[Deepin-Kernel-SIG] [linux 6.12-y] [Upstream] Update kernel base to 6.12.63 #1394
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
[ Upstream commit 2c68ac48c52ad146523f32b01d70009622bf81aa ] Since iio_read_channel_processed() may fail, return its exit code on error. Found by Linux Verification Center (linuxtesting.org) with SVACE. Fixes: 814755c ("power: max17040: get thermal data from adc if available") Signed-off-by: Ivan Abramov <i.abramov@mt-integration.ru> Link: https://patch.msgid.link/20251008133648.559286-1-i.abramov@mt-integration.ru Signed-off-by: Sebastian Reichel <sebastian.reichel@collabora.com> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 076481e5ee775531ba4d356dae9049286d7318dd) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
…om_ranges() [ Upstream commit 8b27fe2d8d2380118c343629175385ff587e2fe4 ] The return value of rt9467_set_value_from_ranges() when setting AICL VTH is not checked, even though it may fail. Log error and return from rt9467_run_aicl() on fail. Found by Linux Verification Center (linuxtesting.org) with SVACE. Fixes: 6f7f70e ("power: supply: rt9467: Add Richtek RT9467 charger driver") Signed-off-by: Ivan Abramov <i.abramov@mt-integration.ru> Link: https://patch.msgid.link/20251009144725.562278-1-i.abramov@mt-integration.ru Signed-off-by: Sebastian Reichel <sebastian.reichel@collabora.com> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit e52391c3530288596fd507fcf4e54de347f3f9f3) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
…rt9467_set_value_from_ranges() [ Upstream commit 15aca30cc6c69806054b896a2ccf7577239cb878 ] There is a typo in rt9467_set_value_from_ranges() that can cause leaving local variable sel with an undefined value which is then used in regmap_field_write(). Found by Linux Verification Center (linuxtesting.org) with SVACE. Fixes: 6f7f70e ("power: supply: rt9467: Add Richtek RT9467 charger driver") Signed-off-by: Murad Masimov <m.masimov@mt-integration.ru> Link: https://patch.msgid.link/20251009145308.1830893-1-m.masimov@mt-integration.ru Signed-off-by: Sebastian Reichel <sebastian.reichel@collabora.com> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 1b8769af5dc1c3f978ca31bd94ca5e2540ed8957) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit ea14bae6df18942bccb467fcf5ff33ca677b8253 ] Since wm831x_set_bits() may return error, log failure and exit from wm831x_usb_limit_change() in such case. Found by Linux Verification Center (linuxtesting.org) with SVACE. Fixes: 626b6cd ("power: wm831x_power: Support USB charger current limit management") Signed-off-by: Ivan Abramov <i.abramov@mt-integration.ru> Link: https://patch.msgid.link/20251009170553.566561-1-i.abramov@mt-integration.ru Signed-off-by: Sebastian Reichel <sebastian.reichel@collabora.com> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit f8897c84d9be639557b73783c4fe460f3bce380e) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit bd44ea12919ac4e83c9f3997240fe58266aa8799 ] Mirroring drivers/macintosh/apm_emu.c, this means that modprobe apm_power && modprobe $anotherdriver && modprobe -r apm_power leaves $anotherdriver's apm_get_power_status instead of deleting it. Fixes: 3788ec9 ("[BATTERY] APM emulation driver for class batteries") Signed-off-by: Ahelenia Ziemiańska <nabijaczleweli@nabijaczleweli.xyz> Link: https://patch.msgid.link/xczpgox57hxbunkcbdl5fxhc4gnsajsipldfidi7355afezk64@tarta.nabijaczleweli.xyz Signed-off-by: Sebastian Reichel <sebastian.reichel@collabora.com> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit e8fe1cd91ec886c25b037a4977aa45d97c07c8e1) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit c03b55f235e283cae49c88b9602fd11096b92eba ] NUL characters are not allowed in ASCII configfs output. Hence this patch. Fixes: c66ac9d ("[SCSI] target: Add LIO target core v4.0.0-rc6") Signed-off-by: Bart Van Assche <bvanassche@acm.org> Link: https://patch.msgid.link/20251027184639.3501254-2-bvanassche@acm.org Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 288fa0d792bccc4ebdbb0a759b3b71cd7c20e6c1) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
…s used [ Upstream commit a63dd8fd137933551bfd9aeeeaa942f04c7aad65 ] When page cache is used, writebacks are done on a page granularity, and it is expected that the underlying filesystem (such as v9fs) should respect the write position. However, currently v9fs will passthrough O_APPEND to the server even on cached mode. This causes data corruption if a sync or fstat gets between two writes to the same file. This patch removes the APPEND flag from the open request we send to the server when writeback caching is involved. I believe keeping server-side APPEND is probably fine for uncached mode (even if two fds are opened, one without O_APPEND and one with it, this should still be fine since they would use separate fid for the writes). Signed-off-by: Tingmao Wang <m@maowtm.org> Fixes: 4eb3117 ("fs/9p: Rework cache modes and add new options to Documentation") Message-ID: <20251102235631.8724-1-m@maowtm.org> Signed-off-by: Dominique Martinet <asmadeus@codewreck.org> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit e5b181c4ea852a6d3b9248c1a99b96c4d40466bb) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit bb7939e332c64c4ef33974a0eae4f3841acfa8eb ] In practice it's not going to fail because we're passing the current sanity checks done by drm_sched_entity_init(), and that's the only reason it would return an error, but better safe than sorry. Fixes: de85488 ("drm/panthor: Add the scheduler logical block") Reviewed-by: Liviu Dudau <liviu.dudau@arm.com> Signed-off-by: Boris Brezillon <boris.brezillon@collabora.com> Link: https://patch.msgid.link/20251031160318.832427-1-boris.brezillon@collabora.com Signed-off-by: Liviu Dudau <liviu.dudau@arm.com> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 82484ee4f02f0f9b13930633ea063a21ca0933f9) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit 94a6d20feadbbe24e8a7b1c56394789ea5358fcc ] group_free_queue() can be called on a partially initialized queue object if something fails in group_create_queue(). Make sure we don't call drm_sched_entity_destroy() on an entity that hasn't been initialized. Fixes: 7d9c344 ("drm/panthor: Defer scheduler entitiy destruction to queue release") Reviewed-by: Adrián Larumbe <adrian.larumbe@collabora.com> Reviewed-by: Liviu Dudau <liviu.dudau@arm.com> Signed-off-by: Boris Brezillon <boris.brezillon@collabora.com> Link: https://patch.msgid.link/20251031160318.832427-2-boris.brezillon@collabora.com Signed-off-by: Liviu Dudau <liviu.dudau@arm.com> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 1ed88300c3330a7291a00c51b848803c348bc4bd) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit 7051f6ba968fa69918d72cc26de4d6cf7ea05b90 ] The function panthor_fw_unplug() will free the FW memory sections. The problem is that there could still be pending FW events which are yet not handled at this point. process_fw_events_work() can in this case try to access said freed memory. Simply call disable_work_sync() to both drain and prevent future invocation of process_fw_events_work(). Signed-off-by: Ketil Johnsen <ketil.johnsen@arm.com> Fixes: de85488 ("drm/panthor: Add the scheduler logical block") Reviewed-by: Liviu Dudau <liviu.dudau@arm.com> Link: https://patch.msgid.link/20251027140217.121274-1-ketil.johnsen@arm.com Signed-off-by: Liviu Dudau <liviu.dudau@arm.com> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 31db188355a49337e3e8ec98b99377e482eab22c) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit 08be57e6e8aa20ea5a6dd2552e38ac168d6a9b11 ] There is a race between panthor_device_unplug() and panthor_device_suspend() which can lead to IRQ handlers running on a powered down GPU. This is how it can happen: - unplug routine calls drm_dev_unplug() - panthor_device_suspend() can now execute, and will skip a lot of important work because the device is currently marked as unplugged. - IRQs will remain active in this case and IRQ handlers can therefore try to access a powered down GPU. The fix is simply to take the PM ref in panthor_device_unplug() a little bit earlier, before drm_dev_unplug(). Signed-off-by: Ketil Johnsen <ketil.johnsen@arm.com> Fixes: 5fe909c ("drm/panthor: Add the device logical block") Reviewed-by: Boris Brezillon <boris.brezillon@collabora.com> Reviewed-by: Liviu Dudau <liviu.dudau@arm.com> Reviewed-by: Steven Price <steven.price@arm.com> Link: https://patch.msgid.link/20251022103242.1083311-1-ketil.johnsen@arm.com Signed-off-by: Liviu Dudau <liviu.dudau@arm.com> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit ae6e58069d8462bc055fdb8b15d19b748c71c1c4) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit 98dd5143447af0ee33551776d8b2560c35d0bc4a ] If the MMU is down, panthor_vm_unmap_range() might return an error. We expect the page table to be updated still, and if the MMU is blocked, the rest of the GPU should be blocked too, so no risk of accessing physical memory returned to the system (which the current code doesn't cover for anyway). Proceed with the rest of the cleanup instead of bailing out and leaving the va_node inserted in the drm_mm, which leads to UAF when other adjacent nodes are removed from the drm_mm tree. Reported-by: Lars-Ivar Hesselberg Simonsen <lars-ivar.simonsen@arm.com> Closes: https://gitlab.freedesktop.org/panfrost/linux/-/issues/57 Fixes: 8a1cc07 ("drm/panthor: Add GEM logical block") Signed-off-by: Boris Brezillon <boris.brezillon@collabora.com> Reviewed-by: Liviu Dudau <liviu.dudau@arm.com> Link: https://patch.msgid.link/20251031154818.821054-2-boris.brezillon@collabora.com Signed-off-by: Liviu Dudau <liviu.dudau@arm.com> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 5a0060ddfc1fcfdb0f7b4fa1b7b3b0c436151391) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit b4e002d8a7cee3b1d70efad0e222567f92a73000 ] When the CPU that the QSPI interrupt handler runs on (typically CPU 0) is excessively busy, it can lead to rare cases of the IRQ thread not running before the transfer timeout is reached. While handling the timeouts, any pending transfers are cleaned up and the message that they correspond to is marked as failed, which leaves the curr_xfer field pointing at stale memory. To avoid this, clear curr_xfer to NULL upon timeout and check for this condition when the IRQ thread is finally run. While at it, also make sure to clear interrupts on failure so that new interrupts can be run. A better, more involved, fix would move the interrupt clearing into a hard IRQ handler. Ideally we would also want to signal that the IRQ thread no longer needs to be run after the timeout is hit to avoid the extra check for a valid transfer. Fixes: 921fc18 ("spi: tegra210-quad: Add support for Tegra210 QSPI controller") Signed-off-by: Thierry Reding <treding@nvidia.com> Signed-off-by: Vishwaroop A <va@nvidia.com> Link: https://patch.msgid.link/20251028155703.4151791-2-va@nvidia.com Signed-off-by: Mark Brown <broonie@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 551060efb156c50fe33799038ba8145418cfdeef) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit 4f596acc260e691a2e348f64230392f3472feea3 ] When creating multi-split BTF we correctly set the start string offset to be the size of the base string section plus the base BTF start string offset; the latter is needed for multi-split BTF since the offset is non-zero there. Unfortunately the BTF parsing case needed that logic and it was missed. Fixes: 4e29128 ("libbpf/btf: Fix string handling to support multi-split BTF") Signed-off-by: Alan Maguire <alan.maguire@oracle.com> Signed-off-by: Andrii Nakryiko <andrii@kernel.org> Link: https://lore.kernel.org/bpf/20251104203309.318429-2-alan.maguire@oracle.com Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 627be3c40095e39849739b51a05f9fa0cc3b24fc) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit d0c4b1723c419a18cb434903c7754954ecb51d35 ] Fixes: 8e9d75f ("ARM: dts: am335x-netcom: add GPIO names for NetCom Plus 2-port devices") Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com> Link: https://lore.kernel.org/r/20251007103851.3765678-1-yegorslists@googlemail.com Signed-off-by: Kevin Hilman <khilman@baylibre.com> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 6110aca23ded75e9c2672fce1d6cbd597a8f7926) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit f7f3bc18300a230e0f1bfb17fc8889435c1e47f5 ] The "ti,twl4030-power-beagleboard-xm" compatible string is obsolete and is not supported by any in-kernel driver. Currently, the kernel falls back to the second entry, "ti,twl4030-power-idle-osc-off", to bind a driver to this node. Make this fallback explicit by removing the obsolete board-specific compatible. This preserves the existing functionality while making the DTS compliant with the new, stricter 'ti,twl.yaml' binding. Fixes: 9188883 ("ARM: dts: Enable twl4030 off-idle configuration for selected omaps") Signed-off-by: Jihed Chaibi <jihed.chaibi.dev@gmail.com> Link: https://lore.kernel.org/r/20250914192516.164629-3-jihed.chaibi.dev@gmail.com Signed-off-by: Kevin Hilman <khilman@baylibre.com> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 99da0f593d0b02adbe1dcf45f42535c06564a15d) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit 3862123e9b56663c7a3e4a308e6e65bffe44f646 ] The "ti,twl4030-power-n900" compatible string is obsolete and is not supported by any in-kernel driver. Currently, the kernel falls back to the second entry, "ti,twl4030-power-idle-osc-off", to bind a driver to this node. Make this fallback explicit by removing the obsolete board-specific compatible. This preserves the existing functionality while making the DTS compliant with the new, stricter 'ti,twl.yaml' binding. Fixes: daebabd ("mfd: twl4030-power: Fix PM idle pin configuration to not conflict with regulators") Signed-off-by: Jihed Chaibi <jihed.chaibi.dev@gmail.com> Link: https://lore.kernel.org/r/20250914192516.164629-4-jihed.chaibi.dev@gmail.com Signed-off-by: Kevin Hilman <khilman@baylibre.com> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 2e1132b0832ea8855412897ea4f64bcaf20ce928) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit eb2266312507d7b757859e2227aa5c4ba6280ebe ] When transitioning from 5-level to 4-level paging, the existing code incorrectly accesses page table entries by directly dereferencing CR3 and applying PAGE_MASK. This approach has several issues: - __native_read_cr3() returns the raw CR3 register value, which on x86_64 includes not just the physical address but also flags. Bits above the physical address width of the system i.e. above __PHYSICAL_MASK_SHIFT) are also not masked. - The PGD entry is masked by PAGE_SIZE which doesn't take into account the higher bits such as _PAGE_BIT_NOPTISHADOW. Replace this with proper accessor functions: - native_read_cr3_pa(): Uses CR3_ADDR_MASK to additionally mask metadata out of CR3 (like SME or LAM bits). All remaining bits are real address bits or reserved and must be 0. - mask pgd value with PTE_PFN_MASK instead of PAGE_MASK, accounting for flags above bit 51 (_PAGE_BIT_NOPTISHADOW in particular). Bits below 51, but above the max physical address are reserved and must be 0. Fixes: e9d0e63 ("x86/boot/compressed/64: Prepare new top-level page table for trampoline") Reported-by: Michael van der Westhuizen <rmikey@meta.com> Reported-by: Tobias Fleig <tfleig@meta.com> Co-developed-by: Kiryl Shutsemau <kas@kernel.org> Signed-off-by: Kiryl Shutsemau <kas@kernel.org> Signed-off-by: Usama Arif <usamaarif642@gmail.com> Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de> Reviewed-by: Ard Biesheuvel <ardb@kernel.org> Acked-by: Dave Hansen <dave.hansen@linux.intel.com> Link: https://lore.kernel.org/r/a482fd68-ce54-472d-8df1-33d6ac9f6bb5@intel.com Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit b299217115f54d39f4a95d3d711b2cc8e30b1a51) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
…ition [ Upstream commit 84361123413efc84b06f3441c6c827b95d902732 ] When transitioning from 5-level to 4-level paging, the existing code incorrectly accesses page table entries by directly dereferencing CR3 and applying PAGE_MASK. This approach has several issues: - __native_read_cr3() returns the raw CR3 register value, which on x86_64 includes not just the physical address but also flags Bits above the physical address width of the system (i.e. above __PHYSICAL_MASK_SHIFT) are also not masked. - The pgd value is masked by PAGE_SIZE which doesn't take into account the higher bits such as _PAGE_BIT_NOPTISHADOW. Replace this with proper accessor functions: - native_read_cr3_pa(): Uses CR3_ADDR_MASK to additionally mask metadata out of CR3 (like SME or LAM bits). All remaining bits are real address bits or reserved and must be 0. - mask pgd value with PTE_PFN_MASK instead of PAGE_MASK, accounting for flags above bit 51 (_PAGE_BIT_NOPTISHADOW in particular). Bits below 51, but above the max physical address are reserved and must be 0. Fixes: cb1c9e0 ("x86/efistub: Perform 4/5 level paging switch from the stub") Reported-by: Michael van der Westhuizen <rmikey@meta.com> Reported-by: Tobias Fleig <tfleig@meta.com> Co-developed-by: Kiryl Shutsemau <kas@kernel.org> Signed-off-by: Kiryl Shutsemau <kas@kernel.org> Signed-off-by: Usama Arif <usamaarif642@gmail.com> Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de> Reviewed-by: Ard Biesheuvel <ardb@kernel.org> Link: https://patch.msgid.link/20251103141002.2280812-3-usamaarif642@gmail.com Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 2390e90a5cd2fa2f561a70a1912a1efbdae9cccc) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit e52b43883d084a9af263c573f2a1bd1ca5088389 ]
With CONFIG_CPUMASK_OFFSTACK=y, the 'bind_writers' buffer is allocated via
alloc_cpumask_var() in param_set_cpumask(). But it is not freed, when
setting the module parameter multiple times by sysfs interface or removing
module.
Below kmemleak trace is seen for this issue:
unreferenced object 0xffff888100aabff8 (size 8):
comm "bash", pid 323, jiffies 4295059233
hex dump (first 8 bytes):
07 00 00 00 00 00 00 00 ........
backtrace (crc ac50919):
__kmalloc_node_noprof+0x2e5/0x420
alloc_cpumask_var_node+0x1f/0x30
param_set_cpumask+0x26/0xb0 [locktorture]
param_attr_store+0x93/0x100
module_attr_store+0x1b/0x30
kernfs_fop_write_iter+0x114/0x1b0
vfs_write+0x300/0x410
ksys_write+0x60/0xd0
do_syscall_64+0xa4/0x260
entry_SYSCALL_64_after_hwframe+0x77/0x7f
This issue can be reproduced by:
insmod locktorture.ko bind_writers=1
rmmod locktorture
or:
insmod locktorture.ko bind_writers=1
echo 2 > /sys/module/locktorture/parameters/bind_writers
Considering that setting the module parameter 'bind_writers' or
'bind_readers' by sysfs interface has no real effect, set the parameter
permissions to 0444. To fix the memory leak when removing module, free
'bind_writers' and 'bind_readers' memory in lock_torture_cleanup().
Fixes: 73e3412 ("locktorture: Add readers_bind and writers_bind module parameters")
Suggested-by: Zhang Changzhong <zhangchangzhong@huawei.com>
Signed-off-by: Wang Liang <wangliang74@huawei.com>
Signed-off-by: Paul E. McKenney <paulmck@kernel.org>
Signed-off-by: Frederic Weisbecker <frederic@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
(cherry picked from commit 22b5b6262958a135b2d7eea2fb3f6d74e7b3c6a7)
Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit 1b58acfd067ca16116b9234cd6b2d30cc8ab7502 ] When da9055_device_init() fails after regmap_add_irq_chip() succeeds but mfd_add_devices() fails, the error handling path only calls mfd_remove_devices() but forgets to call regmap_del_irq_chip(). This results in a resource leak. Fix this by adding regmap_del_irq_chip() to the error path so that resources are released properly. Fixes: 2896434 ("mfd: DA9055 core driver") Signed-off-by: Haotian Zhang <vulab@iscas.ac.cn> Link: https://patch.msgid.link/20251010011737.1078-1-vulab@iscas.ac.cn Signed-off-by: Lee Jones <lee@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 520de30d8c92b0f18ebd9bae0545b8c5c804434a) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit a2e5a3cea4b18f6e2575acc444a5e8cce1fc8260 ] The move extent operation should return -EOPNOTSUPP if any of the inodes is a quota inode, rather than requiring both to be quota inodes. Fixes: 02749a4 ("ext4: add ext4_is_quota_file()") Signed-off-by: Zhang Yi <yi.zhang@huawei.com> Reviewed-by: Jan Kara <jack@suse.cz> Message-ID: <20251013015128.499308-2-yi.zhang@huaweicloud.com> Signed-off-by: Theodore Ts'o <tytso@mit.edu> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit a7abd40cbfcfdf073f79b19dbfc2543ad97d0c41) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit 5e4e355ae7cdeb0fef5dbe908866e1f895abfacc ] current large PEBS flag check only checks if sample_regs_user contains unsupported GPRs but doesn't check if sample_regs_intr contains unsupported GPRs. Of course, currently PEBS HW supports to sample all perf supported GPRs, the missed check doesn't cause real issue. But it won't be true any more after the subsequent patches support to sample SSP register. SSP sampling is not supported by adaptive PEBS HW and it would be supported until arch-PEBS HW. So correct this issue. Fixes: a47ba4d ("perf/x86: Enable free running PEBS for REGS_USER/INTR") Signed-off-by: Dapeng Mi <dapeng1.mi@linux.intel.com> Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org> Link: https://patch.msgid.link/20251029102136.61364-5-dapeng1.mi@linux.intel.com Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit a0f1e48023c8f1b021dee5d8214d8abf40789ce9) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit fb1ebb10468da414d57153ddebaab29c38ef1a78 ]
For 'always-on' and 'boot-on' regulators, the set_machine_constraints()
may enable supply before enabling the main regulator, however if the
latter fails, the function returns with an error but the supply remains
enabled.
When this happens, the regulator_register() function continues on the
error path where it puts the supply regulator. Since enabling the supply
is not balanced with a disable call, a warning similar to the following
gets issued from _regulator_put():
[ 1.603889] WARNING: CPU: 2 PID: 44 at _regulator_put+0x8c/0xa0
[ 1.603908] Modules linked in:
[ 1.603926] CPU: 2 UID: 0 PID: 44 Comm: kworker/u16:3 Not tainted 6.18.0-rc4 #0 NONE
[ 1.603938] Hardware name: Qualcomm Technologies, Inc. IPQ9574/AP-AL02-C7 (DT)
[ 1.603945] Workqueue: async async_run_entry_fn
[ 1.603958] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[ 1.603967] pc : _regulator_put+0x8c/0xa0
[ 1.603976] lr : _regulator_put+0x7c/0xa0
...
[ 1.604140] Call trace:
[ 1.604145] _regulator_put+0x8c/0xa0 (P)
[ 1.604156] regulator_register+0x2ec/0xbf0
[ 1.604166] devm_regulator_register+0x60/0xb0
[ 1.604178] rpm_reg_probe+0x120/0x208
[ 1.604187] platform_probe+0x64/0xa8
...
In order to avoid this, change the set_machine_constraints() function to
disable the supply if enabling the main regulator fails.
Fixes: 05f224c ("regulator: core: Clean enabling always-on regulators + their supplies")
Signed-off-by: Gabor Juhos <j4g8y7@gmail.com>
Link: https://patch.msgid.link/20251107-regulator-disable-supply-v1-1-c95f0536f1b5@gmail.com
Signed-off-by: Mark Brown <broonie@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
(cherry picked from commit b991eda2a7f1b7bbf0a357d8112b5974f59ae24f)
Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit 0dc76205549b4c25705e54345f211b9f66e018a0 ] We attempted to use RCU to protect the pointer 'thread', but directly passed the value when calling md_wakeup_thread(). This means that the RCU pointer has been acquired before rcu_read_lock(), which renders rcu_read_lock() ineffective and could lead to a use-after-free. Link: https://lore.kernel.org/linux-raid/20251015083227.1079009-1-yun.zhou@windriver.com Fixes: 4469315 ("md: protect md_thread with rcu") Signed-off-by: Yun Zhou <yun.zhou@windriver.com> Reviewed-by: Li Nan <linan122@huawei.com> Reviewed-by: Yu Kuai <yukuai@fnnas.com> Signed-off-by: Yu Kuai <yukuai@fnnas.com> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 21989cb5034c835b212385a2afadf279d8069da0) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit 9517b82d8d422d426a988b213fdd45c6b417b86d ]
There is one uaf issue in recv_work when running NBD_CLEAR_SOCK and
NBD_CMD_RECONFIGURE:
nbd_genl_connect // conf_ref=2 (connect and recv_work A)
nbd_open // conf_ref=3
recv_work A done // conf_ref=2
NBD_CLEAR_SOCK // conf_ref=1
nbd_genl_reconfigure // conf_ref=2 (trigger recv_work B)
close nbd // conf_ref=1
recv_work B
config_put // conf_ref=0
atomic_dec(&config->recv_threads); -> UAF
Or only running NBD_CLEAR_SOCK:
nbd_genl_connect // conf_ref=2
nbd_open // conf_ref=3
NBD_CLEAR_SOCK // conf_ref=2
close nbd
nbd_release
config_put // conf_ref=1
recv_work
config_put // conf_ref=0
atomic_dec(&config->recv_threads); -> UAF
Commit 87aac3a ("nbd: call nbd_config_put() before notifying the
waiter") moved nbd_config_put() to run before waking up the waiter in
recv_work, in order to ensure that nbd_start_device_ioctl() would not
be woken up while nbd->task_recv was still uncleared.
However, in nbd_start_device_ioctl(), after being woken up it explicitly
calls flush_workqueue() to make sure all current works are finished.
Therefore, there is no need to move the config put ahead of the wakeup.
Move nbd_config_put() to the end of recv_work, so that the reference is
held for the whole lifetime of the worker thread. This makes sure the
config cannot be freed while recv_work is still running, even if clear
+ reconfigure interleave.
In addition, we don't need to worry about recv_work dropping the last
nbd_put (which causes deadlock):
path A (netlink with NBD_CFLAG_DESTROY_ON_DISCONNECT):
connect // nbd_refs=1 (trigger recv_work)
open nbd // nbd_refs=2
NBD_CLEAR_SOCK
close nbd
nbd_release
nbd_disconnect_and_put
flush_workqueue // recv_work done
nbd_config_put
nbd_put // nbd_refs=1
nbd_put // nbd_refs=0
queue_work
path B (netlink without NBD_CFLAG_DESTROY_ON_DISCONNECT):
connect // nbd_refs=2 (trigger recv_work)
open nbd // nbd_refs=3
NBD_CLEAR_SOCK // conf_refs=2
close nbd
nbd_release
nbd_config_put // conf_refs=1
nbd_put // nbd_refs=2
recv_work done // conf_refs=0, nbd_refs=1
rmmod // nbd_refs=0
Reported-by: syzbot+56fbf4c7ddf65e95c7cc@syzkaller.appspotmail.com
Closes: https://lore.kernel.org/all/6907edce.a70a0220.37351b.0014.GAE@google.com/T/
Fixes: 87aac3a ("nbd: make the config put is called before the notifying the waiter")
Depends-on: e2daec4 ("nbd: Fix hungtask when nbd_config_put")
Signed-off-by: Zheng Qixing <zhengqixing@huawei.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Sasha Levin <sashal@kernel.org>
(cherry picked from commit 6b69593f72e1bfba6ca47ca8d9b619341fded7d6)
Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit 20da637eb545b04753e20c675cfe97b04c7b600b ] In stex_probe(), register_reboot_notifier() is called at the beginning, but if any subsequent initialization step fails, the function returns without unregistering the notifier, resulting in a resource leak. Add unregister_reboot_notifier() in the out_disable error path to ensure proper cleanup on all failure paths. Fixes: 61b745f ("scsi: stex: Add S6 support") Signed-off-by: Haotian Zhang <vulab@iscas.ac.cn> Link: https://patch.msgid.link/20251104094847.270-1-vulab@iscas.ac.cn Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 8616943e0729a10c3da375221568c0fd7f86298e) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit b518e86d1a70a88f6592a7c396cf1b93493d1aab ]
Correct possible race conditions during device removal.
Previously, a scheduled work item to reset a LUN could still execute
after the device was removed, leading to use-after-free and other
resource access issues.
This race condition occurs because the abort handler may schedule a LUN
reset concurrently with device removal via sdev_destroy(), leading to
use-after-free and improper access to freed resources.
- Check in the device reset handler if the device is still present in
the controller's SCSI device list before running; if not, the reset
is skipped.
- Cancel any pending TMF work that has not started in sdev_destroy().
- Ensure device freeing in sdev_destroy() is done while holding the
LUN reset mutex to avoid races with ongoing resets.
Fixes: 2d80f40 ("scsi: smartpqi: Update deleting a LUN via sysfs")
Reviewed-by: Scott Teel <scott.teel@microchip.com>
Reviewed-by: Scott Benesh <scott.benesh@microchip.com>
Signed-off-by: Mike McGowen <mike.mcgowen@microchip.com>
Signed-off-by: Don Brace <don.brace@microchip.com>
Link: https://patch.msgid.link/20251106163823.786828-3-don.brace@microchip.com
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
(cherry picked from commit eccc02ba1747501d92bb2049e3ce378ba372f641)
Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit 4813dea9e272ba0a57c50b8d51d440dd8e3ccdd7 ] Binding incorrectly specifies the 'DBI' region as 'ELBI'. DBI is a must have region for DWC controllers as it has the Root Port and controller specific registers, while ELBI has optional registers. Hence, fix the binding. Though this is an ABI break, this change is needed to accurately describe the PCI memory map. Fixes: 7cd2103 ("dt-bindings: PCI: meson: add DT bindings for Amlogic Meson PCIe controller") Signed-off-by: Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com> Signed-off-by: Manivannan Sadhasivam <mani@kernel.org> Link: https://patch.msgid.link/20251101-pci-meson-fix-v1-1-c50dcc56ed6a@oss.qualcomm.com Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 71786f697121dd2858ec9f70b4edbbc6f07de373) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit a338d6e849ab31f32c08b4fcac11c0c72afbb150 ] After device_initialize() is called, use put_device() to release the device according to kernel device management rules. While direct kfree() work in this case, using put_device() is more correct. Found by code review. Fixes: 9cb8374 ("RDMA/rtrs: server: main functionality") Signed-off-by: Ma Ke <make24@iscas.ac.cn> Link: https://patch.msgid.link/20251110005158.13394-1-make24@iscas.ac.cn Acked-by: Jack Wang <jinpu.wang@ionos.com> Signed-off-by: Leon Romanovsky <leon@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 2e2b5aba8ad77d15e688e002143755b7213d8c7e) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit ed5db17 ] The underlying limit is defined as an unsigned int, so return that from queue_dma_alignment as well. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: John Garry <john.g.garry@oracle.com> Reviewed-by: Martin K. Petersen <martin.petersen@oracle.com> Reviewed-by: Johannes Thumshirn <johannes.thumshirn@wdc.com> Link: https://lore.kernel.org/r/20241119160932.1327864-3-hch@lst.de Signed-off-by: Jens Axboe <axboe@kernel.dk> Stable-dep-of: 2c38ec934ddf ("block: fix cached zone reports on devices with native zone append") Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 49278ca55ccf08c44370c20ccafe8bfd11f4af9c) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit 2f6cfd6d7cb165a7af8877b838a9f6aab4159324 ] rs->raid_type is assigned from get_raid_type_by_ll(), which may return NULL. This NULL value could be dereferenced later in the condition 'if (!(rs_is_raid10(rs) && rt_is_raid0(rs->raid_type)))'. Add a fail-fast check to return early with an error if raid_type is NULL, similar to other uses of this function. Found by Linux Verification Center (linuxtesting.org) with Svace. Fixes: 33e53f0 ("dm raid: introduce extended superblock and new raid types to support takeover/reshaping") Signed-off-by: Alexey Simakov <bigalex934@gmail.com> Signed-off-by: Mikulas Patocka <mpatocka@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 138603953aab3dafafcfaf3a3dcbfa7d2ad5d0c6) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit ab08f9c8b363297cafaf45475b08f78bf19b88ef ] The log_writes_kthread() calls try_to_freeze() but lacks set_freezable(), rendering the freeze attempt ineffective since kernel threads are non-freezable by default. This prevents proper thread suspension during system suspend/hibernate. Add set_freezable() to explicitly mark the thread as freezable. Fixes: 0e9cebe ("dm: add log writes target") Signed-off-by: Haotian Zhang <vulab@iscas.ac.cn> Reviewed-by: Benjamin Marzinski <bmarzins@redhat.com> Signed-off-by: Mikulas Patocka <mpatocka@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit c3590c78120002bb70d7d1fd3a5ea1d52f42b570) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit a976d790f49499ccaa0f991788ad8ebf92e7fd5c ]
Add a helper function to print a string with names associated
to each bit field.
A typical example is:
const char * const bits[] = {
"bit 3 name",
"bit 4 name",
"bit 5 name",
};
char str[120];
unsigned int bitmask = BIT(3) | BIT(5);
#define MASK GENMASK(5,3)
cper_bits_to_str(str, sizeof(str), FIELD_GET(MASK, bitmask),
bits, ARRAY_SIZE(bits));
The above code fills string "str" with "bit 3 name|bit 5 name".
Reviewed-by: Jonathan Cameron <Jonathan.Cameron@huawei.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
Acked-by: Borislav Petkov (AMD) <bp@alien8.de>
Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
(cherry picked from commit 0294effcc106ce27032a22a2528ef3da7baec2b1)
Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit 8ad2c72e21efb3dc76c5b14089fa7984cdd87898 ]
Compiling with W=1 with werror enabled produces an error:
drivers/firmware/efi/cper-arm.c: In function ‘cper_print_proc_arm’:
drivers/firmware/efi/cper-arm.c:298:64: error: ‘snprintf’ output may be truncated before the last format character [-Werror=format-truncation=]
298 | snprintf(infopfx, sizeof(infopfx), "%s ", newpfx);
| ^
drivers/firmware/efi/cper-arm.c:298:25: note: ‘snprintf’ output between 2 and 65 bytes into a destination of size 64
298 | snprintf(infopfx, sizeof(infopfx), "%s ", newpfx);
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
As the logic there adds an space at the end of infopx buffer.
Add an extra space to avoid such warning.
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
Reviewed-by: Jonathan Cameron <Jonathan.Cameron@huawei.com>
Acked-by: Borislav Petkov (AMD) <bp@alien8.de>
Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
(cherry picked from commit 448fd9d43a122680020e11b32c753db586d85e1f)
Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
[ Upstream commit 96b010536ee020e716d28d9b359a4bcd18800aeb ] Up to UEFI spec 2.9, the type byte of CPER struct for ARM processor was defined simply as: Type at byte offset 4: - Cache error - TLB Error - Bus Error - Micro-architectural Error All other values are reserved Yet, there was no information about how this would be encoded. Spec 2.9A errata corrected it by defining: - Bit 1 - Cache Error - Bit 2 - TLB Error - Bit 3 - Bus Error - Bit 4 - Micro-architectural Error All other values are reserved That actually aligns with the values already defined on older versions at N.2.4.1. Generic Processor Error Section. Spec 2.10 also preserve the same encoding as 2.9A. Adjust CPER and GHES handling code for both generic and ARM processors to properly handle UEFI 2.9A and 2.10 encoding. Link: https://uefi.org/specs/UEFI/2.10/Apx_N_Common_Platform_Error_Record.html#arm-processor-error-information Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org> Reviewed-by: Jonathan Cameron <Jonathan.Cameron@huawei.com> Acked-by: Borislav Petkov (AMD) <bp@alien8.de> Signed-off-by: Ard Biesheuvel <ardb@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 4d7944f49b7cc45e6601bc791d97fd4dce1c40d5) Signed-off-by: Wentao Guan <guanwentao@uniontech.com> Conflicts: drivers/acpi/apei/ghes.c
[ Upstream commit ab58153ec64fa3fc9aea09ca09dc9322e0b54a7c ]
The delayed work item 'imm_tq' is initialized in imm_attach() and
scheduled via imm_queuecommand() for processing SCSI commands. When the
IMM parallel port SCSI host adapter is detached through imm_detach(),
the imm_struct device instance is deallocated.
However, the delayed work might still be pending or executing
when imm_detach() is called, leading to use-after-free bugs
when the work function imm_interrupt() accesses the already
freed imm_struct memory.
The race condition can occur as follows:
CPU 0(detach thread) | CPU 1
| imm_queuecommand()
| imm_queuecommand_lck()
imm_detach() | schedule_delayed_work()
kfree(dev) //FREE | imm_interrupt()
| dev = container_of(...) //USE
dev-> //USE
Add disable_delayed_work_sync() in imm_detach() to guarantee proper
cancellation of the delayed work item before imm_struct is deallocated.
Fixes: 1da177e ("Linux-2.6.12-rc2")
Signed-off-by: Duoming Zhou <duoming@zju.edu.cn>
Link: https://patch.msgid.link/20251028100149.40721-1-duoming@zju.edu.cn
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
(cherry picked from commit 31ab2aad7a7b7501e904a09bf361e44671f66092)
Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit 7dbc0d40d8347bd9de55c904f59ea44bcc8dedb7 ] If irq_domain_translate_twocell() sets "hwirq" to >= MCHP_EIC_NIRQ (2) then it results in an out of bounds access. The code checks for invalid values, but doesn't set the error code. Return -EINVAL in that case, instead of returning success. Fixes: 00fa346 ("irqchip/mchp-eic: Add support for the Microchip EIC") Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org> Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Reviewed-by: Claudiu Beznea <claudiu.beznea@tuxon.dev> Link: https://patch.msgid.link/aTfHmOz6IBpTIPU5@stanley.mountain Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 3873afcb57614c1aaa5b6715554d6d1c22cac95a) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit 2214ec4bf89d0fd27717322d3983a2f3b469c7f3 ] In 'ocfs2_merge_rec_left()', do not reset 'left_path' to NULL after move, thus allowing 'ocfs2_free_path()' to free it before return. Link: https://lkml.kernel.org/r/20251205065159.392749-1-dmantipov@yandex.ru Fixes: 677b975 ("ocfs2: Add support for cross extent block") Signed-off-by: Dmitry Antipov <dmantipov@yandex.ru> Reported-by: syzbot+cfc7cab3bb6eaa7c4de2@syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?extid=cfc7cab3bb6eaa7c4de2 Reviewed-by: Heming Zhao <heming.zhao@suse.com> Acked-by: Joseph Qi <joseph.qi@linux.alibaba.com> Cc: Mark Fasheh <mark@fasheh.com> Cc: Joel Becker <jlbec@evilplan.org> Cc: Junxiao Bi <junxiao.bi@oracle.com> Cc: Changwei Ge <gechangwei@live.cn> Cc: Jun Piao <piaojun@huawei.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit a4b7a958c908abedf66ba80f1e1afc5eba33cfc5) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
Commit 863a320 ("LoongArch: Mask all interrupts during kexec/kdump") is backported to LTS branches, but they lack a generic machine_kexec_mask_interrupts() implementation, so add an arch-specific one. Signed-off-by: Tianyang Zhang <zhangtianyang@loongson.cn> Signed-off-by: Huacai Chen <chenhuacai@loongson.cn> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 429bf3f04c24a1590ed18cd7bf802cf63f937a0f) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
commit 8a8f3f4 upstream. The driver allocates ring elements using GFP_DMA flags. There is no dependency from LAN743x hardware on memory allocation should be in DMA_ZONE. Hence modifying the flags to use only GFP_ATOMIC. This is consistent with other callers of lan743x_rx_init_ring_element(). Reported-by: Zhang, Liyin(CN) <Liyin.Zhang.CN@windriver.com> Signed-off-by: Thangaraj Samynathan <thangaraj.s@microchip.com> Reviewed-by: Simon Horman <horms@kernel.org> Link: https://patch.msgid.link/20250415044509.6695-1-thangaraj.s@microchip.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 8401fe8638491c0c06157f7b926bed778d0fe402) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit caedcc5 ] Followup of commit 88fe142 ("net: dst: add four helpers to annotate data-races around dst->dev"). We want to gradually add explicit RCU protection to dst->dev, including lockdep support. Add an union to alias dst->dev_rcu and dst->dev. Add dst_dev_net_rcu() helper. Fixes: 4a6ce2b ("net: introduce a new function dst_dev_put()") Cc: stable@vger.kernel.org Signed-off-by: Eric Dumazet <edumazet@google.com> Reviewed-by: David Ahern <dsahern@kernel.org> Link: https://patch.msgid.link/20250828195823.3958522-2-edumazet@google.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Stable-dep-of: 50c127a ("Replace three dst_dev() with a lockdep enabled helper.") Signed-off-by: Gyokhan Kochmarla <gyokhan@amazon.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 90c47a1a526c285157be733d4b94d9b1dc339a6f) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
[ Upstream commit 50c127a ] Replace three dst_dev() with a lockdep enabled helper. Fixes: 4a6ce2b ("net: introduce a new function dst_dev_put()") Cc: stable@vger.kernel.org Signed-off-by: Eric Dumazet <edumazet@google.com> Reviewed-by: David Ahern <dsahern@kernel.org> Link: https://patch.msgid.link/20250828195823.3958522-7-edumazet@google.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Gyokhan Kochmarla <gyokhan@amazon.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 4b89397807eb04986427c4786d065e9442834ad4) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
commit 2585973c7f9ee31d21e5848c996fab2521fd383d upstream. The driver previously skipped handling ClearFeature(ENDPOINT_HALT) when the endpoint was already not halted. This prevented the controller from resetting the data sequence number and reinitializing the endpoint state. According to USB 3.2 specification Rev. 1.1, section 9.4.5, ClearFeature(ENDPOINT_HALT) must always reset the data sequence and set the stream state machine to Disabled, regardless of whether the endpoint was halted. Remove the early return so that ClearFeature(ENDPOINT_HALT) always resets the endpoint sequence state as required by the specification. Fixes: 49db427 ("usb: gadget: Add UDC driver for tegra XUSB device mode controller") Cc: stable <stable@kernel.org> Signed-off-by: Haotien Hsu <haotienh@nvidia.com> Signed-off-by: Wayne Chang <waynec@nvidia.com> Link: https://patch.msgid.link/20251127033540.2287517-1-waynec@nvidia.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 6f31b2ca1e4838600e2dabaa9ba5a1e1b6c95640) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
commit c69ff68b097b0f53333114f1b2c3dc128f389596 upstream. As part of the registration of a new 'struct usb_phy' with the USB PHY core via either usb_add_phy(struct usb_phy *x, ...) or usb_add_phy_dev(struct usb_phy *x) these functions call list_add_tail(&x->head, phy_list) in order for the new instance x to be stored in phy_list, a static list kept internally by the core. After 7d21114 ("usb: phy: Introduce one extcon device into usb phy") when executing either of the registration functions above it is possible that usb_add_extcon() fails, leading to either function returning before the call to list_add_tail(), leaving x->head uninitialized. Then, when a driver tries to undo the failed registration by calling usb_remove_phy(struct usb_phy *x) there will be an unconditional call to list_del(&x->head) acting on an uninitialized variable, and thus a possible NULL pointer dereference. Fix this by initializing x->head before usb_add_extcon() has a chance to fail. Note that this was not needed before 7d21114 since list_add_phy() was executed unconditionally and it guaranteed that x->head was initialized. Fixes: 7d21114 ("usb: phy: Introduce one extcon device into usb phy") Cc: stable <stable@kernel.org> Signed-off-by: Diogo Ivo <diogo.ivo@tecnico.ulisboa.pt> Link: https://patch.msgid.link/20251121-diogo-smaug_typec-v2-1-5c37c1169d57@tecnico.ulisboa.pt Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 6c36af8083503806e04be4da4240d3743b28072d) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
…ired commit 5ed9cc71432a8adf3c42223c935f714aac29901b upstream. On Apple Silicon machines we can't use ioremap() / Device-nGnRE to map most regions but must use ioremap_np() / Device-nGnRnE whenever IORESOURCE_MEM_NONPOSTED is set. Make sure this is also done inside dwc3_power_off_all_roothub_ports to prevent SErrors. Fixes: 2d2a334 ("usb: dwc3: Add workaround for host mode VBUS glitch when boot") Cc: stable@kernel.org Acked-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com> Reviewed-by: Neal Gompa <neal@gompa.dev> Signed-off-by: Sven Peter <sven@kernel.org> Link: https://patch.msgid.link/20251015-b4-aplpe-dwc3-v2-2-cbd65a2d511a@kernel.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 8404a1b1f5f167151b6e83cff2a010d61c2425d7) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
commit 324f3e03e8a85931ce0880654e3c3eb38b0f0bba upstream. The function detect_stream_formats() reads the stream_count value directly from a FireWire device without validating it. This can lead to out-of-bounds writes when a malicious device provides a stream_count value greater than MAX_STREAMS. Fix by applying the same validation to both TX and RX stream counts in detect_stream_formats(). Reported-by: Yuhao Jiang <danisjiang@gmail.com> Reported-by: Junrui Luo <moonafterrain@outlook.com> Fixes: 58579c0 ("ALSA: dice: use extended protocol to detect available stream formats") Cc: stable@vger.kernel.org Reviewed-by: Takashi Sakamoto <o-takashi@sakamocchi.jp> Signed-off-by: Junrui Luo <moonafterrain@outlook.com> Link: https://patch.msgid.link/SYBPR01MB7881B043FC68B4C0DA40B73DAFDCA@SYBPR01MB7881.ausprd01.prod.outlook.com Signed-off-by: Takashi Iwai <tiwai@suse.de> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit c0a1fe1902ad23e6d48e0f68be1258ccf7a163e6) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
commit 0c4a13ba88594fd4a27292853e736c6b4349823d upstream. The wavefront_send_sample() function has an integer overflow issue when validating sample size. The header->size field is u32 but gets cast to int for comparison with dev->freemem Fix by using unsigned comparison to avoid integer overflow. Fixes: 1da177e ("Linux-2.6.12-rc2") Cc: stable@vger.kernel.org Signed-off-by: Junrui Luo <moonafterrain@outlook.com> Link: https://patch.msgid.link/SYBPR01MB7881B47789D1B060CE8BF4C3AFC2A@SYBPR01MB7881.ausprd01.prod.outlook.com Signed-off-by: Takashi Iwai <tiwai@suse.de> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 5588b7c86effffa9bb55383a38800649d7b40778) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
commit 2c7e5e17c05f1d5e10e63e1baff2b362cd08dcd6 upstream. clang W=1 builds warn: nau8325.c:430:13: error: variable 'n2_max' is uninitialized when used here [-Werror,-Wuninitialized] which are false positive, because the variables will be always initialized when used (guarded by mclk_max!=0 check). However initializing them upfront makes the code more obvious and easier, plus it silences the warning. Signed-off-by: Krzysztof Kozlowski <krzysztof.kozlowski@oss.qualcomm.com> Link: https://patch.msgid.link/20251203140611.87191-2-krzysztof.kozlowski@oss.qualcomm.com Signed-off-by: Mark Brown <broonie@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 6e611d9cf07237828fa47a1c59a169b2105df842) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
Link: https://lore.kernel.org/r/20251216111320.896758933@linuxfoundation.org Tested-by: Brett A C Sheffield <bacs@librecast.net> Tested-by: Salvatore Bonaccorso <carnil@debian.org> Tested-by: Florian Fainelli <florian.fainelli@broadcom.com> Tested-by: Pavel Machek (CIP) <pavel@denx.de> Tested-by: Ron Economos <re@w6rz.net> Tested-by: Jeffrin Jose T <jeffrin@rajagiritech.edu.in> Tested-by: Jon Hunter <jonathanh@nvidia.com> Tested-by: Brett Mastbergen <bmastbergen@ciq.com> Tested-by: Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com> Tested-by: Peter Schneider <pschneider1968@googlemail.com> Tested-by: Mark Brown <broonie@kernel.org> Tested-by: Miguel Ojeda <ojeda@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 567bd8cbc2fe6b28b78864cbbbc41b0d405eb83c) Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
opsiff
force-pushed
the
linux-6.12-update-6.12.63
branch
from
fab5ecb to
f13bb0f
Compare
deepin pr auto reviewThe kernel has been updated with the patches from the Key Changes:
Testing:
Conclusion:The kernel has been successfully updated to version |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
20 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Update kernel base to 6.12.63.
git log --oneline v6.12.62..v6.12.63 |wc
354 3061 25605
Handle:
efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs
Aashish Sharma (1):
iommu/vt-d: Fix unused invalidation hint in qi_desc_iotlb
Abdun Nihaal (4):
wifi: ath12k: fix potential memory leak in ath12k_wow_arp_ns_offload()
wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper()
wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()
fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe()
Ahelenia Ziemiańska (1):
power: supply: apm_power: only unset own apm_get_power_status
Akash Goel (2):
drm/panthor: Fix potential memleak of vma structure
drm/panthor: Avoid adding of kernel BOs to extobj list
Akhil P Oommen (3):
drm/msm/a6xx: Flush LRZ cache before PT switch
drm/msm/a6xx: Fix the gemnoc workaround
drm/msm/a6xx: Improve MX rail fallback in RPMH vote init
Al Viro (1):
tracefs: fix a leak in eventfs_create_events_dir()
Alan Maguire (1):
libbpf: Fix parsing of multi-split BTF
Alex Williamson (1):
vfio/pci: Use RCU for error/request triggers to avoid circular locking
Alexander Dahl (1):
net: phy: adin1100: Fix software power-down ready condition
Alexander Martinz (1):
arm64: dts: qcom: qcm6490-shift-otter: Add missing reserved-memory
Alexandre Courbot (1):
firmware_loader: make RUST_FW_LOADER_ABSTRACTIONS select FW_LOADER
Alexandru Gagniuc (1):
remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs
Alexei Starovoitov (1):
selftests/bpf: Fix failure paths in send_signal test
Alexey Kodanev (1):
net: stmmac: fix rx limit check in stmmac_rx_zc()
Alexey Simakov (1):
dm-raid: fix possible NULL dereference with undefined raid type
Alok Tiwari (3):
virtio_vdpa: fix misleading return in void function
vdpa/mlx5: Fix incorrect error code reporting in query_virtqueues
vdpa/pds: use %pe for ERR_PTR() in event handler registration
Andreas Gruenbacher (1):
gfs2: Prevent recursive memory reclaim
Andres J Rosa (1):
ALSA: uapi: Fix typo in asound.h comment
Andrzej Kacprowski (1):
accel/ivpu: Prevent runtime suspend during context abort work
Andy Shevchenko (3):
lib/vsprintf: Check pointer before dereferencing in time_and_date()
resource: replace open coded resource_intersection()
resource: introduce is_type_match() helper and use it
Anton Khirnov (1):
platform/x86: asus-wmi: use brightness_set_blocking() for kbd led
Armin Wolf (2):
fs/nls: Fix utf16 to utf8 conversion
fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()
Arnaud Lecomte (2):
bpf: Refactor stack map trace depth calculation into helper function
bpf: Fix stackmap overflow check in __bpf_get_stackid()
Aryan Srivastava (2):
Revert "mtd: rawnand: marvell: fix layouts"
mtd: nand: relax ECC parameter validation check
Baochen Qiang (3):
wifi: ath11k: restore register window after global reset
wifi: ath11k: fix VHT MCS assignment
wifi: ath11k: fix peer HE MCS assignment
Bart Van Assche (3):
block/mq-deadline: Introduce dd_start_request()
block/mq-deadline: Switch back to a single dispatch list
scsi: target: Do not write NUL characters into ASCII configfs output
Bean Huo (1):
scsi: ufs: core: fix incorrect buffer duplication in
ufshcd_read_string_desc()
Benjamin Berg (1):
tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set
Biju Das (1):
pinctrl: renesas: rzg2l: Fix PMC restore
Boris Brezillon (3):
drm/panthor: Handle errors returned by drm_sched_entity_init()
drm/panthor: Fix group_free_queue() for partially initialized queues
drm/panthor: Fix UAF on kernel BO VA nodes
Cezary Rojewski (1):
ASoC: Intel: catpt: Fix error path in hw_params()
Chao Yu (3):
f2fs: fix to avoid running out of free segments
f2fs: sysfs: add encoding_flags entry
f2fs: introduce reserved_pin_section sysfs entry
Chen Ridong (1):
cpuset: Treat cpusets in attaching as populated
Chien Wong (1):
wifi: mac80211: fix CMAC functions not handling errors
Christoph Hellwig (3):
iomap: factor out a iomap_dio_done helper
iomap: always run error completions in user context
block: return unsigned int from queue_dma_alignment
Christophe JAILLET (1):
phy: renesas: rcar-gen3-usb2: Fix an error handling path in
rcar_gen3_phy_usb2_probe()
Christophe Leroy (1):
powerpc/32: Fix unpaired stwcx. on interrupt exit
Cong Zhang (1):
blk-mq: Abort suspend when wakeup events are pending
Cristian Ciocaltea (2):
phy: rockchip: samsung-hdptx: Reduce ROPLL loop bandwidth
phy: rockchip: samsung-hdptx: Prevent Inter-Pair Skew from exceeding
the limits
Cyrille Pitchen (1):
drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler()
Daeho Jeong (4):
f2fs: add carve_out sysfs node
f2fs: add gc_boost_gc_multiple sysfs node
f2fs: add gc_boost_gc_greedy sysfs node
f2fs: maintain one time GC mode is enabled during whole zoned GC cycle
Dan Carpenter (3):
drm/amd/display: Fix logical vs bitwise bug in
get_embedded_panel_info_v2_1()
drm/plane: Fix IS_ERR() vs NULL check in
drm_plane_create_hotspot_properties()
irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
Dapeng Mi (1):
perf/x86/intel: Correct large PEBS flag check
Dave Kleikamp (1):
dma/pool: eliminate alloc_pages warning in atomic_pool_expand
David Gow (1):
um: Don't rename vmap to kernel_vmap
David Howells (1):
cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB2
Dinh Nguyen (1):
firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc
Diogo Ivo (1):
usb: phy: Initialize struct usb_phy list_head
Dmitry Antipov (2):
ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
ocfs2: fix memory leak in ocfs2_merge_rec_left()
Dmitry Baryshkov (4):
interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS
arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller
drm/msm/dpu: drop dpu_hw_dsc_destroy() prototype
drm/msm/a2xx: stop over-complaining about the legacy firmware
Duoming Zhou (1):
scsi: imm: Fix use-after-free bug caused by unfinished delayed work
Dylan Hatch (1):
objtool: Fix standalone --hacks=jump_label
Edward Adam Davis (3):
ntfs3: init run lock for extend inode
fs/ntfs3: out1 also needs to put mi
fs/ntfs3: Prevent memory leaks in add sub record
Eric Dumazet (4):
net: hsr: remove one synchronize_rcu() from hsr_del_port()
net: hsr: remove synchronize_rcu() from hsr_add_port()
net: dst: introduce dst->dev_rcu
tcp_metrics: use dst_dev_net_rcu()
Eric Sandeen (1):
9p: fix cache/debug options printing in v9fs_show_options
Etienne Champetier (1):
selftests: bonding: add ipvlan over bond testing
FUKAUMI Naoki (3):
arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK
5A
arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A
arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 3C
Fangyu Yu (1):
RISC-V: KVM: Fix guest page fault within HLV* instructions
Fenglin Wu (1):
leds: rgb: leds-qcom-lpg: Don't enable TRILED when configuring PWM
Fernand Sieber (1):
sched/fair: Forfeit vruntime on yield
Fernando Fernandez Mancera (3):
ipv6: clear RA flags when adding a static route
netfilter: nf_conncount: rework API to use sk_buff directly
netfilter: nft_connlimit: update the count if add was skipped
Filipe Manana (1):
btrfs: fix leaf leak in an error path in btrfs_del_items()
Francesco Lavra (1):
iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member
Frank Li (1):
i3c: fix refcount inconsistency in i3c_master_register
Gabor Juhos (1):
regulator: core: disable supply if enabling main regulator fails
Gao Xiang (1):
erofs: limit the level of fs stacking for file-backed mounts
Gautham R. Shenoy (1):
cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs
Geert Uytterhoeven (3):
clk: renesas: Use str_on_off() helper
PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2
drm/imagination: Fix reference to
devm_platform_get_and_ioremap_resource()
Gergo Koteles (1):
arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider
Gopi Krishna Menon (1):
usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
Greg Kroah-Hartman (1):
Linux 6.12.63
Guenter Roeck (2):
block/blk-throttle: Fix throttle slice time for SSDs
of: Skip devicetree kunit tests when RISCV+ACPI doesn't populate root
node
Guido Günther (1):
drm/panel: visionox-rm69299: Don't clear all mode flags
Hangbin Liu (1):
selftests: bonding: add delay before each xvlan_over_bond connectivity
check
Haotian Zhang (24):
soc: qcom: gsbi: fix double disable caused by devm
mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and
remove
soc: qcom: smem: fix hwspinlock resource leak in probe error paths
pinctrl: stm32: fix hwspinlock resource leak in probe function
power: supply: rt5033_charger: Fix device node reference leaks
mfd: da9055: Fix missing regmap_del_irq_chip() in error path
scsi: stex: Fix reboot_notifier leak in probe error path
clk: renesas: r9a06g032: Fix memory leak in error path
ACPI: property: Fix fwnode refcount leak in
acpi_fwnode_graph_parse_endpoint()
scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls
leds: netxbig: Fix GPIO descriptor leak in error paths
watchdog: wdat_wdt: Fix ACPI table leak in probe function
watchdog: starfive: Fix resource leak in probe error path
mfd: mt6397-irq: Fix missing irq_domain_remove() in error path
mfd: mt6358-irq: Fix missing irq_domain_remove() in error path
crypto: starfive - Correctly handle return of sg_nents_for_len
crypto: ccree - Correctly handle return of sg_nents_for_len
greybus: gb-beagleplay: Fix timeout handling in bootloader functions
hwmon: sy7636a: Fix regulator_enable resource leak on error path
mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors
pinctrl: single: Fix incorrect type for error return variable
ASoC: bcm: bcm63xx-pcm-whistler: Check return value of
of_dma_configure()
rtc: gamecube: Check the return value of ioremap()
dm log-writes: Add missing set_freezable() for freezable kthread
Haotien Hsu (1):
usb: gadget: tegra-xudc: Always reinitialize data toggle when clear
halt
Heiko Carstens (2):
s390/smp: Fix fallback CPU detection
s390/ap: Don't leak debug feature files if AP instructions are not
available
Herbert Xu (1):
crypto: authenc - Correctly pass EINPROGRESS back up to the caller
Horatiu Vultur (1):
phy: mscc: Fix PTP for VSC8574 and VSC8572
Huacai Chen (1):
LoongArch: Add machine_kexec_mask_interrupts() implementation
Ian Rogers (1):
perf hist: In init, ensure mem_info is put on error paths
Ilias Stamatis (1):
Reinstate "resource: avoid unnecessary lookups in
find_next_iomem_res()"
Israel Rukshin (1):
nvme-auth: use kvfree() for memory allocated with kvcalloc()
Ivan Abramov (4):
power: supply: cw2015: Check devm_delayed_work_autocancel() return
code
power: supply: max17040: Check iio_read_channel_processed() return
code
power: supply: rt9467: Return error on failure in
rt9467_set_value_from_ranges()
power: supply: wm831x: Check wm831x_set_bits() return value
Ivan Stepchenko (1):
mtd: lpddr_cmds: fix signed shifts in lpddr_cmds
Jacek Lawrynowicz (1):
accel/ivpu: Make function parameter names consistent
Jacob Moroni (1):
RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY
Jaegeuk Kim (2):
f2fs: keep POSIX_FADV_NOREUSE ranges
f2fs: add a sysfs entry to reclaim POSIX_FADV_NOREUSE pages
Janusz Krzysztofik (1):
drm/vgem-fence: Fix potential deadlock on release
Jaroslav Kysela (2):
ASoC: nau8325: use simple i2c probe function
ASoC: nau8325: add missing build config
Jason Tian (1):
RAS: Report all ARM processor CPER information to userspace
Jay Liu (1):
drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue
Jeff Johnson (1):
wifi: ath10k: Add missing include of export.h
Jianglei Nie (1):
staging: fbtft: core: fix potential memory leak in
fbtft_probe_common()
Jihed Chaibi (3):
ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible
ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible
ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node
properties
Jisheng Zhang (3):
usb: dwc2: disable platform lowlevel hw resources during shutdown
usb: dwc2: fix hang during shutdown if set as peripheral
usb: dwc2: fix hang during suspend if set as peripheral
Johan Hovold (8):
irqchip/irq-bcm7038-l1: Fix section mismatch
irqchip/irq-bcm7120-l2: Fix section mismatch
irqchip/irq-brcmstb-l2: Fix section mismatch
irqchip/imx-mu-msi: Fix section mismatch
irqchip/renesas-rzg2l: Fix section mismatch
irqchip/starfive-jh8100: Fix section mismatch
irqchip/qcom-irq-combiner: Fix section mismatch
clk: keystone: fix compile testing
Jonathan Curley (1):
NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in
pnfs_mark_layout_stateid_invalid
Josh Poimboeuf (2):
objtool: Fix weak symbol detection
perf: Remove get_perf_callchain() init_nr argument
Junrui Luo (4):
ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
ALSA: firewire-motu: add bounds check in put_user loop for DSP events
ALSA: dice: fix buffer overflow in detect_stream_formats()
ALSA: wavefront: Fix integer overflow in sample size validation
Kang Yang (1):
wifi: ath10k: move recovery check logic into a new work
Karol Wachowski (2):
accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail
accel/ivpu: Fix DCT active percent format
Kathara Sasikumar (1):
docs: hwmon: fix link to g762 devicetree binding
Ketil Johnsen (2):
drm/panthor: Fix UAF race between device unplug and FW event
processing
drm/panthor: Fix race with suspend during unplug
Kevin Brodsky (1):
ublk: prevent invalid access with DEBUG
Konrad Dybcio (2):
dt-bindings: clock: qcom,x1e80100-gcc: Add missing USB4 clocks/resets
clk: qcom: gcc-x1e80100: Add missing USB4 clocks/resets
Konstantin Andreev (7):
smack: deduplicate "does access rule request transmutation"
smack: fix bug: SMACK64TRANSMUTE set on non-directory
smack: deduplicate xattr setting in smack_inode_init_security()
smack: always "instantiate" inode in smack_inode_init_security()
smack: fix bug: invalid label of unix socket file
smack: fix bug: unprivileged task can create labels
smack: fix bug: setting task label silently ignores input garbage
Krishna Kurapati (2):
arm64: dts: qcom: x1e80100: Fix compile warnings for USB HS controller
arm64: dts: qcom: x1e80100: Add missing quirk for HS only USB
controller
Krzysztof Czurylo (2):
RDMA/irdma: Fix data race in irdma_sc_ccq_arm
RDMA/irdma: Fix data race in irdma_free_pble
Krzysztof Kozlowski (1):
ASoC: codecs: nau8325: Silence uninitialized variables warnings
Kuan-Wei Chiu (1):
interconnect: debugfs: Fix incorrect error handling for NULL path
Kuniyuki Iwashima (1):
sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock().
Leo Yan (6):
coresight: Change device mode to atomic type
coresight: etm4x: Correct polling IDLE bit
coresight: etm4x: Extract the trace unit controlling
coresight: etm4x: Add context synchronization before enabling trace
perf arm-spe: Extend branch operations
perf arm_spe: Fix memset subclass in operation
Leon Hwang (1):
bpf: Free special fields when update [lru_,]percpu_hash maps
Li Qiang (1):
uio: uio_fsl_elbc_gpcm:: Add null pointer check to
uio_fsl_elbc_gpcm_probe
Liyuan Pang (1):
ARM: 9464/1: fix input-only operand modification in
load_unaligned_zeropad()
Loic Poulain (1):
wifi: ath10k: Avoid vdev delete timeout when firmware is already down
Long Li (1):
macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse
Luca Ceresoli (1):
backlight: led-bl: Add devlink to supplier LEDs
Luca Weiss (2):
clk: qcom: camcc-sm6350: Fix PLL config of PLL2
clk: qcom: camcc-sm7150: Fix PLL config of PLL2
MD Danish Anwar (1):
net: hsr: Create and export hsr_get_port_ndev()
Ma Ke (1):
RDMA/rtrs: server: Fix error handling in get_or_create_srv
Madhur Kumar (1):
drm/nouveau: refactor deprecated strcpy
Mainak Sen (1):
gpu: host1x: Fix race in syncpt alloc/free
Manivannan Sadhasivam (1):
dt-bindings: PCI: amlogic: Fix the register name of the DBI region
Marek Szyprowski (4):
ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during
system suspend
ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during
system suspend
ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during
system suspend
ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during
system suspend
Marek Vasut (2):
clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle
callback
clk: renesas: cpg-mssr: Read back reset registers to assure values
latched
Mark Brown (1):
regulator: fixed: Rely on the core freeing the enable GPIO
Martin KaFai Lau (1):
bpf: Check skb->transport_header is set in bpf_skb_check_mtu
Matt Bobrowski (2):
selftests/bpf: skip test_perf_branches_hw() on unsupported platforms
selftests/bpf: Improve reliability of test_perf_branches_no_hw()
Mauro Carvalho Chehab (3):
efi/cper: Add a new helper function to print bitmasks
efi/cper: Adjust infopfx size to accept an extra space
efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs
Mavroudis Chatzilazaridis (1):
HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync()
Menglong Dong (1):
bpf: Handle return value of ftrace_set_filter_ip in register_fentry
Michael S. Tsirkin (4):
virtio: fix typo in virtio_device_ready() comment
virtio: fix whitespace in virtio_config_ops
virtio: fix grammar in virtio_queue_info docs
virtio: fix virtqueue_set_affinity() docs
Mike Christie (1):
vhost: Fix kthread worker cgroup failure handling
Mike McGowen (1):
scsi: smartpqi: Fix device resources accessed after device removal
Mikhail Kshevetskiy (1):
spi: airoha-snfi: en7523: workaround flash damaging if UART_TXD was
short to GND
Mohamed Khalfella (1):
block: Use RCU in blk_mq_[un]quiesce_tagset() instead of
set->tag_list_lock
Murad Masimov (1):
power: supply: rt9467: Prevent using uninitialized local variable in
rt9467_set_value_from_ranges()
Namhyung Kim (3):
perf lock contention: Load kernel map before lookup
perf tools: Mark split kallsyms DSOs as loaded
perf tools: Fix split kallsyms DSO counting
Neil Armstrong (1):
arm64: dts: qcom: sm8650: set ufs as dma coherent
NeilBrown (1):
nfs/vfs: discard d_exact_alias()
Oliver Neukum (1):
usb: chaoskey: fix locking for O_NONBLOCK
Pablo Neira Ayuso (1):
netfilter: flowtable: check for maximum number of encapsulations in
bridge vlan
Peng Fan (1):
firmware: imx: scu-irq: fix OF node leak in
Peter Griffin (1):
arm64: dts: exynos: gs101: fix sysreg_apm reg property
Peter Zijlstra (1):
task_work: Fix NMI race condition
Pu Lehui (1):
bpf: Fix invalid prog->stats access when update_effective_progs fails
Randolph Sapp (1):
arm64: dts: ti: k3-am62p: Fix memory ranges for GPU
Randy Dunlap (2):
firmware: qcom: tzmem: fix qcom_tzmem_policy kernel-doc
backlight: lp855x: Fix lp855x.h kernel-doc warnings
Raphael Pinsonneault-Thibeault (1):
ntfs3: fix uninit memory after failed mi_read in mi_format_new
Rene Rebe (1):
ps3disk: use memcpy_{from,to}_bvec index
René Rebe (1):
ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4
Ria Thomas (1):
wifi: ieee80211: correct FILS status codes
Ritesh Harjani (IBM) (2):
powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within
RMA limit
powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE
format
Robert Marko (1):
net: phy: aquantia: check for NVMEM deferral
Ryan Huang (1):
iommu/arm-smmu-v3: Fix error check in arm_smmu_alloc_cd_tables
Selvin Xavier (2):
RDMA/bnxt_re: Fix the inline size for GenP7 devices
RDMA/bnxt_re: Pass correct flag for dma mr creation
Sergey Bashirov (1):
NFSD/blocklayout: Fix minlength check in proc_layoutget
Seungjin Bae (2):
USB: Fix descriptor count when handling invalid MBIM extended
descriptor
wifi: rtl818x: rtl8187: Fix potential buffer underflow in
rtl8187_rx_cb()
Shaurya Rane (1):
block: fix memory leak in __blkdev_issue_zero_pages
Shawn Lin (1):
PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition
Shenghao Ding (1):
ASoC: tas2781: correct the wrong period
Shengjiu Wang (3):
ASoC: fsl_xcvr: clear the channel status control memory
ASoC: ak4458: Disable regulator when error happens
ASoC: ak5558: Disable regulator when error happens
Shuai Xue (1):
perf record: skip synthesize event when open evsel failed
Siddharth Vadapalli (1):
PCI: keystone: Exit ks_pcie_probe() for invalid mode
Sidharth Seela (1):
ntfs3: Fix uninit buffer allocated by __getname()
Sourabh Jain (1):
powerpc/kdump: Fix size calculation for hot-removed memory ranges
Stanley Chu (1):
i3c: master: svc: Prevent incomplete IBI transaction
Stephan Gerhold (2):
dt-bindings: clock: qcom,x1e80100-gcc: Add missing video resets
iommu/arm-smmu-qcom: Enable use of all SMR groups when running
bare-metal
Sven Peter (1):
usb: dwc3: dwc3_power_off_all_roothub_ports: Use ioremap_np when
required
Tengda Wu (1):
x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
Thangaraj Samynathan (1):
net: lan743x: Allocate rings outside ZONE_DMA
Thierry Bultel (1):
clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register
Thorsten Blum (1):
crypto: asymmetric_keys - prevent overflow in
asymmetric_key_generate_id
Tianchu Chen (1):
spi: ch341: fix out-of-bounds memory access in ch341_transfer_one
Tianyou Li (1):
perf annotate: Check return value of evsel__get_arch() properly
Tim Harvey (4):
arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate
usdhc1 props
arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl
arm64: dts: imx8mp-venice-gw702x: remove off-board uart
arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1
Timur Tabi (1):
drm/nouveau: restrict the flush page to a 32-bit address
Tingmao Wang (1):
fs/9p: Don't open remote file with APPEND mode when writeback cache is
used
Trond Myklebust (10):
NFS: Avoid changing nlink when file removes and attribute updates race
NFS: Initialise verifiers for visible dentries in readdir and lookup
NFS: Initialise verifiers for visible dentries in nfs_atomic_open()
NFS: Initialise verifiers for visible dentries in
_nfs4_open_and_get_state
Revert "nfs: ignore SB_RDONLY when remounting nfs"
Revert "nfs: clear SB_RDONLY before getting superblock"
Revert "nfs: ignore SB_RDONLY when mounting nfs"
NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
Expand the type of nfs_fattr->valid
NFS: Fix inheritance of the block sizes when automounting
Usama Arif (2):
x86/boot: Fix page table access in 5-level to 4-level paging
transition
efi/libstub: Fix page table access in 5-level to 4-level paging
transition
Uwe Kleine-König (2):
soc: Switch back to struct platform_driver::remove()
pwm: bcm2835: Make sure the channel is enabled after pwm_request()
Vishwaroop A (1):
spi: tegra210-quad: Fix timeout handling
Vladimir Oltean (1):
net: dsa: xrs700x: reject unsupported HSR configurations
Vladimir Zapolskiy (2):
clk: qcom: camcc-sm8550: Specify Titan GDSC power domain as a parent
to other
clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent
to other
Wang Liang (1):
locktorture: Fix memory leak in param_set_cpumask()
Wolfram Sang (2):
ARM: dts: renesas: gose: Remove superfluous port property
ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells
properties
Xi Pardee (1):
platform/x86:intel/pmc: Update Arrow Lake telemetry GUID
Xiang Mei (1):
net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop
Xiaogang Chen (1):
drm/amdkfd: Use huge page size to check split svm range alignment
Xiaolei Wang (1):
phy: freescale: Initialize priv->lock
Xiaoliang Yang (1):
net: hsr: create an API to get hsr port type
Xuanqiang Luo (3):
rculist: Add hlist_nulls_replace_rcu() and
hlist_nulls_replace_init_rcu()
inet: Avoid ehash lookup race in inet_ehash_insert()
inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule()
Yegor Yefremov (1):
ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels
Yongjian Sun (1):
ext4: improve integrity checking in __mb_check_buddy by enhancing
order-0 validation
Yu Kuai (1):
md/raid5: fix IO hang when array is broken with IO inflight
Yun Zhou (1):
md: fix rcu protection in md_wakeup_thread
Zhang Rui (1):
perf/x86/intel/cstate: Remove PC3 support from LunarLake
Zhang Yi (1):
ext4: correct the checking of quota files before moving extents
Zhao Yipeng (1):
ima: Handle error code returned by ima_filter_rule_match()
Zheng Qixing (2):
nbd: defer config put in recv_work
nbd: defer config unlock in nbd_genl_connect
Zhu Yanjun (1):
RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
Zilin Guan (3):
crypto: iaa - Fix incorrect return value in save_iaa_wq()
scsi: qla2xxx: Fix improper freeing of purex item
mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
nieweiqiang (1):
crypto: hisilicon/qm - restore original qos values
shechenglong (1):
block: fix comment for op_is_zone_mgmt() to include RESET_ALL
sparkhuang (1):
regulator: core: Protect regulator_supply_alias_list with
regulator_list_mutex
xupengbo (1):
sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when
the last task migrates out
Documentation/ABI/testing/sysfs-fs-f2fs | 52 ++
Documentation/admin-guide/LSM/Smack.rst | 16 +-
.../bindings/clock/qcom,x1e80100-gcc.yaml | 62 +-
.../bindings/pci/amlogic,axg-pcie.yaml | 6 +-
Documentation/hwmon/g762.rst | 2 +-
Makefile | 2 +-
arch/arm/boot/dts/renesas/r8a7793-gose.dts | 1 -
.../dts/renesas/r9a06g032-rzn1d400-db.dts | 2 -
.../arm/boot/dts/samsung/exynos4210-i9100.dts | 1 +
.../arm/boot/dts/samsung/exynos4210-trats.dts | 1 +
.../dts/samsung/exynos4210-universal_c210.dts | 1 +
.../boot/dts/samsung/exynos4412-midas.dtsi | 1 +
.../st/stm32mp157c-phycore-stm32mp15-som.dtsi | 8 +-
.../dts/ti/omap/am335x-netcom-plus-2xx.dts | 8 +-
arch/arm/boot/dts/ti/omap/omap3-beagle-xm.dts | 2 +-
arch/arm/boot/dts/ti/omap/omap3-n900.dts | 2 +-
arch/arm/include/asm/word-at-a-time.h | 10 +-
arch/arm64/boot/dts/exynos/google/gs101.dtsi | 4 +-
.../dts/freescale/imx8mm-venice-gw72xx.dtsi | 11 -
.../dts/freescale/imx8mp-venice-gw702x.dtsi | 51 --
.../dts/freescale/imx8mp-venice-gw72xx.dtsi | 11 -
arch/arm64/boot/dts/qcom/msm8996.dtsi | 3 +
.../boot/dts/qcom/qcm6490-shift-otter.dts | 5 +
.../boot/dts/qcom/sdm845-oneplus-common.dtsi | 4 +-
arch/arm64/boot/dts/qcom/sm8650.dtsi | 2 +
arch/arm64/boot/dts/qcom/x1e80100.dtsi | 12 +-
.../boot/dts/rockchip/rk3566-rock-3c.dts | 1 +
.../boot/dts/rockchip/rk3588s-rock-5a.dts | 15 +-
arch/arm64/boot/dts/ti/k3-am62p.dtsi | 2 +-
arch/loongarch/kernel/machine_kexec.c | 22 +
arch/powerpc/kernel/entry_32.S | 10 +-
arch/powerpc/kexec/ranges.c | 2 +-
arch/powerpc/mm/book3s64/hash_utils.c | 10 +-
arch/powerpc/mm/ptdump/hashpagetable.c | 6 +
arch/riscv/kvm/vcpu_insn.c | 22 +
arch/s390/kernel/smp.c | 1 +
arch/um/Makefile | 12 +-
arch/x86/boot/compressed/pgtable_64.c | 11 +-
arch/x86/events/intel/core.c | 4 +-
arch/x86/events/intel/cstate.c | 3 +-
arch/x86/kernel/dumpstack.c | 23 +-
block/blk-lib.c | 6 +-
block/blk-mq.c | 35 +-
block/blk-throttle.c | 9 +-
block/mq-deadline.c | 129 ++--
crypto/asymmetric_keys/asymmetric_type.c | 14 +-
crypto/authenc.c | 75 +-
drivers/accel/ivpu/ivpu_fw.h | 2 +-
drivers/accel/ivpu/ivpu_hw_btrs.c | 2 +-
drivers/accel/ivpu/ivpu_hw_btrs.h | 2 +-
drivers/accel/ivpu/ivpu_job.c | 14 +-
drivers/accel/ivpu/ivpu_pm.c | 9 +-
drivers/acpi/apei/ghes.c | 24 +-
drivers/acpi/processor_core.c | 2 +-
drivers/acpi/property.c | 1 +
drivers/base/firmware_loader/Kconfig | 2 +-
drivers/block/nbd.c | 5 +-
drivers/block/ps3disk.c | 4 +
drivers/block/ublk_drv.c | 4 +-
drivers/clk/Makefile | 3 +-
drivers/clk/qcom/camcc-sm6350.c | 13 +-
drivers/clk/qcom/camcc-sm7150.c | 6 +-
drivers/clk/qcom/camcc-sm8550.c | 10 +
drivers/clk/qcom/gcc-x1e80100.c | 698 +++++++++++++++++-
drivers/clk/renesas/r7s9210-cpg-mssr.c | 7 +-
drivers/clk/renesas/r8a77970-cpg-mssr.c | 8 +-
drivers/clk/renesas/r9a06g032-clocks.c | 6 +-
drivers/clk/renesas/rcar-gen2-cpg.c | 5 +-
drivers/clk/renesas/rcar-gen2-cpg.h | 3 +-
drivers/clk/renesas/rcar-gen3-cpg.c | 6 +-
drivers/clk/renesas/rcar-gen3-cpg.h | 3 +-
drivers/clk/renesas/rcar-gen4-cpg.c | 6 +-
drivers/clk/renesas/rcar-gen4-cpg.h | 3 +-
drivers/clk/renesas/renesas-cpg-mssr.c | 150 ++--
drivers/clk/renesas/renesas-cpg-mssr.h | 20 +-
drivers/clk/renesas/rzg2l-cpg.c | 3 +-
drivers/cpufreq/amd-pstate.c | 2 +-
drivers/crypto/ccree/cc_buffer_mgr.c | 6 +-
drivers/crypto/hisilicon/qm.c | 14 +-
drivers/crypto/intel/iaa/iaa_crypto_main.c | 2 +-
drivers/crypto/starfive/jh7110-hash.c | 6 +-
drivers/firmware/efi/cper-arm.c | 52 +-
drivers/firmware/efi/cper.c | 60 ++
drivers/firmware/efi/libstub/x86-5lvl.c | 4 +-
drivers/firmware/imx/imx-scu-irq.c | 4 +-
drivers/firmware/stratix10-svc.c | 1 +
drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 46 +-
.../drm/amd/display/dc/bios/bios_parser2.c | 8 +-
.../gpu/drm/atmel-hlcdc/atmel_hlcdc_plane.c | 27 +-
drivers/gpu/drm/drm_plane.c | 8 +-
drivers/gpu/drm/imagination/pvr_device.c | 2 +-
drivers/gpu/drm/mediatek/mtk_disp_ccorr.c | 23 +-
drivers/gpu/drm/msm/adreno/a2xx_gpu.c | 2 +-
drivers/gpu/drm/msm/adreno/a6xx_gmu.c | 34 +-
drivers/gpu/drm/msm/adreno/a6xx_gpu.c | 10 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_dsc.h | 6 -
drivers/gpu/drm/nouveau/nouveau_fence.c | 6 +-
drivers/gpu/drm/nouveau/nvkm/subdev/fb/base.c | 2 +-
.../gpu/drm/panel/panel-visionox-rm69299.c | 2 +-
drivers/gpu/drm/panthor/panthor_device.c | 4 +-
drivers/gpu/drm/panthor/panthor_gem.c | 20 +-
drivers/gpu/drm/panthor/panthor_mmu.c | 18 +-
drivers/gpu/drm/panthor/panthor_sched.c | 6 +-
drivers/gpu/drm/vgem/vgem_fence.c | 2 +-
drivers/gpu/host1x/syncpt.c | 4 +-
drivers/greybus/gb-beagleplay.c | 12 +-
drivers/hid/hid-logitech-hidpp.c | 9 +-
drivers/hwmon/sy7636a-hwmon.c | 7 +-
.../coresight/coresight-etm4x-core.c | 130 ++--
drivers/i3c/master.c | 8 +-
drivers/i3c/master/svc-i3c-master.c | 22 +-
drivers/iio/imu/st_lsm6dsx/st_lsm6dsx.h | 2 +-
drivers/infiniband/hw/bnxt_re/ib_verbs.c | 8 +-
drivers/infiniband/hw/bnxt_re/qplib_sp.c | 8 +-
drivers/infiniband/hw/bnxt_re/qplib_sp.h | 2 +-
drivers/infiniband/hw/irdma/cm.c | 2 +-
drivers/infiniband/hw/irdma/ctrl.c | 3 +
drivers/infiniband/hw/irdma/main.h | 2 +-
drivers/infiniband/hw/irdma/pble.c | 6 +-
drivers/infiniband/hw/irdma/verbs.c | 15 +-
drivers/infiniband/hw/irdma/verbs.h | 3 +-
drivers/infiniband/sw/rxe/rxe_srq.c | 7 +-
drivers/infiniband/ulp/rtrs/rtrs-srv.c | 2 +-
drivers/interconnect/debugfs-client.c | 7 +-
drivers/interconnect/qcom/msm8996.c | 1 +
drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 2 +-
drivers/iommu/arm/arm-smmu/arm-smmu-qcom.c | 27 +-
drivers/iommu/intel/iommu.h | 2 +-
drivers/irqchip/irq-bcm7038-l1.c | 8 +-
drivers/irqchip/irq-bcm7120-l2.c | 17 +-
drivers/irqchip/irq-brcmstb-l2.c | 12 +-
drivers/irqchip/irq-imx-mu-msi.c | 14 +-
drivers/irqchip/irq-mchp-eic.c | 2 +-
drivers/irqchip/irq-renesas-rzg2l.c | 6 +-
drivers/irqchip/irq-starfive-jh8100-intc.c | 3 +-
drivers/irqchip/qcom-irq-combiner.c | 2 +-
drivers/leds/leds-netxbig.c | 36 +-
drivers/leds/rgb/leds-qcom-lpg.c | 4 +-
drivers/macintosh/mac_hid.c | 3 +-
drivers/md/dm-log-writes.c | 1 +
drivers/md/dm-raid.c | 2 +
drivers/md/md.c | 14 +-
drivers/md/md.h | 8 +-
drivers/md/raid5.c | 6 +-
drivers/mfd/da9055-core.c | 1 +
drivers/mfd/mt6358-irq.c | 1 +
drivers/mfd/mt6397-irq.c | 1 +
drivers/mtd/lpddr/lpddr_cmds.c | 8 +-
drivers/mtd/nand/raw/lpc32xx_slc.c | 2 +
drivers/mtd/nand/raw/marvell_nand.c | 13 +-
drivers/mtd/nand/raw/nand_base.c | 13 +-
.../mtd/nand/raw/renesas-nand-controller.c | 5 +-
drivers/net/dsa/xrs700x/xrs700x.c | 11 +
drivers/net/ethernet/microchip/lan743x_main.c | 3 +-
.../net/ethernet/stmicro/stmmac/stmmac_main.c | 2 +-
drivers/net/phy/adin1100.c | 2 +-
drivers/net/phy/aquantia/aquantia_firmware.c | 2 +-
drivers/net/phy/mscc/mscc_main.c | 6 +-
drivers/net/wireless/ath/ath10k/bmi.c | 2 +
drivers/net/wireless/ath/ath10k/ce.c | 2 +
drivers/net/wireless/ath/ath10k/core.c | 22 +-
drivers/net/wireless/ath/ath10k/core.h | 2 +-
drivers/net/wireless/ath/ath10k/coredump.c | 2 +
drivers/net/wireless/ath/ath10k/debug.c | 2 +
drivers/net/wireless/ath/ath10k/htc.c | 3 +
drivers/net/wireless/ath/ath10k/htt_rx.c | 3 +
drivers/net/wireless/ath/ath10k/htt_tx.c | 2 +
drivers/net/wireless/ath/ath10k/mac.c | 36 +-
drivers/net/wireless/ath/ath10k/trace.c | 2 +
drivers/net/wireless/ath/ath11k/mac.c | 8 +-
drivers/net/wireless/ath/ath11k/pci.c | 20 +-
drivers/net/wireless/ath/ath11k/wmi.c | 20 +-
drivers/net/wireless/ath/ath11k/wmi.h | 2 +
drivers/net/wireless/ath/ath12k/wow.c | 1 +
.../net/wireless/mediatek/mt76/mt7615/mcu.c | 4 +-
.../wireless/realtek/rtl818x/rtl8180/dev.c | 9 +-
.../wireless/realtek/rtl818x/rtl8187/dev.c | 27 +-
drivers/net/wireless/st/cw1200/bh.c | 6 +-
drivers/nvme/host/auth.c | 2 +-
drivers/of/of_kunit_helpers.c | 5 +-
drivers/pci/controller/Kconfig | 7 +-
drivers/pci/controller/dwc/pci-keystone.c | 2 +
drivers/pci/controller/dwc/pcie-designware.h | 2 +-
drivers/phy/freescale/phy-fsl-imx8qm-hsio.c | 5 +-
drivers/phy/renesas/phy-rcar-gen3-usb2.c | 20 +-
.../phy/rockchip/phy-rockchip-samsung-hdptx.c | 13 +-
drivers/pinctrl/pinctrl-single.c | 7 +-
drivers/pinctrl/renesas/pinctrl-rzg2l.c | 6 +-
drivers/pinctrl/stm32/pinctrl-stm32.c | 2 +-
drivers/platform/x86/asus-wmi.c | 8 +-
drivers/platform/x86/intel/pmc/core.h | 2 +-
drivers/power/supply/apm_power.c | 3 +-
drivers/power/supply/cw2015_battery.c | 8 +-
drivers/power/supply/max17040_battery.c | 6 +-
drivers/power/supply/rt5033_charger.c | 2 +
drivers/power/supply/rt9467-charger.c | 6 +-
drivers/power/supply/wm831x_power.c | 10 +-
drivers/pwm/pwm-bcm2835.c | 28 +-
drivers/ras/ras.c | 40 +-
drivers/regulator/core.c | 37 +-
drivers/regulator/fixed.c | 11 +-
drivers/remoteproc/qcom_q6v5_wcss.c | 8 +-
drivers/rtc/rtc-gamecube.c | 4 +
drivers/s390/crypto/ap_bus.c | 8 +-
drivers/scsi/imm.c | 1 +
drivers/scsi/qla2xxx/qla_nvme.c | 2 +-
drivers/scsi/sim710.c | 2 +
drivers/scsi/smartpqi/smartpqi_init.c | 19 +
drivers/scsi/stex.c | 1 +
drivers/soc/aspeed/aspeed-lpc-ctrl.c | 2 +-
drivers/soc/aspeed/aspeed-lpc-snoop.c | 2 +-
drivers/soc/aspeed/aspeed-p2a-ctrl.c | 2 +-
drivers/soc/aspeed/aspeed-uart-routing.c | 2 +-
drivers/soc/fsl/dpaa2-console.c | 2 +-
drivers/soc/fsl/qe/qmc.c | 2 +-
drivers/soc/fsl/qe/tsa.c | 2 +-
drivers/soc/fujitsu/a64fx-diag.c | 2 +-
drivers/soc/hisilicon/kunpeng_hccs.c | 2 +-
drivers/soc/ixp4xx/ixp4xx-npe.c | 2 +-
drivers/soc/ixp4xx/ixp4xx-qmgr.c | 2 +-
drivers/soc/litex/litex_soc_ctrl.c | 2 +-
drivers/soc/loongson/loongson2_guts.c | 2 +-
drivers/soc/mediatek/mtk-devapc.c | 2 +-
drivers/soc/mediatek/mtk-mmsys.c | 2 +-
drivers/soc/mediatek/mtk-socinfo.c | 2 +-
drivers/soc/microchip/mpfs-sys-controller.c | 2 +-
drivers/soc/pxa/ssp.c | 2 +-
drivers/soc/qcom/icc-bwmon.c | 2 +-
drivers/soc/qcom/llcc-qcom.c | 2 +-
drivers/soc/qcom/ocmem.c | 2 +-
drivers/soc/qcom/pmic_glink.c | 2 +-
drivers/soc/qcom/qcom_aoss.c | 2 +-
drivers/soc/qcom/qcom_gsbi.c | 8 -
drivers/soc/qcom/qcom_stats.c | 2 +-
drivers/soc/qcom/ramp_controller.c | 4 +-
drivers/soc/qcom/rmtfs_mem.c | 2 +-
drivers/soc/qcom/rpm-proc.c | 2 +-
drivers/soc/qcom/rpm_master_stats.c | 2 +-
drivers/soc/qcom/smem.c | 5 +-
drivers/soc/qcom/smp2p.c | 2 +-
drivers/soc/qcom/smsm.c | 6 +-
drivers/soc/qcom/socinfo.c | 2 +-
drivers/soc/rockchip/io-domain.c | 8 +-
drivers/soc/samsung/exynos-chipid.c | 4 +-
drivers/soc/tegra/cbb/tegra194-cbb.c | 2 +-
drivers/soc/ti/k3-ringacc.c | 2 +-
drivers/soc/ti/knav_dma.c | 4 +-
drivers/soc/ti/knav_qmss_queue.c | 2 +-
drivers/soc/ti/pm33xx.c | 2 +-
drivers/soc/ti/pruss.c | 4 +-
drivers/soc/ti/smartreflex.c | 2 +-
drivers/soc/ti/wkup_m3_ipc.c | 2 +-
drivers/soc/xilinx/xlnx_event_manager.c | 2 +-
drivers/soc/xilinx/zynqmp_power.c | 2 +-
drivers/spi/spi-airoha-snfi.c | 25 +-
drivers/spi/spi-ch341.c | 2 +-
drivers/spi/spi-tegra210-quad.c | 22 +-
drivers/staging/fbtft/fbtft-core.c | 4 +-
drivers/target/target_core_configfs.c | 1 -
drivers/ufs/core/ufshcd.c | 2 +-
drivers/uio/uio_fsl_elbc_gpcm.c | 7 +
drivers/usb/core/message.c | 2 +-
drivers/usb/dwc2/platform.c | 16 +-
drivers/usb/dwc3/host.c | 5 +-
drivers/usb/gadget/legacy/raw_gadget.c | 3 +
drivers/usb/gadget/udc/tegra-xudc.c | 6 -
drivers/usb/misc/chaoskey.c | 16 +-
drivers/usb/phy/phy.c | 4 +
drivers/vdpa/mlx5/net/mlx5_vnet.c | 2 +-
drivers/vdpa/pds/vdpa_dev.c | 2 +-
drivers/vfio/pci/vfio_pci_core.c | 68 +-
drivers/vfio/pci/vfio_pci_intrs.c | 52 +-
drivers/vfio/pci/vfio_pci_priv.h | 4 +
drivers/vhost/vhost.c | 4 +-
drivers/video/backlight/led_bl.c | 13 +
drivers/video/fbdev/ssd1307fb.c | 4 +-
drivers/virtio/virtio_vdpa.c | 2 +-
drivers/watchdog/starfive-wdt.c | 4 +-
drivers/watchdog/wdat_wdt.c | 64 +-
fs/9p/v9fs.c | 4 +-
fs/9p/vfs_file.c | 11 +-
fs/9p/vfs_inode.c | 3 +-
fs/9p/vfs_inode_dotl.c | 2 +-
fs/btrfs/ctree.c | 2 +-
fs/dcache.c | 46 --
fs/erofs/super.c | 16 +
fs/ext4/mballoc.c | 49 +-
fs/ext4/move_extent.c | 2 +-
fs/f2fs/debug.c | 3 +
fs/f2fs/f2fs.h | 20 +-
fs/f2fs/file.c | 77 +-
fs/f2fs/gc.c | 21 +-
fs/f2fs/gc.h | 2 +
fs/f2fs/inode.c | 14 +
fs/f2fs/shrinker.c | 90 +++
fs/f2fs/super.c | 8 +-
fs/f2fs/sysfs.c | 101 +++
fs/gfs2/glock.c | 5 +-
fs/gfs2/inode.c | 15 +
fs/gfs2/inode.h | 1 +
fs/gfs2/ops_fstype.c | 2 +-
fs/iomap/direct-io.c | 77 +-
fs/nfs/client.c | 21 +-
fs/nfs/dir.c | 27 +-
fs/nfs/inode.c | 2 +-
fs/nfs/internal.h | 3 +-
fs/nfs/namespace.c | 11 +-
fs/nfs/nfs4client.c | 18 +-
fs/nfs/nfs4proc.c | 29 +-
fs/nfs/pnfs.c | 1 +
fs/nfs/super.c | 33 +-
fs/nfsd/blocklayout.c | 4 +-
fs/nls/nls_base.c | 27 +-
fs/ntfs3/frecord.c | 8 +-
fs/ntfs3/fsntfs.c | 9 +-
fs/ntfs3/inode.c | 2 +
fs/ocfs2/alloc.c | 1 -
fs/ocfs2/move_extents.c | 8 +-
fs/smb/client/smb2pdu.c | 2 +-
fs/tracefs/event_inode.c | 3 +-
include/dt-bindings/clock/qcom,x1e80100-gcc.h | 63 ++
include/linux/blk_types.h | 5 +-
include/linux/blkdev.h | 2 +-
include/linux/coresight.h | 25 +-
include/linux/cper.h | 12 +-
include/linux/dcache.h | 1 -
include/linux/filter.h | 12 +-
include/linux/firmware/qcom/qcom_tzmem.h | 15 +-
include/linux/ieee80211.h | 4 +-
include/linux/if_hsr.h | 26 +
include/linux/nfs_fs_sb.h | 7 +-
include/linux/nfs_xdr.h | 54 +-
include/linux/perf_event.h | 2 +-
include/linux/platform_data/lp855x.h | 4 +-
include/linux/ras.h | 16 +-
include/linux/rculist_nulls.h | 59 ++
include/linux/vfio_pci_core.h | 10 +-
include/linux/virtio_config.h | 8 +-
include/net/dst.h | 16 +-
include/net/netfilter/nf_conntrack_count.h | 17 +-
include/net/sock.h | 13 +
include/ras/ras_event.h | 49 +-
include/uapi/sound/asound.h | 2 +-
kernel/bpf/hashtab.c | 10 +-
kernel/bpf/stackmap.c | 66 +-
kernel/bpf/syscall.c | 3 +
kernel/bpf/trampoline.c | 4 +-
kernel/cgroup/cpuset.c | 35 +-
kernel/dma/pool.c | 2 +-
kernel/events/callchain.c | 12 +-
kernel/events/core.c | 2 +-
kernel/locking/locktorture.c | 8 +-
kernel/resource.c | 46 +-
kernel/sched/fair.c | 17 +-
kernel/task_work.c | 8 +-
lib/vsprintf.c | 6 +-
net/core/dst.c | 2 +-
net/core/filter.c | 9 +-
net/hsr/hsr_device.c | 33 +
net/hsr/hsr_main.h | 10 +-
net/hsr/hsr_slave.c | 12 +-
net/ipv4/inet_hashtables.c | 8 +-
net/ipv4/inet_timewait_sock.c | 35 +-
net/ipv4/route.c | 4 +-
net/ipv4/tcp_metrics.c | 6 +-
net/ipv6/ip6_fib.c | 4 +
net/mac80211/aes_cmac.c | 63 +-
net/mac80211/aes_cmac.h | 8 +-
net/mac80211/wpa.c | 20 +-
net/netfilter/nf_conncount.c | 187 +++--
net/netfilter/nft_connlimit.c | 34 +-
net/netfilter/nft_flow_offload.c | 9 +-
net/netfilter/xt_connlimit.c | 14 +-
net/openvswitch/conntrack.c | 16 +-
net/sched/sch_cake.c | 58 +-
net/sctp/socket.c | 5 +-
security/integrity/ima/ima_policy.c | 2 +-
security/smack/smack.h | 3 +
security/smack/smack_access.c | 93 ++-
security/smack/smack_lsm.c | 279 ++++---
sound/firewire/dice/dice-extension.c | 4 +-
sound/firewire/motu/motu-hwdep.c | 7 +-
sound/isa/wavefront/wavefront_synth.c | 4 +-
sound/soc/bcm/bcm63xx-pcm-whistler.c | 4 +-
sound/soc/codecs/Kconfig | 5 +
sound/soc/codecs/Makefile | 2 +
sound/soc/codecs/ak4458.c | 10 +-
sound/soc/codecs/ak5558.c | 10 +-
sound/soc/codecs/nau8325.c | 7 +-
sound/soc/codecs/tas2781-i2c.c | 2 +-
sound/soc/fsl/fsl_xcvr.c | 2 +-
sound/soc/intel/catpt/pcm.c | 4 +-
tools/include/nolibc/stdio.h | 4 +
tools/lib/bpf/btf.c | 4 +-
tools/objtool/check.c | 3 +-
tools/objtool/elf.c | 8 +-
tools/perf/builtin-record.c | 2 +-
tools/perf/util/annotate.c | 2 +-
.../arm-spe-decoder/arm-spe-pkt-decoder.c | 37 +-
.../arm-spe-decoder/arm-spe-pkt-decoder.h | 26 +-
tools/perf/util/bpf_lock_contention.c | 6 +-
tools/perf/util/hist.c | 6 +-
tools/perf/util/symbol.c | 5 +-
.../selftests/bpf/prog_tests/perf_branches.c | 22 +-
.../selftests/bpf/prog_tests/send_signal.c | 5 +
.../selftests/bpf/progs/test_perf_branches.c | 3 +
.../selftests/drivers/net/bonding/Makefile | 2 +-
.../drivers/net/bonding/bond_macvlan.sh | 99 ---
.../net/bonding/bond_macvlan_ipvlan.sh | 97 +++
.../selftests/drivers/net/bonding/config | 1 +
410 files changed, 4296 insertions(+), 1924 deletions(-)
delete mode 100755 tools/testing/selftests/drivers/net/bonding/bond_macvlan.sh
create mode 100755 tools/testing/selftests/drivers/net/bonding/bond_macvlan_ipvlan.sh