android_kernel_samsung_sm8650

Author	SHA1	Message	Date
Greg Kroah-Hartman	87a4e67740	Merge tag 'android14-6.1.78_r00' into branch android14-6.1 This brings the android14-6.1 branch up to date with the 6.1.78 LTS release. Included in here are the following commits: * `4b97573495` Revert "hrtimer: Report offline hrtimer enqueue" * `0e5af42a0a` Merge 6.1.78 into android14-6.1-lts \|\ \| * `8b4118fabd` Linux 6.1.78 \| * `1296c110c5` netfilter: nft_set_rbtree: skip end interval element from gc \| * `d89a80e482` net: stmmac: xgmac: fix a typo of register name in DPP safety handling \| * `7b430fb924` ALSA: usb-audio: Sort quirk table entries \| * `06040fadbf` net: stmmac: xgmac: use #define for string constants \| * `499e6e9f07` clocksource: Skip watchdog check for large watchdog intervals \| * `492e0aba08` block: treat poll queue enter similarly to timeouts \| * `cf3d57ad6f` f2fs: add helper to check compression level \| * `9f74b3d718` RDMA/irdma: Fix support for 64k pages \| * `4675661672` vhost: use kzalloc() instead of kmalloc() followed by memset() \| * `d8712c6c6a` Revert "ASoC: amd: Add new dmi entries for acp5x platform" \| * `fbd77ce1d1` io_uring/net: fix sr->len for IORING_OP_RECV with MSG_WAITALL and buffers \| * `08249dc3d9` Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID \| * `315075ac73` Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU \| * `a94d303bea` hrtimer: Report offline hrtimer enqueue \| * `8b380ad970` usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK \| * `f2cf6db285` usb: dwc3: host: Set XHCI_SG_TRB_CACHE_SIZE_QUIRK \| * `041cb58f54` USB: serial: cp210x: add ID for IMST iM871A-USB \| * `36ef5b7b4f` USB: serial: option: add Fibocom FM101-GL variant \| * `234099ab7f` USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e \| * `39fbca505f` ALSA: usb-audio: add quirk for RODE NT-USB+ \| * `2552f6b1bd` ALSA: usb-audio: Add a quirk for Yamaha YIT-W12TX transmitter \| * `b8259a5023` ALSA: usb-audio: Add delay quirk for MOTU M Series 2nd revision \| * `82761993d4` mtd: parsers: ofpart: add workaround for #size-cells 0 \| * `b478e414cf` fs: dlm: don't put dlm_local_addrs on heap \| * `e5dc63f01e` blk-iocost: Fix an UBSAN shift-out-of-bounds warning \| * `1ebd75cefa` scsi: core: Move scsi_host_busy() out of host lock if it is for per-command \| * `ec1bedd797` fs/ntfs3: Fix an NULL dereference bug \| * `a442ff5405` netfilter: nft_set_pipapo: remove scratch_aligned pointer \| * `fac3478d5b` netfilter: nft_set_pipapo: add helper to release pcpu scratch area \| * `3eaab7d565` netfilter: nft_set_pipapo: store index in scratch maps \| * `181dade251` netfilter: nft_ct: reject direction for ct id \| * `efdd665ce1` drm/amd/display: Implement bounds check for stream encoder creation in DCN301 \| * `a060da3235` netfilter: nft_compat: restrict match/target protocol to u16 \| * `8762bcc927` netfilter: nft_compat: reject unused compat flag \| * `e79ef7966e` netfilter: nft_compat: narrow down revision to unsigned 8-bits \| * `69d66d493b` selftests: cmsg_ipv6: repeat the exact packet \| * `4e2c4846b2` ppp_async: limit MRU to 64K \| * `e0e09186d8` af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC. \| * `3d3a5b31b4` tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() \| * `cf6b97e183` rxrpc: Fix response to PING RESPONSE ACKs to a dead call \| * `05a4d0e166` drm/i915/gvt: Fix uninitialized variable in handle_mmio() \| * `5453875221` inet: read sk->sk_family once in inet_recv_error() \| * `3fa78ee0e3` hwmon: (coretemp) Fix bogus core_id to attr name mapping \| * `9bce694192` hwmon: (coretemp) Fix out-of-bounds memory access \| * `a3156be201` hwmon: (aspeed-pwm-tacho) mutex for tach reading \| * `4065746686` octeontx2-pf: Fix a memleak otx2_sq_init \| * `cbf2e16602` atm: idt77252: fix a memleak in open_card_ubr0 \| * `e37cde7a57` tunnels: fix out of bounds access when building IPv6 PMTU error \| * `90fe47743a` selftests: net: avoid just another constant wait \| * `7f484179c5` selftests: net: cut more slack for gro fwd tests. \| * `466ceebe48` net: atlantic: Fix DMA mapping for PTP hwts ring \| * `0193e0660c` netdevsim: avoid potential loop in nsim_dev_trap_report_work() \| * `bcabbf8ab5` wifi: mac80211: fix waiting for beacons logic \| * `e42ff0844f` net: stmmac: xgmac: fix handling of DPP safety error for DMA channels \| * `fb8bfc6ea3` drm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup \| * `42939a1ea6` drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case \| * `d2b7e247f3` drm/msms/dp: fixed link clock divider bits be over written in BPC unknown case \| * `cbc53148cc` cifs: failure to add channel on iface should bump up weight \| * `0430bfcd46` phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP \| * `296fb308f4` dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV \| * `ed3bb52a05` phy: renesas: rcar-gen3-usb2: Fix returning wrong error code \| * `25ab4d72eb` dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA \| * `13535ae766` dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA \| * `908939b8e8` dmaengine: ti: k3-udma: Report short packet errors \| * `a1d7ca71ba` dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools \| * `78327acd4c` ext4: regenerate buddy after block freeing failed if under fc replay * \| `19c319d14d` Revert "drm/mipi-dsi: Fix detach call without attach" * \| `20b90d46a0` Merge 6.1.77 into android14-6.1-lts \|\\| \| * `f1bb70486c` Linux 6.1.77 \| * `d78690bb5d` drm/amdgpu: Fix missing error code in 'gmc_v6/7/8/9_0_hw_init()' \| * `f086c50a98` ASoC: codecs: wsa883x: fix PA volume control \| * `ac86261fa8` ASoC: codecs: lpass-wsa-macro: fix compander volume hack \| * `2386ee6cba` bonding: remove print in bond_verify_device_path \| * `e1edd8e6c0` gve: Fix use-after-free vulnerability \| * `9e584ea101` LoongArch/smp: Call rcutree_report_cpu_starting() at tlb_init() \| * `98c392a91a` drm/msm/dsi: Enable runtime PM \| * `befdb0a8a1` Revert "drm/amd/display: Disable PSR-SU on Parade 0803 TCON again" \| * `dc904345e3` mm, kmsan: fix infinite recursion due to RCU critical section \| * `c5a12dfbfa` arm64: irq: set the correct node for shadow call stack \| * `ddd367ebc4` selftests: bonding: Check initial state \| * `7ebe20e632` selftests: team: Add missing config options \| * `aaa8f76845` net: sysfs: Fix /sys/class/net/<iface> path \| * `bea0fbf857` selftests: net: fix available tunnels detection \| * `a2104f4387` af_unix: fix lockdep positive in sk_diag_dump_icons() \| * `fde3d47efe` net: ipv4: fix a memleak in ip_setup_cork \| * `0f501dae16` netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations \| * `9ff981cd65` netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger \| * `67f0ca0a4c` netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV \| * `8a51dbf7b7` netfilter: conntrack: correct window scaling with retransmitted SYN \| * `cd091ca44c` selftests: net: add missing config for GENEVE \| * `04a553d8ac` bridge: mcast: fix disabled snooping after long uptime \| * `9c333d9891` llc: call sock_orphan() at release time \| * `c59ed6592f` ipv6: Ensure natural alignment of const ipv6 loopback and router addresses \| * `2f3d9829f7` net: dsa: qca8k: fix illegal usage of GPIO \| * `1e4c227805` ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() \| * `3b84b7000c` ixgbe: Refactor overtemp event handling \| * `9c8eafc5e9` ixgbe: Refactor returning internal error codes \| * `b383d4ea27` tcp: add sanity checks to rx zerocopy \| * `046260ce7c` net: lan966x: Fix port configuration when using SGMII interface \| * `d2f1b7fe74` ipmr: fix kernel panic when forwarding mcast packets \| * `03dc5b73af` ipv4: raw: add drop reasons \| * `d54e4da98b` ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() \| * `262caadfa9` selftests: net: give more time for GRO aggregation \| * `53e94ec530` HID: hidraw: fix a problem of memory leak in hidraw_release() \| * `db6338f459` scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler \| * `81e92f0c97` regulator: ti-abb: don't use devm_platform_ioremap_resource_byname for shared interrupt register \| * `7eb86ddaf1` scsi: isci: Fix an error code problem in isci_io_request_build() \| * `206dcd2624` drm: using mul_u32_u32() requires linux/math64.h \| * `a2f30104fe` wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update \| * `071d98d5ee` perf: Fix the nr_addr_filters fix \| * `8eea7e1d69` drm/amdkfd: Fix 'node' NULL check in 'svm_range_get_range_boundaries()' \| * `7513f0906c` drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()' \| * `af8e292615` drm/amdgpu: Fix with right return code '-EIO' in 'amdgpu_gmc_vram_checking()' \| * `d282ea0703` drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()' \| * `3fbfeb8536` ceph: fix invalid pointer access if get_quota_realm return ERR_PTR \| * `7f2649c942` ceph: fix deadlock or deadcode of misusing dget() \| * `692ead237d` ceph: reinitialize mds feature bit even when session in open \| * `1d9c777d3e` blk-mq: fix IO hang from sbitmap wakeup race \| * `1f7a018857` virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings \| * `b602f098f7` drm/amdkfd: Fix lock dependency warning with srcu \| * `8b25d39716` drm/amdkfd: Fix lock dependency warning \| * `49a7b708da` libsubcmd: Fix memory leak in uniq() \| * `2c1164ad92` misc: lis3lv02d_i2c: Add missing setting of the reg_ctrl callback \| * `91f1977487` 9p: Fix initialisation of netfs_inode for 9p \| * `fc557b76dc` PCI/AER: Decode Requester ID when no error info found \| * `83c895561a` PCI: Fix 64GT/s effective data rate calculation \| * `521f28eedd` spmi: mediatek: Fix UAF on device remove \| * `089ebfab24` fs/kernfs/dir: obey S_ISGID \| * `c13bcbdb84` tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE \| * `d8d7ffefc0` selftests/sgx: Fix linker script asserts \| * `fa3f6cd20d` usb: hub: Add quirk to decrease IN-ep poll interval for Microchip USB491x hub \| * `9cdf5ddb06` usb: hub: Replace hardcoded quirk value with BIT() macro \| * `4c8ca96124` perf cs-etm: Bump minimum OpenCSD version to ensure a bugfix is present \| * `1d83c85922` PCI: switchtec: Fix stdev_release() crash after surprise hot remove \| * `5e0160dab1` PCI: Only override AMD USB controller if required \| * `26b8a35fef` mailbox: arm_mhuv2: Fix a bug for mhuv2_sender_interrupt \| * `6e8c0eda6c` mfd: ti_am335x_tscadc: Fix TI SoC dependencies \| * `52e7f05549` xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import \| * `e827364bc1` i3c: master: cdns: Update maximum prescaler value for i2c clock \| * `4f7dad73df` um: time-travel: fix time corruption \| * `d8512cc8ac` um: net: Fix return type of uml_net_start_xmit() \| * `d8264ce2f8` um: Don't use vfprintf() for os_info() \| * `a95e52af36` um: Fix naming clash between UML and scheduler \| * `7d1c4e5809` leds: trigger: panic: Don't register panic notifier if creating the trigger failed \| * `2cb659ef0a` ALSA: hda/conexant: Fix headset auto detect fail in cx8070 and SN6140 \| * `05a0900bd7` drm/amdkfd: Fix iterator used outside loop in 'kfd_add_peer_prop()' \| * `34bb1b97c3` drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' \| * `66d38977e2` drm/amdgpu: Fix 'fw' from request_firmware() not released in 'amdgpu_ucode_request()' \| `da08dbb647` drm/amdgpu: Let KFD sync with VM fences \| * `adae24c5b3` drm/amdgpu: Fix ecc irq enable/disable unpaired \| * `aade0a0760` clk: imx: clk-imx8qxp: fix LVDS bypass, pixel and phy clocks \| * `7294b1bbaa` drm/amd/display: make flip_timestamp_in_us a 64-bit variable \| * `c95d2144be` watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786 \| * `ec74a45e80` clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() \| * `14992bc77f` clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() \| * `d443fb67ca` drm/amdgpu: fix ftrace event amdgpu_bo_move always move on same heap \| * `fe7e8ec072` drm/msm/dpu: fix writeback programming for YUV cases \| * `7593e62702` drm/msm/dpu: Ratelimit framedone timeout msgs \| * `fb017c3e6a` drm/amd/display: For prefetch mode > 0, extend prefetch if possible \| * `4ef53b7e30` media: i2c: imx335: Fix hblank min/max values \| * `5008bde32c` media: ddbridge: fix an error code problem in ddb_probe \| * `6408851d05` media: amphion: remove mutext lock in condition of wait_event \| * `5108a2dc2d` IB/ipoib: Fix mcast list locking \| * `fe80290b2a` drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time \| * `7c972c8945` f2fs: fix to tag gcing flag on page during block migration \| * `fb55c3cee6` hwmon: (nct6775) Fix fan speed set failure in automatic mode \| * `bf808f5868` media: rkisp1: Fix IRQ disable race issue \| * `f0d0fe3787` media: rkisp1: Store IRQ lines \| * `fb71b54856` media: rkisp1: Fix IRQ handler return values \| * `1c51b6b0c6` media: rkisp1: Drop IRQF_SHARED \| * `c3f77c5d63` ALSA: hda: Intel: add HDA_ARL PCI ID support \| * `3b28da57d0` PCI: add INTEL_HDA_ARL to pci_ids.h \| * `16786b7090` media: rockchip: rga: fix swizzling for RGB formats \| * `1ef8beb4bf` media: stk1160: Fixed high volume of stk1160_dbg messages \| * `25eaa9f999` drm/mipi-dsi: Fix detach call without attach \| * `f3e41cc260` drm/framebuffer: Fix use of uninitialized variable \| * `406f8d5bad` drm/drm_file: fix use of uninitialized variable \| * `48ad42cd95` ASoC: amd: Add new dmi entries for acp5x platform \| * `b6ca70f06e` f2fs: fix write pointers on zoned device after roll forward \| * `9773a96eac` drm/amd/display: Fix tiled display misalignment \| * `126543736f` drm/bridge: anx7625: Fix Set HPD irq detect window to 2ms \| * `3c2bd20dc9` drm/panel-edp: Add override_edid_mode quirk for generic edp \| * `055c849724` RDMA/IPoIB: Fix error code return in ipoib_mcast_join \| * `c4cb42824e` fast_dput(): handle underflows gracefully \| * `0ee8e0a183` ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument \| * `52e25a323c` ALSA: hda: Refer to correct stream index at loops \| * `b1020a5467` f2fs: fix to check return value of f2fs_reserve_new_block() \| * `332a7c108e` net: dsa: qca8k: put MDIO bus OF node on qca8k_mdio_register() failure \| * `0438a985de` octeontx2-af: Fix max NPC MCAM entry check while validating ref_entry \| * `95173204b1` i40e: Fix VF disable behavior to block all traffic \| * `9f9ac39adb` bridge: cfm: fix enum typo in br_cc_ccm_tx_parse \| * `a243e0818e` net/smc: disable SEID on non-s390 archs where virtual ISM may be used \| * `388736c62b` Bluetooth: L2CAP: Fix possible multiple reject send \| * `6d95ade9e6` Bluetooth: hci_sync: fix BR/EDR wakeup bug \| * `a836b1c333` Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066 \| * `da1a6e9f01` wifi: cfg80211: free beacon_ies when overridden from hidden BSS \| * `3bb09b9af1` wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() \| * `12473265f5` libbpf: Fix NULL pointer dereference in bpf_object__collect_prog_relos \| * `68ef19417a` wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices \| * `e15fa0c67e` arm64: dts: amlogic: fix format for s4 uart node \| * `9e8338b72b` ice: fix pre-shifted bit usage \| * `9c5541f3f0` arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property \| * `2fdbf9d9a0` arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property \| * `fd9a2c7003` md: Whenassemble the array, consult the superblock of the freshest device \| * `8ae4201900` block: prevent an integer overflow in bvec_try_merge_hw_page \| * `44f6b75c09` net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path \| * `0edb3ae8bf` net: atlantic: eliminate double free in error handling logic \| * `ea12794ea6` ice: fix ICE_AQ_VSI_Q_OPT_RSS_* register values \| * `d4560c11c3` scsi: hisi_sas: Set .phy_attached before notifing phyup event HISI_PHYE_PHY_UP_PM \| * `dc15b313f3` ARM: dts: imx23/28: Fix the DMA controller node name \| * `9388665a12` ARM: dts: imx23-sansa: Use preferred i2c-gpios properties \| * `fb8e41af95` ARM: dts: imx27-apf27dev: Fix LED name \| * `6ebe86575b` ARM: dts: imx25/27: Pass timing0 \| * `68b2e26225` ARM: dts: imx25: Fix the iim compatible string \| * `af7bbdac89` block/rnbd-srv: Check for unlikely string overflow \| * `238ec612a2` ionic: bypass firmware cmds when stuck in reset \| * `434fcaf372` ionic: pass opcode to devcmd_wait \| * `7dc0fefd37` net: phy: at803x: fix passing the wrong reference for config_intr \| * `e7398f3e45` ARM: dts: imx1: Fix sram node \| * `7721a55c02` ARM: dts: imx27: Fix sram node \| * `8a0285ed7e` ARM: dts: imx: Use flash@0,0 pattern \| * `8953b37bb1` ARM: dts: imx25/27-eukrea: Fix RTC node name \| * `1acdaf9f29` ARM: dts: rockchip: fix rk3036 hdmi ports node \| * `574dcd3126` wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() \| * `5a44a664ab` bpf: Set uattr->batch.count as zero before batched update or deletion \| * `7719e56b20` scsi: libfc: Fix up timeout error in fc_fcp_rec_error() \| * `73fe92ddf9` scsi: libfc: Don't schedule abort twice \| * `d6d6fe4bb1` bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers \| * `c07965d1a7` wifi: ath11k: fix race due to setting ATH11K_FLAG_EXT_IRQ_ENABLED too early \| * `25c6f49ef5` wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() \| * `db30f469ae` ARM: dts: imx7s: Fix nand-controller #size-cells \| * `6fa750d62f` ARM: dts: imx7s: Fix lcdif compatible \| * `c9c2a35820` ARM: dts: imx7d: Fix coresight funnel ports \| * `89fdf0a2c7` scsi: arcmsr: Support new PCI device IDs 1883 and 1886 \| * `61c859bd66` scsi: mpi3mr: Add PCI checks where SAS5116 diverges from SAS4116 \| * `5c4cbec510` net: usb: ax88179_178a: avoid two consecutive device resets \| * `cd4cdad9bd` bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk \| * `c0d5a69322` PCI: Add no PM reset quirk for NVIDIA Spectrum devices \| * `04dcef4a78` scsi: lpfc: Fix possible file string name overflow when updating firmware \| * `c0a96adce2` soc: xilinx: fix unhandled SGI warning message \| * `01946c3c83` soc: xilinx: Fix for call trace due to the usage of smp_processor_id() \| * `fd937767d5` selftests/bpf: Fix issues in setup_classid_environment() \| * `f58cfb63e4` wifi: rt2x00: correct wrong BBP register in RxDCOC calibration \| * `ad0e7bbc0b` selftests/bpf: Fix pyperf180 compilation failure with clang18 \| * `76ab331d6d` selftests/bpf: satisfy compiler by having explicit return in btf test \| * `739b3ccd94` wifi: rt2x00: restart beacon queue when hardware reset \| * `6d2cbf517d` ext4: avoid online resizing failures due to oversized flex bg \| * `dd10f82ece` ext4: remove unnecessary check from alloc_flex_gd() \| * `60292a12a0` ext4: unify the type of flexbg_size to unsigned int \| * `069ede0475` ext4: fix inconsistent between segment fstrim and full fstrim \| * `80cab9dad5` ecryptfs: Reject casefold directory inodes \| * `e8ca3e7330` SUNRPC: Fix a suspicious RCU usage warning \| * `0671f42a9c` KVM: s390: fix setting of fpc register \| * `7a4d6481fb` s390/ptrace: handle setting of fpc register correctly \| * `08f65c9067` s390/vfio-ap: fix sysfs status attribute for AP queue devices \| * `d6c8d8ab76` arch: consolidate arch_irq_work_raise prototypes \| * `3537f92cd2` jfs: fix array-index-out-of-bounds in diNewExt \| * `b03d76cc66` rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() \| * `ea4eb77c53` afs: fix the usage of read_seqbegin_or_lock() in afs_find_server() \| `eef7c4cd98` afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu() \| * `91256fcd57` crypto: stm32/crc32 - fix parsing list of devices \| * `e0e78522b4` erofs: fix ztailpacking for subpage compressed blocks \| * `6c7bdb97d4` crypto: octeontx2 - Fix cptvf driver cleanup \| * `75b0f71b26` pstore/ram: Fix crash when setting number of cpus to an odd number \| * `32e8f2d955` jfs: fix uaf in jfs_evict_inode \| * `70780914cb` jfs: fix array-index-out-of-bounds in dbAdjTree \| * `cab0c265ba` jfs: fix slab-out-of-bounds Read in dtSearch \| * `e4cbc857d7` UBSAN: array-index-out-of-bounds in dtSplitRoot \| * `42f433785f` FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree \| * `185d97e5be` ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events \| * `31569995fc` PM / devfreq: Synchronize devfreq_monitor_[start/stop] \| * `7633b7a036` ACPI: NUMA: Fix the logic of getting the fake_pxm value \| * `33650372e3` ACPI: extlog: fix NULL pointer dereference check \| * `431c1a4921` PNP: ACPI: fix fortify warning \| * `81eb8b56e7` ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop \| * `4d4e06eaa2` audit: Send netlink ACK before setting connection in auditd_set \| * `3430936a01` regulator: core: Only increment use_count when enable_count changes \| * `b3ae38966d` debugobjects: Stop accessing objects after releasing hash bucket lock \| * `74ec093dba` perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file \| * `d67e43be0e` x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel \| * `abd26515d4` powerpc/lib: Validate size for vector operations \| * `0be5614f26` powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE \| * `d4908b3431` x86/boot: Ignore NMIs during very early boot \| * `a6fd14db75` powerpc/64s: Fix CONFIG_NUMA=n build due to create_section_mapping() \| * `cf3256c431` powerpc/mm: Fix build failures due to arch_reserved_kernel_pages() \| * `7ad4b2a6b2` powerpc: Fix build error due to is_valid_bugaddr() \| * `d87d9a23a1` drivers/perf: pmuv3: don't expose SW_INCR event in sysfs \| * `4431284f4a` arm64: irq: set the correct node for VMAP stack \| * `d482d61025` powerpc/mm: Fix null-pointer dereference in pgtable_cache_add \| * `9e5c37e0fa` asm-generic: make sparse happy with odd-sized put_unaligned_() \| `f28d3f0d96` Merge branch 'android14-6.1' into branch 'android14-6.1-lts' * \| `7a8376be74` ANDROID: use reserved cpucaps for new capability * \| `c801066eca` Revert "mm/sparsemem: fix race in accessing memory_section->usage" * \| `2dbddbe358` Merge 6.1.76 into android-6.1 \|\\| \| * `e5c3b988b8` Linux 6.1.76 \| * `d7dc6a8604` net/mlx5e: Handle hardware IPsec limits events \| * `e90c7d26ca` serial: core: fix kernel-doc for uart_port_unlock_irqrestore() \| * `c02d3872c8` x86/entry/ia32: Ensure s32 is sign extended to s64 \| * `cf0b4ba4b0` tick/sched: Preserve number of idle sleeps across CPU hotplug events \| * `e333bbb557` mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan \| * `ec745eeff4` cxl/region：Fix overflow issue in alloc_hpa() \| * `1111abee59` MIPS: lantiq: register smp_ops on non-smp platforms \| * `b086f6d979` spi: fix finalize message on error return \| * `598af91f62` spi: bcm-qspi: fix SFDP BFPT read by usig mspi read \| * `a2fa86e2bb` drm/bridge: anx7625: Ensure bridge is suspended in disable() \| * `9564767b67` block: Move checking GENHD_FL_NO_PART to bdev_add_partition() \| * `4b84411165` gpio: eic-sprd: Clear interrupt after set the interrupt type \| * `23cf4cf429` drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume \| * `ba930885bf` drm/exynos: fix accidental on-stack copy of exynos_drm_plane \| * `c1cd4f9da5` drm/bridge: parade-ps8640: Make sure we drop the AUX mutex in the error case \| * `6ba690e7f7` drm/bridge: parade-ps8640: Ensure bridge is suspended in .post_disable() \| * `279f1cc562` drm/bridge: sii902x: Fix audio codec unregistration \| * `e0f83c234e` drm/bridge: sii902x: Fix probing race issue \| * `c46f9c7f93` drm/bridge: sii902x: Use devm_regulator_bulk_get_enable() \| * `ed555f5b5c` drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33] \| * `6b7fb2903a` drm/bridge: parade-ps8640: Wait for HPD when doing an AUX transfer \| * `f9a4c401bf` Revert "powerpc/64s: Increase default stack size to 32KB" \| * `ec5e692cba` drm/panel-edp: drm/panel-edp: Fix AUO B116XAK01 name and timing \| * `f91c77d2c3` btrfs: zoned: optimize hint byte for zoned allocator \| * `4c45143447` btrfs: zoned: factor out prepare_allocation_zoned() \| * `b168029d67` serial: sc16is7xx: fix unconditional activation of THRI interrupt \| * `49d733c4bb` serial: sc16is7xx: Use port lock wrappers \| * `4fd9a02121` serial: core: Provide port lock wrappers \| * `e11dea8f50` dlm: use kernel_connect() and kernel_bind() \| * `fd7c2ffa0e` ARM: dts: qcom: sdx55: fix USB SS wakeup \| * `ecf87621b4` ARM: dts: qcom: sdx55: fix USB DP/DM HS PHY interrupts \| * `34d2c909c7` ARM: dts: qcom: sdx55: fix pdc '#interrupt-cells' \| * `bba1320ef2` ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12 \| * `46cd7ef69f` ARM: dts: qcom: sdx55: fix USB wakeup interrupt types \| * `b87a1229d8` pipe: wakeup wr_wait after setting max_usage \| * `6f5c4aaddd` fs/pipe: move check to pipe_has_watch_queue() \| * `28f010dc50` thermal: intel: hfi: Add syscore callbacks for system-wide PM \| * `b2517d1412` thermal: intel: hfi: Disable an HFI instance when all its CPUs go offline \| * `a8056e821c` thermal: intel: hfi: Refactor enabling code into helper functions \| * `e1c9d32c98` PM: sleep: Fix possible deadlocks in core system-wide PM code \| * `a9dbf8ca31` PM: core: Remove unnecessary (void ) conversions \| `ea3357c6cf` bus: mhi: ep: Do not allocate event ring element on stack \| * `512fc4d735` media: ov13b10: Enable runtime PM before registering async sub-device \| * `a14c2431e5` media: ov13b10: Support device probe in non-zero ACPI D state \| * `33bf23c994` erofs: fix lz4 inplace decompression \| * `2197389e1a` erofs: get rid of the remaining kmap_atomic() \| * `471ab2e8b7` drm/amdgpu/pm: Fix the power source flag error \| * `b4cbd01832` drm/amd/display: Port DENTIST hang and TDR fixes to OTG disable W/A \| * `7960f14fca` drm/bridge: nxp-ptn3460: simplify some error checking \| * `6341140b04` platform/x86: intel-uncore-freq: Fix types in sysfs callbacks \| * `85d16c03dd` drm/amd/display: Disable PSR-SU on Parade 0803 TCON again \| * `b5fcb340b7` drm/tidss: Fix atomic_flush check \| * `2a81e844d1` drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking \| * `62f2e79cf9` drm: Don't unref the same fb many times by mistake due to deadlock handling \| * `635e996e6e` cpufreq: intel_pstate: Refine computation of P-state for given frequency \| * `242996f500` gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 \| * `6c495c84e2` xfs: read only mounts with fsopen mount API are busted \| * `7f95f6997f` firmware: arm_scmi: Check mailbox/SMT channel for consistency \| * `2c939c74ef` ksmbd: fix global oob in ksmbd_nl_policy \| * `2841631a03` platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe \| * `8e34430e33` netfilter: nf_tables: reject QUEUE/DROP verdict parameters \| * `af149a4689` netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain \| * `5e7d8ddf2a` hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes \| * `aa2cc93639` wifi: iwlwifi: fix a memory corruption \| * `dcc54a54de` exec: Fix error handling in begin_new_exec() \| * `4646445756` rbd: don't move requests to the running list on errors \| * `6e6bca99e8` btrfs: don't abort filesystem when attempting to snapshot deleted subvolume \| * `52e02f26d0` btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args \| * `86aff7c5f7` btrfs: don't warn if discard range is not aligned to sector \| * `b60f748a2f` btrfs: tree-checker: fix inline ref size in error messages \| * `c91c247be4` btrfs: ref-verify: free ref cache before clearing mount opt \| * `9ebd514fbd` btrfs: avoid copying BTRFS_ROOT_SUBVOL_DEAD flag to snapshot of subvolume being deleted \| * `d9c54763e5` nbd: always initialize struct msghdr completely \| * `0a5a083c2b` net: fec: fix the unhandled context fault from smmu \| * `5b1086d226` fjes: fix memleaks in fjes_hw_setup \| * `4b4dcb3f42` selftests: netdevsim: fix the udp_tunnel_nic test \| * `cec65f09c4` net: mvpp2: clear BM pool before initialization \| * `acb6eaf2ea` net: stmmac: Wait a bit for the reset to take effect \| * `67ee37360d` netfilter: nf_tables: validate NFPROTO_* family \| * `ed5b62bbd4` netfilter: nf_tables: restrict anonymous set and map names to 16 bytes \| * `c25d7922ef` btrfs: fix race between reading a directory and adding entries to it \| * `fd968e683b` btrfs: refresh dir last index during a rewinddir(3) call \| * `a045b6b197` btrfs: set last dir index to the current last index when opening dir \| * `2aa515b5b5` btrfs: fix infinite directory reads \| * `bc6e242bb7` netfilter: nft_limit: reject configurations that cause integer overflow \| * `c817f5c016` rcu: Defer RCU kthreads wakeup when CPU is dying \| * `b2fa86b2ac` net/mlx5e: fix a potential double-free in fs_any_create_groups \| * `42876db001` net/mlx5e: fix a double-free in arfs_create_groups \| * `890881d10f` net/mlx5e: Allow software parsing when IPsec crypto is enabled \| * `62ce16005e` net/mlx5: Use mlx5 device constant for selecting CQ period mode for ASO \| * `75d9ed4930` net/mlx5: DR, Can't go to uplink vport on RX rule \| * `e54aedd4d0` net/mlx5: DR, Use the right GVMI number for drop action \| * `f11792c389` ipv6: init the accept_queue's spinlocks in inet6_create \| * `de061604f8` netlink: fix potential sleeping issue in mqueue_flush_file \| * `90fba981ca` tcp: Add memory barrier to tcp_push() \| * `ab49164c60` afs: Hide silly-rename files from userspace \| * `f4f7e696db` tracing: Ensure visibility when inserting an element into tracing_map \| * `82a9bc343b` netfs, fscache: Prevent Oops in fscache_put_cache() \| * `71024928b3` net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv \| * `fcb0b4b6bc` net: micrel: Fix PTP frame parsing for lan8814 \| * `7a581f597a` tun: add missing rx stats accounting in tun_xdp_act \| * `41e7decdad` tun: fix missing dropped counter in tun_xdp_act \| * `a2232f29bf` net: fix removing a namespace with conflicting altnames \| * `6646145be9` udp: fix busy polling \| * `660c3053d9` llc: Drop support for ETH_P_TR_802_2. \| * `6d53b813ff` llc: make llc_ui_sendmsg() more robust against bonding changes \| * `c5e7fa4f9d` vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING \| * `4ee0613868` bnxt_en: Wait for FLR to complete during probe \| * `b1e0a68a0c` tcp: make sure init the accept_queue's spinlocks once \| * `6994dba063` net/smc: fix illegal rmb_desc access in SMC-D connection dump \| * `49aaeb8c53` wifi: mac80211: fix potential sta-link leak \| * `b59e08c872` drm/amd/display: pbn_div need be updated for hotplug event \| * `a5046e5eb8` Revert "drm/amd: Enable PCIe PME from D3" \| * `b1c06ee2d1` ksmbd: Add missing set_freezable() for freezable kthread \| * `844dfef316` ksmbd: send lease break notification on FILE_RENAME_INFORMATION \| * `de603a52af` ksmbd: don't increment epoch if current state and request state are same \| * `e61fc656ce` ksmbd: fix potential circular locking issue in smb2_set_ea() \| * `8fa25e67fd` ksmbd: set v2 lease version on lease upgrade \| * `3101b9fd74` mm: page_alloc: unreserve highatomic page blocks before oom \| * `1d15da5601` LoongArch/smp: Call rcutree_report_cpu_starting() earlier \| * `0e0653d53a` serial: sc16is7xx: improve do/while loop in sc16is7xx_irq() \| * `80beb4424d` serial: sc16is7xx: remove obsolete loop in sc16is7xx_port_irq() \| * `de8e41f78f` serial: sc16is7xx: fix invalid sc16is7xx_lines bitfield in case of probe error \| * `416b10d281` serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO \| * `4b068e55bf` serial: sc16is7xx: change EFR lock to operate on each channels \| * `f6c58552a8` serial: sc16is7xx: remove unused line structure member \| * `6dca71e6e1` serial: sc16is7xx: remove global regmap from struct sc16is7xx_port \| * `9bcb019aee` serial: sc16is7xx: remove wasteful static buffer in sc16is7xx_regmap_name() \| * `45ec1b7acc` serial: sc16is7xx: improve regmap debugfs by using one regmap per port \| * `362be9ec32` rename(): fix the locking of subdirectories \| * `68ed9e3332` mm/sparsemem: fix race in accessing memory_section->usage \| * `367a47ef4c` mm/rmap: fix misplaced parenthesis of a likely() \| * `5d01dcda81` ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path \| * `13a6ceeb5b` nouveau/vmm: don't set addr on the fail path to avoid warning \| * `40c23b5e07` rtc: Extend timeout for waiting for UIP to clear to 1s \| * `7971389316` rtc: Add support for configuring the UIP timeout for RTC reads \| * `fd1f5396be` rtc: mc146818-lib: Adjust failure return code for mc146818_get_time() \| * `911e7206c8` rtc: Adjust failure return code for cmos_set_alarm() \| * `aca1ea92f5` rtc: cmos: Use ACPI alarm for non-Intel x86 systems too \| * `2b1dc0666e` arm64: Rename ARM64_WORKAROUND_2966298 \| * `9fec4db7ff` media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run \| * `a33fbb8b6d` mmc: mmc_spi: remove custom DMA mapped buffers \| * `c4edcd134b` mmc: core: Use mrq.sbc in close-ended ffu \| * `d78fac87c6` media: videobuf2-dma-sg: fix vmap callback \| * `c160f2ac85` scripts/get_abi: fix source path leak \| * `efe3ec7066` docs: kernel_abi.py: fix command injection \| * `c014490c0b` lsm: new security_file_ioctl_compat() hook \| * `2647770eac` arm64: dts: qcom: sm8150: fix USB DP/DM HS PHY interrupts \| * `0168530568` arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts \| * `69ee126bba` arm64: dts: qcom: sc7280: fix usb_1 wakeup interrupt types \| * `eec1f92949` arm64: dts: qcom: sm8150: fix USB wakeup interrupt types \| * `595d35c6ae` arm64: dts: qcom: sdm845: fix USB wakeup interrupt types \| * `8191aa4146` arm64: dts: qcom: sc7180: fix USB wakeup interrupt types \| * `9f29c5d2bf` scsi: ufs: core: Remove the ufshcd_hba_exit() call from ufshcd_async_scan() \| * `2ab32986a0` dmaengine: fix NULL pointer in channel unregistration function \| * `0c8ada71d9` iio: adc: ad7091r: Enable internal vref if external vref is not supplied \| * `fcf8e37152` async: Introduce async_schedule_dev_nocall() \| * `6e8aab4de7` async: Split async_schedule_node_domain() \| * `b37c1b0db1` parisc/power: Fix power soft-off button emulation on qemu \| * `71602d95ae` parisc/firmware: Fix F-extend for PDC addresses \| * `0b093176fd` bus: mhi: host: Add spinlock to protect WP access when queueing TREs \| * `3c5ec66b4b` bus: mhi: host: Drop chan lock before queuing buffers \| * `2df39ac8f8` bus: mhi: host: Add alignment check for event ring read pointer \| * `574f69b46b` mips: Fix max_mapnr being uninitialized on early stages \| * `6690a0acbb` s390/vfio-ap: let on_scan_complete() callback filter matrix and update guest's APCB \| * `baf3fcb268` s390/vfio-ap: loop over the shadow APCB when filtering guest's AP configuration \| * `d6b8d034b5` s390/vfio-ap: always filter entire AP matrix \| * `51a7c02bc7` media: ov9734: Enable runtime PM before registering async sub-device \| * `f4bb1d5daf` rpmsg: virtio: Free driver_override when rpmsg_remove() \| * `e8757cd139` media: imx355: Enable runtime PM before registering async sub-device \| * `8a7729cda2` PM / devfreq: Fix buffer overflow in trans_stat_show \| * `f4518de40a` s390/vfio-ap: unpin pages on gisc registration failure \| * `dbc9a791a7` crypto: s390/aes - Fix buffer overread in CTR mode \| * `aa8aa16ed9` hwrng: core - Fix page fault dead lock on mmap-ed hwrng \| * `3a081586c7` PM: hibernate: Enforce ordering during image compression/decompression \| * `680eb0a993` crypto: api - Disallow identical driver names \| * `562850a008` btrfs: sysfs: validate scrub_speed_max value \| * `29e2da3eab` OPP: Pass rounded rate to _set_opp() \| * `4b5f8a187f` arm64: properly install vmlinuz.efi \| * `852b6b2a2f` ext4: allow for the last group to be marked as trimmed \| * `137568aa54` iio: adc: ad7091r: Allow users to configure device events \| * `6f57121e9c` iio: adc: ad7091r: Set alert bit in config register \| * `fafda9f08a` Revert "nSVM: Check for reserved encodings of TLB_CONTROL in nested VMCB" \| * `c519a9054b` usb: dwc3: gadget: Handle EP0 request dequeuing properly \| * `c8fe8ce07f` usb: dwc3: gadget: Queue PM runtime idle on disconnect event \| * `ce27046883` usb: dwc3: gadget: Refactor EP0 forced stall/restart into a separate API * `0eac7b614d` Merge branch 'android14-6.1' into branch 'android14-6.1-lts' * `63040ce8e9` Merge branch 'android14-6.1' into branch 'android14-6.1-lts' * `50fe3d2012` ANDROID: Add symbols for IIO SCMI module * `e666b8755f` ANDROID: Update symbols list for open-dice.ko Change-Id: Icb970da9bfba44d188465ce8c8148858a4a2fb1a Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-05-30 15:23:39 +00:00
Joe Fradley	4d55129aea	UPSTREAM: crypto: x86/curve25519 - disable gcov curve25519-x86_64.c fails to build when CONFIG_GCOV_KERNEL is enabled. The error is "inline assembly requires more registers than available" thrown from the `fsqr()` function. Therefore, excluding this file from GCOV profiling until this issue is resolved. Thereby allowing CONFIG_GCOV_PROFILE_ALL to be enabled for x86. Change-Id: Icbb1ed0e1b99f1cb0a21ea7a2920b3edce70c38d Signed-off-by: Joe Fradley <joefradley@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> (cherry picked from commit c390c452ebeb44cb979b7374d3acc3859415e86c)	2024-05-10 12:38:46 +00:00
Vincent Palomares	4744b3a4ed	ANDROID: GKI: Expose device async to userspace Setting CONFIG_PM_ADVANCED_DEBUG=y to expose device async fields to userspace, allowing to fine-tune the suspend/resume path. Bug: 235135485 Change-Id: I75060e88ce0c1e199aa8740f446a2c0f8167f3d7 Signed-off-by: Vincent Palomares <paillon@google.com>	2024-04-29 20:04:23 +00:00
Nikhil V	e7e8932600	ANDROID: gki_defconfig: Sync gki_defconfig After applying commit `990d3701d0` ("BACKPORT: PM: hibernate: Move to crypto APIs for LZO compression"), CRPTO_LZO is selected by default. Sync the gki_defconfig accordingly. This doesn't add any functional change. Bug: 335581841 Change-Id: Iafa7211245f6d66a96f8f0030e2574c7a220d3a4 Signed-off-by: Nikhil V <quic_nprakash@quicinc.com>	2024-04-22 11:02:55 +05:30
Greg Kroah-Hartman	20b90d46a0	Merge 6.1.77 into android14-6.1-lts Changes in 6.1.77 asm-generic: make sparse happy with odd-sized put_unaligned_() powerpc/mm: Fix null-pointer dereference in pgtable_cache_add arm64: irq: set the correct node for VMAP stack drivers/perf: pmuv3: don't expose SW_INCR event in sysfs powerpc: Fix build error due to is_valid_bugaddr() powerpc/mm: Fix build failures due to arch_reserved_kernel_pages() powerpc/64s: Fix CONFIG_NUMA=n build due to create_section_mapping() x86/boot: Ignore NMIs during very early boot powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE powerpc/lib: Validate size for vector operations x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file debugobjects: Stop accessing objects after releasing hash bucket lock regulator: core: Only increment use_count when enable_count changes audit: Send netlink ACK before setting connection in auditd_set ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop PNP: ACPI: fix fortify warning ACPI: extlog: fix NULL pointer dereference check ACPI: NUMA: Fix the logic of getting the fake_pxm value PM / devfreq: Synchronize devfreq_monitor_[start/stop] ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree UBSAN: array-index-out-of-bounds in dtSplitRoot jfs: fix slab-out-of-bounds Read in dtSearch jfs: fix array-index-out-of-bounds in dbAdjTree jfs: fix uaf in jfs_evict_inode pstore/ram: Fix crash when setting number of cpus to an odd number crypto: octeontx2 - Fix cptvf driver cleanup erofs: fix ztailpacking for subpage compressed blocks crypto: stm32/crc32 - fix parsing list of devices afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu() afs: fix the usage of read_seqbegin_or_lock() in afs_find_server() rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() jfs: fix array-index-out-of-bounds in diNewExt arch: consolidate arch_irq_work_raise prototypes s390/vfio-ap: fix sysfs status attribute for AP queue devices s390/ptrace: handle setting of fpc register correctly KVM: s390: fix setting of fpc register SUNRPC: Fix a suspicious RCU usage warning ecryptfs: Reject casefold directory inodes ext4: fix inconsistent between segment fstrim and full fstrim ext4: unify the type of flexbg_size to unsigned int ext4: remove unnecessary check from alloc_flex_gd() ext4: avoid online resizing failures due to oversized flex bg wifi: rt2x00: restart beacon queue when hardware reset selftests/bpf: satisfy compiler by having explicit return in btf test selftests/bpf: Fix pyperf180 compilation failure with clang18 wifi: rt2x00: correct wrong BBP register in RxDCOC calibration selftests/bpf: Fix issues in setup_classid_environment() soc: xilinx: Fix for call trace due to the usage of smp_processor_id() soc: xilinx: fix unhandled SGI warning message scsi: lpfc: Fix possible file string name overflow when updating firmware PCI: Add no PM reset quirk for NVIDIA Spectrum devices bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk net: usb: ax88179_178a: avoid two consecutive device resets scsi: mpi3mr: Add PCI checks where SAS5116 diverges from SAS4116 scsi: arcmsr: Support new PCI device IDs 1883 and 1886 ARM: dts: imx7d: Fix coresight funnel ports ARM: dts: imx7s: Fix lcdif compatible ARM: dts: imx7s: Fix nand-controller #size-cells wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() wifi: ath11k: fix race due to setting ATH11K_FLAG_EXT_IRQ_ENABLED too early bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers scsi: libfc: Don't schedule abort twice scsi: libfc: Fix up timeout error in fc_fcp_rec_error() bpf: Set uattr->batch.count as zero before batched update or deletion wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() ARM: dts: rockchip: fix rk3036 hdmi ports node ARM: dts: imx25/27-eukrea: Fix RTC node name ARM: dts: imx: Use flash@0,0 pattern ARM: dts: imx27: Fix sram node ARM: dts: imx1: Fix sram node net: phy: at803x: fix passing the wrong reference for config_intr ionic: pass opcode to devcmd_wait ionic: bypass firmware cmds when stuck in reset block/rnbd-srv: Check for unlikely string overflow ARM: dts: imx25: Fix the iim compatible string ARM: dts: imx25/27: Pass timing0 ARM: dts: imx27-apf27dev: Fix LED name ARM: dts: imx23-sansa: Use preferred i2c-gpios properties ARM: dts: imx23/28: Fix the DMA controller node name scsi: hisi_sas: Set .phy_attached before notifing phyup event HISI_PHYE_PHY_UP_PM ice: fix ICE_AQ_VSI_Q_OPT_RSS_* register values net: atlantic: eliminate double free in error handling logic net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path block: prevent an integer overflow in bvec_try_merge_hw_page md: Whenassemble the array, consult the superblock of the freshest device arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property ice: fix pre-shifted bit usage arm64: dts: amlogic: fix format for s4 uart node wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices libbpf: Fix NULL pointer dereference in bpf_object__collect_prog_relos wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() wifi: cfg80211: free beacon_ies when overridden from hidden BSS Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066 Bluetooth: hci_sync: fix BR/EDR wakeup bug Bluetooth: L2CAP: Fix possible multiple reject send net/smc: disable SEID on non-s390 archs where virtual ISM may be used bridge: cfm: fix enum typo in br_cc_ccm_tx_parse i40e: Fix VF disable behavior to block all traffic octeontx2-af: Fix max NPC MCAM entry check while validating ref_entry net: dsa: qca8k: put MDIO bus OF node on qca8k_mdio_register() failure f2fs: fix to check return value of f2fs_reserve_new_block() ALSA: hda: Refer to correct stream index at loops ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument fast_dput(): handle underflows gracefully RDMA/IPoIB: Fix error code return in ipoib_mcast_join drm/panel-edp: Add override_edid_mode quirk for generic edp drm/bridge: anx7625: Fix Set HPD irq detect window to 2ms drm/amd/display: Fix tiled display misalignment f2fs: fix write pointers on zoned device after roll forward ASoC: amd: Add new dmi entries for acp5x platform drm/drm_file: fix use of uninitialized variable drm/framebuffer: Fix use of uninitialized variable drm/mipi-dsi: Fix detach call without attach media: stk1160: Fixed high volume of stk1160_dbg messages media: rockchip: rga: fix swizzling for RGB formats PCI: add INTEL_HDA_ARL to pci_ids.h ALSA: hda: Intel: add HDA_ARL PCI ID support media: rkisp1: Drop IRQF_SHARED media: rkisp1: Fix IRQ handler return values media: rkisp1: Store IRQ lines media: rkisp1: Fix IRQ disable race issue hwmon: (nct6775) Fix fan speed set failure in automatic mode f2fs: fix to tag gcing flag on page during block migration drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time IB/ipoib: Fix mcast list locking media: amphion: remove mutext lock in condition of wait_event media: ddbridge: fix an error code problem in ddb_probe media: i2c: imx335: Fix hblank min/max values drm/amd/display: For prefetch mode > 0, extend prefetch if possible drm/msm/dpu: Ratelimit framedone timeout msgs drm/msm/dpu: fix writeback programming for YUV cases drm/amdgpu: fix ftrace event amdgpu_bo_move always move on same heap clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786 drm/amd/display: make flip_timestamp_in_us a 64-bit variable clk: imx: clk-imx8qxp: fix LVDS bypass, pixel and phy clocks drm/amdgpu: Fix ecc irq enable/disable unpaired drm/amdgpu: Let KFD sync with VM fences drm/amdgpu: Fix '*fw' from request_firmware() not released in 'amdgpu_ucode_request()' drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' drm/amdkfd: Fix iterator used outside loop in 'kfd_add_peer_prop()' ALSA: hda/conexant: Fix headset auto detect fail in cx8070 and SN6140 leds: trigger: panic: Don't register panic notifier if creating the trigger failed um: Fix naming clash between UML and scheduler um: Don't use vfprintf() for os_info() um: net: Fix return type of uml_net_start_xmit() um: time-travel: fix time corruption i3c: master: cdns: Update maximum prescaler value for i2c clock xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import mfd: ti_am335x_tscadc: Fix TI SoC dependencies mailbox: arm_mhuv2: Fix a bug for mhuv2_sender_interrupt PCI: Only override AMD USB controller if required PCI: switchtec: Fix stdev_release() crash after surprise hot remove perf cs-etm: Bump minimum OpenCSD version to ensure a bugfix is present usb: hub: Replace hardcoded quirk value with BIT() macro usb: hub: Add quirk to decrease IN-ep poll interval for Microchip USB491x hub selftests/sgx: Fix linker script asserts tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE fs/kernfs/dir: obey S_ISGID spmi: mediatek: Fix UAF on device remove PCI: Fix 64GT/s effective data rate calculation PCI/AER: Decode Requester ID when no error info found 9p: Fix initialisation of netfs_inode for 9p misc: lis3lv02d_i2c: Add missing setting of the reg_ctrl callback libsubcmd: Fix memory leak in uniq() drm/amdkfd: Fix lock dependency warning drm/amdkfd: Fix lock dependency warning with srcu virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings blk-mq: fix IO hang from sbitmap wakeup race ceph: reinitialize mds feature bit even when session in open ceph: fix deadlock or deadcode of misusing dget() ceph: fix invalid pointer access if get_quota_realm return ERR_PTR drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()' drm/amdgpu: Fix with right return code '-EIO' in 'amdgpu_gmc_vram_checking()' drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()' drm/amdkfd: Fix 'node' NULL check in 'svm_range_get_range_boundaries()' perf: Fix the nr_addr_filters fix wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update drm: using mul_u32_u32() requires linux/math64.h scsi: isci: Fix an error code problem in isci_io_request_build() regulator: ti-abb: don't use devm_platform_ioremap_resource_byname for shared interrupt register scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler HID: hidraw: fix a problem of memory leak in hidraw_release() selftests: net: give more time for GRO aggregation ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() ipv4: raw: add drop reasons ipmr: fix kernel panic when forwarding mcast packets net: lan966x: Fix port configuration when using SGMII interface tcp: add sanity checks to rx zerocopy ixgbe: Refactor returning internal error codes ixgbe: Refactor overtemp event handling ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() net: dsa: qca8k: fix illegal usage of GPIO ipv6: Ensure natural alignment of const ipv6 loopback and router addresses llc: call sock_orphan() at release time bridge: mcast: fix disabled snooping after long uptime selftests: net: add missing config for GENEVE netfilter: conntrack: correct window scaling with retransmitted SYN netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations net: ipv4: fix a memleak in ip_setup_cork af_unix: fix lockdep positive in sk_diag_dump_icons() selftests: net: fix available tunnels detection net: sysfs: Fix /sys/class/net/<iface> path selftests: team: Add missing config options selftests: bonding: Check initial state arm64: irq: set the correct node for shadow call stack mm, kmsan: fix infinite recursion due to RCU critical section Revert "drm/amd/display: Disable PSR-SU on Parade 0803 TCON again" drm/msm/dsi: Enable runtime PM LoongArch/smp: Call rcutree_report_cpu_starting() at tlb_init() gve: Fix use-after-free vulnerability bonding: remove print in bond_verify_device_path ASoC: codecs: lpass-wsa-macro: fix compander volume hack ASoC: codecs: wsa883x: fix PA volume control drm/amdgpu: Fix missing error code in 'gmc_v6/7/8/9_0_hw_init()' Linux 6.1.77 Change-Id: I8d69fc7831db64d8a0fad88a318f03052f8bbf69 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-04-17 08:34:35 +00:00
Greg Kroah-Hartman	2dbddbe358	This is the 6.1.76 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmW64xYACgkQONu9yGCS aT7kVA/+KKlE3UFuGmV1ZmiHagHF+oRZKSk9m97F5zgfAcEHAcTnnuikzvJHuepU 4hPMsH+tTXafOJLh81bv7IH3RhHtvmQZPQyWUw7ysY9ms/7CZxjkuirxLWI3evUG lre7OiApyOPkxERBfA5f9r2D1ufXC742xcAdaXrn+GSZd4nuId5f0IbHmfdNv/MV zTt6+0qRU3TMpsUdqp0rIm/0KUXtopCDFf2fI/lIImAvN2onuiqDy+TC0FJ0ErTQ C3wTEi1j9u6l3AO51OYm57TbKj/KmVOcQdcQyskHGHbB+7nS9z29LXQyorRUKqkv KTs739kgG8GH0ZegTwPVPCx5t1SBzy8fuzI2c2MMVfNCT6rWJVS7brzeb7zDLuRT 9pSr9MnoQNYMhJ3IlPvgPHKwvpP4t2el7Z8noVTRXHDjrkC238gloHwvH78/b2ao bXO3DRKTzB4Vv/Q8YUPFmj5fhPqz5lnK6idr4r72JSlzfjxtYoPAKwYihDGxmeLN mWikAPepLqoGg/P2ztKhV/fL9TVhJB+d2YM5op/b+pUxZtYdiJODefFF1ebBbF34 sRG12htP7GV/MTkxC7Yu0h3vS3HWVHugHMBIXXUnqlOANMUbyAMEQW+xkdS/W5bd QnowcQr+DT1A5b9P1bYXB7efNiHENxo/jvuJTrzZmLioy1MPqeE= =219k -----END PGP SIGNATURE----- Merge 6.1.76 into android-6.1 Changes in 6.1.76 usb: dwc3: gadget: Refactor EP0 forced stall/restart into a separate API usb: dwc3: gadget: Queue PM runtime idle on disconnect event usb: dwc3: gadget: Handle EP0 request dequeuing properly Revert "nSVM: Check for reserved encodings of TLB_CONTROL in nested VMCB" iio: adc: ad7091r: Set alert bit in config register iio: adc: ad7091r: Allow users to configure device events ext4: allow for the last group to be marked as trimmed arm64: properly install vmlinuz.efi OPP: Pass rounded rate to _set_opp() btrfs: sysfs: validate scrub_speed_max value crypto: api - Disallow identical driver names PM: hibernate: Enforce ordering during image compression/decompression hwrng: core - Fix page fault dead lock on mmap-ed hwrng crypto: s390/aes - Fix buffer overread in CTR mode s390/vfio-ap: unpin pages on gisc registration failure PM / devfreq: Fix buffer overflow in trans_stat_show media: imx355: Enable runtime PM before registering async sub-device rpmsg: virtio: Free driver_override when rpmsg_remove() media: ov9734: Enable runtime PM before registering async sub-device s390/vfio-ap: always filter entire AP matrix s390/vfio-ap: loop over the shadow APCB when filtering guest's AP configuration s390/vfio-ap: let on_scan_complete() callback filter matrix and update guest's APCB mips: Fix max_mapnr being uninitialized on early stages bus: mhi: host: Add alignment check for event ring read pointer bus: mhi: host: Drop chan lock before queuing buffers bus: mhi: host: Add spinlock to protect WP access when queueing TREs parisc/firmware: Fix F-extend for PDC addresses parisc/power: Fix power soft-off button emulation on qemu async: Split async_schedule_node_domain() async: Introduce async_schedule_dev_nocall() iio: adc: ad7091r: Enable internal vref if external vref is not supplied dmaengine: fix NULL pointer in channel unregistration function scsi: ufs: core: Remove the ufshcd_hba_exit() call from ufshcd_async_scan() arm64: dts: qcom: sc7180: fix USB wakeup interrupt types arm64: dts: qcom: sdm845: fix USB wakeup interrupt types arm64: dts: qcom: sm8150: fix USB wakeup interrupt types arm64: dts: qcom: sc7280: fix usb_1 wakeup interrupt types arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts arm64: dts: qcom: sm8150: fix USB DP/DM HS PHY interrupts lsm: new security_file_ioctl_compat() hook docs: kernel_abi.py: fix command injection scripts/get_abi: fix source path leak media: videobuf2-dma-sg: fix vmap callback mmc: core: Use mrq.sbc in close-ended ffu mmc: mmc_spi: remove custom DMA mapped buffers media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run arm64: Rename ARM64_WORKAROUND_2966298 rtc: cmos: Use ACPI alarm for non-Intel x86 systems too rtc: Adjust failure return code for cmos_set_alarm() rtc: mc146818-lib: Adjust failure return code for mc146818_get_time() rtc: Add support for configuring the UIP timeout for RTC reads rtc: Extend timeout for waiting for UIP to clear to 1s nouveau/vmm: don't set addr on the fail path to avoid warning ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path mm/rmap: fix misplaced parenthesis of a likely() mm/sparsemem: fix race in accessing memory_section->usage rename(): fix the locking of subdirectories serial: sc16is7xx: improve regmap debugfs by using one regmap per port serial: sc16is7xx: remove wasteful static buffer in sc16is7xx_regmap_name() serial: sc16is7xx: remove global regmap from struct sc16is7xx_port serial: sc16is7xx: remove unused line structure member serial: sc16is7xx: change EFR lock to operate on each channels serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO serial: sc16is7xx: fix invalid sc16is7xx_lines bitfield in case of probe error serial: sc16is7xx: remove obsolete loop in sc16is7xx_port_irq() serial: sc16is7xx: improve do/while loop in sc16is7xx_irq() LoongArch/smp: Call rcutree_report_cpu_starting() earlier mm: page_alloc: unreserve highatomic page blocks before oom ksmbd: set v2 lease version on lease upgrade ksmbd: fix potential circular locking issue in smb2_set_ea() ksmbd: don't increment epoch if current state and request state are same ksmbd: send lease break notification on FILE_RENAME_INFORMATION ksmbd: Add missing set_freezable() for freezable kthread Revert "drm/amd: Enable PCIe PME from D3" drm/amd/display: pbn_div need be updated for hotplug event wifi: mac80211: fix potential sta-link leak net/smc: fix illegal rmb_desc access in SMC-D connection dump tcp: make sure init the accept_queue's spinlocks once bnxt_en: Wait for FLR to complete during probe vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING llc: make llc_ui_sendmsg() more robust against bonding changes llc: Drop support for ETH_P_TR_802_2. udp: fix busy polling net: fix removing a namespace with conflicting altnames tun: fix missing dropped counter in tun_xdp_act tun: add missing rx stats accounting in tun_xdp_act net: micrel: Fix PTP frame parsing for lan8814 net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv netfs, fscache: Prevent Oops in fscache_put_cache() tracing: Ensure visibility when inserting an element into tracing_map afs: Hide silly-rename files from userspace tcp: Add memory barrier to tcp_push() netlink: fix potential sleeping issue in mqueue_flush_file ipv6: init the accept_queue's spinlocks in inet6_create net/mlx5: DR, Use the right GVMI number for drop action net/mlx5: DR, Can't go to uplink vport on RX rule net/mlx5: Use mlx5 device constant for selecting CQ period mode for ASO net/mlx5e: Allow software parsing when IPsec crypto is enabled net/mlx5e: fix a double-free in arfs_create_groups net/mlx5e: fix a potential double-free in fs_any_create_groups rcu: Defer RCU kthreads wakeup when CPU is dying netfilter: nft_limit: reject configurations that cause integer overflow btrfs: fix infinite directory reads btrfs: set last dir index to the current last index when opening dir btrfs: refresh dir last index during a rewinddir(3) call btrfs: fix race between reading a directory and adding entries to it netfilter: nf_tables: restrict anonymous set and map names to 16 bytes netfilter: nf_tables: validate NFPROTO_* family net: stmmac: Wait a bit for the reset to take effect net: mvpp2: clear BM pool before initialization selftests: netdevsim: fix the udp_tunnel_nic test fjes: fix memleaks in fjes_hw_setup net: fec: fix the unhandled context fault from smmu nbd: always initialize struct msghdr completely btrfs: avoid copying BTRFS_ROOT_SUBVOL_DEAD flag to snapshot of subvolume being deleted btrfs: ref-verify: free ref cache before clearing mount opt btrfs: tree-checker: fix inline ref size in error messages btrfs: don't warn if discard range is not aligned to sector btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args btrfs: don't abort filesystem when attempting to snapshot deleted subvolume rbd: don't move requests to the running list on errors exec: Fix error handling in begin_new_exec() wifi: iwlwifi: fix a memory corruption hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain netfilter: nf_tables: reject QUEUE/DROP verdict parameters platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe ksmbd: fix global oob in ksmbd_nl_policy firmware: arm_scmi: Check mailbox/SMT channel for consistency xfs: read only mounts with fsopen mount API are busted gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 cpufreq: intel_pstate: Refine computation of P-state for given frequency drm: Don't unref the same fb many times by mistake due to deadlock handling drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking drm/tidss: Fix atomic_flush check drm/amd/display: Disable PSR-SU on Parade 0803 TCON again platform/x86: intel-uncore-freq: Fix types in sysfs callbacks drm/bridge: nxp-ptn3460: simplify some error checking drm/amd/display: Port DENTIST hang and TDR fixes to OTG disable W/A drm/amdgpu/pm: Fix the power source flag error erofs: get rid of the remaining kmap_atomic() erofs: fix lz4 inplace decompression media: ov13b10: Support device probe in non-zero ACPI D state media: ov13b10: Enable runtime PM before registering async sub-device bus: mhi: ep: Do not allocate event ring element on stack PM: core: Remove unnecessary (void *) conversions PM: sleep: Fix possible deadlocks in core system-wide PM code thermal: intel: hfi: Refactor enabling code into helper functions thermal: intel: hfi: Disable an HFI instance when all its CPUs go offline thermal: intel: hfi: Add syscore callbacks for system-wide PM fs/pipe: move check to pipe_has_watch_queue() pipe: wakeup wr_wait after setting max_usage ARM: dts: qcom: sdx55: fix USB wakeup interrupt types ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12 ARM: dts: qcom: sdx55: fix pdc '#interrupt-cells' ARM: dts: qcom: sdx55: fix USB DP/DM HS PHY interrupts ARM: dts: qcom: sdx55: fix USB SS wakeup dlm: use kernel_connect() and kernel_bind() serial: core: Provide port lock wrappers serial: sc16is7xx: Use port lock wrappers serial: sc16is7xx: fix unconditional activation of THRI interrupt btrfs: zoned: factor out prepare_allocation_zoned() btrfs: zoned: optimize hint byte for zoned allocator drm/panel-edp: drm/panel-edp: Fix AUO B116XAK01 name and timing Revert "powerpc/64s: Increase default stack size to 32KB" drm/bridge: parade-ps8640: Wait for HPD when doing an AUX transfer drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33] drm/bridge: sii902x: Use devm_regulator_bulk_get_enable() drm/bridge: sii902x: Fix probing race issue drm/bridge: sii902x: Fix audio codec unregistration drm/bridge: parade-ps8640: Ensure bridge is suspended in .post_disable() drm/bridge: parade-ps8640: Make sure we drop the AUX mutex in the error case drm/exynos: fix accidental on-stack copy of exynos_drm_plane drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume gpio: eic-sprd: Clear interrupt after set the interrupt type block: Move checking GENHD_FL_NO_PART to bdev_add_partition() drm/bridge: anx7625: Ensure bridge is suspended in disable() spi: bcm-qspi: fix SFDP BFPT read by usig mspi read spi: fix finalize message on error return MIPS: lantiq: register smp_ops on non-smp platforms cxl/region：Fix overflow issue in alloc_hpa() mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan tick/sched: Preserve number of idle sleeps across CPU hotplug events x86/entry/ia32: Ensure s32 is sign extended to s64 serial: core: fix kernel-doc for uart_port_unlock_irqrestore() net/mlx5e: Handle hardware IPsec limits events Linux 6.1.76 Change-Id: I4725561e2ca5df042a1fe307af701e7d5e2d06c8 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-04-16 15:01:11 +00:00
Greg Kroah-Hartman	3ca4271578	Reapply "Merge tag 'android14-6.1.75_r00' into android14-6.1" This reverts commit `6bad1052c2`, it is the LTS merge that had to previously get reverted due to being merged too early. Cc: Todd Kjos <tkjos@google.com> Change-Id: I31b7d660bd833cf022ac4870f6d01e723fda5182 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-04-02 19:49:12 +00:00
Todd Kjos	6bad1052c2	Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" This reverts commit `1dbafe61e3`. Reason for revert: Too early. Needs to wait until 2024-03-27 Change-Id: I769b944bd089aa2278659ec87f7ba4ac4e74ee4a Signed-off-by: Todd Kjos <tkjos@google.com>	2024-03-07 21:18:27 +00:00
Greg Kroah-Hartman	1dbafe61e3	Merge tag 'android14-6.1.75_r00' into android14-6.1 This merges up to the 6.1.75 LTS release into the android14-6.1 branch. Included in here are the following commits: * `6644fcfcbc` ANDROID: Fix CRC error with iommu_* functions * `c84ac52917` Revert "bpf: add percpu stats for bpf_map elements insertions/deletions" * `0125855f7e` Revert "bpf: Add map and need_defer parameters to .map_fd_put_ptr()" * `329c931b9d` Revert "bpf: Defer the free of inner map when necessary" * `c16bb76a0c` Merge 6.1.75 into android14-6.1-lts \|\ \| * `883d1a9562` Linux 6.1.75 \| * `cfa4683828` Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" \| * `f854bff46a` arm64: dts: armada-3720-turris-mox: set irq type for RTC \| * `17062a768c` Revert "KEYS: encrypted: Add check for strsep" \| * `b1cc57f976` riscv: Fix wrong usage of lm_alias() when splitting a huge linear mapping \| * `9025ee1079` block: Remove special-casing of compound pages \| * `2c46871ac4` i2c: s3c24xx: fix transferring more than one message in polling mode \| * `63892860b0` i2c: s3c24xx: fix read transfers in polling mode \| * `380540bb06` ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work \| * `8f7f03e8cd` selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes \| * `13e6065fed` mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure \| * `31944f4264` loop: fix the the direct I/O support check when used on top of block devices \| * `f2cc7d90a8` ethtool: netlink: Add missing ethnl_ops_begin/complete \| * `7809296dc1` kdb: Fix a potential buffer overflow in kdb_local() \| * `50ee63b800` ipvs: avoid stat macros calls from preemptible context \| * `4a45e7e7d2` netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description \| * `b56bce52f9` netfilter: nf_tables: skip dead set elements in netlink dump \| * `9cb084df01` netfilter: nf_tables: do not allow mismatch field size and set key length \| * `7ae19ee81c` netfilter: bridge: replace physindev with physinif in nf_bridge_info \| * `754ca18ed3` netfilter: propagate net to nf_bridge_get_physindev \| * `3f1f505277` netfilter: nf_queue: remove excess nf_bridge variable \| * `52d01a40b7` netfilter: nfnetlink_log: use proper helper for fetching physinif \| * `dfa01315c3` netfilter: nft_limit: do not ignore unsupported flags \| * `f00f11aae1` netfilter: nf_tables: reject invalid set policy \| * `2f32d518a1` mptcp: relax check on MPC passive fallback \| * `4631c2dd69` LoongArch: BPF: Prevent out-of-bounds memory access \| * `ca65da8da1` net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe \| * `4108b86e32` bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS \| * `f1ec1b6c5c` net: stmmac: ethtool: Fixed calltrace caused by unbalanced disable_irq_wake calls \| * `359fadf5f7` drm/amdkfd: fixes for HMM mem allocation \| * `81b86a10b8` drm/amdkfd: Use resource_size() helper function \| * `1c3aa875db` dt-bindings: gpio: xilinx: Fix node address in gpio \| * `24e00f0fa9` net: ravb: Fix dma_addr_t truncation in error case \| * `615501d41b` udp: annotate data-races around up->pending \| * `33cf52b6e5` block: ensure we hold a queue reference when using queue limits \| * `fdf3df297f` mptcp: refine opt_mp_capable determination \| * `c0749c8770` mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req() \| * `51e4cb032d` mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() \| * `081273082d` mptcp: strict validation before using mp_opt->hmac \| * `67feafe7a3` mptcp: mptcp_parse_option() fix for MPTCPOPT_MP_JOIN \| * `cb183a586e` net: phy: micrel: populate .soft_reset for KSZ9131 \| * `ecf0ebf0e6` amt: do not use overwrapped cb area \| * `c96da963de` net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames \| * `ee1dc3bf86` net: qualcomm: rmnet: fix global oob in rmnet_policy \| * `93eb80c5c9` s390/pci: fix max size calculation in zpci_memcpy_toio() \| * `cad471227a` ASoC: mediatek: sof-common: Add NULL check for normal_link string \| * `69f0bebe91` PCI: mediatek-gen3: Fix translation window size calculation \| * `94667790e5` PCI: keystone: Fix race condition when initializing PHYs \| * `11923a8df8` nvmet-tcp: Fix the H2C expected PDU len calculation \| * `fb711858e6` nvme: trace: avoid memcpy overflow warning \| * `cac037db24` nvmet: re-fix tracing strncpy() warning \| * `e92fe6f51b` serial: imx: Correct clock error message in function probe() \| * `938b88a2d9` usb: xhci-mtk: fix a short packet issue of gen1 isoc-in transfer \| * `9d4fa5fe2b` apparmor: avoid crash when parsed profile name is empty \| * `3a46101871` cxl/region: fix x9 interleave typo \| * `16cbe4bad8` perf env: Avoid recursively taking env->bpf_progs.lock \| * `83ccd15717` nvmet-tcp: fix a crash in nvmet_req_complete() \| * `2871aa4070` nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length \| * `8ed3eb92a5` vdpa: Fix an error handling path in eni_vdpa_probe() \| * `b2cb99d26e` spmi: mtk-pmif: Serialize PMIF status check and command submission \| * `28a45e15c8` usb: cdc-acm: return correct error code on unsupported break \| * `8fd48981a7` tty: use 'if' in send_break() instead of 'goto' \| * `50608b54ad` tty: don't check for signal_pending() in send_break() \| * `6f0cd560ff` tty: early return from send_break() on TTY_DRIVER_HARDWARE_BREAK \| * `8e426f2499` tty: change tty_write_lock()'s ndelay parameter to bool \| * `ed863a4d48` perf genelf: Set ELF program header addresses properly \| * `4cb5213213` perf hisi-ptt: Fix one memory leakage in hisi_ptt_process_auxtrace_event() \| * `8f02951cee` perf header: Fix one memory leakage in perf_event__fprintf_event_update() \| * `eeeb3861c2` iio: adc: ad9467: fix scale setting \| * `e2b405b985` iio: adc: ad9467: don't ignore error codes \| * `89398709ae` iio: adc: ad9467: fix reset gpio handling \| * `f33bdf21e1` selftests/sgx: Skip non X86_64 platform \| * `bf92b82101` selftests/sgx: Include memory clobber for inline asm in test enclave \| * `2cfae256a1` selftests/sgx: Fix uninitialized pointer dereferences in encl_get_entry \| * `eb41e7e8b4` selftests/sgx: Fix uninitialized pointer dereference in error path \| * `63ee7be01a` serial: imx: fix tx statemachine deadlock \| * `3f9ec4227e` software node: Let args be NULL in software_node_get_reference_args \| * `893c3ca250` acpi: property: Let args be NULL in __acpi_node_get_property_reference \| * `76be69716c` base/node.c: initialize the accessor list before registering \| * `d5ef7480d6` libapi: Add missing linux/types.h header to get the __u64 type on io.h \| * `d74173bda2` serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed \| * `e6fce099c9` power: supply: bq256xx: fix some problem in bq256xx_hw_init \| * `ddd3fe99b4` power: supply: cw2015: correct time_to_empty units in sysfs \| * `559e25126c` MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup() \| * `2504864be6` MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup() \| * `69e9a6944d` riscv: Fixed wrong register in XIP_FIXUP_FLASH_OFFSET macro \| * `add57b5298` riscv: Fix set_direct_map_default_noflush() to reset _PAGE_EXEC \| * `b4f4d42765` riscv: Fix set_memory_XX() and set_direct_map_XX() by splitting huge linear mappings \| * `d2ebb8143b` riscv: Fix module_alloc() that did not reset the linear mapping permissions \| * `890cfe5337` riscv: Check if the code to patch lies in the exit section \| * `9ad0ab0bbc` mips: Fix incorrect max_low_pfn adjustment \| * `1961a29b89` mips: dmi: Fix early remap on MIPS32 \| * `e341194063` mfd: intel-lpss: Fix the fractional clock divider flags \| * `7fdc6c187e` leds: aw2013: Select missing dependency REGMAP_I2C \| * `527e8c5f3d` mfd: syscon: Fix null pointer dereference in of_syscon_register() \| * `ac3b65cbc6` ARM: 9330/1: davinci: also select PINCTRL \| * `d2ba8eea74` serial: sc16is7xx: set safe default SPI clock frequency \| * `4f61154a68` serial: sc16is7xx: add check for unsupported SPI modes during probe \| * `f09b277f73` HID: wacom: Correct behavior when processing some confidence == false touches \| * `710bd46860` iio: adc: ad7091r: Pass iio_dev to event handler \| * `dba788e25f` KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache \| * `8a4f6a176a` KVM: arm64: vgic-v4: Restore pending state on host userspace write \| * `455ebc1910` x86/kvm: Do not try to disable kvmclock if it was not enabled \| * `88f4dd8b9f` PCI: mediatek: Clear interrupt status before dispatching handler \| * `0c883bc9fa` PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support \| * `d3c08d1015` PCI/P2PDMA: Remove reference to pci_p2pdma_map_sg() \| * `970c0899a4` cxl/port: Fix decoder initialization when nr_targets > interleave_ways \| * `23f9749108` Revert "net: rtnetlink: Enslave device before bringing it up" \| * `f2ddfc7d3a` wifi: mwifiex: configure BSSID consistently when starting AP \| * `54e1864b13` wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors \| * `0075a5d69d` wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code \| * `debfa60412` wifi: mt76: fix broken precal loading from MTD for mt7915 \| * `1edce43f47` iommu/dma: Trace bounce buffer usage when mapping buffers \| * `cc7e8482c6` iommu/arm-smmu-qcom: Add missing GMU entry to match table \| * `516ecb2436` LoongArch: Fix and simplify fcsr initialization on execve() \| * `6cc9c0af0a` bpf: Fix re-attachment branch in bpf_tracing_prog_attach \| * `96860d9ad4` Bluetooth: Fix atomicity violation in {min,max}_key_size_set \| * `7c02ca5542` rootfs: Fix support for rootfstype= when root= is given \| * `f5c29a3a7e` md/raid1: Use blk_opf_t for read and write operations \| * `7b85554c7c` pwm: Fix out-of-bounds access in of_pwm_single_xlate() \| * `00e29df1b4` pwm: jz4740: Don't use dev_err_probe() in .request() \| * `a372f1d01b` netfilter: nf_tables: check if catch-all set element is active in next generation \| * `c6350b5cb7` block: Fix iterating over an empty bio with bio_for_each_folio_all \| * `ef31cc8779` block: add check that partition length needs to be aligned with block size \| * `0c8d252d0a` drm/amd: Enable PCIe PME from D3 \| * `f49a30a24f` scsi: mpi3mr: Block PEL Enable Command on Controller Reset and Unrecoverable State \| * `546e981eea` scsi: mpi3mr: Refresh sdev queue depth after controller reset \| * `3378333263` scsi: target: core: add missing file_{start,end}_write() \| * `01644b8616` scsi: ufs: core: Simplify power management during async scan \| * `81f444f228` fbdev: flush deferred IO before closing \| * `ccbee2843e` fbdev: flush deferred work in fb_deferred_io_fsync() \| * `d6cc8dd231` io_uring/rw: ensure io->bytes_done is always initialized \| * `c866866c79` ksmbd: only v2 leases handle the directory \| * `380965e48e` ksmbd: fix UAF issue in ksmbd_tcp_new_connection() \| * `6eb8015492` ksmbd: validate mech token in session setup \| * `0914dc8041` ALSA: hda/realtek: Enable headset mic on Lenovo M70 Gen5 \| * `5648a0087f` ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on HP ZBook \| * `3253abcd9b` ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx \| * `29f6eccbcf` ALSA: oxygen: Fix right channel of capture volume mixer \| * `104f95698c` drm/vmwgfx: Keep a gem reference to user bos in surfaces \| * `5a4087a907` drm/vmwgfx: Fix possible invalid drm gem put calls \| * `a71776bbd8` serial: omap: do not override settings for RS485 support \| * `b5a2232ba8` serial: 8250_exar: Set missing rs485_supported flag \| * `36b0710502` serial: imx: Ensure that imx_uart_rs485_config() is called with enabled clock \| * `d5f13c1d01` serial: core, imx: do not set RS485 enabled if it is not supported \| * `dac0dd3d80` serial: 8250_bcm2835aux: Restore clock error handling \| * `15000d6f29` serial: core: make sure RS485 cannot be enabled when it is not supported \| * `f790bd27a7` serial: core: fix sanitizing check for RTS settings \| * `974a0a6944` usb: mon: Fix atomicity violation in mon_bin_vma_fault \| * `206e2ddeb7` usb: typec: class: fix typec_altmode_put_partner to put plugs \| * `d0320b9ac6` Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs" \| * `097cdc78c6` usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled \| * `45c766231e` usb: cdns3: fix iso transfer error when mult is not zero \| * `3f2bf7cac0` usb: cdns3: fix uvc failure work since sg support enabled \| * `e894b1b038` usb: chipidea: wait controller resume finished for wakeup irq \| * `3450197e9a` Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-only" \| * `598f9d5a3b` Revert "usb: dwc3: Soft reset phy on probe for host" \| * `d5c4a04205` usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart \| * `789eade47f` usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host() \| * `c952654e1a` tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug \| * `9ccf64e763` powerpc/64s: Increase default stack size to 32KB \| * `7ac029af00` clocksource/drivers/timer-ti-dm: Fix make W=n kerneldoc warnings \| * `6696f76c32` binder: fix race between mmput() and do_exit() \| * `437360133c` xen-netback: don't produce zero-size SKB frags \| * `3ed5f55599` Input: atkbd - use ab83 as id when skipping the getid command \| * `45e565b55b` mips/smp: Call rcutree_report_cpu_starting() earlier \| * `16e1d4fa13` binder: fix unused alloc->free_async_space \| * `c5255d1229` binder: fix async space check for 0-sized buffers \| * `66b3578797` keys, dns: Fix size check of V1 server-list header \| * `60a9a5fca6` selftests/bpf: Add assert for user stacks in test_task_stack \| * `3590da14e1` of: unittest: Fix of_count_phandle_with_args() expected value message \| * `581ade6be5` fbdev: imxfb: fix left margin setting \| * `b9d760dae5` of: Fix double free in of_parse_phandle_with_args_map \| * `676af10d0c` ksmbd: validate the zero field of packet header \| * `222618b737` kselftest/alsa - mixer-test: Fix the print format specifier warning \| * `b77ae4f8c1` kselftest/alsa - mixer-test: fix the number of parameters to ksft_exit_fail_msg() \| * `74416a207f` drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init \| * `4525525cb7` drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c \| * `a9f68a23ca` IB/iser: Prevent invalidating wrong MR \| * `96dc4d204a` mmc: sdhci_omap: Fix TI SoC dependencies \| * `5aa65e5f20` mmc: sdhci_am654: Fix TI SoC dependencies \| * `d8d8897d65` ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put() \| * `cda7762bea` ALSA: scarlett2: Add missing error checks to _ctl_get() \| `be0b1be4ac` ALSA: scarlett2: Allow passing any output to line_out_remap() \| * `be96acd3ea` ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config() \| * `6232b7505c` ALSA: scarlett2: Add missing error check to scarlett2_config_save() \| * `74341edb7d` ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[] \| * `40fe0903fa` pwm: stm32: Fix enable count for clk in .probe() \| * `0d554b420c` pwm: stm32: Use hweight32 in stm32_pwm_detect_channels \| * `ade959ed67` pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable \| * `c4b1f10f14` clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw \| * `6d98d24917` accel/habanalabs: fix information leak in sec_attest_info() \| * `7ac0adc7df` drm/mediatek: dp: Add phy_mtk_dp module as pre-dependency \| * `f930dbdc95` clk: si5341: fix an error code problem in si5341_output_clk_set_rate \| * `24961a5dc7` watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused \| * `6317445623` watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling \| * `3bde94e858` watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO \| * `06b854238e` watchdog: set cdev owner before adding \| * `c249ef9d09` drivers: clk: zynqmp: update divider round rate logic \| * `b61ca9c34c` drivers: clk: zynqmp: calculate closest mux rate \| * `74aeef7e43` clk: qcom: videocc-sm8150: Add missing PLL config property \| * `52d741c95d` clk: qcom: videocc-sm8150: Update the videocc resets \| * `52e2ebc064` dt-bindings: clock: Update the videocc resets for sm8150 \| * `4f31f357e5` f2fs: fix to check return value of f2fs_recover_xattr_data \| * `2c6537c58b` drm/amd/pm: fix a double-free in amdgpu_parse_extended_power_table \| * `4e26e2d485` gpu/drm/radeon: fix two memleaks in radeon_vm_init \| * `35fa2394d2` drivers/amd/pm: fix a use-after-free in kv_parse_power_table \| * `f957a1be64` drm/amd/pm: fix a double-free in si_dpm_init \| * `591e77fedc` drm/amdgpu/debugfs: fix error code when smc register accessors are NULL \| * `3ec6ce0651` drm/mediatek: Fix underrun in VDO1 when switches off the layer \| * `518efe60bb` drm/mediatek: Return error if MDP RDMA failed to enable the clock \| * `aa3e61cf89` drm/msm/dpu: Drop enable and frame_count parameters from dpu_hw_setup_misr() \| * `08d7e291af` drm/msm/dpu: Set input_sel bit for INTF \| * `9570ae0e1d` clk: renesas: rzg2l: Check reset monitor registers \| * `3e1dd6a1b4` clk: renesas: rzg2l-cpg: Reuse code in rzg2l_cpg_reset() \| * `2db7760422` media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of m88ds3103_probe() \| * `74e3f165d3` media: dvbdev: drop refcount on error path in dvb_device_open() \| * `4d6e15a5ea` f2fs: fix to update iostat correctly in f2fs_filemap_fault() \| * `8835766027` f2fs: fix to check compress file in f2fs_move_file_range() \| * `9bfd5ea715` f2fs: fix to wait on block writeback for post_read case \| * `e67911d2ca` drm/panel: st7701: Fix AVCL calculation \| * `bb17cc851e` media: rkisp1: Fix media device memory leak \| * `690b7c356f` media: dt-bindings: media: rkisp1: Fix the port description for the parallel interface \| * `438193dcc2` media: imx-mipi-csis: Fix clock handling in remove() \| * `df2adafa62` clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config \| * `40a156cf08` RDMA/hns: Fix memory leak in free_mr_init() \| * `dada3fdb4e` media: cx231xx: fix a memleak in cx231xx_init_isoc \| * `b075ed8dcc` drm/bridge: tc358767: Fix return value on error case \| * `9a3b226370` drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable \| * `60c23f9aeb` drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table \| * `0f19543097` drm/radeon/dpm: fix a memleak in sumo_parse_power_table \| * `c4ff554081` drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() \| * `048cbfd605` drm/panfrost: Ignore core_mask for poweroff and disable PWRTRANS irq \| * `c32ee7286f` ASoC: Intel: glk_rt5682_max98357a: fix board id mismatch \| * `7682ef5c14` drm/drv: propagate errors from drm_modeset_register_all() \| * `19b01c6c19` drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks \| * `b234ecad20` drm/msm/mdp4: flush vblank event on disable \| * `982eb772e1` ASoC: cs35l34: Fix GPIO name and drop legacy include \| * `940484c055` ASoC: cs35l33: Fix GPIO name and drop legacy include \| * `2da8e20346` drm/tidss: Fix dss reset \| * `553574c023` drm/tidss: Check for K2G in in dispc_softreset() \| * `f099c742ca` drm/tidss: Return error value from from softreset \| * `10a437c604` drm/tidss: Move reset to the end of dispc_init() \| * `da72ff8def` drm/radeon: check return value of radeon_ring_lock() \| * `e6667551ed` drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check() \| * `9ac2845a2e` drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg() \| * `f0145860c2` f2fs: fix to avoid dirent corruption \| * `4bab3ad44d` drm/bridge: Fix typo in post_disable() description \| * `dab1227007` media: rkvdec: Hook the (TRY_)DECODER_CMD stateless ioctls \| * `563f34c24c` media: verisilicon: Hook the (TRY_)DECODER_CMD stateless ioctls \| * `32b4b2dde3` media: mtk-jpeg: Remove cancel worker in mtk_jpeg_remove to avoid the crash of multi-core JPEG devices \| * `f211621deb` media: mtk-jpegdec: export jpeg decoder functions \| * `30773ea47d` media: pvrusb2: fix use after free on context disconnection \| * `4019c80968` drm/tilcdc: Fix irq free on unload \| * `81f1bd8596` drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function \| * `37b400c803` drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer \| * `dbea48e916` drm/panel-elida-kd35t133: hold panel in reset for unprepare \| * `019bba28d1` RDMA/hns: Fix inappropriate err code for unsupported operations \| * `a867b891f9` RDMA/usnic: Silence uninitialized symbol smatch warnings \| * `d260b65b2b` drm/panfrost: Really power off GPU cores in panfrost_gpu_power_off() \| * `8578a795ba` Revert "drm/omapdrm: Annotate dma-fence critical section in commit path" \| * `3e6bf96561` Revert "drm/tidss: Annotate dma-fence critical section in commit path" \| * `544d223d71` ARM: davinci: always select CONFIG_CPU_ARM926T \| * `62a1fedeb1` ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() \| * `1b481cb536` mlxbf_gige: Enable the GigE port in mlxbf_gige_open \| * `7ad5e7a35c` mlxbf_gige: Fix intermittent no ip issue \| * `0b5b831122` net/sched: act_ct: fix skb leak and crash on ooo frags \| * `b91d31de9a` sctp: fix busy polling \| * `9233a88f4b` sctp: support MSG_ERRQUEUE flag in recvmsg() \| * `3c0bd2b066` bpf: sockmap, fix proto update hook to avoid dup calls \| * `6e9429f9c6` null_blk: don't cap max_hw_sectors to BLK_DEF_MAX_SECTORS \| * `a623d31805` block: make BLK_DEF_MAX_SECTORS unsigned \| * `33f93ce22e` Bluetooth: btmtkuart: fix recv_buf() return value \| * `81f3b6ea31` Bluetooth: Fix bogus check for re-auth no supported with non-ssp \| * `55c88a7efb` netfilter: nf_tables: mark newset as dead on transaction abort \| * `68aebba59e` wifi: iwlwifi: mvm: send TX path flush in rfkill \| * `6cc82456e3` wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request \| * `8915946cde` wifi: rtlwifi: rtl8192se: using calculate_bit_shift() \| * `62badccc7c` wifi: rtlwifi: rtl8192ee: using calculate_bit_shift() \| * `a277e8e9fe` wifi: rtlwifi: rtl8192de: using calculate_bit_shift() \| * `b716c8483c` wifi: rtlwifi: rtl8192ce: using calculate_bit_shift() \| * `d938e470b2` wifi: rtlwifi: rtl8192cu: using calculate_bit_shift() \| * `35fb6b7574` wifi: rtlwifi: rtl8192c: using calculate_bit_shift() \| * `937f65a125` wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift() \| * `dd9e3d9513` wifi: rtlwifi: add calculate_bit_shift() \| * `ce9b43e58c` arm64: dts: qcom: ipq6018: Fix up indentation \| * `20fb17328b` arm64: dts: qcom: ipq6018: Pad addresses to 8 hex digits \| * `ba71baee6e` arm64: dts: qcom: ipq6018: Use lowercase hex \| * `cb65c2caa1` arm64: dts: qcom: ipq6018: improve pcie phy pcs reg table \| * `45d8d80cda` arm64: dts: qcom: ipq6018: fix clock rates for GCC_USB0_MOCK_UTMI_CLK \| * `ab23e4ef89` arm64: dts: qcom: sc7280: Mark SDHCI hosts as cache-coherent \| * `e765363ecf` block: add check of 'minors' and 'first_minor' in device_add_disk() \| * `a4529948df` arm64: dts: qcom: sm8150-hdk: fix SS USB regulators \| * `bf5e9d28a8` soc: qcom: llcc: Fix dis_cap_alloc and retain_on_pc configuration \| * `aaf0fc13be` dma-mapping: clear dev->dma_mem to NULL after freeing it \| * `542da27eac` virtio/vsock: fix logic which reduces credit update messages \| * `f69365e3a7` ipmr: support IP_PKTINFO on cache report IGMP msg \| * `0c867561ce` selftests/net: fix grep checking for fib_nexthop_multiprefix \| * `c458be3909` ARM: dts: stm32: don't mix SCMI and non-SCMI board compatibles \| * `fdbe94c524` scsi: hisi_sas: Correct the number of global debugfs registers \| * `6491d9ea93` scsi: hisi_sas: Rollback some operations if FLR failed \| * `3d5a4fa56d` scsi: hisi_sas: Replace with standard error code return value \| * `35657d1ba8` arm64: dts: imx8mm: Reduce GPU to nominal speed \| * `a4210a686a` arm64: dts: renesas: white-hawk-cpu: Fix missing serial console pin control \| * `9f5b79cf12` block: Set memalloc_noio to false on device_add_disk() error path \| * `4196b45370` selftests/bpf: Relax time_tai test for equal timestamps in tai_forward \| * `0c9318d49e` wifi: mt76: mt7921: fix country count limitation for CLC \| * `fe002eeda4` arm64: dts: mediatek: mt8183: correct MDP3 DMA-related nodes \| * `9c91f58498` dt-bindings: media: mediatek: mdp3: correct RDMA and WROT node with generic names \| * `ba5e58dacf` arm64: dts: hisilicon: hikey970-pmic: fix regulator cells properties \| * `b1d4d54d32` bpf: Fix verification of indirect var-off stack access \| * `4054b2b1e6` wifi: mt76: mt7921s: fix workqueue problem causes STA association fail \| * `4486b2e5db` arm64: dts: qcom: sc7280: fix usb_2 wakeup interrupt types \| * `361b4175dd` arm64: dts: qcom: sc7280: Mark Adreno SMMU as DMA coherent \| * `a16a476b5c` arm64: dts: qcom: sc7280: Fix up GPU SIDs \| * `9e1dafa5c3` arm64: dts: qcom: sm8350: Fix DMA0 address \| * `1623432c6a` arm64: dts: qcom: sdm845-db845c: correct LED panic indicator \| * `773c09af31` arm64: dts: qcom: qrb5165-rb5: correct LED panic indicator \| * `9435bbc8d9` scsi: fnic: Return error if vmalloc() failed \| * `fc3e3c50a0` bpf: fix check for attempt to corrupt spilled pointer \| * `50e9fbddcb` selftests/net: specify the interface when do arping \| * `62fca83303` bpf: Defer the free of inner map when necessary \| * `e05b322c82` bpf: Add map and need_defer parameters to .map_fd_put_ptr() \| * `a6fb03a9c9` bpf: add percpu stats for bpf_map elements insertions/deletions \| * `1010882619` rcu-tasks: Provide rcu_trace_implies_rcu_gp() \| * `db44bac18a` arm64: dts: qcom: sm6350: Make watchdog bark interrupt edge triggered \| * `8e335e7759` arm64: dts: qcom: sc8280xp: Make watchdog bark interrupt edge triggered \| * `66cdbc4e80` arm64: dts: qcom: sm8250: Make watchdog bark interrupt edge triggered \| * `385f30d448` arm64: dts: qcom: sm8150: Make watchdog bark interrupt edge triggered \| * `5e8267cbc0` arm64: dts: qcom: sdm845: Make watchdog bark interrupt edge triggered \| * `bc9a45a06a` arm64: dts: qcom: sc7280: Make watchdog bark interrupt edge triggered \| * `30d0c5fe2c` arm64: dts: qcom: sc7280: Mark some nodes as 'reserved' \| * `0200f1b6ba` arm64: dts: qcom: sc7180: Make watchdog bark interrupt edge triggered \| * `22529f0ac2` ARM: dts: qcom: sdx65: correct SPMI node name \| * `be1f34b93f` bpf: enforce precision of R0 on callback return \| * `f9f2d957a8` md: synchronize flush io with array reconfiguration \| * `b21a16909b` selftests/bpf: Fix erroneous bitmask operation \| * `ff9935181e` arm64: dts: ti: k3-am65-main: Fix DSS irq trigger type \| * `e9e59f3ee5` arm64: dts: ti: k3-am62a-main: Fix GPIO pin count in DT nodes \| * `436785a207` wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior \| * `6824ed5d5a` firmware: meson_sm: populate platform devices from sm device tree data \| * `00ac00ce8d` firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create() \| * `ac7c503bd5` net/ncsi: Fix netlink major/minor version numbers \| * `12db013dc9` ARM: dts: qcom: apq8064: correct XOADC register address \| * `638f381ab2` wifi: libertas: stop selecting wext \| * `7dd918d877` wifi: ath11k: Defer on rproc_get failure \| * `799a914e48` bpf: Add crosstask check to __bpf_get_stack \| * `1959a560ac` bpf, lpm: Fix check prefixlen before walking trie \| * `cd1896b922` wifi: rtw88: fix RX filter in FIF_ALLMULTI flag \| * `fdd9364163` wifi: plfxlc: check for allocation failure in plfxlc_usb_wreq_async() \| * `a058f0c432` pNFS: Fix the pnfs block driver's calculation of layoutget size \| * `b10370b1ea` SUNRPC: fix _xprt_switch_find_current_entry logic \| * `19f28fa8be` NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT \| * `83f2d54ca3` blocklayoutdriver: Fix reference leak of pnfs_device_node \| * `23ba22557a` csky: fix arch_jump_label_transform_static override \| * `4df0c942d0` crypto: scomp - fix req->dst buffer overflow \| * `490adf8be7` crypto: sahara - do not resize req->src when doing hash operations \| * `eae15c43be` crypto: sahara - fix processing hash requests with req->nbytes < sg->length \| * `6fc9576795` crypto: sahara - improve error handling in sahara_sha_process() \| * `5834cafc1d` crypto: sahara - fix wait_for_completion_timeout() error handling \| * `8b355e0478` crypto: sahara - fix ahash reqsize \| * `a75ba66b69` crypto: sahara - handle zero-length aes requests \| * `0545801b30` crypto: sahara - avoid skcipher fallback code duplication \| * `635308e604` crypto: virtio - Wait for tasklet to complete on device remove \| * `d69d7804cf` gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump \| * `caae86077d` fs: indicate request originates from old mount API \| * `9c285df949` erofs: fix memory leak on short-lived bounced pages \| * `48dcfc42ce` pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() \| * `d7e4268a51` crypto: hisilicon/zip - save capability registers in probe process \| * `a384d7dc4e` crypto: hisilicon/sec2 - save capability registers in probe process \| * `fc6b944de1` crypto: hisilicon/hpre - save capability registers in probe process \| * `4705731fc5` crypto: hisilicon/qm - add a function to set qm algs \| * `11d7a33905` crypto: hisilicon/zip - add zip comp high perf mode configuration \| * `6412f039ac` crypto: hisilicon/qm - save capability registers in qm init process \| * `d1f82d7210` crypto: sahara - fix error handling in sahara_hw_descriptor_create() \| * `435303ad8a` crypto: sahara - fix processing requests with cryptlen < sg->length \| * `e7e8fbfe6d` crypto: sahara - fix ahash selftest failure \| * `1f91280362` crypto: sahara - fix cbc selftest failure \| * `eecf2e1e0c` crypto: sahara - remove FLAGS_NEW_KEY logic \| * `4c0ac81a17` crypto: safexcel - Add error handling for dma_map_sg() calls \| * `d5d4dfc73b` crypto: af_alg - Disallow multiple in-flight AIO requests \| * `f3a11fdd02` crypto: ccp - fix memleak in ccp_init_dm_workarea \| * `baa79033e1` crypto: sa2ul - Return crypto_aead_setkey to transfer the error \| * `ae4747dab2` crypto: virtio - Handle dataq logic with tasklet \| * `e973b045c1` selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket \| * `5389407bba` mtd: Fix gluebi NULL pointer dereference caused by ftl notifier \| * `030a1147ed` kunit: debugfs: Fix unchecked dereference in debugfs_print_results() \| * `b841208b7e` ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error \| * `b412c486a3` ACPI: LPSS: Fix the fractional clock divider flags \| * `5980041cba` spi: sh-msiof: Enforce fixed DTDL for R-Car H3 \| * `ea6b597fca` efivarfs: Free s_fs_info on unmount \| * `d4a9aa7db5` efivarfs: force RO when remounting if SetVariable is not supported \| * `321b3a5592` calipso: fix memory leak in netlbl_calipso_add_pass() \| * `71f47a52ba` cpufreq: scmi: process the result of devm_of_clk_add_hw_provider() \| * `04fc66dd2b` cpufreq: Use of_property_present() for testing DT property presence \| * `79de65ac39` of: Add of_property_present() helper \| * `426710a2bc` platform/x86/intel/vsec: Fix xa_alloc memory leak \| * `0ff5cd92bb` platform/x86/intel/vsec: Use mutex for ida_alloc() and ida_free() \| * `1fa4a1e125` platform/x86/intel/vsec: Support private data \| * `3c48b2a7ce` platform/x86/intel/vsec: Enhance and Export intel_vsec_add_aux() \| * `c25f1555e0` KEYS: encrypted: Add check for strsep \| * `72222dfd76` ACPI: LPIT: Avoid u32 multiplication overflow \| * `2124c5bc22` ACPI: video: check for error while searching for backlight device parent \| * `08f7142e22` mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response \| * `a35ab02c85` spi: spi-zynqmp-gqspi: fix driver kconfig dependencies \| * `a2da3f9b1a` powerpc/imc-pmu: Add a null pointer check in update_events_in_group() \| * `f152a6bfd1` powerpc/powernv: Add a null pointer check in opal_powercap_init() \| * `9a523e1da6` powerpc/powernv: Add a null pointer check in opal_event_init() \| * `ed8d023cfa` powerpc/powernv: Add a null pointer check to scom_debug_init_one() \| * `327d4f2d66` selftests/powerpc: Fix error handling in FPU/VMX preemption tests \| * `026fd977dc` powerpc/pseries/memhp: Fix access beyond end of drmem array \| * `63df75d383` powerpc/44x: select I2C for CURRITUCK \| * `2fc51c4b7d` powerpc: add crtsavres.o to always-y instead of extra-y \| * `16b88e68b8` powerpc: remove checks for binutils older than 2.25 \| * `9dbac9fdae` EDAC/thunderx: Fix possible out-of-bounds string access \| * `c9275305d6` x86/mce/inject: Clear test status value \| * `0be645792c` x86/lib: Fix overflow when counting digits * \| `6e04c1ccf7` Merge branch 'android14-6.1' into branch 'android14-6.1-lts' * \| `c0f972f028` UPSTREAM: drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks * \| `8fe0623347` UPSTREAM: drm/msm/dsi: Enable runtime PM * \| `c3a1a1e97e` Merge branch 'android14-6.1' into branch 'android14-6.1-lts' * \| `48159eff53` Merge 6.1.74 into android14-6.1-lts \|\\| \| * `8fd7f44624` Linux 6.1.74 \| * `a31690d3dd` scripts/decode_stacktrace.sh: optionally use LLVM utilities \| * `5e67191818` coresight: etm4x: Fix width of CCITMIN field \| * `d08e756e25` PCI: Add ACS quirk for more Zhaoxin Root Ports \| * `41e3e3d813` leds: ledtrig-tty: Free allocated ttyname buffer on deactivate \| * `419602d08b` parport: parport_serial: Add Brainboxes device IDs and geometry \| * `3936b54a8d` parport: parport_serial: Add Brainboxes BAR details \| * `17a8519cb3` uio: Fix use-after-free in uio_open \| * `08af2ceb83` binder: fix comment on binder_alloc_new_buf() return value \| * `35a3e8ceaf` binder: fix trivial typo of binder_free_buf_locked() \| * `9fa04c93f2` binder: fix use-after-free in shinker's callback \| * `ee14fd2c8b` binder: use EPOLLERR from eventpoll.h \| * `bed0acf330` Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" \| * `e377a3346f` ksmbd: free ppace array on error in parse_dacl \| * `09d84f37f8` ksmbd: don't allow O_TRUNC open on read-only share \| * `c24fc060ab` bpf: Add --skip_encoding_btf_inconsistent_proto, --btf_gen_optimized to pahole flags for v1.25 \| * `0d242f739c` btf, scripts: Exclude Rust CUs with pahole \| * `b976593219` ASoC: SOF: Intel: hda-codec: Delay the codec device registration \| * `dcf95b26be` ACPI: resource: Add another DMI match for the TongFang GMxXGxx \| * `5816a82caf` ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP Envy X360 13-ay0xxx \| * `9d588f3b6f` drm/crtc: fix uninitialized variable use \| * `809ebacd22` ARM: sun9i: smp: fix return code check of of_property_match_string \| * `0ce688d88a` net: qrtr: ns: Return 0 if server port is not present \| * `1e1b2f34e9` virtio_blk: fix snprintf truncation compiler warning \| * `9efdc0081c` ida: Fix crash in ida_free when the bitmap is empty \| * `24f3fec911` pinctrl: cy8c95x0: Fix get_pincfg \| * `a54e7741cc` pinctrl: cy8c95x0: Fix typo \| * `75e94701c0` drm/amd/display: get dprefclk ss info from integration info table \| * `426ab60bd2` i2c: rk3x: fix potential spinlock recursion on poll \| * `5411e32927` smb: client: fix potential OOB in smb2_dump_detail() \| * `da7ba20a71` HID: nintendo: Prevent divide-by-zero on code \| * `87e2739656` dm audit: fix Kconfig so DM_AUDIT depends on BLK_DEV_DM \| * `d0085e100f` ALSA: hda/realtek: Add quirks for ASUS Zenbook 2022 Models \| * `2b055dc11e` ASoC: Intel: bytcr_rt5640: Add new swapped-speakers quirk \| * `8840d3491a` ASoC: Intel: bytcr_rt5640: Add quirk for the Medion Lifetab S10346 \| * `a63ab09a07` platform/x86: thinkpad_acpi: fix for incorrect fan reporting on some ThinkPad systems \| * `44521a5dc4` HID: nintendo: fix initializer element is not constant error \| * `3910d7a441` kselftest: alsa: fixed a print formatting warning \| * `2a36b4e5e6` Input: xpad - add Razer Wolverine V2 support \| * `31fbbc809c` wifi: iwlwifi: pcie: avoid a NULL pointer dereference \| * `05d268e2e4` ARC: fix spare error \| * `372a93921e` s390/scm: fix virtual vs physical address confusion \| * `626b0c0ab3` Input: i8042 - add nomux quirk for Acer P459-G2-M \| * `30fe4c4135` Input: atkbd - skip ATKBD_CMD_GETID in translated mode \| * `b6ef44cb6a` reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning \| * `c5d9fd8c5a` Input: psmouse - enable Synaptics InterTouch for ThinkPad L14 G1 \| * `b0407f68d9` ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI \| * `07787918c6` tracing: Fix uaf issue when open the hist or hist_debug file \| * `851865caac` MIPS: dts: loongson: drop incorrect dwmac fallback compatible \| * `708579592c` stmmac: dwmac-loongson: drop useless check for compatible fallback \| * `e75c3db904` tracing: Add size check when printing trace_marker output \| * `7d885c1717` tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing \| * `3ac74ed58f` jbd2: fix soft lockup in journal_finish_inode_data_buffers() \| * `bb0e510b74` platform/x86: intel-vbtn: Fix missing tablet-mode-switch events \| * `f379394a78` neighbour: Don't let neigh_forced_gc() disable preemption for long \| * `9b5044e17e` drm/crtc: Fix uninit-value bug in drm_mode_setcrtc \| * `28c9fced8d` jbd2: increase the journal IO's priority \| * `6b15330693` jbd2: correct the printing of write_flags in jbd2_write_superblock() \| * `c84f9a5ecb` clk: rockchip: rk3128: Fix HCLK_OTG gate register \| * `3fe5fbc3a5` clk: rockchip: rk3568: Add PLL rate for 292.5MHz \| * `c3597996a3` LoongArch: Preserve syscall nr across execve() \| * `c73cc2310a` hwmon: (corsair-psu) Fix probe when built-in \| * `53442204b1` drm/exynos: fix a wrong error checking \| * `1502a9a595` drm/exynos: fix a potential error pointer dereference \| * `92decec3ca` drm/amdgpu: Add NULL checks for function pointers \| * `5337fb3eba` arm64: dts: rockchip: Fix PCI node addresses on rk3399-gru \| * `ce97686124` nvme: prevent potential spectre v1 gadget \| * `df2bd52354` nvme: introduce helper function to get ctrl state \| * `a50562146d` ASoC: ops: add correct range check for limiting volume \| * `01a7727ab7` ASoC: da7219: Support low DC impedance headset \| * `a7d15ac085` net/tg3: fix race condition in tg3_reset_task() \| * `c342afc146` ASoC: hdac_hda: Conditionally register dais for HDMI and Analog \| * `0f37e198c3` ASoC: amd: yc: Add DMI entry to support System76 Pangolin 13 \| * `2fff601a1d` nouveau/tu102: flush all pdbs on vmm flush \| * `94d2a9da31` ASoC: Intel: skl_hda_dsp_generic: Drop HDMI routes when HDMI is not available \| * `1613195bf3` ASoC: rt5650: add mutex to avoid the jack detection failure \| * `b45e21b529` ASoC: cs43130: Fix incorrect frame delay configuration \| * `0c7833f758` ASoC: cs43130: Fix the position of const qualifier \| * `b0c9af3d31` ASoC: Intel: Skylake: mem leak in skl register function \| * `7c09cf8095` ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16 \| * `522f69ba6b` ASoC: Intel: Skylake: Fix mem leak in few functions \| * `9f1429c5aa` arm64: dts: rockchip: fix rk356x pcie msg interrupt name \| * `3996699d1f` ASoC: wm8974: Correct boost mixer inputs \| * `63360763bf` hwtracing: hisi_ptt: Don't try to attach a task \| * `2e3fc2a45a` hwtracing: hisi_ptt: Handle the interrupt in hardirq context \| * `319c5186d6` nvme-core: check for too small lba shift \| * `f84b0c6445` blk-mq: don't count completed flush data request as inflight in case of quiesce \| * `366d2101fc` smb: client, common: fix fortify warnings \| * `53a37135f7` drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer \| * `d551c77727` drm/amd/display: update dcn315 lpddr pstate latency \| * `3c781fbb4f` nvme-core: fix a memory leak in nvme_ns_info_from_identify() \| * `a37096b079` ALSA: hda: intel-nhlt: Ignore vbps when looking for DMIC 32 bps format \| * `08f6de7b3f` debugfs: fix automount d_fsdata usage \| * `d1d138c043` wifi: mac80211: handle 320 MHz in ieee80211_ht_cap_ie_to_sta_ht_cap \| * `0c880e1e38` wifi: avoid offset calculation on NULL pointer \| * `dd9465b108` wifi: cfg80211: lock wiphy mutex for rfkill poll \| * `91edb0cd1b` mptcp: fix uninit-value in mptcp_incoming_options \| * `9038962130` ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro \| * `9436ae696a` pinctrl: lochnagar: Don't build on MIPS \| * `5de9e9dd18` f2fs: explicitly null-terminate the xattr list * \| `8284d64954` Revert "ipv6: remove max_size check inline with ipv4" * \| `9b95c4490c` Merge "Merge 6.1.73 into android14-6.1-lts" into android14-6.1-lts \|\ \ \| * \| `a856aee341` Merge 6.1.73 into android14-6.1-lts \| \|\\| \| \| * `fec3b1451d` Linux 6.1.73 \| \| * `f9ee31dc7f` cifs: fix flushing folio regression for 6.1 backport \| \| * `0f22c8a6ef` ipv6: remove max_size check inline with ipv4 \| \| * `b2c545c398` Revert "nfsd: separate nfsd_last_thread() from nfsd_put()" \| \| * `db5f2f4db8` Revert "nfsd: call nfsd_last_thread() before final nfsd_put()" * \| \| `1eda34ffd5` ANDROID: db845c: Enable device tree overlay support \|/ / * \| `732ef8a408` Merge branch 'android14-6.1' into branch 'android14-6.1-lts' * \| `7aa979acec` Revert "splice, net: Add a splice_eof op to file-ops and socket-ops" * \| `a272a3f824` Revert "ipv4, ipv6: Use splice_eof() to flush" * \| `f901cbd38f` Revert "udp: introduce udp->udp_flags" * \| `cef6c6be87` Revert "udp: move udp->no_check6_tx to udp->udp_flags" * \| `8806a26646` Revert "udp: move udp->no_check6_rx to udp->udp_flags" * \| `7b70acfd8e` Revert "udp: move udp->gro_enabled to udp->udp_flags" * \| `583a8f8204` Revert "udp: move udp->accept_udp_{l4\|fraglist} to udp->udp_flags" * \| `cdf5cfe6d1` Revert "udp: lockless UDP_ENCAP_L2TPINUDP / UDP_GRO" * \| `f9f95b82b2` Revert "udp: annotate data-races around udp->encap_type" * \| `acd1add3c8` Revert "bpf, sockmap: af_unix stream sockets need to hold ref for pair sock" * \| `190985b1db` Revert "bpf: decouple prune and jump points" * \| `eba57b3513` Revert "bpf: remove unnecessary prune and jump points" * \| `9212bbf98b` Revert "bpf: Remove unused insn_cnt argument from visit_[func_call_]insn()" * \| `797e6a76ea` Revert "bpf: clean up visit_insn()'s instruction processing" * \| `c7b298c1b5` Revert "bpf: Support new 32bit offset jmp instruction" * \| `1699079678` Revert "bpf: handle ldimm64 properly in check_cfg()" * \| `63ca0ed629` Revert "bpf: Fix a verifier bug due to incorrect branch offset comparison with cpu=v4" * \| `e1b12db2de` Merge 6.1.72 into android14-6.1-lts \|\\| \| * `7c58bfa711` Linux 6.1.72 \| * `2dbe25ae06` Revert "interconnect: qcom: sm8250: Enable sync_state" \| * `f73a374c19` smb3: Replace smb2pdu 1-element arrays with flex-arrays \| * `ec162546a7` media: qcom: camss: Comment CSID dt_id field \| * `a5c3f2b4ce` bpf: syzkaller found null ptr deref in unix_bpf proto add \| * `15db682980` bpf: Fix a verifier bug due to incorrect branch offset comparison with cpu=v4 \| * `7cbdf36eab` net/sched: act_ct: Always fill offloading tuple iifidx \| * `2be4e8ac2d` net/sched: act_ct: additional checks for outdated flows \| * `87318b7e37` f2fs: compress: fix to assign compress_level for lz4 correctly \| * `397f719037` genirq/affinity: Only build SMP-only helper functions on SMP kernels \| * `28c9222e29` mmc: sdhci-sprd: Fix eMMC init failure after hw reset \| * `2813a434d4` mmc: core: Cancel delayed work before releasing host \| * `575e127041` mmc: rpmb: fixes pause retune on all RPMB partitions. \| * `9c5efaa09b` mmc: meson-mx-sdhc: Fix initialization frozen issue \| * `48e1d426f4` drm/amd/display: add nv12 bounding box \| * `11c3510d1d` drm/amdgpu: skip gpu_info fw loading on navi12 \| * `dafdeb7b91` mm: fix unmap_mapping_range high bits shift bug \| * `08038069c2` i2c: core: Fix atomic xfer check for non-preempt config \| * `53b42cb33f` x86/kprobes: fix incorrect return address calculation in kprobe_emulate_call_indirect \| * `d1db1ef5e6` firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards \| * `09a44d994b` ring-buffer: Fix 32-bit rb_time_read() race with rb_time_cmpxchg() \| * `820a7802f2` btrfs: mark the len field in struct btrfs_ordered_sum as unsigned \| * `ab220f4f5c` btrfs: fix qgroup_free_reserved_data int overflow \| * `0f74dde5be` octeontx2-af: Support variable number of lmacs \| * `7d3912613d` octeontx2-af: Fix pause frame configuration \| * `a29b15cc68` net/sched: act_ct: Take per-cb reference to tcf_ct_flow_table \| * `2bb4ecb334` netfilter: flowtable: GC pushes back packets to classic path \| * `df01de08b4` net/sched: act_ct: Fix promotion of offloaded unreplied tuple \| * `87466a3745` net/sched: act_ct: offload UDP NEW connections \| * `8b160f2fba` netfilter: flowtable: cache info of last offload \| * `c29a7656f8` netfilter: flowtable: allow unidirectional rules \| * `e681f711e9` net: sched: call tcf_ct_params_free to free params in tcf_ct_init \| * `d49bf9c1ce` mm/memory_hotplug: fix error handling in add_memory_resource() \| * `4666f003af` mm/memory_hotplug: add missing mem_hotplug_lock \| * `a576780a2a` lib/group_cpus.c: avoid acquiring cpu hotplug lock in group_cpus_evenly \| * `f33b27f5c3` genirq/affinity: Move group_cpus_evenly() into lib/ \| * `617ba3735d` genirq/affinity: Rename irq_build_affinity_masks as group_cpus_evenly \| * `aeeb4e4e49` genirq/affinity: Don't pass irq_affinity_desc array to irq_build_affinity_masks \| * `9e84d7bb15` genirq/affinity: Pass affinity managed mask array to irq_build_affinity_masks \| * `a1dcd17947` genirq/affinity: Remove the 'firstvec' parameter from irq_build_affinity_masks \| * `f4fe76467e` ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 \| * `aee609302d` firmware: arm_scmi: Fix frequency truncation by promoting multiplier type \| * `90d1f74c3c` bpf, sockmap: af_unix stream sockets need to hold ref for pair sock \| * `5ff1682fec` ethtool: don't propagate EOPNOTSUPP from dumps \| * `e570b15087` dpaa2-eth: recycle the RX buffer only after all processing done \| * `5b8938fc7d` net: dpaa2-eth: rearrange variable in dpaa2_eth_get_ethtool_stats \| * `e88275ce7e` smb: client: fix missing mode bits for SMB symlinks \| * `bf223fd4d9` block: update the stable_writes flag in bdev_add \| * `a8e4300ae5` filemap: add a per-mapping stable writes flag \| * `d0eafc7631` mm, netfs, fscache: stop read optimisation when folio removed from pagecache \| * `bceff380f3` mm: merge folio_has_private()/filemap_release_folio() call pairs \| * `8b6b3ecf0c` memory-failure: convert truncate_error_page() to use folio \| * `a6f440f3b9` khugepage: replace try_to_release_page() with filemap_release_folio() \| * `4c78612e5f` ext4: convert move_extent_per_page() to use folios \| * `b92a8f591c` media: qcom: camss: Fix set CSI2_RX_CFG1_VC_MODE when VC is greater than 3 \| * `710f70555d` media: camss: sm8250: Virtual channels for CSID \| * `c96a4f9360` selftests: mptcp: set FAILING_LINKS in run_tests \| * `4b85e920af` selftests: mptcp: fix fastclose with csum failure \| * `336d1ee07e` f2fs: set the default compress_level on ioctl \| * `1ff3f5ef28` f2fs: assign default compression level \| * `55d3f41e55` f2fs: convert to use bitmap API \| * `84a8d913fb` f2fs: clean up i_compress_flag and i_compress_level usage \| * `2c14f49916` s390/cpumf: support user space events for counting \| * `a1a1e5ce88` s390/mm: add missing arch_set_page_dat() call to vmem_crst_alloc() \| * `31051f722d` net/mlx5: Increase size of irq name buffer \| * `b5c8e0ff76` blk-mq: make sure active queue usage is held for bio_integrity_prep() \| * `803fb6109f` bpf: fix precision backtracking instruction iteration \| * `b08acd5c46` bpf: handle ldimm64 properly in check_cfg() \| * `2c795ce090` bpf: Support new 32bit offset jmp instruction \| * `b1c780ed3c` bpf: clean up visit_insn()'s instruction processing \| * `97bb6dab01` bpf: Remove unused insn_cnt argument from visit_[func_call_]insn() \| * `8266c47d04` bpf: remove unnecessary prune and jump points \| * `743f3548d3` bpf: decouple prune and jump points \| * `eb4f2e1788` fbdev: imsttfb: fix double free in probe() \| * `f2a79f3651` fbdev: imsttfb: Release framebuffer and dealloc cmap on error path \| * `51a1b94302` arm64: dts: qcom: sdm845: Fix PSCI power domain names \| * `5db8b93cbe` arm64: dts: qcom: sdm845: align RPMh regulator nodes with bindings \| * `343bb27e31` wifi: iwlwifi: yoyo: swap cdb and jacket bits values \| * `158b71f3a9` udp: annotate data-races around udp->encap_type \| * `8d929b6c11` udp: lockless UDP_ENCAP_L2TPINUDP / UDP_GRO \| * `b680a907d1` udp: move udp->accept_udp_{l4\|fraglist} to udp->udp_flags \| * `753886c0b9` udp: move udp->gro_enabled to udp->udp_flags \| * `a01cff15cc` udp: move udp->no_check6_rx to udp->udp_flags \| * `50e41aa9ea` udp: move udp->no_check6_tx to udp->udp_flags \| * `e2a4392b61` udp: introduce udp->udp_flags \| * `2489502fb1` ipv4, ipv6: Use splice_eof() to flush \| * `4713b7c756` splice, net: Add a splice_eof op to file-ops and socket-ops \| * `ac8c69e448` udp: Convert udp_sendpage() to use MSG_SPLICE_PAGES \| * `6bcc79a4e7` net: Declare MSG_SPLICE_PAGES internal sendmsg() flag \| * `89b51e70e5` bpf, x86: save/restore regs with BPF_DW size \| * `4ee461c5dc` bpf, x86: Simplify the parsing logic of structure parameters \| * `605c8d8f99` bpf, x64: Fix tailcall infinite loop \| * `5573fdbc34` srcu: Fix callbacks acceleration mishandling \| * `abc3e3fb71` cpu/SMT: Make SMT control more robust against enumeration failures \| * `482fa21635` cpu/SMT: Create topology_smt_thread_allowed() \| * `a364c18553` selftests: secretmem: floor the memory size to the multiple of page_size \| * `c38c5cfd3e` net: Implement missing SO_TIMESTAMPING_NEW cmsg support \| * `14937f47a4` bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters() \| * `55fbcd83aa` net: ravb: Wait for operating mode to be applied \| * `8a09b0f01c` asix: Add check for usbnet_get_endpoints \| * `db9c4a1f37` octeontx2-af: Re-enable MAC TX in otx2_stop processing \| * `b67e7d78e4` octeontx2-af: Always configure NIX TX link credits based on max frame size \| * `84c3833a93` net/smc: fix invalid link access in dumping SMC-R connections \| * `0af75845ff` net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues \| * `9b05042922` igc: Fix hicredit calculation \| * `7663226274` i40e: Restore VF MSI-X state during PCI reset \| * `5735f529e3` ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux \| * `8719838c12` ASoC: meson: g12a-toacodec: Fix event generation \| * `5de3c8496e` ASoC: meson: g12a-tohdmitx: Validate written enum values \| * `95b4d4093a` ASoC: meson: g12a-toacodec: Validate written enum values \| * `2f3b6e8600` i40e: fix use-after-free in i40e_aqc_add_filters() \| * `72fa661778` net: Save and restore msg_namelen in sock_sendmsg \| * `81f8a995eb` netfilter: nft_immediate: drop chain reference counter on error \| * `bb1bf97fa1` net: bcmgenet: Fix FCS generation for fragmented skbuffs \| * `e75715e1c2` sfc: fix a double-free bug in efx_probe_filters \| * `725d44e49f` ARM: sun9i: smp: Fix array-index-out-of-bounds read in sunxi_mc_smp_init \| * `85f6fae44b` selftests: bonding: do not set port down when adding to bond \| * `3edd66bd4e` net: Implement missing getsockopt(SO_TIMESTAMPING_NEW) \| * `ac5fde92b5` net: annotate data-races around sk->sk_bind_phc \| * `c48fcb4f49` net: annotate data-races around sk->sk_tsflags \| * `5d586f7ca0` net-timestamp: extend SOF_TIMESTAMPING_OPT_ID to HW timestamps \| * `b2130366a9` can: raw: add support for SO_MARK \| * `633a49e34b` r8169: Fix PCI error on system resume \| * `565460e180` net: sched: em_text: fix possible memory leak in em_text_destroy() \| * `ac5cbe931c` mlxbf_gige: fix receive packet race condition \| * `6d7f454927` ASoC: mediatek: mt8186: fix AUD_PAD_TOP register and offset \| * `811604fb02` ASoC: fsl_rpmsg: Fix error handler with pm_runtime_enable \| * `c3a37dc156` igc: Check VLAN EtherType mask \| * `6edff0b838` igc: Check VLAN TCI mask \| * `d27b98f4ae` igc: Report VLAN EtherType matching back to user \| * `e76d1913f6` i40e: Fix filter input checks to prevent config with invalid values \| * `188c9970d0` ice: Shut down VSI with "link-down-on-close" enabled \| * `83b80170b7` ice: Fix link_down_on_close message \| * `f3f6a23e05` drm/i915/dp: Fix passing the correct DPCD_REV for drm_dp_set_phy_test_pattern \| * `6cf7235bc1` octeontx2-af: Fix marking couple of structure as __packed \| * `a4b0a9b80a` nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local \| * `282e3fb612` netfilter: nf_tables: set transport offset from mac header for netdev/egress \| * `9487cc4c90` netfilter: use skb_ip_totlen and iph_totlen \| * `5f523f1beb` drm/bridge: ti-sn65dsi86: Never store more than msg->size bytes in AUX xfer \| * `3da4868907` wifi: iwlwifi: pcie: don't synchronize IRQs from IRQ \| * `493d556278` KVM: x86/pmu: fix masking logic for MSR_CORE_PERF_GLOBAL_CTRL \| * `3152a7d361` cifs: do not depend on release_iface for maintaining iface_list \| * `5982a625fc` cifs: cifs_chan_is_iface_active should be called with chan_lock held \| * `4afcb82518` drm/mgag200: Fix gamma lut not initialized for G200ER, G200EV, G200SE \| * `b9c370b61d` Revert "PCI/ASPM: Remove pcie_aspm_pm_state_change()" \| * `af9a530765` mptcp: prevent tcp diag from closing listener subflows \| * `105063f7f4` ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP ProBook 440 G6 \| * `0fa3cf2d15` ALSA: hda/realtek: fix mute/micmute LEDs for a HP ZBook \| * `beda900d3a` ALSA: hda/realtek: enable SND_PCI_QUIRK for hp pavilion 14-ec1xxx series \| * `9539e3b56e` block: Don't invalidate pagecache for invalid falloc modes \| * `079eefaecf` keys, dns: Fix missing size check of V1 server-list header * \| `efec95a6ee` Revert "device property: Allow const parameter to dev_fwnode()" * \| `8eac30b25e` Merge 6.1.71 into android14-6.1-lts \|\\| \| * `38fb82ecd1` Linux 6.1.71 \| * `74c4c7d57c` Revert "platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe" \| * `7709b16bdb` tracing/kprobes: Fix symbol counting logic by looking at modules as well \| * `9dd295341d` kallsyms: Make module_kallsyms_on_each_symbol generally available \| * `29cb165771` device property: Allow const parameter to dev_fwnode() \| * `e7b0437217` spi: Constify spi parameters of chip select APIs \| * `f9a01938e0` NFSD: fix possible oops when nfsd/pool_stats is closed. \| * `899ac41804` ring-buffer: Fix slowpath of interrupted event \| * `0105571f80` netfilter: nf_tables: skip set commit for deleted/destroyed sets \| * `4768430d5a` ring-buffer: Remove useless update to write_stamp in rb_try_to_discard() \| * `f33c4e4cab` tracing: Fix blocked reader of snapshot buffer \| * `09640899e6` ring-buffer: Fix wake ups when buffer_percent is set to 100 \| * `4ee9d9291b` mm/memory-failure: check the mapcount of the precise page \| * `fb21c9780a` mm/memory-failure: cast index to loff_t before shifting it \| * `be72d197b2` mm: migrate high-order folios in swap cache correctly \| * `a8df791470` mm/filemap: avoid buffered read/write race to read inconsistent data \| * `b954b92ef0` platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe \| * `7a3bbbadac` ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() \| * `b9c5f0fd5c` block: renumber QUEUE_FLAG_HW_WC \| * `e21b5fc5b8` spi: atmel: Fix clock issue when using devices with different polarities \| * `025cf65f68` spi: Add APIs in spi core to set/get spi->chip_select and spi->cs_gpiod \| * `64a4eb2982` spi: Reintroduce spi_set_cs_timing() \| * `95e21657ff` linux/export: Ensure natural alignment of kcrctab array \| * `bb4f791cb2` nfsd: call nfsd_last_thread() before final nfsd_put() \| * `03d68ffc48` nfsd: separate nfsd_last_thread() from nfsd_put() \| * `481561a431` iio: imu: adis16475: add spi_device_id table \| * `027eaeaf32` spi: Introduce spi_get_device_match_data() helper \| * `457a219c84` usb: fotg210-hcd: delete an incorrect bounds test \| * `119127273b` ARM: dts: Fix occasional boot hang for am3 usb \| * `98235bc13a` ksmbd: fix wrong allocation size update in smb2_open() \| * `04b8e04f8f` ksmbd: avoid duplicate opinfo_put() call on error of smb21_lease_break_ack() \| * `34f7d5b5c9` ksmbd: lazy v2 lease break on smb2_write() \| * `500c7a5e9a` ksmbd: send v2 lease break notification for directory \| * `1993959460` ksmbd: downgrade RWH lease caching state to RH for directory \| * `2fcb46df34` ksmbd: set v2 lease capability \| * `3eddc811a7` ksmbd: set epoch in create context v2 lease \| * `52a32eafd0` ksmbd: don't update ->op_state as OPLOCK_STATE_NONE on error \| * `0bc46c2370` ksmbd: move setting SMB2_FLAGS_ASYNC_COMMAND and AsyncId \| * `d9aa5c1908` ksmbd: release interim response after sending status pending response \| * `013bf453af` ksmbd: move oplock handling after unlock parent dir \| * `20dd92c237` ksmbd: separately allocate ci per dentry \| * `d5651972e5` ksmbd: fix possible deadlock in smb2_open \| * `aabc944ebf` ksmbd: prevent memory leak on error return \| * `b4a269bb89` ksmbd: fix kernel-doc comment of ksmbd_vfs_kern_path_locked() \| * `699ad8d03c` ksmbd: no need to wait for binded connection termination at logoff \| * `3cf4455081` ksmbd: add support for surrogate pair conversion \| * `d26e024a5e` ksmbd: fix missing RDMA-capable flag for IPoIB device in ksmbd_rdma_capable_netdev() \| * `5113f72225` ksmbd: fix recursive locking in vfs helpers \| * `42e56982be` ksmbd: fix kernel-doc comment of ksmbd_vfs_setxattr() \| * `533e6dc446` ksmbd: reorganize ksmbd_iov_pin_rsp() \| * `1d95c5a541` ksmbd: Remove unused field in ksmbd_user struct \| * `5929e98f3b` ksmbd: fix potential double free on smb2_read_pipe() error path \| * `a7aae713ea` ksmbd: fix Null pointer dereferences in ksmbd_update_fstate() \| * `943cebf9ea` ksmbd: fix wrong error response status by using set_smb2_rsp_status() \| * `7b58ee8d0b` ksmbd: fix race condition between tree conn lookup and disconnect \| * `0090f0bfc2` ksmbd: fix race condition from parallel smb2 lock requests \| * `6584ca894f` ksmbd: fix race condition from parallel smb2 logoff requests \| * `b3a843caed` ksmbd: fix race condition with fp \| * `7345f5dbf6` ksmbd: check iov vector index in ksmbd_conn_write() \| * `8beae8a0a0` ksmbd: return invalid parameter error response if smb2 request is invalid \| * `e523a26c05` ksmbd: fix passing freed memory 'aux_payload_buf' \| * `b4b3fd1a95` ksmbd: remove unneeded mark_inode_dirty in set_info_sec() \| * `1ee419e08f` ksmbd: remove experimental warning \| * `83b01f7330` ksmbd: add missing calling smb2_set_err_rsp() on error \| * `422c0cd016` ksmbd: Fix one kernel-doc comment \| * `c20105a897` ksmbd: fix `force create mode' and `force directory mode' \| * `f8cf1ebb7d` ksmbd: fix wrong interim response on compound \| * `9f297df20d` ksmbd: add support for read compound \| * `673e60c691` ksmbd: switch to use kmemdup_nul() helper \| * `0a9b91f45e` ksmbd: check if a mount point is crossed during path lookup \| * `d782f42eed` ksmbd: Fix unsigned expression compared with zero \| * `48cc493840` ksmbd: Replace one-element array with flexible-array member \| * `63fbfd212c` ksmbd: Use struct_size() helper in ksmbd_negotiate_smb_dialect() \| * `e7ab53bd81` ksmbd: Replace the ternary conditional operator with min() \| * `143da652ce` ksmbd: use kvzalloc instead of kvmalloc \| * `de43cdaa88` ksmbd: Change the return value of ksmbd_vfs_query_maximal_access to void \| * `deb79f20be` ksmbd: return a literal instead of 'err' in ksmbd_vfs_kern_path_locked() \| * `fe7977b872` ksmbd: use kzalloc() instead of __GFP_ZERO \| * `294a275f37` ksmbd: remove unused ksmbd_tree_conn_share function \| * `b069977b2b` ksmbd: add mnt_want_write to ksmbd vfs functions \| * `13a5045011` ksmbd: fix posix_acls and acls dereferencing possible ERR_PTR() \| * `1524884c3e` ksmbd: call putname after using the last component \| * `30a1344198` ksmbd: fix uninitialized pointer read in smb2_create_link() \| * `6d4e21e369` ksmbd: fix uninitialized pointer read in ksmbd_vfs_rename() \| * `6927ffe747` ksmbd: fix racy issue from using ->d_parent and ->d_name \| * `6e99fbb429` fs: introduce lock_rename_child() helper \| * `965eb86507` ksmbd: remove unused compression negotiate ctx packing \| * `49d9f6ad1e` ksmbd: avoid duplicate negotiate ctx offset increments \| * `2182d96ec0` ksmbd: set NegotiateContextCount once instead of every inc \| * `8d271ef5e5` ksmbd: delete asynchronous work from list \| * `4ef3fd2f85` ksmbd: remove unused is_char_allowed function \| * `226aaaa593` ksmbd: Fix parameter name and comment mismatch \| * `e8c49f9364` ksmbd: Fix spelling mistake "excceed" -> "exceeded" \| * `ada8bcc48a` ksmbd: update Kconfig to note Kerberos support and fix indentation \| * `5c0306b0ab` ksmbd: Remove duplicated codes \| * `b6502c34cf` ksmbd: fix typo, syncronous->synchronous \| * `052b41ef2a` ksmbd: Implements sess->rpc_handle_list as xarray \| * `264547e13f` ksmbd: Convert to use sysfs_emit()/sysfs_emit_at() APIs \| * `87ffbb9e24` ksmbd: Fix resource leak in smb2_lock() \| * `d847b75883` ksmbd: use F_SETLK when unlocking a file \| * `343d667dee` ksmbd: set SMB2_SESSION_FLAG_ENCRYPT_DATA when enforcing data encryption for this share \| * `ab69d3e8f7` ksmbd: replace one-element arrays with flexible-array members * \| `1e63881f5c` Merge 6.1.70 into android14-6.1-lts \|\\| \| * `a507f147e6` Linux 6.1.70 \| * `a413b88cdb` loop: deprecate autoloading callback loop_probe() \| * `75c27bdb21` wifi: nl80211: fix deadlock in nl80211_set_cqm_rssi (6.6.x) \| * `15577a98ef` wifi: cfg80211: fix CQM for non-range use \| * `706448f716` fuse: share lookup state between submount and its parent \| * `ec7b81b0ab` mm/damon/core: make damon_start() waits until kdamond_fn() starts \| * `41f4ff9fe2` x86/alternatives: Sync core before enabling interrupts \| * `425379154b` KVM: arm64: vgic: Force vcpu vgic teardown on vcpu destroy \| * `5dfacfd0fc` KVM: arm64: vgic: Add a non-locking primitive for kvm_vgic_vcpu_destroy() \| * `3a0fd93cd9` KVM: arm64: vgic: Simplify kvm_vgic_destroy() \| * `3339028dd0` thunderbolt: Fix memory leak in margining_port_remove() \| * `69b6596c6e` lib/vsprintf: Fix %pfwf when current node refcount == 0 \| * `2dd6f22860` gpio: dwapb: mask/unmask IRQ when disable/enale it \| * `ab1c3f91d1` bus: ti-sysc: Flush posted write only after srst_udelay \| * `cd9f9ef59d` pinctrl: starfive: jh7100: ignore disabled device tree nodes \| * `7f7efa30fa` dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata() \| * `33b976a0f2` tracing / synthetic: Disable events after testing in synth_event_gen_test_init() \| * `d2b549d310` scsi: core: Always send batch on reset or error handling command \| * `72e472a91c` Revert "scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity" \| * `4258274bac` selftests: mptcp: join: fix subflow_send_ack lookup \| * `a8555c86f5` ublk: move ublk_cancel_dev() out of ub->mutex \| * `1c250f2c5f` ubifs: fix possible dereference after free \| * `3c42cc437d` btrfs: zoned: no longer count fresh BG region as zone unusable \| * `b09a676176` Revert "drm/amd/display: Do not set DRR on pipe commit" \| * `93da3d8af9` dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client \| * `e9779fac68` loop: do not enforce max_loop hard limit by (new) default \| * `600043e185` RISC-V: Fix do_notify_resume / do_work_pending prototype \| * `764c6790dd` 9p: prevent read overrun in protocol dump tracepoint \| * `7d09c84df5` drm/i915: Reject async flips with bigjoiner \| * `c60e10d154` smb: client: fix OOB in smbCalcSize() \| * `bef4315f19` smb: client: fix OOB in SMB2_query_info_init() \| * `71fe685b6a` smb: client: fix potential OOB in cifs_dump_detail() \| * `277832a306` smb: client: fix OOB in cifsd when receiving compounded resps \| * `3f6da21047` dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp \| * `1092525155` net: ks8851: Fix TX stall caused by TX buffer overrun \| * `e9df9f0891` net: rfkill: gpio: set GPIO direction \| * `805611157d` net: 9p: avoid freeing uninit memory in p9pdu_vreadf \| * `4c775b4cd8` Input: soc_button_array - add mapping for airplane mode button \| * `5df2b49e7e` net: usb: ax88179_178a: avoid failed operations when device is disconnected \| * `0f7bffd40a` Bluetooth: Add more enc key size check \| * `39347d6450` Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE \| * `e14a7ebafe` Bluetooth: L2CAP: Send reject on command corrupted request \| * `37f71e2c9f` Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg \| * `470896ecbc` Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent \| * `d36d945f94` ALSA: hda/realtek: Add quirk for ASUS ROG GV302XA \| * `9599a5e34c` USB: serial: option: add Quectel RM500Q R13 firmware support \| * `a91fb450df` USB: serial: option: add Foxconn T99W265 with new baseline \| * `73b6b6ab03` USB: serial: option: add Quectel EG912Y module support \| * `9b968a7086` USB: serial: ftdi_sio: update Actisense PIDs constant names \| * `db57ef0dd4` wifi: cfg80211: fix certs build to not depend on file order \| * `ec350809cd` wifi: cfg80211: Add my certificate \| * `228d9960ae` usb-storage: Add quirk for incorrect WP on Kingston DT Ultimate 3.0 G3 \| * `82f913724b` ALSA: usb-audio: Increase delay in MOTU M quirk \| * `01bc94b581` iio: triggered-buffer: prevent possible freeing of wrong buffer \| * `c508a99fbc` iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma() \| * `1b670b0eee` iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table \| * `1fe4c93fc7` scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() \| * `66ccf5f743` Input: ipaq-micro-keys - add error handling for devm_kmemdup \| * `3637f6bdfe` interconnect: qcom: sm8250: Enable sync_state \| * `90aa62722d` iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw \| * `50d60bfc96` interconnect: Treat xlate() returning NULL node as an error \| * `900c1b3c62` drm/i915: Fix ADL+ tiled plane stride when the POT stride is smaller than the original \| * `de4349bdf9` drm/i915/mtl: Add MTL for remapping CCS FBs \| * `52c1a67dd3` drm/i915/dpt: Only do the POT stride remap when using DPT \| * `7afe810945` drm/i915: Fix intel_atomic_setup_scalers() plane_state handling \| * `b097184f80` drm/i915: Relocate intel_atomic_setup_scalers() \| * `99767368b7` drm/i915/mtl: limit second scaler vertical scaling in ver >= 14 \| * `387e807759` nvme-pci: fix sleeping function called from interrupt context \| * `b506833ee8` gpiolib: cdev: add gpio_device locking wrapper around gpio_ioctl() \| * `6eb51df9e7` pinctrl: at91-pio4: use dedicated lock class for IRQ \| * `903bb0c7b8` x86/xen: add CPU dependencies for 32-bit build \| * `2550d96aa2` i2c: aspeed: Handle the coalesced stop conditions with the start conditions. \| * `5c11f63799` ASoC: fsl_sai: Fix channel swap issue on i.MX8MP \| * `264d8c9b7f` ASoC: hdmi-codec: fix missing report for jack initial status \| * `9b4c95a63e` afs: Fix use-after-free due to get/remove race in volume tree \| * `17605162e2` afs: Fix overwriting of result of DNS query \| * `791d5409cd` keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry \| * `3e617c7e39` net: check dev->gso_max_size in gso_features_check() \| * `087b96adc6` afs: Fix dynamic root lookup DNS check \| * `9c6ea7abe3` afs: Fix the dynamic root's d_delete to always delete unused dentries \| * `a70c2dd741` net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() \| * `ea03196ebc` net: mana: select PAGE_POOL \| * `a1986c429c` Bluetooth: hci_event: shut up a false-positive warning \| * `fc64715105` Bluetooth: Fix deadlock in vhci_send_frame \| * `3e0d158579` net/rose: fix races in rose_kill_by_device() \| * `51e28c37d9` ethernet: atheros: fix a memleak in atl1e_setup_ring_resources \| * `6707baabe4` net: sched: ife: fix potential use-after-free \| * `31edab1222` net: Return error from sk_stream_wait_connect() if sk_wait_event() fails \| * `9d00421e14` octeontx2-pf: Fix graceful exit during PFC configuration failure \| * `b0cee29402` net: mscc: ocelot: fix eMAC TX RMON stats for bucket 256-511 and above \| * `72b8de75b3` net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors \| * `18b4a5e0c3` net/mlx5e: Correct snprintf truncation handling for fw_version buffer \| * `94c8485b44` net/mlx5: Fix fw tracer first block check \| * `1750f55d85` net/mlx5e: fix a potential double-free in fs_udp_create_groups \| * `01877daaef` net/mlx5e: Fix a race in command alloc flow \| * `f3739647a7` net/mlx5: Re-organize mlx5_cmd struct \| * `148ec770c6` net/mlx5: Prevent high-rate FW commands from populating all slots \| * `bd6e091629` net/mlx5: Introduce and use opcode getter in command interface \| * `0f5de95fa2` net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list() \| * `31037cfcef` Revert "net/mlx5e: fix double free of encap_header" \| * `8a84413505` Revert "net/mlx5e: fix double free of encap_header in update funcs" \| * `2f635af7d6` wifi: mac80211: mesh_plink: fix matches_local logic \| * `7a07af00aa` wifi: mac80211: mesh: check element parsing succeeded \| * `40ba7f9ab8` wifi: mac80211: check if the existing link config remains unchanged \| * `e90da1c7c6` wifi: iwlwifi: pcie: add another missing bh-disable for rxq->lock \| * `912652366f` s390/vx: fix save/restore of fpu kernel context \| * `0a6e700c3d` reset: Fix crash when freeing non-existent optional resets \| * `930a61fd79` ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init \| * `228a00a77d` ARM: dts: dra7: Fix DRA7 L3 NoC node register size \| * `913463f8e6` drm/amd/display: fix hw rotated modes when PSR-SU is enabled \| * `a4f48f77bb` HID: i2c-hid: Add IDEA5002 to i2c_hid_acpi_blacklist[] \| * `413bef367b` HID: i2c-hid: acpi: Unify ACPI ID tables format \| * `57a6b0a464` bpf: Fix prog_array_map_poke_run map poke update \| * `4768f82272` kasan: disable kasan_non_canonical_hook() for HW tags * \| `0b58f24c02` Reapply "kasan: print the original fault addr when access invalid shadow" * \| `1ac76d45aa` ANDROID: GKI: fix crc issue in include/net/addrconf.h * \| `9b8f2430b3` Revert "cred: switch to using atomic_long_t" * \| `d3d46ac25c` Merge 6.1.69 into android14-6.1-lts \|\\| \| * `4aa6747d93` Linux 6.1.69 \| * `325556d46b` r8152: fix the autosuspend doesn't work \| * `4c2ad8e39c` r8152: remove rtl_vendor_mode function \| * `1d82735f4b` r8152: avoid to change cfg for all devices \| * `9b3d3a7f3c` net: tls, update curr on splice as well \| * `869aee35cf` ring-buffer: Have rb_time_cmpxchg() set the msb counter too \| * `c425a772fc` ring-buffer: Do not try to put back write_stamp \| * `b15cf14869` ring-buffer: Fix a race in rb_time_cmpxchg() for 32 bit archs \| * `edbc03d671` ring-buffer: Fix writing to the buffer with max_data_size \| * `6d98d594a5` ring-buffer: Have saved event hold the entire event \| * `7888b607a9` ring-buffer: Do not update before stamp when switching sub-buffers \| * `7043c4610c` tracing: Update snapshot buffer on resize if it is allocated \| * `31785cf817` ring-buffer: Fix memory leak of free page \| * `8c3b77ad4e` smb: client: fix OOB in smb2_query_reparse_point() \| * `d8541c50c6` smb: client: fix NULL deref in asn1_ber_decoder() \| * `9f528a8e68` smb: client: fix OOB in receive_encrypted_standard() \| * `7b0faa541f` drm/i915: Fix remapped stride with CCS on ADL+ \| * `2090771791` drm/amd/display: Disable PSR-SU on Parade 0803 TCON again \| * `a9e2de1943` drm/amdgpu: fix tear down order in amdgpu_vm_pt_free \| * `730b3322b8` btrfs: don't clear qgroup reserved bit in release_folio \| * `9b670e1b64` btrfs: free qgroup reserve when ORDERED_IOERR is set \| * `da9b7c651c` mm/shmem: fix race in shmem_undo_range w/THP \| * `8ec07b0620` mm/mglru: fix underprotected page cache \| * `40f3ad769e` dmaengine: stm32-dma: avoid bitfield overflow assertion \| * `78b2ba39be` drm/amdgpu/sdma5.2: add begin/end_use ring callbacks \| * `6a1472d9be` team: Fix use-after-free when an option instance allocation fails \| * `b01af92818` arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify \| * `0b071a3266` ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS \| * `f2955dd3e9` soundwire: stream: fix NULL pointer dereference for multi_link \| * `56f762659a` btrfs: do not allow non subvolume root targets for snapshot \| * `557f7ad064` perf: Fix perf_event_validate_size() lockdep splat \| * `a684235d30` HID: hid-asus: add const to read-only outgoing usb buffer \| * `2b9e16bc1c` arm64: add dependency between vmlinuz.efi and Image \| * `6cb0c71c6e` net: usb: qmi_wwan: claim interface 4 for ZTE MF290 \| * `f7ce765744` asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation \| * `fba6e958ca` HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad \| * `8f0c858585` HID: hid-asus: reset the backlight brightness level on resume \| * `de78e4bdcb` nbd: pass nbd_sock to nbd_read_reply() instead of index \| * `d482bb5663` HID: add ALWAYS_POLL quirk for Apple kb \| * `541b183be9` HID: glorious: fix Glorious Model I HID report \| * `42b4ab97be` platform/x86: intel_telemetry: Fix kernel doc descriptions \| * `355170a7ec` LoongArch: Implement constant timer shutdown interface \| * `adb6a90754` LoongArch: Add dependency between vmlinuz.efi and vmlinux.efi \| * `943cde1f3d` selftests/bpf: fix bpf_loop_bench for new callback verification scheme \| * `1b40f23e70` nvme: catch errors from nvme_configure_metadata() \| * `6cb3741c45` nvme-auth: set explanation code for failure2 msgs \| * `83bb13bf6c` nbd: fold nbd config initialization into nbd_alloc_config() \| * `02a4b14d17` bcache: avoid NULL checking to c->root in run_cache_set() \| * `3d3f72efc7` bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() \| * `bc17ec4215` bcache: remove redundant assignment to variable cur_idx \| * `be0e2a28e0` bcache: avoid oversize memory allocation by small stripe_size \| * `94070fd668` blk-cgroup: bypass blkcg_deactivate_policy after destroying \| * `e52d0eb48e` blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" \| * `5fb6772cb5` stmmac: dwmac-loongson: Add architecture dependency \| * `82c386d736` usb: aqc111: check packet for fixup for true limit \| * `d6c02295c8` x86/hyperv: Fix the detection of E820_TYPE_PRAM in a Gen2 VM \| * `ae818b2a2e` drm/mediatek: Add spinlock for setting vblank event in atomic_begin \| * `73c240e1ec` ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE \| * `0c196180b5` PCI: loongson: Limit MRRS to 256 \| * `56d1891594` Revert "PCI: acpiphp: Reassign resources on bridge if necessary" \| * `1ec80b9d43` ALSA: hda/realtek: Apply mute LED quirk for HP15-db \| * `eeeb91216a` ALSA: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants \| * `82413e9e42` ALSA: hda/hdmi: add force-connect quirk for NUC5CPYB \| * `0dc6a06c48` fuse: dax: set fc->dax to NULL in fuse_dax_conn_free() \| * `36e2497ac7` cred: switch to using atomic_long_t \| * `a51f71cd4f` net: atlantic: fix double free in ring reinit logic \| * `1646b2929d` appletalk: Fix Use-After-Free in atalk_ioctl \| * `d835299dde` net: stmmac: Handle disabled MDIO busses from devicetree \| * `9aac81639e` dpaa2-switch: do not ask for MDB, VLAN and FDB replay \| * `a81c7069af` dpaa2-switch: fix size of the dma_unmap \| * `9a23be1e58` vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() \| * `2027dd67c3` sign-file: Fix incorrect return values check \| * `918991db7d` stmmac: dwmac-loongson: Make sure MDIO is initialized before use \| * `63387fe87f` net: ena: Fix XDP redirection error \| * `2664b56420` net: ena: Fix xdp drops handling due to multibuf packets \| * `e312eed27a` net: ena: Destroy correct number of xdp queues upon failure \| * `55a43bae08` net: Remove acked SYN flag from packet in the transmit queue correctly \| * `9bb392ee53` qed: Fix a potential use-after-free in qed_cxt_tables_alloc \| * `112792ad36` iavf: Handle ntuple on/off based on new state machines for flow director \| * `11c314a5a4` iavf: Introduce new state machines for flow director \| * `01540ee236` net/rose: Fix Use-After-Free in rose_ioctl \| * `2de2a6cbe1` atm: Fix Use-After-Free in do_vcc_ioctl \| * `3a76dcab2e` octeontx2-af: Update RSS algorithm index \| * `d0f0786f8c` octeontx2-pf: Fix promisc mcam entry action \| * `34b630626a` octeontx2-af: fix a use-after-free in rvu_nix_register_reporters \| * `e4ce3dc7a0` net: fec: correct queue selection \| * `a00dbc6dec` net: vlan: introduce skb_vlan_eth_hdr() \| * `7cfbb8bea3` atm: solos-pci: Fix potential deadlock on &tx_queue_lock \| * `35c63d366f` atm: solos-pci: Fix potential deadlock on &cli_queue_lock \| * `525904a157` bnxt_en: Fix HWTSTAMP_FILTER_ALL packet timestamp logic \| * `ac61251741` bnxt_en: Fix wrong return value check in bnxt_close_nic() \| * `8217f9362c` bnxt_en: Save ring error counters across reset \| * `53cacb8cdc` bnxt_en: Clear resource reservation during resume \| * `ab410db6e9` qca_spi: Fix reset behavior \| * `7e177e5a40` qca_debug: Fix ethtool -G iface tx behavior \| * `2127142c17` qca_debug: Prevent crash on TX ring changes \| * `0da41ddfb2` net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX \| * `514232495a` net/mlx5e: Fix possible deadlock on mlx5e_tx_timeout_work \| * `1e8396aab2` HID: lenovo: Restrict detection of patched firmware only to USB cptkbd \| * `e0cda159c8` afs: Fix refcount underflow from error handling race \| * `a7e6477cc3` ksmbd: fix memory leak in smb2_lock() \| * `8925ab33b3` ext4: fix warning in ext4_dio_write_end_io() \| * `1c077acf24` powerpc/ftrace: Fix stack teardown in ftrace_no_trace \| * `34ae53cccf` r8152: add vendor/device ID pair for ASUS USB-C2500 \| * `cac1218b32` r8152: add vendor/device ID pair for D-Link DUB-E250 \| * `893597cbab` r8152: add USB device driver for config selection \| * `b80d0c6e5b` perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table * `bb47960a9d` Merge branch 'android14-6.1' into branch 'android14-6.1-lts' Change-Id: I73d22764ee8804a28bb2fdcbeba633da3e0daaf3 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-03-07 09:28:03 +00:00
Bart Van Assche	70fdaa07de	Revert "ANDROID: Build null_blk and scsi_debug as kernel modules" Revert commit `9b476ebe99` in preparation of making this a Pixel-specific change. A disadvantage of building null_blk and scsi_debug as kernel modules for all vendors is that this causes these kernel modules to be loaded by the init process during boot and there is no vendor-independent mechanism for preventing kernel modules to be loaded. Bug: 323406846 Change-Id: I6e7bcdd9fd06194bbc134ee52251b6ae9a3c1477 Signed-off-by: Bart Van Assche <bvanassche@google.com>	2024-02-29 10:22:01 -08:00
Greg Kroah-Hartman	c16bb76a0c	This is the 6.1.75 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmWy7o0ACgkQONu9yGCS aT76JA/9Gh3VNSLG35LaLyq3xGd827N6DPsMzeFHi+MGSyPVg0auE77QkHD/gZl9 KynmBmz2+9DSoFxymWAS9oEPM8d/vw87AMuSTTct3GKkjEeUcj9lbeOEzgZydXX8 cJSXvcCeKE3FESU/YbQKxo0N+r7tUDmnCR0edss5/FpYni3jPdg7jdESzGhiCHXj r5rjrTE6h7Z/d+2kaKqlheL4o4OkV0YwnFnU2gC3MOOvLmgvXdOVQQsyaZ+WgSAN 0JS0Q6Xk1xyYWx8iFaLGWIs1pUsQPKxIiRG3N/1KmXITopf2Pu68Yy7ST+YryDkO nLcNrr3gsQxrM6MYnEhLzlxs3H1KuAVxJ4Y/dNqJnDxn0OJjcY3repwempz5Sxtk 0OLDOsCICAiMHeF8rYIGhm09WdowLz0EH+sqadIGqWKzW/BcXqD+r9mpF1lwk1ZL FJLgLmtOaG4amI46lEUHQ6ujN7Oad3gLYzudq2zKLeqonSIjm1TuDoMRvHWFsspO 5i9I0x7Vlo3PqCl7kkKVL9PvVHx6BXJGFShABJqa9ao/oHxkOWuIt26pxUoLUN3P 7Wa5WnfdlDd9nR3VGHcVe2ncuRmEfuriYpXvItJ7/KJKyIPkGoPehAh+vbZMoEy0 DwhtD9PPsTlnUufbcZdHavYA1E4y/uXDMOIGB+ERpsTdXh9DwEo= =2XHn -----END PGP SIGNATURE----- Merge 6.1.75 into android14-6.1-lts Changes in 6.1.75 x86/lib: Fix overflow when counting digits x86/mce/inject: Clear test status value EDAC/thunderx: Fix possible out-of-bounds string access powerpc: remove checks for binutils older than 2.25 powerpc: add crtsavres.o to always-y instead of extra-y powerpc/44x: select I2C for CURRITUCK powerpc/pseries/memhp: Fix access beyond end of drmem array selftests/powerpc: Fix error handling in FPU/VMX preemption tests powerpc/powernv: Add a null pointer check to scom_debug_init_one() powerpc/powernv: Add a null pointer check in opal_event_init() powerpc/powernv: Add a null pointer check in opal_powercap_init() powerpc/imc-pmu: Add a null pointer check in update_events_in_group() spi: spi-zynqmp-gqspi: fix driver kconfig dependencies mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response ACPI: video: check for error while searching for backlight device parent ACPI: LPIT: Avoid u32 multiplication overflow KEYS: encrypted: Add check for strsep platform/x86/intel/vsec: Enhance and Export intel_vsec_add_aux() platform/x86/intel/vsec: Support private data platform/x86/intel/vsec: Use mutex for ida_alloc() and ida_free() platform/x86/intel/vsec: Fix xa_alloc memory leak of: Add of_property_present() helper cpufreq: Use of_property_present() for testing DT property presence cpufreq: scmi: process the result of devm_of_clk_add_hw_provider() calipso: fix memory leak in netlbl_calipso_add_pass() efivarfs: force RO when remounting if SetVariable is not supported efivarfs: Free s_fs_info on unmount spi: sh-msiof: Enforce fixed DTDL for R-Car H3 ACPI: LPSS: Fix the fractional clock divider flags ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error kunit: debugfs: Fix unchecked dereference in debugfs_print_results() mtd: Fix gluebi NULL pointer dereference caused by ftl notifier selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket crypto: virtio - Handle dataq logic with tasklet crypto: sa2ul - Return crypto_aead_setkey to transfer the error crypto: ccp - fix memleak in ccp_init_dm_workarea crypto: af_alg - Disallow multiple in-flight AIO requests crypto: safexcel - Add error handling for dma_map_sg() calls crypto: sahara - remove FLAGS_NEW_KEY logic crypto: sahara - fix cbc selftest failure crypto: sahara - fix ahash selftest failure crypto: sahara - fix processing requests with cryptlen < sg->length crypto: sahara - fix error handling in sahara_hw_descriptor_create() crypto: hisilicon/qm - save capability registers in qm init process crypto: hisilicon/zip - add zip comp high perf mode configuration crypto: hisilicon/qm - add a function to set qm algs crypto: hisilicon/hpre - save capability registers in probe process crypto: hisilicon/sec2 - save capability registers in probe process crypto: hisilicon/zip - save capability registers in probe process pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() erofs: fix memory leak on short-lived bounced pages fs: indicate request originates from old mount API gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump crypto: virtio - Wait for tasklet to complete on device remove crypto: sahara - avoid skcipher fallback code duplication crypto: sahara - handle zero-length aes requests crypto: sahara - fix ahash reqsize crypto: sahara - fix wait_for_completion_timeout() error handling crypto: sahara - improve error handling in sahara_sha_process() crypto: sahara - fix processing hash requests with req->nbytes < sg->length crypto: sahara - do not resize req->src when doing hash operations crypto: scomp - fix req->dst buffer overflow csky: fix arch_jump_label_transform_static override blocklayoutdriver: Fix reference leak of pnfs_device_node NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT SUNRPC: fix _xprt_switch_find_current_entry logic pNFS: Fix the pnfs block driver's calculation of layoutget size wifi: plfxlc: check for allocation failure in plfxlc_usb_wreq_async() wifi: rtw88: fix RX filter in FIF_ALLMULTI flag bpf, lpm: Fix check prefixlen before walking trie bpf: Add crosstask check to __bpf_get_stack wifi: ath11k: Defer on rproc_get failure wifi: libertas: stop selecting wext ARM: dts: qcom: apq8064: correct XOADC register address net/ncsi: Fix netlink major/minor version numbers firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create() firmware: meson_sm: populate platform devices from sm device tree data wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior arm64: dts: ti: k3-am62a-main: Fix GPIO pin count in DT nodes arm64: dts: ti: k3-am65-main: Fix DSS irq trigger type selftests/bpf: Fix erroneous bitmask operation md: synchronize flush io with array reconfiguration bpf: enforce precision of R0 on callback return ARM: dts: qcom: sdx65: correct SPMI node name arm64: dts: qcom: sc7180: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sc7280: Mark some nodes as 'reserved' arm64: dts: qcom: sc7280: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sdm845: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sm8150: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sm8250: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sc8280xp: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sm6350: Make watchdog bark interrupt edge triggered rcu-tasks: Provide rcu_trace_implies_rcu_gp() bpf: add percpu stats for bpf_map elements insertions/deletions bpf: Add map and need_defer parameters to .map_fd_put_ptr() bpf: Defer the free of inner map when necessary selftests/net: specify the interface when do arping bpf: fix check for attempt to corrupt spilled pointer scsi: fnic: Return error if vmalloc() failed arm64: dts: qcom: qrb5165-rb5: correct LED panic indicator arm64: dts: qcom: sdm845-db845c: correct LED panic indicator arm64: dts: qcom: sm8350: Fix DMA0 address arm64: dts: qcom: sc7280: Fix up GPU SIDs arm64: dts: qcom: sc7280: Mark Adreno SMMU as DMA coherent arm64: dts: qcom: sc7280: fix usb_2 wakeup interrupt types wifi: mt76: mt7921s: fix workqueue problem causes STA association fail bpf: Fix verification of indirect var-off stack access arm64: dts: hisilicon: hikey970-pmic: fix regulator cells properties dt-bindings: media: mediatek: mdp3: correct RDMA and WROT node with generic names arm64: dts: mediatek: mt8183: correct MDP3 DMA-related nodes wifi: mt76: mt7921: fix country count limitation for CLC selftests/bpf: Relax time_tai test for equal timestamps in tai_forward block: Set memalloc_noio to false on device_add_disk() error path arm64: dts: renesas: white-hawk-cpu: Fix missing serial console pin control arm64: dts: imx8mm: Reduce GPU to nominal speed scsi: hisi_sas: Replace with standard error code return value scsi: hisi_sas: Rollback some operations if FLR failed scsi: hisi_sas: Correct the number of global debugfs registers ARM: dts: stm32: don't mix SCMI and non-SCMI board compatibles selftests/net: fix grep checking for fib_nexthop_multiprefix ipmr: support IP_PKTINFO on cache report IGMP msg virtio/vsock: fix logic which reduces credit update messages dma-mapping: clear dev->dma_mem to NULL after freeing it soc: qcom: llcc: Fix dis_cap_alloc and retain_on_pc configuration arm64: dts: qcom: sm8150-hdk: fix SS USB regulators block: add check of 'minors' and 'first_minor' in device_add_disk() arm64: dts: qcom: sc7280: Mark SDHCI hosts as cache-coherent arm64: dts: qcom: ipq6018: fix clock rates for GCC_USB0_MOCK_UTMI_CLK arm64: dts: qcom: ipq6018: improve pcie phy pcs reg table arm64: dts: qcom: ipq6018: Use lowercase hex arm64: dts: qcom: ipq6018: Pad addresses to 8 hex digits arm64: dts: qcom: ipq6018: Fix up indentation wifi: rtlwifi: add calculate_bit_shift() wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift() wifi: rtlwifi: rtl8192c: using calculate_bit_shift() wifi: rtlwifi: rtl8192cu: using calculate_bit_shift() wifi: rtlwifi: rtl8192ce: using calculate_bit_shift() wifi: rtlwifi: rtl8192de: using calculate_bit_shift() wifi: rtlwifi: rtl8192ee: using calculate_bit_shift() wifi: rtlwifi: rtl8192se: using calculate_bit_shift() wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request wifi: iwlwifi: mvm: send TX path flush in rfkill netfilter: nf_tables: mark newset as dead on transaction abort Bluetooth: Fix bogus check for re-auth no supported with non-ssp Bluetooth: btmtkuart: fix recv_buf() return value block: make BLK_DEF_MAX_SECTORS unsigned null_blk: don't cap max_hw_sectors to BLK_DEF_MAX_SECTORS bpf: sockmap, fix proto update hook to avoid dup calls sctp: support MSG_ERRQUEUE flag in recvmsg() sctp: fix busy polling net/sched: act_ct: fix skb leak and crash on ooo frags mlxbf_gige: Fix intermittent no ip issue mlxbf_gige: Enable the GigE port in mlxbf_gige_open ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() ARM: davinci: always select CONFIG_CPU_ARM926T Revert "drm/tidss: Annotate dma-fence critical section in commit path" Revert "drm/omapdrm: Annotate dma-fence critical section in commit path" drm/panfrost: Really power off GPU cores in panfrost_gpu_power_off() RDMA/usnic: Silence uninitialized symbol smatch warnings RDMA/hns: Fix inappropriate err code for unsupported operations drm/panel-elida-kd35t133: hold panel in reset for unprepare drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function drm/tilcdc: Fix irq free on unload media: pvrusb2: fix use after free on context disconnection media: mtk-jpegdec: export jpeg decoder functions media: mtk-jpeg: Remove cancel worker in mtk_jpeg_remove to avoid the crash of multi-core JPEG devices media: verisilicon: Hook the (TRY_)DECODER_CMD stateless ioctls media: rkvdec: Hook the (TRY_)DECODER_CMD stateless ioctls drm/bridge: Fix typo in post_disable() description f2fs: fix to avoid dirent corruption drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg() drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check() drm/radeon: check return value of radeon_ring_lock() drm/tidss: Move reset to the end of dispc_init() drm/tidss: Return error value from from softreset drm/tidss: Check for K2G in in dispc_softreset() drm/tidss: Fix dss reset ASoC: cs35l33: Fix GPIO name and drop legacy include ASoC: cs35l34: Fix GPIO name and drop legacy include drm/msm/mdp4: flush vblank event on disable drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks drm/drv: propagate errors from drm_modeset_register_all() ASoC: Intel: glk_rt5682_max98357a: fix board id mismatch drm/panfrost: Ignore core_mask for poweroff and disable PWRTRANS irq drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() drm/radeon/dpm: fix a memleak in sumo_parse_power_table drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable drm/bridge: tc358767: Fix return value on error case media: cx231xx: fix a memleak in cx231xx_init_isoc RDMA/hns: Fix memory leak in free_mr_init() clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config media: imx-mipi-csis: Fix clock handling in remove() media: dt-bindings: media: rkisp1: Fix the port description for the parallel interface media: rkisp1: Fix media device memory leak drm/panel: st7701: Fix AVCL calculation f2fs: fix to wait on block writeback for post_read case f2fs: fix to check compress file in f2fs_move_file_range() f2fs: fix to update iostat correctly in f2fs_filemap_fault() media: dvbdev: drop refcount on error path in dvb_device_open() media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of m88ds3103_probe() clk: renesas: rzg2l-cpg: Reuse code in rzg2l_cpg_reset() clk: renesas: rzg2l: Check reset monitor registers drm/msm/dpu: Set input_sel bit for INTF drm/msm/dpu: Drop enable and frame_count parameters from dpu_hw_setup_misr() drm/mediatek: Return error if MDP RDMA failed to enable the clock drm/mediatek: Fix underrun in VDO1 when switches off the layer drm/amdgpu/debugfs: fix error code when smc register accessors are NULL drm/amd/pm: fix a double-free in si_dpm_init drivers/amd/pm: fix a use-after-free in kv_parse_power_table gpu/drm/radeon: fix two memleaks in radeon_vm_init drm/amd/pm: fix a double-free in amdgpu_parse_extended_power_table f2fs: fix to check return value of f2fs_recover_xattr_data dt-bindings: clock: Update the videocc resets for sm8150 clk: qcom: videocc-sm8150: Update the videocc resets clk: qcom: videocc-sm8150: Add missing PLL config property drivers: clk: zynqmp: calculate closest mux rate drivers: clk: zynqmp: update divider round rate logic watchdog: set cdev owner before adding watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused clk: si5341: fix an error code problem in si5341_output_clk_set_rate drm/mediatek: dp: Add phy_mtk_dp module as pre-dependency accel/habanalabs: fix information leak in sec_attest_info() clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable pwm: stm32: Use hweight32 in stm32_pwm_detect_channels pwm: stm32: Fix enable count for clk in .probe() ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[] ALSA: scarlett2: Add missing error check to scarlett2_config_save() ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config() ALSA: scarlett2: Allow passing any output to line_out_remap() ALSA: scarlett2: Add missing error checks to *_ctl_get() ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put() mmc: sdhci_am654: Fix TI SoC dependencies mmc: sdhci_omap: Fix TI SoC dependencies IB/iser: Prevent invalidating wrong MR drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init kselftest/alsa - mixer-test: fix the number of parameters to ksft_exit_fail_msg() kselftest/alsa - mixer-test: Fix the print format specifier warning ksmbd: validate the zero field of packet header of: Fix double free in of_parse_phandle_with_args_map fbdev: imxfb: fix left margin setting of: unittest: Fix of_count_phandle_with_args() expected value message selftests/bpf: Add assert for user stacks in test_task_stack keys, dns: Fix size check of V1 server-list header binder: fix async space check for 0-sized buffers binder: fix unused alloc->free_async_space mips/smp: Call rcutree_report_cpu_starting() earlier Input: atkbd - use ab83 as id when skipping the getid command xen-netback: don't produce zero-size SKB frags binder: fix race between mmput() and do_exit() clocksource/drivers/timer-ti-dm: Fix make W=n kerneldoc warnings powerpc/64s: Increase default stack size to 32KB tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host() usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart Revert "usb: dwc3: Soft reset phy on probe for host" Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-only" usb: chipidea: wait controller resume finished for wakeup irq usb: cdns3: fix uvc failure work since sg support enabled usb: cdns3: fix iso transfer error when mult is not zero usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs" usb: typec: class: fix typec_altmode_put_partner to put plugs usb: mon: Fix atomicity violation in mon_bin_vma_fault serial: core: fix sanitizing check for RTS settings serial: core: make sure RS485 cannot be enabled when it is not supported serial: 8250_bcm2835aux: Restore clock error handling serial: core, imx: do not set RS485 enabled if it is not supported serial: imx: Ensure that imx_uart_rs485_config() is called with enabled clock serial: 8250_exar: Set missing rs485_supported flag serial: omap: do not override settings for RS485 support drm/vmwgfx: Fix possible invalid drm gem put calls drm/vmwgfx: Keep a gem reference to user bos in surfaces ALSA: oxygen: Fix right channel of capture volume mixer ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on HP ZBook ALSA: hda/realtek: Enable headset mic on Lenovo M70 Gen5 ksmbd: validate mech token in session setup ksmbd: fix UAF issue in ksmbd_tcp_new_connection() ksmbd: only v2 leases handle the directory io_uring/rw: ensure io->bytes_done is always initialized fbdev: flush deferred work in fb_deferred_io_fsync() fbdev: flush deferred IO before closing scsi: ufs: core: Simplify power management during async scan scsi: target: core: add missing file_{start,end}_write() scsi: mpi3mr: Refresh sdev queue depth after controller reset scsi: mpi3mr: Block PEL Enable Command on Controller Reset and Unrecoverable State drm/amd: Enable PCIe PME from D3 block: add check that partition length needs to be aligned with block size block: Fix iterating over an empty bio with bio_for_each_folio_all netfilter: nf_tables: check if catch-all set element is active in next generation pwm: jz4740: Don't use dev_err_probe() in .request() pwm: Fix out-of-bounds access in of_pwm_single_xlate() md/raid1: Use blk_opf_t for read and write operations rootfs: Fix support for rootfstype= when root= is given Bluetooth: Fix atomicity violation in {min,max}_key_size_set bpf: Fix re-attachment branch in bpf_tracing_prog_attach LoongArch: Fix and simplify fcsr initialization on execve() iommu/arm-smmu-qcom: Add missing GMU entry to match table iommu/dma: Trace bounce buffer usage when mapping buffers wifi: mt76: fix broken precal loading from MTD for mt7915 wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors wifi: mwifiex: configure BSSID consistently when starting AP Revert "net: rtnetlink: Enslave device before bringing it up" cxl/port: Fix decoder initialization when nr_targets > interleave_ways PCI/P2PDMA: Remove reference to pci_p2pdma_map_sg() PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support PCI: mediatek: Clear interrupt status before dispatching handler x86/kvm: Do not try to disable kvmclock if it was not enabled KVM: arm64: vgic-v4: Restore pending state on host userspace write KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache iio: adc: ad7091r: Pass iio_dev to event handler HID: wacom: Correct behavior when processing some confidence == false touches serial: sc16is7xx: add check for unsupported SPI modes during probe serial: sc16is7xx: set safe default SPI clock frequency ARM: 9330/1: davinci: also select PINCTRL mfd: syscon: Fix null pointer dereference in of_syscon_register() leds: aw2013: Select missing dependency REGMAP_I2C mfd: intel-lpss: Fix the fractional clock divider flags mips: dmi: Fix early remap on MIPS32 mips: Fix incorrect max_low_pfn adjustment riscv: Check if the code to patch lies in the exit section riscv: Fix module_alloc() that did not reset the linear mapping permissions riscv: Fix set_memory_XX() and set_direct_map_XX() by splitting huge linear mappings riscv: Fix set_direct_map_default_noflush() to reset _PAGE_EXEC riscv: Fixed wrong register in XIP_FIXUP_FLASH_OFFSET macro MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup() MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup() power: supply: cw2015: correct time_to_empty units in sysfs power: supply: bq256xx: fix some problem in bq256xx_hw_init serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed libapi: Add missing linux/types.h header to get the __u64 type on io.h base/node.c: initialize the accessor list before registering acpi: property: Let args be NULL in __acpi_node_get_property_reference software node: Let args be NULL in software_node_get_reference_args serial: imx: fix tx statemachine deadlock selftests/sgx: Fix uninitialized pointer dereference in error path selftests/sgx: Fix uninitialized pointer dereferences in encl_get_entry selftests/sgx: Include memory clobber for inline asm in test enclave selftests/sgx: Skip non X86_64 platform iio: adc: ad9467: fix reset gpio handling iio: adc: ad9467: don't ignore error codes iio: adc: ad9467: fix scale setting perf header: Fix one memory leakage in perf_event__fprintf_event_update() perf hisi-ptt: Fix one memory leakage in hisi_ptt_process_auxtrace_event() perf genelf: Set ELF program header addresses properly tty: change tty_write_lock()'s ndelay parameter to bool tty: early return from send_break() on TTY_DRIVER_HARDWARE_BREAK tty: don't check for signal_pending() in send_break() tty: use 'if' in send_break() instead of 'goto' usb: cdc-acm: return correct error code on unsupported break spmi: mtk-pmif: Serialize PMIF status check and command submission vdpa: Fix an error handling path in eni_vdpa_probe() nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length nvmet-tcp: fix a crash in nvmet_req_complete() perf env: Avoid recursively taking env->bpf_progs.lock cxl/region: fix x9 interleave typo apparmor: avoid crash when parsed profile name is empty usb: xhci-mtk: fix a short packet issue of gen1 isoc-in transfer serial: imx: Correct clock error message in function probe() nvmet: re-fix tracing strncpy() warning nvme: trace: avoid memcpy overflow warning nvmet-tcp: Fix the H2C expected PDU len calculation PCI: keystone: Fix race condition when initializing PHYs PCI: mediatek-gen3: Fix translation window size calculation ASoC: mediatek: sof-common: Add NULL check for normal_link string s390/pci: fix max size calculation in zpci_memcpy_toio() net: qualcomm: rmnet: fix global oob in rmnet_policy net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames amt: do not use overwrapped cb area net: phy: micrel: populate .soft_reset for KSZ9131 mptcp: mptcp_parse_option() fix for MPTCPOPT_MP_JOIN mptcp: strict validation before using mp_opt->hmac mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req() mptcp: refine opt_mp_capable determination block: ensure we hold a queue reference when using queue limits udp: annotate data-races around up->pending net: ravb: Fix dma_addr_t truncation in error case dt-bindings: gpio: xilinx: Fix node address in gpio drm/amdkfd: Use resource_size() helper function drm/amdkfd: fixes for HMM mem allocation net: stmmac: ethtool: Fixed calltrace caused by unbalanced disable_irq_wake calls bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe LoongArch: BPF: Prevent out-of-bounds memory access mptcp: relax check on MPC passive fallback netfilter: nf_tables: reject invalid set policy netfilter: nft_limit: do not ignore unsupported flags netfilter: nfnetlink_log: use proper helper for fetching physinif netfilter: nf_queue: remove excess nf_bridge variable netfilter: propagate net to nf_bridge_get_physindev netfilter: bridge: replace physindev with physinif in nf_bridge_info netfilter: nf_tables: do not allow mismatch field size and set key length netfilter: nf_tables: skip dead set elements in netlink dump netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description ipvs: avoid stat macros calls from preemptible context kdb: Fix a potential buffer overflow in kdb_local() ethtool: netlink: Add missing ethnl_ops_begin/complete loop: fix the the direct I/O support check when used on top of block devices mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work i2c: s3c24xx: fix read transfers in polling mode i2c: s3c24xx: fix transferring more than one message in polling mode block: Remove special-casing of compound pages riscv: Fix wrong usage of lm_alias() when splitting a huge linear mapping Revert "KEYS: encrypted: Add check for strsep" arm64: dts: armada-3720-turris-mox: set irq type for RTC Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" Linux 6.1.75 Change-Id: I60398ecc9a2e50206fd9d25c0d6c9ad6e1ca71a0 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-02-19 20:16:38 +00:00
Greg Kroah-Hartman	6e04c1ccf7	Merge branch 'android14-6.1' into branch 'android14-6.1-lts' We need the updates in the normal branch due to the symbol changes happening. This consists of the following changes: * `92432f07d6` ANDROID: GKI: Update the ABI symbol list * `b86713e341` UPSTREAM: virtio: Add support for no-reset virtio PCI PM * `7dc3b2e49e` UPSTREAM: netfilter: nf_tables: check if catch-all set element is active in next generation * `8d4d76a2bd` UPSTREAM: net: tls, update curr on splice as well * `9e2b775333` ANDROID: Update the ABI symbol list * `5a1f8b6b46` ANDROID: Add pci_read_config_word to virtual device symbol list * `e356cae969` ANDROID: Export kthread_set_per_cpu * `81c922621d` ANDROID: GKI: fix ABI breakage in struct ipv6_devconf * `20131b787f` Reapply "net: release reference to inet6_dev pointer" * `c2c0273029` Reapply "net: change accept_ra_min_rtr_lft to affect all RA lifetimes" * `a8053aadca` Reapply "net: add sysctl accept_ra_min_rtr_lft" * `fc6c1b3acb` ANDROID: GKI: explicit include of stringify.h * `8481b97df5` BACKPORT: erofs: fix infinite loop due to a race of filling compressed_bvecs * `886c9d1fc2` ANDROID: arm64: virt: Invalidate tlb once the balloon before reporting/inflating * `4aedc102c3` ANDROID: arm64: virt: Make the page_relinquish call generic * `d3f73f0452` UPSTREAM: drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks * `df2fe1add7` UPSTREAM: drm/msm/dsi: Enable runtime PM * `6053d8ffd4` UPSTREAM: arm64: scs: Disable LTO for SCS patching code * `696293ef72` ANDROID: GKI: Update symbol list for mtk * `6338e41509` BACKPORT: f2fs: Restrict max filesize for 16K f2fs * `8c8bcbdf0b` BACKPORT: f2fs: Support Block Size == Page Size * `eb20497d6d` ANDROID: abi_gki_aarch64_qcom: Update symbol list * `1e6c1ca9a2` UPSTREAM: usb: typec: tcpm: fix the PD disabled case * `ba97ad7b91` UPSTREAM: netfilter: nf_tables: reject QUEUE/DROP verdict parameters * `76f0396b57` ANDROID: ABI: Update oplus symbol list * `016b640235` ANDROID: fuse: Fix the issue of fuse_dentry_canonical_path * `5eb1cbb384` ANDROID: Update the ABI symbol list * `b53c3cb351` ANDROID: Export cpufreq_driver_test_flags() * `9b476ebe99` ANDROID: Build null_blk and scsi_debug as kernel modules * `01472f3af1` ANDROID: GKI: Update the pixel symbol list * `fbcd29ac45` ANDROID: usb: dwc3: export tracepoint for dwc3 read/write * `0123832f68` ANDROID: scsi: ufs: add vendor hook to override key reprogramming * `7ce117301e` ANDROID: vendor_hooks: Add hook for binder_detect_low_async_space_locked * `7b6a6228df` ANDROID: Update the ABI symbol list * `db94de2a17` ANDROID: Update the ABI representation * `e08371bcf5` UPSTREAM: usb: typec: tcpm: Support multiple capabilities * `4025820c61` UPSTREAM: usb: typec: tcpm: Parse Accessory Mode information Change-Id: Ibe422d476544081f14095e025b2a77ab70c577df Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-02-19 15:50:00 +00:00
Marco Elver	dc904345e3	mm, kmsan: fix infinite recursion due to RCU critical section commit f6564fce256a3944aa1bc76cb3c40e792d97c1eb upstream. Alexander Potapenko writes in [1]: "For every memory access in the code instrumented by KMSAN we call kmsan_get_metadata() to obtain the metadata for the memory being accessed. For virtual memory the metadata pointers are stored in the corresponding `struct page`, therefore we need to call virt_to_page() to get them. According to the comment in arch/x86/include/asm/page.h, virt_to_page(kaddr) returns a valid pointer iff virt_addr_valid(kaddr) is true, so KMSAN needs to call virt_addr_valid() as well. To avoid recursion, kmsan_get_metadata() must not call instrumented code, therefore ./arch/x86/include/asm/kmsan.h forks parts of arch/x86/mm/physaddr.c to check whether a virtual address is valid or not. But the introduction of rcu_read_lock() to pfn_valid() added instrumented RCU API calls to virt_to_page_or_null(), which is called by kmsan_get_metadata(), so there is an infinite recursion now. I do not think it is correct to stop that recursion by doing kmsan_enter_runtime()/kmsan_exit_runtime() in kmsan_get_metadata(): that would prevent instrumented functions called from within the runtime from tracking the shadow values, which might introduce false positives." Fix the issue by switching pfn_valid() to the _sched() variant of rcu_read_lock/unlock(), which does not require calling into RCU. Given the critical section in pfn_valid() is very small, this is a reasonable trade-off (with preemptible RCU). KMSAN further needs to be careful to suppress calls into the scheduler, which would be another source of recursion. This can be done by wrapping the call to pfn_valid() into preempt_disable/enable_no_resched(). The downside is that this sacrifices breaking scheduling guarantees; however, a kernel compiled with KMSAN has already given up any performance guarantees due to being heavily instrumented. Note, KMSAN code already disables tracing via Makefile, and since mmzone.h is included, it is not necessary to use the notrace variant, which is generally preferred in all other cases. Link: https://lkml.kernel.org/r/20240115184430.2710652-1-glider@google.com [1] Link: https://lkml.kernel.org/r/20240118110022.2538350-1-elver@google.com Fixes: 5ec8e8ea8b77 ("mm/sparsemem: fix race in accessing memory_section->usage") Signed-off-by: Marco Elver <elver@google.com> Reported-by: Alexander Potapenko <glider@google.com> Reported-by: syzbot+93a9e8a3dea8d6085e12@syzkaller.appspotmail.com Reviewed-by: Alexander Potapenko <glider@google.com> Tested-by: Alexander Potapenko <glider@google.com> Cc: Charan Teja Kalla <quic_charante@quicinc.com> Cc: Borislav Petkov (AMD) <bp@alien8.de> Cc: Dave Hansen <dave.hansen@linux.intel.com> Cc: Dmitry Vyukov <dvyukov@google.com> Cc: "H. Peter Anvin" <hpa@zytor.com> Cc: Ingo Molnar <mingo@redhat.com> Cc: Thomas Gleixner <tglx@linutronix.de> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2024-02-05 20:13:02 +00:00
Arnd Bergmann	d6c8d8ab76	arch: consolidate arch_irq_work_raise prototypes [ Upstream commit 64bac5ea17d527872121adddfee869c7a0618f8f ] The prototype was hidden in an #ifdef on x86, which causes a warning: kernel/irq_work.c:72:13: error: no previous prototype for 'arch_irq_work_raise' [-Werror=missing-prototypes] Some architectures have a working prototype, while others don't. Fix this by providing it in only one place that is always visible. Reviewed-by: Alexander Gordeev <agordeev@linux.ibm.com> Acked-by: Catalin Marinas <catalin.marinas@arm.com> Acked-by: Palmer Dabbelt <palmer@rivosinc.com> Acked-by: Guo Ren <guoren@kernel.org> Signed-off-by: Arnd Bergmann <arnd@arndb.de> Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-02-05 20:12:49 +00:00
Zhiquan Li	d67e43be0e	x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel [ Upstream commit 9f3b130048bfa2e44a8cfb1b616f826d9d5d8188 ] Memory errors don't happen very often, especially fatal ones. However, in large-scale scenarios such as data centers, that probability increases with the amount of machines present. When a fatal machine check happens, mce_panic() is called based on the severity grading of that error. The page containing the error is not marked as poison. However, when kexec is enabled, tools like makedumpfile understand when pages are marked as poison and do not touch them so as not to cause a fatal machine check exception again while dumping the previous kernel's memory. Therefore, mark the page containing the error as poisoned so that the kexec'ed kernel can avoid accessing the page. [ bp: Rewrite commit message and comment. ] Co-developed-by: Youquan Song <youquan.song@intel.com> Signed-off-by: Youquan Song <youquan.song@intel.com> Signed-off-by: Zhiquan Li <zhiquan1.li@intel.com> Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de> Reviewed-by: Naoya Horiguchi <naoya.horiguchi@nec.com> Link: https://lore.kernel.org/r/20231014051754.3759099-1-zhiquan1.li@intel.com Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-02-05 20:12:47 +00:00
Jun'ichi Nomura	d4908b3431	x86/boot: Ignore NMIs during very early boot [ Upstream commit 78a509fba9c9b1fcb77f95b7c6be30da3d24823a ] When there are two racing NMIs on x86, the first NMI invokes NMI handler and the 2nd NMI is latched until IRET is executed. If panic on NMI and panic kexec are enabled, the first NMI triggers panic and starts booting the next kernel via kexec. Note that the 2nd NMI is still latched. During the early boot of the next kernel, once an IRET is executed as a result of a page fault, then the 2nd NMI is unlatched and invokes the NMI handler. However, NMI handler is not set up at the early stage of boot, which results in a boot failure. Avoid such problems by setting up a NOP handler for early NMIs. [ mingo: Refined the changelog. ] Signed-off-by: Jun'ichi Nomura <junichi.nomura@nec.com> Signed-off-by: Derek Barbosa <debarbos@redhat.com> Signed-off-by: Ingo Molnar <mingo@kernel.org> Cc: Kees Cook <keescook@chromium.org> Cc: Linus Torvalds <torvalds@linux-foundation.org> Cc: Paul E. McKenney <paulmck@kernel.org> Cc: Andy Lutomirski <luto@kernel.org> Cc: "H. Peter Anvin" <hpa@zytor.com> Cc: Peter Zijlstra <peterz@infradead.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-02-05 20:12:46 +00:00
Bart Van Assche	9b476ebe99	ANDROID: Build null_blk and scsi_debug as kernel modules Both kernel modules are important for testing block layer and SCSI core performance and functionality. Hence enable these in the kernel configuration. Bug: 323406846 Change-Id: I23cee78cd7d4e5f891395624a6bed01cffee4aa8 Signed-off-by: Bart Van Assche <bvanassche@google.com>	2024-02-01 23:53:56 +00:00
Greg Kroah-Hartman	c3a1a1e97e	Merge branch 'android14-6.1' into branch 'android14-6.1-lts' Backmerge the latest android14-6.1 changes into the lts branch to keep up to date. Contains the following commits: * `3578913b2e` UPSTREAM: net/rose: Fix Use-After-Free in rose_ioctl * `8fbed1ea00` UPSTREAM: ida: Fix crash in ida_free when the bitmap is empty * `6ce5bb744e` ANDROID: GKI: Update symbol list for mtk * `7cbad58851` Reapply "perf: Disallow mis-matched inherited group reads" * `067a03c44e` ANDROID: GKI: Add Pasa symbol list * `b6be1a36f7` FROMGIT: mm: memcg: don't periodically flush stats when memcg is disabled * `d0e2d333f9` ANDROID: Update the ABI symbol list * `10558542a1` ANDROID: sched: export update_misfit_status symbol * `a0b3b39898` ANDROID: GKI: Add ASR KMI symbol list * `599710db0f` FROMGIT: usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend * `9265fa90c1` FROMLIST: usb: core: Prevent null pointer dereference in update_port_device_state * `2730733d54` ANDROID: gki_defconfig: Enable CONFIG_NVME_MULTIPATH * `4f668f5682` BACKPORT: irqchip/gic-v3: Work around affinity issues on ASR8601 * `473a871315` BACKPORT: irqchip/gic-v3: Improve affinity helper * `6c32acf537` UPSTREAM: sched/fair: Limit sched slice duration * `7088d250bf` ANDROID: Update the ABI symbol list * `c249740414` ANDROID: idle_inject: Export function symbols * `990d341477` ANDROID: Update the ABI symbol list * `be92a6a1b4` ANDROID: GKI: Remove CONFIG_MEDIA_CEC_RC * `fa9ac43f16` BACKPORT: usb: host: xhci: Avoid XHCI resume delay if SSUSB device is not present * `f27fc6ba23` Merge "Merge tag 'android14-6.1.68_r00' into branch 'android14-6.1'" into android14-6.1 \|\ \| * `0177cfb2a2` Merge tag 'android14-6.1.68_r00' into branch 'android14-6.1' * `c96cea1a3c` ANDROID: Update the ABI symbol list * `c2fbc12180` ANDROID: uid_sys_stats: Drop CONFIG_UID_SYS_STATS_DEBUG logic * `90bd30bdef` ANDROID: Update the ABI symbol list * `3280560843` ANDROID: Update the ABI symbol list * `427210e440` UPSTREAM: usb: gadget: uvc: Remove nested locking * `9267e267be` ANDROID: uid_sys_stats: Fully initialize uid_entry_tmp value * `2d3f0c9d41` ANDROID: Roll back some code to fix system_server registers psi trigger failed. * `bd77c97c76` UPSTREAM: usb: gadget: uvc: Fix use are free during STREAMOFF * `21c71a7d0e` ANDROID: GKI: Add symbol list for Nothing * `aba5a3fe09` ANDROID: Enable CONFIG_LAZY_RCU in x86 gki_defconfig * `204160394a` ANDROID: fuse-bpf: Fix the issue of abnormal lseek system calls * `947708f1ff` ANDROID: ABI: Update symbol list for imx * `7eedea7abf` BACKPORT: PM: sleep: Fix possible deadlocks in core system-wide PM code * `e1a20dd9ff` UPSTREAM: async: Introduce async_schedule_dev_nocall() * `e4b0e14f83` UPSTREAM: async: Split async_schedule_node_domain() * `6b4c816d17` FROMGIT: BACKPORT: mm: update mark_victim tracepoints fields * `d97ea65296` ANDROID: Enable CONFIG_LAZY_RCU in arm64 gki_defconfig * `90d68cedd1` FROMLIST: rcu: Provide a boot time parameter to control lazy RCU * `a079cc5876` ANDROID: rcu: Add a minimum time for marking boot as completed * `ffe09c06a8` UPSTREAM: rcu: Disable laziness if lazy-tracking says so * `d07488d26e` UPSTREAM: rcu: Track laziness during boot and suspend * `4316bd568b` UPSTREAM: net: Use call_rcu_hurry() for dst_release() * `b9427245f0` UPSTREAM: workqueue: Make queue_rcu_work() use call_rcu_hurry() * `72fdf7f606` UPSTREAM: percpu-refcount: Use call_rcu_hurry() for atomic switch * `ced65a053b` UPSTREAM: io_uring: use call_rcu_hurry if signaling an eventfd * `84c8157d06` UPSTREAM: rcu: Update synchronize_rcu_mult() comment for call_rcu_hurry() * `3751416eeb` UPSTREAM: scsi/scsi_error: Use call_rcu_hurry() instead of call_rcu() * `52193e9489` UPSTREAM: rcu/rcutorture: Use call_rcu_hurry() where needed * `83f8ba569f` UPSTREAM: rcu/rcuscale: Use call_rcu_hurry() for async reader test * `9b625f4978` UPSTREAM: rcu/sync: Use call_rcu_hurry() instead of call_rcu * `c570c8fea3` BACKPORT: rcu: Shrinker for lazy rcu * `4957579439` UPSTREAM: rcu: Refactor code a bit in rcu_nocb_do_flush_bypass() * `66a832fe38` UPSTREAM: rcu: Make call_rcu() lazy to save power * `4fb09fb4f7` UPSTREAM: rcu: Fix missing nocb gp wake on rcu_barrier() * `64c59ad2c3` UPSTREAM: rcu: Fix late wakeup when flush of bypass cblist happens * `0799ace265` ANDROID: Update the ABI symbol list * `65db2f8ed3` ANDROID: GKI: add GKI symbol list for Exynosauto SoC * `cfe8cce4e8` UPSTREAM: coresight: tmc: Don't enable TMC when it's not ready. * `899194d7e9` UPSTREAM: netfilter: nf_tables: bail out on mismatching dynset and set expressions * `e6712ed4f0` ANDROID: ABI: Update oplus symbol list * `24bb8fc82e` ANDROID: vendor_hooks: add hooks in driver/android/binder.c * `55930b39ca` ANDROID: GKI: Update honda symbol list for xt_LOG * `3160b69e20` ANDROID: GKI: Update honda symbol list for ebt filter * `4dc7f98815` ANDROID: GKI: Update honda symbol list for ebtables * `39a0823340` ANDROID: GKI: Update honda symbol list for net scheduler * `dd0098bdb4` ANDROID: GKI: Update honda symbol list for led-trigger * `66a20ed4b8` ANDROID: GKI: Add initial symbol list for honda * `28dbe4d613` ANDROID: GKI: add symbols to ABI * `97100e867e` FROMGIT: usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart * `36248a15a7` FROMGIT: usb: dwc3: set pm runtime active before resume common Change-Id: I8d9586a94c3182cd365d1e3b651a7552c7c9949b Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-02-01 16:48:05 +00:00
Richard Palethorpe	c02d3872c8	x86/entry/ia32: Ensure s32 is sign extended to s64 commit 56062d60f117dccfb5281869e0ab61e090baf864 upstream. Presently ia32 registers stored in ptregs are unconditionally cast to unsigned int by the ia32 stub. They are then cast to long when passed to __se_sys*, but will not be sign extended. This takes the sign of the syscall argument into account in the ia32 stub. It still casts to unsigned int to avoid implementation specific behavior. However then casts to int or unsigned int as necessary. So that the following cast to long sign extends the value. This fixes the io_pgetevents02 LTP test when compiled with -m32. Presently the systemcall io_pgetevents_time64() unexpectedly accepts -1 for the maximum number of events. It doesn't appear other systemcalls with signed arguments are effected because they all have compat variants defined and wired up. Fixes: `ebeb8c82ff` ("syscalls/x86: Use 'struct pt_regs' based syscall calling for IA32_EMULATION and x32") Suggested-by: Arnd Bergmann <arnd@arndb.de> Signed-off-by: Richard Palethorpe <rpalethorpe@suse.com> Signed-off-by: Nikolay Borisov <nik.borisov@suse.com> Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Reviewed-by: Arnd Bergmann <arnd@arndb.de> Cc: stable@vger.kernel.org Link: https://lore.kernel.org/r/20240110130122.3836513-1-nik.borisov@suse.com Link: https://lore.kernel.org/ltp/20210921130127.24131-1-rpalethorpe@suse.com/ Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2024-01-31 16:17:12 -08:00
Mario Limonciello	40c23b5e07	rtc: Extend timeout for waiting for UIP to clear to 1s commit cef9ecc8e938dd48a560f7dd9be1246359248d20 upstream. Specs don't say anything about UIP being cleared within 10ms. They only say that UIP won't occur for another 244uS. If a long NMI occurs while UIP is still updating it might not be possible to get valid data in 10ms. This has been observed in the wild that around s2idle some calls can take up to 480ms before UIP is clear. Adjust callers from outside an interrupt context to wait for up to a 1s instead of 10ms. Cc: <stable@vger.kernel.org> # 6.1.y Fixes: `ec5895c0f2` ("rtc: mc146818-lib: extract mc146818_avoid_UIP") Reported-by: Carsten Hatger <xmb8dsv4@gmail.com> Closes: https://bugzilla.kernel.org/show_bug.cgi?id=217626 Tested-by: Mateusz Jończyk <mat.jonczyk@o2.pl> Reviewed-by: Mateusz Jończyk <mat.jonczyk@o2.pl> Acked-by: Mateusz Jończyk <mat.jonczyk@o2.pl> Signed-off-by: Mario Limonciello <mario.limonciello@amd.com> Link: https://lore.kernel.org/r/20231128053653.101798-5-mario.limonciello@amd.com Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2024-01-31 16:17:01 -08:00
Mario Limonciello	7971389316	rtc: Add support for configuring the UIP timeout for RTC reads commit 120931db07b49252aba2073096b595482d71857c upstream. The UIP timeout is hardcoded to 10ms for all RTC reads, but in some contexts this might not be enough time. Add a timeout parameter to mc146818_get_time() and mc146818_get_time_callback(). If UIP timeout is configured by caller to be >=100 ms and a call takes this long, log a warning. Make all callers use 10ms to ensure no functional changes. Cc: <stable@vger.kernel.org> # 6.1.y Fixes: `ec5895c0f2` ("rtc: mc146818-lib: extract mc146818_avoid_UIP") Signed-off-by: Mario Limonciello <mario.limonciello@amd.com> Tested-by: Mateusz Jończyk <mat.jonczyk@o2.pl> Reviewed-by: Mateusz Jończyk <mat.jonczyk@o2.pl> Acked-by: Mateusz Jończyk <mat.jonczyk@o2.pl> Link: https://lore.kernel.org/r/20231128053653.101798-4-mario.limonciello@amd.com Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2024-01-31 16:17:01 -08:00
Sean Christopherson	fafda9f08a	Revert "nSVM: Check for reserved encodings of TLB_CONTROL in nested VMCB" [ Upstream commit a484755ab2526ebdbe042397cdd6e427eb4b1a68 ] Revert KVM's made-up consistency check on SVM's TLB control. The APM says that unsupported encodings are reserved, but the APM doesn't state that VMRUN checks for a supported encoding. Unless something is called out in "Canonicalization and Consistency Checks" or listed as MBZ (Must Be Zero), AMD behavior is typically to let software shoot itself in the foot. This reverts commit `174a921b69`. Fixes: `174a921b69` ("nSVM: Check for reserved encodings of TLB_CONTROL in nested VMCB") Reported-by: Stefan Sterz <s.sterz@proxmox.com> Closes: https://lkml.kernel.org/r/b9915c9c-4cf6-051a-2d91-44cc6380f455%40proxmox.com Cc: stable@vger.kernel.org Reviewed-by: Maxim Levitsky <mlevitsk@redhat.com> Link: https://lore.kernel.org/r/20231018194104.1896415-2-seanjc@google.com Signed-off-by: Sean Christopherson <seanjc@google.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-31 16:16:58 -08:00
Daniel Mentz	2730733d54	ANDROID: gki_defconfig: Enable CONFIG_NVME_MULTIPATH Enable NVMe multipath support to get access to /dev/nvmeXnY block devices. Bug: 318459546 Change-Id: Id452462b4dbb474f1e3a53f5010f09edf63642bc Signed-off-by: Daniel Mentz <danielmentz@google.com>	2024-01-26 18:05:27 +00:00
Kirill A. Shutemov	455ebc1910	x86/kvm: Do not try to disable kvmclock if it was not enabled commit 1c6d984f523f67ecfad1083bb04c55d91977bb15 upstream. kvm_guest_cpu_offline() tries to disable kvmclock regardless if it is present in the VM. It leads to write to a MSR that doesn't exist on some configurations, namely in TDX guest: unchecked MSR access error: WRMSR to 0x12 (tried to write 0x0000000000000000) at rIP: 0xffffffff8110687c (kvmclock_disable+0x1c/0x30) kvmclock enabling is gated by CLOCKSOURCE and CLOCKSOURCE2 KVM paravirt features. Do not disable kvmclock if it was not enabled. Signed-off-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com> Fixes: `c02027b574` ("x86/kvm: Disable kvmclock on all CPUs on shutdown") Reviewed-by: Sean Christopherson <seanjc@google.com> Reviewed-by: Vitaly Kuznetsov <vkuznets@redhat.com> Cc: Paolo Bonzini <pbonzini@redhat.com> Cc: Wanpeng Li <wanpengli@tencent.com> Cc: stable@vger.kernel.org Message-Id: <20231205004510.27164-6-kirill.shutemov@linux.intel.com> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2024-01-25 15:27:44 -08:00
Yazen Ghannam	c9275305d6	x86/mce/inject: Clear test status value [ Upstream commit 6175b407756b22e7fdc771181b7d832ebdedef5c ] AMD systems generally allow MCA "simulation" where MCA registers can be written with valid data and the full MCA handling flow can be tested by software. However, the platform on Scalable MCA systems, can prevent software from writing data to the MCA registers. There is no architectural way to determine this configuration. Therefore, the MCE injection module will check for this behavior by writing and reading back a test status value. This is done during module init, and the check can run on any CPU with any valid MCA bank. If MCA_STATUS writes are ignored by the platform, then there are no side effects on the hardware state. If the writes are not ignored, then the test status value will remain in the hardware MCA_STATUS register. It is likely that the value will not be overwritten by hardware or software, since the tested CPU and bank are arbitrary. Therefore, the user may see a spurious, synthetic MCA error reported whenever MCA is polled for this CPU. Clear the test value immediately after writing it. It is very unlikely that a valid MCA error is logged by hardware during the test. Errors that cause an #MC won't be affected. Fixes: `891e465a1b` ("x86/mce: Check whether writes to MCA_STATUS are getting ignored") Signed-off-by: Yazen Ghannam <yazen.ghannam@amd.com> Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de> Link: https://lore.kernel.org/r/20231118193248.1296798-2-yazen.ghannam@amd.com Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-25 15:27:18 -08:00
Colin Ian King	0be645792c	x86/lib: Fix overflow when counting digits [ Upstream commit a24d61c609813963aacc9f6ec8343f4fcaac7243 ] tl;dr: The num_digits() function has a theoretical overflow issue. But it doesn't affect any actual in-tree users. Fix it by using a larger type for one of the local variables. Long version: There is an overflow in variable m in function num_digits when val is >= 1410065408 which leads to the digit calculation loop to iterate more times than required. This results in either more digits being counted or in some cases (for example where val is 1932683193) the value of m eventually overflows to zero and the while loop spins forever). Currently the function num_digits is currently only being used for small values of val in the SMP boot stage for digit counting on the number of cpus and NUMA nodes, so the overflow is never encountered. However it is useful to fix the overflow issue in case the function is used for other purposes in the future. (The issue was discovered while investigating the digit counting performance in various kernel helper functions rather than any real-world use-case). The simplest fix is to make m a long long, the overhead in multiplication speed for a long long is very minor for small values of val less than 10000 on modern processors. The alternative fix is to replace the multiplication with a constant division by 10 loop (this compiles down to an multiplication and shift) without needing to make m a long long, but this is slightly slower than the fix in this commit when measured on a range of x86 processors). [ dhansen: subject and changelog tweaks ] Fixes: `646e29a178` ("x86: Improve the printout of the SMP bootup CPU table") Signed-off-by: Colin Ian King <colin.i.king@gmail.com> Signed-off-by: Dave Hansen <dave.hansen@linux.intel.com> Link: https://lore.kernel.org/all/20231102174901.2590325-1-colin.i.king%40gmail.com Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-25 15:27:18 -08:00
James Tai	be92a6a1b4	ANDROID: GKI: Remove CONFIG_MEDIA_CEC_RC This config will cause the 'CtsHdmiCecHostTestCases' test case to fail. According to the discussion in bug 309377116, it is recommended to remove this config. Bug: 322143898 Change-Id: Ied37a6c55f4198dbb9dbb9b6c3156a8a7a0bd945 Signed-off-by: James Tai <james.tai@realtek.com>	2024-01-25 18:19:21 +00:00
Todd Kjos	f27fc6ba23	Merge "Merge tag 'android14-6.1.68_r00' into branch 'android14-6.1'" into android14-6.1	2024-01-24 17:34:59 +00:00
Qais Yousef	aba5a3fe09	ANDROID: Enable CONFIG_LAZY_RCU in x86 gki_defconfig It is still disabled by default. Must specify rcutree.android_enable_rcu_lazy and rcu_nocbs=all in boot time parameter to actually enable it. Bug: 258241771 Change-Id: Ic9e15b846d58ffa3d5dd81842c568da79352ff2d Signed-off-by: Qais Yousef <qyousef@google.com>	2024-01-20 02:45:24 +00:00
Greg Kroah-Hartman	c7b298c1b5	Revert "bpf: Support new 32bit offset jmp instruction" This reverts commit `2c795ce090` which is commit 4cd58e9af8b9d9fff6b7145e742abbfcda0af4af upstream. It breaks the Android kernel abi and can be brought back in the future in an abi-safe way if it is really needed. Bug: 161946584 Change-Id: Iac907693874b0a3ac47992214c19c41905562e86 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-01-15 11:30:21 +00:00
Greg Kroah-Hartman	e1b12db2de	Merge 6.1.72 into android14-6.1-lts Changes in 6.1.72 keys, dns: Fix missing size check of V1 server-list header block: Don't invalidate pagecache for invalid falloc modes ALSA: hda/realtek: enable SND_PCI_QUIRK for hp pavilion 14-ec1xxx series ALSA: hda/realtek: fix mute/micmute LEDs for a HP ZBook ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP ProBook 440 G6 mptcp: prevent tcp diag from closing listener subflows Revert "PCI/ASPM: Remove pcie_aspm_pm_state_change()" drm/mgag200: Fix gamma lut not initialized for G200ER, G200EV, G200SE cifs: cifs_chan_is_iface_active should be called with chan_lock held cifs: do not depend on release_iface for maintaining iface_list KVM: x86/pmu: fix masking logic for MSR_CORE_PERF_GLOBAL_CTRL wifi: iwlwifi: pcie: don't synchronize IRQs from IRQ drm/bridge: ti-sn65dsi86: Never store more than msg->size bytes in AUX xfer netfilter: use skb_ip_totlen and iph_totlen netfilter: nf_tables: set transport offset from mac header for netdev/egress nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local octeontx2-af: Fix marking couple of structure as __packed drm/i915/dp: Fix passing the correct DPCD_REV for drm_dp_set_phy_test_pattern ice: Fix link_down_on_close message ice: Shut down VSI with "link-down-on-close" enabled i40e: Fix filter input checks to prevent config with invalid values igc: Report VLAN EtherType matching back to user igc: Check VLAN TCI mask igc: Check VLAN EtherType mask ASoC: fsl_rpmsg: Fix error handler with pm_runtime_enable ASoC: mediatek: mt8186: fix AUD_PAD_TOP register and offset mlxbf_gige: fix receive packet race condition net: sched: em_text: fix possible memory leak in em_text_destroy() r8169: Fix PCI error on system resume can: raw: add support for SO_MARK net-timestamp: extend SOF_TIMESTAMPING_OPT_ID to HW timestamps net: annotate data-races around sk->sk_tsflags net: annotate data-races around sk->sk_bind_phc net: Implement missing getsockopt(SO_TIMESTAMPING_NEW) selftests: bonding: do not set port down when adding to bond ARM: sun9i: smp: Fix array-index-out-of-bounds read in sunxi_mc_smp_init sfc: fix a double-free bug in efx_probe_filters net: bcmgenet: Fix FCS generation for fragmented skbuffs netfilter: nft_immediate: drop chain reference counter on error net: Save and restore msg_namelen in sock_sendmsg i40e: fix use-after-free in i40e_aqc_add_filters() ASoC: meson: g12a-toacodec: Validate written enum values ASoC: meson: g12a-tohdmitx: Validate written enum values ASoC: meson: g12a-toacodec: Fix event generation ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux i40e: Restore VF MSI-X state during PCI reset igc: Fix hicredit calculation net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues net/smc: fix invalid link access in dumping SMC-R connections octeontx2-af: Always configure NIX TX link credits based on max frame size octeontx2-af: Re-enable MAC TX in otx2_stop processing asix: Add check for usbnet_get_endpoints net: ravb: Wait for operating mode to be applied bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters() net: Implement missing SO_TIMESTAMPING_NEW cmsg support selftests: secretmem: floor the memory size to the multiple of page_size cpu/SMT: Create topology_smt_thread_allowed() cpu/SMT: Make SMT control more robust against enumeration failures srcu: Fix callbacks acceleration mishandling bpf, x64: Fix tailcall infinite loop bpf, x86: Simplify the parsing logic of structure parameters bpf, x86: save/restore regs with BPF_DW size net: Declare MSG_SPLICE_PAGES internal sendmsg() flag udp: Convert udp_sendpage() to use MSG_SPLICE_PAGES splice, net: Add a splice_eof op to file-ops and socket-ops ipv4, ipv6: Use splice_eof() to flush udp: introduce udp->udp_flags udp: move udp->no_check6_tx to udp->udp_flags udp: move udp->no_check6_rx to udp->udp_flags udp: move udp->gro_enabled to udp->udp_flags udp: move udp->accept_udp_{l4\|fraglist} to udp->udp_flags udp: lockless UDP_ENCAP_L2TPINUDP / UDP_GRO udp: annotate data-races around udp->encap_type wifi: iwlwifi: yoyo: swap cdb and jacket bits values arm64: dts: qcom: sdm845: align RPMh regulator nodes with bindings arm64: dts: qcom: sdm845: Fix PSCI power domain names fbdev: imsttfb: Release framebuffer and dealloc cmap on error path fbdev: imsttfb: fix double free in probe() bpf: decouple prune and jump points bpf: remove unnecessary prune and jump points bpf: Remove unused insn_cnt argument from visit_[func_call_]insn() bpf: clean up visit_insn()'s instruction processing bpf: Support new 32bit offset jmp instruction bpf: handle ldimm64 properly in check_cfg() bpf: fix precision backtracking instruction iteration blk-mq: make sure active queue usage is held for bio_integrity_prep() net/mlx5: Increase size of irq name buffer s390/mm: add missing arch_set_page_dat() call to vmem_crst_alloc() s390/cpumf: support user space events for counting f2fs: clean up i_compress_flag and i_compress_level usage f2fs: convert to use bitmap API f2fs: assign default compression level f2fs: set the default compress_level on ioctl selftests: mptcp: fix fastclose with csum failure selftests: mptcp: set FAILING_LINKS in run_tests media: camss: sm8250: Virtual channels for CSID media: qcom: camss: Fix set CSI2_RX_CFG1_VC_MODE when VC is greater than 3 ext4: convert move_extent_per_page() to use folios khugepage: replace try_to_release_page() with filemap_release_folio() memory-failure: convert truncate_error_page() to use folio mm: merge folio_has_private()/filemap_release_folio() call pairs mm, netfs, fscache: stop read optimisation when folio removed from pagecache filemap: add a per-mapping stable writes flag block: update the stable_writes flag in bdev_add smb: client: fix missing mode bits for SMB symlinks net: dpaa2-eth: rearrange variable in dpaa2_eth_get_ethtool_stats dpaa2-eth: recycle the RX buffer only after all processing done ethtool: don't propagate EOPNOTSUPP from dumps bpf, sockmap: af_unix stream sockets need to hold ref for pair sock firmware: arm_scmi: Fix frequency truncation by promoting multiplier type ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 genirq/affinity: Remove the 'firstvec' parameter from irq_build_affinity_masks genirq/affinity: Pass affinity managed mask array to irq_build_affinity_masks genirq/affinity: Don't pass irq_affinity_desc array to irq_build_affinity_masks genirq/affinity: Rename irq_build_affinity_masks as group_cpus_evenly genirq/affinity: Move group_cpus_evenly() into lib/ lib/group_cpus.c: avoid acquiring cpu hotplug lock in group_cpus_evenly mm/memory_hotplug: add missing mem_hotplug_lock mm/memory_hotplug: fix error handling in add_memory_resource() net: sched: call tcf_ct_params_free to free params in tcf_ct_init netfilter: flowtable: allow unidirectional rules netfilter: flowtable: cache info of last offload net/sched: act_ct: offload UDP NEW connections net/sched: act_ct: Fix promotion of offloaded unreplied tuple netfilter: flowtable: GC pushes back packets to classic path net/sched: act_ct: Take per-cb reference to tcf_ct_flow_table octeontx2-af: Fix pause frame configuration octeontx2-af: Support variable number of lmacs btrfs: fix qgroup_free_reserved_data int overflow btrfs: mark the len field in struct btrfs_ordered_sum as unsigned ring-buffer: Fix 32-bit rb_time_read() race with rb_time_cmpxchg() firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards x86/kprobes: fix incorrect return address calculation in kprobe_emulate_call_indirect i2c: core: Fix atomic xfer check for non-preempt config mm: fix unmap_mapping_range high bits shift bug drm/amdgpu: skip gpu_info fw loading on navi12 drm/amd/display: add nv12 bounding box mmc: meson-mx-sdhc: Fix initialization frozen issue mmc: rpmb: fixes pause retune on all RPMB partitions. mmc: core: Cancel delayed work before releasing host mmc: sdhci-sprd: Fix eMMC init failure after hw reset genirq/affinity: Only build SMP-only helper functions on SMP kernels f2fs: compress: fix to assign compress_level for lz4 correctly net/sched: act_ct: additional checks for outdated flows net/sched: act_ct: Always fill offloading tuple iifidx bpf: Fix a verifier bug due to incorrect branch offset comparison with cpu=v4 bpf: syzkaller found null ptr deref in unix_bpf proto add media: qcom: camss: Comment CSID dt_id field smb3: Replace smb2pdu 1-element arrays with flex-arrays Revert "interconnect: qcom: sm8250: Enable sync_state" Linux 6.1.72 Change-Id: Id00eb2ae1159d4d5fa0ef914e672c5669cbf5b0a Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-01-14 13:26:13 +00:00
Greg Kroah-Hartman	1e63881f5c	This is the 6.1.70 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmWSsnYACgkQONu9yGCS aT7ZRw//bmrTWoNbFf/qdM11oPF9EHus9FUgSlP5yvNaa6jcPfwGx71NPXUkz+wU xKobh1VwK7TJxq4JHFQeMmupW/8++NeWNygwtYsllwnsMGzHL+mz2Txysrr/mhMx WUs6UVYXRxnuQJJDSqtTvMoyllpAJ1QQxJNuhKKOI1i+0DIu9YjQklD/4eW3cebv 8B9f3CeOyP/oL5Z0MqFTP8OnWx6X3jTbO4caor+qsyR+frgpXgBppTF76RHcd8lX MLVlx7aqr4wcml/uUMsolw8Zjbb719mX+KW3LHltl8wHftZeinYUsu1afnlb5dG1 rAaVgut0PmjTAQ/KwIp54CGO2MADwApMCUXIm0yyKSpNfw+HKR10bpz64HOFp9KQ 368YpjDJ3onkQdrLjV57w37YBRLyWxipeBya2+S4rdyPSfuvPkPCRNVkEDnHVAnH jxEhuoMZ2f/CIA8BT32y4DYDvEaIdfp7jVvEDFREDyIVXRMBhIneMhhyjU+Oe7Rw 1q/sfEJejXFa5VvC+Jl+K5LouP59M5MTq3RkCoYxZKz+bdfpOLEJ6AZJoZHcS02J QlM/pL213nC1ye3tuWFu3tNPzPS/G6LNQfGgSsBUzRn9IX2osn/epNFnCHBIFqlK apjrXObrmqKE6jNvy6ktHUDpnEXPZFpvirSXRN2Lk9SYh76bFP0= =d63o -----END PGP SIGNATURE----- Merge 6.1.70 into android14-6.1-lts Changes in 6.1.70 kasan: disable kasan_non_canonical_hook() for HW tags bpf: Fix prog_array_map_poke_run map poke update HID: i2c-hid: acpi: Unify ACPI ID tables format HID: i2c-hid: Add IDEA5002 to i2c_hid_acpi_blacklist[] drm/amd/display: fix hw rotated modes when PSR-SU is enabled ARM: dts: dra7: Fix DRA7 L3 NoC node register size ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init reset: Fix crash when freeing non-existent optional resets s390/vx: fix save/restore of fpu kernel context wifi: iwlwifi: pcie: add another missing bh-disable for rxq->lock wifi: mac80211: check if the existing link config remains unchanged wifi: mac80211: mesh: check element parsing succeeded wifi: mac80211: mesh_plink: fix matches_local logic Revert "net/mlx5e: fix double free of encap_header in update funcs" Revert "net/mlx5e: fix double free of encap_header" net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list() net/mlx5: Introduce and use opcode getter in command interface net/mlx5: Prevent high-rate FW commands from populating all slots net/mlx5: Re-organize mlx5_cmd struct net/mlx5e: Fix a race in command alloc flow net/mlx5e: fix a potential double-free in fs_udp_create_groups net/mlx5: Fix fw tracer first block check net/mlx5e: Correct snprintf truncation handling for fw_version buffer net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors net: mscc: ocelot: fix eMAC TX RMON stats for bucket 256-511 and above octeontx2-pf: Fix graceful exit during PFC configuration failure net: Return error from sk_stream_wait_connect() if sk_wait_event() fails net: sched: ife: fix potential use-after-free ethernet: atheros: fix a memleak in atl1e_setup_ring_resources net/rose: fix races in rose_kill_by_device() Bluetooth: Fix deadlock in vhci_send_frame Bluetooth: hci_event: shut up a false-positive warning net: mana: select PAGE_POOL net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() afs: Fix the dynamic root's d_delete to always delete unused dentries afs: Fix dynamic root lookup DNS check net: check dev->gso_max_size in gso_features_check() keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry afs: Fix overwriting of result of DNS query afs: Fix use-after-free due to get/remove race in volume tree ASoC: hdmi-codec: fix missing report for jack initial status ASoC: fsl_sai: Fix channel swap issue on i.MX8MP i2c: aspeed: Handle the coalesced stop conditions with the start conditions. x86/xen: add CPU dependencies for 32-bit build pinctrl: at91-pio4: use dedicated lock class for IRQ gpiolib: cdev: add gpio_device locking wrapper around gpio_ioctl() nvme-pci: fix sleeping function called from interrupt context drm/i915/mtl: limit second scaler vertical scaling in ver >= 14 drm/i915: Relocate intel_atomic_setup_scalers() drm/i915: Fix intel_atomic_setup_scalers() plane_state handling drm/i915/dpt: Only do the POT stride remap when using DPT drm/i915/mtl: Add MTL for remapping CCS FBs drm/i915: Fix ADL+ tiled plane stride when the POT stride is smaller than the original interconnect: Treat xlate() returning NULL node as an error iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw interconnect: qcom: sm8250: Enable sync_state Input: ipaq-micro-keys - add error handling for devm_kmemdup scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma() iio: triggered-buffer: prevent possible freeing of wrong buffer ALSA: usb-audio: Increase delay in MOTU M quirk usb-storage: Add quirk for incorrect WP on Kingston DT Ultimate 3.0 G3 wifi: cfg80211: Add my certificate wifi: cfg80211: fix certs build to not depend on file order USB: serial: ftdi_sio: update Actisense PIDs constant names USB: serial: option: add Quectel EG912Y module support USB: serial: option: add Foxconn T99W265 with new baseline USB: serial: option: add Quectel RM500Q R13 firmware support ALSA: hda/realtek: Add quirk for ASUS ROG GV302XA Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg Bluetooth: L2CAP: Send reject on command corrupted request Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE Bluetooth: Add more enc key size check net: usb: ax88179_178a: avoid failed operations when device is disconnected Input: soc_button_array - add mapping for airplane mode button net: 9p: avoid freeing uninit memory in p9pdu_vreadf net: rfkill: gpio: set GPIO direction net: ks8851: Fix TX stall caused by TX buffer overrun dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp smb: client: fix OOB in cifsd when receiving compounded resps smb: client: fix potential OOB in cifs_dump_detail() smb: client: fix OOB in SMB2_query_info_init() smb: client: fix OOB in smbCalcSize() drm/i915: Reject async flips with bigjoiner 9p: prevent read overrun in protocol dump tracepoint RISC-V: Fix do_notify_resume / do_work_pending prototype loop: do not enforce max_loop hard limit by (new) default dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client Revert "drm/amd/display: Do not set DRR on pipe commit" btrfs: zoned: no longer count fresh BG region as zone unusable ubifs: fix possible dereference after free ublk: move ublk_cancel_dev() out of ub->mutex selftests: mptcp: join: fix subflow_send_ack lookup Revert "scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity" scsi: core: Always send batch on reset or error handling command tracing / synthetic: Disable events after testing in synth_event_gen_test_init() dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata() pinctrl: starfive: jh7100: ignore disabled device tree nodes bus: ti-sysc: Flush posted write only after srst_udelay gpio: dwapb: mask/unmask IRQ when disable/enale it lib/vsprintf: Fix %pfwf when current node refcount == 0 thunderbolt: Fix memory leak in margining_port_remove() KVM: arm64: vgic: Simplify kvm_vgic_destroy() KVM: arm64: vgic: Add a non-locking primitive for kvm_vgic_vcpu_destroy() KVM: arm64: vgic: Force vcpu vgic teardown on vcpu destroy x86/alternatives: Sync core before enabling interrupts mm/damon/core: make damon_start() waits until kdamond_fn() starts fuse: share lookup state between submount and its parent wifi: cfg80211: fix CQM for non-range use wifi: nl80211: fix deadlock in nl80211_set_cqm_rssi (6.6.x) loop: deprecate autoloading callback loop_probe() Linux 6.1.70 Change-Id: I72bfbd39ae932d290b13d6fdde8e6684a84ec9e1 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-01-12 18:48:13 +00:00
Greg Kroah-Hartman	d3d46ac25c	Merge 6.1.69 into android14-6.1-lts Changes in 6.1.69 perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table r8152: add USB device driver for config selection r8152: add vendor/device ID pair for D-Link DUB-E250 r8152: add vendor/device ID pair for ASUS USB-C2500 powerpc/ftrace: Fix stack teardown in ftrace_no_trace ext4: fix warning in ext4_dio_write_end_io() ksmbd: fix memory leak in smb2_lock() afs: Fix refcount underflow from error handling race HID: lenovo: Restrict detection of patched firmware only to USB cptkbd net/mlx5e: Fix possible deadlock on mlx5e_tx_timeout_work net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX qca_debug: Prevent crash on TX ring changes qca_debug: Fix ethtool -G iface tx behavior qca_spi: Fix reset behavior bnxt_en: Clear resource reservation during resume bnxt_en: Save ring error counters across reset bnxt_en: Fix wrong return value check in bnxt_close_nic() bnxt_en: Fix HWTSTAMP_FILTER_ALL packet timestamp logic atm: solos-pci: Fix potential deadlock on &cli_queue_lock atm: solos-pci: Fix potential deadlock on &tx_queue_lock net: vlan: introduce skb_vlan_eth_hdr() net: fec: correct queue selection octeontx2-af: fix a use-after-free in rvu_nix_register_reporters octeontx2-pf: Fix promisc mcam entry action octeontx2-af: Update RSS algorithm index atm: Fix Use-After-Free in do_vcc_ioctl net/rose: Fix Use-After-Free in rose_ioctl iavf: Introduce new state machines for flow director iavf: Handle ntuple on/off based on new state machines for flow director qed: Fix a potential use-after-free in qed_cxt_tables_alloc net: Remove acked SYN flag from packet in the transmit queue correctly net: ena: Destroy correct number of xdp queues upon failure net: ena: Fix xdp drops handling due to multibuf packets net: ena: Fix XDP redirection error stmmac: dwmac-loongson: Make sure MDIO is initialized before use sign-file: Fix incorrect return values check vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() dpaa2-switch: fix size of the dma_unmap dpaa2-switch: do not ask for MDB, VLAN and FDB replay net: stmmac: Handle disabled MDIO busses from devicetree appletalk: Fix Use-After-Free in atalk_ioctl net: atlantic: fix double free in ring reinit logic cred: switch to using atomic_long_t fuse: dax: set fc->dax to NULL in fuse_dax_conn_free() ALSA: hda/hdmi: add force-connect quirk for NUC5CPYB ALSA: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants ALSA: hda/realtek: Apply mute LED quirk for HP15-db Revert "PCI: acpiphp: Reassign resources on bridge if necessary" PCI: loongson: Limit MRRS to 256 ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE drm/mediatek: Add spinlock for setting vblank event in atomic_begin x86/hyperv: Fix the detection of E820_TYPE_PRAM in a Gen2 VM usb: aqc111: check packet for fixup for true limit stmmac: dwmac-loongson: Add architecture dependency blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" blk-cgroup: bypass blkcg_deactivate_policy after destroying bcache: avoid oversize memory allocation by small stripe_size bcache: remove redundant assignment to variable cur_idx bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() bcache: avoid NULL checking to c->root in run_cache_set() nbd: fold nbd config initialization into nbd_alloc_config() nvme-auth: set explanation code for failure2 msgs nvme: catch errors from nvme_configure_metadata() selftests/bpf: fix bpf_loop_bench for new callback verification scheme LoongArch: Add dependency between vmlinuz.efi and vmlinux.efi LoongArch: Implement constant timer shutdown interface platform/x86: intel_telemetry: Fix kernel doc descriptions HID: glorious: fix Glorious Model I HID report HID: add ALWAYS_POLL quirk for Apple kb nbd: pass nbd_sock to nbd_read_reply() instead of index HID: hid-asus: reset the backlight brightness level on resume HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation net: usb: qmi_wwan: claim interface 4 for ZTE MF290 arm64: add dependency between vmlinuz.efi and Image HID: hid-asus: add const to read-only outgoing usb buffer perf: Fix perf_event_validate_size() lockdep splat btrfs: do not allow non subvolume root targets for snapshot soundwire: stream: fix NULL pointer dereference for multi_link ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify team: Fix use-after-free when an option instance allocation fails drm/amdgpu/sdma5.2: add begin/end_use ring callbacks dmaengine: stm32-dma: avoid bitfield overflow assertion mm/mglru: fix underprotected page cache mm/shmem: fix race in shmem_undo_range w/THP btrfs: free qgroup reserve when ORDERED_IOERR is set btrfs: don't clear qgroup reserved bit in release_folio drm/amdgpu: fix tear down order in amdgpu_vm_pt_free drm/amd/display: Disable PSR-SU on Parade 0803 TCON again drm/i915: Fix remapped stride with CCS on ADL+ smb: client: fix OOB in receive_encrypted_standard() smb: client: fix NULL deref in asn1_ber_decoder() smb: client: fix OOB in smb2_query_reparse_point() ring-buffer: Fix memory leak of free page tracing: Update snapshot buffer on resize if it is allocated ring-buffer: Do not update before stamp when switching sub-buffers ring-buffer: Have saved event hold the entire event ring-buffer: Fix writing to the buffer with max_data_size ring-buffer: Fix a race in rb_time_cmpxchg() for 32 bit archs ring-buffer: Do not try to put back write_stamp ring-buffer: Have rb_time_cmpxchg() set the msb counter too net: tls, update curr on splice as well r8152: avoid to change cfg for all devices r8152: remove rtl_vendor_mode function r8152: fix the autosuspend doesn't work Linux 6.1.69 Change-Id: I695d1d50ca8c00ff505505918bdc59ce9d29d479 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-01-11 22:37:52 +00:00
Greg Kroah-Hartman	bb47960a9d	Merge branch 'android14-6.1' into branch 'android14-6.1-lts' This merges all of the latest changes in 'android14-6.1' into 'android14-6.1-lts' to get it to pass TH again due to new symbols being added. Included in here are the following commits: * `a41a4ee370` ANDROID: Update the ABI symbol list * `0801d8a89d` ANDROID: mm: export dump_tasks symbol. * `7c91752f5d` FROMLIST: scsi: ufs: Remove the ufshcd_hba_exit() call from ufshcd_async_scan() * `28154afe74` FROMLIST: scsi: ufs: Simplify power management during async scan * `febcf1429f` ANDROID: gki_defconfig: Set CONFIG_IDLE_INJECT and CONFIG_CPU_IDLE_THERMAL into y * `bc4d82ee40` ANDROID: KMI workaround for CONFIG_NETFILTER_FAMILY_BRIDGE * `227b55a7a3` ANDROID: dma-buf: don't re-purpose kobject as work_struct * `c1b1201d39` BACKPORT: FROMLIST: dma-buf: Move sysfs work out of DMA-BUF export path * `928b3b5dde` UPSTREAM: netfilter: nf_tables: skip set commit for deleted/destroyed sets * `031f804149` ANDROID: KVM: arm64: Avoid BUG-ing from the host abort path * `c5dc4b4b3d` ANDROID: Update the ABI symbol list * `5070b3b594` UPSTREAM: ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet * `02aa72665c` UPSTREAM: nvmet-tcp: Fix a possible UAF in queue intialization setup * `d6554d1262` FROMGIT: usb: dwc3: gadget: Handle EP0 request dequeuing properly * `29544d4157` ANDROID: ABI: Update symbol list for imx * `02f444ba07` UPSTREAM: io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid * `ec46fe0ac7` UPSTREAM: bpf: Fix prog_array_map_poke_run map poke update * `98b0e4cf09` BACKPORT: xhci: track port suspend state correctly in unsuccessful resume cases * `ac90f08292` ANDROID: Update the ABI symbol list * `ef67750d99` ANDROID: sched: Export symbols for vendor modules * `934a40576e` UPSTREAM: usb: dwc3: core: add support for disabling High-speed park mode * `8a597e7a2d` ANDROID: KVM: arm64: Don't prepopulate MMIO regions for host stage-2 * `ed9b660cd1` BACKPORT: FROMGIT fork: use __mt_dup() to duplicate maple tree in dup_mmap() * `3743b40f65` FROMGIT: maple_tree: preserve the tree attributes when destroying maple tree * `1bec2dd52e` FROMGIT: maple_tree: update check_forking() and bench_forking() * `e57d333531` FROMGIT: maple_tree: skip other tests when BENCH is enabled * `c79ca61edc` FROMGIT: maple_tree: update the documentation of maple tree * `7befa7bbc9` FROMGIT: maple_tree: add test for mtree_dup() * `f73f881af4` FROMGIT: radix tree test suite: align kmem_cache_alloc_bulk() with kernel behavior. * `eb5048ea90` FROMGIT: maple_tree: introduce interfaces __mt_dup() and mtree_dup() * `dc9323545b` FROMGIT: maple_tree: introduce {mtree,mas}_lock_nested() * `4ddcdc519b` FROMGIT: maple_tree: add mt_free_one() and mt_attr() helpers * `c52d48818b` UPSTREAM: maple_tree: introduce __mas_set_range() * `066d57de87` ANDROID: GKI: Enable symbols for v4l2 in async and fwnode * `e74417834e` ANDROID: Update the ABI symbol list * `15a93de464` ANDROID: KVM: arm64: Fix hyp event alignment * `717d1f8f91` ANDROID: KVM: arm64: Fix host_smc print typo * `8fc25d7862` FROMGIT: f2fs: do not return EFSCORRUPTED, but try to run online repair * `99288e911a` ANDROID: KVM: arm64: Document module_change_host_prot_range * `4d99e41ce1` FROMGIT: PM / devfreq: Synchronize devfreq_monitor_[start/stop] * `6c8f710857` FROMGIT: arch/mm/fault: fix major fault accounting when retrying under per-VMA lock * `4a518d8633` UPSTREAM: mm: handle write faults to RO pages under the VMA lock * `c1da94fa44` UPSTREAM: mm: handle read faults under the VMA lock * `6541fffd92` UPSTREAM: mm: handle COW faults under the VMA lock * `c7fa581a79` UPSTREAM: mm: handle shared faults under the VMA lock * `95af8a80bb` BACKPORT: mm: call wp_page_copy() under the VMA lock * `b43b26b4cd` UPSTREAM: mm: make lock_folio_maybe_drop_mmap() VMA lock aware * `9c4bc457ab` UPSTREAM: mm/memory.c: fix mismerge * `7d50253c27` ANDROID: Export functions to be used with dma_map_ops in modules * `37e0a5b868` BACKPORT: FROMGIT: erofs: enable sub-page compressed block support * `f466d52164` FROMGIT: erofs: refine z_erofs_transform_plain() for sub-page block support * `a18efa4e4a` FROMGIT: erofs: fix ztailpacking for subpage compressed blocks * `0c6a18c75b` BACKPORT: FROMGIT: erofs: fix up compacted indexes for block size < 4096 * `d7bb85f1cb` FROMGIT: erofs: record `pclustersize` in bytes instead of pages * `9d259220ac` FROMGIT: erofs: support I/O submission for sub-page compressed blocks * `8a49ea9441` FROMGIT: erofs: fix lz4 inplace decompression * `bdc5d268ba` FROMGIT: erofs: fix memory leak on short-lived bounced pages * `0d329bbe5c` BACKPORT: erofs: tidy up z_erofs_do_read_page() * `dc94c3cc6b` UPSTREAM: erofs: move preparation logic into z_erofs_pcluster_begin() * `7751567a71` BACKPORT: erofs: avoid obsolete {collector,collection} terms * `d0dbf74792` BACKPORT: erofs: simplify z_erofs_read_fragment() * `4067dd9969` UPSTREAM: erofs: get rid of the remaining kmap_atomic() * `365ca16da2` UPSTREAM: erofs: simplify z_erofs_transform_plain() * `187d034575` BACKPORT: erofs: adapt managed inode operations into folios * `3d93182661` UPSTREAM: erofs: avoid on-stack pagepool directly passed by arguments * `5c1827383a` UPSTREAM: erofs: allocate extra bvec pages directly instead of retrying * `bed20ed1d3` UPSTREAM: erofs: clean up z_erofs_pcluster_readmore() * `5e861fa97e` UPSTREAM: erofs: remove the member readahead from struct z_erofs_decompress_frontend * `66595bb17c` UPSTREAM: erofs: fold in z_erofs_decompress() * `88a1939504` UPSTREAM: erofs: enable large folios for iomap mode * `2c085909e7` ANDROID: Update the ABI symbol list * `d16a15fde5` UPSTREAM: USB: gadget: core: adjust uevent timing on gadget unbind * `d3006fb944` ANDROID: ABI: Update oplus symbol list * `bc97d5019a` ANDROID: vendor_hooks: Add hooks for rt_mutex steal * `401a2769d9` UPSTREAM: dm verity: don't perform FEC for failed readahead IO * `30bca9e278` UPSTREAM: netfilter: nft_set_pipapo: skip inactive elements during set walk * `44702d8fa1` FROMLIST: mm: migrate high-order folios in swap cache correctly * `613d8368e3` ANDROID: fuse-bpf: Follow mounts in lookups Change-Id: I49d28ad030d7840490441ce6a7936b5e1047913e Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-01-11 08:06:52 +00:00
Jinghao Jia	53b42cb33f	x86/kprobes: fix incorrect return address calculation in kprobe_emulate_call_indirect commit f5d03da48d062966c94f0199d20be0b3a37a7982 upstream. kprobe_emulate_call_indirect currently uses int3_emulate_call to emulate indirect calls. However, int3_emulate_call always assumes the size of the call to be 5 bytes when calculating the return address. This is incorrect for register-based indirect calls in x86, which can be either 2 or 3 bytes depending on whether REX prefix is used. At kprobe runtime, the incorrect return address causes control flow to land onto the wrong place after return -- possibly not a valid instruction boundary. This can lead to a panic like the following: [ 7.308204][ C1] BUG: unable to handle page fault for address: 000000000002b4d8 [ 7.308883][ C1] #PF: supervisor read access in kernel mode [ 7.309168][ C1] #PF: error_code(0x0000) - not-present page [ 7.309461][ C1] PGD 0 P4D 0 [ 7.309652][ C1] Oops: 0000 [#1] SMP [ 7.309929][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.7.0-rc5-trace-for-next #6 [ 7.310397][ C1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.0-20220807_005459-localhost 04/01/2014 [ 7.311068][ C1] RIP: 0010:__common_interrupt+0x52/0xc0 [ 7.311349][ C1] Code: 01 00 4d 85 f6 74 39 49 81 fe 00 f0 ff ff 77 30 4c 89 f7 4d 8b 5e 68 41 ba 91 76 d8 42 45 03 53 fc 74 02 0f 0b cc ff d3 65 48 <8b> 05 30 c7 ff 7e 65 4c 89 3d 28 c7 ff 7e 5b 41 5c 41 5e 41 5f c3 [ 7.312512][ C1] RSP: 0018:ffffc900000e0fd0 EFLAGS: 00010046 [ 7.312899][ C1] RAX: 0000000000000001 RBX: 0000000000000023 RCX: 0000000000000001 [ 7.313334][ C1] RDX: 00000000000003cd RSI: 0000000000000001 RDI: ffff888100d302a4 [ 7.313702][ C1] RBP: 0000000000000001 R08: 0ef439818636191f R09: b1621ff338a3b482 [ 7.314146][ C1] R10: ffffffff81e5127b R11: ffffffff81059810 R12: 0000000000000023 [ 7.314509][ C1] R13: 0000000000000000 R14: ffff888100d30200 R15: 0000000000000000 [ 7.314951][ C1] FS: 0000000000000000(0000) GS:ffff88813bc80000(0000) knlGS:0000000000000000 [ 7.315396][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 7.315691][ C1] CR2: 000000000002b4d8 CR3: 0000000003028003 CR4: 0000000000370ef0 [ 7.316153][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 7.316508][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 7.316948][ C1] Call Trace: [ 7.317123][ C1] <IRQ> [ 7.317279][ C1] ? __die_body+0x64/0xb0 [ 7.317482][ C1] ? page_fault_oops+0x248/0x370 [ 7.317712][ C1] ? __wake_up+0x96/0xb0 [ 7.317964][ C1] ? exc_page_fault+0x62/0x130 [ 7.318211][ C1] ? asm_exc_page_fault+0x22/0x30 [ 7.318444][ C1] ? __cfi_native_send_call_func_single_ipi+0x10/0x10 [ 7.318860][ C1] ? default_idle+0xb/0x10 [ 7.319063][ C1] ? __common_interrupt+0x52/0xc0 [ 7.319330][ C1] common_interrupt+0x78/0x90 [ 7.319546][ C1] </IRQ> [ 7.319679][ C1] <TASK> [ 7.319854][ C1] asm_common_interrupt+0x22/0x40 [ 7.320082][ C1] RIP: 0010:default_idle+0xb/0x10 [ 7.320309][ C1] Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 66 90 0f 00 2d 09 b9 3b 00 fb f4 <fa> c3 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 e9 [ 7.321449][ C1] RSP: 0018:ffffc9000009bee8 EFLAGS: 00000256 [ 7.321808][ C1] RAX: ffff88813bca8b68 RBX: 0000000000000001 RCX: 000000000001ef0c [ 7.322227][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000001ef0c [ 7.322656][ C1] RBP: ffffc9000009bef8 R08: 8000000000000000 R09: 00000000000008c2 [ 7.323083][ C1] R10: 0000000000000000 R11: ffffffff81058e70 R12: 0000000000000000 [ 7.323530][ C1] R13: ffff8881002b30c0 R14: 0000000000000000 R15: 0000000000000000 [ 7.323948][ C1] ? __cfi_lapic_next_deadline+0x10/0x10 [ 7.324239][ C1] default_idle_call+0x31/0x50 [ 7.324464][ C1] do_idle+0xd3/0x240 [ 7.324690][ C1] cpu_startup_entry+0x25/0x30 [ 7.324983][ C1] start_secondary+0xb4/0xc0 [ 7.325217][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 7.325498][ C1] </TASK> [ 7.325641][ C1] Modules linked in: [ 7.325906][ C1] CR2: 000000000002b4d8 [ 7.326104][ C1] ---[ end trace 0000000000000000 ]--- [ 7.326354][ C1] RIP: 0010:__common_interrupt+0x52/0xc0 [ 7.326614][ C1] Code: 01 00 4d 85 f6 74 39 49 81 fe 00 f0 ff ff 77 30 4c 89 f7 4d 8b 5e 68 41 ba 91 76 d8 42 45 03 53 fc 74 02 0f 0b cc ff d3 65 48 <8b> 05 30 c7 ff 7e 65 4c 89 3d 28 c7 ff 7e 5b 41 5c 41 5e 41 5f c3 [ 7.327570][ C1] RSP: 0018:ffffc900000e0fd0 EFLAGS: 00010046 [ 7.327910][ C1] RAX: 0000000000000001 RBX: 0000000000000023 RCX: 0000000000000001 [ 7.328273][ C1] RDX: 00000000000003cd RSI: 0000000000000001 RDI: ffff888100d302a4 [ 7.328632][ C1] RBP: 0000000000000001 R08: 0ef439818636191f R09: b1621ff338a3b482 [ 7.329223][ C1] R10: ffffffff81e5127b R11: ffffffff81059810 R12: 0000000000000023 [ 7.329780][ C1] R13: 0000000000000000 R14: ffff888100d30200 R15: 0000000000000000 [ 7.330193][ C1] FS: 0000000000000000(0000) GS:ffff88813bc80000(0000) knlGS:0000000000000000 [ 7.330632][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 7.331050][ C1] CR2: 000000000002b4d8 CR3: 0000000003028003 CR4: 0000000000370ef0 [ 7.331454][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 7.331854][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 7.332236][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 7.332730][ C1] Kernel Offset: disabled [ 7.333044][ C1] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- The relevant assembly code is (from objdump, faulting address highlighted): ffffffff8102ed9d: 41 ff d3 call *%r11 ffffffff8102eda0: 65 48 <8b> 05 30 c7 ff mov %gs:0x7effc730(%rip),%rax The emulation incorrectly sets the return address to be ffffffff8102ed9d + 0x5 = ffffffff8102eda2, which is the 8b byte in the middle of the next mov. This in turn causes incorrect subsequent instruction decoding and eventually triggers the page fault above. Instead of invoking int3_emulate_call, perform push and jmp emulation directly in kprobe_emulate_call_indirect. At this point we can obtain the instruction size from p->ainsn.size so that we can calculate the correct return address. Link: https://lore.kernel.org/all/20240102233345.385475-1-jinghao7@illinois.edu/ Fixes: `6256e668b7` ("x86/kprobes: Use int3 instead of debug trap for single-step") Cc: stable@vger.kernel.org Signed-off-by: Jinghao Jia <jinghao7@illinois.edu> Signed-off-by: Masami Hiramatsu (Google) <mhiramat@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2024-01-10 17:10:35 +01:00
Yonghong Song	2c795ce090	bpf: Support new 32bit offset jmp instruction [ Upstream commit 4cd58e9af8b9d9fff6b7145e742abbfcda0af4af ] Add interpreter/jit/verifier support for 32bit offset jmp instruction. If a conditional jmp instruction needs more than 16bit offset, it can be simulated with a conditional jmp + a 32bit jmp insn. Acked-by: Eduard Zingerman <eddyz87@gmail.com> Signed-off-by: Yonghong Song <yonghong.song@linux.dev> Link: https://lore.kernel.org/r/20230728011231.3716103-1-yonghong.song@linux.dev Signed-off-by: Alexei Starovoitov <ast@kernel.org> Stable-dep-of: 3feb263bb516 ("bpf: handle ldimm64 properly in check_cfg()") Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-10 17:10:29 +01:00
Menglong Dong	89b51e70e5	bpf, x86: save/restore regs with BPF_DW size [ Upstream commit 02a6dfa8ff43efb1c989f87a4d862aedf436088a ] As we already reserve 8 byte in the stack for each reg, it is ok to store/restore the regs in BPF_DW size. This will make the code in save_regs()/restore_regs() simpler. Signed-off-by: Menglong Dong <imagedong@tencent.com> Acked-by: Yonghong Song <yhs@fb.com> Link: https://lore.kernel.org/r/20230713040738.1789742-2-imagedong@tencent.com Signed-off-by: Alexei Starovoitov <ast@kernel.org> Stable-dep-of: 2b5dcb31a19a ("bpf, x64: Fix tailcall infinite loop") Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-10 17:10:27 +01:00
Pu Lehui	4ee461c5dc	bpf, x86: Simplify the parsing logic of structure parameters [ Upstream commit 7f7880495770329d095d402c2865bfa7089192f8 ] Extra_nregs of structure parameters and nr_args can be added directly at the beginning, and using a flip flag to identifiy structure parameters. Meantime, renaming some variables to make them more sense. Signed-off-by: Pu Lehui <pulehui@huawei.com> Acked-by: Yonghong Song <yhs@fb.com> Link: https://lore.kernel.org/r/20230105035026.3091988-1-pulehui@huaweicloud.com Signed-off-by: Martin KaFai Lau <martin.lau@kernel.org> Stable-dep-of: 2b5dcb31a19a ("bpf, x64: Fix tailcall infinite loop") Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-10 17:10:27 +01:00
Leon Hwang	605c8d8f99	bpf, x64: Fix tailcall infinite loop [ Upstream commit 2b5dcb31a19a2e0acd869b12c9db9b2d696ef544 ] From commit `ebf7d1f508` ("bpf, x64: rework pro/epilogue and tailcall handling in JIT"), the tailcall on x64 works better than before. From commit `e411901c0b` ("bpf: allow for tailcalls in BPF subprograms for x64 JIT"), tailcall is able to run in BPF subprograms on x64. From commit `5b92a28aae` ("bpf: Support attaching tracing BPF program to other BPF programs"), BPF program is able to trace other BPF programs. How about combining them all together? 1. FENTRY/FEXIT on a BPF subprogram. 2. A tailcall runs in the BPF subprogram. 3. The tailcall calls the subprogram's caller. As a result, a tailcall infinite loop comes up. And the loop would halt the machine. As we know, in tail call context, the tail_call_cnt propagates by stack and rax register between BPF subprograms. So do in trampolines. Fixes: `ebf7d1f508` ("bpf, x64: rework pro/epilogue and tailcall handling in JIT") Fixes: `e411901c0b` ("bpf: allow for tailcalls in BPF subprograms for x64 JIT") Reviewed-by: Maciej Fijalkowski <maciej.fijalkowski@intel.com> Signed-off-by: Leon Hwang <hffilwlqm@gmail.com> Link: https://lore.kernel.org/r/20230912150442.2009-3-hffilwlqm@gmail.com Signed-off-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-10 17:10:26 +01:00
Paolo Bonzini	493d556278	KVM: x86/pmu: fix masking logic for MSR_CORE_PERF_GLOBAL_CTRL commit 971079464001c6856186ca137778e534d983174a upstream. When commit `c59a1f106f` ("KVM: x86/pmu: Add IA32_PEBS_ENABLE MSR emulation for extended PEBS") switched the initialization of cpuc->guest_switch_msrs to use compound literals, it screwed up the boolean logic: + u64 pebs_mask = cpuc->pebs_enabled & x86_pmu.pebs_capable; ... - arr[0].guest = intel_ctrl & ~cpuc->intel_ctrl_host_mask; - arr[0].guest &= ~(cpuc->pebs_enabled & x86_pmu.pebs_capable); + .guest = intel_ctrl & (~cpuc->intel_ctrl_host_mask \| ~pebs_mask), Before the patch, the value of arr[0].guest would have been intel_ctrl & ~cpuc->intel_ctrl_host_mask & ~pebs_mask. The intent is to always treat PEBS events as host-only because, while the guest runs, there is no way to tell the processor about the virtual address where to put PEBS records intended for the host. Unfortunately, the new expression can be expanded to (intel_ctrl & ~cpuc->intel_ctrl_host_mask) \| (intel_ctrl & ~pebs_mask) which makes no sense; it includes any bit that isn't both marked as exclude_guest and using PEBS. So, reinstate the old logic. Another way to write it could be "intel_ctrl & ~(cpuc->intel_ctrl_host_mask \| pebs_mask)", presumably the intention of the author of the faulty. However, I personally find the repeated application of A AND NOT B to be a bit more readable. This shows up as guest failures when running concurrent long-running perf workloads on the host, and was reported to happen with rcutorture. All guests on a given host would die simultaneously with something like an instruction fault or a segmentation violation. Reported-by: Paul E. McKenney <paulmck@kernel.org> Analyzed-by: Sean Christopherson <seanjc@google.com> Tested-by: Paul E. McKenney <paulmck@kernel.org> Cc: stable@vger.kernel.org Fixes: `c59a1f106f` ("KVM: x86/pmu: Add IA32_PEBS_ENABLE MSR emulation for extended PEBS") Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2024-01-10 17:10:21 +01:00
Aran Dalton	febcf1429f	ANDROID: gki_defconfig: Set CONFIG_IDLE_INJECT and CONFIG_CPU_IDLE_THERMAL into y Under certain circumstances a SoC can reach a critical temperaturelimit and is unable to stabilize the temperature around a temperaturecontrol. The system may ask for a specific power budget butbecause of the OPP density, we can only choose an OPP with a powerbudget lower than the requested one and under-utilize the CPU, thuslosing performance. In other words, one OPP under-utilizes the CPUwith a power less than the requested power budget and the next OPPexceeds the power budget. The cpu idle cooling can solve this problem. Bug: 299411923 Signed-off-by: Aran Dalton <arda@allwinnertech.com> Change-Id: I1c17b340617e88be075097dc47f30ce94be2a4d7	2024-01-10 00:12:51 +00:00
Greg Kroah-Hartman	0177cfb2a2	Merge tag 'android14-6.1.68_r00' into branch 'android14-6.1' This merges the changes up to 6.1.68 LTS into the android14-6.1 branch. Included in here are the following commits: * `8968561242` ANDROID: fix crc error in put_cmsg caused in 6.1.68 * `c077094653` Revert "hrtimers: Push pending hrtimers away from outgoing CPU earlier" * `e0690152b8` Revert "drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group" * `c9b484c69d` Merge 6.1.68 into android14-6.1-lts \|\ \| * `ba6f5fb465` Linux 6.1.68 \| * `f38b4e99e2` drm/i915: Skip some timing checks on BXT/GLK DSI transcoders \| * `d9ef7b05cc` drm/i915/sdvo: stop caching has_hdmi_monitor in struct intel_sdvo \| * `cf70d62ace` drm/i915/lvds: Use REG_BIT() & co. \| * `e6d55cf493` drm/i915/display: Drop check for doublescan mode in modevalid \| * `9c322aaf28` riscv: Kconfig: Add select ARM_AMBA to SOC_STARFIVE \| * `189c2a8293` netfilter: nft_set_pipapo: skip inactive elements during set walk \| * `b4e440cf60` MIPS: Loongson64: Enable DMA noncoherent support \| * `d52a5178cb` MIPS: Loongson64: Handle more memory types passed from firmware \| * `8d18a01585` MIPS: Loongson64: Reserve vgabios memory on boot \| * `2b9b2d28a9` KVM: SVM: Update EFER software model on CR0 trap for SEV-ES \| * `6d6314c3db` KVM: s390/mm: Properly reset no-dat \| * `be297475ca` MIPS: kernel: Clear FPU states when setting up kernel threads \| * `358bd5f436` cifs: Fix flushing, invalidation and file size with FICLONE \| * `18b02e4343` cifs: Fix flushing, invalidation and file size with copy_file_range() \| * `69540c108d` USB: gadget: core: adjust uevent timing on gadget unbind \| * `2467f4f8cb` x86/CPU/AMD: Check vendor in the AMD microcode callback \| * `0553d52908` devcoredump: Send uevent once devcd is ready \| * `74799b43d8` serial: 8250_omap: Add earlycon support for the AM654 UART controller \| * `d59dafa9eb` serial: 8250: 8250_omap: Do not start RX DMA on THRI interrupt \| * `638a6cbace` serial: 8250: 8250_omap: Clear UART_HAS_RHR_IT_DIS bit \| * `f434703fb8` serial: sc16is7xx: address RX timeout interrupt errata \| * `a8027753ab` ARM: PL011: Fix DMA support \| * `c909ce57d0` usb: typec: class: fix typec_altmode_put_partner to put plugs \| * `b12ccef705` smb: client: fix potential NULL deref in parse_dfs_referrals() \| * `f48430635b` Revert "xhci: Loosen RPM as default policy to cover for AMD xHC 1.1" \| * `9ce109b748` cifs: Fix non-availability of dedup breaking generic/304 \| * `8e25331ea5` parport: Add support for Brainboxes IX/UC/PX parallel cards \| * `bee9affd37` serial: 8250_dw: Add ACPI ID for Granite Rapids-D UART \| * `16da1f84f5` usb: gadget: f_hid: fix report descriptor allocation \| * `c8bf22e0d0` drm/amdgpu: Update EEPROM I2C address for smu v13_0_0 \| * `8750977871` drm/amdgpu: Add I2C EEPROM support on smu v13_0_6 \| * `4ccb34d431` drm/amdgpu: simplify amdgpu_ras_eeprom.c \| * `af6b1f1156` drm/amdgpu: Return from switch early for EEPROM I2C address \| * `a3049c9a30` drm/amdgpu: Remove second moot switch to set EEPROM I2C address \| * `30289057ef` drm/amdgpu: Add support for RAS table at 0x40000 \| * `c67c553b4d` drm/amdgpu: Decouple RAS EEPROM addresses from chips \| * `ee9efcdc76` drm/amdgpu: Remove redundant I2C EEPROM address \| * `a945568638` drm/amdgpu: Add EEPROM I2C address support for ip discovery \| * `f549f837b9` drm/amdgpu: Update ras eeprom support for smu v13_0_0 and v13_0_10 \| * `458affed06` drm/amdgpu: correct the amdgpu runtime dereference usage count \| * `41c5dd545e` drm/amd/amdgpu: Fix warnings in amdgpu/amdgpu_display.c \| * `613eaee445` drm/amdgpu: fix memory overflow in the IB test \| * `1705927a10` gpiolib: sysfs: Fix error handling on failed export \| * `4b716fcacd` x86/sev: Fix kernel crash due to late update to read-only ghcb_version \| * `06dec254c5` perf: Fix perf_event_validate_size() \| * `b0c195a825` arm64: dts: mt8183: kukui: Fix underscores in node names \| * `8a3d746c7e` arm64: dts: mediatek: add missing space before { \| * `5656634ce0` parisc: Fix asm operand number out of range build error in bug table \| * `f9e9e156db` parisc: Reduce size of the bug_table on 64-bit kernel by half \| * `8479f5ca8b` tracing: Stop current tracer when resizing buffer \| * `df4aa7e84d` tracing: Set actual size after ring buffer resize \| * `07ad456e1c` ring-buffer: Force absolute timestamp on discard of event \| * `40421e0cf3` LoongArch: BPF: Don't sign extend function return value \| * `ebb09d58df` LoongArch: BPF: Don't sign extend memory load operand \| * `066dcd87b9` misc: mei: client.c: fix problem of return '-EOVERFLOW' in mei_cl_write \| * `d78789ba21` misc: mei: client.c: return negative error code in mei_cl_write \| * `672976c28e` hwtracing: hisi_ptt: Add dummy callback pmu::read() \| * `0b80e6af0d` coresight: etm4x: Remove bogous __exit annotation for some functions \| * `766b29f614` coresight: etm4x: Make etm4_remove_dev() return void \| * `920f84a6e8` binder: fix memory leaks of spam and pending work \| * `18847b6bba` arm64: dts: mediatek: mt8183-evb: Fix unit_address_vs_reg warning on ntc \| * `c428285eab` arm64: dts: mediatek: mt8183: Move thermal-zones to the root node \| * `bdd7508661` arm64: dts: mediatek: mt8183: Fix unit address for scp reserved memory \| * `66398d1856` arm64: dts: mediatek: mt8195: Fix PM suspend/resume with venc clocks \| * `e1d4f02a68` arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names \| * `ff566a8d76` arm64: dts: mediatek: cherry: Fix interrupt cells for MT6360 on I2C7 \| * `6d50aa9656` arm64: dts: mediatek: mt8183-kukui-jacuzzi: fix dsi unnecessary cells properties \| * `c2adea3191` arm64: dts: mediatek: mt7622: fix memory node warning check \| * `515d971cd2` md/raid6: use valid sector values to determine if an I/O should wait on the reshape \| * `4132cc3a3a` powercap: DTPM: Fix missing cpufreq_cpu_put() calls \| * `686cc4de09` mm: fix oops when filemap_map_pmd() without prealloc_pte \| * `574a6db80f` hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write \| * `f5e6958919` platform/surface: aggregator: fix recv_buf() return value \| * `bcd50a3bd6` regmap: fix bogus error on regcache_sync success \| * `1c1c6d5c7e` r8169: fix rtl8125b PAUSE frames blasting when suspended \| * `6a71d77856` packet: Move reference count in packet_sock to atomic_long_t \| * `15c251f814` tracing: Fix a possible race when disabling buffered events \| * `b00b500916` tracing: Fix incomplete locking when disabling buffered events \| * `6e0d6c685b` tracing: Disable snapshot buffer when stopping instance tracers \| * `20fd56ca2e` tracing: Always update snapshot buffer size \| * `f33d663db0` checkstack: fix printed address \| * `4c00f01832` cgroup_freezer: cgroup_freezing: Check if not frozen \| * `3907e9cc85` nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() \| * `c344e99dd8` nilfs2: fix missing error check for sb_set_blocksize call \| * `d2558e726e` ring-buffer: Test last update in 32bit version of __rb_time_read() \| * `c4dcc915ea` ALSA: hda/realtek: Add Framework laptop 16 to quirks \| * `0675fe3b32` ALSA: hda/realtek: add new Framework laptop to quirks \| * `8b23707c8a` ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5 \| * `dc1141ae5c` ALSA: pcm: fix out-of-bounds in snd_pcm_state_names \| * `bb43c57c3d` ALSA: usb-audio: Add Pioneer DJM-450 mixer controls \| * `bfe5a5e2f9` io_uring: fix mutex_unlock with unreferenced ctx \| * `8bba38f7a0` nvme-pci: Add sleep quirk for Kingston drives \| * `f2f57f51b5` io_uring/af_unix: disable sending io_uring over sockets \| * `515c25be77` ASoC: amd: yc: Fix non-functional mic on ASUS E1504FA \| * `0fcfc90c86` kprobes: consistent rcu api usage for kretprobe holder \| * `a5325a055f` rethook: Use __rcu pointer for rethook::handler \| * `68bc7b2003` iommu: Avoid more races around device probe \| * `3c796895b4` md: don't leave 'MD_RECOVERY_FROZEN' in error path of md_set_readonly() \| * `5255ded034` md: introduce md_ro_state \| * `a38c1e766f` riscv: fix misaligned access handling of C.SWSP and C.SDSP \| * `8b41bdcc22` ARM: dts: imx28-xea: Pass the 'model' property \| * `282b5acd58` ARM: dts: imx7: Declare timers compatible with fsl,imx6dl-gpt \| * `12ac3b0ab8` ARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init \| * `4d8cc87d18` scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() \| * `bc5b79df6d` tracing: Fix a warning when allocating buffered events fails \| * `fc2d811d31` ARM: dts: imx6ul-pico: Describe the Ethernet PHY clock \| * `22143a0e5a` arm64: dts: imx8mp: imx8mq: Add parkmode-disable-ss-quirk on DWC3 \| * `8dd0e20b41` arm64: dts: imx8mq: drop usb3-resume-missing-cas from usb \| * `188de9839f` drm/bridge: tc358768: select CONFIG_VIDEOMODE_HELPERS \| * `1ff56298ab` RDMA/irdma: Avoid free the non-cqp_request scratch \| * `0a929e8375` RDMA/core: Fix umem iterator when PAGE_SIZE is greater then HCA pgsz \| * `ebcb4e19d3` ASoC: wm_adsp: fix memleak in wm_adsp_buffer_populate \| * `2358e53208` hwmon: (nzxt-kraken2) Fix error handling path in kraken2_probe() \| * `3baaba7908` ASoC: codecs: lpass-tx-macro: set active_decimator correct default value \| * `c11b7e26d2` hwmon: (acpi_power_meter) Fix 4.29 MW bug \| * `19269741c3` RDMA/irdma: Fix UAF in irdma_sc_ccq_get_cqe_info() \| * `439857e2fe` RDMA/irdma: Refactor error handling in create CQP \| * `59a022a869` RDMA/bnxt_re: Correct module description string \| * `7ed498095c` RDMA/rtrs-clt: Remove the warnings for req in_use check \| * `03095a6440` RDMA/rtrs-clt: Fix the max_send_wr setting \| * `233c32bcf0` RDMA/rtrs-srv: Destroy path files after making sure no IOs in-flight \| * `7be574c34d` RDMA/rtrs-srv: Free srv_mr iu only when always_invalidate is true \| * `9dd976c435` RDMA/rtrs-srv: Check return values while processing info request \| * `3910ccbf25` RDMA/rtrs-clt: Start hb after path_up \| * `1e46485045` RDMA/rtrs-srv: Do not unconditionally enable irq \| * `4a8774a633` ASoC: fsl_sai: Fix no frame sync clock issue on i.MX8MP \| * `3166c76d1d` arm64: dts: rockchip: Expand reg size of vdec node for RK3399 \| * `aa9ae3dffc` arm64: dts: rockchip: Expand reg size of vdec node for RK3328 \| * `945bfe4e0b` RDMA/irdma: Add wait for suspend on SQD \| * `0b0afd4e14` RDMA/irdma: Do not modify to SQD on error \| * `9d005ea01e` RDMA/hns: Fix unnecessary err return when using invalid congest control algorithm \| * `1c9561b438` tee: optee: Fix supplicant based device enumeration \| * `5fd29433b2` mm/damon/sysfs: eliminate potential uninitialized variable warning \| * `b5ca945612` drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group \| * `07c8229c02` psample: Require 'CAP_NET_ADMIN' when joining "packets" group \| * `af39b80173` bpf: sockmap, updating the sg structure should also update curr \| * `008b807fe4` tcp: do not accept ACK of bytes we never sent \| * `7a63521ed0` netfilter: xt_owner: Fix for unsafe access of sk->sk_socket \| * `3176160c22` netfilter: nf_tables: validate family when identifying table via handle \| * `96f8654b70` netfilter: nf_tables: bail out on mismatching dynset and set expressions \| * `c9704c2619` netfilter: nf_tables: fix 'exist' matching on bigendian arches \| * `0bfbfd9423` netfilter: nft_exthdr: add boolean DCCP option matching \| * `9225a4566b` dt-bindings: interrupt-controller: Allow #power-domain-cells \| * `6b9e78d6c6` octeontx2-af: Update Tx link register range \| * `9be8f66ea8` octeontx2-af: Add missing mcs flr handler call \| * `d54470adfc` octeontx2-af: Fix mcs stats register address \| * `90773de073` octeontx2-af: Fix mcs sa cam entries size \| * `0c8baa37bf` octeontx2-af: Adjust Tx credits when MCS external bypass is disabled \| * `d2689aea4f` net: hns: fix fake link up on xge port \| * `217cc7f6a6` net: hns: fix wrong head when modify the tx feature when sending packets \| * `87559196c3` net: atlantic: Fix NULL dereference of skb pointer in \| * `64c78c57e3` ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit() \| * `ce3c5acb59` ionic: Fix dim work handling in split interrupt mode \| * `a92719900f` ionic: fix snprintf format length warning \| * `c91685ac1b` tcp: fix mid stream window clamp. \| * `9fc81912fc` net: bnxt: fix a potential use-after-free in bnxt_init_tc \| * `0d33871b66` iavf: validate tx_coalesce_usecs even if rx_coalesce_usecs is zero \| * `75fd86e541` i40e: Fix unexpected MFS warning message \| * `ba6eb3a77a` octeontx2-af: fix a use-after-free in rvu_npa_register_reporters \| * `2c0cbb97b1` xsk: Skip polling event check for unbound socket \| * `ed7e211b67` net: stmmac: fix FPE events losing \| * `1a41ffc4dc` octeontx2-pf: consider both Rx and Tx packet stats for adaptive interrupt coalescing \| * `8d034da825` arcnet: restoring support for multiple Sohard Arcnet cards \| * `3c32379695` platform/mellanox: Check devm_hwmon_device_register_with_groups() return value \| * `29d82b366a` platform/mellanox: Add null pointer checks for devm_kasprintf() \| * `646f1e9c19` mlxbf-bootctl: correctly identify secure boot with development keys \| * `ef91309a57` r8152: Add RTL8152_INACCESSIBLE to r8153_aldps_en() \| * `d11ef4d3dd` r8152: Add RTL8152_INACCESSIBLE to r8153_pre_firmware_1() \| * `284cd311bb` r8152: Add RTL8152_INACCESSIBLE to r8156b_wait_loading_flash() \| * `0823990da7` r8152: Add RTL8152_INACCESSIBLE checks to more loops \| * `3759e73556` r8152: Rename RTL8152_UNPLUG to RTL8152_INACCESSIBLE \| * `ecb5068f55` hv_netvsc: rndis_filter needs to select NLS \| * `80de965ca5` octeontx2-af: Check return value of nix_get_nixlf before using nixlf \| * `f565044d1d` octeontx2-pf: Add missing mutex lock in otx2_get_pauseparam \| * `a3f5de10b5` ipv6: fix potential NULL deref in fib6_add() \| * `e2b202821d` platform/x86: wmi: Skip blocks with zero instances \| * `b536601d05` of: dynamic: Fix of_reconfig_get_state_change() return value documentation \| * `76b9ea6f54` platform/x86: asus-wmi: Move i8042 filter install to shared asus-wmi code \| * `3453531284` dt: dt-extract-compatibles: Don't follow symlinks when walking tree \| * `8a124b9e78` dt: dt-extract-compatibles: Handle cfile arguments in generator function \| * `cde700ceb0` x86/tdx: Allow 32-bit emulation by default \| * `e09d243a51` x86/entry: Do not allow external 0x80 interrupts \| * `d5f999317e` x86/entry: Convert INT 0x80 emulation to IDTENTRY \| * `b8ec27ae22` x86/coco: Disable 32-bit emulation by default on TDX and SEV \| * `0870f19b54` x86: Introduce ia32_enabled() \| * `9046665bef` drm/amdgpu: correct chunk_ptr to a pointer to chunk. \| * `18209382db` kconfig: fix memory leak from range properties \| * `bcc2abaa40` tg3: Increment tx_dropped in tg3_tso_bug() \| * `9bbc655e18` tg3: Move the [rt]x_dropped counters to tg3_napi \| * `62c6d82bac` zstd: Fix array-index-out-of-bounds UBSAN warning \| * `875ee3a09e` netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test \| * `6025052bbf` i2c: designware: Fix corrupted memory seen in the ISR \| * `75b5016ce3` hrtimers: Push pending hrtimers away from outgoing CPU earlier \| * `8ea2b4ba9b` vdpa/mlx5: preserve CVQ vringh index * \| `2af1386be0` Merge "Merge 6.1.67 into android14-6.1-lts" into android14-6.1-lts \|\ \ \| * \| `0292321d13` Merge 6.1.67 into android14-6.1-lts \| \|\\| \| \| * `e7cddbb41b` Linux 6.1.67 \| \| * `db46c77f3d` Revert "wifi: cfg80211: fix CQM for non-range use" \| * \| `c539451364` Revert "mmc: core: add helpers mmc_regulator_enable/disable_vqmmc" \| * \| `975d5f2ae9` Revert "mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled" * \| \| `44affaea1e` Revert "mmc: core: add helpers mmc_regulator_enable/disable_vqmmc" * \| \| `c49b4a744f` Revert "mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled" * \| \| `59f96234bf` Merge "Merge 6.1.66 into android14-6.1-lts" into android14-6.1-lts \|\\| \| \| * \| `6b1e1d37f1` Merge 6.1.66 into android14-6.1-lts \| \|\\| \| \| * `6c6a6c7e21` Linux 6.1.66 \| \| * `ea574927fc` iomap: update ki_pos a little later in iomap_dio_complete \| \| * `adf0ecebf0` x86/apic/msi: Fix misconfigured non-maskable MSI quirk \| \| * `b3b839fb63` x86/xen: fix percpu vcpu_info allocation \| \| * `00bc8b2cf4` xen: simplify evtchn_do_upcall() call maze \| \| * `9311a0ff38` xen: Allow platform PCI interrupt to be shared \| \| * `402b832346` r8169: fix deadlock on RTL8125 in jumbo mtu mode \| \| * `22ee0ddb2a` r8169: disable ASPM in case of tx timeout \| \| * `10ce630100` drm/amd/display: Fix MPCC 1DLUT programming \| \| * `8332cb6c63` drm/amd/display: Fix the delta clamping for shaper LUT \| \| * `442a4d4d01` drm/amd/display: clean code-style issues in dcn30_set_mpc_shaper_3dlut \| \| * `6cd7362721` drm/amd/display: Expand kernel doc for DC \| \| * `8b01195be4` mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled \| \| * `38d3216032` mmc: core: add helpers mmc_regulator_enable/disable_vqmmc \| \| * `0e0a951668` drm/amd/pm: fix a memleak in aldebaran_tables_init \| \| * `59862b8692` iommu/vt-d: Make context clearing consistent with context mapping \| \| * `ee2c224769` iommu/vt-d: Disable PCI ATS in legacy passthrough mode \| \| * `8f39d297a2` iommu/vt-d: Add device_block_translation() helper \| \| * `3787b3168b` iommu/vt-d: Allocate pasid table in device probe path \| \| * `681aeeda41` iommu/vt-d: Omit devTLB invalidation requests when TES=0 \| \| * `8aaed5b81d` cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily \| \| * `d3788f6e9d` cpufreq: imx6q: don't warn for disabling a non-existing frequency \| \| * `195514bda6` drm/amd/display: Guard against invalid RPTR/WPTR being set \| \| * `395a63ca1a` drm/amd/display: Restore rptr/wptr for DMCUB as workaround \| \| * `4ec4508db9` spi: Fix null dereference on suspend \| \| * `b57eebfb80` fbdev: stifb: Make the STI next font pointer a 32-bit signed offset \| \| * `5bc8d96fed` PCI: qcom-ep: Add dedicated callback for writing to DBI2 registers \| \| * `10c3d86fea` octeontx2-af: Initialize 'cntr_val' to fix uninitialized symbol error \| \| * `1c8f75ee92` PCI: Lengthen reset delay for VideoPropulsion Torrent QN16e card \| \| * `7545ddda9c` KVM: x86: Fix lapic timer interrupt lost after loading a snapshot. \| \| * `21feaf558f` net: ravb: Keep reverse order of operations in ravb_remove() \| \| * `8d04278ff4` net: ravb: Stop DMA in case of failures on ravb_open() \| \| * `52b751686c` net: ravb: Start TX queues after HW initialization succeeded \| \| * `e2db25d16c` net: ravb: Make write access to CXR35 first before accessing other EMAC registers \| \| * `f5c649ce79` net: ravb: Use pm_runtime_resume_and_get() \| \| * `149b2fe12a` net: ravb: Check return value of reset_control_deassert() \| \| * `7ed2e4c2d0` ravb: Fix races between ravb_tx_timeout_work() and net related ops \| \| * `8b1d088be5` r8169: prevent potential deadlock in rtl8169_close \| \| * `9c4ac2d98a` octeontx2-pf: Restore TC ingress police rules when interface is up \| \| * `aef2d5b3e5` octeontx2-af: Install TC filter rules in hardware based on priority \| \| * `662b887084` octeontx2-pf: Fix adding mbox work queue entry when num_vfs > 64 \| \| * `5d5bcfb1ca` net: stmmac: xgmac: Disable FPE MMC interrupts \| \| * `334e6378c2` octeontx2-af: Fix possible buffer overflow \| \| * `c3e974e9c4` selftests/net: mptcp: fix uninitialized variable warnings \| \| * `12dd4c1bf3` selftests/net: unix: fix unused variable compiler warning \| \| * `4e999af7cf` selftests/net: fix a char signedness issue \| \| * `249ceee95c` selftests/net: ipsec: fix constant out of range \| \| * `e01249a839` uapi: propagate __struct_group() attributes to the container union \| \| * `fd91b48f10` dpaa2-eth: increase the needed headroom to account for alignment \| \| * `94445d9583` ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet \| \| * `f89fef7710` usb: config: fix iteration issue in 'usb_get_bos_descriptor()' \| \| * `9aff7c51b4` USB: core: Change configuration warnings to notices \| \| * `c89b34eef3` USB: xhci-plat: fix legacy PHY double init \| \| * `307a6525c8` wifi: cfg80211: fix CQM for non-range use \| \| * `e8c1105c0c` serial: sc16is7xx: add missing support for rs485 devicetree properties \| \| * `55061c3230` serial: sc16is7xx: Put IOControl register into regmap_volatile \| \| * `a491c7be35` auxdisplay: hd44780: move cursor home after clear display command \| \| * `7f21167775` Input: xpad - add HyperX Clutch Gladiate Support \| \| * `7a105de275` btrfs: fix 64bit compat send ioctl arguments not initializing version member \| \| * `32912ee869` btrfs: make error messages more clear when getting a chunk map \| \| * `4fc9c61c02` btrfs: send: ensure send_fd is writable \| \| * `86742a963f` btrfs: fix off-by-one when checking chunk map includes logical address \| \| * `9fe447c485` btrfs: ref-verify: fix memory leaks in btrfs_ref_tree_mod() \| \| * `3f26d9b257` btrfs: add dmesg output for first mount and last unmount of a filesystem \| \| * `0ad7d59e79` parisc: Mark altinstructions read-only and 32-bit aligned \| \| * `cf2ae6494d` parisc: Ensure 32-bit alignment on parisc unwind section \| \| * `2acfff5730` parisc: Mark jump_table naturally aligned \| \| * `3793cd2ded` parisc: Drop the HP-UX ENOSYM and EREMOTERELEASE error codes \| \| * `79a1fdf4c2` parisc: Mark lock_aligned variables 16-byte aligned on SMP \| \| * `41d7852a0a` parisc: Use natural CPU alignment for bug_table \| \| * `c7c78a4aa6` parisc: Mark ex_table entries 32-bit aligned in uaccess.h \| \| * `645e4b693b` parisc: Mark ex_table entries 32-bit aligned in assembly.h \| \| * `c23b9eaca8` powerpc: Don't clobber f0/vs0 during fp\|altivec register save \| \| * `e6bc42fae6` KVM: PPC: Book3S HV: Fix KVM_RUN clobbering FP/VEC user registers \| \| * `59419ebcc0` iommu/vt-d: Add MTL to quirk list to skip TE disabling \| \| * `0b48970ce1` bcache: revert replacing IS_ERR_OR_NULL with IS_ERR \| \| * `fc98ea2699` dma-buf: fix check in dma_resv_add_fence \| \| * `4da1556996` cpufreq/amd-pstate: Fix the return value of amd_pstate_fast_switch() \| \| * `9d4c721c18` powercap: DTPM: Fix unneeded conversions to micro-Watts \| \| * `a62ca58bb3` nvme: check for valid nvme_identify_ns() before using it \| \| * `82b5e603ed` dm verity: don't perform FEC for failed readahead IO \| \| * `6f5a9fc94b` dm verity: initialize fec io before freeing it \| \| * `7cfc3884a8` drm/amd/display: fix ABM disablement \| \| * `859a3a9f1e` drm/amd/display: Update min Z8 residency time to 2100 for DCN314 \| \| * `6ef7f13c72` drm/amd/display: Use DRAM speed from validation for dummy p-state \| \| * `a67c187047` drm/amd/display: Remove min_dst_y_next_start check for Z8 \| \| * `33ed892f0c` drm/amd/display: Include udelay when waiting for INBOX0 ACK \| \| * `c5cf436c89` drm/amdgpu: Force order between a read and write to the same address \| \| * `c608842963` drm/amd: Enable PCIe PME from D3 \| \| * `cebccbe801` scsi: sd: Fix system start for ATA devices \| \| * `181fd67dc5` scsi: Change SCSI device boolean fields to single bit flags \| \| * `7d2faae81b` dm-verity: align struct dm_verity_fec_io properly \| \| * `da9f55393f` ALSA: hda/realtek: Add supported ALC257 for ChromeOS \| \| * `f4b1302134` ALSA: hda/realtek: Headset Mic VREF to 100% \| \| * `65654af4c8` ALSA: hda: Disable power-save on KONTRON SinglePC \| \| * `ba911edc6c` mmc: block: Be sure to wait while busy in CQE error recovery \| \| * `eab9ec6446` mmc: block: Do not lose cache flush during CQE error recovery \| \| * `e121f6d73d` mmc: block: Retry commands in CQE error recovery \| \| * `3a9a9c256f` mmc: cqhci: Fix task clearing in CQE error recovery \| \| * `def67fd8ef` mmc: cqhci: Warn of halt or task clear failure \| \| * `2ebc8b758c` mmc: cqhci: Increase recovery halt timeout \| \| * `d2fc10e262` mmc: sdhci-pci-gli: Disable LPM during initialization \| \| * `87ceaa8521` firewire: core: fix possible memory leak in create_units() \| \| * `db0b69e46d` pinctrl: avoid reload of p state in list iteration \| \| * `74820f7406` smb: client: report correct st_size for SMB and NFS symlinks \| \| * `60fed17ca5` cifs: Fix FALLOC_FL_INSERT_RANGE by setting i_size after EOF moved \| \| * `6406cce4b2` cifs: Fix FALLOC_FL_ZERO_RANGE by setting i_size if EOF moved \| * \| `157836a2ab` Merge 6.1.65 into android14-6.1-lts \| \|\\| * \| \| `1775bee186` Revert "HID: fix HID device resource race between HID core and debugging support" * \| \| `ee16988743` Merge 6.1.65 into android14-6.1-lts \|\ \ \ \| \| \|/ \| \|/\| \| * \| `c6114c8459` Linux 6.1.65 \| * \| `66ecd1cd8b` io_uring: fix off-by one bvec index \| * \| `812171018e` USB: dwc3: qcom: fix wakeup after probe deferral \| * \| `72ef87bb8e` USB: dwc3: qcom: fix software node leak on probe errors \| * \| `fc7b2fe267` usb: dwc3: set the dma max_seg_size \| * \| `92b9eca53d` usb: dwc3: Fix default mode initialization \| * \| `451c5a6172` USB: dwc2: write HCINT with INTMASK applied \| * \| `d9be7a1297` usb: typec: tcpm: Skip hard reset when in error recovery \| * \| `c15cb712da` USB: serial: option: don't claim interface 4 for ZTE MF290 \| * \| `5a657b34fe` USB: serial: option: fix FM101R-GL defines \| * \| `4fccb016ff` USB: serial: option: add Fibocom L7xx modules \| * \| `f70b0b6fd8` usb: cdnsp: Fix deadlock issue during using NCM gadget \| * \| `f9ba5dd0d9` bcache: fixup lock c->root error \| * \| `c736af32a8` bcache: fixup init dirty data errors \| * \| `c37aca3dd5` bcache: prevent potential division by zero error \| * \| `366f3648f1` bcache: check return value from btree_node_alloc_replacement() \| * \| `4241b51f3e` dm-delay: fix a race between delay_presuspend and delay_bio \| * \| `c4d3957510` hv_netvsc: Mark VF as slave before exposing it to user-mode \| * \| `5dd83db613` hv_netvsc: Fix race of register_netdevice_notifier and VF register \| * \| `e8ef65c174` hv_netvsc: fix race of netvsc and VF register_netdevice \| * \| `043c8e0306` USB: serial: option: add Luat Air72U series products \| \| `dc96fde8fc` s390/dasd: protect device queue against concurrent access \| * \| `b964a0a391` io_uring/fs: consider link->flags when getting path for LINKAT \| * \| `12f4971589` bcache: fixup multi-threaded bch_sectors_dirty_init() wake-up race \| * \| `fa9bacc1d5` md: fix bi_status reporting in md_end_clone_io \| * \| `415f644b1f` bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in btree_gc_coalesce() \| * \| `354d162ba5` swiotlb-xen: provide the "max_mapping_size" method \| * \| `05591c0d17` ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA \| * \| `1ed904f424` arm64: dts: imx8mn-var-som: add 20ms delay to ethernet regulator enable \| * \| `5d9ddbf4b5` NFSD: Fix checksum mismatches in the duplicate reply cache \| * \| `b597f3c85d` NFSD: Fix "start of NFS reply" pointer passed to nfsd_cache_update() \| * \| `d7eb37615b` ext4: make sure allocate pending entry not fail \| * \| `8384d8c5cc` ext4: fix slab-use-after-free in ext4_es_insert_extent() \| * \| `9164978bce` ext4: using nofail preallocation in ext4_es_insert_extent() \| * \| `614b383d01` ext4: using nofail preallocation in ext4_es_insert_delayed_block() \| * \| `51cef2a5c6` ext4: using nofail preallocation in ext4_es_remove_extent() \| * \| `f1c2369366` ext4: use pre-allocated es in __es_remove_extent() \| * \| `ce581f8631` ext4: use pre-allocated es in __es_insert_extent() \| * \| `594a5f00e5` ext4: factor out __es_alloc_extent() and __es_free_extent() \| * \| `9381ff6512` ext4: add a new helper to check if es must be kept \| * \| `3a14f4fd7b` media: qcom: camss: Fix genpd cleanup \| * \| `df5bb7b408` media: qcom: camss: Fix V4L2 async notifier error path \| * \| `fdfcdf9697` media: qcom: Initialise V4L2 async notifier later \| * \| `153a4396c3` media: camss: Convert to platform remove callback returning void \| * \| `4ae3c85e73` media: camss: Split power domain management \| * \| `8bdcaa7c03` MIPS: KVM: Fix a build warning about variable set but not used \| * \| `e9c3d6b09c` cifs: fix leak of iface for primary channel \| * \| `b24d42b52b` cifs: account for primary channel in the interface list \| * \| `548893404c` cifs: distribute channels across interfaces based on speed \| * \| `5607a415d4` cifs: print last update time for interface list \| * \| `f4dff37111` smb3: allow dumping session and tcon id to improve stats analysis and debugging \| * \| `fbc666a9ac` cifs: minor cleanup of some headers \| * \| `c2d336140a` lockdep: Fix block chain corruption \| * \| `e9611e8404` USB: dwc3: qcom: fix ACPI platform device leak \| * \| `eaa315288b` USB: dwc3: qcom: fix resource leaks on probe deferral \| * \| `0e485f12eb` nvmet: nul-terminate the NQNs passed in the connect command \| * \| `573fa2b708` i40e: Fix adding unsupported cloud filters \| * \| `f7f3e69ced` i40e: use ERR_PTR error print in i40e messages \| * \| `27f5dd22af` arm64: mm: Fix "rodata=on" when CONFIG_RODATA_FULL_DEFAULT_ENABLED=y \| * \| `558b8ee45f` mm,kfence: decouple kfence from page granularity mapping judgement \| * \| `48b3ee0134` afs: Fix file locking on R/O volumes to operate in local mode \| * \| `f9cf17836e` afs: Return ENOENT if no cell DNS record can be found \| * \| `8025fd0706` net: axienet: Fix check for partial TX checksum \| * \| `3481ff3811` amd-xgbe: propagate the correct speed and duplex status \| * \| `73d114dd57` amd-xgbe: handle the corner-case during tx completion \| * \| `4bcc07bb36` amd-xgbe: handle corner-case during sfp hotplug \| * \| `76b088b639` octeontx2-pf: Fix ntuple rule creation to direct packet to VF with higher Rx queue than its PF \| * \| `97703eb199` arm/xen: fix xen_vcpu_info allocation alignment \| * \| `94a0ae698b` net/smc: avoid data corruption caused by decline \| * \| `a573b334be` net: usb: ax88179_178a: fix failed operations during ax88179_reset \| * \| `e784313dd0` ipv4: Correct/silence an endian warning in __ip_do_redirect \| * \| `377c4c7e97` HID: fix HID device resource race between HID core and debugging support \| * \| `8e9a649965` drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full \| * \| `84a6e47545` drm/i915: do not clean GT table on error path \| * \| `84c9d30dbc` ata: pata_isapnp: Add missing error check for devm_ioport_map() \| * \| `cfbdb36727` octeontx2-pf: Fix memory leak during interface down \| * \| `4206f46d3f` wireguard: use DEV_STATS_INC() \| * \| `7dfa514744` drm/panel: simple: Fix Innolux G101ICE-L01 timings \| * \| `7f5eae8585` drm/panel: simple: Fix Innolux G101ICE-L01 bus flags \| * \| `39f11604e5` drm/panel: auo,b101uan08.3: Fine tune the panel power sequence \| * \| `84b232a9c8` drm/panel: boe-tv101wum-nl6: Fine tune the panel power sequence \| * \| `d2b3bc8c7f` afs: Make error on cell lookup failure consistent with OpenAFS \| * \| `790ea5bc40` afs: Fix afs_server_list to be cleaned up with RCU * \| \| `a01e106f08` Merge branch 'android14-6.1' into branch 'android14-6.1-lts' \| \|/ \|/\| * \| `fc9e81c1a1` ANDROID: Fix up merge issues in 6.1.64 in net/netfilter/nf_tables_api.c * \| `31e1ff253d` ANDROID: Fix up unneeded crc break in af_vsock.c * \| `8a7ce2ee18` Revert "mmc: Add quirk MMC_QUIRK_BROKEN_CACHE_FLUSH for Micron eMMC Q2J54A" * \| `dcea2ba909` Revert "ASoC: soc-card: Add storage for PCI SSID" * \| `88487f809a` Revert "tracing: Have trace_event_file have ref counters" * \| `fd71493204` Revert "workqueue: Provide one lock class key per work_on_cpu() callsite" * \| `f1bc13cb9d` Merge 6.1.64 into android14-6.1-lts \|\\| \| * `6ac30d748b` Linux 6.1.64 \| * `04ff8a5107` RISC-V: drop error print from riscv_hartid_to_cpuid() \| * `9e1e0887ea` cxl/port: Fix NULL pointer access in devm_cxl_add_port() \| * `c88cfbb18a` mmc: sdhci-pci-gli: GL9755: Mask the replay timer timeout of AER \| * `2132941b45` Input: xpad - add VID for Turtle Beach controllers \| * `2fa74d29fc` tracing: Have trace_event_file have ref counters \| * `6460508dce` powerpc/powernv: Fix fortify source warnings in opal-prd.c \| * `4c55be0855` drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox \| * `68d774eb10` drm/amd/display: Enable fast plane updates on DCN3.2 and above \| * `fb5c134ca5` drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer() \| * `51ffa1a379` drm/amdgpu: lower CS errors to debug severity \| * `c52aac5884` drm/amdgpu: fix error handling in amdgpu_bo_list_get() \| * `2ab6c1237b` drm/amdgpu: don't use ATRM for external devices \| * `965dce07a4` drm/amdgpu: don't use pci_is_thunderbolt_attached() \| * `8e54a91d3e` drm/amdgpu/smu13: drop compute workload workaround \| * `454d0cdd7c` drm/amd/pm: Fix error of MACO flag setting code \| * `07e94f204f` drm/i915: Fix potential spectre vulnerability \| * `9457636a49` drm/i915: Bump GLK CDCLK frequency when driving multiple pipes \| * `e973f40de1` drm/amd/pm: Handle non-terminated overdrive commands. \| * `dc4542861e` ext4: properly sync file size update after O_SYNC direct IO \| * `e1d0f68bc0` ext4: add missed brelse in update_backups \| * `1793dc461e` ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks \| * `80ddcf21e7` ext4: correct the start block of counting reserved clusters \| * `ec4ba3d62f` ext4: correct return value of ext4_convert_meta_bg \| * `32b9fb9a67` ext4: mark buffer new if it is unwritten to avoid stale data exposure \| * `f0cc1368fa` ext4: correct offset of gdb backup in non meta_bg group to update_backups \| * `af075d06b3` ext4: apply umask if ACL support is disabled \| * `e795a56654` Revert "net: r8169: Disable multicast filter for RTL8168H and RTL8107E" \| * `eb2f435be2` media: qcom: camss: Fix csid-gen2 for test pattern generator \| * `eeab07ddd0` media: qcom: camss: Fix invalid clock enable bit disjunction \| * `18a06f2eeb` media: qcom: camss: Fix missing vfe_lite clocks check \| * `ddc424aedb` media: qcom: camss: Fix VFE-480 vfe_disable_output() \| * `0f3e5f93fe` media: qcom: camss: Fix VFE-17x vfe_disable_output() \| * `04ef31a3e3` media: qcom: camss: Fix vfe_get() error jump \| * `3166c3af55` media: qcom: camss: Fix pm_domain_on sequence in probe \| * `6dcb2605c2` mmc: sdhci-pci-gli: GL9750: Mask the replay timer timeout of AER \| * `f7164cb037` r8169: add handling DASH when DASH is disabled \| * `862565f324` r8169: fix network lost after resume on DASH systems \| * `9e9e2107ae` mptcp: fix setsockopt(IP_TOS) subflow locking \| * `dba6f08cef` mptcp: add validity check for sending RM_ADDR \| * `70ff9b65a7` mptcp: deal with large GSO size \| * `16fcda24b1` mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors \| * `a7fd033550` mm: fix for negative counter: nr_file_hugepages \| * `2594bdaa16` mmc: sdhci-pci-gli: A workaround to allow GL9750 to enter ASPM L1.2 \| * `97fb6013f3` riscv: kprobes: allow writing to x0 \| * `645257ad8d` riscv: correct pt_level name via pgtable_l5/4_enabled \| * `fb1b16f041` riscv: mm: Update the comment of CONFIG_PAGE_OFFSET \| * `9f74b261e4` LoongArch: Mark __percpu functions as always inline \| * `1bb61fb790` nfsd: fix file memleak on client_opens_release \| * `a5d4be493a` dm-verity: don't use blocking calls from tasklets \| * `002d2473dd` drm/mediatek/dp: fix memory leak on ->get_edid callback error path \| * `5e9fcba176` drm/mediatek/dp: fix memory leak on ->get_edid callback audio detection \| * `e082326473` media: ccs: Correctly initialise try compose rectangle \| * `424fc46381` media: venus: hfi: add checks to handle capabilities from firmware \| * `9ebb3c14ec` media: venus: hfi: fix the check to handle session buffer requirement \| * `a3e0b55dea` media: venus: hfi_parser: Add check to keep the number of codecs within range \| * `997639c100` media: sharp: fix sharp encoding \| * `41c269083c` media: lirc: drop trailing space from scancode transmit \| * `526dd7540a` f2fs: avoid format-overflow warning \| * `6122b72ce5` f2fs: do not return EFSCORRUPTED, but try to run online repair \| * `e6fa9ac60f` i2c: i801: fix potential race in i801_block_transaction_byte_by_byte \| * `f5617a21c7` net: phylink: initialize carrier state at creation \| * `105d29fa8d` net: dsa: lan9303: consequently nested-lock physical MDIO \| * `eef592e71a` net: ethtool: Fix documentation of ethtool_sprintf() \| * `57e35d9229` s390/ap: fix AP bus crash on early config change callback invocation \| * `75d5c85cf4` i2c: designware: Disable TX_EMPTY irq while waiting for block length byte \| * `ba1a9eef3e` sbsa_gwdt: Calculate timeout with 64-bit math \| * `cfcb1e7c17` lsm: fix default return value for inode_getsecctx \| * `7a048a90ac` lsm: fix default return value for vm_enough_memory \| * `b3fd9db79e` Revert "i2c: pxa: move to generic GPIO recovery" \| * `677fc3780f` Revert ncsi: Propagate carrier gain/loss events to the NCSI controller \| * `31f6ff62df` cxl/region: Fix x1 root-decoder granularity calculations \| * `683b6a7324` tools/testing/cxl: Define a fixed volatile configuration to parse \| * `8cdc6b8b81` cxl/mem: Move devm_cxl_add_endpoint() from cxl_core to cxl_mem \| * `8fce427169` cxl: Unify debug messages when calling devm_cxl_add_port() \| * `e841a59ac1` i3c: master: svc: fix random hot join failure since timeout error \| * `a807a44189` i3c: master: svc: add NACK check after start byte sent \| * `90db4c1d5e` cxl/region: Do not try to cleanup after cxl_region_setup_targets() fails \| * `c415f113d9` cxl/region: Move region-position validation to a helper \| * `008b08ab07` cxl/region: Cleanup target list on attach error \| * `93d242f63e` cxl/region: Validate region mode vs decoder mode \| * `3b70d45c7e` drm/amd/display: enable dsc_clk even if dsc_pg disabled \| * `1d1cc275d1` Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE \| * `6c6a39080b` Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables \| * `ba9302fd93` bluetooth: Add device 13d3:3571 to device tables \| * `fc3423d55c` bluetooth: Add device 0bda:887b to device tables \| * `f1c7f81e97` Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559 \| * `1f026218f8` clk: visconti: Fix undefined behavior bug in struct visconti_pll_provider \| * `b2a2828720` clk: visconti: remove unused visconti_pll_provider::regmap \| * `e785584e0a` cpufreq: stats: Fix buffer overflow detection in trans_stats() \| * `c2d14682b3` pmdomain: imx: Make imx pgc power domain also set the fwnode \| * `8bd370cc3c` pmdomain: bcm: bcm2835-power: check if the ASB register is equal to enable \| * `68620ef460` ALSA: hda/realtek: Add quirks for HP Laptops \| * `4d50004416` ALSA: hda/realtek: Enable Mute LED on HP 255 G10 \| * `4645d3bcd5` ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC \| * `eaa4e4ba7a` ALSA: hda/realtek - Add Dell ALC295 to pin fall back table \| * `0fcc2cf28f` ALSA: hda/realtek: Enable Mute LED on HP 255 G8 \| * `fa7c9cc3cb` ALSA: info: Fix potential deadlock at disconnection \| * `a0d43e0f7c` btrfs: zoned: wait for data BG to be finished on direct IO allocation \| * `9ad4c7f065` xfs: recovery should not clear di_flushiter unconditionally \| * `209379924a` cifs: do not reset chan_max if multichannel is not supported at mount \| * `c9569bfd28` cifs: force interface update before a fresh session setup \| * `5bdf34ca32` cifs: reconnect helper should set reconnect for the right channel \| * `9eb44db68c` smb: client: fix potential deadlock when releasing mids \| * `558817597d` smb: client: fix use-after-free bug in cifs_debug_data_proc_show() \| * `49d0ff613f` smb3: fix caching of ctime on setxattr \| * `34828baf81` smb3: fix touch -h of symlink \| * `9d96ac07ae` smb3: fix creating FIFOs when mounting with "sfu" mount option \| * `5691e15695` fs: add ctime accessors infrastructure \| * `b50ca24c3e` xhci: Enable RPM on controllers that support low-power states \| * `72a90e7eb4` parisc/power: Fix power soft-off when running on qemu \| * `40b6914f42` parisc/pgtable: Do not drop upper 5 address bits of physical address \| * `1651b334f1` parisc: Prevent booting 64-bit kernels on PA1.x machines \| * `3ddb2fa5ec` i3c: master: svc: fix SDA keep low when polling IBIWON timeout happen \| * `1ea1fb2216` i3c: master: svc: fix check wrong status register in irq handler \| * `65d9f61324` i3c: master: svc: fix ibi may not return mandatory data byte \| * `e32e9cba56` i3c: master: svc: fix wrong data return when IBI happen during start frame \| * `3a8e03f133` i3c: master: svc: fix race condition in ibi work thread \| * `de6ca501ad` i3c: master: cdns: Fix reading status register \| * `3b93096d29` mtd: cfi_cmdset_0001: Byte swap OTP info \| * `aee642ae99` mm/memory_hotplug: use pfn math in place of direct struct page manipulation \| * `5a2768b9de` mm/cma: use nth_page() in place of direct struct page manipulation \| * `20412ca356` s390/cmma: fix detection of DAT pages \| * `7fc465d265` dmaengine: stm32-mdma: correct desc prep when channel running \| * `55d699e2d2` mcb: fix error handling for different scenarios when parsing \| * `afcde812dd` driver core: Release all resources during unbind before updating device links \| * `f7ab9dee22` tracing: Have the user copy of synthetic event address use correct context \| * `185f3617ad` i2c: core: Run atomic i2c xfer when !preemptible \| * `59cb785919` kernel/reboot: emergency_restart: Set correct system_state \| * `4f3135e2dd` quota: explicitly forbid quota files from being encrypted \| * `ed3cc4f3ca` jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev \| * `e166cc2bf5` ASoC: codecs: wsa-macro: fix uninitialized stack variables with name prefix \| * `479a120a04` hid: lenovo: Resend all settings on reset_resume for compact keyboards \| * `9ea5df7290` selftests/resctrl: Reduce failures due to outliers in MBA/MBM tests \| * `72f5a918b4` selftests/resctrl: Move _GNU_SOURCE define into Makefile \| * `e6526e403a` selftests/resctrl: Remove duplicate feature check from CMT test \| * `3f100cc63a` netfilter: nf_tables: split async and sync catchall in two functions \| * `13e2d49647` netfilter: nf_tables: remove catchall element in GC sync path \| * `143f450c6c` ima: detect changes to the backing overlay file \| * `2c63b9d7f7` ima: annotate iint mutex to avoid lockdep false positive warnings \| * `db98de0809` mfd: qcom-spmi-pmic: Fix revid implementation \| * `5231eb1190` mfd: qcom-spmi-pmic: Fix reference leaks in revid helper \| * `4d259683bc` arm64: dts: qcom: ipq6018: Fix tcsr_mutex register size \| * `c754a6f5c3` ACPI: FPDT: properly handle invalid FPDT subtables \| * `95e747c3c6` firmware: qcom_scm: use 64-bit calling convention only when client is 64-bit \| * `cd222fc61e` arm64: dts: qcom: ipq8074: Fix hwlock index for SMEM \| * `e866ef947a` btrfs: don't arbitrarily slow down delalloc if we're committing \| * `ddf42b7c8d` rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects \| * `d150294818` PM: hibernate: Clean up sync_read handling in snapshot_write_next() \| * `567c6f6495` PM: hibernate: Use __get_safe_page() rather than touching the list \| * `2c9222b7dc` arm64: dts: qcom: ipq6018: Fix hwlock index for SMEM \| * `8d837850d3` rcu/tree: Defer setting of jiffies during stall reset \| * `6aa3cab6be` svcrdma: Drop connection after an RDMA Read error \| * `4b0d6ddb64` wifi: wilc1000: use vmm_table as array in wilc struct \| * `efd8e6d19c` PCI: exynos: Don't discard .remove() callback \| * `75bf9a8b0e` PCI: kirin: Don't discard .remove() callback \| * `e02b9c6a83` PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common() \| * `51dcd20a4a` mmc: Add quirk MMC_QUIRK_BROKEN_CACHE_FLUSH for Micron eMMC Q2J54A \| * `07d425242e` mmc: sdhci_am654: fix start loop index for TAP value parsing \| * `4542aa7569` mmc: vub300: fix an error code \| * `8387c94d73` ksmbd: fix slab out of bounds write in smb_inherit_dacl() \| * `482aaa72f9` ksmbd: handle malformed smb1 message \| * `8e76941a16` clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from PLL clocks \| * `877080a349` clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks \| * `3291d3ecf3` clk: socfpga: Fix undefined behavior bug in struct stratix10_clock_data \| * `ea2c6e85b6` parisc/power: Add power soft-off when running on qemu \| * `783645be98` parisc/pdc: Add width field to struct pdc_model \| * `ef0224ee53` arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer \| * `938c4c7318` PCI: keystone: Don't discard .probe() callback \| * `b7d27cbfef` PCI: keystone: Don't discard .remove() callback \| * `fe0b2a20f7` KEYS: trusted: Rollback init_trusted() consistently \| * `454ad98f31` KEYS: trusted: tee: Refactor register SHM usage \| * `3ef9944681` genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware \| * `17381882fc` mmc: meson-gx: Remove setting of CMD_CFG_ERROR \| * `0cf7577b6b` wifi: ath11k: fix gtk offload status event locking \| * `e3199b3fac` wifi: ath11k: fix htt pktlog locking \| * `ca420ac4f9` wifi: ath11k: fix dfs radar event locking \| * `f0ea9e4726` wifi: ath11k: fix temperature event locking \| * `164fa9a0b1` regmap: Ensure range selector registers are updated after cache sync \| * `e10facbd25` ACPI: resource: Do IRQ override on TongFang GMxXGxx \| * `08a98c345f` mm/damon/sysfs: check error from damon_sysfs_update_target() \| * `b0fc14428c` mm/damon: implement a function for max nr_accesses safe calculation \| * `834a800c58` mm/damon/ops-common: avoid divide-by-zero during region hotness calculation \| * `2b38f0dbe8` mm/damon/lru_sort: avoid divide-by-zero in hot threshold calculation \| * `cf2641099c` watchdog: move softlockup_panic back to early_param \| * `f0f3328af9` mm/damon/sysfs: update monitoring target regions for online input commit \| * `9275f65d77` mm/damon/sysfs: remove requested targets when online-commit inputs \| * `4e0fbf3188` PCI/sysfs: Protect driver's D3cold preference from user space \| * `1a2c7a2f35` hvc/xen: fix event channel handling for secondary consoles \| * `b772e415e1` hvc/xen: fix error path in xen_hvc_init() to always register frontend driver \| * `74db59e63b` hvc/xen: fix console unplug \| * `e5b0e23080` tty: serial: meson: fix hard LOCKUP on crtscts mode \| * `5e3b2141c7` tty/sysrq: replace smp_processor_id() with get_cpu() \| * `5b2352c64c` proc: sysctl: prevent aliased sysctls from getting passed to init \| * `d91fd028c9` audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() \| * `38968c63e9` audit: don't take task_lock() in audit_exe_compare() code path \| * `43cea54109` KVM: x86: Clear bit12 of ICR after APIC-write VM-exit \| * `27976fa917` KVM: x86: Ignore MSR_AMD64_TW_CFG access \| * `7e218114a2` KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space \| * `41689ef19b` x86/cpu/hygon: Fix the CPU topology evaluation for real \| * `f0732c646a` crypto: x86/sha - load modules based on CPU features \| * `1fc94de1c1` scsi: qla2xxx: Fix system crash due to bad pointer access \| * `b16ea57d6c` scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers \| * `bb5e307366` scsi: mpt3sas: Fix loop logic \| * `dd56d43244` bpf: Fix precision tracking for BPF_ALU \| BPF_TO_BE \| BPF_END \| * `947635fa17` bpf: Fix check_stack_write_fixed_off() to correctly spill imm \| * `3bdbe399b8` randstruct: Fix gcc-plugin performance mode to stay in group \| * `bee4f891fe` powerpc/perf: Fix disabling BHRB and instruction sampling \| * `4cb064f617` perf intel-pt: Fix async branch flags \| * `a1d8f675ea` media: venus: hfi: add checks to perform sanity on queue pointers \| * `55db76caa7` i915/perf: Fix NULL deref bugs with drm_dbg() calls \| * `d1a04a5219` cifs: fix check of rc in function generate_smb3signingkey \| * `17cfba4aeb` cifs: spnego: add ';' in HOST_KEY_LEN \| * `4b91ba060f` tools/power/turbostat: Enable the C-state Pre-wake printing \| * `c5fcba7ff9` tools/power/turbostat: Fix a knl bug \| * `ca56cdfab3` macvlan: Don't propagate promisc change to lower dev in passthru \| * `f9b592a9e6` net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors \| * `0ab53cd69f` net/mlx5e: Check return value of snprintf writing to fw_version buffer \| * `7f2feab701` net/mlx5e: Reduce the size of icosq_str \| * `e2d93cfd1b` net/mlx5e: Fix pedit endianness \| * `991ba64898` net/mlx5e: fix double free of encap_header in update funcs \| * `e8ae37f863` net/mlx5e: fix double free of encap_header \| * `7414a28de1` net: stmmac: avoid rx queue overrun \| * `49fb680403` net: stmmac: fix rx budget limit check \| * `18a169810c` netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() \| * `6a15d97104` netfilter: nf_conntrack_bridge: initialize err to 0 \| * `d179189eec` af_unix: fix use-after-free in unix_stream_read_actor() \| * `14b11892a6` net: ethernet: cortina: Fix MTU max setting \| * `1a1efaed5f` net: ethernet: cortina: Handle large frames \| * `4794b6b16a` net: ethernet: cortina: Fix max RX frame define \| * `19554aa901` bonding: stop the device in bond_setup_by_slave() \| * `f84846731b` ptp: annotate data-race around q->head and q->tail \| * `ceae93d76a` xen/events: fix delayed eoi list handling \| * `ab3e13b35c` ppp: limit MRU to 64K \| * `00768b3e90` net: mvneta: fix calls to page_pool_get_stats \| * `1e83edbc42` tipc: Fix kernel-infoleak due to uninitialized TLV value \| * `a28ec8322d` net: hns3: fix VF wrong speed and duplex issue \| * `55d82e092c` net: hns3: fix VF reset fail issue \| * `f47c6fba72` net: hns3: fix variable may not initialized problem in hns3_init_mac_addr() \| * `07f5b8c471` net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs \| * `83a177b942` net: hns3: fix incorrect capability bit display for copper port \| * `5dc440293d` net: hns3: add barrier in vf mailbox reply process \| * `61c5ba5042` net: hns3: fix add VLAN fail issue \| * `76bd42849c` tty: Fix uninit-value access in ppp_sync_receive() \| * `732a67ca43` ipvlan: add ipvlan_route_v6_outbound() helper \| * `12af02d24a` net: set SOCK_RCU_FREE before inserting socket into hashtable \| * `c0f8b8fb7d` vhost-vdpa: fix use after free in vhost_vdpa_probe() \| * `58278cc71d` gfs2: Silence "suspicious RCU usage in gfs2_permission" warning \| * `7749fd2dbe` SUNRPC: Fix RPC client cleaned up the freed pipefs dentries \| * `af0095a559` NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO \| * `19d7dbf71e` SUNRPC: Add an IS_ERR() check back to where it was \| * `c65b915641` NFSv4.1: fix handling NFS4ERR_DELAY when testing for session trunking \| * `5ee813da0c` mtd: rawnand: meson: check return value of devm_kasprintf() \| * `b2a9ba69df` mtd: rawnand: intel: check return value of devm_kasprintf() \| * `8d02b6fb3c` SUNRPC: ECONNRESET might require a rebind \| * `11f6aadd1f` sched/core: Optimize in_task() and in_interrupt() a bit \| * `3a6ad749e9` wifi: iwlwifi: Use FW rate for non-data frames \| * `2fa178e2cd` mtd: rawnand: tegra: add missing check for platform_get_irq() \| * `1fb3a9c59e` pwm: Fix double shift bug \| * `6586b5f8e4` drm/amdgpu: fix software pci_unplug on some chips \| * `8a1552e908` ALSA: hda/realtek: Add quirk for ASUS UX7602ZM \| * `07ab6615a9` drm/qxl: prevent memory leak \| * `09297e3ffc` ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings \| * `aff8be2cad` i2c: dev: copy userspace array safely \| * `72d02adae3` kgdb: Flush console before entering kgdb on panic \| * `8a06894666` drm/amd/display: Avoid NULL dereference of timing generator \| * `b083aaf5db` media: imon: fix access to invalid resource for the second interface \| * `65335aef1a` media: ccs: Fix driver quirk struct documentation \| * `b8dcbbd0c4` media: cobalt: Use FIELD_GET() to extract Link Width \| * `e2ccedd4d1` gfs2: fix an oops in gfs2_permission \| * `53fc16c1ad` gfs2: ignore negated quota changes \| * `329a8d1d60` media: vivid: avoid integer overflow \| * `a647f27a74` media: gspca: cpia1: shift-out-of-bounds in set_flicker \| * `e64d23dc65` i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data. \| * `472bd47874` virtio-blk: fix implicit overflow on virtio_max_dma_size \| * `32b17bc21f` i2c: sun6i-p2wi: Prevent potential division by zero \| * `0b5e729d4e` i2c: fix memleak in i2c_new_client_device() \| * `8be39f6691` i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler \| * `07c11a5249` 9p: v9fs_listxattr: fix %s null argument warning \| * `3851d844d7` 9p/trans_fd: Annotate data-racy writes to file::f_flags \| * `c7b0ce54b1` usb: gadget: f_ncm: Always set current gadget in ncm_bind() \| * `ff95007583` f2fs: fix error handling of __get_node_page \| * `a82bd79cbf` soundwire: dmi-quirks: update HP Omen match \| * `7932afa9bb` usb: dwc3: core: configure TX/RX threshold for DWC3_IP \| * `7cebc86481` tty: vcc: Add check for kstrdup() in vcc_probe() \| * `d6957635de` thunderbolt: Apply USB 3.x bandwidth quirk only in software connection manager \| * `b80aaff5f7` iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() \| * `c92de3bf6c` mfd: intel-lpss: Add Intel Lunar Lake-M PCI IDs \| * `b469227b1d` exfat: support handle zero-size directory \| * `24e222a54e` HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W \| * `4ee3b3a0ff` crypto: hisilicon/qm - prevent soft lockup in receive loop \| * `a70cb0d59d` ASoC: Intel: soc-acpi-cht: Add Lenovo Yoga Tab 3 Pro YT3-X90 quirk \| * `cbf304de78` PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk \| * `52cd51ba57` misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller \| * `6f9557a5c9` PCI: Disable ATS for specific Intel IPU E2000 devices \| * `161767bb7c` PCI: Extract ATS disabling to a helper function \| * `6b46084582` PCI: Use FIELD_GET() to extract Link Width \| * `442fd24d7b` scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() \| * `dabc0ee84d` PCI: Do error check on own line to split long "if" conditions \| * `146badf18e` atm: iphase: Do PCI error checks on own line \| * `1a7c3d2e1d` PCI: mvebu: Use FIELD_PREP() with Link Width \| * `aac90c7197` PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields \| * `43b91df291` ALSA: hda: Fix possible null-ptr-deref when assigning a stream \| * `fa7abd3c5c` ARM: 9320/1: fix stack depot IRQ stack filter \| * `6e2076cad8` HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround \| * `8c68af2af6` jfs: fix array-index-out-of-bounds in diAlloc \| * `a50b796d36` jfs: fix array-index-out-of-bounds in dbFindLeaf \| * `5013f82698` fs/jfs: Add validity check for db_maxag and db_agpref \| * `0cb567e727` fs/jfs: Add check for negative db_l2nbperpage \| * `88984ec479` scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool \| * `33331b265a` scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs \| * `f1521fe0b4` RDMA/hfi1: Use FIELD_GET() to extract Link Width \| * `af493dde68` ASoC: SOF: ipc4: handle EXCEPTION_CAUGHT notification from firmware \| * `c55fc098fd` crypto: pcrypt - Fix hungtask for PADATA_RESET \| * `62c65e799f` ASoC: SOF: Pass PCI SSID to machine driver \| * `14107cbeb5` ASoC: soc-card: Add storage for PCI SSID \| * `0aaf807756` selftests/efivarfs: create-read: fix a resource leak \| * `c68535657f` arm64: dts: ls208xa: use a pseudo-bus to constrain usb dma size \| * `6c1b3d89a2` drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL \| * `2806f88037` drm/amdkfd: Fix shift out-of-bounds issue \| * `7017e83500` drm/panel: st7703: Pick different reset sequence \| * `33fb1a5553` drm/amdgpu/vkms: fix a possible null pointer dereference \| * `16fa59e273` drm/radeon: fix a possible null pointer dereference \| * `d0bc9ab0a1` drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference \| * `79813cd593` drm/panel: fix a possible null pointer dereference \| * `9b70fc7d70` drm/amdgpu: Fix potential null pointer derefernce \| * `d0725232da` drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga \| * `fc9ac0e8e0` drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 \| * `09b900fc2c` drm/msm/dp: skip validity check for DP CTS EDID checksum \| * `412ce89669` drm: vmwgfx_surface.c: copy user-array safely \| * `0f5f567451` drm_lease.c: copy user-array safely \| * `6995df256e` kernel: watch_queue: copy user-array safely \| * `8332523b13` kernel: kexec: copy user-array safely \| * `2fabc3289b` string.h: add array-wrappers for (v)memdup_user() \| * `24faa2740b` drm/amd/display: use full update for clip size increase of large plane source \| * `09d4f579d3` drm/amd: Update `update_pcie_parameters` functions to use uint8_t arguments \| * `50f35a907c` drm/amdkfd: Fix a race condition of vram buffer unref in svm code \| * `5b978a8ce4` drm/amdgpu: not to save bo in the case of RAS err_event_athub \| * `0c8eda600e` drm/komeda: drop all currently held locks if deadlock happens \| * `4048cf4615` drm/gma500: Fix call trace when psb_gem_mm_init() fails \| * `a57a54a8bc` platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e \| * `6edd5ea504` platform/chrome: kunit: initialize lock for fake ec_dev \| * `c90c7bf7b1` tsnep: Fix tsnep_request_irq() format-overflow warning \| * `70997012d8` ACPI: EC: Add quirk for HP 250 G7 Notebook PC \| * `87624b1f9b` Bluetooth: Fix double free in hci_conn_cleanup \| * `a556f2ef55` Bluetooth: btusb: Add date->evt_skb is NULL check \| * `0a40c609e2` bpf: Ensure proper register state printing for cond jumps \| * `8093dd759e` vsock: read from socket's error queue \| * `459970363e` wifi: ath10k: Don't touch the CE interrupt registers after power up \| * `1c6a6c926a` net: annotate data-races around sk->sk_dst_pending_confirm \| * `e7960d2a09` net: annotate data-races around sk->sk_tx_queue_mapping \| * `46537b4597` wifi: ath10k: fix clang-specific fortify warning \| * `de979982eb` wifi: ath9k: fix clang-specific fortify warnings \| * `aa42a7cb92` bpf: Detect IP == ksym.end as part of BPF program \| * `57e44ff9c2` atl1c: Work around the DMA RX overflow issue \| * `2be24c47ac` wifi: mac80211: don't return unset power in ieee80211_get_tx_power() \| * `9c2e4a81d3` wifi: mac80211_hwsim: fix clang-specific fortify warning \| * `d0fc4cb9d2` wifi: plfxlc: fix clang-specific fortify warning \| * `b5046b2532` x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size \| * `2652d199dd` workqueue: Provide one lock class key per work_on_cpu() callsite \| * `3410b70235` cpu/hotplug: Don't offline the last non-isolated CPU \| * `b7441453ff` smp,csd: Throw an error if a CSD lock is stuck for too long \| * `6680d55aba` clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware \| * `ff8370a0d8` clocksource/drivers/timer-imx-gpt: Fix potential memory leak \| * `9f4c391dc2` selftests/lkdtm: Disable CONFIG_UBSAN_TRAP in test config \| * `e9a27fdce5` srcu: Fix srcu_struct node grpmask overflow on 64-bit systems \| * `9ce4e87a8e` perf/core: Bail out early if the request AUX area is out of bound \| * `784d01f9bb` lib/generic-radix-tree.c: Don't overflow in peek() \| * `c56df79d68` locking/ww_mutex/test: Fix potential workqueue corruption * \| `0c2e40b9a3` Merge branch 'android14-6.1' into branch 'android14-6.1-lts' * \| `3e0f75c1a4` Merge branch 'android14-6.1' into branch 'android14-6.1-lts' * \| `0dfb0f3c97` Revert "inet: shrink struct flowi_common" * \| `937b554499` Revert "mfd: core: Un-constify mfd_cell.of_reg" * \| `c42877e34f` Revert "arm64/arm: xen: enlighten: Fix KPTI checks" * \| `55d4929d66` Revert "virtio/vsock: replace virtio_vsock_pkt with sk_buff" * \| `5418948a0a` Revert "vsock/virtio: remove socket from connected/bound list on shutdown" * \| `98f663d79a` Revert "virtio/vsock: don't use skbuff state to account credit" * \| `497503c6ec` Revert "virtio/vsock: remove redundant 'skb_pull()' call" * \| `5b9223a56f` Revert "virtio/vsock: don't drop skbuff on copy failure" * \| `ec573670da` Revert "virtio/vsock: fix leaks due to missing skb owner" * \| `e8ad0104af` Revert "virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()" * \| `db612631b7` Revert "virtio/vsock: fix header length on skb merging" * \| `7ccdce2dc4` Revert "vsock/loopback: use only sk_buff_head.lock to protect the packet queue" * \| `2b3ea8bdef` Merge 6.1.63 into android14-6.1-lts \|\\| \| * `69e434a1cb` Linux 6.1.63 \| * `830c11c9c0` virtio/vsock: fix header length on skb merging \| * `cd12535b97` virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt() \| * `a6650e78c4` virtio/vsock: fix leaks due to missing skb owner \| * `bb1c9a5907` vsock/loopback: use only sk_buff_head.lock to protect the packet queue \| * `1e5f00e9db` virtio/vsock: don't drop skbuff on copy failure \| * `883a3db221` virtio/vsock: remove redundant 'skb_pull()' call \| * `5852a2b573` virtio/vsock: don't use skbuff state to account credit \| * `25bc87768c` wifi: cfg80211: fix kernel-doc for wiphy_delayed_work_flush() \| * `fc3a19543e` btrfs: use u64 for buffer sizes in the tree search ioctls \| * `c606c43ab6` Revert "mmc: core: Capture correct oemid-bits for eMMC cards" \| * `acca43d813` x86/amd_nb: Use Family 19h Models 60h-7Fh Function 4 IDs \| * `129debbb41` io_uring/net: ensure socket is marked connected on connect retry \| * `b80b85f494` tracing/kprobes: Fix the order of argument descriptions \| * `28e7153418` fbdev: fsl-diu-fb: mark wr_reg_wa() static \| * `7bc7b82fb2` fbdev: imsttfb: fix a resource leak in probe \| * `9858458282` fbdev: imsttfb: Fix error path of imsttfb_probe() \| * `6d53668c43` spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies \| * `b4843bf39d` ASoC: dapm: fix clock get name \| * `f5350c6f78` ASoC: hdmi-codec: register hpd callback on component probe \| * `acc36089bc` ASoC: mediatek: mt8186_mt6366_rt1019_rt5682s: trivial: fix error messages \| * `3bbf06efb8` drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE \| * `3df98bd319` RISC-V: Don't fail in riscv_of_parent_hartid() for disabled HARTs \| * `587e6308d6` netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses \| * `8fa280d1a9` netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate eval call-backs \| * `d85670128f` netfilter: xt_recent: fix (increase) ipv6 literal buffer length \| * `7ee2070589` i2c: iproc: handle invalid slave state \| * `b5974b0c89` r8169: respect userspace disabling IFF_MULTICAST \| * `1fecefb092` vsock/virtio: remove socket from connected/bound list on shutdown \| * `baddcc2c71` virtio/vsock: replace virtio_vsock_pkt with sk_buff \| * `46c541fa66` blk-core: use pr_warn_ratelimited() in bio_check_ro() \| * `4e9b3ec84d` nbd: fix uaf in nbd_open \| * `b0310063d4` tg3: power down device only on SYSTEM_POWER_OFF \| * `2dbafb0081` nvme: fix error-handling for io_uring nvme-passthrough \| * `f4277cb562` net/smc: put sk reference if close work was canceled \| * `2d563aa752` net/smc: allow cdc msg send rather than drop it with NULL sndbuf_desc \| * `9d976cd3e3` net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT \| * `4a12fb7d1a` octeontx2-pf: Free pending and dropped SQEs \| * `a1e8e68204` octeontx2-pf: qos send queues management \| * `479d344a92` octeontx2-pf: Rename tot_tx_queues to non_qos_queues \| * `f9c2807e2a` selftests: pmtu.sh: fix result checking \| * `490dfbf651` net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs \| * `0b8ffe3cb0` Fix termination state for idr_for_each_entry_ul() \| * `7f4a2c2967` net: r8169: Disable multicast filter for RTL8168H and RTL8107E \| * `db68ac51fe` dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses. \| * `414d36c117` dccp: Call security_inet_conn_request() after setting IPv4 addresses. \| * `e129327d80` net: page_pool: add missing free_percpu when page_pool_init fail \| * `a95acc2099` octeontx2-pf: Fix holes in error code \| * `00376cc743` octeontx2-pf: Fix error codes \| * `612c22e928` inet: shrink struct flowi_common \| * `89d92e4fc5` bpf: Check map->usercnt after timer->timer is assigned \| * `4c731e98fe` tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING \| * `6086258bd5` hsr: Prevent use after free in prp_create_tagged_frame() \| * `f980e9a57d` llc: verify mac len before reading mac header \| * `8803da01fe` watchdog: ixp4xx: Make sure restart always works \| * `7082b1fb53` Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() \| * `f8225c3c65` pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume \| * `679d2ab67e` pwm: sti: Reduce number of allocations and drop usage of chip_data \| * `713629765f` regmap: prevent noinc writes from clobbering cache \| * `7ec7b7d3f2` media: cec: meson: always include meson sub-directory in Makefile \| * `103c66dcf5` media: dvb-usb-v2: af9035: fix missing unlock \| * `39c2ec94a8` media: cadence: csi2rx: Unregister v4l2 async notifier \| * `76d12296ee` media: cedrus: Fix clock/reset sequence \| * `a254ee1ddc` media: vidtv: mux: Add check and kfree for kstrdup \| * `5c26aae372` media: vidtv: psi: Add check for kstrdup \| * `e7c96f4605` media: s3c-camif: Avoid inappropriate kfree() \| * `1620531a3d` media: mtk-jpegenc: Fix bug in JPEG encode quality selection \| * `b75fb8a2ee` media: amphion: handle firmware debug message \| * `20568d06f6` media: bttv: fix use after free error due to btv->timeout timer \| * `825a7a6a3a` media: ov5640: Fix a memory leak when ov5640_probe fails \| * `ba305517a1` media: i2c: max9286: Fix some redundant of_node_put() calls \| * `a7a8c49dc6` media: ov5640: fix vblank unchange issue when work at dvp mode \| * `9b1c0aca7f` media: ov5640: Drop dead code using frame_interval \| * `6380621de3` media: verisilicon: Do not enable G2 postproc downscale if source is narrower than destination \| * `64f55cebb4` media: hantro: Check whether reset op is defined before use \| * `f258fd94ab` pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() \| * `7c9947693b` pcmcia: ds: fix refcount leak in pcmcia_device_add() \| * `fbdf451e76` pcmcia: cs: fix possible hung task and memory leak pccardd() \| * `f9e17bce0a` rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call \| * `b4dda701d0` virt: sevguest: Fix passing a stack buffer as a scatterlist target \| * `d889b7bc12` x86/sev: Change snp_guest_issue_request()'s fw_err argument \| * `a5b03f56d3` crypto: ccp - Name -1 return value as SEV_RET_NO_FW_CALL \| * `7c7371b41a` cxl/mem: Fix shutdown order \| * `174ae0a3b8` i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs \| * `b9793c9c03` 9p/net: fix possible memory leak in p9_check_errors() \| * `8b184ebff6` perf hist: Add missing puts to hist__account_cycles \| * `8e1f41a853` perf machine: Avoid out of bounds LBR memory read \| * `209f4a67d8` usb: host: xhci-plat: fix possible kernel oops while resuming \| * `071666451e` xhci: Loosen RPM as default policy to cover for AMD xHC 1.1 \| * `abdd1f47ef` powerpc/pseries: fix potential memory leak in init_cpu_associativity() \| * `257517c00b` powerpc/imc-pmu: Use the correct spinlock initializer. \| * `8409ee076d` powerpc/vas: Limit open window failure messages in log bufffer \| * `0f8dabe79a` powerpc/xive: Fix endian conversion size \| * `b4bc030af7` powerpc/40x: Remove stale PTE_ATOMIC_UPDATES macro \| * `a204f9f3cb` modpost: fix ishtp MODULE_DEVICE_TABLE built on big-endian host \| * `339148f786` modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host \| * `9d4f7441cd` powerpc: Only define __parse_fpscr() when required \| * `4a43be67d6` interconnect: qcom: sm8350: Set ACV enable_mask \| * `bfc019c713` interconnect: qcom: sm8350: Retire DEFINE_QBCM \| * `ccbd1281a2` interconnect: qcom: sm8150: Set ACV enable_mask \| * `d7e501045e` interconnect: qcom: sm8150: Retire DEFINE_QBCM \| * `386a4d6f83` interconnect: qcom: sm8150: Drop IP0 interconnects \| * `8979ed70da` interconnect: move ignore_list out of of_count_icc_providers() \| * `bf7039825f` interconnect: qcom: sm6350: Set ACV enable_mask \| * `d39e3249c0` interconnect: qcom: sm6350: Retire DEFINE_QBCM \| * `639ee7fbc0` interconnect: qcom: sdm845: Set ACV enable_mask \| * `8085888045` interconnect: qcom: sdm845: Retire DEFINE_QBCM \| * `e82d634fdb` interconnect: qcom: sc8280xp: Set ACV enable_mask \| * `50e4e1ad35` interconnect: qcom: sc8180x: Set ACV enable_mask \| * `673ced6e01` interconnect: qcom: sc7280: Set ACV enable_mask \| * `8fe916ff8a` interconnect: qcom: sc7180: Set ACV enable_mask \| * `3f884277f9` interconnect: qcom: sc7180: Retire DEFINE_QBCM \| * `695b3cfe1c` f2fs: fix to initialize map.m_pblk in f2fs_precache_extents() \| * `7b863b8bcd` dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc() \| * `2ed67a40dd` USB: usbip: fix stub_dev hub disconnect \| * `dae6fd9747` tools: iio: iio_generic_buffer ensure alignment \| * `06a1286345` misc: st_core: Do not call kfree_skb() under spin_lock_irqsave() \| * `fc968818d5` dmaengine: ti: edma: handle irq_of_parse_and_map() errors \| * `03984e24db` usb: chipidea: Simplify Tegra DMA alignment code \| * `c9095c743b` usb: chipidea: Fix DMA overwrite for Tegra \| * `6b21a22728` usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency \| * `0806a6afe1` dmaengine: idxd: Register dsa_bus_type before registering idxd sub-drivers \| * `1e03a26959` perf record: Fix BTF type checks in the off-cpu profiling \| * `1c4eb1bc39` pinctrl: renesas: rzg2l: Make reverse order of enable() for disable() \| * `cd7d804f52` livepatch: Fix missing newline character in klp_resolve_symbols() \| * `f1cda3c5dd` tty: tty_jobctrl: fix pid memleak in disassociate_ctty() \| * `fb4251dab3` f2fs: compress: fix to avoid redundant compress extension \| * `9375ea7f26` f2fs: compress: fix to avoid use-after-free on dic \| * `071bbc5a66` f2fs: compress: fix deadloop in f2fs_write_cache_pages() \| * `ec67c83dd5` f2fs: convert f2fs_write_cache_pages() to use filemap_get_folios_tag() \| * `599befdd79` filemap: add filemap_get_folios_tag() \| * `855516cb6e` perf kwork: Set ordered_events to true in 'struct perf_tool' \| * `231665cc6f` perf kwork: Add the supported subcommands to the document \| * `16e02976cf` perf kwork: Fix incorrect and missing free atom in work_push_atom() \| * `e27c2668ac` iio: frequency: adf4350: Use device managed functions and fix power down issue. \| * `550711e007` perf stat: Fix aggr mode initialization \| * `6cb0495d36` apparmor: fix invalid reference on profile->disconnected \| * `cef064fdde` apparmor: test: make static symbols visible during kunit testing \| * `cfce1e26b4` kunit: add macro to allow conditionally exposing static symbols to tests \| * `1d47d1abb4` leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu' \| * `4198a7a6ef` leds: pwm: Don't disable the PWM when the LED should be off \| * `63cdeb20ee` leds: turris-omnia: Do not use SMBUS calls \| * `7d0e60e4ff` leds: turris-omnia: Drop unnecessary mutex locking \| * `ce58f479b5` mfd: arizona-spi: Set pdata.hpdet_channel for ACPI enumerated devs \| * `26b534a3f0` dt-bindings: mfd: mt6397: Split out compatible for MediaTek MT6366 PMIC \| * `90155dfd99` dt-bindings: mfd: mt6397: Add binding for MT6357 \| * `9ac0c05365` mfd: dln2: Fix double put in dln2_probe \| * `ee6b91411d` mfd: core: Ensure disabled devices are skipped without aborting \| * `f1ed6c4e59` mfd: core: Un-constify mfd_cell.of_reg \| * `437f033e30` IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF \| * `ad52f21e3d` ASoC: ams-delta.c: use component after check \| * `3dd998f78c` crypto: qat - fix deadlock in backlog processing \| * `c7c26d0ef5` padata: Fix refcnt handling in padata_free_shell() \| * `980a7fd5e5` ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails \| * `9ee89579e6` HID: logitech-hidpp: Move get_wireless_feature_index() check to hidpp_connect_event() \| * `cf47abd7d8` HID: logitech-hidpp: Revert "Don't restart communication if not necessary" \| * `8eb1f933cc` HID: logitech-hidpp: Don't restart IO, instead defer hid_connect() only \| * `7f2ed86dde` HID: logitech-hidpp: Remove HIDPP_QUIRK_NO_HIDINPUT quirk \| * `b1736354a7` Revert "HID: logitech-hidpp: add a module parameter to keep firmware gestures" \| * `693baca82d` sh: bios: Revive earlyprintk support \| * `35ac8075ae` hid: cp2112: Fix IRQ shutdown stopping polling for all IRQs on chip \| * `8a716eb7f8` HID: cp2112: Make irq_chip immutable \| * `cce6785b84` RDMA/hfi1: Workaround truncation compilation error \| * `7a22e6fa51` scsi: ufs: core: Leave space for '\0' in utf8 desc string \| * `f9f4a6bdf9` ASoC: fsl: Fix PM disable depth imbalance in fsl_easrc_probe \| * `002bd3c874` ASoC: SOF: core: Ensure sof_ops_free() is still called when probe never ran. \| * `fe6efb2d18` RDMA/hns: The UD mode can only be configured with DCQCN \| * `1a6806f27e` RDMA/hns: Add check for SL \| * `d3a8efb9de` RDMA/hns: Fix signed-unsigned mixed comparisons \| * `1000adbac3` RDMA/hns: Fix uninitialized ucmd in hns_roce_create_qp_common() \| * `7c09504c37` RDMA/hns: Fix printing level of asynchronous events \| * `3d559a5d5d` IB/mlx5: Fix rdma counter binding for RAW QP \| * `c0f4144d0d` ASoC: fsl: mpc5200_dma.c: Fix warning of Function parameter or member not described \| * `4f13eab0e8` ext4: move 'ix' sanity check to corrent position \| * `242ba2e20b` ARM: 9321/1: memset: cast the constant byte to unsigned char \| * `0a7f9238f3` crypto: hisilicon/qm - fix PF queue parameter issue \| * `07eb93dbe1` crypto: hisilicon/qm - split a debugfs.c from qm \| * `2cec6774fd` crypto: hisilicon/qm - modify the process of regs dfx \| * `56785a3a08` crypto: hisilicon/qm - delete redundant null assignment operations \| * `bafb12b629` hid: cp2112: Fix duplicate workqueue initialization \| * `aa804deca1` PCI: vmd: Correct PCI Header Type Register's multi-function check \| * `ed7f07ef84` crypto: qat - increase size of buffers \| * `17c890a887` crypto: caam/jr - fix Chacha20 + Poly1305 self test failure \| * `9857f811e5` crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure \| * `f23859748e` nd_btt: Make BTT lanes preemptible \| * `93aa88170c` libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value \| * `4795de8c04` scsi: ibmvfc: Fix erroneous use of rtas_busy_delay with hcall return code \| * `dc44e3fdb0` crypto: qat - fix unregistration of crypto algorithms \| * `5e989aeb40` crypto: qat - extend buffer list interface \| * `443bde2a4c` crypto: qat - generalize crypto request buffers \| * `380f0a1de2` crypto: qat - change bufferlist logic interface \| * `2ad909a408` crypto: qat - rename bufferlist functions \| * `61c57bb986` crypto: qat - relocate bufferlist logic \| * `e3294cccd8` crypto: qat - ignore subsequent state up commands \| * `bb55130d02` RDMA/core: Use size_{add,sub,mul}() in calls to struct_size() \| * `e39b84448f` hwrng: geode - fix accessing registers \| * `3c5c7f926a` hwrng: bcm2835 - Fix hwrng throughput regression \| * `0c824b77ad` crypto: hisilicon/hpre - Fix a erroneous check after snprintf() \| * `12d2087a7d` KEYS: Include linux/errno.h in linux/verification.h \| * `44dcf6d33e` ALSA: hda: cs35l41: Undo runtime PM changes at driver exit time \| * `2d81896fe1` ALSA: hda: cs35l41: Fix unbalanced pm_runtime_get() \| * `0642126913` ASoC: cs35l41: Undo runtime PM changes at driver exit time \| * `ab3aa429c8` ASoC: cs35l41: Verify PM runtime resume errors in IRQ handler \| * `f20c4b0c01` module/decompress: use vmalloc() for gzip decompression workspace \| * `c8a2355833` selftests/resctrl: Ensure the benchmark commands fits to its array \| * `02c167c93f` selftests/pidfd: Fix ksft print formats \| * `6b7feafde7` arm64: tegra: Use correct interrupts for Tegra234 TKE \| * `87367bc3d9` arm64: dts: imx8mn: Add sound-dai-cells to micfil node \| * `fef0af2250` arm64: dts: imx8mm: Add sound-dai-cells to micfil node \| * `fafaf5a2f3` arm64: dts: imx8qm-ss-img: Fix jpegenc compatible entry \| * `37658e5189` clk: scmi: Free scmi_clk allocated when the clocks with invalid info are skipped \| * `db6db0af76` ARM: dts: am3517-evm: Fix LED3/4 pinmux \| * `d43c3e4974` firmware: arm_ffa: Allow the FF-A drivers to use 32bit mode of messaging \| * `5429ecbb1b` firmware: arm_ffa: Assign the missing IDR allocation ID to the FFA device \| * `e0cf8e811f` arm64: dts: ti: k3-am62a7-sk: Drop i2c-1 to 100Khz \| * `eccde2dbd9` firmware: ti_sci: Mark driver as non removable \| * `7efb91501b` kunit: Fix missed memory release in kunit_free_suite_set() \| * `f0ef883cae` soc: qcom: llcc: Handle a second device without data corruption \| * `4653225f41` ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator \| * `d97268ce08` arm64: dts: qcom: apq8016-sbc: Add missing ADV7533 regulators \| * `7867e1d926` ARM64: dts: marvell: cn9310: Use appropriate label for spi1 pins \| * `945f2e4f13` arm64: dts: qcom: sdm845-mtp: fix WiFi configuration \| * `89465723e0` arm64: dts: qcom: sm8350: fix pinctrl for UART18 \| * `1a404795c4` arm64: dts: qcom: sm8150: add ref clock to PCIe PHYs \| * `cd952d43c0` arm64: dts: qcom: sc7280: Add missing LMH interrupts \| * `03a0a34f04` arm64: dts: qcom: msm8992-libra: drop duplicated reserved memory \| * `4109f7d1a8` arm64: dts: qcom: msm8916: Fix iommu local address range \| * `389a4aa5e3` arm64: dts: qcom: sc7280: link usb3_phy_wrapper_gcc_usb30_pipe_clk \| * `426d3c7c72` arm64: dts: qcom: sdm845: cheza doesn't support LMh node \| * `e65c1aa21b` ARM: dts: renesas: blanche: Fix typo in GP_11_2 pin name \| * `b660420f44` perf: hisi: Fix use-after-free when register pmu fails \| * `104fa6426a` drivers/perf: hisi_pcie: Check the type first in pmu::event_init() \| * `c6e00bc30e` perf/arm-cmn: Fix DTC domain detection \| * `28fa550a49` perf/arm-cmn: Revamp model detection \| * `4589403a34` drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process \| * `1e88414e64` drm: mediatek: mtk_dsi: Fix NO_EOT_PACKET settings/handling \| * `025d2ac470` clocksource/drivers/arm_arch_timer: limit XGene-1 workaround \| * `96c3a18304` drm/msm/dsi: free TX buffer in unbind \| * `8b072ab6c4` drm/msm/dsi: use msm_gem_kernel_put to free TX buffer \| * `5671bed3c0` xen-pciback: Consider INTx disabled when MSI/MSI-X is enabled \| * `934747e2f8` xenbus: fix error exit in xenbus_init() \| * `ace6403e78` drm/rockchip: Fix type promotion bug in rockchip_gem_iommu_map() \| * `2836c72e8d` arm64/arm: xen: enlighten: Fix KPTI checks \| * `008b2a93c5` drm/bridge: lt9611uxc: fix the race in the error path \| * `af19ebfc6a` gpu: host1x: Correct allocated size for contexts \| * `9da0193454` drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe() \| * `8045808be1` drm/mediatek: Fix iommu fault during crtc enabling \| * `5d30fedc20` drm/mediatek: Fix iommu fault by swapping FBs after updating plane state \| * `32b15fef33` io_uring/kbuf: Allow the full buffer id space for provided buffers \| * `60db638be5` io_uring/kbuf: Fix check of BID wrapping in provided buffers \| * `03e334565d` drm/amd/display: Bail from dm_check_crtc_cursor if no relevant change \| * `a99afba394` drm/amd/display: Refactor dm_get_plane_scale helper \| * `8960662027` drm/amd/display: Check all enabled planes in dm_check_crtc_cursor \| * `9eae81af92` drm/amdkfd: fix some race conditions in vram buffer alloc/free of svm code \| * `78e998884d` drm/bridge: tc358768: Fix tc358768_ns_to_cnt() \| * `9dbfdf5dcc` drm/bridge: tc358768: Clean up clock period code \| * `3ed322a852` drm/bridge: tc358768: Rename dsibclk to hsbyteclk \| * `14d546d067` drm/bridge: tc358768: Use dev for dbg prints, not priv->dev \| * `4a1c4eff65` drm/bridge: tc358768: Print logical values, not raw register values \| * `fb82b3b4ac` drm/bridge: tc358768: Use struct videomode \| * `e87a3c24ce` drm/bridge: tc358768: remove unused variable \| * `1942dc48f4` drm/bridge: tc358768: Fix bit updates \| * `2fab90bcde` drm/bridge: tc358768: Fix use of uninitialized variable \| * `3c0b681ba4` drm/bridge: lt8912b: Add missing drm_bridge_attach call \| * `5a521f6b68` drm/bridge: lt8912b: Manually disable HPD only if it was enabled \| * `7bf0cb8f40` drm/bridge: lt8912b: Fix crash on bridge detach \| * `2cfa9dc32c` drm/bridge: lt8912b: Fix bridge_detach \| * `45350e5471` drm/bridge: lt8912b: Add hot plug detection \| * `2c80c4f0d2` drm: bridge: it66121: Fix invalid connector dereference \| * `341e79f8ae` drm/radeon: possible buffer overflow \| * `2d68194e1a` drm/rockchip: vop2: Add missing call to crtc reset helper \| * `bc05621888` drm/rockchip: vop2: Don't crash for invalid duplicate_state \| * `b248ccaabf` drm/rockchip: vop: Fix call to crtc reset helper \| * `ffebe76e50` drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs \| * `4d37df40b1` hte: tegra: Fix missing error code in tegra_hte_test_probe() \| * `a671a41d60` hwmon: (sch5627) Disallow write access if virtual registers are locked \| * `4a30312982` hwmon: (sch5627) Use bit macros when accessing the control register \| * `3385632de8` Revert "hwmon: (sch56xx-common) Add automatic module loading on supported devices" \| * `581255403a` Revert "hwmon: (sch56xx-common) Add DMI override table" \| * `dd06f92fd8` hwmon: (coretemp) Fix potentially truncated sysfs attribute name \| * `33de53a270` hwmon: (axi-fan-control) Fix possible NULL pointer dereference \| * `44a96796d2` platform/x86: wmi: Fix opening of char device \| * `ae28868bba` platform/x86: wmi: Fix probe failure when failing to register WMI devices \| * `7b8d88df17` clk: qcom: config IPQ_APSS_6018 should depend on QCOM_SMEM \| * `2a18dd6532` clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data \| * `a836efc21e` clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data \| * `a540ca0aea` clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data \| * `357df1c2f6` clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data \| * `df1c4a9efa` clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data \| * `dd1f30d68f` clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data \| * `7d022726e3` clk: npcm7xx: Fix incorrect kfree \| * `cc1c2772c1` clk: ti: fix double free in of_ti_divider_clk_setup() \| * `e4df931fb4` clk: ti: change ti_clk_register[_omap_hw]() API \| * `cb6c38995f` clk: keystone: pll: fix a couple NULL vs IS_ERR() checks \| * `0a37614109` spi: nxp-fspi: use the correct ioremap function \| * `cdaa544dc4` clk: linux/clk-provider.h: fix kernel-doc warnings and typos \| * `a0b3b2cc2d` clk: renesas: rzg2l: Fix computation formula \| * `e1809bb19a` clk: renesas: rzg2l: Use FIELD_GET() for PLL register fields \| * `e6070f0cda` clk: renesas: rzg2l: Trust value returned by hardware \| * `c823ffba5d` clk: renesas: rzg2l: Lock around writes to mux register \| * `77e2338802` clk: renesas: rzg2l: Wait for status bit of SD mux before continuing \| * `f26a440d0e` clk: renesas: rcar-gen3: Extend SDnH divider table \| * `d72c586809` clk: imx: imx8qxp: Fix elcdif_pll clock \| * `2c2f1fb3f8` clk: imx: imx8mq: correct error handling path \| * `0e2b088240` clk: imx: Select MXC_CLK for CLK_IMX8QXP \| * `5b8d3ea093` regulator: mt6358: Fail probe on unknown chip ID \| * `8d20252d96` clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src \| * `a588f440c4` clk: qcom: mmcc-msm8998: Fix the SMMU GDSC \| * `d2ffd85ee3` clk: qcom: mmcc-msm8998: Don't check halt bit on some branch clks \| * `06a7365e2b` clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies \| * `101c2d257c` clk: qcom: gcc-msm8996: Remove RPM bus clocks \| * `5c25f89c00` spi: tegra: Fix missing IRQ check in tegra_slink_probe() \| * `51d4d3cd18` regmap: debugfs: Fix a erroneous check after snprintf() \| * `30e77e3ee9` ipvlan: properly track tx_errors \| * `4836b94e5e` net: add DEV_STATS_READ() helper \| * `fae5cc598e` ipv6: avoid atomic fragment on GSO packets \| * `35aff53626` ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() \| * `1ca7bc1b08` bpf: Fix unnecessary -EBUSY from htab_lock_bucket \| * `4bb26ec7ed` Bluetooth: hci_sync: Fix Opcode prints in bt_dev_dbg/err \| * `6f505a013c` wifi: iwlwifi: empty overflow queue during flush \| * `e2be4ab86a` wifi: iwlwifi: pcie: synchronize IRQs before NAPI \| * `c56aed37b6` wifi: iwlwifi: call napi_synchronize() before freeing rx/tx queues \| * `6d88d4b1bb` tcp: fix cookie_init_timestamp() overflows \| * `72c23b3071` chtls: fix tp->rcv_tstamp initialization \| * `2acedc5372` net: skb_find_text: Ignore patterns extending past 'to' \| * `d860416236` selftests: netfilter: test for sctp collision processing in nf_conntrack \| * `aa0a050c65` r8169: fix rare issue with broken rx after link-down on RTL8125 \| * `4789d93f94` r8169: use tp_to_dev instead of open code \| * `77ff34a56b` thermal: core: prevent potential string overflow \| * `9709c6d759` netfilter: nf_tables: Drop pointless memset when dumping rules \| * `100a75d56b` wifi: wfx: fix case where rates are out of order \| * `f64a559f2d` PM / devfreq: rockchip-dfi: Make pmu regmap mandatory \| * `0d30931f1f` can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds \| * `76378a8bae` can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() \| * `614d615d49` can: dev: can_restart(): don't crash kernel if carrier is OK \| * `d5342dafca` wifi: ath11k: fix Tx power value during active CAC \| * `8a777b28d7` ACPI: video: Add acpi_backlight=vendor quirk for Toshiba Portégé R100 \| * `396ec51b13` ACPI: property: Allow _DSD buffer data only for byte accessors \| * `75de6a6641` wifi: rtlwifi: fix EDCA limit set by BT coexistence \| * `14a7e73b28` tcp_metrics: do not create an entry from tcp_init_metrics() \| * `52ec0669f4` tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics() \| * `e850efcf2b` tcp_metrics: add missing barriers on delete \| * `586ce1064f` wifi: ath: dfs_pattern_detector: Fix a memory initialization issue \| * `ebca9ae926` wifi: mt76: mt7915: fix beamforming availability check \| * `2b12aebbd3` wifi: mt76: mt7603: improve stuck beacon handling \| * `c2fd48179c` wifi: mt76: mt7603: improve watchdog reset reliablity \| * `e3c46ce78d` wifi: mt76: mt7603: rework/fix rx pse hang check \| * `e01b3400d6` wifi: ath11k: fix boot failure with one MSI vector \| * `26e301a70d` wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file() \| * `365fe12f45` net: ethernet: mtk_wed: fix EXT_INT_STATUS_RX_FBUF definitions for MT7986 SoC \| * `d97463c1f3` net: spider_net: Use size_add() in call to struct_size() \| * `254187a64a` tipc: Use size_add() in calls to struct_size() \| * `065cb7ae3f` tls: Use size_add() in call to struct_size() \| * `8ae1873864` tls: Only use data field in crypto completion function \| * `65e65a8b2d` mlxsw: Use size_mul() in call to struct_size() \| * `a764c22bbc` gve: Use size_add() in call to struct_size() \| * `5dd1344de3` tcp: call tcp_try_undo_recovery when an RTOd TFO SYNACK is ACKed \| * `a08ff0544b` udp: add missing WRITE_ONCE() around up->encap_rcv \| * `ec18d7507f` selftests/bpf: Correct map_fd to data_fd in tailcalls \| * `3e1d754b5d` iavf: Fix promiscuous mode configuration flow messages \| * `42b452960a` i40e: fix potential memory leaks in i40e_remove() \| * `36f0004fe5` wifi: iwlwifi: honor the enable_ini value \| * `9c6269f5d1` wifi: mac80211: fix # of MSDU in A-MSDU calculation \| * `cee323e56c` wifi: mac80211: move sched-scan stop work to wiphy work \| * `0568d1e889` wifi: mac80211: move offchannel works to wiphy work \| * `ef41361519` wifi: mac80211: move scan work to wiphy work \| * `09915293c3` wifi: mac80211: move radar detect work to wiphy work \| * `697fb94e3e` wifi: cfg80211: add flush functions for wiphy work \| * `36aa50d578` genirq/matrix: Exclude managed interrupts in irq_matrix_allocated() \| * `4f834ad034` string: Adjust strtomem() logic to allow for smaller sources \| * `63f637309b` pstore/platform: Add check for kstrdup \| * `0a1dab4a8e` drivers/clocksource/timer-ti-dm: Don't call clk_get_rate() in stop function \| * `dbb5581603` x86/boot: Fix incorrect startup_gdt_descr.size \| * `21c5c3f95f` x86/sev-es: Allow copy_from_kernel_nofault() in earlier boot \| * `7807c269cb` ACPI/NUMA: Apply SRAT proximity domain to entire CFMWS window \| * `bf178c8b9c` x86/numa: Introduce numa_fill_memblks() \| * `dce53a017c` futex: Don't include process MM in futex key on no-MMU \| * `3c1a20c122` x86/srso: Fix SBPB enablement for (possible) future fixed HW \| * `2351c03529` writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs \| * `bc8e02850a` vfs: fix readahead(2) on block devices \| * `8620933c3c` sched: Fix stop_one_cpu_nowait() vs hotplug \| * `21f99a5adb` objtool: Propagate early errors \| * `df870d47d2` sched/uclamp: Ignore (util == 0) optimization in feec() when p_util_max = 0 \| * `d77530a1d4` sched/uclamp: Set max_spare_cap_cpu even if max_spare_cap is 0 \| * `b783919771` iov_iter, x86: Be consistent about the __user tag on copy_mc_to_user() \| * `42bed989f0` sched/fair: Fix cfs_rq_is_decayed() on !SMP \| * `71e3e7830b` hwmon: (nct6775) Fix incorrect variable reuse in fan_div calculation * \| `0d9fb52165` Merge 6.1.62 into android14-6.1-lts \|\\| \| * `fb2635ac69` Linux 6.1.62 \| * `585da49ad6` ASoC: SOF: sof-pci-dev: Fix community key quirk detection \| * `c1c15b09f4` ALSA: hda: intel-dsp-config: Fix JSL Chromebook quirk detection \| * `5c59879031` misc: pci_endpoint_test: Add deviceID for J721S2 PCIe EP device support \| * `6bebd303ad` tty: 8250: Add Brainboxes Oxford Semiconductor-based quirks \| * `3017a17ad6` tty: 8250: Add support for Intashield IX cards \| * `c3444894e8` tty: 8250: Add support for additional Brainboxes PX cards \| * `31ebf431ed` tty: 8250: Fix up PX-803/PX-857 \| * `bfe9bde05f` tty: 8250: Fix port count of PX-257 \| * `b75ee2d9d7` tty: 8250: Add support for Intashield IS-100 \| * `cdd260b220` tty: 8250: Add support for Brainboxes UP cards \| * `8af676c698` tty: 8250: Add support for additional Brainboxes UC cards \| * `abcb12f319` tty: 8250: Remove UC-257 and UC-431 \| * `df6cfab66f` tty: n_gsm: fix race condition in status line change on dead connections \| * `23107989be` usb: raw-gadget: properly handle interrupted requests \| * `e7a802447c` usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() \| * `6f17be2700` usb: storage: set 1.50 as the lower bcdDevice for older "Super Top" compatibility \| * `b25a2f2470` PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device \| * `977ae4dbe2` ALSA: usb-audio: add quirk flag to enable native DSD for McIntosh devices \| * `9411dbe2c6` mmap: fix error paths with dup_anon_vma() \| * `21ca008c53` mm/mempolicy: fix set_mempolicy_home_node() previous VMA pointer \| * `7ab62e3415` x86: KVM: SVM: always update the x2avic msr interception \| * `e833591265` perf evlist: Avoid frequency mode for the dummy event \| * `b3eed11110` power: supply: core: Use blocking_notifier_call_chain to avoid RCU complaint \| * `803cc77a3a` ceph_wait_on_conflict_unlink(): grab reference before dropping ->d_lock \| * `9eab5008db` io_uring: kiocb_done() should not trust ->ki_pos if ->{read,write}_iter() failed \| * `ed0ba37e7b` powerpc/mm: Fix boot crash with FLATMEM \| * `31ae7876da` r8152: Check for unplug in r8153b_ups_en() / r8153c_ups_en() \| * `f90656fbf6` r8152: Check for unplug in rtl_phy_patch_request() \| * `98567c9d84` net: chelsio: cxgb4: add an error code check in t4_load_phy_fw \| * `ff86d69b2e` drm/amdgpu: Reserve fences for VM update \| * `8e4a77ba25` platform/mellanox: mlxbf-tmfifo: Fix a warning message \| * `0f2840dabf` netfilter: nf_tables: audit log object reset once per table \| * `ec80ad4585` LoongArch: Replace kmap_atomic() with kmap_local_page() in copy_user_highpage() \| * `afe80b58ee` LoongArch: Export symbol invalid_pud_table for modules building \| * `9f9b2ec53a` gpu/drm: Eliminate DRM_SCHED_PRIORITY_UNSET \| * `cafa191b27` drm/amdgpu: Unset context priority is now invalid \| * `0eb733b53e` scsi: mpt3sas: Fix in error path \| * `4e000daf39` fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit() \| * `50736464a7` fbdev: omapfb: fix some error codes \| * `6a87b333ba` drm/ttm: Reorder sys manager cleanup step \| * `9951b2309e` ASoC: codecs: tas2780: Fix log of failed reset via I2C. \| * `b7ed4aa0c2` ASoC: rt5650: fix the wrong result of key button \| * `8e1a6594d7` efi: fix memory leak in krealloc failure handling \| * `678edd2dfd` netfilter: nfnetlink_log: silence bogus compiler warning \| * `c6f6a50527` spi: npcm-fiu: Fix UMA reads when dummy.nbytes == 0 \| * `6a7a2d5a08` fs/ntfs3: Avoid possible memory leak \| * `84aabd18c8` fs/ntfs3: Fix directory element type detection \| * `3bff4bb7f9` fs/ntfs3: Fix NULL pointer dereference on error in attr_allocate_frame() \| * `c8cbae3cbb` fs/ntfs3: Fix possible NULL-ptr-deref in ni_readpage_cmpr() \| * `6fe32f79ab` fs/ntfs3: Use kvmalloc instead of kmalloc(... __GFP_NOWARN) \| * `92f9c7c7dd` fs/ntfs3: Write immediately updated ntfs state \| * `fc91bb3e1b` fs/ntfs3: Add ckeck in ni_update_parent() \| * `768e857ac3` fbdev: atyfb: only use ioremap_uc() on i386 and ia64 \| * `dd6d75eb00` Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport \| * `c64c237275` powerpc/85xx: Fix math emulation exception \| * `96c7aac8d8` dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe \| * `9ef4697548` irqchip/stm32-exti: add missing DT IRQ flag translation \| * `7378415da0` irqchip/riscv-intc: Mark all INTC nodes as initialized \| * `d3204c0fdd` net: sched: cls_u32: Fix allocation size in u32_init() \| * `f15dbcda2c` ASoC: tlv320adc3xxx: BUG: Correct micbias setting \| * `30ed998604` coresight: tmc-etr: Disable warnings for allocation failures \| * `6618e7a740` ASoC: simple-card: fixup asoc_simple_probe() error handling * \| `d3f3412122` Merge branch 'android14-6.1' into branch 'android14-6.1-lts' * \| `a2eefda9e3` Revert "kasan: print the original fault addr when access invalid shadow" * \| `2cd386b08b` Merge 6.1.61 into android14-6.1-lts \|\\| \| * `4a61839152` Linux 6.1.61 \| * `5926b0886d` objtool/x86: add missing embedded_insn check \| * `2afa9f7eb1` ext4: avoid overlapping preallocations due to overflow \| * `fcefddf3a1` ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow \| * `495c4c58d6` ext4: add two helper functions extent_logical_end() and pa_logical_end() \| * `d022e4ea9c` platform/x86: Add s2idle quirk for more Lenovo laptops \| * `48ebeab0ed` clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name \| * `65e5a9890e` sparc32: fix a braino in fault handling in csum_and_copy_..._user() \| * `8b8cde8ebb` perf/core: Fix potential NULL deref \| * `5e232f2205` x86/cpu: Add model number for Intel Arrow Lake mobile processor \| * `63cc3d5d34` x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility \| * `37495846b1` nvmem: imx: correct nregs for i.MX6UL \| * `116671d259` nvmem: imx: correct nregs for i.MX6SLL \| * `b90b8633ef` nvmem: imx: correct nregs for i.MX6ULL \| * `cc87c73eac` misc: fastrpc: Unmap only if buffer is unmapped from DSP \| * `38c5faf2a9` misc: fastrpc: Clean buffers on remote invocation failures \| * `7737e9384e` misc: fastrpc: Free DMA handles for RPC calls with no arguments \| * `1e8851b513` misc: fastrpc: Reset metadata buffer to avoid incorrect free \| * `5a35fc1c00` tracing/kprobes: Fix the description of variable length arguments \| * `91b95e3b4a` i2c: aspeed: Fix i2c bus hang in slave read \| * `11602cadc9` i2c: stm32f7: Fix PEC handling in case of SMBUS transfers \| * `ff0312a156` i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() \| * `f9a7b3b33c` i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() \| * `48a365ae4f` i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() \| * `6ec84059b5` iio: adc: xilinx-xadc: Correct temperature offset/scale for UltraScale \| * `e26fd381bf` iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature thresholds \| * `cb01837e0f` iio: exynos-adc: request second interupt only when touchscreen mode is used \| * `7a641bc52f` iio: afe: rescale: Accept only offset channels \| * `9236d2ea64` io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid \| * `1684909df3` kasan: print the original fault addr when access invalid shadow \| * `6a5b845b57` blk-throttle: check for overflow in calculate_bytes_allowed \| * `bb20a245df` scsi: sd: Introduce manage_shutdown device flag \| * `93fa5786f9` iavf: in iavf_down, disable queues when removing the driver \| * `f7f660df65` drm/logicvc: Kconfig: select REGMAP and REGMAP_MMIO \| * `cb115b6688` i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR \| * `144f93c622` gtp: fix fragmentation needed check with gso \| * `039a050740` gtp: uapi: fix GTPA_MAX \| * `664a358b79` tcp: fix wrong RTO timeout when received SACK reneging \| * `5b100bb044` r8152: Release firmware if we have an error in probe \| * `ecb51a434e` r8152: Cancel hw_phy_work if we have an error in probe \| * `87376143df` r8152: Run the unload routine if we have errors during probe \| * `ee73f937c5` r8152: Increase USB control msg timeout to 5000ms as per spec \| * `9eb275fec6` net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg \| * `7c799bc322` net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show() \| * `55b01c5a84` net: ethernet: adi: adin1110: Fix uninitialized variable \| * `9d2b588fae` igc: Fix ambiguity in the ethtool advertising \| * `fa28949c72` neighbour: fix various data-races \| * `c166dd51b6` igb: Fix potential memory leak in igb_add_ethtool_nfc_entry \| * `9a194064fa` treewide: Spelling fix in comment \| * `b1ad0a147d` i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value \| * `d8ac13acfb` iavf: initialize waitqueues before starting watchdog_task \| * `66e879507b` r8169: fix the KCSAN reported data race in rtl_rx while reading desc->opts1 \| * `d10140916e` r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1 \| * `4138a02c89` r8169: fix the KCSAN reported data-race in rtl_tx() while reading tp->cur_tx \| * `29f365f4c3` clk: ti: Fix missing omap5 mcbsp functional clock and aliases \| * `2ba943c6d9` clk: ti: Fix missing omap4 mcbsp functional clock and aliases \| * `8d8346ed39` firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels() \| * `df4169fc9b` ARM: OMAP: timer32K: fix all kernel-doc warnings \| * `6c668e2f33` drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() \| * `024251bab2` drm/amd: Disable ASPM for VI w/ all Intel systems \| * `eded5f5261` drm/i915/pmu: Check if pmu is closed before stopping event \| * `4f46c177c0` nfsd: lock_rename() needs both directories to live on the same fs \| * `3262ff5826` maple_tree: add GFP_KERNEL to allocations in mas_expected_entries() \| * `b1b2750de1` hugetlbfs: extend hugetlb_vma_lock to private VMAs \| * `c9b066f692` mm/migrate: fix do_pages_move for compat pointers \| * `a6fbf025e3` mm/page_alloc: correct start page when guard page debug is enabled \| * `0aa7b24c06` hugetlbfs: clear resv_map pointer if mmap fails \| * `38d0d1c442` mm: fix vm_brk_flags() to not bail out while holding lock \| * `38930ec767` arm64: dts: rockchip: Fix i2s0 pin conflict on ROCK Pi 4 boards \| * `9d72254c2b` arm64: dts: rockchip: Add i2s0-2ch-bus-bclk-off pins to RK3399 \| * `08e6b680f2` vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE \| * `1f14ded0f1` vsock/virtio: initialize the_virtio_vsock before using VQs \| * `534487cc3e` virtio_pci: fix the common cfg map size \| * `86f467d358` virtio-crypto: handle config changed by work queue \| * `a9d4a1ea67` virtio-mmio: fix memory leak of vm_dev \| * `19b30a8790` virtio_balloon: Fix endless deflation and inflation on arm64 \| * `bede8b4b51` mcb-lpc: Reallocate memory region to avoid memory overlapping \| * `c9efc3efe4` mcb: Return actual parsed size when reading chameleon table \| * `e58ab834e4` pinctrl: qcom: lpass-lpi: fix concurrent register updates \| * `018b11ecba` ASoC: codecs: wcd938x: fix runtime PM imbalance on remove \| * `508c3353fe` ASoC: codecs: wcd938x: fix regulator leaks on probe errors \| * `877fc75d2c` ASoC: codecs: wcd938x: Simplify with dev_err_probe \| * `629ba75200` ASoC: codecs: wcd938x: Convert to platform remove callback returning void \| * `1fae817d3e` mmc: core: Fix error propagation for some ioctl commands \| * `719c01f281` mmc: block: ioctl: do write error check for spi \| * `651e66d20b` mmc: core: Align to common busy polling behaviour for mmc ioctls \| * `d3466ce4f4` KVM: x86/pmu: Truncate counter value to allowed width on write * \| `a5623b3d30` ANDROID: GKI: add system_unbound_wq to some symbol lists. * \| `08d790dfee` Revert "audit,io_uring: io_uring openat triggers audit reference count underflow" * \| `ddf96fa712` Revert "tcp: allow again tcp_disconnect() when threads are waiting" * \| `a5f2364ea6` Revert "tcp_bpf: properly release resources on error paths" * \| `904cdc97d4` Revert "ipv4/fib: send notify when delete source address routes" * \| `17952d5aad` Revert "Bluetooth: hci_core: Fix build warnings" * \| `29756f9286` Revert "xfrm: fix a data-race in xfrm_gen_index()" * \| `63eafbb6b3` Revert "perf: Disallow mis-matched inherited group reads" * \| `4933ddb051` ANDROID: fix up 6.1.60 merge of hid.h into android14-6.1-lts * \| `0a1364ec1f` ANDROID: GKI: arm64: drop CONFIG_DEBUG_PREEMPT forced disable * \| `788e35fdea` Merge 6.1.60 into android14-6.1-lts \|\\| \| * `32c9cdbe38` Linux 6.1.60 \| * `7f5bb254be` selftests: mptcp: join: no RST when rm subflow/addr \| * `0e0123e0e5` selftests: mptcp: join: correctly check for no RST \| * `300447c572` mptcp: avoid sending RST when closing the initial subflow \| * `c04f416730` Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name \| * `a429d65428` Bluetooth: hci_sock: fix slab oob read in create_monitor_event \| * `46de539282` net: move altnames together with the netdevice \| * `c1d531aa09` phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins \| * `13a45130bb` phy: mapphone-mdm6600: Fix runtime PM for remove \| * `7fcce3258b` phy: mapphone-mdm6600: Fix runtime disable on probe \| * `4eac2cf444` gpio: vf610: mask the gpio irq in system suspend and support wakeup \| * `9b0f8a9dfd` gpio: vf610: make irq_chip immutable \| * `1f38ead73f` tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols \| * `e9b4b72567` kallsyms: Add helper kallsyms_on_each_match_symbol() \| * `da359f699f` kallsyms: Reduce the memory occupied by kallsyms_seqs_of_names[] \| * `3918cada8f` serial: 8250: omap: convert to modern PM ops \| * `70a841eb4f` serial: 8250: omap: Move uart_write() inside PM section \| * `6df4c9dee0` drm/bridge: ti-sn65dsi86: Associate DSI device lifetime with auxiliary device \| * `3d57f6ac64` ASoC: pxa: fix a memory leak in probe() \| * `14a1a7beb3` gpio: vf610: set value before the direction to avoid a glitch \| * `7ec224d980` platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events \| * `baf191abec` platform/x86: asus-wmi: Only map brightness codes when using asus-wmi backlight control \| * `4186c79c13` platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e \| * `52d54f1d4e` platform/x86: intel-uncore-freq: Conditionally create attribute for read frequency \| * `8a4b575d00` platform/surface: platform_profile: Propagate error if profile registration fails \| * `fec769b9fd` s390/cio: fix a memleak in css_alloc_subchannel \| * `7241c2627c` selftests/ftrace: Add new test case which checks non unique symbol \| * `324c31b0e0` s390/pci: fix iommu bitmap allocation \| * `f6952655a6` perf: Disallow mis-matched inherited group reads \| * `908c628005` USB: serial: option: add Fibocom to DELL custom modem FM101R-GL \| * `acced163ab` USB: serial: option: add entry for Sierra EM9191 with new firmware \| * `1dce40c9e6` USB: serial: option: add Telit LE910C4-WWX 0x1035 composition \| * `59aa39697f` HID: input: map battery system charging \| * `ea0e047309` KVM: x86/mmu: Stop zapping invalidated TDP MMU roots asynchronously \| * `3519cee444` nvme-rdma: do not try to stop unallocated queues \| * `bec9cb90fe` nvmet-auth: complete a request only after freeing the dhchap pointers \| * `0ec655ad65` nvme-pci: add BOGUS_NID for Intel 0a54 device \| * `2c0b40c310` nvme: sanitize metadata bounce buffer for reads \| * `a54974b007` nfs42: client needs to strip file mode's suid/sgid bit after ALLOCATE op \| * `8d69b47443` ACPI: irq: Fix incorrect return value in acpi_register_gsi() \| * `c462bf4ef8` NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server \| * `ab65424d61` pNFS/flexfiles: Check the layout validity in ff_layout_mirror_prepare_stats \| * `730bbbbe16` pNFS: Fix a hang in nfs4_evict_inode() \| * `fbd8b28fe4` Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" \| * `c4b7b119c5` mmc: core: Capture correct oemid-bits for eMMC cards \| * `85664ad23f` mmc: core: sdio: hold retuning if sdio in 1-bit mode \| * `aaa476a7ad` mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw \| * `43f588b820` mmc: sdhci-pci-gli: fix LPM negotiation so x86/S0ix SoCs can suspend \| * `55c2428658` dt-bindings: mmc: sdhci-msm: correct minimum number of clocks \| * `73915d26b4` mtd: physmap-core: Restore map_rom fallback \| * `578687563e` mtd: spinand: micron: correct bitmask for ecc status \| * `8b2b755a1a` mtd: rawnand: arasan: Ensure program page operations are successful \| * `58277212f5` mtd: rawnand: marvell: Ensure program page operations are successful \| * `250feed792` mtd: rawnand: pl353: Ensure program page operations are successful \| * `5845448613` mtd: rawnand: qcom: Unmap the right resource upon probe failure \| * `a7f5558ec2` net/smc: fix smc clc failed issue when netdevice not in init_net \| * `2efcdbef13` tcp_bpf: properly release resources on error paths \| * `c3e70048ac` selftests: openvswitch: Add version check for pyroute2 \| * `a1a9e57037` Bluetooth: hci_event: Fix using memcmp when comparing keys \| * `758610516f` ice: Remove redundant pci_enable_pcie_error_reporting() \| * `ec9bc89a01` tcp: allow again tcp_disconnect() when threads are waiting \| * `9dc02f41d5` net/tls: split tls_rx_reader_lock \| * `76f96854aa` net/mlx5e: Don't offload internal port if filter device is out device \| * `107ff0034b` net/mlx5: Handle fw tracer change ownership event based on MTRC \| * `0aa1e83a20` net/mlx5: E-switch, register event handler before arming the event \| * `c21bff1c99` xfrm6: fix inet6_dev refcount underflow problem \| * `d91723f6ca` net: xfrm: skip policies marked as dead while reinserting policies \| * `df2cc87f2c` fprobe: Fix to ensure the number of active retprobes is not zero \| * `f177a579d2` fprobe: Add nr_maxactive to specify rethook_node pool size \| * `0806cb1e6c` fprobe: Pass entry_data to handlers \| * `bacf8c749a` cpufreq: schedutil: Update next_freq when cpufreq_limits change \| * `62733bbae1` platform/x86: touchscreen_dmi: Add info for the Positivo C4128B \| * `60dc7e39df` HID: nintendo: reinitialize USB Pro Controller after resuming from suspend \| * `ef8cdee81e` HID: multitouch: Add required quirk for Synaptics 0xcd7e device \| * `2a2df4f74f` drm/amd/pm: add unique_id for gc 11.0.3 \| * `1869638a14` btrfs: error out when reallocating block for defrag using a stale transaction \| * `f174c8d2c6` btrfs: error when COWing block from a root that is being deleted \| * `c833f1e28d` btrfs: error out when COWing block using a stale transaction \| * `9d99acb6a1` btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c \| * `c3657e5fa7` drm: panel-orientation-quirks: Add quirk for One Mix 2S \| * `ffbb01fe9a` ipv4/fib: send notify when delete source address routes \| * `52080d6edc` sky2: Make sure there is at least one frag_addr available \| * `d63d39e7f9` regulator/core: Revert "fix kobject release warning and memory leak in regulator_register()" \| * `2353f64762` wifi: cfg80211: avoid leaking stack data into trace \| * `2fd88f5632` wifi: mac80211: allow transmitting EAPOL frames with tainted key \| * `9285fea3a2` wifi: mac80211: work around Cisco AP 9115 VHT MPDU length \| * `dbbb6090c9` wifi: cfg80211: Fix 6GHz scan configuration \| * `a55d53ad5c` Bluetooth: hci_core: Fix build warnings \| * `aad0760c26` Bluetooth: Avoid redundant authentication \| * `7045675fc9` Bluetooth: btusb: add shutdown function for QCA6174 \| * `7d823a1071` HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event \| * `f45752f1eb` HID: logitech-hidpp: Add Bluetooth ID for the Logitech M720 Triathlon mouse \| * `e045b6a921` wifi: iwlwifi: Ensure ack flag is properly cleared. \| * `eb7ae9ed63` wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len \| * `b812b31696` tracing: relax trace_event_eval_update() execution with cond_resched() \| * `1c859abdd7` ata: libata-eh: Fix compilation warning in ata_eh_link_report() \| * `e4ce5ce29a` ata: libata-core: Fix compilation warning in ata_dev_config_ncq() \| * `5075570a3e` gpio: timberdale: Fix potential deadlock on &tgpio->lock \| * `d0dab9dd32` overlayfs: set ctime when setting mtime and atime \| * `6133f63d4d` i2c: mux: Avoid potential false error message in i2c_mux_add_adapter \| * `febcad3d32` btrfs: initialize start_slot in btrfs_log_prealloc_extents \| * `563853bf3b` btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 \| * `8a4e34fe1b` btrfs: prevent transaction block reserve underflow when starting transaction \| * `c194e184a8` fs-writeback: do not requeue a clean inode having skipped pages \| * `a7354d9064` ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone \| * `1c972cb674` pwr-mlxbf: extend Kconfig to include gpio-mlxbf3 dependency \| * `82a93c65a4` iio: adc: ad7192: Correct reference voltage \| * `ee1d783be5` iio: adc: ad7192: Simplify using devm_regulator_get_enable() \| * `3b02dbd1cd` iio: cros_ec: fix an use-after-free in cros_ec_sensors_push_data() \| * `7bca0af538` iio: core: introduce iio_device_{claim\|release}_buffer_mode() APIs \| * `681c8a2c23` serial: 8250_omap: Fix errors with no_console_suspend \| * `9424a0a456` serial: 8250: omap: Fix imprecise external abort for omap_8250_pm() \| * `7067c3cf08` serial: Reduce spinlocked portion of uart_rs485_config() \| * `147156b19c` serial: Rename uart_change_speed() to uart_change_line_settings() \| * `e4df8000bd` serial: Move uart_change_speed() earlier \| * `4d382ba65d` usb: misc: onboard_hub: add support for Microchip USB2412 USB 2.0 hub \| * `8e939c21f6` usb: misc: onboard_usb_hub: add Genesys Logic GL3523 hub support \| * `a46907e1f6` usb: misc: onboard_usb_hub: add Genesys Logic GL852G hub support \| * `a2431e7e8b` usb: misc: onboard_usb_hub: add Genesys Logic GL850G hub support \| * `5e7275e432` selftests/mm: fix awk usage in charge_reserved_hugetlb.sh and hugetlb_reparenting_test.sh that may cause error \| * `673edcffa0` net: check for altname conflicts when changing netdev's netns \| * `9307f5f59a` net: fix ifname in netlink ntf during netns move \| * `b92433493b` net: avoid UAF on deleted altname \| * `1cf912054a` net: pktgen: Fix interface flags printing \| * `2fb84f5214` net: phy: bcm7xxx: Add missing 16nm EPHY statistics \| * `e1512ff1ec` netfilter: nf_tables: revert do not remove elements if set backend implements .abort \| * `c2eaa8319f` netfilter: nf_tables: do not remove elements if set backend implements .abort \| * `0e8cdddf01` netlink: Correct offload_xstats size \| * `0697918ec0` netfilter: nft_set_rbtree: .deactivate fails if element has expired \| * `d9d289b78c` selftests: netfilter: Run nft_audit.sh in its own netns \| * `0bb1573512` selftests: openvswitch: Catch cases where the tests are killed \| * `e0914e5a05` neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section \| * `d80bc19142` net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve \| * `ec7393fe63` bonding: Return pointer to data after pull on skb \| * `3065fabd17` net: dsa: bcm_sf2: Fix possible memory leak in bcm_sf2_mdio_register() \| * `9c3d276fa8` i40e: prevent crash on probe if hw registers have invalid values \| * `f0ab9b0922` octeon_ep: update BQL sent bytes before ringing doorbell \| * `1a68d44011` net: usb: smsc95xx: Fix an error code in smsc95xx_reset() \| * `2c6451d665` ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr \| * `9570bee678` tun: prevent negative ifindex \| * `8b9c79c0ec` tcp: Fix listen() warning with v4-mapped-v6 address. \| * `f534a513e8` tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb \| * `4e1f3457e9` tcp: fix excessive TLP and RACK timeouts from HZ rounding \| * `df5ee37bf2` net: rfkill: gpio: prevent value glitch during probe \| * `2a6fc637c6` net: ipv6: fix return value check in esp_remove_trailer \| * `55d794cef3` net: ipv4: fix return value check in esp_remove_trailer \| * `49b9165ead` wifi: cfg80211: use system_unbound_wq for wiphy work \| * `405dbaf049` xfrm: interface: use DEV_STATS_INC() \| * `b372db2b8d` xfrm: fix a data-race in xfrm_gen_index() \| * `3065fa2cdd` xfrm: fix a data-race in xfrm_lookup_with_ifid() \| * `2c7ec9e9ea` qed: fix LL2 RX buffer allocation \| * `cc87f4db14` ASoC: codecs: wcd938x: fix resource leaks on bind errors \| * `8092aed623` ASoC: codecs: wcd938x: fix unbind tear down order \| * `b2974b20e4` ASoC: codecs: wcd938x: drop bogus bind error handling \| * `569afdedde` ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors \| * `0d912daab4` ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind \| * `d496b6638c` ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx \| * `086babbbf8` ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV \| * `bcf883e244` ALSA: hda/realtek - Fixed ASUS platform headset Mic issue \| * `a9519099e3` drm/mediatek: Correctly free sg_table in gem prime vmap \| * `add2eeda1d` drm/i915: Retry gtt fault when out of fence registers \| * `f691ec5a54` nvmet-tcp: Fix a possible UAF in queue intialization setup \| * `02322c5177` netfilter: nft_payload: fix wrong mac header matching \| * `36a315c923` fs/ntfs3: fix deadlock in mark_as_free_ex \| * `c1f2638e31` fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea() \| * `fb80a28fef` fs/ntfs3: Fix possible null-pointer dereference in hdr_find_e() \| * `d4ae85b883` mptcp: more conservative check for zero probes \| * `80990979a9` tcp: check mptcp-level constraints for backlog coalescing \| * `f7e65c03d5` audit,io_uring: io_uring openat triggers audit reference count underflow \| * `a556a0df8d` x86: KVM: SVM: refresh AVIC inhibition in svm_leave_nested() \| * `54f030271d` x86: KVM: SVM: add support for Invalid IPI Vector interception \| * `482565df35` KVM: x86: Constrain guest-supported xfeatures only at KVM_GET_XSAVE{2} \| * `20695711e2` x86/fpu: Allow caller to constrain xfeatures when copying to uabi buffer \| * `57d0639f60` x86/sev: Check for user-space IOIO pointing to kernel space \| * `def94eb9a8` x86/sev: Check IOBM for IOIO exceptions from user-space \| * `95ff590b80` x86/sev: Disable MMIO emulation from user mode \| * `19ffa9b251` KVM: x86: Mask LVTPC when handling a PMI \| * `d11cfd1f30` regmap: fix NULL deref on lookup \| * `d7dbdbe380` nfc: nci: fix possible NULL pointer dereference in send_acknowledge() \| * `fb8e1608b0` btrfs: fix stripe length calculation for non-zoned data chunk allocation \| * `753ef5ef4c` net/smc: return the right falback reason when prefix checks fail \| * `d994502fdc` ice: reset first in crash dump kernels \| * `0f8d381ada` ice: fix over-shifted variable \| * `bbc5c96f82` Bluetooth: avoid memcmp() out of bounds warning \| * `feffabdd0a` Bluetooth: hci_event: Fix coding style \| * `99ccf8d79b` Bluetooth: vhci: Fix race when opening vhci device \| * `25e5d28830` Bluetooth: Fix a refcnt underflow problem for hci_conn \| * `faa6366605` Bluetooth: Reject connection with the device which has same BD_ADDR \| * `8d76a44d26` Bluetooth: hci_event: Ignore NULL link key \| * `84523aeeea` igc: Fix race condition in PTP tx code \| * `ff996d61dd` igc: Add condition for qbv_config_change_errors counter \| * `cd7b19dc5f` igc: Add qbv_config_change_errors counter \| * `88421f4741` igc: Remove reset adapter task for i226 during disable tsn config \| * `3c3418a586` igc: enable Qbv configuration for 2nd GCL \| * `8420fe4dd2` igc: remove I226 Qbv BaseTime restriction \| * `db4677b350` lib/Kconfig.debug: do not enable DEBUG_PREEMPT by default * \| `316250b759` Revert "net: macsec: indicate next pn update when offloading" * \| `394fcccbe1` Revert "net: phy: mscc: macsec: reject PN update requests" * \| `a36206a6bb` Revert "net/mlx5e: macsec: use update_pn flag instead of PN comparation" * \| `b0e44b2726` Revert "tcp: enforce receive buffer memory limits by allowing the tcp window to shrink" * \| `3858124ea0` Merge 6.1.59 into android14-6.1-lts \|\\| \| * `7d24402875` Linux 6.1.59 \| * `eb26fa974c` ALSA: hda/realtek - Fixed two speaker platform \| * `54357fcafa` powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() \| * `0afcc9d4a1` powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE \| * `9a995e11b2` dmaengine: mediatek: Fix deadlock caused by synchronize_irq() \| * `01b19fc662` dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq \| * `5b784489c8` x86/alternatives: Disable KASAN in apply_alternatives() \| * `033c0d5101` usb: cdnsp: Fixes issue with dequeuing not queued requests \| * `49fbc18378` usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call \| * `e5588fb391` usb: gadget: udc-xilinx: replace memcpy with memcpy_toio \| * `71d323072a` usb: typec: ucsi: Clear EVENT_PENDING bit if ucsi_send_command fails \| * `4d85f1ce6c` usb: typec: altmodes/displayport: Signal hpd low when exiting mode \| * `bc67250859` counter: microchip-tcb-capture: Fix the use of internal GCLK logic \| * `0e3953b577` counter: chrdev: fix getting array extensions \| * `9f6b391b04` scsi: ufs: core: Correct clear TM error log \| * `97306abdea` pinctrl: avoid unsafe code pattern in find_pinctrl() \| * `d67b5a2b97` dma-buf: add dma_fence_timestamp helper \| * `cb8f1dd1b7` cgroup: Remove duplicates in cgroup v1 tasks file \| * `57e7696b78` usb: typec: ucsi: Use GET_CAPABILITY attributes data to set power supply scope \| * `062f16c4dd` nfp: flower: avoid rmmod nfp crash issues \| * `1db0724a01` mctp: perform route lookups under a RCU read-side lock \| * `60c3e7a00d` tee: amdtee: fix use-after-free vulnerability in amdtee_close_session \| * `862aa98181` Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case \| * `fbfb99ac5d` Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table \| * `9c6a11a05b` Input: xpad - add PXN V900 support \| * `211f71c1c0` Input: psmouse - fix fast_reconnect function for PS/2 mode \| * `2efe67c581` Input: powermate - fix use-after-free in powermate_config_complete \| * `4d6c1845cb` ceph: fix type promotion bug on 32bit systems \| * `9f43481c0d` ceph: fix incorrect revoked caps assert in ceph_fill_file_size() \| * `086d885c20` libceph: use kernel_connect() \| * `8ac2689502` powerpc/47x: Fix 47x syscall return crash \| * `434e3522b9` thunderbolt: Restart XDomain discovery handshake after failure \| * `5d206a77d4` thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding \| * `0cf7ee2cc6` thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge \| * `23122e0c0e` mcb: remove is_added flag from mcb_device struct \| * `125f495fa6` x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs \| * `3863989497` perf/x86/lbr: Filter vsyscall addresses \| * `55b51187d2` ksmbd: not allow to open file if delelete on close bit is set \| * `ac2d5e70fb` ACPI: EC: Add quirk for the HP Pavilion Gaming 15-dk1xxx \| * `7aac2f2c00` ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA \| * `f041091756` drm/amd/display: Don't set dpms_off for seamless boot \| * `a61d905a86` drm/amdgpu: add missing NULL check \| * `0fb82afee5` drm/atomic-helper: relax unregistered connector check \| * `5bab104963` arm64: dts: mediatek: mt8195-demo: update and reorder reserved memory regions \| * `f17e00fb0c` arm64: dts: mediatek: mt8195-demo: fix the memory size to 8GB \| * `ff42d244b3` iio: addac: Kconfig: update ad74413r selections \| * `7d4ff34b6c` iio: pressure: ms5611: ms5611_prom_is_valid false negative bug \| * `b166ce5275` iio: pressure: dps310: Adjust Timeout Settings \| * `e93a7677f0` iio: admv1013: add mixer_vgate corner cases \| * `8ab33ae244` iio: dac: ad3552r: Correct device IDs \| * `a6bd5e1653` iio: adc: imx8qxp: Fix address for command buffer registers \| * `92426b1f5f` iio: imu: bno055: Fix missing Kconfig dependencies \| * `187939163b` iio: pressure: bmp280: Fix NULL pointer exception \| * `88a204cc0c` usb: musb: Modify the "HWVers" register address \| * `fecb419c62` usb: musb: Get the musb_qh poniter after musb_giveback \| * `fb9895ab95` usb: hub: Guard against accesses to uninitialized BOS descriptors \| * `1edbf4b285` usb: cdns3: Modify the return value of cdns_set_active () to void when CONFIG_PM_SLEEP is disabled \| * `3571910368` usb: dwc3: Soft reset phy on probe for host \| * `ea9ae69b0e` net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read \| * `c5bfe67d9f` usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer \| * `f049b10aff` dmaengine: stm32-mdma: set in_flight_bytes in case CRQA flag is set \| * `721dbbabf1` dmaengine: stm32-mdma: use Link Address Register to compute residue \| * `fe15819408` dmaengine: stm32-dma: fix residue in case of MDMA chaining \| * `1e3b981a25` dmaengine: stm32-dma: fix stm32_dma_prep_slave_sg in case of MDMA chaining \| * `8e7dfe9c2a` dmaengine: stm32-mdma: abort resume if no ongoing transfer \| * `0796c53424` tcp: enforce receive buffer memory limits by allowing the tcp window to shrink \| * `55027c1d99` workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() \| * `853dda54ba` nfc: nci: assert requested protocol is valid \| * `684accd26d` pinctrl: renesas: rzn1: Enable missing PINMUX \| * `f05befe5c4` net/smc: Fix pos miscalculation in statistics \| * `e4f2611f07` net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() \| * `ab8075d3a4` net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp \| * `04753d5ae2` ixgbe: fix crash with empty VF macvlan list \| * `89be6ad344` net/mlx5e: macsec: use update_pn flag instead of PN comparation \| * `a698195f3a` net: phy: mscc: macsec: reject PN update requests \| * `0d86ad068c` net: macsec: indicate next pn update when offloading \| * `50bce6a051` net: refine debug info in skb_checksum_help() \| * `30ca523f28` bpf: Fix verifier log for async callback return values \| * `e1f1e3cc5b` drm/vmwgfx: fix typo of sizeof argument \| * `5bfc5a28b5` riscv, bpf: Sign-extend return values \| * `72ae139546` riscv, bpf: Factor out emit_call for kernel and bpf context \| * `30a8354602` xen-netback: use default TX queue size for vifs \| * `469bef8129` mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type \| * `217efe32a4` ieee802154: ca8210: Fix a potential UAF in ca8210_probe \| * `6f6fa8061f` ravb: Fix use-after-free issue in ravb_tx_timeout_work() \| * `3f9295ad7f` ravb: Fix up dma_free_coherent() call in ravb_remove() \| * `cfe535ee69` arm64: dts: mediatek: mt8195: Set DSU PMU status to fail \| * `53c6dc71bf` can: sun4i_can: Only show Kconfig if ARCH_SUNXI is set \| * `789d125c0e` can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior \| * `881050b25b` net: dsa: qca8k: fix potential MDIO bus conflict when accessing internal PHYs via management frames \| * `6f901f8448` phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers \| * `e173d9a2e5` phy: lynx-28g: lock PHY while performing CDR lock workaround \| * `e52c81a9e3` phy: lynx-28g: cancel the CDR check work item on the remove path \| * `5f9d0edff2` drm/msm/dp: Add newlines to debug printks \| * `61b595ede9` drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow \| * `3979a9e572` drm/msm/dsi: fix irq_of_parse_and_map() error checking \| * `3de09684de` drm/msm/dsi: skip the wait for video mode done if not applicable \| * `82cb81ea96` drm/msm/dp: do not reinitialize phy unless retry during link training \| * `6c18c386fd` pinctrl: nuvoton: wpcm450: fix out of bounds write \| * `37157830a9` ALSA: hda/realtek - ALC287 merge RTK codec with CS CS35L41 AMP \| * `171b791cc2` ALSA: hda/realtek - ALC287 I2S speaker platform support \| * `a8b85e47e3` ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx \| * `e225f67d49` ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED \| * `8f7bb2b77b` ASoC: fsl_sai: Don't disable bitclock for i.MX8MP \| * `aacc508dd3` ASoC: fsl_sai: MCLK bind with TX/RX enable bit \| * `8276d65cf7` ASoC: Use of_property_read_bool() for boolean properties \| * `8611606c76` ASoC: Intel: soc-acpi: Add entry for sof_es8336 in MTL match table. \| * `4a250b3492` ASoC: Intel: sof_sdw: add support for SKU 0B14 \| * `307bbbbb94` ASoC: Intel: soc-acpi: Add entry for HDMI_In capture support in MTL match table \| * `988fba279d` ASoC: simple-card-utils: fixup simple_util_startup() error handling \| * `e3353ad7db` ASoC: SOF: amd: fix for firmware reload failure after playback \| * `2aa53213b6` ALSA: hda/realtek: Change model for Intel RVP board \| * `4cb0984557` ALSA: usb-audio: Fix microphone sound on Nexigo webcam. \| * `0f44423e35` ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset \| * `3746b878ef` KEYS: trusted: Remove redundant static calls usage \| * `b86ac71abb` irqchip: renesas-rzg2l: Fix logic to clear TINT interrupt source \| * `d684418750` dt-bindings: interrupt-controller: renesas,rzg2l-irqc: Update description for '#interrupt-cells' property \| * `f4eaaa30d0` arm64: dts: qcom: sm8150: extend the size of the PDC resource \| * `020958c946` net: prevent address rewrite in kernel_bind() \| * `8fcdf7da9d` ata: libata-scsi: Disable scsi device manage_system_start_stop \| * `abc918831a` ASoC: amd: yc: Fix non-functional mic on Lenovo 82YM \| * `12a820a992` quota: Fix slow quotaoff \| * `fd72ac9556` HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect \| * `87aa3ca497` scsi: Do not rescan devices with a suspended queue \| * `342f321af8` platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section mismatch warning \| * `af21c9119a` platform/x86: think-lmi: Fix reference leak \| * `1c8f6c7b83` perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7 \| * `3aade96e0c` RDMA/cxgb4: Check skb value for failure to allocate \| * `f175665385` drm/i915: Don't set PIPE_CONTROL_FLUSH_L3 for aux inval \| * `f2060a3a59` mptcp: fix delegated action races \| * `b67d7b1bfc` net: mana: Fix TX CQE error handling * \| `d58a224aca` Merge 6.1.58 into android14-6.1-lts \|/ * `adc4d740ad` Linux 6.1.58 * `38fd36728f` lib/test_meminit: fix off-by-one error in test_pages() * `ff74bdc838` Revert "NFS: Fix error handling for O_DIRECT write scheduling" * `b0cee281c4` Revert "NFS: Fix O_DIRECT locking issues" * `ebf5841ac1` Revert "NFS: More O_DIRECT accounting fixes for error paths" * `506cf335d9` Revert "NFS: Use the correct commit info in nfs_join_page_group()" * `e8db8b5581` Revert "NFS: More fixes for nfs_direct_write_reschedule_io()" Change-Id: Id55c4007c922e5c8a6c5220f2f615a0d9b422cde Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-01-09 16:57:00 +00:00
Jiri Olsa	ec46fe0ac7	UPSTREAM: bpf: Fix prog_array_map_poke_run map poke update commit 4b7de801606e504e69689df71475d27e35336fb3 upstream. Lee pointed out issue found by syscaller [0] hitting BUG in prog array map poke update in prog_array_map_poke_run function due to error value returned from bpf_arch_text_poke function. There's race window where bpf_arch_text_poke can fail due to missing bpf program kallsym symbols, which is accounted for with check for -EINVAL in that BUG_ON call. The problem is that in such case we won't update the tail call jump and cause imbalance for the next tail call update check which will fail with -EBUSY in bpf_arch_text_poke. I'm hitting following race during the program load: CPU 0 CPU 1 bpf_prog_load bpf_check do_misc_fixups prog_array_map_poke_track map_update_elem bpf_fd_array_map_update_elem prog_array_map_poke_run bpf_arch_text_poke returns -EINVAL bpf_prog_kallsyms_add After bpf_arch_text_poke (CPU 1) fails to update the tail call jump, the next poke update fails on expected jump instruction check in bpf_arch_text_poke with -EBUSY and triggers the BUG_ON in prog_array_map_poke_run. Similar race exists on the program unload. Fixing this by moving the update to bpf_arch_poke_desc_update function which makes sure we call __bpf_arch_text_poke that skips the bpf address check. Each architecture has slightly different approach wrt looking up bpf address in bpf_arch_text_poke, so instead of splitting the function or adding new 'checkip' argument in previous version, it seems best to move the whole map_poke_run update as arch specific code. [0] https://syzkaller.appspot.com/bug?extid=97a4fe20470e9bc30810 Bug: 309551558 Fixes: `ebf7d1f508` ("bpf, x64: rework pro/epilogue and tailcall handling in JIT") Reported-by: syzbot+97a4fe20470e9bc30810@syzkaller.appspotmail.com Signed-off-by: Jiri Olsa <jolsa@kernel.org> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Yonghong Song <yonghong.song@linux.dev> Cc: Lee Jones <lee@kernel.org> Cc: Maciej Fijalkowski <maciej.fijalkowski@intel.com> Link: https://lore.kernel.org/bpf/20231206083041.1306660-2-jolsa@kernel.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit `57a6b0a464`) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I251c3da579e5d48cd7de4043913fd42d0671d6b5	2024-01-08 17:00:17 +00:00
Greg Kroah-Hartman	c9b484c69d	This is the 6.1.68 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmV57F0ACgkQONu9yGCS aT5Ihg//f5xvyjEEbZyE7tFaBBgx8ceQCtteRyi+Jw3Hy65/9neETij0t97IhG37 I89TIAddzNIl51ifl8UYZMWI780HbnW1YdbVLMElbngbmT5rHzIsGpAVCC+SDmMK NPWXrqWIw6yTVSbTwqKIqOLlEiLxGjdWnPxjoMXBVyje+EcmANBe+fe9qkLq98XC ZgzrRZyriS8QLMMscy/GmdxIyC32nxebdHDwwE6qgYM8GWNfqLLektX798VGFhra ByR9bvsJ0PD5m9siCGcx37lVusJDLMjJp4FtMIFTrH63i0sMQm7HKiggJmbCm4lH Sgbo4iwvSVa2xf1glPJagE9tiah5b0feLqgrQf/ONO2PdCjcERN47472IcQgRvQ+ SDYKScZBSp1/Jd063dHiK/u79uxEBFEdisAkPG2MstjCySEDuhvDrV5R0iKDpQBP y2FXb4RArqZFrGwS4Zfxx/EQnj3MYJ11a4AE5I0yUGIj7vrFdddayBDBVdwhog84 QhHPH0F/eC/zSMATYSQSCZTTSZ2UoR8NODXyOryoH5tmXlgxXWKq1oFi5nUnysoP SkGDT0dg+kbReQNA+eyj5qTS4lzincIyP2B4Ple9d75zpx1UENlqVm1xvWLccyFt 3eV/XNRg8dAapsbqvEtW+iev6izutWgcG6p1hToObnbg5uHy6fI= =+iTJ -----END PGP SIGNATURE----- Merge 6.1.68 into android14-6.1-lts Changes in 6.1.68 vdpa/mlx5: preserve CVQ vringh index hrtimers: Push pending hrtimers away from outgoing CPU earlier i2c: designware: Fix corrupted memory seen in the ISR netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test zstd: Fix array-index-out-of-bounds UBSAN warning tg3: Move the [rt]x_dropped counters to tg3_napi tg3: Increment tx_dropped in tg3_tso_bug() kconfig: fix memory leak from range properties drm/amdgpu: correct chunk_ptr to a pointer to chunk. x86: Introduce ia32_enabled() x86/coco: Disable 32-bit emulation by default on TDX and SEV x86/entry: Convert INT 0x80 emulation to IDTENTRY x86/entry: Do not allow external 0x80 interrupts x86/tdx: Allow 32-bit emulation by default dt: dt-extract-compatibles: Handle cfile arguments in generator function dt: dt-extract-compatibles: Don't follow symlinks when walking tree platform/x86: asus-wmi: Move i8042 filter install to shared asus-wmi code of: dynamic: Fix of_reconfig_get_state_change() return value documentation platform/x86: wmi: Skip blocks with zero instances ipv6: fix potential NULL deref in fib6_add() octeontx2-pf: Add missing mutex lock in otx2_get_pauseparam octeontx2-af: Check return value of nix_get_nixlf before using nixlf hv_netvsc: rndis_filter needs to select NLS r8152: Rename RTL8152_UNPLUG to RTL8152_INACCESSIBLE r8152: Add RTL8152_INACCESSIBLE checks to more loops r8152: Add RTL8152_INACCESSIBLE to r8156b_wait_loading_flash() r8152: Add RTL8152_INACCESSIBLE to r8153_pre_firmware_1() r8152: Add RTL8152_INACCESSIBLE to r8153_aldps_en() mlxbf-bootctl: correctly identify secure boot with development keys platform/mellanox: Add null pointer checks for devm_kasprintf() platform/mellanox: Check devm_hwmon_device_register_with_groups() return value arcnet: restoring support for multiple Sohard Arcnet cards octeontx2-pf: consider both Rx and Tx packet stats for adaptive interrupt coalescing net: stmmac: fix FPE events losing xsk: Skip polling event check for unbound socket octeontx2-af: fix a use-after-free in rvu_npa_register_reporters i40e: Fix unexpected MFS warning message iavf: validate tx_coalesce_usecs even if rx_coalesce_usecs is zero net: bnxt: fix a potential use-after-free in bnxt_init_tc tcp: fix mid stream window clamp. ionic: fix snprintf format length warning ionic: Fix dim work handling in split interrupt mode ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit() net: atlantic: Fix NULL dereference of skb pointer in net: hns: fix wrong head when modify the tx feature when sending packets net: hns: fix fake link up on xge port octeontx2-af: Adjust Tx credits when MCS external bypass is disabled octeontx2-af: Fix mcs sa cam entries size octeontx2-af: Fix mcs stats register address octeontx2-af: Add missing mcs flr handler call octeontx2-af: Update Tx link register range dt-bindings: interrupt-controller: Allow #power-domain-cells netfilter: nft_exthdr: add boolean DCCP option matching netfilter: nf_tables: fix 'exist' matching on bigendian arches netfilter: nf_tables: bail out on mismatching dynset and set expressions netfilter: nf_tables: validate family when identifying table via handle netfilter: xt_owner: Fix for unsafe access of sk->sk_socket tcp: do not accept ACK of bytes we never sent bpf: sockmap, updating the sg structure should also update curr psample: Require 'CAP_NET_ADMIN' when joining "packets" group drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group mm/damon/sysfs: eliminate potential uninitialized variable warning tee: optee: Fix supplicant based device enumeration RDMA/hns: Fix unnecessary err return when using invalid congest control algorithm RDMA/irdma: Do not modify to SQD on error RDMA/irdma: Add wait for suspend on SQD arm64: dts: rockchip: Expand reg size of vdec node for RK3328 arm64: dts: rockchip: Expand reg size of vdec node for RK3399 ASoC: fsl_sai: Fix no frame sync clock issue on i.MX8MP RDMA/rtrs-srv: Do not unconditionally enable irq RDMA/rtrs-clt: Start hb after path_up RDMA/rtrs-srv: Check return values while processing info request RDMA/rtrs-srv: Free srv_mr iu only when always_invalidate is true RDMA/rtrs-srv: Destroy path files after making sure no IOs in-flight RDMA/rtrs-clt: Fix the max_send_wr setting RDMA/rtrs-clt: Remove the warnings for req in_use check RDMA/bnxt_re: Correct module description string RDMA/irdma: Refactor error handling in create CQP RDMA/irdma: Fix UAF in irdma_sc_ccq_get_cqe_info() hwmon: (acpi_power_meter) Fix 4.29 MW bug ASoC: codecs: lpass-tx-macro: set active_decimator correct default value hwmon: (nzxt-kraken2) Fix error handling path in kraken2_probe() ASoC: wm_adsp: fix memleak in wm_adsp_buffer_populate RDMA/core: Fix umem iterator when PAGE_SIZE is greater then HCA pgsz RDMA/irdma: Avoid free the non-cqp_request scratch drm/bridge: tc358768: select CONFIG_VIDEOMODE_HELPERS arm64: dts: imx8mq: drop usb3-resume-missing-cas from usb arm64: dts: imx8mp: imx8mq: Add parkmode-disable-ss-quirk on DWC3 ARM: dts: imx6ul-pico: Describe the Ethernet PHY clock tracing: Fix a warning when allocating buffered events fails scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() ARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init ARM: dts: imx7: Declare timers compatible with fsl,imx6dl-gpt ARM: dts: imx28-xea: Pass the 'model' property riscv: fix misaligned access handling of C.SWSP and C.SDSP md: introduce md_ro_state md: don't leave 'MD_RECOVERY_FROZEN' in error path of md_set_readonly() iommu: Avoid more races around device probe rethook: Use __rcu pointer for rethook::handler kprobes: consistent rcu api usage for kretprobe holder ASoC: amd: yc: Fix non-functional mic on ASUS E1504FA io_uring/af_unix: disable sending io_uring over sockets nvme-pci: Add sleep quirk for Kingston drives io_uring: fix mutex_unlock with unreferenced ctx ALSA: usb-audio: Add Pioneer DJM-450 mixer controls ALSA: pcm: fix out-of-bounds in snd_pcm_state_names ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5 ALSA: hda/realtek: add new Framework laptop to quirks ALSA: hda/realtek: Add Framework laptop 16 to quirks ring-buffer: Test last update in 32bit version of __rb_time_read() nilfs2: fix missing error check for sb_set_blocksize call nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() cgroup_freezer: cgroup_freezing: Check if not frozen checkstack: fix printed address tracing: Always update snapshot buffer size tracing: Disable snapshot buffer when stopping instance tracers tracing: Fix incomplete locking when disabling buffered events tracing: Fix a possible race when disabling buffered events packet: Move reference count in packet_sock to atomic_long_t r8169: fix rtl8125b PAUSE frames blasting when suspended regmap: fix bogus error on regcache_sync success platform/surface: aggregator: fix recv_buf() return value hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write mm: fix oops when filemap_map_pmd() without prealloc_pte powercap: DTPM: Fix missing cpufreq_cpu_put() calls md/raid6: use valid sector values to determine if an I/O should wait on the reshape arm64: dts: mediatek: mt7622: fix memory node warning check arm64: dts: mediatek: mt8183-kukui-jacuzzi: fix dsi unnecessary cells properties arm64: dts: mediatek: cherry: Fix interrupt cells for MT6360 on I2C7 arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names arm64: dts: mediatek: mt8195: Fix PM suspend/resume with venc clocks arm64: dts: mediatek: mt8183: Fix unit address for scp reserved memory arm64: dts: mediatek: mt8183: Move thermal-zones to the root node arm64: dts: mediatek: mt8183-evb: Fix unit_address_vs_reg warning on ntc binder: fix memory leaks of spam and pending work coresight: etm4x: Make etm4_remove_dev() return void coresight: etm4x: Remove bogous __exit annotation for some functions hwtracing: hisi_ptt: Add dummy callback pmu::read() misc: mei: client.c: return negative error code in mei_cl_write misc: mei: client.c: fix problem of return '-EOVERFLOW' in mei_cl_write LoongArch: BPF: Don't sign extend memory load operand LoongArch: BPF: Don't sign extend function return value ring-buffer: Force absolute timestamp on discard of event tracing: Set actual size after ring buffer resize tracing: Stop current tracer when resizing buffer parisc: Reduce size of the bug_table on 64-bit kernel by half parisc: Fix asm operand number out of range build error in bug table arm64: dts: mediatek: add missing space before { arm64: dts: mt8183: kukui: Fix underscores in node names perf: Fix perf_event_validate_size() x86/sev: Fix kernel crash due to late update to read-only ghcb_version gpiolib: sysfs: Fix error handling on failed export drm/amdgpu: fix memory overflow in the IB test drm/amd/amdgpu: Fix warnings in amdgpu/amdgpu_display.c drm/amdgpu: correct the amdgpu runtime dereference usage count drm/amdgpu: Update ras eeprom support for smu v13_0_0 and v13_0_10 drm/amdgpu: Add EEPROM I2C address support for ip discovery drm/amdgpu: Remove redundant I2C EEPROM address drm/amdgpu: Decouple RAS EEPROM addresses from chips drm/amdgpu: Add support for RAS table at 0x40000 drm/amdgpu: Remove second moot switch to set EEPROM I2C address drm/amdgpu: Return from switch early for EEPROM I2C address drm/amdgpu: simplify amdgpu_ras_eeprom.c drm/amdgpu: Add I2C EEPROM support on smu v13_0_6 drm/amdgpu: Update EEPROM I2C address for smu v13_0_0 usb: gadget: f_hid: fix report descriptor allocation serial: 8250_dw: Add ACPI ID for Granite Rapids-D UART parport: Add support for Brainboxes IX/UC/PX parallel cards cifs: Fix non-availability of dedup breaking generic/304 Revert "xhci: Loosen RPM as default policy to cover for AMD xHC 1.1" smb: client: fix potential NULL deref in parse_dfs_referrals() usb: typec: class: fix typec_altmode_put_partner to put plugs ARM: PL011: Fix DMA support serial: sc16is7xx: address RX timeout interrupt errata serial: 8250: 8250_omap: Clear UART_HAS_RHR_IT_DIS bit serial: 8250: 8250_omap: Do not start RX DMA on THRI interrupt serial: 8250_omap: Add earlycon support for the AM654 UART controller devcoredump: Send uevent once devcd is ready x86/CPU/AMD: Check vendor in the AMD microcode callback USB: gadget: core: adjust uevent timing on gadget unbind cifs: Fix flushing, invalidation and file size with copy_file_range() cifs: Fix flushing, invalidation and file size with FICLONE MIPS: kernel: Clear FPU states when setting up kernel threads KVM: s390/mm: Properly reset no-dat KVM: SVM: Update EFER software model on CR0 trap for SEV-ES MIPS: Loongson64: Reserve vgabios memory on boot MIPS: Loongson64: Handle more memory types passed from firmware MIPS: Loongson64: Enable DMA noncoherent support netfilter: nft_set_pipapo: skip inactive elements during set walk riscv: Kconfig: Add select ARM_AMBA to SOC_STARFIVE drm/i915/display: Drop check for doublescan mode in modevalid drm/i915/lvds: Use REG_BIT() & co. drm/i915/sdvo: stop caching has_hdmi_monitor in struct intel_sdvo drm/i915: Skip some timing checks on BXT/GLK DSI transcoders Linux 6.1.68 Change-Id: I0a824071a80b24dc4a2e0077f305b7cac42235b8 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-01-05 08:40:52 +00:00
Treehugger Robot	59f96234bf	Merge "Merge 6.1.66 into android14-6.1-lts" into android14-6.1-lts	2024-01-04 21:47:02 +00:00
Suren Baghdasaryan	6c8f710857	FROMGIT: arch/mm/fault: fix major fault accounting when retrying under per-VMA lock A test [1] in Android test suite started failing after [2] was merged. It turns out that after handling a major fault under per-VMA lock, the process major fault counter does not register that fault as major. Before [2] read faults would be done under mmap_lock, in which case FAULT_FLAG_TRIED flag is set before retrying. That in turn causes mm_account_fault() to account the fault as major once retry completes. With per-VMA locks we often retry because a fault can't be handled without locking the whole mm using mmap_lock. Therefore such retries do not set FAULT_FLAG_TRIED flag. This logic does not work after [2] because we can now handle read major faults under per-VMA lock and upon retry the fact there was a major fault gets lost. Fix this by setting FAULT_FLAG_TRIED after retrying under per-VMA lock if VM_FAULT_MAJOR was returned. Ideally we would use an additional VM_FAULT bit to indicate the reason for the retry (could not handle under per-VMA lock vs other reason) but this simpler solution seems to work, so keeping it simple. [1] https://cs.android.com/android/platform/superproject/+/master:test/vts-testcase/kernel/api/drop_caches_prop/drop_caches_test.cpp [2] https://lore.kernel.org/all/20231006195318.4087158-6-willy@infradead.org/ Link: https://lkml.kernel.org/r/20231226214610.109282-1-surenb@google.com Fixes: 12214eba1992 ("mm: handle read faults under the VMA lock") Signed-off-by: Suren Baghdasaryan <surenb@google.com> Cc: Matthew Wilcox <willy@infradead.org> Cc: Alexander Gordeev <agordeev@linux.ibm.com> Cc: Andy Lutomirski <luto@kernel.org> Cc: Catalin Marinas <catalin.marinas@arm.com> Cc: Christophe Leroy <christophe.leroy@csgroup.eu> Cc: Dave Hansen <dave.hansen@linux.intel.com> Cc: Gerald Schaefer <gerald.schaefer@linux.ibm.com> Cc: Michael Ellerman <mpe@ellerman.id.au> Cc: Palmer Dabbelt <palmer@dabbelt.com> Cc: Peter Zijlstra <peterz@infradead.org> Cc: Will Deacon <will@kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 46e714c729c8d1d8110bc0545d7ffe8a759c9dc0 https://git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm mm-hotfixes-stable) Bug: 317385399 Change-Id: Ic7e97bf610dcabb7d3ac2306b2f1213be0ddd269 Signed-off-by: Suren Baghdasaryan <surenb@google.com>	2024-01-03 20:45:51 +00:00
Thomas Gleixner	41f4ff9fe2	x86/alternatives: Sync core before enabling interrupts commit 3ea1704a92967834bf0e64ca1205db4680d04048 upstream. text_poke_early() does: local_irq_save(flags); memcpy(addr, opcode, len); local_irq_restore(flags); sync_core(); That's not really correct because the synchronization should happen before interrupts are re-enabled to ensure that a pending interrupt observes the complete update of the opcodes. It's not entirely clear whether the interrupt entry provides enough serialization already, but moving the sync_core() invocation into interrupt disabled region does no harm and is obviously correct. Fixes: `6fffacb303` ("x86/alternatives, jumplabel: Use text_poke_early() before mm_init()") Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de> Acked-by: Peter Zijlstra (Intel) <peterz@infradead.org> Cc: <stable@kernel.org> Link: https://lore.kernel.org/r/ZT6narvE%2BLxX%2B7Be@windriver.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2024-01-01 12:39:08 +00:00
Arnd Bergmann	903bb0c7b8	x86/xen: add CPU dependencies for 32-bit build [ Upstream commit 93cd0597649844a0fe7989839a3202735fb3ae67 ] Xen only supports modern CPUs even when running a 32-bit kernel, and it now requires a kernel built for a 64 byte (or larger) cache line: In file included from <command-line>: In function 'xen_vcpu_setup', inlined from 'xen_vcpu_setup_restore' at arch/x86/xen/enlighten.c:111:3, inlined from 'xen_vcpu_restore' at arch/x86/xen/enlighten.c:141:3: include/linux/compiler_types.h:435:45: error: call to '__compiletime_assert_287' declared with attribute error: BUILD_BUG_ON failed: sizeof(vcpup) > SMP_CACHE_BYTES arch/x86/xen/enlighten.c:166:9: note: in expansion of macro 'BUILD_BUG_ON' 166 \| BUILD_BUG_ON(sizeof(vcpup) > SMP_CACHE_BYTES); \| ^~~~~~~~~~~~ Enforce the dependency with a whitelist of CPU configurations. In normal distro kernels, CONFIG_X86_GENERIC is enabled, and this works fine. When this is not set, still allow Xen to be built on kernels that target a 64-bit capable CPU. Fixes: db2832309a82 ("x86/xen: fix percpu vcpu_info allocation") Signed-off-by: Arnd Bergmann <arnd@arndb.de> Reviewed-by: Juergen Gross <jgross@suse.com> Tested-by: Alyssa Ross <hi@alyssa.is> Link: https://lore.kernel.org/r/20231204084722.3789473-1-arnd@kernel.org Signed-off-by: Juergen Gross <jgross@suse.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-01 12:38:59 +00:00
Jiri Olsa	57a6b0a464	bpf: Fix prog_array_map_poke_run map poke update commit 4b7de801606e504e69689df71475d27e35336fb3 upstream. Lee pointed out issue found by syscaller [0] hitting BUG in prog array map poke update in prog_array_map_poke_run function due to error value returned from bpf_arch_text_poke function. There's race window where bpf_arch_text_poke can fail due to missing bpf program kallsym symbols, which is accounted for with check for -EINVAL in that BUG_ON call. The problem is that in such case we won't update the tail call jump and cause imbalance for the next tail call update check which will fail with -EBUSY in bpf_arch_text_poke. I'm hitting following race during the program load: CPU 0 CPU 1 bpf_prog_load bpf_check do_misc_fixups prog_array_map_poke_track map_update_elem bpf_fd_array_map_update_elem prog_array_map_poke_run bpf_arch_text_poke returns -EINVAL bpf_prog_kallsyms_add After bpf_arch_text_poke (CPU 1) fails to update the tail call jump, the next poke update fails on expected jump instruction check in bpf_arch_text_poke with -EBUSY and triggers the BUG_ON in prog_array_map_poke_run. Similar race exists on the program unload. Fixing this by moving the update to bpf_arch_poke_desc_update function which makes sure we call __bpf_arch_text_poke that skips the bpf address check. Each architecture has slightly different approach wrt looking up bpf address in bpf_arch_text_poke, so instead of splitting the function or adding new 'checkip' argument in previous version, it seems best to move the whole map_poke_run update as arch specific code. [0] https://syzkaller.appspot.com/bug?extid=97a4fe20470e9bc30810 Fixes: `ebf7d1f508` ("bpf, x64: rework pro/epilogue and tailcall handling in JIT") Reported-by: syzbot+97a4fe20470e9bc30810@syzkaller.appspotmail.com Signed-off-by: Jiri Olsa <jolsa@kernel.org> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Yonghong Song <yonghong.song@linux.dev> Cc: Lee Jones <lee@kernel.org> Cc: Maciej Fijalkowski <maciej.fijalkowski@intel.com> Link: https://lore.kernel.org/bpf/20231206083041.1306660-2-jolsa@kernel.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2024-01-01 12:38:52 +00:00
Saurabh Sengar	d6c02295c8	x86/hyperv: Fix the detection of E820_TYPE_PRAM in a Gen2 VM [ Upstream commit 7e8037b099c0bbe8f2109dc452dbcab8d400fc53 ] A Gen2 VM doesn't support legacy PCI/PCIe, so both raw_pci_ops and raw_pci_ext_ops are NULL, and pci_subsys_init() -> pcibios_init() doesn't call pcibios_resource_survey() -> e820__reserve_resources_late(); as a result, any emulated persistent memory of E820_TYPE_PRAM (12) via the kernel parameter memmap=nn[KMG]!ss is not added into iomem_resource and hence can't be detected by register_e820_pmem(). Fix this by directly calling e820__reserve_resources_late() in hv_pci_init(), which is called from arch_initcall(pci_arch_init). It's ok to move a Gen2 VM's e820__reserve_resources_late() from subsys_initcall(pci_subsys_init) to arch_initcall(pci_arch_init) because the code in-between doesn't depend on the E820 resources. e820__reserve_resources_late() depends on e820__reserve_resources(), which has been called earlier from setup_arch(). For a Gen-2 VM, the new hv_pci_init() also adds any memory of E820_TYPE_PMEM (7) into iomem_resource, and acpi_nfit_register_region() -> acpi_nfit_insert_resource() -> region_intersects() returns REGION_INTERSECTS, so the memory of E820_TYPE_PMEM won't get added twice. Changed the local variable "int gen2vm" to "bool gen2vm". Signed-off-by: Saurabh Sengar <ssengar@linux.microsoft.com> Signed-off-by: Dexuan Cui <decui@microsoft.com> Signed-off-by: Wei Liu <wei.liu@kernel.org> Message-ID: <1699691867-9827-1-git-send-email-ssengar@linux.microsoft.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-12-20 17:00:21 +01:00

1 2 3 4 5 ...

44082 Commits