1. 15 Jun, 2024 5 commits
    • David Hildenbrand's avatar
      Revert "mm: init_mlocked_on_free_v3" · 384a746b
      David Hildenbrand authored
      There was insufficient review and no agreement that this is the right
      approach.
      
      There are serious flaws with the implementation that make processes using
      mlock() not even work with simple fork() [1] and we get reliable crashes
      when rebooting.
      
      Further, simply because we might be unmapping a single PTE of a large
      mlocked folio, we shouldn't zero out the whole folio.
      
      ... especially because the code can also *corrupt* urelated memory because
      	kernel_init_pages(page, folio_nr_pages(folio));
      
      Could end up writing outside of the actual folio if we work with a tail
      page.
      
      Let's revert it.  Once there is agreement that this is the right approach,
      the issues were fixed and there was reasonable review and proper testing,
      we can consider it again.
      
      [1] https://lkml.kernel.org/r/4da9da2f-73e4-45fd-b62f-a8a513314057@redhat.com
      
      Link: https://lkml.kernel.org/r/20240605091710.38961-1-david@redhat.com
      Fixes: ba42b524 ("mm: init_mlocked_on_free_v3")
      Signed-off-by: default avatarDavid Hildenbrand <david@redhat.com>
      Reported-by: default avatarDavid Wang <00107082@163.com>
      Closes: https://lore.kernel.org/lkml/20240528151340.4282-1-00107082@163.com/Reported-by: default avatarLance Yang <ioworker0@gmail.com>
      Closes: https://lkml.kernel.org/r/20240601140917.43562-1-ioworker0@gmail.comAcked-by: default avatarLance Yang <ioworker0@gmail.com>
      Cc: York Jasper Niebuhr <yjnworkstation@gmail.com>
      Cc: Matthew Wilcox (Oracle) <willy@infradead.org>
      Cc: Kees Cook <keescook@chromium.org>
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      384a746b
    • Peter Xu's avatar
      mm/page_table_check: fix crash on ZONE_DEVICE · 8bb592c2
      Peter Xu authored
      Not all pages may apply to pgtable check.  One example is ZONE_DEVICE
      pages: they map PFNs directly, and they don't allocate page_ext at all
      even if there's struct page around.  One may reference
      devm_memremap_pages().
      
      When both ZONE_DEVICE and page-table-check enabled, then try to map some
      dax memories, one can trigger kernel bug constantly now when the kernel
      was trying to inject some pfn maps on the dax device:
      
       kernel BUG at mm/page_table_check.c:55!
      
      While it's pretty legal to use set_pxx_at() for ZONE_DEVICE pages for page
      fault resolutions, skip all the checks if page_ext doesn't even exist in
      pgtable checker, which applies to ZONE_DEVICE but maybe more.
      
      Link: https://lkml.kernel.org/r/20240605212146.994486-1-peterx@redhat.com
      Fixes: df4e817b ("mm: page table check")
      Signed-off-by: default avatarPeter Xu <peterx@redhat.com>
      Reviewed-by: default avatarPasha Tatashin <pasha.tatashin@soleen.com>
      Reviewed-by: default avatarDan Williams <dan.j.williams@intel.com>
      Reviewed-by: default avatarAlistair Popple <apopple@nvidia.com>
      Cc: <stable@vger.kernel.org>
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      8bb592c2
    • Yury Norov's avatar
      gcc: disable '-Warray-bounds' for gcc-9 · 8e5bd4ea
      Yury Norov authored
      '-Warray-bounds' is already disabled for gcc-10+.  Now that we've merged
      bitmap_{read,write), I see the following error when building the kernel
      with gcc-9.4 (Ubuntu 20.04.4 LTS) for x86_64 allmodconfig:
      
      drivers/pinctrl/pinctrl-cy8c95x0.c: In function `cy8c95x0_read_regs_mask.isra.0':
      include/linux/bitmap.h:756:18: error: array subscript [1, 288230376151711744] is outside array bounds of `long unsigned int[1]' [-Werror=array-bounds]
        756 |  value_high = map[index + 1] & BITMAP_LAST_WORD_MASK(start + nbits);
            |               ~~~^~~~~~~~~~~
      
      The immediate reason is that the commit b4475970 ("bitmap: make
      bitmap_{get,set}_value8() use bitmap_{read,write}()") switched the
      bitmap_get_value8() to an alias of bitmap_read(); the same for 'set'.
      
      Now; the code that triggers Warray-bounds, calls the function like this:
      
        #define MAX_BANK 8
        #define BANK_SZ 8
        #define MAX_LINE        (MAX_BANK * BANK_SZ)
        DECLARE_BITMAP(tval, MAX_LINE); // 64-bit map: unsigned long tval[1]
      
        read_val |= bitmap_get_value8(tval, i * BANK_SZ) & ~bits;
      
      bitmap_read() is implemented such that it may conditionally dereference a
      pointer beyond the boundary like this:
      
      	unsigned long offset = start % BITS_PER_LONG;
              unsigned long space = BITS_PER_LONG - offset;
      
              if (space >= nbits)
                      return (map[index] >> offset) & BITMAP_LAST_WORD_MASK(nbits);
      
              value_low = map[index] & BITMAP_FIRST_WORD_MASK(start);
              value_high = map[index + 1] & BITMAP_LAST_WORD_MASK(start + nbits);
              return (value_low >> offset) | (value_high << space);
      
      In case of bitmap_get_value8(), it's impossible to violate the boundary
      because 'space >= nbits' is never the true for byte-aligned 8-bit access. 
      So, this is clearly a false-positive.
      
      The same type of false-positives break my allmodconfig build in many
      places.  gcc-8, is clear, however.
      
      Link: https://lkml.kernel.org/r/20240522225830.1201778-1-yury.norov@gmail.com
      Fixes: b4475970 ("bitmap: make bitmap_{get,set}_value8() use bitmap_{read,write}()")
      Signed-off-by: default avatarYury Norov <yury.norov@gmail.com>
      Cc: Alexander Lobakin <aleksander.lobakin@intel.com>
      Cc: David S. Miller <davem@davemloft.net>
      Cc: Gustavo A. R. Silva <gustavoars@kernel.org>
      Cc: Masahiro Yamada <masahiroy@kernel.org>
      Cc: Nhat Pham <nphamcs@gmail.com>
      Cc: Petr Mladek <pmladek@suse.com>
      Cc: Randy Dunlap <rdunlap@infradead.org>
      Cc: Vincent Guittot <vincent.guittot@linaro.org>
      Cc: Yoann Congal <yoann.congal@smile.fr>
      Cc: Arnd Bergmann <arnd@arndb.de>
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      8e5bd4ea
    • Joseph Qi's avatar
      ocfs2: fix NULL pointer dereference in ocfs2_abort_trigger() · 685d03c3
      Joseph Qi authored
      bdev->bd_super has been removed and commit 8887b94d change the usage
      from bdev->bd_super to b_assoc_map->host->i_sb.  Since ocfs2 hasn't set
      bh->b_assoc_map, it will trigger NULL pointer dereference when calling
      into ocfs2_abort_trigger().
      
      Actually this was pointed out in history, see commit 74e364ad.  But
      I've made a mistake when reviewing commit 8887b94d and then
      re-introduce this regression.
      
      Since we cannot revive bdev in buffer head, so fix this issue by
      initializing all types of ocfs2 triggers when fill super, and then get the
      specific ocfs2 trigger from ocfs2_caching_info when access journal.
      
      [joseph.qi@linux.alibaba.com: v2]
        Link: https://lkml.kernel.org/r/20240602112045.1112708-1-joseph.qi@linux.alibaba.com
      Link: https://lkml.kernel.org/r/20240530110630.3933832-2-joseph.qi@linux.alibaba.com
      Fixes: 8887b94d ("ocfs2: stop using bdev->bd_super for journal error logging")
      Signed-off-by: default avatarJoseph Qi <joseph.qi@linux.alibaba.com>
      Reviewed-by: default avatarHeming Zhao <heming.zhao@suse.com>
      Cc: Mark Fasheh <mark@fasheh.com>
      Cc: Joel Becker <jlbec@evilplan.org>
      Cc: Junxiao Bi <junxiao.bi@oracle.com>
      Cc: Changwei Ge <gechangwei@live.cn>
      Cc: Gang He <ghe@suse.com>
      Cc: Jun Piao <piaojun@huawei.com>
      Cc: <stable@vger.kernel.org>	[6.6+]
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      685d03c3
    • Joseph Qi's avatar
      ocfs2: fix NULL pointer dereference in ocfs2_journal_dirty() · 58f7e1e2
      Joseph Qi authored
      bdev->bd_super has been removed and commit 8887b94d change the usage
      from bdev->bd_super to b_assoc_map->host->i_sb.  This introduces the
      following NULL pointer dereference in ocfs2_journal_dirty() since
      b_assoc_map is still not initialized.  This can be easily reproduced by
      running xfstests generic/186, which simulate no more credits.
      
      [  134.351592] BUG: kernel NULL pointer dereference, address: 0000000000000000
      ...
      [  134.355341] RIP: 0010:ocfs2_journal_dirty+0x14f/0x160 [ocfs2]
      ...
      [  134.365071] Call Trace:
      [  134.365312]  <TASK>
      [  134.365524]  ? __die_body+0x1e/0x60
      [  134.365868]  ? page_fault_oops+0x13d/0x4f0
      [  134.366265]  ? __pfx_bit_wait_io+0x10/0x10
      [  134.366659]  ? schedule+0x27/0xb0
      [  134.366981]  ? exc_page_fault+0x6a/0x140
      [  134.367356]  ? asm_exc_page_fault+0x26/0x30
      [  134.367762]  ? ocfs2_journal_dirty+0x14f/0x160 [ocfs2]
      [  134.368305]  ? ocfs2_journal_dirty+0x13d/0x160 [ocfs2]
      [  134.368837]  ocfs2_create_new_meta_bhs.isra.51+0x139/0x2e0 [ocfs2]
      [  134.369454]  ocfs2_grow_tree+0x688/0x8a0 [ocfs2]
      [  134.369927]  ocfs2_split_and_insert.isra.67+0x35c/0x4a0 [ocfs2]
      [  134.370521]  ocfs2_split_extent+0x314/0x4d0 [ocfs2]
      [  134.371019]  ocfs2_change_extent_flag+0x174/0x410 [ocfs2]
      [  134.371566]  ocfs2_add_refcount_flag+0x3fa/0x630 [ocfs2]
      [  134.372117]  ocfs2_reflink_remap_extent+0x21b/0x4c0 [ocfs2]
      [  134.372994]  ? inode_update_timestamps+0x4a/0x120
      [  134.373692]  ? __pfx_ocfs2_journal_access_di+0x10/0x10 [ocfs2]
      [  134.374545]  ? __pfx_ocfs2_journal_access_di+0x10/0x10 [ocfs2]
      [  134.375393]  ocfs2_reflink_remap_blocks+0xe4/0x4e0 [ocfs2]
      [  134.376197]  ocfs2_remap_file_range+0x1de/0x390 [ocfs2]
      [  134.376971]  ? security_file_permission+0x29/0x50
      [  134.377644]  vfs_clone_file_range+0xfe/0x320
      [  134.378268]  ioctl_file_clone+0x45/0xa0
      [  134.378853]  do_vfs_ioctl+0x457/0x990
      [  134.379422]  __x64_sys_ioctl+0x6e/0xd0
      [  134.379987]  do_syscall_64+0x5d/0x170
      [  134.380550]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
      [  134.381231] RIP: 0033:0x7fa4926397cb
      [  134.381786] Code: 73 01 c3 48 8b 0d bd 56 38 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 8d 56 38 00 f7 d8 64 89 01 48
      [  134.383930] RSP: 002b:00007ffc2b39f7b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
      [  134.384854] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fa4926397cb
      [  134.385734] RDX: 00007ffc2b39f7f0 RSI: 000000004020940d RDI: 0000000000000003
      [  134.386606] RBP: 0000000000000000 R08: 00111a82a4f015bb R09: 00007fa494221000
      [  134.387476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
      [  134.388342] R13: 0000000000f10000 R14: 0000558e844e2ac8 R15: 0000000000f10000
      [  134.389207]  </TASK>
      
      Fix it by only aborting transaction and journal in ocfs2_journal_dirty()
      now, and leave ocfs2_abort() later when detecting an aborted handle,
      e.g. start next transaction. Also log the handle details in this case.
      
      Link: https://lkml.kernel.org/r/20240530110630.3933832-1-joseph.qi@linux.alibaba.com
      Fixes: 8887b94d ("ocfs2: stop using bdev->bd_super for journal error logging")
      Signed-off-by: default avatarJoseph Qi <joseph.qi@linux.alibaba.com>
      Reviewed-by: default avatarHeming Zhao <heming.zhao@suse.com>
      Cc: Mark Fasheh <mark@fasheh.com>
      Cc: Joel Becker <jlbec@evilplan.org>
      Cc: Junxiao Bi <junxiao.bi@oracle.com>
      Cc: Changwei Ge <gechangwei@live.cn>
      Cc: Gang He <ghe@suse.com>
      Cc: Jun Piao <piaojun@huawei.com>
      Cc: <stable@vger.kernel.org>	[6.6+]
      Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
      58f7e1e2
  2. 09 Jun, 2024 5 commits
    • Linus Torvalds's avatar
      Linux 6.10-rc3 · 83a7eefe
      Linus Torvalds authored
      83a7eefe
    • Linus Torvalds's avatar
      Merge tag 'perf-tools-fixes-for-v6.10-2-2024-06-09' of... · b8481381
      Linus Torvalds authored
      Merge tag 'perf-tools-fixes-for-v6.10-2-2024-06-09' of git://git.kernel.org/pub/scm/linux/kernel/git/perf/perf-tools
      
      Pull perf tools fixes from Arnaldo Carvalho de Melo:
      
       - Update copies of kernel headers, which resulted in support for the
         new 'mseal' syscall, SUBVOL statx return mask bit, RISC-V and PPC
         prctls, fcntl's DUPFD_QUERY, POSTED_MSI_NOTIFICATION IRQ vector,
         'map_shadow_stack' syscall for x86-32.
      
       - Revert perf.data record memory allocation optimization that ended up
         causing a regression, work is being done to re-introduce it in the
         next merge window.
      
       - Fix handling of minimal vmlinux.h file used with BPF's CO-RE when
         interrupting the build.
      
      * tag 'perf-tools-fixes-for-v6.10-2-2024-06-09' of git://git.kernel.org/pub/scm/linux/kernel/git/perf/perf-tools:
        perf bpf: Fix handling of minimal vmlinux.h file when interrupting the build
        Revert "perf record: Reduce memory for recording PERF_RECORD_LOST_SAMPLES event"
        tools headers arm64: Sync arm64's cputype.h with the kernel sources
        tools headers uapi: Sync linux/stat.h with the kernel sources to pick STATX_SUBVOL
        tools headers UAPI: Update i915_drm.h with the kernel sources
        tools headers UAPI: Sync kvm headers with the kernel sources
        tools arch x86: Sync the msr-index.h copy with the kernel sources
        tools headers: Update the syscall tables and unistd.h, mostly to support the new 'mseal' syscall
        perf trace beauty: Update the arch/x86/include/asm/irq_vectors.h copy with the kernel sources to pick POSTED_MSI_NOTIFICATION
        perf beauty: Update copy of linux/socket.h with the kernel sources
        tools headers UAPI: Sync fcntl.h with the kernel sources to pick F_DUPFD_QUERY
        tools headers UAPI: Sync linux/prctl.h with the kernel sources
        tools include UAPI: Sync linux/stat.h with the kernel sources
      b8481381
    • Linus Torvalds's avatar
      Merge tag 'edac_urgent_for_v6.10_rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/ras/ras · 637c2dfc
      Linus Torvalds authored
      Pull EDAC fixes from Borislav Petkov:
      
       - Convert PCI core error codes to proper error numbers since latter get
         propagated all the way up to the module loading functions
      
      * tag 'edac_urgent_for_v6.10_rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/ras/ras:
        EDAC/igen6: Convert PCIBIOS_* return codes to errnos
        EDAC/amd64: Convert PCIBIOS_* return codes to errnos
      637c2dfc
    • Linus Torvalds's avatar
      Merge tag 'clk-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux · 771ed661
      Linus Torvalds authored
      Pull clk fix from Stephen Boyd:
       "One fix for the SiFive PRCI clocks so that the device boots again.
      
        This driver was registering clkdev lookups that were always going to
        be useless. This wasn't a problem until clkdev started returning an
        error in these cases, causing this driver to fail probe, and thus boot
        to fail because clks are essential for most drivers. The fix is
        simple, don't use clkdev because this is a DT based system where
        clkdev isn't used"
      
      * tag 'clk-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux:
        clk: sifive: Do not register clkdevs for PRCI clocks
      771ed661
    • Linus Torvalds's avatar
      Merge tag '6.10-rc2-smb3-client-fixes' of git://git.samba.org/sfrench/cifs-2.6 · c5dbc2ed
      Linus Torvalds authored
      Pull smb client fixes from Steve French:
       "Two small smb3 client fixes:
      
         - fix deadlock in umount
      
         - minor cleanup due to netfs change"
      
      * tag '6.10-rc2-smb3-client-fixes' of git://git.samba.org/sfrench/cifs-2.6:
        cifs: Don't advance the I/O iterator before terminating subrequest
        smb: client: fix deadlock in smb2_find_smb_tcon()
      c5dbc2ed
  3. 08 Jun, 2024 8 commits
    • Linus Torvalds's avatar
      Merge tag 'for-linus-2024060801' of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid · 061d1af7
      Linus Torvalds authored
      Pull HID fixes from Benjamin Tissoires:
      
       - fix potential read out of bounds in hid-asus (Andrew Ballance)
      
       - fix endian-conversion on little endian systems in intel-ish-hid (Arnd
         Bergmann)
      
       - A couple of new input event codes (Aseda Aboagye)
      
       - errors handling fixes in hid-nvidia-shield (Chen Ni), hid-nintendo
         (Christophe JAILLET), hid-logitech-dj (José Expósito)
      
       - current leakage fix while the device is in suspend on a i2c-hid
         laptop (Johan Hovold)
      
       - other assorted smaller fixes and device ID / quirk entry additions
      
      * tag 'for-linus-2024060801' of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid:
        HID: Ignore battery for ELAN touchscreens 2F2C and 4116
        HID: i2c-hid: elan: fix reset suspend current leakage
        dt-bindings: HID: i2c-hid: elan: add 'no-reset-on-power-off' property
        dt-bindings: HID: i2c-hid: elan: add Elan eKTH5015M
        dt-bindings: HID: i2c-hid: add dedicated Ilitek ILI2901 schema
        input: Add support for "Do Not Disturb"
        input: Add event code for accessibility key
        hid: asus: asus_report_fixup: fix potential read out of bounds
        HID: logitech-hidpp: add missing MODULE_DESCRIPTION() macro
        HID: intel-ish-hid: fix endian-conversion
        HID: nintendo: Fix an error handling path in nintendo_hid_probe()
        HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
        HID: core: remove unnecessary WARN_ON() in implement()
        HID: nvidia-shield: Add missing check for input_ff_create_memless
        HID: intel-ish-hid: Fix build error for COMPILE_TEST
      061d1af7
    • Linus Torvalds's avatar
      Merge tag 'kbuild-fixes-v6.10-2' of... · 329f70c5
      Linus Torvalds authored
      Merge tag 'kbuild-fixes-v6.10-2' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild
      
      Pull Kbuild fixes from Masahiro Yamada:
      
       - Fix the initial state of the save button in 'make gconfig'
      
       - Improve the Kconfig documentation
      
       - Fix a Kconfig bug regarding property visibility
      
       - Fix build breakage for systems where 'sed' is not installed in /bin
      
       - Fix a false warning about missing MODULE_DESCRIPTION()
      
      * tag 'kbuild-fixes-v6.10-2' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild:
        modpost: do not warn about missing MODULE_DESCRIPTION() for vmlinux.o
        kbuild: explicitly run mksysmap as sed script from link-vmlinux.sh
        kconfig: remove wrong expr_trans_bool()
        kconfig: doc: document behavior of 'select' and 'imply' followed by 'if'
        kconfig: doc: fix a typo in the note about 'imply'
        kconfig: gconf: give a proper initial state to the Save button
        kconfig: remove unneeded code for user-supplied values being out of range
      329f70c5
    • Linus Torvalds's avatar
      Merge tag 'media/v6.10-2' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media · 1e7ccdd3
      Linus Torvalds authored
      Pull media fixes from Mauro Carvalho Chehab:
      
       - fixes for the new ipu6 driver (and related fixes to mei csi driver)
      
       - fix a double debugfs remove logic at mgb4 driver
      
       - a documentation fix
      
      * tag 'media/v6.10-2' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media:
        media: intel/ipu6: add csi2 port sanity check in notifier bound
        media: intel/ipu6: update the maximum supported csi2 port number to 6
        media: mei: csi: Warn less verbosely of a missing device fwnode
        media: mei: csi: Put the IPU device reference
        media: intel/ipu6: fix the buffer flags caused by wrong parentheses
        media: intel/ipu6: Fix an error handling path in isys_probe()
        media: intel/ipu6: Move isys_remove() close to isys_probe()
        media: intel/ipu6: Fix some redundant resources freeing in ipu6_pci_remove()
        media: Documentation: v4l: Fix ACTIVE route flag
        media: mgb4: Fix double debugfs remove
      1e7ccdd3
    • Linus Torvalds's avatar
      Merge tag 'irq-urgent-2024-06-08' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip · 36714d69
      Linus Torvalds authored
      Pull irq fixes from Ingo Molnar:
      
       - Fix possible memory leak the riscv-intc irqchip driver load failures
      
       - Fix boot crash in the sifive-plic irqchip driver caused by recently
         changed boot initialization order
      
       - Fix race condition in the gic-v3-its irqchip driver
      
      * tag 'irq-urgent-2024-06-08' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        irqchip/gic-v3-its: Fix potential race condition in its_vlpi_prop_update()
        irqchip/sifive-plic: Chain to parent IRQ after handlers are ready
        irqchip/riscv-intc: Prevent memory leak when riscv_intc_init_common() fails
      36714d69
    • Linus Torvalds's avatar
      Merge tag 'x86-urgent-2024-06-08' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip · 7cedb020
      Linus Torvalds authored
      Pull x86 fixes from Ingo Molnar:
       "Miscellaneous fixes:
      
         - Fix kexec() crash if call depth tracking is enabled
      
         - Fix SMN reads on inaccessible registers on certain AMD systems"
      
      * tag 'x86-urgent-2024-06-08' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/amd_nb: Check for invalid SMN reads
        x86/kexec: Fix bug with call depth tracking
      7cedb020
    • Linus Torvalds's avatar
      Merge tag 'perf-urgent-2024-06-08' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip · 7cec2e16
      Linus Torvalds authored
      Pull perf event fix from Ingo Molnar:
       "Fix race between perf_event_free_task() and perf_event_release_kernel()
        that can result in missed wakeups and hung tasks"
      
      * tag 'perf-urgent-2024-06-08' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        perf/core: Fix missing wakeup when waiting for context reference
      7cec2e16
    • Linus Torvalds's avatar
      Merge tag 'locking-urgent-2024-06-08' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip · bbc5332b
      Linus Torvalds authored
      Pull locking doc fix from Ingo Molnar:
       "Fix typos in the kerneldoc of some of the atomic APIs"
      
      * tag 'locking-urgent-2024-06-08' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        locking/atomic: scripts: fix ${atomic}_sub_and_test() kerneldoc
      bbc5332b
    • Linus Torvalds's avatar
      Merge tag 'mm-hotfixes-stable-2024-06-07-15-24' of... · dc772f82
      Linus Torvalds authored
      Merge tag 'mm-hotfixes-stable-2024-06-07-15-24' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
      
      Pull misc fixes from Andrew Morton:
       "14 hotfixes, 6 of which are cc:stable.
      
        All except the nilfs2 fix affect MM and all are singletons - see the
        chagelogs for details"
      
      * tag 'mm-hotfixes-stable-2024-06-07-15-24' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm:
        nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
        mm: fix xyz_noprof functions calling profiled functions
        codetag: avoid race at alloc_slab_obj_exts
        mm/hugetlb: do not call vma_add_reservation upon ENOMEM
        mm/ksm: fix ksm_zero_pages accounting
        mm/ksm: fix ksm_pages_scanned accounting
        kmsan: do not wipe out origin when doing partial unpoisoning
        vmalloc: check CONFIG_EXECMEM in is_vmalloc_or_module_addr()
        mm: page_alloc: fix highatomic typing in multi-block buddies
        nilfs2: fix potential kernel bug due to lack of writeback flag waiting
        memcg: remove the lockdep assert from __mod_objcg_mlstate()
        mm: arm64: fix the out-of-bounds issue in contpte_clear_young_dirty_ptes
        mm: huge_mm: fix undefined reference to `mthp_stats' for CONFIG_SYSFS=n
        mm: drop the 'anon_' prefix for swap-out mTHP counters
      dc772f82
  4. 07 Jun, 2024 22 commits