20257 Commits

Author	SHA1	Message	Date
Srinivasarao Pathipati	ec1604a821	Merge keystone/android14-6.1-keystone-qcom-release.6.1.68+ (7cb0122) into qcom-6.1 ... * refs/heads/tmp-7cb0122: FROMLIST: mm/migrate: set swap entry values of THP tail pages properly. FROMLIST: binder: check offset alignment in binder_get_object() FROMLIST: iommu: Avoid races around default domain allocations ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hook: rename the the name of hooks Revert "interconnect: Fix locking for runpm vs reclaim" ANDROID: abi_gki_aarch64_qcom: Update symbol list Revert "interconnect: Teach lockdep about icc_bw_lock order" Revert "usb: dwc3: core: configure TX/RX threshold for DWC3_IP" Revert "usb: dwc3: core: configure TX/RX threshold for DWC3_IP" ANDROID: Update symbols list for open-dice.ko ANDROID: Update symbols list for open-dice.ko ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hook: rename the the name of hooks ANDROID: EXPORT raise_softirq and update the ABI symbol list UPSTREAM: netfilter: nf_tables: disallow timeout for anonymous sets BACKPORT: FROMGIT: mm: add alloc_contig_migrate_range allocation statistics FROMLIST: iommu: Avoid races around default domain allocations ANDROID: fips140 - fix integrity check by unapplying dynamic SCS ANDROID: fips140 - add option for debugging the integrity check BACKPORT: f2fs: split initial and dynamic conditions for extent_cache ANDROID: GKI: Update oplus symbol list ANDROID: Update the ABI symbol list UPSTREAM: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group UPSTREAM: epoll: use refcount to reduce ep_mutex contention ANDROID: GKI: Update oplus symbol list ANDROID: uid_sys_stat: fix data-error of cputime and io ANDROID: Update the ABI symbol list ANDROID: vendor_hooks: Export cma_alloc trace points ANDROID: gki_defconfig: Enable CONFIG_ARM_SCMI_TRANSPORT_VIRTIO Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" UPSTREAM: net: tls: fix use-after-free with partial reads and async decrypt ANDROID: GKI: add GKI symbol list for Exynosauto SoC UPSTREAM: usb: typec: class: fix typec_altmode_put_partner to put plugs UPSTREAM: Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs" ANDROID: GKI: Update symbol list for mtk ANDROID: GKI: Update oplus symbol list FROMGIT: f2fs: introduce FAULT_BLKADDR_CONSISTENCE FROMGIT: f2fs: fix to remove unnecessary f2fs_bug_on() to avoid panic FROMGIT: f2fs: compress: fix to avoid inconsistence bewteen i_blocks and dnode FROMGIT: f2fs: compress: fix to check unreleased compressed cluster FROMGIT: f2fs: compress: fix to cover normal cluster write with cp_rwsem FROMGIT: f2fs: compress: fix to guarantee persisting compressed blocks by CP BACKPORT: gso: fix dodgy bit handling for GSO_UDP_L4 ANDROID: remove LTO check from build.config.gki.aarch64.fips140 ANDROID: add symbol list for fips140 module ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: Add hook for trace_android_vh_copy_process ANDROID: abi_gki_aarch64_qcom: Update symbol list ANDROID: GKI: Update symbol list for transsion ANDROID: Add vendor_hooks to workaround CONFIG_TASK_DELAY_ACCT Revert "ANDROID: Build null_blk and scsi_debug as kernel modules" Revert "interconnect: Fix locking for runpm vs reclaim" ANDROID: GKI: Update symbol list for xiaomi ANDROID: sched/cpuset: Add vendor hook to change tasks affinity ANDROID: ABI: Update oplus symbol list ANDROID: binder: Add vendor hook to fix priority restore Revert "interconnect: Teach lockdep about icc_bw_lock order" BACKPORT: gso: fix dodgy bit handling for GSO_UDP_L4 ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: Add hook for trace_android_vh_copy_process ANDROID: GKI: Update symbol list for mtk FROMGIT: PM: runtime: add tracepoint for runtime_status changes ANDROID: GKI: add allowed list file for xiaomi UPSTREAM: netfilter: nft_set_rbtree: skip end interval element from gc ANDROID: GKI: add symbol list file for moto UPSTREAM: scsi: ufs: core: Fix racing issue between ufshcd_mcq_abort() and ISR UPSTREAM: scsi: ufs: core: Remove dev cmd clock scaling busy ANDROID: ABI: Update symbol list for Nothing ANDROID: abi_gki_aarch64_qcom: Export trace_android_vh_try_fixup_sea ANDROID: arm64: Call fixup_exception() within do_sea() ANDROID: PCI: dwc: Wait for the link only if it has been started ANDROID: Update the Pixel symbol list and GKI ABI ANDROID: scsi: ufs: add complete init vendor hook ANDROID: Update the ABI symbol list ANDROID: Fix CRC error with iommu_* functions Revert "bpf: add percpu stats for bpf_map elements insertions/deletions" Revert "bpf: Add map and need_defer parameters to .map_fd_put_ptr()" Revert "bpf: Defer the free of inner map when necessary" ANDROID: Roll back some code to fix system_server registers psi trigger failed. ANDROID: GKI: Update the ABI symbol list UPSTREAM: virtio: Add support for no-reset virtio PCI PM UPSTREAM: netfilter: nf_tables: check if catch-all set element is active in next generation UPSTREAM: net: tls, update curr on splice as well ANDROID: Update the ABI symbol list ANDROID: Add pci_read_config_word to virtual device symbol list ANDROID: Export kthread_set_per_cpu ANDROID: GKI: fix ABI breakage in struct ipv6_devconf Reapply "net: release reference to inet6_dev pointer" Reapply "net: change accept_ra_min_rtr_lft to affect all RA lifetimes" Reapply "net: add sysctl accept_ra_min_rtr_lft" ANDROID: GKI: explicit include of stringify.h BACKPORT: erofs: fix infinite loop due to a race of filling compressed_bvecs ANDROID: arm64: virt: Invalidate tlb once the balloon before reporting/inflating ANDROID: arm64: virt: Make the page_relinquish call generic UPSTREAM: drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks UPSTREAM: drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks UPSTREAM: drm/msm/dsi: Enable runtime PM UPSTREAM: arm64: scs: Disable LTO for SCS patching code ANDROID: GKI: Update symbol list for mtk ANDROID: GKI: Update symbol list for mtk BACKPORT: f2fs: Restrict max filesize for 16K f2fs BACKPORT: f2fs: Support Block Size == Page Size ANDROID: abi_gki_aarch64_qcom: Update symbol list UPSTREAM: drm/msm/dsi: Enable runtime PM UPSTREAM: usb: typec: tcpm: fix the PD disabled case ANDROID: ABI: Update symbol list for imx UPSTREAM: netfilter: nf_tables: reject QUEUE/DROP verdict parameters ANDROID: ABI: Update oplus symbol list ANDROID: fuse: Fix the issue of fuse_dentry_canonical_path ANDROID: Update the ABI symbol list ANDROID: Export cpufreq_driver_test_flags() ANDROID: Build null_blk and scsi_debug as kernel modules ANDROID: GKI: Update the pixel symbol list ANDROID: usb: dwc3: export tracepoint for dwc3 read/write ANDROID: scsi: ufs: add vendor hook to override key reprogramming ANDROID: vendor_hooks: Add hook for binder_detect_low_async_space_locked ANDROID: Update the ABI symbol list ANDROID: Update the ABI representation UPSTREAM: usb: typec: tcpm: Support multiple capabilities UPSTREAM: usb: typec: tcpm: Parse Accessory Mode information ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: add hooks in driver/android/binder.c UPSTREAM: net/rose: Fix Use-After-Free in rose_ioctl UPSTREAM: ida: Fix crash in ida_free when the bitmap is empty ANDROID: GKI: Update symbol list for mtk ANDROID: GKI: Update symbol list for mtk Reapply "perf: Disallow mis-matched inherited group reads" ANDROID: GKI: Add Pasa symbol list FROMGIT: mm: memcg: don't periodically flush stats when memcg is disabled ANDROID: Update the ABI symbol list ANDROID: sched: export update_misfit_status symbol ANDROID: GKI: Add ASR KMI symbol list FROMGIT: usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend FROMLIST: usb: core: Prevent null pointer dereference in update_port_device_state ANDROID: gki_defconfig: Enable CONFIG_NVME_MULTIPATH BACKPORT: irqchip/gic-v3: Work around affinity issues on ASR8601 BACKPORT: irqchip/gic-v3: Improve affinity helper Linux 6.1.75 Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" arm64: dts: armada-3720-turris-mox: set irq type for RTC Revert "KEYS: encrypted: Add check for strsep" riscv: Fix wrong usage of lm_alias() when splitting a huge linear mapping block: Remove special-casing of compound pages i2c: s3c24xx: fix transferring more than one message in polling mode i2c: s3c24xx: fix read transfers in polling mode ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure loop: fix the the direct I/O support check when used on top of block devices ethtool: netlink: Add missing ethnl_ops_begin/complete kdb: Fix a potential buffer overflow in kdb_local() ipvs: avoid stat macros calls from preemptible context netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description netfilter: nf_tables: skip dead set elements in netlink dump netfilter: nf_tables: do not allow mismatch field size and set key length netfilter: bridge: replace physindev with physinif in nf_bridge_info netfilter: propagate net to nf_bridge_get_physindev netfilter: nf_queue: remove excess nf_bridge variable netfilter: nfnetlink_log: use proper helper for fetching physinif netfilter: nft_limit: do not ignore unsupported flags netfilter: nf_tables: reject invalid set policy mptcp: relax check on MPC passive fallback LoongArch: BPF: Prevent out-of-bounds memory access net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS net: stmmac: ethtool: Fixed calltrace caused by unbalanced disable_irq_wake calls drm/amdkfd: fixes for HMM mem allocation drm/amdkfd: Use resource_size() helper function dt-bindings: gpio: xilinx: Fix node address in gpio net: ravb: Fix dma_addr_t truncation in error case udp: annotate data-races around up->pending block: ensure we hold a queue reference when using queue limits mptcp: refine opt_mp_capable determination mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req() mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() mptcp: strict validation before using mp_opt->hmac mptcp: mptcp_parse_option() fix for MPTCPOPT_MP_JOIN net: phy: micrel: populate .soft_reset for KSZ9131 amt: do not use overwrapped cb area net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames net: qualcomm: rmnet: fix global oob in rmnet_policy s390/pci: fix max size calculation in zpci_memcpy_toio() ASoC: mediatek: sof-common: Add NULL check for normal_link string PCI: mediatek-gen3: Fix translation window size calculation PCI: keystone: Fix race condition when initializing PHYs nvmet-tcp: Fix the H2C expected PDU len calculation nvme: trace: avoid memcpy overflow warning nvmet: re-fix tracing strncpy() warning serial: imx: Correct clock error message in function probe() usb: xhci-mtk: fix a short packet issue of gen1 isoc-in transfer apparmor: avoid crash when parsed profile name is empty cxl/region: fix x9 interleave typo perf env: Avoid recursively taking env->bpf_progs.lock nvmet-tcp: fix a crash in nvmet_req_complete() nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length vdpa: Fix an error handling path in eni_vdpa_probe() spmi: mtk-pmif: Serialize PMIF status check and command submission usb: cdc-acm: return correct error code on unsupported break tty: use 'if' in send_break() instead of 'goto' tty: don't check for signal_pending() in send_break() tty: early return from send_break() on TTY_DRIVER_HARDWARE_BREAK tty: change tty_write_lock()'s ndelay parameter to bool perf genelf: Set ELF program header addresses properly perf hisi-ptt: Fix one memory leakage in hisi_ptt_process_auxtrace_event() perf header: Fix one memory leakage in perf_event__fprintf_event_update() iio: adc: ad9467: fix scale setting iio: adc: ad9467: don't ignore error codes iio: adc: ad9467: fix reset gpio handling selftests/sgx: Skip non X86_64 platform selftests/sgx: Include memory clobber for inline asm in test enclave selftests/sgx: Fix uninitialized pointer dereferences in encl_get_entry selftests/sgx: Fix uninitialized pointer dereference in error path serial: imx: fix tx statemachine deadlock software node: Let args be NULL in software_node_get_reference_args acpi: property: Let args be NULL in __acpi_node_get_property_reference base/node.c: initialize the accessor list before registering libapi: Add missing linux/types.h header to get the __u64 type on io.h serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed power: supply: bq256xx: fix some problem in bq256xx_hw_init power: supply: cw2015: correct time_to_empty units in sysfs MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup() MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup() riscv: Fixed wrong register in XIP_FIXUP_FLASH_OFFSET macro riscv: Fix set_direct_map_default_noflush() to reset _PAGE_EXEC riscv: Fix set_memory_XX() and set_direct_map_XX() by splitting huge linear mappings riscv: Fix module_alloc() that did not reset the linear mapping permissions riscv: Check if the code to patch lies in the exit section mips: Fix incorrect max_low_pfn adjustment mips: dmi: Fix early remap on MIPS32 mfd: intel-lpss: Fix the fractional clock divider flags leds: aw2013: Select missing dependency REGMAP_I2C mfd: syscon: Fix null pointer dereference in of_syscon_register() ARM: 9330/1: davinci: also select PINCTRL serial: sc16is7xx: set safe default SPI clock frequency serial: sc16is7xx: add check for unsupported SPI modes during probe HID: wacom: Correct behavior when processing some confidence == false touches iio: adc: ad7091r: Pass iio_dev to event handler KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache KVM: arm64: vgic-v4: Restore pending state on host userspace write x86/kvm: Do not try to disable kvmclock if it was not enabled PCI: mediatek: Clear interrupt status before dispatching handler PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support PCI/P2PDMA: Remove reference to pci_p2pdma_map_sg() cxl/port: Fix decoder initialization when nr_targets > interleave_ways Revert "net: rtnetlink: Enslave device before bringing it up" wifi: mwifiex: configure BSSID consistently when starting AP wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code wifi: mt76: fix broken precal loading from MTD for mt7915 iommu/dma: Trace bounce buffer usage when mapping buffers iommu/arm-smmu-qcom: Add missing GMU entry to match table LoongArch: Fix and simplify fcsr initialization on execve() bpf: Fix re-attachment branch in bpf_tracing_prog_attach Bluetooth: Fix atomicity violation in {min,max}_key_size_set rootfs: Fix support for rootfstype= when root= is given md/raid1: Use blk_opf_t for read and write operations pwm: Fix out-of-bounds access in of_pwm_single_xlate() pwm: jz4740: Don't use dev_err_probe() in .request() netfilter: nf_tables: check if catch-all set element is active in next generation block: Fix iterating over an empty bio with bio_for_each_folio_all block: add check that partition length needs to be aligned with block size drm/amd: Enable PCIe PME from D3 scsi: mpi3mr: Block PEL Enable Command on Controller Reset and Unrecoverable State scsi: mpi3mr: Refresh sdev queue depth after controller reset scsi: target: core: add missing file_{start,end}_write() scsi: ufs: core: Simplify power management during async scan fbdev: flush deferred IO before closing fbdev: flush deferred work in fb_deferred_io_fsync() io_uring/rw: ensure io->bytes_done is always initialized ksmbd: only v2 leases handle the directory ksmbd: fix UAF issue in ksmbd_tcp_new_connection() ksmbd: validate mech token in session setup ALSA: hda/realtek: Enable headset mic on Lenovo M70 Gen5 ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on HP ZBook ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx ALSA: oxygen: Fix right channel of capture volume mixer drm/vmwgfx: Keep a gem reference to user bos in surfaces drm/vmwgfx: Fix possible invalid drm gem put calls serial: omap: do not override settings for RS485 support serial: 8250_exar: Set missing rs485_supported flag serial: imx: Ensure that imx_uart_rs485_config() is called with enabled clock serial: core, imx: do not set RS485 enabled if it is not supported serial: 8250_bcm2835aux: Restore clock error handling serial: core: make sure RS485 cannot be enabled when it is not supported serial: core: fix sanitizing check for RTS settings usb: mon: Fix atomicity violation in mon_bin_vma_fault usb: typec: class: fix typec_altmode_put_partner to put plugs Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs" usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled usb: cdns3: fix iso transfer error when mult is not zero usb: cdns3: fix uvc failure work since sg support enabled usb: chipidea: wait controller resume finished for wakeup irq Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-only" Revert "usb: dwc3: Soft reset phy on probe for host" usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host() tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug powerpc/64s: Increase default stack size to 32KB clocksource/drivers/timer-ti-dm: Fix make W=n kerneldoc warnings binder: fix race between mmput() and do_exit() xen-netback: don't produce zero-size SKB frags Input: atkbd - use ab83 as id when skipping the getid command mips/smp: Call rcutree_report_cpu_starting() earlier binder: fix unused alloc->free_async_space binder: fix async space check for 0-sized buffers keys, dns: Fix size check of V1 server-list header selftests/bpf: Add assert for user stacks in test_task_stack of: unittest: Fix of_count_phandle_with_args() expected value message fbdev: imxfb: fix left margin setting of: Fix double free in of_parse_phandle_with_args_map ksmbd: validate the zero field of packet header kselftest/alsa - mixer-test: Fix the print format specifier warning kselftest/alsa - mixer-test: fix the number of parameters to ksft_exit_fail_msg() drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c IB/iser: Prevent invalidating wrong MR mmc: sdhci_omap: Fix TI SoC dependencies mmc: sdhci_am654: Fix TI SoC dependencies ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put() ALSA: scarlett2: Add missing error checks to *_ctl_get() ALSA: scarlett2: Allow passing any output to line_out_remap() ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config() ALSA: scarlett2: Add missing error check to scarlett2_config_save() ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[] pwm: stm32: Fix enable count for clk in .probe() pwm: stm32: Use hweight32 in stm32_pwm_detect_channels pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw accel/habanalabs: fix information leak in sec_attest_info() drm/mediatek: dp: Add phy_mtk_dp module as pre-dependency clk: si5341: fix an error code problem in si5341_output_clk_set_rate watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO watchdog: set cdev owner before adding drivers: clk: zynqmp: update divider round rate logic drivers: clk: zynqmp: calculate closest mux rate clk: qcom: videocc-sm8150: Add missing PLL config property clk: qcom: videocc-sm8150: Update the videocc resets dt-bindings: clock: Update the videocc resets for sm8150 f2fs: fix to check return value of f2fs_recover_xattr_data drm/amd/pm: fix a double-free in amdgpu_parse_extended_power_table gpu/drm/radeon: fix two memleaks in radeon_vm_init drivers/amd/pm: fix a use-after-free in kv_parse_power_table drm/amd/pm: fix a double-free in si_dpm_init drm/amdgpu/debugfs: fix error code when smc register accessors are NULL drm/mediatek: Fix underrun in VDO1 when switches off the layer drm/mediatek: Return error if MDP RDMA failed to enable the clock drm/msm/dpu: Drop enable and frame_count parameters from dpu_hw_setup_misr() drm/msm/dpu: Set input_sel bit for INTF clk: renesas: rzg2l: Check reset monitor registers clk: renesas: rzg2l-cpg: Reuse code in rzg2l_cpg_reset() media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of m88ds3103_probe() media: dvbdev: drop refcount on error path in dvb_device_open() f2fs: fix to update iostat correctly in f2fs_filemap_fault() f2fs: fix to check compress file in f2fs_move_file_range() f2fs: fix to wait on block writeback for post_read case drm/panel: st7701: Fix AVCL calculation media: rkisp1: Fix media device memory leak media: dt-bindings: media: rkisp1: Fix the port description for the parallel interface media: imx-mipi-csis: Fix clock handling in remove() clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config RDMA/hns: Fix memory leak in free_mr_init() media: cx231xx: fix a memleak in cx231xx_init_isoc drm/bridge: tc358767: Fix return value on error case drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table drm/radeon/dpm: fix a memleak in sumo_parse_power_table drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() drm/panfrost: Ignore core_mask for poweroff and disable PWRTRANS irq ASoC: Intel: glk_rt5682_max98357a: fix board id mismatch drm/drv: propagate errors from drm_modeset_register_all() drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks drm/msm/mdp4: flush vblank event on disable ASoC: cs35l34: Fix GPIO name and drop legacy include ASoC: cs35l33: Fix GPIO name and drop legacy include drm/tidss: Fix dss reset drm/tidss: Check for K2G in in dispc_softreset() drm/tidss: Return error value from from softreset drm/tidss: Move reset to the end of dispc_init() drm/radeon: check return value of radeon_ring_lock() drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check() drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg() f2fs: fix to avoid dirent corruption drm/bridge: Fix typo in post_disable() description media: rkvdec: Hook the (TRY_)DECODER_CMD stateless ioctls media: verisilicon: Hook the (TRY_)DECODER_CMD stateless ioctls media: mtk-jpeg: Remove cancel worker in mtk_jpeg_remove to avoid the crash of multi-core JPEG devices media: mtk-jpegdec: export jpeg decoder functions media: pvrusb2: fix use after free on context disconnection drm/tilcdc: Fix irq free on unload drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer drm/panel-elida-kd35t133: hold panel in reset for unprepare RDMA/hns: Fix inappropriate err code for unsupported operations RDMA/usnic: Silence uninitialized symbol smatch warnings drm/panfrost: Really power off GPU cores in panfrost_gpu_power_off() Revert "drm/omapdrm: Annotate dma-fence critical section in commit path" Revert "drm/tidss: Annotate dma-fence critical section in commit path" ARM: davinci: always select CONFIG_CPU_ARM926T ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() mlxbf_gige: Enable the GigE port in mlxbf_gige_open mlxbf_gige: Fix intermittent no ip issue net/sched: act_ct: fix skb leak and crash on ooo frags sctp: fix busy polling sctp: support MSG_ERRQUEUE flag in recvmsg() bpf: sockmap, fix proto update hook to avoid dup calls null_blk: don't cap max_hw_sectors to BLK_DEF_MAX_SECTORS block: make BLK_DEF_MAX_SECTORS unsigned Bluetooth: btmtkuart: fix recv_buf() return value Bluetooth: Fix bogus check for re-auth no supported with non-ssp netfilter: nf_tables: mark newset as dead on transaction abort wifi: iwlwifi: mvm: send TX path flush in rfkill wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request wifi: rtlwifi: rtl8192se: using calculate_bit_shift() wifi: rtlwifi: rtl8192ee: using calculate_bit_shift() wifi: rtlwifi: rtl8192de: using calculate_bit_shift() wifi: rtlwifi: rtl8192ce: using calculate_bit_shift() wifi: rtlwifi: rtl8192cu: using calculate_bit_shift() wifi: rtlwifi: rtl8192c: using calculate_bit_shift() wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift() wifi: rtlwifi: add calculate_bit_shift() arm64: dts: qcom: ipq6018: Fix up indentation arm64: dts: qcom: ipq6018: Pad addresses to 8 hex digits arm64: dts: qcom: ipq6018: Use lowercase hex arm64: dts: qcom: ipq6018: improve pcie phy pcs reg table arm64: dts: qcom: ipq6018: fix clock rates for GCC_USB0_MOCK_UTMI_CLK arm64: dts: qcom: sc7280: Mark SDHCI hosts as cache-coherent block: add check of 'minors' and 'first_minor' in device_add_disk() arm64: dts: qcom: sm8150-hdk: fix SS USB regulators soc: qcom: llcc: Fix dis_cap_alloc and retain_on_pc configuration dma-mapping: clear dev->dma_mem to NULL after freeing it virtio/vsock: fix logic which reduces credit update messages ipmr: support IP_PKTINFO on cache report IGMP msg selftests/net: fix grep checking for fib_nexthop_multiprefix ARM: dts: stm32: don't mix SCMI and non-SCMI board compatibles scsi: hisi_sas: Correct the number of global debugfs registers scsi: hisi_sas: Rollback some operations if FLR failed scsi: hisi_sas: Replace with standard error code return value arm64: dts: imx8mm: Reduce GPU to nominal speed arm64: dts: renesas: white-hawk-cpu: Fix missing serial console pin control block: Set memalloc_noio to false on device_add_disk() error path selftests/bpf: Relax time_tai test for equal timestamps in tai_forward wifi: mt76: mt7921: fix country count limitation for CLC arm64: dts: mediatek: mt8183: correct MDP3 DMA-related nodes dt-bindings: media: mediatek: mdp3: correct RDMA and WROT node with generic names arm64: dts: hisilicon: hikey970-pmic: fix regulator cells properties bpf: Fix verification of indirect var-off stack access wifi: mt76: mt7921s: fix workqueue problem causes STA association fail arm64: dts: qcom: sc7280: fix usb_2 wakeup interrupt types arm64: dts: qcom: sc7280: Mark Adreno SMMU as DMA coherent arm64: dts: qcom: sc7280: Fix up GPU SIDs arm64: dts: qcom: sm8350: Fix DMA0 address arm64: dts: qcom: sdm845-db845c: correct LED panic indicator arm64: dts: qcom: qrb5165-rb5: correct LED panic indicator scsi: fnic: Return error if vmalloc() failed bpf: fix check for attempt to corrupt spilled pointer selftests/net: specify the interface when do arping bpf: Defer the free of inner map when necessary bpf: Add map and need_defer parameters to .map_fd_put_ptr() bpf: add percpu stats for bpf_map elements insertions/deletions rcu-tasks: Provide rcu_trace_implies_rcu_gp() arm64: dts: qcom: sm6350: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sc8280xp: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sm8250: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sm8150: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sdm845: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sc7280: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sc7280: Mark some nodes as 'reserved' arm64: dts: qcom: sc7180: Make watchdog bark interrupt edge triggered ARM: dts: qcom: sdx65: correct SPMI node name bpf: enforce precision of R0 on callback return md: synchronize flush io with array reconfiguration selftests/bpf: Fix erroneous bitmask operation arm64: dts: ti: k3-am65-main: Fix DSS irq trigger type arm64: dts: ti: k3-am62a-main: Fix GPIO pin count in DT nodes wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior firmware: meson_sm: populate platform devices from sm device tree data firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create() net/ncsi: Fix netlink major/minor version numbers ARM: dts: qcom: apq8064: correct XOADC register address wifi: libertas: stop selecting wext wifi: ath11k: Defer on rproc_get failure bpf: Add crosstask check to __bpf_get_stack bpf, lpm: Fix check prefixlen before walking trie wifi: rtw88: fix RX filter in FIF_ALLMULTI flag wifi: plfxlc: check for allocation failure in plfxlc_usb_wreq_async() pNFS: Fix the pnfs block driver's calculation of layoutget size SUNRPC: fix _xprt_switch_find_current_entry logic NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT blocklayoutdriver: Fix reference leak of pnfs_device_node csky: fix arch_jump_label_transform_static override crypto: scomp - fix req->dst buffer overflow crypto: sahara - do not resize req->src when doing hash operations crypto: sahara - fix processing hash requests with req->nbytes < sg->length crypto: sahara - improve error handling in sahara_sha_process() crypto: sahara - fix wait_for_completion_timeout() error handling crypto: sahara - fix ahash reqsize crypto: sahara - handle zero-length aes requests crypto: sahara - avoid skcipher fallback code duplication crypto: virtio - Wait for tasklet to complete on device remove gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump fs: indicate request originates from old mount API erofs: fix memory leak on short-lived bounced pages pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() crypto: hisilicon/zip - save capability registers in probe process crypto: hisilicon/sec2 - save capability registers in probe process crypto: hisilicon/hpre - save capability registers in probe process crypto: hisilicon/qm - add a function to set qm algs crypto: hisilicon/zip - add zip comp high perf mode configuration crypto: hisilicon/qm - save capability registers in qm init process crypto: sahara - fix error handling in sahara_hw_descriptor_create() crypto: sahara - fix processing requests with cryptlen < sg->length crypto: sahara - fix ahash selftest failure crypto: sahara - fix cbc selftest failure crypto: sahara - remove FLAGS_NEW_KEY logic crypto: safexcel - Add error handling for dma_map_sg() calls crypto: af_alg - Disallow multiple in-flight AIO requests crypto: ccp - fix memleak in ccp_init_dm_workarea crypto: sa2ul - Return crypto_aead_setkey to transfer the error crypto: virtio - Handle dataq logic with tasklet selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket mtd: Fix gluebi NULL pointer dereference caused by ftl notifier kunit: debugfs: Fix unchecked dereference in debugfs_print_results() ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error ACPI: LPSS: Fix the fractional clock divider flags spi: sh-msiof: Enforce fixed DTDL for R-Car H3 efivarfs: Free s_fs_info on unmount efivarfs: force RO when remounting if SetVariable is not supported calipso: fix memory leak in netlbl_calipso_add_pass() cpufreq: scmi: process the result of devm_of_clk_add_hw_provider() cpufreq: Use of_property_present() for testing DT property presence of: Add of_property_present() helper platform/x86/intel/vsec: Fix xa_alloc memory leak platform/x86/intel/vsec: Use mutex for ida_alloc() and ida_free() platform/x86/intel/vsec: Support private data platform/x86/intel/vsec: Enhance and Export intel_vsec_add_aux() KEYS: encrypted: Add check for strsep ACPI: LPIT: Avoid u32 multiplication overflow ACPI: video: check for error while searching for backlight device parent mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response spi: spi-zynqmp-gqspi: fix driver kconfig dependencies powerpc/imc-pmu: Add a null pointer check in update_events_in_group() powerpc/powernv: Add a null pointer check in opal_powercap_init() powerpc/powernv: Add a null pointer check in opal_event_init() powerpc/powernv: Add a null pointer check to scom_debug_init_one() selftests/powerpc: Fix error handling in FPU/VMX preemption tests powerpc/pseries/memhp: Fix access beyond end of drmem array powerpc/44x: select I2C for CURRITUCK powerpc: add crtsavres.o to always-y instead of extra-y powerpc: remove checks for binutils older than 2.25 EDAC/thunderx: Fix possible out-of-bounds string access x86/mce/inject: Clear test status value x86/lib: Fix overflow when counting digits UPSTREAM: sched/fair: Limit sched slice duration ANDROID: Update the ABI symbol list ANDROID: idle_inject: Export function symbols ANDROID: Update the ABI symbol list ANDROID: GKI: Remove CONFIG_MEDIA_CEC_RC BACKPORT: usb: host: xhci: Avoid XHCI resume delay if SSUSB device is not present ANDROID: Update the ABI symbol list ANDROID: uid_sys_stats: Drop CONFIG_UID_SYS_STATS_DEBUG logic ANDROID: Update the ABI symbol list ANDROID: Update the ABI symbol list UPSTREAM: usb: gadget: uvc: Remove nested locking ANDROID: uid_sys_stats: Fully initialize uid_entry_tmp value ANDROID: Roll back some code to fix system_server registers psi trigger failed. UPSTREAM: usb: gadget: uvc: Fix use are free during STREAMOFF ANDROID: GKI: Add symbol list for Nothing Linux 6.1.74 scripts/decode_stacktrace.sh: optionally use LLVM utilities coresight: etm4x: Fix width of CCITMIN field PCI: Add ACS quirk for more Zhaoxin Root Ports leds: ledtrig-tty: Free allocated ttyname buffer on deactivate parport: parport_serial: Add Brainboxes device IDs and geometry parport: parport_serial: Add Brainboxes BAR details uio: Fix use-after-free in uio_open binder: fix comment on binder_alloc_new_buf() return value binder: fix trivial typo of binder_free_buf_locked() binder: fix use-after-free in shinker's callback binder: use EPOLLERR from eventpoll.h Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" ksmbd: free ppace array on error in parse_dacl ksmbd: don't allow O_TRUNC open on read-only share bpf: Add --skip_encoding_btf_inconsistent_proto, --btf_gen_optimized to pahole flags for v1.25 btf, scripts: Exclude Rust CUs with pahole ASoC: SOF: Intel: hda-codec: Delay the codec device registration ACPI: resource: Add another DMI match for the TongFang GMxXGxx ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP Envy X360 13-ay0xxx drm/crtc: fix uninitialized variable use ARM: sun9i: smp: fix return code check of of_property_match_string net: qrtr: ns: Return 0 if server port is not present virtio_blk: fix snprintf truncation compiler warning ida: Fix crash in ida_free when the bitmap is empty pinctrl: cy8c95x0: Fix get_pincfg pinctrl: cy8c95x0: Fix typo drm/amd/display: get dprefclk ss info from integration info table i2c: rk3x: fix potential spinlock recursion on poll smb: client: fix potential OOB in smb2_dump_detail() HID: nintendo: Prevent divide-by-zero on code dm audit: fix Kconfig so DM_AUDIT depends on BLK_DEV_DM ALSA: hda/realtek: Add quirks for ASUS Zenbook 2022 Models ASoC: Intel: bytcr_rt5640: Add new swapped-speakers quirk ASoC: Intel: bytcr_rt5640: Add quirk for the Medion Lifetab S10346 platform/x86: thinkpad_acpi: fix for incorrect fan reporting on some ThinkPad systems HID: nintendo: fix initializer element is not constant error kselftest: alsa: fixed a print formatting warning Input: xpad - add Razer Wolverine V2 support wifi: iwlwifi: pcie: avoid a NULL pointer dereference ARC: fix spare error s390/scm: fix virtual vs physical address confusion Input: i8042 - add nomux quirk for Acer P459-G2-M Input: atkbd - skip ATKBD_CMD_GETID in translated mode reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning Input: psmouse - enable Synaptics InterTouch for ThinkPad L14 G1 ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI tracing: Fix uaf issue when open the hist or hist_debug file MIPS: dts: loongson: drop incorrect dwmac fallback compatible stmmac: dwmac-loongson: drop useless check for compatible fallback tracing: Add size check when printing trace_marker output tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing jbd2: fix soft lockup in journal_finish_inode_data_buffers() platform/x86: intel-vbtn: Fix missing tablet-mode-switch events neighbour: Don't let neigh_forced_gc() disable preemption for long drm/crtc: Fix uninit-value bug in drm_mode_setcrtc jbd2: increase the journal IO's priority jbd2: correct the printing of write_flags in jbd2_write_superblock() clk: rockchip: rk3128: Fix HCLK_OTG gate register clk: rockchip: rk3568: Add PLL rate for 292.5MHz LoongArch: Preserve syscall nr across execve() hwmon: (corsair-psu) Fix probe when built-in drm/exynos: fix a wrong error checking drm/exynos: fix a potential error pointer dereference drm/amdgpu: Add NULL checks for function pointers arm64: dts: rockchip: Fix PCI node addresses on rk3399-gru nvme: prevent potential spectre v1 gadget nvme: introduce helper function to get ctrl state ASoC: ops: add correct range check for limiting volume ASoC: da7219: Support low DC impedance headset net/tg3: fix race condition in tg3_reset_task() ASoC: hdac_hda: Conditionally register dais for HDMI and Analog ASoC: amd: yc: Add DMI entry to support System76 Pangolin 13 nouveau/tu102: flush all pdbs on vmm flush ASoC: Intel: skl_hda_dsp_generic: Drop HDMI routes when HDMI is not available ASoC: rt5650: add mutex to avoid the jack detection failure ASoC: cs43130: Fix incorrect frame delay configuration ASoC: cs43130: Fix the position of const qualifier ASoC: Intel: Skylake: mem leak in skl register function ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16 ASoC: Intel: Skylake: Fix mem leak in few functions arm64: dts: rockchip: fix rk356x pcie msg interrupt name ASoC: wm8974: Correct boost mixer inputs hwtracing: hisi_ptt: Don't try to attach a task hwtracing: hisi_ptt: Handle the interrupt in hardirq context nvme-core: check for too small lba shift blk-mq: don't count completed flush data request as inflight in case of quiesce smb: client, common: fix fortify warnings drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer drm/amd/display: update dcn315 lpddr pstate latency nvme-core: fix a memory leak in nvme_ns_info_from_identify() ALSA: hda: intel-nhlt: Ignore vbps when looking for DMIC 32 bps format debugfs: fix automount d_fsdata usage wifi: mac80211: handle 320 MHz in ieee80211_ht_cap_ie_to_sta_ht_cap wifi: avoid offset calculation on NULL pointer wifi: cfg80211: lock wiphy mutex for rfkill poll mptcp: fix uninit-value in mptcp_incoming_options ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro pinctrl: lochnagar: Don't build on MIPS f2fs: explicitly null-terminate the xattr list ANDROID: Enable CONFIG_LAZY_RCU in x86 gki_defconfig ANDROID: fuse-bpf: Fix the issue of abnormal lseek system calls ANDROID: ABI: Update symbol list for imx BACKPORT: PM: sleep: Fix possible deadlocks in core system-wide PM code UPSTREAM: async: Introduce async_schedule_dev_nocall() UPSTREAM: async: Split async_schedule_node_domain() FROMGIT: BACKPORT: mm: update mark_victim tracepoints fields ANDROID: Enable CONFIG_LAZY_RCU in arm64 gki_defconfig FROMLIST: rcu: Provide a boot time parameter to control lazy RCU ANDROID: rcu: Add a minimum time for marking boot as completed UPSTREAM: rcu: Disable laziness if lazy-tracking says so UPSTREAM: rcu: Track laziness during boot and suspend UPSTREAM: net: Use call_rcu_hurry() for dst_release() UPSTREAM: workqueue: Make queue_rcu_work() use call_rcu_hurry() UPSTREAM: percpu-refcount: Use call_rcu_hurry() for atomic switch UPSTREAM: io_uring: use call_rcu_hurry if signaling an eventfd UPSTREAM: rcu: Update synchronize_rcu_mult() comment for call_rcu_hurry() UPSTREAM: scsi/scsi_error: Use call_rcu_hurry() instead of call_rcu() UPSTREAM: rcu/rcutorture: Use call_rcu_hurry() where needed UPSTREAM: rcu/rcuscale: Use call_rcu_hurry() for async reader test UPSTREAM: rcu/sync: Use call_rcu_hurry() instead of call_rcu BACKPORT: rcu: Shrinker for lazy rcu UPSTREAM: rcu: Refactor code a bit in rcu_nocb_do_flush_bypass() UPSTREAM: rcu: Make call_rcu() lazy to save power UPSTREAM: rcu: Fix missing nocb gp wake on rcu_barrier() UPSTREAM: rcu: Fix late wakeup when flush of bypass cblist happens ANDROID: Update the ABI symbol list ANDROID: GKI: add GKI symbol list for Exynosauto SoC UPSTREAM: coresight: tmc: Don't enable TMC when it's not ready. UPSTREAM: netfilter: nf_tables: bail out on mismatching dynset and set expressions Revert "ipv6: remove max_size check inline with ipv4" ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: add hooks in driver/android/binder.c ANDROID: GKI: Update honda symbol list for xt_LOG ANDROID: GKI: Update honda symbol list for ebt filter ANDROID: GKI: Update honda symbol list for ebtables ANDROID: GKI: Update honda symbol list for net scheduler ANDROID: GKI: Update honda symbol list for led-trigger ANDROID: GKI: Add initial symbol list for honda ANDROID: GKI: add symbols to ABI ANDROID: db845c: Enable device tree overlay support FROMGIT: usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart FROMGIT: usb: dwc3: set pm runtime active before resume common Linux 6.1.73 cifs: fix flushing folio regression for 6.1 backport ipv6: remove max_size check inline with ipv4 Revert "nfsd: separate nfsd_last_thread() from nfsd_put()" Revert "nfsd: call nfsd_last_thread() before final nfsd_put()" ANDROID: Update the pixel symbol list Revert "splice, net: Add a splice_eof op to file-ops and socket-ops" Revert "ipv4, ipv6: Use splice_eof() to flush" Revert "udp: introduce udp->udp_flags" Revert "udp: move udp->no_check6_tx to udp->udp_flags" Revert "udp: move udp->no_check6_rx to udp->udp_flags" Revert "udp: move udp->gro_enabled to udp->udp_flags" Revert "udp: move udp->accept_udp_{l4|fraglist} to udp->udp_flags" Revert "udp: lockless UDP_ENCAP_L2TPINUDP / UDP_GRO" Revert "udp: annotate data-races around udp->encap_type" Revert "bpf, sockmap: af_unix stream sockets need to hold ref for pair sock" Revert "bpf: decouple prune and jump points" Revert "bpf: remove unnecessary prune and jump points" Revert "bpf: Remove unused insn_cnt argument from visit_[func_call_]insn()" Revert "bpf: clean up visit_insn()'s instruction processing" Revert "bpf: Support new 32bit offset jmp instruction" Revert "bpf: handle ldimm64 properly in check_cfg()" Revert "bpf: Fix a verifier bug due to incorrect branch offset comparison with cpu=v4" Revert "device property: Allow const parameter to dev_fwnode()" BACKPORT: UPSTREAM: phy: qcom-qmp: Introduce Kconfig symbols for discrete drivers ANDROID: GKI: add symbols of vendor hooks to ABI for swapping in ahead ANDROID: GKI: add vendor hooks for swapping in ahead Reapply "kasan: print the original fault addr when access invalid shadow" ANDROID: GKI: fix crc issue in include/net/addrconf.h ANDROID: add 16k targets for Microdroid kernel Revert "cred: switch to using atomic_long_t" FROMGIT: BACKPORT: mm/cma: fix placement of trace_cma_alloc_start/finish FROMGIT: wifi: nl80211: Extend del pmksa support for SAE and OWE security ANDROID: Update the ABI symbol list ANDROID: mm: export dump_tasks symbol. FROMLIST: scsi: ufs: Remove the ufshcd_hba_exit() call from ufshcd_async_scan() FROMLIST: scsi: ufs: Simplify power management during async scan Linux 6.1.72 Revert "interconnect: qcom: sm8250: Enable sync_state" smb3: Replace smb2pdu 1-element arrays with flex-arrays media: qcom: camss: Comment CSID dt_id field bpf: syzkaller found null ptr deref in unix_bpf proto add bpf: Fix a verifier bug due to incorrect branch offset comparison with cpu=v4 net/sched: act_ct: Always fill offloading tuple iifidx net/sched: act_ct: additional checks for outdated flows f2fs: compress: fix to assign compress_level for lz4 correctly genirq/affinity: Only build SMP-only helper functions on SMP kernels mmc: sdhci-sprd: Fix eMMC init failure after hw reset mmc: core: Cancel delayed work before releasing host mmc: rpmb: fixes pause retune on all RPMB partitions. mmc: meson-mx-sdhc: Fix initialization frozen issue drm/amd/display: add nv12 bounding box drm/amdgpu: skip gpu_info fw loading on navi12 mm: fix unmap_mapping_range high bits shift bug i2c: core: Fix atomic xfer check for non-preempt config x86/kprobes: fix incorrect return address calculation in kprobe_emulate_call_indirect firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards ring-buffer: Fix 32-bit rb_time_read() race with rb_time_cmpxchg() btrfs: mark the len field in struct btrfs_ordered_sum as unsigned btrfs: fix qgroup_free_reserved_data int overflow octeontx2-af: Support variable number of lmacs octeontx2-af: Fix pause frame configuration net/sched: act_ct: Take per-cb reference to tcf_ct_flow_table netfilter: flowtable: GC pushes back packets to classic path net/sched: act_ct: Fix promotion of offloaded unreplied tuple net/sched: act_ct: offload UDP NEW connections netfilter: flowtable: cache info of last offload netfilter: flowtable: allow unidirectional rules net: sched: call tcf_ct_params_free to free params in tcf_ct_init mm/memory_hotplug: fix error handling in add_memory_resource() mm/memory_hotplug: add missing mem_hotplug_lock lib/group_cpus.c: avoid acquiring cpu hotplug lock in group_cpus_evenly genirq/affinity: Move group_cpus_evenly() into lib/ genirq/affinity: Rename irq_build_affinity_masks as group_cpus_evenly genirq/affinity: Don't pass irq_affinity_desc array to irq_build_affinity_masks genirq/affinity: Pass affinity managed mask array to irq_build_affinity_masks genirq/affinity: Remove the 'firstvec' parameter from irq_build_affinity_masks ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 firmware: arm_scmi: Fix frequency truncation by promoting multiplier type bpf, sockmap: af_unix stream sockets need to hold ref for pair sock ethtool: don't propagate EOPNOTSUPP from dumps dpaa2-eth: recycle the RX buffer only after all processing done net: dpaa2-eth: rearrange variable in dpaa2_eth_get_ethtool_stats smb: client: fix missing mode bits for SMB symlinks block: update the stable_writes flag in bdev_add filemap: add a per-mapping stable writes flag mm, netfs, fscache: stop read optimisation when folio removed from pagecache mm: merge folio_has_private()/filemap_release_folio() call pairs memory-failure: convert truncate_error_page() to use folio khugepage: replace try_to_release_page() with filemap_release_folio() ext4: convert move_extent_per_page() to use folios media: qcom: camss: Fix set CSI2_RX_CFG1_VC_MODE when VC is greater than 3 media: camss: sm8250: Virtual channels for CSID selftests: mptcp: set FAILING_LINKS in run_tests selftests: mptcp: fix fastclose with csum failure f2fs: set the default compress_level on ioctl f2fs: assign default compression level f2fs: convert to use bitmap API f2fs: clean up i_compress_flag and i_compress_level usage s390/cpumf: support user space events for counting s390/mm: add missing arch_set_page_dat() call to vmem_crst_alloc() net/mlx5: Increase size of irq name buffer blk-mq: make sure active queue usage is held for bio_integrity_prep() bpf: fix precision backtracking instruction iteration bpf: handle ldimm64 properly in check_cfg() bpf: Support new 32bit offset jmp instruction bpf: clean up visit_insn()'s instruction processing bpf: Remove unused insn_cnt argument from visit_[func_call_]insn() bpf: remove unnecessary prune and jump points bpf: decouple prune and jump points fbdev: imsttfb: fix double free in probe() fbdev: imsttfb: Release framebuffer and dealloc cmap on error path arm64: dts: qcom: sdm845: Fix PSCI power domain names arm64: dts: qcom: sdm845: align RPMh regulator nodes with bindings wifi: iwlwifi: yoyo: swap cdb and jacket bits values udp: annotate data-races around udp->encap_type udp: lockless UDP_ENCAP_L2TPINUDP / UDP_GRO udp: move udp->accept_udp_{l4|fraglist} to udp->udp_flags udp: move udp->gro_enabled to udp->udp_flags udp: move udp->no_check6_rx to udp->udp_flags udp: move udp->no_check6_tx to udp->udp_flags udp: introduce udp->udp_flags ipv4, ipv6: Use splice_eof() to flush splice, net: Add a splice_eof op to file-ops and socket-ops udp: Convert udp_sendpage() to use MSG_SPLICE_PAGES net: Declare MSG_SPLICE_PAGES internal sendmsg() flag bpf, x86: save/restore regs with BPF_DW size bpf, x86: Simplify the parsing logic of structure parameters bpf, x64: Fix tailcall infinite loop srcu: Fix callbacks acceleration mishandling cpu/SMT: Make SMT control more robust against enumeration failures cpu/SMT: Create topology_smt_thread_allowed() selftests: secretmem: floor the memory size to the multiple of page_size net: Implement missing SO_TIMESTAMPING_NEW cmsg support bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters() net: ravb: Wait for operating mode to be applied asix: Add check for usbnet_get_endpoints octeontx2-af: Re-enable MAC TX in otx2_stop processing octeontx2-af: Always configure NIX TX link credits based on max frame size net/smc: fix invalid link access in dumping SMC-R connections net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues igc: Fix hicredit calculation i40e: Restore VF MSI-X state during PCI reset ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux ASoC: meson: g12a-toacodec: Fix event generation ASoC: meson: g12a-tohdmitx: Validate written enum values ASoC: meson: g12a-toacodec: Validate written enum values i40e: fix use-after-free in i40e_aqc_add_filters() net: Save and restore msg_namelen in sock_sendmsg netfilter: nft_immediate: drop chain reference counter on error net: bcmgenet: Fix FCS generation for fragmented skbuffs sfc: fix a double-free bug in efx_probe_filters ARM: sun9i: smp: Fix array-index-out-of-bounds read in sunxi_mc_smp_init selftests: bonding: do not set port down when adding to bond net: Implement missing getsockopt(SO_TIMESTAMPING_NEW) net: annotate data-races around sk->sk_bind_phc net: annotate data-races around sk->sk_tsflags net-timestamp: extend SOF_TIMESTAMPING_OPT_ID to HW timestamps can: raw: add support for SO_MARK r8169: Fix PCI error on system resume net: sched: em_text: fix possible memory leak in em_text_destroy() mlxbf_gige: fix receive packet race condition ASoC: mediatek: mt8186: fix AUD_PAD_TOP register and offset ASoC: fsl_rpmsg: Fix error handler with pm_runtime_enable igc: Check VLAN EtherType mask igc: Check VLAN TCI mask igc: Report VLAN EtherType matching back to user i40e: Fix filter input checks to prevent config with invalid values ice: Shut down VSI with "link-down-on-close" enabled ice: Fix link_down_on_close message drm/i915/dp: Fix passing the correct DPCD_REV for drm_dp_set_phy_test_pattern octeontx2-af: Fix marking couple of structure as __packed nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local netfilter: nf_tables: set transport offset from mac header for netdev/egress netfilter: use skb_ip_totlen and iph_totlen drm/bridge: ti-sn65dsi86: Never store more than msg->size bytes in AUX xfer wifi: iwlwifi: pcie: don't synchronize IRQs from IRQ KVM: x86/pmu: fix masking logic for MSR_CORE_PERF_GLOBAL_CTRL cifs: do not depend on release_iface for maintaining iface_list cifs: cifs_chan_is_iface_active should be called with chan_lock held drm/mgag200: Fix gamma lut not initialized for G200ER, G200EV, G200SE Revert "PCI/ASPM: Remove pcie_aspm_pm_state_change()" mptcp: prevent tcp diag from closing listener subflows ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP ProBook 440 G6 ALSA: hda/realtek: fix mute/micmute LEDs for a HP ZBook ALSA: hda/realtek: enable SND_PCI_QUIRK for hp pavilion 14-ec1xxx series block: Don't invalidate pagecache for invalid falloc modes keys, dns: Fix missing size check of V1 server-list header ANDROID: gki_defconfig: Set CONFIG_IDLE_INJECT and CONFIG_CPU_IDLE_THERMAL into y ANDROID: KMI workaround for CONFIG_NETFILTER_FAMILY_BRIDGE ANDROID: dma-buf: don't re-purpose kobject as work_struct BACKPORT: FROMLIST: dma-buf: Move sysfs work out of DMA-BUF export path UPSTREAM: netfilter: nf_tables: skip set commit for deleted/destroyed sets ANDROID: KVM: arm64: Avoid BUG-ing from the host abort path ANDROID: Update the ABI symbol list UPSTREAM: ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet UPSTREAM: nvmet-tcp: Fix a possible UAF in queue intialization setup FROMGIT: usb: dwc3: gadget: Handle EP0 request dequeuing properly ANDROID: ABI: Update symbol list for imx UPSTREAM: io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid UPSTREAM: bpf: Fix prog_array_map_poke_run map poke update BACKPORT: xhci: track port suspend state correctly in unsuccessful resume cases ANDROID: fix crc error in put_cmsg caused in 6.1.68 ANDROID: Update the ABI symbol list ANDROID: sched: Export symbols for vendor modules UPSTREAM: usb: dwc3: core: add support for disabling High-speed park mode Linux 6.1.71 Revert "platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe" tracing/kprobes: Fix symbol counting logic by looking at modules as well kallsyms: Make module_kallsyms_on_each_symbol generally available device property: Allow const parameter to dev_fwnode() spi: Constify spi parameters of chip select APIs NFSD: fix possible oops when nfsd/pool_stats is closed. ring-buffer: Fix slowpath of interrupted event netfilter: nf_tables: skip set commit for deleted/destroyed sets ring-buffer: Remove useless update to write_stamp in rb_try_to_discard() tracing: Fix blocked reader of snapshot buffer ring-buffer: Fix wake ups when buffer_percent is set to 100 mm/memory-failure: check the mapcount of the precise page mm/memory-failure: cast index to loff_t before shifting it mm: migrate high-order folios in swap cache correctly mm/filemap: avoid buffered read/write race to read inconsistent data platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() block: renumber QUEUE_FLAG_HW_WC spi: atmel: Fix clock issue when using devices with different polarities spi: Add APIs in spi core to set/get spi->chip_select and spi->cs_gpiod spi: Reintroduce spi_set_cs_timing() linux/export: Ensure natural alignment of kcrctab array nfsd: call nfsd_last_thread() before final nfsd_put() nfsd: separate nfsd_last_thread() from nfsd_put() iio: imu: adis16475: add spi_device_id table spi: Introduce spi_get_device_match_data() helper usb: fotg210-hcd: delete an incorrect bounds test ARM: dts: Fix occasional boot hang for am3 usb ksmbd: fix wrong allocation size update in smb2_open() ksmbd: avoid duplicate opinfo_put() call on error of smb21_lease_break_ack() ksmbd: lazy v2 lease break on smb2_write() ksmbd: send v2 lease break notification for directory ksmbd: downgrade RWH lease caching state to RH for directory ksmbd: set v2 lease capability ksmbd: set epoch in create context v2 lease ksmbd: don't update ->op_state as OPLOCK_STATE_NONE on error ksmbd: move setting SMB2_FLAGS_ASYNC_COMMAND and AsyncId ksmbd: release interim response after sending status pending response ksmbd: move oplock handling after unlock parent dir ksmbd: separately allocate ci per dentry ksmbd: fix possible deadlock in smb2_open ksmbd: prevent memory leak on error return ksmbd: fix kernel-doc comment of ksmbd_vfs_kern_path_locked() ksmbd: no need to wait for binded connection termination at logoff ksmbd: add support for surrogate pair conversion ksmbd: fix missing RDMA-capable flag for IPoIB device in ksmbd_rdma_capable_netdev() ksmbd: fix recursive locking in vfs helpers ksmbd: fix kernel-doc comment of ksmbd_vfs_setxattr() ksmbd: reorganize ksmbd_iov_pin_rsp() ksmbd: Remove unused field in ksmbd_user struct ksmbd: fix potential double free on smb2_read_pipe() error path ksmbd: fix Null pointer dereferences in ksmbd_update_fstate() ksmbd: fix wrong error response status by using set_smb2_rsp_status() ksmbd: fix race condition between tree conn lookup and disconnect ksmbd: fix race condition from parallel smb2 lock requests ksmbd: fix race condition from parallel smb2 logoff requests ksmbd: fix race condition with fp ksmbd: check iov vector index in ksmbd_conn_write() ksmbd: return invalid parameter error response if smb2 request is invalid ksmbd: fix passing freed memory 'aux_payload_buf' ksmbd: remove unneeded mark_inode_dirty in set_info_sec() ksmbd: remove experimental warning ksmbd: add missing calling smb2_set_err_rsp() on error ksmbd: Fix one kernel-doc comment ksmbd: fix `force create mode' and `force directory mode' ksmbd: fix wrong interim response on compound ksmbd: add support for read compound ksmbd: switch to use kmemdup_nul() helper ksmbd: check if a mount point is crossed during path lookup ksmbd: Fix unsigned expression compared with zero ksmbd: Replace one-element array with flexible-array member ksmbd: Use struct_size() helper in ksmbd_negotiate_smb_dialect() ksmbd: Replace the ternary conditional operator with min() ksmbd: use kvzalloc instead of kvmalloc ksmbd: Change the return value of ksmbd_vfs_query_maximal_access to void ksmbd: return a literal instead of 'err' in ksmbd_vfs_kern_path_locked() ksmbd: use kzalloc() instead of __GFP_ZERO ksmbd: remove unused ksmbd_tree_conn_share function ksmbd: add mnt_want_write to ksmbd vfs functions ksmbd: fix posix_acls and acls dereferencing possible ERR_PTR() ksmbd: call putname after using the last component ksmbd: fix uninitialized pointer read in smb2_create_link() ksmbd: fix uninitialized pointer read in ksmbd_vfs_rename() ksmbd: fix racy issue from using ->d_parent and ->d_name fs: introduce lock_rename_child() helper ksmbd: remove unused compression negotiate ctx packing ksmbd: avoid duplicate negotiate ctx offset increments ksmbd: set NegotiateContextCount once instead of every inc ksmbd: delete asynchronous work from list ksmbd: remove unused is_char_allowed function ksmbd: Fix parameter name and comment mismatch ksmbd: Fix spelling mistake "excceed" -> "exceeded" ksmbd: update Kconfig to note Kerberos support and fix indentation ksmbd: Remove duplicated codes ksmbd: fix typo, syncronous->synchronous ksmbd: Implements sess->rpc_handle_list as xarray ksmbd: Convert to use sysfs_emit()/sysfs_emit_at() APIs ksmbd: Fix resource leak in smb2_lock() ksmbd: use F_SETLK when unlocking a file ksmbd: set SMB2_SESSION_FLAG_ENCRYPT_DATA when enforcing data encryption for this share ksmbd: replace one-element arrays with flexible-array members Revert "hrtimers: Push pending hrtimers away from outgoing CPU earlier" Revert "drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group" ANDROID: KVM: arm64: Don't prepopulate MMIO regions for host stage-2 BACKPORT: FROMGIT fork: use __mt_dup() to duplicate maple tree in dup_mmap() FROMGIT: maple_tree: preserve the tree attributes when destroying maple tree FROMGIT: maple_tree: update check_forking() and bench_forking() FROMGIT: maple_tree: skip other tests when BENCH is enabled FROMGIT: maple_tree: update the documentation of maple tree FROMGIT: maple_tree: add test for mtree_dup() FROMGIT: radix tree test suite: align kmem_cache_alloc_bulk() with kernel behavior. FROMGIT: maple_tree: introduce interfaces __mt_dup() and mtree_dup() FROMGIT: maple_tree: introduce {mtree,mas}_lock_nested() FROMGIT: maple_tree: add mt_free_one() and mt_attr() helpers UPSTREAM: maple_tree: introduce __mas_set_range() ANDROID: GKI: Enable symbols for v4l2 in async and fwnode Revert "mmc: core: add helpers mmc_regulator_enable/disable_vqmmc" Revert "mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled" ANDROID: Update the ABI symbol list ANDROID: KVM: arm64: Fix hyp event alignment ANDROID: KVM: arm64: Fix host_smc print typo FROMGIT: f2fs: do not return EFSCORRUPTED, but try to run online repair ANDROID: KVM: arm64: Document module_change_host_prot_range Revert "mmc: core: add helpers mmc_regulator_enable/disable_vqmmc" Revert "mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled" FROMGIT: PM / devfreq: Synchronize devfreq_monitor_[start/stop] FROMGIT: arch/mm/fault: fix major fault accounting when retrying under per-VMA lock UPSTREAM: mm: handle write faults to RO pages under the VMA lock UPSTREAM: mm: handle read faults under the VMA lock UPSTREAM: mm: handle COW faults under the VMA lock UPSTREAM: mm: handle shared faults under the VMA lock BACKPORT: mm: call wp_page_copy() under the VMA lock UPSTREAM: mm: make lock_folio_maybe_drop_mmap() VMA lock aware UPSTREAM: mm/memory.c: fix mismerge ANDROID: Export functions to be used with dma_map_ops in modules BACKPORT: FROMGIT: erofs: enable sub-page compressed block support FROMGIT: erofs: refine z_erofs_transform_plain() for sub-page block support FROMGIT: erofs: fix ztailpacking for subpage compressed blocks BACKPORT: FROMGIT: erofs: fix up compacted indexes for block size < 4096 FROMGIT: erofs: record `pclustersize` in bytes instead of pages FROMGIT: erofs: support I/O submission for sub-page compressed blocks FROMGIT: erofs: fix lz4 inplace decompression FROMGIT: erofs: fix memory leak on short-lived bounced pages BACKPORT: erofs: tidy up z_erofs_do_read_page() UPSTREAM: erofs: move preparation logic into z_erofs_pcluster_begin() BACKPORT: erofs: avoid obsolete {collector,collection} terms BACKPORT: erofs: simplify z_erofs_read_fragment() UPSTREAM: erofs: get rid of the remaining kmap_atomic() UPSTREAM: erofs: simplify z_erofs_transform_plain() BACKPORT: erofs: adapt managed inode operations into folios UPSTREAM: erofs: avoid on-stack pagepool directly passed by arguments UPSTREAM: erofs: allocate extra bvec pages directly instead of retrying UPSTREAM: erofs: clean up z_erofs_pcluster_readmore() UPSTREAM: erofs: remove the member readahead from struct z_erofs_decompress_frontend UPSTREAM: erofs: fold in z_erofs_decompress() UPSTREAM: erofs: enable large folios for iomap mode ANDROID: Update the ABI symbol list UPSTREAM: USB: gadget: core: adjust uevent timing on gadget unbind Linux 6.1.70 loop: deprecate autoloading callback loop_probe() wifi: nl80211: fix deadlock in nl80211_set_cqm_rssi (6.6.x) wifi: cfg80211: fix CQM for non-range use fuse: share lookup state between submount and its parent mm/damon/core: make damon_start() waits until kdamond_fn() starts x86/alternatives: Sync core before enabling interrupts KVM: arm64: vgic: Force vcpu vgic teardown on vcpu destroy KVM: arm64: vgic: Add a non-locking primitive for kvm_vgic_vcpu_destroy() KVM: arm64: vgic: Simplify kvm_vgic_destroy() thunderbolt: Fix memory leak in margining_port_remove() lib/vsprintf: Fix %pfwf when current node refcount == 0 gpio: dwapb: mask/unmask IRQ when disable/enale it bus: ti-sysc: Flush posted write only after srst_udelay pinctrl: starfive: jh7100: ignore disabled device tree nodes dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata() tracing / synthetic: Disable events after testing in synth_event_gen_test_init() scsi: core: Always send batch on reset or error handling command Revert "scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity" selftests: mptcp: join: fix subflow_send_ack lookup ublk: move ublk_cancel_dev() out of ub->mutex ubifs: fix possible dereference after free btrfs: zoned: no longer count fresh BG region as zone unusable Revert "drm/amd/display: Do not set DRR on pipe commit" dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client loop: do not enforce max_loop hard limit by (new) default RISC-V: Fix do_notify_resume / do_work_pending prototype 9p: prevent read overrun in protocol dump tracepoint drm/i915: Reject async flips with bigjoiner smb: client: fix OOB in smbCalcSize() smb: client: fix OOB in SMB2_query_info_init() smb: client: fix potential OOB in cifs_dump_detail() smb: client: fix OOB in cifsd when receiving compounded resps dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp net: ks8851: Fix TX stall caused by TX buffer overrun net: rfkill: gpio: set GPIO direction net: 9p: avoid freeing uninit memory in p9pdu_vreadf Input: soc_button_array - add mapping for airplane mode button net: usb: ax88179_178a: avoid failed operations when device is disconnected Bluetooth: Add more enc key size check Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE Bluetooth: L2CAP: Send reject on command corrupted request Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent ALSA: hda/realtek: Add quirk for ASUS ROG GV302XA USB: serial: option: add Quectel RM500Q R13 firmware support USB: serial: option: add Foxconn T99W265 with new baseline USB: serial: option: add Quectel EG912Y module support USB: serial: ftdi_sio: update Actisense PIDs constant names wifi: cfg80211: fix certs build to not depend on file order wifi: cfg80211: Add my certificate usb-storage: Add quirk for incorrect WP on Kingston DT Ultimate 3.0 G3 ALSA: usb-audio: Increase delay in MOTU M quirk iio: triggered-buffer: prevent possible freeing of wrong buffer iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma() iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() Input: ipaq-micro-keys - add error handling for devm_kmemdup interconnect: qcom: sm8250: Enable sync_state iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw interconnect: Treat xlate() returning NULL node as an error drm/i915: Fix ADL+ tiled plane stride when the POT stride is smaller than the original drm/i915/mtl: Add MTL for remapping CCS FBs drm/i915/dpt: Only do the POT stride remap when using DPT drm/i915: Fix intel_atomic_setup_scalers() plane_state handling drm/i915: Relocate intel_atomic_setup_scalers() drm/i915/mtl: limit second scaler vertical scaling in ver >= 14 nvme-pci: fix sleeping function called from interrupt context gpiolib: cdev: add gpio_device locking wrapper around gpio_ioctl() pinctrl: at91-pio4: use dedicated lock class for IRQ x86/xen: add CPU dependencies for 32-bit build i2c: aspeed: Handle the coalesced stop conditions with the start conditions. ASoC: fsl_sai: Fix channel swap issue on i.MX8MP ASoC: hdmi-codec: fix missing report for jack initial status afs: Fix use-after-free due to get/remove race in volume tree afs: Fix overwriting of result of DNS query keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry net: check dev->gso_max_size in gso_features_check() afs: Fix dynamic root lookup DNS check afs: Fix the dynamic root's d_delete to always delete unused dentries net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() net: mana: select PAGE_POOL Bluetooth: hci_event: shut up a false-positive warning Bluetooth: Fix deadlock in vhci_send_frame net/rose: fix races in rose_kill_by_device() ethernet: atheros: fix a memleak in atl1e_setup_ring_resources net: sched: ife: fix potential use-after-free net: Return error from sk_stream_wait_connect() if sk_wait_event() fails octeontx2-pf: Fix graceful exit during PFC configuration failure net: mscc: ocelot: fix eMAC TX RMON stats for bucket 256-511 and above net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors net/mlx5e: Correct snprintf truncation handling for fw_version buffer net/mlx5: Fix fw tracer first block check net/mlx5e: fix a potential double-free in fs_udp_create_groups net/mlx5e: Fix a race in command alloc flow net/mlx5: Re-organize mlx5_cmd struct net/mlx5: Prevent high-rate FW commands from populating all slots net/mlx5: Introduce and use opcode getter in command interface net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list() Revert "net/mlx5e: fix double free of encap_header" Revert "net/mlx5e: fix double free of encap_header in update funcs" wifi: mac80211: mesh_plink: fix matches_local logic wifi: mac80211: mesh: check element parsing succeeded wifi: mac80211: check if the existing link config remains unchanged wifi: iwlwifi: pcie: add another missing bh-disable for rxq->lock s390/vx: fix save/restore of fpu kernel context reset: Fix crash when freeing non-existent optional resets ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init ARM: dts: dra7: Fix DRA7 L3 NoC node register size drm/amd/display: fix hw rotated modes when PSR-SU is enabled HID: i2c-hid: Add IDEA5002 to i2c_hid_acpi_blacklist[] HID: i2c-hid: acpi: Unify ACPI ID tables format bpf: Fix prog_array_map_poke_run map poke update kasan: disable kasan_non_canonical_hook() for HW tags ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: Add hooks for rt_mutex steal UPSTREAM: dm verity: don't perform FEC for failed readahead IO UPSTREAM: netfilter: nft_set_pipapo: skip inactive elements during set walk FROMLIST: mm: migrate high-order folios in swap cache correctly ANDROID: fuse-bpf: Follow mounts in lookups Linux 6.1.69 r8152: fix the autosuspend doesn't work r8152: remove rtl_vendor_mode function r8152: avoid to change cfg for all devices net: tls, update curr on splice as well ring-buffer: Have rb_time_cmpxchg() set the msb counter too ring-buffer: Do not try to put back write_stamp ring-buffer: Fix a race in rb_time_cmpxchg() for 32 bit archs ring-buffer: Fix writing to the buffer with max_data_size ring-buffer: Have saved event hold the entire event ring-buffer: Do not update before stamp when switching sub-buffers tracing: Update snapshot buffer on resize if it is allocated ring-buffer: Fix memory leak of free page smb: client: fix OOB in smb2_query_reparse_point() smb: client: fix NULL deref in asn1_ber_decoder() smb: client: fix OOB in receive_encrypted_standard() drm/i915: Fix remapped stride with CCS on ADL+ drm/amd/display: Disable PSR-SU on Parade 0803 TCON again drm/amdgpu: fix tear down order in amdgpu_vm_pt_free btrfs: don't clear qgroup reserved bit in release_folio btrfs: free qgroup reserve when ORDERED_IOERR is set mm/shmem: fix race in shmem_undo_range w/THP mm/mglru: fix underprotected page cache dmaengine: stm32-dma: avoid bitfield overflow assertion drm/amdgpu/sdma5.2: add begin/end_use ring callbacks team: Fix use-after-free when an option instance allocation fails arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS soundwire: stream: fix NULL pointer dereference for multi_link btrfs: do not allow non subvolume root targets for snapshot perf: Fix perf_event_validate_size() lockdep splat HID: hid-asus: add const to read-only outgoing usb buffer arm64: add dependency between vmlinuz.efi and Image net: usb: qmi_wwan: claim interface 4 for ZTE MF290 asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad HID: hid-asus: reset the backlight brightness level on resume nbd: pass nbd_sock to nbd_read_reply() instead of index HID: add ALWAYS_POLL quirk for Apple kb HID: glorious: fix Glorious Model I HID report platform/x86: intel_telemetry: Fix kernel doc descriptions LoongArch: Implement constant timer shutdown interface LoongArch: Add dependency between vmlinuz.efi and vmlinux.efi selftests/bpf: fix bpf_loop_bench for new callback verification scheme nvme: catch errors from nvme_configure_metadata() nvme-auth: set explanation code for failure2 msgs nbd: fold nbd config initialization into nbd_alloc_config() bcache: avoid NULL checking to c->root in run_cache_set() bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() bcache: remove redundant assignment to variable cur_idx bcache: avoid oversize memory allocation by small stripe_size blk-cgroup: bypass blkcg_deactivate_policy after destroying blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" stmmac: dwmac-loongson: Add architecture dependency usb: aqc111: check packet for fixup for true limit x86/hyperv: Fix the detection of E820_TYPE_PRAM in a Gen2 VM drm/mediatek: Add spinlock for setting vblank event in atomic_begin ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE PCI: loongson: Limit MRRS to 256 Revert "PCI: acpiphp: Reassign resources on bridge if necessary" ALSA: hda/realtek: Apply mute LED quirk for HP15-db ALSA: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants ALSA: hda/hdmi: add force-connect quirk for NUC5CPYB fuse: dax: set fc->dax to NULL in fuse_dax_conn_free() cred: switch to using atomic_long_t net: atlantic: fix double free in ring reinit logic appletalk: Fix Use-After-Free in atalk_ioctl net: stmmac: Handle disabled MDIO busses from devicetree dpaa2-switch: do not ask for MDB, VLAN and FDB replay dpaa2-switch: fix size of the dma_unmap vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() sign-file: Fix incorrect return values check stmmac: dwmac-loongson: Make sure MDIO is initialized before use net: ena: Fix XDP redirection error net: ena: Fix xdp drops handling due to multibuf packets net: ena: Destroy correct number of xdp queues upon failure net: Remove acked SYN flag from packet in the transmit queue correctly qed: Fix a potential use-after-free in qed_cxt_tables_alloc iavf: Handle ntuple on/off based on new state machines for flow director iavf: Introduce new state machines for flow director net/rose: Fix Use-After-Free in rose_ioctl atm: Fix Use-After-Free in do_vcc_ioctl octeontx2-af: Update RSS algorithm index octeontx2-pf: Fix promisc mcam entry action octeontx2-af: fix a use-after-free in rvu_nix_register_reporters net: fec: correct queue selection net: vlan: introduce skb_vlan_eth_hdr() atm: solos-pci: Fix potential deadlock on &tx_queue_lock atm: solos-pci: Fix potential deadlock on &cli_queue_lock bnxt_en: Fix HWTSTAMP_FILTER_ALL packet timestamp logic bnxt_en: Fix wrong return value check in bnxt_close_nic() bnxt_en: Save ring error counters across reset bnxt_en: Clear resource reservation during resume qca_spi: Fix reset behavior qca_debug: Fix ethtool -G iface tx behavior qca_debug: Prevent crash on TX ring changes net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX net/mlx5e: Fix possible deadlock on mlx5e_tx_timeout_work HID: lenovo: Restrict detection of patched firmware only to USB cptkbd afs: Fix refcount underflow from error handling race ksmbd: fix memory leak in smb2_lock() ext4: fix warning in ext4_dio_write_end_io() powerpc/ftrace: Fix stack teardown in ftrace_no_trace r8152: add vendor/device ID pair for ASUS USB-C2500 r8152: add vendor/device ID pair for D-Link DUB-E250 r8152: add USB device driver for config selection perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table Revert "HID: fix HID device resource race between HID core and debugging support" ANDROID: GKI: Add symbols for rockchip sata ANDROID: sched: Add trace_android_rvh_setscheduler ANDROID: Update the ABI symbol list ANDROID: GKI: build damon for monitoring virtual address spaces UPSTREAM: mm/damon/sysfs-schemes: handle tried region directory allocation failure UPSTREAM: mm/damon/sysfs-schemes: handle tried regions sysfs directory allocation failure UPSTREAM: mm/damon/sysfs: check error from damon_sysfs_update_target() UPSTREAM: mm/damon/sysfs: eliminate potential uninitialized variable warning UPSTREAM: mm/damon/sysfs: update monitoring target regions for online input commit UPSTREAM: mm/damon/sysfs: remove requested targets when online-commit inputs UPSTREAM: mm/damon/sysfs: avoid empty scheme tried regions for large apply interval UPSTREAM: mm/damon/sysfs-schemes: do not update tried regions more than one DAMON snapshot UPSTREAM: mm/damon/sysfs: check DAMOS regions update progress from before_terminate() UPSTREAM: mm/damon/sysfs: implement a command for updating only schemes tried total bytes UPSTREAM: mm/damon/sysfs-schemes: implement DAMOS tried total bytes file UPSTREAM: mm/damon/ops-common: refactor to use {pte|pmd}p_clear_young_notify() UPSTREAM: mm/damon/core: skip apply schemes if empty UPSTREAM: mm/damon: use kstrtobool() instead of strtobool() UPSTREAM: mm/damon/sysfs-schemes: implement DAMOS-tried regions clear command UPSTREAM: mm/damon/sysfs: implement DAMOS tried regions update command UPSTREAM: mm/damon/sysfs-schemes: implement scheme region directory UPSTREAM: mm/damon/sysfs-schemes: implement schemes/tried_regions directory UPSTREAM: mm/damon/core: add a callback for scheme target regions check UPSTREAM: mm/damon/lru_sort: enable and disable synchronously UPSTREAM: mm/damon/reclaim: enable and disable synchronously UPSTREAM: mm/damon/{reclaim,lru_sort}: remove unnecessarily included headers UPSTREAM: mm/damon/modules: deduplicate init steps for DAMON context setup UPSTREAM: mm/damon/sysfs: split out schemes directory implementation to separate file UPSTREAM: mm/damon/sysfs: split out kdamond-independent schemes stats update logic into a new function UPSTREAM: mm/damon/sysfs: move unsigned long range directory to common module UPSTREAM: mm/damon/sysfs: move sysfs_lock to common module UPSTREAM: mm/damon/sysfs: remove parameters of damon_sysfs_region_alloc() UPSTREAM: mm/damon/sysfs: use damon_addr_range for region's start and end values UPSTREAM: mm/damon/core: split out scheme quota adjustment logic into a new function UPSTREAM: mm/damon/core: split out scheme stat update logic into a new function UPSTREAM: mm/damon/core: split damos application logic into a new function UPSTREAM: mm/damon/core: split out DAMOS-charged region skip logic into a new function ANDROID: Snapshot Mainline's version of checkpatch.pl ANDROID: KVM: arm64: Skip prefaulting ptes which will be modified later ANDROID: KVM: arm64: Introduce module_change_host_prot_range ANDROID: KVM: arm64: Relax checks in module_change_host_page_prot ANDROID: KVM: arm64: Optimise module_change_host_page_prot ANDROID: KVM: arm64: Prefault entries when splitting a block mapping ANDROID: virt: gunyah: Zero state_data after vcpu_run ANDROID: Update the ABI symbol list ANDROID: fs: Add vendor hooks for ep_create_wakeup_source & timerfd_create ANDROID: ABI: update symbol list for galaxy Linux 6.1.68 drm/i915: Skip some timing checks on BXT/GLK DSI transcoders drm/i915/sdvo: stop caching has_hdmi_monitor in struct intel_sdvo drm/i915/lvds: Use REG_BIT() & co. drm/i915/display: Drop check for doublescan mode in modevalid riscv: Kconfig: Add select ARM_AMBA to SOC_STARFIVE netfilter: nft_set_pipapo: skip inactive elements during set walk MIPS: Loongson64: Enable DMA noncoherent support MIPS: Loongson64: Handle more memory types passed from firmware MIPS: Loongson64: Reserve vgabios memory on boot KVM: SVM: Update EFER software model on CR0 trap for SEV-ES KVM: s390/mm: Properly reset no-dat MIPS: kernel: Clear FPU states when setting up kernel threads cifs: Fix flushing, invalidation and file size with FICLONE cifs: Fix flushing, invalidation and file size with copy_file_range() USB: gadget: core: adjust uevent timing on gadget unbind x86/CPU/AMD: Check vendor in the AMD microcode callback devcoredump: Send uevent once devcd is ready serial: 8250_omap: Add earlycon support for the AM654 UART controller serial: 8250: 8250_omap: Do not start RX DMA on THRI interrupt serial: 8250: 8250_omap: Clear UART_HAS_RHR_IT_DIS bit serial: sc16is7xx: address RX timeout interrupt errata ARM: PL011: Fix DMA support usb: typec: class: fix typec_altmode_put_partner to put plugs smb: client: fix potential NULL deref in parse_dfs_referrals() Revert "xhci: Loosen RPM as default policy to cover for AMD xHC 1.1" cifs: Fix non-availability of dedup breaking generic/304 parport: Add support for Brainboxes IX/UC/PX parallel cards serial: 8250_dw: Add ACPI ID for Granite Rapids-D UART usb: gadget: f_hid: fix report descriptor allocation drm/amdgpu: Update EEPROM I2C address for smu v13_0_0 drm/amdgpu: Add I2C EEPROM support on smu v13_0_6 drm/amdgpu: simplify amdgpu_ras_eeprom.c drm/amdgpu: Return from switch early for EEPROM I2C address drm/amdgpu: Remove second moot switch to set EEPROM I2C address drm/amdgpu: Add support for RAS table at 0x40000 drm/amdgpu: Decouple RAS EEPROM addresses from chips drm/amdgpu: Remove redundant I2C EEPROM address drm/amdgpu: Add EEPROM I2C address support for ip discovery drm/amdgpu: Update ras eeprom support for smu v13_0_0 and v13_0_10 drm/amdgpu: correct the amdgpu runtime dereference usage count drm/amd/amdgpu: Fix warnings in amdgpu/amdgpu_display.c drm/amdgpu: fix memory overflow in the IB test gpiolib: sysfs: Fix error handling on failed export x86/sev: Fix kernel crash due to late update to read-only ghcb_version perf: Fix perf_event_validate_size() arm64: dts: mt8183: kukui: Fix underscores in node names arm64: dts: mediatek: add missing space before { parisc: Fix asm operand number out of range build error in bug table parisc: Reduce size of the bug_table on 64-bit kernel by half tracing: Stop current tracer when resizing buffer tracing: Set actual size after ring buffer resize ring-buffer: Force absolute timestamp on discard of event LoongArch: BPF: Don't sign extend function return value LoongArch: BPF: Don't sign extend memory load operand misc: mei: client.c: fix problem of return '-EOVERFLOW' in mei_cl_write misc: mei: client.c: return negative error code in mei_cl_write hwtracing: hisi_ptt: Add dummy callback pmu::read() coresight: etm4x: Remove bogous __exit annotation for some functions coresight: etm4x: Make etm4_remove_dev() return void binder: fix memory leaks of spam and pending work arm64: dts: mediatek: mt8183-evb: Fix unit_address_vs_reg warning on ntc arm64: dts: mediatek: mt8183: Move thermal-zones to the root node arm64: dts: mediatek: mt8183: Fix unit address for scp reserved memory arm64: dts: mediatek: mt8195: Fix PM suspend/resume with venc clocks arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names arm64: dts: mediatek: cherry: Fix interrupt cells for MT6360 on I2C7 arm64: dts: mediatek: mt8183-kukui-jacuzzi: fix dsi unnecessary cells properties arm64: dts: mediatek: mt7622: fix memory node warning check md/raid6: use valid sector values to determine if an I/O should wait on the reshape powercap: DTPM: Fix missing cpufreq_cpu_put() calls mm: fix oops when filemap_map_pmd() without prealloc_pte hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write platform/surface: aggregator: fix recv_buf() return value regmap: fix bogus error on regcache_sync success r8169: fix rtl8125b PAUSE frames blasting when suspended packet: Move reference count in packet_sock to atomic_long_t tracing: Fix a possible race when disabling buffered events tracing: Fix incomplete locking when disabling buffered events tracing: Disable snapshot buffer when stopping instance tracers tracing: Always update snapshot buffer size checkstack: fix printed address cgroup_freezer: cgroup_freezing: Check if not frozen nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() nilfs2: fix missing error check for sb_set_blocksize call ring-buffer: Test last update in 32bit version of __rb_time_read() ALSA: hda/realtek: Add Framework laptop 16 to quirks ALSA: hda/realtek: add new Framework laptop to quirks ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5 ALSA: pcm: fix out-of-bounds in snd_pcm_state_names ALSA: usb-audio: Add Pioneer DJM-450 mixer controls io_uring: fix mutex_unlock with unreferenced ctx nvme-pci: Add sleep quirk for Kingston drives io_uring/af_unix: disable sending io_uring over sockets ASoC: amd: yc: Fix non-functional mic on ASUS E1504FA kprobes: consistent rcu api usage for kretprobe holder rethook: Use __rcu pointer for rethook::handler iommu: Avoid more races around device probe md: don't leave 'MD_RECOVERY_FROZEN' in error path of md_set_readonly() md: introduce md_ro_state riscv: fix misaligned access handling of C.SWSP and C.SDSP ARM: dts: imx28-xea: Pass the 'model' property ARM: dts: imx7: Declare timers compatible with fsl,imx6dl-gpt ARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() tracing: Fix a warning when allocating buffered events fails ARM: dts: imx6ul-pico: Describe the Ethernet PHY clock arm64: dts: imx8mp: imx8mq: Add parkmode-disable-ss-quirk on DWC3 arm64: dts: imx8mq: drop usb3-resume-missing-cas from usb drm/bridge: tc358768: select CONFIG_VIDEOMODE_HELPERS RDMA/irdma: Avoid free the non-cqp_request scratch RDMA/core: Fix umem iterator when PAGE_SIZE is greater then HCA pgsz ASoC: wm_adsp: fix memleak in wm_adsp_buffer_populate hwmon: (nzxt-kraken2) Fix error handling path in kraken2_probe() ASoC: codecs: lpass-tx-macro: set active_decimator correct default value hwmon: (acpi_power_meter) Fix 4.29 MW bug RDMA/irdma: Fix UAF in irdma_sc_ccq_get_cqe_info() RDMA/irdma: Refactor error handling in create CQP RDMA/bnxt_re: Correct module description string RDMA/rtrs-clt: Remove the warnings for req in_use check RDMA/rtrs-clt: Fix the max_send_wr setting RDMA/rtrs-srv: Destroy path files after making sure no IOs in-flight RDMA/rtrs-srv: Free srv_mr iu only when always_invalidate is true RDMA/rtrs-srv: Check return values while processing info request RDMA/rtrs-clt: Start hb after path_up RDMA/rtrs-srv: Do not unconditionally enable irq ASoC: fsl_sai: Fix no frame sync clock issue on i.MX8MP arm64: dts: rockchip: Expand reg size of vdec node for RK3399 arm64: dts: rockchip: Expand reg size of vdec node for RK3328 RDMA/irdma: Add wait for suspend on SQD RDMA/irdma: Do not modify to SQD on error RDMA/hns: Fix unnecessary err return when using invalid congest control algorithm tee: optee: Fix supplicant based device enumeration mm/damon/sysfs: eliminate potential uninitialized variable warning drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group psample: Require 'CAP_NET_ADMIN' when joining "packets" group bpf: sockmap, updating the sg structure should also update curr tcp: do not accept ACK of bytes we never sent netfilter: xt_owner: Fix for unsafe access of sk->sk_socket netfilter: nf_tables: validate family when identifying table via handle netfilter: nf_tables: bail out on mismatching dynset and set expressions netfilter: nf_tables: fix 'exist' matching on bigendian arches netfilter: nft_exthdr: add boolean DCCP option matching dt-bindings: interrupt-controller: Allow #power-domain-cells octeontx2-af: Update Tx link register range octeontx2-af: Add missing mcs flr handler call octeontx2-af: Fix mcs stats register address octeontx2-af: Fix mcs sa cam entries size octeontx2-af: Adjust Tx credits when MCS external bypass is disabled net: hns: fix fake link up on xge port net: hns: fix wrong head when modify the tx feature when sending packets net: atlantic: Fix NULL dereference of skb pointer in ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit() ionic: Fix dim work handling in split interrupt mode ionic: fix snprintf format length warning tcp: fix mid stream window clamp. net: bnxt: fix a potential use-after-free in bnxt_init_tc iavf: validate tx_coalesce_usecs even if rx_coalesce_usecs is zero i40e: Fix unexpected MFS warning message octeontx2-af: fix a use-after-free in rvu_npa_register_reporters xsk: Skip polling event check for unbound socket net: stmmac: fix FPE events losing octeontx2-pf: consider both Rx and Tx packet stats for adaptive interrupt coalescing arcnet: restoring support for multiple Sohard Arcnet cards platform/mellanox: Check devm_hwmon_device_register_with_groups() return value platform/mellanox: Add null pointer checks for devm_kasprintf() mlxbf-bootctl: correctly identify secure boot with development keys r8152: Add RTL8152_INACCESSIBLE to r8153_aldps_en() r8152: Add RTL8152_INACCESSIBLE to r8153_pre_firmware_1() r8152: Add RTL8152_INACCESSIBLE to r8156b_wait_loading_flash() r8152: Add RTL8152_INACCESSIBLE checks to more loops r8152: Rename RTL8152_UNPLUG to RTL8152_INACCESSIBLE hv_netvsc: rndis_filter needs to select NLS octeontx2-af: Check return value of nix_get_nixlf before using nixlf octeontx2-pf: Add missing mutex lock in otx2_get_pauseparam ipv6: fix potential NULL deref in fib6_add() platform/x86: wmi: Skip blocks with zero instances of: dynamic: Fix of_reconfig_get_state_change() return value documentation platform/x86: asus-wmi: Move i8042 filter install to shared asus-wmi code dt: dt-extract-compatibles: Don't follow symlinks when walking tree dt: dt-extract-compatibles: Handle cfile arguments in generator function x86/tdx: Allow 32-bit emulation by default x86/entry: Do not allow external 0x80 interrupts x86/entry: Convert INT 0x80 emulation to IDTENTRY x86/coco: Disable 32-bit emulation by default on TDX and SEV x86: Introduce ia32_enabled() drm/amdgpu: correct chunk_ptr to a pointer to chunk. kconfig: fix memory leak from range properties tg3: Increment tx_dropped in tg3_tso_bug() tg3: Move the [rt]x_dropped counters to tg3_napi zstd: Fix array-index-out-of-bounds UBSAN warning netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test i2c: designware: Fix corrupted memory seen in the ISR hrtimers: Push pending hrtimers away from outgoing CPU earlier vdpa/mlx5: preserve CVQ vringh index ANDROID: Fix up merge issues in 6.1.64 in net/netfilter/nf_tables_api.c Reapply "binder: fix UAF caused by faulty buffer cleanup" ANDROID: Fix up unneeded crc break in af_vsock.c Revert "mmc: Add quirk MMC_QUIRK_BROKEN_CACHE_FLUSH for Micron eMMC Q2J54A" Revert "ASoC: soc-card: Add storage for PCI SSID" Revert "tracing: Have trace_event_file have ref counters" Revert "workqueue: Provide one lock class key per work_on_cpu() callsite" UPSTREAM: x86/sev: Check for user-space IOIO pointing to kernel space UPSTREAM: x86/sev: Check IOBM for IOIO exceptions from user-space FROMGIT: usb: typec: tcpm: skip checking port->send_discover in PD3.0 ANDROID: arm64: Disable workaround for CPU errata 2441007 and 2441009 Linux 6.1.67 Revert "wifi: cfg80211: fix CQM for non-range use" ANDROID: Update the ABI symbol list ANDROID: netlink: add netlink poll and hooks Linux 6.1.66 iomap: update ki_pos a little later in iomap_dio_complete x86/apic/msi: Fix misconfigured non-maskable MSI quirk x86/xen: fix percpu vcpu_info allocation xen: simplify evtchn_do_upcall() call maze xen: Allow platform PCI interrupt to be shared r8169: fix deadlock on RTL8125 in jumbo mtu mode r8169: disable ASPM in case of tx timeout drm/amd/display: Fix MPCC 1DLUT programming drm/amd/display: Fix the delta clamping for shaper LUT drm/amd/display: clean code-style issues in dcn30_set_mpc_shaper_3dlut drm/amd/display: Expand kernel doc for DC mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled mmc: core: add helpers mmc_regulator_enable/disable_vqmmc drm/amd/pm: fix a memleak in aldebaran_tables_init iommu/vt-d: Make context clearing consistent with context mapping iommu/vt-d: Disable PCI ATS in legacy passthrough mode iommu/vt-d: Add device_block_translation() helper iommu/vt-d: Allocate pasid table in device probe path iommu/vt-d: Omit devTLB invalidation requests when TES=0 cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily cpufreq: imx6q: don't warn for disabling a non-existing frequency drm/amd/display: Guard against invalid RPTR/WPTR being set drm/amd/display: Restore rptr/wptr for DMCUB as workaround spi: Fix null dereference on suspend fbdev: stifb: Make the STI next font pointer a 32-bit signed offset PCI: qcom-ep: Add dedicated callback for writing to DBI2 registers octeontx2-af: Initialize 'cntr_val' to fix uninitialized symbol error PCI: Lengthen reset delay for VideoPropulsion Torrent QN16e card KVM: x86: Fix lapic timer interrupt lost after loading a snapshot. net: ravb: Keep reverse order of operations in ravb_remove() net: ravb: Stop DMA in case of failures on ravb_open() net: ravb: Start TX queues after HW initialization succeeded net: ravb: Make write access to CXR35 first before accessing other EMAC registers net: ravb: Use pm_runtime_resume_and_get() net: ravb: Check return value of reset_control_deassert() ravb: Fix races between ravb_tx_timeout_work() and net related ops r8169: prevent potential deadlock in rtl8169_close octeontx2-pf: Restore TC ingress police rules when interface is up octeontx2-af: Install TC filter rules in hardware based on priority octeontx2-pf: Fix adding mbox work queue entry when num_vfs > 64 net: stmmac: xgmac: Disable FPE MMC interrupts octeontx2-af: Fix possible buffer overflow selftests/net: mptcp: fix uninitialized variable warnings selftests/net: unix: fix unused variable compiler warning selftests/net: fix a char signedness issue selftests/net: ipsec: fix constant out of range uapi: propagate __struct_group() attributes to the container union dpaa2-eth: increase the needed headroom to account for alignment ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet usb: config: fix iteration issue in 'usb_get_bos_descriptor()' USB: core: Change configuration warnings to notices USB: xhci-plat: fix legacy PHY double init wifi: cfg80211: fix CQM for non-range use serial: sc16is7xx: add missing support for rs485 devicetree properties serial: sc16is7xx: Put IOControl register into regmap_volatile auxdisplay: hd44780: move cursor home after clear display command Input: xpad - add HyperX Clutch Gladiate Support btrfs: fix 64bit compat send ioctl arguments not initializing version member btrfs: make error messages more clear when getting a chunk map btrfs: send: ensure send_fd is writable btrfs: fix off-by-one when checking chunk map includes logical address btrfs: ref-verify: fix memory leaks in btrfs_ref_tree_mod() btrfs: add dmesg output for first mount and last unmount of a filesystem parisc: Mark altinstructions read-only and 32-bit aligned parisc: Ensure 32-bit alignment on parisc unwind section parisc: Mark jump_table naturally aligned parisc: Drop the HP-UX ENOSYM and EREMOTERELEASE error codes parisc: Mark lock_aligned variables 16-byte aligned on SMP parisc: Use natural CPU alignment for bug_table parisc: Mark ex_table entries 32-bit aligned in uaccess.h parisc: Mark ex_table entries 32-bit aligned in assembly.h powerpc: Don't clobber f0/vs0 during fp|altivec register save KVM: PPC: Book3S HV: Fix KVM_RUN clobbering FP/VEC user registers iommu/vt-d: Add MTL to quirk list to skip TE disabling bcache: revert replacing IS_ERR_OR_NULL with IS_ERR dma-buf: fix check in dma_resv_add_fence cpufreq/amd-pstate: Fix the return value of amd_pstate_fast_switch() powercap: DTPM: Fix unneeded conversions to micro-Watts nvme: check for valid nvme_identify_ns() before using it dm verity: don't perform FEC for failed readahead IO dm verity: initialize fec io before freeing it drm/amd/display: fix ABM disablement drm/amd/display: Update min Z8 residency time to 2100 for DCN314 drm/amd/display: Use DRAM speed from validation for dummy p-state drm/amd/display: Remove min_dst_y_next_start check for Z8 drm/amd/display: Include udelay when waiting for INBOX0 ACK drm/amdgpu: Force order between a read and write to the same address drm/amd: Enable PCIe PME from D3 scsi: sd: Fix system start for ATA devices scsi: Change SCSI device boolean fields to single bit flags dm-verity: align struct dm_verity_fec_io properly ALSA: hda/realtek: Add supported ALC257 for ChromeOS ALSA: hda/realtek: Headset Mic VREF to 100% ALSA: hda: Disable power-save on KONTRON SinglePC mmc: block: Be sure to wait while busy in CQE error recovery mmc: block: Do not lose cache flush during CQE error recovery mmc: block: Retry commands in CQE error recovery mmc: cqhci: Fix task clearing in CQE error recovery mmc: cqhci: Warn of halt or task clear failure mmc: cqhci: Increase recovery halt timeout mmc: sdhci-pci-gli: Disable LPM during initialization firewire: core: fix possible memory leak in create_units() pinctrl: avoid reload of p state in list iteration smb: client: report correct st_size for SMB and NFS symlinks cifs: Fix FALLOC_FL_INSERT_RANGE by setting i_size after EOF moved cifs: Fix FALLOC_FL_ZERO_RANGE by setting i_size if EOF moved Linux 6.1.65 io_uring: fix off-by one bvec index USB: dwc3: qcom: fix wakeup after probe deferral USB: dwc3: qcom: fix software node leak on probe errors usb: dwc3: set the dma max_seg_size usb: dwc3: Fix default mode initialization USB: dwc2: write HCINT with INTMASK applied usb: typec: tcpm: Skip hard reset when in error recovery USB: serial: option: don't claim interface 4 for ZTE MF290 USB: serial: option: fix FM101R-GL defines USB: serial: option: add Fibocom L7xx modules usb: cdnsp: Fix deadlock issue during using NCM gadget bcache: fixup lock c->root error bcache: fixup init dirty data errors bcache: prevent potential division by zero error bcache: check return value from btree_node_alloc_replacement() dm-delay: fix a race between delay_presuspend and delay_bio hv_netvsc: Mark VF as slave before exposing it to user-mode hv_netvsc: Fix race of register_netdevice_notifier and VF register hv_netvsc: fix race of netvsc and VF register_netdevice USB: serial: option: add Luat Air72*U series products s390/dasd: protect device queue against concurrent access io_uring/fs: consider link->flags when getting path for LINKAT bcache: fixup multi-threaded bch_sectors_dirty_init() wake-up race md: fix bi_status reporting in md_end_clone_io bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in btree_gc_coalesce() swiotlb-xen: provide the "max_mapping_size" method ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA arm64: dts: imx8mn-var-som: add 20ms delay to ethernet regulator enable NFSD: Fix checksum mismatches in the duplicate reply cache NFSD: Fix "start of NFS reply" pointer passed to nfsd_cache_update() ext4: make sure allocate pending entry not fail ext4: fix slab-use-after-free in ext4_es_insert_extent() ext4: using nofail preallocation in ext4_es_insert_extent() ext4: using nofail preallocation in ext4_es_insert_delayed_block() ext4: using nofail preallocation in ext4_es_remove_extent() ext4: use pre-allocated es in __es_remove_extent() ext4: use pre-allocated es in __es_insert_extent() ext4: factor out __es_alloc_extent() and __es_free_extent() ext4: add a new helper to check if es must be kept media: qcom: camss: Fix genpd cleanup media: qcom: camss: Fix V4L2 async notifier error path media: qcom: Initialise V4L2 async notifier later media: camss: Convert to platform remove callback returning void media: camss: Split power domain management MIPS: KVM: Fix a build warning about variable set but not used cifs: fix leak of iface for primary channel cifs: account for primary channel in the interface list cifs: distribute channels across interfaces based on speed cifs: print last update time for interface list smb3: allow dumping session and tcon id to improve stats analysis and debugging cifs: minor cleanup of some headers lockdep: Fix block chain corruption USB: dwc3: qcom: fix ACPI platform device leak USB: dwc3: qcom: fix resource leaks on probe deferral nvmet: nul-terminate the NQNs passed in the connect command i40e: Fix adding unsupported cloud filters i40e: use ERR_PTR error print in i40e messages arm64: mm: Fix "rodata=on" when CONFIG_RODATA_FULL_DEFAULT_ENABLED=y mm,kfence: decouple kfence from page granularity mapping judgement afs: Fix file locking on R/O volumes to operate in local mode afs: Return ENOENT if no cell DNS record can be found net: axienet: Fix check for partial TX checksum amd-xgbe: propagate the correct speed and duplex status amd-xgbe: handle the corner-case during tx completion amd-xgbe: handle corner-case during sfp hotplug octeontx2-pf: Fix ntuple rule creation to direct packet to VF with higher Rx queue than its PF arm/xen: fix xen_vcpu_info allocation alignment net/smc: avoid data corruption caused by decline net: usb: ax88179_178a: fix failed operations during ax88179_reset ipv4: Correct/silence an endian warning in __ip_do_redirect HID: fix HID device resource race between HID core and debugging support drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full drm/i915: do not clean GT table on error path ata: pata_isapnp: Add missing error check for devm_ioport_map() octeontx2-pf: Fix memory leak during interface down wireguard: use DEV_STATS_INC() drm/panel: simple: Fix Innolux G101ICE-L01 timings drm/panel: simple: Fix Innolux G101ICE-L01 bus flags drm/panel: auo,b101uan08.3: Fine tune the panel power sequence drm/panel: boe-tv101wum-nl6: Fine tune the panel power sequence afs: Make error on cell lookup failure consistent with OpenAFS afs: Fix afs_server_list to be cleaned up with RCU Revert "inet: shrink struct flowi_common" Revert "mfd: core: Un-constify mfd_cell.of_reg" Revert "arm64/arm: xen: enlighten: Fix KPTI checks" Revert "virtio/vsock: replace virtio_vsock_pkt with sk_buff" Revert "vsock/virtio: remove socket from connected/bound list on shutdown" Revert "virtio/vsock: don't use skbuff state to account credit" Revert "virtio/vsock: remove redundant 'skb_pull()' call" Revert "virtio/vsock: don't drop skbuff on copy failure" Revert "virtio/vsock: fix leaks due to missing skb owner" Revert "virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()" Revert "virtio/vsock: fix header length on skb merging" Revert "vsock/loopback: use only sk_buff_head.lock to protect the packet queue" Linux 6.1.64 RISC-V: drop error print from riscv_hartid_to_cpuid() cxl/port: Fix NULL pointer access in devm_cxl_add_port() mmc: sdhci-pci-gli: GL9755: Mask the replay timer timeout of AER Input: xpad - add VID for Turtle Beach controllers tracing: Have trace_event_file have ref counters powerpc/powernv: Fix fortify source warnings in opal-prd.c drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox drm/amd/display: Enable fast plane updates on DCN3.2 and above drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer() drm/amdgpu: lower CS errors to debug severity drm/amdgpu: fix error handling in amdgpu_bo_list_get() drm/amdgpu: don't use ATRM for external devices drm/amdgpu: don't use pci_is_thunderbolt_attached() drm/amdgpu/smu13: drop compute workload workaround drm/amd/pm: Fix error of MACO flag setting code drm/i915: Fix potential spectre vulnerability drm/i915: Bump GLK CDCLK frequency when driving multiple pipes drm/amd/pm: Handle non-terminated overdrive commands. ext4: properly sync file size update after O_SYNC direct IO ext4: add missed brelse in update_backups ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks ext4: correct the start block of counting reserved clusters ext4: correct return value of ext4_convert_meta_bg ext4: mark buffer new if it is unwritten to avoid stale data exposure ext4: correct offset of gdb backup in non meta_bg group to update_backups ext4: apply umask if ACL support is disabled Revert "net: r8169: Disable multicast filter for RTL8168H and RTL8107E" media: qcom: camss: Fix csid-gen2 for test pattern generator media: qcom: camss: Fix invalid clock enable bit disjunction media: qcom: camss: Fix missing vfe_lite clocks check media: qcom: camss: Fix VFE-480 vfe_disable_output() media: qcom: camss: Fix VFE-17x vfe_disable_output() media: qcom: camss: Fix vfe_get() error jump media: qcom: camss: Fix pm_domain_on sequence in probe mmc: sdhci-pci-gli: GL9750: Mask the replay timer timeout of AER r8169: add handling DASH when DASH is disabled r8169: fix network lost after resume on DASH systems mptcp: fix setsockopt(IP_TOS) subflow locking mptcp: add validity check for sending RM_ADDR mptcp: deal with large GSO size mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors mm: fix for negative counter: nr_file_hugepages mmc: sdhci-pci-gli: A workaround to allow GL9750 to enter ASPM L1.2 riscv: kprobes: allow writing to x0 riscv: correct pt_level name via pgtable_l5/4_enabled riscv: mm: Update the comment of CONFIG_PAGE_OFFSET LoongArch: Mark __percpu functions as always inline nfsd: fix file memleak on client_opens_release dm-verity: don't use blocking calls from tasklets drm/mediatek/dp: fix memory leak on ->get_edid callback error path drm/mediatek/dp: fix memory leak on ->get_edid callback audio detection media: ccs: Correctly initialise try compose rectangle media: venus: hfi: add checks to handle capabilities from firmware media: venus: hfi: fix the check to handle session buffer requirement media: venus: hfi_parser: Add check to keep the number of codecs within range media: sharp: fix sharp encoding media: lirc: drop trailing space from scancode transmit f2fs: avoid format-overflow warning f2fs: do not return EFSCORRUPTED, but try to run online repair i2c: i801: fix potential race in i801_block_transaction_byte_by_byte net: phylink: initialize carrier state at creation net: dsa: lan9303: consequently nested-lock physical MDIO net: ethtool: Fix documentation of ethtool_sprintf() s390/ap: fix AP bus crash on early config change callback invocation i2c: designware: Disable TX_EMPTY irq while waiting for block length byte sbsa_gwdt: Calculate timeout with 64-bit math lsm: fix default return value for inode_getsecctx lsm: fix default return value for vm_enough_memory Revert "i2c: pxa: move to generic GPIO recovery" Revert ncsi: Propagate carrier gain/loss events to the NCSI controller cxl/region: Fix x1 root-decoder granularity calculations tools/testing/cxl: Define a fixed volatile configuration to parse cxl/mem: Move devm_cxl_add_endpoint() from cxl_core to cxl_mem cxl: Unify debug messages when calling devm_cxl_add_port() i3c: master: svc: fix random hot join failure since timeout error i3c: master: svc: add NACK check after start byte sent cxl/region: Do not try to cleanup after cxl_region_setup_targets() fails cxl/region: Move region-position validation to a helper cxl/region: Cleanup target list on attach error cxl/region: Validate region mode vs decoder mode drm/amd/display: enable dsc_clk even if dsc_pg disabled Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables bluetooth: Add device 13d3:3571 to device tables bluetooth: Add device 0bda:887b to device tables Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559 clk: visconti: Fix undefined behavior bug in struct visconti_pll_provider clk: visconti: remove unused visconti_pll_provider::regmap cpufreq: stats: Fix buffer overflow detection in trans_stats() pmdomain: imx: Make imx pgc power domain also set the fwnode pmdomain: bcm: bcm2835-power: check if the ASB register is equal to enable ALSA: hda/realtek: Add quirks for HP Laptops ALSA: hda/realtek: Enable Mute LED on HP 255 G10 ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC ALSA: hda/realtek - Add Dell ALC295 to pin fall back table ALSA: hda/realtek: Enable Mute LED on HP 255 G8 ALSA: info: Fix potential deadlock at disconnection btrfs: zoned: wait for data BG to be finished on direct IO allocation xfs: recovery should not clear di_flushiter unconditionally cifs: do not reset chan_max if multichannel is not supported at mount cifs: force interface update before a fresh session setup cifs: reconnect helper should set reconnect for the right channel smb: client: fix potential deadlock when releasing mids smb: client: fix use-after-free bug in cifs_debug_data_proc_show() smb3: fix caching of ctime on setxattr smb3: fix touch -h of symlink smb3: fix creating FIFOs when mounting with "sfu" mount option fs: add ctime accessors infrastructure xhci: Enable RPM on controllers that support low-power states parisc/power: Fix power soft-off when running on qemu parisc/pgtable: Do not drop upper 5 address bits of physical address parisc: Prevent booting 64-bit kernels on PA1.x machines i3c: master: svc: fix SDA keep low when polling IBIWON timeout happen i3c: master: svc: fix check wrong status register in irq handler i3c: master: svc: fix ibi may not return mandatory data byte i3c: master: svc: fix wrong data return when IBI happen during start frame i3c: master: svc: fix race condition in ibi work thread i3c: master: cdns: Fix reading status register mtd: cfi_cmdset_0001: Byte swap OTP info mm/memory_hotplug: use pfn math in place of direct struct page manipulation mm/cma: use nth_page() in place of direct struct page manipulation s390/cmma: fix detection of DAT pages dmaengine: stm32-mdma: correct desc prep when channel running mcb: fix error handling for different scenarios when parsing driver core: Release all resources during unbind before updating device links tracing: Have the user copy of synthetic event address use correct context i2c: core: Run atomic i2c xfer when !preemptible kernel/reboot: emergency_restart: Set correct system_state quota: explicitly forbid quota files from being encrypted jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev ASoC: codecs: wsa-macro: fix uninitialized stack variables with name prefix hid: lenovo: Resend all settings on reset_resume for compact keyboards selftests/resctrl: Reduce failures due to outliers in MBA/MBM tests selftests/resctrl: Move _GNU_SOURCE define into Makefile selftests/resctrl: Remove duplicate feature check from CMT test netfilter: nf_tables: split async and sync catchall in two functions netfilter: nf_tables: remove catchall element in GC sync path ima: detect changes to the backing overlay file ima: annotate iint mutex to avoid lockdep false positive warnings mfd: qcom-spmi-pmic: Fix revid implementation mfd: qcom-spmi-pmic: Fix reference leaks in revid helper arm64: dts: qcom: ipq6018: Fix tcsr_mutex register size ACPI: FPDT: properly handle invalid FPDT subtables firmware: qcom_scm: use 64-bit calling convention only when client is 64-bit arm64: dts: qcom: ipq8074: Fix hwlock index for SMEM btrfs: don't arbitrarily slow down delalloc if we're committing rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects PM: hibernate: Clean up sync_read handling in snapshot_write_next() PM: hibernate: Use __get_safe_page() rather than touching the list arm64: dts: qcom: ipq6018: Fix hwlock index for SMEM rcu/tree: Defer setting of jiffies during stall reset svcrdma: Drop connection after an RDMA Read error wifi: wilc1000: use vmm_table as array in wilc struct PCI: exynos: Don't discard .remove() callback PCI: kirin: Don't discard .remove() callback PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common() mmc: Add quirk MMC_QUIRK_BROKEN_CACHE_FLUSH for Micron eMMC Q2J54A mmc: sdhci_am654: fix start loop index for TAP value parsing mmc: vub300: fix an error code ksmbd: fix slab out of bounds write in smb_inherit_dacl() ksmbd: handle malformed smb1 message clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from PLL clocks clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks clk: socfpga: Fix undefined behavior bug in struct stratix10_clock_data parisc/power: Add power soft-off when running on qemu parisc/pdc: Add width field to struct pdc_model arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer PCI: keystone: Don't discard .probe() callback PCI: keystone: Don't discard .remove() callback KEYS: trusted: Rollback init_trusted() consistently KEYS: trusted: tee: Refactor register SHM usage genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware mmc: meson-gx: Remove setting of CMD_CFG_ERROR wifi: ath11k: fix gtk offload status event locking wifi: ath11k: fix htt pktlog locking wifi: ath11k: fix dfs radar event locking wifi: ath11k: fix temperature event locking regmap: Ensure range selector registers are updated after cache sync ACPI: resource: Do IRQ override on TongFang GMxXGxx mm/damon/sysfs: check error from damon_sysfs_update_target() mm/damon: implement a function for max nr_accesses safe calculation mm/damon/ops-common: avoid divide-by-zero during region hotness calculation mm/damon/lru_sort: avoid divide-by-zero in hot threshold calculation watchdog: move softlockup_panic back to early_param mm/damon/sysfs: update monitoring target regions for online input commit mm/damon/sysfs: remove requested targets when online-commit inputs PCI/sysfs: Protect driver's D3cold preference from user space hvc/xen: fix event channel handling for secondary consoles hvc/xen: fix error path in xen_hvc_init() to always register frontend driver hvc/xen: fix console unplug tty: serial: meson: fix hard LOCKUP on crtscts mode tty/sysrq: replace smp_processor_id() with get_cpu() proc: sysctl: prevent aliased sysctls from getting passed to init audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() audit: don't take task_lock() in audit_exe_compare() code path KVM: x86: Clear bit12 of ICR after APIC-write VM-exit KVM: x86: Ignore MSR_AMD64_TW_CFG access KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space x86/cpu/hygon: Fix the CPU topology evaluation for real crypto: x86/sha - load modules based on CPU features scsi: qla2xxx: Fix system crash due to bad pointer access scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers scsi: mpt3sas: Fix loop logic bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END bpf: Fix check_stack_write_fixed_off() to correctly spill imm randstruct: Fix gcc-plugin performance mode to stay in group powerpc/perf: Fix disabling BHRB and instruction sampling perf intel-pt: Fix async branch flags media: venus: hfi: add checks to perform sanity on queue pointers i915/perf: Fix NULL deref bugs with drm_dbg() calls cifs: fix check of rc in function generate_smb3signingkey cifs: spnego: add ';' in HOST_KEY_LEN tools/power/turbostat: Enable the C-state Pre-wake printing tools/power/turbostat: Fix a knl bug macvlan: Don't propagate promisc change to lower dev in passthru net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors net/mlx5e: Check return value of snprintf writing to fw_version buffer net/mlx5e: Reduce the size of icosq_str net/mlx5e: Fix pedit endianness net/mlx5e: fix double free of encap_header in update funcs net/mlx5e: fix double free of encap_header net: stmmac: avoid rx queue overrun net: stmmac: fix rx budget limit check netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() netfilter: nf_conntrack_bridge: initialize err to 0 af_unix: fix use-after-free in unix_stream_read_actor() net: ethernet: cortina: Fix MTU max setting net: ethernet: cortina: Handle large frames net: ethernet: cortina: Fix max RX frame define bonding: stop the device in bond_setup_by_slave() ptp: annotate data-race around q->head and q->tail xen/events: fix delayed eoi list handling ppp: limit MRU to 64K net: mvneta: fix calls to page_pool_get_stats tipc: Fix kernel-infoleak due to uninitialized TLV value net: hns3: fix VF wrong speed and duplex issue net: hns3: fix VF reset fail issue net: hns3: fix variable may not initialized problem in hns3_init_mac_addr() net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs net: hns3: fix incorrect capability bit display for copper port net: hns3: add barrier in vf mailbox reply process net: hns3: fix add VLAN fail issue tty: Fix uninit-value access in ppp_sync_receive() ipvlan: add ipvlan_route_v6_outbound() helper net: set SOCK_RCU_FREE before inserting socket into hashtable vhost-vdpa: fix use after free in vhost_vdpa_probe() gfs2: Silence "suspicious RCU usage in gfs2_permission" warning SUNRPC: Fix RPC client cleaned up the freed pipefs dentries NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO SUNRPC: Add an IS_ERR() check back to where it was NFSv4.1: fix handling NFS4ERR_DELAY when testing for session trunking mtd: rawnand: meson: check return value of devm_kasprintf() mtd: rawnand: intel: check return value of devm_kasprintf() SUNRPC: ECONNRESET might require a rebind sched/core: Optimize in_task() and in_interrupt() a bit wifi: iwlwifi: Use FW rate for non-data frames mtd: rawnand: tegra: add missing check for platform_get_irq() pwm: Fix double shift bug drm/amdgpu: fix software pci_unplug on some chips ALSA: hda/realtek: Add quirk for ASUS UX7602ZM drm/qxl: prevent memory leak ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings i2c: dev: copy userspace array safely kgdb: Flush console before entering kgdb on panic drm/amd/display: Avoid NULL dereference of timing generator media: imon: fix access to invalid resource for the second interface media: ccs: Fix driver quirk struct documentation media: cobalt: Use FIELD_GET() to extract Link Width gfs2: fix an oops in gfs2_permission gfs2: ignore negated quota changes media: vivid: avoid integer overflow media: gspca: cpia1: shift-out-of-bounds in set_flicker i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data. virtio-blk: fix implicit overflow on virtio_max_dma_size i2c: sun6i-p2wi: Prevent potential division by zero i2c: fix memleak in i2c_new_client_device() i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler 9p: v9fs_listxattr: fix %s null argument warning 9p/trans_fd: Annotate data-racy writes to file::f_flags usb: gadget: f_ncm: Always set current gadget in ncm_bind() f2fs: fix error handling of __get_node_page soundwire: dmi-quirks: update HP Omen match usb: dwc3: core: configure TX/RX threshold for DWC3_IP tty: vcc: Add check for kstrdup() in vcc_probe() thunderbolt: Apply USB 3.x bandwidth quirk only in software connection manager iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() mfd: intel-lpss: Add Intel Lunar Lake-M PCI IDs exfat: support handle zero-size directory HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W crypto: hisilicon/qm - prevent soft lockup in receive loop ASoC: Intel: soc-acpi-cht: Add Lenovo Yoga Tab 3 Pro YT3-X90 quirk PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller PCI: Disable ATS for specific Intel IPU E2000 devices PCI: Extract ATS disabling to a helper function PCI: Use FIELD_GET() to extract Link Width scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() PCI: Do error check on own line to split long "if" conditions atm: iphase: Do PCI error checks on own line PCI: mvebu: Use FIELD_PREP() with Link Width PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields ALSA: hda: Fix possible null-ptr-deref when assigning a stream ARM: 9320/1: fix stack depot IRQ stack filter HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround jfs: fix array-index-out-of-bounds in diAlloc jfs: fix array-index-out-of-bounds in dbFindLeaf fs/jfs: Add validity check for db_maxag and db_agpref fs/jfs: Add check for negative db_l2nbperpage scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs RDMA/hfi1: Use FIELD_GET() to extract Link Width ASoC: SOF: ipc4: handle EXCEPTION_CAUGHT notification from firmware crypto: pcrypt - Fix hungtask for PADATA_RESET ASoC: SOF: Pass PCI SSID to machine driver ASoC: soc-card: Add storage for PCI SSID selftests/efivarfs: create-read: fix a resource leak arm64: dts: ls208xa: use a pseudo-bus to constrain usb dma size drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL drm/amdkfd: Fix shift out-of-bounds issue drm/panel: st7703: Pick different reset sequence drm/amdgpu/vkms: fix a possible null pointer dereference drm/radeon: fix a possible null pointer dereference drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference drm/panel: fix a possible null pointer dereference drm/amdgpu: Fix potential null pointer derefernce drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 drm/msm/dp: skip validity check for DP CTS EDID checksum drm: vmwgfx_surface.c: copy user-array safely drm_lease.c: copy user-array safely kernel: watch_queue: copy user-array safely kernel: kexec: copy user-array safely string.h: add array-wrappers for (v)memdup_user() drm/amd/display: use full update for clip size increase of large plane source drm/amd: Update `update_pcie_parameters` functions to use uint8_t arguments drm/amdkfd: Fix a race condition of vram buffer unref in svm code drm/amdgpu: not to save bo in the case of RAS err_event_athub drm/komeda: drop all currently held locks if deadlock happens drm/gma500: Fix call trace when psb_gem_mm_init() fails platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e platform/chrome: kunit: initialize lock for fake ec_dev tsnep: Fix tsnep_request_irq() format-overflow warning ACPI: EC: Add quirk for HP 250 G7 Notebook PC Bluetooth: Fix double free in hci_conn_cleanup Bluetooth: btusb: Add date->evt_skb is NULL check bpf: Ensure proper register state printing for cond jumps vsock: read from socket's error queue wifi: ath10k: Don't touch the CE interrupt registers after power up net: annotate data-races around sk->sk_dst_pending_confirm net: annotate data-races around sk->sk_tx_queue_mapping wifi: ath10k: fix clang-specific fortify warning wifi: ath9k: fix clang-specific fortify warnings bpf: Detect IP == ksym.end as part of BPF program atl1c: Work around the DMA RX overflow issue wifi: mac80211: don't return unset power in ieee80211_get_tx_power() wifi: mac80211_hwsim: fix clang-specific fortify warning wifi: plfxlc: fix clang-specific fortify warning x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size workqueue: Provide one lock class key per work_on_cpu() callsite cpu/hotplug: Don't offline the last non-isolated CPU smp,csd: Throw an error if a CSD lock is stuck for too long clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware clocksource/drivers/timer-imx-gpt: Fix potential memory leak selftests/lkdtm: Disable CONFIG_UBSAN_TRAP in test config srcu: Fix srcu_struct node grpmask overflow on 64-bit systems perf/core: Bail out early if the request AUX area is out of bound lib/generic-radix-tree.c: Don't overflow in peek() locking/ww_mutex/test: Fix potential workqueue corruption Linux 6.1.63 virtio/vsock: fix header length on skb merging virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt() virtio/vsock: fix leaks due to missing skb owner vsock/loopback: use only sk_buff_head.lock to protect the packet queue virtio/vsock: don't drop skbuff on copy failure virtio/vsock: remove redundant 'skb_pull()' call virtio/vsock: don't use skbuff state to account credit wifi: cfg80211: fix kernel-doc for wiphy_delayed_work_flush() btrfs: use u64 for buffer sizes in the tree search ioctls Revert "mmc: core: Capture correct oemid-bits for eMMC cards" x86/amd_nb: Use Family 19h Models 60h-7Fh Function 4 IDs io_uring/net: ensure socket is marked connected on connect retry tracing/kprobes: Fix the order of argument descriptions fbdev: fsl-diu-fb: mark wr_reg_wa() static fbdev: imsttfb: fix a resource leak in probe fbdev: imsttfb: Fix error path of imsttfb_probe() spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies ASoC: dapm: fix clock get name ASoC: hdmi-codec: register hpd callback on component probe ASoC: mediatek: mt8186_mt6366_rt1019_rt5682s: trivial: fix error messages drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE RISC-V: Don't fail in riscv_of_parent_hartid() for disabled HARTs netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate eval call-backs netfilter: xt_recent: fix (increase) ipv6 literal buffer length i2c: iproc: handle invalid slave state r8169: respect userspace disabling IFF_MULTICAST vsock/virtio: remove socket from connected/bound list on shutdown virtio/vsock: replace virtio_vsock_pkt with sk_buff blk-core: use pr_warn_ratelimited() in bio_check_ro() nbd: fix uaf in nbd_open tg3: power down device only on SYSTEM_POWER_OFF nvme: fix error-handling for io_uring nvme-passthrough net/smc: put sk reference if close work was canceled net/smc: allow cdc msg send rather than drop it with NULL sndbuf_desc net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT octeontx2-pf: Free pending and dropped SQEs octeontx2-pf: qos send queues management octeontx2-pf: Rename tot_tx_queues to non_qos_queues selftests: pmtu.sh: fix result checking net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs Fix termination state for idr_for_each_entry_ul() net: r8169: Disable multicast filter for RTL8168H and RTL8107E dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses. dccp: Call security_inet_conn_request() after setting IPv4 addresses. net: page_pool: add missing free_percpu when page_pool_init fail octeontx2-pf: Fix holes in error code octeontx2-pf: Fix error codes inet: shrink struct flowi_common bpf: Check map->usercnt after timer->timer is assigned tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING hsr: Prevent use after free in prp_create_tagged_frame() llc: verify mac len before reading mac header watchdog: ixp4xx: Make sure restart always works Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume pwm: sti: Reduce number of allocations and drop usage of chip_data regmap: prevent noinc writes from clobbering cache media: cec: meson: always include meson sub-directory in Makefile media: dvb-usb-v2: af9035: fix missing unlock media: cadence: csi2rx: Unregister v4l2 async notifier media: cedrus: Fix clock/reset sequence media: vidtv: mux: Add check and kfree for kstrdup media: vidtv: psi: Add check for kstrdup media: s3c-camif: Avoid inappropriate kfree() media: mtk-jpegenc: Fix bug in JPEG encode quality selection media: amphion: handle firmware debug message media: bttv: fix use after free error due to btv->timeout timer media: ov5640: Fix a memory leak when ov5640_probe fails media: i2c: max9286: Fix some redundant of_node_put() calls media: ov5640: fix vblank unchange issue when work at dvp mode media: ov5640: Drop dead code using frame_interval media: verisilicon: Do not enable G2 postproc downscale if source is narrower than destination media: hantro: Check whether reset op is defined before use pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() pcmcia: ds: fix refcount leak in pcmcia_device_add() pcmcia: cs: fix possible hung task and memory leak pccardd() rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call virt: sevguest: Fix passing a stack buffer as a scatterlist target x86/sev: Change snp_guest_issue_request()'s fw_err argument crypto: ccp - Name -1 return value as SEV_RET_NO_FW_CALL cxl/mem: Fix shutdown order i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs 9p/net: fix possible memory leak in p9_check_errors() perf hist: Add missing puts to hist__account_cycles perf machine: Avoid out of bounds LBR memory read usb: host: xhci-plat: fix possible kernel oops while resuming xhci: Loosen RPM as default policy to cover for AMD xHC 1.1 powerpc/pseries: fix potential memory leak in init_cpu_associativity() powerpc/imc-pmu: Use the correct spinlock initializer. powerpc/vas: Limit open window failure messages in log bufffer powerpc/xive: Fix endian conversion size powerpc/40x: Remove stale PTE_ATOMIC_UPDATES macro modpost: fix ishtp MODULE_DEVICE_TABLE built on big-endian host modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host powerpc: Only define __parse_fpscr() when required interconnect: qcom: sm8350: Set ACV enable_mask interconnect: qcom: sm8350: Retire DEFINE_QBCM interconnect: qcom: sm8150: Set ACV enable_mask interconnect: qcom: sm8150: Retire DEFINE_QBCM interconnect: qcom: sm8150: Drop IP0 interconnects interconnect: move ignore_list out of of_count_icc_providers() interconnect: qcom: sm6350: Set ACV enable_mask interconnect: qcom: sm6350: Retire DEFINE_QBCM interconnect: qcom: sdm845: Set ACV enable_mask interconnect: qcom: sdm845: Retire DEFINE_QBCM interconnect: qcom: sc8280xp: Set ACV enable_mask interconnect: qcom: sc8180x: Set ACV enable_mask interconnect: qcom: sc7280: Set ACV enable_mask interconnect: qcom: sc7180: Set ACV enable_mask interconnect: qcom: sc7180: Retire DEFINE_QBCM f2fs: fix to initialize map.m_pblk in f2fs_precache_extents() dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc() USB: usbip: fix stub_dev hub disconnect tools: iio: iio_generic_buffer ensure alignment misc: st_core: Do not call kfree_skb() under spin_lock_irqsave() dmaengine: ti: edma: handle irq_of_parse_and_map() errors usb: chipidea: Simplify Tegra DMA alignment code usb: chipidea: Fix DMA overwrite for Tegra usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency dmaengine: idxd: Register dsa_bus_type before registering idxd sub-drivers perf record: Fix BTF type checks in the off-cpu profiling pinctrl: renesas: rzg2l: Make reverse order of enable() for disable() livepatch: Fix missing newline character in klp_resolve_symbols() tty: tty_jobctrl: fix pid memleak in disassociate_ctty() f2fs: compress: fix to avoid redundant compress extension f2fs: compress: fix to avoid use-after-free on dic f2fs: compress: fix deadloop in f2fs_write_cache_pages() f2fs: convert f2fs_write_cache_pages() to use filemap_get_folios_tag() filemap: add filemap_get_folios_tag() perf kwork: Set ordered_events to true in 'struct perf_tool' perf kwork: Add the supported subcommands to the document perf kwork: Fix incorrect and missing free atom in work_push_atom() iio: frequency: adf4350: Use device managed functions and fix power down issue. perf stat: Fix aggr mode initialization apparmor: fix invalid reference on profile->disconnected apparmor: test: make static symbols visible during kunit testing kunit: add macro to allow conditionally exposing static symbols to tests leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu' leds: pwm: Don't disable the PWM when the LED should be off leds: turris-omnia: Do not use SMBUS calls leds: turris-omnia: Drop unnecessary mutex locking mfd: arizona-spi: Set pdata.hpdet_channel for ACPI enumerated devs dt-bindings: mfd: mt6397: Split out compatible for MediaTek MT6366 PMIC dt-bindings: mfd: mt6397: Add binding for MT6357 mfd: dln2: Fix double put in dln2_probe mfd: core: Ensure disabled devices are skipped without aborting mfd: core: Un-constify mfd_cell.of_reg IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF ASoC: ams-delta.c: use component after check crypto: qat - fix deadlock in backlog processing padata: Fix refcnt handling in padata_free_shell() ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails HID: logitech-hidpp: Move get_wireless_feature_index() check to hidpp_connect_event() HID: logitech-hidpp: Revert "Don't restart communication if not necessary" HID: logitech-hidpp: Don't restart IO, instead defer hid_connect() only HID: logitech-hidpp: Remove HIDPP_QUIRK_NO_HIDINPUT quirk Revert "HID: logitech-hidpp: add a module parameter to keep firmware gestures" sh: bios: Revive earlyprintk support hid: cp2112: Fix IRQ shutdown stopping polling for all IRQs on chip HID: cp2112: Make irq_chip immutable RDMA/hfi1: Workaround truncation compilation error scsi: ufs: core: Leave space for '\0' in utf8 desc string ASoC: fsl: Fix PM disable depth imbalance in fsl_easrc_probe ASoC: SOF: core: Ensure sof_ops_free() is still called when probe never ran. RDMA/hns: The UD mode can only be configured with DCQCN RDMA/hns: Add check for SL RDMA/hns: Fix signed-unsigned mixed comparisons RDMA/hns: Fix uninitialized ucmd in hns_roce_create_qp_common() RDMA/hns: Fix printing level of asynchronous events IB/mlx5: Fix rdma counter binding for RAW QP ASoC: fsl: mpc5200_dma.c: Fix warning of Function parameter or member not described ext4: move 'ix' sanity check to corrent position ARM: 9321/1: memset: cast the constant byte to unsigned char crypto: hisilicon/qm - fix PF queue parameter issue crypto: hisilicon/qm - split a debugfs.c from qm crypto: hisilicon/qm - modify the process of regs dfx crypto: hisilicon/qm - delete redundant null assignment operations hid: cp2112: Fix duplicate workqueue initialization PCI: vmd: Correct PCI Header Type Register's multi-function check crypto: qat - increase size of buffers crypto: caam/jr - fix Chacha20 + Poly1305 self test failure crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure nd_btt: Make BTT lanes preemptible libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value scsi: ibmvfc: Fix erroneous use of rtas_busy_delay with hcall return code crypto: qat - fix unregistration of crypto algorithms crypto: qat - extend buffer list interface crypto: qat - generalize crypto request buffers crypto: qat - change bufferlist logic interface crypto: qat - rename bufferlist functions crypto: qat - relocate bufferlist logic crypto: qat - ignore subsequent state up commands RDMA/core: Use size_{add,sub,mul}() in calls to struct_size() hwrng: geode - fix accessing registers hwrng: bcm2835 - Fix hwrng throughput regression crypto: hisilicon/hpre - Fix a erroneous check after snprintf() KEYS: Include linux/errno.h in linux/verification.h ALSA: hda: cs35l41: Undo runtime PM changes at driver exit time ALSA: hda: cs35l41: Fix unbalanced pm_runtime_get() ASoC: cs35l41: Undo runtime PM changes at driver exit time ASoC: cs35l41: Verify PM runtime resume errors in IRQ handler module/decompress: use vmalloc() for gzip decompression workspace selftests/resctrl: Ensure the benchmark commands fits to its array selftests/pidfd: Fix ksft print formats arm64: tegra: Use correct interrupts for Tegra234 TKE arm64: dts: imx8mn: Add sound-dai-cells to micfil node arm64: dts: imx8mm: Add sound-dai-cells to micfil node arm64: dts: imx8qm-ss-img: Fix jpegenc compatible entry clk: scmi: Free scmi_clk allocated when the clocks with invalid info are skipped ARM: dts: am3517-evm: Fix LED3/4 pinmux firmware: arm_ffa: Allow the FF-A drivers to use 32bit mode of messaging firmware: arm_ffa: Assign the missing IDR allocation ID to the FFA device arm64: dts: ti: k3-am62a7-sk: Drop i2c-1 to 100Khz firmware: ti_sci: Mark driver as non removable kunit: Fix missed memory release in kunit_free_suite_set() soc: qcom: llcc: Handle a second device without data corruption ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator arm64: dts: qcom: apq8016-sbc: Add missing ADV7533 regulators ARM64: dts: marvell: cn9310: Use appropriate label for spi1 pins arm64: dts: qcom: sdm845-mtp: fix WiFi configuration arm64: dts: qcom: sm8350: fix pinctrl for UART18 arm64: dts: qcom: sm8150: add ref clock to PCIe PHYs arm64: dts: qcom: sc7280: Add missing LMH interrupts arm64: dts: qcom: msm8992-libra: drop duplicated reserved memory arm64: dts: qcom: msm8916: Fix iommu local address range arm64: dts: qcom: sc7280: link usb3_phy_wrapper_gcc_usb30_pipe_clk arm64: dts: qcom: sdm845: cheza doesn't support LMh node ARM: dts: renesas: blanche: Fix typo in GP_11_2 pin name perf: hisi: Fix use-after-free when register pmu fails drivers/perf: hisi_pcie: Check the type first in pmu::event_init() perf/arm-cmn: Fix DTC domain detection perf/arm-cmn: Revamp model detection drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process drm: mediatek: mtk_dsi: Fix NO_EOT_PACKET settings/handling clocksource/drivers/arm_arch_timer: limit XGene-1 workaround drm/msm/dsi: free TX buffer in unbind drm/msm/dsi: use msm_gem_kernel_put to free TX buffer xen-pciback: Consider INTx disabled when MSI/MSI-X is enabled xenbus: fix error exit in xenbus_init() drm/rockchip: Fix type promotion bug in rockchip_gem_iommu_map() arm64/arm: xen: enlighten: Fix KPTI checks drm/bridge: lt9611uxc: fix the race in the error path gpu: host1x: Correct allocated size for contexts drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe() drm/mediatek: Fix iommu fault during crtc enabling drm/mediatek: Fix iommu fault by swapping FBs after updating plane state io_uring/kbuf: Allow the full buffer id space for provided buffers io_uring/kbuf: Fix check of BID wrapping in provided buffers drm/amd/display: Bail from dm_check_crtc_cursor if no relevant change drm/amd/display: Refactor dm_get_plane_scale helper drm/amd/display: Check all enabled planes in dm_check_crtc_cursor drm/amdkfd: fix some race conditions in vram buffer alloc/free of svm code drm/bridge: tc358768: Fix tc358768_ns_to_cnt() drm/bridge: tc358768: Clean up clock period code drm/bridge: tc358768: Rename dsibclk to hsbyteclk drm/bridge: tc358768: Use dev for dbg prints, not priv->dev drm/bridge: tc358768: Print logical values, not raw register values drm/bridge: tc358768: Use struct videomode drm/bridge: tc358768: remove unused variable drm/bridge: tc358768: Fix bit updates drm/bridge: tc358768: Fix use of uninitialized variable drm/bridge: lt8912b: Add missing drm_bridge_attach call drm/bridge: lt8912b: Manually disable HPD only if it was enabled drm/bridge: lt8912b: Fix crash on bridge detach drm/bridge: lt8912b: Fix bridge_detach drm/bridge: lt8912b: Add hot plug detection drm: bridge: it66121: Fix invalid connector dereference drm/radeon: possible buffer overflow drm/rockchip: vop2: Add missing call to crtc reset helper drm/rockchip: vop2: Don't crash for invalid duplicate_state drm/rockchip: vop: Fix call to crtc reset helper drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs hte: tegra: Fix missing error code in tegra_hte_test_probe() hwmon: (sch5627) Disallow write access if virtual registers are locked hwmon: (sch5627) Use bit macros when accessing the control register Revert "hwmon: (sch56xx-common) Add automatic module loading on supported devices" Revert "hwmon: (sch56xx-common) Add DMI override table" hwmon: (coretemp) Fix potentially truncated sysfs attribute name hwmon: (axi-fan-control) Fix possible NULL pointer dereference platform/x86: wmi: Fix opening of char device platform/x86: wmi: Fix probe failure when failing to register WMI devices clk: qcom: config IPQ_APSS_6018 should depend on QCOM_SMEM clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data clk: npcm7xx: Fix incorrect kfree clk: ti: fix double free in of_ti_divider_clk_setup() clk: ti: change ti_clk_register[_omap_hw]() API clk: keystone: pll: fix a couple NULL vs IS_ERR() checks spi: nxp-fspi: use the correct ioremap function clk: linux/clk-provider.h: fix kernel-doc warnings and typos clk: renesas: rzg2l: Fix computation formula clk: renesas: rzg2l: Use FIELD_GET() for PLL register fields clk: renesas: rzg2l: Trust value returned by hardware clk: renesas: rzg2l: Lock around writes to mux register clk: renesas: rzg2l: Wait for status bit of SD mux before continuing clk: renesas: rcar-gen3: Extend SDnH divider table clk: imx: imx8qxp: Fix elcdif_pll clock clk: imx: imx8mq: correct error handling path clk: imx: Select MXC_CLK for CLK_IMX8QXP regulator: mt6358: Fail probe on unknown chip ID clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src clk: qcom: mmcc-msm8998: Fix the SMMU GDSC clk: qcom: mmcc-msm8998: Don't check halt bit on some branch clks clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies clk: qcom: gcc-msm8996: Remove RPM bus clocks spi: tegra: Fix missing IRQ check in tegra_slink_probe() regmap: debugfs: Fix a erroneous check after snprintf() ipvlan: properly track tx_errors net: add DEV_STATS_READ() helper ipv6: avoid atomic fragment on GSO packets ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() bpf: Fix unnecessary -EBUSY from htab_lock_bucket Bluetooth: hci_sync: Fix Opcode prints in bt_dev_dbg/err wifi: iwlwifi: empty overflow queue during flush wifi: iwlwifi: pcie: synchronize IRQs before NAPI wifi: iwlwifi: call napi_synchronize() before freeing rx/tx queues tcp: fix cookie_init_timestamp() overflows chtls: fix tp->rcv_tstamp initialization net: skb_find_text: Ignore patterns extending past 'to' selftests: netfilter: test for sctp collision processing in nf_conntrack r8169: fix rare issue with broken rx after link-down on RTL8125 r8169: use tp_to_dev instead of open code thermal: core: prevent potential string overflow netfilter: nf_tables: Drop pointless memset when dumping rules wifi: wfx: fix case where rates are out of order PM / devfreq: rockchip-dfi: Make pmu regmap mandatory can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() can: dev: can_restart(): don't crash kernel if carrier is OK wifi: ath11k: fix Tx power value during active CAC ACPI: video: Add acpi_backlight=vendor quirk for Toshiba Portégé R100 ACPI: property: Allow _DSD buffer data only for byte accessors wifi: rtlwifi: fix EDCA limit set by BT coexistence tcp_metrics: do not create an entry from tcp_init_metrics() tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics() tcp_metrics: add missing barriers on delete wifi: ath: dfs_pattern_detector: Fix a memory initialization issue wifi: mt76: mt7915: fix beamforming availability check wifi: mt76: mt7603: improve stuck beacon handling wifi: mt76: mt7603: improve watchdog reset reliablity wifi: mt76: mt7603: rework/fix rx pse hang check wifi: ath11k: fix boot failure with one MSI vector wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file() net: ethernet: mtk_wed: fix EXT_INT_STATUS_RX_FBUF definitions for MT7986 SoC net: spider_net: Use size_add() in call to struct_size() tipc: Use size_add() in calls to struct_size() tls: Use size_add() in call to struct_size() tls: Only use data field in crypto completion function mlxsw: Use size_mul() in call to struct_size() gve: Use size_add() in call to struct_size() tcp: call tcp_try_undo_recovery when an RTOd TFO SYNACK is ACKed udp: add missing WRITE_ONCE() around up->encap_rcv selftests/bpf: Correct map_fd to data_fd in tailcalls iavf: Fix promiscuous mode configuration flow messages i40e: fix potential memory leaks in i40e_remove() wifi: iwlwifi: honor the enable_ini value wifi: mac80211: fix # of MSDU in A-MSDU calculation wifi: mac80211: move sched-scan stop work to wiphy work wifi: mac80211: move offchannel works to wiphy work wifi: mac80211: move scan work to wiphy work wifi: mac80211: move radar detect work to wiphy work wifi: cfg80211: add flush functions for wiphy work genirq/matrix: Exclude managed interrupts in irq_matrix_allocated() string: Adjust strtomem() logic to allow for smaller sources pstore/platform: Add check for kstrdup drivers/clocksource/timer-ti-dm: Don't call clk_get_rate() in stop function x86/boot: Fix incorrect startup_gdt_descr.size x86/sev-es: Allow copy_from_kernel_nofault() in earlier boot ACPI/NUMA: Apply SRAT proximity domain to entire CFMWS window x86/numa: Introduce numa_fill_memblks() futex: Don't include process MM in futex key on no-MMU x86/srso: Fix SBPB enablement for (possible) future fixed HW writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs vfs: fix readahead(2) on block devices sched: Fix stop_one_cpu_nowait() vs hotplug objtool: Propagate early errors sched/uclamp: Ignore (util == 0) optimization in feec() when p_util_max = 0 sched/uclamp: Set max_spare_cap_cpu even if max_spare_cap is 0 iov_iter, x86: Be consistent about the __user tag on copy_mc_to_user() sched/fair: Fix cfs_rq_is_decayed() on !SMP hwmon: (nct6775) Fix incorrect variable reuse in fan_div calculation Linux 6.1.62 ASoC: SOF: sof-pci-dev: Fix community key quirk detection ALSA: hda: intel-dsp-config: Fix JSL Chromebook quirk detection misc: pci_endpoint_test: Add deviceID for J721S2 PCIe EP device support tty: 8250: Add Brainboxes Oxford Semiconductor-based quirks tty: 8250: Add support for Intashield IX cards tty: 8250: Add support for additional Brainboxes PX cards tty: 8250: Fix up PX-803/PX-857 tty: 8250: Fix port count of PX-257 tty: 8250: Add support for Intashield IS-100 tty: 8250: Add support for Brainboxes UP cards tty: 8250: Add support for additional Brainboxes UC cards tty: 8250: Remove UC-257 and UC-431 tty: n_gsm: fix race condition in status line change on dead connections usb: raw-gadget: properly handle interrupted requests usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() usb: storage: set 1.50 as the lower bcdDevice for older "Super Top" compatibility PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device ALSA: usb-audio: add quirk flag to enable native DSD for McIntosh devices mmap: fix error paths with dup_anon_vma() mm/mempolicy: fix set_mempolicy_home_node() previous VMA pointer x86: KVM: SVM: always update the x2avic msr interception perf evlist: Avoid frequency mode for the dummy event power: supply: core: Use blocking_notifier_call_chain to avoid RCU complaint ceph_wait_on_conflict_unlink(): grab reference before dropping ->d_lock io_uring: kiocb_done() should *not* trust ->ki_pos if ->{read,write}_iter() failed powerpc/mm: Fix boot crash with FLATMEM r8152: Check for unplug in r8153b_ups_en() / r8153c_ups_en() r8152: Check for unplug in rtl_phy_patch_request() net: chelsio: cxgb4: add an error code check in t4_load_phy_fw drm/amdgpu: Reserve fences for VM update platform/mellanox: mlxbf-tmfifo: Fix a warning message netfilter: nf_tables: audit log object reset once per table LoongArch: Replace kmap_atomic() with kmap_local_page() in copy_user_highpage() LoongArch: Export symbol invalid_pud_table for modules building gpu/drm: Eliminate DRM_SCHED_PRIORITY_UNSET drm/amdgpu: Unset context priority is now invalid scsi: mpt3sas: Fix in error path fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit() fbdev: omapfb: fix some error codes drm/ttm: Reorder sys manager cleanup step ASoC: codecs: tas2780: Fix log of failed reset via I2C. ASoC: rt5650: fix the wrong result of key button efi: fix memory leak in krealloc failure handling netfilter: nfnetlink_log: silence bogus compiler warning spi: npcm-fiu: Fix UMA reads when dummy.nbytes == 0 fs/ntfs3: Avoid possible memory leak fs/ntfs3: Fix directory element type detection fs/ntfs3: Fix NULL pointer dereference on error in attr_allocate_frame() fs/ntfs3: Fix possible NULL-ptr-deref in ni_readpage_cmpr() fs/ntfs3: Use kvmalloc instead of kmalloc(... __GFP_NOWARN) fs/ntfs3: Write immediately updated ntfs state fs/ntfs3: Add ckeck in ni_update_parent() fbdev: atyfb: only use ioremap_uc() on i386 and ia64 Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport powerpc/85xx: Fix math emulation exception dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe irqchip/stm32-exti: add missing DT IRQ flag translation irqchip/riscv-intc: Mark all INTC nodes as initialized net: sched: cls_u32: Fix allocation size in u32_init() ASoC: tlv320adc3xxx: BUG: Correct micbias setting coresight: tmc-etr: Disable warnings for allocation failures ASoC: simple-card: fixup asoc_simple_probe() error handling Revert "kasan: print the original fault addr when access invalid shadow" ANDROID: GKI: add system_unbound_wq to some symbol lists. Revert "audit,io_uring: io_uring openat triggers audit reference count underflow" Revert "tcp: allow again tcp_disconnect() when threads are waiting" Revert "tcp_bpf: properly release resources on error paths" Revert "ipv4/fib: send notify when delete source address routes" Revert "Bluetooth: hci_core: Fix build warnings" Revert "xfrm: fix a data-race in xfrm_gen_index()" Revert "perf: Disallow mis-matched inherited group reads" ANDROID: fix up 6.1.60 merge of hid.h into android14-6.1-lts ANDROID: GKI: arm64: drop CONFIG_DEBUG_PREEMPT forced disable Revert "net: macsec: indicate next pn update when offloading" Revert "net: phy: mscc: macsec: reject PN update requests" Revert "net/mlx5e: macsec: use update_pn flag instead of PN comparation" Revert "tcp: enforce receive buffer memory limits by allowing the tcp window to shrink" Linux 6.1.61 objtool/x86: add missing embedded_insn check ext4: avoid overlapping preallocations due to overflow ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow ext4: add two helper functions extent_logical_end() and pa_logical_end() platform/x86: Add s2idle quirk for more Lenovo laptops clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name sparc32: fix a braino in fault handling in csum_and_copy_..._user() perf/core: Fix potential NULL deref x86/cpu: Add model number for Intel Arrow Lake mobile processor x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility nvmem: imx: correct nregs for i.MX6UL nvmem: imx: correct nregs for i.MX6SLL nvmem: imx: correct nregs for i.MX6ULL misc: fastrpc: Unmap only if buffer is unmapped from DSP misc: fastrpc: Clean buffers on remote invocation failures misc: fastrpc: Free DMA handles for RPC calls with no arguments misc: fastrpc: Reset metadata buffer to avoid incorrect free tracing/kprobes: Fix the description of variable length arguments i2c: aspeed: Fix i2c bus hang in slave read i2c: stm32f7: Fix PEC handling in case of SMBUS transfers i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() iio: adc: xilinx-xadc: Correct temperature offset/scale for UltraScale iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature thresholds iio: exynos-adc: request second interupt only when touchscreen mode is used iio: afe: rescale: Accept only offset channels io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid kasan: print the original fault addr when access invalid shadow blk-throttle: check for overflow in calculate_bytes_allowed scsi: sd: Introduce manage_shutdown device flag iavf: in iavf_down, disable queues when removing the driver drm/logicvc: Kconfig: select REGMAP and REGMAP_MMIO i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR gtp: fix fragmentation needed check with gso gtp: uapi: fix GTPA_MAX tcp: fix wrong RTO timeout when received SACK reneging r8152: Release firmware if we have an error in probe r8152: Cancel hw_phy_work if we have an error in probe r8152: Run the unload routine if we have errors during probe r8152: Increase USB control msg timeout to 5000ms as per spec net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show() net: ethernet: adi: adin1110: Fix uninitialized variable igc: Fix ambiguity in the ethtool advertising neighbour: fix various data-races igb: Fix potential memory leak in igb_add_ethtool_nfc_entry treewide: Spelling fix in comment i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value iavf: initialize waitqueues before starting watchdog_task r8169: fix the KCSAN reported data race in rtl_rx while reading desc->opts1 r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1 r8169: fix the KCSAN reported data-race in rtl_tx() while reading tp->cur_tx clk: ti: Fix missing omap5 mcbsp functional clock and aliases clk: ti: Fix missing omap4 mcbsp functional clock and aliases firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels() ARM: OMAP: timer32K: fix all kernel-doc warnings drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() drm/amd: Disable ASPM for VI w/ all Intel systems drm/i915/pmu: Check if pmu is closed before stopping event nfsd: lock_rename() needs both directories to live on the same fs maple_tree: add GFP_KERNEL to allocations in mas_expected_entries() hugetlbfs: extend hugetlb_vma_lock to private VMAs mm/migrate: fix do_pages_move for compat pointers mm/page_alloc: correct start page when guard page debug is enabled hugetlbfs: clear resv_map pointer if mmap fails mm: fix vm_brk_flags() to not bail out while holding lock arm64: dts: rockchip: Fix i2s0 pin conflict on ROCK Pi 4 boards arm64: dts: rockchip: Add i2s0-2ch-bus-bclk-off pins to RK3399 vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE vsock/virtio: initialize the_virtio_vsock before using VQs virtio_pci: fix the common cfg map size virtio-crypto: handle config changed by work queue virtio-mmio: fix memory leak of vm_dev virtio_balloon: Fix endless deflation and inflation on arm64 mcb-lpc: Reallocate memory region to avoid memory overlapping mcb: Return actual parsed size when reading chameleon table pinctrl: qcom: lpass-lpi: fix concurrent register updates ASoC: codecs: wcd938x: fix runtime PM imbalance on remove ASoC: codecs: wcd938x: fix regulator leaks on probe errors ASoC: codecs: wcd938x: Simplify with dev_err_probe ASoC: codecs: wcd938x: Convert to platform remove callback returning void mmc: core: Fix error propagation for some ioctl commands mmc: block: ioctl: do write error check for spi mmc: core: Align to common busy polling behaviour for mmc ioctls KVM: x86/pmu: Truncate counter value to allowed width on write Linux 6.1.60 selftests: mptcp: join: no RST when rm subflow/addr selftests: mptcp: join: correctly check for no RST mptcp: avoid sending RST when closing the initial subflow Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name Bluetooth: hci_sock: fix slab oob read in create_monitor_event net: move altnames together with the netdevice phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins phy: mapphone-mdm6600: Fix runtime PM for remove phy: mapphone-mdm6600: Fix runtime disable on probe gpio: vf610: mask the gpio irq in system suspend and support wakeup gpio: vf610: make irq_chip immutable tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols kallsyms: Add helper kallsyms_on_each_match_symbol() kallsyms: Reduce the memory occupied by kallsyms_seqs_of_names[] serial: 8250: omap: convert to modern PM ops serial: 8250: omap: Move uart_write() inside PM section drm/bridge: ti-sn65dsi86: Associate DSI device lifetime with auxiliary device ASoC: pxa: fix a memory leak in probe() gpio: vf610: set value before the direction to avoid a glitch platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events platform/x86: asus-wmi: Only map brightness codes when using asus-wmi backlight control platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e platform/x86: intel-uncore-freq: Conditionally create attribute for read frequency platform/surface: platform_profile: Propagate error if profile registration fails s390/cio: fix a memleak in css_alloc_subchannel selftests/ftrace: Add new test case which checks non unique symbol s390/pci: fix iommu bitmap allocation perf: Disallow mis-matched inherited group reads USB: serial: option: add Fibocom to DELL custom modem FM101R-GL USB: serial: option: add entry for Sierra EM9191 with new firmware USB: serial: option: add Telit LE910C4-WWX 0x1035 composition HID: input: map battery system charging KVM: x86/mmu: Stop zapping invalidated TDP MMU roots asynchronously nvme-rdma: do not try to stop unallocated queues nvmet-auth: complete a request only after freeing the dhchap pointers nvme-pci: add BOGUS_NID for Intel 0a54 device nvme: sanitize metadata bounce buffer for reads nfs42: client needs to strip file mode's suid/sgid bit after ALLOCATE op ACPI: irq: Fix incorrect return value in acpi_register_gsi() NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server pNFS/flexfiles: Check the layout validity in ff_layout_mirror_prepare_stats pNFS: Fix a hang in nfs4_evict_inode() Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" mmc: core: Capture correct oemid-bits for eMMC cards mmc: core: sdio: hold retuning if sdio in 1-bit mode mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw mmc: sdhci-pci-gli: fix LPM negotiation so x86/S0ix SoCs can suspend dt-bindings: mmc: sdhci-msm: correct minimum number of clocks mtd: physmap-core: Restore map_rom fallback mtd: spinand: micron: correct bitmask for ecc status mtd: rawnand: arasan: Ensure program page operations are successful mtd: rawnand: marvell: Ensure program page operations are successful mtd: rawnand: pl353: Ensure program page operations are successful mtd: rawnand: qcom: Unmap the right resource upon probe failure net/smc: fix smc clc failed issue when netdevice not in init_net tcp_bpf: properly release resources on error paths selftests: openvswitch: Add version check for pyroute2 Bluetooth: hci_event: Fix using memcmp when comparing keys ice: Remove redundant pci_enable_pcie_error_reporting() tcp: allow again tcp_disconnect() when threads are waiting net/tls: split tls_rx_reader_lock net/mlx5e: Don't offload internal port if filter device is out device net/mlx5: Handle fw tracer change ownership event based on MTRC net/mlx5: E-switch, register event handler before arming the event xfrm6: fix inet6_dev refcount underflow problem net: xfrm: skip policies marked as dead while reinserting policies fprobe: Fix to ensure the number of active retprobes is not zero fprobe: Add nr_maxactive to specify rethook_node pool size fprobe: Pass entry_data to handlers cpufreq: schedutil: Update next_freq when cpufreq_limits change platform/x86: touchscreen_dmi: Add info for the Positivo C4128B HID: nintendo: reinitialize USB Pro Controller after resuming from suspend HID: multitouch: Add required quirk for Synaptics 0xcd7e device drm/amd/pm: add unique_id for gc 11.0.3 btrfs: error out when reallocating block for defrag using a stale transaction btrfs: error when COWing block from a root that is being deleted btrfs: error out when COWing block using a stale transaction btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c drm: panel-orientation-quirks: Add quirk for One Mix 2S ipv4/fib: send notify when delete source address routes sky2: Make sure there is at least one frag_addr available regulator/core: Revert "fix kobject release warning and memory leak in regulator_register()" wifi: cfg80211: avoid leaking stack data into trace wifi: mac80211: allow transmitting EAPOL frames with tainted key wifi: mac80211: work around Cisco AP 9115 VHT MPDU length wifi: cfg80211: Fix 6GHz scan configuration Bluetooth: hci_core: Fix build warnings Bluetooth: Avoid redundant authentication Bluetooth: btusb: add shutdown function for QCA6174 HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event HID: logitech-hidpp: Add Bluetooth ID for the Logitech M720 Triathlon mouse wifi: iwlwifi: Ensure ack flag is properly cleared. wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len tracing: relax trace_event_eval_update() execution with cond_resched() ata: libata-eh: Fix compilation warning in ata_eh_link_report() ata: libata-core: Fix compilation warning in ata_dev_config_ncq() gpio: timberdale: Fix potential deadlock on &tgpio->lock overlayfs: set ctime when setting mtime and atime i2c: mux: Avoid potential false error message in i2c_mux_add_adapter btrfs: initialize start_slot in btrfs_log_prealloc_extents btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 btrfs: prevent transaction block reserve underflow when starting transaction fs-writeback: do not requeue a clean inode having skipped pages ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone pwr-mlxbf: extend Kconfig to include gpio-mlxbf3 dependency iio: adc: ad7192: Correct reference voltage iio: adc: ad7192: Simplify using devm_regulator_get_enable() iio: cros_ec: fix an use-after-free in cros_ec_sensors_push_data() iio: core: introduce iio_device_{claim|release}_buffer_mode() APIs serial: 8250_omap: Fix errors with no_console_suspend serial: 8250: omap: Fix imprecise external abort for omap_8250_pm() serial: Reduce spinlocked portion of uart_rs485_config() serial: Rename uart_change_speed() to uart_change_line_settings() serial: Move uart_change_speed() earlier usb: misc: onboard_hub: add support for Microchip USB2412 USB 2.0 hub usb: misc: onboard_usb_hub: add Genesys Logic GL3523 hub support usb: misc: onboard_usb_hub: add Genesys Logic GL852G hub support usb: misc: onboard_usb_hub: add Genesys Logic GL850G hub support selftests/mm: fix awk usage in charge_reserved_hugetlb.sh and hugetlb_reparenting_test.sh that may cause error net: check for altname conflicts when changing netdev's netns net: fix ifname in netlink ntf during netns move net: avoid UAF on deleted altname net: pktgen: Fix interface flags printing net: phy: bcm7xxx: Add missing 16nm EPHY statistics netfilter: nf_tables: revert do not remove elements if set backend implements .abort netfilter: nf_tables: do not remove elements if set backend implements .abort netlink: Correct offload_xstats size netfilter: nft_set_rbtree: .deactivate fails if element has expired selftests: netfilter: Run nft_audit.sh in its own netns selftests: openvswitch: Catch cases where the tests are killed neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve bonding: Return pointer to data after pull on skb net: dsa: bcm_sf2: Fix possible memory leak in bcm_sf2_mdio_register() i40e: prevent crash on probe if hw registers have invalid values octeon_ep: update BQL sent bytes before ringing doorbell net: usb: smsc95xx: Fix an error code in smsc95xx_reset() ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr tun: prevent negative ifindex tcp: Fix listen() warning with v4-mapped-v6 address. tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb tcp: fix excessive TLP and RACK timeouts from HZ rounding net: rfkill: gpio: prevent value glitch during probe net: ipv6: fix return value check in esp_remove_trailer net: ipv4: fix return value check in esp_remove_trailer wifi: cfg80211: use system_unbound_wq for wiphy work xfrm: interface: use DEV_STATS_INC() xfrm: fix a data-race in xfrm_gen_index() xfrm: fix a data-race in xfrm_lookup_with_ifid() qed: fix LL2 RX buffer allocation ASoC: codecs: wcd938x: fix resource leaks on bind errors ASoC: codecs: wcd938x: fix unbind tear down order ASoC: codecs: wcd938x: drop bogus bind error handling ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV ALSA: hda/realtek - Fixed ASUS platform headset Mic issue drm/mediatek: Correctly free sg_table in gem prime vmap drm/i915: Retry gtt fault when out of fence registers nvmet-tcp: Fix a possible UAF in queue intialization setup netfilter: nft_payload: fix wrong mac header matching fs/ntfs3: fix deadlock in mark_as_free_ex fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea() fs/ntfs3: Fix possible null-pointer dereference in hdr_find_e() mptcp: more conservative check for zero probes tcp: check mptcp-level constraints for backlog coalescing audit,io_uring: io_uring openat triggers audit reference count underflow x86: KVM: SVM: refresh AVIC inhibition in svm_leave_nested() x86: KVM: SVM: add support for Invalid IPI Vector interception KVM: x86: Constrain guest-supported xfeatures only at KVM_GET_XSAVE{2} x86/fpu: Allow caller to constrain xfeatures when copying to uabi buffer x86/sev: Check for user-space IOIO pointing to kernel space x86/sev: Check IOBM for IOIO exceptions from user-space x86/sev: Disable MMIO emulation from user mode KVM: x86: Mask LVTPC when handling a PMI regmap: fix NULL deref on lookup nfc: nci: fix possible NULL pointer dereference in send_acknowledge() btrfs: fix stripe length calculation for non-zoned data chunk allocation net/smc: return the right falback reason when prefix checks fail ice: reset first in crash dump kernels ice: fix over-shifted variable Bluetooth: avoid memcmp() out of bounds warning Bluetooth: hci_event: Fix coding style Bluetooth: vhci: Fix race when opening vhci device Bluetooth: Fix a refcnt underflow problem for hci_conn Bluetooth: Reject connection with the device which has same BD_ADDR Bluetooth: hci_event: Ignore NULL link key igc: Fix race condition in PTP tx code igc: Add condition for qbv_config_change_errors counter igc: Add qbv_config_change_errors counter igc: Remove reset adapter task for i226 during disable tsn config igc: enable Qbv configuration for 2nd GCL igc: remove I226 Qbv BaseTime restriction lib/Kconfig.debug: do not enable DEBUG_PREEMPT by default Linux 6.1.59 ALSA: hda/realtek - Fixed two speaker platform powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE dmaengine: mediatek: Fix deadlock caused by synchronize_irq() dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq x86/alternatives: Disable KASAN in apply_alternatives() usb: cdnsp: Fixes issue with dequeuing not queued requests usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call usb: gadget: udc-xilinx: replace memcpy with memcpy_toio usb: typec: ucsi: Clear EVENT_PENDING bit if ucsi_send_command fails usb: typec: altmodes/displayport: Signal hpd low when exiting mode counter: microchip-tcb-capture: Fix the use of internal GCLK logic counter: chrdev: fix getting array extensions scsi: ufs: core: Correct clear TM error log pinctrl: avoid unsafe code pattern in find_pinctrl() dma-buf: add dma_fence_timestamp helper cgroup: Remove duplicates in cgroup v1 tasks file usb: typec: ucsi: Use GET_CAPABILITY attributes data to set power supply scope nfp: flower: avoid rmmod nfp crash issues mctp: perform route lookups under a RCU read-side lock tee: amdtee: fix use-after-free vulnerability in amdtee_close_session Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table Input: xpad - add PXN V900 support Input: psmouse - fix fast_reconnect function for PS/2 mode Input: powermate - fix use-after-free in powermate_config_complete ceph: fix type promotion bug on 32bit systems ceph: fix incorrect revoked caps assert in ceph_fill_file_size() libceph: use kernel_connect() powerpc/47x: Fix 47x syscall return crash thunderbolt: Restart XDomain discovery handshake after failure thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge mcb: remove is_added flag from mcb_device struct x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs perf/x86/lbr: Filter vsyscall addresses ksmbd: not allow to open file if delelete on close bit is set ACPI: EC: Add quirk for the HP Pavilion Gaming 15-dk1xxx ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA drm/amd/display: Don't set dpms_off for seamless boot drm/amdgpu: add missing NULL check drm/atomic-helper: relax unregistered connector check arm64: dts: mediatek: mt8195-demo: update and reorder reserved memory regions arm64: dts: mediatek: mt8195-demo: fix the memory size to 8GB iio: addac: Kconfig: update ad74413r selections iio: pressure: ms5611: ms5611_prom_is_valid false negative bug iio: pressure: dps310: Adjust Timeout Settings iio: admv1013: add mixer_vgate corner cases iio: dac: ad3552r: Correct device IDs iio: adc: imx8qxp: Fix address for command buffer registers iio: imu: bno055: Fix missing Kconfig dependencies iio: pressure: bmp280: Fix NULL pointer exception usb: musb: Modify the "HWVers" register address usb: musb: Get the musb_qh poniter after musb_giveback usb: hub: Guard against accesses to uninitialized BOS descriptors usb: cdns3: Modify the return value of cdns_set_active () to void when CONFIG_PM_SLEEP is disabled usb: dwc3: Soft reset phy on probe for host net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer dmaengine: stm32-mdma: set in_flight_bytes in case CRQA flag is set dmaengine: stm32-mdma: use Link Address Register to compute residue dmaengine: stm32-dma: fix residue in case of MDMA chaining dmaengine: stm32-dma: fix stm32_dma_prep_slave_sg in case of MDMA chaining dmaengine: stm32-mdma: abort resume if no ongoing transfer tcp: enforce receive buffer memory limits by allowing the tcp window to shrink workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() nfc: nci: assert requested protocol is valid pinctrl: renesas: rzn1: Enable missing PINMUX net/smc: Fix pos miscalculation in statistics net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp ixgbe: fix crash with empty VF macvlan list net/mlx5e: macsec: use update_pn flag instead of PN comparation net: phy: mscc: macsec: reject PN update requests net: macsec: indicate next pn update when offloading net: refine debug info in skb_checksum_help() bpf: Fix verifier log for async callback return values drm/vmwgfx: fix typo of sizeof argument riscv, bpf: Sign-extend return values riscv, bpf: Factor out emit_call for kernel and bpf context xen-netback: use default TX queue size for vifs mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type ieee802154: ca8210: Fix a potential UAF in ca8210_probe ravb: Fix use-after-free issue in ravb_tx_timeout_work() ravb: Fix up dma_free_coherent() call in ravb_remove() arm64: dts: mediatek: mt8195: Set DSU PMU status to fail can: sun4i_can: Only show Kconfig if ARCH_SUNXI is set can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior net: dsa: qca8k: fix potential MDIO bus conflict when accessing internal PHYs via management frames phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers phy: lynx-28g: lock PHY while performing CDR lock workaround phy: lynx-28g: cancel the CDR check work item on the remove path drm/msm/dp: Add newlines to debug printks drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow drm/msm/dsi: fix irq_of_parse_and_map() error checking drm/msm/dsi: skip the wait for video mode done if not applicable drm/msm/dp: do not reinitialize phy unless retry during link training pinctrl: nuvoton: wpcm450: fix out of bounds write ALSA: hda/realtek - ALC287 merge RTK codec with CS CS35L41 AMP ALSA: hda/realtek - ALC287 I2S speaker platform support ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED ASoC: fsl_sai: Don't disable bitclock for i.MX8MP ASoC: fsl_sai: MCLK bind with TX/RX enable bit ASoC: Use of_property_read_bool() for boolean properties ASoC: Intel: soc-acpi: Add entry for sof_es8336 in MTL match table. ASoC: Intel: sof_sdw: add support for SKU 0B14 ASoC: Intel: soc-acpi: Add entry for HDMI_In capture support in MTL match table ASoC: simple-card-utils: fixup simple_util_startup() error handling ASoC: SOF: amd: fix for firmware reload failure after playback ALSA: hda/realtek: Change model for Intel RVP board ALSA: usb-audio: Fix microphone sound on Nexigo webcam. ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset KEYS: trusted: Remove redundant static calls usage irqchip: renesas-rzg2l: Fix logic to clear TINT interrupt source dt-bindings: interrupt-controller: renesas,rzg2l-irqc: Update description for '#interrupt-cells' property arm64: dts: qcom: sm8150: extend the size of the PDC resource net: prevent address rewrite in kernel_bind() ata: libata-scsi: Disable scsi device manage_system_start_stop ASoC: amd: yc: Fix non-functional mic on Lenovo 82YM quota: Fix slow quotaoff HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect scsi: Do not rescan devices with a suspended queue platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section mismatch warning platform/x86: think-lmi: Fix reference leak perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7 RDMA/cxgb4: Check skb value for failure to allocate drm/i915: Don't set PIPE_CONTROL_FLUSH_L3 for aux inval mptcp: fix delegated action races net: mana: Fix TX CQE error handling Linux 6.1.58 lib/test_meminit: fix off-by-one error in test_pages() Revert "NFS: Fix error handling for O_DIRECT write scheduling" Revert "NFS: Fix O_DIRECT locking issues" Revert "NFS: More O_DIRECT accounting fixes for error paths" Revert "NFS: Use the correct commit info in nfs_join_page_group()" Revert "NFS: More fixes for nfs_direct_write_reschedule_io()" Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/interrupt-controller/qcom,mpm.yaml Documentation/devicetree/bindings/interrupt-controller/renesas,rzg2l-irqc.yaml Documentation/devicetree/bindings/mfd/mt6397.txt Documentation/devicetree/bindings/mmc/sdhci-msm.yaml drivers/clk/qcom/gcc-sm8150.c drivers/hwtracing/coresight/coresight-tmc-core.c drivers/hwtracing/coresight/coresight-tmc-etr.c drivers/interconnect/qcom/sm8150.c drivers/interconnect/qcom/sm8150.h drivers/phy/qualcomm/Makefile Change-Id: I9b0afef38a5cd42781504ccd77dfb8a747a5dea4 Upstream-Build: ks_qcom-android14-6.1-keystone-qcom-release@11750438 UKQ2.240423.001 Signed-off-by: Srinivasarao Pathipati <quic_c_spathi@quicinc.com>	2024-05-09 10:00:15 +05:30
Zi Yan	6dde3d399b	FROMLIST: mm/migrate: set swap entry values of THP tail pages properly. ... The tail pages in a THP can have swap entry information stored in their private field. When migrating to a new page, all tail pages of the new page need to update ->private to avoid future data corruption. This fix is stable-only, since after commit 07e09c483cbe ("mm/huge_memory: work on folio->swap instead of page->private when splitting folio"), subpages of a swapcached THP no longer requires the maintenance. Adding THPs to the swapcache was introduced in commit 38d8b4e6bd ("mm, THP, swap: delay splitting THP during swap out"), where each subpage of a THP added to the swapcache had its own swapcache entry and required the ->private field to point to the correct swapcache entry. Later, when THP migration functionality was implemented in commit 616b837153 ("mm: thp: enable thp migration in generic path"), it initially did not handle the subpages of swapcached THPs, failing to update their ->private fields or replace the subpage pointers in the swapcache. Subsequently, commit e71769ae52 ("mm: enable thp migration for shmem thp") addressed the swapcache update aspect. This patch fixes the update of subpage ->private fields. Bug: 324818390 Bug: 336202640 Fixes: 616b837153 ("mm: thp: enable thp migration in generic path") Link: https://lore.kernel.org/linux-mm/20240306155217.118467-1-zi.yan@sent.com/ Reported-and-tested-by: Charan Teja Kalla <quic_charante@quicinc.com> Change-Id: Ia4603cd58b76dc6ff46a2c53a735942a87221419 Signed-off-by: Zi Yan <ziy@nvidia.com> Acked-by: David Hildenbrand <david@redhat.com> Closes: https://lore.kernel.org/linux-mm/1707814102-22682-1-git-send-email-quic_charante@quicinc.com/ Signed-off-by: Charan Teja Kalla <quic_charante@quicinc.com>	2024-04-22 18:10:26 +00:00
Richard Chang	4a85f45e4e	BACKPORT: FROMGIT: mm: add alloc_contig_migrate_range allocation statistics ... alloc_contig_migrate_range has every information to be able to understand big contiguous allocation latency. For example, how many pages are migrated, how many times they were needed to unmap from page tables. This patch adds the trace event to collect the allocation statistics. In the field, it was quite useful to understand CMA allocation latency. [akpm@linux-foundation.org: a/trace_mm_alloc_config_migrate_range_info_enabled/trace_mm_alloc_contig_migrate_range_info_enabled] Link: https://lkml.kernel.org/r/20240228051127.2859472-1-richardycc@google.com Signed-off-by: Richard Chang <richardycc@google.com> Reviewed-by: Steven Rostedt (Google) <rostedt@goodmis.org. Cc: Martin Liu <liumartin@google.com> Cc: "Masami Hiramatsu (Google)" <mhiramat@kernel.org> Cc: Mathieu Desnoyers <mathieu.desnoyers@efficios.com> Cc: Minchan Kim <minchan@kernel.org> Cc: Suren Baghdasaryan <surenb@google.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Bug: 315897534 (cherry picked from commit c8b36003121834cb77fcaf8a1ce0a454d7a97891 https://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm.git mm-stable) [richardycc: slight modification for android change 0de2f42977] Change-Id: If6c3cd106201fd13683d1dd5afdfa62a48a4dd3b Signed-off-by: Richard Chang <richardycc@google.com>	2024-03-13 16:15:27 +00:00
Richard Chang	8bd9771065	ANDROID: vendor_hooks: Export cma_alloc trace points ... For cma_alloc latency measurement. Bug: 315897033 Change-Id: I5941c0e0017728dc2139d5fad073f8b58f4efa29 Signed-off-by: Richard Chang <richardycc@google.com>	2024-03-08 04:04:18 +00:00
Todd Kjos	6bad1052c2	Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" ... This reverts commit 1dbafe61e3. Reason for revert: Too early. Needs to wait until 2024-03-27 Change-Id: I769b944bd089aa2278659ec87f7ba4ac4e74ee4a Signed-off-by: Todd Kjos <tkjos@google.com>	2024-03-07 21:18:27 +00:00
Greg Kroah-Hartman	c3a1a1e97e	Merge branch 'android14-6.1' into branch 'android14-6.1-lts' ... Backmerge the latest android14-6.1 changes into the lts branch to keep up to date. Contains the following commits: * 3578913b2e UPSTREAM: net/rose: Fix Use-After-Free in rose_ioctl * 8fbed1ea00 UPSTREAM: ida: Fix crash in ida_free when the bitmap is empty * 6ce5bb744e ANDROID: GKI: Update symbol list for mtk * 7cbad58851 Reapply "perf: Disallow mis-matched inherited group reads" * 067a03c44e ANDROID: GKI: Add Pasa symbol list * b6be1a36f7 FROMGIT: mm: memcg: don't periodically flush stats when memcg is disabled * d0e2d333f9 ANDROID: Update the ABI symbol list * 10558542a1 ANDROID: sched: export update_misfit_status symbol * a0b3b39898 ANDROID: GKI: Add ASR KMI symbol list * 599710db0f FROMGIT: usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend * 9265fa90c1 FROMLIST: usb: core: Prevent null pointer dereference in update_port_device_state * 2730733d54 ANDROID: gki_defconfig: Enable CONFIG_NVME_MULTIPATH * 4f668f5682 BACKPORT: irqchip/gic-v3: Work around affinity issues on ASR8601 * 473a871315 BACKPORT: irqchip/gic-v3: Improve affinity helper * 6c32acf537 UPSTREAM: sched/fair: Limit sched slice duration * 7088d250bf ANDROID: Update the ABI symbol list * c249740414 ANDROID: idle_inject: Export function symbols * 990d341477 ANDROID: Update the ABI symbol list * be92a6a1b4 ANDROID: GKI: Remove CONFIG_MEDIA_CEC_RC * fa9ac43f16 BACKPORT: usb: host: xhci: Avoid XHCI resume delay if SSUSB device is not present * f27fc6ba23 Merge "Merge tag 'android14-6.1.68_r00' into branch 'android14-6.1'" into android14-6.1 |\ | * 0177cfb2a2 Merge tag 'android14-6.1.68_r00' into branch 'android14-6.1' * c96cea1a3c ANDROID: Update the ABI symbol list * c2fbc12180 ANDROID: uid_sys_stats: Drop CONFIG_UID_SYS_STATS_DEBUG logic * 90bd30bdef ANDROID: Update the ABI symbol list * 3280560843 ANDROID: Update the ABI symbol list * 427210e440 UPSTREAM: usb: gadget: uvc: Remove nested locking * 9267e267be ANDROID: uid_sys_stats: Fully initialize uid_entry_tmp value * 2d3f0c9d41 ANDROID: Roll back some code to fix system_server registers psi trigger failed. * bd77c97c76 UPSTREAM: usb: gadget: uvc: Fix use are free during STREAMOFF * 21c71a7d0e ANDROID: GKI: Add symbol list for Nothing * aba5a3fe09 ANDROID: Enable CONFIG_LAZY_RCU in x86 gki_defconfig * 204160394a ANDROID: fuse-bpf: Fix the issue of abnormal lseek system calls * 947708f1ff ANDROID: ABI: Update symbol list for imx * 7eedea7abf BACKPORT: PM: sleep: Fix possible deadlocks in core system-wide PM code * e1a20dd9ff UPSTREAM: async: Introduce async_schedule_dev_nocall() * e4b0e14f83 UPSTREAM: async: Split async_schedule_node_domain() * 6b4c816d17 FROMGIT: BACKPORT: mm: update mark_victim tracepoints fields * d97ea65296 ANDROID: Enable CONFIG_LAZY_RCU in arm64 gki_defconfig * 90d68cedd1 FROMLIST: rcu: Provide a boot time parameter to control lazy RCU * a079cc5876 ANDROID: rcu: Add a minimum time for marking boot as completed * ffe09c06a8 UPSTREAM: rcu: Disable laziness if lazy-tracking says so * d07488d26e UPSTREAM: rcu: Track laziness during boot and suspend * 4316bd568b UPSTREAM: net: Use call_rcu_hurry() for dst_release() * b9427245f0 UPSTREAM: workqueue: Make queue_rcu_work() use call_rcu_hurry() * 72fdf7f606 UPSTREAM: percpu-refcount: Use call_rcu_hurry() for atomic switch * ced65a053b UPSTREAM: io_uring: use call_rcu_hurry if signaling an eventfd * 84c8157d06 UPSTREAM: rcu: Update synchronize_rcu_mult() comment for call_rcu_hurry() * 3751416eeb UPSTREAM: scsi/scsi_error: Use call_rcu_hurry() instead of call_rcu() * 52193e9489 UPSTREAM: rcu/rcutorture: Use call_rcu_hurry() where needed * 83f8ba569f UPSTREAM: rcu/rcuscale: Use call_rcu_hurry() for async reader test * 9b625f4978 UPSTREAM: rcu/sync: Use call_rcu_hurry() instead of call_rcu * c570c8fea3 BACKPORT: rcu: Shrinker for lazy rcu * 4957579439 UPSTREAM: rcu: Refactor code a bit in rcu_nocb_do_flush_bypass() * 66a832fe38 UPSTREAM: rcu: Make call_rcu() lazy to save power * 4fb09fb4f7 UPSTREAM: rcu: Fix missing nocb gp wake on rcu_barrier() * 64c59ad2c3 UPSTREAM: rcu: Fix late wakeup when flush of bypass cblist happens * 0799ace265 ANDROID: Update the ABI symbol list * 65db2f8ed3 ANDROID: GKI: add GKI symbol list for Exynosauto SoC * cfe8cce4e8 UPSTREAM: coresight: tmc: Don't enable TMC when it's not ready. * 899194d7e9 UPSTREAM: netfilter: nf_tables: bail out on mismatching dynset and set expressions * e6712ed4f0 ANDROID: ABI: Update oplus symbol list * 24bb8fc82e ANDROID: vendor_hooks: add hooks in driver/android/binder.c * 55930b39ca ANDROID: GKI: Update honda symbol list for xt_LOG * 3160b69e20 ANDROID: GKI: Update honda symbol list for ebt filter * 4dc7f98815 ANDROID: GKI: Update honda symbol list for ebtables * 39a0823340 ANDROID: GKI: Update honda symbol list for net scheduler * dd0098bdb4 ANDROID: GKI: Update honda symbol list for led-trigger * 66a20ed4b8 ANDROID: GKI: Add initial symbol list for honda * 28dbe4d613 ANDROID: GKI: add symbols to ABI * 97100e867e FROMGIT: usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart * 36248a15a7 FROMGIT: usb: dwc3: set pm runtime active before resume common Change-Id: I8d9586a94c3182cd365d1e3b651a7552c7c9949b Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-02-01 16:48:05 +00:00
T.J. Mercier	b6be1a36f7	FROMGIT: mm: memcg: don't periodically flush stats when memcg is disabled ... The root memcg is onlined even when memcg is disabled. When it's onlined a 2 second periodic stat flush is started, but no stat flushing is required when memcg is disabled because there can be no child memcgs. Most calls to flush memcg stats are avoided when memcg is disabled as a result of the mem_cgroup_disabled check added in 7d7ef0a4686a ("mm: memcg: restore subtree stats flushing"), but the periodic flushing started in mem_cgroup_css_online is not. Skip it. Link: https://lkml.kernel.org/r/20240126211927.1171338-1-tjmercier@google.com Fixes: aa48e47e39 ("memcg: infrastructure to flush memcg stats") Change-Id: Iae6aeb3091d349898ea4987a784a971d9b3c97f7 Signed-off-by: T.J. Mercier <tjmercier@google.com> Acked-by: Shakeel Butt <shakeelb@google.com> Acked-by: Johannes Weiner <hannes@cmpxchg.org> Acked-by: Chris Li <chrisl@kernel.org> Reported-by: Minchan Kim <minchan@google.com> Cc: Michal Hocko <mhocko@kernel.org> Cc: Muchun Song <muchun.song@linux.dev> Cc: Roman Gushchin <roman.gushchin@linux.dev> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 7e9bccbe57812f888f51d46d7cdbc6327eee24f3 https://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm.git/ mm-unstable) Signed-off-by: T.J. Mercier <tjmercier@google.com>	2024-01-30 20:40:37 +00:00
Todd Kjos	f27fc6ba23	Merge "Merge tag 'android14-6.1.68_r00' into branch 'android14-6.1'" into android14-6.1	2024-01-24 17:34:59 +00:00
Carlos Galo	6b4c816d17	FROMGIT: BACKPORT: mm: update mark_victim tracepoints fields ... The current implementation of the mark_victim tracepoint provides only the process ID (pid) of the victim process. This limitation poses challenges for userspace tools that need additional information about the OOM victim. The association between pid and the additional data may be lost after the kill, making it difficult for userspace to correlate the OOM event with the specific process. In order to mitigate this limitation, add the following fields: - UID In Android each installed application has a unique UID. Including the `uid` assists in correlating OOM events with specific apps. - Process Name (comm) Enables identification of the affected process. - OOM Score Allows userspace to get additional insights of the relative kill priority of the OOM victim. Link: https://lkml.kernel.org/r/20240111210539.636607-1-carlosgalo@google.com Change-Id: Icc3ed013a9dfff9bb09f1d7588757e6028c17069 Signed-off-by: Carlos Galo <carlosgalo@google.com> Cc: Steven Rostedt <rostedt@goodmis.org> Cc: Suren Baghdasaryan <surenb@google.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 649ffb4cbb90a7f60f17dd74e57d814e762ea01d mm-unstable) [ carlosgalo: Manually added struct cred change in mark_oom_victim function ] Bug: 315560026 Change-Id: I81fb6f3447f432100ad4cd25e22db23768003388 Signed-off-by: Carlos Galo <carlosgalo@google.com>	2024-01-19 00:27:34 +00:00
Srinivasarao Pathipati	5e321b7e89	Merge keystone/android14-6.1-keystone-qcom-release.6.1.57 (daf56c4) into qcom-6.1 ... * refs/heads/tmp-daf56c4: FROMLIST: mm: migrate high-order folios in swap cache correctly Change-Id: Ief52fd313a8a922caa272b8050775494170d6ad2 Upstream-Build: ks_qcom-android14-6.1-keystone-qcom-release@11305096 UKQ2.240112.001 Signed-off-by: Srinivasarao Pathipati <quic_c_spathi@quicinc.com>	2024-01-18 10:49:08 -08:00
Greg Kroah-Hartman	732ef8a408	Merge branch 'android14-6.1' into branch 'android14-6.1-lts' ... This syncs up the -lts branch with the changes in the non-lts branch, specifically needed for the ABI symbol updates to allow the build servers to keep running properly. Included in here are commits: * df1cdb0a70 ANDROID: Update the pixel symbol list * 66cd99ccdb BACKPORT: UPSTREAM: phy: qcom-qmp: Introduce Kconfig symbols for discrete drivers * a70d3b7bdd ANDROID: GKI: add symbols of vendor hooks to ABI for swapping in ahead * d4db0d5d08 ANDROID: GKI: add vendor hooks for swapping in ahead * fd40c1d901 ANDROID: add 16k targets for Microdroid kernel * 82bf9e7625 FROMGIT: BACKPORT: mm/cma: fix placement of trace_cma_alloc_start/finish * 800cac4b33 FROMGIT: wifi: nl80211: Extend del pmksa support for SAE and OWE security Change-Id: I94352b7351253b88af675cc7749bde2936dd91c7 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-01-16 15:53:08 +00:00
Greg Kroah-Hartman	e1b12db2de	Merge 6.1.72 into android14-6.1-lts ... Changes in 6.1.72 keys, dns: Fix missing size check of V1 server-list header block: Don't invalidate pagecache for invalid falloc modes ALSA: hda/realtek: enable SND_PCI_QUIRK for hp pavilion 14-ec1xxx series ALSA: hda/realtek: fix mute/micmute LEDs for a HP ZBook ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP ProBook 440 G6 mptcp: prevent tcp diag from closing listener subflows Revert "PCI/ASPM: Remove pcie_aspm_pm_state_change()" drm/mgag200: Fix gamma lut not initialized for G200ER, G200EV, G200SE cifs: cifs_chan_is_iface_active should be called with chan_lock held cifs: do not depend on release_iface for maintaining iface_list KVM: x86/pmu: fix masking logic for MSR_CORE_PERF_GLOBAL_CTRL wifi: iwlwifi: pcie: don't synchronize IRQs from IRQ drm/bridge: ti-sn65dsi86: Never store more than msg->size bytes in AUX xfer netfilter: use skb_ip_totlen and iph_totlen netfilter: nf_tables: set transport offset from mac header for netdev/egress nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local octeontx2-af: Fix marking couple of structure as __packed drm/i915/dp: Fix passing the correct DPCD_REV for drm_dp_set_phy_test_pattern ice: Fix link_down_on_close message ice: Shut down VSI with "link-down-on-close" enabled i40e: Fix filter input checks to prevent config with invalid values igc: Report VLAN EtherType matching back to user igc: Check VLAN TCI mask igc: Check VLAN EtherType mask ASoC: fsl_rpmsg: Fix error handler with pm_runtime_enable ASoC: mediatek: mt8186: fix AUD_PAD_TOP register and offset mlxbf_gige: fix receive packet race condition net: sched: em_text: fix possible memory leak in em_text_destroy() r8169: Fix PCI error on system resume can: raw: add support for SO_MARK net-timestamp: extend SOF_TIMESTAMPING_OPT_ID to HW timestamps net: annotate data-races around sk->sk_tsflags net: annotate data-races around sk->sk_bind_phc net: Implement missing getsockopt(SO_TIMESTAMPING_NEW) selftests: bonding: do not set port down when adding to bond ARM: sun9i: smp: Fix array-index-out-of-bounds read in sunxi_mc_smp_init sfc: fix a double-free bug in efx_probe_filters net: bcmgenet: Fix FCS generation for fragmented skbuffs netfilter: nft_immediate: drop chain reference counter on error net: Save and restore msg_namelen in sock_sendmsg i40e: fix use-after-free in i40e_aqc_add_filters() ASoC: meson: g12a-toacodec: Validate written enum values ASoC: meson: g12a-tohdmitx: Validate written enum values ASoC: meson: g12a-toacodec: Fix event generation ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux i40e: Restore VF MSI-X state during PCI reset igc: Fix hicredit calculation net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues net/smc: fix invalid link access in dumping SMC-R connections octeontx2-af: Always configure NIX TX link credits based on max frame size octeontx2-af: Re-enable MAC TX in otx2_stop processing asix: Add check for usbnet_get_endpoints net: ravb: Wait for operating mode to be applied bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters() net: Implement missing SO_TIMESTAMPING_NEW cmsg support selftests: secretmem: floor the memory size to the multiple of page_size cpu/SMT: Create topology_smt_thread_allowed() cpu/SMT: Make SMT control more robust against enumeration failures srcu: Fix callbacks acceleration mishandling bpf, x64: Fix tailcall infinite loop bpf, x86: Simplify the parsing logic of structure parameters bpf, x86: save/restore regs with BPF_DW size net: Declare MSG_SPLICE_PAGES internal sendmsg() flag udp: Convert udp_sendpage() to use MSG_SPLICE_PAGES splice, net: Add a splice_eof op to file-ops and socket-ops ipv4, ipv6: Use splice_eof() to flush udp: introduce udp->udp_flags udp: move udp->no_check6_tx to udp->udp_flags udp: move udp->no_check6_rx to udp->udp_flags udp: move udp->gro_enabled to udp->udp_flags udp: move udp->accept_udp_{l4|fraglist} to udp->udp_flags udp: lockless UDP_ENCAP_L2TPINUDP / UDP_GRO udp: annotate data-races around udp->encap_type wifi: iwlwifi: yoyo: swap cdb and jacket bits values arm64: dts: qcom: sdm845: align RPMh regulator nodes with bindings arm64: dts: qcom: sdm845: Fix PSCI power domain names fbdev: imsttfb: Release framebuffer and dealloc cmap on error path fbdev: imsttfb: fix double free in probe() bpf: decouple prune and jump points bpf: remove unnecessary prune and jump points bpf: Remove unused insn_cnt argument from visit_[func_call_]insn() bpf: clean up visit_insn()'s instruction processing bpf: Support new 32bit offset jmp instruction bpf: handle ldimm64 properly in check_cfg() bpf: fix precision backtracking instruction iteration blk-mq: make sure active queue usage is held for bio_integrity_prep() net/mlx5: Increase size of irq name buffer s390/mm: add missing arch_set_page_dat() call to vmem_crst_alloc() s390/cpumf: support user space events for counting f2fs: clean up i_compress_flag and i_compress_level usage f2fs: convert to use bitmap API f2fs: assign default compression level f2fs: set the default compress_level on ioctl selftests: mptcp: fix fastclose with csum failure selftests: mptcp: set FAILING_LINKS in run_tests media: camss: sm8250: Virtual channels for CSID media: qcom: camss: Fix set CSI2_RX_CFG1_VC_MODE when VC is greater than 3 ext4: convert move_extent_per_page() to use folios khugepage: replace try_to_release_page() with filemap_release_folio() memory-failure: convert truncate_error_page() to use folio mm: merge folio_has_private()/filemap_release_folio() call pairs mm, netfs, fscache: stop read optimisation when folio removed from pagecache filemap: add a per-mapping stable writes flag block: update the stable_writes flag in bdev_add smb: client: fix missing mode bits for SMB symlinks net: dpaa2-eth: rearrange variable in dpaa2_eth_get_ethtool_stats dpaa2-eth: recycle the RX buffer only after all processing done ethtool: don't propagate EOPNOTSUPP from dumps bpf, sockmap: af_unix stream sockets need to hold ref for pair sock firmware: arm_scmi: Fix frequency truncation by promoting multiplier type ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 genirq/affinity: Remove the 'firstvec' parameter from irq_build_affinity_masks genirq/affinity: Pass affinity managed mask array to irq_build_affinity_masks genirq/affinity: Don't pass irq_affinity_desc array to irq_build_affinity_masks genirq/affinity: Rename irq_build_affinity_masks as group_cpus_evenly genirq/affinity: Move group_cpus_evenly() into lib/ lib/group_cpus.c: avoid acquiring cpu hotplug lock in group_cpus_evenly mm/memory_hotplug: add missing mem_hotplug_lock mm/memory_hotplug: fix error handling in add_memory_resource() net: sched: call tcf_ct_params_free to free params in tcf_ct_init netfilter: flowtable: allow unidirectional rules netfilter: flowtable: cache info of last offload net/sched: act_ct: offload UDP NEW connections net/sched: act_ct: Fix promotion of offloaded unreplied tuple netfilter: flowtable: GC pushes back packets to classic path net/sched: act_ct: Take per-cb reference to tcf_ct_flow_table octeontx2-af: Fix pause frame configuration octeontx2-af: Support variable number of lmacs btrfs: fix qgroup_free_reserved_data int overflow btrfs: mark the len field in struct btrfs_ordered_sum as unsigned ring-buffer: Fix 32-bit rb_time_read() race with rb_time_cmpxchg() firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards x86/kprobes: fix incorrect return address calculation in kprobe_emulate_call_indirect i2c: core: Fix atomic xfer check for non-preempt config mm: fix unmap_mapping_range high bits shift bug drm/amdgpu: skip gpu_info fw loading on navi12 drm/amd/display: add nv12 bounding box mmc: meson-mx-sdhc: Fix initialization frozen issue mmc: rpmb: fixes pause retune on all RPMB partitions. mmc: core: Cancel delayed work before releasing host mmc: sdhci-sprd: Fix eMMC init failure after hw reset genirq/affinity: Only build SMP-only helper functions on SMP kernels f2fs: compress: fix to assign compress_level for lz4 correctly net/sched: act_ct: additional checks for outdated flows net/sched: act_ct: Always fill offloading tuple iifidx bpf: Fix a verifier bug due to incorrect branch offset comparison with cpu=v4 bpf: syzkaller found null ptr deref in unix_bpf proto add media: qcom: camss: Comment CSID dt_id field smb3: Replace smb2pdu 1-element arrays with flex-arrays Revert "interconnect: qcom: sm8250: Enable sync_state" Linux 6.1.72 Change-Id: Id00eb2ae1159d4d5fa0ef914e672c5669cbf5b0a Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-01-14 13:26:13 +00:00
Greg Kroah-Hartman	8eac30b25e	This is the 6.1.71 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmWYD8QACgkQONu9yGCS aT5cEA//UKwVnselP3QHU6yEm2j8Vuq5IOEIqIeYTDTyS7TGP83SsyM4n2KRlTwC /vaY3HWNsZHLqsNICPOPSdQn9STa7MYTnf/ackBbPglDnDz/A6mSB3zkXtCKFm6+ UBmk6Y8pZwpdvk3aa6Z62Kr5bGGHdzvXdiJitERLlD2PFUOZT9/IHSncGnts3TQv PjFXy1KVIGsThKbtjtYPpa100RAti5HeLv/NbsaVbuKYMME/QCFmqyNRAp9k2iHx 3nkze70aoREShEDjaLkcsirzwRKJu7qqNriYLt+wd7HmcD328R2UlTR8L3ZM0xOq qxBHnzbFtQyGR7NAudi2pStqwctPhFP6vRz1aJvt+w9tmbeKAWQWMd2pNvG8GhJm nxYFGyPLzTgPifK5SELCNIW4WXf8rnrRNgZ+Ph/JIGuhp+603//ATHRlVEwHcnl+ M0GRbL06nWFVvfdKCYuu0autb9sW5T/vq02cbE5vRVVaziazry8S8EmxYQyOg9X/ CBAd1XTybVZki9VkIP5zbdvWJL3LhFfsabBFy7TPZor/YCJQDvxzw1iwtY/BPVDT MryHjrYwH/n5RvibANRcTbCamMQY4IrJ4X3afJGgh7BK5N5C5ug4HYJ7oG5QB++x xC4A5x3L6D9SE/St8hFWghjYcd6lFcjlz1wJ5MyLImwYqfr8DnY= =Vt0s -----END PGP SIGNATURE----- Merge 6.1.71 into android14-6.1-lts Changes in 6.1.71 ksmbd: replace one-element arrays with flexible-array members ksmbd: set SMB2_SESSION_FLAG_ENCRYPT_DATA when enforcing data encryption for this share ksmbd: use F_SETLK when unlocking a file ksmbd: Fix resource leak in smb2_lock() ksmbd: Convert to use sysfs_emit()/sysfs_emit_at() APIs ksmbd: Implements sess->rpc_handle_list as xarray ksmbd: fix typo, syncronous->synchronous ksmbd: Remove duplicated codes ksmbd: update Kconfig to note Kerberos support and fix indentation ksmbd: Fix spelling mistake "excceed" -> "exceeded" ksmbd: Fix parameter name and comment mismatch ksmbd: remove unused is_char_allowed function ksmbd: delete asynchronous work from list ksmbd: set NegotiateContextCount once instead of every inc ksmbd: avoid duplicate negotiate ctx offset increments ksmbd: remove unused compression negotiate ctx packing fs: introduce lock_rename_child() helper ksmbd: fix racy issue from using ->d_parent and ->d_name ksmbd: fix uninitialized pointer read in ksmbd_vfs_rename() ksmbd: fix uninitialized pointer read in smb2_create_link() ksmbd: call putname after using the last component ksmbd: fix posix_acls and acls dereferencing possible ERR_PTR() ksmbd: add mnt_want_write to ksmbd vfs functions ksmbd: remove unused ksmbd_tree_conn_share function ksmbd: use kzalloc() instead of __GFP_ZERO ksmbd: return a literal instead of 'err' in ksmbd_vfs_kern_path_locked() ksmbd: Change the return value of ksmbd_vfs_query_maximal_access to void ksmbd: use kvzalloc instead of kvmalloc ksmbd: Replace the ternary conditional operator with min() ksmbd: Use struct_size() helper in ksmbd_negotiate_smb_dialect() ksmbd: Replace one-element array with flexible-array member ksmbd: Fix unsigned expression compared with zero ksmbd: check if a mount point is crossed during path lookup ksmbd: switch to use kmemdup_nul() helper ksmbd: add support for read compound ksmbd: fix wrong interim response on compound ksmbd: fix `force create mode' and `force directory mode' ksmbd: Fix one kernel-doc comment ksmbd: add missing calling smb2_set_err_rsp() on error ksmbd: remove experimental warning ksmbd: remove unneeded mark_inode_dirty in set_info_sec() ksmbd: fix passing freed memory 'aux_payload_buf' ksmbd: return invalid parameter error response if smb2 request is invalid ksmbd: check iov vector index in ksmbd_conn_write() ksmbd: fix race condition with fp ksmbd: fix race condition from parallel smb2 logoff requests ksmbd: fix race condition from parallel smb2 lock requests ksmbd: fix race condition between tree conn lookup and disconnect ksmbd: fix wrong error response status by using set_smb2_rsp_status() ksmbd: fix Null pointer dereferences in ksmbd_update_fstate() ksmbd: fix potential double free on smb2_read_pipe() error path ksmbd: Remove unused field in ksmbd_user struct ksmbd: reorganize ksmbd_iov_pin_rsp() ksmbd: fix kernel-doc comment of ksmbd_vfs_setxattr() ksmbd: fix recursive locking in vfs helpers ksmbd: fix missing RDMA-capable flag for IPoIB device in ksmbd_rdma_capable_netdev() ksmbd: add support for surrogate pair conversion ksmbd: no need to wait for binded connection termination at logoff ksmbd: fix kernel-doc comment of ksmbd_vfs_kern_path_locked() ksmbd: prevent memory leak on error return ksmbd: fix possible deadlock in smb2_open ksmbd: separately allocate ci per dentry ksmbd: move oplock handling after unlock parent dir ksmbd: release interim response after sending status pending response ksmbd: move setting SMB2_FLAGS_ASYNC_COMMAND and AsyncId ksmbd: don't update ->op_state as OPLOCK_STATE_NONE on error ksmbd: set epoch in create context v2 lease ksmbd: set v2 lease capability ksmbd: downgrade RWH lease caching state to RH for directory ksmbd: send v2 lease break notification for directory ksmbd: lazy v2 lease break on smb2_write() ksmbd: avoid duplicate opinfo_put() call on error of smb21_lease_break_ack() ksmbd: fix wrong allocation size update in smb2_open() ARM: dts: Fix occasional boot hang for am3 usb usb: fotg210-hcd: delete an incorrect bounds test spi: Introduce spi_get_device_match_data() helper iio: imu: adis16475: add spi_device_id table nfsd: separate nfsd_last_thread() from nfsd_put() nfsd: call nfsd_last_thread() before final nfsd_put() linux/export: Ensure natural alignment of kcrctab array spi: Reintroduce spi_set_cs_timing() spi: Add APIs in spi core to set/get spi->chip_select and spi->cs_gpiod spi: atmel: Fix clock issue when using devices with different polarities block: renumber QUEUE_FLAG_HW_WC ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe mm/filemap: avoid buffered read/write race to read inconsistent data mm: migrate high-order folios in swap cache correctly mm/memory-failure: cast index to loff_t before shifting it mm/memory-failure: check the mapcount of the precise page ring-buffer: Fix wake ups when buffer_percent is set to 100 tracing: Fix blocked reader of snapshot buffer ring-buffer: Remove useless update to write_stamp in rb_try_to_discard() netfilter: nf_tables: skip set commit for deleted/destroyed sets ring-buffer: Fix slowpath of interrupted event NFSD: fix possible oops when nfsd/pool_stats is closed. spi: Constify spi parameters of chip select APIs device property: Allow const parameter to dev_fwnode() kallsyms: Make module_kallsyms_on_each_symbol generally available tracing/kprobes: Fix symbol counting logic by looking at modules as well Revert "platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe" Linux 6.1.71 Change-Id: I7bc16d981b90e8e0b633628438f79fce898ad15a Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-01-14 11:21:18 +00:00
Greg Kroah-Hartman	1e63881f5c	This is the 6.1.70 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmWSsnYACgkQONu9yGCS aT7ZRw//bmrTWoNbFf/qdM11oPF9EHus9FUgSlP5yvNaa6jcPfwGx71NPXUkz+wU xKobh1VwK7TJxq4JHFQeMmupW/8++NeWNygwtYsllwnsMGzHL+mz2Txysrr/mhMx WUs6UVYXRxnuQJJDSqtTvMoyllpAJ1QQxJNuhKKOI1i+0DIu9YjQklD/4eW3cebv 8B9f3CeOyP/oL5Z0MqFTP8OnWx6X3jTbO4caor+qsyR+frgpXgBppTF76RHcd8lX MLVlx7aqr4wcml/uUMsolw8Zjbb719mX+KW3LHltl8wHftZeinYUsu1afnlb5dG1 rAaVgut0PmjTAQ/KwIp54CGO2MADwApMCUXIm0yyKSpNfw+HKR10bpz64HOFp9KQ 368YpjDJ3onkQdrLjV57w37YBRLyWxipeBya2+S4rdyPSfuvPkPCRNVkEDnHVAnH jxEhuoMZ2f/CIA8BT32y4DYDvEaIdfp7jVvEDFREDyIVXRMBhIneMhhyjU+Oe7Rw 1q/sfEJejXFa5VvC+Jl+K5LouP59M5MTq3RkCoYxZKz+bdfpOLEJ6AZJoZHcS02J QlM/pL213nC1ye3tuWFu3tNPzPS/G6LNQfGgSsBUzRn9IX2osn/epNFnCHBIFqlK apjrXObrmqKE6jNvy6ktHUDpnEXPZFpvirSXRN2Lk9SYh76bFP0= =d63o -----END PGP SIGNATURE----- Merge 6.1.70 into android14-6.1-lts Changes in 6.1.70 kasan: disable kasan_non_canonical_hook() for HW tags bpf: Fix prog_array_map_poke_run map poke update HID: i2c-hid: acpi: Unify ACPI ID tables format HID: i2c-hid: Add IDEA5002 to i2c_hid_acpi_blacklist[] drm/amd/display: fix hw rotated modes when PSR-SU is enabled ARM: dts: dra7: Fix DRA7 L3 NoC node register size ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init reset: Fix crash when freeing non-existent optional resets s390/vx: fix save/restore of fpu kernel context wifi: iwlwifi: pcie: add another missing bh-disable for rxq->lock wifi: mac80211: check if the existing link config remains unchanged wifi: mac80211: mesh: check element parsing succeeded wifi: mac80211: mesh_plink: fix matches_local logic Revert "net/mlx5e: fix double free of encap_header in update funcs" Revert "net/mlx5e: fix double free of encap_header" net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list() net/mlx5: Introduce and use opcode getter in command interface net/mlx5: Prevent high-rate FW commands from populating all slots net/mlx5: Re-organize mlx5_cmd struct net/mlx5e: Fix a race in command alloc flow net/mlx5e: fix a potential double-free in fs_udp_create_groups net/mlx5: Fix fw tracer first block check net/mlx5e: Correct snprintf truncation handling for fw_version buffer net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors net: mscc: ocelot: fix eMAC TX RMON stats for bucket 256-511 and above octeontx2-pf: Fix graceful exit during PFC configuration failure net: Return error from sk_stream_wait_connect() if sk_wait_event() fails net: sched: ife: fix potential use-after-free ethernet: atheros: fix a memleak in atl1e_setup_ring_resources net/rose: fix races in rose_kill_by_device() Bluetooth: Fix deadlock in vhci_send_frame Bluetooth: hci_event: shut up a false-positive warning net: mana: select PAGE_POOL net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() afs: Fix the dynamic root's d_delete to always delete unused dentries afs: Fix dynamic root lookup DNS check net: check dev->gso_max_size in gso_features_check() keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry afs: Fix overwriting of result of DNS query afs: Fix use-after-free due to get/remove race in volume tree ASoC: hdmi-codec: fix missing report for jack initial status ASoC: fsl_sai: Fix channel swap issue on i.MX8MP i2c: aspeed: Handle the coalesced stop conditions with the start conditions. x86/xen: add CPU dependencies for 32-bit build pinctrl: at91-pio4: use dedicated lock class for IRQ gpiolib: cdev: add gpio_device locking wrapper around gpio_ioctl() nvme-pci: fix sleeping function called from interrupt context drm/i915/mtl: limit second scaler vertical scaling in ver >= 14 drm/i915: Relocate intel_atomic_setup_scalers() drm/i915: Fix intel_atomic_setup_scalers() plane_state handling drm/i915/dpt: Only do the POT stride remap when using DPT drm/i915/mtl: Add MTL for remapping CCS FBs drm/i915: Fix ADL+ tiled plane stride when the POT stride is smaller than the original interconnect: Treat xlate() returning NULL node as an error iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw interconnect: qcom: sm8250: Enable sync_state Input: ipaq-micro-keys - add error handling for devm_kmemdup scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma() iio: triggered-buffer: prevent possible freeing of wrong buffer ALSA: usb-audio: Increase delay in MOTU M quirk usb-storage: Add quirk for incorrect WP on Kingston DT Ultimate 3.0 G3 wifi: cfg80211: Add my certificate wifi: cfg80211: fix certs build to not depend on file order USB: serial: ftdi_sio: update Actisense PIDs constant names USB: serial: option: add Quectel EG912Y module support USB: serial: option: add Foxconn T99W265 with new baseline USB: serial: option: add Quectel RM500Q R13 firmware support ALSA: hda/realtek: Add quirk for ASUS ROG GV302XA Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg Bluetooth: L2CAP: Send reject on command corrupted request Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE Bluetooth: Add more enc key size check net: usb: ax88179_178a: avoid failed operations when device is disconnected Input: soc_button_array - add mapping for airplane mode button net: 9p: avoid freeing uninit memory in p9pdu_vreadf net: rfkill: gpio: set GPIO direction net: ks8851: Fix TX stall caused by TX buffer overrun dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp smb: client: fix OOB in cifsd when receiving compounded resps smb: client: fix potential OOB in cifs_dump_detail() smb: client: fix OOB in SMB2_query_info_init() smb: client: fix OOB in smbCalcSize() drm/i915: Reject async flips with bigjoiner 9p: prevent read overrun in protocol dump tracepoint RISC-V: Fix do_notify_resume / do_work_pending prototype loop: do not enforce max_loop hard limit by (new) default dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client Revert "drm/amd/display: Do not set DRR on pipe commit" btrfs: zoned: no longer count fresh BG region as zone unusable ubifs: fix possible dereference after free ublk: move ublk_cancel_dev() out of ub->mutex selftests: mptcp: join: fix subflow_send_ack lookup Revert "scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity" scsi: core: Always send batch on reset or error handling command tracing / synthetic: Disable events after testing in synth_event_gen_test_init() dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata() pinctrl: starfive: jh7100: ignore disabled device tree nodes bus: ti-sysc: Flush posted write only after srst_udelay gpio: dwapb: mask/unmask IRQ when disable/enale it lib/vsprintf: Fix %pfwf when current node refcount == 0 thunderbolt: Fix memory leak in margining_port_remove() KVM: arm64: vgic: Simplify kvm_vgic_destroy() KVM: arm64: vgic: Add a non-locking primitive for kvm_vgic_vcpu_destroy() KVM: arm64: vgic: Force vcpu vgic teardown on vcpu destroy x86/alternatives: Sync core before enabling interrupts mm/damon/core: make damon_start() waits until kdamond_fn() starts fuse: share lookup state between submount and its parent wifi: cfg80211: fix CQM for non-range use wifi: nl80211: fix deadlock in nl80211_set_cqm_rssi (6.6.x) loop: deprecate autoloading callback loop_probe() Linux 6.1.70 Change-Id: I72bfbd39ae932d290b13d6fdde8e6684a84ec9e1 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-01-12 18:48:13 +00:00
Lianjun Huang	d4db0d5d08	ANDROID: GKI: add vendor hooks for swapping in ahead ... Add vendor hooks to capture demand paging during APP launch, so we can do it in advance in next launch. Bug: 315913896 Signed-off-by: Lianjun Huang <huanglianjun@xiaomi.com> Signed-off-by: Lianjun Huang <huanglianjun@xiaomi.corp-partner.google.com> Change-Id: I2698fefd347745fb4ff84b111caedbb3bb365ce3	2024-01-12 18:47:42 +00:00
Greg Kroah-Hartman	0b58f24c02	Reapply "kasan: print the original fault addr when access invalid shadow" ... This reverts commit a2eefda9e3. This issue is fixed properly in 6.1.70 so no longer needed here as it will cause merge issues. Change-Id: Ie80acf8e96dbcedd4a5d61701db8cbd3871258e2 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-01-12 18:46:58 +00:00
Greg Kroah-Hartman	d3d46ac25c	Merge 6.1.69 into android14-6.1-lts ... Changes in 6.1.69 perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table r8152: add USB device driver for config selection r8152: add vendor/device ID pair for D-Link DUB-E250 r8152: add vendor/device ID pair for ASUS USB-C2500 powerpc/ftrace: Fix stack teardown in ftrace_no_trace ext4: fix warning in ext4_dio_write_end_io() ksmbd: fix memory leak in smb2_lock() afs: Fix refcount underflow from error handling race HID: lenovo: Restrict detection of patched firmware only to USB cptkbd net/mlx5e: Fix possible deadlock on mlx5e_tx_timeout_work net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX qca_debug: Prevent crash on TX ring changes qca_debug: Fix ethtool -G iface tx behavior qca_spi: Fix reset behavior bnxt_en: Clear resource reservation during resume bnxt_en: Save ring error counters across reset bnxt_en: Fix wrong return value check in bnxt_close_nic() bnxt_en: Fix HWTSTAMP_FILTER_ALL packet timestamp logic atm: solos-pci: Fix potential deadlock on &cli_queue_lock atm: solos-pci: Fix potential deadlock on &tx_queue_lock net: vlan: introduce skb_vlan_eth_hdr() net: fec: correct queue selection octeontx2-af: fix a use-after-free in rvu_nix_register_reporters octeontx2-pf: Fix promisc mcam entry action octeontx2-af: Update RSS algorithm index atm: Fix Use-After-Free in do_vcc_ioctl net/rose: Fix Use-After-Free in rose_ioctl iavf: Introduce new state machines for flow director iavf: Handle ntuple on/off based on new state machines for flow director qed: Fix a potential use-after-free in qed_cxt_tables_alloc net: Remove acked SYN flag from packet in the transmit queue correctly net: ena: Destroy correct number of xdp queues upon failure net: ena: Fix xdp drops handling due to multibuf packets net: ena: Fix XDP redirection error stmmac: dwmac-loongson: Make sure MDIO is initialized before use sign-file: Fix incorrect return values check vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() dpaa2-switch: fix size of the dma_unmap dpaa2-switch: do not ask for MDB, VLAN and FDB replay net: stmmac: Handle disabled MDIO busses from devicetree appletalk: Fix Use-After-Free in atalk_ioctl net: atlantic: fix double free in ring reinit logic cred: switch to using atomic_long_t fuse: dax: set fc->dax to NULL in fuse_dax_conn_free() ALSA: hda/hdmi: add force-connect quirk for NUC5CPYB ALSA: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants ALSA: hda/realtek: Apply mute LED quirk for HP15-db Revert "PCI: acpiphp: Reassign resources on bridge if necessary" PCI: loongson: Limit MRRS to 256 ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE drm/mediatek: Add spinlock for setting vblank event in atomic_begin x86/hyperv: Fix the detection of E820_TYPE_PRAM in a Gen2 VM usb: aqc111: check packet for fixup for true limit stmmac: dwmac-loongson: Add architecture dependency blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" blk-cgroup: bypass blkcg_deactivate_policy after destroying bcache: avoid oversize memory allocation by small stripe_size bcache: remove redundant assignment to variable cur_idx bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() bcache: avoid NULL checking to c->root in run_cache_set() nbd: fold nbd config initialization into nbd_alloc_config() nvme-auth: set explanation code for failure2 msgs nvme: catch errors from nvme_configure_metadata() selftests/bpf: fix bpf_loop_bench for new callback verification scheme LoongArch: Add dependency between vmlinuz.efi and vmlinux.efi LoongArch: Implement constant timer shutdown interface platform/x86: intel_telemetry: Fix kernel doc descriptions HID: glorious: fix Glorious Model I HID report HID: add ALWAYS_POLL quirk for Apple kb nbd: pass nbd_sock to nbd_read_reply() instead of index HID: hid-asus: reset the backlight brightness level on resume HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation net: usb: qmi_wwan: claim interface 4 for ZTE MF290 arm64: add dependency between vmlinuz.efi and Image HID: hid-asus: add const to read-only outgoing usb buffer perf: Fix perf_event_validate_size() lockdep splat btrfs: do not allow non subvolume root targets for snapshot soundwire: stream: fix NULL pointer dereference for multi_link ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify team: Fix use-after-free when an option instance allocation fails drm/amdgpu/sdma5.2: add begin/end_use ring callbacks dmaengine: stm32-dma: avoid bitfield overflow assertion mm/mglru: fix underprotected page cache mm/shmem: fix race in shmem_undo_range w/THP btrfs: free qgroup reserve when ORDERED_IOERR is set btrfs: don't clear qgroup reserved bit in release_folio drm/amdgpu: fix tear down order in amdgpu_vm_pt_free drm/amd/display: Disable PSR-SU on Parade 0803 TCON again drm/i915: Fix remapped stride with CCS on ADL+ smb: client: fix OOB in receive_encrypted_standard() smb: client: fix NULL deref in asn1_ber_decoder() smb: client: fix OOB in smb2_query_reparse_point() ring-buffer: Fix memory leak of free page tracing: Update snapshot buffer on resize if it is allocated ring-buffer: Do not update before stamp when switching sub-buffers ring-buffer: Have saved event hold the entire event ring-buffer: Fix writing to the buffer with max_data_size ring-buffer: Fix a race in rb_time_cmpxchg() for 32 bit archs ring-buffer: Do not try to put back write_stamp ring-buffer: Have rb_time_cmpxchg() set the msb counter too net: tls, update curr on splice as well r8152: avoid to change cfg for all devices r8152: remove rtl_vendor_mode function r8152: fix the autosuspend doesn't work Linux 6.1.69 Change-Id: I695d1d50ca8c00ff505505918bdc59ce9d29d479 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-01-11 22:37:52 +00:00
Kalesh Singh	82bf9e7625	FROMGIT: BACKPORT: mm/cma: fix placement of trace_cma_alloc_start/finish ... The current placement of trace_cma_alloc_start/finish misses the fail cases: !cma || !cma->count || !cma->bitmap. trace_cma_alloc_finish is also not emitted for the failure case where bitmap_count > bitmap_maxno. Fix these missed cases by moving the start event before the failure checks and moving the finish event to the out label. Link: https://lkml.kernel.org/r/20240110012234.3793639-1-kaleshsingh@google.com Fixes: 7bc1aec5e2 ("mm: cma: add trace events for CMA alloc perf testing") Change-Id: I61153fe078da4f9f3338147f1fbb7697a5554078 Signed-off-by: Kalesh Singh <kaleshsingh@google.com> Cc: Minchan Kim <minchan@kernel.org> Cc: Liam Mark <lmark@codeaurora.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 3b08ab9a811caebe1327f25f51557f95200d94bf https://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm.git mm-unstable) Bug: 315897033 [ Remove ret arg from trace_cma_alloc_finish - Kalesh Singh ] Signed-off-by: Kalesh Singh <kaleshsingh@google.com>	2024-01-11 17:56:51 +00:00
Greg Kroah-Hartman	bb47960a9d	Merge branch 'android14-6.1' into branch 'android14-6.1-lts' ... This merges all of the latest changes in 'android14-6.1' into 'android14-6.1-lts' to get it to pass TH again due to new symbols being added. Included in here are the following commits: * a41a4ee370 ANDROID: Update the ABI symbol list * 0801d8a89d ANDROID: mm: export dump_tasks symbol. * 7c91752f5d FROMLIST: scsi: ufs: Remove the ufshcd_hba_exit() call from ufshcd_async_scan() * 28154afe74 FROMLIST: scsi: ufs: Simplify power management during async scan * febcf1429f ANDROID: gki_defconfig: Set CONFIG_IDLE_INJECT and CONFIG_CPU_IDLE_THERMAL into y * bc4d82ee40 ANDROID: KMI workaround for CONFIG_NETFILTER_FAMILY_BRIDGE * 227b55a7a3 ANDROID: dma-buf: don't re-purpose kobject as work_struct * c1b1201d39 BACKPORT: FROMLIST: dma-buf: Move sysfs work out of DMA-BUF export path * 928b3b5dde UPSTREAM: netfilter: nf_tables: skip set commit for deleted/destroyed sets * 031f804149 ANDROID: KVM: arm64: Avoid BUG-ing from the host abort path * c5dc4b4b3d ANDROID: Update the ABI symbol list * 5070b3b594 UPSTREAM: ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet * 02aa72665c UPSTREAM: nvmet-tcp: Fix a possible UAF in queue intialization setup * d6554d1262 FROMGIT: usb: dwc3: gadget: Handle EP0 request dequeuing properly * 29544d4157 ANDROID: ABI: Update symbol list for imx * 02f444ba07 UPSTREAM: io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid * ec46fe0ac7 UPSTREAM: bpf: Fix prog_array_map_poke_run map poke update * 98b0e4cf09 BACKPORT: xhci: track port suspend state correctly in unsuccessful resume cases * ac90f08292 ANDROID: Update the ABI symbol list * ef67750d99 ANDROID: sched: Export symbols for vendor modules * 934a40576e UPSTREAM: usb: dwc3: core: add support for disabling High-speed park mode * 8a597e7a2d ANDROID: KVM: arm64: Don't prepopulate MMIO regions for host stage-2 * ed9b660cd1 BACKPORT: FROMGIT fork: use __mt_dup() to duplicate maple tree in dup_mmap() * 3743b40f65 FROMGIT: maple_tree: preserve the tree attributes when destroying maple tree * 1bec2dd52e FROMGIT: maple_tree: update check_forking() and bench_forking() * e57d333531 FROMGIT: maple_tree: skip other tests when BENCH is enabled * c79ca61edc FROMGIT: maple_tree: update the documentation of maple tree * 7befa7bbc9 FROMGIT: maple_tree: add test for mtree_dup() * f73f881af4 FROMGIT: radix tree test suite: align kmem_cache_alloc_bulk() with kernel behavior. * eb5048ea90 FROMGIT: maple_tree: introduce interfaces __mt_dup() and mtree_dup() * dc9323545b FROMGIT: maple_tree: introduce {mtree,mas}_lock_nested() * 4ddcdc519b FROMGIT: maple_tree: add mt_free_one() and mt_attr() helpers * c52d48818b UPSTREAM: maple_tree: introduce __mas_set_range() * 066d57de87 ANDROID: GKI: Enable symbols for v4l2 in async and fwnode * e74417834e ANDROID: Update the ABI symbol list * 15a93de464 ANDROID: KVM: arm64: Fix hyp event alignment * 717d1f8f91 ANDROID: KVM: arm64: Fix host_smc print typo * 8fc25d7862 FROMGIT: f2fs: do not return EFSCORRUPTED, but try to run online repair * 99288e911a ANDROID: KVM: arm64: Document module_change_host_prot_range * 4d99e41ce1 FROMGIT: PM / devfreq: Synchronize devfreq_monitor_[start/stop] * 6c8f710857 FROMGIT: arch/mm/fault: fix major fault accounting when retrying under per-VMA lock * 4a518d8633 UPSTREAM: mm: handle write faults to RO pages under the VMA lock * c1da94fa44 UPSTREAM: mm: handle read faults under the VMA lock * 6541fffd92 UPSTREAM: mm: handle COW faults under the VMA lock * c7fa581a79 UPSTREAM: mm: handle shared faults under the VMA lock * 95af8a80bb BACKPORT: mm: call wp_page_copy() under the VMA lock * b43b26b4cd UPSTREAM: mm: make lock_folio_maybe_drop_mmap() VMA lock aware * 9c4bc457ab UPSTREAM: mm/memory.c: fix mismerge * 7d50253c27 ANDROID: Export functions to be used with dma_map_ops in modules * 37e0a5b868 BACKPORT: FROMGIT: erofs: enable sub-page compressed block support * f466d52164 FROMGIT: erofs: refine z_erofs_transform_plain() for sub-page block support * a18efa4e4a FROMGIT: erofs: fix ztailpacking for subpage compressed blocks * 0c6a18c75b BACKPORT: FROMGIT: erofs: fix up compacted indexes for block size < 4096 * d7bb85f1cb FROMGIT: erofs: record `pclustersize` in bytes instead of pages * 9d259220ac FROMGIT: erofs: support I/O submission for sub-page compressed blocks * 8a49ea9441 FROMGIT: erofs: fix lz4 inplace decompression * bdc5d268ba FROMGIT: erofs: fix memory leak on short-lived bounced pages * 0d329bbe5c BACKPORT: erofs: tidy up z_erofs_do_read_page() * dc94c3cc6b UPSTREAM: erofs: move preparation logic into z_erofs_pcluster_begin() * 7751567a71 BACKPORT: erofs: avoid obsolete {collector,collection} terms * d0dbf74792 BACKPORT: erofs: simplify z_erofs_read_fragment() * 4067dd9969 UPSTREAM: erofs: get rid of the remaining kmap_atomic() * 365ca16da2 UPSTREAM: erofs: simplify z_erofs_transform_plain() * 187d034575 BACKPORT: erofs: adapt managed inode operations into folios * 3d93182661 UPSTREAM: erofs: avoid on-stack pagepool directly passed by arguments * 5c1827383a UPSTREAM: erofs: allocate extra bvec pages directly instead of retrying * bed20ed1d3 UPSTREAM: erofs: clean up z_erofs_pcluster_readmore() * 5e861fa97e UPSTREAM: erofs: remove the member readahead from struct z_erofs_decompress_frontend * 66595bb17c UPSTREAM: erofs: fold in z_erofs_decompress() * 88a1939504 UPSTREAM: erofs: enable large folios for iomap mode * 2c085909e7 ANDROID: Update the ABI symbol list * d16a15fde5 UPSTREAM: USB: gadget: core: adjust uevent timing on gadget unbind * d3006fb944 ANDROID: ABI: Update oplus symbol list * bc97d5019a ANDROID: vendor_hooks: Add hooks for rt_mutex steal * 401a2769d9 UPSTREAM: dm verity: don't perform FEC for failed readahead IO * 30bca9e278 UPSTREAM: netfilter: nft_set_pipapo: skip inactive elements during set walk * 44702d8fa1 FROMLIST: mm: migrate high-order folios in swap cache correctly * 613d8368e3 ANDROID: fuse-bpf: Follow mounts in lookups Change-Id: I49d28ad030d7840490441ce6a7936b5e1047913e Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-01-11 08:06:52 +00:00
liangjlee	0801d8a89d	ANDROID: mm: export dump_tasks symbol. ... Export dump_tasks to dump per-task memory status when ramdump. Bug: 316372318 Change-Id: Ie0dd1a4c7ada280dc0c7696781b4b9a5e2a100ab Signed-off-by: liangjlee <liangjlee@google.com>	2024-01-10 23:50:22 +00:00
Jiajun Xie	dafdeb7b91	mm: fix unmap_mapping_range high bits shift bug ... commit 9eab0421fa94a3dde0d1f7e36ab3294fc306c99d upstream. The bug happens when highest bit of holebegin is 1, suppose holebegin is 0x8000000111111000, after shift, hba would be 0xfff8000000111111, then vma_interval_tree_foreach would look it up fail or leads to the wrong result. error call seq e.g.: - mmap(..., offset=0x8000000111111000) |- syscall(mmap, ... unsigned long, off): |- ksys_mmap_pgoff( ... , off >> PAGE_SHIFT); here pgoff is correctly shifted to 0x8000000111111, but pass 0x8000000111111000 as holebegin to unmap would then cause terrible result, as shown below: - unmap_mapping_range(..., loff_t const holebegin) |- pgoff_t hba = holebegin >> PAGE_SHIFT; /* hba = 0xfff8000000111111 unexpectedly */ The issue happens in Heterogeneous computing, where the device(e.g. gpu) and host share the same virtual address space. A simple workflow pattern which hit the issue is: /* host */ 1. userspace first mmap a file backed VA range with specified offset. e.g. (offset=0x800..., mmap return: va_a) 2. write some data to the corresponding sys page e.g. (va_a = 0xAABB) /* device */ 3. gpu workload touches VA, triggers gpu fault and notify the host. /* host */ 4. reviced gpu fault notification, then it will: 4.1 unmap host pages and also takes care of cpu tlb (use unmap_mapping_range with offset=0x800...) 4.2 migrate sys page to device 4.3 setup device page table and resolve device fault. /* device */ 5. gpu workload continued, it accessed va_a and got 0xAABB. 6. gpu workload continued, it wrote 0xBBCC to va_a. /* host */ 7. userspace access va_a, as expected, it will: 7.1 trigger cpu vm fault. 7.2 driver handling fault to migrate gpu local page to host. 8. userspace then could correctly get 0xBBCC from va_a 9. done But in step 4.1, if we hit the bug this patch mentioned, then userspace would never trigger cpu fault, and still get the old value: 0xAABB. Making holebegin unsigned first fixes the bug. Link: https://lkml.kernel.org/r/20231220052839.26970-1-jiajun.xie.sh@gmail.com Signed-off-by: Jiajun Xie <jiajun.xie.sh@gmail.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2024-01-10 17:10:35 +01:00
Sumanth Korikkar	d49bf9c1ce	mm/memory_hotplug: fix error handling in add_memory_resource() ... [ Upstream commit f42ce5f087eb69e47294ababd2e7e6f88a82d308 ] In add_memory_resource(), creation of memory block devices occurs after successful call to arch_add_memory(). However, creation of memory block devices could fail. In that case, arch_remove_memory() is called to perform necessary cleanup. Currently with or without altmap support, arch_remove_memory() is always passed with altmap set to NULL during error handling. This leads to freeing of struct pages using free_pages(), eventhough the allocation might have been performed with altmap support via altmap_alloc_block_buf(). Fix the error handling by passing altmap in arch_remove_memory(). This ensures the following: * When altmap is disabled, deallocation of the struct pages array occurs via free_pages(). * When altmap is enabled, deallocation occurs via vmem_altmap_free(). Link: https://lkml.kernel.org/r/20231120145354.308999-3-sumanthk@linux.ibm.com Fixes: a08a2ae346 ("mm,memory_hotplug: allocate memmap from the added memory range") Signed-off-by: Sumanth Korikkar <sumanthk@linux.ibm.com> Reviewed-by: Gerald Schaefer <gerald.schaefer@linux.ibm.com> Acked-by: David Hildenbrand <david@redhat.com> Cc: Alexander Gordeev <agordeev@linux.ibm.com> Cc: Aneesh Kumar K.V <aneesh.kumar@linux.ibm.com> Cc: Anshuman Khandual <anshuman.khandual@arm.com> Cc: Heiko Carstens <hca@linux.ibm.com> Cc: kernel test robot <lkp@intel.com> Cc: Michal Hocko <mhocko@suse.com> Cc: Oscar Salvador <osalvador@suse.de> Cc: Vasily Gorbik <gor@linux.ibm.com> Cc: <stable@vger.kernel.org> [5.15+] Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-10 17:10:33 +01:00
Sumanth Korikkar	4666f003af	mm/memory_hotplug: add missing mem_hotplug_lock ... [ Upstream commit 001002e73712cdf6b8d9a103648cda3040ad7647 ] From Documentation/core-api/memory-hotplug.rst: When adding/removing/onlining/offlining memory or adding/removing heterogeneous/device memory, we should always hold the mem_hotplug_lock in write mode to serialise memory hotplug (e.g. access to global/zone variables). mhp_(de)init_memmap_on_memory() functions can change zone stats and struct page content, but they are currently called w/o the mem_hotplug_lock. When memory block is being offlined and when kmemleak goes through each populated zone, the following theoretical race conditions could occur: CPU 0: | CPU 1: memory_offline() | -> offline_pages() | -> mem_hotplug_begin() | ... | -> mem_hotplug_done() | | kmemleak_scan() | -> get_online_mems() | ... -> mhp_deinit_memmap_on_memory() | [not protected by mem_hotplug_begin/done()]| Marks memory section as offline, | Retrieves zone_start_pfn poisons vmemmap struct pages and updates | and struct page members. the zone related data | | ... | -> put_online_mems() Fix this by ensuring mem_hotplug_lock is taken before performing mhp_init_memmap_on_memory(). Also ensure that mhp_deinit_memmap_on_memory() holds the lock. online/offline_pages() are currently only called from memory_block_online/offline(), so it is safe to move the locking there. Link: https://lkml.kernel.org/r/20231120145354.308999-2-sumanthk@linux.ibm.com Fixes: a08a2ae346 ("mm,memory_hotplug: allocate memmap from the added memory range") Signed-off-by: Sumanth Korikkar <sumanthk@linux.ibm.com> Reviewed-by: Gerald Schaefer <gerald.schaefer@linux.ibm.com> Acked-by: David Hildenbrand <david@redhat.com> Cc: Alexander Gordeev <agordeev@linux.ibm.com> Cc: Aneesh Kumar K.V <aneesh.kumar@linux.ibm.com> Cc: Anshuman Khandual <anshuman.khandual@arm.com> Cc: Heiko Carstens <hca@linux.ibm.com> Cc: Michal Hocko <mhocko@suse.com> Cc: Oscar Salvador <osalvador@suse.de> Cc: Vasily Gorbik <gor@linux.ibm.com> Cc: kernel test robot <lkp@intel.com> Cc: <stable@vger.kernel.org> [5.15+] Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-10 17:10:33 +01:00
Christoph Hellwig	a8e4300ae5	filemap: add a per-mapping stable writes flag ... [ Upstream commit 762321dab9a72760bf9aec48362f932717c9424d ] folio_wait_stable waits for writeback to finish before modifying the contents of a folio again, e.g. to support check summing of the data in the block integrity code. Currently this behavior is controlled by the SB_I_STABLE_WRITES flag on the super_block, which means it is uniform for the entire file system. This is wrong for the block device pseudofs which is shared by all block devices, or file systems that can use multiple devices like XFS witht the RT subvolume or btrfs (although btrfs currently reimplements folio_wait_stable anyway). Add a per-address_space AS_STABLE_WRITES flag to control the behavior in a more fine grained way. The existing SB_I_STABLE_WRITES is kept to initialize AS_STABLE_WRITES to the existing default which covers most cases. Signed-off-by: Christoph Hellwig <hch@lst.de> Link: https://lore.kernel.org/r/20231025141020.192413-2-hch@lst.de Tested-by: Ilya Dryomov <idryomov@gmail.com> Reviewed-by: Matthew Wilcox (Oracle) <willy@infradead.org> Reviewed-by: Darrick J. Wong <djwong@kernel.org> Signed-off-by: Christian Brauner <brauner@kernel.org> Stable-dep-of: 1898efcdbed3 ("block: update the stable_writes flag in bdev_add") Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-10 17:10:32 +01:00
David Howells	d0eafc7631	mm, netfs, fscache: stop read optimisation when folio removed from pagecache ... [ Upstream commit b4fa966f03b7401ceacd4ffd7227197afb2b8376 ] Fscache has an optimisation by which reads from the cache are skipped until we know that (a) there's data there to be read and (b) that data isn't entirely covered by pages resident in the netfs pagecache. This is done with two flags manipulated by fscache_note_page_release(): if (... test_bit(FSCACHE_COOKIE_HAVE_DATA, &cookie->flags) && test_bit(FSCACHE_COOKIE_NO_DATA_TO_READ, &cookie->flags)) clear_bit(FSCACHE_COOKIE_NO_DATA_TO_READ, &cookie->flags); where the NO_DATA_TO_READ flag causes cachefiles_prepare_read() to indicate that netfslib should download from the server or clear the page instead. The fscache_note_page_release() function is intended to be called from ->releasepage() - but that only gets called if PG_private or PG_private_2 is set - and currently the former is at the discretion of the network filesystem and the latter is only set whilst a page is being written to the cache, so sometimes we miss clearing the optimisation. Fix this by following Willy's suggestion[1] and adding an address_space flag, AS_RELEASE_ALWAYS, that causes filemap_release_folio() to always call ->release_folio() if it's set, even if PG_private or PG_private_2 aren't set. Note that this would require folio_test_private() and page_has_private() to become more complicated. To avoid that, in the places[*] where these are used to conditionalise calls to filemap_release_folio() and try_to_release_page(), the tests are removed the those functions just jumped to unconditionally and the test is performed there. [*] There are some exceptions in vmscan.c where the check guards more than just a call to the releaser. I've added a function, folio_needs_release() to wrap all the checks for that. AS_RELEASE_ALWAYS should be set if a non-NULL cookie is obtained from fscache and cleared in ->evict_inode() before truncate_inode_pages_final() is called. Additionally, the FSCACHE_COOKIE_NO_DATA_TO_READ flag needs to be cleared and the optimisation cancelled if a cachefiles object already contains data when we open it. [dwysocha@redhat.com: call folio_mapping() inside folio_needs_release()] Link: 902c990e31 Link: https://lkml.kernel.org/r/20230628104852.3391651-3-dhowells@redhat.com Fixes: 1f67e6d0b1 ("fscache: Provide a function to note the release of a page") Fixes: 047487c947 ("cachefiles: Implement the I/O routines") Signed-off-by: David Howells <dhowells@redhat.com> Signed-off-by: Dave Wysochanski <dwysocha@redhat.com> Reported-by: Rohith Surabattula <rohiths.msft@gmail.com> Suggested-by: Matthew Wilcox <willy@infradead.org> Tested-by: SeongJae Park <sj@kernel.org> Cc: Daire Byrne <daire.byrne@gmail.com> Cc: Matthew Wilcox <willy@infradead.org> Cc: Linus Torvalds <torvalds@linux-foundation.org> Cc: Steve French <sfrench@samba.org> Cc: Shyam Prasad N <nspmangalore@gmail.com> Cc: Rohith Surabattula <rohiths.msft@gmail.com> Cc: Dave Wysochanski <dwysocha@redhat.com> Cc: Dominique Martinet <asmadeus@codewreck.org> Cc: Ilya Dryomov <idryomov@gmail.com> Cc: Andreas Dilger <adilger.kernel@dilger.ca> Cc: Jingbo Xu <jefflexu@linux.alibaba.com> Cc: "Theodore Ts'o" <tytso@mit.edu> Cc: Xiubo Li <xiubli@redhat.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Stable-dep-of: 1898efcdbed3 ("block: update the stable_writes flag in bdev_add") Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-10 17:10:31 +01:00
David Howells	bceff380f3	mm: merge folio_has_private()/filemap_release_folio() call pairs ... [ Upstream commit 0201ebf274a306a6ebb95e5dc2d6a0a27c737cac ] Patch series "mm, netfs, fscache: Stop read optimisation when folio removed from pagecache", v7. This fixes an optimisation in fscache whereby we don't read from the cache for a particular file until we know that there's data there that we don't have in the pagecache. The problem is that I'm no longer using PG_fscache (aka PG_private_2) to indicate that the page is cached and so I don't get a notification when a cached page is dropped from the pagecache. The first patch merges some folio_has_private() and filemap_release_folio() pairs and introduces a helper, folio_needs_release(), to indicate if a release is required. The second patch is the actual fix. Following Willy's suggestions[1], it adds an AS_RELEASE_ALWAYS flag to an address_space that will make filemap_release_folio() always call ->release_folio(), even if PG_private/PG_private_2 aren't set. folio_needs_release() is altered to add a check for this. This patch (of 2): Make filemap_release_folio() check folio_has_private(). Then, in most cases, where a call to folio_has_private() is immediately followed by a call to filemap_release_folio(), we can get rid of the test in the pair. There are a couple of sites in mm/vscan.c that this can't so easily be done. In shrink_folio_list(), there are actually three cases (something different is done for incompletely invalidated buffers), but filemap_release_folio() elides two of them. In shrink_active_list(), we don't have have the folio lock yet, so the check allows us to avoid locking the page unnecessarily. A wrapper function to check if a folio needs release is provided for those places that still need to do it in the mm/ directory. This will acquire additional parts to the condition in a future patch. After this, the only remaining caller of folio_has_private() outside of mm/ is a check in fuse. Link: https://lkml.kernel.org/r/20230628104852.3391651-1-dhowells@redhat.com Link: https://lkml.kernel.org/r/20230628104852.3391651-2-dhowells@redhat.com Reported-by: Rohith Surabattula <rohiths.msft@gmail.com> Suggested-by: Matthew Wilcox <willy@infradead.org> Signed-off-by: David Howells <dhowells@redhat.com> Cc: Matthew Wilcox <willy@infradead.org> Cc: Linus Torvalds <torvalds@linux-foundation.org> Cc: Steve French <sfrench@samba.org> Cc: Shyam Prasad N <nspmangalore@gmail.com> Cc: Rohith Surabattula <rohiths.msft@gmail.com> Cc: Dave Wysochanski <dwysocha@redhat.com> Cc: Dominique Martinet <asmadeus@codewreck.org> Cc: Ilya Dryomov <idryomov@gmail.com> Cc: "Theodore Ts'o" <tytso@mit.edu> Cc: Andreas Dilger <adilger.kernel@dilger.ca> Cc: Xiubo Li <xiubli@redhat.com> Cc: Jingbo Xu <jefflexu@linux.alibaba.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Stable-dep-of: 1898efcdbed3 ("block: update the stable_writes flag in bdev_add") Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-10 17:10:31 +01:00
Vishal Moola (Oracle)	8b6b3ecf0c	memory-failure: convert truncate_error_page() to use folio ... [ Upstream commit ac5efa782041670b63a05c36d92d02a80e50bb63 ] Replace try_to_release_page() with filemap_release_folio(). This change is in preparation for the removal of the try_to_release_page() wrapper. Link: https://lkml.kernel.org/r/20221118073055.55694-4-vishal.moola@gmail.com Signed-off-by: Vishal Moola (Oracle) <vishal.moola@gmail.com> Acked-by: Naoya Horiguchi <naoya.horiguchi@nec.com> Cc: Matthew Wilcox <willy@infradead.org> Cc: Theodore Ts'o <tytso@mit.edu> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Stable-dep-of: 1898efcdbed3 ("block: update the stable_writes flag in bdev_add") Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-10 17:10:31 +01:00
Vishal Moola (Oracle)	a6f440f3b9	khugepage: replace try_to_release_page() with filemap_release_folio() ... [ Upstream commit 64ab3195ea077eaeedc8b382939c3dc5ca56f369 ] Replace some calls with their folio equivalents. This change removes 4 calls to compound_head() and is in preparation for the removal of the try_to_release_page() wrapper. Link: https://lkml.kernel.org/r/20221118073055.55694-3-vishal.moola@gmail.com Signed-off-by: Vishal Moola (Oracle) <vishal.moola@gmail.com> Cc: Matthew Wilcox <willy@infradead.org> Cc: Naoya Horiguchi <naoya.horiguchi@nec.com> Cc: Theodore Ts'o <tytso@mit.edu> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Stable-dep-of: 1898efcdbed3 ("block: update the stable_writes flag in bdev_add") Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-10 17:10:31 +01:00
Greg Kroah-Hartman	0177cfb2a2	Merge tag 'android14-6.1.68_r00' into branch 'android14-6.1' ... This merges the changes up to 6.1.68 LTS into the android14-6.1 branch. Included in here are the following commits: * 8968561242 ANDROID: fix crc error in put_cmsg caused in 6.1.68 * c077094653 Revert "hrtimers: Push pending hrtimers away from outgoing CPU earlier" * e0690152b8 Revert "drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group" * c9b484c69d Merge 6.1.68 into android14-6.1-lts |\ | * ba6f5fb465 Linux 6.1.68 | * f38b4e99e2 drm/i915: Skip some timing checks on BXT/GLK DSI transcoders | * d9ef7b05cc drm/i915/sdvo: stop caching has_hdmi_monitor in struct intel_sdvo | * cf70d62ace drm/i915/lvds: Use REG_BIT() & co. | * e6d55cf493 drm/i915/display: Drop check for doublescan mode in modevalid | * 9c322aaf28 riscv: Kconfig: Add select ARM_AMBA to SOC_STARFIVE | * 189c2a8293 netfilter: nft_set_pipapo: skip inactive elements during set walk | * b4e440cf60 MIPS: Loongson64: Enable DMA noncoherent support | * d52a5178cb MIPS: Loongson64: Handle more memory types passed from firmware | * 8d18a01585 MIPS: Loongson64: Reserve vgabios memory on boot | * 2b9b2d28a9 KVM: SVM: Update EFER software model on CR0 trap for SEV-ES | * 6d6314c3db KVM: s390/mm: Properly reset no-dat | * be297475ca MIPS: kernel: Clear FPU states when setting up kernel threads | * 358bd5f436 cifs: Fix flushing, invalidation and file size with FICLONE | * 18b02e4343 cifs: Fix flushing, invalidation and file size with copy_file_range() | * 69540c108d USB: gadget: core: adjust uevent timing on gadget unbind | * 2467f4f8cb x86/CPU/AMD: Check vendor in the AMD microcode callback | * 0553d52908 devcoredump: Send uevent once devcd is ready | * 74799b43d8 serial: 8250_omap: Add earlycon support for the AM654 UART controller | * d59dafa9eb serial: 8250: 8250_omap: Do not start RX DMA on THRI interrupt | * 638a6cbace serial: 8250: 8250_omap: Clear UART_HAS_RHR_IT_DIS bit | * f434703fb8 serial: sc16is7xx: address RX timeout interrupt errata | * a8027753ab ARM: PL011: Fix DMA support | * c909ce57d0 usb: typec: class: fix typec_altmode_put_partner to put plugs | * b12ccef705 smb: client: fix potential NULL deref in parse_dfs_referrals() | * f48430635b Revert "xhci: Loosen RPM as default policy to cover for AMD xHC 1.1" | * 9ce109b748 cifs: Fix non-availability of dedup breaking generic/304 | * 8e25331ea5 parport: Add support for Brainboxes IX/UC/PX parallel cards | * bee9affd37 serial: 8250_dw: Add ACPI ID for Granite Rapids-D UART | * 16da1f84f5 usb: gadget: f_hid: fix report descriptor allocation | * c8bf22e0d0 drm/amdgpu: Update EEPROM I2C address for smu v13_0_0 | * 8750977871 drm/amdgpu: Add I2C EEPROM support on smu v13_0_6 | * 4ccb34d431 drm/amdgpu: simplify amdgpu_ras_eeprom.c | * af6b1f1156 drm/amdgpu: Return from switch early for EEPROM I2C address | * a3049c9a30 drm/amdgpu: Remove second moot switch to set EEPROM I2C address | * 30289057ef drm/amdgpu: Add support for RAS table at 0x40000 | * c67c553b4d drm/amdgpu: Decouple RAS EEPROM addresses from chips | * ee9efcdc76 drm/amdgpu: Remove redundant I2C EEPROM address | * a945568638 drm/amdgpu: Add EEPROM I2C address support for ip discovery | * f549f837b9 drm/amdgpu: Update ras eeprom support for smu v13_0_0 and v13_0_10 | * 458affed06 drm/amdgpu: correct the amdgpu runtime dereference usage count | * 41c5dd545e drm/amd/amdgpu: Fix warnings in amdgpu/amdgpu_display.c | * 613eaee445 drm/amdgpu: fix memory overflow in the IB test | * 1705927a10 gpiolib: sysfs: Fix error handling on failed export | * 4b716fcacd x86/sev: Fix kernel crash due to late update to read-only ghcb_version | * 06dec254c5 perf: Fix perf_event_validate_size() | * b0c195a825 arm64: dts: mt8183: kukui: Fix underscores in node names | * 8a3d746c7e arm64: dts: mediatek: add missing space before { | * 5656634ce0 parisc: Fix asm operand number out of range build error in bug table | * f9e9e156db parisc: Reduce size of the bug_table on 64-bit kernel by half | * 8479f5ca8b tracing: Stop current tracer when resizing buffer | * df4aa7e84d tracing: Set actual size after ring buffer resize | * 07ad456e1c ring-buffer: Force absolute timestamp on discard of event | * 40421e0cf3 LoongArch: BPF: Don't sign extend function return value | * ebb09d58df LoongArch: BPF: Don't sign extend memory load operand | * 066dcd87b9 misc: mei: client.c: fix problem of return '-EOVERFLOW' in mei_cl_write | * d78789ba21 misc: mei: client.c: return negative error code in mei_cl_write | * 672976c28e hwtracing: hisi_ptt: Add dummy callback pmu::read() | * 0b80e6af0d coresight: etm4x: Remove bogous __exit annotation for some functions | * 766b29f614 coresight: etm4x: Make etm4_remove_dev() return void | * 920f84a6e8 binder: fix memory leaks of spam and pending work | * 18847b6bba arm64: dts: mediatek: mt8183-evb: Fix unit_address_vs_reg warning on ntc | * c428285eab arm64: dts: mediatek: mt8183: Move thermal-zones to the root node | * bdd7508661 arm64: dts: mediatek: mt8183: Fix unit address for scp reserved memory | * 66398d1856 arm64: dts: mediatek: mt8195: Fix PM suspend/resume with venc clocks | * e1d4f02a68 arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names | * ff566a8d76 arm64: dts: mediatek: cherry: Fix interrupt cells for MT6360 on I2C7 | * 6d50aa9656 arm64: dts: mediatek: mt8183-kukui-jacuzzi: fix dsi unnecessary cells properties | * c2adea3191 arm64: dts: mediatek: mt7622: fix memory node warning check | * 515d971cd2 md/raid6: use valid sector values to determine if an I/O should wait on the reshape | * 4132cc3a3a powercap: DTPM: Fix missing cpufreq_cpu_put() calls | * 686cc4de09 mm: fix oops when filemap_map_pmd() without prealloc_pte | * 574a6db80f hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write | * f5e6958919 platform/surface: aggregator: fix recv_buf() return value | * bcd50a3bd6 regmap: fix bogus error on regcache_sync success | * 1c1c6d5c7e r8169: fix rtl8125b PAUSE frames blasting when suspended | * 6a71d77856 packet: Move reference count in packet_sock to atomic_long_t | * 15c251f814 tracing: Fix a possible race when disabling buffered events | * b00b500916 tracing: Fix incomplete locking when disabling buffered events | * 6e0d6c685b tracing: Disable snapshot buffer when stopping instance tracers | * 20fd56ca2e tracing: Always update snapshot buffer size | * f33d663db0 checkstack: fix printed address | * 4c00f01832 cgroup_freezer: cgroup_freezing: Check if not frozen | * 3907e9cc85 nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() | * c344e99dd8 nilfs2: fix missing error check for sb_set_blocksize call | * d2558e726e ring-buffer: Test last update in 32bit version of __rb_time_read() | * c4dcc915ea ALSA: hda/realtek: Add Framework laptop 16 to quirks | * 0675fe3b32 ALSA: hda/realtek: add new Framework laptop to quirks | * 8b23707c8a ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5 | * dc1141ae5c ALSA: pcm: fix out-of-bounds in snd_pcm_state_names | * bb43c57c3d ALSA: usb-audio: Add Pioneer DJM-450 mixer controls | * bfe5a5e2f9 io_uring: fix mutex_unlock with unreferenced ctx | * 8bba38f7a0 nvme-pci: Add sleep quirk for Kingston drives | * f2f57f51b5 io_uring/af_unix: disable sending io_uring over sockets | * 515c25be77 ASoC: amd: yc: Fix non-functional mic on ASUS E1504FA | * 0fcfc90c86 kprobes: consistent rcu api usage for kretprobe holder | * a5325a055f rethook: Use __rcu pointer for rethook::handler | * 68bc7b2003 iommu: Avoid more races around device probe | * 3c796895b4 md: don't leave 'MD_RECOVERY_FROZEN' in error path of md_set_readonly() | * 5255ded034 md: introduce md_ro_state | * a38c1e766f riscv: fix misaligned access handling of C.SWSP and C.SDSP | * 8b41bdcc22 ARM: dts: imx28-xea: Pass the 'model' property | * 282b5acd58 ARM: dts: imx7: Declare timers compatible with fsl,imx6dl-gpt | * 12ac3b0ab8 ARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init | * 4d8cc87d18 scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() | * bc5b79df6d tracing: Fix a warning when allocating buffered events fails | * fc2d811d31 ARM: dts: imx6ul-pico: Describe the Ethernet PHY clock | * 22143a0e5a arm64: dts: imx8mp: imx8mq: Add parkmode-disable-ss-quirk on DWC3 | * 8dd0e20b41 arm64: dts: imx8mq: drop usb3-resume-missing-cas from usb | * 188de9839f drm/bridge: tc358768: select CONFIG_VIDEOMODE_HELPERS | * 1ff56298ab RDMA/irdma: Avoid free the non-cqp_request scratch | * 0a929e8375 RDMA/core: Fix umem iterator when PAGE_SIZE is greater then HCA pgsz | * ebcb4e19d3 ASoC: wm_adsp: fix memleak in wm_adsp_buffer_populate | * 2358e53208 hwmon: (nzxt-kraken2) Fix error handling path in kraken2_probe() | * 3baaba7908 ASoC: codecs: lpass-tx-macro: set active_decimator correct default value | * c11b7e26d2 hwmon: (acpi_power_meter) Fix 4.29 MW bug | * 19269741c3 RDMA/irdma: Fix UAF in irdma_sc_ccq_get_cqe_info() | * 439857e2fe RDMA/irdma: Refactor error handling in create CQP | * 59a022a869 RDMA/bnxt_re: Correct module description string | * 7ed498095c RDMA/rtrs-clt: Remove the warnings for req in_use check | * 03095a6440 RDMA/rtrs-clt: Fix the max_send_wr setting | * 233c32bcf0 RDMA/rtrs-srv: Destroy path files after making sure no IOs in-flight | * 7be574c34d RDMA/rtrs-srv: Free srv_mr iu only when always_invalidate is true | * 9dd976c435 RDMA/rtrs-srv: Check return values while processing info request | * 3910ccbf25 RDMA/rtrs-clt: Start hb after path_up | * 1e46485045 RDMA/rtrs-srv: Do not unconditionally enable irq | * 4a8774a633 ASoC: fsl_sai: Fix no frame sync clock issue on i.MX8MP | * 3166c76d1d arm64: dts: rockchip: Expand reg size of vdec node for RK3399 | * aa9ae3dffc arm64: dts: rockchip: Expand reg size of vdec node for RK3328 | * 945bfe4e0b RDMA/irdma: Add wait for suspend on SQD | * 0b0afd4e14 RDMA/irdma: Do not modify to SQD on error | * 9d005ea01e RDMA/hns: Fix unnecessary err return when using invalid congest control algorithm | * 1c9561b438 tee: optee: Fix supplicant based device enumeration | * 5fd29433b2 mm/damon/sysfs: eliminate potential uninitialized variable warning | * b5ca945612 drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group | * 07c8229c02 psample: Require 'CAP_NET_ADMIN' when joining "packets" group | * af39b80173 bpf: sockmap, updating the sg structure should also update curr | * 008b807fe4 tcp: do not accept ACK of bytes we never sent | * 7a63521ed0 netfilter: xt_owner: Fix for unsafe access of sk->sk_socket | * 3176160c22 netfilter: nf_tables: validate family when identifying table via handle | * 96f8654b70 netfilter: nf_tables: bail out on mismatching dynset and set expressions | * c9704c2619 netfilter: nf_tables: fix 'exist' matching on bigendian arches | * 0bfbfd9423 netfilter: nft_exthdr: add boolean DCCP option matching | * 9225a4566b dt-bindings: interrupt-controller: Allow #power-domain-cells | * 6b9e78d6c6 octeontx2-af: Update Tx link register range | * 9be8f66ea8 octeontx2-af: Add missing mcs flr handler call | * d54470adfc octeontx2-af: Fix mcs stats register address | * 90773de073 octeontx2-af: Fix mcs sa cam entries size | * 0c8baa37bf octeontx2-af: Adjust Tx credits when MCS external bypass is disabled | * d2689aea4f net: hns: fix fake link up on xge port | * 217cc7f6a6 net: hns: fix wrong head when modify the tx feature when sending packets | * 87559196c3 net: atlantic: Fix NULL dereference of skb pointer in | * 64c78c57e3 ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit() | * ce3c5acb59 ionic: Fix dim work handling in split interrupt mode | * a92719900f ionic: fix snprintf format length warning | * c91685ac1b tcp: fix mid stream window clamp. | * 9fc81912fc net: bnxt: fix a potential use-after-free in bnxt_init_tc | * 0d33871b66 iavf: validate tx_coalesce_usecs even if rx_coalesce_usecs is zero | * 75fd86e541 i40e: Fix unexpected MFS warning message | * ba6eb3a77a octeontx2-af: fix a use-after-free in rvu_npa_register_reporters | * 2c0cbb97b1 xsk: Skip polling event check for unbound socket | * ed7e211b67 net: stmmac: fix FPE events losing | * 1a41ffc4dc octeontx2-pf: consider both Rx and Tx packet stats for adaptive interrupt coalescing | * 8d034da825 arcnet: restoring support for multiple Sohard Arcnet cards | * 3c32379695 platform/mellanox: Check devm_hwmon_device_register_with_groups() return value | * 29d82b366a platform/mellanox: Add null pointer checks for devm_kasprintf() | * 646f1e9c19 mlxbf-bootctl: correctly identify secure boot with development keys | * ef91309a57 r8152: Add RTL8152_INACCESSIBLE to r8153_aldps_en() | * d11ef4d3dd r8152: Add RTL8152_INACCESSIBLE to r8153_pre_firmware_1() | * 284cd311bb r8152: Add RTL8152_INACCESSIBLE to r8156b_wait_loading_flash() | * 0823990da7 r8152: Add RTL8152_INACCESSIBLE checks to more loops | * 3759e73556 r8152: Rename RTL8152_UNPLUG to RTL8152_INACCESSIBLE | * ecb5068f55 hv_netvsc: rndis_filter needs to select NLS | * 80de965ca5 octeontx2-af: Check return value of nix_get_nixlf before using nixlf | * f565044d1d octeontx2-pf: Add missing mutex lock in otx2_get_pauseparam | * a3f5de10b5 ipv6: fix potential NULL deref in fib6_add() | * e2b202821d platform/x86: wmi: Skip blocks with zero instances | * b536601d05 of: dynamic: Fix of_reconfig_get_state_change() return value documentation | * 76b9ea6f54 platform/x86: asus-wmi: Move i8042 filter install to shared asus-wmi code | * 3453531284 dt: dt-extract-compatibles: Don't follow symlinks when walking tree | * 8a124b9e78 dt: dt-extract-compatibles: Handle cfile arguments in generator function | * cde700ceb0 x86/tdx: Allow 32-bit emulation by default | * e09d243a51 x86/entry: Do not allow external 0x80 interrupts | * d5f999317e x86/entry: Convert INT 0x80 emulation to IDTENTRY | * b8ec27ae22 x86/coco: Disable 32-bit emulation by default on TDX and SEV | * 0870f19b54 x86: Introduce ia32_enabled() | * 9046665bef drm/amdgpu: correct chunk_ptr to a pointer to chunk. | * 18209382db kconfig: fix memory leak from range properties | * bcc2abaa40 tg3: Increment tx_dropped in tg3_tso_bug() | * 9bbc655e18 tg3: Move the [rt]x_dropped counters to tg3_napi | * 62c6d82bac zstd: Fix array-index-out-of-bounds UBSAN warning | * 875ee3a09e netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test | * 6025052bbf i2c: designware: Fix corrupted memory seen in the ISR | * 75b5016ce3 hrtimers: Push pending hrtimers away from outgoing CPU earlier | * 8ea2b4ba9b vdpa/mlx5: preserve CVQ vringh index * | 2af1386be0 Merge "Merge 6.1.67 into android14-6.1-lts" into android14-6.1-lts |\ \ | * | 0292321d13 Merge 6.1.67 into android14-6.1-lts | |\| | | * e7cddbb41b Linux 6.1.67 | | * db46c77f3d Revert "wifi: cfg80211: fix CQM for non-range use" | * | c539451364 Revert "mmc: core: add helpers mmc_regulator_enable/disable_vqmmc" | * | 975d5f2ae9 Revert "mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled" * | | 44affaea1e Revert "mmc: core: add helpers mmc_regulator_enable/disable_vqmmc" * | | c49b4a744f Revert "mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled" * | | 59f96234bf Merge "Merge 6.1.66 into android14-6.1-lts" into android14-6.1-lts |\| | | * | 6b1e1d37f1 Merge 6.1.66 into android14-6.1-lts | |\| | | * 6c6a6c7e21 Linux 6.1.66 | | * ea574927fc iomap: update ki_pos a little later in iomap_dio_complete | | * adf0ecebf0 x86/apic/msi: Fix misconfigured non-maskable MSI quirk | | * b3b839fb63 x86/xen: fix percpu vcpu_info allocation | | * 00bc8b2cf4 xen: simplify evtchn_do_upcall() call maze | | * 9311a0ff38 xen: Allow platform PCI interrupt to be shared | | * 402b832346 r8169: fix deadlock on RTL8125 in jumbo mtu mode | | * 22ee0ddb2a r8169: disable ASPM in case of tx timeout | | * 10ce630100 drm/amd/display: Fix MPCC 1DLUT programming | | * 8332cb6c63 drm/amd/display: Fix the delta clamping for shaper LUT | | * 442a4d4d01 drm/amd/display: clean code-style issues in dcn30_set_mpc_shaper_3dlut | | * 6cd7362721 drm/amd/display: Expand kernel doc for DC | | * 8b01195be4 mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled | | * 38d3216032 mmc: core: add helpers mmc_regulator_enable/disable_vqmmc | | * 0e0a951668 drm/amd/pm: fix a memleak in aldebaran_tables_init | | * 59862b8692 iommu/vt-d: Make context clearing consistent with context mapping | | * ee2c224769 iommu/vt-d: Disable PCI ATS in legacy passthrough mode | | * 8f39d297a2 iommu/vt-d: Add device_block_translation() helper | | * 3787b3168b iommu/vt-d: Allocate pasid table in device probe path | | * 681aeeda41 iommu/vt-d: Omit devTLB invalidation requests when TES=0 | | * 8aaed5b81d cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily | | * d3788f6e9d cpufreq: imx6q: don't warn for disabling a non-existing frequency | | * 195514bda6 drm/amd/display: Guard against invalid RPTR/WPTR being set | | * 395a63ca1a drm/amd/display: Restore rptr/wptr for DMCUB as workaround | | * 4ec4508db9 spi: Fix null dereference on suspend | | * b57eebfb80 fbdev: stifb: Make the STI next font pointer a 32-bit signed offset | | * 5bc8d96fed PCI: qcom-ep: Add dedicated callback for writing to DBI2 registers | | * 10c3d86fea octeontx2-af: Initialize 'cntr_val' to fix uninitialized symbol error | | * 1c8f75ee92 PCI: Lengthen reset delay for VideoPropulsion Torrent QN16e card | | * 7545ddda9c KVM: x86: Fix lapic timer interrupt lost after loading a snapshot. | | * 21feaf558f net: ravb: Keep reverse order of operations in ravb_remove() | | * 8d04278ff4 net: ravb: Stop DMA in case of failures on ravb_open() | | * 52b751686c net: ravb: Start TX queues after HW initialization succeeded | | * e2db25d16c net: ravb: Make write access to CXR35 first before accessing other EMAC registers | | * f5c649ce79 net: ravb: Use pm_runtime_resume_and_get() | | * 149b2fe12a net: ravb: Check return value of reset_control_deassert() | | * 7ed2e4c2d0 ravb: Fix races between ravb_tx_timeout_work() and net related ops | | * 8b1d088be5 r8169: prevent potential deadlock in rtl8169_close | | * 9c4ac2d98a octeontx2-pf: Restore TC ingress police rules when interface is up | | * aef2d5b3e5 octeontx2-af: Install TC filter rules in hardware based on priority | | * 662b887084 octeontx2-pf: Fix adding mbox work queue entry when num_vfs > 64 | | * 5d5bcfb1ca net: stmmac: xgmac: Disable FPE MMC interrupts | | * 334e6378c2 octeontx2-af: Fix possible buffer overflow | | * c3e974e9c4 selftests/net: mptcp: fix uninitialized variable warnings | | * 12dd4c1bf3 selftests/net: unix: fix unused variable compiler warning | | * 4e999af7cf selftests/net: fix a char signedness issue | | * 249ceee95c selftests/net: ipsec: fix constant out of range | | * e01249a839 uapi: propagate __struct_group() attributes to the container union | | * fd91b48f10 dpaa2-eth: increase the needed headroom to account for alignment | | * 94445d9583 ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet | | * f89fef7710 usb: config: fix iteration issue in 'usb_get_bos_descriptor()' | | * 9aff7c51b4 USB: core: Change configuration warnings to notices | | * c89b34eef3 USB: xhci-plat: fix legacy PHY double init | | * 307a6525c8 wifi: cfg80211: fix CQM for non-range use | | * e8c1105c0c serial: sc16is7xx: add missing support for rs485 devicetree properties | | * 55061c3230 serial: sc16is7xx: Put IOControl register into regmap_volatile | | * a491c7be35 auxdisplay: hd44780: move cursor home after clear display command | | * 7f21167775 Input: xpad - add HyperX Clutch Gladiate Support | | * 7a105de275 btrfs: fix 64bit compat send ioctl arguments not initializing version member | | * 32912ee869 btrfs: make error messages more clear when getting a chunk map | | * 4fc9c61c02 btrfs: send: ensure send_fd is writable | | * 86742a963f btrfs: fix off-by-one when checking chunk map includes logical address | | * 9fe447c485 btrfs: ref-verify: fix memory leaks in btrfs_ref_tree_mod() | | * 3f26d9b257 btrfs: add dmesg output for first mount and last unmount of a filesystem | | * 0ad7d59e79 parisc: Mark altinstructions read-only and 32-bit aligned | | * cf2ae6494d parisc: Ensure 32-bit alignment on parisc unwind section | | * 2acfff5730 parisc: Mark jump_table naturally aligned | | * 3793cd2ded parisc: Drop the HP-UX ENOSYM and EREMOTERELEASE error codes | | * 79a1fdf4c2 parisc: Mark lock_aligned variables 16-byte aligned on SMP | | * 41d7852a0a parisc: Use natural CPU alignment for bug_table | | * c7c78a4aa6 parisc: Mark ex_table entries 32-bit aligned in uaccess.h | | * 645e4b693b parisc: Mark ex_table entries 32-bit aligned in assembly.h | | * c23b9eaca8 powerpc: Don't clobber f0/vs0 during fp|altivec register save | | * e6bc42fae6 KVM: PPC: Book3S HV: Fix KVM_RUN clobbering FP/VEC user registers | | * 59419ebcc0 iommu/vt-d: Add MTL to quirk list to skip TE disabling | | * 0b48970ce1 bcache: revert replacing IS_ERR_OR_NULL with IS_ERR | | * fc98ea2699 dma-buf: fix check in dma_resv_add_fence | | * 4da1556996 cpufreq/amd-pstate: Fix the return value of amd_pstate_fast_switch() | | * 9d4c721c18 powercap: DTPM: Fix unneeded conversions to micro-Watts | | * a62ca58bb3 nvme: check for valid nvme_identify_ns() before using it | | * 82b5e603ed dm verity: don't perform FEC for failed readahead IO | | * 6f5a9fc94b dm verity: initialize fec io before freeing it | | * 7cfc3884a8 drm/amd/display: fix ABM disablement | | * 859a3a9f1e drm/amd/display: Update min Z8 residency time to 2100 for DCN314 | | * 6ef7f13c72 drm/amd/display: Use DRAM speed from validation for dummy p-state | | * a67c187047 drm/amd/display: Remove min_dst_y_next_start check for Z8 | | * 33ed892f0c drm/amd/display: Include udelay when waiting for INBOX0 ACK | | * c5cf436c89 drm/amdgpu: Force order between a read and write to the same address | | * c608842963 drm/amd: Enable PCIe PME from D3 | | * cebccbe801 scsi: sd: Fix system start for ATA devices | | * 181fd67dc5 scsi: Change SCSI device boolean fields to single bit flags | | * 7d2faae81b dm-verity: align struct dm_verity_fec_io properly | | * da9f55393f ALSA: hda/realtek: Add supported ALC257 for ChromeOS | | * f4b1302134 ALSA: hda/realtek: Headset Mic VREF to 100% | | * 65654af4c8 ALSA: hda: Disable power-save on KONTRON SinglePC | | * ba911edc6c mmc: block: Be sure to wait while busy in CQE error recovery | | * eab9ec6446 mmc: block: Do not lose cache flush during CQE error recovery | | * e121f6d73d mmc: block: Retry commands in CQE error recovery | | * 3a9a9c256f mmc: cqhci: Fix task clearing in CQE error recovery | | * def67fd8ef mmc: cqhci: Warn of halt or task clear failure | | * 2ebc8b758c mmc: cqhci: Increase recovery halt timeout | | * d2fc10e262 mmc: sdhci-pci-gli: Disable LPM during initialization | | * 87ceaa8521 firewire: core: fix possible memory leak in create_units() | | * db0b69e46d pinctrl: avoid reload of p state in list iteration | | * 74820f7406 smb: client: report correct st_size for SMB and NFS symlinks | | * 60fed17ca5 cifs: Fix FALLOC_FL_INSERT_RANGE by setting i_size after EOF moved | | * 6406cce4b2 cifs: Fix FALLOC_FL_ZERO_RANGE by setting i_size if EOF moved | * | 157836a2ab Merge 6.1.65 into android14-6.1-lts | |\| * | | 1775bee186 Revert "HID: fix HID device resource race between HID core and debugging support" * | | ee16988743 Merge 6.1.65 into android14-6.1-lts |\ \ \ | | |/ | |/| | * | c6114c8459 Linux 6.1.65 | * | 66ecd1cd8b io_uring: fix off-by one bvec index | * | 812171018e USB: dwc3: qcom: fix wakeup after probe deferral | * | 72ef87bb8e USB: dwc3: qcom: fix software node leak on probe errors | * | fc7b2fe267 usb: dwc3: set the dma max_seg_size | * | 92b9eca53d usb: dwc3: Fix default mode initialization | * | 451c5a6172 USB: dwc2: write HCINT with INTMASK applied | * | d9be7a1297 usb: typec: tcpm: Skip hard reset when in error recovery | * | c15cb712da USB: serial: option: don't claim interface 4 for ZTE MF290 | * | 5a657b34fe USB: serial: option: fix FM101R-GL defines | * | 4fccb016ff USB: serial: option: add Fibocom L7xx modules | * | f70b0b6fd8 usb: cdnsp: Fix deadlock issue during using NCM gadget | * | f9ba5dd0d9 bcache: fixup lock c->root error | * | c736af32a8 bcache: fixup init dirty data errors | * | c37aca3dd5 bcache: prevent potential division by zero error | * | 366f3648f1 bcache: check return value from btree_node_alloc_replacement() | * | 4241b51f3e dm-delay: fix a race between delay_presuspend and delay_bio | * | c4d3957510 hv_netvsc: Mark VF as slave before exposing it to user-mode | * | 5dd83db613 hv_netvsc: Fix race of register_netdevice_notifier and VF register | * | e8ef65c174 hv_netvsc: fix race of netvsc and VF register_netdevice | * | 043c8e0306 USB: serial: option: add Luat Air72*U series products | * | dc96fde8fc s390/dasd: protect device queue against concurrent access | * | b964a0a391 io_uring/fs: consider link->flags when getting path for LINKAT | * | 12f4971589 bcache: fixup multi-threaded bch_sectors_dirty_init() wake-up race | * | fa9bacc1d5 md: fix bi_status reporting in md_end_clone_io | * | 415f644b1f bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in btree_gc_coalesce() | * | 354d162ba5 swiotlb-xen: provide the "max_mapping_size" method | * | 05591c0d17 ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA | * | 1ed904f424 arm64: dts: imx8mn-var-som: add 20ms delay to ethernet regulator enable | * | 5d9ddbf4b5 NFSD: Fix checksum mismatches in the duplicate reply cache | * | b597f3c85d NFSD: Fix "start of NFS reply" pointer passed to nfsd_cache_update() | * | d7eb37615b ext4: make sure allocate pending entry not fail | * | 8384d8c5cc ext4: fix slab-use-after-free in ext4_es_insert_extent() | * | 9164978bce ext4: using nofail preallocation in ext4_es_insert_extent() | * | 614b383d01 ext4: using nofail preallocation in ext4_es_insert_delayed_block() | * | 51cef2a5c6 ext4: using nofail preallocation in ext4_es_remove_extent() | * | f1c2369366 ext4: use pre-allocated es in __es_remove_extent() | * | ce581f8631 ext4: use pre-allocated es in __es_insert_extent() | * | 594a5f00e5 ext4: factor out __es_alloc_extent() and __es_free_extent() | * | 9381ff6512 ext4: add a new helper to check if es must be kept | * | 3a14f4fd7b media: qcom: camss: Fix genpd cleanup | * | df5bb7b408 media: qcom: camss: Fix V4L2 async notifier error path | * | fdfcdf9697 media: qcom: Initialise V4L2 async notifier later | * | 153a4396c3 media: camss: Convert to platform remove callback returning void | * | 4ae3c85e73 media: camss: Split power domain management | * | 8bdcaa7c03 MIPS: KVM: Fix a build warning about variable set but not used | * | e9c3d6b09c cifs: fix leak of iface for primary channel | * | b24d42b52b cifs: account for primary channel in the interface list | * | 548893404c cifs: distribute channels across interfaces based on speed | * | 5607a415d4 cifs: print last update time for interface list | * | f4dff37111 smb3: allow dumping session and tcon id to improve stats analysis and debugging | * | fbc666a9ac cifs: minor cleanup of some headers | * | c2d336140a lockdep: Fix block chain corruption | * | e9611e8404 USB: dwc3: qcom: fix ACPI platform device leak | * | eaa315288b USB: dwc3: qcom: fix resource leaks on probe deferral | * | 0e485f12eb nvmet: nul-terminate the NQNs passed in the connect command | * | 573fa2b708 i40e: Fix adding unsupported cloud filters | * | f7f3e69ced i40e: use ERR_PTR error print in i40e messages | * | 27f5dd22af arm64: mm: Fix "rodata=on" when CONFIG_RODATA_FULL_DEFAULT_ENABLED=y | * | 558b8ee45f mm,kfence: decouple kfence from page granularity mapping judgement | * | 48b3ee0134 afs: Fix file locking on R/O volumes to operate in local mode | * | f9cf17836e afs: Return ENOENT if no cell DNS record can be found | * | 8025fd0706 net: axienet: Fix check for partial TX checksum | * | 3481ff3811 amd-xgbe: propagate the correct speed and duplex status | * | 73d114dd57 amd-xgbe: handle the corner-case during tx completion | * | 4bcc07bb36 amd-xgbe: handle corner-case during sfp hotplug | * | 76b088b639 octeontx2-pf: Fix ntuple rule creation to direct packet to VF with higher Rx queue than its PF | * | 97703eb199 arm/xen: fix xen_vcpu_info allocation alignment | * | 94a0ae698b net/smc: avoid data corruption caused by decline | * | a573b334be net: usb: ax88179_178a: fix failed operations during ax88179_reset | * | e784313dd0 ipv4: Correct/silence an endian warning in __ip_do_redirect | * | 377c4c7e97 HID: fix HID device resource race between HID core and debugging support | * | 8e9a649965 drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full | * | 84a6e47545 drm/i915: do not clean GT table on error path | * | 84c9d30dbc ata: pata_isapnp: Add missing error check for devm_ioport_map() | * | cfbdb36727 octeontx2-pf: Fix memory leak during interface down | * | 4206f46d3f wireguard: use DEV_STATS_INC() | * | 7dfa514744 drm/panel: simple: Fix Innolux G101ICE-L01 timings | * | 7f5eae8585 drm/panel: simple: Fix Innolux G101ICE-L01 bus flags | * | 39f11604e5 drm/panel: auo,b101uan08.3: Fine tune the panel power sequence | * | 84b232a9c8 drm/panel: boe-tv101wum-nl6: Fine tune the panel power sequence | * | d2b3bc8c7f afs: Make error on cell lookup failure consistent with OpenAFS | * | 790ea5bc40 afs: Fix afs_server_list to be cleaned up with RCU * | | a01e106f08 Merge branch 'android14-6.1' into branch 'android14-6.1-lts' | |/ |/| * | fc9e81c1a1 ANDROID: Fix up merge issues in 6.1.64 in net/netfilter/nf_tables_api.c * | 31e1ff253d ANDROID: Fix up unneeded crc break in af_vsock.c * | 8a7ce2ee18 Revert "mmc: Add quirk MMC_QUIRK_BROKEN_CACHE_FLUSH for Micron eMMC Q2J54A" * | dcea2ba909 Revert "ASoC: soc-card: Add storage for PCI SSID" * | 88487f809a Revert "tracing: Have trace_event_file have ref counters" * | fd71493204 Revert "workqueue: Provide one lock class key per work_on_cpu() callsite" * | f1bc13cb9d Merge 6.1.64 into android14-6.1-lts |\| | * 6ac30d748b Linux 6.1.64 | * 04ff8a5107 RISC-V: drop error print from riscv_hartid_to_cpuid() | * 9e1e0887ea cxl/port: Fix NULL pointer access in devm_cxl_add_port() | * c88cfbb18a mmc: sdhci-pci-gli: GL9755: Mask the replay timer timeout of AER | * 2132941b45 Input: xpad - add VID for Turtle Beach controllers | * 2fa74d29fc tracing: Have trace_event_file have ref counters | * 6460508dce powerpc/powernv: Fix fortify source warnings in opal-prd.c | * 4c55be0855 drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox | * 68d774eb10 drm/amd/display: Enable fast plane updates on DCN3.2 and above | * fb5c134ca5 drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer() | * 51ffa1a379 drm/amdgpu: lower CS errors to debug severity | * c52aac5884 drm/amdgpu: fix error handling in amdgpu_bo_list_get() | * 2ab6c1237b drm/amdgpu: don't use ATRM for external devices | * 965dce07a4 drm/amdgpu: don't use pci_is_thunderbolt_attached() | * 8e54a91d3e drm/amdgpu/smu13: drop compute workload workaround | * 454d0cdd7c drm/amd/pm: Fix error of MACO flag setting code | * 07e94f204f drm/i915: Fix potential spectre vulnerability | * 9457636a49 drm/i915: Bump GLK CDCLK frequency when driving multiple pipes | * e973f40de1 drm/amd/pm: Handle non-terminated overdrive commands. | * dc4542861e ext4: properly sync file size update after O_SYNC direct IO | * e1d0f68bc0 ext4: add missed brelse in update_backups | * 1793dc461e ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks | * 80ddcf21e7 ext4: correct the start block of counting reserved clusters | * ec4ba3d62f ext4: correct return value of ext4_convert_meta_bg | * 32b9fb9a67 ext4: mark buffer new if it is unwritten to avoid stale data exposure | * f0cc1368fa ext4: correct offset of gdb backup in non meta_bg group to update_backups | * af075d06b3 ext4: apply umask if ACL support is disabled | * e795a56654 Revert "net: r8169: Disable multicast filter for RTL8168H and RTL8107E" | * eb2f435be2 media: qcom: camss: Fix csid-gen2 for test pattern generator | * eeab07ddd0 media: qcom: camss: Fix invalid clock enable bit disjunction | * 18a06f2eeb media: qcom: camss: Fix missing vfe_lite clocks check | * ddc424aedb media: qcom: camss: Fix VFE-480 vfe_disable_output() | * 0f3e5f93fe media: qcom: camss: Fix VFE-17x vfe_disable_output() | * 04ef31a3e3 media: qcom: camss: Fix vfe_get() error jump | * 3166c3af55 media: qcom: camss: Fix pm_domain_on sequence in probe | * 6dcb2605c2 mmc: sdhci-pci-gli: GL9750: Mask the replay timer timeout of AER | * f7164cb037 r8169: add handling DASH when DASH is disabled | * 862565f324 r8169: fix network lost after resume on DASH systems | * 9e9e2107ae mptcp: fix setsockopt(IP_TOS) subflow locking | * dba6f08cef mptcp: add validity check for sending RM_ADDR | * 70ff9b65a7 mptcp: deal with large GSO size | * 16fcda24b1 mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors | * a7fd033550 mm: fix for negative counter: nr_file_hugepages | * 2594bdaa16 mmc: sdhci-pci-gli: A workaround to allow GL9750 to enter ASPM L1.2 | * 97fb6013f3 riscv: kprobes: allow writing to x0 | * 645257ad8d riscv: correct pt_level name via pgtable_l5/4_enabled | * fb1b16f041 riscv: mm: Update the comment of CONFIG_PAGE_OFFSET | * 9f74b261e4 LoongArch: Mark __percpu functions as always inline | * 1bb61fb790 nfsd: fix file memleak on client_opens_release | * a5d4be493a dm-verity: don't use blocking calls from tasklets | * 002d2473dd drm/mediatek/dp: fix memory leak on ->get_edid callback error path | * 5e9fcba176 drm/mediatek/dp: fix memory leak on ->get_edid callback audio detection | * e082326473 media: ccs: Correctly initialise try compose rectangle | * 424fc46381 media: venus: hfi: add checks to handle capabilities from firmware | * 9ebb3c14ec media: venus: hfi: fix the check to handle session buffer requirement | * a3e0b55dea media: venus: hfi_parser: Add check to keep the number of codecs within range | * 997639c100 media: sharp: fix sharp encoding | * 41c269083c media: lirc: drop trailing space from scancode transmit | * 526dd7540a f2fs: avoid format-overflow warning | * 6122b72ce5 f2fs: do not return EFSCORRUPTED, but try to run online repair | * e6fa9ac60f i2c: i801: fix potential race in i801_block_transaction_byte_by_byte | * f5617a21c7 net: phylink: initialize carrier state at creation | * 105d29fa8d net: dsa: lan9303: consequently nested-lock physical MDIO | * eef592e71a net: ethtool: Fix documentation of ethtool_sprintf() | * 57e35d9229 s390/ap: fix AP bus crash on early config change callback invocation | * 75d5c85cf4 i2c: designware: Disable TX_EMPTY irq while waiting for block length byte | * ba1a9eef3e sbsa_gwdt: Calculate timeout with 64-bit math | * cfcb1e7c17 lsm: fix default return value for inode_getsecctx | * 7a048a90ac lsm: fix default return value for vm_enough_memory | * b3fd9db79e Revert "i2c: pxa: move to generic GPIO recovery" | * 677fc3780f Revert ncsi: Propagate carrier gain/loss events to the NCSI controller | * 31f6ff62df cxl/region: Fix x1 root-decoder granularity calculations | * 683b6a7324 tools/testing/cxl: Define a fixed volatile configuration to parse | * 8cdc6b8b81 cxl/mem: Move devm_cxl_add_endpoint() from cxl_core to cxl_mem | * 8fce427169 cxl: Unify debug messages when calling devm_cxl_add_port() | * e841a59ac1 i3c: master: svc: fix random hot join failure since timeout error | * a807a44189 i3c: master: svc: add NACK check after start byte sent | * 90db4c1d5e cxl/region: Do not try to cleanup after cxl_region_setup_targets() fails | * c415f113d9 cxl/region: Move region-position validation to a helper | * 008b08ab07 cxl/region: Cleanup target list on attach error | * 93d242f63e cxl/region: Validate region mode vs decoder mode | * 3b70d45c7e drm/amd/display: enable dsc_clk even if dsc_pg disabled | * 1d1cc275d1 Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE | * 6c6a39080b Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables | * ba9302fd93 bluetooth: Add device 13d3:3571 to device tables | * fc3423d55c bluetooth: Add device 0bda:887b to device tables | * f1c7f81e97 Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559 | * 1f026218f8 clk: visconti: Fix undefined behavior bug in struct visconti_pll_provider | * b2a2828720 clk: visconti: remove unused visconti_pll_provider::regmap | * e785584e0a cpufreq: stats: Fix buffer overflow detection in trans_stats() | * c2d14682b3 pmdomain: imx: Make imx pgc power domain also set the fwnode | * 8bd370cc3c pmdomain: bcm: bcm2835-power: check if the ASB register is equal to enable | * 68620ef460 ALSA: hda/realtek: Add quirks for HP Laptops | * 4d50004416 ALSA: hda/realtek: Enable Mute LED on HP 255 G10 | * 4645d3bcd5 ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC | * eaa4e4ba7a ALSA: hda/realtek - Add Dell ALC295 to pin fall back table | * 0fcc2cf28f ALSA: hda/realtek: Enable Mute LED on HP 255 G8 | * fa7c9cc3cb ALSA: info: Fix potential deadlock at disconnection | * a0d43e0f7c btrfs: zoned: wait for data BG to be finished on direct IO allocation | * 9ad4c7f065 xfs: recovery should not clear di_flushiter unconditionally | * 209379924a cifs: do not reset chan_max if multichannel is not supported at mount | * c9569bfd28 cifs: force interface update before a fresh session setup | * 5bdf34ca32 cifs: reconnect helper should set reconnect for the right channel | * 9eb44db68c smb: client: fix potential deadlock when releasing mids | * 558817597d smb: client: fix use-after-free bug in cifs_debug_data_proc_show() | * 49d0ff613f smb3: fix caching of ctime on setxattr | * 34828baf81 smb3: fix touch -h of symlink | * 9d96ac07ae smb3: fix creating FIFOs when mounting with "sfu" mount option | * 5691e15695 fs: add ctime accessors infrastructure | * b50ca24c3e xhci: Enable RPM on controllers that support low-power states | * 72a90e7eb4 parisc/power: Fix power soft-off when running on qemu | * 40b6914f42 parisc/pgtable: Do not drop upper 5 address bits of physical address | * 1651b334f1 parisc: Prevent booting 64-bit kernels on PA1.x machines | * 3ddb2fa5ec i3c: master: svc: fix SDA keep low when polling IBIWON timeout happen | * 1ea1fb2216 i3c: master: svc: fix check wrong status register in irq handler | * 65d9f61324 i3c: master: svc: fix ibi may not return mandatory data byte | * e32e9cba56 i3c: master: svc: fix wrong data return when IBI happen during start frame | * 3a8e03f133 i3c: master: svc: fix race condition in ibi work thread | * de6ca501ad i3c: master: cdns: Fix reading status register | * 3b93096d29 mtd: cfi_cmdset_0001: Byte swap OTP info | * aee642ae99 mm/memory_hotplug: use pfn math in place of direct struct page manipulation | * 5a2768b9de mm/cma: use nth_page() in place of direct struct page manipulation | * 20412ca356 s390/cmma: fix detection of DAT pages | * 7fc465d265 dmaengine: stm32-mdma: correct desc prep when channel running | * 55d699e2d2 mcb: fix error handling for different scenarios when parsing | * afcde812dd driver core: Release all resources during unbind before updating device links | * f7ab9dee22 tracing: Have the user copy of synthetic event address use correct context | * 185f3617ad i2c: core: Run atomic i2c xfer when !preemptible | * 59cb785919 kernel/reboot: emergency_restart: Set correct system_state | * 4f3135e2dd quota: explicitly forbid quota files from being encrypted | * ed3cc4f3ca jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev | * e166cc2bf5 ASoC: codecs: wsa-macro: fix uninitialized stack variables with name prefix | * 479a120a04 hid: lenovo: Resend all settings on reset_resume for compact keyboards | * 9ea5df7290 selftests/resctrl: Reduce failures due to outliers in MBA/MBM tests | * 72f5a918b4 selftests/resctrl: Move _GNU_SOURCE define into Makefile | * e6526e403a selftests/resctrl: Remove duplicate feature check from CMT test | * 3f100cc63a netfilter: nf_tables: split async and sync catchall in two functions | * 13e2d49647 netfilter: nf_tables: remove catchall element in GC sync path | * 143f450c6c ima: detect changes to the backing overlay file | * 2c63b9d7f7 ima: annotate iint mutex to avoid lockdep false positive warnings | * db98de0809 mfd: qcom-spmi-pmic: Fix revid implementation | * 5231eb1190 mfd: qcom-spmi-pmic: Fix reference leaks in revid helper | * 4d259683bc arm64: dts: qcom: ipq6018: Fix tcsr_mutex register size | * c754a6f5c3 ACPI: FPDT: properly handle invalid FPDT subtables | * 95e747c3c6 firmware: qcom_scm: use 64-bit calling convention only when client is 64-bit | * cd222fc61e arm64: dts: qcom: ipq8074: Fix hwlock index for SMEM | * e866ef947a btrfs: don't arbitrarily slow down delalloc if we're committing | * ddf42b7c8d rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects | * d150294818 PM: hibernate: Clean up sync_read handling in snapshot_write_next() | * 567c6f6495 PM: hibernate: Use __get_safe_page() rather than touching the list | * 2c9222b7dc arm64: dts: qcom: ipq6018: Fix hwlock index for SMEM | * 8d837850d3 rcu/tree: Defer setting of jiffies during stall reset | * 6aa3cab6be svcrdma: Drop connection after an RDMA Read error | * 4b0d6ddb64 wifi: wilc1000: use vmm_table as array in wilc struct | * efd8e6d19c PCI: exynos: Don't discard .remove() callback | * 75bf9a8b0e PCI: kirin: Don't discard .remove() callback | * e02b9c6a83 PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common() | * 51dcd20a4a mmc: Add quirk MMC_QUIRK_BROKEN_CACHE_FLUSH for Micron eMMC Q2J54A | * 07d425242e mmc: sdhci_am654: fix start loop index for TAP value parsing | * 4542aa7569 mmc: vub300: fix an error code | * 8387c94d73 ksmbd: fix slab out of bounds write in smb_inherit_dacl() | * 482aaa72f9 ksmbd: handle malformed smb1 message | * 8e76941a16 clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from PLL clocks | * 877080a349 clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks | * 3291d3ecf3 clk: socfpga: Fix undefined behavior bug in struct stratix10_clock_data | * ea2c6e85b6 parisc/power: Add power soft-off when running on qemu | * 783645be98 parisc/pdc: Add width field to struct pdc_model | * ef0224ee53 arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer | * 938c4c7318 PCI: keystone: Don't discard .probe() callback | * b7d27cbfef PCI: keystone: Don't discard .remove() callback | * fe0b2a20f7 KEYS: trusted: Rollback init_trusted() consistently | * 454ad98f31 KEYS: trusted: tee: Refactor register SHM usage | * 3ef9944681 genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware | * 17381882fc mmc: meson-gx: Remove setting of CMD_CFG_ERROR | * 0cf7577b6b wifi: ath11k: fix gtk offload status event locking | * e3199b3fac wifi: ath11k: fix htt pktlog locking | * ca420ac4f9 wifi: ath11k: fix dfs radar event locking | * f0ea9e4726 wifi: ath11k: fix temperature event locking | * 164fa9a0b1 regmap: Ensure range selector registers are updated after cache sync | * e10facbd25 ACPI: resource: Do IRQ override on TongFang GMxXGxx | * 08a98c345f mm/damon/sysfs: check error from damon_sysfs_update_target() | * b0fc14428c mm/damon: implement a function for max nr_accesses safe calculation | * 834a800c58 mm/damon/ops-common: avoid divide-by-zero during region hotness calculation | * 2b38f0dbe8 mm/damon/lru_sort: avoid divide-by-zero in hot threshold calculation | * cf2641099c watchdog: move softlockup_panic back to early_param | * f0f3328af9 mm/damon/sysfs: update monitoring target regions for online input commit | * 9275f65d77 mm/damon/sysfs: remove requested targets when online-commit inputs | * 4e0fbf3188 PCI/sysfs: Protect driver's D3cold preference from user space | * 1a2c7a2f35 hvc/xen: fix event channel handling for secondary consoles | * b772e415e1 hvc/xen: fix error path in xen_hvc_init() to always register frontend driver | * 74db59e63b hvc/xen: fix console unplug | * e5b0e23080 tty: serial: meson: fix hard LOCKUP on crtscts mode | * 5e3b2141c7 tty/sysrq: replace smp_processor_id() with get_cpu() | * 5b2352c64c proc: sysctl: prevent aliased sysctls from getting passed to init | * d91fd028c9 audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() | * 38968c63e9 audit: don't take task_lock() in audit_exe_compare() code path | * 43cea54109 KVM: x86: Clear bit12 of ICR after APIC-write VM-exit | * 27976fa917 KVM: x86: Ignore MSR_AMD64_TW_CFG access | * 7e218114a2 KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space | * 41689ef19b x86/cpu/hygon: Fix the CPU topology evaluation for real | * f0732c646a crypto: x86/sha - load modules based on CPU features | * 1fc94de1c1 scsi: qla2xxx: Fix system crash due to bad pointer access | * b16ea57d6c scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers | * bb5e307366 scsi: mpt3sas: Fix loop logic | * dd56d43244 bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END | * 947635fa17 bpf: Fix check_stack_write_fixed_off() to correctly spill imm | * 3bdbe399b8 randstruct: Fix gcc-plugin performance mode to stay in group | * bee4f891fe powerpc/perf: Fix disabling BHRB and instruction sampling | * 4cb064f617 perf intel-pt: Fix async branch flags | * a1d8f675ea media: venus: hfi: add checks to perform sanity on queue pointers | * 55db76caa7 i915/perf: Fix NULL deref bugs with drm_dbg() calls | * d1a04a5219 cifs: fix check of rc in function generate_smb3signingkey | * 17cfba4aeb cifs: spnego: add ';' in HOST_KEY_LEN | * 4b91ba060f tools/power/turbostat: Enable the C-state Pre-wake printing | * c5fcba7ff9 tools/power/turbostat: Fix a knl bug | * ca56cdfab3 macvlan: Don't propagate promisc change to lower dev in passthru | * f9b592a9e6 net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors | * 0ab53cd69f net/mlx5e: Check return value of snprintf writing to fw_version buffer | * 7f2feab701 net/mlx5e: Reduce the size of icosq_str | * e2d93cfd1b net/mlx5e: Fix pedit endianness | * 991ba64898 net/mlx5e: fix double free of encap_header in update funcs | * e8ae37f863 net/mlx5e: fix double free of encap_header | * 7414a28de1 net: stmmac: avoid rx queue overrun | * 49fb680403 net: stmmac: fix rx budget limit check | * 18a169810c netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() | * 6a15d97104 netfilter: nf_conntrack_bridge: initialize err to 0 | * d179189eec af_unix: fix use-after-free in unix_stream_read_actor() | * 14b11892a6 net: ethernet: cortina: Fix MTU max setting | * 1a1efaed5f net: ethernet: cortina: Handle large frames | * 4794b6b16a net: ethernet: cortina: Fix max RX frame define | * 19554aa901 bonding: stop the device in bond_setup_by_slave() | * f84846731b ptp: annotate data-race around q->head and q->tail | * ceae93d76a xen/events: fix delayed eoi list handling | * ab3e13b35c ppp: limit MRU to 64K | * 00768b3e90 net: mvneta: fix calls to page_pool_get_stats | * 1e83edbc42 tipc: Fix kernel-infoleak due to uninitialized TLV value | * a28ec8322d net: hns3: fix VF wrong speed and duplex issue | * 55d82e092c net: hns3: fix VF reset fail issue | * f47c6fba72 net: hns3: fix variable may not initialized problem in hns3_init_mac_addr() | * 07f5b8c471 net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs | * 83a177b942 net: hns3: fix incorrect capability bit display for copper port | * 5dc440293d net: hns3: add barrier in vf mailbox reply process | * 61c5ba5042 net: hns3: fix add VLAN fail issue | * 76bd42849c tty: Fix uninit-value access in ppp_sync_receive() | * 732a67ca43 ipvlan: add ipvlan_route_v6_outbound() helper | * 12af02d24a net: set SOCK_RCU_FREE before inserting socket into hashtable | * c0f8b8fb7d vhost-vdpa: fix use after free in vhost_vdpa_probe() | * 58278cc71d gfs2: Silence "suspicious RCU usage in gfs2_permission" warning | * 7749fd2dbe SUNRPC: Fix RPC client cleaned up the freed pipefs dentries | * af0095a559 NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO | * 19d7dbf71e SUNRPC: Add an IS_ERR() check back to where it was | * c65b915641 NFSv4.1: fix handling NFS4ERR_DELAY when testing for session trunking | * 5ee813da0c mtd: rawnand: meson: check return value of devm_kasprintf() | * b2a9ba69df mtd: rawnand: intel: check return value of devm_kasprintf() | * 8d02b6fb3c SUNRPC: ECONNRESET might require a rebind | * 11f6aadd1f sched/core: Optimize in_task() and in_interrupt() a bit | * 3a6ad749e9 wifi: iwlwifi: Use FW rate for non-data frames | * 2fa178e2cd mtd: rawnand: tegra: add missing check for platform_get_irq() | * 1fb3a9c59e pwm: Fix double shift bug | * 6586b5f8e4 drm/amdgpu: fix software pci_unplug on some chips | * 8a1552e908 ALSA: hda/realtek: Add quirk for ASUS UX7602ZM | * 07ab6615a9 drm/qxl: prevent memory leak | * 09297e3ffc ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings | * aff8be2cad i2c: dev: copy userspace array safely | * 72d02adae3 kgdb: Flush console before entering kgdb on panic | * 8a06894666 drm/amd/display: Avoid NULL dereference of timing generator | * b083aaf5db media: imon: fix access to invalid resource for the second interface | * 65335aef1a media: ccs: Fix driver quirk struct documentation | * b8dcbbd0c4 media: cobalt: Use FIELD_GET() to extract Link Width | * e2ccedd4d1 gfs2: fix an oops in gfs2_permission | * 53fc16c1ad gfs2: ignore negated quota changes | * 329a8d1d60 media: vivid: avoid integer overflow | * a647f27a74 media: gspca: cpia1: shift-out-of-bounds in set_flicker | * e64d23dc65 i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data. | * 472bd47874 virtio-blk: fix implicit overflow on virtio_max_dma_size | * 32b17bc21f i2c: sun6i-p2wi: Prevent potential division by zero | * 0b5e729d4e i2c: fix memleak in i2c_new_client_device() | * 8be39f6691 i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler | * 07c11a5249 9p: v9fs_listxattr: fix %s null argument warning | * 3851d844d7 9p/trans_fd: Annotate data-racy writes to file::f_flags | * c7b0ce54b1 usb: gadget: f_ncm: Always set current gadget in ncm_bind() | * ff95007583 f2fs: fix error handling of __get_node_page | * a82bd79cbf soundwire: dmi-quirks: update HP Omen match | * 7932afa9bb usb: dwc3: core: configure TX/RX threshold for DWC3_IP | * 7cebc86481 tty: vcc: Add check for kstrdup() in vcc_probe() | * d6957635de thunderbolt: Apply USB 3.x bandwidth quirk only in software connection manager | * b80aaff5f7 iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() | * c92de3bf6c mfd: intel-lpss: Add Intel Lunar Lake-M PCI IDs | * b469227b1d exfat: support handle zero-size directory | * 24e222a54e HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W | * 4ee3b3a0ff crypto: hisilicon/qm - prevent soft lockup in receive loop | * a70cb0d59d ASoC: Intel: soc-acpi-cht: Add Lenovo Yoga Tab 3 Pro YT3-X90 quirk | * cbf304de78 PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk | * 52cd51ba57 misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller | * 6f9557a5c9 PCI: Disable ATS for specific Intel IPU E2000 devices | * 161767bb7c PCI: Extract ATS disabling to a helper function | * 6b46084582 PCI: Use FIELD_GET() to extract Link Width | * 442fd24d7b scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() | * dabc0ee84d PCI: Do error check on own line to split long "if" conditions | * 146badf18e atm: iphase: Do PCI error checks on own line | * 1a7c3d2e1d PCI: mvebu: Use FIELD_PREP() with Link Width | * aac90c7197 PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields | * 43b91df291 ALSA: hda: Fix possible null-ptr-deref when assigning a stream | * fa7abd3c5c ARM: 9320/1: fix stack depot IRQ stack filter | * 6e2076cad8 HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround | * 8c68af2af6 jfs: fix array-index-out-of-bounds in diAlloc | * a50b796d36 jfs: fix array-index-out-of-bounds in dbFindLeaf | * 5013f82698 fs/jfs: Add validity check for db_maxag and db_agpref | * 0cb567e727 fs/jfs: Add check for negative db_l2nbperpage | * 88984ec479 scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool | * 33331b265a scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs | * f1521fe0b4 RDMA/hfi1: Use FIELD_GET() to extract Link Width | * af493dde68 ASoC: SOF: ipc4: handle EXCEPTION_CAUGHT notification from firmware | * c55fc098fd crypto: pcrypt - Fix hungtask for PADATA_RESET | * 62c65e799f ASoC: SOF: Pass PCI SSID to machine driver | * 14107cbeb5 ASoC: soc-card: Add storage for PCI SSID | * 0aaf807756 selftests/efivarfs: create-read: fix a resource leak | * c68535657f arm64: dts: ls208xa: use a pseudo-bus to constrain usb dma size | * 6c1b3d89a2 drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL | * 2806f88037 drm/amdkfd: Fix shift out-of-bounds issue | * 7017e83500 drm/panel: st7703: Pick different reset sequence | * 33fb1a5553 drm/amdgpu/vkms: fix a possible null pointer dereference | * 16fa59e273 drm/radeon: fix a possible null pointer dereference | * d0bc9ab0a1 drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference | * 79813cd593 drm/panel: fix a possible null pointer dereference | * 9b70fc7d70 drm/amdgpu: Fix potential null pointer derefernce | * d0725232da drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga | * fc9ac0e8e0 drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 | * 09b900fc2c drm/msm/dp: skip validity check for DP CTS EDID checksum | * 412ce89669 drm: vmwgfx_surface.c: copy user-array safely | * 0f5f567451 drm_lease.c: copy user-array safely | * 6995df256e kernel: watch_queue: copy user-array safely | * 8332523b13 kernel: kexec: copy user-array safely | * 2fabc3289b string.h: add array-wrappers for (v)memdup_user() | * 24faa2740b drm/amd/display: use full update for clip size increase of large plane source | * 09d4f579d3 drm/amd: Update `update_pcie_parameters` functions to use uint8_t arguments | * 50f35a907c drm/amdkfd: Fix a race condition of vram buffer unref in svm code | * 5b978a8ce4 drm/amdgpu: not to save bo in the case of RAS err_event_athub | * 0c8eda600e drm/komeda: drop all currently held locks if deadlock happens | * 4048cf4615 drm/gma500: Fix call trace when psb_gem_mm_init() fails | * a57a54a8bc platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e | * 6edd5ea504 platform/chrome: kunit: initialize lock for fake ec_dev | * c90c7bf7b1 tsnep: Fix tsnep_request_irq() format-overflow warning | * 70997012d8 ACPI: EC: Add quirk for HP 250 G7 Notebook PC | * 87624b1f9b Bluetooth: Fix double free in hci_conn_cleanup | * a556f2ef55 Bluetooth: btusb: Add date->evt_skb is NULL check | * 0a40c609e2 bpf: Ensure proper register state printing for cond jumps | * 8093dd759e vsock: read from socket's error queue | * 459970363e wifi: ath10k: Don't touch the CE interrupt registers after power up | * 1c6a6c926a net: annotate data-races around sk->sk_dst_pending_confirm | * e7960d2a09 net: annotate data-races around sk->sk_tx_queue_mapping | * 46537b4597 wifi: ath10k: fix clang-specific fortify warning | * de979982eb wifi: ath9k: fix clang-specific fortify warnings | * aa42a7cb92 bpf: Detect IP == ksym.end as part of BPF program | * 57e44ff9c2 atl1c: Work around the DMA RX overflow issue | * 2be24c47ac wifi: mac80211: don't return unset power in ieee80211_get_tx_power() | * 9c2e4a81d3 wifi: mac80211_hwsim: fix clang-specific fortify warning | * d0fc4cb9d2 wifi: plfxlc: fix clang-specific fortify warning | * b5046b2532 x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size | * 2652d199dd workqueue: Provide one lock class key per work_on_cpu() callsite | * 3410b70235 cpu/hotplug: Don't offline the last non-isolated CPU | * b7441453ff smp,csd: Throw an error if a CSD lock is stuck for too long | * 6680d55aba clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware | * ff8370a0d8 clocksource/drivers/timer-imx-gpt: Fix potential memory leak | * 9f4c391dc2 selftests/lkdtm: Disable CONFIG_UBSAN_TRAP in test config | * e9a27fdce5 srcu: Fix srcu_struct node grpmask overflow on 64-bit systems | * 9ce4e87a8e perf/core: Bail out early if the request AUX area is out of bound | * 784d01f9bb lib/generic-radix-tree.c: Don't overflow in peek() | * c56df79d68 locking/ww_mutex/test: Fix potential workqueue corruption * | 0c2e40b9a3 Merge branch 'android14-6.1' into branch 'android14-6.1-lts' * | 3e0f75c1a4 Merge branch 'android14-6.1' into branch 'android14-6.1-lts' * | 0dfb0f3c97 Revert "inet: shrink struct flowi_common" * | 937b554499 Revert "mfd: core: Un-constify mfd_cell.of_reg" * | c42877e34f Revert "arm64/arm: xen: enlighten: Fix KPTI checks" * | 55d4929d66 Revert "virtio/vsock: replace virtio_vsock_pkt with sk_buff" * | 5418948a0a Revert "vsock/virtio: remove socket from connected/bound list on shutdown" * | 98f663d79a Revert "virtio/vsock: don't use skbuff state to account credit" * | 497503c6ec Revert "virtio/vsock: remove redundant 'skb_pull()' call" * | 5b9223a56f Revert "virtio/vsock: don't drop skbuff on copy failure" * | ec573670da Revert "virtio/vsock: fix leaks due to missing skb owner" * | e8ad0104af Revert "virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()" * | db612631b7 Revert "virtio/vsock: fix header length on skb merging" * | 7ccdce2dc4 Revert "vsock/loopback: use only sk_buff_head.lock to protect the packet queue" * | 2b3ea8bdef Merge 6.1.63 into android14-6.1-lts |\| | * 69e434a1cb Linux 6.1.63 | * 830c11c9c0 virtio/vsock: fix header length on skb merging | * cd12535b97 virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt() | * a6650e78c4 virtio/vsock: fix leaks due to missing skb owner | * bb1c9a5907 vsock/loopback: use only sk_buff_head.lock to protect the packet queue | * 1e5f00e9db virtio/vsock: don't drop skbuff on copy failure | * 883a3db221 virtio/vsock: remove redundant 'skb_pull()' call | * 5852a2b573 virtio/vsock: don't use skbuff state to account credit | * 25bc87768c wifi: cfg80211: fix kernel-doc for wiphy_delayed_work_flush() | * fc3a19543e btrfs: use u64 for buffer sizes in the tree search ioctls | * c606c43ab6 Revert "mmc: core: Capture correct oemid-bits for eMMC cards" | * acca43d813 x86/amd_nb: Use Family 19h Models 60h-7Fh Function 4 IDs | * 129debbb41 io_uring/net: ensure socket is marked connected on connect retry | * b80b85f494 tracing/kprobes: Fix the order of argument descriptions | * 28e7153418 fbdev: fsl-diu-fb: mark wr_reg_wa() static | * 7bc7b82fb2 fbdev: imsttfb: fix a resource leak in probe | * 9858458282 fbdev: imsttfb: Fix error path of imsttfb_probe() | * 6d53668c43 spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies | * b4843bf39d ASoC: dapm: fix clock get name | * f5350c6f78 ASoC: hdmi-codec: register hpd callback on component probe | * acc36089bc ASoC: mediatek: mt8186_mt6366_rt1019_rt5682s: trivial: fix error messages | * 3bbf06efb8 drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE | * 3df98bd319 RISC-V: Don't fail in riscv_of_parent_hartid() for disabled HARTs | * 587e6308d6 netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses | * 8fa280d1a9 netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate eval call-backs | * d85670128f netfilter: xt_recent: fix (increase) ipv6 literal buffer length | * 7ee2070589 i2c: iproc: handle invalid slave state | * b5974b0c89 r8169: respect userspace disabling IFF_MULTICAST | * 1fecefb092 vsock/virtio: remove socket from connected/bound list on shutdown | * baddcc2c71 virtio/vsock: replace virtio_vsock_pkt with sk_buff | * 46c541fa66 blk-core: use pr_warn_ratelimited() in bio_check_ro() | * 4e9b3ec84d nbd: fix uaf in nbd_open | * b0310063d4 tg3: power down device only on SYSTEM_POWER_OFF | * 2dbafb0081 nvme: fix error-handling for io_uring nvme-passthrough | * f4277cb562 net/smc: put sk reference if close work was canceled | * 2d563aa752 net/smc: allow cdc msg send rather than drop it with NULL sndbuf_desc | * 9d976cd3e3 net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT | * 4a12fb7d1a octeontx2-pf: Free pending and dropped SQEs | * a1e8e68204 octeontx2-pf: qos send queues management | * 479d344a92 octeontx2-pf: Rename tot_tx_queues to non_qos_queues | * f9c2807e2a selftests: pmtu.sh: fix result checking | * 490dfbf651 net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs | * 0b8ffe3cb0 Fix termination state for idr_for_each_entry_ul() | * 7f4a2c2967 net: r8169: Disable multicast filter for RTL8168H and RTL8107E | * db68ac51fe dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses. | * 414d36c117 dccp: Call security_inet_conn_request() after setting IPv4 addresses. | * e129327d80 net: page_pool: add missing free_percpu when page_pool_init fail | * a95acc2099 octeontx2-pf: Fix holes in error code | * 00376cc743 octeontx2-pf: Fix error codes | * 612c22e928 inet: shrink struct flowi_common | * 89d92e4fc5 bpf: Check map->usercnt after timer->timer is assigned | * 4c731e98fe tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING | * 6086258bd5 hsr: Prevent use after free in prp_create_tagged_frame() | * f980e9a57d llc: verify mac len before reading mac header | * 8803da01fe watchdog: ixp4xx: Make sure restart always works | * 7082b1fb53 Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() | * f8225c3c65 pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume | * 679d2ab67e pwm: sti: Reduce number of allocations and drop usage of chip_data | * 713629765f regmap: prevent noinc writes from clobbering cache | * 7ec7b7d3f2 media: cec: meson: always include meson sub-directory in Makefile | * 103c66dcf5 media: dvb-usb-v2: af9035: fix missing unlock | * 39c2ec94a8 media: cadence: csi2rx: Unregister v4l2 async notifier | * 76d12296ee media: cedrus: Fix clock/reset sequence | * a254ee1ddc media: vidtv: mux: Add check and kfree for kstrdup | * 5c26aae372 media: vidtv: psi: Add check for kstrdup | * e7c96f4605 media: s3c-camif: Avoid inappropriate kfree() | * 1620531a3d media: mtk-jpegenc: Fix bug in JPEG encode quality selection | * b75fb8a2ee media: amphion: handle firmware debug message | * 20568d06f6 media: bttv: fix use after free error due to btv->timeout timer | * 825a7a6a3a media: ov5640: Fix a memory leak when ov5640_probe fails | * ba305517a1 media: i2c: max9286: Fix some redundant of_node_put() calls | * a7a8c49dc6 media: ov5640: fix vblank unchange issue when work at dvp mode | * 9b1c0aca7f media: ov5640: Drop dead code using frame_interval | * 6380621de3 media: verisilicon: Do not enable G2 postproc downscale if source is narrower than destination | * 64f55cebb4 media: hantro: Check whether reset op is defined before use | * f258fd94ab pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() | * 7c9947693b pcmcia: ds: fix refcount leak in pcmcia_device_add() | * fbdf451e76 pcmcia: cs: fix possible hung task and memory leak pccardd() | * f9e17bce0a rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call | * b4dda701d0 virt: sevguest: Fix passing a stack buffer as a scatterlist target | * d889b7bc12 x86/sev: Change snp_guest_issue_request()'s fw_err argument | * a5b03f56d3 crypto: ccp - Name -1 return value as SEV_RET_NO_FW_CALL | * 7c7371b41a cxl/mem: Fix shutdown order | * 174ae0a3b8 i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs | * b9793c9c03 9p/net: fix possible memory leak in p9_check_errors() | * 8b184ebff6 perf hist: Add missing puts to hist__account_cycles | * 8e1f41a853 perf machine: Avoid out of bounds LBR memory read | * 209f4a67d8 usb: host: xhci-plat: fix possible kernel oops while resuming | * 071666451e xhci: Loosen RPM as default policy to cover for AMD xHC 1.1 | * abdd1f47ef powerpc/pseries: fix potential memory leak in init_cpu_associativity() | * 257517c00b powerpc/imc-pmu: Use the correct spinlock initializer. | * 8409ee076d powerpc/vas: Limit open window failure messages in log bufffer | * 0f8dabe79a powerpc/xive: Fix endian conversion size | * b4bc030af7 powerpc/40x: Remove stale PTE_ATOMIC_UPDATES macro | * a204f9f3cb modpost: fix ishtp MODULE_DEVICE_TABLE built on big-endian host | * 339148f786 modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host | * 9d4f7441cd powerpc: Only define __parse_fpscr() when required | * 4a43be67d6 interconnect: qcom: sm8350: Set ACV enable_mask | * bfc019c713 interconnect: qcom: sm8350: Retire DEFINE_QBCM | * ccbd1281a2 interconnect: qcom: sm8150: Set ACV enable_mask | * d7e501045e interconnect: qcom: sm8150: Retire DEFINE_QBCM | * 386a4d6f83 interconnect: qcom: sm8150: Drop IP0 interconnects | * 8979ed70da interconnect: move ignore_list out of of_count_icc_providers() | * bf7039825f interconnect: qcom: sm6350: Set ACV enable_mask | * d39e3249c0 interconnect: qcom: sm6350: Retire DEFINE_QBCM | * 639ee7fbc0 interconnect: qcom: sdm845: Set ACV enable_mask | * 8085888045 interconnect: qcom: sdm845: Retire DEFINE_QBCM | * e82d634fdb interconnect: qcom: sc8280xp: Set ACV enable_mask | * 50e4e1ad35 interconnect: qcom: sc8180x: Set ACV enable_mask | * 673ced6e01 interconnect: qcom: sc7280: Set ACV enable_mask | * 8fe916ff8a interconnect: qcom: sc7180: Set ACV enable_mask | * 3f884277f9 interconnect: qcom: sc7180: Retire DEFINE_QBCM | * 695b3cfe1c f2fs: fix to initialize map.m_pblk in f2fs_precache_extents() | * 7b863b8bcd dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc() | * 2ed67a40dd USB: usbip: fix stub_dev hub disconnect | * dae6fd9747 tools: iio: iio_generic_buffer ensure alignment | * 06a1286345 misc: st_core: Do not call kfree_skb() under spin_lock_irqsave() | * fc968818d5 dmaengine: ti: edma: handle irq_of_parse_and_map() errors | * 03984e24db usb: chipidea: Simplify Tegra DMA alignment code | * c9095c743b usb: chipidea: Fix DMA overwrite for Tegra | * 6b21a22728 usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency | * 0806a6afe1 dmaengine: idxd: Register dsa_bus_type before registering idxd sub-drivers | * 1e03a26959 perf record: Fix BTF type checks in the off-cpu profiling | * 1c4eb1bc39 pinctrl: renesas: rzg2l: Make reverse order of enable() for disable() | * cd7d804f52 livepatch: Fix missing newline character in klp_resolve_symbols() | * f1cda3c5dd tty: tty_jobctrl: fix pid memleak in disassociate_ctty() | * fb4251dab3 f2fs: compress: fix to avoid redundant compress extension | * 9375ea7f26 f2fs: compress: fix to avoid use-after-free on dic | * 071bbc5a66 f2fs: compress: fix deadloop in f2fs_write_cache_pages() | * ec67c83dd5 f2fs: convert f2fs_write_cache_pages() to use filemap_get_folios_tag() | * 599befdd79 filemap: add filemap_get_folios_tag() | * 855516cb6e perf kwork: Set ordered_events to true in 'struct perf_tool' | * 231665cc6f perf kwork: Add the supported subcommands to the document | * 16e02976cf perf kwork: Fix incorrect and missing free atom in work_push_atom() | * e27c2668ac iio: frequency: adf4350: Use device managed functions and fix power down issue. | * 550711e007 perf stat: Fix aggr mode initialization | * 6cb0495d36 apparmor: fix invalid reference on profile->disconnected | * cef064fdde apparmor: test: make static symbols visible during kunit testing | * cfce1e26b4 kunit: add macro to allow conditionally exposing static symbols to tests | * 1d47d1abb4 leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu' | * 4198a7a6ef leds: pwm: Don't disable the PWM when the LED should be off | * 63cdeb20ee leds: turris-omnia: Do not use SMBUS calls | * 7d0e60e4ff leds: turris-omnia: Drop unnecessary mutex locking | * ce58f479b5 mfd: arizona-spi: Set pdata.hpdet_channel for ACPI enumerated devs | * 26b534a3f0 dt-bindings: mfd: mt6397: Split out compatible for MediaTek MT6366 PMIC | * 90155dfd99 dt-bindings: mfd: mt6397: Add binding for MT6357 | * 9ac0c05365 mfd: dln2: Fix double put in dln2_probe | * ee6b91411d mfd: core: Ensure disabled devices are skipped without aborting | * f1ed6c4e59 mfd: core: Un-constify mfd_cell.of_reg | * 437f033e30 IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF | * ad52f21e3d ASoC: ams-delta.c: use component after check | * 3dd998f78c crypto: qat - fix deadlock in backlog processing | * c7c26d0ef5 padata: Fix refcnt handling in padata_free_shell() | * 980a7fd5e5 ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails | * 9ee89579e6 HID: logitech-hidpp: Move get_wireless_feature_index() check to hidpp_connect_event() | * cf47abd7d8 HID: logitech-hidpp: Revert "Don't restart communication if not necessary" | * 8eb1f933cc HID: logitech-hidpp: Don't restart IO, instead defer hid_connect() only | * 7f2ed86dde HID: logitech-hidpp: Remove HIDPP_QUIRK_NO_HIDINPUT quirk | * b1736354a7 Revert "HID: logitech-hidpp: add a module parameter to keep firmware gestures" | * 693baca82d sh: bios: Revive earlyprintk support | * 35ac8075ae hid: cp2112: Fix IRQ shutdown stopping polling for all IRQs on chip | * 8a716eb7f8 HID: cp2112: Make irq_chip immutable | * cce6785b84 RDMA/hfi1: Workaround truncation compilation error | * 7a22e6fa51 scsi: ufs: core: Leave space for '\0' in utf8 desc string | * f9f4a6bdf9 ASoC: fsl: Fix PM disable depth imbalance in fsl_easrc_probe | * 002bd3c874 ASoC: SOF: core: Ensure sof_ops_free() is still called when probe never ran. | * fe6efb2d18 RDMA/hns: The UD mode can only be configured with DCQCN | * 1a6806f27e RDMA/hns: Add check for SL | * d3a8efb9de RDMA/hns: Fix signed-unsigned mixed comparisons | * 1000adbac3 RDMA/hns: Fix uninitialized ucmd in hns_roce_create_qp_common() | * 7c09504c37 RDMA/hns: Fix printing level of asynchronous events | * 3d559a5d5d IB/mlx5: Fix rdma counter binding for RAW QP | * c0f4144d0d ASoC: fsl: mpc5200_dma.c: Fix warning of Function parameter or member not described | * 4f13eab0e8 ext4: move 'ix' sanity check to corrent position | * 242ba2e20b ARM: 9321/1: memset: cast the constant byte to unsigned char | * 0a7f9238f3 crypto: hisilicon/qm - fix PF queue parameter issue | * 07eb93dbe1 crypto: hisilicon/qm - split a debugfs.c from qm | * 2cec6774fd crypto: hisilicon/qm - modify the process of regs dfx | * 56785a3a08 crypto: hisilicon/qm - delete redundant null assignment operations | * bafb12b629 hid: cp2112: Fix duplicate workqueue initialization | * aa804deca1 PCI: vmd: Correct PCI Header Type Register's multi-function check | * ed7f07ef84 crypto: qat - increase size of buffers | * 17c890a887 crypto: caam/jr - fix Chacha20 + Poly1305 self test failure | * 9857f811e5 crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure | * f23859748e nd_btt: Make BTT lanes preemptible | * 93aa88170c libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value | * 4795de8c04 scsi: ibmvfc: Fix erroneous use of rtas_busy_delay with hcall return code | * dc44e3fdb0 crypto: qat - fix unregistration of crypto algorithms | * 5e989aeb40 crypto: qat - extend buffer list interface | * 443bde2a4c crypto: qat - generalize crypto request buffers | * 380f0a1de2 crypto: qat - change bufferlist logic interface | * 2ad909a408 crypto: qat - rename bufferlist functions | * 61c57bb986 crypto: qat - relocate bufferlist logic | * e3294cccd8 crypto: qat - ignore subsequent state up commands | * bb55130d02 RDMA/core: Use size_{add,sub,mul}() in calls to struct_size() | * e39b84448f hwrng: geode - fix accessing registers | * 3c5c7f926a hwrng: bcm2835 - Fix hwrng throughput regression | * 0c824b77ad crypto: hisilicon/hpre - Fix a erroneous check after snprintf() | * 12d2087a7d KEYS: Include linux/errno.h in linux/verification.h | * 44dcf6d33e ALSA: hda: cs35l41: Undo runtime PM changes at driver exit time | * 2d81896fe1 ALSA: hda: cs35l41: Fix unbalanced pm_runtime_get() | * 0642126913 ASoC: cs35l41: Undo runtime PM changes at driver exit time | * ab3aa429c8 ASoC: cs35l41: Verify PM runtime resume errors in IRQ handler | * f20c4b0c01 module/decompress: use vmalloc() for gzip decompression workspace | * c8a2355833 selftests/resctrl: Ensure the benchmark commands fits to its array | * 02c167c93f selftests/pidfd: Fix ksft print formats | * 6b7feafde7 arm64: tegra: Use correct interrupts for Tegra234 TKE | * 87367bc3d9 arm64: dts: imx8mn: Add sound-dai-cells to micfil node | * fef0af2250 arm64: dts: imx8mm: Add sound-dai-cells to micfil node | * fafaf5a2f3 arm64: dts: imx8qm-ss-img: Fix jpegenc compatible entry | * 37658e5189 clk: scmi: Free scmi_clk allocated when the clocks with invalid info are skipped | * db6db0af76 ARM: dts: am3517-evm: Fix LED3/4 pinmux | * d43c3e4974 firmware: arm_ffa: Allow the FF-A drivers to use 32bit mode of messaging | * 5429ecbb1b firmware: arm_ffa: Assign the missing IDR allocation ID to the FFA device | * e0cf8e811f arm64: dts: ti: k3-am62a7-sk: Drop i2c-1 to 100Khz | * eccde2dbd9 firmware: ti_sci: Mark driver as non removable | * 7efb91501b kunit: Fix missed memory release in kunit_free_suite_set() | * f0ef883cae soc: qcom: llcc: Handle a second device without data corruption | * 4653225f41 ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator | * d97268ce08 arm64: dts: qcom: apq8016-sbc: Add missing ADV7533 regulators | * 7867e1d926 ARM64: dts: marvell: cn9310: Use appropriate label for spi1 pins | * 945f2e4f13 arm64: dts: qcom: sdm845-mtp: fix WiFi configuration | * 89465723e0 arm64: dts: qcom: sm8350: fix pinctrl for UART18 | * 1a404795c4 arm64: dts: qcom: sm8150: add ref clock to PCIe PHYs | * cd952d43c0 arm64: dts: qcom: sc7280: Add missing LMH interrupts | * 03a0a34f04 arm64: dts: qcom: msm8992-libra: drop duplicated reserved memory | * 4109f7d1a8 arm64: dts: qcom: msm8916: Fix iommu local address range | * 389a4aa5e3 arm64: dts: qcom: sc7280: link usb3_phy_wrapper_gcc_usb30_pipe_clk | * 426d3c7c72 arm64: dts: qcom: sdm845: cheza doesn't support LMh node | * e65c1aa21b ARM: dts: renesas: blanche: Fix typo in GP_11_2 pin name | * b660420f44 perf: hisi: Fix use-after-free when register pmu fails | * 104fa6426a drivers/perf: hisi_pcie: Check the type first in pmu::event_init() | * c6e00bc30e perf/arm-cmn: Fix DTC domain detection | * 28fa550a49 perf/arm-cmn: Revamp model detection | * 4589403a34 drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process | * 1e88414e64 drm: mediatek: mtk_dsi: Fix NO_EOT_PACKET settings/handling | * 025d2ac470 clocksource/drivers/arm_arch_timer: limit XGene-1 workaround | * 96c3a18304 drm/msm/dsi: free TX buffer in unbind | * 8b072ab6c4 drm/msm/dsi: use msm_gem_kernel_put to free TX buffer | * 5671bed3c0 xen-pciback: Consider INTx disabled when MSI/MSI-X is enabled | * 934747e2f8 xenbus: fix error exit in xenbus_init() | * ace6403e78 drm/rockchip: Fix type promotion bug in rockchip_gem_iommu_map() | * 2836c72e8d arm64/arm: xen: enlighten: Fix KPTI checks | * 008b2a93c5 drm/bridge: lt9611uxc: fix the race in the error path | * af19ebfc6a gpu: host1x: Correct allocated size for contexts | * 9da0193454 drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe() | * 8045808be1 drm/mediatek: Fix iommu fault during crtc enabling | * 5d30fedc20 drm/mediatek: Fix iommu fault by swapping FBs after updating plane state | * 32b15fef33 io_uring/kbuf: Allow the full buffer id space for provided buffers | * 60db638be5 io_uring/kbuf: Fix check of BID wrapping in provided buffers | * 03e334565d drm/amd/display: Bail from dm_check_crtc_cursor if no relevant change | * a99afba394 drm/amd/display: Refactor dm_get_plane_scale helper | * 8960662027 drm/amd/display: Check all enabled planes in dm_check_crtc_cursor | * 9eae81af92 drm/amdkfd: fix some race conditions in vram buffer alloc/free of svm code | * 78e998884d drm/bridge: tc358768: Fix tc358768_ns_to_cnt() | * 9dbfdf5dcc drm/bridge: tc358768: Clean up clock period code | * 3ed322a852 drm/bridge: tc358768: Rename dsibclk to hsbyteclk | * 14d546d067 drm/bridge: tc358768: Use dev for dbg prints, not priv->dev | * 4a1c4eff65 drm/bridge: tc358768: Print logical values, not raw register values | * fb82b3b4ac drm/bridge: tc358768: Use struct videomode | * e87a3c24ce drm/bridge: tc358768: remove unused variable | * 1942dc48f4 drm/bridge: tc358768: Fix bit updates | * 2fab90bcde drm/bridge: tc358768: Fix use of uninitialized variable | * 3c0b681ba4 drm/bridge: lt8912b: Add missing drm_bridge_attach call | * 5a521f6b68 drm/bridge: lt8912b: Manually disable HPD only if it was enabled | * 7bf0cb8f40 drm/bridge: lt8912b: Fix crash on bridge detach | * 2cfa9dc32c drm/bridge: lt8912b: Fix bridge_detach | * 45350e5471 drm/bridge: lt8912b: Add hot plug detection | * 2c80c4f0d2 drm: bridge: it66121: Fix invalid connector dereference | * 341e79f8ae drm/radeon: possible buffer overflow | * 2d68194e1a drm/rockchip: vop2: Add missing call to crtc reset helper | * bc05621888 drm/rockchip: vop2: Don't crash for invalid duplicate_state | * b248ccaabf drm/rockchip: vop: Fix call to crtc reset helper | * ffebe76e50 drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs | * 4d37df40b1 hte: tegra: Fix missing error code in tegra_hte_test_probe() | * a671a41d60 hwmon: (sch5627) Disallow write access if virtual registers are locked | * 4a30312982 hwmon: (sch5627) Use bit macros when accessing the control register | * 3385632de8 Revert "hwmon: (sch56xx-common) Add automatic module loading on supported devices" | * 581255403a Revert "hwmon: (sch56xx-common) Add DMI override table" | * dd06f92fd8 hwmon: (coretemp) Fix potentially truncated sysfs attribute name | * 33de53a270 hwmon: (axi-fan-control) Fix possible NULL pointer dereference | * 44a96796d2 platform/x86: wmi: Fix opening of char device | * ae28868bba platform/x86: wmi: Fix probe failure when failing to register WMI devices | * 7b8d88df17 clk: qcom: config IPQ_APSS_6018 should depend on QCOM_SMEM | * 2a18dd6532 clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data | * a836efc21e clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data | * a540ca0aea clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data | * 357df1c2f6 clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data | * df1c4a9efa clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data | * dd1f30d68f clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data | * 7d022726e3 clk: npcm7xx: Fix incorrect kfree | * cc1c2772c1 clk: ti: fix double free in of_ti_divider_clk_setup() | * e4df931fb4 clk: ti: change ti_clk_register[_omap_hw]() API | * cb6c38995f clk: keystone: pll: fix a couple NULL vs IS_ERR() checks | * 0a37614109 spi: nxp-fspi: use the correct ioremap function | * cdaa544dc4 clk: linux/clk-provider.h: fix kernel-doc warnings and typos | * a0b3b2cc2d clk: renesas: rzg2l: Fix computation formula | * e1809bb19a clk: renesas: rzg2l: Use FIELD_GET() for PLL register fields | * e6070f0cda clk: renesas: rzg2l: Trust value returned by hardware | * c823ffba5d clk: renesas: rzg2l: Lock around writes to mux register | * 77e2338802 clk: renesas: rzg2l: Wait for status bit of SD mux before continuing | * f26a440d0e clk: renesas: rcar-gen3: Extend SDnH divider table | * d72c586809 clk: imx: imx8qxp: Fix elcdif_pll clock | * 2c2f1fb3f8 clk: imx: imx8mq: correct error handling path | * 0e2b088240 clk: imx: Select MXC_CLK for CLK_IMX8QXP | * 5b8d3ea093 regulator: mt6358: Fail probe on unknown chip ID | * 8d20252d96 clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src | * a588f440c4 clk: qcom: mmcc-msm8998: Fix the SMMU GDSC | * d2ffd85ee3 clk: qcom: mmcc-msm8998: Don't check halt bit on some branch clks | * 06a7365e2b clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies | * 101c2d257c clk: qcom: gcc-msm8996: Remove RPM bus clocks | * 5c25f89c00 spi: tegra: Fix missing IRQ check in tegra_slink_probe() | * 51d4d3cd18 regmap: debugfs: Fix a erroneous check after snprintf() | * 30e77e3ee9 ipvlan: properly track tx_errors | * 4836b94e5e net: add DEV_STATS_READ() helper | * fae5cc598e ipv6: avoid atomic fragment on GSO packets | * 35aff53626 ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() | * 1ca7bc1b08 bpf: Fix unnecessary -EBUSY from htab_lock_bucket | * 4bb26ec7ed Bluetooth: hci_sync: Fix Opcode prints in bt_dev_dbg/err | * 6f505a013c wifi: iwlwifi: empty overflow queue during flush | * e2be4ab86a wifi: iwlwifi: pcie: synchronize IRQs before NAPI | * c56aed37b6 wifi: iwlwifi: call napi_synchronize() before freeing rx/tx queues | * 6d88d4b1bb tcp: fix cookie_init_timestamp() overflows | * 72c23b3071 chtls: fix tp->rcv_tstamp initialization | * 2acedc5372 net: skb_find_text: Ignore patterns extending past 'to' | * d860416236 selftests: netfilter: test for sctp collision processing in nf_conntrack | * aa0a050c65 r8169: fix rare issue with broken rx after link-down on RTL8125 | * 4789d93f94 r8169: use tp_to_dev instead of open code | * 77ff34a56b thermal: core: prevent potential string overflow | * 9709c6d759 netfilter: nf_tables: Drop pointless memset when dumping rules | * 100a75d56b wifi: wfx: fix case where rates are out of order | * f64a559f2d PM / devfreq: rockchip-dfi: Make pmu regmap mandatory | * 0d30931f1f can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds | * 76378a8bae can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() | * 614d615d49 can: dev: can_restart(): don't crash kernel if carrier is OK | * d5342dafca wifi: ath11k: fix Tx power value during active CAC | * 8a777b28d7 ACPI: video: Add acpi_backlight=vendor quirk for Toshiba Portégé R100 | * 396ec51b13 ACPI: property: Allow _DSD buffer data only for byte accessors | * 75de6a6641 wifi: rtlwifi: fix EDCA limit set by BT coexistence | * 14a7e73b28 tcp_metrics: do not create an entry from tcp_init_metrics() | * 52ec0669f4 tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics() | * e850efcf2b tcp_metrics: add missing barriers on delete | * 586ce1064f wifi: ath: dfs_pattern_detector: Fix a memory initialization issue | * ebca9ae926 wifi: mt76: mt7915: fix beamforming availability check | * 2b12aebbd3 wifi: mt76: mt7603: improve stuck beacon handling | * c2fd48179c wifi: mt76: mt7603: improve watchdog reset reliablity | * e3c46ce78d wifi: mt76: mt7603: rework/fix rx pse hang check | * e01b3400d6 wifi: ath11k: fix boot failure with one MSI vector | * 26e301a70d wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file() | * 365fe12f45 net: ethernet: mtk_wed: fix EXT_INT_STATUS_RX_FBUF definitions for MT7986 SoC | * d97463c1f3 net: spider_net: Use size_add() in call to struct_size() | * 254187a64a tipc: Use size_add() in calls to struct_size() | * 065cb7ae3f tls: Use size_add() in call to struct_size() | * 8ae1873864 tls: Only use data field in crypto completion function | * 65e65a8b2d mlxsw: Use size_mul() in call to struct_size() | * a764c22bbc gve: Use size_add() in call to struct_size() | * 5dd1344de3 tcp: call tcp_try_undo_recovery when an RTOd TFO SYNACK is ACKed | * a08ff0544b udp: add missing WRITE_ONCE() around up->encap_rcv | * ec18d7507f selftests/bpf: Correct map_fd to data_fd in tailcalls | * 3e1d754b5d iavf: Fix promiscuous mode configuration flow messages | * 42b452960a i40e: fix potential memory leaks in i40e_remove() | * 36f0004fe5 wifi: iwlwifi: honor the enable_ini value | * 9c6269f5d1 wifi: mac80211: fix # of MSDU in A-MSDU calculation | * cee323e56c wifi: mac80211: move sched-scan stop work to wiphy work | * 0568d1e889 wifi: mac80211: move offchannel works to wiphy work | * ef41361519 wifi: mac80211: move scan work to wiphy work | * 09915293c3 wifi: mac80211: move radar detect work to wiphy work | * 697fb94e3e wifi: cfg80211: add flush functions for wiphy work | * 36aa50d578 genirq/matrix: Exclude managed interrupts in irq_matrix_allocated() | * 4f834ad034 string: Adjust strtomem() logic to allow for smaller sources | * 63f637309b pstore/platform: Add check for kstrdup | * 0a1dab4a8e drivers/clocksource/timer-ti-dm: Don't call clk_get_rate() in stop function | * dbb5581603 x86/boot: Fix incorrect startup_gdt_descr.size | * 21c5c3f95f x86/sev-es: Allow copy_from_kernel_nofault() in earlier boot | * 7807c269cb ACPI/NUMA: Apply SRAT proximity domain to entire CFMWS window | * bf178c8b9c x86/numa: Introduce numa_fill_memblks() | * dce53a017c futex: Don't include process MM in futex key on no-MMU | * 3c1a20c122 x86/srso: Fix SBPB enablement for (possible) future fixed HW | * 2351c03529 writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs | * bc8e02850a vfs: fix readahead(2) on block devices | * 8620933c3c sched: Fix stop_one_cpu_nowait() vs hotplug | * 21f99a5adb objtool: Propagate early errors | * df870d47d2 sched/uclamp: Ignore (util == 0) optimization in feec() when p_util_max = 0 | * d77530a1d4 sched/uclamp: Set max_spare_cap_cpu even if max_spare_cap is 0 | * b783919771 iov_iter, x86: Be consistent about the __user tag on copy_mc_to_user() | * 42bed989f0 sched/fair: Fix cfs_rq_is_decayed() on !SMP | * 71e3e7830b hwmon: (nct6775) Fix incorrect variable reuse in fan_div calculation * | 0d9fb52165 Merge 6.1.62 into android14-6.1-lts |\| | * fb2635ac69 Linux 6.1.62 | * 585da49ad6 ASoC: SOF: sof-pci-dev: Fix community key quirk detection | * c1c15b09f4 ALSA: hda: intel-dsp-config: Fix JSL Chromebook quirk detection | * 5c59879031 misc: pci_endpoint_test: Add deviceID for J721S2 PCIe EP device support | * 6bebd303ad tty: 8250: Add Brainboxes Oxford Semiconductor-based quirks | * 3017a17ad6 tty: 8250: Add support for Intashield IX cards | * c3444894e8 tty: 8250: Add support for additional Brainboxes PX cards | * 31ebf431ed tty: 8250: Fix up PX-803/PX-857 | * bfe9bde05f tty: 8250: Fix port count of PX-257 | * b75ee2d9d7 tty: 8250: Add support for Intashield IS-100 | * cdd260b220 tty: 8250: Add support for Brainboxes UP cards | * 8af676c698 tty: 8250: Add support for additional Brainboxes UC cards | * abcb12f319 tty: 8250: Remove UC-257 and UC-431 | * df6cfab66f tty: n_gsm: fix race condition in status line change on dead connections | * 23107989be usb: raw-gadget: properly handle interrupted requests | * e7a802447c usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() | * 6f17be2700 usb: storage: set 1.50 as the lower bcdDevice for older "Super Top" compatibility | * b25a2f2470 PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device | * 977ae4dbe2 ALSA: usb-audio: add quirk flag to enable native DSD for McIntosh devices | * 9411dbe2c6 mmap: fix error paths with dup_anon_vma() | * 21ca008c53 mm/mempolicy: fix set_mempolicy_home_node() previous VMA pointer | * 7ab62e3415 x86: KVM: SVM: always update the x2avic msr interception | * e833591265 perf evlist: Avoid frequency mode for the dummy event | * b3eed11110 power: supply: core: Use blocking_notifier_call_chain to avoid RCU complaint | * 803cc77a3a ceph_wait_on_conflict_unlink(): grab reference before dropping ->d_lock | * 9eab5008db io_uring: kiocb_done() should *not* trust ->ki_pos if ->{read,write}_iter() failed | * ed0ba37e7b powerpc/mm: Fix boot crash with FLATMEM | * 31ae7876da r8152: Check for unplug in r8153b_ups_en() / r8153c_ups_en() | * f90656fbf6 r8152: Check for unplug in rtl_phy_patch_request() | * 98567c9d84 net: chelsio: cxgb4: add an error code check in t4_load_phy_fw | * ff86d69b2e drm/amdgpu: Reserve fences for VM update | * 8e4a77ba25 platform/mellanox: mlxbf-tmfifo: Fix a warning message | * 0f2840dabf netfilter: nf_tables: audit log object reset once per table | * ec80ad4585 LoongArch: Replace kmap_atomic() with kmap_local_page() in copy_user_highpage() | * afe80b58ee LoongArch: Export symbol invalid_pud_table for modules building | * 9f9b2ec53a gpu/drm: Eliminate DRM_SCHED_PRIORITY_UNSET | * cafa191b27 drm/amdgpu: Unset context priority is now invalid | * 0eb733b53e scsi: mpt3sas: Fix in error path | * 4e000daf39 fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit() | * 50736464a7 fbdev: omapfb: fix some error codes | * 6a87b333ba drm/ttm: Reorder sys manager cleanup step | * 9951b2309e ASoC: codecs: tas2780: Fix log of failed reset via I2C. | * b7ed4aa0c2 ASoC: rt5650: fix the wrong result of key button | * 8e1a6594d7 efi: fix memory leak in krealloc failure handling | * 678edd2dfd netfilter: nfnetlink_log: silence bogus compiler warning | * c6f6a50527 spi: npcm-fiu: Fix UMA reads when dummy.nbytes == 0 | * 6a7a2d5a08 fs/ntfs3: Avoid possible memory leak | * 84aabd18c8 fs/ntfs3: Fix directory element type detection | * 3bff4bb7f9 fs/ntfs3: Fix NULL pointer dereference on error in attr_allocate_frame() | * c8cbae3cbb fs/ntfs3: Fix possible NULL-ptr-deref in ni_readpage_cmpr() | * 6fe32f79ab fs/ntfs3: Use kvmalloc instead of kmalloc(... __GFP_NOWARN) | * 92f9c7c7dd fs/ntfs3: Write immediately updated ntfs state | * fc91bb3e1b fs/ntfs3: Add ckeck in ni_update_parent() | * 768e857ac3 fbdev: atyfb: only use ioremap_uc() on i386 and ia64 | * dd6d75eb00 Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport | * c64c237275 powerpc/85xx: Fix math emulation exception | * 96c7aac8d8 dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe | * 9ef4697548 irqchip/stm32-exti: add missing DT IRQ flag translation | * 7378415da0 irqchip/riscv-intc: Mark all INTC nodes as initialized | * d3204c0fdd net: sched: cls_u32: Fix allocation size in u32_init() | * f15dbcda2c ASoC: tlv320adc3xxx: BUG: Correct micbias setting | * 30ed998604 coresight: tmc-etr: Disable warnings for allocation failures | * 6618e7a740 ASoC: simple-card: fixup asoc_simple_probe() error handling * | d3f3412122 Merge branch 'android14-6.1' into branch 'android14-6.1-lts' * | a2eefda9e3 Revert "kasan: print the original fault addr when access invalid shadow" * | 2cd386b08b Merge 6.1.61 into android14-6.1-lts |\| | * 4a61839152 Linux 6.1.61 | * 5926b0886d objtool/x86: add missing embedded_insn check | * 2afa9f7eb1 ext4: avoid overlapping preallocations due to overflow | * fcefddf3a1 ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow | * 495c4c58d6 ext4: add two helper functions extent_logical_end() and pa_logical_end() | * d022e4ea9c platform/x86: Add s2idle quirk for more Lenovo laptops | * 48ebeab0ed clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name | * 65e5a9890e sparc32: fix a braino in fault handling in csum_and_copy_..._user() | * 8b8cde8ebb perf/core: Fix potential NULL deref | * 5e232f2205 x86/cpu: Add model number for Intel Arrow Lake mobile processor | * 63cc3d5d34 x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility | * 37495846b1 nvmem: imx: correct nregs for i.MX6UL | * 116671d259 nvmem: imx: correct nregs for i.MX6SLL | * b90b8633ef nvmem: imx: correct nregs for i.MX6ULL | * cc87c73eac misc: fastrpc: Unmap only if buffer is unmapped from DSP | * 38c5faf2a9 misc: fastrpc: Clean buffers on remote invocation failures | * 7737e9384e misc: fastrpc: Free DMA handles for RPC calls with no arguments | * 1e8851b513 misc: fastrpc: Reset metadata buffer to avoid incorrect free | * 5a35fc1c00 tracing/kprobes: Fix the description of variable length arguments | * 91b95e3b4a i2c: aspeed: Fix i2c bus hang in slave read | * 11602cadc9 i2c: stm32f7: Fix PEC handling in case of SMBUS transfers | * ff0312a156 i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() | * f9a7b3b33c i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() | * 48a365ae4f i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() | * 6ec84059b5 iio: adc: xilinx-xadc: Correct temperature offset/scale for UltraScale | * e26fd381bf iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature thresholds | * cb01837e0f iio: exynos-adc: request second interupt only when touchscreen mode is used | * 7a641bc52f iio: afe: rescale: Accept only offset channels | * 9236d2ea64 io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid | * 1684909df3 kasan: print the original fault addr when access invalid shadow | * 6a5b845b57 blk-throttle: check for overflow in calculate_bytes_allowed | * bb20a245df scsi: sd: Introduce manage_shutdown device flag | * 93fa5786f9 iavf: in iavf_down, disable queues when removing the driver | * f7f660df65 drm/logicvc: Kconfig: select REGMAP and REGMAP_MMIO | * cb115b6688 i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR | * 144f93c622 gtp: fix fragmentation needed check with gso | * 039a050740 gtp: uapi: fix GTPA_MAX | * 664a358b79 tcp: fix wrong RTO timeout when received SACK reneging | * 5b100bb044 r8152: Release firmware if we have an error in probe | * ecb51a434e r8152: Cancel hw_phy_work if we have an error in probe | * 87376143df r8152: Run the unload routine if we have errors during probe | * ee73f937c5 r8152: Increase USB control msg timeout to 5000ms as per spec | * 9eb275fec6 net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg | * 7c799bc322 net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show() | * 55b01c5a84 net: ethernet: adi: adin1110: Fix uninitialized variable | * 9d2b588fae igc: Fix ambiguity in the ethtool advertising | * fa28949c72 neighbour: fix various data-races | * c166dd51b6 igb: Fix potential memory leak in igb_add_ethtool_nfc_entry | * 9a194064fa treewide: Spelling fix in comment | * b1ad0a147d i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value | * d8ac13acfb iavf: initialize waitqueues before starting watchdog_task | * 66e879507b r8169: fix the KCSAN reported data race in rtl_rx while reading desc->opts1 | * d10140916e r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1 | * 4138a02c89 r8169: fix the KCSAN reported data-race in rtl_tx() while reading tp->cur_tx | * 29f365f4c3 clk: ti: Fix missing omap5 mcbsp functional clock and aliases | * 2ba943c6d9 clk: ti: Fix missing omap4 mcbsp functional clock and aliases | * 8d8346ed39 firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels() | * df4169fc9b ARM: OMAP: timer32K: fix all kernel-doc warnings | * 6c668e2f33 drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() | * 024251bab2 drm/amd: Disable ASPM for VI w/ all Intel systems | * eded5f5261 drm/i915/pmu: Check if pmu is closed before stopping event | * 4f46c177c0 nfsd: lock_rename() needs both directories to live on the same fs | * 3262ff5826 maple_tree: add GFP_KERNEL to allocations in mas_expected_entries() | * b1b2750de1 hugetlbfs: extend hugetlb_vma_lock to private VMAs | * c9b066f692 mm/migrate: fix do_pages_move for compat pointers | * a6fbf025e3 mm/page_alloc: correct start page when guard page debug is enabled | * 0aa7b24c06 hugetlbfs: clear resv_map pointer if mmap fails | * 38d0d1c442 mm: fix vm_brk_flags() to not bail out while holding lock | * 38930ec767 arm64: dts: rockchip: Fix i2s0 pin conflict on ROCK Pi 4 boards | * 9d72254c2b arm64: dts: rockchip: Add i2s0-2ch-bus-bclk-off pins to RK3399 | * 08e6b680f2 vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE | * 1f14ded0f1 vsock/virtio: initialize the_virtio_vsock before using VQs | * 534487cc3e virtio_pci: fix the common cfg map size | * 86f467d358 virtio-crypto: handle config changed by work queue | * a9d4a1ea67 virtio-mmio: fix memory leak of vm_dev | * 19b30a8790 virtio_balloon: Fix endless deflation and inflation on arm64 | * bede8b4b51 mcb-lpc: Reallocate memory region to avoid memory overlapping | * c9efc3efe4 mcb: Return actual parsed size when reading chameleon table | * e58ab834e4 pinctrl: qcom: lpass-lpi: fix concurrent register updates | * 018b11ecba ASoC: codecs: wcd938x: fix runtime PM imbalance on remove | * 508c3353fe ASoC: codecs: wcd938x: fix regulator leaks on probe errors | * 877fc75d2c ASoC: codecs: wcd938x: Simplify with dev_err_probe | * 629ba75200 ASoC: codecs: wcd938x: Convert to platform remove callback returning void | * 1fae817d3e mmc: core: Fix error propagation for some ioctl commands | * 719c01f281 mmc: block: ioctl: do write error check for spi | * 651e66d20b mmc: core: Align to common busy polling behaviour for mmc ioctls | * d3466ce4f4 KVM: x86/pmu: Truncate counter value to allowed width on write * | a5623b3d30 ANDROID: GKI: add system_unbound_wq to some symbol lists. * | 08d790dfee Revert "audit,io_uring: io_uring openat triggers audit reference count underflow" * | ddf96fa712 Revert "tcp: allow again tcp_disconnect() when threads are waiting" * | a5f2364ea6 Revert "tcp_bpf: properly release resources on error paths" * | 904cdc97d4 Revert "ipv4/fib: send notify when delete source address routes" * | 17952d5aad Revert "Bluetooth: hci_core: Fix build warnings" * | 29756f9286 Revert "xfrm: fix a data-race in xfrm_gen_index()" * | 63eafbb6b3 Revert "perf: Disallow mis-matched inherited group reads" * | 4933ddb051 ANDROID: fix up 6.1.60 merge of hid.h into android14-6.1-lts * | 0a1364ec1f ANDROID: GKI: arm64: drop CONFIG_DEBUG_PREEMPT forced disable * | 788e35fdea Merge 6.1.60 into android14-6.1-lts |\| | * 32c9cdbe38 Linux 6.1.60 | * 7f5bb254be selftests: mptcp: join: no RST when rm subflow/addr | * 0e0123e0e5 selftests: mptcp: join: correctly check for no RST | * 300447c572 mptcp: avoid sending RST when closing the initial subflow | * c04f416730 Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name | * a429d65428 Bluetooth: hci_sock: fix slab oob read in create_monitor_event | * 46de539282 net: move altnames together with the netdevice | * c1d531aa09 phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins | * 13a45130bb phy: mapphone-mdm6600: Fix runtime PM for remove | * 7fcce3258b phy: mapphone-mdm6600: Fix runtime disable on probe | * 4eac2cf444 gpio: vf610: mask the gpio irq in system suspend and support wakeup | * 9b0f8a9dfd gpio: vf610: make irq_chip immutable | * 1f38ead73f tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols | * e9b4b72567 kallsyms: Add helper kallsyms_on_each_match_symbol() | * da359f699f kallsyms: Reduce the memory occupied by kallsyms_seqs_of_names[] | * 3918cada8f serial: 8250: omap: convert to modern PM ops | * 70a841eb4f serial: 8250: omap: Move uart_write() inside PM section | * 6df4c9dee0 drm/bridge: ti-sn65dsi86: Associate DSI device lifetime with auxiliary device | * 3d57f6ac64 ASoC: pxa: fix a memory leak in probe() | * 14a1a7beb3 gpio: vf610: set value before the direction to avoid a glitch | * 7ec224d980 platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events | * baf191abec platform/x86: asus-wmi: Only map brightness codes when using asus-wmi backlight control | * 4186c79c13 platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e | * 52d54f1d4e platform/x86: intel-uncore-freq: Conditionally create attribute for read frequency | * 8a4b575d00 platform/surface: platform_profile: Propagate error if profile registration fails | * fec769b9fd s390/cio: fix a memleak in css_alloc_subchannel | * 7241c2627c selftests/ftrace: Add new test case which checks non unique symbol | * 324c31b0e0 s390/pci: fix iommu bitmap allocation | * f6952655a6 perf: Disallow mis-matched inherited group reads | * 908c628005 USB: serial: option: add Fibocom to DELL custom modem FM101R-GL | * acced163ab USB: serial: option: add entry for Sierra EM9191 with new firmware | * 1dce40c9e6 USB: serial: option: add Telit LE910C4-WWX 0x1035 composition | * 59aa39697f HID: input: map battery system charging | * ea0e047309 KVM: x86/mmu: Stop zapping invalidated TDP MMU roots asynchronously | * 3519cee444 nvme-rdma: do not try to stop unallocated queues | * bec9cb90fe nvmet-auth: complete a request only after freeing the dhchap pointers | * 0ec655ad65 nvme-pci: add BOGUS_NID for Intel 0a54 device | * 2c0b40c310 nvme: sanitize metadata bounce buffer for reads | * a54974b007 nfs42: client needs to strip file mode's suid/sgid bit after ALLOCATE op | * 8d69b47443 ACPI: irq: Fix incorrect return value in acpi_register_gsi() | * c462bf4ef8 NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server | * ab65424d61 pNFS/flexfiles: Check the layout validity in ff_layout_mirror_prepare_stats | * 730bbbbe16 pNFS: Fix a hang in nfs4_evict_inode() | * fbd8b28fe4 Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" | * c4b7b119c5 mmc: core: Capture correct oemid-bits for eMMC cards | * 85664ad23f mmc: core: sdio: hold retuning if sdio in 1-bit mode | * aaa476a7ad mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw | * 43f588b820 mmc: sdhci-pci-gli: fix LPM negotiation so x86/S0ix SoCs can suspend | * 55c2428658 dt-bindings: mmc: sdhci-msm: correct minimum number of clocks | * 73915d26b4 mtd: physmap-core: Restore map_rom fallback | * 578687563e mtd: spinand: micron: correct bitmask for ecc status | * 8b2b755a1a mtd: rawnand: arasan: Ensure program page operations are successful | * 58277212f5 mtd: rawnand: marvell: Ensure program page operations are successful | * 250feed792 mtd: rawnand: pl353: Ensure program page operations are successful | * 5845448613 mtd: rawnand: qcom: Unmap the right resource upon probe failure | * a7f5558ec2 net/smc: fix smc clc failed issue when netdevice not in init_net | * 2efcdbef13 tcp_bpf: properly release resources on error paths | * c3e70048ac selftests: openvswitch: Add version check for pyroute2 | * a1a9e57037 Bluetooth: hci_event: Fix using memcmp when comparing keys | * 758610516f ice: Remove redundant pci_enable_pcie_error_reporting() | * ec9bc89a01 tcp: allow again tcp_disconnect() when threads are waiting | * 9dc02f41d5 net/tls: split tls_rx_reader_lock | * 76f96854aa net/mlx5e: Don't offload internal port if filter device is out device | * 107ff0034b net/mlx5: Handle fw tracer change ownership event based on MTRC | * 0aa1e83a20 net/mlx5: E-switch, register event handler before arming the event | * c21bff1c99 xfrm6: fix inet6_dev refcount underflow problem | * d91723f6ca net: xfrm: skip policies marked as dead while reinserting policies | * df2cc87f2c fprobe: Fix to ensure the number of active retprobes is not zero | * f177a579d2 fprobe: Add nr_maxactive to specify rethook_node pool size | * 0806cb1e6c fprobe: Pass entry_data to handlers | * bacf8c749a cpufreq: schedutil: Update next_freq when cpufreq_limits change | * 62733bbae1 platform/x86: touchscreen_dmi: Add info for the Positivo C4128B | * 60dc7e39df HID: nintendo: reinitialize USB Pro Controller after resuming from suspend | * ef8cdee81e HID: multitouch: Add required quirk for Synaptics 0xcd7e device | * 2a2df4f74f drm/amd/pm: add unique_id for gc 11.0.3 | * 1869638a14 btrfs: error out when reallocating block for defrag using a stale transaction | * f174c8d2c6 btrfs: error when COWing block from a root that is being deleted | * c833f1e28d btrfs: error out when COWing block using a stale transaction | * 9d99acb6a1 btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c | * c3657e5fa7 drm: panel-orientation-quirks: Add quirk for One Mix 2S | * ffbb01fe9a ipv4/fib: send notify when delete source address routes | * 52080d6edc sky2: Make sure there is at least one frag_addr available | * d63d39e7f9 regulator/core: Revert "fix kobject release warning and memory leak in regulator_register()" | * 2353f64762 wifi: cfg80211: avoid leaking stack data into trace | * 2fd88f5632 wifi: mac80211: allow transmitting EAPOL frames with tainted key | * 9285fea3a2 wifi: mac80211: work around Cisco AP 9115 VHT MPDU length | * dbbb6090c9 wifi: cfg80211: Fix 6GHz scan configuration | * a55d53ad5c Bluetooth: hci_core: Fix build warnings | * aad0760c26 Bluetooth: Avoid redundant authentication | * 7045675fc9 Bluetooth: btusb: add shutdown function for QCA6174 | * 7d823a1071 HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event | * f45752f1eb HID: logitech-hidpp: Add Bluetooth ID for the Logitech M720 Triathlon mouse | * e045b6a921 wifi: iwlwifi: Ensure ack flag is properly cleared. | * eb7ae9ed63 wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len | * b812b31696 tracing: relax trace_event_eval_update() execution with cond_resched() | * 1c859abdd7 ata: libata-eh: Fix compilation warning in ata_eh_link_report() | * e4ce5ce29a ata: libata-core: Fix compilation warning in ata_dev_config_ncq() | * 5075570a3e gpio: timberdale: Fix potential deadlock on &tgpio->lock | * d0dab9dd32 overlayfs: set ctime when setting mtime and atime | * 6133f63d4d i2c: mux: Avoid potential false error message in i2c_mux_add_adapter | * febcad3d32 btrfs: initialize start_slot in btrfs_log_prealloc_extents | * 563853bf3b btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 | * 8a4e34fe1b btrfs: prevent transaction block reserve underflow when starting transaction | * c194e184a8 fs-writeback: do not requeue a clean inode having skipped pages | * a7354d9064 ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone | * 1c972cb674 pwr-mlxbf: extend Kconfig to include gpio-mlxbf3 dependency | * 82a93c65a4 iio: adc: ad7192: Correct reference voltage | * ee1d783be5 iio: adc: ad7192: Simplify using devm_regulator_get_enable() | * 3b02dbd1cd iio: cros_ec: fix an use-after-free in cros_ec_sensors_push_data() | * 7bca0af538 iio: core: introduce iio_device_{claim|release}_buffer_mode() APIs | * 681c8a2c23 serial: 8250_omap: Fix errors with no_console_suspend | * 9424a0a456 serial: 8250: omap: Fix imprecise external abort for omap_8250_pm() | * 7067c3cf08 serial: Reduce spinlocked portion of uart_rs485_config() | * 147156b19c serial: Rename uart_change_speed() to uart_change_line_settings() | * e4df8000bd serial: Move uart_change_speed() earlier | * 4d382ba65d usb: misc: onboard_hub: add support for Microchip USB2412 USB 2.0 hub | * 8e939c21f6 usb: misc: onboard_usb_hub: add Genesys Logic GL3523 hub support | * a46907e1f6 usb: misc: onboard_usb_hub: add Genesys Logic GL852G hub support | * a2431e7e8b usb: misc: onboard_usb_hub: add Genesys Logic GL850G hub support | * 5e7275e432 selftests/mm: fix awk usage in charge_reserved_hugetlb.sh and hugetlb_reparenting_test.sh that may cause error | * 673edcffa0 net: check for altname conflicts when changing netdev's netns | * 9307f5f59a net: fix ifname in netlink ntf during netns move | * b92433493b net: avoid UAF on deleted altname | * 1cf912054a net: pktgen: Fix interface flags printing | * 2fb84f5214 net: phy: bcm7xxx: Add missing 16nm EPHY statistics | * e1512ff1ec netfilter: nf_tables: revert do not remove elements if set backend implements .abort | * c2eaa8319f netfilter: nf_tables: do not remove elements if set backend implements .abort | * 0e8cdddf01 netlink: Correct offload_xstats size | * 0697918ec0 netfilter: nft_set_rbtree: .deactivate fails if element has expired | * d9d289b78c selftests: netfilter: Run nft_audit.sh in its own netns | * 0bb1573512 selftests: openvswitch: Catch cases where the tests are killed | * e0914e5a05 neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section | * d80bc19142 net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve | * ec7393fe63 bonding: Return pointer to data after pull on skb | * 3065fabd17 net: dsa: bcm_sf2: Fix possible memory leak in bcm_sf2_mdio_register() | * 9c3d276fa8 i40e: prevent crash on probe if hw registers have invalid values | * f0ab9b0922 octeon_ep: update BQL sent bytes before ringing doorbell | * 1a68d44011 net: usb: smsc95xx: Fix an error code in smsc95xx_reset() | * 2c6451d665 ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr | * 9570bee678 tun: prevent negative ifindex | * 8b9c79c0ec tcp: Fix listen() warning with v4-mapped-v6 address. | * f534a513e8 tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb | * 4e1f3457e9 tcp: fix excessive TLP and RACK timeouts from HZ rounding | * df5ee37bf2 net: rfkill: gpio: prevent value glitch during probe | * 2a6fc637c6 net: ipv6: fix return value check in esp_remove_trailer | * 55d794cef3 net: ipv4: fix return value check in esp_remove_trailer | * 49b9165ead wifi: cfg80211: use system_unbound_wq for wiphy work | * 405dbaf049 xfrm: interface: use DEV_STATS_INC() | * b372db2b8d xfrm: fix a data-race in xfrm_gen_index() | * 3065fa2cdd xfrm: fix a data-race in xfrm_lookup_with_ifid() | * 2c7ec9e9ea qed: fix LL2 RX buffer allocation | * cc87f4db14 ASoC: codecs: wcd938x: fix resource leaks on bind errors | * 8092aed623 ASoC: codecs: wcd938x: fix unbind tear down order | * b2974b20e4 ASoC: codecs: wcd938x: drop bogus bind error handling | * 569afdedde ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors | * 0d912daab4 ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind | * d496b6638c ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx | * 086babbbf8 ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV | * bcf883e244 ALSA: hda/realtek - Fixed ASUS platform headset Mic issue | * a9519099e3 drm/mediatek: Correctly free sg_table in gem prime vmap | * add2eeda1d drm/i915: Retry gtt fault when out of fence registers | * f691ec5a54 nvmet-tcp: Fix a possible UAF in queue intialization setup | * 02322c5177 netfilter: nft_payload: fix wrong mac header matching | * 36a315c923 fs/ntfs3: fix deadlock in mark_as_free_ex | * c1f2638e31 fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea() | * fb80a28fef fs/ntfs3: Fix possible null-pointer dereference in hdr_find_e() | * d4ae85b883 mptcp: more conservative check for zero probes | * 80990979a9 tcp: check mptcp-level constraints for backlog coalescing | * f7e65c03d5 audit,io_uring: io_uring openat triggers audit reference count underflow | * a556a0df8d x86: KVM: SVM: refresh AVIC inhibition in svm_leave_nested() | * 54f030271d x86: KVM: SVM: add support for Invalid IPI Vector interception | * 482565df35 KVM: x86: Constrain guest-supported xfeatures only at KVM_GET_XSAVE{2} | * 20695711e2 x86/fpu: Allow caller to constrain xfeatures when copying to uabi buffer | * 57d0639f60 x86/sev: Check for user-space IOIO pointing to kernel space | * def94eb9a8 x86/sev: Check IOBM for IOIO exceptions from user-space | * 95ff590b80 x86/sev: Disable MMIO emulation from user mode | * 19ffa9b251 KVM: x86: Mask LVTPC when handling a PMI | * d11cfd1f30 regmap: fix NULL deref on lookup | * d7dbdbe380 nfc: nci: fix possible NULL pointer dereference in send_acknowledge() | * fb8e1608b0 btrfs: fix stripe length calculation for non-zoned data chunk allocation | * 753ef5ef4c net/smc: return the right falback reason when prefix checks fail | * d994502fdc ice: reset first in crash dump kernels | * 0f8d381ada ice: fix over-shifted variable | * bbc5c96f82 Bluetooth: avoid memcmp() out of bounds warning | * feffabdd0a Bluetooth: hci_event: Fix coding style | * 99ccf8d79b Bluetooth: vhci: Fix race when opening vhci device | * 25e5d28830 Bluetooth: Fix a refcnt underflow problem for hci_conn | * faa6366605 Bluetooth: Reject connection with the device which has same BD_ADDR | * 8d76a44d26 Bluetooth: hci_event: Ignore NULL link key | * 84523aeeea igc: Fix race condition in PTP tx code | * ff996d61dd igc: Add condition for qbv_config_change_errors counter | * cd7b19dc5f igc: Add qbv_config_change_errors counter | * 88421f4741 igc: Remove reset adapter task for i226 during disable tsn config | * 3c3418a586 igc: enable Qbv configuration for 2nd GCL | * 8420fe4dd2 igc: remove I226 Qbv BaseTime restriction | * db4677b350 lib/Kconfig.debug: do not enable DEBUG_PREEMPT by default * | 316250b759 Revert "net: macsec: indicate next pn update when offloading" * | 394fcccbe1 Revert "net: phy: mscc: macsec: reject PN update requests" * | a36206a6bb Revert "net/mlx5e: macsec: use update_pn flag instead of PN comparation" * | b0e44b2726 Revert "tcp: enforce receive buffer memory limits by allowing the tcp window to shrink" * | 3858124ea0 Merge 6.1.59 into android14-6.1-lts |\| | * 7d24402875 Linux 6.1.59 | * eb26fa974c ALSA: hda/realtek - Fixed two speaker platform | * 54357fcafa powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() | * 0afcc9d4a1 powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE | * 9a995e11b2 dmaengine: mediatek: Fix deadlock caused by synchronize_irq() | * 01b19fc662 dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq | * 5b784489c8 x86/alternatives: Disable KASAN in apply_alternatives() | * 033c0d5101 usb: cdnsp: Fixes issue with dequeuing not queued requests | * 49fbc18378 usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call | * e5588fb391 usb: gadget: udc-xilinx: replace memcpy with memcpy_toio | * 71d323072a usb: typec: ucsi: Clear EVENT_PENDING bit if ucsi_send_command fails | * 4d85f1ce6c usb: typec: altmodes/displayport: Signal hpd low when exiting mode | * bc67250859 counter: microchip-tcb-capture: Fix the use of internal GCLK logic | * 0e3953b577 counter: chrdev: fix getting array extensions | * 9f6b391b04 scsi: ufs: core: Correct clear TM error log | * 97306abdea pinctrl: avoid unsafe code pattern in find_pinctrl() | * d67b5a2b97 dma-buf: add dma_fence_timestamp helper | * cb8f1dd1b7 cgroup: Remove duplicates in cgroup v1 tasks file | * 57e7696b78 usb: typec: ucsi: Use GET_CAPABILITY attributes data to set power supply scope | * 062f16c4dd nfp: flower: avoid rmmod nfp crash issues | * 1db0724a01 mctp: perform route lookups under a RCU read-side lock | * 60c3e7a00d tee: amdtee: fix use-after-free vulnerability in amdtee_close_session | * 862aa98181 Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case | * fbfb99ac5d Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table | * 9c6a11a05b Input: xpad - add PXN V900 support | * 211f71c1c0 Input: psmouse - fix fast_reconnect function for PS/2 mode | * 2efe67c581 Input: powermate - fix use-after-free in powermate_config_complete | * 4d6c1845cb ceph: fix type promotion bug on 32bit systems | * 9f43481c0d ceph: fix incorrect revoked caps assert in ceph_fill_file_size() | * 086d885c20 libceph: use kernel_connect() | * 8ac2689502 powerpc/47x: Fix 47x syscall return crash | * 434e3522b9 thunderbolt: Restart XDomain discovery handshake after failure | * 5d206a77d4 thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding | * 0cf7ee2cc6 thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge | * 23122e0c0e mcb: remove is_added flag from mcb_device struct | * 125f495fa6 x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs | * 3863989497 perf/x86/lbr: Filter vsyscall addresses | * 55b51187d2 ksmbd: not allow to open file if delelete on close bit is set | * ac2d5e70fb ACPI: EC: Add quirk for the HP Pavilion Gaming 15-dk1xxx | * 7aac2f2c00 ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA | * f041091756 drm/amd/display: Don't set dpms_off for seamless boot | * a61d905a86 drm/amdgpu: add missing NULL check | * 0fb82afee5 drm/atomic-helper: relax unregistered connector check | * 5bab104963 arm64: dts: mediatek: mt8195-demo: update and reorder reserved memory regions | * f17e00fb0c arm64: dts: mediatek: mt8195-demo: fix the memory size to 8GB | * ff42d244b3 iio: addac: Kconfig: update ad74413r selections | * 7d4ff34b6c iio: pressure: ms5611: ms5611_prom_is_valid false negative bug | * b166ce5275 iio: pressure: dps310: Adjust Timeout Settings | * e93a7677f0 iio: admv1013: add mixer_vgate corner cases | * 8ab33ae244 iio: dac: ad3552r: Correct device IDs | * a6bd5e1653 iio: adc: imx8qxp: Fix address for command buffer registers | * 92426b1f5f iio: imu: bno055: Fix missing Kconfig dependencies | * 187939163b iio: pressure: bmp280: Fix NULL pointer exception | * 88a204cc0c usb: musb: Modify the "HWVers" register address | * fecb419c62 usb: musb: Get the musb_qh poniter after musb_giveback | * fb9895ab95 usb: hub: Guard against accesses to uninitialized BOS descriptors | * 1edbf4b285 usb: cdns3: Modify the return value of cdns_set_active () to void when CONFIG_PM_SLEEP is disabled | * 3571910368 usb: dwc3: Soft reset phy on probe for host | * ea9ae69b0e net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read | * c5bfe67d9f usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer | * f049b10aff dmaengine: stm32-mdma: set in_flight_bytes in case CRQA flag is set | * 721dbbabf1 dmaengine: stm32-mdma: use Link Address Register to compute residue | * fe15819408 dmaengine: stm32-dma: fix residue in case of MDMA chaining | * 1e3b981a25 dmaengine: stm32-dma: fix stm32_dma_prep_slave_sg in case of MDMA chaining | * 8e7dfe9c2a dmaengine: stm32-mdma: abort resume if no ongoing transfer | * 0796c53424 tcp: enforce receive buffer memory limits by allowing the tcp window to shrink | * 55027c1d99 workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() | * 853dda54ba nfc: nci: assert requested protocol is valid | * 684accd26d pinctrl: renesas: rzn1: Enable missing PINMUX | * f05befe5c4 net/smc: Fix pos miscalculation in statistics | * e4f2611f07 net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() | * ab8075d3a4 net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp | * 04753d5ae2 ixgbe: fix crash with empty VF macvlan list | * 89be6ad344 net/mlx5e: macsec: use update_pn flag instead of PN comparation | * a698195f3a net: phy: mscc: macsec: reject PN update requests | * 0d86ad068c net: macsec: indicate next pn update when offloading | * 50bce6a051 net: refine debug info in skb_checksum_help() | * 30ca523f28 bpf: Fix verifier log for async callback return values | * e1f1e3cc5b drm/vmwgfx: fix typo of sizeof argument | * 5bfc5a28b5 riscv, bpf: Sign-extend return values | * 72ae139546 riscv, bpf: Factor out emit_call for kernel and bpf context | * 30a8354602 xen-netback: use default TX queue size for vifs | * 469bef8129 mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type | * 217efe32a4 ieee802154: ca8210: Fix a potential UAF in ca8210_probe | * 6f6fa8061f ravb: Fix use-after-free issue in ravb_tx_timeout_work() | * 3f9295ad7f ravb: Fix up dma_free_coherent() call in ravb_remove() | * cfe535ee69 arm64: dts: mediatek: mt8195: Set DSU PMU status to fail | * 53c6dc71bf can: sun4i_can: Only show Kconfig if ARCH_SUNXI is set | * 789d125c0e can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior | * 881050b25b net: dsa: qca8k: fix potential MDIO bus conflict when accessing internal PHYs via management frames | * 6f901f8448 phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers | * e173d9a2e5 phy: lynx-28g: lock PHY while performing CDR lock workaround | * e52c81a9e3 phy: lynx-28g: cancel the CDR check work item on the remove path | * 5f9d0edff2 drm/msm/dp: Add newlines to debug printks | * 61b595ede9 drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow | * 3979a9e572 drm/msm/dsi: fix irq_of_parse_and_map() error checking | * 3de09684de drm/msm/dsi: skip the wait for video mode done if not applicable | * 82cb81ea96 drm/msm/dp: do not reinitialize phy unless retry during link training | * 6c18c386fd pinctrl: nuvoton: wpcm450: fix out of bounds write | * 37157830a9 ALSA: hda/realtek - ALC287 merge RTK codec with CS CS35L41 AMP | * 171b791cc2 ALSA: hda/realtek - ALC287 I2S speaker platform support | * a8b85e47e3 ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx | * e225f67d49 ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED | * 8f7bb2b77b ASoC: fsl_sai: Don't disable bitclock for i.MX8MP | * aacc508dd3 ASoC: fsl_sai: MCLK bind with TX/RX enable bit | * 8276d65cf7 ASoC: Use of_property_read_bool() for boolean properties | * 8611606c76 ASoC: Intel: soc-acpi: Add entry for sof_es8336 in MTL match table. | * 4a250b3492 ASoC: Intel: sof_sdw: add support for SKU 0B14 | * 307bbbbb94 ASoC: Intel: soc-acpi: Add entry for HDMI_In capture support in MTL match table | * 988fba279d ASoC: simple-card-utils: fixup simple_util_startup() error handling | * e3353ad7db ASoC: SOF: amd: fix for firmware reload failure after playback | * 2aa53213b6 ALSA: hda/realtek: Change model for Intel RVP board | * 4cb0984557 ALSA: usb-audio: Fix microphone sound on Nexigo webcam. | * 0f44423e35 ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset | * 3746b878ef KEYS: trusted: Remove redundant static calls usage | * b86ac71abb irqchip: renesas-rzg2l: Fix logic to clear TINT interrupt source | * d684418750 dt-bindings: interrupt-controller: renesas,rzg2l-irqc: Update description for '#interrupt-cells' property | * f4eaaa30d0 arm64: dts: qcom: sm8150: extend the size of the PDC resource | * 020958c946 net: prevent address rewrite in kernel_bind() | * 8fcdf7da9d ata: libata-scsi: Disable scsi device manage_system_start_stop | * abc918831a ASoC: amd: yc: Fix non-functional mic on Lenovo 82YM | * 12a820a992 quota: Fix slow quotaoff | * fd72ac9556 HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect | * 87aa3ca497 scsi: Do not rescan devices with a suspended queue | * 342f321af8 platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section mismatch warning | * af21c9119a platform/x86: think-lmi: Fix reference leak | * 1c8f6c7b83 perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7 | * 3aade96e0c RDMA/cxgb4: Check skb value for failure to allocate | * f175665385 drm/i915: Don't set PIPE_CONTROL_FLUSH_L3 for aux inval | * f2060a3a59 mptcp: fix delegated action races | * b67d7b1bfc net: mana: Fix TX CQE error handling * | d58a224aca Merge 6.1.58 into android14-6.1-lts |/ * adc4d740ad Linux 6.1.58 * 38fd36728f lib/test_meminit: fix off-by-one error in test_pages() * ff74bdc838 Revert "NFS: Fix error handling for O_DIRECT write scheduling" * b0cee281c4 Revert "NFS: Fix O_DIRECT locking issues" * ebf5841ac1 Revert "NFS: More O_DIRECT accounting fixes for error paths" * 506cf335d9 Revert "NFS: Use the correct commit info in nfs_join_page_group()" * e8db8b5581 Revert "NFS: More fixes for nfs_direct_write_reschedule_io()" Change-Id: Id55c4007c922e5c8a6c5220f2f615a0d9b422cde Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-01-09 16:57:00 +00:00
Matthew Wilcox (Oracle)	4ee9d9291b	mm/memory-failure: check the mapcount of the precise page ... commit c79c5a0a00a9457718056b588f312baadf44e471 upstream. A process may map only some of the pages in a folio, and might be missed if it maps the poisoned page but not the head page. Or it might be unnecessarily hit if it maps the head page, but not the poisoned page. Link: https://lkml.kernel.org/r/20231218135837.3310403-3-willy@infradead.org Fixes: 7af446a841 ("HWPOISON, hugetlb: enable error handling path for hugepage") Signed-off-by: Matthew Wilcox (Oracle) <willy@infradead.org> Cc: Dan Williams <dan.j.williams@intel.com> Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2024-01-05 15:18:39 +01:00
Matthew Wilcox (Oracle)	fb21c9780a	mm/memory-failure: cast index to loff_t before shifting it ... commit 39ebd6dce62d8cfe3864e16148927a139f11bc9a upstream. On 32-bit systems, we'll lose the top bits of index because arithmetic will be performed in unsigned long instead of unsigned long long. This affects files over 4GB in size. Link: https://lkml.kernel.org/r/20231218135837.3310403-4-willy@infradead.org Fixes: 6100e34b25 ("mm, memory_failure: Teach memory_failure() about dev_pagemap pages") Signed-off-by: Matthew Wilcox (Oracle) <willy@infradead.org> Cc: Dan Williams <dan.j.williams@intel.com> Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2024-01-05 15:18:39 +01:00
Charan Teja Kalla	be72d197b2	mm: migrate high-order folios in swap cache correctly ... commit fc346d0a70a13d52fe1c4bc49516d83a42cd7c4c upstream. Large folios occupy N consecutive entries in the swap cache instead of using multi-index entries like the page cache. However, if a large folio is re-added to the LRU list, it can be migrated. The migration code was not aware of the difference between the swap cache and the page cache and assumed that a single xas_store() would be sufficient. This leaves potentially many stale pointers to the now-migrated folio in the swap cache, which can lead to almost arbitrary data corruption in the future. This can also manifest as infinite loops with the RCU read lock held. [willy@infradead.org: modifications to the changelog & tweaked the fix] Fixes: 3417013e0d ("mm/migrate: Add folio_migrate_mapping()") Link: https://lkml.kernel.org/r/20231214045841.961776-1-willy@infradead.org Signed-off-by: Charan Teja Kalla <quic_charante@quicinc.com> Signed-off-by: Matthew Wilcox (Oracle) <willy@infradead.org> Reported-by: Charan Teja Kalla <quic_charante@quicinc.com> Closes: https://lkml.kernel.org/r/1700569840-17327-1-git-send-email-quic_charante@quicinc.com Cc: David Hildenbrand <david@redhat.com> Cc: Johannes Weiner <hannes@cmpxchg.org> Cc: Kirill A. Shutemov <kirill.shutemov@linux.intel.com> Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com> Cc: Shakeel Butt <shakeelb@google.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2024-01-05 15:18:39 +01:00
Baokun Li	a8df791470	mm/filemap: avoid buffered read/write race to read inconsistent data ... commit e2c27b803bb664748e090d99042ac128b3f88d92 upstream. The following concurrency may cause the data read to be inconsistent with the data on disk: cpu1 cpu2 ------------------------------|------------------------------ // Buffered write 2048 from 0 ext4_buffered_write_iter generic_perform_write copy_page_from_iter_atomic ext4_da_write_end ext4_da_do_write_end block_write_end __block_commit_write folio_mark_uptodate // Buffered read 4096 from 0 smp_wmb() ext4_file_read_iter set_bit(PG_uptodate, folio_flags) generic_file_read_iter i_size_write // 2048 filemap_read unlock_page(page) filemap_get_pages filemap_get_read_batch folio_test_uptodate(folio) ret = test_bit(PG_uptodate, folio_flags) if (ret) smp_rmb(); // Ensure that the data in page 0-2048 is up-to-date. // New buffered write 2048 from 2048 ext4_buffered_write_iter generic_perform_write copy_page_from_iter_atomic ext4_da_write_end ext4_da_do_write_end block_write_end __block_commit_write folio_mark_uptodate smp_wmb() set_bit(PG_uptodate, folio_flags) i_size_write // 4096 unlock_page(page) isize = i_size_read(inode) // 4096 // Read the latest isize 4096, but without smp_rmb(), there may be // Load-Load disorder resulting in the data in the 2048-4096 range // in the page is not up-to-date. copy_page_to_iter // copyout 4096 In the concurrency above, we read the updated i_size, but there is no read barrier to ensure that the data in the page is the same as the i_size at this point, so we may copy the unsynchronized page out. Hence adding the missing read memory barrier to fix this. This is a Load-Load reordering issue, which only occurs on some weak mem-ordering architectures (e.g. ARM64, ALPHA), but not on strong mem-ordering architectures (e.g. X86). And theoretically the problem doesn't only happen on ext4, filesystems that call filemap_read() but don't hold inode lock (e.g. btrfs, f2fs, ubifs ...) will have this problem, while filesystems with inode lock (e.g. xfs, nfs) won't have this problem. Link: https://lkml.kernel.org/r/20231213062324.739009-1-libaokun1@huawei.com Signed-off-by: Baokun Li <libaokun1@huawei.com> Reviewed-by: Jan Kara <jack@suse.cz> Cc: Andreas Dilger <adilger.kernel@dilger.ca> Cc: Christoph Hellwig <hch@infradead.org> Cc: Dave Chinner <david@fromorbit.com> Cc: Matthew Wilcox (Oracle) <willy@infradead.org> Cc: Ritesh Harjani (IBM) <ritesh.list@gmail.com> Cc: Theodore Ts'o <tytso@mit.edu> Cc: yangerkun <yangerkun@huawei.com> Cc: Yu Kuai <yukuai3@huawei.com> Cc: Zhang Yi <yi.zhang@huawei.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2024-01-05 15:18:39 +01:00
Greg Kroah-Hartman	c9b484c69d	This is the 6.1.68 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmV57F0ACgkQONu9yGCS aT5Ihg//f5xvyjEEbZyE7tFaBBgx8ceQCtteRyi+Jw3Hy65/9neETij0t97IhG37 I89TIAddzNIl51ifl8UYZMWI780HbnW1YdbVLMElbngbmT5rHzIsGpAVCC+SDmMK NPWXrqWIw6yTVSbTwqKIqOLlEiLxGjdWnPxjoMXBVyje+EcmANBe+fe9qkLq98XC ZgzrRZyriS8QLMMscy/GmdxIyC32nxebdHDwwE6qgYM8GWNfqLLektX798VGFhra ByR9bvsJ0PD5m9siCGcx37lVusJDLMjJp4FtMIFTrH63i0sMQm7HKiggJmbCm4lH Sgbo4iwvSVa2xf1glPJagE9tiah5b0feLqgrQf/ONO2PdCjcERN47472IcQgRvQ+ SDYKScZBSp1/Jd063dHiK/u79uxEBFEdisAkPG2MstjCySEDuhvDrV5R0iKDpQBP y2FXb4RArqZFrGwS4Zfxx/EQnj3MYJ11a4AE5I0yUGIj7vrFdddayBDBVdwhog84 QhHPH0F/eC/zSMATYSQSCZTTSZ2UoR8NODXyOryoH5tmXlgxXWKq1oFi5nUnysoP SkGDT0dg+kbReQNA+eyj5qTS4lzincIyP2B4Ple9d75zpx1UENlqVm1xvWLccyFt 3eV/XNRg8dAapsbqvEtW+iev6izutWgcG6p1hToObnbg5uHy6fI= =+iTJ -----END PGP SIGNATURE----- Merge 6.1.68 into android14-6.1-lts Changes in 6.1.68 vdpa/mlx5: preserve CVQ vringh index hrtimers: Push pending hrtimers away from outgoing CPU earlier i2c: designware: Fix corrupted memory seen in the ISR netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test zstd: Fix array-index-out-of-bounds UBSAN warning tg3: Move the [rt]x_dropped counters to tg3_napi tg3: Increment tx_dropped in tg3_tso_bug() kconfig: fix memory leak from range properties drm/amdgpu: correct chunk_ptr to a pointer to chunk. x86: Introduce ia32_enabled() x86/coco: Disable 32-bit emulation by default on TDX and SEV x86/entry: Convert INT 0x80 emulation to IDTENTRY x86/entry: Do not allow external 0x80 interrupts x86/tdx: Allow 32-bit emulation by default dt: dt-extract-compatibles: Handle cfile arguments in generator function dt: dt-extract-compatibles: Don't follow symlinks when walking tree platform/x86: asus-wmi: Move i8042 filter install to shared asus-wmi code of: dynamic: Fix of_reconfig_get_state_change() return value documentation platform/x86: wmi: Skip blocks with zero instances ipv6: fix potential NULL deref in fib6_add() octeontx2-pf: Add missing mutex lock in otx2_get_pauseparam octeontx2-af: Check return value of nix_get_nixlf before using nixlf hv_netvsc: rndis_filter needs to select NLS r8152: Rename RTL8152_UNPLUG to RTL8152_INACCESSIBLE r8152: Add RTL8152_INACCESSIBLE checks to more loops r8152: Add RTL8152_INACCESSIBLE to r8156b_wait_loading_flash() r8152: Add RTL8152_INACCESSIBLE to r8153_pre_firmware_1() r8152: Add RTL8152_INACCESSIBLE to r8153_aldps_en() mlxbf-bootctl: correctly identify secure boot with development keys platform/mellanox: Add null pointer checks for devm_kasprintf() platform/mellanox: Check devm_hwmon_device_register_with_groups() return value arcnet: restoring support for multiple Sohard Arcnet cards octeontx2-pf: consider both Rx and Tx packet stats for adaptive interrupt coalescing net: stmmac: fix FPE events losing xsk: Skip polling event check for unbound socket octeontx2-af: fix a use-after-free in rvu_npa_register_reporters i40e: Fix unexpected MFS warning message iavf: validate tx_coalesce_usecs even if rx_coalesce_usecs is zero net: bnxt: fix a potential use-after-free in bnxt_init_tc tcp: fix mid stream window clamp. ionic: fix snprintf format length warning ionic: Fix dim work handling in split interrupt mode ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit() net: atlantic: Fix NULL dereference of skb pointer in net: hns: fix wrong head when modify the tx feature when sending packets net: hns: fix fake link up on xge port octeontx2-af: Adjust Tx credits when MCS external bypass is disabled octeontx2-af: Fix mcs sa cam entries size octeontx2-af: Fix mcs stats register address octeontx2-af: Add missing mcs flr handler call octeontx2-af: Update Tx link register range dt-bindings: interrupt-controller: Allow #power-domain-cells netfilter: nft_exthdr: add boolean DCCP option matching netfilter: nf_tables: fix 'exist' matching on bigendian arches netfilter: nf_tables: bail out on mismatching dynset and set expressions netfilter: nf_tables: validate family when identifying table via handle netfilter: xt_owner: Fix for unsafe access of sk->sk_socket tcp: do not accept ACK of bytes we never sent bpf: sockmap, updating the sg structure should also update curr psample: Require 'CAP_NET_ADMIN' when joining "packets" group drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group mm/damon/sysfs: eliminate potential uninitialized variable warning tee: optee: Fix supplicant based device enumeration RDMA/hns: Fix unnecessary err return when using invalid congest control algorithm RDMA/irdma: Do not modify to SQD on error RDMA/irdma: Add wait for suspend on SQD arm64: dts: rockchip: Expand reg size of vdec node for RK3328 arm64: dts: rockchip: Expand reg size of vdec node for RK3399 ASoC: fsl_sai: Fix no frame sync clock issue on i.MX8MP RDMA/rtrs-srv: Do not unconditionally enable irq RDMA/rtrs-clt: Start hb after path_up RDMA/rtrs-srv: Check return values while processing info request RDMA/rtrs-srv: Free srv_mr iu only when always_invalidate is true RDMA/rtrs-srv: Destroy path files after making sure no IOs in-flight RDMA/rtrs-clt: Fix the max_send_wr setting RDMA/rtrs-clt: Remove the warnings for req in_use check RDMA/bnxt_re: Correct module description string RDMA/irdma: Refactor error handling in create CQP RDMA/irdma: Fix UAF in irdma_sc_ccq_get_cqe_info() hwmon: (acpi_power_meter) Fix 4.29 MW bug ASoC: codecs: lpass-tx-macro: set active_decimator correct default value hwmon: (nzxt-kraken2) Fix error handling path in kraken2_probe() ASoC: wm_adsp: fix memleak in wm_adsp_buffer_populate RDMA/core: Fix umem iterator when PAGE_SIZE is greater then HCA pgsz RDMA/irdma: Avoid free the non-cqp_request scratch drm/bridge: tc358768: select CONFIG_VIDEOMODE_HELPERS arm64: dts: imx8mq: drop usb3-resume-missing-cas from usb arm64: dts: imx8mp: imx8mq: Add parkmode-disable-ss-quirk on DWC3 ARM: dts: imx6ul-pico: Describe the Ethernet PHY clock tracing: Fix a warning when allocating buffered events fails scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() ARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init ARM: dts: imx7: Declare timers compatible with fsl,imx6dl-gpt ARM: dts: imx28-xea: Pass the 'model' property riscv: fix misaligned access handling of C.SWSP and C.SDSP md: introduce md_ro_state md: don't leave 'MD_RECOVERY_FROZEN' in error path of md_set_readonly() iommu: Avoid more races around device probe rethook: Use __rcu pointer for rethook::handler kprobes: consistent rcu api usage for kretprobe holder ASoC: amd: yc: Fix non-functional mic on ASUS E1504FA io_uring/af_unix: disable sending io_uring over sockets nvme-pci: Add sleep quirk for Kingston drives io_uring: fix mutex_unlock with unreferenced ctx ALSA: usb-audio: Add Pioneer DJM-450 mixer controls ALSA: pcm: fix out-of-bounds in snd_pcm_state_names ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5 ALSA: hda/realtek: add new Framework laptop to quirks ALSA: hda/realtek: Add Framework laptop 16 to quirks ring-buffer: Test last update in 32bit version of __rb_time_read() nilfs2: fix missing error check for sb_set_blocksize call nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() cgroup_freezer: cgroup_freezing: Check if not frozen checkstack: fix printed address tracing: Always update snapshot buffer size tracing: Disable snapshot buffer when stopping instance tracers tracing: Fix incomplete locking when disabling buffered events tracing: Fix a possible race when disabling buffered events packet: Move reference count in packet_sock to atomic_long_t r8169: fix rtl8125b PAUSE frames blasting when suspended regmap: fix bogus error on regcache_sync success platform/surface: aggregator: fix recv_buf() return value hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write mm: fix oops when filemap_map_pmd() without prealloc_pte powercap: DTPM: Fix missing cpufreq_cpu_put() calls md/raid6: use valid sector values to determine if an I/O should wait on the reshape arm64: dts: mediatek: mt7622: fix memory node warning check arm64: dts: mediatek: mt8183-kukui-jacuzzi: fix dsi unnecessary cells properties arm64: dts: mediatek: cherry: Fix interrupt cells for MT6360 on I2C7 arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names arm64: dts: mediatek: mt8195: Fix PM suspend/resume with venc clocks arm64: dts: mediatek: mt8183: Fix unit address for scp reserved memory arm64: dts: mediatek: mt8183: Move thermal-zones to the root node arm64: dts: mediatek: mt8183-evb: Fix unit_address_vs_reg warning on ntc binder: fix memory leaks of spam and pending work coresight: etm4x: Make etm4_remove_dev() return void coresight: etm4x: Remove bogous __exit annotation for some functions hwtracing: hisi_ptt: Add dummy callback pmu::read() misc: mei: client.c: return negative error code in mei_cl_write misc: mei: client.c: fix problem of return '-EOVERFLOW' in mei_cl_write LoongArch: BPF: Don't sign extend memory load operand LoongArch: BPF: Don't sign extend function return value ring-buffer: Force absolute timestamp on discard of event tracing: Set actual size after ring buffer resize tracing: Stop current tracer when resizing buffer parisc: Reduce size of the bug_table on 64-bit kernel by half parisc: Fix asm operand number out of range build error in bug table arm64: dts: mediatek: add missing space before { arm64: dts: mt8183: kukui: Fix underscores in node names perf: Fix perf_event_validate_size() x86/sev: Fix kernel crash due to late update to read-only ghcb_version gpiolib: sysfs: Fix error handling on failed export drm/amdgpu: fix memory overflow in the IB test drm/amd/amdgpu: Fix warnings in amdgpu/amdgpu_display.c drm/amdgpu: correct the amdgpu runtime dereference usage count drm/amdgpu: Update ras eeprom support for smu v13_0_0 and v13_0_10 drm/amdgpu: Add EEPROM I2C address support for ip discovery drm/amdgpu: Remove redundant I2C EEPROM address drm/amdgpu: Decouple RAS EEPROM addresses from chips drm/amdgpu: Add support for RAS table at 0x40000 drm/amdgpu: Remove second moot switch to set EEPROM I2C address drm/amdgpu: Return from switch early for EEPROM I2C address drm/amdgpu: simplify amdgpu_ras_eeprom.c drm/amdgpu: Add I2C EEPROM support on smu v13_0_6 drm/amdgpu: Update EEPROM I2C address for smu v13_0_0 usb: gadget: f_hid: fix report descriptor allocation serial: 8250_dw: Add ACPI ID for Granite Rapids-D UART parport: Add support for Brainboxes IX/UC/PX parallel cards cifs: Fix non-availability of dedup breaking generic/304 Revert "xhci: Loosen RPM as default policy to cover for AMD xHC 1.1" smb: client: fix potential NULL deref in parse_dfs_referrals() usb: typec: class: fix typec_altmode_put_partner to put plugs ARM: PL011: Fix DMA support serial: sc16is7xx: address RX timeout interrupt errata serial: 8250: 8250_omap: Clear UART_HAS_RHR_IT_DIS bit serial: 8250: 8250_omap: Do not start RX DMA on THRI interrupt serial: 8250_omap: Add earlycon support for the AM654 UART controller devcoredump: Send uevent once devcd is ready x86/CPU/AMD: Check vendor in the AMD microcode callback USB: gadget: core: adjust uevent timing on gadget unbind cifs: Fix flushing, invalidation and file size with copy_file_range() cifs: Fix flushing, invalidation and file size with FICLONE MIPS: kernel: Clear FPU states when setting up kernel threads KVM: s390/mm: Properly reset no-dat KVM: SVM: Update EFER software model on CR0 trap for SEV-ES MIPS: Loongson64: Reserve vgabios memory on boot MIPS: Loongson64: Handle more memory types passed from firmware MIPS: Loongson64: Enable DMA noncoherent support netfilter: nft_set_pipapo: skip inactive elements during set walk riscv: Kconfig: Add select ARM_AMBA to SOC_STARFIVE drm/i915/display: Drop check for doublescan mode in modevalid drm/i915/lvds: Use REG_BIT() & co. drm/i915/sdvo: stop caching has_hdmi_monitor in struct intel_sdvo drm/i915: Skip some timing checks on BXT/GLK DSI transcoders Linux 6.1.68 Change-Id: I0a824071a80b24dc4a2e0077f305b7cac42235b8 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-01-05 08:40:52 +00:00
Peng Zhang	ed9b660cd1	BACKPORT: FROMGIT fork: use __mt_dup() to duplicate maple tree in dup_mmap() ... In dup_mmap(), using __mt_dup() to duplicate the old maple tree and then directly replacing the entries of VMAs in the new maple tree can result in better performance. __mt_dup() uses DFS pre-order to duplicate the maple tree, so it is efficient. The average time complexity of __mt_dup() is O(n), where n is the number of VMAs. The proof of the time complexity is provided in the commit log that introduces __mt_dup(). After duplicating the maple tree, each element is traversed and replaced (ignoring the cases of deletion, which are rare). Since it is only a replacement operation for each element, this process is also O(n). Analyzing the exact time complexity of the previous algorithm is challenging because each insertion can involve appending to a node, pushing data to adjacent nodes, or even splitting nodes. The frequency of each action is difficult to calculate. The worst-case scenario for a single insertion is when the tree undergoes splitting at every level. If we consider each insertion as the worst-case scenario, we can determine that the upper bound of the time complexity is O(n*log(n)), although this is a loose upper bound. However, based on the test data, it appears that the actual time complexity is likely to be O(n). As the entire maple tree is duplicated using __mt_dup(), if dup_mmap() fails, there will be a portion of VMAs that have not been duplicated in the maple tree. To handle this, we mark the failure point with XA_ZERO_ENTRY. In exit_mmap(), if this marker is encountered, stop releasing VMAs that have not been duplicated after this point. There is a "spawn" in byte-unixbench[1], which can be used to test the performance of fork(). I modified it slightly to make it work with different number of VMAs. Below are the test results. The first row shows the number of VMAs. The second and third rows show the number of fork() calls per ten seconds, corresponding to next-20231006 and the this patchset, respectively. The test results were obtained with CPU binding to avoid scheduler load balancing that could cause unstable results. There are still some fluctuations in the test results, but at least they are better than the original performance. 21 121 221 421 821 1621 3221 6421 12821 25621 51221 112100 76261 54227 34035 20195 11112 6017 3161 1606 802 393 114558 83067 65008 45824 28751 16072 8922 4747 2436 1233 599 2.19% 8.92% 19.88% 34.64% 42.37% 44.64% 48.28% 50.17% 51.68% 53.74% 52.42% [1] https://github.com/kdlucas/byte-unixbench/tree/master Link: https://lkml.kernel.org/r/20231027033845.90608-11-zhangpeng.00@bytedance.com Signed-off-by: Peng Zhang <zhangpeng.00@bytedance.com> Suggested-by: Liam R. Howlett <Liam.Howlett@oracle.com> Reviewed-by: Liam R. Howlett <Liam.Howlett@oracle.com> Cc: Christian Brauner <brauner@kernel.org> Cc: Jonathan Corbet <corbet@lwn.net> Cc: Mateusz Guzik <mjguzik@gmail.com> Cc: Mathieu Desnoyers <mathieu.desnoyers@efficios.com> Cc: Matthew Wilcox <willy@infradead.org> Cc: Michael S. Tsirkin <mst@redhat.com> Cc: Mike Christie <michael.christie@oracle.com> Cc: Nicholas Piggin <npiggin@gmail.com> Cc: Peter Zijlstra <peterz@infradead.org> Cc: Suren Baghdasaryan <surenb@google.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit d2406291483775ecddaee929231a39c70c08fda2 https://git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm mm-unstable) [surenb: open-coded vma_iter_clear_gfp(), vma_iter_bulk_store(); replaced vma_next() with mas_find()] Bug: 308042511 Change-Id: I42d6620e8ce6a0b16211c231a9b72ba16ba9c0d2 Signed-off-by: Suren Baghdasaryan <surenb@google.com>	2024-01-04 22:44:38 +00:00
jianzhou	7c8fe0d3ae	Merge keystone/android14-6.1-keystone-qcom-release.6.1.57 (97abf17) into qcom-6.1 ... * refs/heads/tmp-97abf17: ANDROID: GKI: Update symbol list for mtk ANDROID: Update the ABI symbol list ANDROID: GKI: Update symbol list for mtk ANDROID: mm: lru_cache_disable skips lru cache drainnig ANDROID: mm: cma: introduce __cma_alloc API ANDROID: Update the ABI representation BACKPORT: fscrypt: support crypto data unit size less than filesystem block size UPSTREAM: netfilter: nf_tables: remove catchall element in GC sync path ANDROID: GKI: Update oplus symbol list ANDROID: vendor_hooks: export tracepoint symbol trace_mm_vmscan_kswapd_wake BACKPORT: HID: input: map battery system charging ANDROID: fuse-bpf: Ignore readaheads unless they go to the daemon FROMGIT: freezer,sched: clean saved_state when restoring it during thaw FROMGIT: freezer,sched: do not restore saved_state of a thawed task FROMGIT: f2fs: skip adding a discard command if exists UPSTREAM: f2fs: clean up zones when not successfully unmounted UPSTREAM: f2fs: use finish zone command when closing a zone UPSTREAM: f2fs: check zone write pointer points to the end of zone UPSTREAM: f2fs: close unused open zones while mounting UPSTREAM: f2fs: maintain six open zones for zoned devices ANDROID: update symbol for unisoc whitelist ANDROID: vendor_hooks: mm: add hook to count the number pages allocated for each slab ANDROID: Update the ABI symbol list ANDROID: sched: Add trace_android_rvh_set_user_nice_locked UPSTREAM: ASoC: soc-compress: Fix deadlock in soc_compr_open_fe BACKPORT: ASoC: add snd_soc_card_mutex_lock/unlock() BACKPORT: ASoC: expand snd_soc_dpcm_mutex_lock/unlock() BACKPORT: ASoC: expand snd_soc_dapm_mutex_lock/unlock() ANDROID: GKI: Update symbol list for mtk ANDROID: Update the ABI symbol list ANDROID: sched: Add vendor hook for update_load_sum FROMGIT: freezer,sched: clean saved_state when restoring it during thaw FROMGIT: freezer,sched: do not restore saved_state of a thawed task ANDROID: GKI: add allowed list for Exynosauto SoC ANDROID: KVM: arm64: pkvm_module_ops documentation ANDROID: Update the ABI symbol list UPSTREAM: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() ANDROID: GKI: Update oplus symbol list UPSTREAM: drm/qxl: fix UAF on handle creation FROMGIT: usb:gadget:uvc Do not use worker thread to pump isoc usb requests FROMGIT: usb: gadget: uvc: Fix use-after-free for inflight usb_requests FROMGIT: usb: gadget: uvc: move video disable logic to its own function FROMGIT: usb: gadget: uvc: Allocate uvc_requests one at a time FROMGIT: usb: gadget: uvc: prevent use of disabled endpoint UPSTREAM: drm/fourcc: Add NV20 and NV30 YUV formats FROMLIST: virt: geniezone: Add memory relinquish support FROMGIT: Input: uinput - allow injecting event times UPSTREAM: PM: hibernate: Fix copying the zero bitmap to safe pages UPSTREAM: PM: hibernate: don't store zero pages in the image file UPSTREAM: PM: hibernate: Complain about memory map mismatches during resume FROMLIST: devcoredump: Send uevent once devcd is ready FROMLIST: iommu: Avoid more races around device probe ANDROID: Update the ABI symbol list FROMLIST: ufs: core: clear cmd if abort success in mcq mode BACKPORT: wifi: cfg80211: Allow AP/P2PGO to indicate port authorization to peer STA/P2PClient BACKPORT: wifi: cfg80211: OWE DH IE handling offload ANDROID: KVM: arm64: mount procfs for pKVM module loading ANDROID: GKI: Update symbol list for mtk ANDROID: fuse-bpf: Add NULL pointer check in fuse_release_in UPSTREAM: serial: 8250_port: Check IRQ data before use ANDROID: KVM: arm64: Fix error path in pkvm_mem_abort() ANDROID: abi_gki_aarch64_qcom: Update symbol list ANDROID: GKI: add allowed list for Exynosauto SoC ANDROID: Update the ABI symbol list ANDROID: sched: Add vendor hook for util_fits_cpu ANDROID: update symbol for unisoc vendor_hooks ANDROID: vendor_hooks: mm: add hook to count the number pages allocated for each slab UPSTREAM: usb: gadget: udc: Handle gadget_connect failure during bind operation ANDROID: Update the ABI symbol list ANDROID: softirq: Add EXPORT_SYMBOL_GPL for softirq and tasklet ANDROID: mm/mempolicy.c fix up conversion to queue_folios_pte_range Revert "net: add sysctl accept_ra_min_rtr_lft" Revert "net: change accept_ra_min_rtr_lft to affect all RA lifetimes" Revert "net: release reference to inet6_dev pointer" Revert "ata,scsi: do not issue START STOP UNIT on resume" Revert "scsi: sd: Differentiate system and runtime start/stop management" Revert "scsi: sd: Do not issue commands to suspended disks on shutdown" Revert "wifi: cfg80211: fix cqm_config access race" Revert "netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp" Revert "arm64: errata: Add Cortex-A520 speculative unprivileged load workaround" Revert "video/aperture: Only remove sysfb on the default vga pci device" Revert "drm/ast: Use drm_aperture_remove_conflicting_pci_framebuffers" Revert "fbdev/radeon: use pci aperture helpers" Revert "drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers" Revert "drm/aperture: Remove primary argument" Revert "video/aperture: Only kick vgacon when the pdev is decoding vga" Revert "video/aperture: Move vga handling to pci function" Revert "fs/nls: make load_nls() take a const parameter" Revert "dm: fix a race condition in retrieve_deps" ANDROID: GKI: db845c: add new dma_buf symbols to list UPSTREAM: lib/test_meminit: fix off-by-one error in test_pages() ANDROID: GKI: add guards for an include file in net/ethtool/ioctl.c ANDROID: GKI: update .stg due to internal zswap and tracing changes ANDROID: GKI: db845c: add pcie_capability_clear_and_set_word to the symbol list ANDROID: GKI: sched: put back the cpu_capacity_inverted variable Revert "ipv4: fix data-races around inet->inet_id" Revert "usb: typec: bus: verify partner exists in typec_altmode_attention" Revert "scsi: core: Use 32-bit hostnum in scsi_host_lookup()" Revert "media: cec: core: add adap_nb_transmit_canceled() callback" Revert "media: cec: core: add adap_unconfigured() callback" Revert "tracing: Introduce pipe_cpumask to avoid race on trace_pipes" Revert "tracing: Zero the pipe cpumask on alloc to avoid spurious -EBUSY" Revert "PCI: Allow drivers to request exclusive config regions" Revert "PCI: Add locking to RMW PCI Express Capability Register accessors" Revert "crypto: api - Use work queue in crypto_destroy_instance" Revert "media: uapi: HEVC: Add num_delta_pocs_of_ref_rps_idx field" Linux 6.1.57 xen/events: replace evtchn_rwlock with RCU ipv6: remove one read_lock()/read_unlock() pair in rt6_check_neigh() btrfs: file_remove_privs needs an exclusive lock in direct io write netlink: remove the flex array from struct nlmsghdr btrfs: fix fscrypt name leak after failure to join log transaction btrfs: fix an error handling path in btrfs_rename() vrf: Fix lockdep splat in output path ipv6: remove nexthop_fib6_nh_bh() parisc: Restore __ldcw_align for PA-RISC 2.0 processors ksmbd: fix uaf in smb20_oplock_break_ack ksmbd: fix race condition between session lookup and expire x86/sev: Use the GHCB protocol when available for SNP CPUID requests RDMA/mlx5: Fix NULL string error RDMA/mlx5: Fix mutex unlocking on error flow for steering anchor creation RDMA/siw: Fix connection failure handling RDMA/srp: Do not call scsi_done() from srp_abort() RDMA/uverbs: Fix typo of sizeof argument RDMA/cma: Fix truncation compilation warning in make_cma_ports RDMA/cma: Initialize ib_sa_multicast structure to 0 when join gpio: pxa: disable pinctrl calls for MMP_GPIO gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() IB/mlx4: Fix the size of a buffer in add_port_entries() of: dynamic: Fix potential memory leak in of_changeset_action() RDMA/core: Require admin capabilities to set system parameters dm zoned: free dmz->ddev array in dmz_put_zoned_devices parisc: Fix crash with nr_cpus=1 option smb: use kernel_connect() and kernel_bind() intel_idle: add Emerald Rapids Xeon support HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit HID: sony: remove duplicate NULL check before calling usb_free_urb() netlink: annotate data-races around sk->sk_err netlink: Fix potential skb memleak in netlink_ack netlink: split up copies in the ack construction sctp: update hb timer immediately after users change hb_interval sctp: update transport state when processing a dupcook packet tcp: fix delayed ACKs for MSS boundary condition tcp: fix quick-ack counting to count actual ACKs of new data tipc: fix a potential deadlock on &tx->lock net: stmmac: dwmac-stm32: fix resume on STM32 MCU ipv4: Set offload_failed flag in fibmatch results netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure netfilter: nf_tables: Deduplicate nft_register_obj audit logs selftests: netfilter: Extend nft_audit.sh selftests: netfilter: Test nf_tables audit logging netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp ibmveth: Remove condition to recompute TCP header checksum. net: ethernet: ti: am65-cpsw: Fix error code in am65_cpsw_nuss_init_tx_chns() net: nfc: llcp: Add lock when modifying device list net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg ipv6: tcp: add a missing nf_reset_ct() in 3WHS handling net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent ptp: ocp: Fix error handling in ptp_ocp_device_init ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() neighbour: fix data-races around n->output neighbour: switch to standard rcu, instead of rcu_bh neighbour: annotate lockless accesses to n->nud_state bpf: Add BPF_FIB_LOOKUP_SKIP_NEIGH for bpf_fib_lookup net: fix possible store tearing in neigh_periodic_work() modpost: add missing else to the "of" check bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets bpf, sockmap: Do not inc copied_seq when PEEK flag set bpf: tcp_read_skb needs to pop skb regardless of seq NFSv4: Fix a nfs4_state_manager() race ima: rework CONFIG_IMA dependency block scsi: target: core: Fix deadlock due to recursive locking ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig regulator/core: regulator_register: set device->class earlier iommu/mediatek: Fix share pgtable for iova over 4GB perf/x86/amd: Do not WARN() on every IRQ wifi: mac80211: fix potential key use-after-free regmap: rbtree: Fix wrong register marked as in-cache when creating new node perf/x86/amd/core: Fix overflow reset on hotplug wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close() Bluetooth: ISO: Fix handling of listen for unicast Bluetooth: Delete unused hci_req_prepare_suspend() declaration regulator: mt6358: split ops for buck and linear range LDO regulators regulator: mt6358: Use linear voltage helpers for single range regulators regulator: mt6358: Drop *_SSHUB regulators bpf: Fix tr dereferencing leds: Drop BUG_ON check for LED_COLOR_ID_MULTI wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet wifi: cfg80211: add missing kernel-doc for cqm_rssi_work wifi: cfg80211: fix cqm_config access race wifi: cfg80211: add a work abstraction with special semantics wifi: cfg80211: move wowlan disable under locks wifi: cfg80211: hold wiphy lock in auto-disconnect wifi: iwlwifi: mvm: Fix a memory corruption issue wifi: iwlwifi: dbg_ini: fix structure packing erofs: fix memory leak of LZMA global compressed deduplication ubi: Refuse attaching if mtd's erasesize is 0 HID: sony: Fix a potential memory leak in sony_probe() arm64: errata: Add Cortex-A520 speculative unprivileged load workaround arm64: Add Cortex-A520 CPU part definition drm/amd: Fix logic error in sienna_cichlid_update_pcie_parameters() drm/amd: Fix detection of _PR3 on the PCIe root port net: prevent rewrite of msg_name in sock_sendmsg() net: replace calls to sock->ops->connect() with kernel_connect() PCI: qcom: Fix IPQ8074 enumeration md/raid5: release batch_last before waiting for another stripe_head wifi: mwifiex: Fix tlv_buf_left calculation Bluetooth: hci_sync: Fix handling of HCI_QUIRK_STRICT_DUPLICATE_FILTER Bluetooth: hci_codec: Fix leaking content of local_codecs qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info mptcp: userspace pm allow creating id 0 subflow net: ethernet: mediatek: disable irq before schedule napi vringh: don't use vringh_kiov_advance() in vringh_iov_xfer() iommu/vt-d: Avoid memory allocation in iommu_suspend() scsi: zfcp: Fix a double put in zfcp_port_enqueue() i40e: fix the wrong PTP frequency calculation hwmon: (nzxt-smart2) add another USB ID hwmon: (nzxt-smart2) Add device id block: fix use-after-free of q->q_usage_counter rbd: take header_rwsem in rbd_dev_refresh() only when updating rbd: decouple parent info read-in from updating rbd_dev rbd: decouple header read-in from updating rbd_dev->header rbd: move rbd_dev_refresh() definition iommu/arm-smmu-v3: Avoid constructing invalid range commands iommu/arm-smmu-v3: Set TTL invalidation hint better drm/amd/display: Adjust the MST resume flow arm64: cpufeature: Fix CLRBHB and BC detection net: release reference to inet6_dev pointer net: change accept_ra_min_rtr_lft to affect all RA lifetimes net: add sysctl accept_ra_min_rtr_lft arm64: Avoid repeated AA64MMFR1_EL1 register read on pagefault path Revert "NFSv4: Retry LOCK on OLD_STATEID during delegation return" btrfs: use struct fscrypt_str instead of struct qstr btrfs: setup qstr from dentrys using fscrypt helper btrfs: use struct qstr instead of name and namelen pairs ring-buffer: Fix bytes info in per_cpu buffer stats ring-buffer: remove obsolete comment for free_buffer_page() mm: page_alloc: fix CMA and HIGHATOMIC landing on the wrong buddy list mm/page_alloc: leave IRQs enabled for per-cpu page allocations mm/page_alloc: always remove pages from temporary list mm: mempolicy: keep VMA walk if both MPOL_MF_STRICT and MPOL_MF_MOVE are specified mm/mempolicy: convert migrate_page_add() to migrate_folio_add() mm/mempolicy: convert queue_pages_pte_range() to queue_folios_pte_range() mm/mempolicy: convert queue_pages_pmd() to queue_folios_pmd() mm/memory: add vm_normal_folio() NFSv4: Fix a state manager thread deadlock regression NFS: rename nfs_client_kset to nfs_kset NFS: Cleanup unused rpc_clnt variable ata: libata-scsi: Fix delayed scsi_rescan_device() execution scsi: Do not attempt to rescan suspended devices scsi: core: Improve type safety of scsi_rescan_device() scsi: sd: Do not issue commands to suspended disks on shutdown scsi: sd: Differentiate system and runtime start/stop management ata,scsi: do not issue START STOP UNIT on resume mptcp: process pending subflow error on close mptcp: move __mptcp_error_report in protocol.c mptcp: annotate lockless accesses to sk->sk_err mptcp: fix dangling connection hang-up mptcp: rename timer related helper to less confusing names ASoC: tegra: Fix redundant PLLA and PLLA_OUT0 updates ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol spi: zynqmp-gqspi: fix clock imbalance on probe failure Linux 6.1.56 ASoC: amd: yc: Fix a non-functional mic on Lenovo 82TL mm, memcg: reconsider kmem.limit_in_bytes deprecation memcg: drop kmem.limit_in_bytes drm/meson: fix memory leak on ->hpd_notify callback drm/amdkfd: Use gpu_offset for user queue's wptr fs: binfmt_elf_efpic: fix personality for ELF-FDPIC power: supply: ab8500: Set typing and props power: supply: rk817: Add missing module alias drm/i915/gt: Fix reservation address in ggtt_reserve_guc_top ata: libata-sata: increase PMP SRST timeout to 10s ata: libata-core: Do not register PM operations for SAS ports ata: libata-core: Fix port and device removal ata: libata-core: Fix ata_port_request_pm() locking fs/smb/client: Reset password pointer to NULL net: thunderbolt: Fix TCPv6 GSO checksum calculation bpf: Fix BTF_ID symbol generation collision in tools/ bpf: Fix BTF_ID symbol generation collision bpf: Add override check to kprobe multi link attach media: uvcvideo: Fix OOB read btrfs: properly report 0 avail for very full file systems ring-buffer: Update "shortest_full" in polling mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() arm64: defconfig: remove CONFIG_COMMON_CLK_NPCM8XX=y drm/tests: Fix incorrect argument in drm_test_mm_insert_range timers: Tag (hr)timer softirq as hotplug safe Revert "SUNRPC dont update timeout value on connection reset" netfilter: nf_tables: fix kdoc warnings after gc rework sched/rt: Fix live lock between select_fallback_rq() and RT push kernel/sched: Modify initial boot task idle setup ASoC: amd: yc: Fix non-functional mic on Lenovo 82QF and 82UG i2c: i801: unregister tco_pdev in i801_probe() error path io_uring/fs: remove sqe->rw_flags checking from LINKAT ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES ata: libata-scsi: link ata port and scsi device LoongArch: numa: Fix high_memory calculation LoongArch: Define relocation types for ABI v2.10 ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q netfilter: nf_tables: disallow rule removal from chain binding nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() serial: 8250_port: Check IRQ data before use Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux" misc: rtsx: Fix some platforms can not boot and move the l1ss judgment to probe mptcp: fix bogus receive window shrinkage with multiple subflows KVM: x86/mmu: Do not filter address spaces in for_each_tdp_mmu_root_yield_safe() KVM: x86/mmu: Open code leaf invalidation from mmu_notifier KVM: SVM: Fix TSC_AUX virtualization setup KVM: SVM: INTERCEPT_RDTSCP is never intercepted anyway x86/srso: Add SRSO mitigation for Hygon processors x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range smack: Retrieve transmuting information in smack_inode_getsecurity() smack: Record transmuting in smk_transmuted nvme-pci: always return an ERR_PTR from nvme_pci_alloc_dev scsi: qla2xxx: Fix NULL pointer dereference in target mode wifi: ath11k: Don't drop tx_status when peer cannot be found nvme-pci: do not set the NUMA node of device if it has none nvme-pci: factor out a nvme_pci_alloc_dev helper nvme-pci: factor the iod mempool creation into a helper perf build: Define YYNOMEM as YYNOABORT for bison < 3.81 fbdev/sh7760fb: Depend on FB=y LoongArch: Set all reserved memblocks on Node#0 at initialization tsnep: Fix NAPI polling with budget 0 tsnep: Fix NAPI scheduling net: hsr: Add __packed to struct hsr_sup_tlv. ncsi: Propagate carrier gain/loss events to the NCSI controller powerpc/watchpoints: Annotate atomic context in more places powerpc/watchpoint: Disable pagefaults when getting user instruction powerpc/watchpoints: Disable preemption in thread_change_pc() ASoC: SOF: Intel: MTL: Reduce the DSP init timeout NFSv4.1: fix zero value filehandle in post open getattr media: vb2: frame_vector.c: replace WARN_ONCE with a comment ASoC: imx-rpmsg: Set ignore_pmdown_time for dai_link memblock tests: fix warning ‘struct seq_file’ declared inside parameter list memblock tests: fix warning: "__ALIGN_KERNEL" redefined firmware: cirrus: cs_dsp: Only log list of algorithms in debug build ASoC: cs42l42: Don't rely on GPIOD_OUT_LOW to set RESET initially low ASoC: cs42l42: Ensure a reset pulse meets minimum pulse width. ALSA: hda: intel-sdw-acpi: Use u8 type for link index bpf: Clarify error expectations from bpf_clone_redirect spi: intel-pci: Add support for Granite Rapids SPI serial flash ASoC: fsl: imx-pcm-rpmsg: Add SNDRV_PCM_INFO_BATCH flag spi: stm32: add a delay before SPI disable spi: nxp-fspi: reset the FLSHxCR1 registers ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset() smb3: correct places where ENOTSUPP is used instead of preferred EOPNOTSUPP scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command scsi: pm80xx: Use phy-specific SAS address when sending PHY_START command riscv: errata: fix T-Head dcache.cva encoding drm/amdgpu: Handle null atom context in VBIOS info ioctl drm/amdgpu/nbio4.3: set proper rmmio_remap.reg_offset for SR-IOV drm/amdgpu/soc21: don't remap HDP registers for SR-IOV drm/amd/display: Don't check registers, if using AUX BL control thermal/of: add missing of_node_put() platform/x86: asus-wmi: Support 2023 ROG X16 tablet mode platform/mellanox: mlxbf-bootctl: add NET dependency into Kconfig ata: sata_mv: Fix incorrect string length computation in mv_dump_mem() net/smc: bugfix for smcr v2 server connect success statistic ring-buffer: Do not attempt to read past "commit" selftests: fix dependency checker script btrfs: assert delayed node locked when removing delayed item ring-buffer: Avoid softlockup in ring_buffer_resize() selftests/ftrace: Correctly enable event in instance-event.tc scsi: ufs: core: Poll HCS.UCRDY before issuing a UIC command scsi: ufs: core: Move __ufshcd_send_uic_cmd() outside host_lock scsi: qedf: Add synchronization between I/O completions and abort parisc: irq: Make irq_stack_union static to avoid sparse warning parisc: drivers: Fix sparse warning parisc: iosapic.c: Fix sparse warnings parisc: sba: Fix compile warning wrt list of SBA devices nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain spi: sun6i: reduce DMA RX transfer width to single byte bpf: Annotate bpf_long_memcpy with data_race dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock ceph: drop messages from MDS when unmounting x86/reboot: VMCLEAR active VMCSes before emergency reboot i2c: npcm7xx: Fix callback completion ordering gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip firmware: arm_ffa: Don't set the memory region attributes for MEM_LEND arm64: dts: imx: Add imx8mm-prt8mm.dtb to build soc: imx8m: Enable OCOTP clock for imx8mm before reading registers selftests/powerpc: Fix emit_tests to work with run_kselftest.sh selftests/powerpc: Pass make context to children selftests/powerpc: Use CLEAN macro to fix make warning power: supply: rk817: Fix node refcount leak xtensa: boot/lib: fix function prototypes xtensa: umulsidi3: fix conditional expression xtensa: boot: don't add include-dirs xtensa: iss/network: make functions static xtensa: add default definition for XCHAL_HAVE_DIV32 firmware: imx-dsp: Fix an error handling path in imx_dsp_setup_channels() power: supply: ucs1002: fix error code in ucs1002_get_property() bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up ARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot ARM: dts: Unify pinctrl-single pin group nodes for omap4 ARM: dts: Unify pwm-omap-dmtimer node names ARM: dts: ti: omap: Fix bandgap thermal cells addressing for omap3/4 ARM: dts: omap: correct indentation clk: tegra: fix error return case for recalc_rate clk: sprd: Fix thm_parents incorrect configuration power: supply: mt6370: Fix missing error code in mt6370_chg_toggle_cfo() firmware: arm_scmi: Fixup perf power-cost/microwatt support firmware: arm_scmi: Harden perf domain info access bus: ti-sysc: Fix missing AM35xx SoC matching bus: ti-sysc: Use fsleep() instead of usleep_range() in sysc_reset() drm/bridge: ti-sn65dsi83: Do not generate HFP/HBP/HSA and EOT packet spi: spi-gxp: BUG: Correct spi write return value MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled vfio/mdev: Fix a null-ptr-deref bug for mdev_unregister_parent() btrfs: reset destination buffer when read_extent_buffer() gets invalid range drm/amdkfd: Insert missing TLB flush on GFX10 and later drm/amdkfd: Flush TLB after unmapping for GFX v9.4.3 scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called wifi: ath11k: Cleanup mac80211 references on failure during tx_complete wifi: ath11k: fix tx status reporting in encap offload mode arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved s390/pkey: fix PKEY_TYPE_EP11_AES handling in PKEY_CLR2SECK2 IOCTL f2fs: get out of a repeat loop when getting a locked data page f2fs: optimize iteration over sparse directories ARM: dts: qcom: msm8974pro-castor: correct touchscreen syna,nosleep-mode ARM: dts: qcom: msm8974pro-castor: correct touchscreen function names ARM: dts: qcom: msm8974pro-castor: correct inverted X of touchscreen ARM: dts: samsung: exynos4210-i9100: Fix LCD screen's physical size ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2 i2c: xiic: Correct return value check for xiic_reinit() i2c: mux: gpio: Add missing fwnode_handle_put() i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() cifs: Fix UAF in cifs_demultiplex_thread() proc: nommu: fix empty /proc/<pid>/maps proc: nommu: /proc/<pid>/maps: release mmap read lock igc: Expose tx-usecs coalesce setting to user octeontx2-pf: Do xdp_do_flush() after redirects. bnxt_en: Flush XDP for bnxt_poll_nitroa0()'s NAPI net: ena: Flush XDP packets on error. locking/seqlock: Do the lockdep annotation before locking in do_write_seqcount_begin_nested() i915/pmu: Move execlist stats initialization to execlist specific setup netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP netfilter: nf_tables: disable toggling dormant table state more than once net: rds: Fix possible NULL-pointer dereference team: fix null-ptr-deref when team device type is changed net: bridge: use DEV_STATS_INC() net: hns3: add 5ms delay before clear firmware reset irq source net: hns3: fix fail to delete tc flower rules during reset issue net: hns3: only enable unicast promisc when mac table full net: hns3: fix GRE checksum offload issue net: hns3: add cmdq check for vf periodic service task x86/srso: Fix SBPB enablement for spec_rstack_overflow=off x86/srso: Fix srso_show_state() side effect platform/x86: intel_scu_ipc: Fail IPC send if still busy platform/x86: intel_scu_ipc: Don't override scu in intel_scu_ipc_dev_simple_command() platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt() platform/x86: intel_scu_ipc: Check status after timeout in busy_loop() net: hsr: Properly parse HSRv1 supervisor frames. x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer() dccp: fix dccp_v4_err()/dccp_v6_err() again powerpc/perf/hv-24x7: Update domain value check scsi: iscsi_tcp: restrict to TCP sockets ipv4: fix null-deref in ipv4_link_failure igc: Fix infinite initialization loop with early XDP redirect ionic: fix 16bit math issue when PAGE_SIZE >= 64KB netfilter, bpf: Adjust timeouts of non-confirmed CTs in bpf_ct_insert_entry() i40e: Fix VF VLAN offloading when port VLAN is configured iavf: schedule a request immediately after add/delete vlan iavf: add iavf_schedule_aq_request() helper ASoC: SOF: core: Only call sof_ops_free() on remove if the probe was successful iavf: do not process adminq tasks when __IAVF_IN_REMOVE_TASK is set octeon_ep: fix tx dma unmap len values in SG ASoC: imx-audmix: Fix return error with devm_clk_get() ASoC: hdaudio.c: Add missing check for devm_kstrdup net/core: Fix ETH_P_1588 flow dissector selftests: tls: swap the TX and RX sockets in some tests netfilter: conntrack: fix extension size table ALSA: hda/realtek: Splitting the UX3402 into two separate models ASoC: rt5640: Fix IRQ not being free-ed for HDA jack detect mode ASoC: rt5640: Revert "Fix sleep in atomic context" bpf: Avoid deadlock when using queue and stack maps from NMI netfilter: nf_tables: disallow element removal on anonymous sets ASoC: meson: spdifin: start hw on dai probe netfilter: nf_tables: fix memleak when more than 255 elements expired netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction netfilter: nf_tables: defer gc run if previous batch is still pending netfilter: nf_tables: use correct lock to protect gc_list netfilter: nf_tables: GC transaction race with abort path netfilter: nf_tables: GC transaction race with netns dismantle netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path netfilter: nf_tables: don't fail inserts if duplicate has expired netfilter: nf_tables: remove busy mark and gc batch API netfilter: nft_set_hash: mark set element as dead when deleting from packet path netfilter: nf_tables: adapt set backend to use GC transaction API netfilter: nf_tables: GC transaction API to avoid race with control plane netfilter: nf_tables: don't skip expired elements during walk ext4: do not let fstrim block system suspend ext4: move setting of trimmed bit into ext4_try_to_trim_range() ext4: replace the traditional ternary conditional operator with with max()/min() btrfs: remove BUG() after failure to insert delayed dir index item btrfs: improve error message after failure to add delayed dir index item dm: fix a race condition in retrieve_deps netfs: Only call folio_start_fscache() one time for each folio media: via: Use correct dependency for camera sensor drivers media: v4l: Use correct dependency for camera sensor drivers NFSv4.1: fix pnfs MDS=DS session trunking NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server SUNRPC: Mark the cred for revalidation if the server rejects it NFS/pNFS: Report EINVAL errors from connect() to the server NFS: More fixes for nfs_direct_write_reschedule_io() NFS: Use the correct commit info in nfs_join_page_group() NFS: More O_DIRECT accounting fixes for error paths NFS: Fix O_DIRECT locking issues NFS: Fix error handling for O_DIRECT write scheduling ANDROID: GKI: Fix firmware: smccc build error ANDROID: Move microdroid and crashdump defconfigs to common Linux 6.1.55 interconnect: Teach lockdep about icc_bw_lock order net/sched: Retire rsvp classifier drm/amdgpu: fix amdgpu_cs_p1_user_fence Revert "memcg: drop kmem.limit_in_bytes" drm/amd/display: fix the white screen issue when >= 64GB DRAM ext4: fix rec_len verify error scsi: pm8001: Setup IRQs on resume scsi: megaraid_sas: Fix deadlock on firmware crashdump ata: libahci: clear pending interrupt status ata: libata: disallow dev-initiated LPM transitions to unsupported states i2c: aspeed: Reset the i2c controller when timeout occurs tracefs: Add missing lockdown check to tracefs_create_dir() nfsd: fix change_info in NFSv4 RENAME replies selinux: fix handling of empty opts in selinux_fs_context_submount() tracing: Have option files inc the trace array ref count tracing: Have current_trace inc the trace array ref count tracing: Increase trace array ref count on enable and filter files tracing: Have event inject files inc the trace array ref count tracing: Have tracing_max_latency inc the trace array ref count btrfs: check for BTRFS_FS_ERROR in pending ordered assert btrfs: release path before inode lookup during the ino lookup ioctl btrfs: fix a compilation error if DEBUG is defined in btree_dirty_folio btrfs: fix lockdep splat and potential deadlock after failure running delayed items dm: don't attempt to queue IO under RCU protection Revert "drm/amd: Disable S/G for APUs when 64GB or more host memory" md: Put the right device in md_seq_next nvme: avoid bogus CRTO values io_uring/net: fix iter retargeting for selected buf ovl: fix incorrect fdput() on aio completion ovl: fix failed copyup of fileattr on a symlink attr: block mode changes of symlinks Revert "SUNRPC: Fail faster on bad verifier" md/raid1: fix error: ISO C90 forbids mixed declarations samples/hw_breakpoint: fix building without module unloading x86/purgatory: Remove LTO flags x86/boot/compressed: Reserve more memory for page tables panic: Reenable preemption in WARN slowpath scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file() scsi: target: core: Fix target_cmd_counter leak riscv: kexec: Align the kexeced kernel entry x86/ibt: Suppress spurious ENDBR selftests: tracing: Fix to unmount tracefs for recovering environment scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() drm: gm12u320: Fix the timeout usage for usb_bulk_msg() nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() nvmet: use bvec_set_page to initialize bvecs block: factor out a bvec_set_page helper btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super btrfs: add a helper to read the superblock metadata_uuid MIPS: Use "grep -E" instead of "egrep" misc: fastrpc: Fix incorrect DMA mapping unmap request misc: fastrpc: Prepare to dynamic dma-buf locking specification dma-buf: Add unlocked variant of attachment-mapping functions printk: Consolidate console deferred printing printk: Keep non-panic-CPUs out of console lock interconnect: Fix locking for runpm vs reclaim kobject: Add sanity check for kset->kobj.ktype in kset_register() media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning usb: chipidea: add workaround for chipidea PEC bug usb: ehci: add workaround for chipidea PORTSC.PEC bug misc: open-dice: make OPEN_DICE depend on HAS_IOMEM serial: cpm_uart: Avoid suspicious locking scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() tools: iio: iio_generic_buffer: Fix some integer type and calculation usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc usb: cdns3: Put the cdns set active part outside the spin lock media: pci: cx23885: replace BUG with error return media: tuners: qt1010: replace BUG_ON with a regular error scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout error is detected media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() media: anysee: fix null-ptr-deref in anysee_master_xfer media: af9005: Fix null-ptr-deref in af9005_i2c_xfer media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer media: mdp3: Fix resource leaks in of_find_device_by_node PCI: fu740: Set the number of MSI vectors PCI: vmd: Disable bridge window for domain reset powerpc/pseries: fix possible memory leak in ibmebus_bus_init() ARM: 9317/1: kexec: Make smp stop calls asynchronous PCI: dwc: Provide deinit callback for i.MX jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() ext2: fix datatype of block number in ext2_xattr_set2() md: raid1: fix potential OOB in raid1_remove_disk() bus: ti-sysc: Configure uart quirks for k3 SoC drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer() drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN314 drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN31 drm/amd/display: Use DTBCLK as refclk instead of DPREFCLK ALSA: hda: intel-dsp-cfg: add LunarLake support ASoC: Intel: sof_sdw: Update BT offload config for soundwire config ASoC: SOF: topology: simplify code to prevent static analysis warnings drm/amd/display: Fix underflow issue on 175hz timing samples/hw_breakpoint: Fix kernel BUG 'invalid opcode: 0000' arm64: dts: qcom: sm8250-edo: correct ramoops pmsg-size arm64: dts: qcom: sm8150-kumano: correct ramoops pmsg-size arm64: dts: qcom: sm6350: correct ramoops pmsg-size arm64: dts: qcom: sm6125-pdx201: correct ramoops pmsg-size drm/edid: Add quirk for OSVR HDK 2.0 drm/bridge: tc358762: Instruct DSI host to generate HSE packets libbpf: Free btf_vmlinux when closing bpf_object wifi: mac80211_hwsim: drop short frames wifi: mac80211: check for station first in client probe wifi: cfg80211: ocb: don't leave if not joined wifi: cfg80211: reject auth/assoc to AP with our address netfilter: ebtables: fix fortify warnings in size_entry_mwt() wifi: mac80211: check S1G action frame size alx: fix OOB-read compiler warning mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450 tpm_tis: Resend command to recover from data transfer errors netlink: convert nlk->flags to atomic flags Bluetooth: Fix hci_suspend_sync crash crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() net/ipv4: return the real errno instead of -EINVAL net: Use sockaddr_storage for getsockopt(SO_PEERNAME). can: sun4i_can: Add support for the Allwinner D1 can: sun4i_can: Add acceptance register quirk wifi: wil6210: fix fortify warnings mt76: mt7921: don't assume adequate headroom for SDIO headers wifi: mwifiex: fix fortify warning wifi: ath9k: fix printk specifier wifi: ath9k: fix fortify warnings ice: Don't tx before switchdev is fully configured crypto: lrw,xts - Replace strlcpy with strscpy devlink: remove reload failed checks in params get/set callbacks selftests/nolibc: fix up kernel parameters support ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects hw_breakpoint: fix single-stepping when using bpf_overflow_handler perf/imx_ddr: speed up overflow frequency of cycle perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 scftorture: Forgive memory-allocation failure if KASAN rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle() kernel/fork: beware of __put_task_struct() calling context ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock btrfs: output extra debug info if we failed to find an inline backref autofs: fix memory leak of waitqueues in autofs_catatonic_mode Linux 6.1.54 drm/amd/display: Fix a bug when searching for insert_above_mpcc MIPS: Only fiddle with CHECKFLAGS if `need-compiler' kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg(). ixgbe: fix timestamp configuration code tcp: Fix bind() regression for v4-mapped-v6 non-wildcard address. tcp: Fix bind() regression for v4-mapped-v6 wildcard address. tcp: Factorise sk_family-independent comparison in inet_bind2_bucket_match(_addr_any). ipv6: Remove in6addr_any alternatives. ipv6: fix ip6_sock_set_addr_preferences() typo net: macb: fix sleep inside spinlock net: macb: Enable PTP unicast net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() platform/mellanox: NVSW_SN2201 should depend on ACPI platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events platform/mellanox: mlxbf-pmc: Fix potential buffer overflows platform/mellanox: mlxbf-tmfifo: Drop jumbo frames platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors kcm: Fix memory leak in error path of kcm_sendmsg() r8152: check budget for r8152_poll() net: dsa: sja1105: block FDB accesses that are concurrent with a switch reset net: dsa: sja1105: serialize sja1105_port_mcast_flood() with other FDB accesses net: dsa: sja1105: fix multicast forwarding working only for last added mdb entry net: dsa: sja1105: propagate exact error code from sja1105_dynamic_config_poll_valid() net: dsa: sja1105: hide all multicast addresses from "bridge fdb show" net:ethernet:adi:adin1110: Fix forwarding offload net: ethernet: adi: adin1110: use eth_broadcast_addr() to assign broadcast address hsr: Fix uninit-value access in fill_frame_info() net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() net: stmmac: fix handling of zero coalescing tx-usecs net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in smcr_port_add selftests: Keep symlinks, when possible kselftest/runner.sh: Propagate SIGTERM to runner child net: ipv4: fix one memleak in __inet_del_ifa() kunit: Fix wild-memory-access bug in kunit_free_suite_set() drm/amdgpu: register a dirty framebuffer callback for fbcon drm/amd/display: Remove wait while locked drm/amd/display: always switch off ODM before committing more streams perf hists browser: Fix the number of entries for 'e' key perf tools: Handle old data in PERF_RECORD_ATTR perf test shell stat_bpf_counters: Fix test on Intel perf hists browser: Fix hierarchy mode header MIPS: Fix CONFIG_CPU_DADDI_WORKAROUNDS `modules_install' regression KVM: SVM: Skip VMSA init in sev_es_init_vmcb() if pointer is NULL KVM: SVM: Set target pCPU during IRTE update if target vCPU is running KVM: nSVM: Load L1's TSC multiplier based on L1 state, not L2 state KVM: nSVM: Check instead of asserting on nested TSC scaling support KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration KVM: SVM: Don't inject #UD if KVM attempts to skip SEV guest insn KVM: SVM: Take and hold ir_list_lock when updating vCPU's Physical ID entry drm/amd/display: prevent potential division by zero errors drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller mtd: rawnand: brcmnand: Fix potential false time out warning mtd: spi-nor: Correct flags for Winbond w25q128 mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write mtd: rawnand: brcmnand: Fix crash during the panic_write drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() btrfs: use the correct superblock to compare fsid in btrfs_validate_super btrfs: zoned: re-enable metadata over-commit for zoned mode btrfs: set page extent mapped after read_folio in relocate_one_page btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART btrfs: free qgroup rsv on io failure btrfs: fix start transaction qgroup rsv double free btrfs: zoned: do not zone finish data relocation block group fuse: nlookup missing decrement in fuse_direntplus_link ata: pata_ftide010: Add missing MODULE_DESCRIPTION ata: sata_gemini: Add missing MODULE_DESCRIPTION ata: pata_falcon: fix IO base selection for Q40 ata: ahci: Add Elkhart Lake AHCI controller hwspinlock: qcom: add missing regmap config for SFPB MMIO implementation lib: test_scanf: Add explicit type cast to result initialization in test_number_prefix() f2fs: avoid false alarm of circular locking f2fs: flush inode if atomic file is aborted ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} ext4: add correct group descriptors and reserved GDT blocks to system zone jbd2: correct the end of the journal recovery scan range jbd2: check 'jh->b_transaction' before removing it from checkpoint jbd2: fix checkpoint cleanup performance regression dmaengine: sh: rz-dmac: Fix destination and source data size setting clocksource/drivers/arm_arch_timer: Disable timer before programming CVAL ARC: atomics: Add compiler barrier to atomic operations... net/mlx5: Free IRQ rmap and notifier on kernel shutdown Multi-gen LRU: avoid race in inc_min_seq() sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory() net: hns3: remove GSO partial feature bit net: hns3: fix the port information display when sfp is absent net: hns3: fix invalid mutex between tc qdisc and dcb ets command issue net: hns3: fix debugfs concurrency issue between kfree buffer and read net: hns3: fix byte order conversion issue in hclge_dbg_fd_tcam_read() net: hns3: fix tx timeout issue netfilter: nfnetlink_osf: avoid OOB read netfilter: nftables: exthdr: fix 4-byte stack OOB write bpf: Assign bpf_tramp_run_ctx::saved_run_ctx before recursion check. bpf: Invoke __bpf_prog_exit_sleepable_recur() on recursion in kern_sys_bpf(). bpf: Remove prog->active check for bpf_lsm and bpf_iter net: dsa: sja1105: complete tc-cbs offload support on SJA1110 net: dsa: sja1105: fix -ENOSPC when replacing the same tc-cbs too many times net: dsa: sja1105: fix bandwidth discrepancy between tc-cbs software and offload ip_tunnels: use DEV_STATS_INC() idr: fix param name in idr_alloc_cyclic() doc s390/zcrypt: don't leak memory if dev_set_name() fails igb: Change IGB_MIN to allow set rx/tx value between 64 and 80 igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80 igc: Change IGC_MIN to allow set rx/tx value between 64 and 80 octeontx2-af: Fix truncation of smq in CN10K NIX AQ enqueue mbox handler kcm: Destroy mutex in kcm_exit_net() net: sched: sch_qfq: Fix UAF in qfq_dequeue() af_unix: Fix data race around sk->sk_err. af_unix: Fix data-races around sk->sk_shutdown. af_unix: Fix data-race around unix_tot_inflight. af_unix: Fix data-races around user->unix_inflight. bpf, sockmap: Fix skb refcnt race after locking changes net: phy: micrel: Correct bit assignments for phy_device flags net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr veth: Fixing transmit return status for dropped packets gve: fix frag_list chaining igb: disable virtualization features on 82580 ipv6: ignore dst hint for multipath routes ipv4: ignore dst hint for multipath routes mptcp: annotate data-races around msk->rmem_fwd_alloc net: annotate data-races around sk->sk_forward_alloc net: use sk_forward_alloc_get() in sk_get_meminfo() drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt() drm/i915/gvt: Put the page reference obtained by KVM's gfn_to_pfn() drm/i915/gvt: Verify pfn is "valid" before dereferencing "struct page" xsk: Fix xsk_diag use-after-free error during socket cleanup net: fib: avoid warn splat in flow dissector net: read sk->sk_family once in sk_mc_loop() ipv4: annotate data-races around fi->fib_dead sctp: annotate data-races around sk->sk_wmem_queued net/sched: fq_pie: avoid stalls in fq_pie_timer() smb: propagate error code of extract_sharename() cifs: use fs_context for automounts blk-throttle: consider 'carryover_ios/bytes' in throtl_trim_slice() blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice() drm/i915: mark requests for GuC virtual engines to avoid use-after-free perf test stat_bpf_counters_cgrp: Enhance perf stat cgroup BPF counter test perf test stat_bpf_counters_cgrp: Fix shellcheck issue about logical operators pwm: lpc32xx: Remove handling of PWM channels watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load perf top: Don't pass an ERR_PTR() directly to perf_session__delete() perf vendor events: Drop STORES_PER_INST metric event for power10 platform perf vendor events: Drop some of the JSON/events for power10 platform perf vendor events: Update the JSON/events descriptions for power10 platform x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm() perf annotate bpf: Don't enclose non-debug code with an assert() Input: tca6416-keypad - fix interrupt enable disbalance Input: tca6416-keypad - always expect proper IRQ number in i2c client backlight: gpio_backlight: Drop output GPIO direction check for initial power state pwm: atmel-tcb: Fix resource freeing in error path and remove pwm: atmel-tcb: Harmonize resource allocation order pwm: atmel-tcb: Convert to platform remove callback returning void perf trace: Really free the evsel->priv area perf trace: Use zfree() to reduce chances of use after free Input: iqs7222 - configure power mode before triggering ATI kconfig: fix possible buffer overflow mailbox: qcom-ipcc: fix incorrect num_chans counting gfs2: low-memory forced flush fixes gfs2: Switch to wait_event in gfs2_logd tpm_crb: Fix an error handling path in crb_acpi_add() kbuild: do not run depmod for 'make modules_sign' kbuild: rpm-pkg: define _arch conditionally net: deal with integer overflows in kmalloc_reserve() net: factorize code in kmalloc_reserve() net: remove osize variable in __alloc_skb() net: add SKB_HEAD_ALIGN() helper bus: mhi: host: Skip MHI reset if device is in RDDM NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info NFS: Fix a potential data corruption clk: qcom: mss-sc7180: fix missing resume during probe clk: qcom: q6sstop-qcs404: fix missing resume during probe clk: qcom: lpasscc-sc7280: fix missing resume during probe clk: qcom: dispcc-sm8450: fix runtime PM imbalance on probe errors soc: qcom: qmi_encdec: Restrict string length in decode clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock clk: imx: pll14xx: align pdiv with reference manual clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz dt-bindings: clock: xlnx,versal-clk: drop select:false pinctrl: cherryview: fix address_space_handler() argument cifs: update desired access while requesting for directory lease parisc: led: Reduce CPU overhead for disk & lan LED computation parisc: led: Fix LAN receive and transmit LEDs lib/test_meminit: allocate pages up to order MAX_ORDER mm: hugetlb_vmemmap: fix a race between vmemmap pmd split memcg: drop kmem.limit_in_bytes send channel sequence number in SMB3 requests after reconnects arm64: dts: renesas: rzg2l: Fix txdv-skew-psec typos clk: qcom: turingcc-qcs404: fix missing resume during probe ASoC: tegra: Fix SFC conversion for few rates drm/ast: Fix DRAM init on AST2200 clk: qcom: camcc-sc7180: fix async resume during probe fbdev/ep93xx-fb: Do not assign to struct fb_info.dev null_blk: fix poll request timeout handling scsi: qla2xxx: Fix firmware resource tracking scsi: qla2xxx: Error code did not return to upper layer scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit() scsi: qla2xxx: Flush mailbox commands on chip reset scsi: qla2xxx: Remove unsupported ql2xenabledif option scsi: qla2xxx: Fix TMF leak through scsi: qla2xxx: Fix session hang in gnl scsi: qla2xxx: Turn off noisy message log scsi: qla2xxx: Fix erroneous link up failure scsi: qla2xxx: Fix command flush during TMF scsi: qla2xxx: fix inconsistent TMF timeout scsi: qla2xxx: Fix deletion race condition scsi: qla2xxx: Limit TMF to 8 per function scsi: qla2xxx: Adjust IOCB resource on qpair create drm/virtio: Conditionally allocate virtio_gpu_fence io_uring: Don't set affinity on a dying sqpoll thread io_uring/sqpoll: fix io-wq affinity when IORING_SETUP_SQPOLL is used io_uring: break out of iowq iopoll on teardown io_uring/net: don't overflow multishot accept io_uring: revert "io_uring fix multishot accept ordering" io_uring: always lock in io_apoll_task_func Multi-gen LRU: fix per-zone reclaim mm: multi-gen LRU: rename lrugen->lists[] to lrugen->folios[] net/ipv6: SKB symmetric hash should incorporate transport ports ANDROID: GKI: fix up merge issue in drivers/scsi/storvsc_drv.c Linux 6.1.53 udf: initialize newblock to 0 clk: Avoid invalid function names in CLK_OF_DECLARE() treewide: Fix probing of devices in DT overlays clk: Mark a fwnode as initialized when using CLK_OF_DECLARE() macro md: fix regression for null-ptr-deference in __md_stop() NFSv4.2: Rework scratch handling for READ_PLUS (again) NFSv4.2: Fix a potential double free with READ_PLUS md: Free resources in __md_stop Revert "drm/amd/display: Do not set drr on pipe commit" tracing: Zero the pipe cpumask on alloc to avoid spurious -EBUSY serial: sc16is7xx: fix regression with GPIO configuration serial: sc16is7xx: remove obsolete out_thread label perf/x86/uncore: Correct the number of CHAs on EMR x86/sgx: Break up long non-preemptible delays in sgx_vepc_release() USB: core: Fix oversight in SuperSpeed initialization USB: core: Fix race by not overwriting udev->descriptor in hub_port_init() USB: core: Change usb_get_device_descriptor() API USB: core: Unite old scheme and new scheme descriptor reads usb: typec: bus: verify partner exists in typec_altmode_attention usb: typec: tcpm: set initial svdm version based on pd revision of: property: fw_devlink: Add a devlink for panel followers cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug crypto: stm32 - fix loop iterating through scatterlist for DMA s390/dasd: fix string length handling s390/ipl: add missing secure/has_secure file to ipl type 'unknown' s390/dcssblk: fix kernel crash with list_add corruption arm64: sdei: abort running SDEI handlers during crash pstore/ram: Check start of empty przs during init mmc: renesas_sdhi: register irqs before registering controller platform/chrome: chromeos_acpi: print hex string for ACPI_TYPE_BUFFER x86/MCE: Always save CS register on AMD Zen IF Poison errors fsverity: skip PKCS#7 parser when keyring is empty net: handle ARPHRD_PPP in dev_is_mac_header_xmit() X.509: if signature is unsupported skip validation r8169: fix ASPM-related issues on a number of systems with NIC version from RTL8168h x86/sev: Make enc_dec_hypercall() accept a size instead of npages dccp: Fix out of bounds access in DCCP error handler dlm: fix plock lookup when using multiple lockspaces bpf: Fix issue in verifying allow_ptr_leaks drm/amd/display: Add smu write msg id fail retry process parisc: Fix /proc/cpuinfo output for lscpu procfs: block chmod on /proc/thread-self/comm block: don't add or resize partition on the disk with GENHD_FL_NO_PART Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset" ntb: Fix calculation ntb_transport_tx_free_entry() ntb: Clean up tx tail index on link down ntb: Drop packets when qp link is down PCI/PM: Only read PCI_PM_CTRL register when available PCI: hv: Fix a crash in hv_pci_restore_msi_msg() during hibernation PCI: Free released resource after coalescing scsi: mpt3sas: Perform additional retries if doorbell read returns 0 Revert "scsi: qla2xxx: Fix buffer overrun" media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts media: dvb: symbol fixup for dvb_attach() ALSA: hda/cirrus: Fix broken audio on hardware with two CS42L42 codecs. arm64: csum: Fix OoB access in IP checksum code for negative lengths i3c: master: svc: fix probe failure when no i3c device exist LoongArch: mm: Add p?d_leaf() definitions xtensa: PMU: fix base address for the newer hardware drm/amd/display: register edp_backlight_control() for DCN301 backlight/lv5207lp: Compare against struct fb_info.device backlight/bd6107: Compare against struct fb_info.device backlight/gpio_backlight: Compare against struct fb_info.device io_uring: break iopolling on signal XArray: Do not return sibling entries from xa_load() ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch() ipmi_si: fix a memleak in try_smi_init() PCI: rockchip: Use 64-bit mask on MSI 64-bit PCI address media: i2c: Add a camera sensor top level menu media: i2c: ccs: Check rules is non-NULL cpu/hotplug: Prevent self deadlock on CPU hot-unplug mm/vmalloc: add a safer version of find_vm_area() for debug scsi: core: Fix the scsi_set_resid() documentation printk: ringbuffer: Fix truncating buffer size min_t cast rcu: dump vmalloc memory info safely ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl PM / devfreq: Fix leak in devfreq_dev_release() igb: set max size RX buffer when store bad packet is enabled skbuff: skb_segment, Call zero copy functions before using skbuff frags netfilter: xt_sctp: validate the flag_info count netfilter: xt_u32: validate user space input netfilter: nft_exthdr: Fix non-linear header modification netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU virtio_ring: fix avail_wrap_counter in virtqueue_add_packed cpufreq: Fix the race condition while updating the transition_task of policy Drivers: hv: vmbus: Don't dereference ACPI root object handle dmaengine: ste_dma40: Add missing IRQ check in d40_probe um: Fix hostaudio build errors mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() mtd: spi-nor: Check bus width while setting QE bit leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false leds: multicolor: Use rounded division when calculating color components leds: pwm: Fix error code in led_pwm_create_fwnode() rpmsg: glink: Add check for kstrdup phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 dmaengine: idxd: Modify the dependence of attribute pasid_enabled mtd: rawnand: brcmnand: Fix mtd oobsize tracing: Fix race issue between cpu buffer write and swap tracing: Remove extra space at the end of hwlat_detector/mode x86/speculation: Mark all Skylake CPUs as vulnerable to GDS tick/rcu: Fix false positive "softirq work is pending" messages platform/x86/amd/pmf: Fix a missing cleanup path HID: multitouch: Correct devm device reference for hidinput input_dev name HID: uclogic: Correct devm device reference for hidinput input_dev name HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() RDMA/efa: Fix wrong resources deallocation order RDMA/siw: Correct wrong debug message RDMA/siw: Balance the reference of cep->kref in the error path Revert "IB/isert: Fix incorrect release of isert connection" amba: bus: fix refcount leak serial: tegra: handle clk prepare error in tegra_uart_hw_init() interconnect: qcom: bcm-voter: Use enable_maks for keepalive voting interconnect: qcom: bcm-voter: Improve enable_mask handling interconnect: qcom: sm8450: Enable sync_state scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock scsi: core: Use 32-bit hostnum in scsi_host_lookup() RDMA/irdma: Prevent zero-length STAG registration coresight: trbe: Fix TRBE potential sleep in atomic context cgroup:namespace: Remove unused cgroup_namespaces_init() Revert "f2fs: fix to do sanity check on extent cache correctly" f2fs: Only lfs mode is allowed with zoned block device feature f2fs: judge whether discard_unit is section only when have CONFIG_BLK_DEV_ZONED f2fs: fix to avoid mmap vs set_compress_option case media: i2c: rdacm21: Fix uninitialized value media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working media: ov2680: Add ov2680_fill_format() helper function media: ov2680: Don't take the lock for try_fmt calls media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s media: ov2680: Fix vflip / hflip set functions media: ov2680: Fix ov2680_bayer_order() media: ov2680: Remove auto-gain and auto-exposure controls media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips media: ov5640: Fix initial RESETB state and annotate timings media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() HID: input: Support devices sending Eraser without Invert drivers: base: Free devm resources when unregistering a device USB: gadget: f_mass_storage: Fix unused variable warning USB: gadget: core: Add missing kerneldoc for vbus_work docs: ABI: fix spelling/grammar in SBEFIFO timeout interface media: venus: hfi_venus: Only consider sys_idle_indicator on V1 media: go7007: Remove redundant if statement media: cec: core: add adap_unconfigured() callback media: cec: core: add adap_nb_transmit_canceled() callback platform/x86: dell-sysman: Fix reference leak iommu/vt-d: Fix to flush cache of PASID directory table iommu/qcom: Disable and reset context bank before programming fsi: aspeed: Reset master errors after CFAM reset IB/uverbs: Fix an potential error pointer dereference RDMA/hns: Fix CQ and QP cache affinity RDMA/hns: Fix inaccurate error label name in init instance RDMA/hns: Fix incorrect post-send with direct wqe of wr-list RDMA/hns: Fix port active speed iommu/sprd: Add missing force_aperture iommu/mediatek: Fix two IOMMU share pagetable issue iommu/mediatek: Remove unused "mapping" member from mtk_iommu_data extcon: cht_wc: add POWER_SUPPLY dependency kernfs: add stub helper for kernfs_generic_poll() driver core: Call dma_cleanup() on the test_remove path driver core: test_async: fix an error code dma-buf/sync_file: Fix docs syntax interconnect: qcom: qcm2290: Enable sync state coresight: tmc: Explicit type conversions to prevent integer overflow RDMA/irdma: Replace one-element array with flexible-array member scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly RDMA/rxe: Fix incomplete state save in rxe_requester RDMA/rxe: Split rxe_run_task() into two subroutines x86/APM: drop the duplicate APM_MINOR_DEV macro serial: sprd: Fix DMA buffer leak issue serial: sprd: Assign sprd_port after initialized to avoid wrong access iio: accel: adxl313: Fix adxl313_i2c_id[] table scsi: qla4xxx: Add length check when parsing nlattrs scsi: be2iscsi: Add length check when parsing nlattrs scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() scsi: iscsi: Add length check for nlattr payload scsi: iscsi: Rename iscsi_set_param() to iscsi_if_set_param() scsi: RDMA/srp: Fix residual handling usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() media: mediatek: vcodec: fix resource leaks in vdec_msg_queue_init() media: mediatek: vcodec: fix potential double free media: mediatek: vcodec: Return NULL if no vdec_fb is found media: amphion: ensure the bitops don't cross boundaries media: amphion: fix UNUSED_VALUE issue reported by coverity media: amphion: fix UNINIT issues reported by coverity media: amphion: fix REVERSE_INULL issues reported by coverity media: amphion: fix CHECKED_RETURN issues reported by coverity media: rkvdec: increase max supported height for H.264 media: mtk-jpeg: Fix use after free bug due to uncanceled work media: amphion: add helper function to get id name media: amphion: reinit vpu if reqbufs output 0 dt-bindings: extcon: maxim,max77843: restrict connector properties scsi: hisi_sas: Fix normally completed I/O analysed as failed scsi: hisi_sas: Fix warnings detected by sparse RDMA/siw: Fabricate a GID on tun and loopback devices media: cx24120: Add retval check for cx24120_message_send() media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() media: dib7000p: Fix potential division by zero drivers: usb: smsusb: fix error handling code in smsusb_init_device iommu: rockchip: Fix directory table address encoding iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() media: i2c: tvp5150: check return value of devm_kasprintf() media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables media: ov5640: fix low resolution image abnormal issue RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() cgroup/cpuset: Inherit parent's load balance state in v2 pNFS: Fix assignment of xprtdata.cred NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN NFSD: da_addr_body field missing in some GETDEVICEINFO replies fs: lockd: avoid possible wrong NULL parameter jfs: validate max amount of blocks before allocation. ext4: fix unttached inode after power cut with orphan file feature enabled powerpc/iommu: Fix notifiers being shared by PCI and VIO buses powerpc/mpc5xxx: Add missing fwnode_handle_put() powerpc/pseries: Fix hcall tracepoints with JUMP_LABEL=n nfs/blocklayout: Use the passed in gfp flags powerpc/pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT powerpc: Don't include lppaca.h in paca.h NFSv4.2: Fix READ_PLUS size calculations NFSv4.2: Fix up READ_PLUS alignment NFSv4.2: Fix READ_PLUS smatch warnings NFSv4.2: Rework scratch handling for READ_PLUS wifi: ath10k: Use RMW accessors for changing LNKCTL wifi: ath11k: Use RMW accessors for changing LNKCTL net/mlx5: Use RMW accessors for changing LNKCTL drm/radeon: Use RMW accessors for changing LNKCTL drm/amdgpu: Use RMW accessors for changing LNKCTL powerpc/perf: Convert fsl_emb notifier to state machine callbacks powerpc/fadump: reset dump area size if fadump memory reserve fails nvdimm: Fix dereference after free in register_nvdimm_pmu() nvdimm: Fix memleak of pmu attr_groups in unregister_nvdimm_pmu() vfio/type1: fix cap_migration information leak powerpc/radix: Move some functions into #ifdef CONFIG_KVM_BOOK3S_HV_POSSIBLE clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op clk: imx8mp: fix sai4 clock clk: imx: imx8ulp: update SPLL2 type clk: imx: pllv4: Fix SPLL2 MULT range clk: qcom: gcc-sm8450: Use floor ops for SDCC RCGs PCI/ASPM: Use RMW accessors for changing LNKCTL PCI: pciehp: Use RMW accessors for changing LNKCTL PCI: Add locking to RMW PCI Express Capability Register accessors PCI: Allow drivers to request exclusive config regions pinctrl: mcp23s08: check return value of devm_kasprintf() PCI: Mark NVIDIA T4 GPUs to avoid bus reset PCI: microchip: Correct the DED and SEC interrupt bit offsets clk: qcom: gcc-sm6350: Fix gcc_sdcc2_apps_clk_src clk: qcom: reset: Use the correct type of sleep/delay based on length kvm/vfio: ensure kvg instance stays around in kvm_vfio_group_add() kvm/vfio: Prepare for accepting vfio device fd clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src ext4: avoid potential data overflow in next_linear_group ext4: correct grp validation in ext4_mb_good_group EDAC/igen6: Fix the issue of no error events clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src clk: sunxi-ng: Modify mismatched function name PCI/DOE: Fix destroy_work_on_stack() race drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() PCI: qcom-ep: Switch MHI bus master clock off during L1SS PCI: apple: Initialize pcie->nvecs before use clk: rockchip: rk3568: Fix PLL rate setting for 78.75MHz clk: qcom: gcc-sc8280xp: Add missing GDSCs dt-bindings: clock: qcom,gcc-sc8280xp: Add missing GDSCs clk: qcom: gcc-sc8280xp: Add missing GDSC flags clk: qcom: gcc-sc8280xp: Add EMAC GDSCs clk: qcom: gpucc-sm6350: Fix clock source names clk: qcom: gpucc-sm6350: Introduce index-based clk lookup ipmi:ssif: Fix a memory leak when scanning for an adapter ipmi:ssif: Add check for kstrdup ALSA: ac97: Fix possible error value of *rac97 of: unittest: Fix overlay type in apply/revert check of: overlay: Call of_changeset_init() early ASoC: SOF: amd: clear dsp to host interrupt status md: raid0: account for split bio in iostat accounting md/raid0: Fix performance regression for large sequential writes md/raid0: Factor out helper for mapping and submitting a bio md: add error_handlers for raid0 and linear firmware: cs_dsp: Fix new control name check md/raid5-cache: fix null-ptr-deref for r5l_flush_stripe_to_raid() md/raid5-cache: fix a deadlock in r5l_exit_log() bus: ti-sysc: Fix cast to enum warning arm64: dts: qcom: sc8280xp-x13s: Unreserve NC pins arm64: dts: qcom: msm8996: Fix dsi1 interrupts arm64: dts: qcom: msm8998: Add missing power domain to MMSS SMMU arm64: dts: qcom: msm8998: Drop bus clock reference from MMSS SMMU arm64: dts: qcom: apq8016-sbc: Fix ov5640 regulator supply names drm/mediatek: Fix potential memory leak if vmap() fail ARM: dts: qcom: ipq4019: correct SDHCI XO clock drm/mediatek: Remove freeing not dynamic allocated memory bus: ti-sysc: Fix build warning for 64-bit build drm/mediatek: dp: Add missing error checks in mtk_dp_parse_capabilities io_uring: fix drain stalls by invalid SQE block/mq-deadline: use correct way to throttling write requests audit: fix possible soft lockup in __audit_inode_child() drm/msm/a2xx: Call adreno_gpu_init() earlier drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() smackfs: Prevent underflow in smk_set_cipso() drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done firmware: meson_sm: fix to avoid potential NULL pointer dereference drm/msm/mdp5: Don't leak some plane state soc: qcom: smem: Fix incompatible types in comparison drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() drm/armada: Fix off-by-one error in armada_overlay_get_property() ARM: dts: BCM53573: Fix Tenda AC9 switch CPU port arm64: dts: qcom: sm8150: Fix the I2C7 interrupt of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() drm/tegra: dpaux: Fix incorrect return value of platform_get_irq drm/msm: Update dev core dump to not print backwards md/md-bitmap: hold 'reconfig_mutex' in backlog_store() md/md-bitmap: remove unnecessary local variable in backlog_store() md/raid10: use dereference_rdev_and_rrdev() to get devices md/raid10: factor out dereference_rdev_and_rrdev() md: restore 'noio_flag' for the last mddev_resume() md: Change active_io to percpu md: Factor out is_md_suspended helper drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl' arm64: dts: qcom: msm8996-gemini: fix touchscreen VIO supply arm64: dts: qcom: sdm845: Fix the min frequency of "ice_core_clk" arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC ARM: dts: BCM53573: Fix Ethernet info for Luxul devices drm: adv7511: Fix low refresh rate register for ADV7533/5 ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split) ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210 ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split) drm/bridge: anx7625: Use common macros for HDCP capabilities drm/bridge: anx7625: Use common macros for DP power sequencing commands x86/mm: Fix PAT bit missing from page protection modify mask block: don't allow enabling a cache on devices that don't support it block: cleanup queue_wc_store drm/etnaviv: fix dumping of active MMU context arm64: tegra: Fix HSUART for Smaug arm64: dts: qcom: pmi8994: Add missing OVP interrupt arm64: dts: qcom: pm660l: Add missing short interrupt arm64: dts: qcom: pm6150l: Add missing short interrupt arm64: dts: qcom: sm8250-sony-xperia: correct GPIO keys wakeup again arm64: tegra: Fix HSUART for Jetson AGX Orin ARM: dts: BCM53573: Use updated "spi-gpio" binding properties ARM: dts: BCM53573: Add cells sizes to PCIe node ARM: dts: BCM53573: Drop nonexistent #usb-cells drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() firmware: ti_sci: Use system_state to determine polling ARM: dts: stm32: Add missing detach mailbox for DHCOM SoM ARM: dts: stm32: Update to generic ADC channel binding on DHSOM systems ARM: dts: stm32: Add missing detach mailbox for Odyssey SoM ARM: dts: stm32: YAML validation fails for Odyssey Boards ARM: dts: stm32: Add missing detach mailbox for emtrion emSBC-Argon ARM: dts: stm32: adopt generic iio bindings for adc channels on emstamp-argon ARM: dts: stm32: YAML validation fails for Argon Boards ARM: dts: stm32: Rename mdio0 to mdio arm64: dts: qcom: sm8250: Mark PCIe hosts as DMA coherent arm64: dts: qcom: pmk8350: fix ADC-TM compatible string arm64: dts: qcom: pmr735b: fix thermal zone name arm64: dts: qcom: pm8350b: fix thermal zone name arm64: dts: qcom: pm8350: fix thermal zone name arm64: dts: qcom: sm8350: Use proper CPU compatibles arm64: dts: qcom: sm8350: Add missing LMH interrupts to cpufreq arm64: dts: qcom: sm8350: Fix CPU idle state residency times arm64: dts: qcom: sdm845-tama: Set serial indices and stdout-path arm64: dts: qcom: msm8996: Add missing interrupt to the USB2 controller arm64: dts: qcom: sc8280xp: Add missing SCM interconnect arm64: dts: qcom: sc8280xp-crd: Correct vreg_misc_3p3 GPIO arm64: dts: qcom: sm8250-edo: Rectify gpio-keys arm64: dts: qcom: sm8250-edo: Add GPIO line names for PMIC GPIOs arm64: dts: qcom: sm8250-edo: Add gpio line names for TLMM arm64: dts: qcom: msm8916-l8150: correct light sensor VDDIO supply arm64: dts: qcom: sm8250: correct dynamic power coefficients arm64: dts: qcom: sm6350: Fix ZAP region soc: qcom: ocmem: Fix NUM_PORTS & NUM_MACROS macros soc: qcom: ocmem: Add OCMEM hardware version print ASoC: stac9766: fix build errors with REGMAP_AC97 drm/hyperv: Fix a compilation issue because of not including screen_info.h drm/amd/display: Do not set drr on pipe commit quota: fix dqput() to follow the guarantees dquot_srcu should provide quota: add new helper dquot_active() quota: rename dquot_active() to inode_quota_active() quota: factor out dquot_write_dquot() ASoC: cs43130: Fix numerator/denominator mixup drm/bridge: tc358764: Fix debug print parameter order netrom: Deny concurrent connect(). net/sched: sch_hfsc: Ensure inner classes have fsc curve sfc: Check firmware supports Ethernet PTP filter cteonxt2-pf: Fix backpressure config for multiple PFC priorities to work simultaneously octeontx2-pf: Fix PFC TX scheduler free octeontx2-pf: Refactor schedular queue alloc/free calls hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() mlxsw: core_hwmon: Adjust module label names based on MTCAP sensor counter mlxsw: i2c: Limit single transaction buffer size mlxsw: i2c: Fix chunk size setting in output mailbox buffer net: arcnet: Do not call kfree_skb() under local_irq_disable() ice: avoid executing commands on other ports when driving sync wifi: ath9k: use IS_ERR() with debugfs_create_dir() arm64: mm: use ptep_clear() instead of pte_clear() in clear_flush() Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() wifi: mwifiex: avoid possible NULL skb pointer dereference mac80211: make ieee80211_tx_info padding explicit wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute wifi: ath9k: protect WMI command response buffer replacement with a lock wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx samples/bpf: fix broken map lookup probe samples/bpf: fix bio latency check with tracepoint ARM: dts: Add .dts files missing from the build wifi: mwifiex: Fix missed return in oob checks failed path wifi: mwifiex: fix memory leak in mwifiex_histogram_read() net: annotate data-races around sk->sk_lingertime fs: ocfs2: namei: check return value of ocfs2_add_entry() lwt: Check LWTUNNEL_XMIT_CONTINUE strictly lwt: Fix return values of BPF xmit ops hwrng: iproc-rng200 - Implement suspend and resume calls crypto: caam - fix unchecked return value error ice: ice_aq_check_events: fix off-by-one check when filling buffer net-memcg: Fix scope of sockmem pressure indicators selftests/bpf: Clean up fmod_ret in bench_rename test script selftests/bpf: Fix repeat option when kfunc_call verification fails net: tcp: fix unexcepted socket die when snd_wnd is 0 Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor Bluetooth: Fix potential use-after-free when clear keys Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() crypto: api - Use work queue in crypto_destroy_instance crypto: stm32 - Properly handle pm_runtime_get failing kbuild: rust_is_available: fix confusion when a version appears in the path kbuild: rust_is_available: add check for `bindgen` invocation kbuild: rust_is_available: fix version check when CC has multiple arguments kbuild: rust_is_available: remove -v option selftests/bpf: fix static assert compilation issue for test_cls_*.c wifi: mwifiex: fix error recovery in PCIE buffer descriptor management wifi: mwifiex: Fix OOB and integer underflow when rx packets wifi: mt76: mt7915: fix power-limits while chan_switch can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH bpf: reject unhashed sockets in bpf_sk_assign udp: re-score reuseport groups when connected sockets are present wifi: mt76: mt7921: fix non-PSC channel scan fail wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() regmap: rbtree: Use alloc_flags for memory allocations hwrng: pic32 - use devm_clk_get_enabled hwrng: nomadik - keep clock enabled while hwrng is registered tcp: tcp_enter_quickack_mode() should be static crypto: qat - change value of default idle filter bpf: Fix an error in verifying a field in a union bpf: Clear the probe_addr for uprobe libbpf: Fix realloc API handling in zero-sized edge cases bpftool: Use a local bpf_perf_event_value to fix accessing its fields bpftool: Use a local copy of BPF_LINK_TYPE_PERF_EVENT in pid_iter.bpf.c bpftool: Define a local bpf_perf_link to fix accessing its fields bpftool: use a local copy of perf_event to fix accessing :: Bpf_cookie selftests/bpf: Fix bpf_nf failure upon test rerun cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit() x86/efistub: Fix PCI ROM preservation in mixed mode cpufreq: amd-pstate-ut: Fix kernel panic when loading the driver cpufreq: amd-pstate-ut: Remove module parameter access thermal/of: Fix potential uninitialized value access ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table ACPI: x86: s2idle: Post-increment variables when getting constraints irqchip/loongson-eiointc: Fix return value checking of eiointc_index s390/paes: fix PKEY_TYPE_EP11_AES handling for secure keyblobs s390/pkey: fix PKEY_TYPE_EP11_AES handling for sysfs attributes s390/pkey: fix PKEY_TYPE_EP11_AES handling in PKEY_GENSECK2 IOCTL s390/pkey: fix/harmonize internal keyblob headers selftests/futex: Order calls to futex_lock_pi perf/imx_ddr: don't enable counter0 if none of 4 counters are used sched/rt: Fix sysctl_sched_rr_timeslice intial value arm64/fpsimd: Only provide the length to cpufeature for xCR registers arm64/sme: Don't use streaming mode to probe the maximum SME VL x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved sched/psi: Select KERNFS as needed arm64/ptrace: Clean up error handling path in sve_set_common() selftests/resctrl: Close perf value read fd on errors selftests/resctrl: Unmount resctrl FS if child fails to run benchmark selftests/resctrl: Don't leak buffer in fill_cache() selftests/resctrl: Add resctrl.h into build deps OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd() refscale: Fix uninitalized use of wait_queue_head_t ARM: ptrace: Restore syscall skipping for tracers ARM: ptrace: Restore syscall restart tracing vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing selftests/harness: Actually report SKIP for signal tests tmpfs: verify {g,u}id mount options correctly iomap: Remove large folio handling in iomap_invalidate_folio() fs: Fix error checking for d_hash_and_lookup() eventfd: prevent underflow for eventfd semaphores reiserfs: Check the return value from __getblk() tools/resolve_btfids: Fix setting HOSTCFLAGS tools/resolve_btfids: Pass HOSTCFLAGS as EXTRA_CFLAGS to prepare targets tools/resolve_btfids: Tidy HOST_OVERRIDES tools/resolve_btfids: Compile resolve_btfids as host program tools/resolve_btfids: Alter how HOSTCC is forced tools/resolve_btfids: Install subcmd headers tools/resolve_btfids: Use pkg-config to locate libelf tools lib subcmd: Add dependency test to install_headers tools lib subcmd: Make install_headers clearer tools lib subcmd: Add install target Revert "net: macsec: preserve ingress frame ordering" Revert "PCI: tegra194: Enable support for 256 Byte payload" Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN udf: Handle error when adding extent to a file udf: Check consistency of Space Bitmap Descriptor drm/amd/display: ensure async flips are only accepted for fast updates net: Avoid address overwrite in kernel_connect KVM: x86/mmu: Add "never" option to allow sticky disabling of nx_huge_pages KVM: x86/mmu: Use kstrtobool() instead of strtobool() tpm: Enable hwrng only for Pluton on AMD CPUs crypto: rsa-pkcs1pad - Use helper to set reqsize cpufreq: intel_pstate: set stale CPU frequency to minimum of: property: Simplify of_link_to_phandle() platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications tracing: Introduce pipe_cpumask to avoid race on trace_pipes net: sfp: handle 100G/25G active optical cables in sfp_parse_support ALSA: seq: oss: Fix racy open/close of MIDI devices LoongArch: Fix the write_fcsr() macro LoongArch: Let pmd_present() return true when splitting pmd scsi: lpfc: Fix incorrect big endian type assignment in bsg loopback path scsi: storvsc: Always set no_report_opcodes scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity sctp: handle invalid error codes without calling BUG() cifs: fix max_credits implementation cifs: fix sockaddr comparison in iface_cmp bnx2x: fix page fault following EEH recovery netlabel: fix shift wrapping bug in netlbl_catmap_setlong() wifi: mac80211: Use active_links instead of valid_links in Tx wifi: cfg80211: remove links only on AP drm/amdgpu: Match against exact bootloader status net: hns3: restore user pause configure when disable autoneg scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock scsi: lpfc: Remove reftag check in DIF paths platform/x86/amd/pmf: Fix unsigned comparison with less than zero idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM powerpc/powermac: Use early_* IO variants in via_calibrate_decr() wifi: brcmfmac: Fix field-spanning write in brcmf_scan_params_v2_to_v1() net: usb: qmi_wwan: add Quectel EM05GV2 net: annotate data-races around sk->sk_{rcv|snd}timeo net: dsa: microchip: KSZ9477 register regmap alignment to 32 bit boundaries Revert "wifi: ath6k: silence false positive -Wno-dangling-pointer warning on GCC 12" vmbus_testing: fix wrong python syntax for integer value comparison clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM kprobes: Prohibit probing on CFI preamble symbol security: keys: perform capable check only on privileged operations staging: fbtft: ili9341: use macro FBTFT_REGISTER_SPI_DRIVER ALSA: usb-audio: Update for native DSD support quirks ata: pata_arasan_cf: Use dev_err_probe() instead dev_err() in data_xfer() ovl: Always reevaluate the file signature for IMA drm/amd/display: Exit idle optimizations before attempt to access PHY drm/amd/display: Guard DCN31 PHYD32CLK logic against chip family drm/amd/smu: use AverageGfxclkFrequency* to replace previous GFX Curr Clock platform/x86: huawei-wmi: Silence ambient light sensor platform/x86: asus-wmi: Fix setting RGB mode on some TUF laptops platform/x86: think-lmi: Use kfree_sensitive instead of kfree platform/x86/intel/hid: Add HP Dragonfly G2 to VGBS DMI quirks platform/x86: intel: hid: Always call BTNL ACPI method ALSA: usb-audio: Add quirk for Microsoft Modern Wireless Headset ASoC: atmel: Fix the 8K sample parameter in I2SC master ASoC: rt711-sdca: fix for JD event handling in ClockStop Mode0 ASoC: rt711: fix for JD event handling in ClockStop Mode0 ASoc: codecs: ES8316: Fix DMIC config ASoC: rt5682-sdw: fix for JD event handling in ClockStop Mode0 fs/nls: make load_nls() take a const parameter s390/dasd: fix hanging device after request requeue s390/dasd: use correct number of retries for ERP requests m68k: Fix invalid .section syntax ethernet: atheros: fix return value check in atl1c_tso_csum() ASoC: nau8821: Add DMI quirk mechanism for active-high jack-detect ASoC: da7219: Check for failure reading AAD IRQ events ASoC: da7219: Flush pending AAD IRQ when suspending ksmbd: fix out of bounds in init_smb2_rsp_hdr() ksmbd: no response from compound read ksmbd: validate session id and tree id in compound request ksmbd: fix out of bounds in smb3_decrypt_req() 9p: virtio: make sure 'offs' is initialized in zc_request 9p: virtio: fix unlikely null pointer deref in handle_rerror media: pci: cx23885: fix error handling for cx23885 ATSC boards media: pulse8-cec: handle possible ping error media: amphion: use dev_err_probe phy: qcom-snps-femto-v2: use qcom_snps_hsphy_suspend/resume error code Revert "MIPS: unhide PATA_PLATFORM" media: uapi: HEVC: Add num_delta_pocs_of_ref_rps_idx field powerpc/boot: Disable power10 features after BOOTAFLAGS assignment ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP platform ARM: dts: imx: Set default tuning step for imx7d usdhc Revert "Revert drm/amd/display: Enable Freesync Video Mode by default" scsi: ufs: Try harder to change the power mode Partially revert "drm/amd/display: Fix possible underflow for displays with large vblank" Revert "bridge: Add extack warning when enabling STP in netns." Linux 6.1.52 pinctrl: amd: Don't show `Invalid config param` errors usb: typec: tcpci: clear the fault status bit nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers() dt-bindings: sc16is7xx: Add property to change GPIO function tcpm: Avoid soft reset when partner does not support get_status fsi: master-ast-cf: Add MODULE_FIRMWARE macro firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe serial: sc16is7xx: fix bug when first setting GPIO direction serial: sc16is7xx: fix broken port 0 uart init serial: qcom-geni: fix opp vote on shutdown wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU wifi: mt76: mt7921: do not support one stream on secondary antenna only Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition staging: rtl8712: fix race condition HID: wacom: remove the battery when the EKR is off usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 usb: dwc3: meson-g12a: do post init to fix broken usb after resumption ALSA: usb-audio: Fix init call orders for UAC1 USB: serial: option: add FOXCONN T99W368/T99W373 product USB: serial: option: add Quectel EM05G variant (0x030e) modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index mmc: au1xmmc: force non-modular build and remove symbol_get usage ARM: pxa: remove use of symbol_get() ksmbd: reduce descriptor size if remaining bytes is less than request size ksmbd: replace one-element array with flex-array member in struct smb2_ea_info ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob() ksmbd: fix wrong DataOffset validation of create context erofs: ensure that the post-EOF tails are all zeroed Linux 6.1.51 thunderbolt: Fix a backport error for display flickering issue kallsyms: Fix kallsyms_selftest failure io_uring/parisc: Adjust pgoff in io_uring mmap() for parisc parisc: sys_parisc: parisc_personality() is called from asm code parisc: Cleanup mmap implementation regarding color alignment lockdep: fix static memory detection even more ARM: module: Use module_init_layout_section() to spot init sections arm64: module: Use module_init_layout_section() to spot init sections arm64: module-plts: inline linux/moduleloader.h module: Expose module_init_layout_section() ACPI: thermal: Drop nocrt parameter Linux 6.1.50 ASoC: amd: vangogh: select CONFIG_SND_AMD_ACP_CONFIG maple_tree: disable mas_wr_append() when other readers are possible ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ gpio: sim: pass the GPIO device's software node to irq domain gpio: sim: dispose of irq mappings before destroying the irq_sim domain dma-buf/sw_sync: Avoid recursive lock during fence signal pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} pinctrl: renesas: rzv2m: Fix NULL pointer dereference in rzv2m_dt_subnode_to_map() pinctrl: renesas: rzg2l: Fix NULL pointer dereference in rzg2l_dt_subnode_to_map() clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' scsi: core: raid_class: Remove raid_component_add() scsi: snic: Fix double free in snic_tgt_create() madvise:madvise_free_pte_range(): don't use mapcount() against large folio for sharing check can: raw: add missing refcount for memory leak fix ublk: remove check IO_URING_F_SQE128 in ublk_ch_uring_cmd thunderbolt: Fix Thunderbolt 3 display flickering issue on 2nd hot plug onwards cgroup/cpuset: Free DL BW in case can_attach() fails sched/deadline: Create DL BW alloc, free & check overflow interface cgroup/cpuset: Iterate only if DEADLINE tasks are present sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets sched/cpuset: Bring back cpuset_mutex cgroup/cpuset: Rename functions dealing with DEADLINE accounting nfsd: use vfs setgid helper nfs: use vfs setgid helper selftests/net: mv bpf/nat6to4.c to net folder hwmon: (aquacomputer_d5next) Add selective 200ms delay after sending ctrl report x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 x86/fpu: Invalidate FPU state correctly on exec() drm/display/dp: Fix the DP DSC Receiver cap size drm/i915/dgfx: Enable d3cold at s2idle drm/vmwgfx: Fix shader stage validation PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus media: vcodec: Fix potential array out-of-bounds in encoder queue_setup pinctrl: amd: Mask wake bits on probe again of: dynamic: Refactor action prints to not use "%pOF" inside devtree_lock of: unittest: Fix EXPECT for parse_phandle_with_args_map() test radix tree: remove unused variable riscv: Fix build errors using binutils2.37 toolchains riscv: Handle zicsr/zifencei issue between gcc and binutils lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels batman-adv: Hold rtnl lock during MTU update via netlink batman-adv: Fix batadv_v_ogm_aggr_send memory leak batman-adv: Fix TT global entry leak when client roamed back batman-adv: Do not get eth header before batadv_check_management_packet batman-adv: Don't increase MTU when set by user batman-adv: Trigger events for auto adjusted MTU selinux: set next pointer before attaching to list nfsd: Fix race to FREE_STATEID and cl_revoked NFS: Fix a use after free in nfs_direct_join_group() mm: memory-failure: fix unexpected return value in soft_offline_page() mm: add a call to flush_cache_vmap() in vmap_pfn() mm/gup: handle cont-PTE hugetlb pages correctly in gup_must_unshare() via GUP-fast ALSA: ymfpci: Fix the missing snd_card_free() call at probe error shmem: fix smaps BUG sleeping while atomic mm,ima,kexec,of: use memblock_free_late from ima_free_kexec_buffer clk: Fix slab-out-of-bounds error in devm_clk_release() NFSv4: Fix dropped lock for racing OPEN and delegation return platform/x86: ideapad-laptop: Add support for new hotkeys found on ThinkBook 14s Yoga ITL wifi: mac80211: limit reorder_buf_filtered to avoid UBSAN warning ibmveth: Use dcbf rather than dcbfl ASoC: cs35l41: Correct amp_gain_tlv values ASoC: amd: yc: Add VivoBook Pro 15 to quirks list for acp6x io_uring/msg_ring: fix missing lock on overflow for IOPOLL io_uring/msg_ring: move double lock/unlock helpers higher up io_uring: extract a io_msg_install_complete helper io_uring: get rid of double locking KVM: x86/mmu: Fix an sign-extension bug with mmu_seq that hangs vCPUs KVM: x86: Preserve TDP MMU roots until they are explicitly invalidated bonding: fix macvlan over alb bond support rtnetlink: Reject negative ifindexes in RTM_NEWLINK netfilter: nf_tables: fix out of memory error handling netfilter: nf_tables: flush pending destroy work before netlink notifier i40e: fix potential NULL pointer dereferencing of pf->vf i40e_sync_vsi_filters() net/sched: fix a qdisc modification with ambiguous command request igc: Fix the typo in the PTM Control macro igb: Avoid starting unnecessary workqueues can: isotp: fix support for transmission of SF without flow control selftests: bonding: do not set port down before adding to bond ice: Fix NULL pointer deref during VF reset Revert "ice: Fix ice VF reset during iavf initialization" ice: fix receive buffer size miscalculation ipv4: fix data-races around inet->inet_id net: validate veth and vxcan peer ifindexes net: bcmgenet: Fix return value check for fixed_phy_register() net: bgmac: Fix return value check for fixed_phy_register() net: dsa: mt7530: fix handling of 802.1X PAE frames selftests: mlxsw: Fix test failure on Spectrum-4 mlxsw: Fix the size of 'VIRT_ROUTER_MSB' mlxsw: reg: Fix SSPR register layout mlxsw: pci: Set time stamp fields also when its type is MIRROR_UTC ipvlan: Fix a reference count leak warning in ipvlan_ns_exit() dccp: annotate data-races in dccp_poll() sock: annotate data-races around prot->memory_pressure net: dsa: felix: fix oversize frame dropping for always closed tc-taprio gates devlink: add missing unregister linecard notification devlink: move code to a dedicated directory octeontx2-af: SDP: fix receive link config tracing: Fix memleak due to race between current_tracer and trace tracing: Fix cpu buffers unavailable due to 'record_disabled' missed drm/i915/gt: Support aux invalidation on all engines drm/i915/gt: Poll aux invalidation register bit on invalidation drm/i915/gt: Ensure memory quiesced before invalidation drm/i915: Add the gen12_needs_ccs_aux_inv helper s390/zcrypt: fix reply buffer calculations for CCA replies s390/zcrypt: remove unnecessary (void *) conversions can: raw: fix lockdep issue in raw_release() can: raw: fix receiver memory leak jbd2: fix a race when checking checkpoint buffer busy jbd2: remove journal_clean_one_cp_list() jbd2: remove t_checkpoint_io_list MIPS: cpu-features: Use boot_cpu_type for CPU type based features MIPS: cpu-features: Enable octeon_cache by cpu_type PCI: acpiphp: Reassign resources on bridge if necessary video/aperture: Move vga handling to pci function video/aperture: Only kick vgacon when the pdev is decoding vga drm/aperture: Remove primary argument drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers fbdev/radeon: use pci aperture helpers drm/ast: Use drm_aperture_remove_conflicting_pci_framebuffers xprtrdma: Remap Receive buffers after a reconnect NFSv4: fix out path in __nfs4_get_acl_uncached NFSv4.2: fix error handling in nfs42_proc_getxattr Linux 6.1.49 Revert "f2fs: fix to do sanity check on direct node in truncate_dnode()" Revert "f2fs: fix to set flush_merge opt and show noflush_merge" Revert "f2fs: don't reset unchangable mount option in f2fs_remount()" objtool/x86: Fix SRSO mess Linux 6.1.48 x86/srso: Correct the mitigation status when SMT is disabled objtool/x86: Fixup frame-pointer vs rethunk x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG x86/srso: Disable the mitigation on unaffected configurations x86/CPU/AMD: Fix the DIV(0) initial fix attempt x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() x86/static_call: Fix __static_call_fixup() x86/srso: Explain the untraining sequences a bit more x86/cpu: Cleanup the untrain mess x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 x86/cpu: Rename original retbleed methods x86/cpu: Clean up SRSO return thunk mess x86/alternative: Make custom return thunk unconditional x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() x86/cpu: Fix __x86_return_thunk symbol type Linux 6.1.47 mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create af_unix: Fix null-ptr-deref in unix_stream_sendpage(). drm/amdgpu: keep irq count in amdgpu_irq_disable_all drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 arm64/ptrace: Ensure that SME is set up for target when writing SSVE state netfilter: set default timeout to 3 secs for sctp shutdown send and recv state hugetlb: do not clear hugetlb dtor until allocating vmemmap drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register sched/fair: Remove capacity inversion detection sched/fair: unlink misfit task from cpu overutilized zsmalloc: allow only one active pool compaction context drm/amd/display: disable RCO for DCN314 ASoC: amd: vangogh: select CONFIG_SND_AMD_ACP_CONFIG drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix drm/amd: flush any delayed gfxoff on suspend entry drm/i915/sdvo: fix panel_type initialization drm/qxl: fix UAF on handle creation mmc: block: Fix in_flight[issue_type] value error mmc: wbsd: fix double mmc_free_host() in wbsd_init() blk-crypto: dynamically allocate fallback profile arm64: dts: rockchip: Fix Wifi/Bluetooth on ROCK Pi 4 boards virtio-net: Zero max_tx_vq field for VIRTIO_NET_CTRL_MQ_HASH_CONFIG case cifs: Release folio lock on fscache read hit. ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. serial: 8250: Fix oops for port->pm on uart_change_pm() riscv: uaccess: Return the number of bytes effectively not copied ALSA: hda/realtek - Remodified 3k pull low procedure soc: aspeed: socinfo: Add kfree for kstrdup soc: aspeed: uart-routing: Use __sysfs_match_string ALSA: hda/realtek: Add quirks for HP G11 Laptops ASoC: meson: axg-tdm-formatter: fix channel slot allocation ASoC: rt5665: add missed regulator_bulk_disable arm64: dts: imx93: Fix anatop node size ARM: dts: imx: Set default tuning step for imx6sx usdhc arm64: dts: imx8mm: Drop CSI1 PHY reference clock configuration ARM: dts: imx6: phytec: fix RTC interrupt level ARM: dts: imx: align LED node names with dtschema arm64: dts: rockchip: Disable HS400 for eMMC on ROCK 4C+ arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict bus: ti-sysc: Flush posted write on enable before reset ice: Block switchdev mode when ADQ is active and vice versa qede: fix firmware halt over suspend and resume net: do not allow gso_size to be set to GSO_BY_FRAGS sock: Fix misuse of sk_under_memory_pressure() sfc: don't unregister flow_indr if it was never registered net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset i40e: fix misleading debug logs iavf: fix FDIR rule fields masks validation net: openvswitch: reject negative ifindex team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves net: phy: broadcom: stub c45 read/write for 54810 netfilter: nft_dynset: disallow object maps ipvs: fix racy memcpy in proc_do_sync_threshold netfilter: nf_tables: deactivate catchall elements in next generation netfilter: nf_tables: fix false-positive lockdep splat octeon_ep: cancel tx_timeout_task later in remove sequence net: macb: In ZynqMP resume always configure PS GTR for non-wakeup source drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs selftests: mirror_gre_changes: Tighten up the TTL test match net: phy: fix IRQ-based wake-on-lan over hibernate / power off net: pcs: Add missing put_device call in miic_create virtio-net: set queues after driver_ok virtio_net: notify MAC address change on device initialization xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH xfrm: add NULL check in xfrm_update_ae_params ip_vti: fix potential slab-use-after-free in decode_session6 ip6_vti: fix slab-use-after-free in decode_session6 xfrm: fix slab-use-after-free in decode_session6 net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure net: af_key: fix sadb_x_filter validation net: xfrm: Fix xfrm_address_filter OOB read i2c: designware: Handle invalid SMBus block data response length value i2c: designware: Correct length byte validation logic btrfs: fix BUG_ON condition in btrfs_cancel_balance btrfs: fix incorrect splitting in btrfs_drop_extent_map_range tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux vdpa: Enable strict validation for netlinks ops vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check vdpa: Add queue index attr to vdpa_nl_policy for nlattr length check vdpa: Add features attr to vdpa_nl_policy for nlattr length check powerpc/rtas_flash: allow user copy to flash block cache objects fbdev: mmp: fix value check in mmphw_probe() i2c: tegra: Fix i2c-tegra DMA config option processing i2c: hisi: Only handle the interrupt of the driver's transfer i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue cifs: fix potential oops in cifs_oplock_break vdpa/mlx5: Delete control vq iotlb in destroy_mr only when necessary vdpa/mlx5: Fix mr->initialized semantics vduse: Use proper spinlock for IRQ injection virtio-mmio: don't break lifecycle of vm_dev btrfs: fix use-after-free of new block group that became unused btrfs: convert btrfs_block_group::seq_zone to runtime flag btrfs: convert btrfs_block_group::needs_free_space to runtime flag btrfs: move out now unused BG from the reclaim list video/aperture: Only remove sysfb on the default vga pci device fbdev/hyperv-fb: Do not set struct fb_info.apertures ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node KVM: arm64: vgic-v4: Make the doorbell request robust w.r.t preemption drm/amd/display: fix access hdcp_workqueue assert drm/amd/display: phase3 mst hdcp for multiple displays drm/amd/display: save restore hdcp state when display is unplugged from mst hub igc: read before write to SRRCTL register ring-buffer: Do not swap cpu_buffer during resize process Bluetooth: MGMT: Use correct address for memcpy() powerpc/kasan: Disable KCOV in KASAN code ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V ALSA: hda/realtek: Add quirk for ASUS ROG GA402X ALSA: hda/realtek: Add quirk for ASUS ROG GX650P ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 fs/ntfs3: Mark ntfs dirty when on-disk struct is corrupted fs: ntfs3: Fix possible null-pointer dereferences in mi_read() fs/ntfs3: Enhance sanity check while generating attr_list drm/amdgpu: Fix potential fence use-after-free v2 ceph: try to dump the msgs when decoding fails Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally Bluetooth: L2CAP: Fix use-after-free watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) firewire: net: fix use after free in fwnet_finish_incoming_packet() thunderbolt: Limit Intel Barlow Ridge USB3 bandwidth thunderbolt: Add Intel Barlow Ridge PCI ID pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() gfs2: Fix possible data races in gfs2_show_options() usb: chipidea: imx: add missing USB PHY DPDM wakeup setting usb: chipidea: imx: don't request QoS for imx8ulp thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() media: platform: mediatek: vpu: fix NULL ptr dereference usb: gadget: uvc: queue empty isoc requests if no video buffer is available usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push media: camss: set VFE bpl_alignment to 16 for sdm845 and sm8250 media: v4l2-mem2mem: add lock to protect parameter num_rdy led: qcom-lpg: Fix resource leaks in for_each_available_child_of_node() loops serial: stm32: Ignore return value of uart_remove_one_port() in .remove() cifs: fix session state check in reconnect to avoid use-after-free issue smb: client: fix warning in cifs_smb3_do_mount() ALSA: hda/realtek: Add quirks for ROG ALLY CS35l41 audio HID: intel-ish-hid: ipc: Add Arrow Lake PCI device ID ASoC: SOF: core: Free the firmware trace before calling snd_sof_shutdown() drm/amd/display: Enable dcn314 DPP RCO drm/amd/display: Skip DPP DTO update if root clock is gated RDMA/mlx5: Return the firmware result upon destroying QP/RQ drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz drm/amdgpu: install stub fence into potential unused fence pointers iommu/amd: Introduce Disable IRTE Caching Support HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard accel/habanalabs: add pci health check during heartbeat dma-remap: use kvmalloc_array/kvfree for larger dma memory remap ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion iopoll: Call cpu_relax() in busy loops ASoC: Intel: sof_sdw: Add support for Rex soundwire ASoC: Intel: sof_sdw_rt_sdca_jack_common: test SOF_JACK_JDSRC in _exit ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings ASoC: amd: vangogh: Add check for acp config flags in vangogh platform drm: rcar-du: remove R-Car H3 ES1.* workarounds drm/stm: ltdc: fix late dereference check ASoC: SOF: amd: Add pci revision id check PCI: tegra194: Fix possible array out of bounds access ASoC: Intel: sof_sdw: add quirk for LNL RVP ASoC: Intel: sof_sdw: add quirk for MTL RVP drm/amdgpu: fix memory leak in mes self test drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 drm/amdgpu: fix calltrace warning in amddrm_buddy_fini net: phy: at803x: fix the wol setting functions net: phy: at803x: Use devm_regulator_get_enable_optional() net/smc: Fix setsockopt and sysctl to specify same buffer size again net/smc: replace mutex rmbs_lock and sndbufs_lock with rw_semaphore selftests: forwarding: tc_actions: Use ncat instead of nc selftests: forwarding: tc_actions: cleanup temporary files when test is aborted zsmalloc: fix races between modifications of fullness and isolated zsmalloc: consolidate zs_pool's migrate_lock and size_class's locks cpuidle: psci: Move enabling OSI mode after power domains creation cpuidle: psci: Extend information in log about OSI/PC mode mmc: sdhci-f-sdh30: Replace with sdhci_pltfm Linux 6.1.46 drm/amd/pm/smu7: move variables to where they are used sch_netem: fix issues in netem_change() vs get_dist_table() alpha: remove __init annotation from exported page_is_ram() ACPI: scan: Create platform device for CS35L56 platform/x86: serial-multi-instantiate: Auto detect IRQ resource for CSC3551 scsi: qedf: Fix firmware halt over suspend and resume scsi: qedi: Fix firmware halt over suspend and resume scsi: fnic: Replace return codes in fnic_clean_pending_aborts() scsi: core: Fix possible memory leak if device_add() fails scsi: snic: Fix possible memory leak if device_add() fails scsi: 53c700: Check that command slot is not NULL scsi: ufs: renesas: Fix private allocation scsi: storvsc: Fix handling of virtual Fibre Channel timeouts scsi: core: Fix legacy /proc parsing buffer overflow netfilter: nf_tables: report use refcount overflow nvme-rdma: fix potential unbalanced freeze & unfreeze nvme-tcp: fix potential unbalanced freeze & unfreeze btrfs: set cache_block_group_error if we find an error btrfs: reject invalid reloc tree root keys with stack dump btrfs: exit gracefully if reloc roots don't match btrfs: properly clear end of the unreserved range in cow_file_range btrfs: don't stop integrity writeback too early btrfs: wait for actual caching progress during allocation gpio: sim: mark the GPIO chip as a one that can sleep gpio: ws16c48: Fix off-by-one error in WS16C48 resource region extent ibmvnic: Ensure login failure recovery is safe from other resets ibmvnic: Do partial reset on login failure ibmvnic: Handle DMA unmapping of login buffs in release functions ibmvnic: Unmap DMA login rsp buffer on send login fail ibmvnic: Enforce stronger sanity checks on login response net/mlx5: Reload auxiliary devices in pci error handlers net/mlx5: Skip clock update work when device is in error state net/mlx5: LAG, Check correct bucket when modifying LAG net/mlx5: Allow 0 for total host VFs dmaengine: owl-dma: Modify mismatched function name dmaengine: mcf-edma: Fix a potential un-allocated memory access net: hns3: fix strscpy causing content truncation issue nexthop: Fix infinite nexthop bucket dump when using maximum nexthop ID nexthop: Make nexthop bucket dump more efficient nexthop: Fix infinite nexthop dump when using maximum nexthop ID net: hns3: fix deadlock issue when externel_lb and reset are executed together net: hns3: add wait until mac link down net: hns3: refactor hclge_mac_link_status_wait for interface reuse net: dsa: ocelot: call dsa_tag_8021q_unregister() under rtnl_lock() on driver remove net: phy: at803x: remove set/get wol callbacks for AR8032 net: marvell: prestera: fix handling IPv4 routes with nhid net: tls: avoid discarding data on record close RDMA/umem: Set iova in ODP flow wifi: cfg80211: fix sband iftype data lookup for AP_VLAN drm/rockchip: Don't spam logs in atomic check IB/hfi1: Fix possible panic during hotplug remove iavf: fix potential races for FDIR filters drivers: vxlan: vnifilter: free percpu vni stats on error path drivers: net: prevent tun_build_skb() to exceed the packet size limit dccp: fix data-race around dp->dccps_mss_cache bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves xsk: fix refcount underflow in error path tunnels: fix kasan splat when generating ipv4 pmtu error tcp: add missing family to tcp_set_ca_state() tracepoint net/smc: Use correct buffer sizes when switching between TCP and SMC net/packet: annotate data-races around tp->status mptcp: fix the incorrect judgment for msk->cb_flags macsec: use DEV_STATS_INC() mISDN: Update parameter type of dsp_cmx_send() bpf, sockmap: Fix bug that strp_done cannot be called bpf, sockmap: Fix map type error in sock_map_del_link net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail() selftests: forwarding: tc_flower: Relax success criterion selftests: forwarding: Switch off timeout selftests: forwarding: Skip test when no interfaces are specified selftests: forwarding: hw_stats_l3_gre: Skip when using veth pairs selftests: forwarding: ethtool_extended_state: Skip when using veth pairs selftests: forwarding: ethtool: Skip when using veth pairs selftests: forwarding: Add a helper to skip test when using veth pairs selftests/rseq: Fix build with undefined __weak interconnect: qcom: sm8450: add enable_mask for bcm nodes interconnect: qcom: Add support for mask-based BCMs iio: core: Prevent invalid memory access when there is no parent drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes x86: Move gds_ucode_mitigated() declaration to header x86/speculation: Add cpu_show_gds() prototype x86/sev: Do not try to parse for the CC blob on non-AMD hardware x86/mm: Fix VDSO and VVAR placement on 5-level paging machines x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 x86/srso: Fix build breakage with the LLVM linker usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment usb: typec: tcpm: Fix response to vsafe0V event usb: common: usb-conn-gpio: Prevent bailing out if initial role is none USB: Gadget: core: Help prevent panic during UVC unconfigure usb: dwc3: Properly handle processing of pending events usb-storage: alauda: Fix uninit-value in alauda_check_media() misc: rtsx: judge ASPM Mode to set PETXCFG Reg binder: fix memory leak in binder_init() iio: adc: ina2xx: avoid NULL pointer dereference on OF device match iio: adc: ad7192: Fix ac excitation feature iio: frequency: admv1013: propagate errors from regulator_get_voltage() iio: cros_ec: Fix the allocation size for cros_ec_command io_uring: correct check for O_TMPFILE drm/amd/display: trigger timing sync only if TG is running drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set drm/amd/display: Retain phantom plane/stream if validation fails drm/amd/display: Disable phantom OTG after enable for plane disable drm/amd/display: Use update plane and stream routine for DCN32x drm/amd/display: Avoid ABM when ODM combine is enabled for eDP drm/amd/display: Update OTG instance in the commit stream drm/amd/display: Handle seamless boot stream drm/amd/display: Add function for validate and update new stream drm/amd/display: Handle virtual hardware detect drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings drm/amd/pm: expose swctf threshold setting for legacy powerplay drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput radix tree test suite: fix incorrect allocation size for pthreads hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 cpuidle: dt_idle_genpd: Add helper function to remove genpd topology drm/amd/display: limit DPIA link rate to HBR3 drm/amd: Disable S/G for APUs when 64GB or more host memory drm/amdgpu: add S/G display parameter drm/amd/display: check attr flag before set cursor degamma on DCN3+ drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap() drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues drm/nouveau/gr: enable memory loads on helper invocation on all channels nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM9B1 256G and 512G riscv/kexec: handle R_RISCV_CALL_PLT relocation type riscv,mmio: Fix readX()-to-delay() ordering riscv/kexec: load initrd high in available memory net: mana: Fix MANA VF unload when hardware is unresponsive dmaengine: pl330: Return DMA_PAUSED when transaction is paused mptcp: fix disconnect vs accept race mptcp: avoid bogus reset on fallback close selftests: mptcp: join: fix 'implicit EP' test selftests: mptcp: join: fix 'delete and re-add' test ipv6: adjust ndisc_is_useropt() to also return true for PIO mmc: moxart: read scr register without changing byte order wireguard: allowedips: expand maximum node depth selftests: forwarding: Set default IPv6 traceroute utility wifi: rtw89: fix 8852AE disconnection caused by RX full flags wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems() KVM: SEV: only access GHCB fields once KVM: SEV: snapshot the GHCB before accessing it ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea() ksmbd: validate command request size tpm: Add a helper for checking hwrng enabled tpm: Disable RNG for all AMD fTPMs Revert "loongarch/cpu: Switch to arch_cpu_finalize_init()" gcc-plugins: Reorganize gimple includes for GCC 13 Linux 6.1.45 x86/CPU/AMD: Do not leak quotient data after a division by 0 Revert "drm/i915: Disable DC states for all commits" drm/amdgpu: Use apt name for FW reserved region drm/amdgpu: Remove unnecessary domain argument drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 arm64/ptrace: Don't enable SVE when setting streaming SVE exfat: check if filename entries exceeds max filename length f2fs: don't reset unchangable mount option in f2fs_remount() f2fs: fix to set flush_merge opt and show noflush_merge selftests/rseq: Play nice with binaries statically linked against glibc 2.35+ drm/amd/display: skip CLEAR_PAYLOAD_ID_TABLE if device mst_en is 0 drm/amd/display: Ensure that planes are in the same order drm/imx/ipuv3: Fix front porch adjustment upon hactive aligning powerpc/mm/altmap: Fix altmap boundary check mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts mtd: rawnand: rockchip: fix oobfree offset and description mtd: rawnand: omap_elm: Fix incorrect type in assignment io_uring: annotate offset timeout races f2fs: fix to do sanity check on direct node in truncate_dnode() btrfs: remove BUG_ON()'s in add_new_free_space() ext2: Drop fragment support fs: Protect reconfiguration of sb read-write from racing writes net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb debugobjects: Recheck debug_objects_enabled before reporting Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb fs/sysv: Null check to prevent null-ptr-deref bug fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_load_attr_list() mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() file: reinstate f_pos locking optimization for regular files bpf, cpumap: Make sure kthread is running before map update returns clk: imx93: Propagate correct error in imx93_clocks_probe() drm/i915/gt: Cleanup aux invalidation registers drm/i915: Fix premature release of request's reusable memory drm/ttm: check null pointer before accessing when swapping open: make RESOLVE_CACHED correctly test for O_TMPFILE arm64/fpsimd: Sync FPSIMD state with SVE for SME only systems arm64/fpsimd: Clear SME state in the target task when setting the VL arm64/fpsimd: Sync and zero pad FPSIMD state for streaming SVE powerpc/ftrace: Create a dummy stackframe to fix stack unwind bpf: Disable preemption in bpf_event_output rbd: prevent busy loop when requesting exclusive lock x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) net: tap_open(): set sk_uid from current_fsuid() net: tun_chr_open(): set sk_uid from current_fsuid() arm64: dts: stratix10: fix incorrect I2C property for SCL signal bpf: Disable preemption in bpf_perf_event_output mtd: rawnand: meson: fix OOB available bytes for ECC mtd: spinand: toshiba: Fix ecc_get_status exfat: release s_lock before calling dir_emit() exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree firmware: arm_scmi: Drop OF node reference in the transport channel setup ceph: defer stopping mdsc delayed_work USB: zaurus: Add ID for A-300/B-500/C-700 libceph: fix potential hang in ceph_osdc_notify() scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices scsi: zfcp: Defer fc_rport blocking until after ADISC response rust: allocator: Prevent mis-aligned allocation tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen tcp_metrics: annotate data-races around tm->tcpm_net tcp_metrics: annotate data-races around tm->tcpm_vals[] tcp_metrics: annotate data-races around tm->tcpm_lock tcp_metrics: annotate data-races around tm->tcpm_stamp tcp_metrics: fix addr_same() helper prestera: fix fallback to previous version on same major version net/mlx5: fs_core: Skip the FTs in the same FS_TYPE_PRIO_CHAINS fs_prio net/mlx5: fs_core: Make find_closest_ft more generic vxlan: Fix nexthop hash size ip6mr: Fix skb_under_panic in ip6mr_cache_report() s390/qeth: Don't call dev_close/dev_open (DOWN/UP) net: dcb: choose correct policy to parse DCB_ATTR_BCN bnxt_en: Fix max_mtu setting for multi-buf XDP bnxt_en: Fix page pool logic for page size >= 64K net: netsec: Ignore 'phy-mode' on SynQuacer in DT mode net: korina: handle clk prepare error in korina_probe() net: ll_temac: fix error checking of irq_of_parse_and_map() bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free bpf, cpumap: Handle skb as well when clean up ptr_ring ice: Fix RDMA VSI removal during queue rebuild net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX. net: annotate data-races around sk->sk_priority net: add missing data-race annotation for sk_ll_usec net: add missing data-race annotations around sk->sk_peek_off net: annotate data-races around sk->sk_mark net: add missing READ_ONCE(sk->sk_rcvbuf) annotation net: add missing READ_ONCE(sk->sk_sndbuf) annotation net: add missing READ_ONCE(sk->sk_rcvlowat) annotation net: annotate data-races around sk->sk_max_pacing_rate net: annotate data-race around sk->sk_txrehash net: annotate data-races around sk->sk_reserved_mem qed: Fix scheduling in a tasklet while getting stats mISDN: hfcpci: Fix potential deadlock on &hc->lock net: sched: cls_u32: Fix match key mis-addressing perf test uprobe_from_different_cu: Skip if there is no gcc net: dsa: fix value check in bcm_sf2_sw_probe() rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length bpf: Add length check for SK_DIAG_BPF_STORAGE_REQ_MAP_FD parsing net/mlx5e: Move representor neigh cleanup to profile cleanup_tx net/mlx5e: Fix crash moving to switchdev mode when ntuple offload is set net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() net/mlx5: fix potential memory leak in mlx5e_init_rep_rx net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx net/mlx5e: fix double free in macsec_fs_tx_create_crypto_table_groups wifi: cfg80211: Fix return value in scan logic erofs: fix wrong primary bvec selection on deduplicated extents KVM: s390: fix sthyi error handling word-at-a-time: use the same return type for has_zero regardless of endianness firmware: arm_scmi: Fix chan_free cleanup on SMC lib/bitmap: workaround const_eval test build failure firmware: smccc: Fix use of uninitialised results structure arm64: dts: freescale: Fix VPU G2 clock arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux arm64: dts: phycore-imx8mm: Correction in gpio-line-names arm64: dts: phycore-imx8mm: Label typo-fix of VPU arm64: dts: imx8mm-venice-gw7904: disable disp_blk_ctrl arm64: dts: imx8mm-venice-gw7903: disable disp_blk_ctrl iommu/arm-smmu-v3: Document nesting-related errata iommu/arm-smmu-v3: Add explicit feature for nesting iommu/arm-smmu-v3: Document MMU-700 erratum 2812531 iommu/arm-smmu-v3: Work around MMU-600 erratum 1076982 net: ipa: only reset hashed tables when supported net/mlx5: Free irqs only on shutdown callback perf: Fix function pointer case io_uring: gate iowait schedule on having pending requests Linux 6.1.44 x86: fix backwards merge of GDS/SRSO bit xen/netback: Fix buffer overrun triggered by unusual packet x86/srso: Tie SBPB bit setting to microcode patch detection x86/srso: Add a forgotten NOENDBR annotation x86/srso: Fix return thunks in generated code x86/srso: Add IBPB on VMEXIT x86/srso: Add IBPB x86/srso: Add SRSO_NO support x86/srso: Add IBPB_BRTYPE support x86/srso: Add a Speculative RAS Overflow mitigation x86/cpu, kvm: Add support for CPUID_80000021_EAX x86/bugs: Increase the x86 bugs vector size to two u32s Documentation/x86: Fix backwards on/off logic about YMM support x86/mm: Initialize text poking earlier mm: Move mm_cachep initialization to mm_init() x86/mm: Use mm_alloc() in poking_init() x86/mm: fix poking_init() for Xen PV guests x86/xen: Fix secondary processors' FPU initialization x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build KVM: Add GDS_NO support to KVM x86/speculation: Add Kconfig option for GDS x86/speculation: Add force option to GDS mitigation x86/speculation: Add Gather Data Sampling mitigation x86/fpu: Move FPU initialization into arch_cpu_finalize_init() x86/fpu: Mark init functions __init x86/fpu: Remove cpuinfo argument from init functions x86/init: Initialize signal frame size late init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() init: Invoke arch_cpu_finalize_init() earlier init: Remove check_bugs() leftovers um/cpu: Switch to arch_cpu_finalize_init() sparc/cpu: Switch to arch_cpu_finalize_init() sh/cpu: Switch to arch_cpu_finalize_init() mips/cpu: Switch to arch_cpu_finalize_init() m68k/cpu: Switch to arch_cpu_finalize_init() loongarch/cpu: Switch to arch_cpu_finalize_init() ia64/cpu: Switch to arch_cpu_finalize_init() ARM: cpu: Switch to arch_cpu_finalize_init() x86/cpu: Switch to arch_cpu_finalize_init() init: Provide arch_cpu_finalize_init() Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/clock/xlnx,versal-clk.yaml Documentation/devicetree/bindings/extcon/maxim,max77843.yaml Documentation/devicetree/bindings/serial/nxp,sc16is7xx.txt android/abi_gki_aarch64_qcom drivers/bus/mhi/host/pm.c drivers/clk/qcom/gcc-sm8250.c drivers/interconnect/qcom/bcm-voter.c drivers/interconnect/qcom/icc-rpmh.h drivers/mailbox/qcom-ipcc.c Change-Id: I98acc81783883752e19e8d433e3db6977a0ebf7f Upstream-Build: ks_qcom-android14-6.1-keystone-qcom-release@11252216 UKQ2.231224.001 Signed-off-by: jianzhou <quic_jianzhou@quicinc.com>	2024-01-03 21:55:56 -08:00
Matthew Wilcox (Oracle)	4a518d8633	UPSTREAM: mm: handle write faults to RO pages under the VMA lock ... I think this is a pretty rare occurrence, but for consistency handle faults with the VMA lock held the same way that we handle other faults with the VMA lock held. Link: https://lkml.kernel.org/r/20231006195318.4087158-7-willy@infradead.org Signed-off-by: Matthew Wilcox (Oracle) <willy@infradead.org> Reviewed-by: Suren Baghdasaryan <surenb@google.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 4a68fef16df9d88d528094116f8bbd2dbfa62089) Bug: 293665307 Change-Id: I69cec218c8a1fe14df3268722e6b1be6dffe7978 Signed-off-by: Suren Baghdasaryan <surenb@google.com>	2024-01-03 20:45:51 +00:00
Matthew Wilcox (Oracle)	c1da94fa44	UPSTREAM: mm: handle read faults under the VMA lock ... Most file-backed faults are already handled through ->map_pages(), but if we need to do I/O we'll come this way. Since filemap_fault() is now safe to be called under the VMA lock, we can handle these faults under the VMA lock now. Link: https://lkml.kernel.org/r/20231006195318.4087158-6-willy@infradead.org Signed-off-by: Matthew Wilcox (Oracle) <willy@infradead.org> Reviewed-by: Suren Baghdasaryan <surenb@google.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 12214eba1992642eee5813a9cc9f626e5b2d1815) Bug: 293665307 Change-Id: Iee48af98b866d88d88ec01143eb26389ab373b6b Signed-off-by: Suren Baghdasaryan <surenb@google.com>	2024-01-03 20:45:51 +00:00
Matthew Wilcox (Oracle)	6541fffd92	UPSTREAM: mm: handle COW faults under the VMA lock ... If the page is not currently present in the page tables, we need to call the page fault handler to find out which page we're supposed to COW, so we need to both check that there is already an anon_vma and that the fault handler doesn't need the mmap_lock. Link: https://lkml.kernel.org/r/20231006195318.4087158-5-willy@infradead.org Signed-off-by: Matthew Wilcox (Oracle) <willy@infradead.org> Reviewed-by: Suren Baghdasaryan <surenb@google.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 4de8c93a4751e10737b6af65db42c743228c67a6) Bug: 293665307 Change-Id: If749a6f8fcf69d83bbf872c1d45865d1b1b77ea0 Signed-off-by: Suren Baghdasaryan <surenb@google.com>	2024-01-03 20:45:51 +00:00
Matthew Wilcox (Oracle)	c7fa581a79	UPSTREAM: mm: handle shared faults under the VMA lock ... There are many implementations of ->fault and some of them depend on mmap_lock being held. All vm_ops that implement ->map_pages() end up calling filemap_fault(), which I have audited to be sure it does not rely on mmap_lock. So (for now) key off ->map_pages existing as a flag to indicate that it's safe to call ->fault while only holding the vma lock. Link: https://lkml.kernel.org/r/20231006195318.4087158-4-willy@infradead.org Signed-off-by: Matthew Wilcox (Oracle) <willy@infradead.org> Reviewed-by: Suren Baghdasaryan <surenb@google.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 4ed4379881aa62588aba6442a9f362a8cf7624e6) Bug: 293665307 Change-Id: Ifb5ab3df5d05fb182d0cb52820fa24e28e2d6496 Signed-off-by: Suren Baghdasaryan <surenb@google.com>	2024-01-03 20:45:51 +00:00
Matthew Wilcox (Oracle)	95af8a80bb	BACKPORT: mm: call wp_page_copy() under the VMA lock ... It is usually safe to call wp_page_copy() under the VMA lock. The only unsafe situation is when no anon_vma has been allocated for this VMA, and we have to look at adjacent VMAs to determine if their anon_vma can be shared. Since this happens only for the first COW of a page in this VMA, the majority of calls to wp_page_copy() do not need to fall back to the mmap_sem. Add vmf_anon_prepare() as an alternative to anon_vma_prepare() which will return RETRY if we currently hold the VMA lock and need to allocate an anon_vma. This lets us drop the check in do_wp_page(). Link: https://lkml.kernel.org/r/20231006195318.4087158-3-willy@infradead.org Signed-off-by: Matthew Wilcox (Oracle) <willy@infradead.org> Reviewed-by: Suren Baghdasaryan <surenb@google.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 164b06f238b986317131e6b61b2f22aabcbc2cc0) [surenb: resolved merge conflicts due to folio/page differences] Bug: 293665307 Change-Id: I39bdc247b375bd3dae8078b52c60fd4ce12e1850 Signed-off-by: Suren Baghdasaryan <surenb@google.com>	2024-01-03 20:45:51 +00:00
Matthew Wilcox (Oracle)	b43b26b4cd	UPSTREAM: mm: make lock_folio_maybe_drop_mmap() VMA lock aware ... Patch series "Handle more faults under the VMA lock", v2. At this point, we're handling the majority of file-backed page faults under the VMA lock, using the ->map_pages entry point. This patch set attempts to expand that for the following siutations: - We have to do a read. This could be because we've hit the point in the readahead window where we need to kick off the next readahead, or because the page is simply not present in cache. - We're handling a write fault. Most applications don't do I/O by writes to shared mmaps for very good reasons, but some do, and it'd be nice to not make that slow unnecessarily. - We're doing a COW of a private mapping (both PTE already present and PTE not-present). These are two different codepaths and I handle both of them in this patch set. There is no support in this patch set for drivers to mark themselves as being VMA lock friendly; they could implement the ->map_pages vm_operation, but if they do, they would be the first. This is probably something we want to change at some point in the future, and I've marked where to make that change in the code. There is very little performance change in the benchmarks we've run; mostly because the vast majority of page faults are handled through the other paths. I still think this patch series is useful for workloads that may take these paths more often, and just for cleaning up the fault path in general (it's now clearer why we have to retry in these cases). This patch (of 6): Drop the VMA lock instead of the mmap_lock if that's the one which is held. Link: https://lkml.kernel.org/r/20231006195318.4087158-1-willy@infradead.org Link: https://lkml.kernel.org/r/20231006195318.4087158-2-willy@infradead.org Signed-off-by: Matthew Wilcox (Oracle) <willy@infradead.org> Reviewed-by: Suren Baghdasaryan <surenb@google.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 5d74b2ab2c15d596c470bae6626f345d5575a9d0) Bug: 293665307 Change-Id: Ife2d11ab12fb428868cd44751784cf731fbffe62 Signed-off-by: Suren Baghdasaryan <surenb@google.com>	2024-01-03 20:45:51 +00:00
Matthew Wilcox	9c4bc457ab	UPSTREAM: mm/memory.c: fix mismerge ... Fix a build issue. Link: https://lkml.kernel.org/r/ZNerqcNS4EBJA/2v@casper.infradead.org Fixes: 4aaa60dad4d1 ("mm: allow per-VMA locks on file-backed VMAs") Signed-off-by: Matthew Wilcox <willy@infradead.org> Reported-by: kernel test robot <lkp@intel.com> Closes: https://lore.kernel.org/oe-kbuild-all/202308121909.XNYBtqNI-lkp@intel.com/ Cc: Suren Baghdasaryan <surenb@google.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 08dff2810e8feb3096bf5c8242ab1649d1e8b1a4) Bug: 293665307 Change-Id: I07ce19f29c44831cdcf709fe1ce122d1963f0be2 Signed-off-by: Suren Baghdasaryan <surenb@google.com>	2024-01-03 20:45:51 +00:00
Charan Teja Kalla	6dd1f54e29	FROMLIST: mm: migrate high-order folios in swap cache correctly ... Large folios occupy N consecutive entries in the swap cache instead of using multi-index entries like the page cache. However, if a large folio is re-added to the LRU list, it can be migrated. The migration code was not aware of the difference between the swap cache and the page cache and assumed that a single xas_store() would be sufficient. This leaves potentially many stale pointers to the now-migrated folio in the swap cache, which can lead to almost arbitrary data corruption in the future. This can also manifest as infinite loops with the RCU read lock held. Bug: 315281107 Bug: 318454108 Change-Id: I455f964a9f21c13089890073777388236b6669d7 [willy@infradead.org: modifications to the changelog & tweaked the fix] Fixes: 3417013e0d ("mm/migrate: Add folio_migrate_mapping()") Link: https://lkml.kernel.org/r/20231214045841.961776-1-willy@infradead.org Link: https://lore.kernel.org/linux-mm/20231214045841.961776-1-willy@infradead.org/ Signed-off-by: Charan Teja Kalla <quic_charante@quicinc.com> Signed-off-by: Matthew Wilcox (Oracle) <willy@infradead.org> Reported-by: Charan Teja Kalla <quic_charante@quicinc.com> Closes: https://lkml.kernel.org/r/1700569840-17327-1-git-send-email-quic_charante@quicinc.com Cc: David Hildenbrand <david@redhat.com> Cc: Johannes Weiner <hannes@cmpxchg.org> Cc: Kirill A. Shutemov <kirill.shutemov@linux.intel.com> Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com> Cc: Shakeel Butt <shakeelb@google.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Charan Teja Kalla <quic_charante@quicinc.com> (cherry picked from commit 44702d8fa1)	2024-01-03 05:53:47 +00:00
SeongJae Park	ec7b81b0ab	mm/damon/core: make damon_start() waits until kdamond_fn() starts ... commit 6376a824595607e99d032a39ba3394988b4fce96 upstream. The cleanup tasks of kdamond threads including reset of corresponding DAMON context's ->kdamond field and decrease of global nr_running_ctxs counter is supposed to be executed by kdamond_fn(). However, commit 0f91d13366 ("mm/damon: simplify stop mechanism") made neither damon_start() nor damon_stop() ensure the corresponding kdamond has started the execution of kdamond_fn(). As a result, the cleanup can be skipped if damon_stop() is called fast enough after the previous damon_start(). Especially the skipped reset of ->kdamond could cause a use-after-free. Fix it by waiting for start of kdamond_fn() execution from damon_start(). Link: https://lkml.kernel.org/r/20231208175018.63880-1-sj@kernel.org Fixes: 0f91d13366 ("mm/damon: simplify stop mechanism") Signed-off-by: SeongJae Park <sj@kernel.org> Reported-by: Jakub Acs <acsjakub@amazon.de> Cc: Changbin Du <changbin.du@intel.com> Cc: Jakub Acs <acsjakub@amazon.de> Cc: <stable@vger.kernel.org> # 5.15.x Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: SeongJae Park <sj@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2024-01-01 12:39:08 +00:00
Arnd Bergmann	4768f82272	kasan: disable kasan_non_canonical_hook() for HW tags ... commit 17c17567fe510857b18fe01b7a88027600e76ac6 upstream. On arm64, building with CONFIG_KASAN_HW_TAGS now causes a compile-time error: mm/kasan/report.c: In function 'kasan_non_canonical_hook': mm/kasan/report.c:637:20: error: 'KASAN_SHADOW_OFFSET' undeclared (first use in this function) 637 | if (addr < KASAN_SHADOW_OFFSET) | ^~~~~~~~~~~~~~~~~~~ mm/kasan/report.c:637:20: note: each undeclared identifier is reported only once for each function it appears in mm/kasan/report.c:640:77: error: expected expression before ';' token 640 | orig_addr = (addr - KASAN_SHADOW_OFFSET) << KASAN_SHADOW_SCALE_SHIFT; This was caused by removing the dependency on CONFIG_KASAN_INLINE that used to prevent this from happening. Use the more specific dependency on KASAN_SW_TAGS || KASAN_GENERIC to only ignore the function for hwasan mode. Link: https://lkml.kernel.org/r/20231016200925.984439-1-arnd@kernel.org Fixes: 12ec6a919b0f ("kasan: print the original fault addr when access invalid shadow") Signed-off-by: Arnd Bergmann <arnd@arndb.de> Cc: Alexander Potapenko <glider@google.com> Cc: Andrey Konovalov <andreyknvl@gmail.com> Cc: Andrey Ryabinin <ryabinin.a.a@gmail.com> Cc: Dmitry Vyukov <dvyukov@google.com> Cc: Haibo Li <haibo.li@mediatek.com> Cc: Kees Cook <keescook@chromium.org> Cc: Vincenzo Frascino <vincenzo.frascino@arm.com> Cc: AngeloGioacchino Del Regno <angelogioacchino.delregno@collabora.com> Cc: Matthias Brugger <matthias.bgg@gmail.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Amit Pundir <amit.pundir@linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2024-01-01 12:38:52 +00:00
Charan Teja Kalla	44702d8fa1	FROMLIST: mm: migrate high-order folios in swap cache correctly ... Large folios occupy N consecutive entries in the swap cache instead of using multi-index entries like the page cache. However, if a large folio is re-added to the LRU list, it can be migrated. The migration code was not aware of the difference between the swap cache and the page cache and assumed that a single xas_store() would be sufficient. This leaves potentially many stale pointers to the now-migrated folio in the swap cache, which can lead to almost arbitrary data corruption in the future. This can also manifest as infinite loops with the RCU read lock held. Bug: 315281107 Change-Id: I455f964a9f21c13089890073777388236b6669d7 [willy@infradead.org: modifications to the changelog & tweaked the fix] Fixes: 3417013e0d ("mm/migrate: Add folio_migrate_mapping()") Link: https://lkml.kernel.org/r/20231214045841.961776-1-willy@infradead.org Link: https://lore.kernel.org/linux-mm/20231214045841.961776-1-willy@infradead.org/ Signed-off-by: Charan Teja Kalla <quic_charante@quicinc.com> Signed-off-by: Matthew Wilcox (Oracle) <willy@infradead.org> Reported-by: Charan Teja Kalla <quic_charante@quicinc.com> Closes: https://lkml.kernel.org/r/1700569840-17327-1-git-send-email-quic_charante@quicinc.com Cc: David Hildenbrand <david@redhat.com> Cc: Johannes Weiner <hannes@cmpxchg.org> Cc: Kirill A. Shutemov <kirill.shutemov@linux.intel.com> Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com> Cc: Shakeel Butt <shakeelb@google.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Charan Teja Kalla <quic_charante@quicinc.com>	2023-12-21 00:41:24 +00:00
David Stevens	da9b7c651c	mm/shmem: fix race in shmem_undo_range w/THP ... commit 55ac8bbe358bdd2f3c044c12f249fd22d48fe015 upstream. Split folios during the second loop of shmem_undo_range. It's not sufficient to only split folios when dealing with partial pages, since it's possible for a THP to be faulted in after that point. Calling truncate_inode_folio in that situation can result in throwing away data outside of the range being targeted. [akpm@linux-foundation.org: tidy up comment layout] Link: https://lkml.kernel.org/r/20230418084031.3439795-1-stevensd@google.com Fixes: b9a8a4195c ("truncate,shmem: Handle truncates that split large folios") Signed-off-by: David Stevens <stevensd@chromium.org> Cc: Matthew Wilcox (Oracle) <willy@infradead.org> Cc: Suleiman Souhlal <suleiman@google.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-12-20 17:00:26 +01:00
Yu Zhao	8ec07b0620	mm/mglru: fix underprotected page cache ... commit 081488051d28d32569ebb7c7a23572778b2e7d57 upstream. Unmapped folios accessed through file descriptors can be underprotected. Those folios are added to the oldest generation based on: 1. The fact that they are less costly to reclaim (no need to walk the rmap and flush the TLB) and have less impact on performance (don't cause major PFs and can be non-blocking if needed again). 2. The observation that they are likely to be single-use. E.g., for client use cases like Android, its apps parse configuration files and store the data in heap (anon); for server use cases like MySQL, it reads from InnoDB files and holds the cached data for tables in buffer pools (anon). However, the oldest generation can be very short lived, and if so, it doesn't provide the PID controller with enough time to respond to a surge of refaults. (Note that the PID controller uses weighted refaults and those from evicted generations only take a half of the whole weight.) In other words, for a short lived generation, the moving average smooths out the spike quickly. To fix the problem: 1. For folios that are already on LRU, if they can be beyond the tracking range of tiers, i.e., five accesses through file descriptors, move them to the second oldest generation to give them more time to age. (Note that tiers are used by the PID controller to statistically determine whether folios accessed multiple times through file descriptors are worth protecting.) 2. When adding unmapped folios to LRU, adjust the placement of them so that they are not too close to the tail. The effect of this is similar to the above. On Android, launching 55 apps sequentially: Before After Change workingset_refault_anon 25641024 25598972 0% workingset_refault_file 115016834 106178438 -8% Link: https://lkml.kernel.org/r/20231208061407.2125867-1-yuzhao@google.com Fixes: ac35a49023 ("mm: multi-gen LRU: minimal implementation") Signed-off-by: Yu Zhao <yuzhao@google.com> Reported-by: Charan Teja Kalla <quic_charante@quicinc.com> Tested-by: Kalesh Singh <kaleshsingh@google.com> Cc: T.J. Mercier <tjmercier@google.com> Cc: Kairui Song <ryncsn@gmail.com> Cc: Hillf Danton <hdanton@sina.com> Cc: Jaroslav Pulchart <jaroslav.pulchart@gooddata.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-12-20 17:00:26 +01:00
Greg Kroah-Hartman	a01e106f08	Merge branch 'android14-6.1' into branch 'android14-6.1-lts' ... This catches the android14-6.1-lts branch up with the latest changes and abi updates. Included in here are the following commits: 07775f9683 ANDROID: GKI: Add symbols for rockchip sata f44d373b32 ANDROID: sched: Add trace_android_rvh_setscheduler efa8f34b5a ANDROID: Update the ABI symbol list cee8ebf7c5 ANDROID: GKI: build damon for monitoring virtual address spaces 31c59d59c7 UPSTREAM: mm/damon/sysfs-schemes: handle tried region directory allocation failure 1cedfc05e9 UPSTREAM: mm/damon/sysfs-schemes: handle tried regions sysfs directory allocation failure 7fbeab3c65 UPSTREAM: mm/damon/sysfs: check error from damon_sysfs_update_target() 606444fd06 UPSTREAM: mm/damon/sysfs: eliminate potential uninitialized variable warning c132d077eb UPSTREAM: mm/damon/sysfs: update monitoring target regions for online input commit 6b7c4cc262 UPSTREAM: mm/damon/sysfs: remove requested targets when online-commit inputs 1e19db10e7 UPSTREAM: mm/damon/sysfs: avoid empty scheme tried regions for large apply interval c194e597cb UPSTREAM: mm/damon/sysfs-schemes: do not update tried regions more than one DAMON snapshot f5a0a8bc43 UPSTREAM: mm/damon/sysfs: check DAMOS regions update progress from before_terminate() b46391e092 UPSTREAM: mm/damon/sysfs: implement a command for updating only schemes tried total bytes 7d48e19f74 UPSTREAM: mm/damon/sysfs-schemes: implement DAMOS tried total bytes file a548d90994 UPSTREAM: mm/damon/ops-common: refactor to use {pte|pmd}p_clear_young_notify() ea215c9a10 UPSTREAM: mm/damon/core: skip apply schemes if empty 3ca21ef5fa UPSTREAM: mm/damon: use kstrtobool() instead of strtobool() 5bf7b56860 UPSTREAM: mm/damon/sysfs-schemes: implement DAMOS-tried regions clear command 80ccab9b0e UPSTREAM: mm/damon/sysfs: implement DAMOS tried regions update command 3421250b35 UPSTREAM: mm/damon/sysfs-schemes: implement scheme region directory b4c34cc168 UPSTREAM: mm/damon/sysfs-schemes: implement schemes/tried_regions directory b5d1f3576b UPSTREAM: mm/damon/core: add a callback for scheme target regions check 6547a97f32 UPSTREAM: mm/damon/lru_sort: enable and disable synchronously 540e9b850d UPSTREAM: mm/damon/reclaim: enable and disable synchronously 4e2d3f8e31 UPSTREAM: mm/damon/{reclaim,lru_sort}: remove unnecessarily included headers 3c0bc73f6e UPSTREAM: mm/damon/modules: deduplicate init steps for DAMON context setup 67ef7b0f42 UPSTREAM: mm/damon/sysfs: split out schemes directory implementation to separate file 0b17df8a4f UPSTREAM: mm/damon/sysfs: split out kdamond-independent schemes stats update logic into a new function a45dff567c UPSTREAM: mm/damon/sysfs: move unsigned long range directory to common module c5038d80ce UPSTREAM: mm/damon/sysfs: move sysfs_lock to common module b7fc8d59a5 UPSTREAM: mm/damon/sysfs: remove parameters of damon_sysfs_region_alloc() 19364f11a4 UPSTREAM: mm/damon/sysfs: use damon_addr_range for region's start and end values b6e6b1dbf8 UPSTREAM: mm/damon/core: split out scheme quota adjustment logic into a new function 43475d9708 UPSTREAM: mm/damon/core: split out scheme stat update logic into a new function 0b0a43029e UPSTREAM: mm/damon/core: split damos application logic into a new function 6c7495f04a UPSTREAM: mm/damon/core: split out DAMOS-charged region skip logic into a new function ac1031618a ANDROID: Snapshot Mainline's version of checkpatch.pl 4fa87d4d8f ANDROID: KVM: arm64: Skip prefaulting ptes which will be modified later fbc707442c ANDROID: KVM: arm64: Introduce module_change_host_prot_range fd720ebc6a ANDROID: KVM: arm64: Relax checks in module_change_host_page_prot f082d22541 ANDROID: KVM: arm64: Optimise module_change_host_page_prot 01dd8c280b ANDROID: KVM: arm64: Prefault entries when splitting a block mapping cc653d701f ANDROID: virt: gunyah: Zero state_data after vcpu_run cc294d9503 ANDROID: Update the ABI symbol list 956a0d3998 ANDROID: fs: Add vendor hooks for ep_create_wakeup_source & timerfd_create d8d2b95fd0 ANDROID: ABI: update symbol list for galaxy bcc758eed7 Reapply "binder: fix UAF caused by faulty buffer cleanup" b2b3a1e6d1 UPSTREAM: x86/sev: Check for user-space IOIO pointing to kernel space 62b97630d4 UPSTREAM: x86/sev: Check IOBM for IOIO exceptions from user-space 071c14698c FROMGIT: usb: typec: tcpm: skip checking port->send_discover in PD3.0 a9567a35d0 ANDROID: arm64: Disable workaround for CPU errata 2441007 and 2441009 Change-Id: Icbda2fae389ea4c2e7230821c59ac0380a35d756 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-12-19 19:05:29 +00:00