Linux 6.6.145
Greg Kroah-Hartman
maintainerI'm announcing the release of the 6.6.145 kernel.
All users of the 6.6 kernel series must upgrade.
The updated 6.6.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.6.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/admin-guide/pm/cpufreq.rst | 6 Documentation/crypto/userspace-if.rst | 31 Documentation/devicetree/bindings/media/allwinner,sun4i-a10-video-engine.yaml | 10 Documentation/devicetree/bindings/net/renesas,ether.yaml | 3 Documentation/devicetree/bindings/pinctrl/nvidia,tegra234-pinmux-aon.yaml | 4 Documentation/devicetree/bindings/pinctrl/nvidia,tegra234-pinmux.yaml | 4 Documentation/devicetree/bindings/regulator/mt6359-regulator.yaml | 43 Documentation/driver-api/nvdimm/btt.rst | 5 Documentation/driver-api/pci/pci.rst | 3 Documentation/filesystems/proc.rst | 14 Documentation/netlink/specs/handshake.yaml | 1 Makefile | 2 arch/alpha/kernel/pci-sysfs.c | 13 arch/arm/boot/dts/ti/omap/am335x-sl50.dts | 4 arch/arm/configs/sunxi_defconfig | 1 arch/arm/mach-imx/cpu-imx31.c | 9 arch/arm/mach-imx/mm-imx3.c | 2 arch/arm64/boot/dts/freescale/imx8mp-tqma8mpql-mba8mpxl.dts | 3 arch/arm64/boot/dts/freescale/imx8x-colibri.dtsi | 4 arch/arm64/boot/dts/mediatek/mt8192-asurada.dtsi | 2 arch/arm64/boot/dts/nvidia/tegra234.dtsi | 8 arch/arm64/boot/dts/qcom/sdm630.dtsi | 9 arch/arm64/boot/dts/qcom/sdm845-db845c-navigation-mezzanine.dtso | 5 arch/arm64/boot/dts/qcom/sm8450.dtsi | 8 arch/arm64/boot/dts/rockchip/rk3566-roc-pc.dts | 2 arch/arm64/boot/dts/rockchip/rk3568-nanopi-r5s.dts | 6 arch/arm64/include/asm/el2_setup.h | 56 arch/arm64/include/asm/kvm_hyp.h | 1 arch/arm64/include/asm/pgtable.h | 14 arch/arm64/kernel/efi.c | 2 arch/arm64/kernel/entry-fpsimd.S | 16 arch/arm64/kernel/head.S | 20 arch/arm64/kernel/hw_breakpoint.c | 9 arch/arm64/kernel/mte.c | 2 arch/arm64/kvm/arm.c | 2 arch/arm64/kvm/guest.c | 2 arch/arm64/kvm/hyp/nvhe/hyp-init.S | 3 arch/arm64/kvm/hyp/nvhe/hyp-main.c | 12 arch/arm64/kvm/hyp/nvhe/psci-relay.c | 3 arch/arm64/kvm/vgic/vgic-its.c | 2 arch/arm64/kvm/vgic/vgic.c | 11 arch/arm64/lib/insn.c | 2 arch/arm64/mm/fault.c | 6 arch/arm64/mm/hugetlbpage.c | 18 arch/arm64/mm/kasan_init.c | 2 arch/arm64/mm/mmu.c | 23 arch/arm64/mm/pageattr.c | 4 arch/arm64/mm/trans_pgd.c | 2 arch/arm64/tools/sysreg | 39 arch/loongarch/include/asm/acpi.h | 2 arch/loongarch/include/asm/pgtable.h | 4 arch/loongarch/kernel/acpi.c | 28 arch/loongarch/kernel/setup.c | 2 arch/loongarch/kernel/smp.c | 1 arch/loongarch/pci/acpi.c | 2 arch/mips/dec/int-handler.S | 2 arch/mips/dec/platform.c | 6 arch/mips/dec/prom/init.c | 6 arch/mips/dec/setup.c | 6 arch/mips/fw/lib/call_o32.S | 2 arch/mips/include/asm/dec/prom.h | 15 arch/mips/kernel/mips-mt-fpaff.c | 28 arch/mips/kernel/smp.c | 2 arch/mips/mm/init.c | 12 arch/mips/n64/init.c | 2 arch/mips/ralink/mt7621.c | 2 arch/mips/sgi-ip22/ip22-gio.c | 7 arch/powerpc/kexec/core_64.c | 4 arch/powerpc/perf/core-fsl-emb.c | 3 arch/powerpc/platforms/cell/spufs/file.c | 6 arch/powerpc/platforms/powernv/setup.c | 3 arch/powerpc/platforms/pseries/papr_platform_attributes.c | 8 arch/riscv/kernel/cacheinfo.c | 2 arch/riscv/kernel/machine_kexec.c | 3 arch/riscv/kernel/probes/rethook_trampoline.S | 3 arch/riscv/kernel/stacktrace.c | 2 arch/riscv/net/bpf_jit_core.c | 3 arch/s390/kernel/perf_cpum_cf.c | 3 arch/s390/kernel/process.c | 2 arch/s390/kvm/pci.c | 12 arch/sparc/kernel/led.c | 2 arch/x86/boot/compressed/acpi.c | 7 arch/x86/boot/early_serial_console.c | 11 arch/x86/events/amd/brs.c | 10 arch/x86/events/amd/core.c | 6 arch/x86/events/amd/lbr.c | 3 arch/x86/events/intel/uncore_snb.c | 7 arch/x86/include/asm/nospec-branch.h | 4 arch/x86/kernel/cpu/bugs.c | 50 arch/x86/kvm/lapic.c | 8 arch/x86/kvm/vmx/vmx.c | 38 arch/x86/mm/numa_emulation.c | 17 arch/x86/mm/tlb.c | 16 arch/x86/net/bpf_jit_comp.c | 3 arch/x86/platform/olpc/olpc-xo15-sci.c | 1 block/bdev.c | 11 block/partitions/aix.c | 9 crypto/af_alg.c | 73 crypto/algif_aead.c | 8 crypto/algif_skcipher.c | 49 crypto/asymmetric_keys/verify_pefile.c | 2 crypto/asymmetric_keys/x509_loader.c | 2 crypto/drbg.c | 4 crypto/ecc.c | 31 crypto/ecrdsa.c | 2 crypto/pcrypt.c | 4 crypto/rng.c | 11 drivers/acpi/acpi_ipmi.c | 4 drivers/acpi/acpi_tad.c | 6 drivers/acpi/bus.c | 70 drivers/acpi/cppc_acpi.c | 11 drivers/acpi/nfit/core.c | 89 drivers/acpi/pfr_telemetry.c | 6 drivers/acpi/pfr_update.c | 6 drivers/acpi/resource.c | 6 drivers/acpi/thermal.c | 2 drivers/android/binder.c | 19 drivers/ata/libata-core.c | 19 drivers/ata/pata_pxa.c | 1 drivers/ata/sata_gemini.c | 2 drivers/base/dd.c | 7 drivers/base/firmware_loader/main.c | 3 drivers/base/firmware_loader/sysfs_upload.c | 8 drivers/base/power/main.c | 6 drivers/base/property.c | 4 drivers/block/drbd/drbd_receiver.c | 5 drivers/bluetooth/Kconfig | 2 drivers/bluetooth/bpa10x.c | 8 drivers/bluetooth/btmtk.c | 470 + drivers/bluetooth/btmtk.h | 23 drivers/bluetooth/btmtksdio.c | 5 drivers/bluetooth/btnxpuart.c | 6 drivers/bluetooth/btrtl.c | 5 drivers/bluetooth/btusb.c | 418 - drivers/bluetooth/hci_qca.c | 2 drivers/bluetooth/hci_vhci.c | 10 drivers/bus/imx-weim.c | 6 drivers/bus/mhi/ep/main.c | 9 drivers/bus/sunxi-rsb.c | 3 drivers/char/hw_random/jh7110-trng.c | 13 drivers/char/hw_random/virtio-rng.c | 23 drivers/char/tlclk.c | 4 drivers/char/tpm/eventlog/tpm1.c | 4 drivers/char/tpm/tpm-dev.c | 2 drivers/char/tpm/tpm_tis_core.c | 35 drivers/char/tpm/tpmrm-dev.c | 2 drivers/clk/at91/pmc.c | 2 drivers/clk/clk-scmi.c | 4 drivers/clk/clk-scpi.c | 2 drivers/clk/qcom/a53-pll.c | 2 drivers/clocksource/timer-sun5i.c | 3 drivers/clocksource/timer-tegra186.c | 3 drivers/cpufreq/cpufreq.c | 2 drivers/cpufreq/cpufreq_conservative.c | 12 drivers/cpufreq/ia64-acpi-cpufreq.c | 4 drivers/cpufreq/intel_pstate.c | 6 drivers/cpufreq/pcc-cpufreq.c | 2 drivers/crypto/allwinner/Kconfig | 8 drivers/crypto/allwinner/sun4i-ss/Makefile | 1 drivers/crypto/allwinner/sun4i-ss/sun4i-ss-core.c | 36 drivers/crypto/allwinner/sun4i-ss/sun4i-ss-prng.c | 69 drivers/crypto/allwinner/sun4i-ss/sun4i-ss.h | 20 drivers/crypto/amcc/crypto4xx_alg.c | 106 drivers/crypto/amcc/crypto4xx_core.c | 130 drivers/crypto/amcc/crypto4xx_core.h | 11 drivers/crypto/amcc/crypto4xx_reg_def.h | 11 drivers/crypto/amlogic/amlogic-gxl-core.c | 2 drivers/crypto/atmel-ecc.c | 2 drivers/crypto/atmel-sha204a.c | 29 drivers/crypto/caam/caamalg.c | 12 drivers/crypto/caam/caamalg_qi.c | 12 drivers/crypto/caam/caamalg_qi2.c | 12 drivers/crypto/caam/caamhash.c | 4 drivers/crypto/caam/key_gen.c | 4 drivers/crypto/cavium/cpt/cptvf_reqmanager.c | 4 drivers/crypto/ccp/sev-dev.c | 3 drivers/crypto/hisilicon/Kconfig | 1 drivers/crypto/hisilicon/qm.c | 4 drivers/crypto/hisilicon/trng/trng.c | 298 drivers/crypto/intel/qat/qat_common/adf_accel_devices.h | 2 drivers/crypto/intel/qat/qat_common/adf_aer.c | 7 drivers/crypto/intel/qat/qat_common/adf_common_drv.h | 2 drivers/crypto/intel/qat/qat_common/adf_isr.c | 39 drivers/crypto/intel/qat/qat_common/adf_sriov.c | 20 drivers/crypto/intel/qat/qat_common/qat_asym_algs.c | 10 drivers/crypto/marvell/octeontx/otx_cptvf_reqmgr.c | 4 drivers/crypto/talitos.c | 564 - drivers/crypto/talitos.h | 12 drivers/dax/kmem.c | 6 drivers/dma-buf/udmabuf.c | 5 drivers/dma/dmaengine.c | 3 drivers/dma/dw-edma/dw-edma-core.h | 2 drivers/dma/dw-edma/dw-edma-v0-core.c | 6 drivers/dma/imx-sdma.c | 4 drivers/dma/qcom/gpi.c | 1 drivers/dma/tegra186-gpc-dma.c | 7 drivers/edac/i10nm_base.c | 14 drivers/edac/skx_common.c | 3 drivers/firewire/net.c | 5 drivers/firmware/arm_scmi/power.c | 6 drivers/firmware/arm_scmi/sensors.c | 2 drivers/fpga/dfl.c | 2 drivers/fpga/microchip-spi.c | 3 drivers/gpio/gpio-eic-sprd.c | 8 drivers/gpio/gpio-f7188x.c | 6 drivers/gpio/gpio-htc-egpio.c | 6 drivers/gpio/gpio-mlxbf3.c | 3 drivers/gpio/gpio-mvebu.c | 5 drivers/gpio/gpio-palmas.c | 19 drivers/gpio/gpio-sch.c | 32 drivers/gpio/gpio-timberdale.c | 2 drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 16 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 6 drivers/gpu/drm/amd/amdgpu/amdgpu_gart.c | 4 drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 25 drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c | 2 drivers/gpu/drm/amd/amdgpu/amdgpu_mca.c | 3 drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.h | 3 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 3 drivers/gpu/drm/amd/amdkfd/kfd_events.c | 5 drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 1 drivers/gpu/drm/amd/display/dc/dc_dmub_srv.c | 11 drivers/gpu/drm/amd/display/modules/info_packet/info_packet.c | 2 drivers/gpu/drm/drm_edid.c | 8 drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_de.c | 80 drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c | 11 drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_vdac.c | 22 drivers/gpu/drm/i915/gt/intel_region_lmem.c | 2 drivers/gpu/drm/msm/dp/dp_display.c | 4 drivers/gpu/drm/msm/dp/dp_reg.h | 4 drivers/gpu/drm/nouveau/nvkm/subdev/bios/shadowramin.c | 3 drivers/gpu/drm/radeon/radeon_gem.c | 13 drivers/gpu/drm/radeon/radeon_ring.c | 4 drivers/gpu/drm/rockchip/rockchip_drm_gem.c | 2 drivers/gpu/drm/tegra/dc.c | 4 drivers/gpu/drm/tegra/gem.c | 22 drivers/gpu/drm/tegra/gr2d.c | 19 drivers/gpu/drm/tegra/gr3d.c | 19 drivers/gpu/drm/tegra/submit.c | 3 drivers/gpu/drm/tidss/tidss_kms.c | 2 drivers/gpu/host1x/bus.c | 62 drivers/gpu/host1x/job.c | 10 drivers/hid/hid-appleir.c | 45 drivers/hid/hid-core.c | 7 drivers/hid/hid-letsketch.c | 36 drivers/hid/hid-lg-g15.c | 16 drivers/hid/hid-logitech-hidpp.c | 1 drivers/hid/hid-multitouch.c | 32 drivers/hid/hid-picolcd_core.c | 3 drivers/hid/hid-playstation.c | 12 drivers/hid/hid-sensor-hub.c | 77 drivers/hid/hid-wiimote-modules.c | 58 drivers/hid/wacom_sys.c | 12 drivers/hwmon/Kconfig | 1 drivers/hwmon/asus_atk0110.c | 3 drivers/hwmon/it87.c | 3 drivers/hwmon/occ/common.c | 34 drivers/hwmon/occ/common.h | 1 drivers/hwmon/pmbus/adm1275.c | 2 drivers/hwmon/pmbus/pmbus_core.c | 13 drivers/hwmon/w83627hf.c | 4 drivers/hwmon/w83793.c | 1 drivers/hwspinlock/qcom_hwspinlock.c | 5 drivers/hwtracing/coresight/coresight-cti-platform.c | 1 drivers/hwtracing/coresight/coresight-etb10.c | 6 drivers/hwtracing/coresight/coresight-etm4x-core.c | 4 drivers/hwtracing/coresight/ultrasoc-smb.c | 1 drivers/i2c/busses/i2c-mlxbf.c | 4 drivers/i2c/busses/i2c-mpc.c | 2 drivers/i2c/busses/i2c-mt65xx.c | 2 drivers/i2c/busses/i2c-stm32f7.c | 9 drivers/i2c/i2c-core-base.c | 83 drivers/i2c/i2c-core-of.c | 5 drivers/i3c/master.c | 19 drivers/iio/accel/bmc150-accel-core.c | 2 drivers/iio/accel/kxsd9.c | 5 drivers/iio/accel/mma8452.c | 2 drivers/iio/adc/lpc32xx_adc.c | 4 drivers/iio/adc/spear_adc.c | 3 drivers/iio/adc/ti-ads124s08.c | 3 drivers/iio/adc/xilinx-ams.c | 5 drivers/iio/chemical/scd30_core.c | 19 drivers/iio/common/inv_sensors/inv_sensors_timestamp.c | 26 drivers/iio/common/st_sensors/st_sensors_core.c | 23 drivers/iio/gyro/bmg160_core.c | 16 drivers/iio/imu/adis_trigger.c | 2 drivers/iio/imu/bmi160/bmi160_core.c | 3 drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 4 drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 44 drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h | 3 drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 1 drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 4 drivers/iio/imu/inv_mpu6050/inv_mpu_ring.c | 2 drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 21 drivers/iio/industrialio-event.c | 5 drivers/iio/light/al3010.c | 2 drivers/iio/light/gp2ap002.c | 2 drivers/iio/light/opt3001.c | 6 drivers/iio/light/si1133.c | 14 drivers/iio/light/tcs3472.c | 38 drivers/iio/light/tsl2591.c | 6 drivers/iio/light/veml6030.c | 8 drivers/iio/magnetometer/ak8975.c | 15 drivers/iio/orientation/hid-sensor-rotation.c | 40 drivers/iio/pressure/mpl115.c | 8 drivers/iio/temperature/ltc2983.c | 5 drivers/infiniband/core/cm.c | 13 drivers/infiniband/core/counters.c | 2 drivers/infiniband/hw/hns/hns_roce_hem.c | 8 drivers/infiniband/hw/hns/hns_roce_main.c | 2 drivers/infiniband/hw/irdma/verbs.c | 19 drivers/infiniband/hw/irdma/verbs.h | 1 drivers/infiniband/hw/mlx4/mlx4_ib.h | 1 drivers/infiniband/hw/mlx4/mr.c | 9 drivers/infiniband/hw/mlx4/sysfs.c | 45 drivers/infiniband/hw/mlx5/devx.c | 30 drivers/infiniband/hw/mlx5/main.c | 17 drivers/infiniband/hw/mlx5/mr.c | 17 drivers/infiniband/hw/mlx5/qp.c | 12 drivers/infiniband/sw/rxe/rxe_mmap.c | 19 drivers/infiniband/sw/rxe/rxe_resp.c | 33 drivers/infiniband/sw/siw/siw_qp_rx.c | 9 drivers/infiniband/ulp/rtrs/rtrs-srv.c | 5 drivers/infiniband/ulp/srpt/ib_srpt.c | 5 drivers/input/joystick/iforce/iforce-packets.c | 18 drivers/input/joystick/maplecontrol.c | 3 drivers/input/keyboard/maple_keyb.c | 4 drivers/input/misc/ims-pcu.c | 117 drivers/input/mouse/elan_i2c_core.c | 36 drivers/input/mouse/maplemouse.c | 9 drivers/input/rmi4/rmi_bus.c | 4 drivers/input/rmi4/rmi_f30.c | 2 drivers/input/rmi4/rmi_f3a.c | 2 drivers/input/touchscreen/goodix.c | 3 drivers/input/touchscreen/mms114.c | 26 drivers/input/touchscreen/touchwin.c | 15 drivers/iommu/amd/amd_iommu_types.h | 11 drivers/irqchip/irq-crossbar.c | 10 drivers/irqchip/irq-gic-v3-its.c | 6 drivers/irqchip/irq-ts4800.c | 10 drivers/leds/uleds.c | 3 drivers/mailbox/mtk-adsp-mailbox.c | 9 drivers/md/dm-bufio.c | 4 drivers/md/dm-era-target.c | 10 drivers/md/dm-integrity.c | 3 drivers/md/dm-ioctl.c | 9 drivers/md/dm-log.c | 3 drivers/md/dm-stats.c | 10 drivers/md/dm-thin-metadata.c | 67 drivers/md/dm-verity-loadpin.c | 2 drivers/md/dm-verity-target.c | 2 drivers/md/raid1.c | 6 drivers/md/raid10.c | 1 drivers/media/platform/mediatek/jpeg/mtk_jpeg_core.c | 3 drivers/media/platform/nxp/imx8-isi/imx8-isi-core.c | 24 drivers/media/platform/qcom/venus/helpers.c | 4 drivers/media/platform/qcom/venus/hfi_platform_v4.c | 20 drivers/media/platform/qcom/venus/hfi_platform_v6.c | 16 drivers/media/platform/rockchip/rga/rga-hw.c | 2 drivers/media/platform/rockchip/rga/rga-hw.h | 2 drivers/media/usb/uvc/uvc_video.c | 122 drivers/media/v4l2-core/v4l2-common.c | 1 drivers/memstick/core/ms_block.c | 4 drivers/mfd/cros_ec_dev.c | 3 drivers/mfd/cs42l43.c | 2 drivers/mfd/sm501.c | 4 drivers/mfd/tps6586x.c | 2 drivers/mmc/host/vub300.c | 26 drivers/mtd/devices/mchp23k256.c | 2 drivers/mtd/devices/slram.c | 22 drivers/mtd/maps/vmu-flash.c | 1 drivers/mtd/nand/onenand/onenand_samsung.c | 7 drivers/mtd/nand/raw/fsl_ifc_nand.c | 9 drivers/mtd/nand/raw/lpc32xx_mlc.c | 12 drivers/mtd/nand/raw/lpc32xx_slc.c | 12 drivers/mtd/nand/raw/nand_base.c | 2 drivers/mtd/nand/raw/pl35x-nand-controller.c | 2 drivers/mtd/spi-nor/Kconfig | 1 drivers/mtd/spi-nor/swp.c | 11 drivers/net/amt.c | 6 drivers/net/bonding/bond_3ad.c | 1 drivers/net/bonding/bond_main.c | 129 drivers/net/bonding/bond_netlink.c | 16 drivers/net/can/usb/esd_usb.c | 5 drivers/net/dsa/sja1105/sja1105_ptp.c | 2 drivers/net/ethernet/amazon/ena/ena_netdev.c | 23 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 3 drivers/net/ethernet/broadcom/genet/bcmgenet.c | 23 drivers/net/ethernet/cavium/liquidio/cn23xx_pf_device.c | 18 drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 8 drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c | 2 drivers/net/ethernet/freescale/enetc/enetc.c | 7 drivers/net/ethernet/freescale/fman/fman.c | 4 drivers/net/ethernet/freescale/gianfar.c | 16 drivers/net/ethernet/intel/i40e/i40e_debug.h | 2 drivers/net/ethernet/intel/ice/ice_common.c | 1 drivers/net/ethernet/intel/ice/ice_ethtool.c | 12 drivers/net/ethernet/intel/ice/ice_main.c | 16 drivers/net/ethernet/intel/ice/ice_vf_lib.c | 2 drivers/net/ethernet/marvell/mvneta.c | 3 drivers/net/ethernet/marvell/octeontx2/af/mcs.c | 6 drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c | 3 drivers/net/ethernet/marvell/octeontx2/af/rvu_nix.c | 4 drivers/net/ethernet/marvell/octeontx2/nic/cn10k_macsec.c | 10 drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 44 drivers/net/ethernet/marvell/prestera/prestera_main.c | 2 drivers/net/ethernet/mediatek/mtk_ppe.c | 4 drivers/net/ethernet/mellanox/mlx5/core/en/hv_vhca_stats.c | 29 drivers/net/ethernet/mellanox/mlx5/core/en_accel/macsec.c | 47 drivers/net/ethernet/mellanox/mlx5/core/lib/hv_vhca.c | 8 drivers/net/ethernet/mellanox/mlx5/core/lib/hv_vhca.h | 6 drivers/net/ethernet/mellanox/mlx5/core/lib/port_tun.c | 3 drivers/net/ethernet/mellanox/mlx5/core/main.c | 12 drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 drivers/net/ethernet/mellanox/mlxsw/spectrum_router.c | 1 drivers/net/ethernet/microchip/lan743x_main.c | 2 drivers/net/ethernet/microchip/lan966x/lan966x_vcap_impl.c | 5 drivers/net/ethernet/microchip/sparx5/sparx5_switchdev.c | 4 drivers/net/ethernet/microchip/sparx5/sparx5_vcap_impl.c | 5 drivers/net/ethernet/microchip/vcap/vcap_api.c | 72 drivers/net/ethernet/microchip/vcap/vcap_api.h | 3 drivers/net/ethernet/microchip/vcap/vcap_api_debugfs.c | 8 drivers/net/ethernet/microchip/vcap/vcap_api_debugfs_kunit.c | 3 drivers/net/ethernet/microchip/vcap/vcap_api_kunit.c | 3 drivers/net/ethernet/microchip/vcap/vcap_api_private.h | 3 drivers/net/ethernet/microsoft/mana/gdma_main.c | 2 drivers/net/ethernet/microsoft/mana/mana_en.c | 3 drivers/net/ethernet/pensando/ionic/ionic_ethtool.c | 11 drivers/net/ethernet/qlogic/qede/qede_fp.c | 9 drivers/net/ethernet/qualcomm/rmnet/rmnet_handlers.c | 5 drivers/net/ethernet/qualcomm/rmnet/rmnet_map.h | 1 drivers/net/ethernet/qualcomm/rmnet/rmnet_map_data.c | 72 drivers/net/ethernet/sun/sungem.c | 13 drivers/net/ethernet/sunplus/spl2sw_phy.c | 6 drivers/net/ieee802154/ca8210.c | 9 drivers/net/macsec.c | 9 drivers/net/phy/sfp.c | 1 drivers/net/team/Makefile | 1 drivers/net/team/team.c | 3120 --------- drivers/net/team/team_core.c | 3182 ++++++++++ drivers/net/thunderbolt/main.c | 8 drivers/net/usb/gl620a.c | 6 drivers/net/usb/kalmia.c | 8 drivers/net/usb/lan78xx.c | 318 drivers/net/usb/net1080.c | 2 drivers/net/veth.c | 2 drivers/net/virtio_net.c | 55 drivers/net/vxlan/vxlan_core.c | 8 drivers/net/wan/ixp4xx_hss.c | 4 drivers/net/wireless/ath/ath9k/xmit.c | 5 drivers/net/wireless/ath/wcn36xx/smd.c | 13 drivers/net/wireless/cisco/airo.c | 4 drivers/net/wireless/intersil/hostap/hostap_main.c | 1 drivers/net/wireless/marvell/mwifiex/join.c | 1 drivers/net/wireless/mediatek/mt76/mac80211.c | 2 drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 10 drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 5 drivers/net/wireless/ralink/rt2x00/rt2x00dev.c | 12 drivers/net/wireless/realtek/rtw88/pci.c | 5 drivers/net/wireless/realtek/rtw89/fw.c | 2 drivers/net/wwan/iosm/iosm_ipc_mux_codec.c | 40 drivers/net/wwan/t7xx/t7xx_hif_cldma.c | 3 drivers/net/wwan/t7xx/t7xx_port_wwan.c | 2 drivers/ntb/hw/epf/ntb_hw_epf.c | 89 drivers/nvdimm/btt.c | 14 drivers/nvdimm/nd.h | 11 drivers/nvdimm/region_devs.c | 66 drivers/nvme/host/core.c | 2 drivers/nvme/host/multipath.c | 6 drivers/nvme/target/auth.c | 20 drivers/nvme/target/fabrics-cmd-auth.c | 60 drivers/nvme/target/fabrics-cmd.c | 15 drivers/nvme/target/nvmet.h | 8 drivers/nvme/target/rdma.c | 18 drivers/nvme/target/tcp.c | 5 drivers/of/cpu.c | 2 drivers/of/dynamic.c | 1 drivers/of/platform.c | 5 drivers/opp/of.c | 3 drivers/pci/Makefile | 2 drivers/pci/controller/dwc/pci-imx6.c | 4 drivers/pci/controller/dwc/pci-meson.c | 4 drivers/pci/controller/dwc/pcie-designware-host.c | 2 drivers/pci/controller/mobiveil/pcie-mobiveil-host.c | 8 drivers/pci/controller/pci-host-common.c | 4 drivers/pci/controller/pci-loongson.c | 31 drivers/pci/controller/pcie-altera-msi.c | 2 drivers/pci/controller/pcie-altera.c | 32 drivers/pci/controller/pcie-iproc-bcma.c | 2 drivers/pci/controller/pcie-iproc-platform.c | 2 drivers/pci/controller/pcie-iproc.c | 1 drivers/pci/controller/pcie-iproc.h | 2 drivers/pci/controller/pcie-mediatek-gen3.c | 4 drivers/pci/controller/pcie-mediatek.c | 130 drivers/pci/controller/pcie-rcar-host.c | 1 drivers/pci/controller/pcie-xilinx-nwl.c | 2 drivers/pci/endpoint/functions/pci-epf-ntb.c | 21 drivers/pci/endpoint/functions/pci-epf-vntb.c | 9 drivers/pci/msi/msi.c | 4 drivers/pci/pci-sysfs.c | 14 drivers/pci/pci.c | 139 drivers/pci/pci.h | 4 drivers/pci/quirks.c | 51 drivers/pci/rebar.c | 218 drivers/pci/rom.c | 149 drivers/pci/setup-bus.c | 104 drivers/pci/setup-res.c | 53 drivers/phy/phy-can-transceiver.c | 3 drivers/pinctrl/cirrus/pinctrl-cs42l43.c | 2 drivers/pinctrl/mediatek/pinctrl-mt8167.c | 2 drivers/pinctrl/mediatek/pinctrl-mt8516.c | 2 drivers/pinctrl/meson/pinctrl-meson.c | 2 drivers/pinctrl/sunxi/pinctrl-sunxi.c | 2 drivers/platform/x86/amd/pmc/pmc-quirks.c | 39 drivers/platform/x86/amd/pmc/pmc.c | 60 drivers/platform/x86/amd/pmc/pmc.h | 1 drivers/platform/x86/xo15-ebook.c | 7 drivers/pmdomain/imx/imx8m-blk-ctrl.c | 46 drivers/power/supply/charger-manager.c | 6 drivers/power/supply/cpcap-battery.c | 11 drivers/power/supply/power_supply_core.c | 11 drivers/pwm/pwm-imx27.c | 8 drivers/rapidio/devices/tsi721.c | 3 drivers/regulator/core.c | 4 drivers/regulator/ltc3676.c | 10 drivers/regulator/scmi-regulator.c | 6 drivers/remoteproc/qcom_common.c | 14 drivers/reset/reset-sunxi.c | 4 drivers/rpmsg/qcom_glink_native.c | 2 drivers/rpmsg/rpmsg_core.c | 43 drivers/rpmsg/virtio_rpmsg_bus.c | 1 drivers/rtc/rtc-abx80x.c | 3 drivers/rtc/rtc-cmos.c | 6 drivers/rtc/rtc-ds1307.c | 30 drivers/rtc/rtc-mpfs.c | 2 drivers/rtc/rtc-msc313.c | 4 drivers/s390/char/monwriter.c | 3 drivers/scsi/elx/efct/efct_hw.c | 2 drivers/scsi/elx/efct/efct_unsol.c | 1 drivers/scsi/hpsa.c | 4 drivers/scsi/lpfc/lpfc_init.c | 3 drivers/scsi/pm8001/pm8001_ctl.c | 5 drivers/scsi/scsi_scan.c | 2 drivers/scsi/scsi_transport_sas.c | 101 drivers/scsi/sg.c | 7 drivers/scsi/smartpqi/smartpqi_init.c | 2 drivers/slimbus/qcom-ctrl.c | 5 drivers/slimbus/qcom-ngd-ctrl.c | 62 drivers/soc/fsl/qe/qe.c | 3 drivers/soc/ti/k3-ringacc.c | 4 drivers/spi/spi-dw.h | 1 drivers/spi/spi-ep93xx.c | 1 drivers/spi/spi-fsl-lpspi.c | 18 drivers/spi/spi-hisi-kunpeng.c | 6 drivers/spi/spi-meson-spifc.c | 1 drivers/spi/spi-rpc-if.c | 6 drivers/spi/spi-sh-msiof.c | 10 drivers/spi/spi-uniphier.c | 4 drivers/spi/spi-xilinx.c | 11 drivers/spi/spi.c | 5 drivers/staging/media/atomisp/pci/atomisp_cmd.c | 6 drivers/staging/media/atomisp/pci/sh_css.c | 6 drivers/staging/media/ipu3/ipu3-css-params.c | 8 drivers/staging/media/sunxi/cedrus/cedrus.c | 4 drivers/staging/most/video/video.c | 7 drivers/staging/nvec/nvec.c | 4 drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 93 drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 20 drivers/staging/rtl8723bs/core/rtw_security.c | 2 drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 23 drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 8 drivers/staging/vme_user/vme_fake.c | 8 drivers/staging/vme_user/vme_tsi148.c | 8 drivers/staging/vme_user/vme_user.c | 22 drivers/target/iscsi/iscsi_target_auth.c | 6 drivers/target/loopback/tcm_loop.c | 64 drivers/target/target_core_fabric_lib.c | 89 drivers/target/target_core_internal.h | 3 drivers/target/target_core_pr.c | 12 drivers/thermal/intel/therm_throt.c | 7 drivers/thermal/thermal_hwmon.c | 5 drivers/tty/serial/8250/8250_mid.c | 31 drivers/tty/serial/8250/8250_omap.c | 3 drivers/tty/serial/msm_serial.c | 3 drivers/ufs/core/ufshcd.c | 2 drivers/usb/atm/ueagle-atm.c | 36 drivers/usb/cdns3/cdnsp-mem.c | 2 drivers/usb/class/cdc-acm.c | 3 drivers/usb/common/ulpi.c | 23 drivers/usb/core/quirks.c | 6 drivers/usb/dwc3/dwc3-meson-g12a.c | 14 drivers/usb/dwc3/gadget.c | 43 drivers/usb/fotg210/fotg210-hcd.c | 6 drivers/usb/gadget/composite.c | 5 drivers/usb/gadget/function/f_fs.c | 5 drivers/usb/gadget/function/f_printer.c | 3 drivers/usb/gadget/function/rndis.c | 20 drivers/usb/gadget/udc/core.c | 29 drivers/usb/host/ehci-sched.c | 11 drivers/usb/host/max3421-hcd.c | 8 drivers/usb/host/sl811-hcd.c | 1 drivers/usb/host/xhci.c | 11 drivers/usb/misc/chaoskey.c | 1 drivers/usb/misc/idmouse.c | 45 drivers/usb/misc/iowarrior.c | 21 drivers/usb/misc/ldusb.c | 38 drivers/usb/misc/legousbtower.c | 37 drivers/usb/misc/uss720.c | 5 drivers/usb/mtu3/mtu3_gadget.c | 1 drivers/usb/serial/digi_acceleport.c | 43 drivers/usb/serial/keyspan_pda.c | 2 drivers/usb/serial/option.c | 16 drivers/usb/storage/ene_ub6250.c | 3 drivers/usb/storage/usb.c | 2 drivers/usb/typec/anx7411.c | 4 drivers/usb/typec/class.c | 1 drivers/usb/typec/tcpm/tcpci_rt1711h.c | 13 drivers/usb/typec/tcpm/tcpm.c | 7 drivers/usb/typec/ucsi/displayport.c | 7 drivers/usb/typec/ucsi/ucsi.c | 20 drivers/usb/typec/ucsi/ucsi.h | 1 drivers/usb/typec/ucsi/ucsi_acpi.c | 10 drivers/usb/typec/ucsi/ucsi_ccg.c | 2 drivers/usb/usbip/vudc.h | 1 drivers/usb/usbip/vudc_dev.c | 4 drivers/vdpa/vdpa_user/vduse_dev.c | 64 drivers/vfio/pci/mlx5/cmd.h | 13 drivers/vfio/pci/vfio_pci_core.c | 37 drivers/vfio/vfio_main.c | 3 drivers/vhost/net.c | 15 drivers/vhost/vdpa.c | 29 drivers/video/fbdev/aty/radeon_base.c | 1 drivers/video/fbdev/broadsheetfb.c | 8 drivers/video/fbdev/carminefb.c | 1 drivers/video/fbdev/core/fbcon.c | 14 drivers/video/fbdev/hecubafb.c | 6 drivers/video/fbdev/i740fb.c | 1 drivers/video/fbdev/metronomefb.c | 8 drivers/video/fbdev/nvidia/nvidia.c | 1 drivers/video/fbdev/s3fb.c | 1 drivers/video/fbdev/sm501fb.c | 16 drivers/video/fbdev/sm712.h | 2 drivers/video/fbdev/tdfxfb.c | 1 drivers/video/fbdev/tridentfb.c | 1 drivers/video/fbdev/uvesafb.c | 4 drivers/video/fbdev/vesafb.c | 1 drivers/virtio/virtio_mmio.c | 26 drivers/watchdog/apple_wdt.c | 1 drivers/watchdog/sama5d4_wdt.c | 48 drivers/watchdog/sp5100_tco.c | 3 drivers/watchdog/sprd_wdt.c | 5 drivers/watchdog/watchdog_core.c | 3 drivers/xen/gntdev.c | 8 drivers/xen/xen-scsiback.c | 30 fs/9p/vfs_inode.c | 9 fs/afs/cell.c | 2 fs/afs/cmservice.c | 2 fs/afs/fs_operation.c | 2 fs/afs/rxrpc.c | 11 fs/afs/super.c | 3 fs/afs/vl_list.c | 10 fs/afs/volume.c | 2 fs/btrfs/btrfs_inode.h | 2 fs/btrfs/extent-tree.c | 17 fs/btrfs/file.c | 12 fs/btrfs/inode.c | 138 fs/btrfs/ordered-data.c | 12 fs/btrfs/ordered-data.h | 2 fs/btrfs/reflink.c | 5 fs/btrfs/super.c | 3 fs/configfs/dir.c | 57 fs/dlm/midcomms.c | 4 fs/efs/file.c | 21 fs/exfat/dir.c | 61 fs/exfat/exfat_fs.h | 7 fs/exfat/inode.c | 2 fs/exfat/namei.c | 329 - fs/ext2/file.c | 9 fs/ext4/extents.c | 5 fs/ext4/inode.c | 3 fs/ext4/ioctl.c | 12 fs/ext4/move_extent.c | 34 fs/f2fs/checkpoint.c | 14 fs/f2fs/data.c | 29 fs/f2fs/f2fs.h | 1 fs/f2fs/gc.c | 50 fs/f2fs/inode.c | 30 fs/f2fs/segment.c | 8 fs/f2fs/xattr.c | 6 fs/fs-writeback.c | 133 fs/fuse/cuse.c | 4 fs/fuse/dev.c | 2 fs/hfs/bfind.c | 2 fs/hfs/bnode.c | 56 fs/hfs/brec.c | 2 fs/hfs/btree.c | 2 fs/hfs/btree.h | 71 fs/hfs/hfs_fs.h | 88 fs/hfs/inode.c | 3 fs/hfsplus/bfind.c | 2 fs/hfsplus/bnode.c | 62 fs/hfsplus/brec.c | 2 fs/hfsplus/btree.c | 2 fs/hfsplus/hfsplus_fs.h | 40 fs/isofs/rock.c | 11 fs/jbd2/journal.c | 2 fs/lockd/svcsubs.c | 4 fs/minix/minix.h | 2 fs/namei.c | 4 fs/nfs/callback_proc.c | 9 fs/nfs/dir.c | 2 fs/nfs/filelayout/filelayout.c | 2 fs/nfs/flexfilelayout/flexfilelayout.c | 33 fs/nfs/flexfilelayout/flexfilelayout.h | 16 fs/nfs/pnfs.c | 4 fs/nfs/read.c | 25 fs/nfsd/nfs4layouts.c | 4 fs/nfsd/nfs4recover.c | 120 fs/nfsd/nfs4state.c | 22 fs/nfsd/vfs.c | 42 fs/nilfs2/segment.c | 22 fs/nilfs2/super.c | 2 fs/ntfs3/attrib.c | 14 fs/ntfs3/dir.c | 2 fs/ntfs3/file.c | 48 fs/ntfs3/frecord.c | 51 fs/ntfs3/fslog.c | 131 fs/ntfs3/index.c | 45 fs/ntfs3/inode.c | 8 fs/ntfs3/lznt.c | 2 fs/ntfs3/namei.c | 2 fs/ntfs3/ntfs_fs.h | 5 fs/ntfs3/run.c | 9 fs/ocfs2/alloc.c | 2 fs/ocfs2/aops.c | 13 fs/ocfs2/buffer_head_io.c | 7 fs/ocfs2/dlm/dlmdebug.c | 16 fs/ocfs2/dlmglue.c | 17 fs/ocfs2/inode.c | 150 fs/ocfs2/journal.c | 13 fs/ocfs2/journal.h | 3 fs/ocfs2/move_extents.c | 4 fs/ocfs2/ocfs2.h | 2 fs/ocfs2/quota_local.c | 2 fs/ocfs2/stack_user.c | 10 fs/ocfs2/super.c | 2 fs/ocfs2/sysfile.c | 9 fs/orangefs/dir.c | 7 fs/proc/array.c | 15 fs/proc/base.c | 182 fs/proc/fd.c | 33 fs/proc/generic.c | 9 fs/proc/internal.h | 6 fs/proc/namespaces.c | 16 fs/proc/proc_net.c | 2 fs/smb/client/cifs_swn.c | 327 - fs/smb/client/cifsacl.c | 2 fs/smb/client/cifsglob.h | 19 fs/smb/client/connect.c | 3 fs/smb/client/inode.c | 30 fs/smb/client/ioctl.c | 12 fs/smb/client/misc.c | 8 fs/smb/client/smb2misc.c | 52 fs/smb/client/smb2ops.c | 56 fs/smb/client/smb2pdu.c | 22 fs/smb/client/trace.h | 2 fs/smb/common/cifsglob.h | 30 fs/smb/server/connection.c | 101 fs/smb/server/connection.h | 6 fs/smb/server/oplock.c | 13 fs/smb/server/server.c | 12 fs/smb/server/smb2pdu.c | 140 fs/smb/server/smb_common.h | 14 fs/smb/server/smbacl.c | 7 fs/smb/server/vfs.c | 27 fs/smb/server/vfs_cache.c | 119 fs/smb/server/vfs_cache.h | 3 fs/sysfs/file.c | 4 fs/udf/balloc.c | 5 fs/udf/super.c | 11 fs/userfaultfd.c | 14 fs/xfs/libxfs/xfs_defer.c | 22 fs/xfs/libxfs/xfs_defer.h | 14 fs/xfs/libxfs/xfs_log_recover.h | 4 fs/xfs/xfs_attr_item.c | 115 fs/xfs/xfs_bmap_item.c | 92 fs/xfs/xfs_dquot.c | 16 fs/xfs/xfs_extfree_item.c | 117 fs/xfs/xfs_log_recover.c | 52 fs/xfs/xfs_refcount_item.c | 127 fs/xfs/xfs_reflink.c | 36 fs/xfs/xfs_rmap_item.c | 151 fs/xfs/xfs_trans.h | 4 include/acpi/acpi_bus.h | 2 include/asm-generic/bitops/lock.h | 22 include/crypto/drbg.h | 18 include/dt-bindings/power/fsl,imx93-power.h | 1 include/linux/audit.h | 8 include/linux/backing-dev-defs.h | 4 include/linux/bitops.h | 2 include/linux/bpf.h | 3 include/linux/bpf_local_storage.h | 3 include/linux/damon.h | 8 include/linux/device.h | 5 include/linux/etherdevice.h | 3 include/linux/f2fs_fs.h | 1 include/linux/filter.h | 15 include/linux/fs.h | 5 include/linux/fwnode.h | 2 include/linux/glob.h | 1 include/linux/hid-sensor-hub.h | 25 include/linux/hid.h | 29 include/linux/host1x.h | 7 include/linux/if_ether.h | 3 include/linux/iio/common/inv_sensors_timestamp.h | 3 include/linux/inetdevice.h | 5 include/linux/jiffies.h | 13 include/linux/netdev_features.h | 25 include/linux/netdevice.h | 7 include/linux/nfs_page.h | 1 include/linux/pci.h | 4 include/linux/rpmsg.h | 4 include/linux/seqlock.h | 110 include/linux/sunrpc/clnt.h | 1 include/linux/sunrpc/xprt.h | 2 include/linux/vfio_pci_core.h | 15 include/linux/vmalloc.h | 4 include/linux/writeback.h | 2 include/net/addrconf.h | 10 include/net/bluetooth/hci.h | 21 include/net/bluetooth/hci_core.h | 39 include/net/bluetooth/l2cap.h | 11 include/net/bonding.h | 1 include/net/fib_rules.h | 5 include/net/gue.h | 2 include/net/ip_fib.h | 7 include/net/ip_vs.h | 3 include/net/netfilter/nf_conntrack_extend.h | 12 include/net/netfilter/nf_queue.h | 1 include/net/rtnetlink.h | 2 include/net/sctp/sctp.h | 3 include/net/sock.h | 2 include/net/tc_act/tc_pedit.h | 18 include/net/xfrm.h | 15 include/uapi/linux/bpf.h | 1 io_uring/io-wq.c | 2 kernel/audit.c | 85 kernel/bpf/bpf_lsm.c | 34 kernel/bpf/cgroup.c | 110 kernel/bpf/core.c | 70 kernel/bpf/devmap.c | 19 kernel/bpf/dispatcher.c | 2 kernel/bpf/hashtab.c | 21 kernel/bpf/helpers.c | 12 kernel/bpf/inode.c | 13 kernel/bpf/lpm_trie.c | 10 kernel/bpf/syscall.c | 5 kernel/bpf/verifier.c | 3 kernel/cgroup/cpuset.c | 7 kernel/cpu.c | 20 kernel/events/core.c | 19 kernel/fork.c | 9 kernel/module/decompress.c | 2 kernel/sched/core.c | 1 kernel/sched/fair.c | 25 kernel/sched/features.h | 8 kernel/time/posix-cpu-timers.c | 3 kernel/time/time.c | 2 kernel/trace/bpf_trace.c | 11 kernel/trace/ring_buffer.c | 3 kernel/trace/trace_eprobe.c | 2 kernel/trace/trace_events_filter.c | 6 kernel/trace/trace_events_hist.c | 41 kernel/trace/trace_osnoise.c | 4 kernel/trace/trace_probe.c | 3 kernel/trace/trace_probe.h | 2 kernel/workqueue.c | 2 lib/debugobjects.c | 17 lib/glob.c | 31 lib/test_meminit.c | 2 mm/backing-dev.c | 5 mm/damon/core.c | 2 mm/damon/ops-common.c | 1 mm/damon/sysfs-schemes.c | 17 mm/filemap.c | 2 mm/madvise.c | 3 mm/mincore.c | 3 mm/mm_init.c | 13 mm/shrinker_debug.c | 30 mm/slab.h | 17 mm/vmscan.c | 6 net/6lowpan/nhc.c | 2 net/9p/client.c | 2 net/9p/trans_rdma.c | 19 net/atm/common.c | 2 net/batman-adv/distributed-arp-table.c | 30 net/batman-adv/fragmentation.c | 8 net/batman-adv/gateway_client.c | 3 net/batman-adv/main.c | 13 net/batman-adv/routing.c | 3 net/batman-adv/soft-interface.c | 17 net/batman-adv/soft-interface.h | 2 net/batman-adv/translation-table.c | 5 net/bluetooth/6lowpan.c | 76 net/bluetooth/af_bluetooth.c | 17 net/bluetooth/bnep/core.c | 27 net/bluetooth/hci_codec.c | 2 net/bluetooth/hci_conn.c | 56 net/bluetooth/hci_core.c | 83 net/bluetooth/hci_event.c | 29 net/bluetooth/hci_sync.c | 193 net/bluetooth/iso.c | 20 net/bluetooth/l2cap_core.c | 159 net/bluetooth/l2cap_sock.c | 107 net/bluetooth/mgmt.c | 8 net/bluetooth/msft.c | 2 net/bluetooth/rfcomm/tty.c | 4 net/bluetooth/sco.c | 60 net/bluetooth/smp.c | 27 net/bridge/br_cfm.c | 6 net/bridge/br_cfm_netlink.c | 4 net/bridge/br_if.c | 3 net/bridge/br_stp.c | 3 net/bridge/netfilter/ebtables.c | 22 net/bridge/netfilter/nft_meta_bridge.c | 4 net/can/bcm.c | 127 net/can/isotp.c | 9 net/core/dev.c | 88 net/core/fib_rules.c | 6 net/core/filter.c | 28 net/core/flow_dissector.c | 12 net/core/lwt_bpf.c | 12 net/core/rtnetlink.c | 8 net/core/skbuff.c | 23 net/devlink/rate.c | 10 net/ethernet/eth.c | 9 net/handshake/genl.c | 2 net/ieee802154/core.c | 2 net/ieee802154/header_ops.c | 9 net/ieee802154/ieee802154.h | 17 net/ieee802154/netlink.c | 36 net/ife/ife.c | 2 net/ipv4/esp4_offload.c | 2 net/ipv4/igmp.c | 15 net/ipv4/ip_gre.c | 9 net/ipv4/ip_vti.c | 3 net/ipv4/ipip.c | 3 net/ipv4/netfilter/nf_reject_ipv4.c | 2 net/ipv4/sysctl_net_ipv4.c | 10 net/ipv4/tcp_output.c | 4 net/ipv6/addrconf.c | 23 net/ipv6/esp6_offload.c | 2 net/ipv6/ip6_gre.c | 6 net/ipv6/ip6_vti.c | 3 net/ipv6/mcast.c | 165 net/ipv6/netfilter.c | 4 net/ipv6/netfilter/ip6t_ah.c | 5 net/ipv6/netfilter/ip6t_hbh.c | 1 net/ipv6/netfilter/ip6t_rt.c | 3 net/ipv6/netfilter/nf_conntrack_reasm.c | 3 net/ipv6/route.c | 9 net/ipv6/seg6.c | 3 net/ipv6/sit.c | 3 net/kcm/kcmsock.c | 8 net/key/af_key.c | 1 net/llc/af_llc.c | 1 net/llc/llc_conn.c | 1 net/mac80211/main.c | 3 net/mac80211/tx.c | 17 net/mac802154/iface.c | 6 net/netfilter/ipset/ip_set_core.c | 12 net/netfilter/ipset/ip_set_hash_gen.h | 67 net/netfilter/ipvs/ip_vs_app.c | 10 net/netfilter/ipvs/ip_vs_conn.c | 4 net/netfilter/ipvs/ip_vs_core.c | 36 net/netfilter/ipvs/ip_vs_proto_sctp.c | 18 net/netfilter/ipvs/ip_vs_proto_tcp.c | 11 net/netfilter/ipvs/ip_vs_proto_udp.c | 3 net/netfilter/ipvs/ip_vs_xmit.c | 6 net/netfilter/nf_conncount.c | 23 net/netfilter/nf_conntrack_core.c | 79 net/netfilter/nf_conntrack_ecache.c | 2 net/netfilter/nf_conntrack_extend.c | 32 net/netfilter/nf_conntrack_irc.c | 6 net/netfilter/nf_conntrack_netlink.c | 2 net/netfilter/nf_conntrack_seqadj.c | 2 net/netfilter/nf_nat_core.c | 10 net/netfilter/nf_nat_sip.c | 11 net/netfilter/nf_queue.c | 14 net/netfilter/nfnetlink_cthelper.c | 4 net/netfilter/nfnetlink_osf.c | 6 net/netfilter/nfnetlink_queue.c | 3 net/netfilter/nft_compat.c | 24 net/netfilter/nft_log.c | 58 net/netfilter/nft_synproxy.c | 9 net/netfilter/xt_AUDIT.c | 58 net/netfilter/xt_cluster.c | 2 net/netfilter/xt_connmark.c | 14 net/netfilter/xt_nat.c | 9 net/netfilter/xt_rateest.c | 2 net/netfilter/xt_u32.c | 12 net/openvswitch/conntrack.c | 2 net/openvswitch/flow_netlink.c | 201 net/phonet/af_phonet.c | 5 net/psample/psample.c | 6 net/qrtr/af_qrtr.c | 2 net/rxrpc/recvmsg.c | 5 net/sched/act_api.c | 13 net/sched/act_bpf.c | 2 net/sched/act_ct.c | 7 net/sched/act_pedit.c | 13 net/sched/cls_api.c | 25 net/sched/cls_bpf.c | 10 net/sched/cls_flow.c | 12 net/sched/sch_cake.c | 5 net/sched/sch_codel.c | 48 net/sched/sch_drr.c | 8 net/sched/sch_fq_codel.c | 41 net/sched/sch_hfsc.c | 24 net/sched/sch_hhf.c | 27 net/sched/sch_htb.c | 14 net/sched/sch_multiq.c | 2 net/sched/sch_taprio.c | 2 net/sched/sch_teql.c | 128 net/sctp/diag.c | 67 net/sctp/sm_make_chunk.c | 10 net/sctp/sm_statefuns.c | 23 net/sctp/socket.c | 38 net/smc/smc_cdc.c | 15 net/socket.c | 2 net/sunrpc/clnt.c | 19 net/sunrpc/svcsock.c | 10 net/sunrpc/xdr.c | 14 net/sunrpc/xprt.c | 16 net/sunrpc/xprtrdma/backchannel.c | 5 net/sunrpc/xprtrdma/frwr_ops.c | 2 net/sunrpc/xprtrdma/rpc_rdma.c | 172 net/sunrpc/xprtrdma/transport.c | 85 net/sunrpc/xprtrdma/verbs.c | 167 net/sunrpc/xprtrdma/xprt_rdma.h | 7 net/sunrpc/xprtsock.c | 16 net/tipc/bcast.c | 22 net/tipc/bcast.h | 2 net/tipc/bearer.c | 1 net/tipc/core.c | 5 net/tipc/discover.c | 14 net/tipc/name_distr.c | 13 net/tipc/netlink.c | 12 net/tipc/node.c | 15 net/tipc/socket.c | 3 net/tls/tls_sw.c | 11 net/wireless/nl80211.c | 2 net/xfrm/espintcp.c | 34 net/xfrm/xfrm_input.c | 6 net/xfrm/xfrm_interface_core.c | 3 net/xfrm/xfrm_policy.c | 32 net/xfrm/xfrm_state.c | 2 net/xfrm/xfrm_user.c | 20 samples/trace_events/trace-events-sample.c | 4 scripts/kconfig/conf.c | 6 security/apparmor/apparmorfs.c | 9 security/apparmor/domain.c | 58 security/apparmor/label.c | 2 security/apparmor/net.c | 2 security/apparmor/policy.c | 5 security/apparmor/procattr.c | 2 security/integrity/evm/evm_secfs.c | 16 security/keys/keyring.c | 2 security/selinux/hooks.c | 61 sound/aoa/fabrics/layout.c | 6 sound/core/init.c | 11 sound/core/seq/seq_clientmgr.c | 1 sound/core/seq/seq_memory.c | 4 sound/core/seq/seq_midi.c | 55 sound/firewire/isight.c | 3 sound/isa/gus/gus_pcm.c | 2 sound/pci/cmipci.c | 6 sound/pci/es1938.c | 2 sound/pci/ice1712/aureon.c | 2 sound/pci/ice1712/ice1712.c | 8 sound/pci/ice1712/ice1724.c | 6 sound/pci/ymfpci/ymfpci_main.c | 6 sound/soc/codecs/adau1372.c | 5 sound/soc/codecs/aw88261.c | 12 sound/soc/codecs/cs35l56.c | 14 sound/soc/codecs/hdac_hdmi.c | 4 sound/soc/codecs/tlv320aic3x.c | 25 sound/soc/fsl/fsl_asrc_dma.c | 20 sound/soc/fsl/fsl_audmix.c | 6 sound/soc/mediatek/mt8183/mt8183-afe-pcm.c | 11 sound/soc/mediatek/mt8192/mt8192-afe-pcm.c | 9 sound/soc/qcom/qdsp6/q6apm.c | 8 sound/soc/sh/rcar/rsnd.h | 2 sound/soc/sof/ipc3-control.c | 79 sound/soc/sof/ipc4-control.c | 11 sound/soc/sof/topology.c | 5 sound/soc/tegra/tegra210_ahub.c | 4 sound/usb/caiaq/input.c | 2 sound/usb/midi2.c | 5 sound/usb/mixer_quirks.c | 101 sound/usb/mixer_scarlett.c | 4 sound/usb/mixer_us16x08.c | 127 sound/virtio/virtio_pcm.c | 3 sound/virtio/virtio_pcm_ops.c | 3 tools/bpf/bpftool/net.c | 4 tools/include/linux/args.h | 32 tools/include/linux/bitops.h | 2 tools/include/uapi/linux/bpf.h | 1 tools/lib/api/fs/fs.c | 19 tools/lib/bpf/libbpf.c | 9 tools/lib/bpf/strset.c | 62 tools/lib/bpf/usdt.c | 16 tools/lib/symbol/kallsyms.c | 5 tools/mm/slabinfo.c | 6 tools/perf/trace/beauty/fcntl.c | 16 tools/perf/util/probe-finder.c | 4 tools/power/x86/intel-speed-select/isst-daemon.c | 9 tools/testing/cxl/test/cxl.c | 8 tools/testing/cxl/test/mem.c | 6 tools/testing/radix-tree/linux/idr.h | 4 tools/testing/selftests/bpf/bpf_util.h | 45 tools/testing/selftests/bpf/cgroup_helpers.c | 2 tools/testing/selftests/bpf/prog_tests/verifier_log.c | 1 tools/testing/selftests/bpf/progs/bpf_iter_task_vma.c | 2 tools/testing/selftests/hid/Makefile | 10 tools/testing/selftests/hid/hid_bpf.c | 70 tools/testing/selftests/hid/progs/hid.c | 94 tools/testing/selftests/hid/progs/hid_bpf_helpers.h | 84 tools/testing/selftests/mm/compaction_test.c | 3 tools/testing/selftests/mm/hmm-tests.c | 63 tools/testing/selftests/net/tcp_mmap.c | 4 tools/usb/usbip/libsrc/usbip_common.c | 2 tools/usb/usbip/libsrc/usbip_device_driver.c | 4 tools/usb/usbip/libsrc/vhci_driver.c | 1 tools/virtio/vringh_test.c | 5 virt/kvm/eventfd.c | 12 virt/kvm/kvm_main.c | 16 1137 files changed, 16794 insertions(+), 10817 deletions(-)
Aaron Tomlin (2):
libbpf: Report error when a negative kprobe offset is specified
mips: sched: Fix CPUMASK_OFFSTACK memory corruption
Abd-Alrhman Masalkhi (1):
md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry
Abdun Nihaal (17):
OPP: of: Fix potential memory leak in opp_parse_supplies()
fbdev: metronomefb: fix potential memory leak in metronomefb_probe()
fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe()
fbdev: hecubafb: fix potential memory leak in hecubafb_probe()
fbdev: radeon: fix potential memory leak in radeonfb_pci_register()
fbdev: i740fb: fix potential memory leak in i740fb_probe()
fbdev: s3fb: fix potential memory leak in s3_pci_probe()
fbdev: uvesafb: fix potential memory leak in uvesafb_probe()
fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe()
fbdev: carminefb: fix potential memory leak in alloc_carmine_fb()
fbdev: vesafb: fix memory leak in vesafb_probe()
fbdev: nvidia: fix potential memory leak in nvidiafb_probe()
fbdev: tridentfb: fix potential memory leak in trident_pci_probe() nvdimm/btt: Free arenas on btt_init() error paths nvdimm/btt: Free arena sub-allocations on discover_arenas() error path
scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()
bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()
Abhishek Ojha (1):
regulator: ltc3676: Fix incorrect IRQSTAT bit offsets
Aboorva Devarajan (4):
powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus selftests/mm: fix exclusive_cow test fork() handling
Achkinazi, Igor (1):
nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks
Adam Li (1):
sched/fair: Only update stats for allowed CPUs when looking for dst group
Aditya Garg (2):
net: mana: initialize gdma queue id to INVALID_QUEUE_ID
net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check
Aditya Prakash Srivastava (1):
ext4: fix kernel BUG in ext4_write_inline_data_end
Adrian Hunter (1):
i3c: master: Prevent reuse of dynamic address on device add failure
Ahmed Genidi (1):
KVM: arm64: Initialize SCTLR_EL1 in __kvm_hyp_init_cpu()
Ahsan Atta (1):
crypto: qat - fix restarting state leak on allocation failure
Al Viro (2):
configfs_lookup(): don't leave ->s_dentry dangling on failure
configfs: fix lockless traversals of ->s_childrenAlan Stern (1):
USB: chaoskey: Fix slab-use-after-free in chaoskey_release()
Alberto Ruiz (1):
fuse: fix device node leak in cuse_process_init_reply()
Aldo Conte (1):
iio: tcs3472: power down chip on probe failure
Aleksandr Nogikh (2):
ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write
ieee802154: fix kernel-infoleak in dgram_recvmsg()
Aleksandrova Alyona (1):
net: dsa: sja1105: round up PTP perout pin duration
Alex Williamson (4):
vfio/pci: Latch disable_idle_d3 per device
vfio/pci: Release the VGA arbiter client on register_device() failure vfio/pci: Fix racy bitfields and tighten struct layout vfio/mlx5: Fix racy bitfields and tighten struct layout
Alexander Aring (1):
dlm: fix add msg handle in send_queue ordered
Alexander Chesnokov (1):
RDMA/hns: Fix arithmetic overflow in calc_hem_config()
Alexander Lobakin (1):
bitops: make BYTES_TO_BITS() treewide-available
Alexander Potapenko (1):
lib/test_meminit: use && for bools
Alexander Stein (1):
arm64: dts: tqma8mpql-mba8mpxl: configure sai clock in audio codec as well
Alexandru Hossu (9):
staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()
staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop
staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()
staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
staging: rtl8723bs: fix OOB write in HT_caps_handler()
staging: nvec: fix use-after-free in nvec_rx_completed()
staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()
Alexey Nepomnyashih (1):
xfs: fix unreachable BIGTIME check in dquot flush validation
Ali Ahmet MEMIS (1):
tools/power/x86/intel-speed-select: Harden daemon pidfile open
Alison Schofield (1):
nvdimm/btt: Handle preemption in BTT lane acquisition
Amery Hung (1):
bpf: Fix effective prog array index with BPF_F_PREORDER
Anastasia Tishchenko (1):
crypto: ecc - Fix carry overflow in vli multiplication
Andrea Righi (1):
net: lan743x: Initialize eth_syslock spinlock before use
Andreas Kemnade (1):
gpios: palmas: add .get_direction() op
Andreas Kempe (1):
iio: imu: st_lsm6dsx: deselect shub page before reading whoami
Andrei Kuchynski (2):
mfd: cros_ec: Delay dev_set_drvdata() until probe success
usb: typec: ucsi: Invert DisplayPort role assignment
Andrew Morton (1):
security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()
Andrii Kuchmenko (1):
module: decompress: check return value of module_extend_max_pages()
Andrii Nakryiko (1):
bpf: Consistently use bpf_rcu_lock_held() everywhere
Andy Shevchenko (5):
iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call
i2c: mpc: Fix timeout calculations
phy: phy-can-transceiver: Check driver match and driver data against NULL
ACPI: resource: Amend kernel-doc style
serial: 8250_mid: Disable DMA for selected platforms
Andy Yan (1):
usb: typec: tcpm: Fix VDM type for Enter Mode commands
Angela Czubak (1):
HID: add haptics page defines
Anshuman Khandual (1):
arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range()
Antoni Pokusinski (1):
rtc: abx80x: fix the RTC_VL_CLR clearing all status flags
Armin Wolf (1):
leds: uleds: Fix potential buffer overread
Arnaldo Carvalho de Melo (3):
tools lib api: Fix missing null termination in filename__read_int/ull() tools lib api: Fix filename__write_int() writing uninitialized stack data tools lib api: Fix mount_overload() snprintf truncation and toupper range
Arnd Bergmann (3):
staging: media: atomisp: reduce load_primary_binaries() stack usage
Bluetooth: btmtk: Fix btmtk.c undefined reference build error harder
Bluetooth: btmtk: remove #ifdef around declarations
Arseniy Krasnov (1):
mtd: rawnand: fix condition in 'nand_select_target()'
Asim Viladi Oglu Manizada (1):
net: openvswitch: reject oversized nested action attrs
Avinash Duduskar (1):
bpf: zero-initialize the fib lookup flow struct
Badhri Jagan Sridharan (1):
usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
Balakrishnan Sambath (1):
watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and SAMA7G5
Baokun Li (3):
ext4: get rid of ppath in get_ext_path()
writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()
writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount()
Baolin Liu (1):
Documentation: proc: fix section numbering in table of contents
Bart Van Assche (1):
ata: libata: Fix ata_exec_internal()
Bartosz Golaszewski (2):
device property: initialize the remaining fields of fwnode_handle in fwnode_init()
mfd: tps6586x: Fix OF node refcount
Bastien Curutchet (1):
mtd: rawnand: pl353: fix probe resource allocation
Benjamin Coddington (1):
NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
Benjamin Marzinski (1):
dm-log: fix a bitset_size overflow on 32bit machines
Benjamin Tissoires (5):
selftests/hid: ensure we can compile the tests on kernels pre-6.3 selftests/hid: do not manually call headers_install selftests/hid: force using our compiled libbpf headers selftests/hid: convert the hid_bpf selftests with struct_ops selftests/hid: ensure CKI can compile our new tests on old kernels
Benoît Sevens (1):
HID: playstation: validate num_touch_reports in DualShock 4 reports
Bhargav Joshi (2):
irqchip/crossbar: Fix parent domain resource leak irqchip/crossbar: Use correct index in crossbar_domain_free()
Biren Pandya (3):
iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error
iio: light: gp2ap002: fix runtime PM leak on read error
iio: pressure: mpl115: fix runtime PM leak on read error
Bjoern A. Zeeb (1):
wifi: mt76: fix argument to ieee80211_is_first_frag()
Bjorn Andersson (3):
slimbus: qcom-ngd-ctrl: Fix probe error path ordering
slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownership
slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd
Bradley Morgan (3):
bpf: Disable xfrm_decode_session hook attachment
cpu: hotplug: Preserve per instance callback errors
cpu: hotplug: Bound hotplug states sysfs output
Breno Leitao (3):
workqueue: drop spurious '*' from print_worker_info() fn declaration arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS 9p: skip nlink update in cacheless mode to fix WARN_ON
Brett Creeley (1):
ionic: Fix check in ionic_get_link_ext_stats
Bryam Vargas (19):
f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
iio: accel: bmc150: clamp the device-reported FIFO frame count
udf: validate VAT header length against the VAT inode size
udf: validate sparing table length as an entry count, not a byte count
partitions: aix: bound the pp_count scan to the ppe array
isofs: bound Rock Ridge symlink components to the SL record
exfat: bound uniname advance in exfat_find_dir_entry()
Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
Input: goodix - clamp the device-reported contact count
Input: iforce - bound the device-reported force-feedback effect index
Input: touchwin - reset the packet index on every complete packet
Input: mms114 - reject an oversized device packet size
nvmet-rdma: handle inline data with a nonzero offset
scsi: target: Bound PR-OUT TransportID parsing to the received buffer
scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked
orangefs: keep the readdir entry size 64-bit in fill_from_part()
Cao Guanghui (1):
dm era: fix NULL pointer dereference in metadata_open()
Carlos Bilbao (1):
PCI/ASPM: Don't reconfigure ASPM entering low-power state
Carlos Llamas (3):
binder: fix UAF in binder_thread_release()
binder: fix UAF in binder_free_transaction()
libbpf: Fix UAF in strset__add_str()
Carlos Song (2):
spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()
spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
Cen Zhang (4):
ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints
Bluetooth: 6lowpan: hold L2CAP conn across debugfs control
Bluetooth: MGMT: Fix adv monitor add failure cleanup
Bluetooth: hci_sync: annotate data-races around hdev->req_status
Chaitanya Kulkarni (1):
nvmet: remove superfluous initialization
Chanwoo Lee (1):
scsi: ufs: Fix wrong value printed in unexpected UPIU response case
Chao Shi (1):
block: skip sync_blockdev() on surprise removal in bdev_mark_dead()
Chao Yu (2):
f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()
Charles Keepax (2):
pinctrl: cs42l43: Fix polarity on debounce
mfd: cs42l43: Sanity check firmware size
Chen Cheng (1):
md/raid10: reset read_slot when reusing r10bio for discard
Chen Ni (1):
clocksource/drivers/sun5i: Handle error returns from devm_reset_control_get_optional_exclusive()
Chen-Yu Tsai (3):
dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties
arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce buffer to host
regulator: dt-bindings: mt6359: Drop regulator-name pattern restrictions
ChenXiaoSong (1):
smb/server: do not require delete access for non-replacing links
Chi Wang (1):
audit: Fix data races of skb_queue_len() readers on audit_queue
Chris Lu (5):
Bluetooth: btusb: mediatek: remove the unnecessary goto tag
Bluetooth: btusb: mediatek: return error for failed reg access
Bluetooth: btmtk: move btusb_mtk_[setup, shutdown] to btmtk.c
Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices.
Bluetooth: btmtk: Fix btmtk.c undefined reference build error
Chris Mason (3):
nfsd: release layout stid on setlease failure
xprtrdma: Fix bcall rep leak and unbounded peek
sunrpc: pin svc_xprt across the asynchronous TLS handshake callback
Christian Brauner (1):
fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid
Christian Marangi (2):
PCI: mediatek: Convert bool to single quirks entry and bitmap
PCI: mediatek: Use generic MACRO for TPVPERL delay
Christoph Hellwig (1):
proc: rename proc_setattr to proc_nochmod_setattr
Chuck Lever (20):
handshake: Require admin permission for DONE command
xprtrdma: Remove temp allocation of rpcrdma_rep objects
xprtrdma: Avoid 250 ms delay on backlog wakeup
xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot
xprtrdma: Post receive buffers after RPC completion
xprtrdma: Use sendctx DMA state for Send signaling
xprtrdma: Decouple req recycling from RPC completion
xprtrdma: Check frwr_wp_create() during connect
xprtrdma: Document and assert reply-handler invariants
xprtrdma: Resize reply buffers before reposting receives
xprtrdma: Sanitize the reply credit grant after parsing
xprtrdma: Repost Receive buffers for malformed replies
xprtrdma: Return sendctx slot after Send preparation failure net/tls: Consume empty data records in tls_sw_read_sock()
SUNRPC: release lower rpc_clnt if killed waiting for XPRT_LOCKED
SUNRPC: pin upper rpc_clnt across the TLS connect_worker
sunrpc: wait for in-flight TLS handshake callback when cancel loses race
lockd: Plug nlm_file leak when nlm_do_fopen() fails
lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure
SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing
Clark Wang (1):
nfs: keep PG_UPTODATE clear after read errors in page groups
Claudia Draghicescu (1):
Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID
Colin Ian King (1):
iio: invensense: remove redundant initialization of variable period
Conor Dooley (1):
rtc: mpfs: fix counter upload completion condition
Cosmin Ratiu (2):
bonding: Correctly support GSO ESP offload
devlink: Fix parent ref leak in devl_rate_node_create()
Cristian Marussi (1):
clk: scmi: Fix clock rate rounding
Crystal Wood (1):
tracing/osnoise: Call synchronize_rcu() when unregistering
Cássio Gabriel (9):
ALSA: virtio: Add missing 384 kHz PCM rate mapping
ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks
ALSA: usb-audio: Roll back quirk control caches on write errors
ALSA: usb-audio: Update Babyface Pro control caches only after successful writes
ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes
ASoC: SOF: topology: validate vendor array size before parsing
ASoC: mediatek: mt8192: Release reserved memory on cleanup
ASoC: mediatek: mt8183: Release reserved memory on cleanup
DaeMyung Kang (1):
ksmbd: centralize ksmbd_conn final release to plug transport leak
Daehyeon Ko (1):
macsec: don't read an unset MAC header in macsec_encrypt()
Dai Ngo (1):
NFSv4/pnfs: defer return_range callbacks until after inode unlock
Dan Carpenter (4):
smb/client: Fix error code in smb2_aead_req_alloc() rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc()
scsi: pm8001: Fix error code in non_fatal_log_show()
afs: Fix error code in afs_extract_vl_addrs()
Daniel Borkmann (4):
bpf, arm64: Reject out-of-range B.cond targets
net, team, bonding: Add netdev_base_features helper
bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features
bpf: Tighten cgroup storage cookie checks for prog arrays
Daniel Gibson (3):
platform/x86/amd/pmc: Check for intermediate wakeup in function platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops platform/x86/amd/pmc: Add delay_suspend module parameter
Danila Chernetsov (1):
ext2: fix ignored return value of generic_write_sync()
Danilo Krummrich (4):
driver core: use READ_ONCE() for dev->driver in dev_has_sync_state()
rpmsg: use generic driver_override infrastructure
driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout() driver core: Guard deferred probe timeout extension with delayed_work_pending()
Darrick J. Wong (6):
xfs: recreate work items when recovering intent items
xfs: dump the recovered xattri log item if corruption happens
xfs: use xfs_defer_finish_one to finish recovered work items
xfs: move ->iop_recover to xfs_defer_op_type
xfs: resample the data fork mapping after cycling ILOCK
xfs: fix stupid compiler warning
Darvell Long (1):
ALSA: usb-audio: avoid kobject path lookup in DualSense match
Dave Jiang (3):
cxl/test: Fix integer overflow in mock LSA bounds checks cxl/test: Zero out LSA backing memory to avoid leaking to user cxl/test: Add check after kzalloc() memory in alloc_mock_res()
David Carlier (1):
netfilter: nfnl_cthelper: apply per-class values when updating policies
David Disseldorp (1):
scsi: target: Fix hexadecimal CHAP_I handling
David Howells (7):
rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)
afs: Fix netns teardown to cancel the preallocation charger
afs: Fix further netns teardown to cancel the preallocation charger
afs: Fix callback service message parsers to pass through -EAGAIN
afs: Fix vllist leak
afs: Fix the volume AFS_VOLUME_RM_TREE is set on
afs: Fix unchecked-length string display in debug statement
David Laight (1):
fbdev: sm501fb: Fix buffer errors in OF binding code
Davide Ornaghi (1):
ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation
Davidlohr Bueso (1):
dax/kmem: account for partial discontiguous resource upon removal
Dawei Feng (5):
crypto: amlogic - avoid double cleanup in meson_crypto_probe()
bpf: Restore sysctl new-value from 1 to 0
usb: free iso schedules on failed submit
net: ena: clean up XDP TX queues when regular TX setup fails
wifi: mac80211: fix memory leak in ieee80211_register_hw()
Dawid Osuchowski (1):
ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()
Deepanshu Kartikey (3):
fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()
nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers
bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs
Denis Arefev (1):
block: Avoid mounting the bdev pseudo-filesystem in userspace
Diederik de Haas (1):
arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S
Dmitry Antipov (1):
ocfs2: fix buffer head management in ocfs2_read_blocks()
Dmitry Torokhov (14):
Input: mms114 - fix touch indexing for MMS134S and MMS136
Input: mms114 - fix multi-touch slot corruption
Input: maple_keyb - set driver data before registering input device
Input: maplemouse - set driver data before registering input device
Input: maplecontrol - set driver data before registering input device
Input: ims-pcu - fix use-after-free and double-free in disconnect
Input: ims-pcu - release data interface on disconnect
Input: ims-pcu - validate control endpoint type
Input: ims-pcu - add response length checks
Input: ims-pcu - fix DMA mapping violation in line setup
Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging
Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing
Input: ims-pcu - fix race condition in reset_device sysfs callback
Input: ims-pcu - fix type confusion in CDC union descriptor parsing
Dmitry Vyukov (1):
firmware_loader: Fix recursive lock in device_cache_fw_images()
Doruk Tan Ozturk (1):
net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete
Dragos Tatulea (1):
net/mlx5: Check max_macs devlink param value against max capability
Easwar Hariharan (2):
jiffies: Define secs_to_jiffies()
jiffies: Cast to unsigned long in secs_to_jiffies() conversion
Enrico Pozzobon (1):
net: usb: lan78xx: disable VLAN filter in promiscuous mode
Eric Biggers (8):
crypto: talitos - stop using crypto_ahash::init
crypto: af_alg - Remove zero-copy support from skcipher and aead
crypto: drbg - Fix returning success on failure in CTR_DRBG
crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels
crypto: drbg - Fix the fips_enabled priority boost
crypto: sun4i-ss - Remove insecure and unused rng_alg
crypto: crypto4xx - Remove insecure and unused rng_alg
crypto: hisi-trng - Remove crypto_rng interface
Eric Dumazet (14):
bonding: prevent potential infinite loop in bond_header_parse() net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats() net/sched: sch_htb: do not change sch->flags in htb_dump() net/sched: sch_htb: annotate data-races (I)
net/sched: sch_drr: annotate data-races around cl->deficit
ipv6: guard against possible NULL deref in __in6_dev_stats_get()
tipc: fix UAF in tipc_l2_send_msg()
tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)
xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[]
xfrm: validate selector family and prefixlen during match
veth: fix NAPI leak in XDP enable error path
amt: fix size calculation in amt_get_size()
ipv4: igmp: Fix potential UAF in igmp_gq_start_timer()
ipv6: mcast: Fix potential UAF in MLD delayed work
Erich E. Hoover (1):
USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD
Fabio Porcedda (1):
USB: serial: option: add Telit Cinterion FE990D50 compositions
Fan Wu (2):
usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
can: esd_usb: kill anchored URBs before freeing netdevs
Farhad Alemi (1):
cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed
Felix Gu (6):
watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure
pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output()
spi: ep93xx: fix double-free of zeropage on DMA setup failure
crypto: marvell/octeontx - fix DMA cleanup using wrong loop index
crypto: cavium/cpt - fix DMA cleanup using wrong loop index
Feng Liu (2):
net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation net/mlx5e: Fix HV VHCA stats agent registration race
Feng Wu (1):
netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
Fernando Fernandez Mancera (7):
netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures
netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock
netfilter: nf_conncount: prevent connlimit drops for early confirmed ct
ipv6: fix error handling in disable_ipv6 sysctl
ipv6: fix error handling in ignore_routes_with_linkdown sysctl
ipv6: fix error handling in forwarding sysctl
ipv6: fix error handling in disable_policy sysctl
Filipe Manana (1):
btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs()
Florian Fainelli (1):
perf trace beauty fcntl: Fix build with older kernel headers
Florian Fuchs (2):
Input: maplemouse - fix NULL pointer dereference in open()
mtd: maps: vmu-flash: fix NULL pointer dereference in initialization
Florian Westphal (8):
netfilter: ebtables: module names must be null-terminated
netfilter: nf_conncount: callers must hold rcu read lock
netfilter: nf_reject: skip iphdr options when looking for icmp header
netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak
netfilter: nft_compat: ebtables emulation must reject non-bridge targets
netfilter: nf_nat_sip: reload possible stale data pointer
ipvs: reload ip header after head reallocation
netfilter: ebtables: zero chainstack array
Frank Li (2):
dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK
media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code
Fredric Cover (1):
smb: client: use kvzalloc() for megabyte buffer in simple fallocate
Fredrik M Olsson (1):
rtc: ds1307: Fix off-by-one issue with wday for rx8130
Fuad Tabba (1):
arm64: sysreg: Correct sign definitions for EIESB and DoubleLock
Fushuai Wang (1):
cpufreq: intel_pstate: Sync policy->cur during CPU offline
Geert Uytterhoeven (1):
firmware: arm_scmi: Fix OOB in scmi_power_name_get()
Geetha sowjanya (2):
octeontx2-af: mcs: Fix unsupported secy stats read
octeontx2-pf: mcs: Fix mcs resources free on PF shutdown
Genjian Zhang (1):
dm thin metadata: fix superblock refcount leak on snapshot shadow failure
Georgiy Osokin (1):
HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()
Gerald Schaefer (1):
s390/monwriter: Reject buffer reuse with different data length
Gil Portnoy (9):
ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL
ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
ksmbd: add a permission check for FSCTL_SET_ZERO_DATA
ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY
ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION
ksmbd: add per-handle permission check to FILE_LINK_INFORMATION
ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE
ksmbd: fix use-after-free of fp->owner.name in durable handle owner check
ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd
Giovanni Cabiddu (2):
crypto: qat - validate RSA CRT component lengths
crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()
Gleb Markov (1):
cxgb4: Fix decode strings dump for T6 adapters
Goetz Goerisch (2):
Revert "crypto: talitos - rename first/last to first_desc/last_desc" Revert "crypto: talitos - fix SEC1 32k ahash request limitation"
Greg Kroah-Hartman (2):
sysfs: clamp show() return value in sysfs_kf_read() Linux 6.6.145
Griffin Kroah-Hartman (2):
usb: gadget: function: rndis: add length check to response query
usb: gadget: function: rndis: add length check for header
Guangshuo Li (9):
firmware_loader: fix device reference leak in firmware_upload_register() IB/mlx4: Fix refcount leak in add_port() error path
ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO
ksmbd: fix use-after-free in same_client_has_lease()
staging: most: video: avoid double free on video register failure
cifs: validate DFS referral string offsets
smb: client: fix overflow in passthrough ioctl bounds check
gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path
mfd: sm501: Fix reference leak on failed device registration
Guanyou.Chen (1):
sched: restore timer_slack_ns when resetting RT policy on fork
Guenter Roeck (1):
hwmon: (pmbus) Fix passing events to regulator core
Gui-Dong Han (1):
KEYS: Use acquire when reading state in keyring search
Guilherme Ivo Bozi (1):
iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling
Guillermo Rodríguez (1):
i2c: stm32f7: truncate clock period instead of rounding it
Guixin Liu (2):
PCI: Introduce named defines for PCI ROM
PCI: Check ROM header and data structure addr before accessing
Guoniu Zhou (1):
dt-bindings: power: imx93: Add MIPI PHY power domain
Hangbin Liu (4):
net: team: rename team to team_core for linking
net: add a common function to compute features for upper devices
bonding: use common function to compute the features
bonding: fix xfrm offload feature setup on active-backup mode
Hannes Reinecke (1):
nvmet: return DHCHAP status codes from nvmet_setup_auth()
Hao Qin (2):
Bluetooth: btusb: mediatek: reset the controller before downloading the fw
Bluetooth: btusb: mediatek: add MT7922 subsystem reset
Hao-Qun Huang (2):
staging: vme_user: fix location monitor leak in fake bridge
staging: vme_user: fix location monitor leak in tsi148 bridge
Haofeng Li (1):
ksmbd: reject undersized DACLs before parsing ACEs
Haoxiang Li (13):
smb: client: Fix next buffer leak in receive_encrypted_standard()
usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
usb: mtu3: unmap request DMA on queue failure
Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure
rtc: cmos: unregister HPET IRQ handler on probe failure
KVM: s390: pci: Fix GISC refcount leak on AIF enable failure
net: sparx5: unregister blocking notifier on init failure
scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path
scsi: elx: efct: Fix I/O leak on unsupported additional CDB
net: wwan: t7xx: destroy DMA pool on CLDMA late init failure
net: ixp4xx_hss: fix duplicate HDLC netdev allocation
net: liquidio: fix BAR resource leak on PF number failure
fsl/fman: Free init resources on KeyGen failure in fman_init()
Haoze Xie (1):
netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst
Harman Kalra (1):
octeontx2-af: fix VF bringup affecting PF promiscuous state
Harshal Dev (1):
arm64: dts: qcom: sm8450: Add power-domain and iface clk for ice node
Heiko Carstens (1):
s390/process: Fix kernel thread function pointer type
Henrique Carvalho (6):
smb: client: fix query directory replay double-free
smb: client: fix query_info() replay double-free
smb: client: fix double-free in SMB2_ioctl() replay
smb: client: fix change notify replay double-free
smb: client: fix double-free in SMB2_open() replay
smb: client: fix double-free in SMB2_close() replay
Herbert Xu (2):
crypto: crypto4xx - Remove ahash-related code
crypto: rng - Free default RNG on module exit
Herman van Hazendonk (1):
iio: common: st_sensors: honour channel endianness in read_axis_data
Hongchen Zhang (1):
LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect()
Hongyan Xia (1):
sched/fair: Fix cpu_util runnable_avg arithmetic
Huacai Chen (2):
LoongArch: Report dying CPU to RCU in stop_this_cpu()
LoongArch: Add PIO for early access before ACPI PCI root register
Hui Wang (1):
ring-buffer: Fix event length with forced 8-byte alignment
Hui Zhu (1):
vmalloc: fix NULL pointer dereference in is_vm_area_hugepages()
Huihui Huang (1):
tracing: Prevent out-of-bounds read in glob matching
Huiwen He (2):
smb/client: always return a value for FS_IOC_GETFLAGS smb/client: preserve errors from smb2_set_sparse()
HyeongJun An (6):
ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
ALSA: seq: Fix partial userptr event expansion
ASoC: codecs: hdac_hdmi: Validate written enum value
ASoC: fsl: fsl_audmix: Validate written enum values
ASoC: tegra: tegra210_ahub: Validate written enum value
hwmon: (asus_atk0110) Check package count before accessing element
Hyunwoo Kim (3):
KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU
KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU
KVM: arm64: vgic: Check the interrupt is still ours before migrating it
Ian Bridges (2):
fbcon: fix NULL pointer dereference for a console without vc_data
ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits
Ibrahim Hashimov (1):
ksmbd: fix integer overflow in set_file_allocation_info()
Icenowy Zheng (1):
dmaengine: qcom: gpi: set DMA_PRIVATE capability
Ido Schimmel (1):
bridge: stp: Fix a potential use-after-free when deleting a bridge
Ihor Solodrai (1):
selftests/bpf: Add simple strscpy() implementation
Ilpo Järvinen (6):
PCI: Prevent resource tree corruption when BAR resize fails
PCI: Free saved list without holding pci_bus_sem
PCI: Fix restoring BARs on BAR resize rollback path
PCI: Add kerneldoc for pci_resize_resource()
PCI: Move Resizable BAR code to rebar.c
serial: 8250_mid: Remove 8250_pci usage
Ioana Ciornei (1):
dpaa2-switch: fix VLAN upper check not rejecting bridge join
Ion Agorria (1):
drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove
Ionut Nechita (1):
scsi: sas: Skip opt_sectors when DMA reports no real optimization hint
Ivan Abramov (1):
ieee802154: Remove WARN_ON() in cfg802154_pernet_exit()
J. Neuschäfer (1):
HID: wiimote: Fix table layout and whitespace errors
Jacob Moroni (3):
RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs RDMA/irdma: Fix OOB read during CQ MR registration RDMA/irdma: Initialize iwmr->access during MR registration
Jaewon Yang (1):
tpm: Make the TPM character devices non-seekable
Jakub Kicinski (1):
net: psample: fix info leak in PSAMPLE_ATTR_DATA
Jamal Hadi Salim (5):
net/sched: cls_flow: Dont expose folded kernel pointers net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants
James Kim (1):
char: tlclk: fix use-after-free in tlclk_cleanup()
James Raphael Tiovalen (1):
macsec: fix promiscuity refcount leak in macsec_dev_open()
Jamie Nguyen (2):
fs/ntfs3: fix mount failure on 64K page-size kernels fs/ntfs3: resize log->one_page_buf when adopting on-disk page size
Jan Kara (2):
writeback: Avoid contention on wb->list_lock when switching inodes
writeback: Fix use after free in inode_switch_wbs_work_fn()
Jann Horn (3):
bpf,fork: wipe ->bpf_storage before bailouts that access it
proc: protect ptrace_may_access() with exec_update_lock (FD links)
proc: protect ptrace_may_access() with exec_update_lock (part 1)
Janne Grunau (1):
watchdog: apple: Add "apple,t8103-wdt" compatible
Jared Baldridge (1):
usb: cdc_acm: Add quirk for Uniden BC125AT scanner
Jarkko Sakkinen (1):
tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()
Jason Gunthorpe (4):
IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path() IB/mlx5: Don't take the rereg_mr fallback without a new translation IB/mlx5: Properly support implicit ODP rereg_mr
IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified
Javier Carrasco (1):
iio: light: veml6030: fix channel type when pushing events
Jean-Baptiste Maneyrol (4):
iio: imu: inv_icm42600: fix timestamp clock period by using lower value
iio: invensense: fix timestamp glitches when switching frequency
iio: imu: inv_icm42600: stabilized timestamp in interrupt
iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading
Jeff Layton (1):
nfsd: reset write verifier on deferred writeback errors
Jeffrey Altman (1):
rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc
Jens Emil Schulz Østergaard (1):
net: microchip: vcap: fix races on the shared Super VCAP block
Jeremy Linton (1):
ACPI: CPPC: Suppress UBSAN warning caused by field misuse
Jessica Zhang (2):
drm/msm/dp: fix HPD state status bit shift value drm/msm/dp: Fix the ISR_* enum values
Jiakai Xu (1):
PM: sleep: Use complete() in device_pm_sleep_init()
Jian Zhang (1):
cifs: remove all cifs files before kill super
Jianbo Liu (1):
bonding: add ESP offload features when slaves support
Jiande Lu (1):
Bluetooth: btmtk: Fix wait_on_bit_timeout interruption during shutdown
Jiayuan Chen (4):
bonding: fix type confusion in bond_setup_by_slave()
team: fix header_ops type confusion with non-Ethernet ports mm/vmscan: flush deferred TLB before freeing large folios net/sched: cls_bpf: prevent unbounded recursion in offload rollback
Jihed Chaibi (1):
ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint
Jimmy Hu (1):
usb: gadget: udc: Fix use-after-free in gadget_match_driver
Jiri Olsa (1):
bpf: Add missing access_ok call to copy_user_syms
Jiri Slaby (SUSE) (1):
PCI: controller: Use dev_fwnode() instead of of_fwnode_handle()
Jisheng Zhang (1):
spi: dw: fix wrong BAUDR setting after resume
Joanne Koong (1):
fuse: re-lock request before returning from fuse_ref_folio()
Johan Hovold (22):
i2c: core: fix irq domain leak on adapter registration failure
i2c: core: fix hang on adapter registration failure
i2c: core: fix NULL-deref on adapter registration failure
i2c: core: fix adapter debugfs creation
i2c: core: fix adapter registration race
Bluetooth: btusb: fix use-after-free on registration failure
Bluetooth: btusb: fix use-after-free on marvell probe failure
Bluetooth: btusb: fix wakeup source leak on probe failure
virtio-mmio: fix device release warning on module unload
USB: idmouse: fix use-after-free on disconnect race
USB: ldusb: fix use-after-free on disconnect race
USB: iowarrior: fix use-after-free on disconnect
USB: legousbtower: fix use-after-free on disconnect race
USB: serial: keyspan_pda: fix information leak
USB: serial: digi_acceleport: fix broken rx after throttle
USB: serial: digi_acceleport: fix hard lockup on disconnect
USB: serial: digi_acceleport: fix write buffer corruption
USB: ulpi: fix memory leak on registration failure
i2c: core: fix adapter deregistration race
MIPS: ip22-gio: fix gio device memory leak
MIPS: ip22-gio: fix kfree() of static object
MIPS: ip22-gio: fix device reference leak in probe
Johannes Thumshirn (1):
btrfs: zoned: don't account data relocation space-info in statfs free space
John Johansen (3):
apparmor: advertise the tcp fast open fix is applied
apparmor: fix rawdata_f_data implicit flex array
apparmor: fix label can not be immediately before a declaration
John Madieu (1):
ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble
Jon Hunter (1):
arm64: tegra: Fix Tegra234 MGBE PTP clock
Jonas Jelonek (1):
MIPS: smp: report dying CPU to RCU in stop_this_cpu()
Joseph Qi (2):
ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release()
ocfs2: add journal NULL check in ocfs2_checkpoint_inode()
Joshua Crofts (5):
iio: light: opt3001: fix missing state reset on timeout
iio: light: si1133: reset counter to prevent race condition
iio: light: si1133: prevent race condition on timeout
iio: magnetometer: ak8975: fix potential kernel stack memory leak
hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig
Jozsef Kadlecsik (4):
netfilter: ipset: Fix data race between add and dump in all hash types
netfilter: ipset: annotate "pos" for concurrent readers/writers
netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types
netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()
Julian Anastasov (2):
ipvs: ensure inner headers in ICMP errors are in headroom
ipvs: fix more places with wrong ipv6 transport offsets
Junrui Luo (4):
vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc
coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()
jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit() powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()
Kartik Rajput (2):
clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances
dmaengine: tegra: Fix burst size calculation
Keshav Verma (1):
f2fs: fix listxattr handling of corrupted xattr entries
Kiryl Shutsemau (1):
userfaultfd: gate must_wait writability check on pte_present()
Koichiro Den (5):
NTB: epf: Avoid calling pci_irq_vector() from hardirq context
NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()
NTB: epf: Make db_valid_mask cover only real doorbell bits
NTB: epf: Report 0-based doorbell vector via ntb_db_event()
NTB: epf: Fix doorbell bitmask and IRQ vector handling
Konstantin Komarov (7):
fs/ntfs3: fsync files by syncing parent inodes fs/ntfs3: handle attr_set_size() errors when truncating files fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio() fs/ntfs3: add bounds check to run_get_highest_vcn() fs/ntfs3: bound DeleteIndexEntryAllocation memmove length fs/ntfs3: bound attr_off in UpdateResidentValue against data_off fs/ntfs3: validate lcns_follow in log_replay conversion
Krzysztof Kozlowski (3):
arm64: dts: qcom: sdm845-mezzanine: Fix camss ports unit_address_vs_reg warning
dt-bindings: pinctrl: nvidia,tegra234: Add missing required block
regulator: scmi: Simplify with scoped for each OF child loop
Krzysztof Wilczyński (3):
alpha/PCI: Add security_locked_down() check to pci_mmap_resource() alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs
proc: only bump parent nlink when registering directories
Kuldeep Singh (1):
arm64: dts: qcom: sm8450: Fix ICE reg size
Kunihiko Hayashi (1):
spi: uniphier: Fix completion initialization order before devm_request_irq()
Kuniyuki Iwashima (4):
vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().
net: fib_rules: Don't dump dying fib_rule in fib_rules_dump().
ipv4: fib: Don't ignore error route in local/main tables.
ipv6: mcast: Replace locking comments with lockdep annotations.
Kyle Zeng (2):
ALSA: seq: Clear variable event pointer on read
ocfs2: avoid moving extents to occupied clusters
Lad Prabhakar (1):
PCI: rcar-host: Remove unused LIST_HEAD(res)
Lars Pöschel (1):
spi: xilinx: use FIFO occupancy register to determine buffer size
Lars-Peter Clausen (1):
iio: event: Fix event FIFO reset race
Laxman Acharya Padhya (1):
Bluetooth: btrtl: validate firmware patch bounds
Lee Jones (2):
HID: core: Fix OOB read in hid_get_report for numbered reports
can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF
Leo Yan (2):
selftests/bpf: Initialize operation name before use
coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore
Leon Hwang (3):
bpf: Check tail zero of bpf_prog_info
bpf: Update transport_header when encapsulating UDP tunnel in lwt
bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket
Leon Romanovsky (1):
RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one
Li RongQing (3):
PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro net/mlx5: Fix L3 tunnel entropy refcount leak
fbdev: sm712: Fix operator precedence in big_swap macro
Lianfa Weng (1):
RDMA/hns: Fix warning in poll cq direct mode
Lifeng Zheng (1):
cpufreq: conservative: Simplify frequency limit handling
Lin He (2):
drm/hisilicon/hibmc: move display contrl config to hibmc_probe() drm/hisilicon/hibmc: use clock to look up the PLL value
Linmao Li (1):
ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD
Liviu Stan (2):
iio: temperature: ltc2983: Fix reinit_completion() called after conversion start
iio: temperature: ltc2983: Fix n_wires default bypassing rotation check
Longjun Tang (1):
virtio_net: disable cb when NAPI is busy-polled
Lorenzo Stoakes (1):
tools/testing: add linux/args.h header and fix radix, VMA tests
Lothar Rubusch (1):
crypto: atmel-sha204a - fix blocking and non-blocking rng logic
Louis Kotze (1):
wifi: cfg80211: fix grammar in MLO group key error message
Louis Scalbert (1):
bonding: 3ad: fix mux port state on oper down
Louis-Alexis Eyraud (1):
media: mtk-jpeg: cancel workqueue on release for supported platforms only
Luca Leonardo Scorcia (2):
pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39
pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39
Lucas Tsai (1):
power: supply: core: fix supplied_from allocations
Luiz Augusto von Dentz (4):
Bluetooth: hci_core: Enable buffer flow control for SCO/eSCO
Bluetooth: hci_core: Remove check of BDADDR_ANY in hci_conn_hash_lookup_big_state
Bluetooth: hci_sync: Fix attempting to send HCI_Disconnect to BIS handle
Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev
Lukas Wunner (1):
X.509: Fix validation of ASN.1 certificate header
Lukasz Czapnik (1):
ice: fix AQ error code comparison in ice_set_pauseparam()
Ma Ke (1):
power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak
Maciej W. Rozycki (5):
PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining
MIPS: Fix big-endian stack argument fetching in o32 wrapper
MIPS: DEC: Remove do_IRQ() call indirection
MIPS: DEC: Ensure RTC platform device deregistration upon failure
MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf()
Madhu M (1):
usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode
Maher Sanalla (1):
RDMA/mlx5: Fix undefined shift of user RQ WQE size
Mahesh Vaidya (2):
PCI: altera: Do not dispose parent IRQ mapping
PCI: altera: Fix resource leaks on probe failure
Manish Khadka (2):
HID: letsketch: fix UAF on inrange_timer at driver unbind
HID: appleir: fix UAF on pending key_up_timer in remove()
Manivannan Sadhasivam (5):
PCI: mediatek: Use actual physical address instead of virt_to_phys()
PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count' value of 0
PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count' value of 0
bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path
PCI: mediatek: Fix IRQ domain leak when port fails to enable
Maoyi Xie (16):
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
ALSA: firewire: isight: bound the sample count to the packet payload
Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()
HID: lg-g15: cancel pending work on remove to fix a use-after-free
net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler
net: thunderbolt: Fix frags[] overflow by bounding frame_count
xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink
net: sit: require CAP_NET_ADMIN in the device netns for changelink
net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink
net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink
net: ipip: require CAP_NET_ADMIN in the device netns for changelink
net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink
net: wwan: iosm: bound device offsets in the MUX downlink decoder
memstick: ms_block: reject a card that reports too many blocks
Marc Zyngier (5):
arm64: sysreg: Add layout for ID_AA64MMFR4_EL1
arm64: Treat HCR_EL2.E2H as RES1 when ID_AA64MMFR4_EL1.E2H0 is negative
arm64: Fix early handling of FEAT_E2H0 not being implemented
arm64: Revamp HCR_EL2.E2H RES1 detection
KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers
Marco Elver (1):
Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref
Marco Nenciarini (1):
PCI: Skip Resizable BAR restore on read error
Mario Limonciello (1):
drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm
Mark Rutland (3):
KVM: arm64: Initialize HCR_EL2.E2H early
arm64: fpsimd: Fix type mismatch in sme_{save,load}_state()
arm64: fpsimd: Fix type mismatch in sve_{save,load}_state()
Mark Tomlinson (1):
PCI: iproc: Restore .map_irq() for the platform bus driver
Markus Elfring (1):
smb: client: Improve unlocking of a mutex in cifs_get_swn_reg()
Martin Kaiser (3):
tracing: probes: fix typo in a log message
tracing: eprobe: read the complete FILTER_PTR_STRING pointer
riscv: probes: save original sp in rethook trampoline
Martin Wilck (2):
scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans"
scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished()
Masami Hiramatsu (Google) (2):
tracing/events: Fix to check the simple_tsk_fn creation tracing/probes: Fix double addition of offset for @+FOFFSET
Mathias Krause (1):
netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()
Matthew Rosato (1):
KVM: s390: pci: Fix handling of AIF enable without AISB
Matthias Feser (1):
serial: 8250_omap: clear rx_running on zero-length DMA completes
Matti Vaittinen (1):
hwmon: adm1275: Prevent reading uninitialized stack
Matvey Kovalev (2):
afs: fix NULL pointer dereference in afs_get_tree()
qede: fix out-of-bounds check for cqe->len_list[]
Mauricio Faria de Oliveira (1):
usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
Maxime Bélair (1):
apparmor: fix potential UAF in aa_replace_profiles
Maxwell Doose (4):
iio: adc: lpc32xx: Initialize completion before requesting IRQ
iio: adc: spear: Initialize completion before requesting IRQ
iio: chemical: scd30: Cleanup initializations and fix sign-extension bug
fs: efs: remove unneeded debug prints
Michael Bommarito (25):
NFSv4/flexfiles: reject zero filehandle version count
hwrng: virtio: clamp device-reported used.len at copy_data()
udf: validate free block extents against the partition length RDMA/siw: bound Read Response placement to the RREAD length
libbpf: Harden parse_vma_segs() path parsing
tipc: require net admin for TIPCv2 netlink mutators
tipc: prevent snt_unacked underflow on CONN_ACK
tipc: reject inverted service ranges from peer bindings
minix: avoid overflow in bitmap block count calculation
net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}
ntfs3: cap RESTART_TABLE free-chain walker at rt->used
ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head
ntfs3: validate split-point offset in indx_insert_into_buffer
ocfs2: reject dinodes with non-canonical i_mode type
ocfs2: reject dinodes whose i_rdev disagrees with the file type
ocfs2: reject non-inline dinodes with i_size and zero i_clusters
scsi: xen: scsiback: Free the command tag on the TMR submit-failure path
scsi: xen: scsiback: Free unsubmitted command instead of double-putting it
ieee802154: admin-gate legacy LLSEC dump operations
ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation
drbd: reject data replies with an out-of-range payload size
smb: client: resolve SWN tcon from live registrations
Michael Tautschnig (1):
staging: vme_user: bound slave read/write to the kern_buf size
Mike Christie (1):
scsi: target: Remove tcm_loop target reset handling
Mike Snitzer (2):
NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write
Mike Yu (1):
xfrm: Support crypto offload for inbound IPv6 ESP packets not in GRO path
Mikhail Gavrilov (1):
udmabuf: fix DMA direction mismatch in release_udmabuf()
Mikko Perttunen (3):
gpu: host1x: Allow entries in BO caches to be freed
gpu: host1x: Fix iommu_map_sgtable() return value check drm/tegra: Fix iommu_map_sgtable() return value check
Mikulas Patocka (9):
dm-ioctl: report an error if a device has no table
dm-bufio: fix wrong count calculation in dm_bufio_issue_discard
dm-ioctl: fix a possible overflow in list_version_get_info
dm-stats: fix dm_jiffies_to_msec64
dm-stats: fix merge accounting
dm_early_create: fix freeing used table on dm_resume failure
dm-integrity: don't increment hash_offset twice
dm-verity: fix a possible NULL pointer dereference
dm-verity: increase sprintf buffer size
Ming-Hung Tsai (1):
dm thin metadata: fix metadata snapshot consistency on commit failure
Mingyu Wang (1):
fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()
Miquel Raynal (2):
mtd: spi-nor: Drop duplicate Kconfig dependency
mtd: spi-nor: swp: Improve locking user experience
Mohamed Khalfella (1):
i40e: Fix i40e_debug() to use struct i40e_hw argument
Muchun Song (1):
mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE
Muhammad Bilal (2):
Bluetooth: L2CAP: validate option length before reading conf opt value
netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read
Muhammet Kaan KILINÇ (1):
crypto: algif_skcipher - force synchronous processing on trees without ctx->state
Myeonghun Pak (6):
usb: typec: tcpci_rt1711h: unregister TCPCI port with devres
HID: wacom: stop hardware after post-start probe failures
usb: sl811-hcd: disable controller wakeup on remove
USB: misc: uss720: unregister parport on probe failure
usb: typec: anx7411: use devm_pm_runtime_enable()
ata: sata_gemini: unwind clocks on IDE pinctrl errors
Namjae Jeon (6):
ksmbd: serialize QUERY_DIRECTORY requests per file
ksmbd: require source read access for duplicate extents
ksmbd: run set info with opener credentials
ksmbd: use opener credentials for delete-on-close
ksmbd: use opener credentials for FSCTL mutations
ksmbd: track the connection owning a byte-range lock
Nas Chung (1):
media: v4l2-common: Add YUV24 format info
NeilBrown (2):
nfsd: move name lookup out of nfsd4_list_rec_dir()
nfsd: change nfs4_client_to_reclaim() to allocate data
Neill Kapron (1):
usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile
Nickolay Goppen (1):
arm64: dts: qcom: sdm630: describe adsp_mem region properly
Nikita Zhandarovich (1):
hwmon: (it87) Clamp negative values to zero in set_fan()
Nikolay Kulikov (1):
staging: rtl8723bs: fix spaces around binary operators
Nilay Shroff (1):
nvme-multipath: fix flex array size in struct nvme_ns_head
Norbert Manthey (1):
smb: client: mask server-provided mode to 07777 in modefromsid
Nuno Sá (1):
dmaengine: Fix possible use after free
Nuoqi Gui (2):
bpf: Fix stack slot index in nospec checks
seg6: validate SRH length before reading fixed fields
Oleg Nesterov (1):
seqlock: Change do_task_stat() to use scoped_seqlock_read()
Oleksij Rempel (1):
net: usb: lan78xx: move functions to avoid forward definitions
Oliver Hartkopp (3):
can: isotp: use unconditional synchronize_rcu() in isotp_release()
can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure
can: bcm: add missing rcu list annotations and operations
Oliver Neukum (1):
usb: iowarrior: remove inherent race with minor number
Ondrej Mosnacek (1):
selinux: fix incorrect execmem checks on overlayfs
Ovidiu Panait (1):
net: bcmgenet: Use weighted round-robin TX DMA arbitration
Pablo Neira Ayuso (2):
netfilter: conntrack: revert ct extension genid infrastructure
netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp
Patrisious Haddad (1):
RDMA/mlx5: Remove raw RSS QP restrack tracking
Paul Greenwalt (1):
ice: fix ice_init_link() error return preventing probe
Paul Louvel (14):
crypto: talitos - fix SEC1 32k ahash request limitation
crypto: talitos - rename first/last to first_desc/last_desc
crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header
crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1
crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function
crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function
crypto: talitos - move code in current_desc_hdr() into a standalone function
crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor
crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue
crypto: talitos/hash - drop workqueue mechanism for SEC1
crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request
crypto: talitos/hash - remove useless wrapper
crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation
gpio-f7188x: Add support for NCT6126D version B
Paul Menzel (1):
usb: typec: ucsi: cancel pending work on system suspend
Pauli Virtanen (5):
Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length
Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready
Bluetooth: SCO: hold sk properly in sco_conn_ready
Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister
Bluetooth: separate CIS_LINK and BIS_LINK link types
Pawan Gupta (6):
bpf: Support for hardening against JIT spraying x86/bugs: Enable IBPB flush on BPF JIT allocation
bpf: Restrict JIT predictor flush to cBPF
bpf: Skip redundant IBPB in pack allocator
bpf: Prefer packs that won't trigger an IBPB flush on allocation
bpf: Prefer dirty packs for eBPF allocations
Pedro Falcato (1):
mm: do file ownership checks with the proper mount idmap
Peng Fan (3):
arm64: dts: imx8x-colibri: Correct SODIMM PAD settings
pmdomain: imx: Fix i.MX8MP power notifier
pmdomain: imx: Fix i.MX8MP VC8000E power up sequence
Pengjie Zhang (2):
cpufreq: Documentation: fix sampling_down_factor range
cpufreq: Documentation: fix conservative governor freq_step description
Pengpeng Hou (15):
iio: adc: ti-ads124s08: Return reset GPIO lookup errors
evm: terminate and bound the evm_xattrs read buffer
tracing: Bound synthetic-field strings with seq_buf
sparc: led: avoid trimming a newline from empty writes
gpio: mlxbf3: fail probe if gpiochip registration fails
spi: sh-msiof: abort transfers when reset times out
gpio: mvebu: fail probe if gpiochip registration fails
gpio: htc-egpio: use managed gpiochip registration
hwmon: (w83627hf) remove VID sysfs files on error and remove
hwmon: (w83793) remove vrm sysfs file on probe failure
mtd: onenand: samsung: report DMA completion timeouts
mtd: mchp23k256: use SPI match data for chip caps
mtd: rawnand: fsl_ifc: return errors for failed page reads
mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout
mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout
Peter Ujfalusi (5):
ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc
ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
Peter Zijlstra (1):
seqlock: Introduce scoped_seqlock_read()
Petr Wozniak (1):
net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy
Phillip Varney (1):
clk: qcom: a53: Corrected frequency multiplier for 1152MHz
Philo Lu (1):
virtio_net: Support dynamic rss indirection table size
Pratham Gupta (1):
netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump
Prathamesh Deshpande (2):
IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference
Qi Zheng (2):
mm: shrinker: fix NULL pointer dereference in debugfs
mm: shrinker: remove redundant shrinker_rwsem in debugfs operations
Qianfeng Rong (1):
netfilter: ebtables: Use vmalloc_array() to improve code
Qiang Ma (1):
spi: hisi-kunpeng: Use dev_err_probe() for host registration failure
Qihang (1):
gue: validate REMCSUM private option length
Qihang Tang (2):
vduse: hold vduse_lock across IDR lookup in open path vhost/vdpa: validate virtqueue index in mmap and fault paths
Qing Ming (1):
vhost/net: complete zerocopy ubufs only once
Qingshuang Fu (1):
irqchip/ts4800: Fix missing chained handler cleanup on remove
Qu Wenruo (4):
btrfs: do not trim a device which is not writeable
btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC
btrfs: fix false IO failure after falling back to buffered write
btrfs: fix incorrect buffered IO fallback for append direct writes
Quang Nguyen (1):
spi: rpc-if: Use correct device for hardware reinitialization on resume
Rafael Beims (1):
wifi: mwifiex: fix permanently busy scans after multiple roam iterations
Rafael J. Wysocki (9):
ACPI: NFIT: core: Fix possible NULL pointer dereference
thermal: hwmon: Fix critical temperature attribute removal x86/platform/olpc: xo15: Drop wakeup source on driver removal platform/x86: xo15-ebook: Fix wakeup source and GPE handling
ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup
ACPI: driver: Check ACPI_COMPANION() against NULL during probe
ACPI: bus: Introduce devm_acpi_install_notify_handler()
ACPI: NFIT: core: Use devm_acpi_install_notify_handler()
ACPI: NFIT: core: Fix possible deadlock and missing notifications
Raghavendra Rao Ananta (1):
vfio/pci: Use a private flag to prevent power state change with VFs
Randy Dunlap (2):
bitops: use common function parameter names
seqlock: fix scoped_seqlock_read kernel-doc
Ranjan Kumar (1):
Input: elan_i2c - prevent division by zero and arithmetic underflow
Ratheesh Kannoth (2):
PCI: host-common: Request bus reassignment when not probe-only
octeontx2-pf: Fix leak of SQ timestamp buffer on teardown
Rene Rebe (1):
ia64: Make acpi_cpufreq_cpu_exit return void
Renjiang Han (3):
media: qcom: venus: drop extra padding in NV12 raw size calculation
media: qcom: venus: relax encoder frame/blur dimension steps on v4
media: qcom: venus: relax encoder frame/blur step size on v6
Ricardo Neri (1):
thermal: intel: Fix dangling resources on thermal_throttle_online() failure
Ricardo Ribalda (4):
media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe
media: uvcvideo: Avoid partial metadata buffers
media: uvcvideo: Fix buffer sequence in frame gaps
media: uvcvideo: Fix sequence number when no EOF
Ricardo Robaina (2):
audit: add audit_log_nf_skb helper function
audit: fix potential integer overflow in audit_log_n_hex()
Richard Fitzgerald (2):
ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails
Richard Zhu (1):
PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
Rob Herring (Arm) (1):
dt-bindings: net: renesas,ether: Drop example "ethernet-phy-ieee802.3-c22" fallback
Rochan Avlur (1):
exfat: preserve benign secondary entries during rename and move
Rodrigo Lugathe da Conceição Alves (1):
USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub
Roman Vivchar (1):
i2c: mediatek: fix WRRD for SoCs without auto_restart option
Ronaldo Nunez (1):
pwm: imx27: Fix variable truncation in .apply()
Ronan Dalton (1):
rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231
Rong Zhang (1):
PCI: loongson: Do not ignore downstream devices on external bridges
Rongguang Wei (1):
s390/zcrypt: Remove the empty file
Rosen Penev (4):
mips: ralink: mt7621: add missing __iomem
mips: n64: add __iomem for writel call
HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter
net: gianfar: dispose irq mappings on probe failure and device removal
Rui Qi (2):
riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe
perf: Fix off-by-one stack buffer overflow in kallsyms__parse()
Ruijie Li (1):
crypto: pcrypt - restore callback for non-parallel fallback
Ruipeng Qi (1):
f2fs: fix potential deadlock in f2fs_balance_fs()
Runyu Xiao (13):
iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ
usb: dwc3: run gadget disconnect from sleepable suspend context
gpio: eic-sprd: use raw_spinlock_t in the irq startup path io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item
kcm: use WRITE_ONCE() when changing lower socket callbacks
netfilter: nft_synproxy: stop bypassing the priv->info snapshot
hwmon: (occ) unregister sysfs devices outside occ lock
wifi: rt2x00: avoid full teardown before work setup in probe
mmc: vub300: defer reset until cmd_mutex is unlocked
iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ
coresight: etb10: restore atomic_t for shared reading state
gpio: sch: use raw_spinlock_t in the irq startup path
Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock
Ruoyu Wang (6):
spi: meson-spifc: fix runtime PM leak on remove
net: wwan: t7xx: check skb_clone in control TX
apparmor: check label build before no_new_privs test
net: marvell: prestera: initialize err in prestera_port_sfp_bind
net: sungem: fix probe error cleanup
mtd: slram: remove failed entries from the device list
Ryan Lee (1):
apparmor: grab ns lock and refresh when looking up changehat child profiles
Ryan Roberts (3):
arm64/mm: convert READ_ONCE(*ptep) to ptep_get(ptep) arm64/mm: convert set_pte_at() to set_ptes(..., 1) arm64/mm: convert ptep_clear() to ptep_get_and_clear()
Ryder Lee (3):
wifi: mt76: mt7915: fix potential tx_retries underflow
wifi: mt76: mt7921: fix potential tx_retries underflow
PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port()
Sabrina Dubroca (1):
espintcp: use sk_msg_free_partial to fix partial send
Sagi Grimberg (2):
nvmet-tcp: Fix potential UAF when ddgst mismatch pNFS/filelayout: fix cheking if a layout is striped
Sam Day (1):
usbip: vudc: fix NULL deref in vep_dequeue()
Samuel Holland (2):
media: cedrus: Fix failure to clean up hardware on probe failure
bus: sunxi-rsb: Always check register address validity
Samuel Moelius (5):
Bluetooth: hci: validate codec capability element length
Bluetooth: vhci: validate devcoredump state before side effects net/sched: hhf: clear heavy-hitter state on reset net/sched: cake: reject overhead values that underflow length dm era: fix out-of-bounds memory access for non-zero start sector
Samuel Page (2):
tipc: fix out-of-bounds read in broadcast Gap ACK blocks
Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete
Sandipan Das (3):
perf/x86/amd/core: Always use the NMI latency mitigation perf/x86/amd/lbr: Fix kernel address leakage perf/x86/amd/brs: Fix kernel address leakage
Sang-Heon Jeon (1):
mm/fake-numa: fix under-allocation detection in uniform split
Sanjay Chitroda (1):
iio: accel: mma8452: handle I2C read error(s) in mma8452_read()
Sanman Pradhan (1):
xfrm: use compat translator only for u64 alignment mismatch
Sara Venkatesh (1):
RDMA/srpt: fix integer overflow in immediate data length check
Saravana Kannan (1):
Revert "treewide: Fix probing of devices in DT overlays"
Sayali Patil (2):
selftests/mm: clarify alternate unmapping in compaction_test selftests/mm: allow PUD-level entries in compound testcase of hmm tests
Sean Christopherson (6):
KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()
KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs
KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode iommu/amd: Fix a stale comment about which legacy mode is user visible
crypto: ccp - Treat zero-length cert chain as query for blob lengths
KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs
Sean Wang (1):
Bluetooth: btmtk: apply the common btmtk_fw_get_filename
Sebastian Alba Vives (2):
fpga: dfl: add bounds check in dfh_get_param_size()
fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header()
Sebastian Andrzej Siewior (1):
net: Drop the lock in skb_may_tx_timestamp()
Sechang Lim (2):
bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check net/sched: act_bpf: use rcu_dereference_bh() to read the filter
Sen Wang (1):
ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode
SeongJae Park (4):
mm/damon/ops-common: handle extreme intervals in damon_hot_score() mm/damon/core: make charge_addr_from aware of end-address exclusivity mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs() mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error
Sergey Senozhatsky (2):
Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
mailbox: mtk-adsp: fix UAF during device teardown
Sergey Shtylyov (1):
of: cpu: add check in __of_find_n_match_cpu_property()
Seungjin Bae (2):
usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control()
usb: host: max3421: Reject hub port requests for non-existent ports
Shakeel Butt (1):
mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()
Shengjiu Wang (2):
dmaengine: imx-sdma: Refine spba bus searching in probe
ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count
Shigeru Yoshida (1):
qede: fix off-by-one in BD ring consumption on build_skb failure
Shin-Yi Lin (1):
wifi: rtw89: Correct data type for scan index to avoid infinite loop
Shitalkumar Gandhi (3):
net: ethernet: sunplus: spl2sw: fix phy_node refcount leak in remove
ieee802154: ca8210: fix cas_ctl leak on spi_async failure
ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit
Shivam Kumar (1):
nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path
Shoichiro Miyamoto (2):
smb: client: restrict implied bcc[0] exemption to responses without data area
smb: client: reject overlapping data areas in SMB2 responses
Shuangpeng Bai (3):
usb: typec: class: drop PD lookup reference
nilfs2: fix backing_dev_info reference leak
llc: fix SAP refcount leak in llc_ui_autobind()
Shuvam Pandey (1):
PCI: meson: Propagate devm_add_action_or_reset() failure
Shyam Prasad N (1):
cifs: invalidate cfid on unlink/rename/rmdir
Siddharth Vadapalli (1):
soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy
Siwei Zhang (2):
Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()
Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()
Srinivas Kandagatla (1):
ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback
Srinivas Pandruvada (1):
HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads
Srinivasan Shanmugam (2):
drm/amdkfd: Validate CRIU-restored IDs before idr_alloc drm/amd/display: Add missing kdoc for ALLM parameters
Steffen Klassert (1):
xfrm: Use the XFRM_GRO to indicate a GRO call on input
Stepan Ionichev (6):
iio: gyro: bmg160: bail out when bandwidth/filter is not in table
iio: gyro: bmg160: wait full startup time after mode change at probe
iio: light: tsl2591: return actual error from probe IRQ failure
clk: scpi: Unregister child clock providers on remove
device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id()
rtc: msc313: fix NULL deref in shared IRQ handler at probe
Stephan Gerhold (1):
serial: msm: Disable DMA for kernel console UART
Stephen Dolan (1):
x86/mm: Fix check/use ordering in switch_mm_irqs_off()
Stephen Smalley (1):
selinux: check connect-related permissions on TCP Fast Open
Steven Rostedt (1):
sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT
Subbaraya Sundeep (1):
octeontx2-pf: Clear stats of all resources when freeing resources
Sudeep Holla (1):
firmware: arm_scmi: Read sensor config as 32-bit value
Suman Ghosh (1):
octeontx2-pf: check DMAC extraction support before filtering
Sumanth Korikkar (1):
s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()
Sumit Kumar (1):
bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker()
Sun Jian (1):
bpf: Run generic devmap egress prog on private skb
Sven Eckelmann (14):
batman-adv: gw: acquire ethernet header only after skb realloc
batman-adv: access unicast_ttvn skb->data only after skb realloc
batman-adv: dat: acquire ARP hw source only after skb realloc
batman-adv: bla: reacquire gw address after skb realloc
batman-adv: dat: ensure accessible eth_hdr proto field
batman-adv: dat: fix tie-break for candidate selection
batman-adv: tt: avoid request storms during pending request
batman-adv: fix VLAN priority offset
batman-adv: frag: free unfragmentable packet
batman-adv: frag: fix primary_if leak on failed linearization
batman-adv: tt: prevent TVLV OOB check overflow
batman-adv: retrieve ethhdr after potential skb realloc on RX
batman-adv: ensure minimal ethernet header on TX
batman-adv: clean untagged VLAN on netdev registration failure
Sven Püschel (1):
media: rockchip: rga: fix too small buffer size
Svyatoslav Ryhel (1):
drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered
Taeyang Lee (1):
perf/core: Detach event groups during remove_on_exec
Takashi Iwai (1):
ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
Tao Cui (1):
RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup
Tao Liu (1):
riscv: Prevent NULL pointer dereference in machine_kexec_prepare()
Tetsuo Handa (1):
ocfs2: kill osb->system_file_mutex lock
Thadeu Lima de Souza Cascardo (1):
drm/amdgpu: initialize irq.lock spinlock earlier
Thomas Gleixner (2):
debugobjects: Plug race against a concurrent OOM disable
treewide: Switch/rename to timer_delete[_sync]()
Thomas Zimmermann (1):
drm/rockchip: Test for imported buffers with drm_gem_is_imported()
Thorsten Blum (8):
crypto: caam - use print_hex_dump_devel to guard key hex dumps
crypto: caam - use print_hex_dump_devel to guard key hex dumps again
crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve x86/boot: Validate console=uart8250 baud rate to fix early boot hang x86/boot: Reject too long acpi_rsdp= values
tpm: fix event_size output in tpm1_binary_bios_measurements_show powerpc/pseries: fix memory leak on krealloc failure in papr_init
crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A
Tianchu Chen (1):
nvmet-auth: validate reply message payload bounds against transfer length
Tianxiang Chen (1):
cpufreq: Fix hotplug-suspend race during reboot
Tiezhu Yang (1):
drm/amd: Fix set but not used warnings
Timur Tabi (2):
drm/nouveau/bios: specify correct display fuse register for Ampere and Ada
regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK
Tomi Valkeinen (1):
drm/tidss: Drop extra drm_mode_config_reset() call
Tristan Madani (11):
hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer
wifi: ath9k: fix OOB access from firmware tx status queue ID RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe
RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path
wifi: wcn36xx: fix heap overflow from oversized firmware HAL response
wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication
wifi: wcn36xx: fix OOB read from short trigger BA firmware response
ntfs3: fix out-of-bounds read in decompress_lznt
ocfs2: use kzalloc for quota recovery bitmap allocation hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
Trond Myklebust (1):
nfsd: Don't reset the write verifier on a commit EAGAIN
Trung Nguyen (1):
HID: multitouch: fix out-of-bounds bit access on mt_io_flags
Tyler Baker (1):
usb: gadget: f_fs: initialize reset_work at allocation time
Uwe Kleine-König (3):
slimbus: Convert to platform remove callback returning void
media: nxp: imx8-isi: Convert to platform remove callback returning void
crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0
Val Packett (1):
ASoC: codecs: aw88261: fix incorrect masks for boost regs
Vasiliy Kovalev (1):
net/9p: fix infinite loop in p9_client_rpc on fatal signal
Vasily Khoruzhick (1):
EDAC/i10nm: Don't fail probing if ADXL is missing
Viacheslav Bocharov (1):
pinctrl: meson: restore non-sleeping GPIO access
Viacheslav Dubeyko (1):
hfs/hfsplus: prevent getting negative values of offset/length
Victor Nogueira (3):
net/sched: sch_hfsc: Don't make class passive twice
net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
Vidhu Sarwal (1):
iio: light: al3010: fix incorrect scale for the highest gain range
Vlad Poenaru (1):
bpf: Allow LPM map access from sleepable BPF programs
Vladimir Zapolskiy (1):
gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe
Vlastimil Babka (SUSE) (1):
mm/slab: do not limit zeroing to orig_size when only red zoning is enabled
Wang Jun (1):
soc: fsl: qe: panic on ioremap() failure in qe_reset()
Wang Yan (2):
selftests/net: fix EVP_MD_CTX leak in tcp_mmap
time: Fix off-by-one in compat settimeofday() usec validation
Wasim Nazir (1):
remoteproc: qcom: Fix leak when custom dump_segments addition fails
Wayen Yan (1):
net: ethernet: mtk_ppe: Fix rhashtable leak in mtk_ppe_init error paths
Wei Fang (1):
net: enetc: check the number of BDs needed for xdp_frame
Weili Qian (1):
crypto: hisilicon/qm - disable error report before flr
Weiming Shi (6):
xfs: fail recovery on a committed log item with no regions
crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()
tipc: fix use-after-free of the discoverer in tipc_disc_rcv()
Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()
sctp: validate STALE_COOKIE cause length before reading staleness
Weixin Guo (1):
arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc
WenTao Liang (4):
posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()
power: supply: charger-manager: fix refcount leak in is_full_charged()
scsi: elx: efct: Fix refcount leak in efct_hw_io_abort()
Wenjie Qi (1):
f2fs: validate orphan inode entry count
Wentao Guan (1):
perf: Fix dangling cgroup pointer in cpuctx backport
Wentao Liang (6):
hwrng: jh7110 - fix refcount leak in starfive_trng_read()
mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()
mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() xen/gntdev: fix error handling in ioctl
ata: pata_pxa: Fix DMA channel leak on probe error
regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
Werner Kasselman (2):
drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch() drm/radeon: fix integer overflow in radeon_align_pitch()
William Hansen-Baird (1):
staging: rtl8723bs: core: move constants to right side in comparison
Wolfram Sang (1):
hwspinlock: qcom: avoid uninitialized struct members
Woojin Ji (1):
bpftool: Use libbpf error code for flow dissector query
Wyatt Feng (5):
net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
netfilter: xt_u32: reject invalid shift counts
netfilter: xt_connmark: reject invalid shift parameters
netfilter: xt_cluster: reject template conntracks in hash match
netfilter: xt_nat: reject unsupported target families
Xiang Mei (12):
netfilter: ipset: fix race between dump and ip_set_list resize
netfilter: ebtables: terminate table name before find_table_lock()
bridge: cfm: reject invalid CCM interval at configuration time
virtio-net: fix len check in receive_big()
drm/edid: fix OOB read in drm_parse_tiled_block()
ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().
net, bpf: check master for NULL in xdp_master_redirect()
usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()
net: usb: net1080: validate packet_len before pad-byte access in rx_fixup
net: qualcomm: rmnet: validate MAP frame length before ingress parsing net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket
netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag
Xiang Mei (Microsoft) (1):
netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()
Xiaolei Wang (1):
media: nxp: imx8-isi: Fix use-after-free on remove
Xin Long (2):
sctp: validate embedded address parameter length
sctp: hold socket lock when dumping endpoints in sctp_diag
Xingjing Deng (1):
kconfig: fix potential NULL pointer dereference in conf_askvalue
Xu Kuohai (1):
bpf, lsm: Add disabled BPF LSM hook list
Xu Rao (5):
usb: gadget: f_printer: take kref only for successful open
USB: storage: include US_FL_NO_SAME in quirks mask
USB: usb-storage: ene_ub6250: restore media-ready check
ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone()
scsi: sg: Report request-table problems when any status is set
Xuanqiang Luo (2):
i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource()
llc: fix SAP refcount leak when creating incoming sockets
Xuewen Wang (1):
tools/mm/slabinfo: Fix trace disable logic inversion
Yadan Fan (1):
MIPS: mm: Fix out-of-bounds write in maar_res_walk()
Yichong Chen (2):
tools/mm/slabinfo: fix total_objects attribute name
usbip: tools: support SuperSpeedPlus devices
Yingchao Deng (1):
coresight: cti: Fix DT filter signals silently ignored
Yingjie Gao (1):
watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH
Yiyang Chen (1):
selftests/hid: Cover hid_bpf_get_data() size overflow
Yizhou Zhao (9):
6lowpan: fix NHC entry use-after-free on error path net/9p: fix race condition on rdma->state in trans_rdma.c
ipvs: pass parsed transport offset to state handlers
ipvs: use parsed transport offset in TCP state lookup
ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
netfilter: nf_conncount: fix zone comparison in tuple dedup
netfilter: ecache: fix inverted time_after() check
ipvs: use parsed transport offset in SCTP state lookup
ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
Yong Wang (1):
net: ife: require ETH_HLEN to be pullable in ife_decode()
Yonghong Song (1):
selftests/bpf: Fix bpf_iter/task_vma test
Yousef Alhouseen (5):
Bluetooth: bnep: pin L2CAP connection during netdev registration
Bluetooth: fix UAF in bt_accept_dequeue()
xfs: use null daddr for unset first bad log block
sctp: fix SCTP_RESET_STREAMS stream list length limit
mac802154: remove interfaces with RCU list deletion
Yuanhe Shu (1):
Revert "PCI/MSI: Unmap MSI-X region on error"
Yuezhang Mo (5):
exfat: move free cluster out of exfat_init_ext_entry()
exfat: remove unnecessary read entry in __exfat_rename()
exfat: rename argument name for exfat_move_file and exfat_rename_file
exfat: add exfat_get_dentry_set_by_ei() helper
exfat: move exfat_chain_set() out of __exfat_resolve_path()
Yuho Choi (8):
cpufreq: pcc: fix use-after-free and double free in _OSC evaluation drm/radeon: fix memory leak in radeon_ring_restore() on lock failure
ARM: imx3: Fix CCM node reference leak
ARM: imx31: Fix IIM mapping leak in revision check
ACPI: IPMI: Fix message kref handling on dead device
watchdog: unregister PM notifier on watchdog unregister
clk: at91: keep securam node alive while mapping it irqchip/gic-v3-its: Fix OF node reference leak
Yun Zhou (2):
flow_dissector: check device type before reading ETH_ADDRS
net: mvneta: re-enable percpu interrupt on resume
Yunpeng Tian (1):
fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns
Yunxiang Li (2):
drm/amdgpu: set sub_block_index for mca ras sub-blocks drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free
Yuyang Huang (1):
ipv4: igmp: remove multicast group from hash table on device destruction
Zenm Chen (1):
Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB
Zhan Xusheng (2):
fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory rename
posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()
Zhang Cen (4):
ALSA: seq: midi: Serialize output teardown with event_input
ocfs2: rebase copied fsdlm LVB pointers in locking_state
ocfs2: reject FITRIM ranges shorter than a cluster ocfs2/dlm: require a ref for locking_state debugfs open
Zhang Lixu (1):
iio: hid-sensor-rotation: Fix stale or zero output when reading raw values
Zhang Tianci (2):
vduse: Requeue failed read to send_list head
vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter
Zhang Yi (1):
ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback
Zhang Yuwei (1):
driver core: Use mod_delayed_work to prevent lost deferred probe work
ZhangGuoDong (1):
smb: move some duplicate definitions to common/cifsglob.h
Zhao Dongdong (7):
ALSA: ymfpci: check snd_ctl_new1() return value
ALSA: cmipci: check snd_ctl_new1() return value
ALSA: es1938: check snd_ctl_new1() return value
ALSA: gus: check snd_ctl_new1() return value
ALSA: ice1712: check snd_ctl_new1() return value
reset: sunxi: fix memory region leak on ioremap failure
ALSA: aoa: check snd_ctl_new1() return value
Zhao Zhang (2):
smb: client: fix double-free in SMB2_flush() replay
bpf: Reject fragmented frames in devmap
ZhengYuan Huang (1):
ocfs2: don't BUG_ON an invalid journal dinode
Zhengchuan Liang (1):
net: atm: reject out-of-range traffic classes in QoS validation
Zhenhao Wan (1):
RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg
Zhiling Zou (1):
wifi: mac80211: free ack status frame on TX header build failure
Zhixing Chen (1):
netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop
Zhu Yanjun (1):
RDMA/rxe: Fix a use-after-free problem in rxe_mmap
Zide Chen (1):
perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box()
Zihan Xi (3):
smb: client: use unaligned reads in parse_posix_ctxt()
smb: client: harden POSIX SID length parsing net/sched: act_ct: preserve tc_skb_cb across defragmentation
Zijing Yin (1):
net: af_key: initialize alg_key_len for IPComp states
Zijun Hu (1):
Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device
Zilin Guan (2):
media: atomisp: Fix memory leak in atomisp_fixed_pattern_table()
afs: use kvfree() to free memory allocated by kvcalloc()
Zishun Yi (1):
riscv: cacheinfo: Fix node reference leak in populate_cache_leaves
Zygmunt Krynicki (3):
apparmor: aa_label_alloc use aa_label_free on alloc failure
apparmor: aa_getprocattr free procattr leak on format failure
apparmor: put secmark label after secid lookup
longlong yan (1):
tools/virtio: check mmap return value in vringh_test
zhoumin (1):
EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_info
胡连勤 (1):
usb: xhci: Fix sleep in atomic context in xhci_free_streams()
Greg Kroah-Hartman
maintainerDocumentation/admin-guide/pm/cpufreq.rst +3 -3
@@ -499,7 +499,7 @@ This governor exposes the following tunables: of those tasks above 0 and set this attribute to 1. ``sampling_down_factor`` - Temporary multiplier, between 1 (default) and 100 inclusive, to apply to + Temporary multiplier, between 1 (default) and 100000 inclusive, to apply to the ``sampling_rate`` value if the CPU load goes above ``up_threshold``. This causes the next execution of the governor's worker routine (after
@@ -569,8 +569,8 @@ This governor exposes the following tunables: 100 (5 by default). This is how much the frequency is allowed to change in one go. Setting - it to 0 will cause the default frequency step (5 percent) to be used - and setting it to 100 effectively causes the governor to periodically + it to 0 disables frequency changes by the governor entirely and setting + it to 100 effectively causes the governor to periodically switch the frequency between the ``scaling_min_freq`` and ``scaling_max_freq`` policy limits.
Documentation/crypto/userspace-if.rst +4 -27
@@ -328,33 +328,10 @@ CRYPTO_USER_API_RNG_CAVP option: Zero-Copy Interface ------------------- -In addition to the send/write/read/recv system call family, the AF_ALG -interface can be accessed with the zero-copy interface of -splice/vmsplice. As the name indicates, the kernel tries to avoid a copy -operation into kernel space. - -The zero-copy operation requires data to be aligned at the page -boundary. Non-aligned data can be used as well, but may require more -operations of the kernel which would defeat the speed gains obtained -from the zero-copy interface. - -The system-inherent limit for the size of one zero-copy operation is 16 -pages. If more data is to be sent to AF_ALG, user space must slice the -input into segments with a maximum size of 16 pages. - -Zero-copy can be used with the following code example (a complete -working example is provided with libkcapi): - -:: - - int pipes[2]; - - pipe(pipes); - /* input data in iov */ - vmsplice(pipes[1], iov, iovlen, SPLICE_F_GIFT); - /* opfd is the file descriptor returned from accept() system call */ - splice(pipes[0], NULL, opfd, NULL, ret, 0); - read(opfd, out, outlen); +AF_ALG used to have zero-copy support, but it was removed due to it being a +frequent source of vulnerabilities. For backwards compatibility the splice() +and sendfile() system calls are still supported, but the kernel will make an +internal copy of the data before passing it to the crypto code. Setsockopt Interface
Documentation/devicetree/bindings/media/allwinner,sun4i-a10-video-engine.yaml +10 -0
@@ -63,6 +63,16 @@ properties: CMA pool to use for buffers allocation instead of the default CMA pool. + # FIXME: This should be made required eventually once every SoC will + # have the MBUS declared. + interconnects: + maxItems: 1 + + # FIXME: This should be made required eventually once every SoC will + # have the MBUS declared. + interconnect-names: + const: dma-mem + required: - compatible - reg
Documentation/devicetree/bindings/net/renesas,ether.yaml +1 -2
@@ -119,8 +119,7 @@ examples: #size-cells = <0>; phy1: ethernet-phy@1 { - compatible = "ethernet-phy-id0022.1537", - "ethernet-phy-ieee802.3-c22"; + compatible = "ethernet-phy-id0022.1537"; reg = <1>; interrupt-parent = <&irqc0>; interrupts = <0 IRQ_TYPE_LEVEL_LOW>;
Documentation/devicetree/bindings/pinctrl/nvidia,tegra234-pinmux-aon.yaml +4 -0
@@ -55,6 +55,10 @@ patternProperties: drive_soc_gpio27_pee6, drive_ao_retention_n_pee2, drive_vcomp_alert_pee1, drive_hdmi_cec_pgg0 ] +required: + - compatible + - reg + unevaluatedProperties: false examples:
Documentation/devicetree/bindings/pinctrl/nvidia,tegra234-pinmux.yaml +4 -0
@@ -112,6 +112,10 @@ patternProperties: drive_sdmmc1_dat2_pj4, drive_sdmmc1_dat1_pj3, drive_sdmmc1_dat0_pj2 ] +required: + - compatible + - reg + unevaluatedProperties: false examples:
Documentation/devicetree/bindings/regulator/mt6359-regulator.yaml +0 -43
84 lines not on this page · raw message
Documentation/driver-api/nvdimm/btt.rst +2 -3
@@ -161,9 +161,8 @@ process:: nlanes = min(nfree, num_cpus) A lane number is obtained at the start of any IO, and is used for indexing into -all the on-disk and in-memory data structures for the duration of the IO. If -there are more CPUs than the max number of available lanes, than lanes are -protected by spinlocks. +all the on-disk and in-memory data structures for the duration of the IO. Lanes +are protected by mutexes. d. In-memory data structure: Read Tracking Table (RTT)
Documentation/driver-api/pci/pci.rst +3 -0
@@ -31,6 +31,9 @@ PCI Support Library .. kernel-doc:: drivers/pci/slot.c :export: +.. kernel-doc:: drivers/pci/rebar.c + :export: + .. kernel-doc:: drivers/pci/rom.c :export:
Documentation/filesystems/proc.rst +7 -7
@@ -23,13 +23,13 @@ fixes/update part 1.1 Stefani Seibold <[email protected]> June 9 2009 1 Collecting System Information 1.1 Process-Specific Subdirectories 1.2 Kernel data - 1.3 IDE devices in /proc/ide - 1.4 Networking info in /proc/net - 1.5 SCSI info - 1.6 Parallel port info in /proc/parport - 1.7 TTY info in /proc/tty - 1.8 Miscellaneous kernel statistics in /proc/stat - 1.9 Ext4 file system parameters + 1.3 Networking info in /proc/net + 1.4 SCSI info + 1.5 Parallel port info in /proc/parport + 1.6 TTY info in /proc/tty + 1.7 Miscellaneous kernel statistics in /proc/stat + 1.8 Ext4 file system parameters + 1.9 /proc/consoles - Shows registered system consoles 2 Modifying System Parameters
Documentation/netlink/specs/handshake.yaml +1 -0
@@ -113,6 +113,7 @@ operations: name: done doc: Handler reports handshake completion attribute-set: done + flags: [admin-perm] do: request: attributes:
Makefile +1 -1
@@ -1,7 +1,7 @@ # SPDX-License-Identifier: GPL-2.0 VERSION = 6 PATCHLEVEL = 6 -SUBLEVEL = 144 +SUBLEVEL = 145 EXTRAVERSION = NAME = Pinguïn Aangedreven
arch/alpha/kernel/pci-sysfs.c +11 -2
@@ -11,6 +11,7 @@*/ #include <linux/sched.h> +#include <linux/security.h> #include <linux/stat.h> #include <linux/slab.h> #include <linux/pci.h>
@@ -36,12 +37,16 @@ static int hose_mmap_page_range(struct pci_controller *hose,static int __pci_mmap_fits (struct pci_dev *pdev,int num,struct vm_area_struct *vma,int sparse) { +resource_size_t len =pci_resource_len (pdev, num);unsigned long nr, start, size;int shift = sparse ?5 :0 ; +if (!len) +return 0 ; + nr =vma_pages (vma); start = vma->vm_pgoff; - size = ((pci_resource_len (pdev, num) -1 ) >> (PAGE_SHIFT - shift)) +1 ; + size = ((len -1 ) >> (PAGE_SHIFT - shift)) +1 ;if (start < size && size - start >= nr)return 1 ;
@@ -71,7 +76,11 @@ static int pci_mmap_resource(struct kobject *kobj,struct resource *res = attr->private;enum pci_mmap_state mmap_type;struct pci_bus_region bar; -int i; +int i, ret; + + ret =security_locked_down (LOCKDOWN_PCI_ACCESS ); +if (ret) +return ret;for (i =0 ; i <PCI_STD_NUM_BARS ; i++)if (res == &pdev->resource[i])
arch/arm/boot/dts/ti/omap/am335x-sl50.dts +2 -2
@@ -557,8 +557,8 @@ cpu_endpoint: endpoint { remote-endpoint = <&codec_endpoint>; dai-format = "dsp_b"; - bitclock-master = <&codec_port>; - frame-master = <&codec_port>; + bitclock-master = <&codec_endpoint>; + frame-master = <&codec_endpoint>; bitclock-inversion; clocks = <&audio_mclk>; };
arch/arm/configs/sunxi_defconfig +0 -1
@@ -170,7 +170,6 @@ CONFIG_ROOT_NFS=y CONFIG_NLS_CODEPAGE_437=y CONFIG_NLS_ISO8859_1=y CONFIG_CRYPTO_DEV_SUN4I_SS=y -CONFIG_CRYPTO_DEV_SUN4I_SS_PRNG=y CONFIG_CRYPTO_DEV_SUN8I_CE=y CONFIG_CRYPTO_DEV_SUN8I_SS=y CONFIG_DMA_CMA=y
arch/arm/mach-imx/cpu-imx31.c +7 -2
@@ -36,6 +36,7 @@ static int mx31_read_cpu_rev(void)void __iomem *iim_base;struct device_node *np;u32 i, srev; +int rev =IMX_CHIP_REVISION_UNKNOWN ; np =of_find_compatible_node (NULL ,NULL ,"fsl,imx31-iim" ); iim_base =of_iomap (np,0 );
@@ -48,13 +49,17 @@ static int mx31_read_cpu_rev(void)for (i =0 ; i <ARRAY_SIZE (mx31_cpu_type); i++)if (srev == mx31_cpu_type[i].srev) { + rev = mx31_cpu_type[i].rev;imx_print_silicon_rev (mx31_cpu_type[i].name, mx31_cpu_type[i].rev); -return mx31_cpu_type[i].rev; + goto out; }imx_print_silicon_rev ("i.MX31" ,IMX_CHIP_REVISION_UNKNOWN ); -return IMX_CHIP_REVISION_UNKNOWN ; + +out: +iounmap (iim_base); +return rev; }int mx31_revision (void )
arch/arm/mach-imx/mm-imx3.c +2 -0
@@ -106,6 +106,7 @@ void __init imx31_init_early(void) arm_pm_idle = imx31_idle; np =of_find_compatible_node (NULL ,NULL ,"fsl,imx31-ccm" ); mx3_ccm_base =of_iomap (np,0 ); +of_node_put (np); BUG_ON(!mx3_ccm_base); }#endif /* ifdef CONFIG_SOC_IMX31 */
@@ -143,6 +144,7 @@ void __init imx35_init_early(void) arch_ioremap_caller = imx3_ioremap_caller; np =of_find_compatible_node (NULL ,NULL ,"fsl,imx35-ccm" ); mx3_ccm_base =of_iomap (np,0 ); +of_node_put (np); BUG_ON(!mx3_ccm_base); }#endif /* ifdef CONFIG_SOC_IMX35 */
arch/arm64/boot/dts/freescale/imx8mp-tqma8mpql-mba8mpxl.dts +3 -0
@@ -473,6 +473,9 @@ tlv320aic3x04: audio-codec@18 { reset-gpios = <&gpio4 29 GPIO_ACTIVE_LOW>; iov-supply = <®_vcc_1v8>; ldoin-supply = <®_vcc_3v3>; + assigned-clocks = <&clk IMX8MP_CLK_SAI3>; + assigned-clock-parents = <&clk IMX8MP_AUDIO_PLL1_OUT>; + assigned-clock-rates = <12288000>; }; se97_1c: temperature-sensor@1c {
arch/arm64/boot/dts/freescale/imx8x-colibri.dtsi +2 -2
@@ -383,12 +383,12 @@ pinctrl_adc0: adc0grp { */ pinctrl_atmel_adap: atmeladaptergrp { fsl,pins = <IMX8QXP_UART1_RX_LSIO_GPIO0_IO22 0x21>, /* SODIMM 30 */ - <IMX8QXP_UART1_TX_LSIO_GPIO0_IO21 0x4000021>; /* SODIMM 28 */ + <IMX8QXP_UART1_TX_LSIO_GPIO0_IO21 0x40000021>; /* SODIMM 28 */ }; /* Atmel MXT touchsceen + boards with built-in Capacitive Touch Connector */ pinctrl_atmel_conn: atmelconnectorgrp { - fsl,pins = <IMX8QXP_QSPI0B_DATA2_LSIO_GPIO3_IO20 0x4000021>, /* SODIMM 107 */ + fsl,pins = <IMX8QXP_QSPI0B_DATA2_LSIO_GPIO3_IO20 0x40000021>, /* SODIMM 107 */ <IMX8QXP_QSPI0B_SS1_B_LSIO_GPIO3_IO24 0x21>; /* SODIMM 106 */ };
arch/arm64/boot/dts/mediatek/mt8192-asurada.dtsi +1 -1
@@ -494,6 +494,7 @@ flash@0 { &pcie { pinctrl-names = "default"; pinctrl-0 = <&pcie_pins>; + memory-region = <&wifi_restricted_dma_region>; pcie0: pcie@0,0 { device_type = "pci";
@@ -508,7 +509,6 @@ pcie0: pcie@0,0 { wifi: wifi@0,0 { reg = <0x10000 0 0 0 0x100000>, <0x10000 0 0x100000 0 0x100000>; - memory-region = <&wifi_restricted_dma_region>; }; }; };
arch/arm64/boot/dts/nvidia/tegra234.dtsi +4 -4
@@ -1447,7 +1447,7 @@ ethernet@6800000 { <&bpmp TEGRA234_CLK_MGBE0_RX_PCS_M>, <&bpmp TEGRA234_CLK_MGBE0_RX_PCS>, <&bpmp TEGRA234_CLK_MGBE0_TX_PCS>; - clock-names = "mgbe", "mac", "mac-divider", "ptp-ref", "rx-input-m", + clock-names = "mgbe", "mac", "mac-divider", "ptp_ref", "rx-input-m", "rx-input", "tx", "eee-pcs", "rx-pcs-input", "rx-pcs-m", "rx-pcs", "tx-pcs"; resets = <&bpmp TEGRA234_RESET_MGBE0_MAC>,
@@ -1481,7 +1481,7 @@ ethernet@6900000 { <&bpmp TEGRA234_CLK_MGBE1_RX_PCS_M>, <&bpmp TEGRA234_CLK_MGBE1_RX_PCS>, <&bpmp TEGRA234_CLK_MGBE1_TX_PCS>; - clock-names = "mgbe", "mac", "mac-divider", "ptp-ref", "rx-input-m", + clock-names = "mgbe", "mac", "mac-divider", "ptp_ref", "rx-input-m", "rx-input", "tx", "eee-pcs", "rx-pcs-input", "rx-pcs-m", "rx-pcs", "tx-pcs"; resets = <&bpmp TEGRA234_RESET_MGBE1_MAC>,
@@ -1515,7 +1515,7 @@ ethernet@6a00000 { <&bpmp TEGRA234_CLK_MGBE2_RX_PCS_M>, <&bpmp TEGRA234_CLK_MGBE2_RX_PCS>, <&bpmp TEGRA234_CLK_MGBE2_TX_PCS>; - clock-names = "mgbe", "mac", "mac-divider", "ptp-ref", "rx-input-m", + clock-names = "mgbe", "mac", "mac-divider", "ptp_ref", "rx-input-m", "rx-input", "tx", "eee-pcs", "rx-pcs-input", "rx-pcs-m", "rx-pcs", "tx-pcs"; resets = <&bpmp TEGRA234_RESET_MGBE2_MAC>,
@@ -1549,7 +1549,7 @@ ethernet@6b00000 { <&bpmp TEGRA234_CLK_MGBE3_RX_PCS_M>, <&bpmp TEGRA234_CLK_MGBE3_RX_PCS>, <&bpmp TEGRA234_CLK_MGBE3_TX_PCS>; - clock-names = "mgbe", "mac", "mac-divider", "ptp-ref", "rx-input-m", + clock-names = "mgbe", "mac", "mac-divider", "ptp_ref", "rx-input-m", "rx-input", "tx", "eee-pcs", "rx-pcs-input", "rx-pcs-m", "rx-pcs", "tx-pcs"; resets = <&bpmp TEGRA234_RESET_MGBE3_MAC>,
arch/arm64/boot/dts/qcom/sdm630.dtsi +6 -3
@@ -491,9 +491,12 @@ venus_region: venus@9f800000 { no-map; }; - adsp_mem: adsp-region@f6000000 { - reg = <0x0 0xf6000000 0x0 0x800000>; - no-map; + adsp_mem: adsp-region { + compatible = "shared-dma-pool"; + alloc-ranges = <0x0 0x80000000 0x0 0x80000000>; + alignment = <0x0 0x400000>; + size = <0x0 0x800000>; + reusable; }; qseecom_mem: qseecom-region@f6800000 {
arch/arm64/boot/dts/qcom/sdm845-db845c-navigation-mezzanine.dtso +5 -0
@@ -16,7 +16,12 @@ &camss { status = "okay"; ports { + #address-cells = <1>; + #size-cells = <0>; + port@0 { + reg = <0>; + csiphy0_ep: endpoint { data-lanes = <0 1 2 3>; remote-endpoint = <&ov8856_ep>;
arch/arm64/boot/dts/qcom/sm8450.dtsi +6 -2
@@ -4223,8 +4223,12 @@ ufs_mem_phy_lanes: phy@1d87400 { ice: crypto@1d88000 { compatible = "qcom,sm8450-inline-crypto-engine", "qcom,inline-crypto-engine"; - reg = <0 0x01d88000 0 0x8000>; - clocks = <&gcc GCC_UFS_PHY_ICE_CORE_CLK>; + reg = <0 0x01d88000 0 0x18000>; + clocks = <&gcc GCC_UFS_PHY_ICE_CORE_CLK>, + <&gcc GCC_UFS_PHY_AHB_CLK>; + clock-names = "core", + "iface"; + power-domains = <&gcc UFS_PHY_GDSC>; }; cryptobam: dma-controller@1dc4000 {
arch/arm64/boot/dts/rockchip/rk3566-roc-pc.dts +1 -1
@@ -244,7 +244,7 @@ rk809: pmic@20 { compatible = "rockchip,rk809"; reg = <0x20>; interrupt-parent = <&gpio0>; - interrupts = <RK_PA7 IRQ_TYPE_LEVEL_LOW>; + interrupts = <RK_PA3 IRQ_TYPE_LEVEL_LOW>; clock-output-names = "rk808-clkout1", "rk808-clkout2"; assigned-clocks = <&cru I2S1_MCLKOUT_TX>; assigned-clock-parents = <&cru CLK_I2S1_8CH_TX>;
arch/arm64/boot/dts/rockchip/rk3568-nanopi-r5s.dts +3 -3
@@ -77,7 +77,7 @@ &mdio0 { rgmii_phy0: ethernet-phy@1 { compatible = "ethernet-phy-ieee802.3-c22"; reg = <1>; - pinctrl-0 = <ð_phy0_reset_pin>; + pinctrl-0 = <&gmac0_rstn_gpio0_c5_pin>; pinctrl-names = "default"; }; };
@@ -111,8 +111,8 @@ &pcie3x2 { &pinctrl { gmac0 { - eth_phy0_reset_pin: eth-phy0-reset-pin { - rockchip,pins = <0 RK_PC4 RK_FUNC_GPIO &pcfg_pull_up>; + gmac0_rstn_gpio0_c5_pin: gmac0-rstn-gpio0-c5-pin { + rockchip,pins = <0 RK_PC5 RK_FUNC_GPIO &pcfg_pull_up>; }; };
arch/arm64/include/asm/el2_setup.h +52 -4
68 lines not on this page · raw message
arch/arm64/include/asm/kvm_hyp.h +1 -0
@@ -146,5 +146,6 @@ extern u64 kvm_nvhe_sym(id_aa64smfr0_el1_sys_val);extern unsigned long kvm_nvhe_sym (__icache_flags );extern unsigned int kvm_nvhe_sym (kvm_arm_vmid_bits );extern unsigned int kvm_nvhe_sym (kvm_host_sve_max_vl ); +extern unsigned int kvm_nvhe_sym (hyp_gicv3_nr_lr );#endif /* __ARM64_KVM_HYP_H__ */
arch/arm64/include/asm/pgtable.h +10 -4
@@ -281,6 +281,12 @@ static inline void set_pte(pte_t *ptep, pte_t pte) } } +#define ptep_get ptep_get +static inline pte_t ptep_get (pte_t *ptep) +{ +return READ_ONCE (*ptep); +} +extern void __sync_icache_dcache (pte_t pteval);bool pgattr_change_is_safe (u64 old,u64 new);
@@ -308,7 +314,7 @@ static inline void __check_safe_pte_update(struct mm_struct *mm, pte_t *ptep,if (!IS_ENABLED (CONFIG_DEBUG_VM ))return ; - old_pte =READ_ONCE (*ptep); + old_pte =ptep_get (ptep);if (!pte_valid (old_pte) || !pte_valid (pte))return ;
@@ -897,7 +903,7 @@ static inline int __ptep_test_and_clear_young(pte_t *ptep) {pte_t old_pte, pte; - pte =READ_ONCE (*ptep); + pte =ptep_get (ptep); do { old_pte = pte; pte = pte_mkold(pte);
@@ -979,7 +985,7 @@ static inline void ptep_set_wrprotect(struct mm_struct *mm, unsigned long addres {pte_t old_pte, pte; - pte =READ_ONCE (*ptep); + pte =ptep_get (ptep); do { old_pte = pte; pte = pte_wrprotect(pte);
@@ -1071,7 +1077,7 @@ static inline void arch_swap_restore(swp_entry_t entry, struct folio *folio)#endif /* CONFIG_ARM64_MTE */ /* -* On AArch64, the cache coherency is handled via the set_pte_at() function. +* On AArch64, the cache coherency is handled via the set_ptes() function. */ static inline void update_mmu_cache_range(struct vm_fault *vmf, struct vm_area_struct *vma, unsigned long addr, pte_t *ptep,
arch/arm64/kernel/efi.c +1 -1
@@ -107,7 +107,7 @@ static int __init set_permissions(pte_t *ptep, unsigned long addr, void *data) {struct set_perm_data *spd = data;const efi_memory_desc_t *md = spd->md; -pte_t pte =READ_ONCE (*ptep); +pte_t pte =ptep_get (ptep);if (md->attribute &EFI_MEMORY_RO ) pte =set_pte_bit (pte,__pgprot (PTE_RDONLY ));
arch/arm64/kernel/entry-fpsimd.S +8 -8
@@ -38,10 +38,10 @@ SYM_FUNC_END(fpsimd_load_state) * * x0 - pointer to buffer for state * x1 - pointer to storage for FPSR - * x2 - Save FFR if non-zero + * w2 - Save FFR if non-zero */ SYM_FUNC_START(sve_save_state) - sve_save 0, x1, x2, 3 + sve_save 0, x1, w2, 3 ret SYM_FUNC_END(sve_save_state)
@@ -50,10 +50,10 @@ SYM_FUNC_END(sve_save_state) * * x0 - pointer to buffer for state * x1 - pointer to storage for FPSR - * x2 - Restore FFR if non-zero + * w2 - Restore FFR if non-zero */ SYM_FUNC_START(sve_load_state) - sve_load 0, x1, x2, 4 + sve_load 0, x1, w2, 4 ret SYM_FUNC_END(sve_load_state)
@@ -103,13 +103,13 @@ SYM_FUNC_END(sme_set_vq) * Save the ZA and ZT state * * x0 - pointer to buffer for state - * x1 - number of ZT registers to save + * w1 - number of ZT registers to save */ SYM_FUNC_START(sme_save_state) _sme_rdsvl 2, 1 // x2 = VL/8 sme_save_za 0, x2, 12 // Leaves x0 pointing to the end of ZA - cbz x1, 1f + cbz w1, 1f _str_zt 0 1: ret
@@ -119,13 +119,13 @@ SYM_FUNC_END(sme_save_state) * Load the ZA and ZT state * * x0 - pointer to buffer for state - * x1 - number of ZT registers to save + * w1 - number of ZT registers to save */ SYM_FUNC_START(sme_load_state) _sme_rdsvl 2, 1 // x2 = VL/8 sme_load_za 0, x2, 12 // Leaves x0 pointing to the end of ZA - cbz x1, 1f + cbz w1, 1f _ldr_zt 0 1: ret
arch/arm64/kernel/head.S +7 -13
@@ -575,10 +575,8 @@ SYM_INNER_LABEL(init_el2, SYM_L_LOCAL) msr sctlr_el2, x0 isb 0: - mov_q x0, HCR_HOST_NVHE_FLAGS - msr hcr_el2, x0 - isb + init_el2_hcr HCR_HOST_NVHE_FLAGS init_el2_state /* Hypervisor stub */
@@ -588,27 +586,23 @@ SYM_INNER_LABEL(init_el2, SYM_L_LOCAL) mov_q x1, INIT_SCTLR_EL1_MMU_OFF - /* - * Fruity CPUs seem to have HCR_EL2.E2H set to RES1, - * making it impossible to start in nVHE mode. Is that - * compliant with the architecture? Absolutely not! - */ mrs x0, hcr_el2 and x0, x0, #HCR_E2H - cbz x0, 1f + cbz x0, 2f /* Set a sane SCTLR_EL1, the VHE way */ pre_disable_mmu_workaround msr_s SYS_SCTLR_EL12, x1 mov x2, #BOOT_CPU_FLAG_E2H - b 2f + b 3f -1: +2: pre_disable_mmu_workaround msr sctlr_el1, x1 mov x2, xzr -2: - __init_el2_nvhe_prepare_eret +3: + mov x0, #INIT_PSTATE_EL1 + msr spsr_el2, x0 mov w0, #BOOT_CPU_MODE_EL2 orr x0, x0, x2
arch/arm64/kernel/hw_breakpoint.c +9 -0
@@ -557,6 +557,15 @@ int hw_breakpoint_arch_parse(struct perf_event *bp,else alignment_mask =0x7 ; offset = hw->address & alignment_mask; + +/* +* BAS is an 8-bit field in WCR/BCR; the shift below would +* silently drop the high bits of ctrl.len when offset + len +* exceeds 8, programming hardware to watch fewer bytes than +* the user requested. +*/ +if (((u32 )hw->ctrl.len << offset) >ARM_BREAKPOINT_LEN_8 ) +return -EINVAL ; } hw->address &= ~alignment_mask;
arch/arm64/kernel/mte.c +1 -1
@@ -67,7 +67,7 @@ int memcmp_pages(struct page *page1, struct page *page2)/* * If the page content is identical but at least one of the pages is * tagged, return non-zero to avoid KSM merging. If only one of the -* pages is tagged, set_pte_at() may zero or change the tags of the +* pages is tagged, set_ptes() may zero or change the tags of the * other page via mte_sync_tags(). */ if (page_mte_tagged (page1) ||page_mte_tagged (page2))
arch/arm64/kvm/arm.c +2 -0
@@ -2026,6 +2026,8 @@ static int __init init_subsystems(void)switch (err) {case 0 : vgic_present = true; +if (static_branch_unlikely (&kvm_vgic_global_state.gicv3_cpuif)) +kvm_nvhe_sym (hyp_gicv3_nr_lr) = kvm_vgic_global_state.nr_lr;break ;case -ENODEV :case -ENXIO :
arch/arm64/kvm/guest.c +1 -1
@@ -1073,7 +1073,7 @@ int kvm_vm_ioctl_mte_copy_tags(struct kvm *kvm, }else {/* * Only locking to serialise with a concurrent -* set_pte_at() in the VMM but still overriding the +* set_ptes() in the VMM but still overriding the * tags, hence ignoring the return value. */ try_page_mte_tagging (page);
arch/arm64/kvm/hyp/nvhe/hyp-init.S +2 -1
@@ -202,10 +202,11 @@ SYM_CODE_START_LOCAL(__kvm_hyp_init_cpu) 2: msr SPsel, #1 // We want to use SP_EL{1,2} + init_el2_hcr 0 + /* Initialize EL2 CPU state to sane values. */ init_el2_state // Clobbers x0..x2 finalise_el2_state - __init_el2_nvhe_prepare_eret /* Enable MMU, set vectors and stack. */ mov x0, x28
arch/arm64/kvm/hyp/nvhe/hyp-main.c +12 -0
@@ -22,6 +22,9 @@ DEFINE_PER_CPU(struct kvm_nvhe_init_params, kvm_init_params); +/* Number of implemented GICv3 LRs. Used by flush_hyp_vcpu(). */ +unsigned int hyp_gicv3_nr_lr; +void __kvm_hyp_host_forward_smc (struct kvm_cpu_context *host_ctxt);static void flush_hyp_vcpu (struct pkvm_hyp_vcpu *hyp_vcpu)
@@ -30,6 +33,9 @@ static void flush_hyp_vcpu(struct pkvm_hyp_vcpu *hyp_vcpu) hyp_vcpu->vcpu.arch.ctxt = host_vcpu->arch.ctxt; +/* __hyp_running_vcpu must be NULL in a guest context. */ + hyp_vcpu->vcpu.arch.ctxt.__hyp_running_vcpu =NULL ; + hyp_vcpu->vcpu.arch.sve_state =kern_hyp_va (host_vcpu->arch.sve_state); hyp_vcpu->vcpu.arch.sve_max_vl = host_vcpu->arch.sve_max_vl;
@@ -46,6 +52,12 @@ static void flush_hyp_vcpu(struct pkvm_hyp_vcpu *hyp_vcpu) hyp_vcpu->vcpu.arch.vsesr_el2 = host_vcpu->arch.vsesr_el2; hyp_vcpu->vcpu.arch.vgic_cpu.vgic_v3 = host_vcpu->arch.vgic_cpu.vgic_v3; + +/* Bound used_lrs by the number of implemented list registers. */ + hyp_vcpu->vcpu.arch.vgic_cpu.vgic_v3.used_lrs = + min_t(unsigned int, + hyp_vcpu->vcpu.arch.vgic_cpu.vgic_v3.used_lrs, + hyp_gicv3_nr_lr); }static void sync_hyp_vcpu (struct pkvm_hyp_vcpu *hyp_vcpu)
arch/arm64/kvm/hyp/nvhe/psci-relay.c +3 -0
@@ -218,6 +218,9 @@ asmlinkage void __noreturn __kvm_host_psci_cpu_entry(bool is_cpu_on)if (is_cpu_on)release_boot_args (boot_args); +write_sysreg_el1 (INIT_SCTLR_EL1_MMU_OFF ,SYS_SCTLR ); +write_sysreg (INIT_PSTATE_EL1 ,SPSR_EL2 ); +__host_enter (host_ctxt); }
arch/arm64/kvm/vgic/vgic-its.c +2 -0
@@ -713,6 +713,8 @@ struct vgic_its *vgic_msi_to_its(struct kvm *kvm, struct kvm_msi *msi) address = (u64 )msi->address_hi <<32 | msi->address_lo; +guard (srcu)(&kvm->srcu); + kvm_io_dev =kvm_io_bus_get_dev (kvm,KVM_MMIO_BUS , address);if (!kvm_io_dev)return ERR_PTR (-EINVAL );
arch/arm64/kvm/vgic/vgic.c +6 -5
@@ -701,15 +701,16 @@ static void vgic_prune_ap_list(struct kvm_vcpu *vcpu)raw_spin_lock (&irq->irq_lock);/* -* If the affinity has been preserved, move the -* interrupt around. Otherwise, it means things have -* changed while the interrupt was unlocked, and we -* need to replay this. +* If the interrupt is still ours and its affinity has +* been preserved, move it around. Otherwise, it means +* things have changed while the interrupt was unlocked +* (it may even have been taken off the list with its +* affinity left untouched), and we need to replay this. * * In all cases, we cannot trust the list not to have * changed, so we restart from the beginning. */ -if (target_vcpu ==vgic_target_oracle (irq)) { +if (irq->vcpu == vcpu && target_vcpu ==vgic_target_oracle (irq)) {struct vgic_cpu *new_cpu = &target_vcpu->arch.vgic_cpu;list_del (&irq->ap_list);
arch/arm64/lib/insn.c +2 -0
@@ -338,6 +338,8 @@ u32 aarch64_insn_gen_cond_branch_imm(unsigned long pc, unsigned long addr,long offset; offset =label_imm_common (pc, addr,SZ_1M ); +if (offset >=SZ_1M ) +return AARCH64_BREAK_FAULT ; insn =aarch64_insn_get_bcond_value ();
arch/arm64/mm/fault.c +3 -3
@@ -191,7 +191,7 @@ static void show_pte(unsigned long addr)if (!ptep)break ; - pte =READ_ONCE (*ptep); + pte =ptep_get (ptep);pr_cont (", pte=%016llx" ,pte_val (pte));pte_unmap (ptep); }while (0 );
@@ -205,7 +205,7 @@ static void show_pte(unsigned long addr)* * It needs to cope with hardware update of the accessed/dirty state by other * agents in the system and can safely skip the __sync_icache_dcache() call as, -* like set_pte_at(), the PTE is never changed from no-exec to exec here. +* like set_ptes(), the PTE is never changed from no-exec to exec here. * * Returns whether or not the PTE actually changed. */
@@ -214,7 +214,7 @@ int ptep_set_access_flags(struct vm_area_struct *vma, pte_t entry, int dirty) {pteval_t old_pteval, pteval; -pte_t pte =READ_ONCE (*ptep); +pte_t pte =ptep_get (ptep);if (pte_same (pte, entry))return 0 ;
arch/arm64/mm/hugetlbpage.c +9 -9
@@ -228,7 +228,7 @@ static void clear_flush(struct mm_struct *mm,unsigned long i, saddr = addr;for (i =0 ; i < ncontig; i++, addr += pgsize, ptep++) -ptep_clear (mm, addr, ptep); +ptep_get_and_clear (mm, addr, ptep);flush_tlb_range (&vma, saddr, addr); }
@@ -246,12 +246,12 @@ void set_huge_pte_at(struct mm_struct *mm, unsigned long addr,if (!pte_present (pte)) {for (i =0 ; i < ncontig; i++, ptep++, addr += pgsize) -set_pte_at (mm, addr, ptep, pte); +set_ptes (mm, addr, ptep, pte,1 );return ; }if (!pte_cont (pte)) { -set_pte_at (mm, addr, ptep, pte); +set_ptes (mm, addr, ptep, pte,1 );return ; }
@@ -262,7 +262,7 @@ void set_huge_pte_at(struct mm_struct *mm, unsigned long addr,clear_flush (mm, addr, ptep, pgsize, ncontig);for (i =0 ; i < ncontig; i++, ptep++, addr += pgsize, pfn += dpfn) -set_pte_at (mm, addr, ptep,pfn_pte (pfn, hugeprot)); +set_ptes (mm, addr, ptep,pfn_pte (pfn, hugeprot),1 ); } pte_t *huge_pte_alloc(struct mm_struct *mm, struct vm_area_struct *vma,
@@ -465,7 +465,7 @@ int huge_ptep_set_access_flags(struct vm_area_struct *vma, hugeprot =pte_pgprot (pte);for (i =0 ; i < ncontig; i++, ptep++, addr += pgsize, pfn += dpfn) -set_pte_at (mm, addr, ptep,pfn_pte (pfn, hugeprot)); +set_ptes (mm, addr, ptep,pfn_pte (pfn, hugeprot),1 );return 1 ; }
@@ -479,7 +479,7 @@ void huge_ptep_set_wrprotect(struct mm_struct *mm,size_t pgsize;pte_t pte; -if (!pte_cont (READ_ONCE (*ptep))) { +if (!pte_cont (ptep_get (ptep))) {ptep_set_wrprotect (mm, addr, ptep);return ; }
@@ -494,7 +494,7 @@ void huge_ptep_set_wrprotect(struct mm_struct *mm, pfn =pte_pfn (pte);for (i =0 ; i < ncontig; i++, ptep++, addr += pgsize, pfn += dpfn) -set_pte_at (mm, addr, ptep,pfn_pte (pfn, hugeprot)); +set_ptes (mm, addr, ptep,pfn_pte (pfn, hugeprot),1 ); } pte_t huge_ptep_clear_flush(struct vm_area_struct *vma,
@@ -504,7 +504,7 @@ pte_t huge_ptep_clear_flush(struct vm_area_struct *vma,size_t pgsize;int ncontig; -if (!pte_cont (READ_ONCE (*ptep))) +if (!pte_cont (ptep_get (ptep)))return ptep_clear_flush (vma, addr, ptep); ncontig =find_num_contig (mm, addr, ptep, &pgsize);
@@ -552,7 +552,7 @@ pte_t huge_ptep_modify_prot_start(struct vm_area_struct *vma, unsigned long addr* when the permission changes from executable to non-executable * in cases where cpu is affected with errata #2645198. */ -if (pte_user_exec (READ_ONCE (*ptep))) +if (pte_user_exec (ptep_get (ptep)))return huge_ptep_clear_flush (vma, addr, ptep); }return huge_ptep_get_and_clear (vma->vm_mm, addr, ptep, psize);
arch/arm64/mm/kasan_init.c +1 -1
@@ -113,7 +113,7 @@ static void __init kasan_pte_populate(pmd_t *pmdp, unsigned long addr,memset (__va (page_phys),KASAN_SHADOW_INIT ,PAGE_SIZE ); next = addr +PAGE_SIZE ;set_pte (ptep,pfn_pte (__phys_to_pfn (page_phys),PAGE_KERNEL )); - }while (ptep++, addr = next, addr != end &&pte_none (READ_ONCE (*ptep))); + }while (ptep++, addr = next, addr != end &&pte_none (ptep_get (ptep))); } static void __init kasan_pmd_populate(pud_t *pudp, unsigned long addr,
arch/arm64/mm/mmu.c +15 -8
@@ -165,7 +165,7 @@ static void init_pte(pte_t *ptep, unsigned long addr, unsigned long end, phys_addr_t phys, pgprot_t prot) { do { - pte_t old_pte = READ_ONCE(*ptep); + pte_t old_pte = ptep_get(ptep); /* * Required barriers to make this visible to the table walker
@@ -178,7 +178,7 @@ static void init_pte(pte_t *ptep, unsigned long addr, unsigned long end,* only allow updates to the permission attributes. */ BUG_ON (!pgattr_change_is_safe (pte_val (old_pte), -READ_ONCE (pte_val (*ptep)))); +pte_val (ptep_get (ptep)))); phys +=PAGE_SIZE ; }while (ptep++, addr +=PAGE_SIZE , addr != end);
@@ -864,7 +864,7 @@ static void unmap_hotplug_pte_range(pmd_t *pmdp, unsigned long addr, do { ptep = pte_offset_kernel(pmdp, addr); - pte = READ_ONCE(*ptep); + pte = ptep_get(ptep); if (pte_none(pte)) continue;
@@ -901,7 +901,13 @@ static void unmap_hotplug_pmd_range(pud_t *pudp, unsigned long addr,if (free_mapped) {/* CONT blocks are not supported in the vmemmap */ WARN_ON (pmd_cont (pmd)); -flush_tlb_kernel_range (addr, addr +PMD_SIZE ); +/* +* Invalidating a block entry requires just +* a single overlapping TLB invalidation, +* so limit the range of the flush to a single +* page. +*/ +flush_tlb_kernel_range (addr, addr +PAGE_SIZE );free_hotplug_page_range (pmd_page (pmd),PMD_SIZE , altmap); }
@@ -931,7 +937,8 @@ static void unmap_hotplug_pud_range(p4d_t *p4dp, unsigned long addr,if (pud_sect (pud)) {pud_clear (pudp);if (free_mapped) { -flush_tlb_kernel_range (addr, addr +PUD_SIZE ); +/* See comment in unmap_hotplug_pmd_range(). */ +flush_tlb_kernel_range (addr, addr +PAGE_SIZE );free_hotplug_page_range (pud_page (pud),PUD_SIZE , altmap); }
@@ -1001,7 +1008,7 @@ static void free_empty_pte_table(pmd_t *pmdp, unsigned long addr, do { ptep = pte_offset_kernel(pmdp, addr); - pte = READ_ONCE(*ptep); + pte = ptep_get(ptep); /* * This is just a sanity check here which verifies that
@@ -1020,7 +1027,7 @@ static void free_empty_pte_table(pmd_t *pmdp, unsigned long addr,*/ ptep =pte_offset_kernel (pmdp,0UL );for (i =0 ; i <PTRS_PER_PTE ; i++) { -if (!pte_none (READ_ONCE (ptep[i]))) +if (!pte_none (ptep_get (&ptep[i])))return ; }
@@ -1495,7 +1502,7 @@ pte_t ptep_modify_prot_start(struct vm_area_struct *vma, unsigned long addr, pte* when the permission changes from executable to non-executable * in cases where cpu is affected with errata #2645198. */ -if (pte_user_exec (READ_ONCE (*ptep))) +if (pte_user_exec (ptep_get (ptep)))return ptep_clear_flush (vma, addr, ptep); }return ptep_get_and_clear (vma->vm_mm, addr, ptep);
arch/arm64/mm/pageattr.c +2 -2
@@ -36,7 +36,7 @@ bool can_set_direct_map(void)static int change_page_range (pte_t *ptep,unsigned long addr,void *data) {struct page_change_data *cdata = data; -pte_t pte =READ_ONCE (*ptep); +pte_t pte =ptep_get (ptep); pte =clear_pte_bit (pte, cdata->clear_mask); pte =set_pte_bit (pte, cdata->set_mask);
@@ -242,5 +242,5 @@ bool kernel_page_present(struct page *page)return true; ptep =pte_offset_kernel (pmdp, addr); -return pte_valid (READ_ONCE (*ptep)); +return pte_valid (ptep_get (ptep)); }
arch/arm64/mm/trans_pgd.c +1 -1
@@ -33,7 +33,7 @@ static void *trans_alloc(struct trans_pgd_info *info)static void _copy_pte (pte_t *dst_ptep,pte_t *src_ptep,unsigned long addr) { -pte_t pte =READ_ONCE (*src_ptep); +pte_t pte =ptep_get (src_ptep);if (pte_valid (pte)) {/*
arch/arm64/tools/sysreg +38 -1
@@ -1130,7 +1130,7 @@ UnsignedEnum 43:40 TraceFilt 0b0000 NI 0b0001 IMP EndEnum -UnsignedEnum 39:36 DoubleLock +SignedEnum 39:36 DoubleLock 0b0000 IMP 0b1111 NI EndEnum
@@ -1669,6 +1669,43 @@ UnsignedEnum 3:0 TCRX EndEnum EndSysreg +Sysreg ID_AA64MMFR4_EL1 3 0 0 7 4 +Res0 63:40 +UnsignedEnum 39:36 E3DSE + 0b0000 NI + 0b0001 IMP +EndEnum +Res0 35:28 +SignedEnum 27:24 E2H0 + 0b0000 IMP + 0b1110 NI_NV1 + 0b1111 NI +EndEnum +UnsignedEnum 23:20 NV_frac + 0b0000 NV_NV2 + 0b0001 NV2_ONLY +EndEnum +UnsignedEnum 19:16 FGWTE3 + 0b0000 NI + 0b0001 IMP +EndEnum +UnsignedEnum 15:12 HACDBS + 0b0000 NI + 0b0001 IMP +EndEnum +UnsignedEnum 11:8 ASID2 + 0b0000 NI + 0b0001 IMP +EndEnum +UnsignedEnum 7:4 EIESB + 0b0000 NI + 0b0001 ToEL3 + 0b0010 ToELx + 0b1111 ANY +EndEnum +Res0 3:0 +EndSysreg + Sysreg SCTLR_EL1 3 0 1 0 0 Field 63 TIDCP Field 62 SPINTMASK
arch/loongarch/include/asm/acpi.h +2 -0
@@ -37,6 +37,8 @@ static inline bool acpi_has_cpu_in_madt(void)extern struct list_head acpi_wakeup_device_list;extern struct acpi_madt_core_pic acpi_core_pic[MAX_CORE_PIC ]; +extern void acpi_add_early_pio (void ); +extern void acpi_remove_early_pio (void );extern int __init parse_acpi_topology (void );static inline u32 get_acpi_id_for_cpu (unsigned int cpu)
arch/loongarch/include/asm/pgtable.h +4 -0
@@ -410,6 +410,8 @@ static inline pte_t pte_mkwrite_novma(pte_t pte)static inline pte_t pte_wrprotect (pte_t pte) { +if (pte_val (pte) & _PAGE_DIRTY) +pte_val (pte) |= _PAGE_MODIFIED;pte_val (pte) &= ~(_PAGE_WRITE | _PAGE_DIRTY);return pte; }
@@ -522,6 +524,8 @@ static inline pmd_t pmd_mkwrite_novma(pmd_t pmd)static inline pmd_t pmd_wrprotect (pmd_t pmd) { +if (pmd_val (pmd) & _PAGE_DIRTY) +pmd_val (pmd) |= _PAGE_MODIFIED;pmd_val (pmd) &= ~(_PAGE_WRITE | _PAGE_DIRTY);return pmd; }
arch/loongarch/kernel/acpi.c +28 -0
@@ -14,6 +14,7 @@#include <linux/memblock.h> #include <linux/of_fdt.h> #include <linux/serial_core.h> +#include <linux/vmalloc.h> #include <asm/io.h> #include <asm/numa.h> #include <asm/loongson.h>
@@ -57,6 +58,33 @@ void __iomem *acpi_os_ioremap(acpi_physical_address phys, acpi_size size)return ioremap_cache (phys, size); } +#define PIO_BASE (unsigned long)PCI_IOBASE +#define PIO_SIZE ALIGN(ISA_IOSIZE, PAGE_SIZE) + +static bool acpi_pio; + +/* Add PIO for early access */ +void acpi_add_early_pio (void ) +{ +if (!acpi_disabled) { + acpi_pio = true; +ioremap_page_range (PIO_BASE ,PIO_BASE +PIO_SIZE , +LOONGSON_LIO_BASE ,pgprot_device (PAGE_KERNEL )); + } +} + +/* Remove PIO for PCI register */ +void acpi_remove_early_pio (void ) +{ +if (!acpi_pio) +return ; + +if (!acpi_disabled) { + acpi_pio = false; +vunmap_range (PIO_BASE ,PIO_BASE +PIO_SIZE ); + } +} +#ifdef CONFIG_SMP static int set_processor_mask (u32 id,u32 flags) {
arch/loongarch/kernel/setup.c +2 -0
@@ -530,6 +530,8 @@ static __init int arch_reserve_pio_range(void) {struct device_node *np; +acpi_add_early_pio (); +for_each_node_by_name (np,"isa" ) {struct of_range range;struct of_range_parser parser;
arch/loongarch/kernel/smp.c +1 -0
@@ -613,6 +613,7 @@ static void stop_this_cpu(void *dummy)set_cpu_online (smp_processor_id (), false);calculate_cpu_foreign_map ();local_irq_disable (); +rcu_report_dead (smp_processor_id ());while (true); }
arch/loongarch/pci/acpi.c +2 -0
@@ -65,6 +65,8 @@ static int acpi_prepare_root_resources(struct acpi_pci_root_info *ci)struct resource_entry *entry, *tmp;struct acpi_device *device = ci->bridge; +acpi_remove_early_pio (); + status =acpi_pci_probe_root_resources (ci);if (status >0 ) {acpi_evaluate_integer (device->handle,"PCIH" ,NULL , &pci_h);
arch/mips/dec/int-handler.S +1 -1
@@ -277,7 +277,7 @@ srlv t3,t1,t2 handle_it: - j dec_irq_dispatch + j do_IRQ nop #if defined(CONFIG_32BIT) && defined(CONFIG_MIPS_FP_SUPPORT)
arch/mips/dec/platform.c +5 -1
@@ -38,6 +38,10 @@ static struct platform_device dec_rtc_device = { .num_resources = ARRAY_SIZE(dec_rtc_resources), }; +static struct platform_device *dec_rtc_devices[]__initdata = { + &dec_rtc_device, +}; +static struct resource dec_dz_resources[] = { { .name ="dz" , .flags =IORESOURCE_MEM , }, { .name ="dz" , .flags =IORESOURCE_IRQ , },
@@ -137,7 +141,7 @@ static int __init dec_add_devices(void) } num_zs = i; - ret1 =platform_device_register (&dec_rtc_device); + ret1 =platform_add_devices (dec_rtc_devices,1 ); ret2 =IS_ENABLED (CONFIG_32BIT ) ?platform_add_devices (dec_dz_devices, num_dz) :0 ; ret3 =platform_add_devices (dec_zs_devices, num_zs);
arch/mips/dec/prom/init.c +5 -1
@@ -3,7 +3,7 @@* init.c: PROM library initialisation code. * * Copyright (C) 1998 Harald Koerfgen -* Copyright (C) 2002, 2004 Maciej W. Rozycki +* Copyright (C) 2002, 2004, 2026 Maciej W. Rozycki */ #include <linux/init.h> #include <linux/kernel.h>
@@ -20,6 +20,10 @@#include <asm/dec/prom.h> +#ifdef CONFIG_64BIT +unsigned long o32_stk[O32_STK_SIZE ]__initdata = {0 }; +#endif +int (*__rex_bootinit)(void );int (*__rex_bootread)(void );int (*__rex_getbitmap)(memmap *);
arch/mips/dec/setup.c +0 -6
@@ -776,9 +776,3 @@ void __init arch_init_irq(void)pr_err ("Failed to register halt interrupt\n" ); } } - -asmlinkage unsigned int dec_irq_dispatch(unsigned int irq) -{ -do_IRQ (irq); -return 0 ; -}
arch/mips/fw/lib/call_o32.S +1 -1
@@ -74,7 +74,7 @@ NESTED(call_o32, O32_FRAMESZ, ra) PTR_LA t1,6*O32_SZREG(fp) li t2,O32_ARGC-6 1: - lw t3,(t0) + ld t3,(t0) REG_ADDU t0,SZREG sw t3,(t1) REG_SUBU t2,1
arch/mips/include/asm/dec/prom.h +13 -2
@@ -4,7 +4,7 @@* * DECstation PROM interface. * -* Copyright (C) 2002 Maciej W. Rozycki +* Copyright (C) 2002, 2026 Maciej W. Rozycki * * Based on arch/mips/dec/prom/prom.h by the Anonymous. */
@@ -97,6 +97,17 @@ extern int (*__pmax_close)(int);#ifdef CONFIG_64BIT +#define O32_STK_SIZE 512 +extern unsigned long o32_stk[]; + +/* Switch the stack if outside the 32-bit address space. */ +static inline unsigned long *o32_get_stk (void ) +{ +long fp = (long )__builtin_frame_address (0 ); + +return fp != (int )fp ? o32_stk +O32_STK_SIZE :NULL ; +} +/* * On MIPS64 we have to call PROM functions via a helper * dispatcher to accommodate ABI incompatibilities.
@@ -128,7 +139,7 @@ int __DEC_PROM_O32(_prom_printf, (int (*)(char *, ...), void *, char *, ...));#define prom_getchar () _prom_getchar(__prom_getchar, NULL)#define prom_getenv (x) _prom_getenv(__prom_getenv, NULL, x) -#define prom_printf(x...) _prom_printf(__prom_printf, NULL, x) +#define prom_printf(x...) _prom_printf(__prom_printf, o32_get_stk(), x)#else /* !CONFIG_64BIT */
arch/mips/kernel/mips-mt-fpaff.c +15 -13
@@ -70,11 +70,16 @@ asmlinkage long mipsmt_sys_sched_setaffinity(pid_t pid, unsigned int len,struct task_struct *p;int retval; -if (len <sizeof (new_mask)) -return -EINVAL ; - -if (copy_from_user (&new_mask, user_mask_ptr,sizeof (new_mask))) -return -EFAULT ; +if (!alloc_cpumask_var (&new_mask,GFP_KERNEL )) +return -ENOMEM ; +if (len <cpumask_size ()) +cpumask_clear (new_mask); +else if (len >cpumask_size ()) + len =cpumask_size (); +if (copy_from_user (new_mask, user_mask_ptr, len)) { + retval = -EFAULT ; + goto out_free_new_mask; + }cpus_read_lock ();rcu_read_lock ();
@@ -83,7 +88,8 @@ asmlinkage long mipsmt_sys_sched_setaffinity(pid_t pid, unsigned int len,if (!p) {rcu_read_unlock ();cpus_read_unlock (); -return -ESRCH ; + retval = -ESRCH ; + goto out_free_new_mask; }/* Prevent p going away */
@@ -94,13 +100,9 @@ asmlinkage long mipsmt_sys_sched_setaffinity(pid_t pid, unsigned int len, retval = -ENOMEM ; goto out_put_task; } -if (!alloc_cpumask_var (&new_mask,GFP_KERNEL )) { - retval = -ENOMEM ; - goto out_free_cpus_allowed; - }if (!alloc_cpumask_var (&effective_mask,GFP_KERNEL )) { retval = -ENOMEM ; - goto out_free_new_mask; + goto out_free_cpus_allowed; }if (!check_same_owner (p) && !capable (CAP_SYS_NICE )) { retval = -EPERM ;
@@ -141,13 +143,13 @@ asmlinkage long mipsmt_sys_sched_setaffinity(pid_t pid, unsigned int len, } out_unlock:free_cpumask_var (effective_mask); -out_free_new_mask: -free_cpumask_var (new_mask); out_free_cpus_allowed:free_cpumask_var (cpus_allowed); out_put_task:put_task_struct (p);cpus_read_unlock (); +out_free_new_mask: +free_cpumask_var (new_mask);return retval; }
arch/mips/kernel/smp.c +2 -0
@@ -19,6 +19,7 @@#include <linux/sched/mm.h> #include <linux/cpumask.h> #include <linux/cpu.h> +#include <linux/rcupdate.h> #include <linux/err.h> #include <linux/ftrace.h> #include <linux/irqdomain.h>
@@ -410,6 +411,7 @@ static void stop_this_cpu(void *dummy)set_cpu_online (smp_processor_id (), false);calculate_cpu_foreign_map ();local_irq_disable (); +rcu_report_dead (smp_processor_id ());while (1 ); }
arch/mips/mm/init.c +8 -4
@@ -281,9 +281,15 @@ static int maar_res_walk(unsigned long start_pfn, unsigned long nr_pages, void *data) {struct maar_walk_info *wi = data; -struct maar_config *cfg = &wi->cfg[wi->num_cfg]; +struct maar_config *cfg;unsigned int maar_align; +/* Ensure we don't overflow the cfg array */ +if (WARN_ON (wi->num_cfg >=ARRAY_SIZE (wi->cfg))) +return -1 ; + + cfg = &wi->cfg[wi->num_cfg]; +/* MAAR registers hold physical addresses right shifted by 4 bits */ maar_align =BIT (MIPS_MAAR_ADDR_SHIFT +4 );
@@ -292,9 +298,7 @@ static int maar_res_walk(unsigned long start_pfn, unsigned long nr_pages, cfg->upper =ALIGN_DOWN (PFN_PHYS (start_pfn + nr_pages), maar_align) -1 ; cfg->attrs =MIPS_MAAR_S ; -/* Ensure we don't overflow the cfg array */ -if (!WARN_ON (wi->num_cfg >=ARRAY_SIZE (wi->cfg))) - wi->num_cfg++; + wi->num_cfg++;return 0 ; }
arch/mips/n64/init.c +1 -1
@@ -50,7 +50,7 @@ void __init prom_init(void)#define W 320#define H 240 -#define REG_BASE ((u32 *) CKSEG1ADDR(0x4400000)) +#define REG_BASE ((u32 __iomem *) CKSEG1ADDR(0x4400000))static void __init n64rdp_write_reg (const u8 reg,const u32 value) {
arch/mips/ralink/mt7621.c +1 -1
@@ -63,7 +63,7 @@ phys_addr_t mips_cpc_default_phys_base(void)static bool __init mt7621_addr_wraparound_test (phys_addr_t size) { -void *dm = (void *)KSEG1ADDR (&detect_magic); +void __iomem *dm = (void __iomem *)KSEG1ADDR (&detect_magic);if (CPHYSADDR (dm + size) >=MT7621_LOWMEM_MAX_SIZE )return true;
arch/mips/sgi-ip22/ip22-gio.c +2 -5
@@ -30,7 +30,6 @@ static struct {static void gio_bus_release (struct device *dev) { -kfree (dev); }static struct device gio_bus = {
@@ -101,6 +100,8 @@ int gio_device_register(struct gio_device *giodev) { giodev->dev.bus = &gio_bus_type; giodev->dev.parent = &gio_bus; + giodev->dev.release = gio_release_dev; +return device_register (&giodev->dev); }EXPORT_SYMBOL_GPL (gio_device_register);
@@ -132,13 +133,9 @@ static int gio_device_probe(struct device *dev)if (!drv->probe)return error; -gio_dev_get (gio_dev); - match =gio_match_device (drv->id_table, gio_dev);if (match) error = drv->probe (gio_dev, match); -if (error) -gio_dev_put (gio_dev);return error; }
arch/powerpc/kexec/core_64.c +1 -3
@@ -167,7 +167,7 @@ static void kexec_prepare_cpus_wait(int wait_state)int my_cpu, i, notified=-1 ;hw_breakpoint_disable (); - my_cpu =get_cpu (); + my_cpu =raw_smp_processor_id ();/* Make sure each CPU has at least made it to the state we need. * * FIXME: There is a (slim) chance of a problem if not all of the CPUs
@@ -265,8 +265,6 @@ static void kexec_prepare_cpus(void)/* after we tell the others to go down */ if (ppc_md.kexec_cpu_down) ppc_md.kexec_cpu_down(0, 0); - - put_cpu(); }#else /* ! SMP */
arch/powerpc/perf/core-fsl-emb.c +2 -1
@@ -366,9 +366,10 @@ static void fsl_emb_pmu_del(struct perf_event *event, int flags) cpuhw->n_events--; +put_cpu_var (cpu_hw_events); + out:perf_pmu_enable (event->pmu); -put_cpu_var (cpu_hw_events); }static void fsl_emb_pmu_start (struct perf_event *event,int ef_flags)
arch/powerpc/platforms/cell/spufs/file.c +4 -2
@@ -268,10 +268,12 @@ static int spufs_mem_mmap_access(struct vm_area_struct *vma,if (write && !(vma->vm_flags &VM_WRITE ))return -EACCES ; +if (offset >=LS_SIZE ) +return -EFAULT ;if (spu_acquire (ctx))return -EINTR ; -if ((offset + len) > vma->vm_end) - len = vma->vm_end - offset; +if ((offset + len) >LS_SIZE ) + len =LS_SIZE - offset; local_store = ctx->ops->get_ls (ctx);if (write)memcpy_toio (local_store + offset, buf, len);
arch/powerpc/platforms/powernv/setup.c +2 -1
@@ -396,7 +396,8 @@ static void pnv_kexec_wait_secondaries_down(void) {int my_cpu, i, notified =-1 ; - my_cpu =get_cpu (); +/* Called with interrupts disabled, so the CPU is pinned. */ + my_cpu =raw_smp_processor_id ();for_each_online_cpu (i) {uint8_t status;
arch/powerpc/platforms/pseries/papr_platform_attributes.c +3 -5
@@ -271,11 +271,9 @@ static int __init papr_init(void) esi_buf_size =ESI_HDR_SIZE + (CURR_MAX_ESI_ATTRS * max_esi_attrs); temp_esi_buf =krealloc (esi_buf, esi_buf_size,GFP_KERNEL ); -if (temp_esi_buf) - esi_buf = temp_esi_buf; -else -return -ENOMEM ; - +if (!temp_esi_buf) + goto out_free_esi_buf; + esi_buf = temp_esi_buf; goto retry; }
arch/riscv/kernel/cacheinfo.c +1 -1
@@ -128,7 +128,7 @@ int populate_cache_leaves(unsigned int cpu)ci_leaf_init (this_leaf++,CACHE_TYPE_DATA , level); levels = level; } -of_node_put (np); +of_node_put (prev);return 0 ; }
arch/riscv/kernel/machine_kexec.c +3 -0
@@ -67,6 +67,9 @@ machine_kexec_prepare(struct kimage *image)if (image->segment[i].memsz <=sizeof (fdt))continue ; +if (!image->segment[i].buf) +continue ; +if (image->file_mode)memcpy (&fdt, image->segment[i].buf,sizeof (fdt));else if (copy_from_user (&fdt, image->segment[i].buf,sizeof (fdt)))
arch/riscv/kernel/probes/rethook_trampoline.S +3 -0
@@ -41,6 +41,9 @@ REG_S x29, PT_T4(sp) REG_S x30, PT_T5(sp) REG_S x31, PT_T6(sp) + /* save original sp */ + addi a0, sp, PT_SIZE_ON_STACK + REG_S a0, PT_SP(sp) .endm .macro restore_all_base_regs
arch/riscv/kernel/stacktrace.c +1 -1
@@ -129,7 +129,7 @@ void notrace walk_stackframe(struct task_struct *task,while (!kstack_end (ksp)) {if (__kernel_text_address (pc) &&unlikely (!fn (arg, pc)))break ; - pc =READ_ONCE_NOCHECK (*ksp++) -0x4 ; + pc =READ_ONCE_NOCHECK (*ksp++); } }
arch/riscv/net/bpf_jit_core.c +2 -1
@@ -123,7 +123,8 @@ struct bpf_prog *bpf_int_jit_compile(struct bpf_prog *prog)bpf_jit_binary_pack_alloc (prog_size + extable_size, &jit_data->ro_image,sizeof (u32), &jit_data->header, &jit_data->image, - bpf_fill_ill_insns); + bpf_fill_ill_insns, +bpf_prog_was_classic (prog));if (!jit_data->ro_header) { prog = orig_prog; goto out_offset;
arch/s390/kernel/perf_cpum_cf.c +3 -0
@@ -17,6 +17,7 @@#include <linux/export.h> #include <linux/miscdevice.h> #include <linux/perf_event.h> +#include <linux/nospec.h> #include <asm/cpu_mf.h> #include <asm/hwctrset.h>
@@ -766,6 +767,7 @@ static int __hw_perf_event_init(struct perf_event *event, unsigned int type)if (!is_userspace_event (ev)) {if (ev >=ARRAY_SIZE (cpumf_generic_events_user))return -EOPNOTSUPP ; + ev =array_index_nospec (ev,ARRAY_SIZE (cpumf_generic_events_user)); ev = cpumf_generic_events_user[ev]; } }else if (!attr->exclude_kernel && attr->exclude_user) {
@@ -776,6 +778,7 @@ static int __hw_perf_event_init(struct perf_event *event, unsigned int type)if (!is_userspace_event (ev)) {if (ev >=ARRAY_SIZE (cpumf_generic_events_basic))return -EOPNOTSUPP ; + ev =array_index_nospec (ev,ARRAY_SIZE (cpumf_generic_events_basic)); ev = cpumf_generic_events_basic[ev]; } }
arch/s390/kernel/process.c +1 -1
@@ -48,7 +48,7 @@ void ret_from_fork(void) asm("ret_from_fork");void __ret_from_fork (struct task_struct *prev,struct pt_regs *regs) { -void (*func)(void *arg); +int (*func)(void *arg);schedule_tail (prev);
arch/s390/kvm/pci.c +9 -3
@@ -302,9 +302,14 @@ static int kvm_s390_pci_aif_enable(struct zpci_dev *zdev, struct zpci_fib *fib, gaite->gisc = fib->fmt0.isc; gaite->count++; - gaite->aisbo = fib->fmt0.aisbo; - gaite->aisb =virt_to_phys (page_address (aisb_page) + (fib->fmt0.aisb & - ~PAGE_MASK )); +if (fib->fmt0.sum ==1 ) { + gaite->aisbo = fib->fmt0.aisbo; + gaite->aisb =virt_to_phys (page_address (aisb_page) + + (fib->fmt0.aisb & ~PAGE_MASK )); + }else { + gaite->aisbo =0 ; + gaite->aisb =0 ; + } aift->kzdev[zdev->aisb] = zdev->kzdev;spin_unlock_irq (&aift->gait_lock);
@@ -330,6 +335,7 @@ static int kvm_s390_pci_aif_enable(struct zpci_dev *zdev, struct zpci_fib *fib, unpin1:unpin_user_page (aibv_page); out: +kvm_s390_gisc_unregister (kvm, fib->fmt0.isc);return rc; }
arch/sparc/kernel/led.c +1 -1
@@ -78,7 +78,7 @@ static ssize_t led_proc_write(struct file *file, const char __user *buffer,return PTR_ERR (buf);/* work around \n when echo'ing into proc */ -if (buf[count -1 ] =='\n' ) +if (count >0 && buf[count -1 ] =='\n' ) buf[count -1 ] ='\0' ;/* before we change anything we want to stop any running timers,
arch/x86/boot/compressed/acpi.c +6 -1
@@ -182,10 +182,15 @@ static unsigned long get_cmdline_acpi_rsdp(void)char val[MAX_ADDR_LEN ] = { };int ret; - ret =cmdline_find_option ("acpi_rsdp" , val,MAX_ADDR_LEN ); + ret =cmdline_find_option ("acpi_rsdp" , val,sizeof (val));if (ret <0 )return 0 ; +if (ret >=sizeof (val)) { +warn ("acpi_rsdp= value too long; ignoring" ); +return 0 ; + } +if (boot_kstrtoul (val,16 , &addr))return 0 ;#endif
arch/x86/boot/early_serial_console.c +7 -4
@@ -117,7 +117,7 @@ static unsigned int probe_baud(int port)static void parse_console_uart8250 (void ) {char optstr[64 ], *options; -int baud =DEFAULT_BAUD ; +int baud;int port =0 ;/*
@@ -136,10 +136,13 @@ static void parse_console_uart8250(void)else return ; -if (options && (options[0 ] ==',' )) - baud =simple_strtoull (options +1 , &options,0 ); -else +if (options && (options[0 ] ==',' )) { + baud =simple_strtoull (options +1 ,NULL ,0 ); +if (!baud) + baud =DEFAULT_BAUD ; + }else { baud =probe_baud (port); + }if (port)early_serial_init (port, baud);
arch/x86/events/amd/brs.c +5 -5
@@ -259,13 +259,13 @@ void amd_brs_disable_all(void)amd_brs_disable (); } -static bool amd_brs_match_plm (struct perf_event *event,u64 to) +static bool amd_brs_match_plm (struct perf_event *event,u64 from,u64 to) {int type = event->attr.branch_sample_type;int plm_k =PERF_SAMPLE_BRANCH_KERNEL |PERF_SAMPLE_BRANCH_HV ;int plm_u =PERF_SAMPLE_BRANCH_USER ; -if (!(type & plm_k) &&kernel_ip (to)) +if (!(type & plm_k) && (kernel_ip (to) ||kernel_ip (from)))return 0 ;if (!(type & plm_u) && !kernel_ip (to))
@@ -338,11 +338,11 @@ void amd_brs_drain(void)*/ to = (u64)(((s64 )to << shift) >> shift); -if (!amd_brs_match_plm (event, to)) -continue ; -rdmsrl (brs_from (brs_idx), from); +if (!amd_brs_match_plm (event, from, to)) +continue ; +perf_clear_branch_entry_bitfields (br+nr); br[nr].from = from;
arch/x86/events/amd/core.c +3 -3
@@ -1364,12 +1364,12 @@ static int __init amd_core_pmu_init(void)u64 even_ctr_mask =0ULL ;int i; -if (!boot_cpu_has (X86_FEATURE_PERFCTR_CORE )) -return 0 ; -/* Avoid calculating the value each time in the NMI handler */ perf_nmi_window =msecs_to_jiffies (100 ); +if (!boot_cpu_has (X86_FEATURE_PERFCTR_CORE )) +return 0 ; +/* * If core performance counter extensions exists, we must use * MSR_F15H_PERF_CTL/MSR_F15H_PERF_CTR msrs. See also
arch/x86/events/amd/lbr.c +2 -1
@@ -124,7 +124,8 @@ static void amd_pmu_lbr_filter(void) }/* If type does not correspond, then discard */ -if (type ==X86_BR_NONE || (br_sel & type) != type) { +if (type ==X86_BR_NONE || (br_sel & type) != type || + (!(br_sel &X86_BR_KERNEL ) &&kernel_ip (cpuc->lbr_entries[i].from))) { cpuc->lbr_entries[i].from =0 ;/* mark invalid */ compress = true; }
arch/x86/events/intel/uncore_snb.c +0 -7
@@ -537,12 +537,6 @@ void tgl_uncore_cpu_init(void) skl_uncore_msr_ops.init_box = rkl_uncore_msr_init_box; } -static void adl_uncore_msr_init_box (struct intel_uncore_box *box) -{ -if (box->pmu->pmu_idx ==0 ) -wrmsrl (ADL_UNC_PERF_GLOBAL_CTL ,SNB_UNC_GLOBAL_CTL_EN ); -} -static void adl_uncore_msr_enable_box (struct intel_uncore_box *box) {wrmsrl (ADL_UNC_PERF_GLOBAL_CTL ,SNB_UNC_GLOBAL_CTL_EN );
@@ -561,7 +555,6 @@ static void adl_uncore_msr_exit_box(struct intel_uncore_box *box) }static struct intel_uncore_ops adl_uncore_msr_ops = { - .init_box = adl_uncore_msr_init_box, .enable_box = adl_uncore_msr_enable_box, .disable_box = adl_uncore_msr_disable_box, .exit_box = adl_uncore_msr_exit_box,
arch/x86/include/asm/nospec-branch.h +4 -0
@@ -418,6 +418,10 @@ extern void srso_alias_untrain_ret(void);extern void entry_untrain_ret (void );extern void entry_ibpb (void ); +#ifdef CONFIG_BPF_JIT +extern void bpf_arch_ibpb (void ); +#endif +#ifdef CONFIG_X86_64 extern void clear_bhb_loop (void );#endif
arch/x86/kernel/cpu/bugs.c +45 -5
88 lines not on this page · raw message
arch/x86/kvm/lapic.c +6 -2
@@ -3138,6 +3138,12 @@ static void apic_sync_pv_eoi_from_guest(struct kvm_vcpu *vcpu, struct kvm_lapic *apic) {int vector; + +if (unlikely (!pv_eoi_enabled (vcpu))) { +__clear_bit (KVM_APIC_PV_EOI_PENDING , &vcpu->arch.apic_attention); +return ; + } +/* * PV EOI state is derived from KVM_APIC_PV_EOI_PENDING in host * and KVM_PV_EOI_ENABLED in guest memory as follows:
@@ -3149,8 +3155,6 @@ static void apic_sync_pv_eoi_from_guest(struct kvm_vcpu *vcpu,* KVM_APIC_PV_EOI_PENDING is set, KVM_PV_EOI_ENABLED is unset: * -> host enabled PV EOI, guest executed EOI. */ -BUG_ON (!pv_eoi_enabled (vcpu)); -if (pv_eoi_test_and_clr_pending (vcpu))return ; vector =apic_set_eoi (apic);
arch/x86/kvm/vmx/vmx.c +19 -19
@@ -1810,6 +1810,24 @@ static void vmx_inject_exception(struct kvm_vcpu *vcpu)u32 intr_info = ex->vector |INTR_INFO_VALID_MASK ;struct vcpu_vmx *vmx =to_vmx (vcpu); +/* +* When injecting a #DB, single-stepping is enabled in RFLAGS, and STI +* or MOV-SS blocking is active, set vmcs.PENDING_DBG_EXCEPTIONS.BS to +* prevent a false positive from VM-Entry consistency check. VM-Entry +* asserts that a single-step #DB _must_ be pending in this scenario, +* as the previous instruction cannot have toggled RFLAGS.TF 0=>1 +* (because STI and POP/MOV don't modify RFLAGS), therefore the one +* instruction delay when activating single-step breakpoints must have +* already expired. However, the CPU isn't smart enough to peek at +* vmcs.VM_ENTRY_INTR_INFO_FIELD and so doesn't realize that yes, there +* is indeed a #DB pending/imminent. +*/ +if (ex->vector ==DB_VECTOR && + (vmx_get_rflags (vcpu) &X86_EFLAGS_TF ) && +vmx_get_interrupt_shadow (vcpu)) +vmcs_writel (GUEST_PENDING_DBG_EXCEPTIONS , +vmcs_readl (GUEST_PENDING_DBG_EXCEPTIONS ) |DR6_BS ); +kvm_deliver_exception_payload (vcpu, ex);if (ex->has_error_code) {
@@ -5281,26 +5299,9 @@ static int handle_exception_nmi(struct kvm_vcpu *vcpu)* avoid single-step #DB and MTF updates, as ICEBP is * higher priority. Note, skipping ICEBP still clears * STI and MOVSS blocking. -* -* For all other #DBs, set vmcs.PENDING_DBG_EXCEPTIONS.BS -* if single-step is enabled in RFLAGS and STI or MOVSS -* blocking is active, as the CPU doesn't set the bit -* on VM-Exit due to #DB interception. VM-Entry has a -* consistency check that a single-step #DB is pending -* in this scenario as the previous instruction cannot -* have toggled RFLAGS.TF 0=>1 (because STI and POP/MOV -* don't modify RFLAGS), therefore the one instruction -* delay when activating single-step breakpoints must -* have already expired. Note, the CPU sets/clears BS -* as appropriate for all other VM-Exits types. */ if (is_icebp (intr_info))WARN_ON (!skip_emulated_instruction (vcpu)); -else if ((vmx_get_rflags (vcpu) &X86_EFLAGS_TF ) && - (vmcs_read32 (GUEST_INTERRUPTIBILITY_INFO ) & - (GUEST_INTR_STATE_STI |GUEST_INTR_STATE_MOV_SS ))) -vmcs_writel (GUEST_PENDING_DBG_EXCEPTIONS , -vmcs_readl (GUEST_PENDING_DBG_EXCEPTIONS ) |DR6_BS );kvm_queue_exception_p (vcpu,DB_VECTOR , dr6);return 1 ;
@@ -6700,11 +6701,10 @@ static noinstr void vmx_l1d_flush(struct kvm_vcpu *vcpu)static void vmx_update_cr8_intercept (struct kvm_vcpu *vcpu,int tpr,int irr) { -struct vmcs12 *vmcs12 =get_vmcs12 (vcpu);int tpr_threshold;if (is_guest_mode (vcpu) && -nested_cpu_has (vmcs12,CPU_BASED_TPR_SHADOW )) +nested_cpu_has (get_vmcs12 (vcpu),CPU_BASED_TPR_SHADOW ))return ; tpr_threshold = (irr ==-1 || tpr < irr) ?0 : irr;
arch/x86/mm/numa_emulation.c +13 -4
@@ -211,7 +211,7 @@ static u64 uniform_size(u64 max_addr, u64 base, u64 hole, int nr_nodes)* Sets up fake nodes of `size' interleaved over physical nodes ranging from * `addr' to `max_addr'. * -* Returns zero on success or negative on error. +* Returns node ID of the next node on success or negative error code. */ static int __init split_nodes_size_interleave_uniform(struct numa_meminfo *ei, struct numa_meminfo *pi,
@@ -395,7 +395,7 @@ void __init numa_emulation(struct numa_meminfo *numa_meminfo, int numa_dist_cnt)if (strchr (emu_cmdline,'U' )) {nodemask_t physnode_mask = numa_nodes_parsed;unsigned long n; -int nid =0 ; +int nid =0 , nr_created; n =simple_strtoul (emu_cmdline, &emu_cmdline,0 ); ret =-1 ;
@@ -413,9 +413,18 @@ void __init numa_emulation(struct numa_meminfo *numa_meminfo, int numa_dist_cnt) n, &pi.blk[0], nid);if (ret <0 )break ; -if (ret < n) { + +/* +* If no memory was found for this physical node, +* skip the under-allocation check. +*/ +if (ret == nid) +continue ; + + nr_created = ret - nid; +if (nr_created < n) {pr_info ("%s: phys: %d only got %d of %ld nodes, failing\n" , - __func__, i, ret, n); + __func__, i, nr_created, n); ret =-1 ;break ; }
arch/x86/mm/tlb.c +8 -8
@@ -612,6 +612,14 @@ void switch_mm_irqs_off(struct mm_struct *prev, struct mm_struct *next,*/ cond_mitigation (tsk); +/* +* Indicate that CR3 is about to change. nmi_uaccess_okay() +* and others are sensitive to the window where mm_cpumask(), +* CR3 and cpu_tlbstate.loaded_mm are not all in sync. +*/ +this_cpu_write (cpu_tlbstate.loaded_mm,LOADED_MM_SWITCHING ); +barrier (); +/* * Stop remote flushes for the previous mm. * Skip kernel threads; we never send init_mm TLB flushing IPIs,
@@ -629,14 +637,6 @@ void switch_mm_irqs_off(struct mm_struct *prev, struct mm_struct *next, next_tlb_gen =atomic64_read (&next->context.tlb_gen);choose_new_asid (next, next_tlb_gen, &new_asid, &need_flush); - -/* -* Indicate that CR3 is about to change. nmi_uaccess_okay() -* and others are sensitive to the window where mm_cpumask(), -* CR3 and cpu_tlbstate.loaded_mm are not all in sync. -*/ -this_cpu_write (cpu_tlbstate.loaded_mm,LOADED_MM_SWITCHING ); -barrier (); } new_lam =mm_lam_cr3_mask (next);
arch/x86/net/bpf_jit_comp.c +2 -1
@@ -2927,7 +2927,8 @@ struct bpf_prog *bpf_int_jit_compile(struct bpf_prog *prog)/* allocate module memory for x86 insns and extable */ header =bpf_jit_binary_pack_alloc (roundup (proglen, align) + extable_size, &image, align, &rw_header, &rw_image, - jit_fill_hole); + jit_fill_hole, +bpf_prog_was_classic (prog));if (!header) { prog = orig_prog; goto out_addrs;
arch/x86/platform/olpc/olpc-xo15-sci.c +1 -0
@@ -185,6 +185,7 @@ static int xo15_sci_add(struct acpi_device *device)static void xo15_sci_remove (struct acpi_device *device) { +device_init_wakeup (&device->dev, false);acpi_disable_gpe (NULL , xo15_sci_gpe);acpi_remove_gpe_handler (NULL , xo15_sci_gpe, xo15_sci_gpe_handler);cancel_work_sync (&sci_work);
block/bdev.c +6 -5
@@ -383,16 +383,12 @@ EXPORT_SYMBOL_GPL(blockdev_superblock);void __init bdev_cache_init (void ) { -int err;static struct vfsmount *bd_mnt; bdev_cachep =kmem_cache_create ("bdev_cache" ,sizeof (struct bdev_inode ),0 , (SLAB_HWCACHE_ALIGN |SLAB_RECLAIM_ACCOUNT |SLAB_MEM_SPREAD |SLAB_ACCOUNT |SLAB_PANIC ), init_once); - err =register_filesystem (&bd_type); -if (err) -panic ("Cannot register bdev pseudo-fs" ); bd_mnt =kern_mount (&bd_type);if (IS_ERR (bd_mnt))panic ("Cannot create bdev pseudo-fs" );
@@ -1028,7 +1024,12 @@ void bdev_mark_dead(struct block_device *bdev, bool surprise)mutex_lock (&bdev->bd_holder_lock);if (bdev->bd_holder_ops && bdev->bd_holder_ops->mark_dead) bdev->bd_holder_ops->mark_dead (bdev, surprise); -else +/* +* On surprise removal the device is already gone; syncing is +* futile and can hang forever waiting on I/O that will never +* complete. Match fs_bdev_mark_dead(), which also skips it. +*/ +else if (!surprise)sync_blockdev (bdev);mutex_unlock (&bdev->bd_holder_lock);
block/partitions/aix.c +9 -0
@@ -228,6 +228,15 @@ int aix_partition(struct parsed_partitions *state)int next_lp_ix =1 ;int lp_ix; +/* +* pvd was read into a fixed-size struct pvd whose ppe[] array +* holds ARRAY_SIZE(pvd->ppe) entries. pp_count is an +* unvalidated on-disk __be16, so clamp the scan to the array +* size to avoid walking past the allocation. +*/ +if (numpps >ARRAY_SIZE (pvd->ppe)) + numpps =ARRAY_SIZE (pvd->ppe); +for (i =0 ; i < numpps; i +=1 ) {struct ppe *p = pvd->ppe + i;unsigned int lv_ix;
crypto/af_alg.c +25 -48
92 lines not on this page · raw message
crypto/algif_aead.c +4 -4
@@ -9,10 +9,10 @@* The following concept of the memory management is used: * * The kernel maintains two SGLs, the TX SGL and the RX SGL. The TX SGL is -* filled by user space with the data submitted via sendmsg (maybe with -* MSG_SPLICE_PAGES). Filling up the TX SGL does not cause a crypto operation -* -- the data will only be tracked by the kernel. Upon receipt of one recvmsg -* call, the caller must provide a buffer which is tracked with the RX SGL. +* filled by user space with the data submitted via sendmsg. Filling up the TX +* SGL does not cause a crypto operation -- the data will only be tracked by the +* kernel. Upon receipt of one recvmsg call, the caller must provide a buffer +* which is tracked with the RX SGL. * * During the processing of the recvmsg operation, the cipher request is * allocated and prepared. As part of the recvmsg operation, the processed
crypto/algif_skcipher.c +18 -31
55 lines not on this page · raw message
crypto/asymmetric_keys/verify_pefile.c +2 -0
@@ -305,6 +305,8 @@ static int pefile_digest_pe_contents(const void *pebuf, unsigned int pelen,if (pelen > hashed_bytes) { tmp = hashed_bytes + ctx->certs_size; +if (tmp <= hashed_bytes || pelen < tmp) +return -ELIBBAD ; ret =crypto_shash_update (desc, pebuf + hashed_bytes, pelen - tmp);
crypto/asymmetric_keys/x509_loader.c +1 -1
@@ -20,7 +20,7 @@ int x509_load_certificate_list(const u8 cert_list[],*/ if (end - p <4 ) goto dodgy_cert; -if (p[0 ] !=0x30 && +if (p[0 ] !=0x30 || p[1 ] !=0x82 ) goto dodgy_cert; plen = (p[2 ] <<8 ) | p[3 ];
crypto/drbg.c +2 -2
@@ -603,7 +603,7 @@ static int drbg_ctr_generate(struct drbg_state *drbg,if (addtl && !list_empty (addtl)) { ret =drbg_ctr_update (drbg, addtl,2 );if (ret) -return 0 ; +return ret; }/* 10.2.1.5.2 step 4.1 */
@@ -2095,7 +2095,7 @@ static inline void __init drbg_fill_array(struct rng_alg *alg,* it is selected. */ if (fips_enabled) - alg->base.cra_priority +=200 ; + alg->base.cra_priority +=2000 ; alg->base.cra_ctxsize =sizeof (struct drbg_state ); alg->base.cra_module =THIS_MODULE ;
crypto/ecc.c +20 -11
@@ -400,14 +400,26 @@ static uint128_t mul_64_64(u64 left, u64 right)return result; } -static uint128_t add_128_128 (uint128_t a,uint128_t b) +/* Calculate addition with overflow checking. Returns true on wrap-around, +* false otherwise. +*/ +static bool check_add_128_128_overflow (uint128_t *result,uint128_t a, +uint128_t b) { -uint128_t result; +bool carry; - result.m_low = a.m_low + b.m_low; - result.m_high = a.m_high + b.m_high + (result.m_low < a.m_low); + result->m_low = a.m_low + b.m_low; + carry = (result->m_low < a.m_low); -return result; + result->m_high = a.m_high + b.m_high + carry; + +/* Using constant-time bitwise arithmetic to prevent timing +* side-channels. +*/ + carry = (result->m_high < a.m_high) | + ((result->m_high == a.m_high) & carry); + +return carry; } static void vli_mult(u64 *result, const u64 *left, const u64 *right,
@@ -432,9 +444,7 @@ static void vli_mult(u64 *result, const u64 *left, const u64 *right,uint128_t product; product =mul_64_64 (left[i], right[k - i]); - - r01 =add_128_128 (r01, product); - r2 += (r01.m_high < product.m_high); + r2 +=check_add_128_128_overflow (&r01, r01, product); } result[k] = r01.m_low;
@@ -457,7 +467,7 @@ static void vli_umult(u64 *result, const u64 *left, u32 right,uint128_t product; product =mul_64_64 (left[k], right); - r01 =add_128_128 (r01, product); +check_add_128_128_overflow (&r01, r01, product);/* no carry */ result[k] = r01.m_low; r01.m_low = r01.m_high;
@@ -494,8 +504,7 @@ static void vli_square(u64 *result, const u64 *left, unsigned int ndigits) product.m_low <<=1 ; } - r01 =add_128_128 (r01, product); - r2 += (r01.m_high < product.m_high); + r2 +=check_add_128_128_overflow (&r01, r01, product); } result[k] = r01.m_low;
crypto/ecrdsa.c +1 -1
@@ -153,7 +153,7 @@ int ecrdsa_param_curve(void *context, size_t hdrlen, unsigned char tag,struct ecrdsa_ctx *ctx = context; ctx->curve_oid =look_up_OID (value, vlen); -if (!ctx->curve_oid) +if (ctx->curve_oid ==OID__NR )return -EINVAL ; ctx->curve =get_curve_by_oid (ctx->curve_oid);return 0 ;
crypto/pcrypt.c +4 -0
@@ -122,6 +122,8 @@ static int pcrypt_aead_encrypt(struct aead_request *req)return -EINPROGRESS ;if (err == -EBUSY ) {/* try non-parallel mode */ +aead_request_set_callback (creq, flags, req->base.complete, + req->base.data);return crypto_aead_encrypt (creq); }
@@ -173,6 +175,8 @@ static int pcrypt_aead_decrypt(struct aead_request *req)return -EINPROGRESS ;if (err == -EBUSY ) {/* try non-parallel mode */ +aead_request_set_callback (creq, flags, req->base.complete, + req->base.data);return crypto_aead_decrypt (creq); }
crypto/rng.c +11 -0
@@ -259,5 +259,16 @@ void crypto_unregister_rngs(struct rng_alg *algs, int count) }EXPORT_SYMBOL_GPL (crypto_unregister_rngs); +static void __exit rng_exit(void) +{ +int err; + + err =crypto_del_default_rng (); +if (err) +pr_err ("Failed delete default RNG: %d\n" , err); +} + +module_exit (rng_exit); +MODULE_LICENSE ("GPL" );MODULE_DESCRIPTION ("Random Number Generator" );
drivers/acpi/acpi_ipmi.c +2 -2
@@ -485,7 +485,7 @@ static void ipmi_bmc_gone(int iface)mutex_lock (&driver_data.ipmi_lock);list_for_each_entry_safe (iter, temp, &driver_data.ipmi_devices, head) { -if (iter->ipmi_ifnum != iface) { +if (iter->ipmi_ifnum == iface) { ipmi_device = iter;__ipmi_dev_kill (iter);break ;
@@ -545,7 +545,6 @@ acpi_ipmi_space_handler(u32 function, acpi_physical_address address,return AE_TYPE ; } -acpi_ipmi_msg_get (tx_msg);mutex_lock (&driver_data.ipmi_lock);/* Do not add a tx_msg that can not be flushed. */ if (ipmi_device->dead) {
@@ -553,6 +552,7 @@ acpi_ipmi_space_handler(u32 function, acpi_physical_address address,ipmi_msg_release (tx_msg);return AE_NOT_EXIST ; } +acpi_ipmi_msg_get (tx_msg);spin_lock_irqsave (&ipmi_device->tx_msg_lock, flags);list_add_tail (&tx_msg->head, &ipmi_device->tx_msg_list);spin_unlock_irqrestore (&ipmi_device->tx_msg_lock, flags);
drivers/acpi/acpi_tad.c +5 -1
@@ -588,12 +588,16 @@ static int acpi_tad_remove(struct platform_device *pdev)static int acpi_tad_probe (struct platform_device *pdev) {struct device *dev = &pdev->dev; -acpi_handle handle =ACPI_HANDLE (dev);struct acpi_tad_driver_data *dd; +acpi_handle handle;acpi_status status;unsigned long long caps;int ret; + handle =ACPI_HANDLE (dev); +if (!handle) +return -ENODEV ; + ret =acpi_install_cmos_rtc_space_handler (handle);if (ret <0 ) {dev_info (dev,"Unable to install space handler\n" );
drivers/acpi/bus.c +70 -0
76 lines not on this page · raw message
drivers/acpi/cppc_acpi.c +7 -4
@@ -171,8 +171,13 @@ show_cppc_data(cppc_get_perf_caps, cppc_perf_caps, nominal_freq);show_cppc_data (cppc_get_perf_ctrs, cppc_perf_fb_ctrs, reference_perf);show_cppc_data (cppc_get_perf_ctrs, cppc_perf_fb_ctrs, wraparound_time); -/* Check for valid access_width, otherwise, fallback to using bit_width */ -#define GET_BIT_WIDTH (reg) ((reg)->access_width ? (8 << ((reg)->access_width - 1)) : (reg)->bit_width) +/* +* PCC reuses the access_width field as the subspace id, so only decode access +* size for non-PCC registers. Otherwise, use the bit_width. +*/ +#define GET_BIT_WIDTH (reg) (((reg)->access_width && \ + (reg)->space_id != ACPI_ADR_SPACE_PLATFORM_COMM) ? \ + (8 << ((reg)->access_width - 1)) : (reg)->bit_width)/* Shift and apply the mask for CPC reads/writes */ #define MASK_VAL_READ (reg, val) (((val) >> (reg)->bit_offset) & \
@@ -1033,7 +1038,6 @@ static int cpc_read(int cpu, struct cpc_register_resource *reg_res, u64 *val)* by the bit width field; the access size is used to indicate * the PCC subspace id. */ - size = reg->bit_width; vaddr =GET_PCC_VADDR (reg->address, pcc_ss_id); }else if (reg->space_id ==ACPI_ADR_SPACE_SYSTEM_MEMORY )
@@ -1105,7 +1109,6 @@ static int cpc_write(int cpu, struct cpc_register_resource *reg_res, u64 val)* by the bit width field; the access size is used to indicate * the PCC subspace id. */ - size = reg->bit_width; vaddr =GET_PCC_VADDR (reg->address, pcc_ss_id); }else if (reg->space_id ==ACPI_ADR_SPACE_SYSTEM_MEMORY )
drivers/acpi/nfit/core.c +63 -26
165 lines not on this page · raw message
drivers/acpi/pfr_telemetry.c +5 -1
@@ -365,10 +365,14 @@ static void pfrt_log_put_idx(void *data)static int acpi_pfrt_log_probe (struct platform_device *pdev) { -acpi_handle handle =ACPI_HANDLE (&pdev->dev);struct pfrt_log_device *pfrt_log_dev; +acpi_handle handle;int ret; + handle =ACPI_HANDLE (&pdev->dev); +if (!handle) +return -ENODEV ; +if (!acpi_has_method (handle,"_DSM" )) {dev_dbg (&pdev->dev,"Missing _DSM\n" );return -ENODEV ;
drivers/acpi/pfr_update.c +5 -1
@@ -507,10 +507,14 @@ static void pfru_put_idx(void *data)static int acpi_pfru_probe (struct platform_device *pdev) { -acpi_handle handle =ACPI_HANDLE (&pdev->dev);struct pfru_device *pfru_dev; +acpi_handle handle;int ret; + handle =ACPI_HANDLE (&pdev->dev); +if (!handle) +return -ENODEV ; +if (!acpi_has_method (handle,"_DSM" )) {dev_dbg (&pdev->dev,"Missing _DSM\n" );return -ENODEV ;
drivers/acpi/resource.c +3 -3
@@ -839,7 +839,7 @@ bool acpi_dev_resource_interrupt(struct acpi_resource *ares, int index,EXPORT_SYMBOL_GPL (acpi_dev_resource_interrupt);/** -* acpi_dev_free_resource_list - Free resource from %acpi_dev_get_resources(). +* acpi_dev_free_resource_list - Free resource from acpi_dev_get_resources(). * @list: The head of the resource list to free. */ void acpi_dev_free_resource_list (struct list_head *list)
@@ -959,7 +959,7 @@ static int __acpi_dev_get_resources(struct acpi_device *adev,* * The resultant struct resource objects are put on the list pointed to by * @list, that must be empty initially, as members of struct resource_entry -* objects. Callers of this routine should use %acpi_dev_free_resource_list() to +* objects. Callers of this routine should use acpi_dev_free_resource_list() to * free that list. * * The number of resources in the output list is returned on success, an error
@@ -1000,7 +1000,7 @@ static int is_memory(struct acpi_resource *ares, void *not_used)* The resultant struct resource objects are put on the list pointed to * by @list, that must be empty initially, as members of struct * resource_entry objects. Callers of this routine should use -* %acpi_dev_free_resource_list() to free that list. +* acpi_dev_free_resource_list() to free that list. * * The number of resources in the output list is returned on success, * an error code reflecting the error condition is returned otherwise.
drivers/acpi/thermal.c +1 -1
@@ -926,7 +926,7 @@ static int acpi_thermal_add(struct acpi_device *device)int result;if (!device) -return -EINVAL ; +return -ENODEV ; tz =kzalloc (sizeof (struct acpi_thermal ),GFP_KERNEL );if (!tz)
drivers/android/binder.c +18 -1
@@ -1567,7 +1567,20 @@ static void binder_txn_latency_free(struct binder_transaction *t)static void binder_free_transaction (struct binder_transaction *t) { -struct binder_proc *target_proc = t->to_proc; +struct binder_thread *target_thread; +struct binder_proc *target_proc; + +spin_lock (&t->lock); + target_proc = t->to_proc; + target_thread = t->to_thread; +/* +* Pin target_thread to keep target_proc alive. Undelivered +* transactions with !target_thread are safe, as target_proc +* can only be the current context there. +*/ +if (target_thread) +atomic_inc (&target_thread->tmp_ref); +spin_unlock (&t->lock);if (target_proc) {binder_inner_proc_lock (target_proc);
@@ -1581,6 +1594,10 @@ static void binder_free_transaction(struct binder_transaction *t) t->buffer->transaction =NULL ;binder_inner_proc_unlock (target_proc); } + +if (target_thread) +binder_thread_dec_tmpref (target_thread); +if (trace_binder_txn_latency_free_enabled ())binder_txn_latency_free (t);/*
drivers/ata/libata-core.c +17 -2
@@ -1508,6 +1508,7 @@ static unsigned ata_exec_internal_sg(struct ata_device *dev, {struct ata_link *link = dev->link;struct ata_port *ap = link->ap; +const bool owns_eh_mutex = ap->host->eh_owner == current;u8 command = tf->command;int auto_timeout =0 ;struct ata_queued_cmd *qc;
@@ -1586,11 +1587,25 @@ static unsigned ata_exec_internal_sg(struct ata_device *dev, } } -ata_eh_release (ap); +if (owns_eh_mutex) { +/* +* To prevent that the compiler complains about the +* ata_eh_release() call below. +*/ +__acquire (&ap->host->eh_mutex); +ata_eh_release (ap); + } rc =wait_for_completion_timeout (&wait,msecs_to_jiffies (timeout)); -ata_eh_acquire (ap); +if (owns_eh_mutex) { +ata_eh_acquire (ap); +/* +* To prevent that the compiler complains about the above +* ata_eh_acquire() call. +*/ +__release (&ap->host->eh_mutex); + }ata_sff_flush_pio_task (ap);
drivers/ata/pata_pxa.c +1 -0
@@ -287,6 +287,7 @@ static int pxa_ata_probe(struct platform_device *pdev) ret =dmaengine_slave_config (data->dma_chan, &config);if (ret <0 ) {dev_err (&pdev->dev,"dma configuration failed: %d\n" , ret); +dma_release_channel (data->dma_chan);return ret; }
drivers/ata/sata_gemini.c +1 -1
@@ -385,7 +385,7 @@ static int gemini_sata_probe(struct platform_device *pdev)if (sg->ide_pins) { ret =gemini_setup_ide_pins (dev);if (ret) -return ret; + goto out_unprep_clk; }dev_info (dev,"set up the Gemini IDE/SATA nexus\n" );
drivers/base/dd.c +3 -4
@@ -326,12 +326,11 @@ void deferred_probe_extend_timeout(void)* If the work hasn't been queued yet or if the work expired, don't * start a new one. */ -if (cancel_delayed_work (&deferred_probe_timeout_work)) { -schedule_delayed_work (&deferred_probe_timeout_work, - driver_deferred_probe_timeout *HZ ); +if (delayed_work_pending (&deferred_probe_timeout_work) && +mod_delayed_work (system_wq, &deferred_probe_timeout_work, +secs_to_jiffies (driver_deferred_probe_timeout)))pr_debug ("Extended deferred probe timeout by %d secs\n" , driver_deferred_probe_timeout); - } }/**
drivers/base/firmware_loader/main.c +2 -1
@@ -1506,9 +1506,10 @@ static void device_cache_fw_images(void)mutex_lock (&fw_lock); fwc->state =FW_LOADER_START_CACHE ; -dpm_for_each_dev (NULL , dev_cache_fw_image);mutex_unlock (&fw_lock); +dpm_for_each_dev (NULL , dev_cache_fw_image); +/* wait for completion of caching firmware for all devices */ async_synchronize_full_domain (&fw_cache_domain);
drivers/base/firmware_loader/sysfs_upload.c +3 -5
@@ -340,7 +340,6 @@ firmware_upload_register(struct module *module, struct device *parent, goto free_fw_upload_priv; } fw_upload->priv = fw_sysfs; - fw_sysfs->fw_upload_priv = fw_upload_priv; fw_dev = &fw_sysfs->dev; ret = alloc_lookup_fw_priv(name, &fw_cache, &fw_priv, NULL, 0, 0,
@@ -348,10 +347,12 @@ firmware_upload_register(struct module *module, struct device *parent,if (ret !=0 ) {if (ret >0 ) ret = -EINVAL ; - goto free_fw_sysfs; +put_device (fw_dev); + goto free_fw_upload_priv; } fw_priv->is_paged_buf = true; fw_sysfs->fw_priv = fw_priv; + fw_sysfs->fw_upload_priv = fw_upload_priv; ret =device_add (fw_dev);if (ret) {
@@ -362,9 +363,6 @@ firmware_upload_register(struct module *module, struct device *parent,return fw_upload; -free_fw_sysfs: -kfree (fw_sysfs); - free_fw_upload_priv:kfree (fw_upload_priv);
drivers/base/power/main.c +5 -1
@@ -101,7 +101,7 @@ void device_pm_sleep_init(struct device *dev) dev->power.is_noirq_suspended = false; dev->power.is_late_suspended = false;init_completion (&dev->power.completion); -complete_all (&dev->power.completion); +complete (&dev->power.completion); dev->power.wakeup =NULL ;INIT_LIST_HEAD (&dev->power.entry); }
@@ -238,6 +238,10 @@ static void dpm_wait(struct device *dev, bool async)if (!dev)return ; +/* Devices with no PM support don't use the completion. */ +if (dev->power.no_pm) +return ; +if (async || (pm_async_enabled && dev->power.async_suspend))wait_for_completion (&dev->power.completion); }
drivers/base/property.c +3 -1
@@ -1207,8 +1207,10 @@ fwnode_graph_get_endpoint_by_id(const struct fwnode_handle *fwnode,if (fwnode_ep.port != port)continue ; -if (fwnode_ep.id == endpoint) +if (fwnode_ep.id == endpoint) { +fwnode_handle_put (best_ep);return ep; + }if (!endpoint_next)continue ;
drivers/block/drbd/drbd_receiver.c +5 -0
@@ -1998,6 +1998,11 @@ static int recv_dless_read(struct drbd_peer_device *peer_device, struct drbd_req data_size -= digest_size; } +if (data_size <0 ) { +drbd_err (peer_device,"Invalid data reply size\n" ); +return -EIO ; + } +/* optimistically update recv_cnt. if receiving fails below, * we disconnect anyways, and counters will be reset. */ peer_device->device->recv_cnt += data_size>>9 ;
drivers/bluetooth/Kconfig +2 -0
@@ -412,6 +412,7 @@ config BT_ATH3K config BT_MTKSDIO tristate "MediaTek HCI SDIO driver" depends on MMC + depends on USB || !BT_HCIBTUSB_MTK select BT_MTK help MediaTek Bluetooth HCI SDIO driver.
@@ -424,6 +425,7 @@ config BT_MTKSDIO config BT_MTKUART tristate "MediaTek HCI UART driver" depends on SERIAL_DEV_BUS + depends on USB || !BT_HCIBTUSB_MTK select BT_MTK help MediaTek Bluetooth HCI UART driver.
drivers/bluetooth/bpa10x.c +6 -2
@@ -254,9 +254,13 @@ static int bpa10x_setup(struct hci_dev *hdev)if (IS_ERR (skb))return PTR_ERR (skb); -bt_dev_info (hdev,"%s" , (char *)(skb->data +1 )); +/* Bounded print: the device controls skb->len. */ +if (skb->len >1 ) { +int len = skb->len -1 ; -hci_set_fw_info (hdev,"%s" , skb->data +1 ); +bt_dev_info (hdev,"%.*s" , len, (char *)(skb->data +1 )); +hci_set_fw_info (hdev,"%.*s" , len, skb->data +1 ); + }kfree_skb (skb);return 0 ;
drivers/bluetooth/btmtk.c +461 -9
161 lines not on this page · raw message
drivers/bluetooth/btusb.c +46 -372
418 lines not on this page · raw message
drivers/cpufreq/cpufreq_conservative.c +1 -11
Lines of this file are not shown. View the raw message.
drivers/crypto/allwinner/sun4i-ss/Makefile +0 -1
Lines of this file are not shown. View the raw message.
drivers/crypto/allwinner/sun4i-ss/sun4i-ss-core.c +0 -36
Lines of this file are not shown. View the raw message.
drivers/crypto/allwinner/sun4i-ss/sun4i-ss-prng.c deleted +0 -69
69 lines not on this page · raw message
drivers/crypto/allwinner/sun4i-ss/sun4i-ss.h +0 -20
Lines of this file are not shown. View the raw message.
drivers/crypto/amcc/crypto4xx_alg.c +0 -106
106 lines not on this page · raw message
drivers/crypto/amcc/crypto4xx_core.c +1 -129
130 lines not on this page · raw message
drivers/crypto/amcc/crypto4xx_reg_def.h +0 -11
Lines of this file are not shown. View the raw message.
drivers/crypto/amlogic/amlogic-gxl-core.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/crypto/cavium/cpt/cptvf_reqmanager.c +2 -2
Lines of this file are not shown. View the raw message.
drivers/crypto/hisilicon/trng/trng.c +2 -296
298 lines not on this page · raw message
drivers/crypto/intel/qat/qat_common/adf_accel_devices.h +2 -0
Lines of this file are not shown. View the raw message.
drivers/crypto/intel/qat/qat_common/adf_aer.c +4 -3
Lines of this file are not shown. View the raw message.
drivers/crypto/intel/qat/qat_common/adf_common_drv.h +2 -0
Lines of this file are not shown. View the raw message.
drivers/crypto/intel/qat/qat_common/adf_isr.c +39 -0
Lines of this file are not shown. View the raw message.
drivers/crypto/intel/qat/qat_common/adf_sriov.c +18 -2
Lines of this file are not shown. View the raw message.
drivers/crypto/intel/qat/qat_common/qat_asym_algs.c +5 -5
Lines of this file are not shown. View the raw message.
drivers/crypto/marvell/octeontx/otx_cptvf_reqmgr.c +2 -2
Lines of this file are not shown. View the raw message.
drivers/crypto/talitos.c +284 -280
564 lines not on this page · raw message
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c +9 -7
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c +5 -1
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/amd/amdgpu/amdgpu_gart.c +1 -3
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c +17 -8
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c +0 -2
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/amd/amdgpu/amdgpu_mca.c +3 -0
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.h +2 -1
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/amd/amdkfd/kfd_chardev.c +3 -0
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/amd/amdkfd/kfd_events.c +5 -0
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/amd/display/dc/dc_dmub_srv.c +4 -7
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/amd/display/modules/info_packet/info_packet.c +2 -0
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_de.c +45 -35
80 lines not on this page · raw message
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c +11 -0
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_vdac.c +0 -22
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/i915/gt/intel_region_lmem.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/nouveau/nvkm/subdev/bios/shadowramin.c +2 -1
Lines of this file are not shown. View the raw message.
drivers/gpu/drm/rockchip/rockchip_drm_gem.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/gpu/host1x/bus.c +60 -2
62 lines not on this page · raw message
drivers/hid/hid-appleir.c +35 -10
45 lines not on this page · raw message
drivers/hid/hid-sensor-hub.c +71 -6
77 lines not on this page · raw message
drivers/hid/hid-wiimote-modules.c +29 -29
58 lines not on this page · raw message
drivers/hwtracing/coresight/coresight-cti-platform.c +1 -0
Lines of this file are not shown. View the raw message.
drivers/hwtracing/coresight/coresight-etb10.c +3 -3
Lines of this file are not shown. View the raw message.
drivers/hwtracing/coresight/coresight-etm4x-core.c +2 -2
Lines of this file are not shown. View the raw message.
drivers/hwtracing/coresight/ultrasoc-smb.c +1 -0
Lines of this file are not shown. View the raw message.
drivers/i2c/i2c-core-base.c +55 -28
83 lines not on this page · raw message
drivers/iio/common/inv_sensors/inv_sensors_timestamp.c +12 -14
Lines of this file are not shown. View the raw message.
drivers/iio/common/st_sensors/st_sensors_core.c +17 -6
Lines of this file are not shown. View the raw message.
drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c +2 -2
Lines of this file are not shown. View the raw message.
drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c +28 -16
44 lines not on this page · raw message
drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h +3 -0
Lines of this file are not shown. View the raw message.
drivers/iio/imu/inv_icm42600/inv_icm42600_core.c +1 -0
Lines of this file are not shown. View the raw message.
drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c +2 -2
Lines of this file are not shown. View the raw message.
drivers/iio/imu/inv_mpu6050/inv_mpu_ring.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c +20 -1
Lines of this file are not shown. View the raw message.
drivers/iio/orientation/hid-sensor-rotation.c +38 -2
Lines of this file are not shown. View the raw message.
drivers/infiniband/hw/hns/hns_roce_hem.c +4 -4
Lines of this file are not shown. View the raw message.
drivers/infiniband/hw/hns/hns_roce_main.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/infiniband/hw/mlx4/sysfs.c +27 -18
45 lines not on this page · raw message
drivers/input/joystick/iforce/iforce-packets.c +11 -7
Lines of this file are not shown. View the raw message.
drivers/input/misc/ims-pcu.c +103 -14
117 lines not on this page · raw message
drivers/md/dm-thin-metadata.c +21 -46
67 lines not on this page · raw message
drivers/media/platform/mediatek/jpeg/mtk_jpeg_core.c +2 -1
Lines of this file are not shown. View the raw message.
drivers/media/platform/nxp/imx8-isi/imx8-isi-core.c +10 -14
Lines of this file are not shown. View the raw message.
drivers/media/platform/qcom/venus/helpers.c +2 -2
Lines of this file are not shown. View the raw message.
drivers/media/platform/qcom/venus/hfi_platform_v4.c +10 -10
Lines of this file are not shown. View the raw message.
drivers/media/platform/qcom/venus/hfi_platform_v6.c +8 -8
Lines of this file are not shown. View the raw message.
drivers/media/platform/rockchip/rga/rga-hw.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/media/platform/rockchip/rga/rga-hw.h +1 -1
Lines of this file are not shown. View the raw message.
drivers/media/usb/uvc/uvc_video.c +69 -53
122 lines not on this page · raw message
drivers/mtd/nand/onenand/onenand_samsung.c +6 -1
Lines of this file are not shown. View the raw message.
drivers/mtd/nand/raw/pl35x-nand-controller.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/net/bonding/bond_main.c +47 -82
129 lines not on this page · raw message
drivers/net/ethernet/amazon/ena/ena_netdev.c +21 -2
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c +1 -2
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/broadcom/genet/bcmgenet.c +8 -15
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/cavium/liquidio/cn23xx_pf_device.c +10 -8
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/chelsio/cxgb4/t4_hw.c +0 -8
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/freescale/enetc/enetc.c +7 -0
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/freescale/fman/fman.c +3 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/freescale/gianfar.c +11 -5
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/intel/i40e/i40e_debug.h +1 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/intel/ice/ice_common.c +0 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/intel/ice/ice_ethtool.c +8 -4
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/intel/ice/ice_main.c +5 -11
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/intel/ice/ice_vf_lib.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/marvell/octeontx2/af/mcs.c +3 -3
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c +2 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/marvell/octeontx2/af/rvu_nix.c +2 -2
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/marvell/octeontx2/nic/cn10k_macsec.c +8 -2
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c +38 -6
44 lines not on this page · raw message
drivers/net/ethernet/marvell/prestera/prestera_main.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/mediatek/mtk_ppe.c +2 -2
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/mellanox/mlx5/core/en/hv_vhca_stats.c +20 -9
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/mellanox/mlx5/core/en_accel/macsec.c +28 -19
47 lines not on this page · raw message
drivers/net/ethernet/mellanox/mlx5/core/lib/hv_vhca.c +6 -2
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/mellanox/mlx5/core/lib/hv_vhca.h +4 -2
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/mellanox/mlx5/core/lib/port_tun.c +2 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/mellanox/mlx5/core/main.c +7 -5
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/mellanox/mlxsw/spectrum.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/mellanox/mlxsw/spectrum_router.c +1 -0
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/microchip/lan743x_main.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/microchip/lan966x/lan966x_vcap_impl.c +3 -2
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/microchip/sparx5/sparx5_switchdev.c +3 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/microchip/sparx5/sparx5_vcap_impl.c +3 -2
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/microchip/vcap/vcap_api.c +41 -31
72 lines not on this page · raw message
drivers/net/ethernet/microchip/vcap/vcap_api.h +2 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/microchip/vcap/vcap_api_debugfs.c +4 -4
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/microchip/vcap/vcap_api_debugfs_kunit.c +2 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/microchip/vcap/vcap_api_kunit.c +2 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/microchip/vcap/vcap_api_private.h +3 -0
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/microsoft/mana/gdma_main.c +2 -0
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/microsoft/mana/mana_en.c +2 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/pensando/ionic/ionic_ethtool.c +9 -2
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/qlogic/qede/qede_fp.c +7 -2
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/qualcomm/rmnet/rmnet_handlers.c +4 -1
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/qualcomm/rmnet/rmnet_map.h +1 -0
Lines of this file are not shown. View the raw message.
drivers/net/ethernet/qualcomm/rmnet/rmnet_map_data.c +40 -32
72 lines not on this page · raw message
drivers/net/ethernet/sunplus/spl2sw_phy.c +4 -2
Lines of this file are not shown. View the raw message.
drivers/net/team/team.c deleted +0 -3120
3,120 lines not on this page · raw message
drivers/net/team/team_core.c new file +3182 -0
3,182 lines not on this page · raw message
drivers/net/usb/lan78xx.c +164 -154
318 lines not on this page · raw message
drivers/net/virtio_net.c +47 -8
55 lines not on this page · raw message
drivers/net/wireless/ath/wcn36xx/smd.c +13 -0
Lines of this file are not shown. View the raw message.
drivers/net/wireless/intersil/hostap/hostap_main.c +1 -0
Lines of this file are not shown. View the raw message.
drivers/net/wireless/marvell/mwifiex/join.c +0 -1
Lines of this file are not shown. View the raw message.
drivers/net/wireless/mediatek/mt76/mac80211.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/net/wireless/mediatek/mt76/mt7915/mac.c +5 -5
Lines of this file are not shown. View the raw message.
drivers/net/wireless/mediatek/mt76/mt7921/mac.c +3 -2
Lines of this file are not shown. View the raw message.
drivers/net/wireless/ralink/rt2x00/rt2x00dev.c +10 -2
Lines of this file are not shown. View the raw message.
drivers/net/wireless/realtek/rtw88/pci.c +5 -0
Lines of this file are not shown. View the raw message.
drivers/net/wireless/realtek/rtw89/fw.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/net/wwan/iosm/iosm_ipc_mux_codec.c +30 -10
Lines of this file are not shown. View the raw message.
drivers/ntb/hw/epf/ntb_hw_epf.c +60 -29
89 lines not on this page · raw message
drivers/nvdimm/region_devs.c +22 -44
66 lines not on this page · raw message
drivers/nvme/target/fabrics-cmd-auth.c +35 -25
60 lines not on this page · raw message
drivers/pci/controller/dwc/pcie-designware-host.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/pci/controller/mobiveil/pcie-mobiveil-host.c +3 -5
Lines of this file are not shown. View the raw message.
drivers/pci/controller/pci-host-common.c +4 -0
Lines of this file are not shown. View the raw message.
drivers/pci/controller/pci-loongson.c +16 -15
Lines of this file are not shown. View the raw message.
drivers/pci/controller/pcie-altera-msi.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/pci/controller/pcie-iproc-bcma.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/pci/controller/pcie-iproc-platform.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/pci/controller/pcie-mediatek-gen3.c +2 -2
Lines of this file are not shown. View the raw message.
drivers/pci/controller/pcie-mediatek.c +80 -50
130 lines not on this page · raw message
drivers/pci/controller/pcie-rcar-host.c +0 -1
Lines of this file are not shown. View the raw message.
drivers/pci/controller/pcie-xilinx-nwl.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/pci/endpoint/functions/pci-epf-ntb.c +11 -10
Lines of this file are not shown. View the raw message.
drivers/pci/endpoint/functions/pci-epf-vntb.c +3 -6
Lines of this file are not shown. View the raw message.
drivers/pci/pci.c +0 -139
139 lines not on this page · raw message
drivers/pci/quirks.c +20 -31
51 lines not on this page · raw message
drivers/pci/rebar.c new file +218 -0
218 lines not on this page · raw message
drivers/pci/rom.c +126 -23
149 lines not on this page · raw message
drivers/pci/setup-bus.c +74 -30
104 lines not on this page · raw message
drivers/pci/setup-res.c +0 -53
53 lines not on this page · raw message
drivers/pinctrl/cirrus/pinctrl-cs42l43.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/pinctrl/mediatek/pinctrl-mt8167.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/pinctrl/mediatek/pinctrl-mt8516.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/platform/x86/amd/pmc/pmc-quirks.c +39 -0
Lines of this file are not shown. View the raw message.
drivers/platform/x86/amd/pmc/pmc.c +57 -3
60 lines not on this page · raw message
drivers/pmdomain/imx/imx8m-blk-ctrl.c +44 -2
46 lines not on this page · raw message
drivers/power/supply/power_supply_core.c +3 -8
Lines of this file are not shown. View the raw message.
drivers/rpmsg/rpmsg_core.c +7 -36
43 lines not on this page · raw message
drivers/s390/crypto/zcrypt_cex2a.c deleted +0 -0
drivers/s390/crypto/zcrypt_cex2a.h deleted +0 -0
drivers/s390/crypto/zcrypt_cex2c.c deleted +0 -0
drivers/s390/crypto/zcrypt_cex2c.h deleted +0 -0
drivers/scsi/scsi_transport_sas.c +48 -53
101 lines not on this page · raw message
drivers/slimbus/qcom-ngd-ctrl.c +33 -29
62 lines not on this page · raw message
drivers/staging/media/atomisp/pci/atomisp_cmd.c +2 -4
Lines of this file are not shown. View the raw message.
drivers/staging/media/atomisp/pci/sh_css.c +3 -3
Lines of this file are not shown. View the raw message.
drivers/staging/media/ipu3/ipu3-css-params.c +6 -2
Lines of this file are not shown. View the raw message.
drivers/staging/media/sunxi/cedrus/cedrus.c +3 -1
Lines of this file are not shown. View the raw message.
drivers/staging/rtl8723bs/core/rtw_ieee80211.c +57 -36
93 lines not on this page · raw message
drivers/staging/rtl8723bs/core/rtw_mlme_ext.c +19 -1
Lines of this file are not shown. View the raw message.
drivers/staging/rtl8723bs/core/rtw_security.c +1 -1
Lines of this file are not shown. View the raw message.
drivers/staging/rtl8723bs/core/rtw_wlan_util.c +18 -5
Lines of this file are not shown. View the raw message.
drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c +8 -0
Lines of this file are not shown. View the raw message.
drivers/target/iscsi/iscsi_target_auth.c +4 -2
Lines of this file are not shown. View the raw message.
drivers/target/loopback/tcm_loop.c +0 -64
64 lines not on this page · raw message
drivers/target/target_core_fabric_lib.c +69 -20
89 lines not on this page · raw message
drivers/usb/dwc3/gadget.c +36 -7
43 lines not on this page · raw message
drivers/usb/gadget/function/f_printer.c +1 -2
Lines of this file are not shown. View the raw message.
drivers/usb/misc/idmouse.c +22 -23
45 lines not on this page · raw message
drivers/usb/serial/digi_acceleport.c +33 -10
43 lines not on this page · raw message
drivers/vdpa/vdpa_user/vduse_dev.c +40 -24
64 lines not on this page · raw message
drivers/watchdog/sama5d4_wdt.c +21 -27
48 lines not on this page · raw message
fs/btrfs/inode.c +109 -29
138 lines not on this page · raw message
fs/configfs/dir.c +44 -13
57 lines not on this page · raw message
fs/exfat/dir.c +48 -13
61 lines not on this page · raw message
fs/exfat/namei.c +182 -147
329 lines not on this page · raw message
fs/f2fs/gc.c +42 -8
50 lines not on this page · raw message
fs/fs-writeback.c +92 -41
133 lines not on this page · raw message
fs/hfs/bnode.c +29 -27
56 lines not on this page · raw message
fs/hfs/btree.h +36 -35
71 lines not on this page · raw message
fs/hfs/hfs_fs.h +52 -36
88 lines not on this page · raw message
fs/hfsplus/bnode.c +32 -30
62 lines not on this page · raw message
fs/nfs/flexfilelayout/flexfilelayout.c +33 -0
Lines of this file are not shown. View the raw message.
fs/nfs/flexfilelayout/flexfilelayout.h +16 -0
Lines of this file are not shown. View the raw message.
fs/nfsd/nfs4recover.c +50 -70
120 lines not on this page · raw message
fs/nfsd/vfs.c +31 -11
42 lines not on this page · raw message
fs/ntfs3/file.c +41 -7
48 lines not on this page · raw message
fs/ntfs3/frecord.c +51 -0
51 lines not on this page · raw message
fs/ntfs3/fslog.c +119 -12
131 lines not on this page · raw message
fs/ntfs3/index.c +42 -3
45 lines not on this page · raw message
fs/ocfs2/inode.c +148 -2
150 lines not on this page · raw message
fs/proc/base.c +80 -102
182 lines not on this page · raw message
fs/smb/client/cifs_swn.c +266 -61
327 lines not on this page · raw message
fs/smb/client/smb2misc.c +44 -8
52 lines not on this page · raw message
fs/smb/client/smb2ops.c +30 -26
56 lines not on this page · raw message
fs/smb/server/connection.c +86 -15
101 lines not on this page · raw message
fs/smb/server/smb2pdu.c +101 -39
140 lines not on this page · raw message
fs/smb/server/vfs_cache.c +97 -22
119 lines not on this page · raw message
fs/xfs/xfs_attr_item.c +58 -57
115 lines not on this page · raw message
fs/xfs/xfs_bmap_item.c +50 -42
92 lines not on this page · raw message
fs/xfs/xfs_extfree_item.c +50 -67
117 lines not on this page · raw message
fs/xfs/xfs_log_recover.c +31 -21
52 lines not on this page · raw message
fs/xfs/xfs_refcount_item.c +39 -88
127 lines not on this page · raw message
fs/xfs/xfs_rmap_item.c +74 -77
151 lines not on this page · raw message
include/dt-bindings/power/fsl,imx93-power.h +1 -0
Lines of this file are not shown. View the raw message.
include/linux/iio/common/inv_sensors_timestamp.h +1 -2
Lines of this file are not shown. View the raw message.
include/linux/seqlock.h +110 -0
110 lines not on this page · raw message
include/net/netfilter/nf_conntrack_extend.h +0 -12
Lines of this file are not shown. View the raw message.
kernel/audit.c +78 -7
85 lines not on this page · raw message
kernel/bpf/cgroup.c +63 -47
110 lines not on this page · raw message
kernel/bpf/core.c +63 -7
70 lines not on this page · raw message
kernel/trace/trace_events_hist.c +29 -12
41 lines not on this page · raw message
net/batman-adv/distributed-arp-table.c +28 -2
Lines of this file are not shown. View the raw message.
net/bluetooth/6lowpan.c +39 -37
76 lines not on this page · raw message
net/bluetooth/hci_conn.c +24 -32
56 lines not on this page · raw message
net/bluetooth/hci_core.c +41 -42
83 lines not on this page · raw message
net/bluetooth/hci_sync.c +163 -30
193 lines not on this page · raw message
net/bluetooth/l2cap_core.c +116 -43
159 lines not on this page · raw message
net/bluetooth/l2cap_sock.c +51 -56
107 lines not on this page · raw message
net/bluetooth/sco.c +39 -21
60 lines not on this page · raw message
net/can/bcm.c +101 -26
127 lines not on this page · raw message
net/core/dev.c +88 -0
88 lines not on this page · raw message
net/ipv6/mcast.c +99 -66
165 lines not on this page · raw message
net/ipv6/netfilter/nf_conntrack_reasm.c +2 -1
Lines of this file are not shown. View the raw message.
net/netfilter/ipset/ip_set_hash_gen.h +42 -25
67 lines not on this page · raw message
net/netfilter/nf_conntrack_core.c +17 -62
79 lines not on this page · raw message
net/netfilter/nft_log.c +1 -57
58 lines not on this page · raw message
net/netfilter/xt_AUDIT.c +1 -57
58 lines not on this page · raw message
net/openvswitch/flow_netlink.c +157 -44
201 lines not on this page · raw message
net/sched/sch_codel.c +43 -5
48 lines not on this page · raw message
net/sched/sch_fq_codel.c +39 -2
41 lines not on this page · raw message
net/sched/sch_teql.c +88 -40
128 lines not on this page · raw message
net/sctp/diag.c +32 -35
67 lines not on this page · raw message
net/sunrpc/xprtrdma/rpc_rdma.c +125 -47
172 lines not on this page · raw message
net/sunrpc/xprtrdma/transport.c +74 -11
85 lines not on this page · raw message
net/sunrpc/xprtrdma/verbs.c +128 -39
167 lines not on this page · raw message
samples/trace_events/trace-events-sample.c +4 -0
Lines of this file are not shown. View the raw message.
security/apparmor/domain.c +46 -12
58 lines not on this page · raw message
security/selinux/hooks.c +42 -19
61 lines not on this page · raw message
sound/core/seq/seq_midi.c +41 -14
55 lines not on this page · raw message
sound/soc/mediatek/mt8183/mt8183-afe-pcm.c +11 -0
Lines of this file are not shown. View the raw message.
sound/soc/mediatek/mt8192/mt8192-afe-pcm.c +9 -0
Lines of this file are not shown. View the raw message.
sound/soc/sof/ipc3-control.c +60 -19
79 lines not on this page · raw message
sound/usb/mixer_quirks.c +59 -42
101 lines not on this page · raw message
sound/usb/mixer_us16x08.c +76 -51
127 lines not on this page · raw message
tools/lib/bpf/strset.c +41 -21
62 lines not on this page · raw message
tools/power/x86/intel-speed-select/isst-daemon.c +8 -1
Lines of this file are not shown. View the raw message.
tools/testing/selftests/bpf/bpf_util.h +32 -13
45 lines not on this page · raw message
tools/testing/selftests/bpf/cgroup_helpers.c +1 -1
Lines of this file are not shown. View the raw message.
tools/testing/selftests/bpf/prog_tests/verifier_log.c +1 -0
Lines of this file are not shown. View the raw message.
tools/testing/selftests/bpf/progs/bpf_iter_task_vma.c +1 -1
Lines of this file are not shown. View the raw message.
tools/testing/selftests/hid/hid_bpf.c +42 -28
70 lines not on this page · raw message
tools/testing/selftests/hid/progs/hid.c +69 -25
94 lines not on this page · raw message
tools/testing/selftests/hid/progs/hid_bpf_helpers.h +83 -1
84 lines not on this page · raw message
tools/testing/selftests/mm/compaction_test.c +3 -0
Lines of this file are not shown. View the raw message.
tools/testing/selftests/mm/hmm-tests.c +52 -11
63 lines not on this page · raw message
tools/usb/usbip/libsrc/usbip_device_driver.c +4 -0
Lines of this file are not shown. View the raw message.
The rest of this diff is not shown. View the raw message.
Part of the diff is not shown here. View the raw message.