6.14.2-rc1 review

This is the start of the stable review cycle for the 6.14.2 release. There are 731 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Thu, 10 Apr 2025 10:47:53 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.14.2-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.14.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.14.2-rc1

Chuck Lever <[email protected]>
NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up

Chuck Lever <[email protected]>
NFSD: Never return NFS4ERR_FILE_OPEN when removing a directory

Chuck Lever <[email protected]>
NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs()

Olga Kornievskaia <[email protected]>
nfsd: fix management of listener transports

Chuck Lever <[email protected]>
NFSD: Add a Kconfig setting to enable delegated timestamps

Li Lingfeng <[email protected]>
nfsd: put dl_stid if fail to queue dl_recall

Jeff Layton <[email protected]>
nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid()

Jeff Layton <[email protected]>
nfsd: don't ignore the return code of svc_proc_register()

Murad Masimov <[email protected]>
media: streamzap: fix race between device disconnection and urb callback

Nikita Zhandarovich <[email protected]>
media: vimc: skip .s_stream() for stopped entities

Oleg Nesterov <[email protected]>

    exec: fix the racy usage of fs_struct->in_exec

Yosry Ahmed <[email protected]>
mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()

Roman Smirnov <[email protected]>
jfs: add index corruption check to DT_GETPAGE()

Qasim Ijaz <[email protected]>
jfs: fix slab-out-of-bounds read in ea_get()

Lukas Wunner <[email protected]>
PCI/bwctrl: Fix NULL pointer dereference on bus number exhaustion

Acs, Jakub <[email protected]>
ext4: fix OOB read when checking dotdot dir

Theodore Ts'o <[email protected]>
ext4: don't over-report free space or inodes in statvfs

Ming Yen Hsieh <[email protected]>
wifi: mt76: mt7921: fix kernel panic due to null pointer dereference

Angelos Oikonomopoulos <[email protected]>
arm64: Don't call NULL in do_compat_alignment_fixup()

David Hildenbrand <[email protected]>
mm/gup: reject FOLL_SPLIT_PMD with hugetlb VMAs

Steven Rostedt <[email protected]>
tracing: Verify event formats that have "%*p.."

Ran Xiaokai <[email protected]>
tracing/osnoise: Fix possible recursive locking for cpus_read_lock()

Douglas Raillard <[email protected]>
tracing: Fix synth event printk format for str fields

Douglas Raillard <[email protected]>
tracing: Ensure module defining synth event cannot be unloaded while tracing

Tengda Wu <[email protected]>
tracing: Fix use-after-free in print_graph_function_flags during tracer switching

Sungjong Seo <[email protected]>
exfat: fix potential wrong error return from get_block

Sungjong Seo <[email protected]>
exfat: fix random stack corruption after get_block

Namjae Jeon <[email protected]>
ksmbd: fix null pointer dereference in alloc_preauth_hash()

Norbert Szetei <[email protected]>
ksmbd: validate zero num_subauth before sub_auth is accessed

Norbert Szetei <[email protected]>
ksmbd: fix overflow in dacloffset bounds check

Namjae Jeon <[email protected]>
ksmbd: fix session use-after-free in multichannel connection

Namjae Jeon <[email protected]>
ksmbd: fix use-after-free in ksmbd_sessions_deregister()

Norbert Szetei <[email protected]>
ksmbd: add bounds check for create lease context

Namjae Jeon <[email protected]>
ksmbd: add bounds check for durable handle context

Sean Christopherson <[email protected]>
KVM: SVM: Don't change target vCPU state on AP Creation VMGEXIT error

Ulf Hansson <[email protected]>
mmc: sdhci-omap: Disable MMC_CAP_AGGRESSIVE_PM for eMMC/SD

Karel Balej <[email protected]>
mmc: sdhci-pxav3: set NEED_RSP_BUSY capability

Miaoqian Lin <[email protected]>
mmc: omap: Fix memory leak in mmc_omap_new_slot

Candice Li <[email protected]>
Remove unnecessary firmware version check for gc v9_4_2

Robin Murphy <[email protected]>
media: omap3isp: Handle ARM dma_iommu_mapping

Christian Eggers <[email protected]>
ARM: 9444/1: add KEEP() keyword to ARM_VECTORS

Nathan Chancellor <[email protected]>
ARM: 9443/1: Require linker to support KEEP within OVERLAY for DCE

Gergo Koteles <[email protected]>
ACPI: video: Handle fetching EDID as ACPI_TYPE_PACKAGE

Paul Menzel <[email protected]>
ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP

Murad Masimov <[email protected]>
acpi: nfit: fix narrowing conversion in acpi_nfit_ctl

Ming Yen Hsieh <[email protected]>
wifi: mt76: mt7925: remove unused acpi function for clc

Nathan Chancellor <[email protected]>
ACPI: platform-profile: Fix CFI violation when accessing sysfs files

Jann Horn <[email protected]>
x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs

Guilherme G. Piccoli <[email protected]>
x86/tsc: Always save/restore TSC sched_clock() on suspend/resume

Arnd Bergmann <[email protected]>
x86/Kconfig: Add cmpxchg8b support back to Geode CPUs

Kent Overstreet <[email protected]>
bcachefs: bch2_ioctl_subvolume_destroy() fixes

Jiri Olsa <[email protected]>
uprobes/x86: Harden uretprobe syscall trampoline check

Kan Liang <[email protected]>

    perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read

Peter Zijlstra (Intel) <[email protected]>
perf/x86/intel: Apply static call for drain_pebs

Markus Elfring <[email protected]>
ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()

Srinivas Pandruvada <[email protected]>
platform/x86: ISST: Correct command storage data length

Eduard Christian Dumitrescu <[email protected]>
platform/x86: thinkpad_acpi: disable ACPI fan access for T495* and E560

Hans de Goede <[email protected]>
ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers

Vishal Annapurve <[email protected]>
x86/tdx: Fix arch_safe_halt() execution for TDX VMs

Kirill A. Shutemov <[email protected]>
x86/paravirt: Move halt paravirt calls under CONFIG_PARAVIRT

Shuai Xue <[email protected]>
x86/mce: use is_copy_from_user() to determine copy-from-user context

Boris Ostrovsky <[email protected]>
x86/microcode/AMD: Fix __apply_microcode_amd()'s return value

Paolo Bonzini <[email protected]>
KVM: x86: block KVM_CAP_SYNC_REGS if guest state is protected

Tianyu Lan <[email protected]>
x86/hyperv: Fix check of return value from snp_set_vmsa()

Hengqi Chen <[email protected]>
LoongArch: BPF: Use move_addr() for BPF_PSEUDO_FUNC

Hengqi Chen <[email protected]>
LoongArch: BPF: Don't override subprog's return value

Hengqi Chen <[email protected]>
LoongArch: BPF: Fix off-by-one error in build_prologue()

Huacai Chen <[email protected]>
LoongArch: Increase MAX_IO_PICS up to 8

Huacai Chen <[email protected]>
LoongArch: Increase ARCH_DMA_MINALIGN up to 16

WANG Rui <[email protected]>
rust: Fix enabling Rust and building with GCC for LoongArch

Danilo Krummrich <[email protected]>
rust: platform: require Send for Driver trait implementers

Danilo Krummrich <[email protected]>
rust: pci: require Send for Driver trait implementers

Ying Lu <[email protected]>
usbnet:fix NPE during rx_complete

Sherry Sun <[email protected]>
tty: serial: lpuart: only disable CTS instead of overwriting the whole UARTMODIR register

Sherry Sun <[email protected]>
tty: serial: fsl_lpuart: use port struct directly to simply code

Sherry Sun <[email protected]>
tty: serial: fsl_lpuart: Use u32 and u8 for register variables

Dave Penkler <[email protected]>
staging: gpib: Fix Oops after disconnect in agilent usb

Dave Penkler <[email protected]>
staging: gpib: agilent usb console messaging cleanup

Dave Penkler <[email protected]>
staging: gpib: Fix Oops after disconnect in ni_usb

Dave Penkler <[email protected]>
staging: gpib: ni_usb console messaging cleanup

Zhang Rui <[email protected]>
tools/power turbostat: Restore GFX sysfs fflush() call

Len Brown <[email protected]>
tools/power turbostat: report CoreThr per measurement interval

Yeoreum Yun <[email protected]>
perf/core: Fix child_total_time_enabled accounting bug at task exit

Alex Deucher <[email protected]>
drm/amdgpu/gfx12: fix num_mec

Alex Deucher <[email protected]>
drm/amdgpu/gfx11: fix num_mec

Yue Haibing <[email protected]>
drm/xe: Fix unmet direct dependencies warning

Alexandru Gagniuc <[email protected]>
kbuild: deb-pkg: don't set KBUILD_BUILD_VERSION unconditionally

Zhang Rui <[email protected]>
tools/power turbostat: Allow Zero return value for some RAPL registers

Jakub Kicinski <[email protected]>
netlink: specs: rt_route: pull the ifa- prefix out of the names

Dave Marquardt <[email protected]>
net: ibmveth: make veth_pool_store stop hanging

Henry Martin <[email protected]>
arcnet: Add NULL check in com20020pci_probe()

Ido Schimmel <[email protected]>
ipv6: Do not consider link down nexthops in path selection

Ido Schimmel <[email protected]>
ipv6: Start path selection from the first nexthop

Lin Ma <[email protected]>
net: fix geneve_opt length integer overflow

David Oberhollenzer <[email protected]>
net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy

Fernando Fernandez Mancera <[email protected]>
ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS

Edward Cree <[email protected]>
sfc: fix NULL dereferences in ef100_process_design_param()

Edward Cree <[email protected]>
sfc: rip out MDIO support

Lin Ma <[email protected]>
netfilter: nft_tunnel: fix geneve_opt type confusion addition

Antoine Tenart <[email protected]>
net: decrease cached dst counters in dst_release

Wang Liang <[email protected]>
xsk: Fix __xsk_generic_xmit() error code when cq is full

Guillaume Nault <[email protected]>
tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().

Stefano Garzarella <[email protected]>
vsock: avoid timeout during connect() if the socket is closing

Kuniyuki Iwashima <[email protected]>
udp: Fix memory accounting leak.

Kuniyuki Iwashima <[email protected]>

    udp: Fix multiple wraparounds of sk->sk_rmem_alloc.

Kuniyuki Iwashima <[email protected]>
rtnetlink: Use register_pernet_subsys() in rtnl_net_debug_init().

Tobias Waldekranz <[email protected]>
net: mvpp2: Prevent parser TCAM memory corruption

Lorenzo Bianconi <[email protected]>
net: airoha: Fix ETS priomap validation

Lorenzo Bianconi <[email protected]>
net: airoha: Fix qid report in airoha_tc_get_htb_get_leaf_queue()

Eric Dumazet <[email protected]>
sctp: add mutual exclusion in proc_sctp_do_udp_port()

Cong Wang <[email protected]>
net_sched: skbprio: Remove overly strict queue assertions

Debin Zhu <[email protected]>
netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets

Florian Westphal <[email protected]>
netfilter: nf_tables: don't unregister hook when table is dormant

Pablo Neira Ayuso <[email protected]>
netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only

Emil Tantilov <[email protected]>
idpf: fix adapter NULL pointer dereference on reboot

Piotr Kwapulinski <[email protected]>
ixgbe: fix media type detection for E610 device

Vitaly Lifshits <[email protected]>
e1000e: change k1 configuration on MTP and later platforms

Zdenek Bouska <[email protected]>
igc: Fix TX drops in XDP ZC

Song Yoong Siang <[email protected]>
igc: Add launch time support to XDP ZC

Song Yoong Siang <[email protected]>
igc: Refactor empty frame insertion for launch time support

Song Yoong Siang <[email protected]>
xsk: Add launch time hardware offload support to XDP Tx metadata

Florian Fainelli <[email protected]>
spi: bcm2835: Restore native CS probing when pinctrl-bcm2835 is absent

Takashi Iwai <[email protected]>
ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model

Florian Fainelli <[email protected]>
spi: bcm2835: Do not call gpiod_put() on invalid descriptor

Henry Martin <[email protected]>
ASoC: imx-card: Add NULL check in imx_card_probe()

Maurizio Lombardi <[email protected]>
nvme-pci: skip nvme_write_sq_db on empty rqlist

Caleb Sander Mateos <[email protected]>
nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer

Björn Töpel <[email protected]>
riscv/purgatory: 4B align purgatory_start

Yao Zi <[email protected]>
riscv/kexec_file: Handle R_RISCV_64 in purgatory relocator

Alexandre Ghiti <[email protected]>
riscv: Fix hugetlb retrieval of number of ptes in case of !present pte

Josh Poimboeuf <[email protected]>
spi: cadence: Fix out-of-bounds array access in cdns_mrvl_xspi_setup_clock()

Christophe JAILLET <[email protected]>
ASoC: codecs: rt5665: Fix some error handling paths in rt5665_probe()

Sven Schnelle <[email protected]>
s390/entry: Fix setting _CIF_MCCK_GUEST with lowcore relocation

Ming Lei <[email protected]>

    ublk: make sure ubq->canceling is set when queue is frozen

Herton R. Krzesinski <[email protected]>
x86/uaccess: Improve performance by aligning writes to 8 bytes in copy_user_generic(), on non-FSRM/ERMS CPUs

Palmer Dabbelt <[email protected]>
RISC-V: errata: Use medany for relocatable builds

Takashi Iwai <[email protected]>
ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA

Richard Fitzgerald <[email protected]>
firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success

Andrew Jones <[email protected]>
riscv: Fix set up of vector cpu hotplug callback

Andrew Jones <[email protected]>
riscv: Fix set up of cpu hotplug callbacks

Andrew Jones <[email protected]>
riscv: Change check_unaligned_access_speed_all_cpus to void

Andrew Jones <[email protected]>
riscv: Fix check_unaligned_access_all_cpus

Andrew Jones <[email protected]>
riscv: Fix riscv_online_cpu_vec

Andrew Jones <[email protected]>
riscv: Annotate unaligned access init functions

Pu Lehui <[email protected]>
riscv: fgraph: Fix stack layout to match __arch_ftrace_regs argument of ftrace_return_to_handler

Nikita Shubin <[email protected]>
ntb: intel: Fix using link status DB's

Yajun Deng <[email protected]>
ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans

Pu Lehui <[email protected]>
riscv: fgraph: Select HAVE_FUNCTION_GRAPH_TRACER depends on HAVE_DYNAMIC_FTRACE_WITH_ARGS

Alexandre Ghiti <[email protected]>
riscv: Fix missing __free_pages() in check_vector_unaligned_access()

Tingbo Liao <[email protected]>
riscv: Fix the __riscv_copy_vec_words_unaligned implementation

Juhan Jin <[email protected]>
riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra

Christian Schoenebeck <[email protected]>
fs/9p: fix NULL pointer dereference on mkdir

Al Viro <[email protected]>
spufs: fix a leak in spufs_create_context()

Al Viro <[email protected]>
spufs: fix gang directory lifetimes

Al Viro <[email protected]>
spufs: fix a leak on spufs_new_file() failure

Claudiu Beznea <[email protected]>
rtc: renesas-rtca3: Disable interrupts only if the RTC is enabled

Dan Carpenter <[email protected]>
nfs: Add missing release on error in nfs_lock_and_join_requests()

Josh Poimboeuf <[email protected]>
objtool/loongarch: Add unwind hints in prepare_frametrace()

Josh Poimboeuf <[email protected]>
rcu-tasks: Always inline rcu_irq_work_resched()

Josh Poimboeuf <[email protected]>
context_tracking: Always inline ct_{nmi,irq}_{enter,exit}()

Josh Poimboeuf <[email protected]>
sched/smt: Always inline sched_smt_active()

David Laight <[email protected]>
objtool: Fix verbose disassembly if CROSS_COMPILE isn't set

Geetha sowjanya <[email protected]>
octeontx2-af: Free NIX_AF_INT_VEC_GEN irq

Geetha sowjanya <[email protected]>
octeontx2-af: Fix mbox INTR handler when num VFs > 64

Jim Liu <[email protected]>
net: phy: broadcom: Correct BCM5221 PHY model detection

Giovanni Gherdovich <[email protected]>
ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid

Yuli Wang <[email protected]>
LoongArch: Rework the arch_kgdb_breakpoint() implementation

Miaoqian Lin <[email protected]>
LoongArch: Fix device node refcount leak in fdt_cpu_clk_init()

谢致邦 (XIE Zhibang) <[email protected]>
LoongArch: Fix help text of CMDLINE_EXTEND in Kconfig

Josh Poimboeuf <[email protected]>
objtool: Fix segfault in ignore_unreachable_insn()

Feng Yang <[email protected]>
ring-buffer: Fix bytes_dropped calculation issue

Lama Kayal <[email protected]>
net/mlx5e: SHAMPO, Make reserved size independent of page size

Namjae Jeon <[email protected]>
ksmbd: fix r_count dec/increment mismatch

Namjae Jeon <[email protected]>
ksmbd: fix multichannel connection failure

Miaoqian Lin <[email protected]>
ksmbd: use aead_request_free to match aead_request_alloc

Lubomir Rintel <[email protected]>
rndis_host: Flag RNDIS modems as WWAN devices

Mark Zhang <[email protected]>
rtnetlink: Allocate vfinfo size for VF GUIDs when supported

Yuezhang Mo <[email protected]>
exfat: fix missing shutdown check

Yuezhang Mo <[email protected]>
exfat: fix the infinite loop in exfat_find_last_cluster()

Wang Zhaolong <[email protected]>
smb: client: Fix netns refcount imbalance causing leaks and use-after-free

Trond Myklebust <[email protected]>
NFS: Shut down the nfs_client only after all the superblocks

Josh Poimboeuf <[email protected]>
objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()

Josh Poimboeuf <[email protected]>
objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show()

Josh Poimboeuf <[email protected]>
objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()

xueqin Luo <[email protected]>
thermal: core: Remove duplicate struct declaration

Josh Poimboeuf <[email protected]>
objtool: Fix detection of consecutive jump tables on Clang 20

Tiezhu Yang <[email protected]>
objtool: Handle PC relative relocation type

Tiezhu Yang <[email protected]>
objtool: Handle different entry size of rodata

Tiezhu Yang <[email protected]>
objtool: Handle various symbol types of rodata

Namhyung Kim <[email protected]>
perf bpf-filter: Fix a parsing error with comma

Marcus Meissner <[email protected]>
perf tools: annotate asm_pure_loop.S

Likhitha Korrapati <[email protected]>
perf tools: Fix is_compat_mode build break in ppc64

Bart Van Assche <[email protected]>
fs/procfs: fix the comment above proc_pid_wchan()

Ilkka Koskinen <[email protected]>
perf vendor events arm64 AmpereOneX: Fix frontend_bound calculation

Jiri Slaby (SUSE) <[email protected]>
tty: n_tty: use uint for space returned by tty_write_room()

Stefan Wahren <[email protected]>
staging: vchiq_arm: Stop kthreads if vchiq cdev register fails

Stefan Wahren <[email protected]>
staging: vchiq_arm: Fix possible NPR of keep-alive thread

Stefan Wahren <[email protected]>
staging: vchiq_arm: Register debugfs after cdev

谢致邦 (XIE Zhibang) <[email protected]>
staging: rtl8723bs: select CONFIG_CRYPTO_LIB_AES

Thomas Richter <[email protected]>
perf pmu: Handle memory failure in tool_pmu__new()

James Clark <[email protected]>
perf: intel-tpebs: Fix incorrect usage of zfree()

Stephen Brennan <[email protected]>
perf dso: fix dso__is_kallsyms() check

Arnaldo Carvalho de Melo <[email protected]>
perf python: Check if there is space to copy all the event

Arnaldo Carvalho de Melo <[email protected]>
perf python: Don't keep a raw_data pointer to consumed ring buffer space

Arnaldo Carvalho de Melo <[email protected]>
perf python: Decrement the refcount of just created event on failure

Arnaldo Carvalho de Melo <[email protected]>
perf python: Fixup description of sample.id event member

Stanley Chu <[email protected]>
i3c: master: svc: Fix missing the IBI rules

Benjamin Berg <[email protected]>
um: hostfs: avoid issues on inode number reuse by host

Benjamin Berg <[email protected]>
um: remove copy_from_kernel_nofault_allowed

David Gow <[email protected]>
um: Pass the correct Rust target and options with gcc

Cyan Yang <[email protected]>
selftests/mm/cow: fix the incorrect error handling

Alistair Popple <[email protected]>
fuse: fix dax truncate/punch_hole fault path

NeilBrown <[email protected]>
NFS: fix open_owner_id_maxsz and related fields.

Trond Myklebust <[email protected]>
NFSv4: Avoid unnecessary scans of filesystems for delayed delegations

Trond Myklebust <[email protected]>
NFSv4: Avoid unnecessary scans of filesystems for expired delegations

Trond Myklebust <[email protected]>
NFSv4: Avoid unnecessary scans of filesystems for returning delegations

Trond Myklebust <[email protected]>
NFSv4: Don't trigger uneccessary scans for return-on-close delegations

Antonio Quartulli <[email protected]>
scripts/gdb/linux/symbols.py: address changes to module_sect_attrs

Tang Yizhou <[email protected]>
writeback: fix calculations in trace_balance_dirty_pages() for cgwb

Tang Yizhou <[email protected]>
writeback: let trace_balance_dirty_pages() take struct dtc as parameter

Anshuman Khandual <[email protected]>
arch/powerpc: drop GENERIC_PTDUMP from mpc885_ads_defconfig

Danilo Krummrich <[email protected]>
rust: platform: fix unrestricted &mut platform::Device

Danilo Krummrich <[email protected]>
rust: pci: fix unrestricted &mut pci::Device

Danilo Krummrich <[email protected]>
rust: pci: use to_result() in enable_device_mem()

Ahmad Fatoum <[email protected]>
reboot: reboot, not shutdown, on hw_protection_reboot timeout

Ahmad Fatoum <[email protected]>
reboot: replace __hw_protection_shutdown bool action parameter with an enum

Vasiliy Kovalev <[email protected]>
ocfs2: validate l_tree_depth to avoid out-of-bounds access

Sourabh Jain <[email protected]>
kexec: initialize ELF lowest address to ULONG_MAX

David Hildenbrand <[email protected]>
kernel/events/uprobes: handle device-exclusive entries correctly in __replace_page()

Veronika Molnarova <[email protected]>
perf test stat_all_pmu.sh: Correctly check 'perf stat' result

Arnaldo Carvalho de Melo <[email protected]>
perf units: Fix insufficient array space

Dapeng Mi <[email protected]>
perf x86/topdown: Fix topdown leader sampling test error on hybrid

Ian Rogers <[email protected]>
perf evsel: tp_format accessing improvements

Ian Rogers <[email protected]>
perf evlist: Add success path to evlist__create_syswide_maps

Ian Rogers <[email protected]>
perf debug: Avoid stack overflow in recursive error message

Karan Sanghavi <[email protected]>
iio: light: Add check for array bounds in veml6075_read_int_time_ms

Jonathan Santos <[email protected]>
iio: adc: ad7768-1: set MOSI idle state to prevent accidental reset

Uwe Kleine-König <[email protected]>
iio: adc: ad7173: Fix comparison of channel configs

Uwe Kleine-König <[email protected]>
iio: adc: ad7124: Fix comparison of channel configs

Uwe Kleine-König <[email protected]>
iio: adc: ad4130: Fix comparison of channel setups

Uwe Kleine-König <[email protected]>
iio: adc: ad_sigma_delta: Disable channel after calibration

Basavaraj Natikar <[email protected]>
dmaengine: ptdma: Utilize the AE4DMA engine's multi-queue functionality

Basavaraj Natikar <[email protected]>
dmaengine: ae4dma: Use the MSI count and its corresponding IRQ number

Peng Fan <[email protected]>
dmaengine: fsl-edma: free irq correctly in remove path

Peng Fan <[email protected]>
dmaengine: fsl-edma: cleanup chan after dma_async_device_unregister

Bard Liao <[email protected]>
soundwire: take in count the bandwidth of a prepared stream

Chuck Lever <[email protected]>
NFSD: Fix callback decoder status codes

Ian Rogers <[email protected]>
perf tests: Fix data symbol test with LTO builds

Namhyung Kim <[email protected]>
perf test: Add timeout to datasym workload

Dan Carpenter <[email protected]>
fs/ntfs3: Prevent integer overflow in hdr_first_de()

Dan Carpenter <[email protected]>
fs/ntfs3: Fix a couple integer overflows on 32bit systems

Niklas Neronin <[email protected]>
usb: xhci: correct debug message page size calculation

Namhyung Kim <[email protected]>
perf machine: Fixup kernel maps ends after adding extra maps

Thomas Richter <[email protected]>
perf bench: Fix perf bench syscall loop count

Leo Yan <[email protected]>
perf arm-spe: Fix load-store operation checking

Uwe Kleine-König <[email protected]>
iio: adc: ad7192: Grab direct mode for calibration

Uwe Kleine-König <[email protected]>
iio: adc: ad7173: Grab direct mode for calibration

Jonathan Cameron <[email protected]>
iio: core: Rework claim and release of direct mode to work with sparse.

Nuno Sá <[email protected]>
iio: backend: make sure to NULL terminate stack buffer

Jonathan Cameron <[email protected]>
iio: accel: msa311: Fix failure to release runtime pm if direct mode claim fails.

Jonathan Cameron <[email protected]>
iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio

Mario Limonciello <[email protected]>
ucsi_ccg: Don't show failed to get FW build information error

Luca Ceresoli <[email protected]>
perf build: Fix in-tree build due to symbolic link

Ian Rogers <[email protected]>
tools/x86: Fix linux/unaligned.h include path in lib/insn.c

James Clark <[email protected]>
perf pmu: Don't double count common sysfs and json events

James Clark <[email protected]>
perf pmu: Dynamically allocate tool PMU

Ian Rogers <[email protected]>
perf pmus: Restructure pmu_read_sysfs to scan fewer PMUs

Yuanfang Zhang <[email protected]>
coresight-etm4x: add isb() before reading the TRCSTATR

Mike Christie <[email protected]>
vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint

Ilkka Koskinen <[email protected]>
coresight: catu: Fix number of pages while using 64k pages

Wentao Liang <[email protected]>
greybus: gb-beagleplay: Add error handling for gb_greybus_init

Dmitry Vyukov <[email protected]>
perf report: Fix input reload/switch with symbol sort key

Dmitry Vyukov <[email protected]>
perf report: Add parallelism sort key

Namhyung Kim <[email protected]>
perf report: Switch data file correctly in TUI

Dave Penkler <[email protected]>
staging: gpib: Fix cb7210 pcmcia Oops

Joe Hattori <[email protected]>
soundwire: slave: fix an OF node reference leak in soundwire slave device

James Clark <[email protected]>
perf tests: Fix Tool PMU test segfault

Qasim Ijaz <[email protected]>
isofs: fix KMSAN uninit-value bug in do_isofs_readdir()

Kan Liang <[email protected]>
perf tools: Add skip check in tool_pmu__event_to_str()

Heiko Stuebner <[email protected]>
phy: phy-rockchip-samsung-hdptx: Don't use dt aliases to determine phy-id

Uwe Kleine-König <[email protected]>
iio: adc: ad7124: Really disable all channels at probe time

Uwe Kleine-König <[email protected]>
iio: adc: ad7124: Micro-optimize channel disabling

Javier Carrasco <[email protected]>
iio: light: veml6030: fix scale to conform to ABI

Javier Carrasco <[email protected]>
iio: gts-helper: export iio_gts_get_total_gain()

Javier Carrasco <[email protected]>
iio: light: veml6030: extend regmap to support regfields

Konstantin Komarov <[email protected]>

    fs/ntfs3: Update inode->i_mapping->a_ops on compression state

Ye Bin <[email protected]>
fs/ntfs3: Fix 'proc_info_root' leak when init ntfs failed

Ye Bin <[email protected]>
fs/ntfs3: Factor out ntfs_{create/remove}_proc_root()

Ye Bin <[email protected]>
fs/ntfs3: Factor out ntfs_{create/remove}_procdir()

Ian Rogers <[email protected]>
perf stat: Don't merge counters purely on name

Thomas Richter <[email protected]>
perf test: Fix Hwmon PMU test endianess issue

Angelo Dureghello <[email protected]>
iio: dac: adi-axi-dac: modify stream enable

Benson Leung <[email protected]>
usb: typec: thunderbolt: Remove IS_ERR check for plug

Benson Leung <[email protected]>
usb: typec: thunderbolt: Fix loops that iterate TYPEC_PLUG_SOP_P and TYPEC_PLUG_SOP_PP

Dave Penkler <[email protected]>
staging: gpib: Fix pr_err format warning

Dave Penkler <[email protected]>
staging: gpib: Add missing interface entry point

Chenyuan Yang <[email protected]>
w1: fix NULL pointer dereference in probe

James Clark <[email protected]>
perf: Always feature test reallocarray

Ian Rogers <[email protected]>
perf stat: Fix find_stat for mixed legacy/non-legacy events

Tony Ambardar <[email protected]>
libbpf: Fix accessing BTF.ext core_relo header

Barnabás Czémán <[email protected]>
clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock

Andy Shevchenko <[email protected]>
pinctrl: intel: Fix wrong bypass assignment in intel_pinctrl_probe_pwm()

Wenkai Lin <[email protected]>
crypto: hisilicon/sec2 - fix for aead auth key length

Wang Liang <[email protected]>
RDMA/core: Fix use-after-free when rename device name

Jann Horn <[email protected]>
x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment

Remi Pommarel <[email protected]>
leds: Fix LED_OFF brightness race

Nikita Zhandarovich <[email protected]>
mfd: sm501: Switch to BIT() to mitigate integer overflows

Manikanta Mylavarapu <[email protected]>
clk: qcom: ipq5424: fix software and hardware flow control error of UART

Fabrizio Castro <[email protected]>
pinctrl: renesas: rzv2m: Fix missing of_node_put() call

Patrisious Haddad <[email protected]>
RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow

Jiayuan Chen <[email protected]>
bpf: Fix array bounds error with may_goto

Neil Armstrong <[email protected]>
clk: qcom: gcc-sm8650: Do not turn off USB GDSCs during gdsc_disable()

Herbert Xu <[email protected]>
crypto: nx - Fix uninitialised hv_nxc on error

Dario Binacchi <[email protected]>
clk: stm32f4: fix an uninitialized variable

Herbert Xu <[email protected]>
crypto: api - Call crypto_alg_put in crypto_unregister_alg

Artur Weber <[email protected]>
power: supply: max77693: Fix wrong conversion of charge input threshold value

Jann Horn <[email protected]>
x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1

Bartosz Golaszewski <[email protected]>
pinctrl: bcm2835: don't -EINVAL on alternate funcs from get_direction()

Jerome Brunet <[email protected]>
clk: amlogic: g12a: fix mmc A peripheral clock

Laurentiu Mihalcea <[email protected]>
clk: clk-imx8mp-audiomix: fix dsp/ocram_a clock parents

Bairavi Alagappan <[email protected]>
crypto: qat - remove access to parity register for QAT GEN4

Jinghao Jia <[email protected]>
samples/bpf: Fix broken vmlinux path for VMLINUX_BTF

Andy Shevchenko <[email protected]>
pinctrl: npcm8xx: Fix incorrect struct npcm8xx_pincfg assignment

Charles Han <[email protected]>
clk: mmp: Fix NULL vs IS_ERR() check

Ian Rogers <[email protected]>
libbpf: Add namespace for errstr making it libbpf_errstr

Nathan Chancellor <[email protected]>
crypto: tegra - Fix format specifier in tegra_sha_prep_cmd()

Alice Ryhl <[email protected]>
rust: fix signature of rust_fmt_argument

Saket Kumar Bhaskar <[email protected]>
selftests/bpf: Select NUMA_NO_NODE to create map

Jerome Brunet <[email protected]>
clk: amlogic: gxbb: drop non existing 32k clock parent

Jerome Brunet <[email protected]>
clk: amlogic: g12b: fix cluster A parent data

Prathamesh Shete <[email protected]>
pinctrl: tegra: Set SFIO mode to Mux Register

Maher Sanalla <[email protected]>
IB/mad: Check available slots before posting receive WRs

Herbert Xu <[email protected]>
crypto: api - Fix larval relookup type and mask

Thomas Weißschuh <[email protected]>
leds: st1202: Check for error code from devm_mutex_init() call

Sicelo A. Mhlongo <[email protected]>
power: supply: bq27xxx_battery: do not update cached flags prematurely

Luca Weiss <[email protected]>
remoteproc: qcom_q6v5_mss: Handle platforms with one power domain

Cheng Xu <[email protected]>
RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()

Chiara Meiohas <[email protected]>
RDMA/mlx5: Fix calculation of total invalidated pages

Roman Gushchin <[email protected]>
RDMA/core: Don't expose hw_counters outside of init net namespace

Peter Geis <[email protected]>
clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent

Tengda Wu <[email protected]>
selftests/bpf: Fix freplace_link segfault in tailcalls prog test

Michael Guralnik <[email protected]>
RDMA/mlx5: Fix MR cache initialization error flow

Fabrizio Castro <[email protected]>
pinctrl: renesas: rzg2l: Fix missing of_node_put() call

Fabrizio Castro <[email protected]>
pinctrl: renesas: rza2: Fix missing of_node_put() call

Tanya Agarwal <[email protected]>
lib: 842: Improve error handling in sw842_compress()

Hou Tao <[email protected]>
bpf: Use preempt_count() directly in bpf_send_signal_common()

Akhil R <[email protected]>
crypto: tegra - Reserve keyslots to allocate dynamically

Akhil R <[email protected]>
crypto: tegra - finalize crypto req on error

Konrad Dybcio <[email protected]>

    clk: qcom: gcc-x1e80100: Unregister GCC_GPU_CFG_AHB_CLK/GCC_DISP_XO_CLK

Luca Weiss <[email protected]>
remoteproc: qcom_q6v5_pas: Use resource with CX PD for MSM8226

Akhil R <[email protected]>
crypto: tegra - Set IV to NULL explicitly for AES ECB

Kees Bakker <[email protected]>
RDMA/mana_ib: Ensure variable err is initialized

Niklas Schnelle <[email protected]>
s390: Remove ioremap_wt() and pgprot_writethrough()

Tony Ambardar <[email protected]>
selftests/bpf: Fix runqslower cross-endian build

Vladimir Lypak <[email protected]>
clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock

Akhil R <[email protected]>
crypto: tegra - Fix CMAC intermediate result handling

Yue Haibing <[email protected]>
pinctrl: nuvoton: npcm8xx: Fix error handling in npcm8xx_gpio_fw()

Will McVicker <[email protected]>
clk: samsung: Fix UBSAN panic in samsung_clk_init()

Luca Weiss <[email protected]>
remoteproc: qcom: pas: add minidump_id to SC7280 WPSS

Claudiu Beznea <[email protected]>
clk: renesas: r8a08g045: Check the source of the CPU PLL settings

David Hildenbrand <[email protected]>
x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()

Viktor Malik <[email protected]>
selftests/bpf: Fix string read in strncmp benchmark

Manikanta Mylavarapu <[email protected]>
drivers: clk: qcom: ipq5424: fix the freq table of sdcc1_apps clock

Andrii Nakryiko <[email protected]>
libbpf: Fix hypothetical STT_SECTION extern NULL deref case

Luca Weiss <[email protected]>
remoteproc: qcom_q6v5_pas: Make single-PD handling more robust

Claudiu Beznea <[email protected]>
pinctrl: renesas: rzg2l: Suppress binding attributes

Zijun Hu <[email protected]>
of: property: Increase NR_FWNODE_REFERENCE_ARGS

Peng Fan <[email protected]>
remoteproc: core: Clear table_sz when rproc_shutdown

Michael Guralnik <[email protected]>
RDMA/mlx5: Fix page_size variable overflow

Wenkai Lin <[email protected]>
crypto: hisilicon/sec2 - fix for sec spec check

Wenkai Lin <[email protected]>
crypto: hisilicon/sec2 - fix for aead authsize alignment

Jerome Brunet <[email protected]>
clk: amlogic: gxbb: drop incorrect flag on 32k clock

Akhil R <[email protected]>
crypto: tegra - Use HMAC fallback when keyslots are full

Arnd Bergmann <[email protected]>
crypto: bpf - Add MODULE_DESCRIPTION for skcipher

Akhil R <[email protected]>
crypto: tegra - Fix HASH intermediate result handling

Akhil R <[email protected]>
crypto: tegra - Transfer HASH init function to crypto engine

Akhil R <[email protected]>
crypto: tegra - check return value for hash do_one_req

Akhil R <[email protected]>
crypto: tegra - Do not use fixed size buffers

Akhil R <[email protected]>
crypto: tegra - Use separate buffer for setkey

Bairavi Alagappan <[email protected]>

    crypto: qat - set parity error mask for qat_420xx

Herbert Xu <[email protected]>
crypto: iaa - Test the correct request flag

Danila Chernetsov <[email protected]>
fbdev: sm501fb: Add some geometry checks.

Arnd Bergmann <[email protected]>
mdacon: rework dependency list

Arnd Bergmann <[email protected]>
dummycon: fix default rows/cols

Markus Elfring <[email protected]>
fbdev: au1100fb: Move a variable assignment behind a null pointer check

Pavel Begunkov <[email protected]>
io_uring: fix retry handling off iowq

Caleb Sander Mateos <[email protected]>
io_uring: use lockless_cq flag in io_req_complete_post()

Shay Drory <[email protected]>
PCI: Fix NULL dereference in SR-IOV VF creation error path

Caleb Sander Mateos <[email protected]>
io_uring/net: only import send_zc buffer once

Ilpo Järvinen <[email protected]>
PCI/bwctrl: Fix pcie_bwctrl_select_speed() return type

Ilpo Järvinen <[email protected]>
PCI: pciehp: Don't enable HPIE when resuming in poll mode

Alex Deucher <[email protected]>
drm/amdgpu/mes: enable compute pipes across all MEC

Alex Deucher <[email protected]>
drm/amdgpu/mes: optimize compute loop handling

Ilpo Järvinen <[email protected]>
PCI: Fix BAR resizing when VF BARs are assigned

Christophe JAILLET <[email protected]>
PCI: histb: Fix an error handling path in histb_pcie_probe()

Dan Carpenter <[email protected]>
PCI: dwc: ep: Return -ENOMEM for allocation failures

Thadeu Lima de Souza Cascardo <[email protected]>
drm/amd/display: avoid NPD when ASIC does not support DMUB

Dan Carpenter <[email protected]>
drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()

Douglas Anderson <[email protected]>
drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr

Jason-JH Lin <[email protected]>
drm/mediatek: Fix config_updating flag never false when no mbox channel

Thippeswamy Havalige <[email protected]>
PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe

Dan Carpenter <[email protected]>
PCI: Remove stray put_device() in pci_register_host_bridge()

Christophe Leroy <[email protected]>
powerpc/kexec: fix physical address calculation in clear_utlb_entry()

Christophe Leroy <[email protected]>
crypto: powerpc: Mark ghashp8-ppc.o as an OBJECT_FILES_NON_STANDARD

Niklas Cassel <[email protected]>
PCI: endpoint: pci-epf-test: Handle endianness properly

Niklas Cassel <[email protected]>
misc: pci_endpoint_test: Handle BAR sizes larger than INT_MAX

Niklas Cassel <[email protected]>
misc: pci_endpoint_test: Fix pci_endpoint_test_bars_read_bar() error handling

Vaibhav Jain <[email protected]>
powerpc/perf: Fix ref-counting on the PMU 'vpa_pmu'

Rob Clark <[email protected]>
drm/msm/a6xx: Fix a6xx indexed-regs in devcoreduump

Vitaliy Shevtsov <[email protected]>
drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()

Steven Price <[email protected]>
drm/panthor: Clean up FW version information display

Adrián Larumbe <[email protected]>
drm/panthor: Avoid sleep locking in the internal BO size path

Adrián Larumbe <[email protected]>
drm/panthor: Replace sleep locks with spinlocks in fdinfo path

Adrián Larumbe <[email protected]>
drm/panthor: Expose size of driver internal BO's over fdinfo

Adrián Larumbe <[email protected]>
drm/file: Add fdinfo helper for printing regions with prefix

Ashley Smith <[email protected]>
drm/panthor: Update CS_STATUS_ defines to correct values

Dmitry Baryshkov <[email protected]>

    drm/msm/dpu: don't set crtc_state->mode_changed from atomic_check()

Dmitry Baryshkov <[email protected]>
drm/msm/dpu: simplify dpu_encoder_get_topology() interface

Dmitry Baryshkov <[email protected]>
drm/msm/dpu: move needs_cdm setting to dpu_encoder_get_topology()

Nishanth Aravamudan <[email protected]>
PCI: Avoid reset when disabled via sysfs

Feng Tang <[email protected]>
PCI/portdrv: Only disable pciehp interrupts early when needed

Yi Lai <[email protected]>
selftests/pcie_bwctrl: Add 'set_pcie_speed.sh' to TEST_PROGS

Jim Quinlan <[email protected]>
PCI: brcmstb: Fix potential premature regulator disabling

Jim Quinlan <[email protected]>
PCI: brcmstb: Fix error path after a call to regulator_bulk_get()

Jim Quinlan <[email protected]>
PCI: brcmstb: Use internal register to change link capability

Jim Quinlan <[email protected]>
PCI: brcmstb: Set generation limit before PCIe link up

Hans Zhang <[email protected]>
PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload

Lorenzo Bianconi <[email protected]>
PCI: mediatek-gen3: Configure PBUS_CSR registers for EN7581 SoC

Srinivasan Shanmugam <[email protected]>
drm/amdkfd: Fix Circular Locking Dependency in 'svm_range_cpu_invalidate_pagetables'

Dan Carpenter <[email protected]>
drm/msm/gem: Fix error code msm_parse_deps()

Marijn Suijten <[email protected]>
drm/msm/dpu: Remove arbitrary limit of 1 interface in DSC topology

Marijn Suijten <[email protected]>
drm/msm/dpu: Fall back to a single DSC encoder (1:1:1) on small SoCs

Marijn Suijten <[email protected]>
drm/msm/dsi: Set PHY usescase (and mode) before registering DSI host

Marijn Suijten <[email protected]>
drm/msm/dsi: Use existing per-interface slice count in DSC timing

Krzysztof Kozlowski <[email protected]>
drm/msm/dsi/phy: Program clock inverters in correct register

Dmitry Baryshkov <[email protected]>
drm/msm/dpu: don't use active in atomic_check()

Aurabindo Pillai <[email protected]>
drm/amd/display: fix an indent issue in DML21

Tushar Dave <[email protected]>
PCI/ACS: Fix 'pci=config_acs=' parameter

John Keeping <[email protected]>
drm/panel: ilitek-ili9882t: fix GPIO name in error message

Daniel Stodden <[email protected]>
PCI/ASPM: Fix link state exit during switch upstream function removal

Srinivasan Shanmugam <[email protected]>
drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV

AngeloGioacchino Del Regno <[email protected]>
drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member

AngeloGioacchino Del Regno <[email protected]>
drm/mediatek: mtk_hdmi: Unregister audio platform device on failure

Ilpo Järvinen <[email protected]>
PCI: Allow relaxed bridge window tail sizing for optional resources

Ilpo Järvinen <[email protected]>
PCI: Simplify size1 assignment logic

Ilpo Järvinen <[email protected]>
PCI: Remove add_align overwrite unrelated to size0

Kai-Heng Feng <[email protected]>
PCI: Use downstream bridges for distributing resources

Alex Deucher <[email protected]>
drm/amdgpu/vcn5.0.1: use correct dpm helper

Alex Deucher <[email protected]>
drm/amdgpu/umsch: fix ucode check

Alex Deucher <[email protected]>
drm/amdgpu/umsch: declare umsch firmware

Saleemkhan Jamadar <[email protected]>
drm/amdgpu/umsch: remove vpe test from umsch

Yang Wang <[email protected]>
drm/amdgpu: refine smu send msg debug log format

Vitalii Mordan <[email protected]>

    gpu: cdns-mhdp8546: fix call balance of mhdp->clk handling routines

José Expósito <[email protected]>
drm/vkms: Fix use after free and double free on init error

Bart Van Assche <[email protected]>
drm: zynqmp_dp: Fix a deadlock in zynqmp_dp_ignore_hpd_set()

Charles Han <[email protected]>
drm: xlnx: zynqmp_dpsub: Add NULL check in zynqmp_audio_init

Tomi Valkeinen <[email protected]>
drm: xlnx: zynqmp: Fix max dma segment size

Adrián Larumbe <[email protected]>
drm/panthor: Fix race condition when gathering fdinfo group samples

Hermes Wu <[email protected]>
drm/bridge: it6505: fix HDCP V match check is not performed correctly

Wayne Lin <[email protected]>
drm/dp_mst: Fix drm RAD print

John Keeping <[email protected]>

    drm/ssd130x: ensure ssd132x pitch is correct

John Keeping <[email protected]>

    drm/ssd130x: fix ssd132x encoding

Boris Brezillon <[email protected]>
drm/panthor: Fix a race between the reset and suspend path

Lizhi Hou <[email protected]>
accel/amdxdna: Return error when setting clock failed for npu1

Javier Martinez Canillas <[email protected]>

    drm/ssd130x: Set SPI .id_table to prevent an SPI core warning

Geert Uytterhoeven <[email protected]>
drm/bridge: ti-sn65dsi86: Fix multiple instances

Jann Horn <[email protected]>
rwonce: fix crash by removing READ_ONCE() for unaligned read

Jiawen Wu <[email protected]>
net: libwx: fix Tx L4 checksum

Jiawen Wu <[email protected]>
net: libwx: fix Tx descriptor content for some tunnel packets

Pranjal Shrivastava <[email protected]>
net: Fix the devmem sock opts and msgs for parisc

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_event: Fix handling of HCI_EV_LE_DIRECT_ADV_REPORT

Neeraj Sanjay Kale <[email protected]>
Bluetooth: btnxpuart: Fix kernel panic during FW release

Oleksij Rempel <[email protected]>
net: dsa: microchip: fix DCB apptrust configuration on KSZ88x3

Jann Horn <[email protected]>
rwonce: handle KCSAN like KASAN in read_word_at_a_time()

Wentao Guan <[email protected]>
Bluetooth: HCI: Add definition of hci_rp_remote_name_req_cancel

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_core: Enable buffer flow control for SCO/eSCO

Pedro Nishiyama <[email protected]>
Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers

Pedro Nishiyama <[email protected]>
Bluetooth: Add quirk for broken READ_PAGE_SCAN_TYPE

Pedro Nishiyama <[email protected]>
Bluetooth: Add quirk for broken READ_VOICE_SETTING

Akihiko Odaki <[email protected]>
virtio_net: Fix endian with virtio_net_ctrl_rss

Wang Liang <[email protected]>
net: fix NULL pointer dereference in l3mdev_l3_rcv

Nick Child <[email protected]>
ibmvnic: Use kernel helpers for hex dumps

Wang Liang <[email protected]>
bonding: check xdp prog when set bond mode

Sankararaman Jayaraman <[email protected]>
vmxnet3: unregister xdp rxq info in the reset path

Moshe Shemesh <[email protected]>
net/mlx5: Start health poll after enable hca

Mark Bloch <[email protected]>
net/mlx5: LAG, reload representors on LAG creation failure

Vladimir Oltean <[email protected]>
net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()

Vladimir Oltean <[email protected]>
net: dsa: sja1105: reject other RX filters than HWTSTAMP_FILTER_PTP_V2_L2_EVENT

Vladimir Oltean <[email protected]>
net: dsa: sja1105: fix displaced ethtool statistics counters

WangYuli <[email protected]>
mlxsw: spectrum_acl_bloom_filter: Workaround for some LLVM versions

Marek Behún <[email protected]>
net: dsa: mv88e6xxx: enable STU methods for 6320 family

Marek Behún <[email protected]>
net: dsa: mv88e6xxx: fix VTU methods for 6320 family

Marek Behún <[email protected]>
net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family

Marek Behún <[email protected]>
net: dsa: mv88e6xxx: enable PVT for 6321 switch

Marek Behún <[email protected]>
net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family

Michael Chan <[email protected]>
bnxt_en: Linearize TX SKB if the fragments exceed the max

Michael Chan <[email protected]>
bnxt_en: Mask the bd_cnt field in the TX BD properly

Maxim Mikityanskiy <[email protected]>
net/mlx5e: Fix ethtool -N flow-type ip4 to RSS context

Murad Masimov <[email protected]>
ax25: Remove broken autobind

WangYuli <[email protected]>
netfilter: nf_tables: Only use nf_skip_indirect_calls() when MITIGATION_RETPOLINE

Chenyuan Yang <[email protected]>
netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation error

Kuniyuki Iwashima <[email protected]>
net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.

Taehee Yoo <[email protected]>
eth: bnxt: fix out-of-range access of vnic_info array

Ojaswin Mujoo <[email protected]>
ext4: avoid journaling sb update on error if journal is destroying

Ojaswin Mujoo <[email protected]>
ext4: define ext4_journal_destroy wrapper

Zhang Yi <[email protected]>
jbd2: add a missing data flush during file and fs synchronization

Niklas Cassel <[email protected]>
nvmet: pci-epf: Always configure BAR0 as 64-bit

Jacob Keller <[email protected]>
ptp: ocp: reject unsupported periodic output flags

Jacob Keller <[email protected]>
broadcom: fix supported flag check in periodic output function

Jacob Keller <[email protected]>
net: lan743x: reject unsupported external timestamp requests

Jacob Keller <[email protected]>
renesas: reject PTP_STRICT_FLAGS as unsupported

Jacob Keller <[email protected]>
igb: reject invalid external timestamp requests for 82580-based HW

Nikita Zhandarovich <[email protected]>
wifi: mt76: mt7915: fix possible integer overflows in mt7915_muru_stats_show()

Mark Harmstone <[email protected]>
btrfs: don't clobber ret in btrfs_validate_super()

Boris Burkov <[email protected]>
btrfs: fix block group refcount race in btrfs_create_pending_block_groups()

Filipe Manana <[email protected]>
btrfs: fix reclaimed bytes accounting after automatic block group reclaim

Filipe Manana <[email protected]>
btrfs: get used bytes while holding lock at btrfs_reclaim_bgs_work()

Emil Tantilov <[email protected]>
idpf: check error for register_netdev() on init

Mateusz Polchlopek <[email protected]>
ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw()

Lukasz Czapnik <[email protected]>
ice: fix input validation for virtchnl BW

Jan Glaza <[email protected]>
ice: validate queue quanta parameters to prevent OOB access

Jan Glaza <[email protected]>
ice: stop truncating queue ids when checking

Jan Glaza <[email protected]>
virtchnl: make proto and filter action count unsigned

Jesse Brandeburg <[email protected]>
ice: fix reservation of resources for RDMA when disabled

Karol Kolacinski <[email protected]>
ice: ensure periodic output start time is in the future

Przemek Kitszel <[email protected]>
ice: health.c: fix compilation on gcc 7.5

Jeff Chen <[email protected]>
wifi: mwifiex: Fix RF calibration data download from file

Jeff Chen <[email protected]>
wifi: mwifiex: Fix premature release of RF calibration data.

Edward Adam Davis <[email protected]>
wifi: cfg80211: init wiphy_work before allocating rfkill fails

Mikhail Lobanov <[email protected]>
wifi: mac80211: check basic rates validity in sta_link_apply_parameters

Aditya Kumar Singh <[email protected]>
wifi: nl80211: store chandef on the correct link when starting CAC

Niklas Cassel <[email protected]>
ata: libata: Fix NCQ Non-Data log not supported print

Zhang Yi <[email protected]>
jbd2: fix off-by-one while erasing journal

Baokun Li <[email protected]>
ext4: goto right label 'out_mmap_sem' in ext4_setattr()

Ye Bin <[email protected]>
ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()

Ye Bin <[email protected]>
ext4: introduce ITAIL helper

Guixin Liu <[email protected]>
scsi: target: tcm_loop: Fix wrong abort tag

Xingui Yang <[email protected]>
scsi: hisi_sas: Fixed failure to issue vendor specific commands

Chunhai Guo <[email protected]>
f2fs: fix missing discard for active segments

Jan Kara <[email protected]>
ext4: verify fast symlink length

Kemeng Shi <[email protected]>
ext4: add missing brelse() for bh2 in ext4_dx_add_entry()

Gao Xiang <[email protected]>
erofs: allow 16-byte volume name again

Nicolas Frattaroli <[email protected]>
arm64: dts: rockchip: remove ethm0_clk0_25m_out from Sige5 gmac0

Yao Zi <[email protected]>
arm64: dts: rockchip: Fix PWM pinctrl names

Jianfeng Liu <[email protected]>
arm64: dts: rockchip: Fix pcie reset gpio on Orange Pi 5 Max

Christophe JAILLET <[email protected]>
bus: qcom-ssc-block-bus: Fix the error handling path of qcom_ssc_block_bus_probe()

Christophe JAILLET <[email protected]>
bus: qcom-ssc-block-bus: Remove some duplicated iounmap() calls

Chen-Yu Tsai <[email protected]>
arm64: dts: rockchip: Remove bluetooth node from rock-3a

Chukun Pan <[email protected]>
arm64: dts: rockchip: Move rk356x scmi SHMEM to reserved memory

Baokun Li <[email protected]>
ext4: show 'emergency_ro' when EXT4_FLAGS_EMERGENCY_RO is set

Baokun Li <[email protected]>
ext4: correct behavior under errors=remount-ro mode

Baokun Li <[email protected]>
ext4: add EXT4_FLAGS_EMERGENCY_RO bit

Baokun Li <[email protected]>
ext4: convert EXT4_FLAGS_* defines to enum

Charles Han <[email protected]>
ext4: fix potential null dereference in ext4 kunit test

Ming Lei <[email protected]>
block: fix adding folio to bio

Chao Yu <[email protected]>
f2fs: fix to avoid running out of free segments

Johannes Berg <[email protected]>
wifi: mac80211: remove SSID from ML reconf

Robin Murphy <[email protected]>
iommu: Handle race with default domain setup

Chao Yu <[email protected]>
f2fs: fix to avoid accessing uninitialized curseg

Laurentiu Mihalcea <[email protected]>
arm64: dts: imx8mp: change AUDIO_AXI_CLK_ROOT freq. to 800MHz

Laurentiu Mihalcea <[email protected]>
arm64: dts: imx8mp: add AUDIO_AXI_CLK_ROOT to AUDIOMIX block

Max Merchel <[email protected]>
ARM: dts: imx6ul-tqma6ul1: Change include order to disable fec2 node

Andreas Gruenbacher <[email protected]>
gfs2: skip if we cannot defer delete

Andreas Gruenbacher <[email protected]>
gfs2: minor evict fix

Xueqi Zhang <[email protected]>
memory: mtk-smi: Add ostd setting for mt8192

Yunhui Cui <[email protected]>
iommu/vt-d: Fix system hang on reboot -f

Vasant Hegde <[email protected]>
iommu/amd: Fix header file

Lorenzo Bianconi <[email protected]>
net: airoha: Fix lan4 support in airoha_qdma_get_gdm_port()

Arnd Bergmann <[email protected]>
firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo()

Zheng Qixing <[email protected]>
badblocks: use sector_t instead of int to avoid truncation of badblocks length

Zheng Qixing <[email protected]>
badblocks: return boolean from badblocks_set() and badblocks_clear()

Shin'ichiro Kawasaki <[email protected]>
null_blk: do partial IO for bad blocks

Shin'ichiro Kawasaki <[email protected]>
null_blk: replace null_process_cmd() call in null_zone_write()

Shin'ichiro Kawasaki <[email protected]>
null_blk: introduce badblocks_once parameter

Shin'ichiro Kawasaki <[email protected]>
null_blk: generate null_blk configfs features string

Zheng Qixing <[email protected]>
badblocks: fix missing bad blocks on retry in _badblocks_check()

Li Nan <[email protected]>
badblocks: fix merge issue when new badblocks align with pre+1

Li Nan <[email protected]>
badblocks: fix the using of MAX_BADBLOCKS

Li Nan <[email protected]>
badblocks: return error if any badblock set fails

Li Nan <[email protected]>
badblocks: return error directly when setting badblocks exceeds 512

Li Nan <[email protected]>
badblocks: attempt to merge adjacent badblocks during ack_all_badblocks

Li Nan <[email protected]>
badblocks: factor out a helper try_adjacent_combine

Li Nan <[email protected]>
badblocks: Fix error shitf ops

Anuj Gupta <[email protected]>
block: Correctly initialize BLK_INTEGRITY_NOGENERATE and BLK_INTEGRITY_NOVERIFY

Anuj Gupta <[email protected]>
block: ensure correct integrity capability propagation in stacked devices

Xiao Ni <[email protected]>
md/raid10: wait barrier before returning discard request with REQ_NOWAIT

AngeloGioacchino Del Regno <[email protected]>
soc: mediatek: mt8365-mmsys: Fix routing table masks and values

AngeloGioacchino Del Regno <[email protected]>
soc: mediatek: mt8167-mmsys: Fix missing regval in all entries

AngeloGioacchino Del Regno <[email protected]>
soc: mediatek: mtk-mmsys: Fix MT8188 VDO1 DPI1 output selection

Yu Kuai <[email protected]>
blk-throttle: fix lower bps rate by throtl_trim_slice()

Ping-Ke Shih <[email protected]>
wifi: rtw89: pci: correct ISR RDU bit for 8922AE

Ping-Ke Shih <[email protected]>
wifi: rtw89: fw: correct debug message format in rtw89_build_txpwr_trk_tbl_from_elm()

Michael Walle <[email protected]>
arm64: dts: ti: k3-j722s: fix pinctrl settings

Michael Walle <[email protected]>
arm64: dts: ti: k3-am62p: fix pinctrl settings

Francesco Dolcini <[email protected]>
arm64: dts: ti: k3-am62p: Enable AUDIO_REFCLKx

Tomas Glozar <[email protected]>
tools/rv: Keep user LDFLAGS in build

Gabriele Monaco <[email protected]>
tracing: Fix DECLARE_TRACE_CONDITION

Su Yue <[email protected]>
md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb

Yu Kuai <[email protected]>
md/raid1,raid10: don't ignore IO flags

Yu Kuai <[email protected]>
md: fix mddev uaf while iterating all_mddevs list

Chao Yu <[email protected]>
f2fs: fix to call f2fs_recover_quota_end() correctly

Chao Yu <[email protected]>
f2fs: fix potential deadloop in prepare_compress_overwrite()

Stefan Eichenberger <[email protected]>
arm64: dts: ti: k3-am62-verdin-dahlia: add Microphone Jack to sound card

Leo Stone <[email protected]>
f2fs: add check for deleted inode

Chao Yu <[email protected]>
f2fs: fix to set .discard_granularity correctly

Manivannan Sadhasivam <[email protected]>
wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in error path

Manivannan Sadhasivam <[email protected]>
wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path

Louis-Alexis Eyraud <[email protected]>
arm64: dts: mediatek: mt8390-genio-common: Fix duplicated regulator name

Louis-Alexis Eyraud <[email protected]>
arm64: dts: mediatek: mt8390-genio-700-evk: Move common parts to dtsi

Ahmad Fatoum <[email protected]>
arm64: dts: imx8mp-skov: operate CPU at 850 mV by default

Ahmad Fatoum <[email protected]>
arm64: dts: imx8mp-skov: correct PMIC board limits

Baochen Qiang <[email protected]>
wifi: ath12k: use link specific bss_conf as well in ath12k_mac_vif_cache_flush()

Hrushikesh Salunke <[email protected]>

    arm64: dts: ti: k3-j722s-evm: Fix USB2.0_MUX_SEL to select Type-C

Sudeep Holla <[email protected]>
firmware: arm_ffa: Skip the first/partition ID when parsing vCPU list

Geert Uytterhoeven <[email protected]>
arm64: dts: renesas: r8a77990: Re-add voltages to OPP table

Geert Uytterhoeven <[email protected]>
arm64: dts: renesas: r8a774c0: Re-add voltages to OPP table

Sudeep Holla <[email protected]>
firmware: arm_ffa: Explicitly cast return value from NOTIFICATION_INFO_GET

Sudeep Holla <[email protected]>
firmware: arm_ffa: Explicitly cast return value from FFA_VERSION before comparison

Asahi Lina <[email protected]>
iommu/io-pgtable-dart: Only set subpage protection disable for DART 1

Leon Romanovsky <[email protected]>
xfrm: delay initialization of offload path till its actually requested

Dmitry Antipov <[email protected]>
wifi: rtw89: rtw8852b{t}: fix TSSI debug timestamps

Nicolas Escande <[email protected]>
wifi: ath12k: Add missing htt_metadata flag in ath12k_dp_tx()

Vasiliy Kovalev <[email protected]>
jfs: add check read-only before truncation in jfs_truncate_nolock()

Vasiliy Kovalev <[email protected]>
jfs: add check read-only before txBeginAnon() call

Dmitry Antipov <[email protected]>
jfs: reject on-disk inodes of an unsupported type

Robin van der Gracht <[email protected]>
can: rockchip_canfd: rkcanfd_chip_fifo_setup(): remove duplicated setup of RX FIFO

Bart Van Assche <[email protected]>
scsi: mpt3sas: Fix a locking bug in an error path

Bart Van Assche <[email protected]>
scsi: mpi3mr: Fix locking in an error path

Macpaul Lin <[email protected]>
arm64: dts: mediatek: mt6359: fix dtbs_check error for audio-codec

Sudeep Holla <[email protected]>
firmware: arm_ffa: Unregister the FF-A devices when cleaning up the partitions

Viresh Kumar <[email protected]>
firmware: arm_ffa: Refactor addition of partition information into XArray

Jens Axboe <[email protected]>
io_uring/net: improve recv bundles

Pavel Begunkov <[email protected]>
io_uring: check for iowq alloc_workqueue failure

Max Kellermann <[email protected]>
io_uring/io-wq: do not use bogus hash value

Max Kellermann <[email protected]>

    io_uring/io-wq: cache work->flags in variable

Max Kellermann <[email protected]>
io_uring/io-wq: eliminate redundant io_work_get_acct() calls

Nicolas Bouchinet <[email protected]>
coredump: Fixes core_pipe_limit sysctl proc_handler

Zheng Qixing <[email protected]>
md/raid1: fix memory leak in raid1_run() if no active rdev

Li Nan <[email protected]>
md: ensure resync is prioritized over recovery

Paul Menzel <[email protected]>
scsi: mpt3sas: Reduce log level of ignore_delay_remove message to KERN_INFO

Chao Yu <[email protected]>
f2fs: fix to avoid panic once fallocation fails for pinfile

Bart Van Assche <[email protected]>
wifi: ath12k: Fix locking in "QMI firmware ready" error paths

Kang Yang <[email protected]>

    wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode

P Praneesh <[email protected]>
wifi: ath11k: fix RCU stall while reaping monitor destination ring

Thadeu Lima de Souza Cascardo <[email protected]>
dlm: prevent NPD when writing a positive value to event_done

Chao Yu <[email protected]>
f2fs: quota: fix to avoid warning in dquot_writeback_dquots()

Tom Rini <[email protected]>
ARM: dts: omap4-panda-a4: Add missing model and compatible properties

Wen Gong <[email protected]>
wifi: ath11k: update channel list in reg notifier instead reg worker

Chen-Yu Tsai <[email protected]>
arm64: dts: mediatek: mt8173: Fix some node names

Chen-Yu Tsai <[email protected]>
arm64: dts: mediatek: mt8173-elm: Drop pmic's #address-cells and #size-cells

Yu Zhang(Yuriy) <[email protected]>
wifi: ath11k: fix wrong overriding for VHT Beamformee STS Capability

Dmitry Antipov <[email protected]>
wifi: ath9k: do not submit zero bytes to the entropy pool

Rameshkumar Sundaram <[email protected]>
wifi: ath12k: Fix pdev lookup in WBM error processing

Sathishkumar Muruganandam <[email protected]>
wifi: ath12k: encode max Tx power in scan channel list command

Nicolas Escande <[email protected]>
wifi: ath12k: fix skb_ext_desc leak in ath12k_dp_tx() error path

Liang Jie <[email protected]>
wifi: rtw89: Correct immediate cfg_len calculation for scan_offload_be

Takashi Iwai <[email protected]>
ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA

Takashi Iwai <[email protected]>
ALSA: timer: Don't take register_mutex with copy_from/to_user()

Olivia Mackintosh <[email protected]>
ALSA: usb-audio: separate DJM-A9 cap lvl options

Jayesh Choudhary <[email protected]>
ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible

Ritu Chaudhary <[email protected]>
ASoC: tegra: Use non-atomic timeout for ADX status register

Takashi Iwai <[email protected]>
ALSA: hda/realtek: Always honor no_shutup_pins

Maud Spierings <[email protected]>
dt-bindings: vendor-prefixes: add GOcontroll

Kuninori Morimoto <[email protected]>
ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai()

Jiri Kosina <[email protected]>
HID: remove superfluous (and wrong) Makefile entry for CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER

Venkata Prasad Potturu <[email protected]>
ASoC: amd: acp: Fix for enabling DMIC on acp platforms via _DSD entry

Vitaliy Shevtsov <[email protected]>
ASoC: cs35l41: check the return value from spi_setup()

Armin Wolf <[email protected]>
platform/x86: dell-ddv: Fix temperature calculation

Ilpo Järvinen <[email protected]>
platform/x86: dell-uart-backlight: Make dell_uart_bl_serdev_driver static

Ilpo Järvinen <[email protected]>
platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: Make symbol static

Andy Shevchenko <[email protected]>
auxdisplay: panel: Fix an API misuse in panel.c

Joe Hattori <[email protected]>
media: platform: allgro-dvt: unregister v4l2_device on the error path

Benjamin Gaignard <[email protected]>
media: verisilicon: HEVC: Initialize start_bit field

Geert Uytterhoeven <[email protected]>
auxdisplay: MAX6959 should select BITREVERSE

Frieder Schrempf <[email protected]>
regulator: pca9450: Fix enable register for LDO5

Atish Patra <[email protected]>
RISC-V: KVM: Teardown riscv specific bits after kvm_exit

Vitaly Kuznetsov <[email protected]>
x86/entry: Add __init to ia32_emulation_override_cmdline()

Chao Gao <[email protected]>
x86/fpu/xstate: Fix inconsistencies in guest FPU xfeatures

Josh Poimboeuf <[email protected]>
x86/traps: Make exc_double_fault() consistently noreturn

Juri Lelli <[email protected]>
sched/deadline: Rebuild root domain accounting after every update

Juri Lelli <[email protected]>
sched/deadline: Generalize unique visiting of root domains

Juri Lelli <[email protected]>
sched/topology: Wrappers for sched_domains_mutex

Juri Lelli <[email protected]>
sched/deadline: Ignore special tasks when rebuilding domains

Kan Liang <[email protected]>
perf/x86/lbr: Fix shorter LBRs call stacks for the system-wide mode

Kan Liang <[email protected]>
perf: Supply task information to sched_task()

Kan Liang <[email protected]>
perf: Save PMU specific data in task_struct

Tao Chen <[email protected]>
perf/ring_buffer: Allow the EPOLLRDNORM flag for poll

Jacky Bai <[email protected]>
cpufreq: Init cpufreq only for present CPUs

Sebastian Andrzej Siewior <[email protected]>
lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()

Rafael J. Wysocki <[email protected]>
PM: sleep: Fix handling devices with direct_complete set on errors

Chenyuan Yang <[email protected]>

    thermal: int340x: Add NULL check for adev

Jacky Bai <[email protected]>
cpuidle: Init cpuidle only for present CPUs

James Morse <[email protected]>
x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors

Suzuki K Poulose <[email protected]>
arm64: realm: Use aliased addresses for device DMA to shared buffers

Suzuki K Poulose <[email protected]>
dma: Introduce generic dma_addr_*crypted helpers

Suzuki K Poulose <[email protected]>
dma: Fix encryption bit clearing for dma_to_phys

Qiuxu Zhuo <[email protected]>

    EDAC/ie31200: Fix the error path order of ie31200_init()

Qiuxu Zhuo <[email protected]>
EDAC/ie31200: Fix the DIMM size mask for several SoCs

Qiuxu Zhuo <[email protected]>
EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer

Tim Schumacher <[email protected]>
selinux: Chain up tool resolving errors in install_policy.sh

Maksim Davydov <[email protected]>
x86/split_lock: Fix the delayed detection logic

Li Huafei <[email protected]>
watchdog/hardlockup/perf: Fix perf_event memory leak

Kees Cook <[email protected]>
kunit/stackinit: Use fill byte different from Clang i386 pattern

Atish Patra <[email protected]>
RISC-V: KVM: Disable the kernel perf counter during configure

Aaron Kling <[email protected]>
cpufreq: tegra194: Allow building for Tegra234

Rafael J. Wysocki <[email protected]>
PM: sleep: Adjust check before setting power.must_resume

Peter Zijlstra <[email protected]>

    lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock

Kevin Loughlin <[email protected]>
x86/sev: Add missing RIP_REL_REF() invocations during sme_enable()

Arnd Bergmann <[email protected]>
x86/platform: Only allow CONFIG_EISA for 32-bit

Michael Jeanson <[email protected]>
rseq: Update kernel fields in lockstep with CONFIG_DEBUG_RSEQ=y

Benjamin Berg <[email protected]>
x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct()

Dhananjay Ugwekar <[email protected]>
cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update

Dhananjay Ugwekar <[email protected]>
cpufreq/amd-pstate: Convert all perf values to u8

Dhananjay Ugwekar <[email protected]>
cpufreq/amd-pstate: Pass min/max_limit_perf as min/max_perf to amd_pstate_update

Dhananjay Ugwekar <[email protected]>
cpufreq/amd-pstate: Modify the min_perf calculation in adjust_perf callback

Stanislav Spassov <[email protected]>
x86/fpu: Fix guest FPU state buffer allocation size

Thomas Weißschuh <[email protected]>
x86/vdso: Fix latent bug in vclock_pages calculation

Qiuxu Zhuo <[email protected]>
EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids

Qiuxu Zhuo <[email protected]>
EDAC/igen6: Fix the flood of invalid error reports

Jie Zhan <[email protected]>
cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()

Tianchen Ding <[email protected]>
sched/eevdf: Force propagating min_slice of cfs_rq when {en,de}queue tasks

zihan zhou <[email protected]>
sched: Cancel the slice protection of the idle entity

Konstantin Andreev <[email protected]>
smack: ipv4/ipv6: tcp/dccp/sctp: fix incorrect child socket label

Konstantin Andreev <[email protected]>
smack: dont compile ipv6 code unless ipv6 is configured

Oleg Nesterov <[email protected]>
seccomp: fix the __secure_computing() stub for !HAVE_ARCH_SECCOMP_FILTER

zuoqian <[email protected]>
cpufreq: scpi: compare kHz instead of Hz

Geert Uytterhoeven <[email protected]>
m68k: sun3: Fix DEBUG_MMU_EMU build

Thorsten Blum <[email protected]>
m68k: sun3: Use str_read_write() helper in mmu_emu_handle_fault()

Mike Rapoport (Microsoft) <[email protected]>
x86/mm/pat: cpa-test: fix length for CPA_ARRAY test

Eric Sandeen <[email protected]>
watch_queue: fix pipe accounting mismatch

Christian Brauner <[email protected]>
fs: support O_PATH fds with FSCONFIG_SET_FD

-------------

Diffstat:

 .../devicetree/bindings/vendor-prefixes.yaml       |    2 +
 Documentation/netlink/specs/netdev.yaml            |    4 +
 Documentation/netlink/specs/rt_route.yaml          |  180 ++--
 Documentation/networking/xsk-tx-metadata.rst       |   62 ++
 Makefile                                           |    4 +-
 arch/arm/Kconfig                                   |    2 +-
 .../boot/dts/nxp/imx/imx6ul-tqma6ul1-mba6ulx.dts   |    3 +-
 arch/arm/boot/dts/nxp/imx/imx6ul-tqma6ul1.dtsi     |    2 -
 arch/arm/boot/dts/ti/omap/omap4-panda-a4.dts       |    5 +
 arch/arm/include/asm/vmlinux.lds.h                 |   12 +-
 .../arm64/boot/dts/freescale/imx8mp-skov-reva.dtsi |   39 +-
 arch/arm64/boot/dts/freescale/imx8mp.dtsi          |    7 +-
 arch/arm64/boot/dts/mediatek/mt6359.dtsi           |    3 +-
 arch/arm64/boot/dts/mediatek/mt8173-elm.dtsi       |    2 -
 arch/arm64/boot/dts/mediatek/mt8173.dtsi           |    6 +-
 .../boot/dts/mediatek/mt8390-genio-700-evk.dts     | 1033 +------------------
 .../boot/dts/mediatek/mt8390-genio-common.dtsi     | 1046 ++++++++++++++++++++
 arch/arm64/boot/dts/renesas/r8a774c0.dtsi          |    4 +
 arch/arm64/boot/dts/renesas/r8a77990.dtsi          |    4 +
 arch/arm64/boot/dts/rockchip/rk3308-roc-cc.dts     |    2 +-
 arch/arm64/boot/dts/rockchip/rk3318-a95x-z2.dts    |    4 +-
 arch/arm64/boot/dts/rockchip/rk3399-nanopi4.dtsi   |    2 +-
 arch/arm64/boot/dts/rockchip/rk3568-rock-3a.dts    |   14 -
 arch/arm64/boot/dts/rockchip/rk356x-base.dtsi      |   25 +-
 .../boot/dts/rockchip/rk3576-armsom-sige5.dts      |    3 +-
 .../dts/rockchip/rk3588-orangepi-5-compact.dtsi    |    2 +-
 arch/arm64/boot/dts/rockchip/rk3588s-coolpi-4b.dts |    2 +-
 arch/arm64/boot/dts/ti/k3-am62-verdin-dahlia.dtsi  |    6 +-
 .../boot/dts/ti/k3-am62p-j722s-common-mcu.dtsi     |    8 -
 arch/arm64/boot/dts/ti/k3-am62p-main.dtsi          |   26 +-
 arch/arm64/boot/dts/ti/k3-j722s-evm.dts            |    2 +-
 arch/arm64/boot/dts/ti/k3-j722s-main.dtsi          |   15 -
 arch/arm64/include/asm/mem_encrypt.h               |   11 +
 arch/arm64/kernel/compat_alignment.c               |    2 +
 arch/loongarch/Kconfig                             |    4 +-
 arch/loongarch/include/asm/cache.h                 |    2 +
 arch/loongarch/include/asm/irq.h                   |    2 +-
 arch/loongarch/include/asm/stacktrace.h            |    3 +
 arch/loongarch/include/asm/unwind_hints.h          |   10 +-
 arch/loongarch/kernel/env.c                        |    2 +
 arch/loongarch/kernel/kgdb.c                       |    5 +-
 arch/loongarch/net/bpf_jit.c                       |   12 +-
 arch/loongarch/net/bpf_jit.h                       |    5 +
 arch/m68k/include/asm/processor.h                  |   14 +
 arch/m68k/sun3/mmu_emu.c                           |    7 +-
 arch/parisc/include/uapi/asm/socket.h              |   12 +-
 arch/powerpc/configs/mpc885_ads_defconfig          |    2 +-
 arch/powerpc/crypto/Makefile                       |    1 +
 arch/powerpc/kexec/relocate_32.S                   |    7 +-
 arch/powerpc/perf/core-book3s.c                    |    8 +-
 arch/powerpc/perf/vpa-pmu.c                        |    1 +
 arch/powerpc/platforms/cell/spufs/gang.c           |    1 +
 arch/powerpc/platforms/cell/spufs/inode.c          |   63 +-
 arch/powerpc/platforms/cell/spufs/spufs.h          |    2 +
 arch/riscv/Kconfig                                 |    2 +-
 arch/riscv/errata/Makefile                         |    6 +-
 arch/riscv/include/asm/cpufeature.h                |    4 +-
 arch/riscv/include/asm/ftrace.h                    |    4 +-
 arch/riscv/kernel/elf_kexec.c                      |    3 +
 arch/riscv/kernel/mcount.S                         |   24 +-
 arch/riscv/kernel/traps_misaligned.c               |   14 +-
 arch/riscv/kernel/unaligned_access_speed.c         |   91 +-
 arch/riscv/kernel/vec-copy-unaligned.S             |    2 +-
 arch/riscv/kvm/main.c                              |    4 +-
 arch/riscv/kvm/vcpu_pmu.c                          |    1 +
 arch/riscv/mm/hugetlbpage.c                        |   74 +-
 arch/riscv/purgatory/entry.S                       |    1 +
 arch/s390/include/asm/io.h                         |    2 -
 arch/s390/include/asm/pgtable.h                    |    3 -
 arch/s390/kernel/entry.S                           |    2 +-
 arch/s390/kernel/perf_pai_crypto.c                 |    3 +-
 arch/s390/kernel/perf_pai_ext.c                    |    3 +-
 arch/s390/mm/pgtable.c                             |   10 -
 arch/um/include/shared/os.h                        |    1 -
 arch/um/kernel/Makefile                            |    2 +-
 arch/um/kernel/maccess.c                           |   19 -
 arch/um/os-Linux/process.c                         |   51 -
 arch/x86/Kconfig                                   |    3 +-
 arch/x86/Kconfig.cpu                               |    2 +-
 arch/x86/Makefile.um                               |    7 +-
 arch/x86/coco/tdx/tdx.c                            |   26 +-
 arch/x86/entry/calling.h                           |    2 +
 arch/x86/entry/common.c                            |    2 +-
 arch/x86/entry/vdso/vdso-layout.lds.S              |    2 +-
 arch/x86/entry/vdso/vma.c                          |    2 +-
 arch/x86/events/amd/brs.c                          |    3 +-
 arch/x86/events/amd/lbr.c                          |    3 +-
 arch/x86/events/core.c                             |    5 +-
 arch/x86/events/intel/core.c                       |   51 +-
 arch/x86/events/intel/ds.c                         |   13 +-
 arch/x86/events/intel/lbr.c                        |   50 +-
 arch/x86/events/perf_event.h                       |   18 +-
 arch/x86/hyperv/ivm.c                              |    2 +-
 arch/x86/include/asm/irqflags.h                    |   40 +-
 arch/x86/include/asm/paravirt.h                    |   20 +-
 arch/x86/include/asm/paravirt_types.h              |    3 +-
 arch/x86/include/asm/tdx.h                         |    4 +-
 arch/x86/include/asm/tlbflush.h                    |    2 +-
 arch/x86/include/asm/vdso/vsyscall.h               |    1 +
 arch/x86/kernel/cpu/bus_lock.c                     |   20 +-
 arch/x86/kernel/cpu/mce/severity.c                 |   11 +-
 arch/x86/kernel/cpu/microcode/amd.c                |    2 +-
 arch/x86/kernel/cpu/resctrl/rdtgroup.c             |    3 +-
 arch/x86/kernel/dumpstack.c                        |    5 +-
 arch/x86/kernel/fpu/core.c                         |    6 +-
 arch/x86/kernel/paravirt.c                         |   14 +-
 arch/x86/kernel/process.c                          |    9 +-
 arch/x86/kernel/traps.c                            |   18 +-
 arch/x86/kernel/tsc.c                              |    4 +-
 arch/x86/kernel/uprobes.c                          |   14 +-
 arch/x86/kvm/svm/sev.c                             |   13 +-
 arch/x86/kvm/x86.c                                 |   15 +-
 arch/x86/lib/copy_user_64.S                        |   18 +
 arch/x86/mm/mem_encrypt_identity.c                 |    4 +-
 arch/x86/mm/pat/cpa-test.c                         |    2 +-
 arch/x86/mm/pat/memtype.c                          |   52 +-
 block/badblocks.c                                  |  286 ++----
 block/bio.c                                        |   11 +-
 block/blk-settings.c                               |   51 +-
 block/blk-throttle.c                               |   13 +-
 crypto/algapi.c                                    |    3 +-
 crypto/api.c                                       |   17 +-
 crypto/bpf_crypto_skcipher.c                       |    1 +
 drivers/accel/amdxdna/aie2_smu.c                   |    2 +
 drivers/acpi/acpi_video.c                          |    9 +-
 drivers/acpi/nfit/core.c                           |    2 +-
 drivers/acpi/platform_profile.c                    |   26 +-
 drivers/acpi/processor_idle.c                      |    4 +
 drivers/acpi/resource.c                            |    7 +
 drivers/acpi/x86/utils.c                           |    3 +-
 drivers/ata/libata-core.c                          |    2 +-
 drivers/auxdisplay/Kconfig                         |    1 +
 drivers/auxdisplay/panel.c                         |    4 +-
 drivers/base/power/main.c                          |   21 +-
 drivers/base/power/runtime.c                       |    2 +-
 drivers/block/null_blk/main.c                      |  165 +--
 drivers/block/null_blk/null_blk.h                  |    6 +
 drivers/block/null_blk/zoned.c                     |   20 +-
 drivers/block/ublk_drv.c                           |   41 +-
 drivers/bluetooth/btnxpuart.c                      |    6 +-
 drivers/bluetooth/btusb.c                          |    2 +
 drivers/bus/qcom-ssc-block-bus.c                   |   34 +-
 drivers/clk/clk-stm32f4.c                          |    4 +-
 drivers/clk/imx/clk-imx8mp-audiomix.c              |    6 +-
 drivers/clk/meson/g12a.c                           |   38 +-
 drivers/clk/meson/gxbb.c                           |   14 +-
 drivers/clk/mmp/clk-pxa1908-apmu.c                 |    4 +-
 drivers/clk/qcom/gcc-ipq5424.c                     |   24 +-
 drivers/clk/qcom/gcc-msm8953.c                     |    2 +-
 drivers/clk/qcom/gcc-sm8650.c                      |    4 +-
 drivers/clk/qcom/gcc-x1e80100.c                    |   30 -
 drivers/clk/qcom/mmcc-sdm660.c                     |    2 +-
 drivers/clk/renesas/r9a08g045-cpg.c                |    5 +-
 drivers/clk/renesas/rzg2l-cpg.c                    |   13 +-
 drivers/clk/renesas/rzg2l-cpg.h                    |   10 +-
 drivers/clk/rockchip/clk-rk3328.c                  |    2 +-
 drivers/clk/samsung/clk.c                          |    2 +-
 drivers/cpufreq/Kconfig.arm                        |    2 +-
 drivers/cpufreq/amd-pstate-trace.h                 |   46 +-
 drivers/cpufreq/amd-pstate.c                       |   80 +-
 drivers/cpufreq/amd-pstate.h                       |   18 +-
 drivers/cpufreq/armada-8k-cpufreq.c                |    2 +-
 drivers/cpufreq/cpufreq-dt.c                       |    2 +-
 drivers/cpufreq/cpufreq_governor.c                 |   45 +-
 drivers/cpufreq/mediatek-cpufreq-hw.c              |    2 +-
 drivers/cpufreq/mediatek-cpufreq.c                 |    2 +-
 drivers/cpufreq/mvebu-cpufreq.c                    |    2 +-
 drivers/cpufreq/qcom-cpufreq-hw.c                  |    2 +-
 drivers/cpufreq/qcom-cpufreq-nvmem.c               |    8 +-
 drivers/cpufreq/scmi-cpufreq.c                     |    2 +-
 drivers/cpufreq/scpi-cpufreq.c                     |    7 +-
 drivers/cpufreq/sun50i-cpufreq-nvmem.c             |    6 +-
 drivers/cpufreq/virtual-cpufreq.c                  |    2 +-
 drivers/cpuidle/cpuidle-arm.c                      |    8 +-
 drivers/cpuidle/cpuidle-big_little.c               |    2 +-
 drivers/cpuidle/cpuidle-psci.c                     |    4 +-
 drivers/cpuidle/cpuidle-qcom-spm.c                 |    2 +-
 drivers/cpuidle/cpuidle-riscv-sbi.c                |    4 +-
 drivers/crypto/hisilicon/sec2/sec.h                |    1 -
 drivers/crypto/hisilicon/sec2/sec_crypto.c         |  125 +--
 drivers/crypto/intel/iaa/iaa_crypto_main.c         |    4 +-
 .../crypto/intel/qat/qat_420xx/adf_420xx_hw_data.c |    1 +
 drivers/crypto/intel/qat/qat_common/adf_gen4_ras.c |   59 +-
 drivers/crypto/nx/nx-common-pseries.c              |   37 +-
 drivers/crypto/tegra/tegra-se-aes.c                |  401 +++++---
 drivers/crypto/tegra/tegra-se-hash.c               |  287 ++++--
 drivers/crypto/tegra/tegra-se-key.c                |   29 +-
 drivers/crypto/tegra/tegra-se-main.c               |   16 +-
 drivers/crypto/tegra/tegra-se.h                    |   39 +-
 drivers/dma/amd/ae4dma/ae4dma-pci.c                |    4 +-
 drivers/dma/amd/ae4dma/ae4dma.h                    |    2 +
 drivers/dma/amd/ptdma/ptdma-dmaengine.c            |   90 +-
 drivers/dma/fsl-edma-main.c                        |   14 +-
 drivers/edac/i10nm_base.c                          |    2 +
 drivers/edac/ie31200_edac.c                        |   19 +-
 drivers/edac/igen6_edac.c                          |   21 +-
 drivers/edac/skx_common.c                          |   33 +
 drivers/edac/skx_common.h                          |   11 +
 drivers/firmware/arm_ffa/bus.c                     |    3 +-
 drivers/firmware/arm_ffa/driver.c                  |   60 +-
 drivers/firmware/arm_scmi/driver.c                 |   10 -
 drivers/firmware/cirrus/cs_dsp.c                   |    2 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c         |    2 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_mes.c            |    5 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_umsch_mm.c       |  461 +--------
 drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c           |    5 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_virt.h           |    3 +-
 drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c             |    2 +-
 drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c             |    2 +-
 drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c              |    1 +
 drivers/gpu/drm/amd/amdgpu/vcn_v5_0_1.c            |   12 +-
 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c  |   15 -
 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c |   16 +
 .../gpu/drm/amd/display/dc/dce/dmub_hw_lock_mgr.c  |    4 +
 .../amd/display/dc/dml/dcn30/display_mode_vba_30.c |   12 +-
 .../dc/dml2/dml21/src/dml2_core/dml2_core_dcn4.c   |    3 +-
 drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c             |    3 +-
 .../gpu/drm/bridge/cadence/cdns-mhdp8546-core.c    |   12 +-
 drivers/gpu/drm/bridge/ite-it6505.c                |    7 +-
 drivers/gpu/drm/bridge/ti-sn65dsi86.c              |    2 +
 drivers/gpu/drm/display/drm_dp_mst_topology.c      |    8 +-
 drivers/gpu/drm/drm_file.c                         |   26 +-
 drivers/gpu/drm/mediatek/mtk_crtc.c                |    7 +-
 drivers/gpu/drm/mediatek/mtk_dp.c                  |    6 +-
 drivers/gpu/drm/mediatek/mtk_dsi.c                 |    6 +-
 drivers/gpu/drm/mediatek/mtk_hdmi.c                |   33 +-
 drivers/gpu/drm/msm/adreno/a6xx_gpu_state.c        |    2 +
 drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c           |    4 -
 drivers/gpu/drm/msm/disp/dpu1/dpu_encoder.c        |  132 ++-
 drivers/gpu/drm/msm/disp/dpu1/dpu_encoder.h        |    4 +
 drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c            |   24 +
 drivers/gpu/drm/msm/dsi/dsi_host.c                 |    8 +-
 drivers/gpu/drm/msm/dsi/dsi_manager.c              |   32 +-
 drivers/gpu/drm/msm/dsi/phy/dsi_phy_7nm.c          |    2 +-
 drivers/gpu/drm/msm/msm_atomic.c                   |   13 +-
 drivers/gpu/drm/msm/msm_dsc_helper.h               |   11 -
 drivers/gpu/drm/msm/msm_gem_submit.c               |    2 +-
 drivers/gpu/drm/msm/msm_kms.h                      |    7 +
 drivers/gpu/drm/panel/panel-ilitek-ili9882t.c      |    2 +-
 drivers/gpu/drm/panthor/panthor_device.c           |   22 +-
 drivers/gpu/drm/panthor/panthor_drv.c              |   14 +
 drivers/gpu/drm/panthor/panthor_fw.c               |    9 +-
 drivers/gpu/drm/panthor/panthor_fw.h               |    6 +-
 drivers/gpu/drm/panthor/panthor_heap.c             |   54 +-
 drivers/gpu/drm/panthor/panthor_heap.h             |    2 +
 drivers/gpu/drm/panthor/panthor_mmu.c              |   27 +
 drivers/gpu/drm/panthor/panthor_mmu.h              |    3 +
 drivers/gpu/drm/panthor/panthor_sched.c            |   84 +-
 drivers/gpu/drm/panthor/panthor_sched.h            |    3 +
 drivers/gpu/drm/solomon/ssd130x-spi.c              |    7 +-
 drivers/gpu/drm/solomon/ssd130x.c                  |    6 +-
 drivers/gpu/drm/vkms/vkms_drv.c                    |   15 +-
 drivers/gpu/drm/xe/Kconfig                         |    2 +-
 drivers/gpu/drm/xlnx/zynqmp_dp.c                   |    2 +-
 drivers/gpu/drm/xlnx/zynqmp_dp_audio.c             |    4 +
 drivers/gpu/drm/xlnx/zynqmp_dpsub.c                |    2 +
 drivers/greybus/gb-beagleplay.c                    |    4 +-
 drivers/hid/Makefile                               |    1 -
 drivers/hwtracing/coresight/coresight-catu.c       |    2 +-
 drivers/hwtracing/coresight/coresight-core.c       |   20 +-
 drivers/hwtracing/coresight/coresight-etm4x-core.c |   48 +-
 drivers/i3c/master/svc-i3c-master.c                |    2 +-
 drivers/iio/accel/mma8452.c                        |   10 +-
 drivers/iio/accel/msa311.c                         |   28 +-
 drivers/iio/adc/ad4130.c                           |   41 +-
 drivers/iio/adc/ad7124.c                           |   60 +-
 drivers/iio/adc/ad7173.c                           |   30 +-
 drivers/iio/adc/ad7192.c                           |    5 +
 drivers/iio/adc/ad7768-1.c                         |   15 +
 drivers/iio/adc/ad_sigma_delta.c                   |    1 +
 drivers/iio/dac/adi-axi-dac.c                      |    8 +
 drivers/iio/industrialio-backend.c                 |    4 +-
 drivers/iio/industrialio-gts-helper.c              |   11 +-
 drivers/iio/light/Kconfig                          |    1 +
 drivers/iio/light/veml6030.c                       |  587 +++++------
 drivers/iio/light/veml6075.c                       |    8 +-
 drivers/infiniband/core/device.c                   |   18 +-
 drivers/infiniband/core/mad.c                      |   38 +-
 drivers/infiniband/core/sysfs.c                    |    1 +
 drivers/infiniband/hw/erdma/erdma_cm.c             |    1 -
 drivers/infiniband/hw/mana/main.c                  |    2 +-
 drivers/infiniband/hw/mlx5/cq.c                    |    2 +-
 drivers/infiniband/hw/mlx5/mr.c                    |   41 +-
 drivers/infiniband/hw/mlx5/odp.c                   |   10 +-
 drivers/iommu/amd/amd_iommu.h                      |    7 +-
 drivers/iommu/intel/iommu.c                        |   17 +-
 drivers/iommu/io-pgtable-dart.c                    |    2 +-
 drivers/iommu/iommu.c                              |    5 +
 drivers/leds/led-core.c                            |   22 +-
 drivers/leds/leds-st1202.c                         |    4 +-
 drivers/md/md-bitmap.c                             |    6 +-
 drivers/md/md.c                                    |   71 +-
 drivers/md/md.h                                    |    6 +-
 drivers/md/raid1-10.c                              |    2 +-
 drivers/md/raid1.c                                 |   17 +-
 drivers/md/raid10.c                                |   19 +-
 drivers/media/dvb-frontends/dib8000.c              |    5 +-
 drivers/media/platform/allegro-dvt/allegro-core.c  |    1 +
 drivers/media/platform/ti/omap3isp/isp.c           |    7 +
 .../platform/verisilicon/hantro_g2_hevc_dec.c      |    1 +
 drivers/media/rc/streamzap.c                       |    2 +-
 drivers/media/test-drivers/vimc/vimc-streamer.c    |    6 +
 drivers/memory/mtk-smi.c                           |   33 +
 drivers/mfd/sm501.c                                |    6 +-
 drivers/misc/pci_endpoint_test.c                   |   22 +-
 drivers/mmc/host/omap.c                            |   19 +-
 drivers/mmc/host/sdhci-omap.c                      |    4 +-
 drivers/mmc/host/sdhci-pxav3.c                     |    1 +
 drivers/net/arcnet/com20020-pci.c                  |   17 +-
 drivers/net/bonding/bond_main.c                    |    8 +-
 drivers/net/bonding/bond_options.c                 |    3 +
 drivers/net/can/rockchip/rockchip_canfd-core.c     |    5 -
 drivers/net/dsa/microchip/ksz8.c                   |   11 +-
 drivers/net/dsa/microchip/ksz_dcb.c                |  231 +----
 drivers/net/dsa/mv88e6xxx/chip.c                   |   32 +-
 drivers/net/dsa/mv88e6xxx/phy.c                    |    3 +
 drivers/net/dsa/sja1105/sja1105_ethtool.c          |    9 +-
 drivers/net/dsa/sja1105/sja1105_ptp.c              |   20 +-
 drivers/net/dsa/sja1105/sja1105_static_config.c    |    6 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt.c          |   19 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt.h          |    6 +
 drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c      |    3 +-
 drivers/net/ethernet/ibm/ibmveth.c                 |   39 +-
 drivers/net/ethernet/ibm/ibmvnic.c                 |   30 +-
 drivers/net/ethernet/intel/e1000e/defines.h        |    3 +
 drivers/net/ethernet/intel/e1000e/ich8lan.c        |   80 +-
 drivers/net/ethernet/intel/e1000e/ich8lan.h        |    4 +
 drivers/net/ethernet/intel/ice/devlink/health.c    |    6 +-
 drivers/net/ethernet/intel/ice/ice_common.c        |    3 +-
 drivers/net/ethernet/intel/ice/ice_ptp.c           |    6 +-
 drivers/net/ethernet/intel/ice/ice_virtchnl.c      |   39 +-
 drivers/net/ethernet/intel/ice/ice_virtchnl_fdir.c |   24 +-
 drivers/net/ethernet/intel/idpf/idpf_lib.c         |   31 +-
 drivers/net/ethernet/intel/idpf/idpf_main.c        |    6 +-
 drivers/net/ethernet/intel/igb/igb_ptp.c           |    6 +
 drivers/net/ethernet/intel/igc/igc.h               |    1 +
 drivers/net/ethernet/intel/igc/igc_main.c          |  143 ++-
 drivers/net/ethernet/intel/ixgbe/ixgbe_e610.c      |    4 +-
 drivers/net/ethernet/marvell/mvpp2/mvpp2.h         |    3 +
 drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c    |    3 +-
 drivers/net/ethernet/marvell/mvpp2/mvpp2_prs.c     |  201 ++--
 drivers/net/ethernet/marvell/octeontx2/af/rvu.c    |    2 +-
 .../ethernet/marvell/octeontx2/af/rvu_devlink.c    |    2 +-
 drivers/net/ethernet/mediatek/airoha_eth.c         |   20 +-
 .../net/ethernet/mellanox/mlx5/core/en/params.c    |    8 +-
 .../ethernet/mellanox/mlx5/core/en_fs_ethtool.c    |    2 +
 drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c  |    4 +
 drivers/net/ethernet/mellanox/mlx5/core/main.c     |   15 +-
 .../mellanox/mlxsw/spectrum_acl_bloom_filter.c     |   27 +-
 drivers/net/ethernet/microchip/lan743x_ptp.c       |    6 +
 drivers/net/ethernet/renesas/ravb_ptp.c            |    3 +-
 drivers/net/ethernet/sfc/ef100_netdev.c            |    7 +-
 drivers/net/ethernet/sfc/ef100_nic.c               |   47 +-
 drivers/net/ethernet/sfc/efx.c                     |   24 -
 drivers/net/ethernet/sfc/mcdi_port.c               |   59 +-
 drivers/net/ethernet/sfc/mcdi_port_common.c        |   11 -
 drivers/net/ethernet/sfc/net_driver.h              |    6 +-
 drivers/net/ethernet/wangxun/libwx/wx_lib.c        |   65 +-
 drivers/net/ipvlan/ipvlan_l3s.c                    |    1 -
 drivers/net/phy/bcm-phy-ptp.c                      |    3 +-
 drivers/net/phy/broadcom.c                         |    6 +-
 drivers/net/usb/rndis_host.c                       |   16 +-
 drivers/net/usb/usbnet.c                           |    6 +-
 drivers/net/virtio_net.c                           |   30 +-
 drivers/net/vmxnet3/vmxnet3_drv.c                  |   10 +-
 drivers/net/wireless/ath/ath11k/dp_rx.c            |   14 +-
 drivers/net/wireless/ath/ath11k/mac.c              |    5 -
 drivers/net/wireless/ath/ath11k/pci.c              |    2 +
 drivers/net/wireless/ath/ath11k/reg.c              |   22 +-
 drivers/net/wireless/ath/ath12k/core.c             |    4 +-
 drivers/net/wireless/ath/ath12k/dp_rx.c            |    2 +-
 drivers/net/wireless/ath/ath12k/dp_tx.c            |    2 +
 drivers/net/wireless/ath/ath12k/mac.c              |    9 +-
 drivers/net/wireless/ath/ath12k/pci.c              |    2 +
 drivers/net/wireless/ath/ath12k/wmi.c              |    2 +
 drivers/net/wireless/ath/ath9k/common-spectral.c   |    4 +-
 drivers/net/wireless/marvell/mwifiex/fw.h          |   14 +
 drivers/net/wireless/marvell/mwifiex/main.c        |    4 -
 drivers/net/wireless/marvell/mwifiex/sta_cmd.c     |   18 +-
 .../net/wireless/mediatek/mt76/mt7915/debugfs.c    |   45 +-
 drivers/net/wireless/mediatek/mt76/mt7921/main.c   |    1 +
 drivers/net/wireless/mediatek/mt76/mt7925/mcu.c    |    1 -
 drivers/net/wireless/realtek/rtw89/core.h          |    2 +-
 drivers/net/wireless/realtek/rtw89/fw.c            |   12 +-
 drivers/net/wireless/realtek/rtw89/pci.h           |   56 +-
 drivers/net/wireless/realtek/rtw89/pci_be.c        |    2 +-
 drivers/net/wireless/realtek/rtw89/rtw8852b_rfk.c  |   13 +-
 drivers/net/wireless/realtek/rtw89/rtw8852bt_rfk.c |   13 +-
 drivers/ntb/hw/intel/ntb_hw_gen3.c                 |    3 +
 drivers/ntb/hw/mscc/ntb_hw_switchtec.c             |    2 +-
 drivers/ntb/test/ntb_perf.c                        |    4 +-
 drivers/nvdimm/badrange.c                          |    2 +-
 drivers/nvdimm/nd.h                                |    2 +-
 drivers/nvdimm/pfn_devs.c                          |    7 +-
 drivers/nvdimm/pmem.c                              |    2 +-
 drivers/nvme/host/ioctl.c                          |    2 +-
 drivers/nvme/host/pci.c                            |    3 +
 drivers/nvme/target/debugfs.c                      |    2 +-
 drivers/nvme/target/pci-epf.c                      |   11 +-
 drivers/pci/controller/cadence/pcie-cadence-ep.c   |    3 +-
 drivers/pci/controller/cadence/pcie-cadence.h      |    2 +-
 drivers/pci/controller/dwc/pcie-designware-ep.c    |    1 +
 drivers/pci/controller/dwc/pcie-histb.c            |   12 +-
 drivers/pci/controller/pcie-brcmstb.c              |   16 +-
 drivers/pci/controller/pcie-mediatek-gen3.c        |   28 +-
 drivers/pci/controller/pcie-xilinx-cpm.c           |   10 +-
 drivers/pci/endpoint/functions/pci-epf-test.c      |  126 ++-
 drivers/pci/hotplug/pciehp_hpc.c                   |    4 +-
 drivers/pci/iov.c                                  |   48 +-
 drivers/pci/pci-sysfs.c                            |    4 +-
 drivers/pci/pci.c                                  |   22 +-
 drivers/pci/pcie/aspm.c                            |   17 +-
 drivers/pci/pcie/bwctrl.c                          |    6 +-
 drivers/pci/pcie/portdrv.c                         |    8 +-
 drivers/pci/probe.c                                |    5 +-
 drivers/pci/setup-bus.c                            |   39 +-
 drivers/phy/rockchip/phy-rockchip-samsung-hdptx.c  |   50 +-
 drivers/pinctrl/bcm/pinctrl-bcm2835.c              |   14 +-
 drivers/pinctrl/intel/pinctrl-intel.c              |    1 -
 drivers/pinctrl/nuvoton/pinctrl-npcm8xx.c          |   10 +-
 drivers/pinctrl/renesas/pinctrl-rza2.c             |    2 +
 drivers/pinctrl/renesas/pinctrl-rzg2l.c            |    3 +
 drivers/pinctrl/renesas/pinctrl-rzv2m.c            |    2 +
 drivers/pinctrl/tegra/pinctrl-tegra.c              |    3 +
 drivers/platform/x86/dell/dell-uart-backlight.c    |    2 +-
 drivers/platform/x86/dell/dell-wmi-ddv.c           |    6 +-
 .../x86/intel/speed_select_if/isst_if_common.c     |    2 +-
 .../x86/lenovo-yoga-tab2-pro-1380-fastcharger.c    |    2 +-
 drivers/platform/x86/thinkpad_acpi.c               |   11 +
 drivers/power/supply/bq27xxx_battery.c             |    1 -
 drivers/power/supply/max77693_charger.c            |    2 +-
 drivers/ptp/ptp_ocp.c                              |    4 +
 drivers/regulator/pca9450-regulator.c              |    6 +-
 drivers/remoteproc/qcom_q6v5_mss.c                 |   21 +-
 drivers/remoteproc/qcom_q6v5_pas.c                 |   13 +-
 drivers/remoteproc/remoteproc_core.c               |    1 +
 drivers/rtc/rtc-renesas-rtca3.c                    |   15 +-
 drivers/scsi/hisi_sas/hisi_sas.h                   |    3 +-
 drivers/scsi/hisi_sas/hisi_sas_main.c              |   28 +-
 drivers/scsi/hisi_sas/hisi_sas_v2_hw.c             |    4 +-
 drivers/scsi/hisi_sas/hisi_sas_v3_hw.c             |    4 +-
 drivers/scsi/mpi3mr/mpi3mr_app.c                   |    1 +
 drivers/scsi/mpt3sas/mpt3sas_base.c                |   12 +-
 drivers/scsi/mpt3sas/mpt3sas_scsih.c               |    2 +-
 drivers/soc/mediatek/mt8167-mmsys.h                |   13 +-
 drivers/soc/mediatek/mt8188-mmsys.h                |    2 +-
 drivers/soc/mediatek/mt8365-mmsys.h                |   48 +-
 drivers/soundwire/generic_bandwidth_allocation.c   |    5 +-
 drivers/soundwire/slave.c                          |    1 +
 drivers/spi/spi-amd.c                              |    2 +-
 drivers/spi/spi-bcm2835.c                          |   18 +-
 drivers/spi/spi-cadence-xspi.c                     |    2 +-
 .../staging/gpib/agilent_82350b/agilent_82350b.c   |    2 +
 .../staging/gpib/agilent_82357a/agilent_82357a.c   |  424 ++++----
 drivers/staging/gpib/cb7210/cb7210.c               |    2 +-
 drivers/staging/gpib/hp_82341/hp_82341.c           |    2 +-
 drivers/staging/gpib/ni_usb/ni_usb_gpib.c          |  518 +++++-----
 drivers/staging/rtl8723bs/Kconfig                  |    1 +
 .../vc04_services/interface/vchiq_arm/vchiq_arm.c  |   28 +-
 drivers/target/loopback/tcm_loop.c                 |    5 +-
 .../intel/int340x_thermal/int3402_thermal.c        |    3 +
 drivers/tty/n_tty.c                                |   13 +-
 drivers/tty/serial/fsl_lpuart.c                    |  312 +++---
 drivers/usb/host/xhci-mem.c                        |    6 +-
 drivers/usb/typec/altmodes/thunderbolt.c           |   10 +-
 drivers/usb/typec/ucsi/ucsi_ccg.c                  |    5 +-
 drivers/vhost/scsi.c                               |   25 +-
 drivers/video/console/Kconfig                      |    6 +-
 drivers/video/fbdev/au1100fb.c                     |    4 +-
 drivers/video/fbdev/sm501fb.c                      |    7 +
 drivers/w1/masters/w1-uart.c                       |    4 +-
 fs/9p/vfs_inode_dotl.c                             |    2 +-
 fs/autofs/autofs_i.h                               |    2 +
 fs/bcachefs/fs-ioctl.c                             |    6 +-
 fs/btrfs/block-group.c                             |   40 +-
 fs/btrfs/disk-io.c                                 |    3 +
 fs/coredump.c                                      |    4 +-
 fs/dlm/lockspace.c                                 |    2 +-
 fs/erofs/internal.h                                |    2 -
 fs/erofs/super.c                                   |    8 -
 fs/exec.c                                          |   15 +-
 fs/exfat/fatent.c                                  |    2 +-
 fs/exfat/file.c                                    |   29 +-
 fs/exfat/inode.c                                   |   41 +-
 fs/ext4/dir.c                                      |    3 +
 fs/ext4/ext4.h                                     |   17 +-
 fs/ext4/ext4_jbd2.h                                |   29 +
 fs/ext4/inode.c                                    |   19 +-
 fs/ext4/mballoc-test.c                             |    2 +
 fs/ext4/namei.c                                    |   16 +-
 fs/ext4/super.c                                    |   81 +-
 fs/ext4/xattr.c                                    |   32 +-
 fs/ext4/xattr.h                                    |   10 +
 fs/f2fs/checkpoint.c                               |   15 +-
 fs/f2fs/compress.c                                 |    1 +
 fs/f2fs/data.c                                     |   10 +-
 fs/f2fs/f2fs.h                                     |    3 +-
 fs/f2fs/file.c                                     |   20 +-
 fs/f2fs/inode.c                                    |    7 +
 fs/f2fs/namei.c                                    |    8 +
 fs/f2fs/segment.c                                  |   29 +-
 fs/f2fs/segment.h                                  |    9 +-
 fs/f2fs/super.c                                    |   67 +-
 fs/fsopen.c                                        |    2 +-
 fs/fuse/dax.c                                      |    1 -
 fs/fuse/dir.c                                      |    2 +-
 fs/fuse/file.c                                     |    4 +-
 fs/gfs2/super.c                                    |   21 +-
 fs/hostfs/hostfs.h                                 |    2 +-
 fs/hostfs/hostfs_kern.c                            |    7 +-
 fs/hostfs/hostfs_user.c                            |   59 +-
 fs/isofs/dir.c                                     |    3 +-
 fs/jbd2/journal.c                                  |   27 +-
 fs/jfs/inode.c                                     |    2 +-
 fs/jfs/jfs_dtree.c                                 |    3 +-
 fs/jfs/jfs_extent.c                                |   10 +
 fs/jfs/jfs_imap.c                                  |   13 +-
 fs/jfs/xattr.c                                     |   13 +-
 fs/nfs/delegation.c                                |   63 +-
 fs/nfs/nfs4xdr.c                                   |   18 +-
 fs/nfs/sysfs.c                                     |   22 +-
 fs/nfs/write.c                                     |    4 +-
 fs/nfsd/Kconfig                                    |   12 +-
 fs/nfsd/nfs4callback.c                             |   14 +-
 fs/nfsd/nfs4state.c                                |   53 +-
 fs/nfsd/nfsctl.c                                   |   53 +-
 fs/nfsd/stats.c                                    |    4 +-
 fs/nfsd/stats.h                                    |    2 +-
 fs/nfsd/vfs.c                                      |   28 +-
 fs/ntfs3/attrib.c                                  |    3 +-
 fs/ntfs3/file.c                                    |   22 +-
 fs/ntfs3/frecord.c                                 |    6 +-
 fs/ntfs3/index.c                                   |    4 +-
 fs/ntfs3/ntfs.h                                    |    2 +-
 fs/ntfs3/super.c                                   |   89 +-
 fs/ocfs2/alloc.c                                   |    8 +
 fs/proc/base.c                                     |    2 +-
 fs/smb/client/connect.c                            |   16 +-
 fs/smb/server/auth.c                               |    6 +-
 fs/smb/server/connection.h                         |   11 +
 fs/smb/server/mgmt/user_session.c                  |   37 +-
 fs/smb/server/mgmt/user_session.h                  |    2 +
 fs/smb/server/oplock.c                             |   12 +-
 fs/smb/server/smb2pdu.c                            |   54 +-
 fs/smb/server/smbacl.c                             |   21 +-
 include/asm-generic/rwonce.h                       |   10 +-
 include/drm/display/drm_dp_mst_helper.h            |    7 +
 include/drm/drm_file.h                             |    5 +
 include/linux/arm_ffa.h                            |    3 +
 include/linux/avf/virtchnl.h                       |    4 +-
 include/linux/badblocks.h                          |   10 +-
 include/linux/context_tracking_irq.h               |    8 +-
 include/linux/coresight.h                          |    4 +
 include/linux/cpuset.h                             |    6 +
 include/linux/dma-direct.h                         |   13 +-
 include/linux/fwnode.h                             |    2 +-
 include/linux/if_bridge.h                          |    6 +-
 include/linux/iio/iio-gts-helper.h                 |    1 +
 include/linux/iio/iio.h                            |   26 +
 include/linux/interrupt.h                          |    8 +-
 include/linux/mem_encrypt.h                        |   23 +
 include/linux/nfs_fs_sb.h                          |    4 +
 include/linux/nmi.h                                |    4 -
 include/linux/perf_event.h                         |   37 +-
 include/linux/pgtable.h                            |   28 +-
 include/linux/pm_runtime.h                         |    2 +
 include/linux/rcupdate.h                           |    2 +-
 include/linux/reboot.h                             |   18 +-
 include/linux/sched.h                              |    7 +
 include/linux/sched/deadline.h                     |    4 +
 include/linux/sched/smt.h                          |    2 +-
 include/linux/sched/topology.h                     |    2 +
 include/linux/seccomp.h                            |    8 +-
 include/linux/thermal.h                            |    2 -
 include/linux/uprobes.h                            |    2 +
 include/linux/writeback.h                          |   24 +
 include/net/ax25.h                                 |    1 -
 include/net/bluetooth/hci.h                        |   34 +
 include/net/bluetooth/hci_core.h                   |    5 +
 include/net/bonding.h                              |    1 +
 include/net/xdp_sock.h                             |   10 +
 include/net/xdp_sock_drv.h                         |    1 +
 include/net/xfrm.h                                 |   11 +-
 include/rdma/ib_verbs.h                            |    1 +
 include/trace/define_trace.h                       |    7 +
 include/trace/events/writeback.h                   |   21 +-
 include/uapi/linux/if_xdp.h                        |   10 +
 include/uapi/linux/netdev.h                        |    3 +
 init/Kconfig                                       |    5 +
 io_uring/io-wq.c                                   |   40 +-
 io_uring/io-wq.h                                   |    7 +-
 io_uring/io_uring.c                                |    3 +-
 io_uring/net.c                                     |   23 +-
 kernel/bpf/core.c                                  |   19 +-
 kernel/bpf/verifier.c                              |    7 +
 kernel/cgroup/cpuset.c                             |   27 +-
 kernel/cpu.c                                       |    5 -
 kernel/events/core.c                               |   39 +-
 kernel/events/ring_buffer.c                        |    2 +-
 kernel/events/uprobes.c                            |   15 +-
 kernel/fork.c                                      |    4 +
 kernel/kexec_elf.c                                 |    2 +-
 kernel/reboot.c                                    |   84 +-
 kernel/rseq.c                                      |   82 +-
 kernel/sched/core.c                                |    8 +-
 kernel/sched/deadline.c                            |   37 +-
 kernel/sched/debug.c                               |    8 +-
 kernel/sched/fair.c                                |   50 +-
 kernel/sched/rt.c                                  |    2 +
 kernel/sched/sched.h                               |    2 +-
 kernel/sched/topology.c                            |   15 +-
 kernel/seccomp.c                                   |   14 +-
 kernel/trace/bpf_trace.c                           |    2 +-
 kernel/trace/ring_buffer.c                         |    4 +-
 kernel/trace/trace_events.c                        |    7 +
 kernel/trace/trace_events_synth.c                  |   32 +-
 kernel/trace/trace_functions_graph.c               |    1 +
 kernel/trace/trace_irqsoff.c                       |    2 -
 kernel/trace/trace_osnoise.c                       |    1 -
 kernel/trace/trace_sched_wakeup.c                  |    2 -
 kernel/watch_queue.c                               |    9 +
 kernel/watchdog.c                                  |   25 -
 kernel/watchdog_perf.c                             |   28 +-
 lib/842/842_compress.c                             |    2 +
 lib/stackinit_kunit.c                              |   30 +-
 lib/vsprintf.c                                     |    2 +-
 mm/gup.c                                           |    3 +
 mm/memory.c                                        |   13 +-
 mm/page-writeback.c                                |   37 +-
 mm/zswap.c                                         |   30 +-
 net/ax25/af_ax25.c                                 |   30 +-
 net/ax25/ax25_route.c                              |   74 --
 net/bluetooth/hci_core.c                           |   62 +-
 net/bluetooth/hci_event.c                          |   25 +-
 net/bluetooth/hci_sync.c                           |   30 +-
 net/bridge/br_ioctl.c                              |   36 +-
 net/bridge/br_private.h                            |    3 +-
 net/core/dev_ioctl.c                               |   19 -
 net/core/dst.c                                     |    8 +
 net/core/netdev-genl.c                             |    2 +
 net/core/rtnetlink.c                               |    3 +
 net/core/rtnl_net_debug.c                          |    2 +-
 net/ipv4/ip_tunnel_core.c                          |    4 +-
 net/ipv4/udp.c                                     |   42 +-
 net/ipv6/addrconf.c                                |   37 +-
 net/ipv6/calipso.c                                 |   21 +-
 net/ipv6/route.c                                   |   42 +-
 net/mac80211/cfg.c                                 |   12 +-
 net/mac80211/mlme.c                                |    9 +-
 net/netfilter/nf_tables_api.c                      |    4 +-
 net/netfilter/nf_tables_core.c                     |   11 +-
 net/netfilter/nfnetlink_queue.c                    |    2 +-
 net/netfilter/nft_set_hash.c                       |    3 +-
 net/netfilter/nft_tunnel.c                         |    6 +-
 net/openvswitch/actions.c                          |    6 -
 net/sched/act_tunnel_key.c                         |    2 +-
 net/sched/cls_flower.c                             |    2 +-
 net/sched/sch_skbprio.c                            |    3 -
 net/sctp/sysctl.c                                  |    4 +
 net/socket.c                                       |   19 +-
 net/vmw_vsock/af_vsock.c                           |    6 +-
 net/wireless/core.c                                |    6 +-
 net/wireless/nl80211.c                             |    2 +-
 net/xdp/xsk.c                                      |    8 +-
 net/xfrm/xfrm_device.c                             |   13 +-
 net/xfrm/xfrm_state.c                              |   32 +-
 net/xfrm/xfrm_user.c                               |    2 +-
 rust/Makefile                                      |    4 +-
 rust/kernel/pci.rs                                 |  143 ++-
 rust/kernel/platform.rs                            |   97 +-
 rust/kernel/print.rs                               |    7 +-
 samples/bpf/Makefile                               |    2 +-
 samples/rust/rust_driver_pci.rs                    |    8 +-
 samples/rust/rust_driver_platform.rs               |   11 +-
 samples/trace_events/trace-events-sample.h         |    8 +-
 scripts/gdb/linux/symbols.py                       |   13 +-
 scripts/package/debian/rules                       |    6 +-
 scripts/selinux/install_policy.sh                  |   15 +-
 security/smack/smack.h                             |    6 +
 security/smack/smack_lsm.c                         |   34 +-
 sound/core/timer.c                                 |  147 +--
 sound/pci/hda/patch_realtek.c                      |    9 +-
 sound/soc/amd/acp/acp-legacy-common.c              |   10 +-
 sound/soc/codecs/cs35l41-spi.c                     |    5 +-
 sound/soc/codecs/rt5665.c                          |   24 +-
 sound/soc/fsl/imx-card.c                           |    4 +
 sound/soc/generic/simple-card-utils.c              |    7 +-
 sound/soc/tegra/tegra210_adx.c                     |    6 +-
 sound/soc/ti/j721e-evm.c                           |    2 +
 sound/usb/mixer_quirks.c                           |    7 +-
 tools/arch/x86/lib/insn.c                          |    2 +-
 tools/bpf/runqslower/Makefile                      |    3 +-
 tools/include/uapi/linux/if_xdp.h                  |   10 +
 tools/include/uapi/linux/netdev.h                  |    3 +
 tools/lib/bpf/btf.c                                |    4 +-
 tools/lib/bpf/linker.c                             |    2 +-
 tools/lib/bpf/str_error.c                          |    2 +-
 tools/lib/bpf/str_error.h                          |    7 +-
 tools/objtool/arch/loongarch/decode.c              |   28 +-
 tools/objtool/arch/loongarch/include/arch/elf.h    |    7 +
 tools/objtool/arch/powerpc/decode.c                |   14 +
 tools/objtool/arch/x86/decode.c                    |   13 +
 tools/objtool/check.c                              |   84 +-
 tools/objtool/elf.c                                |    6 +-
 tools/objtool/include/objtool/arch.h               |    3 +
 tools/objtool/include/objtool/elf.h                |   27 +-
 tools/perf/Makefile.config                         |   10 +-
 tools/perf/Makefile.perf                           |    2 +-
 tools/perf/arch/powerpc/util/header.c              |    4 +-
 tools/perf/arch/x86/util/topdown.c                 |    2 +-
 tools/perf/bench/syscall.c                         |   22 +-
 tools/perf/builtin-report.c                        |   39 +-
 .../arch/arm64/ampere/ampereonex/metrics.json      |   10 +-
 tools/perf/tests/hwmon_pmu.c                       |   16 +-
 .../shell/coresight/asm_pure_loop/asm_pure_loop.S  |    2 +
 tools/perf/tests/shell/record_bpf_filter.sh        |    4 +-
 tools/perf/tests/shell/stat_all_pmu.sh             |   48 +-
 tools/perf/tests/shell/test_data_symbol.sh         |   17 +-
 tools/perf/tests/tool_pmu.c                        |    4 +-
 tools/perf/tests/workloads/datasym.c               |   34 +-
 tools/perf/util/arm-spe.c                          |    8 +-
 tools/perf/util/bpf-filter.l                       |    2 +-
 tools/perf/util/comm.c                             |    2 +
 tools/perf/util/debug.c                            |    2 +-
 tools/perf/util/dso.h                              |    4 +-
 tools/perf/util/evlist.c                           |   13 +-
 tools/perf/util/evsel.c                            |   16 +-
 tools/perf/util/expr.c                             |    2 +
 tools/perf/util/hist.c                             |    2 +
 tools/perf/util/hist.h                             |    3 +
 tools/perf/util/hwmon_pmu.c                        |   14 -
 tools/perf/util/hwmon_pmu.h                        |   16 +
 tools/perf/util/intel-tpebs.c                      |    2 +-
 tools/perf/util/machine.c                          |    4 +-
 tools/perf/util/pmu.c                              |    7 +-
 tools/perf/util/pmu.h                              |    7 +
 tools/perf/util/pmus.c                             |  173 ++--
 tools/perf/util/python.c                           |   17 +-
 tools/perf/util/session.c                          |   12 +
 tools/perf/util/session.h                          |    1 +
 tools/perf/util/sort.c                             |   23 +
 tools/perf/util/sort.h                             |    1 +
 tools/perf/util/stat-shadow.c                      |    3 +-
 tools/perf/util/stat.c                             |   13 +-
 tools/perf/util/tool_pmu.c                         |   32 +-
 tools/perf/util/tool_pmu.h                         |    2 +-
 tools/perf/util/units.c                            |    2 +-
 tools/power/x86/turbostat/turbostat.8              |    2 +
 tools/power/x86/turbostat/turbostat.c              |   30 +-
 tools/testing/selftests/bpf/Makefile               |    1 +
 .../selftests/bpf/prog_tests/bloom_filter_map.c    |    5 +
 tools/testing/selftests/bpf/prog_tests/tailcalls.c |    1 +
 tools/testing/selftests/bpf/progs/strncmp_bench.c  |    5 +-
 tools/testing/selftests/mm/cow.c                   |    2 +-
 tools/testing/selftests/pcie_bwctrl/Makefile       |    2 +-
 tools/verification/rv/Makefile.rv                  |    2 +-
 756 files changed, 9425 insertions(+), 7073 deletions(-)

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Christian Brauner <[email protected]>

[ Upstream commit 0ff053b98a0f039e52c2bd8d0cb38f2831edfaf5 ]

Let FSCONFIG_SET_FD handle O_PATH file descriptors. This is particularly useful in the context of overlayfs where layers can be specified via file descriptors instead of paths. But userspace must currently use non-O_PATH file desriptors which is often pointless especially if the file descriptors have been created via open_tree(OPEN_TREE_CLONE).

---
 fs/autofs/autofs_i.h | 2 ++
 fs/fsopen.c          | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)

index 77c7991d89aac..23cea74f9933b 100644
@@ -218,6 +218,8 @@ void autofs_clean_ino(struct autofs_info *);
 
 static inline int autofs_check_pipe(struct file *pipe)
 {
+	if (pipe->f_mode & FMODE_PATH)
+		return -EINVAL;
 	if (!(pipe->f_mode & FMODE_CAN_WRITE))
 		return -EINVAL;
 	if (!S_ISFIFO(file_inode(pipe)->i_mode))

index 094a7f510edfe..1aaf4cb2afb29 100644
@@ -453,7 +453,7 @@ SYSCALL_DEFINE5(fsconfig,
 	case FSCONFIG_SET_FD:
 		param.type = fs_value_is_file;
 		ret = -EBADF;
-		param.file = fget(aux);
+		param.file = fget_raw(aux);
 		if (!param.file)
 			goto out_key;
 		param.dirfd = aux;

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Eric Sandeen <[email protected]>

[ Upstream commit f13abc1e8e1a3b7455511c4e122750127f6bc9b0 ]

Currently, watch_queue_set_size() modifies the pipe buffers charged to user->pipe_bufs without updating the pipe->nr_accounted on the pipe itself, due to the if (!pipe_has_watch_queue()) test in pipe_resize_ring(). This means that when the pipe is ultimately freed, we decrement user->pipe_bufs by something other than what than we had charged to it, potentially leading to an underflow. This in turn can cause subsequent too_many_pipe_buffers_soft() tests to fail with -EPERM.

To remedy this, explicitly account for the pipe usage in watch_queue_set_size() to match the number set via account_pipe_buffers()

(It's unclear why watch_queue_set_size() does not update nr_accounted; it may be due to intentional overprovisioning in watch_queue_set_size()?)

---
 kernel/watch_queue.c | 9 +++++++++
 1 file changed, 9 insertions(+)

index 5267adeaa4034..41e4e8070923a 100644
@@ -269,6 +269,15 @@ long watch_queue_set_size(struct pipe_inode_info *pipe, unsigned int nr_notes)
 	if (ret < 0)
 		goto error;
 
+	/*
+	 * pipe_resize_ring() does not update nr_accounted for watch_queue
+	 * pipes, because the above vastly overprovisions. Set nr_accounted on
+	 * and max_usage this pipe to the number that was actually charged to
+	 * the user above via account_pipe_buffers.
+	 */
+	pipe->max_usage = nr_pages;
+	pipe->nr_accounted = nr_pages;
+
 	ret = -ENOMEM;
 	pages = kcalloc(nr_pages, sizeof(struct page *), GFP_KERNEL);
 	if (!pages)

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Mike Rapoport (Microsoft) <[email protected]>

[ Upstream commit 33ea120582a638b2f2e380a50686c2b1d7cce795 ]

The CPA_ARRAY test always uses len[1] as numpages argument to change_page_attr_set() although the addresses array is different each iteration of the test loop.

Replace len[1] with len[i] to have numpages matching the addresses array.

---
 arch/x86/mm/pat/cpa-test.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

index 3d2f7f0a6ed14..ad3c1feec990d 100644
@@ -183,7 +183,7 @@ static int pageattr_test(void)
 			break;
 
 		case 1:
-			err = change_page_attr_set(addrs, len[1], PAGE_CPA_TEST, 1);
+			err = change_page_attr_set(addrs, len[i], PAGE_CPA_TEST, 1);
 			break;
 
 		case 2:

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Thorsten Blum <[email protected]>

[ Upstream commit 751b3d8d886e73ecc24a5426adba228ef7eb39e8 ]

Remove hard-coded strings by using the str_read_write() helper.

Stable-dep-of: 723be3c6ab31 ("m68k: sun3: Fix DEBUG_MMU_EMU build")

---
 arch/m68k/sun3/mmu_emu.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

index 119bd32efcfbc..7b15cc12637bf 100644
@@ -17,6 +17,7 @@
 #include <linux/bitops.h>
 #include <linux/module.h>
 #include <linux/sched/mm.h>
+#include <linux/string_choices.h>
 
 #include <asm/setup.h>
 #include <asm/traps.h>

@@ -371,7 +372,7 @@ int mmu_emu_handle_fault (unsigned long vaddr, int read_flag, int kernel_fault)
 
 #ifdef DEBUG_MMU_EMU
 	pr_info("%s: vaddr=%lx type=%s crp=%p\n", __func__, vaddr,
-		read_flag ? "read" : "write", crp);
+		str_read_write(read_flag), crp);
 #endif
 
 	segment = (vaddr >> SUN3_PMEG_SIZE_BITS) & 0x7FF;

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Geert Uytterhoeven <[email protected]>

[ Upstream commit 723be3c6ab31b320afe0075e2eb9b8dd41f3b6d1 ]

With DEBUG_MMU_EMU enabled:

arch/m68k/sun3/mmu_emu.c: In function ‘mmu_emu_handle_fault’:
arch/m68k/sun3/mmu_emu.c:420:38: error: implicit declaration of function ‘get_fs’; did you mean ‘sget_fc’? [-Werror=implicit-function-declaration]
420 | pr_info("seg:%ld crp:%p ->", get_fs().seg, crp);
| ^~~~~~

[...]

arch/m68k/sun3/mmu_emu.c:420:46: error: request for member ‘seg’ in something not a structure or union
420 | pr_info("seg:%ld crp:%p ->", get_fs().seg, crp);
| ^

Fix this by reintroducing and using a helper to retrieve the current value of the DFC register.

While at it, replace "%p" by "%px", as there is no point in printing obfuscated pointers during debugging.

---
 arch/m68k/include/asm/processor.h | 14 ++++++++++++++
 arch/m68k/sun3/mmu_emu.c          |  4 ++--
 2 files changed, 16 insertions(+), 2 deletions(-)

index 8f2676c3a9882..3c43c09d44894 100644
@@ -95,10 +95,24 @@ static inline void set_fc(unsigned long val)
 			      "movec %0,%/dfc\n\t"
 			      : /* no outputs */ : "r" (val) : "memory");
 }
+
+static inline unsigned long get_fc(void)
+{
+	unsigned long val;
+
+	__asm__ ("movec %/dfc,%0" : "=r" (val) : );
+
+	return val;
+}
 #else
 static inline void set_fc(unsigned long val)
 {
 }
+
+static inline unsigned long get_fc(void)
+{
+	return USER_DATA;
+}
 #endif /* CONFIG_CPU_HAS_ADDRESS_SPACES */
 
 struct thread_struct {

index 7b15cc12637bf..b39fc3717d8ea 100644
@@ -371,7 +371,7 @@ int mmu_emu_handle_fault (unsigned long vaddr, int read_flag, int kernel_fault)
 	}
 
 #ifdef DEBUG_MMU_EMU
-	pr_info("%s: vaddr=%lx type=%s crp=%p\n", __func__, vaddr,
+	pr_info("%s: vaddr=%lx type=%s crp=%px\n", __func__, vaddr,
 		str_read_write(read_flag), crp);
 #endif
 

@@ -418,7 +418,7 @@ int mmu_emu_handle_fault (unsigned long vaddr, int read_flag, int kernel_fault)
 		pte_val (*pte) |= SUN3_PAGE_ACCESSED;
 
 #ifdef DEBUG_MMU_EMU
-	pr_info("seg:%ld crp:%p ->", get_fs().seg, crp);
+	pr_info("seg:%ld crp:%px ->", get_fc(), crp);
 	print_pte_vaddr (vaddr);
 	pr_cont("\n");
 #endif

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: zuoqian <[email protected]>

[ Upstream commit 4742da9774a416908ef8e3916164192c15c0e2d1 ]

The CPU rate from clk_get_rate() may not be divisible by 1000 (e.g., 133333333). But the rate calculated from frequency(kHz) is always divisible by 1000 (e.g., 133333000).
Comparing the rate causes a warning during CPU scaling:
"cpufreq: __target_index: Failed to change cpu frequency: -5". When we choose to compare kHz here, the issue does not occur.

---
 drivers/cpufreq/scpi-cpufreq.c | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

index cd89c1b9832c0..9e09565e41c09 100644
@@ -39,8 +39,9 @@ static unsigned int scpi_cpufreq_get_rate(unsigned int cpu)
 static int
 scpi_cpufreq_set_target(struct cpufreq_policy *policy, unsigned int index)
 {
-	u64 rate = policy->freq_table[index].frequency * 1000;
+	unsigned long freq_khz = policy->freq_table[index].frequency;
 	struct scpi_data *priv = policy->driver_data;
+	unsigned long rate = freq_khz * 1000;
 	int ret;
 
 	ret = clk_set_rate(priv->clk, rate);

@@ -48,7 +49,7 @@ scpi_cpufreq_set_target(struct cpufreq_policy *policy, unsigned int index)
 	if (ret)
 		return ret;
 
-	if (clk_get_rate(priv->clk) != rate)
+	if (clk_get_rate(priv->clk) / 1000 != freq_khz)
 		return -EIO;
 
 	return 0;

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Oleg Nesterov <[email protected]>

[ Upstream commit b37778bec82ba82058912ca069881397197cd3d5 ]

Depending on CONFIG_HAVE_ARCH_SECCOMP_FILTER, __secure_computing(NULL) will crash or not. This is not consistent/safe, especially considering that after the previous change __secure_computing(sd) is always called with sd == NULL.

Fortunately, if CONFIG_HAVE_ARCH_SECCOMP_FILTER=n, __secure_computing() has no callers, these architectures use secure_computing_strict(). Yet it make sense make __secure_computing(NULL) safe in this case.

Note also that with this change we can unexport secure_computing_strict() and change the current callers to use __secure_computing(NULL).

---
 include/linux/seccomp.h |  8 ++------
 kernel/seccomp.c        | 14 ++++++++++----
 2 files changed, 12 insertions(+), 10 deletions(-)

index e45531455d3bb..d55949071c30e 100644
@@ -22,8 +22,9 @@
 #include <linux/atomic.h>
 #include <asm/seccomp.h>
 
-#ifdef CONFIG_HAVE_ARCH_SECCOMP_FILTER
 extern int __secure_computing(const struct seccomp_data *sd);
+
+#ifdef CONFIG_HAVE_ARCH_SECCOMP_FILTER
 static inline int secure_computing(void)
 {
 	if (unlikely(test_syscall_work(SECCOMP)))

@@ -32,11 +33,6 @@ static inline int secure_computing(void)
 }
 #else
 extern void secure_computing_strict(int this_syscall);
-static inline int __secure_computing(const struct seccomp_data *sd)
-{
-	secure_computing_strict(sd->nr);
-	return 0;
-}
 #endif
 
 extern long prctl_get_seccomp(void);

index 7bbb408431ebc..3231f63d93d89 100644
@@ -29,13 +29,11 @@
 #include <linux/syscalls.h>
 #include <linux/sysctl.h>
 
+#include <asm/syscall.h>
+
 /* Not exposed in headers: strictly internal use only. */
 #define SECCOMP_MODE_DEAD	(SECCOMP_MODE_FILTER + 1)
 
-#ifdef CONFIG_HAVE_ARCH_SECCOMP_FILTER
-#include <asm/syscall.h>
-#endif
-
 #ifdef CONFIG_SECCOMP_FILTER
 #include <linux/file.h>
 #include <linux/filter.h>

@@ -1074,6 +1072,14 @@ void secure_computing_strict(int this_syscall)
 	else
 		BUG();
 }
+int __secure_computing(const struct seccomp_data *sd)
+{
+	int this_syscall = sd ? sd->nr :
+		syscall_get_nr(current, current_pt_regs());
+
+	secure_computing_strict(this_syscall);
+	return 0;
+}
 #else
 
 #ifdef CONFIG_SECCOMP_FILTER

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Konstantin Andreev <[email protected]>

[ Upstream commit bfcf4004bcbce2cb674b4e8dbd31ce0891766bac ]

I want to be sure that ipv6-specific code
is not compiled in kernel binaries
if ipv6 is not configured.

[1] was getting rid of "unused variable" warning, but, with that, it also mandated compilation of a handful ipv6- specific functions in ipv4-only kernel configurations:

smk_ipv6_localhost, smack_ipv6host_label, smk_ipv6_check.

Their compiled bodies are likely to be removed by compiler from the resulting binary, but, to be on the safe side, I remove them from the compiler view.

---
 security/smack/smack.h     |  6 ++++++
 security/smack/smack_lsm.c | 10 +++++++++-
 2 files changed, 15 insertions(+), 1 deletion(-)

index 4608b07607a3d..c4d998972ba56 100644
@@ -152,6 +152,7 @@ struct smk_net4addr {
 	struct smack_known	*smk_label;	/* label */
 };
 
+#if IS_ENABLED(CONFIG_IPV6)
 /*
  * An entry in the table identifying IPv6 hosts.
  */

@@ -162,7 +163,9 @@ struct smk_net6addr {
 	int			smk_masks;	/* mask size */
 	struct smack_known	*smk_label;	/* label */
 };
+#endif /* CONFIG_IPV6 */
 
+#ifdef SMACK_IPV6_PORT_LABELING
 /*
  * An entry in the table identifying ports.
  */

@@ -175,6 +178,7 @@ struct smk_port_label {
 	short			smk_sock_type;	/* Socket type */
 	short			smk_can_reuse;
 };
+#endif /* SMACK_IPV6_PORT_LABELING */
 
 struct smack_known_list_elem {
 	struct list_head	list;

@@ -315,7 +319,9 @@ extern struct smack_known smack_known_web;
 extern struct mutex	smack_known_lock;
 extern struct list_head smack_known_list;
 extern struct list_head smk_net4addr_list;
+#if IS_ENABLED(CONFIG_IPV6)
 extern struct list_head smk_net6addr_list;
+#endif /* CONFIG_IPV6 */
 
 extern struct mutex     smack_onlycap_lock;
 extern struct list_head smack_onlycap_list;

index 239773cdcdcf4..85f3d4337ca19 100644
@@ -2492,6 +2492,7 @@ static struct smack_known *smack_ipv4host_label(struct sockaddr_in *sip)
 	return NULL;
 }
 
+#if IS_ENABLED(CONFIG_IPV6)
 /*
  * smk_ipv6_localhost - Check for local ipv6 host address
  * @sip: the address

@@ -2559,6 +2560,7 @@ static struct smack_known *smack_ipv6host_label(struct sockaddr_in6 *sip)
 
 	return NULL;
 }
+#endif /* CONFIG_IPV6 */
 
 /**
  * smack_netlbl_add - Set the secattr on a socket

@@ -2663,6 +2665,7 @@ static int smk_ipv4_check(struct sock *sk, struct sockaddr_in *sap)
 	return rc;
 }
 
+#if IS_ENABLED(CONFIG_IPV6)
 /**
  * smk_ipv6_check - check Smack access
  * @subject: subject Smack label

@@ -2695,6 +2698,7 @@ static int smk_ipv6_check(struct smack_known *subject,
 	rc = smk_bu_note("IPv6 check", subject, object, MAY_WRITE, rc);
 	return rc;
 }
+#endif /* CONFIG_IPV6 */
 
 #ifdef SMACK_IPV6_PORT_LABELING
 /**

@@ -3027,7 +3031,9 @@ static int smack_socket_connect(struct socket *sock, struct sockaddr *sap,
 		return 0;
 	if (addrlen < offsetofend(struct sockaddr, sa_family))
 		return 0;
-	if (IS_ENABLED(CONFIG_IPV6) && sap->sa_family == AF_INET6) {
+
+#if IS_ENABLED(CONFIG_IPV6)
+	if (sap->sa_family == AF_INET6) {
 		struct sockaddr_in6 *sip = (struct sockaddr_in6 *)sap;
 		struct smack_known *rsp = NULL;
 

@@ -3047,6 +3053,8 @@ static int smack_socket_connect(struct socket *sock, struct sockaddr *sap,
 
 		return rc;
 	}
+#endif /* CONFIG_IPV6 */
+
 	if (sap->sa_family != AF_INET || addrlen < sizeof(struct sockaddr_in))
 		return 0;
 	rc = smk_ipv4_check(sock->sk, (struct sockaddr_in *)sap);

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Konstantin Andreev <[email protected]>

[ Upstream commit 6cce0cc3861337b3ad8d4ac131d6e47efa0954ec ]

Since inception [1], SMACK initializes ipv* child socket security for connection-oriented communications (tcp/sctp/dccp) during accept() syscall, in the security_sock_graft() hook:

| void smack_sock_graft(struct sock *sk, ...)
| {
|     // only ipv4 and ipv6 are eligible here
|     // ...
|     ssp = sk->sk_security; // socket security
|     ssp->smk_in = skp;     // process label: smk_of_current()
|     ssp->smk_out = skp;    // process label: smk_of_current()
| }

This approach is incorrect for two reasons:

A) initialization occurs too late for child socket security:

The child socket is created by the kernel once the handshake completes (e.g., for tcp: after receiving ack for syn+ack).

Data can legitimately start arriving to the child socket immediately, long before the application calls accept() on the socket.

Those data are (currently — were) processed by SMACK using incorrect child socket security attributes.

B) Incoming connection requests are handled using the listening socket's security, hence, the child socket must inherit the listening socket's security attributes.

smack_sock_graft() initilizes the child socket's security with a process label, as is done for a new socket()

But ... the process label is not necessarily the same as the listening socket label. A privileged application may legitimately set other in/out labels for a listening socket.

When this happens, SMACK processes incoming packets using incorrect socket security attributes.

In [2] Michael Lontke noticed (A) and fixed it in [3] by adding socket initialization into security_sk_clone_security() hook like

| void smack_sk_clone_security(struct sock *oldsk, struct sock *newsk)
| {
|    *(struct socket_smack *)newsk->sk_security =
|    *(struct socket_smack *)oldsk->sk_security;
| }

This initializes the child socket security with the parent (listening) socket security at the appropriate time.

I was forced to revisit this old story because

smack_sock_graft() was left in place by [3] and continues overwriting the child socket's labels with the process label,
and there might be a reason for this, so I undertook a study.

If the process label differs from the listening socket's labels, the following occurs for ipv4:

assigning the smk_out is not accompanied by netlbl_sock_setattr, so the outgoing packet's cipso label does not change.

So, the only effect of this assignment for interhost communications is a divergence between the program-visible “out” socket label and the cipso network label. For intrahost communications this label, however, becomes visible via secmark netfilter marking, and is checked for access rights by the client, receiving side.

Assigning the smk_in affects both interhost and intrahost
communications: the server begins to check access rights against an wrong label.

Access check against wrong label (smk_in or smk_out), unsurprisingly fails, breaking the connection.

The above affects protocols that calls security_sock_graft() during accept(), namely: {tcp,dccp,sctp}/{ipv4,ipv6}
One extra security_sock_graft() caller, crypto/af_alg.c`af_alg_accept is not affected, because smack_sock_graft() does nothing for PF_ALG.

To reproduce, assign non-default in/out labels to a listening socket, setup rules between these labels and client label, attempt to connect and send some data.

Ipv6 specific: ipv6 packets do not convey SMACK labels. To reproduce the issue in interhost communications set opposite labels in /smack/ipv6host on both hosts.
Ipv6 intrahost communications do not require tricking, because SMACK labels are conveyed via secmark netfilter marking.

So, currently smack_sock_graft() is not useful, but harmful, therefore, I have removed it.

This fixes the issue for {tcp,dccp}/{ipv4,ipv6},
but not sctp/{ipv4,ipv6}.

Although this change is necessary for sctp+smack to function correctly, it is not sufficient because:
sctp/ipv4 does not call security_sk_clone() and sctp/ipv6 ignores SMACK completely.

These are separate issues, belong to other subsystem, and should be addressed separately.

[1] 2008-02-04,

[2] Michael Lontke, 2022-08-31, SMACK LSM checks wrong object label during ingress network traffic

[3] 2022-08-31, michael.lontke,
commit 4ca165fc6c49 ("SMACK: Add sk_clone_security LSM hook")

---
 security/smack/smack_lsm.c | 24 ------------------------
 1 file changed, 24 deletions(-)

index 85f3d4337ca19..e68c982e499eb 100644
@@ -4350,29 +4350,6 @@ static int smack_socket_getpeersec_dgram(struct socket *sock,
 	return 0;
 }
 
-/**
- * smack_sock_graft - Initialize a newly created socket with an existing sock
- * @sk: child sock
- * @parent: parent socket
- *
- * Set the smk_{in,out} state of an existing sock based on the process that
- * is creating the new socket.
- */
-static void smack_sock_graft(struct sock *sk, struct socket *parent)
-{
-	struct socket_smack *ssp;
-	struct smack_known *skp = smk_of_current();
-
-	if (sk == NULL ||
-	    (sk->sk_family != PF_INET && sk->sk_family != PF_INET6))
-		return;
-
-	ssp = smack_sock(sk);
-	ssp->smk_in = skp;
-	ssp->smk_out = skp;
-	/* cssp->smk_packet is already set in smack_inet_csk_clone() */
-}
-
 /**
  * smack_inet_conn_request - Smack access check on connect
  * @sk: socket involved

@@ -5187,7 +5164,6 @@ static struct security_hook_list smack_hooks[] __ro_after_init = {
 	LSM_HOOK_INIT(sk_free_security, smack_sk_free_security),
 #endif
 	LSM_HOOK_INIT(sk_clone_security, smack_sk_clone_security),
-	LSM_HOOK_INIT(sock_graft, smack_sock_graft),
 	LSM_HOOK_INIT(inet_conn_request, smack_inet_conn_request),
 	LSM_HOOK_INIT(inet_csk_clone, smack_inet_csk_clone),
 

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: zihan zhou <[email protected]>

[ Upstream commit f553741ac8c0e467a3b873e305f34b902e50b86d ]

A wakeup non-idle entity should preempt idle entity at any time, but because of the slice protection of the idle entity, the non-idle entity has to wait, so just cancel it.

This patch is aimed at minimizing the impact of SCHED_IDLE on SCHED_NORMAL. For example, a task with SCHED_IDLE policy that sleeps for 1s and then runs for 3 ms, running cyclictest on the same cpu, has a maximum latency of 3 ms, which is caused by the slice protection of the idle entity. It is unreasonable. With this patch, the cyclictest latency under the same conditions is basically the same on the cpu with idle processes and on empty cpu.

---
 kernel/sched/fair.c | 46 ++++++++++++++++++++++++++++++++-------------
 1 file changed, 33 insertions(+), 13 deletions(-)

index c798d27952431..61a5d08ac3324 100644
@@ -883,6 +883,26 @@ struct sched_entity *__pick_first_entity(struct cfs_rq *cfs_rq)
 	return __node_2_se(left);
 }
 
+/*
+ * HACK, stash a copy of deadline at the point of pick in vlag,
+ * which isn't used until dequeue.
+ */
+static inline void set_protect_slice(struct sched_entity *se)
+{
+	se->vlag = se->deadline;
+}
+
+static inline bool protect_slice(struct sched_entity *se)
+{
+	return se->vlag == se->deadline;
+}
+
+static inline void cancel_protect_slice(struct sched_entity *se)
+{
+	if (protect_slice(se))
+		se->vlag = se->deadline + 1;
+}
+
 /*
  * Earliest Eligible Virtual Deadline First
  *

@@ -919,11 +939,7 @@ static struct sched_entity *pick_eevdf(struct cfs_rq *cfs_rq)
 	if (curr && (!curr->on_rq || !entity_eligible(cfs_rq, curr)))
 		curr = NULL;
 
-	/*
-	 * Once selected, run a task until it either becomes non-eligible or
-	 * until it gets a new slice. See the HACK in set_next_entity().
-	 */
-	if (sched_feat(RUN_TO_PARITY) && curr && curr->vlag == curr->deadline)
+	if (sched_feat(RUN_TO_PARITY) && curr && protect_slice(curr))
 		return curr;
 
 	/* Pick the leftmost entity if it's eligible */

@@ -5530,11 +5546,8 @@ set_next_entity(struct cfs_rq *cfs_rq, struct sched_entity *se)
 		update_stats_wait_end_fair(cfs_rq, se);
 		__dequeue_entity(cfs_rq, se);
 		update_load_avg(cfs_rq, se, UPDATE_TG);
-		/*
-		 * HACK, stash a copy of deadline at the point of pick in vlag,
-		 * which isn't used until dequeue.
-		 */
-		se->vlag = se->deadline;
+
+		set_protect_slice(se);
 	}
 
 	update_stats_curr_start(cfs_rq, se);

@@ -8783,8 +8796,15 @@ static void check_preempt_wakeup_fair(struct rq *rq, struct task_struct *p, int
 	 * Preempt an idle entity in favor of a non-idle entity (and don't preempt
 	 * in the inverse case).
 	 */
-	if (cse_is_idle && !pse_is_idle)
+	if (cse_is_idle && !pse_is_idle) {
+		/*
+		 * When non-idle entity preempt an idle entity,
+		 * don't give idle entity slice protection.
+		 */
+		cancel_protect_slice(se);
 		goto preempt;
+	}
+
 	if (cse_is_idle != pse_is_idle)
 		return;
 

@@ -8803,8 +8823,8 @@ static void check_preempt_wakeup_fair(struct rq *rq, struct task_struct *p, int
 	 * Note that even if @p does not turn out to be the most eligible
 	 * task at this moment, current's slice protection will be lost.
 	 */
-	if (do_preempt_short(cfs_rq, pse, se) && se->vlag == se->deadline)
-		se->vlag = se->deadline + 1;
+	if (do_preempt_short(cfs_rq, pse, se))
+		cancel_protect_slice(se);
 
 	/*
 	 * If @p has become the most eligible task, force preemption.

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Tianchen Ding <[email protected]>

[ Upstream commit 563bc2161b94571ea425bbe2cf69fd38e24cdedf ]

When a task is enqueued and its parent cgroup se is already on_rq, this parent cgroup se will not be enqueued again, and hence the root->min_slice leaves unchanged. The same issue happens when a task is dequeued and its parent cgroup se has other runnable entities, and the parent cgroup se will not be dequeued.

Force propagating min_slice when se doesn't need to be enqueued or dequeued. Ensure the se hierarchy always get the latest min_slice.

---
 kernel/sched/fair.c | 4 ++++
 1 file changed, 4 insertions(+)

index 61a5d08ac3324..89c7260103e18 100644
@@ -7004,6 +7004,8 @@ enqueue_task_fair(struct rq *rq, struct task_struct *p, int flags)
 		update_cfs_group(se);
 
 		se->slice = slice;
+		if (se != cfs_rq->curr)
+			min_vruntime_cb_propagate(&se->run_node, NULL);
 		slice = cfs_rq_min_slice(cfs_rq);
 
 		cfs_rq->h_nr_runnable += h_nr_runnable;

@@ -7133,6 +7135,8 @@ static int dequeue_entities(struct rq *rq, struct sched_entity *se, int flags)
 		update_cfs_group(se);
 
 		se->slice = slice;
+		if (se != cfs_rq->curr)
+			min_vruntime_cb_propagate(&se->run_node, NULL);
 		slice = cfs_rq_min_slice(cfs_rq);
 
 		cfs_rq->h_nr_runnable -= h_nr_runnable;

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Jie Zhan <[email protected]>

[ Upstream commit 3698dd6b139dc37b35a9ad83d9330c1f99666c02 ]

We observed an issue that the CPU frequency can't raise up with a 100% CPU load when NOHZ is off and the 'conservative' governor is selected.

'idle_time' can be negative if it's obtained from get_cpu_idle_time_jiffy() when NOHZ is off. This was found and explained in commit 9485e4ca0b48 ("cpufreq: governor: Fix handling of special cases in dbs_update()").

However, commit 7592019634f8 ("cpufreq: governors: Fix long idle detection logic in load calculation") introduced a comparison between 'idle_time' and 'samling_rate' to detect a long idle interval. While 'idle_time' is converted to int before comparison, it's actually promoted to unsigned again when compared with an unsigned 'sampling_rate'. Hence, this leads to wrong idle interval detection when it's in fact 100% busy and sets policy_dbs->idle_periods to a very large value. 'conservative' adjusts the frequency to minimum because of the large 'idle_periods', such that the frequency can't raise up. 'Ondemand' doesn't use policy_dbs->idle_periods so it fortunately avoids the issue.

Correct negative 'idle_time' to 0 before any use of it in dbs_update().

---
 drivers/cpufreq/cpufreq_governor.c | 45 +++++++++++++++---------------
 1 file changed, 23 insertions(+), 22 deletions(-)

index af44ee6a64304..1a7fcaf39cc9b 100644
@@ -145,7 +145,23 @@ unsigned int dbs_update(struct cpufreq_policy *policy)
 		time_elapsed = update_time - j_cdbs->prev_update_time;
 		j_cdbs->prev_update_time = update_time;
 
-		idle_time = cur_idle_time - j_cdbs->prev_cpu_idle;
+		/*
+		 * cur_idle_time could be smaller than j_cdbs->prev_cpu_idle if
+		 * it's obtained from get_cpu_idle_time_jiffy() when NOHZ is
+		 * off, where idle_time is calculated by the difference between
+		 * time elapsed in jiffies and "busy time" obtained from CPU
+		 * statistics.  If a CPU is 100% busy, the time elapsed and busy
+		 * time should grow with the same amount in two consecutive
+		 * samples, but in practice there could be a tiny difference,
+		 * making the accumulated idle time decrease sometimes.  Hence,
+		 * in this case, idle_time should be regarded as 0 in order to
+		 * make the further process correct.
+		 */
+		if (cur_idle_time > j_cdbs->prev_cpu_idle)
+			idle_time = cur_idle_time - j_cdbs->prev_cpu_idle;
+		else
+			idle_time = 0;
+
 		j_cdbs->prev_cpu_idle = cur_idle_time;
 
 		if (ignore_nice) {

@@ -162,7 +178,7 @@ unsigned int dbs_update(struct cpufreq_policy *policy)
 			 * calls, so the previous load value can be used then.
 			 */
 			load = j_cdbs->prev_load;
-		} else if (unlikely((int)idle_time > 2 * sampling_rate &&
+		} else if (unlikely(idle_time > 2 * sampling_rate &&
 				    j_cdbs->prev_load)) {
 			/*
 			 * If the CPU had gone completely idle and a task has

@@ -189,30 +205,15 @@ unsigned int dbs_update(struct cpufreq_policy *policy)
 			load = j_cdbs->prev_load;
 			j_cdbs->prev_load = 0;
 		} else {
-			if (time_elapsed >= idle_time) {
+			if (time_elapsed > idle_time)
 				load = 100 * (time_elapsed - idle_time) / time_elapsed;
-			} else {
-				/*
-				 * That can happen if idle_time is returned by
-				 * get_cpu_idle_time_jiffy().  In that case
-				 * idle_time is roughly equal to the difference
-				 * between time_elapsed and "busy time" obtained
-				 * from CPU statistics.  Then, the "busy time"
-				 * can end up being greater than time_elapsed
-				 * (for example, if jiffies_64 and the CPU
-				 * statistics are updated by different CPUs),
-				 * so idle_time may in fact be negative.  That
-				 * means, though, that the CPU was busy all
-				 * the time (on the rough average) during the
-				 * last sampling interval and 100 can be
-				 * returned as the load.
-				 */
-				load = (int)idle_time < 0 ? 100 : 0;
-			}
+			else
+				load = 0;
+
 			j_cdbs->prev_load = load;
 		}
 
-		if (unlikely((int)idle_time > 2 * sampling_rate)) {
+		if (unlikely(idle_time > 2 * sampling_rate)) {
 			unsigned int periods = idle_time / sampling_rate;
 
 			if (periods < idle_periods)

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Qiuxu Zhuo <[email protected]>

[ Upstream commit 267e5b1d267539d9a927dc04aab6f15aca57da92 ]

The ECC_ERROR_LOG register of certain SoCs may contain the invalid value ~0, which results in a flood of invalid error reports in polling mode.

Fix the flood of invalid error reports by skipping the invalid ECC error log value ~0.

---
 drivers/edac/igen6_edac.c | 21 +++++++++++++++------
 1 file changed, 15 insertions(+), 6 deletions(-)

index fdf3a84fe6988..595908af9e5c9 100644
@@ -785,13 +785,22 @@ static u64 ecclog_read_and_clear(struct igen6_imc *imc)
 {
 	u64 ecclog = readq(imc->window + ECC_ERROR_LOG_OFFSET);
 
-	if (ecclog & (ECC_ERROR_LOG_CE | ECC_ERROR_LOG_UE)) {
-		/* Clear CE/UE bits by writing 1s */
-		writeq(ecclog, imc->window + ECC_ERROR_LOG_OFFSET);
-		return ecclog;
-	}
+	/*
+	 * Quirk: The ECC_ERROR_LOG register of certain SoCs may contain
+	 *        the invalid value ~0. This will result in a flood of invalid
+	 *        error reports in polling mode. Skip it.
+	 */
+	if (ecclog == ~0)
+		return 0;
 
-	return 0;
+	/* Neither a CE nor a UE. Skip it.*/
+	if (!(ecclog & (ECC_ERROR_LOG_CE | ECC_ERROR_LOG_UE)))
+		return 0;
+
+	/* Clear CE/UE bits by writing 1s */
+	writeq(ecclog, imc->window + ECC_ERROR_LOG_OFFSET);
+
+	return ecclog;
 }
 
 static void errsts_clear(struct igen6_imc *imc)

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Qiuxu Zhuo <[email protected]>

[ Upstream commit d9207cf7760f5f5599e9ff7eb0fedf56821a1d59 ]

When doing error injection to some memory DIMMs on certain Intel Emerald Rapids servers, the i10nm_edac missed error reports for some memory DIMMs.

Certain BIOS configurations may hide some memory controllers, and the i10nm_edac doesn't enumerate these hidden memory controllers. However, the ADXL decodes memory errors using memory controller physical indices even if there are hidden memory controllers. Therefore, the memory controller physical indices reported by the ADXL may mismatch the logical indices enumerated by the i10nm_edac, resulting in missed error reports for some memory DIMMs.

Fix this issue by creating a mapping table from memory controller physical indices (used by the ADXL) to logical indices (used by the i10nm_edac) and using it to convert the physical indices to the logical indices during the error handling process.

---
 drivers/edac/i10nm_base.c |  2 ++
 drivers/edac/skx_common.c | 33 +++++++++++++++++++++++++++++++++
 drivers/edac/skx_common.h | 11 +++++++++++
 3 files changed, 46 insertions(+)

index f45d849d3f150..355a977019e94 100644
@@ -751,6 +751,8 @@ static int i10nm_get_ddr_munits(void)
 				continue;
 			} else {
 				d->imc[lmc].mdev = mdev;
+				if (res_cfg->type == SPR)
+					skx_set_mc_mapping(d, i, lmc);
 				lmc++;
 			}
 		}

index f7bd930e058fe..fa5b442b18449 100644
@@ -121,6 +121,35 @@ void skx_adxl_put(void)
 }
 EXPORT_SYMBOL_GPL(skx_adxl_put);
 
+static void skx_init_mc_mapping(struct skx_dev *d)
+{
+	/*
+	 * By default, the BIOS presents all memory controllers within each
+	 * socket to the EDAC driver. The physical indices are the same as
+	 * the logical indices of the memory controllers enumerated by the
+	 * EDAC driver.
+	 */
+	for (int i = 0; i < NUM_IMC; i++)
+		d->mc_mapping[i] = i;
+}
+
+void skx_set_mc_mapping(struct skx_dev *d, u8 pmc, u8 lmc)
+{
+	edac_dbg(0, "Set the mapping of mc phy idx to logical idx: %02d -> %02d\n",
+		 pmc, lmc);
+
+	d->mc_mapping[pmc] = lmc;
+}
+EXPORT_SYMBOL_GPL(skx_set_mc_mapping);
+
+static u8 skx_get_mc_mapping(struct skx_dev *d, u8 pmc)
+{
+	edac_dbg(0, "Get the mapping of mc phy idx to logical idx: %02d -> %02d\n",
+		 pmc, d->mc_mapping[pmc]);
+
+	return d->mc_mapping[pmc];
+}
+
 static bool skx_adxl_decode(struct decoded_addr *res, enum error_source err_src)
 {
 	struct skx_dev *d;

@@ -188,6 +217,8 @@ static bool skx_adxl_decode(struct decoded_addr *res, enum error_source err_src)
 		return false;
 	}
 
+	res->imc = skx_get_mc_mapping(d, res->imc);
+
 	for (i = 0; i < adxl_component_count; i++) {
 		if (adxl_values[i] == ~0x0ull)
 			continue;

@@ -326,6 +357,8 @@ int skx_get_all_bus_mappings(struct res_config *cfg, struct list_head **list)
 			 d->bus[0], d->bus[1], d->bus[2], d->bus[3]);
 		list_add_tail(&d->list, &dev_edac_list);
 		prev = pdev;
+
+		skx_init_mc_mapping(d);
 	}
 
 	if (list)

index b0845bdd45164..ca5408803f878 100644
@@ -93,6 +93,16 @@ struct skx_dev {
 	struct pci_dev *uracu; /* for i10nm CPU */
 	struct pci_dev *pcu_cr3; /* for HBM memory detection */
 	u32 mcroute;
+	/*
+	 * Some server BIOS may hide certain memory controllers, and the
+	 * EDAC driver skips those hidden memory controllers. However, the
+	 * ADXL still decodes memory error address using physical memory
+	 * controller indices. The mapping table is used to convert the
+	 * physical indices (reported by ADXL) to the logical indices
+	 * (used the EDAC driver) of present memory controllers during the
+	 * error handling process.
+	 */
+	u8 mc_mapping[NUM_IMC];
 	struct skx_imc {
 		struct mem_ctl_info *mci;
 		struct pci_dev *mdev; /* for i10nm CPU */

@@ -242,6 +252,7 @@ void skx_adxl_put(void);
 void skx_set_decode(skx_decode_f decode, skx_show_retry_log_f show_retry_log);
 void skx_set_mem_cfg(bool mem_cfg_2lm);
 void skx_set_res_cfg(struct res_config *cfg);
+void skx_set_mc_mapping(struct skx_dev *d, u8 pmc, u8 lmc);
 
 int skx_get_src_id(struct skx_dev *d, int off, u8 *id);
 

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Thomas Weißschuh <[email protected]>

[ Upstream commit 3ef32d90cdaa0cfa6c4ffd18f8d646a658163e3d ]

The vclock pages are *after* the non-vclock pages. Currently there are both two vclock and two non-vclock pages so the existing logic works by accident. As soon as the number of pages changes it will break however. This will be the case with the introduction of the generic vDSO data storage.

Use a macro to keep the calculation understandable and in sync between the linker script and mapping code.

---
 arch/x86/entry/vdso/vdso-layout.lds.S | 2 +-
 arch/x86/entry/vdso/vma.c             | 2 +-
 arch/x86/include/asm/vdso/vsyscall.h  | 1 +
 3 files changed, 3 insertions(+), 2 deletions(-)

index 872947c1004c3..918606ff92a98 100644
@@ -24,7 +24,7 @@ SECTIONS
 
 	timens_page  = vvar_start + PAGE_SIZE;
 
-	vclock_pages = vvar_start + VDSO_NR_VCLOCK_PAGES * PAGE_SIZE;
+	vclock_pages = VDSO_VCLOCK_PAGES_START(vvar_start);
 	pvclock_page = vclock_pages + VDSO_PAGE_PVCLOCK_OFFSET * PAGE_SIZE;
 	hvclock_page = vclock_pages + VDSO_PAGE_HVCLOCK_OFFSET * PAGE_SIZE;
 

index 39e6efc1a9cab..aa62949335ece 100644
@@ -290,7 +290,7 @@ static int map_vdso(const struct vdso_image *image, unsigned long addr)
 	}
 
 	vma = _install_special_mapping(mm,
-				       addr + (__VVAR_PAGES - VDSO_NR_VCLOCK_PAGES) * PAGE_SIZE,
+				       VDSO_VCLOCK_PAGES_START(addr),
 				       VDSO_NR_VCLOCK_PAGES * PAGE_SIZE,
 				       VM_READ|VM_MAYREAD|VM_IO|VM_DONTDUMP|
 				       VM_PFNMAP,

index 37b4a70559a82..88b31d4cdfaf3 100644
@@ -6,6 +6,7 @@
 #define __VVAR_PAGES	4
 
 #define VDSO_NR_VCLOCK_PAGES	2
+#define VDSO_VCLOCK_PAGES_START(_b)	((_b) + (__VVAR_PAGES - VDSO_NR_VCLOCK_PAGES) * PAGE_SIZE)
 #define VDSO_PAGE_PVCLOCK_OFFSET	0
 #define VDSO_PAGE_HVCLOCK_OFFSET	1
 

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Stanislav Spassov <[email protected]>

[ Upstream commit 1937e18cc3cf27e2b3ef70e8c161437051ab7608 ]

Ongoing work on an optimization to batch-preallocate vCPU state buffers for KVM revealed a mismatch between the allocation sizes used in fpu_alloc_guest_fpstate() and fpstate_realloc(). While the former allocates a buffer sized to fit the default set of XSAVE features in UABI form (as per fpu_user_cfg), the latter uses its ksize argument derived (for the requested set of features) in the same way as the sizes found in fpu_kernel_cfg, i.e. using the compacted in-kernel representation.

The correct size to use for guest FPU state should indeed be the kernel one as seen in fpstate_realloc(). The original issue likely went unnoticed through a combination of UABI size typically being larger than or equal to kernel size, and/or both amounting to the same number of allocated 4K pages.

---
 arch/x86/kernel/fpu/core.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

index 1209c7aebb211..36df548acc403 100644
@@ -220,7 +220,7 @@ bool fpu_alloc_guest_fpstate(struct fpu_guest *gfpu)
 	struct fpstate *fpstate;
 	unsigned int size;
 
-	size = fpu_user_cfg.default_size + ALIGN(offsetof(struct fpstate, regs), 64);
+	size = fpu_kernel_cfg.default_size + ALIGN(offsetof(struct fpstate, regs), 64);
 	fpstate = vzalloc(size);
 	if (!fpstate)
 		return false;

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Dhananjay Ugwekar <[email protected]>

[ Upstream commit 6ceb877d5cecd5417d63239bf833a1cd5f8f271c ]

Instead of setting a fixed floor at lowest_nonlinear_perf, use the min_limit_perf value, so that it gives the user the freedom to lower the floor further.

There are two minimum frequency/perf limits that we need to consider in the adjust_perf callback. One provided by schedutil i.e. the sg_cpu->bw_min value passed in _min_perf arg, another is the effective value of min_freq_qos request that is updated in cpudata->min_limit_perf. Modify the code to use the bigger of these two values.

Stable-dep-of: 426db24d4db2 ("cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update")

---
 drivers/cpufreq/amd-pstate.c | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

index 313550fa62d41..17595a2454e1c 100644
@@ -672,7 +672,7 @@ static void amd_pstate_adjust_perf(unsigned int cpu,
 				   unsigned long capacity)
 {
 	unsigned long max_perf, min_perf, des_perf,
-		      cap_perf, lowest_nonlinear_perf;
+		      cap_perf, min_limit_perf;
 	struct cpufreq_policy *policy = cpufreq_cpu_get(cpu);
 	struct amd_cpudata *cpudata;
 

@@ -684,20 +684,20 @@ static void amd_pstate_adjust_perf(unsigned int cpu,
 	if (policy->min != cpudata->min_limit_freq || policy->max != cpudata->max_limit_freq)
 		amd_pstate_update_min_max_limit(policy);
 
-
 	cap_perf = READ_ONCE(cpudata->highest_perf);
-	lowest_nonlinear_perf = READ_ONCE(cpudata->lowest_nonlinear_perf);
+	min_limit_perf = READ_ONCE(cpudata->min_limit_perf);
 
 	des_perf = cap_perf;
 	if (target_perf < capacity)
 		des_perf = DIV_ROUND_UP(cap_perf * target_perf, capacity);
 
-	min_perf = READ_ONCE(cpudata->lowest_perf);
 	if (_min_perf < capacity)
 		min_perf = DIV_ROUND_UP(cap_perf * _min_perf, capacity);
+	else
+		min_perf = cap_perf;
 
-	if (min_perf < lowest_nonlinear_perf)
-		min_perf = lowest_nonlinear_perf;
+	if (min_perf < min_limit_perf)
+		min_perf = min_limit_perf;
 
 	max_perf = cpudata->max_limit_perf;
 	if (max_perf < min_perf)

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Dhananjay Ugwekar <[email protected]>

[ Upstream commit e9869c836b2a460c48e2d69ae79d786303dbffda ]

Currently, amd_pstate_update_freq passes the hardware perf limits as min/max_perf to amd_pstate_update, which eventually gets programmed into the min/max_perf fields of the CPPC_REQ register.

Instead pass the effective perf limits i.e. min/max_limit_perf values to amd_pstate_update as min/max_perf.

Stable-dep-of: 426db24d4db2 ("cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update")

---
 drivers/cpufreq/amd-pstate.c | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

index 17595a2454e1c..3ef10aae0502f 100644
@@ -615,7 +615,7 @@ static int amd_pstate_update_freq(struct cpufreq_policy *policy,
 {
 	struct cpufreq_freqs freqs;
 	struct amd_cpudata *cpudata = policy->driver_data;
-	unsigned long max_perf, min_perf, des_perf, cap_perf;
+	unsigned long des_perf, cap_perf;
 
 	if (!cpudata->max_freq)
 		return -ENODEV;

@@ -624,8 +624,6 @@ static int amd_pstate_update_freq(struct cpufreq_policy *policy,
 		amd_pstate_update_min_max_limit(policy);
 
 	cap_perf = READ_ONCE(cpudata->highest_perf);
-	min_perf = READ_ONCE(cpudata->lowest_perf);
-	max_perf = cap_perf;
 
 	freqs.old = policy->cur;
 	freqs.new = target_freq;

@@ -642,8 +640,9 @@ static int amd_pstate_update_freq(struct cpufreq_policy *policy,
 	if (!fast_switch)
 		cpufreq_freq_transition_begin(policy, &freqs);
 
-	amd_pstate_update(cpudata, min_perf, des_perf,
-			max_perf, fast_switch, policy->governor->flags);
+	amd_pstate_update(cpudata, cpudata->min_limit_perf, des_perf,
+			  cpudata->max_limit_perf, fast_switch,
+			  policy->governor->flags);
 
 	if (!fast_switch)
 		cpufreq_freq_transition_end(policy, &freqs, false);

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Dhananjay Ugwekar <[email protected]>

[ Upstream commit 555bbe67a622b297405e246d1868dbda3284bde8 ]

All perf values are always within 0-255 range, hence convert their datatype to u8 everywhere.

Stable-dep-of: 426db24d4db2 ("cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update")

---
 drivers/cpufreq/amd-pstate-trace.h | 46 +++++++++++------------
 drivers/cpufreq/amd-pstate.c       | 60 +++++++++++++++---------------
 drivers/cpufreq/amd-pstate.h       | 18 ++++-----
 3 files changed, 62 insertions(+), 62 deletions(-)

index 8d692415d9050..f457d4af2c62e 100644
@@ -24,9 +24,9 @@
 
 TRACE_EVENT(amd_pstate_perf,
 
-	TP_PROTO(unsigned long min_perf,
-		 unsigned long target_perf,
-		 unsigned long capacity,
+	TP_PROTO(u8 min_perf,
+		 u8 target_perf,
+		 u8 capacity,
 		 u64 freq,
 		 u64 mperf,
 		 u64 aperf,

@@ -47,9 +47,9 @@ TRACE_EVENT(amd_pstate_perf,
 		),
 
 	TP_STRUCT__entry(
-		__field(unsigned long, min_perf)
-		__field(unsigned long, target_perf)
-		__field(unsigned long, capacity)
+		__field(u8, min_perf)
+		__field(u8, target_perf)
+		__field(u8, capacity)
 		__field(unsigned long long, freq)
 		__field(unsigned long long, mperf)
 		__field(unsigned long long, aperf)

@@ -70,10 +70,10 @@ TRACE_EVENT(amd_pstate_perf,
 		__entry->fast_switch = fast_switch;
 		),
 
-	TP_printk("amd_min_perf=%lu amd_des_perf=%lu amd_max_perf=%lu freq=%llu mperf=%llu aperf=%llu tsc=%llu cpu_id=%u fast_switch=%s",
-		  (unsigned long)__entry->min_perf,
-		  (unsigned long)__entry->target_perf,
-		  (unsigned long)__entry->capacity,
+	TP_printk("amd_min_perf=%hhu amd_des_perf=%hhu amd_max_perf=%hhu freq=%llu mperf=%llu aperf=%llu tsc=%llu cpu_id=%u fast_switch=%s",
+		  (u8)__entry->min_perf,
+		  (u8)__entry->target_perf,
+		  (u8)__entry->capacity,
 		  (unsigned long long)__entry->freq,
 		  (unsigned long long)__entry->mperf,
 		  (unsigned long long)__entry->aperf,

@@ -86,10 +86,10 @@ TRACE_EVENT(amd_pstate_perf,
 TRACE_EVENT(amd_pstate_epp_perf,
 
 	TP_PROTO(unsigned int cpu_id,
-		 unsigned int highest_perf,
-		 unsigned int epp,
-		 unsigned int min_perf,
-		 unsigned int max_perf,
+		 u8 highest_perf,
+		 u8 epp,
+		 u8 min_perf,
+		 u8 max_perf,
 		 bool boost
 		 ),
 

@@ -102,10 +102,10 @@ TRACE_EVENT(amd_pstate_epp_perf,
 
 	TP_STRUCT__entry(
 		__field(unsigned int, cpu_id)
-		__field(unsigned int, highest_perf)
-		__field(unsigned int, epp)
-		__field(unsigned int, min_perf)
-		__field(unsigned int, max_perf)
+		__field(u8, highest_perf)
+		__field(u8, epp)
+		__field(u8, min_perf)
+		__field(u8, max_perf)
 		__field(bool, boost)
 		),
 

@@ -118,12 +118,12 @@ TRACE_EVENT(amd_pstate_epp_perf,
 		__entry->boost = boost;
 		),
 
-	TP_printk("cpu%u: [%u<->%u]/%u, epp=%u, boost=%u",
+	TP_printk("cpu%u: [%hhu<->%hhu]/%hhu, epp=%hhu, boost=%u",
 		  (unsigned int)__entry->cpu_id,
-		  (unsigned int)__entry->min_perf,
-		  (unsigned int)__entry->max_perf,
-		  (unsigned int)__entry->highest_perf,
-		  (unsigned int)__entry->epp,
+		  (u8)__entry->min_perf,
+		  (u8)__entry->max_perf,
+		  (u8)__entry->highest_perf,
+		  (u8)__entry->epp,
 		  (bool)__entry->boost
 		 )
 );

index 9747e3be6ceee..19d405c6d805e 100644
@@ -70,13 +70,13 @@ struct amd_cpudata {
 	struct	freq_qos_request req[2];
 	u64	cppc_req_cached;
 
-	u32	highest_perf;
-	u32	nominal_perf;
-	u32	lowest_nonlinear_perf;
-	u32	lowest_perf;
-	u32     prefcore_ranking;
-	u32     min_limit_perf;
-	u32     max_limit_perf;
+	u8	highest_perf;
+	u8	nominal_perf;
+	u8	lowest_nonlinear_perf;
+	u8	lowest_perf;
+	u8	prefcore_ranking;
+	u8	min_limit_perf;
+	u8	max_limit_perf;
 	u32     min_limit_freq;
 	u32     max_limit_freq;
 

@@ -93,11 +93,11 @@ struct amd_cpudata {
 	bool	hw_prefcore;
 
 	/* EPP feature related attributes*/
-	s16	epp_cached;
+	u8	epp_cached;
 	u32	policy;
 	u64	cppc_cap1_cached;
 	bool	suspended;
-	s16	epp_default;
+	u8	epp_default;
 };
 
 /*

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Dhananjay Ugwekar <[email protected]>

[ Upstream commit 426db24d4db2e4f0d6720aeb7795eafcb9e82640 ]

Check if policy is NULL before dereferencing it in amd_pstate_update.

---
 drivers/cpufreq/amd-pstate.c | 3 +++
 1 file changed, 3 insertions(+)

index 32f1b659904bc..bd63837eabb4e 100644
@@ -538,6 +538,9 @@ static void amd_pstate_update(struct amd_cpudata *cpudata, u8 min_perf,
 	struct cpufreq_policy *policy = cpufreq_cpu_get(cpudata->cpu);
 	u8 nominal_perf = READ_ONCE(cpudata->nominal_perf);
 
+	if (!policy)
+		return;
+
 	des_perf = clamp_t(u8, des_perf, min_perf, max_perf);
 
 	max_freq = READ_ONCE(cpudata->max_limit_freq);

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Benjamin Berg <[email protected]>

[ Upstream commit 5d3b81d4d8520efe888536b6906dc10fd1a228a8 ]

The init_task instance of struct task_struct is statically allocated and may not contain the full FP state for userspace. As such, limit the copy to the valid area of both init_task and 'dst' and ensure all memory is initialized.

Note that the FP state is only needed for userspace, and as such it is entirely reasonable for init_task to not contain parts of it.

----

v2:
- Fix code if arch_task_struct_size < sizeof(init_task) by using memcpy_and_pad.

---
 arch/x86/kernel/process.c | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

index 6da6769d7254a..7cb52f84cb0c2 100644
@@ -93,7 +93,12 @@ EXPORT_PER_CPU_SYMBOL_GPL(__tss_limit_invalid);
  */
 int arch_dup_task_struct(struct task_struct *dst, struct task_struct *src)
 {
-	memcpy(dst, src, arch_task_struct_size);
+	/* init_task is not dynamically sized (incomplete FPU state) */
+	if (unlikely(src == &init_task))
+		memcpy_and_pad(dst, arch_task_struct_size, src, sizeof(init_task), 0);
+	else
+		memcpy(dst, src, arch_task_struct_size);
+
 #ifdef CONFIG_VM86
 	dst->thread.vm86 = NULL;
 #endif

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Michael Jeanson <[email protected]>

[ Upstream commit 79e10dad1ce3feac7937bedf911d92f486a9e76a ]

With CONFIG_DEBUG_RSEQ=y, an in-kernel copy of the read-only fields is kept synchronized with the user-space fields. Ensure the updates are done in lockstep in case we error out on a write to user-space.

---
 kernel/rseq.c | 80 +++++++++++++++++++++++++--------------------------
 1 file changed, 40 insertions(+), 40 deletions(-)

index 2cb16091ec0ae..a7d81229eda04 100644
@@ -78,24 +78,24 @@ static int rseq_validate_ro_fields(struct task_struct *t)
 	return -EFAULT;
 }
 
-static void rseq_set_ro_fields(struct task_struct *t, u32 cpu_id_start, u32 cpu_id,
-			       u32 node_id, u32 mm_cid)
-{
-	rseq_kernel_fields(t)->cpu_id_start = cpu_id;
-	rseq_kernel_fields(t)->cpu_id = cpu_id;
-	rseq_kernel_fields(t)->node_id = node_id;
-	rseq_kernel_fields(t)->mm_cid = mm_cid;
-}
+/*
+ * Update an rseq field and its in-kernel copy in lock-step to keep a coherent
+ * state.
+ */
+#define rseq_unsafe_put_user(t, value, field, error_label)		\
+	do {								\
+		unsafe_put_user(value, &t->rseq->field, error_label);	\
+		rseq_kernel_fields(t)->field = value;			\
+	} while (0)
+
 #else
 static int rseq_validate_ro_fields(struct task_struct *t)
 {
 	return 0;
 }
 
-static void rseq_set_ro_fields(struct task_struct *t, u32 cpu_id_start, u32 cpu_id,
-			       u32 node_id, u32 mm_cid)
-{
-}
+#define rseq_unsafe_put_user(t, value, field, error_label)		\
+	unsafe_put_user(value, &t->rseq->field, error_label)
 #endif
 
 /*

@@ -173,17 +173,18 @@ static int rseq_update_cpu_node_id(struct task_struct *t)
 	WARN_ON_ONCE((int) mm_cid < 0);
 	if (!user_write_access_begin(rseq, t->rseq_len))
 		goto efault;
-	unsafe_put_user(cpu_id, &rseq->cpu_id_start, efault_end);
-	unsafe_put_user(cpu_id, &rseq->cpu_id, efault_end);
-	unsafe_put_user(node_id, &rseq->node_id, efault_end);
-	unsafe_put_user(mm_cid, &rseq->mm_cid, efault_end);
+
+	rseq_unsafe_put_user(t, cpu_id, cpu_id_start, efault_end);
+	rseq_unsafe_put_user(t, cpu_id, cpu_id, efault_end);
+	rseq_unsafe_put_user(t, node_id, node_id, efault_end);
+	rseq_unsafe_put_user(t, mm_cid, mm_cid, efault_end);
+
 	/*
 	 * Additional feature fields added after ORIG_RSEQ_SIZE
 	 * need to be conditionally updated only if
 	 * t->rseq_len != ORIG_RSEQ_SIZE.
 	 */
 	user_write_access_end();
-	rseq_set_ro_fields(t, cpu_id, cpu_id, node_id, mm_cid);
 	trace_rseq_update(t);
 	return 0;
 

@@ -195,6 +196,7 @@ static int rseq_update_cpu_node_id(struct task_struct *t)
 
 static int rseq_reset_rseq_cpu_node_id(struct task_struct *t)
 {
+	struct rseq __user *rseq = t->rseq;
 	u32 cpu_id_start = 0, cpu_id = RSEQ_CPU_ID_UNINITIALIZED, node_id = 0,
 	    mm_cid = 0;
 

@@ -202,38 +204,36 @@ static int rseq_reset_rseq_cpu_node_id(struct task_struct *t)
 	 * Validate read-only rseq fields.
 	 */
 	if (rseq_validate_ro_fields(t))
-		return -EFAULT;
-	/*
-	 * Reset cpu_id_start to its initial state (0).
-	 */
-	if (put_user(cpu_id_start, &t->rseq->cpu_id_start))
-		return -EFAULT;
-	/*
-	 * Reset cpu_id to RSEQ_CPU_ID_UNINITIALIZED, so any user coming
-	 * in after unregistration can figure out that rseq needs to be
-	 * registered again.
-	 */
-	if (put_user(cpu_id, &t->rseq->cpu_id))
-		return -EFAULT;
-	/*
-	 * Reset node_id to its initial state (0).
-	 */
-	if (put_user(node_id, &t->rseq->node_id))
-		return -EFAULT;
+		goto efault;
+
+	if (!user_write_access_begin(rseq, t->rseq_len))
+		goto efault;
+
 	/*
-	 * Reset mm_cid to its initial state (0).
+	 * Reset all fields to their initial state.
+	 *
+	 * All fields have an initial state of 0 except cpu_id which is set to
+	 * RSEQ_CPU_ID_UNINITIALIZED, so that any user coming in after
+	 * unregistration can figure out that rseq needs to be registered
+	 * again.
 	 */
-	if (put_user(mm_cid, &t->rseq->mm_cid))
-		return -EFAULT;
-
-	rseq_set_ro_fields(t, cpu_id_start, cpu_id, node_id, mm_cid);
+	rseq_unsafe_put_user(t, cpu_id_start, cpu_id_start, efault_end);
+	rseq_unsafe_put_user(t, cpu_id, cpu_id, efault_end);
+	rseq_unsafe_put_user(t, node_id, node_id, efault_end);
+	rseq_unsafe_put_user(t, mm_cid, mm_cid, efault_end);
 
 	/*
 	 * Additional feature fields added after ORIG_RSEQ_SIZE
 	 * need to be conditionally reset only if
 	 * t->rseq_len != ORIG_RSEQ_SIZE.
 	 */
+	user_write_access_end();
 	return 0;
+
+efault_end:
+	user_write_access_end();
+efault:
+	return -EFAULT;
 }
 
 static int rseq_get_rseq_cs(struct task_struct *t, struct rseq_cs *rseq_cs)

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Arnd Bergmann <[email protected]>

[ Upstream commit 976ba8da2f3c2f1e997f4f620da83ae65c0e3728 ]

The CONFIG_EISA menu was cleaned up in 2018, but this inadvertently brought the option back on 64-bit machines: ISA remains guarded by a CONFIG_X86_32 check, but EISA no longer depends on ISA.

The last Intel machines ith EISA support used a 82375EB PCI/EISA bridge from 1993 that could be paired with the 440FX chipset on early Pentium-II CPUs, long before the first x86-64 products.

---
 arch/x86/Kconfig | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

index 0e27ebd7e36a9..cf79f973023f1 100644
@@ -232,7 +232,7 @@ config X86
 	select HAVE_SAMPLE_FTRACE_DIRECT_MULTI	if X86_64
 	select HAVE_EBPF_JIT
 	select HAVE_EFFICIENT_UNALIGNED_ACCESS
-	select HAVE_EISA
+	select HAVE_EISA			if X86_32
 	select HAVE_EXIT_THREAD
 	select HAVE_GUP_FAST
 	select HAVE_FENTRY			if X86_64 || DYNAMIC_FTRACE

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Kevin Loughlin <[email protected]>

[ Upstream commit 72dafb567760320f2de7447cd6e979bf9d4e5d17 ]

The following commit:

1c811d403afd ("x86/sev: Fix position dependent variable references in startup code")

introduced RIP_REL_REF() to force RIP-relative accesses to global variables, as needed to prevent crashes during early SEV/SME startup code.

For completeness, RIP_REL_REF() should be used with additional variables during sme_enable():

https://lore.kernel.org/all/CAMj1kXHnA0fJu6zh634=fbJswp59kSRAbhW+ubDGj1+NYwZJ-Q@mail.gmail.com/

Access these vars with RIP_REL_REF() to prevent problem reoccurence.

---
 arch/x86/mm/mem_encrypt_identity.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

index e6c7686f443a0..9fce5b87b8c50 100644
@@ -565,7 +565,7 @@ void __head sme_enable(struct boot_params *bp)
 	}
 
 	RIP_REL_REF(sme_me_mask) = me_mask;
-	physical_mask &= ~me_mask;
-	cc_vendor = CC_VENDOR_AMD;
+	RIP_REL_REF(physical_mask) &= ~me_mask;
+	RIP_REL_REF(cc_vendor) = CC_VENDOR_AMD;
 	cc_set_mask(me_mask);
 }

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Peter Zijlstra <[email protected]>

[ Upstream commit a1b65f3f7c6f7f0a08a7dba8be458c6415236487 ]

Turns out that this commit, about 10 years ago:

9ec23531fd48 ("sched/preempt, mm/fault: Trigger might_sleep() in might_fault() with disabled pagefaults")

... accidentally (and unnessecarily) put the lockdep part of __might_fault() under CONFIG_DEBUG_ATOMIC_SLEEP=y.

This is potentially notable because large distributions such as Ubuntu are running with !CONFIG_DEBUG_ATOMIC_SLEEP.

Restore the debug check.

[ mingo: Update changelog. ]

---
 mm/memory.c | 2 --
 1 file changed, 2 deletions(-)

index fb7b8dc751679..4f6d9766a0460 100644
@@ -6834,10 +6834,8 @@ void __might_fault(const char *file, int line)
 	if (pagefault_disabled())
 		return;
 	__might_sleep(file, line);
-#if defined(CONFIG_DEBUG_ATOMIC_SLEEP)
 	if (current->mm)
 		might_lock_read(&current->mm->mmap_lock);
-#endif
 }
 EXPORT_SYMBOL(__might_fault);
 #endif

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Rafael J. Wysocki <[email protected]>

[ Upstream commit eeb87d17aceab7803a5a5bcb6cf2817b745157cf ]

The check before setting power.must_resume in device_suspend_noirq() does not take power.child_count into account, but it should do that, so use pm_runtime_need_not_resume() in it for this purpose and adjust the comment next to it accordingly.

---
 drivers/base/power/main.c    | 13 ++++++-------
 drivers/base/power/runtime.c |  2 +-
 include/linux/pm_runtime.h   |  2 ++
 3 files changed, 9 insertions(+), 8 deletions(-)

index 40e1d8d8a5893..5afafd4e13dff 100644
@@ -1270,14 +1270,13 @@ static int device_suspend_noirq(struct device *dev, pm_message_t state, bool asy
 	dev->power.is_noirq_suspended = true;
 
 	/*
-	 * Skipping the resume of devices that were in use right before the
-	 * system suspend (as indicated by their PM-runtime usage counters)
-	 * would be suboptimal.  Also resume them if doing that is not allowed
-	 * to be skipped.
+	 * Devices must be resumed unless they are explicitly allowed to be left
+	 * in suspend, but even in that case skipping the resume of devices that
+	 * were in use right before the system suspend (as indicated by their
+	 * runtime PM usage counters and child counters) would be suboptimal.
 	 */
-	if (atomic_read(&dev->power.usage_count) > 1 ||
-	    !(dev_pm_test_driver_flags(dev, DPM_FLAG_MAY_SKIP_RESUME) &&
-	      dev->power.may_skip_resume))
+	if (!(dev_pm_test_driver_flags(dev, DPM_FLAG_MAY_SKIP_RESUME) &&
+	      dev->power.may_skip_resume) || !pm_runtime_need_not_resume(dev))
 		dev->power.must_resume = true;
 
 	if (dev->power.must_resume) {

index 2ee45841486bc..04113adb092b5 100644
@@ -1874,7 +1874,7 @@ void pm_runtime_drop_link(struct device_link *link)
 	pm_request_idle(link->supplier);
 }
 
-static bool pm_runtime_need_not_resume(struct device *dev)
+bool pm_runtime_need_not_resume(struct device *dev)
 {
 	return atomic_read(&dev->power.usage_count) <= 1 &&
 		(atomic_read(&dev->power.child_count) == 0 ||

index d39dc863f612f..d0b29cd1fd204 100644
@@ -66,6 +66,7 @@ static inline bool queue_pm_work(struct work_struct *work)
 
 extern int pm_generic_runtime_suspend(struct device *dev);
 extern int pm_generic_runtime_resume(struct device *dev);
+extern bool pm_runtime_need_not_resume(struct device *dev);
 extern int pm_runtime_force_suspend(struct device *dev);
 extern int pm_runtime_force_resume(struct device *dev);
 

@@ -241,6 +242,7 @@ static inline bool queue_pm_work(struct work_struct *work) { return false; }
 
 static inline int pm_generic_runtime_suspend(struct device *dev) { return 0; }
 static inline int pm_generic_runtime_resume(struct device *dev) { return 0; }
+static inline bool pm_runtime_need_not_resume(struct device *dev) {return true; }
 static inline int pm_runtime_force_suspend(struct device *dev) { return 0; }
 static inline int pm_runtime_force_resume(struct device *dev) { return 0; }
 

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Aaron Kling <[email protected]>

[ Upstream commit 4a1e3bf61fc78ad100018adb573355303915dca3 ]

Support was added for Tegra234 in the referenced commit, but the Kconfig was not updated to allow building for the arch.

---
 drivers/cpufreq/Kconfig.arm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

index 9e46960f6a862..4f9cb943d945c 100644
@@ -254,7 +254,7 @@ config ARM_TEGRA186_CPUFREQ
 
 config ARM_TEGRA194_CPUFREQ
 	tristate "Tegra194 CPUFreq support"
-	depends on ARCH_TEGRA_194_SOC || (64BIT && COMPILE_TEST)
+	depends on ARCH_TEGRA_194_SOC || ARCH_TEGRA_234_SOC || (64BIT && COMPILE_TEST)
 	depends on TEGRA_BPMP
 	default y
 	help

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Atish Patra <[email protected]>

[ Upstream commit bbb622488749478955485765ddff9d56be4a7e4b ]

The perf event should be marked disabled during the creation as it is not ready to be scheduled until there is SBI PMU start call or config matching is called with auto start. Otherwise, event add/start gets called during perf_event_create_kernel_counter function. It will be enabled and scheduled to run via perf_event_enable during either the above mentioned scenario.

---
 arch/riscv/kvm/vcpu_pmu.c | 1 +
 1 file changed, 1 insertion(+)

index 2707a51b082ca..78ac3216a54dd 100644
@@ -666,6 +666,7 @@ int kvm_riscv_vcpu_pmu_ctr_cfg_match(struct kvm_vcpu *vcpu, unsigned long ctr_ba
 		.type = etype,
 		.size = sizeof(struct perf_event_attr),
 		.pinned = true,
+		.disabled = true,
 		/*
 		 * It should never reach here if the platform doesn't support the sscofpmf
 		 * extension as mode filtering won't work without it.

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Kees Cook <[email protected]>

[ Upstream commit d985e4399adffb58e10b38dbb5479ef29d53cde6 ]

The byte initialization values used with -ftrivial-auto-var-init=pattern (CONFIG_INIT_STACK_ALL_PATTERN=y) depends on the compiler, architecture, and byte position relative to struct member types. On i386 with Clang, this includes the 0xFF value, which means it looks like nothing changes between the leaf byte filling pass and the expected "stack wiping" pass of the stackinit test.

Use the byte fill value of 0x99 instead, fixing the test for i386 Clang builds.

---
 lib/stackinit_kunit.c | 30 ++++++++++++++++++++----------
 1 file changed, 20 insertions(+), 10 deletions(-)

index 135322592faf8..63aa78e6f5c1a 100644
@@ -184,6 +184,15 @@ static bool stackinit_range_contains(char *haystack_start, size_t haystack_size,
 #define INIT_UNION_assigned_copy(var_type)		\
 	INIT_STRUCT_assigned_copy(var_type)
 
+/*
+ * The "did we actually fill the stack?" check value needs
+ * to be neither 0 nor any of the "pattern" bytes. The
+ * pattern bytes are compiler, architecture, and type based,
+ * so we have to pick a value that never appears for those
+ * combinations. Use 0x99 which is not 0xFF, 0xFE, nor 0xAA.
+ */
+#define FILL_BYTE	0x99
+
 /*
  * @name: unique string name for the test
  * @var_type: type to be tested for zeroing initialization

@@ -206,12 +215,12 @@ static noinline void test_ ## name (struct kunit *test)		\
 	ZERO_CLONE_ ## which(zero);				\
 	/* Clear entire check buffer for 0xFF overlap test. */	\
 	memset(check_buf, 0x00, sizeof(check_buf));		\
-	/* Fill stack with 0xFF. */				\
+	/* Fill stack with FILL_BYTE. */			\
 	ignored = leaf_ ##name((unsigned long)&ignored, 1,	\
 				FETCH_ARG_ ## which(zero));	\
-	/* Verify all bytes overwritten with 0xFF. */		\
+	/* Verify all bytes overwritten with FILL_BYTE. */	\
 	for (sum = 0, i = 0; i < target_size; i++)		\
-		sum += (check_buf[i] != 0xFF);			\
+		sum += (check_buf[i] != FILL_BYTE);		\
 	/* Clear entire check buffer for later bit tests. */	\
 	memset(check_buf, 0x00, sizeof(check_buf));		\
 	/* Extract stack-defined variable contents. */		\

@@ -222,7 +231,8 @@ static noinline void test_ ## name (struct kunit *test)		\
 	 * possible between the two leaf function calls.	\
 	 */							\
 	KUNIT_ASSERT_EQ_MSG(test, sum, 0,			\
-			    "leaf fill was not 0xFF!?\n");	\
+			    "leaf fill was not 0x%02X!?\n",	\
+			    FILL_BYTE);				\
 								\
 	/* Validate that compiler lined up fill and target. */	\
 	KUNIT_ASSERT_TRUE_MSG(test,				\

@@ -234,9 +244,9 @@ static noinline void test_ ## name (struct kunit *test)		\
 		(int)((ssize_t)(uintptr_t)fill_start -		\
 		      (ssize_t)(uintptr_t)target_start));	\
 								\
-	/* Look for any bytes still 0xFF in check region. */	\
+	/* Validate check region has no FILL_BYTE bytes. */	\
 	for (sum = 0, i = 0; i < target_size; i++)		\
-		sum += (check_buf[i] == 0xFF);			\
+		sum += (check_buf[i] == FILL_BYTE);		\
 								\
 	if (sum != 0 && xfail)					\
 		kunit_skip(test,				\

@@ -271,12 +281,12 @@ static noinline int leaf_ ## name(unsigned long sp, bool fill,	\
 	 * stack frame of SOME kind...				\
 	 */							\
 	memset(buf, (char)(sp & 0xff), sizeof(buf));		\
-	/* Fill variable with 0xFF. */				\
+	/* Fill variable with FILL_BYTE. */			\
 	if (fill) {						\
 		fill_start = &var;				\
 		fill_size = sizeof(var);			\
 		memset(fill_start,				\
-		       (char)((sp & 0xff) | forced_mask),	\
+		       FILL_BYTE & forced_mask,			\
 		       fill_size);				\
 	}							\
 								\

@@ -469,7 +479,7 @@ static int noinline __leaf_switch_none(int path, bool fill)
 			fill_start = &var;
 			fill_size = sizeof(var);
 
-			memset(fill_start, forced_mask | 0x55, fill_size);
+			memset(fill_start, (forced_mask | 0x55) & FILL_BYTE, fill_size);
 		}
 		memcpy(check_buf, target_start, target_size);
 		break;

@@ -480,7 +490,7 @@ static int noinline __leaf_switch_none(int path, bool fill)
 			fill_start = &var;
 			fill_size = sizeof(var);
 
-			memset(fill_start, forced_mask | 0xaa, fill_size);
+			memset(fill_start, (forced_mask | 0xaa) & FILL_BYTE, fill_size);
 		}
 		memcpy(check_buf, target_start, target_size);
 		break;

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Li Huafei <[email protected]>

[ Upstream commit d6834d9c990333bfa433bc1816e2417f268eebbe ]

During stress-testing, we found a kmemleak report for perf_event:

unreferenced object 0xff110001410a33e0 (size 1328):

    comm "kworker/4:11", pid 288, jiffies 4294916004
    hex dump (first 32 bytes):
      b8 be c2 3b 02 00 11 ff 22 01 00 00 00 00 ad de  ...;....".......
      f0 33 0a 41 01 00 11 ff f0 33 0a 41 01 00 11 ff  .3.A.....3.A....
    backtrace (crc 24eb7b3a):
      [<00000000e211b653>] kmem_cache_alloc_node_noprof+0x269/0x2e0
      [<000000009d0985fa>] perf_event_alloc+0x5f/0xcf0
      [<00000000084ad4a2>] perf_event_create_kernel_counter+0x38/0x1b0
      [<00000000fde96401>] hardlockup_detector_event_create+0x50/0xe0
      [<0000000051183158>] watchdog_hardlockup_enable+0x17/0x70
      [<00000000ac89727f>] softlockup_start_fn+0x15/0x40
      ...

Our stress test includes CPU online and offline cycles, and updating the watchdog configuration.

After reading the code, I found that there may be a race between cleaning up perf_event after updating watchdog and disabling event when the CPU goes offline:

CPU0 CPU1 CPU2
(update watchdog) (hotplug offline CPU1)

... _cpu_down(CPU1)
cpus_read_lock() // waiting for cpu lock

    softlockup_start_all
      smp_call_on_cpu(CPU1)
                                softlockup_start_fn
                                ...
                                  watchdog_hardlockup_enable(CPU1)
                                    perf create E1
                                    watchdog_ev[CPU1] = E1
  cpus_read_unlock()
                                                               cpus_write_lock()
                                                               cpuhp_kick_ap_work(CPU1)
                                cpuhp_thread_fun
                                ...
                                  watchdog_hardlockup_disable(CPU1)
                                    watchdog_ev[CPU1] = NULL
                                    dead_event[CPU1] = E1

__lockup_detector_cleanup
for each dead_events_mask
release each dead_event
/*
* CPU1 has not been added to
* dead_events_mask, then E1
* will not be released
*/
CPU1 -> dead_events_mask
cpumask_clear(&dead_events_mask)
// dead_events_mask is cleared, E1 is leaked

In this case, the leaked perf_event E1 matches the perf_event leak reported by kmemleak. Due to the low probability of problem recurrence (only reported once), I added some hack delays in the code:

  static void __lockup_detector_reconfigure(void)
  {
    ...
          watchdog_hardlockup_start();
          cpus_read_unlock();
  +       mdelay(100);
          /*
           * Must be called outside the cpus locked section to prevent
           * recursive locking in the perf code.
    ...
  }

  void watchdog_hardlockup_disable(unsigned int cpu)
  {
    ...
                  perf_event_disable(event);
                  this_cpu_write(watchdog_ev, NULL);
                  this_cpu_write(dead_event, event);
  +               mdelay(100);
                  cpumask_set_cpu(smp_processor_id(), &dead_events_mask);
                  atomic_dec(&watchdog_cpus);
    ...
  }

  void hardlockup_detector_perf_cleanup(void)
  {
    ...
                          perf_event_release_kernel(event);
                  per_cpu(dead_event, cpu) = NULL;
          }
  +       mdelay(100);
          cpumask_clear(&dead_events_mask);
  }

Then, simultaneously performing CPU on/off and switching watchdog, it is almost certain to reproduce this leak.

The problem here is that releasing perf_event is not within the CPU hotplug read-write lock. Commit:

941154bd6937 ("watchdog/hardlockup/perf: Prevent CPU hotplug deadlock")

introduced deferred release to solve the deadlock caused by calling get_online_cpus() when releasing perf_event. Later, commit:

efe951d3de91 ("perf/x86: Fix perf,x86,cpuhp deadlock")

removed the get_online_cpus() call on the perf_event release path to solve another deadlock problem.

Therefore, it is now possible to move the release of perf_event back into the CPU hotplug read-write lock, and release the event immediately after disabling it.

---
 include/linux/nmi.h    |  4 ----
 kernel/cpu.c           |  5 -----
 kernel/watchdog.c      | 25 -------------------------
 kernel/watchdog_perf.c | 28 +---------------------------
 4 files changed, 1 insertion(+), 61 deletions(-)

index a8dfb38c9bb6f..e78fa535f61dd 100644
@@ -17,7 +17,6 @@
 void lockup_detector_init(void);
 void lockup_detector_retry_init(void);
 void lockup_detector_soft_poweroff(void);
-void lockup_detector_cleanup(void);
 
 extern int watchdog_user_enabled;
 extern int watchdog_thresh;

@@ -37,7 +36,6 @@ extern int sysctl_hardlockup_all_cpu_backtrace;
 static inline void lockup_detector_init(void) { }
 static inline void lockup_detector_retry_init(void) { }
 static inline void lockup_detector_soft_poweroff(void) { }
-static inline void lockup_detector_cleanup(void) { }
 #endif /* !CONFIG_LOCKUP_DETECTOR */
 
 #ifdef CONFIG_SOFTLOCKUP_DETECTOR

@@ -104,12 +102,10 @@ void watchdog_hardlockup_check(unsigned int cpu, struct pt_regs *regs);
 #if defined(CONFIG_HARDLOCKUP_DETECTOR_PERF)
 extern void hardlockup_detector_perf_stop(void);
 extern void hardlockup_detector_perf_restart(void);
-extern void hardlockup_detector_perf_cleanup(void);
 extern void hardlockup_config_perf_event(const char *str);
 #else
 static inline void hardlockup_detector_perf_stop(void) { }
 static inline void hardlockup_detector_perf_restart(void) { }
-static inline void hardlockup_detector_perf_cleanup(void) { }
 static inline void hardlockup_config_perf_event(const char *str) { }
 #endif
 

index 07455d25329c9..ad755db29efd4 100644
@@ -1453,11 +1453,6 @@ static int __ref _cpu_down(unsigned int cpu, int tasks_frozen,
 
 out:
 	cpus_write_unlock();
-	/*
-	 * Do post unplug cleanup. This is still protected against
-	 * concurrent CPU hotplug via cpu_add_remove_lock.
-	 */
-	lockup_detector_cleanup();
 	arch_smt_update();
 	return ret;
 }

index b2da7de39d06d..18156023e4614 100644
@@ -347,8 +347,6 @@ static int __init watchdog_thresh_setup(char *str)
 }
 __setup("watchdog_thresh=", watchdog_thresh_setup);
 
-static void __lockup_detector_cleanup(void);
-
 #ifdef CONFIG_SOFTLOCKUP_DETECTOR_INTR_STORM
 enum stats_per_group {
 	STATS_SYSTEM,

@@ -886,11 +884,6 @@ static void __lockup_detector_reconfigure(void)
 
 	watchdog_hardlockup_start();
 	cpus_read_unlock();
-	/*
-	 * Must be called outside the cpus locked section to prevent
-	 * recursive locking in the perf code.
-	 */
-	__lockup_detector_cleanup();
 }
 
 void lockup_detector_reconfigure(void)

@@ -940,24 +933,6 @@ static inline void lockup_detector_setup(void)
 }
 #endif /* !CONFIG_SOFTLOCKUP_DETECTOR */
 
-static void __lockup_detector_cleanup(void)
-{
-	lockdep_assert_held(&watchdog_mutex);
-	hardlockup_detector_perf_cleanup();
-}
-
-/**
- * lockup_detector_cleanup - Cleanup after cpu hotplug or sysctl changes
- *
- * Caller must not hold the cpu hotplug rwsem.
- */
-void lockup_detector_cleanup(void)
-{
-	mutex_lock(&watchdog_mutex);
-	__lockup_detector_cleanup();
-	mutex_unlock(&watchdog_mutex);
-}
-
 /**
  * lockup_detector_soft_poweroff - Interface to stop lockup detector(s)
  *

index 59c1d86a73a24..2fdb96eaf4933 100644
@@ -21,8 +21,6 @@
 #include <linux/perf_event.h>
 
 static DEFINE_PER_CPU(struct perf_event *, watchdog_ev);
-static DEFINE_PER_CPU(struct perf_event *, dead_event);
-static struct cpumask dead_events_mask;
 
 static atomic_t watchdog_cpus = ATOMIC_INIT(0);
 

@@ -181,36 +179,12 @@ void watchdog_hardlockup_disable(unsigned int cpu)
 
 	if (event) {
 		perf_event_disable(event);
+		perf_event_release_kernel(event);
 		this_cpu_write(watchdog_ev, NULL);
-		this_cpu_write(dead_event, event);
-		cpumask_set_cpu(smp_processor_id(), &dead_events_mask);
 		atomic_dec(&watchdog_cpus);
 	}
 }
 
-/**
- * hardlockup_detector_perf_cleanup - Cleanup disabled events and destroy them
- *
- * Called from lockup_detector_cleanup(). Serialized by the caller.
- */
-void hardlockup_detector_perf_cleanup(void)
-{
-	int cpu;
-
-	for_each_cpu(cpu, &dead_events_mask) {
-		struct perf_event *event = per_cpu(dead_event, cpu);
-
-		/*
-		 * Required because for_each_cpu() reports  unconditionally
-		 * CPU0 as set on UP kernels. Sigh.
-		 */
-		if (event)
-			perf_event_release_kernel(event);
-		per_cpu(dead_event, cpu) = NULL;
-	}
-	cpumask_clear(&dead_events_mask);
-}
-
 /**
  * hardlockup_detector_perf_stop - Globally stop watchdog events
  *

2.39.5

6.14-stable review patch. If anyone has any objections, please let me know.

------------------

From: Maksim Davydov <[email protected]>

[ Upstream commit c929d08df8bee855528b9d15b853c892c54e1eee ]

If the warning mode with disabled mitigation mode is used, then on each CPU where the split lock occurred detection will be disabled in order to make progress and delayed work will be scheduled, which then will enable detection back.

Now it turns out that all CPUs use one global delayed work structure. This leads to the fact that if a split lock occurs on several CPUs at the same time (within 2 jiffies), only one CPU will schedule delayed work, but the rest will not.

The return value of schedule_delayed_work_on() would have shown this, but it is not checked in the code.

A diagram that can help to understand the bug reproduction:

- sld_update_msr() enables/disables SLD on both CPUs on the same core

- schedule_delayed_work_on() internally checks WORK_STRUCT_PENDING_BIT. If a work has the 'pending' status, then schedule_delayed_work_on() will return an error code and, most importantly, the work will not be placed in the workqueue.

Let's say we have a multicore system on which split_lock_mitigate=0 and a multithreaded application is running that calls splitlock in multiple threads. Due to the fact that sld_update_msr() affects the entire core (both CPUs), we will consider 2 CPUs from different cores. Let the 2 threads of this application schedule to CPU0 (core 0) and to CPU 2 (core 1), then:

|                                 ||                                   |
|             CPU 0 (core 0)      ||          CPU 2 (core 1)           |
|_________________________________||___________________________________|
|                                 ||                                   |
| 1) SPLIT LOCK occured           ||                                   |
|                                 ||                                   |
| 2) split_lock_warn()            ||                                   |
|                                 ||                                   |
| 3) sysctl_sld_mitigate == 0     ||                                   |
|    (work = &sl_reenable)        ||                                   |
|                                 ||                                   |
| 4) schedule_delayed_work_on()   ||                                   |
|    (reenable will be called     ||                                   |
|     after 2 jiffies on CPU 0)   ||                                   |
|                                 ||                                   |
| 5) disable SLD for core 0       ||                                   |
|                                 ||                                   |
|    -------------------------    ||                                   |
|                                 ||                                   |
|                                 || 6) SPLIT LOCK occured             |
|                                 ||                                   |
|                                 || 7) split_lock_warn()              |
|                                 ||                                   |
|                                 || 8) sysctl_sld_mitigate == 0       |
|                                 ||    (work = &sl_reenable,          |
|                                 ||     the same address as in 3) )   |
|                                 ||                                   |
|            2 jiffies            || 9) schedule_delayed_work_on()     |
|                                 ||    fials because the work is in   |
|                                 ||    the pending state since 4).    |
|                                 ||    The work wasn't placed to the  |
|                                 ||    workqueue. reenable won't be   |
|                                 ||    called on CPU 2                |
|                                 ||                                   |
|                                 || 10) disable SLD for core 0        |
|                                 ||                                   |
|                                 ||     From now on SLD will          |
|                                 ||     never be reenabled on core 1  |
|                                 ||                                   |
|    -------------------------    ||                                   |
|                                 ||                                   |
|    11) enable SLD for core 0 by ||                                   |
|        __split_lock_reenable    ||                                   |
|                                 ||                                   |

If the application threads can be scheduled to all processor cores, then over time there will be only one core left, on which SLD will be enabled and split lock will be able to be detected; and on all other cores SLD will be disabled all the time.

Most likely, this bug has not been noticed for so long because sysctl_sld_mitigate default value is 1, and in this case a semaphore is used that does not allow 2 different cores to have SLD disabled at the same time, that is, strictly only one work is placed in the workqueue.

In order to fix the warning mode with disabled mitigation mode, delayed work has to be per-CPU. Implement it.

---
 arch/x86/kernel/cpu/bus_lock.c | 20 ++++++++++++++++----
 1 file changed, 16 insertions(+), 4 deletions(-)

index 6cba85c79d42d..97222efb4d2a6 100644
@@ -192,7 +192,13 @@ static void __split_lock_reenable(struct work_struct *work)
 {
 	sld_update_msr(true);
 }
-static DECLARE_DELAYED_WORK(sl_reenable, __split_lock_reenable);
+/*
+ * In order for each CPU to schedule its delayed work independently of the
+ * others, delayed work struct must be per-CPU. This is not required when
+ * sysctl_sld_mitigate is enabled because of the semaphore that limits
+ * the number of simultaneously scheduled delayed works to 1.
+ */
+static DEFINE_PER_CPU(struct delayed_work, sl_reenable);
 
 /*
  * If a CPU goes offline with pending delayed work to re-enable split lock

@@ -213,7 +219,7 @@ static int splitlock_cpu_offline(unsigned int cpu)
 
 static void split_lock_warn(unsigned long ip)
 {
-	struct delayed_work *work;
+	struct delayed_work *work = NULL;
 	int cpu;
 
 	if (!current->reported_split_lock)

@@ -235,11 +241,17 @@ static void split_lock_warn(unsigned long ip)
 		if (down_interruptible(&buslock_sem) == -EINTR)
 			return;
 		work = &sl_reenable_unlock;
-	} else {
-		work = &sl_reenable;
 	}
 
 	cpu = get_cpu();
+
+	if (!work) {
+		work = this_cpu_ptr(&sl_reenable);
+		/* Deferred initialization of per-CPU struct */
+		if (!work->work.func)
+			INIT_DELAYED_WORK(work, __split_lock_reenable);
+	}
+
 	schedule_delayed_work_on(cpu, work, 2);
 
 	/* Disable split lock detection on this CPU to make progress */