)]}'
{
  "log": [
    {
      "commit": "75690493591fe283e4c92a3ba7c4420e9858abdb",
      "tree": "6a9e05748db7f109e8106e93b9d3bf2824398bf9",
      "parents": [
        "d07cec9c238ae8fc6c1a9f3f5d30a2f8ec6cdc71"
      ],
      "author": {
        "name": "Zhihao Cheng",
        "email": "chengzhihao1@huawei.com",
        "time": "Sat Sep 23 11:28:59 2023 +0800"
      },
      "committer": {
        "name": "Richard Weinberger",
        "email": "richard@nod.at",
        "time": "Sat Oct 28 23:19:08 2023 +0200"
      },
      "message": "ubifs: ubifs_link: Fix wrong name len calculating when UBIFS is encrypted\n\nThe length of dentry name is calculated after the raw name is encrypted,\nexcept for ubifs_link(), which could make the size of dir underflow.\nHere is a reproducer:\n\n touch $TMP/file\n mkdir $TMP/dir\n stat $TMP/dir\n for i in $(seq 1 8)\n do\n   ln $TMP/file $TMP/dir/$i\n   unlink $TMP/dir/$i\n done\n stat $TMP/dir\n\nThe size of dir will be underflow(-96).\n\nFix it by calculating dentry name\u0027s length after the name is encrypted.\n\nFixes: f4f61d2cc6d8 (\"ubifs: Implement encrypted filenames\")\nReported-by: Roland Ruckerbauer \u003croland.ruckerbauer@robart.cc\u003e\nLink: https://lore.kernel.org/linux-mtd/1638777819.2925845.1695222544742.JavaMail.zimbra@robart.cc/T/#u\nSigned-off-by: Zhihao Cheng \u003cchengzhihao1@huawei.com\u003e\nSigned-off-by: Richard Weinberger \u003crichard@nod.at\u003e\n"
    },
    {
      "commit": "d07cec9c238ae8fc6c1a9f3f5d30a2f8ec6cdc71",
      "tree": "5b8022c4e2075eb26ae2bbdbf775f6c577673344",
      "parents": [
        "d81efd66106c03771ffc8637855a6ec24caa6350"
      ],
      "author": {
        "name": "ZhaoLong Wang",
        "email": "wangzhaolong1@huawei.com",
        "time": "Thu Sep 21 10:01:42 2023 +0800"
      },
      "committer": {
        "name": "Richard Weinberger",
        "email": "richard@nod.at",
        "time": "Sat Oct 28 23:18:39 2023 +0200"
      },
      "message": "ubi: block: Fix use-after-free in ubiblock_cleanup\n\nThe following BUG is reported when a ubiblock is removed:\n\n \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n BUG: KASAN: slab-use-after-free in ubiblock_cleanup+0x88/0xa0 [ubi]\n Read of size 4 at addr ffff88810c8f3804 by task ubiblock/1716\n\n CPU: 5 PID: 1716 Comm: ubiblock Not tainted 6.6.0-rc2+ #135\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS ?-20190727_073836-buildvm-ppc64le-16.ppc.fedoraproject.org-3.fc31 04/01/2014\n Call Trace:\n  \u003cTASK\u003e\n  dump_stack_lvl+0x37/0x50\n  print_report+0xd0/0x620\n  kasan_report+0xb6/0xf0\n  ubiblock_cleanup+0x88/0xa0 [ubi]\n  ubiblock_remove+0x121/0x190 [ubi]\n  vol_cdev_ioctl+0x355/0x630 [ubi]\n  __x64_sys_ioctl+0xc7/0x100\n  do_syscall_64+0x3f/0x90\n  entry_SYSCALL_64_after_hwframe+0x6e/0xd8\n RIP: 0033:0x7f08d7445577\n Code: b3 66 90 48 8b 05 11 89 2c 00 64 c7 00 26 00 00 00 48 c7 c0 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 b8 10 00 00 00 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 8\n RSP: 002b:00007ffde05a3018 EFLAGS: 00000206 ORIG_RAX: 0000000000000010\n RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f08d7445577\n RDX: 0000000000000000 RSI: 0000000000004f08 RDI: 0000000000000003\n RBP: 0000000000816010 R08: 00000000008163a7 R09: 0000000000000000\n R10: 0000000000000003 R11: 0000000000000206 R12: 0000000000000003\n R13: 00007ffde05a3130 R14: 0000000000000000 R15: 0000000000000000\n  \u003c/TASK\u003e\n\n Allocated by task 1715:\n  kasan_save_stack+0x22/0x50\n  kasan_set_track+0x25/0x30\n  __kasan_kmalloc+0x7f/0x90\n  __alloc_disk_node+0x40/0x2b0\n  __blk_mq_alloc_disk+0x3e/0xb0\n  ubiblock_create+0x2ba/0x620 [ubi]\n  vol_cdev_ioctl+0x581/0x630 [ubi]\n  __x64_sys_ioctl+0xc7/0x100\n  do_syscall_64+0x3f/0x90\n  entry_SYSCALL_64_after_hwframe+0x6e/0xd8\n\n Freed by task 0:\n  kasan_save_stack+0x22/0x50\n  kasan_set_track+0x25/0x30\n  kasan_save_free_info+0x2b/0x50\n  __kasan_slab_free+0x10e/0x190\n  __kmem_cache_free+0x96/0x220\n  bdev_free_inode+0xa4/0xf0\n  rcu_core+0x496/0xec0\n  __do_softirq+0xeb/0x384\n\n The buggy address belongs to the object at ffff88810c8f3800\n  which belongs to the cache kmalloc-1k of size 1024\n The buggy address is located 4 bytes inside of\n  freed 1024-byte region [ffff88810c8f3800, ffff88810c8f3c00)\n\n The buggy address belongs to the physical page:\n page:00000000d03de848 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10c8f0\n head:00000000d03de848 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0\n flags: 0x200000000000840(slab|head|node\u003d0|zone\u003d2)\n page_type: 0xffffffff()\n raw: 0200000000000840 ffff888100042dc0 ffffea0004244400 dead000000000002\n raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000\n page dumped because: kasan: bad access detected\n\n Memory state around the buggy address:\n  ffff88810c8f3700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n  ffff88810c8f3780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n \u003effff88810c8f3800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n                    ^\n  ffff88810c8f3880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n  ffff88810c8f3900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nFix it by using a local variable to record the gendisk ID.\n\nFixes: 77567b25ab9f (\"ubi: use blk_mq_alloc_disk and blk_cleanup_disk\")\nSigned-off-by: ZhaoLong Wang \u003cwangzhaolong1@huawei.com\u003e\nReviewed-by: Zhihao Cheng \u003cchengzhihao1@huawei.com\u003e\nSigned-off-by: Richard Weinberger \u003crichard@nod.at\u003e\n"
    },
    {
      "commit": "d81efd66106c03771ffc8637855a6ec24caa6350",
      "tree": "b78dfa9992f9b4791c1dfbb18af36abb78154615",
      "parents": [
        "ac085cfe57df2cc1d7a5c4c5e64b8780c8ad452f"
      ],
      "author": {
        "name": "Konstantin Meskhidze",
        "email": "konstantin.meskhidze@huawei.com",
        "time": "Tue Sep 05 18:12:22 2023 +0800"
      },
      "committer": {
        "name": "Richard Weinberger",
        "email": "richard@nod.at",
        "time": "Sat Oct 28 23:18:12 2023 +0200"
      },
      "message": "ubifs: fix possible dereference after free\n\n\u0027old_idx\u0027 could be dereferenced after free via \u0027rb_link_node\u0027 function\ncall.\n\nFixes: b5fda08ef213 (\"ubifs: Fix memleak when insert_old_idx() failed\")\nCo-developed-by: Ivanov Mikhail \u003civanov.mikhail1@huawei-partners.com\u003e\nSigned-off-by: Konstantin Meskhidze \u003ckonstantin.meskhidze@huawei.com\u003e\nReviewed-by: Zhihao Cheng \u003cchengzhihao1@huawei.com\u003e\nSigned-off-by: Richard Weinberger \u003crichard@nod.at\u003e\n"
    },
    {
      "commit": "ac085cfe57df2cc1d7a5c4c5e64b8780c8ad452f",
      "tree": "22e450f1ed9849e2a0c5840abfdd5401e0c1a37e",
      "parents": [
        "d4c48e5b58f12835de779f5425ef741c4d0fb53e"
      ],
      "author": {
        "name": "Zhihao Cheng",
        "email": "chengzhihao1@huawei.com",
        "time": "Mon Aug 28 14:38:45 2023 +0800"
      },
      "committer": {
        "name": "Richard Weinberger",
        "email": "richard@nod.at",
        "time": "Sat Oct 28 23:16:00 2023 +0200"
      },
      "message": "ubi: fastmap: Add control in \u0027UBI_IOCATT\u0027 ioctl to reserve PEBs for filling pools\n\nThis patch imports a new field \u0027need_resv_pool\u0027 in struct \u0027ubi_attach_req\u0027\nto control whether or not reserving free PEBs for filling pool/wl_pool.\n\nLink: https://bugzilla.kernel.org/show_bug.cgi?id\u003d217787\nSigned-off-by: Zhihao Cheng \u003cchengzhihao1@huawei.com\u003e\nSigned-off-by: Richard Weinberger \u003crichard@nod.at\u003e\n"
    },
    {
      "commit": "d4c48e5b58f12835de779f5425ef741c4d0fb53e",
      "tree": "5ac8c422f56e56b4bcfae28fbf7647135f733b88",
      "parents": [
        "90e0be56144b064be1a816cbdd184d2a8be7061b"
      ],
      "author": {
        "name": "Zhihao Cheng",
        "email": "chengzhihao1@huawei.com",
        "time": "Mon Aug 28 14:38:44 2023 +0800"
      },
      "committer": {
        "name": "Richard Weinberger",
        "email": "richard@nod.at",
        "time": "Sat Oct 28 23:15:44 2023 +0200"
      },
      "message": "ubi: fastmap: Add module parameter to control reserving filling pool PEBs\n\nAdding 6th module parameter in \u0027mtd\u003dxxx\u0027 to control whether or not\nreserving PEBs for filling pool/wl_pool.\n\nSigned-off-by: Zhihao Cheng \u003cchengzhihao1@huawei.com\u003e\nSigned-off-by: Richard Weinberger \u003crichard@nod.at\u003e\n"
    },
    {
      "commit": "90e0be56144b064be1a816cbdd184d2a8be7061b",
      "tree": "38834ef56ca009e4abce74a902f8b3a4c1f4683e",
      "parents": [
        "761893bd490b039258fda893c2a15fa59334c820"
      ],
      "author": {
        "name": "Zhihao Cheng",
        "email": "chengzhihao1@huawei.com",
        "time": "Mon Aug 28 14:38:43 2023 +0800"
      },
      "committer": {
        "name": "Richard Weinberger",
        "email": "richard@nod.at",
        "time": "Sat Oct 28 23:14:55 2023 +0200"
      },
      "message": "ubi: fastmap: Fix lapsed wear leveling for first 64 PEBs\n\nThe anchor PEB must be picked from first 64 PEBs, these PEBs could have\nlarge erase counter greater than other PEBs especially when free space\nis nearly running out.\nThe ubi_update_fastmap will be called as long as pool/wl_pool is empty,\nold anchor PEB is erased when updating fastmap. Given an UBI device with\nN PEBs, free PEBs is nearly running out and pool will be filled with 1\nPEB every time ubi_update_fastmap invoked. So t\u003dN/POOL_SIZE[1]/64 means\nthat in worst case the erase counter of first 64 PEBs is t times greater\nthan other PEBs in theory.\nAfter running fsstress for 24h, the erase counter statistics for two UBI\ndevices shown as follow(CONFIG_MTD_UBI_WL_THRESHOLD\u003d128):\n\nDevice A(1024 PEBs, pool\u003d50, wl_pool\u003d25):\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nfrom              to     count      min      avg      max\n---------------------------------------------------------\n0        ..        9:        0        0        0        0\n10       ..       99:        0        0        0        0\n100      ..      999:        0        0        0        0\n1000     ..     9999:        0        0        0        0\n10000    ..    99999:      960    29224    29282    29362\n100000   ..      inf:       64   117897   117934   117940\n---------------------------------------------------------\nTotal               :     1024    29224    34822   117940\n\nDevice B(8192 PEBs, pool\u003d256, wl_pool\u003d128):\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nfrom              to     count      min      avg      max\n---------------------------------------------------------\n0        ..        9:        0        0        0        0\n10       ..       99:        0        0        0        0\n100      ..      999:        0        0        0        0\n1000     ..     9999:     8128     2253     2321     2387\n10000    ..    99999:       64    35387    35387    35388\n100000   ..      inf:        0        0        0        0\n---------------------------------------------------------\nTotal               :     8192     2253     2579    35388\n\nThe key point is reducing fastmap updating frequency by enlarging\nPOOL_SIZE, so let UBI reserve ubi-\u003efm_pool.max_size PEBs during\nattaching. Then POOL_SIZE will become ubi-\u003efm_pool.max_size/2 even\nin free space running out case.\nGiven an UBI device with 8192 PEBs(16384\\8192\\4096 is common\nlarge-capacity flash), t\u003d8192/128/64\u003d1. The fastmap updating will\nhappen in either wl_pool or pool is empty, so setting fm_pool_rsv_cnt\nas ubi-\u003efm_pool.max_size can fill wl_pool in full state.\n\nAfter pool reservation, running fsstress for 24h:\n\nDevice A(1024 PEBs, pool\u003d50, wl_pool\u003d25):\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nfrom              to     count      min      avg      max\n---------------------------------------------------------\n0        ..        9:        0        0        0        0\n10       ..       99:        0        0        0        0\n100      ..      999:        0        0        0        0\n1000     ..     9999:        0        0        0        0\n10000    ..    99999:     1024    33801    33997    34056\n100000   ..      inf:        0        0        0        0\n---------------------------------------------------------\nTotal               :     1024    33801    33997    34056\n\nDevice B(8192 PEBs, pool\u003d256, wl_pool\u003d128):\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nfrom              to     count      min      avg      max\n---------------------------------------------------------\n0        ..        9:        0        0        0        0\n10       ..       99:        0        0        0        0\n100      ..      999:        0        0        0        0\n1000     ..     9999:     8192     2205     2397     2460\n10000    ..    99999:        0        0        0        0\n100000   ..      inf:        0        0        0        0\n---------------------------------------------------------\nTotal               :     8192     2205     2397     2460\n\nThe difference of erase counter between first 64 PEBs and others is\nunder WL_FREE_MAX_DIFF(2*UBI_WL_THRESHOLD\u003d2*128\u003d256).\n  Device A: 34056 - 33801 \u003d 255\n  Device B: 2460 - 2205 \u003d 255\n\nNext patch will add a switch to control whether UBI needs to reserve\nPEBs for filling pool.\n\nFixes: dbb7d2a88d2a (\"UBI: Add fastmap core\")\nLink: https://bugzilla.kernel.org/show_bug.cgi?id\u003d217787\nSigned-off-by: Zhihao Cheng \u003cchengzhihao1@huawei.com\u003e\nSigned-off-by: Richard Weinberger \u003crichard@nod.at\u003e\n"
    },
    {
      "commit": "761893bd490b039258fda893c2a15fa59334c820",
      "tree": "098ecc0109750de81cbb973bde7af72ff1c170b2",
      "parents": [
        "eada823e6a6fb856548f6e0c7a343cd5c41bb9d3"
      ],
      "author": {
        "name": "Zhihao Cheng",
        "email": "chengzhihao1@huawei.com",
        "time": "Mon Aug 28 14:38:42 2023 +0800"
      },
      "committer": {
        "name": "Richard Weinberger",
        "email": "richard@nod.at",
        "time": "Sat Oct 28 23:07:54 2023 +0200"
      },
      "message": "ubi: fastmap: Get wl PEB even ec beyonds the \u0027max\u0027 if free PEBs are run out\n\nThis is the part 2 to fix cyclically reusing single fastmap data PEBs.\n\nConsider one situation, if there are four free PEBs for fm_anchor, pool,\nwl_pool and fastmap data PEB with erase counter 100, 100, 100, 5096\n(ubi-\u003ebeb_rsvd_pebs is 0). PEB with erase counter 5096 is always picked\nfor fastmap data according to the realization of find_wl_entry(), since\nfastmap data PEB is not scheduled for wl, finally there are two PEBs\n(fm data) with great erase counter than other PEBS.\nGet wl PEB even its erase counter exceeds the \u0027max\u0027 in find_wl_entry()\nwhen free PEBs are run out after filling pools and fm data. Then the PEB\nwith biggest erase conter is taken as wl PEB, it can be scheduled for wl.\n\nFixes: dbb7d2a88d2a (\"UBI: Add fastmap core\")\nLink: https://bugzilla.kernel.org/show_bug.cgi?id\u003d217787\nSigned-off-by: Zhihao Cheng \u003cchengzhihao1@huawei.com\u003e\nSigned-off-by: Richard Weinberger \u003crichard@nod.at\u003e\n"
    },
    {
      "commit": "eada823e6a6fb856548f6e0c7a343cd5c41bb9d3",
      "tree": "5f70ef0ba95926b2f4fd6439ceee00015aa4023a",
      "parents": [
        "415e4723c4325464d489c1ef3335eb6679905471"
      ],
      "author": {
        "name": "Zhihao Cheng",
        "email": "chengzhihao1@huawei.com",
        "time": "Mon Aug 28 14:38:41 2023 +0800"
      },
      "committer": {
        "name": "Richard Weinberger",
        "email": "richard@nod.at",
        "time": "Sat Oct 28 22:49:14 2023 +0200"
      },
      "message": "ubi: fastmap: may_reserve_for_fm: Don\u0027t reserve PEB if fm_anchor exists\n\nThis is the part 1 to fix cyclically reusing single fastmap data PEBs.\n\nAfter running fsstress on UBIFS for a while, UBI (16384 blocks, fastmap\ntakes 2 blocks) has an erase block(PEB: 8031) with big erase counter\ngreater than any other pebs:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nfrom              to     count      min      avg      max\n---------------------------------------------------------\n0        ..        9:        0        0        0        0\n10       ..       99:      532       84       92       99\n100      ..      999:    15787      100      147      229\n1000     ..     9999:       64     4699     4765     4826\n10000    ..    99999:        0        0        0        0\n100000   ..      inf:        1   272935   272935   272935\n---------------------------------------------------------\nTotal               :    16384       84      180   272935\n\nNot like fm_anchor, there is no candidate PEBs for fastmap data area,\nso old fastmap data pebs will be reused after all free pebs are filled\ninto pool/wl_pool:\nubi_update_fastmap\n for (i \u003d 1; i \u003c new_fm-\u003eused_blocks; i++)\n  erase_block(ubi, old_fm-\u003ee[i]-\u003epnum)\n  new_fm-\u003ee[i] \u003d old_fm-\u003ee[i]\n\nAccording to wear leveling algorithm, UBI selects one small erase\ncounter PEB from ubi-\u003eused and one big erase counter PEB from wl_pool,\nthe reused fastmap data PEB is not in these trees. UBI won\u0027t schedule\nthis PEB for wl even it is in ubi-\u003eused because wl algorithm expects\nsmall erase counter for used PEB.\n\nDon\u0027t reserve PEB for fastmap in may_reserve_for_fm() if fm_anchor\nalready exists. Otherwise, when UBI is running out of free PEBs,\nthe only one free PEB (pnum \u003c 64) will be skipped and fastmap data\nwill be written on the same old PEB.\n\nFixes: dbb7d2a88d2a (\"UBI: Add fastmap core\")\nLink: https://bugzilla.kernel.org/show_bug.cgi?id\u003d217787\nSigned-off-by: Zhihao Cheng \u003cchengzhihao1@huawei.com\u003e\nSigned-off-by: Richard Weinberger \u003crichard@nod.at\u003e\n"
    },
    {
      "commit": "415e4723c4325464d489c1ef3335eb6679905471",
      "tree": "05c791f028178ac08503877513cdfeac48b91fe1",
      "parents": [
        "a2ea69dac674df0fba59c66146a21145108a85ed"
      ],
      "author": {
        "name": "Zhihao Cheng",
        "email": "chengzhihao1@huawei.com",
        "time": "Mon Aug 28 14:38:40 2023 +0800"
      },
      "committer": {
        "name": "Richard Weinberger",
        "email": "richard@nod.at",
        "time": "Sat Oct 28 22:47:43 2023 +0200"
      },
      "message": "ubi: fastmap: Remove unneeded break condition while filling pools\n\nChange pool filling stop condition. Commit d09e9a2bddba (\"ubi:\nfastmap: Fix high cpu usage of ubi_bgt by making sure wl_pool\nnot empty\") reserves fastmap data PEBs after filling 1 PEB in\nwl_pool. Now wait_free_pebs_for_pool() makes enough free PEBs\nbefore filling pool, there will still be at least 1 PEB in pool\nand 1 PEB in wl_pool after doing ubi_refill_pools().\n\nSigned-off-by: Zhihao Cheng \u003cchengzhihao1@huawei.com\u003e\nSigned-off-by: Richard Weinberger \u003crichard@nod.at\u003e\n"
    },
    {
      "commit": "a2ea69dac674df0fba59c66146a21145108a85ed",
      "tree": "9a6b2e6b4f5c30fa4b653034fa78d488004f539b",
      "parents": [
        "8ff4e620ac93a5d332735e4f5a4ff31d80682b9a"
      ],
      "author": {
        "name": "Zhihao Cheng",
        "email": "chengzhihao1@huawei.com",
        "time": "Mon Aug 28 14:38:39 2023 +0800"
      },
      "committer": {
        "name": "Richard Weinberger",
        "email": "richard@nod.at",
        "time": "Sat Oct 28 22:43:40 2023 +0200"
      },
      "message": "ubi: fastmap: Wait until there are enough free PEBs before filling pools\n\nWait until there are enough free PEBs before filling pool/wl_pool,\nsometimes erase_worker is not scheduled in time, which causes two\nsituations:\n A. There are few PEBs filled in pool, which makes ubi_update_fastmap\n    is frequently called and leads first 64 PEBs are erased more times\n    than other PEBs. So waiting free PEBs before filling pool reduces\n    fastmap updating frequency and prolongs flash service life.\n B. In situation that space is nearly running out, ubi_refill_pools()\n    cannot make sure pool and wl_pool are filled with free PEBs, caused\n    by the delay of erase_worker. After this patch applied, there must\n    exist free PEBs in pool after one call of ubi_update_fastmap.\n\nBesides, this patch is a preparetion for fixing large erase counter in\nfastmap data block and fixing lapsed wear leveling for first 64 PEBs.\n\nLink: https://bugzilla.kernel.org/show_bug.cgi?id\u003d217787\nSigned-off-by: Zhihao Cheng \u003cchengzhihao1@huawei.com\u003e\nSigned-off-by: Richard Weinberger \u003crichard@nod.at\u003e\n"
    },
    {
      "commit": "8ff4e620ac93a5d332735e4f5a4ff31d80682b9a",
      "tree": "c5ec2b47c06be628c7e8e549c757e6d4a321bafc",
      "parents": [
        "c19286d70aaa361cdb073a68a1f66232c359e2fd"
      ],
      "author": {
        "name": "Zhihao Cheng",
        "email": "chengzhihao1@huawei.com",
        "time": "Mon Aug 28 14:38:38 2023 +0800"
      },
      "committer": {
        "name": "Richard Weinberger",
        "email": "richard@nod.at",
        "time": "Sat Oct 28 22:41:01 2023 +0200"
      },
      "message": "ubi: fastmap: Use free pebs reserved for bad block handling\n\nIf new bad PEBs occur, UBI firstly consumes ubi-\u003ebeb_rsvd_pebs, and then\nubi-\u003eavail_pebs, finally UBI becomes read-only if above two items are 0,\nwhich means that the amount of PEBs for user volumes is not effected.\nBesides, UBI reserves count of free PBEs is ubi-\u003ebeb_rsvd_pebs while\nfilling wl pool or getting free PEBs, but ubi-\u003eavail_pebs is not reserved.\nSo ubi-\u003ebeb_rsvd_pebs and ubi-\u003eavail_pebs have nothing to do with the\nusage of free PEBs, UBI can use all free PEBs.\n\nCommit 78d6d497a648 (\"UBI: Move fastmap specific functions out of wl.c\")\nhas removed beb_rsvd_pebs checking while filling pool. Now, don\u0027t reserve\nubi-\u003ebeb_rsvd_pebs while filling wl_pool. This will fill more PEBs in pool\nand also reduce fastmap updating frequency.\n\nAlso remove beb_rsvd_pebs checking in ubi_wl_get_fm_peb.\n\nLink: https://bugzilla.kernel.org/show_bug.cgi?id\u003d217787\nSigned-off-by: Zhihao Cheng \u003cchengzhihao1@huawei.com\u003e\nSigned-off-by: Richard Weinberger \u003crichard@nod.at\u003e\n"
    },
    {
      "commit": "c19286d70aaa361cdb073a68a1f66232c359e2fd",
      "tree": "80e22d6eac64c8ab4014ba81642ab87257b6312c",
      "parents": [
        "a033ab4fec5fd9194d1b6c0306efbdc75f70b142"
      ],
      "author": {
        "name": "Zhihao Cheng",
        "email": "chengzhihao1@huawei.com",
        "time": "Mon Aug 28 14:38:37 2023 +0800"
      },
      "committer": {
        "name": "Richard Weinberger",
        "email": "richard@nod.at",
        "time": "Sat Oct 28 22:34:24 2023 +0200"
      },
      "message": "ubi: Replace erase_block() with sync_erase()\n\nSince erase_block() has same logic with sync_erase(), just replace it\nwith sync_erase(), also rename \u0027sync_erase()\u0027 to \u0027ubi_sync_erase()\u0027.\n\nSigned-off-by: Zhihao Cheng \u003cchengzhihao1@huawei.com\u003e\nSigned-off-by: Richard Weinberger \u003crichard@nod.at\u003e\n"
    },
    {
      "commit": "a033ab4fec5fd9194d1b6c0306efbdc75f70b142",
      "tree": "bf72672f43d669910ad7b88ba5db6722227b7c67",
      "parents": [
        "08a4267874164b2e9c8c50831acd466f47208acc"
      ],
      "author": {
        "name": "Zhihao Cheng",
        "email": "chengzhihao1@huawei.com",
        "time": "Mon Aug 28 14:38:36 2023 +0800"
      },
      "committer": {
        "name": "Richard Weinberger",
        "email": "richard@nod.at",
        "time": "Sat Oct 28 22:33:39 2023 +0200"
      },
      "message": "ubi: fastmap: Allocate memory with GFP_NOFS in ubi_update_fastmap\n\nFunction ubi_update_fastmap could be called in IO context, for example:\n ubifs_writepage\n  do_writepage\n   ubifs_jnl_write_data\n    write_head\n     ubifs_wbuf_write_nolock\n      ubifs_leb_write\n       ubi_leb_write\n        ubi_eba_write_leb\n\t try_write_vid_and_data\n\t  ubi_wl_get_peb\n\t   ubi_update_fastmap\n\t    erase_block\n\nSo it\u0027s better to allocate memory with GFP_NOFS mode, in case waiting\npage writeback(dead loop).\n\nSigned-off-by: Zhihao Cheng \u003cchengzhihao1@huawei.com\u003e\nSigned-off-by: Richard Weinberger \u003crichard@nod.at\u003e\n"
    },
    {
      "commit": "08a4267874164b2e9c8c50831acd466f47208acc",
      "tree": "2e5fc76227813d51c5a4da1f5c2f88fc615c7420",
      "parents": [
        "4d18b5a57b16c21cf868369ca555068722c32b2d"
      ],
      "author": {
        "name": "Zhihao Cheng",
        "email": "chengzhihao1@huawei.com",
        "time": "Mon Aug 28 14:38:35 2023 +0800"
      },
      "committer": {
        "name": "Richard Weinberger",
        "email": "richard@nod.at",
        "time": "Sat Oct 28 22:32:58 2023 +0200"
      },
      "message": "ubi: fastmap: erase_block: Get erase counter from wl_entry rather than flash\n\nJust like sync_erase() does, getting erase counter from wl_entry is\nfaster than reading from flash.\n\nSigned-off-by: Zhihao Cheng \u003cchengzhihao1@huawei.com\u003e\nSigned-off-by: Richard Weinberger \u003crichard@nod.at\u003e\n"
    },
    {
      "commit": "4d18b5a57b16c21cf868369ca555068722c32b2d",
      "tree": "2ea73bcdb16c8bb5a38eed33c166081adccd0644",
      "parents": [
        "60f2f4a81d486348587a6901e744ca8f22dd9637"
      ],
      "author": {
        "name": "Zhihao Cheng",
        "email": "chengzhihao1@huawei.com",
        "time": "Mon Aug 28 14:38:34 2023 +0800"
      },
      "committer": {
        "name": "Richard Weinberger",
        "email": "richard@nod.at",
        "time": "Sat Oct 28 22:30:01 2023 +0200"
      },
      "message": "ubi: fastmap: Fix missed ec updating after erasing old fastmap data block\n\nAfter running fsstress on ubifs for a long time, UBI(16384 blocks,\nfastmap takes 2 blocks) has an erase block with different erase\ncounters displayed from two views:\n\nFrom ubiscan view: PEB 8031 has erase counter 31581\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nfrom              to     count      min      avg      max\n---------------------------------------------------------\n0        ..        9:        0        0        0        0\n10       ..       99:        0        0        0        0\n100      ..      999:    16383      290      315      781\n1000     ..     9999:        0        0        0        0\n10000    ..    99999:        1    31581    31581    31581\n100000   ..      inf:        0        0        0        0\n---------------------------------------------------------\nTotal               :    16384      290      317    31581\n\nFrom detailed_erase_block_info view: PEB 8031 has erase counter 7\nphysical_block_number   erase_count\n8030                    421\n8031                    7   # mem info is different from disk info\n8032                    434\n8033                    425\n8034                    431\n\nFollowing process missed updating erase counter in wl_entry(in memory):\nubi_update_fastmap\n for (i \u003d 1; i \u003c new_fm-\u003eused_blocks; i++) // update fastmap data\n  if (!tmp_e)\n   if (old_fm \u0026\u0026 old_fm-\u003ee[i])\n    erase_block(ubi, old_fm-\u003ee[i]-\u003epnum)\n     ret \u003d ubi_io_sync_erase(ubi, pnum, 0)\n     ec \u003d be64_to_cpu(ec_hdr-\u003eec)\n     ec +\u003d ret\n     ec_hdr-\u003eec \u003d cpu_to_be64(ec)\n     ubi_io_write_ec_hdr(ubi, pnum, ec_hdr)  // ec is updated on flash\n   // ec is not updated in old_fm-\u003ee[i] (in memory)\n\nFix it by passing wl_enter into erase_block() and updating erase\ncounter in erase_block().\n\nFixes: dbb7d2a88d2a (\"UBI: Add fastmap core\")\nSigned-off-by: Zhihao Cheng \u003cchengzhihao1@huawei.com\u003e\nSigned-off-by: Richard Weinberger \u003crichard@nod.at\u003e\n"
    },
    {
      "commit": "60f2f4a81d486348587a6901e744ca8f22dd9637",
      "tree": "ce10b7f6d564c6d86a4399b7e682f225dbbfa363",
      "parents": [
        "f4a04c97fb3b7edd7694e725b7dcf0d6901ebcdd"
      ],
      "author": {
        "name": "Ferry Meng",
        "email": "mengferry@linux.alibaba.com",
        "time": "Fri Aug 18 17:18:48 2023 +0800"
      },
      "committer": {
        "name": "Richard Weinberger",
        "email": "richard@nod.at",
        "time": "Sat Oct 28 22:10:52 2023 +0200"
      },
      "message": "ubifs: Fix missing error code err\n\nFix smatch warning:\n\nfs/ubifs/journal.c:1610 ubifs_jnl_truncate() warn: missing error code\n\u0027err\u0027\n\nSigned-off-by: Ferry Meng \u003cmengferry@linux.alibaba.com\u003e\nReviewed-by: Zhihao Cheng \u003cchengzhihao1@huawei.com\u003e\nSigned-off-by: Richard Weinberger \u003crichard@nod.at\u003e\n"
    },
    {
      "commit": "f4a04c97fb3b7edd7694e725b7dcf0d6901ebcdd",
      "tree": "3d6f2002fabab571862783279bb2f73c20c72c80",
      "parents": [
        "48ec6328de6c153a64474d9e5b6ec95f20f4142b"
      ],
      "author": {
        "name": "Vincent Whitchurch",
        "email": "vincent.whitchurch@axis.com",
        "time": "Tue Jul 18 14:41:45 2023 +0200"
      },
      "committer": {
        "name": "Richard Weinberger",
        "email": "richard@nod.at",
        "time": "Sat Oct 28 22:09:03 2023 +0200"
      },
      "message": "ubifs: Fix memory leak of bud-\u003elog_hash\n\nEnsure that the allocated bud-\u003elog_hash (if any) is freed in all cases\nwhen the bud itself is freed, to fix this leak caught by kmemleak:\n\n # keyctl add logon foo:bar data @s\n # echo clear \u003e /sys/kernel/debug/kmemleak\n # mount -t ubifs /dev/ubi0_0 mnt -o auth_hash_name\u003dsha256,auth_key\u003dfoo:bar\n # echo a \u003e mnt/x\n # umount mnt\n # mount -t ubifs /dev/ubi0_0 mnt -o auth_hash_name\u003dsha256,auth_key\u003dfoo:bar\n # umount mnt\n # sleep 5\n # echo scan \u003e /sys/kernel/debug/kmemleak\n # echo scan \u003e /sys/kernel/debug/kmemleak\n # cat /sys/kernel/debug/kmemleak\n unreferenced object 0xff... (size 128):\n   comm \"mount\"\n   backtrace:\n     __kmalloc\n     __ubifs_hash_get_desc+0x5d/0xe0 ubifs\n     ubifs_replay_journal\n     ubifs_mount\n     ...\n\nFixes: da8ef65f9573 (\"ubifs: Authenticate replayed journal\")\nSigned-off-by: Vincent Whitchurch \u003cvincent.whitchurch@axis.com\u003e\nReviewed-by: Zhihao Cheng \u003cchengzhihao1@huawei.com\u003e\nSigned-off-by: Richard Weinberger \u003crichard@nod.at\u003e\n"
    },
    {
      "commit": "48ec6328de6c153a64474d9e5b6ec95f20f4142b",
      "tree": "8bc712fddf172288471d73fa029bee95c5e597c1",
      "parents": [
        "58720809f52779dc0f08e53e54b014209d13eebb"
      ],
      "author": {
        "name": "Yang Li",
        "email": "yang.lee@linux.alibaba.com",
        "time": "Wed Jul 12 15:46:37 2023 +0800"
      },
      "committer": {
        "name": "Richard Weinberger",
        "email": "richard@nod.at",
        "time": "Sat Oct 28 22:03:14 2023 +0200"
      },
      "message": "ubifs: Fix some kernel-doc comments\n\nAdd description of @time and @flags in ubifs_update_time().\n\nto silence the warnings:\nfs/ubifs/file.c:1383: warning: Function parameter or member \u0027time\u0027 not described in \u0027ubifs_update_time\u0027\nfs/ubifs/file.c:1383: warning: Function parameter or member \u0027flags\u0027 not described in \u0027ubifs_update_time\u0027\n\nReported-by: Abaci Robot \u003cabaci@linux.alibaba.com\u003e\nCloses: https://bugzilla.openanolis.cn/show_bug.cgi?id\u003d5848\nSigned-off-by: Yang Li \u003cyang.lee@linux.alibaba.com\u003e\nReviewed-by: Zhihao Cheng \u003cchengzhihao1@huawei.com\u003e\nSigned-off-by: Richard Weinberger \u003crichard@nod.at\u003e\n"
    },
    {
      "commit": "58720809f52779dc0f08e53e54b014209d13eebb",
      "tree": "7e636a7e96990615b8ba551ffa3db3bd19c5dd77",
      "parents": [
        "fbe1bf1e5ff1e3b298420d7a8434983ef8d72bd1"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sun Oct 15 13:34:39 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sun Oct 15 13:34:39 2023 -0700"
      },
      "message": "Linux 6.6-rc6\n"
    },
    {
      "commit": "fbe1bf1e5ff1e3b298420d7a8434983ef8d72bd1",
      "tree": "f5b8b0b8edc3264d288123bf2cf29c8a9cfdcba7",
      "parents": [
        "5720c43d5216b5dbd9ab25595f7c61e55d36d4fc"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sun Oct 15 12:02:02 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sun Oct 15 12:02:02 2023 -0700"
      },
      "message": "Revert \"x86/smp: Put CPUs into INIT on shutdown if possible\"\n\nThis reverts commit 45e34c8af58f23db4474e2bfe79183efec09a18b, and the\ntwo subsequent fixes to it:\n\n  3f874c9b2aae (\"x86/smp: Don\u0027t send INIT to non-present and non-booted CPUs\")\n  b1472a60a584 (\"x86/smp: Don\u0027t send INIT to boot CPU\")\n\nbecause it seems to result in hung machines at shutdown.  Particularly\nsome Dell machines, but Thomas says\n\n \"The rest seems to be Lenovo and Sony with Alderlake/Raptorlake CPUs -\n  at least that\u0027s what I could figure out from the various bug reports.\n\n  I don\u0027t know which CPUs the DELL machines have, so I can\u0027t say it\u0027s a\n  pattern.\n\n  I agree with the revert for now\"\n\nAshok Raj chimes in:\n\n \"There was a report (probably this same one), and it turns out it was a\n  bug in the BIOS SMI handler.\n\n  The client BIOS\u0027s were waiting for the lowest APICID to be the SMI\n  rendevous master. If this is MeteorLake, the BSP wasn\u0027t the one with\n  the lowest APIC and it triped here.\n\n  The BIOS change is also being pushed to others for assimilation :)\n\n  Server BIOS\u0027s had this correctly for a while now\"\n\nand it does look likely to be some bad interaction between SMI and the\nnon-BSP cores having put into INIT (and thus unresponsive until reset).\n\nLink: https://bbs.archlinux.org/viewtopic.php?pid\u003d2124429\nLink: https://www.reddit.com/r/openSUSE/comments/16qq99b/tumbleweed_shutdown_did_not_finish_completely/\nLink: https://forum.artixlinux.org/index.php/topic,5997.0.html\nLink: https://bugzilla.redhat.com/show_bug.cgi?id\u003d2241279\nAcked-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Ashok Raj \u003cashok.raj@intel.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n"
    },
    {
      "commit": "5720c43d5216b5dbd9ab25595f7c61e55d36d4fc",
      "tree": "1a29a9fd69ded0883431ba38d619ffeb960c5b6e",
      "parents": [
        "11d3f72613957cba0783938a1ceddffe7dbbf5a1"
      ],
      "author": {
        "name": "Xuan Zhuo",
        "email": "xuanzhuo@linux.alibaba.com",
        "time": "Wed Sep 27 13:52:46 2023 +0800"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sun Oct 15 11:49:57 2023 -0700"
      },
      "message": "virtio_net: fix the missing of the dma cpu sync\n\nCommit 295525e29a5b (\"virtio_net: merge dma operations when filling\nmergeable buffers\") unmaps the buffer with DMA_ATTR_SKIP_CPU_SYNC when\nthe dma-\u003eref is zero. We do that with DMA_ATTR_SKIP_CPU_SYNC, because we\ndo not want to do the sync for the entire page_frag. But that misses the\nsync for the current area.\n\nThis patch does cpu sync regardless of whether the ref is zero or not.\n\nFixes: 295525e29a5b (\"virtio_net: merge dma operations when filling mergeable buffers\")\nReported-by: Michael Roth \u003cmichael.roth@amd.com\u003e\nCloses: http://lore.kernel.org/all/20230926130451.axgodaa6tvwqs3ut@amd.com\nSigned-off-by: Xuan Zhuo \u003cxuanzhuo@linux.alibaba.com\u003e\nAcked-by: Jason Wang \u003cjasowang@redhat.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n"
    },
    {
      "commit": "11d3f72613957cba0783938a1ceddffe7dbbf5a1",
      "tree": "a096161b8c5162dc6dca3248c642a9898fe94e60",
      "parents": [
        "41226a360d8f51c13935bbc2ac8925c0fe8d41f7",
        "c9ca8de2eb15f9da24113e652980c61f95a47530"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sun Oct 15 09:16:30 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sun Oct 15 09:16:30 2023 -0700"
      },
      "message": "Merge tag \u0027usb-6.6-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb\n\nPull USB / Thunderbolt fixes from Greg KH:\n \"Here are some USB and Thunderbolt driver fixes for 6.6-rc6 to resolve\n  a number of small reported issues. Included in here are:\n\n   - thunderbolt driver fixes\n\n   - xhci driver fixes\n\n   - cdns3 driver fixes\n\n   - musb driver fixes\n\n   - a number of typec driver fixes\n\n   - a few other small driver fixes\n\n  All of these have been in linux-next with no reported issues\"\n\n* tag \u0027usb-6.6-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb: (22 commits)\n  usb: typec: ucsi: Use GET_CAPABILITY attributes data to set power supply scope\n  usb: typec: ucsi: Fix missing link removal\n  usb: typec: altmodes/displayport: Signal hpd low when exiting mode\n  xhci: Preserve RsvdP bits in ERSTBA register correctly\n  xhci: Clear EHB bit only at end of interrupt handler\n  xhci: track port suspend state correctly in unsuccessful resume cases\n  usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer\n  usb: typec: ucsi: Clear EVENT_PENDING bit if ucsi_send_command fails\n  usb: misc: onboard_hub: add support for Microchip USB2412 USB 2.0 hub\n  usb: gadget: udc-xilinx: replace memcpy with memcpy_toio\n  usb: cdns3: Modify the return value of cdns_set_active () to void when CONFIG_PM_SLEEP is disabled\n  usb: dwc3: Soft reset phy on probe for host\n  usb: hub: Guard against accesses to uninitialized BOS descriptors\n  usb: typec: qcom: Update the logic of regulator enable and disable\n  usb: gadget: ncm: Handle decoding of multiple NTB\u0027s in unwrap call\n  usb: musb: Get the musb_qh poniter after musb_giveback\n  usb: musb: Modify the \"HWVers\" register address\n  usb: cdnsp: Fixes issue with dequeuing not queued requests\n  thunderbolt: Restart XDomain discovery handshake after failure\n  thunderbolt: Correct TMU mode initialization from hardware\n  ...\n"
    },
    {
      "commit": "41226a360d8f51c13935bbc2ac8925c0fe8d41f7",
      "tree": "67196b7244e81e240f0e154acfda46c82e3d957e",
      "parents": [
        "a477e3a76be740a1be844635d572c83f4c10002c",
        "b3fa3cf02e3ce92d32bfdeedd5a6bd0825f55a14"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sun Oct 15 09:11:39 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sun Oct 15 09:11:39 2023 -0700"
      },
      "message": "Merge tag \u0027tty-6.6-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty\n\nPull tty/serial driver fixes from Greg KH:\n \"Here are some small tty/serial driver fixes for 6.6-rc6 that resolve\n  some reported issues. Included in here are:\n\n   - serial core pm runtime fix for issue reported by many\n\n   - 8250_omap driver fix\n\n   - rs485 spinlock fix for reported problem\n\n   - ams-delta bugfix for previous tty api changes in -rc1 that missed\n     this driver that never seems to get built in any test systems\n\n  All of these have been in linux-next for over a week with no reported\n  problems\"\n\n* tag \u0027tty-6.6-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty:\n  ASoC: ti: ams-delta: Fix cx81801_receive() argument types\n  serial: core: Fix checks for tx runtime PM state\n  serial: 8250_omap: Fix errors with no_console_suspend\n  serial: Reduce spinlocked portion of uart_rs485_config()\n"
    },
    {
      "commit": "a477e3a76be740a1be844635d572c83f4c10002c",
      "tree": "db30c4adac9cf658f5d3887967cffc2bb589c924",
      "parents": [
        "19fd4a91ddeec20f9971a06f6328558c392ad66a",
        "ffd1f150fffe8a708f6ccd15152791d0e8f812b6"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sun Oct 15 09:07:27 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sun Oct 15 09:07:27 2023 -0700"
      },
      "message": "Merge tag \u0027char-misc-6.6-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc\n\nPull char/misc driver fixes from Greg KH:\n \"Here is a small set of char/misc and other smaller driver subsystem\n  fixes for 6.6-rc6. Included in here are:\n\n   - lots of iio driver fixes\n\n   - binder memory leak fix\n\n   - mcb driver fixes\n\n   - counter driver fixes\n\n   - firmware loader documentation fix\n\n   - documentation update for embargoed hardware issues\n\n  All of these have been in linux-next for over a week with no reported\n  issues\"\n\n* tag \u0027char-misc-6.6-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc: (22 commits)\n  iio: pressure: ms5611: ms5611_prom_is_valid false negative bug\n  dt-bindings: iio: adc: adi,ad7292: Fix additionalProperties on channel nodes\n  iio: adc: ad7192: Correct reference voltage\n  iio: light: vcnl4000: Don\u0027t power on/off chip in config\n  iio: addac: Kconfig: update ad74413r selections\n  iio: pressure: dps310: Adjust Timeout Settings\n  iio: imu: bno055: Fix missing Kconfig dependencies\n  iio: adc: imx8qxp: Fix address for command buffer registers\n  iio: cros_ec: fix an use-after-free in cros_ec_sensors_push_data()\n  iio: irsd200: fix -Warray-bounds bug in irsd200_trigger_handler\n  dt-bindings: iio: rohm,bu27010: add missing vdd-supply to example\n  binder: fix memory leaks of spam and pending work\n  firmware_loader: Update contact emails for ABI docs\n  Documentation: embargoed-hardware-issues.rst: Clarify prenotifaction\n  mcb: remove is_added flag from mcb_device struct\n  coresight: tmc-etr: Disable warnings for allocation failures\n  coresight: Fix run time warnings while reusing ETR buffer\n  iio: admv1013: add mixer_vgate corner cases\n  iio: pressure: bmp280: Fix NULL pointer exception\n  iio: dac: ad3552r: Correct device IDs\n  ...\n"
    },
    {
      "commit": "19fd4a91ddeec20f9971a06f6328558c392ad66a",
      "tree": "a13bce5a020e125fbc8444db5dba81d54561d7a6",
      "parents": [
        "f8bf101b3b1171923a011a47923a93f4b22e6cb0",
        "beae836e9c61ee039e367a94b14f7fea08f0ad4c"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sun Oct 15 08:55:51 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sun Oct 15 08:55:51 2023 -0700"
      },
      "message": "Merge tag \u0027ovl-fixes-6.6-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/overlayfs/vfs\n\nPull overlayfs fixes from Amir Goldstein:\n\n - Various fixes for regressions due to conversion to new mount\n   api in v6.5\n\n - Disable a new mount option syntax (append lowerdir) that was\n   added in v6.5 because we plan to add a different lowerdir\n   append syntax in v6.7\n\n* tag \u0027ovl-fixes-6.6-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/overlayfs/vfs:\n  ovl: temporarily disable appending lowedirs\n  ovl: fix regression in showing lowerdir mount option\n  ovl: fix regression in parsing of mount options with escaped comma\n  fs: factor out vfs_parse_monolithic_sep() helper\n"
    },
    {
      "commit": "f8bf101b3b1171923a011a47923a93f4b22e6cb0",
      "tree": "381ecf96949143b77d54126f658b2c6359bb7bc1",
      "parents": [
        "ddf2085598021bc84c01b1e1ac3ed992045f23ec",
        "f0eee815babed70a749d2496a7678be5b45b4c14"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sun Oct 15 08:48:53 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sun Oct 15 08:48:53 2023 -0700"
      },
      "message": "Merge tag \u0027powerpc-6.6-4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux\n\nPull powerpc fixes from Michael Ellerman:\n\n - Fix softlockup/crash when using hcall tracing\n\n - Fix pte_access_permitted() for PAGE_NONE on 8xx\n\n - Fix inverted pte_young() test in __ptep_test_and_clear_young()\n   on 64-bit BookE\n\n - Fix unhandled math emulation exception on 85xx\n\n - Fix kernel crash on syscall return on 476\n\nThanks to Athira Rajeev, Christophe Leroy, Eddie James, and Naveen N\nRao.\n\n* tag \u0027powerpc-6.6-4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:\n  powerpc/47x: Fix 47x syscall return crash\n  powerpc/85xx: Fix math emulation exception\n  powerpc/64e: Fix wrong test in __ptep_test_and_clear_young()\n  powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE\n  powerpc/pseries: Remove unused r0 in the hcall tracing code\n  powerpc/pseries: Fix STK_PARAM access in the hcall tracing code\n"
    },
    {
      "commit": "ddf2085598021bc84c01b1e1ac3ed992045f23ec",
      "tree": "afbcae11dd4a3d5eca87b96783861cff19a6c61d",
      "parents": [
        "9a3dad63edbe9a2ab2be1e7361a2133f519f855b",
        "c4dd854f740c21ae8dd9903fc67969c5497cb14b"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sun Oct 15 08:44:56 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sun Oct 15 08:44:56 2023 -0700"
      },
      "message": "Merge tag \u0027smp-urgent-2023-10-15\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull CPU hotplug fix from Ingo Molnar:\n \"Fix a Longsoon build warning by harmonizing the\n  arch_[un]register_cpu() prototypes between architectures\"\n\n* tag \u0027smp-urgent-2023-10-15\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n  cpu-hotplug: Provide prototypes for arch CPU registration\n"
    },
    {
      "commit": "9a3dad63edbe9a2ab2be1e7361a2133f519f855b",
      "tree": "e1280f67956b5ec4176cb235ded63364cf99ef23",
      "parents": [
        "bf2069d151b7bb5dfd7c7f834c016205a517c5ad",
        "1903e6d0578118e9aab1ee23f4a9de55737d1d05"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sat Oct 14 19:50:39 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sat Oct 14 19:50:39 2023 -0700"
      },
      "message": "Merge tag \u00276.6-rc5-ksmbd-server-fixes\u0027 of git://git.samba.org/ksmbd\n\nPull smb server fixes from Steve French:\n\n - Fix for possible double free in RPC read\n\n - Add additional check to clarify smb2_open path and quiet Coverity\n\n - Fix incorrect error rsp in a compounding path\n\n - Fix to properly fail open of file with pending delete on close\n\n* tag \u00276.6-rc5-ksmbd-server-fixes\u0027 of git://git.samba.org/ksmbd:\n  ksmbd: fix potential double free on smb2_read_pipe() error path\n  ksmbd: fix Null pointer dereferences in ksmbd_update_fstate()\n  ksmbd: fix wrong error response status by using set_smb2_rsp_status()\n  ksmbd: not allow to open file if delelete on close bit is set\n"
    },
    {
      "commit": "bf2069d151b7bb5dfd7c7f834c016205a517c5ad",
      "tree": "fd31d97b3bdff276b4842ffca7eabbf12dac1464",
      "parents": [
        "dc9b2e683bcba017588b9aaad80f442ad004a48f",
        "81ba10959970d15c388bf29866b01b62f387e6a3"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sat Oct 14 19:44:15 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sat Oct 14 19:44:15 2023 -0700"
      },
      "message": "Merge tag \u00276.6-rc5-smb3-client-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6\n\nPull smb client fixes from Steve French:\n\n - fix caching race with open_cached_dir and laundromat cleanup of\n   cached dirs (addresses a problem spotted with xfstest run with\n   directory leases enabled)\n\n - reduce excessive resource usage of laundromat threads\n\n* tag \u00276.6-rc5-smb3-client-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6:\n  smb: client: prevent new fids from being removed by laundromat\n  smb: client: make laundromat a delayed worker\n"
    },
    {
      "commit": "dc9b2e683bcba017588b9aaad80f442ad004a48f",
      "tree": "28b89ab06fd488bde07ce51d1c61ba2cc8aee5d2",
      "parents": [
        "42578c7bf6e5eb816b694133ba33f0ff67c68582",
        "d35652a5fc9944784f6f50a5c979518ff8dacf61"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sat Oct 14 15:32:20 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sat Oct 14 15:32:20 2023 -0700"
      },
      "message": "Merge tag \u0027x86-urgent-2023-10-15\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull x86 fixes from Ingo Molnar:\n \"Fix a false-positive KASAN warning, fix an AMD erratum on Zen4 CPUs,\n  and fix kernel-doc build warnings\"\n\n* tag \u0027x86-urgent-2023-10-15\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n  x86/alternatives: Disable KASAN in apply_alternatives()\n  x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs\n  x86/resctrl: Fix kernel-doc warnings\n"
    },
    {
      "commit": "42578c7bf6e5eb816b694133ba33f0ff67c68582",
      "tree": "df994292617cd7bdf1d9e1cb017c54329200a41b",
      "parents": [
        "23931d935363846a9b39a890d4aead208cd46681",
        "b01db23d5923a35023540edc4f0c5f019e11ac7d"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sat Oct 14 15:21:34 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sat Oct 14 15:21:34 2023 -0700"
      },
      "message": "Merge tag \u0027sched-urgent-2023-10-14\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull scheduler fixes from Ingo Molnar:\n \"Two EEVDF fixes\"\n\n* tag \u0027sched-urgent-2023-10-14\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n  sched/eevdf: Fix pick_eevdf()\n  sched/eevdf: Fix min_deadline heap integrity\n"
    },
    {
      "commit": "23931d935363846a9b39a890d4aead208cd46681",
      "tree": "7d8a1f439d4720c53512837981afa0a6245e2d37",
      "parents": [
        "70f8c6f8f8800d970b10676cceae42bba51a4899",
        "e53899771a02f798d436655efbd9d4b46c0f9265"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sat Oct 14 15:09:55 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sat Oct 14 15:09:55 2023 -0700"
      },
      "message": "Merge tag \u0027perf-urgent-2023-10-14\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull x86 perf event fix from Ingo Molnar:\n \"Fix an LBR sampling bug\"\n\n* tag \u0027perf-urgent-2023-10-14\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n  perf/x86/lbr: Filter vsyscall addresses\n"
    },
    {
      "commit": "beae836e9c61ee039e367a94b14f7fea08f0ad4c",
      "tree": "bbaa38eb3bcba0794cd33ca1ae6b2bc19f40983b",
      "parents": [
        "32db510708507f6133f496ff385cbd841d8f9098"
      ],
      "author": {
        "name": "Amir Goldstein",
        "email": "amir73il@gmail.com",
        "time": "Sat Oct 14 22:30:04 2023 +0300"
      },
      "committer": {
        "name": "Amir Goldstein",
        "email": "amir73il@gmail.com",
        "time": "Sat Oct 14 22:42:45 2023 +0300"
      },
      "message": "ovl: temporarily disable appending lowedirs\n\nKernel v6.5 converted overlayfs to new mount api.\nAs an added bonus, it also added a feature to allow appending lowerdirs\nusing lowerdir\u003d:/lower2,lowerdir\u003d::/data3 syntax.\n\nThis new syntax has raised some concerns regarding escaping of colons.\nWe decided to try and disable this syntax, which hasn\u0027t been in the wild\nfor so long and introduce it again in 6.7 using explicit mount options\nlowerdir+\u003d/lower2,datadir+\u003d/data3.\n\nSuggested-by: Miklos Szeredi \u003cmiklos@szeredi.hu\u003e\nLink: https://lore.kernel.org/r/CAJfpegsr3A4YgF2YBevWa6n3\u003dAcP7hNndG6EPMu3ncvV-AM71A@mail.gmail.com/\nFixes: b36a5780cb44 (\"ovl: modify layer parameter parsing\")\nSigned-off-by: Amir Goldstein \u003camir73il@gmail.com\u003e\n"
    },
    {
      "commit": "70f8c6f8f8800d970b10676cceae42bba51a4899",
      "tree": "d6d8a6c0723fe01eba1b649621677382ee8e99dd",
      "parents": [
        "727fb83765049981e342db4c5a8b51aca72201d8",
        "cbc06310c36f73a5f3b0c6f0d974d60cf66d816b"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sat Oct 14 09:09:20 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sat Oct 14 09:09:20 2023 -0700"
      },
      "message": "Merge tag \u0027xfs-6.6-fixes-5\u0027 of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux\n\nPull xfs fixes from Chandan Babu:\n\n - Fix calculation of offset of AG\u0027s last block and its length\n\n - Update incore AG block count when shrinking an AG\n\n - Process free extents to busy list in FIFO order\n\n - Make XFS report its i_version as the STATX_CHANGE_COOKIE\n\n* tag \u0027xfs-6.6-fixes-5\u0027 of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux:\n  xfs: reinstate the old i_version counter as STATX_CHANGE_COOKIE\n  xfs: Remove duplicate include\n  xfs: correct calculation for agend and blockcount\n  xfs: process free extents to busy list in FIFO order\n  xfs: adjust the incore perag block_count when shrinking\n"
    },
    {
      "commit": "32db510708507f6133f496ff385cbd841d8f9098",
      "tree": "11f002bc14bc735248a64ef174756f3ddf4f3c07",
      "parents": [
        "c34706acf40b43dd31f67c92c5a95d39666a1eb3"
      ],
      "author": {
        "name": "Amir Goldstein",
        "email": "amir73il@gmail.com",
        "time": "Wed Oct 11 17:07:03 2023 +0300"
      },
      "committer": {
        "name": "Amir Goldstein",
        "email": "amir73il@gmail.com",
        "time": "Sat Oct 14 09:24:11 2023 +0300"
      },
      "message": "ovl: fix regression in showing lowerdir mount option\n\nBefore commit b36a5780cb44 (\"ovl: modify layer parameter parsing\"),\nspaces and commas in lowerdir mount option value used to be escaped using\nseq_show_option().\n\nIn current upstream, when lowerdir value has a space, it is not escaped\nin /proc/mounts, e.g.:\n\n  none /mnt overlay rw,relatime,lowerdir\u003dl l,upperdir\u003du,workdir\u003dw 0 0\n\nwhich results in broken output of the mount utility:\n\n  none on /mnt type overlay (rw,relatime,lowerdir\u003dl)\n\nStore the original lowerdir mount options before unescaping and show\nthem using the same escaping used for seq_show_option() in addition to\nescaping the colon separator character.\n\nFixes: b36a5780cb44 (\"ovl: modify layer parameter parsing\")\nSigned-off-by: Amir Goldstein \u003camir73il@gmail.com\u003e\n"
    },
    {
      "commit": "727fb83765049981e342db4c5a8b51aca72201d8",
      "tree": "53c0cf3be682d53805b0c947addf917381d7bb80",
      "parents": [
        "8cb1f10d8c4b716c88b87ae4402a3305d96e5db2",
        "5c15c60e7be615f05a45cd905093a54b11f461bc"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Fri Oct 13 23:19:16 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Fri Oct 13 23:19:16 2023 -0700"
      },
      "message": "Merge tag \u0027input-for-v6.6-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input\n\nPull input fixes from Dmitry Torokhov:\n\n - a reworked way for handling reset delay on SMBus-connected Synaptics\n   touchpads (the original one, while being correct, uncovered an old\n   bug in fallback to PS/2 code that was fixed separately; the new one\n   however avoids having delay in serio port \"fast\" resume, and instead\n   has the wait in the RMI4 code)\n\n - a fix for potential crashes when devices with Elan controllers (and\n   Synaptics) fall back to PS/2 code. Can\u0027t be hit without the original\n   patch above, but still good to have it fixed\n\n - a couple new device IDs in xpad Xbox driver\n\n - another quirk for Goodix driver to deal with stuff vendors put in\n   ACPI tables\n\n - a fix for use-after-free on disconnect for powermate driver\n\n - a quirk to not initialize PS/2 mouse port on Fujitsu Lifebook E5411\n   laptop as it makes keyboard not usable and the device uses\n   hid-over-i2c touchpad anyways\n\n* tag \u0027input-for-v6.6-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input:\n  Input: powermate - fix use-after-free in powermate_config_complete\n  Input: xpad - add PXN V900 support\n  Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport\n  Input: psmouse - fix fast_reconnect function for PS/2 mode\n  Revert \"Input: psmouse - add delay when deactivating for SMBus mode\"\n  Input: goodix - ensure int GPIO is in input for gpio_count \u003d\u003d 1 \u0026\u0026 gpio_int_idx \u003d\u003d 0 case\n  Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table\n  Input: xpad - add HyperX Clutch Gladiate Support\n"
    },
    {
      "commit": "5c15c60e7be615f05a45cd905093a54b11f461bc",
      "tree": "5d69dab1991141d5ea7409dc545f2c7c5d61a47d",
      "parents": [
        "a65cd7ef5a864bdbbe037267c327786b7759d4c6"
      ],
      "author": {
        "name": "Javier Carrasco",
        "email": "javier.carrasco.cruz@gmail.com",
        "time": "Fri Oct 13 20:11:33 2023 -0700"
      },
      "committer": {
        "name": "Dmitry Torokhov",
        "email": "dmitry.torokhov@gmail.com",
        "time": "Fri Oct 13 20:17:02 2023 -0700"
      },
      "message": "Input: powermate - fix use-after-free in powermate_config_complete\n\nsyzbot has found a use-after-free bug [1] in the powermate driver. This\nhappens when the device is disconnected, which leads to a memory free from\nthe powermate_device struct.  When an asynchronous control message\ncompletes after the kfree and its callback is invoked, the lock does not\nexist anymore and hence the bug.\n\nUse usb_kill_urb() on pm-\u003econfig to cancel any in-progress requests upon\ndevice disconnection.\n\n[1] https://syzkaller.appspot.com/bug?extid\u003d0434ac83f907a1dbdd1e\n\nSigned-off-by: Javier Carrasco \u003cjavier.carrasco.cruz@gmail.com\u003e\nReported-by: syzbot+0434ac83f907a1dbdd1e@syzkaller.appspotmail.com\nLink: https://lore.kernel.org/r/20230916-topic-powermate_use_after_free-v3-1-64412b81a7a2@gmail.com\nSigned-off-by: Dmitry Torokhov \u003cdmitry.torokhov@gmail.com\u003e\n"
    },
    {
      "commit": "a65cd7ef5a864bdbbe037267c327786b7759d4c6",
      "tree": "58adbca9c1b1f8add47bb3e7f2339187e03400c1",
      "parents": [
        "5030b2fe6aab37fe42d14f31842ea38be7c55c57"
      ],
      "author": {
        "name": "Matthias Berndt",
        "email": "matthias_berndt@gmx.de",
        "time": "Fri Oct 13 15:04:36 2023 -0700"
      },
      "committer": {
        "name": "Dmitry Torokhov",
        "email": "dmitry.torokhov@gmail.com",
        "time": "Fri Oct 13 17:59:20 2023 -0700"
      },
      "message": "Input: xpad - add PXN V900 support\n\nAdd VID and PID to the xpad_device table to allow driver to use the PXN\nV900 steering wheel, which is XTYPE_XBOX360 compatible in xinput mode.\n\nSigned-off-by: Matthias Berndt \u003cmatthias_berndt@gmx.de\u003e\nLink: https://lore.kernel.org/r/4932699.31r3eYUQgx@fedora\nSigned-off-by: Dmitry Torokhov \u003cdmitry.torokhov@gmail.com\u003e\n"
    },
    {
      "commit": "5030b2fe6aab37fe42d14f31842ea38be7c55c57",
      "tree": "125acd87a794510dd5f79be0ff9a4fcc1b0c0e40",
      "parents": [
        "e2cb5cc822b6c9ee72c56ce1d81671b22c05406a"
      ],
      "author": {
        "name": "Dmitry Torokhov",
        "email": "dmitry.torokhov@gmail.com",
        "time": "Fri Oct 13 17:29:57 2023 -0700"
      },
      "committer": {
        "name": "Dmitry Torokhov",
        "email": "dmitry.torokhov@gmail.com",
        "time": "Fri Oct 13 17:59:19 2023 -0700"
      },
      "message": "Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport\n\nTouch controllers need some time after receiving reset command for the\nfirmware to finish re-initializing and be ready to respond to commands\nfrom the host. The driver already had handling for the post-reset delay\nfor I2C and SPI transports, this change adds the handling to\nSMBus-connected devices.\n\nSMBus devices are peculiar because they implement legacy PS/2\ncompatibility mode, so reset is actually issued by psmouse driver on the\nassociated serio port, after which the control is passed to the RMI4\ndriver with SMBus companion device.\n\nNote that originally the delay was added to psmouse driver in\n92e24e0e57f7 (\"Input: psmouse - add delay when deactivating for SMBus\nmode\"), but that resulted in an unwanted delay in \"fast\" reconnect\nhandler for the serio port, so it was decided to revert the patch and\nhave the delay being handled in the RMI4 driver, similar to the other\ntransports.\n\nTested-by: Jeffery Miller \u003cjefferymiller@google.com\u003e\nLink: https://lore.kernel.org/r/ZR1yUFJ8a9Zt606N@penguin\nSigned-off-by: Dmitry Torokhov \u003cdmitry.torokhov@gmail.com\u003e\n"
    },
    {
      "commit": "e2cb5cc822b6c9ee72c56ce1d81671b22c05406a",
      "tree": "a51c3c9d3d603a4d38557124aed63b06289c43c9",
      "parents": [
        "b35726396390eb445668cecdbcd41d0285dbefdf"
      ],
      "author": {
        "name": "Jeffery Miller",
        "email": "jefferymiller@google.com",
        "time": "Fri Oct 13 15:23:49 2023 -0700"
      },
      "committer": {
        "name": "Dmitry Torokhov",
        "email": "dmitry.torokhov@gmail.com",
        "time": "Fri Oct 13 17:59:18 2023 -0700"
      },
      "message": "Input: psmouse - fix fast_reconnect function for PS/2 mode\n\nWhen the SMBus connection is attempted psmouse_smbus_init() sets\nthe fast_reconnect pointer to psmouse_smbus_reconnecti(). If SMBus\ninitialization fails, elantech_setup_ps2() and synaptics_init_ps2() will\nfallback to PS/2 mode, replacing the psmouse private data. This can cause\nissues on resume, since psmouse_smbus_reconnect() expects to find an\ninstance of struct psmouse_smbus_dev in psmouse-\u003eprivate.\n\nThe issue was uncovered when in 92e24e0e57f7 (\"Input: psmouse - add\ndelay when deactivating for SMBus mode\") psmouse_smbus_reconnect()\nstarted attempting to use more of the data structure. The commit was\nsince reverted, not because it was at fault, but because there was found\na better way of doing what it was attempting to do.\n\nFix the problem by resetting the fast_reconnect pointer in psmouse\nstructure in elantech_setup_ps2() and synaptics_init_ps2() when the PS/2\nmode is used.\n\nReported-by: Thorsten Leemhuis \u003clinux@leemhuis.info\u003e\nTested-by: Thorsten Leemhuis \u003clinux@leemhuis.info\u003e\nSigned-off-by: Jeffery Miller \u003cjefferymiller@google.com\u003e\nFixes: bf232e460a35 (\"Input: psmouse-smbus - allow to control psmouse_deactivate\")\nLink: https://lore.kernel.org/r/20231005002249.554877-1-jefferymiller@google.com\nSigned-off-by: Dmitry Torokhov \u003cdmitry.torokhov@gmail.com\u003e\n"
    },
    {
      "commit": "8cb1f10d8c4b716c88b87ae4402a3305d96e5db2",
      "tree": "facb2685f2de1efcec080efe23101975cbe73da7",
      "parents": [
        "a1ef447deed5f5add172cd83efa48c46cb2b1a0d",
        "a20c4350c6a12405b7f732b3ee6801ffe2cc45ce"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Fri Oct 13 11:56:26 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Fri Oct 13 11:56:26 2023 -0700"
      },
      "message": "Merge tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi\n\nPull SCSI fix from James Bottomley:\n \"A single tiny fix in the ufs driver core correcting the reversed logic\n  in an error message\"\n\n* tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:\n  scsi: ufs: core: Correct clear TM error log\n"
    },
    {
      "commit": "a1ef447deed5f5add172cd83efa48c46cb2b1a0d",
      "tree": "d5c366a6becf05e753da9dfdb4821a8452faa0a4",
      "parents": [
        "ad7f1baed071f4536d7cfc32834a36d61c512c70",
        "07bb00ef00ace88dd6f695fadbba76565756e55c"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Fri Oct 13 11:27:31 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Fri Oct 13 11:27:31 2023 -0700"
      },
      "message": "Merge tag \u0027ceph-for-6.6-rc6\u0027 of https://github.com/ceph/ceph-client\n\nPull ceph fixes from Ilya Dryomov:\n \"Fixes for an overreaching WARN_ON, two error paths and a switch to\n  kernel_connect() which recently grown protection against someone using\n  BPF to rewrite the address.\n\n  All but one marked for stable\"\n\n* tag \u0027ceph-for-6.6-rc6\u0027 of https://github.com/ceph/ceph-client:\n  ceph: fix type promotion bug on 32bit systems\n  libceph: use kernel_connect()\n  ceph: remove unnecessary IS_ERR() check in ceph_fname_to_usr()\n  ceph: fix incorrect revoked caps assert in ceph_fill_file_size()\n"
    },
    {
      "commit": "ad7f1baed071f4536d7cfc32834a36d61c512c70",
      "tree": "1244813709168eb8b8f2f332055549a119a6c665",
      "parents": [
        "b82fbd8f39e2d3f2f6860f80bb888c5dbc3ce607",
        "9bc2fb9a7e41542a193658deff3df572fa24cb68"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Fri Oct 13 09:25:30 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Fri Oct 13 09:25:30 2023 -0700"
      },
      "message": "Merge tag \u0027acpi-6.6-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull ACPI fixes from Rafael Wysocki:\n \"Add an ACPI EC GPE detection quirk for HP Pavilion Gaming 15-dk1xxx\n  and ACPI IRQ override quirks for TongFang GM6BGEQ, GM6BG5Q and\n  GM6BG0Q, and for ASUS ExpertBook B1402CBA (Hans de Goede).\n\n* tag \u0027acpi-6.6-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n  ACPI: resource: Add TongFang GM6BGEQ, GM6BG5Q and GM6BG0Q to irq1_edge_low_force_override[]\n  ACPI: EC: Add quirk for the HP Pavilion Gaming 15-dk1xxx\n  ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA\n"
    },
    {
      "commit": "b82fbd8f39e2d3f2f6860f80bb888c5dbc3ce607",
      "tree": "d17960c23c95e641747fe68c1be83090bb378d09",
      "parents": [
        "17325a2137ebf015fbb988a6db1a3513ef446d54",
        "3fec323339a4a9801a54e8b282eb571965b67b23"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Fri Oct 13 09:17:48 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Fri Oct 13 09:17:48 2023 -0700"
      },
      "message": "Merge tag \u0027riscv-for-linus-6.6-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux\n\nPull RISC-V fixes from Palmer Dabbelt:\n\n - A handful of build fixes\n\n - A fix to avoid mixing up user/kernel-mode breakpoints, which can\n   manifest as a hang when mixing k/uprobes with other breakpoint\n   sources\n\n - A fix to avoid double-allocting crash kernel memory\n\n - A fix for tracefs syscall name mangling, which was causing syscalls\n   not to show up in tracefs\n\n - A fix to the perf driver to enable the hw events when selected, which\n   can trigger a BUG on some userspace access patterns\n\n* tag \u0027riscv-for-linus-6.6-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux:\n  drivers: perf: Fix panic in riscv SBI mmap support\n  riscv: Fix ftrace syscall handling which are now prefixed with __riscv_\n  RISC-V: Fix wrong use of CONFIG_HAVE_SOFTIRQ_ON_OWN_STACK\n  riscv: kdump: fix crashkernel reserving problem on RISC-V\n  riscv: Remove duplicate objcopy flag\n  riscv: signal: fix sigaltstack frame size checking\n  riscv: errata: andes: Makefile: Fix randconfig build issue\n  riscv: Only consider swbp/ss handlers for correct privileged mode\n  riscv: kselftests: Fix mm build by removing testcases subdirectory\n"
    },
    {
      "commit": "17325a2137ebf015fbb988a6db1a3513ef446d54",
      "tree": "b2b864a3d01f28a1d27a4b14cdcc9d6f7c87cf7e",
      "parents": [
        "3439b2a87edcdb86557b5e64787372c6f280dcba",
        "3b6c4a11bf2b810f772f5c2c1ef6eef3fc268246"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Fri Oct 13 09:03:48 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Fri Oct 13 09:03:48 2023 -0700"
      },
      "message": "Merge tag \u0027soundwire-6.6-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vkoul/soundwire\n\nPull soundwire fix from Vinod Koul:\n \"A single fix for making sdw bus irq conditionally built\"\n\n* tag \u0027soundwire-6.6-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vkoul/soundwire:\n  soundwire: bus: Make IRQ handling conditionally built\n"
    },
    {
      "commit": "3439b2a87edcdb86557b5e64787372c6f280dcba",
      "tree": "683dc123a57382299b2cf82342b3a70d4e194467",
      "parents": [
        "7c367d8eadc00ff04bfab184ccd07b34ea89661a",
        "3fa53518ad419bfacceae046a9d8027e4c4c5290"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Fri Oct 13 08:52:57 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Fri Oct 13 08:52:57 2023 -0700"
      },
      "message": "Merge tag \u0027dmaengine-fix-6.6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vkoul/dmaengine\n\nPull dmaengine fixes from Vinod Koul:\n \"Driver fixes for:\n\n   - stm32 dma residue calculation and chaining\n\n   - stm32 mdma for setting inflight bytes, residue calculation and\n     resume abort\n\n   - channel request, channel enable and dma error in fsl_edma\n\n   - runtime pm imbalance in ste_dma40 driver\n\n   - deadlock fix in mediatek driver\"\n\n* tag \u0027dmaengine-fix-6.6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vkoul/dmaengine:\n  dmaengine: fsl-edma: fix all channels requested when call fsl_edma3_xlate()\n  dmaengine: stm32-dma: fix residue in case of MDMA chaining\n  dmaengine: stm32-dma: fix stm32_dma_prep_slave_sg in case of MDMA chaining\n  dmaengine: stm32-mdma: set in_flight_bytes in case CRQA flag is set\n  dmaengine: stm32-mdma: use Link Address Register to compute residue\n  dmaengine: stm32-mdma: abort resume if no ongoing transfer\n  dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe\n  dmaengine: mediatek: Fix deadlock caused by synchronize_irq()\n  dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq\n  dmaengine: fsl-edma: fix edma4 channel enable failure on second attempt\n  dt-bindings: dmaengine: zynqmp_dma: add xlnx,bus-width required property\n  dmaengine: fsl-dma: fix DMA error when enabling sg if \u0027DONE\u0027 bit is set\n"
    },
    {
      "commit": "7c367d8eadc00ff04bfab184ccd07b34ea89661a",
      "tree": "e75e918f14ba6178020259be2d3c500da64109c7",
      "parents": [
        "10a6e5feccb877c3c75ad11d27942ad52c24815f",
        "c46f16f156ac58afcf4addc850bb5dfbca77b9fc"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Fri Oct 13 08:47:29 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Fri Oct 13 08:47:29 2023 -0700"
      },
      "message": "Merge tag \u0027media/v6.6-5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media\n\nPull media fixes from Mauro Carvalho Chehab:\n\n - a core fix: Don\u0027t report V4L2_SUBDEV_CAP_STREAMS when API is disabled\n\n - ipu-bridge: Add a missing acpi_dev_put()\n\n - ov8858: fix driver for probe to work after 6.6-rc1\n\n - xilinx-vipp: fix async notifier logic\n\n* tag \u0027media/v6.6-5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media:\n  media: i2c: ov8858: Don\u0027t set fwnode in the driver\n  media: ipu-bridge: Add missing acpi_dev_put() in ipu_bridge_get_ivsc_acpi_dev()\n  media: xilinx-vipp: Look for entities also in waiting_list\n  media: subdev: Don\u0027t report V4L2_SUBDEV_CAP_STREAMS when the streams API is disabled\n"
    },
    {
      "commit": "9bc2fb9a7e41542a193658deff3df572fa24cb68",
      "tree": "d6a235c0a690d24e9c90ccd45cac3b7abb5bfde5",
      "parents": [
        "94f6f0550c625fab1f373bb86a6669b45e9748b3",
        "cd4aece493f99f95d41edcce32927d70a5dde923",
        "f9b3ea02555e67e2e7bf95219953b88d122bd275"
      ],
      "author": {
        "name": "Rafael J. Wysocki",
        "email": "rafael.j.wysocki@intel.com",
        "time": "Fri Oct 13 16:51:54 2023 +0200"
      },
      "committer": {
        "name": "Rafael J. Wysocki",
        "email": "rafael.j.wysocki@intel.com",
        "time": "Fri Oct 13 16:51:54 2023 +0200"
      },
      "message": "Merge branches \u0027acpi-ec\u0027 and \u0027acpi-resource\u0027\n\nMerge ACPI EC driver and ACPI resources handlig changes for 6.6-rc6:\n\n - Add EC GPE fixup quirk for HP Pavilion Gaming 15-dk1xxx (Hans de\n   Goede).\n\n - Add ACPI IRQ override quirks for TongFang GM6BGEQ, GM6BG5Q and\n   GM6BG0Q, and for ASUS ExpertBook B1402CBA (ans de Goede).\n\n* acpi-ec:\n  ACPI: EC: Add quirk for the HP Pavilion Gaming 15-dk1xxx\n\n* acpi-resource:\n  ACPI: resource: Add TongFang GM6BGEQ, GM6BG5Q and GM6BG0Q to irq1_edge_low_force_override[]\n  ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA\n"
    },
    {
      "commit": "10a6e5feccb877c3c75ad11d27942ad52c24815f",
      "tree": "51eef05df8a12878afa305759497c9aef9864a88",
      "parents": [
        "ce583d5fb9d3f4e20473b9d5619d51ea3cc92283",
        "30873697b83743eda54d66ea9a3ea83554f8a535"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Oct 12 22:43:35 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Oct 12 22:43:35 2023 -0700"
      },
      "message": "Merge tag \u0027drm-fixes-2023-10-13\u0027 of git://anongit.freedesktop.org/drm/drm\n\nPull drm fixes from Dave Airlie:\n \"Weekly fixes, the core is msm and amdgpu with some scattered fixes\n  across vmwgfx, panel and the core stuff.\n\n  atomic-helper:\n   - Relax checks for unregistered connectors\n\n  dma-buf:\n   - Work around race condition when retrieving fence timestamp\n\n  gem:\n   - Avoid OOB access in BO memory range\n\n  panel:\n   - boe-tv101wun-ml6: Fix flickering\n\n  simpledrm:\n   - Fix error output\n\n  vwmgfx:\n   - Fix size calculation in texture-state code\n   - Ref GEM BOs in surfaces\n\n  msm:\n   - PHY/link training reset fix\n   - msm8998 - correct highest bank bit\n   - skip video mode if timing engine disabled\n   - check irq_of_parse_and_map return code\n   - add new lines to some prints\n   - fail atomic check for max mdp clk test\n\n  amdgpu:\n   - Seamless boot fix\n   - Fix TTM BO resource check\n   - SI fix for doorbell handling\"\n\n* tag \u0027drm-fixes-2023-10-13\u0027 of git://anongit.freedesktop.org/drm/drm:\n  drm/tiny: correctly print `struct resource *` on error\n  drm: Do not overrun array in drm_gem_get_pages()\n  drm/atomic-helper: relax unregistered connector check\n  drm/panel: boe-tv101wum-nl6: Completely pull GPW to VGL before TP term\n  drm/amdgpu: fix SI failure due to doorbells allocation\n  drm/amdgpu: add missing NULL check\n  drm/amd/display: Don\u0027t set dpms_off for seamless boot\n  drm/vmwgfx: Keep a gem reference to user bos in surfaces\n  drm/vmwgfx: fix typo of sizeof argument\n  drm/msm/dpu: fail dpu_plane_atomic_check() based on mdp clk limits\n  dma-buf: add dma_fence_timestamp helper\n  drm/msm/dp: Add newlines to debug printks\n  drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow\n  drm/msm/dsi: fix irq_of_parse_and_map() error checking\n  drm/msm/dsi: skip the wait for video mode done if not applicable\n  drm/msm/mdss: fix highest-bank-bit for msm8998\n  drm/msm/dp: do not reinitialize phy unless retry during link training\n"
    },
    {
      "commit": "1903e6d0578118e9aab1ee23f4a9de55737d1d05",
      "tree": "959c878e436317658322f4aaa4b7296b770840c1",
      "parents": [
        "414849040fcf11d45025b8ae26c9fd91da1465da"
      ],
      "author": {
        "name": "Namjae Jeon",
        "email": "linkinjeon@kernel.org",
        "time": "Wed Oct 11 23:30:26 2023 +0900"
      },
      "committer": {
        "name": "Steve French",
        "email": "stfrench@microsoft.com",
        "time": "Thu Oct 12 22:44:11 2023 -0500"
      },
      "message": "ksmbd: fix potential double free on smb2_read_pipe() error path\n\nFix new smatch warnings:\nfs/smb/server/smb2pdu.c:6131 smb2_read_pipe() error: double free of \u0027rpc_resp\u0027\n\nFixes: e2b76ab8b5c9 (\"ksmbd: add support for read compound\")\nReported-by: kernel test robot \u003clkp@intel.com\u003e\nReported-by: Dan Carpenter \u003cdan.carpenter@linaro.org\u003e\nSigned-off-by: Namjae Jeon \u003clinkinjeon@kernel.org\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n"
    },
    {
      "commit": "414849040fcf11d45025b8ae26c9fd91da1465da",
      "tree": "83c81166e6af582453646313edeeac0e1b07f3da",
      "parents": [
        "be0f89d4419dc5413a1cf06db3671c9949be0d52"
      ],
      "author": {
        "name": "Namjae Jeon",
        "email": "linkinjeon@kernel.org",
        "time": "Wed Oct 11 23:29:49 2023 +0900"
      },
      "committer": {
        "name": "Steve French",
        "email": "stfrench@microsoft.com",
        "time": "Thu Oct 12 22:44:09 2023 -0500"
      },
      "message": "ksmbd: fix Null pointer dereferences in ksmbd_update_fstate()\n\nCoverity Scan report the following one. This report is a false alarm.\nBecause fp is never NULL when rc is zero. This patch add null check for fp\nin ksmbd_update_fstate to make alarm silence.\n\n*** CID 1568583:  Null pointer dereferences  (FORWARD_NULL)\n/fs/smb/server/smb2pdu.c: 3408 in smb2_open()\n3402                    path_put(\u0026path);\n3403                    path_put(\u0026parent_path);\n3404            }\n3405            ksmbd_revert_fsids(work);\n3406     err_out1:\n3407            if (!rc) {\n\u003e\u003e\u003e     CID 1568583:  Null pointer dereferences  (FORWARD_NULL)\n\u003e\u003e\u003e     Passing null pointer \"fp\" to \"ksmbd_update_fstate\", which dereferences it.\n3408                    ksmbd_update_fstate(\u0026work-\u003esess-\u003efile_table, fp, FP_INITED);\n3409                    rc \u003d ksmbd_iov_pin_rsp(work, (void *)rsp, iov_len);\n3410            }\n3411            if (rc) {\n3412                    if (rc \u003d\u003d -EINVAL)\n3413                            rsp-\u003ehdr.Status \u003d STATUS_INVALID_PARAMETER;\n\nFixes: e2b76ab8b5c9 (\"ksmbd: add support for read compound\")\nReported-by: Coverity Scan \u003cscan-admin@coverity.com\u003e\nSigned-off-by: Namjae Jeon \u003clinkinjeon@kernel.org\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n"
    },
    {
      "commit": "be0f89d4419dc5413a1cf06db3671c9949be0d52",
      "tree": "0111b447baa724d6e0a153e227cdc3d95faeaacd",
      "parents": [
        "f43328357defc0dc9d28dbd06dc3361fd2b22e28"
      ],
      "author": {
        "name": "Namjae Jeon",
        "email": "linkinjeon@kernel.org",
        "time": "Mon Oct 09 23:58:15 2023 +0900"
      },
      "committer": {
        "name": "Steve French",
        "email": "stfrench@microsoft.com",
        "time": "Thu Oct 12 22:44:05 2023 -0500"
      },
      "message": "ksmbd: fix wrong error response status by using set_smb2_rsp_status()\n\nset_smb2_rsp_status() after __process_request() sets the wrong error\nstatus. This patch resets all iov vectors and sets the error status\non clean one.\n\nFixes: e2b76ab8b5c9 (\"ksmbd: add support for read compound\")\nSigned-off-by: Namjae Jeon \u003clinkinjeon@kernel.org\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n"
    },
    {
      "commit": "f43328357defc0dc9d28dbd06dc3361fd2b22e28",
      "tree": "911d8900c6d8f418be1f23eb5a396a90b6f3748b",
      "parents": [
        "94f6f0550c625fab1f373bb86a6669b45e9748b3"
      ],
      "author": {
        "name": "Namjae Jeon",
        "email": "linkinjeon@kernel.org",
        "time": "Fri Oct 06 10:41:36 2023 +0900"
      },
      "committer": {
        "name": "Steve French",
        "email": "stfrench@microsoft.com",
        "time": "Thu Oct 12 22:43:52 2023 -0500"
      },
      "message": "ksmbd: not allow to open file if delelete on close bit is set\n\nCthon test fail with the following error.\n\ncheck for proper open/unlink operation\nnfsjunk files before unlink:\n  -rwxr-xr-x 1 root root 0  9월 25 11:03 ./nfs2y8Jm9\n./nfs2y8Jm9 open; unlink ret \u003d 0\nnfsjunk files after unlink:\n  -rwxr-xr-x 1 root root 0  9월 25 11:03 ./nfs2y8Jm9\ndata compare ok\nnfsjunk files after close:\n  ls: cannot access \u0027./nfs2y8Jm9\u0027: No such file or directory\nspecial tests failed\n\nCthon expect to second unlink failure when file is already unlinked.\nksmbd can not allow to open file if flags of ksmbd inode is set with\nS_DEL_ON_CLS flags.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Namjae Jeon \u003clinkinjeon@kernel.org\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n"
    },
    {
      "commit": "30873697b83743eda54d66ea9a3ea83554f8a535",
      "tree": "cebe1c82824efc57dbb2f80231e4282c521ac4d2",
      "parents": [
        "7731cb65d1f0cc984c18191ad1b1bbd2817d094c",
        "3806a8c64794661b15ff5ed28180ff9a5f79fce8"
      ],
      "author": {
        "name": "Dave Airlie",
        "email": "airlied@redhat.com",
        "time": "Fri Oct 13 13:20:14 2023 +1000"
      },
      "committer": {
        "name": "Dave Airlie",
        "email": "airlied@redhat.com",
        "time": "Fri Oct 13 13:20:24 2023 +1000"
      },
      "message": "Merge tag \u0027amd-drm-fixes-6.6-2023-10-11\u0027 of https://gitlab.freedesktop.org/agd5f/linux into drm-fixes\n\namd-drm-fixes-6.6-2023-10-11:\n\namdgpu:\n- Seemless boot fix\n- Fix TTM BO resource check\n- SI fix for doorbell handling\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Alex Deucher \u003calexander.deucher@amd.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20231012025637.7783-1-alexander.deucher@amd.com\n"
    },
    {
      "commit": "7731cb65d1f0cc984c18191ad1b1bbd2817d094c",
      "tree": "5731c3bf6ff76594ccec6ac26fffc79cb6b38069",
      "parents": [
        "dcad98b140554c325fa2ec7d42311edc7a79cdbb",
        "10f20628c9b8e924b8046e63b36b2cea4d2c85e4"
      ],
      "author": {
        "name": "Dave Airlie",
        "email": "airlied@redhat.com",
        "time": "Fri Oct 13 13:07:05 2023 +1000"
      },
      "committer": {
        "name": "Dave Airlie",
        "email": "airlied@redhat.com",
        "time": "Fri Oct 13 13:07:06 2023 +1000"
      },
      "message": "Merge tag \u0027drm-msm-fixes-2023-10-07\u0027 of https://gitlab.freedesktop.org/drm/msm into drm-fixes\n\nFixes for v6.6-rc5\n\n- fix to not reset the PHY everytime we start link training but only\n  do it if link training fails. Without this, the PLL unlocked\n  interrupt fires causing \"Unexpected DP AUX IRQ 0x01000000 when\n  not busy\" spam in the logs since last 2-3 cycles\n- correct the highest bank bit to match downstream device tree for\n  msm8998\n- skip the video mode wait if the timing engine is not enabled. This\n  was introduced after pre_enable flag for DSI video mode panels\n  where we would end up waiting for the video mode done interrupt\n  even before enabling timing engine causing error spam and long\n  bootup times.\n- check the correct return code of irq_of_parse_and_map() in DSI code\n- avoid overflow issues in the dpu bandwidth calculation . This was\n  exposed for high resolution displays and a critical fix to avoid\n  atomic_check failure\n- minor fix to add new lines in DP print messages.\n- Fix to fail atomic_check() if the resolution exceeds max mdp clk.\n  This leads to underflow otherwise if we try to allow that frame.\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nFrom: Rob Clark \u003crobdclark@gmail.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/CAF6AEGv-HNxQ\u003dVBtZ8geGzYJum9jtManEdbvhcjo_WWF_J9Ziw@mail.gmail.com\n"
    },
    {
      "commit": "ce583d5fb9d3f4e20473b9d5619d51ea3cc92283",
      "tree": "d868d8a27d8ca79fabb4b13342da9bb2fa456697",
      "parents": [
        "4ee22162ae5fa34ac70e4ae06330395409921c5c",
        "8894b432548851f705f72ff135d3dcbd442a18d1"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Oct 12 19:41:27 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Oct 12 19:41:27 2023 -0700"
      },
      "message": "Merge tag \u0027for-v6.6-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/sre/linux-power-supply\n\nPull power supply fixes from Sebastian Reichel:\n\n - qcom_battmgr: endianness fixes\n\n* tag \u0027for-v6.6-rc2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/sre/linux-power-supply:\n  power: supply: qcom_battmgr: fix enable request endianness\n  power: supply: qcom_battmgr: fix battery_id type\n"
    },
    {
      "commit": "4ee22162ae5fa34ac70e4ae06330395409921c5c",
      "tree": "2c9d147a6ea608fc85623c34eb65baee371c522b",
      "parents": [
        "20f4757fa5ed2d9a7746d01b8950cfe04d593a0a",
        "1364a3c391aedfeb32aa025303ead3d7c91cdf9d"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Oct 12 19:24:42 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Oct 12 19:24:42 2023 -0700"
      },
      "message": "Merge tag \u0027block-6.6-2023-10-12\u0027 of git://git.kernel.dk/linux\n\nPull block fix from Jens Axboe:\n \"Just a single fix for a longstanding regression with using fallocate\n  on a block device\"\n\n* tag \u0027block-6.6-2023-10-12\u0027 of git://git.kernel.dk/linux:\n  block: Don\u0027t invalidate pagecache for invalid falloc modes\n"
    },
    {
      "commit": "dcad98b140554c325fa2ec7d42311edc7a79cdbb",
      "tree": "66c0216a655edab6c7ac45bbbbc0d90b9fe623f6",
      "parents": [
        "94f6f0550c625fab1f373bb86a6669b45e9748b3",
        "c1165df2be2fffe3adeeaa68f4ee4325108c5e4e"
      ],
      "author": {
        "name": "Dave Airlie",
        "email": "airlied@redhat.com",
        "time": "Fri Oct 13 11:04:53 2023 +1000"
      },
      "committer": {
        "name": "Dave Airlie",
        "email": "airlied@redhat.com",
        "time": "Fri Oct 13 11:05:40 2023 +1000"
      },
      "message": "Merge tag \u0027drm-misc-fixes-2023-10-12\u0027 of git://anongit.freedesktop.org/drm/drm-misc into drm-fixes\n\nShort summary of fixes pull:\n\n * atomic-helper: Relax checks for unregistered connectors\n * dma-buf: Work around race condition when retrieving fence timestamp\n * gem: Avoid OOB access in BO memory range\n * panel:\n   * boe-tv101wun-ml6: Fix flickering\n * simpledrm: Fix error output\n * vwmgfx:\n   * Fix size calculation in texture-state code\n   * Ref GEM BOs in surfaces\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Thomas Zimmermann \u003ctzimmermann@suse.de\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20231012111638.GA25037@linux-uq9g\n"
    },
    {
      "commit": "20f4757fa5ed2d9a7746d01b8950cfe04d593a0a",
      "tree": "e79db54fc87a2ef01e3cc2dc7ade47d8aa021c29",
      "parents": [
        "e5e1170364cdb21c59638c8900b8cab7578cdb15",
        "13cc9ee8f8ed58e563294d87d74a62006be40f21"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Oct 12 17:30:35 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Oct 12 17:30:35 2023 -0700"
      },
      "message": "Merge tag \u0027cgroup-for-6.6-rc5-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup\n\nPull cgroup fixes from Tejun Heo:\n\n - In cgroup1, the `tasks` file could have duplicate pids which can\n   trigger a warning in seq_file. Fix it by removing duplicate items\n   after sorting\n\n - Comment update\n\n* tag \u0027cgroup-for-6.6-rc5-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup:\n  cgroup: Fix incorrect css_set_rwsem reference in comment\n  cgroup: Remove duplicates in cgroup v1 tasks file\n"
    },
    {
      "commit": "e5e1170364cdb21c59638c8900b8cab7578cdb15",
      "tree": "da3e3f5af000a0814760fd63360149de03623d29",
      "parents": [
        "e8c127b0576660da9195504fe8393fe9da3de9ce",
        "5d9c7a1e3e8e18db8e10c546de648cda2a57be52"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Oct 12 17:16:10 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Oct 12 17:16:10 2023 -0700"
      },
      "message": "Merge tag \u0027wq-for-6.6-rc5-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/wq\n\nPull workqueue fixes from Tejun Heo:\n\n - Fix access-after-free in pwq allocation error path\n\n - Implicitly ordered unbound workqueues should lose the implicit\n   ordering if an attribute change which isn\u0027t compatible with ordered\n   operation is requested. However, attribute changes requested through\n   the sysfs interface weren\u0027t doing that leaving no way to override the\n   implicit ordering through the sysfs interface. Fix it.\n\n - Other doc and misc updates\n\n* tag \u0027wq-for-6.6-rc5-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tj/wq:\n  workqueue: fix -Wformat-truncation in create_worker\n  workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask()\n  workqueue: Use the kmem_cache_free() instead of kfree() to release pwq\n  workqueue: doc: Fix function and sysfs path errors\n  workqueue: Fix UAF report by KASAN in pwq_release_workfn()\n"
    },
    {
      "commit": "b35726396390eb445668cecdbcd41d0285dbefdf",
      "tree": "a132ea573b7762e522115533934a073bc916b6fc",
      "parents": [
        "423622a90abb243944d1517b9f57db53729e45c4"
      ],
      "author": {
        "name": "Dmitry Torokhov",
        "email": "dmitry.torokhov@gmail.com",
        "time": "Thu Oct 12 15:54:21 2023 -0700"
      },
      "committer": {
        "name": "Dmitry Torokhov",
        "email": "dmitry.torokhov@gmail.com",
        "time": "Thu Oct 12 16:01:36 2023 -0700"
      },
      "message": "Revert \"Input: psmouse - add delay when deactivating for SMBus mode\"\n\nThis reverts commit 92e24e0e57f72e06c2df87116557331fd2d4dda2.\n\nWhile the patch itself is correct, it uncovered an issue with fallback\nto PS/2 mode, where we were leaving psmouse-\u003efast_reconnect handler set\nto psmouse_smbus_reconnect(), which caused crashes.\n\nWhile discussing various approaches to fix the issue it was noted that\nthis patch ass undesired delay in the \"fast\" resume path of PS/2 device,\nand it would be better to actually use \"reset_delay\" option defined in\nstruct rmi_device_platform_data and have RMI code handle it for SMBus\ntransport as well. So this patch is being reverted to deal with crashes\nand a better solution will be merged shortly.\n\nReported-by: Thorsten Leemhuis \u003clinux@leemhuis.info\u003e\nCloses: https://lore.kernel.org/all/ca0109fa-c64b-43c1-a651-75b294d750a1@leemhuis.info/\nSigned-off-by: Dmitry Torokhov \u003cdmitry.torokhov@gmail.com\u003e\n"
    },
    {
      "commit": "e8c127b0576660da9195504fe8393fe9da3de9ce",
      "tree": "bcd572a15b68db3e1639d2298703aed23d123d1a",
      "parents": [
        "9a5a14948574ee09f339990cab69b4ab997d2f7d",
        "b91e8403373cab79375a65f5cf3495e2cd0bbdfa"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Oct 12 13:07:00 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Oct 12 13:07:00 2023 -0700"
      },
      "message": "Merge tag \u0027net-6.6-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net\n\nPull networking fixes from Paolo Abeni:\n \"Including fixes from CAN and BPF.\n\n  We have a regression in TC currently under investigation, otherwise\n  the things that stand off most are probably the TCP and AF_PACKET\n  fixes, with both issues coming from 6.5.\n\n  Previous releases - regressions:\n\n   - af_packet: fix fortified memcpy() without flex array.\n\n   - tcp: fix crashes trying to free half-baked MTU probes\n\n   - xdp: fix zero-size allocation warning in xskq_create()\n\n   - can: sja1000: always restart the tx queue after an overrun\n\n   - eth: mlx5e: again mutually exclude RX-FCS and RX-port-timestamp\n\n   - eth: nfp: avoid rmmod nfp crash issues\n\n   - eth: octeontx2-pf: fix page pool frag allocation warning\n\n  Previous releases - always broken:\n\n   - mctp: perform route lookups under a RCU read-side lock\n\n   - bpf: s390: fix clobbering the caller\u0027s backchain in the trampoline\n\n   - phy: lynx-28g: cancel the CDR check work item on the remove path\n\n   - dsa: qca8k: fix qca8k driver for Turris 1.x\n\n   - eth: ravb: fix use-after-free issue in ravb_tx_timeout_work()\n\n   - eth: ixgbe: fix crash with empty VF macvlan list\"\n\n* tag \u0027net-6.6-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net: (54 commits)\n  rswitch: Fix imbalance phy_power_off() calling\n  rswitch: Fix renesas_eth_sw_remove() implementation\n  octeontx2-pf: Fix page pool frag allocation warning\n  nfc: nci: assert requested protocol is valid\n  af_packet: Fix fortified memcpy() without flex array.\n  net: tcp: fix crashes trying to free half-baked MTU probes\n  net/smc: Fix pos miscalculation in statistics\n  nfp: flower: avoid rmmod nfp crash issues\n  net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read\n  ethtool: Fix mod state of verbose no_mask bitset\n  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()\n  mctp: perform route lookups under a RCU read-side lock\n  net: skbuff: fix kernel-doc typos\n  s390/bpf: Fix unwinding past the trampoline\n  s390/bpf: Fix clobbering the caller\u0027s backchain in the trampoline\n  net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp\n  net/smc: Fix dependency of SMC on ISM\n  ixgbe: fix crash with empty VF macvlan list\n  net/mlx5e: macsec: use update_pn flag instead of PN comparation\n  net: phy: mscc: macsec: reject PN update requests\n  ...\n"
    },
    {
      "commit": "5d9c7a1e3e8e18db8e10c546de648cda2a57be52",
      "tree": "b7ed8b5138f0c06ebf09c7e8f68925b6de9c2d04",
      "parents": [
        "ca10d851b9ad0338c19e8e3089e24d565ebfffd7"
      ],
      "author": {
        "name": "Lucy Mielke",
        "email": "lucymielke@icloud.com",
        "time": "Mon Oct 09 19:09:46 2023 +0200"
      },
      "committer": {
        "name": "Tejun Heo",
        "email": "tj@kernel.org",
        "time": "Thu Oct 12 09:53:40 2023 -1000"
      },
      "message": "workqueue: fix -Wformat-truncation in create_worker\n\nCompiling with W\u003d1 emitted the following warning\n(Compiler: gcc (x86-64, ver. 13.2.1, .config: result of make allyesconfig,\n\"Treat warnings as errors\" turned off):\n\nkernel/workqueue.c:2188:54: warning: ‘%d’ directive output may be\n\ttruncated writing between 1 and 10 bytes into a region of size\n\tbetween 5 and 14 [-Wformat-truncation\u003d]\nkernel/workqueue.c:2188:50: note: directive argument in the range\n\t[0, 2147483647]\nkernel/workqueue.c:2188:17: note: ‘snprintf’ output between 4 and 23 bytes\n\tinto a destination of size 16\n\nsetting \"id_buf\" to size 23 will silence the warning, since GCC\ndetermines snprintf\u0027s output to be max. 23 bytes in line 2188.\n\nPlease let me know if there are any mistakes in my patch!\n\nSigned-off-by: Lucy Mielke \u003clucymielke@icloud.com\u003e\nSigned-off-by: Tejun Heo \u003ctj@kernel.org\u003e\n"
    },
    {
      "commit": "ca10d851b9ad0338c19e8e3089e24d565ebfffd7",
      "tree": "80ce44489d9150f5bcd9806942a7070849895bf7",
      "parents": [
        "7b42f401fc6571b6604441789d892d440829e33c"
      ],
      "author": {
        "name": "Waiman Long",
        "email": "longman@redhat.com",
        "time": "Tue Oct 10 22:48:42 2023 -0400"
      },
      "committer": {
        "name": "Tejun Heo",
        "email": "tj@kernel.org",
        "time": "Thu Oct 12 09:52:15 2023 -1000"
      },
      "message": "workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask()\n\nCommit 5c0338c68706 (\"workqueue: restore WQ_UNBOUND/max_active\u003d\u003d1\nto be ordered\") enabled implicit ordered attribute to be added to\nWQ_UNBOUND workqueues with max_active of 1. This prevented the changing\nof attributes to these workqueues leading to fix commit 0a94efb5acbb\n(\"workqueue: implicit ordered attribute should be overridable\").\n\nHowever, workqueue_apply_unbound_cpumask() was not updated at that time.\nSo sysfs changes to wq_unbound_cpumask has no effect on WQ_UNBOUND\nworkqueues with implicit ordered attribute. Since not all WQ_UNBOUND\nworkqueues are visible on sysfs, we are not able to make all the\nnecessary cpumask changes even if we iterates all the workqueue cpumasks\nin sysfs and changing them one by one.\n\nFix this problem by applying the corresponding change made\nto apply_workqueue_attrs_locked() in the fix commit to\nworkqueue_apply_unbound_cpumask().\n\nFixes: 5c0338c68706 (\"workqueue: restore WQ_UNBOUND/max_active\u003d\u003d1 to be ordered\")\nSigned-off-by: Waiman Long \u003clongman@redhat.com\u003e\nSigned-off-by: Tejun Heo \u003ctj@kernel.org\u003e\n"
    },
    {
      "commit": "9a5a14948574ee09f339990cab69b4ab997d2f7d",
      "tree": "7fd2cc01a8ebecdfbfcb583f5c5e0206c3d535f4",
      "parents": [
        "9b1ad4ba57688ae8eb0d3bbe63c13dbd9854357a",
        "26de14831cf6e6a6ff96609a0623e1266a636467"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Oct 12 11:52:23 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Oct 12 11:52:23 2023 -0700"
      },
      "message": "Merge tag \u0027soc-fixes-6.6-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc\n\nPull ARM SoC fixes from Arnd Bergmann:\n \"AngeloGioacchino Del Regno is stepping in as co-maintainer for the\n  MediaTek SoC platform and starts by sending some dts fixes for the\n  mt8195 platform that had been pending for a while.\n\n  On the ixp4xx platform, Krzysztof Halasa steps down as co-maintainer,\n  reflecting that Linus Walleij has been handling this on his own for\n  the past few years.\n\n  Generic RISC-V kernels are now marked as incompatible with the RZ/Five\n  platform that requires custom hacks both for managing its DMA bounce\n  buffers and for addressing low virtual memory.\n\n Finally, there is one bugfix for the AMDTEE firmware driver to prevent\n a use-after-free bug\"\n\n* tag \u0027soc-fixes-6.6-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc:\n  IXP4xx MAINTAINERS entries\n  arm64: dts: mediatek: mt8195: Set DSU PMU status to fail\n  arm64: dts: mediatek: fix t-phy unit name\n  arm64: dts: mediatek: mt8195-demo: update and reorder reserved memory regions\n  arm64: dts: mediatek: mt8195-demo: fix the memory size to 8GB\n  MAINTAINERS: Add Angelo as MediaTek SoC co-maintainer\n  soc: renesas: Make ARCH_R9A07G043 (riscv version) depend on NONPORTABLE\n  tee: amdtee: fix use-after-free vulnerability in amdtee_close_session\n"
    },
    {
      "commit": "3fec323339a4a9801a54e8b282eb571965b67b23",
      "tree": "79b9a7bde60978a2dcb69a62f6d024c11cfe419e",
      "parents": [
        "a87e7d3e8832271ecb7d5eaaabc5b49fe25a469b"
      ],
      "author": {
        "name": "Alexandre Ghiti",
        "email": "alexghiti@rivosinc.com",
        "time": "Fri Oct 06 10:20:10 2023 +0200"
      },
      "committer": {
        "name": "Palmer Dabbelt",
        "email": "palmer@rivosinc.com",
        "time": "Thu Oct 12 11:46:35 2023 -0700"
      },
      "message": "drivers: perf: Fix panic in riscv SBI mmap support\n\nThe following panic can happen when mmap is called before the pmu add\ncallback which sets the hardware counter index: this happens for example\nwith the following command `perf record --no-bpf-event -n kill`.\n\n[   99.461486] CPU: 1 PID: 1259 Comm: perf Tainted: G            E      6.6.0-rc4ubuntu-defconfig #2\n[   99.461669] Hardware name: riscv-virtio,qemu (DT)\n[   99.461748] epc : pmu_sbi_set_scounteren+0x42/0x44\n[   99.462337]  ra : smp_call_function_many_cond+0x126/0x5b0\n[   99.462369] epc : ffffffff809f9d24 ra : ffffffff800f93e0 sp : ff60000082153aa0\n[   99.462407]  gp : ffffffff82395c98 tp : ff6000009a218040 t0 : ff6000009ab3a4f0\n[   99.462425]  t1 : 0000000000000004 t2 : 0000000000000100 s0 : ff60000082153ab0\n[   99.462459]  s1 : 0000000000000000 a0 : ff60000098869528 a1 : 0000000000000000\n[   99.462473]  a2 : 000000000000001f a3 : 0000000000f00000 a4 : fffffffffffffff8\n[   99.462488]  a5 : 00000000000000cc a6 : 0000000000000000 a7 : 0000000000735049\n[   99.462502]  s2 : 0000000000000001 s3 : ffffffff809f9ce2 s4 : ff60000098869528\n[   99.462516]  s5 : 0000000000000002 s6 : 0000000000000004 s7 : 0000000000000001\n[   99.462530]  s8 : ff600003fec98bc0 s9 : ffffffff826c5890 s10: ff600003fecfcde0\n[   99.462544]  s11: ff600003fec98bc0 t3 : ffffffff819e2558 t4 : ff1c000004623840\n[   99.462557]  t5 : 0000000000000901 t6 : ff6000008feeb890\n[   99.462570] status: 0000000200000100 badaddr: 0000000000000000 cause: 0000000000000003\n[   99.462658] [\u003cffffffff809f9d24\u003e] pmu_sbi_set_scounteren+0x42/0x44\n[   99.462979] Code: 1060 4785 97bb 00d7 8fd9 9073 1067 6422 0141 8082 (9002) 0013\n[   99.463335] Kernel BUG [#2]\n\nTo circumvent this, try to enable userspace access to the hardware counter\nwhen it is selected in addition to when the event is mapped. And vice-versa\nwhen the event is stopped/unmapped.\n\nFixes: cc4c07c89aad (\"drivers: perf: Implement perf event mmap support in the SBI backend\")\nSigned-off-by: Alexandre Ghiti \u003calexghiti@rivosinc.com\u003e\nLink: https://lore.kernel.org/r/20231006082010.11963-1-alexghiti@rivosinc.com\nCc: stable@vger.kernel.org\nSigned-off-by: Palmer Dabbelt \u003cpalmer@rivosinc.com\u003e\n"
    },
    {
      "commit": "a87e7d3e8832271ecb7d5eaaabc5b49fe25a469b",
      "tree": "f13266a9429d7731c6c97cf9789489d335543d98",
      "parents": [
        "07a27665754bf649b5de8e55c655e4d6837406be"
      ],
      "author": {
        "name": "Alexandre Ghiti",
        "email": "alexghiti@rivosinc.com",
        "time": "Tue Oct 03 20:24:07 2023 +0200"
      },
      "committer": {
        "name": "Palmer Dabbelt",
        "email": "palmer@rivosinc.com",
        "time": "Thu Oct 12 11:35:48 2023 -0700"
      },
      "message": "riscv: Fix ftrace syscall handling which are now prefixed with __riscv_\n\nftrace creates entries for each syscall in the tracefs but has failed\nsince commit 08d0ce30e0e4 (\"riscv: Implement syscall wrappers\") which\nprefixes all riscv syscalls with __riscv_.\n\nSo fix this by implementing arch_syscall_match_sym_name() which allows us\nto ignore this prefix.\n\nAnd also ignore compat syscalls like x86/arm64 by implementing\narch_trace_is_compat_syscall().\n\nFixes: 08d0ce30e0e4 (\"riscv: Implement syscall wrappers\")\nSigned-off-by: Alexandre Ghiti \u003calexghiti@rivosinc.com\u003e\nReviewed-by: Sami Tolvanen \u003csamitolvanen@google.com\u003e\nAcked-by: Masami Hiramatsu (Google) \u003cmhiramat@kernel.org\u003e\nTested-by: Björn Töpel \u003cbjorn@rivosinc.com\u003e\nLink: https://lore.kernel.org/r/20231003182407.32198-1-alexghiti@rivosinc.com\nCc: stable@vger.kernel.org\nSigned-off-by: Palmer Dabbelt \u003cpalmer@rivosinc.com\u003e\n"
    },
    {
      "commit": "9b1ad4ba57688ae8eb0d3bbe63c13dbd9854357a",
      "tree": "af039f33df7f190f48b2d98bb2f1297bc1e14279",
      "parents": [
        "82a040a8fa9b4f3845eff73a69a9931a59335902",
        "767881c470b3140c33795031c4e4d65572731c1c"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Oct 12 11:34:23 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Oct 12 11:34:23 2023 -0700"
      },
      "message": "Merge tag \u0027pmdomain-v6.6-rc1-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/linux-pm\n\nPull pmdomain fix from Ulf Hansson:\n\n - imx: scu-pd: Correct the DMA2 channel\n\n* tag \u0027pmdomain-v6.6-rc1-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/linux-pm:\n  pmdomain: imx: scu-pd: correct DMA2 channel\n"
    },
    {
      "commit": "07a27665754bf649b5de8e55c655e4d6837406be",
      "tree": "04b80ac66424a8cf6c50a34ad59f839101f969d1",
      "parents": [
        "1d6cd2146c2b58bc91266db1d5d6a5f9632e14c0"
      ],
      "author": {
        "name": "Jiexun Wang",
        "email": "wangjiexun@tinylab.org",
        "time": "Wed Sep 13 13:29:40 2023 +0800"
      },
      "committer": {
        "name": "Palmer Dabbelt",
        "email": "palmer@rivosinc.com",
        "time": "Thu Oct 12 11:34:16 2023 -0700"
      },
      "message": "RISC-V: Fix wrong use of CONFIG_HAVE_SOFTIRQ_ON_OWN_STACK\n\nIf configuration options SOFTIRQ_ON_OWN_STACK and PREEMPT_RT\nare enabled simultaneously under RISC-V architecture,\nit will result in a compilation failure:\n\narch/riscv/kernel/irq.c:64:6: error: redefinition of \u0027do_softirq_own_stack\u0027\n   64 | void do_softirq_own_stack(void)\n      |      ^~~~~~~~~~~~~~~~~~~~\nIn file included from ./arch/riscv/include/generated/asm/softirq_stack.h:1,\n                 from arch/riscv/kernel/irq.c:15:\n./include/asm-generic/softirq_stack.h:8:20: note: previous definition of \u0027do_softirq_own_stack\u0027 was here\n    8 | static inline void do_softirq_own_stack(void)\n      |                    ^~~~~~~~~~~~~~~~~~~~\n\nAfter changing CONFIG_HAVE_SOFTIRQ_ON_OWN_STACK to CONFIG_SOFTIRQ_ON_OWN_STACK,\ncompilation can be successful.\n\nFixes: dd69d07a5a6c (\"riscv: stack: Support HAVE_SOFTIRQ_ON_OWN_STACK\")\nReviewed-by: Guo Ren \u003cguoren@kernel.org\u003e\nSigned-off-by: Jiexun Wang \u003cwangjiexun@tinylab.org\u003e\nReviewed-by: Samuel Holland \u003csamuel@sholland.org\u003e\nLink: https://lore.kernel.org/r/20230913052940.374686-1-wangjiexun@tinylab.org\nCc: stable@vger.kernel.org\nSigned-off-by: Palmer Dabbelt \u003cpalmer@rivosinc.com\u003e\n"
    },
    {
      "commit": "1d6cd2146c2b58bc91266db1d5d6a5f9632e14c0",
      "tree": "d04f8ff3c111cb3a2d2e7c45d896869c08d8c617",
      "parents": [
        "505b02957e74f0c5c4655647ccb04bdc945d18f6"
      ],
      "author": {
        "name": "Chen Jiahao",
        "email": "chenjiahao16@huawei.com",
        "time": "Mon Sep 25 10:43:33 2023 +0800"
      },
      "committer": {
        "name": "Palmer Dabbelt",
        "email": "palmer@rivosinc.com",
        "time": "Thu Oct 12 11:34:09 2023 -0700"
      },
      "message": "riscv: kdump: fix crashkernel reserving problem on RISC-V\n\nWhen testing on risc-v QEMU environment with \"crashkernel\u003d\"\nparameter enabled, a problem occurred with the following\nmessage:\n\n[    0.000000] crashkernel low memory reserved: 0xf8000000 - 0x100000000 (128 MB)\n[    0.000000] crashkernel reserved: 0x0000000177e00000 - 0x0000000277e00000 (4096 MB)\n[    0.000000] ------------[ cut here ]------------\n[    0.000000] WARNING: CPU: 0 PID: 0 at kernel/resource.c:779 __insert_resource+0x8e/0xd0\n[    0.000000] Modules linked in:\n[    0.000000] CPU: 0 PID: 0 Comm: swapper Not tainted 6.6.0-rc2-next-20230920 #1\n[    0.000000] Hardware name: riscv-virtio,qemu (DT)\n[    0.000000] epc : __insert_resource+0x8e/0xd0\n[    0.000000]  ra : insert_resource+0x28/0x4e\n[    0.000000] epc : ffffffff80017344 ra : ffffffff8001742e sp : ffffffff81203db0\n[    0.000000]  gp : ffffffff812ece98 tp : ffffffff8120dac0 t0 : ff600001f7ff2b00\n[    0.000000]  t1 : 0000000000000000 t2 : 3428203030303030 s0 : ffffffff81203dc0\n[    0.000000]  s1 : ffffffff81211e18 a0 : ffffffff81211e18 a1 : ffffffff81289380\n[    0.000000]  a2 : 0000000277dfffff a3 : 0000000177e00000 a4 : 0000000177e00000\n[    0.000000]  a5 : ffffffff81289380 a6 : 0000000277dfffff a7 : 0000000000000078\n[    0.000000]  s2 : ffffffff81289380 s3 : ffffffff80a0bac8 s4 : ff600001f7ff2880\n[    0.000000]  s5 : 0000000000000280 s6 : 8000000a00006800 s7 : 000000000000007f\n[    0.000000]  s8 : 0000000080017038 s9 : 0000000080038ea0 s10: 0000000000000000\n[    0.000000]  s11: 0000000000000000 t3 : ffffffff80a0bc00 t4 : ffffffff80a0bc00\n[    0.000000]  t5 : ffffffff80a0bbd0 t6 : ffffffff80a0bc00\n[    0.000000] status: 0000000200000100 badaddr: 0000000000000000 cause: 0000000000000003\n[    0.000000] [\u003cffffffff80017344\u003e] __insert_resource+0x8e/0xd0\n[    0.000000] ---[ end trace 0000000000000000 ]---\n[    0.000000] Failed to add a Crash kernel resource at 177e00000\n\nThe crashkernel memory has been allocated successfully, whereas\nit failed to insert into iomem_resource. This is due to the\nunique reserving logic in risc-v arch specific code, i.e.\ncrashk_res/crashk_low_res will be added into iomem_resource\nlater in init_resources(), which is not aligned with current\nunified reserving logic in reserve_crashkernel_{generic,low}()\nand therefore leads to the failure of crashkernel reservation.\n\nRemoving the arch specific code within #ifdef CONFIG_KEXEC_CORE\nin init_resources() to fix above problem.\n\nFixes: 31549153088e (\"riscv: kdump: use generic interface to simplify crashkernel reservation\")\nSigned-off-by: Chen Jiahao \u003cchenjiahao16@huawei.com\u003e\nLink: https://lore.kernel.org/r/20230925024333.730964-1-chenjiahao16@huawei.com\nCc: stable@vger.kernel.org\nSigned-off-by: Palmer Dabbelt \u003cpalmer@rivosinc.com\u003e\n"
    },
    {
      "commit": "505b02957e74f0c5c4655647ccb04bdc945d18f6",
      "tree": "0f33219189cb2327dd52b24c1d60c81ffc3a6754",
      "parents": [
        "14a270bfab7ab1c4b605c01eeca5557447ad5a2b"
      ],
      "author": {
        "name": "Song Shuai",
        "email": "songshuaishuai@tinylab.org",
        "time": "Thu Sep 14 17:13:34 2023 +0800"
      },
      "committer": {
        "name": "Palmer Dabbelt",
        "email": "palmer@rivosinc.com",
        "time": "Thu Oct 12 11:34:03 2023 -0700"
      },
      "message": "riscv: Remove duplicate objcopy flag\n\nThere are two duplicate `-O binary` flags when objcopying from vmlinux\nto Image/xipImage.\n\nRISC-V set `-O binary` flag in both OBJCOPYFLAGS in the top-level riscv\nMakefile and OBJCOPYFLAGS_* in the boot/Makefile, and the objcopy cmd\nin Kbuild would join them together.\n\nThe `-O binary` flag is only needed for objcopying Image, so remove the\nOBJCOPYFLAGS in the top-level riscv Makefile.\n\nFixes: c0fbcd991860 (\"RISC-V: Build flat and compressed kernel images\")\nSigned-off-by: Song Shuai \u003csongshuaishuai@tinylab.org\u003e\nReviewed-by: Palmer Dabbelt \u003cpalmer@rivosinc.com\u003e\nLink: https://lore.kernel.org/r/20230914091334.1458542-1-songshuaishuai@tinylab.org\nCc: stable@vger.kernel.org\nSigned-off-by: Palmer Dabbelt \u003cpalmer@rivosinc.com\u003e\n"
    },
    {
      "commit": "d35652a5fc9944784f6f50a5c979518ff8dacf61",
      "tree": "84eef8447fa8d2feb9a54080567e34ab252d3de2",
      "parents": [
        "f454b18e07f518bcd0c05af17a2239138bff52de"
      ],
      "author": {
        "name": "Kirill A. Shutemov",
        "email": "kirill.shutemov@linux.intel.com",
        "time": "Thu Oct 12 13:04:24 2023 +0300"
      },
      "committer": {
        "name": "Ingo Molnar",
        "email": "mingo@kernel.org",
        "time": "Thu Oct 12 20:27:16 2023 +0200"
      },
      "message": "x86/alternatives: Disable KASAN in apply_alternatives()\n\nFei has reported that KASAN triggers during apply_alternatives() on\na 5-level paging machine:\n\n\tBUG: KASAN: out-of-bounds in rcu_is_watching()\n\tRead of size 4 at addr ff110003ee6419a0 by task swapper/0/0\n\t...\n\t__asan_load4()\n\trcu_is_watching()\n\ttrace_hardirqs_on()\n\ttext_poke_early()\n\tapply_alternatives()\n\t...\n\nOn machines with 5-level paging, cpu_feature_enabled(X86_FEATURE_LA57)\ngets patched. It includes KASAN code, where KASAN_SHADOW_START depends on\n__VIRTUAL_MASK_SHIFT, which is defined with cpu_feature_enabled().\n\nKASAN gets confused when apply_alternatives() patches the\nKASAN_SHADOW_START users. A test patch that makes KASAN_SHADOW_START\nstatic, by replacing __VIRTUAL_MASK_SHIFT with 56, works around the issue.\n\nFix it for real by disabling KASAN while the kernel is patching alternatives.\n\n[ mingo: updated the changelog ]\n\nFixes: 6657fca06e3f (\"x86/mm: Allow to boot without LA57 if CONFIG_X86_5LEVEL\u003dy\")\nReported-by: Fei Yang \u003cfei.yang@intel.com\u003e\nSigned-off-by: Kirill A. Shutemov \u003ckirill.shutemov@linux.intel.com\u003e\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\nAcked-by: Peter Zijlstra (Intel) \u003cpeterz@infradead.org\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: stable@vger.kernel.org\nLink: https://lore.kernel.org/r/20231012100424.1456-1-kirill.shutemov@linux.intel.com\n"
    },
    {
      "commit": "82a040a8fa9b4f3845eff73a69a9931a59335902",
      "tree": "30971412db313c9655cdb395af051b44fce26c32",
      "parents": [
        "401644852d0b2a278811de38081be23f74b5bb04",
        "f055ff23c331f28aa4ace4b72dc56f63b9a726c8"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Oct 12 10:48:19 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Oct 12 10:48:19 2023 -0700"
      },
      "message": "Merge tag \u0027pinctrl-v6.6-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl\n\nPull pin control fixes from Linus Walleij:\n \"Some pin control fixes for v6.6 which have been stacking up in my\n  tree.\n\n  Dmitry\u0027s fix to some locking in the core is the most substantial, that\n  was a really neat fix.\n\n  The rest is the usual assorted spray of minor driver fixes.\n\n   - Drop some minor code causing warnings in the Lantiq driver\n\n   - Fix out of bounds write in the Nuvoton driver\n\n   - Fix lost IRQs with CONFIG_PM in the Starfive driver\n\n   - Fix a locking issue in find_pinctrl()\n\n   - Revert a regressive Tegra debug patch\n\n   - Fix the Renesas RZN1 pin muxing\"\n\n* tag \u0027pinctrl-v6.6-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl:\n  pinctrl: renesas: rzn1: Enable missing PINMUX\n  Revert \"pinctrl: tegra: Add support to display pin function\"\n  pinctrl: avoid unsafe code pattern in find_pinctrl()\n  pinctrl: starfive: jh7110: Add system pm ops to save and restore context\n  pinctrl: starfive: jh7110: Fix failure to set irq after CONFIG_PM is enabled\n  pinctrl: nuvoton: wpcm450: fix out of bounds write\n  pinctrl: lantiq: Remove unsued declaration ltq_pinctrl_unregister()\n"
    },
    {
      "commit": "7b42f401fc6571b6604441789d892d440829e33c",
      "tree": "7a658c200e6face61e064eadf5c87a887427348b",
      "parents": [
        "bd9e7326b8d512ee724006d4ec06dfbf3096ae9e"
      ],
      "author": {
        "name": "Zqiang",
        "email": "qiang.zhang1211@gmail.com",
        "time": "Wed Oct 11 16:27:59 2023 +0800"
      },
      "committer": {
        "name": "Tejun Heo",
        "email": "tj@kernel.org",
        "time": "Thu Oct 12 07:34:07 2023 -1000"
      },
      "message": "workqueue: Use the kmem_cache_free() instead of kfree() to release pwq\n\nCurrently, the kfree() be used for pwq objects allocated with\nkmem_cache_alloc() in alloc_and_link_pwqs(), this isn\u0027t wrong.\nbut usually, use \"trace_kmem_cache_alloc/trace_kmem_cache_free\"\nto track memory allocation and free. this commit therefore use\nkmem_cache_free() instead of kfree() in alloc_and_link_pwqs()\nand also consistent with release of the pwq in rcu_free_pwq().\n\nSigned-off-by: Zqiang \u003cqiang.zhang1211@gmail.com\u003e\nSigned-off-by: Tejun Heo \u003ctj@kernel.org\u003e\n"
    },
    {
      "commit": "bd9e7326b8d512ee724006d4ec06dfbf3096ae9e",
      "tree": "362b09c7d19468831b975642db8a40a3ec24d58f",
      "parents": [
        "643445531829d89dc5ddbe0c5ee4ff8f84ce8687"
      ],
      "author": {
        "name": "WangJinchao",
        "email": "wangjinchao@xfusion.com",
        "time": "Thu Oct 12 15:17:38 2023 +0800"
      },
      "committer": {
        "name": "Tejun Heo",
        "email": "tj@kernel.org",
        "time": "Thu Oct 12 07:27:22 2023 -1000"
      },
      "message": "workqueue: doc: Fix function and sysfs path errors\n\nalloc_ordered_queue -\u003e alloc_ordered_workqueue\n/sys/devices/virtual/WQ_NAME/\n    -\u003e /sys/devices/virtual/workqueue/WQ_NAME/\n\nSigned-off-by: WangJinchao \u003cwangjinchao@xfusion.com\u003e\nSigned-off-by: Tejun Heo \u003ctj@kernel.org\u003e\n"
    },
    {
      "commit": "13cc9ee8f8ed58e563294d87d74a62006be40f21",
      "tree": "6f03e6172208de360c58d9eedbd92e1d760e9dcb",
      "parents": [
        "1ca0b605150501b7dc59f3016271da4eb3e96fce"
      ],
      "author": {
        "name": "Waiman Long",
        "email": "longman@redhat.com",
        "time": "Thu Oct 12 13:09:02 2023 -0400"
      },
      "committer": {
        "name": "Tejun Heo",
        "email": "tj@kernel.org",
        "time": "Thu Oct 12 07:22:56 2023 -1000"
      },
      "message": "cgroup: Fix incorrect css_set_rwsem reference in comment\n\nSince commit f0d9a5f17575 (\"cgroup: make css_set_rwsem a spinlock\nand rename it to css_set_lock\"), css_set_rwsem has been replaced by\ncss_set_lock. That commit, however, missed the css_set_rwsem reference\nin include/linux/cgroup-defs.h. Fix that by changing it to css_set_lock\nas well.\n\nSigned-off-by: Waiman Long \u003clongman@redhat.com\u003e\nSigned-off-by: Tejun Heo \u003ctj@kernel.org\u003e\n"
    },
    {
      "commit": "c34706acf40b43dd31f67c92c5a95d39666a1eb3",
      "tree": "0cd2f1457a0531e6656ef557cb5ee601a04da1e6",
      "parents": [
        "e001d1447cd4585d7f23a44ff668ba2bc624badb"
      ],
      "author": {
        "name": "Amir Goldstein",
        "email": "amir73il@gmail.com",
        "time": "Thu Oct 12 16:08:28 2023 +0300"
      },
      "committer": {
        "name": "Amir Goldstein",
        "email": "amir73il@gmail.com",
        "time": "Thu Oct 12 18:53:37 2023 +0300"
      },
      "message": "ovl: fix regression in parsing of mount options with escaped comma\n\nEver since commit 91c77947133f (\"ovl: allow filenames with comma\"), the\nfollowing example was legit overlayfs mount options:\n\n  mount -t overlay overlay -o \u0027lowerdir\u003d/tmp/a\\,b/lower\u0027 /mnt\n\nThe conversion to new mount api moved to using the common helper\ngeneric_parse_monolithic() and discarded the specialized ovl_next_opt()\noption separator.\n\nBring back ovl_next_opt() and use vfs_parse_monolithic_sep() to fix the\nregression.\n\nReported-by: Ryan Hendrickson \u003cryan.hendrickson@alum.mit.edu\u003e\nCloses: https://lore.kernel.org/r/8da307fb-9318-cf78-8a27-ba5c5a0aef6d@alum.mit.edu/\nFixes: 1784fbc2ed9c (\"ovl: port to new mount api\")\nSigned-off-by: Amir Goldstein \u003camir73il@gmail.com\u003e\n"
    },
    {
      "commit": "e001d1447cd4585d7f23a44ff668ba2bc624badb",
      "tree": "cb769c6d46a349991a42c05433f5fa63470ae0ce",
      "parents": [
        "94f6f0550c625fab1f373bb86a6669b45e9748b3"
      ],
      "author": {
        "name": "Amir Goldstein",
        "email": "amir73il@gmail.com",
        "time": "Thu Oct 12 15:24:17 2023 +0300"
      },
      "committer": {
        "name": "Amir Goldstein",
        "email": "amir73il@gmail.com",
        "time": "Thu Oct 12 18:53:36 2023 +0300"
      },
      "message": "fs: factor out vfs_parse_monolithic_sep() helper\n\nFactor out vfs_parse_monolithic_sep() from generic_parse_monolithic(),\nso filesystems could use it with a custom option separator callback.\n\nAcked-by: Christian Brauner \u003cbrauner@kernel.org\u003e\nSigned-off-by: Amir Goldstein \u003camir73il@gmail.com\u003e\n"
    },
    {
      "commit": "81ba10959970d15c388bf29866b01b62f387e6a3",
      "tree": "030184ad6cca30cb57637bc1dc3b031ad2da0cd3",
      "parents": [
        "e95f3f74465072c2545d8e65a3c3a96e37129cf8"
      ],
      "author": {
        "name": "Paulo Alcantara",
        "email": "pc@manguebit.com",
        "time": "Mon Oct 09 17:37:40 2023 -0300"
      },
      "committer": {
        "name": "Steve French",
        "email": "stfrench@microsoft.com",
        "time": "Thu Oct 12 09:41:32 2023 -0500"
      },
      "message": "smb: client: prevent new fids from being removed by laundromat\n\nCheck if @cfid-\u003etime is set in laundromat so we guarantee that only\nfully cached fids will be selected for removal.  While we\u0027re at it,\nadd missing locks to protect access of @cfid fields in order to avoid\nraces with open_cached_dir() and cfids_laundromat_worker(),\nrespectively.\n\nSigned-off-by: Paulo Alcantara (SUSE) \u003cpc@manguebit.com\u003e\nReviewed-by: Shyam Prasad N \u003csprasad@microsoft.com\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n"
    },
    {
      "commit": "e95f3f74465072c2545d8e65a3c3a96e37129cf8",
      "tree": "d0301b7a7efda7e19b0f158d78c308dd7507d929",
      "parents": [
        "94f6f0550c625fab1f373bb86a6669b45e9748b3"
      ],
      "author": {
        "name": "Paulo Alcantara",
        "email": "pc@manguebit.com",
        "time": "Thu Oct 05 16:04:25 2023 -0300"
      },
      "committer": {
        "name": "Steve French",
        "email": "stfrench@microsoft.com",
        "time": "Thu Oct 12 09:41:04 2023 -0500"
      },
      "message": "smb: client: make laundromat a delayed worker\n\nBy having laundromat kthread processing cached directories on every\nsecond turned out to be overkill, especially when having multiple SMB\nmounts.\n\nRelax it by using a delayed worker instead that gets scheduled on\nevery @dir_cache_timeout (default\u003d30) seconds per tcon.\n\nThis also fixes the 1s delay when tearing down tcon.\n\nSigned-off-by: Paulo Alcantara (SUSE) \u003cpc@manguebit.com\u003e\nReviewed-by: Shyam Prasad N \u003csprasad@microsoft.com\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n"
    },
    {
      "commit": "14a270bfab7ab1c4b605c01eeca5557447ad5a2b",
      "tree": "0675d3287c023bfe1afefbb1f68ec8740d21de27",
      "parents": [
        "5abb5c3cd4b38ec32c38a852c83ea04255cecf25"
      ],
      "author": {
        "name": "Andy Chiu",
        "email": "andy.chiu@sifive.com",
        "time": "Tue Aug 22 16:49:03 2023 +0000"
      },
      "committer": {
        "name": "Palmer Dabbelt",
        "email": "palmer@rivosinc.com",
        "time": "Thu Oct 12 05:38:40 2023 -0700"
      },
      "message": "riscv: signal: fix sigaltstack frame size checking\n\nThe alternative stack checking in get_sigframe introduced by the Vector\nsupport is not needed and has a problem. It is not needed as we have\nalready validate it at the beginning of the function if we are already\non an altstack. If not, the size of an altstack is always validated at\nits allocation stage with sigaltstack_size_valid().\n\nBesides, we must only regard the size of an altstack if the handler of a\nsignal is registered with SA_ONSTACK. So, blindly checking overflow of\nan altstack if sas_ss_size not equals to zero will check against wrong\nsignal handlers if only a subset of signals are registered with\nSA_ONSTACK.\n\nFixes: 8ee0b41898fa (\"riscv: signal: Add sigcontext save/restore for vector\")\nReported-by: Prashanth Swaminathan \u003cprashanthsw@google.com\u003e\nSigned-off-by: Andy Chiu \u003candy.chiu@sifive.com\u003e\nLink: https://lore.kernel.org/r/20230822164904.21660-1-andy.chiu@sifive.com\nSigned-off-by: Palmer Dabbelt \u003cpalmer@rivosinc.com\u003e\n"
    },
    {
      "commit": "26de14831cf6e6a6ff96609a0623e1266a636467",
      "tree": "6a23f0d488bbc7e782aa306af6e6a5780069bc9b",
      "parents": [
        "886d1f1f8f5f65fd3048c0d6befe0d3222fb11a2"
      ],
      "author": {
        "name": "Krzysztof Hałasa",
        "email": "khalasa@piap.pl",
        "time": "Wed Oct 11 07:06:29 2023 +0200"
      },
      "committer": {
        "name": "Arnd Bergmann",
        "email": "arnd@arndb.de",
        "time": "Thu Oct 12 13:11:30 2023 +0200"
      },
      "message": "IXP4xx MAINTAINERS entries\n\nUpdate MAINTAINERS entries for Intel IXP4xx SoCs.\n\nLinus has been handling all IXP4xx stuff since 2019 or so.\n\nSigned-off-by: Krzysztof Hałasa \u003ckhalasa@piap.pl\u003e\nAcked-by: Linus Walleij \u003clinus.walleij@linaro.org\u003e\nAcked-by: Deepak Saxena \u003cdsaxena@plexity.net\u003e\nLink: https://lore.kernel.org/r/m3ttqxu4ru.fsf@t19.piap.pl\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\n"
    },
    {
      "commit": "b91e8403373cab79375a65f5cf3495e2cd0bbdfa",
      "tree": "dad47ca3b7f6cd6174c3a54d7ec0223482aeb7f1",
      "parents": [
        "50e492143374c17ad89c865a1a44837b3f5c8226",
        "053f13f67be6d02781730c9ac71abde6e9140610"
      ],
      "author": {
        "name": "Paolo Abeni",
        "email": "pabeni@redhat.com",
        "time": "Thu Oct 12 11:22:24 2023 +0200"
      },
      "committer": {
        "name": "Paolo Abeni",
        "email": "pabeni@redhat.com",
        "time": "Thu Oct 12 11:22:24 2023 +0200"
      },
      "message": "Merge branch \u0027rswitch-fix-issues-on-specific-conditions\u0027\n\nYoshihiro Shimoda says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nrswitch: Fix issues on specific conditions\n\nThis patch series fix some issues of rswitch driver on specific\ncondtions.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://lore.kernel.org/r/20231010124858.183891-1-yoshihiro.shimoda.uh@renesas.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n"
    },
    {
      "commit": "053f13f67be6d02781730c9ac71abde6e9140610",
      "tree": "dad47ca3b7f6cd6174c3a54d7ec0223482aeb7f1",
      "parents": [
        "510b18cf23b9bd8a982ef7f1fb19f3968a2bf787"
      ],
      "author": {
        "name": "Yoshihiro Shimoda",
        "email": "yoshihiro.shimoda.uh@renesas.com",
        "time": "Tue Oct 10 21:48:58 2023 +0900"
      },
      "committer": {
        "name": "Paolo Abeni",
        "email": "pabeni@redhat.com",
        "time": "Thu Oct 12 11:22:21 2023 +0200"
      },
      "message": "rswitch: Fix imbalance phy_power_off() calling\n\nThe phy_power_off() should not be called if phy_power_on() failed.\nSo, add a condition .power_count before calls phy_power_off().\n\nFixes: 5cb630925b49 (\"net: renesas: rswitch: Add phy_power_{on,off}() calling\")\nSigned-off-by: Yoshihiro Shimoda \u003cyoshihiro.shimoda.uh@renesas.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n"
    },
    {
      "commit": "510b18cf23b9bd8a982ef7f1fb19f3968a2bf787",
      "tree": "38ae3d0f83dd5dff2c8d14ade1b57f3f0b7425d8",
      "parents": [
        "50e492143374c17ad89c865a1a44837b3f5c8226"
      ],
      "author": {
        "name": "Yoshihiro Shimoda",
        "email": "yoshihiro.shimoda.uh@renesas.com",
        "time": "Tue Oct 10 21:48:57 2023 +0900"
      },
      "committer": {
        "name": "Paolo Abeni",
        "email": "pabeni@redhat.com",
        "time": "Thu Oct 12 11:22:21 2023 +0200"
      },
      "message": "rswitch: Fix renesas_eth_sw_remove() implementation\n\nFix functions calling order and a condition in renesas_eth_sw_remove().\nOtherwise, kernel NULL pointer dereference happens from phy_stop() if\na net device opens.\n\nFixes: 3590918b5d07 (\"net: ethernet: renesas: Add support for \"Ethernet Switch\"\")\nSigned-off-by: Yoshihiro Shimoda \u003cyoshihiro.shimoda.uh@renesas.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n"
    },
    {
      "commit": "c1165df2be2fffe3adeeaa68f4ee4325108c5e4e",
      "tree": "f3d4d69edbdd7d74fa02643d84b2f2c14e3d87d3",
      "parents": [
        "b7fd68ab1538e3adb665670414bea440f399fda9"
      ],
      "author": {
        "name": "Joey Gouly",
        "email": "joey.gouly@arm.com",
        "time": "Tue Oct 10 18:46:52 2023 +0100"
      },
      "committer": {
        "name": "Thomas Zimmermann",
        "email": "tzimmermann@suse.de",
        "time": "Thu Oct 12 10:57:07 2023 +0200"
      },
      "message": "drm/tiny: correctly print `struct resource *` on error\n\nThe `res` variable is already a `struct resource *`, don\u0027t take the address of it.\n\nFixes incorrect output:\n\n\tsimple-framebuffer 9e20dc000.framebuffer: [drm] *ERROR* could not acquire memory range [??? 0xffff4be88a387d00-0xfffffefffde0a240 flags 0x0]: -16\n\nTo be correct:\n\n\tsimple-framebuffer 9e20dc000.framebuffer: [drm] *ERROR* could not acquire memory range [mem 0x9e20dc000-0x9e307bfff flags 0x200]: -16\n\nSigned-off-by: Joey Gouly \u003cjoey.gouly@arm.com\u003e\nFixes: 9a10c7e6519b (\"drm/simpledrm: Add support for system memory framebuffers\")\nCc: Thomas Zimmermann \u003ctzimmermann@suse.de\u003e\nCc: Thierry Reding \u003ctreding@nvidia.com\u003e\nCc: Javier Martinez Canillas \u003cjavierm@redhat.com\u003e\nCc: dri-devel@lists.freedesktop.org\nCc: \u003cstable@vger.kernel.org\u003e # v6.3+\nReviewed-by: Thomas Zimmermann \u003ctzimmermann@suse.de\u003e\nSigned-off-by: Thomas Zimmermann \u003ctzimmermann@suse.de\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20231010174652.2439513-1-joey.gouly@arm.com\n"
    },
    {
      "commit": "b7fd68ab1538e3adb665670414bea440f399fda9",
      "tree": "5c23ec8ae85f915b2f05a40a9e1f9cb85e42f958",
      "parents": [
        "2b7947bd32e243c52870d54141d3b4ea6775e63d"
      ],
      "author": {
        "name": "Matthew Wilcox (Oracle)",
        "email": "willy@infradead.org",
        "time": "Thu Oct 05 14:56:47 2023 +0100"
      },
      "committer": {
        "name": "Maxime Ripard",
        "email": "mripard@kernel.org",
        "time": "Thu Oct 12 10:44:06 2023 +0200"
      },
      "message": "drm: Do not overrun array in drm_gem_get_pages()\n\nIf the shared memory object is larger than the DRM object that it backs,\nwe can overrun the page array.  Limit the number of pages we install\nfrom each folio to prevent this.\n\nSigned-off-by: \"Matthew Wilcox (Oracle)\" \u003cwilly@infradead.org\u003e\nReported-by: Oleksandr Natalenko \u003coleksandr@natalenko.name\u003e\nTested-by: Oleksandr Natalenko \u003coleksandr@natalenko.name\u003e\nLink: https://lore.kernel.org/lkml/13360591.uLZWGnKmhe@natalenko.name/\nFixes: 3291e09a4638 (\"drm: convert drm_gem_put_pages() to use a folio_batch\")\nCc: stable@vger.kernel.org # 6.5.x\nSigned-off-by: Maxime Ripard \u003cmripard@kernel.org\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20231005135648.2317298-1-willy@infradead.org\n"
    },
    {
      "commit": "50e492143374c17ad89c865a1a44837b3f5c8226",
      "tree": "d504d96702f272749317f689fe19f74d07cb0de3",
      "parents": [
        "354a6e707e29cb0c007176ee5b8db8be7bd2dee0"
      ],
      "author": {
        "name": "Ratheesh Kannoth",
        "email": "rkannoth@marvell.com",
        "time": "Tue Oct 10 09:18:42 2023 +0530"
      },
      "committer": {
        "name": "Paolo Abeni",
        "email": "pabeni@redhat.com",
        "time": "Thu Oct 12 09:48:51 2023 +0200"
      },
      "message": "octeontx2-pf: Fix page pool frag allocation warning\n\nSince page pool param\u0027s \"order\" is set to 0, will result\nin below warn message if interface is configured with higher\nrx buffer size.\n\nSteps to reproduce the issue.\n1. devlink dev param set pci/0002:04:00.0 name receive_buffer_size \\\n   value 8196 cmode runtime\n2. ifconfig eth0 up\n\n[   19.901356] ------------[ cut here ]------------\n[   19.901361] WARNING: CPU: 11 PID: 12331 at net/core/page_pool.c:567 page_pool_alloc_frag+0x3c/0x230\n[   19.901449] pstate: 82401009 (Nzcv daif +PAN -UAO +TCO -DIT +SSBS BTYPE\u003d--)\n[   19.901451] pc : page_pool_alloc_frag+0x3c/0x230\n[   19.901453] lr : __otx2_alloc_rbuf+0x60/0xbc [rvu_nicpf]\n[   19.901460] sp : ffff80000f66b970\n[   19.901461] x29: ffff80000f66b970 x28: 0000000000000000 x27: 0000000000000000\n[   19.901464] x26: ffff800000d15b68 x25: ffff000195b5c080 x24: ffff0002a5a32dc0\n[   19.901467] x23: ffff0001063c0878 x22: 0000000000000100 x21: 0000000000000000\n[   19.901469] x20: 0000000000000000 x19: ffff00016f781000 x18: 0000000000000000\n[   19.901472] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000\n[   19.901474] x14: 0000000000000000 x13: ffff0005ffdc9c80 x12: 0000000000000000\n[   19.901477] x11: ffff800009119a38 x10: 4c6ef2e3ba300519 x9 : ffff800000d13844\n[   19.901479] x8 : ffff0002a5a33cc8 x7 : 0000000000000030 x6 : 0000000000000030\n[   19.901482] x5 : 0000000000000005 x4 : 0000000000000000 x3 : 0000000000000a20\n[   19.901484] x2 : 0000000000001080 x1 : ffff80000f66b9d4 x0 : 0000000000001000\n[   19.901487] Call trace:\n[   19.901488]  page_pool_alloc_frag+0x3c/0x230\n[   19.901490]  __otx2_alloc_rbuf+0x60/0xbc [rvu_nicpf]\n[   19.901494]  otx2_rq_aura_pool_init+0x1c4/0x240 [rvu_nicpf]\n[   19.901498]  otx2_open+0x228/0xa70 [rvu_nicpf]\n[   19.901501]  otx2vf_open+0x20/0xd0 [rvu_nicvf]\n[   19.901504]  __dev_open+0x114/0x1d0\n[   19.901507]  __dev_change_flags+0x194/0x210\n[   19.901510]  dev_change_flags+0x2c/0x70\n[   19.901512]  devinet_ioctl+0x3a4/0x6c4\n[   19.901515]  inet_ioctl+0x228/0x240\n[   19.901518]  sock_ioctl+0x2ac/0x480\n[   19.901522]  __arm64_sys_ioctl+0x564/0xe50\n[   19.901525]  invoke_syscall.constprop.0+0x58/0xf0\n[   19.901529]  do_el0_svc+0x58/0x150\n[   19.901531]  el0_svc+0x30/0x140\n[   19.901533]  el0t_64_sync_handler+0xe8/0x114\n[   19.901535]  el0t_64_sync+0x1a0/0x1a4\n[   19.901537] ---[ end trace 678c0bf660ad8116 ]---\n\nFixes: b2e3406a38f0 (\"octeontx2-pf: Add support for page pool\")\nSigned-off-by: Ratheesh Kannoth \u003crkannoth@marvell.com\u003e\nReviewed-by: Yunsheng Lin \u003clinyunsheng@huawei.com\u003e\nLink: https://lore.kernel.org/r/20231010034842.3807816-1-rkannoth@marvell.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n"
    },
    {
      "commit": "354a6e707e29cb0c007176ee5b8db8be7bd2dee0",
      "tree": "db32a5ec815d25769e27055f0c6400a18405b080",
      "parents": [
        "e2bca4870fdaf855651ee80b083d892599c5d982"
      ],
      "author": {
        "name": "Jeremy Cline",
        "email": "jeremy@jcline.org",
        "time": "Mon Oct 09 16:00:54 2023 -0400"
      },
      "committer": {
        "name": "Paolo Abeni",
        "email": "pabeni@redhat.com",
        "time": "Thu Oct 12 09:32:10 2023 +0200"
      },
      "message": "nfc: nci: assert requested protocol is valid\n\nThe protocol is used in a bit mask to determine if the protocol is\nsupported. Assert the provided protocol is less than the maximum\ndefined so it doesn\u0027t potentially perform a shift-out-of-bounds and\nprovide a clearer error for undefined protocols vs unsupported ones.\n\nFixes: 6a2968aaf50c (\"NFC: basic NCI protocol implementation\")\nReported-and-tested-by: syzbot+0839b78e119aae1fec78@syzkaller.appspotmail.com\nCloses: https://syzkaller.appspot.com/bug?extid\u003d0839b78e119aae1fec78\nSigned-off-by: Jeremy Cline \u003cjeremy@jcline.org\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://lore.kernel.org/r/20231009200054.82557-1-jeremy@jcline.org\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n"
    },
    {
      "commit": "e2bca4870fdaf855651ee80b083d892599c5d982",
      "tree": "e7b39472334d3b0ec8b61e3f5b61846a36ce2c9e",
      "parents": [
        "71c299c711d1f44f0bf04f1fea66baad565240f1"
      ],
      "author": {
        "name": "Kuniyuki Iwashima",
        "email": "kuniyu@amazon.com",
        "time": "Mon Oct 09 08:31:52 2023 -0700"
      },
      "committer": {
        "name": "Paolo Abeni",
        "email": "pabeni@redhat.com",
        "time": "Thu Oct 12 09:15:15 2023 +0200"
      },
      "message": "af_packet: Fix fortified memcpy() without flex array.\n\nSergei Trofimovich reported a regression [0] caused by commit a0ade8404c3b\n(\"af_packet: Fix warning of fortified memcpy() in packet_getname().\").\n\nIt introduced a flex array sll_addr_flex in struct sockaddr_ll as a\nunion-ed member with sll_addr to work around the fortified memcpy() check.\n\nHowever, a userspace program uses a struct that has struct sockaddr_ll in\nthe middle, where a flex array is illegal to exist.\n\n  include/linux/if_packet.h:24:17: error: flexible array member \u0027sockaddr_ll::\u003cunnamed union\u003e::\u003cunnamed struct\u003e::sll_addr_flex\u0027 not at end of \u0027struct packet_info_t\u0027\n     24 |                 __DECLARE_FLEX_ARRAY(unsigned char, sll_addr_flex);\n        |                 ^~~~~~~~~~~~~~~~~~~~\n\nTo fix the regression, let\u0027s go back to the first attempt [1] telling\nmemcpy() the actual size of the array.\n\nReported-by: Sergei Trofimovich \u003cslyich@gmail.com\u003e\nCloses: https://github.com/NixOS/nixpkgs/pull/252587#issuecomment-1741733002 [0]\nLink: https://lore.kernel.org/netdev/20230720004410.87588-3-kuniyu@amazon.com/ [1]\nFixes: a0ade8404c3b (\"af_packet: Fix warning of fortified memcpy() in packet_getname().\")\nSigned-off-by: Kuniyuki Iwashima \u003ckuniyu@amazon.com\u003e\nLink: https://lore.kernel.org/r/20231009153151.75688-1-kuniyu@amazon.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n"
    },
    {
      "commit": "f055ff23c331f28aa4ace4b72dc56f63b9a726c8",
      "tree": "2dcdb9d07cb37e19a6c8df6befae624b5a40345c",
      "parents": [
        "8be586f78dfd2aebbcd06d855e2d6f23402bbc58"
      ],
      "author": {
        "name": "Ralph Siemsen",
        "email": "ralph.siemsen@linaro.org",
        "time": "Wed Oct 04 16:00:08 2023 -0400"
      },
      "committer": {
        "name": "Linus Walleij",
        "email": "linus.walleij@linaro.org",
        "time": "Thu Oct 12 09:10:40 2023 +0200"
      },
      "message": "pinctrl: renesas: rzn1: Enable missing PINMUX\n\nEnable pin muxing (eg. programmable function), so that the RZ/N1 GPIO\npins will be configured as specified by the pinmux in the DTS.\n\nThis used to be enabled implicitly via CONFIG_GENERIC_PINMUX_FUNCTIONS,\nhowever that was removed, since the RZ/N1 driver does not call any of\nthe generic pinmux functions.\n\nFixes: 1308fb4e4eae14e6 (\"pinctrl: rzn1: Do not select GENERIC_PIN{CTRL_GROUPS,MUX_FUNCTIONS}\")\nSigned-off-by: Ralph Siemsen \u003cralph.siemsen@linaro.org\u003e\nReviewed-by: Miquel Raynal \u003cmiquel.raynal@bootlin.com\u003e\nReviewed-by: Geert Uytterhoeven \u003cgeert+renesas@glider.be\u003e\nLink: https://lore.kernel.org/r/20231004200008.1306798-1-ralph.siemsen@linaro.org\nSigned-off-by: Geert Uytterhoeven \u003cgeert+renesas@glider.be\u003e\nSigned-off-by: Linus Walleij \u003clinus.walleij@linaro.org\u003e\n"
    },
    {
      "commit": "cbc06310c36f73a5f3b0c6f0d974d60cf66d816b",
      "tree": "46917032ad609f8e12679a93c6920a8cff3e9605",
      "parents": [
        "f93b9300301d30f275f9bd7165cbb53d5094bd8d"
      ],
      "author": {
        "name": "Jeff Layton",
        "email": "jlayton@kernel.org",
        "time": "Fri Sep 29 14:43:18 2023 -0400"
      },
      "committer": {
        "name": "Chandan Babu R",
        "email": "chandanbabu@kernel.org",
        "time": "Thu Oct 12 10:17:03 2023 +0530"
      },
      "message": "xfs: reinstate the old i_version counter as STATX_CHANGE_COOKIE\n\nThe handling of STATX_CHANGE_COOKIE was moved into generic_fillattr in\ncommit 0d72b92883c6 (fs: pass the request_mask to generic_fillattr), but\nwe didn\u0027t account for the fact that xfs doesn\u0027t call generic_fillattr at\nall.\n\nMake XFS report its i_version as the STATX_CHANGE_COOKIE.\n\nFixes: 0d72b92883c6 (fs: pass the request_mask to generic_fillattr)\nSigned-off-by: Jeff Layton \u003cjlayton@kernel.org\u003e\nReviewed-by: \"Darrick J. Wong\" \u003cdjwong@kernel.org\u003e\nSigned-off-by: Chandan Babu R \u003cchandanbabu@kernel.org\u003e\n"
    },
    {
      "commit": "f93b9300301d30f275f9bd7165cbb53d5094bd8d",
      "tree": "b2249de5ca51a1b4e658eb9ec7fe13c15f71e345",
      "parents": [
        "3c90c01e49342b166e5c90ec2c85b220be15a20e"
      ],
      "author": {
        "name": "Jiapeng Chong",
        "email": "jiapeng.chong@linux.alibaba.com",
        "time": "Thu Aug 24 15:47:23 2023 +0800"
      },
      "committer": {
        "name": "Chandan Babu R",
        "email": "chandanbabu@kernel.org",
        "time": "Thu Oct 12 10:14:45 2023 +0530"
      },
      "message": "xfs: Remove duplicate include\n\n./fs/xfs/scrub/xfile.c: xfs_format.h is included more than once.\n\nReported-by: Abaci Robot \u003cabaci@linux.alibaba.com\u003e\nCloses: https://bugzilla.openanolis.cn/show_bug.cgi?id\u003d6209\nSigned-off-by: Jiapeng Chong \u003cjiapeng.chong@linux.alibaba.com\u003e\nReviewed-by: \"Darrick J. Wong\" \u003cdjwong@kernel.org\u003e\nSigned-off-by: Chandan Babu R \u003cchandanbabu@kernel.org\u003e\n"
    },
    {
      "commit": "3c90c01e49342b166e5c90ec2c85b220be15a20e",
      "tree": "d35d2871633a5938a3fb8810e51344d60ad16459",
      "parents": [
        "fa543e65abad671eb4c1ee56ec2c8932f40bdf6f"
      ],
      "author": {
        "name": "Shiyang Ruan",
        "email": "ruansy.fnst@fujitsu.com",
        "time": "Wed Sep 13 18:29:42 2023 +0800"
      },
      "committer": {
        "name": "Chandan Babu R",
        "email": "chandanbabu@kernel.org",
        "time": "Thu Oct 12 10:11:56 2023 +0530"
      },
      "message": "xfs: correct calculation for agend and blockcount\n\nThe agend should be \"start + length - 1\", then, blockcount should be\n\"end + 1 - start\".  Correct 2 calculation mistakes.\n\nAlso, rename \"agend\" to \"range_agend\" because it\u0027s not the end of the AG\nper se; it\u0027s the end of the dead region within an AG\u0027s agblock space.\n\nFixes: 5cf32f63b0f4 (\"xfs: fix the calculation for \"end\" and \"length\"\")\nSigned-off-by: Shiyang Ruan \u003cruansy.fnst@fujitsu.com\u003e\nReviewed-by: \"Darrick J. Wong\" \u003cdjwong@kernel.org\u003e\nSigned-off-by: Chandan Babu R \u003cchandanbabu@kernel.org\u003e\n"
    },
    {
      "commit": "fa543e65abad671eb4c1ee56ec2c8932f40bdf6f",
      "tree": "7693454ae51e8efef553a98f831f550250683185",
      "parents": [
        "94f6f0550c625fab1f373bb86a6669b45e9748b3",
        "442177be8c3b8edfc29e14837e59771181c590b3"
      ],
      "author": {
        "name": "Chandan Babu R",
        "email": "chandanbabu@kernel.org",
        "time": "Thu Oct 12 10:07:54 2023 +0530"
      },
      "committer": {
        "name": "Chandan Babu R",
        "email": "chandanbabu@kernel.org",
        "time": "Thu Oct 12 10:07:54 2023 +0530"
      },
      "message": "Merge tag \u0027random-fixes-6.6_2023-10-11\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/djwong/xfs-linux into xfs-6.6-fixesD\n\nxfs: random fixes for 6.6\n\nRollup of a couple of reviewed fixes.\n\nSigned-off-by: Darrick J. Wong \u003cdjwong@kernel.org\u003e\nSigned-off-by: Chandan Babu R \u003cchandanbabu@kernel.org\u003e\n\n* tag \u0027random-fixes-6.6_2023-10-11\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/djwong/xfs-linux:\n  xfs: process free extents to busy list in FIFO order\n  xfs: adjust the incore perag block_count when shrinking\n"
    },
    {
      "commit": "71c299c711d1f44f0bf04f1fea66baad565240f1",
      "tree": "700a909d805b731d7e107a8ee6b2a5e2ed25a9c4",
      "parents": [
        "8bcfc9ded21c1b8831636ea687db923feba0faf5"
      ],
      "author": {
        "name": "Jakub Kicinski",
        "email": "kuba@kernel.org",
        "time": "Tue Oct 10 10:36:51 2023 -0700"
      },
      "committer": {
        "name": "Jakub Kicinski",
        "email": "kuba@kernel.org",
        "time": "Wed Oct 11 17:24:46 2023 -0700"
      },
      "message": "net: tcp: fix crashes trying to free half-baked MTU probes\n\ntcp_stream_alloc_skb() initializes the skb to use tcp_tsorted_anchor\nwhich is a union with the destructor. We need to clean that\nTCP-iness up before freeing.\n\nFixes: 736013292e3c (\"tcp: let tcp_mtu_probe() build headless packets\")\nReviewed-by: Eric Dumazet \u003cedumazet@google.com\u003e\nLink: https://lore.kernel.org/r/20231010173651.3990234-1-kuba@kernel.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n"
    },
    {
      "commit": "8bcfc9ded21c1b8831636ea687db923feba0faf5",
      "tree": "71113be60b8365d274dfba900431629715c1ce30",
      "parents": [
        "a950a5921db450c74212327f69950ff03419483a",
        "f990874b1c98fe8e57ee9385669f501822979258"
      ],
      "author": {
        "name": "Jakub Kicinski",
        "email": "kuba@kernel.org",
        "time": "Wed Oct 11 17:22:15 2023 -0700"
      },
      "committer": {
        "name": "Jakub Kicinski",
        "email": "kuba@kernel.org",
        "time": "Wed Oct 11 17:22:15 2023 -0700"
      },
      "message": "Merge tag \u0027ieee802154-for-net-2023-10-10\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wpan/wpan\n\nStefan Schmidt says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\npull-request: ieee802154 for net 2023-10-10\n\nJust one small fix this time around.\n\nDinghao Liu fixed a potential use-after-free in the ca8210 driver probe\nfunction.\n\n* tag \u0027ieee802154-for-net-2023-10-10\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wpan/wpan:\n  ieee802154: ca8210: Fix a potential UAF in ca8210_probe\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://lore.kernel.org/r/20231010200943.82225-1-stefan@datenfreihafen.org\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n"
    },
    {
      "commit": "1364a3c391aedfeb32aa025303ead3d7c91cdf9d",
      "tree": "193e16c181d3bc316279b03f72c01b954ab31c3e",
      "parents": [
        "07a1141ff170ff5d4f9c4fbb0453727ab48096e5"
      ],
      "author": {
        "name": "Sarthak Kukreti",
        "email": "sarthakkukreti@chromium.org",
        "time": "Wed Oct 11 13:12:30 2023 -0700"
      },
      "committer": {
        "name": "Jens Axboe",
        "email": "axboe@kernel.dk",
        "time": "Wed Oct 11 15:53:17 2023 -0600"
      },
      "message": "block: Don\u0027t invalidate pagecache for invalid falloc modes\n\nOnly call truncate_bdev_range() if the fallocate mode is supported. This\nfixes a bug where data in the pagecache could be invalidated if the\nfallocate() was called on the block device with an invalid mode.\n\nFixes: 25f4c41415e5 (\"block: implement (some of) fallocate for block devices\")\nCc: stable@vger.kernel.org\nReported-by: \"Darrick J. Wong\" \u003cdjwong@kernel.org\u003e\nSigned-off-by: Sarthak Kukreti \u003csarthakkukreti@chromium.org\u003e\nReviewed-by: Christoph Hellwig \u003chch@lst.de\u003e\nReviewed-by: \"Darrick J. Wong\" \u003cdjwong@kernel.org\u003e\nSigned-off-by: Mike Snitzer \u003csnitzer@kernel.org\u003e\nFixes: line?  I\u0027ve never seen those wrapped.\nLink: https://lore.kernel.org/r/20231011201230.750105-1-sarthakkukreti@chromium.org\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n"
    },
    {
      "commit": "401644852d0b2a278811de38081be23f74b5bb04",
      "tree": "6bee490c97a3d3920b327be15596f95f09c25ecc",
      "parents": [
        "759d1b653f3c7c2249b7fe5f6b218f87a5842822",
        "869b6ea1609f655a43251bf41757aa44e5350a8f"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Wed Oct 11 14:21:15 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Wed Oct 11 14:21:15 2023 -0700"
      },
      "message": "Merge tag \u0027fs_for_v6.6-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs\n\nPull quota regression fix from Jan Kara.\n\n* tag \u0027fs_for_v6.6-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs:\n  quota: Fix slow quotaoff\n"
    },
    {
      "commit": "759d1b653f3c7c2249b7fe5f6b218f87a5842822",
      "tree": "1a1c4e39834a20b4fae41227bbbc7690cc7aaec2",
      "parents": [
        "8182d7a3f1b8982c0136dca82a846ea375a4d6e9",
        "75f5f60bf7ee075ed4a29637ce390898b4c36811"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Wed Oct 11 13:58:32 2023 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Wed Oct 11 13:58:32 2023 -0700"
      },
      "message": "Merge tag \u0027for-6.6-rc5-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux\n\nPull btrfs fixes from David Sterba:\n \"A revert of recent mount option parsing fix, this breaks mounts with\n  security options.\n\n  The second patch is a flexible array annotation\"\n\n* tag \u0027for-6.6-rc5-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux:\n  btrfs: add __counted_by for struct btrfs_delayed_item and use struct_size()\n  Revert \"btrfs: reject unknown mount options early\"\n"
    }
  ],
  "next": "8182d7a3f1b8982c0136dca82a846ea375a4d6e9"
}
