3021 Commits

Author	SHA1	Message	Date
Srinivasarao Pathipati	37e14da1f2	Merge keystone/android14-6.1-keystone-qcom-release.6.1.78+ (075ce55) into qcom-6.1 ... * refs/heads/tmp-075ce55: ANDROID: 16K: Avoid mmap lock assertions for padding VMAs ANDROID: consolidate.fragment: don't disable CONFIG_PM_ADVANCED_DEBUG ANDROID: GKI: Update symbol list for mtk Revert "f2fs: fix to tag gcing flag on page during block migration" ANDROID: 16K: Only check basename of linker context FROMGIT: arm64: mte: Make mte_check_tfsr_*() conditional on KASAN instead of MTE ANDROID: gki_defconfig: Disable CONFIG_BRCMSTB_DPFE and CONFIG_BRCMSTB_MEMC FROMGIT: f2fs: fix to avoid use SSR allocate when do defragment ANDROID: 16K: Only check basename of linker context ANDROID: 16K: Avoid and document padding madvise lock warning ANDROID: arm64: vdso32: support user-supplied flags ANDROID: GKI: Add initial symbol list for bcmstb ANDROID: gki_defconfig: Enable Broadcom STB SoCs UPSTREAM: mmc: core: Do not force a retune before RPMB switch UPSTREAM: arm64/arm: arm_pmuv3: perf: Don't truncate 64-bit registers BACKPORT: net: phy: Allow drivers to always call into ->suspend() UPSTREAM: ARM: perf: Mark all accessor functions inline UPSTREAM: arm64: perf: Mark all accessor functions inline UPSTREAM: perf/core: Drop __weak attribute from arch_perf_update_userpage() prototype UPSTREAM: ARM: perf: Allow the use of the PMUv3 driver on 32bit ARM UPSTREAM: ARM: Make CONFIG_CPU_V7 valid for 32bit ARMv8 implementations UPSTREAM: perf: pmuv3: Change GENMASK to GENMASK_ULL UPSTREAM: perf: pmuv3: Move inclusion of kvm_host.h to the arch-specific helper UPSTREAM: perf: pmuv3: Abstract PMU version checks UPSTREAM: arm64: perf: Abstract system register accesses away UPSTREAM: arm64: perf: Move PMUv3 driver to drivers/perf UPSTREAM: arm64/perf: Replace PMU version number '0' with ID_AA64DFR0_EL1_PMUVer_NI ANDROID: GKI: Update oplus symbol list UPSTREAM: block/blk-mq: Don't complete locally if capacities are different BACKPORT: sched: Add a new function to compare if two cpus have the same capacity ANDROID: GKI: Update symbol list for mtk ANDROID: GKI: Update rockchip symbols for rndis_host. ANDROID: GKI: Update rockchip symbols for snd multi dais. UPSTREAM: usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete UPSTREAM: usb: gadget: f_fs: use io_data->status consistently ANDROID: set rewrite_absolute_paths_in_config for GKI aarch64. UPSTREAM: wifi: cfg80211: Clear mlo_links info when STA disconnects ANDROID: ABI: Add usb_gadget_connect & usb_gadget_disconnect symbol ANDROID: GKI: Update symbol list for mtk BACKPORT: iommu: Have __iommu_probe_device() check for already probed devices ANDROID: ABI fixup for abi break in struct dst_ops BACKPORT: net: fix __dst_negative_advice() race ANDROID: ABI fixup for abi break in struct dst_ops BACKPORT: net: fix __dst_negative_advice() race Revert "crypto: api - Disallow identical driver names" UPSTREAM: USB: gadget: core: create sysfs link between udc and gadget ANDROID: GKI: add tegra20-cpufreq.ko to rockpi4 build ANDROID: GKI: update symbol list for db845c ANDROID: Build some tegra configs as vendor module ANDROID: gki_defconfig: Enable Tegra SoCs ANDROID: Update the ABI symbol list Revert^2 "BACKPORT: FROMGIT: module: allow UNUSED_KSYMS_WHITELIST ..." ANDROID: binder: fix KMI-break due to alloc->lock ANDROID: binder: fix ptrdiff_t printk-format issue ANDROID: binder: fix KMI-break due to address type change Reapply "ANDROID: vendor_hooks: Add hook for binder_detect_low_async_space" Reapply "ANDROID: Add vendor hooks for binder perf tuning" UPSTREAM: binder: switch alloc->mutex to spinlock_t UPSTREAM: binder: reverse locking order in shrinker callback UPSTREAM: binder: avoid user addresses in debug logs UPSTREAM: binder: refactor binder_delete_free_buffer() UPSTREAM: binder: collapse print_binder_buffer() into caller UPSTREAM: binder: document the final page calculation BACKPORT: UPSTREAM: binder: rename lru shrinker utilities UPSTREAM: binder: make oversized buffer code more readable UPSTREAM: binder: remove redundant debug log UPSTREAM: binder: perform page installation outside of locks UPSTREAM: binder: initialize lru pages in mmap callback UPSTREAM: binder: malloc new_buffer outside of locks UPSTREAM: binder: refactor page range allocation UPSTREAM: binder: relocate binder_alloc_clear_buf() UPSTREAM: binder: relocate low space calculation UPSTREAM: binder: separate the no-space debugging logic UPSTREAM: binder: remove pid param in binder_alloc_new_buf() UPSTREAM: binder: do unlocked work in binder_alloc_new_buf() UPSTREAM: binder: split up binder_update_page_range() UPSTREAM: binder: keep vma addresses type as unsigned long UPSTREAM: binder: remove extern from function prototypes Revert "ANDROID: Add vendor hooks for binder perf tuning" Revert "ANDROID: vendor_hooks: Add hook for binder_detect_low_async_space_locked" Revert "ANDROID: vendor_hook: rename the the name of hooks" ANDROID: GKI: Update rockchip symbols for some usb wifi bt. UPSTREAM: selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior ANDROID: GKI: Update rockchip symbols to add iova APIs FROMLIST: kheaders: explicitly define file modes for archived headers ANDROID: incremental-fs: Make work with 16k pages ANDROID: pahole -J -j1 for reproducible BTF Revert "BACKPORT: FROMGIT: module: allow UNUSED_KSYMS_WHITELIST ..." BACKPORT: FROMGIT: module: allow UNUSED_KSYMS_WHITELIST to be relative against objtree. ANDROID: export one function for mm metrics ANDROID: GKI: Update symbol list for mtk FROMLIST: kheaders: explicitly define file modes for archived headers ANDROID: pahole -J -j1 for reproducible BTF FROMLIST: usb: typec: tcpm: Ignore received Hard Reset in TOGGLING state ANDROID: Export sysctl_sched_wakeup_granularity to enable modifying it UPSTREAM: epoll: be better about file lifetimes FROMLIST: usb: typec: tcpm: Ignore received Hard Reset in TOGGLING state FROMLIST: usb: typec: tcpm: Ignore received Hard Reset in TOGGLING state UPSTREAM: usb: gadget: ncm: Fix handling of zero block length packets ANDROID: Update the ABI symbol list ANDROID: GKI: Update symbol list for mtk UPSTREAM: usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs ANDROID: GKI: Update rockchip symbols to add iova APIs FROMLIST: sched/pi: Reweight fair_policy() tasks when inheriting prio ANDROID: Update the ABI symbol list ANDROID: mm: Add restricted vendor hook in do_read_fault() ANDROID: abi_gki_aarch64_qcom: Update symbol list ANDROID: abi_gki_aarch64_qcom: Update symbol list ANDROID: Update the ABI symbol list ANDROID: add vendor hooks and expoert reclaim_pages to reclaim memory FROMGIT: usb: dwc3: Wait unconditionally after issuing EndXfer command ANDROID: ABI: Update honor symbol list ANDROID: add vendor hook in do_read_fault to tune fault_around_bytes ANDROID: usb: Optimize the problem of slow transfer rate in USB accessory mode ANDROID: Zap kernel/sched/android.h stubs ANDROID: Update the ABI symbol list ANDROID: Export sysctl_sched_wakeup_granularity to enable modifying it ANDROID: export one function for mm metrics ANDROID: Update the ABI symbol list ANDROID: Export sysctl_sched_wakeup_granularity to enable modifying it UPSTREAM: ALSA: virtio: use ack callback UPSTREAM: usb: typec: tcpm: clear pd_event queue in PORT_RESET BACKPORT: usb: typec: tcpm: enforce ready state when queueing alt mode vdm ANDROID: GKI: Update QCOM symbol list and ABI STG ANDROID: GKI: fix ABI breakage in struct userfaultfd_ctx UPSTREAM: userfaultfd: fix deadlock warning when locking src and dst VMAs BACKPORT: userfaultfd: use per-vma locks in userfaultfd operations BACKPORT: mm: add vma_assert_locked() for !CONFIG_PER_VMA_LOCK BACKPORT: userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx BACKPORT: userfaultfd: move userfaultfd_ctx struct to header file BACKPORT: userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb BACKPORT: selftests/mm: add separate UFFDIO_MOVE test for PMD splitting BACKPORT: selftests/mm: add UFFDIO_MOVE ioctl test BACKPORT: selftests/mm: add uffd_test_case_ops to allow test case-specific operations BACKPORT: selftests/mm: call uffd_test_ctx_clear at the end of the test UPSTREAM: userfaultfd: fix return error if mmap_changing is non-zero in MOVE ioctl BACKPORT: userfaultfd: change src_folio after ensuring it's unpinned in UFFDIO_MOVE BACKPORT: mm: userfaultfd: fix unexpected change to src_folio when UFFDIO_MOVE fails BACKPORT: userfaultfd: handle zeropage moves by UFFDIO_MOVE UPSTREAM: userfaultfd: avoid huge_zero_page in UFFDIO_MOVE UPSTREAM: userfaultfd: fix move_pages_pte() splitting folio under RCU read lock BACKPORT: userfaultfd: UFFDIO_MOVE uABI UPSTREAM: mm/rmap: support move to different root anon_vma in folio_move_anon_rmap() UPSTREAM: crypto: x86/curve25519 - disable gcov ANDROID: GKI: Update QCOM symbol list and ABI STG ANDROID: GKI: update symbol list file for xiaomi UPSTREAM: netfilter: nft_set_pipapo: do not free live element UPSTREAM: net: tls: handle backlogging of crypto requests UPSTREAM: af_unix: Fix garbage collector racing against connect() UPSTREAM: af_unix: Do not use atomic ops for unix_sk(sk)->inflight. ANDROID: 16K: Fix show maps CFI failure ANDROID: 16K: Handle pad VMA splits and merges ANDROID: 16K: madvise_vma_pad_pages: Remove filemap_fault check ANDROID: 16K: Only madvise padding from dynamic linker context ANDROID: 16K: Separate padding from ELF LOAD segment mappings ANDROID: 16K: Exclude ELF padding for fault around range ANDROID: 16K: Use MADV_DONTNEED to save VMA padding pages. ANDROID: 16K: Introduce ELF padding representation for VMAs ANDROID: 16K: Introduce /sys/kernel/mm/pgsize_miration/enabled FROMGIT: usb: typec: tcpm: Check for port partner validity before consuming it FROMGIT: usb: typec: tcpm: Check for port partner validity before consuming it Revert "FROMGIT: usb: typec: tcpm: Check for port partner validity before consuming it" FROMGIT: usb: typec: tcpm: Check for port partner validity before consuming it ANDROID: vendor_hooks: add symbols for lazy preemption ANDROID: vendor_hooks: add two hooks for lazy preemption ANDROID: KVM: arm64: wait_for_initramfs for pKVM module loading procfs ANDROID: GKI: Expose device async to userspace BACKPORT: mtk-mmsys: Change mtk-mmsys & mtk-mutex to modules ANDROID: Update the ABI symbol list BACKPORT: clk: mediatek: Split configuration options for MT8186 clock drivers BACKPORT: clk: mediatek: Add MODULE_LICENSE() where missing FROMGIT: coresight: etm4x: Fix access to resource selector registers FROMGIT: coresight: etm4x: Safe access for TRCQCLTR FROMGIT: coresight: etm4x: Do not save/restore Data trace control registers FROMGIT: coresight: etm4x: Do not hardcode IOMEM access for register restore ANDROID: GKI: Update honda symbol list for led-trigger ANDROID: GKI: Update symbols to symbol list ANDROID: vendor_hook: Add hooks to support reader optimistic spin in rwsem UPSTREAM: af_unix: Fix garbage collector racing against connect() UPSTREAM: af_unix: Do not use atomic ops for unix_sk(sk)->inflight. ANDROID: GKI: fix ABI breakage in struct userfaultfd_ctx UPSTREAM: userfaultfd: fix deadlock warning when locking src and dst VMAs BACKPORT: userfaultfd: use per-vma locks in userfaultfd operations BACKPORT: mm: add vma_assert_locked() for !CONFIG_PER_VMA_LOCK BACKPORT: userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx BACKPORT: userfaultfd: move userfaultfd_ctx struct to header file BACKPORT: userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb BACKPORT: selftests/mm: add separate UFFDIO_MOVE test for PMD splitting BACKPORT: selftests/mm: add UFFDIO_MOVE ioctl test BACKPORT: selftests/mm: add uffd_test_case_ops to allow test case-specific operations BACKPORT: selftests/mm: call uffd_test_ctx_clear at the end of the test UPSTREAM: userfaultfd: fix return error if mmap_changing is non-zero in MOVE ioctl BACKPORT: userfaultfd: change src_folio after ensuring it's unpinned in UFFDIO_MOVE BACKPORT: mm: userfaultfd: fix unexpected change to src_folio when UFFDIO_MOVE fails BACKPORT: userfaultfd: handle zeropage moves by UFFDIO_MOVE UPSTREAM: userfaultfd: avoid huge_zero_page in UFFDIO_MOVE UPSTREAM: userfaultfd: fix move_pages_pte() splitting folio under RCU read lock BACKPORT: userfaultfd: UFFDIO_MOVE uABI UPSTREAM: mm/rmap: support move to different root anon_vma in folio_move_anon_rmap() ANDROID: PM: hibernate: Encryption support with compression ANDROID: abi_gki_aarch64_qcom: Update symbol list ANDROID: vendor_hooks: Add hooks to support hibernation ANDROID: gki_defconfig: Sync gki_defconfig UPSTREAM: PM: hibernate: Support to select compression algorithm UPSTREAM: PM: hibernate: Add support for LZ4 compression for hibernation BACKPORT: PM: hibernate: Move to crypto APIs for LZO compression BACKPORT: PM: hibernate: Rename lzo* to make it generic Revert "hrtimer: Report offline hrtimer enqueue" Revert "drm/mipi-dsi: Fix detach call without attach" ANDROID: ABI: Update symbol list for Exynos SoC ANDROID: abi_gki_aarch64_qcom: Update symbol list BACKPORT: mtk-mmsys: Change mtk-mmsys & mtk-mutex to modules BACKPORT: clk: mediatek: Split configuration options for MT8186 clock drivers BACKPORT: clk: mediatek: Add MODULE_LICENSE() where missing ANDROID: Update the ABI symbol list Reapply "ANDROID: block: Add support for filesystem requests and small segments" UPSTREAM: usb:typec:tcpm:support double Rp to Vbus cable as sink ANDROID: Update the ABI symbol list ANDROID: Add known structs used by modules to KMI ANDROID: use reserved cpucaps for new capability Revert "mm/sparsemem: fix race in accessing memory_section->usage" UPSTREAM: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path UPSTREAM: netfilter: nf_tables: release batch on table validation from abort path UPSTREAM: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout UPSTREAM: netfilter: nft_set_pipapo: release elements in clone only from destroy path ANDROID: GKI: Add symbol list for Nothing ANDROID: GKI: Update honda symbol list for asound ANDROID: GKI: Update honda symbol list for xt_LOG ANDROID: GKI: Update honda symbol list for ebtables ANDROID: GKI: Update honda symbol list for net scheduler ANDROID: softirq: add tasklet to LONG_SOFTIRQ_MASK ANDROID: Update the ABI symbol list ANDROID: vendor_hooks: add restricted vendor hook for meminfo ANDROID: Update the ABI symbol list BACKPORT: cpufreq: Don't unregister cpufreq cooling on CPU hotplug FROMGIT: usb: typec: tcpm: Correct the PDO counting in pd_set UPSTREAM: tls: fix race between tx work scheduling and socket close UPSTREAM: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain UPSTREAM: tls: fix race between async notify and socket close UPSTREAM: net: tls: factor out tls_*crypt_async_wait() UPSTREAM: tls: extract context alloc/initialization out of tls_set_sw_offload BACKPORT: mm: update mark_victim tracepoints fields Revert "FROMGIT: BACKPORT: mm: update mark_victim tracepoints fields" ANDROID: Update the ABI symbol list ANDROID: export two function to reclaim memory ANDROID: add reclaim tune parameter functions UPSTREAM: netfilter: nf_tables: disallow anonymous set with timeout flag ANDROID: drop redundant OWNERS_DrNo file UPSTREAM: ALSA: virtio: Fix "Coverity: virtsnd_kctl_tlv_op(): Uninitialized variables" warning. UPSTREAM: ALSA: virtio: add support for audio controls ANDROID: Update symbols list for virtio_snd.ko audio controls ANDROID: Move cpu_busy_with_softirqs() into sched.h UPSTREAM: mm: page_alloc: unreserve highatomic page blocks before oom UPSTREAM: mm: page_alloc: enforce minimum zone size to do high atomic reserves UPSTREAM: mm: page_alloc: correct high atomic reserve calculations ANDROID: Update the ABI symbol list ANDROID: Export cpu_busy_with_softirqs() ANDROID: GKI: update symbol list file for xiaomi Reapply "ANDROID: null_blk: Support configuring the maximum segment size" UPSTREAM: usb: typec: Return size of buffer if pd_set operation succeeds UPSTREAM: usb: typec: tcpm: Update PD of Type-C port upon pd_set UPSTREAM: usb: typec: tcpm: fix double-free issue in tcpm_port_unregister_pd() UPSTREAM: usb: typec: tcpm: Correct port source pdo array in pd_set callback Reapply "Merge tag 'android14-6.1.75_r00' into android14-6.1" Revert "ANDROID: null_blk: Support configuring the maximum segment size" Revert "usb: dwc3: core: configure TX/RX threshold for DWC3_IP" ANDROID: Update the ABI symbol list ANDROID: GKI: Update symbols for rockchip drm FROMLIST: binder: check offset alignment in binder_get_object() ANDROID: GKI: Add symbol list for Nothing ANDROID: thermal: Add vendor thermal_pm_notify_suspend function UPSTREAM: usb: dwc3: gadget: Don't disconnect if not started Revert "ANDROID: block: Add support for filesystem requests and small segments" ANDROID: vendor_hook: fix issue vip thread do not sleep while no vip work UPSTREAM: sched/wait: Fix a kthread_park race with wait_woken() ANDROID: KVM: arm64: Fix TLB invalidation when coalescing into a block ANDROID: ABI: Update symbol list for Exynos SoC ANDROID: GKI: Add symbols for rockchip snd trcm FROMGIT: usb: dwc2: Disable clock gating feature on Rockchip SoCs ANDROID: ABI: Update symbol list for Exynos SoC ANDROID: Add symbols for IIO SCMI module ANDROID: KVM: arm64: Fix missing trace event for nVHE dyn HVCs ANDROID: Update the ABI symbol list ANDROID: Update symbols list for open-dice.ko ANDROID: Add symbols for IIO SCMI module ANDROID: GKI: Update symbols for rockchip UPSTREAM: usb: dwc2: disable lpm feature on Rockchip SoCs ANDROID: Update symbols list for open-dice.ko FROMLIST: mm/migrate: set swap entry values of THP tail pages properly. ANDROID: Update the ABI symbol list ANDROID: virt: gunyah: Move send_lock around req and reply ANDROID: null_blk: Support configuring the maximum segment size ANDROID: scsi_debug: Support configuring the maximum segment size ANDROID: block: Add support for filesystem requests and small segments ANDROID: block: Support submitting passthrough requests with small segments ANDROID: block: Make sub_page_limit_queues available in debugfs ANDROID: block: Support configuring limits below the page size ANDROID: block: Prepare for supporting sub-page limits ANDROID: block: Use pr_info() instead of printk(KERN_INFO ...) ANDROID: sound: usb: add vendor hook for cpu suspend support ANDROID: usb: Add vendor hook for usb suspend and resume ANDROID: fips140: change linker script guard Revert "ANDROID: Update symbols list for open-dice.ko" ANDROID: Update symbols list for open-dice.ko FROMGIT: PM: sleep: wakeirq: fix wake irq warning in system suspend ANDROID: ABI: Update symbol for Exynos SoC UPSTREAM: usb: dwc3: core: set force_gen1 bit in USB31 devices if max speed is SS UPSTREAM: PCI: dwc: Strengthen the MSI address allocation logic UPSTREAM: PCI: dwc: Restrict only coherent DMA mask for MSI address allocation ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hook: rename the the name of hooks FROMGIT: usb: xhci: Add error handling in xhci_map_urb_for_dma FROMGIT: usb: dwc3: host: Set XHCI_SG_TRB_CACHE_SIZE_QUIRK FROMGIT: usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK ANDROID: fuse-bpf: Fix readdir for getdents Linux 6.1.78 netfilter: nft_set_rbtree: skip end interval element from gc net: stmmac: xgmac: fix a typo of register name in DPP safety handling ALSA: usb-audio: Sort quirk table entries net: stmmac: xgmac: use #define for string constants clocksource: Skip watchdog check for large watchdog intervals block: treat poll queue enter similarly to timeouts f2fs: add helper to check compression level RDMA/irdma: Fix support for 64k pages vhost: use kzalloc() instead of kmalloc() followed by memset() Revert "ASoC: amd: Add new dmi entries for acp5x platform" io_uring/net: fix sr->len for IORING_OP_RECV with MSG_WAITALL and buffers Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU hrtimer: Report offline hrtimer enqueue usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK usb: dwc3: host: Set XHCI_SG_TRB_CACHE_SIZE_QUIRK USB: serial: cp210x: add ID for IMST iM871A-USB USB: serial: option: add Fibocom FM101-GL variant USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e ALSA: usb-audio: add quirk for RODE NT-USB+ ALSA: usb-audio: Add a quirk for Yamaha YIT-W12TX transmitter ALSA: usb-audio: Add delay quirk for MOTU M Series 2nd revision mtd: parsers: ofpart: add workaround for #size-cells 0 fs: dlm: don't put dlm_local_addrs on heap blk-iocost: Fix an UBSAN shift-out-of-bounds warning scsi: core: Move scsi_host_busy() out of host lock if it is for per-command fs/ntfs3: Fix an NULL dereference bug netfilter: nft_set_pipapo: remove scratch_aligned pointer netfilter: nft_set_pipapo: add helper to release pcpu scratch area netfilter: nft_set_pipapo: store index in scratch maps netfilter: nft_ct: reject direction for ct id drm/amd/display: Implement bounds check for stream encoder creation in DCN301 netfilter: nft_compat: restrict match/target protocol to u16 netfilter: nft_compat: reject unused compat flag netfilter: nft_compat: narrow down revision to unsigned 8-bits selftests: cmsg_ipv6: repeat the exact packet ppp_async: limit MRU to 64K af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC. tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() rxrpc: Fix response to PING RESPONSE ACKs to a dead call drm/i915/gvt: Fix uninitialized variable in handle_mmio() inet: read sk->sk_family once in inet_recv_error() hwmon: (coretemp) Fix bogus core_id to attr name mapping hwmon: (coretemp) Fix out-of-bounds memory access hwmon: (aspeed-pwm-tacho) mutex for tach reading octeontx2-pf: Fix a memleak otx2_sq_init atm: idt77252: fix a memleak in open_card_ubr0 tunnels: fix out of bounds access when building IPv6 PMTU error selftests: net: avoid just another constant wait selftests: net: cut more slack for gro fwd tests. net: atlantic: Fix DMA mapping for PTP hwts ring netdevsim: avoid potential loop in nsim_dev_trap_report_work() wifi: mac80211: fix waiting for beacons logic net: stmmac: xgmac: fix handling of DPP safety error for DMA channels drm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case drm/msms/dp: fixed link clock divider bits be over written in BPC unknown case cifs: failure to add channel on iface should bump up weight phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV phy: renesas: rcar-gen3-usb2: Fix returning wrong error code dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA dmaengine: ti: k3-udma: Report short packet errors dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools ext4: regenerate buddy after block freeing failed if under fc replay Linux 6.1.77 drm/amdgpu: Fix missing error code in 'gmc_v6/7/8/9_0_hw_init()' ASoC: codecs: wsa883x: fix PA volume control ASoC: codecs: lpass-wsa-macro: fix compander volume hack bonding: remove print in bond_verify_device_path gve: Fix use-after-free vulnerability LoongArch/smp: Call rcutree_report_cpu_starting() at tlb_init() drm/msm/dsi: Enable runtime PM Revert "drm/amd/display: Disable PSR-SU on Parade 0803 TCON again" mm, kmsan: fix infinite recursion due to RCU critical section arm64: irq: set the correct node for shadow call stack selftests: bonding: Check initial state selftests: team: Add missing config options net: sysfs: Fix /sys/class/net/<iface> path selftests: net: fix available tunnels detection af_unix: fix lockdep positive in sk_diag_dump_icons() net: ipv4: fix a memleak in ip_setup_cork netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV netfilter: conntrack: correct window scaling with retransmitted SYN selftests: net: add missing config for GENEVE bridge: mcast: fix disabled snooping after long uptime llc: call sock_orphan() at release time ipv6: Ensure natural alignment of const ipv6 loopback and router addresses net: dsa: qca8k: fix illegal usage of GPIO ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() ixgbe: Refactor overtemp event handling ixgbe: Refactor returning internal error codes tcp: add sanity checks to rx zerocopy net: lan966x: Fix port configuration when using SGMII interface ipmr: fix kernel panic when forwarding mcast packets ipv4: raw: add drop reasons ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() selftests: net: give more time for GRO aggregation HID: hidraw: fix a problem of memory leak in hidraw_release() scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler regulator: ti-abb: don't use devm_platform_ioremap_resource_byname for shared interrupt register scsi: isci: Fix an error code problem in isci_io_request_build() drm: using mul_u32_u32() requires linux/math64.h wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update perf: Fix the nr_addr_filters fix drm/amdkfd: Fix 'node' NULL check in 'svm_range_get_range_boundaries()' drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()' drm/amdgpu: Fix with right return code '-EIO' in 'amdgpu_gmc_vram_checking()' drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()' ceph: fix invalid pointer access if get_quota_realm return ERR_PTR ceph: fix deadlock or deadcode of misusing dget() ceph: reinitialize mds feature bit even when session in open blk-mq: fix IO hang from sbitmap wakeup race virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings drm/amdkfd: Fix lock dependency warning with srcu drm/amdkfd: Fix lock dependency warning libsubcmd: Fix memory leak in uniq() misc: lis3lv02d_i2c: Add missing setting of the reg_ctrl callback 9p: Fix initialisation of netfs_inode for 9p PCI/AER: Decode Requester ID when no error info found PCI: Fix 64GT/s effective data rate calculation spmi: mediatek: Fix UAF on device remove fs/kernfs/dir: obey S_ISGID tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE selftests/sgx: Fix linker script asserts usb: hub: Add quirk to decrease IN-ep poll interval for Microchip USB491x hub usb: hub: Replace hardcoded quirk value with BIT() macro perf cs-etm: Bump minimum OpenCSD version to ensure a bugfix is present PCI: switchtec: Fix stdev_release() crash after surprise hot remove PCI: Only override AMD USB controller if required mailbox: arm_mhuv2: Fix a bug for mhuv2_sender_interrupt mfd: ti_am335x_tscadc: Fix TI SoC dependencies xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import i3c: master: cdns: Update maximum prescaler value for i2c clock um: time-travel: fix time corruption um: net: Fix return type of uml_net_start_xmit() um: Don't use vfprintf() for os_info() um: Fix naming clash between UML and scheduler leds: trigger: panic: Don't register panic notifier if creating the trigger failed ALSA: hda/conexant: Fix headset auto detect fail in cx8070 and SN6140 drm/amdkfd: Fix iterator used outside loop in 'kfd_add_peer_prop()' drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' drm/amdgpu: Fix '*fw' from request_firmware() not released in 'amdgpu_ucode_request()' drm/amdgpu: Let KFD sync with VM fences drm/amdgpu: Fix ecc irq enable/disable unpaired clk: imx: clk-imx8qxp: fix LVDS bypass, pixel and phy clocks drm/amd/display: make flip_timestamp_in_us a 64-bit variable watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786 clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() drm/amdgpu: fix ftrace event amdgpu_bo_move always move on same heap drm/msm/dpu: fix writeback programming for YUV cases drm/msm/dpu: Ratelimit framedone timeout msgs drm/amd/display: For prefetch mode > 0, extend prefetch if possible media: i2c: imx335: Fix hblank min/max values media: ddbridge: fix an error code problem in ddb_probe media: amphion: remove mutext lock in condition of wait_event IB/ipoib: Fix mcast list locking drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time f2fs: fix to tag gcing flag on page during block migration hwmon: (nct6775) Fix fan speed set failure in automatic mode media: rkisp1: Fix IRQ disable race issue media: rkisp1: Store IRQ lines media: rkisp1: Fix IRQ handler return values media: rkisp1: Drop IRQF_SHARED ALSA: hda: Intel: add HDA_ARL PCI ID support PCI: add INTEL_HDA_ARL to pci_ids.h media: rockchip: rga: fix swizzling for RGB formats media: stk1160: Fixed high volume of stk1160_dbg messages drm/mipi-dsi: Fix detach call without attach drm/framebuffer: Fix use of uninitialized variable drm/drm_file: fix use of uninitialized variable ASoC: amd: Add new dmi entries for acp5x platform f2fs: fix write pointers on zoned device after roll forward drm/amd/display: Fix tiled display misalignment drm/bridge: anx7625: Fix Set HPD irq detect window to 2ms drm/panel-edp: Add override_edid_mode quirk for generic edp RDMA/IPoIB: Fix error code return in ipoib_mcast_join fast_dput(): handle underflows gracefully ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument ALSA: hda: Refer to correct stream index at loops f2fs: fix to check return value of f2fs_reserve_new_block() net: dsa: qca8k: put MDIO bus OF node on qca8k_mdio_register() failure octeontx2-af: Fix max NPC MCAM entry check while validating ref_entry i40e: Fix VF disable behavior to block all traffic bridge: cfm: fix enum typo in br_cc_ccm_tx_parse net/smc: disable SEID on non-s390 archs where virtual ISM may be used Bluetooth: L2CAP: Fix possible multiple reject send Bluetooth: hci_sync: fix BR/EDR wakeup bug Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066 wifi: cfg80211: free beacon_ies when overridden from hidden BSS wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() libbpf: Fix NULL pointer dereference in bpf_object__collect_prog_relos wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices arm64: dts: amlogic: fix format for s4 uart node ice: fix pre-shifted bit usage arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property md: Whenassemble the array, consult the superblock of the freshest device block: prevent an integer overflow in bvec_try_merge_hw_page net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path net: atlantic: eliminate double free in error handling logic ice: fix ICE_AQ_VSI_Q_OPT_RSS_* register values scsi: hisi_sas: Set .phy_attached before notifing phyup event HISI_PHYE_PHY_UP_PM ARM: dts: imx23/28: Fix the DMA controller node name ARM: dts: imx23-sansa: Use preferred i2c-gpios properties ARM: dts: imx27-apf27dev: Fix LED name ARM: dts: imx25/27: Pass timing0 ARM: dts: imx25: Fix the iim compatible string block/rnbd-srv: Check for unlikely string overflow ionic: bypass firmware cmds when stuck in reset ionic: pass opcode to devcmd_wait net: phy: at803x: fix passing the wrong reference for config_intr ARM: dts: imx1: Fix sram node ARM: dts: imx27: Fix sram node ARM: dts: imx: Use flash@0,0 pattern ARM: dts: imx25/27-eukrea: Fix RTC node name ARM: dts: rockchip: fix rk3036 hdmi ports node wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() bpf: Set uattr->batch.count as zero before batched update or deletion scsi: libfc: Fix up timeout error in fc_fcp_rec_error() scsi: libfc: Don't schedule abort twice bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers wifi: ath11k: fix race due to setting ATH11K_FLAG_EXT_IRQ_ENABLED too early wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() ARM: dts: imx7s: Fix nand-controller #size-cells ARM: dts: imx7s: Fix lcdif compatible ARM: dts: imx7d: Fix coresight funnel ports scsi: arcmsr: Support new PCI device IDs 1883 and 1886 scsi: mpi3mr: Add PCI checks where SAS5116 diverges from SAS4116 net: usb: ax88179_178a: avoid two consecutive device resets bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk PCI: Add no PM reset quirk for NVIDIA Spectrum devices scsi: lpfc: Fix possible file string name overflow when updating firmware soc: xilinx: fix unhandled SGI warning message soc: xilinx: Fix for call trace due to the usage of smp_processor_id() selftests/bpf: Fix issues in setup_classid_environment() wifi: rt2x00: correct wrong BBP register in RxDCOC calibration selftests/bpf: Fix pyperf180 compilation failure with clang18 selftests/bpf: satisfy compiler by having explicit return in btf test wifi: rt2x00: restart beacon queue when hardware reset ext4: avoid online resizing failures due to oversized flex bg ext4: remove unnecessary check from alloc_flex_gd() ext4: unify the type of flexbg_size to unsigned int ext4: fix inconsistent between segment fstrim and full fstrim ecryptfs: Reject casefold directory inodes SUNRPC: Fix a suspicious RCU usage warning KVM: s390: fix setting of fpc register s390/ptrace: handle setting of fpc register correctly s390/vfio-ap: fix sysfs status attribute for AP queue devices arch: consolidate arch_irq_work_raise prototypes jfs: fix array-index-out-of-bounds in diNewExt rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu() crypto: stm32/crc32 - fix parsing list of devices erofs: fix ztailpacking for subpage compressed blocks crypto: octeontx2 - Fix cptvf driver cleanup pstore/ram: Fix crash when setting number of cpus to an odd number jfs: fix uaf in jfs_evict_inode jfs: fix array-index-out-of-bounds in dbAdjTree jfs: fix slab-out-of-bounds Read in dtSearch UBSAN: array-index-out-of-bounds in dtSplitRoot FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events PM / devfreq: Synchronize devfreq_monitor_[start/stop] ACPI: NUMA: Fix the logic of getting the fake_pxm value ACPI: extlog: fix NULL pointer dereference check PNP: ACPI: fix fortify warning ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop audit: Send netlink ACK before setting connection in auditd_set regulator: core: Only increment use_count when enable_count changes debugobjects: Stop accessing objects after releasing hash bucket lock perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel powerpc/lib: Validate size for vector operations powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE x86/boot: Ignore NMIs during very early boot powerpc/64s: Fix CONFIG_NUMA=n build due to create_section_mapping() powerpc/mm: Fix build failures due to arch_reserved_kernel_pages() powerpc: Fix build error due to is_valid_bugaddr() drivers/perf: pmuv3: don't expose SW_INCR event in sysfs arm64: irq: set the correct node for VMAP stack powerpc/mm: Fix null-pointer dereference in pgtable_cache_add asm-generic: make sparse happy with odd-sized put_unaligned_*() Linux 6.1.76 net/mlx5e: Handle hardware IPsec limits events serial: core: fix kernel-doc for uart_port_unlock_irqrestore() x86/entry/ia32: Ensure s32 is sign extended to s64 tick/sched: Preserve number of idle sleeps across CPU hotplug events mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan cxl/region：Fix overflow issue in alloc_hpa() MIPS: lantiq: register smp_ops on non-smp platforms spi: fix finalize message on error return spi: bcm-qspi: fix SFDP BFPT read by usig mspi read drm/bridge: anx7625: Ensure bridge is suspended in disable() block: Move checking GENHD_FL_NO_PART to bdev_add_partition() gpio: eic-sprd: Clear interrupt after set the interrupt type drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume drm/exynos: fix accidental on-stack copy of exynos_drm_plane drm/bridge: parade-ps8640: Make sure we drop the AUX mutex in the error case drm/bridge: parade-ps8640: Ensure bridge is suspended in .post_disable() drm/bridge: sii902x: Fix audio codec unregistration drm/bridge: sii902x: Fix probing race issue drm/bridge: sii902x: Use devm_regulator_bulk_get_enable() drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33] drm/bridge: parade-ps8640: Wait for HPD when doing an AUX transfer Revert "powerpc/64s: Increase default stack size to 32KB" drm/panel-edp: drm/panel-edp: Fix AUO B116XAK01 name and timing btrfs: zoned: optimize hint byte for zoned allocator btrfs: zoned: factor out prepare_allocation_zoned() serial: sc16is7xx: fix unconditional activation of THRI interrupt serial: sc16is7xx: Use port lock wrappers serial: core: Provide port lock wrappers dlm: use kernel_connect() and kernel_bind() ARM: dts: qcom: sdx55: fix USB SS wakeup ARM: dts: qcom: sdx55: fix USB DP/DM HS PHY interrupts ARM: dts: qcom: sdx55: fix pdc '#interrupt-cells' ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12 ARM: dts: qcom: sdx55: fix USB wakeup interrupt types pipe: wakeup wr_wait after setting max_usage fs/pipe: move check to pipe_has_watch_queue() thermal: intel: hfi: Add syscore callbacks for system-wide PM thermal: intel: hfi: Disable an HFI instance when all its CPUs go offline thermal: intel: hfi: Refactor enabling code into helper functions PM: sleep: Fix possible deadlocks in core system-wide PM code PM: core: Remove unnecessary (void *) conversions bus: mhi: ep: Do not allocate event ring element on stack media: ov13b10: Enable runtime PM before registering async sub-device media: ov13b10: Support device probe in non-zero ACPI D state erofs: fix lz4 inplace decompression erofs: get rid of the remaining kmap_atomic() drm/amdgpu/pm: Fix the power source flag error drm/amd/display: Port DENTIST hang and TDR fixes to OTG disable W/A drm/bridge: nxp-ptn3460: simplify some error checking platform/x86: intel-uncore-freq: Fix types in sysfs callbacks drm/amd/display: Disable PSR-SU on Parade 0803 TCON again drm/tidss: Fix atomic_flush check drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking drm: Don't unref the same fb many times by mistake due to deadlock handling cpufreq: intel_pstate: Refine computation of P-state for given frequency gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 xfs: read only mounts with fsopen mount API are busted firmware: arm_scmi: Check mailbox/SMT channel for consistency ksmbd: fix global oob in ksmbd_nl_policy platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe netfilter: nf_tables: reject QUEUE/DROP verdict parameters netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes wifi: iwlwifi: fix a memory corruption exec: Fix error handling in begin_new_exec() rbd: don't move requests to the running list on errors btrfs: don't abort filesystem when attempting to snapshot deleted subvolume btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args btrfs: don't warn if discard range is not aligned to sector btrfs: tree-checker: fix inline ref size in error messages btrfs: ref-verify: free ref cache before clearing mount opt btrfs: avoid copying BTRFS_ROOT_SUBVOL_DEAD flag to snapshot of subvolume being deleted nbd: always initialize struct msghdr completely net: fec: fix the unhandled context fault from smmu fjes: fix memleaks in fjes_hw_setup selftests: netdevsim: fix the udp_tunnel_nic test net: mvpp2: clear BM pool before initialization net: stmmac: Wait a bit for the reset to take effect netfilter: nf_tables: validate NFPROTO_* family netfilter: nf_tables: restrict anonymous set and map names to 16 bytes btrfs: fix race between reading a directory and adding entries to it btrfs: refresh dir last index during a rewinddir(3) call btrfs: set last dir index to the current last index when opening dir btrfs: fix infinite directory reads netfilter: nft_limit: reject configurations that cause integer overflow rcu: Defer RCU kthreads wakeup when CPU is dying net/mlx5e: fix a potential double-free in fs_any_create_groups net/mlx5e: fix a double-free in arfs_create_groups net/mlx5e: Allow software parsing when IPsec crypto is enabled net/mlx5: Use mlx5 device constant for selecting CQ period mode for ASO net/mlx5: DR, Can't go to uplink vport on RX rule net/mlx5: DR, Use the right GVMI number for drop action ipv6: init the accept_queue's spinlocks in inet6_create netlink: fix potential sleeping issue in mqueue_flush_file tcp: Add memory barrier to tcp_push() afs: Hide silly-rename files from userspace tracing: Ensure visibility when inserting an element into tracing_map netfs, fscache: Prevent Oops in fscache_put_cache() net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv net: micrel: Fix PTP frame parsing for lan8814 tun: add missing rx stats accounting in tun_xdp_act tun: fix missing dropped counter in tun_xdp_act net: fix removing a namespace with conflicting altnames udp: fix busy polling llc: Drop support for ETH_P_TR_802_2. llc: make llc_ui_sendmsg() more robust against bonding changes vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING bnxt_en: Wait for FLR to complete during probe tcp: make sure init the accept_queue's spinlocks once net/smc: fix illegal rmb_desc access in SMC-D connection dump wifi: mac80211: fix potential sta-link leak drm/amd/display: pbn_div need be updated for hotplug event Revert "drm/amd: Enable PCIe PME from D3" ksmbd: Add missing set_freezable() for freezable kthread ksmbd: send lease break notification on FILE_RENAME_INFORMATION ksmbd: don't increment epoch if current state and request state are same ksmbd: fix potential circular locking issue in smb2_set_ea() ksmbd: set v2 lease version on lease upgrade mm: page_alloc: unreserve highatomic page blocks before oom LoongArch/smp: Call rcutree_report_cpu_starting() earlier serial: sc16is7xx: improve do/while loop in sc16is7xx_irq() serial: sc16is7xx: remove obsolete loop in sc16is7xx_port_irq() serial: sc16is7xx: fix invalid sc16is7xx_lines bitfield in case of probe error serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO serial: sc16is7xx: change EFR lock to operate on each channels serial: sc16is7xx: remove unused line structure member serial: sc16is7xx: remove global regmap from struct sc16is7xx_port serial: sc16is7xx: remove wasteful static buffer in sc16is7xx_regmap_name() serial: sc16is7xx: improve regmap debugfs by using one regmap per port rename(): fix the locking of subdirectories mm/sparsemem: fix race in accessing memory_section->usage mm/rmap: fix misplaced parenthesis of a likely() ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path nouveau/vmm: don't set addr on the fail path to avoid warning rtc: Extend timeout for waiting for UIP to clear to 1s rtc: Add support for configuring the UIP timeout for RTC reads rtc: mc146818-lib: Adjust failure return code for mc146818_get_time() rtc: Adjust failure return code for cmos_set_alarm() rtc: cmos: Use ACPI alarm for non-Intel x86 systems too arm64: Rename ARM64_WORKAROUND_2966298 media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run mmc: mmc_spi: remove custom DMA mapped buffers mmc: core: Use mrq.sbc in close-ended ffu media: videobuf2-dma-sg: fix vmap callback scripts/get_abi: fix source path leak docs: kernel_abi.py: fix command injection lsm: new security_file_ioctl_compat() hook arm64: dts: qcom: sm8150: fix USB DP/DM HS PHY interrupts arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts arm64: dts: qcom: sc7280: fix usb_1 wakeup interrupt types arm64: dts: qcom: sm8150: fix USB wakeup interrupt types arm64: dts: qcom: sdm845: fix USB wakeup interrupt types arm64: dts: qcom: sc7180: fix USB wakeup interrupt types scsi: ufs: core: Remove the ufshcd_hba_exit() call from ufshcd_async_scan() dmaengine: fix NULL pointer in channel unregistration function iio: adc: ad7091r: Enable internal vref if external vref is not supplied async: Introduce async_schedule_dev_nocall() async: Split async_schedule_node_domain() parisc/power: Fix power soft-off button emulation on qemu parisc/firmware: Fix F-extend for PDC addresses bus: mhi: host: Add spinlock to protect WP access when queueing TREs bus: mhi: host: Drop chan lock before queuing buffers bus: mhi: host: Add alignment check for event ring read pointer mips: Fix max_mapnr being uninitialized on early stages s390/vfio-ap: let on_scan_complete() callback filter matrix and update guest's APCB s390/vfio-ap: loop over the shadow APCB when filtering guest's AP configuration s390/vfio-ap: always filter entire AP matrix media: ov9734: Enable runtime PM before registering async sub-device rpmsg: virtio: Free driver_override when rpmsg_remove() media: imx355: Enable runtime PM before registering async sub-device PM / devfreq: Fix buffer overflow in trans_stat_show s390/vfio-ap: unpin pages on gisc registration failure crypto: s390/aes - Fix buffer overread in CTR mode hwrng: core - Fix page fault dead lock on mmap-ed hwrng PM: hibernate: Enforce ordering during image compression/decompression crypto: api - Disallow identical driver names btrfs: sysfs: validate scrub_speed_max value OPP: Pass rounded rate to _set_opp() arm64: properly install vmlinuz.efi ext4: allow for the last group to be marked as trimmed iio: adc: ad7091r: Allow users to configure device events iio: adc: ad7091r: Set alert bit in config register Revert "nSVM: Check for reserved encodings of TLB_CONTROL in nested VMCB" usb: dwc3: gadget: Handle EP0 request dequeuing properly usb: dwc3: gadget: Queue PM runtime idle on disconnect event usb: dwc3: gadget: Refactor EP0 forced stall/restart into a separate API Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/gpio/xlnx,gpio-xilinx.yaml Documentation/devicetree/bindings/media/mediatek,mdp3-rdma.yaml Documentation/devicetree/bindings/media/mediatek,mdp3-wrot.yaml Documentation/devicetree/bindings/media/rockchip-isp1.yaml Documentation/devicetree/bindings/nvmem/mxs-ocotp.yaml drivers/bus/mhi/host/main.c drivers/clk/qcom/videocc-sm8150.c drivers/soc/qcom/llcc-qcom.c include/dt-bindings/clock/qcom,videocc-sm8150.h Change-Id: I736b858a11a53d39b1a31aaa270d6508d9d527ba Upstream-Build: ks_qcom-android14-6.1-keystone-qcom-release@12087153 UKQ2.240714.001 Signed-off-by: Srinivasarao Pathipati <quic_c_spathi@quicinc.com>	2024-07-14 22:05:15 +05:30
Srinivasarao Pathipati	ec1604a821	Merge keystone/android14-6.1-keystone-qcom-release.6.1.68+ (7cb0122) into qcom-6.1 ... * refs/heads/tmp-7cb0122: FROMLIST: mm/migrate: set swap entry values of THP tail pages properly. FROMLIST: binder: check offset alignment in binder_get_object() FROMLIST: iommu: Avoid races around default domain allocations ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hook: rename the the name of hooks Revert "interconnect: Fix locking for runpm vs reclaim" ANDROID: abi_gki_aarch64_qcom: Update symbol list Revert "interconnect: Teach lockdep about icc_bw_lock order" Revert "usb: dwc3: core: configure TX/RX threshold for DWC3_IP" Revert "usb: dwc3: core: configure TX/RX threshold for DWC3_IP" ANDROID: Update symbols list for open-dice.ko ANDROID: Update symbols list for open-dice.ko ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hook: rename the the name of hooks ANDROID: EXPORT raise_softirq and update the ABI symbol list UPSTREAM: netfilter: nf_tables: disallow timeout for anonymous sets BACKPORT: FROMGIT: mm: add alloc_contig_migrate_range allocation statistics FROMLIST: iommu: Avoid races around default domain allocations ANDROID: fips140 - fix integrity check by unapplying dynamic SCS ANDROID: fips140 - add option for debugging the integrity check BACKPORT: f2fs: split initial and dynamic conditions for extent_cache ANDROID: GKI: Update oplus symbol list ANDROID: Update the ABI symbol list UPSTREAM: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group UPSTREAM: epoll: use refcount to reduce ep_mutex contention ANDROID: GKI: Update oplus symbol list ANDROID: uid_sys_stat: fix data-error of cputime and io ANDROID: Update the ABI symbol list ANDROID: vendor_hooks: Export cma_alloc trace points ANDROID: gki_defconfig: Enable CONFIG_ARM_SCMI_TRANSPORT_VIRTIO Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" UPSTREAM: net: tls: fix use-after-free with partial reads and async decrypt ANDROID: GKI: add GKI symbol list for Exynosauto SoC UPSTREAM: usb: typec: class: fix typec_altmode_put_partner to put plugs UPSTREAM: Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs" ANDROID: GKI: Update symbol list for mtk ANDROID: GKI: Update oplus symbol list FROMGIT: f2fs: introduce FAULT_BLKADDR_CONSISTENCE FROMGIT: f2fs: fix to remove unnecessary f2fs_bug_on() to avoid panic FROMGIT: f2fs: compress: fix to avoid inconsistence bewteen i_blocks and dnode FROMGIT: f2fs: compress: fix to check unreleased compressed cluster FROMGIT: f2fs: compress: fix to cover normal cluster write with cp_rwsem FROMGIT: f2fs: compress: fix to guarantee persisting compressed blocks by CP BACKPORT: gso: fix dodgy bit handling for GSO_UDP_L4 ANDROID: remove LTO check from build.config.gki.aarch64.fips140 ANDROID: add symbol list for fips140 module ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: Add hook for trace_android_vh_copy_process ANDROID: abi_gki_aarch64_qcom: Update symbol list ANDROID: GKI: Update symbol list for transsion ANDROID: Add vendor_hooks to workaround CONFIG_TASK_DELAY_ACCT Revert "ANDROID: Build null_blk and scsi_debug as kernel modules" Revert "interconnect: Fix locking for runpm vs reclaim" ANDROID: GKI: Update symbol list for xiaomi ANDROID: sched/cpuset: Add vendor hook to change tasks affinity ANDROID: ABI: Update oplus symbol list ANDROID: binder: Add vendor hook to fix priority restore Revert "interconnect: Teach lockdep about icc_bw_lock order" BACKPORT: gso: fix dodgy bit handling for GSO_UDP_L4 ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: Add hook for trace_android_vh_copy_process ANDROID: GKI: Update symbol list for mtk FROMGIT: PM: runtime: add tracepoint for runtime_status changes ANDROID: GKI: add allowed list file for xiaomi UPSTREAM: netfilter: nft_set_rbtree: skip end interval element from gc ANDROID: GKI: add symbol list file for moto UPSTREAM: scsi: ufs: core: Fix racing issue between ufshcd_mcq_abort() and ISR UPSTREAM: scsi: ufs: core: Remove dev cmd clock scaling busy ANDROID: ABI: Update symbol list for Nothing ANDROID: abi_gki_aarch64_qcom: Export trace_android_vh_try_fixup_sea ANDROID: arm64: Call fixup_exception() within do_sea() ANDROID: PCI: dwc: Wait for the link only if it has been started ANDROID: Update the Pixel symbol list and GKI ABI ANDROID: scsi: ufs: add complete init vendor hook ANDROID: Update the ABI symbol list ANDROID: Fix CRC error with iommu_* functions Revert "bpf: add percpu stats for bpf_map elements insertions/deletions" Revert "bpf: Add map and need_defer parameters to .map_fd_put_ptr()" Revert "bpf: Defer the free of inner map when necessary" ANDROID: Roll back some code to fix system_server registers psi trigger failed. ANDROID: GKI: Update the ABI symbol list UPSTREAM: virtio: Add support for no-reset virtio PCI PM UPSTREAM: netfilter: nf_tables: check if catch-all set element is active in next generation UPSTREAM: net: tls, update curr on splice as well ANDROID: Update the ABI symbol list ANDROID: Add pci_read_config_word to virtual device symbol list ANDROID: Export kthread_set_per_cpu ANDROID: GKI: fix ABI breakage in struct ipv6_devconf Reapply "net: release reference to inet6_dev pointer" Reapply "net: change accept_ra_min_rtr_lft to affect all RA lifetimes" Reapply "net: add sysctl accept_ra_min_rtr_lft" ANDROID: GKI: explicit include of stringify.h BACKPORT: erofs: fix infinite loop due to a race of filling compressed_bvecs ANDROID: arm64: virt: Invalidate tlb once the balloon before reporting/inflating ANDROID: arm64: virt: Make the page_relinquish call generic UPSTREAM: drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks UPSTREAM: drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks UPSTREAM: drm/msm/dsi: Enable runtime PM UPSTREAM: arm64: scs: Disable LTO for SCS patching code ANDROID: GKI: Update symbol list for mtk ANDROID: GKI: Update symbol list for mtk BACKPORT: f2fs: Restrict max filesize for 16K f2fs BACKPORT: f2fs: Support Block Size == Page Size ANDROID: abi_gki_aarch64_qcom: Update symbol list UPSTREAM: drm/msm/dsi: Enable runtime PM UPSTREAM: usb: typec: tcpm: fix the PD disabled case ANDROID: ABI: Update symbol list for imx UPSTREAM: netfilter: nf_tables: reject QUEUE/DROP verdict parameters ANDROID: ABI: Update oplus symbol list ANDROID: fuse: Fix the issue of fuse_dentry_canonical_path ANDROID: Update the ABI symbol list ANDROID: Export cpufreq_driver_test_flags() ANDROID: Build null_blk and scsi_debug as kernel modules ANDROID: GKI: Update the pixel symbol list ANDROID: usb: dwc3: export tracepoint for dwc3 read/write ANDROID: scsi: ufs: add vendor hook to override key reprogramming ANDROID: vendor_hooks: Add hook for binder_detect_low_async_space_locked ANDROID: Update the ABI symbol list ANDROID: Update the ABI representation UPSTREAM: usb: typec: tcpm: Support multiple capabilities UPSTREAM: usb: typec: tcpm: Parse Accessory Mode information ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: add hooks in driver/android/binder.c UPSTREAM: net/rose: Fix Use-After-Free in rose_ioctl UPSTREAM: ida: Fix crash in ida_free when the bitmap is empty ANDROID: GKI: Update symbol list for mtk ANDROID: GKI: Update symbol list for mtk Reapply "perf: Disallow mis-matched inherited group reads" ANDROID: GKI: Add Pasa symbol list FROMGIT: mm: memcg: don't periodically flush stats when memcg is disabled ANDROID: Update the ABI symbol list ANDROID: sched: export update_misfit_status symbol ANDROID: GKI: Add ASR KMI symbol list FROMGIT: usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend FROMLIST: usb: core: Prevent null pointer dereference in update_port_device_state ANDROID: gki_defconfig: Enable CONFIG_NVME_MULTIPATH BACKPORT: irqchip/gic-v3: Work around affinity issues on ASR8601 BACKPORT: irqchip/gic-v3: Improve affinity helper Linux 6.1.75 Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" arm64: dts: armada-3720-turris-mox: set irq type for RTC Revert "KEYS: encrypted: Add check for strsep" riscv: Fix wrong usage of lm_alias() when splitting a huge linear mapping block: Remove special-casing of compound pages i2c: s3c24xx: fix transferring more than one message in polling mode i2c: s3c24xx: fix read transfers in polling mode ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure loop: fix the the direct I/O support check when used on top of block devices ethtool: netlink: Add missing ethnl_ops_begin/complete kdb: Fix a potential buffer overflow in kdb_local() ipvs: avoid stat macros calls from preemptible context netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description netfilter: nf_tables: skip dead set elements in netlink dump netfilter: nf_tables: do not allow mismatch field size and set key length netfilter: bridge: replace physindev with physinif in nf_bridge_info netfilter: propagate net to nf_bridge_get_physindev netfilter: nf_queue: remove excess nf_bridge variable netfilter: nfnetlink_log: use proper helper for fetching physinif netfilter: nft_limit: do not ignore unsupported flags netfilter: nf_tables: reject invalid set policy mptcp: relax check on MPC passive fallback LoongArch: BPF: Prevent out-of-bounds memory access net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS net: stmmac: ethtool: Fixed calltrace caused by unbalanced disable_irq_wake calls drm/amdkfd: fixes for HMM mem allocation drm/amdkfd: Use resource_size() helper function dt-bindings: gpio: xilinx: Fix node address in gpio net: ravb: Fix dma_addr_t truncation in error case udp: annotate data-races around up->pending block: ensure we hold a queue reference when using queue limits mptcp: refine opt_mp_capable determination mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req() mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() mptcp: strict validation before using mp_opt->hmac mptcp: mptcp_parse_option() fix for MPTCPOPT_MP_JOIN net: phy: micrel: populate .soft_reset for KSZ9131 amt: do not use overwrapped cb area net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames net: qualcomm: rmnet: fix global oob in rmnet_policy s390/pci: fix max size calculation in zpci_memcpy_toio() ASoC: mediatek: sof-common: Add NULL check for normal_link string PCI: mediatek-gen3: Fix translation window size calculation PCI: keystone: Fix race condition when initializing PHYs nvmet-tcp: Fix the H2C expected PDU len calculation nvme: trace: avoid memcpy overflow warning nvmet: re-fix tracing strncpy() warning serial: imx: Correct clock error message in function probe() usb: xhci-mtk: fix a short packet issue of gen1 isoc-in transfer apparmor: avoid crash when parsed profile name is empty cxl/region: fix x9 interleave typo perf env: Avoid recursively taking env->bpf_progs.lock nvmet-tcp: fix a crash in nvmet_req_complete() nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length vdpa: Fix an error handling path in eni_vdpa_probe() spmi: mtk-pmif: Serialize PMIF status check and command submission usb: cdc-acm: return correct error code on unsupported break tty: use 'if' in send_break() instead of 'goto' tty: don't check for signal_pending() in send_break() tty: early return from send_break() on TTY_DRIVER_HARDWARE_BREAK tty: change tty_write_lock()'s ndelay parameter to bool perf genelf: Set ELF program header addresses properly perf hisi-ptt: Fix one memory leakage in hisi_ptt_process_auxtrace_event() perf header: Fix one memory leakage in perf_event__fprintf_event_update() iio: adc: ad9467: fix scale setting iio: adc: ad9467: don't ignore error codes iio: adc: ad9467: fix reset gpio handling selftests/sgx: Skip non X86_64 platform selftests/sgx: Include memory clobber for inline asm in test enclave selftests/sgx: Fix uninitialized pointer dereferences in encl_get_entry selftests/sgx: Fix uninitialized pointer dereference in error path serial: imx: fix tx statemachine deadlock software node: Let args be NULL in software_node_get_reference_args acpi: property: Let args be NULL in __acpi_node_get_property_reference base/node.c: initialize the accessor list before registering libapi: Add missing linux/types.h header to get the __u64 type on io.h serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed power: supply: bq256xx: fix some problem in bq256xx_hw_init power: supply: cw2015: correct time_to_empty units in sysfs MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup() MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup() riscv: Fixed wrong register in XIP_FIXUP_FLASH_OFFSET macro riscv: Fix set_direct_map_default_noflush() to reset _PAGE_EXEC riscv: Fix set_memory_XX() and set_direct_map_XX() by splitting huge linear mappings riscv: Fix module_alloc() that did not reset the linear mapping permissions riscv: Check if the code to patch lies in the exit section mips: Fix incorrect max_low_pfn adjustment mips: dmi: Fix early remap on MIPS32 mfd: intel-lpss: Fix the fractional clock divider flags leds: aw2013: Select missing dependency REGMAP_I2C mfd: syscon: Fix null pointer dereference in of_syscon_register() ARM: 9330/1: davinci: also select PINCTRL serial: sc16is7xx: set safe default SPI clock frequency serial: sc16is7xx: add check for unsupported SPI modes during probe HID: wacom: Correct behavior when processing some confidence == false touches iio: adc: ad7091r: Pass iio_dev to event handler KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache KVM: arm64: vgic-v4: Restore pending state on host userspace write x86/kvm: Do not try to disable kvmclock if it was not enabled PCI: mediatek: Clear interrupt status before dispatching handler PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support PCI/P2PDMA: Remove reference to pci_p2pdma_map_sg() cxl/port: Fix decoder initialization when nr_targets > interleave_ways Revert "net: rtnetlink: Enslave device before bringing it up" wifi: mwifiex: configure BSSID consistently when starting AP wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code wifi: mt76: fix broken precal loading from MTD for mt7915 iommu/dma: Trace bounce buffer usage when mapping buffers iommu/arm-smmu-qcom: Add missing GMU entry to match table LoongArch: Fix and simplify fcsr initialization on execve() bpf: Fix re-attachment branch in bpf_tracing_prog_attach Bluetooth: Fix atomicity violation in {min,max}_key_size_set rootfs: Fix support for rootfstype= when root= is given md/raid1: Use blk_opf_t for read and write operations pwm: Fix out-of-bounds access in of_pwm_single_xlate() pwm: jz4740: Don't use dev_err_probe() in .request() netfilter: nf_tables: check if catch-all set element is active in next generation block: Fix iterating over an empty bio with bio_for_each_folio_all block: add check that partition length needs to be aligned with block size drm/amd: Enable PCIe PME from D3 scsi: mpi3mr: Block PEL Enable Command on Controller Reset and Unrecoverable State scsi: mpi3mr: Refresh sdev queue depth after controller reset scsi: target: core: add missing file_{start,end}_write() scsi: ufs: core: Simplify power management during async scan fbdev: flush deferred IO before closing fbdev: flush deferred work in fb_deferred_io_fsync() io_uring/rw: ensure io->bytes_done is always initialized ksmbd: only v2 leases handle the directory ksmbd: fix UAF issue in ksmbd_tcp_new_connection() ksmbd: validate mech token in session setup ALSA: hda/realtek: Enable headset mic on Lenovo M70 Gen5 ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on HP ZBook ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx ALSA: oxygen: Fix right channel of capture volume mixer drm/vmwgfx: Keep a gem reference to user bos in surfaces drm/vmwgfx: Fix possible invalid drm gem put calls serial: omap: do not override settings for RS485 support serial: 8250_exar: Set missing rs485_supported flag serial: imx: Ensure that imx_uart_rs485_config() is called with enabled clock serial: core, imx: do not set RS485 enabled if it is not supported serial: 8250_bcm2835aux: Restore clock error handling serial: core: make sure RS485 cannot be enabled when it is not supported serial: core: fix sanitizing check for RTS settings usb: mon: Fix atomicity violation in mon_bin_vma_fault usb: typec: class: fix typec_altmode_put_partner to put plugs Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs" usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled usb: cdns3: fix iso transfer error when mult is not zero usb: cdns3: fix uvc failure work since sg support enabled usb: chipidea: wait controller resume finished for wakeup irq Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-only" Revert "usb: dwc3: Soft reset phy on probe for host" usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host() tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug powerpc/64s: Increase default stack size to 32KB clocksource/drivers/timer-ti-dm: Fix make W=n kerneldoc warnings binder: fix race between mmput() and do_exit() xen-netback: don't produce zero-size SKB frags Input: atkbd - use ab83 as id when skipping the getid command mips/smp: Call rcutree_report_cpu_starting() earlier binder: fix unused alloc->free_async_space binder: fix async space check for 0-sized buffers keys, dns: Fix size check of V1 server-list header selftests/bpf: Add assert for user stacks in test_task_stack of: unittest: Fix of_count_phandle_with_args() expected value message fbdev: imxfb: fix left margin setting of: Fix double free in of_parse_phandle_with_args_map ksmbd: validate the zero field of packet header kselftest/alsa - mixer-test: Fix the print format specifier warning kselftest/alsa - mixer-test: fix the number of parameters to ksft_exit_fail_msg() drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c IB/iser: Prevent invalidating wrong MR mmc: sdhci_omap: Fix TI SoC dependencies mmc: sdhci_am654: Fix TI SoC dependencies ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put() ALSA: scarlett2: Add missing error checks to *_ctl_get() ALSA: scarlett2: Allow passing any output to line_out_remap() ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config() ALSA: scarlett2: Add missing error check to scarlett2_config_save() ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[] pwm: stm32: Fix enable count for clk in .probe() pwm: stm32: Use hweight32 in stm32_pwm_detect_channels pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw accel/habanalabs: fix information leak in sec_attest_info() drm/mediatek: dp: Add phy_mtk_dp module as pre-dependency clk: si5341: fix an error code problem in si5341_output_clk_set_rate watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO watchdog: set cdev owner before adding drivers: clk: zynqmp: update divider round rate logic drivers: clk: zynqmp: calculate closest mux rate clk: qcom: videocc-sm8150: Add missing PLL config property clk: qcom: videocc-sm8150: Update the videocc resets dt-bindings: clock: Update the videocc resets for sm8150 f2fs: fix to check return value of f2fs_recover_xattr_data drm/amd/pm: fix a double-free in amdgpu_parse_extended_power_table gpu/drm/radeon: fix two memleaks in radeon_vm_init drivers/amd/pm: fix a use-after-free in kv_parse_power_table drm/amd/pm: fix a double-free in si_dpm_init drm/amdgpu/debugfs: fix error code when smc register accessors are NULL drm/mediatek: Fix underrun in VDO1 when switches off the layer drm/mediatek: Return error if MDP RDMA failed to enable the clock drm/msm/dpu: Drop enable and frame_count parameters from dpu_hw_setup_misr() drm/msm/dpu: Set input_sel bit for INTF clk: renesas: rzg2l: Check reset monitor registers clk: renesas: rzg2l-cpg: Reuse code in rzg2l_cpg_reset() media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of m88ds3103_probe() media: dvbdev: drop refcount on error path in dvb_device_open() f2fs: fix to update iostat correctly in f2fs_filemap_fault() f2fs: fix to check compress file in f2fs_move_file_range() f2fs: fix to wait on block writeback for post_read case drm/panel: st7701: Fix AVCL calculation media: rkisp1: Fix media device memory leak media: dt-bindings: media: rkisp1: Fix the port description for the parallel interface media: imx-mipi-csis: Fix clock handling in remove() clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config RDMA/hns: Fix memory leak in free_mr_init() media: cx231xx: fix a memleak in cx231xx_init_isoc drm/bridge: tc358767: Fix return value on error case drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table drm/radeon/dpm: fix a memleak in sumo_parse_power_table drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() drm/panfrost: Ignore core_mask for poweroff and disable PWRTRANS irq ASoC: Intel: glk_rt5682_max98357a: fix board id mismatch drm/drv: propagate errors from drm_modeset_register_all() drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks drm/msm/mdp4: flush vblank event on disable ASoC: cs35l34: Fix GPIO name and drop legacy include ASoC: cs35l33: Fix GPIO name and drop legacy include drm/tidss: Fix dss reset drm/tidss: Check for K2G in in dispc_softreset() drm/tidss: Return error value from from softreset drm/tidss: Move reset to the end of dispc_init() drm/radeon: check return value of radeon_ring_lock() drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check() drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg() f2fs: fix to avoid dirent corruption drm/bridge: Fix typo in post_disable() description media: rkvdec: Hook the (TRY_)DECODER_CMD stateless ioctls media: verisilicon: Hook the (TRY_)DECODER_CMD stateless ioctls media: mtk-jpeg: Remove cancel worker in mtk_jpeg_remove to avoid the crash of multi-core JPEG devices media: mtk-jpegdec: export jpeg decoder functions media: pvrusb2: fix use after free on context disconnection drm/tilcdc: Fix irq free on unload drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer drm/panel-elida-kd35t133: hold panel in reset for unprepare RDMA/hns: Fix inappropriate err code for unsupported operations RDMA/usnic: Silence uninitialized symbol smatch warnings drm/panfrost: Really power off GPU cores in panfrost_gpu_power_off() Revert "drm/omapdrm: Annotate dma-fence critical section in commit path" Revert "drm/tidss: Annotate dma-fence critical section in commit path" ARM: davinci: always select CONFIG_CPU_ARM926T ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() mlxbf_gige: Enable the GigE port in mlxbf_gige_open mlxbf_gige: Fix intermittent no ip issue net/sched: act_ct: fix skb leak and crash on ooo frags sctp: fix busy polling sctp: support MSG_ERRQUEUE flag in recvmsg() bpf: sockmap, fix proto update hook to avoid dup calls null_blk: don't cap max_hw_sectors to BLK_DEF_MAX_SECTORS block: make BLK_DEF_MAX_SECTORS unsigned Bluetooth: btmtkuart: fix recv_buf() return value Bluetooth: Fix bogus check for re-auth no supported with non-ssp netfilter: nf_tables: mark newset as dead on transaction abort wifi: iwlwifi: mvm: send TX path flush in rfkill wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request wifi: rtlwifi: rtl8192se: using calculate_bit_shift() wifi: rtlwifi: rtl8192ee: using calculate_bit_shift() wifi: rtlwifi: rtl8192de: using calculate_bit_shift() wifi: rtlwifi: rtl8192ce: using calculate_bit_shift() wifi: rtlwifi: rtl8192cu: using calculate_bit_shift() wifi: rtlwifi: rtl8192c: using calculate_bit_shift() wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift() wifi: rtlwifi: add calculate_bit_shift() arm64: dts: qcom: ipq6018: Fix up indentation arm64: dts: qcom: ipq6018: Pad addresses to 8 hex digits arm64: dts: qcom: ipq6018: Use lowercase hex arm64: dts: qcom: ipq6018: improve pcie phy pcs reg table arm64: dts: qcom: ipq6018: fix clock rates for GCC_USB0_MOCK_UTMI_CLK arm64: dts: qcom: sc7280: Mark SDHCI hosts as cache-coherent block: add check of 'minors' and 'first_minor' in device_add_disk() arm64: dts: qcom: sm8150-hdk: fix SS USB regulators soc: qcom: llcc: Fix dis_cap_alloc and retain_on_pc configuration dma-mapping: clear dev->dma_mem to NULL after freeing it virtio/vsock: fix logic which reduces credit update messages ipmr: support IP_PKTINFO on cache report IGMP msg selftests/net: fix grep checking for fib_nexthop_multiprefix ARM: dts: stm32: don't mix SCMI and non-SCMI board compatibles scsi: hisi_sas: Correct the number of global debugfs registers scsi: hisi_sas: Rollback some operations if FLR failed scsi: hisi_sas: Replace with standard error code return value arm64: dts: imx8mm: Reduce GPU to nominal speed arm64: dts: renesas: white-hawk-cpu: Fix missing serial console pin control block: Set memalloc_noio to false on device_add_disk() error path selftests/bpf: Relax time_tai test for equal timestamps in tai_forward wifi: mt76: mt7921: fix country count limitation for CLC arm64: dts: mediatek: mt8183: correct MDP3 DMA-related nodes dt-bindings: media: mediatek: mdp3: correct RDMA and WROT node with generic names arm64: dts: hisilicon: hikey970-pmic: fix regulator cells properties bpf: Fix verification of indirect var-off stack access wifi: mt76: mt7921s: fix workqueue problem causes STA association fail arm64: dts: qcom: sc7280: fix usb_2 wakeup interrupt types arm64: dts: qcom: sc7280: Mark Adreno SMMU as DMA coherent arm64: dts: qcom: sc7280: Fix up GPU SIDs arm64: dts: qcom: sm8350: Fix DMA0 address arm64: dts: qcom: sdm845-db845c: correct LED panic indicator arm64: dts: qcom: qrb5165-rb5: correct LED panic indicator scsi: fnic: Return error if vmalloc() failed bpf: fix check for attempt to corrupt spilled pointer selftests/net: specify the interface when do arping bpf: Defer the free of inner map when necessary bpf: Add map and need_defer parameters to .map_fd_put_ptr() bpf: add percpu stats for bpf_map elements insertions/deletions rcu-tasks: Provide rcu_trace_implies_rcu_gp() arm64: dts: qcom: sm6350: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sc8280xp: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sm8250: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sm8150: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sdm845: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sc7280: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sc7280: Mark some nodes as 'reserved' arm64: dts: qcom: sc7180: Make watchdog bark interrupt edge triggered ARM: dts: qcom: sdx65: correct SPMI node name bpf: enforce precision of R0 on callback return md: synchronize flush io with array reconfiguration selftests/bpf: Fix erroneous bitmask operation arm64: dts: ti: k3-am65-main: Fix DSS irq trigger type arm64: dts: ti: k3-am62a-main: Fix GPIO pin count in DT nodes wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior firmware: meson_sm: populate platform devices from sm device tree data firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create() net/ncsi: Fix netlink major/minor version numbers ARM: dts: qcom: apq8064: correct XOADC register address wifi: libertas: stop selecting wext wifi: ath11k: Defer on rproc_get failure bpf: Add crosstask check to __bpf_get_stack bpf, lpm: Fix check prefixlen before walking trie wifi: rtw88: fix RX filter in FIF_ALLMULTI flag wifi: plfxlc: check for allocation failure in plfxlc_usb_wreq_async() pNFS: Fix the pnfs block driver's calculation of layoutget size SUNRPC: fix _xprt_switch_find_current_entry logic NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT blocklayoutdriver: Fix reference leak of pnfs_device_node csky: fix arch_jump_label_transform_static override crypto: scomp - fix req->dst buffer overflow crypto: sahara - do not resize req->src when doing hash operations crypto: sahara - fix processing hash requests with req->nbytes < sg->length crypto: sahara - improve error handling in sahara_sha_process() crypto: sahara - fix wait_for_completion_timeout() error handling crypto: sahara - fix ahash reqsize crypto: sahara - handle zero-length aes requests crypto: sahara - avoid skcipher fallback code duplication crypto: virtio - Wait for tasklet to complete on device remove gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump fs: indicate request originates from old mount API erofs: fix memory leak on short-lived bounced pages pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() crypto: hisilicon/zip - save capability registers in probe process crypto: hisilicon/sec2 - save capability registers in probe process crypto: hisilicon/hpre - save capability registers in probe process crypto: hisilicon/qm - add a function to set qm algs crypto: hisilicon/zip - add zip comp high perf mode configuration crypto: hisilicon/qm - save capability registers in qm init process crypto: sahara - fix error handling in sahara_hw_descriptor_create() crypto: sahara - fix processing requests with cryptlen < sg->length crypto: sahara - fix ahash selftest failure crypto: sahara - fix cbc selftest failure crypto: sahara - remove FLAGS_NEW_KEY logic crypto: safexcel - Add error handling for dma_map_sg() calls crypto: af_alg - Disallow multiple in-flight AIO requests crypto: ccp - fix memleak in ccp_init_dm_workarea crypto: sa2ul - Return crypto_aead_setkey to transfer the error crypto: virtio - Handle dataq logic with tasklet selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket mtd: Fix gluebi NULL pointer dereference caused by ftl notifier kunit: debugfs: Fix unchecked dereference in debugfs_print_results() ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error ACPI: LPSS: Fix the fractional clock divider flags spi: sh-msiof: Enforce fixed DTDL for R-Car H3 efivarfs: Free s_fs_info on unmount efivarfs: force RO when remounting if SetVariable is not supported calipso: fix memory leak in netlbl_calipso_add_pass() cpufreq: scmi: process the result of devm_of_clk_add_hw_provider() cpufreq: Use of_property_present() for testing DT property presence of: Add of_property_present() helper platform/x86/intel/vsec: Fix xa_alloc memory leak platform/x86/intel/vsec: Use mutex for ida_alloc() and ida_free() platform/x86/intel/vsec: Support private data platform/x86/intel/vsec: Enhance and Export intel_vsec_add_aux() KEYS: encrypted: Add check for strsep ACPI: LPIT: Avoid u32 multiplication overflow ACPI: video: check for error while searching for backlight device parent mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response spi: spi-zynqmp-gqspi: fix driver kconfig dependencies powerpc/imc-pmu: Add a null pointer check in update_events_in_group() powerpc/powernv: Add a null pointer check in opal_powercap_init() powerpc/powernv: Add a null pointer check in opal_event_init() powerpc/powernv: Add a null pointer check to scom_debug_init_one() selftests/powerpc: Fix error handling in FPU/VMX preemption tests powerpc/pseries/memhp: Fix access beyond end of drmem array powerpc/44x: select I2C for CURRITUCK powerpc: add crtsavres.o to always-y instead of extra-y powerpc: remove checks for binutils older than 2.25 EDAC/thunderx: Fix possible out-of-bounds string access x86/mce/inject: Clear test status value x86/lib: Fix overflow when counting digits UPSTREAM: sched/fair: Limit sched slice duration ANDROID: Update the ABI symbol list ANDROID: idle_inject: Export function symbols ANDROID: Update the ABI symbol list ANDROID: GKI: Remove CONFIG_MEDIA_CEC_RC BACKPORT: usb: host: xhci: Avoid XHCI resume delay if SSUSB device is not present ANDROID: Update the ABI symbol list ANDROID: uid_sys_stats: Drop CONFIG_UID_SYS_STATS_DEBUG logic ANDROID: Update the ABI symbol list ANDROID: Update the ABI symbol list UPSTREAM: usb: gadget: uvc: Remove nested locking ANDROID: uid_sys_stats: Fully initialize uid_entry_tmp value ANDROID: Roll back some code to fix system_server registers psi trigger failed. UPSTREAM: usb: gadget: uvc: Fix use are free during STREAMOFF ANDROID: GKI: Add symbol list for Nothing Linux 6.1.74 scripts/decode_stacktrace.sh: optionally use LLVM utilities coresight: etm4x: Fix width of CCITMIN field PCI: Add ACS quirk for more Zhaoxin Root Ports leds: ledtrig-tty: Free allocated ttyname buffer on deactivate parport: parport_serial: Add Brainboxes device IDs and geometry parport: parport_serial: Add Brainboxes BAR details uio: Fix use-after-free in uio_open binder: fix comment on binder_alloc_new_buf() return value binder: fix trivial typo of binder_free_buf_locked() binder: fix use-after-free in shinker's callback binder: use EPOLLERR from eventpoll.h Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" ksmbd: free ppace array on error in parse_dacl ksmbd: don't allow O_TRUNC open on read-only share bpf: Add --skip_encoding_btf_inconsistent_proto, --btf_gen_optimized to pahole flags for v1.25 btf, scripts: Exclude Rust CUs with pahole ASoC: SOF: Intel: hda-codec: Delay the codec device registration ACPI: resource: Add another DMI match for the TongFang GMxXGxx ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP Envy X360 13-ay0xxx drm/crtc: fix uninitialized variable use ARM: sun9i: smp: fix return code check of of_property_match_string net: qrtr: ns: Return 0 if server port is not present virtio_blk: fix snprintf truncation compiler warning ida: Fix crash in ida_free when the bitmap is empty pinctrl: cy8c95x0: Fix get_pincfg pinctrl: cy8c95x0: Fix typo drm/amd/display: get dprefclk ss info from integration info table i2c: rk3x: fix potential spinlock recursion on poll smb: client: fix potential OOB in smb2_dump_detail() HID: nintendo: Prevent divide-by-zero on code dm audit: fix Kconfig so DM_AUDIT depends on BLK_DEV_DM ALSA: hda/realtek: Add quirks for ASUS Zenbook 2022 Models ASoC: Intel: bytcr_rt5640: Add new swapped-speakers quirk ASoC: Intel: bytcr_rt5640: Add quirk for the Medion Lifetab S10346 platform/x86: thinkpad_acpi: fix for incorrect fan reporting on some ThinkPad systems HID: nintendo: fix initializer element is not constant error kselftest: alsa: fixed a print formatting warning Input: xpad - add Razer Wolverine V2 support wifi: iwlwifi: pcie: avoid a NULL pointer dereference ARC: fix spare error s390/scm: fix virtual vs physical address confusion Input: i8042 - add nomux quirk for Acer P459-G2-M Input: atkbd - skip ATKBD_CMD_GETID in translated mode reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning Input: psmouse - enable Synaptics InterTouch for ThinkPad L14 G1 ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI tracing: Fix uaf issue when open the hist or hist_debug file MIPS: dts: loongson: drop incorrect dwmac fallback compatible stmmac: dwmac-loongson: drop useless check for compatible fallback tracing: Add size check when printing trace_marker output tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing jbd2: fix soft lockup in journal_finish_inode_data_buffers() platform/x86: intel-vbtn: Fix missing tablet-mode-switch events neighbour: Don't let neigh_forced_gc() disable preemption for long drm/crtc: Fix uninit-value bug in drm_mode_setcrtc jbd2: increase the journal IO's priority jbd2: correct the printing of write_flags in jbd2_write_superblock() clk: rockchip: rk3128: Fix HCLK_OTG gate register clk: rockchip: rk3568: Add PLL rate for 292.5MHz LoongArch: Preserve syscall nr across execve() hwmon: (corsair-psu) Fix probe when built-in drm/exynos: fix a wrong error checking drm/exynos: fix a potential error pointer dereference drm/amdgpu: Add NULL checks for function pointers arm64: dts: rockchip: Fix PCI node addresses on rk3399-gru nvme: prevent potential spectre v1 gadget nvme: introduce helper function to get ctrl state ASoC: ops: add correct range check for limiting volume ASoC: da7219: Support low DC impedance headset net/tg3: fix race condition in tg3_reset_task() ASoC: hdac_hda: Conditionally register dais for HDMI and Analog ASoC: amd: yc: Add DMI entry to support System76 Pangolin 13 nouveau/tu102: flush all pdbs on vmm flush ASoC: Intel: skl_hda_dsp_generic: Drop HDMI routes when HDMI is not available ASoC: rt5650: add mutex to avoid the jack detection failure ASoC: cs43130: Fix incorrect frame delay configuration ASoC: cs43130: Fix the position of const qualifier ASoC: Intel: Skylake: mem leak in skl register function ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16 ASoC: Intel: Skylake: Fix mem leak in few functions arm64: dts: rockchip: fix rk356x pcie msg interrupt name ASoC: wm8974: Correct boost mixer inputs hwtracing: hisi_ptt: Don't try to attach a task hwtracing: hisi_ptt: Handle the interrupt in hardirq context nvme-core: check for too small lba shift blk-mq: don't count completed flush data request as inflight in case of quiesce smb: client, common: fix fortify warnings drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer drm/amd/display: update dcn315 lpddr pstate latency nvme-core: fix a memory leak in nvme_ns_info_from_identify() ALSA: hda: intel-nhlt: Ignore vbps when looking for DMIC 32 bps format debugfs: fix automount d_fsdata usage wifi: mac80211: handle 320 MHz in ieee80211_ht_cap_ie_to_sta_ht_cap wifi: avoid offset calculation on NULL pointer wifi: cfg80211: lock wiphy mutex for rfkill poll mptcp: fix uninit-value in mptcp_incoming_options ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro pinctrl: lochnagar: Don't build on MIPS f2fs: explicitly null-terminate the xattr list ANDROID: Enable CONFIG_LAZY_RCU in x86 gki_defconfig ANDROID: fuse-bpf: Fix the issue of abnormal lseek system calls ANDROID: ABI: Update symbol list for imx BACKPORT: PM: sleep: Fix possible deadlocks in core system-wide PM code UPSTREAM: async: Introduce async_schedule_dev_nocall() UPSTREAM: async: Split async_schedule_node_domain() FROMGIT: BACKPORT: mm: update mark_victim tracepoints fields ANDROID: Enable CONFIG_LAZY_RCU in arm64 gki_defconfig FROMLIST: rcu: Provide a boot time parameter to control lazy RCU ANDROID: rcu: Add a minimum time for marking boot as completed UPSTREAM: rcu: Disable laziness if lazy-tracking says so UPSTREAM: rcu: Track laziness during boot and suspend UPSTREAM: net: Use call_rcu_hurry() for dst_release() UPSTREAM: workqueue: Make queue_rcu_work() use call_rcu_hurry() UPSTREAM: percpu-refcount: Use call_rcu_hurry() for atomic switch UPSTREAM: io_uring: use call_rcu_hurry if signaling an eventfd UPSTREAM: rcu: Update synchronize_rcu_mult() comment for call_rcu_hurry() UPSTREAM: scsi/scsi_error: Use call_rcu_hurry() instead of call_rcu() UPSTREAM: rcu/rcutorture: Use call_rcu_hurry() where needed UPSTREAM: rcu/rcuscale: Use call_rcu_hurry() for async reader test UPSTREAM: rcu/sync: Use call_rcu_hurry() instead of call_rcu BACKPORT: rcu: Shrinker for lazy rcu UPSTREAM: rcu: Refactor code a bit in rcu_nocb_do_flush_bypass() UPSTREAM: rcu: Make call_rcu() lazy to save power UPSTREAM: rcu: Fix missing nocb gp wake on rcu_barrier() UPSTREAM: rcu: Fix late wakeup when flush of bypass cblist happens ANDROID: Update the ABI symbol list ANDROID: GKI: add GKI symbol list for Exynosauto SoC UPSTREAM: coresight: tmc: Don't enable TMC when it's not ready. UPSTREAM: netfilter: nf_tables: bail out on mismatching dynset and set expressions Revert "ipv6: remove max_size check inline with ipv4" ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: add hooks in driver/android/binder.c ANDROID: GKI: Update honda symbol list for xt_LOG ANDROID: GKI: Update honda symbol list for ebt filter ANDROID: GKI: Update honda symbol list for ebtables ANDROID: GKI: Update honda symbol list for net scheduler ANDROID: GKI: Update honda symbol list for led-trigger ANDROID: GKI: Add initial symbol list for honda ANDROID: GKI: add symbols to ABI ANDROID: db845c: Enable device tree overlay support FROMGIT: usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart FROMGIT: usb: dwc3: set pm runtime active before resume common Linux 6.1.73 cifs: fix flushing folio regression for 6.1 backport ipv6: remove max_size check inline with ipv4 Revert "nfsd: separate nfsd_last_thread() from nfsd_put()" Revert "nfsd: call nfsd_last_thread() before final nfsd_put()" ANDROID: Update the pixel symbol list Revert "splice, net: Add a splice_eof op to file-ops and socket-ops" Revert "ipv4, ipv6: Use splice_eof() to flush" Revert "udp: introduce udp->udp_flags" Revert "udp: move udp->no_check6_tx to udp->udp_flags" Revert "udp: move udp->no_check6_rx to udp->udp_flags" Revert "udp: move udp->gro_enabled to udp->udp_flags" Revert "udp: move udp->accept_udp_{l4|fraglist} to udp->udp_flags" Revert "udp: lockless UDP_ENCAP_L2TPINUDP / UDP_GRO" Revert "udp: annotate data-races around udp->encap_type" Revert "bpf, sockmap: af_unix stream sockets need to hold ref for pair sock" Revert "bpf: decouple prune and jump points" Revert "bpf: remove unnecessary prune and jump points" Revert "bpf: Remove unused insn_cnt argument from visit_[func_call_]insn()" Revert "bpf: clean up visit_insn()'s instruction processing" Revert "bpf: Support new 32bit offset jmp instruction" Revert "bpf: handle ldimm64 properly in check_cfg()" Revert "bpf: Fix a verifier bug due to incorrect branch offset comparison with cpu=v4" Revert "device property: Allow const parameter to dev_fwnode()" BACKPORT: UPSTREAM: phy: qcom-qmp: Introduce Kconfig symbols for discrete drivers ANDROID: GKI: add symbols of vendor hooks to ABI for swapping in ahead ANDROID: GKI: add vendor hooks for swapping in ahead Reapply "kasan: print the original fault addr when access invalid shadow" ANDROID: GKI: fix crc issue in include/net/addrconf.h ANDROID: add 16k targets for Microdroid kernel Revert "cred: switch to using atomic_long_t" FROMGIT: BACKPORT: mm/cma: fix placement of trace_cma_alloc_start/finish FROMGIT: wifi: nl80211: Extend del pmksa support for SAE and OWE security ANDROID: Update the ABI symbol list ANDROID: mm: export dump_tasks symbol. FROMLIST: scsi: ufs: Remove the ufshcd_hba_exit() call from ufshcd_async_scan() FROMLIST: scsi: ufs: Simplify power management during async scan Linux 6.1.72 Revert "interconnect: qcom: sm8250: Enable sync_state" smb3: Replace smb2pdu 1-element arrays with flex-arrays media: qcom: camss: Comment CSID dt_id field bpf: syzkaller found null ptr deref in unix_bpf proto add bpf: Fix a verifier bug due to incorrect branch offset comparison with cpu=v4 net/sched: act_ct: Always fill offloading tuple iifidx net/sched: act_ct: additional checks for outdated flows f2fs: compress: fix to assign compress_level for lz4 correctly genirq/affinity: Only build SMP-only helper functions on SMP kernels mmc: sdhci-sprd: Fix eMMC init failure after hw reset mmc: core: Cancel delayed work before releasing host mmc: rpmb: fixes pause retune on all RPMB partitions. mmc: meson-mx-sdhc: Fix initialization frozen issue drm/amd/display: add nv12 bounding box drm/amdgpu: skip gpu_info fw loading on navi12 mm: fix unmap_mapping_range high bits shift bug i2c: core: Fix atomic xfer check for non-preempt config x86/kprobes: fix incorrect return address calculation in kprobe_emulate_call_indirect firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards ring-buffer: Fix 32-bit rb_time_read() race with rb_time_cmpxchg() btrfs: mark the len field in struct btrfs_ordered_sum as unsigned btrfs: fix qgroup_free_reserved_data int overflow octeontx2-af: Support variable number of lmacs octeontx2-af: Fix pause frame configuration net/sched: act_ct: Take per-cb reference to tcf_ct_flow_table netfilter: flowtable: GC pushes back packets to classic path net/sched: act_ct: Fix promotion of offloaded unreplied tuple net/sched: act_ct: offload UDP NEW connections netfilter: flowtable: cache info of last offload netfilter: flowtable: allow unidirectional rules net: sched: call tcf_ct_params_free to free params in tcf_ct_init mm/memory_hotplug: fix error handling in add_memory_resource() mm/memory_hotplug: add missing mem_hotplug_lock lib/group_cpus.c: avoid acquiring cpu hotplug lock in group_cpus_evenly genirq/affinity: Move group_cpus_evenly() into lib/ genirq/affinity: Rename irq_build_affinity_masks as group_cpus_evenly genirq/affinity: Don't pass irq_affinity_desc array to irq_build_affinity_masks genirq/affinity: Pass affinity managed mask array to irq_build_affinity_masks genirq/affinity: Remove the 'firstvec' parameter from irq_build_affinity_masks ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 firmware: arm_scmi: Fix frequency truncation by promoting multiplier type bpf, sockmap: af_unix stream sockets need to hold ref for pair sock ethtool: don't propagate EOPNOTSUPP from dumps dpaa2-eth: recycle the RX buffer only after all processing done net: dpaa2-eth: rearrange variable in dpaa2_eth_get_ethtool_stats smb: client: fix missing mode bits for SMB symlinks block: update the stable_writes flag in bdev_add filemap: add a per-mapping stable writes flag mm, netfs, fscache: stop read optimisation when folio removed from pagecache mm: merge folio_has_private()/filemap_release_folio() call pairs memory-failure: convert truncate_error_page() to use folio khugepage: replace try_to_release_page() with filemap_release_folio() ext4: convert move_extent_per_page() to use folios media: qcom: camss: Fix set CSI2_RX_CFG1_VC_MODE when VC is greater than 3 media: camss: sm8250: Virtual channels for CSID selftests: mptcp: set FAILING_LINKS in run_tests selftests: mptcp: fix fastclose with csum failure f2fs: set the default compress_level on ioctl f2fs: assign default compression level f2fs: convert to use bitmap API f2fs: clean up i_compress_flag and i_compress_level usage s390/cpumf: support user space events for counting s390/mm: add missing arch_set_page_dat() call to vmem_crst_alloc() net/mlx5: Increase size of irq name buffer blk-mq: make sure active queue usage is held for bio_integrity_prep() bpf: fix precision backtracking instruction iteration bpf: handle ldimm64 properly in check_cfg() bpf: Support new 32bit offset jmp instruction bpf: clean up visit_insn()'s instruction processing bpf: Remove unused insn_cnt argument from visit_[func_call_]insn() bpf: remove unnecessary prune and jump points bpf: decouple prune and jump points fbdev: imsttfb: fix double free in probe() fbdev: imsttfb: Release framebuffer and dealloc cmap on error path arm64: dts: qcom: sdm845: Fix PSCI power domain names arm64: dts: qcom: sdm845: align RPMh regulator nodes with bindings wifi: iwlwifi: yoyo: swap cdb and jacket bits values udp: annotate data-races around udp->encap_type udp: lockless UDP_ENCAP_L2TPINUDP / UDP_GRO udp: move udp->accept_udp_{l4|fraglist} to udp->udp_flags udp: move udp->gro_enabled to udp->udp_flags udp: move udp->no_check6_rx to udp->udp_flags udp: move udp->no_check6_tx to udp->udp_flags udp: introduce udp->udp_flags ipv4, ipv6: Use splice_eof() to flush splice, net: Add a splice_eof op to file-ops and socket-ops udp: Convert udp_sendpage() to use MSG_SPLICE_PAGES net: Declare MSG_SPLICE_PAGES internal sendmsg() flag bpf, x86: save/restore regs with BPF_DW size bpf, x86: Simplify the parsing logic of structure parameters bpf, x64: Fix tailcall infinite loop srcu: Fix callbacks acceleration mishandling cpu/SMT: Make SMT control more robust against enumeration failures cpu/SMT: Create topology_smt_thread_allowed() selftests: secretmem: floor the memory size to the multiple of page_size net: Implement missing SO_TIMESTAMPING_NEW cmsg support bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters() net: ravb: Wait for operating mode to be applied asix: Add check for usbnet_get_endpoints octeontx2-af: Re-enable MAC TX in otx2_stop processing octeontx2-af: Always configure NIX TX link credits based on max frame size net/smc: fix invalid link access in dumping SMC-R connections net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues igc: Fix hicredit calculation i40e: Restore VF MSI-X state during PCI reset ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux ASoC: meson: g12a-toacodec: Fix event generation ASoC: meson: g12a-tohdmitx: Validate written enum values ASoC: meson: g12a-toacodec: Validate written enum values i40e: fix use-after-free in i40e_aqc_add_filters() net: Save and restore msg_namelen in sock_sendmsg netfilter: nft_immediate: drop chain reference counter on error net: bcmgenet: Fix FCS generation for fragmented skbuffs sfc: fix a double-free bug in efx_probe_filters ARM: sun9i: smp: Fix array-index-out-of-bounds read in sunxi_mc_smp_init selftests: bonding: do not set port down when adding to bond net: Implement missing getsockopt(SO_TIMESTAMPING_NEW) net: annotate data-races around sk->sk_bind_phc net: annotate data-races around sk->sk_tsflags net-timestamp: extend SOF_TIMESTAMPING_OPT_ID to HW timestamps can: raw: add support for SO_MARK r8169: Fix PCI error on system resume net: sched: em_text: fix possible memory leak in em_text_destroy() mlxbf_gige: fix receive packet race condition ASoC: mediatek: mt8186: fix AUD_PAD_TOP register and offset ASoC: fsl_rpmsg: Fix error handler with pm_runtime_enable igc: Check VLAN EtherType mask igc: Check VLAN TCI mask igc: Report VLAN EtherType matching back to user i40e: Fix filter input checks to prevent config with invalid values ice: Shut down VSI with "link-down-on-close" enabled ice: Fix link_down_on_close message drm/i915/dp: Fix passing the correct DPCD_REV for drm_dp_set_phy_test_pattern octeontx2-af: Fix marking couple of structure as __packed nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local netfilter: nf_tables: set transport offset from mac header for netdev/egress netfilter: use skb_ip_totlen and iph_totlen drm/bridge: ti-sn65dsi86: Never store more than msg->size bytes in AUX xfer wifi: iwlwifi: pcie: don't synchronize IRQs from IRQ KVM: x86/pmu: fix masking logic for MSR_CORE_PERF_GLOBAL_CTRL cifs: do not depend on release_iface for maintaining iface_list cifs: cifs_chan_is_iface_active should be called with chan_lock held drm/mgag200: Fix gamma lut not initialized for G200ER, G200EV, G200SE Revert "PCI/ASPM: Remove pcie_aspm_pm_state_change()" mptcp: prevent tcp diag from closing listener subflows ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP ProBook 440 G6 ALSA: hda/realtek: fix mute/micmute LEDs for a HP ZBook ALSA: hda/realtek: enable SND_PCI_QUIRK for hp pavilion 14-ec1xxx series block: Don't invalidate pagecache for invalid falloc modes keys, dns: Fix missing size check of V1 server-list header ANDROID: gki_defconfig: Set CONFIG_IDLE_INJECT and CONFIG_CPU_IDLE_THERMAL into y ANDROID: KMI workaround for CONFIG_NETFILTER_FAMILY_BRIDGE ANDROID: dma-buf: don't re-purpose kobject as work_struct BACKPORT: FROMLIST: dma-buf: Move sysfs work out of DMA-BUF export path UPSTREAM: netfilter: nf_tables: skip set commit for deleted/destroyed sets ANDROID: KVM: arm64: Avoid BUG-ing from the host abort path ANDROID: Update the ABI symbol list UPSTREAM: ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet UPSTREAM: nvmet-tcp: Fix a possible UAF in queue intialization setup FROMGIT: usb: dwc3: gadget: Handle EP0 request dequeuing properly ANDROID: ABI: Update symbol list for imx UPSTREAM: io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid UPSTREAM: bpf: Fix prog_array_map_poke_run map poke update BACKPORT: xhci: track port suspend state correctly in unsuccessful resume cases ANDROID: fix crc error in put_cmsg caused in 6.1.68 ANDROID: Update the ABI symbol list ANDROID: sched: Export symbols for vendor modules UPSTREAM: usb: dwc3: core: add support for disabling High-speed park mode Linux 6.1.71 Revert "platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe" tracing/kprobes: Fix symbol counting logic by looking at modules as well kallsyms: Make module_kallsyms_on_each_symbol generally available device property: Allow const parameter to dev_fwnode() spi: Constify spi parameters of chip select APIs NFSD: fix possible oops when nfsd/pool_stats is closed. ring-buffer: Fix slowpath of interrupted event netfilter: nf_tables: skip set commit for deleted/destroyed sets ring-buffer: Remove useless update to write_stamp in rb_try_to_discard() tracing: Fix blocked reader of snapshot buffer ring-buffer: Fix wake ups when buffer_percent is set to 100 mm/memory-failure: check the mapcount of the precise page mm/memory-failure: cast index to loff_t before shifting it mm: migrate high-order folios in swap cache correctly mm/filemap: avoid buffered read/write race to read inconsistent data platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() block: renumber QUEUE_FLAG_HW_WC spi: atmel: Fix clock issue when using devices with different polarities spi: Add APIs in spi core to set/get spi->chip_select and spi->cs_gpiod spi: Reintroduce spi_set_cs_timing() linux/export: Ensure natural alignment of kcrctab array nfsd: call nfsd_last_thread() before final nfsd_put() nfsd: separate nfsd_last_thread() from nfsd_put() iio: imu: adis16475: add spi_device_id table spi: Introduce spi_get_device_match_data() helper usb: fotg210-hcd: delete an incorrect bounds test ARM: dts: Fix occasional boot hang for am3 usb ksmbd: fix wrong allocation size update in smb2_open() ksmbd: avoid duplicate opinfo_put() call on error of smb21_lease_break_ack() ksmbd: lazy v2 lease break on smb2_write() ksmbd: send v2 lease break notification for directory ksmbd: downgrade RWH lease caching state to RH for directory ksmbd: set v2 lease capability ksmbd: set epoch in create context v2 lease ksmbd: don't update ->op_state as OPLOCK_STATE_NONE on error ksmbd: move setting SMB2_FLAGS_ASYNC_COMMAND and AsyncId ksmbd: release interim response after sending status pending response ksmbd: move oplock handling after unlock parent dir ksmbd: separately allocate ci per dentry ksmbd: fix possible deadlock in smb2_open ksmbd: prevent memory leak on error return ksmbd: fix kernel-doc comment of ksmbd_vfs_kern_path_locked() ksmbd: no need to wait for binded connection termination at logoff ksmbd: add support for surrogate pair conversion ksmbd: fix missing RDMA-capable flag for IPoIB device in ksmbd_rdma_capable_netdev() ksmbd: fix recursive locking in vfs helpers ksmbd: fix kernel-doc comment of ksmbd_vfs_setxattr() ksmbd: reorganize ksmbd_iov_pin_rsp() ksmbd: Remove unused field in ksmbd_user struct ksmbd: fix potential double free on smb2_read_pipe() error path ksmbd: fix Null pointer dereferences in ksmbd_update_fstate() ksmbd: fix wrong error response status by using set_smb2_rsp_status() ksmbd: fix race condition between tree conn lookup and disconnect ksmbd: fix race condition from parallel smb2 lock requests ksmbd: fix race condition from parallel smb2 logoff requests ksmbd: fix race condition with fp ksmbd: check iov vector index in ksmbd_conn_write() ksmbd: return invalid parameter error response if smb2 request is invalid ksmbd: fix passing freed memory 'aux_payload_buf' ksmbd: remove unneeded mark_inode_dirty in set_info_sec() ksmbd: remove experimental warning ksmbd: add missing calling smb2_set_err_rsp() on error ksmbd: Fix one kernel-doc comment ksmbd: fix `force create mode' and `force directory mode' ksmbd: fix wrong interim response on compound ksmbd: add support for read compound ksmbd: switch to use kmemdup_nul() helper ksmbd: check if a mount point is crossed during path lookup ksmbd: Fix unsigned expression compared with zero ksmbd: Replace one-element array with flexible-array member ksmbd: Use struct_size() helper in ksmbd_negotiate_smb_dialect() ksmbd: Replace the ternary conditional operator with min() ksmbd: use kvzalloc instead of kvmalloc ksmbd: Change the return value of ksmbd_vfs_query_maximal_access to void ksmbd: return a literal instead of 'err' in ksmbd_vfs_kern_path_locked() ksmbd: use kzalloc() instead of __GFP_ZERO ksmbd: remove unused ksmbd_tree_conn_share function ksmbd: add mnt_want_write to ksmbd vfs functions ksmbd: fix posix_acls and acls dereferencing possible ERR_PTR() ksmbd: call putname after using the last component ksmbd: fix uninitialized pointer read in smb2_create_link() ksmbd: fix uninitialized pointer read in ksmbd_vfs_rename() ksmbd: fix racy issue from using ->d_parent and ->d_name fs: introduce lock_rename_child() helper ksmbd: remove unused compression negotiate ctx packing ksmbd: avoid duplicate negotiate ctx offset increments ksmbd: set NegotiateContextCount once instead of every inc ksmbd: delete asynchronous work from list ksmbd: remove unused is_char_allowed function ksmbd: Fix parameter name and comment mismatch ksmbd: Fix spelling mistake "excceed" -> "exceeded" ksmbd: update Kconfig to note Kerberos support and fix indentation ksmbd: Remove duplicated codes ksmbd: fix typo, syncronous->synchronous ksmbd: Implements sess->rpc_handle_list as xarray ksmbd: Convert to use sysfs_emit()/sysfs_emit_at() APIs ksmbd: Fix resource leak in smb2_lock() ksmbd: use F_SETLK when unlocking a file ksmbd: set SMB2_SESSION_FLAG_ENCRYPT_DATA when enforcing data encryption for this share ksmbd: replace one-element arrays with flexible-array members Revert "hrtimers: Push pending hrtimers away from outgoing CPU earlier" Revert "drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group" ANDROID: KVM: arm64: Don't prepopulate MMIO regions for host stage-2 BACKPORT: FROMGIT fork: use __mt_dup() to duplicate maple tree in dup_mmap() FROMGIT: maple_tree: preserve the tree attributes when destroying maple tree FROMGIT: maple_tree: update check_forking() and bench_forking() FROMGIT: maple_tree: skip other tests when BENCH is enabled FROMGIT: maple_tree: update the documentation of maple tree FROMGIT: maple_tree: add test for mtree_dup() FROMGIT: radix tree test suite: align kmem_cache_alloc_bulk() with kernel behavior. FROMGIT: maple_tree: introduce interfaces __mt_dup() and mtree_dup() FROMGIT: maple_tree: introduce {mtree,mas}_lock_nested() FROMGIT: maple_tree: add mt_free_one() and mt_attr() helpers UPSTREAM: maple_tree: introduce __mas_set_range() ANDROID: GKI: Enable symbols for v4l2 in async and fwnode Revert "mmc: core: add helpers mmc_regulator_enable/disable_vqmmc" Revert "mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled" ANDROID: Update the ABI symbol list ANDROID: KVM: arm64: Fix hyp event alignment ANDROID: KVM: arm64: Fix host_smc print typo FROMGIT: f2fs: do not return EFSCORRUPTED, but try to run online repair ANDROID: KVM: arm64: Document module_change_host_prot_range Revert "mmc: core: add helpers mmc_regulator_enable/disable_vqmmc" Revert "mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled" FROMGIT: PM / devfreq: Synchronize devfreq_monitor_[start/stop] FROMGIT: arch/mm/fault: fix major fault accounting when retrying under per-VMA lock UPSTREAM: mm: handle write faults to RO pages under the VMA lock UPSTREAM: mm: handle read faults under the VMA lock UPSTREAM: mm: handle COW faults under the VMA lock UPSTREAM: mm: handle shared faults under the VMA lock BACKPORT: mm: call wp_page_copy() under the VMA lock UPSTREAM: mm: make lock_folio_maybe_drop_mmap() VMA lock aware UPSTREAM: mm/memory.c: fix mismerge ANDROID: Export functions to be used with dma_map_ops in modules BACKPORT: FROMGIT: erofs: enable sub-page compressed block support FROMGIT: erofs: refine z_erofs_transform_plain() for sub-page block support FROMGIT: erofs: fix ztailpacking for subpage compressed blocks BACKPORT: FROMGIT: erofs: fix up compacted indexes for block size < 4096 FROMGIT: erofs: record `pclustersize` in bytes instead of pages FROMGIT: erofs: support I/O submission for sub-page compressed blocks FROMGIT: erofs: fix lz4 inplace decompression FROMGIT: erofs: fix memory leak on short-lived bounced pages BACKPORT: erofs: tidy up z_erofs_do_read_page() UPSTREAM: erofs: move preparation logic into z_erofs_pcluster_begin() BACKPORT: erofs: avoid obsolete {collector,collection} terms BACKPORT: erofs: simplify z_erofs_read_fragment() UPSTREAM: erofs: get rid of the remaining kmap_atomic() UPSTREAM: erofs: simplify z_erofs_transform_plain() BACKPORT: erofs: adapt managed inode operations into folios UPSTREAM: erofs: avoid on-stack pagepool directly passed by arguments UPSTREAM: erofs: allocate extra bvec pages directly instead of retrying UPSTREAM: erofs: clean up z_erofs_pcluster_readmore() UPSTREAM: erofs: remove the member readahead from struct z_erofs_decompress_frontend UPSTREAM: erofs: fold in z_erofs_decompress() UPSTREAM: erofs: enable large folios for iomap mode ANDROID: Update the ABI symbol list UPSTREAM: USB: gadget: core: adjust uevent timing on gadget unbind Linux 6.1.70 loop: deprecate autoloading callback loop_probe() wifi: nl80211: fix deadlock in nl80211_set_cqm_rssi (6.6.x) wifi: cfg80211: fix CQM for non-range use fuse: share lookup state between submount and its parent mm/damon/core: make damon_start() waits until kdamond_fn() starts x86/alternatives: Sync core before enabling interrupts KVM: arm64: vgic: Force vcpu vgic teardown on vcpu destroy KVM: arm64: vgic: Add a non-locking primitive for kvm_vgic_vcpu_destroy() KVM: arm64: vgic: Simplify kvm_vgic_destroy() thunderbolt: Fix memory leak in margining_port_remove() lib/vsprintf: Fix %pfwf when current node refcount == 0 gpio: dwapb: mask/unmask IRQ when disable/enale it bus: ti-sysc: Flush posted write only after srst_udelay pinctrl: starfive: jh7100: ignore disabled device tree nodes dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata() tracing / synthetic: Disable events after testing in synth_event_gen_test_init() scsi: core: Always send batch on reset or error handling command Revert "scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity" selftests: mptcp: join: fix subflow_send_ack lookup ublk: move ublk_cancel_dev() out of ub->mutex ubifs: fix possible dereference after free btrfs: zoned: no longer count fresh BG region as zone unusable Revert "drm/amd/display: Do not set DRR on pipe commit" dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client loop: do not enforce max_loop hard limit by (new) default RISC-V: Fix do_notify_resume / do_work_pending prototype 9p: prevent read overrun in protocol dump tracepoint drm/i915: Reject async flips with bigjoiner smb: client: fix OOB in smbCalcSize() smb: client: fix OOB in SMB2_query_info_init() smb: client: fix potential OOB in cifs_dump_detail() smb: client: fix OOB in cifsd when receiving compounded resps dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp net: ks8851: Fix TX stall caused by TX buffer overrun net: rfkill: gpio: set GPIO direction net: 9p: avoid freeing uninit memory in p9pdu_vreadf Input: soc_button_array - add mapping for airplane mode button net: usb: ax88179_178a: avoid failed operations when device is disconnected Bluetooth: Add more enc key size check Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE Bluetooth: L2CAP: Send reject on command corrupted request Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent ALSA: hda/realtek: Add quirk for ASUS ROG GV302XA USB: serial: option: add Quectel RM500Q R13 firmware support USB: serial: option: add Foxconn T99W265 with new baseline USB: serial: option: add Quectel EG912Y module support USB: serial: ftdi_sio: update Actisense PIDs constant names wifi: cfg80211: fix certs build to not depend on file order wifi: cfg80211: Add my certificate usb-storage: Add quirk for incorrect WP on Kingston DT Ultimate 3.0 G3 ALSA: usb-audio: Increase delay in MOTU M quirk iio: triggered-buffer: prevent possible freeing of wrong buffer iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma() iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() Input: ipaq-micro-keys - add error handling for devm_kmemdup interconnect: qcom: sm8250: Enable sync_state iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw interconnect: Treat xlate() returning NULL node as an error drm/i915: Fix ADL+ tiled plane stride when the POT stride is smaller than the original drm/i915/mtl: Add MTL for remapping CCS FBs drm/i915/dpt: Only do the POT stride remap when using DPT drm/i915: Fix intel_atomic_setup_scalers() plane_state handling drm/i915: Relocate intel_atomic_setup_scalers() drm/i915/mtl: limit second scaler vertical scaling in ver >= 14 nvme-pci: fix sleeping function called from interrupt context gpiolib: cdev: add gpio_device locking wrapper around gpio_ioctl() pinctrl: at91-pio4: use dedicated lock class for IRQ x86/xen: add CPU dependencies for 32-bit build i2c: aspeed: Handle the coalesced stop conditions with the start conditions. ASoC: fsl_sai: Fix channel swap issue on i.MX8MP ASoC: hdmi-codec: fix missing report for jack initial status afs: Fix use-after-free due to get/remove race in volume tree afs: Fix overwriting of result of DNS query keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry net: check dev->gso_max_size in gso_features_check() afs: Fix dynamic root lookup DNS check afs: Fix the dynamic root's d_delete to always delete unused dentries net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() net: mana: select PAGE_POOL Bluetooth: hci_event: shut up a false-positive warning Bluetooth: Fix deadlock in vhci_send_frame net/rose: fix races in rose_kill_by_device() ethernet: atheros: fix a memleak in atl1e_setup_ring_resources net: sched: ife: fix potential use-after-free net: Return error from sk_stream_wait_connect() if sk_wait_event() fails octeontx2-pf: Fix graceful exit during PFC configuration failure net: mscc: ocelot: fix eMAC TX RMON stats for bucket 256-511 and above net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors net/mlx5e: Correct snprintf truncation handling for fw_version buffer net/mlx5: Fix fw tracer first block check net/mlx5e: fix a potential double-free in fs_udp_create_groups net/mlx5e: Fix a race in command alloc flow net/mlx5: Re-organize mlx5_cmd struct net/mlx5: Prevent high-rate FW commands from populating all slots net/mlx5: Introduce and use opcode getter in command interface net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list() Revert "net/mlx5e: fix double free of encap_header" Revert "net/mlx5e: fix double free of encap_header in update funcs" wifi: mac80211: mesh_plink: fix matches_local logic wifi: mac80211: mesh: check element parsing succeeded wifi: mac80211: check if the existing link config remains unchanged wifi: iwlwifi: pcie: add another missing bh-disable for rxq->lock s390/vx: fix save/restore of fpu kernel context reset: Fix crash when freeing non-existent optional resets ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init ARM: dts: dra7: Fix DRA7 L3 NoC node register size drm/amd/display: fix hw rotated modes when PSR-SU is enabled HID: i2c-hid: Add IDEA5002 to i2c_hid_acpi_blacklist[] HID: i2c-hid: acpi: Unify ACPI ID tables format bpf: Fix prog_array_map_poke_run map poke update kasan: disable kasan_non_canonical_hook() for HW tags ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: Add hooks for rt_mutex steal UPSTREAM: dm verity: don't perform FEC for failed readahead IO UPSTREAM: netfilter: nft_set_pipapo: skip inactive elements during set walk FROMLIST: mm: migrate high-order folios in swap cache correctly ANDROID: fuse-bpf: Follow mounts in lookups Linux 6.1.69 r8152: fix the autosuspend doesn't work r8152: remove rtl_vendor_mode function r8152: avoid to change cfg for all devices net: tls, update curr on splice as well ring-buffer: Have rb_time_cmpxchg() set the msb counter too ring-buffer: Do not try to put back write_stamp ring-buffer: Fix a race in rb_time_cmpxchg() for 32 bit archs ring-buffer: Fix writing to the buffer with max_data_size ring-buffer: Have saved event hold the entire event ring-buffer: Do not update before stamp when switching sub-buffers tracing: Update snapshot buffer on resize if it is allocated ring-buffer: Fix memory leak of free page smb: client: fix OOB in smb2_query_reparse_point() smb: client: fix NULL deref in asn1_ber_decoder() smb: client: fix OOB in receive_encrypted_standard() drm/i915: Fix remapped stride with CCS on ADL+ drm/amd/display: Disable PSR-SU on Parade 0803 TCON again drm/amdgpu: fix tear down order in amdgpu_vm_pt_free btrfs: don't clear qgroup reserved bit in release_folio btrfs: free qgroup reserve when ORDERED_IOERR is set mm/shmem: fix race in shmem_undo_range w/THP mm/mglru: fix underprotected page cache dmaengine: stm32-dma: avoid bitfield overflow assertion drm/amdgpu/sdma5.2: add begin/end_use ring callbacks team: Fix use-after-free when an option instance allocation fails arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS soundwire: stream: fix NULL pointer dereference for multi_link btrfs: do not allow non subvolume root targets for snapshot perf: Fix perf_event_validate_size() lockdep splat HID: hid-asus: add const to read-only outgoing usb buffer arm64: add dependency between vmlinuz.efi and Image net: usb: qmi_wwan: claim interface 4 for ZTE MF290 asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad HID: hid-asus: reset the backlight brightness level on resume nbd: pass nbd_sock to nbd_read_reply() instead of index HID: add ALWAYS_POLL quirk for Apple kb HID: glorious: fix Glorious Model I HID report platform/x86: intel_telemetry: Fix kernel doc descriptions LoongArch: Implement constant timer shutdown interface LoongArch: Add dependency between vmlinuz.efi and vmlinux.efi selftests/bpf: fix bpf_loop_bench for new callback verification scheme nvme: catch errors from nvme_configure_metadata() nvme-auth: set explanation code for failure2 msgs nbd: fold nbd config initialization into nbd_alloc_config() bcache: avoid NULL checking to c->root in run_cache_set() bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() bcache: remove redundant assignment to variable cur_idx bcache: avoid oversize memory allocation by small stripe_size blk-cgroup: bypass blkcg_deactivate_policy after destroying blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" stmmac: dwmac-loongson: Add architecture dependency usb: aqc111: check packet for fixup for true limit x86/hyperv: Fix the detection of E820_TYPE_PRAM in a Gen2 VM drm/mediatek: Add spinlock for setting vblank event in atomic_begin ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE PCI: loongson: Limit MRRS to 256 Revert "PCI: acpiphp: Reassign resources on bridge if necessary" ALSA: hda/realtek: Apply mute LED quirk for HP15-db ALSA: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants ALSA: hda/hdmi: add force-connect quirk for NUC5CPYB fuse: dax: set fc->dax to NULL in fuse_dax_conn_free() cred: switch to using atomic_long_t net: atlantic: fix double free in ring reinit logic appletalk: Fix Use-After-Free in atalk_ioctl net: stmmac: Handle disabled MDIO busses from devicetree dpaa2-switch: do not ask for MDB, VLAN and FDB replay dpaa2-switch: fix size of the dma_unmap vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() sign-file: Fix incorrect return values check stmmac: dwmac-loongson: Make sure MDIO is initialized before use net: ena: Fix XDP redirection error net: ena: Fix xdp drops handling due to multibuf packets net: ena: Destroy correct number of xdp queues upon failure net: Remove acked SYN flag from packet in the transmit queue correctly qed: Fix a potential use-after-free in qed_cxt_tables_alloc iavf: Handle ntuple on/off based on new state machines for flow director iavf: Introduce new state machines for flow director net/rose: Fix Use-After-Free in rose_ioctl atm: Fix Use-After-Free in do_vcc_ioctl octeontx2-af: Update RSS algorithm index octeontx2-pf: Fix promisc mcam entry action octeontx2-af: fix a use-after-free in rvu_nix_register_reporters net: fec: correct queue selection net: vlan: introduce skb_vlan_eth_hdr() atm: solos-pci: Fix potential deadlock on &tx_queue_lock atm: solos-pci: Fix potential deadlock on &cli_queue_lock bnxt_en: Fix HWTSTAMP_FILTER_ALL packet timestamp logic bnxt_en: Fix wrong return value check in bnxt_close_nic() bnxt_en: Save ring error counters across reset bnxt_en: Clear resource reservation during resume qca_spi: Fix reset behavior qca_debug: Fix ethtool -G iface tx behavior qca_debug: Prevent crash on TX ring changes net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX net/mlx5e: Fix possible deadlock on mlx5e_tx_timeout_work HID: lenovo: Restrict detection of patched firmware only to USB cptkbd afs: Fix refcount underflow from error handling race ksmbd: fix memory leak in smb2_lock() ext4: fix warning in ext4_dio_write_end_io() powerpc/ftrace: Fix stack teardown in ftrace_no_trace r8152: add vendor/device ID pair for ASUS USB-C2500 r8152: add vendor/device ID pair for D-Link DUB-E250 r8152: add USB device driver for config selection perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table Revert "HID: fix HID device resource race between HID core and debugging support" ANDROID: GKI: Add symbols for rockchip sata ANDROID: sched: Add trace_android_rvh_setscheduler ANDROID: Update the ABI symbol list ANDROID: GKI: build damon for monitoring virtual address spaces UPSTREAM: mm/damon/sysfs-schemes: handle tried region directory allocation failure UPSTREAM: mm/damon/sysfs-schemes: handle tried regions sysfs directory allocation failure UPSTREAM: mm/damon/sysfs: check error from damon_sysfs_update_target() UPSTREAM: mm/damon/sysfs: eliminate potential uninitialized variable warning UPSTREAM: mm/damon/sysfs: update monitoring target regions for online input commit UPSTREAM: mm/damon/sysfs: remove requested targets when online-commit inputs UPSTREAM: mm/damon/sysfs: avoid empty scheme tried regions for large apply interval UPSTREAM: mm/damon/sysfs-schemes: do not update tried regions more than one DAMON snapshot UPSTREAM: mm/damon/sysfs: check DAMOS regions update progress from before_terminate() UPSTREAM: mm/damon/sysfs: implement a command for updating only schemes tried total bytes UPSTREAM: mm/damon/sysfs-schemes: implement DAMOS tried total bytes file UPSTREAM: mm/damon/ops-common: refactor to use {pte|pmd}p_clear_young_notify() UPSTREAM: mm/damon/core: skip apply schemes if empty UPSTREAM: mm/damon: use kstrtobool() instead of strtobool() UPSTREAM: mm/damon/sysfs-schemes: implement DAMOS-tried regions clear command UPSTREAM: mm/damon/sysfs: implement DAMOS tried regions update command UPSTREAM: mm/damon/sysfs-schemes: implement scheme region directory UPSTREAM: mm/damon/sysfs-schemes: implement schemes/tried_regions directory UPSTREAM: mm/damon/core: add a callback for scheme target regions check UPSTREAM: mm/damon/lru_sort: enable and disable synchronously UPSTREAM: mm/damon/reclaim: enable and disable synchronously UPSTREAM: mm/damon/{reclaim,lru_sort}: remove unnecessarily included headers UPSTREAM: mm/damon/modules: deduplicate init steps for DAMON context setup UPSTREAM: mm/damon/sysfs: split out schemes directory implementation to separate file UPSTREAM: mm/damon/sysfs: split out kdamond-independent schemes stats update logic into a new function UPSTREAM: mm/damon/sysfs: move unsigned long range directory to common module UPSTREAM: mm/damon/sysfs: move sysfs_lock to common module UPSTREAM: mm/damon/sysfs: remove parameters of damon_sysfs_region_alloc() UPSTREAM: mm/damon/sysfs: use damon_addr_range for region's start and end values UPSTREAM: mm/damon/core: split out scheme quota adjustment logic into a new function UPSTREAM: mm/damon/core: split out scheme stat update logic into a new function UPSTREAM: mm/damon/core: split damos application logic into a new function UPSTREAM: mm/damon/core: split out DAMOS-charged region skip logic into a new function ANDROID: Snapshot Mainline's version of checkpatch.pl ANDROID: KVM: arm64: Skip prefaulting ptes which will be modified later ANDROID: KVM: arm64: Introduce module_change_host_prot_range ANDROID: KVM: arm64: Relax checks in module_change_host_page_prot ANDROID: KVM: arm64: Optimise module_change_host_page_prot ANDROID: KVM: arm64: Prefault entries when splitting a block mapping ANDROID: virt: gunyah: Zero state_data after vcpu_run ANDROID: Update the ABI symbol list ANDROID: fs: Add vendor hooks for ep_create_wakeup_source & timerfd_create ANDROID: ABI: update symbol list for galaxy Linux 6.1.68 drm/i915: Skip some timing checks on BXT/GLK DSI transcoders drm/i915/sdvo: stop caching has_hdmi_monitor in struct intel_sdvo drm/i915/lvds: Use REG_BIT() & co. drm/i915/display: Drop check for doublescan mode in modevalid riscv: Kconfig: Add select ARM_AMBA to SOC_STARFIVE netfilter: nft_set_pipapo: skip inactive elements during set walk MIPS: Loongson64: Enable DMA noncoherent support MIPS: Loongson64: Handle more memory types passed from firmware MIPS: Loongson64: Reserve vgabios memory on boot KVM: SVM: Update EFER software model on CR0 trap for SEV-ES KVM: s390/mm: Properly reset no-dat MIPS: kernel: Clear FPU states when setting up kernel threads cifs: Fix flushing, invalidation and file size with FICLONE cifs: Fix flushing, invalidation and file size with copy_file_range() USB: gadget: core: adjust uevent timing on gadget unbind x86/CPU/AMD: Check vendor in the AMD microcode callback devcoredump: Send uevent once devcd is ready serial: 8250_omap: Add earlycon support for the AM654 UART controller serial: 8250: 8250_omap: Do not start RX DMA on THRI interrupt serial: 8250: 8250_omap: Clear UART_HAS_RHR_IT_DIS bit serial: sc16is7xx: address RX timeout interrupt errata ARM: PL011: Fix DMA support usb: typec: class: fix typec_altmode_put_partner to put plugs smb: client: fix potential NULL deref in parse_dfs_referrals() Revert "xhci: Loosen RPM as default policy to cover for AMD xHC 1.1" cifs: Fix non-availability of dedup breaking generic/304 parport: Add support for Brainboxes IX/UC/PX parallel cards serial: 8250_dw: Add ACPI ID for Granite Rapids-D UART usb: gadget: f_hid: fix report descriptor allocation drm/amdgpu: Update EEPROM I2C address for smu v13_0_0 drm/amdgpu: Add I2C EEPROM support on smu v13_0_6 drm/amdgpu: simplify amdgpu_ras_eeprom.c drm/amdgpu: Return from switch early for EEPROM I2C address drm/amdgpu: Remove second moot switch to set EEPROM I2C address drm/amdgpu: Add support for RAS table at 0x40000 drm/amdgpu: Decouple RAS EEPROM addresses from chips drm/amdgpu: Remove redundant I2C EEPROM address drm/amdgpu: Add EEPROM I2C address support for ip discovery drm/amdgpu: Update ras eeprom support for smu v13_0_0 and v13_0_10 drm/amdgpu: correct the amdgpu runtime dereference usage count drm/amd/amdgpu: Fix warnings in amdgpu/amdgpu_display.c drm/amdgpu: fix memory overflow in the IB test gpiolib: sysfs: Fix error handling on failed export x86/sev: Fix kernel crash due to late update to read-only ghcb_version perf: Fix perf_event_validate_size() arm64: dts: mt8183: kukui: Fix underscores in node names arm64: dts: mediatek: add missing space before { parisc: Fix asm operand number out of range build error in bug table parisc: Reduce size of the bug_table on 64-bit kernel by half tracing: Stop current tracer when resizing buffer tracing: Set actual size after ring buffer resize ring-buffer: Force absolute timestamp on discard of event LoongArch: BPF: Don't sign extend function return value LoongArch: BPF: Don't sign extend memory load operand misc: mei: client.c: fix problem of return '-EOVERFLOW' in mei_cl_write misc: mei: client.c: return negative error code in mei_cl_write hwtracing: hisi_ptt: Add dummy callback pmu::read() coresight: etm4x: Remove bogous __exit annotation for some functions coresight: etm4x: Make etm4_remove_dev() return void binder: fix memory leaks of spam and pending work arm64: dts: mediatek: mt8183-evb: Fix unit_address_vs_reg warning on ntc arm64: dts: mediatek: mt8183: Move thermal-zones to the root node arm64: dts: mediatek: mt8183: Fix unit address for scp reserved memory arm64: dts: mediatek: mt8195: Fix PM suspend/resume with venc clocks arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names arm64: dts: mediatek: cherry: Fix interrupt cells for MT6360 on I2C7 arm64: dts: mediatek: mt8183-kukui-jacuzzi: fix dsi unnecessary cells properties arm64: dts: mediatek: mt7622: fix memory node warning check md/raid6: use valid sector values to determine if an I/O should wait on the reshape powercap: DTPM: Fix missing cpufreq_cpu_put() calls mm: fix oops when filemap_map_pmd() without prealloc_pte hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write platform/surface: aggregator: fix recv_buf() return value regmap: fix bogus error on regcache_sync success r8169: fix rtl8125b PAUSE frames blasting when suspended packet: Move reference count in packet_sock to atomic_long_t tracing: Fix a possible race when disabling buffered events tracing: Fix incomplete locking when disabling buffered events tracing: Disable snapshot buffer when stopping instance tracers tracing: Always update snapshot buffer size checkstack: fix printed address cgroup_freezer: cgroup_freezing: Check if not frozen nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() nilfs2: fix missing error check for sb_set_blocksize call ring-buffer: Test last update in 32bit version of __rb_time_read() ALSA: hda/realtek: Add Framework laptop 16 to quirks ALSA: hda/realtek: add new Framework laptop to quirks ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5 ALSA: pcm: fix out-of-bounds in snd_pcm_state_names ALSA: usb-audio: Add Pioneer DJM-450 mixer controls io_uring: fix mutex_unlock with unreferenced ctx nvme-pci: Add sleep quirk for Kingston drives io_uring/af_unix: disable sending io_uring over sockets ASoC: amd: yc: Fix non-functional mic on ASUS E1504FA kprobes: consistent rcu api usage for kretprobe holder rethook: Use __rcu pointer for rethook::handler iommu: Avoid more races around device probe md: don't leave 'MD_RECOVERY_FROZEN' in error path of md_set_readonly() md: introduce md_ro_state riscv: fix misaligned access handling of C.SWSP and C.SDSP ARM: dts: imx28-xea: Pass the 'model' property ARM: dts: imx7: Declare timers compatible with fsl,imx6dl-gpt ARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() tracing: Fix a warning when allocating buffered events fails ARM: dts: imx6ul-pico: Describe the Ethernet PHY clock arm64: dts: imx8mp: imx8mq: Add parkmode-disable-ss-quirk on DWC3 arm64: dts: imx8mq: drop usb3-resume-missing-cas from usb drm/bridge: tc358768: select CONFIG_VIDEOMODE_HELPERS RDMA/irdma: Avoid free the non-cqp_request scratch RDMA/core: Fix umem iterator when PAGE_SIZE is greater then HCA pgsz ASoC: wm_adsp: fix memleak in wm_adsp_buffer_populate hwmon: (nzxt-kraken2) Fix error handling path in kraken2_probe() ASoC: codecs: lpass-tx-macro: set active_decimator correct default value hwmon: (acpi_power_meter) Fix 4.29 MW bug RDMA/irdma: Fix UAF in irdma_sc_ccq_get_cqe_info() RDMA/irdma: Refactor error handling in create CQP RDMA/bnxt_re: Correct module description string RDMA/rtrs-clt: Remove the warnings for req in_use check RDMA/rtrs-clt: Fix the max_send_wr setting RDMA/rtrs-srv: Destroy path files after making sure no IOs in-flight RDMA/rtrs-srv: Free srv_mr iu only when always_invalidate is true RDMA/rtrs-srv: Check return values while processing info request RDMA/rtrs-clt: Start hb after path_up RDMA/rtrs-srv: Do not unconditionally enable irq ASoC: fsl_sai: Fix no frame sync clock issue on i.MX8MP arm64: dts: rockchip: Expand reg size of vdec node for RK3399 arm64: dts: rockchip: Expand reg size of vdec node for RK3328 RDMA/irdma: Add wait for suspend on SQD RDMA/irdma: Do not modify to SQD on error RDMA/hns: Fix unnecessary err return when using invalid congest control algorithm tee: optee: Fix supplicant based device enumeration mm/damon/sysfs: eliminate potential uninitialized variable warning drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group psample: Require 'CAP_NET_ADMIN' when joining "packets" group bpf: sockmap, updating the sg structure should also update curr tcp: do not accept ACK of bytes we never sent netfilter: xt_owner: Fix for unsafe access of sk->sk_socket netfilter: nf_tables: validate family when identifying table via handle netfilter: nf_tables: bail out on mismatching dynset and set expressions netfilter: nf_tables: fix 'exist' matching on bigendian arches netfilter: nft_exthdr: add boolean DCCP option matching dt-bindings: interrupt-controller: Allow #power-domain-cells octeontx2-af: Update Tx link register range octeontx2-af: Add missing mcs flr handler call octeontx2-af: Fix mcs stats register address octeontx2-af: Fix mcs sa cam entries size octeontx2-af: Adjust Tx credits when MCS external bypass is disabled net: hns: fix fake link up on xge port net: hns: fix wrong head when modify the tx feature when sending packets net: atlantic: Fix NULL dereference of skb pointer in ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit() ionic: Fix dim work handling in split interrupt mode ionic: fix snprintf format length warning tcp: fix mid stream window clamp. net: bnxt: fix a potential use-after-free in bnxt_init_tc iavf: validate tx_coalesce_usecs even if rx_coalesce_usecs is zero i40e: Fix unexpected MFS warning message octeontx2-af: fix a use-after-free in rvu_npa_register_reporters xsk: Skip polling event check for unbound socket net: stmmac: fix FPE events losing octeontx2-pf: consider both Rx and Tx packet stats for adaptive interrupt coalescing arcnet: restoring support for multiple Sohard Arcnet cards platform/mellanox: Check devm_hwmon_device_register_with_groups() return value platform/mellanox: Add null pointer checks for devm_kasprintf() mlxbf-bootctl: correctly identify secure boot with development keys r8152: Add RTL8152_INACCESSIBLE to r8153_aldps_en() r8152: Add RTL8152_INACCESSIBLE to r8153_pre_firmware_1() r8152: Add RTL8152_INACCESSIBLE to r8156b_wait_loading_flash() r8152: Add RTL8152_INACCESSIBLE checks to more loops r8152: Rename RTL8152_UNPLUG to RTL8152_INACCESSIBLE hv_netvsc: rndis_filter needs to select NLS octeontx2-af: Check return value of nix_get_nixlf before using nixlf octeontx2-pf: Add missing mutex lock in otx2_get_pauseparam ipv6: fix potential NULL deref in fib6_add() platform/x86: wmi: Skip blocks with zero instances of: dynamic: Fix of_reconfig_get_state_change() return value documentation platform/x86: asus-wmi: Move i8042 filter install to shared asus-wmi code dt: dt-extract-compatibles: Don't follow symlinks when walking tree dt: dt-extract-compatibles: Handle cfile arguments in generator function x86/tdx: Allow 32-bit emulation by default x86/entry: Do not allow external 0x80 interrupts x86/entry: Convert INT 0x80 emulation to IDTENTRY x86/coco: Disable 32-bit emulation by default on TDX and SEV x86: Introduce ia32_enabled() drm/amdgpu: correct chunk_ptr to a pointer to chunk. kconfig: fix memory leak from range properties tg3: Increment tx_dropped in tg3_tso_bug() tg3: Move the [rt]x_dropped counters to tg3_napi zstd: Fix array-index-out-of-bounds UBSAN warning netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test i2c: designware: Fix corrupted memory seen in the ISR hrtimers: Push pending hrtimers away from outgoing CPU earlier vdpa/mlx5: preserve CVQ vringh index ANDROID: Fix up merge issues in 6.1.64 in net/netfilter/nf_tables_api.c Reapply "binder: fix UAF caused by faulty buffer cleanup" ANDROID: Fix up unneeded crc break in af_vsock.c Revert "mmc: Add quirk MMC_QUIRK_BROKEN_CACHE_FLUSH for Micron eMMC Q2J54A" Revert "ASoC: soc-card: Add storage for PCI SSID" Revert "tracing: Have trace_event_file have ref counters" Revert "workqueue: Provide one lock class key per work_on_cpu() callsite" UPSTREAM: x86/sev: Check for user-space IOIO pointing to kernel space UPSTREAM: x86/sev: Check IOBM for IOIO exceptions from user-space FROMGIT: usb: typec: tcpm: skip checking port->send_discover in PD3.0 ANDROID: arm64: Disable workaround for CPU errata 2441007 and 2441009 Linux 6.1.67 Revert "wifi: cfg80211: fix CQM for non-range use" ANDROID: Update the ABI symbol list ANDROID: netlink: add netlink poll and hooks Linux 6.1.66 iomap: update ki_pos a little later in iomap_dio_complete x86/apic/msi: Fix misconfigured non-maskable MSI quirk x86/xen: fix percpu vcpu_info allocation xen: simplify evtchn_do_upcall() call maze xen: Allow platform PCI interrupt to be shared r8169: fix deadlock on RTL8125 in jumbo mtu mode r8169: disable ASPM in case of tx timeout drm/amd/display: Fix MPCC 1DLUT programming drm/amd/display: Fix the delta clamping for shaper LUT drm/amd/display: clean code-style issues in dcn30_set_mpc_shaper_3dlut drm/amd/display: Expand kernel doc for DC mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled mmc: core: add helpers mmc_regulator_enable/disable_vqmmc drm/amd/pm: fix a memleak in aldebaran_tables_init iommu/vt-d: Make context clearing consistent with context mapping iommu/vt-d: Disable PCI ATS in legacy passthrough mode iommu/vt-d: Add device_block_translation() helper iommu/vt-d: Allocate pasid table in device probe path iommu/vt-d: Omit devTLB invalidation requests when TES=0 cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily cpufreq: imx6q: don't warn for disabling a non-existing frequency drm/amd/display: Guard against invalid RPTR/WPTR being set drm/amd/display: Restore rptr/wptr for DMCUB as workaround spi: Fix null dereference on suspend fbdev: stifb: Make the STI next font pointer a 32-bit signed offset PCI: qcom-ep: Add dedicated callback for writing to DBI2 registers octeontx2-af: Initialize 'cntr_val' to fix uninitialized symbol error PCI: Lengthen reset delay for VideoPropulsion Torrent QN16e card KVM: x86: Fix lapic timer interrupt lost after loading a snapshot. net: ravb: Keep reverse order of operations in ravb_remove() net: ravb: Stop DMA in case of failures on ravb_open() net: ravb: Start TX queues after HW initialization succeeded net: ravb: Make write access to CXR35 first before accessing other EMAC registers net: ravb: Use pm_runtime_resume_and_get() net: ravb: Check return value of reset_control_deassert() ravb: Fix races between ravb_tx_timeout_work() and net related ops r8169: prevent potential deadlock in rtl8169_close octeontx2-pf: Restore TC ingress police rules when interface is up octeontx2-af: Install TC filter rules in hardware based on priority octeontx2-pf: Fix adding mbox work queue entry when num_vfs > 64 net: stmmac: xgmac: Disable FPE MMC interrupts octeontx2-af: Fix possible buffer overflow selftests/net: mptcp: fix uninitialized variable warnings selftests/net: unix: fix unused variable compiler warning selftests/net: fix a char signedness issue selftests/net: ipsec: fix constant out of range uapi: propagate __struct_group() attributes to the container union dpaa2-eth: increase the needed headroom to account for alignment ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet usb: config: fix iteration issue in 'usb_get_bos_descriptor()' USB: core: Change configuration warnings to notices USB: xhci-plat: fix legacy PHY double init wifi: cfg80211: fix CQM for non-range use serial: sc16is7xx: add missing support for rs485 devicetree properties serial: sc16is7xx: Put IOControl register into regmap_volatile auxdisplay: hd44780: move cursor home after clear display command Input: xpad - add HyperX Clutch Gladiate Support btrfs: fix 64bit compat send ioctl arguments not initializing version member btrfs: make error messages more clear when getting a chunk map btrfs: send: ensure send_fd is writable btrfs: fix off-by-one when checking chunk map includes logical address btrfs: ref-verify: fix memory leaks in btrfs_ref_tree_mod() btrfs: add dmesg output for first mount and last unmount of a filesystem parisc: Mark altinstructions read-only and 32-bit aligned parisc: Ensure 32-bit alignment on parisc unwind section parisc: Mark jump_table naturally aligned parisc: Drop the HP-UX ENOSYM and EREMOTERELEASE error codes parisc: Mark lock_aligned variables 16-byte aligned on SMP parisc: Use natural CPU alignment for bug_table parisc: Mark ex_table entries 32-bit aligned in uaccess.h parisc: Mark ex_table entries 32-bit aligned in assembly.h powerpc: Don't clobber f0/vs0 during fp|altivec register save KVM: PPC: Book3S HV: Fix KVM_RUN clobbering FP/VEC user registers iommu/vt-d: Add MTL to quirk list to skip TE disabling bcache: revert replacing IS_ERR_OR_NULL with IS_ERR dma-buf: fix check in dma_resv_add_fence cpufreq/amd-pstate: Fix the return value of amd_pstate_fast_switch() powercap: DTPM: Fix unneeded conversions to micro-Watts nvme: check for valid nvme_identify_ns() before using it dm verity: don't perform FEC for failed readahead IO dm verity: initialize fec io before freeing it drm/amd/display: fix ABM disablement drm/amd/display: Update min Z8 residency time to 2100 for DCN314 drm/amd/display: Use DRAM speed from validation for dummy p-state drm/amd/display: Remove min_dst_y_next_start check for Z8 drm/amd/display: Include udelay when waiting for INBOX0 ACK drm/amdgpu: Force order between a read and write to the same address drm/amd: Enable PCIe PME from D3 scsi: sd: Fix system start for ATA devices scsi: Change SCSI device boolean fields to single bit flags dm-verity: align struct dm_verity_fec_io properly ALSA: hda/realtek: Add supported ALC257 for ChromeOS ALSA: hda/realtek: Headset Mic VREF to 100% ALSA: hda: Disable power-save on KONTRON SinglePC mmc: block: Be sure to wait while busy in CQE error recovery mmc: block: Do not lose cache flush during CQE error recovery mmc: block: Retry commands in CQE error recovery mmc: cqhci: Fix task clearing in CQE error recovery mmc: cqhci: Warn of halt or task clear failure mmc: cqhci: Increase recovery halt timeout mmc: sdhci-pci-gli: Disable LPM during initialization firewire: core: fix possible memory leak in create_units() pinctrl: avoid reload of p state in list iteration smb: client: report correct st_size for SMB and NFS symlinks cifs: Fix FALLOC_FL_INSERT_RANGE by setting i_size after EOF moved cifs: Fix FALLOC_FL_ZERO_RANGE by setting i_size if EOF moved Linux 6.1.65 io_uring: fix off-by one bvec index USB: dwc3: qcom: fix wakeup after probe deferral USB: dwc3: qcom: fix software node leak on probe errors usb: dwc3: set the dma max_seg_size usb: dwc3: Fix default mode initialization USB: dwc2: write HCINT with INTMASK applied usb: typec: tcpm: Skip hard reset when in error recovery USB: serial: option: don't claim interface 4 for ZTE MF290 USB: serial: option: fix FM101R-GL defines USB: serial: option: add Fibocom L7xx modules usb: cdnsp: Fix deadlock issue during using NCM gadget bcache: fixup lock c->root error bcache: fixup init dirty data errors bcache: prevent potential division by zero error bcache: check return value from btree_node_alloc_replacement() dm-delay: fix a race between delay_presuspend and delay_bio hv_netvsc: Mark VF as slave before exposing it to user-mode hv_netvsc: Fix race of register_netdevice_notifier and VF register hv_netvsc: fix race of netvsc and VF register_netdevice USB: serial: option: add Luat Air72*U series products s390/dasd: protect device queue against concurrent access io_uring/fs: consider link->flags when getting path for LINKAT bcache: fixup multi-threaded bch_sectors_dirty_init() wake-up race md: fix bi_status reporting in md_end_clone_io bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in btree_gc_coalesce() swiotlb-xen: provide the "max_mapping_size" method ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA arm64: dts: imx8mn-var-som: add 20ms delay to ethernet regulator enable NFSD: Fix checksum mismatches in the duplicate reply cache NFSD: Fix "start of NFS reply" pointer passed to nfsd_cache_update() ext4: make sure allocate pending entry not fail ext4: fix slab-use-after-free in ext4_es_insert_extent() ext4: using nofail preallocation in ext4_es_insert_extent() ext4: using nofail preallocation in ext4_es_insert_delayed_block() ext4: using nofail preallocation in ext4_es_remove_extent() ext4: use pre-allocated es in __es_remove_extent() ext4: use pre-allocated es in __es_insert_extent() ext4: factor out __es_alloc_extent() and __es_free_extent() ext4: add a new helper to check if es must be kept media: qcom: camss: Fix genpd cleanup media: qcom: camss: Fix V4L2 async notifier error path media: qcom: Initialise V4L2 async notifier later media: camss: Convert to platform remove callback returning void media: camss: Split power domain management MIPS: KVM: Fix a build warning about variable set but not used cifs: fix leak of iface for primary channel cifs: account for primary channel in the interface list cifs: distribute channels across interfaces based on speed cifs: print last update time for interface list smb3: allow dumping session and tcon id to improve stats analysis and debugging cifs: minor cleanup of some headers lockdep: Fix block chain corruption USB: dwc3: qcom: fix ACPI platform device leak USB: dwc3: qcom: fix resource leaks on probe deferral nvmet: nul-terminate the NQNs passed in the connect command i40e: Fix adding unsupported cloud filters i40e: use ERR_PTR error print in i40e messages arm64: mm: Fix "rodata=on" when CONFIG_RODATA_FULL_DEFAULT_ENABLED=y mm,kfence: decouple kfence from page granularity mapping judgement afs: Fix file locking on R/O volumes to operate in local mode afs: Return ENOENT if no cell DNS record can be found net: axienet: Fix check for partial TX checksum amd-xgbe: propagate the correct speed and duplex status amd-xgbe: handle the corner-case during tx completion amd-xgbe: handle corner-case during sfp hotplug octeontx2-pf: Fix ntuple rule creation to direct packet to VF with higher Rx queue than its PF arm/xen: fix xen_vcpu_info allocation alignment net/smc: avoid data corruption caused by decline net: usb: ax88179_178a: fix failed operations during ax88179_reset ipv4: Correct/silence an endian warning in __ip_do_redirect HID: fix HID device resource race between HID core and debugging support drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full drm/i915: do not clean GT table on error path ata: pata_isapnp: Add missing error check for devm_ioport_map() octeontx2-pf: Fix memory leak during interface down wireguard: use DEV_STATS_INC() drm/panel: simple: Fix Innolux G101ICE-L01 timings drm/panel: simple: Fix Innolux G101ICE-L01 bus flags drm/panel: auo,b101uan08.3: Fine tune the panel power sequence drm/panel: boe-tv101wum-nl6: Fine tune the panel power sequence afs: Make error on cell lookup failure consistent with OpenAFS afs: Fix afs_server_list to be cleaned up with RCU Revert "inet: shrink struct flowi_common" Revert "mfd: core: Un-constify mfd_cell.of_reg" Revert "arm64/arm: xen: enlighten: Fix KPTI checks" Revert "virtio/vsock: replace virtio_vsock_pkt with sk_buff" Revert "vsock/virtio: remove socket from connected/bound list on shutdown" Revert "virtio/vsock: don't use skbuff state to account credit" Revert "virtio/vsock: remove redundant 'skb_pull()' call" Revert "virtio/vsock: don't drop skbuff on copy failure" Revert "virtio/vsock: fix leaks due to missing skb owner" Revert "virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()" Revert "virtio/vsock: fix header length on skb merging" Revert "vsock/loopback: use only sk_buff_head.lock to protect the packet queue" Linux 6.1.64 RISC-V: drop error print from riscv_hartid_to_cpuid() cxl/port: Fix NULL pointer access in devm_cxl_add_port() mmc: sdhci-pci-gli: GL9755: Mask the replay timer timeout of AER Input: xpad - add VID for Turtle Beach controllers tracing: Have trace_event_file have ref counters powerpc/powernv: Fix fortify source warnings in opal-prd.c drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox drm/amd/display: Enable fast plane updates on DCN3.2 and above drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer() drm/amdgpu: lower CS errors to debug severity drm/amdgpu: fix error handling in amdgpu_bo_list_get() drm/amdgpu: don't use ATRM for external devices drm/amdgpu: don't use pci_is_thunderbolt_attached() drm/amdgpu/smu13: drop compute workload workaround drm/amd/pm: Fix error of MACO flag setting code drm/i915: Fix potential spectre vulnerability drm/i915: Bump GLK CDCLK frequency when driving multiple pipes drm/amd/pm: Handle non-terminated overdrive commands. ext4: properly sync file size update after O_SYNC direct IO ext4: add missed brelse in update_backups ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks ext4: correct the start block of counting reserved clusters ext4: correct return value of ext4_convert_meta_bg ext4: mark buffer new if it is unwritten to avoid stale data exposure ext4: correct offset of gdb backup in non meta_bg group to update_backups ext4: apply umask if ACL support is disabled Revert "net: r8169: Disable multicast filter for RTL8168H and RTL8107E" media: qcom: camss: Fix csid-gen2 for test pattern generator media: qcom: camss: Fix invalid clock enable bit disjunction media: qcom: camss: Fix missing vfe_lite clocks check media: qcom: camss: Fix VFE-480 vfe_disable_output() media: qcom: camss: Fix VFE-17x vfe_disable_output() media: qcom: camss: Fix vfe_get() error jump media: qcom: camss: Fix pm_domain_on sequence in probe mmc: sdhci-pci-gli: GL9750: Mask the replay timer timeout of AER r8169: add handling DASH when DASH is disabled r8169: fix network lost after resume on DASH systems mptcp: fix setsockopt(IP_TOS) subflow locking mptcp: add validity check for sending RM_ADDR mptcp: deal with large GSO size mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors mm: fix for negative counter: nr_file_hugepages mmc: sdhci-pci-gli: A workaround to allow GL9750 to enter ASPM L1.2 riscv: kprobes: allow writing to x0 riscv: correct pt_level name via pgtable_l5/4_enabled riscv: mm: Update the comment of CONFIG_PAGE_OFFSET LoongArch: Mark __percpu functions as always inline nfsd: fix file memleak on client_opens_release dm-verity: don't use blocking calls from tasklets drm/mediatek/dp: fix memory leak on ->get_edid callback error path drm/mediatek/dp: fix memory leak on ->get_edid callback audio detection media: ccs: Correctly initialise try compose rectangle media: venus: hfi: add checks to handle capabilities from firmware media: venus: hfi: fix the check to handle session buffer requirement media: venus: hfi_parser: Add check to keep the number of codecs within range media: sharp: fix sharp encoding media: lirc: drop trailing space from scancode transmit f2fs: avoid format-overflow warning f2fs: do not return EFSCORRUPTED, but try to run online repair i2c: i801: fix potential race in i801_block_transaction_byte_by_byte net: phylink: initialize carrier state at creation net: dsa: lan9303: consequently nested-lock physical MDIO net: ethtool: Fix documentation of ethtool_sprintf() s390/ap: fix AP bus crash on early config change callback invocation i2c: designware: Disable TX_EMPTY irq while waiting for block length byte sbsa_gwdt: Calculate timeout with 64-bit math lsm: fix default return value for inode_getsecctx lsm: fix default return value for vm_enough_memory Revert "i2c: pxa: move to generic GPIO recovery" Revert ncsi: Propagate carrier gain/loss events to the NCSI controller cxl/region: Fix x1 root-decoder granularity calculations tools/testing/cxl: Define a fixed volatile configuration to parse cxl/mem: Move devm_cxl_add_endpoint() from cxl_core to cxl_mem cxl: Unify debug messages when calling devm_cxl_add_port() i3c: master: svc: fix random hot join failure since timeout error i3c: master: svc: add NACK check after start byte sent cxl/region: Do not try to cleanup after cxl_region_setup_targets() fails cxl/region: Move region-position validation to a helper cxl/region: Cleanup target list on attach error cxl/region: Validate region mode vs decoder mode drm/amd/display: enable dsc_clk even if dsc_pg disabled Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables bluetooth: Add device 13d3:3571 to device tables bluetooth: Add device 0bda:887b to device tables Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559 clk: visconti: Fix undefined behavior bug in struct visconti_pll_provider clk: visconti: remove unused visconti_pll_provider::regmap cpufreq: stats: Fix buffer overflow detection in trans_stats() pmdomain: imx: Make imx pgc power domain also set the fwnode pmdomain: bcm: bcm2835-power: check if the ASB register is equal to enable ALSA: hda/realtek: Add quirks for HP Laptops ALSA: hda/realtek: Enable Mute LED on HP 255 G10 ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC ALSA: hda/realtek - Add Dell ALC295 to pin fall back table ALSA: hda/realtek: Enable Mute LED on HP 255 G8 ALSA: info: Fix potential deadlock at disconnection btrfs: zoned: wait for data BG to be finished on direct IO allocation xfs: recovery should not clear di_flushiter unconditionally cifs: do not reset chan_max if multichannel is not supported at mount cifs: force interface update before a fresh session setup cifs: reconnect helper should set reconnect for the right channel smb: client: fix potential deadlock when releasing mids smb: client: fix use-after-free bug in cifs_debug_data_proc_show() smb3: fix caching of ctime on setxattr smb3: fix touch -h of symlink smb3: fix creating FIFOs when mounting with "sfu" mount option fs: add ctime accessors infrastructure xhci: Enable RPM on controllers that support low-power states parisc/power: Fix power soft-off when running on qemu parisc/pgtable: Do not drop upper 5 address bits of physical address parisc: Prevent booting 64-bit kernels on PA1.x machines i3c: master: svc: fix SDA keep low when polling IBIWON timeout happen i3c: master: svc: fix check wrong status register in irq handler i3c: master: svc: fix ibi may not return mandatory data byte i3c: master: svc: fix wrong data return when IBI happen during start frame i3c: master: svc: fix race condition in ibi work thread i3c: master: cdns: Fix reading status register mtd: cfi_cmdset_0001: Byte swap OTP info mm/memory_hotplug: use pfn math in place of direct struct page manipulation mm/cma: use nth_page() in place of direct struct page manipulation s390/cmma: fix detection of DAT pages dmaengine: stm32-mdma: correct desc prep when channel running mcb: fix error handling for different scenarios when parsing driver core: Release all resources during unbind before updating device links tracing: Have the user copy of synthetic event address use correct context i2c: core: Run atomic i2c xfer when !preemptible kernel/reboot: emergency_restart: Set correct system_state quota: explicitly forbid quota files from being encrypted jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev ASoC: codecs: wsa-macro: fix uninitialized stack variables with name prefix hid: lenovo: Resend all settings on reset_resume for compact keyboards selftests/resctrl: Reduce failures due to outliers in MBA/MBM tests selftests/resctrl: Move _GNU_SOURCE define into Makefile selftests/resctrl: Remove duplicate feature check from CMT test netfilter: nf_tables: split async and sync catchall in two functions netfilter: nf_tables: remove catchall element in GC sync path ima: detect changes to the backing overlay file ima: annotate iint mutex to avoid lockdep false positive warnings mfd: qcom-spmi-pmic: Fix revid implementation mfd: qcom-spmi-pmic: Fix reference leaks in revid helper arm64: dts: qcom: ipq6018: Fix tcsr_mutex register size ACPI: FPDT: properly handle invalid FPDT subtables firmware: qcom_scm: use 64-bit calling convention only when client is 64-bit arm64: dts: qcom: ipq8074: Fix hwlock index for SMEM btrfs: don't arbitrarily slow down delalloc if we're committing rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects PM: hibernate: Clean up sync_read handling in snapshot_write_next() PM: hibernate: Use __get_safe_page() rather than touching the list arm64: dts: qcom: ipq6018: Fix hwlock index for SMEM rcu/tree: Defer setting of jiffies during stall reset svcrdma: Drop connection after an RDMA Read error wifi: wilc1000: use vmm_table as array in wilc struct PCI: exynos: Don't discard .remove() callback PCI: kirin: Don't discard .remove() callback PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common() mmc: Add quirk MMC_QUIRK_BROKEN_CACHE_FLUSH for Micron eMMC Q2J54A mmc: sdhci_am654: fix start loop index for TAP value parsing mmc: vub300: fix an error code ksmbd: fix slab out of bounds write in smb_inherit_dacl() ksmbd: handle malformed smb1 message clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from PLL clocks clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks clk: socfpga: Fix undefined behavior bug in struct stratix10_clock_data parisc/power: Add power soft-off when running on qemu parisc/pdc: Add width field to struct pdc_model arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer PCI: keystone: Don't discard .probe() callback PCI: keystone: Don't discard .remove() callback KEYS: trusted: Rollback init_trusted() consistently KEYS: trusted: tee: Refactor register SHM usage genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware mmc: meson-gx: Remove setting of CMD_CFG_ERROR wifi: ath11k: fix gtk offload status event locking wifi: ath11k: fix htt pktlog locking wifi: ath11k: fix dfs radar event locking wifi: ath11k: fix temperature event locking regmap: Ensure range selector registers are updated after cache sync ACPI: resource: Do IRQ override on TongFang GMxXGxx mm/damon/sysfs: check error from damon_sysfs_update_target() mm/damon: implement a function for max nr_accesses safe calculation mm/damon/ops-common: avoid divide-by-zero during region hotness calculation mm/damon/lru_sort: avoid divide-by-zero in hot threshold calculation watchdog: move softlockup_panic back to early_param mm/damon/sysfs: update monitoring target regions for online input commit mm/damon/sysfs: remove requested targets when online-commit inputs PCI/sysfs: Protect driver's D3cold preference from user space hvc/xen: fix event channel handling for secondary consoles hvc/xen: fix error path in xen_hvc_init() to always register frontend driver hvc/xen: fix console unplug tty: serial: meson: fix hard LOCKUP on crtscts mode tty/sysrq: replace smp_processor_id() with get_cpu() proc: sysctl: prevent aliased sysctls from getting passed to init audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() audit: don't take task_lock() in audit_exe_compare() code path KVM: x86: Clear bit12 of ICR after APIC-write VM-exit KVM: x86: Ignore MSR_AMD64_TW_CFG access KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space x86/cpu/hygon: Fix the CPU topology evaluation for real crypto: x86/sha - load modules based on CPU features scsi: qla2xxx: Fix system crash due to bad pointer access scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers scsi: mpt3sas: Fix loop logic bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END bpf: Fix check_stack_write_fixed_off() to correctly spill imm randstruct: Fix gcc-plugin performance mode to stay in group powerpc/perf: Fix disabling BHRB and instruction sampling perf intel-pt: Fix async branch flags media: venus: hfi: add checks to perform sanity on queue pointers i915/perf: Fix NULL deref bugs with drm_dbg() calls cifs: fix check of rc in function generate_smb3signingkey cifs: spnego: add ';' in HOST_KEY_LEN tools/power/turbostat: Enable the C-state Pre-wake printing tools/power/turbostat: Fix a knl bug macvlan: Don't propagate promisc change to lower dev in passthru net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors net/mlx5e: Check return value of snprintf writing to fw_version buffer net/mlx5e: Reduce the size of icosq_str net/mlx5e: Fix pedit endianness net/mlx5e: fix double free of encap_header in update funcs net/mlx5e: fix double free of encap_header net: stmmac: avoid rx queue overrun net: stmmac: fix rx budget limit check netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() netfilter: nf_conntrack_bridge: initialize err to 0 af_unix: fix use-after-free in unix_stream_read_actor() net: ethernet: cortina: Fix MTU max setting net: ethernet: cortina: Handle large frames net: ethernet: cortina: Fix max RX frame define bonding: stop the device in bond_setup_by_slave() ptp: annotate data-race around q->head and q->tail xen/events: fix delayed eoi list handling ppp: limit MRU to 64K net: mvneta: fix calls to page_pool_get_stats tipc: Fix kernel-infoleak due to uninitialized TLV value net: hns3: fix VF wrong speed and duplex issue net: hns3: fix VF reset fail issue net: hns3: fix variable may not initialized problem in hns3_init_mac_addr() net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs net: hns3: fix incorrect capability bit display for copper port net: hns3: add barrier in vf mailbox reply process net: hns3: fix add VLAN fail issue tty: Fix uninit-value access in ppp_sync_receive() ipvlan: add ipvlan_route_v6_outbound() helper net: set SOCK_RCU_FREE before inserting socket into hashtable vhost-vdpa: fix use after free in vhost_vdpa_probe() gfs2: Silence "suspicious RCU usage in gfs2_permission" warning SUNRPC: Fix RPC client cleaned up the freed pipefs dentries NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO SUNRPC: Add an IS_ERR() check back to where it was NFSv4.1: fix handling NFS4ERR_DELAY when testing for session trunking mtd: rawnand: meson: check return value of devm_kasprintf() mtd: rawnand: intel: check return value of devm_kasprintf() SUNRPC: ECONNRESET might require a rebind sched/core: Optimize in_task() and in_interrupt() a bit wifi: iwlwifi: Use FW rate for non-data frames mtd: rawnand: tegra: add missing check for platform_get_irq() pwm: Fix double shift bug drm/amdgpu: fix software pci_unplug on some chips ALSA: hda/realtek: Add quirk for ASUS UX7602ZM drm/qxl: prevent memory leak ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings i2c: dev: copy userspace array safely kgdb: Flush console before entering kgdb on panic drm/amd/display: Avoid NULL dereference of timing generator media: imon: fix access to invalid resource for the second interface media: ccs: Fix driver quirk struct documentation media: cobalt: Use FIELD_GET() to extract Link Width gfs2: fix an oops in gfs2_permission gfs2: ignore negated quota changes media: vivid: avoid integer overflow media: gspca: cpia1: shift-out-of-bounds in set_flicker i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data. virtio-blk: fix implicit overflow on virtio_max_dma_size i2c: sun6i-p2wi: Prevent potential division by zero i2c: fix memleak in i2c_new_client_device() i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler 9p: v9fs_listxattr: fix %s null argument warning 9p/trans_fd: Annotate data-racy writes to file::f_flags usb: gadget: f_ncm: Always set current gadget in ncm_bind() f2fs: fix error handling of __get_node_page soundwire: dmi-quirks: update HP Omen match usb: dwc3: core: configure TX/RX threshold for DWC3_IP tty: vcc: Add check for kstrdup() in vcc_probe() thunderbolt: Apply USB 3.x bandwidth quirk only in software connection manager iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() mfd: intel-lpss: Add Intel Lunar Lake-M PCI IDs exfat: support handle zero-size directory HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W crypto: hisilicon/qm - prevent soft lockup in receive loop ASoC: Intel: soc-acpi-cht: Add Lenovo Yoga Tab 3 Pro YT3-X90 quirk PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller PCI: Disable ATS for specific Intel IPU E2000 devices PCI: Extract ATS disabling to a helper function PCI: Use FIELD_GET() to extract Link Width scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() PCI: Do error check on own line to split long "if" conditions atm: iphase: Do PCI error checks on own line PCI: mvebu: Use FIELD_PREP() with Link Width PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields ALSA: hda: Fix possible null-ptr-deref when assigning a stream ARM: 9320/1: fix stack depot IRQ stack filter HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround jfs: fix array-index-out-of-bounds in diAlloc jfs: fix array-index-out-of-bounds in dbFindLeaf fs/jfs: Add validity check for db_maxag and db_agpref fs/jfs: Add check for negative db_l2nbperpage scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs RDMA/hfi1: Use FIELD_GET() to extract Link Width ASoC: SOF: ipc4: handle EXCEPTION_CAUGHT notification from firmware crypto: pcrypt - Fix hungtask for PADATA_RESET ASoC: SOF: Pass PCI SSID to machine driver ASoC: soc-card: Add storage for PCI SSID selftests/efivarfs: create-read: fix a resource leak arm64: dts: ls208xa: use a pseudo-bus to constrain usb dma size drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL drm/amdkfd: Fix shift out-of-bounds issue drm/panel: st7703: Pick different reset sequence drm/amdgpu/vkms: fix a possible null pointer dereference drm/radeon: fix a possible null pointer dereference drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference drm/panel: fix a possible null pointer dereference drm/amdgpu: Fix potential null pointer derefernce drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 drm/msm/dp: skip validity check for DP CTS EDID checksum drm: vmwgfx_surface.c: copy user-array safely drm_lease.c: copy user-array safely kernel: watch_queue: copy user-array safely kernel: kexec: copy user-array safely string.h: add array-wrappers for (v)memdup_user() drm/amd/display: use full update for clip size increase of large plane source drm/amd: Update `update_pcie_parameters` functions to use uint8_t arguments drm/amdkfd: Fix a race condition of vram buffer unref in svm code drm/amdgpu: not to save bo in the case of RAS err_event_athub drm/komeda: drop all currently held locks if deadlock happens drm/gma500: Fix call trace when psb_gem_mm_init() fails platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e platform/chrome: kunit: initialize lock for fake ec_dev tsnep: Fix tsnep_request_irq() format-overflow warning ACPI: EC: Add quirk for HP 250 G7 Notebook PC Bluetooth: Fix double free in hci_conn_cleanup Bluetooth: btusb: Add date->evt_skb is NULL check bpf: Ensure proper register state printing for cond jumps vsock: read from socket's error queue wifi: ath10k: Don't touch the CE interrupt registers after power up net: annotate data-races around sk->sk_dst_pending_confirm net: annotate data-races around sk->sk_tx_queue_mapping wifi: ath10k: fix clang-specific fortify warning wifi: ath9k: fix clang-specific fortify warnings bpf: Detect IP == ksym.end as part of BPF program atl1c: Work around the DMA RX overflow issue wifi: mac80211: don't return unset power in ieee80211_get_tx_power() wifi: mac80211_hwsim: fix clang-specific fortify warning wifi: plfxlc: fix clang-specific fortify warning x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size workqueue: Provide one lock class key per work_on_cpu() callsite cpu/hotplug: Don't offline the last non-isolated CPU smp,csd: Throw an error if a CSD lock is stuck for too long clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware clocksource/drivers/timer-imx-gpt: Fix potential memory leak selftests/lkdtm: Disable CONFIG_UBSAN_TRAP in test config srcu: Fix srcu_struct node grpmask overflow on 64-bit systems perf/core: Bail out early if the request AUX area is out of bound lib/generic-radix-tree.c: Don't overflow in peek() locking/ww_mutex/test: Fix potential workqueue corruption Linux 6.1.63 virtio/vsock: fix header length on skb merging virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt() virtio/vsock: fix leaks due to missing skb owner vsock/loopback: use only sk_buff_head.lock to protect the packet queue virtio/vsock: don't drop skbuff on copy failure virtio/vsock: remove redundant 'skb_pull()' call virtio/vsock: don't use skbuff state to account credit wifi: cfg80211: fix kernel-doc for wiphy_delayed_work_flush() btrfs: use u64 for buffer sizes in the tree search ioctls Revert "mmc: core: Capture correct oemid-bits for eMMC cards" x86/amd_nb: Use Family 19h Models 60h-7Fh Function 4 IDs io_uring/net: ensure socket is marked connected on connect retry tracing/kprobes: Fix the order of argument descriptions fbdev: fsl-diu-fb: mark wr_reg_wa() static fbdev: imsttfb: fix a resource leak in probe fbdev: imsttfb: Fix error path of imsttfb_probe() spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies ASoC: dapm: fix clock get name ASoC: hdmi-codec: register hpd callback on component probe ASoC: mediatek: mt8186_mt6366_rt1019_rt5682s: trivial: fix error messages drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE RISC-V: Don't fail in riscv_of_parent_hartid() for disabled HARTs netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate eval call-backs netfilter: xt_recent: fix (increase) ipv6 literal buffer length i2c: iproc: handle invalid slave state r8169: respect userspace disabling IFF_MULTICAST vsock/virtio: remove socket from connected/bound list on shutdown virtio/vsock: replace virtio_vsock_pkt with sk_buff blk-core: use pr_warn_ratelimited() in bio_check_ro() nbd: fix uaf in nbd_open tg3: power down device only on SYSTEM_POWER_OFF nvme: fix error-handling for io_uring nvme-passthrough net/smc: put sk reference if close work was canceled net/smc: allow cdc msg send rather than drop it with NULL sndbuf_desc net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT octeontx2-pf: Free pending and dropped SQEs octeontx2-pf: qos send queues management octeontx2-pf: Rename tot_tx_queues to non_qos_queues selftests: pmtu.sh: fix result checking net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs Fix termination state for idr_for_each_entry_ul() net: r8169: Disable multicast filter for RTL8168H and RTL8107E dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses. dccp: Call security_inet_conn_request() after setting IPv4 addresses. net: page_pool: add missing free_percpu when page_pool_init fail octeontx2-pf: Fix holes in error code octeontx2-pf: Fix error codes inet: shrink struct flowi_common bpf: Check map->usercnt after timer->timer is assigned tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING hsr: Prevent use after free in prp_create_tagged_frame() llc: verify mac len before reading mac header watchdog: ixp4xx: Make sure restart always works Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume pwm: sti: Reduce number of allocations and drop usage of chip_data regmap: prevent noinc writes from clobbering cache media: cec: meson: always include meson sub-directory in Makefile media: dvb-usb-v2: af9035: fix missing unlock media: cadence: csi2rx: Unregister v4l2 async notifier media: cedrus: Fix clock/reset sequence media: vidtv: mux: Add check and kfree for kstrdup media: vidtv: psi: Add check for kstrdup media: s3c-camif: Avoid inappropriate kfree() media: mtk-jpegenc: Fix bug in JPEG encode quality selection media: amphion: handle firmware debug message media: bttv: fix use after free error due to btv->timeout timer media: ov5640: Fix a memory leak when ov5640_probe fails media: i2c: max9286: Fix some redundant of_node_put() calls media: ov5640: fix vblank unchange issue when work at dvp mode media: ov5640: Drop dead code using frame_interval media: verisilicon: Do not enable G2 postproc downscale if source is narrower than destination media: hantro: Check whether reset op is defined before use pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() pcmcia: ds: fix refcount leak in pcmcia_device_add() pcmcia: cs: fix possible hung task and memory leak pccardd() rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call virt: sevguest: Fix passing a stack buffer as a scatterlist target x86/sev: Change snp_guest_issue_request()'s fw_err argument crypto: ccp - Name -1 return value as SEV_RET_NO_FW_CALL cxl/mem: Fix shutdown order i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs 9p/net: fix possible memory leak in p9_check_errors() perf hist: Add missing puts to hist__account_cycles perf machine: Avoid out of bounds LBR memory read usb: host: xhci-plat: fix possible kernel oops while resuming xhci: Loosen RPM as default policy to cover for AMD xHC 1.1 powerpc/pseries: fix potential memory leak in init_cpu_associativity() powerpc/imc-pmu: Use the correct spinlock initializer. powerpc/vas: Limit open window failure messages in log bufffer powerpc/xive: Fix endian conversion size powerpc/40x: Remove stale PTE_ATOMIC_UPDATES macro modpost: fix ishtp MODULE_DEVICE_TABLE built on big-endian host modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host powerpc: Only define __parse_fpscr() when required interconnect: qcom: sm8350: Set ACV enable_mask interconnect: qcom: sm8350: Retire DEFINE_QBCM interconnect: qcom: sm8150: Set ACV enable_mask interconnect: qcom: sm8150: Retire DEFINE_QBCM interconnect: qcom: sm8150: Drop IP0 interconnects interconnect: move ignore_list out of of_count_icc_providers() interconnect: qcom: sm6350: Set ACV enable_mask interconnect: qcom: sm6350: Retire DEFINE_QBCM interconnect: qcom: sdm845: Set ACV enable_mask interconnect: qcom: sdm845: Retire DEFINE_QBCM interconnect: qcom: sc8280xp: Set ACV enable_mask interconnect: qcom: sc8180x: Set ACV enable_mask interconnect: qcom: sc7280: Set ACV enable_mask interconnect: qcom: sc7180: Set ACV enable_mask interconnect: qcom: sc7180: Retire DEFINE_QBCM f2fs: fix to initialize map.m_pblk in f2fs_precache_extents() dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc() USB: usbip: fix stub_dev hub disconnect tools: iio: iio_generic_buffer ensure alignment misc: st_core: Do not call kfree_skb() under spin_lock_irqsave() dmaengine: ti: edma: handle irq_of_parse_and_map() errors usb: chipidea: Simplify Tegra DMA alignment code usb: chipidea: Fix DMA overwrite for Tegra usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency dmaengine: idxd: Register dsa_bus_type before registering idxd sub-drivers perf record: Fix BTF type checks in the off-cpu profiling pinctrl: renesas: rzg2l: Make reverse order of enable() for disable() livepatch: Fix missing newline character in klp_resolve_symbols() tty: tty_jobctrl: fix pid memleak in disassociate_ctty() f2fs: compress: fix to avoid redundant compress extension f2fs: compress: fix to avoid use-after-free on dic f2fs: compress: fix deadloop in f2fs_write_cache_pages() f2fs: convert f2fs_write_cache_pages() to use filemap_get_folios_tag() filemap: add filemap_get_folios_tag() perf kwork: Set ordered_events to true in 'struct perf_tool' perf kwork: Add the supported subcommands to the document perf kwork: Fix incorrect and missing free atom in work_push_atom() iio: frequency: adf4350: Use device managed functions and fix power down issue. perf stat: Fix aggr mode initialization apparmor: fix invalid reference on profile->disconnected apparmor: test: make static symbols visible during kunit testing kunit: add macro to allow conditionally exposing static symbols to tests leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu' leds: pwm: Don't disable the PWM when the LED should be off leds: turris-omnia: Do not use SMBUS calls leds: turris-omnia: Drop unnecessary mutex locking mfd: arizona-spi: Set pdata.hpdet_channel for ACPI enumerated devs dt-bindings: mfd: mt6397: Split out compatible for MediaTek MT6366 PMIC dt-bindings: mfd: mt6397: Add binding for MT6357 mfd: dln2: Fix double put in dln2_probe mfd: core: Ensure disabled devices are skipped without aborting mfd: core: Un-constify mfd_cell.of_reg IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF ASoC: ams-delta.c: use component after check crypto: qat - fix deadlock in backlog processing padata: Fix refcnt handling in padata_free_shell() ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails HID: logitech-hidpp: Move get_wireless_feature_index() check to hidpp_connect_event() HID: logitech-hidpp: Revert "Don't restart communication if not necessary" HID: logitech-hidpp: Don't restart IO, instead defer hid_connect() only HID: logitech-hidpp: Remove HIDPP_QUIRK_NO_HIDINPUT quirk Revert "HID: logitech-hidpp: add a module parameter to keep firmware gestures" sh: bios: Revive earlyprintk support hid: cp2112: Fix IRQ shutdown stopping polling for all IRQs on chip HID: cp2112: Make irq_chip immutable RDMA/hfi1: Workaround truncation compilation error scsi: ufs: core: Leave space for '\0' in utf8 desc string ASoC: fsl: Fix PM disable depth imbalance in fsl_easrc_probe ASoC: SOF: core: Ensure sof_ops_free() is still called when probe never ran. RDMA/hns: The UD mode can only be configured with DCQCN RDMA/hns: Add check for SL RDMA/hns: Fix signed-unsigned mixed comparisons RDMA/hns: Fix uninitialized ucmd in hns_roce_create_qp_common() RDMA/hns: Fix printing level of asynchronous events IB/mlx5: Fix rdma counter binding for RAW QP ASoC: fsl: mpc5200_dma.c: Fix warning of Function parameter or member not described ext4: move 'ix' sanity check to corrent position ARM: 9321/1: memset: cast the constant byte to unsigned char crypto: hisilicon/qm - fix PF queue parameter issue crypto: hisilicon/qm - split a debugfs.c from qm crypto: hisilicon/qm - modify the process of regs dfx crypto: hisilicon/qm - delete redundant null assignment operations hid: cp2112: Fix duplicate workqueue initialization PCI: vmd: Correct PCI Header Type Register's multi-function check crypto: qat - increase size of buffers crypto: caam/jr - fix Chacha20 + Poly1305 self test failure crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure nd_btt: Make BTT lanes preemptible libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value scsi: ibmvfc: Fix erroneous use of rtas_busy_delay with hcall return code crypto: qat - fix unregistration of crypto algorithms crypto: qat - extend buffer list interface crypto: qat - generalize crypto request buffers crypto: qat - change bufferlist logic interface crypto: qat - rename bufferlist functions crypto: qat - relocate bufferlist logic crypto: qat - ignore subsequent state up commands RDMA/core: Use size_{add,sub,mul}() in calls to struct_size() hwrng: geode - fix accessing registers hwrng: bcm2835 - Fix hwrng throughput regression crypto: hisilicon/hpre - Fix a erroneous check after snprintf() KEYS: Include linux/errno.h in linux/verification.h ALSA: hda: cs35l41: Undo runtime PM changes at driver exit time ALSA: hda: cs35l41: Fix unbalanced pm_runtime_get() ASoC: cs35l41: Undo runtime PM changes at driver exit time ASoC: cs35l41: Verify PM runtime resume errors in IRQ handler module/decompress: use vmalloc() for gzip decompression workspace selftests/resctrl: Ensure the benchmark commands fits to its array selftests/pidfd: Fix ksft print formats arm64: tegra: Use correct interrupts for Tegra234 TKE arm64: dts: imx8mn: Add sound-dai-cells to micfil node arm64: dts: imx8mm: Add sound-dai-cells to micfil node arm64: dts: imx8qm-ss-img: Fix jpegenc compatible entry clk: scmi: Free scmi_clk allocated when the clocks with invalid info are skipped ARM: dts: am3517-evm: Fix LED3/4 pinmux firmware: arm_ffa: Allow the FF-A drivers to use 32bit mode of messaging firmware: arm_ffa: Assign the missing IDR allocation ID to the FFA device arm64: dts: ti: k3-am62a7-sk: Drop i2c-1 to 100Khz firmware: ti_sci: Mark driver as non removable kunit: Fix missed memory release in kunit_free_suite_set() soc: qcom: llcc: Handle a second device without data corruption ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator arm64: dts: qcom: apq8016-sbc: Add missing ADV7533 regulators ARM64: dts: marvell: cn9310: Use appropriate label for spi1 pins arm64: dts: qcom: sdm845-mtp: fix WiFi configuration arm64: dts: qcom: sm8350: fix pinctrl for UART18 arm64: dts: qcom: sm8150: add ref clock to PCIe PHYs arm64: dts: qcom: sc7280: Add missing LMH interrupts arm64: dts: qcom: msm8992-libra: drop duplicated reserved memory arm64: dts: qcom: msm8916: Fix iommu local address range arm64: dts: qcom: sc7280: link usb3_phy_wrapper_gcc_usb30_pipe_clk arm64: dts: qcom: sdm845: cheza doesn't support LMh node ARM: dts: renesas: blanche: Fix typo in GP_11_2 pin name perf: hisi: Fix use-after-free when register pmu fails drivers/perf: hisi_pcie: Check the type first in pmu::event_init() perf/arm-cmn: Fix DTC domain detection perf/arm-cmn: Revamp model detection drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process drm: mediatek: mtk_dsi: Fix NO_EOT_PACKET settings/handling clocksource/drivers/arm_arch_timer: limit XGene-1 workaround drm/msm/dsi: free TX buffer in unbind drm/msm/dsi: use msm_gem_kernel_put to free TX buffer xen-pciback: Consider INTx disabled when MSI/MSI-X is enabled xenbus: fix error exit in xenbus_init() drm/rockchip: Fix type promotion bug in rockchip_gem_iommu_map() arm64/arm: xen: enlighten: Fix KPTI checks drm/bridge: lt9611uxc: fix the race in the error path gpu: host1x: Correct allocated size for contexts drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe() drm/mediatek: Fix iommu fault during crtc enabling drm/mediatek: Fix iommu fault by swapping FBs after updating plane state io_uring/kbuf: Allow the full buffer id space for provided buffers io_uring/kbuf: Fix check of BID wrapping in provided buffers drm/amd/display: Bail from dm_check_crtc_cursor if no relevant change drm/amd/display: Refactor dm_get_plane_scale helper drm/amd/display: Check all enabled planes in dm_check_crtc_cursor drm/amdkfd: fix some race conditions in vram buffer alloc/free of svm code drm/bridge: tc358768: Fix tc358768_ns_to_cnt() drm/bridge: tc358768: Clean up clock period code drm/bridge: tc358768: Rename dsibclk to hsbyteclk drm/bridge: tc358768: Use dev for dbg prints, not priv->dev drm/bridge: tc358768: Print logical values, not raw register values drm/bridge: tc358768: Use struct videomode drm/bridge: tc358768: remove unused variable drm/bridge: tc358768: Fix bit updates drm/bridge: tc358768: Fix use of uninitialized variable drm/bridge: lt8912b: Add missing drm_bridge_attach call drm/bridge: lt8912b: Manually disable HPD only if it was enabled drm/bridge: lt8912b: Fix crash on bridge detach drm/bridge: lt8912b: Fix bridge_detach drm/bridge: lt8912b: Add hot plug detection drm: bridge: it66121: Fix invalid connector dereference drm/radeon: possible buffer overflow drm/rockchip: vop2: Add missing call to crtc reset helper drm/rockchip: vop2: Don't crash for invalid duplicate_state drm/rockchip: vop: Fix call to crtc reset helper drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs hte: tegra: Fix missing error code in tegra_hte_test_probe() hwmon: (sch5627) Disallow write access if virtual registers are locked hwmon: (sch5627) Use bit macros when accessing the control register Revert "hwmon: (sch56xx-common) Add automatic module loading on supported devices" Revert "hwmon: (sch56xx-common) Add DMI override table" hwmon: (coretemp) Fix potentially truncated sysfs attribute name hwmon: (axi-fan-control) Fix possible NULL pointer dereference platform/x86: wmi: Fix opening of char device platform/x86: wmi: Fix probe failure when failing to register WMI devices clk: qcom: config IPQ_APSS_6018 should depend on QCOM_SMEM clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data clk: npcm7xx: Fix incorrect kfree clk: ti: fix double free in of_ti_divider_clk_setup() clk: ti: change ti_clk_register[_omap_hw]() API clk: keystone: pll: fix a couple NULL vs IS_ERR() checks spi: nxp-fspi: use the correct ioremap function clk: linux/clk-provider.h: fix kernel-doc warnings and typos clk: renesas: rzg2l: Fix computation formula clk: renesas: rzg2l: Use FIELD_GET() for PLL register fields clk: renesas: rzg2l: Trust value returned by hardware clk: renesas: rzg2l: Lock around writes to mux register clk: renesas: rzg2l: Wait for status bit of SD mux before continuing clk: renesas: rcar-gen3: Extend SDnH divider table clk: imx: imx8qxp: Fix elcdif_pll clock clk: imx: imx8mq: correct error handling path clk: imx: Select MXC_CLK for CLK_IMX8QXP regulator: mt6358: Fail probe on unknown chip ID clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src clk: qcom: mmcc-msm8998: Fix the SMMU GDSC clk: qcom: mmcc-msm8998: Don't check halt bit on some branch clks clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies clk: qcom: gcc-msm8996: Remove RPM bus clocks spi: tegra: Fix missing IRQ check in tegra_slink_probe() regmap: debugfs: Fix a erroneous check after snprintf() ipvlan: properly track tx_errors net: add DEV_STATS_READ() helper ipv6: avoid atomic fragment on GSO packets ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() bpf: Fix unnecessary -EBUSY from htab_lock_bucket Bluetooth: hci_sync: Fix Opcode prints in bt_dev_dbg/err wifi: iwlwifi: empty overflow queue during flush wifi: iwlwifi: pcie: synchronize IRQs before NAPI wifi: iwlwifi: call napi_synchronize() before freeing rx/tx queues tcp: fix cookie_init_timestamp() overflows chtls: fix tp->rcv_tstamp initialization net: skb_find_text: Ignore patterns extending past 'to' selftests: netfilter: test for sctp collision processing in nf_conntrack r8169: fix rare issue with broken rx after link-down on RTL8125 r8169: use tp_to_dev instead of open code thermal: core: prevent potential string overflow netfilter: nf_tables: Drop pointless memset when dumping rules wifi: wfx: fix case where rates are out of order PM / devfreq: rockchip-dfi: Make pmu regmap mandatory can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() can: dev: can_restart(): don't crash kernel if carrier is OK wifi: ath11k: fix Tx power value during active CAC ACPI: video: Add acpi_backlight=vendor quirk for Toshiba Portégé R100 ACPI: property: Allow _DSD buffer data only for byte accessors wifi: rtlwifi: fix EDCA limit set by BT coexistence tcp_metrics: do not create an entry from tcp_init_metrics() tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics() tcp_metrics: add missing barriers on delete wifi: ath: dfs_pattern_detector: Fix a memory initialization issue wifi: mt76: mt7915: fix beamforming availability check wifi: mt76: mt7603: improve stuck beacon handling wifi: mt76: mt7603: improve watchdog reset reliablity wifi: mt76: mt7603: rework/fix rx pse hang check wifi: ath11k: fix boot failure with one MSI vector wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file() net: ethernet: mtk_wed: fix EXT_INT_STATUS_RX_FBUF definitions for MT7986 SoC net: spider_net: Use size_add() in call to struct_size() tipc: Use size_add() in calls to struct_size() tls: Use size_add() in call to struct_size() tls: Only use data field in crypto completion function mlxsw: Use size_mul() in call to struct_size() gve: Use size_add() in call to struct_size() tcp: call tcp_try_undo_recovery when an RTOd TFO SYNACK is ACKed udp: add missing WRITE_ONCE() around up->encap_rcv selftests/bpf: Correct map_fd to data_fd in tailcalls iavf: Fix promiscuous mode configuration flow messages i40e: fix potential memory leaks in i40e_remove() wifi: iwlwifi: honor the enable_ini value wifi: mac80211: fix # of MSDU in A-MSDU calculation wifi: mac80211: move sched-scan stop work to wiphy work wifi: mac80211: move offchannel works to wiphy work wifi: mac80211: move scan work to wiphy work wifi: mac80211: move radar detect work to wiphy work wifi: cfg80211: add flush functions for wiphy work genirq/matrix: Exclude managed interrupts in irq_matrix_allocated() string: Adjust strtomem() logic to allow for smaller sources pstore/platform: Add check for kstrdup drivers/clocksource/timer-ti-dm: Don't call clk_get_rate() in stop function x86/boot: Fix incorrect startup_gdt_descr.size x86/sev-es: Allow copy_from_kernel_nofault() in earlier boot ACPI/NUMA: Apply SRAT proximity domain to entire CFMWS window x86/numa: Introduce numa_fill_memblks() futex: Don't include process MM in futex key on no-MMU x86/srso: Fix SBPB enablement for (possible) future fixed HW writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs vfs: fix readahead(2) on block devices sched: Fix stop_one_cpu_nowait() vs hotplug objtool: Propagate early errors sched/uclamp: Ignore (util == 0) optimization in feec() when p_util_max = 0 sched/uclamp: Set max_spare_cap_cpu even if max_spare_cap is 0 iov_iter, x86: Be consistent about the __user tag on copy_mc_to_user() sched/fair: Fix cfs_rq_is_decayed() on !SMP hwmon: (nct6775) Fix incorrect variable reuse in fan_div calculation Linux 6.1.62 ASoC: SOF: sof-pci-dev: Fix community key quirk detection ALSA: hda: intel-dsp-config: Fix JSL Chromebook quirk detection misc: pci_endpoint_test: Add deviceID for J721S2 PCIe EP device support tty: 8250: Add Brainboxes Oxford Semiconductor-based quirks tty: 8250: Add support for Intashield IX cards tty: 8250: Add support for additional Brainboxes PX cards tty: 8250: Fix up PX-803/PX-857 tty: 8250: Fix port count of PX-257 tty: 8250: Add support for Intashield IS-100 tty: 8250: Add support for Brainboxes UP cards tty: 8250: Add support for additional Brainboxes UC cards tty: 8250: Remove UC-257 and UC-431 tty: n_gsm: fix race condition in status line change on dead connections usb: raw-gadget: properly handle interrupted requests usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() usb: storage: set 1.50 as the lower bcdDevice for older "Super Top" compatibility PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device ALSA: usb-audio: add quirk flag to enable native DSD for McIntosh devices mmap: fix error paths with dup_anon_vma() mm/mempolicy: fix set_mempolicy_home_node() previous VMA pointer x86: KVM: SVM: always update the x2avic msr interception perf evlist: Avoid frequency mode for the dummy event power: supply: core: Use blocking_notifier_call_chain to avoid RCU complaint ceph_wait_on_conflict_unlink(): grab reference before dropping ->d_lock io_uring: kiocb_done() should *not* trust ->ki_pos if ->{read,write}_iter() failed powerpc/mm: Fix boot crash with FLATMEM r8152: Check for unplug in r8153b_ups_en() / r8153c_ups_en() r8152: Check for unplug in rtl_phy_patch_request() net: chelsio: cxgb4: add an error code check in t4_load_phy_fw drm/amdgpu: Reserve fences for VM update platform/mellanox: mlxbf-tmfifo: Fix a warning message netfilter: nf_tables: audit log object reset once per table LoongArch: Replace kmap_atomic() with kmap_local_page() in copy_user_highpage() LoongArch: Export symbol invalid_pud_table for modules building gpu/drm: Eliminate DRM_SCHED_PRIORITY_UNSET drm/amdgpu: Unset context priority is now invalid scsi: mpt3sas: Fix in error path fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit() fbdev: omapfb: fix some error codes drm/ttm: Reorder sys manager cleanup step ASoC: codecs: tas2780: Fix log of failed reset via I2C. ASoC: rt5650: fix the wrong result of key button efi: fix memory leak in krealloc failure handling netfilter: nfnetlink_log: silence bogus compiler warning spi: npcm-fiu: Fix UMA reads when dummy.nbytes == 0 fs/ntfs3: Avoid possible memory leak fs/ntfs3: Fix directory element type detection fs/ntfs3: Fix NULL pointer dereference on error in attr_allocate_frame() fs/ntfs3: Fix possible NULL-ptr-deref in ni_readpage_cmpr() fs/ntfs3: Use kvmalloc instead of kmalloc(... __GFP_NOWARN) fs/ntfs3: Write immediately updated ntfs state fs/ntfs3: Add ckeck in ni_update_parent() fbdev: atyfb: only use ioremap_uc() on i386 and ia64 Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport powerpc/85xx: Fix math emulation exception dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe irqchip/stm32-exti: add missing DT IRQ flag translation irqchip/riscv-intc: Mark all INTC nodes as initialized net: sched: cls_u32: Fix allocation size in u32_init() ASoC: tlv320adc3xxx: BUG: Correct micbias setting coresight: tmc-etr: Disable warnings for allocation failures ASoC: simple-card: fixup asoc_simple_probe() error handling Revert "kasan: print the original fault addr when access invalid shadow" ANDROID: GKI: add system_unbound_wq to some symbol lists. Revert "audit,io_uring: io_uring openat triggers audit reference count underflow" Revert "tcp: allow again tcp_disconnect() when threads are waiting" Revert "tcp_bpf: properly release resources on error paths" Revert "ipv4/fib: send notify when delete source address routes" Revert "Bluetooth: hci_core: Fix build warnings" Revert "xfrm: fix a data-race in xfrm_gen_index()" Revert "perf: Disallow mis-matched inherited group reads" ANDROID: fix up 6.1.60 merge of hid.h into android14-6.1-lts ANDROID: GKI: arm64: drop CONFIG_DEBUG_PREEMPT forced disable Revert "net: macsec: indicate next pn update when offloading" Revert "net: phy: mscc: macsec: reject PN update requests" Revert "net/mlx5e: macsec: use update_pn flag instead of PN comparation" Revert "tcp: enforce receive buffer memory limits by allowing the tcp window to shrink" Linux 6.1.61 objtool/x86: add missing embedded_insn check ext4: avoid overlapping preallocations due to overflow ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow ext4: add two helper functions extent_logical_end() and pa_logical_end() platform/x86: Add s2idle quirk for more Lenovo laptops clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name sparc32: fix a braino in fault handling in csum_and_copy_..._user() perf/core: Fix potential NULL deref x86/cpu: Add model number for Intel Arrow Lake mobile processor x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility nvmem: imx: correct nregs for i.MX6UL nvmem: imx: correct nregs for i.MX6SLL nvmem: imx: correct nregs for i.MX6ULL misc: fastrpc: Unmap only if buffer is unmapped from DSP misc: fastrpc: Clean buffers on remote invocation failures misc: fastrpc: Free DMA handles for RPC calls with no arguments misc: fastrpc: Reset metadata buffer to avoid incorrect free tracing/kprobes: Fix the description of variable length arguments i2c: aspeed: Fix i2c bus hang in slave read i2c: stm32f7: Fix PEC handling in case of SMBUS transfers i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() iio: adc: xilinx-xadc: Correct temperature offset/scale for UltraScale iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature thresholds iio: exynos-adc: request second interupt only when touchscreen mode is used iio: afe: rescale: Accept only offset channels io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid kasan: print the original fault addr when access invalid shadow blk-throttle: check for overflow in calculate_bytes_allowed scsi: sd: Introduce manage_shutdown device flag iavf: in iavf_down, disable queues when removing the driver drm/logicvc: Kconfig: select REGMAP and REGMAP_MMIO i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR gtp: fix fragmentation needed check with gso gtp: uapi: fix GTPA_MAX tcp: fix wrong RTO timeout when received SACK reneging r8152: Release firmware if we have an error in probe r8152: Cancel hw_phy_work if we have an error in probe r8152: Run the unload routine if we have errors during probe r8152: Increase USB control msg timeout to 5000ms as per spec net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show() net: ethernet: adi: adin1110: Fix uninitialized variable igc: Fix ambiguity in the ethtool advertising neighbour: fix various data-races igb: Fix potential memory leak in igb_add_ethtool_nfc_entry treewide: Spelling fix in comment i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value iavf: initialize waitqueues before starting watchdog_task r8169: fix the KCSAN reported data race in rtl_rx while reading desc->opts1 r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1 r8169: fix the KCSAN reported data-race in rtl_tx() while reading tp->cur_tx clk: ti: Fix missing omap5 mcbsp functional clock and aliases clk: ti: Fix missing omap4 mcbsp functional clock and aliases firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels() ARM: OMAP: timer32K: fix all kernel-doc warnings drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() drm/amd: Disable ASPM for VI w/ all Intel systems drm/i915/pmu: Check if pmu is closed before stopping event nfsd: lock_rename() needs both directories to live on the same fs maple_tree: add GFP_KERNEL to allocations in mas_expected_entries() hugetlbfs: extend hugetlb_vma_lock to private VMAs mm/migrate: fix do_pages_move for compat pointers mm/page_alloc: correct start page when guard page debug is enabled hugetlbfs: clear resv_map pointer if mmap fails mm: fix vm_brk_flags() to not bail out while holding lock arm64: dts: rockchip: Fix i2s0 pin conflict on ROCK Pi 4 boards arm64: dts: rockchip: Add i2s0-2ch-bus-bclk-off pins to RK3399 vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE vsock/virtio: initialize the_virtio_vsock before using VQs virtio_pci: fix the common cfg map size virtio-crypto: handle config changed by work queue virtio-mmio: fix memory leak of vm_dev virtio_balloon: Fix endless deflation and inflation on arm64 mcb-lpc: Reallocate memory region to avoid memory overlapping mcb: Return actual parsed size when reading chameleon table pinctrl: qcom: lpass-lpi: fix concurrent register updates ASoC: codecs: wcd938x: fix runtime PM imbalance on remove ASoC: codecs: wcd938x: fix regulator leaks on probe errors ASoC: codecs: wcd938x: Simplify with dev_err_probe ASoC: codecs: wcd938x: Convert to platform remove callback returning void mmc: core: Fix error propagation for some ioctl commands mmc: block: ioctl: do write error check for spi mmc: core: Align to common busy polling behaviour for mmc ioctls KVM: x86/pmu: Truncate counter value to allowed width on write Linux 6.1.60 selftests: mptcp: join: no RST when rm subflow/addr selftests: mptcp: join: correctly check for no RST mptcp: avoid sending RST when closing the initial subflow Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name Bluetooth: hci_sock: fix slab oob read in create_monitor_event net: move altnames together with the netdevice phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins phy: mapphone-mdm6600: Fix runtime PM for remove phy: mapphone-mdm6600: Fix runtime disable on probe gpio: vf610: mask the gpio irq in system suspend and support wakeup gpio: vf610: make irq_chip immutable tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols kallsyms: Add helper kallsyms_on_each_match_symbol() kallsyms: Reduce the memory occupied by kallsyms_seqs_of_names[] serial: 8250: omap: convert to modern PM ops serial: 8250: omap: Move uart_write() inside PM section drm/bridge: ti-sn65dsi86: Associate DSI device lifetime with auxiliary device ASoC: pxa: fix a memory leak in probe() gpio: vf610: set value before the direction to avoid a glitch platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events platform/x86: asus-wmi: Only map brightness codes when using asus-wmi backlight control platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e platform/x86: intel-uncore-freq: Conditionally create attribute for read frequency platform/surface: platform_profile: Propagate error if profile registration fails s390/cio: fix a memleak in css_alloc_subchannel selftests/ftrace: Add new test case which checks non unique symbol s390/pci: fix iommu bitmap allocation perf: Disallow mis-matched inherited group reads USB: serial: option: add Fibocom to DELL custom modem FM101R-GL USB: serial: option: add entry for Sierra EM9191 with new firmware USB: serial: option: add Telit LE910C4-WWX 0x1035 composition HID: input: map battery system charging KVM: x86/mmu: Stop zapping invalidated TDP MMU roots asynchronously nvme-rdma: do not try to stop unallocated queues nvmet-auth: complete a request only after freeing the dhchap pointers nvme-pci: add BOGUS_NID for Intel 0a54 device nvme: sanitize metadata bounce buffer for reads nfs42: client needs to strip file mode's suid/sgid bit after ALLOCATE op ACPI: irq: Fix incorrect return value in acpi_register_gsi() NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server pNFS/flexfiles: Check the layout validity in ff_layout_mirror_prepare_stats pNFS: Fix a hang in nfs4_evict_inode() Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" mmc: core: Capture correct oemid-bits for eMMC cards mmc: core: sdio: hold retuning if sdio in 1-bit mode mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw mmc: sdhci-pci-gli: fix LPM negotiation so x86/S0ix SoCs can suspend dt-bindings: mmc: sdhci-msm: correct minimum number of clocks mtd: physmap-core: Restore map_rom fallback mtd: spinand: micron: correct bitmask for ecc status mtd: rawnand: arasan: Ensure program page operations are successful mtd: rawnand: marvell: Ensure program page operations are successful mtd: rawnand: pl353: Ensure program page operations are successful mtd: rawnand: qcom: Unmap the right resource upon probe failure net/smc: fix smc clc failed issue when netdevice not in init_net tcp_bpf: properly release resources on error paths selftests: openvswitch: Add version check for pyroute2 Bluetooth: hci_event: Fix using memcmp when comparing keys ice: Remove redundant pci_enable_pcie_error_reporting() tcp: allow again tcp_disconnect() when threads are waiting net/tls: split tls_rx_reader_lock net/mlx5e: Don't offload internal port if filter device is out device net/mlx5: Handle fw tracer change ownership event based on MTRC net/mlx5: E-switch, register event handler before arming the event xfrm6: fix inet6_dev refcount underflow problem net: xfrm: skip policies marked as dead while reinserting policies fprobe: Fix to ensure the number of active retprobes is not zero fprobe: Add nr_maxactive to specify rethook_node pool size fprobe: Pass entry_data to handlers cpufreq: schedutil: Update next_freq when cpufreq_limits change platform/x86: touchscreen_dmi: Add info for the Positivo C4128B HID: nintendo: reinitialize USB Pro Controller after resuming from suspend HID: multitouch: Add required quirk for Synaptics 0xcd7e device drm/amd/pm: add unique_id for gc 11.0.3 btrfs: error out when reallocating block for defrag using a stale transaction btrfs: error when COWing block from a root that is being deleted btrfs: error out when COWing block using a stale transaction btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c drm: panel-orientation-quirks: Add quirk for One Mix 2S ipv4/fib: send notify when delete source address routes sky2: Make sure there is at least one frag_addr available regulator/core: Revert "fix kobject release warning and memory leak in regulator_register()" wifi: cfg80211: avoid leaking stack data into trace wifi: mac80211: allow transmitting EAPOL frames with tainted key wifi: mac80211: work around Cisco AP 9115 VHT MPDU length wifi: cfg80211: Fix 6GHz scan configuration Bluetooth: hci_core: Fix build warnings Bluetooth: Avoid redundant authentication Bluetooth: btusb: add shutdown function for QCA6174 HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event HID: logitech-hidpp: Add Bluetooth ID for the Logitech M720 Triathlon mouse wifi: iwlwifi: Ensure ack flag is properly cleared. wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len tracing: relax trace_event_eval_update() execution with cond_resched() ata: libata-eh: Fix compilation warning in ata_eh_link_report() ata: libata-core: Fix compilation warning in ata_dev_config_ncq() gpio: timberdale: Fix potential deadlock on &tgpio->lock overlayfs: set ctime when setting mtime and atime i2c: mux: Avoid potential false error message in i2c_mux_add_adapter btrfs: initialize start_slot in btrfs_log_prealloc_extents btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 btrfs: prevent transaction block reserve underflow when starting transaction fs-writeback: do not requeue a clean inode having skipped pages ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone pwr-mlxbf: extend Kconfig to include gpio-mlxbf3 dependency iio: adc: ad7192: Correct reference voltage iio: adc: ad7192: Simplify using devm_regulator_get_enable() iio: cros_ec: fix an use-after-free in cros_ec_sensors_push_data() iio: core: introduce iio_device_{claim|release}_buffer_mode() APIs serial: 8250_omap: Fix errors with no_console_suspend serial: 8250: omap: Fix imprecise external abort for omap_8250_pm() serial: Reduce spinlocked portion of uart_rs485_config() serial: Rename uart_change_speed() to uart_change_line_settings() serial: Move uart_change_speed() earlier usb: misc: onboard_hub: add support for Microchip USB2412 USB 2.0 hub usb: misc: onboard_usb_hub: add Genesys Logic GL3523 hub support usb: misc: onboard_usb_hub: add Genesys Logic GL852G hub support usb: misc: onboard_usb_hub: add Genesys Logic GL850G hub support selftests/mm: fix awk usage in charge_reserved_hugetlb.sh and hugetlb_reparenting_test.sh that may cause error net: check for altname conflicts when changing netdev's netns net: fix ifname in netlink ntf during netns move net: avoid UAF on deleted altname net: pktgen: Fix interface flags printing net: phy: bcm7xxx: Add missing 16nm EPHY statistics netfilter: nf_tables: revert do not remove elements if set backend implements .abort netfilter: nf_tables: do not remove elements if set backend implements .abort netlink: Correct offload_xstats size netfilter: nft_set_rbtree: .deactivate fails if element has expired selftests: netfilter: Run nft_audit.sh in its own netns selftests: openvswitch: Catch cases where the tests are killed neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve bonding: Return pointer to data after pull on skb net: dsa: bcm_sf2: Fix possible memory leak in bcm_sf2_mdio_register() i40e: prevent crash on probe if hw registers have invalid values octeon_ep: update BQL sent bytes before ringing doorbell net: usb: smsc95xx: Fix an error code in smsc95xx_reset() ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr tun: prevent negative ifindex tcp: Fix listen() warning with v4-mapped-v6 address. tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb tcp: fix excessive TLP and RACK timeouts from HZ rounding net: rfkill: gpio: prevent value glitch during probe net: ipv6: fix return value check in esp_remove_trailer net: ipv4: fix return value check in esp_remove_trailer wifi: cfg80211: use system_unbound_wq for wiphy work xfrm: interface: use DEV_STATS_INC() xfrm: fix a data-race in xfrm_gen_index() xfrm: fix a data-race in xfrm_lookup_with_ifid() qed: fix LL2 RX buffer allocation ASoC: codecs: wcd938x: fix resource leaks on bind errors ASoC: codecs: wcd938x: fix unbind tear down order ASoC: codecs: wcd938x: drop bogus bind error handling ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV ALSA: hda/realtek - Fixed ASUS platform headset Mic issue drm/mediatek: Correctly free sg_table in gem prime vmap drm/i915: Retry gtt fault when out of fence registers nvmet-tcp: Fix a possible UAF in queue intialization setup netfilter: nft_payload: fix wrong mac header matching fs/ntfs3: fix deadlock in mark_as_free_ex fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea() fs/ntfs3: Fix possible null-pointer dereference in hdr_find_e() mptcp: more conservative check for zero probes tcp: check mptcp-level constraints for backlog coalescing audit,io_uring: io_uring openat triggers audit reference count underflow x86: KVM: SVM: refresh AVIC inhibition in svm_leave_nested() x86: KVM: SVM: add support for Invalid IPI Vector interception KVM: x86: Constrain guest-supported xfeatures only at KVM_GET_XSAVE{2} x86/fpu: Allow caller to constrain xfeatures when copying to uabi buffer x86/sev: Check for user-space IOIO pointing to kernel space x86/sev: Check IOBM for IOIO exceptions from user-space x86/sev: Disable MMIO emulation from user mode KVM: x86: Mask LVTPC when handling a PMI regmap: fix NULL deref on lookup nfc: nci: fix possible NULL pointer dereference in send_acknowledge() btrfs: fix stripe length calculation for non-zoned data chunk allocation net/smc: return the right falback reason when prefix checks fail ice: reset first in crash dump kernels ice: fix over-shifted variable Bluetooth: avoid memcmp() out of bounds warning Bluetooth: hci_event: Fix coding style Bluetooth: vhci: Fix race when opening vhci device Bluetooth: Fix a refcnt underflow problem for hci_conn Bluetooth: Reject connection with the device which has same BD_ADDR Bluetooth: hci_event: Ignore NULL link key igc: Fix race condition in PTP tx code igc: Add condition for qbv_config_change_errors counter igc: Add qbv_config_change_errors counter igc: Remove reset adapter task for i226 during disable tsn config igc: enable Qbv configuration for 2nd GCL igc: remove I226 Qbv BaseTime restriction lib/Kconfig.debug: do not enable DEBUG_PREEMPT by default Linux 6.1.59 ALSA: hda/realtek - Fixed two speaker platform powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE dmaengine: mediatek: Fix deadlock caused by synchronize_irq() dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq x86/alternatives: Disable KASAN in apply_alternatives() usb: cdnsp: Fixes issue with dequeuing not queued requests usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call usb: gadget: udc-xilinx: replace memcpy with memcpy_toio usb: typec: ucsi: Clear EVENT_PENDING bit if ucsi_send_command fails usb: typec: altmodes/displayport: Signal hpd low when exiting mode counter: microchip-tcb-capture: Fix the use of internal GCLK logic counter: chrdev: fix getting array extensions scsi: ufs: core: Correct clear TM error log pinctrl: avoid unsafe code pattern in find_pinctrl() dma-buf: add dma_fence_timestamp helper cgroup: Remove duplicates in cgroup v1 tasks file usb: typec: ucsi: Use GET_CAPABILITY attributes data to set power supply scope nfp: flower: avoid rmmod nfp crash issues mctp: perform route lookups under a RCU read-side lock tee: amdtee: fix use-after-free vulnerability in amdtee_close_session Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table Input: xpad - add PXN V900 support Input: psmouse - fix fast_reconnect function for PS/2 mode Input: powermate - fix use-after-free in powermate_config_complete ceph: fix type promotion bug on 32bit systems ceph: fix incorrect revoked caps assert in ceph_fill_file_size() libceph: use kernel_connect() powerpc/47x: Fix 47x syscall return crash thunderbolt: Restart XDomain discovery handshake after failure thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge mcb: remove is_added flag from mcb_device struct x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs perf/x86/lbr: Filter vsyscall addresses ksmbd: not allow to open file if delelete on close bit is set ACPI: EC: Add quirk for the HP Pavilion Gaming 15-dk1xxx ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA drm/amd/display: Don't set dpms_off for seamless boot drm/amdgpu: add missing NULL check drm/atomic-helper: relax unregistered connector check arm64: dts: mediatek: mt8195-demo: update and reorder reserved memory regions arm64: dts: mediatek: mt8195-demo: fix the memory size to 8GB iio: addac: Kconfig: update ad74413r selections iio: pressure: ms5611: ms5611_prom_is_valid false negative bug iio: pressure: dps310: Adjust Timeout Settings iio: admv1013: add mixer_vgate corner cases iio: dac: ad3552r: Correct device IDs iio: adc: imx8qxp: Fix address for command buffer registers iio: imu: bno055: Fix missing Kconfig dependencies iio: pressure: bmp280: Fix NULL pointer exception usb: musb: Modify the "HWVers" register address usb: musb: Get the musb_qh poniter after musb_giveback usb: hub: Guard against accesses to uninitialized BOS descriptors usb: cdns3: Modify the return value of cdns_set_active () to void when CONFIG_PM_SLEEP is disabled usb: dwc3: Soft reset phy on probe for host net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer dmaengine: stm32-mdma: set in_flight_bytes in case CRQA flag is set dmaengine: stm32-mdma: use Link Address Register to compute residue dmaengine: stm32-dma: fix residue in case of MDMA chaining dmaengine: stm32-dma: fix stm32_dma_prep_slave_sg in case of MDMA chaining dmaengine: stm32-mdma: abort resume if no ongoing transfer tcp: enforce receive buffer memory limits by allowing the tcp window to shrink workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() nfc: nci: assert requested protocol is valid pinctrl: renesas: rzn1: Enable missing PINMUX net/smc: Fix pos miscalculation in statistics net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp ixgbe: fix crash with empty VF macvlan list net/mlx5e: macsec: use update_pn flag instead of PN comparation net: phy: mscc: macsec: reject PN update requests net: macsec: indicate next pn update when offloading net: refine debug info in skb_checksum_help() bpf: Fix verifier log for async callback return values drm/vmwgfx: fix typo of sizeof argument riscv, bpf: Sign-extend return values riscv, bpf: Factor out emit_call for kernel and bpf context xen-netback: use default TX queue size for vifs mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type ieee802154: ca8210: Fix a potential UAF in ca8210_probe ravb: Fix use-after-free issue in ravb_tx_timeout_work() ravb: Fix up dma_free_coherent() call in ravb_remove() arm64: dts: mediatek: mt8195: Set DSU PMU status to fail can: sun4i_can: Only show Kconfig if ARCH_SUNXI is set can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior net: dsa: qca8k: fix potential MDIO bus conflict when accessing internal PHYs via management frames phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers phy: lynx-28g: lock PHY while performing CDR lock workaround phy: lynx-28g: cancel the CDR check work item on the remove path drm/msm/dp: Add newlines to debug printks drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow drm/msm/dsi: fix irq_of_parse_and_map() error checking drm/msm/dsi: skip the wait for video mode done if not applicable drm/msm/dp: do not reinitialize phy unless retry during link training pinctrl: nuvoton: wpcm450: fix out of bounds write ALSA: hda/realtek - ALC287 merge RTK codec with CS CS35L41 AMP ALSA: hda/realtek - ALC287 I2S speaker platform support ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED ASoC: fsl_sai: Don't disable bitclock for i.MX8MP ASoC: fsl_sai: MCLK bind with TX/RX enable bit ASoC: Use of_property_read_bool() for boolean properties ASoC: Intel: soc-acpi: Add entry for sof_es8336 in MTL match table. ASoC: Intel: sof_sdw: add support for SKU 0B14 ASoC: Intel: soc-acpi: Add entry for HDMI_In capture support in MTL match table ASoC: simple-card-utils: fixup simple_util_startup() error handling ASoC: SOF: amd: fix for firmware reload failure after playback ALSA: hda/realtek: Change model for Intel RVP board ALSA: usb-audio: Fix microphone sound on Nexigo webcam. ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset KEYS: trusted: Remove redundant static calls usage irqchip: renesas-rzg2l: Fix logic to clear TINT interrupt source dt-bindings: interrupt-controller: renesas,rzg2l-irqc: Update description for '#interrupt-cells' property arm64: dts: qcom: sm8150: extend the size of the PDC resource net: prevent address rewrite in kernel_bind() ata: libata-scsi: Disable scsi device manage_system_start_stop ASoC: amd: yc: Fix non-functional mic on Lenovo 82YM quota: Fix slow quotaoff HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect scsi: Do not rescan devices with a suspended queue platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section mismatch warning platform/x86: think-lmi: Fix reference leak perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7 RDMA/cxgb4: Check skb value for failure to allocate drm/i915: Don't set PIPE_CONTROL_FLUSH_L3 for aux inval mptcp: fix delegated action races net: mana: Fix TX CQE error handling Linux 6.1.58 lib/test_meminit: fix off-by-one error in test_pages() Revert "NFS: Fix error handling for O_DIRECT write scheduling" Revert "NFS: Fix O_DIRECT locking issues" Revert "NFS: More O_DIRECT accounting fixes for error paths" Revert "NFS: Use the correct commit info in nfs_join_page_group()" Revert "NFS: More fixes for nfs_direct_write_reschedule_io()" Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/interrupt-controller/qcom,mpm.yaml Documentation/devicetree/bindings/interrupt-controller/renesas,rzg2l-irqc.yaml Documentation/devicetree/bindings/mfd/mt6397.txt Documentation/devicetree/bindings/mmc/sdhci-msm.yaml drivers/clk/qcom/gcc-sm8150.c drivers/hwtracing/coresight/coresight-tmc-core.c drivers/hwtracing/coresight/coresight-tmc-etr.c drivers/interconnect/qcom/sm8150.c drivers/interconnect/qcom/sm8150.h drivers/phy/qualcomm/Makefile Change-Id: I9b0afef38a5cd42781504ccd77dfb8a747a5dea4 Upstream-Build: ks_qcom-android14-6.1-keystone-qcom-release@11750438 UKQ2.240423.001 Signed-off-by: Srinivasarao Pathipati <quic_c_spathi@quicinc.com>	2024-05-09 10:00:15 +05:30
Greg Kroah-Hartman	3ca4271578	Reapply "Merge tag 'android14-6.1.75_r00' into android14-6.1" ... This reverts commit 6bad1052c2, it is the LTS merge that had to previously get reverted due to being merged too early. Cc: Todd Kjos <tkjos@google.com> Change-Id: I31b7d660bd833cf022ac4870f6d01e723fda5182 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-04-02 19:49:12 +00:00
Todd Kjos	6bad1052c2	Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" ... This reverts commit 1dbafe61e3. Reason for revert: Too early. Needs to wait until 2024-03-27 Change-Id: I769b944bd089aa2278659ec87f7ba4ac4e74ee4a Signed-off-by: Todd Kjos <tkjos@google.com>	2024-03-07 21:18:27 +00:00
Manish Pandey	0ce40c0945	nvme: Add sdexpress support ... Add a new platform driver support to detect and power control for the new sdexpress cards. [quic_mapa: modify below from change 67c2aa7 - replace mdelay() with usleep_range() in msm_sdexpress.c:749. - Prefer "GPL" over "GPL v2"]. Change-Id: If042c7e9cc12d15c16856e2cda8abdec52c920df Co-developed-by: Nitin Rawat <quic_nitirawa@quicinc.com> Signed-off-by: Nitin Rawat <quic_nitirawa@quicinc.com> Signed-off-by: Pradeep P V K <quic_pragalla@quicinc.com> Signed-off-by: Manish Pandey <quic_mapa@quicinc.com>	2024-02-28 09:29:28 +05:30
Greg Kroah-Hartman	c16bb76a0c	This is the 6.1.75 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmWy7o0ACgkQONu9yGCS aT76JA/9Gh3VNSLG35LaLyq3xGd827N6DPsMzeFHi+MGSyPVg0auE77QkHD/gZl9 KynmBmz2+9DSoFxymWAS9oEPM8d/vw87AMuSTTct3GKkjEeUcj9lbeOEzgZydXX8 cJSXvcCeKE3FESU/YbQKxo0N+r7tUDmnCR0edss5/FpYni3jPdg7jdESzGhiCHXj r5rjrTE6h7Z/d+2kaKqlheL4o4OkV0YwnFnU2gC3MOOvLmgvXdOVQQsyaZ+WgSAN 0JS0Q6Xk1xyYWx8iFaLGWIs1pUsQPKxIiRG3N/1KmXITopf2Pu68Yy7ST+YryDkO nLcNrr3gsQxrM6MYnEhLzlxs3H1KuAVxJ4Y/dNqJnDxn0OJjcY3repwempz5Sxtk 0OLDOsCICAiMHeF8rYIGhm09WdowLz0EH+sqadIGqWKzW/BcXqD+r9mpF1lwk1ZL FJLgLmtOaG4amI46lEUHQ6ujN7Oad3gLYzudq2zKLeqonSIjm1TuDoMRvHWFsspO 5i9I0x7Vlo3PqCl7kkKVL9PvVHx6BXJGFShABJqa9ao/oHxkOWuIt26pxUoLUN3P 7Wa5WnfdlDd9nR3VGHcVe2ncuRmEfuriYpXvItJ7/KJKyIPkGoPehAh+vbZMoEy0 DwhtD9PPsTlnUufbcZdHavYA1E4y/uXDMOIGB+ERpsTdXh9DwEo= =2XHn -----END PGP SIGNATURE----- Merge 6.1.75 into android14-6.1-lts Changes in 6.1.75 x86/lib: Fix overflow when counting digits x86/mce/inject: Clear test status value EDAC/thunderx: Fix possible out-of-bounds string access powerpc: remove checks for binutils older than 2.25 powerpc: add crtsavres.o to always-y instead of extra-y powerpc/44x: select I2C for CURRITUCK powerpc/pseries/memhp: Fix access beyond end of drmem array selftests/powerpc: Fix error handling in FPU/VMX preemption tests powerpc/powernv: Add a null pointer check to scom_debug_init_one() powerpc/powernv: Add a null pointer check in opal_event_init() powerpc/powernv: Add a null pointer check in opal_powercap_init() powerpc/imc-pmu: Add a null pointer check in update_events_in_group() spi: spi-zynqmp-gqspi: fix driver kconfig dependencies mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response ACPI: video: check for error while searching for backlight device parent ACPI: LPIT: Avoid u32 multiplication overflow KEYS: encrypted: Add check for strsep platform/x86/intel/vsec: Enhance and Export intel_vsec_add_aux() platform/x86/intel/vsec: Support private data platform/x86/intel/vsec: Use mutex for ida_alloc() and ida_free() platform/x86/intel/vsec: Fix xa_alloc memory leak of: Add of_property_present() helper cpufreq: Use of_property_present() for testing DT property presence cpufreq: scmi: process the result of devm_of_clk_add_hw_provider() calipso: fix memory leak in netlbl_calipso_add_pass() efivarfs: force RO when remounting if SetVariable is not supported efivarfs: Free s_fs_info on unmount spi: sh-msiof: Enforce fixed DTDL for R-Car H3 ACPI: LPSS: Fix the fractional clock divider flags ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error kunit: debugfs: Fix unchecked dereference in debugfs_print_results() mtd: Fix gluebi NULL pointer dereference caused by ftl notifier selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket crypto: virtio - Handle dataq logic with tasklet crypto: sa2ul - Return crypto_aead_setkey to transfer the error crypto: ccp - fix memleak in ccp_init_dm_workarea crypto: af_alg - Disallow multiple in-flight AIO requests crypto: safexcel - Add error handling for dma_map_sg() calls crypto: sahara - remove FLAGS_NEW_KEY logic crypto: sahara - fix cbc selftest failure crypto: sahara - fix ahash selftest failure crypto: sahara - fix processing requests with cryptlen < sg->length crypto: sahara - fix error handling in sahara_hw_descriptor_create() crypto: hisilicon/qm - save capability registers in qm init process crypto: hisilicon/zip - add zip comp high perf mode configuration crypto: hisilicon/qm - add a function to set qm algs crypto: hisilicon/hpre - save capability registers in probe process crypto: hisilicon/sec2 - save capability registers in probe process crypto: hisilicon/zip - save capability registers in probe process pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() erofs: fix memory leak on short-lived bounced pages fs: indicate request originates from old mount API gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump crypto: virtio - Wait for tasklet to complete on device remove crypto: sahara - avoid skcipher fallback code duplication crypto: sahara - handle zero-length aes requests crypto: sahara - fix ahash reqsize crypto: sahara - fix wait_for_completion_timeout() error handling crypto: sahara - improve error handling in sahara_sha_process() crypto: sahara - fix processing hash requests with req->nbytes < sg->length crypto: sahara - do not resize req->src when doing hash operations crypto: scomp - fix req->dst buffer overflow csky: fix arch_jump_label_transform_static override blocklayoutdriver: Fix reference leak of pnfs_device_node NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT SUNRPC: fix _xprt_switch_find_current_entry logic pNFS: Fix the pnfs block driver's calculation of layoutget size wifi: plfxlc: check for allocation failure in plfxlc_usb_wreq_async() wifi: rtw88: fix RX filter in FIF_ALLMULTI flag bpf, lpm: Fix check prefixlen before walking trie bpf: Add crosstask check to __bpf_get_stack wifi: ath11k: Defer on rproc_get failure wifi: libertas: stop selecting wext ARM: dts: qcom: apq8064: correct XOADC register address net/ncsi: Fix netlink major/minor version numbers firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create() firmware: meson_sm: populate platform devices from sm device tree data wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior arm64: dts: ti: k3-am62a-main: Fix GPIO pin count in DT nodes arm64: dts: ti: k3-am65-main: Fix DSS irq trigger type selftests/bpf: Fix erroneous bitmask operation md: synchronize flush io with array reconfiguration bpf: enforce precision of R0 on callback return ARM: dts: qcom: sdx65: correct SPMI node name arm64: dts: qcom: sc7180: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sc7280: Mark some nodes as 'reserved' arm64: dts: qcom: sc7280: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sdm845: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sm8150: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sm8250: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sc8280xp: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sm6350: Make watchdog bark interrupt edge triggered rcu-tasks: Provide rcu_trace_implies_rcu_gp() bpf: add percpu stats for bpf_map elements insertions/deletions bpf: Add map and need_defer parameters to .map_fd_put_ptr() bpf: Defer the free of inner map when necessary selftests/net: specify the interface when do arping bpf: fix check for attempt to corrupt spilled pointer scsi: fnic: Return error if vmalloc() failed arm64: dts: qcom: qrb5165-rb5: correct LED panic indicator arm64: dts: qcom: sdm845-db845c: correct LED panic indicator arm64: dts: qcom: sm8350: Fix DMA0 address arm64: dts: qcom: sc7280: Fix up GPU SIDs arm64: dts: qcom: sc7280: Mark Adreno SMMU as DMA coherent arm64: dts: qcom: sc7280: fix usb_2 wakeup interrupt types wifi: mt76: mt7921s: fix workqueue problem causes STA association fail bpf: Fix verification of indirect var-off stack access arm64: dts: hisilicon: hikey970-pmic: fix regulator cells properties dt-bindings: media: mediatek: mdp3: correct RDMA and WROT node with generic names arm64: dts: mediatek: mt8183: correct MDP3 DMA-related nodes wifi: mt76: mt7921: fix country count limitation for CLC selftests/bpf: Relax time_tai test for equal timestamps in tai_forward block: Set memalloc_noio to false on device_add_disk() error path arm64: dts: renesas: white-hawk-cpu: Fix missing serial console pin control arm64: dts: imx8mm: Reduce GPU to nominal speed scsi: hisi_sas: Replace with standard error code return value scsi: hisi_sas: Rollback some operations if FLR failed scsi: hisi_sas: Correct the number of global debugfs registers ARM: dts: stm32: don't mix SCMI and non-SCMI board compatibles selftests/net: fix grep checking for fib_nexthop_multiprefix ipmr: support IP_PKTINFO on cache report IGMP msg virtio/vsock: fix logic which reduces credit update messages dma-mapping: clear dev->dma_mem to NULL after freeing it soc: qcom: llcc: Fix dis_cap_alloc and retain_on_pc configuration arm64: dts: qcom: sm8150-hdk: fix SS USB regulators block: add check of 'minors' and 'first_minor' in device_add_disk() arm64: dts: qcom: sc7280: Mark SDHCI hosts as cache-coherent arm64: dts: qcom: ipq6018: fix clock rates for GCC_USB0_MOCK_UTMI_CLK arm64: dts: qcom: ipq6018: improve pcie phy pcs reg table arm64: dts: qcom: ipq6018: Use lowercase hex arm64: dts: qcom: ipq6018: Pad addresses to 8 hex digits arm64: dts: qcom: ipq6018: Fix up indentation wifi: rtlwifi: add calculate_bit_shift() wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift() wifi: rtlwifi: rtl8192c: using calculate_bit_shift() wifi: rtlwifi: rtl8192cu: using calculate_bit_shift() wifi: rtlwifi: rtl8192ce: using calculate_bit_shift() wifi: rtlwifi: rtl8192de: using calculate_bit_shift() wifi: rtlwifi: rtl8192ee: using calculate_bit_shift() wifi: rtlwifi: rtl8192se: using calculate_bit_shift() wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request wifi: iwlwifi: mvm: send TX path flush in rfkill netfilter: nf_tables: mark newset as dead on transaction abort Bluetooth: Fix bogus check for re-auth no supported with non-ssp Bluetooth: btmtkuart: fix recv_buf() return value block: make BLK_DEF_MAX_SECTORS unsigned null_blk: don't cap max_hw_sectors to BLK_DEF_MAX_SECTORS bpf: sockmap, fix proto update hook to avoid dup calls sctp: support MSG_ERRQUEUE flag in recvmsg() sctp: fix busy polling net/sched: act_ct: fix skb leak and crash on ooo frags mlxbf_gige: Fix intermittent no ip issue mlxbf_gige: Enable the GigE port in mlxbf_gige_open ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() ARM: davinci: always select CONFIG_CPU_ARM926T Revert "drm/tidss: Annotate dma-fence critical section in commit path" Revert "drm/omapdrm: Annotate dma-fence critical section in commit path" drm/panfrost: Really power off GPU cores in panfrost_gpu_power_off() RDMA/usnic: Silence uninitialized symbol smatch warnings RDMA/hns: Fix inappropriate err code for unsupported operations drm/panel-elida-kd35t133: hold panel in reset for unprepare drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function drm/tilcdc: Fix irq free on unload media: pvrusb2: fix use after free on context disconnection media: mtk-jpegdec: export jpeg decoder functions media: mtk-jpeg: Remove cancel worker in mtk_jpeg_remove to avoid the crash of multi-core JPEG devices media: verisilicon: Hook the (TRY_)DECODER_CMD stateless ioctls media: rkvdec: Hook the (TRY_)DECODER_CMD stateless ioctls drm/bridge: Fix typo in post_disable() description f2fs: fix to avoid dirent corruption drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg() drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check() drm/radeon: check return value of radeon_ring_lock() drm/tidss: Move reset to the end of dispc_init() drm/tidss: Return error value from from softreset drm/tidss: Check for K2G in in dispc_softreset() drm/tidss: Fix dss reset ASoC: cs35l33: Fix GPIO name and drop legacy include ASoC: cs35l34: Fix GPIO name and drop legacy include drm/msm/mdp4: flush vblank event on disable drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks drm/drv: propagate errors from drm_modeset_register_all() ASoC: Intel: glk_rt5682_max98357a: fix board id mismatch drm/panfrost: Ignore core_mask for poweroff and disable PWRTRANS irq drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() drm/radeon/dpm: fix a memleak in sumo_parse_power_table drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable drm/bridge: tc358767: Fix return value on error case media: cx231xx: fix a memleak in cx231xx_init_isoc RDMA/hns: Fix memory leak in free_mr_init() clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config media: imx-mipi-csis: Fix clock handling in remove() media: dt-bindings: media: rkisp1: Fix the port description for the parallel interface media: rkisp1: Fix media device memory leak drm/panel: st7701: Fix AVCL calculation f2fs: fix to wait on block writeback for post_read case f2fs: fix to check compress file in f2fs_move_file_range() f2fs: fix to update iostat correctly in f2fs_filemap_fault() media: dvbdev: drop refcount on error path in dvb_device_open() media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of m88ds3103_probe() clk: renesas: rzg2l-cpg: Reuse code in rzg2l_cpg_reset() clk: renesas: rzg2l: Check reset monitor registers drm/msm/dpu: Set input_sel bit for INTF drm/msm/dpu: Drop enable and frame_count parameters from dpu_hw_setup_misr() drm/mediatek: Return error if MDP RDMA failed to enable the clock drm/mediatek: Fix underrun in VDO1 when switches off the layer drm/amdgpu/debugfs: fix error code when smc register accessors are NULL drm/amd/pm: fix a double-free in si_dpm_init drivers/amd/pm: fix a use-after-free in kv_parse_power_table gpu/drm/radeon: fix two memleaks in radeon_vm_init drm/amd/pm: fix a double-free in amdgpu_parse_extended_power_table f2fs: fix to check return value of f2fs_recover_xattr_data dt-bindings: clock: Update the videocc resets for sm8150 clk: qcom: videocc-sm8150: Update the videocc resets clk: qcom: videocc-sm8150: Add missing PLL config property drivers: clk: zynqmp: calculate closest mux rate drivers: clk: zynqmp: update divider round rate logic watchdog: set cdev owner before adding watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused clk: si5341: fix an error code problem in si5341_output_clk_set_rate drm/mediatek: dp: Add phy_mtk_dp module as pre-dependency accel/habanalabs: fix information leak in sec_attest_info() clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable pwm: stm32: Use hweight32 in stm32_pwm_detect_channels pwm: stm32: Fix enable count for clk in .probe() ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[] ALSA: scarlett2: Add missing error check to scarlett2_config_save() ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config() ALSA: scarlett2: Allow passing any output to line_out_remap() ALSA: scarlett2: Add missing error checks to *_ctl_get() ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put() mmc: sdhci_am654: Fix TI SoC dependencies mmc: sdhci_omap: Fix TI SoC dependencies IB/iser: Prevent invalidating wrong MR drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init kselftest/alsa - mixer-test: fix the number of parameters to ksft_exit_fail_msg() kselftest/alsa - mixer-test: Fix the print format specifier warning ksmbd: validate the zero field of packet header of: Fix double free in of_parse_phandle_with_args_map fbdev: imxfb: fix left margin setting of: unittest: Fix of_count_phandle_with_args() expected value message selftests/bpf: Add assert for user stacks in test_task_stack keys, dns: Fix size check of V1 server-list header binder: fix async space check for 0-sized buffers binder: fix unused alloc->free_async_space mips/smp: Call rcutree_report_cpu_starting() earlier Input: atkbd - use ab83 as id when skipping the getid command xen-netback: don't produce zero-size SKB frags binder: fix race between mmput() and do_exit() clocksource/drivers/timer-ti-dm: Fix make W=n kerneldoc warnings powerpc/64s: Increase default stack size to 32KB tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host() usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart Revert "usb: dwc3: Soft reset phy on probe for host" Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-only" usb: chipidea: wait controller resume finished for wakeup irq usb: cdns3: fix uvc failure work since sg support enabled usb: cdns3: fix iso transfer error when mult is not zero usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs" usb: typec: class: fix typec_altmode_put_partner to put plugs usb: mon: Fix atomicity violation in mon_bin_vma_fault serial: core: fix sanitizing check for RTS settings serial: core: make sure RS485 cannot be enabled when it is not supported serial: 8250_bcm2835aux: Restore clock error handling serial: core, imx: do not set RS485 enabled if it is not supported serial: imx: Ensure that imx_uart_rs485_config() is called with enabled clock serial: 8250_exar: Set missing rs485_supported flag serial: omap: do not override settings for RS485 support drm/vmwgfx: Fix possible invalid drm gem put calls drm/vmwgfx: Keep a gem reference to user bos in surfaces ALSA: oxygen: Fix right channel of capture volume mixer ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on HP ZBook ALSA: hda/realtek: Enable headset mic on Lenovo M70 Gen5 ksmbd: validate mech token in session setup ksmbd: fix UAF issue in ksmbd_tcp_new_connection() ksmbd: only v2 leases handle the directory io_uring/rw: ensure io->bytes_done is always initialized fbdev: flush deferred work in fb_deferred_io_fsync() fbdev: flush deferred IO before closing scsi: ufs: core: Simplify power management during async scan scsi: target: core: add missing file_{start,end}_write() scsi: mpi3mr: Refresh sdev queue depth after controller reset scsi: mpi3mr: Block PEL Enable Command on Controller Reset and Unrecoverable State drm/amd: Enable PCIe PME from D3 block: add check that partition length needs to be aligned with block size block: Fix iterating over an empty bio with bio_for_each_folio_all netfilter: nf_tables: check if catch-all set element is active in next generation pwm: jz4740: Don't use dev_err_probe() in .request() pwm: Fix out-of-bounds access in of_pwm_single_xlate() md/raid1: Use blk_opf_t for read and write operations rootfs: Fix support for rootfstype= when root= is given Bluetooth: Fix atomicity violation in {min,max}_key_size_set bpf: Fix re-attachment branch in bpf_tracing_prog_attach LoongArch: Fix and simplify fcsr initialization on execve() iommu/arm-smmu-qcom: Add missing GMU entry to match table iommu/dma: Trace bounce buffer usage when mapping buffers wifi: mt76: fix broken precal loading from MTD for mt7915 wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors wifi: mwifiex: configure BSSID consistently when starting AP Revert "net: rtnetlink: Enslave device before bringing it up" cxl/port: Fix decoder initialization when nr_targets > interleave_ways PCI/P2PDMA: Remove reference to pci_p2pdma_map_sg() PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support PCI: mediatek: Clear interrupt status before dispatching handler x86/kvm: Do not try to disable kvmclock if it was not enabled KVM: arm64: vgic-v4: Restore pending state on host userspace write KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache iio: adc: ad7091r: Pass iio_dev to event handler HID: wacom: Correct behavior when processing some confidence == false touches serial: sc16is7xx: add check for unsupported SPI modes during probe serial: sc16is7xx: set safe default SPI clock frequency ARM: 9330/1: davinci: also select PINCTRL mfd: syscon: Fix null pointer dereference in of_syscon_register() leds: aw2013: Select missing dependency REGMAP_I2C mfd: intel-lpss: Fix the fractional clock divider flags mips: dmi: Fix early remap on MIPS32 mips: Fix incorrect max_low_pfn adjustment riscv: Check if the code to patch lies in the exit section riscv: Fix module_alloc() that did not reset the linear mapping permissions riscv: Fix set_memory_XX() and set_direct_map_XX() by splitting huge linear mappings riscv: Fix set_direct_map_default_noflush() to reset _PAGE_EXEC riscv: Fixed wrong register in XIP_FIXUP_FLASH_OFFSET macro MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup() MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup() power: supply: cw2015: correct time_to_empty units in sysfs power: supply: bq256xx: fix some problem in bq256xx_hw_init serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed libapi: Add missing linux/types.h header to get the __u64 type on io.h base/node.c: initialize the accessor list before registering acpi: property: Let args be NULL in __acpi_node_get_property_reference software node: Let args be NULL in software_node_get_reference_args serial: imx: fix tx statemachine deadlock selftests/sgx: Fix uninitialized pointer dereference in error path selftests/sgx: Fix uninitialized pointer dereferences in encl_get_entry selftests/sgx: Include memory clobber for inline asm in test enclave selftests/sgx: Skip non X86_64 platform iio: adc: ad9467: fix reset gpio handling iio: adc: ad9467: don't ignore error codes iio: adc: ad9467: fix scale setting perf header: Fix one memory leakage in perf_event__fprintf_event_update() perf hisi-ptt: Fix one memory leakage in hisi_ptt_process_auxtrace_event() perf genelf: Set ELF program header addresses properly tty: change tty_write_lock()'s ndelay parameter to bool tty: early return from send_break() on TTY_DRIVER_HARDWARE_BREAK tty: don't check for signal_pending() in send_break() tty: use 'if' in send_break() instead of 'goto' usb: cdc-acm: return correct error code on unsupported break spmi: mtk-pmif: Serialize PMIF status check and command submission vdpa: Fix an error handling path in eni_vdpa_probe() nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length nvmet-tcp: fix a crash in nvmet_req_complete() perf env: Avoid recursively taking env->bpf_progs.lock cxl/region: fix x9 interleave typo apparmor: avoid crash when parsed profile name is empty usb: xhci-mtk: fix a short packet issue of gen1 isoc-in transfer serial: imx: Correct clock error message in function probe() nvmet: re-fix tracing strncpy() warning nvme: trace: avoid memcpy overflow warning nvmet-tcp: Fix the H2C expected PDU len calculation PCI: keystone: Fix race condition when initializing PHYs PCI: mediatek-gen3: Fix translation window size calculation ASoC: mediatek: sof-common: Add NULL check for normal_link string s390/pci: fix max size calculation in zpci_memcpy_toio() net: qualcomm: rmnet: fix global oob in rmnet_policy net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames amt: do not use overwrapped cb area net: phy: micrel: populate .soft_reset for KSZ9131 mptcp: mptcp_parse_option() fix for MPTCPOPT_MP_JOIN mptcp: strict validation before using mp_opt->hmac mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req() mptcp: refine opt_mp_capable determination block: ensure we hold a queue reference when using queue limits udp: annotate data-races around up->pending net: ravb: Fix dma_addr_t truncation in error case dt-bindings: gpio: xilinx: Fix node address in gpio drm/amdkfd: Use resource_size() helper function drm/amdkfd: fixes for HMM mem allocation net: stmmac: ethtool: Fixed calltrace caused by unbalanced disable_irq_wake calls bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe LoongArch: BPF: Prevent out-of-bounds memory access mptcp: relax check on MPC passive fallback netfilter: nf_tables: reject invalid set policy netfilter: nft_limit: do not ignore unsupported flags netfilter: nfnetlink_log: use proper helper for fetching physinif netfilter: nf_queue: remove excess nf_bridge variable netfilter: propagate net to nf_bridge_get_physindev netfilter: bridge: replace physindev with physinif in nf_bridge_info netfilter: nf_tables: do not allow mismatch field size and set key length netfilter: nf_tables: skip dead set elements in netlink dump netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description ipvs: avoid stat macros calls from preemptible context kdb: Fix a potential buffer overflow in kdb_local() ethtool: netlink: Add missing ethnl_ops_begin/complete loop: fix the the direct I/O support check when used on top of block devices mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work i2c: s3c24xx: fix read transfers in polling mode i2c: s3c24xx: fix transferring more than one message in polling mode block: Remove special-casing of compound pages riscv: Fix wrong usage of lm_alias() when splitting a huge linear mapping Revert "KEYS: encrypted: Add check for strsep" arm64: dts: armada-3720-turris-mox: set irq type for RTC Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" Linux 6.1.75 Change-Id: I60398ecc9a2e50206fd9d25c0d6c9ad6e1ca71a0 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-02-19 20:16:38 +00:00
Greg Kroah-Hartman	48159eff53	This is the 6.1.74 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmWrpWwACgkQONu9yGCS aT4NCxAAy3cItCclN2JVrdjKW8htc81fhEhUdB1oDwz8+U9SJJ0E7psR0H8p8KTM 2OTT9pVhfaZ2Usjml/PVjzBxR26o4jsUV3Ls/GMbrGnUBwPXFUXI4WAFhPKOvc4W IKffdO9SVFMQVygsCR02mld/BJiRp6Yak+p9z0Kmre74G+Wv7uq+yeYkqxJdIRZo owg6UwItEQ+gxhK+eRw0Cdp4pXr7NARY8l4POWuFxMylKwLPACdr/MxFsmG5a3u7 Gzw+Gygmm9OZoX5R/qtgY2WodAO2WsAwiEKPfY1nNqQ/8lcGpmb6LqXwfY2ea4Mn UMGonnxYcN8Xca4Eq2OTsAfe9E7NmdvRbLrhVM0RNepVZWaiaGJO7BXKiyVV1OY0 T5JJjZZexAuAJ183Vj8FYzp0V6FJn2f/U1rVaLwO4Fk4kBN5qaXWgaB3UP0BBlhM nI1yjPY0Ti0j9OcZpCxKGzwLIyNX9njbIINCt2rdkAw25aJyjuzG+h76IMyz1q5+ cDf3Oet+FTkDr8W8FuH7AKMgRKhuXHm49xWnKHy4+PCA5zBnidNT8+ipaDgeCSS7 2kMM+F1LSb031Oys0V7Xqf1diWvdhpAhmaTYSpzF1QNIbPv4dsQOgeuRP1rqZcMc RsqxNNkbqVIsuu9PE2x5pWQyqzeF6mDx+yJA/fSWm6N8akPEEpc= =AE28 -----END PGP SIGNATURE----- Merge 6.1.74 into android14-6.1-lts Changes in 6.1.74 f2fs: explicitly null-terminate the xattr list pinctrl: lochnagar: Don't build on MIPS ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro mptcp: fix uninit-value in mptcp_incoming_options wifi: cfg80211: lock wiphy mutex for rfkill poll wifi: avoid offset calculation on NULL pointer wifi: mac80211: handle 320 MHz in ieee80211_ht_cap_ie_to_sta_ht_cap debugfs: fix automount d_fsdata usage ALSA: hda: intel-nhlt: Ignore vbps when looking for DMIC 32 bps format nvme-core: fix a memory leak in nvme_ns_info_from_identify() drm/amd/display: update dcn315 lpddr pstate latency drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer smb: client, common: fix fortify warnings blk-mq: don't count completed flush data request as inflight in case of quiesce nvme-core: check for too small lba shift hwtracing: hisi_ptt: Handle the interrupt in hardirq context hwtracing: hisi_ptt: Don't try to attach a task ASoC: wm8974: Correct boost mixer inputs arm64: dts: rockchip: fix rk356x pcie msg interrupt name ASoC: Intel: Skylake: Fix mem leak in few functions ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16 ASoC: Intel: Skylake: mem leak in skl register function ASoC: cs43130: Fix the position of const qualifier ASoC: cs43130: Fix incorrect frame delay configuration ASoC: rt5650: add mutex to avoid the jack detection failure ASoC: Intel: skl_hda_dsp_generic: Drop HDMI routes when HDMI is not available nouveau/tu102: flush all pdbs on vmm flush ASoC: amd: yc: Add DMI entry to support System76 Pangolin 13 ASoC: hdac_hda: Conditionally register dais for HDMI and Analog net/tg3: fix race condition in tg3_reset_task() ASoC: da7219: Support low DC impedance headset ASoC: ops: add correct range check for limiting volume nvme: introduce helper function to get ctrl state nvme: prevent potential spectre v1 gadget arm64: dts: rockchip: Fix PCI node addresses on rk3399-gru drm/amdgpu: Add NULL checks for function pointers drm/exynos: fix a potential error pointer dereference drm/exynos: fix a wrong error checking hwmon: (corsair-psu) Fix probe when built-in LoongArch: Preserve syscall nr across execve() clk: rockchip: rk3568: Add PLL rate for 292.5MHz clk: rockchip: rk3128: Fix HCLK_OTG gate register jbd2: correct the printing of write_flags in jbd2_write_superblock() jbd2: increase the journal IO's priority drm/crtc: Fix uninit-value bug in drm_mode_setcrtc neighbour: Don't let neigh_forced_gc() disable preemption for long platform/x86: intel-vbtn: Fix missing tablet-mode-switch events jbd2: fix soft lockup in journal_finish_inode_data_buffers() tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing tracing: Add size check when printing trace_marker output stmmac: dwmac-loongson: drop useless check for compatible fallback MIPS: dts: loongson: drop incorrect dwmac fallback compatible tracing: Fix uaf issue when open the hist or hist_debug file ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI Input: psmouse - enable Synaptics InterTouch for ThinkPad L14 G1 reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning Input: atkbd - skip ATKBD_CMD_GETID in translated mode Input: i8042 - add nomux quirk for Acer P459-G2-M s390/scm: fix virtual vs physical address confusion ARC: fix spare error wifi: iwlwifi: pcie: avoid a NULL pointer dereference Input: xpad - add Razer Wolverine V2 support kselftest: alsa: fixed a print formatting warning HID: nintendo: fix initializer element is not constant error platform/x86: thinkpad_acpi: fix for incorrect fan reporting on some ThinkPad systems ASoC: Intel: bytcr_rt5640: Add quirk for the Medion Lifetab S10346 ASoC: Intel: bytcr_rt5640: Add new swapped-speakers quirk ALSA: hda/realtek: Add quirks for ASUS Zenbook 2022 Models dm audit: fix Kconfig so DM_AUDIT depends on BLK_DEV_DM HID: nintendo: Prevent divide-by-zero on code smb: client: fix potential OOB in smb2_dump_detail() i2c: rk3x: fix potential spinlock recursion on poll drm/amd/display: get dprefclk ss info from integration info table pinctrl: cy8c95x0: Fix typo pinctrl: cy8c95x0: Fix get_pincfg ida: Fix crash in ida_free when the bitmap is empty virtio_blk: fix snprintf truncation compiler warning net: qrtr: ns: Return 0 if server port is not present ARM: sun9i: smp: fix return code check of of_property_match_string drm/crtc: fix uninitialized variable use ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP Envy X360 13-ay0xxx ACPI: resource: Add another DMI match for the TongFang GMxXGxx ASoC: SOF: Intel: hda-codec: Delay the codec device registration btf, scripts: Exclude Rust CUs with pahole bpf: Add --skip_encoding_btf_inconsistent_proto, --btf_gen_optimized to pahole flags for v1.25 ksmbd: don't allow O_TRUNC open on read-only share ksmbd: free ppace array on error in parse_dacl Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" binder: use EPOLLERR from eventpoll.h binder: fix use-after-free in shinker's callback binder: fix trivial typo of binder_free_buf_locked() binder: fix comment on binder_alloc_new_buf() return value uio: Fix use-after-free in uio_open parport: parport_serial: Add Brainboxes BAR details parport: parport_serial: Add Brainboxes device IDs and geometry leds: ledtrig-tty: Free allocated ttyname buffer on deactivate PCI: Add ACS quirk for more Zhaoxin Root Ports coresight: etm4x: Fix width of CCITMIN field scripts/decode_stacktrace.sh: optionally use LLVM utilities Linux 6.1.74 Change-Id: Icd69871d2272d5c26e253cfe54d2a8b637e616b5 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-01-31 01:16:30 +00:00
Maurizio Lombardi	11923a8df8	nvmet-tcp: Fix the H2C expected PDU len calculation ... [ Upstream commit 9a1abc24850eb759e36a2f8869161c3b7254c904 ] The nvmet_tcp_handle_h2c_data_pdu() function should take into consideration the possibility that the header digest and/or the data digests are enabled when calculating the expected PDU length, before comparing it to the value stored in cmd->pdu_len. Fixes: efa56305908b ("nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length") Signed-off-by: Maurizio Lombardi <mlombard@redhat.com> Reviewed-by: Sagi Grimberg <sagi@grimberg.me> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-25 15:27:48 -08:00
Arnd Bergmann	fb711858e6	nvme: trace: avoid memcpy overflow warning ... [ Upstream commit a7de1dea76cd6a3707707af4ea2f8bc3cdeaeb11 ] A previous patch introduced a struct_group() in nvme_common_command to help stringop fortification figure out the length of the fields, but one function is not currently using them: In file included from drivers/nvme/target/core.c:7: In file included from include/linux/string.h:254: include/linux/fortify-string.h:592:4: error: call to '__read_overflow2_field' declared with 'warning' attribute: detected read beyond size of field (2nd parameter); maybe use struct_group()? [-Werror,-Wattribute-warning] __read_overflow2_field(q_size_field, size); ^ Change this one to use the correct field name to avoid the warning. Fixes: 5c629dc960 ("nvme: use struct group for generic command dwords") Signed-off-by: Arnd Bergmann <arnd@arndb.de> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-25 15:27:48 -08:00
Arnd Bergmann	cac037db24	nvmet: re-fix tracing strncpy() warning ... [ Upstream commit 4ee7ffeb4ce50c80bc4504db6f39b25a2df6bcf4 ] An earlier patch had tried to address a warning about a string copy with missing zero termination: drivers/nvme/target/trace.h:52:3: warning: ‘strncpy’ specified bound 32 equals destination size [-Wstringop-truncation] The new version causes a different warning with some compiler versions, notably gcc-9 and gcc-10, and also misses the zero padding that was apparently done intentionally in the original code: drivers/nvme/target/trace.h:56:2: error: 'strncpy' specified bound depends on the length of the source argument [-Werror=stringop-overflow=] Change it to use strscpy_pad() with the original length, which will give a properly padded and zero-terminated string as well as avoiding the warning. Fixes: d86481e924 ("nvmet: use min of device_path and disk len") Signed-off-by: Arnd Bergmann <arnd@arndb.de> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-25 15:27:48 -08:00
Maurizio Lombardi	83ccd15717	nvmet-tcp: fix a crash in nvmet_req_complete() ... [ Upstream commit 0849a5441358cef02586fb2d60f707c0db195628 ] in nvmet_tcp_handle_h2c_data_pdu(), if the host sends a data_offset different from rbytes_done, the driver ends up calling nvmet_req_complete() passing a status error. The problem is that at this point cmd->req is not yet initialized, the kernel will crash after dereferencing a NULL pointer. Fix the bug by replacing the call to nvmet_req_complete() with nvmet_tcp_fatal_error(). Fixes: 872d26a391 ("nvmet-tcp: add NVMe over TCP target driver") Reviewed-by: Keith Busch <kbsuch@kernel.org> Reviewed-by: Sagi Grimberg <sagi@grimberg.me> Signed-off-by: Maurizio Lombardi <mlombard@redhat.com> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-25 15:27:48 -08:00
Maurizio Lombardi	2871aa4070	nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length ... [ Upstream commit efa56305908ba20de2104f1b8508c6a7401833be ] If the host sends an H2CData command with an invalid DATAL, the kernel may crash in nvmet_tcp_build_pdu_iovec(). Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 lr : nvmet_tcp_io_work+0x6ac/0x718 [nvmet_tcp] Call trace: process_one_work+0x174/0x3c8 worker_thread+0x2d0/0x3e8 kthread+0x104/0x110 Fix the bug by raising a fatal error if DATAL isn't coherent with the packet size. Also, the PDU length should never exceed the MAXH2CDATA parameter which has been communicated to the host in nvmet_tcp_handle_icreq(). Fixes: 872d26a391 ("nvmet-tcp: add NVMe over TCP target driver") Signed-off-by: Maurizio Lombardi <mlombard@redhat.com> Reviewed-by: Sagi Grimberg <sagi@grimberg.me> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-25 15:27:47 -08:00
Nitesh Shetty	ce97686124	nvme: prevent potential spectre v1 gadget ... [ Upstream commit 20dc66f2d76b4a410df14e4675e373b718babc34 ] This patch fixes the smatch warning, "nvmet_ns_ana_grpid_store() warn: potential spectre issue 'nvmet_ana_group_enabled' [w] (local cap)" Prevent the contents of kernel memory from being leaked to user space via speculative execution by using array_index_nospec. Signed-off-by: Nitesh Shetty <nj.shetty@samsung.com> Reviewed-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Sagi Grimberg <sagi@grimberg.me> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-20 11:50:06 +01:00
Keith Busch	df2bd52354	nvme: introduce helper function to get ctrl state ... [ Upstream commit 5c687c287c46fadb14644091823298875a5216aa ] The controller state is typically written by another CPU, so reading it should ensure no optimizations are taken. This is a repeated pattern in the driver, so start with adding a convenience function that returns the controller state with READ_ONCE(). Reviewed-by: Sagi Grimberg <sagi@grimberg.me> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-20 11:50:06 +01:00
Keith Busch	319c5186d6	nvme-core: check for too small lba shift ... [ Upstream commit 74fbc88e161424b3b96a22b23a8e3e1edab9d05c ] The block layer doesn't support logical block sizes smaller than 512 bytes. The nvme spec doesn't support that small either, but the driver isn't checking to make sure the device responded with usable data. Failing to catch this will result in a kernel bug, either from a division by zero when stacking, or a zero length bio. Reviewed-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-20 11:50:04 +01:00
Maurizio Lombardi	3c781fbb4f	nvme-core: fix a memory leak in nvme_ns_info_from_identify() ... [ Upstream commit e3139cef8257fcab1725441e2fd5fd0ccb5481b1 ] In case of error, free the nvme_id_ns structure that was allocated by nvme_identify_ns(). Signed-off-by: Maurizio Lombardi <mlombard@redhat.com> Reviewed-by: Sagi Grimberg <sagi@grimberg.me> Reviewed-by: Kanchan Joshi <joshi.k@samsung.com> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-20 11:50:04 +01:00
Greg Kroah-Hartman	1e63881f5c	This is the 6.1.70 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmWSsnYACgkQONu9yGCS aT7ZRw//bmrTWoNbFf/qdM11oPF9EHus9FUgSlP5yvNaa6jcPfwGx71NPXUkz+wU xKobh1VwK7TJxq4JHFQeMmupW/8++NeWNygwtYsllwnsMGzHL+mz2Txysrr/mhMx WUs6UVYXRxnuQJJDSqtTvMoyllpAJ1QQxJNuhKKOI1i+0DIu9YjQklD/4eW3cebv 8B9f3CeOyP/oL5Z0MqFTP8OnWx6X3jTbO4caor+qsyR+frgpXgBppTF76RHcd8lX MLVlx7aqr4wcml/uUMsolw8Zjbb719mX+KW3LHltl8wHftZeinYUsu1afnlb5dG1 rAaVgut0PmjTAQ/KwIp54CGO2MADwApMCUXIm0yyKSpNfw+HKR10bpz64HOFp9KQ 368YpjDJ3onkQdrLjV57w37YBRLyWxipeBya2+S4rdyPSfuvPkPCRNVkEDnHVAnH jxEhuoMZ2f/CIA8BT32y4DYDvEaIdfp7jVvEDFREDyIVXRMBhIneMhhyjU+Oe7Rw 1q/sfEJejXFa5VvC+Jl+K5LouP59M5MTq3RkCoYxZKz+bdfpOLEJ6AZJoZHcS02J QlM/pL213nC1ye3tuWFu3tNPzPS/G6LNQfGgSsBUzRn9IX2osn/epNFnCHBIFqlK apjrXObrmqKE6jNvy6ktHUDpnEXPZFpvirSXRN2Lk9SYh76bFP0= =d63o -----END PGP SIGNATURE----- Merge 6.1.70 into android14-6.1-lts Changes in 6.1.70 kasan: disable kasan_non_canonical_hook() for HW tags bpf: Fix prog_array_map_poke_run map poke update HID: i2c-hid: acpi: Unify ACPI ID tables format HID: i2c-hid: Add IDEA5002 to i2c_hid_acpi_blacklist[] drm/amd/display: fix hw rotated modes when PSR-SU is enabled ARM: dts: dra7: Fix DRA7 L3 NoC node register size ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init reset: Fix crash when freeing non-existent optional resets s390/vx: fix save/restore of fpu kernel context wifi: iwlwifi: pcie: add another missing bh-disable for rxq->lock wifi: mac80211: check if the existing link config remains unchanged wifi: mac80211: mesh: check element parsing succeeded wifi: mac80211: mesh_plink: fix matches_local logic Revert "net/mlx5e: fix double free of encap_header in update funcs" Revert "net/mlx5e: fix double free of encap_header" net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list() net/mlx5: Introduce and use opcode getter in command interface net/mlx5: Prevent high-rate FW commands from populating all slots net/mlx5: Re-organize mlx5_cmd struct net/mlx5e: Fix a race in command alloc flow net/mlx5e: fix a potential double-free in fs_udp_create_groups net/mlx5: Fix fw tracer first block check net/mlx5e: Correct snprintf truncation handling for fw_version buffer net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors net: mscc: ocelot: fix eMAC TX RMON stats for bucket 256-511 and above octeontx2-pf: Fix graceful exit during PFC configuration failure net: Return error from sk_stream_wait_connect() if sk_wait_event() fails net: sched: ife: fix potential use-after-free ethernet: atheros: fix a memleak in atl1e_setup_ring_resources net/rose: fix races in rose_kill_by_device() Bluetooth: Fix deadlock in vhci_send_frame Bluetooth: hci_event: shut up a false-positive warning net: mana: select PAGE_POOL net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() afs: Fix the dynamic root's d_delete to always delete unused dentries afs: Fix dynamic root lookup DNS check net: check dev->gso_max_size in gso_features_check() keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry afs: Fix overwriting of result of DNS query afs: Fix use-after-free due to get/remove race in volume tree ASoC: hdmi-codec: fix missing report for jack initial status ASoC: fsl_sai: Fix channel swap issue on i.MX8MP i2c: aspeed: Handle the coalesced stop conditions with the start conditions. x86/xen: add CPU dependencies for 32-bit build pinctrl: at91-pio4: use dedicated lock class for IRQ gpiolib: cdev: add gpio_device locking wrapper around gpio_ioctl() nvme-pci: fix sleeping function called from interrupt context drm/i915/mtl: limit second scaler vertical scaling in ver >= 14 drm/i915: Relocate intel_atomic_setup_scalers() drm/i915: Fix intel_atomic_setup_scalers() plane_state handling drm/i915/dpt: Only do the POT stride remap when using DPT drm/i915/mtl: Add MTL for remapping CCS FBs drm/i915: Fix ADL+ tiled plane stride when the POT stride is smaller than the original interconnect: Treat xlate() returning NULL node as an error iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw interconnect: qcom: sm8250: Enable sync_state Input: ipaq-micro-keys - add error handling for devm_kmemdup scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma() iio: triggered-buffer: prevent possible freeing of wrong buffer ALSA: usb-audio: Increase delay in MOTU M quirk usb-storage: Add quirk for incorrect WP on Kingston DT Ultimate 3.0 G3 wifi: cfg80211: Add my certificate wifi: cfg80211: fix certs build to not depend on file order USB: serial: ftdi_sio: update Actisense PIDs constant names USB: serial: option: add Quectel EG912Y module support USB: serial: option: add Foxconn T99W265 with new baseline USB: serial: option: add Quectel RM500Q R13 firmware support ALSA: hda/realtek: Add quirk for ASUS ROG GV302XA Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg Bluetooth: L2CAP: Send reject on command corrupted request Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE Bluetooth: Add more enc key size check net: usb: ax88179_178a: avoid failed operations when device is disconnected Input: soc_button_array - add mapping for airplane mode button net: 9p: avoid freeing uninit memory in p9pdu_vreadf net: rfkill: gpio: set GPIO direction net: ks8851: Fix TX stall caused by TX buffer overrun dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp smb: client: fix OOB in cifsd when receiving compounded resps smb: client: fix potential OOB in cifs_dump_detail() smb: client: fix OOB in SMB2_query_info_init() smb: client: fix OOB in smbCalcSize() drm/i915: Reject async flips with bigjoiner 9p: prevent read overrun in protocol dump tracepoint RISC-V: Fix do_notify_resume / do_work_pending prototype loop: do not enforce max_loop hard limit by (new) default dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client Revert "drm/amd/display: Do not set DRR on pipe commit" btrfs: zoned: no longer count fresh BG region as zone unusable ubifs: fix possible dereference after free ublk: move ublk_cancel_dev() out of ub->mutex selftests: mptcp: join: fix subflow_send_ack lookup Revert "scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity" scsi: core: Always send batch on reset or error handling command tracing / synthetic: Disable events after testing in synth_event_gen_test_init() dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata() pinctrl: starfive: jh7100: ignore disabled device tree nodes bus: ti-sysc: Flush posted write only after srst_udelay gpio: dwapb: mask/unmask IRQ when disable/enale it lib/vsprintf: Fix %pfwf when current node refcount == 0 thunderbolt: Fix memory leak in margining_port_remove() KVM: arm64: vgic: Simplify kvm_vgic_destroy() KVM: arm64: vgic: Add a non-locking primitive for kvm_vgic_vcpu_destroy() KVM: arm64: vgic: Force vcpu vgic teardown on vcpu destroy x86/alternatives: Sync core before enabling interrupts mm/damon/core: make damon_start() waits until kdamond_fn() starts fuse: share lookup state between submount and its parent wifi: cfg80211: fix CQM for non-range use wifi: nl80211: fix deadlock in nl80211_set_cqm_rssi (6.6.x) loop: deprecate autoloading callback loop_probe() Linux 6.1.70 Change-Id: I72bfbd39ae932d290b13d6fdde8e6684a84ec9e1 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-01-12 18:48:13 +00:00
Greg Kroah-Hartman	d3d46ac25c	Merge 6.1.69 into android14-6.1-lts ... Changes in 6.1.69 perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table r8152: add USB device driver for config selection r8152: add vendor/device ID pair for D-Link DUB-E250 r8152: add vendor/device ID pair for ASUS USB-C2500 powerpc/ftrace: Fix stack teardown in ftrace_no_trace ext4: fix warning in ext4_dio_write_end_io() ksmbd: fix memory leak in smb2_lock() afs: Fix refcount underflow from error handling race HID: lenovo: Restrict detection of patched firmware only to USB cptkbd net/mlx5e: Fix possible deadlock on mlx5e_tx_timeout_work net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX qca_debug: Prevent crash on TX ring changes qca_debug: Fix ethtool -G iface tx behavior qca_spi: Fix reset behavior bnxt_en: Clear resource reservation during resume bnxt_en: Save ring error counters across reset bnxt_en: Fix wrong return value check in bnxt_close_nic() bnxt_en: Fix HWTSTAMP_FILTER_ALL packet timestamp logic atm: solos-pci: Fix potential deadlock on &cli_queue_lock atm: solos-pci: Fix potential deadlock on &tx_queue_lock net: vlan: introduce skb_vlan_eth_hdr() net: fec: correct queue selection octeontx2-af: fix a use-after-free in rvu_nix_register_reporters octeontx2-pf: Fix promisc mcam entry action octeontx2-af: Update RSS algorithm index atm: Fix Use-After-Free in do_vcc_ioctl net/rose: Fix Use-After-Free in rose_ioctl iavf: Introduce new state machines for flow director iavf: Handle ntuple on/off based on new state machines for flow director qed: Fix a potential use-after-free in qed_cxt_tables_alloc net: Remove acked SYN flag from packet in the transmit queue correctly net: ena: Destroy correct number of xdp queues upon failure net: ena: Fix xdp drops handling due to multibuf packets net: ena: Fix XDP redirection error stmmac: dwmac-loongson: Make sure MDIO is initialized before use sign-file: Fix incorrect return values check vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() dpaa2-switch: fix size of the dma_unmap dpaa2-switch: do not ask for MDB, VLAN and FDB replay net: stmmac: Handle disabled MDIO busses from devicetree appletalk: Fix Use-After-Free in atalk_ioctl net: atlantic: fix double free in ring reinit logic cred: switch to using atomic_long_t fuse: dax: set fc->dax to NULL in fuse_dax_conn_free() ALSA: hda/hdmi: add force-connect quirk for NUC5CPYB ALSA: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants ALSA: hda/realtek: Apply mute LED quirk for HP15-db Revert "PCI: acpiphp: Reassign resources on bridge if necessary" PCI: loongson: Limit MRRS to 256 ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE drm/mediatek: Add spinlock for setting vblank event in atomic_begin x86/hyperv: Fix the detection of E820_TYPE_PRAM in a Gen2 VM usb: aqc111: check packet for fixup for true limit stmmac: dwmac-loongson: Add architecture dependency blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" blk-cgroup: bypass blkcg_deactivate_policy after destroying bcache: avoid oversize memory allocation by small stripe_size bcache: remove redundant assignment to variable cur_idx bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() bcache: avoid NULL checking to c->root in run_cache_set() nbd: fold nbd config initialization into nbd_alloc_config() nvme-auth: set explanation code for failure2 msgs nvme: catch errors from nvme_configure_metadata() selftests/bpf: fix bpf_loop_bench for new callback verification scheme LoongArch: Add dependency between vmlinuz.efi and vmlinux.efi LoongArch: Implement constant timer shutdown interface platform/x86: intel_telemetry: Fix kernel doc descriptions HID: glorious: fix Glorious Model I HID report HID: add ALWAYS_POLL quirk for Apple kb nbd: pass nbd_sock to nbd_read_reply() instead of index HID: hid-asus: reset the backlight brightness level on resume HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation net: usb: qmi_wwan: claim interface 4 for ZTE MF290 arm64: add dependency between vmlinuz.efi and Image HID: hid-asus: add const to read-only outgoing usb buffer perf: Fix perf_event_validate_size() lockdep splat btrfs: do not allow non subvolume root targets for snapshot soundwire: stream: fix NULL pointer dereference for multi_link ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify team: Fix use-after-free when an option instance allocation fails drm/amdgpu/sdma5.2: add begin/end_use ring callbacks dmaengine: stm32-dma: avoid bitfield overflow assertion mm/mglru: fix underprotected page cache mm/shmem: fix race in shmem_undo_range w/THP btrfs: free qgroup reserve when ORDERED_IOERR is set btrfs: don't clear qgroup reserved bit in release_folio drm/amdgpu: fix tear down order in amdgpu_vm_pt_free drm/amd/display: Disable PSR-SU on Parade 0803 TCON again drm/i915: Fix remapped stride with CCS on ADL+ smb: client: fix OOB in receive_encrypted_standard() smb: client: fix NULL deref in asn1_ber_decoder() smb: client: fix OOB in smb2_query_reparse_point() ring-buffer: Fix memory leak of free page tracing: Update snapshot buffer on resize if it is allocated ring-buffer: Do not update before stamp when switching sub-buffers ring-buffer: Have saved event hold the entire event ring-buffer: Fix writing to the buffer with max_data_size ring-buffer: Fix a race in rb_time_cmpxchg() for 32 bit archs ring-buffer: Do not try to put back write_stamp ring-buffer: Have rb_time_cmpxchg() set the msb counter too net: tls, update curr on splice as well r8152: avoid to change cfg for all devices r8152: remove rtl_vendor_mode function r8152: fix the autosuspend doesn't work Linux 6.1.69 Change-Id: I695d1d50ca8c00ff505505918bdc59ce9d29d479 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-01-11 22:37:52 +00:00
Greg Kroah-Hartman	c9b484c69d	This is the 6.1.68 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmV57F0ACgkQONu9yGCS aT5Ihg//f5xvyjEEbZyE7tFaBBgx8ceQCtteRyi+Jw3Hy65/9neETij0t97IhG37 I89TIAddzNIl51ifl8UYZMWI780HbnW1YdbVLMElbngbmT5rHzIsGpAVCC+SDmMK NPWXrqWIw6yTVSbTwqKIqOLlEiLxGjdWnPxjoMXBVyje+EcmANBe+fe9qkLq98XC ZgzrRZyriS8QLMMscy/GmdxIyC32nxebdHDwwE6qgYM8GWNfqLLektX798VGFhra ByR9bvsJ0PD5m9siCGcx37lVusJDLMjJp4FtMIFTrH63i0sMQm7HKiggJmbCm4lH Sgbo4iwvSVa2xf1glPJagE9tiah5b0feLqgrQf/ONO2PdCjcERN47472IcQgRvQ+ SDYKScZBSp1/Jd063dHiK/u79uxEBFEdisAkPG2MstjCySEDuhvDrV5R0iKDpQBP y2FXb4RArqZFrGwS4Zfxx/EQnj3MYJ11a4AE5I0yUGIj7vrFdddayBDBVdwhog84 QhHPH0F/eC/zSMATYSQSCZTTSZ2UoR8NODXyOryoH5tmXlgxXWKq1oFi5nUnysoP SkGDT0dg+kbReQNA+eyj5qTS4lzincIyP2B4Ple9d75zpx1UENlqVm1xvWLccyFt 3eV/XNRg8dAapsbqvEtW+iev6izutWgcG6p1hToObnbg5uHy6fI= =+iTJ -----END PGP SIGNATURE----- Merge 6.1.68 into android14-6.1-lts Changes in 6.1.68 vdpa/mlx5: preserve CVQ vringh index hrtimers: Push pending hrtimers away from outgoing CPU earlier i2c: designware: Fix corrupted memory seen in the ISR netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test zstd: Fix array-index-out-of-bounds UBSAN warning tg3: Move the [rt]x_dropped counters to tg3_napi tg3: Increment tx_dropped in tg3_tso_bug() kconfig: fix memory leak from range properties drm/amdgpu: correct chunk_ptr to a pointer to chunk. x86: Introduce ia32_enabled() x86/coco: Disable 32-bit emulation by default on TDX and SEV x86/entry: Convert INT 0x80 emulation to IDTENTRY x86/entry: Do not allow external 0x80 interrupts x86/tdx: Allow 32-bit emulation by default dt: dt-extract-compatibles: Handle cfile arguments in generator function dt: dt-extract-compatibles: Don't follow symlinks when walking tree platform/x86: asus-wmi: Move i8042 filter install to shared asus-wmi code of: dynamic: Fix of_reconfig_get_state_change() return value documentation platform/x86: wmi: Skip blocks with zero instances ipv6: fix potential NULL deref in fib6_add() octeontx2-pf: Add missing mutex lock in otx2_get_pauseparam octeontx2-af: Check return value of nix_get_nixlf before using nixlf hv_netvsc: rndis_filter needs to select NLS r8152: Rename RTL8152_UNPLUG to RTL8152_INACCESSIBLE r8152: Add RTL8152_INACCESSIBLE checks to more loops r8152: Add RTL8152_INACCESSIBLE to r8156b_wait_loading_flash() r8152: Add RTL8152_INACCESSIBLE to r8153_pre_firmware_1() r8152: Add RTL8152_INACCESSIBLE to r8153_aldps_en() mlxbf-bootctl: correctly identify secure boot with development keys platform/mellanox: Add null pointer checks for devm_kasprintf() platform/mellanox: Check devm_hwmon_device_register_with_groups() return value arcnet: restoring support for multiple Sohard Arcnet cards octeontx2-pf: consider both Rx and Tx packet stats for adaptive interrupt coalescing net: stmmac: fix FPE events losing xsk: Skip polling event check for unbound socket octeontx2-af: fix a use-after-free in rvu_npa_register_reporters i40e: Fix unexpected MFS warning message iavf: validate tx_coalesce_usecs even if rx_coalesce_usecs is zero net: bnxt: fix a potential use-after-free in bnxt_init_tc tcp: fix mid stream window clamp. ionic: fix snprintf format length warning ionic: Fix dim work handling in split interrupt mode ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit() net: atlantic: Fix NULL dereference of skb pointer in net: hns: fix wrong head when modify the tx feature when sending packets net: hns: fix fake link up on xge port octeontx2-af: Adjust Tx credits when MCS external bypass is disabled octeontx2-af: Fix mcs sa cam entries size octeontx2-af: Fix mcs stats register address octeontx2-af: Add missing mcs flr handler call octeontx2-af: Update Tx link register range dt-bindings: interrupt-controller: Allow #power-domain-cells netfilter: nft_exthdr: add boolean DCCP option matching netfilter: nf_tables: fix 'exist' matching on bigendian arches netfilter: nf_tables: bail out on mismatching dynset and set expressions netfilter: nf_tables: validate family when identifying table via handle netfilter: xt_owner: Fix for unsafe access of sk->sk_socket tcp: do not accept ACK of bytes we never sent bpf: sockmap, updating the sg structure should also update curr psample: Require 'CAP_NET_ADMIN' when joining "packets" group drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group mm/damon/sysfs: eliminate potential uninitialized variable warning tee: optee: Fix supplicant based device enumeration RDMA/hns: Fix unnecessary err return when using invalid congest control algorithm RDMA/irdma: Do not modify to SQD on error RDMA/irdma: Add wait for suspend on SQD arm64: dts: rockchip: Expand reg size of vdec node for RK3328 arm64: dts: rockchip: Expand reg size of vdec node for RK3399 ASoC: fsl_sai: Fix no frame sync clock issue on i.MX8MP RDMA/rtrs-srv: Do not unconditionally enable irq RDMA/rtrs-clt: Start hb after path_up RDMA/rtrs-srv: Check return values while processing info request RDMA/rtrs-srv: Free srv_mr iu only when always_invalidate is true RDMA/rtrs-srv: Destroy path files after making sure no IOs in-flight RDMA/rtrs-clt: Fix the max_send_wr setting RDMA/rtrs-clt: Remove the warnings for req in_use check RDMA/bnxt_re: Correct module description string RDMA/irdma: Refactor error handling in create CQP RDMA/irdma: Fix UAF in irdma_sc_ccq_get_cqe_info() hwmon: (acpi_power_meter) Fix 4.29 MW bug ASoC: codecs: lpass-tx-macro: set active_decimator correct default value hwmon: (nzxt-kraken2) Fix error handling path in kraken2_probe() ASoC: wm_adsp: fix memleak in wm_adsp_buffer_populate RDMA/core: Fix umem iterator when PAGE_SIZE is greater then HCA pgsz RDMA/irdma: Avoid free the non-cqp_request scratch drm/bridge: tc358768: select CONFIG_VIDEOMODE_HELPERS arm64: dts: imx8mq: drop usb3-resume-missing-cas from usb arm64: dts: imx8mp: imx8mq: Add parkmode-disable-ss-quirk on DWC3 ARM: dts: imx6ul-pico: Describe the Ethernet PHY clock tracing: Fix a warning when allocating buffered events fails scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() ARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init ARM: dts: imx7: Declare timers compatible with fsl,imx6dl-gpt ARM: dts: imx28-xea: Pass the 'model' property riscv: fix misaligned access handling of C.SWSP and C.SDSP md: introduce md_ro_state md: don't leave 'MD_RECOVERY_FROZEN' in error path of md_set_readonly() iommu: Avoid more races around device probe rethook: Use __rcu pointer for rethook::handler kprobes: consistent rcu api usage for kretprobe holder ASoC: amd: yc: Fix non-functional mic on ASUS E1504FA io_uring/af_unix: disable sending io_uring over sockets nvme-pci: Add sleep quirk for Kingston drives io_uring: fix mutex_unlock with unreferenced ctx ALSA: usb-audio: Add Pioneer DJM-450 mixer controls ALSA: pcm: fix out-of-bounds in snd_pcm_state_names ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5 ALSA: hda/realtek: add new Framework laptop to quirks ALSA: hda/realtek: Add Framework laptop 16 to quirks ring-buffer: Test last update in 32bit version of __rb_time_read() nilfs2: fix missing error check for sb_set_blocksize call nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() cgroup_freezer: cgroup_freezing: Check if not frozen checkstack: fix printed address tracing: Always update snapshot buffer size tracing: Disable snapshot buffer when stopping instance tracers tracing: Fix incomplete locking when disabling buffered events tracing: Fix a possible race when disabling buffered events packet: Move reference count in packet_sock to atomic_long_t r8169: fix rtl8125b PAUSE frames blasting when suspended regmap: fix bogus error on regcache_sync success platform/surface: aggregator: fix recv_buf() return value hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write mm: fix oops when filemap_map_pmd() without prealloc_pte powercap: DTPM: Fix missing cpufreq_cpu_put() calls md/raid6: use valid sector values to determine if an I/O should wait on the reshape arm64: dts: mediatek: mt7622: fix memory node warning check arm64: dts: mediatek: mt8183-kukui-jacuzzi: fix dsi unnecessary cells properties arm64: dts: mediatek: cherry: Fix interrupt cells for MT6360 on I2C7 arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names arm64: dts: mediatek: mt8195: Fix PM suspend/resume with venc clocks arm64: dts: mediatek: mt8183: Fix unit address for scp reserved memory arm64: dts: mediatek: mt8183: Move thermal-zones to the root node arm64: dts: mediatek: mt8183-evb: Fix unit_address_vs_reg warning on ntc binder: fix memory leaks of spam and pending work coresight: etm4x: Make etm4_remove_dev() return void coresight: etm4x: Remove bogous __exit annotation for some functions hwtracing: hisi_ptt: Add dummy callback pmu::read() misc: mei: client.c: return negative error code in mei_cl_write misc: mei: client.c: fix problem of return '-EOVERFLOW' in mei_cl_write LoongArch: BPF: Don't sign extend memory load operand LoongArch: BPF: Don't sign extend function return value ring-buffer: Force absolute timestamp on discard of event tracing: Set actual size after ring buffer resize tracing: Stop current tracer when resizing buffer parisc: Reduce size of the bug_table on 64-bit kernel by half parisc: Fix asm operand number out of range build error in bug table arm64: dts: mediatek: add missing space before { arm64: dts: mt8183: kukui: Fix underscores in node names perf: Fix perf_event_validate_size() x86/sev: Fix kernel crash due to late update to read-only ghcb_version gpiolib: sysfs: Fix error handling on failed export drm/amdgpu: fix memory overflow in the IB test drm/amd/amdgpu: Fix warnings in amdgpu/amdgpu_display.c drm/amdgpu: correct the amdgpu runtime dereference usage count drm/amdgpu: Update ras eeprom support for smu v13_0_0 and v13_0_10 drm/amdgpu: Add EEPROM I2C address support for ip discovery drm/amdgpu: Remove redundant I2C EEPROM address drm/amdgpu: Decouple RAS EEPROM addresses from chips drm/amdgpu: Add support for RAS table at 0x40000 drm/amdgpu: Remove second moot switch to set EEPROM I2C address drm/amdgpu: Return from switch early for EEPROM I2C address drm/amdgpu: simplify amdgpu_ras_eeprom.c drm/amdgpu: Add I2C EEPROM support on smu v13_0_6 drm/amdgpu: Update EEPROM I2C address for smu v13_0_0 usb: gadget: f_hid: fix report descriptor allocation serial: 8250_dw: Add ACPI ID for Granite Rapids-D UART parport: Add support for Brainboxes IX/UC/PX parallel cards cifs: Fix non-availability of dedup breaking generic/304 Revert "xhci: Loosen RPM as default policy to cover for AMD xHC 1.1" smb: client: fix potential NULL deref in parse_dfs_referrals() usb: typec: class: fix typec_altmode_put_partner to put plugs ARM: PL011: Fix DMA support serial: sc16is7xx: address RX timeout interrupt errata serial: 8250: 8250_omap: Clear UART_HAS_RHR_IT_DIS bit serial: 8250: 8250_omap: Do not start RX DMA on THRI interrupt serial: 8250_omap: Add earlycon support for the AM654 UART controller devcoredump: Send uevent once devcd is ready x86/CPU/AMD: Check vendor in the AMD microcode callback USB: gadget: core: adjust uevent timing on gadget unbind cifs: Fix flushing, invalidation and file size with copy_file_range() cifs: Fix flushing, invalidation and file size with FICLONE MIPS: kernel: Clear FPU states when setting up kernel threads KVM: s390/mm: Properly reset no-dat KVM: SVM: Update EFER software model on CR0 trap for SEV-ES MIPS: Loongson64: Reserve vgabios memory on boot MIPS: Loongson64: Handle more memory types passed from firmware MIPS: Loongson64: Enable DMA noncoherent support netfilter: nft_set_pipapo: skip inactive elements during set walk riscv: Kconfig: Add select ARM_AMBA to SOC_STARFIVE drm/i915/display: Drop check for doublescan mode in modevalid drm/i915/lvds: Use REG_BIT() & co. drm/i915/sdvo: stop caching has_hdmi_monitor in struct intel_sdvo drm/i915: Skip some timing checks on BXT/GLK DSI transcoders Linux 6.1.68 Change-Id: I0a824071a80b24dc4a2e0077f305b7cac42235b8 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-01-05 08:40:52 +00:00
Maurizio Lombardi	387e807759	nvme-pci: fix sleeping function called from interrupt context ... [ Upstream commit f6fe0b2d35457c10ec37acc209d19726bdc16dbd ] the nvme_handle_cqe() interrupt handler calls nvme_complete_async_event() but the latter may call nvme_auth_stop() which is a blocking function. Sleeping functions can't be called in interrupt context BUG: sleeping function called from invalid context in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 0, name: swapper/15 Call Trace: <IRQ> __cancel_work_timer+0x31e/0x460 ? nvme_change_ctrl_state+0xcf/0x3c0 [nvme_core] ? nvme_change_ctrl_state+0xcf/0x3c0 [nvme_core] nvme_complete_async_event+0x365/0x480 [nvme_core] nvme_poll_cq+0x262/0xe50 [nvme] Fix the bug by moving nvme_auth_stop() to fw_act_work (executed by the nvme_wq workqueue) Fixes: f50fff73d6 ("nvme: implement In-Band authentication") Signed-off-by: Maurizio Lombardi <mlombard@redhat.com> Reviewed-by: Jens Axboe <axboe@kernel.dk> Reviewed-by: Sagi Grimberg <sagi@grimberg.me> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-01 12:38:59 +00:00
Hannes Reinecke	1b40f23e70	nvme: catch errors from nvme_configure_metadata() ... [ Upstream commit cd9aed606088d36a7ffff3e808db4e76b1854285 ] nvme_configure_metadata() is issuing I/O, so we might incur an I/O error which will cause the connection to be reset. But in that case any further probing will race with reset and cause UAF errors. So return a status from nvme_configure_metadata() and abort probing if there was an I/O error. Signed-off-by: Hannes Reinecke <hare@suse.de> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-12-20 17:00:22 +01:00
Mark O'Donovan	6cb3741c45	nvme-auth: set explanation code for failure2 msgs ... [ Upstream commit 38ce1570e2c46e7e9af983aa337edd7e43723aa2 ] Some error cases were not setting an auth-failure-reason-code-explanation. This means an AUTH_Failure2 message will be sent with an explanation value of 0 which is a reserved value. Signed-off-by: Mark O'Donovan <shiftee@posteo.net> Reviewed-by: Hannes Reinecke <hare@suse.de> Reviewed-by: Sagi Grimberg <sagi@grimberg.me> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-12-20 17:00:22 +01:00
Greg Kroah-Hartman	6b1e1d37f1	This is the 6.1.66 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmVyywAACgkQONu9yGCS aT420Q//RK1ZeDdGWqAEH84PtuOzFA7gl5aXjmt1r9I1sDFr06ktk9rc67BNo87b Ugubto1UUpM/ZJfpezH1M4DMQ5f67thkRhCv5qvolh80v21duD7G7i1kX3rJsWk1 daJ76RcYXH63/Qv59uT+ADjSIIAH7yF/FGnUSShyznDRwDh/TqujEoh0e25X4YlV MhcCGBS0NE9Rcuwv2XPp84D4psXhPhmOuUVEPVnPLVnXg09XqOVjMV5uW+X4Sqft sc/bzveBmHoPOVtkz71qo1oxsVkKNMcdmD88+Xn9rSBgAkti5MpV/ZCAxRSVZbwF wyBh23gzRQzHXTn45Bf/1wS5zzQ+PIkadCo7hlPbQHguOMGXkdqTgNJf9EwB09I2 DEAWnCNH5orNk0Sltbfo/7Ja2oJtSHkiaUWk4nP1fZN9Vt9yt1xnRkpkaoBh0L7q NmXBFuvrylC44cfQNXIZSqAXduwCvMPyQDm1txSxYDZVrOy82/zVRWcOrytb0PnO zfqSuQKZPoF29ESq2Ti65Zk5e47EjSjYca91gzOlSVBNXx+xTuSoXCL0RXYclT7H umxK5/wmDSQX6wJzd+JNy7H86U753DuSIzA1112IC1GdWNlWWsjca5omEMgt+lqu Xc9q13vg3Ox+tv0MRv+P398b7NwzuMVcLbMoHE+1EzMH0JS636E= =p/en -----END PGP SIGNATURE----- Merge 6.1.66 into android14-6.1-lts Changes in 6.1.66 cifs: Fix FALLOC_FL_ZERO_RANGE by setting i_size if EOF moved cifs: Fix FALLOC_FL_INSERT_RANGE by setting i_size after EOF moved smb: client: report correct st_size for SMB and NFS symlinks pinctrl: avoid reload of p state in list iteration firewire: core: fix possible memory leak in create_units() mmc: sdhci-pci-gli: Disable LPM during initialization mmc: cqhci: Increase recovery halt timeout mmc: cqhci: Warn of halt or task clear failure mmc: cqhci: Fix task clearing in CQE error recovery mmc: block: Retry commands in CQE error recovery mmc: block: Do not lose cache flush during CQE error recovery mmc: block: Be sure to wait while busy in CQE error recovery ALSA: hda: Disable power-save on KONTRON SinglePC ALSA: hda/realtek: Headset Mic VREF to 100% ALSA: hda/realtek: Add supported ALC257 for ChromeOS dm-verity: align struct dm_verity_fec_io properly scsi: Change SCSI device boolean fields to single bit flags scsi: sd: Fix system start for ATA devices drm/amd: Enable PCIe PME from D3 drm/amdgpu: Force order between a read and write to the same address drm/amd/display: Include udelay when waiting for INBOX0 ACK drm/amd/display: Remove min_dst_y_next_start check for Z8 drm/amd/display: Use DRAM speed from validation for dummy p-state drm/amd/display: Update min Z8 residency time to 2100 for DCN314 drm/amd/display: fix ABM disablement dm verity: initialize fec io before freeing it dm verity: don't perform FEC for failed readahead IO nvme: check for valid nvme_identify_ns() before using it powercap: DTPM: Fix unneeded conversions to micro-Watts cpufreq/amd-pstate: Fix the return value of amd_pstate_fast_switch() dma-buf: fix check in dma_resv_add_fence bcache: revert replacing IS_ERR_OR_NULL with IS_ERR iommu/vt-d: Add MTL to quirk list to skip TE disabling KVM: PPC: Book3S HV: Fix KVM_RUN clobbering FP/VEC user registers powerpc: Don't clobber f0/vs0 during fp|altivec register save parisc: Mark ex_table entries 32-bit aligned in assembly.h parisc: Mark ex_table entries 32-bit aligned in uaccess.h parisc: Use natural CPU alignment for bug_table parisc: Mark lock_aligned variables 16-byte aligned on SMP parisc: Drop the HP-UX ENOSYM and EREMOTERELEASE error codes parisc: Mark jump_table naturally aligned parisc: Ensure 32-bit alignment on parisc unwind section parisc: Mark altinstructions read-only and 32-bit aligned btrfs: add dmesg output for first mount and last unmount of a filesystem btrfs: ref-verify: fix memory leaks in btrfs_ref_tree_mod() btrfs: fix off-by-one when checking chunk map includes logical address btrfs: send: ensure send_fd is writable btrfs: make error messages more clear when getting a chunk map btrfs: fix 64bit compat send ioctl arguments not initializing version member Input: xpad - add HyperX Clutch Gladiate Support auxdisplay: hd44780: move cursor home after clear display command serial: sc16is7xx: Put IOControl register into regmap_volatile serial: sc16is7xx: add missing support for rs485 devicetree properties wifi: cfg80211: fix CQM for non-range use USB: xhci-plat: fix legacy PHY double init USB: core: Change configuration warnings to notices usb: config: fix iteration issue in 'usb_get_bos_descriptor()' ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet dpaa2-eth: increase the needed headroom to account for alignment uapi: propagate __struct_group() attributes to the container union selftests/net: ipsec: fix constant out of range selftests/net: fix a char signedness issue selftests/net: unix: fix unused variable compiler warning selftests/net: mptcp: fix uninitialized variable warnings octeontx2-af: Fix possible buffer overflow net: stmmac: xgmac: Disable FPE MMC interrupts octeontx2-pf: Fix adding mbox work queue entry when num_vfs > 64 octeontx2-af: Install TC filter rules in hardware based on priority octeontx2-pf: Restore TC ingress police rules when interface is up r8169: prevent potential deadlock in rtl8169_close ravb: Fix races between ravb_tx_timeout_work() and net related ops net: ravb: Check return value of reset_control_deassert() net: ravb: Use pm_runtime_resume_and_get() net: ravb: Make write access to CXR35 first before accessing other EMAC registers net: ravb: Start TX queues after HW initialization succeeded net: ravb: Stop DMA in case of failures on ravb_open() net: ravb: Keep reverse order of operations in ravb_remove() KVM: x86: Fix lapic timer interrupt lost after loading a snapshot. PCI: Lengthen reset delay for VideoPropulsion Torrent QN16e card octeontx2-af: Initialize 'cntr_val' to fix uninitialized symbol error PCI: qcom-ep: Add dedicated callback for writing to DBI2 registers fbdev: stifb: Make the STI next font pointer a 32-bit signed offset spi: Fix null dereference on suspend drm/amd/display: Restore rptr/wptr for DMCUB as workaround drm/amd/display: Guard against invalid RPTR/WPTR being set cpufreq: imx6q: don't warn for disabling a non-existing frequency cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily iommu/vt-d: Omit devTLB invalidation requests when TES=0 iommu/vt-d: Allocate pasid table in device probe path iommu/vt-d: Add device_block_translation() helper iommu/vt-d: Disable PCI ATS in legacy passthrough mode iommu/vt-d: Make context clearing consistent with context mapping drm/amd/pm: fix a memleak in aldebaran_tables_init mmc: core: add helpers mmc_regulator_enable/disable_vqmmc mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled drm/amd/display: Expand kernel doc for DC drm/amd/display: clean code-style issues in dcn30_set_mpc_shaper_3dlut drm/amd/display: Fix the delta clamping for shaper LUT drm/amd/display: Fix MPCC 1DLUT programming r8169: disable ASPM in case of tx timeout r8169: fix deadlock on RTL8125 in jumbo mtu mode xen: Allow platform PCI interrupt to be shared xen: simplify evtchn_do_upcall() call maze x86/xen: fix percpu vcpu_info allocation x86/apic/msi: Fix misconfigured non-maskable MSI quirk iomap: update ki_pos a little later in iomap_dio_complete Linux 6.1.66 Note, this merge point merges out the following two scsi changes due to them needing to be reverted due to abi breakage and reliance on previous commits that we have already reverted: cebccbe801 ("scsi: sd: Fix system start for ATA devices") 181fd67dc5 ("scsi: Change SCSI device boolean fields to single bit flags") Also the following commit was manually reverted as part of the merge point due to it conflicting with other changes in the tree AND it being automatically reverted in later LTS releases due to it being broken: 307a6525c8 ("wifi: cfg80211: fix CQM for non-range use") Change-Id: I37b08dcf2259de8b2a29a5afc5cbc4bbd08e739a Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-12-14 12:51:15 +00:00
Greg Kroah-Hartman	157836a2ab	This is the 6.1.65 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmVsIPcACgkQONu9yGCS aT7+WBAAzFMBvadFg+miHsQM+j94gOCSSq4F01gjjchdyeB3ybE/CBfIEa9abfmZ X1qaor8H7Khxh0aPr4KiRsmjKXBGJ6lR1RjdOKeLwffs/1iUk1zHqC3V4jGELhAM WumR5Lyc1UOMA5oCk/oxGoDZ0YNzXwBwB3hTrhpvuogCw8A3qMiyzo7J928PmNr9 sPo2TDi8HvQLlOZ8G9omVP9FTK20owJvfAj1u+gJyN/NGVXGqAQSvDpdhZ6BMYNG 0Z6DlMdCkOF/iSCdsZBCwPXH697Qt4pkPoeYpqNEi9H54B/LQaRDg6K5z7ON+w+7 jH9gwwSUXZLsohdpVkPWTnUThAQJDK4Wr5Pnf3GN1avePyxW4X7meathyeqP4jxD Oc8Igh464VraTunddwHJ03paoZ8/jXkheB0kxIsJ/jeKqUzxb/7gC6aYKZ3+DF3a 0WicxlLCNTeai2zJCYPiQsxejJmwQ37PU6dcZzLyZefXqIVPBmLJ72HJ8j2zocm0 zY6ezASdUjzzTQIM3CuzJfTOJ0VSeaUnyqUK64Ye7cKbiAKRbZMiSjaTfoNRo9MP 8KasX7pEzyEjpO0rtpHKc0hM7imltXsYjcdDfJYkKBXSUMWRTI/wPH9RFE4sJHqh NmEG/8bAE0v6HaQJK83lEMHZJFGFTvXWySsXowU4gXpcw82/F54= =OY6r -----END PGP SIGNATURE----- Merge 6.1.65 into android14-6.1-lts Changes in 6.1.65 afs: Fix afs_server_list to be cleaned up with RCU afs: Make error on cell lookup failure consistent with OpenAFS drm/panel: boe-tv101wum-nl6: Fine tune the panel power sequence drm/panel: auo,b101uan08.3: Fine tune the panel power sequence drm/panel: simple: Fix Innolux G101ICE-L01 bus flags drm/panel: simple: Fix Innolux G101ICE-L01 timings wireguard: use DEV_STATS_INC() octeontx2-pf: Fix memory leak during interface down ata: pata_isapnp: Add missing error check for devm_ioport_map() drm/i915: do not clean GT table on error path drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full HID: fix HID device resource race between HID core and debugging support ipv4: Correct/silence an endian warning in __ip_do_redirect net: usb: ax88179_178a: fix failed operations during ax88179_reset net/smc: avoid data corruption caused by decline arm/xen: fix xen_vcpu_info allocation alignment octeontx2-pf: Fix ntuple rule creation to direct packet to VF with higher Rx queue than its PF amd-xgbe: handle corner-case during sfp hotplug amd-xgbe: handle the corner-case during tx completion amd-xgbe: propagate the correct speed and duplex status net: axienet: Fix check for partial TX checksum afs: Return ENOENT if no cell DNS record can be found afs: Fix file locking on R/O volumes to operate in local mode mm,kfence: decouple kfence from page granularity mapping judgement arm64: mm: Fix "rodata=on" when CONFIG_RODATA_FULL_DEFAULT_ENABLED=y i40e: use ERR_PTR error print in i40e messages i40e: Fix adding unsupported cloud filters nvmet: nul-terminate the NQNs passed in the connect command USB: dwc3: qcom: fix resource leaks on probe deferral USB: dwc3: qcom: fix ACPI platform device leak lockdep: Fix block chain corruption cifs: minor cleanup of some headers smb3: allow dumping session and tcon id to improve stats analysis and debugging cifs: print last update time for interface list cifs: distribute channels across interfaces based on speed cifs: account for primary channel in the interface list cifs: fix leak of iface for primary channel MIPS: KVM: Fix a build warning about variable set but not used media: camss: Split power domain management media: camss: Convert to platform remove callback returning void media: qcom: Initialise V4L2 async notifier later media: qcom: camss: Fix V4L2 async notifier error path media: qcom: camss: Fix genpd cleanup ext4: add a new helper to check if es must be kept ext4: factor out __es_alloc_extent() and __es_free_extent() ext4: use pre-allocated es in __es_insert_extent() ext4: use pre-allocated es in __es_remove_extent() ext4: using nofail preallocation in ext4_es_remove_extent() ext4: using nofail preallocation in ext4_es_insert_delayed_block() ext4: using nofail preallocation in ext4_es_insert_extent() ext4: fix slab-use-after-free in ext4_es_insert_extent() ext4: make sure allocate pending entry not fail NFSD: Fix "start of NFS reply" pointer passed to nfsd_cache_update() NFSD: Fix checksum mismatches in the duplicate reply cache arm64: dts: imx8mn-var-som: add 20ms delay to ethernet regulator enable ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA swiotlb-xen: provide the "max_mapping_size" method bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in btree_gc_coalesce() md: fix bi_status reporting in md_end_clone_io bcache: fixup multi-threaded bch_sectors_dirty_init() wake-up race io_uring/fs: consider link->flags when getting path for LINKAT s390/dasd: protect device queue against concurrent access USB: serial: option: add Luat Air72*U series products hv_netvsc: fix race of netvsc and VF register_netdevice hv_netvsc: Fix race of register_netdevice_notifier and VF register hv_netvsc: Mark VF as slave before exposing it to user-mode dm-delay: fix a race between delay_presuspend and delay_bio bcache: check return value from btree_node_alloc_replacement() bcache: prevent potential division by zero error bcache: fixup init dirty data errors bcache: fixup lock c->root error usb: cdnsp: Fix deadlock issue during using NCM gadget USB: serial: option: add Fibocom L7xx modules USB: serial: option: fix FM101R-GL defines USB: serial: option: don't claim interface 4 for ZTE MF290 usb: typec: tcpm: Skip hard reset when in error recovery USB: dwc2: write HCINT with INTMASK applied usb: dwc3: Fix default mode initialization usb: dwc3: set the dma max_seg_size USB: dwc3: qcom: fix software node leak on probe errors USB: dwc3: qcom: fix wakeup after probe deferral io_uring: fix off-by one bvec index Linux 6.1.65 Change-Id: Iea9267bee56905028a77d03c7fad8def8969246e Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-12-14 12:20:03 +00:00
Georg Gottleuber	8bba38f7a0	nvme-pci: Add sleep quirk for Kingston drives ... commit 107b4e063d78c300b21e2d5291b1aa94c514ea5b upstream. Some Kingston NV1 and A2000 are wasting a lot of power on specific TUXEDO platforms in s2idle sleep if 'Simple Suspend' is used. This patch applies a new quirk 'Force No Simple Suspend' to achieve a low power sleep without 'Simple Suspend'. Signed-off-by: Werner Sembach <wse@tuxedocomputers.com> Signed-off-by: Georg Gottleuber <ggo@tuxedocomputers.com> Cc: <stable@vger.kernel.org> Reviewed-by: Christoph Hellwig <hch@lst.de> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-12-13 18:39:17 +01:00
Ewan D. Milne	a62ca58bb3	nvme: check for valid nvme_identify_ns() before using it ... commit d8b90d600aff181936457f032d116dbd8534db06 upstream. When scanning namespaces, it is possible to get valid data from the first call to nvme_identify_ns() in nvme_alloc_ns(), but not from the second call in nvme_update_ns_info_block(). In particular, if the NSID becomes inactive between the two commands, a storage device may return a buffer filled with zero as per 4.1.5.1. In this case, we can get a kernel crash due to a divide-by-zero in blk_stack_limits() because ns->lba_shift will be set to zero. PID: 326 TASK: ffff95fec3cd8000 CPU: 29 COMMAND: "kworker/u98:10" #0 [ffffad8f8702f9e0] machine_kexec at ffffffff91c76ec7 #1 [ffffad8f8702fa38] __crash_kexec at ffffffff91dea4fa #2 [ffffad8f8702faf8] crash_kexec at ffffffff91deb788 #3 [ffffad8f8702fb00] oops_end at ffffffff91c2e4bb #4 [ffffad8f8702fb20] do_trap at ffffffff91c2a4ce #5 [ffffad8f8702fb70] do_error_trap at ffffffff91c2a595 #6 [ffffad8f8702fbb0] exc_divide_error at ffffffff928506e6 #7 [ffffad8f8702fbd0] asm_exc_divide_error at ffffffff92a00926 [exception RIP: blk_stack_limits+434] RIP: ffffffff92191872 RSP: ffffad8f8702fc80 RFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff95efa0c91800 RCX: 0000000000000001 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 RBP: 00000000ffffffff R8: ffff95fec7df35a8 R9: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: ffff95fed33c09a8 ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018 #8 [ffffad8f8702fce0] nvme_update_ns_info_block at ffffffffc06d3533 [nvme_core] #9 [ffffad8f8702fd18] nvme_scan_ns at ffffffffc06d6fa7 [nvme_core] This happened when the check for valid data was moved out of nvme_identify_ns() into one of the callers. Fix this by checking in both callers. Link: https://bugzilla.kernel.org/show_bug.cgi?id=218186 Fixes: 0dd6fff2aad4 ("nvme: bring back auto-removal of deleted namespaces during sequential scan") Cc: stable@vger.kernel.org Signed-off-by: Ewan D. Milne <emilne@redhat.com> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-12-08 08:51:15 +01:00
Christoph Hellwig	0e485f12eb	nvmet: nul-terminate the NQNs passed in the connect command ... [ Upstream commit 1c22e0295a5eb571c27b53c7371f95699ef705ff ] The host and subsystem NQNs are passed in the connect command payload and interpreted as nul-terminated strings. Ensure they actually are nul-terminated before using them. Fixes: a07b4970f4 "nvmet: add a generic NVMe target") Reported-by: Alon Zahavi <zahavi.alon@gmail.com> Reviewed-by: Chaitanya Kulkarni <kch@nvidia.com> Signed-off-by: Christoph Hellwig <hch@lst.de> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-12-03 07:32:09 +01:00
Greg Kroah-Hartman	2b3ea8bdef	This is the 6.1.63 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmVbOmsACgkQONu9yGCS aT5m1RAAx7hgbFDnLHCGh4YVBbNy8JngItsUBaJcI/67Mk5toNi0x8pqcS8mq7ED GTwRnRcKaIR2bTyco5Ed2OZn4jMCyHC4oiyBZnHWg6AMuQjSCYzIgm7DzlTCVYZ7 2r8uRbt/uXADTILJ2kwR2mtVpGcwrXa+lsHrMqvt+MvNwRoSVHBHVVYCrAc+JXwR GXCopzV/RFGS6w4SBsX0K+8pV7GO+bhpxJ1lPz1T/xeLYfT4C3EwSTWDbUXPbez7 IpJ+5yKJXXT9Xn9m/pekwZ/aOirLqtEbDxneEctsjvw140lCoQiEZn6ZRscgNEns 3H+J3Asgc2zXqPzfZFH02TebPj31B8HZ43Upu0okr0hr4A4/4JL9pjXEhm1bON/Z x3jlTF4dyay4vOGGIEYOAuJSUbn6AqpZ318uBWCd3BSPocihEDMJz2aoazVHcb6k 83MVxfFfEL6s9utcoSXB8VjHa4FQmpMYsozegloUSJJCsizgdzmih0buJYhBB9sI HbEohW+YAh3cACSn6arXUJIMH5F5xsfD89od2Pj+6UrapdlPz5gCaggA1RZplCho bjGc1k61Rp2qSdfMEcx+h4ypgoOdhgqZI0YhYDCgBSRcWOXnGrDjFvnnumatcT+H 6vqyX6zlNt6U1NpE56Jtf7gt1Ds6PeoadD0L6B8vjXrkdeXOlUU= =AZ9s -----END PGP SIGNATURE----- Merge 6.1.63 into android14-6.1-lts Changes in 6.1.63 hwmon: (nct6775) Fix incorrect variable reuse in fan_div calculation sched/fair: Fix cfs_rq_is_decayed() on !SMP iov_iter, x86: Be consistent about the __user tag on copy_mc_to_user() sched/uclamp: Set max_spare_cap_cpu even if max_spare_cap is 0 sched/uclamp: Ignore (util == 0) optimization in feec() when p_util_max = 0 objtool: Propagate early errors sched: Fix stop_one_cpu_nowait() vs hotplug vfs: fix readahead(2) on block devices writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs x86/srso: Fix SBPB enablement for (possible) future fixed HW futex: Don't include process MM in futex key on no-MMU x86/numa: Introduce numa_fill_memblks() ACPI/NUMA: Apply SRAT proximity domain to entire CFMWS window x86/sev-es: Allow copy_from_kernel_nofault() in earlier boot x86/boot: Fix incorrect startup_gdt_descr.size drivers/clocksource/timer-ti-dm: Don't call clk_get_rate() in stop function pstore/platform: Add check for kstrdup string: Adjust strtomem() logic to allow for smaller sources genirq/matrix: Exclude managed interrupts in irq_matrix_allocated() wifi: cfg80211: add flush functions for wiphy work wifi: mac80211: move radar detect work to wiphy work wifi: mac80211: move scan work to wiphy work wifi: mac80211: move offchannel works to wiphy work wifi: mac80211: move sched-scan stop work to wiphy work wifi: mac80211: fix # of MSDU in A-MSDU calculation wifi: iwlwifi: honor the enable_ini value i40e: fix potential memory leaks in i40e_remove() iavf: Fix promiscuous mode configuration flow messages selftests/bpf: Correct map_fd to data_fd in tailcalls udp: add missing WRITE_ONCE() around up->encap_rcv tcp: call tcp_try_undo_recovery when an RTOd TFO SYNACK is ACKed gve: Use size_add() in call to struct_size() mlxsw: Use size_mul() in call to struct_size() tls: Only use data field in crypto completion function tls: Use size_add() in call to struct_size() tipc: Use size_add() in calls to struct_size() net: spider_net: Use size_add() in call to struct_size() net: ethernet: mtk_wed: fix EXT_INT_STATUS_RX_FBUF definitions for MT7986 SoC wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file() wifi: ath11k: fix boot failure with one MSI vector wifi: mt76: mt7603: rework/fix rx pse hang check wifi: mt76: mt7603: improve watchdog reset reliablity wifi: mt76: mt7603: improve stuck beacon handling wifi: mt76: mt7915: fix beamforming availability check wifi: ath: dfs_pattern_detector: Fix a memory initialization issue tcp_metrics: add missing barriers on delete tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics() tcp_metrics: do not create an entry from tcp_init_metrics() wifi: rtlwifi: fix EDCA limit set by BT coexistence ACPI: property: Allow _DSD buffer data only for byte accessors ACPI: video: Add acpi_backlight=vendor quirk for Toshiba Portégé R100 wifi: ath11k: fix Tx power value during active CAC can: dev: can_restart(): don't crash kernel if carrier is OK can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds PM / devfreq: rockchip-dfi: Make pmu regmap mandatory wifi: wfx: fix case where rates are out of order netfilter: nf_tables: Drop pointless memset when dumping rules thermal: core: prevent potential string overflow r8169: use tp_to_dev instead of open code r8169: fix rare issue with broken rx after link-down on RTL8125 selftests: netfilter: test for sctp collision processing in nf_conntrack net: skb_find_text: Ignore patterns extending past 'to' chtls: fix tp->rcv_tstamp initialization tcp: fix cookie_init_timestamp() overflows wifi: iwlwifi: call napi_synchronize() before freeing rx/tx queues wifi: iwlwifi: pcie: synchronize IRQs before NAPI wifi: iwlwifi: empty overflow queue during flush Bluetooth: hci_sync: Fix Opcode prints in bt_dev_dbg/err bpf: Fix unnecessary -EBUSY from htab_lock_bucket ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() ipv6: avoid atomic fragment on GSO packets net: add DEV_STATS_READ() helper ipvlan: properly track tx_errors regmap: debugfs: Fix a erroneous check after snprintf() spi: tegra: Fix missing IRQ check in tegra_slink_probe() clk: qcom: gcc-msm8996: Remove RPM bus clocks clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies clk: qcom: mmcc-msm8998: Don't check halt bit on some branch clks clk: qcom: mmcc-msm8998: Fix the SMMU GDSC clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src regulator: mt6358: Fail probe on unknown chip ID clk: imx: Select MXC_CLK for CLK_IMX8QXP clk: imx: imx8mq: correct error handling path clk: imx: imx8qxp: Fix elcdif_pll clock clk: renesas: rcar-gen3: Extend SDnH divider table clk: renesas: rzg2l: Wait for status bit of SD mux before continuing clk: renesas: rzg2l: Lock around writes to mux register clk: renesas: rzg2l: Trust value returned by hardware clk: renesas: rzg2l: Use FIELD_GET() for PLL register fields clk: renesas: rzg2l: Fix computation formula clk: linux/clk-provider.h: fix kernel-doc warnings and typos spi: nxp-fspi: use the correct ioremap function clk: keystone: pll: fix a couple NULL vs IS_ERR() checks clk: ti: change ti_clk_register[_omap_hw]() API clk: ti: fix double free in of_ti_divider_clk_setup() clk: npcm7xx: Fix incorrect kfree clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data clk: qcom: config IPQ_APSS_6018 should depend on QCOM_SMEM platform/x86: wmi: Fix probe failure when failing to register WMI devices platform/x86: wmi: Fix opening of char device hwmon: (axi-fan-control) Fix possible NULL pointer dereference hwmon: (coretemp) Fix potentially truncated sysfs attribute name Revert "hwmon: (sch56xx-common) Add DMI override table" Revert "hwmon: (sch56xx-common) Add automatic module loading on supported devices" hwmon: (sch5627) Use bit macros when accessing the control register hwmon: (sch5627) Disallow write access if virtual registers are locked hte: tegra: Fix missing error code in tegra_hte_test_probe() drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs drm/rockchip: vop: Fix call to crtc reset helper drm/rockchip: vop2: Don't crash for invalid duplicate_state drm/rockchip: vop2: Add missing call to crtc reset helper drm/radeon: possible buffer overflow drm: bridge: it66121: Fix invalid connector dereference drm/bridge: lt8912b: Add hot plug detection drm/bridge: lt8912b: Fix bridge_detach drm/bridge: lt8912b: Fix crash on bridge detach drm/bridge: lt8912b: Manually disable HPD only if it was enabled drm/bridge: lt8912b: Add missing drm_bridge_attach call drm/bridge: tc358768: Fix use of uninitialized variable drm/bridge: tc358768: Fix bit updates drm/bridge: tc358768: remove unused variable drm/bridge: tc358768: Use struct videomode drm/bridge: tc358768: Print logical values, not raw register values drm/bridge: tc358768: Use dev for dbg prints, not priv->dev drm/bridge: tc358768: Rename dsibclk to hsbyteclk drm/bridge: tc358768: Clean up clock period code drm/bridge: tc358768: Fix tc358768_ns_to_cnt() drm/amdkfd: fix some race conditions in vram buffer alloc/free of svm code drm/amd/display: Check all enabled planes in dm_check_crtc_cursor drm/amd/display: Refactor dm_get_plane_scale helper drm/amd/display: Bail from dm_check_crtc_cursor if no relevant change io_uring/kbuf: Fix check of BID wrapping in provided buffers io_uring/kbuf: Allow the full buffer id space for provided buffers drm/mediatek: Fix iommu fault by swapping FBs after updating plane state drm/mediatek: Fix iommu fault during crtc enabling drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe() gpu: host1x: Correct allocated size for contexts drm/bridge: lt9611uxc: fix the race in the error path arm64/arm: xen: enlighten: Fix KPTI checks drm/rockchip: Fix type promotion bug in rockchip_gem_iommu_map() xenbus: fix error exit in xenbus_init() xen-pciback: Consider INTx disabled when MSI/MSI-X is enabled drm/msm/dsi: use msm_gem_kernel_put to free TX buffer drm/msm/dsi: free TX buffer in unbind clocksource/drivers/arm_arch_timer: limit XGene-1 workaround drm: mediatek: mtk_dsi: Fix NO_EOT_PACKET settings/handling drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process perf/arm-cmn: Revamp model detection perf/arm-cmn: Fix DTC domain detection drivers/perf: hisi_pcie: Check the type first in pmu::event_init() perf: hisi: Fix use-after-free when register pmu fails ARM: dts: renesas: blanche: Fix typo in GP_11_2 pin name arm64: dts: qcom: sdm845: cheza doesn't support LMh node arm64: dts: qcom: sc7280: link usb3_phy_wrapper_gcc_usb30_pipe_clk arm64: dts: qcom: msm8916: Fix iommu local address range arm64: dts: qcom: msm8992-libra: drop duplicated reserved memory arm64: dts: qcom: sc7280: Add missing LMH interrupts arm64: dts: qcom: sm8150: add ref clock to PCIe PHYs arm64: dts: qcom: sm8350: fix pinctrl for UART18 arm64: dts: qcom: sdm845-mtp: fix WiFi configuration ARM64: dts: marvell: cn9310: Use appropriate label for spi1 pins arm64: dts: qcom: apq8016-sbc: Add missing ADV7533 regulators ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator soc: qcom: llcc: Handle a second device without data corruption kunit: Fix missed memory release in kunit_free_suite_set() firmware: ti_sci: Mark driver as non removable arm64: dts: ti: k3-am62a7-sk: Drop i2c-1 to 100Khz firmware: arm_ffa: Assign the missing IDR allocation ID to the FFA device firmware: arm_ffa: Allow the FF-A drivers to use 32bit mode of messaging ARM: dts: am3517-evm: Fix LED3/4 pinmux clk: scmi: Free scmi_clk allocated when the clocks with invalid info are skipped arm64: dts: imx8qm-ss-img: Fix jpegenc compatible entry arm64: dts: imx8mm: Add sound-dai-cells to micfil node arm64: dts: imx8mn: Add sound-dai-cells to micfil node arm64: tegra: Use correct interrupts for Tegra234 TKE selftests/pidfd: Fix ksft print formats selftests/resctrl: Ensure the benchmark commands fits to its array module/decompress: use vmalloc() for gzip decompression workspace ASoC: cs35l41: Verify PM runtime resume errors in IRQ handler ASoC: cs35l41: Undo runtime PM changes at driver exit time ALSA: hda: cs35l41: Fix unbalanced pm_runtime_get() ALSA: hda: cs35l41: Undo runtime PM changes at driver exit time KEYS: Include linux/errno.h in linux/verification.h crypto: hisilicon/hpre - Fix a erroneous check after snprintf() hwrng: bcm2835 - Fix hwrng throughput regression hwrng: geode - fix accessing registers RDMA/core: Use size_{add,sub,mul}() in calls to struct_size() crypto: qat - ignore subsequent state up commands crypto: qat - relocate bufferlist logic crypto: qat - rename bufferlist functions crypto: qat - change bufferlist logic interface crypto: qat - generalize crypto request buffers crypto: qat - extend buffer list interface crypto: qat - fix unregistration of crypto algorithms scsi: ibmvfc: Fix erroneous use of rtas_busy_delay with hcall return code libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value nd_btt: Make BTT lanes preemptible crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure crypto: caam/jr - fix Chacha20 + Poly1305 self test failure crypto: qat - increase size of buffers PCI: vmd: Correct PCI Header Type Register's multi-function check hid: cp2112: Fix duplicate workqueue initialization crypto: hisilicon/qm - delete redundant null assignment operations crypto: hisilicon/qm - modify the process of regs dfx crypto: hisilicon/qm - split a debugfs.c from qm crypto: hisilicon/qm - fix PF queue parameter issue ARM: 9321/1: memset: cast the constant byte to unsigned char ext4: move 'ix' sanity check to corrent position ASoC: fsl: mpc5200_dma.c: Fix warning of Function parameter or member not described IB/mlx5: Fix rdma counter binding for RAW QP RDMA/hns: Fix printing level of asynchronous events RDMA/hns: Fix uninitialized ucmd in hns_roce_create_qp_common() RDMA/hns: Fix signed-unsigned mixed comparisons RDMA/hns: Add check for SL RDMA/hns: The UD mode can only be configured with DCQCN ASoC: SOF: core: Ensure sof_ops_free() is still called when probe never ran. ASoC: fsl: Fix PM disable depth imbalance in fsl_easrc_probe scsi: ufs: core: Leave space for '\0' in utf8 desc string RDMA/hfi1: Workaround truncation compilation error HID: cp2112: Make irq_chip immutable hid: cp2112: Fix IRQ shutdown stopping polling for all IRQs on chip sh: bios: Revive earlyprintk support Revert "HID: logitech-hidpp: add a module parameter to keep firmware gestures" HID: logitech-hidpp: Remove HIDPP_QUIRK_NO_HIDINPUT quirk HID: logitech-hidpp: Don't restart IO, instead defer hid_connect() only HID: logitech-hidpp: Revert "Don't restart communication if not necessary" HID: logitech-hidpp: Move get_wireless_feature_index() check to hidpp_connect_event() ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails padata: Fix refcnt handling in padata_free_shell() crypto: qat - fix deadlock in backlog processing ASoC: ams-delta.c: use component after check IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF mfd: core: Un-constify mfd_cell.of_reg mfd: core: Ensure disabled devices are skipped without aborting mfd: dln2: Fix double put in dln2_probe dt-bindings: mfd: mt6397: Add binding for MT6357 dt-bindings: mfd: mt6397: Split out compatible for MediaTek MT6366 PMIC mfd: arizona-spi: Set pdata.hpdet_channel for ACPI enumerated devs leds: turris-omnia: Drop unnecessary mutex locking leds: turris-omnia: Do not use SMBUS calls leds: pwm: Don't disable the PWM when the LED should be off leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu' kunit: add macro to allow conditionally exposing static symbols to tests apparmor: test: make static symbols visible during kunit testing apparmor: fix invalid reference on profile->disconnected perf stat: Fix aggr mode initialization iio: frequency: adf4350: Use device managed functions and fix power down issue. perf kwork: Fix incorrect and missing free atom in work_push_atom() perf kwork: Add the supported subcommands to the document perf kwork: Set ordered_events to true in 'struct perf_tool' filemap: add filemap_get_folios_tag() f2fs: convert f2fs_write_cache_pages() to use filemap_get_folios_tag() f2fs: compress: fix deadloop in f2fs_write_cache_pages() f2fs: compress: fix to avoid use-after-free on dic f2fs: compress: fix to avoid redundant compress extension tty: tty_jobctrl: fix pid memleak in disassociate_ctty() livepatch: Fix missing newline character in klp_resolve_symbols() pinctrl: renesas: rzg2l: Make reverse order of enable() for disable() perf record: Fix BTF type checks in the off-cpu profiling dmaengine: idxd: Register dsa_bus_type before registering idxd sub-drivers usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency usb: chipidea: Fix DMA overwrite for Tegra usb: chipidea: Simplify Tegra DMA alignment code dmaengine: ti: edma: handle irq_of_parse_and_map() errors misc: st_core: Do not call kfree_skb() under spin_lock_irqsave() tools: iio: iio_generic_buffer ensure alignment USB: usbip: fix stub_dev hub disconnect dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc() f2fs: fix to initialize map.m_pblk in f2fs_precache_extents() interconnect: qcom: sc7180: Retire DEFINE_QBCM interconnect: qcom: sc7180: Set ACV enable_mask interconnect: qcom: sc7280: Set ACV enable_mask interconnect: qcom: sc8180x: Set ACV enable_mask interconnect: qcom: sc8280xp: Set ACV enable_mask interconnect: qcom: sdm845: Retire DEFINE_QBCM interconnect: qcom: sdm845: Set ACV enable_mask interconnect: qcom: sm6350: Retire DEFINE_QBCM interconnect: qcom: sm6350: Set ACV enable_mask interconnect: move ignore_list out of of_count_icc_providers() interconnect: qcom: sm8150: Drop IP0 interconnects interconnect: qcom: sm8150: Retire DEFINE_QBCM interconnect: qcom: sm8150: Set ACV enable_mask interconnect: qcom: sm8350: Retire DEFINE_QBCM interconnect: qcom: sm8350: Set ACV enable_mask powerpc: Only define __parse_fpscr() when required modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host modpost: fix ishtp MODULE_DEVICE_TABLE built on big-endian host powerpc/40x: Remove stale PTE_ATOMIC_UPDATES macro powerpc/xive: Fix endian conversion size powerpc/vas: Limit open window failure messages in log bufffer powerpc/imc-pmu: Use the correct spinlock initializer. powerpc/pseries: fix potential memory leak in init_cpu_associativity() xhci: Loosen RPM as default policy to cover for AMD xHC 1.1 usb: host: xhci-plat: fix possible kernel oops while resuming perf machine: Avoid out of bounds LBR memory read perf hist: Add missing puts to hist__account_cycles 9p/net: fix possible memory leak in p9_check_errors() i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs cxl/mem: Fix shutdown order crypto: ccp - Name -1 return value as SEV_RET_NO_FW_CALL x86/sev: Change snp_guest_issue_request()'s fw_err argument virt: sevguest: Fix passing a stack buffer as a scatterlist target rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call pcmcia: cs: fix possible hung task and memory leak pccardd() pcmcia: ds: fix refcount leak in pcmcia_device_add() pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() media: hantro: Check whether reset op is defined before use media: verisilicon: Do not enable G2 postproc downscale if source is narrower than destination media: ov5640: Drop dead code using frame_interval media: ov5640: fix vblank unchange issue when work at dvp mode media: i2c: max9286: Fix some redundant of_node_put() calls media: ov5640: Fix a memory leak when ov5640_probe fails media: bttv: fix use after free error due to btv->timeout timer media: amphion: handle firmware debug message media: mtk-jpegenc: Fix bug in JPEG encode quality selection media: s3c-camif: Avoid inappropriate kfree() media: vidtv: psi: Add check for kstrdup media: vidtv: mux: Add check and kfree for kstrdup media: cedrus: Fix clock/reset sequence media: cadence: csi2rx: Unregister v4l2 async notifier media: dvb-usb-v2: af9035: fix missing unlock media: cec: meson: always include meson sub-directory in Makefile regmap: prevent noinc writes from clobbering cache pwm: sti: Reduce number of allocations and drop usage of chip_data pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() watchdog: ixp4xx: Make sure restart always works llc: verify mac len before reading mac header hsr: Prevent use after free in prp_create_tagged_frame() tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING bpf: Check map->usercnt after timer->timer is assigned inet: shrink struct flowi_common octeontx2-pf: Fix error codes octeontx2-pf: Fix holes in error code net: page_pool: add missing free_percpu when page_pool_init fail dccp: Call security_inet_conn_request() after setting IPv4 addresses. dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses. net: r8169: Disable multicast filter for RTL8168H and RTL8107E Fix termination state for idr_for_each_entry_ul() net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs selftests: pmtu.sh: fix result checking octeontx2-pf: Rename tot_tx_queues to non_qos_queues octeontx2-pf: qos send queues management octeontx2-pf: Free pending and dropped SQEs net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT net/smc: allow cdc msg send rather than drop it with NULL sndbuf_desc net/smc: put sk reference if close work was canceled nvme: fix error-handling for io_uring nvme-passthrough tg3: power down device only on SYSTEM_POWER_OFF nbd: fix uaf in nbd_open blk-core: use pr_warn_ratelimited() in bio_check_ro() virtio/vsock: replace virtio_vsock_pkt with sk_buff vsock/virtio: remove socket from connected/bound list on shutdown r8169: respect userspace disabling IFF_MULTICAST i2c: iproc: handle invalid slave state netfilter: xt_recent: fix (increase) ipv6 literal buffer length netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate eval call-backs netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses RISC-V: Don't fail in riscv_of_parent_hartid() for disabled HARTs drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE ASoC: mediatek: mt8186_mt6366_rt1019_rt5682s: trivial: fix error messages ASoC: hdmi-codec: register hpd callback on component probe ASoC: dapm: fix clock get name spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies fbdev: imsttfb: Fix error path of imsttfb_probe() fbdev: imsttfb: fix a resource leak in probe fbdev: fsl-diu-fb: mark wr_reg_wa() static tracing/kprobes: Fix the order of argument descriptions io_uring/net: ensure socket is marked connected on connect retry x86/amd_nb: Use Family 19h Models 60h-7Fh Function 4 IDs Revert "mmc: core: Capture correct oemid-bits for eMMC cards" btrfs: use u64 for buffer sizes in the tree search ioctls wifi: cfg80211: fix kernel-doc for wiphy_delayed_work_flush() virtio/vsock: don't use skbuff state to account credit virtio/vsock: remove redundant 'skb_pull()' call virtio/vsock: don't drop skbuff on copy failure vsock/loopback: use only sk_buff_head.lock to protect the packet queue virtio/vsock: fix leaks due to missing skb owner virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt() virtio/vsock: fix header length on skb merging Linux 6.1.63 Change-Id: I87b7a539b11c90cfaf16edb07d613f74d54458a4 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-11-27 16:59:46 +00:00
Anuj Gupta	2dbafb0081	nvme: fix error-handling for io_uring nvme-passthrough ... [ Upstream commit 1147dd0503564fa0e03489a039f9e0c748a03db4 ] Driver may return an error before submitting the command to the device. Ensure that such error is propagated up. Fixes: 456cba386e ("nvme: wire-up uring-cmd support for io-passthru on char-device.") Signed-off-by: Anuj Gupta <anuj20.g@samsung.com> Signed-off-by: Kanchan Joshi <joshi.k@samsung.com> Reviewed-by: Niklas Cassel <niklas.cassel@wdc.com> Reviewed-by: Christoph Hellwig <hch@lst.de> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-11-20 11:52:17 +01:00
Greg Kroah-Hartman	788e35fdea	Merge 6.1.60 into android14-6.1-lts ... Changes in 6.1.60 lib/Kconfig.debug: do not enable DEBUG_PREEMPT by default igc: remove I226 Qbv BaseTime restriction igc: enable Qbv configuration for 2nd GCL igc: Remove reset adapter task for i226 during disable tsn config igc: Add qbv_config_change_errors counter igc: Add condition for qbv_config_change_errors counter igc: Fix race condition in PTP tx code Bluetooth: hci_event: Ignore NULL link key Bluetooth: Reject connection with the device which has same BD_ADDR Bluetooth: Fix a refcnt underflow problem for hci_conn Bluetooth: vhci: Fix race when opening vhci device Bluetooth: hci_event: Fix coding style Bluetooth: avoid memcmp() out of bounds warning ice: fix over-shifted variable ice: reset first in crash dump kernels net/smc: return the right falback reason when prefix checks fail btrfs: fix stripe length calculation for non-zoned data chunk allocation nfc: nci: fix possible NULL pointer dereference in send_acknowledge() regmap: fix NULL deref on lookup KVM: x86: Mask LVTPC when handling a PMI x86/sev: Disable MMIO emulation from user mode x86/sev: Check IOBM for IOIO exceptions from user-space x86/sev: Check for user-space IOIO pointing to kernel space x86/fpu: Allow caller to constrain xfeatures when copying to uabi buffer KVM: x86: Constrain guest-supported xfeatures only at KVM_GET_XSAVE{2} x86: KVM: SVM: add support for Invalid IPI Vector interception x86: KVM: SVM: refresh AVIC inhibition in svm_leave_nested() audit,io_uring: io_uring openat triggers audit reference count underflow tcp: check mptcp-level constraints for backlog coalescing mptcp: more conservative check for zero probes fs/ntfs3: Fix possible null-pointer dereference in hdr_find_e() fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea() fs/ntfs3: fix deadlock in mark_as_free_ex netfilter: nft_payload: fix wrong mac header matching nvmet-tcp: Fix a possible UAF in queue intialization setup drm/i915: Retry gtt fault when out of fence registers drm/mediatek: Correctly free sg_table in gem prime vmap ALSA: hda/realtek - Fixed ASUS platform headset Mic issue ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors ASoC: codecs: wcd938x: drop bogus bind error handling ASoC: codecs: wcd938x: fix unbind tear down order ASoC: codecs: wcd938x: fix resource leaks on bind errors qed: fix LL2 RX buffer allocation xfrm: fix a data-race in xfrm_lookup_with_ifid() xfrm: fix a data-race in xfrm_gen_index() xfrm: interface: use DEV_STATS_INC() wifi: cfg80211: use system_unbound_wq for wiphy work net: ipv4: fix return value check in esp_remove_trailer net: ipv6: fix return value check in esp_remove_trailer net: rfkill: gpio: prevent value glitch during probe tcp: fix excessive TLP and RACK timeouts from HZ rounding tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb tcp: Fix listen() warning with v4-mapped-v6 address. tun: prevent negative ifindex ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr net: usb: smsc95xx: Fix an error code in smsc95xx_reset() octeon_ep: update BQL sent bytes before ringing doorbell i40e: prevent crash on probe if hw registers have invalid values net: dsa: bcm_sf2: Fix possible memory leak in bcm_sf2_mdio_register() bonding: Return pointer to data after pull on skb net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section selftests: openvswitch: Catch cases where the tests are killed selftests: netfilter: Run nft_audit.sh in its own netns netfilter: nft_set_rbtree: .deactivate fails if element has expired netlink: Correct offload_xstats size netfilter: nf_tables: do not remove elements if set backend implements .abort netfilter: nf_tables: revert do not remove elements if set backend implements .abort net: phy: bcm7xxx: Add missing 16nm EPHY statistics net: pktgen: Fix interface flags printing net: avoid UAF on deleted altname net: fix ifname in netlink ntf during netns move net: check for altname conflicts when changing netdev's netns selftests/mm: fix awk usage in charge_reserved_hugetlb.sh and hugetlb_reparenting_test.sh that may cause error usb: misc: onboard_usb_hub: add Genesys Logic GL850G hub support usb: misc: onboard_usb_hub: add Genesys Logic GL852G hub support usb: misc: onboard_usb_hub: add Genesys Logic GL3523 hub support usb: misc: onboard_hub: add support for Microchip USB2412 USB 2.0 hub serial: Move uart_change_speed() earlier serial: Rename uart_change_speed() to uart_change_line_settings() serial: Reduce spinlocked portion of uart_rs485_config() serial: 8250: omap: Fix imprecise external abort for omap_8250_pm() serial: 8250_omap: Fix errors with no_console_suspend iio: core: introduce iio_device_{claim|release}_buffer_mode() APIs iio: cros_ec: fix an use-after-free in cros_ec_sensors_push_data() iio: adc: ad7192: Simplify using devm_regulator_get_enable() iio: adc: ad7192: Correct reference voltage pwr-mlxbf: extend Kconfig to include gpio-mlxbf3 dependency ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone fs-writeback: do not requeue a clean inode having skipped pages btrfs: prevent transaction block reserve underflow when starting transaction btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 btrfs: initialize start_slot in btrfs_log_prealloc_extents i2c: mux: Avoid potential false error message in i2c_mux_add_adapter overlayfs: set ctime when setting mtime and atime gpio: timberdale: Fix potential deadlock on &tgpio->lock ata: libata-core: Fix compilation warning in ata_dev_config_ncq() ata: libata-eh: Fix compilation warning in ata_eh_link_report() tracing: relax trace_event_eval_update() execution with cond_resched() wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len wifi: iwlwifi: Ensure ack flag is properly cleared. HID: logitech-hidpp: Add Bluetooth ID for the Logitech M720 Triathlon mouse HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event Bluetooth: btusb: add shutdown function for QCA6174 Bluetooth: Avoid redundant authentication Bluetooth: hci_core: Fix build warnings wifi: cfg80211: Fix 6GHz scan configuration wifi: mac80211: work around Cisco AP 9115 VHT MPDU length wifi: mac80211: allow transmitting EAPOL frames with tainted key wifi: cfg80211: avoid leaking stack data into trace regulator/core: Revert "fix kobject release warning and memory leak in regulator_register()" sky2: Make sure there is at least one frag_addr available ipv4/fib: send notify when delete source address routes drm: panel-orientation-quirks: Add quirk for One Mix 2S btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c btrfs: error out when COWing block using a stale transaction btrfs: error when COWing block from a root that is being deleted btrfs: error out when reallocating block for defrag using a stale transaction drm/amd/pm: add unique_id for gc 11.0.3 HID: multitouch: Add required quirk for Synaptics 0xcd7e device HID: nintendo: reinitialize USB Pro Controller after resuming from suspend platform/x86: touchscreen_dmi: Add info for the Positivo C4128B cpufreq: schedutil: Update next_freq when cpufreq_limits change fprobe: Pass entry_data to handlers fprobe: Add nr_maxactive to specify rethook_node pool size fprobe: Fix to ensure the number of active retprobes is not zero net: xfrm: skip policies marked as dead while reinserting policies xfrm6: fix inet6_dev refcount underflow problem net/mlx5: E-switch, register event handler before arming the event net/mlx5: Handle fw tracer change ownership event based on MTRC net/mlx5e: Don't offload internal port if filter device is out device net/tls: split tls_rx_reader_lock tcp: allow again tcp_disconnect() when threads are waiting ice: Remove redundant pci_enable_pcie_error_reporting() Bluetooth: hci_event: Fix using memcmp when comparing keys selftests: openvswitch: Add version check for pyroute2 tcp_bpf: properly release resources on error paths net/smc: fix smc clc failed issue when netdevice not in init_net mtd: rawnand: qcom: Unmap the right resource upon probe failure mtd: rawnand: pl353: Ensure program page operations are successful mtd: rawnand: marvell: Ensure program page operations are successful mtd: rawnand: arasan: Ensure program page operations are successful mtd: spinand: micron: correct bitmask for ecc status mtd: physmap-core: Restore map_rom fallback dt-bindings: mmc: sdhci-msm: correct minimum number of clocks mmc: sdhci-pci-gli: fix LPM negotiation so x86/S0ix SoCs can suspend mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw mmc: core: sdio: hold retuning if sdio in 1-bit mode mmc: core: Capture correct oemid-bits for eMMC cards Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" pNFS: Fix a hang in nfs4_evict_inode() pNFS/flexfiles: Check the layout validity in ff_layout_mirror_prepare_stats NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server ACPI: irq: Fix incorrect return value in acpi_register_gsi() nfs42: client needs to strip file mode's suid/sgid bit after ALLOCATE op nvme: sanitize metadata bounce buffer for reads nvme-pci: add BOGUS_NID for Intel 0a54 device nvmet-auth: complete a request only after freeing the dhchap pointers nvme-rdma: do not try to stop unallocated queues KVM: x86/mmu: Stop zapping invalidated TDP MMU roots asynchronously HID: input: map battery system charging USB: serial: option: add Telit LE910C4-WWX 0x1035 composition USB: serial: option: add entry for Sierra EM9191 with new firmware USB: serial: option: add Fibocom to DELL custom modem FM101R-GL perf: Disallow mis-matched inherited group reads s390/pci: fix iommu bitmap allocation selftests/ftrace: Add new test case which checks non unique symbol s390/cio: fix a memleak in css_alloc_subchannel platform/surface: platform_profile: Propagate error if profile registration fails platform/x86: intel-uncore-freq: Conditionally create attribute for read frequency platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e platform/x86: asus-wmi: Only map brightness codes when using asus-wmi backlight control platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events gpio: vf610: set value before the direction to avoid a glitch ASoC: pxa: fix a memory leak in probe() drm/bridge: ti-sn65dsi86: Associate DSI device lifetime with auxiliary device serial: 8250: omap: Move uart_write() inside PM section serial: 8250: omap: convert to modern PM ops kallsyms: Reduce the memory occupied by kallsyms_seqs_of_names[] kallsyms: Add helper kallsyms_on_each_match_symbol() tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols gpio: vf610: make irq_chip immutable gpio: vf610: mask the gpio irq in system suspend and support wakeup phy: mapphone-mdm6600: Fix runtime disable on probe phy: mapphone-mdm6600: Fix runtime PM for remove phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins net: move altnames together with the netdevice Bluetooth: hci_sock: fix slab oob read in create_monitor_event Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name mptcp: avoid sending RST when closing the initial subflow selftests: mptcp: join: correctly check for no RST selftests: mptcp: join: no RST when rm subflow/addr Linux 6.1.60 Change-Id: I85a246fd8800df019794b531f5befe0a84a3e138 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-11-03 16:23:47 +00:00
Greg Kroah-Hartman	2950de8b2d	Merge 6.1.56 into android14-6.1-lts ... Changes in 6.1.56 NFS: Fix error handling for O_DIRECT write scheduling NFS: Fix O_DIRECT locking issues NFS: More O_DIRECT accounting fixes for error paths NFS: Use the correct commit info in nfs_join_page_group() NFS: More fixes for nfs_direct_write_reschedule_io() NFS/pNFS: Report EINVAL errors from connect() to the server SUNRPC: Mark the cred for revalidation if the server rejects it NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server NFSv4.1: fix pnfs MDS=DS session trunking media: v4l: Use correct dependency for camera sensor drivers media: via: Use correct dependency for camera sensor drivers netfs: Only call folio_start_fscache() one time for each folio dm: fix a race condition in retrieve_deps btrfs: improve error message after failure to add delayed dir index item btrfs: remove BUG() after failure to insert delayed dir index item ext4: replace the traditional ternary conditional operator with with max()/min() ext4: move setting of trimmed bit into ext4_try_to_trim_range() ext4: do not let fstrim block system suspend netfilter: nf_tables: don't skip expired elements during walk netfilter: nf_tables: GC transaction API to avoid race with control plane netfilter: nf_tables: adapt set backend to use GC transaction API netfilter: nft_set_hash: mark set element as dead when deleting from packet path netfilter: nf_tables: remove busy mark and gc batch API netfilter: nf_tables: don't fail inserts if duplicate has expired netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path netfilter: nf_tables: GC transaction race with netns dismantle netfilter: nf_tables: GC transaction race with abort path netfilter: nf_tables: use correct lock to protect gc_list netfilter: nf_tables: defer gc run if previous batch is still pending netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration netfilter: nf_tables: fix memleak when more than 255 elements expired ASoC: meson: spdifin: start hw on dai probe netfilter: nf_tables: disallow element removal on anonymous sets bpf: Avoid deadlock when using queue and stack maps from NMI ASoC: rt5640: Revert "Fix sleep in atomic context" ASoC: rt5640: Fix IRQ not being free-ed for HDA jack detect mode ALSA: hda/realtek: Splitting the UX3402 into two separate models netfilter: conntrack: fix extension size table selftests: tls: swap the TX and RX sockets in some tests net/core: Fix ETH_P_1588 flow dissector ASoC: hdaudio.c: Add missing check for devm_kstrdup ASoC: imx-audmix: Fix return error with devm_clk_get() octeon_ep: fix tx dma unmap len values in SG iavf: do not process adminq tasks when __IAVF_IN_REMOVE_TASK is set ASoC: SOF: core: Only call sof_ops_free() on remove if the probe was successful iavf: add iavf_schedule_aq_request() helper iavf: schedule a request immediately after add/delete vlan i40e: Fix VF VLAN offloading when port VLAN is configured netfilter, bpf: Adjust timeouts of non-confirmed CTs in bpf_ct_insert_entry() ionic: fix 16bit math issue when PAGE_SIZE >= 64KB igc: Fix infinite initialization loop with early XDP redirect ipv4: fix null-deref in ipv4_link_failure scsi: iscsi_tcp: restrict to TCP sockets powerpc/perf/hv-24x7: Update domain value check dccp: fix dccp_v4_err()/dccp_v6_err() again x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer() net: hsr: Properly parse HSRv1 supervisor frames. platform/x86: intel_scu_ipc: Check status after timeout in busy_loop() platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt() platform/x86: intel_scu_ipc: Don't override scu in intel_scu_ipc_dev_simple_command() platform/x86: intel_scu_ipc: Fail IPC send if still busy x86/srso: Fix srso_show_state() side effect x86/srso: Fix SBPB enablement for spec_rstack_overflow=off net: hns3: add cmdq check for vf periodic service task net: hns3: fix GRE checksum offload issue net: hns3: only enable unicast promisc when mac table full net: hns3: fix fail to delete tc flower rules during reset issue net: hns3: add 5ms delay before clear firmware reset irq source net: bridge: use DEV_STATS_INC() team: fix null-ptr-deref when team device type is changed net: rds: Fix possible NULL-pointer dereference netfilter: nf_tables: disable toggling dormant table state more than once netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP i915/pmu: Move execlist stats initialization to execlist specific setup locking/seqlock: Do the lockdep annotation before locking in do_write_seqcount_begin_nested() net: ena: Flush XDP packets on error. bnxt_en: Flush XDP for bnxt_poll_nitroa0()'s NAPI octeontx2-pf: Do xdp_do_flush() after redirects. igc: Expose tx-usecs coalesce setting to user proc: nommu: /proc/<pid>/maps: release mmap read lock proc: nommu: fix empty /proc/<pid>/maps cifs: Fix UAF in cifs_demultiplex_thread() gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() i2c: mux: gpio: Add missing fwnode_handle_put() i2c: xiic: Correct return value check for xiic_reinit() ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2 ARM: dts: samsung: exynos4210-i9100: Fix LCD screen's physical size ARM: dts: qcom: msm8974pro-castor: correct inverted X of touchscreen ARM: dts: qcom: msm8974pro-castor: correct touchscreen function names ARM: dts: qcom: msm8974pro-castor: correct touchscreen syna,nosleep-mode f2fs: optimize iteration over sparse directories f2fs: get out of a repeat loop when getting a locked data page s390/pkey: fix PKEY_TYPE_EP11_AES handling in PKEY_CLR2SECK2 IOCTL arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved wifi: ath11k: fix tx status reporting in encap offload mode wifi: ath11k: Cleanup mac80211 references on failure during tx_complete scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() drm/amdkfd: Flush TLB after unmapping for GFX v9.4.3 drm/amdkfd: Insert missing TLB flush on GFX10 and later btrfs: reset destination buffer when read_extent_buffer() gets invalid range vfio/mdev: Fix a null-ptr-deref bug for mdev_unregister_parent() MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled spi: spi-gxp: BUG: Correct spi write return value drm/bridge: ti-sn65dsi83: Do not generate HFP/HBP/HSA and EOT packet bus: ti-sysc: Use fsleep() instead of usleep_range() in sysc_reset() bus: ti-sysc: Fix missing AM35xx SoC matching firmware: arm_scmi: Harden perf domain info access firmware: arm_scmi: Fixup perf power-cost/microwatt support power: supply: mt6370: Fix missing error code in mt6370_chg_toggle_cfo() clk: sprd: Fix thm_parents incorrect configuration clk: tegra: fix error return case for recalc_rate ARM: dts: omap: correct indentation ARM: dts: ti: omap: Fix bandgap thermal cells addressing for omap3/4 ARM: dts: Unify pwm-omap-dmtimer node names ARM: dts: Unify pinctrl-single pin group nodes for omap4 ARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up power: supply: ucs1002: fix error code in ucs1002_get_property() firmware: imx-dsp: Fix an error handling path in imx_dsp_setup_channels() xtensa: add default definition for XCHAL_HAVE_DIV32 xtensa: iss/network: make functions static xtensa: boot: don't add include-dirs xtensa: umulsidi3: fix conditional expression xtensa: boot/lib: fix function prototypes power: supply: rk817: Fix node refcount leak selftests/powerpc: Use CLEAN macro to fix make warning selftests/powerpc: Pass make context to children selftests/powerpc: Fix emit_tests to work with run_kselftest.sh soc: imx8m: Enable OCOTP clock for imx8mm before reading registers arm64: dts: imx: Add imx8mm-prt8mm.dtb to build firmware: arm_ffa: Don't set the memory region attributes for MEM_LEND gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip i2c: npcm7xx: Fix callback completion ordering x86/reboot: VMCLEAR active VMCSes before emergency reboot ceph: drop messages from MDS when unmounting dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock bpf: Annotate bpf_long_memcpy with data_race spi: sun6i: reduce DMA RX transfer width to single byte spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() parisc: sba: Fix compile warning wrt list of SBA devices parisc: iosapic.c: Fix sparse warnings parisc: drivers: Fix sparse warning parisc: irq: Make irq_stack_union static to avoid sparse warning scsi: qedf: Add synchronization between I/O completions and abort scsi: ufs: core: Move __ufshcd_send_uic_cmd() outside host_lock scsi: ufs: core: Poll HCS.UCRDY before issuing a UIC command selftests/ftrace: Correctly enable event in instance-event.tc ring-buffer: Avoid softlockup in ring_buffer_resize() btrfs: assert delayed node locked when removing delayed item selftests: fix dependency checker script ring-buffer: Do not attempt to read past "commit" net/smc: bugfix for smcr v2 server connect success statistic ata: sata_mv: Fix incorrect string length computation in mv_dump_mem() platform/mellanox: mlxbf-bootctl: add NET dependency into Kconfig platform/x86: asus-wmi: Support 2023 ROG X16 tablet mode thermal/of: add missing of_node_put() drm/amd/display: Don't check registers, if using AUX BL control drm/amdgpu/soc21: don't remap HDP registers for SR-IOV drm/amdgpu/nbio4.3: set proper rmmio_remap.reg_offset for SR-IOV drm/amdgpu: Handle null atom context in VBIOS info ioctl riscv: errata: fix T-Head dcache.cva encoding scsi: pm80xx: Use phy-specific SAS address when sending PHY_START command scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command smb3: correct places where ENOTSUPP is used instead of preferred EOPNOTSUPP ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset() spi: nxp-fspi: reset the FLSHxCR1 registers spi: stm32: add a delay before SPI disable ASoC: fsl: imx-pcm-rpmsg: Add SNDRV_PCM_INFO_BATCH flag spi: intel-pci: Add support for Granite Rapids SPI serial flash bpf: Clarify error expectations from bpf_clone_redirect ALSA: hda: intel-sdw-acpi: Use u8 type for link index ASoC: cs42l42: Ensure a reset pulse meets minimum pulse width. ASoC: cs42l42: Don't rely on GPIOD_OUT_LOW to set RESET initially low firmware: cirrus: cs_dsp: Only log list of algorithms in debug build memblock tests: fix warning: "__ALIGN_KERNEL" redefined memblock tests: fix warning ‘struct seq_file’ declared inside parameter list ASoC: imx-rpmsg: Set ignore_pmdown_time for dai_link media: vb2: frame_vector.c: replace WARN_ONCE with a comment NFSv4.1: fix zero value filehandle in post open getattr ASoC: SOF: Intel: MTL: Reduce the DSP init timeout powerpc/watchpoints: Disable preemption in thread_change_pc() powerpc/watchpoint: Disable pagefaults when getting user instruction powerpc/watchpoints: Annotate atomic context in more places ncsi: Propagate carrier gain/loss events to the NCSI controller net: hsr: Add __packed to struct hsr_sup_tlv. tsnep: Fix NAPI scheduling tsnep: Fix NAPI polling with budget 0 LoongArch: Set all reserved memblocks on Node#0 at initialization fbdev/sh7760fb: Depend on FB=y perf build: Define YYNOMEM as YYNOABORT for bison < 3.81 nvme-pci: factor the iod mempool creation into a helper nvme-pci: factor out a nvme_pci_alloc_dev helper nvme-pci: do not set the NUMA node of device if it has none wifi: ath11k: Don't drop tx_status when peer cannot be found scsi: qla2xxx: Fix NULL pointer dereference in target mode nvme-pci: always return an ERR_PTR from nvme_pci_alloc_dev smack: Record transmuting in smk_transmuted smack: Retrieve transmuting information in smack_inode_getsecurity() iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race x86/srso: Add SRSO mitigation for Hygon processors KVM: SVM: INTERCEPT_RDTSCP is never intercepted anyway KVM: SVM: Fix TSC_AUX virtualization setup KVM: x86/mmu: Open code leaf invalidation from mmu_notifier KVM: x86/mmu: Do not filter address spaces in for_each_tdp_mmu_root_yield_safe() mptcp: fix bogus receive window shrinkage with multiple subflows misc: rtsx: Fix some platforms can not boot and move the l1ss judgment to probe Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux" serial: 8250_port: Check IRQ data before use nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() netfilter: nf_tables: disallow rule removal from chain binding ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q LoongArch: Define relocation types for ABI v2.10 LoongArch: numa: Fix high_memory calculation ata: libata-scsi: link ata port and scsi device ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES io_uring/fs: remove sqe->rw_flags checking from LINKAT i2c: i801: unregister tco_pdev in i801_probe() error path ASoC: amd: yc: Fix non-functional mic on Lenovo 82QF and 82UG kernel/sched: Modify initial boot task idle setup sched/rt: Fix live lock between select_fallback_rq() and RT push netfilter: nf_tables: fix kdoc warnings after gc rework Revert "SUNRPC dont update timeout value on connection reset" timers: Tag (hr)timer softirq as hotplug safe drm/tests: Fix incorrect argument in drm_test_mm_insert_range arm64: defconfig: remove CONFIG_COMMON_CLK_NPCM8XX=y mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement ring-buffer: Update "shortest_full" in polling btrfs: properly report 0 avail for very full file systems media: uvcvideo: Fix OOB read bpf: Add override check to kprobe multi link attach bpf: Fix BTF_ID symbol generation collision bpf: Fix BTF_ID symbol generation collision in tools/ net: thunderbolt: Fix TCPv6 GSO checksum calculation fs/smb/client: Reset password pointer to NULL ata: libata-core: Fix ata_port_request_pm() locking ata: libata-core: Fix port and device removal ata: libata-core: Do not register PM operations for SAS ports ata: libata-sata: increase PMP SRST timeout to 10s drm/i915/gt: Fix reservation address in ggtt_reserve_guc_top power: supply: rk817: Add missing module alias power: supply: ab8500: Set typing and props fs: binfmt_elf_efpic: fix personality for ELF-FDPIC drm/amdkfd: Use gpu_offset for user queue's wptr drm/meson: fix memory leak on ->hpd_notify callback memcg: drop kmem.limit_in_bytes mm, memcg: reconsider kmem.limit_in_bytes deprecation ASoC: amd: yc: Fix a non-functional mic on Lenovo 82TL Linux 6.1.56 Change-Id: Id110614d91d6d60fb6c7622c5af82f219a84a30f Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-10-27 09:17:04 +00:00
Greg Kroah-Hartman	1c5ec1e54d	Merge 6.1.55 into android14-6.1-lts ... Changes in 6.1.55 autofs: fix memory leak of waitqueues in autofs_catatonic_mode btrfs: output extra debug info if we failed to find an inline backref locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer kernel/fork: beware of __put_task_struct() calling context rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle() scftorture: Forgive memory-allocation failure if KASAN ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 perf/imx_ddr: speed up overflow frequency of cycle hw_breakpoint: fix single-stepping when using bpf_overflow_handler ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects selftests/nolibc: fix up kernel parameters support devlink: remove reload failed checks in params get/set callbacks crypto: lrw,xts - Replace strlcpy with strscpy ice: Don't tx before switchdev is fully configured wifi: ath9k: fix fortify warnings wifi: ath9k: fix printk specifier wifi: mwifiex: fix fortify warning mt76: mt7921: don't assume adequate headroom for SDIO headers wifi: wil6210: fix fortify warnings can: sun4i_can: Add acceptance register quirk can: sun4i_can: Add support for the Allwinner D1 net: Use sockaddr_storage for getsockopt(SO_PEERNAME). net/ipv4: return the real errno instead of -EINVAL crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() Bluetooth: Fix hci_suspend_sync crash netlink: convert nlk->flags to atomic flags tpm_tis: Resend command to recover from data transfer errors mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450 alx: fix OOB-read compiler warning wifi: mac80211: check S1G action frame size netfilter: ebtables: fix fortify warnings in size_entry_mwt() wifi: cfg80211: reject auth/assoc to AP with our address wifi: cfg80211: ocb: don't leave if not joined wifi: mac80211: check for station first in client probe wifi: mac80211_hwsim: drop short frames libbpf: Free btf_vmlinux when closing bpf_object drm/bridge: tc358762: Instruct DSI host to generate HSE packets drm/edid: Add quirk for OSVR HDK 2.0 arm64: dts: qcom: sm6125-pdx201: correct ramoops pmsg-size arm64: dts: qcom: sm6350: correct ramoops pmsg-size arm64: dts: qcom: sm8150-kumano: correct ramoops pmsg-size arm64: dts: qcom: sm8250-edo: correct ramoops pmsg-size samples/hw_breakpoint: Fix kernel BUG 'invalid opcode: 0000' drm/amd/display: Fix underflow issue on 175hz timing ASoC: SOF: topology: simplify code to prevent static analysis warnings ASoC: Intel: sof_sdw: Update BT offload config for soundwire config ALSA: hda: intel-dsp-cfg: add LunarLake support drm/amd/display: Use DTBCLK as refclk instead of DPREFCLK drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN31 drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN314 drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer() bus: ti-sysc: Configure uart quirks for k3 SoC md: raid1: fix potential OOB in raid1_remove_disk() ext2: fix datatype of block number in ext2_xattr_set2() fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount PCI: dwc: Provide deinit callback for i.MX ARM: 9317/1: kexec: Make smp stop calls asynchronous powerpc/pseries: fix possible memory leak in ibmebus_bus_init() PCI: vmd: Disable bridge window for domain reset PCI: fu740: Set the number of MSI vectors media: mdp3: Fix resource leaks in of_find_device_by_node media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() media: af9005: Fix null-ptr-deref in af9005_i2c_xfer media: anysee: fix null-ptr-deref in anysee_master_xfer media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout error is detected media: tuners: qt1010: replace BUG_ON with a regular error media: pci: cx23885: replace BUG with error return usb: cdns3: Put the cdns set active part outside the spin lock usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc tools: iio: iio_generic_buffer: Fix some integer type and calculation scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() serial: cpm_uart: Avoid suspicious locking misc: open-dice: make OPEN_DICE depend on HAS_IOMEM usb: ehci: add workaround for chipidea PORTSC.PEC bug usb: chipidea: add workaround for chipidea PEC bug media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning kobject: Add sanity check for kset->kobj.ktype in kset_register() interconnect: Fix locking for runpm vs reclaim printk: Keep non-panic-CPUs out of console lock printk: Consolidate console deferred printing dma-buf: Add unlocked variant of attachment-mapping functions misc: fastrpc: Prepare to dynamic dma-buf locking specification misc: fastrpc: Fix incorrect DMA mapping unmap request MIPS: Use "grep -E" instead of "egrep" btrfs: add a helper to read the superblock metadata_uuid btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super block: factor out a bvec_set_page helper nvmet: use bvec_set_page to initialize bvecs nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() drm: gm12u320: Fix the timeout usage for usb_bulk_msg() scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() selftests: tracing: Fix to unmount tracefs for recovering environment x86/ibt: Suppress spurious ENDBR riscv: kexec: Align the kexeced kernel entry scsi: target: core: Fix target_cmd_counter leak scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file() panic: Reenable preemption in WARN slowpath x86/boot/compressed: Reserve more memory for page tables x86/purgatory: Remove LTO flags samples/hw_breakpoint: fix building without module unloading md/raid1: fix error: ISO C90 forbids mixed declarations Revert "SUNRPC: Fail faster on bad verifier" attr: block mode changes of symlinks ovl: fix failed copyup of fileattr on a symlink ovl: fix incorrect fdput() on aio completion io_uring/net: fix iter retargeting for selected buf nvme: avoid bogus CRTO values md: Put the right device in md_seq_next Revert "drm/amd: Disable S/G for APUs when 64GB or more host memory" dm: don't attempt to queue IO under RCU protection btrfs: fix lockdep splat and potential deadlock after failure running delayed items btrfs: fix a compilation error if DEBUG is defined in btree_dirty_folio btrfs: release path before inode lookup during the ino lookup ioctl btrfs: check for BTRFS_FS_ERROR in pending ordered assert tracing: Have tracing_max_latency inc the trace array ref count tracing: Have event inject files inc the trace array ref count tracing: Increase trace array ref count on enable and filter files tracing: Have current_trace inc the trace array ref count tracing: Have option files inc the trace array ref count selinux: fix handling of empty opts in selinux_fs_context_submount() nfsd: fix change_info in NFSv4 RENAME replies tracefs: Add missing lockdown check to tracefs_create_dir() i2c: aspeed: Reset the i2c controller when timeout occurs ata: libata: disallow dev-initiated LPM transitions to unsupported states ata: libahci: clear pending interrupt status scsi: megaraid_sas: Fix deadlock on firmware crashdump scsi: pm8001: Setup IRQs on resume ext4: fix rec_len verify error drm/amd/display: fix the white screen issue when >= 64GB DRAM Revert "memcg: drop kmem.limit_in_bytes" drm/amdgpu: fix amdgpu_cs_p1_user_fence net/sched: Retire rsvp classifier interconnect: Teach lockdep about icc_bw_lock order Linux 6.1.55 Change-Id: I95193a57879a13b04b5ac8647a24e6d8304fcb0e Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-10-26 18:58:32 +00:00
Maurizio Lombardi	3519cee444	nvme-rdma: do not try to stop unallocated queues ... commit 3820c4fdc247b6f0a4162733bdb8ddf8f2e8a1e4 upstream. Trying to stop a queue which hasn't been allocated will result in a warning due to calling mutex_lock() against an uninitialized mutex. DEBUG_LOCKS_WARN_ON(lock->magic != lock) WARNING: CPU: 4 PID: 104150 at kernel/locking/mutex.c:579 Call trace: RIP: 0010:__mutex_lock+0x1173/0x14a0 nvme_rdma_stop_queue+0x1b/0xa0 [nvme_rdma] nvme_rdma_teardown_io_queues.part.0+0xb0/0x1d0 [nvme_rdma] nvme_rdma_delete_ctrl+0x50/0x100 [nvme_rdma] nvme_do_delete_ctrl+0x149/0x158 [nvme_core] Signed-off-by: Maurizio Lombardi <mlombard@redhat.com> Reviewed-by: Sagi Grimberg <sagi@grimberg.me> Tested-by: Yi Zhang <yi.zhang@redhat.com> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-10-25 12:03:14 +02:00
Maurizio Lombardi	bec9cb90fe	nvmet-auth: complete a request only after freeing the dhchap pointers ... commit f965b281fd872b2e18bd82dd97730db9834d0750 upstream. It may happen that the work to destroy a queue (for example nvmet_tcp_release_queue_work()) is started while an auth-send or auth-receive command is still completing. nvmet_sq_destroy() will block, waiting for all the references to the sq to be dropped, the last reference is then dropped when nvmet_req_complete() is called. When this happens, both nvmet_sq_destroy() and nvmet_execute_auth_send()/_receive() will free the dhchap pointers by calling nvmet_auth_sq_free(). Since there isn't any lock, the two threads may race against each other, causing double frees and memory corruptions, as reported by KASAN. Reproduced by stress blktests nvme/041 nvme/042 nvme/043 nvme nvme2: qid 0: authenticated with hash hmac(sha512) dhgroup ffdhe4096 ================================================================== BUG: KASAN: double-free in kfree+0xec/0x4b0 Call Trace: <TASK> kfree+0xec/0x4b0 nvmet_auth_sq_free+0xe1/0x160 [nvmet] nvmet_execute_auth_send+0x482/0x16d0 [nvmet] process_one_work+0x8e5/0x1510 Allocated by task 191846: __kasan_kmalloc+0x81/0xa0 nvmet_auth_ctrl_sesskey+0xf6/0x380 [nvmet] nvmet_auth_reply+0x119/0x990 [nvmet] Freed by task 143270: kfree+0xec/0x4b0 nvmet_auth_sq_free+0xe1/0x160 [nvmet] process_one_work+0x8e5/0x1510 Fix this bug by calling nvmet_req_complete() only after freeing the pointers, so we will prevent the race by holding the sq reference. V2: remove redundant code Fixes: db1312dd95 ("nvmet: implement basic In-Band Authentication") Signed-off-by: Maurizio Lombardi <mlombard@redhat.com> Reviewed-by: Christoph Hellwig <hch@lst.de> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-10-25 12:03:14 +02:00
Keith Busch	0ec655ad65	nvme-pci: add BOGUS_NID for Intel 0a54 device ... commit 5c3f4066462a5f6cac04d3dd81c9f551fabbc6c7 upstream. These ones claim cmic and nmic capable, so need special consideration to ignore their duplicate identifiers. Link: https://bugzilla.kernel.org/show_bug.cgi?id=217981 Reported-by: welsh@cassens.com Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-10-25 12:03:14 +02:00
Keith Busch	2c0b40c310	nvme: sanitize metadata bounce buffer for reads ... commit 2b32c76e2b0154b98b9322ae7546b8156cd703e6 upstream. User can request more metadata bytes than the device will write. Ensure kernel buffer is initialized so we're not leaking unsanitized memory on the copy-out. Fixes: 0b7f1f26f9 ("nvme: use the block layer for userspace passthrough metadata") Reviewed-by: Jens Axboe <axboe@kernel.dk> Reviewed-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Kanchan Joshi <joshi.k@samsung.com> Reviewed-by: Chaitanya Kulkarni <kch@nvidia.com> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-10-25 12:03:14 +02:00
Sagi Grimberg	f691ec5a54	nvmet-tcp: Fix a possible UAF in queue intialization setup ... commit d920abd1e7c4884f9ecd0749d1921b7ab19ddfbd upstream. From Alon: "Due to a logical bug in the NVMe-oF/TCP subsystem in the Linux kernel, a malicious user can cause a UAF and a double free, which may lead to RCE (may also lead to an LPE in case the attacker already has local privileges)." Hence, when a queue initialization fails after the ahash requests are allocated, it is guaranteed that the queue removal async work will be called, hence leave the deallocation to the queue removal. Also, be extra careful not to continue processing the socket, so set queue rcv_state to NVMET_TCP_RECV_ERR upon a socket error. Cc: stable@vger.kernel.org Reported-by: Alon Zahavi <zahavi.alon@gmail.com> Tested-by: Alon Zahavi <zahavi.alon@gmail.com> Signed-off-by: Sagi Grimberg <sagi@grimberg.me> Reviewed-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Chaitanya Kulkarni <kch@nvidia.com> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-10-25 12:03:05 +02:00
Irvin Cote	4b8ef68e39	nvme-pci: always return an ERR_PTR from nvme_pci_alloc_dev ... [ Upstream commit dc785d69d753a3894c93afc23b91404652382ead ] Don't mix NULL and ERR_PTR returns. Fixes: 2e87570be9d2 ("nvme-pci: factor out a nvme_pci_alloc_dev helper") Signed-off-by: Irvin Cote <irvin.cote@insa-lyon.fr> Reviewed-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Christoph Hellwig <hch@lst.de> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-10-06 14:56:59 +02:00
Pratyush Yadav	a60768c05b	nvme-pci: do not set the NUMA node of device if it has none ... [ Upstream commit dad651b2a44eb6b201738f810254279dca29d30d ] If a device has no NUMA node information associated with it, the driver puts the device in node first_memory_node (say node 0). Not having a NUMA node and being associated with node 0 are completely different things and it makes little sense to mix the two. Signed-off-by: Pratyush Yadav <ptyadav@amazon.de> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-10-06 14:56:58 +02:00
Christoph Hellwig	6b2165cae4	nvme-pci: factor out a nvme_pci_alloc_dev helper ... [ Upstream commit 2e87570be9d2746e7c4e7ab1cc18fd3ca7de2768 ] Add a helper that allocates the nvme_dev structure up to the point where we can call nvme_init_ctrl. This pairs with the free_ctrl method and can thus be used to cleanup the teardown path and make it more symmetric. Note that this now calls nvme_init_ctrl a lot earlier during probing, which also means the per-controller character device shows up earlier. Due to the controller state no commnds can be send on it, but it might make sense to delay the cdev registration until nvme_init_ctrl_finish. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Keith Busch <kbusch@kernel.org> Reviewed-by: Sagi Grimberg <sagi@grimberg.me> Reviewed-by: Chaitanya Kulkarni <kch@nvidia.com> Tested-by Gerd Bayer <gbayer@linxu.ibm.com> Stable-dep-of: dad651b2a44e ("nvme-pci: do not set the NUMA node of device if it has none") Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-10-06 14:56:58 +02:00
Christoph Hellwig	69bc295d0e	nvme-pci: factor the iod mempool creation into a helper ... [ Upstream commit 081a7d958ce4b65f9aab6e70e65b0b2e0b92297c ] Add a helper to create the iod mempool. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Keith Busch <kbusch@kernel.org> Reviewed-by: Sagi Grimberg <sagi@grimberg.me> Reviewed-by: Chaitanya Kulkarni <kch@nvidia.com> Tested-by Gerd Bayer <gbayer@linxu.ibm.com> Stable-dep-of: dad651b2a44e ("nvme-pci: do not set the NUMA node of device if it has none") Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-10-06 14:56:58 +02:00
Nigel Kirkland	be90c9e29d	nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() ... [ Upstream commit 8ae5b3a685dc59a8cf7ccfe0e850999ba9727a3c ] The nvme_fc_fcp_op structure describing an AEN operation is initialized with a null request structure pointer. An FC LLDD may make a call to nvme_fc_io_getuuid passing a pointer to an nvmefc_fcp_req for an AEN operation. Add validation of the request structure pointer before dereference. Signed-off-by: Nigel Kirkland <nkirkland2304@gmail.com> Reviewed-by: James Smart <jsmart2021@gmail.com> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-10-06 14:56:51 +02:00
Keith Busch	f07c0bc27b	nvme: avoid bogus CRTO values ... commit 6cc834ba62998c65c42d0c63499bdd35067151ec upstream. Some devices are reporting controller ready mode support, but return 0 for CRTO. These devices require a much higher time to ready than that, so they are failing to initialize after the driver starter preferring that value over CAP.TO. The spec requires that CAP.TO match the appropritate CRTO value, or be set to 0xff if CRTO is larger than that. This means that CAP.TO can be used to validate if CRTO is reliable, and provides an appropriate fallback for setting the timeout value if not. Use whichever is larger. Link: https://bugzilla.kernel.org/show_bug.cgi?id=217863 Reported-by: Cláudio Sampaio <patola@gmail.com> Reported-by: Felix Yan <felixonmars@archlinux.org> Tested-by: Felix Yan <felixonmars@archlinux.org> Based-on-a-patch-by: Felix Yan <felixonmars@archlinux.org> Cc: stable@vger.kernel.org Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-09-23 11:11:10 +02:00
Varun Prakash	64561352c0	nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() ... [ Upstream commit 1f0bbf28940cf5edad90ab57b62aa8197bf5e836 ] iov_len is the valid data length, so pass iov_len instead of sg->length to bvec_set_page(). Fixes: 5bfaba275a ("nvmet-tcp: don't map pages which can't come from HIGHMEM") Signed-off-by: Rakshana Sridhar <rakshanas@chelsio.com> Signed-off-by: Varun Prakash <varun@chelsio.com> Reviewed-by: Sagi Grimberg <sagi@grimberg.me> Reviewed-by: Christoph Hellwig <hch@lst.de> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-09-23 11:11:08 +02:00
Christoph Hellwig	5ee5c928db	nvmet: use bvec_set_page to initialize bvecs ... [ Upstream commit fc41c97a3a7b08131e6998bc7692f95729f9d359 ] Use the bvec_set_page helper to initialize bvecs. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Chaitanya Kulkarni <kch@nvidia.com> Reviewed-by: Johannes Thumshirn <johannes.thumshirn@wdc.com> Link: https://lore.kernel.org/r/20230203150634.3199647-7-hch@lst.de Signed-off-by: Jens Axboe <axboe@kernel.dk> Stable-dep-of: 1f0bbf28940c ("nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page()") Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-09-23 11:11:08 +02:00
Greg Kroah-Hartman	094c282d92	Merge 6.1.46 into android14-6.1-lts ... Changes in 6.1.46 gcc-plugins: Reorganize gimple includes for GCC 13 Revert "loongarch/cpu: Switch to arch_cpu_finalize_init()" tpm: Disable RNG for all AMD fTPMs tpm: Add a helper for checking hwrng enabled ksmbd: validate command request size ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea() KVM: SEV: snapshot the GHCB before accessing it KVM: SEV: only access GHCB fields once wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems() wifi: rtw89: fix 8852AE disconnection caused by RX full flags selftests: forwarding: Set default IPv6 traceroute utility wireguard: allowedips: expand maximum node depth mmc: moxart: read scr register without changing byte order ipv6: adjust ndisc_is_useropt() to also return true for PIO selftests: mptcp: join: fix 'delete and re-add' test selftests: mptcp: join: fix 'implicit EP' test mptcp: avoid bogus reset on fallback close mptcp: fix disconnect vs accept race dmaengine: pl330: Return DMA_PAUSED when transaction is paused net: mana: Fix MANA VF unload when hardware is unresponsive riscv/kexec: load initrd high in available memory riscv,mmio: Fix readX()-to-delay() ordering riscv/kexec: handle R_RISCV_CALL_PLT relocation type nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM9B1 256G and 512G drm/nouveau/gr: enable memory loads on helper invocation on all channels drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap() drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() drm/amd/display: check attr flag before set cursor degamma on DCN3+ drm/amdgpu: add S/G display parameter drm/amd: Disable S/G for APUs when 64GB or more host memory drm/amd/display: limit DPIA link rate to HBR3 cpuidle: dt_idle_genpd: Add helper function to remove genpd topology hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 radix tree test suite: fix incorrect allocation size for pthreads nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings drm/amd/pm: expose swctf threshold setting for legacy powerplay drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation drm/amd/display: Handle virtual hardware detect drm/amd/display: Add function for validate and update new stream drm/amd/display: Handle seamless boot stream drm/amd/display: Update OTG instance in the commit stream drm/amd/display: Avoid ABM when ODM combine is enabled for eDP drm/amd/display: Use update plane and stream routine for DCN32x drm/amd/display: Disable phantom OTG after enable for plane disable drm/amd/display: Retain phantom plane/stream if validation fails drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set drm/amd/display: trigger timing sync only if TG is running io_uring: correct check for O_TMPFILE iio: cros_ec: Fix the allocation size for cros_ec_command iio: frequency: admv1013: propagate errors from regulator_get_voltage() iio: adc: ad7192: Fix ac excitation feature iio: adc: ina2xx: avoid NULL pointer dereference on OF device match binder: fix memory leak in binder_init() misc: rtsx: judge ASPM Mode to set PETXCFG Reg usb-storage: alauda: Fix uninit-value in alauda_check_media() usb: dwc3: Properly handle processing of pending events USB: Gadget: core: Help prevent panic during UVC unconfigure usb: common: usb-conn-gpio: Prevent bailing out if initial role is none usb: typec: tcpm: Fix response to vsafe0V event usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment x86/srso: Fix build breakage with the LLVM linker x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 x86/mm: Fix VDSO and VVAR placement on 5-level paging machines x86/sev: Do not try to parse for the CC blob on non-AMD hardware x86/speculation: Add cpu_show_gds() prototype x86: Move gds_ucode_mitigated() declaration to header drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes iio: core: Prevent invalid memory access when there is no parent interconnect: qcom: Add support for mask-based BCMs interconnect: qcom: sm8450: add enable_mask for bcm nodes selftests/rseq: Fix build with undefined __weak selftests: forwarding: Add a helper to skip test when using veth pairs selftests: forwarding: ethtool: Skip when using veth pairs selftests: forwarding: ethtool_extended_state: Skip when using veth pairs selftests: forwarding: hw_stats_l3_gre: Skip when using veth pairs selftests: forwarding: Skip test when no interfaces are specified selftests: forwarding: Switch off timeout selftests: forwarding: tc_flower: Relax success criterion net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail() bpf, sockmap: Fix map type error in sock_map_del_link bpf, sockmap: Fix bug that strp_done cannot be called mISDN: Update parameter type of dsp_cmx_send() macsec: use DEV_STATS_INC() mptcp: fix the incorrect judgment for msk->cb_flags net/packet: annotate data-races around tp->status net/smc: Use correct buffer sizes when switching between TCP and SMC tcp: add missing family to tcp_set_ca_state() tracepoint tunnels: fix kasan splat when generating ipv4 pmtu error xsk: fix refcount underflow in error path bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves dccp: fix data-race around dp->dccps_mss_cache drivers: net: prevent tun_build_skb() to exceed the packet size limit drivers: vxlan: vnifilter: free percpu vni stats on error path iavf: fix potential races for FDIR filters IB/hfi1: Fix possible panic during hotplug remove drm/rockchip: Don't spam logs in atomic check wifi: cfg80211: fix sband iftype data lookup for AP_VLAN RDMA/umem: Set iova in ODP flow net: tls: avoid discarding data on record close net: marvell: prestera: fix handling IPv4 routes with nhid net: phy: at803x: remove set/get wol callbacks for AR8032 net: dsa: ocelot: call dsa_tag_8021q_unregister() under rtnl_lock() on driver remove net: hns3: refactor hclge_mac_link_status_wait for interface reuse net: hns3: add wait until mac link down net: hns3: fix deadlock issue when externel_lb and reset are executed together nexthop: Fix infinite nexthop dump when using maximum nexthop ID nexthop: Make nexthop bucket dump more efficient nexthop: Fix infinite nexthop bucket dump when using maximum nexthop ID net: hns3: fix strscpy causing content truncation issue dmaengine: mcf-edma: Fix a potential un-allocated memory access dmaengine: owl-dma: Modify mismatched function name net/mlx5: Allow 0 for total host VFs net/mlx5: LAG, Check correct bucket when modifying LAG net/mlx5: Skip clock update work when device is in error state net/mlx5: Reload auxiliary devices in pci error handlers ibmvnic: Enforce stronger sanity checks on login response ibmvnic: Unmap DMA login rsp buffer on send login fail ibmvnic: Handle DMA unmapping of login buffs in release functions ibmvnic: Do partial reset on login failure ibmvnic: Ensure login failure recovery is safe from other resets gpio: ws16c48: Fix off-by-one error in WS16C48 resource region extent gpio: sim: mark the GPIO chip as a one that can sleep btrfs: wait for actual caching progress during allocation btrfs: don't stop integrity writeback too early btrfs: properly clear end of the unreserved range in cow_file_range btrfs: exit gracefully if reloc roots don't match btrfs: reject invalid reloc tree root keys with stack dump btrfs: set cache_block_group_error if we find an error nvme-tcp: fix potential unbalanced freeze & unfreeze nvme-rdma: fix potential unbalanced freeze & unfreeze netfilter: nf_tables: report use refcount overflow scsi: core: Fix legacy /proc parsing buffer overflow scsi: storvsc: Fix handling of virtual Fibre Channel timeouts scsi: ufs: renesas: Fix private allocation scsi: 53c700: Check that command slot is not NULL scsi: snic: Fix possible memory leak if device_add() fails scsi: core: Fix possible memory leak if device_add() fails scsi: fnic: Replace return codes in fnic_clean_pending_aborts() scsi: qedi: Fix firmware halt over suspend and resume scsi: qedf: Fix firmware halt over suspend and resume platform/x86: serial-multi-instantiate: Auto detect IRQ resource for CSC3551 ACPI: scan: Create platform device for CS35L56 alpha: remove __init annotation from exported page_is_ram() sch_netem: fix issues in netem_change() vs get_dist_table() drm/amd/pm/smu7: move variables to where they are used Linux 6.1.46 Change-Id: I679c85c2fa9609364ba40c4d6e665447a67a87fd Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-09-13 19:34:21 +00:00
Greg Kroah-Hartman	f1311733c2	Merge 6.1.40 into android14-6.1-lts ... Changes in 6.1.40 HID: amd_sfh: Rename the float32 variable HID: amd_sfh: Fix for shift-out-of-bounds net: lan743x: Don't sleep in atomic context workqueue: clean up WORK_* constant types, clarify masking ksmbd: add missing compound request handing in some commands ksmbd: fix out of bounds read in smb2_sess_setup drm/panel: simple: Add connector_type for innolux_at043tn24 drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime swiotlb: always set the number of areas before allocating the pool swiotlb: reduce the swiotlb buffer size on allocation failure swiotlb: reduce the number of areas to match actual memory pool size drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags ice: Fix max_rate check while configuring TX rate limits igc: Remove delay during TX ring configuration net/mlx5e: fix double free in mlx5e_destroy_flow_table net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create net/mlx5e: fix memory leak in mlx5e_ptp_open net/mlx5e: Check for NOT_READY flag state after locking igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings igc: Handle PPS start time programming for past time values blk-crypto: use dynamic lock class for blk_crypto_profile::lock scsi: qla2xxx: Fix error code in qla2x00_start_sp() scsi: ufs: ufs-mediatek: Add dependency for RESET_CONTROLLER bpf: Fix max stack depth check for async callbacks net: mvneta: fix txq_map in case of txq_number==1 net/sched: cls_fw: Fix improper refcount update leads to use-after-free gve: Set default duplex configuration to full octeontx2-af: Promisc enable/disable through mbox octeontx2-af: Move validation of ptp pointer before its usage ionic: remove WARN_ON to prevent panic_on_warn net: bgmac: postpone turning IRQs off to avoid SoC hangs net: prevent skb corruption on frag list segmentation icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). udp6: fix udp6_ehashfn() typo ntb: idt: Fix error handling in idt_pci_driver_init() NTB: amd: Fix error handling in amd_ntb_pci_driver_init() ntb: intel: Fix error handling in intel_ntb_pci_driver_init() NTB: ntb_transport: fix possible memory leak while device_register() fails NTB: ntb_tool: Add check for devm_kcalloc ipv6/addrconf: fix a potential refcount underflow for idev net: dsa: qca8k: Add check for skb_copy platform/x86: wmi: Break possible infinite loop when parsing GUID kernel/trace: Fix cleanup logic of enable_trace_eprobe igc: Fix launchtime before start of cycle igc: Fix inserting of empty frame for launchtime nvme: fix the NVME_ID_NS_NVM_STS_MASK definition riscv, bpf: Fix inconsistent JIT image generation drm/i915: Don't preserve dpll_hw_state for slave crtc in Bigjoiner drm/i915: Fix one wrong caching mode enum usage octeontx2-pf: Add additional check for MCAM rules erofs: avoid useless loops in z_erofs_pcluster_readmore() when reading beyond EOF erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF erofs: fix fsdax unavailability for chunk-based regular files wifi: airo: avoid uninitialized warning in airo_get_rate() bpf: cpumap: Fix memory leak in cpu_map_update_elem net/sched: flower: Ensure both minimum and maximum ports are specified riscv: mm: fix truncation warning on RV32 netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write() net/sched: make psched_mtu() RTNL-less safe wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set() net/sched: sch_qfq: refactor parsing of netlink parameters net/sched: sch_qfq: account for stab overhead in qfq_enqueue nvme-pci: fix DMA direction of unmapping integrity data fs/ntfs3: Check fields while reading ovl: let helper ovl_i_path_real() return the realinode ovl: fix null pointer dereference in ovl_get_acl_rcu() cifs: fix session state check in smb2_find_smb_ses drm/client: Send hotplug event after registering a client drm/amdgpu/sdma4: set align mask to 255 drm/amd/pm: revise the ASPM settings for thunderbolt attached scenario drm/amdgpu: add the fan abnormal detection feature drm/amdgpu: Fix minmax warning drm/amd/pm: add abnormal fan detection for smu 13.0.0 f2fs: fix the wrong condition to determine atomic context f2fs: fix deadlock in i_xattr_sem and inode page lock pinctrl: amd: Add Z-state wake control bits pinctrl: amd: Adjust debugfs output pinctrl: amd: Add fields for interrupt status and wake status pinctrl: amd: Detect internal GPIO0 debounce handling pinctrl: amd: Fix mistake in handling clearing pins at startup pinctrl: amd: Detect and mask spurious interrupts pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts on probe" pinctrl: amd: Only use special debounce behavior for GPIO 0 pinctrl: amd: Use amd_pinconf_set() for all config options pinctrl: amd: Drop pull up select configuration pinctrl: amd: Unify debounce handling into amd_pinconf_set() tpm: Do not remap from ACPI resources again for Pluton TPM tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes tpm: return false from tpm_amd_is_rng_defective on non-x86 platforms mtd: rawnand: meson: fix unaligned DMA buffers handling net: bcmgenet: Ensure MDIO unregistration has clocks enabled net: phy: dp83td510: fix kernel stall during netboot in DP83TD510E PHY driver kasan: add kasan_tag_mismatch prototype tracing/user_events: Fix incorrect return value for writing operation when events are disabled powerpc: Fail build if using recordmcount with binutils v2.37 misc: fastrpc: Create fastrpc scalar with correct buffer count powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 powerpc/64s: Fix native_hpte_remove() to be irq-safe MIPS: Loongson: Fix cpu_probe_loongson() again MIPS: KVM: Fix NULL pointer dereference ext4: Fix reusing stale buffer heads from last failed mounting ext4: fix wrong unit use in ext4_mb_clear_bb ext4: get block from bh in ext4_free_blocks for fast commit replay ext4: fix wrong unit use in ext4_mb_new_blocks ext4: fix to check return value of freeze_bdev() in ext4_shutdown() ext4: turn quotas off if mount failed after enabling quotas ext4: only update i_reserved_data_blocks on successful block allocation fs: dlm: revert check required context while close soc: qcom: mdt_loader: Fix unconditional call to scm_pas_mem_setup ext2/dax: Fix ext2_setsize when len is page aligned jfs: jfs_dmap: Validate db_l2nbperpage while mounting hwrng: imx-rngc - fix the timeout for init and self check dm integrity: reduce vmalloc space footprint on 32-bit architectures scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O s390/zcrypt: do not retry administrative requests PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold PCI: Release resource invalidated by coalescing PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 PCI: qcom: Disable write access to read only registers for IP v2.3.3 PCI: epf-test: Fix DMA transfer completion initialization PCI: epf-test: Fix DMA transfer completion detection PCI: rockchip: Assert PCI Configuration Enable bit after probe PCI: rockchip: Write PCI Device ID to correct register PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core PCI: rockchip: Use u32 variable to access 32-bit registers PCI: rockchip: Set address alignment for endpoint mode misc: pci_endpoint_test: Free IRQs before removing the device misc: pci_endpoint_test: Re-init completion for every test mfd: pm8008: Fix module autoloading md/raid0: add discard support for the 'original' layout dm init: add dm-mod.waitfor to wait for asynchronously probed block devices fs: dlm: return positive pid value for F_GETLK fs: dlm: fix cleanup pending ops when interrupted fs: dlm: interrupt posix locks only when process is killed fs: dlm: make F_SETLK use unkillable wait_event fs: dlm: fix mismatch of plock results from userspace scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() drm/atomic: Allow vblank-enabled + self-refresh "disable" drm/rockchip: vop: Leave vblank enabled in self-refresh drm/amd/display: fix seamless odm transitions drm/amd/display: edp do not add non-edid timings drm/amd/display: Remove Phantom Pipe Check When Calculating K1 and K2 drm/amd/display: disable seamless boot if force_odm_combine is enabled drm/amdgpu: fix clearing mappings for BOs that are always valid in VM drm/amd: Disable PSR-SU on Parade 0803 TCON drm/amd/display: add a NULL pointer check drm/amd/display: Correct `DMUB_FW_VERSION` macro drm/amd/display: Add monitor specific edid quirk drm/amdgpu: avoid restore process run into dead loop. drm/ttm: Don't leak a resource on swapout move error serial: atmel: don't enable IRQs prematurely tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk tty: serial: imx: fix rs485 rx after tx firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() libceph: harden msgr2.1 frame segment length checks ceph: add a dedicated private data for netfs rreq ceph: fix blindly expanding the readahead windows ceph: don't let check_caps skip sending responses for revoke msgs xhci: Fix resume issue of some ZHAOXIN hosts xhci: Fix TRB prefetch issue of ZHAOXIN hosts xhci: Show ZHAOXIN xHCI root hub speed correctly meson saradc: fix clock divider mask length opp: Fix use-after-free in lazy_opp_tables after probe deferral soundwire: qcom: fix storing port config out-of-bounds Revert "8250: add support for ASIX devices with a FIFO bug" bus: ixp4xx: fix IXP4XX_EXP_T1_MASK s390/decompressor: fix misaligned symbol build error dm: verity-loadpin: Add NULL pointer check for 'bdev' parameter tracing/histograms: Add histograms to hist_vars if they have referenced variables tracing: Fix memory leak of iter->temp when reading trace_pipe nvme: don't reject probe due to duplicate IDs for single-ported PCIe devices samples: ftrace: Save required argument registers in sample trampolines perf: RISC-V: Remove PERF_HES_STOPPED flag checking in riscv_pmu_start() regmap-irq: Fix out-of-bounds access when allocating config buffers net: ena: fix shift-out-of-bounds in exponential backoff ring-buffer: Fix deadloop issue on reading trace_pipe ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() drm/amd/pm: share the code around SMU13 pcie parameters update drm/amd/pm: conditionally disable pcie lane/speed switching for SMU13 cifs: if deferred close is disabled then close files immediately xtensa: ISS: fix call to split_if_spec perf/x86: Fix lockdep warning in for_each_sibling_event() on SPR PM: QoS: Restore support for default value on frequency QoS pwm: meson: modify and simplify calculation in meson_pwm_get_state pwm: meson: fix handling of period/duty if greater than UINT_MAX fprobe: Release rethook after the ftrace_ops is unregistered fprobe: Ensure running fprobe_exit_handler() finished before calling rethook_free() tracing: Fix null pointer dereference in tracing_err_log_open() selftests: mptcp: connect: fail if nft supposed to work selftests: mptcp: sockopt: return error if wrong mark selftests: mptcp: userspace_pm: use correct server port selftests: mptcp: userspace_pm: report errors with 'remove' tests selftests: mptcp: depend on SYN_COOKIES selftests: mptcp: pm_nl_ctl: fix 32-bit support tracing/probes: Fix not to count error code to total length tracing/probes: Fix to update dynamic data counter if fetcharg uses it tracing/user_events: Fix struct arg size match check scsi: qla2xxx: Multi-que support for TMF scsi: qla2xxx: Fix task management cmd failure scsi: qla2xxx: Fix task management cmd fail due to unavailable resource scsi: qla2xxx: Fix hang in task management scsi: qla2xxx: Wait for io return on terminate rport scsi: qla2xxx: Fix mem access after free scsi: qla2xxx: Array index may go out of bound scsi: qla2xxx: Avoid fcport pointer dereference scsi: qla2xxx: Fix buffer overrun scsi: qla2xxx: Fix potential NULL pointer dereference scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() scsi: qla2xxx: Correct the index of array scsi: qla2xxx: Pointer may be dereferenced scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue scsi: qla2xxx: Fix end of loop test MIPS: kvm: Fix build error with KVM_MIPS_DEBUG_COP0_COUNTERS enabled Revert "drm/amd: Disable PSR-SU on Parade 0803 TCON" swiotlb: mark swiotlb_memblock_alloc() as __init net/sched: sch_qfq: reintroduce lmax bound check for MTU drm/atomic: Fix potential use-after-free in nonblocking commits net/ncsi: make one oem_gma function for all mfr id net/ncsi: change from ndo_set_mac_address to dev_set_mac_address Linux 6.1.40 Change-Id: I5cc6aab178c66d2a23fe2a8d21e71cc4a8b15acf Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-09-05 16:35:01 +00:00
Greg Kroah-Hartman	b435525822	This is the 6.1.39 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmS38qMACgkQONu9yGCS aT56yQ//ZuDuw8Ev3HISVgZhE9FpuXC1RSYXiMCAvwA9rH3KnJ4wKVPEhEWLy9P4 jdJaatSLbLOvA7ME7JnwZxz2qahjBxo1tpx6u2S3zrzz4UlAPNLwCxTxxp4X07VI 3fBNvsmucqFSayCrA8t9xgkaJizuCvHZm7eSoyVIigPwbB5igc2b+bNSRcx1Zo+j SHl4Y4nGK8a47XU9RSlDLVKow0/6rrQLHQ9DLpxACArRHw3h451vD0DMcgOuU/Uv 6qq9u3COcdVw3oc5VENu9XklPmvQkxo3RaCUHyRadVstuc0H/BBUDvEhPn5PcVOV EdBWlTjmhsQo0aUziK4kotLNeX1VRgKa+rrIUBJn68OHv1SRRPZU/eJ8hkL81dCi FDPzXDOszixO7pPv1jj7O9kNcwKPuiHPmdaNPCY6jviOHhZnAEub44DpQamxWvU/ kb5MZRRY72wt9iWeI3kscCCSbf6eyjlmDMoYIeLuYn10n7gIDU80eUOBl9bqEsz/ X+OUxaY+XuKbCoucpNmSHHLmynJ5D0CXhl/5qnlgMoSo4UJ5BUIMj2e3ZqsKLfrR e/09MCRX79y9J+TxUunnQZfq5vBlH1tRsvUyhIfYfW4AaC9BrkOL2XZviQldKY6x FUmsxh62O3iGRtLOWDKQA5MwoJuD54qVcHr1iidWkO2G8T3ctCc= =kyUh -----END PGP SIGNATURE----- Merge 6.1.39 into android14-6.1-lts Changes in 6.1.39 drm: use mgr->dev in drm_dbg_kms in drm_dp_add_payload_part2 fs: pipe: reveal missing function protoypes block: Fix the type of the second bdev_op_is_zoned_write() argument erofs: clean up cached I/O strategies erofs: avoid tagged pointers to mark sync decompression erofs: remove tagged pointer helpers erofs: move zdata.h into zdata.c erofs: kill hooked chains to avoid loops on deduplicated compressed images x86/resctrl: Only show tasks' pid in current pid namespace blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost x86/sev: Fix calculation of end address based on number of pages virt: sevguest: Add CONFIG_CRYPTO dependency blk-mq: fix potential io hang by wrong 'wake_batch' lockd: drop inappropriate svc_get() from locked_get() nvme-auth: rename __nvme_auth_[reset|free] to nvme_auth[reset|free]_dhchap nvme-auth: rename authentication work elements nvme-auth: remove symbol export from nvme_auth_reset nvme-auth: no need to reset chap contexts on re-authentication nvme-core: fix memory leak in dhchap_secret_store nvme-core: fix memory leak in dhchap_ctrl_secret nvme-auth: don't ignore key generation failures when initializing ctrl keys nvme-core: add missing fault-injection cleanup nvme-core: fix dev_pm_qos memleak md/raid10: check slab-out-of-bounds in md_bitmap_get_counter md/raid10: fix overflow of md/safe_mode_delay md/raid10: fix wrong setting of max_corr_read_errors md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request md/raid10: fix io loss while replacement replace rdev md/raid1-10: factor out a helper to add bio to plug md/raid1-10: factor out a helper to submit normal write md/raid1-10: submit write io directly if bitmap is not enabled block: fix blktrace debugfs entries leakage irqchip/stm32-exti: Fix warning on initialized field overwritten irqchip/jcore-aic: Fix missing allocation of IRQ descriptors svcrdma: Prevent page release when nothing was received erofs: simplify iloc() erofs: fix compact 4B support for 16k block size posix-timers: Prevent RT livelock in itimer_delete() tick/rcu: Fix bogus ratelimit condition tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode(). clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe PM: domains: fix integer overflow issues in genpd_parse_state() perf/arm-cmn: Fix DTC reset x86/mm: Allow guest.enc_status_change_prepare() to fail x86/tdx: Fix race between set_memory_encrypted() and load_unaligned_zeropad() drivers/perf: hisi: Don't migrate perf to the CPU going to teardown powercap: RAPL: Fix CONFIG_IOSF_MBI dependency PM: domains: Move the verification of in-params from genpd_add_device() ARM: 9303/1: kprobes: avoid missing-declaration warnings cpufreq: intel_pstate: Fix energy_performance_preference for passive thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() rcu: Make rcu_cpu_starting() rely on interrupts being disabled rcu-tasks: Stop rcu_tasks_invoke_cbs() from using never-onlined CPUs rcutorture: Correct name of use_softirq module parameter rcuscale: Move shutdown from wait_event() to wait_event_idle() rcu/rcuscale: Move rcu_scale_*() after kfree_scale_cleanup() rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined perf/ibs: Fix interface via core pmu events x86/mm: Fix __swp_entry_to_pte() for Xen PV guests locking/atomic: arm: fix sync ops evm: Complete description of evm_inode_setattr() evm: Fix build warnings ima: Fix build warnings pstore/ram: Add check for kstrdup igc: Enable and fix RX hash usage by netstack wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx libbpf: btf_dump_type_data_check_overflow needs to consider BTF_MEMBER_BITFIELD_SIZE samples/bpf: Fix buffer overflow in tcp_basertt spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG wifi: wilc1000: fix for absent RSN capabilities WFA testcase wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() sctp: add bpf_bypass_getsockopt proto callback libbpf: fix offsetof() and container_of() to work with CO-RE bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen spi: dw: Round of n_bytes to power of 2 nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() bpftool: JIT limited misreported as negative value on aarch64 bpf: Remove bpf trampoline selector bpf: Fix memleak due to fentry attach failure selftests/bpf: Do not use sign-file as testcase regulator: core: Fix more error checking for debugfs_create_dir() regulator: core: Streamline debugfs operations wifi: orinoco: Fix an error handling path in spectrum_cs_probe() wifi: orinoco: Fix an error handling path in orinoco_cs_probe() wifi: atmel: Fix an error handling path in atmel_probe() wifi: wl3501_cs: Fix an error handling path in wl3501_probe() wifi: ray_cs: Fix an error handling path in ray_probe() wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes samples/bpf: xdp1 and xdp2 reduce XDPBUFSIZE to 60 wifi: ath10k: Trigger STA disconnect after reconfig complete on hardware restart wifi: mac80211: recalc min chandef for new STA links selftests/bpf: Fix check_mtu using wrong variable type wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown ice: handle extts in the miscellaneous interrupt thread selftests: cgroup: fix unexpected failure on test_memcg_low watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config watchdog/perf: more properly prevent false positives with turbo modes kexec: fix a memory leak in crash_shrink_memory() mmc: mediatek: Avoid ugly error message when SDIO wakeup IRQ isn't used memstick r592: make memstick_debug_get_tpc_name() static wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() wifi: mac80211: Fix permissions for valid_links debugfs entry rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO wifi: ath11k: Add missing check for ioremap wifi: iwlwifi: pull from TXQs with softirqs disabled wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() wifi: mac80211: Remove "Missing iftype sband data/EHT cap" spam wifi: cfg80211: rewrite merging of inherited elements wifi: cfg80211: drop incorrect nontransmitted BSS update code wifi: cfg80211: fix regulatory disconnect with OCB/NAN wifi: cfg80211/mac80211: Fix ML element common size calculation wifi: ieee80211: Fix the common size calculation for reconfiguration ML mmc: Add MMC_QUIRK_BROKEN_SD_CACHE for Kingston Canvas Go Plus from 11/2019 wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection wifi: ath9k: convert msecs to jiffies where needed bpf: Factor out socket lookup functions for the TC hookpoint. bpf: Call __bpf_sk_lookup()/__bpf_skc_lookup() directly via TC hookpoint bpf: Fix bpf socket lookup from tc/xdp to respect socket VRF bindings can: length: fix bitstuffing count can: kvaser_pciefd: Add function to set skb hwtstamps can: kvaser_pciefd: Set hardware timestamp on transmitted packets net: stmmac: fix double serdes powerdown netlink: fix potential deadlock in netlink_set_err() netlink: do not hard code device address lenth in fdb dumps bonding: do not assume skb mac_header is set selftests: rtnetlink: remove netdevsim device after ipsec offload test gtp: Fix use-after-free in __gtp_encap_destroy(). net: axienet: Move reset before 64-bit DMA detection ocfs2: Fix use of slab data with sendpage sfc: fix crash when reading stats while NIC is resetting net: nfc: Fix use-after-free caused by nfc_llcp_find_local lib/ts_bm: reset initial match offset for every block of text netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. ipvlan: Fix return value of ipvlan_queue_xmit() netlink: Add __sock_i_ino() for __netlink_diag_dump(). drm/amd/display: Add logging for display MALL refresh setting radeon: avoid double free in ci_dpm_init() drm/amd/display: Explicitly specify update type per plane info change drm/bridge: it6505: Move a variable assignment behind a null pointer check in receive_timing_debugfs_show() Input: drv260x - sleep between polling GO bit drm/bridge: ti-sn65dsi83: Fix enable error path drm/bridge: tc358768: always enable HS video mode drm/bridge: tc358768: fix PLL parameters computation drm/bridge: tc358768: fix PLL target frequency drm/bridge: tc358768: fix TCLK_ZEROCNT computation drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation drm/bridge: tc358768: fix TCLK_TRAILCNT computation drm/bridge: tc358768: fix THS_ZEROCNT computation drm/bridge: tc358768: fix TXTAGOCNT computation drm/bridge: tc358768: fix THS_TRAILCNT computation drm/vram-helper: fix function names in vram helper doc ARM: dts: BCM5301X: Drop "clock-names" from the SPI node ARM: dts: meson8b: correct uart_B and uart_C clock references mm: call arch_swap_restore() from do_swap_page() clk: vc5: Use `clamp()` to restrict PLL range bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page clk: vc5: Fix .driver_data content in i2c_device_id clk: vc7: Fix .driver_data content in i2c_device_id clk: rs9: Fix .driver_data content in i2c_device_id Input: adxl34x - do not hardcode interrupt trigger type drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` drm/panel: sharp-ls043t1le01: adjust mode settings driver: soc: xilinx: use _safe loop iterator to avoid a use after free ASoC: Intel: sof_sdw: remove SOF_SDW_TGL_HDMI for MeteorLake devices drm/vkms: isolate pixel conversion functionality drm: Add fixed-point helper to get rounded integer values drm/vkms: Fix RGB565 pixel conversion ARM: dts: stm32: Move ethernet MAC EEPROM from SoM to carrier boards bus: ti-sysc: Fix dispc quirk masking bool variables arm64: dts: microchip: sparx5: do not use PSCI on reference boards drm/bridge: tc358767: Switch to devm MIPI-DSI helpers clk: imx: scu: use _safe list iterator to avoid a use after free hwmon: (f71882fg) prevent possible division by zero RDMA/bnxt_re: Disable/kill tasklet only if it is enabled RDMA/bnxt_re: Fix to remove unnecessary return labels RDMA/bnxt_re: Use unique names while registering interrupts RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid RDMA/bnxt_re: Fix to remove an unnecessary log drm/msm/dsi: don't allow enabling 14nm VCO with unprogrammed rate drm/msm/disp/dpu: get timing engine status from intf status register drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK iommu/virtio: Detach domain on endpoint release iommu/virtio: Return size mapped for a detached domain clk: renesas: rzg2l: Fix CPG_SIPLL5_CLK1 register write ARM: dts: gta04: Move model property out of pinctrl node drm/bridge: anx7625: Convert to i2c's .probe_new() drm/bridge: anx7625: Prevent endless probe loop ARM: dts: qcom: msm8974: do not use underscore in node name (again) arm64: dts: qcom: msm8916: correct camss unit address arm64: dts: qcom: msm8916: correct MMC unit address arm64: dts: qcom: msm8994: correct SPMI unit address arm64: dts: qcom: msm8996: correct camss unit address arm64: dts: qcom: sdm630: correct camss unit address arm64: dts: qcom: sdm845: correct camss unit address arm64: dts: qcom: sm8350: Add GPI DMA compatible fallback arm64: dts: qcom: sm8350: correct DMA controller unit address arm64: dts: qcom: sdm845-polaris: add missing touchscreen child node reg arm64: dts: qcom: apq8016-sbc: Fix regulator constraints arm64: dts: qcom: apq8016-sbc: Fix 1.8V power rail on LS expansion drm/bridge: Introduce pre_enable_prev_first to alter bridge init order drm/bridge: ti-sn65dsi83: Fix enable/disable flow to meet spec drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H ARM: ep93xx: fix missing-prototype warnings ARM: omap2: fix missing tick_broadcast() prototype arm64: dts: qcom: pm7250b: add missing spmi-vadc include arm64: dts: qcom: apq8096: fix fixed regulator name property arm64: dts: mediatek: mt8183: Add mediatek,broken-save-restore-fw to kukui ARM: dts: stm32: Shorten the AV96 HDMI sound card name memory: brcmstb_dpfe: fix testing array offset after use ARM: dts: qcom: apq8074-dragonboard: Set DMA as remotely controlled ASoC: es8316: Increment max value for ALC Capture Target Volume control ASoC: es8316: Do not set rate constraints for unsupported MCLKs ARM: dts: meson8: correct uart_B and uart_C clock references soc/fsl/qe: fix usb.c build errors RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate RDMA/hns: Fix hns_roce_table_get return value ARM: dts: iwg20d-q7-common: Fix backlight pwm specifier arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 drm/msm/dpu: set DSC flush bit correctly at MDP CTL flush register fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() arm64: dts: ti: k3-j7200: Fix physical address of pin Input: pm8941-powerkey - fix debounce on gen2+ PMICs ARM: dts: stm32: Fix audio routing on STM32MP15xx DHCOM PDK2 ARM: dts: stm32: fix i2s endpoint format property for stm32mp15xx-dkx hwmon: (gsc-hwmon) fix fan pwm temperature scaling hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 ARM: dts: BCM5301X: fix duplex-full => full-duplex clk: Export clk_hw_forward_rate_request() drm/amd/display: Fix a test CalculatePrefetchSchedule() drm/amd/display: Fix a test dml32_rq_dlg_get_rq_reg() drm/amdkfd: Fix potential deallocation of previously deallocated memory. soc: mediatek: SVS: Fix MT8192 GPU node name drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode drm/radeon: fix possible division-by-zero errors HID: uclogic: Modular KUnit tests should not depend on KUNIT=y RDMA/rxe: Add ibdev_dbg macros for rxe RDMA/rxe: Replace pr_xxx by rxe_dbg_xxx in rxe_mw.c RDMA/rxe: Fix access checks in rxe_check_bind_mw amdgpu: validate offset_in_bo of drm_amdgpu_gem_va drm/msm/a5xx: really check for A510 in a5xx_gpu_init RDMA/bnxt_re: wraparound mbox producer index RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context clk: imx: clk-imxrt1050: fix memory leak in imxrt1050_clocks_probe clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() arm64: dts: qcom: sdm845: Flush RSC sleep & wake votes arm64: dts: qcom: sm8250-edo: Panel framebuffer is 2.5k instead of 4k clk: bcm: rpi: Fix off by one in raspberrypi_discover_clocks() clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider() clk: tegra: tegra124-emc: Fix potential memory leak ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer drm/msm/dpu: do not enable color-management if DSPPs are not available drm/msm/dpu: Fix slice_last_group_size calculation drm/msm/dsi: Use DSC slice(s) packet size to compute word count drm/msm/dsi: Flip greater-than check for slice_count and slice_per_intf drm/msm/dsi: Remove incorrect references to slice_count drm/msm/dp: Free resources after unregistering them arm64: dts: mediatek: Add cpufreq nodes for MT8192 arm64: dts: mediatek: mt8192: Fix CPUs capacity-dmips-mhz drm/amdgpu: Fix memcpy() in sienna_cichlid_append_powerplay_table function. drm/amdgpu: Fix usage of UMC fill record in RAS drm/msm/dpu: correct MERGE_3D length clk: vc5: check memory returned by kasprintf() clk: cdce925: check return value of kasprintf() clk: si5341: return error if one synth clock registration fails clk: si5341: check return value of {devm_}kasprintf() clk: si5341: free unused memory on probe failure clk: keystone: sci-clk: check return value of kasprintf() clk: ti: clkctrl: check return value of kasprintf() drivers: meson: secure-pwrc: always enable DMA domain ovl: update of dentry revalidate flags after copy up ASoC: imx-audmix: check return value of devm_kasprintf() clk: Fix memory leak in devm_clk_notifier_register() ARM: dts: lan966x: kontron-d10: fix board reset ARM: dts: lan966x: kontron-d10: fix SPI CS ASoC: amd: acp: clear pdm dma interrupt mask PCI: cadence: Fix Gen2 Link Retraining process PCI: vmd: Reset VMD config register between soft reboots scsi: qedf: Fix NULL dereference in error handling pinctrl: bcm2835: Handle gpiochip_add_pin_range() errors platform/x86: lenovo-yogabook: Fix work race on remove() platform/x86: lenovo-yogabook: Reprobe devices on remove() platform/x86: lenovo-yogabook: Set default keyboard backligh brightness on probe() PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() PCI: pciehp: Cancel bringup sequence if card is not present PCI: ftpci100: Release the clock resources pinctrl: sunplus: Add check for kmalloc PCI: Add pci_clear_master() stub for non-CONFIG_PCI scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state perf bench: Add missing setlocale() call to allow usage of %'d style formatting pinctrl: cherryview: Return correct value if pin in push-pull mode platform/x86: think-lmi: mutex protection around multiple WMI calls platform/x86: think-lmi: Correct System password interface platform/x86: think-lmi: Correct NVME password handling pinctrl:sunplus: Add check for kmalloc pinctrl: npcm7xx: Add missing check for ioremap kcsan: Don't expect 64 bits atomic builtins from 32 bits architectures powerpc/interrupt: Don't read MSR from interrupt_exit_kernel_prepare() powerpc/signal32: Force inlining of __unsafe_save_user_regs() and save_tm_user_regs_unsafe() perf script: Fix allocation of evsel->priv related to per-event dump files platform/x86: thinkpad_acpi: Fix lkp-tests warnings for platform profiles perf dwarf-aux: Fix off-by-one in die_get_varname() platform/x86/dell/dell-rbtn: Fix resources leaking on error path perf tool x86: Consolidate is_amd check into single function perf tool x86: Fix perf_env memory leak powerpc/64s: Fix VAS mm use after free pinctrl: microchip-sgpio: check return value of devm_kasprintf() pinctrl: at91-pio4: check return value of devm_kasprintf() powerpc/powernv/sriov: perform null check on iov before dereferencing iov powerpc: simplify ppc_save_regs powerpc: update ppc_save_regs to save current r1 in pt_regs PCI: qcom: Remove PCIE20_ prefix from register definitions PCI: qcom: Sort and group registers and bitfield definitions PCI: qcom: Use lower case for hex PCI: qcom: Use DWC helpers for modifying the read-only DBI registers PCI: qcom: Disable write access to read only registers for IP v2.9.0 riscv: uprobes: Restore thread.bad_cause powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary PCI: endpoint: Fix Kconfig indent style PCI: endpoint: Fix a Kconfig prompt of vNTB driver PCI: endpoint: functions/pci-epf-test: Fix dma_chan direction PCI: vmd: Fix uninitialized variable usage in vmd_enable_domain() vfio/mdev: Move the compat_class initialization to module init hwrng: virtio - Fix race on data_avail and actual data modpost: remove broken calculation of exception_table_entry size crypto: nx - fix build warnings when DEBUG_FS is not enabled modpost: fix section mismatch message for R_ARM_ABS32 modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} crypto: marvell/cesa - Fix type mismatch warning crypto: jitter - correct health test during initialization modpost: fix off by one in is_executable_section() ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard crypto: kpp - Add helper to set reqsize crypto: qat - Use helper to set reqsize crypto: qat - unmap buffer before free for DH crypto: qat - unmap buffers before free for RSA NFSv4.2: fix wrong shrinker_id NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION SMB3: Do not send lease break acknowledgment if all file handles have been closed dax: Fix dax_mapping_release() use after free dax: Introduce alloc_dev_dax_id() dax/kmem: Pass valid argument to memory_group_register_static hwrng: st - keep clock enabled while hwrng is registered kbuild: Disable GCOV for *.mod.o efi/libstub: Disable PCI DMA before grabbing the EFI memory map cifs: prevent use-after-free by freeing the cfile later cifs: do all necessary checks for credits within or before locking smb: client: fix broken file attrs with nodfs mounts ksmbd: avoid field overflow warning arm64: sme: Use STR P to clear FFR context field in streaming SVE mode x86/efi: Make efi_set_virtual_address_map IBT safe md/raid1-10: fix casting from randomized structure in raid1_submit_write() USB: serial: option: add LARA-R6 01B PIDs usb: dwc3: gadget: Propagate core init errors to UDC during pullup phy: tegra: xusb: Clear the driver reference in usb-phy dev iio: adc: ad7192: Fix null ad7192_state pointer access iio: adc: ad7192: Fix internal/external clock selection iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF iio: accel: fxls8962af: fixup buffer scan element type Revert "drm/amd/display: edp do not add non-edid timings" mm/mmap: Fix VM_LOCKED check in do_vmi_align_munmap() ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on EliteBook ALSA: hda/realtek: Add quirk for Clevo NPx0SNx ALSA: jack: Fix mutex call in snd_jack_report() ALSA: pcm: Fix potential data race at PCM memory allocation helpers block: fix signed int overflow in Amiga partition support block: add overflow checks for Amiga partition support block: change all __u32 annotations to __be32 in affs_hardblocks.h block: increment diskseq on all media change events btrfs: fix race when deleting free space root from the dirty cow roots list SUNRPC: Fix UAF in svc_tcp_listen_data_ready() w1: w1_therm: fix locking behavior in convert_t w1: fix loop in w1_fini() dt-bindings: power: reset: qcom-pon: Only allow reboot-mode pre-pmk8350 f2fs: do not allow to defragment files have FI_COMPRESS_RELEASED sh: j2: Use ioremap() to translate device tree address into kernel memory usb: dwc2: platform: Improve error reporting for problems during .remove() usb: dwc2: Fix some error handling paths serial: 8250: omap: Fix freeing of resources on failed register clk: qcom: mmcc-msm8974: remove oxili_ocmemgx_clk clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks clk: qcom: gcc-qcm2290: Mark RCGs shared where applicable media: usb: Check az6007_read() return value media: amphion: drop repeated codec data for vc1l format media: amphion: drop repeated codec data for vc1g format media: amphion: initiate a drain of the capture queue in dynamic resolution change media: videodev2.h: Fix struct v4l2_input tuner index comment media: usb: siano: Fix warning due to null work_func_t function pointer media: i2c: Correct format propagation for st-mipid02 media: hi846: fix usage of pm_runtime_get_if_in_use() media: mediatek: vcodec: using decoder status instead of core work count clk: qcom: reset: support resetting multiple bits clk: qcom: ipq6018: fix networking resets clk: qcom: dispcc-qcm2290: Fix BI_TCXO_AO handling clk: qcom: dispcc-qcm2290: Fix GPLL0_OUT_DIV handling clk: qcom: mmcc-msm8974: use clk_rcg2_shared_ops for mdp_clk_src clock staging: vchiq_arm: mark vchiq_platform_init() static usb: dwc3: qcom: Fix potential memory leak usb: gadget: u_serial: Add null pointer check in gserial_suspend extcon: Fix kernel doc of property fields to avoid warnings extcon: Fix kernel doc of property capability fields to avoid warnings usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() usb: hide unused usbfs_notify_suspend/resume functions usb: misc: eud: Fix eud sysfs path (use 'qcom_eud') serial: core: lock port for stop_rx() in uart_suspend_port() serial: 8250: lock port for stop_rx() in omap8250_irq() serial: core: lock port for start_rx() in uart_resume_port() serial: 8250: lock port for UART_IER access in omap8250_irq() kernfs: fix missing kernfs_idr_lock to remove an ID from the IDR lkdtm: replace ll_rw_block with submit_bh i3c: master: svc: fix cpu schedule in spin lock coresight: Fix loss of connection info when a module is unloaded mfd: rt5033: Drop rt5033-battery sub-device media: venus: helpers: Fix ALIGN() of non power of two media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() sh: Avoid using IRQ0 on SH3 and SH4 gfs2: Fix duplicate should_fault_in_pages() call f2fs: fix potential deadlock due to unpaired node_write lock use f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() usb: common: usb-conn-gpio: Set last role to unknown before initial detection usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() mfd: wcd934x: Fix an error handling path in wcd934x_slim_probe() mfd: intel-lpss: Add missing check for platform_get_resource Revert "usb: common: usb-conn-gpio: Set last role to unknown before initial detection" serial: 8250_omap: Use force_suspend and resume for system suspend device property: Fix documentation for fwnode_get_next_parent() device property: Clarify description of returned value in some functions drivers: fwnode: fix fwnode_irq_get[_byname]() nvmem: sunplus-ocotp: release otp->clk before return nvmem: rmem: Use NVMEM_DEVID_AUTO bus: fsl-mc: don't assume child devices are all fsl-mc devices mfd: stmfx: Fix error path in stmfx_chip_init mfd: stmfx: Nullify stmfx->vdd in case of error KVM: s390: vsie: fix the length of APCB bitmap KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler cpufreq: mediatek: correct voltages for MT7622 and MT7623 misc: fastrpc: check return value of devm_kasprintf() clk: qcom: mmcc-msm8974: fix MDSS_GDSC power flags hwtracing: hisi_ptt: Fix potential sleep in atomic context mfd: stmpe: Only disable the regulators if they are enabled phy: tegra: xusb: check return value of devm_kzalloc() lib/bitmap: drop optimization of bitmap_{from,to}_arr64 pwm: imx-tpm: force 'real_period' to be zero in suspend pwm: sysfs: Do not apply state to already disabled PWMs pwm: ab8500: Fix error code in probe() pwm: mtk_disp: Fix the disable flow of disp_pwm md/raid10: fix the condition to call bio_end_io_acct() rtc: st-lpc: Release some resources in st_rtc_probe() in case of error drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times drm/i915/guc/slpc: Apply min softlimit correctly f2fs: check return value of freeze_super() media: cec: i2c: ch7322: also select REGMAP sctp: fix potential deadlock on &net->sctp.addr_wq_lock net/sched: act_ipt: add sanity checks on table name and hook locations net: add a couple of helpers for iph tot_len net/sched: act_ipt: add sanity checks on skb before calling target spi: spi-geni-qcom: enable SPI_CONTROLLER_MUST_TX for GPI DMA mode net: mscc: ocelot: don't report that RX timestamping is enabled by default net: mscc: ocelot: don't keep PTP configuration of all ports in single structure net: dsa: felix: don't drop PTP frames with tag_8021q when RX timestamping is disabled net: dsa: sja1105: always enable the INCL_SRCPT option net: dsa: tag_sja1105: always prefer source port information from INCL_SRCPT Add MODULE_FIRMWARE() for FIRMWARE_TG357766. Bluetooth: fix invalid-bdaddr quirk for non-persistent setup Bluetooth: ISO: use hci_sync for setting CIG parameters Bluetooth: MGMT: add CIS feature bits to controller information Bluetooth: MGMT: Use BIT macro when defining bitfields Bluetooth: MGMT: Fix marking SCAN_RSP as not connectable ibmvnic: Do not reset dql stats on NON_FATAL err net: dsa: vsc73xx: fix MTU configuration mlxsw: minimal: fix potential memory leak in mlxsw_m_linecards_init spi: bcm-qspi: return error if neither hif_mspi nor mspi is available drm/amdgpu: fix number of fence calculations drm/amd: Don't try to enable secure display TA multiple times mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 f2fs: fix error path handling in truncate_dnode() octeontx2-af: Fix mapping for NIX block from CGX connection octeontx2-af: Add validation before accessing cgx and lmac ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr() powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y powerpc: dts: turris1x.dts: Fix PCIe MEM size for pci2 node net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode net: dsa: tag_sja1105: fix source port decoding in vlan_filtering=0 bridge mode net: fix net_dev_start_xmit trace event vs skb_transport_offset() tcp: annotate data races in __tcp_oow_rate_limited() bpf, btf: Warn but return no error for NULL btf from __register_btf_kfunc_id_set() xsk: Honor SO_BINDTODEVICE on bind net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX fanotify: disallow mount/sb marks on kernel internal pseudo fs riscv: move memblock_allow_resize() after linear mapping is ready pptp: Fix fib lookup calls. net: dsa: tag_sja1105: fix MAC DA patching from meta frames net: dsa: sja1105: always enable the send_meta options octeontx-af: fix hardware timestamp configuration afs: Fix accidental truncation when storing data s390/qeth: Fix vipa deletion sh: dma: Fix DMA channel offset calculation apparmor: fix missing error check for rhashtable_insert_fast i2c: xiic: Don't try to handle more interrupt events after error dm: fix undue/missing spaces dm: avoid split of quoted strings where possible dm ioctl: have constant on the right side of the test dm ioctl: Avoid double-fetch of version extcon: usbc-tusb320: Convert to i2c's .probe_new() extcon: usbc-tusb320: Unregister typec port on driver removal btrfs: do not BUG_ON() on tree mod log failure at balance_level() i2c: qup: Add missing unwind goto in qup_i2c_probe() irqchip/loongson-pch-pic: Fix potential incorrect hwirq assignment NFSD: add encoding of op_recall flag for write delegation irqchip/loongson-pch-pic: Fix initialization of HT vector register io_uring: wait interruptibly for request completions on exit mmc: core: disable TRIM on Kingston EMMC04G-M627 mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used. wifi: cfg80211: fix regulatory disconnect for non-MLO wifi: ath10k: Serialize wake_tx_queue ops wifi: mt76: mt7921e: fix init command fail with enabled device bcache: fixup btree_cache_wait list damage bcache: Remove unnecessary NULL point check in node allocations bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent watch_queue: prevent dangling pipe pointer um: Use HOST_DIR for mrproper integrity: Fix possible multiple allocation in integrity_inode_get() autofs: use flexible array in ioctl structure mm/damon/ops-common: atomically test and clear young on ptes and pmds shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs jffs2: reduce stack usage in jffs2_build_xattr_subsystem() fs: avoid empty option when generating legacy mount string ext4: Remove ext4 locking of moved directory Revert "f2fs: fix potential corruption when moving a directory" fs: Establish locking order for unrelated directories fs: Lock moved directories i2c: nvidia-gpu: Add ACPI property to align with device-tree i2c: nvidia-gpu: Remove ccgx,firmware-build property usb: typec: ucsi: Mark dGPUs as DEVICE scope ipvs: increase ip_vs_conn_tab_bits range for 64BIT btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile btrfs: delete unused BGs while reclaiming BGs btrfs: bail out reclaim process if filesystem is read-only btrfs: add block-group tree to lockdep classes btrfs: reinsert BGs failed to reclaim btrfs: fix race when deleting quota root from the dirty cow roots list btrfs: fix extent buffer leak after tree mod log failure at split_node() btrfs: do not BUG_ON() on tree mod log failure at __btrfs_cow_block() ASoC: mediatek: mt8173: Fix irq error path ASoC: mediatek: mt8173: Fix snd_soc_component_initialize error path regulator: tps65219: Fix matching interrupts for their regulators ARM: dts: qcom: ipq4019: fix broken NAND controller properties override ARM: orion5x: fix d2net gpio initialization leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename blktrace: use inline function for blk_trace_remove() while blktrace is disabled fs: no need to check source xfs: explicitly specify cpu when forcing inodegc delayed work to run immediately xfs: check that per-cpu inodegc workers actually run on that cpu xfs: disable reaping in fscounters scrub xfs: fix xfs_inodegc_stop racing with mod_delayed_work mm/mmap: Fix extra maple tree write drm/i915: Fix TypeC mode initialization during system resume drm/i915/tc: Fix TC port link ref init for DP MST during HW readout drm/i915/tc: Fix system resume MST mode restore for DP-alt sinks mtd: parsers: refer to ARCH_BCMBCA instead of ARCH_BCM4908 netfilter: nf_tables: unbind non-anonymous set if rule construction fails netfilter: conntrack: Avoid nf_ct_helper_hash uses after free netfilter: nf_tables: do not ignore genmask when looking up chain by id netfilter: nf_tables: prevent OOB access in nft_byteorder_eval wireguard: queueing: use saner cpu selection wrapping wireguard: netlink: send staged packets when setting initial private key tty: serial: fsl_lpuart: add earlycon for imx8ulp platform block/partition: fix signedness issue for Amiga partitions sh: mach-r2d: Handle virq offset in cascaded IRL demux sh: mach-highlander: Handle virq offset in cascaded IRL demux sh: mach-dreamcast: Handle virq offset in cascaded IRQ demux sh: hd64461: Handle virq offset for offchip IRQ base and HD64461 IRQ io_uring: Use io_schedule* in cqring wait Linux 6.1.39 Change-Id: I5867c943c99c157fa599ecd08da961c632e58302 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-09-02 19:41:42 +00:00
Ming Lei	c21fddce7e	nvme-rdma: fix potential unbalanced freeze & unfreeze ... commit 29b434d1e49252b3ad56ad3197e47fafff5356a1 upstream. Move start_freeze into nvme_rdma_configure_io_queues(), and there is at least two benefits: 1) fix unbalanced freeze and unfreeze, since re-connection work may fail or be broken by removal 2) IO during error recovery can be failfast quickly because nvme fabrics unquiesces queues after teardown. One side-effect is that !mpath request may timeout during connecting because of queue topo change, but that looks not one big deal: 1) same problem exists with current code base 2) compared with !mpath, mpath use case is dominant Fixes: 9f98772ba3 ("nvme-rdma: fix controller reset hang during traffic") Cc: stable@vger.kernel.org Signed-off-by: Ming Lei <ming.lei@redhat.com> Tested-by: Yi Zhang <yi.zhang@redhat.com> Reviewed-by: Sagi Grimberg <sagi@grimberg.me> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-08-16 18:27:30 +02:00
Ming Lei	cddbaa8dee	nvme-tcp: fix potential unbalanced freeze & unfreeze ... commit 99dc264014d5aed66ee37ddf136a38b5a2b1b529 upstream. Move start_freeze into nvme_tcp_configure_io_queues(), and there is at least two benefits: 1) fix unbalanced freeze and unfreeze, since re-connection work may fail or be broken by removal 2) IO during error recovery can be failfast quickly because nvme fabrics unquiesces queues after teardown. One side-effect is that !mpath request may timeout during connecting because of queue topo change, but that looks not one big deal: 1) same problem exists with current code base 2) compared with !mpath, mpath use case is dominant Fixes: 2875b0aeca ("nvme-tcp: fix controller reset hang during traffic") Cc: stable@vger.kernel.org Signed-off-by: Ming Lei <ming.lei@redhat.com> Tested-by: Yi Zhang <yi.zhang@redhat.com> Reviewed-by: Sagi Grimberg <sagi@grimberg.me> Signed-off-by: Keith Busch <kbusch@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-08-16 18:27:30 +02:00