)]}' { "log": [ { "commit": "9fc110a4026423b71b166d9a45e3719f11963de8", "tree": "3a9a542de6bbe0cdf9705bc1f22878261cd18d32", "parents": [ "d8276b769af45a52e1a842b62b5146737172b8ff" ], "author": { "name": "Bob Copeland", "email": "me@bobcopeland.com", "time": "Mon Jul 07 08:54:16 2025 -0400" }, "committer": { "name": "Bob Copeland", "email": "me@bobcopeland.com", "time": "Mon Jul 07 08:54:16 2025 -0400" }, "message": "Add localversion to identify builds from this tree\n\nSigned-off-by: Bob Copeland \u003cme@bobcopeland.com\u003e\n" }, { "commit": "d8276b769af45a52e1a842b62b5146737172b8ff", "tree": "e956d7e2ebd0860dcc6410a4f6590ac93511e8f9", "parents": [ "b037637f4507843c99488f0f85d6e117e4f83156", "6b9fd8857b9fc4dd62e7cd300327f0e48dd76642" ], "author": { "name": "Bob Copeland", "email": "me@bobcopeland.com", "time": "Mon Jul 07 08:54:14 2025 -0400" }, "committer": { "name": "Bob Copeland", "email": "me@bobcopeland.com", "time": "Mon Jul 07 08:54:14 2025 -0400" }, "message": "Merge remote-tracking branch \u0027wireless-next/main\u0027\n" }, { "commit": "b037637f4507843c99488f0f85d6e117e4f83156", "tree": "05f79aeb9fcec508443684c557c65c4449a6865b", "parents": [ "d7b8f8e20813f0179d8ef519541a3527e7661d3a", "737bb912ebbe4571195c56eba557c4d7315b26fb" ], "author": { "name": "Bob Copeland", "email": "me@bobcopeland.com", "time": "Mon Jul 07 08:54:14 2025 -0400" }, "committer": { "name": "Bob Copeland", "email": "me@bobcopeland.com", "time": "Mon Jul 07 08:54:14 2025 -0400" }, "message": "Merge remote-tracking branch \u0027wireless/main\u0027\n" }, { "commit": "737bb912ebbe4571195c56eba557c4d7315b26fb", "tree": "1224ddf9cb1545cb072df258832ab3ee5e2c38df", "parents": [ "2ce6ad9262256dd345cb104ba0ac6cf4aeed25a3" ], "author": { "name": "Mathy Vanhoef", "email": "Mathy.Vanhoef@kuleuven.be", "time": "Mon Jun 16 02:46:35 2025 +0200" }, "committer": { "name": "Johannes Berg", "email": "johannes.berg@intel.com", "time": "Mon Jul 07 10:54:13 2025 +0200" }, "message": "wifi: prevent A-MSDU attacks in mesh networks\n\nThis patch is a mitigation to prevent the A-MSDU spoofing vulnerability\nfor mesh networks. The initial update to the IEEE 802.11 standard, in\nresponse to the FragAttacks, missed this case (CVE-2025-27558). It can\nbe considered a variant of CVE-2020-24588 but for mesh networks.\n\nThis patch tries to detect if a standard MSDU was turned into an A-MSDU\nby an adversary. This is done by parsing a received A-MSDU as a standard\nMSDU, calculating the length of the Mesh Control header, and seeing if\nthe 6 bytes after this header equal the start of an rfc1042 header. If\nequal, this is a strong indication of an ongoing attack attempt.\n\nThis defense was tested with mac80211_hwsim against a mesh network that\nuses an empty Mesh Address Extension field, i.e., when four addresses\nare used, and when using a 12-byte Mesh Address Extension field, i.e.,\nwhen six addresses are used. Functionality of normal MSDUs and A-MSDUs\nwas also tested, and confirmed working, when using both an empty and\n12-byte Mesh Address Extension field.\n\nIt was also tested with mac80211_hwsim that A-MSDU attacks in non-mesh\nnetworks keep being detected and prevented.\n\nNote that the vulnerability being patched, and the defense being\nimplemented, was also discussed in the following paper and in the\nfollowing IEEE 802.11 presentation:\n\nhttps://papers.mathyvanhoef.com/wisec2025.pdf\nhttps://mentor.ieee.org/802.11/dcn/25/11-25-0949-00-000m-a-msdu-mesh-spoof-protection.docx\n\nCc: stable@vger.kernel.org\nSigned-off-by: Mathy Vanhoef \u003cMathy.Vanhoef@kuleuven.be\u003e\nLink: https://patch.msgid.link/20250616004635.224344-1-Mathy.Vanhoef@kuleuven.be\nSigned-off-by: Johannes Berg \u003cjohannes.berg@intel.com\u003e\n" }, { "commit": "2ce6ad9262256dd345cb104ba0ac6cf4aeed25a3", "tree": "181dd31bb50f07ec2a65fab40d7e5f0ba3f7161d", "parents": [ "58fcb1b4287ce38850402bb2bb16d09bf77b91d9" ], "author": { "name": "Felix Fietkau", "email": "nbd@nbd.name", "time": "Sun Jul 06 11:20:53 2025 +0200" }, "committer": { "name": "Johannes Berg", "email": "johannes.berg@intel.com", "time": "Mon Jul 07 10:45:43 2025 +0200" }, "message": "wifi: rt2x00: fix remove callback type mismatch\n\nThe function is used as remove callback for a platform driver.\nIt was missed during the conversion from int to void\n\nFixes: 0edb555a65d1 (\"platform: Make platform_driver::remove() return void\")\nSigned-off-by: Felix Fietkau \u003cnbd@nbd.name\u003e\nLink: https://patch.msgid.link/20250706092053.97724-1-nbd@nbd.name\nSigned-off-by: Johannes Berg \u003cjohannes.berg@intel.com\u003e\n" }, { "commit": "58fcb1b4287ce38850402bb2bb16d09bf77b91d9", "tree": "61d4873e2f8086490ce03520f8296d377cbb8e1b", "parents": [ "3b602ddc0df723992721b0d286c90c9bdd755b34" ], "author": { "name": "Moon Hee Lee", "email": "moonhee.lee.ca@gmail.com", "time": "Thu Jul 03 12:37:57 2025 -0700" }, "committer": { "name": "Johannes Berg", "email": "johannes.berg@intel.com", "time": "Mon Jul 07 10:45:21 2025 +0200" }, "message": "wifi: mac80211: reject VHT opmode for unsupported channel widths\n\nVHT operating mode notifications are not defined for channel widths\nbelow 20 MHz. In particular, 5 MHz and 10 MHz are not valid under the\nVHT specification and must be rejected.\n\nWithout this check, malformed notifications using these widths may\nreach ieee80211_chan_width_to_rx_bw(), leading to a WARN_ON due to\ninvalid input. This issue was reported by syzbot.\n\nReject these unsupported widths early in sta_link_apply_parameters()\nwhen opmode_notif is used. The accepted set includes 20, 40, 80, 160,\nand 80+80 MHz, which are valid for VHT. While 320 MHz is not defined\nfor VHT, it is allowed to avoid rejecting HE or EHT clients that may\nstill send a VHT opmode notification.\n\nReported-by: syzbot+ededba317ddeca8b3f08@syzkaller.appspotmail.com\nCloses: https://syzkaller.appspot.com/bug?extid\u003dededba317ddeca8b3f08\nFixes: 751e7489c1d7 (\"wifi: mac80211: expose ieee80211_chan_width_to_rx_bw() to drivers\")\nTested-by: syzbot+ededba317ddeca8b3f08@syzkaller.appspotmail.com\nSigned-off-by: Moon Hee Lee \u003cmoonhee.lee.ca@gmail.com\u003e\nLink: https://patch.msgid.link/20250703193756.46622-2-moonhee.lee.ca@gmail.com\nSigned-off-by: Johannes Berg \u003cjohannes.berg@intel.com\u003e\n" }, { "commit": "3b602ddc0df723992721b0d286c90c9bdd755b34", "tree": "61c5d7796687b462babe0e6dbc89309ee35a1289", "parents": [ "e1e6ebf490e55fee1ae573aa443c1d4aea5e4a40" ], "author": { "name": "Vitor Soares", "email": "vitor.soares@toradex.com", "time": "Tue Jul 01 15:26:43 2025 +0100" }, "committer": { "name": "Johannes Berg", "email": "johannes.berg@intel.com", "time": "Mon Jul 07 10:44:40 2025 +0200" }, "message": "wifi: mwifiex: discard erroneous disassoc frames on STA interface\n\nWhen operating in concurrent STA/AP mode with host MLME enabled,\nthe firmware incorrectly sends disassociation frames to the STA\ninterface when clients disconnect from the AP interface.\nThis causes kernel warnings as the STA interface processes\ndisconnect events that don\u0027t apply to it:\n\n[ 1303.240540] WARNING: CPU: 0 PID: 513 at net/wireless/mlme.c:141 cfg80211_process_disassoc+0x78/0xec [cfg80211]\n[ 1303.250861] Modules linked in: 8021q garp stp mrp llc rfcomm bnep btnxpuart nls_iso8859_1 nls_cp437 onboard_us\n[ 1303.327651] CPU: 0 UID: 0 PID: 513 Comm: kworker/u9:2 Not tainted 6.16.0-rc1+ #3 PREEMPT\n[ 1303.335937] Hardware name: Toradex Verdin AM62 WB on Verdin Development Board (DT)\n[ 1303.343588] Workqueue: MWIFIEX_RX_WORK_QUEUE mwifiex_rx_work_queue [mwifiex]\n[ 1303.350856] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE\u003d--)\n[ 1303.357904] pc : cfg80211_process_disassoc+0x78/0xec [cfg80211]\n[ 1303.364065] lr : cfg80211_process_disassoc+0x70/0xec [cfg80211]\n[ 1303.370221] sp : ffff800083053be0\n[ 1303.373590] x29: ffff800083053be0 x28: 0000000000000000 x27: 0000000000000000\n[ 1303.380855] x26: 0000000000000000 x25: 00000000ffffffff x24: ffff000002c5b8ae\n[ 1303.388120] x23: ffff000002c5b884 x22: 0000000000000001 x21: 0000000000000008\n[ 1303.395382] x20: ffff000002c5b8ae x19: ffff0000064dd408 x18: 0000000000000006\n[ 1303.402646] x17: 3a36333a61623a30 x16: 32206d6f72662063 x15: ffff800080bfe048\n[ 1303.409910] x14: ffff000003625300 x13: 0000000000000001 x12: 0000000000000000\n[ 1303.417173] x11: 0000000000000002 x10: ffff000003958600 x9 : ffff000003625300\n[ 1303.424434] x8 : ffff00003fd9ef40 x7 : ffff0000039fc280 x6 : 0000000000000002\n[ 1303.431695] x5 : ffff0000038976d4 x4 : 0000000000000000 x3 : 0000000000003186\n[ 1303.438956] x2 : 000000004836ba20 x1 : 0000000000006986 x0 : 00000000d00479de\n[ 1303.446221] Call trace:\n[ 1303.448722] cfg80211_process_disassoc+0x78/0xec [cfg80211] (P)\n[ 1303.454894] cfg80211_rx_mlme_mgmt+0x64/0xf8 [cfg80211]\n[ 1303.460362] mwifiex_process_mgmt_packet+0x1ec/0x460 [mwifiex]\n[ 1303.466380] mwifiex_process_sta_rx_packet+0x1bc/0x2a0 [mwifiex]\n[ 1303.472573] mwifiex_handle_rx_packet+0xb4/0x13c [mwifiex]\n[ 1303.478243] mwifiex_rx_work_queue+0x158/0x198 [mwifiex]\n[ 1303.483734] process_one_work+0x14c/0x28c\n[ 1303.487845] worker_thread+0x2cc/0x3d4\n[ 1303.491680] kthread+0x12c/0x208\n[ 1303.495014] ret_from_fork+0x10/0x20\n\nAdd validation in the STA receive path to verify that disassoc/deauth\nframes originate from the connected AP. Frames that fail this check\nare discarded early, preventing them from reaching the MLME layer and\ntriggering WARN_ON().\n\nThis filtering logic is similar with that used in the\nieee80211_rx_mgmt_disassoc() function in mac80211, which drops\ndisassoc frames that don\u0027t match the current BSSID\n(!ether_addr_equal(mgmt-\u003ebssid, sdata-\u003evif.cfg.ap_addr)), ensuring\nonly relevant frames are processed.\n\nTested on:\n- 8997 with FW 16.68.1.p197\n\nFixes: 36995892c271 (\"wifi: mwifiex: add host mlme for client mode\")\nCc: stable@vger.kernel.org\nSigned-off-by: Vitor Soares \u003cvitor.soares@toradex.com\u003e\nReviewed-by: Jeff Chen \u003cjeff.chen_1@nxp.con\u003e\nReviewed-by: Francesco Dolcini \u003cfrancesco.dolcini@toradex.com\u003e\nLink: https://patch.msgid.link/20250701142643.658990-1-ivitro@gmail.com\nSigned-off-by: Johannes Berg \u003cjohannes.berg@intel.com\u003e\n" }, { "commit": "e1e6ebf490e55fee1ae573aa443c1d4aea5e4a40", "tree": "c0ecd3ea0be4deb50e53bd78c9a80e113ed6801e", "parents": [ "8af596e8ae44c3bcf36d1aea09fc9a6f17c555e5" ], "author": { "name": "Johannes Berg", "email": "johannes.berg@intel.com", "time": "Mon Jun 30 15:45:01 2025 +0200" }, "committer": { "name": "Johannes Berg", "email": "johannes.berg@intel.com", "time": "Mon Jul 07 10:42:48 2025 +0200" }, "message": "wifi: mac80211: fix non-transmitted BSSID profile search\n\nWhen the non-transmitted BSSID profile is found, immediately return\nfrom the search to not return the wrong profile_len when the profile\nis found in a multiple BSSID element that isn\u0027t the last one in the\nframe.\n\nFixes: 5023b14cf4df (\"mac80211: support profile split between elements\")\nReported-by: Michael-CY Lee \u003cmichael-cy.lee@mediatek.com\u003e\nLink: https://patch.msgid.link/20250630154501.f26cd45a0ecd.I28e0525d06e8a99e555707301bca29265cf20dc8@changeid\nSigned-off-by: Johannes Berg \u003cjohannes.berg@intel.com\u003e\n" }, { "commit": "8af596e8ae44c3bcf36d1aea09fc9a6f17c555e5", "tree": "f1be66283f7b729eae2d95c16be45d5c836acd83", "parents": [ "c5fd399a24c8e2865524361f7dc4d4a6899be4f4" ], "author": { "name": "Johannes Berg", "email": "johannes.berg@intel.com", "time": "Tue Jul 01 09:22:13 2025 +0200" }, "committer": { "name": "Johannes Berg", "email": "johannes.berg@intel.com", "time": "Mon Jul 07 10:42:36 2025 +0200" }, "message": "wifi: mac80211: clear frame buffer to never leak stack\n\nIn disconnect paths paths, local frame buffers are used\nto build deauthentication frames to send them over the\nair and as notifications to userspace. Some internal\nerror paths (that, given no other bugs, cannot happen)\ndon\u0027t always initialize the buffers before sending them\nto userspace, so in the presence of other bugs they can\nleak stack content. Initialize the buffers to avoid the\npossibility of this happening.\n\nSuggested-by: Zhongqiu Han \u003cquic_zhonhan@quicinc.com\u003e\nLink: https://patch.msgid.link/20250701072213.13004-2-johannes@sipsolutions.net\nSigned-off-by: Johannes Berg \u003cjohannes.berg@intel.com\u003e\n" }, { "commit": "c5fd399a24c8e2865524361f7dc4d4a6899be4f4", "tree": "91e9cda82fba3e64f5fe5a563fbb563188d95c95", "parents": [ "74b1ec9f5d627d2bdd5e5b6f3f81c23317657023" ], "author": { "name": "Lachlan Hodges", "email": "lachlan.hodges@morsemicro.com", "time": "Tue Jul 01 17:55:41 2025 +1000" }, "committer": { "name": "Johannes Berg", "email": "johannes.berg@intel.com", "time": "Mon Jul 07 10:42:15 2025 +0200" }, "message": "wifi: mac80211: correctly identify S1G short beacon\n\nmac80211 identifies a short beacon by the presence of the next\nTBTT field, however the standard actually doesn\u0027t explicitly state that\nthe next TBTT can\u0027t be in a long beacon or even that it is required in\na short beacon - and as a result this validation does not work for all\nvendor implementations.\n\nThe standard explicitly states that an S1G long beacon shall contain\nthe S1G beacon compatibility element as the first element in a beacon\ntransmitted at a TBTT that is not a TSBTT (Target Short Beacon\nTransmission Time) as per IEEE80211-2024 11.1.3.10.1. This is validated\nby 9.3.4.3 Table 9-76 which states that the S1G beacon compatibility\nelement is only allowed in the full set and is not allowed in the\nminimum set of elements permitted for use within short beacons.\n\nCorrectly identify short beacons by the lack of an S1G beacon\ncompatibility element as the first element in an S1G beacon frame.\n\nFixes: 9eaffe5078ca (\"cfg80211: convert S1G beacon to scan results\")\nSigned-off-by: Simon Wadsworth \u003csimon@morsemicro.com\u003e\nSigned-off-by: Lachlan Hodges \u003clachlan.hodges@morsemicro.com\u003e\nLink: https://patch.msgid.link/20250701075541.162619-1-lachlan.hodges@morsemicro.com\nSigned-off-by: Johannes Berg \u003cjohannes.berg@intel.com\u003e\n" }, { "commit": "d7b8f8e20813f0179d8ef519541a3527e7661d3a", "tree": "86d117d9b1fc08a61ce579f658cd8a116e8c8555", "parents": [ "bab5cac627b36a96ffc344274953558906418495" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jul 06 14:10:26 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jul 06 14:10:26 2025 -0700" }, "message": "Linux 6.16-rc5\n" }, { "commit": "bab5cac627b36a96ffc344274953558906418495", "tree": "d6bb899a390b58083d0f703b3f5040d36e257c23", "parents": [ "772b78c2abd85586bb90b23adff89f7303c704c7", "b969f9614885c20f903e1d1f9445611daf161d6d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jul 06 13:10:39 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jul 06 13:10:39 2025 -0700" }, "message": "Merge tag \u0027pull-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs\n\nPull /proc/sys dcache lookup fix from Al Viro:\n \"Fix for the breakage spotted by Neil in the interplay between\n /proc/sys -\u003ed_compare() weirdness and parallel lookups\"\n\n* tag \u0027pull-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs:\n fix proc_sys_compare() handling of in-lookup dentries\n" }, { "commit": "772b78c2abd85586bb90b23adff89f7303c704c7", "tree": "f18df282d7751b06f315a6b107b7d7384ec9aa17", "parents": [ "95eb0d389b4a518a2630b18fbc5916a008f519f1", "fc975cfb36393db1db517fbbe366e550bcdcff14" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jul 06 11:17:47 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jul 06 11:17:47 2025 -0700" }, "message": "Merge tag \u0027sched_urgent_for_v6.16_rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull scheduler fixes from Borislav Petkov:\n\n - Fix the calculation of the deadline server task\u0027s runtime as this\n mishap was preventing realtime tasks from running\n\n - Avoid a race condition during migrate-swapping two tasks\n\n - Fix the string reported for the \"none\" dynamic preemption option\n\n* tag \u0027sched_urgent_for_v6.16_rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n sched/deadline: Fix dl_server runtime calculation formula\n sched/core: Fix migrate_swap() vs. hotplug\n sched: Fix preemption string of preempt_dynamic_none\n" }, { "commit": "95eb0d389b4a518a2630b18fbc5916a008f519f1", "tree": "d56ef6b691837e8959549c439c3a4c0164f0b9ad", "parents": [ "a1639ce5e590300af45bebedfbacf8fabc1777ed", "ccdd09e0fc0d5ce6dfc8360f0c88da9a5045b6ea" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jul 06 10:55:59 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jul 06 10:55:59 2025 -0700" }, "message": "Merge tag \u0027objtool_urgent_for_v6.16_rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull objtool fix from Borislav Petkov:\n\n - Fix the compilation of an x86 kernel on a big engian machine due to a\n missed endianness conversion\n\n* tag \u0027objtool_urgent_for_v6.16_rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n objtool: Add missing endian conversion to read_annotate()\n" }, { "commit": "a1639ce5e590300af45bebedfbacf8fabc1777ed", "tree": "04fe47564032af8d5e7486bbee3d7ac2ad37761b", "parents": [ "5fc2e891a5badbcb585850995c609be78bd73006", "ba677dbe77af5ffe6204e0f3f547f3ba059c6302" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jul 06 10:49:27 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jul 06 10:49:27 2025 -0700" }, "message": "Merge tag \u0027perf_urgent_for_v6.16_rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull perf fixes from Borislav Petkov:\n\n - Revert uprobes to using CAP_SYS_ADMIN again as currently they can\n destructively modify kernel code from an unprivileged process\n\n - Move a warning to where it belongs\n\n* tag \u0027perf_urgent_for_v6.16_rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n perf: Revert to requiring CAP_SYS_ADMIN for uprobes\n perf/core: Fix the WARN_ON_ONCE is out of lock protected region\n" }, { "commit": "5fc2e891a5badbcb585850995c609be78bd73006", "tree": "0a8ee3d9d12529bddeb00e1d9debb38736b826e2", "parents": [ "463b1b2af83866e6369e7764fb65f1d57449fb5b", "52e1a03e6cf61ae165f59f41c44394a653a0a788" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jul 06 10:44:20 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jul 06 10:44:20 2025 -0700" }, "message": "Merge tag \u0027x86_urgent_for_v6.16_rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull x86 fix from Borislav Petkov:\n\n - Make sure AMD SEV guests using secure TSC, include a TSC_FACTOR which\n prevents their TSCs from going skewed from the hypervisor\u0027s\n\n* tag \u0027x86_urgent_for_v6.16_rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n x86/sev: Use TSC_FACTOR for Secure TSC frequency calculation\n" }, { "commit": "463b1b2af83866e6369e7764fb65f1d57449fb5b", "tree": "82b8c939c3200f335158386b962a8de3c60b6429", "parents": [ "c92bda4cb96970b78037d52cfae43844044744b1", "46b0a67e8f22d2dbc679b37b26c5ff0f50424847" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jul 06 10:38:04 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jul 06 10:38:04 2025 -0700" }, "message": "Merge tag \u0027locking_urgent_for_v6.16_rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull locking fixes from Borislav Petkov:\n\n - Disable FUTEX_PRIVATE_HASH for this cycle due to a performance\n regression\n\n - Add a selftests compilation product to the corresponding .gitignore\n file\n\n* tag \u0027locking_urgent_for_v6.16_rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n selftests/futex: Add futex_numa to .gitignore\n futex: Temporary disable FUTEX_PRIVATE_HASH\n" }, { "commit": "c92bda4cb96970b78037d52cfae43844044744b1", "tree": "5b4a05cfea9b899a96e0c368a903fb70f168bced", "parents": [ "bdde3141ceb992f494e9a949c89f99983a1d6604", "1e14ea901dc8d976d355ddc3e0de84ee86ef0596" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jul 06 09:29:24 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jul 06 09:29:24 2025 -0700" }, "message": "Merge tag \u0027edac_urgent_for_v6.16_rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ras/ras\n\nPull EDAC fix from Borislav Petkov:\n\n - Initialize sysfs attributes properly to avoid lockdep complaining\n about an uninitialized lock class\n\n* tag \u0027edac_urgent_for_v6.16_rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ras/ras:\n EDAC: Initialize EDAC features sysfs attributes\n" }, { "commit": "bdde3141ceb992f494e9a949c89f99983a1d6604", "tree": "afa7b7a97df496da5edb67dc29112c978eba6371", "parents": [ "45a3f1254638523869fc2ba067713f4d467e5145", "30ad231a5029bfa16e46ce868497b1a5cdd3c24d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jul 06 09:17:48 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jul 06 09:17:48 2025 -0700" }, "message": "Merge tag \u0027ras_urgent_for_v6.16_rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull RAS fixes from Borislav Petkov:\n\n - Do not remove the MCE sysfs hierarchy if thresholding sysfs nodes\n init fails due to new/unknown banks present, which in itself is not\n fatal anyway; add default names for new banks\n\n - Make sure MCE polling settings are honored after CMCI storms\n\n - Make sure MCE threshold limit is reset after the thresholding\n interrupt has been serviced\n\n - Clean up properly and disable CMCI banks on shutdown so that a\n second/kexec-ed kernel can rediscover those banks again\n\n* tag \u0027ras_urgent_for_v6.16_rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n x86/mce: Make sure CMCI banks are cleared during shutdown on Intel\n x86/mce/amd: Fix threshold limit reset\n x86/mce/amd: Add default names for MCA banks and blocks\n x86/mce: Ensure user polling settings are honored when restarting timer\n x86/mce: Don\u0027t remove sysfs if thresholding sysfs init fails\n" }, { "commit": "45a3f1254638523869fc2ba067713f4d467e5145", "tree": "0adb45258a196e21f736eabba6022b9a07852477", "parents": [ "1f988d0788f50d8464f957e793fab356e2937369", "eb2c93e7028b4c9fe4761734d65ee40712d1c242" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jul 06 09:16:31 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jul 06 09:16:31 2025 -0700" }, "message": "Merge tag \u0027irq_urgent_for_v6.16_rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull irq fix from Borislav Petkov:\n\n - Have irq-msi-lib select CONFIG_GENERIC_MSI_IRQ explicitly as it uses\n its facilities\n\n* tag \u0027irq_urgent_for_v6.16_rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n irqchip/irq-msi-lib: Select CONFIG_GENERIC_MSI_IRQ\n" }, { "commit": "46b0a67e8f22d2dbc679b37b26c5ff0f50424847", "tree": "6c97ee0a6bd4c6e627e6108db85cf11964d3261e", "parents": [ "9a57c3773152a3ff2c35cc8325e088d011c9f83b" ], "author": { "name": "Terry Tritton", "email": "terry.tritton@linaro.org", "time": "Fri Jul 04 11:37:49 2025 +0100" }, "committer": { "name": "Thomas Gleixner", "email": "tglx@linutronix.de", "time": "Sun Jul 06 09:39:01 2025 +0200" }, "message": "selftests/futex: Add futex_numa to .gitignore\n\nfutex_numa was never added to the .gitignore file.\nAdd it.\n\nFixes: 9140f57c1c13 (\"futex,selftests: Add another FUTEX2_NUMA selftest\")\nSigned-off-by: Terry Tritton \u003cterry.tritton@linaro.org\u003e\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nReviewed-by: André Almeida \u003candrealmeid@igalia.com\u003e\nLink: https://lore.kernel.org/all/20250704103749.10341-1-terry.tritton@linaro.org\n\n" }, { "commit": "1f988d0788f50d8464f957e793fab356e2937369", "tree": "cdec49df637f8be5514e4a10fbbceb2953124d08", "parents": [ "05df91921da664ebba2752a7e45b63e3dddb85de", "38224c472a038fa9ccd4085511dd9f3d6119dbf9" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jul 05 16:14:03 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jul 05 16:14:03 2025 -0700" }, "message": "Merge tag \u0027hid-for-linus-2025070502\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid\n\nPull HID fixes from Jiri Kosina:\n\n - Memory corruption fixes in hid-appletb-kbd driver (Qasim Ijaz)\n\n - New device ID in hid-elecom driver (Leonard Dizon)\n\n - Fixed several HID debugfs contants (Vicki Pfau)\n\n* tag \u0027hid-for-linus-2025070502\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid:\n HID: appletb-kbd: fix slab use-after-free bug in appletb_kbd_probe\n HID: Fix debug name for BTN_GEAR_DOWN, BTN_GEAR_UP, BTN_WHEEL\n HID: elecom: add support for ELECOM HUGE 019B variant\n HID: appletb-kbd: fix memory corruption of input_handler_list\n" }, { "commit": "05df91921da664ebba2752a7e45b63e3dddb85de", "tree": "0150881311b28afb1e5a02f10b8a5299137f39e5", "parents": [ "fd860cd78146605eeeeee3ac264ca166cc9fa943", "3363da82e02f1bddc54faa92ea430c6532e2cd2e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jul 05 13:05:28 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jul 05 13:05:28 2025 -0700" }, "message": "Merge tag \u0027v6.16-rc4-smb3-client-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6\n\nPull smb client fixes from Steve French:\n\n - Two reconnect fixes including one for a reboot/reconnect race\n\n - Fix for incorrect file type that can be returned by SMB3.1.1 POSIX\n extensions\n\n - tcon initialization fix\n\n - Fix for resolving Windows symlinks with absolute paths\n\n* tag \u0027v6.16-rc4-smb3-client-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6:\n smb: client: fix native SMB symlink traversal\n smb: client: fix race condition in negotiate timeout by using more precise timing\n cifs: all initializations for tcon should happen in tcon_info_alloc\n smb: client: fix warning when reconnecting channel\n smb: client: fix readdir returning wrong type with POSIX extensions\n" }, { "commit": "fd860cd78146605eeeeee3ac264ca166cc9fa943", "tree": "d6674f65e339cab28f7dbbc093343e31399f3073", "parents": [ "a79a588fc1761dc12a3064fc2f648ae66cea3c5a", "534eb6de621954cde61c910dbeb8fb1700a0a0d6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jul 05 12:54:24 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jul 05 12:54:24 2025 -0700" }, "message": "Merge tag \u0027i2c-for-6.16-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux\n\nPull i2c fixes from Wolfram Sang:\n\n - designware: initialise msg_write_idx during transfer\n\n - microchip: check return value from core xfer call\n\n - realtek: add \u0027reg\u0027 property constraint to the device tree\n\n* tag \u0027i2c-for-6.16-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux:\n dt-bindings: i2c: realtek,rtl9301: Fix missing \u0027reg\u0027 constraint\n i2c: microchip-core: re-fix fake detections w/ i2cdetect\n i2c/designware: Fix an initialization issue\n" }, { "commit": "a79a588fc1761dc12a3064fc2f648ae66cea3c5a", "tree": "384113768ecd7ecd079cc403db5e7a3b0c132129", "parents": [ "49dcc4f601017c3fb5dec6754a90403a07d043a6", "250d0579da5db2052cce2891a5eaa87450851354" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 17:27:30 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 17:27:30 2025 -0700" }, "message": "Merge tag \u0027pm-6.16-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull power management fixes from Rafael Wysocki:\n \"These address system suspend failures under memory pressure in some\n configurations, fix up RAPL handling on platforms where PL1 cannot be\n disabled, and fix a documentation typo:\n\n - Prevent the Intel RAPL power capping driver from allowing PL1 to be\n exceeded by mistake on systems when PL1 cannot be disabled (Zhang\n Rui)\n\n - Fix a typo in the ABI documentation (Sumanth Gavini)\n\n - Allow swap to be used a bit longer during system suspend and\n hibernation to avoid suspend failures under memory pressure (Mario\n Limonciello)\"\n\n* tag \u0027pm-6.16-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n PM: sleep: docs: Replace \"diasble\" with \"disable\"\n powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be changed\n PM: Restrict swap use to later in the suspend sequence\n" }, { "commit": "49dcc4f601017c3fb5dec6754a90403a07d043a6", "tree": "73ddab5996f4582ea601f1388e0aafd8857244d3", "parents": [ "b1bf2ef6259e6aedc3f952ebd9bc056605563b74", "de1675de39aa945bad5937d1fde4df3682670639" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 17:25:41 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 17:25:41 2025 -0700" }, "message": "Merge tag \u0027acpi-6.16-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull ACPI fix from Rafael Wysocki:\n \"Revert a problematic ACPI battery driver change merged recently\"\n\n* tag \u0027acpi-6.16-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n Revert \"ACPI: battery: negate current when discharging\"\n" }, { "commit": "250d0579da5db2052cce2891a5eaa87450851354", "tree": "8d1cfac42ce405cc758079666442a3b3684f9e48", "parents": [ "964209202ebe1569c858337441e87ef0f9d71416", "3e7e5adcd2a86783c441edf6f518fc903e3c4e7c" ], "author": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Fri Jul 04 21:54:55 2025 +0200" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Fri Jul 04 21:54:55 2025 +0200" }, "message": "Merge branch \u0027pm-sleep\u0027\n\nMerge fixes related to system sleep for 6.16-rc5:\n\n - Fix typo in the ABI documentation (Sumanth Gavini).\n\n - Allow swap to be used a bit longer during system suspend and\n hibernation to avoid suspend failures under memory pressure (Mario\n Limonciello).\n\n* pm-sleep:\n PM: sleep: docs: Replace \"diasble\" with \"disable\"\n PM: Restrict swap use to later in the suspend sequence\n" }, { "commit": "b1bf2ef6259e6aedc3f952ebd9bc056605563b74", "tree": "f19523bb20278187a4f87a90067e935bd57c167d", "parents": [ "c435a4f487e8c6a3b23dafbda87d971d4fd14e0b", "3f3fb97374308993dbe8884f44c2579a81b90bfa" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 12:05:36 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 12:05:36 2025 -0700" }, "message": "Merge tag \u0027soc-fixes-6.16\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc\n\nPull SoC fixes from Arnd Bergmann:\n \"A couple of fixes for firmware drivers have come up, addressing kernel\n side bugs in op-tee and ff-a code, as well as compatibility issues\n with exynos-acpm and ff-a protocols.\n\n The only devicetree fixes are for the Apple platform, addressing\n issues with conformance to the bindings for the wlan, spi and mipi\n nodes\"\n\n* tag \u0027soc-fixes-6.16\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc:\n arm64: dts: apple: Move touchbar mipi {address,size}-cells from dtsi to dts\n arm64: dts: apple: Drop {address,size}-cells from SPI NOR\n arm64: dts: apple: t8103: Fix PCIe BCM4377 nodename\n optee: ffa: fix sleep in atomic context\n firmware: exynos-acpm: fix timeouts on xfers handling\n arm64: defconfig: update renamed PHY_SNPS_EUSB2\n firmware: arm_ffa: Fix the missing entry in struct ffa_indirect_msg_hdr\n firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic context\n firmware: arm_ffa: Move memory allocation outside the mutex locking\n firmware: arm_ffa: Fix memory leak by freeing notifier callback node\n" }, { "commit": "c435a4f487e8c6a3b23dafbda87d971d4fd14e0b", "tree": "44cbe6f7cb469816370b753d8a04d773f389f10a", "parents": [ "4b02ed4ab721f559e843251564a3ea6ae1769a83", "5903a7452e642f1475f274373633522db168b60b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 10:23:29 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 10:23:29 2025 -0700" }, "message": "Merge tag \u0027riscv-for-linus-6.16-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux\n\nPull RISC-V fixes from Palmer Dabbelt:\n\n - kCFI is restricted to clang-17 or newer, as earlier versions have\n known bugs\n\n - sbi_hsm_hart_start is now staticly allocated, to avoid tripping up\n the SBI HSM page mapping on sparse systems.\n\n* tag \u0027riscv-for-linus-6.16-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux:\n riscv: cpu_ops_sbi: Use static array for boot_data\n riscv: Require clang-17 or newer for kCFI\n" }, { "commit": "4b02ed4ab721f559e843251564a3ea6ae1769a83", "tree": "2f3cf4a24e11e7da4d7cdf54d440bd5bfd4ef082", "parents": [ "a1d8128f701682d34d9308c9e6b7385c0ffa4b4b", "c9764fd88bc744592b0604ccb6b6fc1a5f76b4e3" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 10:14:49 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 10:14:49 2025 -0700" }, "message": "Merge tag \u0027regulator-fix-v6.16-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator\n\nPull regulator fixes from Mark Brown:\n \"A few driver fixes (the GPIO one being potentially nasty, though it\n has been there for a while without anyone reporting it), and one core\n fix for the rarely used combination of coupled regulators and\n unbinding\"\n\n* tag \u0027regulator-fix-v6.16-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator:\n regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods\n regulator: mp886x: Fix ID table driver_data\n regulator: sy8824x: Fix ID table driver_data\n regulator: tps65219: Fix devm_kmalloc size allocation\n regulator: core: fix NULL dereference on unbind due to stale coupling data\n" }, { "commit": "a1d8128f701682d34d9308c9e6b7385c0ffa4b4b", "tree": "dffd00ec6bc88289bdcad079a62b55a5dc5274ac", "parents": [ "df46426745ac58618c822ce3f93d2bb25b9a5060", "04a8ff1bc3514808481ddebd454342ad902a3f60" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 10:10:49 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 10:10:49 2025 -0700" }, "message": "Merge tag \u0027spi-fix-v6.16-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi\n\nPull spi fixes from Mark Brown:\n \"As well as a few driver specific fixes we\u0027ve got a core change here\n which raises the hard coded limit on the number of devices we can\n support on one SPI bus since some FPGA based systems are running into\n the existing limit. This is not a good solution but it\u0027s one suitable\n for this point in the release cycle, we should dynamically size the\n relevant data structures which I hope will happen in the next couple\n of merge windows.\n\n We also pull in a MTD fix for the Qualcomm SNAND driver, the two fixes\n cover the same issue and merging them together minimises bisection\n issues\"\n\n* tag \u0027spi-fix-v6.16-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi:\n spi: cadence-quadspi: fix cleanup of rx_chan on failure paths\n spi: spi-fsl-dspi: Clear completion counter before initiating transfer\n spi: Raise limit on number of chip selects to 24\n mtd: nand: qpic_common: prevent out of bounds access of BAM arrays\n spi: spi-qpic-snand: reallocate BAM transactions\n" }, { "commit": "df46426745ac58618c822ce3f93d2bb25b9a5060", "tree": "27afd3556b9b98d4b16ca064734ebaccde06edc5", "parents": [ "3c2bd251d2039ce2778c35ced5ef47b3a379f5df", "4f30f946f27b7f044cf8f3f1f353dee1dcd3517a" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 10:05:31 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 10:05:31 2025 -0700" }, "message": "Merge tag \u0027platform-drivers-x86-v6.16-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/pdx86/platform-drivers-x86\n\nPull x86 platform drivers fixes from Ilpo Järvinen:\n \"Mostly a few lines fixed here and there except amd/isp4 which improves\n swnodes relationships but that is a new driver not in any stable\n kernels yet. The think-lmi driver changes also look relatively large\n but there are just many fixes to it.\n\n The i2c/piix4 change is a effectively a revert of the commit\n 7e173eb82ae9 (\"i2c: piix4: Make CONFIG_I2C_PIIX4 dependent on\n CONFIG_X86\") but that required moving the header out from arch/x86\n under include/linux/platform_data/\n\n Summary:\n\n - amd/isp4: Improve swnode graph (new driver exception)\n\n - asus-nb-wmi: Use duo keyboard quirk for Zenbook Duo UX8406CA\n\n - dell-lis3lv02d: Add Latitude 5500 accelerometer address\n\n - dell-wmi-sysman: Fix WMI data block retrieval and class dev unreg\n\n - hp-bioscfg: Fix class device unregistration\n\n - i2c: piix4: Re-enable on non-x86 + move FCH header under platform_data/\n\n - intel/hid: Wildcat Lake support\n\n - mellanox:\n - mlxbf-pmc: Fix duplicate event ID\n - mlxbf-tmfifo: Fix vring_desc.len assignment\n - mlxreg-lc: Fix bit-not-set logic check\n - nvsw-sn2201: Fix bus number in error message \u0026 spelling errors\n\n - portwell-ec: Move watchdog device under correct platform hierarchy\n\n - think-lmi: Error handling fixes (sysfs, kset, kobject, class dev unreg)\n\n - thinkpad_acpi: Handle HKEY 0x1402 event (2025 Thinkpads)\n\n - wmi: Fix WMI event enablement\"\n\n* tag \u0027platform-drivers-x86-v6.16-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/pdx86/platform-drivers-x86: (22 commits)\n platform/x86: think-lmi: Fix sysfs group cleanup\n platform/x86: think-lmi: Fix kobject cleanup\n platform/x86: think-lmi: Create ksets consecutively\n platform/mellanox: mlxreg-lc: Fix logic error in power state check\n i2c: Re-enable piix4 driver on non-x86\n Move FCH header to a location accessible by all archs\n platform/x86/intel/hid: Add Wildcat Lake support\n platform/x86: dell-wmi-sysman: Fix class device unregistration\n platform/x86: think-lmi: Fix class device unregistration\n platform/x86: hp-bioscfg: Fix class device unregistration\n platform/x86: Update swnode graph for amd isp4\n platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks\n platform/x86: wmi: Update documentation of WCxx/WExx ACPI methods\n platform/x86: wmi: Fix WMI event enablement\n platform/mellanox: nvsw-sn2201: Fix bus number in adapter error message\n platform/mellanox: Fix spelling and comment clarity in Mellanox drivers\n platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1\n platform/x86: thinkpad_acpi: handle HKEY 0x1402 event\n platform/x86: asus-nb-wmi: add DMI quirk for ASUS Zenbook Duo UX8406CA\n platform/x86: dell-lis3lv02d: Add Latitude 5500\n ...\n" }, { "commit": "3c2bd251d2039ce2778c35ced5ef47b3a379f5df", "tree": "c9e6412fd56c53d1650f814f48ccab5910f60038", "parents": [ "d46971e0b6f574059d167ddda1355ed301a0bae6", "9bd9c8026341f75f25c53104eb7e656e357ca1a2" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 09:57:12 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 09:57:12 2025 -0700" }, "message": "Merge tag \u0027usb-6.16-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb\n\nPull USB fixes from Greg KH:\n \"Here are some USB driver fixes for 6.16-rc5. I originally wanted this\n to get into -rc4, but there were some regressions that had to be\n handled first. Now all looks good. Included in here are the following\n fixes:\n\n - cdns3 driver fixes\n\n - xhci driver fixes\n\n - typec driver fixes\n\n - USB hub fixes (this is what took the longest to get right)\n\n - new USB driver quirks added\n\n - chipidea driver fixes\n\n All of these have been in linux-next for a while and now we have no\n more reported problems with them\"\n\n* tag \u0027usb-6.16-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb: (21 commits)\n usb: hub: Fix flushing of delayed work used for post resume purposes\n xhci: dbc: Flush queued requests before stopping dbc\n xhci: dbctty: disable ECHO flag by default\n xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS\n usb: xhci: quirk for data loss in ISOC transfers\n usb: dwc3: gadget: Fix TRB reclaim logic for short transfers and ZLPs\n usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm\n usb: typec: displayport: Fix potential deadlock\n usb: typec: altmodes/displayport: do not index invalid pin_assignments\n usb: cdnsp: Fix issue with CV Bad Descriptor test\n usb: typec: tcpm: apply vbus before data bringup in tcpm_src_attach\n Revert \"usb: xhci: Implement xhci_handshake_check_state() helper\"\n usb: xhci: Skip xhci_reset in xhci_resume if xhci is being removed\n usb: gadget: u_serial: Fix race condition in TTY wakeup\n Revert \"usb: gadget: u_serial: Add null pointer check in gs_start_io\"\n usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume\n usb: acpi: fix device link removal\n usb: hub: fix detection of high tier USB3 devices behind suspended hubs\n Logitech C-270 even more broken\n usb: dwc3: Abort suspend on soft disconnect failure\n ...\n" }, { "commit": "d46971e0b6f574059d167ddda1355ed301a0bae6", "tree": "41a3980e1db4bb689c6d8c4dce0d6d3755995d6f", "parents": [ "42bb9b630c4c6c0964cddca98d9d30aa992826de", "4cf65845fdd09d711fc7546d60c9abe010956922" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 09:54:15 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 09:54:15 2025 -0700" }, "message": "Merge tag \u0027input-for-v6.16-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input\n\nPull input updates from Dmitry Torokhov:\n\n - support for Acer NGR 200 Controller added to xpad driver\n\n - xpad driver will no longer log errors about URBs at sudden disconnect\n\n - a fix for potential NULL dereference in cs40l50-vibra driver\n\n - several drivers have been switched to using scnprintf() to suppress\n warnings about potential output truncation\n\n* tag \u0027input-for-v6.16-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input:\n Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt()\n Input: alps - use scnprintf() to suppress truncation warning\n Input: iqs7222 - explicitly define number of external channels\n Input: xpad - support Acer NGR 200 Controller\n Input: xpad - return errors from xpad_try_sending_next_out_packet() up\n Input: xpad - adjust error handling for disconnect\n Input: apple_z2 - drop default ARCH_APPLE in Kconfig\n Input: Fully open-code compatible for grepping\n dt-bindings: HID: i2c-hid: elan: Introduce Elan eKTH8D18\n Input: psmouse - switch to use scnprintf() to suppress truncation warning\n Input: lifebook - switch to use scnprintf() to suppress truncation warning\n Input: alps - switch to use scnprintf() to suppress truncation warning\n Input: atkbd - switch to use scnprintf() to suppress truncation warning\n Input: fsia6b - suppress buffer truncation warning for phys\n Input: iqs626a - replace snprintf() with scnprintf()\n" }, { "commit": "42bb9b630c4c6c0964cddca98d9d30aa992826de", "tree": "21c83692d187d2b83ceba6b717444d39d5e21a25", "parents": [ "923d401238c590f39833a2015f6f9493f146d98f", "da8d8e9001c6a3741e9bec26a6cdcfd75ecabc88" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 09:48:36 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 09:48:36 2025 -0700" }, "message": "Merge tag \u0027drm-fixes-2025-07-04\u0027 of https://gitlab.freedesktop.org/drm/kernel\n\nPull drm fixes from Dave Airlie:\n \"Weekly drm fixes, bit of a bumper crop, the usual amdgpu/xe/i915\n suspects, then there is a large scattering of fixes across core and\n drivers. I think the simple panel lookup fix is probably the largest,\n the sched race fix is also fun, but I don\u0027t see anything standing out\n too badly.\n\n dma-buf:\n - fix timeout handling\n\n gem:\n - fix framebuffer object references\n\n sched:\n - fix spsc queue job count race\n\n bridge:\n - fix aux hpd bridge of node\n - panel: move missing flag handling\n - samsung-dsim: fix %pK usage to %p\n\n panel:\n - fix problem with simple panel lookup\n\n ttm:\n - fix error path handling\n\n amdgpu:\n - SDMA 5.x reset fix\n - Add missing firmware declaration\n - Fix leak in amdgpu_ctx_mgr_entity_fini()\n - Freesync fix\n - OLED backlight fix\n\n amdkfd:\n - mtype fix for ext coherent system memory\n - MMU notifier fix\n - gfx7/8 fix\n\n xe:\n - Fix chunking the PTE updates and overflowing the maximum number of\n dwords with with MI_STORE_DATA_IMM\n - Move WA BB to the LRC BO to mitigate hangs on context switch\n - Fix frequency/flush WAs for BMG\n - Fix kconfig prompt title and description\n - Do not require kunit\n - Extend 14018094691 WA to BMG\n - Fix wedging the device on signal\n\n i915:\n - Make mei interrupt top half irq disabled to fix RT builds\n - Fix timeline left held on VMA alloc error\n - Fix NULL pointer deref in vlv_dphy_param_init()\n - Fix selftest mock_request() to avoid NULL deref\n\n exynos:\n - switch to using %p instead of %pK\n - fix vblank NULL ptr race\n - fix lockup on samsung peach-pit/pi chromebooks\n\n vesadrm:\n - NULL ptr fix\n\n vmwgfx:\n - fix encrypted memory allocation bug\n\n v3d:\n - fix irq enabled during reset\"\n\n* tag \u0027drm-fixes-2025-07-04\u0027 of https://gitlab.freedesktop.org/drm/kernel: (41 commits)\n drm/xe: Do not wedge device on killed exec queues\n drm/xe: Extend WA 14018094691 to BMG\n drm/v3d: Disable interrupts before resetting the GPU\n drm/gem: Acquire references on GEM handles for framebuffers\n drm/sched: Increment job count before swapping tail spsc queue\n drm/xe: Allow dropping kunit dependency as built-in\n drm/xe: Fix kconfig prompt\n drm/xe/bmg: Update Wa_22019338487\n drm/xe/bmg: Update Wa_14022085890\n drm/xe: Split xe_device_td_flush()\n drm/xe/xe_guc_pc: Lock once to update stashed frequencies\n drm/xe/guc_pc: Add _locked variant for min/max freq\n drm/xe: Make WA BB part of LRC BO\n drm/xe: Fix out-of-bounds field write in MI_STORE_DATA_IMM\n drm/i915/gsc: mei interrupt top half should be in irq disabled context\n drm/i915/gt: Fix timeline left held on VMA alloc error\n drm/vmwgfx: Fix guests running with TDX/SEV\n drm/amd/display: Don\u0027t allow OLED to go down to fully off\n drm/amd/display: Added case for when RR equals panel\u0027s max RR using freesync\n drm/amdkfd: add hqd_sdma_get_doorbell callbacks for gfx7/8\n ...\n" }, { "commit": "923d401238c590f39833a2015f6f9493f146d98f", "tree": "8c02ae823f31308527d6fc08f21aa8ebc6e52d66", "parents": [ "1880df2cf44af6266b48a905596726c267bc2b04", "25b1b75bbaf96331750fb01302825069657b2ff8" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 09:43:08 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 09:43:08 2025 -0700" }, "message": "Merge tag \u0027iommu-fixes-v6.16-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/iommu/linux\n\nPull iommu fixes from Joerg Roedel:\n\n - Rockchip: fix infinite loop caused by probing race condition\n\n - Intel VT-d: assign devtlb cache tag on ATS enablement\n\n* tag \u0027iommu-fixes-v6.16-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/iommu/linux:\n iommu/vt-d: Assign devtlb cache tag on ATS enablement\n iommu/rockchip: prevent iommus dead loop when two masters share one IOMMU\n" }, { "commit": "1880df2cf44af6266b48a905596726c267bc2b04", "tree": "44591f520b349065d42223061fcce5a1db0f1b8d", "parents": [ "482deed9dfa065cf3f68372dadac857541c7d504", "75ef7b8d44c30a76cfbe42dde9413d43055a00a7" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 09:33:59 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 09:33:59 2025 -0700" }, "message": "Merge tag \u0027block-6.16-20250704\u0027 of git://git.kernel.dk/linux\n\nPull block fixes from Jens Axboe:\n\n - NVMe fixes via Christoph:\n - fix incorrect cdw15 value in passthru error logging (Alok Tiwari)\n - fix memory leak of bio integrity in nvmet (Dmitry Bogdanov)\n - refresh visible attrs after being checked (Eugen Hristev)\n - fix suspicious RCU usage warning in the multipath code (Geliang Tang)\n - correctly account for namespace head reference counter (Nilay Shroff)\n\n - Fix for a regression introduced in ublk in this cycle, where it would\n attempt to queue a canceled request.\n\n - brd RCU sleeping fix, also introduced in this cycle. Bare bones fix,\n should be improved upon for the next release.\n\n* tag \u0027block-6.16-20250704\u0027 of git://git.kernel.dk/linux:\n brd: fix sleeping function called from invalid context in brd_insert_page()\n ublk: don\u0027t queue request if the associated uring_cmd is canceled\n nvme-multipath: fix suspicious RCU usage warning\n nvme-pci: refresh visible attrs after being checked\n nvmet: fix memory leak of bio integrity\n nvme: correctly account for namespace head reference counter\n nvme: Fix incorrect cdw15 value in passthru error logging\n" }, { "commit": "534eb6de621954cde61c910dbeb8fb1700a0a0d6", "tree": "eaefb0737acafecd5021c24e6e570c18a478c0c1", "parents": [ "d0b3b7b22dfa1f4b515fd3a295b3fd958f9e81af", "5f05fc6e2218db7ecc52c60eb34b707fe69262c2" ], "author": { "name": "Wolfram Sang", "email": "wsa+renesas@sang-engineering.com", "time": "Fri Jul 04 18:31:22 2025 +0200" }, "committer": { "name": "Wolfram Sang", "email": "wsa+renesas@sang-engineering.com", "time": "Fri Jul 04 18:31:22 2025 +0200" }, "message": "Merge tag \u0027i2c-host-fixes-6.16-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/andi.shyti/linux into i2c/for-current\n\ni2c-host-fixes for v6.16-rc5\n\ndesignware: initialise msg_write_idx during transfer\nmicrochip: check return value from core xfer call\nrealtek: add \u0027reg\u0027 property constraint to the device tree\n" }, { "commit": "482deed9dfa065cf3f68372dadac857541c7d504", "tree": "d351d8691209202e2bf67afa8db3225a78fdce24", "parents": [ "2eb7f03acf4ac5db937974e99e75dac4c2c5a83d", "94426e4201fbb1c5ea4a697eb62a8b7cd7dfccbf" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 09:29:22 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 09:29:22 2025 -0700" }, "message": "Merge tag \u0027bcachefs-2025-07-03\u0027 of git://evilpiepirate.org/bcachefs\n\nPull bcachefs fixes from Kent Overstreet:\n \"The \u0027opts.casefold_disabled\u0027 patch is non critical, but would be a\n 6.15 backport; it\u0027s to address the casefolding + overlayfs\n incompatibility that was discovvered late.\n\n It\u0027s late because I was hoping that this would be addressed on the\n overlayfs side (and will be in 6.17), but user reports keep coming in\n on this one (lots of people are using docker these days)\"\n\n* tag \u0027bcachefs-2025-07-03\u0027 of git://evilpiepirate.org/bcachefs:\n bcachefs: opts.casefold_disabled\n bcachefs: Work around deadlock to btree node rewrites in journal replay\n bcachefs: Fix incorrect transaction restart handling\n bcachefs: fix btree_trans_peek_prev_journal()\n bcachefs: mark invalid_btree_id autofix\n" }, { "commit": "2eb7f03acf4ac5db937974e99e75dac4c2c5a83d", "tree": "c8697abe1f5827cf193292c51b2f2f7888a1740f", "parents": [ "4c06e63b92038fadb566b652ec3ec04e228931e8", "1e7ab6f67824343ee3e96f100f0937c393749a8a" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 09:06:49 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 04 09:06:49 2025 -0700" }, "message": "Merge tag \u0027vfs-6.16-rc5.fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs\n\nPull vfs fixes from Christian Brauner:\n\n - Fix a regression caused by the anonymous inode rework. Making them\n regular files causes various places in the kernel to tip over\n starting with io_uring.\n\n Revert to the former status quo and port our assertion to be based on\n checking the inode so we don\u0027t lose the valuable VFS_*_ON_*()\n assertions that have already helped discover weird behavior our\n outright bugs.\n\n - Fix the the upper bound calculation in fuse_fill_write_pages()\n\n - Fix priority inversion issues in the eventpoll code\n\n - Make secretmen use anon_inode_make_secure_inode() to avoid bypassing\n the LSM layer\n\n - Fix a netfs hang due to missing case in final DIO read result\n collection\n\n - Fix a double put of the netfs_io_request struct\n\n - Provide some helpers to abstract out NETFS_RREQ_IN_PROGRESS flag\n wrangling\n\n - Fix infinite looping in netfs_wait_for_pause/request()\n\n - Fix a netfs ref leak on an extra subrequest inserted into a request\u0027s\n list of subreqs\n\n - Fix various cifs RPC callbacks to set NETFS_SREQ_NEED_RETRY if a\n subrequest fails retriably\n\n - Fix a cifs warning in the workqueue code when reconnecting a channel\n\n - Fix the updating of i_size in netfs to avoid a race between testing\n if we should have extended the file with a DIO write and changing\n i_size\n\n - Merge the places in netfs that update i_size on write\n\n - Fix coredump socket selftests\n\n* tag \u0027vfs-6.16-rc5.fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs:\n anon_inode: rework assertions\n netfs: Update tracepoints in a number of ways\n netfs: Renumber the NETFS_RREQ_* flags to make traces easier to read\n netfs: Merge i_size update functions\n netfs: Fix i_size updating\n smb: client: set missing retry flag in cifs_writev_callback()\n smb: client: set missing retry flag in cifs_readv_callback()\n smb: client: set missing retry flag in smb2_writev_callback()\n netfs: Fix ref leak on inserted extra subreq in write retry\n netfs: Fix looping in wait functions\n netfs: Provide helpers to perform NETFS_RREQ_IN_PROGRESS flag wangling\n netfs: Fix double put of request\n netfs: Fix hang due to missing case in final DIO read result collection\n eventpoll: Fix priority inversion problem\n fuse: fix fuse_fill_write_pages() upper bound calculation\n fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass\n selftests/coredump: Fix \"socket_detect_userspace_client\" test failure\n" }, { "commit": "fc975cfb36393db1db517fbbe366e550bcdcff14", "tree": "9d8251fc8b5a12b502ddb911f4901bcd325c4f34", "parents": [ "009836b4fa52f92cba33618e773b1094affa8cd2" ], "author": { "name": "kuyo chang", "email": "kuyo.chang@mediatek.com", "time": "Wed Jul 02 10:12:25 2025 +0800" }, "committer": { "name": "Peter Zijlstra", "email": "peterz@infradead.org", "time": "Fri Jul 04 10:35:56 2025 +0200" }, "message": "sched/deadline: Fix dl_server runtime calculation formula\n\nIn our testing with 6.12 based kernel on a big.LITTLE system, we were\nseeing instances of RT tasks being blocked from running on the LITTLE\ncpus for multiple seconds of time, apparently by the dl_server. This\nfar exceeds the default configured 50ms per second runtime.\n\nThis is due to the fair dl_server runtime calculation being scaled\nfor frequency \u0026 capacity of the cpu.\n\nConsider the following case under a Big.LITTLE architecture:\nAssume the runtime is: 50,000,000 ns, and Frequency/capacity\nscale-invariance defined as below:\nFrequency scale-invariance: 100\nCapacity scale-invariance: 50\nFirst by Frequency scale-invariance,\nthe runtime is scaled to 50,000,000 * 100 \u003e\u003e 10 \u003d 4,882,812\nThen by capacity scale-invariance,\nit is further scaled to 4,882,812 * 50 \u003e\u003e 10 \u003d 238,418.\nSo it will scaled to 238,418 ns.\n\nThis smaller \"accounted runtime\" value is what ends up being\nsubtracted against the fair-server\u0027s runtime for the current period.\nThus after 50ms of real time, we\u0027ve only accounted ~238us against the\nfair servers runtime. This 209:1 ratio in this example means that on\nthe smaller cpu the fair server is allowed to continue running,\nblocking RT tasks, for over 10 seconds before it exhausts its supposed\n50ms of runtime. And on other hardware configurations it can be even\nworse.\n\nFor the fair deadline_server, to prevent realtime tasks from being\nunexpectedly delayed, we really do want to use fixed time, and not\nscaled time for smaller capacity/frequency cpus. So remove the scaling\nfrom the fair server\u0027s accounting to fix this.\n\nFixes: a110a81c52a9 (\"sched/deadline: Deferrable dl server\")\nSuggested-by: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nSuggested-by: John Stultz \u003cjstultz@google.com\u003e\nSigned-off-by: kuyo chang \u003ckuyo.chang@mediatek.com\u003e\nSigned-off-by: Peter Zijlstra (Intel) \u003cpeterz@infradead.org\u003e\nAcked-by: Juri Lelli \u003cjuri.lelli@redhat.com\u003e\nAcked-by: John Stultz \u003cjstultz@google.com\u003e\nTested-by: John Stultz \u003cjstultz@google.com\u003e\nLink: https://lore.kernel.org/r/20250702021440.2594736-1-kuyo.chang@mediatek.com\n" }, { "commit": "25b1b75bbaf96331750fb01302825069657b2ff8", "tree": "cf7fd4d5cd57d8807ff2c6e3dac6193893bac80a", "parents": [ "62e062a29ad5133f67c20b333ba0a952a99161ae" ], "author": { "name": "Lu Baolu", "email": "baolu.lu@linux.intel.com", "time": "Sat Jun 28 18:03:51 2025 +0800" }, "committer": { "name": "Joerg Roedel", "email": "joerg.roedel@amd.com", "time": "Fri Jul 04 10:33:56 2025 +0200" }, "message": "iommu/vt-d: Assign devtlb cache tag on ATS enablement\n\nCommit \u003c4f1492efb495\u003e (\"iommu/vt-d: Revert ATS timing change to fix boot\nfailure\") placed the enabling of ATS in the probe_finalize callback. This\noccurs after the default domain attachment, which is when the ATS cache\ntag is assigned. Consequently, the device TLB cache tag is missed when the\ndomain is attached, leading to the device TLB not being invalidated in the\niommu_unmap paths.\n\nFix this by assigning the CACHE_TAG_DEVTLB cache tag when ATS is enabled.\n\nFixes: 4f1492efb495 (\"iommu/vt-d: Revert ATS timing change to fix boot failure\")\nCc: stable@vger.kernel.org\nSuggested-by: Kevin Tian \u003ckevin.tian@intel.com\u003e\nSigned-off-by: Lu Baolu \u003cbaolu.lu@linux.intel.com\u003e\nTested-by: Shuicheng Lin \u003cshuicheng.lin@intel.com\u003e\nReviewed-by: Kevin Tian \u003ckevin.tian@intel.com\u003e\nLink: https://lore.kernel.org/r/20250625050135.3129955-1-baolu.lu@linux.intel.com\nLink: https://lore.kernel.org/r/20250628100351.3198955-2-baolu.lu@linux.intel.com\nSigned-off-by: Joerg Roedel \u003cjoerg.roedel@amd.com\u003e\n" }, { "commit": "6b9fd8857b9fc4dd62e7cd300327f0e48dd76642", "tree": "1843ae1940d26bbb9473247da38f27c907ff7ed6", "parents": [ "5f712c3877f99d5b5e4d011955c6467ae0e535a6", "17bbde2e1716e2ee4b997d476b48ae85c5a47671" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Fri Jul 04 08:03:18 2025 +0200" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Fri Jul 04 08:03:18 2025 +0200" }, "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net\n\nCross-merge networking fixes after downstream PR (net-6.16-rc5).\n\nNo conflicts.\n\nNo adjacent changes.\n\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "4cf65845fdd09d711fc7546d60c9abe010956922", "tree": "99b8a9adf283a943db83ea618098a498423be7d6", "parents": [ "a106b6a888caf478d5fd31d123ffa09558500772" ], "author": { "name": "Yunshui Jiang", "email": "jiangyunshui@kylinos.cn", "time": "Thu Jul 03 21:56:02 2025 -0700" }, "committer": { "name": "Dmitry Torokhov", "email": "dmitry.torokhov@gmail.com", "time": "Thu Jul 03 22:20:46 2025 -0700" }, "message": "Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt()\n\nThe cs40l50_upload_owt() function allocates memory via kmalloc()\nwithout checking for allocation failure, which could lead to a\nNULL pointer dereference.\n\nReturn -ENOMEM in case allocation fails.\n\nSigned-off-by: Yunshui Jiang \u003cjiangyunshui@kylinos.cn\u003e\nFixes: c38fe1bb5d21 (\"Input: cs40l50 - Add support for the CS40L50 haptic driver\")\nLink: https://lore.kernel.org/r/20250704024010.2353841-1-jiangyunshui@kylinos.cn\nCc: stable@vger.kernel.org\nSigned-off-by: Dmitry Torokhov \u003cdmitry.torokhov@gmail.com\u003e\n" }, { "commit": "b969f9614885c20f903e1d1f9445611daf161d6d", "tree": "e0a9f5af015c2c5ec05c3eba8efdae1d1a62dcac", "parents": [ "d0b3b7b22dfa1f4b515fd3a295b3fd958f9e81af" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Mon Jun 30 02:52:13 2025 -0400" }, "committer": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Thu Jul 03 20:59:09 2025 -0400" }, "message": "fix proc_sys_compare() handling of in-lookup dentries\n\nThere\u0027s one case where -\u003ed_compare() can be called for an in-lookup\ndentry; usually that\u0027s nothing special from -\u003ed_compare() point of\nview, but... proc_sys_compare() is weird.\n\nThe thing is, /proc/sys subdirectories can look differently for\ndifferent processes. Up to and including having the same name\nresolve to different dentries - all of them hashed.\n\nThe way it\u0027s done is -\u003ed_compare() refusing to admit a match unless\nthis dentry is supposed to be visible to this caller. The information\nneeded to discriminate between them is stored in inode; it is set\nduring proc_sys_lookup() and until it\u0027s done d_splice_alias() we really\ncan\u0027t tell who should that dentry be visible for.\n\nNormally there\u0027s no negative dentries in /proc/sys; we can run into\na dying dentry in RCU dcache lookup, but those can be safely rejected.\n\nHowever, -\u003ed_compare() is also called for in-lookup dentries, before\nthey get positive - or hashed, for that matter. In case of match\nwe will wait until dentry leaves in-lookup state and repeat -\u003ed_compare()\nafterwards. In other words, the right behaviour is to treat the\nname match as sufficient for in-lookup dentries; if dentry is not\nfor us, we\u0027ll see that when we recheck once proc_sys_lookup() is\ndone with it.\n\nWhile we are at it, fix the misspelled READ_ONCE and WRITE_ONCE there.\n\nFixes: d9171b934526 (\"parallel lookups machinery, part 4 (and last)\")\nReported-by: NeilBrown \u003cneilb@brown.name\u003e\nReviewed-by: Christian Brauner \u003cbrauner@kernel.org\u003e\nReviewed-by: NeilBrown \u003cneil@brown.name\u003e\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n" }, { "commit": "da8d8e9001c6a3741e9bec26a6cdcfd75ecabc88", "tree": "90063947e4a2309563cc4fddef051066dc1c60b4", "parents": [ "8f954c435f609656308b6f8fe3225e7e22c0076a", "5459e16b215c18529782e7746992653f00de0779" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jul 04 10:01:49 2025 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jul 04 10:01:53 2025 +1000" }, "message": "Merge tag \u0027drm-xe-fixes-2025-07-03\u0027 of https://gitlab.freedesktop.org/drm/xe/kernel into drm-fixes\n\nDriver Changes:\n- Fix chunking the PTE updates and overflowing the maximum number of\n dwords with with MI_STORE_DATA_IMM (Jia Yao)\n- Move WA BB to the LRC BO to mitigate hangs on context switch (Matthew\n Brost)\n- Fix frequency/flush WAs for BMG (Vinay / Lucas)\n- Fix kconfig prompt title and description (Lucas)\n- Do not require kunit (Harry Austen / Lucas)\n- Extend 14018094691 WA to BMG (Daniele)\n- Fix wedging the device on signal (Matthew Brost)\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Lucas De Marchi \u003clucas.demarchi@intel.com\u003e\nLink: https://lore.kernel.org/r/o5662wz6nrlf6xt5sjgxq5oe6qoujefzywuwblm3m626hreifv@foqayqydd6ig\n" }, { "commit": "3363da82e02f1bddc54faa92ea430c6532e2cd2e", "tree": "3b9875c656ae7781749c97556f9e0403566c3081", "parents": [ "266b5d02e14f3a0e07414e11f239397de0577a1d" ], "author": { "name": "Paulo Alcantara", "email": "pc@manguebit.org", "time": "Thu Jul 03 17:57:19 2025 -0300" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Thu Jul 03 18:43:04 2025 -0500" }, "message": "smb: client: fix native SMB symlink traversal\n\nWe\u0027ve seen customers having shares mounted in paths like /??/C:/ or\n/??/UNC/foo.example.com/share in order to get their native SMB\nsymlinks successfully followed from different mounts.\n\nAfter commit 12b466eb52d9 (\"cifs: Fix creating and resolving absolute NT-style symlinks\"),\nthe client would then convert absolute paths from \"/??/C:/\" to \"/mnt/c/\"\nby default. The absolute paths would vary depending on the value of\nsymlinkroot\u003d mount option.\n\nFix this by restoring old behavior of not trying to convert absolute\npaths by default. Only do this if symlinkroot\u003d was _explicitly_ set.\n\nBefore patch:\n\n $ mount.cifs //w22-fs0/test2 /mnt/1 -o vers\u003d3.1.1,username\u003dxxx,password\u003dyyy\n $ ls -l /mnt/1/symlink2\n lrwxr-xr-x 1 root root 15 Jun 20 14:22 /mnt/1/symlink2 -\u003e /mnt/c/testfile\n $ mkdir -p /??/C:; echo foo \u003e //??/C:/testfile\n $ cat /mnt/1/symlink2\n cat: /mnt/1/symlink2: No such file or directory\n\nAfter patch:\n\n $ mount.cifs //w22-fs0/test2 /mnt/1 -o vers\u003d3.1.1,username\u003dxxx,password\u003dyyy\n $ ls -l /mnt/1/symlink2\n lrwxr-xr-x 1 root root 15 Jun 20 14:22 /mnt/1/symlink2 -\u003e \u0027/??/C:/testfile\u0027\n $ mkdir -p /??/C:; echo foo \u003e //??/C:/testfile\n $ cat /mnt/1/symlink2\n foo\n\nCc: linux-cifs@vger.kernel.org\nReported-by: Pierguido Lambri \u003cplambri@redhat.com\u003e\nCc: David Howells \u003cdhowells@redhat.com\u003e\nCc: Stefan Metzmacher \u003cmetze@samba.org\u003e\nFixes: 12b466eb52d9 (\"cifs: Fix creating and resolving absolute NT-style symlinks\")\nSigned-off-by: Paulo Alcantara (Red Hat) \u003cpc@manguebit.org\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "266b5d02e14f3a0e07414e11f239397de0577a1d", "tree": "9bf59f472a507013a30c099e1c3c653c61d359e0", "parents": [ "74ebd02163fde05baa23129e06dde4b8f0f2377a" ], "author": { "name": "Wang Zhaolong", "email": "wangzhaolong@huaweicloud.com", "time": "Thu Jul 03 21:29:52 2025 +0800" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Thu Jul 03 18:41:49 2025 -0500" }, "message": "smb: client: fix race condition in negotiate timeout by using more precise timing\n\nWhen the SMB server reboots and the client immediately accesses the mount\npoint, a race condition can occur that causes operations to fail with\n\"Host is down\" error.\n\nReproduction steps:\n # Mount SMB share\n mount -t cifs //192.168.245.109/TEST /mnt/ -o xxxx\n ls /mnt\n\n # Reboot server\n ssh root@192.168.245.109 reboot\n ssh root@192.168.245.109 /path/to/cifs_server_setup.sh\n ssh root@192.168.245.109 systemctl stop firewalld\n\n # Immediate access fails\n ls /mnt\n ls: cannot access \u0027/mnt\u0027: Host is down\n\n # But works if there is a delay\n\nThe issue is caused by a race condition between negotiate and reconnect.\nThe 20-second negotiate timeout mechanism can interfere with the normal\nrecovery process when both are triggered simultaneously.\n\n ls cifsd\n---------------------------------------------------\n cifs_getattr\n cifs_revalidate_dentry\n cifs_get_inode_info\n cifs_get_fattr\n smb2_query_path_info\n smb2_compound_op\n SMB2_open_init\n smb2_reconnect\n cifs_negotiate_protocol\n smb2_negotiate\n cifs_send_recv\n smb_send_rqst\n wait_for_response\n cifs_demultiplex_thread\n cifs_read_from_socket\n cifs_readv_from_socket\n server_unresponsive\n cifs_reconnect\n __cifs_reconnect\n cifs_abort_connection\n mid-\u003emid_state \u003d MID_RETRY_NEEDED\n cifs_wake_up_task\n cifs_sync_mid_result\n // case MID_RETRY_NEEDED\n rc \u003d -EAGAIN;\n // In smb2_negotiate()\n rc \u003d -EHOSTDOWN;\n\nThe server_unresponsive() timeout triggers cifs_reconnect(), which aborts\nongoing mid requests and causes the ls command to receive -EAGAIN, leading\nto -EHOSTDOWN.\n\nFix this by introducing a dedicated `neg_start` field to\nprecisely tracks when the negotiate process begins. The timeout check\nnow uses this accurate timestamp instead of `lstrp`, ensuring that:\n\n1. Timeout is only triggered after negotiate has actually run for 20s\n2. The mechanism doesn\u0027t interfere with concurrent recovery processes\n3. Uninitialized timestamps (value 0) don\u0027t trigger false timeouts\n\nFixes: 7ccc1465465d (\"smb: client: fix hang in wait_for_response() for negproto\")\nSigned-off-by: Wang Zhaolong \u003cwangzhaolong@huaweicloud.com\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "8f954c435f609656308b6f8fe3225e7e22c0076a", "tree": "735b34c67d78cf63f2f9c27cafb289e1cdf47b75", "parents": [ "ac2ad73e75596189603995cd4283949863fd7e55", "2ab3ba39153dcdc9de7d2eec42bf19f84d4844cf" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jul 04 09:40:17 2025 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jul 04 09:40:20 2025 +1000" }, "message": "Merge tag \u0027samsung-dsim-fixes-for-v6.16-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/daeinki/drm-exynos into drm-fixes\n\n- Fixed raw pointer leakage and unsafe behavior in printk()\n . Switch from %pK to %p for pointer formatting, as %p is now safer\n and prevents issues like raw pointer leakage and acquiring sleeping\n locks in atomic contexts.\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Inki Dae \u003cinki.dae@samsung.com\u003e\nLink: https://lore.kernel.org/r/20250629091742.29956-1-inki.dae@samsung.com\n" }, { "commit": "ac2ad73e75596189603995cd4283949863fd7e55", "tree": "c20c1d780c70a2a26dc6dcdf2536e7bd352b080c", "parents": [ "afd30ace71eecc3ba06815c9b554e801e85ab73a", "5d91394f236167ac624b823820faf4aa928b889e" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jul 04 09:37:57 2025 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jul 04 09:38:01 2025 +1000" }, "message": "Merge tag \u0027exynos-drm-fixes-for-v6.16-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/daeinki/drm-exynos into drm-fixes\n\nFixups\n- Fixed raw pointer leakage and unsafe behavior in printk()\n . Switch from %pK to %p for pointer formatting, as %p is now safer\n and prevents issues like raw pointer leakage and acquiring sleeping\n locks in atomic contexts.\n\n- Fixed kernel panic during boot\n . A NULL pointer dereference issue occasionally occurred\n when the vblank interrupt handler was called before\n the DRM driver was fully initialized during boot.\n So this patch fixes the issue by adding a check in the interrupt handler\n to ensure the DRM driver is properly initialized.\n\n- Fixed a lockup issue on Samsung Peach-Pit/Pi Chromebooks\n . The issue occurred after commit c9b1150a68d9 changed\n the call order of CRTC enable/disable and bridge pre_enable/post_disable\n methods, causing fimd_dp_clock_enable() to be called\n before the FIMD device was activated. To fix this,\n runtime PM guards were added to fimd_dp_clock_enable()\n to ensure proper operation even when CRTC is not enabled.\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Inki Dae \u003cinki.dae@samsung.com\u003e\nLink: https://lore.kernel.org/r/20250629083554.28628-1-inki.dae@samsung.com\n" }, { "commit": "afd30ace71eecc3ba06815c9b554e801e85ab73a", "tree": "ade138356c7dd74ddf4d3d1770da28b7f5d54210", "parents": [ "b91e11ec5cd972dc39121496c3a0cf2ec2e9a393", "8cadce97bf264ed478669c6f32d5603b34608335" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jul 04 09:26:57 2025 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jul 04 09:26:57 2025 +1000" }, "message": "Merge tag \u0027drm-intel-fixes-2025-07-03\u0027 of https://gitlab.freedesktop.org/drm/i915/kernel into drm-fixes\n\n- Make mei interrupt top half irq disabled to fix RT builds\n- Fix timeline left held on VMA alloc error\n- Fix NULL pointer deref in vlv_dphy_param_init()\n- Fix selftest mock_request() to avoid NULL deref\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nFrom: Joonas Lahtinen \u003cjoonas.lahtinen@linux.intel.com\u003e\nLink: https://lore.kernel.org/r/aGYVPAA4KvsZqDFx@jlahtine-mobl\n" }, { "commit": "b91e11ec5cd972dc39121496c3a0cf2ec2e9a393", "tree": "2b44cbf37bc8c81f9605baeb24419f81ca2ff816", "parents": [ "bf906c988d77d9cdfb52a7d19ad9b183991271a3", "226862f50a7a88e4e4de9abbf36c64d19acd6fd0" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jul 04 09:06:56 2025 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jul 04 09:06:57 2025 +1000" }, "message": "Merge tag \u0027drm-misc-fixes-2025-07-03\u0027 of https://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes\n\ndrm-misc-fixes for v6.16-rc5:\n- Replace simple panel lookup hack with proper fix.\n- nullpointer deref in vesadrm fix.\n- fix dma_resv_wait_timeout.\n- fix error handling in ttm_buffer_object_transfer.\n- bridge fixes.\n- Fix vmwgfx accidentally allocating encrypted memory.\n- Fix race in spsc_queue_push()\n- Add refcount on backing GEM objects during fb creation.\n- Fix v3d irq\u0027s being enabled during gpu reset.\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nFrom: Maarten Lankhorst \u003cmaarten.lankhorst@linux.intel.com\u003e\nLink: https://lore.kernel.org/r/a7461418-08dc-4b7c-b2fa-264155f66d5e@linux.intel.com\n" }, { "commit": "4c06e63b92038fadb566b652ec3ec04e228931e8", "tree": "04ab271c4fc64b3860911e4d11eb99313f21de8d", "parents": [ "025c1970da725b07701464990f747fe1c2bd797f", "157501b0469969fc1ba53add5049575aadd79d80" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jul 03 13:29:56 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jul 03 13:29:56 2025 -0700" }, "message": "Merge tag \u0027for-6.16-rc4-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux\n\nPull btrfs fixes from David Sterba:\n\n - tree-log fixes:\n - fixes of log tracking of directories and subvolumes\n - fix iteration and error handling of inode references\n during log replay\n\n - fix free space tree rebuild (reported by syzbot)\n\n* tag \u0027for-6.16-rc4-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux:\n btrfs: use btrfs_record_snapshot_destroy() during rmdir\n btrfs: propagate last_unlink_trans earlier when doing a rmdir\n btrfs: record new subvolume in parent dir earlier to avoid dir logging races\n btrfs: fix inode lookup error handling during log replay\n btrfs: fix iteration of extrefs during log replay\n btrfs: fix missing error handling when searching for inode refs during log replay\n btrfs: fix failure to rebuild free space tree using multiple transactions\n" }, { "commit": "025c1970da725b07701464990f747fe1c2bd797f", "tree": "3c18a373fca20f9ebc05f51ab5b59edabb83aef0", "parents": [ "17bbde2e1716e2ee4b997d476b48ae85c5a47671", "021f243627ead17eb6500170256d3d9be787dad8" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jul 03 11:52:39 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jul 03 11:52:39 2025 -0700" }, "message": "Merge tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi\n\nPull SCSI fixes from James Bottomley:\n \"Driver fixes plus core sd.c fix are all small and obvious.\n\n The larger change to hosts.c is less obvious, but required to avoid\n data corruption caused by bio splitting\"\n\n* tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:\n scsi: ufs: core: Fix spelling of a sysfs attribute name\n scsi: core: Enforce unlimited max_segment_size when virt_boundary_mask is set\n scsi: RDMA/srp: Don\u0027t set a max_segment_size when virt_boundary_mask is set\n scsi: sd: Fix VPD page 0xb7 length check\n scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()\n scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()\n" }, { "commit": "17bbde2e1716e2ee4b997d476b48ae85c5a47671", "tree": "83ad904b1a00bae47f35b9cd200b8c934d2be5af", "parents": [ "d32e907d15f7257f69d38b4c829f87a79ecf8b7f", "223e2288f4b8c262a864e2c03964ffac91744cd5" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jul 03 09:18:55 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jul 03 09:18:55 2025 -0700" }, "message": "Merge tag \u0027net-6.16-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net\n\nPull networking fixes from Paolo Abeni:\n \"Including fixes from Bluetooth.\n\n Current release - new code bugs:\n\n - eth:\n - txgbe: fix the issue of TX failure\n - ngbe: specify IRQ vector when the number of VFs is 7\n\n Previous releases - regressions:\n\n - sched: always pass notifications when child class becomes empty\n\n - ipv4: fix stat increase when udp early demux drops the packet\n\n - bluetooth: prevent unintended pause by checking if advertising is active\n\n - virtio: fix error reporting in virtqueue_resize\n\n - eth:\n - virtio-net:\n - ensure the received length does not exceed allocated size\n - fix the xsk frame\u0027s length check\n - lan78xx: fix WARN in __netif_napi_del_locked on disconnect\n\n Previous releases - always broken:\n\n - bluetooth: mesh: check instances prior disabling advertising\n\n - eth:\n - idpf: convert control queue mutex to a spinlock\n - dpaa2: fix xdp_rxq_info leak\n - amd-xgbe: align CL37 AN sequence as per databook\"\n\n* tag \u0027net-6.16-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net: (38 commits)\n vsock/vmci: Clear the vmci transport packet properly when initializing it\n dt-bindings: net: sophgo,sg2044-dwmac: Drop status from the example\n net: ngbe: specify IRQ vector when the number of VFs is 7\n net: wangxun: revert the adjustment of the IRQ vector sequence\n net: txgbe: request MISC IRQ in ndo_open\n virtio_net: Enforce minimum TX ring size for reliability\n virtio_net: Cleanup \u00272+MAX_SKB_FRAGS\u0027\n virtio_ring: Fix error reporting in virtqueue_resize\n virtio-net: xsk: rx: fix the frame\u0027s length check\n virtio-net: use the check_mergeable_len helper\n virtio-net: remove redundant truesize check with PAGE_SIZE\n virtio-net: ensure the received length does not exceed allocated size\n net: ipv4: fix stat increase when udp early demux drops the packet\n net: libwx: fix the incorrect display of the queue number\n amd-xgbe: do not double read link status\n net/sched: Always pass notifications when child class becomes empty\n nui: Fix dma_mapping_error() check\n rose: fix dangling neighbour pointers in rose_rt_device_down()\n enic: fix incorrect MTU comparison in enic_change_mtu()\n amd-xgbe: align CL37 AN sequence as per databook\n ...\n" }, { "commit": "d32e907d15f7257f69d38b4c829f87a79ecf8b7f", "tree": "d62b2862f6007f886fa697aab4a3fca8a2171849", "parents": [ "b4911fb0b060899e4eebca0151eb56deb86921ec", "9e9b46672b1daac814b384286c21fb8332a87392" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jul 03 09:00:04 2025 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jul 03 09:00:04 2025 -0700" }, "message": "Merge tag \u0027xfs-fixes-6.16-rc5\u0027 of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux\n\nPull xfs fixes from Carlos Maiolino:\n\n - Fix umount hang with unflushable inodes (and add new tracepoint used\n for debugging this)\n\n - Fix ABBA deadlock in xfs_reclaim_inode() vs xfs_ifree_cluster()\n\n - Fix dquot buffer pin deadlock\n\n* tag \u0027xfs-fixes-6.16-rc5\u0027 of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux:\n xfs: add FALLOC_FL_ALLOCATE_RANGE to supported flags mask\n xfs: fix unmount hang with unflushable inodes stuck in the AIL\n xfs: factor out stale buffer item completion\n xfs: rearrange code in xfs_buf_item.c\n xfs: add tracepoints for stale pinned inode state debug\n xfs: avoid dquot buffer pin deadlock\n xfs: catch stale AGF/AGF metadata\n xfs: xfs_ifree_cluster vs xfs_iflush_shutdown_abort deadlock\n xfs: actually use the xfs_growfs_check_rtgeom tracepoint\n xfs: Improve error handling in xfs_mru_cache_create()\n xfs: move xfs_submit_zoned_bio a bit\n xfs: use xfs_readonly_buftarg in xfs_remount_rw\n xfs: remove NULL pointer checks in xfs_mru_cache_insert\n xfs: check for shutdown before going to sleep in xfs_select_zone\n" }, { "commit": "75ef7b8d44c30a76cfbe42dde9413d43055a00a7", "tree": "307d93794cb032a3670a7a6c10df2a6d40ec1524", "parents": [ "0d519bb0de3bf0ac9e6f401d4910fc119062d7be", "d6811074203b13f715ce2480ac64c5b1c773f2a5" ], "author": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Jul 03 09:42:07 2025 -0600" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Jul 03 09:42:07 2025 -0600" }, "message": "Merge tag \u0027nvme-6.16-2025-07-03\u0027 of git://git.infradead.org/nvme into block-6.16\n\nPull NVMe fixes from Christoph:\n\n\"- fix incorrect cdw15 value in passthru error logging (Alok Tiwari)\n - fix memory leak of bio integrity in nvmet (Dmitry Bogdanov)\n - refresh visible attrs after being checked (Eugen Hristev)\n - fix suspicious RCU usage warning in the multipath code (Geliang Tang)\n - correctly account for namespace head reference counter (Nilay Shroff)\"\n\n* tag \u0027nvme-6.16-2025-07-03\u0027 of git://git.infradead.org/nvme:\n nvme-multipath: fix suspicious RCU usage warning\n nvme-pci: refresh visible attrs after being checked\n nvmet: fix memory leak of bio integrity\n nvme: correctly account for namespace head reference counter\n nvme: Fix incorrect cdw15 value in passthru error logging\n" }, { "commit": "3f3fb97374308993dbe8884f44c2579a81b90bfa", "tree": "46423d5ff3e3023084f9e239e2924f8624baf49b", "parents": [ "c6754d77bd42d0ca35df8bdcf481b5984141ed1f", "08a0d93c353bd55de8b5fb77b464d89425be0215" ], "author": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Thu Jul 03 16:27:31 2025 +0200" }, "committer": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Thu Jul 03 16:27:31 2025 +0200" }, "message": "Merge tag \u0027apple-soc-fixes-6.16\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/sven/linux into arm/fixes\n\nApple SoC fixes for 6.16\n\nOne devicetree fix for a dtbs_warning that\u0027s been present for a while:\n- Rename the PCIe BCM4377 node to conform to the devicetree binding\n schema\n\nTwo devicetree fixes for W\u003d1 warnings that have been introduced recently:\n- Drop {address,size}-cells from SPI NOR which doesn\u0027t have any child\n nodes such that these don\u0027t make sense\n- Move touchbar mipi {address,size}-cells from the dtsi file where the\n node is disabled and has no children to the dts file where it\u0027s\n enabled and its children are declared\n\nSigned-off-by: Sven Peter \u003csven@kernel.org\u003e\n\n* tag \u0027apple-soc-fixes-6.16\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/sven/linux:\n arm64: dts: apple: Move touchbar mipi {address,size}-cells from dtsi to dts\n arm64: dts: apple: Drop {address,size}-cells from SPI NOR\n arm64: dts: apple: t8103: Fix PCIe BCM4377 nodename\n" }, { "commit": "c6754d77bd42d0ca35df8bdcf481b5984141ed1f", "tree": "0a53135ef708d9ec3979cb5a9382c4a8048703c3", "parents": [ "f31824a60213dd12bddd5b7c2e7e8adbeda61929", "312d02adb959ea199372f375ada06e0186f651e4" ], "author": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Thu Jul 03 16:26:08 2025 +0200" }, "committer": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Thu Jul 03 16:26:08 2025 +0200" }, "message": "Merge tag \u0027optee-fix-for-v6.16\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/jenswi/linux-tee into arm/fixes\n\nA fix in the OP-TEE driver for v6.16\n\nFixing a sleep in atomic context in the FF-A notification callback by\nadding a work queue to process in a non-atomic context.\n\n* tag \u0027optee-fix-for-v6.16\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/jenswi/linux-tee:\n optee: ffa: fix sleep in atomic context\n" }, { "commit": "f31824a60213dd12bddd5b7c2e7e8adbeda61929", "tree": "4d8a6545cc04d80b035a464bbdc8b0becc55ca41", "parents": [ "9a5d769c9084678c0f21c3f9cf83ca17466a16fb", "8d2c2fa2209e83d0eb10f7330d8a0bbdc1df32ff" ], "author": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Thu Jul 03 16:23:53 2025 +0200" }, "committer": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Thu Jul 03 16:23:53 2025 +0200" }, "message": "Merge tag \u0027samsung-fixes-6.16\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/krzk/linux into arm/fixes\n\nSamsung SoC fixes for v6.16\n\n1. Correct CONFIG option in arm64 defconfig enabling the Qualcomm SoC\n SNPS EUSB2 phy driver, because Kconfig entry was renamed when\n changing the driver to a common one, shared with Samsung SoC, thus\n defconfig lost that driver effectively.\n\n2. Exynos ACPM: Fix timeouts happening with multiple requests.\n\n* tag \u0027samsung-fixes-6.16\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/krzk/linux:\n firmware: exynos-acpm: fix timeouts on xfers handling\n arm64: defconfig: update renamed PHY_SNPS_EUSB2\n" }, { "commit": "5f712c3877f99d5b5e4d011955c6467ae0e535a6", "tree": "c9a5d39c82d6806b39a18cebc1f80a507ad98483", "parents": [ "129676952ee0672480cd50ac028330ef9e92b98f" ], "author": { "name": "Yue Haibing", "email": "yuehaibing@huawei.com", "time": "Tue Jul 01 12:12:35 2025 +0800" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 16:00:50 2025 +0200" }, "message": "ipv6: Cleanup fib6_drop_pcpu_from()\n\nSince commit 0e2338749192 (\"ipv6: fix races in ip6_dst_destroy()\"),\n\u0027table\u0027 is unused in __fib6_drop_pcpu_from(), no need pass it from\nfib6_drop_pcpu_from().\n\nSigned-off-by: Yue Haibing \u003cyuehaibing@huawei.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/20250701041235.1333687-1-yuehaibing@huawei.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "129676952ee0672480cd50ac028330ef9e92b98f", "tree": "0ad8a2b162f3d37d8202188e2069b984fb4ce927", "parents": [ "792eacd32481a6e3dfa1c73573c96235b0f22957", "2f1fa26eef6548ab10cf49cea56390d5e5ccdbdd" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 15:51:47 2025 +0200" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 15:51:47 2025 +0200" }, "message": "Merge branch \u0027another-ip-sysctl-docs-cleanup\u0027\n\nBagas Sanjaya says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nAnother ip-sysctl docs cleanup\n\nInspired by Abdelrahman\u0027s cleanup [1]. This time, mostly formatting\nconversion to bullet lists.\n\n[1]: https://lore.kernel.org/linux-doc/20250624150923.40590-1-abdelrahmanfekry375@gmail.com/\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20250701031300.19088-1-bagasdotme@gmail.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "2f1fa26eef6548ab10cf49cea56390d5e5ccdbdd", "tree": "0ad8a2b162f3d37d8202188e2069b984fb4ce927", "parents": [ "82b05660005923c4a07254c90ec54647a2edf128" ], "author": { "name": "Bagas Sanjaya", "email": "bagasdotme@gmail.com", "time": "Tue Jul 01 10:13:00 2025 +0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 15:51:45 2025 +0200" }, "message": "net: ip-sysctl: Add link to SCTP IPv4 scoping draft\n\naddr_scope_policy description contains pointer to SCTP IPv4 scoping\ndraft but not its IETF Datatracker link. Add it.\n\nSigned-off-by: Bagas Sanjaya \u003cbagasdotme@gmail.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/20250701031300.19088-6-bagasdotme@gmail.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "82b05660005923c4a07254c90ec54647a2edf128", "tree": "511ee9a02fd2a91a3e01e050f7202b2b9e981af8", "parents": [ "98bc1d41f2c586bdcc927443f59236d9d301fe7a" ], "author": { "name": "Bagas Sanjaya", "email": "bagasdotme@gmail.com", "time": "Tue Jul 01 10:12:59 2025 +0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 15:51:45 2025 +0200" }, "message": "net: ip-sysctl: Format SCTP-related memory parameters description as bullet list\n\nThe description for vector elements of SCTP-related memory usage\nparameters (sctp{r,w,}mem) is formatted as normal paragraphs rather than\nbullet list. Convert the description to the latter.\n\nSigned-off-by: Bagas Sanjaya \u003cbagasdotme@gmail.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/20250701031300.19088-5-bagasdotme@gmail.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "98bc1d41f2c586bdcc927443f59236d9d301fe7a", "tree": "f7f1ba1202c49a15dc3d225f7c10088b24396f13", "parents": [ "2040058db3026d286df224756631e85dbe85ef93" ], "author": { "name": "Bagas Sanjaya", "email": "bagasdotme@gmail.com", "time": "Tue Jul 01 10:12:58 2025 +0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 15:51:45 2025 +0200" }, "message": "net: ip-sysctl: Format pf_{enable,expose} boolean lists as bullet lists\n\nThese lists\u0027 items were separated by newlines but without bullet list\nmarker. Turn the lists into proper bullet list.\n\nWhile at it, also reword values description for pf_expose to not repeat\nmentioning SCTP_PEER_ADDR_CHANGE and SCTP_GET_PEER_ADDR_INFO sockopt.\n\nSigned-off-by: Bagas Sanjaya \u003cbagasdotme@gmail.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/20250701031300.19088-4-bagasdotme@gmail.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "2040058db3026d286df224756631e85dbe85ef93", "tree": "98707b544440f9ef91a0646d73e6414a036d3a7d", "parents": [ "501aeb1ef4630f2a942815f0e6260e7ad4afa23e" ], "author": { "name": "Bagas Sanjaya", "email": "bagasdotme@gmail.com", "time": "Tue Jul 01 10:12:57 2025 +0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 15:51:44 2025 +0200" }, "message": "net: ip-sysctl: Format possible value range of ioam6_id{,_wide} as bullet list\n\nFormat possible value range bounds of ioam6_id and ioam6_id_wide as\nbullet list instead of running paragraph.\n\nSigned-off-by: Bagas Sanjaya \u003cbagasdotme@gmail.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/20250701031300.19088-3-bagasdotme@gmail.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "501aeb1ef4630f2a942815f0e6260e7ad4afa23e", "tree": "4fd25f2e4c16b826092d77c3422be4b6b0ef020f", "parents": [ "792eacd32481a6e3dfa1c73573c96235b0f22957" ], "author": { "name": "Bagas Sanjaya", "email": "bagasdotme@gmail.com", "time": "Tue Jul 01 10:12:56 2025 +0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 15:51:44 2025 +0200" }, "message": "net: ip-sysctl: Format Private VLAN proxy arp aliases as bullet list\n\nAlias names list for private VLAN proxy arp technology is formatted as\nindented paragraph instead. Make it bullet list as it is better fit for\nthis purpose.\n\nSigned-off-by: Bagas Sanjaya \u003cbagasdotme@gmail.com\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nLink: https://patch.msgid.link/20250701031300.19088-2-bagasdotme@gmail.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "5459e16b215c18529782e7746992653f00de0779", "tree": "398583be8acc594d2f74106a63bab275e72e8d18", "parents": [ "d008fc65ebbc7d0f36c5a90c8b1ef117c295d8d8" ], "author": { "name": "Matthew Brost", "email": "matthew.brost@intel.com", "time": "Tue Jun 24 10:41:03 2025 -0700" }, "committer": { "name": "Lucas De Marchi", "email": "lucas.demarchi@intel.com", "time": "Thu Jul 03 06:42:22 2025 -0700" }, "message": "drm/xe: Do not wedge device on killed exec queues\n\nWhen a user closes an exec queue or interrupts an app with Ctrl-C,\nthis does not warrant wedging the device in mode 2.\n\nAvoid this by skipping the wedge check for killed exec queues in\nthe TDR and LR exec queue cleanup worker.\n\nSigned-off-by: Matthew Brost \u003cmatthew.brost@intel.com\u003e\nReviewed-by: Rodrigo Vivi \u003crodrigo.vivi@intel.com\u003e\nLink: https://lore.kernel.org/r/20250624174103.2707941-1-matthew.brost@intel.com\n(cherry picked from commit 5a2f117a80c207372513ca8964eeb178874f4990)\nSigned-off-by: Lucas De Marchi \u003clucas.demarchi@intel.com\u003e\n" }, { "commit": "d008fc65ebbc7d0f36c5a90c8b1ef117c295d8d8", "tree": "2fe9ffb2152680751b55b55f00e997c4972ab3b2", "parents": [ "aa18d5769fcafe645a3ba01a9a69dde4f8dc8cc3" ], "author": { "name": "Daniele Ceraolo Spurio", "email": "daniele.ceraolospurio@intel.com", "time": "Fri Jun 13 16:11:29 2025 -0700" }, "committer": { "name": "Lucas De Marchi", "email": "lucas.demarchi@intel.com", "time": "Thu Jul 03 06:40:50 2025 -0700" }, "message": "drm/xe: Extend WA 14018094691 to BMG\n\nThis WA is applicable to BMG as well.\n\nNote that this is a GSC WA and we don\u0027t load the GSC on BMG, so\nextending the WA to BMG won\u0027t do anything right now. However, it helps\nfuture-proof the driver so that if we ever turn the GSC on we won\u0027t have\nto remember to extend this WA.\n\nv2: don\u0027t use VERSION_RANGE from 2001 to 2004 (Matt)\n\nSigned-off-by: Daniele Ceraolo Spurio \u003cdaniele.ceraolospurio@intel.com\u003e\nCc: Matt Roper \u003cmatthew.d.roper@intel.com\u003e\nReviewed-by: Matt Roper \u003cmatthew.d.roper@intel.com\u003e\nLink: https://lore.kernel.org/r/20250613231128.1261815-2-daniele.ceraolospurio@intel.com\n(cherry picked from commit 1a5ce0c5b95b0624ebd44f574b98003a466973be)\nSigned-off-by: Lucas De Marchi \u003clucas.demarchi@intel.com\u003e\n" }, { "commit": "792eacd32481a6e3dfa1c73573c96235b0f22957", "tree": "fe3e0b3d8d89a94c1063698c9a9b28999f11fc92", "parents": [ "4f38a6db7bcfc4502c08f4095d2abf686828cff9", "17c395bba1a3983b1b1918286979bae5f6851f33" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 15:36:12 2025 +0200" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 15:36:13 2025 +0200" }, "message": "Merge branch \u0027ptp-provide-support-for-auxiliary-clocks-for-ptp_sys_offset_extended\u0027\n\nThomas Gleixner says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nptp: Provide support for auxiliary clocks for PTP_SYS_OFFSET_EXTENDED\n\nThis is a follow up to the V1 series, which can be found here:\n\n https://lore.kernel.org/all/20250626124327.667087805@linutronix.de\n\nto address the merge logistics problem, which I created myself.\n\nChanges vs. V1:\n\n - Make patch 1, which provides the timestamping function temporarily\n define CLOCK_AUX* if undefined so that it can be merged independently,\n\n - Add a missing check for CONFIG_POSIX_AUX_CLOCK in the PTP IOCTL\n\n - Picked up tags\n\nMerge logistics if agreed on:\n\n 1) Patch #1 is applied to the tip tree on top of plain v6.16-rc1 and\n tagged\n\n 2) That tag is merged into tip:timers/ptp and the temporary CLOCK_AUX\n define is removed in a subsequent commit\n\n 3) Network folks merge the tag and apply patches #2 + #3\n\nSo the only fallout from this are the extra merges in both trees and the\ncleanup commit in the tip tree. But that way there are no dependencies and\nno duplicate commits with different SHAs.\n\nThoughts?\n\nDue to the above constraints there is no branch offered to pull from right\nnow. Sorry for the inconveniance. Should have thought about that earlier.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20250701130923.579834908@linutronix.de\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "17c395bba1a3983b1b1918286979bae5f6851f33", "tree": "fe3e0b3d8d89a94c1063698c9a9b28999f11fc92", "parents": [ "4c09a4cebd0320c5381afad3fb6f997f20082a3b" ], "author": { "name": "Thomas Gleixner", "email": "tglx@linutronix.de", "time": "Tue Jul 01 15:27:02 2025 +0200" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 15:36:06 2025 +0200" }, "message": "ptp: Enable auxiliary clocks for PTP_SYS_OFFSET_EXTENDED\n\nAllow ioctl(PTP_SYS_OFFSET_EXTENDED*) to select CLOCK_AUX clock ids for\ngenerating the pre and post hardware readout timestamps.\n\nAside of adding these clocks to the clock ID validation, this also requires\nto check the timestamp to be valid, i.e. the seconds value being greater\nthan or equal zero. This is necessary because AUX clocks can be\nasynchronously enabled or disabled, so there is no way to validate the\navailability upfront.\n\nThe same could have been achieved by handing the return value of\nktime_get_aux_ts64() all the way down to the IOCTL call site, but that\u0027d\nrequire to modify all existing ptp::gettimex64() callbacks and their inner\ncall chains. The timestamp check achieves the same with less churn and less\ncomplicated code all over the place.\n\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nReviewed-by: Vadim Fedorenko \u003cvadim.fedorenko@linux.dev\u003e\nLink: https://patch.msgid.link/20250701132628.491315452@linutronix.de\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "4c09a4cebd0320c5381afad3fb6f997f20082a3b", "tree": "28c2a5d232fedf65efc35515e4fbcfb1138e6d67", "parents": [ "4f38a6db7bcfc4502c08f4095d2abf686828cff9" ], "author": { "name": "Thomas Gleixner", "email": "tglx@linutronix.de", "time": "Tue Jul 01 15:27:00 2025 +0200" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 15:36:04 2025 +0200" }, "message": "ptp: Use ktime_get_clock_ts64() for timestamping\n\nThe inlined ptp_read_system_[pre|post]ts() switch cases expand to a copious\namount of text in drivers, e.g. ~500 bytes in e1000e. Adding auxiliary\nclock support to the inlines would increase it further.\n\nReplace the inline switch case with a call to ktime_get_clock_ts64(), which\nreduces the code size in drivers and allows to access auxiliary clocks once\nthey are enabled in the IOCTL parameter filter.\n\nNo functional change.\n\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nReviewed-by: Vadim Fedorenko \u003cvadim.fedorenko@linux.dev\u003e\nAcked-by: John Stultz \u003cjstultz@google.com\u003e\nLink: https://patch.msgid.link/20250701132628.426168092@linutronix.de\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "4f38a6db7bcfc4502c08f4095d2abf686828cff9", "tree": "4e74aab7dafcc41799fab590858ed934c5e34d3d", "parents": [ "135faae63218808475501b1d4eab8b2342a131f9", "5b605dbee07dda8fd538af1f07cbf1baf0a49cbc" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 15:35:07 2025 +0200" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 15:35:07 2025 +0200" }, "message": "Merge tag \u0027ktime-get-clock-ts64-for-ptp\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nBase implementation for PTP with a temporary CLOCK_AUX* workaround to\nallow integration of depending changes into the networking tree.\n\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "135faae63218808475501b1d4eab8b2342a131f9", "tree": "c1643e402baf811854785e43451dd470a05a1637", "parents": [ "8b98f34ce1d8c520403362cb785231f9898eb3ff" ], "author": { "name": "Seth Forshee (DigitalOcean)", "email": "sforshee@kernel.org", "time": "Wed Jun 25 11:01:24 2025 -0500" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 15:24:40 2025 +0200" }, "message": "bonding: don\u0027t force LACPDU tx to ~333 ms boundaries\n\nThe timer which ensures that no more than 3 LACPDUs are transmitted in\na second rearms itself every 333ms regardless of whether an LACPDU is\ntransmitted when the timer expires. This causes LACPDU tx to be delayed\nuntil the next expiration of the timer, which effectively aligns LACPDUs\nto ~333ms boundaries. This results in a variable amount of jitter in the\ntiming of periodic LACPDUs.\n\nChange this to only rearm the timer when an LACPDU is actually sent,\nallowing tx at any point after the timer has expired.\n\nSigned-off-by: Seth Forshee (DigitalOcean) \u003csforshee@kernel.org\u003e\nReviewed-by: Carlos Bilbao \u003ccarlos.bilbao@kernel.org\u003e\nLink: https://patch.msgid.link/20250625-fix-lacpdu-jitter-v1-1-4d0ee627e1ba@kernel.org\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "5b605dbee07dda8fd538af1f07cbf1baf0a49cbc", "tree": "6b85d5c42945b6d206898c656c70e192697d3e2d", "parents": [ "19272b37aa4f83ca52bdf9c16d5d81bdd1354494" ], "author": { "name": "Thomas Gleixner", "email": "tglx@linutronix.de", "time": "Tue Jul 01 15:26:58 2025 +0200" }, "committer": { "name": "Thomas Gleixner", "email": "tglx@linutronix.de", "time": "Thu Jul 03 14:18:06 2025 +0200" }, "message": "timekeeping: Provide ktime_get_clock_ts64()\n\nPTP implements an inline switch case for taking timestamps from various\nPOSIX clock IDs, which already consumes quite some text space. Expanding it\nfor auxiliary clocks really becomes too big for inlining.\n\nProvide a out of line version. \n\nThe function invalidates the timestamp in case the clock is invalid. The\ninvalidation allows to implement a validation check without the need to\npropagate a return value through deep existing call chains.\n\nDue to merge logistics this temporarily defines CLOCK_AUX[_LAST] if\nundefined, so that the plain branch, which does not contain any of the core\ntimekeeper changes, can be pulled into the networking tree as prerequisite\nfor the PTP side changes. These temporary defines are removed after that\nbranch is merged into the tip::timers/ptp branch. That way the result in\n-next or upstream in the next merge window has zero dependencies.\n\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nReviewed-by: Vadim Fedorenko \u003cvadim.fedorenko@linux.dev\u003e\nAcked-by: John Stultz \u003cjstultz@google.com\u003e\nLink: https://lore.kernel.org/all/20250701132628.357686408@linutronix.de\n\n" }, { "commit": "9a5d769c9084678c0f21c3f9cf83ca17466a16fb", "tree": "927890255116ddd1c4f740d25d5348377a2ac2cb", "parents": [ "86731a2a651e58953fc949573895f2fa6d456841", "4c46a471be12216347ba707f8eadadbf5d68e698" ], "author": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Thu Jul 03 13:56:15 2025 +0200" }, "committer": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Thu Jul 03 13:56:21 2025 +0200" }, "message": "Merge tag \u0027ffa-fixes-6.16\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/sudeep.holla/linux into arm/fixes\n\nArm FF-A fixes for v6.16\n\nCouple of fixes to address:\n\n1. The safety and memory issues in the FF-A notification callback handler:\n\n The fixes replaces a mutex with an rwlock to prevent sleeping in atomic\n context, resolving kernel warnings. Memory allocation is moved outside\n the lock to support this transition safely. Additionally, a memory leak\n in the notifier unregistration path is fixed by properly freeing the\n callback node.\n\n2. The missing entry in struct ffa_indirect_msg_hdr:\n\n The fix adds the missing 32 bit reserved entry in the structure as\n required by the FF-A specification.\n\n* tag \u0027ffa-fixes-6.16\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/sudeep.holla/linux:\n firmware: arm_ffa: Fix the missing entry in struct ffa_indirect_msg_hdr\n firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic context\n firmware: arm_ffa: Move memory allocation outside the mutex locking\n firmware: arm_ffa: Fix memory leak by freeing notifier callback node\n\nLink: https://lore.kernel.org/r/20250609105207.1185570-1-sudeep.holla@arm.com\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\n" }, { "commit": "c9764fd88bc744592b0604ccb6b6fc1a5f76b4e3", "tree": "7658e88cadc707a6b965c201491039d884f33d99", "parents": [ "6729c134ccc0d37d865c342e466b90df29081f1a" ], "author": { "name": "Manivannan Sadhasivam", "email": "mani@kernel.org", "time": "Thu Jul 03 16:05:49 2025 +0530" }, "committer": { "name": "Mark Brown", "email": "broonie@kernel.org", "time": "Thu Jul 03 12:22:35 2025 +0100" }, "message": "regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods\n\ndrvdata::gpiods is supposed to hold an array of \u0027gpio_desc\u0027 pointers. But\nthe memory is allocated for only one pointer. This will lead to\nout-of-bounds access later in the code if \u0027config::ngpios\u0027 is \u003e 1. So\nfix the code to allocate enough memory to hold \u0027config::ngpios\u0027 of GPIO\ndescriptors.\n\nWhile at it, also move the check for memory allocation failure to be below\nthe allocation to make it more readable.\n\nCc: stable@vger.kernel.org # 5.0\nFixes: d6cd33ad7102 (\"regulator: gpio: Convert to use descriptors\")\nSigned-off-by: Manivannan Sadhasivam \u003cmani@kernel.org\u003e\nLink: https://patch.msgid.link/20250703103549.16558-1-mani@kernel.org\nSigned-off-by: Mark Brown \u003cbroonie@kernel.org\u003e\n" }, { "commit": "de1675de39aa945bad5937d1fde4df3682670639", "tree": "60466bacdb49353aebca314c888feb1731788588", "parents": [ "234f71555019d308c6bc6f98c78c5551cb8cd56a" ], "author": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Thu Jul 03 12:54:55 2025 +0200" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Thu Jul 03 13:00:11 2025 +0200" }, "message": "Revert \"ACPI: battery: negate current when discharging\"\n\nRevert commit 234f71555019 (\"ACPI: battery: negate current when\ndischarging\") breaks not one but several userspace implementations\nof battery monitoring: Steam and MangoHud. Perhaps it breaks more,\nbut those are the two that have been tested.\n\nReported-by: Matthew Schwartz \u003cmatthew.schwartz@linux.dev\u003e\nCloses: https://lore.kernel.org/linux-acpi/87C1B2AF-D430-4568-B620-14B941A8ABA4@linux.dev/\nSigned-off-by: Rafael J. Wysocki \u003crafael.j.wysocki@intel.com\u003e\n" }, { "commit": "223e2288f4b8c262a864e2c03964ffac91744cd5", "tree": "96b17e5437f7bc840cf0d540664c5537cccb3a3f", "parents": [ "f030713e5abf67d0a88864c8855f809c763af954" ], "author": { "name": "HarshaVardhana S A", "email": "harshavardhana.sa@broadcom.com", "time": "Tue Jul 01 14:22:54 2025 +0200" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 12:52:52 2025 +0200" }, "message": "vsock/vmci: Clear the vmci transport packet properly when initializing it\n\nIn vmci_transport_packet_init memset the vmci_transport_packet before\npopulating the fields to avoid any uninitialised data being left in the\nstructure.\n\nCc: Bryan Tan \u003cbryan-bt.tan@broadcom.com\u003e\nCc: Vishnu Dasa \u003cvishnu.dasa@broadcom.com\u003e\nCc: Broadcom internal kernel review list\nCc: Stefano Garzarella \u003csgarzare@redhat.com\u003e\nCc: \"David S. Miller\" \u003cdavem@davemloft.net\u003e\nCc: Eric Dumazet \u003cedumazet@google.com\u003e\nCc: Jakub Kicinski \u003ckuba@kernel.org\u003e\nCc: Paolo Abeni \u003cpabeni@redhat.com\u003e\nCc: Simon Horman \u003chorms@kernel.org\u003e\nCc: virtualization@lists.linux.dev\nCc: netdev@vger.kernel.org\nCc: stable \u003cstable@kernel.org\u003e\nSigned-off-by: HarshaVardhana S A \u003charshavardhana.sa@broadcom.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nFixes: d021c344051a (\"VSOCK: Introduce VM Sockets\")\nAcked-by: Stefano Garzarella \u003csgarzare@redhat.com\u003e\nLink: https://patch.msgid.link/20250701122254.2397440-1-gregkh@linuxfoundation.org\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "f030713e5abf67d0a88864c8855f809c763af954", "tree": "a12368d7bcaba5626d88aa1822ac44f03df403f1", "parents": [ "b2f8ef030ef77130844c4b6f1eee28553163d5a7" ], "author": { "name": "Krzysztof Kozlowski", "email": "krzysztof.kozlowski@linaro.org", "time": "Tue Jul 01 08:36:22 2025 +0200" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 11:54:26 2025 +0200" }, "message": "dt-bindings: net: sophgo,sg2044-dwmac: Drop status from the example\n\nExamples should be complete and should not have a \u0027status\u0027 property,\nespecially a disabled one because this disables the dt_binding_check of\nthe example against the schema. Dropping \u0027status\u0027 property shows\nmissing other properties - phy-mode and phy-handle.\n\nFixes: 114508a89ddc (\"dt-bindings: net: Add support for Sophgo SG2044 dwmac\")\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Krzysztof Kozlowski \u003ckrzysztof.kozlowski@linaro.org\u003e\nReviewed-by: Alexander Sverdlin \u003calexander.sverdlin@gmail.com\u003e\nReviewed-by: Chen Wang \u003cunicorn_wang@outlook.com\u003e\nLink: https://patch.msgid.link/20250701063621.23808-2-krzysztof.kozlowski@linaro.org\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "b2f8ef030ef77130844c4b6f1eee28553163d5a7", "tree": "bba831877b11b6acb6a9cbe74210d5142e2a2355", "parents": [ "b0727b0ccd907aa669ba48027f29019f1c48d42c", "4174c0c331a2aa3322d3b3be532808deb041b37d" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 11:51:41 2025 +0200" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 11:51:42 2025 +0200" }, "message": "Merge branch \u0027fix-irq-vectors\u0027\n\nJiawen Wu says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nFix IRQ vectors\n\nThe interrupt vector order was adjusted by [1]commit 937d46ecc5f9 (\"net:\nwangxun: add ethtool_ops for channel number\") in Linux-6.8. Because at\nthat time, the MISC interrupt acts as the parent interrupt in the GPIO\nIRQ chip. When the number of Rx/Tx ring changes, the last MISC\ninterrupt must be reallocated. Then the GPIO interrupt controller would\nbe corrupted. So the initial plan was to adjust the sequence of the\ninterrupt vectors, let MISC interrupt to be the first one and do not\nfree it.\n\nLater, irq_domain was introduced in [2]commit aefd013624a1 (\"net: txgbe:\nuse irq_domain for interrupt controller\") to avoid this problem.\nHowever, the vector sequence adjustment was not reverted. So there is\nstill one problem that has been left unresolved.\n\nDue to hardware limitations of NGBE, queue IRQs can only be requested\non vector 0 to 7. When the number of queues is set to the maximum 8,\nthe PCI IRQ vectors are allocated from 0 to 8. The vector 0 is used by\nMISC interrupt, and althrough the vector 8 is used by queue interrupt,\nit is unable to receive packets. This will cause some packets to be\ndropped when RSS is enabled and they are assigned to queue 8.\n\nThis patch set fix the above problems.\n\n[1] https://git.kernel.org/netdev/net-next/c/937d46ecc5f9\n[2] https://git.kernel.org/netdev/net-next/c/aefd013624a1\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20250701063030.59340-1-jiawenwu@trustnetic.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "4174c0c331a2aa3322d3b3be532808deb041b37d", "tree": "bba831877b11b6acb6a9cbe74210d5142e2a2355", "parents": [ "e37546ad1f9b2c777d3a21d7e50ce265ee3dece8" ], "author": { "name": "Jiawen Wu", "email": "jiawenwu@trustnetic.com", "time": "Tue Jul 01 14:30:30 2025 +0800" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 11:51:40 2025 +0200" }, "message": "net: ngbe: specify IRQ vector when the number of VFs is 7\n\nFor NGBE devices, the queue number is limited to be 1 when SRIOV is\nenabled. In this case, IRQ vector[0] is used for MISC and vector[1] is\nused for queue, based on the previous patches. But for the hardware\ndesign, the IRQ vector[1] must be allocated for use by the VF[6] when\nthe number of VFs is 7. So the IRQ vector[0] should be shared for PF\nMISC and QUEUE interrupts.\n\n+-----------+----------------------+\n| Vector | Assigned To |\n+-----------+----------------------+\n| Vector 0 | PF MISC and QUEUE |\n| Vector 1 | VF 6 |\n| Vector 2 | VF 5 |\n| Vector 3 | VF 4 |\n| Vector 4 | VF 3 |\n| Vector 5 | VF 2 |\n| Vector 6 | VF 1 |\n| Vector 7 | VF 0 |\n+-----------+----------------------+\n\nMinimize code modifications, only adjust the IRQ vector number for this\ncase.\n\nFixes: 877253d2cbf2 (\"net: ngbe: add sriov function support\")\nSigned-off-by: Jiawen Wu \u003cjiawenwu@trustnetic.com\u003e\nReviewed-by: Larysa Zaremba \u003clarysa.zaremba@intel.com\u003e\nLink: https://patch.msgid.link/20250701063030.59340-4-jiawenwu@trustnetic.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "e37546ad1f9b2c777d3a21d7e50ce265ee3dece8", "tree": "c0e0f6259b5a8cbfca4380e73a061f4678d04826", "parents": [ "cc9f7f65cd2f31150b10e6956f1f0882e1bbae49" ], "author": { "name": "Jiawen Wu", "email": "jiawenwu@trustnetic.com", "time": "Tue Jul 01 14:30:29 2025 +0800" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 11:51:40 2025 +0200" }, "message": "net: wangxun: revert the adjustment of the IRQ vector sequence\n\nDue to hardware limitations of NGBE, queue IRQs can only be requested\non vector 0 to 7. When the number of queues is set to the maximum 8,\nthe PCI IRQ vectors are allocated from 0 to 8. The vector 0 is used by\nMISC interrupt, and althrough the vector 8 is used by queue interrupt,\nit is unable to receive packets. This will cause some packets to be\ndropped when RSS is enabled and they are assigned to queue 8.\n\nSo revert the adjustment of the MISC IRQ location, to make it be the\nlast one in IRQ vectors.\n\nFixes: 937d46ecc5f9 (\"net: wangxun: add ethtool_ops for channel number\")\nCc: stable@vger.kernel.org\nSigned-off-by: Jiawen Wu \u003cjiawenwu@trustnetic.com\u003e\nReviewed-by: Larysa Zaremba \u003clarysa.zaremba@intel.com\u003e\nLink: https://patch.msgid.link/20250701063030.59340-3-jiawenwu@trustnetic.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "cc9f7f65cd2f31150b10e6956f1f0882e1bbae49", "tree": "42df3bca65747801e6700e26a9ca2eb65a4f5f84", "parents": [ "b0727b0ccd907aa669ba48027f29019f1c48d42c" ], "author": { "name": "Jiawen Wu", "email": "jiawenwu@trustnetic.com", "time": "Tue Jul 01 14:30:28 2025 +0800" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 11:51:39 2025 +0200" }, "message": "net: txgbe: request MISC IRQ in ndo_open\n\nMove the creating of irq_domain for MISC IRQ from .probe to .ndo_open,\nand free it in .ndo_stop, to maintain consistency with the queue IRQs.\nThis it for subsequent adjustments to the IRQ vectors.\n\nFixes: aefd013624a1 (\"net: txgbe: use irq_domain for interrupt controller\")\nCc: stable@vger.kernel.org\nSigned-off-by: Jiawen Wu \u003cjiawenwu@trustnetic.com\u003e\nReviewed-by: Michal Swiatkowski \u003cmichal.swiatkowski@linux.intel.com\u003e\nLink: https://patch.msgid.link/20250701063030.59340-2-jiawenwu@trustnetic.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "b0727b0ccd907aa669ba48027f29019f1c48d42c", "tree": "27c56a662c6e7a5530d251c88cfec275738b98d6", "parents": [ "5177373c31318c3c6a190383bfd232e6cf565c36", "24b2f5df86aaebbe7bac40304eaf5a146c02367c" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 11:40:04 2025 +0200" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 11:40:04 2025 +0200" }, "message": "Merge branch \u0027virtio-fixes-for-tx-ring-sizing-and-resize-error-reporting\u0027\n\nLaurent Vivier says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nvirtio: Fixes for TX ring sizing and resize error reporting\n\nThis patch series contains two fixes and a cleanup for the virtio subsystem.\n\nThe first patch fixes an error reporting bug in virtio_ring\u0027s\nvirtqueue_resize() function. Previously, errors from internal resize\nhelpers could be masked if the subsequent re-enabling of the virtqueue\nsucceeded. This patch restores the correct error propagation, ensuring that\ncallers of virtqueue_resize() are properly informed of underlying resize\nfailures.\n\nThe second patch does a cleanup of the use of \u00272+MAX_SKB_FRAGS\u0027\n\nThe third patch addresses a reliability issue in virtio_net where the TX\nring size could be configured too small, potentially leading to\npersistently stopped queues and degraded performance. It enforces a\nminimum TX ring size to ensure there\u0027s always enough space for at least one\nmaximally-fragmented packet plus an additional slot.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20250521092236.661410-1-lvivier@redhat.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "24b2f5df86aaebbe7bac40304eaf5a146c02367c", "tree": "27c56a662c6e7a5530d251c88cfec275738b98d6", "parents": [ "bd2948d2581ebd31745c1b7094a470513789555f" ], "author": { "name": "Laurent Vivier", "email": "lvivier@redhat.com", "time": "Wed May 21 11:22:36 2025 +0200" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 11:40:02 2025 +0200" }, "message": "virtio_net: Enforce minimum TX ring size for reliability\n\nThe `tx_may_stop()` logic stops TX queues if free descriptors\n(`sq-\u003evq-\u003enum_free`) fall below the threshold of (`MAX_SKB_FRAGS` + 2).\nIf the total ring size (`ring_num`) is not strictly greater than this\nvalue, queues can become persistently stopped or stop after minimal\nuse, severely degrading performance.\n\nA single sk_buff transmission typically requires descriptors for:\n- The virtio_net_hdr (1 descriptor)\n- The sk_buff\u0027s linear data (head) (1 descriptor)\n- Paged fragments (up to MAX_SKB_FRAGS descriptors)\n\nThis patch enforces that the TX ring size (\u0027ring_num\u0027) must be strictly\ngreater than (MAX_SKB_FRAGS + 2). This ensures that the ring is\nalways large enough to hold at least one maximally-fragmented packet\nplus at least one additional slot.\n\nReported-by: Lei Yang \u003cleiyang@redhat.com\u003e\nSigned-off-by: Laurent Vivier \u003clvivier@redhat.com\u003e\nReviewed-by: Xuan Zhuo \u003cxuanzhuo@linux.alibaba.com\u003e\nAcked-by: Jason Wang \u003cjasowang@redhat.com\u003e\nLink: https://patch.msgid.link/20250521092236.661410-4-lvivier@redhat.com\nTested-by: Lei Yang \u003cleiyang@redhat.com\u003e\nAcked-by: Michael S. Tsirkin \u003cmst@redhat.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "bd2948d2581ebd31745c1b7094a470513789555f", "tree": "1f426641d06aad5bb099327090f4f2583839070f", "parents": [ "45ebc7e6c125ce93d2ddf82cd5bea20121bb0258" ], "author": { "name": "Laurent Vivier", "email": "lvivier@redhat.com", "time": "Wed May 21 11:22:35 2025 +0200" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 11:40:02 2025 +0200" }, "message": "virtio_net: Cleanup \u00272+MAX_SKB_FRAGS\u0027\n\nImprove consistency by using everywhere it is needed\n\u0027MAX_SKB_FRAGS + 2\u0027 rather than \u00272+MAX_SKB_FRAGS\u0027 or\n\u00272 + MAX_SKB_FRAGS\u0027.\n\nNo functional change.\n\nSigned-off-by: Laurent Vivier \u003clvivier@redhat.com\u003e\nReviewed-by: Xuan Zhuo \u003cxuanzhuo@linux.alibaba.com\u003e\nAcked-by: Jason Wang \u003cjasowang@redhat.com\u003e\nLink: https://patch.msgid.link/20250521092236.661410-3-lvivier@redhat.com\nTested-by: Lei Yang \u003cleiyang@redhat.com\u003e\nAcked-by: Michael S. Tsirkin \u003cmst@redhat.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "45ebc7e6c125ce93d2ddf82cd5bea20121bb0258", "tree": "a744e667096db722ef3e52b80d43f22835c43d67", "parents": [ "5177373c31318c3c6a190383bfd232e6cf565c36" ], "author": { "name": "Laurent Vivier", "email": "lvivier@redhat.com", "time": "Wed May 21 11:22:34 2025 +0200" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 11:40:02 2025 +0200" }, "message": "virtio_ring: Fix error reporting in virtqueue_resize\n\nThe virtqueue_resize() function was not correctly propagating error codes\nfrom its internal resize helper functions, specifically\nvirtqueue_resize_packet() and virtqueue_resize_split(). If these helpers\nreturned an error, but the subsequent call to virtqueue_enable_after_reset()\nsucceeded, the original error from the resize operation would be masked.\nConsequently, virtqueue_resize() could incorrectly report success to its\ncaller despite an underlying resize failure.\n\nThis change restores the original code behavior:\n\n if (vdev-\u003econfig-\u003eenable_vq_after_reset(_vq))\n return -EBUSY;\n\n return err;\n\nFix: commit ad48d53b5b3f (\"virtio_ring: separate the logic of reset/enable from virtqueue_resize\")\nCc: xuanzhuo@linux.alibaba.com\nSigned-off-by: Laurent Vivier \u003clvivier@redhat.com\u003e\nAcked-by: Jason Wang \u003cjasowang@redhat.com\u003e\nLink: https://patch.msgid.link/20250521092236.661410-2-lvivier@redhat.com\nTested-by: Lei Yang \u003cleiyang@redhat.com\u003e\nAcked-by: Michael S. Tsirkin \u003cmst@redhat.com\u003e\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "38224c472a038fa9ccd4085511dd9f3d6119dbf9", "tree": "c415ace4b202e37ee2b283670656e643295cd02e", "parents": [ "194808a1ea391e35d364d6c9406e2eccb6174525" ], "author": { "name": "Qasim Ijaz", "email": "qasdev00@gmail.com", "time": "Tue Jun 24 13:52:56 2025 +0100" }, "committer": { "name": "Jiri Kosina", "email": "jkosina@suse.com", "time": "Thu Jul 03 11:34:49 2025 +0200" }, "message": "HID: appletb-kbd: fix slab use-after-free bug in appletb_kbd_probe\n\nIn probe appletb_kbd_probe() a \"struct appletb_kbd *kbd\" is allocated\nvia devm_kzalloc() to store touch bar keyboard related data.\nLater on if backlight_device_get_by_name() finds a backlight device\nwith name \"appletb_backlight\" a timer (kbd-\u003einactivity_timer) is setup\nwith appletb_inactivity_timer() and the timer is armed to run after\nappletb_tb_dim_timeout (60) seconds.\n\nA use-after-free is triggered when failure occurs after the timer is\narmed. This ultimately means probe failure occurs and as a result the\n\"struct appletb_kbd *kbd\" which is device managed memory is freed.\nAfter 60 seconds the timer will have expired and __run_timers will\nattempt to access the timer (kbd-\u003einactivity_timer) however the kdb\nstructure has been freed causing a use-after free.\n\n[ 71.636938] \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n[ 71.637915] BUG: KASAN: slab-use-after-free in __run_timers+0x7ad/0x890\n[ 71.637915] Write of size 8 at addr ffff8881178c5958 by task swapper/1/0\n[ 71.637915]\n[ 71.637915] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc2-00318-g739a6c93cc75-dirty #12 PREEMPT(voluntary)\n[ 71.637915] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014\n[ 71.637915] Call Trace:\n[ 71.637915] \u003cIRQ\u003e\n[ 71.637915] dump_stack_lvl+0x53/0x70\n[ 71.637915] print_report+0xce/0x670\n[ 71.637915] ? __run_timers+0x7ad/0x890\n[ 71.637915] kasan_report+0xce/0x100\n[ 71.637915] ? __run_timers+0x7ad/0x890\n[ 71.637915] __run_timers+0x7ad/0x890\n[ 71.637915] ? __pfx___run_timers+0x10/0x10\n[ 71.637915] ? update_process_times+0xfc/0x190\n[ 71.637915] ? __pfx_update_process_times+0x10/0x10\n[ 71.637915] ? _raw_spin_lock_irq+0x80/0xe0\n[ 71.637915] ? _raw_spin_lock_irq+0x80/0xe0\n[ 71.637915] ? __pfx__raw_spin_lock_irq+0x10/0x10\n[ 71.637915] run_timer_softirq+0x141/0x240\n[ 71.637915] ? __pfx_run_timer_softirq+0x10/0x10\n[ 71.637915] ? __pfx___hrtimer_run_queues+0x10/0x10\n[ 71.637915] ? kvm_clock_get_cycles+0x18/0x30\n[ 71.637915] ? ktime_get+0x60/0x140\n[ 71.637915] handle_softirqs+0x1b8/0x5c0\n[ 71.637915] ? __pfx_handle_softirqs+0x10/0x10\n[ 71.637915] irq_exit_rcu+0xaf/0xe0\n[ 71.637915] sysvec_apic_timer_interrupt+0x6c/0x80\n[ 71.637915] \u003c/IRQ\u003e\n[ 71.637915]\n[ 71.637915] Allocated by task 39:\n[ 71.637915] kasan_save_stack+0x33/0x60\n[ 71.637915] kasan_save_track+0x14/0x30\n[ 71.637915] __kasan_kmalloc+0x8f/0xa0\n[ 71.637915] __kmalloc_node_track_caller_noprof+0x195/0x420\n[ 71.637915] devm_kmalloc+0x74/0x1e0\n[ 71.637915] appletb_kbd_probe+0x37/0x3c0\n[ 71.637915] hid_device_probe+0x2d1/0x680\n[ 71.637915] really_probe+0x1c3/0x690\n[ 71.637915] __driver_probe_device+0x247/0x300\n[ 71.637915] driver_probe_device+0x49/0x210\n[...]\n[ 71.637915]\n[ 71.637915] Freed by task 39:\n[ 71.637915] kasan_save_stack+0x33/0x60\n[ 71.637915] kasan_save_track+0x14/0x30\n[ 71.637915] kasan_save_free_info+0x3b/0x60\n[ 71.637915] __kasan_slab_free+0x37/0x50\n[ 71.637915] kfree+0xcf/0x360\n[ 71.637915] devres_release_group+0x1f8/0x3c0\n[ 71.637915] hid_device_probe+0x315/0x680\n[ 71.637915] really_probe+0x1c3/0x690\n[ 71.637915] __driver_probe_device+0x247/0x300\n[ 71.637915] driver_probe_device+0x49/0x210\n[...]\n\nThe root cause of the issue is that the timer is not disarmed\non failure paths leading to it remaining active and accessing\nfreed memory. To fix this call timer_delete_sync() to deactivate\nthe timer.\n\nAnother small issue is that timer_delete_sync is called\nunconditionally in appletb_kbd_remove(), fix this by checking\nfor a valid kbd-\u003ebacklight_dev before calling timer_delete_sync.\n\nFixes: 93a0fc489481 (\"HID: hid-appletb-kbd: add support for automatic brightness control while using the touchbar\")\nCc: stable@vger.kernel.org\nSigned-off-by: Qasim Ijaz \u003cqasdev00@gmail.com\u003e\nReviewed-by: Aditya Garg \u003cgargaditya08@live.com\u003e\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.com\u003e\n" }, { "commit": "5177373c31318c3c6a190383bfd232e6cf565c36", "tree": "544872488cc2a5026a7fbc990fb67d8af078479b", "parents": [ "c9cbbe7ab6f31ba91c47c09eee75017d5b69462d" ], "author": { "name": "Bui Quang Minh", "email": "minhquangbui99@gmail.com", "time": "Mon Jun 30 22:13:14 2025 +0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 11:23:03 2025 +0200" }, "message": "virtio-net: xsk: rx: fix the frame\u0027s length check\n\nWhen calling buf_to_xdp, the len argument is the frame data\u0027s length\nwithout virtio header\u0027s length (vi-\u003ehdr_len). We check that len with\n\n\txsk_pool_get_rx_frame_size() + vi-\u003ehdr_len\n\nto ensure the provided len does not larger than the allocated chunk\nsize. The additional vi-\u003ehdr_len is because in virtnet_add_recvbuf_xsk,\nwe use part of XDP_PACKET_HEADROOM for virtio header and ask the vhost\nto start placing data from\n\n\thard_start + XDP_PACKET_HEADROOM - vi-\u003ehdr_len\nnot\n\thard_start + XDP_PACKET_HEADROOM\n\nBut the first buffer has virtio_header, so the maximum frame\u0027s length in\nthe first buffer can only be\n\n\txsk_pool_get_rx_frame_size()\nnot\n\txsk_pool_get_rx_frame_size() + vi-\u003ehdr_len\n\nlike in the current check.\n\nThis commit adds an additional argument to buf_to_xdp differentiate\nbetween the first buffer and other ones to correctly calculate the maximum\nframe\u0027s length.\n\nCc: stable@vger.kernel.org\nReviewed-by: Xuan Zhuo \u003cxuanzhuo@linux.alibaba.com\u003e\nFixes: a4e7ba702701 (\"virtio_net: xsk: rx: support recv small mode\")\nSigned-off-by: Bui Quang Minh \u003cminhquangbui99@gmail.com\u003e\nLink: https://patch.msgid.link/20250630151315.86722-2-minhquangbui99@gmail.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "c9cbbe7ab6f31ba91c47c09eee75017d5b69462d", "tree": "0fbfc5015389c790985378be55574b37afdbcea6", "parents": [ "bd475eeaaf3cad1b183418fff7b19c9b1e3d1c4f", "7d4a119e45828e643baedea2d2ac736804bc85ee" ], "author": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 10:56:57 2025 +0200" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 10:56:57 2025 +0200" }, "message": "Merge branch \u0027virtio-net-fixes-for-mergeable-xdp-receive-path\u0027\n\nBui Quang Minh says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nvirtio-net: fixes for mergeable XDP receive path\n\nThis series contains fixes for XDP receive path in virtio-net\n- Patch 1: add a missing check for the received data length with our\nallocated buffer size in mergeable mode.\n- Patch 2: remove a redundant truesize check with PAGE_SIZE in mergeable\nmode\n- Patch 3: make the current repeated code use the check_mergeable_len to\ncheck for received data length in mergeable mode\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20250630144212.48471-1-minhquangbui99@gmail.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n" }, { "commit": "7d4a119e45828e643baedea2d2ac736804bc85ee", "tree": "0fbfc5015389c790985378be55574b37afdbcea6", "parents": [ "4be2193b3393dca33504793fe7586fed547abb5d" ], "author": { "name": "Bui Quang Minh", "email": "minhquangbui99@gmail.com", "time": "Mon Jun 30 21:42:12 2025 +0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 10:56:55 2025 +0200" }, "message": "virtio-net: use the check_mergeable_len helper\n\nReplace the current repeated code to check received length in mergeable\nmode with the new check_mergeable_len helper.\n\nSigned-off-by: Bui Quang Minh \u003cminhquangbui99@gmail.com\u003e\nAcked-by: Jason Wang \u003cjasowang@redhat.com\u003e\nLink: https://patch.msgid.link/20250630144212.48471-4-minhquangbui99@gmail.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "4be2193b3393dca33504793fe7586fed547abb5d", "tree": "c8243b512778c1bf3cd99db0a63963fae4db36f0", "parents": [ "315dbdd7cdf6aa533829774caaf4d25f1fd20e73" ], "author": { "name": "Bui Quang Minh", "email": "minhquangbui99@gmail.com", "time": "Mon Jun 30 21:42:11 2025 +0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 10:56:55 2025 +0200" }, "message": "virtio-net: remove redundant truesize check with PAGE_SIZE\n\nThe truesize is guaranteed not to exceed PAGE_SIZE in\nget_mergeable_buf_len(). It is saved in mergeable context, which is not\nchangeable by the host side, so the check in receive path is quite\nredundant.\n\nAcked-by: Jason Wang \u003cjasowang@redhat.com\u003e\nSigned-off-by: Bui Quang Minh \u003cminhquangbui99@gmail.com\u003e\nLink: https://patch.msgid.link/20250630144212.48471-3-minhquangbui99@gmail.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "315dbdd7cdf6aa533829774caaf4d25f1fd20e73", "tree": "8a9bfc7c21657e2562812e73cc367fad131b6f6a", "parents": [ "bd475eeaaf3cad1b183418fff7b19c9b1e3d1c4f" ], "author": { "name": "Bui Quang Minh", "email": "minhquangbui99@gmail.com", "time": "Mon Jun 30 21:42:10 2025 +0700" }, "committer": { "name": "Paolo Abeni", "email": "pabeni@redhat.com", "time": "Thu Jul 03 10:56:55 2025 +0200" }, "message": "virtio-net: ensure the received length does not exceed allocated size\n\nIn xdp_linearize_page, when reading the following buffers from the ring,\nwe forget to check the received length with the true allocate size. This\ncan lead to an out-of-bound read. This commit adds that missing check.\n\nCc: \u003cstable@vger.kernel.org\u003e\nFixes: 4941d472bf95 (\"virtio-net: do not reset during XDP set\")\nSigned-off-by: Bui Quang Minh \u003cminhquangbui99@gmail.com\u003e\nAcked-by: Jason Wang \u003cjasowang@redhat.com\u003e\nLink: https://patch.msgid.link/20250630144212.48471-2-minhquangbui99@gmail.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n" }, { "commit": "ba677dbe77af5ffe6204e0f3f547f3ba059c6302", "tree": "f3facef8360243e600fd4a4249a2e6cb5382104b", "parents": [ "7b4c5a37544ba22c6ebe72c0d4ea56c953459fa5" ], "author": { "name": "Peter Zijlstra", "email": "peterz@infradead.org", "time": "Wed Jul 02 18:21:44 2025 +0200" }, "committer": { "name": "Peter Zijlstra", "email": "peterz@infradead.org", "time": "Thu Jul 03 10:33:55 2025 +0200" }, "message": "perf: Revert to requiring CAP_SYS_ADMIN for uprobes\n\nJann reports that uprobes can be used destructively when used in the\nmiddle of an instruction. The kernel only verifies there is a valid\ninstruction at the requested offset, but due to variable instruction\nlength cannot determine if this is an instruction as seen by the\nintended execution stream.\n\nAdditionally, Mark Rutland notes that on architectures that mix data\nin the text segment (like arm64), a similar things can be done if the\ndata word is \u0027mistaken\u0027 for an instruction.\n\nAs such, require CAP_SYS_ADMIN for uprobes.\n\nFixes: c9e0924e5c2b (\"perf/core: open access to probes for CAP_PERFMON privileged process\")\nReported-by: Jann Horn \u003cjannh@google.com\u003e\nSigned-off-by: Peter Zijlstra (Intel) \u003cpeterz@infradead.org\u003e\nLink: https://lkml.kernel.org/r/CAG48ez1n4520sq0XrWYDHKiKxE_+WCfAK+qt9qkY4ZiBGmL-5g@mail.gmail.com\n" }, { "commit": "194808a1ea391e35d364d6c9406e2eccb6174525", "tree": "16e506b342872c03f36b8ebeb352e4fb63036dba", "parents": [ "50f9ff52c078d66053bba791ded6fafc64055524" ], "author": { "name": "Vicki Pfau", "email": "vi@endrift.com", "time": "Tue Jul 01 20:46:42 2025 -0700" }, "committer": { "name": "Jiri Kosina", "email": "jkosina@suse.com", "time": "Thu Jul 03 09:44:21 2025 +0200" }, "message": "HID: Fix debug name for BTN_GEAR_DOWN, BTN_GEAR_UP, BTN_WHEEL\n\nThe name of BTN_GEAR_DOWN was WheelBtn and BTN_WHEEL was missing. Further,\nBTN_GEAR_UP had a space in its name and no Btn, which is against convention.\nThis makes the names BtnGearDown, BtnGearUp, and BtnWheel, fixing the errors\nand matching convention.\n\nSigned-off-by: Vicki Pfau \u003cvi@endrift.com\u003e\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.com\u003e\n" }, { "commit": "50f9ff52c078d66053bba791ded6fafc64055524", "tree": "49394a7335791ffb6ab9e61b4dbd0c3c72020e3c", "parents": [ "c80f2b047d5cc42fbd2dff9d1942d4ba7545100f" ], "author": { "name": "Leonard Dizon", "email": "leonard@snekbyte.com", "time": "Mon Jun 30 05:48:30 2025 +0800" }, "committer": { "name": "Jiri Kosina", "email": "jkosina@suse.com", "time": "Thu Jul 03 09:38:51 2025 +0200" }, "message": "HID: elecom: add support for ELECOM HUGE 019B variant\n\nThe ELECOM M-HT1DRBK trackball has an additional device ID (056E:019B)\nnot yet recognized by the driver, despite using the same report\ndescriptor as earlier variants. This patch adds the new ID and applies\nthe same fixups, enabling all 8 buttons to function properly.\n\nSigned-off-by: Leonard Dizon \u003cleonard@snekbyte.com\u003e\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.com\u003e\n" }, { "commit": "c80f2b047d5cc42fbd2dff9d1942d4ba7545100f", "tree": "c3c96841df8fcf23029b0c27486d1b3df556c094", "parents": [ "a8905238c3bbe13db90065ed74682418f23830c3" ], "author": { "name": "Qasim Ijaz", "email": "qasdev00@gmail.com", "time": "Fri Jun 27 12:01:21 2025 +0100" }, "committer": { "name": "Jiri Kosina", "email": "jkosina@suse.com", "time": "Thu Jul 03 09:38:05 2025 +0200" }, "message": "HID: appletb-kbd: fix memory corruption of input_handler_list\n\nIn appletb_kbd_probe an input handler is initialised and then registered\nwith input core through input_register_handler(). When this happens input\ncore will add the input handler (specifically its node) to the global\ninput_handler_list. The input_handler_list is central to the functionality\nof input core and is traversed in various places in input core. An example\nof this is when a new input device is plugged in and gets registered with\ninput core.\n\nThe input_handler in probe is allocated as device managed memory. If a\nprobe failure occurs after input_register_handler() the input_handler\nmemory is freed, yet it will remain in the input_handler_list. This\neffectively means the input_handler_list contains a dangling pointer\nto data belonging to a freed input handler.\n\nThis causes an issue when any other input device is plugged in - in my\ncase I had an old PixArt HP USB optical mouse and I decided to\nplug it in after a failure occurred after input_register_handler().\nThis lead to the registration of this input device via\ninput_register_device which involves traversing over every handler\nin the corrupted input_handler_list and calling input_attach_handler(),\ngiving each handler a chance to bind to newly registered device.\n\nThe core of this bug is a UAF which causes memory corruption of\ninput_handler_list and to fix it we must ensure the input handler is\nunregistered from input core, this is done through\ninput_unregister_handler().\n\n[ 63.191597] \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n[ 63.192094] BUG: KASAN: slab-use-after-free in input_attach_handler.isra.0+0x1a9/0x1e0\n[ 63.192094] Read of size 8 at addr ffff888105ea7c80 by task kworker/0:2/54\n[ 63.192094]\n[ 63.192094] CPU: 0 UID: 0 PID: 54 Comm: kworker/0:2 Not tainted 6.16.0-rc2-00321-g2aa6621d\n[ 63.192094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.164\n[ 63.192094] Workqueue: usb_hub_wq hub_event\n[ 63.192094] Call Trace:\n[ 63.192094] \u003cTASK\u003e\n[ 63.192094] dump_stack_lvl+0x53/0x70\n[ 63.192094] print_report+0xce/0x670\n[ 63.192094] kasan_report+0xce/0x100\n[ 63.192094] input_attach_handler.isra.0+0x1a9/0x1e0\n[ 63.192094] input_register_device+0x76c/0xd00\n[ 63.192094] hidinput_connect+0x686d/0xad60\n[ 63.192094] hid_connect+0xf20/0x1b10\n[ 63.192094] hid_hw_start+0x83/0x100\n[ 63.192094] hid_device_probe+0x2d1/0x680\n[ 63.192094] really_probe+0x1c3/0x690\n[ 63.192094] __driver_probe_device+0x247/0x300\n[ 63.192094] driver_probe_device+0x49/0x210\n[ 63.192094] __device_attach_driver+0x160/0x320\n[ 63.192094] bus_for_each_drv+0x10f/0x190\n[ 63.192094] __device_attach+0x18e/0x370\n[ 63.192094] bus_probe_device+0x123/0x170\n[ 63.192094] device_add+0xd4d/0x1460\n[ 63.192094] hid_add_device+0x30b/0x910\n[ 63.192094] usbhid_probe+0x920/0xe00\n[ 63.192094] usb_probe_interface+0x363/0x9a0\n[ 63.192094] really_probe+0x1c3/0x690\n[ 63.192094] __driver_probe_device+0x247/0x300\n[ 63.192094] driver_probe_device+0x49/0x210\n[ 63.192094] __device_attach_driver+0x160/0x320\n[ 63.192094] bus_for_each_drv+0x10f/0x190\n[ 63.192094] __device_attach+0x18e/0x370\n[ 63.192094] bus_probe_device+0x123/0x170\n[ 63.192094] device_add+0xd4d/0x1460\n[ 63.192094] usb_set_configuration+0xd14/0x1880\n[ 63.192094] usb_generic_driver_probe+0x78/0xb0\n[ 63.192094] usb_probe_device+0xaa/0x2e0\n[ 63.192094] really_probe+0x1c3/0x690\n[ 63.192094] __driver_probe_device+0x247/0x300\n[ 63.192094] driver_probe_device+0x49/0x210\n[ 63.192094] __device_attach_driver+0x160/0x320\n[ 63.192094] bus_for_each_drv+0x10f/0x190\n[ 63.192094] __device_attach+0x18e/0x370\n[ 63.192094] bus_probe_device+0x123/0x170\n[ 63.192094] device_add+0xd4d/0x1460\n[ 63.192094] usb_new_device+0x7b4/0x1000\n[ 63.192094] hub_event+0x234d/0x3fa0\n[ 63.192094] process_one_work+0x5bf/0xfe0\n[ 63.192094] worker_thread+0x777/0x13a0\n[ 63.192094] \u003c/TASK\u003e\n[ 63.192094]\n[ 63.192094] Allocated by task 54:\n[ 63.192094] kasan_save_stack+0x33/0x60\n[ 63.192094] kasan_save_track+0x14/0x30\n[ 63.192094] __kasan_kmalloc+0x8f/0xa0\n[ 63.192094] __kmalloc_node_track_caller_noprof+0x195/0x420\n[ 63.192094] devm_kmalloc+0x74/0x1e0\n[ 63.192094] appletb_kbd_probe+0x39/0x440\n[ 63.192094] hid_device_probe+0x2d1/0x680\n[ 63.192094] really_probe+0x1c3/0x690\n[ 63.192094] __driver_probe_device+0x247/0x300\n[ 63.192094] driver_probe_device+0x49/0x210\n[ 63.192094] __device_attach_driver+0x160/0x320\n[...]\n[ 63.192094]\n[ 63.192094] Freed by task 54:\n[ 63.192094] kasan_save_stack+0x33/0x60\n[ 63.192094] kasan_save_track+0x14/0x30\n[ 63.192094] kasan_save_free_info+0x3b/0x60\n[ 63.192094] __kasan_slab_free+0x37/0x50\n[ 63.192094] kfree+0xcf/0x360\n[ 63.192094] devres_release_group+0x1f8/0x3c0\n[ 63.192094] hid_device_probe+0x315/0x680\n[ 63.192094] really_probe+0x1c3/0x690\n[ 63.192094] __driver_probe_device+0x247/0x300\n[ 63.192094] driver_probe_device+0x49/0x210\n[ 63.192094] __device_attach_driver+0x160/0x320\n[...]\n\nFixes: 7d62ba8deacf (\"HID: hid-appletb-kbd: add support for fn toggle between media and function mode\")\nCc: stable@vger.kernel.org\nReviewed-by: Aditya Garg \u003cgargaditya08@live.com\u003e\nSigned-off-by: Qasim Ijaz \u003cqasdev00@gmail.com\u003e\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.com\u003e\n" }, { "commit": "8b98f34ce1d8c520403362cb785231f9898eb3ff", "tree": "734a48f773865955a9ef716e6bcea7617c8305a3", "parents": [ "19b323e9327a54539703f924cb9329e74aebd6a1" ], "author": { "name": "Chenguang Zhao", "email": "zhaochenguang@kylinos.cn", "time": "Wed Jul 02 13:58:20 2025 +0800" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Jul 02 15:42:29 2025 -0700" }, "message": "net: ipv6: Fix spelling mistake\n\nchange \u0027Maximium\u0027 to \u0027Maximum\u0027\n\nSigned-off-by: Chenguang Zhao \u003czhaochenguang@kylinos.cn\u003e\nReviewed-by: Simon Horman \u003chorms@kernel.org\u003e\nAcked-by: Paul Moore \u003cpaul@paul-moore.com\u003e\nLink: https://patch.msgid.link/20250702055820.112190-1-zhaochenguang@kylinos.cn\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" }, { "commit": "19b323e9327a54539703f924cb9329e74aebd6a1", "tree": "5e2fc03f5b1e2a92469cf447e5aa9aaebcc266b9", "parents": [ "97b2409f28e0d69e5ab62df0798be8bd744a770f", "23ca32e4ead48f68e37000f2552b973ef1439acb" ], "author": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Jul 02 15:39:07 2025 -0700" }, "committer": { "name": "Jakub Kicinski", "email": "kuba@kernel.org", "time": "Wed Jul 02 15:39:08 2025 -0700" }, "message": "Merge branch \u0027support-rate-management-on-traffic-classes-in-devlink-and-mlx5\u0027\n\nMark Bloch says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nSupport rate management on traffic classes in devlink and mlx5\n\nThis patch series extends the devlink-rate API to support traffic class\n(TC) bandwidth management, enabling more granular control over traffic\nshaping and rate limiting across multiple TCs. The API now allows users\nto specify bandwidth proportions for different traffic classes in a\nsingle command. This is particularly useful for managing Enhanced\nTransmission Selection (ETS) for groups of Virtual Functions (VFs),\nallowing precise bandwidth allocation across traffic classes.\n\nAdditionally the series refines the QoS handling in net/mlx5 to support\nTC arbitration and bandwidth management on vports and rate nodes.\n\nDiscussions on traffic class shaping in net-shapers began in V5 [1],\nwhere we discussed with maintainers whether net-shapers should support\ntraffic classes and how this could be implemented.\n\nLater, after further conversations with Paolo Abeni and Simon Horman,\nCosmin provided an update [2], confirming that net-shapers\u0027 tree-based\nhierarchy aligns well with traffic classes when treated as distinct\nsubsets of netdev queues. Since mlx5 enforces a 1:1 mapping between TX\nqueues and traffic classes, this approach seems feasible, though some\nopen questions remain regarding queue reconfiguration and certain mlx5\nscheduling behaviors.\n\nBuilding on that discussion, Cosmin has now shared a concrete\nimplementation plan on the netdev mailing list [3]. The plan, developed\nin collaboration with Paolo and Simon, outlines how net-shapers can be\nextended to support the same use cases currently covered by\ndevlink-rate, with the eventual goal of aligning both and simplifying\nthe shaping infrastructure in the kernel.\n\nThis work was presented at Netdev 0x19 in Zagreb [4].\nThere we presented how TC scheduling is enforced in mlx5 hardware,\nwhich led to discussions on the mailing list.\n\nA summary of how things work:\n\nClassification means labeling a packet with a traffic class based on\nthe packet\u0027s DSCP or VLAN PCP field, then treating packets with\ndifferent traffic classes differently during transmit processing.\n\nIn a virtualized setup, VFs are untrusted and do not control\nclassification or shaping. Classification is done by the hardware using\na prio-to-TC mapping set by the hypervisor. VFs only select which send\nqueue to use and are expected to respect the classification logic by\nsending each traffic class on its dedicated queue. As stated in the\nnet-shapers plan [3], each transmit queue should carry only a single\ntraffic class. Mixing classes in a single queue can lead to HOL\nblocking.\n\nIn the mlx5 implementation, if the queue used does not match the\nclassified traffic class, the hardware moves the queue to the correct\nTC scheduler. This movement is not a reclassification; it’s a necessary\nenforcement step to ensure traffic class isolation is maintained.\n\nExtend devlink-rate API to support rate management on TCs:\n- devlink: Extend the devlink rate API to support traffic class\n bandwidth management\n\nIntroduce a no-op implementation:\n- net/mlx5: Add no-op implementation for setting tc-bw on rate objects\n\nAdd support for enabling and disabling TC QoS on vports and nodes:\n- net/mlx5: Add support for setting tc-bw on nodes\n- net/mlx5: Add traffic class scheduling support for vport QoS\n\nSupport for setting tc-bw on rate objects:\n- net/mlx5: Manage TC arbiter nodes and implement full support for\n tc-bw\n\n[1]\nhttps://lore.kernel.org/netdev/20241204220931.254964-1-tariqt@nvidia.com/\n[2]\nhttps://lore.kernel.org/netdev/67df1a562614b553dcab043f347a0d7c5393ff83.camel@nvidia.com/\n[3]\nhttps://lore.kernel.org/netdev/d9831d0c940a7b77419abe7c7330e822bbfd1cfb.camel@nvidia.com/T/\n[4]\nhttps://netdevconf.info/0x19/sessions/talk/optimizing-bandwidth-allocation-with-ets-and-traffic-classes.html\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20250629142138.361537-1-mbloch@nvidia.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n" } ], "next": "23ca32e4ead48f68e37000f2552b973ef1439acb" }