lkml.org

Re: [PATCH v2 10/10] gpu: nova-core: wait for RISC-V HALTED on FSP ...

"Alexandre Courbot" writes: (Summary) On Fri Jul 3, 2026 at 3:22 AM PDT, Eliot Courtney wrote: on.rs
it returns `false`.
it returns `false`.
I would say "guarantee" instead of "imply" here, wdyt? it returns `false`.
it returns `false`.
Same here.
Same here.
thod for the current
le>(&self, fw: &F) -> Result { > diff --git a/drivers/gpu/nova-core/falcon/hal.rs b/drivers/gpu/nova-core/= falcon/hal.rs > --- a/drivers/gpu/nova-core/falcon/hal.rs > @@ -53,6 +53,11 @@ fn signature_reg_fuse_version( > + /// >

[tip: ras/core] x86/mce: Document the mce=print_all command line p ...

"tip-bot2 for Shreshth Srivastava" writes: (Summary) The following commit has been merged into the ras/core branch of tip: The following commit has been merged into the ras/core branch of tip: Commit-ID: b0fa123835c147e77b9a967de76dc899062bd405 Gitweb: https://git.kernel.org/tip/b0fa123835c147e77b9a967de76dc899062= bd405
Author: Shreshth Srivastava <shreshth.srivastava@intel.com> CommitterDate: Wed, 22 Jul 2026 20:25:20 -07:00
CommitterDate: Wed, 22 Jul 2026 20:25:20 -07:00
x86/mce: Document the mce=3Dprint_all command line parameter x86/mce: Document the mce=3Dprint_all command line parameter The mce=3Dprint_all command line option is supported but has never been documented.

[PATCH -v4 2/2] mm: vmscan: fix node reclaim ignoring swappiness p ...

Ridong writes: (Summary) grep pgsteal pgsteal_kswapd 0 pgsteal_direct 0 pgsteal_khugepaged 0 pgsteal_proactive 0 pgsteal_anon 0 pgsteal_file 0 # echo "64M swappiness=max" > grep pgsteal pgsteal_kswapd 0 pgsteal_direct 0 pgsteal_khugepaged 0 pgsteal_proactive 16283 pgsteal_anon 16283 pgsteal_file 0 Cc: stable@vger.kernel.org # 6.17+ Fixes: b980077899ea ("mm: introduce per-node proactive reclaim interface") Acked-by: Johannes Weiner <hannes@cmpxchg.org>

[PATCH 1/2] Bluetooth: HIDP: reject frames without a transaction h ...

Sangho Lee writes: (Summary) 25 +++++++++++++++---------- 1 file changed, 15 insertions(+), 10 deletions(-) diff --git a/net/bluetooth/hidp/core.c b/net/bluetooth/hidp/core.c index 0e24c5e2955e..194208d03d18 100644 --- a/net/bluetooth/hidp/core.c +++ b/net/bluetooth/hidp/core.c @@ -560,16 +560,18 @@ static int hidp_process_data(struct hidp_session *session, struct sk_buff *skb, static void hidp_recv_ctrl_frame(struct hidp_session *session, struct sk_buff *skb) { - unsigned char hdr, type, param; } @@ -597,14 +600,15 @@ static void hidp_recv_ctrl_frame(struct hidp_session *session, static void hidp_recv_intr_frame(struct hidp_session *session, struct sk_buff *skb) { - unsigned char hdr;

[PATCH 0/2] Bluetooth: HIDP: validate short receive frames

Sangho Lee writes: (Summary) The HIDP control and interrupt receive paths assume that every L2CAP SDU contains a transaction header. The series also applies without changes to bluetooth-next at 6f55ad8fb0ac.
6f55ad8fb0ac.
On the unpatched KMSAN kernel, an empty control SDU produced two uninitialized-value reports in hidp_session_run(), an empty interrupt SDU produced one, and a DATA | A trailing report ID after a header-only DATA response made the unpatched raw-report request complete with a zero-byte result; The KASAN runs and all patched UBSAN runs accepted a subsequent valid feature report.

[PATCH 2/2] Bluetooth: HIDP: validate numbered report payloads

Sangho Lee writes: (Summary) When hidp_get_raw_report() waits for a numbered report, hidp_process_data() compares the expected report number with skb->data[0]. The transaction header checks remove the empty-frame reports, but this report remains until the payload check is added.
the payload check is added.
The comparison can also consume a peer-controlled byte beyond the declared L2CAP PDU. 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/net/bluetooth/hidp/core.c b/net/bluetooth/hidp/core.c index 194208d03d18..f5bdf9f1ca63 100644 --- a/net/bluetooth/hidp/core.c +++ b/net/bluetooth/hidp/core.c @@ -543,9 +543,10 @@ static int hidp_process_data(struct hidp_session *session, struct sk_buff *skb, } if (test_bit(HIDP_WAITING_FOR_RETURN, &session->flags) &&

RE: [PATCH net-next v7 4/7] r8169: add support for RTL8116af

Javen writes: (Summary) SFP also have a PHY?
I totally agree that the SFP initialization logic does not belong in a func= tion meant for PHYs. This mainly because th= e patch which add support for RTL8127atf(commit id: fef0f545511f72223) assu= me that RTL8127atf has a dummy phy. me that RTL8127atf has a dummy phy. And in patch 5/7 of this series which add phylink support for RTL8127atf, I= remove it.
remove it.
BRs,
Javen
Javen
Andrew
Andrew

[PATCH v5 7/9] of/overlay: return ERR_PTR from dup_and_fixup_symbo ...

Abdurrahman Hussain writes: (Summary) dup_and_fixup_symbol_prop() returns NULL for malformed values, for values that are not paths into one of the overlay's fragments, and for allocation failures. + * + * Return: the fixed-up property, or ERR_PTR: -EINVAL if @prop's value + * is not a valid non-empty C string, -ENODEV if it is not a path into + * one of @ovcs's fragments, -ENOMEM on allocation failure. + /* @path must descend through this fragment's __overlay__ node */ + mismatch = overlay_name_len >

[PATCH v5 8/9] of/overlay: rewrite /aliases path values to live-tr ...

Abdurrahman Hussain writes: (Summary) Use it for properties of the /aliases node too: - a value that resolves inside one of the overlay's fragments is stored rewritten to the live-tree path - -ENODEV (legacy string aliases, absolute live-tree paths) is copied verbatim, as before this series - -EINVAL (not a NUL-terminated string) is copied verbatim with a warning; + of_node_is_aliases(target->np)) { + /* rewrite overlay-internal alias values to live-tree paths */ + new_prop = dup_and_fixup_symbol_prop(ovcs, overlay_prop);

[PATCH v5 9/9] of: unittest: cover /aliases updates from overlay a ...

Abdurrahman Hussain writes: (Summary) 73 +++++++++++++++++++++++++++++ 3 files changed, 103 insertions(+) diff --git a/drivers/of/unittest-data/Makefile b/drivers/of/unittest-data/Makefile index 01a966e39f23..fdfec5a7923b 100644 --- a/drivers/of/unittest-data/Makefile +++ b/drivers/of/unittest-data/Makefile @@ -22,6 +22,7 @@ obj-$(CONFIG_OF_OVERLAY) += overlay.dtbo.o \ overlay_18.dtbo.o \ overlay_19.dtbo.o \ overlay_20.dtbo.o \ + overlay_alias.dtbo.o \ overlay_bad_add_dup_node.dtbo.o \ overlay_bad_add_dup_prop.dtbo.o \ overlay_bad_phandle.dtbo.o \ @@ -66,6 +67,10 @@ DTC_FLAGS_testcases += -Wno-interrupts_property \ # overlay_bad_add_dup_prop.dtbo \ # overlay_bad_phandle.dtbo \ # overlay_bad_symbol.dtbo \ +# +# overlay_alias.dtbo needs a run-time target base for its empty target-path;

Re: [PATCH] x86/mce: Document the mce=print_all command line parameter

Randy Dunlap writes: On 7/22/26 6:37 PM, Shreshth Srivastava wrote:
Acked-by: Tony Luck <tony.luck@intel.com>
Looks good. Thanks.
Looks good. Thanks.
Acked-by: Randy Dunlap <rdunlap@infradead.org> Acked-by: Randy Dunlap <rdunlap@infradead.org> checks. 0 to disable.

Re: [PATCH v5 14/36] mm/damon: skip private node memory in DAMON m ...

Gregory Price writes: (Summary) On Wed, Jul 22, 2026 at 05:19:42PM -0700, SJ Park wrote: these for future replies.
I have been very much discouraged from this kind of trimming because it removes the context of the series from the individual patches - making it even more confusing.
even more confusing.
But I understand, I will try to remember to do this for you. Yes, but you bring up a good point - I think this two-step process is actually poor form and that I need to redo it.
actually poor form and that I need to redo it.
Maybe this can be redone as node states (features?) such as: Maybe this can be redone as node states (features?) such as: N_MEMORY_RECLAIMABLE
N_MEMORY_DEMOTABLE
N_MEMORY_TIERABLE
N_MEMORY_TIERABLE
so these damon changes will forego this confusing intermediate step of: so these damon changes will forego this confusing intermediate step of: if (folio_is_private_node(folio)) and go straight to if (node_is_reclaimable(folio_nid(folio))) In the

[PATCH v5 5/9] of/overlay: don't keep a negative id in ovcs->id on ...

Abdurrahman Hussain writes: (Summary) On failure the stored id is negative and the error path runs free_overlay_changeset(), whose "if (ovcs->id)" check passes: idr_remove() is called with a negative id and list_del() runs on ovcs->ovcs_list, which is not initialized until after the id allocation. 2 ++ 1 file changed, 2 insertions(+) diff --git a/drivers/of/overlay.c b/drivers/of/overlay.c index 284c9bc6c9cf..f1aa8574069a 100644 --- a/drivers/of/overlay.c +++ b/drivers/of/overlay.c @@ -1038,6 +1038,8 @@ int of_overlay_fdt_apply(const void *overlay_fdt, u32 overlay_fdt_size, ovcs->id = idr_alloc(&ovcs_idr, ovcs, 1, 0, GFP_KERNEL);

[PATCH_v3_0/2]_iommu/virtio:_Probe_fixes_for_proper_driver_state

Xiong Weimin writes: (Summary) From: Xiong Weimin <xiongweimin@kylinos.cn>
Subject: [PATCH v3 0/2] iommu/virtio: Probe fixes for proper driver state In-Reply-To: <20260714025913.2042-1-xiongweimin@kylinos.cn> Changes since v2:
- Rebased onto latest upstream
- Patch 3 ("Reject short event buffers") has been dropped as it was independently submitted by Xu Rao
- As suggested by Will Deacon, modified viommu_init_vqs() to take vdev instead of viommu, since they are now linked via vdev->priv instead of viommu, since they are now linked via vdev->priv --- Xiong Weimin (2): iommu/virtio: Set driver data before enabling virtqueues iommu/virtio: Handle iommu_device_register() failures drivers/iommu/virtio-iommu.c |

[PATCH v5 4/9] of/overlay: put property on deadprops only after ch ...

Abdurrahman Hussain writes: (Summary) add_changeset_property() links a new property of a not-yet-live target node into the node's deadprops list before handing it to of_changeset_add_property(). If that fails, the error path frees the property but leaves the freed pointer linked in deadprops, and of_node_release() frees it a second time when the aborted overlay's node is released.
node is released.
Record the changeset entry first and link the property into deadprops only on success.

[PATCH -v4 0/2] mm: vmscan: fix node reclaim ignoring swappiness p ...

Ridong writes: (Summary) From: Ridong Chen <chenridong@xiaomi.com>
From: Ridong Chen <chenridong@xiaomi.com>
The per-node proactive reclaim interface
(/sys/devices/system/node/nodeX/reclaim) accepts a swappiness parameter, but it is silently ignored when CONFIG_MEMCG is disabled. Patch 2 consolidates sc_swappiness() into a single definition that works regardless of CONFIG_MEMCG, fixing the node reclaim swappiness bug. v1: https://lore.kernel.org/all/20260711091157.306070-1-ridong.chen@linux.dev/ Ridong Chen (2): memcg: move mem_cgroup_swappiness and vm_swappiness to mm/swap.h mm: vmscan: fix node reclaim ignoring swappiness parameter include/linux/memcontrol.h |

[PATCH v5 3/9] of/overlay: look up absolute target-paths absolutely

Abdurrahman Hussain writes: (Summary) 38 ++++++++++++++++++-------------------- 1 file changed, 18 insertions(+), 20 deletions(-) diff --git a/drivers/of/overlay.c b/drivers/of/overlay.c index 08d5351746be..74aea704835a 100644 --- a/drivers/of/overlay.c +++ b/drivers/of/overlay.c @@ -688,12 +688,15 @@ static int build_changeset(struct overlay_changeset *ovcs) * * 1) "target" property containing the phandle of the target * 2) "target-path" property containing the path of the target + * + * With a non-NULL @target_base, an empty "target-path" means + * @target_base itself; The relevant top level nodes are the @@ -982,7 +978,9 @@ static int of_overlay_apply(struct overlay_changeset *ovcs, * @overlay_fdt: pointer to overlay FDT * @overlay_fdt_size: number of bytes in @overlay_fdt * @ret_ovcs_id: pointer for returning created changeset id - * @base: pointer for the target node to apply overlay + * @base: target for fragments with an empty "target-path";

[PATCH -v4 1/2] memcg: move mem_cgroup_swappiness and vm_swappines ...

Ridong writes: (Summary) 13 +++++++++++++ 4 files changed, 17 insertions(+), 23 deletions(-) diff --git a/include/linux/memcontrol.h b/include/linux/memcontrol.h index 957260677678..e7a794dfb40e 100644 --- a/include/linux/memcontrol.h +++ b/include/linux/memcontrol.h @@ -239,8 +239,6 @@ struct mem_cgroup { */ bool oom_group; defined(CONFIG_NUMA) @@ -473,25 +472,7 @@ static inline int add_swap_extent(struct swap_info_struct *sis, } #endif /* CONFIG_SWAP */ #ifdef CONFIG_MEMCG -static inline int mem_cgroup_swappiness(struct mem_cgroup *memcg) -{ - /* Cgroup2 doesn't have per-cgroup swappiness */ - if (cgroup_subsys_on_dfl(memory_cgrp_subsys)) - return READ_ONCE(vm_swappiness);

Re: [syzbot] [bpf?] [sctp?] [tipc?] INFO: rcu detected stall in so ...

syzbot writes: (Summary) Hello,
Hello,
syzbot has tested the proposed patch but the reproducer is still triggering an issue: lost connection to test machine
lost connection to test machine
lost connection to test machine
lost connection to test machine
Tested on:
Tested on:
commit: 4539944e Merge tag 'liveupdate-fixes-2026-07-22' of gi..

[PATCH v5 0/9] of: teach overlay code to keep /aliases in sync

Abdurrahman Hussain writes:

[PATCH v5 2/9] of: update /aliases lookup on reconfig notifications

Abdurrahman Hussain writes: (Summary) */ +static void of_alias_create(const struct property *pp, + void *(*dt_alloc)(u64 size, u64 align), + bool owned) +{ + const char *start = pp->name; + } +} + +static void *alias_alloc(u64 size, u64 align) +{ + return kzalloc(size, GFP_KERNEL); + switch (action) { + case OF_RECONFIG_ATTACH_NODE: + /* of_aliases is read under devtree_lock by alias path lookup */ + raw_spin_lock_irqsave(&devtree_lock, flags); +} + +static struct notifier_block of_aliases_nb = { + .notifier_call = of_aliases_reconfig_notifier, +};

[PATCH v5 1/9] of: hold a reference on of_aliases during alias pat ...

Abdurrahman Hussain writes: (Summary) of_alias_value_ok() requires a non-empty, NUL-terminated, absolute path:
a non-empty, NUL-terminated, absolute path:
- an empty property has a NULL value and crashes in strchr() - a value without a NUL inside the property is read past its end - a relative value naming another alias (loop = "loop") recurses through of_find_node_by_path() until the stack is exhausted through of_find_node_by_path() until the stack is exhausted All three are reachable with a malformed boot FDT today. 8 ++++++++ 2 files changed, 23 insertions(+), 5 deletions(-) diff --git a/drivers/of/base.c b/drivers/of/base.c index 6e7a42dedad3..6f79f593fc77 100644 --- a/drivers/of/base.c +++ b/drivers/of/base.c @@ -995,6 +995,8 @@ struct device_node *of_find_node_opts_by_path(const char *path, const char **opt /* The path could begin with an alias */ if (*path != '/') { + struct device_node *aliases;

Re: [PATCH 0/2] net: Use synchronous wakeups selectively

Eric Dumazet writes: On Wed, Jul 22, 2026 at 7:08=E2=80=AFPM Jakub Kicinski <kuba@kernel.org> wr= ote:
.
/
pw-bot: cr
In any case, adding code to the fast path in every network system call is undesirable.
is undesirable.
is undesirable.

Re: [PATCH v4] btrfs: retry verity reads for not-uptodate Merkle f ...

David Sterba writes: On Wed, Jul 22, 2026 at 10:54:35AM +0800, Yichong Chen wrote: + goto read_folio;
With that new label the main loop becomes a less readable, previously there was just again and out. From a distance the loop likes a big while from again: to read_key_bytes, so this may be a good followup cleanup (if the end result is reasonable).
(if the end result is reasonable).
}
}

[PATCH v5 6/9] of/overlay: don't create "//" paths for fragments t ...

Abdurrahman Hussain writes: (Summary) dup_and_fixup_symbol_prop() rewrites a symbol value by replacing its "/fragment/__overlay__" prefix with the fragment's target path. When the fragment targets the root node the target path is "/" and the result starts with "//", which __of_find_node_by_full_path() cannot resolve: symbols pointing into such fragments silently stop resolving. 3 +++ 1 file changed, 3 insertions(+) diff --git a/drivers/of/overlay.c b/drivers/of/overlay.c index f1aa8574069a..c6962e9948cc 100644 --- a/drivers/of/overlay.c +++ b/drivers/of/overlay.c @@ -256,6 +256,9 @@ static struct property *dup_and_fixup_symbol_prop( if (!target_path) return NULL;

Re: [RFC PATCH 2/3] sched/core: Fix forceidle when lock owner has ...

John Stultz writes: (Summary) )
+
So this should probably go in a "#ifdef CONFIG_SCHED_PROXY_EXEC" block, or in the !SCHED_PROXY_EXEC case you get defined but not used warnings.
warnings.
warnings.
+ BUG_ON();
This should just be BUG()
This should just be BUG()
I'll fold these fixes up into the patch in my tree, but wanted to give you a heads up should you intend to resend these out for review sooner.
sooner.
thanks
-john
-john
-john

Re: [PATCH v4 8/9] md/raid1,raid10: set IO_BLOCKED in case of BLK_ ...

Logan Gunthorpe writes: (Summary) Sorry, I had one late nit-picky thought tonight I thought I'd suggest: Sorry, I had one late nit-picky thought tonight I thought I'd suggest: It might be better to store bi_status in a local variable instead of the much more specific p2pdma_error value. I think this would read a lot better, make the intent a little more clear and be reusable if other bi_status conditions need to be handled specially.
bi_status conditions need to be handled specially.
Thanks,
Thanks,
Logan
Logan
Logan

Re: [PATCH 2/2] soc/tegra: fuse: speedo-tegra210: Support revision B01

Aaron Kling writes: (Summary) wrote:
--
egra/fuse/speedo-tegra210.c
gra_sku_info *sku_info,
;
a_sku_info *sku_info)
sion >=3D 3) { > I am guessing that this is derived/ported from some kernel that NVIDIA > It would be nice to include a reference to > It is loosely based on [0], but restructured to not change nearly as > 'based on downstream 5.10' blurb in the commit message or a direct >

re: [PATCH 3/3] mailbox: pcc: Fix command timeout due to missed in ...

Adam Young writes: (Summary) + /* + * Set chan_in_use before ringing the doorbell so a fast completion + * interrupt is not mistaken for a shared interrupt from another + * subspace. The + * ordered MMIO accessor used to ring the doorbell keeps this store + * visible before the platform is notified. + */ + if (pchan->plat_irq > 0) + WRITE_ONCE(pchan->chan_in_use, true); + WRITE_ONCE(pchan->chan_in_use, false); } -- 2.43.0 iAt the end of the above code, WRITE_ONCE(pchan->chan_in_use, false);

Re: [PATCH v4] btrfs: retry verity reads for not-uptodate Merkle f ...

David Sterba writes: On Wed, Jul 22, 2026 at 10:54:35AM +0800, Yichong Chen wrote: Signed-off-by: Yichong Chen <chenyichong@uniontech.com> Added to for-next, thanks.
Added to for-next, thanks.
Added to for-next, thanks.

Re: [PATCH v6 7/8] KVM: x86/pmu: Emulate RDPMC on performance metrics

Jim Mattson writes: (Summary) wrote:
kvm_vcpu *vcpu)
;
&&
cpu)
s
y
this,
f
rdpmc
in a VM.
rdpmc())
It looks good to me. Even if L1 decides to pass through RDPMC to L2, L0 will still intercept and emulate RDPMC for vmcs02.
emulate RDPMC for vmcs02.
So, we can drop the module parameter and just use
intel_pmu_can_passthrough_rdpmc().
intel_pmu_can_passthrough_rdpmc().
To keep the list short, I assume that any CPU with only three fixed counters will return true.
counters will return true.
counters will return true.

Re: [PATCH bpf v6 2/4] bpf: Fix UAF due to missing link type check ...

Pu Lehui writes:

[PATCH v2 0/2] mm: folio conversion and refactoring in do_swap_page()

Hongfu Li writes: (Summary) From: Hongfu Li <lihongfu@kylinos.cn>
From: Hongfu Li <lihongfu@kylinos.cn>
Convert the device-private migration path in do_swap_page() to use folio APIs, then extract all non-swap entry handling into a new do_non_swap_page() helper to improve readability and reduce the size of the main swap fault function.
size of the main swap fault function.
Hongfu Li (2):
mm: Use a folio in the softleaf_is_device_private path mm: Extract non-swap page handling to do_non_swap_page() mm: Extract non-swap page handling to do_non_swap_page() mm/memory.c |

Re: [PATCH v2 09/13] mm/slab: change struct slabobj_ext to a union

Hao Li writes: On Mon, Jul 20, 2026 at 04:16:23PM +0200, Vlastimil Babka (SUSE) wrote: } __aligned(8);
slabobj_ext is now acting as a generic struct, serving as either _objcg or _ctref. However, because it's set to __aligned(8), I'm wondering if this might waste half the memory on 32-bit?
waste half the memory on 32-bit?
2.55.0

[PATCH v2 2/2] mm: Extract non-swap page handling to do_non_swap_p ...

Hongfu Li writes: (Summary) + } + } else if (softleaf_is_hwpoison(entry)) { + ret = VM_FAULT_HWPOISON; if (unlikely(!softleaf_is_swap(entry))) { - if (softleaf_is_migration(entry)) { - migration_entry_wait(vma->vm_mm, vmf->pmd, - vmf->address); FAULT_FLAG_VMA_LOCK) { - /* - * migrate_to_ram is not yet ready to operate - * under VMA lock. - } - } else if (softleaf_is_hwpoison(entry)) { - ret = VM_FAULT_HWPOISON;

[PATCH v2 1/2] mm: Use a folio in the softleaf_is_device_private path

Hongfu Li writes: (Summary) From: Hongfu Li <lihongfu@kylinos.cn>
From: Hongfu Li <lihongfu@kylinos.cn>
Use the folio APIs in the device_private migration path of do_swap_page(), replacing four calls to compound_head() with one.
replacing four calls to compound_head() with one.
Signed-off-by: Hongfu Li <lihongfu@kylinos.cn> 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/mm/memory.c b/mm/memory.c index d5e87624f692..ae521baa8c84 100644 --- a/mm/memory.c +++ b/mm/memory.c @@ -4871,18 +4871,19 @@ vm_fault_t do_swap_page(struct vm_fault *vmf) goto unlock;

RE: [PATCH net-next v7 3/7] r8169: add support for phylink

Javen writes: (Summary) In fact, I added a strict check inside phylink_update_mac_pause_capabilitie= s() to prevent non-pause bits from being modified.
s() to prevent non-pause bits from being modified.
+ if (mac_pause & MAC_ASYM_PAUSE)) { + phylink_err(pl, "Attempted to dynamically change non-pause MAC capabilit= ies\n"); + } But I think you are right. + if (jumbo_before !=3D jumbo_after) { + unsigned long mac_pause =3D 0; + + if (!jumbo_after) + mac_pause =3D MAC_SYM_PAUSE | + + phylink_update_mac_pause_capabilities(tp->phylink, mac_pause);

Re: [PATCH] ocfs2: validate truncate log dinode before caching

ZhengYuan Huang writes: (Summary) Instead, the same artifacts have triggered two other issues:
triggered two other issues:
KASAN: use-after-free Read in ocfs2_dx_dir_search
kernel BUG in ocfs2_grow_tree
kernel BUG in ocfs2_grow_tree
For the use-after-free in ocfs2_dx_dir_search, I previously submitted a patch that addresses what I believe is its root cause: a patch that addresses what I believe is its root cause: https://lore.kernel.org/all/20260416082105.1295887-1-gality369@gmail.com/ https://lore.kernel.org/all/20260416082105.1295887-1-gality369@gmail.com/ However, I have not received any feedback on the patch yet, and at this point we are not sure whether that issue is related to the truncate-log corruption reported here.
truncate-log corruption reported here.
We are continuing to investigate and will share any new findings.

Re: [PATCH 0/3] i2c: qcom-cci: Fix CCI clock rate enforcement

Wenmeng Liu writes: On 7/21/2026 10:58 PM, Loic Poulain wrote:
Best regards,
For this patch series:
For this patch series:
Tested-by: Wenmeng Liu <wenmeng.liu@oss.qualcomm.com> Tested-by: Wenmeng Liu <wenmeng.liu@oss.qualcomm.com> Tested-by: Wenmeng Liu <wenmeng.liu@oss.qualcomm.com>

[PATCH] remoteproc: qcom: q6v5: Request shutdown if crash is trigg ...

Bjorn Andersson writes: (Summary) rpmsg client drivers are allowed to invoke rproc_report_crash() on their grandparent when they determine that the otherwise seemingly healthy remoteproc has entered a functionally broken state. 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/drivers/remoteproc/qcom_q6v5.c b/drivers/remoteproc/qcom_q6v5.c index 1075ef4027b7..fe148b4b3775 100644 --- a/drivers/remoteproc/qcom_q6v5.c +++ b/drivers/remoteproc/qcom_q6v5.c @@ -229,13 +229,13 @@ static irqreturn_t q6v5_stop_interrupt(int irq, void *data) */ int qcom_q6v5_request_stop(struct qcom_q6v5 *q6v5, struct qcom_sysmon *sysmon) { + bool was_running = q6v5->running;

[PATCH -v3 2/2] mm: vmscan: fix node reclaim ignoring swappiness p ...

[PATCH -v3 1/2] memcg: move mem_cgroup_swappiness and vm_swappines ...

Re: [PATCH 2/2] UBI: support per-device wear-leveling threshold

Zhihao Cheng writes:

[PATCH -v3 0/2] mm: vmscan: fix node reclaim ignoring swappiness p ...

[PATCH v3] i3c: master: dw-i3c-master: fix OD timing for first bro ...

tze.yee.ng@altera ... writes: (Summary) + + case I3C_OPEN_DRAIN_NORMAL_SPEED: + writel(master->i3c_od_timing_normal, + master->regs + SCL_I3C_OD_TIMING); +} + static int dw_i3c_master_set_dev_nack_retry(struct i3c_master_controller *m, unsigned int dev_nack_retry_cnt) { @@ -1538,6 +1588,7 @@ static const struct i3c_master_controller_ops dw_mipi_i3c_ops = { .recycle_ibi_slot = dw_i3c_master_recycle_ibi_slot, .enable_hotjoin = dw_i3c_master_enable_hotjoin, .disable_hotjoin = dw_i3c_master_disable_hotjoin, + .set_speed = dw_i3c_master_set_speed, .set_dev_nack_retry = dw_i3c_master_set_dev_nack_retry, };

Forwarded: [PATCH] gfs2: don't add further folios to a chained bio

syzbot writes: (Summary) ***
***
Subject: [PATCH] gfs2: don't add further folios to a chained bio Author: kmehltretter@gmail.com
Author: kmehltretter@gmail.com
#syz test: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master #syz test: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master diff --git a/fs/gfs2/lops.c b/fs/gfs2/lops.c index 6dabe73ad790..a00787df2507 100644 --- a/fs/gfs2/lops.c +++ b/fs/gfs2/lops.c @@ -514,6 +514,7 @@ int gfs2_find_jhead(struct gfs2_jdesc *jd, struct gfs2_log_header_host *head) int ret = 0; } } @@ -561,6 +564,7 @@ int gfs2_find_jhead(struct gfs2_jdesc *jd, struct gfs2_log_header_host *head) bio = gfs2_log_alloc_bio(sdp, dblock, gfs2_end_log_read, REQ_OP_READ);

Re: [PATCH v2 09/10] gpu: nova-core: correct RISC-V HALTED field

"Alexandre Courbot" writes: On Fri Jul 3, 2026 at 3:22 AM PDT, Eliot Courtney wrote: C-V is active")
Signed-off-by: Eliot Courtney <ecourtney@nvidia.com> Pushded to drm-rust-next, thanks!
Pushded to drm-rust-next, thanks!
Pushded to drm-rust-next, thanks!

Re: [PATCH v2] tracing: Add mutex to trace_parser to fix concurren ...

Tengda Wu writes: (Summary) On 2026/7/23 8:52, Steven Rostedt wrote:
-- Steve
I took a closer look at the lockdep report and confirmed the deadlock indeed exists:
indeed exists:
Path 1 (write to set_ftrace_pid):
ftrace_pid_write
pid_write
guard(mutex)(&ftrace_lock);
trace_pid_write
mutex_lock(&parser.lock);
mutex_lock(&parser.lock);
Path 2 (write to set_ftrace_filter):
ftrace_regex_write
guard(mutex)(&parser->lock);
ftrace_process_regex
p->func
register_ftrace_function_probe
mutex_lock(&ftrace_lock);
mutex_lock(&ftrace_lock);
So Path 1 takes ftrace_lock then parser->lock, while Path 2 takes parser->lock then ftrace_lock.

Re: [PATCH v2 04/10] gpu: nova-core: gsp: ensure LibOS DMA allocat ...

"Alexandre Courbot" writes: On Fri Jul 3, 2026 at 7:22 PM JST, Eliot Courtney wrote: Signed-off-by: Eliot Courtney <ecourtney@nvidia.com> Pushed to drm-rust-next, thanks!
Pushed to drm-rust-next, thanks!
Pushed to drm-rust-next, thanks!

Re: [PATCH v2 02/10] gpu: nova-core: fsp: catch bogus queue pointe ...

"Alexandre Courbot" writes: (Summary) On Fri Jul 3, 2026 at 3:22 AM PDT, Eliot Courtney wrote: Signed-off-by: Eliot Courtney <ecourtney@nvidia.com> falcon/fsp.rs
{ > /// Poll FSP for incoming data. /// > /// Returns the size of available data in bytes, or 0 if no data is = available. + /// Returns an error if the queue pointers are bogus (`tail < Also nit: Let's also move this to its own paragraph so the success and error cases are clearly separate.

[PATCH v4 2/2] media: qcom: iris: Add request key frame support fo ...

Wangao Wang writes: (Summary) #endif diff --git a/drivers/media/platform/qcom/iris/iris_hfi_gen1.c b/drivers/media/platform/qcom/iris/iris_hfi_gen1.c index eff9216bb50143c0d752051a6400605bbaf3803e..0f7e7d6b25f41eb8a67a9a8f01dce20ea54dc335 100644 --- a/drivers/media/platform/qcom/iris/iris_hfi_gen1.c +++ b/drivers/media/platform/qcom/iris/iris_hfi_gen1.c @@ -375,6 +375,16 @@ static const struct platform_inst_fw_cap inst_fw_cap_sm8250_enc[] = { CAP_FLAG_DYNAMIC_ALLOWED, .set = iris_set_bitrate_gen1, }, + { + .cap_id = REQUEST_SYNC_FRAME, + .min = 0, + .max = 1, + .step_or_mask = 1, + .value = 0, + .hfi_id = HFI_PROPERTY_CONFIG_VENC_REQUEST_SYNC_FRAME, + .flags = CAP_FLAG_INPUT_PORT |

Re: [PATCH v2 03/10] gpu: nova-core: gsp: ensure lifetime for FMC ...

Re: [PATCH v6 7/8] KVM: x86/pmu: Emulate RDPMC on performance metrics

"Mi, Dapeng" writes:

[PATCH v4 1/2] media: qcom: iris: fix missing hfi_id in gen1 GOP_S ...

Wangao Wang writes: (Summary) CAP_FLAG_DYNAMIC_ALLOWED, .set = iris_set_ir_period_gen1, }, { @@ -281,16 +283,6 @@ static const struct platform_inst_fw_cap inst_fw_cap_sm8250_enc[] = { .value = 0, .flags = CAP_FLAG_OUTPUT_PORT, }, - { - .cap_id = INTRA_PERIOD, - .min = 0, - .max = 1, - .step_or_mask = 1, - .value = 0, - .hfi_id = HFI_PROPERTY_CONFIG_VENC_INTRA_PERIOD, - .flags = CAP_FLAG_OUTPUT_PORT, - .set = iris_set_intra_period, - }, { .cap_id = LAYER_ENABLE, .min = 0, diff --git a/drivers/media/platform/qcom/iris/iris_platform_common.h b/drivers/media/platform/qcom/iris/iris_platform_common.h index c9256f2323dc4521f9eacaeffb0fc08a180de3ff..ff48333ad089894c3393e8ad45903c2603288eb9 100644 --- a/drivers/media/platform/qcom/iris/iris_platform_common.h +++ b/drivers/media/platform/qcom/iris/iris_platform_common.h @@ -165,7 +165,6 @@ enum platform_inst_fw_cap_type { USE_LTR, MARK_LTR, B_FRAME, - INTRA_PERIOD, LAYER_ENABLE, LAYER_TYPE_H264, LAYER_TYPE_HEVC,

[PATCH v4 0/2] media: qcom: iris: add dynamic encoder properties

Wangao Wang writes: (Summary) This patch series introduces several enhancements to the Qualcomm Iris encoder driver, improving support for V4L2 controls and enabling more video encoding features.
video encoding features.
- Fix missing hfi_id for gen1 encoder GOP_SIZE cap. - Link to v1: https://lore.kernel.org/r/20260429-dynamic_encode-v1-0-c9fb691d8b3a@oss.qualcomm.com --- Wangao Wang (2): media: qcom: iris: fix missing hfi_id in gen1 GOP_SIZE cap media: qcom: iris: Add request key frame support for encoder drivers/media/platform/qcom/iris/iris_ctrls.c |

[PATCH] i2c: i801: Clamp adapter timeout to prevent system lockup

Mingyu Wang writes: (Summary) +} + /* Wait for BUSY being cleared and either INTR or an error flag being set */ static int i801_wait_intr(struct i801_priv *priv) { - unsigned long timeout = jiffies + priv->adapter.timeout; do { @@ -366,7 +375,7 @@ static int i801_wait_intr(struct i801_priv *priv) /* Wait for either BYTE_DONE or an error flag being set */ static int i801_wait_byte_done(struct i801_priv *priv) { - unsigned long timeout = jiffies + priv->adapter.timeout;

Re: [PATCH v2 01/10] gpu: nova-core: fsp: limit FSP receive messag ...

"Alexandre Courbot" writes: On Fri Jul 3, 2026 at 3:22 AM PDT, Eliot Courtney wrote: Signed-off-by: Eliot Courtney <ecourtney@nvidia.com> Merged into drm-rust-next, thanks! With the fix mentioned below. Merged into drm-rust-next, thanks! With the fix mentioned below. falcon/fsp.rs
+const FSP_EMEM_CHANNEL_0_SIZE: usize =3D 1024;
We should use `SZ_1K` here.
We should use `SZ_1K` here.
We should use `SZ_1K` here.

RE: [PATCH net-next v7 2/7] net: phy: phylink: add helper to modif ...

Javen writes: (Summary) The Pause capability will be p= ermanently masked out and never restored.
By unconditionally setting them here, we restore the baseline to 1, allowin= g phylink_validate() to correctly decide whether to keep them or clear them= based on the current PHY/MAC capabilities.
based on the current PHY/MAC capabilities.
.
what i'm missing here.
If the MAC does not support pause (e.g., mac_pause =3D=3D 0), those uncondi= tionally set bits are correctly masked out during the phylink_validate() ex= ecution chain.

[PATCH] soc: fsl: dpio: Remove redundant dev_err()

Pan Chuang writes: (Summary) 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/drivers/soc/fsl/dpio/dpio-driver.c b/drivers/soc/fsl/dpio/dpio-driver.c index 9e3fddd8f5a9..d5198ffc4455 100644 --- a/drivers/soc/fsl/dpio/dpio-driver.c +++ b/drivers/soc/fsl/dpio/dpio-driver.c @@ -102,12 +102,8 @@ static int register_dpio_irq_handlers(struct fsl_mc_device *dpio_dev, int cpu) 0, dev_name(&dpio_dev->dev), &dpio_dev->dev); 0) { - dev_err(&dpio_dev->dev, - "devm_request_irq() failed: %d\n", - error);

Re: [RFC PATCH v2 02/25] KVM: SVM: Passthrough the number of suppo ...

Jim Mattson writes: (Summary) wrote:
the pool, just
est
M enumerates
are is a
U, plus one
l 10000 > KVM could advertise 64 ASIDs to L1 and reserve the corresponding non-ze= ro > But you could refuse a userspace CPUID model that claims more ASIDs > and ignore unsupported ASIDs, then KVM *must* allow userspace to define a= max ASID > If KVM claiming support for an explicit number of ASIDs is a sticking poi= nt, then >

[PATCH] soc: ixp4xx: Remove redundant dev_err()

Pan Chuang writes: (Summary) 10 ++-------- 1 file changed, 2 insertions(+), 8 deletions(-) diff --git a/drivers/soc/ixp4xx/ixp4xx-qmgr.c b/drivers/soc/ixp4xx/ixp4xx-qmgr.c index 475e229039e3..6e1fca630b80 100644 --- a/drivers/soc/ixp4xx/ixp4xx-qmgr.c +++ b/drivers/soc/ixp4xx/ixp4xx-qmgr.c @@ -421,19 +421,13 @@ static int ixp4xx_qmgr_probe(struct platform_device *pdev) err = devm_request_irq(dev, irq1, handler1, 0, "IXP4xx Queue Manager", NULL); - if (err) { - dev_err(dev, "failed to request IRQ%i (%i)\n", - irq1, err); - if (err) { - dev_err(dev, "failed to request IRQ%i (%i)\n", - irq2, err);

Re: [PATCH] arm64: smp: distinguish secondary CPUs that hang after ...

Jinjie Ruan writes:

Re: [PATCH v3 8/9] KVM: arm64: selftests: Add infrastructure for u ...

Itaru Kitayama writes: On Sat, May 16, 2026 at 07:30:02PM +0100, Wei-Lin Chang wrote: +}
I understand that the selftest intentionally passes 40 as ipa_bits to init_s2_mmu(). However, with a 16KB granule and DS=0, a 48-bit IPA requires two concatenated level 1 root tables, which this implementation does not appear to support.
appear to support.
Thanks,
Itaru.
Itaru.
2.43.0
2.43.0

[PATCH] soc: qcom: Remove redundant dev_err()

Pan Chuang writes: (Summary) 4 +--- 3 files changed, 3 insertions(+), 9 deletions(-) diff --git a/drivers/soc/qcom/qcom_aoss.c b/drivers/soc/qcom/qcom_aoss.c index 259c41f0c34e..a6b673cd7678 100644 --- a/drivers/soc/qcom/qcom_aoss.c +++ b/drivers/soc/qcom/qcom_aoss.c @@ -602,10 +602,8 @@ static int qmp_probe(struct platform_device *pdev) irq = platform_get_irq(pdev, 0); - } /* * Treat smp2p interrupt as wakeup source, but keep it disabled diff --git a/drivers/soc/qcom/smsm.c b/drivers/soc/qcom/smsm.c index 021e9d1f61dc..396025074e1e 100644 --- a/drivers/soc/qcom/smsm.c +++ b/drivers/soc/qcom/smsm.c @@ -451,10 +451,8 @@ static int smsm_inbound_entry(struct qcom_smsm *smsm, NULL, smsm_intr, IRQF_ONESHOT, "smsm", (void *)entry);

Re: [PATCH v2 1/6] dt-bindings: hwmon: add binding for adi,adt7470

Luiz Angelo Daros de Luca writes: (Summary) When I added it and ran
dt_binding_check, it started rejecting the example node: dt_binding_check, it started rejecting the example node: hwmon@2f (adi,adt7470): $nodename:0: 'hwmon@2f' does not match '^pwm(@.*|-([0-9]|[1-9][0-9]+))?$' It turns out pwm.yaml also constrains $nodename as part of the allOf, so referencing it forces the node name into the pwm@... keeping the $ref and accepting the pwm@ node name), but I think keeping the node name aligned with the device's primary function is the more correct approach.

Re:Re: [PATCH] mm/page_idle: call folio_test_lru() after folio_get()

"jiale yao" writes: (Summary) SGkgTG9yZW56bywKClRoYW5rcywgdGhpcyBpcyB2ZXJ5IGhlbHBmdWwgZm9yIGEgbmV3YmllIGxp a2UgbWUuCgpGb3IgdGhlIHVubGlrZWx5KCkgcGFydCwgSSBmb2xsb3dlZCB0aGUgYXBwcm9hY2gg aW4gdGhpcyBsaW5rOgpodHRwczovL2xvcmUua2VybmVsLm9yZy8yMDI2MDUyNTE2MjI1Ni44MzE3 LTEtc2pAa2VybmVsLm9yZwoKVGhhbmtzLApKaWFsZQoKCkF0IDIwMjYtMDctMjIgMjA6NTA6MDUs ICJMb3JlbnpvIFN0b2FrZXMgKEFSTSkiIDxsanNAa2VybmVsLm9yZz4gd3JvdGU6Cj5Ob29vb28g OikgdGhpcyBpcyBub3QgaG93IHlvdSBzZW5kIHBhdGNoZXMuCj4KPkFsc28geW91IHNob3VsZCBf cmVwbHlfIHRvIHJldmlldyBjb21tZW50cywgbm90IGp1c3Qgc2VuZCBhbm90aGVyIHBhdGNoIHdp dGggbm8KPnJlcGx5LiBDb21tcyBpcyBraW5nLgo+Cj5BbHNvIC0gZG9uJ3QgcmVzcGluIHNvIHF1 aWNrLiBXYWl0IGEgZGF5Lgo+Cj5UaGVuIHNlbmQgYSB2MiwgTk9UIGluIHJlcGx5IHRvIGFueXRo aW5nLgo+Cj5SZWFsbHkgYmVzdCB3YXkgaXMgdG8gdXNlIGI0LCBkb2NzIGF0Cj5odHRwczovL2I0 LmRvY3Mua2VybmVsLm9yZy9lbi9sYXRlc3QvY29udHJpYnV0b3IvcHJlcC5odG1sIGFuZCBldGMu Cj4KPkJ1dCB5b3UgY2FuIGFsc28gZG8gc29tZXRoaW5nIGxpa2U6Cj4KPmdpdCBmb3JtYXQtcGF0 Y2ggLXYyIEhFQUR+MQo+c2NyaXB0cy9jaGVja3BhdGNoLnBsIDxwYXRjaCBmaWxlbmFtZT4KPnNj cmlwdHMvZ2V0X21haW50YWl

[PATCH v3 0/2] soc/tegra: pmc: Add Tegra210B01 support

Aaron Kling via B4 Relay writes: (Summary) --- Changes in v3: - Update patch 2 commit author and sign-off tag as requested off list by author - Update patch 2 commit message to describe the powergate differences compared to t210 - Drop sata powergate in patch 2 - Fix has_io_pad_wren value in patch 2 - Link to v2: https://lore.kernel.org/r/20260720-t210b01-pmc-v2-0-ca5317f8507b@gmail.com Changes in v2: - Address sashiko report and drop duplicated structs - Link to v1: https://lore.kernel.org/r/20260717-t210b01-pmc-v1-0-bf776be8b3a7@gmail.com --- Aaron Kling (1): dt-bindings: soc: tegra: pmc: Document Tegra210B01 Alexandre Hamamdjian (1): soc/tegra: pmc: Add Tegra210B01 support .../bindings/soc/tegra/nvidia,tegra20-pmc.yaml |

[PATCH v3 2/2] soc/tegra: pmc: Add Tegra210B01 support

Aaron Kling via B4 Relay writes: (Summary) + +static const struct tegra_pmc_soc tegra210b01_pmc_soc = { + .supports_core_domain = false, + .num_powergates = ARRAY_SIZE(tegra210b01_powergates), + .powergates = tegra210b01_powergates, + .num_cpu_powergates = ARRAY_SIZE(tegra210_cpu_powergates), + .cpu_powergates = tegra210_cpu_powergates, + .has_tsense_reset = true, + .has_gpu_clamps = true, + .needs_mbist_war = false, + .has_io_pad_wren = true, + .maybe_tz_only = true, + .num_io_pads = ARRAY_SIZE(tegra210_io_pads), + .io_pads = tegra210_io_pads, + .num_io_pad_vctrls = ARRAY_SIZE(tegra210_io_pad_vctrls), + .io_pad_vctrls = tegra210_io_pad_vctrls, + .num_pin_descs = ARRAY_SIZE(tegra210_pin_descs), + .pin_descs = tegra210_pin_descs, + .regs = &tegra20_pmc_regs, + .init = tegra20_pmc_init, + .setup_irq_polarity = tegra20_pmc_setup_irq_polarity, + .powergate_set = tegra114_powergate_set, + .irq_set_wake = tegra210_pmc_irq_set_wake, + .irq_set_type = tegra210_pmc_irq_set_type, + .reset_sources = tegra210_reset_sources, + .num_reset_sources = ARRAY_SIZE(

[PATCH v3 1/2] dt-bindings: soc: tegra: pmc: Document Tegra210B01

Aaron Kling via B4 Relay writes: (Summary) 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/Documentation/devicetree/bindings/soc/tegra/nvidia,tegra20-pmc.yaml b/Documentation/devicetree/bindings/soc/tegra/nvidia,tegra20-pmc.yaml index f516960dbbefb..8ec36c49f9594 100644 --- a/Documentation/devicetree/bindings/soc/tegra/nvidia,tegra20-pmc.yaml +++ b/Documentation/devicetree/bindings/soc/tegra/nvidia,tegra20-pmc.yaml @@ -18,6 +18,7 @@ properties: - nvidia,tegra114-pmc - nvidia,tegra124-pmc - nvidia,tegra210-pmc + - nvidia,tegra210b01-pmc reg: maxItems: 1 @@ -346,7 +347,9 @@ allOf: properties: compatible: contains: - const: nvidia,tegra210-pmc + enum: + - nvidia,tegra210-pmc + - nvidia,tegra210b01-pmc then: properties: pinmux:

[PATCH v2] RDMA/srpt: fix NULL deref when sending BUSY before targ ...

kensanya@163 ... writes: (Summary) } + /* + * Call target_init_cmd() before srpt_get_desc_tbl() so that + * cmd->se_tfo is set if descriptor parsing fails and + * target_send_busy() is used. + * + * target_send_busy() is only valid after a successful + * target_init_cmd(). + */ + rc = target_init_cmd(cmd, ch->sess, &send_ioctx->sense_data[0], + scsilun_to_int(&srp_cmd->lun), 0 /* data_len */, + TCM_SIMPLE_TAG, DMA_NONE, TARGET_SCF_ACK_KREF);

[PATCH v2] wifi: ath10k: validate WMI header before reading it

Pengpeng Hou writes: (Summary) 2 ++ 3 files changed, 25 insertions(+), 30 deletions(-) diff --git a/drivers/net/wireless/ath/ath10k/wmi-tlv.c b/drivers/net/wireless/ath/ath10k/wmi-tlv.c index 01f2d1fa9d7d..272dab37dc19 100644 --- a/drivers/net/wireless/ath/ath10k/wmi-tlv.c +++ b/drivers/net/wireless/ath/ath10k/wmi-tlv.c @@ -638,14 +638,10 @@ static int ath10k_wmi_tlv_event_peer_delete_resp(struct ath10k *ar, static void ath10k_wmi_tlv_op_rx(struct ath10k *ar, struct sk_buff *skb) { - struct wmi_cmd_hdr *cmd_hdr; diff --git a/drivers/net/wireless/ath/ath10k/wmi.c b/drivers/net/wireless/ath/ath10k/wmi.c index e57588c19c80..296a89106736 100644 --- a/drivers/net/wireless/ath/ath10k/wmi.c +++ b/drivers/net/wireless/ath/ath10k/wmi.c @@ -5873,15 +5873,24 @@ static inline void ath10k_wmi_queue_set_coverage_class_work(struct ath10k *ar) } } -static void ath10k_wmi_op_rx(struct ath10k *ar, struct sk_buff *skb) +bool ath10k_wmi_pull_cmd_hdr(struct sk_buff *skb, u32 *id) { - struct wmi_cmd_hdr *cmd_hdr;

[PATCH v7 2/2] media: i2c: add driver for ITE IT6625/IT6626

Hermes Wu via B4 Relay writes: (Summary)

Re: [PATCH 2/2] firmware: stratix10-svc: add support for agilex5

"Ng, Adrian Ho Yin" writes: (Summary) On 7/21/2026 7:59 AM, Dinh Nguyen wrote:
Will split the commit into smaller commits and resend. In the DTS patch i've removed the status="disabled" property in the smmu node which is required to enable SMMU on Agilex5 by default and allow the SVC driver to retrieve the attached IOMMU domain. the SVC driver to retrieve the attached IOMMU domain. would you prefer if i send the DTS changes separately? would you prefer if i send the DTS changes separately? Thanks
Adrian>
Dinh
Dinh
Dinh

[PATCH v7 1/2] dt-bindings: media: add ITE IT6625/IT6626 HDMI brid ...

Hermes Wu via B4 Relay writes: (Summary) + maxItems: 1 + + ports: + $ref: /schemas/graph.yaml#/properties/ports + properties: + port@0: + $ref: /schemas/graph.yaml#/$defs/port-base + unevaluatedProperties: false + description: CSI-2 output port MIPI0 + + properties: + endpoint: + $ref: /schemas/media/video-interfaces.yaml# + unevaluatedProperties: false + + properties: + data-lanes: + minItems: 1 + maxItems: 4 + + bus-type: + enum: + - 1 # MEDIA_BUS_TYPE_CSI2_CPHY + - 4 # MEDIA_BUS_TYPE_CSI2_DPHY + + clock-noncontinuous: true + link-frequencies: true + + required: + - data-lanes + + port@1: + $ref: /schemas/graph.yaml#/$defs/port-base + unevaluatedProperties: false + description: CSI-2 output port MIPI1 + + properties: + endpoint: + $ref: /schemas/media/video-i

Re: [PATCH 1/2] UBI: fix two issues in the ubi.mtd MODULE_PARM_DESC

Zhihao Cheng writes:

[PATCH v7 0/2] media: i2c: add support for ITE IT6625/IT6626 HDMI ...

Hermes Wu via B4 Relay writes: (Summary) The bridge is configured over I2C, exposes an HDMI CEC adapter, and supports EDID read/write, DV timings detection and configuration, and HPD control via the standard V4L2 subdevice pad and video ops.
and video ops.
Patch 1 documents the devicetree binding for the bridge, including its two selectable CSI-2 output graph ports.
its two selectable CSI-2 output graph ports.
Patch 2 adds the V4L2 subdevice driver itself.
Patch 2 adds the V4L2 subdevice driver itself.
Signed-off-by: Hermes Wu <Hermes.wu@ite.com.tw>

Re: [PATCH v2 14/33] mm/vma: clean up anon_vma_compatible()

"Zi Yan" writes: On Fri Jul 10, 2026 at 4:16 PM EDT, Lorenzo Stoakes wrote: LGTM.
LGTM.
Reviewed-by: Zi Yan <ziy@nvidia.com>
Reviewed-by: Zi Yan <ziy@nvidia.com>
Reviewed-by: Zi Yan <ziy@nvidia.com>
--=20
Best Regards,
Yan, Zi
Yan, Zi
Yan, Zi
Yan, Zi

[PATCH v3] wifi: mwifiex: validate event lengths before copying bodies

Pengpeng Hou writes: (Summary) mwifiex event packets contain a four-byte event cause followed by the event body. 3 ++- 2 files changed, 13 insertions(+), 5 deletions(-) diff --git a/drivers/net/wireless/marvell/mwifiex/sdio.c b/drivers/net/wireless/marvell/mwifiex/sdio.c index f039d6f19183..3588c36f64cf 100644 --- a/drivers/net/wireless/marvell/mwifiex/sdio.c +++ b/drivers/net/wireless/marvell/mwifiex/sdio.c @@ -1712,12 +1712,19 @@ static int mwifiex_decode_rx_packet(struct mwifiex_adapter *adapter, case MWIFIEX_TYPE_EVENT: mwifiex_dbg(adapter, EVENT, "info: --- Rx: Event ---\n"); MAX_EVENT_SIZE) { + mwifiex_dbg(adapter, ERROR, + "EVENT: invalid skb->len %u\n", skb->len);

Re: [PATCH v3 0/3] media: i2c: Add OmniVision OG0VA1B camera senso ...

Wenmeng Liu writes: On 7/8/2026 10:33 PM, Wenmeng Liu wrote:
Best regards,
Best regards,
Gentle reminder to review this patchset.
Gentle reminder to review this patchset.
Thanks,
Wenmeng
Wenmeng
Wenmeng

Re: [PATCH v2 13/33] mm/vma: introduce and use vmg_pages(), vmg_[s ...

"Zi Yan" writes: On Fri Jul 10, 2026 at 4:16 PM EDT, Lorenzo Stoakes wrote: LGTM.
LGTM.
Reviewed-by: Zi Yan <ziy@nvidia.com>
Reviewed-by: Zi Yan <ziy@nvidia.com>
--=20
Best Regards,
Yan, Zi
Yan, Zi
Yan, Zi
Yan, Zi

[PATCH v2] drm/bridge: ps8640: propagate AUX transfer register errors

Pengpeng Hou writes: (Summary) --- Changes since v1: https://lore.kernel.org/all/20260623060635.16064-1-pengpeng@iscas.ac.cn/ - include the AUX address and length in the address-write diagnostic - describe poll failures without assuming that every error is a timeout - add the Fixes tag suggested by Doug - rebase onto the current drm-misc-next tree drivers/gpu/drm/bridge/parade-ps8640.c | 27 +++++++++++++++++++++------ 1 file changed, 21 insertions(+), 6 deletions(-) diff --git a/drivers/gpu/drm/bridge/parade-ps8640.c b/drivers/gpu/drm/bridge/parade-ps8640.c index 96332721cb69..56b48f8feab6 100644 --- a/drivers/gpu/drm/bridge/parade-ps8640.c +++ b/drivers/gpu/drm/bridge/parade-ps8640.c @@ -257,8 +257,14 @@ static ssize_t ps8640_aux_transfer_msg(struct drm_dp_aux *aux, addr_len[PAGE0_SWAUX_LENGTH - base] = (len == 0) ?

Re: [PATCH v4 5/8] powerpc: add exit_flags field in pt_regs

Madhavan Srinivasan writes: On 7/22/26 12:31 PM, Dmitry V. Levin wrote:
We added the exit_flag at the end of the struct so that other element offsets will not be affected with this change.
We are looking at other options and thanks for reporting this Maddy
#endif /* __ASSEMBLER__ */
#endif /* __ASSEMBLER__ */

[PATCH] soc: mediatek: mtk-svs: Remove redundant dev_err_probe()

Pan Chuang writes: (Summary) 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/drivers/soc/mediatek/mtk-svs.c b/drivers/soc/mediatek/mtk-svs.c index 99edecb204f2..39af0728ce61 100644 --- a/drivers/soc/mediatek/mtk-svs.c +++ b/drivers/soc/mediatek/mtk-svs.c @@ -2908,10 +2908,8 @@ static int svs_probe(struct platform_device *pdev) ret = devm_request_threaded_irq(svsp->dev, svsp_irq, NULL, svs_isr, IRQF_ONESHOT, svsp_data->name, svsp); - if (ret) { - dev_err_probe(svsp->dev, ret, "register irq(%d) failed\n", svsp_irq);

[PATCH] soc/tegra: cbb: Remove redundant dev_err()

Pan Chuang writes: (Summary) 9 ++------- 1 file changed, 2 insertions(+), 7 deletions(-) diff --git a/drivers/soc/tegra/cbb/tegra194-cbb.c b/drivers/soc/tegra/cbb/tegra194-cbb.c index 2f69e104c838..69ef929e04f8 100644 --- a/drivers/soc/tegra/cbb/tegra194-cbb.c +++ b/drivers/soc/tegra/cbb/tegra194-cbb.c @@ -2072,20 +2072,15 @@ static int tegra194_cbb_interrupt_enable(struct tegra_cbb *cbb) if (priv->sec_irq) { err = devm_request_irq(dev, priv->sec_irq, tegra194_cbb_err_isr, 0, dev_name(dev), priv); - } } if (priv->nonsec_irq) { err = devm_request_irq(dev, priv->nonsec_irq, tegra194_cbb_err_isr, 0, dev_name(dev), priv);

[PATCH v2] nfc: microread: validate target discovery payload lengths

Pengpeng Hou writes: (Summary) 31 +++++++++++++++++++++++++++++-- 1 file changed, 29 insertions(+), 2 deletions(-) diff --git a/drivers/nfc/microread/microread.c b/drivers/nfc/microread/microread.c index 4149c5d735bd..dfa2490db545 100644 --- a/drivers/nfc/microread/microread.c +++ b/drivers/nfc/microread/microread.c @@ -483,13 +483,19 @@ static void microread_target_discovered(struct nfc_hci_dev *hdev, u8 gate, switch (gate) { case MICROREAD_GATE_ID_MREAD_ISO_A: + if (skb->len <= MICROREAD_EMCF_A_LEN) { + r = -EINVAL; MICROREAD_EMCF_B_UID + 4) { + r = -EINVAL;

Re: [PATCH bpf-next v4 2/3] selftests/bpf: test timed may_goto pre ...

Feng Jiang writes:

[PATCH] soc: ti: wkup_m3_ipc: Remove redundant dev_err()

Pan Chuang writes: (Summary) Since commit 55b48e23f5c4 ("genirq/devres: Add error handling in devm_request_*_irq()"), devm_request_irq() automatically logs detailed error messages on failure. 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/drivers/soc/ti/wkup_m3_ipc.c b/drivers/soc/ti/wkup_m3_ipc.c index 5845fc652adc..f8640cdc2a21 100644 --- a/drivers/soc/ti/wkup_m3_ipc.c +++ b/drivers/soc/ti/wkup_m3_ipc.c @@ -630,10 +630,8 @@ static int wkup_m3_ipc_probe(struct platform_device *pdev) ret = devm_request_irq(dev, irq, wkup_m3_txev_handler, 0, "wkup_m3_txev", m3_ipc); - if (ret) { - dev_err(dev, "request_irq failed\n");

[PATCH] MAINTAINERS: add Ryan Chen and Billy Tsai as reviewer for ...

Billy Tsai writes: (Summary) Add Ryan Chen and myself as a reviewer for the ARM/ASPEED MACHINE SUPPORT entry to reflect ongoing review and contribution work on AST2xxx/AST27xx platform support.
platform support.
Signed-off-by: Billy Tsai <billy_tsai@aspeedtech.com> 2 ++ 1 file changed, 2 insertions(+) diff --git a/MAINTAINERS b/MAINTAINERS index 0b9d7c8276ac..c067d5ccdd43 100644 --- a/MAINTAINERS +++ b/MAINTAINERS @@ -2676,6 +2676,8 @@ F: drivers/irqchip/irq-aspeed-i2c-ic.c ARM/ASPEED MACHINE SUPPORT M: Joel Stanley <joel@jms.id.au>

Re:Re: [PATCH] mm/page_idle: call folio_test_lru() after folio_get()

"jiale yao" writes: (Summary) CgpIaSBTSiwKVGhhbmtzIGZvciB5b3VyIHJldmlldy4gSSBkaWQgdGFrZSBjb21taXQgZDZiOGIw MmEyN2IzIGFzIGEgcmVmZXJlbmNlLgpMaW5rOiBodHRwczovL2xvcmUua2VybmVsLm9yZy8yMDI2 MDUyNTE2MjI1Ni44MzE3LTEtc2pAa2VybmVsLm9yZwoKVGhhbmtzCkppYWxlCgoKCgoKCgoKCgpB dCAyMDI2LTA3LTIzIDA4OjQyOjQ5LCAiU0ogUGFyayIgPHNqQGtlcm5lbC5vcmc+IHdyb3RlOgo+ T24gV2VkLCAyMiBKdWwgMjAyNiAxMzo1MDowNSArMDEwMCAiTG9yZW56byBTdG9ha2VzIChBUk0p IiA8bGpzQGtlcm5lbC5vcmc+IHdyb3RlOgo+Cj4+IE5vb29vbyA6KSB0aGlzIGlzIG5vdCBob3cg eW91IHNlbmQgcGF0Y2hlcy4KPj4gCj4+IEFsc28geW91IHNob3VsZCBfcmVwbHlfIHRvIHJldmll dyBjb21tZW50cywgbm90IGp1c3Qgc2VuZCBhbm90aGVyIHBhdGNoIHdpdGggbm8KPj4gcmVwbHku IENvbW1zIGlzIGtpbmcuCj4+IAo+PiBBbHNvIC0gZG9uJ3QgcmVzcGluIHNvIHF1aWNrLiBXYWl0 IGEgZGF5Lgo+PiAKPj4gVGhlbiBzZW5kIGEgdjIsIE5PVCBpbiByZXBseSB0byBhbnl0aGluZy4K Pj4gCj4+IFJlYWxseSBiZXN0IHdheSBpcyB0byB1c2UgYjQsIGRvY3MgYXQKPj4gaHR0cHM6Ly9i NC5kb2NzLmtlcm5lbC5vcmcvZW4vbGF0ZXN0L2NvbnRyaWJ1dG9yL3ByZXAuaHRtbCBhbmQgZXRj Lgo+PiAKPj4gQnV0IHlvdSBjYW4gYWxzbyBkbyBzb21ldGhpbmcgbGlrZToKPj4gCj4+IGdpdCBm b3JtYXQtcGF0Y2ggLXYyIEh

Re: [PATCH v2] soc: ti: wkup_m3_ipc: Remove redundant dev_err()

Pan Chuang writes:

[PATCH v6 5/6] arm64: dts: qcom: mahua: Replace pcie3a/pcie3_phy w ...

Qiang Yu writes: (Summary) +&gcc { + clocks = <&rpmhcc RPMH_CXO_CLK>, /* Board XO source */ + <&rpmhcc RPMH_CXO_CLK_A>, /* Board XO_A source */ + <&sleep_clk>, /* Sleep */ + <0>, /* USB 0 Phy DP0 GMUX */ + <0>, /* USB 0 Phy DP1 GMUX */ + <0>, /* USB 0 Phy PCIE PIPEGMUX */ + <0>, /* USB 0 Phy PIPEGMUX */ + <0>, /* USB 0 Phy SYS PCIE PIPEGMUX */ + <0>, /* USB 1 Phy DP0 GMUX 2 */ + <0>, /* USB 1 Phy DP1 GMUX 2 */ + <0>, /* USB 1 Phy PCIE PIPEGMUX */ + <0>, /* USB 1 Phy PIPEGMUX */ + <0>, /* USB 1 Phy SYS PCIE PIPEGMUX */ + <0>, /* USB 2 Phy DP0 GMUX 2 */ + <0>, /* USB 2 Phy DP1 GMUX 2 */ + <0>, /* USB 2 Phy PCIE PIPEGMUX */ + <0>, /* USB 2 Phy PIPEGMUX */ + <0>, /* USB 2 Phy SYS PCIE PIPEGMUX */ + <0>, /* PCIe 3a pipe */ + <&pcie3b_phy>, /* PCIe 3b pipe */ + <&pcie4_phy>, /* PCIe 4 */ + <&am

[PATCH v6 4/6] arm64: dts: qcom: glymur-crd: Add PHY supplies for ...

Qiang Yu writes: (Summary) CRD wires the shared Gen5x8 PCIe PHY's regulator supplies through board-specific PMIC rails. 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/arch/arm64/boot/dts/qcom/glymur-crd.dts b/arch/arm64/boot/dts/qcom/glymur-crd.dts index 6125617de82a..0aae613a33ad 100644 --- a/arch/arm64/boot/dts/qcom/glymur-crd.dts +++ b/arch/arm64/boot/dts/qcom/glymur-crd.dts @@ -28,3 +28,11 @@ &mdss_dp1 { &mdss_dp1_out { link-frequencies = /bits/ 64 <1620000000 2700000000 5400000000 8100000000>; + +&pcie3_phy { + vdda-phy-supply = <&vreg_l3c_e1_0p89>;

[PATCH v6 6/6] arm64: dts: qcom: mahua-crd: Add PHY supplies for p ...

Qiang Yu writes: (Summary) Mahua CRD wires the dedicated PCIe3b PHY's regulator supplies through board-specific PMIC rails. 5 +++++ 1 file changed, 5 insertions(+) diff --git a/arch/arm64/boot/dts/qcom/mahua-crd.dts b/arch/arm64/boot/dts/qcom/mahua-crd.dts index 9c8244e892dd..c56f0ab71f4f 100644 --- a/arch/arm64/boot/dts/qcom/mahua-crd.dts +++ b/arch/arm64/boot/dts/qcom/mahua-crd.dts @@ -19,3 +19,8 @@ / { model = "Qualcomm Technologies, Inc. + +&pcie3b_phy { + vdda-phy-supply = <&vreg_l3c_e1_0p89>;

[PATCH v6 2/6] phy: qcom: qmp-pcie: Add QMP PCIe Multi-PHY driver

Qiang Yu writes: (Summary) + +static const struct qmp_phy_cfg glymur_qmp_gen5x4_pciephy_a_cfg = { + .offsets = &glymur_pcie_offsets_v8_50, + .reg_names = glymur_pciephy_a_reg_l, + .num_regs = ARRAY_SIZE(glymur_pciephy_a_reg_l), + .pd_names = glymur_pciephy_a_pd_l, + .num_pds = ARRAY_SIZE(glymur_pciephy_a_pd_l), + .nocsr_reset_list = glymur_pciephy_a_nocsr_reset_l, + .num_nocsr_resets = ARRAY_SIZE(glymur_pciephy_a_nocsr_reset_l), + .vreg_list = glymur_vreg_l, + .num_vregs = ARRAY_SIZE(glymur_vreg_l), + .regs = pciephy_v8_50_regs_layout, + .phy_status = PHYSTATUS_4_20, + .pipe_clk_list = glymur_pciephy_pipeclk_l, + .num_pipe_clks = ARRAY_SIZE(glymur_pciephy_pipeclk_l), + .clk_list = glymur_pciephy_a_clk_l, + .num_clks = ARRAY_SIZE(glymur_pciephy_a_clk_l), +};

[PATCH v6 1/6] dt-bindings: phy: qcom: Add Glymur QMP PCIe multipl ...

Qiang Yu writes: (Summary) + +properties: + compatible: + enum: + - qcom,glymur-qmp-gen5x8-pcie-phy + + reg: + maxItems: 2 + + reg-names: + items: + - const: port_a + - const: port_b + + clocks: + maxItems: 10 + + clock-names: + items: + - const: aux + - const: cfg_ahb + - const: ref + - const: rchng + - const: pipe + - const: phy_b_aux + - const: cfg_ahb_b + - const: rchng_b + - const: pipe_b + - const: pipediv2_b + + power-domains: + maxItems: 2 + + power-domain-names: + items: + - const: port_a + - const: port_b + + resets: + maxItems: 4 + + reset-names: + items: + - const: port_a + - const: port_a_nocsr + - const: port_b + - const: port_b_nocsr + + vdda-phy-supply: true + + vdda-pll-supply: true + + vdda-refgen0p9-supply: true + + vdda-refgen1p2-supply: true + + qcom,link-mode: + description: + Reference to a register in the TCSR syscon that reports the link + mode the PCIe PHY is cur

Re: [syzbot] [bpf?] [sctp?] [tipc?] INFO: rcu detected stall in so ...

Hillf Danton writes: (Summary) C reproducer: https://syzkaller.appspot.com/x/repro.c?x=15ba2ab9580000 #syz test
#syz test
--- x/net/tipc/socket.c +++ y/net/tipc/socket.c @@ -2489,7 +2489,10 @@ void tipc_sk_rcv(struct net *net, struct struct tipc_sock *tsk; + static int nogo = 0; @@ -2498,7 +2501,9 @@ void tipc_sk_rcv(struct net *net, struct if (likely(tsk)) { sk = &tsk->sk; if (likely(spin_trylock_bh(&sk->sk_lock.slock))) { + nogo = 1; + nogo = 0;

[PATCH] Input: charlieplex_keypad - check gpiod_direction_output() ...

kr494167@gmail ... writes: (Summary) on I2C/SPI GPIO expanders or hardware errors), the function continues to sleep and read input values from an improperly configured GPIO line.
from an improperly configured GPIO line.
Fix this by capturing the return value of gpiod_direction_output() and returning the error code immediately if it fails.
returning the error code immediately if it fails.
Fixes: 2ca45e57ea02 ("Input: charlieplex_keypad - add GPIO charlieplex keypad") Signed-off-by: Surendra Singh Chouhan <kr494167@gmail.com>

[PATCH v6 3/6] arm64: dts: qcom: glymur: Wire PCIe3a/3b to shared ...

Qiang Yu writes: (Summary) + + clocks = <&gcc GCC_PCIE_PHY_3A_AUX_CLK>, + <&gcc GCC_PCIE_3A_CFG_AHB_CLK>, + <&tcsr TCSR_PCIE_3_CLKREF_EN>, + <&gcc GCC_PCIE_3A_PHY_RCHNG_CLK>, + <&gcc GCC_PCIE_3A_PIPE_CLK>, + <&gcc GCC_PCIE_PHY_3B_AUX_CLK>, + <&gcc GCC_PCIE_3B_CFG_AHB_CLK>, + <&gcc GCC_PCIE_3B_PHY_RCHNG_CLK>, + <&gcc GCC_PCIE_3B_PIPE_CLK>, + <&gcc GCC_PCIE_3B_PIPE_DIV2_CLK>; + + interrupts = <GIC_SPI 948 IRQ_TYPE_LEVEL_HIGH>, + <GIC_SPI 949 IRQ_TYPE_LEVEL_HIGH>, + <GIC_SPI 844 IRQ_TYPE_LEVEL_HIGH>, + <GIC_SPI 845 IRQ_TYPE_LEVEL_HIGH>, + <GIC_SPI 194 IRQ_TYPE_LEVEL_HIGH>, + <GIC_SPI 202 IRQ_TYPE_LEVEL_HIGH>, + <GIC_SPI 846 IRQ_TYPE_LEVEL_HIGH>, + <GIC_SPI 847 IRQ_TYPE_LEVEL_HIGH>, + <GIC_SPI 942 IRQ_TYPE_LEVEL_HIGH>;

[PATCH net] tipc: validate Gap ACK blocks header before parsing

Sangho Lee writes: (Summary) Replaying an established peer's STATE_MSG with its message size reduced from 44 to 40 bytes produced:
size reduced from 44 to 40 bytes produced:
BUG: KMSAN: uninit-value in tipc_get_gap_ack_blks
tipc_get_gap_ack_blks
tipc_bcast_sync_rcv
tipc_node_bc_sync_rcv
tipc_rcv
tipc_l2_rcv_msg
tipc_l2_rcv_msg
Uninit was created at:
__alloc_skb
alloc_skb_with_frags
sock_alloc_send_pskb
packet_sendmsg
packet_sendmsg
The uninitialized record length then reached tipc_bcast_sync_rcv(), where it was used to decide whether the STATE_MSG should be dropped.

[PATCH v6 0/6] Add QMP PCIe multiple link-mode PHY support

Qiang Yu writes: (Summary) Cc: linux-arm-msm@vger.kernel.org Cc: linux-phy@lists.infradead.org Cc: devicetree@vger.kernel.org Cc: linux-kernel@vger.kernel.org --- Qiang Yu (6): dt-bindings: phy: qcom: Add Glymur QMP PCIe multiple link-mode PHY phy: qcom: qmp-pcie: Add QMP PCIe Multi-PHY driver arm64: dts: qcom: glymur: Wire PCIe3a/3b to shared Gen5x8 PHY arm64: dts: qcom: glymur-crd: Add PHY supplies for pcie3_phy arm64: dts: qcom: mahua: Replace pcie3a/pcie3_phy with dedicated pcie3b_phy arm64: dts: qcom: mahua-crd: Add PHY supplies for pcie3b_phy .../phy/qcom,glymur-qmp-gen5x8-pcie-phy.yaml |