Commit Graph

1505200 Commits

Author SHA1 Message Date
Linus Torvalds
6628e7d4c6 Linux 7.4-rc1 2026-11-01 13:26:31 -08:00
Linus Torvalds
46fec1c302 Scheduler fix:
- Fix a false positive cputime related warning in kcpustat_dyntick_stop()
    that can trigger sporadically after a clocksource switch (Stian Halseth)
 
 Signed-off-by: Ingo Molnar <mingo@kernel.org>
 -----BEGIN PGP SIGNATURE-----
 
 iQJFBAABCgAvFiEEBpT5eoXrXCwVQwEKEnMQ0APhK1gFAmrm5OsRHG1pbmdvQGtl
 cm5lbC5vcmcACgkQEnMQ0APhK1hYJQ//QXUMx7mhToCfl06aAQGKONCSbM/o40Kl
 N775KWhpcWXoJEJ5GvwJzs/c9/jplA6MzWv8m8ff6dPpq57vqa3GhdoDjR0w5mB9
 vxxTxYFkYgRcg3pkh7TbJ6olaYfzZTg6HyxUDqxhrSPHt4tgK+izCbM5JmSrsxgN
 yDDogrG5KfTKF43SE2whVFhS86L4Jlyq3ctD7ka8PqAglu+He4D0sc6y9seAFS9E
 QXNCi4tlgAccK+iDTO1jU23InZ856smMqkaGSLoXDqkMfuJe/dunDWD0nU0dYcCY
 gLSmHNAf/e73cexnMEdvYE4XkOb7mOd31zCmpLpxfyit5J7XGfoIzZ7kKoqx3OQp
 o8I98DVd+HU9Qw8JoEnaxcBurnPE4jsM0ZGZExbGPlIVIiny9uusVQYJfOCnTfAg
 P5gB2Z0r5SzzECE2Tw13oZfFWVkBvvaXutk3Ps/t0Yp01Zhac7FihmAFMJWMfM0H
 fgAOrd749DZG9976Tnj2dxpZtveOPN90fkpJRiTH12SC+NHumbnoY7MmPljD+QEa
 gqxecbpfW+CpxHjypmH5GTYBTwuBhKTl3YVItRO5wegS21g4CkpigukHaExpgOhn
 8o/UILjHOSY/8/YcvzraKctDh/JguUzbkffIuxG6TBczLfPlYK6pz4C1uyxa46rS
 MkQkuZaennc=
 =hgbA
 -----END PGP SIGNATURE-----

Merge tag 'sched-urgent-2026-11-01' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

Pull scheduler fix from Ingo Molnar:

 - Fix a false positive cputime related warning in kcpustat_dyntick_stop()
   that can trigger sporadically after a clocksource switch (Stian Halseth)

* tag 'sched-urgent-2026-11-01' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
  sched/cputime: Don't warn when the tick period starts after idle exit
2026-11-01 09:52:32 -08:00
Linus Torvalds
7a3d2740d1 Misc timer fixes:
- Fix on-stack hrtimer cleanup in play_idle_precise(), and
    add the hrtimer_on_stack cleanup class to facilitate the fix
    (Hui Su)
 
  - Fix clock_getres() system call's handling of NULL output
    pointer in the !CONFIG_POSIX_TIMERS case (Hungyu Lin)
 
  - Fix get_cpu_itimer() to return TICK_NSEC when the sampled CPU time
    is exactly equal to the nonzero expiry (Hungyu Lin)
 
  - Fix do_timens_ktime_to_host() time offset subtraction underflow
    check (Hungyu Lin)
 
  - Report zero remaining time for disarmed SIGEV_NONE posix timers,
    and add a self-test to detect this bug in the future (Hung-Jui Lin)
 
  - Fix NOHZ 'full kick' handling bug that can cause missed
    tick updates (Peng Wang)
 
  - Fix field access bug in the vdso/gettimeofday code that works
    only by accident (Thomas Weißschuh)
 
  - Fix & prevent immediate clocksource watchdog rerun after a delay
    (Karl Mehltretter)
 
 Signed-off-by: Ingo Molnar <mingo@kernel.org>
 -----BEGIN PGP SIGNATURE-----
 
 iQJFBAABCgAvFiEEBpT5eoXrXCwVQwEKEnMQ0APhK1gFAmrm49IRHG1pbmdvQGtl
 cm5lbC5vcmcACgkQEnMQ0APhK1iTDA/5Aebi9AA+RG07pniYhgx8D47I+mEB+5EG
 Jthzq2OZ2rdH4IlI+YKN4KsQNnksNEkXzFmOe4KjVdogfr4JJqJ3UOv0HeNSaOtK
 2MD68CswEOZQR9L/8X6VaVoCZp3TkoRP6OPU0DSJeD/ELU8xeKhyBlerA0isgluU
 Oc9fePsQniN3zay7QkfViBM5D1D9SA54rp8TPaq9ZxstLqPFjzFcMtFLILm1syeZ
 vnsCz1dX5sUkEKkcDClcv3gp8LL7l3r+M+z7MuplO7NYYqCFzD/DFodKVIVMBr1u
 pd9XuGHo+6qF9+WXzC3wlLd6ZauC0gSFqOGdqeQoiQrOwt2xxNNFtr2NvHPtCmOL
 2014sHRk2KxZP1Hc7VvwGRD/fSTrkTYlQMXkuP5zQMzlpSiWLzmffH5Y2RohS6BB
 NyEw7bI9LaQ1zUatuYPkwKKcZQNhM6uaUIjfWvCIQYC0WmgIhN2r+4gTDc4jenU4
 6YDnxmE3dyTHlPgksBViDN/p6sNszeoq/KgRSRuM8H7VD6TlKgcHEmGXF3LhgAtY
 U7tfQ63ReDWuj2KmNyhT1lP0kBEJKbTouXn3CuGvtsmupLR+gmgZ13p8iPPpqgbO
 P8GH+5l2Cz9SieFbJqoXZ5D8dOEB5sVjAden7iZol2ALjIlWySDPaFWFJjqsDUfy
 Lmfu0V5K5ZU=
 =WzWb
 -----END PGP SIGNATURE-----

Merge tag 'timers-urgent-2026-11-01' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

Pull timer fixes from Ingo Molnar:

 - Fix on-stack hrtimer cleanup in play_idle_precise(), and
   add the hrtimer_on_stack cleanup class to facilitate the fix
   (Hui Su)

 - Fix clock_getres() system call's handling of NULL output
   pointer in the !CONFIG_POSIX_TIMERS case (Hungyu Lin)

 - Fix get_cpu_itimer() to return TICK_NSEC when the sampled CPU time
   is exactly equal to the nonzero expiry (Hungyu Lin)

 - Fix do_timens_ktime_to_host() time offset subtraction underflow
   check (Hungyu Lin)

 - Report zero remaining time for disarmed SIGEV_NONE posix timers,
   and add a self-test to detect this bug in the future (Hung-Jui Lin)

 - Fix NOHZ 'full kick' handling bug that can cause missed
   tick updates (Peng Wang)

 - Fix field access bug in the vdso/gettimeofday code that works
   only by accident (Thomas Weißschuh)

 - Fix & prevent immediate clocksource watchdog rerun after a delay
   (Karl Mehltretter)

* tag 'timers-urgent-2026-11-01' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
  clocksource: Prevent immediate watchdog rerun after a delay
  vdso/gettimeofday: Correct the read of tz_minuteswest and tz_dsttime
  tick/nohz: Reevaluate the tick for kicks flushed outside hardirq
  selftests: timers: Add a test for disarmed SIGEV_NONE timers
  posix-timers: Report zero remaining time for disarmed SIGEV_NONE timers
  time/namespace: Fix overflow when converting absolute deadlines
  timers/itimer: Keep a nonzero value at CPU timer expiry
  posix-timers: Accept NULL clock_getres() output in stubs
  sched/idle: Use hrtimer cleanup class in play_idle_precise()
  hrtimer: Add cleanup class for on-stack timers
2026-11-01 09:19:12 -08:00
Linus Torvalds
65cac12170 Misc irqchip fixes:
- Fix the hardware IRQ-retrigger logic on the riscv-imsic
    irqchip driver (Avi Weiss)
 
  - Fix MSI descriptor leak in the irq-msi-lib irqchip driver
    (Avi Weiss)
 
 Signed-off-by: Ingo Molnar <mingo@kernel.org>
 -----BEGIN PGP SIGNATURE-----
 
 iQJFBAABCgAvFiEEBpT5eoXrXCwVQwEKEnMQ0APhK1gFAmrm308RHG1pbmdvQGtl
 cm5lbC5vcmcACgkQEnMQ0APhK1hxRg//RKbfnqz0ADwjr0Dc6TwjenTxqO4j6PR7
 2sYE7yLBWcwgtjEv5WubgbeX4IurqvQZZT4eix4kbIzmTV/adLsbgWJ/PVtNpLJr
 M1iWGh6+yw+RCzIwzYO3j/K5Q2zKudKRIbQxyhQoUIj/ZSGtaAtVdN9V9jZ6fU0a
 +sg0M5zPod4JgxLWD8+NdUZFM9Qa6ZDASW6OaqUG4XoGts5ahi1ggcb8AGxZ9qhH
 2ZZo1xrqYwe2sGNCLnr8GFSaMm5W3eYt4crFsYbopO39SCJdkRb6u1+Z6bIxxZUJ
 JwVQlVy7TssoZBsSgsRTVPAnugTBmQOx26Nq7k8tcieQvmspb/awj7buFamBSbbi
 XtLqo4MAcUx9ResYT0cYlGh54ziwDcwzupYgUVS5z/NMRa4ByoWZKEEm6DXs64PF
 TW1PV9PknFgWMcgYiivK9JMiA1a9C9/feS1pbz7cvFbV5OX17UWf/mIWB4hthKXI
 1k4D4kLmIPJhL8w0t5d/o8+KUlCWItSF07ZGEQ6HreLJ5M0gJHpCBNdzxTNJl0eZ
 XTwz8eiSOZnne293Jj/l/HVqqILZC1KF1fouwA3FnbhQU4ZcbG3MR0sEaT4HU35U
 9l5D1RmWU/J0evHls9x176sf2kyU8FA0xtZU1tlFwLBnzXipQHglKlefq44IEL+a
 nkcFyrzfdXw=
 =C3FN
 -----END PGP SIGNATURE-----

Merge tag 'irq-urgent-2026-11-01' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

Pull misc irqchip fixes from Ingo Molnar:

 - Fix the hardware IRQ-retrigger logic on the riscv-imsic
   irqchip driver (Avi Weiss)

 - Fix MSI descriptor leak in the irq-msi-lib irqchip driver
   (Avi Weiss)

* tag 'irq-urgent-2026-11-01' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
  irqchip/irq-msi-lib: Free wired MSI descriptors
  irqchip/riscv-imsic: Report successful hardware retrigger
2026-11-01 09:16:37 -08:00
Linus Torvalds
cbaa266150 Bootconfig fixes for v7.4-rc1:
- init/bootconfig: Pass init arguments in documented order
   Parse extra_init_args before command-line init arguments in
   start_kernel(). This ensures command-line options take precedence over
   bootconfig, matching the documented order and saved command line.
 -----BEGIN PGP SIGNATURE-----
 
 iQFPBAABCgA5FiEEh7BulGwFlgAOi5DV2/sHvwUrPxsFAmrl9DgbHG1hc2FtaS5o
 aXJhbWF0c3VAZ21haWwuY29tAAoJENv7B78FKz8bfW0IAMFRPD7zVlEBC6ABpdKO
 CLotTbRYTzAhW/TXPzmkehqJUhwCjMhaWDYXimwsPVH055yGGpZNAtBlU4Djf69R
 mEJzwlVg3pa92s51jKCPM0+NWf1/EQVETFAeRw37EkV+5xNFLoo0Hhc0PoRZ4PNl
 0tUqH66ssQvuhewNxFOYTtu+8bRpJQ5eGwX6aaBObMwaV7ieFT0y5GlKAcEUEBBR
 Ueqs3c0k251ELxLJO8T3DkYe6yr7KjdOkKQCufjoTmezjbKQuThMtooFwjjE7LEq
 lPDjncnpUypdHqc6/SFKRWLjw9KTro8o8VQmgUDgDXYAlzPXSguLVfO+8eZSnKhS
 jn4=
 =TB2L
 -----END PGP SIGNATURE-----

Merge tag 'bootconfig-fixes-v7.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace

Pull bootconfig fix from Masami Hiramatsu:

 - init/bootconfig: Pass init arguments in documented order

   Parse extra_init_args before command-line init arguments in
   start_kernel(). This ensures command-line options take precedence
   over bootconfig, matching the documented order and saved command
   line.

* tag 'bootconfig-fixes-v7.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace:
  init/bootconfig: pass init arguments in documented order
2026-11-01 09:00:06 -08:00
Linus Torvalds
9b6f2eabc8 RTC for 7.4
Subsystem:
  - the hctosys limit for 32bit platforms is now configurable
  - introduce lock guard for for rtc_device.ops_lock
  - use sysfs_emit() instead of sprintf() were possible
  - selftest fixes
 
 New driver:
  - Raspberry Pi 5 RTC
 
 Drivers:
  - abx80x: add support for ABX81X
  - bd70528: properly enable wakeup
  - cmos: Fix ACPI RTC alarm handling
  - ds1685: power-off fixes
  - mt6397: add nvmem support
  - pcf85063: add HW UIE support
  - rs5c372: Ricoh R2223x support
  - rzn1: add R-Car X5H support
  - s35390a: allow use of output pin for interrupt signal 1 for wakealarm to
    support synology devices
  - sun6i: add Allwinner B288 support
 -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEEBqsFVZXh8s/0O5JiY6TcMGxwOjIFAmrmdmcACgkQY6TcMGxw
 OjLB/g/9EG6jcs15Ci3pgKQ4g6h6UKHN86WIA64uPMjvuyAvmyccmrlW6AvwOhoH
 kAp77s8hbujENJk4HPvT4kU0G7KlxpxfZwuvicHNBqGQ1L100Ahx22FdrgXxcejk
 MKuN+30H6iJ01eDEmxJ530VlWCRBTusd8HexDh3Q6IY2mNLiphJXJ+moDheKBnAO
 ECh8lc6Qnb5fFRYqUmAK0QLNKjU8kz6FCgj+vnuSaRftEAgniFmHTJHIiTdB0Bwp
 REdpSMuhjM85oeCxcYu1r1ABnE08a3EbkoHelPlDiO/p1NNQ227IbciCG3rX++bJ
 pa5IWkt2nfvC3RIyxuM5pcCSLpRHgji34LLiCkSzP99S3yujVYcZiBYltuYz5rx0
 Jg4hIb1EmyV7AimQ3XZp1Y+/R2NxKVVHl7MEioq/EFYQFDo04EwcJAYIPn/ZPLDG
 sVpbO/o3lmocP7f6n7jZFkuapQwZ68nijiuRby51gUK4uuraPQou4/igsBlJWn0s
 z6MbS/1jtpRbAQ+8m8ev6LP5s7+4iALd4C8DGYEN53JOpx03LNLFpxPR14i8a5kt
 FaXMjA6f12WvKaVcYJv++r/pxho/iSfXRQiSV3algm921Z5hpkCRi8xauI9sJJmG
 IWjp+xZ+svPE+Ch7kn4jHbEGLbJy2sBSG30TKEE9WhUVOaHdhQo=
 =NTHB
 -----END PGP SIGNATURE-----

Merge tag 'rtc-7.4' of git://git.kernel.org/pub/scm/linux/kernel/git/abelloni/linux

Pull RTC updates from Alexandre Belloni:
 "This introduces a way to lift the hctosys limit for 32-bit systems to
  ensure systems relying on it can pass Y2038. Add a driver for the
  Raspberry Pi 5 RTC and add support for the Abracon abx81x, Ricoh
  R2223x, Renesas R-Car X5H and Allwinner B288 RTCs to existing drivers:

  Subsystem:
   - the hctosys limit for 32bit platforms is now configurable
   - introduce lock guard for for rtc_device.ops_lock
   - use sysfs_emit() instead of sprintf() were possible
   - selftest fixes

  New driver:
   - Raspberry Pi 5 RTC

  Drivers:
   - abx80x: add support for ABX81X
   - bd70528: properly enable wakeup
   - cmos: Fix ACPI RTC alarm handling
   - ds1685: power-off fixes
   - mt6397: add nvmem support
   - pcf85063: add HW UIE support
   - rs5c372: Ricoh R2223x support
   - rzn1: add R-Car X5H support
   - s35390a: allow use of output pin for interrupt signal 1 for wakealarm to
     support synology devices
   - sun6i: add Allwinner B288 support"

* tag 'rtc-7.4' of git://git.kernel.org/pub/scm/linux/kernel/git/abelloni/linux: (89 commits)
  rtc: rs5c372: use sysfs_emit() instead of sprintf()
  rtc: ds1307: use sysfs_emit() instead of sprintf()
  rtc: isl1208: use sysfs_emit() instead of sprintf()
  rtc: ds1685: use sysfs_emit() instead of sprintf()
  rtc: ds1343: use sysfs_emit() instead of sprintf()
  rtc: rx8025: use sysfs_emit() instead of sprintf()
  rtc: x1205: use sysfs_emit() instead of sprintf()
  rtc: bq32k: use sysfs_emit() instead of sprintf()
  rtc: ep93xx: use sysfs_emit() instead of sprintf()
  rtc: pcf2127: use sysfs_emit() instead of sprintf()
  rtc: rv3029: use sysfs_emit() instead of sprintf()
  rtc: ds1685: keep setting PAB until power is removed
  rtc: ds1685: do not sleep in the power-off handler
  rtc: ds1685: arm the wake-up alarm at power-off only if an alarm is set
  rtc: rv3028: use sysfs_emit() instead of sprintf()
  rtc: pcf85063: add 1 Hz update interrupt (UIE) support
  rtc: pcf85063: preserve the alarm flag in clkout register updates
  rtc: pcf85063: do not clear AIE in the interrupt handler
  rtc: pcf85063: use devm_of_clk_add_hw_provider() for clkout
  rtc: s35390a: Add synology quirk
  ...
2026-11-01 08:41:03 -08:00
Stian Halseth
b327e63683 sched/cputime: Don't warn when the tick period starts after idle exit
kcpustat_dyntick_stop() warns if idle ends before the tick period
that the next tick will account has started. That happens on x86 in
a CPU's first idle period with the tick stopped, right after the
switch from the jiffies clocksource to tsc-early.

On the jiffies clocksource ktime only moves at the tick. When the
clocksource switches some time d after a tick, that d is lost: ktime
continues from the value of the last tick. The next tick comes
TICK_NSEC after the last one, but ktime has only moved TICK_NSEC - d,
while tick_periodic() still adds a full TICK_NSEC to tick_next_period,
which is now d ahead of ktime. When NOHZ starts,
tick_init_jiffy_update() rounds it up to a multiple of TICK_NSEC and
the sched timer is armed there, up to nearly two ticks after now. A
tick stop saves that as ts->last_tick, and an idle exit before now
reaches ts->last_tick - TICK_NSEC sees the tick period in the future.

Nothing is accounted twice then. The first tick covers a period that
starts after the idle exit, and the code already handles it. Drop the
warning.

Fixes: 96a494c9cf ("sched/cputime: Don't account idle time twice after dyntick-idle")
Reported-by: Paul Menzel <pmenzel@molgen.mpg.de>
Reported-by: Breno Leitao <leitao@debian.org>
Reported-by: Linus Torvalds <torvalds@linux-foundation.org>
Reviewed-by: Kayra Cizmeci <kayracizmeci@gmail.com>
Reviewed-by: Frederic Weisbecker <frederic@kernel.org>
Signed-off-by: Stian Halseth <stian@itx.no>
Signed-off-by: Ingo Molnar <mingo@kernel.org>
Link: https://lore.kernel.org/all/auTCQauaU733PY5z@gmail.com/
Link: https://lore.kernel.org/all/CAHk-=winC2u2D1FAX5grfq9F=bxmARxhuiQ4MvHAiJFu3iF6gw@mail.gmail.com/
Link: https://patch.msgid.link/20261031081408.3378884-1-stian@itx.no
Closes: https://lore.kernel.org/all/bfe9b14a-6e65-41c5-b638-26f6e033788b@molgen.mpg.de/
--
 kernel/sched/cputime.c | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)
2026-11-01 07:32:38 +01:00
Linus Torvalds
cbbddb6b08 power utilities 2026.10.31
turbostat 2026.10.31
 
 	Fix --cpu option to work more than once.
 	Fix --Joules option to work with --show power.
 	Remove hard-coded 8192-CPU limit.
 	Decode Uncore Frequency Agent Types.
 	Dump RDT (Resource Director Technology) config.
 	Dump RP (Resource Priority) config.
 	Recognize Rugged Panther Lake.
 	Fix PMT mmap size, bounds check, and mask computation.
 	Misc cleanups and minor fixes.
 
 x86_energy_perf_policy 2026.10.31
 
 	Harden input parsing and bounds checks.
 	Fix optarg keyword matching.
 	Rewrite MSR device path discovery.
 	Misc cleanups and minor fixes.
 -----BEGIN PGP SIGNATURE-----
 
 iQJIBAABCgAyFiEE67dNfPFP+XUaA73mB9BFOha3NhcFAmrmJyQUHGxlbi5icm93
 bkBpbnRlbC5jb20ACgkQB9BFOha3Nhfugg//QCJbYp/aOZ1k9siqw1pE/z9HJlIr
 2T6vgEadOEqY1Z/ObCeH/E/pgAnrSxbCkX8AOlhdqVBysD6JVn/rvsOo6yLfpI5V
 A7QcYzZfOi9tOP4m6hHC3gmAjkYC8b1vCHMiq+F4QOW1sq7zFIZ5SHPJFUZNrHvK
 54UrRCJ6BfJGw1W/cGozgwYVCJW7yXVHd2845nEhj8SGrkeZZVilkbrDiwFTxvWJ
 PC6QpsScLLq0lKFkr7fIFb/QGr1Zz0dwqCsDzO5z4wHqvvAZ+yAGSYLw3MG/6LBL
 PzFRivNETn7jwNcaQOp0H7teThC3s+WDioFLQjIrp2VNv5/yQeG1FZjh/EnlRBOi
 WcelJfwzWMrkmXfHE1UGrn9Y6HLFddRSxjdpyEQ+QGpH2NAyUxwFDauz9JZl3Tdd
 E/3T6F+BRvDOm/sHg3zMOCewUsbEdbxwLs+g6RNH7QkapcofOtUwzuNGUfD3ETF5
 qbTN+4P1T3FDxeI9GK6yLUZD6DsgIFwGEWOrD2VIp0XZaTNGGLHSwU0vQFEN3Tlq
 sKMkGdtnThTp4nRnWwbDqAQpWVEX+62HsUlOuPYL25CDAyyPfFIBGnCGDqyPLUEp
 Mlp/CMg8jA1VsFzzNX4aMGSjvszfJG+wVtHd/yluid4aqJFofl6Uza3FA5brCAF4
 hp0PVFWnJF907Z4=
 =fZ/K
 -----END PGP SIGNATURE-----

Merge tag 'power-utilities-2026.10.31' of git://git.kernel.org/pub/scm/linux/kernel/git/lenb/linux

Pull x86 power utilities updates from Len Brown:
 "Turbostat:
   - Fix --cpu option to work more than once
   - Fix --Joules option to work with --show power
   - Remove hard-coded 8192-CPU limit
   - Decode Uncore Frequency Agent Types
   - Dump RDT (Resource Director Technology) config
   - Dump RP (Resource Priority) config
   - Recognize Rugged Panther Lake
   - Fix PMT mmap size, bounds check, and mask computation
   - Misc cleanups and minor fixes

  x86_energy_perf_policy:
   - Harden input parsing and bounds checks
   - Fix optarg keyword matching
   - Rewrite MSR device path discovery
   - Misc cleanups and minor fixes"

* tag 'power-utilities-2026.10.31' of git://git.kernel.org/pub/scm/linux/kernel/git/lenb/linux: (42 commits)
  tools/power x86_energy_perf_policy: Version 2026.10.31
  tools/power turbostat: Version 2026.10.31
  tools/power turbostat: Fix PMT mmap size and bounds check
  tools/power turbostat: Fix undefined behavior in pmt_gen_value_mask()
  tools/power turbostat: Fix --Joules when used with --show power
  MAINTAINERS: Add x86_energy_perf_policy
  x86_energy_perf_policy: Simplify write_sysfs() return type
  x86_energy_perf_policy: Use calloc to initialize string buffer
  x86_energy_perf_policy: Cleanup: Constify read only parameters
  x86_energy_perf_policy: Cleanup: Drop unused signal.h
  x86_energy_perf_policy: Document MSRHEADER
  x86_energy_perf_policy: Cleanup: Check fseek() in VM path
  x86_energy_perf_policy: Cleanup: Define BCLK_MHZ
  x86_energy_perf_policy: Cleanup: Define HWP_WINDOW_MAX_USEC
  x86_energy_perf_policy: Bound package iteration
  x86_energy_perf_policy: Harden against potential ratio overflow
  x86_energy_perf_policy: Fix optarg keyword matching
  x86_energy_perf_policy: Cleanup: Use snprintf() for platform-profile
  x86_energy_perf_policy: Harden with strtol()
  x86_energy_perf_policy: Harden update_cpufreq_scaling_freq()
  ...
2026-10-31 15:05:17 -07:00
Linus Torvalds
e9954f3fbd sound fixes for 7.4-rc1
A collection of fixes across the sound subsystem since the initial
 7.4 PR.  Nothing particularly stands out, mostly driver- and
 device-specific fixes along with a few race / UAF fixes and cleanups.
 Here are some highlights:
 
 * ALSA core:
 - Fix potential race in PCM proc handling at disconnection
 - Fix potential race in UMP sequencer callback at releasing
 
 * HD-audio:
 - Reject codec reset/reconfig on ASoC buses to prevent deadlock
 - Force MSI for Hygon H34M51A board
 - Usual Realtek quirks for ASUS and HP laptops/AiO
 
 * USB-audio:
 - Bound packet copies by PCM buffer size in generic and ua101 drivers
 - Rate-limit URB submission errors at stream start
 - Skip redundant probe-time interface setup on MSI ALC4080
 - Device quirks for Novation UltraNova, MOTU MicroBook II, and RYDZ
   Headphone
 
 * ASoC:
 - Fixes for runtime PM and IRQ handling in hdac_hda and SDCA
 - SOF: Fix potential UAF at release, fix for Kconfig dependency
 - Qualcomm: Fixes for sm8250 and q6apm/q6afe
 - NXP / i.MX: Fix for pending work in hw_free
 - Xilinx: Fix read-modify-write of AUD_CTRL in formatter_pcm
 - Intel: Arrow Lake SoundWire match table additions (RT712, RT713 +
   dual RT1320)
 - AMD: DMI quirk for HP Laptop 14-em0xxx and memory leak fix in Raven
   DMA close
 - Various codec fixes for midas_wm1811, wm8994, cs35l56, cs42l56,
   WSA881x/883x/884x, es8326/es8375/es9356,  rt721/rt722, and
   tlv320aic32x4
 
 * Misc:
 - OPL3: Fix races in timer initialization, shutdown, and voice cleanup
 - Bounds checks and string helpers for AC97 and emu10k1
 - Fix spu_memset() stride in legacy SH AICA driver
 - Parameter handling fixes in pcmtest virtual driver
 -----BEGIN PGP SIGNATURE-----
 
 iQJCBAABCAAsFiEEIXTw5fNLNI7mMiVaLtJE4w1nLE8FAmrmFsAOHHRpd2FpQHN1
 c2UuZGUACgkQLtJE4w1nLE8DzA//WKBXzuHaYoQCel0Ky0qbTjOsLJaI63D1+w6r
 2SeeEjKIRhRVSGSuGvtMLKQ2IEFq9njhVCjnv9FK+bY2x4jrc6auSixOmXZNgplj
 f39DlJjy4ZZ6N1M9LclbiHFPR7UuRlbgXqS6UR83ijapHGqTf5eWcL1RIHmiUZ3k
 Xr6Yd2Q58u7sMRdwLIoXYum7VD/46iSTS/SQT5Iq8eQij7YVlVTglxUPTouCVWI7
 rNm9TZe5VggJ77ADI2Fo3VRI+QhQU/BohZ7R155fpqroCvGKLmWppypkCqpxtc/u
 DnVGI7Cq/TDoBh2u4GrtBhx+voyt84X2N1epJ6vZzp5VZc6cjBnKFynvsxuGH4ox
 0hb9Syu70rUAtulJwefRuftXv/gl0coZJCS1NoPsoKy3pEBGHExjgBoCZv7oCNH9
 chk4n7XFEb7yktN5bd6MG7yhdF1U6jwkpFyDphBTb992eaB0KTylx/JcmOzwxSun
 MKcAq8jsigvoxfvjGhE1OugtOg0qgdNgW9vCD1xXwSaNRXFEGNoBHWE33Y4nq3GW
 e5PqUkYI6k2cAVyosxS3N9h9H/5FfCQynC1VZECl7gdFKvhNgHVAFuVLzbQ/Hn8K
 vYitKNrVdC07EubPuOyOiDqEMCqvtAv7acH11ABMkKdnqwbbi0MzZB15s1lt1vzh
 er1a04E=
 =zbju
 -----END PGP SIGNATURE-----

Merge tag 'sound-fix-7.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound

Pull sound fixes from Takashi Iwai:
 "A collection of fixes across the sound subsystem. Nothing particularly
  stands out, mostly driver- and device-specific fixes along with a few
  race / UAF fixes and cleanups. Here are some highlights:

  ALSA core:
   - Fix potential race in PCM proc handling at disconnection
   - Fix potential race in UMP sequencer callback at releasing

  HD-audio:
   - Reject codec reset/reconfig on ASoC buses to prevent deadlock
   - Force MSI for Hygon H34M51A board
   - Usual Realtek quirks for ASUS and HP laptops/AiO

  USB-audio:
   - Bound packet copies by PCM buffer size in generic and ua101 drivers
   - Rate-limit URB submission errors at stream start
   - Skip redundant probe-time interface setup on MSI ALC4080
   - Device quirks for Novation UltraNova, MOTU MicroBook II, and RYDZ
     Headphone

  ASoC:
   - Fixes for runtime PM and IRQ handling in hdac_hda and SDCA
   - SOF: Fix potential UAF at release, fix for Kconfig dependency
   - Qualcomm: Fixes for sm8250 and q6apm/q6afe
   - NXP / i.MX: Fix for pending work in hw_free
   - Xilinx: Fix read-modify-write of AUD_CTRL in formatter_pcm
   - Intel: Arrow Lake SoundWire match table additions (RT712, RT713 +
     dual RT1320)
   - AMD: DMI quirk for HP Laptop 14-em0xxx and memory leak fix in Raven
     DMA close
   - Various codec fixes for midas_wm1811, wm8994, cs35l56, cs42l56,
     WSA881x/883x/884x, es8326/es8375/es9356, rt721/rt722, and
     tlv320aic32x4

  Misc:
   - OPL3: Fix races in timer initialization, shutdown, and voice
     cleanup
   - Bounds checks and string helpers for AC97 and emu10k1
   - Fix spu_memset() stride in legacy SH AICA driver
   - Parameter handling fixes in pcmtest virtual driver"

* tag 'sound-fix-7.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound: (71 commits)
  ASoC: SOF: Intel: hda: Stop the controller before freeing its DMA buffers
  ASoC: imx-pcm-rpmsg: Flush pending work in hw_free
  ASoC: xilinx: formatter_pcm: Fix read-modify-write of AUD_CTRL in hw_params
  ASoC: hdac_hda: Keep runtime PM state in sync across codec remove/probe
  ASoC: rt721: Remove invalid register defaults
  ASoC: hdac_hda: Balance the runtime PM disable in codec remove
  ASoC: hdac_hda: Restore the codec device type on unbind
  ASoC: hdac_hda: Allocate the private data at codec driver bind
  ASoC: qcom: sm8250: Limit RX digital gain to 0 dB
  ALSA: hda: Reject codec reset on ASoC (ext_ops) buses
  ALSA: usb-audio: add quirk for Novation UltraNova (1235:0011)
  ALSA: usb-audio: Add correct datainterval in the quirks-table for Microbook II
  ALSA: usb-audio: Skip probe-time interface setup for MSI MAG X570S ALC4080
  ALSA: hda/realtek: Extend quirk for HP Pavilion All-in-One 27-ca1xxx
  ALSA: pcmtest: Honor the enable parameter
  ALSA: ua101: Bound packet copies by the PCM buffer size
  ALSA: usb-audio: Bound packet copies by the PCM buffer size
  ASoC: SDCA: re-enable IRQ on pm_runtime_force_suspend failure
  ASoC: SDCA: drop pm_runtime reference on probe failure path
  ASoC: SDCA: propagate sdw_slave_read_prop() failure in class_read_prop
  ...
2026-10-31 12:30:31 -07:00
Linus Torvalds
ca62fc8c6b overlayfs fixes for 7.3
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEE9zuTYTs0RXF+Ke33EVvVyTe/1WoFAmrkiJ8ACgkQEVvVyTe/
 1WqORg//XFzfWHcZWj9xutS0rNLnMHvvAa/aXO+7+V5/Dq6/12iQnKjzCRHIGDbj
 Pyb/PY+foJuXrNu3kqM4xxtX77zB628px3KUlYXSS0FmwO1sRu6Q+NERsHUsAoaM
 oFeWopsYODB+IsUR1saZylaAIhEV49fn4CWGLNZA+pqWQSIRgMXixJleacPWph5+
 k4r/hmVbXc3BkBZdtpUdfgSsctowv402Y/qMYzY8wIDYcDA5d5hhT57mEEt2Y7KY
 lQuArvn6wlx2Qds2vudYDajJjNJt3zpSNhc7omLlyP+0b+JA1F+xZQ3pWdUQZxus
 FaO9L4rM1lfqA3TTKIpsoWE84YpfWguwpxZInYfMHwRnrRy59lhGxuOeslBWOXqe
 skB/j+pkIpYc/Eq54GffC2NdNpeHa7LOqfJiWVZGeGMhGRLSyNpIYQWmbENBqDVz
 GN/4ozM1bbeTmgdzVYt3WAcy+ZbeNSuLBfvY77At4qJYkJbv5oPXetMTW6XXiQal
 EGnbLCY6TunIEGQIp+OLzZC5fpu+AwGFr+ZSXWt0bLnvpSm/pXjzYdM9fv2kFYCc
 1kPXkvx0LkjIO0g6u4ejCLWDsRCaPd0QdVLnyEnwqi5fBOGBHCflbVAAy0PMqe/h
 SZplOOwux/bknMtWNbuDER6Y8EjP3Fl36fdmLem49z4KJH0y1Uc=
 =HGfC
 -----END PGP SIGNATURE-----

Merge tag 'ovl-fixes-7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/overlayfs/vfs

Pull overlayfs fixes from Amir Goldstein:

 - Fixes for bugs found by Chris Mason's AI review, several of them
   reachable by unprivileged users: an info leak, use-after-free and
   NULL deref bugs, an RCU walk stall with remote layers and data loss
   with nfs_export

 - Fix copy up of files with an empty security.capability xattr, which
   any user could set to block copy up

 - Fix a regression from v6.16 with the override_creds mount option

 - Two casefold fixes

* tag 'ovl-fixes-7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/overlayfs/vfs:
  ovl: check the casefold flag of directories only
  ovl: reserve space for the casefolded name terminator
  ovl: fix mount setup failing when override_creds drops CAP_SYS_ADMIN
  selftests/ovl: fix detached layer mountinfo expectations
  ovl: set the revalidate flags after d_instantiate()
  ovl: always encode the origin fh when index is enabled
  ovl: read the nlink xattr of every indexed non-dir
  ovl: skip copy up of empty security.capability
  ovl: fix a torn path in ovl_get_redirect()
  ovl: do not copy up a dentry that was removed
  ovl: hold a reference on the parent in readdir
  ovl: use the pinned upper dir in ovl_fix_origin()
  ovl: do not take a name snapshot in RCU walk
  vfs: add try_take_dentry_name_snapshot()
  ovl: take a snapshot of the name for copy up
  ovl: check that the parents of volatile/dirty are dirs
  ovl: add assertions in dir cache code
  ovl: set OVL_WHITEOUTS before publishing the upper dir
  ovl: fortify ovl_copy_xattr() against underlying layer modifications
  ovl: do not copy up an xattr value that was never read
2026-10-31 11:35:53 -07:00
Len Brown
8969e647d0 Merge branches 'turbostat' and 'x86_energy_perf_policy' into utilities 2026-10-31 14:29:22 -03:00
Len Brown
ed9324befb tools/power x86_energy_perf_policy: Version 2026.10.31
Since 2026.04.25:

Harden input parsing and bounds checks.
Fix optarg keyword matching.
Rewrite MSR device path discovery.
Misc cleanups and minor fixes.

Signed-off-by: Len Brown <len.brown@intel.com>
2026-10-31 14:23:24 -03:00
Len Brown
a8d65a89a3 tools/power turbostat: Version 2026.10.31
Since version 2026.09.28:

Fix --cpu option to work more than once.
Fix --Joules option to work with --show power.
Remove hard-coded 8192-CPU limit.
Decode Uncore Frequency Agent Types.
Dump RDT (Resource Director Technology) config.
Dump RP (Resource Priority) config.
Recognize Rugged Panther Lake.
Fix PMT mmap size, bounds check, and mask computation.
Misc cleanups and minor fixes.

Signed-off-by: Len Brown <len.brown@intel.com>
2026-10-31 14:21:38 -03:00
Kaushlendra Kumar
cfdb43387f tools/power turbostat: Fix PMT mmap size and bounds check
Remove assert(offset == 0), to allow non-zero PMT offsets.

Fix the pmt_mmio_open() mapping to round-up (offset + size).

Fix the offset bounds check to disallow running past the end of the region.

[lenb: commit message re-write]
Signed-off-by: Kaushlendra Kumar <kaushlendra.kumar@intel.com>
Signed-off-by: Len Brown <len.brown@intel.com>
2026-10-31 13:46:33 -03:00
Kaushlendra Kumar
3d6fc92be1 tools/power turbostat: Fix undefined behavior in pmt_gen_value_mask()
The function uses plain int literal '1' for bit shifting, which causes
undefined behavior when msb >= 31. This is because shifting a 32-bit int
by 32 or more bits is undefined behavior in C. Fix by using 1ULL
(unsigned long long) instead of 1 to ensure 64-bit arithmetic on all
platforms.

Signed-off-by: Kaushlendra Kumar <kaushlendra.kumar@intel.com>
Signed-off-by: Len Brown <len.brown@intel.com>
2026-10-31 13:46:33 -03:00
Len Brown
ab6e94fb4a tools/power turbostat: Fix --Joules when used with --show power
The "--Joules" option displays energy in Joules,
replacing the same metrics displayed as power in Watts.

But when used with --show power, it deletes the power
metrics without replacing them with their energy counterparts:

$ sudo ./turbostat -q --list --show power --Joules
CoreTmp,PkgTmp,RAM_J,PKG_%,RAM_%

Fix it thus:

$ sudo ./turbostat -q --list --show power --Joules
CoreTmp,PkgTmp,Pkg_J,Cor_J,GFX_J,RAM_J,PKG_%,RAM_%,Sys_J

Signed-off-by: Len Brown <len.brown@intel.com>
2026-10-31 13:46:06 -03:00
Takashi Iwai
74f6055d0c ASoC: Fixes for v7.4
A moderately large collection of fixes and quirks that have come in
 during the merge window, everything here is driver specific and none of
 it unusually severe.
 -----BEGIN PGP SIGNATURE-----
 
 iHUEABYKAB0WIQReagvpf3TrrA7BoYYv73Ows9A4iQUCauON8gAKCRAv73Ows9A4
 iZm5AQCsGUaurJF/x2A5bcxt7eQay8hm6SZl4dQ1IBRZSjXwCAEA8GfpfWkrs1H0
 OjjEhpZxvqsc2EToBBOQrtRYFqRKhQE=
 =hdcF
 -----END PGP SIGNATURE-----

Merge tag 'asoc-fix-v7.4-merge-window' of https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linus

ASoC: Fixes for v7.4

A moderately large collection of fixes and quirks that have come in
during the merge window, everything here is driver specific and none of
it unusually severe.
2026-10-31 16:31:50 +01:00
Avi Weiss
278b2abf66 init/bootconfig: pass init arguments in documented order
start_kernel() appends command-line init arguments before
bootconfig init arguments, while setup_command_line()
places them in the opposite order. As a result, the
arguments passed to init do not match the saved command
line, reversing the intended precedence of options.

Parse extra_init_args before after_dashes so command-line
init arguments are passed last.

Link: https://lore.kernel.org/all/20261027073719.4010659-2-thnkslprpt@gmail.com/

Fixes: b66fbbe8d4 ("init/bootconfig: Reorder init parameter from bootconfig and cmdline")
Signed-off-by: Avi Weiss <thnkslprpt@gmail.com>
Cc: stable@vger.kernel.org
Signed-off-by: Masami Hiramatsu (Google) <mhiramat@kernel.org>
2026-10-31 22:26:20 +09:00
Linus Torvalds
36aad21d50 - Fix compound CREATE response buffer sizing and reserve space for final
response padding to prevent buffer overflows and out-of-bounds reads.
 
  - Allocate sufficient space for UTF-16 directory-name conversion,
    including the terminating NUL.
 
  - Fix an RDMA transfer length underflow that can cause out-of-bounds
    reads or writes when processing multiple remote buffer descriptors.
 
  - Fix use-after-free bugs during failed durable reconnect cleanup and
    AppInstanceId supersede racing with session teardown.
 
  - Keep retry timeout clamp bounds constant to fix a MIPS build
    failure with CONFIG_HZ=1024.
 
  - Fix a session reference leak in compounded SESSION_SETUP and reject
    compounded session binding to avoid mixing session and tree state
    after a failed binding.
 
  - Serialize operations on each named pipe and preserve unread RPC reply
    data for subsequent READ requests when the client's output buffer is
    too small.
 
  - Return complete, eight-byte-aligned stream information entries and
    report insufficient output space correctly.
 
  - Use the resolved share root path so shares rooted at mount points
    list their contents correctly with crossmnt disabled.
 
  - Ignore network-device events outside the initial network namespace,
    preventing container interfaces from affecting ksmbd listeners.
 -----BEGIN PGP SIGNATURE-----
 
 iQJKBAABCgA0FiEE6NzKS6Uv/XAAGHgyZwv7A1FEIQgFAmrlQlAWHGxpbmtpbmpl
 b25Aa2VybmVsLm9yZwAKCRBnC/sDUUQhCAcOD/oDMuYg1Kz1A4gZyPAR908u2ID1
 aJT8fUUcmcwKjFjhm9bvaexfI19wzxVFdqf5j/c6kNNmd5bi3ke8BOc4Z/XjdlEy
 38uOyv50Kft2tHp4pVQKwYa4w1tCIBfDJkUVIDsdE1lqfo/fdJYJViE4ZTXbiPiO
 LJeOjt+MFLHoBL2RIkH6Be971oh05DDA/+vcWWN5pXwnrQEnGKXa6EPx4EBd068x
 EcF2nUJStnqzWxXL4cFsdOnYfaabCbDH8ZZKVDX1JVngcuY5LQ1h+AV/Id/162w8
 w1MmCCZYqCLAvTx7j5xV2l6IF3NFet/gx0WIw5QrEviPVr8GHJPA8KCV9o888ZZN
 fL8Nbu86gwRpzQUDcWR6EjYsJmB+c6St0yu7U1qnioafDI7/eV8HfJqukUKQVWeV
 KuLNjOZIW9PBg/AGT0s21YGsKKFFjYzuDv20eQfWAFPVqELg+njstpvGximYsYMW
 SZwatErvzHuq/0ckeh6P9vF1ppu1V0fmowh3fH2B9+/x6Fr5d2+rIlEzO0D9tXdB
 jNYxpPoxhSZmM+g9FiwinZSXwAhPVd4UQsTmZXP6LkKO3/UrVXUaMz01qfCG3MBx
 iid8qVy1uGdj3/tDN1NnEzvmxGfAo7YAsGwDE+VdRLg3KEA9T/vR1GSLN8ULBu1c
 TsoTusgp5Cior9rajg==
 =4Znd
 -----END PGP SIGNATURE-----

Merge tag 'ksmbd-for-7.4-rc1-part2' of git://git.kernel.org/pub/scm/linux/kernel/git/linkinjeon/smb

Pull smb server fixes from Namjae Jeon:

 - Fix compound CREATE response buffer sizing and reserve space for
   final response padding to prevent buffer overflows and out-of-bounds
   reads

 - Allocate sufficient space for UTF-16 directory-name conversion,
   including the terminating NUL

 - Fix an RDMA transfer length underflow that can cause out-of-bounds
   reads or writes when processing multiple remote buffer descriptors

 - Fix use-after-free bugs during failed durable reconnect cleanup and
   AppInstanceId supersede racing with session teardown

 - Keep retry timeout clamp bounds constant to fix a MIPS build failure
   with CONFIG_HZ=1024

 - Fix a session reference leak in compounded SESSION_SETUP and reject
   compounded session binding to avoid mixing session and tree state
   after a failed binding

 - Serialize operations on each named pipe and preserve unread RPC reply
   data for subsequent READ requests when the client's output buffer is
   too small

 - Return complete, eight-byte-aligned stream information entries and
   report insufficient output space correctly

 - Use the resolved share root path so shares rooted at mount points
   list their contents correctly with crossmnt disabled

 - Ignore network-device events outside the initial network namespace,
   preventing container interfaces from affecting ksmbd listeners

* tag 'ksmbd-for-7.4-rc1-part2' of git://git.kernel.org/pub/scm/linux/kernel/git/linkinjeon/smb:
  ksmbd: return complete and aligned stream information
  ksmbd: fix session reference leak on compounded SESSION_SETUP
  ksmbd: fix named-pipe reply loss with small output buffers
  ksmbd: avoid races between named-pipe operations
  ksmbd: fix use-after-free after a failed durable reconnect
  ksmbd: fix out-of-bounds read when padding the final compound response
  ksmbd: fix SMB2 CREATE response buffer overflow in compound requests
  ksmbd: use the resolved share path for the share root
  ksmbd: keep retry timeout clamp bounds constant
  smb: server: size directory name conversion buffer correctly
  ksmbd: prevent session binding in compound requests
  ksmbd: ignore network devices of other namespaces
  ksmbd: fix app-instance non-durable supersede session UAF
  smb: smbdirect: fix buffer length underflow in RDMA transfers
2026-10-30 22:01:54 -07:00
Linus Torvalds
dd384658c7 perf tools changes for v7.4
- Support instruction tracking on arm64 for data type profiling, resolving
   stack, global, per-CPU and 'current' variable accesses, so that 'perf
   annotate --data-type' resolves types on arm64 the way it does on x86.
 
 - Port the Python scripts to the perf module and standalone execution, and
   improve the module: lazy sample callchains and event copies, GIL
   handling, better session/thread lookup, new treport, flamegraph and
   sqlite/postgres exporters.
 
 - Reenable and fix the attribute expectation test suite: per-PMU bit
   masks, other core PMUs' events, dummy tracking events, group checks
   and spelled out skip reasons.
 
 - perf trace: filter the target's tasks in BPF, open the BPF output event
   on every CPU, add an option to disable syscall augmentation and raise
   TRACE_AUG_MAX_BUF.
 
 - perf jitdump: harden record parsing, validating unwinding sizes and
   symbol names, byte-swapping debug entries via safe accessors and fixing
   frees on error paths.
 
 - perf annotate-data fixes: bound the member nesting recursion, resolve
   type DIEs in the debug file they came from, adjust the offset for
   flex-arrays and show the sample count in the data-type browser.
 
 - perf symbol and debug info: try linked debug files for DSOs, avoid
   repeated failing searches, set binary/symtab types for split kallsyms,
   JIT maps and the build-id cache, fix libbfd symbol loading.
 
 - perf config: serialize config file access with a mutex, add the
   DEFINE_MUTEX() and DO_ONCE() primitives and a robust process shared
   mutex, add the core.hybrid-merge option.
 
 - perf report: add --progress and --no-progress options.
 
 - perf mem: add a false sharing workload to 'perf test', request
   PERF_SAMPLE_CPU by default, use the IBS swfilt filter when available
   and decode L0 in the memory level.
 
 - perf test: take turns using the perf mlock budget in the mmaping tests,
   add the 'needs_mlock' suite flag, scope the probe based tests to their
   PID and make more tests non-exclusive.
 
 - perf vendor events intel: update events and metrics to TMA 5.2, refresh
   the event tables and fix umask encodings.
 
 - perf build: run shellcheck, mypy and pylint in parallel, make pylint
   opt-out with NO_PYLINT=1, fix clean and install dependencies.
 
 - Add a script and a 'make sync-headers' target to sync the tools/ copies
   of kernel headers with the kernel sources, plus the resulting syncs of
   the cpufeatures, KVM, fs, mount, fcntl, socket, rtnetlink, if_addr and
   sound headers.
 
 - Fix cs-etm HW_ID mapping synthesis for raw trace, queue teardown leaks
   and duplicate v0 global mappings.
 
 - Add a 'perf bench atomic' benchmark for atomic operations.
 
 - Filter events before creating lock_stat in 'perf lock contention'.
 
 - Add a 'perf test' case for events re-armed with PERF_EVENT_IOC_REFRESH.
 
 - Fix memory leaks on 'perf c2c' output fields and add function view
   stdio coverage to its test.
 
 - Fix a NULL dereference resolving callchains in 'perf machine'.
 
 - Optimize the libdw fallback when DWARF is missing and try the symbol
   file first when checking for debuginfo.
 
 - Don't call eprintf() in pr_debugN() when not verbose.
 
 - Don't delete cumulative caller entries before the stat_acc decays in
   'perf report'.
 
 - Fix ring buffer cursor handling: keep the consumed cursor in forward
   mode and use the head selected by read_init.
 
 - Fix 'perf test mmap-basic' user rdpmc detection and only test userspace
   reading on supported platforms.
 
 - Build fixes: include sys/types.h for ssize_t, errno.h before kernel
   headers and fix jevents.py type annotations for mypy 2.x.
 
 Signed-off-by: Arnaldo Carvalho de Melo <acme@redhat.com>
 -----BEGIN PGP SIGNATURE-----
 
 iHUEABYKAB0WIQR2GiIUctdOfX2qHhGyPKLppCJ+JwUCauUL4QAKCRCyPKLppCJ+
 JzsyAQCNjqGOBYEUaDbQAbK1/1h9D9QER9s+4aU3Np2zT9XSPAD/RkY12uxT3YAO
 NcQlaj0On+I46SkgyGzGrV9mOvDZJwo=
 =b9um
 -----END PGP SIGNATURE-----

Merge tag 'perf-tools-for-v7.4-1-2026-10-30' of git://git.kernel.org/pub/scm/linux/kernel/git/perf/perf-tools-next

Pull perf tool updates from Arnaldo Carvalho de Melo:

 - Support instruction tracking on arm64 for data type profiling,
   resolving stack, global, per-CPU and 'current' variable accesses, so
   that 'perf annotate --data-type' resolves types on arm64 the way it
   does on x86.

 - Port the Python scripts to the perf module and standalone execution,
   and improve the module: lazy sample callchains and event copies, GIL
   handling, better session/thread lookup, new treport, flamegraph and
   sqlite/postgres exporters.

 - Reenable and fix the attribute expectation test suite: per-PMU bit
   masks, other core PMUs' events, dummy tracking events, group checks
   and spelled out skip reasons.

 - perf trace: filter the target's tasks in BPF, open the BPF output
   event on every CPU, add an option to disable syscall augmentation and
   raise TRACE_AUG_MAX_BUF.

 - perf jitdump: harden record parsing, validating unwinding sizes and
   symbol names, byte-swapping debug entries via safe accessors and
   fixing frees on error paths.

 - perf annotate-data fixes: bound the member nesting recursion, resolve
   type DIEs in the debug file they came from, adjust the offset for
   flex-arrays and show the sample count in the data-type browser.

 - perf symbol and debug info: try linked debug files for DSOs, avoid
   repeated failing searches, set binary/symtab types for split
   kallsyms, JIT maps and the build-id cache, fix libbfd symbol loading.

 - perf config: serialize config file access with a mutex, add the
   DEFINE_MUTEX() and DO_ONCE() primitives and a robust process shared
   mutex, add the core.hybrid-merge option.

 - perf report: add --progress and --no-progress options.

 - perf mem: add a false sharing workload to 'perf test', request
   PERF_SAMPLE_CPU by default, use the IBS swfilt filter when available
   and decode L0 in the memory level.

 - perf test: take turns using the perf mlock budget in the mmaping
   tests, add the 'needs_mlock' suite flag, scope the probe based tests
   to their PID and make more tests non-exclusive.

 - perf vendor events intel: update events and metrics to TMA 5.2,
   refresh the event tables and fix umask encodings.

 - perf build: run shellcheck, mypy and pylint in parallel, make pylint
   opt-out with NO_PYLINT=1, fix clean and install dependencies.

 - Add a script and a 'make sync-headers' target to sync the tools/
   copies of kernel headers with the kernel sources, plus the resulting
   syncs of the cpufeatures, KVM, fs, mount, fcntl, socket, rtnetlink,
   if_addr and sound headers.

 - Fix cs-etm HW_ID mapping synthesis for raw trace, queue teardown
   leaks and duplicate v0 global mappings.

 - Add a 'perf bench atomic' benchmark for atomic operations.

 - Filter events before creating lock_stat in 'perf lock contention'.

 - Add a 'perf test' case for events re-armed with
   PERF_EVENT_IOC_REFRESH.

 - Fix memory leaks on 'perf c2c' output fields and add function view
   stdio coverage to its test.

 - Fix a NULL dereference resolving callchains in 'perf machine'.

 - Optimize the libdw fallback when DWARF is missing and try the symbol
   file first when checking for debuginfo.

 - Don't call eprintf() in pr_debugN() when not verbose.

 - Don't delete cumulative caller entries before the stat_acc decays in
   'perf report'.

 - Fix ring buffer cursor handling: keep the consumed cursor in forward
   mode and use the head selected by read_init.

 - Fix 'perf test mmap-basic' user rdpmc detection and only test
   userspace reading on supported platforms.

 - Build fixes: include sys/types.h for ssize_t, errno.h before kernel
   headers and fix jevents.py type annotations for mypy 2.x.

* tag 'perf-tools-for-v7.4-1-2026-10-30' of git://git.kernel.org/pub/scm/linux/kernel/git/perf/perf-tools-next: (425 commits)
  perf machine: Fix NULL deref in thread__resolve_callchain_sample()
  perf pmu-events: Fix jevents.py type annotations for mypy 2.x
  perf parse-events: Include errno.h before kernel headers
  perf print_insn: Include sys/types.h for ssize_t
  perf tests mmap-basic: Fix user rdpmc detection logic
  perf tests mmap-basic: Only test userspace reading on supported platforms
  perf mmap: Preserve the consumed cursor in forward mode
  perf mmap: Use the head selected by read_init
  perf hist: Do not delete cumulative caller entries before stat_acc decays
  perf debug: Avoid calling eprintf() in pr_debugN() when verbose < n
  perf libdw: Optimize fallback logic for missing DWARF
  tools headers: Sync KVM headers with the kernel sources
  tools headers: Sync UAPI sound/asound.h with the kernel sources
  tools headers: Sync UAPI linux/mount.h with the kernel sources
  tools headers: Sync UAPI linux/fs.h with the kernel sources
  tools headers: Sync UAPI linux/fcntl.h with the kernel sources
  tools headers: Sync linux/socket.h with the kernel sources
  tools arch x86: Sync the cpufeatures.h copy with the kernel sources
  tools headers UAPI: Sync linux/rtnetlink.h with the kernel sources
  tools headers UAPI: Sync linux/if_addr.h with the kernel sources
  ...
2026-10-30 21:54:38 -07:00
Linus Torvalds
60aba79a50 * Bug Fixes
- Leaks
     - fix a leak on a rejected string table entry
     - fix refcount leak in aa_get_newest_profile()
     - fix profile leak when a policy load fails
     - remove fs entries created by a failed policy load
     - on failed load ensure profile files are removed before parent
     - Fix namespace reference leak in __aa_find_or_create_ns()
 
   - Use after free/double free
     - fix a use-after-free in aa_lookupn_ns()
     - avoid potential double free when remapping DFA tables
 
   - Bounds checking by-passes
     - apparmor: fix table_size() integer overflow on 32 bit
     - apparmor: check accept index + 1 is in bounds
 
   - Mediation fixes
     - Fix AF_UNSPEC mediation
       - check address length before reading AF_UNSPEC bind address
       - mediate AF_UNSPEC socket disconnects
     - Fix sctp connect/bind by-passess
       - advertise that sctp is being mediated
       - fix check SCTP bind, and connect permission checks
       - check connect permission for SCTP
 
     - incorrect state machine traversal
       -  convert duplicated dfa transitions to match_char()
 
     - locking issues
       - don't revalidate inherited files under files->file_lock
       - fix uninitialized variable warning in aa_inherit_files
 
     - Bad dereferences
       - fix NULL ctx->peer derefs in unix socket ctx updates
 
   - unnecessary warnings
     - remove unconfined_profile() check in inet socket mediation
 
   - Kernel Doc
     - Fix the return value in split_token_from_name() kernel-doc
 
   - Misc
     - fix query_data() output overlapping the lookup key
     - report a label allocation failure as -ENOMEM
 -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEE7cSDD705q2rFEEf7BS82cBjVw9gFAmrkwqUACgkQBS82cBjV
 w9gTaA//a0x0mMoQxt1/sP6XDC4ud7ywcPqp9veZpV6r0Cek1pYrtSGfoi/uhAau
 3gHu/2wR/otchekkK01pYbvhiJysSKCIui/QRBM+gEgBvGzpwDC1IyqhW1vdjGIQ
 T4eNgmEWVvK1wMDfZXBLDGHuEiE/XWPxtMFWbd1ZUWD9+jMG2ZOtkOlUgSg/ViJY
 V/5+UjKD8VlrmTU6HVTnLl3R39BXCdSfHkHVR8/O7+CDkOyAx9XLj7r7sYhenUIQ
 kl09aNE3pTrMu0JEPP7tWl/pEJMssYctR/Q5Q+9hrNRvEH8K/tUzEMaRlxv5rxu1
 Z4tfwRMNuNhGJxRABp8un8vcuPtsnaKEnp1zbzkhNZj/fGsF2LySEapXPCuiq1Sh
 dlQc3lOPIHYE2Q71IS/vZ9+1pZ4N+IreuKtPIVnxPQq5RYWHRp7drbXfsHpCaUqt
 PXaLXENW8eF7v7y+UJEIztyOI4wyFOM3BpblFrJxSHArcHzI/StPnMZv10yx5PqX
 kgwymScmi2hyhehrHqSzWbW2GmJLwvF1un7Lk/GRNrvWytAs/1hJIr6N7/ov/NEu
 NVDCi3lN+M2e2c0/dWuwg/Kn1nEo7vVMRNlbdXJHXfxDDZgaZQCGagibVcgmPk9i
 KvmVQtlnUvf4LiABC/efDvGkxMeR3+JHjVrxS7s1DIKy1fFSIWU=
 =MAYC
 -----END PGP SIGNATURE-----

Merge tag 'apparmor-pr-2026-10-29' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor

Pull AppArmor fixes from John Johansen:
 "Leaks:
   - fix a leak on a rejected string table entry
   - fix refcount leak in aa_get_newest_profile()
   - fix profile leak when a policy load fails
   - remove fs entries created by a failed policy load
   - on failed load ensure profile files are removed before parent
   - Fix namespace reference leak in __aa_find_or_create_ns()

  Use after free/double free:
   - fix a use-after-free in aa_lookupn_ns()
   - avoid potential double free when remapping DFA tables

  Bounds checking by-passes:
   - fix table_size() integer overflow on 32 bit
   - check accept index + 1 is in bounds

  Mediation fixes:
   - Fix AF_UNSPEC mediation
      - check address length before reading AF_UNSPEC bind address
      - mediate AF_UNSPEC socket disconnects
   - Fix sctp connect/bind by-passess
      - advertise that sctp is being mediated
      - fix check SCTP bind, and connect permission checks
      - check connect permission for SCTP
   - incorrect state machine traversal
      -  convert duplicated dfa transitions to match_char()
   - locking issues
      - don't revalidate inherited files under files->file_lock
      - fix uninitialized variable warning in aa_inherit_files
   - Bad dereferences
      - fix NULL ctx->peer derefs in unix socket ctx updates

  Unnecessary warnings:
   - remove unconfined_profile() check in inet socket mediation

  Kernel Doc:
   - Fix the return value in split_token_from_name() kernel-doc

  Misc:
   - fix query_data() output overlapping the lookup key
   - report a label allocation failure as -ENOMEM"

* tag 'apparmor-pr-2026-10-29' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor: (23 commits)
  apparmor: fix uninitialized variable warning in aa_inherit_files
  apparmor: fix profile leak when a policy load fails
  apparmor: on failed load ensure profile files are removed before parent
  apparmor: remove fs entries created by a failed policy load
  apparmor: fix query_data() output overlapping the lookup key
  apparmor: advertise that sctp is being mediated
  apparmor: fix check SCTP bind, and connect permission checks
  apparmor: check connect permission for SCTP
  apparmor: fix a use-after-free in aa_lookupn_ns()
  apparmor: Fix namespace reference leak in __aa_find_or_create_ns()
  apparmor: check accept index + 1 is in bounds
  apparmor: Fix the return value in split_token_from_name() kernel-doc
  apparmor: convert duplicated dfa transitions to match_char()
  apparmor: fix table_size() integer overflow on 32 bit
  apparmor: avoid potential double free when remapping DFA tables
  apparmor: report a label allocation failure as -ENOMEM
  apparmor: fix a leak on a rejected string table entry
  apparmor: remove unconfined_profile() check in inet socket mediation
  apparmor: fix refcount leak in aa_get_newest_profile()
  apparmor: check address length before reading AF_UNSPEC bind address
  ...
2026-10-30 21:50:13 -07:00
Linus Torvalds
2a500a04d6 Driver core fixes for 7.4-rc1
- Revert TAINT_FORCED_BIND, introduced to flag manual sysfs bind/unbind
   operations associated with misleading fuzzing reports. It also taints
   established workflows, including VFIO device passthrough; a more
   targeted approach will be revisited after 7.4.
 
 - Rate limit synthetic uevent failure messages to prevent log flooding
   from repeated invalid writes to sysfs uevent files
 -----BEGIN PGP SIGNATURE-----
 
 iHUEABYKAB0WIQS2q/xV6QjXAdC7k+1FlHeO1qrKLgUCauOoegAKCRBFlHeO1qrK
 Li9DAP40jVb0AyHVlniDMGwdCajihY4NweTKKMAdiJJ5f+FX/AEAtm5ZK7rflqQn
 z5b4dHsFFGPEWfaKZ+w1Qx7L39njJQo=
 =UZoc
 -----END PGP SIGNATURE-----

Merge tag 'driver-core-7.4-rc1-3' of git://git.kernel.org/pub/scm/linux/kernel/git/driver-core/driver-core

Pull more driver core fixes from Danilo Krummrich:

 - Revert TAINT_FORCED_BIND, introduced to flag manual sysfs bind/unbind
   operations associated with misleading fuzzing reports. It also taints
   established workflows, including VFIO device passthrough; a more
   targeted approach will be revisited after 7.4.

 - Rate limit synthetic uevent failure messages to prevent log flooding
   from repeated invalid writes to sysfs uevent files

* tag 'driver-core-7.4-rc1-3' of git://git.kernel.org/pub/scm/linux/kernel/git/driver-core/driver-core:
  Revert "driver core: add TAINT_FORCED_BIND for when userspace manually messes with devices and drivers"
  driver core: Limit the messages on a refused uevent
2026-10-30 14:38:34 -10:00
Linus Torvalds
ac1bf565f1 Merge branch 'fixes-from-sasha'
Misc fixes for this merge window from Sasha Levin that were posted for
issues found in linux-next but not picked up by maintainers.

In an almost certainly futile attempt to clean up the disaster area that
is my inbox, I'm merging them directly rather than leaving them pending
and wait for them to come in through the proper channels.

* fixes-from-sasha:
  selftests/fuse: add the missing symlink caching test
  fuse: fix link error with CONFIG_FUSE_PASSTHROUGH=n
  xprtrdma: fix up the nfs/nfs-anna merge of the Write chunk head trim
2026-10-30 14:23:04 -10:00
Sasha Levin
aba9df1806 selftests/fuse: add the missing symlink caching test
Commit 3e14f079d7 ("selftests/fuse: add fuse symlink caching test")
registered fuse_symlink_cache_test in the fuse selftest Makefile and
.gitignore, but the test source was not part of the applied commit, so
building the fuse selftests fails:

  make[1]: *** No rule to make target 'fuse_symlink_cache_test.c', needed by '.../fuse_symlink_cache_test'.

Add fuse_symlink_cache_test.c as posted in Luis Henriques's v5
submission. The test serves a file and a symlink to it from a libfuse
low-level filesystem, resolves the symlink 100 times, and counts the
readlink requests that reach the server: one when FUSE_CAP_CACHE_SYMLINKS
is set during FUSE_INIT, and all 100 when it is not.

Fixes: 3e14f079d7 ("selftests/fuse: add fuse symlink caching test")
Reported-by: kernel test robot <lkp@intel.com>
Closes: https://lore.kernel.org/r/202610170822.oEJ1Autq-lkp@intel.com/
Link: https://lore.kernel.org/r/20261001164916.15311-8-luis@igalia.com
Originally-by: Luis Henriques <luis@igalia.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Reviewed-by: Luis Henriques <luis@igalia.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2026-10-30 14:22:37 -10:00
Sasha Levin
1ea806165e fuse: fix link error with CONFIG_FUSE_PASSTHROUGH=n
Commit 2f19d54c05 ("fuse: support 64 bit, server allocated backing ID")
moved the CONFIG_FUSE_PASSTHROUGH check out of the backing ioctl handlers
and into fuse_get_conn_for_passthrough(). The calls from the handlers
into backing.c, which is only built with CONFIG_FUSE_PASSTHROUGH, are now
only removed if the compiler inlines that helper. It does not have to,
and with gcc 11 and CONFIG_CC_OPTIMIZE_FOR_SIZE it doesn't:

  dev.c:(.text+0x355c): undefined reference to `fuse_backing_open'
  nios2-linux-ld: dev.c:(.text+0x3594): undefined reference to `fuse_backing_open_64'
  nios2-linux-ld: dev.c:(.text+0x35d0): undefined reference to `fuse_backing_close'

Check CONFIG_FUSE_PASSTHROUGH in each handler again, as
fuse_notify_backing_remove() does. The check still comes after the
fuse_get_dev() and -ENOTCONN checks, so the errors userspace sees do not
change.

Fixes: 2f19d54c05 ("fuse: support 64 bit, server allocated backing ID")
Reported-by: kernel test robot <lkp@intel.com>
Closes: https://lore.kernel.org/oe-kbuild-all/202610171310.uqRzJkIx-lkp@intel.com/
Closes: https://lore.kernel.org/oe-kbuild-all/202610260719.sj08mXBr-lkp@intel.com/
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2026-10-30 14:22:37 -10:00
Sasha Levin
960994f5d1 xprtrdma: fix up the nfs/nfs-anna merge of the Write chunk head trim
Two fixes for the same Write chunk payload corruption meet in
linux-next. In the nfs tree, commit a0db57fee3 ("xprtrdma: Fix Write
chunk payload corruption on a short reply header") trims
head[0].iov_len in rpcrdma_decode_msg(). In the nfs-anna tree,
commit 9ee534a759 ("xprtrdma: trim head iovec when the payload
arrives via a Write chunk") trims it in rpcrdma_inline_fixup() and
reduces buflen by the same amount.

The merge resolution keeps the caller-side trim. By the time
rpcrdma_inline_fixup() runs, head[0].iov_len already equals copy_len,
so the block added by the nfs-anna commit never runs and its buflen
reduction in rq_rcv_buf and rq_private_buf is lost. The helper is also
still passed xdr_pad_size(writelist), while its kernel-doc now
describes @writelist as the number of bytes conveyed by the Write
chunk.

Drop the caller-side trim and pass the full Write chunk length, so
that rpcrdma_inline_fixup() is the only place that trims head[0] and
reduces buflen. Compute the pad with xdr_pad_size() in the helper, so
the padding from the nfs commit stays correct for lengths that are not
a multiple of four. Its rpclen calculation and empty reply check stay
in rpcrdma_decode_msg().

Fixes: 53ab189bdc14 ("Merge branch 'linux-next' of git://git.linux-nfs.org/projects/anna/linux-nfs.git")
Link: https://lore.kernel.org/all/as4aacUf2Q78FMvY@sirena.org.uk/
Signed-off-by: Sasha Levin <sashal@kernel.org>
Tested-by: Tim Menninger <tmenninger@everpuredata.com>
Reviewed-by: Tim Menninger <tmenninger@everpuredata.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2026-10-30 14:22:36 -10:00
Linus Torvalds
e823910506 First round of Kbuild fixes for 7.4
- Move probing of '-mfentry' back into Makefile instead of Kconfig
   because it does not interact well with toolchains that support
   multiple bit widths
 
 - Add a big comment in scripts/Kconfig.toolchain of two pitfalls when
   moving cc-option checks from Kbuild to Kconfig
 
 Signed-off-by: Nathan Chancellor <nathan@kernel.org>
 -----BEGIN PGP SIGNATURE-----
 
 iHUEABYKAB0WIQR74yXHMTGczQHYypIdayaRccAalgUCauTsewAKCRAdayaRccAa
 lrzpAQCnAE03CslR2OH73sJezTz6DL+uSCxlwsxs7pwohD1NiwD/bEhV23ItB8zE
 c5VyQdrGgVt8zbswTm5WuO8uuBS75gE=
 =WRiy
 -----END PGP SIGNATURE-----

Merge tag 'kbuild-fixes-7.4-1' of git://git.kernel.org/pub/scm/linux/kernel/git/kbuild/linux

Pull Kbuild fixes from Nathan Chancellor:

 - Move probing of '-mfentry' back into Makefile instead of Kconfig
   because it does not interact well with toolchains that support
   multiple bit widths

 - Add a big comment in scripts/Kconfig.toolchain of two pitfalls when
   moving cc-option checks from Kbuild to Kconfig

* tag 'kbuild-fixes-7.4-1' of git://git.kernel.org/pub/scm/linux/kernel/git/kbuild/linux:
  scripts/Kconfig.toolchain: Highlight cc-option differences between Kconfig and Kbuild
  kbuild: Move testing of '-mfentry' back to Makefile from Kconfig
2026-10-30 14:11:27 -10:00
Linus Torvalds
453ebbefe2 ktest updates for v7.4:
- Sort configs before writing config file
 
   Currently the .config file is created from the perl hash array from
   reading the applied min-configs. The order is determined by how perl
   hashes the values. This causes the .config file to be created in different
   orders for each run, and the order may determine the final value of the
   .config file after it goes through a make oldconfig.
 
   Sort the values when creating the .config so that the result is the same
   for every run.
 
 - Add total test time to run output
 
   Have ktest display the total test time of running all the tests. This is
   useful to find issues in the build, install, boot or test run where things
   are hanging for longer than expected.
 
 - Update reading of the git output during bisect
 
   The ktest bisect is an automated way to run git bisect. Since there
   currently no easy way to know if the bisect found the bad commit (I'm
   talking with the git maintainers to fix this[1]), it parses the output for
   the line "is first bad commit". But a recent update to git has the output
   state "is the first 'bad' commit" which breaks ktest bisect.
 
   Have ktest handle both output strings.
 
 [1] https://lore.kernel.org/all/20261020141011.0015d172@gandalf.local.home/
 -----BEGIN PGP SIGNATURE-----
 
 iIoEABYKADIWIQRRSw7ePDh/lE+zeZMp5XQQmuv6qgUCauKhoRQccm9zdGVkdEBn
 b29kbWlzLm9yZwAKCRAp5XQQmuv6qhDpAQDUFnlVRxa53IzPRyW4ZeBk01bzkbP8
 r4j4BO8Ror0lLgD/e+L2+Dg4NZcgqNf/zvsX0AjILkYIRGYoWdAdpwE2cwI=
 =tvoG
 -----END PGP SIGNATURE-----

Merge tag 'ktest-v7.4' of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-ktest

Pull ktest updates from Steven Rostedt:

 - Sort configs before writing config file

   Currently the .config file is created from the perl hash array from
   reading the applied min-configs. The order is determined by how perl
   hashes the values. This causes the .config file to be created in
   different orders for each run, and the order may determine the final
   value of the .config file after it goes through a make oldconfig.

   Sort the values when creating the .config so that the result is the
   same for every run.

 - Add total test time to run output

   Have ktest display the total test time of running all the tests. This
   is useful to find issues in the build, install, boot or test run
   where things are hanging for longer than expected.

 - Update reading of the git output during bisect

   The ktest bisect is an automated way to run git bisect. Since there
   currently no easy way to know if the bisect found the bad commit (I'm
   talking with the git maintainers to fix this[1]), it parses the
   output for the line "is first bad commit". But a recent update to git
   has the output state "is the first 'bad' commit" which breaks ktest
   bisect.

   Have ktest handle both output strings.

   [1] https://lore.kernel.org/all/20261020141011.0015d172@gandalf.local.home/

* tag 'ktest-v7.4' of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-ktest:
  ktest: Accept quoted bad term in git bisect output
  ktest.pl: Add total test run time to output
  ktest: Sort config keys before writing config files
2026-10-30 14:09:26 -10:00
Linus Torvalds
b92f6e90cf drm fixes for 7.4-rc1
amdgpu:
 - UALink fixes
 - Runtime PM fixes
 - GPUVM fixes
 - Mac fixes
 - HDMI fixes
 - DP MST fix
 - Userptr fix
 - SMU fixes
 - DSC fix
 - VCE/UVD sched teardown fix
 - Display runpm reference fix
 - Display TD-LUT fix
 - SMU 13.x fixes
 - SMU 14.x fixes
 - Gang submit fix
 - Passive DVI sink fix
 - USB4 tunnel fix
 - Freesync fix
 
 amdkfd:
 - SVM fixes
 - Fix doorbell allocation race
 - GC 12.1 fix
 - GPU reset fix
 - Buffer accounting fixes
 - Bounds checking fixes
 - Hotplug fixes
 - SVM fixes
 - CRIU fixes
 - GFX12 fix
 
 panthor:
 - Fix bugs in MMU handling
 -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEEEKbZHaGwW9KfbeusDHTzWXnEhr4FAmrlDS0ACgkQDHTzWXnE
 hr4DCA/+JjpK3jg/31mkZ8JcKoNUbHxaTMnfxysw7s6kFpAMGXDez3BEdO2lSXvX
 bXo3uf8ibEtMnAYXgp5R056BDg9/SzSXq/xR7THPGxLA75+myC+8rHClizhPFf7F
 G8TZRll2ybDVw4GeMf0jMhdFBLOE/xGh+duMgffvY33DX6C7RYnfrFFxtNpAQdW7
 8A7r97XvE0m7V+w3BeirydthmTwh3+DM/7fZ/qUXuf1kF81/7Vclt7k+TMPWLYBy
 sW5wYPzsomXNAfudZ5wX1euJAS1rZXnaLICCqqogYzOew9tow/cqdcopYvGOL4Hx
 zRrqhlAUzKlUN/2Q9JEO14a/2O9+Xtw1/+objwcsZSSzH18L6gbkvt4bcwZ4H03+
 PBuzQ7xDQOZkIZ/KoMkm+OnOUx0cSoQOJftYIUxho0F9QH4GF/Ydk3DZ2Gk2o79D
 Bw+SMfh30Xt5PGGhpKJHkra82RbRto+bRYrnm9t4xv0PivkztIdwXcl1VALjTRl9
 mSZ4kGc2PwS7lwA+qfrdKfPicnuwGbLCca9RwBZq7PQ8onSDhcnrG0R5hFnvZcvP
 0xqAo32obMM0ZIk9krTzs4/dKEDSfmQq7T3Gv0S+jLl5vOHnTZnApP/Ja1WeM335
 2wifZCScnw11TDuWRlEWobQsKk4BYfXRNYzPOdt4t4DbFC71Yos=
 =l+2D
 -----END PGP SIGNATURE-----

Merge tag 'drm-next-2026-10-31' of https://gitlab.freedesktop.org/drm/kernel

Pull drm fixes from Dave Airlie:
 "The final set of merge window fixes, from AMD mostly. with one set of
  panthor mmu fixes.

  amdgpu:
   - UALink fixes
   - Runtime PM fixes
   - GPUVM fixes
   - Mac fixes
   - HDMI fixes
   - DP MST fix
   - Userptr fix
   - SMU fixes
   - DSC fix
   - VCE/UVD sched teardown fix
   - Display runpm reference fix
   - Display TD-LUT fix
   - SMU 13.x fixes
   - SMU 14.x fixes
   - Gang submit fix
   - Passive DVI sink fix
   - USB4 tunnel fix
   - Freesync fix

  amdkfd:
   - SVM fixes
   - Fix doorbell allocation race
   - GC 12.1 fix
   - GPU reset fix
   - Buffer accounting fixes
   - Bounds checking fixes
   - Hotplug fixes
   - SVM fixes
   - CRIU fixes
   - GFX12 fix

  panthor:
   - Fix bugs in MMU handling"

* tag 'drm-next-2026-10-31' of https://gitlab.freedesktop.org/drm/kernel: (52 commits)
  drm/amd/display: refresh cached HDMI FreeSync state
  drm/amd/display: Cap DSC bpp for USB4 DP tunnels
  drm/amd/display: Poll passive DVI sinks for EDID readiness
  drm/amdgpu: re-enable GFXOFF for compute on GFX12
  drm/amdkfd: evict the queues only once for CRIU PROCESS_INFO
  drm/amdgpu: drop the gang leader reference when freeing gang jobs
  drm/amdkfd: send SMI process and VM fault events only to allowed clients
  drm/amdkfd: validate SRAT subtables before parsing
  drm/amd/pm: preserve committed OD features for SMU 14.0.2
  drm/amd/pm: add zero fan stop temperature support on smu 14.0.2
  drm/amd/pm: preserve committed OD features for SMU 13.0.0/13.0.7
  drm/amd/display: Initialize missing TD-LUT programming inputs
  drm/amdkfd: split vram_pages of SVM ranges prefetched without a GPU mapping
  drm/amdgpu: reject CS chunks too large for kvmalloc()
  drm/amd/display: take a runtime PM reference only when a CRTC turns on
  drm/amdgpu: guard VCE/UVD sched entity teardown on failed probe
  drm/amdkfd: stop restore retries on device unplug
  drm/amdkfd: tear down KFD processes before early fini_sw on disconnect
  drm/amdkfd: Validate the control stack of a restored queue
  drm/amdkfd: correct vram_available calculation
  ...
2026-10-30 13:48:47 -10:00
Linus Torvalds
51b4bf5fe7 - Validate the offsets and lengths a server puts in its responses before
using them, so that a malicious or broken server can no longer make the
    client read past the received data: POSIX lock data (which leaked
    kernel bytes through F_GETLK), NT transaction responses and SMB1 EA
    lists (both wrapping their pointer checks on 32-bit), short
    SESSION_SETUP responses (which sent stale buffer content back to the
    server in the NTLMv2 AUTHENTICATE message), SMB2 READ data areas and
    empty truncated fiemap responses
 
  - Fix a heap overflow in SMB2_tcon() with UNC paths longer than
    MAX_SHARENAME_LENGTH
 
  - Fix a slab-out-of-bounds write when chmod() rewrites a security
    descriptor that needs more room than was reserved
 
  - Fix a use-after-free of the server info between the cifsd thread and
    the release of the last session reference (reported by syzbot)
 
  - Fix a use-after-free in the demultiplex thread when a receive error
    reconnects and frees the read request still being processed
 
  - Fix a double teardown of a tcon that the cached directory laundromat
    took a reference on while it was being freed
 
  - Fix a NULL pointer dereference when /proc/fs/cifs/DebugData is read
    while the module is still initializing
 -----BEGIN PGP SIGNATURE-----
 
 iHUEABYKAB0WIQTcqRusfSdYROJQwGkpVtNKoQNdYwUCauUmHQAKCRApVtNKoQNd
 YwbQAPsHdFjf5JOXEs1QNEf9GWYT47vHAnXt4ADbFwSokfLB3QEAqI1W7P6KJ3HO
 6ckrTF9VyZ75ZaStkESSlqsuYRwpiQs=
 =GLt9
 -----END PGP SIGNATURE-----

Merge tag 'cifs-fixes-7.4-rc1' of https://git.manguebit.org/linux

Pull smb client fixes from Paulo Alcantara:

 - Validate the offsets and lengths a server puts in its responses
   before using them, so that a malicious or broken server can no longer
   make the client read past the received data:
     - POSIX lock data (which leaked kernel bytes through F_GETLK)
     - NT transaction responses and SMB1 EA lists (both wrapping their
       pointer checks on 32-bit)
     - short SESSION_SETUP responses (which sent stale buffer content
       back to the server in the NTLMv2 AUTHENTICATE message)
     - SMB2 READ data areas
     - empty truncated fiemap responses

 - Fix a heap overflow in SMB2_tcon() with UNC paths longer than
   MAX_SHARENAME_LENGTH

 - Fix a slab-out-of-bounds write when chmod() rewrites a security
   descriptor that needs more room than was reserved

 - Fix a use-after-free of the server info between the cifsd thread and
   the release of the last session reference (reported by syzbot)

 - Fix a use-after-free in the demultiplex thread when a receive error
   reconnects and frees the read request still being processed

 - Fix a double teardown of a tcon that the cached directory laundromat
   took a reference on while it was being freed

 - Fix a NULL pointer dereference when /proc/fs/cifs/DebugData is read
   while the module is still initializing

* tag 'cifs-fixes-7.4-rc1' of https://git.manguebit.org/linux:
  smb: client: validate SMB1 EA list bounds before parsing
  smb: client: stop processing a read response after a receive error
  smb: client: don't resurrect an exiting tcon from cached dir workers
  smb: client: fix early procfs exposure race
  smb: client: fix slab-out-of-bounds write in id_mode_to_cifs_acl()
  smb: client: hold server info until cifsd exits
  smb: client: fix fiemap wild read on empty truncated response
  smb: client: validate the data area in SMB2_read()
  smb: client: reject short SESSION_SETUP responses
  smb: client: fix buffer overflow in SMB2_tcon()
  smb: client: validate NT transaction response layout and offsets
  smb: client: bound POSIX lock data area by response length
2026-10-30 13:40:03 -10:00
Linus Torvalds
69eac84817 fsverity fixes for v7.4-rc1
Fixes for several bugs found by LLMs:
 
 - Fix bypass of IPE's fsverity support, and a use-after-free in
   certain cases, when FS_IOC_ENABLE_VERITY fails when almost done.
 
 - Fix FS_IOC_MEASURE_VERITY and FS_IOC_READ_VERITY_METADATA to no
   longer bypass Landlock and AppArmor's read permission checks.
 
 - Be robust against the filesystem returning different values for a
   file's verity descriptor length in two successive queries.
 -----BEGIN PGP SIGNATURE-----
 
 iIoEABYIADIWIQSacvsUNc7UX4ntmEPzXCl4vpKOKwUCauT6bBQcZWJpZ2dlcnNA
 a2VybmVsLm9yZwAKCRDzXCl4vpKOKx+mAQDtKnEhfYUNakR8GkWqM7CKuJuuMFlT
 RcEWTNLqHAoxSgD+KxVHvsgrLwBs4ketJQnj1E/1QRQBPbfbLRqCKzCPhwQ=
 =eqSl
 -----END PGP SIGNATURE-----

Merge tag 'fsverity-for-linus' of git://git.kernel.org/pub/scm/fs/fsverity/linux

Pull fsverity fixes from Eric Biggers:
 "Fixes for several bugs found by LLMs:

   - Fix bypass of IPE's fsverity support, and a use-after-free in
     certain cases, when FS_IOC_ENABLE_VERITY fails when almost done

   - Fix FS_IOC_MEASURE_VERITY and FS_IOC_READ_VERITY_METADATA to no
     longer bypass Landlock and AppArmor's read permission checks

   - Be robust against the filesystem returning different values for a
     file's verity descriptor length in two successive queries"

* tag 'fsverity-for-linus' of git://git.kernel.org/pub/scm/fs/fsverity/linux:
  fsverity: Set S_VERITY only after rollback is no longer possible
  fsverity: Tell LSMs about signature only after verity is enabled
  fsverity: Be more careful with return value of ->get_verity_descriptor()
  fsverity: Explicitly require FMODE_READ to retrieve hashes
2026-10-30 13:38:02 -10:00
Linus Torvalds
a9547379cb Thermal control fixes for 7.4-rc1
- Fix CPU mask truncation in power limit trace event used by the power
    allocator thermal governor (Hungyu Lin)
 
  - Fix code indentation in create_s32_tzp_attr() and rearrange it to
    use early return when applicable (Thorsten Blum)
 
  - Allow cross builds of the Intel thermal tests (Sasha Levin)
 -----BEGIN PGP SIGNATURE-----
 
 iQFGBAABCAAwFiEEcM8Aw/RY0dgsiRUR7l+9nS/U47UFAmrk+OUSHHJqd0Byand5
 c29ja2kubmV0AAoJEO5fvZ0v1OO1l6sH/1hdre7kr1AixczWHUuhG22QZpOT2uV0
 UWQ5woVkcFivobTemz+3OZR5sA2bx2iuO7AsNUqDwOTEnxuH4vAB7STwp7CM2gBE
 x2/1ZWdHje7QBw0sXEiH5RYQDkLeOMcfS8lXnXzoEVIkRz86vEd9yzRQfbvK/nNv
 PEhTScmXN+euC1ZWglVOjzx/NEEjHnLvSrAU2nuKhEp7VOx0niL2BAtMKYM0w44X
 cmPpmqs2TG1ya5rGNxwQYZa9XKFZ9QSNXfPClyncy1MJDRJKBcvYo5Xi7JZGh3yh
 pTJeuS4UPYwKEWCEdSFOsbgruWjxfLAqQlMfGNAfWOMvB8YMl8Kt/Mk=
 =M2+P
 -----END PGP SIGNATURE-----

Merge tag 'thermal-7.4-rc1-2' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm

Pull thermal control fixes from Rafael Wysocki:
 "These fix three issues related to thermal control:

   - Fix CPU mask truncation in power limit trace event used by the
     power allocator thermal governor (Hungyu Lin)

   - Fix code indentation in create_s32_tzp_attr() and rearrange it to
     use early return when applicable (Thorsten Blum)

   - Allow cross builds of the Intel thermal tests (Sasha Levin)"

* tag 'thermal-7.4-rc1-2' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:
  thermal: sysfs: Fix indentation in create_s32_tzp_attr()
  thermal: Fix CPU mask truncation in power limit trace event
  selftests/thermal: allow cross builds of the Intel tests
2026-10-30 13:28:58 -10:00
Linus Torvalds
7306ea08c0 Power management fixes for 7.4-rc1
- Fix potential out-of-bounds access in deferred reset in the cpufreq
    statistics code (Zhongqiu Han)
 
  - Cancel HWP notify work in the intel_pstate driver cleanup to prevent
    possible use-after-free from occurring (Tristan Madani)
 
  - Adjust state names and descriptions for ACPI _LPI idle states in the
    intel_idle driver to make them follow the driver's idle state naming
    convention (Rafael Wysocki)
 
  - Document the new pm_runtime_use_autosuspend() undo mechanism that
    triggers automatically on driver exit (Joshua Crofts)
 
  - Do not call suspend_ops->begin()/end() for suspend-to-idle to avoid
    driver confusion (Ovidiu Panait)
 
  - Make the energy model management code allocate the cpumask for
    non-CPU perf domains to prevent out-of-bounds reads from occurring
    in the EM netlink interface (Karl Mehltretter)
 -----BEGIN PGP SIGNATURE-----
 
 iQFGBAABCAAwFiEEcM8Aw/RY0dgsiRUR7l+9nS/U47UFAmrk+YcSHHJqd0Byand5
 c29ja2kubmV0AAoJEO5fvZ0v1OO1e7YH/j9Iyv9QT6PyjyCqayOCcorSdX2y+URY
 oG2Bog7zr6IjjS3rTNf2tbMkLxhXa5ROY6oAU/z+glszdJ1Jt9eqvwTtrUMHcLO+
 K11XCq6wP0dmRErzUg5Wb1b5B6rkapJ/7CVFodpxRiWOYRLyG2i9OAULsaMmnvck
 8epgxQ2z0HPwOz3aFTOcgt0YcbIrmesL9E+m+0P2/XW3fbge9CWB+sn04zyFiaqZ
 tT6qZO3WZPhOMy2rhabmfW4kDAJ0QI7g5rdenvGxhyh0BgrgtYyMxyJPoaWPvywZ
 MPVucda6ozbLamgJBWv6BH18joFkCzX/+hRmsgs77+NdLYBzmkqoOf4=
 =gV71
 -----END PGP SIGNATURE-----

Merge tag 'pm-7.4-rc1-2' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm

Pull power management fixes from Rafael Wysocki:
 "These address assorted issues in the power management code and update
  documentation:

   - Fix potential out-of-bounds access in deferred reset in the cpufreq
     statistics code (Zhongqiu Han)

   - Cancel HWP notify work in the intel_pstate driver cleanup to
     prevent possible use-after-free from occurring (Tristan Madani)

   - Adjust state names and descriptions for ACPI _LPI idle states in
     the intel_idle driver to make them follow the driver's idle state
     naming convention (Rafael Wysocki)

   - Document the new pm_runtime_use_autosuspend() undo mechanism that
     triggers automatically on driver exit (Joshua Crofts)

   - Do not call suspend_ops->begin()/end() for suspend-to-idle to avoid
     driver confusion (Ovidiu Panait)

   - Make the energy model management code allocate the cpumask for
     non-CPU perf domains to prevent out-of-bounds reads from occurring
     in the EM netlink interface (Karl Mehltretter)"

* tag 'pm-7.4-rc1-2' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:
  PM: runtime: clarify pm_runtime_use_autosuspend() undo mechanism
  cpufreq: stats: Fix potential out-of-bounds access in deferred reset
  PM: suspend: Do not call suspend_ops->begin()/end() for s2idle
  intel_idle: Adjust state names and descriptions for _LPI states
  PM: EM: allocate the cpumask for every perf domain
  cpufreq: intel_pstate: cancel HWP notify work in driver cleanup
2026-10-30 13:22:02 -10:00
Linus Torvalds
e3e15872e7 ACPI support fixes for 7.4-rc1
- Separate handler locking from sysfs lifetime in the ACPI platform
    profile driver to avoid possible deadlocks due to sysfs accesses
    during driver removal (Daniel Lezcano)
 
  - Introduce additional locking around the evaluation of selected ACPI
    control methods in a few places to work around issues related to
    concurrency in AML on some platforms (Ali Ahmet Memiş)
 
  - Address two issues reported by Sashiko in the ACPI table data sysfs
    interface (Jamie Nguyen)
 
  - Initialize parser_state.aml_end in acpi_install_method() properly to
    avoid out-of-bounds accesses during control method installation (Ivan
    Hu)
 -----BEGIN PGP SIGNATURE-----
 
 iQFGBAABCAAwFiEEcM8Aw/RY0dgsiRUR7l+9nS/U47UFAmrk+i0SHHJqd0Byand5
 c29ja2kubmV0AAoJEO5fvZ0v1OO1BKUIAIvsvGOzWnUBWGY2GN9umZfNbEFnYrXH
 7mbAzDTP5lDjyqnrod7eSjXAATxWISxupR7qVPSbqjqGURwzMCZsPeX4ZRd5pUTZ
 THA0KTeE57hMKj/dvzvFQKIswGUkruQ09NZ3J6KZ514CJJ7SgSOilbUDf+7xzbLZ
 yLDDBc0POqhZaKIuAYSFsoRw+D7PB2q/k5Hvv8VVhumDgl2YcCLcpQSG4lftqdxn
 R6bjVAQaKJj/nArxwdQRt/LdNSQu1WQgnLkq57Ewwd4tORBlgMsGP9GrR/9QaQqY
 E6VINShueGRnDNIMAzb4imbXVsfE+gtoyYdAffCTV3HXy8aoJ95OwGA=
 =04kC
 -----END PGP SIGNATURE-----

Merge tag 'acpi-7.4-rc1-2' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm

Pull ACPI support fixes from Rafael Wysocki:
 "These address assorted issues in ACPI support code and work around
  concurrency-related issues in AML on some platforms:

   - Separate handler locking from sysfs lifetime in the ACPI platform
     profile driver to avoid possible deadlocks due to sysfs accesses
     during driver removal (Daniel Lezcano)

   - Introduce additional locking around the evaluation of selected ACPI
     control methods in a few places to work around issues related to
     concurrency in AML on some platforms (Ali Ahmet Memiş)

   - Address two issues reported by Sashiko in the ACPI table data sysfs
     interface (Jamie Nguyen)

   - Initialize parser_state.aml_end in acpi_install_method() properly
     to avoid out-of-bounds accesses during control method installation
     (Ivan Hu)"

* tag 'acpi-7.4-rc1-2' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:
  ACPI: sysfs: Finish sysfs init when creating a table file fails
  ACPI: sysfs: Map only the requested range in acpi_data_show()
  ACPICA: Initialize parser_state.aml_end in acpi_install_method()
  ACPI: platform_profile: Separate handler locking from sysfs lifetime
  platform/x86: ideapad-laptop: Evaluate ACPI methods exclusively
  thermal: intel: int340x: Evaluate _TMP exclusively
  ACPI: battery: Evaluate battery methods exclusively
  ACPI: utils: Add exclusive AML evaluation helpers
2026-10-30 13:10:30 -10:00
Alexandre Belloni
7485659ecb rtc: rs5c372: use sysfs_emit() instead of sprintf()
Use sysfs_emit() instead of sprintf() in sysfs show callbacks
(rs5c372_sysfs_show_trim and rs5c372_sysfs_show_osc) to conform to the
recommended sysfs attribute formatting guidelines in
Documentation/filesystems/sysfs.rst.

Link: https://patch.msgid.link/20261029132339.925021-12-alexandre.belloni@bootlin.com
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2026-10-30 23:23:31 +01:00
Alexandre Belloni
42602b8343 rtc: ds1307: use sysfs_emit() instead of sprintf()
Use sysfs_emit() instead of sprintf() in the sysfs show callback
(ds3231_hwmon_show_temp) to conform to the recommended sysfs attribute
formatting guidelines in Documentation/filesystems/sysfs.rst.

Link: https://patch.msgid.link/20261029132339.925021-11-alexandre.belloni@bootlin.com
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2026-10-30 23:23:31 +01:00
Alexandre Belloni
26e2f34b86 rtc: isl1208: use sysfs_emit() instead of sprintf()
Use sysfs_emit() instead of sprintf() in sysfs show callbacks
(timestamp0_show, isl1208_sysfs_show_atrim, isl1208_sysfs_show_dtrim
and isl1208_sysfs_show_usr) to conform to the recommended sysfs
attribute formatting guidelines in
Documentation/filesystems/sysfs.rst.

Link: https://patch.msgid.link/20261029132339.925021-10-alexandre.belloni@bootlin.com
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2026-10-30 23:23:31 +01:00
Alexandre Belloni
edd541b0ff rtc: ds1685: use sysfs_emit() instead of sprintf()
Use sysfs_emit() instead of sprintf() in sysfs show callbacks
(ds1685_rtc_sysfs_battery_show, ds1685_rtc_sysfs_auxbatt_show and
ds1685_rtc_sysfs_serial_show) to conform to the recommended sysfs
attribute formatting guidelines in
Documentation/filesystems/sysfs.rst.

Acked-by: Joshua Kinard <linux@kumba.dev>
Link: https://patch.msgid.link/20261029132339.925021-9-alexandre.belloni@bootlin.com
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2026-10-30 23:23:31 +01:00
Alexandre Belloni
67b3eadfb8 rtc: ds1343: use sysfs_emit() instead of sprintf()
Use sysfs_emit() instead of sprintf() in sysfs show callbacks
(ds1343_show_glitchfilter and ds1343_show_tricklecharger) to conform
to the recommended sysfs attribute formatting guidelines in
Documentation/filesystems/sysfs.rst.

Link: https://patch.msgid.link/20261029132339.925021-8-alexandre.belloni@bootlin.com
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2026-10-30 23:23:31 +01:00
Alexandre Belloni
c0b38531dd rtc: rx8025: use sysfs_emit() instead of sprintf()
Use sysfs_emit() instead of sprintf() in the sysfs show callback
(rx8025_sysfs_show_clock_adjust) to conform to the recommended sysfs
attribute formatting guidelines in Documentation/filesystems/sysfs.rst.

Link: https://patch.msgid.link/20261029132339.925021-7-alexandre.belloni@bootlin.com
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2026-10-30 23:23:31 +01:00
Alexandre Belloni
0f3bc1c937 rtc: x1205: use sysfs_emit() instead of sprintf()
Use sysfs_emit() instead of sprintf() in sysfs show callbacks
(x1205_sysfs_show_atrim and x1205_sysfs_show_dtrim) to conform to the
recommended sysfs attribute formatting guidelines in
Documentation/filesystems/sysfs.rst.

Link: https://patch.msgid.link/20261029132339.925021-5-alexandre.belloni@bootlin.com
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2026-10-30 23:22:57 +01:00
Alexandre Belloni
187c4ed20a rtc: bq32k: use sysfs_emit() instead of sprintf()
Use sysfs_emit() instead of sprintf() in the sysfs show callback
(bq32k_sysfs_show_tricklecharge_bypass) to conform to the recommended
sysfs attribute formatting guidelines in
Documentation/filesystems/sysfs.rst.

Link: https://patch.msgid.link/20261029132339.925021-4-alexandre.belloni@bootlin.com
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2026-10-30 23:22:57 +01:00
Alexandre Belloni
946584fe01 rtc: ep93xx: use sysfs_emit() instead of sprintf()
Use sysfs_emit() instead of sprintf() in sysfs show callbacks
(comp_preload_show and comp_delete_show) to conform to the
recommended sysfs attribute formatting guidelines in
Documentation/filesystems/sysfs.rst.

Link: https://patch.msgid.link/20261029132339.925021-3-alexandre.belloni@bootlin.com
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2026-10-30 23:22:57 +01:00
Alexandre Belloni
8d2735de39 rtc: pcf2127: use sysfs_emit() instead of sprintf()
Use sysfs_emit() instead of sprintf() in the sysfs show callback
(timestamp_show) to conform to the recommended sysfs attribute
formatting guidelines in Documentation/filesystems/sysfs.rst.

Reviewed-by: Bruno Thomsen <bruno.thomsen@gmail.com>
Link: https://patch.msgid.link/20261029132339.925021-2-alexandre.belloni@bootlin.com
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2026-10-30 23:22:56 +01:00
Alexandre Belloni
bc9a04e1e1 rtc: rv3029: use sysfs_emit() instead of sprintf()
Use sysfs_emit() instead of sprintf() in sysfs show callbacks
(rv3029_hwmon_show_temp and rv3029_hwmon_show_update_interval) to
conform to the recommended sysfs attribute formatting guidelines in
Documentation/filesystems/sysfs.rst.

Link: https://patch.msgid.link/20261029132339.925021-1-alexandre.belloni@bootlin.com
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2026-10-30 23:22:56 +01:00
Imre Kaloz
3b6cdc3655 rtc: ds1685: keep setting PAB until power is removed
A kickstart or wake-up flag set while its interrupt is enabled (KF with
KSE, WF with WIE) clears PAB, and the system stays powered. Clear the
event flags together with setting PAB, and repeat the write until power
is gone.

Signed-off-by: Imre Kaloz <kaloz@kernel.org>
Acked-by: Joshua Kinard <linux@kumba.dev>
Link: https://patch.msgid.link/20261013120208.11268-4-kaloz@kernel.org
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2026-10-30 21:38:05 +01:00
Imre Kaloz
21a829af60 rtc: ds1685: do not sleep in the power-off handler
Power-off handlers run from an atomic notifier chain and must not
sleep. Use mdelay() for the delay before setting PAB.

Fixes: aaaf5fbf56 ("rtc: add driver for DS1685 family of real time clocks")
Reported-by: Sashiko <sashiko-bot@kernel.org>
Closes: https://lore.kernel.org/all/sashiko-outbox-169477@kernel.org/
Signed-off-by: Imre Kaloz <kaloz@kernel.org>
Acked-by: Joshua Kinard <linux@kumba.dev>
Link: https://patch.msgid.link/20261013120208.11268-3-kaloz@kernel.org
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2026-10-30 21:38:05 +01:00
Imre Kaloz
c2373bcd50 rtc: ds1685: arm the wake-up alarm at power-off only if an alarm is set
ds1685_rtc_poweroff() always sets WIE. The wake-up alarm then compares
the time-of-day and date alarm registers, which hold whatever was last
written to them, and a match powers the machine straight back on.

Set WIE only when AIE is set in Control B, and clear it otherwise.

Fixes: aaaf5fbf56 ("rtc: add driver for DS1685 family of real time clocks")
Signed-off-by: Imre Kaloz <kaloz@kernel.org>
Acked-by: Joshua Kinard <linux@kumba.dev>
Link: https://patch.msgid.link/20261013120208.11268-2-kaloz@kernel.org
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
2026-10-30 21:38:05 +01:00
Rafael J. Wysocki
4358090906 Merge branch 'thermal-intel'
Merge a fix for Intel thermal tests for 7.4-rc1:

 - Allow cross builds of the Intel thermal tests (Sasha Levin)

* thermal-intel:
  selftests/thermal: allow cross builds of the Intel tests
2026-10-30 20:59:25 +01:00
Linus Torvalds
17fa96334e Arm:
- Fix a couple of embarrassing merge mistakes in kvmarm-7.4
 
 - Cleanup the HCR_EL2 bit fields to exclusively use the generated
   definitions, fixings a nasty regression introduced in 6.16, where
   barriers were not upgraded from NSH to ISH anymore
 
 - Fix publication of state when a vcpu is forced out of the guest
 
 - Let vcpu pausing nest correctly
 
 - Sanitise ID_AA64MMFR3_EL1.S1P[IO]E to follow the rules of the architecture
 
 - Don't warn on SMCCC filter reserved range allocation failure
 
 - Prevent GICv5 and TLBI hypercalls to be used from the host when pKVM
   is active
 
 - Enforce that only GICv3 guests are supported for pKVM
 
 - Don't try to access GICv5 EL2 sysregs from EL1
 
 - Compute architectrally correct values for ID_AA64MMFR3_EL1.S1P[IO]E
   by checking the feature dependencies
 
 - Require matching VGIC and ITS model
 
 - Cleanup TRACE_REMOTE dependencies
 
 - Fix random comments
 
 Arm selftests:
 
 - selftests: Skip unwritable ID fields in the failed-run test
 
 - Move pkvm_selftests() after all CPUs have initialized EL2
 
 RISC-V:
 
 - Allow Zicclsm, Ziccamoa, Ziccif, Za64rs for KVM guest
 
 - Implement KVM_PRE_FAULT_MEMORY ioctl()
 
 - Replace imsic switch-case macros with range checks
 
 RISC-V fixes:
 
 - Avoid redundant interrupt check for pending timers
 
 - Reject vCPU creation after AIA initialization
 
 - Fix build with vector support disabled
 
 - Fix IPI delivery for out-of-order vcpu_id
 
 - Use a raw lock for IMSIC wakeup state
 
 - Reject vCPU creation after AIA initialization
 
 RISC-V selftests:
 
 - Lazy V-extension enablement for KVM selftests
 
 - Show sepc/scause/stval CSRs in KVM selftests vcpu dump
 -----BEGIN PGP SIGNATURE-----
 
 iQFIBAABCgAyFiEE8TM4V0tmI4mGbHaCv/vSX3jHroMFAmrk4AIUHHBib256aW5p
 QHJlZGhhdC5jb20ACgkQv/vSX3jHroM1yQf+OHsn+QrPUWBv+DDSPcj3iEBVal2/
 3YyJSUaDn295nymw4vk0mviwOD7ntEhVNCeT94x8CTibtQUs37GyQOBI88tX0XeU
 TZ4oNVrPZByWGd4MEQNpM25hCt5vEXLY6dydZ4GVF2EJKDJ6tT9VqZwX94DJsLgU
 HKcSDBSQ6Pzd80bVgwIhzKox2b2U8nrQfhtAKTxetKVWBjPULbCIWYG/PugrP21P
 4VikMoWGDovGhqy7ud8kZ3i6feVST1cD8To61BRrmGp04b0knGWrINFyRnh0bFPa
 muZeineILYSDLDKFSk0A0KBPjnM7KoQnwaNpDzS/Xl+7K8kKnPvDGWVwZg==
 =Zlk1
 -----END PGP SIGNATURE-----

Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm

Pull more KVM updates from Paolo Bonzini:
 "ARM64:

   - Fix a couple of embarrassing merge mistakes in kvmarm-7.4

   - Cleanup the HCR_EL2 bit fields to exclusively use the generated
     definitions, fixings a nasty regression introduced in 6.16, where
     barriers were not upgraded from NSH to ISH anymore

   - Fix publication of state when a vcpu is forced out of the guest

   - Let vcpu pausing nest correctly

   - Sanitise ID_AA64MMFR3_EL1.S1P[IO]E to follow the rules of the
     architecture

   - Don't warn on SMCCC filter reserved range allocation failure

   - Prevent GICv5 and TLBI hypercalls to be used from the host when
     pKVM is active

   - Enforce that only GICv3 guests are supported for pKVM

   - Don't try to access GICv5 EL2 sysregs from EL1

   - Compute architectrally correct values for ID_AA64MMFR3_EL1.S1P[IO]E
     by checking the feature dependencies

   - Require matching VGIC and ITS model

   - Cleanup TRACE_REMOTE dependencies

   - Fix random comments

  ARM64 selftests:

   - selftests: Skip unwritable ID fields in the failed-run test

   - Move pkvm_selftests() after all CPUs have initialized EL2

  RISC-V:

   - Allow Zicclsm, Ziccamoa, Ziccif, Za64rs for KVM guest

   - Implement KVM_PRE_FAULT_MEMORY ioctl()

   - Replace imsic switch-case macros with range checks

  RISC-V fixes:

   - Avoid redundant interrupt check for pending timers

   - Reject vCPU creation after AIA initialization

   - Fix build with vector support disabled

   - Fix IPI delivery for out-of-order vcpu_id

   - Use a raw lock for IMSIC wakeup state

   - Reject vCPU creation after AIA initialization

  RISC-V selftests:

   - Lazy V-extension enablement for KVM selftests

   - Show sepc/scause/stval CSRs in KVM selftests vcpu dump"

* tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm: (42 commits)
  KVM: selftests: Reject GICv3 ITS with a GICv5 VGIC
  KVM: arm64: vgic: Require matching VGIC and ITS models
  KVM: arm64: gic-v5: Drop unused addr variable
  KVM: arm64: Sanitise ID_AA64MMFR3_EL1.S1P[IO]E
  KVM: arm64: selftests: Skip unwritable ID fields in the failed-run test
  tracing/remotes: Fix TRACE_REMOTE build when TRACING=n
  KVM: arm64: Move pkvm_selftests() after all CPUs have initialized EL2
  KVM: arm64: Get rid of compatibility HCR_EL2 aliases
  KVM: arm64: Convert HCR_xyz to HCR_EL2_xyz
  KVM: arm64: Set HCR_EL2.BSU to Inner Shareable for guests
  KVM: arm64: Fix stale VGICv3 comments in the nVHE world switch
  KVM: arm64: vgic: Do not access the GICv5 CPU interface from EL1
  KVM: arm64: Validate the host-provided vgic model in pKVM
  KVM: arm64: Reject the stage-2 flush hypercalls under pKVM
  KVM: arm64: Return on kvm_gmem_get_pfn() failure in gmem_abort()
  KVM: riscv: selftest: add Zicclsm, Ziccamoa, Ziccif, Za64rs
  RISC-V: KVM: Allow Zicclsm, Ziccamoa, Ziccif, Za64rs in guest
  MAINTAINERS: name the kvm-riscv/linux riscv_kvm_next branch
  RISC-V: KVM: Don't write MMIO load result to x0
  RISC-V: KVM: Use a raw lock for IMSIC wakeup state
  ...
2026-10-30 09:48:45 -10:00