1. 26 Sep, 2024 19 commits
    • Joseph Qi's avatar
      ocfs2: fix uninit-value in ocfs2_get_block() · 2af148ef
      Joseph Qi authored
      syzbot reported an uninit-value BUG:
      
      BUG: KMSAN: uninit-value in ocfs2_get_block+0xed2/0x2710 fs/ocfs2/aops.c:159
      ocfs2_get_block+0xed2/0x2710 fs/ocfs2/aops.c:159
      do_mpage_readpage+0xc45/0x2780 fs/mpage.c:225
      mpage_readahead+0x43f/0x840 fs/mpage.c:374
      ocfs2_readahead+0x269/0x320 fs/ocfs2/aops.c:381
      read_pages+0x193/0x1110 mm/readahead.c:160
      page_cache_ra_unbounded+0x901/0x9f0 mm/readahead.c:273
      do_page_cache_ra mm/readahead.c:303 [inline]
      force_page_cache_ra+0x3b1/0x4b0 mm/readahead.c:332
      force_page_cache_readahead mm/internal.h:347 [inline]
      generic_fadvise+0x6b0/0xa90 mm/fadvise.c:106
      vfs_fadvise mm/fadvise.c:185 [inline]
      ksys_fadvise64_64 mm/fadvise.c:199 [inline]
      __do_sys_fadvise64 mm/fadvise.c:214 [inline]
      __se_sys_fadvise64 mm/fadvise.c:212 [inline]
      __x64_sys_fadvise64+0x1fb/0x3a0 mm/fadvise.c:212
      x64_sys_call+0xe11/0x3ba0
      arch/x86/include/generated/asm/syscalls_64.h:222
      do_syscall_x64 arch/x86/entry/common.c:52 [inline]
      do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83
      entry_SYSCALL_64_after_hwframe+0x77/0x7f
      
      This is because when ocfs2_extent_map_get_blocks() fails, p_blkno is
      uninitialized.  So the error log will trigger the above uninit-value
      access.
      
      The error log is out-of-date since get_blocks() was removed long time ago.
      And the error code will be logged in ocfs2_extent_map_get_blocks() once
      ocfs2_get_cluster() fails, so fix this by only logging inode and block.
      
      Link: https://syzkaller.appspot.com/bug?extid=9709e73bae885b05314b
      Link: https://lkml.kernel.org/r/20240925090600.3643376-1-joseph.qi@linux.alibaba.com
      Fixes: ccd979bd ("[PATCH] OCFS2: The Second Oracle Cluster Filesystem")
      Signed-off-by: default avatarJoseph Qi <joseph.qi@linux.alibaba.com>
      Reported-by: syzbot+9709e73bae885b05314b@syzkaller.appspotmail.com
      Tested-by: syzbot+9709e73bae885b05314b@syzkaller.appspotmail.com
      Cc: Heming Zhao <heming.zhao@suse.com>
      Cc: Mark Fasheh <mark@fasheh.com>
      Cc: Joel Becker <jlbec@evilplan.org>
      Cc: Junxiao Bi <junxiao.bi@oracle.com>
      Cc: Changwei Ge <gechangwei@live.cn>
      Cc: Gang He <ghe@suse.com>
      Cc: Jun Piao <piaojun@huawei.com>
      Cc: <stable@vger.kernel.org>
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      2af148ef
    • Andrey Skvortsov's avatar
      zram: don't free statically defined names · 486fd58a
      Andrey Skvortsov authored
      When CONFIG_ZRAM_MULTI_COMP isn't set ZRAM_SECONDARY_COMP can hold
      default_compressor, because it's the same offset as ZRAM_PRIMARY_COMP, so
      we need to make sure that we don't attempt to kfree() the statically
      defined compressor name.
      
      This is detected by KASAN.
      
      ==================================================================
        Call trace:
         kfree+0x60/0x3a0
         zram_destroy_comps+0x98/0x198 [zram]
         zram_reset_device+0x22c/0x4a8 [zram]
         reset_store+0x1bc/0x2d8 [zram]
         dev_attr_store+0x44/0x80
         sysfs_kf_write+0xfc/0x188
         kernfs_fop_write_iter+0x28c/0x428
         vfs_write+0x4dc/0x9b8
         ksys_write+0x100/0x1f8
         __arm64_sys_write+0x74/0xb8
         invoke_syscall+0xd8/0x260
         el0_svc_common.constprop.0+0xb4/0x240
         do_el0_svc+0x48/0x68
         el0_svc+0x40/0xc8
         el0t_64_sync_handler+0x120/0x130
         el0t_64_sync+0x190/0x198
      ==================================================================
      
      Link: https://lkml.kernel.org/r/20240923164843.1117010-1-andrej.skvortzov@gmail.com
      Fixes: 684826f8 ("zram: free secondary algorithms names")
      Signed-off-by: default avatarAndrey Skvortsov <andrej.skvortzov@gmail.com>
      Reviewed-by: default avatarSergey Senozhatsky <senozhatsky@chromium.org>
      Reported-by: default avatarVenkat Rao Bagalkote <venkat88@linux.vnet.ibm.com>
      Closes: https://lore.kernel.org/lkml/57130e48-dbb6-4047-a8c7-ebf5aaea93f4@linux.vnet.ibm.com/Tested-by: default avatarVenkat Rao Bagalkote <venkat88@linux.vnet.ibm.com>
      Cc: Christophe JAILLET <christophe.jaillet@wanadoo.fr>
      Cc: Jens Axboe <axboe@kernel.dk>
      Cc: Minchan Kim <minchan@kernel.org>
      Cc: Sergey Senozhatsky <senozhatsky@chromium.org>
      Cc: Venkat Rao Bagalkote <venkat88@linux.vnet.ibm.com>
      Cc: Chris Li <chrisl@kernel.org>
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      486fd58a
    • Huang Ying's avatar
      memory tiers: use default_dram_perf_ref_source in log message · a530bbc5
      Huang Ying authored
      Commit 3718c02d ("acpi, hmat: calculate abstract distance with HMAT")
      added a default_dram_perf_ref_source variable that was initialized but
      never used.  This causes kmemleak to report the following memory leak:
      
      unreferenced object 0xff11000225a47b60 (size 16):
        comm "swapper/0", pid 1, jiffies 4294761654
        hex dump (first 16 bytes):
          41 43 50 49 20 48 4d 41 54 00 c1 4b 7d b7 75 7c  ACPI HMAT..K}.u|
        backtrace (crc e6d0e7b2):
          [<ffffffff95d5afdb>] __kmalloc_node_track_caller_noprof+0x36b/0x440
          [<ffffffff95c276d6>] kstrdup+0x36/0x60
          [<ffffffff95dfabfa>] mt_set_default_dram_perf+0x23a/0x2c0
          [<ffffffff9ad64733>] hmat_init+0x2b3/0x660
          [<ffffffff95203cec>] do_one_initcall+0x11c/0x5c0
          [<ffffffff9ac9cfc4>] do_initcalls+0x1b4/0x1f0
          [<ffffffff9ac9d52e>] kernel_init_freeable+0x4ae/0x520
          [<ffffffff97c789cc>] kernel_init+0x1c/0x150
          [<ffffffff952aecd1>] ret_from_fork+0x31/0x70
          [<ffffffff9520b18a>] ret_from_fork_asm+0x1a/0x30
      
      This reminds us that we forget to use the performance data source
      information.  So, use the variable in the error log message to help
      identify the root cause of inconsistent performance number.
      
      Link: https://lkml.kernel.org/r/87y13mvo0n.fsf@yhuang6-desk2.ccr.corp.intel.com
      Fixes: 3718c02d ("acpi, hmat: calculate abstract distance with HMAT")
      Signed-off-by: default avatar"Huang, Ying" <ying.huang@intel.com>
      Reported-by: default avatarWaiman Long <longman@redhat.com>
      Acked-by: default avatarWaiman Long <longman@redhat.com>
      Cc: Alistair Popple <apopple@nvidia.com>
      Cc: Dave Jiang <dave.jiang@intel.com>
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      a530bbc5
    • Guenter Roeck's avatar
      Revert "list: test: fix tests for list_cut_position()" · c509f67d
      Guenter Roeck authored
      This reverts commit e620799c.
      
      The commit introduces unit test failures.
      
           Expected cur == &entries[i], but
               cur == 0000037fffadfd80
               &entries[i] == 0000037fffadfd60
           # list_test_list_cut_position: pass:0 fail:1 skip:0 total:1
           not ok 21 list_test_list_cut_position
           # list_test_list_cut_before: EXPECTATION FAILED at lib/list-test.c:444
           Expected cur == &entries[i], but
               cur == 0000037fffa9fd70
               &entries[i] == 0000037fffa9fd60
           # list_test_list_cut_before: EXPECTATION FAILED at lib/list-test.c:444
           Expected cur == &entries[i], but
               cur == 0000037fffa9fd80
               &entries[i] == 0000037fffa9fd70
      
      Revert it.
      
      Link: https://lkml.kernel.org/r/20240922150507.553814-1-linux@roeck-us.net
      Fixes: e620799c ("list: test: fix tests for list_cut_position()")
      Signed-off-by: default avatarGuenter Roeck <linux@roeck-us.net>
      Cc: I Hsin Cheng <richard120310@gmail.com>
      Cc: David Gow <davidgow@google.com>
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      c509f67d
    • Muhammad Usama Anjum's avatar
      kselftests: mm: fix wrong __NR_userfaultfd value · f30beffd
      Muhammad Usama Anjum authored
      grep -rnIF "#define __NR_userfaultfd"
      tools/include/uapi/asm-generic/unistd.h:681:#define __NR_userfaultfd 282
      arch/x86/include/generated/uapi/asm/unistd_32.h:374:#define
      __NR_userfaultfd 374
      arch/x86/include/generated/uapi/asm/unistd_64.h:327:#define
      __NR_userfaultfd 323
      arch/x86/include/generated/uapi/asm/unistd_x32.h:282:#define
      __NR_userfaultfd (__X32_SYSCALL_BIT + 323)
      arch/arm/include/generated/uapi/asm/unistd-eabi.h:347:#define
      __NR_userfaultfd (__NR_SYSCALL_BASE + 388)
      arch/arm/include/generated/uapi/asm/unistd-oabi.h:359:#define
      __NR_userfaultfd (__NR_SYSCALL_BASE + 388)
      include/uapi/asm-generic/unistd.h:681:#define __NR_userfaultfd 282
      
      The number is dependent on the architecture. The above data shows that:
      x86	374
      x86_64	323
      
      The value of __NR_userfaultfd was changed to 282 when asm-generic/unistd.h
      was included.  It makes the test to fail every time as the correct number
      of this syscall on x86_64 is 323.  Fix the header to asm/unistd.h.
      
      Link: https://lkml.kernel.org/r/20240923053836.3270393-1-usama.anjum@collabora.com
      Fixes: a5c6bc59 ("selftests/mm: remove local __NR_* definitions")
      Signed-off-by: default avatarMuhammad Usama Anjum <usama.anjum@collabora.com>
      Reviewed-by: default avatarShuah Khan <skhan@linuxfoundation.org>
      Reviewed-by: default avatarDavid Hildenbrand <david@redhat.com>
      Cc: John Hubbard <jhubbard@nvidia.com>
      Cc: <stable@vger.kernel.org>
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      f30beffd
    • Tiezhu Yang's avatar
      compiler.h: specify correct attribute for .rodata..c_jump_table · c5b1184d
      Tiezhu Yang authored
      Currently, there is an assembler message when generating kernel/bpf/core.o
      under CONFIG_OBJTOOL with LoongArch compiler toolchain:
      
        Warning: setting incorrect section attributes for .rodata..c_jump_table
      
      This is because the section ".rodata..c_jump_table" should be readonly,
      but there is a "W" (writable) part of the flags:
      
        $ readelf -S kernel/bpf/core.o | grep -A 1 "rodata..c"
        [34] .rodata..c_j[...] PROGBITS         0000000000000000  0000d2e0
             0000000000000800  0000000000000000  WA       0     0     8
      
      There is no above issue on x86 due to the generated section flag is only
      "A" (allocatable). In order to silence the warning on LoongArch, specify
      the attribute like ".rodata..c_jump_table,\"a\",@progbits #" explicitly,
      then the section attribute of ".rodata..c_jump_table" must be readonly
      in the kernel/bpf/core.o file.
      
      Before:
      
        $ objdump -h kernel/bpf/core.o | grep -A 1 "rodata..c"
         21 .rodata..c_jump_table 00000800  0000000000000000  0000000000000000  0000d2e0  2**3
                        CONTENTS, ALLOC, LOAD, RELOC, DATA
      
      After:
      
        $ objdump -h kernel/bpf/core.o | grep -A 1 "rodata..c"
         21 .rodata..c_jump_table 00000800  0000000000000000  0000000000000000  0000d2e0  2**3
                        CONTENTS, ALLOC, LOAD, RELOC, READONLY, DATA
      
      By the way, AFAICT, maybe the root cause is related with the different
      compiler behavior of various archs, so to some extent this change is a
      workaround for LoongArch, and also there is no effect for x86 which is the
      only port supported by objtool before LoongArch with this patch.
      
      Link: https://lkml.kernel.org/r/20240924062710.1243-1-yangtiezhu@loongson.cnSigned-off-by: default avatarTiezhu Yang <yangtiezhu@loongson.cn>
      Cc: Josh Poimboeuf <jpoimboe@kernel.org>
      Cc: Peter Zijlstra <peterz@infradead.org>
      Cc: <stable@vger.kernel.org>	[6.9+]
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      c5b1184d
    • Diederik de Haas's avatar
      mm/damon/Kconfig: update DAMON doc URL · 6901cf55
      Diederik de Haas authored
      The old URL doesn't really work anymore and as the documentation has been
      integrated in the main kernel documentation site, change the URL to point
      to that.
      
      Link: https://lkml.kernel.org/r/20240924082331.11499-1-didi.debian@cknow.orgSigned-off-by: default avatarDiederik de Haas <didi.debian@cknow.org>
      Reviewed-by: default avatarSeongJae Park <sj@kernel.org>
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      6901cf55
    • qiwu.chen's avatar
      mm: kfence: fix elapsed time for allocated/freed track · ff7f5ad7
      qiwu.chen authored
      Fix elapsed time for the allocated/freed track introduced by commit
      62e73fd8.
      
      Link: https://lkml.kernel.org/r/20240924085004.75401-1-qiwu.chen@transsion.com
      Fixes: 62e73fd8 ("mm: kfence: print the elapsed time for allocated/freed track")
      Signed-off-by: default avatarqiwu.chen <qiwu.chen@transsion.com>
      Reviewed-by: default avatarMarco Elver <elver@google.com>
      Cc: Alexander Potapenko <glider@google.com>
      Cc: Dmitry Vyukov <dvyukov@google.com>
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      ff7f5ad7
    • Mohammed Anees's avatar
      ocfs2: fix deadlock in ocfs2_get_system_file_inode · 7bf1823e
      Mohammed Anees authored
      syzbot has found a possible deadlock in ocfs2_get_system_file_inode [1].
      
      The scenario is depicted here,
      
      	CPU0					CPU1
      lock(&ocfs2_file_ip_alloc_sem_key);
                                     lock(&osb->system_file_mutex);
                                     lock(&ocfs2_file_ip_alloc_sem_key);
      lock(&osb->system_file_mutex);
      
      The function calls which could lead to this are:
      
      CPU0
      ocfs2_mknod - lock(&ocfs2_file_ip_alloc_sem_key);
      .
      .
      .
      ocfs2_get_system_file_inode - lock(&osb->system_file_mutex);
      
      CPU1 -
      ocfs2_fill_super - lock(&osb->system_file_mutex);
      .
      .
      .
      ocfs2_read_virt_blocks - lock(&ocfs2_file_ip_alloc_sem_key);
      
      This issue can be resolved by making the down_read -> down_read_try
      in the ocfs2_read_virt_blocks.
      
      [1] https://syzkaller.appspot.com/bug?extid=e0055ea09f1f5e6fabdd
      
      Link: https://lkml.kernel.org/r/20240924093257.7181-1-pvmohammedanees2003@gmail.comSigned-off-by: default avatarMohammed Anees <pvmohammedanees2003@gmail.com>
      Reviewed-by: default avatarJoseph Qi <joseph.qi@linux.alibaba.com>
      Reported-by: <syzbot+e0055ea09f1f5e6fabdd@syzkaller.appspotmail.com>
      Closes: https://syzkaller.appspot.com/bug?extid=e0055ea09f1f5e6fabdd
      Tested-by: syzbot+e0055ea09f1f5e6fabdd@syzkaller.appspotmail.com
      Cc: Mark Fasheh <mark@fasheh.com>
      Cc: Joel Becker <jlbec@evilplan.org>
      Cc: Junxiao Bi <junxiao.bi@oracle.com>
      Cc: Changwei Ge <gechangwei@live.cn>
      Cc: Gang He <ghe@suse.com>
      Cc: Jun Piao <piaojun@huawei.com>
      Cc:  <stable@vger.kernel.org>
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      7bf1823e
    • Gautham Ananthakrishna's avatar
      ocfs2: reserve space for inline xattr before attaching reflink tree · 5ca60b86
      Gautham Ananthakrishna authored
      One of our customers reported a crash and a corrupted ocfs2 filesystem. 
      The crash was due to the detection of corruption.  Upon troubleshooting,
      the fsck -fn output showed the below corruption
      
      [EXTENT_LIST_FREE] Extent list in owner 33080590 claims 230 as the next free chain record,
      but fsck believes the largest valid value is 227.  Clamp the next record value? n
      
      The stat output from the debugfs.ocfs2 showed the following corruption
      where the "Next Free Rec:" had overshot the "Count:" in the root metadata
      block.
      
              Inode: 33080590   Mode: 0640   Generation: 2619713622 (0x9c25a856)
              FS Generation: 904309833 (0x35e6ac49)
              CRC32: 00000000   ECC: 0000
              Type: Regular   Attr: 0x0   Flags: Valid
              Dynamic Features: (0x16) HasXattr InlineXattr Refcounted
              Extended Attributes Block: 0  Extended Attributes Inline Size: 256
              User: 0 (root)   Group: 0 (root)   Size: 281320357888
              Links: 1   Clusters: 141738
              ctime: 0x66911b56 0x316edcb8 -- Fri Jul 12 06:02:30.829349048 2024
              atime: 0x66911d6b 0x7f7a28d -- Fri Jul 12 06:11:23.133669517 2024
              mtime: 0x66911b56 0x12ed75d7 -- Fri Jul 12 06:02:30.317552087 2024
              dtime: 0x0 -- Wed Dec 31 17:00:00 1969
              Refcount Block: 2777346
              Last Extblk: 2886943   Orphan Slot: 0
              Sub Alloc Slot: 0   Sub Alloc Bit: 14
              Tree Depth: 1   Count: 227   Next Free Rec: 230
              ## Offset        Clusters       Block#
              0  0             2310           2776351
              1  2310          2139           2777375
              2  4449          1221           2778399
              3  5670          731            2779423
              4  6401          566            2780447
              .......          ....           .......
              .......          ....           .......
      
      The issue was in the reflink workfow while reserving space for inline
      xattr.  The problematic function is ocfs2_reflink_xattr_inline().  By the
      time this function is called the reflink tree is already recreated at the
      destination inode from the source inode.  At this point, this function
      reserves space for inline xattrs at the destination inode without even
      checking if there is space at the root metadata block.  It simply reduces
      the l_count from 243 to 227 thereby making space of 256 bytes for inline
      xattr whereas the inode already has extents beyond this index (in this
      case up to 230), thereby causing corruption.
      
      The fix for this is to reserve space for inline metadata at the destination
      inode before the reflink tree gets recreated. The customer has verified the
      fix.
      
      Link: https://lkml.kernel.org/r/20240918063844.1830332-1-gautham.ananthakrishna@oracle.com
      Fixes: ef962df0 ("ocfs2: xattr: fix inlined xattr reflink")
      Signed-off-by: default avatarGautham Ananthakrishna <gautham.ananthakrishna@oracle.com>
      Reviewed-by: default avatarJoseph Qi <joseph.qi@linux.alibaba.com>
      Cc: Mark Fasheh <mark@fasheh.com>
      Cc: Joel Becker <jlbec@evilplan.org>
      Cc: Junxiao Bi <junxiao.bi@oracle.com>
      Cc: Changwei Ge <gechangwei@live.cn>
      Cc: Gang He <ghe@suse.com>
      Cc: Jun Piao <piaojun@huawei.com>
      Cc: <stable@vger.kernel.org>
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      5ca60b86
    • Jeongjun Park's avatar
      mm: migrate: annotate data-race in migrate_folio_unmap() · 8001070c
      Jeongjun Park authored
      I found a report from syzbot [1]
      
      This report shows that the value can be changed, but in reality, the
      value of __folio_set_movable() cannot be changed because it holds the
      folio refcount.
      
      Therefore, it is appropriate to add an annotate to make KCSAN
      ignore that data-race.
      
      [1]
      
      ==================================================================
      BUG: KCSAN: data-race in __filemap_remove_folio / migrate_pages_batch
      
      write to 0xffffea0004b81dd8 of 8 bytes by task 6348 on cpu 0:
       page_cache_delete mm/filemap.c:153 [inline]
       __filemap_remove_folio+0x1ac/0x2c0 mm/filemap.c:233
       filemap_remove_folio+0x6b/0x1f0 mm/filemap.c:265
       truncate_inode_folio+0x42/0x50 mm/truncate.c:178
       shmem_undo_range+0x25b/0xa70 mm/shmem.c:1028
       shmem_truncate_range mm/shmem.c:1144 [inline]
       shmem_evict_inode+0x14d/0x530 mm/shmem.c:1272
       evict+0x2f0/0x580 fs/inode.c:731
       iput_final fs/inode.c:1883 [inline]
       iput+0x42a/0x5b0 fs/inode.c:1909
       dentry_unlink_inode+0x24f/0x260 fs/dcache.c:412
       __dentry_kill+0x18b/0x4c0 fs/dcache.c:615
       dput+0x5c/0xd0 fs/dcache.c:857
       __fput+0x3fb/0x6d0 fs/file_table.c:439
       ____fput+0x1c/0x30 fs/file_table.c:459
       task_work_run+0x13a/0x1a0 kernel/task_work.c:228
       resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
       exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
       exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
       __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
       syscall_exit_to_user_mode+0xbe/0x130 kernel/entry/common.c:218
       do_syscall_64+0xd6/0x1c0 arch/x86/entry/common.c:89
       entry_SYSCALL_64_after_hwframe+0x77/0x7f
      
      read to 0xffffea0004b81dd8 of 8 bytes by task 6342 on cpu 1:
       __folio_test_movable include/linux/page-flags.h:699 [inline]
       migrate_folio_unmap mm/migrate.c:1199 [inline]
       migrate_pages_batch+0x24c/0x1940 mm/migrate.c:1797
       migrate_pages_sync mm/migrate.c:1963 [inline]
       migrate_pages+0xff1/0x1820 mm/migrate.c:2072
       do_mbind mm/mempolicy.c:1390 [inline]
       kernel_mbind mm/mempolicy.c:1533 [inline]
       __do_sys_mbind mm/mempolicy.c:1607 [inline]
       __se_sys_mbind+0xf76/0x1160 mm/mempolicy.c:1603
       __x64_sys_mbind+0x78/0x90 mm/mempolicy.c:1603
       x64_sys_call+0x2b4d/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:238
       do_syscall_x64 arch/x86/entry/common.c:52 [inline]
       do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
       entry_SYSCALL_64_after_hwframe+0x77/0x7f
      
      value changed: 0xffff888127601078 -> 0x0000000000000000
      
      Link: https://lkml.kernel.org/r/20240924130053.107490-1-aha310510@gmail.com
      Fixes: 7e2a5e5a ("mm: migrate: use __folio_test_movable()")
      Signed-off-by: default avatarJeongjun Park <aha310510@gmail.com>
      Reported-by: default avatarsyzbot <syzkaller@googlegroups.com>
      Acked-by: default avatarDavid Hildenbrand <david@redhat.com>
      Cc: Kefeng Wang <wangkefeng.wang@huawei.com>
      Cc: Matthew Wilcox <willy@infradead.org>
      Cc: Zi Yan <ziy@nvidia.com>
      Cc: <stable@vger.kernel.org>
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      8001070c
    • Steve Sistare's avatar
      mm/hugetlb: simplify refs in memfd_alloc_folio · dc677b5f
      Steve Sistare authored
      The folio_try_get in memfd_alloc_folio is not necessary.  Delete it, and
      delete the matching folio_put in memfd_pin_folios.  This also avoids
      leaking a ref if the memfd_alloc_folio call to hugetlb_add_to_page_cache
      fails.  That error path is also broken in a second way -- when its
      folio_put causes the ref to become 0, it will implicitly call
      free_huge_folio, but then the path *explicitly* calls free_huge_folio. 
      Delete the latter.
      
      This is a continuation of the fix
        "mm/hugetlb: fix memfd_pin_folios free_huge_pages leak"
      
      [steven.sistare@oracle.com: remove explicit call to free_huge_folio(), per Matthew]
        Link: https://lkml.kernel.org/r/Zti-7nPVMcGgpcbi@casper.infradead.org
        Link: https://lkml.kernel.org/r/1725481920-82506-1-git-send-email-steven.sistare@oracle.com
      Link: https://lkml.kernel.org/r/1725478868-61732-1-git-send-email-steven.sistare@oracle.com
      Fixes: 89c1905d ("mm/gup: introduce memfd_pin_folios() for pinning memfd folios")
      Signed-off-by: default avatarSteve Sistare <steven.sistare@oracle.com>
      Suggested-by: default avatarVivek Kasireddy <vivek.kasireddy@intel.com>
      Cc: David Hildenbrand <david@redhat.com>
      Cc: Jason Gunthorpe <jgg@nvidia.com>
      Cc: Matthew Wilcox <willy@infradead.org>
      Cc: Muchun Song <muchun.song@linux.dev>
      Cc: Peter Xu <peterx@redhat.com>
      Cc: <stable@vger.kernel.org>
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      dc677b5f
    • Steve Sistare's avatar
      mm/gup: fix memfd_pin_folios alloc race panic · ce645b9f
      Steve Sistare authored
      If memfd_pin_folios tries to create a hugetlb page, but someone else
      already did, then folio gets the value -EEXIST here:
      
              folio = memfd_alloc_folio(memfd, start_idx);
              if (IS_ERR(folio)) {
                      ret = PTR_ERR(folio);
                      if (ret != -EEXIST)
                              goto err;
      
      then on the next trip through the "while start_idx" loop we panic here:
      
              if (folio) {
                      folio_put(folio);
      
      To fix, set the folio to NULL on error.
      
      Link: https://lkml.kernel.org/r/1725373521-451395-6-git-send-email-steven.sistare@oracle.com
      Fixes: 89c1905d ("mm/gup: introduce memfd_pin_folios() for pinning memfd folios")
      Signed-off-by: default avatarSteve Sistare <steven.sistare@oracle.com>
      Acked-by: default avatarVivek Kasireddy <vivek.kasireddy@intel.com>
      Cc: David Hildenbrand <david@redhat.com>
      Cc: Jason Gunthorpe <jgg@nvidia.com>
      Cc: Matthew Wilcox <willy@infradead.org>
      Cc: Muchun Song <muchun.song@linux.dev>
      Cc: Peter Xu <peterx@redhat.com>
      Cc: <stable@vger.kernel.org>
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      ce645b9f
    • Steve Sistare's avatar
      mm/gup: fix memfd_pin_folios hugetlb page allocation · 9289f020
      Steve Sistare authored
      When memfd_pin_folios -> memfd_alloc_folio creates a hugetlb page, the
      index is wrong.  The subsequent call to filemap_get_folios_contig thus
      cannot find it, and fails, and memfd_pin_folios loops forever.  To fix,
      adjust the index for the huge_page_order.
      
      memfd_alloc_folio also forgets to unlock the folio, so the next touch of
      the page calls hugetlb_fault which blocks forever trying to take the lock.
      Unlock it.
      
      Link: https://lkml.kernel.org/r/1725373521-451395-5-git-send-email-steven.sistare@oracle.com
      Fixes: 89c1905d ("mm/gup: introduce memfd_pin_folios() for pinning memfd folios")
      Signed-off-by: default avatarSteve Sistare <steven.sistare@oracle.com>
      Acked-by: default avatarVivek Kasireddy <vivek.kasireddy@intel.com>
      Cc: David Hildenbrand <david@redhat.com>
      Cc: Jason Gunthorpe <jgg@nvidia.com>
      Cc: Matthew Wilcox <willy@infradead.org>
      Cc: Muchun Song <muchun.song@linux.dev>
      Cc: Peter Xu <peterx@redhat.com>
      Cc: <stable@vger.kernel.org>
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      9289f020
    • Steve Sistare's avatar
      mm/hugetlb: fix memfd_pin_folios resv_huge_pages leak · 26a8ea80
      Steve Sistare authored
      memfd_pin_folios followed by unpin_folios leaves resv_huge_pages elevated
      if the pages were not already faulted in.  During a normal page fault,
      resv_huge_pages is consumed here:
      
      hugetlb_fault()
        alloc_hugetlb_folio()
          dequeue_hugetlb_folio_vma()
            dequeue_hugetlb_folio_nodemask()
              dequeue_hugetlb_folio_node_exact()
                free_huge_pages--
            resv_huge_pages--
      
      During memfd_pin_folios, the page is created by calling
      alloc_hugetlb_folio_nodemask instead of alloc_hugetlb_folio, and
      resv_huge_pages is not modified:
      
      memfd_alloc_folio()
        alloc_hugetlb_folio_nodemask()
          dequeue_hugetlb_folio_nodemask()
            dequeue_hugetlb_folio_node_exact()
              free_huge_pages--
      
      alloc_hugetlb_folio_nodemask has other callers that must not modify
      resv_huge_pages.  Therefore, to fix, define an alternate version of
      alloc_hugetlb_folio_nodemask for this call site that adjusts
      resv_huge_pages.
      
      Link: https://lkml.kernel.org/r/1725373521-451395-4-git-send-email-steven.sistare@oracle.com
      Fixes: 89c1905d ("mm/gup: introduce memfd_pin_folios() for pinning memfd folios")
      Signed-off-by: default avatarSteve Sistare <steven.sistare@oracle.com>
      Acked-by: default avatarVivek Kasireddy <vivek.kasireddy@intel.com>
      Cc: David Hildenbrand <david@redhat.com>
      Cc: Jason Gunthorpe <jgg@nvidia.com>
      Cc: Matthew Wilcox <willy@infradead.org>
      Cc: Muchun Song <muchun.song@linux.dev>
      Cc: Peter Xu <peterx@redhat.com>
      Cc: <stable@vger.kernel.org>
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      26a8ea80
    • Steve Sistare's avatar
      mm/hugetlb: fix memfd_pin_folios free_huge_pages leak · c56b6f3d
      Steve Sistare authored
      memfd_pin_folios followed by unpin_folios fails to restore free_huge_pages
      if the pages were not already faulted in, because the folio refcount for
      pages created by memfd_alloc_folio never goes to 0.  memfd_pin_folios
      needs another folio_put to undo the folio_try_get below:
      
      memfd_alloc_folio()
        alloc_hugetlb_folio_nodemask()
          dequeue_hugetlb_folio_nodemask()
            dequeue_hugetlb_folio_node_exact()
              folio_ref_unfreeze(folio, 1);    ; adds 1 refcount
        folio_try_get()                        ; adds 1 refcount
        hugetlb_add_to_page_cache()            ; adds 512 refcount (on x86)
      
      With the fix, after memfd_pin_folios + unpin_folios, the refcount for the
      (unfaulted) page is 512, which is correct, as the refcount for a faulted
      unpinned page is 513.
      
      Link: https://lkml.kernel.org/r/1725373521-451395-3-git-send-email-steven.sistare@oracle.com
      Fixes: 89c1905d ("mm/gup: introduce memfd_pin_folios() for pinning memfd folios")
      Signed-off-by: default avatarSteve Sistare <steven.sistare@oracle.com>
      Acked-by: default avatarVivek Kasireddy <vivek.kasireddy@intel.com>
      Cc: David Hildenbrand <david@redhat.com>
      Cc: Jason Gunthorpe <jgg@nvidia.com>
      Cc: Matthew Wilcox <willy@infradead.org>
      Cc: Muchun Song <muchun.song@linux.dev>
      Cc: Peter Xu <peterx@redhat.com>
      Cc: <stable@vger.kernel.org>
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      c56b6f3d
    • Steve Sistare's avatar
      mm/filemap: fix filemap_get_folios_contig THP panic · c225c4f6
      Steve Sistare authored
      Patch series "memfd-pin huge page fixes".
      
      Fix multiple bugs that occur when using memfd_pin_folios with hugetlb
      pages and THP.  The hugetlb bugs only bite when the page is not yet
      faulted in when memfd_pin_folios is called.  The THP bug bites when the
      starting offset passed to memfd_pin_folios is not huge page aligned.  See
      the commit messages for details.
      
      
      This patch (of 5):
      
      memfd_pin_folios on memory backed by THP panics if the requested start
      offset is not huge page aligned:
      
      BUG: kernel NULL pointer dereference, address: 0000000000000036
      RIP: 0010:filemap_get_folios_contig+0xdf/0x290
      RSP: 0018:ffffc9002092fbe8 EFLAGS: 00010202
      RAX: 0000000000000002 RBX: 0000000000000002 RCX: 0000000000000002
      
      The fault occurs here, because xas_load returns a folio with value 2:
      
          filemap_get_folios_contig()
              for (folio = xas_load(&xas); folio && xas.xa_index <= end;
                              folio = xas_next(&xas)) {
                      ...
                      if (!folio_try_get(folio))   <-- BOOM
      
      "2" is an xarray sibling entry.  We get it because memfd_pin_folios does
      not round the indices passed to filemap_get_folios_contig to huge page
      boundaries for THP, so we load from the middle of a huge page range see a
      sibling.  (It does round for hugetlbfs, at the is_file_hugepages test).
      
      To fix, if the folio is a sibling, then return the next index as the
      starting point for the next call to filemap_get_folios_contig.
      
      Link: https://lkml.kernel.org/r/1725373521-451395-1-git-send-email-steven.sistare@oracle.com
      Link: https://lkml.kernel.org/r/1725373521-451395-2-git-send-email-steven.sistare@oracle.com
      Fixes: 89c1905d ("mm/gup: introduce memfd_pin_folios() for pinning memfd folios")
      Signed-off-by: default avatarSteve Sistare <steven.sistare@oracle.com>
      Cc: David Hildenbrand <david@redhat.com>
      Cc: Jason Gunthorpe <jgg@nvidia.com>
      Cc: Matthew Wilcox <willy@infradead.org>
      Cc: Muchun Song <muchun.song@linux.dev>
      Cc: Peter Xu <peterx@redhat.com>
      Cc: Vivek Kasireddy <vivek.kasireddy@intel.com>
      Cc: <stable@vger.kernel.org>
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      c225c4f6
    • Guenter Roeck's avatar
      mm: make SPLIT_PTE_PTLOCKS depend on SMP · a3344078
      Guenter Roeck authored
      SPLIT_PTE_PTLOCKS depends on "NR_CPUS >= 4".  Unfortunately, that
      evaluates to true if there is no NR_CPUS configuration option.  This
      results in CONFIG_SPLIT_PTE_PTLOCKS=y for mac_defconfig.  This in turn
      causes the m68k "q800" and "virt" machines to crash in qemu if debugging
      options are enabled.
      
      Making CONFIG_SPLIT_PTE_PTLOCKS dependent on the existence of NR_CPUS does
      not work since a dependency on the existence of a numeric Kconfig entry
      always evaluates to false.  Example:
      
      config HAVE_NO_NR_CPUS
             def_bool y
             depends on !NR_CPUS
      
      After adding this to a Kconfig file, "make defconfig" includes:
      $ grep NR_CPUS .config
      CONFIG_NR_CPUS=64
      CONFIG_HAVE_NO_NR_CPUS=y
      
      Defining NR_CPUS for m68k does not help either since many architectures
      define NR_CPUS only for SMP configurations.
      
      Make SPLIT_PTE_PTLOCKS depend on SMP instead to solve the problem.
      
      Link: https://lkml.kernel.org/r/20240924154205.1491376-1-linux@roeck-us.net
      Fixes: 394290cb ("mm: turn USE_SPLIT_PTE_PTLOCKS / USE_SPLIT_PTE_PTLOCKS into Kconfig options")
      Signed-off-by: default avatarGuenter Roeck <linux@roeck-us.net>
      Acked-by: default avatarDavid Hildenbrand <david@redhat.com>
      Reviewed-by: default avatarGeert Uytterhoeven <geert@linux-m68k.org>
      Tested-by: default avatarGeert Uytterhoeven <geert@linux-m68k.org>
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      a3344078
    • Lorenzo Stoakes's avatar
      tools: fix shared radix-tree build · c234c653
      Lorenzo Stoakes authored
      The shared radix-tree build is not correctly recompiling when
      lib/maple_tree.c and lib/test_maple_tree.c are modified - fix this by
      adding these core components to the SHARED_DEPS list.
      
      Additionally, add missing header guards to shared header files.
      
      Link: https://lkml.kernel.org/r/20240924180724.112169-1-lorenzo.stoakes@oracle.com
      Fixes: 74579d8d ("tools: separate out shared radix-tree components")
      Signed-off-by: default avatarLorenzo Stoakes <lorenzo.stoakes@oracle.com>
      Tested-by: default avatarSidhartha Kumar <sidhartha.kumar@oracle.com>
      Cc: "Liam R. Howlett" <Liam.Howlett@oracle.com>
      Cc: Matthew Wilcox <willy@infradead.org>
      Cc: Vlastimil Babka <vbabka@suse.cz>
      Cc: <stable@vger.kernel.org>
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      c234c653
  2. 23 Sep, 2024 21 commits
    • Linus Torvalds's avatar
      Merge tag 'media/v6.12-1' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media · abf2050f
      Linus Torvalds authored
      Pull media updates from Mauro Carvalho Chehab:
      
       - New CEC driver: Extron DA HD 4K Plus
      
       - Lots of driver fixes, cleanups and improvements
      
      * tag 'media/v6.12-1' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media: (179 commits)
        media: atomisp: Use clamp() in ia_css_eed1_8_vmem_encode()
        media: atomisp: Fix eed1_8 code assigning signed values to an unsigned variable
        media: atomisp: set lock before calling vb2_queue_init()
        media: atomisp: Improve binary finding debug logging
        media: atomisp: Drop dev_dbg() calls from hmm_[alloc|free]()
        media: atomisp: csi2-bridge: Add DMI quirk for t4ka3 on Xiaomi Mipad2
        media: atomisp: add missing wait_prepare/finish ops
        media: atomisp: Remove unused declaration
        media: atomisp: use clamp() in compute_coring()
        media: atomisp: use clamp() in ia_css_eed1_8_encode()
        media: atomisp: Simplify ia_css_pipe_create_cas_scaler_desc_single_output()
        media: atomisp: Replace rarely used macro from math_support.h
        media: atomisp: Remove duplicated leftover, i.e. sh_css_dvs_info.h
        media: atomisp: bnr: fix trailing statement
        media: atomisp: move trailing */ to separate lines
        media: atomisp: move trailing statement to next line.
        media: atomisp: Fix trailing statement in ia_css_de.host.c
        media: atomisp: Fix spelling mistakes in atomisp.h
        media: atomisp: Fix spelling mistakes in atomisp_platform.h
        media: atomisp: Fix spelling mistake in csi_rx_public.h
        ...
      abf2050f
    • Linus Torvalds's avatar
      Merge tag 'clk-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux · 9ab27b01
      Linus Torvalds authored
      Pull clk updates from Stephen Boyd:
       "The core clk framework is left largely untouched this time around
        except for support for the newly ratified DT property
        'assigned-clock-rates-u64'.
      
        I'm much more excited about the support for loading DT overlays from
        KUnit tests so that we can test how the clk framework parses DT nodes
        during clk registration. The clk framework has some places that are
        highly DeviceTree dependent so this charts the path to extend the
        KUnit tests to cover even more framework code in the future. I've got
        some more tests on the list that use the DT overlay support, but they
        uncovered issues with clk unregistration that I'm still working on
        fixing.
      
        Outside the core, the clk driver update pile is dominated by Qualcomm
        and Renesas SoCs, making it fairly usual. Looking closer, there are
        fixes for things all over the place, like adding missing clk
        frequencies or moving defines for the number of clks out of DT binding
        headers into the drivers. There are even conversions of DT bindings to
        YAML and migration away from strings to describe clk topology. Overall
        it doesn't look unusual so I expect the new drivers to be where we'll
        have fixes in the coming weeks.
      
        Core:
         - KUnit tests for clk registration and fixed rate basic clk type
         - A couple more devm helpers, one consumer and one provider
         - Support for assigned-clock-rates-u64
      
        New Drivers:
         - Camera, display and GPU clocks on Qualcomm SM4450
         - Camera clocks on Qualcomm SM8150
         - Rockchip rk3576 clks
         - Microchip SAM9X7 clks
         - Renesas RZ/V2H(P) (R9A09G057) clks
      
        Updates:
         - Mark a bunch of struct freq_tbl const to reduce .data usage
         - Add Qualcomm MSM8226 A7PLL and Regera PLL support
         - Fix the Qualcomm Lucid 5LPE PLL configuration sequence to not reuse
           Trion, as they do differ
         - A number of fixes to the Qualcomm SM8550 display clock driver
         - Fold Qualcomm SM8650 display clock driver into SM8550 one
         - Add missing clocks and GDSCs needed for audio on Qualcomm MSM8998
         - Add missing USB MP resets, GPLL9, and QUPv3 DFS to Qualcomm SC8180X
         - Fix sdcc clk frequency tables on Qualcomm SC8180X
         - Drop the Qualcomm SM8150 gcc_cpuss_ahb_clk_src
         - Mark Qualcomm PCIe GDSCs as RET_ON on sm8250 and sm8540 to avoid
           them turning off during suspend
         - Use the HW_CTRL mechanism on Qualcomm SM8550 video clock controller
           GDSCs
         - Get rid of CLK_NR_CLKS defines in Rockchip DT binding headers
         - Some fixes for Rockchip rk3228 and rk3588
         - Exynos850: Add clock for Thermal Management Unit
         - Exynos7885: Fix duplicated ID in the header, add missing TOP PLLs
           and add clocks for USB block in the FSYS clock controller
         - ExynosAutov9: Add DPUM clock controller
         - ExynosAutov920: Add new (first) clock controllers: TOP and PERIC0
           (and a bit more complete bindings)
         - Use clk_hw pointer instead of fw_name for acm_aud_clk[0-1]_sel
           clocks on i.MX8Q as parents in ACM provider
         - Add i.MX95 NETCMIX support to the block control provider
         - Fix parents for ENETx_REF_SEL clocks on i.MX6UL
         - Add USB clocks, resets and power domains on Renesas RZ/G3S
         - Add Generic Timer (GTM), I2C Bus Interface (RIIC), SD/MMC Host
           Interface (SDHI) and Watchdog Timer (WDT) clocks and resets on
           Renesas RZ/V2H
         - Add PCIe, PWM, and CAN-FD clocks on Renesas R-Car V4M
         - Add LCD controller clocks and resets on Renesas RZ/G2UL
         - Add DMA clocks and resets on Renesas RZ/G3S
         - Add fractional multiplication PLL support on Renesas R-Car Gen4
         - Document support for the Renesas RZ/G2M v3.0 (r8a774a3) SoC
         - Support for the Microchip SAM9X7 SoC as follows:
         - Updates for the Microchip PLL drivers
         - DT binding documentation updates (for the new clock driver and for
           the slow clock controller that SAM9X7 is using)
         - A fix for the Microchip SAMA7G5 clock driver to avoid allocating
           more memory than necessary
         - Constify some Amlogic structs
         - Add SM1 eARC clocks for Amlogic
         - Introduce a symbol namespace for Amlogic clock specific symbols
         - Add reset controller support to audiomix block control on i.MX
         - Add CLK_SET_RATE_PARENT flag to all audiomix clocks and to i.MX7D
           lcdif_pixel_src clock
         - Fix parent clocks for earc_phy and audpll on i.MX8MP
         - Fix default parents for enet[12]_ref_sel on i.MX6UL
         - Add ops in composite 8M and 93 that allow no-op on disable
         - Add check for PCC present bit on composite 7ULP register
         - Fix fractional part for fracn-gppll on prepare in i.MX
         - Fix clock tree update for TF-A managed clocks on i.MX8M
         - Drop CLK_SET_PARENT_GATE for DRAM mux on i.MX7D
         - Add the SAI7 IPG clock for i.MX8MN
         - Mark the 'nand_usdhc_bus' clock as non-critical on i.MX8MM
         - Add LVDS bypass clocks on i.MX8QXP
         - Add muxes for MIPI and PHY ref clocks on i.MX
         - Reorder dc0_bypass0_clk, lcd_pxl and dc1_disp clocks on i.MX8QXP
         - Add 1039.5MHz and 800MHz rates to fracn-gppll table on i.MX
         - Add CLK_SET_RATE_PARENT for media_disp pixel clocks on i.MX8QXP
         - Add some module descriptions to the i.MX generic and the i.MXRT1050
           driver
         - Fix return value for bypass for composite i.MX7ULP
         - Move Mediatek clk bindings to clock/
         - Convert some more clk bindings to dt schema"
      
      * tag 'clk-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux: (180 commits)
        clk: Switch back to struct platform_driver::remove()
        dt-bindings: clock, reset: fix top-comment indentation rk3576 headers
        clk: rockchip: remove unused mclk_pdm0_p/pdm0_p definitions
        clk: provide devm_clk_get_optional_enabled_with_rate()
        clk: fixed-rate: add devm_clk_hw_register_fixed_rate_parent_data()
        clk: imx6ul: fix clock parent for IMX6UL_CLK_ENETx_REF_SEL
        clk: renesas: r9a09g057: Add clock and reset entries for GTM/RIIC/SDHI/WDT
        clk: renesas: rzv2h: Add support for dynamic switching divider clocks
        clk: renesas: r9a08g045: Add clocks, resets and power domains for USB
        clk: rockchip: fix error for unknown clocks
        clk: rockchip: rk3588: drop unused code
        clk: rockchip: Add clock controller for the RK3576
        clk: rockchip: Add new pll type pll_rk3588_ddr
        dt-bindings: clock, reset: Add support for rk3576
        dt-bindings: clock: rockchip,rk3588-cru: drop unneeded assigned-clocks
        clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
        clk: imx95: enable the clock of NETCMIX block control
        dt-bindings: clock: add RMII clock selection
        dt-bindings: clock: add i.MX95 NETCMIX block control
        clk: imx: imx8: Use clk_hw pointer for self registered clock in clk_parent_data
        ...
      9ab27b01
    • Linus Torvalds's avatar
      Merge tag 'i2c-for-6.12-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux · 4e2c9cd7
      Linus Torvalds authored
      Pull i2c updates from Wolfram Sang:
       "I2C core:
      
         - finally remove the I2C_COMPAT symbol after 15 years of deprecation
      
         - lock client addresses during initialization to prevent race
           conditions between different kinds of instantiation
      
         - use scoped foreach OF child loops
      
         - testunit cleanups and documentation improvements, as well as two
           new tests, one for repeated start and one for triggering SMBusAlert
           interrupts
      
        I2C host drivers:
      
         - DesignWare and Renesas I2C driver updates.
      
           The first has has undergone through a series of cleanups that have
           been sent to the mailing list a year ago for the first time and
           finally get merged in this pull request. They are many, from typos
           (e.g. i2/i2c), to cosmetics, to refactoring (e.g. move inline
           functions to librarieas) and many others.
      
         - all the DesignWare Kconfig options have been grouped under the
           I2C_DESIGNWARE_CORE and this required some adaptation in many of
           the kernel configuration files for different arm and mips boards
      
        Cleanups:
      
         - improve the exit path in the runtime resume function for the
           Qualcomm Geni platform
      
         - get rid of the unused "target_addr" parameter in the Intel LJCA
           driver
      
         - intialize the restart_flag in the MediaTek controller in one single
           place
      
         - constify a few global data structures in the virtio driver
      
         - simplify the bus speed handling in the Renesas driver init function
           making it more readable
      
         - improved probe function of the Renesas R-Car driver
      
         - switch the iMX/MXC driver to use RUNTIME_PM_OPS() instead of
           SET_RUNTIME_PM_OPS()
      
         - iMX/MXC driver cleanups
      
         - use devm_clk_get_enabled() to simplify the Renesas EMEV2, Ingenic
           and MPC drivers
      
        Refactoring:
      
         - Fix a potential out of boundary array access in the Nuvoton driver.
      
           This is not a bug fix because the issue could never occur due to
           hardware not having the properties listed in the array. The change
           makes the driver more future proof and, at the same time, silences
           code analyzers.
      
        Improvements:
      
         - several patches improving the runtime power management handling of
           the Renesas I2C (riic) driver
      
         - use a more descriptive adapter name in the Intel i801 driver to
           show the presence of the IDF feature
      
         - kill pending transactions when irq's can't complete their handling
           in the Intel Denverton (ismt) driver, triggering a timeout
      
        New Feature:
      
         - support fast mode plus in the Renesas I2C (riic) driver
      
        New support:
      
         - Added support for:
            - Renesas R9A08G045
            - Rockchip RK3576
            - KEBA I2C
            - Theobroma Systems Mule Multiplexer.
      
         - new i2c-keba.c driver
      
         - new driver for The Mule i2c multiplexer
      
        Core I2C framework:
      
         - move runtime PM functions in order to allow them to be accessed
           during device add
      
        Devicetree:
      
         - nVidia and Qualcomm binding improvements
      
         - get rid of redundant "multi-master" property in the aspeed binding
      
         - convert i2c-sprd binding to YAML
      
        AT24 updates:
      
        - document a new model from giantec in DT bindings"
      
      * tag 'i2c-for-6.12-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux: (69 commits)
        i2c: designware: Use pci_get_drvdata()
        i2c: designware: Propagate firmware node
        i2c: designware: Uninline i2c_dw_probe()
        i2c: ljca: Remove unused "target_addr" parameter
        i2c: keba: Add KEBA I2C controller support
        i2c: i801: Use a different adapter-name for IDF adapters
        i2c: core: Setup i2c_adapter runtime-pm before calling device_add()
        dt-bindings: i2c: i2c-sprd: convert to YAML
        i2c: ismt: kill transaction in hardware on timeout
        i2c: designware: Group all DesignWare drivers under a single option
        net: txgbe: Fix I2C Kconfig dependencies
        RISC-V: configs: enable I2C_DESIGNWARE_CORE with I2C_DESIGNWARE_PLATFORM
        mips: configs: enable I2C_DESIGNWARE_CORE with I2C_DESIGNWARE_PLATFORM
        arm64: defconfig: enable I2C_DESIGNWARE_CORE with I2C_DESIGNWARE_PLATFORM
        ARM: configs: enable I2C_DESIGNWARE_CORE with I2C_DESIGNWARE_PLATFORM
        ARC: configs: enable I2C_DESIGNWARE_CORE with I2C_DESIGNWARE_PLATFORM
        i2c: virtio: Constify struct i2c_algorithm and struct virtio_device_id
        i2c: rcar: tidyup priv->devtype handling on rcar_i2c_probe()
        i2c: imx: Convert comma to semicolon
        i2c: jz4780: Use devm_clk_get_enabled() helpers
        ...
      4e2c9cd7
    • Linus Torvalds's avatar
      Merge tag 'libnvdimm-for-6.12' of git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm · 00b43f85
      Linus Torvalds authored
      Pull libnvdimm updates from Ira Weiny:
      
       - use Open Firmware helper routines
      
       - fix memory leak when nvdimm labels are incorrect
      
       - remove some dead code
      
      * tag 'libnvdimm-for-6.12' of git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm:
        nvdimm: Remove dead code for ENODEV checking in scan_labels()
        nvdimm: Fix devs leaks in scan_labels()
        nvdimm: Use of_property_present() and of_property_read_bool()
      00b43f85
    • Linus Torvalds's avatar
      Merge tag 'backlight-next-6.12' of git://git.kernel.org/pub/scm/linux/kernel/git/lee/backlight · 20d9ba73
      Linus Torvalds authored
      Pull backlight update from Lee Jones:
      
       - Added a check for the return value of spi_setup() in the l4f00242t03
         driver to catch errors
      
      * tag 'backlight-next-6.12' of git://git.kernel.org/pub/scm/linux/kernel/git/lee/backlight:
        backlight: l4f00242t03: Add check for spi_setup
      20d9ba73
    • Linus Torvalds's avatar
      Merge tag 'leds-next-6.12' of git://git.kernel.org/pub/scm/linux/kernel/git/lee/leds · f2debe05
      Linus Torvalds authored
      Pull LED updates from Lee Jones:
      
       - Limited LED current based on thermal conditions in the QCOM flash LED
         driver
      
       - Fixed device child node usage in the BD2606MVV and PCA995x drivers
      
       - Used device_for_each_child_node_scoped() to access child nodes in the
         IS31FL319X driver
      
       - Reset the LED controller during the probe in the LM3601X driver
      
       - Used device_for_each_child_node() to access device child nodes in the
         PCA995X driver
      
       - Fixed CONFIG_LEDS_CLASS_MULTICOLOR dependency in the BlinkM driver
      
       - Replaced msleep() with usleep_range() in the SUN50I-A100 driver
      
       - Used scoped device node handling to simplify error paths in the
         AAT1290, KTD2692, and MC13783 drivers
      
       - Added missing of_node_get for probe duration in the MAX77693 driver
      
       - Simplified using for_each_available_child_of_node_scoped() loops when
         iterating over device nodes
      
       - Used devm_clk_get_enabled() helpers in the LP55XX driver
      
       - Converted DT bindings from TXT to YAML format for various drivers,
         including LM3692x and SC2731-BLTC
      
       - Set num_leds after allocation in the GPIO driver
      
       - Removed irrelevant blink configuration error message in the PCA9532
         driver
      
       - Fixed module autoloading with MODULE_DEVICE_TABLE() in the Turris
         Omnia driver
      
      * tag 'leds-next-6.12' of git://git.kernel.org/pub/scm/linux/kernel/git/lee/leds: (38 commits)
        leds: turris-omnia: Fix module autoloading with MODULE_DEVICE_TABLE()
        leds: pca9532: Remove irrelevant blink configuration error message
        leds: gpio: Set num_leds after allocation
        dt-bindings: leds: Convert leds-lm3692x to YAML format
        leds: lp55xx: Use devm_clk_get_enabled() helpers
        leds: as3645a: Use device_* to iterate over device child nodes
        leds: qcom-lpg: Simplify with scoped for each OF child loop
        leds: turris-omnia: Simplify with scoped for each OF child loop
        leds: sc27xx: Simplify with scoped for each OF child loop
        leds: pca9532: Simplify with scoped for each OF child loop
        leds: netxbig: Simplify with scoped for each OF child loop
        leds: mt6323: Simplify with scoped for each OF child loop
        leds: mc13783: Use scoped device node handling to simplify error paths
        leds: lp55xx: Simplify with scoped for each OF child loop
        leds: is31fl32xx: Simplify with scoped for each OF child loop
        leds: bcm6358: Simplify with scoped for each OF child loop
        leds: bcm6328: Simplify with scoped for each OF child loop
        leds: aw2013: Simplify with scoped for each OF child loop
        leds: 88pm860x: Simplify with scoped for each OF child loop
        leds: max77693: Simplify with scoped for each OF child loop
        ...
      f2debe05
    • Linus Torvalds's avatar
      Merge tag 'mfd-next-6.12' of git://git.kernel.org/pub/scm/linux/kernel/git/lee/mfd · b0a53b4f
      Linus Torvalds authored
      Pull MFD updates from Lee Jones:
      
       - Added support for the Analog Devices ADP5585 GPIO and PWM functions
      
       - Added parsing of GPIO hogs for the ADP5585
      
       - Fixed module autoloading in the MAX14577 driver
      
       - Simplified and cleaned up the CROS_EC driver
      
       - Made the Lenovo Yoga Tab 3 X90F DMI match less strict in the
         INTEL_SOC_PMIC_CHTWC driver
      
       - Added support for the RK806 PMIC on the I2C bus
      
       - Removed the remaining header file for the DS1WM driver
      
       - Added compatible strings for various devices in the device tree
         bindings
      
       - Fixed a comma-related issue in the 88PM860X_CORE driver
      
       - Constified read-only regmap structs in various drivers
      
       - Used scoped variables with memory allocators to simplify error paths
         in the MT6360 and SYSCON drivers
      
       - Added Intel Arrow Lake-H and Panther Lake LPSS PCI IDs
      
      * tag 'mfd-next-6.12' of git://git.kernel.org/pub/scm/linux/kernel/git/lee/mfd: (44 commits)
        mfd: atc260x: Convert a bunch of commas to semicolons
        dt-bindings: mfd: qcom,tcsr: Add compatible for sa8775p
        mfd: intel-lpss: Add Intel Panther Lake LPSS PCI IDs
        mfd: intel-lpss: Add Intel Arrow Lake-H LPSS PCI IDs
        dt-bindings: mfd: syscon: Add rk3576 QoS register compatible
        dt-bindings: mfd: adp5585: Add parsing of hogs
        mfd: tc3589x: Drop vendorless compatible string from match table
        mfd: qcom-spmi-pmic: Use for_each_child_of_node_scoped()
        mfd: max77620: Use for_each_child_of_node_scoped()
        mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
        mfd: cros_ec: Update module description
        mfd: cros_ec: Simplify and clean-up cros_ec_dev_init()
        mfd: max14577: Provide MODULE_DEVICE_TABLE() to fix module autoloading
        mfd: rk8xx: Add support for rk806 on i2c bus
        dt-bindings: mfd: syscon: Add ti,j784s4-acspcie-proxy-ctrl compatible
        mfd: ds1wm: Remove remaining header file
        MAINTAINERS: Repair file entry in MARVELL 88PM886 PMIC DRIVER
        mfd: 88pm860x-core: Convert comma to semicolon
        mfd: syscon: Use scoped variables with memory allocators to simplify error paths
        mfd: mt6360: Use scoped variables with memory allocators to simplify error paths
        ...
      b0a53b4f
    • Linus Torvalds's avatar
      Merge tag 'dmaengine-6.12-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/vkoul/dmaengine · 8874d92b
      Linus Torvalds authored
      Pull dmaengine updates from Vinod Koul:
       "Unusually, more new driver and device support than updates. Couple of
        new device support, AMD, Rcar, Intel and New drivers in Freescale,
        Loonsoon, AMD and LPC32XX with DT conversion and mode updates etc.
      
        New support:
         - Support for AMD Versal Gen 2 DMA IP
         - Rcar RZ/G3S SoC dma controller
         - Support for Intel Diamond Rapids and Granite Rapids-D dma controllers
         - Support for Freescale ls1021a-qdma controller
         - New driver for Loongson-1 APB DMA
         - New driver for AMD QDMA
         - Pl08x in LPC32XX router dma driver
      
        Updates:
         - Support for dpdma cyclic dma mode
         - XML conversion for marvell xor dma bindings
         - Dma clocks documentation for imx dma"
      
      * tag 'dmaengine-6.12-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/vkoul/dmaengine: (24 commits)
        dmaengine: loongson1-apb-dma: Fix the build warning caused by the size of pdev_irqname
        dmaengine: Fix spelling mistakes
        dmaengine: Add dma router for pl08x in LPC32XX SoC
        dmaengine: fsl-edma: add edma src ID check at request channel
        dmaengine: fsl-edma: change to guard(mutex) within fsl_edma3_xlate()
        dmaengine: avoid non-constant format string
        dmaengine: imx-dma: Remove i.MX21 support
        dt-bindings: dma: fsl,imx-dma: Document the DMA clocks
        dmaengine: Loongson1: Add Loongson-1 APB DMA driver
        dt-bindings: dma: Add Loongson-1 APB DMA
        dmaengine: zynqmp_dma: Add support for AMD Versal Gen 2 DMA IP
        dt-bindings: dmaengine: zynqmp_dma: Add a new compatible string
        dmaengine: idxd: Add new DSA and IAA device IDs for Diamond Rapids platform
        dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
        dmaengine: ti: k3-udma: Remove unused declarations
        dmaengine: amd: qdma: Add AMD QDMA driver
        dmaengine: xilinx: dpdma: Add support for cyclic dma mode
        dma: ipu: Remove include/linux/dma/ipu-dma.h
        dt-bindings: dma: fsl-mxs-dma: Add compatible string "fsl,imx8qxp-dma-apbh"
        dt-bindings: fsl-qdma: allow compatible string fallback to fsl,ls1021a-qdma
        ...
      8874d92b
    • Linus Torvalds's avatar
      Merge tag 'phy-for-6.12' of git://git.kernel.org/pub/scm/linux/kernel/git/phy/linux-phy · fbb86b0d
      Linus Torvalds authored
      Pull phy updates from Vinod Koul:
       "New hw support:
         - Rcar usb2 support for RZ/G3S SoC
         - Nuvoton MA35 SoC USB 2.0 PHY driver
      
        Removed:
         - obsolete qcom,usb-8x16-phy bindings
      
        Updates:
         - 4 lane PCIe support for Qualcomm X1E80100
         - Constify structure in subsystem update
         - Subsystem simplification with scoped for each OF child loop update
         - Yaml conversion for Qualcomm sata phy, Hiilicon hi3798cv200-combphy
           bindings"
      
      * tag 'phy-for-6.12' of git://git.kernel.org/pub/scm/linux/kernel/git/phy/linux-phy: (40 commits)
        phy: renesas: rcar-gen3-usb2: Add support for the RZ/G3S SoC
        dt-bindings: phy: renesas,usb2-phy: Document RZ/G3S phy bindings
        phy: renesas: rcar-gen3-usb2: Add support to initialize the bus
        phy: ti: j721e-wiz: Simplify with scoped for each OF child loop
        phy: ti: j721e-wiz: Drop OF node reference earlier for simpler code
        phy: ti: gmii-sel: Simplify with dev_err_probe()
        phy: ti: am654-serdes: Use scoped device node handling to simplify error paths
        phy: qcom: qmp-pcie-msm8996: Simplify with scoped for each OF child loop
        phy: mediatek: xsphy: Simplify with scoped for each OF child loop
        phy: mediatek: tphy: Simplify with scoped for each OF child loop
        phy: hisilicon: usb2: Simplify with scoped for each OF child loop
        phy: cadence: sierra: Simplify with scoped for each OF child loop
        phy: broadcom: brcm-sata: Simplify with scoped for each OF child loop
        phy: broadcom: bcm-cygnus-pcie: Simplify with scoped for each OF child loop
        phy: nuvoton: add new driver for the Nuvoton MA35 SoC USB 2.0 PHY
        dt-bindings: phy: nuvoton,ma35-usb2-phy: add new bindings
        phy: qcom: qmp-pcie: Configure all tables on port B PHY
        phy: airoha: adjust initialization delay in airoha_pcie_phy_init()
        dt-bindings: phy: socionext,uniphier: add top-level constraints
        phy: qcom: qmp-pcie: Add Gen4 4-lanes mode for X1E80100
        ...
      fbb86b0d
    • Linus Torvalds's avatar
      Merge tag 'soundwire-6.12-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/vkoul/soundwire · 7116747a
      Linus Torvalds authored
      Pull soundwire updates from Vinod Koul:
      
       - bus cleanup for warnings and probe deferral errors suppression
      
       - cadence recheck for status with a delayed work
      
       - intel interrupt rework on reset exit
      
      * tag 'soundwire-6.12-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/vkoul/soundwire:
        soundwire: intel_bus_common: enable interrupts before exiting reset
        soundwire: cadence: re-check Peripheral status with delayed_work
        soundwire: bus: clean up probe warnings
        soundwire: bus: drop unused driver name field
        soundwire: bus: suppress probe deferral errors
      7116747a
    • Linus Torvalds's avatar
      Merge tag 'linux-watchdog-6.12-rc1' of git://www.linux-watchdog.org/linux-watchdog · f34c5125
      Linus Torvalds authored
      Pull watchdog updates from Wim Van Sebroeck:
      
       - Add Watchdog Timer driver for RZ/V2H(P)
      
       - Add Cirrus EP93x
      
       - Some small fixes and improvements
      
      * tag 'linux-watchdog-6.12-rc1' of git://www.linux-watchdog.org/linux-watchdog:
        watchdog: Convert comma to semicolon
        watchdog: rzv2h_wdt: Add missing MODULE_LICENSE tag to fix modpost error
        dt-bindings: watchdog: Add Cirrus EP93x
        dt-bindings: watchdog: stm32-iwdg: Document interrupt and wakeup properties
        drivers: watchdog: marvell_gti: Convert comma to semicolon
        watchdog: iTCO_wdt: Convert comma to semicolon
        watchdog: Add Watchdog Timer driver for RZ/V2H(P)
        dt-bindings: watchdog: renesas,wdt: Document RZ/V2H(P) SoC
        watchdog: imx_sc_wdt: detect if already running
        watchdog: imx2_wdt: Remove __maybe_unused notations
        watchdog: imx_sc_wdt: Don't disable WDT in suspend
        watchdog: imx7ulp_wdt: move post_rcs_wait into struct imx_wdt_hw_feature
      f34c5125
    • Linus Torvalds's avatar
      Merge tag 'pinctrl-v6.12-1' of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl · 962ad087
      Linus Torvalds authored
      Pull pin control updates from Linus Walleij:
       "Core changes:
      
         - Add support for "input-schmitt-microvolt" property, as used in the
           Sophgo SoC
      
        New drivers:
      
         - Mobileye EyeQ5 pin controller, I think this is an automotive SoC
      
         - Rockchip rk3576 pin control support
      
         - Sophgo CV1800 series pin controllers: CV1800B, CV1812H and SG2000
      
        Improvements:
      
         - Gradual improvements to Renesas, Samsung, Qualcomm, Nuvoton and a
           few other drivers"
      
      * tag 'pinctrl-v6.12-1' of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl: (67 commits)
        pinctrl: intel: Constify struct intel_pinctrl parameter
        pinctrl: Remove redundant null pointer checks in pinctrl_remove_device_debugfs()
        pinctrl: baytrail: Drop duplicate return statement
        pinctrl: intel: Inline intel_gpio_community_irq_handler()
        dt-bindings: pinctrl: qcom: add missing type to GPIO hogs
        pinctrl: madera: Simplify with dev_err_probe()
        pinctrl: k210: Use devm_clk_get_enabled() helpers
        pinctrl: Join split messages and remove double whitespace
        pinctrl: renesas: rzg2l: Move pinconf_to_config_argument() call outside of switch cases
        pinctrl: renesas: rzg2l: Introduce single macro for digital noise filter configuration
        pinctrl: renesas: rzg2l: Replace of_node_to_fwnode() with more suitable API
        pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
        pinctrl: sunxi: Use devm_clk_get_enabled() helpers
        pinctrl: sophgo: cv18xx: fix missed __iomem type identifier
        pinctrl: stmfx: Use string_choices API instead of ternary operator
        pinctrl: nomadik: Use kmemdup_array instead of kmemdup for multiple allocation
        pinctrl: intel: Introduce for_each_intel_gpio_group() helper et al.
        pinctrl: intel: Constify intel_get_community() returned object
        pinctrl: intel: Implement high impedance support
        pinctrl: intel: Add __intel_gpio_get_direction() helper
        ...
      962ad087
    • Linus Torvalds's avatar
      Merge tag 'ntb-6.12' of https://github.com/jonmason/ntb · 5f153b63
      Linus Torvalds authored
      Pull PCIe non-transparent bridge updates from Jon Mason:
       "Bug fixes for intel ntb driver debugfs, use after free in switchtec
        driver, ntb transport rx ring buffers. Also, cleanups in printks,
        kernel-docs, and idt driver comment"
      
      * tag 'ntb-6.12' of https://github.com/jonmason/ntb:
        ntb: Force physically contiguous allocation of rx ring buffers
        ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
        ntb: idt: Fix the cacography in ntb_hw_idt.c
        NTB: epf: don't misuse kernel-doc marker
        NTB: ntb_transport: fix all kernel-doc warnings
        ntb: Constify struct bus_type
        ntb_perf: Fix printk format
        ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
      5f153b63
    • Linus Torvalds's avatar
      Merge tag 'firewire-updates-6.12' of... · d7dfb07d
      Linus Torvalds authored
      Merge tag 'firewire-updates-6.12' of git://git.kernel.org/pub/scm/linux/kernel/git/ieee1394/linux1394
      
      Pull firewire updates from Takashi Sakamoto:
       "In the FireWire subsystem, tasklets have been used as the bottom half
        of 1394 OHCi hardIRQ. In recent kernel updates, BH workqueues have
        become available, and some developers have proposed replacing the
        tasklet with a BH workqueue.
      
        As a first step towards dropping tasklet use, the 1394 OHCI
        isochronous context can use regular workqueues. In this context, the
        batch of packets is processed in the specific queue, thus the timing
        jitter caused by task scheduling is not so critical.
      
        Additionally, DMA transmission can be scheduled per-packet basis,
        therefore the context can be sleep between the operation of
        transmissions. Furthermore, in-kernel protocol implementation involves
        some CPU-bound tasks, which can sometimes consumes CPU time so long.
        These characteristics suggest that normal workqueues are suitable,
        through BH workqueues are not.
      
        The replacement with a workqueue allows unit drivers to process the
        content of packets in non-atomic context. It brings some reliefs to
        some drivers in sound subsystem that spin-lock is not mandatory
        anymore during isochronous packet processing.
      
        Summary:
      
         - Replace tasklet with workqueue for isochronous context
      
         - Replace IDR with XArray
      
         - Utilize guard macro where possible
      
         - Print deprecation warning when enabling debug parameter of
           firewire-ohci module
      
         - Switch to nonatomic PCM operation"
      
      * tag 'firewire-updates-6.12' of git://git.kernel.org/pub/scm/linux/kernel/git/ieee1394/linux1394: (55 commits)
        firewire: core: rename cause flag of tracepoints event
        firewire: core: update documentation of kernel APIs for flushing completions
        firewire: core: add helper function to retire descriptors
        Revert "firewire: core: move workqueue handler from 1394 OHCI driver to core function"
        Revert "firewire: core: use mutex to coordinate concurrent calls to flush completions"
        firewire: core: use mutex to coordinate concurrent calls to flush completions
        firewire: core: move workqueue handler from 1394 OHCI driver to core function
        firewire: core: fulfill documentation of fw_iso_context_flush_completions()
        firewire: core: expose kernel API to schedule work item to process isochronous context
        firewire: core: use WARN_ON_ONCE() to avoid superfluous dumps
        ALSA: firewire: use nonatomic PCM operation
        firewire: core: non-atomic memory allocation for isochronous event to user client
        firewire: ohci: operate IT/IR events in sleepable work process instead of tasklet softIRQ
        firewire: core: add local API to queue work item to workqueue specific to isochronous contexts
        firewire: core: allocate workqueue to handle isochronous contexts in card
        firewire: ohci: obsolete direct usage of printk_ratelimit()
        firewire: ohci: deprecate debug parameter
        firewire: core: update fw_device outside of device_find_child()
        firewire: ohci: fix error path to detect initiated reset in TI TSB41BA3D phy
        firewire: core/ohci: minor refactoring for computation of configuration ROM size
        ...
      d7dfb07d
    • Linus Torvalds's avatar
      Merge tag 'pci-v6.12-changes' of git://git.kernel.org/pub/scm/linux/kernel/git/pci/pci · 3a378723
      Linus Torvalds authored
      Pull pci updates from Bjorn Helgaas:
       "Enumeration:
      
         - Wait for device readiness after reset by polling Vendor ID and
           looking for Configuration RRS instead of polling the Command
           register and looking for non-error completions, to avoid hardware
           retries done for RRS on non-Vendor ID reads (Bjorn Helgaas)
      
         - Rename CRS Completion Status to RRS ('Request Retry Status') to
           match PCIe r6.0 spec usage (Bjorn Helgaas)
      
         - Clear LBMS bit after a manual link retrain so we don't try to
           retrain a link when there's no downstream device anymore (Maciej W.
           Rozycki)
      
         - Revert to the original link speed after retraining fails instead of
           leaving it restricted to 2.5GT/s, so a future device has a chance
           to use higher speeds (Maciej W. Rozycki)
      
         - Wait for each level of downstream bus, not just the first, to
           become accessible before restoring devices on that bus (Ilpo
           Järvinen)
      
         - Add ARCH_PCI_DEV_GROUPS so s390 can add its own attribute_groups
           without having to stomp on the core's pdev->dev.groups (Lukas
           Wunner)
      
        Driver binding:
      
         - Export pcim_request_region(), a managed counterpart of
           pci_request_region(), for use by drivers (Philipp Stanner)
      
         - Export pcim_iomap_region() and deprecate pcim_iomap_regions()
           (Philipp Stanner)
      
         - Request the PCI BAR used by xboxvideo (Philipp Stanner)
      
         - Request and map drm/ast BARs with pcim_iomap_region() (Philipp
           Stanner)
      
        MSI:
      
         - Add MSI_FLAG_NO_AFFINITY flag for devices that mux MSIs onto a
           single IRQ line and cannot set the affinity of each MSI to a
           specific CPU core (Marek Vasut)
      
         - Use MSI_FLAG_NO_AFFINITY and remove unnecessary .irq_set_affinity()
           implementations in aardvark, altera, brcmstb, dwc, mediatek-gen3,
           mediatek, mobiveil, plda, rcar, tegra, vmd, xilinx-nwl,
           xilinx-xdma, and xilinx drivers to avoid 'IRQ: set affinity failed'
           warnings (Marek Vasut)
      
        Power management:
      
         - Add pwrctl support for ATH11K inside the WCN6855 package (Konrad
           Dybcio)
      
        PCI device hotplug:
      
         - Remove unnecessary hpc_ops struct from shpchp (ngn)
      
         - Check for PCI_POSSIBLE_ERROR(), not 0xffffffff, in cpqphp
           (weiyufeng)
      
        Virtualization:
      
         - Mark Creative Labs EMU20k2 INTx masking as broken (Alex Williamson)
      
         - Add an ACS quirk for Qualcomm SA8775P, which doesn't advertise ACS
           but does provide ACS-like features (Subramanian Ananthanarayanan)
      
        IOMMU:
      
         - Add function 0 DMA alias quirk for Glenfly Arise audio function,
           which uses the function 0 Requester ID (WangYuli)
      
        NPEM:
      
         - Add Native PCIe Enclosure Management (NPEM) support for sysfs
           control of NVMe RAID storage indicators (ok/fail/locate/
           rebuild/etc) (Mariusz Tkaczyk)
      
         - Add support for the ACPI _DSM PCIe SSD status LED management, which
           is functionally similar to NPEM but mediated by platform firmware
           (Mariusz Tkaczyk)
      
        Device trees:
      
         - Drop minItems and maxItems from ranges in PCI generic host binding
           since host bridges may have several MMIO and I/O port apertures
           (Frank Li)
      
         - Add kirin, rcar-gen2, uniphier DT binding top-level constraints for
           clocks (Krzysztof Kozlowski)
      
        Altera PCIe controller driver:
      
         - Convert altera DT bindings from text to YAML (Matthew Gerlach)
      
         - Replace TLP_REQ_ID() with macro PCI_DEVID(), which does the same
           thing and is what other drivers use (Jinjie Ruan)
      
        Broadcom STB PCIe controller driver:
      
         - Add DT binding maxItems for reset controllers (Jim Quinlan)
      
         - Use the 'bridge' reset method if described in the DT (Jim Quinlan)
      
         - Use the 'swinit' reset method if described in the DT (Jim Quinlan)
      
         - Add 'has_phy' so the existence of a 'rescal' reset controller
           doesn't imply software control of it (Jim Quinlan)
      
         - Add support for many inbound DMA windows (Jim Quinlan)
      
         - Rename SoC 'type' to 'soc_base' express the fact that SoCs come in
           families of multiple similar devices (Jim Quinlan)
      
         - Add Broadcom 7712 DT description and driver support (Jim Quinlan)
      
         - Sort enums, pcie_offsets[], pcie_cfg_data, .compatible strings for
           maintainability (Bjorn Helgaas)
      
        Freescale i.MX6 PCIe controller driver:
      
         - Add imx6q-pcie 'dbi2' and 'atu' reg-names for i.MX8M Endpoints
           (Richard Zhu)
      
         - Fix a code restructuring error that caused i.MX8MM and i.MX8MP
           Endpoints to fail to establish link (Richard Zhu)
      
         - Fix i.MX8MP Endpoint occasional failure to trigger MSI by enforcing
           outbound alignment requirement (Richard Zhu)
      
         - Call phy_power_off() in the .probe() error path (Frank Li)
      
         - Rename internal names from imx6_* to imx_* since i.MX7/8/9 are also
           supported (Frank Li)
      
         - Manage Refclk by using SoC-specific callbacks instead of switch
           statements (Frank Li)
      
         - Manage core reset by using SoC-specific callbacks instead of switch
           statements (Frank Li)
      
         - Expand comments for erratum ERR010728 workaround (Frank Li)
      
         - Use generic PHY APIs to configure mode, speed, and submode, which
           is harmless for devices that implement their own internal PHY
           management and don't set the generic imx_pcie->phy (Frank Li)
      
         - Add i.MX8Q (i.MX8QM, i.MX8QXP, and i.MX8DXL) DT binding and driver
           Root Complex support (Richard Zhu)
      
        Freescale Layerscape PCIe controller driver:
      
         - Replace layerscape-pcie DT binding compatible fsl,lx2160a-pcie with
           fsl,lx2160ar2-pcie (Frank Li)
      
         - Add layerscape-pcie DT binding deprecated 'num-viewport' property
           to address a DT checker warning (Frank Li)
      
         - Change layerscape-pcie DT binding 'fsl,pcie-scfg' to phandle-array
           (Frank Li)
      
        Loongson PCIe controller driver:
      
         - Increase max PCI hosts to 8 for Loongson-3C6000 and newer chipsets
           (Huacai Chen)
      
        Marvell Aardvark PCIe controller driver:
      
         - Fix issue with emulating Configuration RRS for two-byte reads of
           Vendor ID; previously it only worked for four-byte reads (Bjorn
           Helgaas)
      
        MediaTek PCIe Gen3 controller driver:
      
         - Add per-SoC struct mtk_gen3_pcie_pdata to support multiple SoC
           types (Lorenzo Bianconi)
      
         - Use reset_bulk APIs to manage PHY reset lines (Lorenzo Bianconi)
      
         - Add DT and driver support for Airoha EN7581 PCIe controller
           (Lorenzo Bianconi)
      
        Qualcomm PCIe controller driver:
      
         - Update qcom,pcie-sc7280 DT binding with eight interrupts (Rayyan
           Ansari)
      
         - Add back DT 'vddpe-3v3-supply', which was incorrectly removed
           earlier (Johan Hovold)
      
         - Drop endpoint redundant masking of global IRQ events (Manivannan
           Sadhasivam)
      
         - Clarify unknown global IRQ message and only log it once to avoid a
           flood (Manivannan Sadhasivam)
      
         - Add 'linux,pci-domain' property to endpoint DT binding (Manivannan
           Sadhasivam)
      
         - Assign PCI domain number for endpoint controllers (Manivannan
           Sadhasivam)
      
         - Add 'qcom_pcie_ep' and the PCI domain number to IRQ names for
           endpoint controller (Manivannan Sadhasivam)
      
         - Add global SPI interrupt for PCIe link events to DT binding
           (Manivannan Sadhasivam)
      
         - Add global RC interrupt handler to handle 'Link up' events and
           automatically enumerate hot-added devices (Manivannan Sadhasivam)
      
         - Avoid mirroring of DBI and iATU register space so it doesn't
           overlap BAR MMIO space (Prudhvi Yarlagadda)
      
         - Enable controller resources like PHY only after PERST# is
           deasserted to partially avoid the problem that the endpoint SoC
           crashes when accessing things when Refclk is absent (Manivannan
           Sadhasivam)
      
         - Add 16.0 GT/s equalization and RX lane margining settings (Shashank
           Babu Chinta Venkata)
      
         - Pass domain number to pci_bus_release_domain_nr() explicitly to
           avoid a NULL pointer dereference (Manivannan Sadhasivam)
      
        Renesas R-Car PCIe controller driver:
      
         - Make the read-only const array 'check_addr' static (Colin Ian King)
      
         - Add R-Car V4M (R8A779H0) PCIe host and endpoint to DT binding
           (Yoshihiro Shimoda)
      
        TI DRA7xx PCIe controller driver:
      
         - Request IRQF_ONESHOT for 'dra7xx-pcie-main' IRQ since the primary
           handler is NULL (Siddharth Vadapalli)
      
         - Handle IRQ request errors during root port and endpoint probe
           (Siddharth Vadapalli)
      
        TI J721E PCIe driver:
      
         - Add DT 'ti,syscon-acspcie-proxy-ctrl' and driver support to enable
           the ACSPCIE module to drive Refclk for the Endpoint (Siddharth
           Vadapalli)
      
         - Extract the cadence link setup from cdns_pcie_host_setup() so link
           setup can be done separately during resume (Thomas Richard)
      
         - Add T_PERST_CLK_US definition for the mandatory delay between
           Refclk becoming stable and PERST# being deasserted (Thomas Richard)
      
         - Add j721e suspend and resume support (Théo Lebrun)
      
        TI Keystone PCIe controller driver:
      
         - Fix NULL pointer checking when applying MRRS limitation quirk for
           AM65x SR 1.0 Errata #i2037 (Dan Carpenter)
      
        Xilinx NWL PCIe controller driver:
      
         - Fix off-by-one error in INTx IRQ handler that caused INTx
           interrupts to be lost or delivered as the wrong interrupt (Sean
           Anderson)
      
         - Rate-limit misc interrupt messages (Sean Anderson)
      
         - Turn off the clock on probe failure and device removal (Sean
           Anderson)
      
         - Add DT binding and driver support for enabling/disabling PHYs (Sean
           Anderson)
      
         - Add PCIe phy bindings for the ZCU102 (Sean Anderson)
      
        Xilinx XDMA PCIe controller driver:
      
         - Add support for Xilinx QDMA Soft IP PCIe Root Port Bridge to DT
           binding and xilinx-dma-pl driver (Thippeswamy Havalige)
      
        Miscellaneous:
      
         - Fix buffer overflow in kirin_pcie_parse_port() (Alexandra Diupina)
      
         - Fix minor kerneldoc issues and typos (Bjorn Helgaas)
      
         - Use PCI_DEVID() macro in aer_inject() instead of open-coding it
           (Jinjie Ruan)
      
         - Check pcie_find_root_port() return in x86 fixups to avoid NULL
           pointer dereferences (Samasth Norway Ananda)
      
         - Make pci_bus_type constant (Kunwu Chan)
      
         - Remove unused declarations of __pci_pme_wakeup() and
           pci_vpd_release() (Yue Haibing)
      
         - Remove any leftover .*.cmd files with make clean (zhang jiao)
      
         - Remove unused BILLION macro (zhang jiao)"
      
      * tag 'pci-v6.12-changes' of git://git.kernel.org/pub/scm/linux/kernel/git/pci/pci: (132 commits)
        PCI: Fix typos
        dt-bindings: PCI: qcom: Allow 'vddpe-3v3-supply' again
        tools: PCI: Remove unused BILLION macro
        tools: PCI: Remove .*.cmd files with make clean
        PCI: Pass domain number to pci_bus_release_domain_nr() explicitly
        PCI: dra7xx: Fix error handling when IRQ request fails in probe
        PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
        PCI: qcom: Add RX lane margining settings for 16.0 GT/s
        PCI: qcom: Add equalization settings for 16.0 GT/s
        PCI: dwc: Always cache the maximum link speed value in dw_pcie::max_link_speed
        PCI: dwc: Rename 'dw_pcie::link_gen' to 'dw_pcie::max_link_speed'
        PCI: qcom-ep: Enable controller resources like PHY only after refclk is available
        PCI: Mark Creative Labs EMU20k2 INTx masking as broken
        dt-bindings: PCI: imx6q-pcie: Add reg-name "dbi2" and "atu" for i.MX8M PCIe Endpoint
        dt-bindings: PCI: altera: msi: Convert to YAML
        PCI: imx6: Add i.MX8Q PCIe Root Complex (RC) support
        PCI: Rename CRS Completion Status to RRS
        PCI: aardvark: Correct Configuration RRS checking
        PCI: Wait for device readiness with Configuration RRS
        PCI: brcmstb: Sort enums, pcie_offsets[], pcie_cfg_data, .compatible strings
        ...
      3a378723
    • Linus Torvalds's avatar
      Merge tag 'nfsd-6.12' of git://git.kernel.org/pub/scm/linux/kernel/git/cel/linux · 18ba6034
      Linus Torvalds authored
      Pull nfsd updates from Chuck Lever:
       "Notable features of this release include:
      
         - Pre-requisites for automatically determining the RPC server thread
           count
      
         - Clean-up and preparation for supporting LOCALIO, which will be
           merged via the NFS client tree
      
         - Enhancements and fixes to NFSv4.2 COPY offload
      
         - A new Python-based tool for generating kernel SunRPC XDR encoding
           and decoding functions, added as an aid for prototyping features in
           protocols based on the Linux kernel's SunRPC implementation
      
        As always I am grateful to the NFSD contributors, reviewers, testers,
        and bug reporters who participated during this cycle"
      
      * tag 'nfsd-6.12' of git://git.kernel.org/pub/scm/linux/kernel/git/cel/linux: (57 commits)
        xdrgen: Prevent reordering of encoder and decoder functions
        xdrgen: typedefs should use the built-in string and opaque functions
        xdrgen: Fix return code checking in built-in XDR decoders
        tools: Add xdrgen
        nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
        nfsd: fix initial getattr on write delegation
        nfsd: untangle code in nfsd4_deleg_getattr_conflict()
        nfsd: enforce upper limit for namelen in __cld_pipe_inprogress_downcall()
        nfsd: return -EINVAL when namelen is 0
        NFSD: Wrap async copy operations with trace points
        NFSD: Clean up extra whitespace in trace_nfsd_copy_done
        NFSD: Record the callback stateid in copy tracepoints
        NFSD: Display copy stateids with conventional print formatting
        NFSD: Limit the number of concurrent async COPY operations
        NFSD: Async COPY result needs to return a write verifier
        nfsd: avoid races with wake_up_var()
        nfsd: use clear_and_wake_up_bit()
        sunrpc: xprtrdma: Use ERR_CAST() to return
        NFSD: Annotate struct pnfs_block_deviceaddr with __counted_by()
        nfsd: call cache_put if xdr_reserve_space returns NULL
        ...
      18ba6034
    • Linus Torvalds's avatar
      Merge tag 'gfs2-v6.10-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/gfs2/linux-gfs2 · 721068de
      Linus Torvalds authored
      Pull gfs2 update from Andreas Gruenbacher:
      
       - Convert the writepage address space operation to writepages (Matthew
         Wilcox)
      
       - A syzkaller fix (by Julian Sun) and a minor cleanup (Andreas
         Gruenbacher)
      
      * tag 'gfs2-v6.10-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/gfs2/linux-gfs2:
        gfs2: Remove gfs2_aspace_writepage()
        gfs2: Remove gfs2_jdata_writepage()
        gfs2: Remove __gfs2_writepage()
        gfs2: Add gfs2_aspace_writepages()
        gfs2: fix double destroy_workqueue error
        gfs2: Minor gfs2_glock_cb cleanup
      721068de
    • Linus Torvalds's avatar
      Merge tag 'for-6.12-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux · a1fb2fcb
      Linus Torvalds authored
      Pull btrfs fixes from David Sterba:
      
       - fix dangling pointer to rb-tree of defragmented inodes after cleanup
      
       - a followup fix to handle concurrent lseek on the same fd that could
         leak memory under some conditions
      
       - fix wrong root id reported in tree checker when verifying dref
      
      * tag 'for-6.12-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux:
        btrfs: fix use-after-free on rbtree that tracks inodes for auto defrag
        btrfs: tree-checker: fix the wrong output of data backref objectid
        btrfs: fix race setting file private on concurrent lseek using same fd
      a1fb2fcb
    • Linus Torvalds's avatar
      Merge tag 'fs_for_v6.12-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs · d0359e4c
      Linus Torvalds authored
      Pull quota and isofs updates from Jan Kara:
       "A few small cleanups in quota and isofs"
      
      * tag 'fs_for_v6.12-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs:
        isofs: Annotate struct SL_component with __counted_by()
        quota: remove unnecessary error code translation in dquot_quota_enable
        quota: remove redundant return at end of void function
        quota: remove unneeded return value of register_quota_format
        quota: avoid missing put_quota_format when DQUOT_SUSPENDED is passed
      d0359e4c
    • Linus Torvalds's avatar
      Merge tag 'bcachefs-2024-09-21' of git://evilpiepirate.org/bcachefs · b3f391fd
      Linus Torvalds authored
      Pull bcachefs updates from Kent Overstreet:
      
       - rcu_pending, btree key cache rework: this solves lock contenting in
         the key cache, eliminating the biggest source of the srcu lock hold
         time warnings, and drastically improving performance on some metadata
         heavy workloads - on multithreaded creates we're now 3-4x faster than
         xfs.
      
       - We're now using an rhashtable instead of the system inode hash table;
         this is another significant performance improvement on multithreaded
         metadata workloads, eliminating more lock contention.
      
       - for_each_btree_key_in_subvolume_upto(): new helper for iterating over
         keys within a specific subvolume, eliminating a lot of open coded
         "subvolume_get_snapshot()" and also fixing another source of srcu
         lock time warnings, by running each loop iteration in its own
         transaction (as the existing for_each_btree_key() does).
      
       - More work on btree_trans locking asserts; we now assert that we don't
         hold btree node locks when trans->locked is false, which is important
         because we don't use lockdep for tracking individual btree node
         locks.
      
       - Some cleanups and improvements in the bset.c btree node lookup code,
         from Alan.
      
       - Rework of btree node pinning, which we use in backpointers fsck. The
         old hacky implementation, where the shrinker just skipped over nodes
         in the pinned range, was causing OOMs; instead we now use another
         shrinker with a much higher seeks number for pinned nodes.
      
       - Rebalance now uses BCH_WRITE_ONLY_SPECIFIED_DEVS; this fixes an issue
         where rebalance would sometimes fall back to allocating from the full
         filesystem, which is not what we want when it's trying to move data
         to a specific target.
      
       - Use __GFP_ACCOUNT, GFP_RECLAIMABLE for btree node, key cache
         allocations.
      
       - Idmap mounts are now supported (Hongbo Li)
      
       - Rename whiteouts are now supported (Hongbo Li)
      
       - Erasure coding can now handle devices being marked as failed, or
         forcibly removed. We still need the evacuate path for erasure coding,
         but it's getting very close to ready for people to start using.
      
      * tag 'bcachefs-2024-09-21' of git://evilpiepirate.org/bcachefs: (99 commits)
        bcachefs: return err ptr instead of null in read sb clean
        bcachefs: Remove duplicated include in backpointers.c
        bcachefs: Don't drop devices with stripe pointers
        bcachefs: bch2_ec_stripe_head_get() now checks for change in rw devices
        bcachefs: bch_fs.rw_devs_change_count
        bcachefs: bch2_dev_remove_stripes()
        bcachefs: bch2_trigger_ptr() calculates sectors even when no device
        bcachefs: improve error messages in bch2_ec_read_extent()
        bcachefs: improve error message on too few devices for ec
        bcachefs: improve bch2_new_stripe_to_text()
        bcachefs: ec_stripe_head.nr_created
        bcachefs: bch_stripe.disk_label
        bcachefs: stripe_to_mem()
        bcachefs: EIO errcode cleanup
        bcachefs: Rework btree node pinning
        bcachefs: split up btree cache counters for live, freeable
        bcachefs: btree cache counters should be size_t
        bcachefs: Don't count "skipped access bit" as touched in btree cache scan
        bcachefs: Failed devices no longer require mounting in degraded mode
        bcachefs: bch2_dev_rcu_noerror()
        ...
      b3f391fd
    • Linus Torvalds's avatar
      Merge tag 'pull-stable-struct_fd' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs · f8ffbc36
      Linus Torvalds authored
      Pull 'struct fd' updates from Al Viro:
       "Just the 'struct fd' layout change, with conversion to accessor
        helpers"
      
      * tag 'pull-stable-struct_fd' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs:
        add struct fd constructors, get rid of __to_fd()
        struct fd: representation change
        introduce fd_file(), convert all accessors to it.
      f8ffbc36