lineage-22.1
20293 Commits
Author | SHA1 | Message | Date | |
---|---|---|---|---|
Srinivasarao Pathipati
|
37e14da1f2 |
Merge keystone/android14-6.1-keystone-qcom-release.6.1.78+ (075ce55 ) into qcom-6.1
* refs/heads/tmp-075ce55: ANDROID: 16K: Avoid mmap lock assertions for padding VMAs ANDROID: consolidate.fragment: don't disable CONFIG_PM_ADVANCED_DEBUG ANDROID: GKI: Update symbol list for mtk Revert "f2fs: fix to tag gcing flag on page during block migration" ANDROID: 16K: Only check basename of linker context FROMGIT: arm64: mte: Make mte_check_tfsr_*() conditional on KASAN instead of MTE ANDROID: gki_defconfig: Disable CONFIG_BRCMSTB_DPFE and CONFIG_BRCMSTB_MEMC FROMGIT: f2fs: fix to avoid use SSR allocate when do defragment ANDROID: 16K: Only check basename of linker context ANDROID: 16K: Avoid and document padding madvise lock warning ANDROID: arm64: vdso32: support user-supplied flags ANDROID: GKI: Add initial symbol list for bcmstb ANDROID: gki_defconfig: Enable Broadcom STB SoCs UPSTREAM: mmc: core: Do not force a retune before RPMB switch UPSTREAM: arm64/arm: arm_pmuv3: perf: Don't truncate 64-bit registers BACKPORT: net: phy: Allow drivers to always call into ->suspend() UPSTREAM: ARM: perf: Mark all accessor functions inline UPSTREAM: arm64: perf: Mark all accessor functions inline UPSTREAM: perf/core: Drop __weak attribute from arch_perf_update_userpage() prototype UPSTREAM: ARM: perf: Allow the use of the PMUv3 driver on 32bit ARM UPSTREAM: ARM: Make CONFIG_CPU_V7 valid for 32bit ARMv8 implementations UPSTREAM: perf: pmuv3: Change GENMASK to GENMASK_ULL UPSTREAM: perf: pmuv3: Move inclusion of kvm_host.h to the arch-specific helper UPSTREAM: perf: pmuv3: Abstract PMU version checks UPSTREAM: arm64: perf: Abstract system register accesses away UPSTREAM: arm64: perf: Move PMUv3 driver to drivers/perf UPSTREAM: arm64/perf: Replace PMU version number '0' with ID_AA64DFR0_EL1_PMUVer_NI ANDROID: GKI: Update oplus symbol list UPSTREAM: block/blk-mq: Don't complete locally if capacities are different BACKPORT: sched: Add a new function to compare if two cpus have the same capacity ANDROID: GKI: Update symbol list for mtk ANDROID: GKI: Update rockchip symbols for rndis_host. ANDROID: GKI: Update rockchip symbols for snd multi dais. UPSTREAM: usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete UPSTREAM: usb: gadget: f_fs: use io_data->status consistently ANDROID: set rewrite_absolute_paths_in_config for GKI aarch64. UPSTREAM: wifi: cfg80211: Clear mlo_links info when STA disconnects ANDROID: ABI: Add usb_gadget_connect & usb_gadget_disconnect symbol ANDROID: GKI: Update symbol list for mtk BACKPORT: iommu: Have __iommu_probe_device() check for already probed devices ANDROID: ABI fixup for abi break in struct dst_ops BACKPORT: net: fix __dst_negative_advice() race ANDROID: ABI fixup for abi break in struct dst_ops BACKPORT: net: fix __dst_negative_advice() race Revert "crypto: api - Disallow identical driver names" UPSTREAM: USB: gadget: core: create sysfs link between udc and gadget ANDROID: GKI: add tegra20-cpufreq.ko to rockpi4 build ANDROID: GKI: update symbol list for db845c ANDROID: Build some tegra configs as vendor module ANDROID: gki_defconfig: Enable Tegra SoCs ANDROID: Update the ABI symbol list Revert^2 "BACKPORT: FROMGIT: module: allow UNUSED_KSYMS_WHITELIST ..." ANDROID: binder: fix KMI-break due to alloc->lock ANDROID: binder: fix ptrdiff_t printk-format issue ANDROID: binder: fix KMI-break due to address type change Reapply "ANDROID: vendor_hooks: Add hook for binder_detect_low_async_space" Reapply "ANDROID: Add vendor hooks for binder perf tuning" UPSTREAM: binder: switch alloc->mutex to spinlock_t UPSTREAM: binder: reverse locking order in shrinker callback UPSTREAM: binder: avoid user addresses in debug logs UPSTREAM: binder: refactor binder_delete_free_buffer() UPSTREAM: binder: collapse print_binder_buffer() into caller UPSTREAM: binder: document the final page calculation BACKPORT: UPSTREAM: binder: rename lru shrinker utilities UPSTREAM: binder: make oversized buffer code more readable UPSTREAM: binder: remove redundant debug log UPSTREAM: binder: perform page installation outside of locks UPSTREAM: binder: initialize lru pages in mmap callback UPSTREAM: binder: malloc new_buffer outside of locks UPSTREAM: binder: refactor page range allocation UPSTREAM: binder: relocate binder_alloc_clear_buf() UPSTREAM: binder: relocate low space calculation UPSTREAM: binder: separate the no-space debugging logic UPSTREAM: binder: remove pid param in binder_alloc_new_buf() UPSTREAM: binder: do unlocked work in binder_alloc_new_buf() UPSTREAM: binder: split up binder_update_page_range() UPSTREAM: binder: keep vma addresses type as unsigned long UPSTREAM: binder: remove extern from function prototypes Revert "ANDROID: Add vendor hooks for binder perf tuning" Revert "ANDROID: vendor_hooks: Add hook for binder_detect_low_async_space_locked" Revert "ANDROID: vendor_hook: rename the the name of hooks" ANDROID: GKI: Update rockchip symbols for some usb wifi bt. UPSTREAM: selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior ANDROID: GKI: Update rockchip symbols to add iova APIs FROMLIST: kheaders: explicitly define file modes for archived headers ANDROID: incremental-fs: Make work with 16k pages ANDROID: pahole -J -j1 for reproducible BTF Revert "BACKPORT: FROMGIT: module: allow UNUSED_KSYMS_WHITELIST ..." BACKPORT: FROMGIT: module: allow UNUSED_KSYMS_WHITELIST to be relative against objtree. ANDROID: export one function for mm metrics ANDROID: GKI: Update symbol list for mtk FROMLIST: kheaders: explicitly define file modes for archived headers ANDROID: pahole -J -j1 for reproducible BTF FROMLIST: usb: typec: tcpm: Ignore received Hard Reset in TOGGLING state ANDROID: Export sysctl_sched_wakeup_granularity to enable modifying it UPSTREAM: epoll: be better about file lifetimes FROMLIST: usb: typec: tcpm: Ignore received Hard Reset in TOGGLING state FROMLIST: usb: typec: tcpm: Ignore received Hard Reset in TOGGLING state UPSTREAM: usb: gadget: ncm: Fix handling of zero block length packets ANDROID: Update the ABI symbol list ANDROID: GKI: Update symbol list for mtk UPSTREAM: usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs ANDROID: GKI: Update rockchip symbols to add iova APIs FROMLIST: sched/pi: Reweight fair_policy() tasks when inheriting prio ANDROID: Update the ABI symbol list ANDROID: mm: Add restricted vendor hook in do_read_fault() ANDROID: abi_gki_aarch64_qcom: Update symbol list ANDROID: abi_gki_aarch64_qcom: Update symbol list ANDROID: Update the ABI symbol list ANDROID: add vendor hooks and expoert reclaim_pages to reclaim memory FROMGIT: usb: dwc3: Wait unconditionally after issuing EndXfer command ANDROID: ABI: Update honor symbol list ANDROID: add vendor hook in do_read_fault to tune fault_around_bytes ANDROID: usb: Optimize the problem of slow transfer rate in USB accessory mode ANDROID: Zap kernel/sched/android.h stubs ANDROID: Update the ABI symbol list ANDROID: Export sysctl_sched_wakeup_granularity to enable modifying it ANDROID: export one function for mm metrics ANDROID: Update the ABI symbol list ANDROID: Export sysctl_sched_wakeup_granularity to enable modifying it UPSTREAM: ALSA: virtio: use ack callback UPSTREAM: usb: typec: tcpm: clear pd_event queue in PORT_RESET BACKPORT: usb: typec: tcpm: enforce ready state when queueing alt mode vdm ANDROID: GKI: Update QCOM symbol list and ABI STG ANDROID: GKI: fix ABI breakage in struct userfaultfd_ctx UPSTREAM: userfaultfd: fix deadlock warning when locking src and dst VMAs BACKPORT: userfaultfd: use per-vma locks in userfaultfd operations BACKPORT: mm: add vma_assert_locked() for !CONFIG_PER_VMA_LOCK BACKPORT: userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx BACKPORT: userfaultfd: move userfaultfd_ctx struct to header file BACKPORT: userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb BACKPORT: selftests/mm: add separate UFFDIO_MOVE test for PMD splitting BACKPORT: selftests/mm: add UFFDIO_MOVE ioctl test BACKPORT: selftests/mm: add uffd_test_case_ops to allow test case-specific operations BACKPORT: selftests/mm: call uffd_test_ctx_clear at the end of the test UPSTREAM: userfaultfd: fix return error if mmap_changing is non-zero in MOVE ioctl BACKPORT: userfaultfd: change src_folio after ensuring it's unpinned in UFFDIO_MOVE BACKPORT: mm: userfaultfd: fix unexpected change to src_folio when UFFDIO_MOVE fails BACKPORT: userfaultfd: handle zeropage moves by UFFDIO_MOVE UPSTREAM: userfaultfd: avoid huge_zero_page in UFFDIO_MOVE UPSTREAM: userfaultfd: fix move_pages_pte() splitting folio under RCU read lock BACKPORT: userfaultfd: UFFDIO_MOVE uABI UPSTREAM: mm/rmap: support move to different root anon_vma in folio_move_anon_rmap() UPSTREAM: crypto: x86/curve25519 - disable gcov ANDROID: GKI: Update QCOM symbol list and ABI STG ANDROID: GKI: update symbol list file for xiaomi UPSTREAM: netfilter: nft_set_pipapo: do not free live element UPSTREAM: net: tls: handle backlogging of crypto requests UPSTREAM: af_unix: Fix garbage collector racing against connect() UPSTREAM: af_unix: Do not use atomic ops for unix_sk(sk)->inflight. ANDROID: 16K: Fix show maps CFI failure ANDROID: 16K: Handle pad VMA splits and merges ANDROID: 16K: madvise_vma_pad_pages: Remove filemap_fault check ANDROID: 16K: Only madvise padding from dynamic linker context ANDROID: 16K: Separate padding from ELF LOAD segment mappings ANDROID: 16K: Exclude ELF padding for fault around range ANDROID: 16K: Use MADV_DONTNEED to save VMA padding pages. ANDROID: 16K: Introduce ELF padding representation for VMAs ANDROID: 16K: Introduce /sys/kernel/mm/pgsize_miration/enabled FROMGIT: usb: typec: tcpm: Check for port partner validity before consuming it FROMGIT: usb: typec: tcpm: Check for port partner validity before consuming it Revert "FROMGIT: usb: typec: tcpm: Check for port partner validity before consuming it" FROMGIT: usb: typec: tcpm: Check for port partner validity before consuming it ANDROID: vendor_hooks: add symbols for lazy preemption ANDROID: vendor_hooks: add two hooks for lazy preemption ANDROID: KVM: arm64: wait_for_initramfs for pKVM module loading procfs ANDROID: GKI: Expose device async to userspace BACKPORT: mtk-mmsys: Change mtk-mmsys & mtk-mutex to modules ANDROID: Update the ABI symbol list BACKPORT: clk: mediatek: Split configuration options for MT8186 clock drivers BACKPORT: clk: mediatek: Add MODULE_LICENSE() where missing FROMGIT: coresight: etm4x: Fix access to resource selector registers FROMGIT: coresight: etm4x: Safe access for TRCQCLTR FROMGIT: coresight: etm4x: Do not save/restore Data trace control registers FROMGIT: coresight: etm4x: Do not hardcode IOMEM access for register restore ANDROID: GKI: Update honda symbol list for led-trigger ANDROID: GKI: Update symbols to symbol list ANDROID: vendor_hook: Add hooks to support reader optimistic spin in rwsem UPSTREAM: af_unix: Fix garbage collector racing against connect() UPSTREAM: af_unix: Do not use atomic ops for unix_sk(sk)->inflight. ANDROID: GKI: fix ABI breakage in struct userfaultfd_ctx UPSTREAM: userfaultfd: fix deadlock warning when locking src and dst VMAs BACKPORT: userfaultfd: use per-vma locks in userfaultfd operations BACKPORT: mm: add vma_assert_locked() for !CONFIG_PER_VMA_LOCK BACKPORT: userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx BACKPORT: userfaultfd: move userfaultfd_ctx struct to header file BACKPORT: userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb BACKPORT: selftests/mm: add separate UFFDIO_MOVE test for PMD splitting BACKPORT: selftests/mm: add UFFDIO_MOVE ioctl test BACKPORT: selftests/mm: add uffd_test_case_ops to allow test case-specific operations BACKPORT: selftests/mm: call uffd_test_ctx_clear at the end of the test UPSTREAM: userfaultfd: fix return error if mmap_changing is non-zero in MOVE ioctl BACKPORT: userfaultfd: change src_folio after ensuring it's unpinned in UFFDIO_MOVE BACKPORT: mm: userfaultfd: fix unexpected change to src_folio when UFFDIO_MOVE fails BACKPORT: userfaultfd: handle zeropage moves by UFFDIO_MOVE UPSTREAM: userfaultfd: avoid huge_zero_page in UFFDIO_MOVE UPSTREAM: userfaultfd: fix move_pages_pte() splitting folio under RCU read lock BACKPORT: userfaultfd: UFFDIO_MOVE uABI UPSTREAM: mm/rmap: support move to different root anon_vma in folio_move_anon_rmap() ANDROID: PM: hibernate: Encryption support with compression ANDROID: abi_gki_aarch64_qcom: Update symbol list ANDROID: vendor_hooks: Add hooks to support hibernation ANDROID: gki_defconfig: Sync gki_defconfig UPSTREAM: PM: hibernate: Support to select compression algorithm UPSTREAM: PM: hibernate: Add support for LZ4 compression for hibernation BACKPORT: PM: hibernate: Move to crypto APIs for LZO compression BACKPORT: PM: hibernate: Rename lzo* to make it generic Revert "hrtimer: Report offline hrtimer enqueue" Revert "drm/mipi-dsi: Fix detach call without attach" ANDROID: ABI: Update symbol list for Exynos SoC ANDROID: abi_gki_aarch64_qcom: Update symbol list BACKPORT: mtk-mmsys: Change mtk-mmsys & mtk-mutex to modules BACKPORT: clk: mediatek: Split configuration options for MT8186 clock drivers BACKPORT: clk: mediatek: Add MODULE_LICENSE() where missing ANDROID: Update the ABI symbol list Reapply "ANDROID: block: Add support for filesystem requests and small segments" UPSTREAM: usb:typec:tcpm:support double Rp to Vbus cable as sink ANDROID: Update the ABI symbol list ANDROID: Add known structs used by modules to KMI ANDROID: use reserved cpucaps for new capability Revert "mm/sparsemem: fix race in accessing memory_section->usage" UPSTREAM: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path UPSTREAM: netfilter: nf_tables: release batch on table validation from abort path UPSTREAM: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout UPSTREAM: netfilter: nft_set_pipapo: release elements in clone only from destroy path ANDROID: GKI: Add symbol list for Nothing ANDROID: GKI: Update honda symbol list for asound ANDROID: GKI: Update honda symbol list for xt_LOG ANDROID: GKI: Update honda symbol list for ebtables ANDROID: GKI: Update honda symbol list for net scheduler ANDROID: softirq: add tasklet to LONG_SOFTIRQ_MASK ANDROID: Update the ABI symbol list ANDROID: vendor_hooks: add restricted vendor hook for meminfo ANDROID: Update the ABI symbol list BACKPORT: cpufreq: Don't unregister cpufreq cooling on CPU hotplug FROMGIT: usb: typec: tcpm: Correct the PDO counting in pd_set UPSTREAM: tls: fix race between tx work scheduling and socket close UPSTREAM: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain UPSTREAM: tls: fix race between async notify and socket close UPSTREAM: net: tls: factor out tls_*crypt_async_wait() UPSTREAM: tls: extract context alloc/initialization out of tls_set_sw_offload BACKPORT: mm: update mark_victim tracepoints fields Revert "FROMGIT: BACKPORT: mm: update mark_victim tracepoints fields" ANDROID: Update the ABI symbol list ANDROID: export two function to reclaim memory ANDROID: add reclaim tune parameter functions UPSTREAM: netfilter: nf_tables: disallow anonymous set with timeout flag ANDROID: drop redundant OWNERS_DrNo file UPSTREAM: ALSA: virtio: Fix "Coverity: virtsnd_kctl_tlv_op(): Uninitialized variables" warning. UPSTREAM: ALSA: virtio: add support for audio controls ANDROID: Update symbols list for virtio_snd.ko audio controls ANDROID: Move cpu_busy_with_softirqs() into sched.h UPSTREAM: mm: page_alloc: unreserve highatomic page blocks before oom UPSTREAM: mm: page_alloc: enforce minimum zone size to do high atomic reserves UPSTREAM: mm: page_alloc: correct high atomic reserve calculations ANDROID: Update the ABI symbol list ANDROID: Export cpu_busy_with_softirqs() ANDROID: GKI: update symbol list file for xiaomi Reapply "ANDROID: null_blk: Support configuring the maximum segment size" UPSTREAM: usb: typec: Return size of buffer if pd_set operation succeeds UPSTREAM: usb: typec: tcpm: Update PD of Type-C port upon pd_set UPSTREAM: usb: typec: tcpm: fix double-free issue in tcpm_port_unregister_pd() UPSTREAM: usb: typec: tcpm: Correct port source pdo array in pd_set callback Reapply "Merge tag 'android14-6.1.75_r00' into android14-6.1" Revert "ANDROID: null_blk: Support configuring the maximum segment size" Revert "usb: dwc3: core: configure TX/RX threshold for DWC3_IP" ANDROID: Update the ABI symbol list ANDROID: GKI: Update symbols for rockchip drm FROMLIST: binder: check offset alignment in binder_get_object() ANDROID: GKI: Add symbol list for Nothing ANDROID: thermal: Add vendor thermal_pm_notify_suspend function UPSTREAM: usb: dwc3: gadget: Don't disconnect if not started Revert "ANDROID: block: Add support for filesystem requests and small segments" ANDROID: vendor_hook: fix issue vip thread do not sleep while no vip work UPSTREAM: sched/wait: Fix a kthread_park race with wait_woken() ANDROID: KVM: arm64: Fix TLB invalidation when coalescing into a block ANDROID: ABI: Update symbol list for Exynos SoC ANDROID: GKI: Add symbols for rockchip snd trcm FROMGIT: usb: dwc2: Disable clock gating feature on Rockchip SoCs ANDROID: ABI: Update symbol list for Exynos SoC ANDROID: Add symbols for IIO SCMI module ANDROID: KVM: arm64: Fix missing trace event for nVHE dyn HVCs ANDROID: Update the ABI symbol list ANDROID: Update symbols list for open-dice.ko ANDROID: Add symbols for IIO SCMI module ANDROID: GKI: Update symbols for rockchip UPSTREAM: usb: dwc2: disable lpm feature on Rockchip SoCs ANDROID: Update symbols list for open-dice.ko FROMLIST: mm/migrate: set swap entry values of THP tail pages properly. ANDROID: Update the ABI symbol list ANDROID: virt: gunyah: Move send_lock around req and reply ANDROID: null_blk: Support configuring the maximum segment size ANDROID: scsi_debug: Support configuring the maximum segment size ANDROID: block: Add support for filesystem requests and small segments ANDROID: block: Support submitting passthrough requests with small segments ANDROID: block: Make sub_page_limit_queues available in debugfs ANDROID: block: Support configuring limits below the page size ANDROID: block: Prepare for supporting sub-page limits ANDROID: block: Use pr_info() instead of printk(KERN_INFO ...) ANDROID: sound: usb: add vendor hook for cpu suspend support ANDROID: usb: Add vendor hook for usb suspend and resume ANDROID: fips140: change linker script guard Revert "ANDROID: Update symbols list for open-dice.ko" ANDROID: Update symbols list for open-dice.ko FROMGIT: PM: sleep: wakeirq: fix wake irq warning in system suspend ANDROID: ABI: Update symbol for Exynos SoC UPSTREAM: usb: dwc3: core: set force_gen1 bit in USB31 devices if max speed is SS UPSTREAM: PCI: dwc: Strengthen the MSI address allocation logic UPSTREAM: PCI: dwc: Restrict only coherent DMA mask for MSI address allocation ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hook: rename the the name of hooks FROMGIT: usb: xhci: Add error handling in xhci_map_urb_for_dma FROMGIT: usb: dwc3: host: Set XHCI_SG_TRB_CACHE_SIZE_QUIRK FROMGIT: usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK ANDROID: fuse-bpf: Fix readdir for getdents Linux 6.1.78 netfilter: nft_set_rbtree: skip end interval element from gc net: stmmac: xgmac: fix a typo of register name in DPP safety handling ALSA: usb-audio: Sort quirk table entries net: stmmac: xgmac: use #define for string constants clocksource: Skip watchdog check for large watchdog intervals block: treat poll queue enter similarly to timeouts f2fs: add helper to check compression level RDMA/irdma: Fix support for 64k pages vhost: use kzalloc() instead of kmalloc() followed by memset() Revert "ASoC: amd: Add new dmi entries for acp5x platform" io_uring/net: fix sr->len for IORING_OP_RECV with MSG_WAITALL and buffers Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU hrtimer: Report offline hrtimer enqueue usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK usb: dwc3: host: Set XHCI_SG_TRB_CACHE_SIZE_QUIRK USB: serial: cp210x: add ID for IMST iM871A-USB USB: serial: option: add Fibocom FM101-GL variant USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e ALSA: usb-audio: add quirk for RODE NT-USB+ ALSA: usb-audio: Add a quirk for Yamaha YIT-W12TX transmitter ALSA: usb-audio: Add delay quirk for MOTU M Series 2nd revision mtd: parsers: ofpart: add workaround for #size-cells 0 fs: dlm: don't put dlm_local_addrs on heap blk-iocost: Fix an UBSAN shift-out-of-bounds warning scsi: core: Move scsi_host_busy() out of host lock if it is for per-command fs/ntfs3: Fix an NULL dereference bug netfilter: nft_set_pipapo: remove scratch_aligned pointer netfilter: nft_set_pipapo: add helper to release pcpu scratch area netfilter: nft_set_pipapo: store index in scratch maps netfilter: nft_ct: reject direction for ct id drm/amd/display: Implement bounds check for stream encoder creation in DCN301 netfilter: nft_compat: restrict match/target protocol to u16 netfilter: nft_compat: reject unused compat flag netfilter: nft_compat: narrow down revision to unsigned 8-bits selftests: cmsg_ipv6: repeat the exact packet ppp_async: limit MRU to 64K af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC. tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() rxrpc: Fix response to PING RESPONSE ACKs to a dead call drm/i915/gvt: Fix uninitialized variable in handle_mmio() inet: read sk->sk_family once in inet_recv_error() hwmon: (coretemp) Fix bogus core_id to attr name mapping hwmon: (coretemp) Fix out-of-bounds memory access hwmon: (aspeed-pwm-tacho) mutex for tach reading octeontx2-pf: Fix a memleak otx2_sq_init atm: idt77252: fix a memleak in open_card_ubr0 tunnels: fix out of bounds access when building IPv6 PMTU error selftests: net: avoid just another constant wait selftests: net: cut more slack for gro fwd tests. net: atlantic: Fix DMA mapping for PTP hwts ring netdevsim: avoid potential loop in nsim_dev_trap_report_work() wifi: mac80211: fix waiting for beacons logic net: stmmac: xgmac: fix handling of DPP safety error for DMA channels drm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case drm/msms/dp: fixed link clock divider bits be over written in BPC unknown case cifs: failure to add channel on iface should bump up weight phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV phy: renesas: rcar-gen3-usb2: Fix returning wrong error code dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA dmaengine: ti: k3-udma: Report short packet errors dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools ext4: regenerate buddy after block freeing failed if under fc replay Linux 6.1.77 drm/amdgpu: Fix missing error code in 'gmc_v6/7/8/9_0_hw_init()' ASoC: codecs: wsa883x: fix PA volume control ASoC: codecs: lpass-wsa-macro: fix compander volume hack bonding: remove print in bond_verify_device_path gve: Fix use-after-free vulnerability LoongArch/smp: Call rcutree_report_cpu_starting() at tlb_init() drm/msm/dsi: Enable runtime PM Revert "drm/amd/display: Disable PSR-SU on Parade 0803 TCON again" mm, kmsan: fix infinite recursion due to RCU critical section arm64: irq: set the correct node for shadow call stack selftests: bonding: Check initial state selftests: team: Add missing config options net: sysfs: Fix /sys/class/net/<iface> path selftests: net: fix available tunnels detection af_unix: fix lockdep positive in sk_diag_dump_icons() net: ipv4: fix a memleak in ip_setup_cork netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV netfilter: conntrack: correct window scaling with retransmitted SYN selftests: net: add missing config for GENEVE bridge: mcast: fix disabled snooping after long uptime llc: call sock_orphan() at release time ipv6: Ensure natural alignment of const ipv6 loopback and router addresses net: dsa: qca8k: fix illegal usage of GPIO ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() ixgbe: Refactor overtemp event handling ixgbe: Refactor returning internal error codes tcp: add sanity checks to rx zerocopy net: lan966x: Fix port configuration when using SGMII interface ipmr: fix kernel panic when forwarding mcast packets ipv4: raw: add drop reasons ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() selftests: net: give more time for GRO aggregation HID: hidraw: fix a problem of memory leak in hidraw_release() scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler regulator: ti-abb: don't use devm_platform_ioremap_resource_byname for shared interrupt register scsi: isci: Fix an error code problem in isci_io_request_build() drm: using mul_u32_u32() requires linux/math64.h wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update perf: Fix the nr_addr_filters fix drm/amdkfd: Fix 'node' NULL check in 'svm_range_get_range_boundaries()' drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()' drm/amdgpu: Fix with right return code '-EIO' in 'amdgpu_gmc_vram_checking()' drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()' ceph: fix invalid pointer access if get_quota_realm return ERR_PTR ceph: fix deadlock or deadcode of misusing dget() ceph: reinitialize mds feature bit even when session in open blk-mq: fix IO hang from sbitmap wakeup race virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings drm/amdkfd: Fix lock dependency warning with srcu drm/amdkfd: Fix lock dependency warning libsubcmd: Fix memory leak in uniq() misc: lis3lv02d_i2c: Add missing setting of the reg_ctrl callback 9p: Fix initialisation of netfs_inode for 9p PCI/AER: Decode Requester ID when no error info found PCI: Fix 64GT/s effective data rate calculation spmi: mediatek: Fix UAF on device remove fs/kernfs/dir: obey S_ISGID tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE selftests/sgx: Fix linker script asserts usb: hub: Add quirk to decrease IN-ep poll interval for Microchip USB491x hub usb: hub: Replace hardcoded quirk value with BIT() macro perf cs-etm: Bump minimum OpenCSD version to ensure a bugfix is present PCI: switchtec: Fix stdev_release() crash after surprise hot remove PCI: Only override AMD USB controller if required mailbox: arm_mhuv2: Fix a bug for mhuv2_sender_interrupt mfd: ti_am335x_tscadc: Fix TI SoC dependencies xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import i3c: master: cdns: Update maximum prescaler value for i2c clock um: time-travel: fix time corruption um: net: Fix return type of uml_net_start_xmit() um: Don't use vfprintf() for os_info() um: Fix naming clash between UML and scheduler leds: trigger: panic: Don't register panic notifier if creating the trigger failed ALSA: hda/conexant: Fix headset auto detect fail in cx8070 and SN6140 drm/amdkfd: Fix iterator used outside loop in 'kfd_add_peer_prop()' drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' drm/amdgpu: Fix '*fw' from request_firmware() not released in 'amdgpu_ucode_request()' drm/amdgpu: Let KFD sync with VM fences drm/amdgpu: Fix ecc irq enable/disable unpaired clk: imx: clk-imx8qxp: fix LVDS bypass, pixel and phy clocks drm/amd/display: make flip_timestamp_in_us a 64-bit variable watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786 clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() drm/amdgpu: fix ftrace event amdgpu_bo_move always move on same heap drm/msm/dpu: fix writeback programming for YUV cases drm/msm/dpu: Ratelimit framedone timeout msgs drm/amd/display: For prefetch mode > 0, extend prefetch if possible media: i2c: imx335: Fix hblank min/max values media: ddbridge: fix an error code problem in ddb_probe media: amphion: remove mutext lock in condition of wait_event IB/ipoib: Fix mcast list locking drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time f2fs: fix to tag gcing flag on page during block migration hwmon: (nct6775) Fix fan speed set failure in automatic mode media: rkisp1: Fix IRQ disable race issue media: rkisp1: Store IRQ lines media: rkisp1: Fix IRQ handler return values media: rkisp1: Drop IRQF_SHARED ALSA: hda: Intel: add HDA_ARL PCI ID support PCI: add INTEL_HDA_ARL to pci_ids.h media: rockchip: rga: fix swizzling for RGB formats media: stk1160: Fixed high volume of stk1160_dbg messages drm/mipi-dsi: Fix detach call without attach drm/framebuffer: Fix use of uninitialized variable drm/drm_file: fix use of uninitialized variable ASoC: amd: Add new dmi entries for acp5x platform f2fs: fix write pointers on zoned device after roll forward drm/amd/display: Fix tiled display misalignment drm/bridge: anx7625: Fix Set HPD irq detect window to 2ms drm/panel-edp: Add override_edid_mode quirk for generic edp RDMA/IPoIB: Fix error code return in ipoib_mcast_join fast_dput(): handle underflows gracefully ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument ALSA: hda: Refer to correct stream index at loops f2fs: fix to check return value of f2fs_reserve_new_block() net: dsa: qca8k: put MDIO bus OF node on qca8k_mdio_register() failure octeontx2-af: Fix max NPC MCAM entry check while validating ref_entry i40e: Fix VF disable behavior to block all traffic bridge: cfm: fix enum typo in br_cc_ccm_tx_parse net/smc: disable SEID on non-s390 archs where virtual ISM may be used Bluetooth: L2CAP: Fix possible multiple reject send Bluetooth: hci_sync: fix BR/EDR wakeup bug Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066 wifi: cfg80211: free beacon_ies when overridden from hidden BSS wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() libbpf: Fix NULL pointer dereference in bpf_object__collect_prog_relos wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices arm64: dts: amlogic: fix format for s4 uart node ice: fix pre-shifted bit usage arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property md: Whenassemble the array, consult the superblock of the freshest device block: prevent an integer overflow in bvec_try_merge_hw_page net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path net: atlantic: eliminate double free in error handling logic ice: fix ICE_AQ_VSI_Q_OPT_RSS_* register values scsi: hisi_sas: Set .phy_attached before notifing phyup event HISI_PHYE_PHY_UP_PM ARM: dts: imx23/28: Fix the DMA controller node name ARM: dts: imx23-sansa: Use preferred i2c-gpios properties ARM: dts: imx27-apf27dev: Fix LED name ARM: dts: imx25/27: Pass timing0 ARM: dts: imx25: Fix the iim compatible string block/rnbd-srv: Check for unlikely string overflow ionic: bypass firmware cmds when stuck in reset ionic: pass opcode to devcmd_wait net: phy: at803x: fix passing the wrong reference for config_intr ARM: dts: imx1: Fix sram node ARM: dts: imx27: Fix sram node ARM: dts: imx: Use flash@0,0 pattern ARM: dts: imx25/27-eukrea: Fix RTC node name ARM: dts: rockchip: fix rk3036 hdmi ports node wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() bpf: Set uattr->batch.count as zero before batched update or deletion scsi: libfc: Fix up timeout error in fc_fcp_rec_error() scsi: libfc: Don't schedule abort twice bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers wifi: ath11k: fix race due to setting ATH11K_FLAG_EXT_IRQ_ENABLED too early wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() ARM: dts: imx7s: Fix nand-controller #size-cells ARM: dts: imx7s: Fix lcdif compatible ARM: dts: imx7d: Fix coresight funnel ports scsi: arcmsr: Support new PCI device IDs 1883 and 1886 scsi: mpi3mr: Add PCI checks where SAS5116 diverges from SAS4116 net: usb: ax88179_178a: avoid two consecutive device resets bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk PCI: Add no PM reset quirk for NVIDIA Spectrum devices scsi: lpfc: Fix possible file string name overflow when updating firmware soc: xilinx: fix unhandled SGI warning message soc: xilinx: Fix for call trace due to the usage of smp_processor_id() selftests/bpf: Fix issues in setup_classid_environment() wifi: rt2x00: correct wrong BBP register in RxDCOC calibration selftests/bpf: Fix pyperf180 compilation failure with clang18 selftests/bpf: satisfy compiler by having explicit return in btf test wifi: rt2x00: restart beacon queue when hardware reset ext4: avoid online resizing failures due to oversized flex bg ext4: remove unnecessary check from alloc_flex_gd() ext4: unify the type of flexbg_size to unsigned int ext4: fix inconsistent between segment fstrim and full fstrim ecryptfs: Reject casefold directory inodes SUNRPC: Fix a suspicious RCU usage warning KVM: s390: fix setting of fpc register s390/ptrace: handle setting of fpc register correctly s390/vfio-ap: fix sysfs status attribute for AP queue devices arch: consolidate arch_irq_work_raise prototypes jfs: fix array-index-out-of-bounds in diNewExt rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu() crypto: stm32/crc32 - fix parsing list of devices erofs: fix ztailpacking for subpage compressed blocks crypto: octeontx2 - Fix cptvf driver cleanup pstore/ram: Fix crash when setting number of cpus to an odd number jfs: fix uaf in jfs_evict_inode jfs: fix array-index-out-of-bounds in dbAdjTree jfs: fix slab-out-of-bounds Read in dtSearch UBSAN: array-index-out-of-bounds in dtSplitRoot FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events PM / devfreq: Synchronize devfreq_monitor_[start/stop] ACPI: NUMA: Fix the logic of getting the fake_pxm value ACPI: extlog: fix NULL pointer dereference check PNP: ACPI: fix fortify warning ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop audit: Send netlink ACK before setting connection in auditd_set regulator: core: Only increment use_count when enable_count changes debugobjects: Stop accessing objects after releasing hash bucket lock perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel powerpc/lib: Validate size for vector operations powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE x86/boot: Ignore NMIs during very early boot powerpc/64s: Fix CONFIG_NUMA=n build due to create_section_mapping() powerpc/mm: Fix build failures due to arch_reserved_kernel_pages() powerpc: Fix build error due to is_valid_bugaddr() drivers/perf: pmuv3: don't expose SW_INCR event in sysfs arm64: irq: set the correct node for VMAP stack powerpc/mm: Fix null-pointer dereference in pgtable_cache_add asm-generic: make sparse happy with odd-sized put_unaligned_*() Linux 6.1.76 net/mlx5e: Handle hardware IPsec limits events serial: core: fix kernel-doc for uart_port_unlock_irqrestore() x86/entry/ia32: Ensure s32 is sign extended to s64 tick/sched: Preserve number of idle sleeps across CPU hotplug events mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan cxl/region:Fix overflow issue in alloc_hpa() MIPS: lantiq: register smp_ops on non-smp platforms spi: fix finalize message on error return spi: bcm-qspi: fix SFDP BFPT read by usig mspi read drm/bridge: anx7625: Ensure bridge is suspended in disable() block: Move checking GENHD_FL_NO_PART to bdev_add_partition() gpio: eic-sprd: Clear interrupt after set the interrupt type drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume drm/exynos: fix accidental on-stack copy of exynos_drm_plane drm/bridge: parade-ps8640: Make sure we drop the AUX mutex in the error case drm/bridge: parade-ps8640: Ensure bridge is suspended in .post_disable() drm/bridge: sii902x: Fix audio codec unregistration drm/bridge: sii902x: Fix probing race issue drm/bridge: sii902x: Use devm_regulator_bulk_get_enable() drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33] drm/bridge: parade-ps8640: Wait for HPD when doing an AUX transfer Revert "powerpc/64s: Increase default stack size to 32KB" drm/panel-edp: drm/panel-edp: Fix AUO B116XAK01 name and timing btrfs: zoned: optimize hint byte for zoned allocator btrfs: zoned: factor out prepare_allocation_zoned() serial: sc16is7xx: fix unconditional activation of THRI interrupt serial: sc16is7xx: Use port lock wrappers serial: core: Provide port lock wrappers dlm: use kernel_connect() and kernel_bind() ARM: dts: qcom: sdx55: fix USB SS wakeup ARM: dts: qcom: sdx55: fix USB DP/DM HS PHY interrupts ARM: dts: qcom: sdx55: fix pdc '#interrupt-cells' ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12 ARM: dts: qcom: sdx55: fix USB wakeup interrupt types pipe: wakeup wr_wait after setting max_usage fs/pipe: move check to pipe_has_watch_queue() thermal: intel: hfi: Add syscore callbacks for system-wide PM thermal: intel: hfi: Disable an HFI instance when all its CPUs go offline thermal: intel: hfi: Refactor enabling code into helper functions PM: sleep: Fix possible deadlocks in core system-wide PM code PM: core: Remove unnecessary (void *) conversions bus: mhi: ep: Do not allocate event ring element on stack media: ov13b10: Enable runtime PM before registering async sub-device media: ov13b10: Support device probe in non-zero ACPI D state erofs: fix lz4 inplace decompression erofs: get rid of the remaining kmap_atomic() drm/amdgpu/pm: Fix the power source flag error drm/amd/display: Port DENTIST hang and TDR fixes to OTG disable W/A drm/bridge: nxp-ptn3460: simplify some error checking platform/x86: intel-uncore-freq: Fix types in sysfs callbacks drm/amd/display: Disable PSR-SU on Parade 0803 TCON again drm/tidss: Fix atomic_flush check drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking drm: Don't unref the same fb many times by mistake due to deadlock handling cpufreq: intel_pstate: Refine computation of P-state for given frequency gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 xfs: read only mounts with fsopen mount API are busted firmware: arm_scmi: Check mailbox/SMT channel for consistency ksmbd: fix global oob in ksmbd_nl_policy platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe netfilter: nf_tables: reject QUEUE/DROP verdict parameters netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes wifi: iwlwifi: fix a memory corruption exec: Fix error handling in begin_new_exec() rbd: don't move requests to the running list on errors btrfs: don't abort filesystem when attempting to snapshot deleted subvolume btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args btrfs: don't warn if discard range is not aligned to sector btrfs: tree-checker: fix inline ref size in error messages btrfs: ref-verify: free ref cache before clearing mount opt btrfs: avoid copying BTRFS_ROOT_SUBVOL_DEAD flag to snapshot of subvolume being deleted nbd: always initialize struct msghdr completely net: fec: fix the unhandled context fault from smmu fjes: fix memleaks in fjes_hw_setup selftests: netdevsim: fix the udp_tunnel_nic test net: mvpp2: clear BM pool before initialization net: stmmac: Wait a bit for the reset to take effect netfilter: nf_tables: validate NFPROTO_* family netfilter: nf_tables: restrict anonymous set and map names to 16 bytes btrfs: fix race between reading a directory and adding entries to it btrfs: refresh dir last index during a rewinddir(3) call btrfs: set last dir index to the current last index when opening dir btrfs: fix infinite directory reads netfilter: nft_limit: reject configurations that cause integer overflow rcu: Defer RCU kthreads wakeup when CPU is dying net/mlx5e: fix a potential double-free in fs_any_create_groups net/mlx5e: fix a double-free in arfs_create_groups net/mlx5e: Allow software parsing when IPsec crypto is enabled net/mlx5: Use mlx5 device constant for selecting CQ period mode for ASO net/mlx5: DR, Can't go to uplink vport on RX rule net/mlx5: DR, Use the right GVMI number for drop action ipv6: init the accept_queue's spinlocks in inet6_create netlink: fix potential sleeping issue in mqueue_flush_file tcp: Add memory barrier to tcp_push() afs: Hide silly-rename files from userspace tracing: Ensure visibility when inserting an element into tracing_map netfs, fscache: Prevent Oops in fscache_put_cache() net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv net: micrel: Fix PTP frame parsing for lan8814 tun: add missing rx stats accounting in tun_xdp_act tun: fix missing dropped counter in tun_xdp_act net: fix removing a namespace with conflicting altnames udp: fix busy polling llc: Drop support for ETH_P_TR_802_2. llc: make llc_ui_sendmsg() more robust against bonding changes vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING bnxt_en: Wait for FLR to complete during probe tcp: make sure init the accept_queue's spinlocks once net/smc: fix illegal rmb_desc access in SMC-D connection dump wifi: mac80211: fix potential sta-link leak drm/amd/display: pbn_div need be updated for hotplug event Revert "drm/amd: Enable PCIe PME from D3" ksmbd: Add missing set_freezable() for freezable kthread ksmbd: send lease break notification on FILE_RENAME_INFORMATION ksmbd: don't increment epoch if current state and request state are same ksmbd: fix potential circular locking issue in smb2_set_ea() ksmbd: set v2 lease version on lease upgrade mm: page_alloc: unreserve highatomic page blocks before oom LoongArch/smp: Call rcutree_report_cpu_starting() earlier serial: sc16is7xx: improve do/while loop in sc16is7xx_irq() serial: sc16is7xx: remove obsolete loop in sc16is7xx_port_irq() serial: sc16is7xx: fix invalid sc16is7xx_lines bitfield in case of probe error serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO serial: sc16is7xx: change EFR lock to operate on each channels serial: sc16is7xx: remove unused line structure member serial: sc16is7xx: remove global regmap from struct sc16is7xx_port serial: sc16is7xx: remove wasteful static buffer in sc16is7xx_regmap_name() serial: sc16is7xx: improve regmap debugfs by using one regmap per port rename(): fix the locking of subdirectories mm/sparsemem: fix race in accessing memory_section->usage mm/rmap: fix misplaced parenthesis of a likely() ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path nouveau/vmm: don't set addr on the fail path to avoid warning rtc: Extend timeout for waiting for UIP to clear to 1s rtc: Add support for configuring the UIP timeout for RTC reads rtc: mc146818-lib: Adjust failure return code for mc146818_get_time() rtc: Adjust failure return code for cmos_set_alarm() rtc: cmos: Use ACPI alarm for non-Intel x86 systems too arm64: Rename ARM64_WORKAROUND_2966298 media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run mmc: mmc_spi: remove custom DMA mapped buffers mmc: core: Use mrq.sbc in close-ended ffu media: videobuf2-dma-sg: fix vmap callback scripts/get_abi: fix source path leak docs: kernel_abi.py: fix command injection lsm: new security_file_ioctl_compat() hook arm64: dts: qcom: sm8150: fix USB DP/DM HS PHY interrupts arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts arm64: dts: qcom: sc7280: fix usb_1 wakeup interrupt types arm64: dts: qcom: sm8150: fix USB wakeup interrupt types arm64: dts: qcom: sdm845: fix USB wakeup interrupt types arm64: dts: qcom: sc7180: fix USB wakeup interrupt types scsi: ufs: core: Remove the ufshcd_hba_exit() call from ufshcd_async_scan() dmaengine: fix NULL pointer in channel unregistration function iio: adc: ad7091r: Enable internal vref if external vref is not supplied async: Introduce async_schedule_dev_nocall() async: Split async_schedule_node_domain() parisc/power: Fix power soft-off button emulation on qemu parisc/firmware: Fix F-extend for PDC addresses bus: mhi: host: Add spinlock to protect WP access when queueing TREs bus: mhi: host: Drop chan lock before queuing buffers bus: mhi: host: Add alignment check for event ring read pointer mips: Fix max_mapnr being uninitialized on early stages s390/vfio-ap: let on_scan_complete() callback filter matrix and update guest's APCB s390/vfio-ap: loop over the shadow APCB when filtering guest's AP configuration s390/vfio-ap: always filter entire AP matrix media: ov9734: Enable runtime PM before registering async sub-device rpmsg: virtio: Free driver_override when rpmsg_remove() media: imx355: Enable runtime PM before registering async sub-device PM / devfreq: Fix buffer overflow in trans_stat_show s390/vfio-ap: unpin pages on gisc registration failure crypto: s390/aes - Fix buffer overread in CTR mode hwrng: core - Fix page fault dead lock on mmap-ed hwrng PM: hibernate: Enforce ordering during image compression/decompression crypto: api - Disallow identical driver names btrfs: sysfs: validate scrub_speed_max value OPP: Pass rounded rate to _set_opp() arm64: properly install vmlinuz.efi ext4: allow for the last group to be marked as trimmed iio: adc: ad7091r: Allow users to configure device events iio: adc: ad7091r: Set alert bit in config register Revert "nSVM: Check for reserved encodings of TLB_CONTROL in nested VMCB" usb: dwc3: gadget: Handle EP0 request dequeuing properly usb: dwc3: gadget: Queue PM runtime idle on disconnect event usb: dwc3: gadget: Refactor EP0 forced stall/restart into a separate API Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/gpio/xlnx,gpio-xilinx.yaml Documentation/devicetree/bindings/media/mediatek,mdp3-rdma.yaml Documentation/devicetree/bindings/media/mediatek,mdp3-wrot.yaml Documentation/devicetree/bindings/media/rockchip-isp1.yaml Documentation/devicetree/bindings/nvmem/mxs-ocotp.yaml drivers/bus/mhi/host/main.c drivers/clk/qcom/videocc-sm8150.c drivers/soc/qcom/llcc-qcom.c include/dt-bindings/clock/qcom,videocc-sm8150.h Change-Id: I736b858a11a53d39b1a31aaa270d6508d9d527ba Upstream-Build: ks_qcom-android14-6.1-keystone-qcom-release@12087153 UKQ2.240714.001 Signed-off-by: Srinivasarao Pathipati <quic_c_spathi@quicinc.com> |
||
Kalesh Singh
|
b6577b7604 |
ANDROID: 16K: Avoid mmap lock assertions for padding VMAs
The padding VMA is never inserted into the VMA tree; therefore we don't need to have the mmap lock in exclusive mode to modify it. Test: v2/android-gki/ack_platform_integration_main_cf_arm64_boot_test on kernel_virt_debug_aarch64 Bug: 346741763 Bug: 352463814 Change-Id: I4ca3ed22dab45b6bb895cb41c5c6792344188b61 Signed-off-by: Kalesh Singh <kaleshsingh@google.com> (cherry picked from commit a8b3ebe7f90afe0ad0d9a8b0b90f266da06a7007) |
||
Kalesh Singh
|
dda68b1657 |
ANDROID: 16K: Only check basename of linker context
Depending on the platform binary being executed, the linker (interpreter) requested can be one of: 1) /system/bin/bootstrap/linker64 2) /system/bin/linker64 3) /apex/com.android.runtime/bin/linker64 Relax the check to the basename (linker64), instead of the path. Bug: 330767927 Bug: 335584973 Change-Id: I4a1f95b7cecd126f85ad8cefd9ff10d272947f9e Signed-off-by: Kalesh Singh <kaleshsingh@google.com> |
||
Kalesh Singh
|
65aed0e2f7 |
ANDROID: 16K: Avoid and document padding madvise lock warning
Usually to modify vm_flags we need to take exclusive mmap_lock but here only have the lock in read mode, to avoid all DONTNEED/DONTNEED_LOCKED calls needing the write lock. A race to the flags update can only happen with another MADV_DONTNEED on the same process and same range (VMA). In practice, this specific scenario is not possible because the action that could cause it is usually performed at most once per VMA and only by the dynamic linker. Forego protection for this case, to avoid penalties in the common cases. Bug: 344634072 Change-Id: I54ac1f204e0445291f3df3872fbaa16b37722812 Signed-off-by: Kalesh Singh <kaleshsingh@google.com> |
||
liangjlee
|
29a00abe43 |
ANDROID: mm: Add restricted vendor hook in do_read_fault()
This patch add a restricted vendor hook in do_read_fault() for tracking which file and offsets are faulted. Bug: 336736235 Change-Id: I425690e58550c4ac44912daa10b5eac0728bfb4e Signed-off-by: liangjlee <liangjlee@google.com> |
||
Minchan Kim
|
6316af1012 |
ANDROID: add vendor hooks and expoert reclaim_pages to reclaim memory
Add vendor hooks to reclaim MADV_PAGEOUT memory for asynchrnous device. It also exports reclaim_pages to reclaim memory. Bug: 326662423 Change-Id: Ic2516c64a9dbd53173a3bfb19b6cd21636916c27 Signed-off-by: Minchan Kim <minchan@google.com> |
||
Dezhi Huang
|
c7fcb9bf9a |
ANDROID: add vendor hook in do_read_fault to tune fault_around_bytes
with this vendor_hook, oem can dynamically adjust fault_around_bytes to balance memory usage and performance Bug: 340749845 Change-Id: I429f4302caf44a769696ccec84e9cc13ea8892ea Signed-off-by: Dezhi Huang <huangdezhi@hihonor.com> |
||
Srinivasarao Pathipati
|
ec1604a821 |
Merge keystone/android14-6.1-keystone-qcom-release.6.1.68+ (7cb0122 ) into qcom-6.1
* refs/heads/tmp-7cb0122: FROMLIST: mm/migrate: set swap entry values of THP tail pages properly. FROMLIST: binder: check offset alignment in binder_get_object() FROMLIST: iommu: Avoid races around default domain allocations ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hook: rename the the name of hooks Revert "interconnect: Fix locking for runpm vs reclaim" ANDROID: abi_gki_aarch64_qcom: Update symbol list Revert "interconnect: Teach lockdep about icc_bw_lock order" Revert "usb: dwc3: core: configure TX/RX threshold for DWC3_IP" Revert "usb: dwc3: core: configure TX/RX threshold for DWC3_IP" ANDROID: Update symbols list for open-dice.ko ANDROID: Update symbols list for open-dice.ko ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hook: rename the the name of hooks ANDROID: EXPORT raise_softirq and update the ABI symbol list UPSTREAM: netfilter: nf_tables: disallow timeout for anonymous sets BACKPORT: FROMGIT: mm: add alloc_contig_migrate_range allocation statistics FROMLIST: iommu: Avoid races around default domain allocations ANDROID: fips140 - fix integrity check by unapplying dynamic SCS ANDROID: fips140 - add option for debugging the integrity check BACKPORT: f2fs: split initial and dynamic conditions for extent_cache ANDROID: GKI: Update oplus symbol list ANDROID: Update the ABI symbol list UPSTREAM: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group UPSTREAM: epoll: use refcount to reduce ep_mutex contention ANDROID: GKI: Update oplus symbol list ANDROID: uid_sys_stat: fix data-error of cputime and io ANDROID: Update the ABI symbol list ANDROID: vendor_hooks: Export cma_alloc trace points ANDROID: gki_defconfig: Enable CONFIG_ARM_SCMI_TRANSPORT_VIRTIO Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" UPSTREAM: net: tls: fix use-after-free with partial reads and async decrypt ANDROID: GKI: add GKI symbol list for Exynosauto SoC UPSTREAM: usb: typec: class: fix typec_altmode_put_partner to put plugs UPSTREAM: Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs" ANDROID: GKI: Update symbol list for mtk ANDROID: GKI: Update oplus symbol list FROMGIT: f2fs: introduce FAULT_BLKADDR_CONSISTENCE FROMGIT: f2fs: fix to remove unnecessary f2fs_bug_on() to avoid panic FROMGIT: f2fs: compress: fix to avoid inconsistence bewteen i_blocks and dnode FROMGIT: f2fs: compress: fix to check unreleased compressed cluster FROMGIT: f2fs: compress: fix to cover normal cluster write with cp_rwsem FROMGIT: f2fs: compress: fix to guarantee persisting compressed blocks by CP BACKPORT: gso: fix dodgy bit handling for GSO_UDP_L4 ANDROID: remove LTO check from build.config.gki.aarch64.fips140 ANDROID: add symbol list for fips140 module ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: Add hook for trace_android_vh_copy_process ANDROID: abi_gki_aarch64_qcom: Update symbol list ANDROID: GKI: Update symbol list for transsion ANDROID: Add vendor_hooks to workaround CONFIG_TASK_DELAY_ACCT Revert "ANDROID: Build null_blk and scsi_debug as kernel modules" Revert "interconnect: Fix locking for runpm vs reclaim" ANDROID: GKI: Update symbol list for xiaomi ANDROID: sched/cpuset: Add vendor hook to change tasks affinity ANDROID: ABI: Update oplus symbol list ANDROID: binder: Add vendor hook to fix priority restore Revert "interconnect: Teach lockdep about icc_bw_lock order" BACKPORT: gso: fix dodgy bit handling for GSO_UDP_L4 ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: Add hook for trace_android_vh_copy_process ANDROID: GKI: Update symbol list for mtk FROMGIT: PM: runtime: add tracepoint for runtime_status changes ANDROID: GKI: add allowed list file for xiaomi UPSTREAM: netfilter: nft_set_rbtree: skip end interval element from gc ANDROID: GKI: add symbol list file for moto UPSTREAM: scsi: ufs: core: Fix racing issue between ufshcd_mcq_abort() and ISR UPSTREAM: scsi: ufs: core: Remove dev cmd clock scaling busy ANDROID: ABI: Update symbol list for Nothing ANDROID: abi_gki_aarch64_qcom: Export trace_android_vh_try_fixup_sea ANDROID: arm64: Call fixup_exception() within do_sea() ANDROID: PCI: dwc: Wait for the link only if it has been started ANDROID: Update the Pixel symbol list and GKI ABI ANDROID: scsi: ufs: add complete init vendor hook ANDROID: Update the ABI symbol list ANDROID: Fix CRC error with iommu_* functions Revert "bpf: add percpu stats for bpf_map elements insertions/deletions" Revert "bpf: Add map and need_defer parameters to .map_fd_put_ptr()" Revert "bpf: Defer the free of inner map when necessary" ANDROID: Roll back some code to fix system_server registers psi trigger failed. ANDROID: GKI: Update the ABI symbol list UPSTREAM: virtio: Add support for no-reset virtio PCI PM UPSTREAM: netfilter: nf_tables: check if catch-all set element is active in next generation UPSTREAM: net: tls, update curr on splice as well ANDROID: Update the ABI symbol list ANDROID: Add pci_read_config_word to virtual device symbol list ANDROID: Export kthread_set_per_cpu ANDROID: GKI: fix ABI breakage in struct ipv6_devconf Reapply "net: release reference to inet6_dev pointer" Reapply "net: change accept_ra_min_rtr_lft to affect all RA lifetimes" Reapply "net: add sysctl accept_ra_min_rtr_lft" ANDROID: GKI: explicit include of stringify.h BACKPORT: erofs: fix infinite loop due to a race of filling compressed_bvecs ANDROID: arm64: virt: Invalidate tlb once the balloon before reporting/inflating ANDROID: arm64: virt: Make the page_relinquish call generic UPSTREAM: drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks UPSTREAM: drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks UPSTREAM: drm/msm/dsi: Enable runtime PM UPSTREAM: arm64: scs: Disable LTO for SCS patching code ANDROID: GKI: Update symbol list for mtk ANDROID: GKI: Update symbol list for mtk BACKPORT: f2fs: Restrict max filesize for 16K f2fs BACKPORT: f2fs: Support Block Size == Page Size ANDROID: abi_gki_aarch64_qcom: Update symbol list UPSTREAM: drm/msm/dsi: Enable runtime PM UPSTREAM: usb: typec: tcpm: fix the PD disabled case ANDROID: ABI: Update symbol list for imx UPSTREAM: netfilter: nf_tables: reject QUEUE/DROP verdict parameters ANDROID: ABI: Update oplus symbol list ANDROID: fuse: Fix the issue of fuse_dentry_canonical_path ANDROID: Update the ABI symbol list ANDROID: Export cpufreq_driver_test_flags() ANDROID: Build null_blk and scsi_debug as kernel modules ANDROID: GKI: Update the pixel symbol list ANDROID: usb: dwc3: export tracepoint for dwc3 read/write ANDROID: scsi: ufs: add vendor hook to override key reprogramming ANDROID: vendor_hooks: Add hook for binder_detect_low_async_space_locked ANDROID: Update the ABI symbol list ANDROID: Update the ABI representation UPSTREAM: usb: typec: tcpm: Support multiple capabilities UPSTREAM: usb: typec: tcpm: Parse Accessory Mode information ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: add hooks in driver/android/binder.c UPSTREAM: net/rose: Fix Use-After-Free in rose_ioctl UPSTREAM: ida: Fix crash in ida_free when the bitmap is empty ANDROID: GKI: Update symbol list for mtk ANDROID: GKI: Update symbol list for mtk Reapply "perf: Disallow mis-matched inherited group reads" ANDROID: GKI: Add Pasa symbol list FROMGIT: mm: memcg: don't periodically flush stats when memcg is disabled ANDROID: Update the ABI symbol list ANDROID: sched: export update_misfit_status symbol ANDROID: GKI: Add ASR KMI symbol list FROMGIT: usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend FROMLIST: usb: core: Prevent null pointer dereference in update_port_device_state ANDROID: gki_defconfig: Enable CONFIG_NVME_MULTIPATH BACKPORT: irqchip/gic-v3: Work around affinity issues on ASR8601 BACKPORT: irqchip/gic-v3: Improve affinity helper Linux 6.1.75 Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" arm64: dts: armada-3720-turris-mox: set irq type for RTC Revert "KEYS: encrypted: Add check for strsep" riscv: Fix wrong usage of lm_alias() when splitting a huge linear mapping block: Remove special-casing of compound pages i2c: s3c24xx: fix transferring more than one message in polling mode i2c: s3c24xx: fix read transfers in polling mode ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure loop: fix the the direct I/O support check when used on top of block devices ethtool: netlink: Add missing ethnl_ops_begin/complete kdb: Fix a potential buffer overflow in kdb_local() ipvs: avoid stat macros calls from preemptible context netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description netfilter: nf_tables: skip dead set elements in netlink dump netfilter: nf_tables: do not allow mismatch field size and set key length netfilter: bridge: replace physindev with physinif in nf_bridge_info netfilter: propagate net to nf_bridge_get_physindev netfilter: nf_queue: remove excess nf_bridge variable netfilter: nfnetlink_log: use proper helper for fetching physinif netfilter: nft_limit: do not ignore unsupported flags netfilter: nf_tables: reject invalid set policy mptcp: relax check on MPC passive fallback LoongArch: BPF: Prevent out-of-bounds memory access net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS net: stmmac: ethtool: Fixed calltrace caused by unbalanced disable_irq_wake calls drm/amdkfd: fixes for HMM mem allocation drm/amdkfd: Use resource_size() helper function dt-bindings: gpio: xilinx: Fix node address in gpio net: ravb: Fix dma_addr_t truncation in error case udp: annotate data-races around up->pending block: ensure we hold a queue reference when using queue limits mptcp: refine opt_mp_capable determination mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req() mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() mptcp: strict validation before using mp_opt->hmac mptcp: mptcp_parse_option() fix for MPTCPOPT_MP_JOIN net: phy: micrel: populate .soft_reset for KSZ9131 amt: do not use overwrapped cb area net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames net: qualcomm: rmnet: fix global oob in rmnet_policy s390/pci: fix max size calculation in zpci_memcpy_toio() ASoC: mediatek: sof-common: Add NULL check for normal_link string PCI: mediatek-gen3: Fix translation window size calculation PCI: keystone: Fix race condition when initializing PHYs nvmet-tcp: Fix the H2C expected PDU len calculation nvme: trace: avoid memcpy overflow warning nvmet: re-fix tracing strncpy() warning serial: imx: Correct clock error message in function probe() usb: xhci-mtk: fix a short packet issue of gen1 isoc-in transfer apparmor: avoid crash when parsed profile name is empty cxl/region: fix x9 interleave typo perf env: Avoid recursively taking env->bpf_progs.lock nvmet-tcp: fix a crash in nvmet_req_complete() nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length vdpa: Fix an error handling path in eni_vdpa_probe() spmi: mtk-pmif: Serialize PMIF status check and command submission usb: cdc-acm: return correct error code on unsupported break tty: use 'if' in send_break() instead of 'goto' tty: don't check for signal_pending() in send_break() tty: early return from send_break() on TTY_DRIVER_HARDWARE_BREAK tty: change tty_write_lock()'s ndelay parameter to bool perf genelf: Set ELF program header addresses properly perf hisi-ptt: Fix one memory leakage in hisi_ptt_process_auxtrace_event() perf header: Fix one memory leakage in perf_event__fprintf_event_update() iio: adc: ad9467: fix scale setting iio: adc: ad9467: don't ignore error codes iio: adc: ad9467: fix reset gpio handling selftests/sgx: Skip non X86_64 platform selftests/sgx: Include memory clobber for inline asm in test enclave selftests/sgx: Fix uninitialized pointer dereferences in encl_get_entry selftests/sgx: Fix uninitialized pointer dereference in error path serial: imx: fix tx statemachine deadlock software node: Let args be NULL in software_node_get_reference_args acpi: property: Let args be NULL in __acpi_node_get_property_reference base/node.c: initialize the accessor list before registering libapi: Add missing linux/types.h header to get the __u64 type on io.h serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed power: supply: bq256xx: fix some problem in bq256xx_hw_init power: supply: cw2015: correct time_to_empty units in sysfs MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup() MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup() riscv: Fixed wrong register in XIP_FIXUP_FLASH_OFFSET macro riscv: Fix set_direct_map_default_noflush() to reset _PAGE_EXEC riscv: Fix set_memory_XX() and set_direct_map_XX() by splitting huge linear mappings riscv: Fix module_alloc() that did not reset the linear mapping permissions riscv: Check if the code to patch lies in the exit section mips: Fix incorrect max_low_pfn adjustment mips: dmi: Fix early remap on MIPS32 mfd: intel-lpss: Fix the fractional clock divider flags leds: aw2013: Select missing dependency REGMAP_I2C mfd: syscon: Fix null pointer dereference in of_syscon_register() ARM: 9330/1: davinci: also select PINCTRL serial: sc16is7xx: set safe default SPI clock frequency serial: sc16is7xx: add check for unsupported SPI modes during probe HID: wacom: Correct behavior when processing some confidence == false touches iio: adc: ad7091r: Pass iio_dev to event handler KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache KVM: arm64: vgic-v4: Restore pending state on host userspace write x86/kvm: Do not try to disable kvmclock if it was not enabled PCI: mediatek: Clear interrupt status before dispatching handler PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support PCI/P2PDMA: Remove reference to pci_p2pdma_map_sg() cxl/port: Fix decoder initialization when nr_targets > interleave_ways Revert "net: rtnetlink: Enslave device before bringing it up" wifi: mwifiex: configure BSSID consistently when starting AP wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code wifi: mt76: fix broken precal loading from MTD for mt7915 iommu/dma: Trace bounce buffer usage when mapping buffers iommu/arm-smmu-qcom: Add missing GMU entry to match table LoongArch: Fix and simplify fcsr initialization on execve() bpf: Fix re-attachment branch in bpf_tracing_prog_attach Bluetooth: Fix atomicity violation in {min,max}_key_size_set rootfs: Fix support for rootfstype= when root= is given md/raid1: Use blk_opf_t for read and write operations pwm: Fix out-of-bounds access in of_pwm_single_xlate() pwm: jz4740: Don't use dev_err_probe() in .request() netfilter: nf_tables: check if catch-all set element is active in next generation block: Fix iterating over an empty bio with bio_for_each_folio_all block: add check that partition length needs to be aligned with block size drm/amd: Enable PCIe PME from D3 scsi: mpi3mr: Block PEL Enable Command on Controller Reset and Unrecoverable State scsi: mpi3mr: Refresh sdev queue depth after controller reset scsi: target: core: add missing file_{start,end}_write() scsi: ufs: core: Simplify power management during async scan fbdev: flush deferred IO before closing fbdev: flush deferred work in fb_deferred_io_fsync() io_uring/rw: ensure io->bytes_done is always initialized ksmbd: only v2 leases handle the directory ksmbd: fix UAF issue in ksmbd_tcp_new_connection() ksmbd: validate mech token in session setup ALSA: hda/realtek: Enable headset mic on Lenovo M70 Gen5 ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on HP ZBook ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx ALSA: oxygen: Fix right channel of capture volume mixer drm/vmwgfx: Keep a gem reference to user bos in surfaces drm/vmwgfx: Fix possible invalid drm gem put calls serial: omap: do not override settings for RS485 support serial: 8250_exar: Set missing rs485_supported flag serial: imx: Ensure that imx_uart_rs485_config() is called with enabled clock serial: core, imx: do not set RS485 enabled if it is not supported serial: 8250_bcm2835aux: Restore clock error handling serial: core: make sure RS485 cannot be enabled when it is not supported serial: core: fix sanitizing check for RTS settings usb: mon: Fix atomicity violation in mon_bin_vma_fault usb: typec: class: fix typec_altmode_put_partner to put plugs Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs" usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled usb: cdns3: fix iso transfer error when mult is not zero usb: cdns3: fix uvc failure work since sg support enabled usb: chipidea: wait controller resume finished for wakeup irq Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-only" Revert "usb: dwc3: Soft reset phy on probe for host" usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host() tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug powerpc/64s: Increase default stack size to 32KB clocksource/drivers/timer-ti-dm: Fix make W=n kerneldoc warnings binder: fix race between mmput() and do_exit() xen-netback: don't produce zero-size SKB frags Input: atkbd - use ab83 as id when skipping the getid command mips/smp: Call rcutree_report_cpu_starting() earlier binder: fix unused alloc->free_async_space binder: fix async space check for 0-sized buffers keys, dns: Fix size check of V1 server-list header selftests/bpf: Add assert for user stacks in test_task_stack of: unittest: Fix of_count_phandle_with_args() expected value message fbdev: imxfb: fix left margin setting of: Fix double free in of_parse_phandle_with_args_map ksmbd: validate the zero field of packet header kselftest/alsa - mixer-test: Fix the print format specifier warning kselftest/alsa - mixer-test: fix the number of parameters to ksft_exit_fail_msg() drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c IB/iser: Prevent invalidating wrong MR mmc: sdhci_omap: Fix TI SoC dependencies mmc: sdhci_am654: Fix TI SoC dependencies ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put() ALSA: scarlett2: Add missing error checks to *_ctl_get() ALSA: scarlett2: Allow passing any output to line_out_remap() ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config() ALSA: scarlett2: Add missing error check to scarlett2_config_save() ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[] pwm: stm32: Fix enable count for clk in .probe() pwm: stm32: Use hweight32 in stm32_pwm_detect_channels pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw accel/habanalabs: fix information leak in sec_attest_info() drm/mediatek: dp: Add phy_mtk_dp module as pre-dependency clk: si5341: fix an error code problem in si5341_output_clk_set_rate watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO watchdog: set cdev owner before adding drivers: clk: zynqmp: update divider round rate logic drivers: clk: zynqmp: calculate closest mux rate clk: qcom: videocc-sm8150: Add missing PLL config property clk: qcom: videocc-sm8150: Update the videocc resets dt-bindings: clock: Update the videocc resets for sm8150 f2fs: fix to check return value of f2fs_recover_xattr_data drm/amd/pm: fix a double-free in amdgpu_parse_extended_power_table gpu/drm/radeon: fix two memleaks in radeon_vm_init drivers/amd/pm: fix a use-after-free in kv_parse_power_table drm/amd/pm: fix a double-free in si_dpm_init drm/amdgpu/debugfs: fix error code when smc register accessors are NULL drm/mediatek: Fix underrun in VDO1 when switches off the layer drm/mediatek: Return error if MDP RDMA failed to enable the clock drm/msm/dpu: Drop enable and frame_count parameters from dpu_hw_setup_misr() drm/msm/dpu: Set input_sel bit for INTF clk: renesas: rzg2l: Check reset monitor registers clk: renesas: rzg2l-cpg: Reuse code in rzg2l_cpg_reset() media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of m88ds3103_probe() media: dvbdev: drop refcount on error path in dvb_device_open() f2fs: fix to update iostat correctly in f2fs_filemap_fault() f2fs: fix to check compress file in f2fs_move_file_range() f2fs: fix to wait on block writeback for post_read case drm/panel: st7701: Fix AVCL calculation media: rkisp1: Fix media device memory leak media: dt-bindings: media: rkisp1: Fix the port description for the parallel interface media: imx-mipi-csis: Fix clock handling in remove() clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config RDMA/hns: Fix memory leak in free_mr_init() media: cx231xx: fix a memleak in cx231xx_init_isoc drm/bridge: tc358767: Fix return value on error case drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table drm/radeon/dpm: fix a memleak in sumo_parse_power_table drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() drm/panfrost: Ignore core_mask for poweroff and disable PWRTRANS irq ASoC: Intel: glk_rt5682_max98357a: fix board id mismatch drm/drv: propagate errors from drm_modeset_register_all() drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks drm/msm/mdp4: flush vblank event on disable ASoC: cs35l34: Fix GPIO name and drop legacy include ASoC: cs35l33: Fix GPIO name and drop legacy include drm/tidss: Fix dss reset drm/tidss: Check for K2G in in dispc_softreset() drm/tidss: Return error value from from softreset drm/tidss: Move reset to the end of dispc_init() drm/radeon: check return value of radeon_ring_lock() drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check() drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg() f2fs: fix to avoid dirent corruption drm/bridge: Fix typo in post_disable() description media: rkvdec: Hook the (TRY_)DECODER_CMD stateless ioctls media: verisilicon: Hook the (TRY_)DECODER_CMD stateless ioctls media: mtk-jpeg: Remove cancel worker in mtk_jpeg_remove to avoid the crash of multi-core JPEG devices media: mtk-jpegdec: export jpeg decoder functions media: pvrusb2: fix use after free on context disconnection drm/tilcdc: Fix irq free on unload drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer drm/panel-elida-kd35t133: hold panel in reset for unprepare RDMA/hns: Fix inappropriate err code for unsupported operations RDMA/usnic: Silence uninitialized symbol smatch warnings drm/panfrost: Really power off GPU cores in panfrost_gpu_power_off() Revert "drm/omapdrm: Annotate dma-fence critical section in commit path" Revert "drm/tidss: Annotate dma-fence critical section in commit path" ARM: davinci: always select CONFIG_CPU_ARM926T ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() mlxbf_gige: Enable the GigE port in mlxbf_gige_open mlxbf_gige: Fix intermittent no ip issue net/sched: act_ct: fix skb leak and crash on ooo frags sctp: fix busy polling sctp: support MSG_ERRQUEUE flag in recvmsg() bpf: sockmap, fix proto update hook to avoid dup calls null_blk: don't cap max_hw_sectors to BLK_DEF_MAX_SECTORS block: make BLK_DEF_MAX_SECTORS unsigned Bluetooth: btmtkuart: fix recv_buf() return value Bluetooth: Fix bogus check for re-auth no supported with non-ssp netfilter: nf_tables: mark newset as dead on transaction abort wifi: iwlwifi: mvm: send TX path flush in rfkill wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request wifi: rtlwifi: rtl8192se: using calculate_bit_shift() wifi: rtlwifi: rtl8192ee: using calculate_bit_shift() wifi: rtlwifi: rtl8192de: using calculate_bit_shift() wifi: rtlwifi: rtl8192ce: using calculate_bit_shift() wifi: rtlwifi: rtl8192cu: using calculate_bit_shift() wifi: rtlwifi: rtl8192c: using calculate_bit_shift() wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift() wifi: rtlwifi: add calculate_bit_shift() arm64: dts: qcom: ipq6018: Fix up indentation arm64: dts: qcom: ipq6018: Pad addresses to 8 hex digits arm64: dts: qcom: ipq6018: Use lowercase hex arm64: dts: qcom: ipq6018: improve pcie phy pcs reg table arm64: dts: qcom: ipq6018: fix clock rates for GCC_USB0_MOCK_UTMI_CLK arm64: dts: qcom: sc7280: Mark SDHCI hosts as cache-coherent block: add check of 'minors' and 'first_minor' in device_add_disk() arm64: dts: qcom: sm8150-hdk: fix SS USB regulators soc: qcom: llcc: Fix dis_cap_alloc and retain_on_pc configuration dma-mapping: clear dev->dma_mem to NULL after freeing it virtio/vsock: fix logic which reduces credit update messages ipmr: support IP_PKTINFO on cache report IGMP msg selftests/net: fix grep checking for fib_nexthop_multiprefix ARM: dts: stm32: don't mix SCMI and non-SCMI board compatibles scsi: hisi_sas: Correct the number of global debugfs registers scsi: hisi_sas: Rollback some operations if FLR failed scsi: hisi_sas: Replace with standard error code return value arm64: dts: imx8mm: Reduce GPU to nominal speed arm64: dts: renesas: white-hawk-cpu: Fix missing serial console pin control block: Set memalloc_noio to false on device_add_disk() error path selftests/bpf: Relax time_tai test for equal timestamps in tai_forward wifi: mt76: mt7921: fix country count limitation for CLC arm64: dts: mediatek: mt8183: correct MDP3 DMA-related nodes dt-bindings: media: mediatek: mdp3: correct RDMA and WROT node with generic names arm64: dts: hisilicon: hikey970-pmic: fix regulator cells properties bpf: Fix verification of indirect var-off stack access wifi: mt76: mt7921s: fix workqueue problem causes STA association fail arm64: dts: qcom: sc7280: fix usb_2 wakeup interrupt types arm64: dts: qcom: sc7280: Mark Adreno SMMU as DMA coherent arm64: dts: qcom: sc7280: Fix up GPU SIDs arm64: dts: qcom: sm8350: Fix DMA0 address arm64: dts: qcom: sdm845-db845c: correct LED panic indicator arm64: dts: qcom: qrb5165-rb5: correct LED panic indicator scsi: fnic: Return error if vmalloc() failed bpf: fix check for attempt to corrupt spilled pointer selftests/net: specify the interface when do arping bpf: Defer the free of inner map when necessary bpf: Add map and need_defer parameters to .map_fd_put_ptr() bpf: add percpu stats for bpf_map elements insertions/deletions rcu-tasks: Provide rcu_trace_implies_rcu_gp() arm64: dts: qcom: sm6350: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sc8280xp: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sm8250: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sm8150: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sdm845: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sc7280: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sc7280: Mark some nodes as 'reserved' arm64: dts: qcom: sc7180: Make watchdog bark interrupt edge triggered ARM: dts: qcom: sdx65: correct SPMI node name bpf: enforce precision of R0 on callback return md: synchronize flush io with array reconfiguration selftests/bpf: Fix erroneous bitmask operation arm64: dts: ti: k3-am65-main: Fix DSS irq trigger type arm64: dts: ti: k3-am62a-main: Fix GPIO pin count in DT nodes wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior firmware: meson_sm: populate platform devices from sm device tree data firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create() net/ncsi: Fix netlink major/minor version numbers ARM: dts: qcom: apq8064: correct XOADC register address wifi: libertas: stop selecting wext wifi: ath11k: Defer on rproc_get failure bpf: Add crosstask check to __bpf_get_stack bpf, lpm: Fix check prefixlen before walking trie wifi: rtw88: fix RX filter in FIF_ALLMULTI flag wifi: plfxlc: check for allocation failure in plfxlc_usb_wreq_async() pNFS: Fix the pnfs block driver's calculation of layoutget size SUNRPC: fix _xprt_switch_find_current_entry logic NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT blocklayoutdriver: Fix reference leak of pnfs_device_node csky: fix arch_jump_label_transform_static override crypto: scomp - fix req->dst buffer overflow crypto: sahara - do not resize req->src when doing hash operations crypto: sahara - fix processing hash requests with req->nbytes < sg->length crypto: sahara - improve error handling in sahara_sha_process() crypto: sahara - fix wait_for_completion_timeout() error handling crypto: sahara - fix ahash reqsize crypto: sahara - handle zero-length aes requests crypto: sahara - avoid skcipher fallback code duplication crypto: virtio - Wait for tasklet to complete on device remove gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump fs: indicate request originates from old mount API erofs: fix memory leak on short-lived bounced pages pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() crypto: hisilicon/zip - save capability registers in probe process crypto: hisilicon/sec2 - save capability registers in probe process crypto: hisilicon/hpre - save capability registers in probe process crypto: hisilicon/qm - add a function to set qm algs crypto: hisilicon/zip - add zip comp high perf mode configuration crypto: hisilicon/qm - save capability registers in qm init process crypto: sahara - fix error handling in sahara_hw_descriptor_create() crypto: sahara - fix processing requests with cryptlen < sg->length crypto: sahara - fix ahash selftest failure crypto: sahara - fix cbc selftest failure crypto: sahara - remove FLAGS_NEW_KEY logic crypto: safexcel - Add error handling for dma_map_sg() calls crypto: af_alg - Disallow multiple in-flight AIO requests crypto: ccp - fix memleak in ccp_init_dm_workarea crypto: sa2ul - Return crypto_aead_setkey to transfer the error crypto: virtio - Handle dataq logic with tasklet selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket mtd: Fix gluebi NULL pointer dereference caused by ftl notifier kunit: debugfs: Fix unchecked dereference in debugfs_print_results() ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error ACPI: LPSS: Fix the fractional clock divider flags spi: sh-msiof: Enforce fixed DTDL for R-Car H3 efivarfs: Free s_fs_info on unmount efivarfs: force RO when remounting if SetVariable is not supported calipso: fix memory leak in netlbl_calipso_add_pass() cpufreq: scmi: process the result of devm_of_clk_add_hw_provider() cpufreq: Use of_property_present() for testing DT property presence of: Add of_property_present() helper platform/x86/intel/vsec: Fix xa_alloc memory leak platform/x86/intel/vsec: Use mutex for ida_alloc() and ida_free() platform/x86/intel/vsec: Support private data platform/x86/intel/vsec: Enhance and Export intel_vsec_add_aux() KEYS: encrypted: Add check for strsep ACPI: LPIT: Avoid u32 multiplication overflow ACPI: video: check for error while searching for backlight device parent mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response spi: spi-zynqmp-gqspi: fix driver kconfig dependencies powerpc/imc-pmu: Add a null pointer check in update_events_in_group() powerpc/powernv: Add a null pointer check in opal_powercap_init() powerpc/powernv: Add a null pointer check in opal_event_init() powerpc/powernv: Add a null pointer check to scom_debug_init_one() selftests/powerpc: Fix error handling in FPU/VMX preemption tests powerpc/pseries/memhp: Fix access beyond end of drmem array powerpc/44x: select I2C for CURRITUCK powerpc: add crtsavres.o to always-y instead of extra-y powerpc: remove checks for binutils older than 2.25 EDAC/thunderx: Fix possible out-of-bounds string access x86/mce/inject: Clear test status value x86/lib: Fix overflow when counting digits UPSTREAM: sched/fair: Limit sched slice duration ANDROID: Update the ABI symbol list ANDROID: idle_inject: Export function symbols ANDROID: Update the ABI symbol list ANDROID: GKI: Remove CONFIG_MEDIA_CEC_RC BACKPORT: usb: host: xhci: Avoid XHCI resume delay if SSUSB device is not present ANDROID: Update the ABI symbol list ANDROID: uid_sys_stats: Drop CONFIG_UID_SYS_STATS_DEBUG logic ANDROID: Update the ABI symbol list ANDROID: Update the ABI symbol list UPSTREAM: usb: gadget: uvc: Remove nested locking ANDROID: uid_sys_stats: Fully initialize uid_entry_tmp value ANDROID: Roll back some code to fix system_server registers psi trigger failed. UPSTREAM: usb: gadget: uvc: Fix use are free during STREAMOFF ANDROID: GKI: Add symbol list for Nothing Linux 6.1.74 scripts/decode_stacktrace.sh: optionally use LLVM utilities coresight: etm4x: Fix width of CCITMIN field PCI: Add ACS quirk for more Zhaoxin Root Ports leds: ledtrig-tty: Free allocated ttyname buffer on deactivate parport: parport_serial: Add Brainboxes device IDs and geometry parport: parport_serial: Add Brainboxes BAR details uio: Fix use-after-free in uio_open binder: fix comment on binder_alloc_new_buf() return value binder: fix trivial typo of binder_free_buf_locked() binder: fix use-after-free in shinker's callback binder: use EPOLLERR from eventpoll.h Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" ksmbd: free ppace array on error in parse_dacl ksmbd: don't allow O_TRUNC open on read-only share bpf: Add --skip_encoding_btf_inconsistent_proto, --btf_gen_optimized to pahole flags for v1.25 btf, scripts: Exclude Rust CUs with pahole ASoC: SOF: Intel: hda-codec: Delay the codec device registration ACPI: resource: Add another DMI match for the TongFang GMxXGxx ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP Envy X360 13-ay0xxx drm/crtc: fix uninitialized variable use ARM: sun9i: smp: fix return code check of of_property_match_string net: qrtr: ns: Return 0 if server port is not present virtio_blk: fix snprintf truncation compiler warning ida: Fix crash in ida_free when the bitmap is empty pinctrl: cy8c95x0: Fix get_pincfg pinctrl: cy8c95x0: Fix typo drm/amd/display: get dprefclk ss info from integration info table i2c: rk3x: fix potential spinlock recursion on poll smb: client: fix potential OOB in smb2_dump_detail() HID: nintendo: Prevent divide-by-zero on code dm audit: fix Kconfig so DM_AUDIT depends on BLK_DEV_DM ALSA: hda/realtek: Add quirks for ASUS Zenbook 2022 Models ASoC: Intel: bytcr_rt5640: Add new swapped-speakers quirk ASoC: Intel: bytcr_rt5640: Add quirk for the Medion Lifetab S10346 platform/x86: thinkpad_acpi: fix for incorrect fan reporting on some ThinkPad systems HID: nintendo: fix initializer element is not constant error kselftest: alsa: fixed a print formatting warning Input: xpad - add Razer Wolverine V2 support wifi: iwlwifi: pcie: avoid a NULL pointer dereference ARC: fix spare error s390/scm: fix virtual vs physical address confusion Input: i8042 - add nomux quirk for Acer P459-G2-M Input: atkbd - skip ATKBD_CMD_GETID in translated mode reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning Input: psmouse - enable Synaptics InterTouch for ThinkPad L14 G1 ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI tracing: Fix uaf issue when open the hist or hist_debug file MIPS: dts: loongson: drop incorrect dwmac fallback compatible stmmac: dwmac-loongson: drop useless check for compatible fallback tracing: Add size check when printing trace_marker output tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing jbd2: fix soft lockup in journal_finish_inode_data_buffers() platform/x86: intel-vbtn: Fix missing tablet-mode-switch events neighbour: Don't let neigh_forced_gc() disable preemption for long drm/crtc: Fix uninit-value bug in drm_mode_setcrtc jbd2: increase the journal IO's priority jbd2: correct the printing of write_flags in jbd2_write_superblock() clk: rockchip: rk3128: Fix HCLK_OTG gate register clk: rockchip: rk3568: Add PLL rate for 292.5MHz LoongArch: Preserve syscall nr across execve() hwmon: (corsair-psu) Fix probe when built-in drm/exynos: fix a wrong error checking drm/exynos: fix a potential error pointer dereference drm/amdgpu: Add NULL checks for function pointers arm64: dts: rockchip: Fix PCI node addresses on rk3399-gru nvme: prevent potential spectre v1 gadget nvme: introduce helper function to get ctrl state ASoC: ops: add correct range check for limiting volume ASoC: da7219: Support low DC impedance headset net/tg3: fix race condition in tg3_reset_task() ASoC: hdac_hda: Conditionally register dais for HDMI and Analog ASoC: amd: yc: Add DMI entry to support System76 Pangolin 13 nouveau/tu102: flush all pdbs on vmm flush ASoC: Intel: skl_hda_dsp_generic: Drop HDMI routes when HDMI is not available ASoC: rt5650: add mutex to avoid the jack detection failure ASoC: cs43130: Fix incorrect frame delay configuration ASoC: cs43130: Fix the position of const qualifier ASoC: Intel: Skylake: mem leak in skl register function ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16 ASoC: Intel: Skylake: Fix mem leak in few functions arm64: dts: rockchip: fix rk356x pcie msg interrupt name ASoC: wm8974: Correct boost mixer inputs hwtracing: hisi_ptt: Don't try to attach a task hwtracing: hisi_ptt: Handle the interrupt in hardirq context nvme-core: check for too small lba shift blk-mq: don't count completed flush data request as inflight in case of quiesce smb: client, common: fix fortify warnings drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer drm/amd/display: update dcn315 lpddr pstate latency nvme-core: fix a memory leak in nvme_ns_info_from_identify() ALSA: hda: intel-nhlt: Ignore vbps when looking for DMIC 32 bps format debugfs: fix automount d_fsdata usage wifi: mac80211: handle 320 MHz in ieee80211_ht_cap_ie_to_sta_ht_cap wifi: avoid offset calculation on NULL pointer wifi: cfg80211: lock wiphy mutex for rfkill poll mptcp: fix uninit-value in mptcp_incoming_options ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro pinctrl: lochnagar: Don't build on MIPS f2fs: explicitly null-terminate the xattr list ANDROID: Enable CONFIG_LAZY_RCU in x86 gki_defconfig ANDROID: fuse-bpf: Fix the issue of abnormal lseek system calls ANDROID: ABI: Update symbol list for imx BACKPORT: PM: sleep: Fix possible deadlocks in core system-wide PM code UPSTREAM: async: Introduce async_schedule_dev_nocall() UPSTREAM: async: Split async_schedule_node_domain() FROMGIT: BACKPORT: mm: update mark_victim tracepoints fields ANDROID: Enable CONFIG_LAZY_RCU in arm64 gki_defconfig FROMLIST: rcu: Provide a boot time parameter to control lazy RCU ANDROID: rcu: Add a minimum time for marking boot as completed UPSTREAM: rcu: Disable laziness if lazy-tracking says so UPSTREAM: rcu: Track laziness during boot and suspend UPSTREAM: net: Use call_rcu_hurry() for dst_release() UPSTREAM: workqueue: Make queue_rcu_work() use call_rcu_hurry() UPSTREAM: percpu-refcount: Use call_rcu_hurry() for atomic switch UPSTREAM: io_uring: use call_rcu_hurry if signaling an eventfd UPSTREAM: rcu: Update synchronize_rcu_mult() comment for call_rcu_hurry() UPSTREAM: scsi/scsi_error: Use call_rcu_hurry() instead of call_rcu() UPSTREAM: rcu/rcutorture: Use call_rcu_hurry() where needed UPSTREAM: rcu/rcuscale: Use call_rcu_hurry() for async reader test UPSTREAM: rcu/sync: Use call_rcu_hurry() instead of call_rcu BACKPORT: rcu: Shrinker for lazy rcu UPSTREAM: rcu: Refactor code a bit in rcu_nocb_do_flush_bypass() UPSTREAM: rcu: Make call_rcu() lazy to save power UPSTREAM: rcu: Fix missing nocb gp wake on rcu_barrier() UPSTREAM: rcu: Fix late wakeup when flush of bypass cblist happens ANDROID: Update the ABI symbol list ANDROID: GKI: add GKI symbol list for Exynosauto SoC UPSTREAM: coresight: tmc: Don't enable TMC when it's not ready. UPSTREAM: netfilter: nf_tables: bail out on mismatching dynset and set expressions Revert "ipv6: remove max_size check inline with ipv4" ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: add hooks in driver/android/binder.c ANDROID: GKI: Update honda symbol list for xt_LOG ANDROID: GKI: Update honda symbol list for ebt filter ANDROID: GKI: Update honda symbol list for ebtables ANDROID: GKI: Update honda symbol list for net scheduler ANDROID: GKI: Update honda symbol list for led-trigger ANDROID: GKI: Add initial symbol list for honda ANDROID: GKI: add symbols to ABI ANDROID: db845c: Enable device tree overlay support FROMGIT: usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart FROMGIT: usb: dwc3: set pm runtime active before resume common Linux 6.1.73 cifs: fix flushing folio regression for 6.1 backport ipv6: remove max_size check inline with ipv4 Revert "nfsd: separate nfsd_last_thread() from nfsd_put()" Revert "nfsd: call nfsd_last_thread() before final nfsd_put()" ANDROID: Update the pixel symbol list Revert "splice, net: Add a splice_eof op to file-ops and socket-ops" Revert "ipv4, ipv6: Use splice_eof() to flush" Revert "udp: introduce udp->udp_flags" Revert "udp: move udp->no_check6_tx to udp->udp_flags" Revert "udp: move udp->no_check6_rx to udp->udp_flags" Revert "udp: move udp->gro_enabled to udp->udp_flags" Revert "udp: move udp->accept_udp_{l4|fraglist} to udp->udp_flags" Revert "udp: lockless UDP_ENCAP_L2TPINUDP / UDP_GRO" Revert "udp: annotate data-races around udp->encap_type" Revert "bpf, sockmap: af_unix stream sockets need to hold ref for pair sock" Revert "bpf: decouple prune and jump points" Revert "bpf: remove unnecessary prune and jump points" Revert "bpf: Remove unused insn_cnt argument from visit_[func_call_]insn()" Revert "bpf: clean up visit_insn()'s instruction processing" Revert "bpf: Support new 32bit offset jmp instruction" Revert "bpf: handle ldimm64 properly in check_cfg()" Revert "bpf: Fix a verifier bug due to incorrect branch offset comparison with cpu=v4" Revert "device property: Allow const parameter to dev_fwnode()" BACKPORT: UPSTREAM: phy: qcom-qmp: Introduce Kconfig symbols for discrete drivers ANDROID: GKI: add symbols of vendor hooks to ABI for swapping in ahead ANDROID: GKI: add vendor hooks for swapping in ahead Reapply "kasan: print the original fault addr when access invalid shadow" ANDROID: GKI: fix crc issue in include/net/addrconf.h ANDROID: add 16k targets for Microdroid kernel Revert "cred: switch to using atomic_long_t" FROMGIT: BACKPORT: mm/cma: fix placement of trace_cma_alloc_start/finish FROMGIT: wifi: nl80211: Extend del pmksa support for SAE and OWE security ANDROID: Update the ABI symbol list ANDROID: mm: export dump_tasks symbol. FROMLIST: scsi: ufs: Remove the ufshcd_hba_exit() call from ufshcd_async_scan() FROMLIST: scsi: ufs: Simplify power management during async scan Linux 6.1.72 Revert "interconnect: qcom: sm8250: Enable sync_state" smb3: Replace smb2pdu 1-element arrays with flex-arrays media: qcom: camss: Comment CSID dt_id field bpf: syzkaller found null ptr deref in unix_bpf proto add bpf: Fix a verifier bug due to incorrect branch offset comparison with cpu=v4 net/sched: act_ct: Always fill offloading tuple iifidx net/sched: act_ct: additional checks for outdated flows f2fs: compress: fix to assign compress_level for lz4 correctly genirq/affinity: Only build SMP-only helper functions on SMP kernels mmc: sdhci-sprd: Fix eMMC init failure after hw reset mmc: core: Cancel delayed work before releasing host mmc: rpmb: fixes pause retune on all RPMB partitions. mmc: meson-mx-sdhc: Fix initialization frozen issue drm/amd/display: add nv12 bounding box drm/amdgpu: skip gpu_info fw loading on navi12 mm: fix unmap_mapping_range high bits shift bug i2c: core: Fix atomic xfer check for non-preempt config x86/kprobes: fix incorrect return address calculation in kprobe_emulate_call_indirect firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards ring-buffer: Fix 32-bit rb_time_read() race with rb_time_cmpxchg() btrfs: mark the len field in struct btrfs_ordered_sum as unsigned btrfs: fix qgroup_free_reserved_data int overflow octeontx2-af: Support variable number of lmacs octeontx2-af: Fix pause frame configuration net/sched: act_ct: Take per-cb reference to tcf_ct_flow_table netfilter: flowtable: GC pushes back packets to classic path net/sched: act_ct: Fix promotion of offloaded unreplied tuple net/sched: act_ct: offload UDP NEW connections netfilter: flowtable: cache info of last offload netfilter: flowtable: allow unidirectional rules net: sched: call tcf_ct_params_free to free params in tcf_ct_init mm/memory_hotplug: fix error handling in add_memory_resource() mm/memory_hotplug: add missing mem_hotplug_lock lib/group_cpus.c: avoid acquiring cpu hotplug lock in group_cpus_evenly genirq/affinity: Move group_cpus_evenly() into lib/ genirq/affinity: Rename irq_build_affinity_masks as group_cpus_evenly genirq/affinity: Don't pass irq_affinity_desc array to irq_build_affinity_masks genirq/affinity: Pass affinity managed mask array to irq_build_affinity_masks genirq/affinity: Remove the 'firstvec' parameter from irq_build_affinity_masks ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 firmware: arm_scmi: Fix frequency truncation by promoting multiplier type bpf, sockmap: af_unix stream sockets need to hold ref for pair sock ethtool: don't propagate EOPNOTSUPP from dumps dpaa2-eth: recycle the RX buffer only after all processing done net: dpaa2-eth: rearrange variable in dpaa2_eth_get_ethtool_stats smb: client: fix missing mode bits for SMB symlinks block: update the stable_writes flag in bdev_add filemap: add a per-mapping stable writes flag mm, netfs, fscache: stop read optimisation when folio removed from pagecache mm: merge folio_has_private()/filemap_release_folio() call pairs memory-failure: convert truncate_error_page() to use folio khugepage: replace try_to_release_page() with filemap_release_folio() ext4: convert move_extent_per_page() to use folios media: qcom: camss: Fix set CSI2_RX_CFG1_VC_MODE when VC is greater than 3 media: camss: sm8250: Virtual channels for CSID selftests: mptcp: set FAILING_LINKS in run_tests selftests: mptcp: fix fastclose with csum failure f2fs: set the default compress_level on ioctl f2fs: assign default compression level f2fs: convert to use bitmap API f2fs: clean up i_compress_flag and i_compress_level usage s390/cpumf: support user space events for counting s390/mm: add missing arch_set_page_dat() call to vmem_crst_alloc() net/mlx5: Increase size of irq name buffer blk-mq: make sure active queue usage is held for bio_integrity_prep() bpf: fix precision backtracking instruction iteration bpf: handle ldimm64 properly in check_cfg() bpf: Support new 32bit offset jmp instruction bpf: clean up visit_insn()'s instruction processing bpf: Remove unused insn_cnt argument from visit_[func_call_]insn() bpf: remove unnecessary prune and jump points bpf: decouple prune and jump points fbdev: imsttfb: fix double free in probe() fbdev: imsttfb: Release framebuffer and dealloc cmap on error path arm64: dts: qcom: sdm845: Fix PSCI power domain names arm64: dts: qcom: sdm845: align RPMh regulator nodes with bindings wifi: iwlwifi: yoyo: swap cdb and jacket bits values udp: annotate data-races around udp->encap_type udp: lockless UDP_ENCAP_L2TPINUDP / UDP_GRO udp: move udp->accept_udp_{l4|fraglist} to udp->udp_flags udp: move udp->gro_enabled to udp->udp_flags udp: move udp->no_check6_rx to udp->udp_flags udp: move udp->no_check6_tx to udp->udp_flags udp: introduce udp->udp_flags ipv4, ipv6: Use splice_eof() to flush splice, net: Add a splice_eof op to file-ops and socket-ops udp: Convert udp_sendpage() to use MSG_SPLICE_PAGES net: Declare MSG_SPLICE_PAGES internal sendmsg() flag bpf, x86: save/restore regs with BPF_DW size bpf, x86: Simplify the parsing logic of structure parameters bpf, x64: Fix tailcall infinite loop srcu: Fix callbacks acceleration mishandling cpu/SMT: Make SMT control more robust against enumeration failures cpu/SMT: Create topology_smt_thread_allowed() selftests: secretmem: floor the memory size to the multiple of page_size net: Implement missing SO_TIMESTAMPING_NEW cmsg support bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters() net: ravb: Wait for operating mode to be applied asix: Add check for usbnet_get_endpoints octeontx2-af: Re-enable MAC TX in otx2_stop processing octeontx2-af: Always configure NIX TX link credits based on max frame size net/smc: fix invalid link access in dumping SMC-R connections net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues igc: Fix hicredit calculation i40e: Restore VF MSI-X state during PCI reset ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux ASoC: meson: g12a-toacodec: Fix event generation ASoC: meson: g12a-tohdmitx: Validate written enum values ASoC: meson: g12a-toacodec: Validate written enum values i40e: fix use-after-free in i40e_aqc_add_filters() net: Save and restore msg_namelen in sock_sendmsg netfilter: nft_immediate: drop chain reference counter on error net: bcmgenet: Fix FCS generation for fragmented skbuffs sfc: fix a double-free bug in efx_probe_filters ARM: sun9i: smp: Fix array-index-out-of-bounds read in sunxi_mc_smp_init selftests: bonding: do not set port down when adding to bond net: Implement missing getsockopt(SO_TIMESTAMPING_NEW) net: annotate data-races around sk->sk_bind_phc net: annotate data-races around sk->sk_tsflags net-timestamp: extend SOF_TIMESTAMPING_OPT_ID to HW timestamps can: raw: add support for SO_MARK r8169: Fix PCI error on system resume net: sched: em_text: fix possible memory leak in em_text_destroy() mlxbf_gige: fix receive packet race condition ASoC: mediatek: mt8186: fix AUD_PAD_TOP register and offset ASoC: fsl_rpmsg: Fix error handler with pm_runtime_enable igc: Check VLAN EtherType mask igc: Check VLAN TCI mask igc: Report VLAN EtherType matching back to user i40e: Fix filter input checks to prevent config with invalid values ice: Shut down VSI with "link-down-on-close" enabled ice: Fix link_down_on_close message drm/i915/dp: Fix passing the correct DPCD_REV for drm_dp_set_phy_test_pattern octeontx2-af: Fix marking couple of structure as __packed nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local netfilter: nf_tables: set transport offset from mac header for netdev/egress netfilter: use skb_ip_totlen and iph_totlen drm/bridge: ti-sn65dsi86: Never store more than msg->size bytes in AUX xfer wifi: iwlwifi: pcie: don't synchronize IRQs from IRQ KVM: x86/pmu: fix masking logic for MSR_CORE_PERF_GLOBAL_CTRL cifs: do not depend on release_iface for maintaining iface_list cifs: cifs_chan_is_iface_active should be called with chan_lock held drm/mgag200: Fix gamma lut not initialized for G200ER, G200EV, G200SE Revert "PCI/ASPM: Remove pcie_aspm_pm_state_change()" mptcp: prevent tcp diag from closing listener subflows ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP ProBook 440 G6 ALSA: hda/realtek: fix mute/micmute LEDs for a HP ZBook ALSA: hda/realtek: enable SND_PCI_QUIRK for hp pavilion 14-ec1xxx series block: Don't invalidate pagecache for invalid falloc modes keys, dns: Fix missing size check of V1 server-list header ANDROID: gki_defconfig: Set CONFIG_IDLE_INJECT and CONFIG_CPU_IDLE_THERMAL into y ANDROID: KMI workaround for CONFIG_NETFILTER_FAMILY_BRIDGE ANDROID: dma-buf: don't re-purpose kobject as work_struct BACKPORT: FROMLIST: dma-buf: Move sysfs work out of DMA-BUF export path UPSTREAM: netfilter: nf_tables: skip set commit for deleted/destroyed sets ANDROID: KVM: arm64: Avoid BUG-ing from the host abort path ANDROID: Update the ABI symbol list UPSTREAM: ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet UPSTREAM: nvmet-tcp: Fix a possible UAF in queue intialization setup FROMGIT: usb: dwc3: gadget: Handle EP0 request dequeuing properly ANDROID: ABI: Update symbol list for imx UPSTREAM: io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid UPSTREAM: bpf: Fix prog_array_map_poke_run map poke update BACKPORT: xhci: track port suspend state correctly in unsuccessful resume cases ANDROID: fix crc error in put_cmsg caused in 6.1.68 ANDROID: Update the ABI symbol list ANDROID: sched: Export symbols for vendor modules UPSTREAM: usb: dwc3: core: add support for disabling High-speed park mode Linux 6.1.71 Revert "platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe" tracing/kprobes: Fix symbol counting logic by looking at modules as well kallsyms: Make module_kallsyms_on_each_symbol generally available device property: Allow const parameter to dev_fwnode() spi: Constify spi parameters of chip select APIs NFSD: fix possible oops when nfsd/pool_stats is closed. ring-buffer: Fix slowpath of interrupted event netfilter: nf_tables: skip set commit for deleted/destroyed sets ring-buffer: Remove useless update to write_stamp in rb_try_to_discard() tracing: Fix blocked reader of snapshot buffer ring-buffer: Fix wake ups when buffer_percent is set to 100 mm/memory-failure: check the mapcount of the precise page mm/memory-failure: cast index to loff_t before shifting it mm: migrate high-order folios in swap cache correctly mm/filemap: avoid buffered read/write race to read inconsistent data platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() block: renumber QUEUE_FLAG_HW_WC spi: atmel: Fix clock issue when using devices with different polarities spi: Add APIs in spi core to set/get spi->chip_select and spi->cs_gpiod spi: Reintroduce spi_set_cs_timing() linux/export: Ensure natural alignment of kcrctab array nfsd: call nfsd_last_thread() before final nfsd_put() nfsd: separate nfsd_last_thread() from nfsd_put() iio: imu: adis16475: add spi_device_id table spi: Introduce spi_get_device_match_data() helper usb: fotg210-hcd: delete an incorrect bounds test ARM: dts: Fix occasional boot hang for am3 usb ksmbd: fix wrong allocation size update in smb2_open() ksmbd: avoid duplicate opinfo_put() call on error of smb21_lease_break_ack() ksmbd: lazy v2 lease break on smb2_write() ksmbd: send v2 lease break notification for directory ksmbd: downgrade RWH lease caching state to RH for directory ksmbd: set v2 lease capability ksmbd: set epoch in create context v2 lease ksmbd: don't update ->op_state as OPLOCK_STATE_NONE on error ksmbd: move setting SMB2_FLAGS_ASYNC_COMMAND and AsyncId ksmbd: release interim response after sending status pending response ksmbd: move oplock handling after unlock parent dir ksmbd: separately allocate ci per dentry ksmbd: fix possible deadlock in smb2_open ksmbd: prevent memory leak on error return ksmbd: fix kernel-doc comment of ksmbd_vfs_kern_path_locked() ksmbd: no need to wait for binded connection termination at logoff ksmbd: add support for surrogate pair conversion ksmbd: fix missing RDMA-capable flag for IPoIB device in ksmbd_rdma_capable_netdev() ksmbd: fix recursive locking in vfs helpers ksmbd: fix kernel-doc comment of ksmbd_vfs_setxattr() ksmbd: reorganize ksmbd_iov_pin_rsp() ksmbd: Remove unused field in ksmbd_user struct ksmbd: fix potential double free on smb2_read_pipe() error path ksmbd: fix Null pointer dereferences in ksmbd_update_fstate() ksmbd: fix wrong error response status by using set_smb2_rsp_status() ksmbd: fix race condition between tree conn lookup and disconnect ksmbd: fix race condition from parallel smb2 lock requests ksmbd: fix race condition from parallel smb2 logoff requests ksmbd: fix race condition with fp ksmbd: check iov vector index in ksmbd_conn_write() ksmbd: return invalid parameter error response if smb2 request is invalid ksmbd: fix passing freed memory 'aux_payload_buf' ksmbd: remove unneeded mark_inode_dirty in set_info_sec() ksmbd: remove experimental warning ksmbd: add missing calling smb2_set_err_rsp() on error ksmbd: Fix one kernel-doc comment ksmbd: fix `force create mode' and `force directory mode' ksmbd: fix wrong interim response on compound ksmbd: add support for read compound ksmbd: switch to use kmemdup_nul() helper ksmbd: check if a mount point is crossed during path lookup ksmbd: Fix unsigned expression compared with zero ksmbd: Replace one-element array with flexible-array member ksmbd: Use struct_size() helper in ksmbd_negotiate_smb_dialect() ksmbd: Replace the ternary conditional operator with min() ksmbd: use kvzalloc instead of kvmalloc ksmbd: Change the return value of ksmbd_vfs_query_maximal_access to void ksmbd: return a literal instead of 'err' in ksmbd_vfs_kern_path_locked() ksmbd: use kzalloc() instead of __GFP_ZERO ksmbd: remove unused ksmbd_tree_conn_share function ksmbd: add mnt_want_write to ksmbd vfs functions ksmbd: fix posix_acls and acls dereferencing possible ERR_PTR() ksmbd: call putname after using the last component ksmbd: fix uninitialized pointer read in smb2_create_link() ksmbd: fix uninitialized pointer read in ksmbd_vfs_rename() ksmbd: fix racy issue from using ->d_parent and ->d_name fs: introduce lock_rename_child() helper ksmbd: remove unused compression negotiate ctx packing ksmbd: avoid duplicate negotiate ctx offset increments ksmbd: set NegotiateContextCount once instead of every inc ksmbd: delete asynchronous work from list ksmbd: remove unused is_char_allowed function ksmbd: Fix parameter name and comment mismatch ksmbd: Fix spelling mistake "excceed" -> "exceeded" ksmbd: update Kconfig to note Kerberos support and fix indentation ksmbd: Remove duplicated codes ksmbd: fix typo, syncronous->synchronous ksmbd: Implements sess->rpc_handle_list as xarray ksmbd: Convert to use sysfs_emit()/sysfs_emit_at() APIs ksmbd: Fix resource leak in smb2_lock() ksmbd: use F_SETLK when unlocking a file ksmbd: set SMB2_SESSION_FLAG_ENCRYPT_DATA when enforcing data encryption for this share ksmbd: replace one-element arrays with flexible-array members Revert "hrtimers: Push pending hrtimers away from outgoing CPU earlier" Revert "drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group" ANDROID: KVM: arm64: Don't prepopulate MMIO regions for host stage-2 BACKPORT: FROMGIT fork: use __mt_dup() to duplicate maple tree in dup_mmap() FROMGIT: maple_tree: preserve the tree attributes when destroying maple tree FROMGIT: maple_tree: update check_forking() and bench_forking() FROMGIT: maple_tree: skip other tests when BENCH is enabled FROMGIT: maple_tree: update the documentation of maple tree FROMGIT: maple_tree: add test for mtree_dup() FROMGIT: radix tree test suite: align kmem_cache_alloc_bulk() with kernel behavior. FROMGIT: maple_tree: introduce interfaces __mt_dup() and mtree_dup() FROMGIT: maple_tree: introduce {mtree,mas}_lock_nested() FROMGIT: maple_tree: add mt_free_one() and mt_attr() helpers UPSTREAM: maple_tree: introduce __mas_set_range() ANDROID: GKI: Enable symbols for v4l2 in async and fwnode Revert "mmc: core: add helpers mmc_regulator_enable/disable_vqmmc" Revert "mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled" ANDROID: Update the ABI symbol list ANDROID: KVM: arm64: Fix hyp event alignment ANDROID: KVM: arm64: Fix host_smc print typo FROMGIT: f2fs: do not return EFSCORRUPTED, but try to run online repair ANDROID: KVM: arm64: Document module_change_host_prot_range Revert "mmc: core: add helpers mmc_regulator_enable/disable_vqmmc" Revert "mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled" FROMGIT: PM / devfreq: Synchronize devfreq_monitor_[start/stop] FROMGIT: arch/mm/fault: fix major fault accounting when retrying under per-VMA lock UPSTREAM: mm: handle write faults to RO pages under the VMA lock UPSTREAM: mm: handle read faults under the VMA lock UPSTREAM: mm: handle COW faults under the VMA lock UPSTREAM: mm: handle shared faults under the VMA lock BACKPORT: mm: call wp_page_copy() under the VMA lock UPSTREAM: mm: make lock_folio_maybe_drop_mmap() VMA lock aware UPSTREAM: mm/memory.c: fix mismerge ANDROID: Export functions to be used with dma_map_ops in modules BACKPORT: FROMGIT: erofs: enable sub-page compressed block support FROMGIT: erofs: refine z_erofs_transform_plain() for sub-page block support FROMGIT: erofs: fix ztailpacking for subpage compressed blocks BACKPORT: FROMGIT: erofs: fix up compacted indexes for block size < 4096 FROMGIT: erofs: record `pclustersize` in bytes instead of pages FROMGIT: erofs: support I/O submission for sub-page compressed blocks FROMGIT: erofs: fix lz4 inplace decompression FROMGIT: erofs: fix memory leak on short-lived bounced pages BACKPORT: erofs: tidy up z_erofs_do_read_page() UPSTREAM: erofs: move preparation logic into z_erofs_pcluster_begin() BACKPORT: erofs: avoid obsolete {collector,collection} terms BACKPORT: erofs: simplify z_erofs_read_fragment() UPSTREAM: erofs: get rid of the remaining kmap_atomic() UPSTREAM: erofs: simplify z_erofs_transform_plain() BACKPORT: erofs: adapt managed inode operations into folios UPSTREAM: erofs: avoid on-stack pagepool directly passed by arguments UPSTREAM: erofs: allocate extra bvec pages directly instead of retrying UPSTREAM: erofs: clean up z_erofs_pcluster_readmore() UPSTREAM: erofs: remove the member readahead from struct z_erofs_decompress_frontend UPSTREAM: erofs: fold in z_erofs_decompress() UPSTREAM: erofs: enable large folios for iomap mode ANDROID: Update the ABI symbol list UPSTREAM: USB: gadget: core: adjust uevent timing on gadget unbind Linux 6.1.70 loop: deprecate autoloading callback loop_probe() wifi: nl80211: fix deadlock in nl80211_set_cqm_rssi (6.6.x) wifi: cfg80211: fix CQM for non-range use fuse: share lookup state between submount and its parent mm/damon/core: make damon_start() waits until kdamond_fn() starts x86/alternatives: Sync core before enabling interrupts KVM: arm64: vgic: Force vcpu vgic teardown on vcpu destroy KVM: arm64: vgic: Add a non-locking primitive for kvm_vgic_vcpu_destroy() KVM: arm64: vgic: Simplify kvm_vgic_destroy() thunderbolt: Fix memory leak in margining_port_remove() lib/vsprintf: Fix %pfwf when current node refcount == 0 gpio: dwapb: mask/unmask IRQ when disable/enale it bus: ti-sysc: Flush posted write only after srst_udelay pinctrl: starfive: jh7100: ignore disabled device tree nodes dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata() tracing / synthetic: Disable events after testing in synth_event_gen_test_init() scsi: core: Always send batch on reset or error handling command Revert "scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity" selftests: mptcp: join: fix subflow_send_ack lookup ublk: move ublk_cancel_dev() out of ub->mutex ubifs: fix possible dereference after free btrfs: zoned: no longer count fresh BG region as zone unusable Revert "drm/amd/display: Do not set DRR on pipe commit" dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client loop: do not enforce max_loop hard limit by (new) default RISC-V: Fix do_notify_resume / do_work_pending prototype 9p: prevent read overrun in protocol dump tracepoint drm/i915: Reject async flips with bigjoiner smb: client: fix OOB in smbCalcSize() smb: client: fix OOB in SMB2_query_info_init() smb: client: fix potential OOB in cifs_dump_detail() smb: client: fix OOB in cifsd when receiving compounded resps dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp net: ks8851: Fix TX stall caused by TX buffer overrun net: rfkill: gpio: set GPIO direction net: 9p: avoid freeing uninit memory in p9pdu_vreadf Input: soc_button_array - add mapping for airplane mode button net: usb: ax88179_178a: avoid failed operations when device is disconnected Bluetooth: Add more enc key size check Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE Bluetooth: L2CAP: Send reject on command corrupted request Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent ALSA: hda/realtek: Add quirk for ASUS ROG GV302XA USB: serial: option: add Quectel RM500Q R13 firmware support USB: serial: option: add Foxconn T99W265 with new baseline USB: serial: option: add Quectel EG912Y module support USB: serial: ftdi_sio: update Actisense PIDs constant names wifi: cfg80211: fix certs build to not depend on file order wifi: cfg80211: Add my certificate usb-storage: Add quirk for incorrect WP on Kingston DT Ultimate 3.0 G3 ALSA: usb-audio: Increase delay in MOTU M quirk iio: triggered-buffer: prevent possible freeing of wrong buffer iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma() iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() Input: ipaq-micro-keys - add error handling for devm_kmemdup interconnect: qcom: sm8250: Enable sync_state iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw interconnect: Treat xlate() returning NULL node as an error drm/i915: Fix ADL+ tiled plane stride when the POT stride is smaller than the original drm/i915/mtl: Add MTL for remapping CCS FBs drm/i915/dpt: Only do the POT stride remap when using DPT drm/i915: Fix intel_atomic_setup_scalers() plane_state handling drm/i915: Relocate intel_atomic_setup_scalers() drm/i915/mtl: limit second scaler vertical scaling in ver >= 14 nvme-pci: fix sleeping function called from interrupt context gpiolib: cdev: add gpio_device locking wrapper around gpio_ioctl() pinctrl: at91-pio4: use dedicated lock class for IRQ x86/xen: add CPU dependencies for 32-bit build i2c: aspeed: Handle the coalesced stop conditions with the start conditions. ASoC: fsl_sai: Fix channel swap issue on i.MX8MP ASoC: hdmi-codec: fix missing report for jack initial status afs: Fix use-after-free due to get/remove race in volume tree afs: Fix overwriting of result of DNS query keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry net: check dev->gso_max_size in gso_features_check() afs: Fix dynamic root lookup DNS check afs: Fix the dynamic root's d_delete to always delete unused dentries net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() net: mana: select PAGE_POOL Bluetooth: hci_event: shut up a false-positive warning Bluetooth: Fix deadlock in vhci_send_frame net/rose: fix races in rose_kill_by_device() ethernet: atheros: fix a memleak in atl1e_setup_ring_resources net: sched: ife: fix potential use-after-free net: Return error from sk_stream_wait_connect() if sk_wait_event() fails octeontx2-pf: Fix graceful exit during PFC configuration failure net: mscc: ocelot: fix eMAC TX RMON stats for bucket 256-511 and above net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors net/mlx5e: Correct snprintf truncation handling for fw_version buffer net/mlx5: Fix fw tracer first block check net/mlx5e: fix a potential double-free in fs_udp_create_groups net/mlx5e: Fix a race in command alloc flow net/mlx5: Re-organize mlx5_cmd struct net/mlx5: Prevent high-rate FW commands from populating all slots net/mlx5: Introduce and use opcode getter in command interface net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list() Revert "net/mlx5e: fix double free of encap_header" Revert "net/mlx5e: fix double free of encap_header in update funcs" wifi: mac80211: mesh_plink: fix matches_local logic wifi: mac80211: mesh: check element parsing succeeded wifi: mac80211: check if the existing link config remains unchanged wifi: iwlwifi: pcie: add another missing bh-disable for rxq->lock s390/vx: fix save/restore of fpu kernel context reset: Fix crash when freeing non-existent optional resets ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init ARM: dts: dra7: Fix DRA7 L3 NoC node register size drm/amd/display: fix hw rotated modes when PSR-SU is enabled HID: i2c-hid: Add IDEA5002 to i2c_hid_acpi_blacklist[] HID: i2c-hid: acpi: Unify ACPI ID tables format bpf: Fix prog_array_map_poke_run map poke update kasan: disable kasan_non_canonical_hook() for HW tags ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: Add hooks for rt_mutex steal UPSTREAM: dm verity: don't perform FEC for failed readahead IO UPSTREAM: netfilter: nft_set_pipapo: skip inactive elements during set walk FROMLIST: mm: migrate high-order folios in swap cache correctly ANDROID: fuse-bpf: Follow mounts in lookups Linux 6.1.69 r8152: fix the autosuspend doesn't work r8152: remove rtl_vendor_mode function r8152: avoid to change cfg for all devices net: tls, update curr on splice as well ring-buffer: Have rb_time_cmpxchg() set the msb counter too ring-buffer: Do not try to put back write_stamp ring-buffer: Fix a race in rb_time_cmpxchg() for 32 bit archs ring-buffer: Fix writing to the buffer with max_data_size ring-buffer: Have saved event hold the entire event ring-buffer: Do not update before stamp when switching sub-buffers tracing: Update snapshot buffer on resize if it is allocated ring-buffer: Fix memory leak of free page smb: client: fix OOB in smb2_query_reparse_point() smb: client: fix NULL deref in asn1_ber_decoder() smb: client: fix OOB in receive_encrypted_standard() drm/i915: Fix remapped stride with CCS on ADL+ drm/amd/display: Disable PSR-SU on Parade 0803 TCON again drm/amdgpu: fix tear down order in amdgpu_vm_pt_free btrfs: don't clear qgroup reserved bit in release_folio btrfs: free qgroup reserve when ORDERED_IOERR is set mm/shmem: fix race in shmem_undo_range w/THP mm/mglru: fix underprotected page cache dmaengine: stm32-dma: avoid bitfield overflow assertion drm/amdgpu/sdma5.2: add begin/end_use ring callbacks team: Fix use-after-free when an option instance allocation fails arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS soundwire: stream: fix NULL pointer dereference for multi_link btrfs: do not allow non subvolume root targets for snapshot perf: Fix perf_event_validate_size() lockdep splat HID: hid-asus: add const to read-only outgoing usb buffer arm64: add dependency between vmlinuz.efi and Image net: usb: qmi_wwan: claim interface 4 for ZTE MF290 asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad HID: hid-asus: reset the backlight brightness level on resume nbd: pass nbd_sock to nbd_read_reply() instead of index HID: add ALWAYS_POLL quirk for Apple kb HID: glorious: fix Glorious Model I HID report platform/x86: intel_telemetry: Fix kernel doc descriptions LoongArch: Implement constant timer shutdown interface LoongArch: Add dependency between vmlinuz.efi and vmlinux.efi selftests/bpf: fix bpf_loop_bench for new callback verification scheme nvme: catch errors from nvme_configure_metadata() nvme-auth: set explanation code for failure2 msgs nbd: fold nbd config initialization into nbd_alloc_config() bcache: avoid NULL checking to c->root in run_cache_set() bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() bcache: remove redundant assignment to variable cur_idx bcache: avoid oversize memory allocation by small stripe_size blk-cgroup: bypass blkcg_deactivate_policy after destroying blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" stmmac: dwmac-loongson: Add architecture dependency usb: aqc111: check packet for fixup for true limit x86/hyperv: Fix the detection of E820_TYPE_PRAM in a Gen2 VM drm/mediatek: Add spinlock for setting vblank event in atomic_begin ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE PCI: loongson: Limit MRRS to 256 Revert "PCI: acpiphp: Reassign resources on bridge if necessary" ALSA: hda/realtek: Apply mute LED quirk for HP15-db ALSA: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants ALSA: hda/hdmi: add force-connect quirk for NUC5CPYB fuse: dax: set fc->dax to NULL in fuse_dax_conn_free() cred: switch to using atomic_long_t net: atlantic: fix double free in ring reinit logic appletalk: Fix Use-After-Free in atalk_ioctl net: stmmac: Handle disabled MDIO busses from devicetree dpaa2-switch: do not ask for MDB, VLAN and FDB replay dpaa2-switch: fix size of the dma_unmap vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() sign-file: Fix incorrect return values check stmmac: dwmac-loongson: Make sure MDIO is initialized before use net: ena: Fix XDP redirection error net: ena: Fix xdp drops handling due to multibuf packets net: ena: Destroy correct number of xdp queues upon failure net: Remove acked SYN flag from packet in the transmit queue correctly qed: Fix a potential use-after-free in qed_cxt_tables_alloc iavf: Handle ntuple on/off based on new state machines for flow director iavf: Introduce new state machines for flow director net/rose: Fix Use-After-Free in rose_ioctl atm: Fix Use-After-Free in do_vcc_ioctl octeontx2-af: Update RSS algorithm index octeontx2-pf: Fix promisc mcam entry action octeontx2-af: fix a use-after-free in rvu_nix_register_reporters net: fec: correct queue selection net: vlan: introduce skb_vlan_eth_hdr() atm: solos-pci: Fix potential deadlock on &tx_queue_lock atm: solos-pci: Fix potential deadlock on &cli_queue_lock bnxt_en: Fix HWTSTAMP_FILTER_ALL packet timestamp logic bnxt_en: Fix wrong return value check in bnxt_close_nic() bnxt_en: Save ring error counters across reset bnxt_en: Clear resource reservation during resume qca_spi: Fix reset behavior qca_debug: Fix ethtool -G iface tx behavior qca_debug: Prevent crash on TX ring changes net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX net/mlx5e: Fix possible deadlock on mlx5e_tx_timeout_work HID: lenovo: Restrict detection of patched firmware only to USB cptkbd afs: Fix refcount underflow from error handling race ksmbd: fix memory leak in smb2_lock() ext4: fix warning in ext4_dio_write_end_io() powerpc/ftrace: Fix stack teardown in ftrace_no_trace r8152: add vendor/device ID pair for ASUS USB-C2500 r8152: add vendor/device ID pair for D-Link DUB-E250 r8152: add USB device driver for config selection perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table Revert "HID: fix HID device resource race between HID core and debugging support" ANDROID: GKI: Add symbols for rockchip sata ANDROID: sched: Add trace_android_rvh_setscheduler ANDROID: Update the ABI symbol list ANDROID: GKI: build damon for monitoring virtual address spaces UPSTREAM: mm/damon/sysfs-schemes: handle tried region directory allocation failure UPSTREAM: mm/damon/sysfs-schemes: handle tried regions sysfs directory allocation failure UPSTREAM: mm/damon/sysfs: check error from damon_sysfs_update_target() UPSTREAM: mm/damon/sysfs: eliminate potential uninitialized variable warning UPSTREAM: mm/damon/sysfs: update monitoring target regions for online input commit UPSTREAM: mm/damon/sysfs: remove requested targets when online-commit inputs UPSTREAM: mm/damon/sysfs: avoid empty scheme tried regions for large apply interval UPSTREAM: mm/damon/sysfs-schemes: do not update tried regions more than one DAMON snapshot UPSTREAM: mm/damon/sysfs: check DAMOS regions update progress from before_terminate() UPSTREAM: mm/damon/sysfs: implement a command for updating only schemes tried total bytes UPSTREAM: mm/damon/sysfs-schemes: implement DAMOS tried total bytes file UPSTREAM: mm/damon/ops-common: refactor to use {pte|pmd}p_clear_young_notify() UPSTREAM: mm/damon/core: skip apply schemes if empty UPSTREAM: mm/damon: use kstrtobool() instead of strtobool() UPSTREAM: mm/damon/sysfs-schemes: implement DAMOS-tried regions clear command UPSTREAM: mm/damon/sysfs: implement DAMOS tried regions update command UPSTREAM: mm/damon/sysfs-schemes: implement scheme region directory UPSTREAM: mm/damon/sysfs-schemes: implement schemes/tried_regions directory UPSTREAM: mm/damon/core: add a callback for scheme target regions check UPSTREAM: mm/damon/lru_sort: enable and disable synchronously UPSTREAM: mm/damon/reclaim: enable and disable synchronously UPSTREAM: mm/damon/{reclaim,lru_sort}: remove unnecessarily included headers UPSTREAM: mm/damon/modules: deduplicate init steps for DAMON context setup UPSTREAM: mm/damon/sysfs: split out schemes directory implementation to separate file UPSTREAM: mm/damon/sysfs: split out kdamond-independent schemes stats update logic into a new function UPSTREAM: mm/damon/sysfs: move unsigned long range directory to common module UPSTREAM: mm/damon/sysfs: move sysfs_lock to common module UPSTREAM: mm/damon/sysfs: remove parameters of damon_sysfs_region_alloc() UPSTREAM: mm/damon/sysfs: use damon_addr_range for region's start and end values UPSTREAM: mm/damon/core: split out scheme quota adjustment logic into a new function UPSTREAM: mm/damon/core: split out scheme stat update logic into a new function UPSTREAM: mm/damon/core: split damos application logic into a new function UPSTREAM: mm/damon/core: split out DAMOS-charged region skip logic into a new function ANDROID: Snapshot Mainline's version of checkpatch.pl ANDROID: KVM: arm64: Skip prefaulting ptes which will be modified later ANDROID: KVM: arm64: Introduce module_change_host_prot_range ANDROID: KVM: arm64: Relax checks in module_change_host_page_prot ANDROID: KVM: arm64: Optimise module_change_host_page_prot ANDROID: KVM: arm64: Prefault entries when splitting a block mapping ANDROID: virt: gunyah: Zero state_data after vcpu_run ANDROID: Update the ABI symbol list ANDROID: fs: Add vendor hooks for ep_create_wakeup_source & timerfd_create ANDROID: ABI: update symbol list for galaxy Linux 6.1.68 drm/i915: Skip some timing checks on BXT/GLK DSI transcoders drm/i915/sdvo: stop caching has_hdmi_monitor in struct intel_sdvo drm/i915/lvds: Use REG_BIT() & co. drm/i915/display: Drop check for doublescan mode in modevalid riscv: Kconfig: Add select ARM_AMBA to SOC_STARFIVE netfilter: nft_set_pipapo: skip inactive elements during set walk MIPS: Loongson64: Enable DMA noncoherent support MIPS: Loongson64: Handle more memory types passed from firmware MIPS: Loongson64: Reserve vgabios memory on boot KVM: SVM: Update EFER software model on CR0 trap for SEV-ES KVM: s390/mm: Properly reset no-dat MIPS: kernel: Clear FPU states when setting up kernel threads cifs: Fix flushing, invalidation and file size with FICLONE cifs: Fix flushing, invalidation and file size with copy_file_range() USB: gadget: core: adjust uevent timing on gadget unbind x86/CPU/AMD: Check vendor in the AMD microcode callback devcoredump: Send uevent once devcd is ready serial: 8250_omap: Add earlycon support for the AM654 UART controller serial: 8250: 8250_omap: Do not start RX DMA on THRI interrupt serial: 8250: 8250_omap: Clear UART_HAS_RHR_IT_DIS bit serial: sc16is7xx: address RX timeout interrupt errata ARM: PL011: Fix DMA support usb: typec: class: fix typec_altmode_put_partner to put plugs smb: client: fix potential NULL deref in parse_dfs_referrals() Revert "xhci: Loosen RPM as default policy to cover for AMD xHC 1.1" cifs: Fix non-availability of dedup breaking generic/304 parport: Add support for Brainboxes IX/UC/PX parallel cards serial: 8250_dw: Add ACPI ID for Granite Rapids-D UART usb: gadget: f_hid: fix report descriptor allocation drm/amdgpu: Update EEPROM I2C address for smu v13_0_0 drm/amdgpu: Add I2C EEPROM support on smu v13_0_6 drm/amdgpu: simplify amdgpu_ras_eeprom.c drm/amdgpu: Return from switch early for EEPROM I2C address drm/amdgpu: Remove second moot switch to set EEPROM I2C address drm/amdgpu: Add support for RAS table at 0x40000 drm/amdgpu: Decouple RAS EEPROM addresses from chips drm/amdgpu: Remove redundant I2C EEPROM address drm/amdgpu: Add EEPROM I2C address support for ip discovery drm/amdgpu: Update ras eeprom support for smu v13_0_0 and v13_0_10 drm/amdgpu: correct the amdgpu runtime dereference usage count drm/amd/amdgpu: Fix warnings in amdgpu/amdgpu_display.c drm/amdgpu: fix memory overflow in the IB test gpiolib: sysfs: Fix error handling on failed export x86/sev: Fix kernel crash due to late update to read-only ghcb_version perf: Fix perf_event_validate_size() arm64: dts: mt8183: kukui: Fix underscores in node names arm64: dts: mediatek: add missing space before { parisc: Fix asm operand number out of range build error in bug table parisc: Reduce size of the bug_table on 64-bit kernel by half tracing: Stop current tracer when resizing buffer tracing: Set actual size after ring buffer resize ring-buffer: Force absolute timestamp on discard of event LoongArch: BPF: Don't sign extend function return value LoongArch: BPF: Don't sign extend memory load operand misc: mei: client.c: fix problem of return '-EOVERFLOW' in mei_cl_write misc: mei: client.c: return negative error code in mei_cl_write hwtracing: hisi_ptt: Add dummy callback pmu::read() coresight: etm4x: Remove bogous __exit annotation for some functions coresight: etm4x: Make etm4_remove_dev() return void binder: fix memory leaks of spam and pending work arm64: dts: mediatek: mt8183-evb: Fix unit_address_vs_reg warning on ntc arm64: dts: mediatek: mt8183: Move thermal-zones to the root node arm64: dts: mediatek: mt8183: Fix unit address for scp reserved memory arm64: dts: mediatek: mt8195: Fix PM suspend/resume with venc clocks arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names arm64: dts: mediatek: cherry: Fix interrupt cells for MT6360 on I2C7 arm64: dts: mediatek: mt8183-kukui-jacuzzi: fix dsi unnecessary cells properties arm64: dts: mediatek: mt7622: fix memory node warning check md/raid6: use valid sector values to determine if an I/O should wait on the reshape powercap: DTPM: Fix missing cpufreq_cpu_put() calls mm: fix oops when filemap_map_pmd() without prealloc_pte hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write platform/surface: aggregator: fix recv_buf() return value regmap: fix bogus error on regcache_sync success r8169: fix rtl8125b PAUSE frames blasting when suspended packet: Move reference count in packet_sock to atomic_long_t tracing: Fix a possible race when disabling buffered events tracing: Fix incomplete locking when disabling buffered events tracing: Disable snapshot buffer when stopping instance tracers tracing: Always update snapshot buffer size checkstack: fix printed address cgroup_freezer: cgroup_freezing: Check if not frozen nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() nilfs2: fix missing error check for sb_set_blocksize call ring-buffer: Test last update in 32bit version of __rb_time_read() ALSA: hda/realtek: Add Framework laptop 16 to quirks ALSA: hda/realtek: add new Framework laptop to quirks ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5 ALSA: pcm: fix out-of-bounds in snd_pcm_state_names ALSA: usb-audio: Add Pioneer DJM-450 mixer controls io_uring: fix mutex_unlock with unreferenced ctx nvme-pci: Add sleep quirk for Kingston drives io_uring/af_unix: disable sending io_uring over sockets ASoC: amd: yc: Fix non-functional mic on ASUS E1504FA kprobes: consistent rcu api usage for kretprobe holder rethook: Use __rcu pointer for rethook::handler iommu: Avoid more races around device probe md: don't leave 'MD_RECOVERY_FROZEN' in error path of md_set_readonly() md: introduce md_ro_state riscv: fix misaligned access handling of C.SWSP and C.SDSP ARM: dts: imx28-xea: Pass the 'model' property ARM: dts: imx7: Declare timers compatible with fsl,imx6dl-gpt ARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() tracing: Fix a warning when allocating buffered events fails ARM: dts: imx6ul-pico: Describe the Ethernet PHY clock arm64: dts: imx8mp: imx8mq: Add parkmode-disable-ss-quirk on DWC3 arm64: dts: imx8mq: drop usb3-resume-missing-cas from usb drm/bridge: tc358768: select CONFIG_VIDEOMODE_HELPERS RDMA/irdma: Avoid free the non-cqp_request scratch RDMA/core: Fix umem iterator when PAGE_SIZE is greater then HCA pgsz ASoC: wm_adsp: fix memleak in wm_adsp_buffer_populate hwmon: (nzxt-kraken2) Fix error handling path in kraken2_probe() ASoC: codecs: lpass-tx-macro: set active_decimator correct default value hwmon: (acpi_power_meter) Fix 4.29 MW bug RDMA/irdma: Fix UAF in irdma_sc_ccq_get_cqe_info() RDMA/irdma: Refactor error handling in create CQP RDMA/bnxt_re: Correct module description string RDMA/rtrs-clt: Remove the warnings for req in_use check RDMA/rtrs-clt: Fix the max_send_wr setting RDMA/rtrs-srv: Destroy path files after making sure no IOs in-flight RDMA/rtrs-srv: Free srv_mr iu only when always_invalidate is true RDMA/rtrs-srv: Check return values while processing info request RDMA/rtrs-clt: Start hb after path_up RDMA/rtrs-srv: Do not unconditionally enable irq ASoC: fsl_sai: Fix no frame sync clock issue on i.MX8MP arm64: dts: rockchip: Expand reg size of vdec node for RK3399 arm64: dts: rockchip: Expand reg size of vdec node for RK3328 RDMA/irdma: Add wait for suspend on SQD RDMA/irdma: Do not modify to SQD on error RDMA/hns: Fix unnecessary err return when using invalid congest control algorithm tee: optee: Fix supplicant based device enumeration mm/damon/sysfs: eliminate potential uninitialized variable warning drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group psample: Require 'CAP_NET_ADMIN' when joining "packets" group bpf: sockmap, updating the sg structure should also update curr tcp: do not accept ACK of bytes we never sent netfilter: xt_owner: Fix for unsafe access of sk->sk_socket netfilter: nf_tables: validate family when identifying table via handle netfilter: nf_tables: bail out on mismatching dynset and set expressions netfilter: nf_tables: fix 'exist' matching on bigendian arches netfilter: nft_exthdr: add boolean DCCP option matching dt-bindings: interrupt-controller: Allow #power-domain-cells octeontx2-af: Update Tx link register range octeontx2-af: Add missing mcs flr handler call octeontx2-af: Fix mcs stats register address octeontx2-af: Fix mcs sa cam entries size octeontx2-af: Adjust Tx credits when MCS external bypass is disabled net: hns: fix fake link up on xge port net: hns: fix wrong head when modify the tx feature when sending packets net: atlantic: Fix NULL dereference of skb pointer in ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit() ionic: Fix dim work handling in split interrupt mode ionic: fix snprintf format length warning tcp: fix mid stream window clamp. net: bnxt: fix a potential use-after-free in bnxt_init_tc iavf: validate tx_coalesce_usecs even if rx_coalesce_usecs is zero i40e: Fix unexpected MFS warning message octeontx2-af: fix a use-after-free in rvu_npa_register_reporters xsk: Skip polling event check for unbound socket net: stmmac: fix FPE events losing octeontx2-pf: consider both Rx and Tx packet stats for adaptive interrupt coalescing arcnet: restoring support for multiple Sohard Arcnet cards platform/mellanox: Check devm_hwmon_device_register_with_groups() return value platform/mellanox: Add null pointer checks for devm_kasprintf() mlxbf-bootctl: correctly identify secure boot with development keys r8152: Add RTL8152_INACCESSIBLE to r8153_aldps_en() r8152: Add RTL8152_INACCESSIBLE to r8153_pre_firmware_1() r8152: Add RTL8152_INACCESSIBLE to r8156b_wait_loading_flash() r8152: Add RTL8152_INACCESSIBLE checks to more loops r8152: Rename RTL8152_UNPLUG to RTL8152_INACCESSIBLE hv_netvsc: rndis_filter needs to select NLS octeontx2-af: Check return value of nix_get_nixlf before using nixlf octeontx2-pf: Add missing mutex lock in otx2_get_pauseparam ipv6: fix potential NULL deref in fib6_add() platform/x86: wmi: Skip blocks with zero instances of: dynamic: Fix of_reconfig_get_state_change() return value documentation platform/x86: asus-wmi: Move i8042 filter install to shared asus-wmi code dt: dt-extract-compatibles: Don't follow symlinks when walking tree dt: dt-extract-compatibles: Handle cfile arguments in generator function x86/tdx: Allow 32-bit emulation by default x86/entry: Do not allow external 0x80 interrupts x86/entry: Convert INT 0x80 emulation to IDTENTRY x86/coco: Disable 32-bit emulation by default on TDX and SEV x86: Introduce ia32_enabled() drm/amdgpu: correct chunk_ptr to a pointer to chunk. kconfig: fix memory leak from range properties tg3: Increment tx_dropped in tg3_tso_bug() tg3: Move the [rt]x_dropped counters to tg3_napi zstd: Fix array-index-out-of-bounds UBSAN warning netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test i2c: designware: Fix corrupted memory seen in the ISR hrtimers: Push pending hrtimers away from outgoing CPU earlier vdpa/mlx5: preserve CVQ vringh index ANDROID: Fix up merge issues in 6.1.64 in net/netfilter/nf_tables_api.c Reapply "binder: fix UAF caused by faulty buffer cleanup" ANDROID: Fix up unneeded crc break in af_vsock.c Revert "mmc: Add quirk MMC_QUIRK_BROKEN_CACHE_FLUSH for Micron eMMC Q2J54A" Revert "ASoC: soc-card: Add storage for PCI SSID" Revert "tracing: Have trace_event_file have ref counters" Revert "workqueue: Provide one lock class key per work_on_cpu() callsite" UPSTREAM: x86/sev: Check for user-space IOIO pointing to kernel space UPSTREAM: x86/sev: Check IOBM for IOIO exceptions from user-space FROMGIT: usb: typec: tcpm: skip checking port->send_discover in PD3.0 ANDROID: arm64: Disable workaround for CPU errata 2441007 and 2441009 Linux 6.1.67 Revert "wifi: cfg80211: fix CQM for non-range use" ANDROID: Update the ABI symbol list ANDROID: netlink: add netlink poll and hooks Linux 6.1.66 iomap: update ki_pos a little later in iomap_dio_complete x86/apic/msi: Fix misconfigured non-maskable MSI quirk x86/xen: fix percpu vcpu_info allocation xen: simplify evtchn_do_upcall() call maze xen: Allow platform PCI interrupt to be shared r8169: fix deadlock on RTL8125 in jumbo mtu mode r8169: disable ASPM in case of tx timeout drm/amd/display: Fix MPCC 1DLUT programming drm/amd/display: Fix the delta clamping for shaper LUT drm/amd/display: clean code-style issues in dcn30_set_mpc_shaper_3dlut drm/amd/display: Expand kernel doc for DC mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled mmc: core: add helpers mmc_regulator_enable/disable_vqmmc drm/amd/pm: fix a memleak in aldebaran_tables_init iommu/vt-d: Make context clearing consistent with context mapping iommu/vt-d: Disable PCI ATS in legacy passthrough mode iommu/vt-d: Add device_block_translation() helper iommu/vt-d: Allocate pasid table in device probe path iommu/vt-d: Omit devTLB invalidation requests when TES=0 cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily cpufreq: imx6q: don't warn for disabling a non-existing frequency drm/amd/display: Guard against invalid RPTR/WPTR being set drm/amd/display: Restore rptr/wptr for DMCUB as workaround spi: Fix null dereference on suspend fbdev: stifb: Make the STI next font pointer a 32-bit signed offset PCI: qcom-ep: Add dedicated callback for writing to DBI2 registers octeontx2-af: Initialize 'cntr_val' to fix uninitialized symbol error PCI: Lengthen reset delay for VideoPropulsion Torrent QN16e card KVM: x86: Fix lapic timer interrupt lost after loading a snapshot. net: ravb: Keep reverse order of operations in ravb_remove() net: ravb: Stop DMA in case of failures on ravb_open() net: ravb: Start TX queues after HW initialization succeeded net: ravb: Make write access to CXR35 first before accessing other EMAC registers net: ravb: Use pm_runtime_resume_and_get() net: ravb: Check return value of reset_control_deassert() ravb: Fix races between ravb_tx_timeout_work() and net related ops r8169: prevent potential deadlock in rtl8169_close octeontx2-pf: Restore TC ingress police rules when interface is up octeontx2-af: Install TC filter rules in hardware based on priority octeontx2-pf: Fix adding mbox work queue entry when num_vfs > 64 net: stmmac: xgmac: Disable FPE MMC interrupts octeontx2-af: Fix possible buffer overflow selftests/net: mptcp: fix uninitialized variable warnings selftests/net: unix: fix unused variable compiler warning selftests/net: fix a char signedness issue selftests/net: ipsec: fix constant out of range uapi: propagate __struct_group() attributes to the container union dpaa2-eth: increase the needed headroom to account for alignment ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet usb: config: fix iteration issue in 'usb_get_bos_descriptor()' USB: core: Change configuration warnings to notices USB: xhci-plat: fix legacy PHY double init wifi: cfg80211: fix CQM for non-range use serial: sc16is7xx: add missing support for rs485 devicetree properties serial: sc16is7xx: Put IOControl register into regmap_volatile auxdisplay: hd44780: move cursor home after clear display command Input: xpad - add HyperX Clutch Gladiate Support btrfs: fix 64bit compat send ioctl arguments not initializing version member btrfs: make error messages more clear when getting a chunk map btrfs: send: ensure send_fd is writable btrfs: fix off-by-one when checking chunk map includes logical address btrfs: ref-verify: fix memory leaks in btrfs_ref_tree_mod() btrfs: add dmesg output for first mount and last unmount of a filesystem parisc: Mark altinstructions read-only and 32-bit aligned parisc: Ensure 32-bit alignment on parisc unwind section parisc: Mark jump_table naturally aligned parisc: Drop the HP-UX ENOSYM and EREMOTERELEASE error codes parisc: Mark lock_aligned variables 16-byte aligned on SMP parisc: Use natural CPU alignment for bug_table parisc: Mark ex_table entries 32-bit aligned in uaccess.h parisc: Mark ex_table entries 32-bit aligned in assembly.h powerpc: Don't clobber f0/vs0 during fp|altivec register save KVM: PPC: Book3S HV: Fix KVM_RUN clobbering FP/VEC user registers iommu/vt-d: Add MTL to quirk list to skip TE disabling bcache: revert replacing IS_ERR_OR_NULL with IS_ERR dma-buf: fix check in dma_resv_add_fence cpufreq/amd-pstate: Fix the return value of amd_pstate_fast_switch() powercap: DTPM: Fix unneeded conversions to micro-Watts nvme: check for valid nvme_identify_ns() before using it dm verity: don't perform FEC for failed readahead IO dm verity: initialize fec io before freeing it drm/amd/display: fix ABM disablement drm/amd/display: Update min Z8 residency time to 2100 for DCN314 drm/amd/display: Use DRAM speed from validation for dummy p-state drm/amd/display: Remove min_dst_y_next_start check for Z8 drm/amd/display: Include udelay when waiting for INBOX0 ACK drm/amdgpu: Force order between a read and write to the same address drm/amd: Enable PCIe PME from D3 scsi: sd: Fix system start for ATA devices scsi: Change SCSI device boolean fields to single bit flags dm-verity: align struct dm_verity_fec_io properly ALSA: hda/realtek: Add supported ALC257 for ChromeOS ALSA: hda/realtek: Headset Mic VREF to 100% ALSA: hda: Disable power-save on KONTRON SinglePC mmc: block: Be sure to wait while busy in CQE error recovery mmc: block: Do not lose cache flush during CQE error recovery mmc: block: Retry commands in CQE error recovery mmc: cqhci: Fix task clearing in CQE error recovery mmc: cqhci: Warn of halt or task clear failure mmc: cqhci: Increase recovery halt timeout mmc: sdhci-pci-gli: Disable LPM during initialization firewire: core: fix possible memory leak in create_units() pinctrl: avoid reload of p state in list iteration smb: client: report correct st_size for SMB and NFS symlinks cifs: Fix FALLOC_FL_INSERT_RANGE by setting i_size after EOF moved cifs: Fix FALLOC_FL_ZERO_RANGE by setting i_size if EOF moved Linux 6.1.65 io_uring: fix off-by one bvec index USB: dwc3: qcom: fix wakeup after probe deferral USB: dwc3: qcom: fix software node leak on probe errors usb: dwc3: set the dma max_seg_size usb: dwc3: Fix default mode initialization USB: dwc2: write HCINT with INTMASK applied usb: typec: tcpm: Skip hard reset when in error recovery USB: serial: option: don't claim interface 4 for ZTE MF290 USB: serial: option: fix FM101R-GL defines USB: serial: option: add Fibocom L7xx modules usb: cdnsp: Fix deadlock issue during using NCM gadget bcache: fixup lock c->root error bcache: fixup init dirty data errors bcache: prevent potential division by zero error bcache: check return value from btree_node_alloc_replacement() dm-delay: fix a race between delay_presuspend and delay_bio hv_netvsc: Mark VF as slave before exposing it to user-mode hv_netvsc: Fix race of register_netdevice_notifier and VF register hv_netvsc: fix race of netvsc and VF register_netdevice USB: serial: option: add Luat Air72*U series products s390/dasd: protect device queue against concurrent access io_uring/fs: consider link->flags when getting path for LINKAT bcache: fixup multi-threaded bch_sectors_dirty_init() wake-up race md: fix bi_status reporting in md_end_clone_io bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in btree_gc_coalesce() swiotlb-xen: provide the "max_mapping_size" method ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA arm64: dts: imx8mn-var-som: add 20ms delay to ethernet regulator enable NFSD: Fix checksum mismatches in the duplicate reply cache NFSD: Fix "start of NFS reply" pointer passed to nfsd_cache_update() ext4: make sure allocate pending entry not fail ext4: fix slab-use-after-free in ext4_es_insert_extent() ext4: using nofail preallocation in ext4_es_insert_extent() ext4: using nofail preallocation in ext4_es_insert_delayed_block() ext4: using nofail preallocation in ext4_es_remove_extent() ext4: use pre-allocated es in __es_remove_extent() ext4: use pre-allocated es in __es_insert_extent() ext4: factor out __es_alloc_extent() and __es_free_extent() ext4: add a new helper to check if es must be kept media: qcom: camss: Fix genpd cleanup media: qcom: camss: Fix V4L2 async notifier error path media: qcom: Initialise V4L2 async notifier later media: camss: Convert to platform remove callback returning void media: camss: Split power domain management MIPS: KVM: Fix a build warning about variable set but not used cifs: fix leak of iface for primary channel cifs: account for primary channel in the interface list cifs: distribute channels across interfaces based on speed cifs: print last update time for interface list smb3: allow dumping session and tcon id to improve stats analysis and debugging cifs: minor cleanup of some headers lockdep: Fix block chain corruption USB: dwc3: qcom: fix ACPI platform device leak USB: dwc3: qcom: fix resource leaks on probe deferral nvmet: nul-terminate the NQNs passed in the connect command i40e: Fix adding unsupported cloud filters i40e: use ERR_PTR error print in i40e messages arm64: mm: Fix "rodata=on" when CONFIG_RODATA_FULL_DEFAULT_ENABLED=y mm,kfence: decouple kfence from page granularity mapping judgement afs: Fix file locking on R/O volumes to operate in local mode afs: Return ENOENT if no cell DNS record can be found net: axienet: Fix check for partial TX checksum amd-xgbe: propagate the correct speed and duplex status amd-xgbe: handle the corner-case during tx completion amd-xgbe: handle corner-case during sfp hotplug octeontx2-pf: Fix ntuple rule creation to direct packet to VF with higher Rx queue than its PF arm/xen: fix xen_vcpu_info allocation alignment net/smc: avoid data corruption caused by decline net: usb: ax88179_178a: fix failed operations during ax88179_reset ipv4: Correct/silence an endian warning in __ip_do_redirect HID: fix HID device resource race between HID core and debugging support drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full drm/i915: do not clean GT table on error path ata: pata_isapnp: Add missing error check for devm_ioport_map() octeontx2-pf: Fix memory leak during interface down wireguard: use DEV_STATS_INC() drm/panel: simple: Fix Innolux G101ICE-L01 timings drm/panel: simple: Fix Innolux G101ICE-L01 bus flags drm/panel: auo,b101uan08.3: Fine tune the panel power sequence drm/panel: boe-tv101wum-nl6: Fine tune the panel power sequence afs: Make error on cell lookup failure consistent with OpenAFS afs: Fix afs_server_list to be cleaned up with RCU Revert "inet: shrink struct flowi_common" Revert "mfd: core: Un-constify mfd_cell.of_reg" Revert "arm64/arm: xen: enlighten: Fix KPTI checks" Revert "virtio/vsock: replace virtio_vsock_pkt with sk_buff" Revert "vsock/virtio: remove socket from connected/bound list on shutdown" Revert "virtio/vsock: don't use skbuff state to account credit" Revert "virtio/vsock: remove redundant 'skb_pull()' call" Revert "virtio/vsock: don't drop skbuff on copy failure" Revert "virtio/vsock: fix leaks due to missing skb owner" Revert "virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()" Revert "virtio/vsock: fix header length on skb merging" Revert "vsock/loopback: use only sk_buff_head.lock to protect the packet queue" Linux 6.1.64 RISC-V: drop error print from riscv_hartid_to_cpuid() cxl/port: Fix NULL pointer access in devm_cxl_add_port() mmc: sdhci-pci-gli: GL9755: Mask the replay timer timeout of AER Input: xpad - add VID for Turtle Beach controllers tracing: Have trace_event_file have ref counters powerpc/powernv: Fix fortify source warnings in opal-prd.c drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox drm/amd/display: Enable fast plane updates on DCN3.2 and above drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer() drm/amdgpu: lower CS errors to debug severity drm/amdgpu: fix error handling in amdgpu_bo_list_get() drm/amdgpu: don't use ATRM for external devices drm/amdgpu: don't use pci_is_thunderbolt_attached() drm/amdgpu/smu13: drop compute workload workaround drm/amd/pm: Fix error of MACO flag setting code drm/i915: Fix potential spectre vulnerability drm/i915: Bump GLK CDCLK frequency when driving multiple pipes drm/amd/pm: Handle non-terminated overdrive commands. ext4: properly sync file size update after O_SYNC direct IO ext4: add missed brelse in update_backups ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks ext4: correct the start block of counting reserved clusters ext4: correct return value of ext4_convert_meta_bg ext4: mark buffer new if it is unwritten to avoid stale data exposure ext4: correct offset of gdb backup in non meta_bg group to update_backups ext4: apply umask if ACL support is disabled Revert "net: r8169: Disable multicast filter for RTL8168H and RTL8107E" media: qcom: camss: Fix csid-gen2 for test pattern generator media: qcom: camss: Fix invalid clock enable bit disjunction media: qcom: camss: Fix missing vfe_lite clocks check media: qcom: camss: Fix VFE-480 vfe_disable_output() media: qcom: camss: Fix VFE-17x vfe_disable_output() media: qcom: camss: Fix vfe_get() error jump media: qcom: camss: Fix pm_domain_on sequence in probe mmc: sdhci-pci-gli: GL9750: Mask the replay timer timeout of AER r8169: add handling DASH when DASH is disabled r8169: fix network lost after resume on DASH systems mptcp: fix setsockopt(IP_TOS) subflow locking mptcp: add validity check for sending RM_ADDR mptcp: deal with large GSO size mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors mm: fix for negative counter: nr_file_hugepages mmc: sdhci-pci-gli: A workaround to allow GL9750 to enter ASPM L1.2 riscv: kprobes: allow writing to x0 riscv: correct pt_level name via pgtable_l5/4_enabled riscv: mm: Update the comment of CONFIG_PAGE_OFFSET LoongArch: Mark __percpu functions as always inline nfsd: fix file memleak on client_opens_release dm-verity: don't use blocking calls from tasklets drm/mediatek/dp: fix memory leak on ->get_edid callback error path drm/mediatek/dp: fix memory leak on ->get_edid callback audio detection media: ccs: Correctly initialise try compose rectangle media: venus: hfi: add checks to handle capabilities from firmware media: venus: hfi: fix the check to handle session buffer requirement media: venus: hfi_parser: Add check to keep the number of codecs within range media: sharp: fix sharp encoding media: lirc: drop trailing space from scancode transmit f2fs: avoid format-overflow warning f2fs: do not return EFSCORRUPTED, but try to run online repair i2c: i801: fix potential race in i801_block_transaction_byte_by_byte net: phylink: initialize carrier state at creation net: dsa: lan9303: consequently nested-lock physical MDIO net: ethtool: Fix documentation of ethtool_sprintf() s390/ap: fix AP bus crash on early config change callback invocation i2c: designware: Disable TX_EMPTY irq while waiting for block length byte sbsa_gwdt: Calculate timeout with 64-bit math lsm: fix default return value for inode_getsecctx lsm: fix default return value for vm_enough_memory Revert "i2c: pxa: move to generic GPIO recovery" Revert ncsi: Propagate carrier gain/loss events to the NCSI controller cxl/region: Fix x1 root-decoder granularity calculations tools/testing/cxl: Define a fixed volatile configuration to parse cxl/mem: Move devm_cxl_add_endpoint() from cxl_core to cxl_mem cxl: Unify debug messages when calling devm_cxl_add_port() i3c: master: svc: fix random hot join failure since timeout error i3c: master: svc: add NACK check after start byte sent cxl/region: Do not try to cleanup after cxl_region_setup_targets() fails cxl/region: Move region-position validation to a helper cxl/region: Cleanup target list on attach error cxl/region: Validate region mode vs decoder mode drm/amd/display: enable dsc_clk even if dsc_pg disabled Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables bluetooth: Add device 13d3:3571 to device tables bluetooth: Add device 0bda:887b to device tables Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559 clk: visconti: Fix undefined behavior bug in struct visconti_pll_provider clk: visconti: remove unused visconti_pll_provider::regmap cpufreq: stats: Fix buffer overflow detection in trans_stats() pmdomain: imx: Make imx pgc power domain also set the fwnode pmdomain: bcm: bcm2835-power: check if the ASB register is equal to enable ALSA: hda/realtek: Add quirks for HP Laptops ALSA: hda/realtek: Enable Mute LED on HP 255 G10 ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC ALSA: hda/realtek - Add Dell ALC295 to pin fall back table ALSA: hda/realtek: Enable Mute LED on HP 255 G8 ALSA: info: Fix potential deadlock at disconnection btrfs: zoned: wait for data BG to be finished on direct IO allocation xfs: recovery should not clear di_flushiter unconditionally cifs: do not reset chan_max if multichannel is not supported at mount cifs: force interface update before a fresh session setup cifs: reconnect helper should set reconnect for the right channel smb: client: fix potential deadlock when releasing mids smb: client: fix use-after-free bug in cifs_debug_data_proc_show() smb3: fix caching of ctime on setxattr smb3: fix touch -h of symlink smb3: fix creating FIFOs when mounting with "sfu" mount option fs: add ctime accessors infrastructure xhci: Enable RPM on controllers that support low-power states parisc/power: Fix power soft-off when running on qemu parisc/pgtable: Do not drop upper 5 address bits of physical address parisc: Prevent booting 64-bit kernels on PA1.x machines i3c: master: svc: fix SDA keep low when polling IBIWON timeout happen i3c: master: svc: fix check wrong status register in irq handler i3c: master: svc: fix ibi may not return mandatory data byte i3c: master: svc: fix wrong data return when IBI happen during start frame i3c: master: svc: fix race condition in ibi work thread i3c: master: cdns: Fix reading status register mtd: cfi_cmdset_0001: Byte swap OTP info mm/memory_hotplug: use pfn math in place of direct struct page manipulation mm/cma: use nth_page() in place of direct struct page manipulation s390/cmma: fix detection of DAT pages dmaengine: stm32-mdma: correct desc prep when channel running mcb: fix error handling for different scenarios when parsing driver core: Release all resources during unbind before updating device links tracing: Have the user copy of synthetic event address use correct context i2c: core: Run atomic i2c xfer when !preemptible kernel/reboot: emergency_restart: Set correct system_state quota: explicitly forbid quota files from being encrypted jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev ASoC: codecs: wsa-macro: fix uninitialized stack variables with name prefix hid: lenovo: Resend all settings on reset_resume for compact keyboards selftests/resctrl: Reduce failures due to outliers in MBA/MBM tests selftests/resctrl: Move _GNU_SOURCE define into Makefile selftests/resctrl: Remove duplicate feature check from CMT test netfilter: nf_tables: split async and sync catchall in two functions netfilter: nf_tables: remove catchall element in GC sync path ima: detect changes to the backing overlay file ima: annotate iint mutex to avoid lockdep false positive warnings mfd: qcom-spmi-pmic: Fix revid implementation mfd: qcom-spmi-pmic: Fix reference leaks in revid helper arm64: dts: qcom: ipq6018: Fix tcsr_mutex register size ACPI: FPDT: properly handle invalid FPDT subtables firmware: qcom_scm: use 64-bit calling convention only when client is 64-bit arm64: dts: qcom: ipq8074: Fix hwlock index for SMEM btrfs: don't arbitrarily slow down delalloc if we're committing rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects PM: hibernate: Clean up sync_read handling in snapshot_write_next() PM: hibernate: Use __get_safe_page() rather than touching the list arm64: dts: qcom: ipq6018: Fix hwlock index for SMEM rcu/tree: Defer setting of jiffies during stall reset svcrdma: Drop connection after an RDMA Read error wifi: wilc1000: use vmm_table as array in wilc struct PCI: exynos: Don't discard .remove() callback PCI: kirin: Don't discard .remove() callback PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common() mmc: Add quirk MMC_QUIRK_BROKEN_CACHE_FLUSH for Micron eMMC Q2J54A mmc: sdhci_am654: fix start loop index for TAP value parsing mmc: vub300: fix an error code ksmbd: fix slab out of bounds write in smb_inherit_dacl() ksmbd: handle malformed smb1 message clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from PLL clocks clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks clk: socfpga: Fix undefined behavior bug in struct stratix10_clock_data parisc/power: Add power soft-off when running on qemu parisc/pdc: Add width field to struct pdc_model arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer PCI: keystone: Don't discard .probe() callback PCI: keystone: Don't discard .remove() callback KEYS: trusted: Rollback init_trusted() consistently KEYS: trusted: tee: Refactor register SHM usage genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware mmc: meson-gx: Remove setting of CMD_CFG_ERROR wifi: ath11k: fix gtk offload status event locking wifi: ath11k: fix htt pktlog locking wifi: ath11k: fix dfs radar event locking wifi: ath11k: fix temperature event locking regmap: Ensure range selector registers are updated after cache sync ACPI: resource: Do IRQ override on TongFang GMxXGxx mm/damon/sysfs: check error from damon_sysfs_update_target() mm/damon: implement a function for max nr_accesses safe calculation mm/damon/ops-common: avoid divide-by-zero during region hotness calculation mm/damon/lru_sort: avoid divide-by-zero in hot threshold calculation watchdog: move softlockup_panic back to early_param mm/damon/sysfs: update monitoring target regions for online input commit mm/damon/sysfs: remove requested targets when online-commit inputs PCI/sysfs: Protect driver's D3cold preference from user space hvc/xen: fix event channel handling for secondary consoles hvc/xen: fix error path in xen_hvc_init() to always register frontend driver hvc/xen: fix console unplug tty: serial: meson: fix hard LOCKUP on crtscts mode tty/sysrq: replace smp_processor_id() with get_cpu() proc: sysctl: prevent aliased sysctls from getting passed to init audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() audit: don't take task_lock() in audit_exe_compare() code path KVM: x86: Clear bit12 of ICR after APIC-write VM-exit KVM: x86: Ignore MSR_AMD64_TW_CFG access KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space x86/cpu/hygon: Fix the CPU topology evaluation for real crypto: x86/sha - load modules based on CPU features scsi: qla2xxx: Fix system crash due to bad pointer access scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers scsi: mpt3sas: Fix loop logic bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END bpf: Fix check_stack_write_fixed_off() to correctly spill imm randstruct: Fix gcc-plugin performance mode to stay in group powerpc/perf: Fix disabling BHRB and instruction sampling perf intel-pt: Fix async branch flags media: venus: hfi: add checks to perform sanity on queue pointers i915/perf: Fix NULL deref bugs with drm_dbg() calls cifs: fix check of rc in function generate_smb3signingkey cifs: spnego: add ';' in HOST_KEY_LEN tools/power/turbostat: Enable the C-state Pre-wake printing tools/power/turbostat: Fix a knl bug macvlan: Don't propagate promisc change to lower dev in passthru net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors net/mlx5e: Check return value of snprintf writing to fw_version buffer net/mlx5e: Reduce the size of icosq_str net/mlx5e: Fix pedit endianness net/mlx5e: fix double free of encap_header in update funcs net/mlx5e: fix double free of encap_header net: stmmac: avoid rx queue overrun net: stmmac: fix rx budget limit check netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() netfilter: nf_conntrack_bridge: initialize err to 0 af_unix: fix use-after-free in unix_stream_read_actor() net: ethernet: cortina: Fix MTU max setting net: ethernet: cortina: Handle large frames net: ethernet: cortina: Fix max RX frame define bonding: stop the device in bond_setup_by_slave() ptp: annotate data-race around q->head and q->tail xen/events: fix delayed eoi list handling ppp: limit MRU to 64K net: mvneta: fix calls to page_pool_get_stats tipc: Fix kernel-infoleak due to uninitialized TLV value net: hns3: fix VF wrong speed and duplex issue net: hns3: fix VF reset fail issue net: hns3: fix variable may not initialized problem in hns3_init_mac_addr() net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs net: hns3: fix incorrect capability bit display for copper port net: hns3: add barrier in vf mailbox reply process net: hns3: fix add VLAN fail issue tty: Fix uninit-value access in ppp_sync_receive() ipvlan: add ipvlan_route_v6_outbound() helper net: set SOCK_RCU_FREE before inserting socket into hashtable vhost-vdpa: fix use after free in vhost_vdpa_probe() gfs2: Silence "suspicious RCU usage in gfs2_permission" warning SUNRPC: Fix RPC client cleaned up the freed pipefs dentries NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO SUNRPC: Add an IS_ERR() check back to where it was NFSv4.1: fix handling NFS4ERR_DELAY when testing for session trunking mtd: rawnand: meson: check return value of devm_kasprintf() mtd: rawnand: intel: check return value of devm_kasprintf() SUNRPC: ECONNRESET might require a rebind sched/core: Optimize in_task() and in_interrupt() a bit wifi: iwlwifi: Use FW rate for non-data frames mtd: rawnand: tegra: add missing check for platform_get_irq() pwm: Fix double shift bug drm/amdgpu: fix software pci_unplug on some chips ALSA: hda/realtek: Add quirk for ASUS UX7602ZM drm/qxl: prevent memory leak ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings i2c: dev: copy userspace array safely kgdb: Flush console before entering kgdb on panic drm/amd/display: Avoid NULL dereference of timing generator media: imon: fix access to invalid resource for the second interface media: ccs: Fix driver quirk struct documentation media: cobalt: Use FIELD_GET() to extract Link Width gfs2: fix an oops in gfs2_permission gfs2: ignore negated quota changes media: vivid: avoid integer overflow media: gspca: cpia1: shift-out-of-bounds in set_flicker i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data. virtio-blk: fix implicit overflow on virtio_max_dma_size i2c: sun6i-p2wi: Prevent potential division by zero i2c: fix memleak in i2c_new_client_device() i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler 9p: v9fs_listxattr: fix %s null argument warning 9p/trans_fd: Annotate data-racy writes to file::f_flags usb: gadget: f_ncm: Always set current gadget in ncm_bind() f2fs: fix error handling of __get_node_page soundwire: dmi-quirks: update HP Omen match usb: dwc3: core: configure TX/RX threshold for DWC3_IP tty: vcc: Add check for kstrdup() in vcc_probe() thunderbolt: Apply USB 3.x bandwidth quirk only in software connection manager iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() mfd: intel-lpss: Add Intel Lunar Lake-M PCI IDs exfat: support handle zero-size directory HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W crypto: hisilicon/qm - prevent soft lockup in receive loop ASoC: Intel: soc-acpi-cht: Add Lenovo Yoga Tab 3 Pro YT3-X90 quirk PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller PCI: Disable ATS for specific Intel IPU E2000 devices PCI: Extract ATS disabling to a helper function PCI: Use FIELD_GET() to extract Link Width scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() PCI: Do error check on own line to split long "if" conditions atm: iphase: Do PCI error checks on own line PCI: mvebu: Use FIELD_PREP() with Link Width PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields ALSA: hda: Fix possible null-ptr-deref when assigning a stream ARM: 9320/1: fix stack depot IRQ stack filter HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround jfs: fix array-index-out-of-bounds in diAlloc jfs: fix array-index-out-of-bounds in dbFindLeaf fs/jfs: Add validity check for db_maxag and db_agpref fs/jfs: Add check for negative db_l2nbperpage scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs RDMA/hfi1: Use FIELD_GET() to extract Link Width ASoC: SOF: ipc4: handle EXCEPTION_CAUGHT notification from firmware crypto: pcrypt - Fix hungtask for PADATA_RESET ASoC: SOF: Pass PCI SSID to machine driver ASoC: soc-card: Add storage for PCI SSID selftests/efivarfs: create-read: fix a resource leak arm64: dts: ls208xa: use a pseudo-bus to constrain usb dma size drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL drm/amdkfd: Fix shift out-of-bounds issue drm/panel: st7703: Pick different reset sequence drm/amdgpu/vkms: fix a possible null pointer dereference drm/radeon: fix a possible null pointer dereference drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference drm/panel: fix a possible null pointer dereference drm/amdgpu: Fix potential null pointer derefernce drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 drm/msm/dp: skip validity check for DP CTS EDID checksum drm: vmwgfx_surface.c: copy user-array safely drm_lease.c: copy user-array safely kernel: watch_queue: copy user-array safely kernel: kexec: copy user-array safely string.h: add array-wrappers for (v)memdup_user() drm/amd/display: use full update for clip size increase of large plane source drm/amd: Update `update_pcie_parameters` functions to use uint8_t arguments drm/amdkfd: Fix a race condition of vram buffer unref in svm code drm/amdgpu: not to save bo in the case of RAS err_event_athub drm/komeda: drop all currently held locks if deadlock happens drm/gma500: Fix call trace when psb_gem_mm_init() fails platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e platform/chrome: kunit: initialize lock for fake ec_dev tsnep: Fix tsnep_request_irq() format-overflow warning ACPI: EC: Add quirk for HP 250 G7 Notebook PC Bluetooth: Fix double free in hci_conn_cleanup Bluetooth: btusb: Add date->evt_skb is NULL check bpf: Ensure proper register state printing for cond jumps vsock: read from socket's error queue wifi: ath10k: Don't touch the CE interrupt registers after power up net: annotate data-races around sk->sk_dst_pending_confirm net: annotate data-races around sk->sk_tx_queue_mapping wifi: ath10k: fix clang-specific fortify warning wifi: ath9k: fix clang-specific fortify warnings bpf: Detect IP == ksym.end as part of BPF program atl1c: Work around the DMA RX overflow issue wifi: mac80211: don't return unset power in ieee80211_get_tx_power() wifi: mac80211_hwsim: fix clang-specific fortify warning wifi: plfxlc: fix clang-specific fortify warning x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size workqueue: Provide one lock class key per work_on_cpu() callsite cpu/hotplug: Don't offline the last non-isolated CPU smp,csd: Throw an error if a CSD lock is stuck for too long clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware clocksource/drivers/timer-imx-gpt: Fix potential memory leak selftests/lkdtm: Disable CONFIG_UBSAN_TRAP in test config srcu: Fix srcu_struct node grpmask overflow on 64-bit systems perf/core: Bail out early if the request AUX area is out of bound lib/generic-radix-tree.c: Don't overflow in peek() locking/ww_mutex/test: Fix potential workqueue corruption Linux 6.1.63 virtio/vsock: fix header length on skb merging virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt() virtio/vsock: fix leaks due to missing skb owner vsock/loopback: use only sk_buff_head.lock to protect the packet queue virtio/vsock: don't drop skbuff on copy failure virtio/vsock: remove redundant 'skb_pull()' call virtio/vsock: don't use skbuff state to account credit wifi: cfg80211: fix kernel-doc for wiphy_delayed_work_flush() btrfs: use u64 for buffer sizes in the tree search ioctls Revert "mmc: core: Capture correct oemid-bits for eMMC cards" x86/amd_nb: Use Family 19h Models 60h-7Fh Function 4 IDs io_uring/net: ensure socket is marked connected on connect retry tracing/kprobes: Fix the order of argument descriptions fbdev: fsl-diu-fb: mark wr_reg_wa() static fbdev: imsttfb: fix a resource leak in probe fbdev: imsttfb: Fix error path of imsttfb_probe() spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies ASoC: dapm: fix clock get name ASoC: hdmi-codec: register hpd callback on component probe ASoC: mediatek: mt8186_mt6366_rt1019_rt5682s: trivial: fix error messages drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE RISC-V: Don't fail in riscv_of_parent_hartid() for disabled HARTs netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate eval call-backs netfilter: xt_recent: fix (increase) ipv6 literal buffer length i2c: iproc: handle invalid slave state r8169: respect userspace disabling IFF_MULTICAST vsock/virtio: remove socket from connected/bound list on shutdown virtio/vsock: replace virtio_vsock_pkt with sk_buff blk-core: use pr_warn_ratelimited() in bio_check_ro() nbd: fix uaf in nbd_open tg3: power down device only on SYSTEM_POWER_OFF nvme: fix error-handling for io_uring nvme-passthrough net/smc: put sk reference if close work was canceled net/smc: allow cdc msg send rather than drop it with NULL sndbuf_desc net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT octeontx2-pf: Free pending and dropped SQEs octeontx2-pf: qos send queues management octeontx2-pf: Rename tot_tx_queues to non_qos_queues selftests: pmtu.sh: fix result checking net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs Fix termination state for idr_for_each_entry_ul() net: r8169: Disable multicast filter for RTL8168H and RTL8107E dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses. dccp: Call security_inet_conn_request() after setting IPv4 addresses. net: page_pool: add missing free_percpu when page_pool_init fail octeontx2-pf: Fix holes in error code octeontx2-pf: Fix error codes inet: shrink struct flowi_common bpf: Check map->usercnt after timer->timer is assigned tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING hsr: Prevent use after free in prp_create_tagged_frame() llc: verify mac len before reading mac header watchdog: ixp4xx: Make sure restart always works Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume pwm: sti: Reduce number of allocations and drop usage of chip_data regmap: prevent noinc writes from clobbering cache media: cec: meson: always include meson sub-directory in Makefile media: dvb-usb-v2: af9035: fix missing unlock media: cadence: csi2rx: Unregister v4l2 async notifier media: cedrus: Fix clock/reset sequence media: vidtv: mux: Add check and kfree for kstrdup media: vidtv: psi: Add check for kstrdup media: s3c-camif: Avoid inappropriate kfree() media: mtk-jpegenc: Fix bug in JPEG encode quality selection media: amphion: handle firmware debug message media: bttv: fix use after free error due to btv->timeout timer media: ov5640: Fix a memory leak when ov5640_probe fails media: i2c: max9286: Fix some redundant of_node_put() calls media: ov5640: fix vblank unchange issue when work at dvp mode media: ov5640: Drop dead code using frame_interval media: verisilicon: Do not enable G2 postproc downscale if source is narrower than destination media: hantro: Check whether reset op is defined before use pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() pcmcia: ds: fix refcount leak in pcmcia_device_add() pcmcia: cs: fix possible hung task and memory leak pccardd() rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call virt: sevguest: Fix passing a stack buffer as a scatterlist target x86/sev: Change snp_guest_issue_request()'s fw_err argument crypto: ccp - Name -1 return value as SEV_RET_NO_FW_CALL cxl/mem: Fix shutdown order i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs 9p/net: fix possible memory leak in p9_check_errors() perf hist: Add missing puts to hist__account_cycles perf machine: Avoid out of bounds LBR memory read usb: host: xhci-plat: fix possible kernel oops while resuming xhci: Loosen RPM as default policy to cover for AMD xHC 1.1 powerpc/pseries: fix potential memory leak in init_cpu_associativity() powerpc/imc-pmu: Use the correct spinlock initializer. powerpc/vas: Limit open window failure messages in log bufffer powerpc/xive: Fix endian conversion size powerpc/40x: Remove stale PTE_ATOMIC_UPDATES macro modpost: fix ishtp MODULE_DEVICE_TABLE built on big-endian host modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host powerpc: Only define __parse_fpscr() when required interconnect: qcom: sm8350: Set ACV enable_mask interconnect: qcom: sm8350: Retire DEFINE_QBCM interconnect: qcom: sm8150: Set ACV enable_mask interconnect: qcom: sm8150: Retire DEFINE_QBCM interconnect: qcom: sm8150: Drop IP0 interconnects interconnect: move ignore_list out of of_count_icc_providers() interconnect: qcom: sm6350: Set ACV enable_mask interconnect: qcom: sm6350: Retire DEFINE_QBCM interconnect: qcom: sdm845: Set ACV enable_mask interconnect: qcom: sdm845: Retire DEFINE_QBCM interconnect: qcom: sc8280xp: Set ACV enable_mask interconnect: qcom: sc8180x: Set ACV enable_mask interconnect: qcom: sc7280: Set ACV enable_mask interconnect: qcom: sc7180: Set ACV enable_mask interconnect: qcom: sc7180: Retire DEFINE_QBCM f2fs: fix to initialize map.m_pblk in f2fs_precache_extents() dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc() USB: usbip: fix stub_dev hub disconnect tools: iio: iio_generic_buffer ensure alignment misc: st_core: Do not call kfree_skb() under spin_lock_irqsave() dmaengine: ti: edma: handle irq_of_parse_and_map() errors usb: chipidea: Simplify Tegra DMA alignment code usb: chipidea: Fix DMA overwrite for Tegra usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency dmaengine: idxd: Register dsa_bus_type before registering idxd sub-drivers perf record: Fix BTF type checks in the off-cpu profiling pinctrl: renesas: rzg2l: Make reverse order of enable() for disable() livepatch: Fix missing newline character in klp_resolve_symbols() tty: tty_jobctrl: fix pid memleak in disassociate_ctty() f2fs: compress: fix to avoid redundant compress extension f2fs: compress: fix to avoid use-after-free on dic f2fs: compress: fix deadloop in f2fs_write_cache_pages() f2fs: convert f2fs_write_cache_pages() to use filemap_get_folios_tag() filemap: add filemap_get_folios_tag() perf kwork: Set ordered_events to true in 'struct perf_tool' perf kwork: Add the supported subcommands to the document perf kwork: Fix incorrect and missing free atom in work_push_atom() iio: frequency: adf4350: Use device managed functions and fix power down issue. perf stat: Fix aggr mode initialization apparmor: fix invalid reference on profile->disconnected apparmor: test: make static symbols visible during kunit testing kunit: add macro to allow conditionally exposing static symbols to tests leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu' leds: pwm: Don't disable the PWM when the LED should be off leds: turris-omnia: Do not use SMBUS calls leds: turris-omnia: Drop unnecessary mutex locking mfd: arizona-spi: Set pdata.hpdet_channel for ACPI enumerated devs dt-bindings: mfd: mt6397: Split out compatible for MediaTek MT6366 PMIC dt-bindings: mfd: mt6397: Add binding for MT6357 mfd: dln2: Fix double put in dln2_probe mfd: core: Ensure disabled devices are skipped without aborting mfd: core: Un-constify mfd_cell.of_reg IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF ASoC: ams-delta.c: use component after check crypto: qat - fix deadlock in backlog processing padata: Fix refcnt handling in padata_free_shell() ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails HID: logitech-hidpp: Move get_wireless_feature_index() check to hidpp_connect_event() HID: logitech-hidpp: Revert "Don't restart communication if not necessary" HID: logitech-hidpp: Don't restart IO, instead defer hid_connect() only HID: logitech-hidpp: Remove HIDPP_QUIRK_NO_HIDINPUT quirk Revert "HID: logitech-hidpp: add a module parameter to keep firmware gestures" sh: bios: Revive earlyprintk support hid: cp2112: Fix IRQ shutdown stopping polling for all IRQs on chip HID: cp2112: Make irq_chip immutable RDMA/hfi1: Workaround truncation compilation error scsi: ufs: core: Leave space for '\0' in utf8 desc string ASoC: fsl: Fix PM disable depth imbalance in fsl_easrc_probe ASoC: SOF: core: Ensure sof_ops_free() is still called when probe never ran. RDMA/hns: The UD mode can only be configured with DCQCN RDMA/hns: Add check for SL RDMA/hns: Fix signed-unsigned mixed comparisons RDMA/hns: Fix uninitialized ucmd in hns_roce_create_qp_common() RDMA/hns: Fix printing level of asynchronous events IB/mlx5: Fix rdma counter binding for RAW QP ASoC: fsl: mpc5200_dma.c: Fix warning of Function parameter or member not described ext4: move 'ix' sanity check to corrent position ARM: 9321/1: memset: cast the constant byte to unsigned char crypto: hisilicon/qm - fix PF queue parameter issue crypto: hisilicon/qm - split a debugfs.c from qm crypto: hisilicon/qm - modify the process of regs dfx crypto: hisilicon/qm - delete redundant null assignment operations hid: cp2112: Fix duplicate workqueue initialization PCI: vmd: Correct PCI Header Type Register's multi-function check crypto: qat - increase size of buffers crypto: caam/jr - fix Chacha20 + Poly1305 self test failure crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure nd_btt: Make BTT lanes preemptible libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value scsi: ibmvfc: Fix erroneous use of rtas_busy_delay with hcall return code crypto: qat - fix unregistration of crypto algorithms crypto: qat - extend buffer list interface crypto: qat - generalize crypto request buffers crypto: qat - change bufferlist logic interface crypto: qat - rename bufferlist functions crypto: qat - relocate bufferlist logic crypto: qat - ignore subsequent state up commands RDMA/core: Use size_{add,sub,mul}() in calls to struct_size() hwrng: geode - fix accessing registers hwrng: bcm2835 - Fix hwrng throughput regression crypto: hisilicon/hpre - Fix a erroneous check after snprintf() KEYS: Include linux/errno.h in linux/verification.h ALSA: hda: cs35l41: Undo runtime PM changes at driver exit time ALSA: hda: cs35l41: Fix unbalanced pm_runtime_get() ASoC: cs35l41: Undo runtime PM changes at driver exit time ASoC: cs35l41: Verify PM runtime resume errors in IRQ handler module/decompress: use vmalloc() for gzip decompression workspace selftests/resctrl: Ensure the benchmark commands fits to its array selftests/pidfd: Fix ksft print formats arm64: tegra: Use correct interrupts for Tegra234 TKE arm64: dts: imx8mn: Add sound-dai-cells to micfil node arm64: dts: imx8mm: Add sound-dai-cells to micfil node arm64: dts: imx8qm-ss-img: Fix jpegenc compatible entry clk: scmi: Free scmi_clk allocated when the clocks with invalid info are skipped ARM: dts: am3517-evm: Fix LED3/4 pinmux firmware: arm_ffa: Allow the FF-A drivers to use 32bit mode of messaging firmware: arm_ffa: Assign the missing IDR allocation ID to the FFA device arm64: dts: ti: k3-am62a7-sk: Drop i2c-1 to 100Khz firmware: ti_sci: Mark driver as non removable kunit: Fix missed memory release in kunit_free_suite_set() soc: qcom: llcc: Handle a second device without data corruption ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator arm64: dts: qcom: apq8016-sbc: Add missing ADV7533 regulators ARM64: dts: marvell: cn9310: Use appropriate label for spi1 pins arm64: dts: qcom: sdm845-mtp: fix WiFi configuration arm64: dts: qcom: sm8350: fix pinctrl for UART18 arm64: dts: qcom: sm8150: add ref clock to PCIe PHYs arm64: dts: qcom: sc7280: Add missing LMH interrupts arm64: dts: qcom: msm8992-libra: drop duplicated reserved memory arm64: dts: qcom: msm8916: Fix iommu local address range arm64: dts: qcom: sc7280: link usb3_phy_wrapper_gcc_usb30_pipe_clk arm64: dts: qcom: sdm845: cheza doesn't support LMh node ARM: dts: renesas: blanche: Fix typo in GP_11_2 pin name perf: hisi: Fix use-after-free when register pmu fails drivers/perf: hisi_pcie: Check the type first in pmu::event_init() perf/arm-cmn: Fix DTC domain detection perf/arm-cmn: Revamp model detection drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process drm: mediatek: mtk_dsi: Fix NO_EOT_PACKET settings/handling clocksource/drivers/arm_arch_timer: limit XGene-1 workaround drm/msm/dsi: free TX buffer in unbind drm/msm/dsi: use msm_gem_kernel_put to free TX buffer xen-pciback: Consider INTx disabled when MSI/MSI-X is enabled xenbus: fix error exit in xenbus_init() drm/rockchip: Fix type promotion bug in rockchip_gem_iommu_map() arm64/arm: xen: enlighten: Fix KPTI checks drm/bridge: lt9611uxc: fix the race in the error path gpu: host1x: Correct allocated size for contexts drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe() drm/mediatek: Fix iommu fault during crtc enabling drm/mediatek: Fix iommu fault by swapping FBs after updating plane state io_uring/kbuf: Allow the full buffer id space for provided buffers io_uring/kbuf: Fix check of BID wrapping in provided buffers drm/amd/display: Bail from dm_check_crtc_cursor if no relevant change drm/amd/display: Refactor dm_get_plane_scale helper drm/amd/display: Check all enabled planes in dm_check_crtc_cursor drm/amdkfd: fix some race conditions in vram buffer alloc/free of svm code drm/bridge: tc358768: Fix tc358768_ns_to_cnt() drm/bridge: tc358768: Clean up clock period code drm/bridge: tc358768: Rename dsibclk to hsbyteclk drm/bridge: tc358768: Use dev for dbg prints, not priv->dev drm/bridge: tc358768: Print logical values, not raw register values drm/bridge: tc358768: Use struct videomode drm/bridge: tc358768: remove unused variable drm/bridge: tc358768: Fix bit updates drm/bridge: tc358768: Fix use of uninitialized variable drm/bridge: lt8912b: Add missing drm_bridge_attach call drm/bridge: lt8912b: Manually disable HPD only if it was enabled drm/bridge: lt8912b: Fix crash on bridge detach drm/bridge: lt8912b: Fix bridge_detach drm/bridge: lt8912b: Add hot plug detection drm: bridge: it66121: Fix invalid connector dereference drm/radeon: possible buffer overflow drm/rockchip: vop2: Add missing call to crtc reset helper drm/rockchip: vop2: Don't crash for invalid duplicate_state drm/rockchip: vop: Fix call to crtc reset helper drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs hte: tegra: Fix missing error code in tegra_hte_test_probe() hwmon: (sch5627) Disallow write access if virtual registers are locked hwmon: (sch5627) Use bit macros when accessing the control register Revert "hwmon: (sch56xx-common) Add automatic module loading on supported devices" Revert "hwmon: (sch56xx-common) Add DMI override table" hwmon: (coretemp) Fix potentially truncated sysfs attribute name hwmon: (axi-fan-control) Fix possible NULL pointer dereference platform/x86: wmi: Fix opening of char device platform/x86: wmi: Fix probe failure when failing to register WMI devices clk: qcom: config IPQ_APSS_6018 should depend on QCOM_SMEM clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data clk: npcm7xx: Fix incorrect kfree clk: ti: fix double free in of_ti_divider_clk_setup() clk: ti: change ti_clk_register[_omap_hw]() API clk: keystone: pll: fix a couple NULL vs IS_ERR() checks spi: nxp-fspi: use the correct ioremap function clk: linux/clk-provider.h: fix kernel-doc warnings and typos clk: renesas: rzg2l: Fix computation formula clk: renesas: rzg2l: Use FIELD_GET() for PLL register fields clk: renesas: rzg2l: Trust value returned by hardware clk: renesas: rzg2l: Lock around writes to mux register clk: renesas: rzg2l: Wait for status bit of SD mux before continuing clk: renesas: rcar-gen3: Extend SDnH divider table clk: imx: imx8qxp: Fix elcdif_pll clock clk: imx: imx8mq: correct error handling path clk: imx: Select MXC_CLK for CLK_IMX8QXP regulator: mt6358: Fail probe on unknown chip ID clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src clk: qcom: mmcc-msm8998: Fix the SMMU GDSC clk: qcom: mmcc-msm8998: Don't check halt bit on some branch clks clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies clk: qcom: gcc-msm8996: Remove RPM bus clocks spi: tegra: Fix missing IRQ check in tegra_slink_probe() regmap: debugfs: Fix a erroneous check after snprintf() ipvlan: properly track tx_errors net: add DEV_STATS_READ() helper ipv6: avoid atomic fragment on GSO packets ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() bpf: Fix unnecessary -EBUSY from htab_lock_bucket Bluetooth: hci_sync: Fix Opcode prints in bt_dev_dbg/err wifi: iwlwifi: empty overflow queue during flush wifi: iwlwifi: pcie: synchronize IRQs before NAPI wifi: iwlwifi: call napi_synchronize() before freeing rx/tx queues tcp: fix cookie_init_timestamp() overflows chtls: fix tp->rcv_tstamp initialization net: skb_find_text: Ignore patterns extending past 'to' selftests: netfilter: test for sctp collision processing in nf_conntrack r8169: fix rare issue with broken rx after link-down on RTL8125 r8169: use tp_to_dev instead of open code thermal: core: prevent potential string overflow netfilter: nf_tables: Drop pointless memset when dumping rules wifi: wfx: fix case where rates are out of order PM / devfreq: rockchip-dfi: Make pmu regmap mandatory can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() can: dev: can_restart(): don't crash kernel if carrier is OK wifi: ath11k: fix Tx power value during active CAC ACPI: video: Add acpi_backlight=vendor quirk for Toshiba Portégé R100 ACPI: property: Allow _DSD buffer data only for byte accessors wifi: rtlwifi: fix EDCA limit set by BT coexistence tcp_metrics: do not create an entry from tcp_init_metrics() tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics() tcp_metrics: add missing barriers on delete wifi: ath: dfs_pattern_detector: Fix a memory initialization issue wifi: mt76: mt7915: fix beamforming availability check wifi: mt76: mt7603: improve stuck beacon handling wifi: mt76: mt7603: improve watchdog reset reliablity wifi: mt76: mt7603: rework/fix rx pse hang check wifi: ath11k: fix boot failure with one MSI vector wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file() net: ethernet: mtk_wed: fix EXT_INT_STATUS_RX_FBUF definitions for MT7986 SoC net: spider_net: Use size_add() in call to struct_size() tipc: Use size_add() in calls to struct_size() tls: Use size_add() in call to struct_size() tls: Only use data field in crypto completion function mlxsw: Use size_mul() in call to struct_size() gve: Use size_add() in call to struct_size() tcp: call tcp_try_undo_recovery when an RTOd TFO SYNACK is ACKed udp: add missing WRITE_ONCE() around up->encap_rcv selftests/bpf: Correct map_fd to data_fd in tailcalls iavf: Fix promiscuous mode configuration flow messages i40e: fix potential memory leaks in i40e_remove() wifi: iwlwifi: honor the enable_ini value wifi: mac80211: fix # of MSDU in A-MSDU calculation wifi: mac80211: move sched-scan stop work to wiphy work wifi: mac80211: move offchannel works to wiphy work wifi: mac80211: move scan work to wiphy work wifi: mac80211: move radar detect work to wiphy work wifi: cfg80211: add flush functions for wiphy work genirq/matrix: Exclude managed interrupts in irq_matrix_allocated() string: Adjust strtomem() logic to allow for smaller sources pstore/platform: Add check for kstrdup drivers/clocksource/timer-ti-dm: Don't call clk_get_rate() in stop function x86/boot: Fix incorrect startup_gdt_descr.size x86/sev-es: Allow copy_from_kernel_nofault() in earlier boot ACPI/NUMA: Apply SRAT proximity domain to entire CFMWS window x86/numa: Introduce numa_fill_memblks() futex: Don't include process MM in futex key on no-MMU x86/srso: Fix SBPB enablement for (possible) future fixed HW writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs vfs: fix readahead(2) on block devices sched: Fix stop_one_cpu_nowait() vs hotplug objtool: Propagate early errors sched/uclamp: Ignore (util == 0) optimization in feec() when p_util_max = 0 sched/uclamp: Set max_spare_cap_cpu even if max_spare_cap is 0 iov_iter, x86: Be consistent about the __user tag on copy_mc_to_user() sched/fair: Fix cfs_rq_is_decayed() on !SMP hwmon: (nct6775) Fix incorrect variable reuse in fan_div calculation Linux 6.1.62 ASoC: SOF: sof-pci-dev: Fix community key quirk detection ALSA: hda: intel-dsp-config: Fix JSL Chromebook quirk detection misc: pci_endpoint_test: Add deviceID for J721S2 PCIe EP device support tty: 8250: Add Brainboxes Oxford Semiconductor-based quirks tty: 8250: Add support for Intashield IX cards tty: 8250: Add support for additional Brainboxes PX cards tty: 8250: Fix up PX-803/PX-857 tty: 8250: Fix port count of PX-257 tty: 8250: Add support for Intashield IS-100 tty: 8250: Add support for Brainboxes UP cards tty: 8250: Add support for additional Brainboxes UC cards tty: 8250: Remove UC-257 and UC-431 tty: n_gsm: fix race condition in status line change on dead connections usb: raw-gadget: properly handle interrupted requests usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() usb: storage: set 1.50 as the lower bcdDevice for older "Super Top" compatibility PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device ALSA: usb-audio: add quirk flag to enable native DSD for McIntosh devices mmap: fix error paths with dup_anon_vma() mm/mempolicy: fix set_mempolicy_home_node() previous VMA pointer x86: KVM: SVM: always update the x2avic msr interception perf evlist: Avoid frequency mode for the dummy event power: supply: core: Use blocking_notifier_call_chain to avoid RCU complaint ceph_wait_on_conflict_unlink(): grab reference before dropping ->d_lock io_uring: kiocb_done() should *not* trust ->ki_pos if ->{read,write}_iter() failed powerpc/mm: Fix boot crash with FLATMEM r8152: Check for unplug in r8153b_ups_en() / r8153c_ups_en() r8152: Check for unplug in rtl_phy_patch_request() net: chelsio: cxgb4: add an error code check in t4_load_phy_fw drm/amdgpu: Reserve fences for VM update platform/mellanox: mlxbf-tmfifo: Fix a warning message netfilter: nf_tables: audit log object reset once per table LoongArch: Replace kmap_atomic() with kmap_local_page() in copy_user_highpage() LoongArch: Export symbol invalid_pud_table for modules building gpu/drm: Eliminate DRM_SCHED_PRIORITY_UNSET drm/amdgpu: Unset context priority is now invalid scsi: mpt3sas: Fix in error path fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit() fbdev: omapfb: fix some error codes drm/ttm: Reorder sys manager cleanup step ASoC: codecs: tas2780: Fix log of failed reset via I2C. ASoC: rt5650: fix the wrong result of key button efi: fix memory leak in krealloc failure handling netfilter: nfnetlink_log: silence bogus compiler warning spi: npcm-fiu: Fix UMA reads when dummy.nbytes == 0 fs/ntfs3: Avoid possible memory leak fs/ntfs3: Fix directory element type detection fs/ntfs3: Fix NULL pointer dereference on error in attr_allocate_frame() fs/ntfs3: Fix possible NULL-ptr-deref in ni_readpage_cmpr() fs/ntfs3: Use kvmalloc instead of kmalloc(... __GFP_NOWARN) fs/ntfs3: Write immediately updated ntfs state fs/ntfs3: Add ckeck in ni_update_parent() fbdev: atyfb: only use ioremap_uc() on i386 and ia64 Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport powerpc/85xx: Fix math emulation exception dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe irqchip/stm32-exti: add missing DT IRQ flag translation irqchip/riscv-intc: Mark all INTC nodes as initialized net: sched: cls_u32: Fix allocation size in u32_init() ASoC: tlv320adc3xxx: BUG: Correct micbias setting coresight: tmc-etr: Disable warnings for allocation failures ASoC: simple-card: fixup asoc_simple_probe() error handling Revert "kasan: print the original fault addr when access invalid shadow" ANDROID: GKI: add system_unbound_wq to some symbol lists. Revert "audit,io_uring: io_uring openat triggers audit reference count underflow" Revert "tcp: allow again tcp_disconnect() when threads are waiting" Revert "tcp_bpf: properly release resources on error paths" Revert "ipv4/fib: send notify when delete source address routes" Revert "Bluetooth: hci_core: Fix build warnings" Revert "xfrm: fix a data-race in xfrm_gen_index()" Revert "perf: Disallow mis-matched inherited group reads" ANDROID: fix up 6.1.60 merge of hid.h into android14-6.1-lts ANDROID: GKI: arm64: drop CONFIG_DEBUG_PREEMPT forced disable Revert "net: macsec: indicate next pn update when offloading" Revert "net: phy: mscc: macsec: reject PN update requests" Revert "net/mlx5e: macsec: use update_pn flag instead of PN comparation" Revert "tcp: enforce receive buffer memory limits by allowing the tcp window to shrink" Linux 6.1.61 objtool/x86: add missing embedded_insn check ext4: avoid overlapping preallocations due to overflow ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow ext4: add two helper functions extent_logical_end() and pa_logical_end() platform/x86: Add s2idle quirk for more Lenovo laptops clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name sparc32: fix a braino in fault handling in csum_and_copy_..._user() perf/core: Fix potential NULL deref x86/cpu: Add model number for Intel Arrow Lake mobile processor x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility nvmem: imx: correct nregs for i.MX6UL nvmem: imx: correct nregs for i.MX6SLL nvmem: imx: correct nregs for i.MX6ULL misc: fastrpc: Unmap only if buffer is unmapped from DSP misc: fastrpc: Clean buffers on remote invocation failures misc: fastrpc: Free DMA handles for RPC calls with no arguments misc: fastrpc: Reset metadata buffer to avoid incorrect free tracing/kprobes: Fix the description of variable length arguments i2c: aspeed: Fix i2c bus hang in slave read i2c: stm32f7: Fix PEC handling in case of SMBUS transfers i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() iio: adc: xilinx-xadc: Correct temperature offset/scale for UltraScale iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature thresholds iio: exynos-adc: request second interupt only when touchscreen mode is used iio: afe: rescale: Accept only offset channels io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid kasan: print the original fault addr when access invalid shadow blk-throttle: check for overflow in calculate_bytes_allowed scsi: sd: Introduce manage_shutdown device flag iavf: in iavf_down, disable queues when removing the driver drm/logicvc: Kconfig: select REGMAP and REGMAP_MMIO i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR gtp: fix fragmentation needed check with gso gtp: uapi: fix GTPA_MAX tcp: fix wrong RTO timeout when received SACK reneging r8152: Release firmware if we have an error in probe r8152: Cancel hw_phy_work if we have an error in probe r8152: Run the unload routine if we have errors during probe r8152: Increase USB control msg timeout to 5000ms as per spec net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show() net: ethernet: adi: adin1110: Fix uninitialized variable igc: Fix ambiguity in the ethtool advertising neighbour: fix various data-races igb: Fix potential memory leak in igb_add_ethtool_nfc_entry treewide: Spelling fix in comment i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value iavf: initialize waitqueues before starting watchdog_task r8169: fix the KCSAN reported data race in rtl_rx while reading desc->opts1 r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1 r8169: fix the KCSAN reported data-race in rtl_tx() while reading tp->cur_tx clk: ti: Fix missing omap5 mcbsp functional clock and aliases clk: ti: Fix missing omap4 mcbsp functional clock and aliases firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels() ARM: OMAP: timer32K: fix all kernel-doc warnings drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() drm/amd: Disable ASPM for VI w/ all Intel systems drm/i915/pmu: Check if pmu is closed before stopping event nfsd: lock_rename() needs both directories to live on the same fs maple_tree: add GFP_KERNEL to allocations in mas_expected_entries() hugetlbfs: extend hugetlb_vma_lock to private VMAs mm/migrate: fix do_pages_move for compat pointers mm/page_alloc: correct start page when guard page debug is enabled hugetlbfs: clear resv_map pointer if mmap fails mm: fix vm_brk_flags() to not bail out while holding lock arm64: dts: rockchip: Fix i2s0 pin conflict on ROCK Pi 4 boards arm64: dts: rockchip: Add i2s0-2ch-bus-bclk-off pins to RK3399 vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE vsock/virtio: initialize the_virtio_vsock before using VQs virtio_pci: fix the common cfg map size virtio-crypto: handle config changed by work queue virtio-mmio: fix memory leak of vm_dev virtio_balloon: Fix endless deflation and inflation on arm64 mcb-lpc: Reallocate memory region to avoid memory overlapping mcb: Return actual parsed size when reading chameleon table pinctrl: qcom: lpass-lpi: fix concurrent register updates ASoC: codecs: wcd938x: fix runtime PM imbalance on remove ASoC: codecs: wcd938x: fix regulator leaks on probe errors ASoC: codecs: wcd938x: Simplify with dev_err_probe ASoC: codecs: wcd938x: Convert to platform remove callback returning void mmc: core: Fix error propagation for some ioctl commands mmc: block: ioctl: do write error check for spi mmc: core: Align to common busy polling behaviour for mmc ioctls KVM: x86/pmu: Truncate counter value to allowed width on write Linux 6.1.60 selftests: mptcp: join: no RST when rm subflow/addr selftests: mptcp: join: correctly check for no RST mptcp: avoid sending RST when closing the initial subflow Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name Bluetooth: hci_sock: fix slab oob read in create_monitor_event net: move altnames together with the netdevice phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins phy: mapphone-mdm6600: Fix runtime PM for remove phy: mapphone-mdm6600: Fix runtime disable on probe gpio: vf610: mask the gpio irq in system suspend and support wakeup gpio: vf610: make irq_chip immutable tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols kallsyms: Add helper kallsyms_on_each_match_symbol() kallsyms: Reduce the memory occupied by kallsyms_seqs_of_names[] serial: 8250: omap: convert to modern PM ops serial: 8250: omap: Move uart_write() inside PM section drm/bridge: ti-sn65dsi86: Associate DSI device lifetime with auxiliary device ASoC: pxa: fix a memory leak in probe() gpio: vf610: set value before the direction to avoid a glitch platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events platform/x86: asus-wmi: Only map brightness codes when using asus-wmi backlight control platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e platform/x86: intel-uncore-freq: Conditionally create attribute for read frequency platform/surface: platform_profile: Propagate error if profile registration fails s390/cio: fix a memleak in css_alloc_subchannel selftests/ftrace: Add new test case which checks non unique symbol s390/pci: fix iommu bitmap allocation perf: Disallow mis-matched inherited group reads USB: serial: option: add Fibocom to DELL custom modem FM101R-GL USB: serial: option: add entry for Sierra EM9191 with new firmware USB: serial: option: add Telit LE910C4-WWX 0x1035 composition HID: input: map battery system charging KVM: x86/mmu: Stop zapping invalidated TDP MMU roots asynchronously nvme-rdma: do not try to stop unallocated queues nvmet-auth: complete a request only after freeing the dhchap pointers nvme-pci: add BOGUS_NID for Intel 0a54 device nvme: sanitize metadata bounce buffer for reads nfs42: client needs to strip file mode's suid/sgid bit after ALLOCATE op ACPI: irq: Fix incorrect return value in acpi_register_gsi() NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server pNFS/flexfiles: Check the layout validity in ff_layout_mirror_prepare_stats pNFS: Fix a hang in nfs4_evict_inode() Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" mmc: core: Capture correct oemid-bits for eMMC cards mmc: core: sdio: hold retuning if sdio in 1-bit mode mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw mmc: sdhci-pci-gli: fix LPM negotiation so x86/S0ix SoCs can suspend dt-bindings: mmc: sdhci-msm: correct minimum number of clocks mtd: physmap-core: Restore map_rom fallback mtd: spinand: micron: correct bitmask for ecc status mtd: rawnand: arasan: Ensure program page operations are successful mtd: rawnand: marvell: Ensure program page operations are successful mtd: rawnand: pl353: Ensure program page operations are successful mtd: rawnand: qcom: Unmap the right resource upon probe failure net/smc: fix smc clc failed issue when netdevice not in init_net tcp_bpf: properly release resources on error paths selftests: openvswitch: Add version check for pyroute2 Bluetooth: hci_event: Fix using memcmp when comparing keys ice: Remove redundant pci_enable_pcie_error_reporting() tcp: allow again tcp_disconnect() when threads are waiting net/tls: split tls_rx_reader_lock net/mlx5e: Don't offload internal port if filter device is out device net/mlx5: Handle fw tracer change ownership event based on MTRC net/mlx5: E-switch, register event handler before arming the event xfrm6: fix inet6_dev refcount underflow problem net: xfrm: skip policies marked as dead while reinserting policies fprobe: Fix to ensure the number of active retprobes is not zero fprobe: Add nr_maxactive to specify rethook_node pool size fprobe: Pass entry_data to handlers cpufreq: schedutil: Update next_freq when cpufreq_limits change platform/x86: touchscreen_dmi: Add info for the Positivo C4128B HID: nintendo: reinitialize USB Pro Controller after resuming from suspend HID: multitouch: Add required quirk for Synaptics 0xcd7e device drm/amd/pm: add unique_id for gc 11.0.3 btrfs: error out when reallocating block for defrag using a stale transaction btrfs: error when COWing block from a root that is being deleted btrfs: error out when COWing block using a stale transaction btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c drm: panel-orientation-quirks: Add quirk for One Mix 2S ipv4/fib: send notify when delete source address routes sky2: Make sure there is at least one frag_addr available regulator/core: Revert "fix kobject release warning and memory leak in regulator_register()" wifi: cfg80211: avoid leaking stack data into trace wifi: mac80211: allow transmitting EAPOL frames with tainted key wifi: mac80211: work around Cisco AP 9115 VHT MPDU length wifi: cfg80211: Fix 6GHz scan configuration Bluetooth: hci_core: Fix build warnings Bluetooth: Avoid redundant authentication Bluetooth: btusb: add shutdown function for QCA6174 HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event HID: logitech-hidpp: Add Bluetooth ID for the Logitech M720 Triathlon mouse wifi: iwlwifi: Ensure ack flag is properly cleared. wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len tracing: relax trace_event_eval_update() execution with cond_resched() ata: libata-eh: Fix compilation warning in ata_eh_link_report() ata: libata-core: Fix compilation warning in ata_dev_config_ncq() gpio: timberdale: Fix potential deadlock on &tgpio->lock overlayfs: set ctime when setting mtime and atime i2c: mux: Avoid potential false error message in i2c_mux_add_adapter btrfs: initialize start_slot in btrfs_log_prealloc_extents btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 btrfs: prevent transaction block reserve underflow when starting transaction fs-writeback: do not requeue a clean inode having skipped pages ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone pwr-mlxbf: extend Kconfig to include gpio-mlxbf3 dependency iio: adc: ad7192: Correct reference voltage iio: adc: ad7192: Simplify using devm_regulator_get_enable() iio: cros_ec: fix an use-after-free in cros_ec_sensors_push_data() iio: core: introduce iio_device_{claim|release}_buffer_mode() APIs serial: 8250_omap: Fix errors with no_console_suspend serial: 8250: omap: Fix imprecise external abort for omap_8250_pm() serial: Reduce spinlocked portion of uart_rs485_config() serial: Rename uart_change_speed() to uart_change_line_settings() serial: Move uart_change_speed() earlier usb: misc: onboard_hub: add support for Microchip USB2412 USB 2.0 hub usb: misc: onboard_usb_hub: add Genesys Logic GL3523 hub support usb: misc: onboard_usb_hub: add Genesys Logic GL852G hub support usb: misc: onboard_usb_hub: add Genesys Logic GL850G hub support selftests/mm: fix awk usage in charge_reserved_hugetlb.sh and hugetlb_reparenting_test.sh that may cause error net: check for altname conflicts when changing netdev's netns net: fix ifname in netlink ntf during netns move net: avoid UAF on deleted altname net: pktgen: Fix interface flags printing net: phy: bcm7xxx: Add missing 16nm EPHY statistics netfilter: nf_tables: revert do not remove elements if set backend implements .abort netfilter: nf_tables: do not remove elements if set backend implements .abort netlink: Correct offload_xstats size netfilter: nft_set_rbtree: .deactivate fails if element has expired selftests: netfilter: Run nft_audit.sh in its own netns selftests: openvswitch: Catch cases where the tests are killed neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve bonding: Return pointer to data after pull on skb net: dsa: bcm_sf2: Fix possible memory leak in bcm_sf2_mdio_register() i40e: prevent crash on probe if hw registers have invalid values octeon_ep: update BQL sent bytes before ringing doorbell net: usb: smsc95xx: Fix an error code in smsc95xx_reset() ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr tun: prevent negative ifindex tcp: Fix listen() warning with v4-mapped-v6 address. tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb tcp: fix excessive TLP and RACK timeouts from HZ rounding net: rfkill: gpio: prevent value glitch during probe net: ipv6: fix return value check in esp_remove_trailer net: ipv4: fix return value check in esp_remove_trailer wifi: cfg80211: use system_unbound_wq for wiphy work xfrm: interface: use DEV_STATS_INC() xfrm: fix a data-race in xfrm_gen_index() xfrm: fix a data-race in xfrm_lookup_with_ifid() qed: fix LL2 RX buffer allocation ASoC: codecs: wcd938x: fix resource leaks on bind errors ASoC: codecs: wcd938x: fix unbind tear down order ASoC: codecs: wcd938x: drop bogus bind error handling ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV ALSA: hda/realtek - Fixed ASUS platform headset Mic issue drm/mediatek: Correctly free sg_table in gem prime vmap drm/i915: Retry gtt fault when out of fence registers nvmet-tcp: Fix a possible UAF in queue intialization setup netfilter: nft_payload: fix wrong mac header matching fs/ntfs3: fix deadlock in mark_as_free_ex fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea() fs/ntfs3: Fix possible null-pointer dereference in hdr_find_e() mptcp: more conservative check for zero probes tcp: check mptcp-level constraints for backlog coalescing audit,io_uring: io_uring openat triggers audit reference count underflow x86: KVM: SVM: refresh AVIC inhibition in svm_leave_nested() x86: KVM: SVM: add support for Invalid IPI Vector interception KVM: x86: Constrain guest-supported xfeatures only at KVM_GET_XSAVE{2} x86/fpu: Allow caller to constrain xfeatures when copying to uabi buffer x86/sev: Check for user-space IOIO pointing to kernel space x86/sev: Check IOBM for IOIO exceptions from user-space x86/sev: Disable MMIO emulation from user mode KVM: x86: Mask LVTPC when handling a PMI regmap: fix NULL deref on lookup nfc: nci: fix possible NULL pointer dereference in send_acknowledge() btrfs: fix stripe length calculation for non-zoned data chunk allocation net/smc: return the right falback reason when prefix checks fail ice: reset first in crash dump kernels ice: fix over-shifted variable Bluetooth: avoid memcmp() out of bounds warning Bluetooth: hci_event: Fix coding style Bluetooth: vhci: Fix race when opening vhci device Bluetooth: Fix a refcnt underflow problem for hci_conn Bluetooth: Reject connection with the device which has same BD_ADDR Bluetooth: hci_event: Ignore NULL link key igc: Fix race condition in PTP tx code igc: Add condition for qbv_config_change_errors counter igc: Add qbv_config_change_errors counter igc: Remove reset adapter task for i226 during disable tsn config igc: enable Qbv configuration for 2nd GCL igc: remove I226 Qbv BaseTime restriction lib/Kconfig.debug: do not enable DEBUG_PREEMPT by default Linux 6.1.59 ALSA: hda/realtek - Fixed two speaker platform powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE dmaengine: mediatek: Fix deadlock caused by synchronize_irq() dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq x86/alternatives: Disable KASAN in apply_alternatives() usb: cdnsp: Fixes issue with dequeuing not queued requests usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call usb: gadget: udc-xilinx: replace memcpy with memcpy_toio usb: typec: ucsi: Clear EVENT_PENDING bit if ucsi_send_command fails usb: typec: altmodes/displayport: Signal hpd low when exiting mode counter: microchip-tcb-capture: Fix the use of internal GCLK logic counter: chrdev: fix getting array extensions scsi: ufs: core: Correct clear TM error log pinctrl: avoid unsafe code pattern in find_pinctrl() dma-buf: add dma_fence_timestamp helper cgroup: Remove duplicates in cgroup v1 tasks file usb: typec: ucsi: Use GET_CAPABILITY attributes data to set power supply scope nfp: flower: avoid rmmod nfp crash issues mctp: perform route lookups under a RCU read-side lock tee: amdtee: fix use-after-free vulnerability in amdtee_close_session Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table Input: xpad - add PXN V900 support Input: psmouse - fix fast_reconnect function for PS/2 mode Input: powermate - fix use-after-free in powermate_config_complete ceph: fix type promotion bug on 32bit systems ceph: fix incorrect revoked caps assert in ceph_fill_file_size() libceph: use kernel_connect() powerpc/47x: Fix 47x syscall return crash thunderbolt: Restart XDomain discovery handshake after failure thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge mcb: remove is_added flag from mcb_device struct x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs perf/x86/lbr: Filter vsyscall addresses ksmbd: not allow to open file if delelete on close bit is set ACPI: EC: Add quirk for the HP Pavilion Gaming 15-dk1xxx ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA drm/amd/display: Don't set dpms_off for seamless boot drm/amdgpu: add missing NULL check drm/atomic-helper: relax unregistered connector check arm64: dts: mediatek: mt8195-demo: update and reorder reserved memory regions arm64: dts: mediatek: mt8195-demo: fix the memory size to 8GB iio: addac: Kconfig: update ad74413r selections iio: pressure: ms5611: ms5611_prom_is_valid false negative bug iio: pressure: dps310: Adjust Timeout Settings iio: admv1013: add mixer_vgate corner cases iio: dac: ad3552r: Correct device IDs iio: adc: imx8qxp: Fix address for command buffer registers iio: imu: bno055: Fix missing Kconfig dependencies iio: pressure: bmp280: Fix NULL pointer exception usb: musb: Modify the "HWVers" register address usb: musb: Get the musb_qh poniter after musb_giveback usb: hub: Guard against accesses to uninitialized BOS descriptors usb: cdns3: Modify the return value of cdns_set_active () to void when CONFIG_PM_SLEEP is disabled usb: dwc3: Soft reset phy on probe for host net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer dmaengine: stm32-mdma: set in_flight_bytes in case CRQA flag is set dmaengine: stm32-mdma: use Link Address Register to compute residue dmaengine: stm32-dma: fix residue in case of MDMA chaining dmaengine: stm32-dma: fix stm32_dma_prep_slave_sg in case of MDMA chaining dmaengine: stm32-mdma: abort resume if no ongoing transfer tcp: enforce receive buffer memory limits by allowing the tcp window to shrink workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() nfc: nci: assert requested protocol is valid pinctrl: renesas: rzn1: Enable missing PINMUX net/smc: Fix pos miscalculation in statistics net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp ixgbe: fix crash with empty VF macvlan list net/mlx5e: macsec: use update_pn flag instead of PN comparation net: phy: mscc: macsec: reject PN update requests net: macsec: indicate next pn update when offloading net: refine debug info in skb_checksum_help() bpf: Fix verifier log for async callback return values drm/vmwgfx: fix typo of sizeof argument riscv, bpf: Sign-extend return values riscv, bpf: Factor out emit_call for kernel and bpf context xen-netback: use default TX queue size for vifs mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type ieee802154: ca8210: Fix a potential UAF in ca8210_probe ravb: Fix use-after-free issue in ravb_tx_timeout_work() ravb: Fix up dma_free_coherent() call in ravb_remove() arm64: dts: mediatek: mt8195: Set DSU PMU status to fail can: sun4i_can: Only show Kconfig if ARCH_SUNXI is set can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior net: dsa: qca8k: fix potential MDIO bus conflict when accessing internal PHYs via management frames phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers phy: lynx-28g: lock PHY while performing CDR lock workaround phy: lynx-28g: cancel the CDR check work item on the remove path drm/msm/dp: Add newlines to debug printks drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow drm/msm/dsi: fix irq_of_parse_and_map() error checking drm/msm/dsi: skip the wait for video mode done if not applicable drm/msm/dp: do not reinitialize phy unless retry during link training pinctrl: nuvoton: wpcm450: fix out of bounds write ALSA: hda/realtek - ALC287 merge RTK codec with CS CS35L41 AMP ALSA: hda/realtek - ALC287 I2S speaker platform support ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED ASoC: fsl_sai: Don't disable bitclock for i.MX8MP ASoC: fsl_sai: MCLK bind with TX/RX enable bit ASoC: Use of_property_read_bool() for boolean properties ASoC: Intel: soc-acpi: Add entry for sof_es8336 in MTL match table. ASoC: Intel: sof_sdw: add support for SKU 0B14 ASoC: Intel: soc-acpi: Add entry for HDMI_In capture support in MTL match table ASoC: simple-card-utils: fixup simple_util_startup() error handling ASoC: SOF: amd: fix for firmware reload failure after playback ALSA: hda/realtek: Change model for Intel RVP board ALSA: usb-audio: Fix microphone sound on Nexigo webcam. ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset KEYS: trusted: Remove redundant static calls usage irqchip: renesas-rzg2l: Fix logic to clear TINT interrupt source dt-bindings: interrupt-controller: renesas,rzg2l-irqc: Update description for '#interrupt-cells' property arm64: dts: qcom: sm8150: extend the size of the PDC resource net: prevent address rewrite in kernel_bind() ata: libata-scsi: Disable scsi device manage_system_start_stop ASoC: amd: yc: Fix non-functional mic on Lenovo 82YM quota: Fix slow quotaoff HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect scsi: Do not rescan devices with a suspended queue platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section mismatch warning platform/x86: think-lmi: Fix reference leak perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7 RDMA/cxgb4: Check skb value for failure to allocate drm/i915: Don't set PIPE_CONTROL_FLUSH_L3 for aux inval mptcp: fix delegated action races net: mana: Fix TX CQE error handling Linux 6.1.58 lib/test_meminit: fix off-by-one error in test_pages() Revert "NFS: Fix error handling for O_DIRECT write scheduling" Revert "NFS: Fix O_DIRECT locking issues" Revert "NFS: More O_DIRECT accounting fixes for error paths" Revert "NFS: Use the correct commit info in nfs_join_page_group()" Revert "NFS: More fixes for nfs_direct_write_reschedule_io()" Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/interrupt-controller/qcom,mpm.yaml Documentation/devicetree/bindings/interrupt-controller/renesas,rzg2l-irqc.yaml Documentation/devicetree/bindings/mfd/mt6397.txt Documentation/devicetree/bindings/mmc/sdhci-msm.yaml drivers/clk/qcom/gcc-sm8150.c drivers/hwtracing/coresight/coresight-tmc-core.c drivers/hwtracing/coresight/coresight-tmc-etr.c drivers/interconnect/qcom/sm8150.c drivers/interconnect/qcom/sm8150.h drivers/phy/qualcomm/Makefile Change-Id: I9b0afef38a5cd42781504ccd77dfb8a747a5dea4 Upstream-Build: ks_qcom-android14-6.1-keystone-qcom-release@11750438 UKQ2.240423.001 Signed-off-by: Srinivasarao Pathipati <quic_c_spathi@quicinc.com> |
||
Kalesh Singh
|
1794308d46 |
ANDROID: 16K: Fix show maps CFI failure
If the kernel is built CONFIG_CFI_CLANG=y, reading smaps may cause a panic. This is due to a failed CFI check; which is triggered becuase the signature of the function pointer for printing smaps padding VMAs does not match exactly with that for show_smap(). Fix this by casting the function pointer to the expected type based on whether printing maps or smaps padding. Bug: 330117029 Bug: 327600007 Bug: 330767927 Bug: 328266487 Bug: 329803029 Change-Id: I65564a547dacbc4131f8557344c8c96e51f90cd5 Signed-off-by: Kalesh Singh <kaleshsingh@google.com> |
||
Kalesh Singh
|
72a9c0a205 |
ANDROID: 16K: Handle pad VMA splits and merges
In some cases a VMA with padding representation may be split, and therefore the padding flags must be updated accordingly. There are 3 cases to handle: Given: | DDDDPPPP | where: - D represents 1 page of data; - P represents 1 page of padding; - | represents the boundaries (start/end) of the VMA 1) Split exactly at the padding boundary | DDDDPPPP | --> | DDDD | PPPP | - Remove padding flags from the first VMA. - The second VMA is all padding 2) Split within the padding area | DDDDPPPP | --> | DDDDPP | PP | - Subtract the length of the second VMA from the first VMA's padding. - The second VMA is all padding, adjust its padding length (flags) 3) Split within the data area | DDDDPPPP | --> | DD | DDPPPP | - Remove padding flags from the first VMA. - The second VMA is has the same padding as from before the split. To simplify the semantics merging of padding VMAs is not allowed. If a split produces a VMA that is entirely padding, show_[s]maps() only outputs the padding VMA entry (as the data entry is of length 0). Bug: 330117029 Bug: 327600007 Bug: 330767927 Bug: 328266487 Bug: 329803029 Change-Id: Ie2628ced5512e2c7f8af25fabae1f38730c8bb1a Signed-off-by: Kalesh Singh <kaleshsingh@google.com> |
||
Kalesh Singh
|
b86b5cb22d |
ANDROID: 16K: madvise_vma_pad_pages: Remove filemap_fault check
Some file systems like F2FS use a custom filemap_fault ops. Remove this check, as checking vm_file is sufficient. Bug: 330117029 Bug: 327600007 Bug: 330767927 Bug: 328266487 Bug: 329803029 Change-Id: Id6a584d934f06650c0a95afd1823669fc77ba2c2 Signed-off-by: Kalesh Singh <kaleshsingh@google.com> |
||
Kalesh Singh
|
1657717c12 |
ANDROID: 16K: Only madvise padding from dynamic linker context
Only preform padding advise from the execution context on bionic's dynamic linker. This ensures that madvise() doesn't have unwanted side effects. Also rearrange the order of fail checks in madvise_vma_pad_pages() in order of ascending cost. Bug: 330117029 Bug: 327600007 Bug: 330767927 Bug: 328266487 Bug: 329803029 Change-Id: I3e05b8780c6eda78007f86b613f8c11dd18ac28f Signed-off-by: Kalesh Singh <kaleshsingh@google.com> |
||
Kalesh Singh
|
2ca5e076c9 |
ANDROID: 16K: Separate padding from ELF LOAD segment mappings
In has been found that some in-field apps depend on the output of /proc/*/maps to determine the address ranges of other operations. With the extension of LOAD segments VMAs to be contiguous in memory, the apps may perform operations on an area that is not backed by the underlying file, which results in a SIGBUS. Other apps have crashed with yet unindentified reasons. To avoid breaking in-field apps, maintain the output of /proc/*/[s]maps with PROT_NONE VMAs for the padding pages of LOAD segments instead of showing the segment extensions. NOTE: This does not allocate actual backing VMAs for the shown PROT_NONE mappings. This approach maintains 2 possible assumptions that userspace (apps) could be depending on: 1) That LOAD segment mappings are "contiguous" (not speparated by unrelated mappings) in memory. 2) That no virtual address space is available between mappings of consecutive LOAD segments for the same ELF. For example the output of /proc/*/[s]maps before and after this change is shown below. Segments maintain PROT_NONE gaps ("[page size compat]") for app compatiblity but these are not backed by actual slab VMA memory. Maps Before: 7fb03604d000-7fb036051000 r--p 00000000 fe:09 21935719 /system/lib64/libnetd_client.so 7fb036051000-7fb036055000 r-xp 00004000 fe:09 21935719 /system/lib64/libnetd_client.so 7fb036055000-7fb036059000 r--p 00008000 fe:09 21935719 /system/lib64/libnetd_client.so 7fb036059000-7fb03605a000 rw-p 0000c000 fe:09 21935719 /system/lib64/libnetd_client.so Maps After: 7fc707390000-7fc707393000 r--p 00000000 fe:09 21935719 /system/lib64/libnetd_client.so 7fc707393000-7fc707394000 ---p 00000000 00:00 0 [page size compat] 7fc707394000-7fc707398000 r-xp 00004000 fe:09 21935719 /system/lib64/libnetd_client.so 7fc707398000-7fc707399000 r--p 00008000 fe:09 21935719 /system/lib64/libnetd_client.so 7fc707399000-7fc70739c000 ---p 00000000 00:00 0 [page size compat] 7fc70739c000-7fc70739d000 rw-p 0000c000 fe:09 21935719 /system/lib64/libnetd_client.so Smaps Before: 7fb03604d000-7fb036051000 r--p 00000000 fe:09 21935719 /system/lib64/libnetd_client.so Size: 16 kB KernelPageSize: 4 kB MMUPageSize: 4 kB Rss: 16 kB Pss: 0 kB Pss_Dirty: 0 kB Shared_Clean: 16 kB Shared_Dirty: 0 kB Private_Clean: 0 kB Private_Dirty: 0 kB Referenced: 16 kB Anonymous: 0 kB LazyFree: 0 kB AnonHugePages: 0 kB ShmemPmdMapped: 0 kB FilePmdMapped: 0 kB Shared_Hugetlb: 0 kB Private_Hugetlb: 0 kB Swap: 0 kB SwapPss: 0 kB Locked: 0 kB THPeligible: 0 VmFlags: rd mr mw me 7fb036051000-7fb036055000 r-xp 00004000 fe:09 21935719 /system/lib64/libnetd_client.so Size: 16 kB KernelPageSize: 4 kB MMUPageSize: 4 kB Rss: 16 kB Pss: 0 kB Pss_Dirty: 0 kB Shared_Clean: 16 kB Shared_Dirty: 0 kB Private_Clean: 0 kB Private_Dirty: 0 kB Referenced: 16 kB Anonymous: 0 kB LazyFree: 0 kB AnonHugePages: 0 kB ShmemPmdMapped: 0 kB FilePmdMapped: 0 kB Shared_Hugetlb: 0 kB Private_Hugetlb: 0 kB Swap: 0 kB SwapPss: 0 kB Locked: 0 kB THPeligible: 0 VmFlags: rd ex mr mw me 7fb036055000-7fb036059000 r--p 00008000 fe:09 21935719 /system/lib64/libnetd_client.so Size: 16 kB KernelPageSize: 4 kB MMUPageSize: 4 kB Rss: 4 kB Pss: 4 kB Pss_Dirty: 4 kB Shared_Clean: 0 kB Shared_Dirty: 0 kB Private_Clean: 0 kB Private_Dirty: 4 kB Referenced: 4 kB Anonymous: 4 kB LazyFree: 0 kB AnonHugePages: 0 kB ShmemPmdMapped: 0 kB FilePmdMapped: 0 kB Shared_Hugetlb: 0 kB Private_Hugetlb: 0 kB Swap: 0 kB SwapPss: 0 kB Locked: 0 kB THPeligible: 0 VmFlags: rd mr mw me ac 7fb036059000-7fb03605a000 rw-p 0000c000 fe:09 21935719 /system/lib64/libnetd_client.so Size: 4 kB KernelPageSize: 4 kB MMUPageSize: 4 kB Rss: 4 kB Pss: 4 kB Pss_Dirty: 4 kB Shared_Clean: 0 kB Shared_Dirty: 0 kB Private_Clean: 0 kB Private_Dirty: 4 kB Referenced: 4 kB Anonymous: 4 kB LazyFree: 0 kB AnonHugePages: 0 kB ShmemPmdMapped: 0 kB FilePmdMapped: 0 kB Shared_Hugetlb: 0 kB Private_Hugetlb: 0 kB Swap: 0 kB SwapPss: 0 kB Locked: 0 kB THPeligible: 0 VmFlags: rd wr mr mw me ac Smaps After: 7fc707390000-7fc707393000 r--p 00000000 fe:09 21935719 /system/lib64/libnetd_client.so Size: 12 kB KernelPageSize: 4 kB MMUPageSize: 4 kB Rss: 12 kB Pss: 0 kB Shared_Clean: 12 kB Shared_Dirty: 0 kB Private_Clean: 0 kB Private_Dirty: 0 kB Referenced: 12 kB Anonymous: 0 kB LazyFree: 0 kB AnonHugePages: 0 kB ShmemPmdMapped: 0 kB FilePmdMapped: 0 kB Shared_Hugetlb: 0 kB Private_Hugetlb: 0 kB Swap: 0 kB SwapPss: 0 kB Locked: 0 kB THPeligible: 0 VmFlags: rd mr mw me ?? 7fc707393000-7fc707394000 ---p 00000000 00:00 0 [page size compat] Size: 4 kB KernelPageSize: 4 kB MMUPageSize: 4 kB Rss: 0 kB Pss: 0 kB Shared_Clean: 0 kB Shared_Dirty: 0 kB Private_Clean: 0 kB Private_Dirty: 0 kB Referenced: 0 kB Anonymous: 0 kB LazyFree: 0 kB AnonHugePages: 0 kB ShmemPmdMapped: 0 kB FilePmdMapped: 0 kB Shared_Hugetlb: 0 kB Private_Hugetlb: 0 kB Swap: 0 kB SwapPss: 0 kB Locked: 0 kB THPeligible: 0 VmFlags: mr mw me 7fc707394000-7fc707398000 r-xp 00004000 fe:09 21935719 /system/lib64/libnetd_client.so Size: 16 kB KernelPageSize: 4 kB MMUPageSize: 4 kB Rss: 16 kB Pss: 0 kB Shared_Clean: 16 kB Shared_Dirty: 0 kB Private_Clean: 0 kB Private_Dirty: 0 kB Referenced: 16 kB Anonymous: 0 kB LazyFree: 0 kB AnonHugePages: 0 kB ShmemPmdMapped: 0 kB FilePmdMapped: 0 kB Shared_Hugetlb: 0 kB Private_Hugetlb: 0 kB Swap: 0 kB SwapPss: 0 kB Locked: 0 kB THPeligible: 0 VmFlags: rd ex mr mw me 7fc707398000-7fc707399000 r--p 00008000 fe:09 21935719 /system/lib64/libnetd_client.so Size: 4 kB KernelPageSize: 4 kB MMUPageSize: 4 kB Rss: 4 kB Pss: 4 kB Shared_Clean: 0 kB Shared_Dirty: 0 kB Private_Clean: 0 kB Private_Dirty: 4 kB Referenced: 4 kB Anonymous: 4 kB LazyFree: 0 kB AnonHugePages: 0 kB ShmemPmdMapped: 0 kB FilePmdMapped: 0 kB Shared_Hugetlb: 0 kB Private_Hugetlb: 0 kB Swap: 0 kB SwapPss: 0 kB Locked: 0 kB THPeligible: 0 VmFlags: rd mr mw me ac ?? ?? 7fc707399000-7fc70739c000 ---p 00000000 00:00 0 [page size compat] Size: 12 kB KernelPageSize: 4 kB MMUPageSize: 4 kB Rss: 0 kB Pss: 0 kB Shared_Clean: 0 kB Shared_Dirty: 0 kB Private_Clean: 0 kB Private_Dirty: 0 kB Referenced: 0 kB Anonymous: 0 kB LazyFree: 0 kB AnonHugePages: 0 kB ShmemPmdMapped: 0 kB FilePmdMapped: 0 kB Shared_Hugetlb: 0 kB Private_Hugetlb: 0 kB Swap: 0 kB SwapPss: 0 kB Locked: 0 kB THPeligible: 0 VmFlags: mr mw me ac 7fc70739c000-7fc70739d000 rw-p 0000c000 fe:09 21935719 /system/lib64/libnetd_client.so Size: 4 kB KernelPageSize: 4 kB MMUPageSize: 4 kB Rss: 4 kB Pss: 4 kB Shared_Clean: 0 kB Shared_Dirty: 0 kB Private_Clean: 0 kB Private_Dirty: 4 kB Referenced: 4 kB Anonymous: 4 kB LazyFree: 0 kB AnonHugePages: 0 kB ShmemPmdMapped: 0 kB FilePmdMapped: 0 kB Shared_Hugetlb: 0 kB Private_Hugetlb: 0 kB Swap: 0 kB SwapPss: 0 kB Locked: 0 kB THPeligible: 0 VmFlags: rd wr mr mw me ac Bug: 330117029 Bug: 327600007 Bug: 330767927 Bug: 328266487 Bug: 329803029 Change-Id: I12bf2c106fafc74a500d79155b81dde5db42661e Signed-off-by: Kalesh Singh <kaleshsingh@google.com> |
||
Kalesh Singh
|
1537dbe21b |
ANDROID: 16K: Exclude ELF padding for fault around range
Userspace apps often analyze memory consumption by the use of mm rss_stat counters -- via the kmem/rss_stat trace event or from /proc/<pid>/statm. rss_stat counters are only updated when the PTEs are updated. What this means is that pages can be present in the page cache from readahead but not visible to userspace (not attributed to the app) as there is no corresponding VMA (PTEs) for the respective page cache pages. A side effect of the loader now extending ELF LOAD segments to be contiguously mapped in the virtual address space, means that the VMA is extended to cover the padding pages. When filesystems, such as f2fs and ext4, that implement vm_ops->map_pages() attempt to perform a do_fault_around() the extent of the fault around is restricted by the area of the enclosing VMA. Since the loader extends LOAD segment VMAs to be contiguously mapped, the extent of the fault around is also increased. The result of which, is that the PTEs corresponding to the padding pages are updated and reflected in the rss_stat counters. It is not common that userspace application developers be aware of this nuance in the kernel's memory accounting. To avoid apparent regressions in memory usage to userspace, restrict the fault around range to only valid data pages (i.e. exclude the padding pages at the end of the VMA). Bug: 330117029 Bug: 327600007 Bug: 330767927 Bug: 328266487 Bug: 329803029 Change-Id: I2c7a39ec1b040be2b9fb47801f95042f5dbf869d Signed-off-by: Kalesh Singh <kaleshsingh@google.com> |
||
Kalesh Singh
|
6815ef3195 |
ANDROID: 16K: Use MADV_DONTNEED to save VMA padding pages.
When performing LOAD segment extension, the dynamic linker knows what portion of the VMA is padding. In order for the kernel to implement mitigations that ensure app compatibility, the extent of the padding must be made available to the kernel. To achieve this, reuse MADV_DONTNEED on single VMAs to hint the padding range to the kernel. This information is then stored in vm_flag bits. This allows userspace (dynamic linker) to set the padding pages on the VMA without a need for new out-of-tree UAPI. Bug: 330117029 Bug: 327600007 Bug: 330767927 Bug: 328266487 Bug: 329803029 Change-Id: I3421de32ab38ad3cb0fbce73ecbd8f7314287cde Signed-off-by: Kalesh Singh <kaleshsingh@google.com> |
||
Kalesh Singh
|
6b9e404675 |
ANDROID: 16K: Introduce ELF padding representation for VMAs
The dynamic linker may extend ELF LOAD segment mappings to be contiguous in memory when loading a 16kB compatible ELF on a 4kB page-size system. This is done to reduce the use of unreclaimable VMA slab memory for the otherwise necessary "gap" VMAs. The extended portion of the mapping (VMA) can be viewed as "padding", meaning that the mapping in that range corresponds to an area of the file that does not contain contents of the respective segments (maybe zero's depending on how the ELF is built). For some compatibility mitigations, the region of a VMA corresponding to these padding sections need to be known. In order to represent such regions without adding addtional overhead or breaking ABI, some upper bits of vm_flags are used. Add the VMA padding pages representation and the necessary APIs to manipulate it. Bug: 330117029 Bug: 327600007 Bug: 330767927 Bug: 328266487 Bug: 329803029 Change-Id: Ieb9fa98e30ec9b0bec62256624f14e3ed6062a75 Signed-off-by: Kalesh Singh <kaleshsingh@google.com> |
||
Kalesh Singh
|
e79c1d4590 |
ANDROID: 16K: Introduce /sys/kernel/mm/pgsize_miration/enabled
Migrating from 4kB to 16kB page-size in Android requires first making the platform page-agnostic, which involves increasing Android-ELFs' max-page-size (p_align) from 4kB to 16kB. Increasing the ELF max-page-size was found to cause compatibility issues in apps that use obfuscation or depend on the ELF segments being mapped based on 4kB-alignment. Working around these compatibility issues involves both kernel and userspace (dynamic linker) changes. Introduce a knob for userspace (dynamic linker) to determine whether the kernel supports the mitigations needed for page-size migration compatibility. The knob also allows for userspace to turn on or off these mitigations by writing 1 or 0 to /sys/kernel/mm/pgsize_miration/enabled: echo 1 > /sys/kernel/mm//pgsize_miration/enabled # Enable echo 0 > /sys/kernel/mm//pgsize_miration/enabled # Disable Bug: 330117029 Bug: 327600007 Bug: 330767927 Bug: 328266487 Bug: 329803029 Change-Id: I9ac1d15d397b8226b27827ecffa30502da91e10e Signed-off-by: Kalesh Singh <kaleshsingh@google.com> |
||
Zi Yan
|
6dde3d399b |
FROMLIST: mm/migrate: set swap entry values of THP tail pages properly.
The tail pages in a THP can have swap entry information stored in their private field. When migrating to a new page, all tail pages of the new page need to update ->private to avoid future data corruption. This fix is stable-only, since after commit 07e09c483cbe ("mm/huge_memory: work on folio->swap instead of page->private when splitting folio"), subpages of a swapcached THP no longer requires the maintenance. Adding THPs to the swapcache was introduced in commit |
||
Lokesh Gidra
|
8dd482be44 |
UPSTREAM: userfaultfd: fix deadlock warning when locking src and dst VMAs
Use down_read_nested() to avoid the warning. Link: https://lkml.kernel.org/r/20240321235818.125118-1-lokeshgidra@google.com Fixes: 867a43a34ff8 ("userfaultfd: use per-vma locks in userfaultfd operations") Reported-by: syzbot+49056626fe41e01f2ba7@syzkaller.appspotmail.com Signed-off-by: Lokesh Gidra <lokeshgidra@google.com> Cc: Andrea Arcangeli <aarcange@redhat.com> Cc: Axel Rasmussen <axelrasmussen@google.com> Cc: Brian Geffon <bgeffon@google.com> Cc: David Hildenbrand <david@redhat.com> Cc: Hillf Danton <hdanton@sina.com> Cc: Jann Horn <jannh@google.com> [Bug #2] Cc: Kalesh Singh <kaleshsingh@google.com> Cc: Lokesh Gidra <lokeshgidra@google.com> Cc: Mike Rapoport (IBM) <rppt@kernel.org> Cc: Nicolas Geoffray <ngeoffray@google.com> Cc: Peter Xu <peterx@redhat.com> Cc: Suren Baghdasaryan <surenb@google.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 30af24facf0aed12dec23bdf6eac6a907f88306a) Bug: 320478828 Change-Id: I56d7e33878d6248bba28e1e4204e2b9005d87e4d Signed-off-by: Lokesh Gidra <lokeshgidra@google.com> |
||
Lokesh Gidra
|
ce2896c0c6 |
BACKPORT: userfaultfd: use per-vma locks in userfaultfd operations
All userfaultfd operations, except write-protect, opportunistically use per-vma locks to lock vmas. On failure, attempt again inside mmap_lock critical section. Write-protect operation requires mmap_lock as it iterates over multiple vmas. Link: https://lkml.kernel.org/r/20240215182756.3448972-5-lokeshgidra@google.com Signed-off-by: Lokesh Gidra <lokeshgidra@google.com> Reviewed-by: Liam R. Howlett <Liam.Howlett@oracle.com> Cc: Andrea Arcangeli <aarcange@redhat.com> Cc: Axel Rasmussen <axelrasmussen@google.com> Cc: Brian Geffon <bgeffon@google.com> Cc: David Hildenbrand <david@redhat.com> Cc: Jann Horn <jannh@google.com> Cc: Kalesh Singh <kaleshsingh@google.com> Cc: Matthew Wilcox (Oracle) <willy@infradead.org> Cc: Mike Rapoport (IBM) <rppt@kernel.org> Cc: Nicolas Geoffray <ngeoffray@google.com> Cc: Peter Xu <peterx@redhat.com> Cc: Ryan Roberts <ryan.roberts@arm.com> Cc: Suren Baghdasaryan <surenb@google.com> Cc: Tim Murray <timmurray@google.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 867a43a34ff8a38772212045262b2c9b77807ea3) Conflicts: mm/userfaultfd.c 1. Resolve conflict in validate_dst_vma() due to absence of range_in_vma(). 2. Use 'page' instead of 'folio' for BUG_ON on copy_from_user() failure in COPY ioctl. 3. Resolve conflict around mfill_file_over_size(). 4. Resolve conflict in comment for __mcopy_atomic_hugetlb() due to function name change. 5. Resolve conflict due to use of 'flags' instead of 'mode' in __mcopy_atomic_hugetlb(). 6. Use find_vma() and validate_dst_vma() in mwriteprotect_range() instead of find_dst_vma(). Bug: 320478828 Change-Id: I6d5b7101218cb1b11329108c3f31f12bb1caebc6 Signed-off-by: Lokesh Gidra <lokeshgidra@google.com> |
||
Lokesh Gidra
|
a5b6040d5c |
BACKPORT: userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx
Increments and loads to mmap_changing are always in mmap_lock critical section. This ensures that if userspace requests event notification for non-cooperative operations (e.g. mremap), userfaultfd operations don't occur concurrently. This can be achieved by using a separate read-write semaphore in userfaultfd_ctx such that increments are done in write-mode and loads in read-mode, thereby eliminating the dependency on mmap_lock for this purpose. This is a preparatory step before we replace mmap_lock usage with per-vma locks in fill/move ioctls. Link: https://lkml.kernel.org/r/20240215182756.3448972-3-lokeshgidra@google.com Signed-off-by: Lokesh Gidra <lokeshgidra@google.com> Reviewed-by: Mike Rapoport (IBM) <rppt@kernel.org> Reviewed-by: Liam R. Howlett <Liam.Howlett@oracle.com> Cc: Andrea Arcangeli <aarcange@redhat.com> Cc: Axel Rasmussen <axelrasmussen@google.com> Cc: Brian Geffon <bgeffon@google.com> Cc: David Hildenbrand <david@redhat.com> Cc: Jann Horn <jannh@google.com> Cc: Kalesh Singh <kaleshsingh@google.com> Cc: Matthew Wilcox (Oracle) <willy@infradead.org> Cc: Nicolas Geoffray <ngeoffray@google.com> Cc: Peter Xu <peterx@redhat.com> Cc: Ryan Roberts <ryan.roberts@arm.com> Cc: Suren Baghdasaryan <surenb@google.com> Cc: Tim Murray <timmurray@google.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 5e4c24a57b0c126686534b5b159a406c5dd02400) Conflicts: fs/userfaultfd.c include/linux/userfaultfd_k.h mm/userfaultfd.c 1. Functions passing control from fs/userfaultfd.c to mm/userfaultfd.c were renamed after 6.1. a. Replace mfill_atomic_copy() with mcopy_atomic() b. Replace mfill_atomic_zeropage() with mfill_zeropage() c. Replace mfill_atomic_continue() with mcopy_continue() d. Replace mfill_atomic() with __mcopy_atomic() e. Replace mfill_atomic_hugetlb() with __mcopy_atomic_hugetlb() 2. uffd flags were unified into a single parameter after 6.1. Replace 'flags' with 'mcopy_mode' and 'mode'. 3. Fetch dst_mm from dst_vma in __mcopy_atomic_hugetlb(). Bug: 320478828 Change-Id: I77615c36a0c891801c9eb9de3609df4e7f125c39 Signed-off-by: Lokesh Gidra <lokeshgidra@google.com> |
||
Lokesh Gidra
|
ac96edb501 |
BACKPORT: userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
In mfill_atomic_hugetlb(), mmap_changing isn't being checked
again if we drop mmap_lock and reacquire it. When the lock is not held,
mmap_changing could have been incremented. This is also inconsistent
with the behavior in mfill_atomic().
Link: https://lkml.kernel.org/r/20240117223729.1444522-1-lokeshgidra@google.com
Fixes:
|
||
Lokesh Gidra
|
4f658d7723 |
BACKPORT: userfaultfd: change src_folio after ensuring it's unpinned in UFFDIO_MOVE
Commit d7a08838ab74 ("mm: userfaultfd: fix unexpected change to src_folio when UFFDIO_MOVE fails") moved the src_folio->{mapping, index} changing to after clearing the page-table and ensuring that it's not pinned. This avoids failure of swapout+migration and possibly memory corruption. However, the commit missed fixing it in the huge-page case. Link: https://lkml.kernel.org/r/20240404171726.2302435-1-lokeshgidra@google.com Fixes: adef440691ba ("userfaultfd: UFFDIO_MOVE uABI") Signed-off-by: Lokesh Gidra <lokeshgidra@google.com> Acked-by: David Hildenbrand <david@redhat.com> Cc: Andrea Arcangeli <aarcange@redhat.com> Cc: Kalesh Singh <kaleshsingh@google.com> Cc: Lokesh Gidra <lokeshgidra@google.com> Cc: Nicolas Geoffray <ngeoffray@google.com> Cc: Peter Xu <peterx@redhat.com> Cc: Qi Zheng <zhengqi.arch@bytedance.com> Cc: Matthew Wilcox <willy@infradead.org> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit c0205eaf3af9f5db14d4b5ee4abacf4a583c3c50) Conflicts: mm/huge_memory.c 1. Replace folio_move_anon_rmap() with page_move_anon_rmap(). Bug: 274911254 Change-Id: I15a07ea22de7ae38ed20320a73c995c7c48ef42b Signed-off-by: Lokesh Gidra <lokeshgidra@google.com> |
||
Qi Zheng
|
bfb4b24b64 |
BACKPORT: mm: userfaultfd: fix unexpected change to src_folio when UFFDIO_MOVE fails
After ptep_clear_flush(), if we find that src_folio is pinned we will fail UFFDIO_MOVE and put src_folio back to src_pte entry, but the change to src_folio->{mapping,index} is not restored in this process. This is not what we expected, so fix it. This can cause the rmap for that page to be invalid, possibly resulting in memory corruption. At least swapout+migration would no longer work, because we might fail to locate the mappings of that folio. Link: https://lkml.kernel.org/r/20240222080815.46291-1-zhengqi.arch@bytedance.com Fixes: adef440691ba ("userfaultfd: UFFDIO_MOVE uABI") Signed-off-by: Qi Zheng <zhengqi.arch@bytedance.com> Reviewed-by: David Hildenbrand <david@redhat.com> Reviewed-by: Suren Baghdasaryan <surenb@google.com> Cc: Andrea Arcangeli <aarcange@redhat.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit d7a08838ab74652f2b53fee9763f0178278c3a4b) Conflicts: mm/userfaultfd.c 1. Replace folio_move_anon_rmap() with page_move_anon_rmap(). Bug: 274911254 Change-Id: Ie4bf5785244271ab233c6230ed71460fd571bd1a Signed-off-by: Lokesh Gidra <lokeshgidra@google.com> |
||
Suren Baghdasaryan
|
6ecd08eaf4 |
BACKPORT: userfaultfd: handle zeropage moves by UFFDIO_MOVE
Current implementation of UFFDIO_MOVE fails to move zeropages and returns EBUSY when it encounters one. We can handle them by mapping a zeropage at the destination and clearing the mapping at the source. This is done both for ordinary and for huge zeropages. Link: https://lkml.kernel.org/r/20240131175618.2417291-1-surenb@google.com Signed-off-by: Suren Baghdasaryan <surenb@google.com> Reported-by: kernel test robot <lkp@intel.com> Reported-by: Dan Carpenter <dan.carpenter@linaro.org> Closes: https://lore.kernel.org/r/202401300107.U8iMAkTl-lkp@intel.com/ Cc: Alexander Viro <viro@zeniv.linux.org.uk> Cc: Andrea Arcangeli <aarcange@redhat.com> Cc: Axel Rasmussen <axelrasmussen@google.com> Cc: Brian Geffon <bgeffon@google.com> Cc: Christian Brauner <brauner@kernel.org> Cc: David Hildenbrand <david@redhat.com> Cc: Hugh Dickins <hughd@google.com> Cc: Jann Horn <jannh@google.com> Cc: Kalesh Singh <kaleshsingh@google.com> Cc: Liam R. Howlett <Liam.Howlett@oracle.com> Cc: Lokesh Gidra <lokeshgidra@google.com> Cc: Matthew Wilcox <willy@infradead.org> Cc: Michal Hocko <mhocko@suse.com> Cc: Mike Rapoport (IBM) <rppt@kernel.org> Cc: Nicolas Geoffray <ngeoffray@google.com> Cc: Peter Xu <peterx@redhat.com> Cc: Ryan Roberts <ryan.roberts@arm.com> Cc: Shuah Khan <shuah@kernel.org> Cc: ZhangPeng <zhangpeng362@huawei.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit eb1521dad8f391d3f3b88f589db27a288b55b8ed) Conflicts: mm/huge_memory.c 1. Replace folio_move_anon_rmap() with page_move_anon_rmap(). 2. Remove vma parameter in pmd_mkwrite() calls. Bug: 274911254 Change-Id: I271aa365bb3930e7e480d5749b44863eeca74dda Signed-off-by: Lokesh Gidra <lokeshgidra@google.com> |
||
Suren Baghdasaryan
|
e275c2b743 |
UPSTREAM: userfaultfd: avoid huge_zero_page in UFFDIO_MOVE
While testing UFFDIO_MOVE ioctl, syzbot triggered VM_BUG_ON_PAGE caused by a call to PageAnonExclusive() with a huge_zero_page as a parameter. UFFDIO_MOVE does not yet handle zeropages and returns EBUSY when one is encountered. Add an early huge_zero_page check in the PMD move path to avoid this situation. Link: https://lkml.kernel.org/r/20240112013935.1474648-1-surenb@google.com Fixes: adef440691ba ("userfaultfd: UFFDIO_MOVE uABI") Reported-by: syzbot+705209281e36404998f6@syzkaller.appspotmail.com Signed-off-by: Suren Baghdasaryan <surenb@google.com> Acked-by: David Hildenbrand <david@redhat.com> Cc: Andrea Arcangeli <aarcange@redhat.com> Cc: Peter Xu <peterx@redhat.com> Cc: Stephen Rothwell <sfr@canb.auug.org.au> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 5d4747a6cc8e78ce74742d557fc9b7697fcacc95) Bug: 274911254 Change-Id: I7096b02b3a5b101e049608703ee77179d469a434 Signed-off-by: Lokesh Gidra <lokeshgidra@google.com> |
||
Suren Baghdasaryan
|
60c5a0e023 |
UPSTREAM: userfaultfd: fix move_pages_pte() splitting folio under RCU read lock
While testing the split PMD path with lockdep enabled I've got an "Invalid wait context" error caused by split_huge_page_to_list() trying to lock anon_vma->rwsem while inside RCU read section. The issues is due to move_pages_pte() calling split_folio() under RCU read lock. Fix this by unmapping the PTEs and exiting RCU read section before splitting the folio and then retrying. The same retry pattern is used when locking the folio or anon_vma in this function. After splitting the large folio we unlock and release it because after the split the old folio might not be the one that contains the src_addr. Link: https://lkml.kernel.org/r/20240102233256.1077959-1-surenb@google.com Fixes: adef440691ba ("userfaultfd: UFFDIO_MOVE uABI") Signed-off-by: Suren Baghdasaryan <surenb@google.com> Reviewed-by: Peter Xu <peterx@redhat.com> Cc: Al Viro <viro@zeniv.linux.org.uk> Cc: Andrea Arcangeli <aarcange@redhat.com> Cc: Axel Rasmussen <axelrasmussen@google.com> Cc: Brian Geffon <bgeffon@google.com> Cc: Christian Brauner <brauner@kernel.org> Cc: David Hildenbrand <david@redhat.com> Cc: Hugh Dickins <hughd@google.com> Cc: Jann Horn <jannh@google.com> Cc: Kalesh Singh <kaleshsingh@google.com> Cc: Liam R. Howlett <Liam.Howlett@oracle.com> Cc: Lokesh Gidra <lokeshgidra@google.com> Cc: Matthew Wilcox (Oracle) <willy@infradead.org> Cc: Michal Hocko <mhocko@suse.com> Cc: Mike Rapoport (IBM) <rppt@kernel.org> Cc: Nicolas Geoffray <ngeoffray@google.com> Cc: Peter Xu <peterx@redhat.com> Cc: Ryan Roberts <ryan.roberts@arm.com> Cc: Shuah Khan <shuah@kernel.org> Cc: ZhangPeng <zhangpeng362@huawei.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 982ae058b2f08f576e4f3d4055f8916ba789f3d4) Bug: 274911254 Change-Id: I382c6631d821b0ed26d9b15afa78a417dafaeb2e Signed-off-by: Suren Baghdasaryan <surenb@google.com> Signed-off-by: Lokesh Gidra <lokeshgidra@google.com> |
||
Andrea Arcangeli
|
5025ad140e |
BACKPORT: userfaultfd: UFFDIO_MOVE uABI
Implement the uABI of UFFDIO_MOVE ioctl. UFFDIO_COPY performs ~20% better than UFFDIO_MOVE when the application needs pages to be allocated [1]. However, with UFFDIO_MOVE, if pages are available (in userspace) for recycling, as is usually the case in heap compaction algorithms, then we can avoid the page allocation and memcpy (done by UFFDIO_COPY). Also, since the pages are recycled in the userspace, we avoid the need to release (via madvise) the pages back to the kernel [2]. We see over 40% reduction (on a Google pixel 6 device) in the compacting thread's completion time by using UFFDIO_MOVE vs. UFFDIO_COPY. This was measured using a benchmark that emulates a heap compaction implementation using userfaultfd (to allow concurrent accesses by application threads). More details of the usecase are explained in [2]. Furthermore, UFFDIO_MOVE enables moving swapped-out pages without touching them within the same vma. Today, it can only be done by mremap, however it forces splitting the vma. [1] https://lore.kernel.org/all/1425575884-2574-1-git-send-email-aarcange@redhat.com/ [2] https://lore.kernel.org/linux-mm/CA+EESO4uO84SSnBhArH4HvLNhaUQ5nZKNKXqxRCyjniNVjp0Aw@mail.gmail.com/ Update for the ioctl_userfaultfd(2) manpage: UFFDIO_MOVE (Since Linux xxx) Move a continuous memory chunk into the userfault registered range and optionally wake up the blocked thread. The source and destination addresses and the number of bytes to move are specified by the src, dst, and len fields of the uffdio_move structure pointed to by argp: struct uffdio_move { __u64 dst; /* Destination of move */ __u64 src; /* Source of move */ __u64 len; /* Number of bytes to move */ __u64 mode; /* Flags controlling behavior of move */ __s64 move; /* Number of bytes moved, or negated error */ }; The following value may be bitwise ORed in mode to change the behavior of the UFFDIO_MOVE operation: UFFDIO_MOVE_MODE_DONTWAKE Do not wake up the thread that waits for page-fault resolution UFFDIO_MOVE_MODE_ALLOW_SRC_HOLES Allow holes in the source virtual range that is being moved. When not specified, the holes will result in ENOENT error. When specified, the holes will be accounted as successfully moved memory. This is mostly useful to move hugepage aligned virtual regions without knowing if there are transparent hugepages in the regions or not, but preventing the risk of having to split the hugepage during the operation. The move field is used by the kernel to return the number of bytes that was actually moved, or an error (a negated errno- style value). If the value returned in move doesn't match the value that was specified in len, the operation fails with the error EAGAIN. The move field is output-only; it is not read by the UFFDIO_MOVE operation. The operation may fail for various reasons. Usually, remapping of pages that are not exclusive to the given process fail; once KSM might deduplicate pages or fork() COW-shares pages during fork() with child processes, they are no longer exclusive. Further, the kernel might only perform lightweight checks for detecting whether the pages are exclusive, and return -EBUSY in case that check fails. To make the operation more likely to succeed, KSM should be disabled, fork() should be avoided or MADV_DONTFORK should be configured for the source VMA before fork(). This ioctl(2) operation returns 0 on success. In this case, the entire area was moved. On error, -1 is returned and errno is set to indicate the error. Possible errors include: EAGAIN The number of bytes moved (i.e., the value returned in the move field) does not equal the value that was specified in the len field. EINVAL Either dst or len was not a multiple of the system page size, or the range specified by src and len or dst and len was invalid. EINVAL An invalid bit was specified in the mode field. ENOENT The source virtual memory range has unmapped holes and UFFDIO_MOVE_MODE_ALLOW_SRC_HOLES is not set. EEXIST The destination virtual memory range is fully or partially mapped. EBUSY The pages in the source virtual memory range are either pinned or not exclusive to the process. The kernel might only perform lightweight checks for detecting whether the pages are exclusive. To make the operation more likely to succeed, KSM should be disabled, fork() should be avoided or MADV_DONTFORK should be configured for the source virtual memory area before fork(). ENOMEM Allocating memory needed for the operation failed. ESRCH The target process has exited at the time of a UFFDIO_MOVE operation. Link: https://lkml.kernel.org/r/20231206103702.3873743-3-surenb@google.com Signed-off-by: Andrea Arcangeli <aarcange@redhat.com> Signed-off-by: Suren Baghdasaryan <surenb@google.com> Cc: Al Viro <viro@zeniv.linux.org.uk> Cc: Axel Rasmussen <axelrasmussen@google.com> Cc: Brian Geffon <bgeffon@google.com> Cc: Christian Brauner <brauner@kernel.org> Cc: David Hildenbrand <david@redhat.com> Cc: Hugh Dickins <hughd@google.com> Cc: Jann Horn <jannh@google.com> Cc: Kalesh Singh <kaleshsingh@google.com> Cc: Liam R. Howlett <Liam.Howlett@oracle.com> Cc: Lokesh Gidra <lokeshgidra@google.com> Cc: Matthew Wilcox (Oracle) <willy@infradead.org> Cc: Michal Hocko <mhocko@suse.com> Cc: Mike Rapoport (IBM) <rppt@kernel.org> Cc: Nicolas Geoffray <ngeoffray@google.com> Cc: Peter Xu <peterx@redhat.com> Cc: Ryan Roberts <ryan.roberts@arm.com> Cc: Shuah Khan <shuah@kernel.org> Cc: ZhangPeng <zhangpeng362@huawei.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit adef440691bab824e39c1b17382322d195e1fab0) Conflicts: mm/huge_memory.c mm/userfaultfd.c 1. Add vma parameter in mmu_notifier_range_init() calls. 2. Replace folio_move_anon_rmap() with page_move_anon_rmap(). 3. Remove vma parameter in pmd_mkwrite() calls. 4. Replace pte_offset_map_nolock() with pte_offset_map()+pte_lockptr() combo. 5. Remove VM_SHADOW_STACK in vma_move_compatible(). 6. Replace pmdp_get_lockless() with pmd_read_atomic(). Bug: 274911254 Change-Id: I1116f15a395f1a8bac176906f7f9c2411e59dc54 Signed-off-by: Suren Baghdasaryan <surenb@google.com> Signed-off-by: Lokesh Gidra <lokeshgidra@google.com> |
||
Andrea Arcangeli
|
25db7c13d8 |
UPSTREAM: mm/rmap: support move to different root anon_vma in folio_move_anon_rmap()
Patch series "userfaultfd move option", v6. This patch series introduces UFFDIO_MOVE feature to userfaultfd, which has long been implemented and maintained by Andrea in his local tree [1], but was not upstreamed due to lack of use cases where this approach would be better than allocating a new page and copying the contents. Previous upstraming attempts could be found at [6] and [7]. UFFDIO_COPY performs ~20% better than UFFDIO_MOVE when the application needs pages to be allocated [2]. However, with UFFDIO_MOVE, if pages are available (in userspace) for recycling, as is usually the case in heap compaction algorithms, then we can avoid the page allocation and memcpy (done by UFFDIO_COPY). Also, since the pages are recycled in the userspace, we avoid the need to release (via madvise) the pages back to the kernel [3]. We see over 40% reduction (on a Google pixel 6 device) in the compacting thread's completion time by using UFFDIO_MOVE vs. UFFDIO_COPY. This was measured using a benchmark that emulates a heap compaction implementation using userfaultfd (to allow concurrent accesses by application threads). More details of the usecase are explained in [3]. Furthermore, UFFDIO_MOVE enables moving swapped-out pages without touching them within the same vma. Today, it can only be done by mremap, however it forces splitting the vma. TODOs for follow-up improvements: - cross-mm support. Known differences from single-mm and missing pieces: - memcg recharging (might need to isolate pages in the process) - mm counters - cross-mm deposit table moves - cross-mm test - document the address space where src and dest reside in struct uffdio_move - TLB flush batching. Will require extensive changes to PTL locking in move_pages_pte(). OTOH that might let us reuse parts of mremap code. This patch (of 5): For now, folio_move_anon_rmap() was only used to move a folio to a different anon_vma after fork(), whereby the root anon_vma stayed unchanged. For that, it was sufficient to hold the folio lock when calling folio_move_anon_rmap(). However, we want to make use of folio_move_anon_rmap() to move folios between VMAs that have a different root anon_vma. As folio_referenced() performs an RMAP walk without holding the folio lock but only holding the anon_vma in read mode, holding the folio lock is insufficient. When moving to an anon_vma with a different root anon_vma, we'll have to hold both, the folio lock and the anon_vma lock in write mode. Consequently, whenever we succeeded in folio_lock_anon_vma_read() to read-lock the anon_vma, we have to re-check if the mapping was changed in the meantime. If that was the case, we have to retry. Note that folio_move_anon_rmap() must only be called if the anon page is exclusive to a process, and must not be called on KSM folios. This is a preparation for UFFDIO_MOVE, which will hold the folio lock, the anon_vma lock in write mode, and the mmap_lock in read mode. Link: https://lkml.kernel.org/r/20231206103702.3873743-1-surenb@google.com Link: https://lkml.kernel.org/r/20231206103702.3873743-2-surenb@google.com Signed-off-by: Andrea Arcangeli <aarcange@redhat.com> Signed-off-by: Suren Baghdasaryan <surenb@google.com> Acked-by: Peter Xu <peterx@redhat.com> Cc: Al Viro <viro@zeniv.linux.org.uk> Cc: Axel Rasmussen <axelrasmussen@google.com> Cc: Brian Geffon <bgeffon@google.com> Cc: Christian Brauner <brauner@kernel.org> Cc: David Hildenbrand <david@redhat.com> Cc: Hugh Dickins <hughd@google.com> Cc: Jann Horn <jannh@google.com> Cc: Kalesh Singh <kaleshsingh@google.com> Cc: kernel-team@android.com Cc: Liam R. Howlett <Liam.Howlett@oracle.com> Cc: Lokesh Gidra <lokeshgidra@google.com> Cc: Matthew Wilcox (Oracle) <willy@infradead.org> Cc: Michal Hocko <mhocko@suse.com> Cc: Mike Rapoport (IBM) <rppt@kernel.org> Cc: Nicolas Geoffray <ngeoffray@google.com> Cc: Ryan Roberts <ryan.roberts@arm.com> Cc: Shuah Khan <shuah@kernel.org> Cc: ZhangPeng <zhangpeng362@huawei.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 880a99b60d467eefd96322e27b0a8c0b805dfa43) Bug: 274911254 Change-Id: Iad9619c0273e050af26356f66ae9fc88b56d68bd Signed-off-by: Suren Baghdasaryan <surenb@google.com> Signed-off-by: Lokesh Gidra <lokeshgidra@google.com> |
||
Carlos Galo
|
338203a817 |
BACKPORT: mm: update mark_victim tracepoints fields
The current implementation of the mark_victim tracepoint provides only the
process ID (pid) of the victim process. This limitation poses challenges
for userspace tools requiring real-time OOM analysis and intervention.
Although this information is available from the kernel logs, it’s not
the appropriate format to provide OOM notifications. In Android, BPF
programs are used with the mark_victim trace events to notify userspace of
an OOM kill. For consistency, update the trace event to include the same
information about the OOMed victim as the kernel logs.
- UID
In Android each installed application has a unique UID. Including
the `uid` assists in correlating OOM events with specific apps.
- Process Name (comm)
Enables identification of the affected process.
- OOM Score
Will allow userspace to get additional insight of the relative kill
priority of the OOM victim. In Android, the oom_score_adj is used to
categorize app state (foreground, background, etc.), which aids in
analyzing user-perceptible impacts of OOM events [1].
- Total VM, RSS Stats, and pgtables
Amount of memory used by the victim that will, potentially, be freed up
by killing it.
[1]
|
||
Carlos Galo
|
97808981ed |
Revert "FROMGIT: BACKPORT: mm: update mark_victim tracepoints fields"
This reverts commit
|
||
Minchan Kim
|
babe7ef868 |
ANDROID: export two function to reclaim memory
Export two functions to help memory reclaim. Bug: 323406883 Change-Id: I099d414c9b3648224ab077b9929c6622b2d4228a Signed-off-by: Minchan Kim <minchan@google.com> |
||
Minchan Kim
|
66193f866d |
ANDROID: add reclaim tune parameter functions
This patch adds two exported functions to set/get reclaim parameters. Bug: 323406883 Change-Id: I8c29073dba3e77cb5db7f45b640518deae04b8a9 Signed-off-by: Minchan Kim <minchan@google.com> |
||
Charan Teja Kalla
|
5dd0c4814f |
UPSTREAM: mm: page_alloc: unreserve highatomic page blocks before oom
__alloc_pages_direct_reclaim() is called from slowpath allocation where
high atomic reserves can be unreserved after there is a progress in
reclaim and yet no suitable page is found. Later should_reclaim_retry()
gets called from slow path allocation to decide if the reclaim needs to be
retried before OOM kill path is taken.
should_reclaim_retry() checks the available(reclaimable + free pages)
memory against the min wmark levels of a zone and returns:
a) true, if it is above the min wmark so that slow path allocation will
do the reclaim retries.
b) false, thus slowpath allocation takes oom kill path.
should_reclaim_retry() can also unreserves the high atomic reserves **but
only after all the reclaim retries are exhausted.**
In a case where there are almost none reclaimable memory and free pages
contains mostly the high atomic reserves but allocation context can't use
these high atomic reserves, makes the available memory below min wmark
levels hence false is returned from should_reclaim_retry() leading the
allocation request to take OOM kill path. This can turn into a early oom
kill if high atomic reserves are holding lot of free memory and
unreserving of them is not attempted.
(early)OOM is encountered on a VM with the below state:
[ 295.998653] Normal free:7728kB boost:0kB min:804kB low:1004kB
high:1204kB reserved_highatomic:8192KB active_anon:4kB inactive_anon:0kB
active_file:24kB inactive_file:24kB unevictable:1220kB writepending:0kB
present:70732kB managed:49224kB mlocked:0kB bounce:0kB free_pcp:688kB
local_pcp:492kB free_cma:0kB
[ 295.998656] lowmem_reserve[]: 0 32
[ 295.998659] Normal: 508*4kB (UMEH) 241*8kB (UMEH) 143*16kB (UMEH)
33*32kB (UH) 7*64kB (UH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB
0*4096kB = 7752kB
Per above log, the free memory of ~7MB exist in the high atomic reserves
is not freed up before falling back to oom kill path.
Fix it by trying to unreserve the high atomic reserves in
should_reclaim_retry() before __alloc_pages_direct_reclaim() can fallback
to oom kill path.
Bug: 332219324
Link: https://lkml.kernel.org/r/1700823445-27531-1-git-send-email-quic_charante@quicinc.com
Fixes:
|
||
Charan Teja Kalla
|
6d3db504d1 |
UPSTREAM: mm: page_alloc: enforce minimum zone size to do high atomic reserves
Highatomic reserves are set to roughly 1% of zone for maximum and a pageblock size for minimum. Encountered a system with the below configuration: Normal free:7728kB boost:0kB min:804kB low:1004kB high:1204kB reserved_highatomic:8192KB managed:49224kB On such systems, even a single pageblock makes highatomic reserves are set to ~8% of the zone memory. This high value can easily exert pressure on the zone. Per discussion with Michal and Mel, it is not much useful to reserve the memory for highatomic allocations on such small systems[1]. Since the minimum size for high atomic reserves is always going to be a pageblock size and if 1% of zone managed pages is going to be below pageblock size, don't reserve memory for high atomic allocations. Thanks Michal for this suggestion[2]. Since no memory is being reserved for high atomic allocations and if respective allocation failures are seen, this patch can be reverted. [1] https://lore.kernel.org/linux-mm/20231117161956.d3yjdxhhm4rhl7h2@techsingularity.net/ [2] https://lore.kernel.org/linux-mm/ZVYRJMUitykepLRy@tiehlicka/ Bug: 332219324 Link: https://lkml.kernel.org/r/c3a2a48e2cfe08176a80eaf01c110deb9e918055.1700821416.git.quic_charante@quicinc.com Change-Id: Id059b63bd6ee68b3a2cd1c4b44613234a42d0a46 (cherry picked from commit 9cd20f3fe045af95a8fe7a12328b21bfd2f3b8bf) Signed-off-by: Charan Teja Kalla <quic_charante@quicinc.com> Acked-by: David Rientjes <rientjes@google.com> Cc: David Hildenbrand <david@redhat.com> Cc: Johannes Weiner <hannes@cmpxchg.org> Cc: Mel Gorman <mgorman@techsingularity.net> Cc: Michal Hocko <mhocko@suse.com> Cc: Pavankumar Kondeti <quic_pkondeti@quicinc.com> Cc: Vlastimil Babka <vbabka@suse.cz> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> |
||
Charan Teja Kalla
|
58699757f4 |
UPSTREAM: mm: page_alloc: correct high atomic reserve calculations
Patch series "mm: page_alloc: fixes for high atomic reserve caluculations", v3. The state of the system where the issue exposed shown in oom kill logs: [ 295.998653] Normal free:7728kB boost:0kB min:804kB low:1004kB high:1204kB reserved_highatomic:8192KB active_anon:4kB inactive_anon:0kB active_file:24kB inactive_file:24kB unevictable:1220kB writepending:0kB present:70732kB managed:49224kB mlocked:0kB bounce:0kB free_pcp:688kBlocal_pcp:492kB free_cma:0kB [ 295.998656] lowmem_reserve[]: 0 32 [ 295.998659] Normal: 508*4kB (UMEH) 241*8kB (UMEH) 143*16kB (UMEH) 33*32kB (UH) 7*64kB (UH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7752kB From the above, it is seen that ~16MB of memory reserved for high atomic reserves against the expectation of 1% reserves which is fixed in the 1st patch. Don't reserve the high atomic page blocks if 1% of zone memory size is below a pageblock size. This patch (of 2): reserve_highatomic_pageblock() aims to reserve the 1% of the managed pages of a zone, which is used for the high order atomic allocations. It uses the below calculation to reserve: static void reserve_highatomic_pageblock(struct page *page, ....) { ....... max_managed = (zone_managed_pages(zone) / 100) + pageblock_nr_pages; if (zone->nr_reserved_highatomic >= max_managed) goto out; zone->nr_reserved_highatomic += pageblock_nr_pages; set_pageblock_migratetype(page, MIGRATE_HIGHATOMIC); move_freepages_block(zone, page, MIGRATE_HIGHATOMIC, NULL); out: .... } Since we are always appending the 1% of zone managed pages count to pageblock_nr_pages, the minimum it is turning into 2 pageblocks as the nr_reserved_highatomic is incremented/decremented in pageblock sizes. Encountered a system(actually a VM running on the Linux kernel) with the below zone configuration: Normal free:7728kB boost:0kB min:804kB low:1004kB high:1204kB reserved_highatomic:8192KB managed:49224kB The existing calculations making it to reserve the 8MB(with pageblock size of 4MB) i.e. 16% of the zone managed memory. Reserving such high amount of memory can easily exert memory pressure in the system thus may lead into unnecessary reclaims till unreserving of high atomic reserves. Since high atomic reserves are managed in pageblock size granules, as MIGRATE_HIGHATOMIC is set for such pageblock, fix the calculations for high atomic reserves as, minimum is pageblock size , maximum is approximately 1% of the zone managed pages. Bug: 332219324 Link: https://lkml.kernel.org/r/cover.1700821416.git.quic_charante@quicinc.com Link: https://lkml.kernel.org/r/1660034138397b82a0a8b6ae51cbe96bd583d89e.1700821416.git.quic_charante@quicinc.com Change-Id: Icc15fb88ef6166f691f5aa14311bc45bff972b99 (cherry picked from commit d68e39fc45f70e35eb74df2128d315c1d91e4dc4) Signed-off-by: Charan Teja Kalla <quic_charante@quicinc.com> Acked-by: Mel Gorman <mgorman@techsingularity.net> Acked-by: David Rientjes <rientjes@google.com> Cc: David Hildenbrand <david@redhat.com> Cc: Johannes Weiner <hannes@cmpxchg.org> Cc: Michal Hocko <mhocko@suse.com> Cc: Pavankumar Kondeti <quic_pkondeti@quicinc.com> Cc: Vlastimil Babka <vbabka@suse.cz> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> |
||
Greg Kroah-Hartman
|
3ca4271578 |
Reapply "Merge tag 'android14-6.1.75_r00' into android14-6.1"
This reverts commit
|
||
Zi Yan
|
176b8fe524 |
FROMLIST: mm/migrate: set swap entry values of THP tail pages properly.
The tail pages in a THP can have swap entry information stored in their private field. When migrating to a new page, all tail pages of the new page need to update ->private to avoid future data corruption. This fix is stable-only, since after commit 07e09c483cbe ("mm/huge_memory: work on folio->swap instead of page->private when splitting folio"), subpages of a swapcached THP no longer requires the maintenance. Adding THPs to the swapcache was introduced in commit |
||
Richard Chang
|
4a85f45e4e |
BACKPORT: FROMGIT: mm: add alloc_contig_migrate_range allocation statistics
alloc_contig_migrate_range has every information to be able to understand
big contiguous allocation latency. For example, how many pages are
migrated, how many times they were needed to unmap from page tables.
This patch adds the trace event to collect the allocation statistics. In
the field, it was quite useful to understand CMA allocation latency.
[akpm@linux-foundation.org: a/trace_mm_alloc_config_migrate_range_info_enabled/trace_mm_alloc_contig_migrate_range_info_enabled]
Link: https://lkml.kernel.org/r/20240228051127.2859472-1-richardycc@google.com
Signed-off-by: Richard Chang <richardycc@google.com>
Reviewed-by: Steven Rostedt (Google) <rostedt@goodmis.org.
Cc: Martin Liu <liumartin@google.com>
Cc: "Masami Hiramatsu (Google)" <mhiramat@kernel.org>
Cc: Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
Cc: Minchan Kim <minchan@kernel.org>
Cc: Suren Baghdasaryan <surenb@google.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Bug: 315897534
(cherry picked from commit c8b36003121834cb77fcaf8a1ce0a454d7a97891
https://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm.git mm-stable)
[richardycc: slight modification for android change
|
||
Richard Chang
|
8bd9771065 |
ANDROID: vendor_hooks: Export cma_alloc trace points
For cma_alloc latency measurement. Bug: 315897033 Change-Id: I5941c0e0017728dc2139d5fad073f8b58f4efa29 Signed-off-by: Richard Chang <richardycc@google.com> |
||
Todd Kjos
|
6bad1052c2 |
Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1"
This reverts commit
|
||
Greg Kroah-Hartman
|
c3a1a1e97e |
Merge branch 'android14-6.1' into branch 'android14-6.1-lts'
Backmerge the latest android14-6.1 changes into the lts branch to keep up to date. Contains the following commits: * |
||
T.J. Mercier
|
b6be1a36f7 |
FROMGIT: mm: memcg: don't periodically flush stats when memcg is disabled
The root memcg is onlined even when memcg is disabled. When it's onlined
a 2 second periodic stat flush is started, but no stat flushing is
required when memcg is disabled because there can be no child memcgs.
Most calls to flush memcg stats are avoided when memcg is disabled as a
result of the mem_cgroup_disabled check added in 7d7ef0a4686a ("mm: memcg:
restore subtree stats flushing"), but the periodic flushing started in
mem_cgroup_css_online is not. Skip it.
Link: https://lkml.kernel.org/r/20240126211927.1171338-1-tjmercier@google.com
Fixes:
|
||
Todd Kjos
|
f27fc6ba23 | Merge "Merge tag 'android14-6.1.68_r00' into branch 'android14-6.1'" into android14-6.1 | ||
Carlos Galo
|
6b4c816d17 |
FROMGIT: BACKPORT: mm: update mark_victim tracepoints fields
The current implementation of the mark_victim tracepoint provides only the process ID (pid) of the victim process. This limitation poses challenges for userspace tools that need additional information about the OOM victim. The association between pid and the additional data may be lost after the kill, making it difficult for userspace to correlate the OOM event with the specific process. In order to mitigate this limitation, add the following fields: - UID In Android each installed application has a unique UID. Including the `uid` assists in correlating OOM events with specific apps. - Process Name (comm) Enables identification of the affected process. - OOM Score Allows userspace to get additional insights of the relative kill priority of the OOM victim. Link: https://lkml.kernel.org/r/20240111210539.636607-1-carlosgalo@google.com Change-Id: Icc3ed013a9dfff9bb09f1d7588757e6028c17069 Signed-off-by: Carlos Galo <carlosgalo@google.com> Cc: Steven Rostedt <rostedt@goodmis.org> Cc: Suren Baghdasaryan <surenb@google.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 649ffb4cbb90a7f60f17dd74e57d814e762ea01d mm-unstable) [ carlosgalo: Manually added struct cred change in mark_oom_victim function ] Bug: 315560026 Change-Id: I81fb6f3447f432100ad4cd25e22db23768003388 Signed-off-by: Carlos Galo <carlosgalo@google.com> |
||
Srinivasarao Pathipati
|
5e321b7e89 |
Merge keystone/android14-6.1-keystone-qcom-release.6.1.57 (daf56c4 ) into qcom-6.1
* refs/heads/tmp-daf56c4: FROMLIST: mm: migrate high-order folios in swap cache correctly Change-Id: Ief52fd313a8a922caa272b8050775494170d6ad2 Upstream-Build: ks_qcom-android14-6.1-keystone-qcom-release@11305096 UKQ2.240112.001 Signed-off-by: Srinivasarao Pathipati <quic_c_spathi@quicinc.com> |
||
Greg Kroah-Hartman
|
732ef8a408 |
Merge branch 'android14-6.1' into branch 'android14-6.1-lts'
This syncs up the -lts branch with the changes in the non-lts branch, specifically needed for the ABI symbol updates to allow the build servers to keep running properly. Included in here are commits: * |
||
Greg Kroah-Hartman
|
e1b12db2de |
Merge 6.1.72 into android14-6.1-lts
Changes in 6.1.72 keys, dns: Fix missing size check of V1 server-list header block: Don't invalidate pagecache for invalid falloc modes ALSA: hda/realtek: enable SND_PCI_QUIRK for hp pavilion 14-ec1xxx series ALSA: hda/realtek: fix mute/micmute LEDs for a HP ZBook ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP ProBook 440 G6 mptcp: prevent tcp diag from closing listener subflows Revert "PCI/ASPM: Remove pcie_aspm_pm_state_change()" drm/mgag200: Fix gamma lut not initialized for G200ER, G200EV, G200SE cifs: cifs_chan_is_iface_active should be called with chan_lock held cifs: do not depend on release_iface for maintaining iface_list KVM: x86/pmu: fix masking logic for MSR_CORE_PERF_GLOBAL_CTRL wifi: iwlwifi: pcie: don't synchronize IRQs from IRQ drm/bridge: ti-sn65dsi86: Never store more than msg->size bytes in AUX xfer netfilter: use skb_ip_totlen and iph_totlen netfilter: nf_tables: set transport offset from mac header for netdev/egress nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local octeontx2-af: Fix marking couple of structure as __packed drm/i915/dp: Fix passing the correct DPCD_REV for drm_dp_set_phy_test_pattern ice: Fix link_down_on_close message ice: Shut down VSI with "link-down-on-close" enabled i40e: Fix filter input checks to prevent config with invalid values igc: Report VLAN EtherType matching back to user igc: Check VLAN TCI mask igc: Check VLAN EtherType mask ASoC: fsl_rpmsg: Fix error handler with pm_runtime_enable ASoC: mediatek: mt8186: fix AUD_PAD_TOP register and offset mlxbf_gige: fix receive packet race condition net: sched: em_text: fix possible memory leak in em_text_destroy() r8169: Fix PCI error on system resume can: raw: add support for SO_MARK net-timestamp: extend SOF_TIMESTAMPING_OPT_ID to HW timestamps net: annotate data-races around sk->sk_tsflags net: annotate data-races around sk->sk_bind_phc net: Implement missing getsockopt(SO_TIMESTAMPING_NEW) selftests: bonding: do not set port down when adding to bond ARM: sun9i: smp: Fix array-index-out-of-bounds read in sunxi_mc_smp_init sfc: fix a double-free bug in efx_probe_filters net: bcmgenet: Fix FCS generation for fragmented skbuffs netfilter: nft_immediate: drop chain reference counter on error net: Save and restore msg_namelen in sock_sendmsg i40e: fix use-after-free in i40e_aqc_add_filters() ASoC: meson: g12a-toacodec: Validate written enum values ASoC: meson: g12a-tohdmitx: Validate written enum values ASoC: meson: g12a-toacodec: Fix event generation ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux i40e: Restore VF MSI-X state during PCI reset igc: Fix hicredit calculation net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues net/smc: fix invalid link access in dumping SMC-R connections octeontx2-af: Always configure NIX TX link credits based on max frame size octeontx2-af: Re-enable MAC TX in otx2_stop processing asix: Add check for usbnet_get_endpoints net: ravb: Wait for operating mode to be applied bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters() net: Implement missing SO_TIMESTAMPING_NEW cmsg support selftests: secretmem: floor the memory size to the multiple of page_size cpu/SMT: Create topology_smt_thread_allowed() cpu/SMT: Make SMT control more robust against enumeration failures srcu: Fix callbacks acceleration mishandling bpf, x64: Fix tailcall infinite loop bpf, x86: Simplify the parsing logic of structure parameters bpf, x86: save/restore regs with BPF_DW size net: Declare MSG_SPLICE_PAGES internal sendmsg() flag udp: Convert udp_sendpage() to use MSG_SPLICE_PAGES splice, net: Add a splice_eof op to file-ops and socket-ops ipv4, ipv6: Use splice_eof() to flush udp: introduce udp->udp_flags udp: move udp->no_check6_tx to udp->udp_flags udp: move udp->no_check6_rx to udp->udp_flags udp: move udp->gro_enabled to udp->udp_flags udp: move udp->accept_udp_{l4|fraglist} to udp->udp_flags udp: lockless UDP_ENCAP_L2TPINUDP / UDP_GRO udp: annotate data-races around udp->encap_type wifi: iwlwifi: yoyo: swap cdb and jacket bits values arm64: dts: qcom: sdm845: align RPMh regulator nodes with bindings arm64: dts: qcom: sdm845: Fix PSCI power domain names fbdev: imsttfb: Release framebuffer and dealloc cmap on error path fbdev: imsttfb: fix double free in probe() bpf: decouple prune and jump points bpf: remove unnecessary prune and jump points bpf: Remove unused insn_cnt argument from visit_[func_call_]insn() bpf: clean up visit_insn()'s instruction processing bpf: Support new 32bit offset jmp instruction bpf: handle ldimm64 properly in check_cfg() bpf: fix precision backtracking instruction iteration blk-mq: make sure active queue usage is held for bio_integrity_prep() net/mlx5: Increase size of irq name buffer s390/mm: add missing arch_set_page_dat() call to vmem_crst_alloc() s390/cpumf: support user space events for counting f2fs: clean up i_compress_flag and i_compress_level usage f2fs: convert to use bitmap API f2fs: assign default compression level f2fs: set the default compress_level on ioctl selftests: mptcp: fix fastclose with csum failure selftests: mptcp: set FAILING_LINKS in run_tests media: camss: sm8250: Virtual channels for CSID media: qcom: camss: Fix set CSI2_RX_CFG1_VC_MODE when VC is greater than 3 ext4: convert move_extent_per_page() to use folios khugepage: replace try_to_release_page() with filemap_release_folio() memory-failure: convert truncate_error_page() to use folio mm: merge folio_has_private()/filemap_release_folio() call pairs mm, netfs, fscache: stop read optimisation when folio removed from pagecache filemap: add a per-mapping stable writes flag block: update the stable_writes flag in bdev_add smb: client: fix missing mode bits for SMB symlinks net: dpaa2-eth: rearrange variable in dpaa2_eth_get_ethtool_stats dpaa2-eth: recycle the RX buffer only after all processing done ethtool: don't propagate EOPNOTSUPP from dumps bpf, sockmap: af_unix stream sockets need to hold ref for pair sock firmware: arm_scmi: Fix frequency truncation by promoting multiplier type ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 genirq/affinity: Remove the 'firstvec' parameter from irq_build_affinity_masks genirq/affinity: Pass affinity managed mask array to irq_build_affinity_masks genirq/affinity: Don't pass irq_affinity_desc array to irq_build_affinity_masks genirq/affinity: Rename irq_build_affinity_masks as group_cpus_evenly genirq/affinity: Move group_cpus_evenly() into lib/ lib/group_cpus.c: avoid acquiring cpu hotplug lock in group_cpus_evenly mm/memory_hotplug: add missing mem_hotplug_lock mm/memory_hotplug: fix error handling in add_memory_resource() net: sched: call tcf_ct_params_free to free params in tcf_ct_init netfilter: flowtable: allow unidirectional rules netfilter: flowtable: cache info of last offload net/sched: act_ct: offload UDP NEW connections net/sched: act_ct: Fix promotion of offloaded unreplied tuple netfilter: flowtable: GC pushes back packets to classic path net/sched: act_ct: Take per-cb reference to tcf_ct_flow_table octeontx2-af: Fix pause frame configuration octeontx2-af: Support variable number of lmacs btrfs: fix qgroup_free_reserved_data int overflow btrfs: mark the len field in struct btrfs_ordered_sum as unsigned ring-buffer: Fix 32-bit rb_time_read() race with rb_time_cmpxchg() firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards x86/kprobes: fix incorrect return address calculation in kprobe_emulate_call_indirect i2c: core: Fix atomic xfer check for non-preempt config mm: fix unmap_mapping_range high bits shift bug drm/amdgpu: skip gpu_info fw loading on navi12 drm/amd/display: add nv12 bounding box mmc: meson-mx-sdhc: Fix initialization frozen issue mmc: rpmb: fixes pause retune on all RPMB partitions. mmc: core: Cancel delayed work before releasing host mmc: sdhci-sprd: Fix eMMC init failure after hw reset genirq/affinity: Only build SMP-only helper functions on SMP kernels f2fs: compress: fix to assign compress_level for lz4 correctly net/sched: act_ct: additional checks for outdated flows net/sched: act_ct: Always fill offloading tuple iifidx bpf: Fix a verifier bug due to incorrect branch offset comparison with cpu=v4 bpf: syzkaller found null ptr deref in unix_bpf proto add media: qcom: camss: Comment CSID dt_id field smb3: Replace smb2pdu 1-element arrays with flex-arrays Revert "interconnect: qcom: sm8250: Enable sync_state" Linux 6.1.72 Change-Id: Id00eb2ae1159d4d5fa0ef914e672c5669cbf5b0a Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
Greg Kroah-Hartman
|
8eac30b25e |
This is the 6.1.71 stable release
-----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmWYD8QACgkQONu9yGCS aT5cEA//UKwVnselP3QHU6yEm2j8Vuq5IOEIqIeYTDTyS7TGP83SsyM4n2KRlTwC /vaY3HWNsZHLqsNICPOPSdQn9STa7MYTnf/ackBbPglDnDz/A6mSB3zkXtCKFm6+ UBmk6Y8pZwpdvk3aa6Z62Kr5bGGHdzvXdiJitERLlD2PFUOZT9/IHSncGnts3TQv PjFXy1KVIGsThKbtjtYPpa100RAti5HeLv/NbsaVbuKYMME/QCFmqyNRAp9k2iHx 3nkze70aoREShEDjaLkcsirzwRKJu7qqNriYLt+wd7HmcD328R2UlTR8L3ZM0xOq qxBHnzbFtQyGR7NAudi2pStqwctPhFP6vRz1aJvt+w9tmbeKAWQWMd2pNvG8GhJm nxYFGyPLzTgPifK5SELCNIW4WXf8rnrRNgZ+Ph/JIGuhp+603//ATHRlVEwHcnl+ M0GRbL06nWFVvfdKCYuu0autb9sW5T/vq02cbE5vRVVaziazry8S8EmxYQyOg9X/ CBAd1XTybVZki9VkIP5zbdvWJL3LhFfsabBFy7TPZor/YCJQDvxzw1iwtY/BPVDT MryHjrYwH/n5RvibANRcTbCamMQY4IrJ4X3afJGgh7BK5N5C5ug4HYJ7oG5QB++x xC4A5x3L6D9SE/St8hFWghjYcd6lFcjlz1wJ5MyLImwYqfr8DnY= =Vt0s -----END PGP SIGNATURE----- Merge 6.1.71 into android14-6.1-lts Changes in 6.1.71 ksmbd: replace one-element arrays with flexible-array members ksmbd: set SMB2_SESSION_FLAG_ENCRYPT_DATA when enforcing data encryption for this share ksmbd: use F_SETLK when unlocking a file ksmbd: Fix resource leak in smb2_lock() ksmbd: Convert to use sysfs_emit()/sysfs_emit_at() APIs ksmbd: Implements sess->rpc_handle_list as xarray ksmbd: fix typo, syncronous->synchronous ksmbd: Remove duplicated codes ksmbd: update Kconfig to note Kerberos support and fix indentation ksmbd: Fix spelling mistake "excceed" -> "exceeded" ksmbd: Fix parameter name and comment mismatch ksmbd: remove unused is_char_allowed function ksmbd: delete asynchronous work from list ksmbd: set NegotiateContextCount once instead of every inc ksmbd: avoid duplicate negotiate ctx offset increments ksmbd: remove unused compression negotiate ctx packing fs: introduce lock_rename_child() helper ksmbd: fix racy issue from using ->d_parent and ->d_name ksmbd: fix uninitialized pointer read in ksmbd_vfs_rename() ksmbd: fix uninitialized pointer read in smb2_create_link() ksmbd: call putname after using the last component ksmbd: fix posix_acls and acls dereferencing possible ERR_PTR() ksmbd: add mnt_want_write to ksmbd vfs functions ksmbd: remove unused ksmbd_tree_conn_share function ksmbd: use kzalloc() instead of __GFP_ZERO ksmbd: return a literal instead of 'err' in ksmbd_vfs_kern_path_locked() ksmbd: Change the return value of ksmbd_vfs_query_maximal_access to void ksmbd: use kvzalloc instead of kvmalloc ksmbd: Replace the ternary conditional operator with min() ksmbd: Use struct_size() helper in ksmbd_negotiate_smb_dialect() ksmbd: Replace one-element array with flexible-array member ksmbd: Fix unsigned expression compared with zero ksmbd: check if a mount point is crossed during path lookup ksmbd: switch to use kmemdup_nul() helper ksmbd: add support for read compound ksmbd: fix wrong interim response on compound ksmbd: fix `force create mode' and `force directory mode' ksmbd: Fix one kernel-doc comment ksmbd: add missing calling smb2_set_err_rsp() on error ksmbd: remove experimental warning ksmbd: remove unneeded mark_inode_dirty in set_info_sec() ksmbd: fix passing freed memory 'aux_payload_buf' ksmbd: return invalid parameter error response if smb2 request is invalid ksmbd: check iov vector index in ksmbd_conn_write() ksmbd: fix race condition with fp ksmbd: fix race condition from parallel smb2 logoff requests ksmbd: fix race condition from parallel smb2 lock requests ksmbd: fix race condition between tree conn lookup and disconnect ksmbd: fix wrong error response status by using set_smb2_rsp_status() ksmbd: fix Null pointer dereferences in ksmbd_update_fstate() ksmbd: fix potential double free on smb2_read_pipe() error path ksmbd: Remove unused field in ksmbd_user struct ksmbd: reorganize ksmbd_iov_pin_rsp() ksmbd: fix kernel-doc comment of ksmbd_vfs_setxattr() ksmbd: fix recursive locking in vfs helpers ksmbd: fix missing RDMA-capable flag for IPoIB device in ksmbd_rdma_capable_netdev() ksmbd: add support for surrogate pair conversion ksmbd: no need to wait for binded connection termination at logoff ksmbd: fix kernel-doc comment of ksmbd_vfs_kern_path_locked() ksmbd: prevent memory leak on error return ksmbd: fix possible deadlock in smb2_open ksmbd: separately allocate ci per dentry ksmbd: move oplock handling after unlock parent dir ksmbd: release interim response after sending status pending response ksmbd: move setting SMB2_FLAGS_ASYNC_COMMAND and AsyncId ksmbd: don't update ->op_state as OPLOCK_STATE_NONE on error ksmbd: set epoch in create context v2 lease ksmbd: set v2 lease capability ksmbd: downgrade RWH lease caching state to RH for directory ksmbd: send v2 lease break notification for directory ksmbd: lazy v2 lease break on smb2_write() ksmbd: avoid duplicate opinfo_put() call on error of smb21_lease_break_ack() ksmbd: fix wrong allocation size update in smb2_open() ARM: dts: Fix occasional boot hang for am3 usb usb: fotg210-hcd: delete an incorrect bounds test spi: Introduce spi_get_device_match_data() helper iio: imu: adis16475: add spi_device_id table nfsd: separate nfsd_last_thread() from nfsd_put() nfsd: call nfsd_last_thread() before final nfsd_put() linux/export: Ensure natural alignment of kcrctab array spi: Reintroduce spi_set_cs_timing() spi: Add APIs in spi core to set/get spi->chip_select and spi->cs_gpiod spi: atmel: Fix clock issue when using devices with different polarities block: renumber QUEUE_FLAG_HW_WC ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe mm/filemap: avoid buffered read/write race to read inconsistent data mm: migrate high-order folios in swap cache correctly mm/memory-failure: cast index to loff_t before shifting it mm/memory-failure: check the mapcount of the precise page ring-buffer: Fix wake ups when buffer_percent is set to 100 tracing: Fix blocked reader of snapshot buffer ring-buffer: Remove useless update to write_stamp in rb_try_to_discard() netfilter: nf_tables: skip set commit for deleted/destroyed sets ring-buffer: Fix slowpath of interrupted event NFSD: fix possible oops when nfsd/pool_stats is closed. spi: Constify spi parameters of chip select APIs device property: Allow const parameter to dev_fwnode() kallsyms: Make module_kallsyms_on_each_symbol generally available tracing/kprobes: Fix symbol counting logic by looking at modules as well Revert "platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe" Linux 6.1.71 Change-Id: I7bc16d981b90e8e0b633628438f79fce898ad15a Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
Greg Kroah-Hartman
|
1e63881f5c |
This is the 6.1.70 stable release
-----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmWSsnYACgkQONu9yGCS aT7ZRw//bmrTWoNbFf/qdM11oPF9EHus9FUgSlP5yvNaa6jcPfwGx71NPXUkz+wU xKobh1VwK7TJxq4JHFQeMmupW/8++NeWNygwtYsllwnsMGzHL+mz2Txysrr/mhMx WUs6UVYXRxnuQJJDSqtTvMoyllpAJ1QQxJNuhKKOI1i+0DIu9YjQklD/4eW3cebv 8B9f3CeOyP/oL5Z0MqFTP8OnWx6X3jTbO4caor+qsyR+frgpXgBppTF76RHcd8lX MLVlx7aqr4wcml/uUMsolw8Zjbb719mX+KW3LHltl8wHftZeinYUsu1afnlb5dG1 rAaVgut0PmjTAQ/KwIp54CGO2MADwApMCUXIm0yyKSpNfw+HKR10bpz64HOFp9KQ 368YpjDJ3onkQdrLjV57w37YBRLyWxipeBya2+S4rdyPSfuvPkPCRNVkEDnHVAnH jxEhuoMZ2f/CIA8BT32y4DYDvEaIdfp7jVvEDFREDyIVXRMBhIneMhhyjU+Oe7Rw 1q/sfEJejXFa5VvC+Jl+K5LouP59M5MTq3RkCoYxZKz+bdfpOLEJ6AZJoZHcS02J QlM/pL213nC1ye3tuWFu3tNPzPS/G6LNQfGgSsBUzRn9IX2osn/epNFnCHBIFqlK apjrXObrmqKE6jNvy6ktHUDpnEXPZFpvirSXRN2Lk9SYh76bFP0= =d63o -----END PGP SIGNATURE----- Merge 6.1.70 into android14-6.1-lts Changes in 6.1.70 kasan: disable kasan_non_canonical_hook() for HW tags bpf: Fix prog_array_map_poke_run map poke update HID: i2c-hid: acpi: Unify ACPI ID tables format HID: i2c-hid: Add IDEA5002 to i2c_hid_acpi_blacklist[] drm/amd/display: fix hw rotated modes when PSR-SU is enabled ARM: dts: dra7: Fix DRA7 L3 NoC node register size ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init reset: Fix crash when freeing non-existent optional resets s390/vx: fix save/restore of fpu kernel context wifi: iwlwifi: pcie: add another missing bh-disable for rxq->lock wifi: mac80211: check if the existing link config remains unchanged wifi: mac80211: mesh: check element parsing succeeded wifi: mac80211: mesh_plink: fix matches_local logic Revert "net/mlx5e: fix double free of encap_header in update funcs" Revert "net/mlx5e: fix double free of encap_header" net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list() net/mlx5: Introduce and use opcode getter in command interface net/mlx5: Prevent high-rate FW commands from populating all slots net/mlx5: Re-organize mlx5_cmd struct net/mlx5e: Fix a race in command alloc flow net/mlx5e: fix a potential double-free in fs_udp_create_groups net/mlx5: Fix fw tracer first block check net/mlx5e: Correct snprintf truncation handling for fw_version buffer net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors net: mscc: ocelot: fix eMAC TX RMON stats for bucket 256-511 and above octeontx2-pf: Fix graceful exit during PFC configuration failure net: Return error from sk_stream_wait_connect() if sk_wait_event() fails net: sched: ife: fix potential use-after-free ethernet: atheros: fix a memleak in atl1e_setup_ring_resources net/rose: fix races in rose_kill_by_device() Bluetooth: Fix deadlock in vhci_send_frame Bluetooth: hci_event: shut up a false-positive warning net: mana: select PAGE_POOL net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() afs: Fix the dynamic root's d_delete to always delete unused dentries afs: Fix dynamic root lookup DNS check net: check dev->gso_max_size in gso_features_check() keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry afs: Fix overwriting of result of DNS query afs: Fix use-after-free due to get/remove race in volume tree ASoC: hdmi-codec: fix missing report for jack initial status ASoC: fsl_sai: Fix channel swap issue on i.MX8MP i2c: aspeed: Handle the coalesced stop conditions with the start conditions. x86/xen: add CPU dependencies for 32-bit build pinctrl: at91-pio4: use dedicated lock class for IRQ gpiolib: cdev: add gpio_device locking wrapper around gpio_ioctl() nvme-pci: fix sleeping function called from interrupt context drm/i915/mtl: limit second scaler vertical scaling in ver >= 14 drm/i915: Relocate intel_atomic_setup_scalers() drm/i915: Fix intel_atomic_setup_scalers() plane_state handling drm/i915/dpt: Only do the POT stride remap when using DPT drm/i915/mtl: Add MTL for remapping CCS FBs drm/i915: Fix ADL+ tiled plane stride when the POT stride is smaller than the original interconnect: Treat xlate() returning NULL node as an error iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw interconnect: qcom: sm8250: Enable sync_state Input: ipaq-micro-keys - add error handling for devm_kmemdup scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma() iio: triggered-buffer: prevent possible freeing of wrong buffer ALSA: usb-audio: Increase delay in MOTU M quirk usb-storage: Add quirk for incorrect WP on Kingston DT Ultimate 3.0 G3 wifi: cfg80211: Add my certificate wifi: cfg80211: fix certs build to not depend on file order USB: serial: ftdi_sio: update Actisense PIDs constant names USB: serial: option: add Quectel EG912Y module support USB: serial: option: add Foxconn T99W265 with new baseline USB: serial: option: add Quectel RM500Q R13 firmware support ALSA: hda/realtek: Add quirk for ASUS ROG GV302XA Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg Bluetooth: L2CAP: Send reject on command corrupted request Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE Bluetooth: Add more enc key size check net: usb: ax88179_178a: avoid failed operations when device is disconnected Input: soc_button_array - add mapping for airplane mode button net: 9p: avoid freeing uninit memory in p9pdu_vreadf net: rfkill: gpio: set GPIO direction net: ks8851: Fix TX stall caused by TX buffer overrun dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp smb: client: fix OOB in cifsd when receiving compounded resps smb: client: fix potential OOB in cifs_dump_detail() smb: client: fix OOB in SMB2_query_info_init() smb: client: fix OOB in smbCalcSize() drm/i915: Reject async flips with bigjoiner 9p: prevent read overrun in protocol dump tracepoint RISC-V: Fix do_notify_resume / do_work_pending prototype loop: do not enforce max_loop hard limit by (new) default dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client Revert "drm/amd/display: Do not set DRR on pipe commit" btrfs: zoned: no longer count fresh BG region as zone unusable ubifs: fix possible dereference after free ublk: move ublk_cancel_dev() out of ub->mutex selftests: mptcp: join: fix subflow_send_ack lookup Revert "scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity" scsi: core: Always send batch on reset or error handling command tracing / synthetic: Disable events after testing in synth_event_gen_test_init() dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata() pinctrl: starfive: jh7100: ignore disabled device tree nodes bus: ti-sysc: Flush posted write only after srst_udelay gpio: dwapb: mask/unmask IRQ when disable/enale it lib/vsprintf: Fix %pfwf when current node refcount == 0 thunderbolt: Fix memory leak in margining_port_remove() KVM: arm64: vgic: Simplify kvm_vgic_destroy() KVM: arm64: vgic: Add a non-locking primitive for kvm_vgic_vcpu_destroy() KVM: arm64: vgic: Force vcpu vgic teardown on vcpu destroy x86/alternatives: Sync core before enabling interrupts mm/damon/core: make damon_start() waits until kdamond_fn() starts fuse: share lookup state between submount and its parent wifi: cfg80211: fix CQM for non-range use wifi: nl80211: fix deadlock in nl80211_set_cqm_rssi (6.6.x) loop: deprecate autoloading callback loop_probe() Linux 6.1.70 Change-Id: I72bfbd39ae932d290b13d6fdde8e6684a84ec9e1 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |