\u0027 drivers/char/tpm/tpm_ppi.c\n sed -i \u0027s/DEFINE_SPINLOCK/DEFINE_MUTEX/g\u0027 drivers/char/tpm/tpm_ppi.c ]\n\nSigned-off-by: Denis Aleksandrov \u003cdaleksan@redhat.com\u003e\nReported-by: Jan Stancek \u003cjstancek@redhat.com\u003e\nCloses: https://lore.kernel.org/linux-integrity/20250915210829.6661-1-daleksan@redhat.com/T/#u\nSuggested-by: Jarkko Sakkinen \u003cjarkko@kernel.org\u003e\nReviewed-by: Paul Menzel \u003cpmenzel@molgen.mpg.de\u003e\nSigned-off-by: Jarkko Sakkinen \u003cjarkko@kernel.org\u003e\n" }, { "commit": "207696b17f38e869e59889b44d395ab24bb678d3", "tree": "ae570eb47560cc138ffccfbc70245ab7bcf34f13", "parents": [ "8a81236f2cb0882c7ea6c621ce357f7f3f601fe5" ], "author": { "name": "Jarkko Sakkinen", "email": "jarkko@kernel.org", "time": "Thu Sep 18 22:30:18 2025 +0300" }, "committer": { "name": "Jarkko Sakkinen", "email": "jarkko@kernel.org", "time": "Fri Oct 10 08:21:45 2025 +0300" }, "message": "tpm: use a map for tpm2_calc_ordinal_duration()\n\nThe current shenanigans for duration calculation introduce too much\ncomplexity for a trivial problem, and further the code is hard to patch and\nmaintain.\n\nAddress these issues with a flat look-up table, which is easy to understand\nand patch. If leaf driver specific patching is required in future, it is\neasy enough to make a copy of this table during driver initialization and\nadd the chip parameter back.\n\n\u0027chip-\u003eduration\u0027 is retained for TPM 1.x.\n\nAs the first entry for this new behavior address TCG spec update mentioned\nin this issue:\n\nhttps://github.com/raspberrypi/linux/issues/7054\n\nTherefore, for TPM_SelfTest the duration is set to 3000 ms.\n\nThis does not categorize a as bug, given that this is introduced to the\nspec after the feature was originally made.\n\nReviewed-by: Serge Hallyn \u003cserge@hallyn.com\u003e\nSigned-off-by: Jarkko Sakkinen \u003cjarkko@kernel.org\u003e\n" }, { "commit": "8a81236f2cb0882c7ea6c621ce357f7f3f601fe5", "tree": "856e92e9852777d4494aeb574ec2e44299faecf6", "parents": [ "64a7cfbcf548bb955220c15c39531befe0611475" ], "author": { "name": "Gunnar Kudrjavets", "email": "gunnarku@amazon.com", "time": "Thu Sep 18 18:49:40 2025 +0300" }, "committer": { "name": "Jarkko Sakkinen", "email": "jarkko@kernel.org", "time": "Fri Oct 10 08:21:45 2025 +0300" }, "message": "tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single\n\nThe tpm_tis_write8() call specifies arguments in wrong order. Should be\n(data, addr, value) not (data, value, addr). The initial correct order\nwas changed during the major refactoring when the code was split.\n\nFixes: 41a5e1cf1fe1 (\"tpm/tpm_tis: Split tpm_tis driver into a core and TCG TIS compliant phy\")\nSigned-off-by: Gunnar Kudrjavets \u003cgunnarku@amazon.com\u003e\nReviewed-by: Justinien Bouron \u003cjbouron@amazon.com\u003e\nReviewed-by: Jarkko Sakkinen \u003cjarkko@kernel.org\u003e\nReviewed-by: Paul Menzel \u003cpmenzel@molgen.mpg.de\u003e\nSigned-off-by: Jarkko Sakkinen \u003cjarkko@kernel.org\u003e\n" }, { "commit": "64a7cfbcf548bb955220c15c39531befe0611475", "tree": "7618486bd9a3606afda98c5198a77b760c830daf", "parents": [ "2c2615c8423890b5ef8e0a186b65607ef5fdeda1" ], "author": { "name": "Eric Biggers", "email": "ebiggers@kernel.org", "time": "Fri Aug 01 14:24:22 2025 -0700" }, "committer": { "name": "Jarkko Sakkinen", "email": "jarkko@kernel.org", "time": "Fri Oct 10 08:21:45 2025 +0300" }, "message": "tpm: Use HMAC-SHA256 library instead of open-coded HMAC\n\nNow that there are easy-to-use HMAC-SHA256 library functions, use these\nin tpm2-sessions.c instead of open-coding the HMAC algorithm.\n\nNote that the new implementation correctly handles keys longer than 64\nbytes (SHA256_BLOCK_SIZE), whereas the old implementation handled such\nkeys incorrectly. But it doesn\u0027t appear that such keys were being used.\n\nSigned-off-by: Eric Biggers \u003cebiggers@kernel.org\u003e\nReviewed-by: Jarkko Sakkinen \u003cjarkko@kernel.org\u003e\nSigned-off-by: Jarkko Sakkinen \u003cjarkko@kernel.org\u003e\n" }, { "commit": "2c2615c8423890b5ef8e0a186b65607ef5fdeda1", "tree": "5c5a8a6c0aaa04ae71f0d0cb5501d1215070a0c6", "parents": [ "4bddf4587c131d7b8ce8952cd32b284dcda0dd1f" ], "author": { "name": "Eric Biggers", "email": "ebiggers@kernel.org", "time": "Fri Aug 01 14:24:21 2025 -0700" }, "committer": { "name": "Jarkko Sakkinen", "email": "jarkko@kernel.org", "time": "Fri Oct 10 08:21:45 2025 +0300" }, "message": "tpm: Compare HMAC values in constant time\n\nIn tpm_buf_check_hmac_response(), compare the HMAC values in constant\ntime using crypto_memneq() instead of in variable time using memcmp().\n\nThis is worthwhile to follow best practices and to be consistent with\nMAC comparisons elsewhere in the kernel. However, in this driver the\nside channel seems to have been benign: the HMAC input data is\nguaranteed to always be unique, which makes the usual MAC forgery via\ntiming side channel not possible. Specifically, the HMAC input data in\ntpm_buf_check_hmac_response() includes the \"our_nonce\" field, which was\ngenerated by the kernel earlier, remains under the control of the\nkernel, and is unique for each call to tpm_buf_check_hmac_response().\n\nSigned-off-by: Eric Biggers \u003cebiggers@kernel.org\u003e\nSigned-off-by: Jarkko Sakkinen \u003cjarkko@kernel.org\u003e\n" }, { "commit": "4bddf4587c131d7b8ce8952cd32b284dcda0dd1f", "tree": "46aead52a0c4802ba837851df9c5730f30015f17", "parents": [ "5472d60c129f75282d94ae5ad072ee6dfb7c7246" ], "author": { "name": "Jarkko Sakkinen", "email": "jarkko@kernel.org", "time": "Mon Aug 25 23:32:23 2025 +0300" }, "committer": { "name": "Jarkko Sakkinen", "email": "jarkko@kernel.org", "time": "Fri Oct 10 08:21:45 2025 +0300" }, "message": "tpm: Disable TPM2_TCG_HMAC by default\n\nAfter reading all the feedback, right now disabling the TPM2_TCG_HMAC\nis the right call.\n\nOther views discussed:\n\nA. Having a kernel command-line parameter or refining the feature\n otherwise. This goes to the area of improvements. E.g., one\n example is my own idea where the null key specific code would be\n replaced with a persistent handle parameter (which can be\n *unambigously* defined as part of attestation process when\n done correctly).\n\nB. Removing the code. I don\u0027t buy this because that is same as saying\n that HMAC encryption cannot work at all (if really nitpicking) in\n any form. Also I disagree on the view that the feature could not\n be refined to something more reasoable.\n\nAlso, both A and B are worst options in terms of backporting.\n\nThuss, this is the best possible choice.\n\nCc: stable@vger.kernel.or # v6.10+\nFixes: d2add27cf2b8 (\"tpm: Add NULL primary creation\")\nSuggested-by: Chris Fenner \u003ccfenn@google.com\u003e\nSigned-off-by: Jarkko Sakkinen \u003cjarkko@kernel.org\u003e\n" }, { "commit": "fa9fe8715055f8b9bcee38904065b2f1eb9197f0", "tree": "7344cd2e8d40e2154aeb84f62336dd14754b1e92", "parents": [ "92210ccd877ba577585e420c99cff2b51c4c9fe2" ], "author": { "name": "Pali Rohár", "email": "pali@kernel.org", "time": "Sun Jun 01 18:01:54 2025 +0200" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Thu Oct 09 23:01:24 2025 -0500" }, "message": "cifs: Add comments for DeletePending assignments in open functions\n\nOn more places is set DeletePending member to 0. Add comments why is 0 the\ncorrect value. Paths in DELETE_PENDING state cannot be opened by new calls.\nSo if the newly issued open for that path succeed then it means that the\npath cannot be in DELETE_PENDING state.\n\nSigned-off-by: Pali Rohár \u003cpali@kernel.org\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "92210ccd877ba577585e420c99cff2b51c4c9fe2", "tree": "c3e950725bc4fdf1f914577adbb7ce99efaafc90", "parents": [ "88cae132dc0539ad188b787d32a7df4e16b5c1af" ], "author": { "name": "Pali Rohár", "email": "pali@kernel.org", "time": "Mon Dec 30 22:18:53 2024 +0100" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Thu Oct 09 23:01:24 2025 -0500" }, "message": "cifs: Add fallback code path for cifs_mkdir_setinfo()\n\nUse SMBSetInformation() as a fallback function (when CIFSSMBSetPathInfo()\nfails) which can set attribudes on the directory, including changing\nread-only attribute.\n\nSigned-off-by: Pali Rohár \u003cpali@kernel.org\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "88cae132dc0539ad188b787d32a7df4e16b5c1af", "tree": "3001fa5336be165f422d08b1586c36826016fb68", "parents": [ "057ac50638bcece64b3b436d3a61b70ed6c01a34" ], "author": { "name": "Pali Rohár", "email": "pali@kernel.org", "time": "Mon Dec 30 21:21:31 2024 +0100" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Thu Oct 09 23:01:24 2025 -0500" }, "message": "cifs: Allow fallback code in smb_set_file_info() also for directories\n\nOn NT systems, it is possible to do SMB open call also for directories.\nOpen argument CREATE_NOT_DIR disallows opening directories. So in fallback\ncode path in smb_set_file_info() remove CREATE_NOT_DIR restriction to allow\nit also for directories.\n\nSimilar fallback is implemented also in CIFSSMBSetPathInfoFB() function and\nthis function already allows to call operation for directories.\n\nSigned-off-by: Pali Rohár \u003cpali@kernel.org\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "057ac50638bcece64b3b436d3a61b70ed6c01a34", "tree": "24489edca3ed1661673adad0cc9c182f1b930768", "parents": [ "7ae6152b78316319b9c935eb17c863fbebf54ea6" ], "author": { "name": "Pali Rohár", "email": "pali@kernel.org", "time": "Sat Jun 07 18:11:10 2025 +0200" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Thu Oct 09 23:01:24 2025 -0500" }, "message": "cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points\n\nEA $LXMOD is required for WSL non-symlink reparse points.\n\nFixes: ef86ab131d91 (\"cifs: Fix querying of WSL CHR and BLK reparse points over SMB1\")\nSigned-off-by: Pali Rohár \u003cpali@kernel.org\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "15df28699b28d6b49dc305040c4e26a9553df07a", "tree": "593e4150f565632ef7117226b27bf382ba5b92a9", "parents": [ "3637d34b35b287ab830e66048841ace404382b67" ], "author": { "name": "Finn Thain", "email": "fthain@linux-m68k.org", "time": "Thu Oct 09 09:56:25 2025 +1100" }, "committer": { "name": "Helge Deller", "email": "deller@gmx.de", "time": "Fri Oct 10 00:31:13 2025 +0200" }, "message": "fbdev: Fix logic error in \"offb\" name match\n\nA regression was reported to me recently whereby /dev/fb0 had disappeared\nfrom a PowerBook G3 Series \"Wallstreet\". The problem shows up when the\n\"video\u003dofonly\" parameter is passed to the kernel, which is what the\nbootloader does when \"no video driver\" is selected. The cause of the\nproblem is the \"offb\" string comparison, which got mangled when it got\nrefactored. Fix it.\n\nCc: stable@vger.kernel.org\nFixes: 93604a5ade3a (\"fbdev: Handle video\u003d parameter in video/cmdline.c\")\nReported-and-tested-by: Stan Johnson \u003cuserm57@yahoo.com\u003e\nSigned-off-by: Finn Thain \u003cfthain@linux-m68k.org\u003e\nSigned-off-by: Helge Deller \u003cdeller@gmx.de\u003e\n" }, { "commit": "f4edb5c52c93b1bc676064472fb517566a3e2129", "tree": "94edf3f334fa82c73822e08d601ae062c4da4931", "parents": [ "44ac7f5c6d4c7fd62784bb2700245dbc4ac7e102" ], "author": { "name": "Helge Deller", "email": "deller@gmx.de", "time": "Thu Oct 09 23:37:28 2025 +0200" }, "committer": { "name": "Helge Deller", "email": "deller@gmx.de", "time": "Thu Oct 09 23:45:04 2025 +0200" }, "message": "parisc: Fix iodc and device path return values on old machines\n\nOlder machines may not fully initialize the return values when asking for IODC\nand device path data when building the inventory. Work around possible\nfirmware leaks by proper initialization of the variables.\n\nSigned-off-by: Helge Deller \u003cdeller@gmx.de\u003e\n" }, { "commit": "44ac7f5c6d4c7fd62784bb2700245dbc4ac7e102", "tree": "d17b230d2691521d38317f9f37b76129494e27a1", "parents": [ "610cb23bcc75bcd9fead3e41cbd867cccd0eb229" ], "author": { "name": "Helge Deller", "email": "deller@gmx.de", "time": "Thu Oct 09 23:33:34 2025 +0200" }, "committer": { "name": "Helge Deller", "email": "deller@gmx.de", "time": "Thu Oct 09 23:45:04 2025 +0200" }, "message": "parisc: Firmware: Fix returned path for PDC_MODULE_FIND on older machines\n\nOlder machines (like my 715/64) don\u0027t correctly initialize the\ndevice path when returning from the PDC_MODULE_FIND firmware call.\nWork around that shortcoming by initializing the path with the\nknown values.\n\nSigned-off-by: Helge Deller \u003cdeller@gmx.de\u003e\n" }, { "commit": "c4b6ddcf01f63a710c24a128d134d3fa51978d6c", "tree": "0f5284c63f8dfd1ace1ea813cec67c642d32956a", "parents": [ "73bc073d4270b6b227d5545fc277c1f09a26a77a", "d07e142641417e67f3bfc9d8ba3da8a69c39cfcd" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Oct 10 06:57:28 2025 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Oct 10 06:57:56 2025 +1000" }, "message": "Merge tag \u0027amd-drm-next-6.18-2025-10-09\u0027 of https://gitlab.freedesktop.org/agd5f/linux into drm-next\n\namd-drm-next-6.18-2025-10-09:\n\namdgpu:\n- DC DCE6 fixes\n- GPU reset fixes\n- Secure diplay messaging cleanup\n- MES fix\n- GPUVM locking fixes\n- PMFW messaging cleanup\n- PCI US/DS switch handling fix\n- VCN queue reset fix\n- DC FPU handling fix\n- DCN 3.5 fix\n- DC mirroring fix\n\namdkfd:\n- Fix kfd process ref leak\n- mmap write lock handling fix\n- Fix comments in IOCTL\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Alex Deucher \u003calexander.deucher@amd.com\u003e\nLink: https://lore.kernel.org/r/20251009162915.981503-1-alexander.deucher@amd.com\n" }, { "commit": "5472d60c129f75282d94ae5ad072ee6dfb7c7246", "tree": "557a4afec77e0a8388c84d85713999dade0c056c", "parents": [ "80b7065ec19485943fa00d60f27b447c3f17069c", "64cf7d058a005c5c31eb8a0b741f35dc12915d18" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 09 12:18:22 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 09 12:18:22 2025 -0700" }, "message": "Merge tag \u0027trace-v6.18-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace\n\nPull tracing clean up and fixes from Steven Rostedt:\n\n - Have osnoise tracer use memdup_user_nul()\n\n The function osnoise_cpus_write() open codes a kmalloc() and then a\n copy_from_user() and then adds a nul byte at the end which is the\n same as simply using memdup_user_nul().\n\n - Fix wakeup and irq tracers when failing to acquire calltime\n\n When the wakeup and irq tracers use the function graph tracer for\n tracing function times, it saves a timestamp into the fgraph shadow\n stack. It is possible that this could fail to be stored. If that\n happens, it exits the routine early. These functions also disable\n nesting of the operations by incremeting the data \"disable\" counter.\n But if the calltime exits out early, it never increments the counter\n back to what it needs to be.\n\n Since there\u0027s only a couple of lines of code that does work after\n acquiring the calltime, instead of exiting out early, reverse the if\n statement to be true if calltime is acquired, and place the code that\n is to be done within that if block. The clean up will always be done\n after that.\n\n - Fix ring_buffer_map() return value on failure of __rb_map_vma()\n\n If __rb_map_vma() fails in ring_buffer_map(), it does not return an\n error. This means the caller will be working against a bad vma\n mapping. Have ring_buffer_map() return an error when __rb_map_vma()\n fails.\n\n - Fix regression of writing to the trace_marker file\n\n A bug fix was made to change __copy_from_user_inatomic() to\n copy_from_user_nofault() in the trace_marker write function. The\n trace_marker file is used by applications to write into it (usually\n with a file descriptor opened at the start of the program) to record\n into the tracing system. It\u0027s usually used in critical sections so\n the write to trace_marker is highly optimized.\n\n The reason for copying in an atomic section is that the write\n reserves space on the ring buffer and then writes directly into it.\n After it writes, it commits the event. The time between reserve and\n commit must have preemption disabled.\n\n The trace marker write does not have any locking nor can it allocate\n due to the nature of it being a critical path.\n\n Unfortunately, converting __copy_from_user_inatomic() to\n copy_from_user_nofault() caused a regression in Android. Now all the\n writes from its applications trigger the fault that is rejected by\n the _nofault() version that wasn\u0027t rejected by the _inatomic()\n version. Instead of getting data, it now just gets a trace buffer\n filled with:\n\n tracing_mark_write: \u003cfaulted\u003e\n\n To fix this, on opening of the trace_marker file, allocate per CPU\n buffers that can be used by the write call. Then when entering the\n write call, do the following:\n\n preempt_disable();\n cpu \u003d smp_processor_id();\n buffer \u003d per_cpu_ptr(cpu_buffers, cpu);\n do {\n \tcnt \u003d nr_context_switches_cpu(cpu);\n \tmigrate_disable();\n \tpreempt_enable();\n \tret \u003d copy_from_user(buffer, ptr, size);\n \tpreempt_disable();\n \tmigrate_enable();\n } while (!ret \u0026\u0026 cnt !\u003d nr_context_switches_cpu(cpu));\n if (!ret)\n \tring_buffer_write(buffer);\n preempt_enable();\n\n This works similarly to seqcount. As it must enabled preemption to do\n a copy_from_user() into a per CPU buffer, if it gets preempted, the\n buffer could be corrupted by another task.\n\n To handle this, read the number of context switches of the current\n CPU, disable migration, enable preemption, copy the data from user\n space, then immediately disable preemption again. If the number of\n context switches is the same, the buffer is still valid. Otherwise it\n must be assumed that the buffer may have been corrupted and it needs\n to try again.\n\n Now the trace_marker write can get the user data even if it has to\n fault it in, and still not grab any locks of its own.\n\n* tag \u0027trace-v6.18-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace:\n tracing: Have trace_marker use per-cpu data to read user space\n ring buffer: Propagate __rb_map_vma return value to caller\n tracing: Fix irqoff tracers on failure of acquiring calltime\n tracing: Fix wakeup tracers on failure of acquiring calltime\n tracing/osnoise: Replace kmalloc + copy_from_user with memdup_user_nul\n" }, { "commit": "80b7065ec19485943fa00d60f27b447c3f17069c", "tree": "94b853eea45f1a292d338fdb0c26a51e470273f0", "parents": [ "18a7e218cfcdca6666e1f7356533e4c988780b57", "528f218b31aac4bbfc58914d43766a22ab545d48" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 09 11:56:59 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 09 11:56:59 2025 -0700" }, "message": "Merge tag \u00279p-for-6.18-rc1\u0027 of https://github.com/martinetd/linux\n\nPull 9p updates from Dominique Martinet:\n \"A bunch of unrelated fixes:\n\n - polling fix for trans fd that ought to have been fixed otherwise\n back in March, but apparently came back somewhere else...\n\n - USB transport buffer overflow fix\n\n - Some dentry lifetime rework to handle metadata update for currently\n opened files in uncached mode, or inode type change in cached mode\n\n - a double-put on invalid flush found by syzbot\n\n - and finally /sys/fs/9p/caches not advancing buffer and overwriting\n itself for large contents\n\n Thanks to everyone involved!\"\n\n* tag \u00279p-for-6.18-rc1\u0027 of https://github.com/martinetd/linux:\n 9p: sysfs_init: don\u0027t hardcode error to ENOMEM\n 9p: fix /sys/fs/9p/caches overwriting itself\n 9p: clean up comment typos\n 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN\n net/9p: fix double req put in p9_fd_cancelled\n net/9p: Fix buffer overflow in USB transport layer\n fs/9p: Add p9_debug(VFS) in d_revalidate\n fs/9p: Invalidate dentry if inode type change detected in cached mode\n fs/9p: Refresh metadata in d_revalidate for uncached mode too\n" }, { "commit": "18a7e218cfcdca6666e1f7356533e4c988780b57", "tree": "3442eaa0031c861b92dd9c15d5ed8ce2bfea3bfc", "parents": [ "9361cace0d07954ad8f2345c057976ab1bf44488", "fea8cdf6738a8b25fccbb7b109b440795a0892cb" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 09 11:13:08 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 09 11:13:08 2025 -0700" }, "message": "Merge tag \u0027net-6.18-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net\n\nPull networking fixes from Paolo Abeni:\n \"Including fixes from netfilter.\n\n Current release - regressions:\n\n - mlx5: fix pre-2.40 binutils assembler error\n\n Current release - new code bugs:\n\n - net: psp: don\u0027t assume reply skbs will have a socket\n\n - eth: fbnic: fix missing programming of the default descriptor\n\n Previous releases - regressions:\n\n - page_pool: fix PP_MAGIC_MASK to avoid crashing on some 32-bit arches\n\n - tcp:\n - take care of zero tp-\u003ewindow_clamp in tcp_set_rcvlowat()\n - don\u0027t call reqsk_fastopen_remove() in tcp_conn_request()\n\n - eth:\n - ice: release xa entry on adapter allocation failure\n - usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock\n\n Previous releases - always broken:\n\n - netfilter: validate objref and objrefmap expressions\n\n - sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()\n\n - eth:\n - mlx4: prevent potential use after free in mlx4_en_do_uc_filter()\n - mlx5: prevent tunnel mode conflicts between FDB and NIC IPsec tables\n - ocelot: fix use-after-free caused by cyclic delayed work\n\n Misc:\n\n - add support for MediaTek PCIe 5G HP DRMR-H01\"\n\n* tag \u0027net-6.18-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net: (38 commits)\n net: airoha: Fix loopback mode configuration for GDM2 port\n selftests: drv-net: pp_alloc_fail: add necessary optoins to config\n selftests: drv-net: pp_alloc_fail: lower traffic expectations\n selftests: drv-net: fix linter warnings in pp_alloc_fail\n eth: fbnic: fix reporting of alloc_failed qstats\n selftests: drv-net: xdp: add test for interface level qstats\n selftests: drv-net: xdp: rename netnl to ethnl\n eth: fbnic: fix saving stats from XDP_TX rings on close\n eth: fbnic: fix accounting of XDP packets\n eth: fbnic: fix missing programming of the default descriptor\n selftests: netfilter: query conntrack state to check for port clash resolution\n selftests: netfilter: nft_fib.sh: fix spurious test failures\n bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu()\n netfilter: nft_objref: validate objref and objrefmap expressions\n net: pse-pd: tps23881: Fix current measurement scaling\n net/mlx5: fix pre-2.40 binutils assembler error\n net/mlx5e: Do not fail PSP init on missing caps\n net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed\n net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables\n net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock\n ...\n" }, { "commit": "9361cace0d07954ad8f2345c057976ab1bf44488", "tree": "5e037847501689d024eacfb53060a365ed04b23d", "parents": [ "f6db358deaeafd9830c8bcba8f76f55f8a14b059", "deabb34b66b96c941ac0b3d01a6a6804c3274a78" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 09 10:51:43 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 09 10:51:43 2025 -0700" }, "message": "Merge tag \u0027s390-6.18-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux\n\nPull more s390 updates from Alexander Gordeev:\n\n - Compile the decompressor with -Wno-pointer-sign flag to avoid a clang\n warning\n\n - Fix incomplete conversion to flag output macros in __xsch(), to avoid\n always zero return value instead of the expected condition code\n\n - Remove superfluous newlines from inline assemblies to improve\n compiler inlining decisions\n\n - Expose firmware provided UID Checking state in sysfs regardless of\n the device presence or state\n\n - CIO does not unregister subchannels when the attached device is\n invalid or unavailable. Update the purge function to remove I/O\n subchannels if the device number is found on cio_ignore list\n\n - Consolidate PAI crypto allocation and cleanup paths\n\n - The uv_get_secret_metadata() function has been removed some few\n months ago, remove also the function mention it in a comment\n\n* tag \u0027s390-6.18-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux:\n s390/uv: Fix comment of uv_find_secret() function\n s390/pai_crypto: Consolidate PAI crypto allocation and cleanup paths\n s390/cio: Update purge function to unregister the unused subchannels\n s390/pci: Expose firmware provided UID Checking state in sysfs\n s390: Remove superfluous newlines from inline assemblies\n s390/cio/ioasm: Fix __xsch() condition code handling\n s390: Add -Wno-pointer-sign to KBUILD_CFLAGS_DECOMPRESSOR\n" }, { "commit": "f6db358deaeafd9830c8bcba8f76f55f8a14b059", "tree": "f747bf49eaf73cfd913c382a2c61ecfcd4444624", "parents": [ "ec714e371f22f716a04e6ecb2a24988c92b26911", "f7dfa0f31b13ee5f2ba598cdfcab9a831ed8a6b8" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 09 10:33:50 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 09 10:33:50 2025 -0700" }, "message": "Merge tag \u0027slab-for-6.18-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vbabka/slab\n\nPull slab fixes from Vlastimil Babka:\n\n - Fixes for several corner cases in error paths and debugging options,\n related to the new kmalloc_nolock() functionality (Kuniyuki Iwashima,\n Ran Xiaokai)\n\n* tag \u0027slab-for-6.18-rc1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vbabka/slab:\n slub: Don\u0027t call lockdep_unregister_key() for immature kmem_cache.\n slab: Fix using this_cpu_ptr() in preemptible context\n slab: Add allow_spin check to eliminate kmemleak warnings\n" }, { "commit": "7ae6152b78316319b9c935eb17c863fbebf54ea6", "tree": "e34c3c96e6f4054df5eb82135297ea8dca4245c9", "parents": [ "be3898a395f830ef7eaff70df557f57315c61c81" ], "author": { "name": "Enzo Matsumiya", "email": "ematsumiya@suse.de", "time": "Sat Oct 04 19:56:36 2025 -0500" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Thu Oct 09 11:18:09 2025 -0500" }, "message": "smb: client: remove cfids_invalidation_worker\n\nWe can do the same cleanup on laundromat.\n\nOn invalidate_all_cached_dirs(), run laundromat worker with 0 timeout\nand flush it for immediate + sync cleanup.\n\nSigned-off-by: Enzo Matsumiya \u003cematsumiya@suse.de\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "be3898a395f830ef7eaff70df557f57315c61c81", "tree": "1863af249d73161109da4db6950cba5f41307a49", "parents": [ "dba9f997c9d9a1cade05d006ed0429a63a4eed32" ], "author": { "name": "Paulo Alcantara", "email": "pc@manguebit.org", "time": "Thu Oct 09 12:41:16 2025 -0300" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Thu Oct 09 11:16:25 2025 -0500" }, "message": "smb: client: remove redudant assignment in cifs_strict_fsync()\n\nRemove redudant assignment of @rc as it will be overwritten by the\nfollowing cifs_file_flush() call.\n\nReported-by: Steve French \u003cstfrench@microsoft.com\u003e\nAddresses-Coverity: 1665925\nFixes: 210627b0aca9 (\"smb: client: fix missing timestamp updates with O_TRUNC\")\nSigned-off-by: Paulo Alcantara (Red Hat) \u003cpc@manguebit.org\u003e\nCc: linux-cifs@vger.kernel.org\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "dba9f997c9d9a1cade05d006ed0429a63a4eed32", "tree": "86d8f892d8cf78fd74cf262bf9dddcda6fe6280b", "parents": [ "b95cd1bdf5aa9221c98fc9259014b8bb8d1829d7" ], "author": { "name": "Paulo Alcantara", "email": "pc@manguebit.org", "time": "Tue Oct 07 16:23:25 2025 -0300" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Thu Oct 09 10:42:14 2025 -0500" }, "message": "smb: client: fix race with fallocate(2) and AIO+DIO\n\nAIO+DIO may extend the file size, hence we need to make sure -\u003ei_size\nis stable across the entire fallocate(2) operation, otherwise it would\nbecome a truncate and then inode size reduced back down when it\nfinishes.\n\nFix this by calling netfs_wait_for_outstanding_io() right after\nacquiring -\u003ei_rwsem exclusively in cifs_fallocate() and then guarantee\na stable -\u003ei_size across fallocate(2).\n\nAlso call netfs_wait_for_outstanding_io() after truncating pagecache\nto avoid any potential races with writeback.\n\nSigned-off-by: Paulo Alcantara (Red Hat) \u003cpc@manguebit.org\u003e\nReviewed-by: David Howells \u003cdhowells@redhat.com\u003e\nFixes: 210627b0aca9 (\"smb: client: fix missing timestamp updates with O_TRUNC\")\nCc: Frank Sorenson \u003csorenson@redhat.com\u003e\nCc: linux-cifs@vger.kernel.org\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "b95cd1bdf5aa9221c98fc9259014b8bb8d1829d7", "tree": "ebf3cfafdb233a2759eda56427b2bd30d01690b1", "parents": [ "57ce9f7793b714fb14a97d502ce926162c3b96b1" ], "author": { "name": "Paulo Alcantara", "email": "pc@manguebit.org", "time": "Tue Oct 07 16:23:24 2025 -0300" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Thu Oct 09 10:42:14 2025 -0500" }, "message": "smb: client: fix missing timestamp updates after utime(2)\n\nDon\u0027t reuse open handle when changing timestamps to prevent the server\nfrom disabling automatic timestamp updates as per MS-FSA 2.1.4.17.\n\n---8\u003c---\nimport os\nimport time\n\nfilename \u003d \u0027/mnt/foo\u0027\n\ndef print_stat(prefix):\n st \u003d os.stat(filename)\n print(prefix, \u0027: \u0027, time.ctime(st.st_atime), time.ctime(st.st_ctime))\n\nfd \u003d os.open(filename, os.O_CREAT|os.O_TRUNC|os.O_WRONLY, 0o644)\nprint_stat(\u0027old\u0027)\nos.utime(fd, None)\ntime.sleep(2)\nos.write(fd, b\u0027foo\u0027)\nos.close(fd)\ntime.sleep(2)\nprint_stat(\u0027new\u0027)\n---8\u003c---\n\nBefore patch:\n\n$ mount.cifs //srv/share /mnt -o ...\n$ python3 run.py\nold : Fri Oct 3 14:01:21 2025 Fri Oct 3 14:01:21 2025\nnew : Fri Oct 3 14:01:21 2025 Fri Oct 3 14:01:21 2025\n\nAfter patch:\n\n$ mount.cifs //srv/share /mnt -o ...\n$ python3 run.py\nold : Fri Oct 3 17:03:34 2025 Fri Oct 3 17:03:34 2025\nnew : Fri Oct 3 17:03:36 2025 Fri Oct 3 17:03:36 2025\n\nFixes: b6f2a0f89d7e (\"cifs: for compound requests, use open handle if possible\")\nSigned-off-by: Paulo Alcantara (Red Hat) \u003cpc@manguebit.org\u003e\nCc: Frank Sorenson \u003csorenson@redhat.com\u003e\nReviewed-by: David Howells \u003cdhowells@redhat.com\u003e\nCc: linux-cifs@vger.kernel.org\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "57ce9f7793b714fb14a97d502ce926162c3b96b1", "tree": "06a5a3622a66ff5ad67fef466a3c4adf641bb285", "parents": [ "110fee6b9bb58a5c50047fc2594d415f741b591e" ], "author": { "name": "Paulo Alcantara", "email": "pc@manguebit.org", "time": "Tue Oct 07 16:23:23 2025 -0300" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Thu Oct 09 10:42:14 2025 -0500" }, "message": "smb: client: fix missing timestamp updates after ftruncate(2)\n\nMask off ATTR_MTIME|ATTR_CTIME bits on ATTR_SIZE (e.g. ftruncate(2))\nto prevent the client from sending set info calls and then disabling\nautomatic timestamp updates on server side as per MS-FSA 2.1.4.17.\n\n---8\u003c---\nimport os\nimport time\n\nfilename \u003d \u0027/mnt/foo\u0027\n\ndef print_stat(prefix):\n st \u003d os.stat(filename)\n print(prefix, \u0027: \u0027, time.ctime(st.st_atime), time.ctime(st.st_ctime))\n\nfd \u003d os.open(filename, os.O_CREAT|os.O_TRUNC|os.O_WRONLY, 0o644)\nprint_stat(\u0027old\u0027)\nos.ftruncate(fd, 10)\ntime.sleep(2)\nos.write(fd, b\u0027foo\u0027)\nos.close(fd)\ntime.sleep(2)\nprint_stat(\u0027new\u0027)\n---8\u003c---\n\nBefore patch:\n\n$ mount.cifs //srv/share /mnt -o ...\n$ python3 run.py\nold : Fri Oct 3 13:47:03 2025 Fri Oct 3 13:47:03 2025\nnew : Fri Oct 3 13:47:00 2025 Fri Oct 3 13:47:03 2025\n\nAfter patch:\n\n$ mount.cifs //srv/share /mnt -o ...\n$ python3 run.py\nold : Fri Oct 3 13:48:39 2025 Fri Oct 3 13:48:39 2025\nnew : Fri Oct 3 13:48:41 2025 Fri Oct 3 13:48:41 2025\n\nSigned-off-by: Paulo Alcantara (Red Hat) \u003cpc@manguebit.org\u003e\nCc: Frank Sorenson \u003csorenson@redhat.com\u003e\nReviewed-by: David Howells \u003cdhowells@redhat.com\u003e\nCc: linux-cifs@vger.kernel.org\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "110fee6b9bb58a5c50047fc2594d415f741b591e", "tree": "fc0afe0de72879b07cf7e44b856df4c211abf844", "parents": [ "0cc380d0e1d36b8f2703379890e90f896f68e9e8" ], "author": { "name": "Paulo Alcantara", "email": "pc@manguebit.org", "time": "Tue Oct 07 16:23:22 2025 -0300" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Thu Oct 09 10:42:14 2025 -0500" }, "message": "smb: client: fix missing timestamp updates with O_TRUNC\n\nDon\u0027t call -\u003eset_file_info() on open handle to prevent the server from\nstopping [cm]time updates automatically as per MS-FSA 2.1.4.17.\n\nFix this by checking for ATTR_OPEN bit earlier in cifs_setattr() to\nprevent -\u003eset_file_info() from being called when opening a file with\nO_TRUNC. Do the truncation in -\u003eopen() instead.\n\nThis also saves two roundtrips when opening a file with O_TRUNC and\nthere are currently no open handles to be reused.\n\nBefore patch:\n\n$ mount.cifs //srv/share /mnt -o ...\n$ cd /mnt\n$ exec 3\u003efoo; stat -c \u0027old: %z %y\u0027 foo; sleep 2; echo test \u003e\u00263; exec 3\u003e\u0026-; sleep 2; stat -c \u0027new: %z %y\u0027 foo\nold: 2025-10-03 13:26:23.151030500 -0300 2025-10-03 13:26:23.151030500 -0300\nnew: 2025-10-03 13:26:23.151030500 -0300 2025-10-03 13:26:23.151030500 -0300\n\nAfter patch:\n\n$ mount.cifs //srv/share /mnt -o ...\n$ cd /mnt\n$ exec 3\u003efoo; stat -c \u0027old: %z %y\u0027 foo; sleep 2; echo test \u003e\u00263; exec 3\u003e\u0026-; sleep 2; stat -c \u0027new: %z %y\u0027 foo\n$ exec 3\u003efoo; stat -c \u0027old: %z %y\u0027 foo; sleep 2; echo test \u003e\u00263; exec 3\u003e\u0026-; sleep 2; stat -c \u0027new: %z %y\u0027 foo\nold: 2025-10-03 13:28:13.911933800 -0300 2025-10-03 13:28:13.911933800 -0300\nnew: 2025-10-03 13:28:26.647492700 -0300 2025-10-03 13:28:26.647492700 -0300\n\nReported-by: Frank Sorenson \u003csorenson@redhat.com\u003e\nSigned-off-by: Paulo Alcantara (Red Hat) \u003cpc@manguebit.org\u003e\nReviewed-by: David Howells \u003cdhowells@redhat.com\u003e\nCc: linux-cifs@vger.kernel.org\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "0cc380d0e1d36b8f2703379890e90f896f68e9e8", "tree": "f35432952980732d782248580a822b1a9c883843", "parents": [ "68d2e2ca1cba9259e943bcd188671b619b9770b4" ], "author": { "name": "Fushuai Wang", "email": "wangfushuai@baidu.com", "time": "Tue Oct 07 16:26:03 2025 +0800" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Thu Oct 09 10:42:14 2025 -0500" }, "message": "cifs: Fix copy_to_iter return value check\n\nThe return value of copy_to_iter() function will never be negative,\nit is the number of bytes copied, or zero if nothing was copied.\nUpdate the check to treat 0 as an error, and return -1 in that case.\n\nFixes: d08089f649a0 (\"cifs: Change the I/O paths to use an iterator rather than a page list\")\nAcked-by: Tom Talpey \u003ctom@talpey.com\u003e\nReviewed-by: David Howells \u003cdhowells@redhat.com\u003e\nSigned-off-by: Fushuai Wang \u003cwangfushuai@baidu.com\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "68d2e2ca1cba9259e943bcd188671b619b9770b4", "tree": "03ef69e9cafb37aa27b9adbf399b41432bf89be7", "parents": [ "1643cd51ba975f484a09bed42d1a2014c42c9e6d" ], "author": { "name": "Henrique Carvalho", "email": "henrique.carvalho@suse.com", "time": "Fri Oct 03 23:11:43 2025 -0300" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Thu Oct 09 10:42:14 2025 -0500" }, "message": "smb: client: batch SRV_COPYCHUNK entries to cut round trips\n\nsmb2_copychunk_range() used to send a single SRV_COPYCHUNK per\nSRV_COPYCHUNK_COPY IOCTL.\n\nImplement variable Chunks[] array in struct copychunk_ioctl and fill it\nwith struct copychunk (MS-SMB2 2.2.31.1.1), bounded by server-advertised\nlimits.\n\nThis reduces the number of IOCTL requests for large copies.\n\nWhile we are at it, rename a couple variables to follow the terminology\nused in the specification.\n\nSigned-off-by: Henrique Carvalho \u003chenrique.carvalho@suse.com\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "1643cd51ba975f484a09bed42d1a2014c42c9e6d", "tree": "775f6e15fe3e767919ea9db51d360b1674a8964a", "parents": [ "4468490251c0392e0c87a3f1c1c1585a89f6ffa6" ], "author": { "name": "Markus Elfring", "email": "elfring@users.sourceforge.net", "time": "Thu Oct 09 17:00:13 2025 +0200" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Thu Oct 09 10:40:43 2025 -0500" }, "message": "smb: client: Omit an if branch in smb2_find_smb_tcon()\n\nStatements from an if branch and the end of this function implementation\nwere equivalent.\nThus delete duplicate source code.\n\nSigned-off-by: Markus Elfring \u003celfring@users.sourceforge.net\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "eb4faf6343889fcd7edba3deeae49fc5a06531fd", "tree": "2466829fe887bfee5492906a0d6283a5fabd6760", "parents": [ "d51e7cfca3fe5540466322c33d665674530148dd" ], "author": { "name": "Kael D\u0027Alcamo", "email": "dev@kael-k.io", "time": "Wed Oct 08 22:04:27 2025 +0200" }, "committer": { "name": "Wolfram Sang", "email": "wsa+renesas@sang-engineering.com", "time": "Thu Oct 09 13:20:57 2025 +0200" }, "message": "dt-bindings: i2c: hisilicon,hix5hd2: convert to DT schema\n\nConvert the Devicetree binding documentation for hisilicon,hix5hd2-i2c\nfrom plain text to DT binding schema.\n\nSigned-off-by: Kael D\u0027Alcamo \u003cdev@kael-k.io\u003e\nReviewed-by: Krzysztof Kozlowski \u003ckrzysztof.kozlowski@linaro.org\u003e\nSigned-off-by: Wolfram Sang \u003cwsa+renesas@sang-engineering.com\u003e\n" }, { "commit": "434689e971955f487355b3f01e84ee269032bc87", "tree": "588ea56451c5c64081cb918f716adaa93dca66d6", "parents": [ "ec714e371f22f716a04e6ecb2a24988c92b26911" ], "author": { "name": "Hans de Goede", "email": "hansg@kernel.org", "time": "Wed Oct 01 23:24:16 2025 +0200" }, "committer": { "name": "Bartosz Golaszewski", "email": "bartosz.golaszewski@linaro.org", "time": "Thu Oct 09 12:11:29 2025 +0200" }, "message": "gpio: usbio: Add ACPI device-id for MTL-CVF devices\n\nAdd \"INTC10D1\" ACPI device-id for MTL-CVF devices, like the Dell Latitude\n7450.\n\nCloses: https://bugzilla.redhat.com/show_bug.cgi?id\u003d2368506\nSigned-off-by: Hans de Goede \u003chansg@kernel.org\u003e\nAcked-by: Israel Cepeda \u003cisrael.a.cepeda.lopez@intel.com\u003e\nAcked-by: Sakari Ailus \u003csakari.ailus@linux.intel.com\u003e\nSigned-off-by: Bartosz Golaszewski \u003cbartosz.golaszewski@linaro.org\u003e\n" }, { "commit": "fea8cdf6738a8b25fccbb7b109b440795a0892cb", "tree": "373ac85e8fc3bf25dfdaaf4ef894d97f6f756f8a", "parents": [ "e6cc7ac0d420a7782cdb6d926245abf40f943f24" ], "author": { "name": "Lorenzo Bianconi", "email": "lorenzo@kernel.org", "time": "Wed Oct 08 11:27:43 2025 +0200" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 09 11:48:17 2025 +0200" }, "message": "net: airoha: Fix loopback mode configuration for GDM2 port\n\nAdd missing configuration for loopback mode in airhoha_set_gdm2_loopback\nroutine.\n\nFixes: 9cd451d414f6e (\"net: airoha: Add loopback support for GDM2\")\nSigned-off-by: Lorenzo Bianconi \u003clorenzo@kernel.org\u003e\nReviewed-by: Jacob Keller \u003cjacob.e.keller@intel.com\u003e\nLink: https://patch.msgid.link/20251008-airoha-loopback-mode-fix-v2-1-045694fe7f60@kernel.org\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "e6cc7ac0d420a7782cdb6d926245abf40f943f24", "tree": "0f5c2a30edb7dd1cc82f1beabf44298f94c87126", "parents": [ "2854378a00e8872507a19cb1eb88517fc9584bc5", "5d683e550540b7afd813ae45e9f727245bd26fe3" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 09 11:10:03 2025 +0200" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 09 11:10:04 2025 +0200" }, "message": "Merge branch \u0027eth-fbnic-fix-xdp_tx-and-xdp-vs-qstats\u0027\n\nJakub Kicinski says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\neth: fbnic: fix XDP_TX and XDP vs qstats\n\nFix XDP_TX hangs and adjust the XDP statistics to match the definition\nof qstats. The three problems are somewhat distinct.\n\nXDP_TX hangs is a simple coding bug (patch 1).\n\nThe accounting of XDP packets is all over the place. Fix it to obey\nqstat rules (packets seen by XDP always counted as Rx packets).\nPatch 2 fixes the basic accounting, patch 3 touches up saving\nthe stats when rings are freed.\n\nPatch 6 corrects reporting of alloc_fail stats which prevented\nthe pp_alloc_fail test from passing.\n\nPatches 4, 5, 7, 8, 9 add or fix related test cases.\n\nv2:\n - [patch 2] remove now unnecessary byte adjustment\n - [patch 8] use seen_fails more\nv1: https://lore.kernel.org/20251003233025.1157158-1-kuba@kernel.org\n\nTesting on fbnic below:\n\n $ ./tools/testing/selftests/drivers/net/hw/pp_alloc_fail.py\n TAP version 13\n 1..1\n fbnic-err: bad MMIO read address 0x80074\n fbnic-err: bad MMIO read address 0x80074\n # Seen: pkts:20605 fails:40 (pass thrs:12)\n # ethtool -G change retval: success\n ok 1 pp_alloc_fail.test_pp_alloc\n # Totals: pass:1 fail:0 xfail:0 xpass:0 skip:0 error:0\n\n $ ./tools/testing/selftests/drivers/net/xdp.py\n TAP version 13\n 1..13\n ok 1 xdp.test_xdp_native_pass_sb\n ok 2 xdp.test_xdp_native_pass_mb\n ok 3 xdp.test_xdp_native_drop_sb\n ok 4 xdp.test_xdp_native_drop_mb\n ok 5 xdp.test_xdp_native_tx_sb\n ok 6 xdp.test_xdp_native_tx_mb\n # Failed run: pkt_sz 2048, offset 1. Last successful run: pkt_sz 1024, offset 256. Reason: Adjustment failed\n ok 7 xdp.test_xdp_native_adjst_tail_grow_data\n ok 8 xdp.test_xdp_native_adjst_tail_shrnk_data\n # Failed run: pkt_sz 512, offset -256. Last successful run: pkt_sz 512, offset -128. Reason: Adjustment failed\n ok 9 xdp.test_xdp_native_adjst_head_grow_data\n # Failed run: pkt_sz (2048) \u003e HDS threshold (1536) and offset 64 \u003e 48\n ok 10 xdp.test_xdp_native_adjst_head_shrnk_data\n ok 11 xdp.test_xdp_native_qstats_pass\n ok 12 xdp.test_xdp_native_qstats_drop\n ok 13 xdp.test_xdp_native_qstats_tx\n # Totals: pass:13 fail:0 xfail:0 xpass:0 skip:0 error:0\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20251007232653.2099376-1-kuba@kernel.org\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "5d683e550540b7afd813ae45e9f727245bd26fe3", "tree": "0f5c2a30edb7dd1cc82f1beabf44298f94c87126", "parents": [ "fbb467f0ed95853ff0f1a20f8d53e8c0eccc2ddb" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Tue Oct 07 16:26:53 2025 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 09 11:10:02 2025 +0200" }, "message": "selftests: drv-net: pp_alloc_fail: add necessary optoins to config\n\nAdd kernel config for error injection as needed by pp_alloc_fail.py\n\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nFixes: 9da271f825e4 (\"selftests: drv-net-hw: add test for memory allocation failures with page pool\")\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\nReviewed-by: Jacob Keller \u003cjacob.e.keller@intel.com\u003e\nLink: https://patch.msgid.link/20251007232653.2099376-10-kuba@kernel.org\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "fbb467f0ed95853ff0f1a20f8d53e8c0eccc2ddb", "tree": "3e03e1cab7d027ebf3e669d3ce093a95c9e3ecc9", "parents": [ "0be740fb22da998bfc61b932796ee39099694a81" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Tue Oct 07 16:26:52 2025 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 09 11:10:02 2025 +0200" }, "message": "selftests: drv-net: pp_alloc_fail: lower traffic expectations\n\nLower the expected level of traffic in the pp_alloc_fail test\nand calculate failure counter thresholds based on the traffic\nrather than using a fixed constant.\n\nWe only have \"QEMU HW\" in NIPA right now, and the test (due to\ndebug dependencies) only works on debug kernels in the first place.\nWe need some place for it to pass otherwise it seems to be bit\nrotting. So lower the traffic threshold so that it passes on QEMU\nand with a debug kernel...\n\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\nReviewed-by: Jacob Keller \u003cjacob.e.keller@intel.com\u003e\nLink: https://patch.msgid.link/20251007232653.2099376-9-kuba@kernel.org\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "0be740fb22da998bfc61b932796ee39099694a81", "tree": "f2a01a334c5749ce0d5f0ea10256862df60d8f9d", "parents": [ "2eecd3a41e67c03e52905c42a1e19cc6266a608a" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Tue Oct 07 16:26:51 2025 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 09 11:10:02 2025 +0200" }, "message": "selftests: drv-net: fix linter warnings in pp_alloc_fail\n\nFix linter warnings, it\u0027s a bit hard to check for new ones otherwise.\n\n W0311: Bad indentation. Found 16 spaces, expected 12 (bad-indentation)\n C0114: Missing module docstring (missing-module-docstring)\n W1514: Using open without explicitly specifying an encoding (unspecified-encoding)\n C0116: Missing function or method docstring (missing-function-docstring)\n\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\nReviewed-by: Jacob Keller \u003cjacob.e.keller@intel.com\u003e\nLink: https://patch.msgid.link/20251007232653.2099376-8-kuba@kernel.org\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "2eecd3a41e67c03e52905c42a1e19cc6266a608a", "tree": "e46998da47623a85bff8d0a027386a72493d568e", "parents": [ "27ba92560bcc8a121214a22a55217ba54696495c" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Tue Oct 07 16:26:50 2025 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 09 11:10:02 2025 +0200" }, "message": "eth: fbnic: fix reporting of alloc_failed qstats\n\nRx processing under normal circumstances has 3 rings - 2 buffer\nrings (heads, payloads) and a completion ring. All the rings\nhave a struct fbnic_ring. Make sure we expose alloc_failed\ncounter from the buffer rings, previously only the alloc_failed\nfrom the completion ring was reported, even tho all ring types\nmay increment this counter (buffer rings in __fbnic_fill_bdq()).\n\nThis makes the pp_alloc_fail.py test pass, it expects the qstat\nto be incrementing as page pool injections happen.\n\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nFixes: 67dc4eb5fc92 (\"eth: fbnic: report software Rx queue stats\")\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\nReviewed-by: Jacob Keller \u003cjacob.e.keller@intel.com\u003e\nLink: https://patch.msgid.link/20251007232653.2099376-7-kuba@kernel.org\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "27ba92560bcc8a121214a22a55217ba54696495c", "tree": "5ed1eeecf727be69f286c0da59068335b15ecc79", "parents": [ "1ad3f62089af2bae95f7c49909c4065f8b1dc4b6" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Tue Oct 07 16:26:49 2025 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 09 11:10:02 2025 +0200" }, "message": "selftests: drv-net: xdp: add test for interface level qstats\n\nSend a non-trivial number of packets and make sure that they\nare counted correctly in qstats. Per qstats specification\nXDP is the first layer of the stack so we should see Rx and Tx\ncounters go up for packets which went thru XDP.\n\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\nReviewed-by: Jacob Keller \u003cjacob.e.keller@intel.com\u003e\nLink: https://patch.msgid.link/20251007232653.2099376-6-kuba@kernel.org\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "1ad3f62089af2bae95f7c49909c4065f8b1dc4b6", "tree": "16da56e6018935337bb18c4941e6f0644ebeba40", "parents": [ "858b78b24af288bd1143f73aed4e29803ebe8d15" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Tue Oct 07 16:26:48 2025 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 09 11:10:02 2025 +0200" }, "message": "selftests: drv-net: xdp: rename netnl to ethnl\n\nTest uses \"netnl\" for the ethtool family which is quite confusing\n(one would expect netdev family would use this name).\n\nNo functional changes.\n\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\nReviewed-by: Jacob Keller \u003cjacob.e.keller@intel.com\u003e\nLink: https://patch.msgid.link/20251007232653.2099376-5-kuba@kernel.org\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "858b78b24af288bd1143f73aed4e29803ebe8d15", "tree": "07866b401c5f12025a38dfd0411a7e177501a594", "parents": [ "613e9e8dcb7e2523943d3cf965f3183c54b32adb" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Tue Oct 07 16:26:47 2025 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 09 11:10:02 2025 +0200" }, "message": "eth: fbnic: fix saving stats from XDP_TX rings on close\n\nWhen rings are freed - stats get added to the device level stat\nstructs. Save the stats from the XDP_TX ring just as Tx stats.\nPreviously they would be saved to Rx and Tx stats. So we\u0027d not\nsee XDP_TX packets as Rx during runtime but after an down/up cycle\nthe packets would appear in stats.\n\nCorrect the helper used by ethtool code which does a runtime\nconfig switch.\n\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nFixes: 5213ff086344 (\"eth: fbnic: Collect packet statistics for XDP\")\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\nReviewed-by: Jacob Keller \u003cjacob.e.keller@intel.com\u003e\nLink: https://patch.msgid.link/20251007232653.2099376-4-kuba@kernel.org\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "613e9e8dcb7e2523943d3cf965f3183c54b32adb", "tree": "73beaf6f9165bb66a339f69506e49926b9efaf5c", "parents": [ "7e617d57f2a2f0cc3c5d91b5594df7fd1f2e4459" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Tue Oct 07 16:26:46 2025 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 09 11:10:02 2025 +0200" }, "message": "eth: fbnic: fix accounting of XDP packets\n\nMake XDP-handled packets appear in the Rx stats. The driver has been\ncounting XDP_TX packets on the Tx ring, but there wasn\u0027t much accounting\non the Rx side (the Rx bytes appear to be incremented on XDP_TX but\nXDP_DROP / XDP_ABORT are only counted as Rx drops).\n\nCounting XDP_TX packets (not just bytes) in Rx stats looks like\na simple bug of omission.\n\nThe XDP_DROP handling appears to be intentional. Whether XDP_DROP\npackets should be counted in interface-level Rx stats is a bit\nunclear historically. When we were defining qstats, however,\nwe clarified based on operational experience that in this context:\n\n name: rx-packets\n doc: |\n Number of wire packets successfully received and passed to the stack.\n For drivers supporting XDP, XDP is considered the first layer\n of the stack, so packets consumed by XDP are still counted here.\n\nfbnic does not obey this requirement. Since XDP support has been added\nin current release cycle, instead of splitting interface and qstat\nhandling - make them both follow the qstat definition.\n\nAnother small tweak here is that we count bytes as received on the wire\nrather than post-XDP bytes (xdp_get_buff_len() vs skb-\u003elen).\n\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nFixes: 5213ff086344 (\"eth: fbnic: Collect packet statistics for XDP\")\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\nReviewed-by: Jacob Keller \u003cjacob.e.keller@intel.com\u003e\nLink: https://patch.msgid.link/20251007232653.2099376-3-kuba@kernel.org\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "7e617d57f2a2f0cc3c5d91b5594df7fd1f2e4459", "tree": "f5f6ce1af56987365e368a7f1651a81b0bfbcb19", "parents": [ "2854378a00e8872507a19cb1eb88517fc9584bc5" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Tue Oct 07 16:26:45 2025 -0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 09 11:10:01 2025 +0200" }, "message": "eth: fbnic: fix missing programming of the default descriptor\n\nXDP_TX typically uses no offloads. To optimize XDP we added a \"default\ndescriptor\" feature to the chip, which allows us to send XDP frames with\njust the buffer descriptors (DMA address + length). All the metadata\ndescriptors are derived from the queue config.\n\nCommit under Fixes missed adding setting the defaults up when transplanting\nthe code from the prototype driver. Importantly after reset the \"request\ncompletion\" bit is not set. Packets still get sent but there\u0027s no\ncompletion, so ring is not cleaned up. We can send one ring\u0027s worth\nof packets and then will start dropping all frames that got the XDP_TX\naction from the XDP prog.\n\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nFixes: 168deb7b31b2 (\"eth: fbnic: Add support for XDP_TX action\")\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\nReviewed-by: Jacob Keller \u003cjacob.e.keller@intel.com\u003e\nLink: https://patch.msgid.link/20251007232653.2099376-2-kuba@kernel.org\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "2854378a00e8872507a19cb1eb88517fc9584bc5", "tree": "eb5932fc622ec8dd17eeb5b5e0c910ee85395fc8", "parents": [ "2c95a756e0cfc19af6d0b32b0c6cf3bada334998", "e84945bdc619ed4243ba4298dbb8ca2062026474" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 09 10:07:44 2025 +0200" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Oct 09 10:07:45 2025 +0200" }, "message": "Merge tag \u0027nf-25-10-08\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf\n\nFlorian Westphal says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nnetfilter: updates for net\n\nThe following patchset contains Netfilter fixes for *net*:\n\n1) Fix crash (call recursion) when nftables synproxy extension is used\n in an object map. When this feature was added in v5.4 the required\n hook call validation was forgotten.\n Fix from Fernando Fernandez Mancera.\n2) bridge br_vlan_fill_forward_path_pvid uses incorrect\n rcu_dereference_protected(); we only have rcu read lock but not\n RTNL. Fix from Eric Woudstra.\n\nLast two patches address flakes in two existing selftests.\n\nnetfilter pull request nf-25-10-08\n\n* tag \u0027nf-25-10-08\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf:\n selftests: netfilter: query conntrack state to check for port clash resolution\n selftests: netfilter: nft_fib.sh: fix spurious test failures\n bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu()\n netfilter: nft_objref: validate objref and objrefmap expressions\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20251008125942.25056-1-fw@strlen.de\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "6bb73db6948c2de23e407fe1b7ef94bf02b7529f", "tree": "e0734b87f421b9e1387c0427d5fc5b56bc73f1a0", "parents": [ "229c586b5e86979badb7cb0d38717b88a9e95ddd" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Oct 08 15:54:20 2025 +0800" }, "committer": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Thu Oct 09 15:02:35 2025 +0800" }, "message": "crypto: essiv - Check ssize for decryption and in-place encryption\n\nMove the ssize check to the start in essiv_aead_crypt so that\nit\u0027s also checked for decryption and in-place encryption.\n\nReported-by: Muhammad Alifa Ramdhan \u003cramdhan@starlabs.sg\u003e\nFixes: be1eb7f78aa8 (\"crypto: essiv - create wrapper template for ESSIV generation\")\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n" }, { "commit": "ec714e371f22f716a04e6ecb2a24988c92b26911", "tree": "02ef2ebccd6889590b2b42697b6f83ca22ff8127", "parents": [ "37bfdbc11b245119210ac9924a192aec8bd07d16", "f3b601f900902ab80902c44f820a8985384ac021" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Oct 08 19:24:24 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Oct 08 19:24:24 2025 -0700" }, "message": "Merge tag \u0027perf-tools-for-v6.18-1-2025-10-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/perf/perf-tools\n\nPull perf tools updates from Arnaldo Carvalho de Melo:\n\n - Extended \u0027perf annotate\u0027 with DWARF type information\n (--code-with-type) integration in the TUI, including a \u0027T\u0027\n hotkey to toggle it\n\n - Enhanced \u0027perf bench mem\u0027 with new mmap() workloads and control\n over page/chunk sizes\n\n - Fix \u0027perf stat\u0027 error handling to correctly display unsupported\n events\n\n - Improved support for Clang cross-compilation\n\n - Refactored LLVM and Capstone disasm for modularity\n\n - Introduced the :X modifier to exclude an event from automatic\n regrouping\n\n - Adjusted KVM sampling defaults to use the \"cycles\" event to prevent\n failures\n\n - Added comprehensive support for decoding PowerPC Dispatch Trace Log\n (DTL)\n\n - Updated Arm SPE tracing logic for better analysis of memory and snoop\n details\n\n - Synchronized Intel PMU events and metrics with TMA 5.1 across\n multiple processor generations\n\n - Converted dependencies like libperl and libtracefs to be opt-in\n\n - Handle more Rust symbols in kallsyms (\u0027N\u0027, debugging)\n\n - Improve the python binding to allow for python based tools to use\n more of the libraries, add a \u0027ilist\u0027 utility to test those new\n bindings\n\n - Various \u0027perf test\u0027 fixes\n\n - Kan Liang no longer a perf tools reviewer\n\n* tag \u0027perf-tools-for-v6.18-1-2025-10-08\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/perf/perf-tools: (192 commits)\n perf tools: Fix arm64 libjvmti build by generating unistd_64.h\n perf tests: Don\u0027t retest sections in \"Object code reading\"\n perf docs: Document building with Clang\n perf build: Support build with clang\n perf test coresight: Dismiss clang warning for unroll loop thread\n perf test coresight: Dismiss clang warning for thread loop\n perf test coresight: Dismiss clang warning for memcpy thread\n perf build: Disable thread safety analysis for perl header\n perf build: Correct CROSS_ARCH for clang\n perf python: split Clang options when invoking Popen\n tools build: Align warning options with perf\n perf disasm: Remove unused evsel from \u0027struct annotate_args\u0027\n perf srcline: Fallback between addr2line implementations\n perf disasm: Make ins__scnprintf() and ins__is_nop() static\n perf dso: Clean up read_symbol() error handling\n perf dso: Support BPF programs in dso__read_symbol()\n perf dso: Move read_symbol() from llvm/capstone to dso\n perf llvm: Reduce LLVM initialization\n perf check: Add libLLVM feature\n perf parse-events: Fix parsing of \u003e30kb event strings\n ...\n" }, { "commit": "37bfdbc11b245119210ac9924a192aec8bd07d16", "tree": "70e002a150d577a3732aab9f2128bcd63874794c", "parents": [ "cd5a0afbdf8033dc83786315d63f8b325bdba2fd", "a154f141604acacc0ec64a445d8058a045c308ef" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Oct 08 18:51:00 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Oct 08 18:51:00 2025 -0700" }, "message": "Merge tag \u0027pci-v6.18-fixes-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/pci/pci\n\nPull pci fix from Bjorn Helgaas:\n\n - Fix a resource lookup regression that broke enumeration of hotplugged\n Thunderbolt devices on several platforms (Yangyu Chen)\n\n* tag \u0027pci-v6.18-fixes-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/pci/pci:\n PCI: Fix regression in pci_bus_distribute_available_resources()\n" }, { "commit": "64cf7d058a005c5c31eb8a0b741f35dc12915d18", "tree": "d9fe212488cd49b090f3ae960ee6117d51e2d1fb", "parents": [ "de4cbd704731778a2dc833ce5a24b38e5d672c05" ], "author": { "name": "Steven Rostedt", "email": "rostedt@goodmis.org", "time": "Wed Oct 08 12:45:10 2025 -0400" }, "committer": { "name": "Steven Rostedt (Google)", "email": "rostedt@goodmis.org", "time": "Wed Oct 08 21:50:01 2025 -0400" }, "message": "tracing: Have trace_marker use per-cpu data to read user space\n\nIt was reported that using __copy_from_user_inatomic() can actually\nschedule. Which is bad when preemption is disabled. Even though there\u0027s\nlogic to check in_atomic() is set, but this is a nop when the kernel is\nconfigured with PREEMPT_NONE. This is due to page faulting and the code\ncould schedule with preemption disabled.\n\nLink: https://lore.kernel.org/all/20250819105152.2766363-1-luogengkun@huaweicloud.com/\n\nThe solution was to change the __copy_from_user_inatomic() to\ncopy_from_user_nofault(). But then it was reported that this caused a\nregression in Android. There\u0027s several applications writing into\ntrace_marker() in Android, but now instead of showing the expected data,\nit is showing:\n\n tracing_mark_write: \u003cfaulted\u003e\n\nAfter reverting the conversion to copy_from_user_nofault(), Android was\nable to get the data again.\n\nWrites to the trace_marker is a way to efficiently and quickly enter data\ninto the Linux tracing buffer. It takes no locks and was designed to be as\nnon-intrusive as possible. This means it cannot allocate memory, and must\nuse pre-allocated data.\n\nA method that is actively being worked on to have faultable system call\ntracepoints read user space data is to allocate per CPU buffers, and use\nthem in the callback. The method uses a technique similar to seqcount.\nThat is something like this:\n\n\tpreempt_disable();\n\tcpu \u003d smp_processor_id();\n\tbuffer \u003d this_cpu_ptr(\u0026pre_allocated_cpu_buffers, cpu);\n\tdo {\n\t\tcnt \u003d nr_context_switches_cpu(cpu);\n\t\tmigrate_disable();\n\t\tpreempt_enable();\n\t\tret \u003d copy_from_user(buffer, ptr, size);\n\t\tpreempt_disable();\n\t\tmigrate_enable();\n\t} while (!ret \u0026\u0026 cnt !\u003d nr_context_switches_cpu(cpu));\n\n\tif (!ret)\n\t\tring_buffer_write(buffer);\n\tpreempt_enable();\n\nIt\u0027s a little more involved than that, but the above is the basic logic.\nThe idea is to acquire the current CPU buffer, disable migration, and then\nenable preemption. At this moment, it can safely use copy_from_user().\nAfter reading the data from user space, it disables preemption again. It\nthen checks to see if there was any new scheduling on this CPU. If there\nwas, it must assume that the buffer was corrupted by another task. If\nthere wasn\u0027t, then the buffer is still valid as only tasks in preemptable\ncontext can write to this buffer and only those that are running on the\nCPU.\n\nBy using this method, where trace_marker open allocates the per CPU\nbuffers, trace_marker writes can access user space and even fault it in,\nwithout having to allocate or take any locks of its own.\n\nCc: stable@vger.kernel.org\nCc: Masami Hiramatsu \u003cmhiramat@kernel.org\u003e\nCc: Mathieu Desnoyers \u003cmathieu.desnoyers@efficios.com\u003e\nCc: Luo Gengkun \u003cluogengkun@huaweicloud.com\u003e\nCc: Wattson CI \u003cwattson-external@google.com\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nLink: https://lore.kernel.org/20251008124510.6dba541a@gandalf.local.home\nFixes: 3d62ab32df065 (\"tracing: Fix tracing_marker may trigger page fault during preempt_disable\")\nReported-by: Runping Lai \u003crunpinglai@google.com\u003e\nTested-by: Runping Lai \u003crunpinglai@google.com\u003e\nCloses: https://lore.kernel.org/linux-trace-kernel/20251007003417.3470979-2-runpinglai@google.com/\nSigned-off-by: Steven Rostedt (Google) \u003crostedt@goodmis.org\u003e\n" }, { "commit": "de4cbd704731778a2dc833ce5a24b38e5d672c05", "tree": "fb644a9a8e60d01a860da4229aff405b5d483da0", "parents": [ "c834a97962c708ff5bb8582ca76b0e1225feb675" ], "author": { "name": "Ankit Khushwaha", "email": "ankitkhushwaha.linux@gmail.com", "time": "Wed Oct 08 22:55:16 2025 +0530" }, "committer": { "name": "Steven Rostedt (Google)", "email": "rostedt@goodmis.org", "time": "Wed Oct 08 21:48:58 2025 -0400" }, "message": "ring buffer: Propagate __rb_map_vma return value to caller\n\nThe return value from `__rb_map_vma()`, which rejects writable or\nexecutable mappings (VM_WRITE, VM_EXEC, or !VM_MAYSHARE), was being\nignored. As a result the caller of `__rb_map_vma` always returned 0\neven when the mapping had actually failed, allowing it to proceed\nwith an invalid VMA.\n\nCc: stable@vger.kernel.org\nCc: Masami Hiramatsu \u003cmhiramat@kernel.org\u003e\nCc: Mathieu Desnoyers \u003cmathieu.desnoyers@efficios.com\u003e\nLink: https://lore.kernel.org/20251008172516.20697-1-ankitkhushwaha.linux@gmail.com\nFixes: 117c39200d9d7 (\"ring-buffer: Introducing ring-buffer mapping functions\")\nReported-by: syzbot+ddc001b92c083dbf2b97@syzkaller.appspotmail.com\nCloses: https://syzkaller.appspot.com/bug?id\u003d194151be8eaebd826005329b2e123aecae714bdb\nSigned-off-by: Ankit Khushwaha \u003cankitkhushwaha.linux@gmail.com\u003e\nSigned-off-by: Steven Rostedt (Google) \u003crostedt@goodmis.org\u003e\n" }, { "commit": "d74d6c0e98958aa0bdb6f0a93258a856bda58b97", "tree": "1d0d38e349578ce5150ce2eb0833abc2ccc1aca3", "parents": [ "22c73d52a6d05c5a2053385c0d6cd9984732799d" ], "author": { "name": "Viacheslav Dubeyko", "email": "Slava.Dubeyko@ibm.com", "time": "Tue Sep 02 13:09:58 2025 -0700" }, "committer": { "name": "Ilya Dryomov", "email": "idryomov@gmail.com", "time": "Thu Oct 09 00:15:04 2025 +0200" }, "message": "ceph: add bug tracking system info to MAINTAINERS\n\nThis patch adds information about Ceph bug tracking system.\n\n[ idryomov: add the same for RBD, don\u0027t mention include/linux/ceph/\n again ]\n\nSigned-off-by: Viacheslav Dubeyko \u003cSlava.Dubeyko@ibm.com\u003e\nSigned-off-by: Ilya Dryomov \u003cidryomov@gmail.com\u003e\n" }, { "commit": "a154f141604acacc0ec64a445d8058a045c308ef", "tree": "5366104e0c3745063a43bdb8d2d00ee3e1f85aea", "parents": [ "2f2c7254931f41b5736e3ba12aaa9ac1bbeeeb92" ], "author": { "name": "Yangyu Chen", "email": "cyy@cyyself.name", "time": "Wed Oct 08 22:36:52 2025 +0800" }, "committer": { "name": "Bjorn Helgaas", "email": "bhelgaas@google.com", "time": "Wed Oct 08 16:36:31 2025 -0500" }, "message": "PCI: Fix regression in pci_bus_distribute_available_resources()\n\nThe refactoring in 4292a1e45fd4 (\"PCI: Refactor distributing available\nmemory to use loops\") switched pci_bus_distribute_available_resources() to\noperate on an array of bridge windows. That accidentally looked up bus\nresources via pci_bus_resource_n() and then passed those pointers to helper\nroutines that expect the resource to belong to the device. As soon as we\nexecute that code, pci_resource_num() warned because the resource wasn\u0027t in\nthe bridge\u0027s resource array.\n\nThis happens on my AMD Strix Halo machine with Thunderbolt device; the\nerror message is shown below:\n\n WARNING: CPU: 6 PID: 272 at drivers/pci/pci.h:471 pci_bus_distribute_available_resources+0x6ad/0x6d0\n CPU: 6 UID: 0 PID: 272 Comm: irq/33-pciehp Not tainted 6.17.0+ #1 PREEMPT(voluntary)\n Hardware name: PELADN YO Series/YO1, BIOS 1.04 05/15/2025\n RIP: 0010:pci_bus_distribute_available_resources+0x6ad/0x6d0\n Call Trace:\n pci_bus_distribute_available_resources+0x590/0x6d0\n pci_bridge_distribute_available_resources+0x62/0xb0\n pci_assign_unassigned_bridge_resources+0x65/0x1b0\n pciehp_configure_device+0x92/0x160\n pciehp_handle_presence_or_link_change+0x1b5/0x350\n pciehp_ist+0x147/0x1c0\n\nFix the regression by always fetching the resource directly from the bridge\nwith pci_resource_n(bridge, PCI_BRIDGE_RESOURCES + i). This restores the\noriginal behaviour while keeping the refactored structure. Then we can\nsuccessfully assign resources to the Thunderbolt device.\n\nFixes: 4292a1e45fd4 (\"PCI: Refactor distributing available memory to use loops\")\nReported-by: Kenneth R. Crudup \u003ckenny@panix.com\u003e\nCloses: https://lore.kernel.org/r/dd551b81-9e81-480b-aab3-7cf8b8bbc1d0@panix.com\nSigned-off-by: Yangyu Chen \u003ccyy@cyyself.name\u003e\n[bhelgaas: trim timestamps, etc from commit log]\nSigned-off-by: Bjorn Helgaas \u003cbhelgaas@google.com\u003e\nTested-By: Kenneth R. Crudup \u003ckenny@panix.com\u003e\nLink: https://lore.kernel.org/r/F833CC81-7C60-48FC-A31C-B9999DCC6FA2@icloud.com\nLink: https://patch.msgid.link/tencent_8C54420E1B0FF8D804C1B4651DF970716309@qq.com\n" }, { "commit": "22c73d52a6d05c5a2053385c0d6cd9984732799d", "tree": "56247f73b799f1ceeeef9959bc54114a1821c52b", "parents": [ "c66120c84295a0495eb46dcfba829457acd6ef7d" ], "author": { "name": "Kotresh HR", "email": "khiremat@redhat.com", "time": "Thu Sep 11 15:02:35 2025 +0530" }, "committer": { "name": "Ilya Dryomov", "email": "idryomov@gmail.com", "time": "Wed Oct 08 23:30:47 2025 +0200" }, "message": "ceph: fix multifs mds auth caps issue\n\nThe mds auth caps check should also validate the\nfsname along with the associated caps. Not doing\nso would result in applying the mds auth caps of\none fs on to the other fs in a multifs ceph cluster.\nThe bug causes multiple issues w.r.t user\nauthentication, following is one such example.\n\nSteps to Reproduce (on vstart cluster):\n1. Create two file systems in a cluster, say \u0027fsname1\u0027 and \u0027fsname2\u0027\n2. Authorize read only permission to the user \u0027client.usr\u0027 on fs \u0027fsname1\u0027\n $ceph fs authorize fsname1 client.usr / r\n3. Authorize read and write permission to the same user \u0027client.usr\u0027 on fs \u0027fsname2\u0027\n $ceph fs authorize fsname2 client.usr / rw\n4. Update the keyring\n $ceph auth get client.usr \u003e\u003e ./keyring\n\nWith above permssions for the user \u0027client.usr\u0027, following is the\nexpectation.\n a. The \u0027client.usr\u0027 should be able to only read the contents\n and not allowed to create or delete files on file system \u0027fsname1\u0027.\n b. The \u0027client.usr\u0027 should be able to read/write on file system \u0027fsname2\u0027.\n\nBut, with this bug, the \u0027client.usr\u0027 is allowed to read/write on file\nsystem \u0027fsname1\u0027. See below.\n\n5. Mount the file system \u0027fsname1\u0027 with the user \u0027client.usr\u0027\n $sudo bin/mount.ceph usr@.fsname1\u003d/ /kmnt_fsname1_usr/\n6. Try creating a file on file system \u0027fsname1\u0027 with user \u0027client.usr\u0027. This\n should fail but passes with this bug.\n $touch /kmnt_fsname1_usr/file1\n7. Mount the file system \u0027fsname1\u0027 with the user \u0027client.admin\u0027 and create a\n file.\n $sudo bin/mount.ceph admin@.fsname1\u003d/ /kmnt_fsname1_admin\n $echo \"data\" \u003e /kmnt_fsname1_admin/admin_file1\n8. Try removing an existing file on file system \u0027fsname1\u0027 with the user\n \u0027client.usr\u0027. This shoudn\u0027t succeed but succeeds with the bug.\n $rm -f /kmnt_fsname1_usr/admin_file1\n\nFor more information, please take a look at the corresponding mds/fuse patch\nand tests added by looking into the tracker mentioned below.\n\nv2: Fix a possible null dereference in doutc\nv3: Don\u0027t store fsname from mdsmap, validate against\n ceph_mount_options\u0027s fsname and use it\nv4: Code refactor, better warning message and\n fix possible compiler warning\n\n[ Slava.Dubeyko: \"fsname check failed\" -\u003e \"fsname mismatch\" ]\n\nLink: https://tracker.ceph.com/issues/72167\nSigned-off-by: Kotresh HR \u003ckhiremat@redhat.com\u003e\nReviewed-by: Viacheslav Dubeyko \u003cSlava.Dubeyko@ibm.com\u003e\nSigned-off-by: Ilya Dryomov \u003cidryomov@gmail.com\u003e\n" }, { "commit": "c66120c84295a0495eb46dcfba829457acd6ef7d", "tree": "0e99f320515747ef99de76b3e5abec9f2a059c59", "parents": [ "98a2850de49c10a1a09642e17978b925f95e6029" ], "author": { "name": "Viacheslav Dubeyko", "email": "Slava.Dubeyko@ibm.com", "time": "Tue Sep 02 12:08:45 2025 -0700" }, "committer": { "name": "Ilya Dryomov", "email": "idryomov@gmail.com", "time": "Wed Oct 08 23:30:47 2025 +0200" }, "message": "ceph: cleanup in ceph_alloc_readdir_reply_buffer()\n\nThe Coverity Scan service has reported potential issue\nin ceph_alloc_readdir_reply_buffer() [1]. If order could\nbe negative one, then it expects the issue in the logic:\n\nnum_entries \u003d (PAGE_SIZE \u003c\u003c order) / size;\n\nTechnically speaking, this logic [2] should prevent from\nmaking the order variable negative:\n\nif (!rinfo-\u003edir_entries)\n return -ENOMEM;\n\nHowever, the allocation logic requires some cleanup.\nThis patch makes sure that calculated bytes count\nwill never exceed ULONG_MAX before get_order()\ncalculation. And it adds the checking of order\nvariable on negative value to guarantee that second\nhalf of the function\u0027s code will never operate by\nnegative value of order variable even if something\nwill be wrong or to be changed in the first half of\nthe function\u0027s logic.\n\nv2\nAlex Markuze suggested to add unlikely() macro\nfor introduced condition checks.\n\n[1] https://scan5.scan.coverity.com/#/project-view/64304/10063?selectedIssue\u003d1198252\n[2] https://elixir.bootlin.com/linux/v6.17-rc3/source/fs/ceph/mds_client.c#L2553\n\nSigned-off-by: Viacheslav Dubeyko \u003cSlava.Dubeyko@ibm.com\u003e\nReviewed-by: Alex Markuze \u003camarkuze@redhat.com\u003e\nSigned-off-by: Ilya Dryomov \u003cidryomov@gmail.com\u003e\n" }, { "commit": "98a2850de49c10a1a09642e17978b925f95e6029", "tree": "ec5b2bcde74ea7bb57165618ce5f75c3344af28a", "parents": [ "6140f1d43ba9425dc55b12bdfd8877b0c5118d9a" ], "author": { "name": "Viacheslav Dubeyko", "email": "Slava.Dubeyko@ibm.com", "time": "Thu Aug 28 11:44:42 2025 -0700" }, "committer": { "name": "Ilya Dryomov", "email": "idryomov@gmail.com", "time": "Wed Oct 08 23:30:47 2025 +0200" }, "message": "ceph: fix potential NULL dereference issue in ceph_fill_trace()\n\nThe Coverity Scan service has detected a potential dereference of\nan explicit NULL value in ceph_fill_trace() [1].\n\nThe variable in is declared in the beggining of\nceph_fill_trace() [2]:\n\nstruct inode *in \u003d NULL;\n\nHowever, the initialization of the variable is happening under\ncondition [3]:\n\nif (rinfo-\u003ehead-\u003eis_target) {\n \u003cskipped\u003e\n in \u003d req-\u003er_target_inode;\n \u003cskipped\u003e\n}\n\nPotentially, if rinfo-\u003ehead-\u003eis_target \u003d\u003d FALSE, then\nin variable continues to be NULL and later the dereference of\nNULL value could happen in ceph_fill_trace() logic [4,5]:\n\nelse if ((req-\u003er_op \u003d\u003d CEPH_MDS_OP_LOOKUPSNAP ||\n req-\u003er_op \u003d\u003d CEPH_MDS_OP_MKSNAP) \u0026\u0026\n test_bit(CEPH_MDS_R_PARENT_LOCKED, \u0026req-\u003er_req_flags) \u0026\u0026\n !test_bit(CEPH_MDS_R_ABORTED, \u0026req-\u003er_req_flags)) {\n\u003cskipped\u003e\n ihold(in);\n err \u003d splice_dentry(\u0026req-\u003er_dentry, in);\n if (err \u003c 0)\n goto done;\n}\n\nThis patch adds the checking of in variable for NULL value\nand it returns -EINVAL error code if it has NULL value.\n\nv2\nAlex Markuze suggested to add unlikely macro\nin the checking condition.\n\n[1] https://scan5.scan.coverity.com/#/project-view/64304/10063?selectedIssue\u003d1141197\n[2] https://elixir.bootlin.com/linux/v6.17-rc3/source/fs/ceph/inode.c#L1522\n[3] https://elixir.bootlin.com/linux/v6.17-rc3/source/fs/ceph/inode.c#L1629\n[4] https://elixir.bootlin.com/linux/v6.17-rc3/source/fs/ceph/inode.c#L1745\n[5] https://elixir.bootlin.com/linux/v6.17-rc3/source/fs/ceph/inode.c#L1777\n\nSigned-off-by: Viacheslav Dubeyko \u003cSlava.Dubeyko@ibm.com\u003e\nReviewed-by: Alex Markuze \u003camarkuze@redhat.com\u003e\nSigned-off-by: Ilya Dryomov \u003cidryomov@gmail.com\u003e\n" }, { "commit": "6140f1d43ba9425dc55b12bdfd8877b0c5118d9a", "tree": "b5497493ffb75fe6e6c1c58dda83cb9ae2bbf202", "parents": [ "7399212dcf64d90a6ab239bdd98bd325d922fc7e" ], "author": { "name": "Max Kellermann", "email": "max.kellermann@ionos.com", "time": "Wed Aug 06 11:48:55 2025 +0200" }, "committer": { "name": "Ilya Dryomov", "email": "idryomov@gmail.com", "time": "Wed Oct 08 23:30:47 2025 +0200" }, "message": "libceph: add empty check to ceph_con_get_out_msg()\n\nThis moves the list_empty() checks from the two callers (v1 and v2)\ninto the base messenger.c library. Now the v1/v2 specializations do\nnot need to know about con-\u003eout_queue; that implementation detail is\nnow hidden behind the ceph_con_get_out_msg() function.\n\n[ idryomov: instead of changing prepare_write_message() to return\n a bool, move ceph_con_get_out_msg() call out to arrive to the same\n pattern as in messenger_v2.c ]\n\nSigned-off-by: Max Kellermann \u003cmax.kellermann@ionos.com\u003e\nReviewed-by: Viacheslav Dubeyko \u003cSlava.Dubeyko@ibm.com\u003e\nSigned-off-by: Ilya Dryomov \u003cidryomov@gmail.com\u003e\n" }, { "commit": "7399212dcf64d90a6ab239bdd98bd325d922fc7e", "tree": "88c1cf6eed2f08a97a0b5d2c478b8e710092902a", "parents": [ "59699a5a7114f09f890e86c09a6b32afb5eaa64c" ], "author": { "name": "Max Kellermann", "email": "max.kellermann@ionos.com", "time": "Wed Aug 06 11:48:54 2025 +0200" }, "committer": { "name": "Ilya Dryomov", "email": "idryomov@gmail.com", "time": "Wed Oct 08 23:30:46 2025 +0200" }, "message": "libceph: pass the message pointer instead of loading con-\u003eout_msg\n\nThis pointer is in a register anyway, so let\u0027s use that instead of\nreloading from memory everywhere.\n\n[ idryomov: formatting ]\n\nSigned-off-by: Max Kellermann \u003cmax.kellermann@ionos.com\u003e\nReviewed-by: Viacheslav Dubeyko \u003cSlava.Dubeyko@ibm.com\u003e\nSigned-off-by: Ilya Dryomov \u003cidryomov@gmail.com\u003e\n" }, { "commit": "59699a5a7114f09f890e86c09a6b32afb5eaa64c", "tree": "87353dceda99ee62e577e58eb1cce24ecc9fc4dd", "parents": [ "fbeafe782bd986bf75544526fb9c0284e045e0a4" ], "author": { "name": "Max Kellermann", "email": "max.kellermann@ionos.com", "time": "Wed Aug 06 11:48:53 2025 +0200" }, "committer": { "name": "Ilya Dryomov", "email": "idryomov@gmail.com", "time": "Wed Oct 08 23:30:46 2025 +0200" }, "message": "libceph: make ceph_con_get_out_msg() return the message pointer\n\nThe caller in messenger_v1.c loads it anyway, so let\u0027s keep the\npointer in the register instead of reloading it from memory. This\neliminates a tiny bit of unnecessary overhead.\n\nSigned-off-by: Max Kellermann \u003cmax.kellermann@ionos.com\u003e\nReviewed-by: Viacheslav Dubeyko \u003cSlava.Dubeyko@ibm.com\u003e\nSigned-off-by: Ilya Dryomov \u003cidryomov@gmail.com\u003e\n" }, { "commit": "fbeafe782bd986bf75544526fb9c0284e045e0a4", "tree": "450fcdec14525687cda4efda3efd0daf945ca462", "parents": [ "53db6f25ee47cb1265141d31562604e56146919a" ], "author": { "name": "Viacheslav Dubeyko", "email": "Slava.Dubeyko@ibm.com", "time": "Wed Jul 16 11:40:49 2025 -0700" }, "committer": { "name": "Ilya Dryomov", "email": "idryomov@gmail.com", "time": "Wed Oct 08 23:30:46 2025 +0200" }, "message": "ceph: fix potential race condition on operations with CEPH_I_ODIRECT flag\n\nThe Coverity Scan service has detected potential\nrace conditions in ceph_block_o_direct(), ceph_start_io_read(),\nceph_block_buffered(), and ceph_start_io_direct() [1 - 4].\n\nThe CID 1590942, 1590665, 1589664, 1590377 contain explanation:\n\"The value of the shared data will be determined by\nthe interleaving of thread execution. Thread shared data is accessed\nwithout holding an appropriate lock, possibly causing\na race condition (CWE-366)\".\n\nThis patch reworks the pattern of accessing/modification of\nCEPH_I_ODIRECT flag by means of adding smp_mb__before_atomic()\nbefore reading the status of CEPH_I_ODIRECT flag and\nsmp_mb__after_atomic() after clearing set/clear this flag.\nAlso, it was reworked the pattern of using of ci-\u003ei_ceph_lock\nin ceph_block_o_direct(), ceph_start_io_read(),\nceph_block_buffered(), and ceph_start_io_direct() methods.\n\n[1] https://scan5.scan.coverity.com/#/project-view/64304/10063?selectedIssue\u003d1590942\n[2] https://scan5.scan.coverity.com/#/project-view/64304/10063?selectedIssue\u003d1590665\n[3] https://scan5.scan.coverity.com/#/project-view/64304/10063?selectedIssue\u003d1589664\n[4] https://scan5.scan.coverity.com/#/project-view/64304/10063?selectedIssue\u003d1590377\n\nSigned-off-by: Viacheslav Dubeyko \u003cSlava.Dubeyko@ibm.com\u003e\nReviewed-by: Alex Markuze \u003camarkuze@redhat.com\u003e\nSigned-off-by: Ilya Dryomov \u003cidryomov@gmail.com\u003e\n" }, { "commit": "53db6f25ee47cb1265141d31562604e56146919a", "tree": "8fe958fbc7b8a903ab8599dd028ed0cb86f18ff4", "parents": [ "5824ccba9a39a3ad914fc9b2972a2c1119abaac9" ], "author": { "name": "Viacheslav Dubeyko", "email": "Slava.Dubeyko@ibm.com", "time": "Tue Jul 08 12:20:57 2025 -0700" }, "committer": { "name": "Ilya Dryomov", "email": "idryomov@gmail.com", "time": "Wed Oct 08 23:30:46 2025 +0200" }, "message": "ceph: refactor wake_up_bit() pattern of calling\n\nThe wake_up_bit() is called in ceph_async_unlink_cb(),\nwake_async_create_waiters(), and ceph_finish_async_create().\nIt makes sense to switch on clear_bit() function, because\nit makes the code much cleaner and easier to understand.\nMore important rework is the adding of smp_mb__after_atomic()\nmemory barrier after the bit modification and before\nwake_up_bit() call. It can prevent potential race condition\nof accessing the modified bit in other threads. Luckily,\nclear_and_wake_up_bit() already implements the required\nfunctionality pattern:\n\nstatic inline void clear_and_wake_up_bit(int bit, unsigned long *word)\n{\n\tclear_bit_unlock(bit, word);\n\t/* See wake_up_bit() for which memory barrier you need to use. */\n\tsmp_mb__after_atomic();\n\twake_up_bit(word, bit);\n}\n\nSigned-off-by: Viacheslav Dubeyko \u003cSlava.Dubeyko@ibm.com\u003e\nReviewed-by: Alex Markuze \u003camarkuze@redhat.com\u003e\nSigned-off-by: Ilya Dryomov \u003cidryomov@gmail.com\u003e\n" }, { "commit": "5824ccba9a39a3ad914fc9b2972a2c1119abaac9", "tree": "a26210e419c2722f1105ae4e7bbc1cb74f56ff06", "parents": [ "5b2d1377d6cc4147492780b0bd95fb9c4cb28d1b" ], "author": { "name": "Viacheslav Dubeyko", "email": "Slava.Dubeyko@ibm.com", "time": "Fri Jun 13 11:31:08 2025 -0700" }, "committer": { "name": "Ilya Dryomov", "email": "idryomov@gmail.com", "time": "Wed Oct 08 23:30:46 2025 +0200" }, "message": "ceph: fix potential race condition in ceph_ioctl_lazyio()\n\nThe Coverity Scan service has detected potential\nrace condition in ceph_ioctl_lazyio() [1].\n\nThe CID 1591046 contains explanation: \"Check of thread-shared\nfield evades lock acquisition (LOCK_EVASION). Thread1 sets\nfmode to a new value. Now the two threads have an inconsistent\nview of fmode and updates to fields correlated with fmode\nmay be lost. The data guarded by this critical section may\nbe read while in an inconsistent state or modified by multiple\nracing threads. In ceph_ioctl_lazyio: Checking the value of\na thread-shared field outside of a locked region to determine\nif a locked operation involving that thread shared field\nhas completed. (CWE-543)\".\n\nThe patch places fi-\u003efmode field access under ci-\u003ei_ceph_lock\nprotection. Also, it introduces the is_file_already_lazy\nvariable that is set under the lock and it is checked later\nout of scope of critical section.\n\n[1] https://scan5.scan.coverity.com/#/project-view/64304/10063?selectedIssue\u003d1591046\n\nSigned-off-by: Viacheslav Dubeyko \u003cSlava.Dubeyko@ibm.com\u003e\nReviewed-by: Alex Markuze \u003camarkuze@redhat.com\u003e\nSigned-off-by: Ilya Dryomov \u003cidryomov@gmail.com\u003e\n" }, { "commit": "5b2d1377d6cc4147492780b0bd95fb9c4cb28d1b", "tree": "c43f569812c77043a73a6c3a41f656edc990e682", "parents": [ "1ed4471a4ee6cfa902467332042158ca5ef8ad24" ], "author": { "name": "Viacheslav Dubeyko", "email": "Slava.Dubeyko@ibm.com", "time": "Fri Jun 06 12:05:45 2025 -0700" }, "committer": { "name": "Ilya Dryomov", "email": "idryomov@gmail.com", "time": "Wed Oct 08 23:30:46 2025 +0200" }, "message": "ceph: fix overflowed constant issue in ceph_do_objects_copy()\n\nThe Coverity Scan service has detected overflowed constant\nissue in ceph_do_objects_copy() [1]. The CID 1624308\ndefect contains explanation: \"The overflowed value due to\narithmetic on constants is too small or unexpectedly\nnegative, causing incorrect computations. Expression bytes,\nwhich is equal to -95, where ret is known to be equal to -95,\nunderflows the type that receives it, an unsigned integer\n64 bits wide. In ceph_do_objects_copy: Integer overflow occurs\nin arithmetic on constant operands (CWE-190)\".\n\nThe patch changes the type of bytes variable from size_t\nto ssize_t with the goal of to be capable to receive\nnegative values.\n\n[1] https://scan5.scan.coverity.com/#/project-view/64304/10063?selectedIssue\u003d1624308\n\nSigned-off-by: Viacheslav Dubeyko \u003cSlava.Dubeyko@ibm.com\u003e\nReviewed-by: Alex Markuze \u003camarkuze@redhat.com\u003e\nSigned-off-by: Ilya Dryomov \u003cidryomov@gmail.com\u003e\n" }, { "commit": "1ed4471a4ee6cfa902467332042158ca5ef8ad24", "tree": "e9ad98553f80a6fc236b14b52010b4fe6a0643f2", "parents": [ "b7ed1e29cfe773d648ca09895b92856bd3a2092d" ], "author": { "name": "Viacheslav Dubeyko", "email": "Slava.Dubeyko@ibm.com", "time": "Fri Jun 06 12:05:21 2025 -0700" }, "committer": { "name": "Ilya Dryomov", "email": "idryomov@gmail.com", "time": "Wed Oct 08 23:30:46 2025 +0200" }, "message": "ceph: fix wrong sizeof argument issue in register_session()\n\nThe Coverity Scan service has detected the wrong sizeof\nargument in register_session() [1]. The CID 1598909 defect\ncontains explanation: \"The wrong sizeof value is used in\nan expression or as argument to a function. The result is\nan incorrect value that may cause unexpected program behaviors.\nIn register_session: The sizeof operator is invoked on\nthe wrong argument (CWE-569)\".\n\nThe patch introduces a ptr_size variable that is initialized\nby sizeof(struct ceph_mds_session *). And this variable is used\ninstead of sizeof(void *) in the code.\n\n[1] https://scan5.scan.coverity.com/#/project-view/64304/10063?selectedIssue\u003d1598909\n\nSigned-off-by: Viacheslav Dubeyko \u003cSlava.Dubeyko@ibm.com\u003e\nReviewed-by: Alex Markuze \u003camarkuze@redhat.com\u003e\nSigned-off-by: Ilya Dryomov \u003cidryomov@gmail.com\u003e\n" }, { "commit": "b7ed1e29cfe773d648ca09895b92856bd3a2092d", "tree": "2d9167e25dfe8b0376bee72939f9107efaf02027", "parents": [ "fa073039466f16141807a0f32840ecdceb00e22a" ], "author": { "name": "Viacheslav Dubeyko", "email": "Slava.Dubeyko@ibm.com", "time": "Fri Jun 06 12:04:32 2025 -0700" }, "committer": { "name": "Ilya Dryomov", "email": "idryomov@gmail.com", "time": "Wed Oct 08 23:30:46 2025 +0200" }, "message": "ceph: add checking of wait_for_completion_killable() return value\n\nThe Coverity Scan service has detected the calling of\nwait_for_completion_killable() without checking the return\nvalue in ceph_lock_wait_for_completion() [1]. The CID 1636232\ndefect contains explanation: \"If the function returns an error\nvalue, the error value may be mistaken for a normal value.\nIn ceph_lock_wait_for_completion(): Value returned from\na function is not checked for errors before being used. (CWE-252)\".\n\nThe patch adds the checking of wait_for_completion_killable()\nreturn value and return the error code from\nceph_lock_wait_for_completion().\n\n[1] https://scan5.scan.coverity.com/#/project-view/64304/10063?selectedIssue\u003d1636232\n\nSigned-off-by: Viacheslav Dubeyko \u003cSlava.Dubeyko@ibm.com\u003e\nReviewed-by: Alex Markuze \u003camarkuze@redhat.com\u003e\nSigned-off-by: Ilya Dryomov \u003cidryomov@gmail.com\u003e\n" }, { "commit": "fa073039466f16141807a0f32840ecdceb00e22a", "tree": "04093d64842d598ec77eb15251559dbed0c38c1b", "parents": [ "27c0a7b05d13a0dc54ed0b95fc12218210fdea1a" ], "author": { "name": "Max Kellermann", "email": "max.kellermann@ionos.com", "time": "Fri Dec 06 17:50:14 2024 +0100" }, "committer": { "name": "Ilya Dryomov", "email": "idryomov@gmail.com", "time": "Wed Oct 08 23:30:46 2025 +0200" }, "message": "ceph: make ceph_start_io_*() killable\n\nThis allows killing processes that wait for a lock when one process is\nstuck waiting for the Ceph server. This is similar to the NFS commit\n38a125b31504 (\"fs/nfs/io: make nfs_start_io_*() killable\").\n\n[ idryomov: drop comment on include, formatting ]\n\nSigned-off-by: Max Kellermann \u003cmax.kellermann@ionos.com\u003e\nReviewed-by: Ilya Dryomov \u003cidryomov@gmail.com\u003e\nSigned-off-by: Ilya Dryomov \u003cidryomov@gmail.com\u003e\n" }, { "commit": "27c0a7b05d13a0dc54ed0b95fc12218210fdea1a", "tree": "addbb2e1a498f497f722bd47bd7899497f824ce3", "parents": [ "e5f0a698b34ed76002dc5cff3804a61c80233a7a" ], "author": { "name": "Eric Biggers", "email": "ebiggers@kernel.org", "time": "Thu Jul 31 12:02:27 2025 -0700" }, "committer": { "name": "Ilya Dryomov", "email": "idryomov@gmail.com", "time": "Wed Oct 08 23:30:45 2025 +0200" }, "message": "libceph: Use HMAC-SHA256 library instead of crypto_shash\n\nUse the HMAC-SHA256 library functions instead of crypto_shash. This is\nsimpler and faster.\n\nSigned-off-by: Eric Biggers \u003cebiggers@kernel.org\u003e\nReviewed-by: Viacheslav Dubeyko \u003cSlava.Dubeyko@ibm.com\u003e\nSigned-off-by: Ilya Dryomov \u003cidryomov@gmail.com\u003e\n" }, { "commit": "cd5a0afbdf8033dc83786315d63f8b325bdba2fd", "tree": "157b35d34a9d888350de91ec97548e58ab796d9b", "parents": [ "ed4d6e92463e8dfe6dfb971f8edc6b5d9ea18722", "3f39f56520374cf56872644acf9afcc618a4b674" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Oct 08 11:44:21 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Oct 08 11:44:21 2025 -0700" }, "message": "Merge tag \u0027mailbox-v6.18\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jassibrar/mailbox\n\nPull mailbox updates from Jassi Brar:\n\n - Qualcomm: add Glymur CPUCP mailbox binding\n\n - Xilinx Zynq: misc cleanup\n\n - MediaTek:\n - add new GPUEB mailbox driver\n - cmdq: remove pm_runtime calls from send_data\n - gce: make clock-names optional\n\n - misc:\n - change mailbox-altera maintainer\n - remove redundant \u0027fast_io\u0027 in regmap_config\n - mhuv3: Remove no_free_ptr\n\n* tag \u0027mailbox-v6.18\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jassibrar/mailbox:\n mailbox: mtk-cmdq: Remove pm_runtime APIs from cmdq_mbox_send_data()\n mailbox: add MediaTek GPUEB IPI mailbox\n dt-bindings: mailbox: Add MT8196 GPUEB Mailbox\n mailbox: zynqmp-ipi: Fix SGI cleanup on unbind\n mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop\n mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes\n mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call\n mailbox: remove unneeded \u0027fast_io\u0027 parameter in regmap_config\n dt-bindings: mailbox: mediatek,gce-mailbox: Make clock-names optional\n dt-bindings: mailbox: qcom: Document Glymur CPUCP mailbox controller binding\n MAINTAINERS: Change mailbox-altera maintainer\n mailbox: arm_mhuv3: Remove no_free_ptr() to maintain the original form of the pointer\n" }, { "commit": "ed4d6e92463e8dfe6dfb971f8edc6b5d9ea18722", "tree": "16a2d7960c7da625f6e2244814a92fd153d0afe1", "parents": [ "99cedb6b8f4101e2780f10b9e76d2f346a1e4316", "451bb96328981808463405d436bd58de16dd967d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Oct 08 11:22:27 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Oct 08 11:22:27 2025 -0700" }, "message": "Merge tag \u0027vfio-v6.18-rc1-pt2\u0027 of https://github.com/awilliam/linux-vfio\n\nPull more VFIO updates from Alex Williamson:\n\n - Optimizations for DMA map and unmap opertions through the type1 vfio\n IOMMU backend.\n\n This uses various means of batching and hints from the mm structures\n to improve efficiency and therefore performance, resulting in a\n significant speedup for huge page use cases (Li Zhe)\n\n - Expose supported device migration features through debugfs (Cédric Le\n Goater)\n\n* tag \u0027vfio-v6.18-rc1-pt2\u0027 of https://github.com/awilliam/linux-vfio:\n vfio: Dump migration features under debugfs\n vfio/type1: optimize vfio_unpin_pages_remote()\n vfio/type1: introduce a new member has_rsvd for struct vfio_dma\n vfio/type1: batch vfio_find_vpfn() in function vfio_unpin_pages_remote()\n vfio/type1: optimize vfio_pin_pages_remote()\n mm: introduce num_pages_contiguous()\n" }, { "commit": "99cedb6b8f4101e2780f10b9e76d2f346a1e4316", "tree": "0a1055e261969bf720aafccb9355cb6e94a0fe30", "parents": [ "7c8dcac8d72da94328f4de7bf98320b75710da1f", "8b87f67b4c87452e21721887fa8dec1f4c6b2b7c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Oct 08 09:44:38 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Oct 08 09:44:38 2025 -0700" }, "message": "Merge tag \u0027input-for-v6.18-rc0\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input\n\nPull input updates from Dmitry Torokhov:\n\n - Conversions to yaml/json schema and fixes for input-related device\n tree bindings\n\n - New drivers:\n - Awinic AW86927 haptic chip\n - Hynitron CST816x series controller\n - Himax HX852x(ES) touchscreen controller\n\n - Fix uinput to not leak kernel memory via a gap in\n uinput_ff_upload_compat structure\n\n - Prevent overflow in pressure calculation in tsc2007 driver causing\n phantom touches\n\n - Make the Atmel maxTouch driver support generic touchscreen\n configuration (flip, rotate, etc)\n\n - Drop support for platform data in tca8418_keypad, pxa27x-keypad,\n spear-keyboard and twl4030_keypad drivers, they all now rely on\n generic device properties for configuration\n\n - Other assorted changes and fixes\n\n* tag \u0027input-for-v6.18-rc0\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input: (50 commits)\n Input: atmel_mxt_ts - allow reset GPIO to sleep\n Input: aw86927 - fix error code in probe()\n Input: psxpad-spi - add a check for the return value of spi_setup()\n Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak\n Input: aw86927 - add driver for Awinic AW86927\n dt-bindings: input: Add Awinic AW86927\n dt-bindings: touchscreen: remove touchscreen.txt\n dt-bindings: arm: bcm: raspberrypi,bcm2835-firmware: Add touchscreen child node\n dt-bindings: touchscreen: convert eeti bindings to json schema\n Input: pm8941-pwrkey - disable wakeup for resin by default\n dt-bindings: input: pm8941-pwrkey: Document wakeup-source property\n Input: add driver for Hynitron CST816x series\n dt-bindings: input: touchscreen: add hynitron cst816x series\n Input: imx6ul_tsc - set glitch threshold by DTS property\n dt-bindings: touchscreen: fsl,imx6ul-tsc: support glitch thresold\n dt-bindings: touchscreen: add debounce-delay-us property\n Input: ps2-gpio - fix typo\n Input: atmel_mxt_ts - add support for generic touchscreen configurations\n dt-bindings: input: maxtouch: add common touchscreen properties\n dt-bindings: touchscreen: convert zet6223 bindings to json schema\n ...\n" }, { "commit": "7c8dcac8d72da94328f4de7bf98320b75710da1f", "tree": "03f9697f5d4ae2bee4a565686bdaa0ae93e54443", "parents": [ "0d97f2067c166eb495771fede9f7b73999c67f66", "c0d36727bf39bb16ef0a67ed608e279535ebf0da" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Oct 08 09:38:31 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Oct 08 09:38:31 2025 -0700" }, "message": "Merge tag \u0027v6.18-p2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6\n\nPull crypto fixes from Herbert Xu:\n\n - Fix zstd regression\n\n - Ensure ti driver algorithm are set as async\n\n - Revert patch disabling SHA1 in FIPS mode\n\n - Fix RNG set_ent null-pointer dereference\n\n* tag \u0027v6.18-p2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:\n crypto: rng - Ensure set_ent is always present\n Revert \"crypto: testmgr - desupport SHA-1 for FIPS 140\"\n crypto: ti - Add CRYPTO_ALG_ASYNC flag to DTHEv2 AES algos\n crypto: zstd - Fix compression bug caused by truncation\n" }, { "commit": "c834a97962c708ff5bb8582ca76b0e1225feb675", "tree": "9f83abd490815f5ebc9152e3db680692221a41e4", "parents": [ "4f7bf54b07e5acf79edd58dafede4096854776cd" ], "author": { "name": "Steven Rostedt", "email": "rostedt@goodmis.org", "time": "Wed Oct 08 11:49:43 2025 -0400" }, "committer": { "name": "Steven Rostedt (Google)", "email": "rostedt@goodmis.org", "time": "Wed Oct 08 12:10:44 2025 -0400" }, "message": "tracing: Fix irqoff tracers on failure of acquiring calltime\n\nThe functions irqsoff_graph_entry() and irqsoff_graph_return() both call\nfunc_prolog_dec() that will test if the data-\u003edisable is already set and\nif not, increment it and return. If it was set, it returns false and the\ncaller exits.\n\nThe caller of this function must decrement the disable counter, but misses\ndoing so if the calltime fails to be acquired.\n\nInstead of exiting out when calltime is NULL, change the logic to do the\nwork if it is not NULL and still do the clean up at the end of the\nfunction if it is NULL.\n\nCc: stable@vger.kernel.org\nCc: Masami Hiramatsu \u003cmhiramat@kernel.org\u003e\nCc: Mathieu Desnoyers \u003cmathieu.desnoyers@efficios.com\u003e\nLink: https://lore.kernel.org/20251008114943.6f60f30f@gandalf.local.home\nFixes: a485ea9e3ef3 (\"tracing: Fix irqsoff and wakeup latency tracers when using function graph\")\nReported-by: Sasha Levin \u003csashal@kernel.org\u003e\nCloses: https://lore.kernel.org/linux-trace-kernel/20251006175848.1906912-2-sashal@kernel.org/\nSigned-off-by: Steven Rostedt (Google) \u003crostedt@goodmis.org\u003e\n" }, { "commit": "4f7bf54b07e5acf79edd58dafede4096854776cd", "tree": "d9fb7826270ae00107aabfe8ea1acee4c8c9eb94", "parents": [ "f0c029d2ff42499a62c873c14428f02bf94c28af" ], "author": { "name": "Steven Rostedt", "email": "rostedt@goodmis.org", "time": "Wed Oct 08 11:48:35 2025 -0400" }, "committer": { "name": "Steven Rostedt (Google)", "email": "rostedt@goodmis.org", "time": "Wed Oct 08 12:10:26 2025 -0400" }, "message": "tracing: Fix wakeup tracers on failure of acquiring calltime\n\nThe functions wakeup_graph_entry() and wakeup_graph_return() both call\nfunc_prolog_preempt_disable() that will test if the data-\u003edisable is\nalready set and if not, increment it and disable preemption. If it was\nset, it returns false and the caller exits.\n\nThe caller of this function must decrement the disable counter, but misses\ndoing so if the calltime fails to be acquired.\n\nInstead of exiting out when calltime is NULL, change the logic to do the\nwork if it is not NULL and still do the clean up at the end of the\nfunction if it is NULL.\n\nCc: stable@vger.kernel.org\nCc: Masami Hiramatsu \u003cmhiramat@kernel.org\u003e\nCc: Mathieu Desnoyers \u003cmathieu.desnoyers@efficios.com\u003e\nLink: https://lore.kernel.org/20251008114835.027b878a@gandalf.local.home\nFixes: a485ea9e3ef3 (\"tracing: Fix irqsoff and wakeup latency tracers when using function graph\")\nReported-by: Sasha Levin \u003csashal@kernel.org\u003e\nCloses: https://lore.kernel.org/linux-trace-kernel/20251006175848.1906912-1-sashal@kernel.org/\nSigned-off-by: Steven Rostedt (Google) \u003crostedt@goodmis.org\u003e\n" }, { "commit": "f0c029d2ff42499a62c873c14428f02bf94c28af", "tree": "1d04e5e9f1bc9139d256b96f7eb85cef2bd429ee", "parents": [ "e5f0a698b34ed76002dc5cff3804a61c80233a7a" ], "author": { "name": "Thorsten Blum", "email": "thorsten.blum@linux.dev", "time": "Wed Oct 01 15:09:07 2025 +0200" }, "committer": { "name": "Steven Rostedt (Google)", "email": "rostedt@goodmis.org", "time": "Wed Oct 08 12:05:46 2025 -0400" }, "message": "tracing/osnoise: Replace kmalloc + copy_from_user with memdup_user_nul\n\nReplace kmalloc() followed by copy_from_user() with memdup_user_nul() to\nsimplify and improve osnoise_cpus_write(). Remove the manual\nNUL-termination.\n\nNo functional changes intended.\n\nCc: Masami Hiramatsu \u003cmhiramat@kernel.org\u003e\nCc: Mathieu Desnoyers \u003cmathieu.desnoyers@efficios.com\u003e\nLink: https://lore.kernel.org/20251001130907.364673-2-thorsten.blum@linux.dev\nSigned-off-by: Thorsten Blum \u003cthorsten.blum@linux.dev\u003e\nSigned-off-by: Steven Rostedt (Google) \u003crostedt@goodmis.org\u003e\n" }, { "commit": "e9a9dcb4ccb32446165800a9d83058e95c4833d2", "tree": "4a7baee9295601d0fedac470c2866f632831be66", "parents": [ "09cfd3c52ea76f43b3cb15e570aeddf633d65e80" ], "author": { "name": "Pavel Begunkov", "email": "asml.silence@gmail.com", "time": "Wed Oct 08 13:39:01 2025 +0100" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Wed Oct 08 07:26:14 2025 -0600" }, "message": "io_uring/zcrx: increment fallback loop src offset\n\nDon\u0027t forget to adjust the source offset in io_copy_page(), otherwise\nit\u0027ll be copying into the same location in some cases for highmem\nsetups.\n\nFixes: e67645bb7f3f4 (\"io_uring/zcrx: prepare fallback for larger pages\")\nSigned-off-by: Pavel Begunkov \u003casml.silence@gmail.com\u003e\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "09cfd3c52ea76f43b3cb15e570aeddf633d65e80", "tree": "1b88c8144d720d4c351e690a3b2d15ba72c3ae91", "parents": [ "beb97995b97532e1f215e3295e6843e59862f94b" ], "author": { "name": "Pavel Begunkov", "email": "asml.silence@gmail.com", "time": "Wed Oct 08 13:38:06 2025 +0100" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Wed Oct 08 07:26:08 2025 -0600" }, "message": "io_uring/zcrx: fix overshooting recv limit\n\nIt\u0027s reported that sometimes a zcrx request can receive more than was\nrequested. It\u0027s caused by io_zcrx_recv_skb() adjusting desc-\u003ecount for\nall received buffers including frag lists, but then doing recursive\ncalls to process frag list skbs, which leads to desc-\u003ecount double\naccounting and underflow.\n\nReported-and-tested-by: Matthias Jasny \u003cmatthiasjasny@gmail.com\u003e\nFixes: 6699ec9a23f85 (\"io_uring/zcrx: add a read limit to recvzc requests\")\nCc: stable@vger.kernel.org\nSigned-off-by: Pavel Begunkov \u003casml.silence@gmail.com\u003e\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "455281c0ef4e2cabdfe2e8b83fa6010d5210811c", "tree": "db7358b554c602e55375a2bce2312a9b5729caae", "parents": [ "506aa235f6e0baa00bf792df82a5e9f618b7a5d8" ], "author": { "name": "Pedro Demarchi Gomes", "email": "pedrodemargomes@gmail.com", "time": "Tue Oct 07 15:12:05 2025 -0300" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Wed Oct 08 06:27:53 2025 -0600" }, "message": "loop: remove redundant __GFP_NOWARN flag\n\nGFP_NOWAIT already includes __GFP_NOWARN, so let\u0027s remove the\nredundant __GFP_NOWARN.\n\nSigned-off-by: Pedro Demarchi Gomes \u003cpedrodemargomes@gmail.com\u003e\nReviewed-by: Yu Kuai \u003cyukuai3@huawei.com\u003e\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "deabb34b66b96c941ac0b3d01a6a6804c3274a78", "tree": "f504ab1ca44f7270e3af71e1016eb0bc82c49c5a", "parents": [ "09dc3972be3f6191ab021ac01932bf5279f961f0" ], "author": { "name": "Thomas Huth", "email": "thuth@redhat.com", "time": "Thu Oct 02 17:54:23 2025 +0200" }, "committer": { "name": "Alexander Gordeev", "email": "agordeev@linux.ibm.com", "time": "Wed Oct 08 13:58:37 2025 +0200" }, "message": "s390/uv: Fix comment of uv_find_secret() function\n\nThe uv_get_secret_metadata() function has been removed some\nmonths ago, so we should not mention it in the comment anymore.\n\nFixes: a42831f0b74dc (\"s390/uv: Remove uv_get_secret_metadata function\")\nSigned-off-by: Thomas Huth \u003cthuth@redhat.com\u003e\nAcked-by: Claudio Imbrenda \u003cimbrenda@linux.ibm.com\u003e\nSigned-off-by: Heiko Carstens \u003chca@linux.ibm.com\u003e\nSigned-off-by: Alexander Gordeev \u003cagordeev@linux.ibm.com\u003e\n" }, { "commit": "ca7a2317993efa26eb2100a1523548f1b3a07af0", "tree": "2c6489eabc721338ff40ffe812c26b6106fb06e7", "parents": [ "f4ace70faa8ff2890774bac86762e036a3651066", "a27539810e1e61efcfdeb51777ed875dc61e9d49" ], "author": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Wed Oct 08 13:52:14 2025 +0200" }, "committer": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Wed Oct 08 13:52:14 2025 +0200" }, "message": "Merge tag \u0027asoc-fix-v6.18-merge-window\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linus\n\nASoC: Fixes for v6.18\n\nA small pile of fixes, almost all for the Intel and SOF code surrounding\nmanagement of the host buffer. We\u0027ve also got one fix for Meson and new\ndevice IDs and quirk supporting the RT722VB.\n" }, { "commit": "e84945bdc619ed4243ba4298dbb8ca2062026474", "tree": "eb5932fc622ec8dd17eeb5b5e0c910ee85395fc8", "parents": [ "a126ab6b26f107f4eb100c8c77e9f10b706f26e6" ], "author": { "name": "Florian Westphal", "email": "fw@strlen.de", "time": "Thu Oct 02 15:05:41 2025 +0200" }, "committer": { "name": "Florian Westphal", "email": "fw@strlen.de", "time": "Wed Oct 08 13:17:31 2025 +0200" }, "message": "selftests: netfilter: query conntrack state to check for port clash resolution\n\nJakub reported this self test flaking occasionally (fails, but passes on\nre-run) on debug kernels.\n\nThis is because the test checks for elapsed time to determine if both\nconnections were established in parallel.\n\nRework this to no longer depend on timing.\nUse busywait helper to check that both sockets have moved to established\nstate and then query the conntrack engine for the two entries.\n\nReported-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\nCloses: https://lore.kernel.org/netfilter-devel/20250926163318.40d1a502@kernel.org/\nFixes: 117e149e26d1 (\"selftests: netfilter: test nat source port clash resolution interaction with tcp early demux\")\nSigned-off-by: Florian Westphal \u003cfw@strlen.de\u003e\n" }, { "commit": "a126ab6b26f107f4eb100c8c77e9f10b706f26e6", "tree": "13420e69f470d2b62ba396fd89ebeea4650be7ad", "parents": [ "bbf0c98b3ad9edaea1f982de6c199cc11d3b7705" ], "author": { "name": "Florian Westphal", "email": "fw@strlen.de", "time": "Thu Oct 02 15:00:06 2025 +0200" }, "committer": { "name": "Florian Westphal", "email": "fw@strlen.de", "time": "Wed Oct 08 13:17:31 2025 +0200" }, "message": "selftests: netfilter: nft_fib.sh: fix spurious test failures\n\nJakub reports spurious failure of nft_fib.sh test.\nThis is caused by a subtle bug inherited when i moved faulty ping\nfrom one test case to another.\n\nnft_fib.sh not only checks that the fib expression matched, it also\nrecords the number of matches and then validates we have the expected\ncount. When I did this it was under the assumption that we would\nhave 0 to n matching packets. In case of the failure, the entry has\nn+1 matching packets.\n\nThis happens because ping_unreachable helper uses \"ping -c 1 -w 1\",\ninstead of the intended \"-W\". -w alters the meaning of -c (count),\nnamely, its then treated as number of wanted *replies* instead of\n\"number of packets to send\".\n\nSo, in some cases, ping -c 1 -w 1 ends up sending two packets which then\nmakes the test fail due to the higher-than-expected packet count.\n\nFix the actual bug (s/-w/-W) and also change the error handling:\n1. Show the number of expected packets in the error message\n2. Always try to delete the key from the set.\n Else, later test that makes sure we don\u0027t have unexpected keys\n in there will always fail as well.\n\nReported-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\nCloses: https://lore.kernel.org/netfilter-devel/20250927090709.0b3cd783@kernel.org/\nFixes: 98287045c979 (\"selftests: netfilter: move fib vrf test to nft_fib.sh\")\nSigned-off-by: Florian Westphal \u003cfw@strlen.de\u003e\n" } ], "next": "bbf0c98b3ad9edaea1f982de6c199cc11d3b7705" }