19831 Commits

Author	SHA1	Message	Date
jianzhou	63bb445b95	Merge keystone/android14-6.1-keystone-qcom-release.6.1.20 (2be6a1c) into msm-pineapple ... * refs/heads/tmp-2be6a1c: ANDROID: mm: add get_page_owner_handle function ANDROID: mm: add get_each_object_track function ANDROID: mm: Export get_slabinfo ANDROID: mm: Export page_ext_[get|put] ANDROID: mm: Export si_swapinfo ANDROID: mm: Export vmalloc_nr_pages ANDROID: mm: Export pcpu_nr_pages ANDROID: dma-buf: add dma_buf_get_each function ANDROID: abi_gki_aarch64_qcom: Update symbol list Revert "HID: core: Provide new max_buffer_size attribute to over-ride the default" Revert "HID: uhid: Over-ride the default maximum data buffer value with our own" Revert "ANDROID: sound: usb: Add vendor hooks for connect & disconnect" Revert "ANDROID: usb: host: export additional xhci symbols for ring management" Revert "ANDROID: sound: usb: Export symbols for endpoint management" ANDROID: abi_gki_aarch64_qcom: Sort list ANDROID: of: of_reserved_mem: Increase limit for reserved_mem regions ANDROID: update the db845c symbol list ANDROID: Update the .stg file due to internal io_uring changes Revert "netfilter: ctnetlink: make event listener tracking global" Revert "PCI: loongson: Prevent LS7A MRRS increases" Revert "PCI: loongson: Add more devices that need MRRS quirk" ANDROID: remove CONFIG_NET_CLS_TCINDEX from gki_defconfig ANDROID: GKI: Enable USB C DP alternate mode support ANDROID: abi_gki_aarch64_qcom: Add USB offload symbols ANDROID: sound: usb: Add vendor hooks for connect & disconnect ANDROID: sound: usb: Export symbols for endpoint management ANDROID: usb: host: export additional xhci symbols for ring management ANDROID: ABI: Update QCOM symbol list FROMGIT: f2fs: remove entire rb_entry sharing FROMGIT: f2fs: factor out discard_cmd usage from general rb_tree use FROMGIT: f2fs: factor out victim_entry usage from general rb_tree use UPSTREAM: loop: Fix use-after-free issues ANDROID: fuse-bpf: Correctly put backing files ANDROID: Revert "psi: allow unprivileged users with CAP_SYS_RESOURCE to write psi files" ANDROID: gic: Add vendor hook for gic-v3 resume ANDROID: abi_gki_aarch64_qcom: add system_freezable_power_efficient_wq ANDROID: GKI: arm64: Enable KMI strict mode ANDROID: GKI: QCOM: Remove stale symbols FROMGIT: usb: dwc3: gadget: Add 1ms delay after end transfer command without IOC Linux 6.1.20 UML: define RUNTIME_DISCARD_EXIT Revert "bpf, test_run: fix &xdp_frame misplacement for LIVE_FRAMES" filelocks: use mount idmapping for setlease permission check drm/amd/display: adjust MALL size available for DCN32 and DCN321 drm/amd/display: Allow subvp on vactive pipes that are 2560x1440@60 media: rc: gpio-ir-recv: add remove function media: ov5640: Fix analogue gain control scripts: handle BrokenPipeError for python scripts PCI: Add SolidRun vendor ID macintosh: windfarm: Use unsigned type for 1-bit bitfields alpha: fix R_ALPHA_LITERAL reloc for large modules powerpc/kcsan: Exclude udelay to prevent recursive instrumentation powerpc/64: Move paca allocation to early_setup() powerpc/64: Fix task_cpu in early boot when booting non-zero cpuid powerpc/bpf/32: Only set a stack frame when necessary clk: renesas: rcar-gen3: Disable R-Car H3 ES1.* powerpc/iommu: fix memory leak with using debugfs_lookup() powerpc/64: Don't recurse irq replay MIPS: Fix a compilation issue tpm/eventlog: Don't abort tpm_read_log on faulty ACPI address watch_queue: fix IOC_WATCH_QUEUE_SET_SIZE alloc error paths drm/msm/adreno: fix runtime PM imbalance at unbind adreno: Shutdown the GPU properly drm/amdgpu/soc21: Add video cap query support for VCN_4_0_4 drm/amdgpu/soc21: don't expose AV1 if VCN0 is harvested ext4: Fix deadlock during directory rename drm/amdgpu: fix return value check in kfd RISC-V: Don't check text_mutex during stop_machine riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode erofs: Revert "erofs: fix kvcalloc() misuse with __GFP_NOFAIL" af_unix: fix struct pid leaks in OOB support net: dsa: mt7530: permit port 5 to work without port 6 on MT7621 SoC SUNRPC: Fix a server shutdown leak octeontx2-af: Unlock contexts in the queue context cache in case of fault detection net/smc: fix fallback failed while sendmsg with fastopen ethernet: ice: avoid gcc-9 integer overflow warning ice: Fix DSCP PFC TLV creation NFSD: Protect against filesystem freezing block: fix wrong mode for blkdev_put() from disk_scan_partitions() platform: x86: MLX_PLATFORM: select REGMAP instead of depending on it platform: mellanox: select REGMAP instead of depending on it netfilter: conntrack: adopt safer max chain length scsi: sd: Fix wrong zone_write_granularity value during revalidate scsi: megaraid_sas: Update max supported LD IDs to 240 net: tls: fix device-offloaded sendpage straddling records net: ethernet: mtk_eth_soc: fix RX data corruption issue net: phy: smsc: fix link up detection in forced irq mode btf: fix resolving BTF_KIND_VAR after ARRAY, STRUCT, UNION, PTR bpf, test_run: fix &xdp_frame misplacement for LIVE_FRAMES btrfs: fix extent map logging bit not cleared for split maps after dropping range m68k: mm: Move initrd phys_to_virt handling after paging_init() netfilter: tproxy: fix deadlock due to missing BH disable netfilter: ctnetlink: revert to dumping mark regardless of event type bnxt_en: Avoid order-5 memory allocation for TPA data net: phylib: get rid of unnecessary locking net: stmmac: add to set device wake up flag when stmmac init phy drm/msm/dpu: clear DSPP reservations in rm release drm/msm/dpu: fix clocks settings for msm8998 SSPP blocks drm/msm/dpu: drop DPU_DIM_LAYER from MIXER_MSM8998_MASK drm/msm/dpu: fix len of sc7180 ctl blocks bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() ice: copy last block omitted in ice_get_module_eeprom() net: caif: Fix use-after-free in cfusbl_device_notify() net: lan78xx: fix accessing the LAN7800's internal phy specific registers from the MAC driver perf stat: Fix counting when initial delay configured net: use indirect calls helpers for sk_exit_memory_pressure() net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() netfilter: nft_quota: copy content when cloning expression netfilter: nft_last: copy content when cloning expression selftests: nft_nat: ensuring the listening side is up before starting the client net: lan966x: Fix port police support using tc-matchall ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping() drm/msm/dpu: disable features unsupported by QCM2290 tls: rx: fix return value for async crypto powerpc: dts: t1040rdb: fix compatible string for Rev A boards nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties bgmac: fix *initial* chip reset to support BCM5358 drm/msm/a5xx: fix context faults during ring switch drm/msm/a5xx: fix the emptyness check in the preempt code drm/msm/a5xx: fix highest bank bit for a530 drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register drm/msm: Fix potential invalid ptr free drm/nouveau/kms/nv50: fix nv50_wndw_new_ prototype cifs: improve checking of DFS links over STATUS_OBJECT_NAME_INVALID ext4: Fix possible corruption when moving a directory scsi: core: Remove the /proc/scsi/${proc_name} directory earlier riscv: Add header include guards to insn.h block: fix scan partition for exclusively open device again block: Revert "block: Do not reread partition table on exclusively open device" drm/i915: Populate encoder->devdata for DSI on icl+ drm/i915: Do panel VBT init early if the VBT declares an explicit panel type drm/i915: Introduce intel_panel_init_alloc() spi: intel: Check number of chip selects after reading the descriptor ipmi:ssif: Add a timer between request retries ipmi:ssif: Increase the message retry time ipmi:ssif: Remove rtc_us_timer Input: exc3000 - properly stop timer on shutdown bus: mhi: ep: Change state_lock to mutex bus: mhi: ep: Power up/down MHI stack during MHI RESET udf: Fix off-by-one error when discarding preallocation fs: dlm: fix race setting stop tx flag fs: dlm: be sure to call dlm_send_queue_flush() fs: dlm: use WARN_ON_ONCE() instead of WARN_ON() fs: dlm: fix use after free in midcomms commit fd: dlm: trace send/recv of dlm message and rcom fs: dlm: use packet in dlm_mhandle fs: dlm: remove send repeat remove handling fs: dlm: start midcomms before scand fs: dlm: add midcomms init/start functions fs: dlm: fix log of lowcomms vs midcomms KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace KVM: x86: Move guts of kvm_arch_init() to standalone helper KVM: VMX: Don't bother disabling eVMCS static key on module exit KVM: VMX: Reset eVMCS controls in VP assist page during hardware disabling nfc: change order inside nfc_se_io error path HID: uhid: Over-ride the default maximum data buffer value with our own HID: core: Provide new max_buffer_size attribute to over-ride the default ext4: zero i_disksize when initializing the bootloader inode ext4: fix WARNING in ext4_update_inline_data ext4: move where set the MAY_INLINE_DATA flag is set ext4: fix another off-by-one fsmap error on 1k block filesystems ext4: fix RENAME_WHITEOUT handling for inline directories ext4: fix cgroup writeback accounting with fs-layer encryption staging: rtl8723bs: Pass correct parameters to cfg80211_get_bss() staging: rtl8723bs: Fix key-store index handling drm/connector: print max_requested_bpc in state debugfs drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF drm/amdgpu: fix error checking in amdgpu_read_mm_registers for nv drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc21 drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc15 x86/CPU/AMD: Disable XSAVES on AMD family 0x17 RISC-V: Stop emitting attributes fork: allow CLONE_NEWTIME in clone3 flags perf inject: Fix --buildid-all not to eat up MMAP2 erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms io_uring/uring_cmd: ensure that device supports IOPOLL btrfs: fix percent calculation for bg reclaim message btrfs: fix unnecessary increment of read error stat on write error fs: prevent out-of-bounds array speculation when closing a file descriptor ANDROID: remove CONFIG_NET_CLS_TCINDEX from gki_defconfig ANDROID: abi_gki_aarch64_qcom: update symbol list ANDROID: further fix incorrectly submitted KMI update ANDROID: fix incorrectly submitted KMI update ANDROID: ABI: Update QCOM symbol list ANDROID: thermal: vendor hook to disable thermal cooling stats ANDROID: GKI: 3/15/2023 KMI update ANDROID: GKI: Enable MGLRU by default Revert "Revert "sched/psi: Stop relying on timer_pending() for poll_work rescheduling"" ANDROID: update db845c symbol list UPSTREAM: scsi: ufs: core: Simplify ufshcd_execute_start_stop() UPSTREAM: scsi: ufs: core: Rely on the block layer for setting RQF_PM UPSTREAM: scsi: ufs: mcq: Fix incorrectly set queue depth UPSTREAM: scsi: ufs: ufs-mediatek: Guard power management functions with CONFIG_PM UPSTREAM: scsi: ufs: core: Initialize devfreq synchronously UPSTREAM: scsi: ufs: Make the TC G210 driver dependent on CONFIG_OF UPSTREAM: scsi: ufs: core: Fix an error handling path in ufshcd_read_desc_param() UPSTREAM: scsi: ufs: core: Fix kernel-doc syntax UPSTREAM: scsi: ufs: core: Add hibernation callbacks UPSTREAM: scsi: ufs: core: Limit DMA alignment check UPSTREAM: scsi: ufs: ufs-qcom: Clear qunipro_g4_sel for HW version major 5 UPSTREAM: scsi: ufs: qcom: fix platform_msi_domain_free_irqs() reference UPSTREAM: scsi: core: Extend struct scsi_exec_args UPSTREAM: scsi: core: Remove scsi_execute_req()/scsi_execute() functions UPSTREAM: scsi: cxlflash: Convert to scsi_execute_cmd() UPSTREAM: scsi: target: target_core_pscsi: Convert to scsi_execute_cmd() UPSTREAM: scsi: virtio_scsi: Convert to scsi_execute_cmd() UPSTREAM: scsi: sr: Convert to scsi_execute_cmd() UPSTREAM: scsi: ses: Convert to scsi_execute_cmd() UPSTREAM: scsi: zbc: Convert to scsi_execute_cmd() UPSTREAM: scsi: sd: Convert to scsi_execute_cmd() UPSTREAM: scsi: spi: Convert to scsi_execute_cmd() UPSTREAM: scsi: core: Convert to scsi_execute_cmd() UPSTREAM: scsi: scsi_dh: Convert to scsi_execute_cmd() UPSTREAM: scsi: ch: Convert to scsi_execute_cmd() UPSTREAM: scsi: hwmon: drivetemp: Convert to scsi_execute_cmd() UPSTREAM: scsi: ata: libata-scsi: Convert to scsi_execute_cmd() UPSTREAM: scsi: core: Add struct for args to execution functions UPSTREAM: scsi: core: Fix the scsi_device_put() might_sleep annotation UPSTREAM: scsi: core: scsi_error: Do not queue pointless abort workqueue functions ANDROID: scsi: ufs: Enable CONFIG_SCSI_UFS_VARIABLE_SG_ENTRY_SIZE if encryption is enabled FROMGIT: scsi: ufs: core: Enable DMA clustering FROMGIT: scsi: ufs: exynos: Fix the maximum segment size FROMGIT: scsi: ufs: ufs: Remove duplicate entry FROMGIT: scsi: ufs: qcom: Add MCQ ESI config vendor specific ops FROMGIT: scsi: ufs: core: mcq: Add Event Specific Interrupt enable and config functions FROMGIT: scsi: ufs: core: Add Event Specific Interrupt configuration vendor specific ops FROMGIT: scsi: ufs: core: mcq: Enable multi-circular queue FROMGIT: scsi: ufs: core: mcq: Add completion support in poll FROMGIT: scsi: ufs: mcq: Add completion support of a CQE FROMGIT: scsi: ufs: core: Prepare for completion in MCQ FROMGIT: scsi: ufs: core: mcq: Find hardware queue to queue request FROMGIT: scsi: ufs: core: Prepare ufshcd_send_command() for MCQ FROMGIT: scsi: ufs: core: mcq: Use shared tags for MCQ mode FROMGIT: scsi: ufs: core: mcq: Configure operation and runtime interface FROMGIT: scsi: ufs: core: mcq: Allocate memory for MCQ mode FROMGIT: scsi: ufs: core: mcq: Calculate queue depth FROMGIT: scsi: ufs: core: mcq: Configure resource regions FROMGIT: scsi: ufs: core: mcq: Add support to allocate multiple queues FROMGIT: scsi: ufs: core: Defer adding host to SCSI if MCQ is supported FROMGIT: scsi: ufs: core: Introduce multi-circular queue capability FROMGIT: scsi: ufs: core: Probe for EXT_IID support FROMGIT: scsi: core: Fix invisible definition compilation warning FROMGIT: scsi: ufs: core: bsg: Fix sometimes-uninitialized warnings FROMGIT: scsi: ufs: ufs-qcom: Add support for finding max gear on new platforms FROMGIT: scsi: ufs: ufs-qcom: Add support for reinitializing the UFS device FROMGIT: scsi: ufs: ufs-qcom: Factor out the logic finding the HS Gear FROMGIT: scsi: ufs: core: Add reinit_notify() callback FROMGIT: scsi: ufs: ufs-qcom: Fix the Qcom register name for offset 0xD0 FROMGIT: scsi: ufs: ufs-qcom: Use dev_err_probe() for printing probe error FROMGIT: scsi: ufs: ufs-qcom: Use bitfields where appropriate FROMGIT: scsi: ufs: ufs-qcom: Remove unnecessary WARN_ON() FROMGIT: scsi: ufs: ufs-qcom: Remove unnecessary goto statements FROMGIT: scsi: ufs: ufs-unisoc: Add support for Unisoc UFS host controller FROMGIT: scsi: ufs: core: Remove ufshcd_map_desc_id_to_length() FROMGIT: scsi: ufs: core: Remove len parameter from ufshcd_set_active_icc_lvl() FROMGIT: scsi: ufs: core: Remove redundant desc_size variable from hba FROMGIT: scsi: ufs: core: Remove redundant wb check FROMGIT: scsi: ufs: core: Allow UFS host drivers to override the sg entry size FROMGIT: scsi: ufs: core: Pass the clock scaling timeout as an argument FROMGIT: scsi: ufs: core: Reduce the clock scaling latency FROMGIT: scsi: ufs: ufs-qcom: Use dev_err() where possible FROMGIT: scsi: ufs: ufs-qcom: Remove usage of dbg_print_en FROMGIT: scsi: ufs: ufs-qcom: Clean up dbg_register_dump FROMGIT: scsi: ufs: ufs-qcom: Drop unnecessary NULL checks FROMGIT: scsi: ufs: core: bsg: Add advanced RPMB support in ufs_bsg FROMGIT: scsi: ufs: core: Pass EHS length into ufshcd_prepare_req_desc_hdr() FROMGIT: scsi: ufs: core: Advanced RPMB detection FROMGIT: scsi: ufs: core: Remove check_upiu_size() from ufshcd.h FROMGIT: scsi: ufs: Fix a deadlock between PM and the SCSI error handler FROMGIT: scsi: ufs: Track system suspend / resume activity FROMGIT: scsi: core: Support failing requests while recovering FROMGIT: scsi: core: Change the return type of .eh_timed_out() ANDROID: Disable AF_RXRPC for allmodconfig. UPSTREAM: arm64: pass ESR_ELx to die() of cfi_handler UPSTREAM: block: Fix the blk_mq_destroy_queue() documentation ANDROID: KVM: arm64: pKVM module loading before deprivilege ANDROID: KVM: arm64: Move pKVM host deprivilege to device_initcall ANDROID: KVM: arm64: Cleanup useless declarations ANDROID: CONFIG_MODPROBE_PATH to toolbox's modprobe ANDROID: ABI: update symbol list for galaxy ANDROID: arm64: add vendor hooks for unusal abort cases ANDROID: arm64: add vendor hooks for kernel fault cases ANDROID: power: add vendor hooks for try_to_freeze fail ANDROID: softlockup: add vendor hook for a softlockup task ANDROID: bug: add vendor hook for bug trap ANDROID: update abi definition due to io_uring changes. UPSTREAM: Revert "blk-cgroup: dropping parent refcount after pd_free_fn() is done" UPSTREAM: Revert "blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and blkcg_deactivate_policy()" Revert "kobject: modify kobject_get_path() to take a const *" Revert "wait: Return number of exclusive waiters awaken" Revert "sbitmap: Use single per-bitmap counting to wake up queued tags" Revert "sbitmap: correct wake_batch recalculation to avoid potential IO hung" Revert "sbitmap: Advance the queue index before waking up a queue" Revert "sbitmap: Try each queue to wake up at least one waiter" Revert "HID: retain initial quirks set up when creating HID devices" ANDROID: abi_gki_aarch64_qcom: Add vma apis ANDROID: KVM: arm64: Move hyp events in a hyp/ folder ANDROID: KVM: arm64: Allow single char for hyp tracing interface ANDROID: KVM: arm64: Hyp tracing polling to 100ms ANDROID: KVM: arm64: Fix nVHE enter/exit events ANDROID: KVM: arm64: Handle pipe buffer overflow for hyp tracing ANDROID: KVM: arm64: Flush hyp trace pipe when tracing stops ANDROID: ring-buffer: Fix ring_buffer_read_page for external writers ANDROID: KVM: arm64: Add trace_clock for nVHE tracing ANDROID: KVM: arm64: Add common "trace_pipe" file for hyp tracing ANDROID: KVM: arm64: Allow to reset hyp trace buffers ANDROID: KVM: arm64: Add common "trace" file for hyp tracing ANDROID: KVM: arm64: Add __pkvm_enable_tracing ANDROID: KVM: arm64: Empty buffer support for hyp tracing trace file ANDROID: KVM: arm64: Rename nVHE hyp event ELF sections Linux 6.1.19 staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" tpm: disable hwrng for fTPM on some AMD designs Linux 6.1.18 usb: gadget: uvc: fix missing mutex_unlock() if kstrtou8() fails arm64: Reset KASAN tag in copy_highpage with HW tags only arm64: mte: Fix/clarify the PG_mte_tagged semantics arm64: efi: Make efi_rt_lock a raw_spinlock io_uring/poll: allow some retries for poll triggering spuriously io_uring: fix two assignments in if conditions media: uvcvideo: Fix race condition with usb_kill_urb drm/i915: Fix system suspend without fbdev being initialized drm/i915/dp_mst: Add the MST topology state for modesetted CRTCs drm/display/dp_mst: Fix payload addition on a disconnected sink drm/display/dp_mst: Fix down message handling after a packet reception error drm/display/dp_mst: Fix down/up message handling after sink disconnect drm/display/dp_mst: Add drm_atomic_get_old_mst_topology_state() vDPA/ifcvf: allocate the adapter in dev_add() vDPA/ifcvf: manage ifcvf_hw in the mgmt_dev vDPA/ifcvf: ifcvf_request_irq works on ifcvf_hw vDPA/ifcvf: decouple config/dev IRQ requester and vectors allocator from the adapter vDPA/ifcvf: decouple vq irq requester from the adapter vDPA/ifcvf: decouple config IRQ releaser from the adapter vDPA/ifcvf: decouple vq IRQ releasers from the adapter vDPA/ifcvf: alloc the mgmt_dev before the adapter vDPA/ifcvf: decouple config space ops from the adapter vDPA/ifcvf: decouple hw features manipulators from the adapter x86/resctl: fix scheduler confusion with 'current' net: tls: avoid hanging tasks on the tx_lock soundwire: cadence: Drain the RX FIFO after an IO timeout soundwire: cadence: Remove wasted space in response_buf iommu: Attach device group to old domain in error path RDMA/cma: Distinguish between sockaddr_in and sockaddr_in6 by size phy: rockchip-typec: Fix unsigned comparison with less than zero PCI: pciehp: Add Qualcomm quirk for Command Completed erratum PCI: Add ACS quirk for Wangxun NICs PCI: loongson: Add more devices that need MRRS quirk kernel/fail_function: fix memory leak with using debugfs_lookup() drivers: base: dd: fix memory leak with using debugfs_lookup() drivers: base: component: fix memory leak with using debugfs_lookup() misc: vmw_balloon: fix memory leak with using debugfs_lookup() tty: pcn_uart: fix memory leak with using debugfs_lookup() PCI: Distribute available resources for root buses, too PCI: Take other bus devices into account when distributing resources PCI: Align extra resources for hotplug bridges properly usb: gadget: uvc: Make bSourceID read/write usb: uvc: Enumerate valid values for color matching USB: ene_usb6250: Allocate enough memory for full object usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math USB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() USB: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup() USB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup() USB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup() USB: gadget: gr_udc: fix memory leak with using debugfs_lookup() USB: isp1362: fix memory leak with using debugfs_lookup() USB: isp116x: fix memory leak with using debugfs_lookup() USB: fotg210: fix memory leak with using debugfs_lookup() USB: sl811: fix memory leak with using debugfs_lookup() USB: uhci: fix memory leak with using debugfs_lookup() USB: ULPI: fix memory leak with using debugfs_lookup() USB: chipidea: fix memory leak with using debugfs_lookup() USB: dwc3: fix memory leak with using debugfs_lookup() staging: pi433: fix memory leak with using debugfs_lookup() PCI: loongson: Prevent LS7A MRRS increases soundwire: bus_type: Avoid lockdep assert in sdw_drv_probe() media: uvcvideo: Add GUID for BGRA/X 8:8:8:8 iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() bus: mhi: ep: Fix the debug message for MHI_PKT_TYPE_RESET_CHAN_CMD cmd tools/iio/iio_utils:fix memory leak mei: bus-fixup:upon error print return values of send and receive serial: sc16is7xx: setup GPIO controller later in probe tty: serial: fsl_lpuart: disable the CTS when send break signal tty: fix out-of-bounds access in tty_driver_lookup_tty() staging: emxx_udc: Add checks for dma_alloc_coherent() cacheinfo: Fix shared_cpu_map to handle shared caches at different levels USB: fix memory leak with using debugfs_lookup() media: uvcvideo: Silence memcpy() run-time false positive warnings media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910 media: uvcvideo: Handle errors from calls to usb_string media: uvcvideo: Handle cameras with invalid descriptors media: uvcvideo: Remove format descriptions PCI/ACPI: Account for _S0W of the target bridge in acpi_pci_bridge_d3() iommu/amd: Fix error handling for pdev_pri_ats_enable() IB/hfi1: Update RMT size calculation mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak bootconfig: Increase max nodes of bootconfig from 1024 to 8192 for DCC support firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 kernel/printk/index.c: fix memory leak with using debugfs_lookup() tracing: Add NULL checks for buffer in ring_buffer_free_read_page() thermal: intel: BXT_PMIC: select REGMAP instead of depending on it thermal: intel: quark_dts: fix error pointer dereference ASoC: mediatek: mt8195: add missing initialization ASoC: zl38060 add gpiolib dependency nvme-fabrics: show well known discovery name nvme-tcp: don't access released socket during error recovery nvme: bring back auto-removal of deleted namespaces during sequential scan ASoC: apple: mca: Improve handling of unavailable DMA channels ASoC: apple: mca: Fix SERDES reset sequence ASoC: apple: mca: Fix final status read on SERDES reset ASoC: adau7118: don't disable regulators on device unbind loop: loop_set_status_from_info() check before assignment io_uring: fix size calculation when registering buf ring rtc: allow rtc_read_alarm without read_alarm callback scsi: mpi3mr: Use number of bits to manage bitmap sizes scsi: mpi3mr: Fix an issue found by KASAN scsi: ipr: Work around fortify-string warning genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask() rtc: sun6i: Always export the internal oscillator spi: tegra210-quad: Fix iterator outside loop vc_screen: modify vcs_size() handling in vcs_read() tcp: tcp_check_req() can be called from process context ARM: dts: spear320-hmi: correct STMPE GPIO compatible net: dsa: felix: fix internal MDIO controller resource length net: dsa: seville: ignore mscc-miim read errors from Lynx PCS net/sched: act_sample: fix action bind logic net/sched: act_mpls: fix action bind logic net/sched: act_pedit: fix action bind logic net/sched: transition act_pedit to rcu and percpu stats nfc: fix memory leak of se_io context in nfc_genl_se_io ext4: fix incorrect options show of original mount_opt and extend mount_opt2 net/mlx5: Geneve, Fix handling of Geneve object id as error code net/mlx5e: Verify flow_source cap before using it net/mlx5: ECPF, wait for VF pages only after disabling host PFs mlx5: fix possible ptp queue fifo use-after-free mlx5: fix skb leak while fifo resync and push spi: tegra210-quad: Fix validate combined sequence 9p/rdma: unmap receive dma buffer in rdma_request()/post_recv() 9p/xen: fix connection sequence 9p/xen: fix version parsing net: fix __dev_kfree_skb_any() vs drop monitor octeontx2-pf: Use correct struct reference in test condition sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop net: sunhme: Fix region request octeontx2-pf: Recalculate UDP checksum for ptp 1-step sync packet ipv6: Add lwtunnel encap size of all siblings in nexthop calculation drm/i915: move a Kconfig symbol to unbreak the menu presentation ptp: vclock: use mutex to fix "sleep on atomic" bug netfilter: x_tables: fix percpu counter block leak on error path when creating new netns netfilter: ctnetlink: make event listener tracking global netfilter: xt_length: use skb len to match in length_mt6 netfilter: ebtables: fix table blob use-after-free netfilter: ip6t_rpfilter: Fix regression with VRF interfaces netfilter: conntrack: fix rmmod double-free race netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() watchdog: sbsa_wdog: Make sure the timeout programming is within the limits watchdog: pcwd_usb: Fix attempting to access uninitialized memory watchdog: Fix kmemleak in watchdog_cdev_register watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path watchdog: rzg2l_wdt: Handle TYPE-B reset for RZ/V2M watchdog: rzg2l_wdt: Issue a reset before we put the PM clocks f2fs: synchronize atomic write aborts um: virt-pci: properly remove PCI device from bus um: virtio_uml: move device breaking into workqueue um: virtio_uml: mark device as unregistered when breaking it um: virtio_uml: free command if adding to virtqueue failed x86: um: vdso: Add '%rcx' and '%r11' to the syscall clobber list netfilter: nf_tables: allow to fetch set elements when table has an owner ext4: don't show commit interval if it is zero ext4: use ext4_fc_tl_mem in fast-commit replay path soc: qcom: stats: Populate all subsystem debugfs files f2fs: fix to avoid potential memory corruption in __update_iostat_latency() ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show() ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap ubifs: ubifs_releasepage: Remove ubifs_assert(0) to valid this process ubifs: ubifs_writepage: Mark page dirty after writing inode failed ubifs: dirty_cow_znode: Fix memleak in error handling path ubifs: Re-statistic cleaned znode count if commit failed ubi: Fix possible null-ptr-deref in ubi_free_volume() ubifs: Fix memory leak in alloc_wbufs() ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume() ubi: Fix use-after-free when volume resizing failed ubifs: Reserve one leb for each journal head while doing budget ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1 ubifs: Fix wrong dirty space budget for dirty inode ubifs: Rectify space budget for ubifs_xrename() ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted ubifs: Fix memory leak in ubifs_sysfs_init() ubifs: Fix build errors as symbol undefined ubi: ensure that VID header offset + VID header size <= alloc, size um: vector: Fix memory leak in vector_config f2fs: fix to abort atomic write only during do_exist() f2fs: allow set compression option of files without blocks fs: f2fs: initialize fsdata in pagecache_write() soc: mediatek: mtk-svs: Use pm_runtime_resume_and_get() in svs_init01() soc: mediatek: mtk-svs: reset svs when svs_resume() fail soc: mediatek: mtk-svs: restore default voltages when svs_init02() fail f2fs: clear atomic_write_task in f2fs_abort_atomic_write() f2fs: correct i_size change for atomic writes f2fs: introduce trace_f2fs_replace_atomic_write_block pwm: stm32-lp: fix the check on arr and cmp registers update pwm: sifive: Always let the first pwm_apply_state succeed soc: mediatek: mtk-svs: Enable the IRQ later memory: renesas-rpc-if: Move resource acquisition to .probe() memory: renesas-rpc-if: Split-off private data from struct rpcif soc: mediatek: mtk-pm-domains: Allow mt8186 ADSP default power on objtool: Fix memory leak in create_static_call_sections() f2fs: fix to avoid potential deadlock f2fs: don't rely on F2FS_MAP_* in f2fs_iomap_begin driver: soc: xilinx: fix memory leak in xlnx_add_cb_for_notify_event() fs/jfs: fix shift exponent db_agl2size negative auxdisplay: hd44780: Fix potential memory leak in hd44780_remove() net/sched: Retire tcindex classifier Linux 6.1.17 Revert "blk-cgroup: dropping parent refcount after pd_free_fn() is done" Revert "blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and blkcg_deactivate_policy()" ANDROID: ABI: update symbol list for galaxy ANDROID: Re-apply vendor hooks for information of blocked tasks ANDROID: ABI: Add missing symbols to QCOM list Linux 6.1.16 net: avoid double iput when sock_alloc_file fails kbuild: Port silent mode detection to future gnu make. sbitmap: Try each queue to wake up at least one waiter wait: Return number of exclusive waiters awaken sbitmap: Advance the queue index before waking up a queue brd: use radix_tree_maybe_preload instead of radix_tree_preload qede: avoid uninitialized entries in coal_entry array drm/edid: fix parsing of 3D modes from HDMI VSDB drm/edid: fix AVI infoframe aspect ratio handling drm/gud: Fix UBSAN warning drm/i915: Don't use BAR mappings for ring buffers with LLC drm/i915: Don't use stolen memory for ring buffers with LLC drm/radeon: Fix eDP for single-display iMac11,2 drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv drm/amd: Fix initialization for nbio 7.5.1 vfio/type1: restore locked_vm vfio/type1: track locked_vm per dma vfio/type1: prevent underflow of locked_vm via exec() vfio/type1: exclude mdevs from VFIO_UPDATE_VADDR iommu/vt-d: Fix PASID directory pointer coherency iommu/vt-d: Avoid superfluous IOTLB tracking in lazy mode bus: mhi: ep: Save channel state locally during suspend and resume bus: mhi: ep: Move chan->lock to the start of processing queued ch ring bus: mhi: ep: Only send -ENOTCONN status if client driver is available PCI/DPC: Await readiness of secondary bus after reset PCI: Avoid FLR for AMD FCH AHCI adapters PCI: hotplug: Allow marking devices as disconnected during bind/unbind PCI: Unify delay handling for reset and resume PCI/PM: Observe reset delay irrespective of bridge_d3 MIPS: DTS: CI20: fix otg power gpio riscv: ftrace: Reduce the detour code size to half riscv: ftrace: Remove wasted nops for !RISCV_ISA_C riscv, mm: Perform BPF exhandler fixup on page fault riscv: jump_label: Fixup unaligned arch_static_branch function riscv: mm: fix regression due to update_mmu_cache change riscv: Avoid enabling interrupts in die() RISC-V: add a spin_shadow_stack declaration scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() scsi: ses: Fix possible desc_ptr out-of-bounds accesses scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() scsi: ses: Don't attach if enclosure has no components scsi: qla2xxx: Remove increment of interface err cnt scsi: qla2xxx: Fix erroneous link down scsi: qla2xxx: Remove unintended flag clearing scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests scsi: qla2xxx: Check if port is online before sending ELS scsi: qla2xxx: Fix link failure in NPIV environment scsi: aacraid: Allocate cmd_priv with scsicmd iommu/amd: Improve page fault error reporting iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter tracing/eprobe: Fix to add filter on eprobe description in README file tools/bootconfig: fix single & used for logical condition ring-buffer: Handle race between rb_move_tail and rb_check_pages memory tier: release the new_memtier in find_create_memory_tier() ktest.pl: Add RUN_TIMEOUT option with default unlimited ktest.pl: Fix missing "end_monitor" when machine check fails kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list ktest.pl: Give back console on Ctrt^C on monitor mm/thp: check and bail out if page in deferred queue already mm: memcontrol: deprecate charge moving docs: gdbmacros: print newest record remoteproc/mtk_scp: Move clk ops outside send_lock media: ipu3-cio2: Fix PM runtime usage_count in driver unbind mips: fix syscall_get_nr dax/kmem: Fix leak of memory-hotplug resources alpha: fix FEN fault handling mm/hwpoison: convert TTU_IGNORE_HWPOISON to TTU_HWPOISON panic: fix the panic_print NMI backtrace setting regulator: core: Use ktime_get_boottime() to determine how long a regulator was off ceph: update the time stamps and try to drop the suid/sgid rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails fuse: add inode/permission checks to fileattr_get/fileattr_set arm64: mm: hugetlb: Disable HUGETLB_PAGE_OPTIMIZE_VMEMMAP ARM: dts: exynos: correct TMU phandle in Odroid HC1 ARM: dts: exynos: correct TMU phandle in Odroid XU ARM: dts: exynos: correct TMU phandle in Exynos5250 ARM: dts: exynos: correct TMU phandle in Odroid XU3 family ARM: dts: exynos: correct TMU phandle in Exynos4 ARM: dts: exynos: correct TMU phandle in Exynos4210 ARM: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node ARM: dts: qcom: sdx65: Add Qcom SMMU-500 as the fallback for IOMMU node hwmon: (nct6775) Fix incorrect parenthesization in nct6775_write_fan_div() hwmon: (peci/cputemp) Fix off-by-one in coretemp_label allocation dm flakey: fix a bug with 32-bit highmem systems dm flakey: don't corrupt the zero page dm cache: free background tracker's queued work in btracker_destroy dm flakey: fix logic when corrupting a bio thermal: intel: powerclamp: Fix cur_state for multi package system qede: fix interrupt coalescing configuration cpuidle: add ARCH_SUSPEND_POSSIBLE dependencies wifi: cfg80211: Set SSID if it is not already set wifi: cfg80211: Fix use after free for wext wifi: ath11k: allow system suspend to survive ath11k wifi: rtl8xxxu: Use a longer retry limit of 48 wifi: rtw88: use RTW_FLAG_POWERON flag to prevent to power on/off twice dm: add cond_resched() to dm_wq_requeue_work() dm: add cond_resched() to dm_wq_work() dm: send just one event on resize, not two mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type mtd: spi-nor: spansion: Consider reserved bits in CFR5 register mtd: spi-nor: sfdp: Fix index value for SCCR dwords cxl/pmem: Fix nvdimm registration races ext4: refuse to create ea block when umounted ext4: optimize ea_inode block expansion jbd2: fix data missing when reusing bh which is ready to be checkpointed ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() mm/damon/paddr: fix missing folio_put() crypto: qat - fix out-of-bounds read irqdomain: Fix domain registration race irqdomain: Fix mapping-creation race irqdomain: Refactor __irq_domain_alloc_irqs() irqdomain: Drop bogus fwspec-mapping error handling irqdomain: Look for existing mapping only once irqdomain: Fix disassociation race irqdomain: Fix association race selftests: seccomp: Fix incorrect kernel headers search path selftests: vm: Fix incorrect kernel headers search path selftests: dmabuf-heaps: Fix incorrect kernel headers search path selftests: drivers: Fix incorrect kernel headers search path selftests: futex: Fix incorrect kernel headers search path selftests: ipc: Fix incorrect kernel headers search path selftests: perf_events: Fix incorrect kernel headers search path selftests: mount_setattr: Fix incorrect kernel headers search path selftests: move_mount_set_group: Fix incorrect kernel headers search path selftests: rseq: Fix incorrect kernel headers search path selftests: sync: Fix incorrect kernel headers search path selftests: ptp: Fix incorrect kernel headers search path selftests: user_events: Fix incorrect kernel headers search path selftests: filesystems: Fix incorrect kernel headers search path selftests: gpio: Fix incorrect kernel headers search path selftests: media_tests: Fix incorrect kernel headers search path selftests: kcmp: Fix incorrect kernel headers search path selftests: membarrier: Fix incorrect kernel headers search path selftests: pidfd: Fix incorrect kernel headers search path selftests: clone3: Fix incorrect kernel headers search path selftests: arm64: Fix incorrect kernel headers search path selftests: pid_namespace: Fix incorrect kernel headers search path selftests: core: Fix incorrect kernel headers search path selftests: sched: Fix incorrect kernel headers search path selftests/ftrace: Fix eprobe syntax test case to check filter support selftests/powerpc: Fix incorrect kernel headers search path ima: Align ima_file_mmap() parameters with mmap_file LSM hook ima: fix error handling logic when file measurement failed brd: check for REQ_NOWAIT and set correct page allocation mask brd: return 0/-error from brd_insert_page() brd: mark as nowait compatible virt/sev-guest: Return -EIO if certificate buffer is not large enough Documentation/hw-vuln: Document the interaction between IBRS and STIBP x86/speculation: Allow enabling STIBP with legacy IBRS x86/microcode/AMD: Fix mixed steppings support x86/microcode/AMD: Add a @cpu parameter to the reloading functions x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range x86/kprobes: Fix __recover_optprobed_insn check optimizing logic x86/reboot: Disable SVM, not just VMX, when stopping CPUs x86/reboot: Disable virtualization in an emergency if SVM is supported x86/crash: Disable virt in core NMI crash handler to avoid double shootdown x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) selftests: x86: Fix incorrect kernel headers search path KVM: SVM: hyper-v: placate modpost section mismatch error KVM: SVM: Fix potential overflow in SEV's send|receive_update_data() KVM: x86: Inject #GP on x2APIC WRMSR that sets reserved bits 63:32 KVM: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI KVM: SVM: Don't put/load AVIC when setting virtual APIC mode KVM: SVM: Process ICR on AVIC IPI delivery failure due to invalid target KVM: SVM: Flush the "current" TLB when activating AVIC KVM: x86: Don't inhibit APICv/AVIC if xAPIC ID mismatch is due to 32-bit ID KVM: x86: Don't inhibit APICv/AVIC on xAPIC ID "change" if APIC is disabled KVM: x86: Blindly get current x2APIC reg value on "nodecode write" traps KVM: x86: Purge "highest ISR" cache when updating APICv state KVM: Register /dev/kvm as the _very_ last thing during initialization KVM: VMX: Fix crash due to uninitialized current_vmcs KVM: Destroy target device if coalesced MMIO unregistration fails RDMA/siw: Fix user page pinning accounting md: don't update recovery_cp when curr_resync is ACTIVE udf: Fix file corruption when appending just after end of preallocated extent udf: Detect system inodes linked into directory hierarchy udf: Preserve link count of system files udf: Do not update file length for failed writes to inline files udf: Do not bother merging very long extents udf: Truncate added extents on failed expansion selftests/landlock: Test ptrace as much as possible with Yama selftests/landlock: Skip overlayfs tests when not supported fs/cramfs/inode.c: initialize file_ra_state ocfs2: fix non-auto defrag path not working issue ocfs2: fix defrag path triggering jbd2 ASSERT f2fs: fix kernel crash due to null io->bio f2fs: fix cgroup writeback accounting with fs-layer encryption f2fs: retry to update the inode page given data corruption f2fs: fix information leak in f2fs_move_inline_dirents() fs: dlm: send FIN ack back in right cases fs: dlm: move sending fin message into state change handling fs: dlm: don't set stop rx flag after node reset exfat: fix inode->i_blocks for non-512 byte sector size device exfat: redefine DIR_DELETED as the bad cluster number exfat: fix unexpected EOF while reading dir exfat: fix reporting fs error when reading dir beyond EOF fs: hfsplus: fix UAF issue in hfsplus_put_super hfs: fix missing hfs_bnode_get() in __hfs_bnode_create io_uring: mark task TASK_RUNNING before handling resume/task work ARM: dts: exynos: correct HDMI phy compatible in Exynos4 torture: Fix hang during kthread shutdown phase ksmbd: fix possible memory leak in smb2_lock() ksmbd: do not allow the actual frame length to be smaller than the rfc1002 length ksmbd: fix wrong data area length for smb2 lock request locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath btrfs: hold block group refcount during async discard scsi: mpi3mr: Remove unnecessary memcpy() to alltgt_info->dmi scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info() scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization cifs: return a single-use cfid if we did not get a lease cifs: Check the lease context if we actually got a lease cifs: don't try to use rdma offload on encrypted connections cifs: split out smb3_use_rdma_offload() helper cifs: introduce cifs_io_parms in smb2_async_writev() cifs: fix mount on old smb servers cifs: Fix uninitialized memory reads for oparms.mode cifs: Fix uninitialized memory read in smb3_qfs_tcon() KVM: s390: disable migration mode when dirty tracking is disabled s390/kprobes: fix current_kprobe never cleared after kprobes reenter s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler s390: discard .interp section s390/extmem: return correct segment type in __segment_load() io_uring: fix fget leak when fs don't support nowait buffered read io_uring: remove MSG_NOSIGNAL from recvmsg io_uring/rsrc: disallow multi-source reg buffers io_uring: add reschedule point to handle_tw_list() io_uring: add a conditional reschedule to the IOPOLL cancelation loop io_uring: handle TIF_NOTIFY_RESUME when checking for task_work io_uring: use user visible tail in io_uring_poll() io_uring: Replace 0-length array with flexible array ipmi_ssif: Rename idle state and check ipmi:ssif: resend_msg() cannot fail ipmi: ipmb: Fix the MODULE_PARM_DESC associated to 'retry_time_ms' rtc: pm8xxx: fix set-alarm race block: be a bit more careful in checking for NULL bdev while polling block: clear bio->bi_bdev when putting a bio back in the cache block: don't allow multiple bios for IOCB_NOWAIT issue firmware: coreboot: framebuffer: Ignore reserved pixel color bits scsi: mpt3sas: Remove usage of dma_get_required_mask() API wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu driver core: fw_devlink: Avoid spurious error message drm/shmem-helper: Revert accidental non-GPL export cifs: prevent data race in smb2_reconnect() nfsd: don't hand out delegation on setuid files being opened for write nfsd: zero out pointers after putting nfsd_files on COPY setup error dm cache: add cond_resched() to various workqueue loops dm thin: add cond_resched() to various workqueue loops drm/amd/display: Disable HUBP/DPP PG on DCN314 for now drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5 drm/amd/display: Enable P-state validation checks for DCN314 HID: logitech-hidpp: Don't restart communication if not necessary scsi: ufs: core: Fix device management cmd timeout flow scsi: snic: Fix memory leak with using debugfs_lookup() drm/amd/display: Do not commit pipe when updating DRR pinctrl: at91: use devm_kasprintf() to avoid potential leaks hwmon: (nct6775) B650/B660/X670 ASUS boards support hwmon: (nct6775) Directly call ASUS ACPI WMI method hwmon: (coretemp) Simplify platform device handling gfs2: Improve gfs2_make_fs_rw error handling drm/amd/display: fix FCLK pstate change underflow Revert "drm/amdgpu: TA unload messages are not actually sent to psp when amdgpu is uninstalled" regulator: s5m8767: Bounds check id indexing into arrays regulator: max77802: Bounds check regulator id against opmode ASoC: kirkwood: Iterate over array indexes instead of using pointer math ASoC: soc-compress: Reposition and add pcm_mutex drm/msm/dpu: Add DSC hardware blocks to register snapshot docs/scripts/gdb: add necessary make scripts_gdb step habanalabs: fix bug in timestamps registration code habanalabs: extend fatal messages to contain PCI info drm/amd/display: Set hvm_enabled flag for S/G mode drm/drm_print: correct format problem drm: rcar-du: Fix setting a reserved bit in DPLLCR drm: rcar-du: Add quirk for H3 ES1.x pclk workaround drm/msm/dsi: Add missing check for alloc_ordered_workqueue HID: uclogic: Add support for XP-PEN Deco Pro MW HID: uclogic: Add support for XP-PEN Deco Pro SW HID: uclogic: Add battery quirk HID: uclogic: Add frame type quirk drm/amd/display: fix mapping to non-allocated address drm: amd: display: Fix memory leakage drm/amd: Avoid ASSERT for some message failures Revert "fbcon: don't lose the console font across generic->chip driver switch" scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write drm/amdkfd: Page aligned memory reserve size drm/amd: Avoid BUG() for case of SRIOV missing IP version drm/radeon: free iio for atombios when driver shutdown drm/amd/display: Defer DIG FIFO disable after VID stream enable drm/tiny: ili9486: Do not assume 8-bit only SPI controllers HID: Add Mapping for System Microphone Mute drm/omap: dsi: Fix excessive stack usage drm/amd/display: Fix potential null-deref in dm_resume drm/amd/display: Revert Reduce delay when sink device not able to ACK 00340h write drm/amd/display: Reduce expected sdp bandwidth for dcn321 drm: panel-orientation-quirks: Add quirk for DynaBook K50 drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Tab 3 X90F scm: add user copy checks to put_cmsg() devlink: Fix TP_STRUCT_entry in trace of devlink health report s390/kfence: fix page fault reporting hv_netvsc: Check status in SEND_RNDIS_PKT completion message wifi: rtw89: debug: avoid invalid access on RTW89_DBG_SEL_MAC_30 Bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE Bluetooth: btusb: Add new PID/VID 0489:e0f2 for MT7921 Bluetooth: Fix issue with Actions Semi ATS2851 based devices PM: EM: fix memory leak with using debugfs_lookup() PM: domains: fix memory leak with using debugfs_lookup() time/debug: Fix memory leak with using debugfs_lookup() s390/idle: mark arch_cpu_idle() noinstr uaccess: Add minimum bounds check on kernel buffer size coda: Avoid partial allocation of sig_inputArgs net/mlx5: fw_tracer: Fix debug print ACPI: video: Fix Lenovo Ideapad Z570 DMI match wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup tools/power/x86/intel-speed-select: Add Emerald Rapid quirk gcc-plugins: drop -std=gnu++11 to fix GCC 13 build can: isotp: check CAN address family in isotp_bind() netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj() s390/mm,ptdump: avoid Kasan vs Memcpy Real markers swapping m68k: Check syscall_trace_enter() return code net: bcmgenet: Add a check for oversized packets crypto: hisilicon: Wipe entire pool on error clocksource: Suspend the watchdog temporarily when high read latency detected thermal: intel: intel_pch: Add support for Wellsburg PCH bpf, docs: Fix modulo zero, division by zero, overflow, and underflow ACPI: Don't build ACPICA with '-Os' ice: add missing checks for PF vsi type ice: restrict PTP HW clock freq adjustments to 100, 000, 000 PPB inet: fix fast path in __inet_hash_connect() wifi: mt7601u: fix an integer underflow wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds bpftool: Always disable stack protection for BPF objects x86/bugs: Reset speculation control settings on init timers: Prevent union confusion from unexpected restart_syscall() thermal: intel: Fix unsigned comparison with less than zero wifi: ath11k: debugfs: fix to work with multiple PCI devices rcu-tasks: Handle queue-shrink/callback-enqueue race condition rcu-tasks: Make rude RCU-Tasks work well with CPU hotplug srcu: Delegate work to the boot cpu if using SRCU_SIZE_SMALL rcu: Suppress smp_processor_id() complaint in synchronize_rcu_expedited_wait() rcu: Make RCU_LOCKDEP_WARN() avoid early lockdep checks wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() wifi: ath11k: fix monitor mode bringup crash wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() perf/x86/intel/uncore: Add Meteor Lake support cpuidle: lib/bug: Disable rcu_is_watching() during WARN/BUG cpuidle: drivers: firmware: psci: Dont instrument suspend code x86/fpu: Don't set TIF_NEED_FPU_LOAD for PF_IO_WORKER threads cpuidle, intel_idle: Fix CPUIDLE_FLAG_INIT_XSTATE arm64: zynqmp: Enable hs termination flag for USB dwc3 controller btrfs: scrub: improve tree block error reporting trace/blktrace: fix memory leak with using debugfs_lookup() blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and blkcg_deactivate_policy() blk-cgroup: dropping parent refcount after pd_free_fn() is done blk-iocost: fix divide by 0 error in calc_lcoefs() fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy exit: Detect and fix irq disabled state in oops context_tracking: Fix noinstr vs KASAN udf: Define EFSCORRUPTED error code arm64: dts: qcom: msm8996: Add additional A2NoC clocks ARM: OMAP2+: omap4-common: Fix refcount leak bug rpmsg: glink: Release driver_override rpmsg: glink: Avoid infinite loop on intent for missing channel media: saa7134: Use video_unregister_device for radio_dev media: usb: siano: Fix use after free bugs caused by do_submit_urb media: i2c: ov7670: 0 instead of -EINVAL was returned media: atomisp: Only set default_run_mode on first open of a stream/asd media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() media: drivers/media/v4l2-core/v4l2-h264 : add detection of null pointers media: amphion: correct the unspecified color space media: imx-jpeg: Apply clk_bulk api instead of operating specific clk media: hantro: Fix JPEG encoder ENUM_FRMSIZE on RK3399 media: v4l2-jpeg: ignore the unknown APP14 marker media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data media: platform: mtk-mdp3: fix Kconfig dependencies media: platform: mtk-mdp3: remove unused VIDEO_MEDIATEK_VPU config media: camss: csiphy-3ph: avoid undefined behavior media: platform: mtk-mdp3: Fix return value check in mdp_probe() media: i2c: imx219: Fix binning for RAW8 capture media: i2c: imx219: Split common registers from mode tables media: i2c: ov772x: Fix memleak in ov772x_probe() media: mc: Get media_device directly from pad media: ov5640: Handle delays when no reset_gpio set media: ov5640: Fix soft reset sequence and timings media: ov5675: Fix memleak in ov5675_init_controls() media: ov2740: Fix memleak in ov2740_init_controls() media: max9286: Fix memleak in max9286_v4l2_register() builddeb: clean generated package content s390/vdso: Drop '-shared' from KBUILD_CFLAGS_64 powerpc: Remove linker flag from KBUILD_AFLAGS media: imx: imx7-media-csi: fix missing clk_disable_unprepare() in imx7_csi_init() media: platform: ti: Add missing check for devm_regulator_get media: ti: cal: fix possible memory leak in cal_ctx_create() remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers Revert "remoteproc: qcom_q6v5_mss: map/unmap metadata region before/after use" IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors IB/hfi1: Fix math bugs in hfi1_can_pin_pages() RDMA/rxe: Fix missing memory barriers in rxe_queue.h RDMA/rxe: cleanup some error handling in rxe_verbs.c iommu/vt-d: Allow to use flush-queue when first level is default iommu/vt-d: Fix error handling in sva enable/disable paths dmaengine: ptdma: check for null desc before calling pt_cmd_callback dmaengine: dw-axi-dmac: Do not dereference NULL structure dmaengine: sf-pdma: pdma_desc memory leak fix iommu/amd: Do not identity map v2 capable device when snp is enabled iommu: Fix error unwind in iommu_group_alloc() iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() PCI: qcom: Fix host-init error handling phy: rockchip-typec: fix tcphy_get_mode error case PCI: Fix dropping valid root bus resources with .end = zero dmaengine: dw-edma: Fix readq_ch() return value truncation usb: host: fsl-mph-dr-of: reuse device_set_of_node_from_dev mtd: mtdpart: Don't create platform device that'll never probe driver core: fw_devlink: Make cycle detection more robust driver core: fw_devlink: Improve check for fwnode with no device/driver driver core: fw_devlink: Consolidate device link flag computation driver core: fw_devlink: Allow marking a fwnode link as being part of a cycle driver core: fw_devlink: Don't purge child fwnode's consumer links driver core: fw_devlink: Add DL_FLAG_CYCLE support to device links tty: serial: imx: disable Ageing Timer interrupt request irq tty: serial: imx: Handle RS485 DE signal active high serial: fsl_lpuart: fix RS485 RTS polariy inverse issue RDMA/irdma: Cap MSIX used to online CPUs + 1 usb: max-3421: Fix setting of I/O pins RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish() power: supply: remove faulty cooling logic iommu/vt-d: Set No Execute Enable bit in PASID table entry iommu/dart: Fix apple_dart_device_group for PCI groups iommu: dart: Support >64 stream IDs iommu: dart: Add suspend/resume support PCI: mt7621: Delay phy ports initialization phy: mediatek: remove temporary variable @mask_ usb: gadget: configfs: Restrict symlink creation is UDC already binded usb: musb: mediatek: don't unregister something that wasn't registered RDMA/cxgb4: add null-ptr-check after ip_dev_find() tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case usb: early: xhci-dbc: Fix a potential out-of-bound memory access fpga: microchip-spi: rewrite status polling in a time measurable way fpga: microchip-spi: move SPI I/O buffers out of stack dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers fotg210-udc: Add missing completion handler firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle drivers: base: transport_class: fix resource leak when transport_add_device() fails drivers: base: transport_class: fix possible memory leak driver core: location: Free struct acpi_pld_info *pld before return false driver core: fix resource leak in device_add() misc: fastrpc: Fix an error handling path in fastrpc_rpmsg_probe() misc/mei/hdcp: Use correct macros to initialize uuid_le mei: pxp: Use correct macros to initialize uuid_le VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF firmware: stratix10-svc: fix error handle while alloc/add device failed firmware: stratix10-svc: add missing gen_pool_destroy() in stratix10_svc_drv_probe() applicom: Fix PCI device refcount leak in applicom_init() eeprom: idt_89hpesx: Fix error handling in idt_init() Revert "char: pcmcia: cm4000_cs: Replace mdelay with usleep_range in set_protocol" serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init() tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown() tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown() hwtracing: hisi_ptt: Only add the supported devices to the filters list PCI: endpoint: pci-epf-vntb: Add epf_ntb_mw_bar_clear() num_mws kernel-doc PCI: endpoint: pci-epf-vntb: Clean up kernel_doc warning PCI: switchtec: Return -EFAULT for copy_to_user() errors PCI/IOV: Enlarge virtfn sysfs name buffer usb: typec: intel_pmc_mux: Don't leak the ACPI device reference count coresight: cti: Add PM runtime call in enable_store coresight: cti: Prevent negative values of enable count coresight: etm4x: Fix accesses to TRCSEQRSTEVR and TRCSEQSTR media: uvcvideo: Refactor power_line_frequency_controls_limited media: uvcvideo: Refactor uvc_ctrl_mappings_uvcXX media: uvcvideo: Implement mask for V4L2_CTRL_TYPE_MENU media: uvcvideo: Check for INACTIVE in uvc_ctrl_is_accessible() alpha/boot/tools/objstrip: fix the check for ELF header kobject: Fix slab-out-of-bounds in fill_kobj_path() kobject: modify kobject_get_path() to take a const * driver core: fix potential null-ptr-deref in device_add() soundwire: cadence: Don't overflow the command FIFOs i2c: designware: fix i2c_dw_clk_rate() return size to be u32 usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe() iio: light: tsl2563: Do not hardcode interrupt trigger type RDMA/hns: Fix refcount leak in hns_roce_mmap dmaengine: HISI_DMA should depend on ARCH_HISI RDMA/erdma: Fix refcount leak in erdma_mmap dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0 mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() mfd: cs5535: Don't build on UML objtool: add UACCESS exceptions for __tsan_volatile_read/write perf tests stat_all_metrics: Change true workload to sleep workload for system wide check printf: fix errname.c list perf record: Fix segfault with --overwrite and --max-size selftests: use printf instead of echo -ne selftests/ftrace: Fix bash specific "==" operator selftests: find echo binary to use -ne options sparc: allow PM configs for sparc32 COMPILE_TEST perf tools: Fix auto-complete on aarch64 perf test bpf: Skip test if kernel-debuginfo is not present perf intel-pt: Do not try to queue auxtrace data on pipe perf inject: Use perf_data__read() for auxtrace tools/tracing/rtla: osnoise_hist: use total duration for average calculation leds: simatic-ipc-leds-gpio: Make sure we have the GPIO providing driver leds: is31fl319x: Wrap mutex_destroy() for devm_add_action_or_rest() leds: led-core: Fix refcount leak in of_led_get() perf llvm: Fix inadvertent file creation gfs2: jdata writepage fix cifs: use tcon allocation functions even for dummy tcon cifs: Fix warning and UAF when destroy the MR list cifs: Fix lost destroy smbd connection when MR allocate failed NFSD: copy the whole verifier in nfsd_copy_write_verifier nfsd: don't fsync nfsd_files on last close nfsd: fix courtesy client with deny mode handling in nfs4_upgrade_open NFSD: fix problems with cleanup on errors in nfsd4_copy nfsd: clean up potential nfsd_file refcount leaks in COPY codepath nfsd: fix race to check ls_layouts NFSD: fix leaked reference count of nfsd4_ssc_umount_item NFSD: enhance inter-server copy cleanup drm/shmem-helper: Fix locking for drm_gem_shmem_get_pages_sgt() ALSA: hda/hdmi: Register with vga_switcheroo on Dual GPU Macbooks hid: bigben_probe(): validate report count HID: bigben: use spinlock to safely schedule workers HID: bigben_worker() remove unneeded check on report_field HID: bigben: use spinlock to protect concurrent accesses ASoC: soc-dapm.h: fixup warning struct snd_pcm_substream not declared spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one() NFS: fix disabling of swap nfs4trace: fix state manager flag printing dm: remove flush_scheduled_work() during local_exit() ASoC: tlv320adcx140: fix 'ti,gpio-config' DT property init hwmon: (mlxreg-fan) Return zero speed for broken fan spi: bcm63xx-hsspi: Fix multi-bit mode setting HID: logitech-hidpp: Hard-code HID++ 1.0 fast scroll support drm/amd/display: don't call dc_interrupt_set() for disabled crtcs ASoC: codecs: lpass: fix incorrect mclk rate ASoC: codecs: lpass: register mclk after runtime pm ASoC: qcom: q6apm-dai: Add SNDRV_PCM_INFO_BATCH flag ASoC: qcom: q6apm-dai: fix race condition while updating the position pointer ASoC: qcom: q6apm-lpass-dai: unprepare stream if its already prepared HID: retain initial quirks set up when creating HID devices HID: multitouch: Add quirks for flipped axes scsi: aic94xx: Add missing check for dma_map_single() scsi: mpt3sas: Fix a memory leak drm/amdgpu: fix enum odm_combine_mode mismatch ALSA: hda: Fix the control element identification for multiple codecs hwmon: (ltc2945) Handle error case in ltc2945_value_store hwmon: (asus-ec-sensors) add missing mutex path regulator: tps65219: use generic set_bypass() ASoC: dt-bindings: meson: fix gx-card codec node regex ASoC: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params() ASoC: rsnd: fixup #endif position regmap: apply reg_base and reg_downshift for single register ops dm: improve shrinker debug names ASoC: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove() ASoC: mchp-spdifrx: fix controls that works with completion mechanism ASoC: mchp-spdifrx: fix return value in case completion times out ASoC: mchp-spdifrx: fix controls which rely on rsr register spi: dw_bt1: fix MUX_MMIO dependencies ASoC: topology: Properly access value coming from topology file gpio: vf610: connect GPIO label to dev name dt-bindings: display: mediatek: Fix the fallback for mediatek,mt8186-disp-ccorr ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress() drm/mediatek: Clean dangling pointer on bind error path drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc drm/mediatek: Drop unbalanced obj unref drm/mediatek: Use NULL instead of 0 for NULL pointer drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd drm/msm/dpu: set pdpu->is_rt_pipe early in dpu_plane_sspp_atomic_update() pinctrl: renesas: rzg2l: Fix configuring the GPIO pins as interrupts drm/tegra: firewall: Check for is_addr_reg existence in IMM check gpu: host1x: Don't skip assigning syncpoints to channels gpu: host1x: Fix mask for syncpoint increment register pinctrl: mediatek: Initialize variable *buf to zero pinctrl: mediatek: Initialize variable pullen and pullup to zero pinctrl: bcm2835: Remove of_node_put() in bcm2835_of_gpio_ranges_fallback() habanalabs: bugs fixes in timestamps buff alloc drm/msm/mdp5: Add check for kzalloc drm/msm/dpu: Add check for pstates drm/msm/dpu: Add check for cstate drm/msm: use strscpy instead of strncpy drm/msm/dpu: sc7180: add missing WB2 clock control scsi: ufs: exynos: Fix DMA alignment for PAGE_SIZE != 4096 drm/msm/dsi: Allow 2 CTRLs on v2.5.0 drm: exynos: dsi: Fix MIPI_DSI*_NO_* mode flags drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness regulator: tps65219: use IS_ERR() to detect an error pointer drm/bridge: lt9611: pass a pointer to the of node drm/bridge: lt9611: fix clock calculation drm/bridge: lt9611: fix programming of video modes drm/bridge: lt9611: fix polarity programming drm/bridge: lt9611: fix HPD reenablement drm/bridge: lt9611: fix sleep mode setup drm/msm/dpu: Disallow unallocated resources to be returned drm/msm/gem: Add check for kmalloc drm/amdgpu: Use the sched from entity for amdgpu_cs trace ALSA: hda/ca0132: minor fix for allocation size drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() drm/bridge: tc358767: Set default CLRSIPO count ASoC: fsl_sai: initialize is_dsp_mode flag scsi: qla2xxx: edif: Fix clang warning scsi: qla2xxx: Fix exchange oversubscription for management commands scsi: qla2xxx: Fix exchange oversubscription drm/panel-edp: fix name for IVO product id 854b drm/msm: clean event_thread->worker in case of an error drm/vc4: hdmi: Correct interlaced timings again drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5 drm/vc4: hvs: Correct interrupt masking bit assignment for HVS5 drm/vc4: hvs: SCALER_DISPBKGND_AUTOHS is only valid on HVS4 drm/vc4: hvs: Set AXI panic modes pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins drm/msm/hdmi: Add missing check for alloc_ordered_workqueue drm/msm/dpu: check for null return of devm_kzalloc() in dpu_writeback_init() hwmon: (ftsteutates) Fix scaling of measurements drm/vc4: drop all currently held locks if deadlock happens gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() drm: tidss: Fix pixel format definition drm/vc4: dpi: Fix format mapping for RGB565 drm/vkms: Fix null-ptr-deref in vkms_release() drm/vkms: Fix memory leak in vkms_init() drm/bridge: megachips: Fix error handling in i2c_register_driver() drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC drm: mxsfb: DRM_IMX_LCDIF should depend on ARCH_MXC drm/bridge: ti-sn65dsi83: Fix delay after reset deassert to match spec drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats drm: Fix potential null-ptr-deref due to drmm_mode_config_init() sefltests: netdevsim: wait for devlink instance after netns removal selftest: fib_tests: Always cleanup before exit net/mlx4_en: Introduce flexible array to silence overflow warning net: lan966x: Fix possible deadlock inside PTP net: bcmgenet: fix MoCA LED control l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register() selftests/net: Interpret UDP_GRO cmsg data as an int value net/smc: fix application data exception net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link() irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts irqchip/irq-brcmstb-l2: Set IRQ_LEVEL for level triggered interrupts bpf: Fix global subprog context argument resolution logic LoongArch, bpf: Use 4 instructions for function address in JIT xsk: check IFF_UP earlier in Tx path can: esd_usb: Make use of can_change_state() and relocate checking skb for NULL can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a bus error selftests/bpf: Fix xdp_do_redirect on s390x bpf: Zeroing allocated object from slab in bpf memory allocator wifi: mac80211: pass 'sta' to ieee80211_rx_data_set_sta() selftests/bpf: Fix map_kptr test. thermal/drivers/hisi: Drop second sensor hi3660 tools/lib/thermal: Fix thermal_sampling_exit() wifi: mac80211: fix off-by-one link setting wifi: mac80211: avoid u32_encode_bits() warning wifi: mac80211: Don't translate MLD addresses for multicast wifi: mac80211: fix non-MLO station association wifi: mac80211: make rate u32 in sta_set_rate_info_rx() wifi: mac80211: move color collision detection report in a delayed work crypto: crypto4xx - Call dma_unmap_page when done crypto: octeontx2 - Fix objects shared between several modules ACPI: resource: Do IRQ override on all TongFang GMxRGxx ACPI: resource: Add IRQ overrides for MAINGEAR Vector Pro 2 models selftests/bpf: Fix out-of-srctree build wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() wifi: iwl4965: Add missing check for create_singlethread_workqueue() wifi: iwl3945: Add missing check for create_singlethread_workqueue clocksource/drivers/riscv: Patch riscv_clock_next_event() jump before first use RISC-V: time: initialize hrtimer based broadcast clock event device m68k: /proc/hardware should depend on PROC_FS crypto: rsa-pkcs1pad - Use akcipher_request_complete rds: rds_rm_zerocopy_callback() correct order for list_add_tail() xen/grant-dma-iommu: Implement a dummy probe_device() callback libbpf: Fix alen calculation in libbpf_nla_dump_errormsg() s390/ap: fix status returned by ap_qact() s390/ap: fix status returned by ap_aqic() s390: vfio-ap: tighten the NIB validity check net: ipa: generic command param fix Bluetooth: hci_qca: get wakeup status from serdev device handle Bluetooth: L2CAP: Fix potential user-after-free Bluetooth: hci_conn: Refactor hci_bind_bis() since it always succeeds cpufreq: davinci: Fix clk use after free OPP: fix error checking in opp_migrate_dentry() tap: tap_open(): correctly initialize socket uid tun: tun_chr_open(): correctly initialize socket uid net: add sock_init_data_uid() s390/boot: fix mem_detect extended area allocation s390/mem_detect: rely on diag260() if sclp_early_get_memsize() fails s390/boot: cleanup decompressor header files s390/vmem: fix empty page tables cleanup under KASAN s390/mem_detect: fix detect_memory() error handling irqchip/ti-sci: Fix refcount leak in ti_sci_intr_irq_domain_probe irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains irqchip: Fix refcount leak in platform_irqchip_probe net/mlx5: Enhance debug print in page allocation failure wifi: mt76: mt7921: fix error code of return in mt7921_acpi_read wifi: mt76: add memory barrier to SDIO queue kick wifi: mt76: mt7915: fix WED TxS reporting wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit wifi: mt76: mt7915: call mt7915_mcu_set_thermal_throttling() only after init_work bpftool: profile online CPUs instead of possible crypto: ccp - Flush the SEV-ES TMR memory before giving it to firmware selftests/bpf: Initialize tc in xdp_synproxy can: rcar_canfd: Fix R-Car V3U GAFLCFG field accesses kselftest/arm64: Fix enumeration of systems without 128 bit SME wifi: iwlwifi: mei: fix compilation errors in rfkill() s390/bpf: Add expoline to tail calls leds: led-class: Add missing put_device() to led_put() crypto: xts - Handle EBUSY correctly selftests/bpf: Fix vmtest static compilation error selftests/bpf: Use consistent build-id type for liburandom_read.so x86/microcode: Adjust late loading result reporting message x86/microcode: Check CPU capabilities after late microcode update correctly x86/microcode: Add a parameter to microcode_check() to store CPU capabilities powercap: fix possible name leak in powercap_register_zone() crypto: seqiv - Handle EBUSY correctly crypto: essiv - Handle EBUSY correctly crypto: ccp - Failure on re-initialization due to duplicate sysfs filename selftests/bpf: Fix build errors if CONFIG_NF_CONNTRACK=m ACPI: battery: Fix missing NUL-termination with large strings wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data() wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function thermal/drivers/imx_sc_thermal: Fix the loop condition thermal/drivers/imx_sc_thermal: Drop empty platform remove function wifi: orinoco: check return value of hermes_write_wordrec() wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU wifi: rtw89: Add missing check for alloc_workqueue wifi: rtw89: fix potential leak in rtw89_append_probe_req_ie() thermal/drivers/tsens: limit num_sensors to 9 for msm8939 thermal/drivers/tsens: fix slope values for msm8939 thermal/drivers/tsens: Sort out msm8976 vs msm8956 data thermal/drivers/tsens: Drop msm8976-specific defines x86/signal: Fix the value returned by strict_sas_size() s390/vfio-ap: fix an error handling path in vfio_ap_mdev_probe_queue() s390/early: fix sclp_early_sccb variable lifetime workqueue: Protects wq_unbound_cpumask with wq_pool_attach_mutex kselftest/arm64: Fix syscall-abi for systems without 128 bit SME arm64/cpufeature: Fix field sign for DIT hwcap detection selftests/xsk: print correct error codes when exiting selftests/xsk: print correct payload for packet dump ACPICA: nsrepair: handle cases without a return value correctly platform/chrome: cros_ec_typec: Update port DP VDO crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2 lib/mpi: Fix buffer overrun when SG is too long rcu-tasks: Fix synchronize_rcu_tasks() VS zap_pid_ns_processes() rcu-tasks: Remove preemption disablement around srcu_read_[un]lock() calls rcu-tasks: Improve comments explaining tasks_rcu_exit_srcu purpose genirq: Fix the return type of kstat_cpu_irqs_sum() ACPICA: Drop port I/O validation for some regions crypto: x86/ghash - fix unaligned access in ghash_setkey() libbpf: Fix invalid return address register in s390 wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave() wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave() wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave() wifi: libertas: if_usb: don't call kfree_skb() under spin_lock_irqsave() wifi: libertas_tf: don't call kfree_skb() under spin_lock_irqsave() wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() wifi: wilc1000: add missing unregister_netdev() in wilc_netdev_ifc_init() wifi: wilc1000: fix potential memory leak in wilc_mac_xmit() wifi: ipw2200: fix memory leak in ipw_wdev_init() wifi: ipw2x00: don't call dev_kfree_skb() under spin_lock_irqsave() libbpf: Fix btf__align_of() by taking into account field offsets wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() wifi: rtw89: 8852c: rfk: correct DPK settings wifi: rtw89: 8852c: rfk: correct DACK setting wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave() wifi: libertas: fix memory leak in lbs_init_adapter() wifi: iwlegacy: common: don't call dev_kfree_skb() under spin_lock_irqsave() wifi: rtlwifi: rtl8723be: don't call kfree_skb() under spin_lock_irqsave() wifi: rtlwifi: rtl8188ee: don't call kfree_skb() under spin_lock_irqsave() wifi: rtlwifi: rtl8821ae: don't call kfree_skb() under spin_lock_irqsave() wifi: rsi: Fix memory leak in rsi_coex_attach() wifi: mt76: fix coverity uninit_use_in_call in mt76_connac2_reverse_frag0_hdr_trans() wifi: mt76: mt7915: fix unintended sign extension of mt7915_hw_queue_read() wifi: mt76: mt7915: drop always true condition of __mt7915_reg_addr() wifi: mt76: mt7915: check return value before accessing free_block_num wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host wifi: mt76: mt7915: add missing of_node_put() block: use proper return value from bio_failfast() block: bio-integrity: Copy flags when bio_integrity_payload is cloned block: Fix io statistics for cgroup in throttle path block: sync mixed merged request's failfast with 1st bio's erofs: relinquish volume with mutex held arm64: dts: qcom: pmk8350: Use the correct PON compatible arm64: dts: qcom: pmk8350: Specify PBS register for PON block: ublk: check IO buffer based on flag need_get_data KEYS: asymmetric: Fix ECDSA use via keyctl uapi x86/perf/zhaoxin: Add stepping check for ZXC perf/x86/intel/ds: Fix the conversion from TSC to perf time sched/rt: pick_next_rt_entity(): check list_entry s390/dasd: Fix potential memleak in dasd_eckd_init() arm64: dts: qcom: msm8992-lg-bullhead: Enable regulators arm64: dts: qcom: msm8992-*: Fix up comments arm64: dts: qcom: msm8953: correct TLMM gpio-ranges arm64: dts: qcom: msm8992-lg-bullhead: Correct memory overlaps with the SMEM and MPSS memory regions arm64: dts: qcom: sm8450: drop incorrect cells from serial arm64: dts: qcom: sm8350: drop incorrect cells from serial arm64: dts: qcom: msm8996 switch from RPM_SMD_BB_CLK1 to RPM_SMD_XO_CLK_SRC arm64: dts: qcom: msm8996: support using GPLL0 as kryocc input blk-mq: correct stale comment of .get_budget blk-mq: Fix potential io hung for shared sbitmap per tagset blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait blk-mq: remove stale comment for blk_mq_sched_mark_restart_hctx blk-mq: avoid sleep in blk_mq_alloc_request_hctx ARM: dts: stm32: Update part number NVMEM description on stm32mp131 arm64: dts: mediatek: mt7986: Fix watchdog compatible arm64: dts: mediatek: mt8195: Fix watchdog compatible arm64: dts: mediatek: mt8186: Fix watchdog compatible arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node arm64: dts: mt8186: Fix CPU map for single-cluster SoC arm64: dts: mt8192: Fix CPU map for single-cluster SoC arm64: dts: mt8195: Fix CPU map for single-cluster SoC sbitmap: correct wake_batch recalculation to avoid potential IO hung sbitmap: Use single per-bitmap counting to wake up queued tags sbitmap: remove redundant check in __sbitmap_queue_get_batch ARM: dts: imx7s: correct iomuxc gpr mux controller cells ublk_drv: don't probe partitions if the ubq daemon isn't trusted ublk_drv: remove nr_aborted_queues from ublk_device ARM: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN arm64: dts: meson: radxa-zero: allow usb otg mode arm64: dts: renesas: beacon-renesom: Fix gpio expander reference locking/rwsem: Disable preemption in all down_read*() and up_read() code paths arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name arm64: dts: amlogic: meson-axg-jethome-jethub-j1xx: fix invalid rtc node name arm64: dts: amlogic: meson-gxl-s905w-jethome-jethub-j80: fix invalid rtc node name arm64: dts: amlogic: meson-gx: add missing unit address to rng node name arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names property arm64: dts: amlogic: meson-axg-jethome-jethub-j1xx: fix supply name of USB controller node arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name ARM: imx: Call ida_simple_remove() for ida_simple_get ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato arm64: dts: ti: k3-j7200: Fix wakeup pinmux range ARM: s3c: fix s3c64xx_set_timer_source prototype ARM: bcm2835_defconfig: Enable the framebuffer arm64: dts: mediatek: mt8192: Mark scp_adsp clock as broken ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init() arm64: dts: meson: remove CPU opps below 1GHz for G12A boards arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names arm64: dts: qcom: ipq8074: fix Gen3 PCIe node arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names arm64: dts: qcom: msm8992-bullhead: Disable dfps_data_mem arm64: dts: qcom: msm8992-bullhead: Fix cont_splash_mem size arm64: dts: msm8992-bullhead: add memory hole region arm64: tegra: Fix duplicate regulator on Jetson TX1 arm64: dts: ti: k3-am62-main: Fix clocks for McSPI arm64: dts: ti: k3-am62: Enable SPI nodes at the board level cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again* arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name arm64: dts: meson-gx: Fix Ethernet MAC address unit name arm64: dts: meson-axg: jethub-j1xx: Fix MAC address node names arm64: dts: meson-gxl: jethub-j80: Fix Bluetooth MAC node name arm64: dts: meson-gxl: jethub-j80: Fix WiFi MAC address node arm64: dts: qcom: sc8280xp: Vote for CX in USB controllers arm64: dts: qcom: sc8280xp: correct SPMI bus address cells arm64: dts: qcom: sc7280: correct SPMI bus address cells arm64: dts: qcom: sc7180: correct SPMI bus address cells x86/acpi/boot: Do not register processors that cannot be onlined for x2APIC arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name arm64: dts: mediatek: mt8186: Fix systimer 13 MHz clock description arm64: dts: mediatek: mt8195: Fix systimer 13 MHz clock description arm64: dts: mediatek: mt8192: Fix systimer 13 MHz clock description arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description arm64: dts: mediatek: mt8195: Add power domain to U3PHY1 T-PHY ARM: zynq: Fix refcount leak in zynq_early_slcr_init arm64: dts: imx8m: Align SoC unique ID node unit address arm64: dts: qcom: sm6125-seine: Clean up gpio-keys (volume down) arm64: dts: qcom: sm6125: Reorder HSUSB PHY clocks to match bindings arm64: dts: qcom: sm6350: Fix up the ramoops node arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k arm64: dts: qcom: msm8996-tone: Fix USB taking 6 minutes to wake up arm64: dts: qcom: qcs404: use symbol names for PCIe resets ARM: OMAP2+: Fix memory leak in realtime_counter_init() ata: ahci: Revert "ata: ahci: Add Tiger Lake UP{3,4} AHCI controller" powerpc/mm: Rearrange if-else block to avoid clang warning HID: asus: use spinlock to safely schedule workers HID: asus: use spinlock to protect concurrent accesses Revert "ANDROID: disble the UID_SYS_STATS driver" Revert "exit: Remove profile_task_exit & profile_munmap" FROMGIT: pstore: Revert pmsg_lock back to a normal mutex ANDROID: ABI: Update allowed list for QCOM ANDROID: ABI: Add missing symbols to QCOM list fscrypt: support decrypting data from large folios fsverity: support verifying data from large folios fsverity.rst: update git repo URL for fsverity-utils ext4: allow verity with fs block size < PAGE_SIZE fs/buffer.c: support fsverity in block_read_full_folio() f2fs: simplify f2fs_readpage_limit() ext4: simplify ext4_readpage_limit() fsverity: support enabling with tree block size < PAGE_SIZE fsverity: support verification with tree block size < PAGE_SIZE fsverity: replace fsverity_hash_page() with fsverity_hash_block() fsverity: use EFBIG for file too large to enable verity fsverity: store log2(digest_size) precomputed fsverity: simplify Merkle tree readahead size calculation fsverity: use unsigned long for level_start fsverity: remove debug messages and CONFIG_FS_VERITY_DEBUG fsverity: pass pos and size to ->write_merkle_tree_block fsverity: optimize fsverity_cleanup_inode() on non-verity files fsverity: optimize fsverity_prepare_setattr() on non-verity files fsverity: optimize fsverity_file_open() on non-verity files fscrypt: clean up fscrypt_add_test_dummy_key() fs/super.c: stop calling fscrypt_destroy_keyring() from __put_super() f2fs: stop calling fscrypt_add_test_dummy_key() ext4: stop calling fscrypt_add_test_dummy_key() fscrypt: add the test dummy encryption key on-demand f2fs: drop unnecessary arg for f2fs_ioc_*() f2fs: Revert "f2fs: truncate blocks in batch in __complete_revoke_list()" f2fs: synchronize atomic write aborts f2fs: fix wrong segment count f2fs: replace si->sbi w/ sbi in stat_show() f2fs: export ipu policy in debugfs f2fs: make kobj_type structures constant f2fs: fix to do sanity check on extent cache correctly f2fs: add missing description for ipu_policy node f2fs: fix to set ipu policy f2fs: fix typos in comments f2fs: fix kernel crash due to null io->bio f2fs: use iostat_lat_type directly as a parameter in the iostat_update_and_unbind_ctx() f2fs: add sysfs nodes to set last_age_weight f2fs: fix f2fs_show_options to show nogc_merge mount option f2fs: fix cgroup writeback accounting with fs-layer encryption f2fs: fix wrong calculation of block age f2fs: fix to update age extent in f2fs_do_zero_range() f2fs: fix to update age extent correctly during truncation f2fs: fix to avoid potential memory corruption in __update_iostat_latency() f2fs: retry to update the inode page given data corruption f2fs: fix to handle F2FS_IOC_START_ATOMIC_REPLACE in f2fs_compat_ioctl() f2fs: clean up i_compress_flag and i_compress_level usage f2fs: reduce stack memory cost by using bitfield in struct f2fs_io_info f2fs: factor the read/write tracing logic into a helper f2fs: remove __has_curseg_space f2fs: refactor next blk selection f2fs: remove __allocate_new_section f2fs: refactor __allocate_new_segment f2fs: add a f2fs_curseg_valid_blocks helper f2fs: simplify do_checkpoint f2fs: remove __add_sum_entry f2fs: fix to abort atomic write only during do_exist() f2fs: allow set compression option of files without blocks f2fs: fix information leak in f2fs_move_inline_dirents() fs: f2fs: initialize fsdata in pagecache_write() f2fs: fix to check warm_data_age_threshold f2fs: return true if all cmd were issued or no cmd need to be issued for f2fs_issue_discard_timeout() f2fs: clarify compress level bit offset f2fs: fix to show discard_unit mount opt f2fs: fix to do sanity check on extent cache correctly f2fs: remove unneeded f2fs_cp_error() in f2fs_create_whiteout() f2fs: clear atomic_write_task in f2fs_abort_atomic_write() f2fs: introduce trace_f2fs_replace_atomic_write_block f2fs: introduce discard_io_aware_gran sysfs node f2fs: drop useless initializer and unneeded local variable f2fs: add iostat support for flush f2fs: support accounting iostat count and avg_bytes f2fs: convert discard_wake and gc_wake to bool type f2fs: convert to use MIN_DISCARD_GRANULARITY macro f2fs: merge f2fs_show_injection_info() into time_to_inject() f2fs: add a f2fs_ prefix to punch_hole() and expand_inode_data() f2fs: remove unnecessary blank lines f2fs: mark f2fs_init_compress_mempool w/ __init f2fs: judge whether discard_unit is section only when have CONFIG_BLK_DEV_ZONED f2fs: start freeing cluster pages from the unused number MAINTAINERS: Add f2fs's patchwork f2fs: deliver the accumulated 'issued' to __issue_discard_cmd_orderly() f2fs: avoid to check PG_error flag f2fs: add missing doc for fault injection sysfs f2fs: fix to avoid potential deadlock f2fs: introduce IS_F2FS_IPU_* macro f2fs: refactor the hole reporting and allocation logic in f2fs_map_blocks f2fs: factor out a f2fs_map_no_dnode f2fs: factor a f2fs_map_blocks_cached helper f2fs: remove the create argument to f2fs_map_blocks f2fs: remove f2fs_get_block docs: f2fs: fix html doc error f2fs: simplify __allocate_data_block f2fs: reflow prepare_write_begin f2fs: f2fs_do_map_lock f2fs: add a f2fs_get_block_locked helper f2fs: add a f2fs_lookup_extent_cache_block helper f2fs: split __submit_bio f2fs: rename F2FS_MAP_UNWRITTEN to F2FS_MAP_DELALLOC f2fs: decouple F2FS_MAP_ from buffer head flags f2fs: don't rely on F2FS_MAP_* in f2fs_iomap_begin f2fs: fix to call clear_page_private_reference in .{release,invalid}_folio f2fs: remove unused PAGE_PRIVATE_ATOMIC_WRITE f2fs: fix to support .migrate_folio for compressed inode f2fs: file: drop useless initializer in expand_inode_data() Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/display/mediatek/mediatek,ccorr.yaml Documentation/devicetree/bindings/sound/amlogic,gx-sound-card.yaml android/abi_gki_aarch64.stg drivers/hwtracing/coresight/coresight-cti-sysfs.c drivers/soc/qcom/qcom_stats.c drivers/ufs/host/ufs-qcom.c drivers/ufs/host/ufs-qcom.h Change-Id: I6a2a516fd53a940d28d7f51b0b73f816b2a632fc Upstream-Build: ks_qcom-android14-6.1-keystone-qcom-release@9839361 UKQ2.230328.002 Signed-off-by: jianzhou <quic_jianzhou@quicinc.com>	2023-04-04 00:15:30 -07:00
Vijayanand Jitta	a7bb928033	ANDROID: mm: add get_page_owner_handle function ... Add and export get_page_owner_handle function which returns the handle for the corresponding page_ext, this will be used by the minidump module to get page_owner info. Bug: 199236943 Change-Id: I7b3641f7c6ad918f4111c98d715904477f92185b Signed-off-by: Vijayanand Jitta <vjitta@codeaurora.org> Signed-off-by: Jaskaran Singh <quic_jasksing@quicinc.com>	2023-03-23 18:21:23 +00:00
Vijayanand Jitta	97b7d85866	ANDROID: mm: add get_each_object_track function ... Add and export get_each_object_track which helps in looping through all the slab objects of a page and gets the track structure of each object, also make track_item and track structure public, these will be used by the minidump module to get slab owner info. Includes commit 0e00d7c46b36 ("ANDROID: mm/slub: Fix Kasan issue with for_each_object_track") from android13-5.15 as a bug fix. Bug: 199236943 Change-Id: Id9922b57053be277f8042ad8199fbbf9faa984ef Signed-off-by: Vijayanand Jitta <vjitta@codeaurora.org> Signed-off-by: Jaskaran Singh <quic_jasksing@quicinc.com>	2023-03-23 18:21:15 +00:00
Vijayanand Jitta	173c09996a	ANDROID: mm: Export get_slabinfo ... Export get_slabinfo symbol for minidump module. Bug: 199236943 Change-Id: I01870a370da9bf5db842ff14801d94ef79350560 Signed-off-by: Vijayanand Jitta <vjitta@codeaurora.org> Signed-off-by: Jaskaran Singh <quic_jasksing@quicinc.com>	2023-03-23 18:21:07 +00:00
Jaskaran Singh	a9104d3210	ANDROID: mm: Export page_ext_[get|put] ... Export page_ext_get and page_ext_put for minidump. Bug: 199236943 Change-Id: I63a9562ef2ea0ee4c2e7d6497b1424ceba9267eb Signed-off-by: Jaskaran Singh <quic_jasksing@quicinc.com>	2023-03-23 18:20:59 +00:00
Vijayanand Jitta	a47a1cfd59	ANDROID: mm: Export si_swapinfo ... Export si_swapinfo symbol which is used as part of meminfo collection from minidump module. Bug: 199236943 Change-Id: I5dc1672ce649c22dc33d4a544ee5a38f8376becf Signed-off-by: Vijayanand Jitta <vjitta@codeaurora.org> Signed-off-by: Jaskaran Singh <quic_jasksing@quicinc.com>	2023-03-23 18:20:34 +00:00
Vijayanand Jitta	43aae34811	ANDROID: mm: Export vmalloc_nr_pages ... Export vmalloc_nr_pages which is used as part of meminfo collection from minidump module. Bug: 199236943 Change-Id: I4c80fe2a0712658ec46b49064fda670da84b3732 Signed-off-by: Vijayanand Jitta <quic_vjitta@quicinc.com> Signed-off-by: Jaskaran Singh <quic_jasksing@quicinc.com>	2023-03-23 18:20:34 +00:00
Vijayanand Jitta	acea5c5e2f	ANDROID: mm: Export pcpu_nr_pages ... Export pcpu_nr_pages symbol which is used as part of meminfo collection from minidump module. Bug: 199236943 Change-Id: I08262ec95a3f1be8322b9b8d2d9c4098518fc408 Signed-off-by: Vijayanand Jitta <quic_vjitta@quicinc.com> Signed-off-by: Jaskaran Singh <quic_jasksing@quicinc.com>	2023-03-23 18:20:34 +00:00
jianzhou	ec6d1db8f3	Merge keystone/android14-6.1-keystone-qcom-release.6.1.15 (e2d158d) into msm-pineapple ... * refs/heads/tmp-e2d158d: Revert "ANDROID: GKI: defconfig: enable BTF debug info" ANDROID: qki: gki_defconfig: Add LOCALVERSION temporarily ANDROID: usb: gadget: f_accessory: update to usb_gstrings_attach ANDROID: abi_gki_aarch64_qcom: whitelist some vm symbols ANDROID: ABI: Update QCOM symbol list ANDROID: Add initial symbols list for galaxy ANDROID: printk: export symbol for tracepoint_console Linux 6.1.15 USB: core: Don't hold device lock while reading the "descriptors" sysfs file scripts/tags.sh: fix incompatibility with PCRE2 fs: use consistent setgid checks in is_sxid() attr: use consistent sgid stripping checks attr: add setattr_should_drop_sgid() fs: move should_remove_suid() attr: add in_group_or_capable() drm/amd/display: Properly reuse completion structure usb: typec: pd: Remove usb_suspend_supported sysfs from sink PDO arm64: dts: uniphier: Fix property name in PXs3 USB node usb: gadget: u_serial: Add null pointer check in gserial_resume USB: serial: option: add support for VW/Skoda "Carstick LTE" usb: dwc3: pci: add support for the Intel Meteor Lake-M drm/amd/display: Fix race condition in DPIA AUX transfer drm/amd/display: Move DCN314 DOMAIN power control to DMCUB vc_screen: don't clobber return value in vcs_read net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues(). bpf: bpf_fib_lookup should not return neigh in NUD_FAILED state PM: sleep: Avoid using pr_cont() in the tasks freezing code x86/cpu: Add Lunar Lake M selftests: ocelot: tc_flower_chains: make test_vlan_ingress_modify() more comprehensive HID: Ignore battery for ELAN touchscreen 29DF on HP ASoC: codecs: es8326: Fix DTS properties reading HID: core: Fix deadloop in hid_apply_multiplier. neigh: make sure used and confirmed times are valid ARM: dts: stihxxx-b2120: fix polarity of reset line of tsin0 port ASoC: SOF: amd: Fix for handling spurious interrupts from DSP powerpc: Don't select ARCH_WANTS_NO_INSTR IB/hfi1: Assign npages earlier ASoC: rt715-sdca: fix clock stop prepare timeout issue arm64: dts: rockchip: align rk3399 DMC OPP table with bindings btrfs: send: limit number of clones and allocated memory size pinctrl: amd: Fix debug output for debounce time ACPI: NFIT: fix a potential deadlock during NFIT teardown HID: Ignore battery for Elan touchscreen on Asus TP420IA HID: elecom: add support for TrackBall 056E:011C arm64: dts: rockchip: fix probe of analog sound card on rock-3a arm64: dts: rockchip: add missing #interrupt-cells to rk356x pcie2x1 ARM: dts: rockchip: add power-domains property to dp node on rk3288 arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc arm64: dts: rockchip: reduce thermal limits on rk3399-pinephone-pro Fix XFRM-I support for nested ESP tunnels ANDROID: revert core of "xfrm: Use actual socket sk instead of skb socket for xfrm_output_resume" UPSTREAM: dm verity: stop using WQ_UNBOUND for verify_wq ANDROID: Enable percpu high priority kthreads for erofs UPSTREAM: erofs: fix an error code in z_erofs_init_zip_subsystem() BACKPORT: erofs: add per-cpu threads for decompression as an option ANDROID: GKI: define protected exports and modules list ANDROID: GKI: Update owners for GKI modules lists ANDROID: GKI: Export memblock_free to drivers ANDROID: ABI: Update QCOM symbol list ANDROID: GKI: 3/1/2023 KMI update Revert "ANDROID: GKI: skip btf_type_tag in genksyms" ANDROID: GKI: Enable CONFIG_MODULE_SCMVERSION=y ANDROID: modules: re-introduce the MODULE_SCMVERSION config ANDROID: arm64: cache: Lower ARCH_DMA_MINALIGN to 64 bytes ANDROID: arm64: dma: Panic if ARCH_DMA_MINALIGN is less than CTR_EL0.CWG Revert "sched/psi: Stop relying on timer_pending() for poll_work rescheduling" FROMGIT: scsi: ufs: core: Split ufshcd_map_sg() FROMGIT: scsi: ufs: bsg: Clean up ufs_bsg_request() FROMGIT: scsi: ufs: bsg: Remove unnecessary length checkup ANDROID: Add initial symbols list for db845c ANDROID: defconfig: Remove SPI_SPIDEV and I2C_CHARDEV from consolidate fragement Linux 6.1.14 bpf: add missing header file include randstruct: disable Clang 15 support ext4: Fix function prototype mismatch for ext4_feat_ktype platform/x86: nvidia-wmi-ec-backlight: Add force module parameter platform/x86/amd/pmf: Add depends on CONFIG_POWER_SUPPLY audit: update the mailing list in MAINTAINERS wifi: mwifiex: Add missing compatible string for SD8787 sh: define RUNTIME_DISCARD_EXIT s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld < 2.36 powerpc/vmlinux.lds: Don't discard .rela* for relocatable builds powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT arch: fix broken BuildID for arm64 and riscv arm64: remove special treatment for the link order of head.o riscv: remove special treatment for the link order of head.o Bluetooth: btusb: Add more device IDs for WCN6855 x86/static_call: Add support for Jcc tail-calls x86/alternatives: Teach text_poke_bp() to patch Jcc.d32 instructions x86/alternatives: Introduce int3_emulate_jcc() uaccess: Add speculation barrier to copy_from_user() nfp: ethtool: fix the bug of setting unsupported port speed nfp: ethtool: support reporting link modes powerpc/64s/radix: Fix RWX mapping with relocated kernel selftests: kvm: move declaration at the beginning of main() KVM: x86: fix deadlock for KVM_XEN_EVTCHN_RESET drm/i915: Remove __maybe_unused from mtl_info spi: mediatek: Enable irq before the spi registration powerpc: dts: t208x: Disable 10G on MAC1 and MAC2 can: kvaser_usb: hydra: help gcc-13 to figure out cmd_len KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS KVM: SVM: Skip WRMSR fastpath on VM-Exit if next RIP isn't valid KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception docs: perf: Fix PMU instance name of hisi-pcie-pmu spi: mediatek: Enable irq when pdata is ready scsi: hisi_sas: Fix SATA devices missing issue during I_T nexus reset scsi: libsas: Add smp_ata_check_ready_type() random: always mix cycle counter in add_latent_entropy() sched/psi: Stop relying on timer_pending() for poll_work rescheduling clk: mxl: syscon_node_to_regmap() returns error pointers powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G clk: mxl: Fix a clk entry by adding relevant flags clk: mxl: Add option to override gate clks clk: mxl: Remove redundant spinlocks clk: mxl: Switch from direct readl/writel based IO to regmap based IO drm/edid: Fix minimum bpc supported with DSC1.2 for HDMI sink wifi: rtl8xxxu: gen2: Turn on the rate control wifi: ath11k: fix warning in dma_free_coherent() of memory chunks while recovery drm/etnaviv: don't truncate physical page address FROMGIT: scsi: ufs: ufs-mediatek: Remove unnecessary return code ANDROID: mm: add reclaim_shmem_address_space() for faster reclaims FROMGIT: scsi: ufs: ufs-mediatek: Modify the return value FROMGIT: scsi: ufs: ufs-mediatek: Remove unneeded code FROMGIT: scsi: ufs: core: Fix unnecessary operation for early return FROMGIT: scsi: ufs: core: Switch 'check_for_bkops' to bool FROMGIT: scsi: ufs: core: Separate function name and message FROMGIT: scsi: ufs: core: Introduce ufshcd_abort_all() FROMGIT: scsi: ufs: core: Refactor ufshcd_hba_enable() FROMGIT: scsi: ufs: core: Use is_visible to control UFS unit descriptor sysfs nodes FROMGIT: scsi: ufs: core: Clean up ufshcd_slave_alloc() FROMGIT: scsi: ufs: core: Revert "WB is only available on LUN #0 to #7" ANDROID: ABI: Update QCOM symbol list FROMGIT: scsi: ufs: core: Print events for WLUN suspend and resume failures FROMGIT: blk-mq: move the call to blk_put_queue out of blk_mq_destroy_queue FROMGIT: scsi: ufs: Introduce the function ufshcd_execute_start_stop() FROMGIT: scsi: ufs: Try harder to change the power mode ANDROID: ABI: Add scheduler-specific tracepoints to QCOM list ANDROID: modpost: Don't complain about empty non-allocatable ELF sections FROMGIT: scsi: ufs: Use 'else' in ufshcd_set_dev_pwr_mode() FROMGIT: scsi: ufs: Remove an outdated comment FROMGIT: scsi: ufs: Simplify ufshcd_set_dev_pwr_mode() ANDROID: pstore/ram: Add backward compatibility for ramoops reserved region FROMLIST: pstore/ram: Rework logic for detecting ramoops reserved memory region ANDROID: incremental fs: Move throttling to outside page lock ANDROID: incremental fs: Fix race between truncate and write last block ANDROID: ufs: Add vendor hook for ufs sdev update ANDROID: MGLRU: Don't skip anon reclaim if swap low ANDROID: KVM: arm64: Addr sanity check for pKVM HVC registration ANDROID: ABI: Update QCOM symbol list Linux 6.1.13 net: sched: sch: Fix off by one in htb_activate_prios() ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak nvme-pci: refresh visible attrs for cmb attributes alarmtimer: Prevent starvation by small intervals and SIG_IGN perf/x86: Refuse to export capabilities for hybrid PMUs kvm: initialize all of the kvm_debugregs structure before sending it to userspace KVM: x86/pmu: Disable vPMU support on hybrid CPUs (host PMUs) nvme-rdma: stop auth work after tearing down queues in error recovery nvme-tcp: stop auth work after tearing down queues in error recovery net/sched: tcindex: search key must be 16 bits i40e: Add checking for null for nlmsg_find_attr() mm: extend max struct page size for kmsan mm/gup: add folio to list when folio_isolate_lru() succeed ipv6: Fix tcp socket connection with DSCP. ipv6: Fix datagram socket connection with DSCP. ixgbe: add double of VLAN header when computing the max MTU igb: Fix PPS input and output using 3rd and 4th SDP igb: conditionalize I2C bit banging on external thermal sensor support net: mpls: fix stale pointer if allocation fails during device rename tipc: fix kernel warning when sending SYN message net: use a bounce buffer for copying skb->mark net: stmmac: Restrict warning on disabling DMA store and fwd mode tracing: Make trace_define_field_ext() static bnxt_en: Fix mqprio and XDP ring checking logic net: stmmac: fix order of dwmac5 FlexPPS parametrization sequence net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() net/sched: act_ctinfo: use percpu stats net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions. ice: xsk: Fix cleaning of XDP_TX frames net/sched: tcindex: update imperfect hash filters respecting rcu sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list net: ethernet: ti: am65-cpsw: Add RX DMA Channel Teardown Quirk net: bgmac: fix BCM5358 support by setting correct flags i40e: add double of VLAN header when computing the max MTU ixgbe: allow to increase MTU to 3K with XDP enabled ice: fix lost multicast packets in promisc mode drm/i915/gen11: Wa_1408615072/Wa_1407596294 should be on GT list drm/vc4: Fix YUV plane handling when planes are in different buffers drm/vc4: crtc: Increase setup cost in core clock calculation to handle extreme reduced blanking revert "squashfs: harden sanity check in squashfs_read_xattr_id_table" net: Fix unwanted sign extension in netdev_stats_to_stats64() Revert "mm: Always release pages to the buddy allocator in memblock_free_late()." coredump: Move dump_emit_page() to kill unused warning freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL gpio: sim: fix a memory leak mm/migrate: fix wrongly apply write bit after mkdirty on sparc64 mm/filemap: fix page end in filemap_get_read_batch mm/MADV_COLLAPSE: set EAGAIN on unexpected page refcount nilfs2: fix underflow in second superblock position calculations hugetlb: check for undefined shift on 32 bit architectures sched/psi: Fix use-after-free in ep_remove_wait_queue() ata: libata-core: Disable READ LOG DMA EXT for Samsung MZ7LH ata: ahci: Add Tiger Lake UP{3,4} AHCI controller ALSA: hda/realtek: Enable mute/micmute LEDs and speaker support for HP Laptops ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP platform. ALSA: hda/realtek - fixed wrong gpio assigned ALSA: hda/conexant: add a new hda codec SN6180 ALSA: hda: Fix codec device field initializan mmc: mmc_spi: fix error handling in mmc_spi_probe() mmc: sdio: fix possible resource leaks in some error paths mmc: meson-gx: fix SDIO mode if cap_sdio_irq isn't set mmc: jz4740: Work around bug on JZ4760(B) drm/vmwgfx: Do not drop the reference to the handle too soon drm/vmwgfx: Stop accessing buffer objects which failed init drm/amd/display: Fail atomic_check early on normalize_zpos error drm/amd/amdgpu: fix warning during suspend drm: Disable dynamic debug as broken fbdev: Fix invalid page access after closing deferred I/O devices vmxnet3: move rss code block under eop descriptor aio: fix mremap after fork null-deref mm: shrinkers: fix deadlock in shrinker debugfs kasan: fix Oops due to missing calls to kasan_arch_is_ready() of: reserved_mem: Have kmemleak ignore dynamically allocated reserved mem selftests: mptcp: userspace: fix v4-v6 test in v6.1 ceph: blocklist the kclient when receiving corrupted snap trace ceph: move mount state enum to super.h platform/x86: touchscreen_dmi: Add Chuwi Vi8 (CWI501) DMI match drm/amd/display: Properly handle additional cases where DCN is not supported drm/amdgpu: Enable vclk dclk node for gc11.0.3 drm/amdgpu: enable HDP SD for gfx 11.0.3 drm/amd/display: Reset DMUB mailbox SW state after HW reset drm/amd/display: Unassign does_plane_fit_in_mall function from dcn3.2 drm/amd/display: Adjust downscaling limits for dcn314 drm/amd/display: Add missing brackets in calculation nvme: clear the request_queue pointers on failure in nvme_alloc_io_tag_set nvme: clear the request_queue pointers on failure in nvme_alloc_admin_tag_set nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association s390/decompressor: specify __decompress() buf len to avoid overflow net: sched: sch: Bounds check priority net: ethernet: mtk_eth_soc: Avoid truncating allocation drm/nouveau/devinit/tu102-: wait for GFW_BOOT_PROGRESS == COMPLETED fscache: Use clear_and_wake_up_bit() in fscache_create_volume_work() powerpc/64: Fix perf profiling asynchronous interrupt handlers net: stmmac: do not stop RX_CLK in Rx LPI state for qcs404 SoC selftest: net: Improve IPV6_TCLASS/IPV6_HOPLIMIT tests apparmor compatibility net/rose: Fix to not accept on connected socket vdpa: ifcvf: Do proper cleanup if IFCVF init fails tools/virtio: fix the vringh test for virtio ring changes ASoC: cs42l56: fix DT probe bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself ASoC: amd: yc: Add Xiaomi Redmi Book Pro 15 2022 into DMI table ALSA: hda: Do not unset preset when cleaning up codec selftests/bpf: Verify copy_register_state() preserves parent/live fields ASoC: Intel: sof_ssp_amp: always set dpcm_capture for amplifiers ASoC: Intel: sof_nau8825: always set dpcm_capture for amplifiers ASoC: Intel: sof_cs42l42: always set dpcm_capture for amplifiers ASoC: Intel: sof_rt5682: always set dpcm_capture for amplifiers ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum610 Wireless ASoC: SOF: sof-audio: start with the right widget type ASoC: amd: yc: Add DMI support for new acer/emdoor platforms btrfs: lock the inode in shared mode before starting fiemap btrfs: move the auto defrag code to defrag.c mptcp: fix locking for in-kernel listener creation mptcp: deduplicate error paths on endpoint creation mptcp: fix locking for setsockopt corner-case mptcp: sockopt: make 'tcp_fastopen_connect' generic ANDROID: GKI: Update the ABI representation ANDROID: vendor_hooks: Add hooks for ufs scheduler ANDROID: abi_gki_aarch64_qcom: add ufs_update_sdev to symbol list ANDROID: KVM: arm64: iommu: Add arg to finalize to pass state ANDROID: KVM: arm64: Add function to report misconfigurations to pKVM. FROMGIT: usb: gadget: configfs: Restrict symlink creation is UDC already binded ANDROID: GKI: Enable symbol trimming ANDROID: GKI: skip btf_type_tag in genksyms ANDROID: GKI: Fix copying of protected_exports ANDROID: ABI: Update QCOM symbol list FROMLIST: input: Add KEY_CAMERA_FOCUS event in HID ANDROID: GKI: add Pixel symbol list ANDROID: GKI: Update abi_gki_aarch64_qcom for genpd ANDROID: KVM: arm64: Support missing pKVM module sections ANDROID: arm64/mm: Add command line option to make ZONE_DMA32 empty ANDROID: GKI: update ABI ANDROID: firmware_loader: Emit empty string when no custom paths ANDROID: GKI: enable KMI enforcement Revert "ANDROID: sched/cpuset: Add vendor hook to change tasks affinity" ANDROID: ABI: Update QCOM symbol list ANDROID: GKI: Do not modify protected exports source list ANDROID: Move NDK_TRIPLE to build.config.constants. Linux 6.1.12 Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions KVM: x86: Mitigate the cross-thread return address predictions bug x86/speculation: Identify processors vulnerable to SMT RSB predictions drm/i915: Fix VBT DSI DVO port handling drm/i915: Initialize the obj flags for shmem objects drm/i915: Move fd_install after last use of fence drm/amd/display: fix cursor offset on rotation 180 drm/amd/display: properly handling AGP aperture in vm setup drm/amdgpu/smu: skip pptable init under sriov drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini drm/amd/pm: bump SMU 13.0.7 driver_if header version drm/amdgpu: Add unique_id support for GC 11.0.1/2 drm/amd/pm: bump SMU 13.0.0 driver_if header version arm64: efi: Force the use of SetVirtualAddressMap() on eMAG and Altra Max machines Fix page corruption caused by racy check in __free_pages arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive rtmutex: Ensure that the top waiter is always woken up tracing: Fix TASK_COMM_LEN in trace event format file drm/amdgpu: Use the TGID for trace_amdgpu_vm_update_ptes powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch riscv: kprobe: Fixup misaligned load text riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte nvdimm: Support sizeof(struct page) > MAX_STRUCT_PAGE_SIZE ceph: flush cap releases when the session is flushed drm/amd/pm: add SMU 13.0.7 missing GetPptLimit message mapping pinctrl: qcom: sm8450-lpass-lpi: correct swr_rx_data group clk: ingenic: jz4760: Update M/N/OD calculation algorithm cxl/region: Fix passthrough-decoder detection cxl/region: Fix null pointer dereference for resetting decoder usb: typec: altmodes/displayport: Fix probe pin assign check usb: core: add quirk for Alcor Link AK9563 smartcard reader btrfs: free device in btrfs_close_devices for a single device filesystem btrfs: simplify update of last_dir_index_offset when logging a directory selftests: mptcp: stop tests earlier selftests: mptcp: allow more slack for slow test-case mptcp: be careful on subflow status propagation on errors mptcp: do not wait for bare sockets' timeout net: USB: Fix wrong-direction WARNING in plusb.c cifs: Fix use-after-free in rdata->read_into_pages() pinctrl: intel: Restore the pins that used to be in Direct IRQ mode pinctrl: aspeed: Revert "Force to disable the function's signal" spi: dw: Fix wrong FIFO level setting for long xfers pinctrl: single: fix potential NULL dereference pinctrl: aspeed: Fix confusing types in return value pinctrl: mediatek: Fix the drive register definition of some Pins clk: microchip: mpfs-ccc: Use devm_kasprintf() for allocating formatted strings ASoC: topology: Return -ENOMEM on memory allocation failure ASoC: fsl_sai: fix getting version from VERID ASoC: tas5805m: add missing page switch. ASoC: tas5805m: rework to avoid scheduling while atomic. arm64: dts: mediatek: mt8195: Fix vdosys* compatible strings riscv: stacktrace: Fix missing the first frame ALSA: pci: lx6464es: fix a debug loop arm64: dts: rockchip: set sdmmc0 speed to sd-uhs-sdr50 on rock-3a arm64: dts: rockchip: fix input enable pinconf on rk3399 selftests: forwarding: lib: quote the sysctl values net: mscc: ocelot: fix all IPv6 getting trapped to CPU when PTP timestamping is used rds: rds_rm_zerocopy_callback() use list_first_entry() selftests: Fix failing VXLAN VNI filtering test txhash: fix sk->sk_txrehash default net: ethernet: mtk_eth_soc: fix wrong parameters order in __xdp_rxq_info_reg() igc: Add ndo_tx_timeout support net/mlx5: Serialize module cleanup with reload and remove net/mlx5: fw_tracer, Zero consumer index when reloading the tracer net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers net/mlx5: Expose SF firmware pages counter net/mlx5: Store page counters in a single array net/mlx5e: IPoIB, Show unknown speed instead of error net/mlx5e: Fix crash unsetting rx-vlan-filter in switchdev mode net/mlx5: Bridge, fix ageing of peer FDB entries net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change net: mscc: ocelot: fix VCAP filters not matching on MAC with "protocol 802.1Q" net: dsa: mt7530: don't change PVC_EG_TAG when CPU port becomes VLAN-aware ice: switch: fix potential memleak in ice_add_adv_recipe() ice: Fix disabling Rx VLAN filtering with port VLAN enabled ice: Do not use WQ_MEM_RECLAIM flag for workqueue nvidiafb: detect the hardware support before removing console. cpuset: Call set_cpus_allowed_ptr() with appropriate mask for task drm/virtio: exbuf->fence_fd unmodified on interrupted wait drm/i915: Don't do the WM0->WM1 copy w/a if WM1 is already enabled HID: amd_sfh: if no sensors are enabled, clean up net: microchip: sparx5: fix PTP init/deinit not checking all ports uapi: add missing ip/ipv6 header dependencies for linux/stddef.h cpufreq: qcom-hw: Fix cpufreq_driver->get() for non-LMH systems ionic: missed doorbell workaround ionic: refactor use of ionic_rx_fill() ionic: clean interrupt before enabling queue to avoid credit race net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY net: macb: Perform zynqmp dynamic configuration only for SGMII interface bonding: fix error checking in bond_debug_reregister() net: phylink: move phy_device_free() to correctly release phy device of: Make OF framebuffer device names unique xfrm: fix bug with DSCP copy to v6 from v4 tunnel RDMA/usnic: use iommu_map_atomic() under spin_lock() RDMA/irdma: Fix potential NULL-ptr-dereference xfrm: annotate data-race around use_time IB/IPoIB: Fix legacy IPoIB due to wrong number of queues xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr() IB/hfi1: Restore allocated resources on failed copyout xfrm: compat: change expression for switch in xfrm_xlate64 HID: logitech: Disable hi-res scrolling on USB can: j1939: do not wait 250 ms if the same addr was already claimed of/address: Return an error when no valid dma-ranges are found tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw Revert "PCI/ASPM: Refactor L1 PM Substates Control Register programming" Revert "PCI/ASPM: Save L1 PM Substates Capability for suspend/resume" ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP platform. ALSA: hda/realtek: Add quirk for ASUS UM3402 using CS35L41 ALSA: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() ALSA: hda/realtek: Add Positivo N14KP6-TG btrfs: zlib: zero-initialize zlib workspace btrfs: limit device extents to the device size hv_netvsc: Allocate memory in netvsc_dma_map() with GFP_ATOMIC ANDROID: irq: manage: Export irq_do_set_affinity symbol ANDROID: KVM: arm64: Add header_page userspace descriptor for nVHE tracing Conflicts: BUILD.bazel android/abi_gki_aarch64_qcom Change-Id: Iaba217a7ae3d6381fe45cbbea292e1f7b9452707 Upstream-Build: ks_qcom-android14-6.1-keystone-qcom-release@9731442 UKQ2.230312.001 Signed-off-by: jianzhou <quic_jianzhou@quicinc.com> Signed-off-by: Maria Yu <quic_aiquny@quicinc.com>	2023-03-14 18:50:11 -07:00
Greg Kroah-Hartman	2cb73a87e4	Merge 6.1.16 into android14-6.1 ... Changes in 6.1.16 HID: asus: use spinlock to protect concurrent accesses HID: asus: use spinlock to safely schedule workers powerpc/mm: Rearrange if-else block to avoid clang warning ata: ahci: Revert "ata: ahci: Add Tiger Lake UP{3,4} AHCI controller" ARM: OMAP2+: Fix memory leak in realtime_counter_init() arm64: dts: qcom: qcs404: use symbol names for PCIe resets arm64: dts: qcom: msm8996-tone: Fix USB taking 6 minutes to wake up arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k arm64: dts: qcom: sm6350: Fix up the ramoops node arm64: dts: qcom: sm6125: Reorder HSUSB PHY clocks to match bindings arm64: dts: qcom: sm6125-seine: Clean up gpio-keys (volume down) arm64: dts: imx8m: Align SoC unique ID node unit address ARM: zynq: Fix refcount leak in zynq_early_slcr_init arm64: dts: mediatek: mt8195: Add power domain to U3PHY1 T-PHY arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description arm64: dts: mediatek: mt8192: Fix systimer 13 MHz clock description arm64: dts: mediatek: mt8195: Fix systimer 13 MHz clock description arm64: dts: mediatek: mt8186: Fix systimer 13 MHz clock description arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name x86/acpi/boot: Do not register processors that cannot be onlined for x2APIC arm64: dts: qcom: sc7180: correct SPMI bus address cells arm64: dts: qcom: sc7280: correct SPMI bus address cells arm64: dts: qcom: sc8280xp: correct SPMI bus address cells arm64: dts: qcom: sc8280xp: Vote for CX in USB controllers arm64: dts: meson-gxl: jethub-j80: Fix WiFi MAC address node arm64: dts: meson-gxl: jethub-j80: Fix Bluetooth MAC node name arm64: dts: meson-axg: jethub-j1xx: Fix MAC address node names arm64: dts: meson-gx: Fix Ethernet MAC address unit name arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again* arm64: dts: ti: k3-am62: Enable SPI nodes at the board level arm64: dts: ti: k3-am62-main: Fix clocks for McSPI arm64: tegra: Fix duplicate regulator on Jetson TX1 arm64: dts: msm8992-bullhead: add memory hole region arm64: dts: qcom: msm8992-bullhead: Fix cont_splash_mem size arm64: dts: qcom: msm8992-bullhead: Disable dfps_data_mem arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges arm64: dts: qcom: ipq8074: fix Gen3 PCIe node arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names arm64: dts: meson: remove CPU opps below 1GHz for G12A boards ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init() arm64: dts: mediatek: mt8192: Mark scp_adsp clock as broken ARM: bcm2835_defconfig: Enable the framebuffer ARM: s3c: fix s3c64xx_set_timer_source prototype arm64: dts: ti: k3-j7200: Fix wakeup pinmux range ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato ARM: imx: Call ida_simple_remove() for ida_simple_get arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible arm64: dts: amlogic: meson-axg-jethome-jethub-j1xx: fix supply name of USB controller node arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names property arm64: dts: amlogic: meson-gx: add missing unit address to rng node name arm64: dts: amlogic: meson-gxl-s905w-jethome-jethub-j80: fix invalid rtc node name arm64: dts: amlogic: meson-axg-jethome-jethub-j1xx: fix invalid rtc node name arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip locking/rwsem: Disable preemption in all down_read*() and up_read() code paths arm64: dts: renesas: beacon-renesom: Fix gpio expander reference arm64: dts: meson: radxa-zero: allow usb otg mode arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN ARM: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference ublk_drv: remove nr_aborted_queues from ublk_device ublk_drv: don't probe partitions if the ubq daemon isn't trusted ARM: dts: imx7s: correct iomuxc gpr mux controller cells sbitmap: remove redundant check in __sbitmap_queue_get_batch sbitmap: Use single per-bitmap counting to wake up queued tags sbitmap: correct wake_batch recalculation to avoid potential IO hung arm64: dts: mt8195: Fix CPU map for single-cluster SoC arm64: dts: mt8192: Fix CPU map for single-cluster SoC arm64: dts: mt8186: Fix CPU map for single-cluster SoC arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node arm64: dts: mediatek: mt8186: Fix watchdog compatible arm64: dts: mediatek: mt8195: Fix watchdog compatible arm64: dts: mediatek: mt7986: Fix watchdog compatible ARM: dts: stm32: Update part number NVMEM description on stm32mp131 blk-mq: avoid sleep in blk_mq_alloc_request_hctx blk-mq: remove stale comment for blk_mq_sched_mark_restart_hctx blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait blk-mq: Fix potential io hung for shared sbitmap per tagset blk-mq: correct stale comment of .get_budget arm64: dts: qcom: msm8996: support using GPLL0 as kryocc input arm64: dts: qcom: msm8996 switch from RPM_SMD_BB_CLK1 to RPM_SMD_XO_CLK_SRC arm64: dts: qcom: sm8350: drop incorrect cells from serial arm64: dts: qcom: sm8450: drop incorrect cells from serial arm64: dts: qcom: msm8992-lg-bullhead: Correct memory overlaps with the SMEM and MPSS memory regions arm64: dts: qcom: msm8953: correct TLMM gpio-ranges arm64: dts: qcom: msm8992-*: Fix up comments arm64: dts: qcom: msm8992-lg-bullhead: Enable regulators s390/dasd: Fix potential memleak in dasd_eckd_init() sched/rt: pick_next_rt_entity(): check list_entry perf/x86/intel/ds: Fix the conversion from TSC to perf time x86/perf/zhaoxin: Add stepping check for ZXC KEYS: asymmetric: Fix ECDSA use via keyctl uapi block: ublk: check IO buffer based on flag need_get_data arm64: dts: qcom: pmk8350: Specify PBS register for PON arm64: dts: qcom: pmk8350: Use the correct PON compatible erofs: relinquish volume with mutex held block: sync mixed merged request's failfast with 1st bio's block: Fix io statistics for cgroup in throttle path block: bio-integrity: Copy flags when bio_integrity_payload is cloned block: use proper return value from bio_failfast() wifi: mt76: mt7915: add missing of_node_put() wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host wifi: mt76: mt7915: check return value before accessing free_block_num wifi: mt76: mt7915: drop always true condition of __mt7915_reg_addr() wifi: mt76: mt7915: fix unintended sign extension of mt7915_hw_queue_read() wifi: mt76: fix coverity uninit_use_in_call in mt76_connac2_reverse_frag0_hdr_trans() wifi: rsi: Fix memory leak in rsi_coex_attach() wifi: rtlwifi: rtl8821ae: don't call kfree_skb() under spin_lock_irqsave() wifi: rtlwifi: rtl8188ee: don't call kfree_skb() under spin_lock_irqsave() wifi: rtlwifi: rtl8723be: don't call kfree_skb() under spin_lock_irqsave() wifi: iwlegacy: common: don't call dev_kfree_skb() under spin_lock_irqsave() wifi: libertas: fix memory leak in lbs_init_adapter() wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave() wifi: rtw89: 8852c: rfk: correct DACK setting wifi: rtw89: 8852c: rfk: correct DPK settings wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() libbpf: Fix btf__align_of() by taking into account field offsets wifi: ipw2x00: don't call dev_kfree_skb() under spin_lock_irqsave() wifi: ipw2200: fix memory leak in ipw_wdev_init() wifi: wilc1000: fix potential memory leak in wilc_mac_xmit() wifi: wilc1000: add missing unregister_netdev() in wilc_netdev_ifc_init() wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() wifi: libertas_tf: don't call kfree_skb() under spin_lock_irqsave() wifi: libertas: if_usb: don't call kfree_skb() under spin_lock_irqsave() wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave() wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave() wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave() libbpf: Fix invalid return address register in s390 crypto: x86/ghash - fix unaligned access in ghash_setkey() ACPICA: Drop port I/O validation for some regions genirq: Fix the return type of kstat_cpu_irqs_sum() rcu-tasks: Improve comments explaining tasks_rcu_exit_srcu purpose rcu-tasks: Remove preemption disablement around srcu_read_[un]lock() calls rcu-tasks: Fix synchronize_rcu_tasks() VS zap_pid_ns_processes() lib/mpi: Fix buffer overrun when SG is too long crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2 platform/chrome: cros_ec_typec: Update port DP VDO ACPICA: nsrepair: handle cases without a return value correctly selftests/xsk: print correct payload for packet dump selftests/xsk: print correct error codes when exiting arm64/cpufeature: Fix field sign for DIT hwcap detection kselftest/arm64: Fix syscall-abi for systems without 128 bit SME workqueue: Protects wq_unbound_cpumask with wq_pool_attach_mutex s390/early: fix sclp_early_sccb variable lifetime s390/vfio-ap: fix an error handling path in vfio_ap_mdev_probe_queue() x86/signal: Fix the value returned by strict_sas_size() thermal/drivers/tsens: Drop msm8976-specific defines thermal/drivers/tsens: Sort out msm8976 vs msm8956 data thermal/drivers/tsens: fix slope values for msm8939 thermal/drivers/tsens: limit num_sensors to 9 for msm8939 wifi: rtw89: fix potential leak in rtw89_append_probe_req_ie() wifi: rtw89: Add missing check for alloc_workqueue wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU wifi: orinoco: check return value of hermes_write_wordrec() thermal/drivers/imx_sc_thermal: Drop empty platform remove function thermal/drivers/imx_sc_thermal: Fix the loop condition wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data() ACPI: battery: Fix missing NUL-termination with large strings selftests/bpf: Fix build errors if CONFIG_NF_CONNTRACK=m crypto: ccp - Failure on re-initialization due to duplicate sysfs filename crypto: essiv - Handle EBUSY correctly crypto: seqiv - Handle EBUSY correctly powercap: fix possible name leak in powercap_register_zone() x86/microcode: Add a parameter to microcode_check() to store CPU capabilities x86/microcode: Check CPU capabilities after late microcode update correctly x86/microcode: Adjust late loading result reporting message selftests/bpf: Use consistent build-id type for liburandom_read.so selftests/bpf: Fix vmtest static compilation error crypto: xts - Handle EBUSY correctly leds: led-class: Add missing put_device() to led_put() s390/bpf: Add expoline to tail calls wifi: iwlwifi: mei: fix compilation errors in rfkill() kselftest/arm64: Fix enumeration of systems without 128 bit SME can: rcar_canfd: Fix R-Car V3U GAFLCFG field accesses selftests/bpf: Initialize tc in xdp_synproxy crypto: ccp - Flush the SEV-ES TMR memory before giving it to firmware bpftool: profile online CPUs instead of possible wifi: mt76: mt7915: call mt7915_mcu_set_thermal_throttling() only after init_work wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit wifi: mt76: mt7915: fix WED TxS reporting wifi: mt76: add memory barrier to SDIO queue kick wifi: mt76: mt7921: fix error code of return in mt7921_acpi_read net/mlx5: Enhance debug print in page allocation failure irqchip: Fix refcount leak in platform_irqchip_probe irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe irqchip/ti-sci: Fix refcount leak in ti_sci_intr_irq_domain_probe s390/mem_detect: fix detect_memory() error handling s390/vmem: fix empty page tables cleanup under KASAN s390/boot: cleanup decompressor header files s390/mem_detect: rely on diag260() if sclp_early_get_memsize() fails s390/boot: fix mem_detect extended area allocation net: add sock_init_data_uid() tun: tun_chr_open(): correctly initialize socket uid tap: tap_open(): correctly initialize socket uid OPP: fix error checking in opp_migrate_dentry() cpufreq: davinci: Fix clk use after free Bluetooth: hci_conn: Refactor hci_bind_bis() since it always succeeds Bluetooth: L2CAP: Fix potential user-after-free Bluetooth: hci_qca: get wakeup status from serdev device handle net: ipa: generic command param fix s390: vfio-ap: tighten the NIB validity check s390/ap: fix status returned by ap_aqic() s390/ap: fix status returned by ap_qact() libbpf: Fix alen calculation in libbpf_nla_dump_errormsg() xen/grant-dma-iommu: Implement a dummy probe_device() callback rds: rds_rm_zerocopy_callback() correct order for list_add_tail() crypto: rsa-pkcs1pad - Use akcipher_request_complete m68k: /proc/hardware should depend on PROC_FS RISC-V: time: initialize hrtimer based broadcast clock event device clocksource/drivers/riscv: Patch riscv_clock_next_event() jump before first use wifi: iwl3945: Add missing check for create_singlethread_workqueue wifi: iwl4965: Add missing check for create_singlethread_workqueue() wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() selftests/bpf: Fix out-of-srctree build ACPI: resource: Add IRQ overrides for MAINGEAR Vector Pro 2 models ACPI: resource: Do IRQ override on all TongFang GMxRGxx crypto: octeontx2 - Fix objects shared between several modules crypto: crypto4xx - Call dma_unmap_page when done wifi: mac80211: move color collision detection report in a delayed work wifi: mac80211: make rate u32 in sta_set_rate_info_rx() wifi: mac80211: fix non-MLO station association wifi: mac80211: Don't translate MLD addresses for multicast wifi: mac80211: avoid u32_encode_bits() warning wifi: mac80211: fix off-by-one link setting tools/lib/thermal: Fix thermal_sampling_exit() thermal/drivers/hisi: Drop second sensor hi3660 selftests/bpf: Fix map_kptr test. wifi: mac80211: pass 'sta' to ieee80211_rx_data_set_sta() bpf: Zeroing allocated object from slab in bpf memory allocator selftests/bpf: Fix xdp_do_redirect on s390x can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a bus error can: esd_usb: Make use of can_change_state() and relocate checking skb for NULL xsk: check IFF_UP earlier in Tx path LoongArch, bpf: Use 4 instructions for function address in JIT bpf: Fix global subprog context argument resolution logic irqchip/irq-brcmstb-l2: Set IRQ_LEVEL for level triggered interrupts irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link() net/smc: fix application data exception selftests/net: Interpret UDP_GRO cmsg data as an int value l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register() net: bcmgenet: fix MoCA LED control net: lan966x: Fix possible deadlock inside PTP net/mlx4_en: Introduce flexible array to silence overflow warning selftest: fib_tests: Always cleanup before exit sefltests: netdevsim: wait for devlink instance after netns removal drm: Fix potential null-ptr-deref due to drmm_mode_config_init() drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats drm/bridge: ti-sn65dsi83: Fix delay after reset deassert to match spec drm: mxsfb: DRM_IMX_LCDIF should depend on ARCH_MXC drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC drm/bridge: megachips: Fix error handling in i2c_register_driver() drm/vkms: Fix memory leak in vkms_init() drm/vkms: Fix null-ptr-deref in vkms_release() drm/vc4: dpi: Fix format mapping for RGB565 drm: tidss: Fix pixel format definition gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() drm/vc4: drop all currently held locks if deadlock happens hwmon: (ftsteutates) Fix scaling of measurements drm/msm/dpu: check for null return of devm_kzalloc() in dpu_writeback_init() drm/msm/hdmi: Add missing check for alloc_ordered_workqueue pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups drm/vc4: hvs: Set AXI panic modes drm/vc4: hvs: SCALER_DISPBKGND_AUTOHS is only valid on HVS4 drm/vc4: hvs: Correct interrupt masking bit assignment for HVS5 drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5 drm/vc4: hdmi: Correct interlaced timings again drm/msm: clean event_thread->worker in case of an error drm/panel-edp: fix name for IVO product id 854b scsi: qla2xxx: Fix exchange oversubscription scsi: qla2xxx: Fix exchange oversubscription for management commands scsi: qla2xxx: edif: Fix clang warning ASoC: fsl_sai: initialize is_dsp_mode flag drm/bridge: tc358767: Set default CLRSIPO count drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() ALSA: hda/ca0132: minor fix for allocation size drm/amdgpu: Use the sched from entity for amdgpu_cs trace drm/msm/gem: Add check for kmalloc drm/msm/dpu: Disallow unallocated resources to be returned drm/bridge: lt9611: fix sleep mode setup drm/bridge: lt9611: fix HPD reenablement drm/bridge: lt9611: fix polarity programming drm/bridge: lt9611: fix programming of video modes drm/bridge: lt9611: fix clock calculation drm/bridge: lt9611: pass a pointer to the of node regulator: tps65219: use IS_ERR() to detect an error pointer drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness drm: exynos: dsi: Fix MIPI_DSI*_NO_* mode flags drm/msm/dsi: Allow 2 CTRLs on v2.5.0 scsi: ufs: exynos: Fix DMA alignment for PAGE_SIZE != 4096 drm/msm/dpu: sc7180: add missing WB2 clock control drm/msm: use strscpy instead of strncpy drm/msm/dpu: Add check for cstate drm/msm/dpu: Add check for pstates drm/msm/mdp5: Add check for kzalloc habanalabs: bugs fixes in timestamps buff alloc pinctrl: bcm2835: Remove of_node_put() in bcm2835_of_gpio_ranges_fallback() pinctrl: mediatek: Initialize variable pullen and pullup to zero pinctrl: mediatek: Initialize variable *buf to zero gpu: host1x: Fix mask for syncpoint increment register gpu: host1x: Don't skip assigning syncpoints to channels drm/tegra: firewall: Check for is_addr_reg existence in IMM check pinctrl: renesas: rzg2l: Fix configuring the GPIO pins as interrupts drm/msm/dpu: set pdpu->is_rt_pipe early in dpu_plane_sspp_atomic_update() drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd drm/mediatek: Use NULL instead of 0 for NULL pointer drm/mediatek: Drop unbalanced obj unref drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc drm/mediatek: Clean dangling pointer on bind error path ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress() dt-bindings: display: mediatek: Fix the fallback for mediatek,mt8186-disp-ccorr gpio: vf610: connect GPIO label to dev name ASoC: topology: Properly access value coming from topology file spi: dw_bt1: fix MUX_MMIO dependencies ASoC: mchp-spdifrx: fix controls which rely on rsr register ASoC: mchp-spdifrx: fix return value in case completion times out ASoC: mchp-spdifrx: fix controls that works with completion mechanism ASoC: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove() dm: improve shrinker debug names regmap: apply reg_base and reg_downshift for single register ops ASoC: rsnd: fixup #endif position ASoC: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params() ASoC: dt-bindings: meson: fix gx-card codec node regex regulator: tps65219: use generic set_bypass() hwmon: (asus-ec-sensors) add missing mutex path hwmon: (ltc2945) Handle error case in ltc2945_value_store ALSA: hda: Fix the control element identification for multiple codecs drm/amdgpu: fix enum odm_combine_mode mismatch scsi: mpt3sas: Fix a memory leak scsi: aic94xx: Add missing check for dma_map_single() HID: multitouch: Add quirks for flipped axes HID: retain initial quirks set up when creating HID devices ASoC: qcom: q6apm-lpass-dai: unprepare stream if its already prepared ASoC: qcom: q6apm-dai: fix race condition while updating the position pointer ASoC: qcom: q6apm-dai: Add SNDRV_PCM_INFO_BATCH flag ASoC: codecs: lpass: register mclk after runtime pm ASoC: codecs: lpass: fix incorrect mclk rate drm/amd/display: don't call dc_interrupt_set() for disabled crtcs HID: logitech-hidpp: Hard-code HID++ 1.0 fast scroll support spi: bcm63xx-hsspi: Fix multi-bit mode setting hwmon: (mlxreg-fan) Return zero speed for broken fan ASoC: tlv320adcx140: fix 'ti,gpio-config' DT property init dm: remove flush_scheduled_work() during local_exit() nfs4trace: fix state manager flag printing NFS: fix disabling of swap spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one() ASoC: soc-dapm.h: fixup warning struct snd_pcm_substream not declared HID: bigben: use spinlock to protect concurrent accesses HID: bigben_worker() remove unneeded check on report_field HID: bigben: use spinlock to safely schedule workers hid: bigben_probe(): validate report count ALSA: hda/hdmi: Register with vga_switcheroo on Dual GPU Macbooks drm/shmem-helper: Fix locking for drm_gem_shmem_get_pages_sgt() NFSD: enhance inter-server copy cleanup NFSD: fix leaked reference count of nfsd4_ssc_umount_item nfsd: fix race to check ls_layouts nfsd: clean up potential nfsd_file refcount leaks in COPY codepath NFSD: fix problems with cleanup on errors in nfsd4_copy nfsd: fix courtesy client with deny mode handling in nfs4_upgrade_open nfsd: don't fsync nfsd_files on last close NFSD: copy the whole verifier in nfsd_copy_write_verifier cifs: Fix lost destroy smbd connection when MR allocate failed cifs: Fix warning and UAF when destroy the MR list cifs: use tcon allocation functions even for dummy tcon gfs2: jdata writepage fix perf llvm: Fix inadvertent file creation leds: led-core: Fix refcount leak in of_led_get() leds: is31fl319x: Wrap mutex_destroy() for devm_add_action_or_rest() leds: simatic-ipc-leds-gpio: Make sure we have the GPIO providing driver tools/tracing/rtla: osnoise_hist: use total duration for average calculation perf inject: Use perf_data__read() for auxtrace perf intel-pt: Do not try to queue auxtrace data on pipe perf test bpf: Skip test if kernel-debuginfo is not present perf tools: Fix auto-complete on aarch64 sparc: allow PM configs for sparc32 COMPILE_TEST selftests: find echo binary to use -ne options selftests/ftrace: Fix bash specific "==" operator selftests: use printf instead of echo -ne perf record: Fix segfault with --overwrite and --max-size printf: fix errname.c list perf tests stat_all_metrics: Change true workload to sleep workload for system wide check objtool: add UACCESS exceptions for __tsan_volatile_read/write mfd: cs5535: Don't build on UML mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0 RDMA/erdma: Fix refcount leak in erdma_mmap dmaengine: HISI_DMA should depend on ARCH_HISI RDMA/hns: Fix refcount leak in hns_roce_mmap iio: light: tsl2563: Do not hardcode interrupt trigger type usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe() i2c: designware: fix i2c_dw_clk_rate() return size to be u32 soundwire: cadence: Don't overflow the command FIFOs driver core: fix potential null-ptr-deref in device_add() kobject: modify kobject_get_path() to take a const * kobject: Fix slab-out-of-bounds in fill_kobj_path() alpha/boot/tools/objstrip: fix the check for ELF header media: uvcvideo: Check for INACTIVE in uvc_ctrl_is_accessible() media: uvcvideo: Implement mask for V4L2_CTRL_TYPE_MENU media: uvcvideo: Refactor uvc_ctrl_mappings_uvcXX media: uvcvideo: Refactor power_line_frequency_controls_limited coresight: etm4x: Fix accesses to TRCSEQRSTEVR and TRCSEQSTR coresight: cti: Prevent negative values of enable count coresight: cti: Add PM runtime call in enable_store usb: typec: intel_pmc_mux: Don't leak the ACPI device reference count PCI/IOV: Enlarge virtfn sysfs name buffer PCI: switchtec: Return -EFAULT for copy_to_user() errors PCI: endpoint: pci-epf-vntb: Clean up kernel_doc warning PCI: endpoint: pci-epf-vntb: Add epf_ntb_mw_bar_clear() num_mws kernel-doc hwtracing: hisi_ptt: Only add the supported devices to the filters list tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown() tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown() serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init() Revert "char: pcmcia: cm4000_cs: Replace mdelay with usleep_range in set_protocol" eeprom: idt_89hpesx: Fix error handling in idt_init() applicom: Fix PCI device refcount leak in applicom_init() firmware: stratix10-svc: add missing gen_pool_destroy() in stratix10_svc_drv_probe() firmware: stratix10-svc: fix error handle while alloc/add device failed VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF mei: pxp: Use correct macros to initialize uuid_le misc/mei/hdcp: Use correct macros to initialize uuid_le misc: fastrpc: Fix an error handling path in fastrpc_rpmsg_probe() driver core: fix resource leak in device_add() driver core: location: Free struct acpi_pld_info *pld before return false drivers: base: transport_class: fix possible memory leak drivers: base: transport_class: fix resource leak when transport_add_device() fails firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle fotg210-udc: Add missing completion handler dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers fpga: microchip-spi: move SPI I/O buffers out of stack fpga: microchip-spi: rewrite status polling in a time measurable way usb: early: xhci-dbc: Fix a potential out-of-bound memory access tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case RDMA/cxgb4: add null-ptr-check after ip_dev_find() usb: musb: mediatek: don't unregister something that wasn't registered usb: gadget: configfs: Restrict symlink creation is UDC already binded phy: mediatek: remove temporary variable @mask_ PCI: mt7621: Delay phy ports initialization iommu: dart: Add suspend/resume support iommu: dart: Support >64 stream IDs iommu/dart: Fix apple_dart_device_group for PCI groups iommu/vt-d: Set No Execute Enable bit in PASID table entry power: supply: remove faulty cooling logic RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish() usb: max-3421: Fix setting of I/O pins RDMA/irdma: Cap MSIX used to online CPUs + 1 serial: fsl_lpuart: fix RS485 RTS polariy inverse issue tty: serial: imx: Handle RS485 DE signal active high tty: serial: imx: disable Ageing Timer interrupt request irq driver core: fw_devlink: Add DL_FLAG_CYCLE support to device links driver core: fw_devlink: Don't purge child fwnode's consumer links driver core: fw_devlink: Allow marking a fwnode link as being part of a cycle driver core: fw_devlink: Consolidate device link flag computation driver core: fw_devlink: Improve check for fwnode with no device/driver driver core: fw_devlink: Make cycle detection more robust mtd: mtdpart: Don't create platform device that'll never probe usb: host: fsl-mph-dr-of: reuse device_set_of_node_from_dev dmaengine: dw-edma: Fix readq_ch() return value truncation PCI: Fix dropping valid root bus resources with .end = zero phy: rockchip-typec: fix tcphy_get_mode error case PCI: qcom: Fix host-init error handling iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() iommu: Fix error unwind in iommu_group_alloc() iommu/amd: Do not identity map v2 capable device when snp is enabled dmaengine: sf-pdma: pdma_desc memory leak fix dmaengine: dw-axi-dmac: Do not dereference NULL structure dmaengine: ptdma: check for null desc before calling pt_cmd_callback iommu/vt-d: Fix error handling in sva enable/disable paths iommu/vt-d: Allow to use flush-queue when first level is default RDMA/rxe: cleanup some error handling in rxe_verbs.c RDMA/rxe: Fix missing memory barriers in rxe_queue.h IB/hfi1: Fix math bugs in hfi1_can_pin_pages() IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors Revert "remoteproc: qcom_q6v5_mss: map/unmap metadata region before/after use" remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers media: ti: cal: fix possible memory leak in cal_ctx_create() media: platform: ti: Add missing check for devm_regulator_get media: imx: imx7-media-csi: fix missing clk_disable_unprepare() in imx7_csi_init() powerpc: Remove linker flag from KBUILD_AFLAGS s390/vdso: Drop '-shared' from KBUILD_CFLAGS_64 builddeb: clean generated package content media: max9286: Fix memleak in max9286_v4l2_register() media: ov2740: Fix memleak in ov2740_init_controls() media: ov5675: Fix memleak in ov5675_init_controls() media: ov5640: Fix soft reset sequence and timings media: ov5640: Handle delays when no reset_gpio set media: mc: Get media_device directly from pad media: i2c: ov772x: Fix memleak in ov772x_probe() media: i2c: imx219: Split common registers from mode tables media: i2c: imx219: Fix binning for RAW8 capture media: platform: mtk-mdp3: Fix return value check in mdp_probe() media: camss: csiphy-3ph: avoid undefined behavior media: platform: mtk-mdp3: remove unused VIDEO_MEDIATEK_VPU config media: platform: mtk-mdp3: fix Kconfig dependencies media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data media: v4l2-jpeg: ignore the unknown APP14 marker media: hantro: Fix JPEG encoder ENUM_FRMSIZE on RK3399 media: imx-jpeg: Apply clk_bulk api instead of operating specific clk media: amphion: correct the unspecified color space media: drivers/media/v4l2-core/v4l2-h264 : add detection of null pointers media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() media: atomisp: Only set default_run_mode on first open of a stream/asd media: i2c: ov7670: 0 instead of -EINVAL was returned media: usb: siano: Fix use after free bugs caused by do_submit_urb media: saa7134: Use video_unregister_device for radio_dev rpmsg: glink: Avoid infinite loop on intent for missing channel rpmsg: glink: Release driver_override ARM: OMAP2+: omap4-common: Fix refcount leak bug arm64: dts: qcom: msm8996: Add additional A2NoC clocks udf: Define EFSCORRUPTED error code context_tracking: Fix noinstr vs KASAN exit: Detect and fix irq disabled state in oops ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected blk-iocost: fix divide by 0 error in calc_lcoefs() blk-cgroup: dropping parent refcount after pd_free_fn() is done blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and blkcg_deactivate_policy() trace/blktrace: fix memory leak with using debugfs_lookup() btrfs: scrub: improve tree block error reporting arm64: zynqmp: Enable hs termination flag for USB dwc3 controller cpuidle, intel_idle: Fix CPUIDLE_FLAG_INIT_XSTATE x86/fpu: Don't set TIF_NEED_FPU_LOAD for PF_IO_WORKER threads cpuidle: drivers: firmware: psci: Dont instrument suspend code cpuidle: lib/bug: Disable rcu_is_watching() during WARN/BUG perf/x86/intel/uncore: Add Meteor Lake support wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() wifi: ath11k: fix monitor mode bringup crash wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() rcu: Make RCU_LOCKDEP_WARN() avoid early lockdep checks rcu: Suppress smp_processor_id() complaint in synchronize_rcu_expedited_wait() srcu: Delegate work to the boot cpu if using SRCU_SIZE_SMALL rcu-tasks: Make rude RCU-Tasks work well with CPU hotplug rcu-tasks: Handle queue-shrink/callback-enqueue race condition wifi: ath11k: debugfs: fix to work with multiple PCI devices thermal: intel: Fix unsigned comparison with less than zero timers: Prevent union confusion from unexpected restart_syscall() x86/bugs: Reset speculation control settings on init bpftool: Always disable stack protection for BPF objects wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds wifi: mt7601u: fix an integer underflow inet: fix fast path in __inet_hash_connect() ice: restrict PTP HW clock freq adjustments to 100, 000, 000 PPB ice: add missing checks for PF vsi type ACPI: Don't build ACPICA with '-Os' bpf, docs: Fix modulo zero, division by zero, overflow, and underflow thermal: intel: intel_pch: Add support for Wellsburg PCH clocksource: Suspend the watchdog temporarily when high read latency detected crypto: hisilicon: Wipe entire pool on error net: bcmgenet: Add a check for oversized packets m68k: Check syscall_trace_enter() return code s390/mm,ptdump: avoid Kasan vs Memcpy Real markers swapping netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj() can: isotp: check CAN address family in isotp_bind() gcc-plugins: drop -std=gnu++11 to fix GCC 13 build tools/power/x86/intel-speed-select: Add Emerald Rapid quirk wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup ACPI: video: Fix Lenovo Ideapad Z570 DMI match net/mlx5: fw_tracer: Fix debug print coda: Avoid partial allocation of sig_inputArgs uaccess: Add minimum bounds check on kernel buffer size s390/idle: mark arch_cpu_idle() noinstr time/debug: Fix memory leak with using debugfs_lookup() PM: domains: fix memory leak with using debugfs_lookup() PM: EM: fix memory leak with using debugfs_lookup() Bluetooth: Fix issue with Actions Semi ATS2851 based devices Bluetooth: btusb: Add new PID/VID 0489:e0f2 for MT7921 Bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE wifi: rtw89: debug: avoid invalid access on RTW89_DBG_SEL_MAC_30 hv_netvsc: Check status in SEND_RNDIS_PKT completion message s390/kfence: fix page fault reporting devlink: Fix TP_STRUCT_entry in trace of devlink health report scm: add user copy checks to put_cmsg() drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Tab 3 X90F drm: panel-orientation-quirks: Add quirk for DynaBook K50 drm/amd/display: Reduce expected sdp bandwidth for dcn321 drm/amd/display: Revert Reduce delay when sink device not able to ACK 00340h write drm/amd/display: Fix potential null-deref in dm_resume drm/omap: dsi: Fix excessive stack usage HID: Add Mapping for System Microphone Mute drm/tiny: ili9486: Do not assume 8-bit only SPI controllers drm/amd/display: Defer DIG FIFO disable after VID stream enable drm/radeon: free iio for atombios when driver shutdown drm/amd: Avoid BUG() for case of SRIOV missing IP version drm/amdkfd: Page aligned memory reserve size scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write Revert "fbcon: don't lose the console font across generic->chip driver switch" drm/amd: Avoid ASSERT for some message failures drm: amd: display: Fix memory leakage drm/amd/display: fix mapping to non-allocated address HID: uclogic: Add frame type quirk HID: uclogic: Add battery quirk HID: uclogic: Add support for XP-PEN Deco Pro SW HID: uclogic: Add support for XP-PEN Deco Pro MW drm/msm/dsi: Add missing check for alloc_ordered_workqueue drm: rcar-du: Add quirk for H3 ES1.x pclk workaround drm: rcar-du: Fix setting a reserved bit in DPLLCR drm/drm_print: correct format problem drm/amd/display: Set hvm_enabled flag for S/G mode habanalabs: extend fatal messages to contain PCI info habanalabs: fix bug in timestamps registration code docs/scripts/gdb: add necessary make scripts_gdb step drm/msm/dpu: Add DSC hardware blocks to register snapshot ASoC: soc-compress: Reposition and add pcm_mutex ASoC: kirkwood: Iterate over array indexes instead of using pointer math regulator: max77802: Bounds check regulator id against opmode regulator: s5m8767: Bounds check id indexing into arrays Revert "drm/amdgpu: TA unload messages are not actually sent to psp when amdgpu is uninstalled" drm/amd/display: fix FCLK pstate change underflow gfs2: Improve gfs2_make_fs_rw error handling hwmon: (coretemp) Simplify platform device handling hwmon: (nct6775) Directly call ASUS ACPI WMI method hwmon: (nct6775) B650/B660/X670 ASUS boards support pinctrl: at91: use devm_kasprintf() to avoid potential leaks drm/amd/display: Do not commit pipe when updating DRR scsi: snic: Fix memory leak with using debugfs_lookup() scsi: ufs: core: Fix device management cmd timeout flow HID: logitech-hidpp: Don't restart communication if not necessary drm/amd/display: Enable P-state validation checks for DCN314 drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5 drm/amd/display: Disable HUBP/DPP PG on DCN314 for now dm thin: add cond_resched() to various workqueue loops dm cache: add cond_resched() to various workqueue loops nfsd: zero out pointers after putting nfsd_files on COPY setup error nfsd: don't hand out delegation on setuid files being opened for write cifs: prevent data race in smb2_reconnect() drm/shmem-helper: Revert accidental non-GPL export driver core: fw_devlink: Avoid spurious error message wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu scsi: mpt3sas: Remove usage of dma_get_required_mask() API firmware: coreboot: framebuffer: Ignore reserved pixel color bits block: don't allow multiple bios for IOCB_NOWAIT issue block: clear bio->bi_bdev when putting a bio back in the cache block: be a bit more careful in checking for NULL bdev while polling rtc: pm8xxx: fix set-alarm race ipmi: ipmb: Fix the MODULE_PARM_DESC associated to 'retry_time_ms' ipmi:ssif: resend_msg() cannot fail ipmi_ssif: Rename idle state and check io_uring: Replace 0-length array with flexible array io_uring: use user visible tail in io_uring_poll() io_uring: handle TIF_NOTIFY_RESUME when checking for task_work io_uring: add a conditional reschedule to the IOPOLL cancelation loop io_uring: add reschedule point to handle_tw_list() io_uring/rsrc: disallow multi-source reg buffers io_uring: remove MSG_NOSIGNAL from recvmsg io_uring: fix fget leak when fs don't support nowait buffered read s390/extmem: return correct segment type in __segment_load() s390: discard .interp section s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler s390/kprobes: fix current_kprobe never cleared after kprobes reenter KVM: s390: disable migration mode when dirty tracking is disabled cifs: Fix uninitialized memory read in smb3_qfs_tcon() cifs: Fix uninitialized memory reads for oparms.mode cifs: fix mount on old smb servers cifs: introduce cifs_io_parms in smb2_async_writev() cifs: split out smb3_use_rdma_offload() helper cifs: don't try to use rdma offload on encrypted connections cifs: Check the lease context if we actually got a lease cifs: return a single-use cfid if we did not get a lease scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info() scsi: mpi3mr: Remove unnecessary memcpy() to alltgt_info->dmi btrfs: hold block group refcount during async discard locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath ksmbd: fix wrong data area length for smb2 lock request ksmbd: do not allow the actual frame length to be smaller than the rfc1002 length ksmbd: fix possible memory leak in smb2_lock() torture: Fix hang during kthread shutdown phase ARM: dts: exynos: correct HDMI phy compatible in Exynos4 io_uring: mark task TASK_RUNNING before handling resume/task work hfs: fix missing hfs_bnode_get() in __hfs_bnode_create fs: hfsplus: fix UAF issue in hfsplus_put_super exfat: fix reporting fs error when reading dir beyond EOF exfat: fix unexpected EOF while reading dir exfat: redefine DIR_DELETED as the bad cluster number exfat: fix inode->i_blocks for non-512 byte sector size device fs: dlm: don't set stop rx flag after node reset fs: dlm: move sending fin message into state change handling fs: dlm: send FIN ack back in right cases f2fs: fix information leak in f2fs_move_inline_dirents() f2fs: retry to update the inode page given data corruption f2fs: fix cgroup writeback accounting with fs-layer encryption f2fs: fix kernel crash due to null io->bio ocfs2: fix defrag path triggering jbd2 ASSERT ocfs2: fix non-auto defrag path not working issue fs/cramfs/inode.c: initialize file_ra_state selftests/landlock: Skip overlayfs tests when not supported selftests/landlock: Test ptrace as much as possible with Yama udf: Truncate added extents on failed expansion udf: Do not bother merging very long extents udf: Do not update file length for failed writes to inline files udf: Preserve link count of system files udf: Detect system inodes linked into directory hierarchy udf: Fix file corruption when appending just after end of preallocated extent md: don't update recovery_cp when curr_resync is ACTIVE RDMA/siw: Fix user page pinning accounting KVM: Destroy target device if coalesced MMIO unregistration fails KVM: VMX: Fix crash due to uninitialized current_vmcs KVM: Register /dev/kvm as the _very_ last thing during initialization KVM: x86: Purge "highest ISR" cache when updating APICv state KVM: x86: Blindly get current x2APIC reg value on "nodecode write" traps KVM: x86: Don't inhibit APICv/AVIC on xAPIC ID "change" if APIC is disabled KVM: x86: Don't inhibit APICv/AVIC if xAPIC ID mismatch is due to 32-bit ID KVM: SVM: Flush the "current" TLB when activating AVIC KVM: SVM: Process ICR on AVIC IPI delivery failure due to invalid target KVM: SVM: Don't put/load AVIC when setting virtual APIC mode KVM: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI KVM: x86: Inject #GP on x2APIC WRMSR that sets reserved bits 63:32 KVM: SVM: Fix potential overflow in SEV's send|receive_update_data() KVM: SVM: hyper-v: placate modpost section mismatch error selftests: x86: Fix incorrect kernel headers search path x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) x86/crash: Disable virt in core NMI crash handler to avoid double shootdown x86/reboot: Disable virtualization in an emergency if SVM is supported x86/reboot: Disable SVM, not just VMX, when stopping CPUs x86/kprobes: Fix __recover_optprobed_insn check optimizing logic x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter x86/microcode/AMD: Add a @cpu parameter to the reloading functions x86/microcode/AMD: Fix mixed steppings support x86/speculation: Allow enabling STIBP with legacy IBRS Documentation/hw-vuln: Document the interaction between IBRS and STIBP virt/sev-guest: Return -EIO if certificate buffer is not large enough brd: mark as nowait compatible brd: return 0/-error from brd_insert_page() brd: check for REQ_NOWAIT and set correct page allocation mask ima: fix error handling logic when file measurement failed ima: Align ima_file_mmap() parameters with mmap_file LSM hook selftests/powerpc: Fix incorrect kernel headers search path selftests/ftrace: Fix eprobe syntax test case to check filter support selftests: sched: Fix incorrect kernel headers search path selftests: core: Fix incorrect kernel headers search path selftests: pid_namespace: Fix incorrect kernel headers search path selftests: arm64: Fix incorrect kernel headers search path selftests: clone3: Fix incorrect kernel headers search path selftests: pidfd: Fix incorrect kernel headers search path selftests: membarrier: Fix incorrect kernel headers search path selftests: kcmp: Fix incorrect kernel headers search path selftests: media_tests: Fix incorrect kernel headers search path selftests: gpio: Fix incorrect kernel headers search path selftests: filesystems: Fix incorrect kernel headers search path selftests: user_events: Fix incorrect kernel headers search path selftests: ptp: Fix incorrect kernel headers search path selftests: sync: Fix incorrect kernel headers search path selftests: rseq: Fix incorrect kernel headers search path selftests: move_mount_set_group: Fix incorrect kernel headers search path selftests: mount_setattr: Fix incorrect kernel headers search path selftests: perf_events: Fix incorrect kernel headers search path selftests: ipc: Fix incorrect kernel headers search path selftests: futex: Fix incorrect kernel headers search path selftests: drivers: Fix incorrect kernel headers search path selftests: dmabuf-heaps: Fix incorrect kernel headers search path selftests: vm: Fix incorrect kernel headers search path selftests: seccomp: Fix incorrect kernel headers search path irqdomain: Fix association race irqdomain: Fix disassociation race irqdomain: Look for existing mapping only once irqdomain: Drop bogus fwspec-mapping error handling irqdomain: Refactor __irq_domain_alloc_irqs() irqdomain: Fix mapping-creation race irqdomain: Fix domain registration race crypto: qat - fix out-of-bounds read mm/damon/paddr: fix missing folio_put() ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC jbd2: fix data missing when reusing bh which is ready to be checkpointed ext4: optimize ea_inode block expansion ext4: refuse to create ea block when umounted cxl/pmem: Fix nvdimm registration races mtd: spi-nor: sfdp: Fix index value for SCCR dwords mtd: spi-nor: spansion: Consider reserved bits in CFR5 register mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type dm: send just one event on resize, not two dm: add cond_resched() to dm_wq_work() dm: add cond_resched() to dm_wq_requeue_work() wifi: rtw88: use RTW_FLAG_POWERON flag to prevent to power on/off twice wifi: rtl8xxxu: Use a longer retry limit of 48 wifi: ath11k: allow system suspend to survive ath11k wifi: cfg80211: Fix use after free for wext wifi: cfg80211: Set SSID if it is not already set cpuidle: add ARCH_SUSPEND_POSSIBLE dependencies qede: fix interrupt coalescing configuration thermal: intel: powerclamp: Fix cur_state for multi package system dm flakey: fix logic when corrupting a bio dm cache: free background tracker's queued work in btracker_destroy dm flakey: don't corrupt the zero page dm flakey: fix a bug with 32-bit highmem systems hwmon: (peci/cputemp) Fix off-by-one in coretemp_label allocation hwmon: (nct6775) Fix incorrect parenthesization in nct6775_write_fan_div() ARM: dts: qcom: sdx65: Add Qcom SMMU-500 as the fallback for IOMMU node ARM: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node ARM: dts: exynos: correct TMU phandle in Exynos4210 ARM: dts: exynos: correct TMU phandle in Exynos4 ARM: dts: exynos: correct TMU phandle in Odroid XU3 family ARM: dts: exynos: correct TMU phandle in Exynos5250 ARM: dts: exynos: correct TMU phandle in Odroid XU ARM: dts: exynos: correct TMU phandle in Odroid HC1 arm64: mm: hugetlb: Disable HUGETLB_PAGE_OPTIMIZE_VMEMMAP fuse: add inode/permission checks to fileattr_get/fileattr_set rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails ceph: update the time stamps and try to drop the suid/sgid regulator: core: Use ktime_get_boottime() to determine how long a regulator was off panic: fix the panic_print NMI backtrace setting mm/hwpoison: convert TTU_IGNORE_HWPOISON to TTU_HWPOISON alpha: fix FEN fault handling dax/kmem: Fix leak of memory-hotplug resources mips: fix syscall_get_nr media: ipu3-cio2: Fix PM runtime usage_count in driver unbind remoteproc/mtk_scp: Move clk ops outside send_lock docs: gdbmacros: print newest record mm: memcontrol: deprecate charge moving mm/thp: check and bail out if page in deferred queue already ktest.pl: Give back console on Ctrt^C on monitor kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list ktest.pl: Fix missing "end_monitor" when machine check fails ktest.pl: Add RUN_TIMEOUT option with default unlimited memory tier: release the new_memtier in find_create_memory_tier() ring-buffer: Handle race between rb_move_tail and rb_check_pages tools/bootconfig: fix single & used for logical condition tracing/eprobe: Fix to add filter on eprobe description in README file iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter iommu/amd: Improve page fault error reporting scsi: aacraid: Allocate cmd_priv with scsicmd scsi: qla2xxx: Fix link failure in NPIV environment scsi: qla2xxx: Check if port is online before sending ELS scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests scsi: qla2xxx: Remove unintended flag clearing scsi: qla2xxx: Fix erroneous link down scsi: qla2xxx: Remove increment of interface err cnt scsi: ses: Don't attach if enclosure has no components scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses scsi: ses: Fix possible desc_ptr out-of-bounds accesses scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() RISC-V: add a spin_shadow_stack declaration riscv: Avoid enabling interrupts in die() riscv: mm: fix regression due to update_mmu_cache change riscv: jump_label: Fixup unaligned arch_static_branch function riscv, mm: Perform BPF exhandler fixup on page fault riscv: ftrace: Remove wasted nops for !RISCV_ISA_C riscv: ftrace: Reduce the detour code size to half MIPS: DTS: CI20: fix otg power gpio PCI/PM: Observe reset delay irrespective of bridge_d3 PCI: Unify delay handling for reset and resume PCI: hotplug: Allow marking devices as disconnected during bind/unbind PCI: Avoid FLR for AMD FCH AHCI adapters PCI/DPC: Await readiness of secondary bus after reset bus: mhi: ep: Only send -ENOTCONN status if client driver is available bus: mhi: ep: Move chan->lock to the start of processing queued ch ring bus: mhi: ep: Save channel state locally during suspend and resume iommu/vt-d: Avoid superfluous IOTLB tracking in lazy mode iommu/vt-d: Fix PASID directory pointer coherency vfio/type1: exclude mdevs from VFIO_UPDATE_VADDR vfio/type1: prevent underflow of locked_vm via exec() vfio/type1: track locked_vm per dma vfio/type1: restore locked_vm drm/amd: Fix initialization for nbio 7.5.1 drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv drm/radeon: Fix eDP for single-display iMac11,2 drm/i915: Don't use stolen memory for ring buffers with LLC drm/i915: Don't use BAR mappings for ring buffers with LLC drm/gud: Fix UBSAN warning drm/edid: fix AVI infoframe aspect ratio handling drm/edid: fix parsing of 3D modes from HDMI VSDB qede: avoid uninitialized entries in coal_entry array brd: use radix_tree_maybe_preload instead of radix_tree_preload sbitmap: Advance the queue index before waking up a queue wait: Return number of exclusive waiters awaken sbitmap: Try each queue to wake up at least one waiter kbuild: Port silent mode detection to future gnu make. net: avoid double iput when sock_alloc_file fails Linux 6.1.16 Change-Id: I705caf70ee547e6d55f38d133bdcd50713aed745 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-03-13 15:45:34 +00:00
Tong Tiangen	313b18c774	memory tier: release the new_memtier in find_create_memory_tier() ... commit 93419139fa14124c1c507d804f2b28866ebee28d upstream. In find_create_memory_tier(), if failed to register device, then we should release new_memtier from the tier list and put device instead of memtier. Link: https://lkml.kernel.org/r/20230129040651.1329208-1-tongtiangen@huawei.com Fixes: 9832fb8783 ("mm/demotion: expose memory tier details via sysfs") Signed-off-by: Tong Tiangen <tongtiangen@huawei.com> Cc: Aneesh Kumar K.V <aneesh.kumar@linux.ibm.com> Cc: Hanjun Guo <guohanjun@huawei.com> Cc: Kefeng Wang <wangkefeng.wang@huawei.com> Cc: Guohanjun <guohanjun@huawei.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-03-10 09:34:27 +01:00
Yin Fengwei	71946389a7	mm/thp: check and bail out if page in deferred queue already ... commit 81e506bec9be1eceaf5a2c654e28ba5176ef48d8 upstream. Kernel build regression with LLVM was reported here: https://lore.kernel.org/all/Y1GCYXGtEVZbcv%2F5@dev-arch.thelio-3990X/ with commit f35b5d7d67 ("mm: align larger anonymous mappings on THP boundaries"). And the commit f35b5d7d67 was reverted. It turned out the regression is related with madvise(MADV_DONTNEED) was used by ld.lld. But with none PMD_SIZE aligned parameter len. trace-bpfcc captured: 531607 531732 ld.lld do_madvise.part.0 start: 0x7feca9000000, len: 0x7fb000, behavior: 0x4 531607 531793 ld.lld do_madvise.part.0 start: 0x7fec86a00000, len: 0x7fb000, behavior: 0x4 If the underneath physical page is THP, the madvise(MADV_DONTNEED) can trigger split_queue_lock contention raised significantly. perf showed following data: 14.85% 0.00% ld.lld [kernel.kallsyms] [k] entry_SYSCALL_64_after_hwframe 11.52% entry_SYSCALL_64_after_hwframe do_syscall_64 __x64_sys_madvise do_madvise.part.0 zap_page_range unmap_single_vma unmap_page_range page_remove_rmap deferred_split_huge_page __lock_text_start native_queued_spin_lock_slowpath If THP can't be removed from rmap as whole THP, partial THP will be removed from rmap by removing sub-pages from rmap. Even the THP head page is added to deferred queue already, the split_queue_lock will be acquired and check whether the THP head page is in the queue already. Thus, the contention of split_queue_lock is raised. Before acquire split_queue_lock, check and bail out early if the THP head page is in the queue already. The checking without holding split_queue_lock could race with deferred_split_scan, but it doesn't impact the correctness here. Test result of building kernel with ld.lld: commit 7b5a0b664e (parent commit of f35b5d7d67): time -f "\t%E real,\t%U user,\t%S sys" make LD=ld.lld -skj96 allmodconfig all 6:07.99 real, 26367.77 user, 5063.35 sys commit f35b5d7d67: time -f "\t%E real,\t%U user,\t%S sys" make LD=ld.lld -skj96 allmodconfig all 7:22.15 real, 26235.03 user, 12504.55 sys commit f35b5d7d67 with the fixing patch: time -f "\t%E real,\t%U user,\t%S sys" make LD=ld.lld -skj96 allmodconfig all 6:08.49 real, 26520.15 user, 5047.91 sys Link: https://lkml.kernel.org/r/20221223135207.2275317-1-fengwei.yin@intel.com Signed-off-by: Yin Fengwei <fengwei.yin@intel.com> Tested-by: Nathan Chancellor <nathan@kernel.org> Acked-by: David Rientjes <rientjes@google.com> Reviewed-by: "Huang, Ying" <ying.huang@intel.com> Cc: Feng Tang <feng.tang@intel.com> Cc: Matthew Wilcox <willy@infradead.org> Cc: Rik van Riel <riel@surriel.com> Cc: Xing Zhengjun <zhengjun.xing@linux.intel.com> Cc: Yang Shi <shy828301@gmail.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-03-10 09:34:26 +01:00
Johannes Weiner	f65d6ee1d1	mm: memcontrol: deprecate charge moving ... commit da34a8484d162585e22ed8c1e4114aa2f60e3567 upstream. Charge moving mode in cgroup1 allows memory to follow tasks as they migrate between cgroups. This is, and always has been, a questionable thing to do - for several reasons. First, it's expensive. Pages need to be identified, locked and isolated from various MM operations, and reassigned, one by one. Second, it's unreliable. Once pages are charged to a cgroup, there isn't always a clear owner task anymore. Cache isn't moved at all, for example. Mapped memory is moved - but if trylocking or isolating a page fails, it's arbitrarily left behind. Frequent moving between domains may leave a task's memory scattered all over the place. Third, it isn't really needed. Launcher tasks can kick off workload tasks directly in their target cgroup. Using dedicated per-workload groups allows fine-grained policy adjustments - no need to move tasks and their physical pages between control domains. The feature was never forward-ported to cgroup2, and it hasn't been missed. Despite it being a niche usecase, the maintenance overhead of supporting it is enormous. Because pages are moved while they are live and subject to various MM operations, the synchronization rules are complicated. There are lock_page_memcg() in MM and FS code, which non-cgroup people don't understand. In some cases we've been able to shift code and cgroup API calls around such that we can rely on native locking as much as possible. But that's fragile, and sometimes we need to hold MM locks for longer than we otherwise would (pte lock e.g.). Mark the feature deprecated. Hopefully we can remove it soon. And backport into -stable kernels so that people who develop against earlier kernels are warned about this deprecation as early as possible. [akpm@linux-foundation.org: fix memory.rst underlining] Link: https://lkml.kernel.org/r/Y5COd+qXwk/S+n8N@cmpxchg.org Signed-off-by: Johannes Weiner <hannes@cmpxchg.org> Acked-by: Shakeel Butt <shakeelb@google.com> Acked-by: Hugh Dickins <hughd@google.com> Acked-by: Michal Hocko <mhocko@suse.com> Cc: Muchun Song <songmuchun@bytedance.com> Cc: Roman Gushchin <roman.gushchin@linux.dev> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-03-10 09:34:26 +01:00
Naoya Horiguchi	deab8114fb	mm/hwpoison: convert TTU_IGNORE_HWPOISON to TTU_HWPOISON ... commit 6da6b1d4a7df8c35770186b53ef65d388398e139 upstream. After a memory error happens on a clean folio, a process unexpectedly receives SIGBUS when it accesses the error page. This SIGBUS killing is pointless and simply degrades the level of RAS of the system, because the clean folio can be dropped without any data lost on memory error handling as we do for a clean pagecache. When memory_failure() is called on a clean folio, try_to_unmap() is called twice (one from split_huge_page() and one from hwpoison_user_mappings()). The root cause of the issue is that pte conversion to hwpoisoned entry is now done in the first call of try_to_unmap() because PageHWPoison is already set at this point, while it's actually expected to be done in the second call. This behavior disturbs the error handling operation like removing pagecache, which results in the malfunction described above. So convert TTU_IGNORE_HWPOISON into TTU_HWPOISON and set TTU_HWPOISON only when we really intend to convert pte to hwpoison entry. This can prevent other callers of try_to_unmap() from accidentally converting to hwpoison entries. Link: https://lkml.kernel.org/r/20230221085905.1465385-1-naoya.horiguchi@linux.dev Fixes: a42634a6c0 ("readahead: Use a folio in read_pages()") Signed-off-by: Naoya Horiguchi <naoya.horiguchi@nec.com> Cc: David Hildenbrand <david@redhat.com> Cc: Hugh Dickins <hughd@google.com> Cc: Matthew Wilcox <willy@infradead.org> Cc: Miaohe Lin <linmiaohe@huawei.com> Cc: Minchan Kim <minchan@kernel.org> Cc: Vlastimil Babka <vbabka@suse.cz> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-03-10 09:34:25 +01:00
andrew.yang	daa5a586e4	mm/damon/paddr: fix missing folio_put() ... commit 3f98c9a62c338bbe06a215c9491e6166ea39bf82 upstream. damon_get_folio() would always increase folio _refcount and folio_isolate_lru() would increase folio _refcount if the folio's lru flag is set. If an unevictable folio isolated successfully, there will be two more _refcount. The one from folio_isolate_lru() will be decreased in folio_puback_lru(), but the other one from damon_get_folio() will be left behind. This causes a pin page. Whatever the case, the _refcount from damon_get_folio() should be decreased. Link: https://lkml.kernel.org/r/20230222064223.6735-1-andrew.yang@mediatek.com Fixes: 57223ac295 ("mm/damon/paddr: support the pageout scheme") Signed-off-by: andrew.yang <andrew.yang@mediatek.com> Reviewed-by: SeongJae Park <sj@kernel.org> Cc: <stable@vger.kernel.org> [5.16.x] Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: SeongJae Park <sj@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-03-10 09:34:20 +01:00
Neill Kapron	bd772a54d2	Revert "exit: Remove profile_task_exit & profile_munmap" ... This reverts commit 2d4bcf886e, which removed hooks required for Android uid_sys_stats.c. Bug: 219790626 Change-Id: Icea00bbf9abe2fb17312b25f2d575d29aa360999 [nkapron: resolve conflict with 2873cd31a2 exit: Remove profile_handoff_task] Signed-off-by: Neill Kapron <nkapron@google.com>	2023-03-09 23:13:08 +00:00
Alistair Delva	1c6dc00657	ANDROID: GKI: Export memblock_free to drivers ... On architectures that support the preservation of memblock metadata after __init, allow drivers to call memblock_free() to free a reservation made by early arch code. This is a hack to support the freeing of bootsplash reservations passed to Linux by the bootloader. (This should be reworked in future versions of Android; do not cherry-pick this patch forward.) Bug: 139653858 Bug: 174620135 Bug: 249340121 Change-Id: I32c0ee70c33c94deff70aa548896caa9978396fb Signed-off-by: Alistair Delva <adelva@google.com> (cherry picked from commit 2eeee9f41c0cddbc300d9b89bba6d498998b2498)	2023-03-01 21:29:20 +00:00
Charan Teja Reddy	73017e11a4	ANDROID: mm: add reclaim_shmem_address_space() for faster reclaims ... Add the functionality that allow users of shmem to reclaim its pages without going through the kswapd/direct reclaim path. An example usecase is: Say that device allocates a larger amount of shmem pages and shares it with hardware. To faster reclaims such pages, drivers can register the shrinkers and call reclaim_shmem_address_space(). This commit is a squash of changes that contains all the fixes in the reclaim_shmem_address_space() API. Bug: 201263305 Change-Id: I03d2c3b9610612af977f89ddeabb63b8e9e50918 Signed-off-by: Charan Teja Reddy <charante@codeaurora.org> Signed-off-by: Charan Teja Kalla <quic_charante@quicinc.com>	2023-02-23 22:51:35 +00:00
Kalesh Singh	cdded86118	ANDROID: MGLRU: Don't skip anon reclaim if swap low ... MGLRU tries to avoid doing unnecessary anon reclaim work if swap is low by checking if the available swap is less than the MIN_BATCH_SIZE (256kB). This can lead to unintened consequences where PSI pressure is less and LMKD doesn't wake up in time to avoid file cache thrashing. Remove this check to preserve the old bahavior. This can be improved later on once we have a low swap notification event from the kernel. Bug: 268574308 Change-Id: Id381316931a9cf6e7ea8b1ea7800c77f176c9892 Signed-off-by: Kalesh Singh <kaleshsingh@google.com>	2023-02-22 17:17:07 +00:00
Greg Kroah-Hartman	dafc2fae4d	This is the 6.1.13 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmP2A8MACgkQONu9yGCS aT7GrhAAky2nTRG9J0oPxh5Eu7wNKmjqDWNj9c6it3iGHpb+tfOY+LfPXHmWz0kX NoaNYGZGD8SDbkmwrSOmFB1Q/0OZ4/aIwM7Kwcw72UJVvrlsKx1HwiJjXKk809ZL bVlLUQzFTwyVIYcvjXQ8CuBHwBinLc3qkcyYGgbS8bseR4pDuxwoToDwAxk1d/0j ozWuzUKhSdYHYIUrk3papUro2UpF+Kb7KFpNiVo2wMaZM7en2XK3khCt8TuojH6c DXL+KZ/HbB8Ig1PWLaw2/6o4ispNy6bz7CJx6oDiOILR+le8xZA5WTdkXT3ovjyr LxutmPTTw6PxextIyVRblJWzXNcjdlV552U4gnnngcWn6wg4D4otqYnYvTaAUc+u sQnwrlQFxB2KfFKLNepGAy7klQJsYP3eadjDgGXP9TSmuUvUYRaNr6h0XukbyYkc kx2+Tw51NMKEqhgnaiKDN8AZEDTuLu5F4+NrUertxlb3PWeRRMRYVGJ1uw0KJg6t d5eniCB00SaaqN6M68u/hRYRi3gnwIsU7DitEpqejqwzskMpgegMFvebmCwORiq3 D+FD4EHOlztIToXhmEOXp0cz8fs27MuWmq4GkSwXvJuq+id5cQFdDN5GeLgNdAvH Kiu/Y+DY6ObW31tAQ1Jjp20L2RaWWvubrCBGeIqiDzUWmCohsks= =TXvc -----END PGP SIGNATURE----- Merge 6.1.13 into android14-6.1 Changes in 6.1.13 mptcp: sockopt: make 'tcp_fastopen_connect' generic mptcp: fix locking for setsockopt corner-case mptcp: deduplicate error paths on endpoint creation mptcp: fix locking for in-kernel listener creation btrfs: move the auto defrag code to defrag.c btrfs: lock the inode in shared mode before starting fiemap ASoC: amd: yc: Add DMI support for new acer/emdoor platforms ASoC: SOF: sof-audio: start with the right widget type ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum610 Wireless ASoC: Intel: sof_rt5682: always set dpcm_capture for amplifiers ASoC: Intel: sof_cs42l42: always set dpcm_capture for amplifiers ASoC: Intel: sof_nau8825: always set dpcm_capture for amplifiers ASoC: Intel: sof_ssp_amp: always set dpcm_capture for amplifiers selftests/bpf: Verify copy_register_state() preserves parent/live fields ALSA: hda: Do not unset preset when cleaning up codec ASoC: amd: yc: Add Xiaomi Redmi Book Pro 15 2022 into DMI table bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself ASoC: cs42l56: fix DT probe tools/virtio: fix the vringh test for virtio ring changes vdpa: ifcvf: Do proper cleanup if IFCVF init fails net/rose: Fix to not accept on connected socket selftest: net: Improve IPV6_TCLASS/IPV6_HOPLIMIT tests apparmor compatibility net: stmmac: do not stop RX_CLK in Rx LPI state for qcs404 SoC powerpc/64: Fix perf profiling asynchronous interrupt handlers fscache: Use clear_and_wake_up_bit() in fscache_create_volume_work() drm/nouveau/devinit/tu102-: wait for GFW_BOOT_PROGRESS == COMPLETED net: ethernet: mtk_eth_soc: Avoid truncating allocation net: sched: sch: Bounds check priority s390/decompressor: specify __decompress() buf len to avoid overflow nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association nvme: clear the request_queue pointers on failure in nvme_alloc_admin_tag_set nvme: clear the request_queue pointers on failure in nvme_alloc_io_tag_set drm/amd/display: Add missing brackets in calculation drm/amd/display: Adjust downscaling limits for dcn314 drm/amd/display: Unassign does_plane_fit_in_mall function from dcn3.2 drm/amd/display: Reset DMUB mailbox SW state after HW reset drm/amdgpu: enable HDP SD for gfx 11.0.3 drm/amdgpu: Enable vclk dclk node for gc11.0.3 drm/amd/display: Properly handle additional cases where DCN is not supported platform/x86: touchscreen_dmi: Add Chuwi Vi8 (CWI501) DMI match ceph: move mount state enum to super.h ceph: blocklist the kclient when receiving corrupted snap trace selftests: mptcp: userspace: fix v4-v6 test in v6.1 of: reserved_mem: Have kmemleak ignore dynamically allocated reserved mem kasan: fix Oops due to missing calls to kasan_arch_is_ready() mm: shrinkers: fix deadlock in shrinker debugfs aio: fix mremap after fork null-deref vmxnet3: move rss code block under eop descriptor fbdev: Fix invalid page access after closing deferred I/O devices drm: Disable dynamic debug as broken drm/amd/amdgpu: fix warning during suspend drm/amd/display: Fail atomic_check early on normalize_zpos error drm/vmwgfx: Stop accessing buffer objects which failed init drm/vmwgfx: Do not drop the reference to the handle too soon mmc: jz4740: Work around bug on JZ4760(B) mmc: meson-gx: fix SDIO mode if cap_sdio_irq isn't set mmc: sdio: fix possible resource leaks in some error paths mmc: mmc_spi: fix error handling in mmc_spi_probe() ALSA: hda: Fix codec device field initializan ALSA: hda/conexant: add a new hda codec SN6180 ALSA: hda/realtek - fixed wrong gpio assigned ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP platform. ALSA: hda/realtek: Enable mute/micmute LEDs and speaker support for HP Laptops ata: ahci: Add Tiger Lake UP{3,4} AHCI controller ata: libata-core: Disable READ LOG DMA EXT for Samsung MZ7LH sched/psi: Fix use-after-free in ep_remove_wait_queue() hugetlb: check for undefined shift on 32 bit architectures nilfs2: fix underflow in second superblock position calculations mm/MADV_COLLAPSE: set EAGAIN on unexpected page refcount mm/filemap: fix page end in filemap_get_read_batch mm/migrate: fix wrongly apply write bit after mkdirty on sparc64 gpio: sim: fix a memory leak freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL coredump: Move dump_emit_page() to kill unused warning Revert "mm: Always release pages to the buddy allocator in memblock_free_late()." net: Fix unwanted sign extension in netdev_stats_to_stats64() revert "squashfs: harden sanity check in squashfs_read_xattr_id_table" drm/vc4: crtc: Increase setup cost in core clock calculation to handle extreme reduced blanking drm/vc4: Fix YUV plane handling when planes are in different buffers drm/i915/gen11: Wa_1408615072/Wa_1407596294 should be on GT list ice: fix lost multicast packets in promisc mode ixgbe: allow to increase MTU to 3K with XDP enabled i40e: add double of VLAN header when computing the max MTU net: bgmac: fix BCM5358 support by setting correct flags net: ethernet: ti: am65-cpsw: Add RX DMA Channel Teardown Quirk sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list net/sched: tcindex: update imperfect hash filters respecting rcu ice: xsk: Fix cleaning of XDP_TX frames dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions. net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path net/sched: act_ctinfo: use percpu stats net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() net: stmmac: fix order of dwmac5 FlexPPS parametrization sequence bnxt_en: Fix mqprio and XDP ring checking logic tracing: Make trace_define_field_ext() static net: stmmac: Restrict warning on disabling DMA store and fwd mode net: use a bounce buffer for copying skb->mark tipc: fix kernel warning when sending SYN message net: mpls: fix stale pointer if allocation fails during device rename igb: conditionalize I2C bit banging on external thermal sensor support igb: Fix PPS input and output using 3rd and 4th SDP ixgbe: add double of VLAN header when computing the max MTU ipv6: Fix datagram socket connection with DSCP. ipv6: Fix tcp socket connection with DSCP. mm/gup: add folio to list when folio_isolate_lru() succeed mm: extend max struct page size for kmsan i40e: Add checking for null for nlmsg_find_attr() net/sched: tcindex: search key must be 16 bits nvme-tcp: stop auth work after tearing down queues in error recovery nvme-rdma: stop auth work after tearing down queues in error recovery KVM: x86/pmu: Disable vPMU support on hybrid CPUs (host PMUs) kvm: initialize all of the kvm_debugregs structure before sending it to userspace perf/x86: Refuse to export capabilities for hybrid PMUs alarmtimer: Prevent starvation by small intervals and SIG_IGN nvme-pci: refresh visible attrs for cmb attributes ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak net: sched: sch: Fix off by one in htb_activate_prios() Linux 6.1.13 Change-Id: I8a1e4175939c14f726c545001061b95462566386 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-02-22 12:32:41 +00:00
Kuan-Ying Lee	eaba8521fd	mm/gup: add folio to list when folio_isolate_lru() succeed ... commit aa1e6a932ca652a50a5df458399724a80459f521 upstream. If we call folio_isolate_lru() successfully, we will get return value 0. We need to add this folio to the movable_pages_list. Link: https://lkml.kernel.org/r/20230131063206.28820-1-Kuan-Ying.Lee@mediatek.com Fixes: 67e139b02d ("mm/gup.c: refactor check_and_migrate_movable_pages()") Signed-off-by: Kuan-Ying Lee <Kuan-Ying.Lee@mediatek.com> Reviewed-by: Alistair Popple <apopple@nvidia.com> Acked-by: David Hildenbrand <david@redhat.com> Reviewed-by: Baolin Wang <baolin.wang@linux.alibaba.com> Cc: Andrew Yang <andrew.yang@mediatek.com> Cc: Chinwen Chang <chinwen.chang@mediatek.com> Cc: John Hubbard <jhubbard@nvidia.com> Cc: Matthias Brugger <matthias.bgg@gmail.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-22 12:59:54 +01:00
Aaron Thompson	2578123d5b	Revert "mm: Always release pages to the buddy allocator in memblock_free_late()." ... commit 647037adcad00f2bab8828d3d41cd0553d41f3bd upstream. This reverts commit 115d9d77bb0f9152c60b6e8646369fa7f6167593. The pages being freed by memblock_free_late() have already been initialized, but if they are in the deferred init range, __free_one_page() might access nearby uninitialized pages when trying to coalesce buddies. This can, for example, trigger this BUG: BUG: unable to handle page fault for address: ffffe964c02580c8 RIP: 0010:__list_del_entry_valid+0x3f/0x70 <TASK> __free_one_page+0x139/0x410 __free_pages_ok+0x21d/0x450 memblock_free_late+0x8c/0xb9 efi_free_boot_services+0x16b/0x25c efi_enter_virtual_mode+0x403/0x446 start_kernel+0x678/0x714 secondary_startup_64_no_verify+0xd2/0xdb </TASK> A proper fix will be more involved so revert this change for the time being. Fixes: 115d9d77bb0f ("mm: Always release pages to the buddy allocator in memblock_free_late().") Signed-off-by: Aaron Thompson <dev@aaront.org> Link: https://lore.kernel.org/r/20230207082151.1303-1-dev@aaront.org Signed-off-by: Mike Rapoport (IBM) <rppt@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-22 12:59:50 +01:00
Peter Xu	54806cb751	mm/migrate: fix wrongly apply write bit after mkdirty on sparc64 ... commit 96a9c287e25d690fd9623b5133703b8e310fbed1 upstream. Nick Bowler reported another sparc64 breakage after the young/dirty persistent work for page migration (per "Link:" below). That's after a similar report [2]. It turns out page migration was overlooked, and it wasn't failing before because page migration was not enabled in the initial report test environment. David proposed another way [2] to fix this from sparc64 side, but that patch didn't land somehow. Neither did I check whether there's any other arch that has similar issues. Let's fix it for now as simple as moving the write bit handling to be after dirty, like what we did before. Note: this is based on mm-unstable, because the breakage was since 6.1 and we're at a very late stage of 6.2 (-rc8), so I assume for this specific case we should target this at 6.3. [1] https://lore.kernel.org/all/20221021160603.GA23307@u164.east.ru/ [2] https://lore.kernel.org/all/20221212130213.136267-1-david@redhat.com/ Link: https://lkml.kernel.org/r/20230216153059.256739-1-peterx@redhat.com Fixes: 2e3468778d ("mm: remember young/dirty bit for page migrations") Link: https://lore.kernel.org/all/CADyTPExpEqaJiMGoV+Z6xVgL50ZoMJg49B10LcZ=8eg19u34BA@mail.gmail.com/ Signed-off-by: Peter Xu <peterx@redhat.com> Reported-by: Nick Bowler <nbowler@draconx.ca> Acked-by: David Hildenbrand <david@redhat.com> Tested-by: Nick Bowler <nbowler@draconx.ca> Cc: <regressions@lists.linux.dev> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-22 12:59:49 +01:00
Qian Yingjin	d4d9bdc694	mm/filemap: fix page end in filemap_get_read_batch ... commit 5956592ce337330cdff0399a6f8b6a5aea397a8e upstream. I was running traces of the read code against an RAID storage system to understand why read requests were being misaligned against the underlying RAID strips. I found that the page end offset calculation in filemap_get_read_batch() was off by one. When a read is submitted with end offset 1048575, then it calculates the end page for read of 256 when it should be 255. "last_index" is the index of the page beyond the end of the read and it should be skipped when get a batch of pages for read in @filemap_get_read_batch(). The below simple patch fixes the problem. This code was introduced in kernel 5.12. Link: https://lkml.kernel.org/r/20230208022400.28962-1-coolqyj@163.com Fixes: cbd59c48ae ("mm/filemap: use head pages in generic_file_buffered_read") Signed-off-by: Qian Yingjin <qian@ddn.com> Reviewed-by: Matthew Wilcox (Oracle) <willy@infradead.org> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-22 12:59:49 +01:00
Zach O'Keefe	fd71c8d3b0	mm/MADV_COLLAPSE: set EAGAIN on unexpected page refcount ... commit ae63c898f4004bbc7d212f4adcb3bb14852c30d6 upstream. During collapse, in a few places we check to see if a given small page has any unaccounted references. If the refcount on the page doesn't match our expectations, it must be there is an unknown user concurrently interested in the page, and so it's not safe to move the contents elsewhere. However, the unaccounted pins are likely an ephemeral state. In this situation, MADV_COLLAPSE returns -EINVAL when it should return -EAGAIN. This could cause userspace to conclude that the syscall failed, when it in fact could succeed by retrying. Link: https://lkml.kernel.org/r/20230125015738.912924-1-zokeefe@google.com Fixes: 7d8faaf155 ("mm/madvise: introduce MADV_COLLAPSE sync hugepage collapse") Signed-off-by: Zach O'Keefe <zokeefe@google.com> Reported-by: Hugh Dickins <hughd@google.com> Acked-by: Hugh Dickins <hughd@google.com> Reviewed-by: Yang Shi <shy828301@gmail.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-22 12:59:49 +01:00
Qi Zheng	86e3baf6a6	mm: shrinkers: fix deadlock in shrinker debugfs ... commit badc28d4924bfed73efc93f716a0c3aa3afbdf6f upstream. The debugfs_remove_recursive() is invoked by unregister_shrinker(), which is holding the write lock of shrinker_rwsem. It will waits for the handler of debugfs file complete. The handler also needs to hold the read lock of shrinker_rwsem to do something. So it may cause the following deadlock: CPU0 CPU1 debugfs_file_get() shrinker_debugfs_count_show()/shrinker_debugfs_scan_write() unregister_shrinker() --> down_write(&shrinker_rwsem); debugfs_remove_recursive() // wait for (A) --> wait_for_completion(); // wait for (B) --> down_read_killable(&shrinker_rwsem) debugfs_file_put() -- (A) up_write() -- (B) The down_read_killable() can be killed, so that the above deadlock can be recovered. But it still requires an extra kill action, otherwise it will block all subsequent shrinker-related operations, so it's better to fix it. [akpm@linux-foundation.org: fix CONFIG_SHRINKER_DEBUG=n stub] Link: https://lkml.kernel.org/r/20230202105612.64641-1-zhengqi.arch@bytedance.com Fixes: 5035ebc644 ("mm: shrinkers: introduce debugfs interface for memory shrinkers") Signed-off-by: Qi Zheng <zhengqi.arch@bytedance.com> Reviewed-by: Roman Gushchin <roman.gushchin@linux.dev> Cc: Kent Overstreet <kent.overstreet@gmail.com> Cc: Muchun Song <songmuchun@bytedance.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-22 12:59:46 +01:00
Christophe Leroy	b184caaf62	kasan: fix Oops due to missing calls to kasan_arch_is_ready() ... commit 55d77bae73426237b3c74c1757a894b056550dff upstream. On powerpc64, you can build a kernel with KASAN as soon as you build it with RADIX MMU support. However if the CPU doesn't have RADIX MMU, KASAN isn't enabled at init and the following Oops is encountered. [ 0.000000][ T0] KASAN not enabled as it requires radix! [ 4.484295][ T26] BUG: Unable to handle kernel data access at 0xc00e000000804a04 [ 4.485270][ T26] Faulting instruction address: 0xc00000000062ec6c [ 4.485748][ T26] Oops: Kernel access of bad area, sig: 11 [#1] [ 4.485920][ T26] BE PAGE_SIZE=64K MMU=Hash SMP NR_CPUS=2048 NUMA pSeries [ 4.486259][ T26] Modules linked in: [ 4.486637][ T26] CPU: 0 PID: 26 Comm: kworker/u2:2 Not tainted 6.2.0-rc3-02590-gf8a023b0a805 #249 [ 4.486907][ T26] Hardware name: IBM pSeries (emulated by qemu) POWER9 (raw) 0x4e1200 0xf000005 of:SLOF,HEAD pSeries [ 4.487445][ T26] Workqueue: eval_map_wq .tracer_init_tracefs_work_func [ 4.488744][ T26] NIP: c00000000062ec6c LR: c00000000062bb84 CTR: c0000000002ebcd0 [ 4.488867][ T26] REGS: c0000000049175c0 TRAP: 0380 Not tainted (6.2.0-rc3-02590-gf8a023b0a805) [ 4.489028][ T26] MSR: 8000000002009032 <SF,VEC,EE,ME,IR,DR,RI> CR: 44002808 XER: 00000000 [ 4.489584][ T26] CFAR: c00000000062bb80 IRQMASK: 0 [ 4.489584][ T26] GPR00: c0000000005624d4 c000000004917860 c000000001cfc000 1800000000804a04 [ 4.489584][ T26] GPR04: c0000000003a2650 0000000000000cc0 c00000000000d3d8 c00000000000d3d8 [ 4.489584][ T26] GPR08: c0000000049175b0 a80e000000000000 0000000000000000 0000000017d78400 [ 4.489584][ T26] GPR12: 0000000044002204 c000000003790000 c00000000435003c c0000000043f1c40 [ 4.489584][ T26] GPR16: c0000000043f1c68 c0000000043501a0 c000000002106138 c0000000043f1c08 [ 4.489584][ T26] GPR20: c0000000043f1c10 c0000000043f1c20 c000000004146c40 c000000002fdb7f8 [ 4.489584][ T26] GPR24: c000000002fdb834 c000000003685e00 c000000004025030 c000000003522e90 [ 4.489584][ T26] GPR28: 0000000000000cc0 c0000000003a2650 c000000004025020 c000000004025020 [ 4.491201][ T26] NIP [c00000000062ec6c] .kasan_byte_accessible+0xc/0x20 [ 4.491430][ T26] LR [c00000000062bb84] .__kasan_check_byte+0x24/0x90 [ 4.491767][ T26] Call Trace: [ 4.491941][ T26] [c000000004917860] [c00000000062ae70] .__kasan_kmalloc+0xc0/0x110 (unreliable) [ 4.492270][ T26] [c0000000049178f0] [c0000000005624d4] .krealloc+0x54/0x1c0 [ 4.492453][ T26] [c000000004917990] [c0000000003a2650] .create_trace_option_files+0x280/0x530 [ 4.492613][ T26] [c000000004917a90] [c000000002050d90] .tracer_init_tracefs_work_func+0x274/0x2c0 [ 4.492771][ T26] [c000000004917b40] [c0000000001f9948] .process_one_work+0x578/0x9f0 [ 4.492927][ T26] [c000000004917c30] [c0000000001f9ebc] .worker_thread+0xfc/0x950 [ 4.493084][ T26] [c000000004917d60] [c00000000020be84] .kthread+0x1a4/0x1b0 [ 4.493232][ T26] [c000000004917e10] [c00000000000d3d8] .ret_from_kernel_thread+0x58/0x60 [ 4.495642][ T26] Code: 60000000 7cc802a6 38a00000 4bfffc78 60000000 7cc802a6 38a00001 4bfffc68 60000000 3d20a80e 7863e8c2 792907c6 <7c6348ae> 20630007 78630fe0 68630001 [ 4.496704][ T26] ---[ end trace 0000000000000000 ]--- The Oops is due to kasan_byte_accessible() not checking the readiness of KASAN. Add missing call to kasan_arch_is_ready() and bail out when not ready. The same problem is observed with ____kasan_kfree_large() so fix it the same. Also, as KASAN is not available and no shadow area is allocated for linear memory mapping, there is no point in allocating shadow mem for vmalloc memory as shown below in /sys/kernel/debug/kernel_page_tables ---[ kasan shadow mem start ]--- 0xc00f000000000000-0xc00f00000006ffff 0x00000000040f0000 448K r w pte valid present dirty accessed 0xc00f000000860000-0xc00f00000086ffff 0x000000000ac10000 64K r w pte valid present dirty accessed 0xc00f3ffffffe0000-0xc00f3fffffffffff 0x0000000004d10000 128K r w pte valid present dirty accessed ---[ kasan shadow mem end ]--- So, also verify KASAN readiness before allocating and poisoning shadow mem for VMAs. Link: https://lkml.kernel.org/r/150768c55722311699fdcf8f5379e8256749f47d.1674716617.git.christophe.leroy@csgroup.eu Fixes: 41b7a347bf ("powerpc: Book3S 64-bit outline-only KASAN support") Signed-off-by: Christophe Leroy <christophe.leroy@csgroup.eu> Reported-by: Nathan Lynch <nathanl@linux.ibm.com> Suggested-by: Michael Ellerman <mpe@ellerman.id.au> Cc: Alexander Potapenko <glider@google.com> Cc: Andrey Konovalov <andreyknvl@gmail.com> Cc: Andrey Ryabinin <ryabinin.a.a@gmail.com> Cc: Dmitry Vyukov <dvyukov@google.com> Cc: Vincenzo Frascino <vincenzo.frascino@arm.com> Cc: <stable@vger.kernel.org> [5.19+] Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-22 12:59:46 +01:00
jianzhou	3ea04f58a4	Merge keystone/android14-6.1-keystone-qcom-release.6.1.11 (b28061a) into msm-pineapple ... * refs/heads/tmp-b28061a: ANDROID: Enable userspace block driver ANDROID: remoteproc: sysfs: fix race while updating recovery flag ANDROID: sched: add vendor hook to PELT multiplier ANDROID: android14-6.1: Restrict android/ OWNERS to DrNo ANDROID: Enable block device throttling ANDROID: Update symbol list for virtual device. ANDROID: KVM: arm64: Coalesce host stage2 entries on ownership reclaim ANDROID: ABI: Update QCOM symbol list ANDROID: cpuidle-psci: Fix suspicious RCU usage Linux 6.1.11 bpf: Skip invalid kfunc call in backtrack_insn gfs2: Always check inode size of inline inodes gfs2: Cosmetic gfs2_dinode_{in,out} cleanup wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads f2fs: fix to do sanity check on i_extra_isize in is_alive() fbdev: smscufx: fix error handling code in ufx_usb_probe f2fs: initialize locks earlier in f2fs_fill_super() ovl: Use "buf" flexible array for memcpy() destination fs/ntfs3: Validate attribute data and valid sizes powerpc/imc-pmu: Revert nest_init_lock to being a mutex powerpc/64s: Fix local irq disable when PMIs are disabled powerpc/64s/radix: Fix crash with unaligned relocated kernel iio:adc:twl6030: Enable measurement of VAC ASoC: SOF: sof-audio: prepare_widgets: Check swidget for NULL on sink failure platform/x86/amd: pmc: add CONFIG_SERIO dependency serial: 8250_dma: Fix DMA Rx rearm race serial: 8250_dma: Fix DMA Rx completion race phy: qcom-qmp-combo: fix runtime suspend nvmem: core: fix return value nvmem: core: fix cell removal on error nvmem: core: fix device node refcounting nvmem: core: fix registration vs use race nvmem: core: fix cleanup after dev_set_name() nvmem: core: remove nvmem_config wp_gpio nvmem: core: initialise nvmem->id early drm/amdgpu: update wave data type to 3 for gfx11 drm/amd/pm: drop unneeded dpm features disablement for SMU 13.0.4/11 drm/amd: Fix initialization for nbio 4.3.0 drm/i915: Fix potential bit_17 double-free drm/i915: Avoid potential vm use-after-free serial: stm32: Merge hard IRQ and threaded IRQ handling into single IRQ handler dma-buf: actually set signaling bit for private stub fences migrate: hugetlb: check for hugetlb shared PMD in node migration maple_tree: fix mas_empty_area_rev() lower bound validation Squashfs: fix handling and sanity checking of xattr_ids count ia64: fix build error due to switch case label appearing next to declaration highmem: round down the address passed to kunmap_flush_on_unmap() mm/MADV_COLLAPSE: catch !none !huge !bad pmd lookups mm, mremap: fix mremap() expanding for vma's with vm_ops->close() mm/khugepaged: fix ->anon_vma race mm/swapfile: add cond_resched() in get_swap_pages() mm/uffd: fix pte marker when fork() without fork event fpga: stratix10-soc: Fix return value check in s10_ops_write_init() fpga: m10bmc-sec: Fix probe rollback x86/debug: Fix stack recursion caused by wrongly ordered DR7 accesses HV: hv_balloon: fix memory leak with using debugfs_lookup() kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() usb: gadget: udc: do not clear gadget driver.bus usb: typec: ucsi: Don't attempt to resume the ports before they exist usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps mm: multi-gen LRU: fix crash during cgroup migration Revert "mm: kmemleak: alloc gray object for reserved region with direct map" riscv: disable generation of unwind tables parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case parisc: Replace hardcoded value with PRIV_USER constant in ptrace.c parisc: Fix return code of pdc_iodc_print() nvmem: qcom-spmi-sdam: fix module autoloading nvmem: sunxi_sid: Always use 32-bit MMIO reads nvmem: brcm_nvram: Add check for kzalloc iio: imu: fxos8700: fix MAGN sensor scale and unit iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN iio: imu: fxos8700: fix failed initialization ODR mode assignment iio: imu: fxos8700: fix incorrect ODR mode readback iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback iio: imu: fxos8700: fix map label of channel type to MAGN sensor iio: imu: fxos8700: fix IMU data bits returned to user space iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback iio: imu: fxos8700: fix ACCEL measurement range selection iio: light: cm32181: Fix PM support on system with 2 I2C resources iio:adc:twl6030: Enable measurements of VUSB, VBAT and others iio: imx8qxp-adc: fix irq flood when call imx8qxp_adc_read_raw() iio: adc: berlin2-adc: Add missing of_node_put() in error path iio: adc: xilinx-ams: fix devm_krealloc() return value check iio: hid: fix the retval in gyro_3d_capture_sample iio: hid: fix the retval in accel_3d_capture_sample rtc: efi: Enable SET/GET WAKEUP services as optional efi: Accept version 2 of memory attributes table ASoC: SOF: keep prepare/unprepare widgets in sink path ASoC: SOF: sof-audio: skip prepare/unprepare if swidget is NULL ASoC: SOF: sof-audio: unprepare when swidget->use_count > 0 ASoC: codecs: wsa883x: correct playback min/max rates ALSA: hda/realtek: fix mute/micmute LEDs, speaker don't work for a HP platform ALSA: hda/realtek: Add Acer Predator PH315-54 watchdog: diag288_wdt: fix __diag288() inline assembly watchdog: diag288_wdt: do not use stack buffers for hardware data can: isotp: handle wait_event_interruptible() return values can: isotp: split tx timer into transmission and timeout net: qrtr: free memory on error path in radix_tree_insert() ARM: dts: imx7d-smegw01: Fix USB host over-current polarity hv_netvsc: Fix missed pagebuf entries in netvsc_dma_map/unmap() cgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask() fbcon: Check font dimension limits vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait usb: dwc3: qcom: enable vbus override when in OTG dr-mode iio: adc: stm32-dfsdm: fill module aliases bcache: Silence memcpy() run-time false positive warnings drm/amd/display: Fix timing not changning when freesync video is enabled net/x25: Fix to not accept on connected socket platform/x86/amd: pmc: Disable IRQ1 wakeup for RN/CZN platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF platform/x86: hp-wmi: Handle Omen Key event platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table x86/build: Move '-mindirect-branch-cs-prefix' out of GCC-only block Revert "gfs2: stop using generic_writepages in gfs2_ail1_start_one" i2c: rk3x: fix a bunch of kernel-doc warnings scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress perf/x86/intel/cstate: Add Emerald Rapids perf/x86/intel: Add Emerald Rapids x86/aperfmperf: Erase stale arch_freq_scale values when disabling frequency invariance readings scsi: target: core: Fix warning on RT kernels i2c: mxs: suppress probe-deferral error message i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU kbuild: modinst: Fix build error when CONFIG_MODULE_SIG_KEY is a PKCS#11 URI certs: Fix build error when PKCS#11 URI contains semicolon rtc: sunplus: fix format string for printing resource efi: fix potential NULL deref in efi_mem_reserve_persistent net: openvswitch: fix flow memory leak in ovs_flow_cmd_new virtio-net: Keep stop() to follow mirror sequence of open() selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning ata: libata: Fix sata_down_spd_limit() when no link speed is reported can: mcp251xfd: mcp251xfd_ring_set_ringparam(): assign missing tx_obj_num_coalesce_irq can: raw: fix CAN FD frame transmissions over CAN XL devices can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate octeontx2-af: Fix devlink unregister igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() riscv: kprobe: Fixup kernel panic when probing an illegal position ip/ip6_gre: Fix non-point-to-point tunnel not generating IPv6 link local address ip/ip6_gre: Fix changing addr gen mode not generating IPv6 link local address drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during disable net: phy: meson-gxl: Add generic dummy stubs for MMD register access sctp: do not check hb_timer.expires when resetting hb_timer maple_tree: should get pivots boundary by type squashfs: harden sanity check in squashfs_read_xattr_id_table kunit: fix kunit_test_init_section_suites(...) block: ublk: extending queue_size to fix overflow netfilter: br_netfilter: disable sabotage_in hook after first suppression ALSA: firewire-motu: fix unreleased lock warning in hwdep device net/tls: tls_is_tx_ready() checked list_entry drm/i915/adlp: Fix typo for reference clock drm/i915: Fix up locking around dumping requests lists drm/i915: Fix request ref counting during error capture & debugfs dump drm/i915/guc: Fix locking when searching for a hung request platform/x86: thinkpad_acpi: Fix thinklight LED brightness returning 255 platform/x86/amd/pmf: Ensure mutexes are initialized before use platform/x86/amd/pmf: Fix to update SPS thermals when power supply change platform/x86/amd/pmf: Add helper routine to check pprof is balanced platform/x86/amd/pmf: Fix to update SPS default pprof thermals platform/x86/amd/pmf: Add helper routine to update SPS thermals platform/x86/amd/pmf: update to auto-mode limits only after AMT event fscache: Use wait_on_bit() to wait for the freeing of relinquished volume netrom: Fix use-after-free caused by accept on already connected socket block, bfq: fix uaf for bfqq in bic_set_bfqq() block, bfq: replace 0/1 with false/true in bic apis net: wwan: t7xx: Fix Runtime PM initialization net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices sfc: correctly advertise tunneled IPv6 segmentation skb: Do mix page pool and page referenced frags in GRO dpaa2-eth: execute xdp_do_flush() before napi_complete_done() dpaa_eth: execute xdp_do_flush() before napi_complete_done() virtio-net: execute xdp_do_flush() before napi_complete_done() qede: execute xdp_do_flush() before napi_complete_done() ice: Prevent set_channel from changing queues while RDMA active vhost-scsi: unbreak any layout for response use less confusing names for iov_iter direction initializers fix "direction" argument of iov_iter_kvec() fix 'direction' argument of iov_iter_{init,bvec}() fix iov_iter_bvec() "direction" argument memcpy_real(): WRITE is "data source", not destination... zcore: WRITE is "data source", not destination... READ is "data destination", not source... WRITE is "data source", not destination... copy_oldmem_kernel() - WRITE is "data source", not destination vhost/net: Clear the pending messages when the backend is removed ALSA: memalloc: Workaround for Xen PV bpf: Fix the kernel crash caused by bpf_setsockopt(). scsi: Revert "scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT" drm/ssd130x: Init display before the SSD130X_DISPLAY_ON command drm/vc4: hdmi: make CEC adapter name unique arm64: dts: imx8mm-verdin: Do not power down eth-phy arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener media: v4l2-ctrls-api.c: move ctrl->is_new = 1 to the correct line bpf: Add missing btf_put to register_btf_id_dtor_kfuncs ASoC: SOF: ipc4-mtrace: prevent underflow in sof_ipc4_priority_mask_dfs_write() selftests/filesystems: grant executable permission to run_fat_tests.sh bpf: Fix to preserve reg parent/live fields when copying range info ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers bpf: Fix off-by-one error in bpf_mem_cache_idx() ASoC: Intel: avs: Implement PCI shutdown ASoC: Intel: sof_es8336: Drop reference count of ACPI device after use ASoC: Intel: bytcr_wm5102: Drop reference count of ACPI device after use ASoC: Intel: bytcr_rt5640: Drop reference count of ACPI device after use ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use ASoC: Intel: bytcht_es8316: Drop reference count of ACPI device after use ASoC: amd: acp-es8336: Drop reference count of ACPI device after use arm64: dts: freescale: imx8dxl: fix sc_pwrkey's property name linux,keycode arm64: dts: imx8m-venice: Remove incorrect 'uart-has-rtscts' bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region ANDROID: clang: update to 16.0.2 ANDROID: KVM: arm64: Remove 'pending reclaim' page flags ANDROID: KVM: arm64: Refactor the guest teardown path ANDROID: KVM: arm64: Poison pages on the relinquish path ANDROID: ABI: Update QCOM symbol list Revert "ANDROID: KVM: arm64: Coalesce host stage2 entries on ownership reclaim" FROMLIST: maple_tree: fix mas_empty_area_rev() lower bound validation ANDROID: irq: Add vendor data field to struct irq_desc Linux 6.1.10 net: mctp: purge receive queues on sk destruction rust: print: avoid evaluating arguments in `pr_*` macros in `unsafe` blocks net: fix NULL pointer in skb_segment_list gpiolib-acpi: Don't set GPIOs for wakeup in S3 mode gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xRU nvme-apple: only reset the controller when RTKit is running cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() gpiolib: acpi: Allow ignoring wake capability on pins that aren't in _AEI dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init HID: playstation: sanity check DualSense calibration data. HID: uclogic: Add support for XP-PEN Deco 01 V2 s390: workaround invalid gcc-11 out of bounds read warning block: fix hctx checks for batch allocation ACPI: video: Add backlight=native DMI quirk for Acer Aspire 4810T LoongArch: Get frame info in unwind_start() when regs is not available blk-cgroup: fix missing pd_online_fn() while activating policy erofs: clean up parsing of fscache related options kselftest: Fix error message for unconfigured LLVM builds ARM: omap1: fix building gpio15xx arm64: dts: msm8994-angler: fix the memory map mac80211: Fix MLO address translation for multiple bss case erofs/zmap.c: Fix incorrect offset calculation bpf: Skip task with pid=1 in send_signal_common() firmware: arm_scmi: Clear stale xfer->hdr.status arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI arm64: dts: freescale: Fix pca954x i2c-mux node names ARM: dts: vf610: Fix pca9548 i2c-mux node names ARM: dts: imx: Fix pca9547 i2c-mux node name Conflicts: android/abi_gki_aarch64_qcom net/qrtr/ns.c Change-Id: Ie88ff42234d0d5d6d69582985ed1900ae1265f98 Upstream-Build: ks_qcom-android14-6.1-keystone-qcom-release@9632925 UKQ2.230221.001 Signed-off-by: jianzhou <quic_jianzhou@quicinc.com>	2023-02-21 23:31:55 -08:00
jianzhou	119d698116	Merge keystone/android14-6.1-keystone-qcom-release.6.1.9 (9a6451e) into msm-pineapple ... * refs/heads/tmp-9a6451e: ANDROID: qki: Add hidden config option for RCUTORTURE ANDROID: qki: Migrate consolidate.fragment ANDROID: GKI: Remove duplicates from symbol lists ANDROID: ABI: Add deferred_free to the QCOM symbol list ANDROID: Allow the deferred-free library heap to be compiled into the GKI ANDROID: dma-buf: heaps: Add deferred-free-helper library code ANDROID: bazel: Updatate consolidate GKI module list ANDROID: bazel: add GKI consolidate Bazel build ANDROID: qki: Add consolidate config ANDROID: gic: Add affinity-setting vendor hooks to gic-v3 ANDROID: gic: Add affinity-setting vendor hooks to gic ANDROID: KVM: arm64: Move hyp event enable into ro data section Linux 6.1.9 amdgpu: fix build on non-DCN platforms. perf/x86/amd: fix potential integer overflow on shift of a int netfilter: conntrack: unify established states for SCTP paths dt-bindings: i2c: renesas,rzv2m: Fix SoC specific string x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL dt-bindings: riscv: fix single letter canonical order dt-bindings: riscv: fix underscore requirement for multi-letter extensions acpi: Fix suspend with Xen PV x86/sev: Add SEV-SNP guest feature negotiation support Input: i8042 - add Clevo PCX0DX to i8042 quirk table Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode" Revert "mm/compaction: fix set skip in fast_find_migrateblock" Fix up more non-executable files marked executable tools: gpio: fix -c option of gpio-event-mon treewide: fix up files incorrectly marked executable block: ublk: move ublk_chr_class destroying after devices are removed Partially revert "perf/arm-cmn: Optimise DTC counter accesses" net: mdio-mux-meson-g12a: force internal PHY off on mux switch tsnep: Fix TX queue stop/wake for multiple queues net/tg3: resolve deadlock in tg3_reset_task() during EEH riscv: Move call to init_cpu_topology() to later initialization stage thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type() net: mctp: mark socks as dead on unhash, prevent re-add net: mctp: hold key reference when looking up a general key net: mctp: move expiry timer delete to unhash net: mctp: add an explicit reference from a mctp_sk_key to sock net: ravb: Fix possible hang if RIS2_QFF1 happen net: ravb: Fix lack of register setting after system resumed for Gen3 gpio: ep93xx: Fix port F hwirq numbers in handler gpio: mxc: Unlock on error path in mxc_flip_edge() nvme: fix passthrough csi check riscv/kprobe: Fix instruction simulation of JALR sctp: fail if no bound addresses can be used for a given scope net/sched: sch_taprio: do not schedule in taprio_reset() tracing/osnoise: Use built-in RCU list checking ACPI: video: Fix apple gmux detection platform/x86: apple-gmux: Add apple_gmux_detect() helper platform/x86: apple-gmux: Move port defines to apple-gmux.h platform/x86: asus-wmi: Fix kbd_dock_devid tablet-switch reporting netrom: Fix use-after-free of a listening socket. netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE net: ethernet: adi: adin1110: Fix multicast offloading net: dsa: microchip: fix probe of I2C-connected KSZ8563 ipv4: prevent potential spectre v1 gadget in fib_metrics_match() ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() netlink: annotate data races around sk_state netlink: annotate data races around dst_portid and dst_group netlink: annotate data races around nlk->portid netfilter: nft_set_rbtree: skip elements in transaction from garbage collection netfilter: nft_set_rbtree: Switch to node list walk for overlap detection ACPI: video: Add backlight=native DMI quirk for Asus U46E ACPI: video: Add backlight=native DMI quirk for HP EliteBook 8460p ACPI: video: Add backlight=native DMI quirk for HP Pavilion g6-1d80nr drm/i915/selftest: fix intel_selftest_modify_policy argument types nvme-fc: fix initialization order nvme: consolidate setting the tagset flags nvme: simplify transport specific device attribute handling net: fec: Use page_pool_put_full_page when freeing rx buffers net: fix UaF in netns ops registration error path netlink: prevent potential spectre v1 gadgets iavf: schedule watchdog immediately when changing primary MAC iavf: fix temporary deadlock and failure to set MAC address drm/i915: Fix a memory leak with reused mmap_offset drm/drm_vma_manager: Add drm_vma_node_allow_once() i2c: designware: Fix unbalanced suspended flag i2c: designware: use casting of u64 in clock multiplication to avoid overflow io_uring: always prep_async for drain requests net: mana: Fix IRQ name - add PCI and queue number io_uring: inline __io_req_complete_put() io_uring: remove io_req_tw_post_queue io_uring: use io_req_task_complete() in timeout io_uring: hold locks for io_req_complete_failed io_uring: inline __io_req_complete_post() io_uring: inline io_req_task_work_add() drm/amdgpu/display/mst: update mst_mgr relevant variable when long HPD drm/amdgpu/display/mst: limit payload to be updated one by one drm/amdgpu/display/mst: Fix mst_state->pbn_div and slot count assignments drm/amdgpu: remove unconditional trap enable on add gfx11 queues drm/amd/pm: add missing AllowIHInterrupt message mapping for SMU13.0.0 drm/display/dp_mst: Correct the kref of port. platform/x86: thinkpad_acpi: Fix profile modes on Intel platforms EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info EDAC/device: Respect any driver-supplied workqueue polling value ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment ipv6: fix reachability confirmation with proxy_ndp regulator: dt-bindings: samsung,s2mps14: add lost samsung,ext-control-gpios thermal: intel: int340x: Protect trip temperature from concurrent updates riscv: fix -Wundef warning for CONFIG_RISCV_BOOT_SPINWAIT scsi: ufs: core: Fix devfreq deadlocks KVM: arm64: GICv4.1: Fix race with doorbell on VPE activation/deactivation KVM: x86/vmx: Do not skip segment attributes if unusable bit is set io_uring/net: cache provided buffer group value for multishot receives ovl: fail on invalid uid/gid mapping at copy up ovl: fix tmpfile leak ksmbd: limit pdu length size according to connection status ksmbd: downgrade ndr version error message to debug ksmbd: do not sign response to session request for guest login ksmbd: add max connections parameter cifs: Fix oops due to uncleared server->smbd_conn in reconnect ftrace/scripts: Update the instructions for ftrace-bisect.sh trace_events_hist: add check for return value of 'create_hist_field' tracing: Make sure trace_printk() can output as soon as it can be used ftrace: Export ftrace_free_filter() to modules module: Don't wait for GOING modules nfsd: don't free files unconditionally in __nfsd_file_cache_purge kvm/vfio: Fix potential deadlock on vfio group_lock scsi: hpsa: Fix allocation size for scsi_host_alloc() vfio/type1: Respect IOMMU reserved regions in vfio_test_domain_fgsp() sched/uclamp: Fix a uninitialized variable warnings sched/fair: Check if prev_cpu has highest spare cap in feec() wifi: mac80211: Fix iTXQ AMPDU fragmentation handling wifi: mac80211: Proper mark iTXQs for resumption io_uring/msg_ring: fix remote queue to disabled ring drm/amdgpu: complete gfxoff allow signal during suspend without delay drm/i915: Allow alternate fixed modes always for eDP drm/i915: Allow panel fixed modes to have differing sync polarities Bluetooth: hci_sync: cancel cmd_timer if hci_open failed arm64: efi: Account for the EFI runtime stack in stack unwinder arm64: efi: Avoid workqueue to check whether EFI runtime is live arm64: efi: Recover from synchronous exceptions occurring in firmware Revert "selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID" btrfs: zoned: enable metadata over-commit for non-ZNS setup firmware: coreboot: Check size of table entry and use flex-array ata: pata_cs5535: Don't build on UML lockref: stop doing cpu_relax in the cmpxchg loop platform/x86: simatic-ipc: add another model platform/x86: simatic-ipc: correct name of a model platform/x86: asus-wmi: Ignore fan on E410MA platform/x86: asus-wmi: Add quirk wmi_ignore_fan platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK platform/x86: asus-nb-wmi: Add alternate mapping for KEY_CAMERA platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD r8152: add vendor/device ID pair for Microsoft Devkit scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id scsi: hisi_sas: Use abort task set to reset SAS disks when discovered KVM: s390: interrupt: use READ_ONCE() before cmpxchg() spi: spidev: remove debug messages that access spidev->spi without locking cifs: fix potential memory leaks in session setup drm/amdkfd: Fix NULL pointer error for GC 11.0.1 on mGPU drm/amdkfd: Add sync after creating vram bo ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC cpufreq: armada-37xx: stop using 0 as NULL pointer tools/nolibc: prevent gcc from making memset() loop over itself tools/nolibc: fix missing includes causing build issues at -O0 tools/nolibc: Fix S_ISxxx macros nolibc: fix fd_set type perf/x86/intel/uncore: Add Emerald Rapids perf/x86/msr: Add Emerald Rapids perf/x86/msr: Add Meteor Lake support perf/x86/cstate: Add Meteor Lake support xen/pvcalls: free active map buffer on pvcalls_front_free_map s390: expicitly align _edata and _end symbols on page boundary s390/debug: add _ASM_S390_ prefix to header guard drm: Add orientation quirk for Lenovo ideapad D330-10IGL net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem drm/msm/a6xx: Avoid gx gbit halt during rpm suspend ASoC: fsl_micfil: Correct the number of steps on SX controls cpufreq: Add SM6375 to cpufreq-dt-platdev blocklist kcsan: test: don't put the expect array on the stack ASoC: support machine driver with max98360 ASoC: amd: yc: Add ASUS M5402RA into DMI table ASoC: mediatek: mt8186: Add machine support for max98357a ASoC: mediatek: mt8186: support rt5682s_max98360 cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist cpufreq: CPPC: Add u64 casts to avoid overflowing spi: cadence: Fix busy cycles calculation ASoC: amd: yc: Add Razer Blade 14 2022 into DMI table ASoC: SOF: Add FW state to debugfs ASoC: SOF: pm: Always tear down pipelines before DSP suspend ASoC: SOF: pm: Set target state earlier scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace tcp: fix rate_app_limited to default to 1 bnxt: Do not read past the end of test names net: stmmac: enable all safety features by default thermal: core: call put_device() only after device_register() fails thermal/core: fix error code in __thermal_cooling_device_register() thermal: Validate new state in cur_state_store() net: dsa: microchip: ksz9477: port map correction in ALU table entry register selftests/net: toeplitz: fix race on tpacket_v3 block close driver core: Fix test_async_probe_init saves device in wrong array w1: fix WARNING after calling w1_process() w1: fix deadloop in __w1_remove_master_device() device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() ptdma: pt_core_execute_cmd() should use spinlock usb: dwc3: fix extcon dependency tcp: avoid the lookup process failing to get sk in ehash table nvme-pci: fix timeout request state check net: sched: gred: prevent races when adding offloads to stats drm/amd/display: fix issues with driver unload phy: phy-can-transceiver: Skip warning if no "max-bitrate" dmaengine: tegra: Fix memory leak in terminate_all() dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node() cifs: fix potential deadlock in cache_refresh_path() drm/i915/selftests: Unwind hugepages to drop wakeref on error HID: betop: check shape of output reports l2tp: prevent lockdep issue in l2tp_tunnel_register() virtio-net: correctly enable callback during start_xmit net: macb: fix PTP TX timestamp failure due to packet padding dmaengine: Fix double increment of client_count in dma_chan_get() drm/panfrost: fix GENERIC_ATOMIC64 dependency net: mlx5: eliminate anonymous module_init & module_exit net/mlx5: E-switch, Fix switchdev mode after devlink reload net/mlx5e: Set decap action based on attr for sample net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT net/mlx5e: Avoid false lock dependency warning on tc_ht even more net: ipa: disable ipa interrupt during suspend Bluetooth: Fix possible deadlock in rfcomm_sk_state_change Bluetooth: hci_event: Fix Invalid wait context Bluetooth: ISO: Fix possible circular locking dependency Bluetooth: ISO: Avoid circular locking dependency Bluetooth: hci_sync: fix memory leak in hci_update_adv_data() Bluetooth: hci_conn: Fix memory leaks Bluetooth: Fix a buffer overflow in mgmt_mesh_add() netfilter: conntrack: handle tcp challenge acks during connection reuse usb: gadget: f_fs: Ensure ep0req is dequeued before free_request usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait usb: ucsi: Ensure connector delayed work items are flushed block/rnbd-clt: fix wrong max ID in ida_alloc_max HID: revert CHERRY_MOUSE_000C quirk ARM: dts: stm32: Fix qspi pinctrl phandle for stm32mp151a-prtt1l ARM: dts: stm32: Fix qspi pinctrl phandle for stm32mp157c-emstamp-argon ARM: dts: stm32: Fix qspi pinctrl phandle for stm32mp15xx-dhcom-som ARM: dts: stm32: Fix qspi pinctrl phandle for stm32mp15xx-dhcor-som pinctrl: rockchip: fix mux route data for rk3568 net: stmmac: fix invalid call to mdiobus_get_phy() HID: check empty report_list in bigben_probe() HID: check empty report_list in hid_validate_values() net: mdio: validate parameter addr in mdiobus_get_phy() net: usb: sr9700: Handle negative len l2tp: close all race conditions in l2tp_tunnel_register() l2tp: convert l2tp_tunnel_list to idr net/sched: sch_taprio: fix possible use-after-free net: stmmac: Fix queue statistics reading pinctrl: rockchip: fix reading pull type on rk3568 wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock sch_htb: Avoid grafting on htb_destroy_class_offload when destroying htb net: lan966x: add missing fwnode_handle_put() for ports node net: enetc: avoid deadlock in enetc_tx_onestep_tstamp() net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs net: nfc: Fix use-after-free in local_cleanup() phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() drm/vc4: bo: Fix unused variable warning bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation amd-xgbe: Delay AN timeout during KR training amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent bpf: hash map, avoid deadlock with suitable hash mask phy: usb: sunplus: Fix potential null-ptr-deref in sp_usb_phy_probe() drm/vc4: bo: Fix drmm_mutex_init memory hog ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60 NFSD: fix use-after-free in nfsd4_ssc_setup_dul() drm/msm/gpu: Fix potential double-free phy: ti: fix Kconfig warning and operator precedence kbuild: fix 'make modules' error when CONFIG_DEBUG_INFO_BTF_MODULES=y kbuild: export top-level LDFLAGS_vmlinux only to scripts/Makefile.vmlinux arm64: dts: qcom: msm8992-libra: Fix the memory map arm64: dts: qcom: msm8992: Don't use sfpb mutex PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe() affs: initialize fsdata in affs_truncate() IB/hfi1: Remove user expected buffer invalidate race IB/hfi1: Immediately remove invalid memory from hardware IB/hfi1: Fix expected receive setup error exit issues IB/hfi1: Reserve user expected TIDs IB/hfi1: Reject a zero-length user expected buffer RDMA/core: Fix ib block iterator counter overflow arm64: dts: marvell: AC5/AC5X: Fix address for UART1 erofs: fix kvcalloc() misuse with __GFP_NOFAIL RDMA/rxe: Prevent faulty rkey generation RDMA/rxe: Fix inaccurate constants in rxe_type_info tomoyo: fix broken dependency on *.conf.default HID: amd_sfh: Fix warning unwind goto interconnect: qcom: msm8996: Fix regmap max_register values interconnect: qcom: msm8996: Provide UFS clocks to A2NoC firmware: arm_scmi: Fix virtio channels cleanup on shutdown firmware: arm_scmi: Harden shared memory access in fetch_notification firmware: arm_scmi: Harden shared memory access in fetch_response EDAC/highbank: Fix memory leak in highbank_mc_probe() reset: uniphier-glue: Fix possible null-ptr-deref reset: ti-sci: honor TI_SCI_PROTOCOL setting when not COMPILE_TEST soc: imx8m: Fix incorrect check for of_clk_get_by_name() arm64: dts: imx8mm-venice-gw7901: fix USB2 controller OC polarity HID: intel_ish-hid: Add check for ishtp_dma_tx_map arm64: dts: imx8mp-evk: pcie0-refclk cosmetic cleanup arm64: dts: imx8mp: Fix power-domain typo arm64: dts: imx8mp: Fix missing GPC Interrupt soc: imx: imx8mp-blk-ctrl: don't set power device name ARM: imx: add missing of_node_put() arm64: dts: imx93-11x11-evk: correct clock and strobe pad setting arm64: dts: verdin-imx8mm: fix dev board audio playback arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux arm64: dts: verdin-imx8mm: fix dahlia audio playback ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' ARM: dts: imx7d-pico: Use 'clock-frequency' ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency' arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property soc: imx: imx8mp-blk-ctrl: enable global pixclk with HDMI_TX_PHY PD dmaengine: ti: k3-udma: Do conditional decrement of UDMA_CHAN_RT_PEER_BCNT_REG dmaengine: qcom: gpi: Set link_rx bit on GO TRE for rx operation arm64: dts: qcom: sc8280xp: fix primary USB-DP PHY reset memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe() memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe() memory: tegra: Remove clients SID override programming ANDROID: net: export symbol for tracepoint_consume_skb UPSTREAM: iommu/iova: Fix alloc iova overflows issue ANDROID: GKI: Fix symbol list wildcard ANDROID: vendor_hooks: Add parameter to android_vh_wake_up_sync ANDROID: gki_defconfig: Enable RCU_BOOST config ANDROID: KVM: arm64: Let modules specify arbitrary permissions for host pages ANDROID: KVM: arm64: Introduce module-owned pages ANDROID: KVM: arm64: Pass addr to get_page_state() helper ANDROID: hung_task: Add vendor hook for hung task detect ANDROID: GKI: defconfig: enable BTF debug info ANDROID: kbuild: fix build for DEBUG_INFO_BTF_MODULES ANDROID: KVM: arm64: Add EL2 wakeup cause hyp events ANDROID: KVM: arm64: Add format file for nVHE hyp events ANDROID: KVM: arm64: add support for early enablement nVHE hyp events ANDROID: KVM: arm64: RAW interface to the nVHE hyp tracing ANDROID: KVM: arm64: Add support for nVHE hyp events ANDROID: KVM: arm64: Add host support for the nVHE hyp tracing ANDROID: KVM: arm64: Add tracing support for the nVHE hyp ANDROID: KVM: arm64: Add clock support in the nVHE hyp ANDROID: timekeeping: Export the boot clock in snapshots ANDROID: ring-buffer: Introducing external writer support ANDROID: ring-buffer: Expose buffer_data_page material UPSTREAM: usb: gadget: uvc: Rename bmInterfaceFlags -> bmInterlaceFlags UPSTREAM: usb: gadget: uvc: default the ctrl request interface offsets ANDROID: KVM: arm64: Restore host FP state before SMCs ANDROID: KVM: arm64: Finalise EL2 state from pKVM PSCI relay ANDROID: KVM: arm64: Use sanitized values in __check_override in nVHE ANDROID: KVM: arm64: Introduce finalise_el2_state macro ANDROID: KVM: arm64: Provide sanitized SYS_ID_AA64SMFR0_EL1 to nVHE ANDROID: KVM: arm64: Fix PKVM_PAGE_RESTRICTED_PROT conflict ANDROID: gki_defconfig: disable various x86 and hw flags Revert "ANDROID: arm64: Register earlycon fixmap with the MMIO guard" ANDROID: KVM: arm64: Include MMIO guard and memory relinquish in top-level hypercalls doc ANDROID: KVM: arm64: Fix MMIO guard documentation ANDROID: KVM: arm64: Consistent hypercall naming in documentation ANDROID: gki_defconfig: sample large page_alloc allocations with HW_TAGS KASAN FROMLIST: kasan: reset page tags properly with sampling FROMGIT: kasan: allow sampling page_alloc allocations for HW_TAGS Linux 6.1.8 soc: qcom: apr: Make qcom,protection-domain optional again Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()" block: mq-deadline: Rename deadline_is_seq_writes() net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt net/ulp: use consistent error code when blocking ULP octeontx2-pf: Avoid use of GFP_KERNEL in atomic context drm/amdgpu: correct MEC number for gfx11 APUs drm/amdgpu: add tmz support for GC IP v11.0.4 drm/amdgpu: add tmz support for GC 11.0.1 drm/amdgpu: enable GFX Clock Gating control for GC IP v11.0.4 drm/amdgpu: enable GFX Power Gating for GC IP v11.0.4 drm/amdgpu: enable GFX IP v11.0.4 CG support drm/amdgpu: enable PSP IP v13.0.11 support drm/amdgpu/discovery: enable nbio support for NBIO v7.7.1 drm/amdgpu/pm: use the specific mailbox registers only for SMU IP v13.0.4 drm/amdgpu/soc21: add mode2 asic reset for SMU IP v13.0.11 drm/amdgpu/pm: add GFXOFF control IP version check for SMU IP v13.0.11 drm/amdgpu: add smu 13 support for smu 13.0.11 drm/amdgpu/pm: enable swsmu for SMU IP v13.0.11 drm/amdgpu/discovery: add PSP IP v13.0.11 support drm/amdgpu: add gmc v11 support for GC 11.0.4 drm/amdgpu: add gfx support for GC 11.0.4 drm/amdgpu/discovery: set the APU flag for GC 11.0.4 drm/amdgpu: set GC 11.0.4 family drm/amdgpu/discovery: enable mes support for GC v11.0.4 drm/amdgpu/discovery: enable gfx v11 for GC 11.0.4 drm/amdgpu/discovery: enable gmc v11 for GC 11.0.4 drm/amdgpu/discovery: enable soc21 common for GC 11.0.4 x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN exit: Use READ_ONCE() for all oops/warn limit reads docs: Fix path paste-o for /sys/kernel/warn_count panic: Expose "warn_count" to sysfs panic: Introduce warn_limit panic: Consolidate open-coded panic_on_warn checks exit: Allow oops_limit to be disabled exit: Expose "oops_count" to sysfs exit: Put an upper limit on how often we can oops panic: Separate sysctl logic from CONFIG_SMP efi: rt-wrapper: Add missing include arm64: efi: Execute runtime services from a dedicated stack fs/ntfs3: Fix attr_punch_hole() null pointer derenference cifs: reduce roundtrips on create/qinfo requests drm/amd/display: disable S/G display on DCN 3.1.4 drm/amd/display: disable S/G display on DCN 3.1.5 drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix drm/amd/display: Calculate output_color_space after pixel encoding adjustment drm/amd/display: Fix set scaling doesn's work drm/i915: Remove unused variable drm/i915: Allow switching away via vga-switcheroo if uninitialized drm/i915/display: Check source height is > 0 drm/i915: re-disable RC6p on Sandy Bridge drm/amdgpu: Correct the power calcultion for Renior/Cezanne. drm/amdgpu: allow multipipe policy on ASICs with one MEC drm/amdgpu: fix amdgpu_job_free_resources v2 ARM: omap1: fix !ARCH_OMAP1_ANY link failures ARM: dts: qcom: apq8084-ifc6540: fix overriding SDHCI VMCI: Use threaded irqs instead of tasklets mei: me: add meteor lake point M DID mei: bus: fix unlink on bus in error path gsmi: fix null-deref in gsmi_get_variable serial: exar: Add support for Sealevel 7xxxC serial cards serial: atmel: fix incorrect baudrate setup serial: amba-pl011: fix high priority character transmission in rs486 mode dmaengine: idxd: Do not call DMX TX callbacks during workqueue disable dmaengine: idxd: Prevent use after free on completion memory dmaengine: idxd: Let probe fail when workqueue cannot be enabled dmaengine: tegra210-adma: fix global intr clear dmaengine: lgm: Move DT parsing after initialization serial: pch_uart: Pass correct sg to dma_unmap_sg() dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation dt-bindings: phy: g12a-usb2-phy: fix compatible string documentation arm64: dts: imx8mp: correct usb clocks usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() USB: gadget: Add ID numbers to configfs-gadget driver names usb: gadget: g_webcam: Send color matching descriptor per frame usb: typec: altmodes/displayport: Fix pin assignment calculation usb: typec: altmodes/displayport: Add pin assignment helper usb: typec: tcpm: Fix altmode re-registration causes sysfs create fail usb: musb: fix error return code in omap2430_probe() usb: host: ehci-fsl: Fix module alias usb: cdns3: remove fetched trb from cache before dequeuing USB: serial: cp210x: add SCALANCE LPE-9000 device id USB: gadgetfs: Fix race between mounting and unmounting selftests: mptcp: userspace: validate v4-v6 subflows mix mptcp: netlink: respect v4/v6-only sockets mptcp: explicitly specify sock family at subflow creation time io_uring/poll: don't reissue in case of poll race on multishot request pktcdvd: check for NULL returna fter calling bio_split_to_limits() tty: fix possible null-ptr-defer in spk_ttyio_release tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD riscv: dts: sifive: fu740: fix size of pcie 32bit memory thunderbolt: Do not call PM runtime functions in tb_retimer_scan() thunderbolt: Do not report errors if on-board retimers are found thunderbolt: Use correct function to calculate maximum USB3 link rate thunderbolt: Disable XDomain lane 1 only in software connection manager cifs: do not include page data when checking signature btrfs: fix race between quota rescan and disable leading to NULL pointer deref btrfs: fix invalid leaf access due to inline extent during lseek btrfs: qgroup: do not warn on record without old_roots populated btrfs: do not abort transaction on failure to update log root btrfs: do not abort transaction on failure to write log tree when syncing log btrfs: add missing setup of log for full commit at add_conflicting_inode() btrfs: fix directory logging due to race with concurrent index key deletion btrfs: fix missing error handling when logging directory items btrfs: add extra error messages to cover non-ENOMEM errors from device_add_list() mm/MADV_COLLAPSE: don't expand collapse when vm_end is past requested end mm/userfaultfd: enable writenotify while userfaultfd-wp is enabled for a VMA mm/hugetlb: pre-allocate pgtable pages for uffd wr-protects mm/hugetlb: fix uffd-wp handling for migration entries in hugetlb_change_protection() mm/hugetlb: fix PTE marker handling in hugetlb_change_protection() mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting mmc: sunxi-mmc: Fix clock refcount imbalance during unbind ACPI: PRM: Check whether EFI runtime is available comedi: adv_pci1760: Fix PWM instruction handling usb: core: hub: disable autosuspend for TI TUSB8041 misc: fastrpc: Fix use-after-free race condition for maps misc: fastrpc: Don't remove map on creater_process and device_release misc: fastrpc: Fix use-after-free and race in fastrpc_map_find usb: misc: onboard_hub: Move 'attach' work to the driver usb: misc: onboard_hub: Invert driver registration order USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 staging: vchiq_arm: fix enum vchiq_status return types USB: serial: option: add Quectel EM05CN modem USB: serial: option: add Quectel EM05CN (SG) modem USB: serial: option: add Quectel EC200U modem USB: serial: option: add Quectel EM05-G (RS) modem USB: serial: option: add Quectel EM05-G (CS) modem USB: serial: option: add Quectel EM05-G (GR) modem prlimit: do_prlimit needs to have a speculation check xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables usb: acpi: add helper to check port lpm capability using acpi _DSM xhci: Add a flag to disable USB3 lpm on a xhci root port level. xhci: Add update_hub_device override for PCI xHCI hosts xhci: Fix null pointer dereference when host dies usb: xhci: Check endpoint is valid before dereferencing it xhci-pci: set the dma max_seg_size Revert "serial: stm32: Merge hard IRQ and threaded IRQ handling into single IRQ handler" serial: stm32: Merge hard IRQ and threaded IRQ handling into single IRQ handler mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma hugetlb: unshare some PMDs when splitting VMAs mm/shmem: restore SHMEM_HUGE_DENY precedence over MADV_COLLAPSE nilfs2: fix general protection fault in nilfs_btree_insert() zonefs: Detect append writes at invalid locations LoongArch: Add HWCAP_LOONGARCH_CPUCFG to elf_hwcap Add exception protection processing for vd in axi_chan_handle_err function proc: fix PIE proc-empty-vm, proc-pid-vm tests nommu: fix split_vma() map_count error nommu: fix do_munmap() error path nommu: fix memory leak in do_mmap() error path wifi: mac80211: fix initialization of rx->link and rx->link_sta wifi: mac80211: sdata can be NULL during AMPDU start wifi: mac80211: reset multiple BSSID options in stop_ap() wifi: mac80211: fix MLO + AP_VLAN check wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices Bluetooth: hci_qca: Fix driver shutdown on closed serdev Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 fbdev: omapfb: avoid stack overflow warning of: fdt: Honor CONFIG_CMDLINE* even without /chosen node, take 2 perf/x86/rapl: Add support for Intel Emerald Rapids perf/x86/rapl: Add support for Intel Meteor Lake memblock tests: Fix compilation error. cifs: fix race in assemble_neg_contexts() perf/x86/rapl: Treat Tigerlake like Icelake f2fs: let's avoid panic if extent_tree is not created x86/asm: Fix an assembler warning with current binutils btrfs: always report error in run_one_delayed_ref() selftests: net: fix cmsg_so_mark.sh test hang RDMA/srp: Move large values to a new enum for gcc13 bpf: keep a reference to the mm, in case the task is dead. r8169: fix dmar pte write access is not set error r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down() net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats vdpa_sim_net: should not drop the multicast/broadcast packet vduse: Validate vq_num in vduse_validate_config() virtio_pci: modify ENOENT to EINVAL vdpa/mlx5: Avoid overwriting CVQ iotlb vdpa/mlx5: Avoid using reslock in event_handler vdpa/mlx5: Return error on vlan ctrl commands if not supported tools/virtio: initialize spinlocks in vring_test.c net: ethernet: marvell: octeontx2: Fix uninitialized variable warning selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID pNFS/filelayout: Fix coalescing test for single DS wifi: iwlwifi: fw: skip PPAG for JF btrfs: fix trace event name typo for FLUSH_DELAYED_REFS dma-buf: fix dma_buf_export init order v2 Revert "FROMLIST: kasan: allow sampling page_alloc allocations for HW_TAGS" Revert "ANDROID: gki_defconfig: sample large page_alloc allocations with HW_TAGS KASAN" ANDROID: GKI: Header generation fix and improvements ANDROID: virtual_device: Set initial symbol list ANDROID: iommu: Define vendor hook to limit max alignment ANDROID: BUILD.bazel: Add qcom soundwire module ANDROID: usb: host: export additional xhci symbols for ring management ANDROID: sound: usb: Export symbols for endpoint management ANDROID: ABI: Update QCOM symbol list ANDROID: sched: add vendor hook for correcting cpu capacity ANDROID: sched: gki: add padding to some structs to support WALT ANDROID: Add initial QCOM symbol list ANDROID: Temporarily disable vendor symbol lists ANDROID: sched: Add vendor hooks for find_energy_efficient_cpu ANDROID: KVM: arm64: Coalesce host stage2 entries on ownership reclaim Linux 6.1.7 pinctrl: amd: Add dynamic debugging for active GPIOs Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout" block: handle bio_split_to_limits() NULL return io_uring/io-wq: only free worker if it was allocated for creation io_uring/io-wq: free worker if task_work creation is canceled drm/i915: Fix CFI violations in gt_sysfs io_uring/poll: attempt request issue after racy poll wakeup io_uring: lock overflowing for IOPOLL efi: fix NULL-deref in init error path ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate() platform/x86/amd: Fix refcount leak in amd_pmc_probe platform/surface: aggregator: Add missing call to ssam_request_sync_free() bnxt: make sure we return pages to the pool net: hns3: fix wrong use of rss size during VF rss config net: lan966x: check for ptp to be enabled in lan966x_ptp_deinit() igc: Fix PPS delta between two synchronized end-points perf kmem: Support field "node" in evsel__process_alloc_event() coping with recent tracepoint restructuring perf kmem: Support legacy tracepoints perf build: Properly guard libbpf includes octeontx2-pf: Fix resource leakage in VF driver unbind selftests/net: l2_tos_ttl_inherit.sh: Ensure environment cleanup on failure. selftests/net: l2_tos_ttl_inherit.sh: Run tests in their own netns. selftests/net: l2_tos_ttl_inherit.sh: Set IPv6 addresses with "nodad". net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY) net/mlx5e: Fix macsec ssci attribute handling in offload path net/mlx5e: Don't support encap rules with gbp option net/mlx5: Fix ptp max frequency adjustment range net/mlx5e: IPoIB, Fix child PKEY interface stats on rx path net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent net/mlx5e: IPoIB, Block queue count configuration when sub interfaces are present net/mlx5e: Verify dev is present for fix features ndo net/mlx5: Fix command stats access after free net/mlx5e: TC, Keep mod hdr actions after mod hdr alloc net/mlx5: check attr pointer validity before dereferencing it Revert "r8169: disable detection of chip version 36" net/sched: act_mpls: Fix warning during failed attribute validation drm/vmwgfx: Remove rcu locks from user resources drm/vmwgfx: Remove vmwgfx_hashtab drm/vmwgfx: Refactor ttm reference object hashtable to use linux/hashtable. drm/vmwgfx: Refactor resource validation hashtable to use linux/hashtable implementation. drm/vmwgfx: Remove ttm object hashtable drm/vmwgfx: Refactor resource manager's hashtable to use linux/hashtable implementation. drm/vmwgfx: Write the driver id registers ice: Add check for kzalloc ice: Fix potential memory leak in ice_gnss_tty_write() drm/amdgpu: Fix potential NULL dereference tools/nolibc: fix the O_* fcntl/open macro definitions for riscv tools/nolibc: restore mips branch ordering in the _start block ASoC: qcom: Fix building APQ8016 machine driver without SOUNDWIRE af_unix: selftest: Fix the size of the parameter to connect() gro: take care of DODGY packets gro: avoid checking for a failed search nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() hvc/xen: lock console list traversal sched/core: Fix arch_scale_freq_tick() on tickless systems octeontx2-af: Fix LMAC config in cgx_lmac_rx_tx_enable nfsd: fix handling of cached open files in nfsd4_open codepath nfsd: rework refcounting in filecache NFSD: Add an nfsd_file_fsync tracepoint nfsd: reorganize filecache.c nfsd: remove the pages_flushed statistic from filecache NFSD: Add an NFSD_FILE_GC flag to enable nfsd_file garbage collection NFSD: Revert "NFSD: NFSv4 CLOSE should release an nfsd_file immediately" NFSD: Pass the target nfsd_file to nfsd_commit() tipc: fix unexpected link reset due to discovery messages stmmac: dwmac-mediatek: remove the dwmac_fix_mac_speed ALSA: usb-audio: Relax hw constraints for implicit fb sync ALSA: usb-audio: Make sure to stop endpoints before closing EPs mtd: cfi: allow building spi-intel standalone mtd: parsers: scpart: fix __udivdi3 undefined on mips ASoC: wm8904: fix wrong outputs volume after power reactivation drm/msm/dpu: Fix memory leak in msm_mdss_parse_data_bus_icc_path drm/msm/dpu: Fix some kernel-doc comments ASoC: Intel: sof-nau8825: fix module alias overflow ASoC: Intel: sof_nau8825: support rt1015p speaker amplifier ASoC: Intel: fix sof-nau8825 link failure scsi: ufs: core: WLUN suspend SSU/enter hibern8 fail recovery scsi: mpi3mr: Refer CONFIG_SCSI_MPI3MR in Makefile scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM regulator: da9211: Use irq handler when ready x86/resctrl: Fix event counts regression in reused RMIDs x86/resctrl: Fix task CLOSID/RMID update race x86/pat: Fix pat_x_mtrr_type() for MTRR disabled case EDAC/device: Fix period calculation in edac_device_reset_delay_period() x86/boot: Avoid using Intel mnemonics in AT&T syntax asm powerpc/imc-pmu: Fix use of mutex in IRQs disabled section selftests: netfilter: fix transaction test script timeout handling netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. sched/core: Fix use-after-free bug in dup_user_cpus_ptr() iommu/arm-smmu: Report IOMMU_CAP_CACHE_COHERENCY even betterer iommu/arm-smmu: Don't unregister on shutdown iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe() iommu/arm-smmu-v3: Don't unregister on shutdown iommu/iova: Fix alloc iova overflows issue mm: Always release pages to the buddy allocator in memblock_free_late(). drm/amdgpu: enable VCN DPG for GC IP v11.0.4 drm/amdgpu: Enable pg/cg flags on GC11_0_4 for VCN drm/amdgpu: add soc21 common ip block support for GC 11.0.4 drm/amd/pm: enable GPO dynamic control support for SMU13.0.7 drm/amd/pm: enable GPO dynamic control support for SMU13.0.0 drm/amd/pm: Enable bad memory page/channel recording support for smu v13_0_0 drm/amd/pm: enable mode1 reset on smu_v13_0_10 usb: ulpi: defer ulpi_register on ulpi_read_id timeout drm/i915/gt: Cleanup partial engine discovery failures iavf/iavf_main: actually log ->src mask when talking about it ipv6: raw: Deduct extension header length in rawv6_push_pending_frames ixgbe: fix pci device refcount leak platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe dt-bindings: msm/dsi: Don't require vcca-supply on 14nm PHY dt-bindings: msm/dsi: Don't require vdds-supply on 10nm PHY drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer platform/x86: ideapad-laptop: Add Legion 5 15ARH05 DMI id to set_fn_lock_led_list[] arm64/mm: fix incorrect file_map_count for invalid pmd arm64: ptrace: Use ARM64_SME to guard the SME register enumerations dt-bindings: msm: dsi-phy-28nm: Add missing qcom, dsi-phy-regulator-ldo-mode arm64/mm: add pud_user_exec() check in pud_user_accessible_page() arm64/signal: Always accept SVE signal frames on SME only systems dt-bindings: msm: dsi-controller-main: Fix description of core clock dt-bindings: msm: dsi-controller-main: Fix power-domain constraint arm64/signal: Always allocate SVE signal frames on SME only systems drm/msm/adreno: Make adreno quirks not overwrite each other firmware/psci: Don't register with debugfs if PSCI isn't available firmware/psci: Fix MEM_PROTECT_RANGE function numbers drm/msm: another fix for the headless Adreno GPU dt-bindings: msm: dsi-controller-main: Fix operating-points-v2 constraint platform/x86: dell-privacy: Fix SW_CAMERA_LENS_COVER reporting platform/x86: asus-wmi: Don't load fan curves without fan platform/x86: thinkpad_acpi: Fix profile mode display in AMT mode platform/x86: int3472/discrete: Ensure the clk/power enable pins are in output mode platform/surface: aggregator: Ignore command messages not intended for us platform/x86: dell-privacy: Only register SW_CAMERA_LENS_COVER if present ACPI: video: Allow selecting NVidia-WMI-EC or Apple GMUX backlight from the cmdline ASoC: rt9120: Make dev PM runtime bind AsoC component PM io_uring/fdinfo: include locked hash table in fdinfo output cifs: fix double free on failed kerberos auth cifs: do not query ifaces on smb1 mounts cifs: fix file info setting in cifs_open_file() cifs: fix file info setting in cifs_query_path_info() cifs: Fix uninitialized memory read for smb311 posix symlink create Revert "drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10 properly"" drm/amd/display: move remaining FPU code to dml folder drm/amd/pm: add the missing mapping for PPT feature on SMU13.0.0 and 13.0.7 drm/amd/pm: correct the reference clock for fan speed(rpm) calculation drm/amdgpu: Fixed bug on error when unloading amdgpu drm/amd: Delay removal of the firmware framebuffer drm/i915: Fix potential context UAFs drm/i915: Reserve enough fence slot for i915_vma_unbind_async drm/i915/gt: Reset twice drm: Optimize drm buddy top-down allocation method drm/amd/pm/smu13: BACO is supported when it's in BACO state drm/virtio: Fix GEM handle creation UAF s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops cpufreq: amd-pstate: fix kernel hang issue while amd-pstate unregistering elfcore: Add a cprm parameter to elf_core_extra_{phdrs,data_size} ASoC: qcom: lpass-cpu: Fix fallback SD line index handling brcmfmac: Prefer DT board type over DMI board type s390/kexec: fix ipl report address for kdump perf auxtrace: Fix address filter duplicate symbol selection net: stmmac: add aux timestamps fifo clearance wait ACPI: Fix selecting wrong ACPI fwnode for the iGPU on some Dell laptops arm64: cmpxchg_double*: hazard against entire exchange variable arm64: mte: Avoid the racy walk of the vma list during core dump arm64: mte: Fix double-freeing of the temporary tag storage during coredump io_uring/poll: add hash if ready poll request can't complete inline docs: Fix the docs build with Sphinx 6.0 efi: tpm: Avoid READ_ONCE() for accessing the event log efi: fix userspace infinite retry read efivars after EFI runtime services page fault KVM: arm64: Fix S1PTW handling on RO memslots KVM: x86: Do not return host topology information from KVM_GET_SUPPORTED_CPUID ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx ALSA: hda/realtek - Turn on power early ALSA: usb-audio: Always initialize fixed_rate in snd_usb_find_implicit_fb_sync_format() ALSA: control-led: use strscpy in set_led_id() Revert "ALSA: usb-audio: Drop superfluous interface setup at parsing" netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits FROMGIT: usb: ucsi: Ensure connector delayed work items are flushed FROMGIT: bpf: btf: limit logging of ignored BTF mismatches ANDROID: sound: usb: Add vendor hooks for connect & disconnect ANDROID: vendor_hooks: Add hooks for frequency optimization ANDROID: softirq: Export irq_handler_exit tracepoint ANDROID: timer: Export hrtimer_expire_entry/exit tracepoints ANDROID: workqueue: Export workqueue_execute_start/end tracepoints ANDROID: sched: add vendor hook in find_new_ilb ANDROID: KVM: arm64: Expose get_leaf to pKVM modules ANDROID: KVM: arm64: Allow skipping module page donation ANDROID: KVM: arm64: Rework pKVM module locking ANDROID: KVM: arm64: Sanity check the input to pKVM module mm APIs ANDROID: KVM: arm64: Expose pKVM module mm APIs in module_ops ANDROID: KVM: arm64: Expose hyp_va to modules ANDROID: arm64: kvm: iommu: Export IOMMU register and init functions. ANDROID: arm64: kvm: Add new module functions used by s2mpu. ANDROID: arm64: kvm: s2mpu: Update address of s2mpu struct ANDROID: arm64: kvm: s2mpu: Remove S2MPU pKVM driver Linux 6.1.6 ALSA: hda: cs35l41: Check runtime suspend capability at runtime_idle ALSA: hda - Enable headset mic on another Dell laptop with ALC3254 ALSA: hda: cs35l41: Don't return -EINVAL from system suspend/resume ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP platform ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF net: sched: disallow noqueue for qdisc classes gcc: disable -Warray-bounds for gcc-11 too Revert "SUNRPC: Use RMW bitops in single-threaded hot paths" selftests/vm/pkeys: Add a regression test for setting PKRU through ptrace x86/fpu: Emulate XRSTOR's behavior if the xfeatures PKRU bit is not set x86/fpu: Allow PKRU to be (once again) written by ptrace. x86/fpu: Add a pkru argument to copy_uabi_to_xstate() x86/fpu: Add a pkru argument to copy_uabi_from_kernel_to_xstate(). x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() parisc: Align parisc MADV_XXX constants with all other architectures Linux 6.1.5 wifi: ath11k: Send PME message during wakeup from D3cold efi: random: combine bootloader provided RNG seed with RNG protocol output drm/i915/dsi: fix MIPI_BKLT_EN_1 native GPIO index drm/i915/dsi: add support for ICL+ native MIPI GPIO sequence ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob ksmbd: send proper error response in smb2_tree_connect() ksmbd: fix infinite loop in ksmbd_conn_handler_loop() btrfs: handle case when repair happens with dev-replace drm/amd/display: Uninitialized variables causing 4k60 UCLK to stay at DPM1 and not DPM0 drm/amd/display: Add check for DET fetch latency hiding for dcn32 virtio_blk: Fix signedness bug in virtblk_prep_rq() virtio-blk: use a helper to handle request queuing errors drm/i915/gvt: fix vgpu debugfs clean in remove drm/i915/gvt: fix gvt debugfs destroy drm/amdkfd: Fix kernel warning during topology setup drm/plane-helper: Add the missing declaration of drm_atomic_state of/fdt: run soc memory setup when early_init_dt_scan_memory fails riscv, kprobes: Stricter c.jr/c.jalr decoding riscv: uaccess: fix type of 0 variable on error in get_user() thermal: int340x: Add missing attribute for data rate base vhost_vdpa: fix the crash in unmap a large memory tpm: Allow system suspend to continue when TPM suspend fails io_uring: fix CQ waiting timeout handling io_uring: pin context while queueing deferred tw block: don't allow splitting of a REQ_NOWAIT bio net: dsa: tag_qca: fix wrong MGMT_DATA2 size net: dsa: qca8k: fix wrong length value for mgmt eth packet Revert "net: dsa: qca8k: cache lo and hi for mdio write" Revert "drm/amd/display: Enable Freesync Video Mode by default" bpf: Fix panic due to wrong pageattr of im->image fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB nfsd: fix handling of readdir in v4root vs. mount upcall timeout x86/bugs: Flush IBP in ib_prctl_set() x86/kexec: Fix double-free of elf header buffer ASoC: SOF: Intel: pci-tgl: unblock S5 entry if DMA stop has failed" nvme: also return I/O command effects from nvme_command_effects nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it kunit: alloc_string_stream_fragment error handling bug fix io_uring: check for valid register opcode earlier ACPI: video: Don't enable fallback path for creating ACPI backlight by default drm/amd/display: Report to ACPI video if no panels were found ACPI: video: Allow GPU drivers to report no panels nvme: fix multipath crash caused by flush request when blktrace is enabled io_uring/cancel: re-grab ctx mutex after finishing wait drm/amdkfd: Fix double release compute pasid drm/amdkfd: Fix kfd_process_device_init_vm error handling drm/amdgpu: Fix size validation for non-exclusive domains (v4) ASoC: SOF: mediatek: initialize panic_info to zero ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet 9p/client: fix data race on req->status ASoC: SOF: Revert: "core: unregister clients and machine drivers in .shutdown" hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling usb: dwc3: xilinx: include linux/gpio/consumer.h udf: Fix extension of the last extent in the file caif: fix memory leak in cfctrl_linkup_request() net/ulp: prevent ULP without clone op from entering the LISTEN status qed: allow sleep in qed_mcp_trace_dump() ublk: honor IO_URING_F_NONBLOCK for handling control command drm/i915/gvt: fix double free bug in split_2MB_gtt_entry drm/i915: unpin on error in intel_vgpu_shadow_mm_pin() perf stat: Fix handling of --for-each-cgroup with --bpf-counters to match non BPF mode perf stat: Fix handling of unsupported cgroup events when using BPF counters perf lock contention: Fix core dump related to not finding the "__sched_text_end" symbol on s/390 usb: rndis_host: Secure rndis_query check against int overflow octeontx2-pf: Fix lmtst ID used in aura free drivers/net/bonding/bond_3ad: return when there's no aggregator fs/ntfs3: don't hold ni_lock when calling truncate_setsize() drm/imx: ipuv3-plane: Fix overlay plane width perf tools: Fix resources leak in perf_data__open_dir() drm/virtio: Fix memory leak in virtio_gpu_object_create() netfilter: ipset: Rework long task execution when adding/deleting entries netfilter: ipset: fix hash:net,port,net hang with /0 subnet net: sparx5: Fix reading of the MAC address vxlan: Fix memory leaks in error path net: sched: cbq: dont intepret cls results when asked to drop net: sched: atm: dont intepret cls results when asked to drop gpio: sifive: Fix refcount leak in sifive_gpio_probe ceph: switch to vfs_inode_has_locks() to fix file lock bug filelock: new helper: vfs_inode_has_locks drm/meson: Reduce the FIFO lines held when AFBC is not used selftests: net: return non-zero for failures reported in arp_ndisc_evict_nocarrier selftests: net: fix cleanup_v6() for arp_ndisc_evict_nocarrier RDMA/mlx5: Fix validation of max_rd_atomic caps for DC RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device gpio: pca953x: avoid to use uninitialized value pinctrl net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe net: ena: Update NUMA TPH hint register upon NUMA node update net: ena: Set default value for RX interrupt moderation net: ena: Fix rx_copybreak value update net: ena: Use bitmask to indicate packet redirection net: ena: Account for the number of processed bytes in XDP net: ena: Don't register memory info on XDP exchange net: ena: Fix toeplitz initial hash value net: amd-xgbe: add missed tasklet_kill net: hns3: refine the handling for VF heartbeat tcp: Add TIME_WAIT sockets in bhash2. bpf: Always use maximal size for copy_array() net/mlx5: Lag, fix failure to cancel delayed bond work net/mlx5e: Set geneve_tlv_option_0_exist when matching on geneve option net/mlx5e: Fix hw mtu initializing at XDP SQ allocation net/mlx5e: Always clear dest encap in neigh-update-del net/mlx5e: CT: Fix ct debugfs folder name net/mlx5e: Fix RX reporter for XSK RQs net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default net/mlx5: Fix RoCE setting at HCA level net/mlx5: Avoid recovery in probe flows net/mlx5: Fix io_eq_size and event_eq_size params validation net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path net/mlx5: E-Switch, properly handle ingress tagged packets on VST vdpasim: fix memory leak when freeing IOTLBs vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session() vdpa_sim: fix vringh initialization in vdpasim_queue_ready() vhost-vdpa: fix an iotlb memory leak vhost: fix range used in translate_desc() vringh: fix range used in iotlb_translate() vhost/vsock: Fix error handling in vhost_vsock_init() vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() vdpa/mlx5: Fix wrong mac address deletion vdpa/mlx5: Fix rule forwarding VLAN to TIR bnxt_en: Fix HDS and jumbo thresholds for RX packets bnxt_en: Fix first buffer size calculations for XDP multi-buffer bnxt_en: Fix XDP RX path bnxt_en: Simplify bnxt_xdp_buff_init() nfc: Fix potential resource leaks net: dsa: mv88e6xxx: depend on PTP conditionally qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure net: sched: fix memory leak in tcindex_set_parms net: hns3: fix VF promisc mode not update when mac table full net: hns3: fix miss L3E checking for rx packet net: hns3: add interrupts re-initialization while doing VF FLR nfsd: shut down the NFSv4 state objects before the filecache veth: Fix race with AF_XDP exposing old or uninitialized descriptors net: lan966x: Fix configuration of the PCS bonding: fix lockdep splat in bond_miimon_commit() netfilter: nf_tables: honor set timeout and garbage collection updates mptcp: fix lockdep false positive mptcp: fix deadlock in fastopen error path vmxnet3: correctly report csum_level for encapsulated packet net: vrf: determine the dst using the original ifindex for multicast ice: xsk: do not use xdp_return_frame() on tx_buf->raw_buf netfilter: nf_tables: perform type checking for existing sets netfilter: nf_tables: add function to create set stateful expressions netfilter: nf_tables: consolidate set description drm/panfrost: Fix GEM handle creation ref-counting bpf: pull before calling skb_postpull_rcsum() wifi: ath9k: use proper statements in conditionals SUNRPC: ensure the matching upcall is in-flight upon downcall btrfs: fix an error handling path in btrfs_defrag_leaves() phy: qcom-qmp-combo: fix broken power on perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor btrfs: fix compat_ro checks against remount btrfs: fix off-by-one in delalloc search during lseek usb: dwc3: gadget: Ignore End Transfer delay on teardown cifs: refcount only the selected iface during interface update cifs: fix interface count calculation during refresh btrfs: replace strncpy() with strscpy() ARM: renumber bits related to _TIF_WORK_MASK Linux 6.1.4 drm/amd/pm: correct the fan speed retrieving in PWM for some SMU13 asics drm/amd/pm: bump SMU13.0.0 driver_if header to version 0x34 drm/amd/pm: add missing SMU13.0.7 mm_dpm feature mapping drm/amd/pm: add missing SMU13.0.0 mm_dpm feature mapping drm/i915/migrate: Account for the reserved_space drm/i915: improve the catch-all evict to handle lock contention drm/amdgpu: make display pinning more flexible (v2) drm/amdgpu: handle polaris10/11 overlap asics (v2) drm/amd/display: Add DCN314 display SG Support drm/i915/ttm: consider CCS for backup objects ext4: allocate extended attribute value in vmalloc area ext4: avoid unaccounted block allocation when expanding inode ext4: initialize quota before expanding inode in setproject ioctl ext4: fix inode leak in ext4_xattr_inode_create() on an error path ext4: fix kernel BUG in 'ext4_write_inline_data_end()' ext4: fix deadlock due to mbcache entry corruption ext4: avoid BUG_ON when creating xattrs ext4: fix corrupt backup group descriptors after online resize ext4: dont return EINVAL from GETFSUUID when reporting UUID length ext4: fix bad checksum after online resize ext4: fix error code return to user-space in ext4_get_branch() ext4: fix corruption when online resizing a 1K bigalloc fs ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline ext4: don't fail GETFSUUID when the caller provides a long buffer ext4: init quota for 'old.inode' in 'ext4_rename' ext4: fix uninititialized value in 'ext4_evict_inode' ext4: fix off-by-one errors in fast-commit block filling ext4: fix unaligned memory access in ext4_fc_reserve_space() ext4: add missing validation of fast-commit record lengths ext4: don't set up encryption key during jbd2 transaction ext4: fix leaking uninitialized memory in fast-commit journal ext4: disable fast-commit of encrypted dir operations ext4: don't allow journal inode to have encrypt flag ext4: fix bug_on in __es_tree_search caused by bad boot loader inode ext4: check and assert if marking an no_delete evicting inode dirty ext4: journal_path mount options should follow links ext4: fix reserved cluster accounting in __es_remove_extent() ext4: fix bug_on in __es_tree_search caused by bad quota inode ext4: add helper to check quota inums ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode ext4: fix undefined behavior in bit shift for ext4_check_flag_values ext4: fix use-after-free in ext4_orphan_cleanup fs: ext4: initialize fsdata in pagecache_write() ext4: correct inconsistent error msg in nojournal mode ext4: remove trailing newline from ext4_msg() message ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop ext4: silence the warning when evicting inode with dioread_nolock drm/etnaviv: reap idle mapping if it doesn't match the softpin address drm/ingenic: Fix missing platform_driver_unregister() call in ingenic_drm_init() drm/i915/dsi: fix VBT send packet port selection for dual link DSI drm/etnaviv: move idle mapping reaping into separate function drm/mgag200: Fix PLL setup for G200_SE_A rev >=4 drm/vmwgfx: Validate the box size for the snooped cursor drm/connector: send hotplug uevent on connector cleanup device_cgroup: Roll back to original exceptions after copy failure parisc: Drop PMD_SHIFT from calculation in pgtable.h parisc: Drop duplicate kgdb_pdc console parisc: Add missing FORCE prerequisites in Makefile parisc: Fix locking in pdc_iodc_print() firmware call parisc: Drop locking in pdc console code parisc: led: Fix potential null-ptr-deref in start_task() remoteproc: imx_rproc: Correct i.MX93 DRAM mapping remoteproc: core: Do pm_relax when in RPROC_OFFLINE state remoteproc: imx_dsp_rproc: Add mutex protection for workqueue hugetlb: really allocate vma lock for all sharable vmas test_kprobes: Fix implicit declaration error of test_kprobes iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options iommu/amd: Fix ivrs_acpihid cmdline parsing code phy: qcom-qmp-combo: fix sc8180x reset phy: qcom-qmp-combo: fix sdm845 reset bus: mhi: host: Fix race between channel preparation and M0 event driver core: Fix bus_type.match() error handling in __driver_attach() crypto: ccp - Add support for TEE for PCI ID 0x14CA crypto: n2 - add missing hash statesize riscv: mm: notify remote harts about mmu cache updates riscv: stacktrace: Fixup ftrace_graph_ret_addr retp argument RISC-V: kexec: Fix memory leak of elf header buffer riscv: Fixup compile error with !MMU RISC-V: kexec: Fix memory leak of fdt buffer PCI/sysfs: Fix double free in error path PCI: Fix pci_device_is_present() for VFs by checking PF crypto: ccree,hisilicon - Fix dependencies to correct algorithm um: virt-pci: Avoid GCC non-NULL warning ima: Fix memory leak in __ima_inode_hash() mtd: spi-nor: gigadevice: gd25q256: replace gd25q256_default_init with gd25q256_post_bfpt ipmi: fix use after free in _ipmi_destroy_user() ima: Fix a potential NULL pointer access in ima_restore_measurement_list mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type() ipmi: fix long wait in unload when IPMI disconnect ipu3-imgu: Fix NULL pointer dereference in imgu_subdev_set_selection() ASoC: jz4740-i2s: Handle independent FIFO flush bits wifi: wilc1000: sdio: fix module autoloading efi: Add iMac Pro 2017 to uefi skip cert quirk md/bitmap: Fix bitmap chunk size overflow issues block: mq-deadline: Do not break sequential write streams to zoned HDDs block: mq-deadline: Fix dd_finish_request() for zoned devices drm/amdgpu: fix mmhub register base coding error rtc: ds1347: fix value written to century register ravb: Fix "failed to switch device to config mode" message during unbind cifs: set correct status of tcon ipc when reconnecting cifs: set correct ipc status after initial tree connect cifs: set correct tcon status after initial tree connect cifs: fix missing display of three mount options cifs: fix confusing debug message media: dvb-core: Fix UAF due to refcount races at releasing media: dvb-core: Fix double free in dvb_register_device() ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod arm64: dts: mediatek: mt8195-demo: fix the memory size of node secmon staging: media: tegra-video: fix device_node use after free staging: media: tegra-video: fix chan->mipi value on error tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line tracing: Fix issue of missing one synthetic field tracing/probes: Handle system names with hyphens tracing/hist: Fix wrong return value in parse_action_params() tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE powerpc/ftrace: fix syscall tracing on PPC64_ELF_ABI_V1 tracing: Fix race where eprobes can be called before the event x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK ftrace/x86: Add back ftrace_expected for ftrace bug reports x86/microcode/intel: Do not retry microcode reloading on the APs KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 KVM: x86: fix APICv/x2AVIC disabled when vm reboot by itself KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails KVM: VMX: Resume guest immediately when injecting #GP on ECREATE ima: Fix hash dependency to correct algorithm of/kexec: Fix reading 32-bit "linux,initrd-{start,end}" values xtensa: add __umulsidi3 helper perf/core: Call LSM hook after copying perf_event_attr tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' PCI/DOE: Fix maximum data object length miscalculation ata: ahci: fix enum constants for gcc-13 dm cache: set needs_check flag after aborting metadata dm cache: Fix UAF in destroy() dm clone: Fix UAF in clone_dtr() dm integrity: Fix UAF in dm_integrity_dtr() dm thin: Fix UAF in run_timer_softirq() dm thin: resume even if in FAIL mode dm thin: Use last transaction's pmd->root when commit failed dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort mptcp: use proper req destructor for IPv6 mptcp: dedicated request sock for subflow in v6 mptcp: remove MPTCP 'ifdef' in TCP SYN cookies mptcp: netlink: fix some error return code fs: dlm: retry accept() until -EAGAIN or error returns fs: dlm: fix sock release if listen fails ALSA: usb-audio: Add new quirk FIXED_RATE for JBL Quantum810 Wireless HID: Ignore HP Envy x360 eu0009nv stylus battery platform/x86: x86-android-tablets: Add Advantech MICA-071 extra button platform/x86: x86-android-tablets: Add Lenovo Yoga Tab 3 (YT3-X90F) charger + fuel-gauge data platform/x86: x86-android-tablets: Add Medion Lifetab S10346 data ALSA: hda/cirrus: Add extra 10 ms delay to allow PLL settle and lock. platform/x86: intel-uncore-freq: add Emerald Rapids support platform/x86: ideapad-laptop: Stop writing VPCCMD_W_TOUCHPAD at probe time platform/x86: ideapad-laptop: Send KEY_TOUCHPAD_TOGGLE on some models platform/x86: ideapad-laptop: Only toggle ps2 aux port on/off on select models platform/x86: ideapad-laptop: Do not send KEY_TOUCHPAD* events on probe / resume platform/x86: ideapad-laptop: Refactor ideapad_sync_touchpad_state() ACPI: video: Prefer native over vendor ACPI: video: Simplify __acpi_video_get_backlight_type() platform/x86: ideapad-laptop: support for more special keys in WMI platform/x86: ideapad-laptop: Add new _CFG bit numbers for future use platform/x86: ideapad-laptop: Revert "check for touchpad support in _CFG" platform/x86: thinkpad_acpi: Fix max_brightness of thinklight ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops ALSA: patch_realtek: Fix Dell Inspiron Plus 16 bpf: Resolve fext program type when checking map compatibility media: s5p-mfc: Fix in register read and write for H264 media: s5p-mfc: Clear workbit to handle error condition media: s5p-mfc: Fix to handle reference queue during finishing ext2: unbugger ext2_empty_dir() cpufreq: Init completion before kobject_init_and_add() PM/devfreq: governor: Add a private governor_data for governor random: add helpers for random numbers with given floor or range x86/MCE/AMD: Clear DFR errors found in THR handler selftests: Use optional USERCFLAGS and USERLDFLAGS EDAC/mc_sysfs: Increase legacy channel support to 12 cxl/region: Fix missing probe failure arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength x86/fpu/xstate: Fix XSTATE_WARN_ON() to emit relevant diagnostics random: use rejection sampling for uniform bounded random integers arm64: dts: qcom: sdm850-samsung-w737: correct I2C12 pins drive strength ARM: ux500: do not directly dereference __iomem btrfs: fix resolving backrefs for inline extent followed by prealloc btrfs: fix extent map use-after-free when handling missing device in read_one_chunk btrfs: fix uninitialized parent in insert_state drm/amd/pm: correct SMU13.0.0 pstate profiling clock settings drm/amd/pm: update SMU13.0.0 reported maximum shader clock phy: qcom-qmp-combo: fix out-of-bounds clock access mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K arm64: dts: qcom: sc8280xp: fix UFS reference clocks arm64: dts: qcom: sdm845-db845c: correct SPI2 pins drive strength perf/x86/intel/uncore: Clear attr_update properly perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D jbd2: use the correct print format ktest.pl minconfig: Unset configs instead of just removing them kest.pl: Fix grub2 menu handling for rebooting soc: qcom: Select REMAP_MMIO for ICC_BWMON driver soc: qcom: Select REMAP_MMIO for LLCC driver arm64: Prohibit instrumentation on arch_stack_walk() arm64: dts: qcom: sc8280xp: fix UFS DMA coherency cxl/region: Fix memdev reuse check media: stv0288: use explicitly signed char drm/amdgpu: skip mes self test after s0i3 resume for MES IP v11.0 drm/amdgpu: skip MES for S0ix as well since it's part of GFX Linux 6.1.3 kcsan: Instrument memcpy/memset/memmove with newer Clang SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak tpm: acpi: Call acpi_put_table() to fix memory leak mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING block: Do not reread partition table on exclusively open device f2fs: allow to read node block after shutdown f2fs: should put a page when checking the summary info mm, compaction: fix fast_isolate_around() to stay within boundaries md: fix a crash in mempool_free mfd: mt6360: Add bounds checking in Regmap read/write call-backs pnode: terminate at peers of source ALSA: hda/hdmi: Static PCM mapping again with AMD HDMI codecs ALSA: line6: fix stack overflow in line6_midi_transmit ALSA: line6: correct midi status byte when receiving data from podxt ovl: update ->f_iocb_flags when ovl_change_flags() modifies ->f_flags ovl: Use ovl mounter's fsuid and fsgid in ovl_link() binfmt: Fix error return code in load_elf_fdpic_binary() ACPI: x86: s2idle: Stop using AMD specific codepath for Rembrandt+ ACPI: x86: s2idle: Force AMD GUID/_REV 2 on HP Elitebook 865 hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount pstore/zone: Use GFP_ATOMIC to allocate zone buffer pstore: Properly assign mem_type property kmsan: include linux/vmalloc.h kmsan: export kmsan_handle_urb mm/mempolicy: fix memory leak in set_mempolicy_home_node system call mm, mremap: fix mremap() expanding vma with addr inside vma rtmutex: Add acquire semantics for rtmutex lock acquisition slow path futex: Fix futex_waitv() hrtimer debug object leak on kcalloc error HID: plantronics: Additional PIDs for double volume key presses quirk HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint kprobes: kretprobe events missing on 2-core KVM guest NFSD: fix use-after-free in __nfs42_ssc_open() rtc: msc313: Fix function prototype mismatch in msc313_rtc_probe() powerpc/rtas: avoid scheduling in rtas_os_term() powerpc/rtas: avoid device tree lookups in rtas_os_term() iommu/mediatek: Fix crash on isr after kexec() objtool: Fix SEGFAULT fs/ntfs3: Fix slab-out-of-bounds in r_page fs/ntfs3: Delete duplicate condition in ntfs_read_mft() fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super() fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init() fs/ntfs3: Validate index root when initialize NTFS security phy: sun4i-usb: Add support for the H616 USB PHY phy: sun4i-usb: Introduce port2 SIDDQ quirk soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15 fs/ntfs3: Fix slab-out-of-bounds read in run_unpack fs/ntfs3: Validate resident attribute name fs/ntfs3: Validate buffer length while parsing index fs/ntfs3: Validate attribute name offset fs/ntfs3: Add null pointer check for inode operations fs/ntfs3: Fix memory leak on ntfs_fill_super() error path fs/ntfs3: Add null pointer check to attr_load_runs_vcn fs/ntfs3: Validate data run offset fs/ntfs3: Add overflow check for attribute size fs/ntfs3: Validate BOOT record_size nvmet: don't defer passthrough commands with trivial effects to the workqueue nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition ata: ahci: Fix PCS quirk application for suspend block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq ACPI: video: Fix Apple GMUX backlight detection ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks ACPI: resource: do IRQ override on Lenovo 14ALC7 ACPI: resource: do IRQ override on XMG Core 15 nvme-pci: fix page size checks nvme-pci: fix mempool alloc size nvme-pci: fix doorbell buffer value endianness io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups eventfd: provide a eventfd_signal_mask() helper eventpoll: add EPOLL_URING_WAKE poll wakeup flag Linux 6.1.2 pwm: tegra: Fix 32 bit build mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code drm/amd/display: revert Disable DRR actions during state commit media: dvbdev: fix refcnt bug media: dvbdev: fix build warning due to comments net: stmmac: fix errno when create_singlethread_workqueue() fails io_uring: remove iopoll spinlock io_uring: protect cq_timeouts with timeout_lock io_uring/net: fix cleanup after recycle io_uring/net: ensure compat import handlers clear free_iov io_uring: improve io_double_lock_ctx fail handling io_uring: dont remove file from msg_ring reqs io_uring: add completion locking for iopoll io_uring/net: introduce IORING_SEND_ZC_REPORT_USAGE flag blk-iolatency: Fix memory leak on add_disk() failures scsi: qla2xxx: Fix crash when I/O abort times out mm/gup: disallow FOLL_FORCE|FOLL_WRITE on hugetlb mappings btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range ovl: fix use inode directly in rcu-walk mode fbdev: fbcon: release buffer when fbcon_do_set_font() failed maple_tree: fix mas_spanning_rebalance() on insufficient data test_maple_tree: add test for mas_spanning_rebalance() on insufficient data gcov: add support for checksum field floppy: Fix memory leak in do_floppy_init() spi: fsl_spi: Don't change speed while chipselect is active regulator: core: fix deadlock on regulator enable iio: addac: ad74413r: fix integer promotion bug in ad74413_get_input_current_offset() iio: adc128s052: add proper .data members in adc128_of_match table iio: adc: ad_sigma_delta: do not use internal iio_dev lock iio: fix memory leak in iio_device_register_eventset() reiserfs: Add missing calls to reiserfs_security_free() security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 9p: set req refcount to zero to avoid uninitialized usage loop: Fix the max_loop commandline argument treatment when it is set to 0 HID: mcp2221: don't connect hidraw HID: wacom: Ensure bootloader PID is usable in hidraw mode xhci: Prevent infinite loop in transaction errors recovery for streams usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init usb: dwc3: core: defer probe on ulpi_read_id timeout usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode clk: imx: imx8mp: add shared clk gate for usb suspend clk dt-bindings: clocks: imx8mp: Add ID for usb suspend clock arm64: dts: qcom: sm8250: fix USB-DP PHY registers arm64: dts: qcom: sm6350: fix USB-DP PHY registers usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq usb: cdnsp: fix lack of ZLP for ep0 HID: logitech-hidpp: Guard FF init code against non-USB devices ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB ALSA: usb-audio: add the quirk for KT0206 device ALSA: usb-audio: Workaround for XRUN at prepare dt-bindings: input: iqs7222: Add support for IQS7222A v1.13+ dt-bindings: input: iqs7222: Correct minimum slider size dt-bindings: input: iqs7222: Reduce 'linux,code' to optional Input: iqs7222 - add support for IQS7222A v1.13+ Input: iqs7222 - report malformed properties Input: iqs7222 - drop unused device node references ima: Simplify ima_lsm_copy_rule pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES cfi: Fix CFI failure with KASAN afs: Fix lost servers_outstanding count perf test: Fix "all PMU test" to skip parametrized events MIPS: ralink: mt7621: avoid to init common ralink reset controller perf probe: Check -v and -q options in the right place perf tools: Make quiet mode consistent between tools perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() drm/amd/pm: avoid large variable on kernel stack pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion lkdtm: cfi: Make PAC test work with GCC 7 and 8 LoadPin: Ignore the "contents" argument of the LSM hooks drm/i915/display: Don't disable DDI/Transcoder when setting phy test pattern ASoC: rt5670: Remove unbalanced pm_runtime_put() ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() ASoC: wm8994: Fix potential deadlock ALSA: hda/hdmi: fix stream-id config keep-alive for rt suspend ALSA: hda/hdmi: set default audio parameters for KAE silent-stream ALSA: hda/hdmi: fix i915 silent stream programming flow ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() ASoC: Intel: Skylake: Fix driver hang during shutdown ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove() hwmon: (jc42) Fix missing unlock on error in jc42_write() orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() orangefs: Fix kmemleak in orangefs_sysfs_init() orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() scsi: target: iscsi: Fix a race condition between login_work and the login thread drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() scsi: smartpqi: Correct device removal for multi-actuator devices scsi: smartpqi: Add new controller PCI IDs hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() scsi: elx: libefc: Fix second parameter type in state callbacks Revert "PCI: Clear PCI_STATUS when setting up device" crypto: hisilicon/qm - increase the memory of local variables scsi: ufs: Reduce the START STOP UNIT timeout scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs crypto: hisilicon/hpre - fix resource leak in remove process regulator: core: Fix resolve supply lookup issue Bluetooth: Add quirk to disable MWS Transport Configuration Bluetooth: Add quirk to disable extended scanning Bluetooth: hci_bcm: Add CYW4373A0 support ice: synchronize the misc IRQ when tearing down Tx tracker regulator: core: Use different devices for resource allocation and DT lookup clk: st: Fix memory leak in st_of_quadfs_setup() media: si470x: Fix use-after-free in si470x_int_in_callback() mmc: sdhci-tegra: Issue CMD and DAT resets together mmc: renesas_sdhi: better reset from HS400 mode mmc: renesas_sdhi: add quirk for broken register layout mmc: f-sdh30: Add quirks for broken timeout clock capability nfs: fix possible null-ptr-deref when parsing param selftests/bpf: Fix conflicts with built-in functions in bpf_iter_ksym hwmon: (nct6775) add ASUS CROSSHAIR VIII/TUF/ProArt B550M wifi: mt76: do not run mt76u_status_worker if the device is not running regulator: core: fix use_count leakage when handling boot-on libbpf: Avoid enum forward-declarations in public API in C++ mode ASoC: amd: yc: Add Xiaomi Redmi Book Pro 14 2022 into DMI table drm/amd/display: Fix DTBCLK disable requests and SRC_SEL programming drm/amd/display: Use the largest vready_offset in pipe group drm/amdgpu: Fix potential double free and null pointer dereference ALSA: usb-audio: Add quirk for Tascam Model 12 blk-mq: fix possible memleak when register 'hctx' failed media: mediatek: vcodec: Can't set dst buffer to done when lat decode error media: dvb-usb: fix memory leak in dvb_usb_adapter_init() media: dvbdev: adopts refcnt to avoid UAF media: dvb-frontends: fix leak of memory fw ethtool: avoiding integer overflow in ethtool_phys_id() bpf: Prevent decl_tag from being referenced in func_proto arg bpf: Fix a BTF_ID_LIST bug with CONFIG_DEBUG_INFO_BTF not set drm/amd/display: Fix display corruption w/ VSR enable ppp: associate skb with a device at tx bpf/verifier: Use kmalloc_size_roundup() to match ksize() usage net: ethernet: mtk_eth_soc: drop packets to WDMA if the ring is full mrp: introduce active flags to prevent UAF when applicant uninit ipv6/sit: use DEV_STATS_INC() to avoid data-races net: add atomic_long_t to net_device_stats fields nvme-auth: don't override ctrl keys before validation drm/amd/display: fix array index out of bound error in bios parser drm/amd/display: Workaround to increase phantom pipe vactive in pipesplit md/raid1: stop mdx_raid1 thread when raid1 array run failed md/raid0, raid10: Don't set discard sectors for request queue drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid() drm/sti: Use drm_mode_copy() drm/rockchip: Use drm_mode_copy() drm/msm: Use drm_mode_copy() drm/amd/display: Disable DRR actions during state commit drm/amd/display: Use min transition for SubVP into MPO s390/lcs: Fix return type of lcs_start_xmit() s390/netiucv: Fix return type of netiucv_tx() s390/ctcm: Fix return type of ctc{mp,}m_tx() drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback drm/amdgpu: Fix type of second parameter in trans_msg() callback igb: Do not free q_vector unless new one was allocated HID: uclogic: Add support for XP-PEN Deco LW HID: input: do not query XP-PEN Deco LW battery wifi: brcmfmac: Fix potential NULL pointer dereference in 'brcmf_c_preinit_dcmds()' wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() hamradio: baycom_epp: Fix return type of baycom_send_packet() net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() bpf: make sure skb->len != 0 when redirecting to a tunneling device drm/meson: Fix return type of meson_encoder_cvbs_mode_valid() qed (gcc13): use u16 for fid to be big enough wifi: ath11k: Fix qmi_msg_handler data structure initialization HID: apple: enable APPLE_ISO_TILDE_QUIRK for the keyboards of Macs with the T2 chip HID: apple: fix key translations where multiple quirks attempt to translate the same key blk-mq: avoid double ->queue_rq() because of early timeout drm/rockchip: use pm_runtime_resume_and_get() instead of pm_runtime_get_sync() Revert "drm/amd/display: Limit max DSC target bpp for specific monitors" drm/edid: add a quirk for two LG monitors to get them to work on 10bpc drm/amd/display: prevent memory leak drm/amd/display: skip commit minimal transition state bnx2: Use kmalloc_size_roundup() to match ksize() usage openvswitch: Use kmalloc_size_roundup() to match ksize() usage wifi: ath10k: Delay the unmapping of the buffer ipmi: fix memleak when unload ipmi driver ASoC: Intel: avs: Add quirk for KBL-R RVP platform ASoC: codecs: rt298: Add quirk for KBL-R RVP platform wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out wifi: ath9k: verify the expected usb_endpoints are present brcmfmac: return error when getting invalid max_flowrings from dongle media: imx-jpeg: Disable useless interrupt to avoid kernel panic drm/etnaviv: add missing quirks for GC300 hfs: fix OOB Read in __hfs_brec_find ACPI: x86: Add skip i2c clients quirk for Medion Lifetab S10346 btrfs: do not panic if we can't allocate a prealloc extent state ACPI: x86: Add skip i2c clients quirk for Lenovo Yoga Tab 3 Pro (YT3-X90F) x86/apic: Handle no CONFIG_X86_X2APIC on systems with x2APIC enabled by BIOS acct: fix potential integer overflow in encode_comp_t() nilfs2: fix shift-out-of-bounds due to too large exponent of block size nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() ACPI: video: Add force_native quirk for Sony Vaio VPCY11S1E ACPI: video: Add force_vendor quirk for Sony Vaio PCG-FRV35 ACPI: video: Change Sony Vaio VPCEH3U1E quirk to force_native ACPI: video: Change GIGABYTE GB-BXBT-2807 quirk to force_none thermal/core: Ensure that thermal device is registered in thermal_zone_get_temp ACPICA: Fix error code path in acpi_ds_call_control_method() ACPI: EC: Add quirk for the HP Pavilion Gaming 15-cx0041ur ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value fs: jfs: fix shift-out-of-bounds in dbDiscardAG jfs: Fix fortify moan in symlink udf: Avoid double brelse() in udf_rename() fs: jfs: fix shift-out-of-bounds in dbAllocAG arm64: dts: qcom: sm6350: Add apps_smmu with streamID to SDHCI 1/2 nodes arm64: dts: qcom: sm8450: disable SDHCI SDR104/SDR50 on all boards binfmt_misc: fix shift-out-of-bounds in check_special_flags x86/hyperv: Remove unregister syscore call from Hyper-V cleanup video: hyperv_fb: Avoid taking busy spinlock on panic path ARM: dts: aspeed: rainier,everest: Move reserved memory regions arm64: make is_ttbrX_addr() noinstr-safe rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() net: fec: check the return value of build_skb() HID: amd_sfh: Add missing check for dma_alloc_coherent mctp: Remove device type check at unregister net: dsa: microchip: remove IRQF_TRIGGER_FALLING in request_threaded_irq cifs: don't leak -ENOMEM in smb2_open_file() mctp: serial: Fix starting value for frame check sequence net: stream: purge sk_error_queue in sk_stream_kill_queues() myri10ge: Fix an error handling path in myri10ge_probe() rxrpc: Fix missing unlock in rxrpc_do_sendmsg() net_sched: reject TCF_EM_SIMPLE case for complex ematch module mailbox: zynq-ipi: fix error handling while device_register() fails mailbox: arm_mhuv2: Fix return value check in mhuv2_probe() mailbox: mpfs: read the system controller's status skbuff: Account for tail adjustment during pull operations devlink: protect devlink dump by the instance lock arm64: dts: mt8183: Fix Mali GPU clock soc: mediatek: pm-domains: Fix the power glitch issue openvswitch: Fix flow lookup to use unmasked key selftests: devlink: fix the fd redirect in dummy_reporter_test devlink: hold region lock when flushing snapshots rtc: mxc_v2: Add missing clk_disable_unprepare() igc: Set Qbv start_time and end_time to end_time if not being configured in GCL igc: recalculate Qbv end_time by considering cycle time igc: allow BaseTime 0 enrollment for Qbv igc: Add checking for basetime less than zero igc: Use strict cycles for Qbv scheduling igc: Enhance Qbv scheduling by using first flag bit net: dsa: mv88e6xxx: avoid reg_lock deadlock in mv88e6xxx_setup_port() r6040: Fix kmemleak in probe and remove unix: Fix race in SOCK_SEQPACKET's unix_dgram_sendmsg() nfc: pn533: Clear nfc_target before being used net: enetc: avoid buffer leaks on xdp_do_redirect() failure media: v4l2-ctrls-api.c: add back dropped ctrl->is_new = 1 bpf: prevent leak of lsm program after failed attach selftests/bpf: Select CONFIG_FUNCTION_ERROR_INJECTION block, bfq: fix possible uaf for 'bfqq->bic' mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() bonding: do failover when high prio link up bonding: add missed __rcu annotation for curr_active_slave net: macsec: fix net device access prior to holding a lock nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure iommu/mediatek: Fix forever loop in error handling rtc: pcf85063: fix pcf85063_clkout_control rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() netfilter: flowtable: really fix NAT IPv6 offload mfd: pm8008: Fix return value check in pm8008_probe() mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe() mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ mfd: axp20x: Do not sleep in the power off handler dt-bindings: mfd: qcom,spmi-pmic: Drop PWM reg dependency powerpc/pseries/eeh: use correct API for error log size remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in q6v5_wcss_qcs404_power_on() remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() remoteproc: qcom_q6v5_pas: detach power domains on remove remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() RISC-V: KVM: Fix reg_val check in kvm_riscv_vcpu_set_reg_config() pwm: mediatek: always use bus clock for PWM on MT7622 pwm: mtk-disp: Fix the parameters calculated by the enabled flag of disp_pwm pwm: sifive: Call pwm_sifive_update_clock() while mutex is held iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY iommu/mediatek: Validate number of phandles associated with "mediatek,larbs" iommu/mediatek: Add error path for loop of mm_dts_parse iommu/mediatek: Use component_match_add iommu/mediatek: Add platform_device_put for recovering the device refcnt selftests/powerpc: Fix resource leaks powerpc/hv-gpci: Fix hv_gpci event list powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() powerpc/perf: callchain validate kernel stack pointer bounds powerpc: dts: turris1x.dts: Add channel labels for temperature sensor kprobes: Fix check for probe enabled in kill_kprobe() powerpc/pseries: fix plpks_read_var() code for different consumers powerpc/pseries: Return -EIO instead of -EINTR for H_ABORTED error powerpc/pseries: Fix the H_CALL error code in PLPKS driver powerpc/pseries: fix the object owners enum value in plpks driver powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds cxl: Fix refcount leak in cxl_calc_capp_routing powerpc/52xx: Fix a resource leak in an error handling path macintosh/macio-adb: check the return value of ioremap() macintosh: fix possible memory leak in macio_add_one_device() iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() iommu/amd: Fix pci device refcount leak in ppr_notifier() iommu: Avoid races around device probe iommu/mediatek: Check return value after calling platform_get_resource() rtc: pcf85063: Fix reading alarm rtc: snvs: Allow a time difference on clock register read rtc: cmos: Disable ACPI RTC event on removal rtc: cmos: Rename ACPI-related functions rtc: cmos: Eliminate forward declarations of some functions rtc: cmos: Call rtc_wake_setup() from cmos_do_probe() rtc: cmos: Call cmos_wake_setup() from cmos_do_probe() rtc: pcf2127: Convert to .probe_new() rtc: class: Fix potential memleak in devm_rtc_allocate_device() rtc: rzn1: Check return value in rzn1_rtc_probe dmaengine: idxd: Fix crc_val field for completion record fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs phy: qcom-qmp-pcie: Fix sm8450_qmp_gen4x2_pcie_pcs_tbl[] register names phy: qcom-qmp-pcie: Fix high latency with 4x2 PHY when ASPM is enabled phy: qcom-qmp-pcie: Support SM8450 PCIe1 PHY in EP mode phy: qcom-qmp-pcie: support separate tables for EP mode phy: qcom-qmp-pcie: split pcs_misc init cfg for ipq8074 pcs table phy: qcom-qmp-pcie: split register tables into common and extra parts pwm: tegra: Ensure the clock rate is not less than needed pwm: tegra: Improve required rate calculation include/uapi/linux/swab: Fix potentially missing __always_inline phy: usb: Fix clock imbalance for suspend/resume phy: usb: Use slow clock for wake enabled suspend phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices phy: qcom-qmp-usb: fix sc8280xp PCS_USB offset dmaengine: idxd: Make read buffer sysfs attributes invisible for Intel IAA iommu/rockchip: fix permission bits in page table entries v2 iommu/sun50i: Implement .iotlb_sync_map iommu/sun50i: Fix flush size iommu/sun50i: Fix R/W permission check iommu/sun50i: Consider all fault sources for reset iommu/sun50i: Fix reset release iommu/s390: Fix duplicate domain attachments phy: qcom-qmp-usb: correct registers layout for IPQ8074 USB3 PHY phy: qcom-qmp-usb: drop start and pwrdn-ctrl abstraction phy: qcom-qmp-usb: clean up status polling phy: qcom-qmp-usb: drop power-down delay config phy: qcom-qmp-usb: drop sc8280xp power-down delay phy: qcom-qmp-usb: clean up power-down handling phy: qcom-qmp-pcie: fix ipq6018 initialisation phy: qcom-qmp-pcie: fix ipq8074-gen3 initialisation phy: qcom-qmp-pcie: fix sc8180x initialisation phy: qcom-qmp-pcie: replace power-down delay phy: qcom-qmp-pcie: drop power-down delay config remoteproc: core: Auto select rproc-virtio device id dmaengine: apple-admac: Allocate cache SRAM to channels dmaengine: idxd: Make max batch size attributes in sysfs invisible for Intel IAA phy: qcom-qmp-pcie: drop bogus register update phy: marvell: phy-mvebu-a3700-comphy: Reset COMPHY registers before USB 3.0 power on fs/ntfs3: Harden against integer overflows fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst() RDMA/siw: Fix pointer cast warning perf stat: Do not delay the workload with --delay ftrace: Allow WITH_ARGS flavour of graph tracer with shadow call stack perf off_cpu: Fix a typo in BTF tracepoint name, it should be 'btf_trace_sched_switch' leds: is31fl319x: Fix setting current limit for is31fl319{0,1,3} gfs2: Partially revert gfs2_inode_lookup change power: supply: fix null pointer dereferencing in power_supply_get_battery_info perf branch: Fix interpretation of branch records power: supply: bq25890: Ensure pump_express_work is cancelled on remove power: supply: bq25890: Convert to i2c's .probe_new() power: supply: bq25890: Factor out regulator registration code power: supply: Fix refcount leak in rk817_charger_probe power: supply: ab8500: Fix error handling in ab8500_charger_init() HSI: omap_ssi_core: Fix error handling in ssi_init() power: supply: cw2015: Fix potential null-ptr-deref in cw_bat_probe() power: supply: z2_battery: Fix possible memleak in z2_batt_probe() perf symbol: correction while adjusting symbol perf trace: Handle failure when trace point folder is missed perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number perf trace: Return error if a system call doesn't exist watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running power: supply: fix residue sysfs file in error handle route of __power_supply_register() HSI: omap_ssi_core: fix possible memory leak in ssi_probe() HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() perf stat: Move common code in print_metric_headers() perf stat: Use evsel__is_hybrid() more perf tools: Fix "kernel lock contention analysis" test by not printing warnings in quiet mode led: qcom-lpg: Fix sleeping in atomic fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() fbdev: uvesafb: don't build on UML fbdev: geode: don't build on UML fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() fbdev: vermilion: decrease reference count in error path fbdev: via: Fix error in via_core_init() fbdev: pm2fb: fix missing pci_disable_device() fbdev: ssd1307fb: Drop optional dependency thermal/drivers/qcom/lmh: Fix irq handler return value thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2 thermal/of: Fix memory leak on thermal_of_zone_register() failure thermal/drivers/k3_j72xx_bandgap: Fix the debug print message thermal/drivers/imx8mm_thermal: Validate temperature range samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() ksmbd: Fix resource leak in ksmbd_session_rpc_open() tracing/hist: Fix issue of losting command info in error_log usb: typec: wusb3801: fix fwnode refcount leak in wusb3801_probe() usb: storage: Add check for kcalloc i2c: ismt: Fix an out-of-bounds bug in ismt_access() i2c: mux: reg: check return value after calling platform_get_resource() gpiolib: protect the GPIO device against being dropped while in use by user-space gpiolib: cdev: fix NULL-pointer dereferences vme: Fix error not catched in fake_init() staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() staging: rtl8192u: Fix use after free in ieee80211_rx() i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe vfio/iova_bitmap: refactor iova_bitmap_set() to better handle page boundaries chardev: fix error handling in cdev_device_add() mcb: mcb-parse: fix error handing in chameleon_parse_gdd() drivers: mcb: fix resource leak in mcb_probe() usb: gadget: f_hid: fix refcount leak on error path usb: gadget: f_hid: fix f_hidg lifetime vs cdev usb: core: hcd: Fix return value check in usb_hcd_setup_local_mem() usb: roles: fix of node refcount leak in usb_role_switch_is_parent() tracing/user_events: Fix call print_fmt leak coresight: cti: Fix null pointer error on CTI init before ETM coresight: trbe: remove cpuhp instance node before remove cpuhp state counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update iio: adis: add '__adis_enable_irq()' implementation iio: temperature: ltc2983: make bulk write buffer DMA-safe cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() ocxl: fix pci device refcount leak when calling get_function_0() misc: ocxl: fix possible name leak in ocxl_file_register_afu() test_firmware: fix memory leak in test_firmware_init() habanalabs: fix return value check in hl_fw_get_sec_attest_data() serial: sunsab: Fix error handling in sunsab_init() serial: altera_uart: fix locking in polling mode serial: pch: Fix PCI device refcount leak in pch_request_dma() serial: stm32: move dma_request_chan() before clk_prepare_enable() serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. serial: amba-pl011: avoid SBSA UART accessing DMACR register USB: gadget: Fix use-after-free during usb config switch extcon: usbc-tusb320: Update state on probe even if no IRQ pending usb: musb: omap2430: Fix probe regression for missing resources usb: typec: tipd: Fix typec_unregister_port error paths usb: typec: tipd: Fix spurious fwnode_handle_put in error path usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() usb: typec: Check for ops->exit instead of ops->enter in altmode_exit staging: vme_user: Fix possible UAF in tsi148_dma_list_add interconnect: qcom: sc7180: fix dropped const of qcom_icc_bcm usb: fotg210-udc: Fix ages old endianness issues uio: uio_dmem_genirq: Fix deadlock between irq config and handling uio: uio_dmem_genirq: Fix missing unlock in irq configuration vfio/iova_bitmap: Fix PAGE_SIZE unaligned bitmaps vfio: platform: Do not pass return buffer to ACPI _RST method class: fix possible memory leak in __class_register() drivers: staging: r8188eu: Fix sleep-in-atomic-context bug in rtw_join_timeout_handler serial: 8250_bcm7271: Fix error handling in brcmuart_init() serial: tegra: Read DMA status before terminating drivers: dio: fix possible memory leak in dio_init() riscv: Fix P4D_SHIFT definition for 3-level page table mode f2fs: fix iostat parameter for discard RISC-V: Align the shadow stack IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces hwrng: geode - Fix PCI device refcount leak hwrng: amd - Fix PCI device refcount leak crypto: img-hash - Fix variable dereferenced before check 'hdev->req' riscv: Fix crash during early errata patching RISC-V: Fix MEMREMAP_WB for systems with Svpbmt RISC-V: Fix unannoted hardirqs-on in return to userspace slow-path RDMA/hns: Fix XRC caps on HIP08 RDMA/hns: Fix error code of CMD RDMA/hns: Fix page size cap from firmware RDMA/hns: Fix PBL page MTR find RDMA/hns: Fix AH attr queried by query_qp RDMA/hns: Fix the gid problem caused by free mr orangefs: Fix sysfs not cleanup when dev init failed PCI: vmd: Fix secondary bus reset for Intel bridges RDMA/srp: Fix error return code in srp_parse_options() RDMA/hfi1: Fix error return code in parse_platform_config() RDMA: Disable IB HW for UML riscv/mm: add arch hook arch_clear_hugepage_flags crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() crypto: amlogic - Remove kcalloc without check crypto: qat - fix error return code in adf_probe RDMA/nldev: Fix failure to send large messages f2fs: avoid victim selection from previous victim section f2fs: fix to enable compress for newly created file if extension matches f2fs: set zstd compress level correctly RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() scsi: ufs: core: Fix the polling implementation scsi: snic: Fix possible UAF in snic_tgt_create() scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails scsi: ipr: Fix WARNING in ipr_init() scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() scsi: fcoe: Fix possible name leak when device_register() fails scsi: scsi_debug: Fix a warning in resp_report_zones() scsi: scsi_debug: Fix a warning in resp_verify() scsi: efct: Fix possible memleak in efct_device_init() scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() scsi: hpsa: Fix error handling in hpsa_add_sas_host() scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() crypto: hisilicon/qm - fix 'QM_XEQ_DEPTH_CAP' mask value crypto: arm64/sm3 - fix possible crash with CFI enabled crypto: arm64/sm3 - add NEON assembly implementation crypto: x86/sm4 - fix crash with CFI enabled crypto: x86/sm3 - fix possible crash with CFI enabled crypto: x86/sha512 - fix possible crash with CFI enabled crypto: x86/sha256 - fix possible crash with CFI enabled crypto: x86/sha1 - fix possible crash with CFI enabled crypto: x86/aria - fix crash with CFI enabled crypto: x86/aegis128 - fix possible crash with CFI enabled padata: Fix list iterator in padata_do_serial() padata: Always leave BHs disabled when running ->parallel() crypto: tcrypt - Fix multibuffer skcipher speed test mem leak scsi: hpsa: Fix possible memory leak in hpsa_init_one() PCI: endpoint: pci-epf-vntb: Fix call pci_epc_mem_free_addr() in error path dt-bindings: visconti-pcie: Fix interrupts array max constraints dt-bindings: imx6q-pcie: Fix clock names for imx6sx and imx8mq RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed RDMA/hns: fix memory leak in hns_roce_alloc_mr() RDMA/irdma: Initialize net_type before checking it crypto: ccree - Make cc_debugfs_global_fini() available for module init function RDMA/hfi: Decrease PCI device reference count in error path PCI: Check for alloc failure in pci_request_irq() RDMA/hns: Fix incorrect sge nums calculation RDMA/hns: Fix ext_sge num error when post send RDMA/rxe: Fix mr->map double free crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() crypto: cryptd - Use request context instead of stack for sub-request crypto: ccree - Remove debugfs when platform_driver_register failed scsi: scsi_debug: Fix a warning in resp_write_scat() RDMA/irdma: Do not request 2-level PBLEs for CQ alloc RDMA/irdma: Fix RQ completion opcode RDMA/irdma: Fix inline for multiple SGE's RDMA/siw: Set defined status for work completion with undefined status RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port RDMA/core: Make sure "ib_port" is valid when access sysfs node RDMA/restrack: Release MR restrack when delete f2fs: fix to avoid accessing uninitialized spinlock PCI: imx6: Initialize PHY before deasserting core reset PCI: vmd: Disable MSI remapping after suspend IB/mad: Don't call to function that might sleep while in atomic context RDMA/siw: Fix immediate work request flush to completion queue scsi: qla2xxx: Fix set-but-not-used variable warnings RDMA/irdma: Report the correct link speed f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super() f2fs: fix the assign logic of iocb f2fs: allow to set compression for inlined file f2fs: fix normal discard process f2fs: fix gc mode when gc_urgent_high_remaining is 1 f2fs: fix to invalidate dcc->f2fs_issue_discard in error path fortify: Do not cast to "unsigned char" apparmor: Fix memleak in alloc_ns() crypto: rockchip - rework by using crypto_engine crypto: rockchip - remove non-aligned handling crypto: rockchip - better handle cipher key crypto: rockchip - add fallback for ahash crypto: rockchip - add fallback for cipher crypto: rockchip - do not store mode globally crypto: rockchip - do not do custom power management f2fs: Fix the race condition of resize flag between resizefs PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled RDMA/core: Fix order of nldev_exit call PCI: dwc: Fix n_fts[] array overrun apparmor: Use pointer to struct aa_label for lbs_cred scsi: core: Fix a race between scsi_done() and scsi_timeout() crypto: tcrypt - fix return value for multiple subtests crypto: nitrox - avoid double free on error path in nitrox_sriov_init() crypto: sun8i-ss - use dma_addr instead u32 crypto: hisilicon/qm - re-enable communicate interrupt before notifying PF crypto: hisilicon/qm - fix incorrect parameters usage apparmor: Fix regression in stacking due to label flags apparmor: Fix abi check to include v8 abi apparmor: fix lockdep warning when removing a namespace apparmor: fix a memleak in multi_transaction_new() net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path i40e: Fix the inability to attach XDP program on downed interface stmmac: fix potential division by 0 octeontx2-af: cn10k: mcs: Fix a resource leak in the probe and remove functions Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() Bluetooth: hci_conn: Fix crash on hci_create_cis_sync Bluetooth: Fix EALREADY and ELOOP cases in bt_status() Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS Bluetooth: hci_core: fix error handling in hci_register_dev() sctp: sysctl: make extra pointers netns aware ntb_netdev: Use dev_kfree_skb_any() in interrupt context net: lan9303: Fix read error execution path net: ethernet: ti: am65-cpsw: Fix PM runtime leakage in am65_cpsw_nuss_ndo_slave_open() can: tcan4x5x: Fix use of register error status mask can: m_can: Call the RAM init directly from m_can_chip_config can: tcan4x5x: Remove invalid write in clear_interrupts net: amd-xgbe: Check only the minimum speed for active/passive cables net: amd-xgbe: Fix logic around active and passive cables af_unix: call proto_unregister() in the error path in af_unix_init() net: setsockopt: fix IPV6_UNICAST_IF option for connected sockets net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() net/tunnel: wait until all sk_user_data reader finish before releasing the sock net: farsync: Fix kmemleak when rmmods farsync ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() ipvs: use u64_stats_t for the per-cpu counters drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() net: stmmac: fix possible memory leak in stmmac_dvr_probe() net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() net: defxx: Fix missing err handling in dfx_init() net: vmw_vsock: vmci: Check memcpy_from_msg() clk: socfpga: Fix memory leak in socfpga_gate_init() bpf: Do not zero-extend kfunc return values blktrace: Fix output non-blktrace event when blk_classic option enabled wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() wifi: rtl8xxxu: Fix the channel width reporting wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode clk: samsung: Fix memory leak in _samsung_clk_register_pll() media: staging: stkwebcam: Restore MEDIA_{USB,CAMERA}_SUPPORT dependencies media: coda: Add check for kmalloc media: coda: Add check for dcoda_iram_alloc media: c8sectpfe: Add of_node_put() when breaking out of loop regulator: qcom-labibb: Fix missing of_node_put() in qcom_labibb_regulator_probe() nvme: pass nr_maps explicitly to nvme_alloc_io_tag_set mmc: core: Normalize the error handling branch in sd_read_ext_regs() memstick/ms_block: Add check for alloc_ordered_workqueue mmc: renesas_sdhi: alway populate SCC pointer mmc: mmci: fix return value check of mmc_add_host() mmc: wbsd: fix return value check of mmc_add_host() mmc: via-sdmmc: fix return value check of mmc_add_host() mmc: meson-gx: fix return value check of mmc_add_host() mmc: omap_hsmmc: fix return value check of mmc_add_host() mmc: atmel-mci: fix return value check of mmc_add_host() mmc: litex_mmc: ensure `host->irq == 0` if polling mmc: wmt-sdmmc: fix return value check of mmc_add_host() mmc: vub300: fix return value check of mmc_add_host() mmc: toshsd: fix return value check of mmc_add_host() mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() mmc: rtsx_pci: fix return value check of mmc_add_host() mmc: pxamci: fix return value check of mmc_add_host() mmc: mxcmmc: fix return value check of mmc_add_host() mmc: moxart: fix return value check of mmc_add_host() mmc: alcor: fix return value check of mmc_add_host() hwmon: (emc2305) fix pwm never being able to set lower hwmon: (emc2305) fix unable to probe emc2301/2/3 bpftool: Fix memory leak in do_build_table_cb riscv, bpf: Emit fixed-length instructions for BPF_PSEUDO_FUNC NFSv4.x: Fail client initialisation if state manager thread can't run NFS: Allow very small rsize & wsize again NFSv4.2: Set the correct size scratch buffer for decoding READ_PLUS SUNRPC: Fix missing release socket in rpc_sockname() xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() pinctrl: thunderbay: fix possible memory leak in thunderbay_build_functions() ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt media: ov5640: set correct default link frequency media: saa7164: fix missing pci_disable_device() ALSA: pcm: Set missing stop_operating flag at undoing trigger start bpf, sockmap: fix race in sock_map_free() bpf: Add dummy type reference to nf_conn___init to fix type deduplication hwmon: (jc42) Restore the min/max/critical temperatures on resume hwmon: (jc42) Convert register access and caching to regmap/regcache regulator: core: fix resource leak in regulator_register() configfs: fix possible memory leak in configfs_create_dir() hsr: Synchronize sequence number updates. hsr: Synchronize sending frames to have always incremented outgoing seq nr. hsr: Disable netpoll. hsr: Avoid double remove of a node. hsr: Add a rcu-read lock to hsr_forward_skb(). Revert "net: hsr: use hlist_head instead of list_head for mac addresses" clk: qcom: clk-krait: fix wrong div2 functions clk: qcom: lpass-sc7180: Fix pm_runtime usage clk: qcom: lpass-sc7280: Fix pm_runtime usage regulator: core: fix module refcount leak in set_supply() mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2() wifi: mt76: do not send firmware FW_FEATURE_NON_DL region wifi: mt76: mt7921: Add missing __packed annotation of struct mt7921_clc wifi: mt76: fix coverity overrun-call in mt76_get_txpower() wifi: mt76: mt7921: fix wrong power after multiple SAR set wifi: mt76: mt7915: Fix chainmask calculation on mt7915 DBDC wifi: mt76: mt7915: rework eeprom tx paths and streams init wifi: mt76: mt7921: fix reporting of TX AGGR histogram wifi: mt76: mt7915: fix reporting of TX AGGR histogram wifi: mt76: mt7915: fix mt7915_mac_set_timing() wifi: mt76: mt7921: fix antenna signal are way off in monitor mode wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails wifi: mac80211: fix maybe-unused warning wifi: mac80211: fix memory leak in ieee80211_if_add() wifi: nl80211: Add checks for nla_nest_start() in nl80211_send_iface() spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE bonding: uninitialized variable in bond_miimon_inspect() bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data Input: wistron_btns - disable on UML netfilter: conntrack: set icmpv6 redirects as RELATED clk: visconti: Fix memory leak in visconti_register_pll() ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe drm/i915/bios: fix a memory leak in generate_lfp_data_ptrs drm/amdkfd: Fix memory leakage drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() amdgpu/nv.c: Corrected typo in the video capabilities resolution drm/amd/pm/smu11: BACO is supported when it's in BACO state clk: mediatek: fix dependency of MT7986 ADC clocks ASoC: mediatek: mt8173: Enable IRQ when pdata is ready wifi: iwlwifi: mvm: fix double free on tx path. wifi: rtl8xxxu: Fix use after rcu_read_unlock in rtl8xxxu_bss_info_changed wifi: plfxlc: fix potential memory leak in __lf_x_usb_enable_rx() ALSA: asihpi: fix missing pci_disable_device() NFS: Fix an Oops in nfs_d_automount() NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn NFSv4: Fix a credential leak in _nfs4_discover_trunking() NFSv4.2: Fix initialisation of struct nfs4_label NFSv4.2: Fix a memory stomp in decode_attr_security_label NFSv4.2: Always decode the security label NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding drm/msm/mdp5: fix reading hw revision on db410c platform ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd ASoC: dt-bindings: wcd9335: fix reset line polarity in example drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC media: mediatek: vcodec: Core thread depends on core_list media: mediatek: vcodec: Setting lat buf to lat_list when lat decode error media: mediatek: vcodec: Fix h264 set lat buffer error media: mediatek: vcodec: Fix getting NULL pointer for dst buffer media: amphion: lock and check m2m_ctx in event handler media: amphion: cancel vpu before release instance media: amphion: try to wakeup vpu core to avoid failure media: sun8i-a83t-mipi-csi2: Register async subdev with no sensor attached media: sun6i-mipi-csi2: Register async subdev with no sensor attached media: sun8i-a83t-mipi-csi2: Require both pads to be connected for streaming media: sun6i-mipi-csi2: Require both pads to be connected for streaming x86/boot: Skip realmode init code when running as Xen PV guest media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() media: dvb-core: Fix ignored return value in dvb_register_frontend() pinctrl: pinconf-generic: add missing of_node_put() clk: imx8mn: fix imx8mn_enet_phy_sels clocks list clk: imx8mn: fix imx8mn_sai2_sels clocks list clk: imx: rename video_pll1 to video_pll clk: imx: replace osc_hdmi with dummy clk: imx8mn: rename vpu_pll to m7_alt_pll media: mt9p031: Drop bogus v4l2_subdev_get_try_crop() call from mt9p031_init_cfg() media: imx: imx7-media-csi: Clear BIT_MIPI_DOUBLE_CMPNT for <16b formats media: imon: fix a race condition in send_packet() media: vimc: Fix wrong function called when vimc_init() fails ASoC: mediatek: mt8186: Correct I2S shared clocks ASoC: qcom: cleanup and fix dependency of QCOM_COMMON ASoC: qcom: Add checks for devm_kcalloc drbd: destroy workqueue when drbd device was freed drbd: remove call to memset before free device/resource/connection mtd: maps: pxa2xx-flash: fix memory leak in probe mtd: core: Fix refcount error in del_mtd_device() clk: microchip: check for null return of devm_kzalloc() bonding: fix link recovery in mode 2 when updelay is nonzero selftests/bpf: Mount debugfs in setns_by_fd selftests/bpf: Make sure zero-len skbs aren't redirectable drm/i915/guc: make default_lists const data drm/amdgpu: fix pci device refcount leak clk: rockchip: Fix memory leak in rockchip_clk_register_pll() regulator: core: use kfree_const() to free space conditionally ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT ASoC: Intel: avs: Lock substream before snd_pcm_stop() ASoC: Intel: Skylake: Fix Kconfig dependency wifi: rtw89: fix physts IE page check pinctrl: k210: call of_node_put() clk: imx: imxrt1050: fix IMXRT1050_CLK_LCDIF_APB offsets HID: hid-sensor-custom: set fixed size for custom attributes bpf: Move skb->len == 0 checks into __bpf_redirect clk: imx93: correct enet clock clk: imx93: unmap anatop base in error handling path HID: i2c: let RMI devices decide what constitutes wakeup event bpf: Pin the start cgroup in cgroup_iter_seq_init() clk: imx93: correct the flexspi1 clock setting mtd: spi-nor: Fix the number of bytes for the dummy cycles mtd: spi-nor: hide jedec_id sysfs attribute if not present net: Return errno in sk->sk_prot->get_port(). udp: Clean up some functions. net: ethernet: mtk_eth_soc: fix RSTCTRL_PPE{0,1} definitions media: videobuf-dma-contig: use dma_mmap_coherent media: amphion: Fix error handling in vpu_driver_init() media: platform: exynos4-is: Fix error handling in fimc_md_init() media: solo6x10: fix possible memory leak in solo_sysfs_init() media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() media: amphion: apply vb2_queue_error instead of setting manually media: amphion: add lock around vdec_g_fmt net: ethernet: mtk_eth_soc: do not overwrite mtu configuration running reset routine ASoC: amd: acp: Fix possible UAF in acp_dma_open Input: elants_i2c - properly handle the reset GPIO when power is off mtd: lpddr2_nvm: Fix possible null-ptr-deref drm/msm/a6xx: Fix speed-bin detection vs probe-defer wifi: ath10k: Fix return value in ath10k_pci_init() selftests/bpf: fix memory leak of lsm_cgroup dm: track per-add_disk holder relations in DM dm: make sure create and remove dm device won't race with open and close table dm: cleanup close_table_device dm: cleanup open_table_device block: clear ->slave_dir when dropping the main slave_dir reference ima: Fix misuse of dereference of pointer in template_desc_init_fields() integrity: Fix memory leakage in keyring allocation error path ALSA: memalloc: Allocate more contiguous pages for fallback case drm/fourcc: Fix vsub/hsub for Q410 and Q401 regulator: qcom-rpmh: Fix PMR735a S3 regulator spec wifi: rtw89: Fix some error handling path in rtw89_core_sta_assoc() nvme: return err on nvme_init_non_mdts_limits fail amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() nvmet: only allocate a single slab for bvecs ASoC: pxa: fix null-pointer dereference in filter() drm/mediatek: Modify dpi power on/off sequence. selftests/bpf: Fix incorrect ASSERT in the tcp_hdr_options test selftests/bpf: Fix xdp_synproxy compilation failure in 32-bit arch ASoC: codecs: wsa883x: use correct header file ASoC: codecs: wsa883x: Use proper shutdown GPIO polarity module: Fix NULL vs IS_ERR checking for module_get_next_page wifi: iwlwifi: mei: fix potential NULL-ptr deref after clone wifi: iwlwifi: mei: avoid blocking sap messages handling due to rtnl lock wifi: iwlwifi: mei: fix tx DHCP packet for devices with new Tx API wifi: iwlwifi: mei: don't send SAP commands if AMT is disabled wifi: iwlwifi: mei: make sure ownership confirmed message is sent pinctrl: mediatek: fix the pinconf register offset of some pins dt-bindings: pinctrl: update uart/mmc bindings for MT7986 SoC drm/radeon: Add the missed acpi_put_table() to fix memory leak bfq: fix waker_bfqq inconsistency crash drbd: use blk_queue_max_discard_sectors helper regmap-irq: Use the new num_config_regs property in regmap_add_irq_chip_fwnode drm: rcar-du: Drop leftovers dependencies from Kconfig wifi: rtw89: use u32_encode_bits() to fill MAC quota value drm: lcdif: Set and enable FIFO Panic threshold rxrpc: Fix ack.bufferSize to be 0 when generating an ack net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() virt/sev-guest: Add a MODULE_ALIAS clk: renesas: r8a779f0: Fix SCIF parent clocks clk: renesas: r8a779f0: Fix HSCIF parent clocks media: camss: Do not attach an already attached power domain on MSM8916 platform media: camss: Clean up received buffers on failed start of streaming wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port Input: joystick - fix Kconfig warning for JOYSTICK_ADC mtd: core: fix possible resource leak in init_mtd() mtd: Fix device name leak when register device failed in add_mtd_device() clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs clk: qcom: dispcc-sm6350: Add CLK_OPS_PARENT_ENABLE to pixel&byte src clk: qcom: gcc-ipq806x: use parent_data for the last remaining entry bpf: propagate precision across all frames, not just the last one bpf: propagate precision in ALU/ALU64 operations media: platform: exynos4-is: fix return value check in fimc_md_probe() media: vivid: fix compose size exceed boundary media: rkvdec: Add required padding media: platform: mtk-mdp3: fix error handling in mdp_probe() media: platform: mtk-mdp3: fix error handling about components clock_on media: platform: mtk-mdp3: fix error handling in mdp_cmdq_send() drm/msm/dsi: Prevent signed BPG offsets from bleeding into adjacent bits drm/msm/dsi: Disallow 8 BPC DSC configuration for alternative BPC values drm/msm/dsi: Account for DSC's bits_per_pixel having 4 fractional bits drm/msm/dsi: Migrate to drm_dsc_compute_rc_parameters() drm/msm/dsi: Appropriately set dsc->mux_word_size based on bpc drm/msm/dsi: Reuse earlier computed dsc->slice_chunk_size drm/msm/dsi: Use DIV_ROUND_UP instead of conditional increment on modulo drm/msm/dsi: Remove repeated calculation of slice_per_intf drm/msm/dsi: Remove useless math in DSC calculations drm/msm/dpu1: Account for DSC's bits_per_pixel having 4 fractional bits bpf: Fix slot type check in check_stack_write_var_off bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID drm/msm/hdmi: use devres helper for runtime PM management ima: Handle -ESTALE returned by ima_filter_rule_match() drm/msm/mdp5: stop overriding drvdata drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure spi: Update reference to struct spi_controller drm/panel/panel-sitronix-st7701: Fix RTNI calculation drm: lcdif: change burst size to 256B clk: renesas: r9a06g032: Repair grave increment error drm/i915/dgfx: Grab wakeref at i915_ttm_unmap_virtual drm/i915: Encapsulate lmem rpm stuff in intel_runtime_pm drm/i915: Refactor ttm ghost obj detection drm/i915: Handle all GTs on driver (un)load paths drm/rockchip: lvds: fix PM usage counter unbalance in poweron drm/amd/display: wait for vblank during pipe programming dw9768: Enable low-power probe on ACPI drm/i915/guc: Fix GuC error capture sizing estimation and reporting drm/i915/guc: Add error-capture init warnings when needed ASoC: dt-bindings: rt5682: Set sound-dai-cells to 1 clk: renesas: r8a779a0: Fix SD0H clock name clk: renesas: r8a779f0: Fix SD0H clock name can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming can: kvaser_usb: Add struct kvaser_usb_busparams can: kvaser_usb_leaf: Fix bogus restart events can: kvaser_usb_leaf: Fix wrong CAN state after stopping can: kvaser_usb_leaf: Fix improved state not being reported can: kvaser_usb_leaf: Set Warning state even without bus errors can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device libbpf: Btf dedup identical struct test needs check for nested structs/arrays media: exynos4-is: don't rely on the v4l2_async_subdev internals media: i2c: ov5648: Free V4L2 fwnode data on unbind soreuseport: Fix socket selection for SO_INCOMING_CPU. venus: pm_helpers: Fix error check in vcodec_domains_get() media: i2c: ad5820: Fix error path media: i2c: hi846: Fix memory leak in hi846_parse_dt() drm/i915: Fix compute pre-emption w/a to apply to compute engines drm/i915/guc: Limit scheduling properties to avoid overflow media: mediatek: vcodec: fix h264 cavlc bitstream fail media: cedrus: hevc: Fix offset adjustments media: v4l2-ioctl.c: Unify YCbCr/YUV terms in format descriptions media: adv748x: afe: Select input port when initializing AFE media: amphion: reset instance if it's aborted before codec header parsed media: coda: jpeg: Add check for kmalloc media: v4l2-ctrls: Fix off-by-one error in integer menu control check Input: iqs7222 - protect against undefined slider size drm/bridge: it6505: Initialize AUX channel in it6505_i2c_probe selftests/bpf: fix missing BPF object files samples/bpf: Fix MAC address swapping in xdp2_kern samples/bpf: Fix map iteration in xdp1_user net: ethernet: adi: adin1110: Fix SPI transfers drm/amdgpu/powerplay/psm: Fix memory leak in power state init drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10 properly" ipmi: kcs: Poll OBF briefly to reduce OBE latency ASoC: Intel: avs: Fix potential RX buffer overflow ASoC: Intel: avs: Fix DMA mask assignment pinctrl: ocelot: add missing destroy_workqueue() in error path in ocelot_pinctrl_probe() ata: libata: fix NCQ autosense logic drm: lcdif: Switch to limited range for RGB to YUV conversion libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() libbpf: Deal with section with no data gracefully libbpf: Use elf_getshdrnum() instead of e_shnum selftest/bpf: Fix error usage of ASSERT_OK in xdp_adjust_tail.c selftests/bpf: Fix error failure of case test_xdp_adjust_tail_grow selftest/bpf: Fix memory leak in kprobe_multi_test selftests/bpf: Fix memory leak caused by not destroying skeleton libbpf: Fix memory leak in parse_usdt_arg() libbpf: Fix use-after-free in btf_dump_name_dups drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge wifi: ath11k: fix firmware assert during bandwidth change for peer sta wifi: rtl8xxxu: Fix reading the vendor of combo chips wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() drm/atomic-helper: Don't allocate new plane state in CRTC check wifi: mac80211: fix ifdef symbol name wifi: mac80211: check link ID in auth/assoc continuation wifi: mac80211: mlme: fix null-ptr deref on failed assoc wifi: fix multi-link element subelement iteration selftests/bpf: Add missing bpf_iter_vma_offset__destroy call platform/mellanox: mlxbf-pmc: Fix event typo ipc: fix memory leak in init_mqueue_fs() rapidio: devices: fix missing put_device in mport_cdev_open hfs: Fix OOB Write in hfs_asc2mac relay: fix type mismatch when allocating memory in relay_create_buf() eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD rapidio: fix possible UAF when kfifo_alloc() fails fs: sysv: Fix sysv_nblocks() returns wrong value NFSD: pass range end to vfs_fsync_range() instead of count nfsd: return error if nfs4_setacl fails lockd: set other missing fields when unlocking files MIPS: OCTEON: warn only once if deprecated link status is being used MIPS: BCM63xx: Add check for NULL for clk in clk_enable platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() platform/chrome: cros_ec_typec: zero out stale pointers erofs: validate the extent length for uncompressed pclusters erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails erofs: Fix pcluster memleak when its block address is zero erofs: check the uniqueness of fsid in shared domain in advance PM: runtime: Do not call __rpm_callback() from rpm_idle() xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() x86/xen: Fix memory leak in xen_init_lock_cpu() x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock() clocksource/drivers/timer-ti-dm: Fix warning for omap_timer_match cpu/hotplug: Do not bail-out in DYING/STARTING sections cpu/hotplug: Make target_store() a nop when target == state futex: Resend potentially swallowed owner death notification clocksource/drivers/sh_cmt: Access registers according to spec rapidio: rio: fix possible name leak in rio_register_mport() rapidio: fix possible name leaks when rio_add_device() fails ocfs2: fix memory leak in ocfs2_mount_volume() debugfs: fix error when writing negative value to atomic_t debugfs file lib/notifier-error-inject: fix error when writing -errno to debugfs file libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() genirq/irqdesc: Don't try to remove non-existing sysfs files nfsd: don't call nfsd_file_put from client states seqfile display NFSD: Finish converting the NFSv3 GETACL result encoder NFSD: Finish converting the NFSv2 GETACL result encoder EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() irqchip/loongson-liointc: Fix improper error handling in liointc_init() irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() irqchip/loongson-pch-pic: Fix translate callback for DT path thermal: core: fix some possible name leaks in error paths platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() ACPI: pfr_update: use ACPI_FREE() to free acpi_object ACPI: pfr_telemetry: use ACPI_FREE() to free acpi_object mailbox: pcc: Reset pcc_chan_count to zero in case of PCC probe failure PNP: fix name memory leak in pnp_alloc_dev() selftests/efivarfs: Add checking of the test return value MIPS: vpe-cmp: fix possible memory leak while module exiting MIPS: vpe-mt: fix possible memory leak while module exiting cpufreq: qcom-hw: Fix the frequency returned by cpufreq_driver->get() selftests: cgroup: fix unsigned comparison with less than zero ocfs2: fix memory leak in ocfs2_stack_glue_init() lib/fonts: fix undefined behavior in bit shift for get_default_font proc: fixup uptime selftest timerqueue: Use rb_entry_safe() in timerqueue_getnext() platform/x86: huawei-wmi: fix return value calculation lib/debugobjects: fix stat count and optimize debug_objects_mem_init perf: Fix possible memleak in pmu_dev_alloc() selftests/ftrace: event_triggers: wait longer for test_event_enable ACPI: irq: Fix some kernel-doc issues x86/split_lock: Add sysctl to control the misery mode cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() fs: don't audit the capability check in simple_xattr_list() PM: hibernate: Fix mistake in kerneldoc comment x86/sgx: Reduce delay and interference of enclave release sched/psi: Fix possible missing or delayed pending event alpha: fix syscall entry in !AUDUT_SYSCALL case alpha: fix TIF_NOTIFY_SIGNAL handling cpuidle: dt: Return the correct numbers of parsed idle states sched/uclamp: Cater for uclamp in find_energy_efficient_cpu()'s early exit condition sched/uclamp: Make cpu_overutilized() use util_fits_cpu() sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() sched/uclamp: Make select_idle_capacity() use util_fits_cpu() sched/uclamp: Fix fits_capacity() check in feec() sched/uclamp: Make task_fits_capacity() use util_fits_cpu() sched/uclamp: Fix relationship between uclamp and migration margin ovl: remove privs in ovl_fallocate() ovl: remove privs in ovl_copyfile() tpm/tpm_crb: Fix error message in __crb_relinquish_locality() tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init() tpm: Add flag to use default cancellation policy tpm: tis_i2c: Fix sanity check interrupt enable mask arch: arm64: apple: t8103: Use standard "iommu" node name pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP ARM: mmp: fix timer_read delay pstore/ram: Fix error return code in ramoops_probe() seccomp: Move copy_seccomp() to no failure path. drivers/perf: hisi: Fix some event id for hisi-pcie-pmu soc: apple: rtkit: Stop casting function pointer signatures soc: apple: sart: Stop casting function pointer signatures arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC ARM: dts: turris-omnia: Add switch port 6 node ARM: dts: turris-omnia: Add ethernet aliases ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port arm64: dts: mt7986: move wed_pcie node arm64: tegra: Fix non-prefetchable aperture of PCIe C3 controller arm64: tegra: Fix Prefetchable aperture ranges of Tegra234 PCIe controllers arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings arm64: dts: mt2712-evb: Fix usb vbus regulators unit names arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names arm64: dts: mt2712e: Fix unit address for pinctrl node arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators arm64: dts: mt6779: Fix devicetree build warnings arm64: dts: mt7896a: Fix unit_address_vs_reg warning for oscillator arm64: dts: mediatek: mt8195: Fix CPUs capacity-dmips-mhz ARM: dts: nuvoton: Remove bogus unit addresses from fixed-partition nodes riscv: dts: microchip: remove pcie node from the sev kit arm64: dts: ti: k3-j721s2: Fix the interrupt ranges property for main & wkup gpio intr arm64: dts: ti: k3-j7200-mcu-wakeup: Drop dma-coherent in crypto node arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() drivers: perf: marvell_cn10k: Fix hotplug callback leak in tad_pmu_init() perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() arm64: mm: kfence: only handle translation faults soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe riscv: dts: microchip: fix the icicle's #pwm-cells arm: dts: spear600: Fix clcd interrupt arm64: dts: qcom: sc7280: Mark all Qualcomm reference boards as LTE soc/tegra: cbb: Check firewall before enabling error reporting soc/tegra: cbb: Add checks for potential out of bound errors soc/tegra: cbb: Update slave maps for Tegra234 soc/tegra: cbb: Use correct master_id mask for CBB NOC in Tegra194 arm64: dts: mt7986: fix trng node name soc: sifive: ccache: fix missing of_node_put() in sifive_ccache_init() soc: sifive: ccache: fix missing free_irq() in error path in sifive_ccache_init() soc: sifive: ccache: fix missing iounmap() in error path in sifive_ccache_init() dt-bindings: pwm: fix microchip corePWM's pwm-cells arm64: dts: renesas: r9a09g011: Fix I2C SoC specific strings arm64: dts: renesas: r9a09g011: Fix unit address format error arm64: dts: renesas: r8a779f0: Fix SCIF "brg_int" clock arm64: dts: renesas: r8a779f0: Fix HSCIF "brg_int" clock arm64: dts: qcom: sm6125: fix SDHCI CQE reg names arm64: dts: qcom: pm6350: Include header for KEY_POWER soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index arm64: dts: qcom: sm6350: drop bogus DP PHY clock arm64: dts: qcom: sm8250: drop bogus DP PHY clock arm64: dts: qcom: sc7280: fix codec reset line polarity for CRD 1.0/2.0 arm64: dts: qcom: sc7280: fix codec reset line polarity for CRD 3.0/3.1 arm64: dts: qcom: sm8250-mtp: fix reset line polarity arm64: dts: qcom: msm8996: fix sound card reset line polarity arm64: dts: qcom: sm8450: fix UFS PHY registers arm64: dts: qcom: sm8350: fix UFS PHY registers arm64: dts: qcom: sm8250: fix UFS PHY registers arm64: dts: qcom: sm8150: fix UFS PHY registers soc: qcom: llcc: make irq truly optional arm64: dts: qcom: sc7180-trogdor-homestar: fully configure secondary I2S pins arm64: dts: qcom: sm8250: correct LPASS pin pull down arm64: dts: qcom: pm660: Use unique ADC5_VCOIN address in node name riscv: dts: microchip: fix memory node unit address for icicle firmware: ti_sci: Fix polled mode during system suspend drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static ARM: dts: stm32: Fix AV96 WLAN regulator gpio property ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96 objtool, kcsan: Add volatile read/write instrumentation to whitelist memory: renesas-rpc-if: Clear HS bit during hardware initialization arm64: dts: fsd: fix drive strength values as per FSD HW UM arm64: dts: fsd: fix drive strength macros as per FSD HW UM arm64: dts: qcom: msm8916: Drop MSS fallback compatible arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias arm64: dts: qcom: sdm630: fix UART1 pin bias ARM: dts: qcom: apq8064: fix coresight compatible arm64: dts: qcom: msm8996: fix GPU OPP table arm64: dts: qcom: msm8996: fix supported-hw in cpufreq OPP tables arm64: dts: qcom: msm8996: Add MSM8996 Pro support arm64: dts: qcom: sdm845-xiaomi-polaris: fix codec pin conf name arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins arm64: dts: renesas: r8a779g0: Fix HSCIF0 "brg_int" clock usb: musb: remove extra check in musb_gadget_vbus_draw MIPS: DTS: CI20: fix reset line polarity of the ethernet controller Conflicts: BUILD.bazel Documentation/devicetree/bindings Documentation/devicetree/bindings/display/msm/dsi-controller-main.yaml Documentation/devicetree/bindings/display/msm/dsi-phy-10nm.yaml Documentation/devicetree/bindings/display/msm/dsi-phy-14nm.yaml Documentation/devicetree/bindings/display/msm/dsi-phy-28nm.yaml Documentation/devicetree/bindings/i2c/renesas,rzv2m.yaml Documentation/devicetree/bindings/input/azoteq,iqs7222.yaml Documentation/devicetree/bindings/mfd/qcom,spmi-pmic.yaml Documentation/devicetree/bindings/pci/fsl,imx6q-pcie.yaml Documentation/devicetree/bindings/pci/toshiba,visconti-pcie.yaml Documentation/devicetree/bindings/phy/amlogic,g12a-usb2-phy.yaml Documentation/devicetree/bindings/phy/amlogic,g12a-usb3-pcie-phy.yaml Documentation/devicetree/bindings/pinctrl/mediatek,mt7986-pinctrl.yaml Documentation/devicetree/bindings/pwm/microchip,corepwm.yaml Documentation/devicetree/bindings/regulator/samsung,s2mps14.yaml Documentation/devicetree/bindings/riscv/cpus.yaml Documentation/devicetree/bindings/sound/everest,es8326.yaml Documentation/devicetree/bindings/sound/qcom,wcd9335.txt Documentation/devicetree/bindings/sound/rt5682.txt android/abi_gki_aarch64_qcom arch/arm64/configs/consolidate.fragment drivers/cpufreq/qcom-cpufreq-hw.c drivers/iommu/arm/arm-smmu/arm-smmu.c drivers/remoteproc/qcom_q6v5_pas.c drivers/soc/qcom/llcc-qcom.c Change-Id: I9ced078ad63f02eba29fb515fb17f2e461ce49b6 Signed-off-by: jianzhou <quic_jianzhou@quicinc.com>	2023-02-21 22:03:33 -08:00
jianzhou	5eefc0e780	Merge keystone/android14-6.1-keystone-qcom-release.6.1.1 (925907e) into msm-pineapple ... * refs/heads/tmp-925907e: ANDROID: GKI: Remove CONFIG_LOCALVERSION="-mainline" on 6.1 branch ANDROID: gki_defconfig: sample large page_alloc allocations with HW_TAGS KASAN FROMLIST: kasan: allow sampling page_alloc allocations for HW_TAGS ANDROID: fscrypt, blk-crypto: drop HW-wrapped key compatibility check ANDROID: GKI: Enable CONFIG_NF_CONNTRACK_PROCFS ANDROID: mm: arm64: Allow remapping logical mappings as uncached ANDROID: fuse-bpf: Fix crash from assuming iter is kvec ANDROID: fuse-bpf: Add /sys/fs flags for fuse-bpf version ANDROID: fuse-bpf: Make sure to declare functions ANDROID: fuse-bpf v1.1 ANDROID: KVM: arm64: Add helper for pKVM modules addr conversion ANDROID: timer: Add vendor hook for timer calc index ANDROID: KVM: arm64: Fix calculation for number of relocs in .hyp.reloc ANDROID: KVM: arm64: Ignore modules with empty .hyp.text section Revert "ANDROID: KVM: arm64: Make gen-hyprel emit delimiters" ANDROID: KVM: arm64: Resolve hyp module addresses using ELF sections ANDROID: dma-buf: Add vendorhook to allow mmaping more memory than a DMA-BUF holds ANDROID: fips140: add fips140_lab_util program ANDROID: fips140: add kernel crypto module ANDROID: arm64: simd: omit capability check in may_use_simd() ANDROID: arm64: disable LSE when building the FIPS140 module ANDROID: arm64: only permit certain alternatives in the FIPS140 module ANDROID: jump_label: disable jump labels in fips140.ko ANDROID: crypto: define fips_enabled to 1 in fips140.ko ANDROID: crypto: lib/aes - add vendor hooks for AES library routines ANDROID: crypto: lib/sha256 - add vendor hook for sha256() routine ANDROID: kbuild: customize module linker script for fips140 module ANDROID: GKI: Remove usage of __GENKSYMS__ in vendor hooks source ANDROID: iommu: Add vendor hook to alloc_iova() ANDROID: iommu: Add vendor hook to select alloc_iova algorithm ANDROID: iommu: Add a vendor field in iova_domain ANDROID: usb: gadget: f_accessory: update SS/SSP descriptors ANDROID: kbuild: Search external devicetree path when running clean target Revert "ANDROID: KVM: arm64: Coalesce host stage2 entries on ownership reclaim" ANDROID: KVM: arm64: Keep the pKVM private range under 1GiB ANDROID: KVM: arm64: Specify stage-2-protected regions in DT ANDROID: KVM: arm64: Introduce concept of pKVM moveable regions ANDROID: KVM: arm64: Correctly flag MMIO pages as PKVM_PAGE_RESTRICTED_PROT ANDROID: KVM: arm64: Introduce default_host_prot() ANDROID: KVM: arm64: Introduce a hyp panic module notifier ANDROID: KVM: arm64: Expose linear map APIs to pKVM modules ANDROID: scheduler: add vendor-specific wake flag ANDROID: Add a vendor hook that allow a module to modify the wake flag ANDROID: futex: Add vendor hook for wait queue ANDROID: rwsem: Add vendor hook to the rw-semaphore FROMLIST: sched/pelt: Introduce PELT multiplier ANDROID: GKI: Export clocksource_mmio_init ANDROID: update "fscrypt: add support for hardware-wrapped keys" to v7 ANDROID: update "dm: add support for passing through derive_sw_secret" ANDROID: update "block: add basic hardware-wrapped key support" to v7 ANDROID: dm-default-key: update for blk-crypto changes UPSTREAM: blk-crypto: Add a missing include directive UPSTREAM: blk-crypto: move internal only declarations to blk-crypto-internal.h BACKPORT: blk-crypto: add a blk_crypto_config_supported_natively helper BACKPORT: blk-crypto: don't use struct request_queue for public interfaces f2fs: let's avoid panic if extent_tree is not created f2fs: should use a temp extent_info for lookup f2fs: don't mix to use union values in extent_info f2fs: initialize extent_cache parameter f2fs: fix to avoid NULL pointer dereference in f2fs_issue_flush() ANDROID: update the BRANCH constant ANDROID: inline isolate_and_split_free_page ANDROID: mm: compaction: fix isolate_and_split_free_page() redefinition ANDROID: implement wrapper for reverse migration ANDROID: KVM: Remove function_nocfi() leftover in pKVM modules ANDROID: KVM: arm64: Always declare pKVM module loading functions ANDROID: GKI: Source GKI_BUILD_CONFIG_FRAGMENT after setting all variables ANDROID: cpuidle: export cpuidle_driver_state_disabled UPSTREAM: mm/madvise: fix madvise_pageout for private file mappings ANDROID: KVM: arm64: Allow trap handling from pKVM modules ANDROID: KVM: arm64: Notify pKVM modules of PSCI events ANDROID: KVM: arm64: Allow handling illegal aborts from pKVM modules ANDROID: KVM: arm64: Allow SMC handling from pKVM modules fscrypt: add additional documentation for SM4 support fscrypt: remove unused Speck definitions fscrypt: Add SM4 XTS/CTS symmetric algorithm support blk-crypto: Add support for SM4-XTS blk crypto mode blk-crypto: pass a gendisk to blk_crypto_sysfs_{,un}register fscrypt: add comment for fscrypt_valid_enc_modes_v1() blk-crypto: Add a missing include directive blk-crypto: move internal only declarations to blk-crypto-internal.h blk-crypto: add a blk_crypto_config_supported_natively helper blk-crypto: don't use struct request_queue for public interfaces fscrypt: pass super_block to fscrypt_put_master_key_activeref() Linux 6.1.1 KEYS: encrypted: fix key instantiation with user-provided data cifs: fix oops during encryption usb: dwc3: pci: Update PCIe device ID for USB3 controller on CPU sub-system for Raptor Lake usb: typec: ucsi: Resume in separate work igb: Initialize mailbox message for VF reset staging: r8188eu: fix led register settings xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook USB: serial: f81534: fix division by zero on line-speed change USB: serial: f81232: fix division by zero on line-speed change USB: serial: cp210x: add Kamstrup RF sniffer PIDs USB: serial: option: add Quectel EM05-G modem usb: gadget: uvc: Prevent buffer overflow in setup handler udf: Fix extending file within last block udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size udf: Fix preallocation discarding at indirect extent boundary udf: Discard preallocation before extending file with a hole irqchip/ls-extirq: Fix endianness detection mips: ralink: mt7621: do not use kzalloc too early mips: ralink: mt7621: soc queries and tests as functions mips: ralink: mt7621: define MT7621_SYSC_BASE with __iomem PCI: mt7621: Add sentinel to quirks table libbpf: Fix uninitialized warning in btf_dump_dump_type_data x86/vdso: Conditionally export __vdso_sgx_enter_enclave() Revert "ANDROID: GKI: remove CONFIG_CMDLINE_EXTEND from arm64 gki_defconfig" ANDROID: Revert "arm64: Drop support for CMDLINE_EXTEND" ANDROID: of: Support CONFIG_CMDLINE_EXTEND config option FROMGIT: asm-generic/io: Add _RET_IP_ to MMIO trace for more accurate debug info ANDROID: firmware_loader: Add support for customer firmware paths ANDROID: GKI: Enable CONFIG_RT_SOFTIRQ_AWARE_SCHED FROMLIST: trace: Add trace points for tasklet entry/exit FROMLIST: softirq: defer softirq processing to ksoftirqd if CPU is busy with RT FROMLIST: sched: Avoid placing RT threads on cores handling long softirqs FROMLIST: softirq: Add generic accessor to percpu softirq_pending data ANDROID: sched/cpuset: Add vendor hook to change tasks affinity ANDROID: cpuset: Make cpusets restore on hotplug fsverity: simplify fsverity_get_digest() fsverity: stop using PG_error to track error status f2fs: reset wait_ms to default if any of the victims have been selected f2fs: fix some format WARNING in debug.c and sysfs.c f2fs: don't call f2fs_issue_discard_timeout() when discard_cmd_cnt is 0 in f2fs_put_super() f2fs: fix iostat parameter for discard f2fs: Fix spelling mistake in label: free_bio_enrty_cache -> free_bio_entry_cache f2fs: add block_age-based extent cache f2fs: allocate the extent_cache by default f2fs: refactor extent_cache to support for read and more f2fs: remove unnecessary __init_extent_tree f2fs: move internal functions into extent_cache.c f2fs: specify extent cache for read explicitly f2fs: introduce f2fs_is_readonly() for readability f2fs: remove F2FS_SET_FEATURE() and F2FS_CLEAR_FEATURE() macro f2fs: do some cleanup for f2fs module init MAINTAINERS: Add f2fs bug tracker link f2fs: remove the unused flush argument to change_curseg f2fs: open code allocate_segment_by_default f2fs: remove struct segment_allocation default_salloc_ops f2fs: introduce discard_urgent_util sysfs node f2fs: define MIN_DISCARD_GRANULARITY macro f2fs: init discard policy after thread wakeup f2fs: avoid victim selection from previous victim section f2fs: truncate blocks in batch in __complete_revoke_list() f2fs: make __queue_discard_cmd() return void f2fs: fix description about discard_granularity node f2fs: move set_file_temperature into f2fs_new_inode f2fs: fix to enable compress for newly created file if extension matches f2fs: set zstd compress level correctly f2fs: change type for 'sbi->readdir_ra' f2fs: cleanup for 'f2fs_tuning_parameters' function f2fs: fix to alloc_mode changed after remount on a small volume device f2fs: remove submit label in __submit_discard_cmd() f2fs: fix to do sanity check on i_extra_isize in is_alive() f2fs: introduce F2FS_IOC_START_ATOMIC_REPLACE f2fs: fix to set flush_merge opt and show noflush_merge f2fs: initialize locks earlier in f2fs_fill_super() f2fs: optimize iteration over sparse directories f2fs: fix to avoid accessing uninitialized spinlock f2fs: correct i_size change for atomic writes f2fs: add proc entry to show discard_plist info f2fs: allow to read node block after shutdown f2fs: replace ternary operator with max() f2fs: replace gc_urgent_high_remaining with gc_remaining_trials f2fs: add missing bracket in doc f2fs: use sysfs_emit instead of sprintf f2fs: introduce gc_mode sysfs node f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super() f2fs: fix return val in f2fs_start_ckpt_thread() f2fs: fix the msg data type f2fs: fix the assign logic of iocb f2fs: Fix typo in comments f2fs: introduce max_ordered_discard sysfs node f2fs: allow to set compression for inlined file f2fs: add barrier mount option f2fs: fix normal discard process f2fs: cleanup in f2fs_create_flush_cmd_control() f2fs: fix gc mode when gc_urgent_high_remaining is 1 f2fs: remove batched_trim_sections node f2fs: support fault injection for f2fs_is_valid_blkaddr() f2fs: fix to invalidate dcc->f2fs_issue_discard in error path f2fs: Fix the race condition of resize flag between resizefs f2fs: let's avoid to get cp_rwsem twice by f2fs_evict_inode by d_invalidate f2fs: should put a page when checking the summary info ANDROID: GKI: Update GKI modules protected exports ANDROID: GKI: Add list of protected GKI modules ANDROID: GKI: Only protect exports if KMI symbols are present ANDROID: GKI: Protect exports of protected GKI modules UPSTREAM: crypto: algboss - compile out test-related code when tests disabled UPSTREAM: crypto: kdf - silence noisy self-test UPSTREAM: crypto: kdf - skip self-test when tests disabled UPSTREAM: crypto: api - compile out crypto_boot_test_finished when tests disabled UPSTREAM: crypto: algboss - optimize registration of internal algorithms UPSTREAM: crypto: api - optimize algorithm registration when self-tests disabled ANDROID: KVM: arm64: Add support for non-cacheable mappings ANDROID: KVM: arm64: Don't filter out KVM_FUNC_MMIO_GUARD_MAP hypercalls ANDROID: KVM: arm64: Coalesce host stage2 entries on ownership reclaim ANDROID: KVM: arm64: Move kvm_pte_table to the common header ANDROID: KVM: arm64: Have different callbacks for PTE manipulation ANDROID: KVM: arm64: Move PTE attributes definitions to the common header ANDROID: KVM: arm64: Split stage2_put_pte function ANDROID: KVM: arm64: Pass the pagetable struct as an argument to the freewalker ANDROID: KVM: arm64: Fix link with CONFIG_MODULES=n ANDROID: KVM: arm64: Fix build with CONFIG_MODULES=n ANDROID: KVM: arm64: Block module loading based on cmdline or HVC ANDROID: KVM: arm64: Support unaligned fixmap in the nVHE hyp ANDROID: KVM: arm64: Add support for custom hypercall registration ANDROID: KVM: arm64: Return a token for a pKVM module registration ANDROID: KVM: arm64: Introduce hyp_protect_host_page() ANDROID: KVM: arm64: Add a permission fault handler ANDROID: KVM: arm64: Introduce PKVM_PAGE_RESTRICTED_PROT ANDROID: KVM: arm64: Expose kvm_flush_dcache_to_poc() in module_ops ANDROID: KVM: arm64: Expose hyp fixmap helpers in module_ops ANDROID: KVM: arm64: Expose puts and putx64 in pKVM ABI ANDROID: KVM: arm64: Add serial framework for pKVM ANDROID: KVM: arm64: Expose __pkvm_create_private_mapping to pKVM modules ANDROID: KVM: arm64: Include .note.gnu.property in .hyp.rodata ANDROID: KVM: arm64: Allow loading modules to the pKVM hypervisor ANDROID: KVM: arm64: Refactor nvhe Makefile ANDROID: KVM: arm64: Make gen-hyprel emit delimiters ANDROID: KVM: arm64: Move gen-hyprel into a tool directory ANDROID: KVM: arm64: Add mapping removal interface for nVHE hyp ANDROID: arm64: patching: Add aarch64_addr_write() ANDROID: arm64: patching: Refactor __aarch64_insn_write() ANDROID: KVM: arm64: Use correct pkvm owners type ANDROID: KVM: arm64: s2mpu: S2MPU V9 code ANDROID: KVM: arm64: s2mpu: Add MMIO and defines for V9 S2MPU ANDROID: KVM: arm64: s2mpu: rename versions to match major arch ANDROID: KVM: arm64: s2mpu: Abstract register initialization with version_ops ANDROID: KVM: arm64: s2mpu: Pass driver version during init ANDROID: KVM: arm64: s2mpu: Add SMPT and MPT functions to pgtable abstraction ANDROID: KVM: arm64: s2mpu: Abstract page table ops ANDROID: KVM: arm64: iommu: Support dynamic driver registration in IOMMU layer ANDROID: KVM: arm64: Use 32-bit function ID for PSCI MEM_PROTECT call Revert "ANDROID: virtio_balloon: New module parameter "pkvm"" ANDROID: KVM: arm64: s2mpu: Fix SYNC latency regression ANDROID: KVM: arm64: iommu: Add host_stage2_idmap_complete ANDROID: KVM: arm64: Don't update IOMMUs unnecessarily ANDROID: KVM: arm64: s2mpu: Add SysMMU_SYNC timeout ANDROID: KVM: arm64: s2mpu: Allow r/o access to control regs ANDROID: KVM: arm64: s2mpu: Allow reading MPTC entries ANDROID: KVM: arm64: s2mpu: Allow L1ENTRY_* r/o access ANDROID: KVM: arm64: s2mpu: Refactor DABT handler ANDROID: KVM: arm64: s2mpu: Extract L1ENTRY_* consts ANDROID: KVM: arm64: s2mpu: Initialize MPTs to PROT_RW ANDROID: KVM: arm64: iommu: Optimize snapshot_host_stage2 ANDROID: KVM: arm64: iommu: Fix upper bound of PT walk ANDROID: KVM: arm64: iommu: Add pkvm_iommu_finalize ANDROID: KVM: arm64: iommu: No powered check in DABT handler ANDROID: KVM: arm64: s2mpu: Create SysMMU_SYNC driver ANDROID: KVM: arm64: iommu: Create parent/child relation ANDROID: KVM: arm64: iommu: Run validate() on struct pkvm_iommu ANDROID: KVM: arm64: iommu: Create private mapping last ANDROID: KVM: arm64: iommu: Free memory on registration error ANDROID: KVM: arm64: iommu: Harden __pkvm_iommu_pm_notify ANDROID: KVM: arm64: Remove unused IOMMU hooks, kvm_iommu_ops ANDROID: KVM: arm64: s2mpu: Implement host stage2 idmap callbacks ANDROID: KVM: arm64: s2mpu: Move mpt_update_flags into FMPT ANDROID: KVM: arm64: s2mpu: Replace DABT handler with callback ANDROID: KVM: arm64: s2mpu: Replace SMC handler with PM callbacks ANDROID: KVM: arm64: s2mpu: Add driver initializer ANDROID: KVM: arm64: s2mpu: Remove host_stage2_adjust_mmio_range ANDROID: KVM: arm64: s2mpu: Replace struct s2mpu with pkvm_iommu ANDROID: KVM: arm64: s2mpu: Remove all EL1 code ANDROID: KVM: arm64: s2mpu: Move SFR init to EL2 ANDROID: KVM: arm64: iommu: Snapshot host stage-2 at driver init ANDROID: KVM: arm64: iommu: Host stage-2 idmap callbacks ANDROID: KVM: arm64: iommu: DABT handler callback ANDROID: KVM: arm64: iommu: Suspend/resume callbacks ANDROID: KVM: arm64: iommu: Register device hypcall ANDROID: KVM: arm64: iommu: Avoid mapping devices in host stage-2 ANDROID: KVM: arm64: iommu: Driver initialization hypcall ANDROID: KVM: arm64: Fix host MMIO DABT handler IPA ANDROID: KVM: arm64: Wait on S2MPU.STATUS after invalidation ANDROID: KVM: arm64: Remove kernel-doc in S2MPU driver ANDROID: KVM: arm64: Initialize pkvm_pgtable.mm_ops earlier ANDROID: KVM: arm64: Mark select_iommu_ops static ANDROID: Enable KVM_S2MPU in gki_defconfig ANDROID: KVM: arm64: Unmap S2MPU MMIO registers from host stage-2 ANDROID: KVM: arm64: Implement MMIO handler in S2MPU driver ANDROID: KVM: arm64: Modify S2MPU MPT in 'host_stage2_set_owner' ANDROID: KVM: arm64: Set up S2MPU Memory Protection Table ANDROID: KVM: arm64: Reprogram S2MPUs in 'host_smc_handler' ANDROID: KVM: arm64: Enable S2MPUs in __pkvm_init_stage2_iommu ANDROID: KVM: arm64: Copy S2MPU configuration to hyp ANDROID: KVM: arm64: Implement IRQ handler for S2MPU faults ANDROID: KVM: arm64: Allocate context IDs for valid VIDs ANDROID: KVM: arm64: Read and check S2MPU_VERSION ANDROID: KVM: arm64: Parse S2MPU MMIO region ANDROID: KVM: arm64: Create empty S2MPU driver ANDROID: KVM: arm64: Add 'host_stage2_adjust_mmio_range' to kvm_iommu_ops ANDROID: KVM: arm64: Add 'host_mmio_dabt_handler' to kvm_iommu_ops ANDROID: KVM: arm64: Add 'host_stage2_set_owner' to kvm_iommu_ops ANDROID: KVM: arm64: Add 'host_smc_handler' to kvm_iommu_ops ANDROID: KVM: arm64: Introduce IOMMU driver infrastructure ANDROID: KVM: arm64: Update pKVM hyp state series to v6 ANDROID: KVM: arm64: Add protected_shared_mem statistic ANDROID: KVM: arm64: count KVM s2 mmu usage in nVHE protected mode ANDROID: KVM: arm64: Add protected_hyp_mem VM statistic ANDROID: KVM: arm64: Fix sparse __percpu warning ANDROID: KVM: arm64: Relax SMCCC version check during FF-A proxy init ANDROID: KVM: arm64: Increase size of FF-A buffer BACKPORT: FROMLIST: KVM: arm64: pkvm: Add support for fragmented FF-A descriptors FROMLIST: KVM: arm64: Handle FFA_MEM_LEND calls from the host FROMLIST: KVM: arm64: Handle FFA_MEM_RECLAIM calls from the host FROMLIST: KVM: arm64: Handle FFA_MEM_SHARE calls from the host BACKPORT: FROMLIST: KVM: arm64: Add FF-A helpers to share/unshare memory with secure world FROMLIST: KVM: arm64: Handle FFA_RXTX_MAP and FFA_RXTX_UNMAP calls from the host FROMLIST: KVM: arm64: Allocate pages for hypervisor FF-A mailboxes FROMLIST: KVM: arm64: Handle FFA_FEATURES call from the host BACKPORT: FROMLIST: KVM: arm64: Probe FF-A version and host/hyp partition ID during init FROMLIST: KVM: arm64: Block unsafe FF-A calls from the host FROMLIST: firmware: arm_ffa: Move comment before the field it is documenting FROMLIST: firmware: arm_ffa: Move constants to header file ANDROID: KVM: arm64: Issue CMOs when tearing down shadow pages ANDROID: KVM: arm64: Use PSCI MEM_PROTECT to zap guest pages on reset ANDROID: KVM: arm64: Check IPA range for pvmfw during guest donation ANDROID: KVM: arm64: Use fixmap when poisoning pvmfw pages ANDROID: KVM: arm64: Rename pkvm_clear_pvmfw_pages() ANDROID: KVM: arm64: Rename hyp_zero_page() and make available as helper ANDROID: KVM: arm64: Don't check for hyp_fixmap_map() returning NULL ANDROID: virtio_balloon: Do not clear VIRTIO_F_ACCESS_PLATFORM ANDROID: virtio_balloon: New module parameter "pkvm" ANDROID: KVM: arm64: Introduce kvm_has_memrelinquish_services ANDROID: KVM: arm64: Flush nVHE hyp_vcpu memcache ANDROID: KVM: arm64: Avoid unnecessary unmap walk in MEM_RELINQUISH hypercall ANDROID: KVM: arm64: Strictly check page type in MEM_RELINQUISH hypercall ANDROID: KVM: Include prototype for page_relinquish before definition ANDROID: arm64: ioremap/iounmap use stage-2 granule size ANDROID: arm64: Check if pfn is valid for all ioremap loop iterations ANDROID: arm64: Auto-enroll MMIO guard on protected vms ANDROID: KVM: arm64: Add some documentation for the MMIO guard feature ANDROID: KVM: arm64: Plumb MMIO checking into the fault handling ANDROID: KVM: arm64: pkvm: Wire MMIO guard hypercalls ANDROID: KVM: arm64: pkvm: Add MMIO guard infrastructure ANDROID: KVM: arm64: Introduce KVM_ARCH_FLAG_MMIO_GUARD flag ANDROID: KVM: arm64: Expose topup_hyp_memcache() to the rest of KVM ANDROID: KVM: arm64: Define MMIO guard hypercalls ANDROID: KVM: arm64: FAR_EL2 mask as a define ANDROID: KVM: arm64: Turn kvm_pgtable_stage2_set_owner into kvm_pgtable_stage2_annotate ANDROID: memory relinquish: Fix build dependencies ANDROID: KVM: arm64: Monitor Debug support for non-protected guests ANDROID: KVM: arm64: Factor out code for saving/restoring guest debug regs ANDROID: KVM: arm64: Flush the vcpu iflags for non-protected VMs ANDROID: virtio_balloon: Do not translate reported pages through DMA API ANDROID: KVM: arm64: balloon: Notify hyp before reporting free pages to host ANDROID: KVM: arm64: memory balloon: Notify hyp when ballooning ANDROID: Define mem_relinquish interface for releasing memory to a hypervisor. ANDROID: KVM: arm64: Implement MEM_RELINQUISH SMCCC hypercall ANDROID: KVM: arm64: Turn llist of pinned pages into an rb-tree FROMLIST: KVM: arm64: pkvm: Fixup boot mode to reflect that the kernel resumes from EL1 ANDROID: KVM: arm64: Add .hyp.data section ANDROID: KVM: arm64: relay entropy requests from protected guests directly to secure ANDROID: KVM: arm64: Introduce KVM_CAP_ARM_PROTECTED_VM to set/query PVM firmware ANDROID: KVM: arm64: Reset primary vCPU according to PVM firmware boot protocol ANDROID: KVM: arm64: Copy pvmfw into guest pages during donation from the host ANDROID: KVM: arm64: Clear pvmfw pages on clean host shutdown ANDROID: KVM: arm64: Ignore length of 0 in kvm_flush_dcache_to_poc() ANDROID: KVM: arm64: Unmap PVM firmware from host stage-2 during de-privilege ANDROID: KVM: arm64: Parse reserved-memory node for pkvm guest firmware region ANDROID: Documentation: KVM: Add some documentation for Protected KVM on arm64 ANDROID: BACKPORT: KVM: arm64: Introduce KVM_VM_TYPE_ARM_PROTECTED machine type for PVMs ANDROID: KVM: arm64: Expose memory sharing hypercalls to protected guests ANDROID: KVM: arm64: Reformat/beautify PTP hypercall documentation ANDROID: KVM: arm64: Document the KVM/arm64-specific calls in hypercalls.rst ANDROID: KVM: arm64: Rename firmware pseudo-register documentation file ANDROID: KVM: arm64: Extend memory sharing to allow guest-to-host transitions ANDROID: KVM: arm64: Avoid BBM when changing only s/w bits in Stage-2 PTE ANDROID: KVM: arm64: Support TLB invalidation in guest context ANDROID: KVM: arm64: Inject SIGSEGV on illegal accesses ANDROID: KVM: arm64: Refactor enter_exception64() ANDROID: KVM: arm64: Add is_pkvm_initialized() helper ANDROID: KVM: arm64: Don't expose TLBI hypercalls after de-privilege ANDROID: KVM: arm64: Handle PSCI for protected VMs in EL2 ANDROID: KVM: arm64: Factor out vcpu_reset code for core registers and PSCI ANDROID: KVM: arm64: Move some kvm_psci functions to a shared header ANDROID: KVM: arm64: Move pstate reset values to kvm_arm.h ANDROID: KVM: arm64: Add HVC handling for protected guests at EL2 ANDROID: KVM: arm64: Track the SVE state in the hypervisor vcpu structure ANDROID: KVM: arm64: Initialize hypervisor vm state at EL2 ANDROID: KVM: arm64: Refactor kvm_vcpu_enable_ptrauth() for hyp use ANDROID: KVM: arm64: Do not update virtual timer state for protected VMs ANDROID: KVM: arm64: Move vgic state between host and hypervisor vcpu structures ANDROID: KVM: arm64: Add EL2 entry/exit handlers for pKVM guests ANDROID: KVM: arm64: Donate memory to protected guests ANDROID: KVM: arm64: Force injection of a data abort on NISV MMIO exit ANDROID: KVM: arm64: Advertise GICv3 sysreg interface to protected guests ANDROID: KVM: arm64: Fix initializing traps in protected mode ANDROID: KVM: arm64: Move pkvm_vcpu_init_traps to hyp vcpu init ANDROID: KVM: arm64: Reset sysregs for protected VMs ANDROID: KVM: arm64: Refactor reset_mpidr to extract its computation ANDROID: KVM: arm64: Do not support MTE for protected VMs ANDROID: KVM: arm64: Restrict protected VM capabilities ANDROID: KVM: arm64: Trap debug break and watch from guest ANDROID: KVM: arm64: Check directly whether the vcpu is protected ANDROID: KVM: arm64: Reduce host/hyp vcpu state copying ANDROID: KVM: arm64: Lazy host FP save/restore ANDROID: KVM: arm64: Reintroduce __sve_save_state ANDROID: KVM: arm64: Introduce lazy-ish state sync for non-protected VMs ANDROID: KVM: arm64: Introduce per-EC entry/exit handlers ANDROID: KVM: arm64: Ensure that TLBs and I-cache are private to each vcpu ANDROID: KVM: arm64: Add hyp per_cpu variable to track current physical cpu number ANDROID: KVM: arm64: Skip __kvm_adjust_pc() for protected vcpus ANDROID: KVM: arm64: Add current host and hyp vCPU lookup primitive ANDROID: KVM: arm64: Introduce the pkvm_vcpu_{load,put} hypercalls ANDROID: KVM: arm64: Add the {flush,sync}_hyp_timer_state() primitives ANDROID: KVM: arm64: Introduce predicates to check for protected state ANDROID: KVM: arm64: Add the {flush,sync}_hyp_vgic_state() primitives ANDROID: KVM: arm64: Simplify vgic-v3 hypercalls ANDROID: KVM: arm64: Make vcpu_{read,write}_sys_reg available to HYP code ANDROID: KVM: arm64: Split up nvhe/fixed_config.h ANDROID: KVM: arm64: Extend memory donation to allow host-to-guest transitions ANDROID: KVM: arm64: Handle guest stage-2 page-tables entirely at EL2 ANDROID: KVM: arm64: Disallow dirty logging and RO memslots with pKVM ANDROID: KVM: arm64: Do not allow memslot changes after first VM run under pKVM ANDROID: KVM: arm64: Check for PTE validity when checking for executable/cacheable ANDROID: KVM: arm64: Extend memory sharing to allow host-to-guest transitions ANDROID: KVM: arm64: Provide a hypercall for the host to reclaim guest memory ANDROID: KVM: arm64: Add PC_UPDATE_REQ flags covering all PC updates ANDROID: KVM: arm64: Add vcpu flag copy primitive ANDROID: KVM: arm64: Repurpose a byte of 'order' for flags in 'struct hyp_page' FROMLIST: KVM: arm64: Use the pKVM hyp vCPU structure in handle___kvm_vcpu_run() FROMLIST: KVM: arm64: Don't unnecessarily map host kernel sections at EL2 FROMLIST: KVM: arm64: Explicitly map 'kvm_vgic_global_state' at EL2 FROMLIST: KVM: arm64: Maintain a copy of 'kvm_arm_vmid_bits' at EL2 FROMLIST: KVM: arm64: Unmap 'kvm_arm_hyp_percpu_base' from the host FROMLIST: BACKPORT: KVM: arm64: Return guest memory from EL2 via dedicated teardown memcache FROMLIST: KVM: arm64: Instantiate guest stage-2 page-tables at EL2 FROMLIST: KVM: arm64: Consolidate stage-2 initialisation into a single function FROMLIST: KVM: arm64: Add generic hyp_memcache helpers FROMLIST: KVM: arm64: Provide I-cache invalidation by virtual address at EL2 FROMLIST: KVM: arm64: Initialise hypervisor copies of host symbols unconditionally FROMLIST: KVM: arm64: Add per-cpu fixmap infrastructure at EL2 FROMLIST: KVM: arm64: Instantiate pKVM hypervisor VM and vCPU structures from EL1 FROMLIST: KVM: arm64: Add infrastructure to create and track pKVM instances at EL2 FROMLIST: KVM: arm64: Rename 'host_kvm' to 'host_mmu' FROMLIST: KVM: arm64: Add hyp_spinlock_t static initializer FROMLIST: KVM: arm64: Include asm/kvm_mmu.h in nvhe/mem_protect.h FROMLIST: KVM: arm64: Add helpers to pin memory shared with the hypervisor at EL2 FROMLIST: KVM: arm64: Prevent the donation of no-map pages FROMLIST: KVM: arm64: Implement do_donate() helper for donating memory FROMLIST: KVM: arm64: Unify identifiers used to distinguish host and hypervisor FROMLIST: KVM: arm64: Fix-up hyp stage-1 refcounts for all pages mapped at EL2 FROMLIST: KVM: arm64: Back the hypervisor 'struct hyp_page' array for all memory FROMLIST: KVM: arm64: Allow attaching of non-coalescable pages to a hyp pool FROMLIST: KVM: arm64: Move hyp refcount manipulation helpers to common header file ANDROID: arm64: Register earlycon fixmap with the MMIO guard ANDROID: arm64: Add a helper to retrieve the PTE of a fixmap ANDROID: BACKPORT: arm64: Enroll into KVM's MMIO guard if required ANDROID: BACKPORT: arm64: Implement ioremap/iounmap hooks calling into KVM's MMIO guard ANDROID: mm/vmalloc: Add arch-specific callbacks to track io{remap,unmap} physical pages ANDROID: BACKPORT: arm64: mm: Implement memory encryption API using KVM sharing hypercalls ANDROID: drivers: hv: Include memory encryption header FROMLIST: firmware/smccc: Call arch-specific hook on discovering KVM services ANDROID: GKI: Enable CONFIG_CFI_CLANG Conflicts: drivers/android/vendor_hooks.c include/linux/compaction.h include/trace/hooks/timer.h mm/compaction.c Change-Id: Ie45fe12a1d6b67f4edb8c23ebb4409754b063385 Upstream-Build: ks_qcom-android14-6.1-keystone-qcom-release@9501271 UKQ2.230118.001 Signed-off-by: jianzhou <quic_jianzhou@quicinc.com>#	2023-02-21 21:29:07 -08:00
Greg Kroah-Hartman	b6010109cf	Merge 6.1.12 into android14-6.1 ... Changes in 6.1.12 hv_netvsc: Allocate memory in netvsc_dma_map() with GFP_ATOMIC btrfs: limit device extents to the device size btrfs: zlib: zero-initialize zlib workspace ALSA: hda/realtek: Add Positivo N14KP6-TG ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 ALSA: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 ALSA: hda/realtek: Add quirk for ASUS UM3402 using CS35L41 ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP platform. Revert "PCI/ASPM: Save L1 PM Substates Capability for suspend/resume" Revert "PCI/ASPM: Refactor L1 PM Substates Control Register programming" tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw of/address: Return an error when no valid dma-ranges are found can: j1939: do not wait 250 ms if the same addr was already claimed HID: logitech: Disable hi-res scrolling on USB xfrm: compat: change expression for switch in xfrm_xlate64 IB/hfi1: Restore allocated resources on failed copyout xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr() IB/IPoIB: Fix legacy IPoIB due to wrong number of queues xfrm: annotate data-race around use_time RDMA/irdma: Fix potential NULL-ptr-dereference RDMA/usnic: use iommu_map_atomic() under spin_lock() xfrm: fix bug with DSCP copy to v6 from v4 tunnel of: Make OF framebuffer device names unique net: phylink: move phy_device_free() to correctly release phy device bonding: fix error checking in bond_debug_reregister() net: macb: Perform zynqmp dynamic configuration only for SGMII interface net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY ionic: clean interrupt before enabling queue to avoid credit race ionic: refactor use of ionic_rx_fill() ionic: missed doorbell workaround cpufreq: qcom-hw: Fix cpufreq_driver->get() for non-LMH systems uapi: add missing ip/ipv6 header dependencies for linux/stddef.h net: microchip: sparx5: fix PTP init/deinit not checking all ports HID: amd_sfh: if no sensors are enabled, clean up drm/i915: Don't do the WM0->WM1 copy w/a if WM1 is already enabled drm/virtio: exbuf->fence_fd unmodified on interrupted wait cpuset: Call set_cpus_allowed_ptr() with appropriate mask for task nvidiafb: detect the hardware support before removing console. ice: Do not use WQ_MEM_RECLAIM flag for workqueue ice: Fix disabling Rx VLAN filtering with port VLAN enabled ice: switch: fix potential memleak in ice_add_adv_recipe() net: dsa: mt7530: don't change PVC_EG_TAG when CPU port becomes VLAN-aware net: mscc: ocelot: fix VCAP filters not matching on MAC with "protocol 802.1Q" net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change net/mlx5: Bridge, fix ageing of peer FDB entries net/mlx5e: Fix crash unsetting rx-vlan-filter in switchdev mode net/mlx5e: IPoIB, Show unknown speed instead of error net/mlx5: Store page counters in a single array net/mlx5: Expose SF firmware pages counter net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers net/mlx5: fw_tracer, Zero consumer index when reloading the tracer net/mlx5: Serialize module cleanup with reload and remove igc: Add ndo_tx_timeout support net: ethernet: mtk_eth_soc: fix wrong parameters order in __xdp_rxq_info_reg() txhash: fix sk->sk_txrehash default selftests: Fix failing VXLAN VNI filtering test rds: rds_rm_zerocopy_callback() use list_first_entry() net: mscc: ocelot: fix all IPv6 getting trapped to CPU when PTP timestamping is used selftests: forwarding: lib: quote the sysctl values arm64: dts: rockchip: fix input enable pinconf on rk3399 arm64: dts: rockchip: set sdmmc0 speed to sd-uhs-sdr50 on rock-3a ALSA: pci: lx6464es: fix a debug loop riscv: stacktrace: Fix missing the first frame arm64: dts: mediatek: mt8195: Fix vdosys* compatible strings ASoC: tas5805m: rework to avoid scheduling while atomic. ASoC: tas5805m: add missing page switch. ASoC: fsl_sai: fix getting version from VERID ASoC: topology: Return -ENOMEM on memory allocation failure clk: microchip: mpfs-ccc: Use devm_kasprintf() for allocating formatted strings pinctrl: mediatek: Fix the drive register definition of some Pins pinctrl: aspeed: Fix confusing types in return value pinctrl: single: fix potential NULL dereference spi: dw: Fix wrong FIFO level setting for long xfers pinctrl: aspeed: Revert "Force to disable the function's signal" pinctrl: intel: Restore the pins that used to be in Direct IRQ mode cifs: Fix use-after-free in rdata->read_into_pages() net: USB: Fix wrong-direction WARNING in plusb.c mptcp: do not wait for bare sockets' timeout mptcp: be careful on subflow status propagation on errors selftests: mptcp: allow more slack for slow test-case selftests: mptcp: stop tests earlier btrfs: simplify update of last_dir_index_offset when logging a directory btrfs: free device in btrfs_close_devices for a single device filesystem usb: core: add quirk for Alcor Link AK9563 smartcard reader usb: typec: altmodes/displayport: Fix probe pin assign check cxl/region: Fix null pointer dereference for resetting decoder cxl/region: Fix passthrough-decoder detection clk: ingenic: jz4760: Update M/N/OD calculation algorithm pinctrl: qcom: sm8450-lpass-lpi: correct swr_rx_data group drm/amd/pm: add SMU 13.0.7 missing GetPptLimit message mapping ceph: flush cap releases when the session is flushed nvdimm: Support sizeof(struct page) > MAX_STRUCT_PAGE_SIZE riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte riscv: kprobe: Fixup misaligned load text powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch drm/amdgpu: Use the TGID for trace_amdgpu_vm_update_ptes tracing: Fix TASK_COMM_LEN in trace event format file rtmutex: Ensure that the top waiter is always woken up arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive Fix page corruption caused by racy check in __free_pages arm64: efi: Force the use of SetVirtualAddressMap() on eMAG and Altra Max machines drm/amd/pm: bump SMU 13.0.0 driver_if header version drm/amdgpu: Add unique_id support for GC 11.0.1/2 drm/amd/pm: bump SMU 13.0.7 driver_if header version drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini drm/amdgpu/smu: skip pptable init under sriov drm/amd/display: properly handling AGP aperture in vm setup drm/amd/display: fix cursor offset on rotation 180 drm/i915: Move fd_install after last use of fence drm/i915: Initialize the obj flags for shmem objects drm/i915: Fix VBT DSI DVO port handling x86/speculation: Identify processors vulnerable to SMT RSB predictions KVM: x86: Mitigate the cross-thread return address predictions bug Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions Linux 6.1.12 Change-Id: I4deaf57516f3e7b40e728d473986fa355a11fc37 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-02-16 16:46:43 +00:00
David Chen	3b4c045a98	Fix page corruption caused by racy check in __free_pages ... commit 462a8e08e0e6287e5ce13187257edbf24213ed03 upstream. When we upgraded our kernel, we started seeing some page corruption like the following consistently: BUG: Bad page state in process ganesha.nfsd pfn:1304ca page:0000000022261c55 refcount:0 mapcount:-128 mapping:0000000000000000 index:0x0 pfn:0x1304ca flags: 0x17ffffc0000000() raw: 0017ffffc0000000 ffff8a513ffd4c98 ffffeee24b35ec08 0000000000000000 raw: 0000000000000000 0000000000000001 00000000ffffff7f 0000000000000000 page dumped because: nonzero mapcount CPU: 0 PID: 15567 Comm: ganesha.nfsd Kdump: loaded Tainted: P B O 5.10.158-1.nutanix.20221209.el7.x86_64 #1 Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 04/05/2016 Call Trace: dump_stack+0x74/0x96 bad_page.cold+0x63/0x94 check_new_page_bad+0x6d/0x80 rmqueue+0x46e/0x970 get_page_from_freelist+0xcb/0x3f0 ? _cond_resched+0x19/0x40 __alloc_pages_nodemask+0x164/0x300 alloc_pages_current+0x87/0xf0 skb_page_frag_refill+0x84/0x110 ... Sometimes, it would also show up as corruption in the free list pointer and cause crashes. After bisecting the issue, we found the issue started from commit e320d3012d ("mm/page_alloc.c: fix freeing non-compound pages"): if (put_page_testzero(page)) free_the_page(page, order); else if (!PageHead(page)) while (order-- > 0) free_the_page(page + (1 << order), order); So the problem is the check PageHead is racy because at this point we already dropped our reference to the page. So even if we came in with compound page, the page can already be freed and PageHead can return false and we will end up freeing all the tail pages causing double free. Fixes: e320d3012d ("mm/page_alloc.c: fix freeing non-compound pages") Link: https://lore.kernel.org/lkml/BYAPR02MB448855960A9656EEA81141FC94D99@BYAPR02MB4488.namprd02.prod.outlook.com/ Cc: Andrew Morton <akpm@linux-foundation.org> Cc: stable@vger.kernel.org Signed-off-by: Chunwei Chen <david.chen@nutanix.com> Reviewed-by: Vlastimil Babka <vbabka@suse.cz> Reviewed-by: Matthew Wilcox (Oracle) <willy@infradead.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-14 19:11:54 +01:00
Greg Kroah-Hartman	c747c01851	This is the 6.1.11 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmPkywAACgkQONu9yGCS aT42Kw/9FFrdwv29yND651dPIglYKgO0Oz27/LFNGqst1A/G1ITzfs/94NSRr+9j uvwmBLbC+n/OXYavliBVWlPaYUCLqoFSfR+q953yz/UT0803E8BUvQ8NN8O7lsg7 hfbWJaASxt5puy2pBFypeWM+OXoVOvUBj3VhbgtUwwcYLPuYafj9rCAytdIIf5fr RKWBLfx7As4OJ+Hb3KNkolTkFDTfV5+zqCAc9Ko474d1bpRnF15UdQN8Kkinr2+O YNGTvDT8jR8eAk/9PiCNrG7DEMSKaczP8n/ap6PikD/KnK7ShtCLwZztLnmu65g1 vZG+cnEda8FuY3Ms03UrHhKqzMzBY/vslzBNMBTNmDsr+b7ilhffAYXPKS8s7xrg bJjmfzfITFAjXrml25enVO0V9RtTxv6E07U7SnDrLsvE2KBFZfUR/3Xl70bVBb0S db60kmEoq3XHHtoVySOHlfihVHSy02V9dlFcLOYMQsDHsGVsRXOR87g6d7+rJS3h hYWz5YxMLJUr2qn2836DPBnX9Ix0VjDx+X2fB4bNYzKc1dMlgzbpYrhk9LEOUDsx emJuqZskjkLby9Bw36N3eHW3fKPOFrwpYwPWYJHdWx1mmFSNdV6MdfEtZXpuEkFJ iFyJPeeODGadoiznnXTaBFfhozRj+B6FXrY6pkF+WMoSt8ZlZpM= =vu7j -----END PGP SIGNATURE----- Merge 6.1.11 into android14-6.1 Changes in 6.1.11 firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() arm64: dts: imx8m-venice: Remove incorrect 'uart-has-rtscts' arm64: dts: freescale: imx8dxl: fix sc_pwrkey's property name linux,keycode ASoC: amd: acp-es8336: Drop reference count of ACPI device after use ASoC: Intel: bytcht_es8316: Drop reference count of ACPI device after use ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use ASoC: Intel: bytcr_rt5640: Drop reference count of ACPI device after use ASoC: Intel: bytcr_wm5102: Drop reference count of ACPI device after use ASoC: Intel: sof_es8336: Drop reference count of ACPI device after use ASoC: Intel: avs: Implement PCI shutdown bpf: Fix off-by-one error in bpf_mem_cache_idx() bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() bpf: Fix to preserve reg parent/live fields when copying range info selftests/filesystems: grant executable permission to run_fat_tests.sh ASoC: SOF: ipc4-mtrace: prevent underflow in sof_ipc4_priority_mask_dfs_write() bpf: Add missing btf_put to register_btf_id_dtor_kfuncs media: v4l2-ctrls-api.c: move ctrl->is_new = 1 to the correct line bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX arm64: dts: imx8mm-verdin: Do not power down eth-phy drm/vc4: hdmi: make CEC adapter name unique drm/ssd130x: Init display before the SSD130X_DISPLAY_ON command scsi: Revert "scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT" bpf: Fix the kernel crash caused by bpf_setsockopt(). ALSA: memalloc: Workaround for Xen PV vhost/net: Clear the pending messages when the backend is removed copy_oldmem_kernel() - WRITE is "data source", not destination WRITE is "data source", not destination... READ is "data destination", not source... zcore: WRITE is "data source", not destination... memcpy_real(): WRITE is "data source", not destination... fix iov_iter_bvec() "direction" argument fix 'direction' argument of iov_iter_{init,bvec}() fix "direction" argument of iov_iter_kvec() use less confusing names for iov_iter direction initializers vhost-scsi: unbreak any layout for response ice: Prevent set_channel from changing queues while RDMA active qede: execute xdp_do_flush() before napi_complete_done() virtio-net: execute xdp_do_flush() before napi_complete_done() dpaa_eth: execute xdp_do_flush() before napi_complete_done() dpaa2-eth: execute xdp_do_flush() before napi_complete_done() skb: Do mix page pool and page referenced frags in GRO sfc: correctly advertise tunneled IPv6 segmentation net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices net: wwan: t7xx: Fix Runtime PM initialization block, bfq: replace 0/1 with false/true in bic apis block, bfq: fix uaf for bfqq in bic_set_bfqq() netrom: Fix use-after-free caused by accept on already connected socket fscache: Use wait_on_bit() to wait for the freeing of relinquished volume platform/x86/amd/pmf: update to auto-mode limits only after AMT event platform/x86/amd/pmf: Add helper routine to update SPS thermals platform/x86/amd/pmf: Fix to update SPS default pprof thermals platform/x86/amd/pmf: Add helper routine to check pprof is balanced platform/x86/amd/pmf: Fix to update SPS thermals when power supply change platform/x86/amd/pmf: Ensure mutexes are initialized before use platform/x86: thinkpad_acpi: Fix thinklight LED brightness returning 255 drm/i915/guc: Fix locking when searching for a hung request drm/i915: Fix request ref counting during error capture & debugfs dump drm/i915: Fix up locking around dumping requests lists drm/i915/adlp: Fix typo for reference clock net/tls: tls_is_tx_ready() checked list_entry ALSA: firewire-motu: fix unreleased lock warning in hwdep device netfilter: br_netfilter: disable sabotage_in hook after first suppression block: ublk: extending queue_size to fix overflow kunit: fix kunit_test_init_section_suites(...) squashfs: harden sanity check in squashfs_read_xattr_id_table maple_tree: should get pivots boundary by type sctp: do not check hb_timer.expires when resetting hb_timer net: phy: meson-gxl: Add generic dummy stubs for MMD register access drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during disable ip/ip6_gre: Fix changing addr gen mode not generating IPv6 link local address ip/ip6_gre: Fix non-point-to-point tunnel not generating IPv6 link local address riscv: kprobe: Fixup kernel panic when probing an illegal position igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() octeontx2-af: Fix devlink unregister can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate can: raw: fix CAN FD frame transmissions over CAN XL devices can: mcp251xfd: mcp251xfd_ring_set_ringparam(): assign missing tx_obj_num_coalesce_irq ata: libata: Fix sata_down_spd_limit() when no link speed is reported selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking virtio-net: Keep stop() to follow mirror sequence of open() net: openvswitch: fix flow memory leak in ovs_flow_cmd_new efi: fix potential NULL deref in efi_mem_reserve_persistent rtc: sunplus: fix format string for printing resource certs: Fix build error when PKCS#11 URI contains semicolon kbuild: modinst: Fix build error when CONFIG_MODULE_SIG_KEY is a PKCS#11 URI i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU i2c: mxs: suppress probe-deferral error message scsi: target: core: Fix warning on RT kernels x86/aperfmperf: Erase stale arch_freq_scale values when disabling frequency invariance readings perf/x86/intel: Add Emerald Rapids perf/x86/intel/cstate: Add Emerald Rapids scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress i2c: rk3x: fix a bunch of kernel-doc warnings Revert "gfs2: stop using generic_writepages in gfs2_ail1_start_one" x86/build: Move '-mindirect-branch-cs-prefix' out of GCC-only block platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table platform/x86: hp-wmi: Handle Omen Key event platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF platform/x86/amd: pmc: Disable IRQ1 wakeup for RN/CZN net/x25: Fix to not accept on connected socket drm/amd/display: Fix timing not changning when freesync video is enabled bcache: Silence memcpy() run-time false positive warnings iio: adc: stm32-dfsdm: fill module aliases usb: dwc3: qcom: enable vbus override when in OTG dr-mode usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF fbcon: Check font dimension limits cgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask() hv_netvsc: Fix missed pagebuf entries in netvsc_dma_map/unmap() ARM: dts: imx7d-smegw01: Fix USB host over-current polarity net: qrtr: free memory on error path in radix_tree_insert() can: isotp: split tx timer into transmission and timeout can: isotp: handle wait_event_interruptible() return values watchdog: diag288_wdt: do not use stack buffers for hardware data watchdog: diag288_wdt: fix __diag288() inline assembly ALSA: hda/realtek: Add Acer Predator PH315-54 ALSA: hda/realtek: fix mute/micmute LEDs, speaker don't work for a HP platform ASoC: codecs: wsa883x: correct playback min/max rates ASoC: SOF: sof-audio: unprepare when swidget->use_count > 0 ASoC: SOF: sof-audio: skip prepare/unprepare if swidget is NULL ASoC: SOF: keep prepare/unprepare widgets in sink path efi: Accept version 2 of memory attributes table rtc: efi: Enable SET/GET WAKEUP services as optional iio: hid: fix the retval in accel_3d_capture_sample iio: hid: fix the retval in gyro_3d_capture_sample iio: adc: xilinx-ams: fix devm_krealloc() return value check iio: adc: berlin2-adc: Add missing of_node_put() in error path iio: imx8qxp-adc: fix irq flood when call imx8qxp_adc_read_raw() iio:adc:twl6030: Enable measurements of VUSB, VBAT and others iio: light: cm32181: Fix PM support on system with 2 I2C resources iio: imu: fxos8700: fix ACCEL measurement range selection iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback iio: imu: fxos8700: fix IMU data bits returned to user space iio: imu: fxos8700: fix map label of channel type to MAGN sensor iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback iio: imu: fxos8700: fix incorrect ODR mode readback iio: imu: fxos8700: fix failed initialization ODR mode assignment iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN iio: imu: fxos8700: fix MAGN sensor scale and unit nvmem: brcm_nvram: Add check for kzalloc nvmem: sunxi_sid: Always use 32-bit MMIO reads nvmem: qcom-spmi-sdam: fix module autoloading parisc: Fix return code of pdc_iodc_print() parisc: Replace hardcoded value with PRIV_USER constant in ptrace.c parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case riscv: disable generation of unwind tables Revert "mm: kmemleak: alloc gray object for reserved region with direct map" mm: multi-gen LRU: fix crash during cgroup migration mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints usb: typec: ucsi: Don't attempt to resume the ports before they exist usb: gadget: udc: do not clear gadget driver.bus kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() HV: hv_balloon: fix memory leak with using debugfs_lookup() x86/debug: Fix stack recursion caused by wrongly ordered DR7 accesses fpga: m10bmc-sec: Fix probe rollback fpga: stratix10-soc: Fix return value check in s10_ops_write_init() mm/uffd: fix pte marker when fork() without fork event mm/swapfile: add cond_resched() in get_swap_pages() mm/khugepaged: fix ->anon_vma race mm, mremap: fix mremap() expanding for vma's with vm_ops->close() mm/MADV_COLLAPSE: catch !none !huge !bad pmd lookups highmem: round down the address passed to kunmap_flush_on_unmap() ia64: fix build error due to switch case label appearing next to declaration Squashfs: fix handling and sanity checking of xattr_ids count maple_tree: fix mas_empty_area_rev() lower bound validation migrate: hugetlb: check for hugetlb shared PMD in node migration dma-buf: actually set signaling bit for private stub fences serial: stm32: Merge hard IRQ and threaded IRQ handling into single IRQ handler drm/i915: Avoid potential vm use-after-free drm/i915: Fix potential bit_17 double-free drm/amd: Fix initialization for nbio 4.3.0 drm/amd/pm: drop unneeded dpm features disablement for SMU 13.0.4/11 drm/amdgpu: update wave data type to 3 for gfx11 nvmem: core: initialise nvmem->id early nvmem: core: remove nvmem_config wp_gpio nvmem: core: fix cleanup after dev_set_name() nvmem: core: fix registration vs use race nvmem: core: fix device node refcounting nvmem: core: fix cell removal on error nvmem: core: fix return value phy: qcom-qmp-combo: fix runtime suspend serial: 8250_dma: Fix DMA Rx completion race serial: 8250_dma: Fix DMA Rx rearm race platform/x86/amd: pmc: add CONFIG_SERIO dependency ASoC: SOF: sof-audio: prepare_widgets: Check swidget for NULL on sink failure iio:adc:twl6030: Enable measurement of VAC powerpc/64s/radix: Fix crash with unaligned relocated kernel powerpc/64s: Fix local irq disable when PMIs are disabled powerpc/imc-pmu: Revert nest_init_lock to being a mutex fs/ntfs3: Validate attribute data and valid sizes ovl: Use "buf" flexible array for memcpy() destination f2fs: initialize locks earlier in f2fs_fill_super() fbdev: smscufx: fix error handling code in ufx_usb_probe f2fs: fix to do sanity check on i_extra_isize in is_alive() wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads gfs2: Cosmetic gfs2_dinode_{in,out} cleanup gfs2: Always check inode size of inline inodes bpf: Skip invalid kfunc call in backtrack_insn Linux 6.1.11 Change-Id: I69722bc9711b91f2fca18de59746ada373f64c5e Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-02-09 13:29:55 +00:00
Mike Kravetz	d8b46cc1cf	migrate: hugetlb: check for hugetlb shared PMD in node migration ... commit 73bdf65ea74857d7fb2ec3067a3cec0e261b1462 upstream. migrate_pages/mempolicy semantics state that CAP_SYS_NICE is required to move pages shared with another process to a different node. page_mapcount > 1 is being used to determine if a hugetlb page is shared. However, a hugetlb page will have a mapcount of 1 if mapped by multiple processes via a shared PMD. As a result, hugetlb pages shared by multiple processes and mapped with a shared PMD can be moved by a process without CAP_SYS_NICE. To fix, check for a shared PMD if mapcount is 1. If a shared PMD is found consider the page shared. Link: https://lkml.kernel.org/r/20230126222721.222195-3-mike.kravetz@oracle.com Fixes: e2d8cf4055 ("migrate: add hugepage migration code to migrate_pages()") Signed-off-by: Mike Kravetz <mike.kravetz@oracle.com> Acked-by: Peter Xu <peterx@redhat.com> Acked-by: David Hildenbrand <david@redhat.com> Cc: James Houghton <jthoughton@google.com> Cc: Matthew Wilcox <willy@infradead.org> Cc: Michal Hocko <mhocko@suse.com> Cc: Muchun Song <songmuchun@bytedance.com> Cc: Naoya Horiguchi <naoya.horiguchi@linux.dev> Cc: Vishal Moola (Oracle) <vishal.moola@gmail.com> Cc: Yang Shi <shy828301@gmail.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-09 11:28:23 +01:00
Zach O'Keefe	96aaaf8666	mm/MADV_COLLAPSE: catch !none !huge !bad pmd lookups ... commit edb5d0cf5525357652aff6eacd9850b8ced07143 upstream. In commit 34488399fa ("mm/madvise: add file and shmem support to MADV_COLLAPSE") we make the following change to find_pmd_or_thp_or_none(): - if (!pmd_present(pmde)) - return SCAN_PMD_NULL; + if (pmd_none(pmde)) + return SCAN_PMD_NONE; This was for-use by MADV_COLLAPSE file/shmem codepaths, where MADV_COLLAPSE might identify a pte-mapped hugepage, only to have khugepaged race-in, free the pte table, and clear the pmd. Such codepaths include: A) If we find a suitably-aligned compound page of order HPAGE_PMD_ORDER already in the pagecache. B) In retract_page_tables(), if we fail to grab mmap_lock for the target mm/address. In these cases, collapse_pte_mapped_thp() really does expect a none (not just !present) pmd, and we want to suitably identify that case separate from the case where no pmd is found, or it's a bad-pmd (of course, many things could happen once we drop mmap_lock, and the pmd could plausibly undergo multiple transitions due to intervening fault, split, etc). Regardless, the code is prepared install a huge-pmd only when the existing pmd entry is either a genuine pte-table-mapping-pmd, or the none-pmd. However, the commit introduces a logical hole; namely, that we've allowed !none- && !huge- && !bad-pmds to be classified as genuine pte-table-mapping-pmds. One such example that could leak through are swap entries. The pmd values aren't checked again before use in pte_offset_map_lock(), which is expecting nothing less than a genuine pte-table-mapping-pmd. We want to put back the !pmd_present() check (below the pmd_none() check), but need to be careful to deal with subtleties in pmd transitions and treatments by various arch. The issue is that __split_huge_pmd_locked() temporarily clears the present bit (or otherwise marks the entry as invalid), but pmd_present() and pmd_trans_huge() still need to return true while the pmd is in this transitory state. For example, x86's pmd_present() also checks the _PAGE_PSE , riscv's version also checks the _PAGE_LEAF bit, and arm64 also checks a PMD_PRESENT_INVALID bit. Covering all 4 cases for x86 (all checks done on the same pmd value): 1) pmd_present() && pmd_trans_huge() All we actually know here is that the PSE bit is set. Either: a) We aren't racing with __split_huge_page(), and PRESENT or PROTNONE is set. => huge-pmd b) We are currently racing with __split_huge_page(). The danger here is that we proceed as-if we have a huge-pmd, but really we are looking at a pte-mapping-pmd. So, what is the risk of this danger? The only relevant path is: madvise_collapse() -> collapse_pte_mapped_thp() Where we might just incorrectly report back "success", when really the memory isn't pmd-backed. This is fine, since split could happen immediately after (actually) successful madvise_collapse(). So, it should be safe to just assume huge-pmd here. 2) pmd_present() && !pmd_trans_huge() Either: a) PSE not set and either PRESENT or PROTNONE is. => pte-table-mapping pmd (or PROT_NONE) b) devmap. This routine can be called immediately after unlocking/locking mmap_lock -- or called with no locks held (see khugepaged_scan_mm_slot()), so previous VMA checks have since been invalidated. 3) !pmd_present() && pmd_trans_huge() Not possible. 4) !pmd_present() && !pmd_trans_huge() Neither PRESENT nor PROTNONE set => not present I've checked all archs that implement pmd_trans_huge() (arm64, riscv, powerpc, longarch, x86, mips, s390) and this logic roughly translates (though devmap treatment is unique to x86 and powerpc, and (3) doesn't necessarily hold in general -- but that doesn't matter since !pmd_present() always takes failure path). Also, add a comment above find_pmd_or_thp_or_none() to help future travelers reason about the validity of the code; namely, the possible mutations that might happen out from under us, depending on how mmap_lock is held (if at all). Link: https://lkml.kernel.org/r/20230125225358.2576151-1-zokeefe@google.com Fixes: 34488399fa ("mm/madvise: add file and shmem support to MADV_COLLAPSE") Signed-off-by: Zach O'Keefe <zokeefe@google.com> Reported-by: Hugh Dickins <hughd@google.com> Reviewed-by: Yang Shi <shy828301@gmail.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-09 11:28:22 +01:00
Vlastimil Babka	97f17a7372	mm, mremap: fix mremap() expanding for vma's with vm_ops->close() ... commit d014cd7c1c358edc3ea82ebf327a036a42ed0164 upstream. Fabian has reported another regression in 6.1 due to ca3d76b0aa ("mm: add merging after mremap resize"). The problem is that vma_merge() can fail when vma has a vm_ops->close() method, causing is_mergeable_vma() test to be negative. This was happening for vma mapping a file from fuse-overlayfs, which does have the method. But when we are simply expanding the vma, we never remove it due to the "merge" with the added area, so the test should not prevent the expansion. As a quick fix, check for such vmas and expand them using vma_adjust() directly as was done before commit ca3d76b0aa. For a more robust long term solution we should try to limit the check for vma_ops->close only to cases that actually result in vma removal, so that no merge would be prevented unnecessarily. [akpm@linux-foundation.org: fix indenting whitespace, reflow comment] Link: https://lkml.kernel.org/r/20230117101939.9753-1-vbabka@suse.cz Fixes: ca3d76b0aa ("mm: add merging after mremap resize") Signed-off-by: Vlastimil Babka <vbabka@suse.cz> Reported-by: Fabian Vogt <fvogt@suse.com> Link: https://bugzilla.suse.com/show_bug.cgi?id=1206359#c35 Tested-by: Fabian Vogt <fvogt@suse.com> Cc: Jakub Matěna <matenajakub@gmail.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-09 11:28:22 +01:00
Jann Horn	acb08187b5	mm/khugepaged: fix ->anon_vma race ... commit 023f47a8250c6bdb4aebe744db4bf7f73414028b upstream. If an ->anon_vma is attached to the VMA, collapse_and_free_pmd() requires it to be locked. Page table traversal is allowed under any one of the mmap lock, the anon_vma lock (if the VMA is associated with an anon_vma), and the mapping lock (if the VMA is associated with a mapping); and so to be able to remove page tables, we must hold all three of them. retract_page_tables() bails out if an ->anon_vma is attached, but does this check before holding the mmap lock (as the comment above the check explains). If we racily merged an existing ->anon_vma (shared with a child process) from a neighboring VMA, subsequent rmap traversals on pages belonging to the child will be able to see the page tables that we are concurrently removing while assuming that nothing else can access them. Repeat the ->anon_vma check once we hold the mmap lock to ensure that there really is no concurrent page table access. Hitting this bug causes a lockdep warning in collapse_and_free_pmd(), in the line "lockdep_assert_held_write(&vma->anon_vma->root->rwsem)". It can also lead to use-after-free access. Link: https://lore.kernel.org/linux-mm/CAG48ez3434wZBKFFbdx4M9j6eUwSUVPd4dxhzW_k_POneSDF+A@mail.gmail.com/ Link: https://lkml.kernel.org/r/20230111133351.807024-1-jannh@google.com Fixes: f3f0e1d215 ("khugepaged: add support of collapse for tmpfs/shmem pages") Signed-off-by: Jann Horn <jannh@google.com> Reported-by: Zach O'Keefe <zokeefe@google.com> Acked-by: Kirill A. Shutemov <kirill.shutemov@intel.linux.com> Reviewed-by: Yang Shi <shy828301@gmail.com> Cc: David Hildenbrand <david@redhat.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-09 11:28:22 +01:00
Longlong Xia	49178d4d61	mm/swapfile: add cond_resched() in get_swap_pages() ... commit 7717fc1a12f88701573f9ed897cc4f6699c661e3 upstream. The softlockup still occurs in get_swap_pages() under memory pressure. 64 CPU cores, 64GB memory, and 28 zram devices, the disksize of each zram device is 50MB with same priority as si. Use the stress-ng tool to increase memory pressure, causing the system to oom frequently. The plist_for_each_entry_safe() loops in get_swap_pages() could reach tens of thousands of times to find available space (extreme case: cond_resched() is not called in scan_swap_map_slots()). Let's add cond_resched() into get_swap_pages() when failed to find available space to avoid softlockup. Link: https://lkml.kernel.org/r/20230128094757.1060525-1-xialonglong1@huawei.com Signed-off-by: Longlong Xia <xialonglong1@huawei.com> Reviewed-by: "Huang, Ying" <ying.huang@intel.com> Cc: Chen Wandun <chenwandun@huawei.com> Cc: Huang Ying <ying.huang@intel.com> Cc: Kefeng Wang <wangkefeng.wang@huawei.com> Cc: Nanyong Sun <sunnanyong@huawei.com> Cc: Hugh Dickins <hughd@google.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-09 11:28:22 +01:00
Peter Xu	2d11727655	mm/uffd: fix pte marker when fork() without fork event ... commit 49d6d7fb631345b0f2957a7c4be24ad63903150f upstream. Patch series "mm: Fixes on pte markers". Patch 1 resolves the syzkiller report from Pengfei. Patch 2 further harden pte markers when used with the recent swapin error markers. The major case is we should persist a swapin error marker after fork(), so child shouldn't read a corrupted page. This patch (of 2): When fork(), dst_vma is not guaranteed to have VM_UFFD_WP even if src may have it and has pte marker installed. The warning is improper along with the comment. The right thing is to inherit the pte marker when needed, or keep the dst pte empty. A vague guess is this happened by an accident when there's the prior patch to introduce src/dst vma into this helper during the uffd-wp feature got developed and I probably messed up in the rebase, since if we replace dst_vma with src_vma the warning & comment it all makes sense too. Hugetlb did exactly the right here (copy_hugetlb_page_range()). Fix the general path. Reproducer: https://github.com/xupengfe/syzkaller_logs/blob/main/221208_115556_copy_page_range/repro.c Bugzilla report: https://bugzilla.kernel.org/show_bug.cgi?id=216808 Link: https://lkml.kernel.org/r/20221214200453.1772655-1-peterx@redhat.com Link: https://lkml.kernel.org/r/20221214200453.1772655-2-peterx@redhat.com Fixes: c56d1b62cc ("mm/shmem: handle uffd-wp during fork()") Signed-off-by: Peter Xu <peterx@redhat.com> Reported-by: Pengfei Xu <pengfei.xu@intel.com> Acked-by: David Hildenbrand <david@redhat.com> Reviewed-by: Miaohe Lin <linmiaohe@huawei.com> Cc: Andrea Arcangeli <aarcange@redhat.com> Cc: "Huang, Ying" <ying.huang@intel.com> Cc: Nadav Amit <nadav.amit@gmail.com> Cc: <stable@vger.kernel.org> # 5.19+ Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-09 11:28:22 +01:00
Yu Zhao	0444802231	mm: multi-gen LRU: fix crash during cgroup migration ... commit de08eaa6156405f2e9369f06ba5afae0e4ab3b62 upstream. lru_gen_migrate_mm() assumes lru_gen_add_mm() runs prior to itself. This isn't true for the following scenario: CPU 1 CPU 2 clone() cgroup_can_fork() cgroup_procs_write() cgroup_post_fork() task_lock() lru_gen_migrate_mm() task_unlock() task_lock() lru_gen_add_mm() task_unlock() And when the above happens, kernel crashes because of linked list corruption (mm_struct->lru_gen.list). Link: https://lore.kernel.org/r/20230115134651.30028-1-msizanoen@qtmlabs.xyz/ Link: https://lkml.kernel.org/r/20230116034405.2960276-1-yuzhao@google.com Fixes: bd74fdaea1 ("mm: multi-gen LRU: support page table walks") Signed-off-by: Yu Zhao <yuzhao@google.com> Reported-by: msizanoen <msizanoen@qtmlabs.xyz> Tested-by: msizanoen <msizanoen@qtmlabs.xyz> Cc: <stable@vger.kernel.org> [6.1+] Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-09 11:28:20 +01:00
Al Viro	5a19095103	use less confusing names for iov_iter direction initializers ... [ Upstream commit de4eda9de2d957ef2d6a8365a01e26a435e958cb ] READ/WRITE proved to be actively confusing - the meanings are "data destination, as used with read(2)" and "data source, as used with write(2)", but people keep interpreting those as "we read data from it" and "we write data to it", i.e. exactly the wrong way. Call them ITER_DEST and ITER_SOURCE - at least that is harder to misinterpret... Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> Stable-dep-of: 6dd88fd59da8 ("vhost-scsi: unbreak any layout for response") Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-09 11:28:04 +01:00
Greg Kroah-Hartman	936f394ef7	This is the 6.1.9 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmPaFzoACgkQONu9yGCS aT6Y7Q//bOQ+QfUsJ9oi0hCQpC4L4REaM/WpqyWFn+/75KB4KDZ7IGaHAZ8UZSPQ DwZ0aoIAapQyAL7Q5WUDnG51Q07Xi4NfWPHNlz1FqAKdJu2D8uAmYP9I6M0JpEbg nV5ki8UXETkIu7EnfS7+5MjHLt99DaA+W0Z1J+qqXONRoszELUNfMdTZMoqVX5Vx gqmSpHmySt2mhSr8k4Inx5OvhF6pZ9mQVq0baUEieAcyaRXSRBBLTtOgntcYyq+R aAoCV5E+lLDZVkjntc6wKtTECD6zegfXCBqZdxQ1RUt5SBTn7K2XnGqQt+V3UbeH 5kFwUngvnpGDQeS8VuzWo+yGBLu0cp6PShP329SbO5o0bY8qRxiWfr37sxfMq/yh F947AjG2wWouCK4xle68/O6GvZNLtKJI1Z0MihpFKmeLbvL0S88rkSnhwjPQ5qBe kK8RfUATLKkl6XoTyJT/v/o+/tlAuHj3txrH3zsB0MQWuuxBkZ1JAAnmDnBCcvIJ BAr6HFRFr6kTfcREnMKkWr2EXO98DGrk0Eg9FTedm1F4RSL8iGQenTXNmRMhSxFv /MtF0sRwkstI+v7EINmmK+wNJeye03WjmWDjJVxIqOwfmGC5EfCGhGV4CfmdnBsE N18DZMZ5oc9ft/zmH9Pi/vJUlwRHDS52uQ3r7K3TYXHHveT62FE= =8rzU -----END PGP SIGNATURE----- Merge 6.1.9 into android14-6.1 Changes in 6.1.9 memory: tegra: Remove clients SID override programming memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe() memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe() arm64: dts: qcom: sc8280xp: fix primary USB-DP PHY reset dmaengine: qcom: gpi: Set link_rx bit on GO TRE for rx operation dmaengine: ti: k3-udma: Do conditional decrement of UDMA_CHAN_RT_PEER_BCNT_REG soc: imx: imx8mp-blk-ctrl: enable global pixclk with HDMI_TX_PHY PD arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency' ARM: dts: imx7d-pico: Use 'clock-frequency' ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' arm64: dts: verdin-imx8mm: fix dahlia audio playback arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux arm64: dts: verdin-imx8mm: fix dev board audio playback arm64: dts: imx93-11x11-evk: correct clock and strobe pad setting ARM: imx: add missing of_node_put() soc: imx: imx8mp-blk-ctrl: don't set power device name arm64: dts: imx8mp: Fix missing GPC Interrupt arm64: dts: imx8mp: Fix power-domain typo arm64: dts: imx8mp-evk: pcie0-refclk cosmetic cleanup HID: intel_ish-hid: Add check for ishtp_dma_tx_map arm64: dts: imx8mm-venice-gw7901: fix USB2 controller OC polarity soc: imx8m: Fix incorrect check for of_clk_get_by_name() reset: ti-sci: honor TI_SCI_PROTOCOL setting when not COMPILE_TEST reset: uniphier-glue: Fix possible null-ptr-deref EDAC/highbank: Fix memory leak in highbank_mc_probe() firmware: arm_scmi: Harden shared memory access in fetch_response firmware: arm_scmi: Harden shared memory access in fetch_notification firmware: arm_scmi: Fix virtio channels cleanup on shutdown interconnect: qcom: msm8996: Provide UFS clocks to A2NoC interconnect: qcom: msm8996: Fix regmap max_register values HID: amd_sfh: Fix warning unwind goto tomoyo: fix broken dependency on *.conf.default RDMA/rxe: Fix inaccurate constants in rxe_type_info RDMA/rxe: Prevent faulty rkey generation erofs: fix kvcalloc() misuse with __GFP_NOFAIL arm64: dts: marvell: AC5/AC5X: Fix address for UART1 RDMA/core: Fix ib block iterator counter overflow IB/hfi1: Reject a zero-length user expected buffer IB/hfi1: Reserve user expected TIDs IB/hfi1: Fix expected receive setup error exit issues IB/hfi1: Immediately remove invalid memory from hardware IB/hfi1: Remove user expected buffer invalidate race affs: initialize fsdata in affs_truncate() PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe() arm64: dts: qcom: msm8992: Don't use sfpb mutex arm64: dts: qcom: msm8992-libra: Fix the memory map kbuild: export top-level LDFLAGS_vmlinux only to scripts/Makefile.vmlinux kbuild: fix 'make modules' error when CONFIG_DEBUG_INFO_BTF_MODULES=y phy: ti: fix Kconfig warning and operator precedence drm/msm/gpu: Fix potential double-free NFSD: fix use-after-free in nfsd4_ssc_setup_dul() ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60 drm/vc4: bo: Fix drmm_mutex_init memory hog phy: usb: sunplus: Fix potential null-ptr-deref in sp_usb_phy_probe() bpf: hash map, avoid deadlock with suitable hash mask amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent amd-xgbe: Delay AN timeout during KR training bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation drm/vc4: bo: Fix unused variable warning phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() net: nfc: Fix use-after-free in local_cleanup() net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs net: enetc: avoid deadlock in enetc_tx_onestep_tstamp() net: lan966x: add missing fwnode_handle_put() for ports node sch_htb: Avoid grafting on htb_destroy_class_offload when destroying htb gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid pinctrl: rockchip: fix reading pull type on rk3568 net: stmmac: Fix queue statistics reading net/sched: sch_taprio: fix possible use-after-free l2tp: convert l2tp_tunnel_list to idr l2tp: close all race conditions in l2tp_tunnel_register() net: usb: sr9700: Handle negative len net: mdio: validate parameter addr in mdiobus_get_phy() HID: check empty report_list in hid_validate_values() HID: check empty report_list in bigben_probe() net: stmmac: fix invalid call to mdiobus_get_phy() pinctrl: rockchip: fix mux route data for rk3568 ARM: dts: stm32: Fix qspi pinctrl phandle for stm32mp15xx-dhcor-som ARM: dts: stm32: Fix qspi pinctrl phandle for stm32mp15xx-dhcom-som ARM: dts: stm32: Fix qspi pinctrl phandle for stm32mp157c-emstamp-argon ARM: dts: stm32: Fix qspi pinctrl phandle for stm32mp151a-prtt1l HID: revert CHERRY_MOUSE_000C quirk block/rnbd-clt: fix wrong max ID in ida_alloc_max usb: ucsi: Ensure connector delayed work items are flushed usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait usb: gadget: f_fs: Ensure ep0req is dequeued before free_request netfilter: conntrack: handle tcp challenge acks during connection reuse Bluetooth: Fix a buffer overflow in mgmt_mesh_add() Bluetooth: hci_conn: Fix memory leaks Bluetooth: hci_sync: fix memory leak in hci_update_adv_data() Bluetooth: ISO: Avoid circular locking dependency Bluetooth: ISO: Fix possible circular locking dependency Bluetooth: hci_event: Fix Invalid wait context Bluetooth: Fix possible deadlock in rfcomm_sk_state_change net: ipa: disable ipa interrupt during suspend net/mlx5e: Avoid false lock dependency warning on tc_ht even more net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT net/mlx5e: Set decap action based on attr for sample net/mlx5: E-switch, Fix switchdev mode after devlink reload net: mlx5: eliminate anonymous module_init & module_exit drm/panfrost: fix GENERIC_ATOMIC64 dependency dmaengine: Fix double increment of client_count in dma_chan_get() net: macb: fix PTP TX timestamp failure due to packet padding virtio-net: correctly enable callback during start_xmit l2tp: prevent lockdep issue in l2tp_tunnel_register() HID: betop: check shape of output reports drm/i915/selftests: Unwind hugepages to drop wakeref on error cifs: fix potential deadlock in cache_refresh_path() dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node() dmaengine: tegra: Fix memory leak in terminate_all() phy: phy-can-transceiver: Skip warning if no "max-bitrate" drm/amd/display: fix issues with driver unload net: sched: gred: prevent races when adding offloads to stats nvme-pci: fix timeout request state check tcp: avoid the lookup process failing to get sk in ehash table usb: dwc3: fix extcon dependency ptdma: pt_core_execute_cmd() should use spinlock device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() w1: fix deadloop in __w1_remove_master_device() w1: fix WARNING after calling w1_process() driver core: Fix test_async_probe_init saves device in wrong array selftests/net: toeplitz: fix race on tpacket_v3 block close net: dsa: microchip: ksz9477: port map correction in ALU table entry register thermal: Validate new state in cur_state_store() thermal/core: fix error code in __thermal_cooling_device_register() thermal: core: call put_device() only after device_register() fails net: stmmac: enable all safety features by default bnxt: Do not read past the end of test names tcp: fix rate_app_limited to default to 1 scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace ASoC: SOF: pm: Set target state earlier ASoC: SOF: pm: Always tear down pipelines before DSP suspend ASoC: SOF: Add FW state to debugfs ASoC: amd: yc: Add Razer Blade 14 2022 into DMI table spi: cadence: Fix busy cycles calculation cpufreq: CPPC: Add u64 casts to avoid overflowing cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist ASoC: mediatek: mt8186: support rt5682s_max98360 ASoC: mediatek: mt8186: Add machine support for max98357a ASoC: amd: yc: Add ASUS M5402RA into DMI table ASoC: support machine driver with max98360 kcsan: test: don't put the expect array on the stack cpufreq: Add SM6375 to cpufreq-dt-platdev blocklist ASoC: fsl_micfil: Correct the number of steps on SX controls drm/msm/a6xx: Avoid gx gbit halt during rpm suspend net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem drm: Add orientation quirk for Lenovo ideapad D330-10IGL s390/debug: add _ASM_S390_ prefix to header guard s390: expicitly align _edata and _end symbols on page boundary xen/pvcalls: free active map buffer on pvcalls_front_free_map perf/x86/cstate: Add Meteor Lake support perf/x86/msr: Add Meteor Lake support perf/x86/msr: Add Emerald Rapids perf/x86/intel/uncore: Add Emerald Rapids nolibc: fix fd_set type tools/nolibc: Fix S_ISxxx macros tools/nolibc: fix missing includes causing build issues at -O0 tools/nolibc: prevent gcc from making memset() loop over itself cpufreq: armada-37xx: stop using 0 as NULL pointer ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA drm/amdkfd: Add sync after creating vram bo drm/amdkfd: Fix NULL pointer error for GC 11.0.1 on mGPU cifs: fix potential memory leaks in session setup spi: spidev: remove debug messages that access spidev->spi without locking KVM: s390: interrupt: use READ_ONCE() before cmpxchg() scsi: hisi_sas: Use abort task set to reset SAS disks when discovered scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id r8152: add vendor/device ID pair for Microsoft Devkit platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD platform/x86: asus-nb-wmi: Add alternate mapping for KEY_CAMERA platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK platform/x86: asus-wmi: Add quirk wmi_ignore_fan platform/x86: asus-wmi: Ignore fan on E410MA platform/x86: simatic-ipc: correct name of a model platform/x86: simatic-ipc: add another model lockref: stop doing cpu_relax in the cmpxchg loop ata: pata_cs5535: Don't build on UML firmware: coreboot: Check size of table entry and use flex-array btrfs: zoned: enable metadata over-commit for non-ZNS setup Revert "selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID" arm64: efi: Recover from synchronous exceptions occurring in firmware arm64: efi: Avoid workqueue to check whether EFI runtime is live arm64: efi: Account for the EFI runtime stack in stack unwinder Bluetooth: hci_sync: cancel cmd_timer if hci_open failed drm/i915: Allow panel fixed modes to have differing sync polarities drm/i915: Allow alternate fixed modes always for eDP drm/amdgpu: complete gfxoff allow signal during suspend without delay io_uring/msg_ring: fix remote queue to disabled ring wifi: mac80211: Proper mark iTXQs for resumption wifi: mac80211: Fix iTXQ AMPDU fragmentation handling sched/fair: Check if prev_cpu has highest spare cap in feec() sched/uclamp: Fix a uninitialized variable warnings vfio/type1: Respect IOMMU reserved regions in vfio_test_domain_fgsp() scsi: hpsa: Fix allocation size for scsi_host_alloc() kvm/vfio: Fix potential deadlock on vfio group_lock nfsd: don't free files unconditionally in __nfsd_file_cache_purge module: Don't wait for GOING modules ftrace: Export ftrace_free_filter() to modules tracing: Make sure trace_printk() can output as soon as it can be used trace_events_hist: add check for return value of 'create_hist_field' ftrace/scripts: Update the instructions for ftrace-bisect.sh cifs: Fix oops due to uncleared server->smbd_conn in reconnect ksmbd: add max connections parameter ksmbd: do not sign response to session request for guest login ksmbd: downgrade ndr version error message to debug ksmbd: limit pdu length size according to connection status ovl: fix tmpfile leak ovl: fail on invalid uid/gid mapping at copy up io_uring/net: cache provided buffer group value for multishot receives KVM: x86/vmx: Do not skip segment attributes if unusable bit is set KVM: arm64: GICv4.1: Fix race with doorbell on VPE activation/deactivation scsi: ufs: core: Fix devfreq deadlocks riscv: fix -Wundef warning for CONFIG_RISCV_BOOT_SPINWAIT thermal: intel: int340x: Protect trip temperature from concurrent updates regulator: dt-bindings: samsung,s2mps14: add lost samsung,ext-control-gpios ipv6: fix reachability confirmation with proxy_ndp ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment EDAC/device: Respect any driver-supplied workqueue polling value EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info platform/x86: thinkpad_acpi: Fix profile modes on Intel platforms drm/display/dp_mst: Correct the kref of port. drm/amd/pm: add missing AllowIHInterrupt message mapping for SMU13.0.0 drm/amdgpu: remove unconditional trap enable on add gfx11 queues drm/amdgpu/display/mst: Fix mst_state->pbn_div and slot count assignments drm/amdgpu/display/mst: limit payload to be updated one by one drm/amdgpu/display/mst: update mst_mgr relevant variable when long HPD io_uring: inline io_req_task_work_add() io_uring: inline __io_req_complete_post() io_uring: hold locks for io_req_complete_failed io_uring: use io_req_task_complete() in timeout io_uring: remove io_req_tw_post_queue io_uring: inline __io_req_complete_put() net: mana: Fix IRQ name - add PCI and queue number io_uring: always prep_async for drain requests i2c: designware: use casting of u64 in clock multiplication to avoid overflow i2c: designware: Fix unbalanced suspended flag drm/drm_vma_manager: Add drm_vma_node_allow_once() drm/i915: Fix a memory leak with reused mmap_offset iavf: fix temporary deadlock and failure to set MAC address iavf: schedule watchdog immediately when changing primary MAC netlink: prevent potential spectre v1 gadgets net: fix UaF in netns ops registration error path net: fec: Use page_pool_put_full_page when freeing rx buffers nvme: simplify transport specific device attribute handling nvme: consolidate setting the tagset flags nvme-fc: fix initialization order drm/i915/selftest: fix intel_selftest_modify_policy argument types ACPI: video: Add backlight=native DMI quirk for HP Pavilion g6-1d80nr ACPI: video: Add backlight=native DMI quirk for HP EliteBook 8460p ACPI: video: Add backlight=native DMI quirk for Asus U46E netfilter: nft_set_rbtree: Switch to node list walk for overlap detection netfilter: nft_set_rbtree: skip elements in transaction from garbage collection netlink: annotate data races around nlk->portid netlink: annotate data races around dst_portid and dst_group netlink: annotate data races around sk_state ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() ipv4: prevent potential spectre v1 gadget in fib_metrics_match() net: dsa: microchip: fix probe of I2C-connected KSZ8563 net: ethernet: adi: adin1110: Fix multicast offloading netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE netrom: Fix use-after-free of a listening socket. platform/x86: asus-wmi: Fix kbd_dock_devid tablet-switch reporting platform/x86: apple-gmux: Move port defines to apple-gmux.h platform/x86: apple-gmux: Add apple_gmux_detect() helper ACPI: video: Fix apple gmux detection tracing/osnoise: Use built-in RCU list checking net/sched: sch_taprio: do not schedule in taprio_reset() sctp: fail if no bound addresses can be used for a given scope riscv/kprobe: Fix instruction simulation of JALR nvme: fix passthrough csi check gpio: mxc: Unlock on error path in mxc_flip_edge() gpio: ep93xx: Fix port F hwirq numbers in handler net: ravb: Fix lack of register setting after system resumed for Gen3 net: ravb: Fix possible hang if RIS2_QFF1 happen net: mctp: add an explicit reference from a mctp_sk_key to sock net: mctp: move expiry timer delete to unhash net: mctp: hold key reference when looking up a general key net: mctp: mark socks as dead on unhash, prevent re-add thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type() riscv: Move call to init_cpu_topology() to later initialization stage net/tg3: resolve deadlock in tg3_reset_task() during EEH tsnep: Fix TX queue stop/wake for multiple queues net: mdio-mux-meson-g12a: force internal PHY off on mux switch Partially revert "perf/arm-cmn: Optimise DTC counter accesses" block: ublk: move ublk_chr_class destroying after devices are removed treewide: fix up files incorrectly marked executable tools: gpio: fix -c option of gpio-event-mon Fix up more non-executable files marked executable Revert "mm/compaction: fix set skip in fast_find_migrateblock" Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode" Input: i8042 - add Clevo PCX0DX to i8042 quirk table x86/sev: Add SEV-SNP guest feature negotiation support acpi: Fix suspend with Xen PV dt-bindings: riscv: fix underscore requirement for multi-letter extensions dt-bindings: riscv: fix single letter canonical order x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL dt-bindings: i2c: renesas,rzv2m: Fix SoC specific string netfilter: conntrack: unify established states for SCTP paths perf/x86/amd: fix potential integer overflow on shift of a int amdgpu: fix build on non-DCN platforms. Linux 6.1.9 Change-Id: I750dee519337922880b87841f6732565961c6b0a Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-02-01 09:12:59 +00:00
Vlastimil Babka	e1275a6b2d	Revert "mm/compaction: fix set skip in fast_find_migrateblock" ... commit 95e7a450b8190673675836bfef236262ceff084a upstream. This reverts commit 7efc3b7261. We have got openSUSE reports (Link 1) for 6.1 kernel with khugepaged stalling CPU for long periods of time. Investigation of tracepoint data shows that compaction is stuck in repeating fast_find_migrateblock() based migrate page isolation, and then fails to migrate all isolated pages. Commit 7efc3b7261 ("mm/compaction: fix set skip in fast_find_migrateblock") was suspected as it was merged in 6.1 and in theory can indeed remove a termination condition for fast_find_migrateblock() under certain conditions, as it removes a place that always marks a scanned pageblock from being re-scanned. There are other such places, but those can be skipped under certain conditions, which seems to match the tracepoint data. Testing of revert also appears to have resolved the issue, thus revert the commit until a more robust solution for the original problem is developed. It's also likely this will fix qemu stalls with 6.1 kernel reported in Link 2, but that is not yet confirmed. Link: https://bugzilla.suse.com/show_bug.cgi?id=1206848 Link: https://lore.kernel.org/kvm/b8017e09-f336-3035-8344-c549086c2340@kernel.org/ Link: https://lore.kernel.org/lkml/20230125134434.18017-1-mgorman@techsingularity.net/ Fixes: 7efc3b7261 ("mm/compaction: fix set skip in fast_find_migrateblock") Cc: <stable@vger.kernel.org> Tested-by: Pedro Falcato <pedro.falcato@gmail.com> Acked-by: Mel Gorman <mgorman@techsingularity.net> Signed-off-by: Vlastimil Babka <vbabka@suse.cz> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-01 08:34:49 +01:00
Greg Kroah-Hartman	ee921ef7b4	Merge 6.1.8 into android14-6.1 ... Changes in 6.1.8 dma-buf: fix dma_buf_export init order v2 btrfs: fix trace event name typo for FLUSH_DELAYED_REFS wifi: iwlwifi: fw: skip PPAG for JF pNFS/filelayout: Fix coalescing test for single DS selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID net: ethernet: marvell: octeontx2: Fix uninitialized variable warning tools/virtio: initialize spinlocks in vring_test.c vdpa/mlx5: Return error on vlan ctrl commands if not supported vdpa/mlx5: Avoid using reslock in event_handler vdpa/mlx5: Avoid overwriting CVQ iotlb virtio_pci: modify ENOENT to EINVAL vduse: Validate vq_num in vduse_validate_config() vdpa_sim_net: should not drop the multicast/broadcast packet net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down() r8169: fix dmar pte write access is not set error bpf: keep a reference to the mm, in case the task is dead. RDMA/srp: Move large values to a new enum for gcc13 selftests: net: fix cmsg_so_mark.sh test hang btrfs: always report error in run_one_delayed_ref() x86/asm: Fix an assembler warning with current binutils f2fs: let's avoid panic if extent_tree is not created perf/x86/rapl: Treat Tigerlake like Icelake cifs: fix race in assemble_neg_contexts() memblock tests: Fix compilation error. perf/x86/rapl: Add support for Intel Meteor Lake perf/x86/rapl: Add support for Intel Emerald Rapids of: fdt: Honor CONFIG_CMDLINE* even without /chosen node, take 2 fbdev: omapfb: avoid stack overflow warning Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 Bluetooth: hci_qca: Fix driver shutdown on closed serdev wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices wifi: mac80211: fix MLO + AP_VLAN check wifi: mac80211: reset multiple BSSID options in stop_ap() wifi: mac80211: sdata can be NULL during AMPDU start wifi: mac80211: fix initialization of rx->link and rx->link_sta nommu: fix memory leak in do_mmap() error path nommu: fix do_munmap() error path nommu: fix split_vma() map_count error proc: fix PIE proc-empty-vm, proc-pid-vm tests Add exception protection processing for vd in axi_chan_handle_err function LoongArch: Add HWCAP_LOONGARCH_CPUCFG to elf_hwcap zonefs: Detect append writes at invalid locations nilfs2: fix general protection fault in nilfs_btree_insert() mm/shmem: restore SHMEM_HUGE_DENY precedence over MADV_COLLAPSE hugetlb: unshare some PMDs when splitting VMAs mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma serial: stm32: Merge hard IRQ and threaded IRQ handling into single IRQ handler Revert "serial: stm32: Merge hard IRQ and threaded IRQ handling into single IRQ handler" xhci-pci: set the dma max_seg_size usb: xhci: Check endpoint is valid before dereferencing it xhci: Fix null pointer dereference when host dies xhci: Add update_hub_device override for PCI xHCI hosts xhci: Add a flag to disable USB3 lpm on a xhci root port level. usb: acpi: add helper to check port lpm capability using acpi _DSM xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables prlimit: do_prlimit needs to have a speculation check USB: serial: option: add Quectel EM05-G (GR) modem USB: serial: option: add Quectel EM05-G (CS) modem USB: serial: option: add Quectel EM05-G (RS) modem USB: serial: option: add Quectel EC200U modem USB: serial: option: add Quectel EM05CN (SG) modem USB: serial: option: add Quectel EM05CN modem staging: vchiq_arm: fix enum vchiq_status return types USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 usb: misc: onboard_hub: Invert driver registration order usb: misc: onboard_hub: Move 'attach' work to the driver misc: fastrpc: Fix use-after-free and race in fastrpc_map_find misc: fastrpc: Don't remove map on creater_process and device_release misc: fastrpc: Fix use-after-free race condition for maps usb: core: hub: disable autosuspend for TI TUSB8041 comedi: adv_pci1760: Fix PWM instruction handling ACPI: PRM: Check whether EFI runtime is available mmc: sunxi-mmc: Fix clock refcount imbalance during unbind mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting mm/hugetlb: fix PTE marker handling in hugetlb_change_protection() mm/hugetlb: fix uffd-wp handling for migration entries in hugetlb_change_protection() mm/hugetlb: pre-allocate pgtable pages for uffd wr-protects mm/userfaultfd: enable writenotify while userfaultfd-wp is enabled for a VMA mm/MADV_COLLAPSE: don't expand collapse when vm_end is past requested end btrfs: add extra error messages to cover non-ENOMEM errors from device_add_list() btrfs: fix missing error handling when logging directory items btrfs: fix directory logging due to race with concurrent index key deletion btrfs: add missing setup of log for full commit at add_conflicting_inode() btrfs: do not abort transaction on failure to write log tree when syncing log btrfs: do not abort transaction on failure to update log root btrfs: qgroup: do not warn on record without old_roots populated btrfs: fix invalid leaf access due to inline extent during lseek btrfs: fix race between quota rescan and disable leading to NULL pointer deref cifs: do not include page data when checking signature thunderbolt: Disable XDomain lane 1 only in software connection manager thunderbolt: Use correct function to calculate maximum USB3 link rate thunderbolt: Do not report errors if on-board retimers are found thunderbolt: Do not call PM runtime functions in tb_retimer_scan() riscv: dts: sifive: fu740: fix size of pcie 32bit memory bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer tty: fix possible null-ptr-defer in spk_ttyio_release pktcdvd: check for NULL returna fter calling bio_split_to_limits() io_uring/poll: don't reissue in case of poll race on multishot request mptcp: explicitly specify sock family at subflow creation time mptcp: netlink: respect v4/v6-only sockets selftests: mptcp: userspace: validate v4-v6 subflows mix USB: gadgetfs: Fix race between mounting and unmounting USB: serial: cp210x: add SCALANCE LPE-9000 device id usb: cdns3: remove fetched trb from cache before dequeuing usb: host: ehci-fsl: Fix module alias usb: musb: fix error return code in omap2430_probe() usb: typec: tcpm: Fix altmode re-registration causes sysfs create fail usb: typec: altmodes/displayport: Add pin assignment helper usb: typec: altmodes/displayport: Fix pin assignment calculation usb: gadget: g_webcam: Send color matching descriptor per frame USB: gadget: Add ID numbers to configfs-gadget driver names usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 arm64: dts: imx8mp: correct usb clocks dt-bindings: phy: g12a-usb2-phy: fix compatible string documentation dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation serial: pch_uart: Pass correct sg to dma_unmap_sg() dmaengine: lgm: Move DT parsing after initialization dmaengine: tegra210-adma: fix global intr clear dmaengine: idxd: Let probe fail when workqueue cannot be enabled dmaengine: idxd: Prevent use after free on completion memory dmaengine: idxd: Do not call DMX TX callbacks during workqueue disable serial: amba-pl011: fix high priority character transmission in rs486 mode serial: atmel: fix incorrect baudrate setup serial: exar: Add support for Sealevel 7xxxC serial cards gsmi: fix null-deref in gsmi_get_variable mei: bus: fix unlink on bus in error path mei: me: add meteor lake point M DID VMCI: Use threaded irqs instead of tasklets ARM: dts: qcom: apq8084-ifc6540: fix overriding SDHCI ARM: omap1: fix !ARCH_OMAP1_ANY link failures drm/amdgpu: fix amdgpu_job_free_resources v2 drm/amdgpu: allow multipipe policy on ASICs with one MEC drm/amdgpu: Correct the power calcultion for Renior/Cezanne. drm/i915: re-disable RC6p on Sandy Bridge drm/i915/display: Check source height is > 0 drm/i915: Allow switching away via vga-switcheroo if uninitialized drm/i915: Remove unused variable drm/amd/display: Fix set scaling doesn's work drm/amd/display: Calculate output_color_space after pixel encoding adjustment drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix drm/amd/display: disable S/G display on DCN 3.1.5 drm/amd/display: disable S/G display on DCN 3.1.4 cifs: reduce roundtrips on create/qinfo requests fs/ntfs3: Fix attr_punch_hole() null pointer derenference arm64: efi: Execute runtime services from a dedicated stack efi: rt-wrapper: Add missing include panic: Separate sysctl logic from CONFIG_SMP exit: Put an upper limit on how often we can oops exit: Expose "oops_count" to sysfs exit: Allow oops_limit to be disabled panic: Consolidate open-coded panic_on_warn checks panic: Introduce warn_limit panic: Expose "warn_count" to sysfs docs: Fix path paste-o for /sys/kernel/warn_count exit: Use READ_ONCE() for all oops/warn limit reads x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN drm/amdgpu/discovery: enable soc21 common for GC 11.0.4 drm/amdgpu/discovery: enable gmc v11 for GC 11.0.4 drm/amdgpu/discovery: enable gfx v11 for GC 11.0.4 drm/amdgpu/discovery: enable mes support for GC v11.0.4 drm/amdgpu: set GC 11.0.4 family drm/amdgpu/discovery: set the APU flag for GC 11.0.4 drm/amdgpu: add gfx support for GC 11.0.4 drm/amdgpu: add gmc v11 support for GC 11.0.4 drm/amdgpu/discovery: add PSP IP v13.0.11 support drm/amdgpu/pm: enable swsmu for SMU IP v13.0.11 drm/amdgpu: add smu 13 support for smu 13.0.11 drm/amdgpu/pm: add GFXOFF control IP version check for SMU IP v13.0.11 drm/amdgpu/soc21: add mode2 asic reset for SMU IP v13.0.11 drm/amdgpu/pm: use the specific mailbox registers only for SMU IP v13.0.4 drm/amdgpu/discovery: enable nbio support for NBIO v7.7.1 drm/amdgpu: enable PSP IP v13.0.11 support drm/amdgpu: enable GFX IP v11.0.4 CG support drm/amdgpu: enable GFX Power Gating for GC IP v11.0.4 drm/amdgpu: enable GFX Clock Gating control for GC IP v11.0.4 drm/amdgpu: add tmz support for GC 11.0.1 drm/amdgpu: add tmz support for GC IP v11.0.4 drm/amdgpu: correct MEC number for gfx11 APUs octeontx2-pf: Avoid use of GFP_KERNEL in atomic context net/ulp: use consistent error code when blocking ULP octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() block: mq-deadline: Rename deadline_is_seq_writes() Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()" soc: qcom: apr: Make qcom,protection-domain optional again Linux 6.1.8 Change-Id: I35d5b5a1ed4822eddb2fc8b29b323b36f7d11926 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-01-26 12:13:04 +00:00
Andrey Konovalov	9f7f5a25f3	FROMLIST: kasan: reset page tags properly with sampling ... [The patch is in the mm-unstable tree.] The implementation of page_alloc poisoning sampling assumed that tag_clear_highpage resets page tags for __GFP_ZEROTAGS allocations. However, this is no longer the case since commit 70c248aca9 ("mm: kasan: Skip unpoisoning of user pages"). This leads to kernel crashes when MTE-enabled userspace mappings are used with Hardware Tag-Based KASAN enabled. Reset page tags for __GFP_ZEROTAGS allocations in post_alloc_hook(). Also clarify and fix related comments. Fixes: 44383cef54c0 ("kasan: allow sampling page_alloc allocations for HW_TAGS") Signed-off-by: Andrey Konovalov <andreyknvl@google.com> Reported-by: Peter Collingbourne <pcc@google.com> Tested-by: Peter Collingbourne <pcc@google.com> Cc: Alexander Potapenko <glider@google.com> Cc: Andrey Ryabinin <ryabinin.a.a@gmail.com> Cc: Dmitry Vyukov <dvyukov@google.com> Cc: Marco Elver <elver@google.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Bug: 238286329 Bug: 264310057 Link: https://lore.kernel.org/all/5dbd866714b4839069e2d8469ac45b60953db290.1674592780.git.andreyknvl@google.com/ Change-Id: Iea4234bcf7e35337c8063827b07039583bca9c66 Signed-off-by: Andrey Konovalov <andreyknvl@google.com>	2023-01-25 00:06:38 +01:00
Andrey Konovalov	5b43ea3757	FROMGIT: kasan: allow sampling page_alloc allocations for HW_TAGS ... [The patch is in mm-stable tree.] As Hardware Tag-Based KASAN is intended to be used in production, its performance impact is crucial. As page_alloc allocations tend to be big, tagging and checking all such allocations can introduce a significant slowdown. Add two new boot parameters that allow to alleviate that slowdown: - kasan.page_alloc.sample, which makes Hardware Tag-Based KASAN tag only every Nth page_alloc allocation with the order configured by the second added parameter (default: tag every such allocation). - kasan.page_alloc.sample.order, which makes sampling enabled by the first parameter only affect page_alloc allocations with the order equal or greater than the specified value (default: 3, see below). The exact performance improvement caused by using the new parameters depends on their values and the applied workload. The chosen default value for kasan.page_alloc.sample.order is 3, which matches both PAGE_ALLOC_COSTLY_ORDER and SKB_FRAG_PAGE_ORDER. This is done for two reasons: 1. PAGE_ALLOC_COSTLY_ORDER is "the order at which allocations are deemed costly to service", which corresponds to the idea that only large and thus costly allocations are supposed to sampled. 2. One of the workloads targeted by this patch is a benchmark that sends a large amount of data over a local loopback connection. Most multi-page data allocations in the networking subsystem have the order of SKB_FRAG_PAGE_ORDER (or PAGE_ALLOC_COSTLY_ORDER). When running a local loopback test on a testing MTE-enabled device in sync mode, enabling Hardware Tag-Based KASAN introduces a ~50% slowdown. Applying this patch and setting kasan.page_alloc.sampling to a value higher than 1 allows to lower the slowdown. The performance improvement saturates around the sampling interval value of 10 with the default sampling page order of 3. This lowers the slowdown to ~20%. The slowdown in real scenarios involving the network will likely be better. Enabling page_alloc sampling has a downside: KASAN misses bad accesses to a page_alloc allocation that has not been tagged. This lowers the value of KASAN as a security mitigation. However, based on measuring the number of page_alloc allocations of different orders during boot in a test build, sampling with the default kasan.page_alloc.sample.order value affects only ~7% of allocations. The rest ~93% of allocations are still checked deterministically. Link: https://lkml.kernel.org/r/129da0614123bb85ed4dd61ae30842b2dd7c903f.1671471846.git.andreyknvl@google.com Signed-off-by: Andrey Konovalov <andreyknvl@google.com> Reviewed-by: Marco Elver <elver@google.com> Cc: Alexander Potapenko <glider@google.com> Cc: Andrey Ryabinin <ryabinin.a.a@gmail.com> Cc: Dmitry Vyukov <dvyukov@google.com> Cc: Evgenii Stepanov <eugenis@google.com> Cc: Jann Horn <jannh@google.com> Cc: Mark Brand <markbrand@google.com> Cc: Peter Collingbourne <pcc@google.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Bug: 238286329 Bug: 264310057 (cherry picked from commit 44383cef54c0ce1201f884d83cc2b367bc5aa4f7 git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm.git mm-stable) Change-Id: I85f9eb4e93eeddff8f8d06238f433226affca177 Signed-off-by: Andrey Konovalov <andreyknvl@google.com>	2023-01-25 00:06:37 +01:00
Kees Cook	13aa82f007	panic: Consolidate open-coded panic_on_warn checks ... commit 79cc1ba7badf9e7a12af99695a557e9ce27ee967 upstream. Several run-time checkers (KASAN, UBSAN, KFENCE, KCSAN, sched) roll their own warnings, and each check "panic_on_warn". Consolidate this into a single function so that future instrumentation can be added in a single location. Cc: Marco Elver <elver@google.com> Cc: Dmitry Vyukov <dvyukov@google.com> Cc: Ingo Molnar <mingo@redhat.com> Cc: Peter Zijlstra <peterz@infradead.org> Cc: Juri Lelli <juri.lelli@redhat.com> Cc: Vincent Guittot <vincent.guittot@linaro.org> Cc: Dietmar Eggemann <dietmar.eggemann@arm.com> Cc: Steven Rostedt <rostedt@goodmis.org> Cc: Ben Segall <bsegall@google.com> Cc: Mel Gorman <mgorman@suse.de> Cc: Daniel Bristot de Oliveira <bristot@redhat.com> Cc: Valentin Schneider <vschneid@redhat.com> Cc: Andrey Ryabinin <ryabinin.a.a@gmail.com> Cc: Alexander Potapenko <glider@google.com> Cc: Andrey Konovalov <andreyknvl@gmail.com> Cc: Vincenzo Frascino <vincenzo.frascino@arm.com> Cc: Andrew Morton <akpm@linux-foundation.org> Cc: David Gow <davidgow@google.com> Cc: tangmeng <tangmeng@uniontech.com> Cc: Jann Horn <jannh@google.com> Cc: Shuah Khan <skhan@linuxfoundation.org> Cc: Petr Mladek <pmladek@suse.com> Cc: "Paul E. McKenney" <paulmck@kernel.org> Cc: Sebastian Andrzej Siewior <bigeasy@linutronix.de> Cc: "Guilherme G. Piccoli" <gpiccoli@igalia.com> Cc: Tiezhu Yang <yangtiezhu@loongson.cn> Cc: kasan-dev@googlegroups.com Cc: linux-mm@kvack.org Reviewed-by: Luis Chamberlain <mcgrof@kernel.org> Signed-off-by: Kees Cook <keescook@chromium.org> Reviewed-by: Marco Elver <elver@google.com> Reviewed-by: Andrey Konovalov <andreyknvl@gmail.com> Link: https://lore.kernel.org/r/20221117234328.594699-4-keescook@chromium.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-01-24 07:24:41 +01:00
Zach O'Keefe	f2f52dd4f5	mm/MADV_COLLAPSE: don't expand collapse when vm_end is past requested end ... commit 52dc031088f00e323140ece4004e70c33153c6dd upstream. MADV_COLLAPSE acts on one hugepage-aligned/sized region at a time, until it has collapsed all eligible memory contained within the bounds supplied by the user. At the top of each hugepage iteration we (re)lock mmap_lock and (re)validate the VMA for eligibility and update variables that might have changed while mmap_lock was dropped. One thing that might occur is that the VMA could be resized, and as such, we refetch vma->vm_end to make sure we don't collapse past the end of the VMA's new end. However, it's possible that when refetching vma->vm_end that we expand the region acted on by MADV_COLLAPSE if vma->vm_end is greater than size+len supplied by the user. The consequence here is that we may attempt to collapse more memory than requested, possibly yielding either "too much success" or "false failure" user-visible results. An example of the former is if we MADV_COLLAPSE the first 4MiB of a 2TiB mmap()'d file, the incorrect refetch would cause the operation to block for much longer than anticipated as we attempt to collapse the entire TiB region. An example of the latter is that applying MADV_COLLPSE to a 4MiB file mapped to the start of a 6MiB VMA will successfully collapse the first 4MiB, then incorrectly attempt to collapse the last hugepage-aligned/sized region -- fail (since readahead/page cache lookup will fail) -- and report a failure to the user. I don't believe there is a kernel stability concern here as we always (re)validate the VMA / region accordingly. Also as Hugh mentions, the user-visible effects are: we try to collapse more memory than requested by the user, and/or failing an operation that should have otherwise succeeded. An example is trying to collapse a 4MiB file contained within a 12MiB VMA. Don't expand the acted-on region when refetching vma->vm_end. Link: https://lkml.kernel.org/r/20221224082035.3197140-1-zokeefe@google.com Fixes: 4d24de9425 ("mm: MADV_COLLAPSE: refetch vm_end after reacquiring mmap_lock") Signed-off-by: Zach O'Keefe <zokeefe@google.com> Reported-by: Hugh Dickins <hughd@google.com> Cc: Yang Shi <shy828301@gmail.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-01-24 07:24:36 +01:00
David Hildenbrand	bcde505af1	mm/userfaultfd: enable writenotify while userfaultfd-wp is enabled for a VMA ... commit 51d3d5eb74ff53b92dcff48b30ae2ed8edd85a32 upstream. Currently, we don't enable writenotify when enabling userfaultfd-wp on a shared writable mapping (for now only shmem and hugetlb). The consequence is that vma->vm_page_prot will still include write permissions, to be set as default for all PTEs that get remapped (e.g., mprotect(), NUMA hinting, page migration, ...). So far, vma->vm_page_prot is assumed to be a safe default, meaning that we only add permissions (e.g., mkwrite) but not remove permissions (e.g., wrprotect). For example, when enabling softdirty tracking, we enable writenotify. With uffd-wp on shared mappings, that changed. More details on vma->vm_page_prot semantics were summarized in [1]. This is problematic for uffd-wp: we'd have to manually check for a uffd-wp PTEs/PMDs and manually write-protect PTEs/PMDs, which is error prone. Prone to such issues is any code that uses vma->vm_page_prot to set PTE permissions: primarily pte_modify() and mk_pte(). Instead, let's enable writenotify such that PTEs/PMDs/... will be mapped write-protected as default and we will only allow selected PTEs that are definitely safe to be mapped without write-protection (see can_change_pte_writable()) to be writable. In the future, we might want to enable write-bit recovery -- e.g., can_change_pte_writable() -- at more locations, for example, also when removing uffd-wp protection. This fixes two known cases: (a) remove_migration_pte() mapping uffd-wp'ed PTEs writable, resulting in uffd-wp not triggering on write access. (b) do_numa_page() / do_huge_pmd_numa_page() mapping uffd-wp'ed PTEs/PMDs writable, resulting in uffd-wp not triggering on write access. Note that do_numa_page() / do_huge_pmd_numa_page() can be reached even without NUMA hinting (which currently doesn't seem to be applicable to shmem), for example, by using uffd-wp with a PROT_WRITE shmem VMA. On such a VMA, userfaultfd-wp is currently non-functional. Note that when enabling userfaultfd-wp, there is no need to walk page tables to enforce the new default protection for the PTEs: we know that they cannot be uffd-wp'ed yet, because that can only happen after enabling uffd-wp for the VMA in general. Also note that this makes mprotect() on ranges with uffd-wp'ed PTEs not accidentally set the write bit -- which would result in uffd-wp not triggering on later write access. This commit makes uffd-wp on shmem behave just like uffd-wp on anonymous memory in that regard, even though, mixing mprotect with uffd-wp is controversial. [1] https://lkml.kernel.org/r/92173bad-caa3-6b43-9d1e-9a471fdbc184@redhat.com Link: https://lkml.kernel.org/r/20221209080912.7968-1-david@redhat.com Fixes: b1f9e87686 ("mm/uffd: enable write protection for shmem & hugetlbfs") Signed-off-by: David Hildenbrand <david@redhat.com> Reported-by: Ives van Hoorne <ives@codesandbox.io> Debugged-by: Peter Xu <peterx@redhat.com> Acked-by: Peter Xu <peterx@redhat.com> Cc: Hugh Dickins <hughd@google.com> Cc: Alistair Popple <apopple@nvidia.com> Cc: Mike Rapoport <rppt@linux.vnet.ibm.com> Cc: Nadav Amit <nadav.amit@gmail.com> Cc: Andrea Arcangeli <aarcange@redhat.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-01-24 07:24:36 +01:00
Peter Xu	3b8ede6665	mm/hugetlb: pre-allocate pgtable pages for uffd wr-protects ... commit fed15f1345dc8a7fc8baa81e8b55c3ba010d7f4b upstream. Userfaultfd-wp uses pte markers to mark wr-protected pages for both shmem and hugetlb. Shmem has pre-allocation ready for markers, but hugetlb path was overlooked. Doing so by calling huge_pte_alloc() if the initial pgtable walk fails to find the huge ptep. It's possible that huge_pte_alloc() can fail with high memory pressure, in that case stop the loop immediately and fail silently. This is not the most ideal solution but it matches with what we do with shmem meanwhile it avoids the splat in dmesg. Link: https://lkml.kernel.org/r/20230104225207.1066932-2-peterx@redhat.com Fixes: 60dfaad65a ("mm/hugetlb: allow uffd wr-protect none ptes") Signed-off-by: Peter Xu <peterx@redhat.com> Reported-by: James Houghton <jthoughton@google.com> Reviewed-by: Mike Kravetz <mike.kravetz@oracle.com> Acked-by: David Hildenbrand <david@redhat.com> Acked-by: James Houghton <jthoughton@google.com> Cc: Andrea Arcangeli <aarcange@redhat.com> Cc: Axel Rasmussen <axelrasmussen@google.com> Cc: Muchun Song <songmuchun@bytedance.com> Cc: Nadav Amit <nadav.amit@gmail.com> Cc: <stable@vger.kernel.org> [5.19+] Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-01-24 07:24:36 +01:00