From: Linus Torvalds <torvalds@linux-foundation.org>
Date: Fri, 28 Jul 2023 17:15:44 +0000 (-0700)
Subject: Merge tag 'for-linus-iommufd' of git://git.kernel.org/pub/scm/linux/kernel/git/jgg... 
X-Git-Tag: v6.6.7~2287
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=0299a13af0be43f2679047c7236e3a58e587f3f8;p=platform%2Fkernel%2Flinux-starfive.git

Merge tag 'for-linus-iommufd' of git://git./linux/kernel/git/jgg/iommufd

Pull iommufd fixes from Jason Gunthorpe:
 "Two user triggerable problems:

   - Syzkaller found a way to trigger a WARN_ON and leak memory by
     racing destroy with other actions

   - There is still a bug in the "batch carry" stuff that gets invoked
     for complex cases with accesses and unmapping of huge pages. The
     test suite found this (triggers rarely)"

* tag 'for-linus-iommufd' of git://git.kernel.org/pub/scm/linux/kernel/git/jgg/iommufd:
  iommufd: Set end correctly when doing batch carry
  iommufd: IOMMUFD_DESTROY should not increase the refcount
---

0299a13af0be43f2679047c7236e3a58e587f3f8