[GIT PULL for v7.1] vfs fixes

[GIT PULL for v7.1] vfs fixes

[Christian Brauner]

Hey Linus,

/* Summary */

- eventpoll: fix ep_remove() UAF and follow-up cleanup

- fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error

- writeback: Fix use after free in inode_switch_wbs_work_fn()

- fuse: reject oversized dirents in page cache

- fs: aio: reject partial mremap to avoid Null-pointer-dereference error

- nstree: fix func. parameter kernel-doc warnings

- fs: Handle multiply claimed blocks more gracefully with mmb

/* Conflicts */

Merge conflicts with mainline
=============================

No known conflicts.

Merge conflicts with other trees
================================

No known conflicts.

The following changes since commit d60bc140158342716e13ff0f8aa65642f43ba053:

  Merge tag 'pwrseq-updates-for-v7.1-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux (2026-04-13 20:28:22 -0700)

are available in the Git repository at:

  git@gitolite.kernel.org:pub/scm/linux/kernel/git/vfs/vfs tags/vfs-7.1-rc1.fixes

for you to fetch changes up to ac8777cc36224b4705d2c6efb10c56135d479b21:

  Merge patch series "eventpoll: fix ep_remove() UAF and follow-up cleanup" (2026-04-24 00:37:04 +0200)

----------------------------------------------------------------
vfs-7.1-rc1.fixes

Please consider pulling these changes from the signed vfs-7.1-rc1.fixes tag.

Thanks!
Christian

----------------------------------------------------------------
Christian Brauner (12):
      eventpoll: use hlist_is_singular_node() in __ep_remove()
      eventpoll: split __ep_remove()
      eventpoll: kill __ep_remove()
      eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}()
      eventpoll: rename ep_remove_safe() back to ep_remove()
      eventpoll: move epi_fget() up
      eventpoll: fix ep_remove struct eventpoll / struct file UAF
      eventpoll: move f_lock acquisition into ep_remove_file()
      eventpoll: refresh eventpoll_release() fast-path comment
      eventpoll: drop dead bool return from ep_remove_epi()
      eventpoll: drop vestigial epi->dying flag
      Merge patch series "eventpoll: fix ep_remove() UAF and follow-up cleanup"

Jan Kara (2):
      writeback: Fix use after free in inode_switch_wbs_work_fn()
      fs: Handle multiply claimed blocks more gracefully with mmb

Randy Dunlap (1):
      nstree: fix func. parameter kernel-doc warnings

Samuel Page (1):
      fuse: reject oversized dirents in page cache

Zizhi Wo (2):
      fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error
      fs: aio: reject partial mremap to avoid Null-pointer-dereference error

 fs/aio.c                  |   5 +-
 fs/buffer.c               |   9 ++-
 fs/eventpoll.c            | 158 +++++++++++++++++++++++-----------------------
 fs/fs-writeback.c         |  36 ++++++-----
 fs/fuse/readdir.c         |   4 ++
 include/linux/eventpoll.h |  16 +++--
 include/linux/nstree.h    |   6 +-
 7 files changed, 125 insertions(+), 109 deletions(-)

Re: [GIT PULL for v7.1] vfs fixes

[pr-tracker-bot]

The pull request you sent on Fri, 24 Apr 2026 00:46:49 +0200:

> git@gitolite.kernel.org:pub/scm/linux/kernel/git/vfs/vfs tags/vfs-7.1-rc1.fixes

has been merged into torvalds/linux.git:
https://git.kernel.org/torvalds/c/dd6c438c3e64a5ff0b5d7e78f7f9be547803ef1b

Thank you!

-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/prtracker.html

[GIT PULL for v7.1] vfs fixes

[Christian Brauner]

Hey Linus,

/* Summary */

This contains a fixes for the current development cycle. Note that AI
related review sometimes delays fixes a bit because we find more fixes
for the fixes. I might try and send smaller but more fixes PRs if this
trend keeps up.

- Fix various netfslib bugs

- Fix an out-of-bounds write when listing idmappings.

- Fix the return values in jfs_mkdir() and orangefs_mkdir().

- Fix a writeback writeback array overflow in fuse.

- Fix a forced iversion increment on lazytime timestamp updates

- Reject a negative timeval component in kern_select().

- Fix error return when vfs_mkdir() fails in the cachefiles code.

- Fix wrong error code returned for pidns ioctls.

/* Conflicts */

Merge conflicts with mainline
=============================

No known conflicts.

Merge conflicts with other trees
================================

No known conflicts.

The following changes since commit 5d6919055dec134de3c40167a490f33c74c12581:

  Linux 7.1-rc3 (2026-05-10 14:08:09 -0700)

are available in the Git repository at:

  git@gitolite.kernel.org:pub/scm/linux/kernel/git/vfs/vfs tags/vfs-7.1-rc5.fixes

for you to fetch changes up to 8a220d1c312c66194f4a33dd52d1fba42bc2b341:

  cachefiles: Fix error return when vfs_mkdir() fails (2026-05-15 15:32:43 +0200)

----------------------------------------------------------------
vfs-7.1-rc5.fixes

Please consider pulling these changes from the signed vfs-7.1-rc5.fixes tag.

Thanks!
Christian

----------------------------------------------------------------
Breno Leitao (1):
      fs/select: reject negative timeval components in kern_select()

Christian Brauner (1):
      Merge patch series "netfs: Miscellaneous fixes"

David Howells (22):
      netfs: Fix cancellation of a DIO and single read subrequests
      netfs: Fix missing locking around retry adding new subreqs
      netfs: Fix missing barriers when accessing stream->subrequests locklessly
      netfs: Fix netfs_read_to_pagecache() to pause on subreq failure
      netfs: Fix potential for tearing in ->remote_i_size and ->zero_point
      netfs: Fix zeropoint update where i_size > remote_i_size
      netfs: Fix potential uninitialised var in netfs_extract_user_iter()
      netfs: Fix overrun check in netfs_extract_user_iter()
      netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone
      netfs: Defer the emission of trace_netfs_folio()
      netfs: Fix streaming write being overwritten
      netfs: Fix potential deadlock in write-through mode
      netfs: Fix read-gaps to remove netfs_folio from filled folio
      netfs: Fix write streaming disablement if fd open O_RDWR
      netfs: Fix early put of sink folio in netfs_read_gaps()
      netfs: Fix leak of request in netfs_write_begin() error handling
      netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()
      netfs: Fix partial invalidation of streaming-write folio
      netfs: Fix folio->private handling in netfs_perform_write()
      netfs: Fix netfs_read_folio() to wait on writeback
      netfs, afs: Fix write skipping in dir/link writepages
      afs: Fix the locking used by afs_get_link()

Hongling Zeng (2):
      fs: Fix return in jfs_mkdir and orangefs_mkdir
      cachefiles: Fix error return when vfs_mkdir() fails

Junxi Qian (1):
      fuse: fix writeback array overflow when max_pages is one

Junyoung Jang (1):
      fs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap

Pankaj Raghav (1):
      fs: fix forced iversion increment on lazytime timestamp updates

Paulo Alcantara (1):
      netfs: fix error handling in netfs_extract_user_iter()

Viacheslav Dubeyko (1):
      netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call

Zhihao Cheng (1):
      nsfs: fix wrong error code returned for pidns ioctls

 fs/9p/v9fs_vfs.h             |  13 --
 fs/9p/vfs_inode.c            |   6 +-
 fs/9p/vfs_inode_dotl.c       |  12 +-
 fs/afs/Makefile              |   1 +
 fs/afs/dir.c                 |  79 +++++++-----
 fs/afs/file.c                |  24 +++-
 fs/afs/fsclient.c            |   4 +-
 fs/afs/inode.c               | 127 ++++---------------
 fs/afs/internal.h            |  45 ++++---
 fs/afs/symlink.c             | 278 ++++++++++++++++++++++++++++++++++++++++
 fs/afs/validation.c          |  14 +-
 fs/afs/write.c               |   2 +-
 fs/afs/yfsclient.c           |   4 +-
 fs/cachefiles/namei.c        |   2 +
 fs/fuse/file.c               |   5 +-
 fs/inode.c                   |   8 +-
 fs/jfs/namei.c               |   2 +-
 fs/mnt_idmapping.c           |   2 +
 fs/netfs/buffered_read.c     |  73 ++++++-----
 fs/netfs/buffered_write.c    | 174 ++++++++++++++++---------
 fs/netfs/direct_read.c       |  42 ++----
 fs/netfs/direct_write.c      |   6 +-
 fs/netfs/internal.h          |   3 +
 fs/netfs/iterator.c          |  41 ++++--
 fs/netfs/misc.c              |  41 ++++--
 fs/netfs/read_collect.c      |  19 ++-
 fs/netfs/read_retry.c        |  17 ++-
 fs/netfs/read_single.c       |  23 ++--
 fs/netfs/write_collect.c     |  15 ++-
 fs/netfs/write_issue.c       |  49 ++++---
 fs/netfs/write_retry.c       |   6 +-
 fs/nsfs.c                    |   2 +-
 fs/orangefs/namei.c          |   2 +-
 fs/select.c                  |  11 ++
 fs/smb/client/cifsfs.c       |  38 ++++--
 fs/smb/client/cifssmb.c      |   3 +-
 fs/smb/client/file.c         |  13 +-
 fs/smb/client/inode.c        |  14 +-
 fs/smb/client/readdir.c      |   3 +-
 fs/smb/client/smb2ops.c      |  42 +++---
 fs/smb/client/smb2pdu.c      |   3 +-
 include/linux/list.h         |  37 ++++++
 include/linux/netfs.h        | 295 +++++++++++++++++++++++++++++++++++++++++--
 include/trace/events/netfs.h |   8 ++
 44 files changed, 1171 insertions(+), 437 deletions(-)
 create mode 100644 fs/afs/symlink.c

Re: [GIT PULL for v7.1] vfs fixes

[pr-tracker-bot]

The pull request you sent on Mon, 18 May 2026 09:35:59 +0200:

> git@gitolite.kernel.org:pub/scm/linux/kernel/git/vfs/vfs tags/vfs-7.1-rc5.fixes

has been merged into torvalds/linux.git:
https://git.kernel.org/torvalds/c/5dfa01ef37a8b944773aef8dee747cd76dec4234

Thank you!

-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/prtracker.html

Re: [GIT PULL for v7.1] vfs fixes

[Nathan Chancellor]

On Mon, May 18, 2026 at 09:35:59AM +0200, Christian Brauner wrote:
> David Howells (22):
>       netfs: Fix potential for tearing in ->remote_i_size and ->zero_point
...
>  fs/smb/client/cifsfs.c       |  38 ++++--

The changes in this file from that patch breaks the build with clang:

  fs/smb/client/cifsfs.c:1390:29: error: variable 'old_size' is uninitialized when used here [-Werror,-Wuninitialized]
   1390 |                 if (rc == 0 && new_size > old_size) {
        |                                           ^~~~~~~~
  fs/smb/client/cifsfs.c:1307:37: note: initialize the variable 'old_size' to silence this warning
   1307 |         unsigned long long i_size, old_size, new_size, zero_point;
        |                                            ^
        |                                             = 0
  fs/smb/client/cifsfs.c:1375:13: error: variable 'zero_point' is uninitialized when used here [-Werror,-Wuninitialized]
   1375 |         if (fend > zero_point)
        |                    ^~~~~~~~~~
  fs/smb/client/cifsfs.c:1307:59: note: initialize the variable 'zero_point' to silence this warning
   1307 |         unsigned long long i_size, old_size, new_size, zero_point;
        |                                                                  ^
        |                                                                   = 0
  2 errors generated.

There were no -next updates last week, so it seems like the majority of
this pull request saw zero -next testing time. I see two kbuild test
robot build reports but I guess they were ignored.

  https://lore.kernel.org/202605031459.eX5UbO3K-lkp@intel.com/
  https://lore.kernel.org/202605021450.ca5QGqLH-lkp@intel.com/

-- 
Cheers,
Nathan

Re: [GIT PULL for v7.1] vfs fixes

[David Howells]

Nathan Chancellor <nathan@kernel.org> wrote:

> > David Howells (22):
> >       netfs: Fix potential for tearing in ->remote_i_size and ->zero_point
> ...
> >  fs/smb/client/cifsfs.c       |  38 ++++--
> 
> The changes in this file from that patch breaks the build with clang:
> 
>   fs/smb/client/cifsfs.c:1390:29: error: variable 'old_size' is uninitialized when used here [-Werror,-Wuninitialized]
>    1390 |                 if (rc == 0 && new_size > old_size) {
>         |                                           ^~~~~~~~
>   fs/smb/client/cifsfs.c:1307:37: note: initialize the variable 'old_size' to silence this warning
>    1307 |         unsigned long long i_size, old_size, new_size, zero_point;
>         |                                            ^
>         |                                             = 0
>   fs/smb/client/cifsfs.c:1375:13: error: variable 'zero_point' is uninitialized when used here [-Werror,-Wuninitialized]
>    1375 |         if (fend > zero_point)
>         |                    ^~~~~~~~~~
>   fs/smb/client/cifsfs.c:1307:59: note: initialize the variable 'zero_point' to silence this warning
>    1307 |         unsigned long long i_size, old_size, new_size, zero_point;
>         |                                                                  ^
>         |                                                                   = 0
>   2 errors generated.

For some reason, make W=1 with gcc doesn't seem to generate uninitialised
variable warnings (though maybe clang does?).  Is that specifically
suppressed?

	ifdef CONFIG_CC_IS_GCC
	KBUILD_CFLAGS += -Wno-maybe-uninitialized
	endif

I guess.  Can we remove that?

> There were no -next updates last week, so it seems like the majority of
> this pull request saw zero -next testing time. I see two kbuild test
> robot build reports but I guess they were ignored.
> 
>   https://lore.kernel.org/202605031459.eX5UbO3K-lkp@intel.com/
>   https://lore.kernel.org/202605021450.ca5QGqLH-lkp@intel.com/

Gmail labelled them as spam :-(

I think this should be fixed as below, but Steve needs to look it over.

David
---
commit dd962b95985a8b5bc564c5c4f6c48edbc2cbc02d
Author: David Howells <dhowells@redhat.com>
Date:   Mon May 18 21:45:45 2026 +0100

    cifs: Fix undefined variables
    
    Fix a couple of undefined variables introduced by the patch to fix tearing
    on ->remote_i_size and ->zero_point.  For some reason, make W=1 with gcc
    doesn't give undefined variable warnings (but clang does).
    
    Fixes: 2c8f4742bb76 ("netfs: Fix potential for tearing in ->remote_i_size and ->zero_point")
    Reported-by: kernel test robot <lkp@intel.com>
    Closes: https://lore.kernel.org/oe-kbuild-all/202605031459.eX5UbO3K-lkp@intel.com/
    Closes: https://lore.kernel.org/oe-kbuild-all/202605021450.ca5QGqLH-lkp@intel.com/
    cc: Steve French <sfrench@samba.org>
    cc: Paulo Alcantara <pc@manguebit.org>
    cc: Matthew Wilcox <willy@infradead.org>
    cc: Christian Brauner <brauner@kernel.org>
    cc: linux-cifs@vger.kernel.org
    cc: netfs@lists.linux.dev
    cc: linux-fsdevel@vger.kernel.org

diff --git a/fs/smb/client/cifsfs.c b/fs/smb/client/cifsfs.c
index feac491c5070..f557eb7875c7 100644
--- a/fs/smb/client/cifsfs.c
+++ b/fs/smb/client/cifsfs.c
@@ -1304,7 +1304,7 @@ static loff_t cifs_remap_file_range(struct file *src_file, loff_t off,
 	struct cifsFileInfo *smb_file_src = src_file->private_data;
 	struct cifsFileInfo *smb_file_target = dst_file->private_data;
 	struct cifs_tcon *target_tcon, *src_tcon;
-	unsigned long long i_size, old_size, new_size, zero_point;
+	unsigned long long i_size, new_size;
 	unsigned long long destend, fstart, fend;
 	unsigned int xid;
 	int rc;
@@ -1372,7 +1372,7 @@ static loff_t cifs_remap_file_range(struct file *src_file, loff_t off,
 		goto unlock;
 
 	spin_lock(&target_inode->i_lock);
-	if (fend > zero_point)
+	if (fend > target_cifsi->netfs._zero_point)
 		netfs_write_zero_point(target_inode, fend + 1);
 	i_size = target_inode->i_size;
 	spin_unlock(&target_inode->i_lock);
@@ -1387,7 +1387,7 @@ static loff_t cifs_remap_file_range(struct file *src_file, loff_t off,
 	if (target_tcon->ses->server->ops->duplicate_extents) {
 		rc = target_tcon->ses->server->ops->duplicate_extents(xid,
 			smb_file_src, smb_file_target, off, len, destoff);
-		if (rc == 0 && new_size > old_size) {
+		if (rc == 0 && new_size > i_size) {
 			truncate_setsize(target_inode, new_size);
 			fscache_resize_cookie(cifs_inode_cookie(target_inode),
 					      new_size);

Re: [GIT PULL for v7.1] vfs fixes

[Nathan Chancellor]

On Mon, May 18, 2026 at 10:05:00PM +0100, David Howells wrote:
> Nathan Chancellor <nathan@kernel.org> wrote:
> 
> > > David Howells (22):
> > >       netfs: Fix potential for tearing in ->remote_i_size and ->zero_point
> > ...
> > >  fs/smb/client/cifsfs.c       |  38 ++++--
> > 
> > The changes in this file from that patch breaks the build with clang:
> > 
> >   fs/smb/client/cifsfs.c:1390:29: error: variable 'old_size' is uninitialized when used here [-Werror,-Wuninitialized]
> >    1390 |                 if (rc == 0 && new_size > old_size) {
> >         |                                           ^~~~~~~~
> >   fs/smb/client/cifsfs.c:1307:37: note: initialize the variable 'old_size' to silence this warning
> >    1307 |         unsigned long long i_size, old_size, new_size, zero_point;
> >         |                                            ^
> >         |                                             = 0
> >   fs/smb/client/cifsfs.c:1375:13: error: variable 'zero_point' is uninitialized when used here [-Werror,-Wuninitialized]
> >    1375 |         if (fend > zero_point)
> >         |                    ^~~~~~~~~~
> >   fs/smb/client/cifsfs.c:1307:59: note: initialize the variable 'zero_point' to silence this warning
> >    1307 |         unsigned long long i_size, old_size, new_size, zero_point;
> >         |                                                                  ^
> >         |                                                                   = 0
> >   2 errors generated.
> 
> For some reason, make W=1 with gcc doesn't seem to generate uninitialised
> variable warnings (though maybe clang does?).  Is that specifically
> suppressed?
> 
> 	ifdef CONFIG_CC_IS_GCC
> 	KBUILD_CFLAGS += -Wno-maybe-uninitialized
> 	endif

Yeah, clang's -Wuninitialized and -Wsometimes-uninitialized are on by
default (not just at W=1) for the kernel, whereas GCC's
-Wmaybe-uninitialized has been under W=2 since 78a5255ffb6a ("Stop the
ad-hoc games with -Wno-maybe-initialized") back in 5.7.

I consider this an unfortunate difference between GCC and clang with
regards to -Wuninitialized. If there is any control flow that would
avoid the block that uses the variable uninitialized, GCC "downgrades"
it to -Wmaybe-uninitialized, whereas clang keeps it as -Wuninitialized
with a note of "when used here" to make it clear that the variable will
be used uninitialized if the block is reached:

  https://godbolt.org/z/6eb5zK76T

> I guess.  Can we remove that?

It would be nice for my sanity if it could be but then we are back into
the same situation of false positives, as GCC's warnings are influenced
by optimizations, whereas clang's warnings happen purely in the frontend
before optimizations happen. clang's versions do not flag as many
instances of potentially uninitialized variables (as it cannot do
interprocedural analysis to see across function boundaries) but that
results in much fewer false positives in my experience.

> > There were no -next updates last week, so it seems like the majority of
> > this pull request saw zero -next testing time. I see two kbuild test
> > robot build reports but I guess they were ignored.
> > 
> >   https://lore.kernel.org/202605031459.eX5UbO3K-lkp@intel.com/
> >   https://lore.kernel.org/202605021450.ca5QGqLH-lkp@intel.com/
> 
> Gmail labelled them as spam :-(

Bummer :/

> I think this should be fixed as below, but Steve needs to look it over.

Thanks, I will give it a build test but it seems obvious that it will
fix it.

-- 
Cheers,
Nathan

[GIT PULL for v7.1] vfs fixes

[Christian Brauner]

Hey Linus,

/* Summary */

This contains a fixes for the current development cycle:

- Fix error handling in ovl_cache_get().

- Tighten access checks for exited tasks in pidfd_getfd().

- Fix selftests leak in __wait_for_test().

- Limit FUSE_NOTIFY_RETRIEVE to uptodate folios.

- Reject fuse_notify() pagecache ops on directories.

- Clear JOBCTL_PENDING_MASK for caller in zap_other_threads().

- Fix failure to unlock in nfsd4_create_file().

- Fix pointer arithmetic in qnx6 directory iteration.

- Fix UAF due to unlocked ->mnt_ns read in may_decode_fh().

- Avoid potential null folio->mapping deref during iomap error reporting.

/* Conflicts */

Merge conflicts with mainline
=============================

No known conflicts.

Merge conflicts with other trees
================================

No known conflicts.

The following changes since commit 8a220d1c312c66194f4a33dd52d1fba42bc2b341:

  cachefiles: Fix error return when vfs_mkdir() fails (2026-05-15 15:32:43 +0200)

are available in the Git repository at:

  git@gitolite.kernel.org:pub/scm/linux/kernel/git/vfs/vfs tags/vfs-7.1-rc7.fixes

for you to fetch changes up to 2eea7f44b9c8b42fd7d3a1a87c06a7cd1b99c327:

  iomap: avoid potential null folio->mapping deref during error reporting (2026-06-04 10:02:56 +0200)

----------------------------------------------------------------
vfs-7.1-rc7.fixes

Please consider pulling these changes from the signed vfs-7.1-rc7.fixes tag.

Thanks!
Christian

----------------------------------------------------------------
Aleksandr Nogikh (1):
      signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()

Arpith Kalaginanavoor (1):
      fs/qnx6: fix pointer arithmetic in directory iteration

Christian Brauner (1):
      pidfd: refuse access to tasks that have started exiting harder

Geliang Tang (1):
      selftests: harness: fix pidfd leak in __wait_for_test

Jann Horn (3):
      fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios
      fuse: reject fuse_notify() pagecache ops on directories
      fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh()

Joanne Koong (1):
      iomap: avoid potential null folio->mapping deref during error reporting

NeilBrown (1):
      VFS: fix possible failure to unlock in nfsd4_create_file()

Nirmoy Das (1):
      ovl: keep err zero after successful ovl_cache_get()

 fs/fhandle.c                                | 16 ++++++++++++++--
 fs/fuse/dev.c                               | 13 ++++++++++++-
 fs/iomap/buffered-io.c                      | 10 +++++-----
 fs/mount.h                                  | 10 +++++++++-
 fs/namei.c                                  | 10 ++++++++++
 fs/namespace.c                              |  6 +++---
 fs/overlayfs/readdir.c                      |  7 +++----
 fs/qnx6/dir.c                               |  8 ++++----
 kernel/pid.c                                |  8 +++++---
 kernel/signal.c                             |  1 +
 tools/testing/selftests/kselftest_harness.h |  1 +
 11 files changed, 67 insertions(+), 23 deletions(-)

Re: [GIT PULL for v7.1] vfs fixes

[pr-tracker-bot]

The pull request you sent on Sat,  6 Jun 2026 15:17:34 +0200:

> git@gitolite.kernel.org:pub/scm/linux/kernel/git/vfs/vfs tags/vfs-7.1-rc7.fixes

has been merged into torvalds/linux.git:
https://git.kernel.org/torvalds/c/76351effa53d49114907dc9fd228110c2115292b

Thank you!

-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/prtracker.html