android_kernel_samsung_sm8650

Author	SHA1	Message	Date
Greg Kroah-Hartman	3ca4271578	Reapply "Merge tag 'android14-6.1.75_r00' into android14-6.1" This reverts commit `6bad1052c2`, it is the LTS merge that had to previously get reverted due to being merged too early. Cc: Todd Kjos <tkjos@google.com> Change-Id: I31b7d660bd833cf022ac4870f6d01e723fda5182 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-04-02 19:49:12 +00:00
Konstantin Vyshetsky	3f5807c586	ANDROID: fips140: change linker script guard Currently, the linker script's support for merging module's section is guarded by either CONFIG_LTO_CLANG or CONFIG_CRYPTO_FIPS140_MOD. This functionally is also needed by additional fips140 modules built out of tree. So, have an explicit config (CRYPTO_FIPS140_MERGE_MOD_SECTIONS) that can be selected by the various fips140 modules without having to depend on and enabling CONFIG_CRYPTO_FIPS140_MOD. Bug: 281657135 Change-Id: I2af727813151ba839a95696bc847e2a841a7175a Signed-off-by: Konstantin Vyshetsky <vkon@google.com>	2024-03-20 01:46:46 +00:00
Eric Biggers	65d457fae4	ANDROID: fips140 - fix integrity check by unapplying dynamic SCS Since the kernel now has dynamic Shadow Call Stack (SCS) enabled, on CPUs that don't support Pointer Authentication Codes (PAC) the kernel runtime-patches paciasp and autiasp instructions into instructions that push and pop from the shadow call stack. This includes instructions in loaded modules. This broke the fips140 integrity check which needs to know how to undo all text changes made by the module loader in order to re-create the original text. Fix this by updating fips140.ko to undo the dynamic SCS patching. Bug: 188620248 Change-Id: I992bcd6c34b3340c6489b40a125715e1304cb445 Signed-off-by: Eric Biggers <ebiggers@google.com>	2024-03-13 14:09:58 +00:00
Eric Biggers	1616e03be1	ANDROID: fips140 - add option for debugging the integrity check There now have been two times where I've had to debug the fips140 integrity check failing due to a new type of runtime code patching. Debugging such issues requires dumping the text and rodata actually used for the integrity check and comparing them with the originals. Add a kconfig option to make this easier. Similar to CRYPTO_FIPS140_MOD_EVAL_TESTING, the production build won't use this. Bug: 188620248 Change-Id: I392de466ff31f999d65997dbc610e23e9eeca49d Signed-off-by: Eric Biggers <ebiggers@google.com>	2024-03-13 14:09:58 +00:00
Todd Kjos	6bad1052c2	Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" This reverts commit `1dbafe61e3`. Reason for revert: Too early. Needs to wait until 2024-03-27 Change-Id: I769b944bd089aa2278659ec87f7ba4ac4e74ee4a Signed-off-by: Todd Kjos <tkjos@google.com>	2024-03-07 21:18:27 +00:00
Greg Kroah-Hartman	c16bb76a0c	This is the 6.1.75 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmWy7o0ACgkQONu9yGCS aT76JA/9Gh3VNSLG35LaLyq3xGd827N6DPsMzeFHi+MGSyPVg0auE77QkHD/gZl9 KynmBmz2+9DSoFxymWAS9oEPM8d/vw87AMuSTTct3GKkjEeUcj9lbeOEzgZydXX8 cJSXvcCeKE3FESU/YbQKxo0N+r7tUDmnCR0edss5/FpYni3jPdg7jdESzGhiCHXj r5rjrTE6h7Z/d+2kaKqlheL4o4OkV0YwnFnU2gC3MOOvLmgvXdOVQQsyaZ+WgSAN 0JS0Q6Xk1xyYWx8iFaLGWIs1pUsQPKxIiRG3N/1KmXITopf2Pu68Yy7ST+YryDkO nLcNrr3gsQxrM6MYnEhLzlxs3H1KuAVxJ4Y/dNqJnDxn0OJjcY3repwempz5Sxtk 0OLDOsCICAiMHeF8rYIGhm09WdowLz0EH+sqadIGqWKzW/BcXqD+r9mpF1lwk1ZL FJLgLmtOaG4amI46lEUHQ6ujN7Oad3gLYzudq2zKLeqonSIjm1TuDoMRvHWFsspO 5i9I0x7Vlo3PqCl7kkKVL9PvVHx6BXJGFShABJqa9ao/oHxkOWuIt26pxUoLUN3P 7Wa5WnfdlDd9nR3VGHcVe2ncuRmEfuriYpXvItJ7/KJKyIPkGoPehAh+vbZMoEy0 DwhtD9PPsTlnUufbcZdHavYA1E4y/uXDMOIGB+ERpsTdXh9DwEo= =2XHn -----END PGP SIGNATURE----- Merge 6.1.75 into android14-6.1-lts Changes in 6.1.75 x86/lib: Fix overflow when counting digits x86/mce/inject: Clear test status value EDAC/thunderx: Fix possible out-of-bounds string access powerpc: remove checks for binutils older than 2.25 powerpc: add crtsavres.o to always-y instead of extra-y powerpc/44x: select I2C for CURRITUCK powerpc/pseries/memhp: Fix access beyond end of drmem array selftests/powerpc: Fix error handling in FPU/VMX preemption tests powerpc/powernv: Add a null pointer check to scom_debug_init_one() powerpc/powernv: Add a null pointer check in opal_event_init() powerpc/powernv: Add a null pointer check in opal_powercap_init() powerpc/imc-pmu: Add a null pointer check in update_events_in_group() spi: spi-zynqmp-gqspi: fix driver kconfig dependencies mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response ACPI: video: check for error while searching for backlight device parent ACPI: LPIT: Avoid u32 multiplication overflow KEYS: encrypted: Add check for strsep platform/x86/intel/vsec: Enhance and Export intel_vsec_add_aux() platform/x86/intel/vsec: Support private data platform/x86/intel/vsec: Use mutex for ida_alloc() and ida_free() platform/x86/intel/vsec: Fix xa_alloc memory leak of: Add of_property_present() helper cpufreq: Use of_property_present() for testing DT property presence cpufreq: scmi: process the result of devm_of_clk_add_hw_provider() calipso: fix memory leak in netlbl_calipso_add_pass() efivarfs: force RO when remounting if SetVariable is not supported efivarfs: Free s_fs_info on unmount spi: sh-msiof: Enforce fixed DTDL for R-Car H3 ACPI: LPSS: Fix the fractional clock divider flags ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error kunit: debugfs: Fix unchecked dereference in debugfs_print_results() mtd: Fix gluebi NULL pointer dereference caused by ftl notifier selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket crypto: virtio - Handle dataq logic with tasklet crypto: sa2ul - Return crypto_aead_setkey to transfer the error crypto: ccp - fix memleak in ccp_init_dm_workarea crypto: af_alg - Disallow multiple in-flight AIO requests crypto: safexcel - Add error handling for dma_map_sg() calls crypto: sahara - remove FLAGS_NEW_KEY logic crypto: sahara - fix cbc selftest failure crypto: sahara - fix ahash selftest failure crypto: sahara - fix processing requests with cryptlen < sg->length crypto: sahara - fix error handling in sahara_hw_descriptor_create() crypto: hisilicon/qm - save capability registers in qm init process crypto: hisilicon/zip - add zip comp high perf mode configuration crypto: hisilicon/qm - add a function to set qm algs crypto: hisilicon/hpre - save capability registers in probe process crypto: hisilicon/sec2 - save capability registers in probe process crypto: hisilicon/zip - save capability registers in probe process pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() erofs: fix memory leak on short-lived bounced pages fs: indicate request originates from old mount API gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump crypto: virtio - Wait for tasklet to complete on device remove crypto: sahara - avoid skcipher fallback code duplication crypto: sahara - handle zero-length aes requests crypto: sahara - fix ahash reqsize crypto: sahara - fix wait_for_completion_timeout() error handling crypto: sahara - improve error handling in sahara_sha_process() crypto: sahara - fix processing hash requests with req->nbytes < sg->length crypto: sahara - do not resize req->src when doing hash operations crypto: scomp - fix req->dst buffer overflow csky: fix arch_jump_label_transform_static override blocklayoutdriver: Fix reference leak of pnfs_device_node NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT SUNRPC: fix _xprt_switch_find_current_entry logic pNFS: Fix the pnfs block driver's calculation of layoutget size wifi: plfxlc: check for allocation failure in plfxlc_usb_wreq_async() wifi: rtw88: fix RX filter in FIF_ALLMULTI flag bpf, lpm: Fix check prefixlen before walking trie bpf: Add crosstask check to __bpf_get_stack wifi: ath11k: Defer on rproc_get failure wifi: libertas: stop selecting wext ARM: dts: qcom: apq8064: correct XOADC register address net/ncsi: Fix netlink major/minor version numbers firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create() firmware: meson_sm: populate platform devices from sm device tree data wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior arm64: dts: ti: k3-am62a-main: Fix GPIO pin count in DT nodes arm64: dts: ti: k3-am65-main: Fix DSS irq trigger type selftests/bpf: Fix erroneous bitmask operation md: synchronize flush io with array reconfiguration bpf: enforce precision of R0 on callback return ARM: dts: qcom: sdx65: correct SPMI node name arm64: dts: qcom: sc7180: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sc7280: Mark some nodes as 'reserved' arm64: dts: qcom: sc7280: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sdm845: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sm8150: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sm8250: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sc8280xp: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sm6350: Make watchdog bark interrupt edge triggered rcu-tasks: Provide rcu_trace_implies_rcu_gp() bpf: add percpu stats for bpf_map elements insertions/deletions bpf: Add map and need_defer parameters to .map_fd_put_ptr() bpf: Defer the free of inner map when necessary selftests/net: specify the interface when do arping bpf: fix check for attempt to corrupt spilled pointer scsi: fnic: Return error if vmalloc() failed arm64: dts: qcom: qrb5165-rb5: correct LED panic indicator arm64: dts: qcom: sdm845-db845c: correct LED panic indicator arm64: dts: qcom: sm8350: Fix DMA0 address arm64: dts: qcom: sc7280: Fix up GPU SIDs arm64: dts: qcom: sc7280: Mark Adreno SMMU as DMA coherent arm64: dts: qcom: sc7280: fix usb_2 wakeup interrupt types wifi: mt76: mt7921s: fix workqueue problem causes STA association fail bpf: Fix verification of indirect var-off stack access arm64: dts: hisilicon: hikey970-pmic: fix regulator cells properties dt-bindings: media: mediatek: mdp3: correct RDMA and WROT node with generic names arm64: dts: mediatek: mt8183: correct MDP3 DMA-related nodes wifi: mt76: mt7921: fix country count limitation for CLC selftests/bpf: Relax time_tai test for equal timestamps in tai_forward block: Set memalloc_noio to false on device_add_disk() error path arm64: dts: renesas: white-hawk-cpu: Fix missing serial console pin control arm64: dts: imx8mm: Reduce GPU to nominal speed scsi: hisi_sas: Replace with standard error code return value scsi: hisi_sas: Rollback some operations if FLR failed scsi: hisi_sas: Correct the number of global debugfs registers ARM: dts: stm32: don't mix SCMI and non-SCMI board compatibles selftests/net: fix grep checking for fib_nexthop_multiprefix ipmr: support IP_PKTINFO on cache report IGMP msg virtio/vsock: fix logic which reduces credit update messages dma-mapping: clear dev->dma_mem to NULL after freeing it soc: qcom: llcc: Fix dis_cap_alloc and retain_on_pc configuration arm64: dts: qcom: sm8150-hdk: fix SS USB regulators block: add check of 'minors' and 'first_minor' in device_add_disk() arm64: dts: qcom: sc7280: Mark SDHCI hosts as cache-coherent arm64: dts: qcom: ipq6018: fix clock rates for GCC_USB0_MOCK_UTMI_CLK arm64: dts: qcom: ipq6018: improve pcie phy pcs reg table arm64: dts: qcom: ipq6018: Use lowercase hex arm64: dts: qcom: ipq6018: Pad addresses to 8 hex digits arm64: dts: qcom: ipq6018: Fix up indentation wifi: rtlwifi: add calculate_bit_shift() wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift() wifi: rtlwifi: rtl8192c: using calculate_bit_shift() wifi: rtlwifi: rtl8192cu: using calculate_bit_shift() wifi: rtlwifi: rtl8192ce: using calculate_bit_shift() wifi: rtlwifi: rtl8192de: using calculate_bit_shift() wifi: rtlwifi: rtl8192ee: using calculate_bit_shift() wifi: rtlwifi: rtl8192se: using calculate_bit_shift() wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request wifi: iwlwifi: mvm: send TX path flush in rfkill netfilter: nf_tables: mark newset as dead on transaction abort Bluetooth: Fix bogus check for re-auth no supported with non-ssp Bluetooth: btmtkuart: fix recv_buf() return value block: make BLK_DEF_MAX_SECTORS unsigned null_blk: don't cap max_hw_sectors to BLK_DEF_MAX_SECTORS bpf: sockmap, fix proto update hook to avoid dup calls sctp: support MSG_ERRQUEUE flag in recvmsg() sctp: fix busy polling net/sched: act_ct: fix skb leak and crash on ooo frags mlxbf_gige: Fix intermittent no ip issue mlxbf_gige: Enable the GigE port in mlxbf_gige_open ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() ARM: davinci: always select CONFIG_CPU_ARM926T Revert "drm/tidss: Annotate dma-fence critical section in commit path" Revert "drm/omapdrm: Annotate dma-fence critical section in commit path" drm/panfrost: Really power off GPU cores in panfrost_gpu_power_off() RDMA/usnic: Silence uninitialized symbol smatch warnings RDMA/hns: Fix inappropriate err code for unsupported operations drm/panel-elida-kd35t133: hold panel in reset for unprepare drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function drm/tilcdc: Fix irq free on unload media: pvrusb2: fix use after free on context disconnection media: mtk-jpegdec: export jpeg decoder functions media: mtk-jpeg: Remove cancel worker in mtk_jpeg_remove to avoid the crash of multi-core JPEG devices media: verisilicon: Hook the (TRY_)DECODER_CMD stateless ioctls media: rkvdec: Hook the (TRY_)DECODER_CMD stateless ioctls drm/bridge: Fix typo in post_disable() description f2fs: fix to avoid dirent corruption drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg() drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check() drm/radeon: check return value of radeon_ring_lock() drm/tidss: Move reset to the end of dispc_init() drm/tidss: Return error value from from softreset drm/tidss: Check for K2G in in dispc_softreset() drm/tidss: Fix dss reset ASoC: cs35l33: Fix GPIO name and drop legacy include ASoC: cs35l34: Fix GPIO name and drop legacy include drm/msm/mdp4: flush vblank event on disable drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks drm/drv: propagate errors from drm_modeset_register_all() ASoC: Intel: glk_rt5682_max98357a: fix board id mismatch drm/panfrost: Ignore core_mask for poweroff and disable PWRTRANS irq drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() drm/radeon/dpm: fix a memleak in sumo_parse_power_table drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable drm/bridge: tc358767: Fix return value on error case media: cx231xx: fix a memleak in cx231xx_init_isoc RDMA/hns: Fix memory leak in free_mr_init() clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config media: imx-mipi-csis: Fix clock handling in remove() media: dt-bindings: media: rkisp1: Fix the port description for the parallel interface media: rkisp1: Fix media device memory leak drm/panel: st7701: Fix AVCL calculation f2fs: fix to wait on block writeback for post_read case f2fs: fix to check compress file in f2fs_move_file_range() f2fs: fix to update iostat correctly in f2fs_filemap_fault() media: dvbdev: drop refcount on error path in dvb_device_open() media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of m88ds3103_probe() clk: renesas: rzg2l-cpg: Reuse code in rzg2l_cpg_reset() clk: renesas: rzg2l: Check reset monitor registers drm/msm/dpu: Set input_sel bit for INTF drm/msm/dpu: Drop enable and frame_count parameters from dpu_hw_setup_misr() drm/mediatek: Return error if MDP RDMA failed to enable the clock drm/mediatek: Fix underrun in VDO1 when switches off the layer drm/amdgpu/debugfs: fix error code when smc register accessors are NULL drm/amd/pm: fix a double-free in si_dpm_init drivers/amd/pm: fix a use-after-free in kv_parse_power_table gpu/drm/radeon: fix two memleaks in radeon_vm_init drm/amd/pm: fix a double-free in amdgpu_parse_extended_power_table f2fs: fix to check return value of f2fs_recover_xattr_data dt-bindings: clock: Update the videocc resets for sm8150 clk: qcom: videocc-sm8150: Update the videocc resets clk: qcom: videocc-sm8150: Add missing PLL config property drivers: clk: zynqmp: calculate closest mux rate drivers: clk: zynqmp: update divider round rate logic watchdog: set cdev owner before adding watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused clk: si5341: fix an error code problem in si5341_output_clk_set_rate drm/mediatek: dp: Add phy_mtk_dp module as pre-dependency accel/habanalabs: fix information leak in sec_attest_info() clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable pwm: stm32: Use hweight32 in stm32_pwm_detect_channels pwm: stm32: Fix enable count for clk in .probe() ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[] ALSA: scarlett2: Add missing error check to scarlett2_config_save() ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config() ALSA: scarlett2: Allow passing any output to line_out_remap() ALSA: scarlett2: Add missing error checks to *_ctl_get() ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put() mmc: sdhci_am654: Fix TI SoC dependencies mmc: sdhci_omap: Fix TI SoC dependencies IB/iser: Prevent invalidating wrong MR drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init kselftest/alsa - mixer-test: fix the number of parameters to ksft_exit_fail_msg() kselftest/alsa - mixer-test: Fix the print format specifier warning ksmbd: validate the zero field of packet header of: Fix double free in of_parse_phandle_with_args_map fbdev: imxfb: fix left margin setting of: unittest: Fix of_count_phandle_with_args() expected value message selftests/bpf: Add assert for user stacks in test_task_stack keys, dns: Fix size check of V1 server-list header binder: fix async space check for 0-sized buffers binder: fix unused alloc->free_async_space mips/smp: Call rcutree_report_cpu_starting() earlier Input: atkbd - use ab83 as id when skipping the getid command xen-netback: don't produce zero-size SKB frags binder: fix race between mmput() and do_exit() clocksource/drivers/timer-ti-dm: Fix make W=n kerneldoc warnings powerpc/64s: Increase default stack size to 32KB tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host() usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart Revert "usb: dwc3: Soft reset phy on probe for host" Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-only" usb: chipidea: wait controller resume finished for wakeup irq usb: cdns3: fix uvc failure work since sg support enabled usb: cdns3: fix iso transfer error when mult is not zero usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs" usb: typec: class: fix typec_altmode_put_partner to put plugs usb: mon: Fix atomicity violation in mon_bin_vma_fault serial: core: fix sanitizing check for RTS settings serial: core: make sure RS485 cannot be enabled when it is not supported serial: 8250_bcm2835aux: Restore clock error handling serial: core, imx: do not set RS485 enabled if it is not supported serial: imx: Ensure that imx_uart_rs485_config() is called with enabled clock serial: 8250_exar: Set missing rs485_supported flag serial: omap: do not override settings for RS485 support drm/vmwgfx: Fix possible invalid drm gem put calls drm/vmwgfx: Keep a gem reference to user bos in surfaces ALSA: oxygen: Fix right channel of capture volume mixer ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on HP ZBook ALSA: hda/realtek: Enable headset mic on Lenovo M70 Gen5 ksmbd: validate mech token in session setup ksmbd: fix UAF issue in ksmbd_tcp_new_connection() ksmbd: only v2 leases handle the directory io_uring/rw: ensure io->bytes_done is always initialized fbdev: flush deferred work in fb_deferred_io_fsync() fbdev: flush deferred IO before closing scsi: ufs: core: Simplify power management during async scan scsi: target: core: add missing file_{start,end}_write() scsi: mpi3mr: Refresh sdev queue depth after controller reset scsi: mpi3mr: Block PEL Enable Command on Controller Reset and Unrecoverable State drm/amd: Enable PCIe PME from D3 block: add check that partition length needs to be aligned with block size block: Fix iterating over an empty bio with bio_for_each_folio_all netfilter: nf_tables: check if catch-all set element is active in next generation pwm: jz4740: Don't use dev_err_probe() in .request() pwm: Fix out-of-bounds access in of_pwm_single_xlate() md/raid1: Use blk_opf_t for read and write operations rootfs: Fix support for rootfstype= when root= is given Bluetooth: Fix atomicity violation in {min,max}_key_size_set bpf: Fix re-attachment branch in bpf_tracing_prog_attach LoongArch: Fix and simplify fcsr initialization on execve() iommu/arm-smmu-qcom: Add missing GMU entry to match table iommu/dma: Trace bounce buffer usage when mapping buffers wifi: mt76: fix broken precal loading from MTD for mt7915 wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors wifi: mwifiex: configure BSSID consistently when starting AP Revert "net: rtnetlink: Enslave device before bringing it up" cxl/port: Fix decoder initialization when nr_targets > interleave_ways PCI/P2PDMA: Remove reference to pci_p2pdma_map_sg() PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support PCI: mediatek: Clear interrupt status before dispatching handler x86/kvm: Do not try to disable kvmclock if it was not enabled KVM: arm64: vgic-v4: Restore pending state on host userspace write KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache iio: adc: ad7091r: Pass iio_dev to event handler HID: wacom: Correct behavior when processing some confidence == false touches serial: sc16is7xx: add check for unsupported SPI modes during probe serial: sc16is7xx: set safe default SPI clock frequency ARM: 9330/1: davinci: also select PINCTRL mfd: syscon: Fix null pointer dereference in of_syscon_register() leds: aw2013: Select missing dependency REGMAP_I2C mfd: intel-lpss: Fix the fractional clock divider flags mips: dmi: Fix early remap on MIPS32 mips: Fix incorrect max_low_pfn adjustment riscv: Check if the code to patch lies in the exit section riscv: Fix module_alloc() that did not reset the linear mapping permissions riscv: Fix set_memory_XX() and set_direct_map_XX() by splitting huge linear mappings riscv: Fix set_direct_map_default_noflush() to reset _PAGE_EXEC riscv: Fixed wrong register in XIP_FIXUP_FLASH_OFFSET macro MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup() MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup() power: supply: cw2015: correct time_to_empty units in sysfs power: supply: bq256xx: fix some problem in bq256xx_hw_init serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed libapi: Add missing linux/types.h header to get the __u64 type on io.h base/node.c: initialize the accessor list before registering acpi: property: Let args be NULL in __acpi_node_get_property_reference software node: Let args be NULL in software_node_get_reference_args serial: imx: fix tx statemachine deadlock selftests/sgx: Fix uninitialized pointer dereference in error path selftests/sgx: Fix uninitialized pointer dereferences in encl_get_entry selftests/sgx: Include memory clobber for inline asm in test enclave selftests/sgx: Skip non X86_64 platform iio: adc: ad9467: fix reset gpio handling iio: adc: ad9467: don't ignore error codes iio: adc: ad9467: fix scale setting perf header: Fix one memory leakage in perf_event__fprintf_event_update() perf hisi-ptt: Fix one memory leakage in hisi_ptt_process_auxtrace_event() perf genelf: Set ELF program header addresses properly tty: change tty_write_lock()'s ndelay parameter to bool tty: early return from send_break() on TTY_DRIVER_HARDWARE_BREAK tty: don't check for signal_pending() in send_break() tty: use 'if' in send_break() instead of 'goto' usb: cdc-acm: return correct error code on unsupported break spmi: mtk-pmif: Serialize PMIF status check and command submission vdpa: Fix an error handling path in eni_vdpa_probe() nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length nvmet-tcp: fix a crash in nvmet_req_complete() perf env: Avoid recursively taking env->bpf_progs.lock cxl/region: fix x9 interleave typo apparmor: avoid crash when parsed profile name is empty usb: xhci-mtk: fix a short packet issue of gen1 isoc-in transfer serial: imx: Correct clock error message in function probe() nvmet: re-fix tracing strncpy() warning nvme: trace: avoid memcpy overflow warning nvmet-tcp: Fix the H2C expected PDU len calculation PCI: keystone: Fix race condition when initializing PHYs PCI: mediatek-gen3: Fix translation window size calculation ASoC: mediatek: sof-common: Add NULL check for normal_link string s390/pci: fix max size calculation in zpci_memcpy_toio() net: qualcomm: rmnet: fix global oob in rmnet_policy net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames amt: do not use overwrapped cb area net: phy: micrel: populate .soft_reset for KSZ9131 mptcp: mptcp_parse_option() fix for MPTCPOPT_MP_JOIN mptcp: strict validation before using mp_opt->hmac mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req() mptcp: refine opt_mp_capable determination block: ensure we hold a queue reference when using queue limits udp: annotate data-races around up->pending net: ravb: Fix dma_addr_t truncation in error case dt-bindings: gpio: xilinx: Fix node address in gpio drm/amdkfd: Use resource_size() helper function drm/amdkfd: fixes for HMM mem allocation net: stmmac: ethtool: Fixed calltrace caused by unbalanced disable_irq_wake calls bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe LoongArch: BPF: Prevent out-of-bounds memory access mptcp: relax check on MPC passive fallback netfilter: nf_tables: reject invalid set policy netfilter: nft_limit: do not ignore unsupported flags netfilter: nfnetlink_log: use proper helper for fetching physinif netfilter: nf_queue: remove excess nf_bridge variable netfilter: propagate net to nf_bridge_get_physindev netfilter: bridge: replace physindev with physinif in nf_bridge_info netfilter: nf_tables: do not allow mismatch field size and set key length netfilter: nf_tables: skip dead set elements in netlink dump netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description ipvs: avoid stat macros calls from preemptible context kdb: Fix a potential buffer overflow in kdb_local() ethtool: netlink: Add missing ethnl_ops_begin/complete loop: fix the the direct I/O support check when used on top of block devices mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work i2c: s3c24xx: fix read transfers in polling mode i2c: s3c24xx: fix transferring more than one message in polling mode block: Remove special-casing of compound pages riscv: Fix wrong usage of lm_alias() when splitting a huge linear mapping Revert "KEYS: encrypted: Add check for strsep" arm64: dts: armada-3720-turris-mox: set irq type for RTC Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" Linux 6.1.75 Change-Id: I60398ecc9a2e50206fd9d25c0d6c9ad6e1ca71a0 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-02-19 20:16:38 +00:00
Chengming Zhou	4df0c942d0	crypto: scomp - fix req->dst buffer overflow [ Upstream commit 744e1885922a9943458954cfea917b31064b4131 ] The req->dst buffer size should be checked before copying from the scomp_scratch->dst to avoid req->dst buffer overflow problem. Fixes: `1ab53a77b7` ("crypto: acomp - add driver-side scomp interface") Reported-by: syzbot+3eff5e51bf1db122a16e@syzkaller.appspotmail.com Closes: https://lore.kernel.org/all/0000000000000b05cd060d6b5511@google.com/ Signed-off-by: Chengming Zhou <zhouchengming@bytedance.com> Reviewed-by: Barry Song <v-songbaohua@oppo.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-25 15:27:23 -08:00
Herbert Xu	d5d4dfc73b	crypto: af_alg - Disallow multiple in-flight AIO requests [ Upstream commit 67b164a871af1d736f131fd6fe78a610909f06f3 ] Having multiple in-flight AIO requests results in unpredictable output because they all share the same IV. Fix this by only allowing one request at a time. Fixes: `83094e5e9e` ("crypto: af_alg - add async support to algif_aead") Fixes: `a596999b7d` ("crypto: algif - change algif_skcipher to be asynchronous") Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-01-25 15:27:21 -08:00
Greg Kroah-Hartman	f1bc13cb9d	This is the 6.1.64 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmVmHpsACgkQONu9yGCS aT5uvw//SzcE0GImnHnfeN7iXtpFE9O0fhTxsjZCi8/HTXmGWPtQgWscd9y81bAd EHBVr456GXqd6KuIF+03g/r/FYinwWqK375meLfaybw1vSBP+fZttrEGqz6nTnYD yqOxw2bqgz8Xjp63UeNHD6mifpBvVtuAvzrfO1E2Ie/U1OU2uKdjRRv0iijKNeWN liOYTXaddIkVfZR0z6dVTl0hb5dPWsxNmF77kfVpKz4ALIHJcO13DlUuKtQz6Sb6 0ElmJpuonHuUxHzb8e9LLsFy3IvbBqomSscwcd0tngtdUTzhMYFIZLjg2+WQ9Ovq raMGqvS/bKsoyoTBNKL83QB2NyXQb3vkfL0NgLsq9IwDl+r96mP9ctANYGwSjhND o/4sa/fbMFzeInA8Rzh7i56RCNstOBKApJPhBzWuY0f/6b1BZpvZaONyX3fFksWO dMeYT16GgO4lhQXnG3O6mtDT8eoZ1fLf7ZdGEZ2NktcOzXYelNc4aXJke7qdlIop CVxM+Ur+juj+DJymo59a6baXjEgIROdHq83N3CZwetGviPHneGqgYc0K7ETtA33H sH/0KGYAT8SzzjMlnXB0lpjp68WViJfzzo9Wxdf2aDZbL3SdI14GPKMUeDqqeSyU 8bB2Hb4ItccRFW9RriiE3BPGnLGu7PDTkn5TgXDG/bDX54Cb5DQ= =YPzI -----END PGP SIGNATURE----- Merge 6.1.64 into android14-6.1-lts Changes in 6.1.64 locking/ww_mutex/test: Fix potential workqueue corruption lib/generic-radix-tree.c: Don't overflow in peek() perf/core: Bail out early if the request AUX area is out of bound srcu: Fix srcu_struct node grpmask overflow on 64-bit systems selftests/lkdtm: Disable CONFIG_UBSAN_TRAP in test config clocksource/drivers/timer-imx-gpt: Fix potential memory leak clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware smp,csd: Throw an error if a CSD lock is stuck for too long cpu/hotplug: Don't offline the last non-isolated CPU workqueue: Provide one lock class key per work_on_cpu() callsite x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size wifi: plfxlc: fix clang-specific fortify warning wifi: mac80211_hwsim: fix clang-specific fortify warning wifi: mac80211: don't return unset power in ieee80211_get_tx_power() atl1c: Work around the DMA RX overflow issue bpf: Detect IP == ksym.end as part of BPF program wifi: ath9k: fix clang-specific fortify warnings wifi: ath10k: fix clang-specific fortify warning net: annotate data-races around sk->sk_tx_queue_mapping net: annotate data-races around sk->sk_dst_pending_confirm wifi: ath10k: Don't touch the CE interrupt registers after power up vsock: read from socket's error queue bpf: Ensure proper register state printing for cond jumps Bluetooth: btusb: Add date->evt_skb is NULL check Bluetooth: Fix double free in hci_conn_cleanup ACPI: EC: Add quirk for HP 250 G7 Notebook PC tsnep: Fix tsnep_request_irq() format-overflow warning platform/chrome: kunit: initialize lock for fake ec_dev platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e drm/gma500: Fix call trace when psb_gem_mm_init() fails drm/komeda: drop all currently held locks if deadlock happens drm/amdgpu: not to save bo in the case of RAS err_event_athub drm/amdkfd: Fix a race condition of vram buffer unref in svm code drm/amd: Update `update_pcie_parameters` functions to use uint8_t arguments drm/amd/display: use full update for clip size increase of large plane source string.h: add array-wrappers for (v)memdup_user() kernel: kexec: copy user-array safely kernel: watch_queue: copy user-array safely drm_lease.c: copy user-array safely drm: vmwgfx_surface.c: copy user-array safely drm/msm/dp: skip validity check for DP CTS EDID checksum drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga drm/amdgpu: Fix potential null pointer derefernce drm/panel: fix a possible null pointer dereference drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference drm/radeon: fix a possible null pointer dereference drm/amdgpu/vkms: fix a possible null pointer dereference drm/panel: st7703: Pick different reset sequence drm/amdkfd: Fix shift out-of-bounds issue drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL arm64: dts: ls208xa: use a pseudo-bus to constrain usb dma size selftests/efivarfs: create-read: fix a resource leak ASoC: soc-card: Add storage for PCI SSID ASoC: SOF: Pass PCI SSID to machine driver crypto: pcrypt - Fix hungtask for PADATA_RESET ASoC: SOF: ipc4: handle EXCEPTION_CAUGHT notification from firmware RDMA/hfi1: Use FIELD_GET() to extract Link Width scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool fs/jfs: Add check for negative db_l2nbperpage fs/jfs: Add validity check for db_maxag and db_agpref jfs: fix array-index-out-of-bounds in dbFindLeaf jfs: fix array-index-out-of-bounds in diAlloc HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround ARM: 9320/1: fix stack depot IRQ stack filter ALSA: hda: Fix possible null-ptr-deref when assigning a stream PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields PCI: mvebu: Use FIELD_PREP() with Link Width atm: iphase: Do PCI error checks on own line PCI: Do error check on own line to split long "if" conditions scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() PCI: Use FIELD_GET() to extract Link Width PCI: Extract ATS disabling to a helper function PCI: Disable ATS for specific Intel IPU E2000 devices misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk ASoC: Intel: soc-acpi-cht: Add Lenovo Yoga Tab 3 Pro YT3-X90 quirk crypto: hisilicon/qm - prevent soft lockup in receive loop HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W exfat: support handle zero-size directory mfd: intel-lpss: Add Intel Lunar Lake-M PCI IDs iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() thunderbolt: Apply USB 3.x bandwidth quirk only in software connection manager tty: vcc: Add check for kstrdup() in vcc_probe() usb: dwc3: core: configure TX/RX threshold for DWC3_IP soundwire: dmi-quirks: update HP Omen match f2fs: fix error handling of __get_node_page usb: gadget: f_ncm: Always set current gadget in ncm_bind() 9p/trans_fd: Annotate data-racy writes to file::f_flags 9p: v9fs_listxattr: fix %s null argument warning i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler i2c: fix memleak in i2c_new_client_device() i2c: sun6i-p2wi: Prevent potential division by zero virtio-blk: fix implicit overflow on virtio_max_dma_size i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data. media: gspca: cpia1: shift-out-of-bounds in set_flicker media: vivid: avoid integer overflow gfs2: ignore negated quota changes gfs2: fix an oops in gfs2_permission media: cobalt: Use FIELD_GET() to extract Link Width media: ccs: Fix driver quirk struct documentation media: imon: fix access to invalid resource for the second interface drm/amd/display: Avoid NULL dereference of timing generator kgdb: Flush console before entering kgdb on panic i2c: dev: copy userspace array safely ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings drm/qxl: prevent memory leak ALSA: hda/realtek: Add quirk for ASUS UX7602ZM drm/amdgpu: fix software pci_unplug on some chips pwm: Fix double shift bug mtd: rawnand: tegra: add missing check for platform_get_irq() wifi: iwlwifi: Use FW rate for non-data frames sched/core: Optimize in_task() and in_interrupt() a bit SUNRPC: ECONNRESET might require a rebind mtd: rawnand: intel: check return value of devm_kasprintf() mtd: rawnand: meson: check return value of devm_kasprintf() NFSv4.1: fix handling NFS4ERR_DELAY when testing for session trunking SUNRPC: Add an IS_ERR() check back to where it was NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO SUNRPC: Fix RPC client cleaned up the freed pipefs dentries gfs2: Silence "suspicious RCU usage in gfs2_permission" warning vhost-vdpa: fix use after free in vhost_vdpa_probe() net: set SOCK_RCU_FREE before inserting socket into hashtable ipvlan: add ipvlan_route_v6_outbound() helper tty: Fix uninit-value access in ppp_sync_receive() net: hns3: fix add VLAN fail issue net: hns3: add barrier in vf mailbox reply process net: hns3: fix incorrect capability bit display for copper port net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs net: hns3: fix variable may not initialized problem in hns3_init_mac_addr() net: hns3: fix VF reset fail issue net: hns3: fix VF wrong speed and duplex issue tipc: Fix kernel-infoleak due to uninitialized TLV value net: mvneta: fix calls to page_pool_get_stats ppp: limit MRU to 64K xen/events: fix delayed eoi list handling ptp: annotate data-race around q->head and q->tail bonding: stop the device in bond_setup_by_slave() net: ethernet: cortina: Fix max RX frame define net: ethernet: cortina: Handle large frames net: ethernet: cortina: Fix MTU max setting af_unix: fix use-after-free in unix_stream_read_actor() netfilter: nf_conntrack_bridge: initialize err to 0 netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() net: stmmac: fix rx budget limit check net: stmmac: avoid rx queue overrun net/mlx5e: fix double free of encap_header net/mlx5e: fix double free of encap_header in update funcs net/mlx5e: Fix pedit endianness net/mlx5e: Reduce the size of icosq_str net/mlx5e: Check return value of snprintf writing to fw_version buffer net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors macvlan: Don't propagate promisc change to lower dev in passthru tools/power/turbostat: Fix a knl bug tools/power/turbostat: Enable the C-state Pre-wake printing cifs: spnego: add ';' in HOST_KEY_LEN cifs: fix check of rc in function generate_smb3signingkey i915/perf: Fix NULL deref bugs with drm_dbg() calls media: venus: hfi: add checks to perform sanity on queue pointers perf intel-pt: Fix async branch flags powerpc/perf: Fix disabling BHRB and instruction sampling randstruct: Fix gcc-plugin performance mode to stay in group bpf: Fix check_stack_write_fixed_off() to correctly spill imm bpf: Fix precision tracking for BPF_ALU \| BPF_TO_BE \| BPF_END scsi: mpt3sas: Fix loop logic scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers scsi: qla2xxx: Fix system crash due to bad pointer access crypto: x86/sha - load modules based on CPU features x86/cpu/hygon: Fix the CPU topology evaluation for real KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space KVM: x86: Ignore MSR_AMD64_TW_CFG access KVM: x86: Clear bit12 of ICR after APIC-write VM-exit audit: don't take task_lock() in audit_exe_compare() code path audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() proc: sysctl: prevent aliased sysctls from getting passed to init tty/sysrq: replace smp_processor_id() with get_cpu() tty: serial: meson: fix hard LOCKUP on crtscts mode hvc/xen: fix console unplug hvc/xen: fix error path in xen_hvc_init() to always register frontend driver hvc/xen: fix event channel handling for secondary consoles PCI/sysfs: Protect driver's D3cold preference from user space mm/damon/sysfs: remove requested targets when online-commit inputs mm/damon/sysfs: update monitoring target regions for online input commit watchdog: move softlockup_panic back to early_param mm/damon/lru_sort: avoid divide-by-zero in hot threshold calculation mm/damon/ops-common: avoid divide-by-zero during region hotness calculation mm/damon: implement a function for max nr_accesses safe calculation mm/damon/sysfs: check error from damon_sysfs_update_target() ACPI: resource: Do IRQ override on TongFang GMxXGxx regmap: Ensure range selector registers are updated after cache sync wifi: ath11k: fix temperature event locking wifi: ath11k: fix dfs radar event locking wifi: ath11k: fix htt pktlog locking wifi: ath11k: fix gtk offload status event locking mmc: meson-gx: Remove setting of CMD_CFG_ERROR genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware KEYS: trusted: tee: Refactor register SHM usage KEYS: trusted: Rollback init_trusted() consistently PCI: keystone: Don't discard .remove() callback PCI: keystone: Don't discard .probe() callback arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer parisc/pdc: Add width field to struct pdc_model parisc/power: Add power soft-off when running on qemu clk: socfpga: Fix undefined behavior bug in struct stratix10_clock_data clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from PLL clocks ksmbd: handle malformed smb1 message ksmbd: fix slab out of bounds write in smb_inherit_dacl() mmc: vub300: fix an error code mmc: sdhci_am654: fix start loop index for TAP value parsing mmc: Add quirk MMC_QUIRK_BROKEN_CACHE_FLUSH for Micron eMMC Q2J54A PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common() PCI: kirin: Don't discard .remove() callback PCI: exynos: Don't discard .remove() callback wifi: wilc1000: use vmm_table as array in wilc struct svcrdma: Drop connection after an RDMA Read error rcu/tree: Defer setting of jiffies during stall reset arm64: dts: qcom: ipq6018: Fix hwlock index for SMEM PM: hibernate: Use __get_safe_page() rather than touching the list PM: hibernate: Clean up sync_read handling in snapshot_write_next() rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects btrfs: don't arbitrarily slow down delalloc if we're committing arm64: dts: qcom: ipq8074: Fix hwlock index for SMEM firmware: qcom_scm: use 64-bit calling convention only when client is 64-bit ACPI: FPDT: properly handle invalid FPDT subtables arm64: dts: qcom: ipq6018: Fix tcsr_mutex register size mfd: qcom-spmi-pmic: Fix reference leaks in revid helper mfd: qcom-spmi-pmic: Fix revid implementation ima: annotate iint mutex to avoid lockdep false positive warnings ima: detect changes to the backing overlay file netfilter: nf_tables: remove catchall element in GC sync path netfilter: nf_tables: split async and sync catchall in two functions selftests/resctrl: Remove duplicate feature check from CMT test selftests/resctrl: Move _GNU_SOURCE define into Makefile selftests/resctrl: Reduce failures due to outliers in MBA/MBM tests hid: lenovo: Resend all settings on reset_resume for compact keyboards ASoC: codecs: wsa-macro: fix uninitialized stack variables with name prefix jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev quota: explicitly forbid quota files from being encrypted kernel/reboot: emergency_restart: Set correct system_state i2c: core: Run atomic i2c xfer when !preemptible tracing: Have the user copy of synthetic event address use correct context driver core: Release all resources during unbind before updating device links mcb: fix error handling for different scenarios when parsing dmaengine: stm32-mdma: correct desc prep when channel running s390/cmma: fix detection of DAT pages mm/cma: use nth_page() in place of direct struct page manipulation mm/memory_hotplug: use pfn math in place of direct struct page manipulation mtd: cfi_cmdset_0001: Byte swap OTP info i3c: master: cdns: Fix reading status register i3c: master: svc: fix race condition in ibi work thread i3c: master: svc: fix wrong data return when IBI happen during start frame i3c: master: svc: fix ibi may not return mandatory data byte i3c: master: svc: fix check wrong status register in irq handler i3c: master: svc: fix SDA keep low when polling IBIWON timeout happen parisc: Prevent booting 64-bit kernels on PA1.x machines parisc/pgtable: Do not drop upper 5 address bits of physical address parisc/power: Fix power soft-off when running on qemu xhci: Enable RPM on controllers that support low-power states fs: add ctime accessors infrastructure smb3: fix creating FIFOs when mounting with "sfu" mount option smb3: fix touch -h of symlink smb3: fix caching of ctime on setxattr smb: client: fix use-after-free bug in cifs_debug_data_proc_show() smb: client: fix potential deadlock when releasing mids cifs: reconnect helper should set reconnect for the right channel cifs: force interface update before a fresh session setup cifs: do not reset chan_max if multichannel is not supported at mount xfs: recovery should not clear di_flushiter unconditionally btrfs: zoned: wait for data BG to be finished on direct IO allocation ALSA: info: Fix potential deadlock at disconnection ALSA: hda/realtek: Enable Mute LED on HP 255 G8 ALSA: hda/realtek - Add Dell ALC295 to pin fall back table ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC ALSA: hda/realtek: Enable Mute LED on HP 255 G10 ALSA: hda/realtek: Add quirks for HP Laptops pmdomain: bcm: bcm2835-power: check if the ASB register is equal to enable pmdomain: imx: Make imx pgc power domain also set the fwnode cpufreq: stats: Fix buffer overflow detection in trans_stats() clk: visconti: remove unused visconti_pll_provider::regmap clk: visconti: Fix undefined behavior bug in struct visconti_pll_provider Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559 bluetooth: Add device 0bda:887b to device tables bluetooth: Add device 13d3:3571 to device tables Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE drm/amd/display: enable dsc_clk even if dsc_pg disabled cxl/region: Validate region mode vs decoder mode cxl/region: Cleanup target list on attach error cxl/region: Move region-position validation to a helper cxl/region: Do not try to cleanup after cxl_region_setup_targets() fails i3c: master: svc: add NACK check after start byte sent i3c: master: svc: fix random hot join failure since timeout error cxl: Unify debug messages when calling devm_cxl_add_port() cxl/mem: Move devm_cxl_add_endpoint() from cxl_core to cxl_mem tools/testing/cxl: Define a fixed volatile configuration to parse cxl/region: Fix x1 root-decoder granularity calculations Revert ncsi: Propagate carrier gain/loss events to the NCSI controller Revert "i2c: pxa: move to generic GPIO recovery" lsm: fix default return value for vm_enough_memory lsm: fix default return value for inode_getsecctx sbsa_gwdt: Calculate timeout with 64-bit math i2c: designware: Disable TX_EMPTY irq while waiting for block length byte s390/ap: fix AP bus crash on early config change callback invocation net: ethtool: Fix documentation of ethtool_sprintf() net: dsa: lan9303: consequently nested-lock physical MDIO net: phylink: initialize carrier state at creation i2c: i801: fix potential race in i801_block_transaction_byte_by_byte f2fs: do not return EFSCORRUPTED, but try to run online repair f2fs: avoid format-overflow warning media: lirc: drop trailing space from scancode transmit media: sharp: fix sharp encoding media: venus: hfi_parser: Add check to keep the number of codecs within range media: venus: hfi: fix the check to handle session buffer requirement media: venus: hfi: add checks to handle capabilities from firmware media: ccs: Correctly initialise try compose rectangle drm/mediatek/dp: fix memory leak on ->get_edid callback audio detection drm/mediatek/dp: fix memory leak on ->get_edid callback error path dm-verity: don't use blocking calls from tasklets nfsd: fix file memleak on client_opens_release LoongArch: Mark __percpu functions as always inline riscv: mm: Update the comment of CONFIG_PAGE_OFFSET riscv: correct pt_level name via pgtable_l5/4_enabled riscv: kprobes: allow writing to x0 mmc: sdhci-pci-gli: A workaround to allow GL9750 to enter ASPM L1.2 mm: fix for negative counter: nr_file_hugepages mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors mptcp: deal with large GSO size mptcp: add validity check for sending RM_ADDR mptcp: fix setsockopt(IP_TOS) subflow locking r8169: fix network lost after resume on DASH systems r8169: add handling DASH when DASH is disabled mmc: sdhci-pci-gli: GL9750: Mask the replay timer timeout of AER media: qcom: camss: Fix pm_domain_on sequence in probe media: qcom: camss: Fix vfe_get() error jump media: qcom: camss: Fix VFE-17x vfe_disable_output() media: qcom: camss: Fix VFE-480 vfe_disable_output() media: qcom: camss: Fix missing vfe_lite clocks check media: qcom: camss: Fix invalid clock enable bit disjunction media: qcom: camss: Fix csid-gen2 for test pattern generator Revert "net: r8169: Disable multicast filter for RTL8168H and RTL8107E" ext4: apply umask if ACL support is disabled ext4: correct offset of gdb backup in non meta_bg group to update_backups ext4: mark buffer new if it is unwritten to avoid stale data exposure ext4: correct return value of ext4_convert_meta_bg ext4: correct the start block of counting reserved clusters ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks ext4: add missed brelse in update_backups ext4: properly sync file size update after O_SYNC direct IO drm/amd/pm: Handle non-terminated overdrive commands. drm/i915: Bump GLK CDCLK frequency when driving multiple pipes drm/i915: Fix potential spectre vulnerability drm/amd/pm: Fix error of MACO flag setting code drm/amdgpu/smu13: drop compute workload workaround drm/amdgpu: don't use pci_is_thunderbolt_attached() drm/amdgpu: don't use ATRM for external devices drm/amdgpu: fix error handling in amdgpu_bo_list_get() drm/amdgpu: lower CS errors to debug severity drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer() drm/amd/display: Enable fast plane updates on DCN3.2 and above drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox powerpc/powernv: Fix fortify source warnings in opal-prd.c tracing: Have trace_event_file have ref counters Input: xpad - add VID for Turtle Beach controllers mmc: sdhci-pci-gli: GL9755: Mask the replay timer timeout of AER cxl/port: Fix NULL pointer access in devm_cxl_add_port() RISC-V: drop error print from riscv_hartid_to_cpuid() Linux 6.1.64 Change-Id: I9284282aeae5d0f9da957a58147efe0114f8e60a Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-12-12 18:41:13 +00:00
Lu Jialin	c55fc098fd	crypto: pcrypt - Fix hungtask for PADATA_RESET [ Upstream commit 8f4f68e788c3a7a696546291258bfa5fdb215523 ] We found a hungtask bug in test_aead_vec_cfg as follows: INFO: task cryptomgr_test:391009 blocked for more than 120 seconds. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. Call trace: __switch_to+0x98/0xe0 __schedule+0x6c4/0xf40 schedule+0xd8/0x1b4 schedule_timeout+0x474/0x560 wait_for_common+0x368/0x4e0 wait_for_completion+0x20/0x30 wait_for_completion+0x20/0x30 test_aead_vec_cfg+0xab4/0xd50 test_aead+0x144/0x1f0 alg_test_aead+0xd8/0x1e0 alg_test+0x634/0x890 cryptomgr_test+0x40/0x70 kthread+0x1e0/0x220 ret_from_fork+0x10/0x18 Kernel panic - not syncing: hung_task: blocked tasks For padata_do_parallel, when the return err is 0 or -EBUSY, it will call wait_for_completion(&wait->completion) in test_aead_vec_cfg. In normal case, aead_request_complete() will be called in pcrypt_aead_serial and the return err is 0 for padata_do_parallel. But, when pinst->flags is PADATA_RESET, the return err is -EBUSY for padata_do_parallel, and it won't call aead_request_complete(). Therefore, test_aead_vec_cfg will hung at wait_for_completion(&wait->completion), which will cause hungtask. The problem comes as following: (padata_do_parallel) \| rcu_read_lock_bh(); \| err = -EINVAL; \| (padata_replace) \| pinst->flags \|= PADATA_RESET; err = -EBUSY \| if (pinst->flags & PADATA_RESET) \| rcu_read_unlock_bh() \| return err In order to resolve the problem, we replace the return err -EBUSY with -EAGAIN, which means parallel_data is changing, and the caller should call it again. v3: remove retry and just change the return err. v2: introduce padata_try_do_parallel() in pcrypt_aead_encrypt and pcrypt_aead_decrypt to solve the hungtask. Signed-off-by: Lu Jialin <lujialin4@huawei.com> Signed-off-by: Guo Zihua <guozihua@huawei.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-11-28 17:06:58 +00:00
Greg Kroah-Hartman	d07ffd5565	Merge branch 'android14-6.1' into branch 'android14-6.1-lts' This catches the android14-6.1-lts branch up with a lot of changes that have only gone into the android14-6.1 branch to make testing easier and to track more symbols properly. This includes the following commits: * `171c27ba1f` BACKPORT: usb: gadget: uvc: Add missing initialization of ssp config descriptor * `bb0173a1da` BACKPORT: usb: gadget: unconditionally allocate hs/ss descriptor in bind operation * `5c4815f5b6` UPSTREAM: usb: gadget: f_uvc: change endpoint allocation in uvc_function_bind() * `5a05f2e755` UPSTREAM: usb: gadget: function: Remove unused declarations * `defd93f219` UPSTREAM: usb: gadget: uvc: clean up comments and styling in video_pump * `82fe654f56` UPSTREAM: mm/page_alloc: use write_seqlock_irqsave() instead write_seqlock() + local_irq_save(). * `ed6694a682` UPSTREAM: cpuidle: teo: Update idle duration estimate when choosing shallower state * `d8e99e1af8` BACKPORT: Revert "PCI: dwc: Wait for link up only if link is started" * `841ad9b9b3` UPSTREAM: ravb: Fix use-after-free issue in ravb_tx_timeout_work() * `17e456ce41` UPSTREAM: ravb: Fix up dma_free_coherent() call in ravb_remove() * `5ba644e8a0` BACKPORT: usb: typec: altmodes/displayport: Signal hpd low when exiting mode * `9e4f6e1ef8` ANDROID: KVM: arm64: Fix KVM_HOST_S2_DEFAULT_MMIO_PTE encoding * `5418491fa5` ANDROID: Update the ABI symbol list * `b821a3c8fc` ANDROID: fs/proc: Perform priority inheritance around access_remote_vm() * `37c1a91404` UPSTREAM: serial: 8250_dw: fall back to poll if there's no interrupt * `35361bdac2` Merge "Merge tag 'android14-6.1.43_r00' into android14-6.1" into android14-6.1 \|\ \| * `769612f594` Merge tag 'android14-6.1.43_r00' into android14-6.1 * \| `034b4b4f1b` ANDROID: Update the ABI representation * \| `0947464633` ANDROID: power: Add vendor hook for suspend \|/ * `b783e85610` ANDROID: Update the ABI symbol list * `2c609cab0b` UPSTREAM: of: reserved-mem: print out reserved-mem details during boot * `ff2563f384` ANDROID: GKI: Update symbol list for xiaomi "abi_gki_aarch64_xiaomi" * `7542b3bef7` ANDROID: Update symbols list and ABI for qcom * `63d4231d85` ANDROID: fuse-bpf: Add NULL pointer check in fuse_entry_revalidate * `09641ca77f` ANDROID: GKI: Update oplus symbol list update oplus symbol list for Addding hooks for adjusting alloc_flags * `0b20035778` ANDROID: vendor_hooks: Add hooks for adjusting alloc_flags * `367ce30ddc` UPSTREAM: libceph: harden msgr2.1 frame segment length checks * `debc1e0486` ANDROID: Update the ABI symbol list * `401b78ce87` ANDROID: mm: Add vendor hook in filemap_get_folio() * `1b3269beea` UPSTREAM: netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP * `a9c65c7efb` UPSTREAM: netfilter: ipset: Add schedule point in call_ad(). * `cd4ea97d2a` UPSTREAM: net: xfrm: Fix xfrm_address_filter OOB read * `a4ccba8bdc` UPSTREAM: igb: set max size RX buffer when store bad packet is enabled * `8a67c06094` ANDROID: GKI: fix ABI breakage in struct hid_device * `28ee91ed2b` UPSTREAM: HID: input: map battery system charging * `2dd1c535d1` FROMGIT: maple_tree: add GFP_KERNEL to allocations in mas_expected_entries() * `faa4efd6b1` UPSTREAM: maple_tree: replace data before marking dead in split and spanning store * `47e3b4920d` UPSTREAM: maple_tree: change mas_adopt_children() parent usage * `e0f829b74b` UPSTREAM: maple_tree: introduce mas_tree_parent() definition * `e69d6570ed` UPSTREAM: maple_tree: introduce mas_put_in_tree() * `d2e45cee2d` UPSTREAM: maple_tree: reorder replacement of nodes to avoid live lock * `545cc51b9f` ANDROID: GKI: add allowed list for Exynosauto SoC * `f51787dfb7` ANDROID: Update the ABI symbol list * `1b71e8ef45` ANDROID: Update the ABI symbol list * `908a530787` ANDROID: KVM: Update nVHE stack size to 8KB * `53771c1826` ANDROID: Update the ABI symbol list * `a22ff19ff6` ANDROID: mm: Add vendor hook in rmqueue() * `09ca291e0a` FROMLIST: virt: geniezone: Add memory pin/unpin support * `7cc3767c2a` FROMLIST: virt: geniezone: Add block-based demand paging support * `3fcc07ee5f` FROMLIST: virt: geniezone: Add demand paging support * `6a1a30896d` ANDROID: virt: geniezone: Refactoring memory region support * `9f64b18da1` ANDROID: virt: geniezone: Refactor code comments from mainline v6 accordingly * `544b128747` ANDROID: virt: geniezone: Refactoring vgic to align with upstream v6 * `f9291d7af0` ANDROID: virt: geniezone: Refactoring vcpu to align with upstream v6 * `e348fe6d2d` ANDROID: virt: geniezone: Refactoring vm capability to align with upstream v6 * `fb3444af07` ANDROID: virt: geniezone: Refactoring irqfd to align with upstream v6 * `7e1cb3bdec` ANDROID: sched: Add EXPORT_SYMBOL_GPL for sched_wakeup * `73cee74111` ANDROID: vendor_hooks: Export direct reclaim trace points * `fca353bdc0` ANDROID: mm: freeing MIGRATE_ISOLATE page instantly * `08351370ec` ANDROID: KVM: arm64: Allow setting device attr in stage-2 PTEs * `b25aabd50a` ANDROID: KVM: arm64: Fix hyp tracing build dependencies * `f82e080810` ANDROID: abi_gki_aarch64_qcom: update abi symbols * `2fff9f7cd4` ANDROID: vendor hooks: Enable Vendor hook to register smmu driver to dedicated iommu bus defined by vendor. * `fadd504206` UPSTREAM: netfilter: xt_sctp: validate the flag_info count * `1c90408931` UPSTREAM: mm/mglru: make memcg_lru->lock irq safe * `87cd3d689e` UPSTREAM: iommu/amd: Fix possible memory leak of 'domain' * `e5f37a2c46` UPSTREAM: selftests/tc-testing: Remove configs that no longer exist * `7c793b4d8f` ANDROID: abi_gki_aarch64_qcom: update abi symbols * `bf51ba7b3c` ANDROID: ABI: Update symbol list for imx * `1e6a9aeb14` ANDROID: GKI: add allowed list for Exynosauto SoC * `a338830fde` UPSTREAM: ufs: core: wlun send SSU timeout recovery * `fd2e98c6f5` UPSTREAM: PM: domains: fix integer overflow issues in genpd_parse_state() * `e3e2ece8a0` ANDROID: mm: vh for compaction begin/end * `2176509c4d` UPSTREAM: netfilter: xt_u32: validate user space input * `132b47119e` UPSTREAM: netfilter: nfnetlink_osf: avoid OOB read * `8c3b0a3493` UPSTREAM: ipv4: fix null-deref in ipv4_link_failure * `4181951d21` UPSTREAM: net/sched: Retire rsvp classifier * `acb0728638` UPSTREAM: usb: core: stop USB enumeration if too many retries * `8b1bd87917` ANDROID: KVM: arm64: Add missing hyp events for forwarded SMCs * `f4812c6864` ANDROID: KVM: arm64: Store hyp address in the host fp state array * `6334225e9b` ANDROID: KVM: arm64: Allocate host fp/simd state later in initialization * `83ebd50235` UPSTREAM: netfilter: nf_tables: disallow rule removal from chain binding * `7d088a3e4f` UPSTREAM: fs/smb/client: Reset password pointer to NULL * `2807a43b69` ANDROID: Update the ABI symbol list * `368b752997` FROMGIT: usb: typec: ucsi: Clear EVENT_PENDING bit if ucsi_send_command fails * `4fcc13c1ff` ANDROID: mm: add missing check in the backport for handling faults under VMA lock * `1fe248991f` ANDROID: Update the ABI symbol list * `4301901382` ANDROID: Update STG for ANDROID_KABI_USE(1, unsigned int saved_state) * `22cd8e0def` FROMGIT: freezer,sched: Use saved_state to reduce some spurious wakeups * `457e65696a` BACKPORT: FROMGIT: sched/core: Remove ifdeffery for saved_state * `3437652fa2` BACKPORT: erofs: set block size to the on-disk block size * `e84c93fd42` BACKPORT: erofs: avoid hardcoded blocksize for subpage block support * `36496d09e8` BACKPORT: erofs: get rid of z_erofs_do_map_blocks() forward declaration * `cee0694362` BACKPORT: erofs: get rid of erofs_inode_datablocks() * `f7d9c7d0b4` BACKPORT: erofs: simplify iloc() * `7d42260e5c` ANDROID: Update the ABI symbol list * `324c8522f9` ANDROID: Update symbol list for mtk * `30d86f760c` ANDROID: mm: Add vendor hooks for recording when kswapd finishing the reclaim job * `0deb7bb73e` ANDROID: mm: Add vendor hooks for __alloc_pages_slowpath * `5c2855fbce` ANDROID: mm: Add vendor hook for compact pages work. * `4e10001b7c` ANDROID: Update the ABI symbol list * `2434dece1f` FROMGIT: usb: gadget: u_serial: Add null pointer check in gserial_suspend * `5f8aa27248` ANDROID: Update the ABI symbol list * `f7e7874d9b` BACKPORT: usb: typec: bus: verify partner exists in typec_altmode_attention * `5cb3b26d79` ANDROID: ABI: Update the pixel symbol list and stg * `cf1ba6a102` UPSTREAM: shmem: fix smaps BUG sleeping while atomic * `52824b718c` UPSTREAM: blk-ioprio: Introduce promote-to-rt policy * `dce1834895` ANDROID: ABI: Update oplus symbol list * `89815ec103` ANDROID: GKI: export symbols to do reverse mapping within memcg and modify lru stats * `45fe413fdf` ANDROID: gki_defconfig: Enable CONFIG_BLK_CGROUP_IOPRIO * `c240f4ed00` ANDROID: gunyah: Convert mutex_lock_interruptible to mutex_lock * `6305df8009` UPSTREAM: bpf, sockmap: fix deadlocks in the sockhash and sockmap * `7999b48d76` UPSTREAM: net: sched: sch_qfq: Fix UAF in qfq_dequeue() * `709dc094e3` UPSTREAM: ARM: ptrace: Restore syscall skipping for tracers * `ea494b2716` UPSTREAM: ARM: ptrace: Restore syscall restart tracing * `b374d94195` Revert "BACKPORT: FROMGIT: usb: gadget: udc: Handle gadget_connect failure during bind operation" * `ae5ea9043d` ANDROID: Move microdroid and crashdump defconfigs to common * `b548c046c7` UPSTREAM: net: prevent skb corruption on frag list segmentation * `060ebb378d` ANDROID: ABI: Update oplus symbol list * `f451f4a599` ANDROID: vendor_hooks: Add hooks for oem percpu-rwsem optimaton * `a3cb85bffe` ANDROID: ABI: Update oplus symbol list * `740a51391b` ANDROID: vendor_hooks: Add hooks for binder * `c6724bfeda` ANDROID: uid_sys_stat: instead update_io_stats_uid_locked to update_io_stats_uid * `97f2f8a065` ANDROID: uid_sys_stat: split the global lock uid_lock to the fine-grained locks for each hlist in hash_table. * `9290fc3e8d` ANDROID: Flush deferred probe list before dropping host priv * `6625133137` ANDROID: KVM: arm64: Don't force pte mappings in [n]VHE guest stage-2 * `2f2c035453` UPSTREAM: usb: gadget: u_serial: Add null pointer check in gs_start_io * `ac9005946a` UPSTREAM: sched: Consider task_struct::saved_state in wait_task_inactive() * `b52b33e912` UPSTREAM: sched: Unconditionally use full-fat wait_task_inactive() * `8465ef2b4f` ANDROID: GKI: Update symbol list for ASUS * `1e4c6e5048` UPSTREAM: tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux * `40b46d8656` UPSTREAM: netfilter: nf_tables: prevent OOB access in nft_byteorder_eval * `d8f69aade5` UPSTREAM: iommu/of: mark an unused function as __maybe_unused * `a032fbc776` UPSTREAM: iommu: dma: Use of_iommu_get_resv_regions() * `693c712967` UPSTREAM: iommu: Implement of_iommu_get_resv_regions() * `e9603e85ac` UPSTREAM: dt-bindings: reserved-memory: Document iommu-addresses * `64ed291347` UPSTREAM: of: Introduce of_translate_dma_region() * `536996aa30` ANDROID: GKI: Add rockchip fragment and build.config * `6a10b34387` ANDROID: GKI: Add symbols for rockchip v4l2 * `3e3c6debe4` ANDROID: GKI: Add hid and usb symbols for rockchip * `53162778e7` ANDROID: GKI: Add cdc symbols for rockchip * `b09b06dcf1` ANDROID: GKI: Add symbols for rockchip sdhci * `62d64a59d9` ANDROID: GKI: Add symbols for rockchip devfreq * `9c9ee611cf` ANDROID: GKI: Add crypto symbols for rockchip * `7246ecec46` ANDROID: GKI: Add rockchip drm symbols and abi * `2f3d6aa0c9` ANDROID: GKI: Add initial abi for rockchip * `1e26ba1901` ANDROID: GKI: Add initial rockchip symbol list * `404360f6d3` FROMLIST: clk: clk-fractional-divider: Export clk_fractional_divider_general_approximation API * `c3d6c235b2` UPSTREAM: net/sched: sch_hfsc: Ensure inner classes have fsc curve * `d3212c2dba` UPSTREAM: sched/rt: Fix bad task migration for rt tasks * `215e38e517` ANDROID: GKI: Add ASUS symbol list * `e52e60e3ed` UPSTREAM: tcpm: Avoid soft reset when partner does not support get_status * `bbc9d3bc0b` ANDROID: vendor_hooks: mm: Add tune_swappiness vendor hook in get_swappiness() * `7024c9cd28` ANDROID: ABI: Update symbols to unisoc whitelist * `de3e9f3111` ANDROID: ABI: Add to QCOM symbols list * `85902d60cd` ANDROID: ABI: update symbol list for galaxy * `c2ac612610` BACKPORT: printk: ringbuffer: Fix truncating buffer size min_t cast * `7579b22626` ANDROID: GKI: Add symbols to symbol list for oplus * `6e5f182128` ANDROID: signal: Add vendor hook for memory reap * `3a51a61927` ANDROID: abi_gki_aarch64_qcom: white list symbols for mglru overshoot * `0500235e3f` ANDROID: vendor_hook: Add vendor hook to decide scan abort policy * `e6ed59127c` UPSTREAM: af_unix: Fix null-ptr-deref in unix_stream_sendpage(). * `2eb5b31ac1` FROMLIST: ufs: core: fix abnormal scale up after last cmd finish * `89434cbd2d` FROMLIST: ufs: core: fix abnormal scale up after scale down * `e490b62fed` FROMLIST: ufs: core: only suspend clock scaling if scale down * `3ffb038098` ANDROID: GKI: update ABI definition * `e2fa9ebcae` UPSTREAM: zsmalloc: allow only one active pool compaction context * `478ec4dbea` ANDROID: GKI: Update Tuxera symbol list * `cd94fe67fd` ANDROID: ABI: Update symbols to qcom whitelist * `68eefde2d3` UPSTREAM: usb: typec: tcpm: set initial svdm version based on pd revision * `a68bd01493` ANDROID: KVM: arm64: Don't update IOMMUs for share/unshare * `20ecb229c5` ANDROID: cpuidle: teo: Export a function that allows modifying util_threshold * `2490ab50e7` ANDROID: sched: Add vendor hook for rt util update * `6d97f75abc` ANDROID: sched: Add vendor hook for util-update related functions * `e08c5de06e` ANDROID: sched: Add vendor hooks for override sugov behavior * `5762974151` ANDROID: Add new hook to enable overriding uclamp_validate() * `b57e3c1d99` ANDROID: sched/uclamp: Don't enable uclamp_is_used static key by in-kernel requests * `2b25d535d0` ANDROID: topology: Add vendor hook for use_amu_fie * `eb9686932b` ANDROID: sched: Export symbols needed for vendor hooks * `84131c988b` ANDROID: Update symbol list for Exynos Auto SoCs * `3367abadff` UPSTREAM: netfilter: nf_tables: deactivate catchall elements in next generation * `a891f77b7b` ANDROID: GKI: Update symbols to symbol list * `4d8d9522db` ANDROID: GKI: Export four symbols in file net/core/net-trace.c * `3973acfed0` UPSTREAM: blk-ioc: fix recursive spin_lock/unlock_irq() in ioc_clear_queue() * `523bfe8539` ANDROID: fuse-bpf: Align data structs for 32-bit kernels * `9f5a84b955` ANDROID: GKI: Update symbol list for xiaomi * `176d72d941` ANDROID: vendor_hooks: export cgroup_threadgroup_rwsem * `1fb9e95d46` ANDROID: GKI: add symbol list file for meizu * `8fb9de0877` ANDROID: fuse-bpf: Get correct inode in mkdir * `0fdb44964c` ANDROID: ABI: Update allowed list for QCOM * `404522c763` UPSTREAM: blk-ioc: protect ioc_destroy_icq() by 'queue_lock' * `bd0308e36b` ANDROID: GKI: Update symbols to symbol list * `87647c0c54` ANDROID: uid_sys_stats: Use llist for deferred work * `4b3ab91671` UPSTREAM: net: nfc: Fix use-after-free caused by nfc_llcp_find_local * `c603880bd5` UPSTREAM: netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID * `d95b2b008e` UPSTREAM: net: tap_open(): set sk_uid from current_fsuid() * `b15c3a3df0` UPSTREAM: usb: typec: ucsi: Fix command cancellation * `0c34d588af` UPSTREAM: locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock * `20266a0652` ANDROID: kleaf: Remove ptp_kvm.ko from i386 modules * `ce18fe6f29` ANDROID: GKI: Add symbols to symbol list for oplus * `8e6550add2` ANDROID: vendor_hooks: Add tune swappiness hook in get_scan_count() * `dd87a7122c` ANDROID: GKI: Update symbol list for VIVO * `638804ea1c` ANDROID: kleaf: get_gki_modules_list add i386 option * `264e2973a4` ANDROID: arm as an option for get_gki_modules_list * `37edfbc5c4` UPSTREAM: um: Only disable SSE on clang to work around old GCC bugs * `2a13641a14` ANDROID: GKI: Update abi_gki_aarch64_qcom for page_owner symbols * `f08623648a` ANDROID: mm: Export page_owner_inited and __set_page_owner * `e44e3955f7` ANDROID: Use alias for old rules. * `67018dd4e4` ANDROID: virt: geniezone: Enable as GKI module for arm64 * `9a399ca713` ANDROID: Add arch specific gki module list targets * `3e079b7691` FROMLIST: virt: geniezone: Add dtb config support * `39bd65ec1d` FROMLIST: virt: geniezone: Add memory region support * `c26057e351` FROMLIST: virt: geniezone: Add ioeventfd support * `e73a5222e6` FROMLIST: virt: geniezone: Add irqfd support * `7427b76faa` FROMLIST: virt: geniezone: Add irqchip support for virtual interrupt injection * `540cff0872` FROMLIST: virt: geniezone: Add vcpu support * `6ce86d075e` FROMLIST: virt: geniezone: Add GenieZone hypervisor support * `40107a0081` FROMLIST: dt-bindings: hypervisor: Add MediaTek GenieZone hypervisor * `beaffb638b` FROMLIST: docs: geniezone: Introduce GenieZone hypervisor * `e0c4636bd2` UPSTREAM: net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free * `ec1f17ddac` UPSTREAM: net: tun_chr_open(): set sk_uid from current_fsuid() * `0adc759b0c` UPSTREAM: exfat: check if filename entries exceeds max filename length * `f4ba064f76` UPSTREAM: net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free * `5b0878fc61` ANDROID: abi_gki_aarch64_qcom: update abi symbols * `7551a1a2a1` ANDROID: cgroup: Add android_rvh_cgroup_force_kthread_migration * `cd018c99fa` FROMGIT: pstore/ram: Check start of empty przs during init * `ffaab71302` UPSTREAM: erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF * `8497f46a87` UPSTREAM: erofs: avoid useless loops in z_erofs_pcluster_readmore() when reading beyond EOF * `2f805fb912` UPSTREAM: erofs: Fix detection of atomic context * `cc6111a287` UPSTREAM: erofs: fix compact 4B support for 16k block size * `f11ccb03a0` UPSTREAM: erofs: kill hooked chains to avoid loops on deduplicated compressed images * `7521b904dc` UPSTREAM: erofs: fix potential overflow calculating xattr_isize * `6ec6eee87e` UPSTREAM: erofs: stop parsing non-compact HEAD index if clusterofs is invalid * `9089c10d9c` UPSTREAM: erofs: initialize packed inode after root inode is assigned * `797dac42cc` ANDROID: GKI: Update ABI for zsmalloc fixes * `cb440cecb2` BACKPORT: zsmalloc: fix races between modifications of fullness and isolated * `c0e84be923` ANDROID: ABI: Update symbols to unisoc whitelist for A14-6.1 * `5ef132d564` UPSTREAM: zsmalloc: consolidate zs_pool's migrate_lock and size_class's locks * `ec6b3d552a` UPSTREAM: netfilter: nfnetlink_log: always add a timestamp * `4db95aa21a` ANDROID: virt: gunyah: Do not allocate irq for GH_RM_RESOURCE_NO_VIRQ * `2d1d3be2ba` ANDROID: GKI: Add Tuxera symbol list * `20d8a89758` ANDROID: ABI: Update oplus symbol list * `7afa84fbb9` ANDROID: vendor_hooks: Add hooks for waking up and exiting control * `9ca47685c5` ANDROID: GKI: Update symbol list for xiaomi * `2d7f87b0ff` ANDROID: vendor_hooks:vendor hook for percpu-rwsem * `63af84cffe` ANDROID: fips140: fix the error injection module parameters * `71bedf9d9c` BACKPORT: blk-crypto: dynamically allocate fallback profile * `086befddbe` UPSTREAM: net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free * `ecd8d8a208` UPSTREAM: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb * `6923dcc21d` UPSTREAM: media: usb: siano: Fix warning due to null work_func_t function pointer Change-Id: Idc01a15f70d151d08c30ee23c2939260764e428b Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-10-31 17:20:05 +00:00
Greg Kroah-Hartman	1c5ec1e54d	Merge 6.1.55 into android14-6.1-lts Changes in 6.1.55 autofs: fix memory leak of waitqueues in autofs_catatonic_mode btrfs: output extra debug info if we failed to find an inline backref locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer kernel/fork: beware of __put_task_struct() calling context rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle() scftorture: Forgive memory-allocation failure if KASAN ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 perf/imx_ddr: speed up overflow frequency of cycle hw_breakpoint: fix single-stepping when using bpf_overflow_handler ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects selftests/nolibc: fix up kernel parameters support devlink: remove reload failed checks in params get/set callbacks crypto: lrw,xts - Replace strlcpy with strscpy ice: Don't tx before switchdev is fully configured wifi: ath9k: fix fortify warnings wifi: ath9k: fix printk specifier wifi: mwifiex: fix fortify warning mt76: mt7921: don't assume adequate headroom for SDIO headers wifi: wil6210: fix fortify warnings can: sun4i_can: Add acceptance register quirk can: sun4i_can: Add support for the Allwinner D1 net: Use sockaddr_storage for getsockopt(SO_PEERNAME). net/ipv4: return the real errno instead of -EINVAL crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() Bluetooth: Fix hci_suspend_sync crash netlink: convert nlk->flags to atomic flags tpm_tis: Resend command to recover from data transfer errors mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450 alx: fix OOB-read compiler warning wifi: mac80211: check S1G action frame size netfilter: ebtables: fix fortify warnings in size_entry_mwt() wifi: cfg80211: reject auth/assoc to AP with our address wifi: cfg80211: ocb: don't leave if not joined wifi: mac80211: check for station first in client probe wifi: mac80211_hwsim: drop short frames libbpf: Free btf_vmlinux when closing bpf_object drm/bridge: tc358762: Instruct DSI host to generate HSE packets drm/edid: Add quirk for OSVR HDK 2.0 arm64: dts: qcom: sm6125-pdx201: correct ramoops pmsg-size arm64: dts: qcom: sm6350: correct ramoops pmsg-size arm64: dts: qcom: sm8150-kumano: correct ramoops pmsg-size arm64: dts: qcom: sm8250-edo: correct ramoops pmsg-size samples/hw_breakpoint: Fix kernel BUG 'invalid opcode: 0000' drm/amd/display: Fix underflow issue on 175hz timing ASoC: SOF: topology: simplify code to prevent static analysis warnings ASoC: Intel: sof_sdw: Update BT offload config for soundwire config ALSA: hda: intel-dsp-cfg: add LunarLake support drm/amd/display: Use DTBCLK as refclk instead of DPREFCLK drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN31 drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN314 drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer() bus: ti-sysc: Configure uart quirks for k3 SoC md: raid1: fix potential OOB in raid1_remove_disk() ext2: fix datatype of block number in ext2_xattr_set2() fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount PCI: dwc: Provide deinit callback for i.MX ARM: 9317/1: kexec: Make smp stop calls asynchronous powerpc/pseries: fix possible memory leak in ibmebus_bus_init() PCI: vmd: Disable bridge window for domain reset PCI: fu740: Set the number of MSI vectors media: mdp3: Fix resource leaks in of_find_device_by_node media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() media: af9005: Fix null-ptr-deref in af9005_i2c_xfer media: anysee: fix null-ptr-deref in anysee_master_xfer media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout error is detected media: tuners: qt1010: replace BUG_ON with a regular error media: pci: cx23885: replace BUG with error return usb: cdns3: Put the cdns set active part outside the spin lock usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc tools: iio: iio_generic_buffer: Fix some integer type and calculation scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() serial: cpm_uart: Avoid suspicious locking misc: open-dice: make OPEN_DICE depend on HAS_IOMEM usb: ehci: add workaround for chipidea PORTSC.PEC bug usb: chipidea: add workaround for chipidea PEC bug media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning kobject: Add sanity check for kset->kobj.ktype in kset_register() interconnect: Fix locking for runpm vs reclaim printk: Keep non-panic-CPUs out of console lock printk: Consolidate console deferred printing dma-buf: Add unlocked variant of attachment-mapping functions misc: fastrpc: Prepare to dynamic dma-buf locking specification misc: fastrpc: Fix incorrect DMA mapping unmap request MIPS: Use "grep -E" instead of "egrep" btrfs: add a helper to read the superblock metadata_uuid btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super block: factor out a bvec_set_page helper nvmet: use bvec_set_page to initialize bvecs nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() drm: gm12u320: Fix the timeout usage for usb_bulk_msg() scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() selftests: tracing: Fix to unmount tracefs for recovering environment x86/ibt: Suppress spurious ENDBR riscv: kexec: Align the kexeced kernel entry scsi: target: core: Fix target_cmd_counter leak scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file() panic: Reenable preemption in WARN slowpath x86/boot/compressed: Reserve more memory for page tables x86/purgatory: Remove LTO flags samples/hw_breakpoint: fix building without module unloading md/raid1: fix error: ISO C90 forbids mixed declarations Revert "SUNRPC: Fail faster on bad verifier" attr: block mode changes of symlinks ovl: fix failed copyup of fileattr on a symlink ovl: fix incorrect fdput() on aio completion io_uring/net: fix iter retargeting for selected buf nvme: avoid bogus CRTO values md: Put the right device in md_seq_next Revert "drm/amd: Disable S/G for APUs when 64GB or more host memory" dm: don't attempt to queue IO under RCU protection btrfs: fix lockdep splat and potential deadlock after failure running delayed items btrfs: fix a compilation error if DEBUG is defined in btree_dirty_folio btrfs: release path before inode lookup during the ino lookup ioctl btrfs: check for BTRFS_FS_ERROR in pending ordered assert tracing: Have tracing_max_latency inc the trace array ref count tracing: Have event inject files inc the trace array ref count tracing: Increase trace array ref count on enable and filter files tracing: Have current_trace inc the trace array ref count tracing: Have option files inc the trace array ref count selinux: fix handling of empty opts in selinux_fs_context_submount() nfsd: fix change_info in NFSv4 RENAME replies tracefs: Add missing lockdown check to tracefs_create_dir() i2c: aspeed: Reset the i2c controller when timeout occurs ata: libata: disallow dev-initiated LPM transitions to unsupported states ata: libahci: clear pending interrupt status scsi: megaraid_sas: Fix deadlock on firmware crashdump scsi: pm8001: Setup IRQs on resume ext4: fix rec_len verify error drm/amd/display: fix the white screen issue when >= 64GB DRAM Revert "memcg: drop kmem.limit_in_bytes" drm/amdgpu: fix amdgpu_cs_p1_user_fence net/sched: Retire rsvp classifier interconnect: Teach lockdep about icc_bw_lock order Linux 6.1.55 Change-Id: I95193a57879a13b04b5ac8647a24e6d8304fcb0e Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-10-26 18:58:32 +00:00
Greg Kroah-Hartman	769612f594	Merge tag 'android14-6.1.43_r00' into android14-6.1 This catches the android14-6.1 branch up with the 6.1.43 LTS upstream release. It contains the following commits: * `e8ac95d4bc` Revert "arm64: errata: Mitigate Ampere1 erratum AC03_CPU_38 at stage-2" * `cf0f262265` Revert "locking/rtmutex: Fix task->pi_waiters integrity" * `38b64945f1` Revert "ring-buffer: Fix wrong stat of cpu_buffer->read" * `7f81705800` Merge 6.1.43 into android14-6.1-lts \|\ \| * `52a953d093` Linux 6.1.43 \| * `c3d576baa6` dma-buf: fix an error pointer vs NULL bug \| * `23acc2b850` dma-buf: keep the signaling time of merged fences v3 \| * `665e6fd714` test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation \| * `0ab95d5ce8` selftests: mptcp: sockopt: use 'iptables-legacy' if available \| * `bd2decac73` mptcp: ensure subflow is unhashed before cleaning the backlog \| * `ab79c7541d` cpufreq: intel_pstate: Drop ACPI _PSS states table patching \| * `602a1cbc24` ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily \| * `f7fcc0f1b2` ACPI: processor: perflib: Use the "no limit" frequency QoS \| * `d701687c89` drm/amd/display: Write to correct dirty_rect \| * `d58fb94f24` drm/amd/display: perform a bounds check before filling dirty rectangles \| * `0441c44154` tracing: Fix trace_event_raw_event_synth() if else statement \| * `f5e8f7a02c` drm/amd/display: set per pipe dppclk to 0 when dpp is off \| * `73679f8c45` rbd: retrieve and check lock owner twice before blocklisting \| * `0c0b6412c9` rbd: harden get_lock_owner_info() a bit \| * `c0d067c79b` rbd: make get_lock_owner_info() return a single locker or NULL \| * `3d215ad49c` dm cache policy smq: ensure IO doesn't prevent cleaner policy progress \| * `507f70c06a` drm/i915/dpt: Use shmem for dpt objects \| * `e046aecb73` ceph: never send metrics if disable_send_metrics is set \| * `8ab9ad1638` PM: sleep: wakeirq: fix wake irq arming \| * `356e711640` arm64/sme: Set new vector length before reallocating \| * `ff54cb993b` ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register \| * `6deb8727f2` s390/dasd: print copy pair message only for the correct error \| * `c4ae208cc3` s390/dasd: fix hanging device after quiesce/resume \| * `2b58bd3847` LoongArch: BPF: Enable bpf_probe_read{, str}() on LoongArch \| * `8a5e0c1f71` LoongArch: BPF: Fix check condition to call lu32id in move_imm() \| * `024ed3b9b8` Revert "um: Use swap() to make code cleaner" \| * `e1d54962a6` soundwire: fix enumeration completion \| * `dda7cfcaa4` selftests: mptcp: join: only check for ip6tables if needed \| * `aedec6019d` net: dsa: qca8k: fix mdb add/del case with 0 VID \| * `828f9526f0` net: dsa: qca8k: fix broken search_and_del \| * `d42c326288` net: dsa: qca8k: fix search_and_insert wrong handling of new rule \| * `e1fda7c125` virtio-net: fix race between set queues and probe \| * `cd1a8952ff` xen: speed up grant-table reclaim \| * `af7aa4fe94` proc/vmcore: fix signedness bug in read_from_oldmem() \| * `7f1715d827` locking/rtmutex: Fix task->pi_waiters integrity \| * `d392d2d72a` irqchip/gic-v4.1: Properly lock VPEs when doing a directLPI invalidation \| * `a80d2cb27d` irq-bcm6345-l1: Do not assume a fixed block to cpu mapping \| * `2edb87931a` tpm_tis: Explicitly check for error code \| * `c9af433b11` ACPI/IORT: Remove erroneous id_count check in iort_node_get_rmr_info() \| * `d79f730bb8` nfsd: Remove incorrect check in nfsd4_validate_stateid \| * `e5a87723e8` file: always lock position for FMODE_ATOMIC_POS \| * `2663e2cb91` x86/MCE/AMD: Decrement threshold_bank refcount when removing threshold blocks \| * `360c98f583` btrfs: check for commit error at btrfs_attach_transaction_barrier() \| * `a7b85dc316` btrfs: check if the transaction was aborted at btrfs_wait_for_commit() \| * `cbec34d302` btrfs: account block group tree when calculating global reserve size \| * `5fec6f7903` hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled \| * `85f8077893` hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature \| * `bf7b30dc16` ALSA: hda/relatek: Enable Mute LED on HP 250 G8 \| * `db3c5ca314` ALSA: hda/realtek: Support ASUS G713PV laptop \| * `96a0b80eb1` Revert "xhci: add quirk for host controllers that don't update endpoint DCS" \| * `9615ca54bc` tty: n_gsm: fix UAF in gsm_cleanup_mux \| * `7ae9f55a49` staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() \| * `41e05572e8` staging: r8712: Fix memory leak in _r8712_init_xmit_priv() \| * `ef301c41a1` Documentation: security-bugs.rst: clarify CVE handling \| * `ddb9503d1c` Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group \| * `9ae3d7941f` Revert "usb: xhci: tegra: Fix error check" \| * `cf8203ea19` usb: xhci-mtk: set the dma max_seg_size \| * `c0ebcc7e7f` usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config \| * `9590eeef4d` USB: quirks: add quirk for Focusrite Scarlett \| * `98a6054d51` usb: ohci-at91: Fix the unhandle interrupt when resume \| * `a280625541` usb: misc: ehset: fix wrong if condition \| * `c1fad1695b` usb: dwc3: don't reset device side if dwc3 was configured as host-only \| * `84ff2e988b` usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy \| * `bf4986fbeb` Revert "usb: dwc3: core: Enable AutoRetry feature in the controller" \| * `60816ac26f` usb: typec: Use sysfs_emit_at when concatenating the string \| * `9e4c1e68bf` usb: typec: Iterate pds array when showing the pd list \| * `59feda7f38` usb: typec: Set port->pd before adding device for typec_port \| * `efd354eb79` can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED \| * `60dea45ea3` USB: serial: simple: sort driver entries \| * `889122fe36` USB: serial: simple: add Kaufmann RKS+CAN VCP \| * `6341ef50ca` USB: serial: option: add Quectel EC200A module support \| * `f13b7a9f16` USB: serial: option: support Quectel EM060K_128 \| * `71bef922ff` serial: sifive: Fix sifive_serial_console_setup() section \| * `ace0efeb56` serial: 8250_dw: Preserve original value of DLF register \| * `016a4a2a75` serial: qcom-geni: drop bogus runtime pm state update \| * `eb1a542824` KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid \| * `d8eb0c480f` KVM: VMX: Don't fudge CR0 and CR4 for restricted L2 guest \| * `ed8bbe6627` KVM: Grab a reference to KVM for VM and vCPU stats file descriptors \| * `c80b7c8f9d` usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate \| * `de77000c19` USB: gadget: Fix the memory leak in raw_gadget driver \| * `0f23a9eb8a` usb: gadget: call usb_gadget_check_config() to verify UDC capability \| * `0cf9741aa3` Revert "usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init()" \| * `a3a3c7bdda` tracing: Fix warning in trace_buffered_event_disable() \| * `77996fa5c6` ring-buffer: Fix wrong stat of cpu_buffer->read \| * `9d0a4a7777` ata: pata_ns87415: mark ns87560_tf_read static \| * `84415f934a` ublk: fail to recover device if queue setup is interrupted \| * `0d5916c439` ublk: fail to start device if queue setup is interrupted \| * `c741076a3c` ublk_drv: move ublk_get_device_from_id into ublk_ctrl_uring_cmd \| * `a39bf13f86` drm/msm: Disallow submit with fence id 0 \| * `3398e8b283` drm/msm: Switch idr_lock to spinlock \| * `d722661362` RDMA/irdma: Report correct WC error \| * `fe3409cd01` RDMA/irdma: Fix op_type reporting in CQEs \| * `e139cc2974` drm/amd/display: Unlock on error path in dm_handle_mst_sideband_msg_ready_event() \| * `5c58d120bf` drm/amd: Fix an error handling mistake in psp_sw_init() \| * `ce114218f7` dm raid: protect md_stop() with 'reconfig_mutex' \| * `e08db3f85d` dm raid: clean up four equivalent goto tags in raid_ctr() \| * `d43c7edfeb` dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths \| * `37b5a0bdb8` xenbus: check xen_domain in xenbus_probe_initcall \| * `a71cd15a85` drm/i915: Fix an error handling path in igt_write_huge() \| * `ddac66e802` smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request \| * `55704f087f` block: Fix a source code comment in include/uapi/linux/blkzoned.h \| * `f656ba177f` ASoC: fsl_spdif: Silence output on stop \| * `6806494ed4` cxl/acpi: Return 'rc' instead of '0' in cxl_parse_cfmws() \| * `748fadc08b` cxl/acpi: Fix a use-after-free in cxl_parse_cfmws() \| * `1b8b835373` drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() \| * `b8500538b8` RDMA/bnxt_re: Prevent handling any completions after qp destroy \| * `d335b5fb33` RDMA/mthca: Fix crash when polling CQ for shared QPs \| * `5986e96be7` RDMA/irdma: Fix data race on CQP request done \| * `4e1a5842a3` RDMA/irdma: Fix data race on CQP completion stats \| * `b83e4c1e4c` RDMA/irdma: Add missing read barriers \| * `14627d02b1` drm/msm/adreno: Fix snapshot BINDLESS_DATA size \| * `b6432b6870` drm/msm/dpu: drop enum dpu_core_perf_data_bus_id \| * `10b5920c33` RDMA/mlx4: Make check for invalid flags stricter \| * `539cf23cb4` tipc: stop tipc crypto on failure in tipc_node_create \| * `5f6a842db1` tipc: check return value of pskb_trim() \| * `0069a11a6f` benet: fix return value check in be_lancer_xmit_workarounds() \| * `0f7432b7c3` net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64 \| * `eefc0b3215` net/sched: mqprio: add extack to mqprio_parse_nlattr() \| * `5523d2e319` net/sched: mqprio: refactor nlattr parsing to a separate function \| * `7218974aba` mm: suppress mm fault logging if fatal signal already pending \| * `268cb07ef3` netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID \| * `4237462a07` netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR \| * `89a4d1a897` netfilter: nft_set_rbtree: fix overlap expiration walk \| * `c09df09241` igc: Fix Kernel Panic during ndo_tx_timeout callback \| * `1ecdbf2467` x86/traps: Fix load_unaligned_zeropad() handling for shared TDX memory \| * `cb160f4f90` platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 \| * `847265678e` net: stmmac: Apply redundant write work around on 4.xx too \| * `17e67a071b` octeontx2-af: Fix hash extraction enable configuration \| * `9b0c968a13` octeontx2-af: Removed unnecessary debug messages. \| * `517a4f3b09` team: reset team's flags when down link is P2P device \| * `4c50927853` bonding: reset bond's flags when down link is P2P device \| * `46bf2459d6` ice: Fix memory management in ice_ethtool_fdir.c \| * `51aea7e9d5` tcp: Reduce chance of collisions in inet6_hashfn(). \| * `776da4eca0` ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address \| * `6ed1e466ef` ethernet: atheros: fix return value check in atl1e_tso_csum() \| * `85c38ac62c` atheros: fix return value check in atl1_tso() \| * `01cb355bb9` phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() \| * `69534f5ab7` vxlan: fix GRO with VXLAN-GPE \| * `9e22b434ff` vxlan: generalize vxlan_parse_gpe_hdr and remove unused args \| * `ddc6ab3834` vxlan: calculate correct header length for GPE \| * `4de5cd8d89` net: hns3: fix wrong bw weight of disabled tc issue \| * `487b685c81` net: hns3: fix wrong tc bandwidth weight data issue \| * `b93161779b` net: hns3: fix the imp capability bit cannot exceed 32 bits issue \| * `e3339d44e0` net: phy: marvell10g: fix 88x3310 power up \| * `c76d3742b6` iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED \| * `469879eda3` iavf: fix potential deadlock on allocation failure \| * `c0fa9a5a7a` i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() \| * `940a2c75f5` media: amphion: Fix firmware path to match linux-firmware \| * `70f9f05aba` media: staging: atomisp: select V4L2_FWNODE \| * `accc838fd6` soundwire: qcom: update status correctly with mask \| * `cf52320a39` phy: qcom-snps-femto-v2: properly enable ref clock \| * `01d8e49999` phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend \| * `b6132813be` phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc \| * `3a5dbdc53a` phy: phy-mtk-dp: Fix an error code in probe() \| * `15c94c3151` drm/amd/display: Prevent vtotal from being set to 0 \| * `d5741133e6` drm/amd/display: Fix possible underflow for displays with large vblank \| * `342ec1696d` drm/amd/display: update extended blank for dcn314 onwards \| * `27931ea53c` drm/amd/display: Add FAMS validation before trying to use it \| * `6415d5de13` drm/amd/display: fix dc/core/dc.c kernel-doc \| * `549f205819` drm/amd/display: Rework comments on dc file \| * `4eed29e8a8` maple_tree: fix 32 bit mas_next testing \| * `1b6e8744ed` maple_tree: add __init and __exit to test module \| * `cba7ddf552` test_maple_tree: test modifications while iterating \| * `a6e2a0e414` tracing/probes: Fix to record 0-length data_loc in fetch_store_string() if fails \| `bee9946688` Revert "tracing: Add "(fault)" name injection to kernel probes" \| * `f3baa42afe` tracing: Allow synthetic events to pass around stacktraces \| * `d92ee6bce1` tracing/probes: Fix to avoid double count of the string length on the array \| * `16cc222026` tracing/probes: Add symstr type for dynamic events \| * `f5ded0c11d` mptcp: do not rely on implicit state check in mptcp_listen() \| * `fbe9fa195e` mptcp: introduce 'sk' to replace 'sock->sk' in mptcp_listen() \| * `cde7f2fd63` arm64: errata: Mitigate Ampere1 erratum AC03_CPU_38 at stage-2 \| * `eb1de0a234` KVM: arm64: Condition HW AF updates on config option \| * `17e188e0fe` drm/ttm: never consider pinned BOs for eviction&swap \| * `a7451c38e1` tty: fix hang on tty device with no_room set \| * `72deb17550` n_tty: Rename tail to old_tail in n_tty_read() \| * `e9c44738cb` drm/ttm: Don't leak a resource on eviction error \| * `3a8f9b8ccf` drm/ttm: Don't print error message if eviction was interrupted \| * `76fcfc6ae3` drm/amd/display: Set minimum requirement for using PSR-SU on Phoenix \| * `f8b61a2c29` drm/amd/display: Set minimum requirement for using PSR-SU on Rembrandt \| * `41c666e2b7` drm/amd/display: Update correct DCN314 register header \| * `8f0582fb6d` drm/amd/display: fix dcn315 single stream crb allocation \| * `38fa05cad9` drm/amd/display: add pixel rate based CRB allocation support \| * `ad8c209544` drm/amd/display: fix unbounded requesting for high pixel rate modes on dcn315 \| * `acba20a5b2` drm/amd/display: use low clocks for no plane configs \| * `8d515d39d8` drm/amd/display: add ODM case when looking for first split pipe \| * `3a88351318` drm/amd/display: Use min transition for all SubVP plane add/remove \| * `a5397c85f0` drm/amd/display: Include surface of unaffected streams \| * `d5b3e4cf99` drm/amd/display: Copy DC context in the commit streams \| * `4efb2d2200` drm/amd/display: Enable new commit sequence only for DCN32x \| * `bc2c700388` drm/amd/display: Rework context change check \| * `810329d3d4` drm/amd/display: Check if link state is valid \| * `f1edb2f58a` drm/amd/display: add FB_DAMAGE_CLIPS support \| * `ed92b595af` PCI: rockchip: Don't advertise MSI-X in PCIe capabilities \| * `7b65231b65` PCI: rockchip: Fix window mapping and address translation for endpoint \| * `3b117fd8cf` PCI: rockchip: Remove writes to unused registers \| * `13b9c5f605` PCI/ASPM: Avoid link retraining race \| * `4d1cd90cea` PCI/ASPM: Factor out pcie_wait_for_retrain() \| * `8dfeae8082` PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() \| * `ecd9da1d05` MIPS: Loongson: Fix build error when make modules_install \| * `3fac9a39f8` MIPS: Loongson: Move arch cflags to MIPS top level Makefile \| * `70957ae160` i2c: nomadik: Remove a useless call in the remove function \| * `a9be061237` i2c: nomadik: Use devm_clk_get_enabled() \| * `82dee5b258` i2c: nomadik: Remove unnecessary goto label \| * `1dc23fb83b` i2c: Improve size determinations \| * `38a8983ae1` i2c: Delete error messages for failed memory allocations \| * `7b7291ab29` btrfs: fix race between quota disable and relocation \| * `44e2afbf65` gpio: mvebu: fix irq domain leak \| * `8ee94aab99` gpio: mvebu: Make use of devm_pwmchip_add \| * `19156bcb88` pwm: Add a stub for devm_pwmchip_add() \| * `b2d8ac988f` gpio: tps68470: Make tps68470_gpio_output() always set the initial value \| * `04f7d49174` io_uring: don't audit the capability check in io_uring_create() \| * `017f686bcb` KVM: s390: pv: fix index value of replaced ASCE \| * `e8df129860` powerpc/pseries/vas: Hold mmap_mutex after mmap lock during window close \| * `557ea2ff05` blk-mq: Fix stall due to recursive flush plug \| * `0935bbbf6e` jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint \| * `6e385845ee` drm/amd: Align SMU11 SMU_MSG_OverridePcieParameters implementation with SMU13 \| * `32631ac27c` drm/amd: Move helper for dynamic speed switch check out of smu13 \| * `53dd2ca2c0` ovl: fix null pointer dereference in ovl_permission() \| * `a9174f0d7a` drm/amd/display: Keep PHY active for dp config \| * `2bb9121616` platform/x86/amd/pmf: reduce verbosity of apmf_get_system_params \| * `fd14866ebe` platform/x86/amd/pmf: Notify OS power slider update \| * `b068314fd8` netfilter: nf_tables: fix underflow in chain reference counter \| * `35651fde1a` netfilter: nf_tables: fix underflow in object reference counter * \| `f5aa90efe8` FROMLIST: Revert "fuse: Apply flags2 only when userspace set the FUSE_INIT_EXT" * \| `469cf75fcc` Revert "sched/psi: Fix avgs_work re-arm in psi_avgs_work()" * \| `d18fe3efda` Revert "sched/psi: Rearrange polling code in preparation" * \| `5b039dbb91` Revert "sched/psi: Rename existing poll members in preparation" * \| `ed063a7e76` Revert "sched/psi: Extract update_triggers side effect" * \| `2c1e89916b` Revert "sched/psi: Allow unprivileged polling of N2s period" \| `ffed79e366` Revert "sched/psi: use kernfs polling functions for PSI trigger polling" * \| `8976ff249f` Merge 6.1.42 into android14-6.1-lts \|\\| \| * `d2a6dc4eaf` Linux 6.1.42 \| * `1d4607f2a5` Revert "drm/amd/display: edp do not add non-edid timings" \| * `2f2ba3c162` drm/amd/display: Add polling method to handle MST reply packet \| * `78ea2ed76c` drm/amd/display: fix linux dp link lost handled only one time \| * `b31143b0fb` drm/amd/display: Clean up errors & warnings in amdgpu_dm.c \| * `c14702daf1` drm/amd/display: force connector state when bpc changes during compliance \| * `00f68f5c1b` drm/dp_mst: Clear MSG_RDY flag before sending new message \| * `c085ffaf67` drm/amd/display: fix some coding style issues \| * `374735cbe2` drm/amd/display: use max_dsc_bpp in amdgpu_dm \| * `268bfb3782` selftests/bpf: Fix sk_assign on s390x \| * `fd1e31d1bc` selftests/bpf: Workaround verification failure for fexit_bpf2bpf/func_replace_return_code \| * `a7c1eb9cb8` selftests/bpf: make test_align selftest more robust \| * `4c8f30a2ad` bpf: aggressively forget precise markings during state checkpointing \| * `8b57a37d0e` bpf: stop setting precise in current state \| * `56675ddcb0` bpf: allow precision tracking for programs with subprogs \| * `dd33fbe4af` scripts/kallsyms: update the usage in the comment block \| * `5fab8c91e5` scripts/kallsyms.c Make the comment up-to-date with current implementation \| * `320f980bc0` kallsyms: add kallsyms_seqs_of_names to list of special symbols \| * `7531eb07b2` spi: dw: Remove misleading comment for Mount Evans SoC \| * `70a3015683` drm/ttm: fix bulk_move corruption when adding a entry \| * `61622fa379` tracing/histograms: Return an error if we fail to add histogram to hist_vars list \| * `bae17da3ae` jbd2: recheck chechpointing non-dirty buffer \| * `b9f0f20ab0` net: phy: prevent stale pointer dereference in phy_init() \| * `f311c76800` tcp: annotate data-races around fastopenq.max_qlen \| * `01a1563a09` tcp: annotate data-races around icsk->icsk_user_timeout \| * `918a1beb0a` tcp: annotate data-races around tp->notsent_lowat \| * `b02f8fce7c` tcp: annotate data-races around rskq_defer_accept \| * `17c3d75833` tcp: annotate data-races around tp->linger2 \| * `e639397202` tcp: annotate data-races around icsk->icsk_syn_retries \| * `d27a1aa37e` tcp: annotate data-races around tp->keepalive_probes \| * `161b069389` tcp: annotate data-races around tp->keepalive_intvl \| * `87b8466eb0` tcp: annotate data-races around tp->keepalive_time \| * `2c84a3d78a` tcp: annotate data-races around tp->tsoffset \| * `949eb83880` tcp: annotate data-races around tp->tcp_tx_delay \| * `0d4d6b083d` Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() \| * `e969bfed84` Bluetooth: ISO: fix iso_conn related locking and validity issues \| * `59bd1e476b` Bluetooth: hci_event: call disconnect callback before deleting conn \| * `13ad45ad14` Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync \| * `e18922ce3e` netfilter: nf_tables: skip bound chain on rule flush \| * `ec3e856075` netfilter: nf_tables: skip bound chain in netns release path \| * `90c3955beb` netfilter: nft_set_pipapo: fix improper element removal \| * `f372992820` netfilter: nf_tables: can't schedule in nft_chain_validate \| * `6026fa4f47` netfilter: nf_tables: fix spurious set element insertion failure \| * `c1dc350a37` ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp \| * `050c24656a` llc: Don't drop packet from non-root netns. \| * `50e4b32d2e` fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe \| * `a44ff12573` Revert "tcp: avoid the lookup process failing to get sk in ehash table" \| * `d1a4d697a9` net:ipv6: check return value of pskb_trim() \| * `205bad1b30` net: ipv4: Use kfree_sensitive instead of kfree \| * `fac47182d3` tcp: annotate data-races around tcp_rsk(req)->ts_recent \| * `aa32235da4` tcp: annotate data-races around tcp_rsk(req)->txhash \| * `f62a00b7d1` net: ipv4: use consistent txhash in TIME_WAIT and SYN_RECV \| * `1d8e3ec4f0` igc: Prevent garbled TX queue with XDP ZEROCOPY \| * `c0268bc0d7` igc: Avoid transmit queue timeout for XDP \| * `bb6ae775ff` bpf, arm64: Fix BTI type used for freplace attached functions \| * `8620c53ced` bpf: Repeat check_max_stack_depth for async callbacks \| * `d55ff358b0` bpf: Fix subprog idx logic in check_max_stack_depth \| * `c355f3a27b` octeontx2-pf: Dont allocate BPIDs for LBK interfaces \| * `0f56bfe19a` security: keys: Modify mismatched function name \| * `3fc081eddd` iavf: fix reset task race with iavf_remove() \| * `2647ff59c5` iavf: fix a deadlock caused by rtnl and driver's lock circular dependencies \| * `9743519240` iavf: Wait for reset in callbacks which trigger it \| * `f43ab442a8` iavf: make functions static where possible \| * `9e36533d66` iavf: send VLAN offloading caps once after VFR \| * `5d1c0ac33d` iavf: Move netdev_update_features() into watchdog task \| * `6d9d01689b` iavf: use internal state to free traffic IRQs \| * `6e1d8f1332` iavf: Fix out-of-bounds when setting channels on remove \| * `ca12b98e04` iavf: Fix use-after-free in free_netdev \| * `ce3ec3fc64` net: dsa: microchip: correct KSZ8795 static MAC table access \| * `54830adfd9` net: dsa: microchip: ksz8_r_sta_mac_table(): Avoid using error code for empty entries \| * `8a60427c8a` net: dsa: microchip: ksz8: Make ksz8_r_sta_mac_table() static \| * `e4820a764e` net: dsa: microchip: ksz8: Separate static MAC table operations for code reuse \| * `155f594534` net: sched: cls_bpf: Undo tcf_bind_filter in case of an error \| * `2256b27f54` net: sched: cls_u32: Undo refcount decrement in case update failed \| * `a934579346` net: sched: cls_u32: Undo tcf_bind_filter if u32_replace_hw_knode \| * `fa753f8656` net: sched: cls_matchall: Undo tcf_bind_filter in case of failure after mall_set_parms \| * `813572a08d` ASoC: SOF: ipc3-dtrace: uninitialized data in dfsentry_trace_filter_write() \| * `c55901d381` cifs: fix mid leak during reconnection after timeout threshold \| * `855643c8d2` net: ethernet: mtk_eth_soc: handle probe deferral \| * `6924f3c898` bridge: Add extack warning when enabling STP in netns. \| * `3325b8ddfe` net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field() \| * `4148d6c766` dsa: mv88e6xxx: Do a final check before timing out \| * `f4c0a6b8ce` kallsyms: strip LTO-only suffixes from promoted global functions \| * `5004d383fe` kallsyms: Correctly sequence symbols when CONFIG_LTO_CLANG=y \| * `28fdfda791` kallsyms: Improve the performance of kallsyms_lookup_name() \| * `c401b72836` spi: s3c64xx: clear loopback bit after loopback test \| * `9c85f71d3f` btrfs: be a bit more careful when setting mirror_num_ret in btrfs_map_block \| * `08bdd70974` perf build: Fix library not found error when using CSLIBS \| * `6aa851f627` fbdev: imxfb: Removed unneeded release_mem_region \| * `e7bb9436ea` fbdev: imxfb: warn about invalid left/right margin \| * `7a2d80a8c2` spi: bcm63xx: fix max prepend length \| * `6af800f917` pinctrl: renesas: rzg2l: Handle non-unique subnode names \| * `be087281dc` pinctrl: renesas: rzv2m: Handle non-unique subnode names \| * `92cc015332` sched/psi: use kernfs polling functions for PSI trigger polling \| * `d5dca19776` sched/psi: Allow unprivileged polling of N2s period \| `fb4bc32fc1` sched/psi: Extract update_triggers side effect \| * `c1623d4d0b` sched/psi: Rename existing poll members in preparation \| * `c176dda0a6` sched/psi: Rearrange polling code in preparation \| * `7d8bba4da1` sched/psi: Fix avgs_work re-arm in psi_avgs_work() \| * `45f739e8fb` sched/fair: Use recent_used_cpu to test p->cpus_ptr \| * `6ede0d0f88` ASoC: qcom: q6apm: do not close GPR port before closing graph \| * `5da98d0438` ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR \| * `e3495bc994` ASoC: codecs: wcd938x: fix mbhc impedance loglevel \| * `3122e90b5c` ASoC: amd: acp: fix for invalid dai id handling in acp_get_byte_count() \| * `da64c8889f` net: hns3: fix strncpy() not using dest-buf length as length issue \| * `39695e87d8` igb: Fix igb_down hung on surprise removal \| * `6887f35881` wifi: iwlwifi: pcie: add device id 51F1 for killer 1675 \| * `6862557e9a` wifi: iwlwifi: mvm: avoid baid size integer overflow \| * `a46a624914` wifi: iwlwifi: Add support for new PCI Id \| * `8e0a94e31a` wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point() \| * `408d40c729` devlink: report devlink_port_type_warn source device \| * `0d14264155` net: ethernet: litex: add support for 64 bit stats \| * `86f9330a49` wifi: ath11k: fix memory leak in WMI firmware stats \| * `766e606536` spi: dw: Add compatible for Intel Mount Evans SoC \| * `d0124848c7` wifi: mac80211_hwsim: Fix possible NULL dereference \| * `8656b31d2e` wifi: ath11k: add support default regdb while searching board-2.bin for WCN6855 \| * `4e291a07af` bpf: tcp: Avoid taking fast sock lock in iterator \| * `c006fe361c` bpf: Address KCSAN report on bpf_lru_list \| * `10fa03a9c1` bpf: Print a warning only if writing to unprivileged_bpf_disabled. \| * `8d1342108c` wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range \| * `78a5f711ef` sched/fair: Don't balance task to its current running CPU \| * `896f4d6046` rcu: Mark additional concurrent load from ->cpu_no_qs.b.exp \| * `9027d69221` rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic() \| * `e055d0ec88` ACPI: video: Add backlight=native DMI quirk for Dell Studio 1569 \| * `aa7cdf487a` FS: JFS: Check for read-only mounted filesystem in txBegin \| * `3e5eb6c5ec` FS: JFS: Fix null-ptr-deref Read in txBegin \| * `da0a7c6975` MIPS: dec: prom: Address -Warray-bounds warning \| * `bdf07ab159` fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev \| * `a682414980` udf: Fix uninitialized array access for some pathnames \| * `cce9107c31` ovl: check type and offset of struct vfsmount in ovl_entry \| * `5228d4d505` HID: add quirk for 03f0:464a HP Elite Presenter Mouse \| * `6432843deb` quota: fix warning in dqgrab() \| * `1f2ec87f4a` quota: Properly disable quotas when add_dquot_ref() fails \| * `2a97ec7809` ALSA: emu10k1: roll up loops in DSP setup code for Audigy \| * `2e1be420b8` drm/radeon: Fix integer overflow in radeon_cs_parser_init \| * `0ca3768534` ext4: correct inline offset when handling xattrs in inode body \| * `aba8f85eca` ASoC: codecs: wcd938x: fix soundwire initialisation race \| * `1a261a4193` ASoC: codecs: wcd938x: fix codec initialisation race \| * `8b11d2f0e5` ASoC: codecs: wcd934x: fix resource leaks on component remove \| * `bb241ae928` ASoC: codecs: wcd938x: fix missing mbhc init error handling \| * `4eac89ffc5` ASoC: codecs: wcd938x: fix resource leaks on component remove \| * `c584b5eca3` ASoC: tegra: Fix AMX byte map \| * `d55fc2bdaa` ASoC: qdsp6: audioreach: fix topology probe deferral \| * `17feff71d0` ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove \| * `b0fbf3c353` ASoC: codecs: wcd938x: fix missing clsh ctrl error handling \| * `1dd61a5b5c` ASoC: cs42l51: fix driver to properly autoload with automatic module loading \| * `0e3cf64324` ASoC: rt5640: Fix sleep in atomic context \| * `e5b2389e04` ASoC: tegra: Fix ADX byte map \| * `24bed70aa6` ASoC: fsl_sai: Revert "ASoC: fsl_sai: Enable MCTL_MCLK_EN bit for master mode" \| * `6518812877` ASoC: fsl_sai: Disable bit clock with transmitter \| * `b9741ba942` drm/amd/display: Keep PHY active for DP displays on DCN31 \| * `889bac5fd7` drm/amd/display: check TG is non-null before checking if enabled \| * `9f28e8c2be` drm/amd/display: Disable MPC split by default on special asic \| * `4385420741` drm/amd/display: only accept async flips for fast updates \| * `917bef37cf` drm/client: Fix memory leak in drm_client_modeset_probe \| * `b5359d7a50` drm/client: Fix memory leak in drm_client_target_cloned \| * `91bd7acf89` drm/amdgpu/pm: make mclk consistent for smu 13.0.7 \| * `0b4f3d9a5c` drm/amdgpu/pm: make gfxclock consistent for sienna cichlid \| * `13cb7bfbcc` drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel \| * `19e7b9f1f7` dma-buf/dma-resv: Stop leaking on krealloc() failure \| * `25ad249699` selftests: tc: add ConnTrack procfs kconfig \| * `54950747d5` can: gs_usb: gs_can_open(): improve error handling \| * `995f47d766` can: bcm: Fix UAF in bcm_proc_show() \| * `a2d31762d7` can: mcp251xfd: __mcp251xfd_chip_set_mode(): increase poll timeout \| * `aa5cf8bd13` arm64/fpsimd: Ensure SME storage is allocated after SVE VL changes \| * `3e463a4f38` regmap: Account for register length in SMBus I/O limits \| * `ef7ad397fb` of: Preserve "of-display" device name for compatibility \| * `f16c2eb694` regmap: Drop initial version of maximum transfer length fixes \| * `efeac348cd` selftests: tc: add 'ct' action kconfig dep \| * `4986dd1b51` selftests: tc: set timeout to 15 minutes \| * `ddf7e8984c` btrfs: fix race between balance and cancel/pause \| * `c828e913c8` fuse: ioctl: translate ENOSYS in outarg \| * `c35ea60619` btrfs: zoned: fix memory leak after finding block group with super blocks \| * `0a5e0bc8e8` btrfs: set_page_extent_mapped after read_folio in btrfs_cont_expand \| * `549f5093e9` fuse: Apply flags2 only when userspace set the FUSE_INIT_EXT \| * `af6d1fc5b8` fuse: revalidate: don't invalidate if interrupted \| * `89e994688e` btrfs: fix warning when putting transaction with qgroups enabled after abort \| * `c1b3d1a9c6` perf probe: Add test for regression introduced by switch to die_get_decl_file() \| * `00edfa6d4f` keys: Fix linking a duplicate key to a keyring's assoc_array \| * `4984a10a21` maple_tree: fix node allocation testing on 32 bit \| * `85718972b0` maple_tree: set the node limit when creating a new root node \| * `e0c3e25cfc` ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx \| * `0f493b5bfe` ALSA: hda/realtek: Add quirk for Clevo NS70AU \| * `7ed4e52973` ALSA: hda/realtek - remove 3k pull low procedure \| * `1b87f546a0` io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq * \| `b2d799c4d4` Merge 6.1.41 into android14-6.1-lts \|\\| \| * `5302e81aa2` Linux 6.1.41 \| * `ed9b87010a` x86/cpu/amd: Add a Zenbleed fix \| * `5fc203d8d3` x86/cpu/amd: Move the errata checking functionality up * \| `f12524c9de` Revert "Revert "8250: add support for ASIX devices with a FIFO bug"" * \| `f1311733c2` Merge 6.1.40 into android14-6.1-lts \|\\| \| * `7538911373` Linux 6.1.40 \| * `9879d6e1ca` net/ncsi: change from ndo_set_mac_address to dev_set_mac_address \| * `e2c3356907` net/ncsi: make one oem_gma function for all mfr id \| * `e4a0e09b79` drm/atomic: Fix potential use-after-free in nonblocking commits \| * `d34a3470ed` net/sched: sch_qfq: reintroduce lmax bound check for MTU \| * `ff06cd411a` swiotlb: mark swiotlb_memblock_alloc() as __init \| * `d64b70df23` Revert "drm/amd: Disable PSR-SU on Parade 0803 TCON" \| * `fbfb6b7cb2` MIPS: kvm: Fix build error with KVM_MIPS_DEBUG_COP0_COUNTERS enabled \| * `fec55ec035` scsi: qla2xxx: Fix end of loop test \| * `f459d586fd` scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue \| * `b06d1b5253` scsi: qla2xxx: Pointer may be dereferenced \| * `b88b1241fb` scsi: qla2xxx: Correct the index of array \| * `e466930717` scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() \| * `ce2cdbe530` scsi: qla2xxx: Fix potential NULL pointer dereference \| * `2dddbf8de1` scsi: qla2xxx: Fix buffer overrun \| * `477bc74ad1` scsi: qla2xxx: Avoid fcport pointer dereference \| * `2b3bdef089` scsi: qla2xxx: Array index may go out of bound \| * `d994ac7c78` scsi: qla2xxx: Fix mem access after free \| * `90770dad1e` scsi: qla2xxx: Wait for io return on terminate rport \| * `1802e5d098` scsi: qla2xxx: Fix hang in task management \| * `35985b0741` scsi: qla2xxx: Fix task management cmd fail due to unavailable resource \| * `843665c426` scsi: qla2xxx: Fix task management cmd failure \| * `ff92567d90` scsi: qla2xxx: Multi-que support for TMF \| * `95e34129f3` tracing/user_events: Fix struct arg size match check \| * `a95c1fede2` tracing/probes: Fix to update dynamic data counter if fetcharg uses it \| * `837f92d27f` tracing/probes: Fix not to count error code to total length \| * `2f41d35b58` selftests: mptcp: pm_nl_ctl: fix 32-bit support \| * `ee352299a6` selftests: mptcp: depend on SYN_COOKIES \| * `08daab11f3` selftests: mptcp: userspace_pm: report errors with 'remove' tests \| * `4098a43182` selftests: mptcp: userspace_pm: use correct server port \| * `c118baa05f` selftests: mptcp: sockopt: return error if wrong mark \| * `671486793f` selftests: mptcp: connect: fail if nft supposed to work \| * `938d5b7a75` tracing: Fix null pointer dereference in tracing_err_log_open() \| * `fbcd0c2b56` fprobe: Ensure running fprobe_exit_handler() finished before calling rethook_free() \| * `ce3ec57faf` fprobe: Release rethook after the ftrace_ops is unregistered \| * `2e9a46e467` pwm: meson: fix handling of period/duty if greater than UINT_MAX \| * `ba1ede19e6` pwm: meson: modify and simplify calculation in meson_pwm_get_state \| * `9a2c57fd32` PM: QoS: Restore support for default value on frequency QoS \| * `15ec83da43` perf/x86: Fix lockdep warning in for_each_sibling_event() on SPR \| * `22fc9fd723` xtensa: ISS: fix call to split_if_spec \| * `6a05de6da5` cifs: if deferred close is disabled then close files immediately \| * `bd8cd38d3a` drm/amd/pm: conditionally disable pcie lane/speed switching for SMU13 \| * `11dc77a645` drm/amd/pm: share the code around SMU13 pcie parameters update \| * `99fe81d219` ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() \| * `8b0b63fdac` ring-buffer: Fix deadloop issue on reading trace_pipe \| * `90947ebf87` net: ena: fix shift-out-of-bounds in exponential backoff \| * `b1a726ad33` regmap-irq: Fix out-of-bounds access when allocating config buffers \| * `aeb62beaf9` perf: RISC-V: Remove PERF_HES_STOPPED flag checking in riscv_pmu_start() \| * `e2c7a05a48` samples: ftrace: Save required argument registers in sample trampolines \| * `9d6a260bbf` nvme: don't reject probe due to duplicate IDs for single-ported PCIe devices \| * `be970e22c5` tracing: Fix memory leak of iter->temp when reading trace_pipe \| * `5fd32eb6fa` tracing/histograms: Add histograms to hist_vars if they have referenced variables \| * `0a1dc6377a` dm: verity-loadpin: Add NULL pointer check for 'bdev' parameter \| * `08aaeda414` s390/decompressor: fix misaligned symbol build error \| * `2ebf4ddcc6` bus: ixp4xx: fix IXP4XX_EXP_T1_MASK \| * `599c0ebdb5` Revert "8250: add support for ASIX devices with a FIFO bug" \| * `801daff007` soundwire: qcom: fix storing port config out-of-bounds \| * `76ab057de7` opp: Fix use-after-free in lazy_opp_tables after probe deferral \| * `be06ffa8f4` meson saradc: fix clock divider mask length \| * `610ddd79fc` xhci: Show ZHAOXIN xHCI root hub speed correctly \| * `892ef75930` xhci: Fix TRB prefetch issue of ZHAOXIN hosts \| * `8e273a2190` xhci: Fix resume issue of some ZHAOXIN hosts \| * `8293614798` ceph: don't let check_caps skip sending responses for revoke msgs \| * `0471d907d8` ceph: fix blindly expanding the readahead windows \| * `d545ff97cf` ceph: add a dedicated private data for netfs rreq \| * `183c0ae4fa` libceph: harden msgr2.1 frame segment length checks \| * `cb8a31a56d` firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() \| * `5553d587a3` tty: serial: imx: fix rs485 rx after tx \| * `f0bf102ef9` tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk \| * `34f5b826dd` tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error \| * `9fd9e1d098` serial: atmel: don't enable IRQs prematurely \| * `f037f60387` drm/ttm: Don't leak a resource on swapout move error \| * `fe26d0fa94` drm/amdgpu: avoid restore process run into dead loop. \| * `8404d0e274` drm/amd/display: Add monitor specific edid quirk \| * `7ad40467fd` drm/amd/display: Correct `DMUB_FW_VERSION` macro \| * `ad85fc99d6` drm/amd/display: add a NULL pointer check \| * `3092beeb25` drm/amd: Disable PSR-SU on Parade 0803 TCON \| * `91e69e67d4` drm/amdgpu: fix clearing mappings for BOs that are always valid in VM \| * `3546f76c7a` drm/amd/display: disable seamless boot if force_odm_combine is enabled \| * `a2ef3163c3` drm/amd/display: Remove Phantom Pipe Check When Calculating K1 and K2 \| * `c4629c7575` drm/amd/display: edp do not add non-edid timings \| * `31fb25ecbb` drm/amd/display: fix seamless odm transitions \| * `c41963e50a` drm/rockchip: vop: Leave vblank enabled in self-refresh \| * `db0a9a2991` drm/atomic: Allow vblank-enabled + self-refresh "disable" \| * `6436ca035b` scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() \| * `7adcc32eb5` fs: dlm: fix mismatch of plock results from userspace \| * `adeaef5a00` fs: dlm: make F_SETLK use unkillable wait_event \| * `2a37d73395` fs: dlm: interrupt posix locks only when process is killed \| * `a1b6adf4b1` fs: dlm: fix cleanup pending ops when interrupted \| * `3346ffdee4` fs: dlm: return positive pid value for F_GETLK \| * `be19cb6716` dm init: add dm-mod.waitfor to wait for asynchronously probed block devices \| * `e30128926a` md/raid0: add discard support for the 'original' layout \| * `31df8b9609` mfd: pm8008: Fix module autoloading \| * `7ef181f84e` misc: pci_endpoint_test: Re-init completion for every test \| * `c2dba13bc0` misc: pci_endpoint_test: Free IRQs before removing the device \| * `0813bb2f2c` PCI: rockchip: Set address alignment for endpoint mode \| * `5b15ebec56` PCI: rockchip: Use u32 variable to access 32-bit registers \| * `1a48294ade` PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core \| * `dfd20ebcae` PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked \| * `05f55f7530` PCI: rockchip: Write PCI Device ID to correct register \| * `b2e2ffbfd3` PCI: rockchip: Assert PCI Configuration Enable bit after probe \| * `07d997ef10` PCI: epf-test: Fix DMA transfer completion detection \| * `bcd276f143` PCI: epf-test: Fix DMA transfer completion initialization \| * `cf0d7b7270` PCI: qcom: Disable write access to read only registers for IP v2.3.3 \| * `c459365ec7` PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 \| * `465c195e86` PCI: Release resource invalidated by coalescing \| * `3367d4be9b` PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold \| * `25cb64ecc3` s390/zcrypt: do not retry administrative requests \| * `026e46d26a` scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O \| * `b933df9dda` dm integrity: reduce vmalloc space footprint on 32-bit architectures \| * `ef709350ef` hwrng: imx-rngc - fix the timeout for init and self check \| * `c7feb54b11` jfs: jfs_dmap: Validate db_l2nbperpage while mounting \| * `9e54fd14bd` ext2/dax: Fix ext2_setsize when len is page aligned \| * `33f8dff6e1` soc: qcom: mdt_loader: Fix unconditional call to scm_pas_mem_setup \| * `5dc507de0c` fs: dlm: revert check required context while close \| * `95d49f79e9` ext4: only update i_reserved_data_blocks on successful block allocation \| * `deef86fa30` ext4: turn quotas off if mount failed after enabling quotas \| * `029c6b106f` ext4: fix to check return value of freeze_bdev() in ext4_shutdown() \| * `e861961f3a` ext4: fix wrong unit use in ext4_mb_new_blocks \| * `2038d35749` ext4: get block from bh in ext4_free_blocks for fast commit replay \| * `782166ac85` ext4: fix wrong unit use in ext4_mb_clear_bb \| * `0a90e70efa` ext4: Fix reusing stale buffer heads from last failed mounting \| * `bd9cf2a5f9` MIPS: KVM: Fix NULL pointer dereference \| * `d56b7a43a2` MIPS: Loongson: Fix cpu_probe_loongson() again \| * `58d1c81307` powerpc/64s: Fix native_hpte_remove() to be irq-safe \| * `484b8fb1ff` powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 \| * `23ab732b96` misc: fastrpc: Create fastrpc scalar with correct buffer count \| * `16eceb3959` powerpc: Fail build if using recordmcount with binutils v2.37 \| * `5aea2ac374` tracing/user_events: Fix incorrect return value for writing operation when events are disabled \| * `a4336343ea` kasan: add kasan_tag_mismatch prototype \| * `6d806841f1` net: phy: dp83td510: fix kernel stall during netboot in DP83TD510E PHY driver \| * `eac0aac07f` net: bcmgenet: Ensure MDIO unregistration has clocks enabled \| * `de67dadd5c` mtd: rawnand: meson: fix unaligned DMA buffers handling \| * `bb4e824d6b` tpm: return false from tpm_amd_is_rng_defective on non-x86 platforms \| * `ad249709d2` tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes \| * `f5a734a689` tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes \| * `99b998fb9d` tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation \| * `0028313700` tpm: Do not remap from ACPI resources again for Pluton TPM \| * `6d8488509e` pinctrl: amd: Unify debounce handling into amd_pinconf_set() \| * `dce19c966d` pinctrl: amd: Drop pull up select configuration \| * `326b3f17be` pinctrl: amd: Use amd_pinconf_set() for all config options \| * `3cadcab402` pinctrl: amd: Only use special debounce behavior for GPIO 0 \| * `57f6d48af4` pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts on probe" \| * `1cd1a0151f` pinctrl: amd: Detect and mask spurious interrupts \| * `1516518794` pinctrl: amd: Fix mistake in handling clearing pins at startup \| * `8a2d8e17c7` pinctrl: amd: Detect internal GPIO0 debounce handling \| * `4484ce0e49` pinctrl: amd: Add fields for interrupt status and wake status \| * `a56afed6d5` pinctrl: amd: Adjust debugfs output \| * `03590f9be9` pinctrl: amd: Add Z-state wake control bits \| * `a996fec74c` f2fs: fix deadlock in i_xattr_sem and inode page lock \| * `2cb10f4e6c` f2fs: fix the wrong condition to determine atomic context \| * `13e8af958c` drm/amd/pm: add abnormal fan detection for smu 13.0.0 \| * `e8b6b7b813` drm/amdgpu: Fix minmax warning \| * `d7d53c669d` drm/amdgpu: add the fan abnormal detection feature \| * `c8c703befd` drm/amd/pm: revise the ASPM settings for thunderbolt attached scenario \| * `4596c81291` drm/amdgpu/sdma4: set align mask to 255 \| * `7c880188c7` drm/client: Send hotplug event after registering a client \| * `40e2ed0e56` cifs: fix session state check in smb2_find_smb_ses \| * `c4a5fb1ae5` ovl: fix null pointer dereference in ovl_get_acl_rcu() \| * `06b3f0bf41` ovl: let helper ovl_i_path_real() return the realinode \| * `000a9a72ef` fs/ntfs3: Check fields while reading \| * `bf2f2c059f` nvme-pci: fix DMA direction of unmapping integrity data \| * `70feebdbfa` net/sched: sch_qfq: account for stab overhead in qfq_enqueue \| * `4b33836824` net/sched: sch_qfq: refactor parsing of netlink parameters \| * `0aec8dab2b` wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set() \| * `3d1dc71b8f` net/sched: make psched_mtu() RTNL-less safe \| * `1c806e4066` netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write() \| * `1b125be4e0` riscv: mm: fix truncation warning on RV32 \| * `174cfa0317` net/sched: flower: Ensure both minimum and maximum ports are specified \| * `b11a9b4f28` bpf: cpumap: Fix memory leak in cpu_map_update_elem \| * `4719576d6e` wifi: airo: avoid uninitialized warning in airo_get_rate() \| * `9e6474e5d7` erofs: fix fsdax unavailability for chunk-based regular files \| * `dc8158a95f` erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF \| * `83879f72e0` erofs: avoid useless loops in z_erofs_pcluster_readmore() when reading beyond EOF \| * `27272795a7` octeontx2-pf: Add additional check for MCAM rules \| * `5a9aecb665` drm/i915: Fix one wrong caching mode enum usage \| * `f1e746aedd` drm/i915: Don't preserve dpll_hw_state for slave crtc in Bigjoiner \| * `ba05762e4a` riscv, bpf: Fix inconsistent JIT image generation \| * `13a30e22ea` nvme: fix the NVME_ID_NS_NVM_STS_MASK definition \| * `66afb6a54e` igc: Fix inserting of empty frame for launchtime \| * `1b87509ef6` igc: Fix launchtime before start of cycle \| * `f92a82dc48` kernel/trace: Fix cleanup logic of enable_trace_eprobe \| * `7772d5c440` platform/x86: wmi: Break possible infinite loop when parsing GUID \| * `89726b0303` net: dsa: qca8k: Add check for skb_copy \| * `436b7cc7ea` ipv6/addrconf: fix a potential refcount underflow for idev \| * `5554414227` NTB: ntb_tool: Add check for devm_kcalloc \| * `8d7b875866` NTB: ntb_transport: fix possible memory leak while device_register() fails \| * `bece67815a` ntb: intel: Fix error handling in intel_ntb_pci_driver_init() \| * `d4317d41f0` NTB: amd: Fix error handling in amd_ntb_pci_driver_init() \| * `4e5daadf8c` ntb: idt: Fix error handling in idt_pci_driver_init() \| * `360db93beb` udp6: fix udp6_ehashfn() typo \| * `1462e9d9aa` icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). \| * `1731234e8b` net: prevent skb corruption on frag list segmentation \| * `685b57a122` net: bgmac: postpone turning IRQs off to avoid SoC hangs \| * `dc47046675` ionic: remove WARN_ON to prevent panic_on_warn \| * `6cc293d29c` octeontx2-af: Move validation of ptp pointer before its usage \| * `bb56b7905b` octeontx2-af: Promisc enable/disable through mbox \| * `2b4086a66a` gve: Set default duplex configuration to full \| * `c91fb29bb0` net/sched: cls_fw: Fix improper refcount update leads to use-after-free \| * `831fbc2065` net: mvneta: fix txq_map in case of txq_number==1 \| * `b2e74dedb0` bpf: Fix max stack depth check for async callbacks \| * `714d81a5c4` scsi: ufs: ufs-mediatek: Add dependency for RESET_CONTROLLER \| * `574d5236a8` scsi: qla2xxx: Fix error code in qla2x00_start_sp() \| * `49f6ac6f1c` blk-crypto: use dynamic lock class for blk_crypto_profile::lock \| * `d752be635b` igc: Handle PPS start time programming for past time values \| * `246fc961c8` igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings \| * `e962fd5933` net/mlx5e: Check for NOT_READY flag state after locking \| * `83a8f7337a` net/mlx5e: fix memory leak in mlx5e_ptp_open \| * `75df2fe6d1` net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create \| * `7ca1914cbd` net/mlx5e: fix double free in mlx5e_destroy_flow_table \| * `68b654e9eb` igc: Remove delay during TX ring configuration \| * `dfaed769b9` ice: Fix max_rate check while configuring TX rate limits \| * `1294311ce9` drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags \| * `fd5b64c1cf` swiotlb: reduce the number of areas to match actual memory pool size \| * `fc3db7fbdf` swiotlb: reduce the swiotlb buffer size on allocation failure \| * `24b24863a0` swiotlb: always set the number of areas before allocating the pool \| * `02d43b8a4f` drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime \| * `d48029c655` drm/panel: simple: Add connector_type for innolux_at043tn24 \| * `ef572ffa8e` ksmbd: fix out of bounds read in smb2_sess_setup \| * `869ef4f296` ksmbd: add missing compound request handing in some commands \| * `2d57a1590f` workqueue: clean up WORK_* constant types, clarify masking \| * `4b5ab640aa` net: lan743x: Don't sleep in atomic context \| * `5a45ed1ae3` HID: amd_sfh: Fix for shift-out-of-bounds \| * `d0b30d8e4d` HID: amd_sfh: Rename the float32 variable * \| `bd041b5977` ANDROID: GKI: Fix block/genhd.c exports from having their CRC changed * \| `c0e5631df8` Revert "blk-mq: fix potential io hang by wrong 'wake_batch'" * \| `c057db2f88` Revert "bpf: Remove bpf trampoline selector" * \| `17f0b3c7ee` Revert "drm/bridge: Introduce pre_enable_prev_first to alter bridge init order" * \| `b3c3fc85c7` Revert "drm/bridge: ti-sn65dsi83: Fix enable/disable flow to meet spec" * \| `b435525822` Merge 6.1.39 into android14-6.1-lts \|\\| \| * `a456e17438` Linux 6.1.39 \| * `f32dfc802e` io_uring: Use io_schedule* in cqring wait \| * `c55b552e0b` sh: hd64461: Handle virq offset for offchip IRQ base and HD64461 IRQ \| * `0ff5d219eb` sh: mach-dreamcast: Handle virq offset in cascaded IRQ demux \| * `5628b9aa31` sh: mach-highlander: Handle virq offset in cascaded IRL demux \| * `fe7daa313d` sh: mach-r2d: Handle virq offset in cascaded IRL demux \| * `899cc8f798` block/partition: fix signedness issue for Amiga partitions \| * `da012a025f` tty: serial: fsl_lpuart: add earlycon for imx8ulp platform \| * `3173bfdf89` wireguard: netlink: send staged packets when setting initial private key \| * `561aaadf0d` wireguard: queueing: use saner cpu selection wrapping \| * `40f83dd66a` netfilter: nf_tables: prevent OOB access in nft_byteorder_eval \| * `fc95c8b02c` netfilter: nf_tables: do not ignore genmask when looking up chain by id \| * `05561f822f` netfilter: conntrack: Avoid nf_ct_helper_hash uses after free \| * `f145373334` netfilter: nf_tables: unbind non-anonymous set if rule construction fails \| * `ad2928e7f3` mtd: parsers: refer to ARCH_BCMBCA instead of ARCH_BCM4908 \| * `1bdcffaa0d` drm/i915/tc: Fix system resume MST mode restore for DP-alt sinks \| * `99025116f5` drm/i915/tc: Fix TC port link ref init for DP MST during HW readout \| * `eaa0043a85` drm/i915: Fix TypeC mode initialization during system resume \| * `a02c6dc0ef` mm/mmap: Fix extra maple tree write \| * `9222068bc8` xfs: fix xfs_inodegc_stop racing with mod_delayed_work \| * `1b20685295` xfs: disable reaping in fscounters scrub \| * `25c1991f9f` xfs: check that per-cpu inodegc workers actually run on that cpu \| * `f6e37e2400` xfs: explicitly specify cpu when forcing inodegc delayed work to run immediately \| * `6b7c52f373` fs: no need to check source \| * `d53879f54b` blktrace: use inline function for blk_trace_remove() while blktrace is disabled \| * `ab0bd172d6` leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename \| * `9077ec19ad` ARM: orion5x: fix d2net gpio initialization \| * `600b51aa44` ARM: dts: qcom: ipq4019: fix broken NAND controller properties override \| * `9030a7e836` regulator: tps65219: Fix matching interrupts for their regulators \| * `d9eaa90d7d` ASoC: mediatek: mt8173: Fix snd_soc_component_initialize error path \| * `1c9b356bbe` ASoC: mediatek: mt8173: Fix irq error path \| * `3929b5dd8f` btrfs: do not BUG_ON() on tree mod log failure at __btrfs_cow_block() \| * `bc662a1e1f` btrfs: fix extent buffer leak after tree mod log failure at split_node() \| * `a53d78d9a8` btrfs: fix race when deleting quota root from the dirty cow roots list \| * `9634e5360b` btrfs: reinsert BGs failed to reclaim \| * `d9f1e518ab` btrfs: add block-group tree to lockdep classes \| * `3702c5342c` btrfs: bail out reclaim process if filesystem is read-only \| * `8560861095` btrfs: delete unused BGs while reclaiming BGs \| * `4fadf53fa9` btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile \| * `8fcb478b55` ipvs: increase ip_vs_conn_tab_bits range for 64BIT \| * `759e582b1c` usb: typec: ucsi: Mark dGPUs as DEVICE scope \| * `f2a6ce3eec` i2c: nvidia-gpu: Remove ccgx,firmware-build property \| * `7b67af8dea` i2c: nvidia-gpu: Add ACPI property to align with device-tree \| * `f40d621387` fs: Lock moved directories \| * `10c159f994` fs: Establish locking order for unrelated directories \| * `6654d2a165` Revert "f2fs: fix potential corruption when moving a directory" \| * `6aaa22ec73` ext4: Remove ext4 locking of moved directory \| * `606e463eef` fs: avoid empty option when generating legacy mount string \| * `6df680709d` jffs2: reduce stack usage in jffs2_build_xattr_subsystem() \| * `1f34bf8b44` shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs \| * `23fbff67b0` mm/damon/ops-common: atomically test and clear young on ptes and pmds \| * `33893c6c1f` autofs: use flexible array in ioctl structure \| * `cd52323ac4` integrity: Fix possible multiple allocation in integrity_inode_get() \| * `0cbbb029ff` um: Use HOST_DIR for mrproper \| * `219a9ec09d` watch_queue: prevent dangling pipe pointer \| * `7ecea5ce3d` bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent \| * `68118c339c` bcache: Remove unnecessary NULL point check in node allocations \| * `25ec4779d0` bcache: fixup btree_cache_wait list damage \| * `97ccc14d11` wifi: mt76: mt7921e: fix init command fail with enabled device \| * `d8985a0e44` wifi: ath10k: Serialize wake_tx_queue ops \| * `1a312d5a8c` wifi: cfg80211: fix regulatory disconnect for non-MLO \| * `5b2b6586c5` mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used. \| * `30c5f362b6` mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS \| * `69bc320351` mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M \| * `182bf07a24` mmc: core: disable TRIM on Kingston EMMC04G-M627 \| * `b50d6e06cc` io_uring: wait interruptibly for request completions on exit \| * `9440b24fbc` irqchip/loongson-pch-pic: Fix initialization of HT vector register \| * `2b4e43b5ad` NFSD: add encoding of op_recall flag for write delegation \| * `f672f2ca9d` irqchip/loongson-pch-pic: Fix potential incorrect hwirq assignment \| * `8753eeb2d3` i2c: qup: Add missing unwind goto in qup_i2c_probe() \| * `b990e37603` btrfs: do not BUG_ON() on tree mod log failure at balance_level() \| * `2445a35d05` extcon: usbc-tusb320: Unregister typec port on driver removal \| * `ee08e1fc94` extcon: usbc-tusb320: Convert to i2c's .probe_new() \| * `d5eb0375d7` dm ioctl: Avoid double-fetch of version \| * `2798779419` dm ioctl: have constant on the right side of the test \| * `fd4497aca3` dm: avoid split of quoted strings where possible \| * `0783867a30` dm: fix undue/missing spaces \| * `15970b0828` i2c: xiic: Don't try to handle more interrupt events after error \| * `e9fbb7c2f6` apparmor: fix missing error check for rhashtable_insert_fast \| * `8fb11fa480` sh: dma: Fix DMA channel offset calculation \| * `b837c69236` s390/qeth: Fix vipa deletion \| * `f5ea303502` afs: Fix accidental truncation when storing data \| * `4a141c3c03` octeontx-af: fix hardware timestamp configuration \| * `947d741adf` net: dsa: sja1105: always enable the send_meta options \| * `079dc659e3` net: dsa: tag_sja1105: fix MAC DA patching from meta frames \| * `97a6d99c54` pptp: Fix fib lookup calls. \| * `0a1b80ff4f` riscv: move memblock_allow_resize() after linear mapping is ready \| * `78c6cf1dc7` fanotify: disallow mount/sb marks on kernel internal pseudo fs \| * `18d78c5552` net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX \| * `67eb4aee2c` xsk: Honor SO_BINDTODEVICE on bind \| * `6baa6e4836` bpf, btf: Warn but return no error for NULL btf from __register_btf_kfunc_id_set() \| * `cd398daabe` tcp: annotate data races in __tcp_oow_rate_limited() \| * `ced61418f4` net: fix net_dev_start_xmit trace event vs skb_transport_offset() \| * `6469dc1c13` net: dsa: tag_sja1105: fix source port decoding in vlan_filtering=0 bridge mode \| * `fd03500476` net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode \| * `d50baa75c6` powerpc: dts: turris1x.dts: Fix PCIe MEM size for pci2 node \| * `d33b0ddf7a` powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y \| * `c86a2517df` ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr() \| * `a5485a9431` octeontx2-af: Add validation before accessing cgx and lmac \| * `bd246c92d2` octeontx2-af: Fix mapping for NIX block from CGX connection \| * `c2c5c6d2c4` f2fs: fix error path handling in truncate_dnode() \| * `cfdb9c1a74` mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 \| * `4033b47642` drm/amd: Don't try to enable secure display TA multiple times \| * `0d4e60e23c` drm/amdgpu: fix number of fence calculations \| * `d3dcdb43c8` spi: bcm-qspi: return error if neither hif_mspi nor mspi is available \| * `d4f5b1dd81` mlxsw: minimal: fix potential memory leak in mlxsw_m_linecards_init \| * `0b24d3e4b9` net: dsa: vsc73xx: fix MTU configuration \| * `f67ef8f9f6` ibmvnic: Do not reset dql stats on NON_FATAL err \| * `c07efe4dbc` Bluetooth: MGMT: Fix marking SCAN_RSP as not connectable \| * `40ca66eef3` Bluetooth: MGMT: Use BIT macro when defining bitfields \| * `1a7f268ccc` Bluetooth: MGMT: add CIS feature bits to controller information \| * `4aa515393f` Bluetooth: ISO: use hci_sync for setting CIG parameters \| * `018b12ff16` Bluetooth: fix invalid-bdaddr quirk for non-persistent setup \| * `102f3555ce` Add MODULE_FIRMWARE() for FIRMWARE_TG357766. \| * `f721042447` net: dsa: tag_sja1105: always prefer source port information from INCL_SRCPT \| * `060d36670d` net: dsa: sja1105: always enable the INCL_SRCPT option \| * `2f99d19dc6` net: dsa: felix: don't drop PTP frames with tag_8021q when RX timestamping is disabled \| * `e9dda2b68c` net: mscc: ocelot: don't keep PTP configuration of all ports in single structure \| * `7826202689` net: mscc: ocelot: don't report that RX timestamping is enabled by default \| * `a252547c89` spi: spi-geni-qcom: enable SPI_CONTROLLER_MUST_TX for GPI DMA mode \| * `946edfb7d4` net/sched: act_ipt: add sanity checks on skb before calling target \| * `a6c9b0f7ba` net: add a couple of helpers for iph tot_len \| * `201948effa` net/sched: act_ipt: add sanity checks on table name and hook locations \| * `1aa5a6a6d2` sctp: fix potential deadlock on &net->sctp.addr_wq_lock \| * `9dbcfc01d6` media: cec: i2c: ch7322: also select REGMAP \| * `0623f13959` f2fs: check return value of freeze_super() \| * `dcb526d768` drm/i915/guc/slpc: Apply min softlimit correctly \| * `61070305d5` drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times \| * `df53f7a3db` rtc: st-lpc: Release some resources in st_rtc_probe() in case of error \| * `3781d0e6c1` md/raid10: fix the condition to call bio_end_io_acct() \| * `07e81c9208` pwm: mtk_disp: Fix the disable flow of disp_pwm \| * `75439e6cd2` pwm: ab8500: Fix error code in probe() \| * `61aad933e5` pwm: sysfs: Do not apply state to already disabled PWMs \| * `c8fa254b77` pwm: imx-tpm: force 'real_period' to be zero in suspend \| * `29ddfd5460` lib/bitmap: drop optimization of bitmap_{from,to}_arr64 \| * `d986fb02a1` phy: tegra: xusb: check return value of devm_kzalloc() \| * `055ea8efdf` mfd: stmpe: Only disable the regulators if they are enabled \| * `f7d56de13c` hwtracing: hisi_ptt: Fix potential sleep in atomic context \| * `34eef9e8c8` clk: qcom: mmcc-msm8974: fix MDSS_GDSC power flags \| * `94f3bcfcd1` misc: fastrpc: check return value of devm_kasprintf() \| * `7e3ee25e8c` cpufreq: mediatek: correct voltages for MT7622 and MT7623 \| * `86bfb18bad` KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler \| * `c78ad1060c` KVM: s390: vsie: fix the length of APCB bitmap \| * `e716693f02` mfd: stmfx: Nullify stmfx->vdd in case of error \| * `18abe5f4c3` mfd: stmfx: Fix error path in stmfx_chip_init \| * `5bd9dc3e76` bus: fsl-mc: don't assume child devices are all fsl-mc devices \| * `e27948f329` nvmem: rmem: Use NVMEM_DEVID_AUTO \| * `2791847940` nvmem: sunplus-ocotp: release otp->clk before return \| * `e3a71d821e` drivers: fwnode: fix fwnode_irq_get[_byname]() \| * `51ae92e329` device property: Clarify description of returned value in some functions \| * `73209e3f8a` device property: Fix documentation for fwnode_get_next_parent() \| * `852659fe83` serial: 8250_omap: Use force_suspend and resume for system suspend \| * `e348173400` Revert "usb: common: usb-conn-gpio: Set last role to unknown before initial detection" \| * `22b1e2af69` mfd: intel-lpss: Add missing check for platform_get_resource \| * `2e8ab68460` mfd: wcd934x: Fix an error handling path in wcd934x_slim_probe() \| * `7a37abf096` usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() \| * `04b1c0798d` usb: common: usb-conn-gpio: Set last role to unknown before initial detection \| * `155bb9b4e3` usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() \| * `63b3360d43` usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() \| * `90159b329f` KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes \| * `ebe83e9bb8` f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() \| * `15c073e752` f2fs: fix potential deadlock due to unpaired node_write lock use \| * `2e980eb955` gfs2: Fix duplicate should_fault_in_pages() call \| * `f5d7f9e155` sh: Avoid using IRQ0 on SH3 and SH4 \| * `d199218881` media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() \| * `c8470b7de8` media: venus: helpers: Fix ALIGN() of non power of two \| * `8339bd9181` mfd: rt5033: Drop rt5033-battery sub-device \| * `6d702c7a22` coresight: Fix loss of connection info when a module is unloaded \| * `76efcb6cda` i3c: master: svc: fix cpu schedule in spin lock \| * `c0ed8b8049` lkdtm: replace ll_rw_block with submit_bh \| * `f5d80ad7b6` kernfs: fix missing kernfs_idr_lock to remove an ID from the IDR \| * `9c4f52b618` serial: 8250: lock port for UART_IER access in omap8250_irq() \| * `3a1ab191e0` serial: core: lock port for start_rx() in uart_resume_port() \| * `65a7cfc009` serial: 8250: lock port for stop_rx() in omap8250_irq() \| * `44470207db` serial: core: lock port for stop_rx() in uart_suspend_port() \| * `c494fe1b66` usb: misc: eud: Fix eud sysfs path (use 'qcom_eud') \| * `b5ab04a19e` usb: hide unused usbfs_notify_suspend/resume functions \| * `dd9b7c89a8` usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() \| * `ac961d0571` extcon: Fix kernel doc of property capability fields to avoid warnings \| * `e4c94de6ca` extcon: Fix kernel doc of property fields to avoid warnings \| * `e60a827ac0` usb: gadget: u_serial: Add null pointer check in gserial_suspend \| * `c3b322b84a` usb: dwc3: qcom: Fix potential memory leak \| * `6aecf5e19b` staging: vchiq_arm: mark vchiq_platform_init() static \| * `2ed441a763` clk: qcom: mmcc-msm8974: use clk_rcg2_shared_ops for mdp_clk_src clock \| * `3c4f7d4990` clk: qcom: dispcc-qcm2290: Fix GPLL0_OUT_DIV handling \| * `203ab76704` clk: qcom: dispcc-qcm2290: Fix BI_TCXO_AO handling \| * `b80c4629e9` clk: qcom: ipq6018: fix networking resets \| * `b20854ef6c` clk: qcom: reset: support resetting multiple bits \| * `0e481ef854` media: mediatek: vcodec: using decoder status instead of core work count \| * `42ec6269f9` media: hi846: fix usage of pm_runtime_get_if_in_use() \| * `1ac45cab77` media: i2c: Correct format propagation for st-mipid02 \| * `8abb53c516` media: usb: siano: Fix warning due to null work_func_t function pointer \| * `e230146b86` media: videodev2.h: Fix struct v4l2_input tuner index comment \| * `cb8e8950d7` media: amphion: initiate a drain of the capture queue in dynamic resolution change \| * `c0d500726c` media: amphion: drop repeated codec data for vc1g format \| * `bc43061b42` media: amphion: drop repeated codec data for vc1l format \| * `a8af55f7f4` media: usb: Check az6007_read() return value \| * `0b3d2aa627` clk: qcom: gcc-qcm2290: Mark RCGs shared where applicable \| * `792998a8cf` clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks \| * `f0cafc443c` clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs \| * `51e5f4e720` clk: qcom: mmcc-msm8974: remove oxili_ocmemgx_clk \| * `9812b33d17` serial: 8250: omap: Fix freeing of resources on failed register \| * `b6e30a54a5` usb: dwc2: Fix some error handling paths \| * `98b6582b37` usb: dwc2: platform: Improve error reporting for problems during .remove() \| * `e91366b72c` sh: j2: Use ioremap() to translate device tree address into kernel memory \| * `d6dd477436` f2fs: do not allow to defragment files have FI_COMPRESS_RELEASED \| * `190bdec8a7` dt-bindings: power: reset: qcom-pon: Only allow reboot-mode pre-pmk8350 \| * `c3f5604aba` w1: fix loop in w1_fini() \| * `eab6485377` w1: w1_therm: fix locking behavior in convert_t \| * `ef04741188` SUNRPC: Fix UAF in svc_tcp_listen_data_ready() \| * `6f1c81886b` btrfs: fix race when deleting free space root from the dirty cow roots list \| * `defc914227` block: increment diskseq on all media change events \| * `28b58a8d10` block: change all __u32 annotations to __be32 in affs_hardblocks.h \| * `40d6a1261a` block: add overflow checks for Amiga partition support \| * `a4c79ea1e9` block: fix signed int overflow in Amiga partition support \| * `3eb4e47a94` ALSA: pcm: Fix potential data race at PCM memory allocation helpers \| * `14eb1a2b6f` ALSA: jack: Fix mutex call in snd_jack_report() \| * `83c6725556` ALSA: hda/realtek: Add quirk for Clevo NPx0SNx \| * `21ce551a85` ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on EliteBook \| * `e0d7a96b27` mm/mmap: Fix VM_LOCKED check in do_vmi_align_munmap() \| * `b91748bdbf` Revert "drm/amd/display: edp do not add non-edid timings" \| * `96b1bc9a6f` iio: accel: fxls8962af: fixup buffer scan element type \| * `04a579517b` iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF \| * `fcdae54e3d` iio: adc: ad7192: Fix internal/external clock selection \| * `b61f26a8a0` iio: adc: ad7192: Fix null ad7192_state pointer access \| * `238edc04dd` phy: tegra: xusb: Clear the driver reference in usb-phy dev \| * `c2a0884134` usb: dwc3: gadget: Propagate core init errors to UDC during pullup \| * `a0b3696203` USB: serial: option: add LARA-R6 01B PIDs \| * `f57e2c0830` md/raid1-10: fix casting from randomized structure in raid1_submit_write() \| * `b6872b4a7d` x86/efi: Make efi_set_virtual_address_map IBT safe \| * `9766921494` arm64: sme: Use STR P to clear FFR context field in streaming SVE mode \| * `be54803be8` ksmbd: avoid field overflow warning \| * `babaab6ef6` smb: client: fix broken file attrs with nodfs mounts \| * `9fb981a86a` cifs: do all necessary checks for credits within or before locking \| * `4fe07d55a5` cifs: prevent use-after-free by freeing the cfile later \| * `e28d7a3f4b` efi/libstub: Disable PCI DMA before grabbing the EFI memory map \| * `1e596c181c` kbuild: Disable GCOV for .mod.o \| `c5696a8a54` hwrng: st - keep clock enabled while hwrng is registered \| * `d88158d816` dax/kmem: Pass valid argument to memory_group_register_static \| * `7b8106d905` dax: Introduce alloc_dev_dax_id() \| * `03859868ab` dax: Fix dax_mapping_release() use after free \| * `1bf709b962` SMB3: Do not send lease break acknowledgment if all file handles have been closed \| * `c2bf8d7b8f` NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION \| * `7053178436` NFSv4.2: fix wrong shrinker_id \| * `08749a9005` crypto: qat - unmap buffers before free for RSA \| * `32b09834c3` crypto: qat - unmap buffer before free for DH \| * `da1729e661` crypto: qat - Use helper to set reqsize \| * `2db49992fc` crypto: kpp - Add helper to set reqsize \| * `c14964fe8e` ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard \| * `dd872d5576` modpost: fix off by one in is_executable_section() \| * `64c358c9ab` crypto: jitter - correct health test during initialization \| * `7ab0e37f80` crypto: marvell/cesa - Fix type mismatch warning \| * `6852d82e6c` modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} \| * `1df287bd89` modpost: fix section mismatch message for R_ARM_ABS32 \| * `5a4adb1ece` crypto: nx - fix build warnings when DEBUG_FS is not enabled \| * `2be41ef57c` modpost: remove broken calculation of exception_table_entry size \| * `22c30022cd` hwrng: virtio - Fix race on data_avail and actual data \| * `8f98749d53` vfio/mdev: Move the compat_class initialization to module init \| * `e2e52c8dfb` PCI: vmd: Fix uninitialized variable usage in vmd_enable_domain() \| * `222f64e56b` PCI: endpoint: functions/pci-epf-test: Fix dma_chan direction \| * `e14379d026` PCI: endpoint: Fix a Kconfig prompt of vNTB driver \| * `38b64bdb72` PCI: endpoint: Fix Kconfig indent style \| * `4e6c406ccb` powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary \| * `ea356080c1` powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo \| * `526129937c` riscv: uprobes: Restore thread.bad_cause \| * `d25166e1e9` PCI: qcom: Disable write access to read only registers for IP v2.9.0 \| * `1cf0ecb0c7` PCI: qcom: Use DWC helpers for modifying the read-only DBI registers \| * `8640e941fd` PCI: qcom: Use lower case for hex \| * `a350f10777` PCI: qcom: Sort and group registers and bitfield definitions \| * `db962c7a71` PCI: qcom: Remove PCIE20_ prefix from register definitions \| * `865d128cab` powerpc: update ppc_save_regs to save current r1 in pt_regs \| * `4cff1be1cb` powerpc: simplify ppc_save_regs \| * `d9a1aaea85` powerpc/powernv/sriov: perform null check on iov before dereferencing iov \| * `0af388fce3` pinctrl: at91-pio4: check return value of devm_kasprintf() \| * `35404a47ba` pinctrl: microchip-sgpio: check return value of devm_kasprintf() \| * `4e82f92c34` powerpc/64s: Fix VAS mm use after free \| * `75d65c1cc4` perf tool x86: Fix perf_env memory leak \| * `0dafc849b9` perf tool x86: Consolidate is_amd check into single function \| * `c94376dbd6` platform/x86/dell/dell-rbtn: Fix resources leaking on error path \| * `9999a9f004` perf dwarf-aux: Fix off-by-one in die_get_varname() \| * `4e06e8b1f9` platform/x86: thinkpad_acpi: Fix lkp-tests warnings for platform profiles \| * `4309bd9e98` perf script: Fix allocation of evsel->priv related to per-event dump files \| * `7cfd310111` powerpc/signal32: Force inlining of __unsafe_save_user_regs() and save_tm_user_regs_unsafe() \| * `af0c61c5bb` powerpc/interrupt: Don't read MSR from interrupt_exit_kernel_prepare() \| * `081f642b31` kcsan: Don't expect 64 bits atomic builtins from 32 bits architectures \| * `c32afc7e86` pinctrl: npcm7xx: Add missing check for ioremap \| * `fc45a8be5e` pinctrl:sunplus: Add check for kmalloc \| * `8362ea6158` platform/x86: think-lmi: Correct NVME password handling \| * `699b593101` platform/x86: think-lmi: Correct System password interface \| * `61545eb787` platform/x86: think-lmi: mutex protection around multiple WMI calls \| * `d1390b057d` pinctrl: cherryview: Return correct value if pin in push-pull mode \| * `1ebe7d40ed` perf bench: Add missing setlocale() call to allow usage of %'d style formatting \| * `251c6615a7` scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state \| * `7d3664d24f` PCI: Add pci_clear_master() stub for non-CONFIG_PCI \| * `019d4fd93a` pinctrl: sunplus: Add check for kmalloc \| * `bc796f65cd` PCI: ftpci100: Release the clock resources \| * `a982c13e11` PCI: pciehp: Cancel bringup sequence if card is not present \| * `6c1b079e26` scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() \| * `7aecdd4791` PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free \| * `3a080e1b11` platform/x86: lenovo-yogabook: Set default keyboard backligh brightness on probe() \| * `fa177f7011` platform/x86: lenovo-yogabook: Reprobe devices on remove() \| * `3e6c92a346` platform/x86: lenovo-yogabook: Fix work race on remove() \| * `727fb7083e` pinctrl: bcm2835: Handle gpiochip_add_pin_range() errors \| * `c316bde418` scsi: qedf: Fix NULL dereference in error handling \| * `c52502b674` PCI: vmd: Reset VMD config register between soft reboots \| * `ebafa12c8f` PCI: cadence: Fix Gen2 Link Retraining process \| * `79e1d940fd` ASoC: amd: acp: clear pdm dma interrupt mask \| * `c6764757e8` ARM: dts: lan966x: kontron-d10: fix SPI CS \| * `712a7f3a06` ARM: dts: lan966x: kontron-d10: fix board reset \| * `49451db71b` clk: Fix memory leak in devm_clk_notifier_register() \| * `03a705c1d7` ASoC: imx-audmix: check return value of devm_kasprintf() \| * `e4f2a1feeb` ovl: update of dentry revalidate flags after copy up \| * `83356d6f0a` drivers: meson: secure-pwrc: always enable DMA domain \| * `511b47f8cb` clk: ti: clkctrl: check return value of kasprintf() \| * `67684f0688` clk: keystone: sci-clk: check return value of kasprintf() \| * `a20450f473` clk: si5341: free unused memory on probe failure \| * `11581850a7` clk: si5341: check return value of {devm_}kasprintf() \| * `0a89a906ba` clk: si5341: return error if one synth clock registration fails \| * `5470a0e81f` clk: cdce925: check return value of kasprintf() \| * `0b5c9e9695` clk: vc5: check memory returned by kasprintf() \| * `af8affd123` drm/msm/dpu: correct MERGE_3D length \| * `0e2c51a16f` drm/amdgpu: Fix usage of UMC fill record in RAS \| * `8d68ba9255` drm/amdgpu: Fix memcpy() in sienna_cichlid_append_powerplay_table function. \| * `643a85190a` arm64: dts: mediatek: mt8192: Fix CPUs capacity-dmips-mhz \| * `846c79d2a5` arm64: dts: mediatek: Add cpufreq nodes for MT8192 \| * `4e9f1a2367` drm/msm/dp: Free resources after unregistering them \| * `ecf02762d4` drm/msm/dsi: Remove incorrect references to slice_count \| * `ef25872788` drm/msm/dsi: Flip greater-than check for slice_count and slice_per_intf \| * `937da3db61` drm/msm/dsi: Use DSC slice(s) packet size to compute word count \| * `bc6d856b1c` drm/msm/dpu: Fix slice_last_group_size calculation \| * `7dca0dde50` drm/msm/dpu: do not enable color-management if DSPPs are not available \| * `d28b83252e` ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer \| * `96bafece6f` clk: tegra: tegra124-emc: Fix potential memory leak \| * `b35cb0c05b` clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider() \| * `9ff9f928c6` clk: bcm: rpi: Fix off by one in raspberrypi_discover_clocks() \| * `4842a84639` arm64: dts: qcom: sm8250-edo: Panel framebuffer is 2.5k instead of 4k \| * `7089f1aa0b` arm64: dts: qcom: sdm845: Flush RSC sleep & wake votes \| * `6317d03026` clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() \| * `280a5ff665` clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe \| * `9ba3693b03` clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe \| * `1839032251` clk: imx: clk-imxrt1050: fix memory leak in imxrt1050_clocks_probe \| * `bf7ab557d6` RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context \| * `c9be352be9` RDMA/bnxt_re: wraparound mbox producer index \| * `154bed0fd6` drm/msm/a5xx: really check for A510 in a5xx_gpu_init \| * `b10db1d213` amdgpu: validate offset_in_bo of drm_amdgpu_gem_va \| * `1afca9e0fe` RDMA/rxe: Fix access checks in rxe_check_bind_mw \| * `0cd210c594` RDMA/rxe: Replace pr_xxx by rxe_dbg_xxx in rxe_mw.c \| * `34bbf074f7` RDMA/rxe: Add ibdev_dbg macros for rxe \| * `78cb71dd60` HID: uclogic: Modular KUnit tests should not depend on KUNIT=y \| * `1420545b8a` drm/radeon: fix possible division-by-zero errors \| * `c1164aeb96` drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode \| * `82934a338b` soc: mediatek: SVS: Fix MT8192 GPU node name \| * `fabadad9e2` drm/amdkfd: Fix potential deallocation of previously deallocated memory. \| * `384717042d` drm/amd/display: Fix a test dml32_rq_dlg_get_rq_reg() \| * `36786e2a73` drm/amd/display: Fix a test CalculatePrefetchSchedule() \| * `4812faba0a` clk: Export clk_hw_forward_rate_request() \| * `90d4c487cd` ARM: dts: BCM5301X: fix duplex-full => full-duplex \| * `1ae94553dc` hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 \| * `421d359127` hwmon: (gsc-hwmon) fix fan pwm temperature scaling \| * `9e633411d1` ARM: dts: stm32: fix i2s endpoint format property for stm32mp15xx-dkx \| * `dc2707deeb` ARM: dts: stm32: Fix audio routing on STM32MP15xx DHCOM PDK2 \| * `03b2c470a1` Input: pm8941-powerkey - fix debounce on gen2+ PMICs \| * `421ce97657` arm64: dts: ti: k3-j7200: Fix physical address of pin \| * `3b4c218040` fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() \| * `52b04ac85f` drm/msm/dpu: set DSC flush bit correctly at MDP CTL flush register \| * `6878bdd757` arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 \| * `5d14292dba` ARM: dts: iwg20d-q7-common: Fix backlight pwm specifier \| * `766e0b6f4c` RDMA/hns: Fix hns_roce_table_get return value \| * `b99395ab60` IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate \| * `ebec507398` RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes \| * `750f0a302a` soc/fsl/qe: fix usb.c build errors \| * `b2194d7dfc` ARM: dts: meson8: correct uart_B and uart_C clock references \| * `863054be8d` ASoC: es8316: Do not set rate constraints for unsupported MCLKs \| * `3b575d9302` ASoC: es8316: Increment max value for ALC Capture Target Volume control \| * `c02f27c295` ARM: dts: qcom: apq8074-dragonboard: Set DMA as remotely controlled \| * `9f79e638d4` memory: brcmstb_dpfe: fix testing array offset after use \| * `09722ac9f1` ARM: dts: stm32: Shorten the AV96 HDMI sound card name \| * `666be7fef4` arm64: dts: mediatek: mt8183: Add mediatek,broken-save-restore-fw to kukui \| * `1bdb9751b4` arm64: dts: qcom: apq8096: fix fixed regulator name property \| * `75c019119e` arm64: dts: qcom: pm7250b: add missing spmi-vadc include \| * `c63997426d` ARM: omap2: fix missing tick_broadcast() prototype \| * `e91ffbd655` ARM: ep93xx: fix missing-prototype warnings \| * `deda0761dc` drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H \| * `25a724c2fa` drm/bridge: ti-sn65dsi83: Fix enable/disable flow to meet spec \| * `5044e5f251` drm/bridge: Introduce pre_enable_prev_first to alter bridge init order \| * `1d9473b88e` arm64: dts: qcom: apq8016-sbc: Fix 1.8V power rail on LS expansion \| * `638d54f5c5` arm64: dts: qcom: apq8016-sbc: Fix regulator constraints \| * `2ad75715fc` arm64: dts: qcom: sdm845-polaris: add missing touchscreen child node reg \| * `266cf247dd` arm64: dts: qcom: sm8350: correct DMA controller unit address \| * `42d0fbbbf4` arm64: dts: qcom: sm8350: Add GPI DMA compatible fallback \| * `aa14fefca2` arm64: dts: qcom: sdm845: correct camss unit address \| * `e3789d63a3` arm64: dts: qcom: sdm630: correct camss unit address \| * `173b6412a5` arm64: dts: qcom: msm8996: correct camss unit address \| * `4d810c12d6` arm64: dts: qcom: msm8994: correct SPMI unit address \| * `98cd405217` arm64: dts: qcom: msm8916: correct MMC unit address \| * `aa2d2407f5` arm64: dts: qcom: msm8916: correct camss unit address \| * `0cff846820` ARM: dts: qcom: msm8974: do not use underscore in node name (again) \| * `376daf3aa8` drm/bridge: anx7625: Prevent endless probe loop \| * `4536679f79` drm/bridge: anx7625: Convert to i2c's .probe_new() \| * `93a0378035` ARM: dts: gta04: Move model property out of pinctrl node \| * `af5bcfb4f8` clk: renesas: rzg2l: Fix CPG_SIPLL5_CLK1 register write \| * `2128318c91` iommu/virtio: Return size mapped for a detached domain \| * `0f2c11ccfd` iommu/virtio: Detach domain on endpoint release \| * `ed41f708b3` drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK \| * `f4c6e5d734` drm/msm/disp/dpu: get timing engine status from intf status register \| * `74abb8d3cd` drm/msm/dsi: don't allow enabling 14nm VCO with unprogrammed rate \| * `dd129da1fd` RDMA/bnxt_re: Fix to remove an unnecessary log \| * `c37eca42ac` RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid \| * `66eb6c47b5` RDMA/bnxt_re: Use unique names while registering interrupts \| * `f2279e3e38` RDMA/bnxt_re: Fix to remove unnecessary return labels \| * `b43b064498` RDMA/bnxt_re: Disable/kill tasklet only if it is enabled \| * `280e58d8b0` hwmon: (f71882fg) prevent possible division by zero \| * `08cc7cd2c2` clk: imx: scu: use _safe list iterator to avoid a use after free \| * `3fc9637f37` drm/bridge: tc358767: Switch to devm MIPI-DSI helpers \| * `929b6c6e6a` arm64: dts: microchip: sparx5: do not use PSCI on reference boards \| * `13602e6132` bus: ti-sysc: Fix dispc quirk masking bool variables \| * `46a8dff210` ARM: dts: stm32: Move ethernet MAC EEPROM from SoM to carrier boards \| * `7a3c39e34c` drm/vkms: Fix RGB565 pixel conversion \| * `048b7168ac` drm: Add fixed-point helper to get rounded integer values \| * `fa4ee16e81` drm/vkms: isolate pixel conversion functionality \| * `9d59f5f52c` ASoC: Intel: sof_sdw: remove SOF_SDW_TGL_HDMI for MeteorLake devices \| * `49fca83f6f` driver: soc: xilinx: use _safe loop iterator to avoid a use after free \| * `39bdb97f87` drm/panel: sharp-ls043t1le01: adjust mode settings \| * `aeca0e1c33` drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` \| * `ac96a15163` Input: adxl34x - do not hardcode interrupt trigger type \| * `3134cc51e9` clk: rs9: Fix .driver_data content in i2c_device_id \| * `6014e7422c` clk: vc7: Fix .driver_data content in i2c_device_id \| * `53b5b4d1a8` clk: vc5: Fix .driver_data content in i2c_device_id \| * `4db655d1b2` bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page \| * `548b67c0aa` clk: vc5: Use `clamp()` to restrict PLL range \| * `50fb32197f` mm: call arch_swap_restore() from do_swap_page() \| * `5cf97c2df2` ARM: dts: meson8b: correct uart_B and uart_C clock references \| * `2b55a98572` ARM: dts: BCM5301X: Drop "clock-names" from the SPI node \| * `2dc8b685d9` drm/vram-helper: fix function names in vram helper doc \| * `8e739c8c6e` drm/bridge: tc358768: fix THS_TRAILCNT computation \| * `010f68aecd` drm/bridge: tc358768: fix TXTAGOCNT computation \| * `7b19315737` drm/bridge: tc358768: fix THS_ZEROCNT computation \| * `2545a8d06a` drm/bridge: tc358768: fix TCLK_TRAILCNT computation \| * `587ba0805e` drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation \| * `06dc491cf4` drm/bridge: tc358768: fix TCLK_ZEROCNT computation \| * `9d56ec0b24` drm/bridge: tc358768: fix PLL target frequency \| * `d2aad3c1e4` drm/bridge: tc358768: fix PLL parameters computation \| * `c4cf126320` drm/bridge: tc358768: always enable HS video mode \| * `63f3bc83b1` drm/bridge: ti-sn65dsi83: Fix enable error path \| * `df3b7e337d` Input: drv260x - sleep between polling GO bit \| * `9d27705e3c` drm/bridge: it6505: Move a variable assignment behind a null pointer check in receive_timing_debugfs_show() \| * `9fbe61e3c2` drm/amd/display: Explicitly specify update type per plane info change \| * `cb86b0e3d9` radeon: avoid double free in ci_dpm_init() \| * `064e33b359` drm/amd/display: Add logging for display MALL refresh setting \| * `3b3186c770` netlink: Add __sock_i_ino() for __netlink_diag_dump(). \| * `f6d2e25c64` ipvlan: Fix return value of ipvlan_queue_xmit() \| * `d6cf5026af` netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. \| * `5c618daa50` netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one \| * `cfcb9f0a49` lib/ts_bm: reset initial match offset for every block of text \| * `425d9d3a92` net: nfc: Fix use-after-free caused by nfc_llcp_find_local \| * `446f556793` sfc: fix crash when reading stats while NIC is resetting \| * `94817712b5` ocfs2: Fix use of slab data with sendpage \| * `8c438ff5d9` net: axienet: Move reset before 64-bit DMA detection \| * `17d6b6354f` gtp: Fix use-after-free in __gtp_encap_destroy(). \| * `b48c24392d` selftests: rtnetlink: remove netdevsim device after ipsec offload test \| * `37b6143376` bonding: do not assume skb mac_header is set \| * `e9331c8fa4` netlink: do not hard code device address lenth in fdb dumps \| * `61ffe8b1ee` netlink: fix potential deadlock in netlink_set_err() \| * `509d5d40c2` net: stmmac: fix double serdes powerdown \| * `12bcb53328` can: kvaser_pciefd: Set hardware timestamp on transmitted packets \| * `70ace9ba20` can: kvaser_pciefd: Add function to set skb hwtstamps \| * `787b404209` can: length: fix bitstuffing count \| * `cfb3106234` bpf: Fix bpf socket lookup from tc/xdp to respect socket VRF bindings \| * `c7415c521a` bpf: Call __bpf_sk_lookup()/__bpf_skc_lookup() directly via TC hookpoint \| * `5e9b38de66` bpf: Factor out socket lookup functions for the TC hookpoint. \| * `e3754e9741` wifi: ath9k: convert msecs to jiffies where needed \| * `52bc4b89cd` wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection \| * `ed98f5c074` mmc: Add MMC_QUIRK_BROKEN_SD_CACHE for Kingston Canvas Go Plus from 11/2019 \| * `f114b159b2` wifi: ieee80211: Fix the common size calculation for reconfiguration ML \| * `ffb0733664` wifi: cfg80211/mac80211: Fix ML element common size calculation \| * `132b7129c5` wifi: cfg80211: fix regulatory disconnect with OCB/NAN \| * `27268ba347` wifi: cfg80211: drop incorrect nontransmitted BSS update code \| * `0862669693` wifi: cfg80211: rewrite merging of inherited elements \| * `d875120c35` wifi: mac80211: Remove "Missing iftype sband data/EHT cap" spam \| * `2d690495eb` wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() \| * `657a83f079` wifi: iwlwifi: pull from TXQs with softirqs disabled \| * `41b1704fad` wifi: ath11k: Add missing check for ioremap \| * `228dd5d5fd` rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO \| * `c682018f5c` wifi: mac80211: Fix permissions for valid_links debugfs entry \| * `41fc1c5678` wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() \| * `16b5292bee` memstick r592: make memstick_debug_get_tpc_name() static \| * `93126e3966` mmc: mediatek: Avoid ugly error message when SDIO wakeup IRQ isn't used \| * `fd4f89302f` kexec: fix a memory leak in crash_shrink_memory() \| * `6525435d14` watchdog/perf: more properly prevent false positives with turbo modes \| * `a3cf423b58` watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config \| * `b27af27fc9` selftests: cgroup: fix unexpected failure on test_memcg_low \| * `75704a10ea` ice: handle extts in the miscellaneous interrupt thread \| * `77f09d836b` wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown \| * `eb205a0690` wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled \| * `54257a7634` selftests/bpf: Fix check_mtu using wrong variable type \| * `da79a0bc36` wifi: mac80211: recalc min chandef for new STA links \| * `272240f20d` wifi: ath10k: Trigger STA disconnect after reconfig complete on hardware restart \| * `cf5beb8ce9` samples/bpf: xdp1 and xdp2 reduce XDPBUFSIZE to 60 \| * `09740fa982` wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes \| * `0d89e50952` wifi: ray_cs: Fix an error handling path in ray_probe() \| * `3d218755c4` wifi: wl3501_cs: Fix an error handling path in wl3501_probe() \| * `d5569b970b` wifi: atmel: Fix an error handling path in atmel_probe() \| * `e48b7c2416` wifi: orinoco: Fix an error handling path in orinoco_cs_probe() \| * `9a201822ad` wifi: orinoco: Fix an error handling path in spectrum_cs_probe() \| * `4fc6481323` regulator: core: Streamline debugfs operations \| * `6a241e6b9e` regulator: core: Fix more error checking for debugfs_create_dir() \| * `be84e69082` selftests/bpf: Do not use sign-file as testcase \| * `20109ddd5b` bpf: Fix memleak due to fentry attach failure \| * `8ea165e1f8` bpf: Remove bpf trampoline selector \| * `1949721c74` bpftool: JIT limited misreported as negative value on aarch64 \| * `bac93b35f9` nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() \| * `34d04d7019` spi: dw: Round of n_bytes to power of 2 \| * `c6a9fc82fe` bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen \| * `34fe7aa8ef` libbpf: fix offsetof() and container_of() to work with CO-RE \| * `8404f8de1e` sctp: add bpf_bypass_getsockopt proto callback \| * `f21f2ae562` wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() \| * `51cb8329f2` wifi: wilc1000: fix for absent RSN capabilities WFA testcase \| * `ded1a7a570` spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG \| * `56c25f2763` samples/bpf: Fix buffer overflow in tcp_basertt \| * `a7434a4dcc` libbpf: btf_dump_type_data_check_overflow needs to consider BTF_MEMBER_BITFIELD_SIZE \| * `d1c2ff2bd8` wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx \| * `6928d6e9b0` wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation \| * `bb3a9ed2b1` igc: Enable and fix RX hash usage by netstack \| * `f57ba91a46` pstore/ram: Add check for kstrdup \| * `2672144b86` ima: Fix build warnings \| * `9085f2ca94` evm: Fix build warnings \| * `b050ade6e0` evm: Complete description of evm_inode_setattr() \| * `ea1432a402` locking/atomic: arm: fix sync ops \| * `6b54f5c684` x86/mm: Fix __swp_entry_to_pte() for Xen PV guests \| * `3745f628c3` perf/ibs: Fix interface via core pmu events \| * `64d09c0e83` kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined \| * `b8a6ba524d` rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale \| * `3506e64ec1` rcu/rcuscale: Move rcu_scale_() after kfree_scale_cleanup() \| `7a34922194` rcuscale: Move shutdown from wait_event() to wait_event_idle() \| * `a0a1f1c924` rcutorture: Correct name of use_softirq module parameter \| * `b1cdc56bc1` rcu-tasks: Stop rcu_tasks_invoke_cbs() from using never-onlined CPUs \| * `d58f0f0ce6` rcu: Make rcu_cpu_starting() rely on interrupts being disabled \| * `5d56a8d670` thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() \| * `2b7e2251c4` cpufreq: intel_pstate: Fix energy_performance_preference for passive \| * `50d64210ee` ARM: 9303/1: kprobes: avoid missing-declaration warnings \| * `3f9e54eb38` PM: domains: Move the verification of in-params from genpd_add_device() \| * `f1f5248ced` powercap: RAPL: Fix CONFIG_IOSF_MBI dependency \| * `be9c8c9c84` drivers/perf: hisi: Don't migrate perf to the CPU going to teardown \| * `6b025ec148` x86/tdx: Fix race between set_memory_encrypted() and load_unaligned_zeropad() \| * `c598fefef3` x86/mm: Allow guest.enc_status_change_prepare() to fail \| * `3e03681f07` perf/arm-cmn: Fix DTC reset \| * `6368a71dca` PM: domains: fix integer overflow issues in genpd_parse_state() \| * `919dd531eb` clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe \| * `2d3f42d22f` tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode(). \| * `77cc52f1b8` tick/rcu: Fix bogus ratelimit condition \| * `e7aff15ba2` posix-timers: Prevent RT livelock in itimer_delete() \| * `9a53410038` erofs: fix compact 4B support for 16k block size \| * `ec94df6bcf` erofs: simplify iloc() \| * `423453bb50` svcrdma: Prevent page release when nothing was received \| * `faf004e98d` irqchip/jcore-aic: Fix missing allocation of IRQ descriptors \| * `0cf83d3698` irqchip/stm32-exti: Fix warning on initialized field overwritten \| * `aa07e56c6a` block: fix blktrace debugfs entries leakage \| * `067c08f78d` md/raid1-10: submit write io directly if bitmap is not enabled \| * `f98b89fbf8` md/raid1-10: factor out a helper to submit normal write \| * `fa0f13a833` md/raid1-10: factor out a helper to add bio to plug \| * `a5a1ec06ef` md/raid10: fix io loss while replacement replace rdev \| * `222cc459d5` md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request \| * `05d10428e8` md/raid10: fix wrong setting of max_corr_read_errors \| * `b5cb16d31b` md/raid10: fix overflow of md/safe_mode_delay \| * `be1a3ec63a` md/raid10: check slab-out-of-bounds in md_bitmap_get_counter \| * `e1379e067b` nvme-core: fix dev_pm_qos memleak \| * `bf3c2caab9` nvme-core: add missing fault-injection cleanup \| * `a584cf03ff` nvme-auth: don't ignore key generation failures when initializing ctrl keys \| * `43d0724d75` nvme-core: fix memory leak in dhchap_ctrl_secret \| * `2e9b141307` nvme-core: fix memory leak in dhchap_secret_store \| * `0a220ef9dd` nvme-auth: no need to reset chap contexts on re-authentication \| * `3999c850e7` nvme-auth: remove symbol export from nvme_auth_reset \| * `9de0a1dfe3` nvme-auth: rename authentication work elements \| * `3f6c988897` nvme-auth: rename __nvme_auth_[reset\|free] to nvme_auth[reset\|free]_dhchap \| * `ce16368280` lockd: drop inappropriate svc_get() from locked_get() \| * `931bd6758b` blk-mq: fix potential io hang by wrong 'wake_batch' \| * `c2a0eb3b20` virt: sevguest: Add CONFIG_CRYPTO dependency \| * `7ca5e95f2a` x86/sev: Fix calculation of end address based on number of pages \| * `8ceeb3fc86` blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost \| * `c0df916535` x86/resctrl: Only show tasks' pid in current pid namespace \| * `d3b39ea248` erofs: kill hooked chains to avoid loops on deduplicated compressed images \| * `daed10290b` erofs: move zdata.h into zdata.c \| * `041ff2c21b` erofs: remove tagged pointer helpers \| * `3379f13ebc` erofs: avoid tagged pointers to mark sync decompression \| * `3564500b0d` erofs: clean up cached I/O strategies \| * `73b9d7ea08` block: Fix the type of the second bdev_op_is_zoned_write() argument \| * `0fd958feae` fs: pipe: reveal missing function protoypes \| * `9f12effd40` drm: use mgr->dev in drm_dbg_kms in drm_dp_add_payload_part2 * \| `79ad050bdd` Merge 6.1.38 into android14-6.1-lts \|\\| \| * `61fd484b2c` Linux 6.1.38 \| * `c50065a392` drm/amd/display: Ensure vmin and vmax adjust for DCE \| * `9d0b2afadf` drm/amdgpu: Validate VM ioctl flags. \| * `fe56f507a1` docs: Set minimal gtags / GNU GLOBAL version to 6.6.5 \| * `c437b26bc3` scripts/tags.sh: Resolve gtags empty index generation \| * `50e36c2897` perf symbols: Symbol lookup with kcore can fail if multiple segments match stext \| * `67e3b5230c` nubus: Partially revert proc_create_single_data() conversion \| * `296927dbae` execve: always mark stack as growing down during early stack setup \| * `d856e6f8a0` PCI/ACPI: Call _REG when transitioning D-states \| * `788c76c33d` PCI/ACPI: Validate acpi_pci_set_power_state() parameter \| * `a905b0b318` drm/amd/display: Do not update DRR while BW optimizations pending \| * `dd6d6f9d47` drm/amd/display: Remove optimization for VRR updates \| * `6b2849b3e0` xtensa: fix lock_mm_and_find_vma in case VMA not found * \| `8dc085b841` Merge 6.1.37 into android14-6.1-lts \|\\| \| * `0f4ac6b4c5` Linux 6.1.37 \| * `323846590c` xtensa: fix NOMMU build with lock_mm_and_find_vma() conversion \| * `c2d89256de` csky: fix up lock_mm_and_find_vma() conversion \| * `4a1db15878` parisc: fix expand_stack() conversion \| * `0a1da2dde4` sparc32: fix lock_mm_and_find_vma() conversion \| * `00f04a3385` Revert "thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe" \| * `a536383ef0` HID: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651. \| * `d89750b196` HID: wacom: Use ktime_t rather than int when dealing with timestamps \| * `879e79c3ae` HID: hidraw: fix data race on device refcount \| * `cae8542495` fbdev: fix potential OOB read in fast_imageblit() \| * `e6bbad7571` mm: always expand the stack with the mmap write lock held \| * `c4b31d1b69` execve: expand new process stack manually ahead of time \| * `6a6b5616c3` mm: make find_extend_vma() fail if write lock not held \| * `48c232819e` powerpc/mm: convert coprocessor fault to lock_mm_and_find_vma() \| * `21ee33d51b` mm/fault: convert remaining simple cases to lock_mm_and_find_vma() \| * `1f4197f050` arm/mm: Convert to using lock_mm_and_find_vma() \| * `ac764deea7` riscv/mm: Convert to using lock_mm_and_find_vma() \| * `7227d70acc` mips/mm: Convert to using lock_mm_and_find_vma() \| * `82972ea17b` powerpc/mm: Convert to using lock_mm_and_find_vma() \| * `b92cd80e5f` arm64/mm: Convert to using lock_mm_and_find_vma() \| * `755aa1bc6a` mm: make the page fault mmap locking killable \| * `d6a5c7a1a6` mm: introduce new 'lock_mm_and_find_vma()' page fault helper \| * `4e2ad53aba` maple_tree: fix potential out-of-bounds access in mas_wr_end_piv() \| * `31cde3bdad` can: isotp: isotp_sendmsg(): fix return error fix on TX path \| * `0af4750eaa` x86/smp: Cure kexec() vs. mwait_play_dead() breakage \| * `6d3b2e0aef` x86/smp: Use dedicated cache-line for mwait_play_dead() \| * `50a1abc677` x86/smp: Remove pointless wmb()s from native_stop_other_cpus() \| * `e47037d28b` x86/smp: Dont access non-existing CPUID leaf \| * `edadebb349` x86/smp: Make stop_other_cpus() more robust \| * `94a69d6999` x86/microcode/AMD: Load late on both threads too \| * `84f077802e` mm, hwpoison: when copy-on-write hits poison, take page offline \| * `4af5960d7c` mm, hwpoison: try to recover from copy-on write faults \| * `69925a346a` mptcp: ensure listener is unhashed before updating the sk status \| * `42a018a796` mm/mmap: Fix error return in do_vmi_align_munmap() \| * `a149174ff8` mm/mmap: Fix error path in do_vmi_align_munmap() * \| `8b02e8901d` Merge branch 'android14-6.1' into 'android14-6.1-lts' * \| `16e5091129` ANDROID: ABI: Update STG ABI to format version 2 * \| `1ef7816a50` Merge branch 'android14-6.1' into 'android14-6.1-lts' * \| `524f946fbc` Merge branch 'android14-6.1' into 'android14-6.1-lts' * \| `bfa917516c` Revert "gpiolib: Fix irq_domain resource tracking for gpiochip_irqchip_add_domain()" * \| `a09603eb2f` Merge 6.1.36 into android14-6.1-lts \|\\| \| * `a1c449d00f` Linux 6.1.36 \| * `29429a1f58` smb: move client and server files to common directory fs/smb \| * `9d3e4bca4b` i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle \| * `81d4078f7a` x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys \| * `679354bea0` KVM: arm64: Restore GICv2-on-GICv3 functionality \| * `6ab9468d3e` vhost_net: revert upend_idx only on retriable error \| * `454e4f391a` vhost_vdpa: tell vqs about the negotiated \| * `1af1cd7be3` drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl \| * `022f2306d9` drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl \| * `aa88042218` drm/exynos: vidi: fix a wrong error return \| * `711f727f7b` null_blk: Fix: memory release when memory_backed=1 \| * `f6076a1386` ARM: dts: Fix erroneous ADS touchscreen polarities \| * `1d1baefacd` i2c: mchp-pci1xxxx: Avoid cast to incompatible function type \| * `8e32575994` ALSA: hda/realtek: Add "Intel Reference board" and "NUC 13" SSID in the ALC256 \| * `cfa01235b5` ASoC: fsl_sai: Enable BCI bit if SAI works on synchronous mode with BYP asserted \| * `570583c625` s390/purgatory: disable branch profiling \| * `c2888c460d` gfs2: Don't get stuck writing page onto itself under direct I/O \| * `878dad66b9` ASoC: amd: yc: Add Thinkpad Neo14 to quirks list for acp6x \| * `1c97025d44` ASoC: nau8824: Add quirk to active-high jack-detect \| * `5cc506e9b3` soundwire: qcom: add proper error paths in qcom_swrm_startup() \| * `2839e0b64e` soundwire: dmi-quirks: add new mapping for HP Spectre x360 \| * `ee4d36a14d` ASoC: simple-card: Add missing of_node_put() in case of error \| * `e701fb0a5d` ASoC: codecs: wcd938x-sdw: do not set can_multi_write flag \| * `06b9522ca8` spi: lpspi: disable lpspi module irq in DMA mode \| * `39a77f005f` s390/cio: unregister device when the only path is gone \| * `552a24eb71` arm64: dts: qcom: sc7280-qcard: drop incorrect dai-cells from WCD938x SDW \| * `4de58b7c14` arm64: dts: qcom: sc7280-idp: drop incorrect dai-cells from WCD938x SDW \| * `2e8ebf1a44` Input: soc_button_array - add invalid acpi_index DMI quirk handling \| * `ba0cc7a2e5` nvme: improve handling of long keep alives \| * `06d9ec407f` nvme: check IO start time when deciding to defer KA \| * `8a72260619` nvme: double KA polling frequency to avoid KATO with TBKAS on \| * `c8f988c37a` usb: gadget: udc: fix NULL dereference in remove() \| * `3f6391062d` btrfs: fix an uninitialized variable warning in btrfs_log_inode \| * `a2c3e9bfc0` nfcsim.c: Fix error checking for debugfs_create_dir \| * `a05df06431` media: cec: core: don't set last_initiator if tx in progress \| * `f37956a140` media: cec: core: disable adapter in cec_devnode_unregister \| * `9d8ac2726c` smb3: missing null check in SMB2_change_notify \| * `3e8458c5b2` arm64: Add missing Set/Way CMO encodings \| * `8428f4c00d` HID: wacom: Add error check to wacom_parse_and_register() \| * `aaa50510ad` scsi: target: iscsi: Prevent login threads from racing between each other \| * `0357259cb1` gpiolib: Fix irq_domain resource tracking for gpiochip_irqchip_add_domain() \| * `8592ada80e` gpio: sifive: add missing check for platform_get_irq \| * `cb1108e174` gpiolib: Fix GPIO chip IRQ initialization restriction \| * `90714f7ed7` arm64: dts: rockchip: fix nEXTRST on SOQuartz \| * `e51abd4808` arm64: dts: rockchip: Enable GPU on SOQuartz CM4 \| * `ec3d0f12e7` revert "net: align SO_RCVMARK required privileges with SO_MARK" \| * `b2e2f9c093` sch_netem: acquire qdisc lock in netem_change() \| * `0434277b72` platform/x86/amd/pmf: Register notify handler only if SPS is enabled \| * `2d580c73af` selftests: forwarding: Fix race condition in mirror installation \| * `eff07bf118` io_uring/net: use the correct msghdr union member in io_sendmsg_copy_hdr \| * `1b7b048c22` bpf: Force kprobe multi expected_attach_type for kprobe_multi link \| * `fc3afb3378` bpf/btf: Accept function names that contain dots \| * `22cc989f2b` Revert "net: phy: dp83867: perform soft reset and retain established link" \| * `3e04743dba` netfilter: nfnetlink_osf: fix module autoload \| * `abd3afddbf` netfilter: nf_tables: disallow updates of anonymous sets \| * `c34b220385` netfilter: nf_tables: reject unbound chain set before commit phase \| * `46f801ab5f` netfilter: nf_tables: reject unbound anonymous set before commit phase \| * `b60c0ce0ff` netfilter: nf_tables: disallow element updates of bound anonymous sets \| * `0d836f9175` netfilter: nft_set_pipapo: .walk does not deal with generations \| * `d60be2da67` netfilter: nf_tables: drop map element references from preparation phase \| * `df27be7c15` netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain \| * `891cd2eddd` netfilter: nf_tables: fix chain binding transaction logic \| * `f5b6dbec26` be2net: Extend xmit workaround to BE3 chip \| * `50f689918d` net: dsa: mt7530: fix handling of LLDP frames \| * `a50f84af21` net: dsa: mt7530: fix handling of BPDUs on MT7530 switch \| * `a4e4c71901` net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch \| * `7fd2e9a69e` ipvs: align inner_mac_header for encapsulation \| * `6d1eec1f2d` mmc: usdhi60rol0: fix deferred probing \| * `7e10fff133` mmc: sh_mmcif: fix deferred probing \| * `565b8bd290` mmc: sdhci-acpi: fix deferred probing \| * `645f89ee3e` mmc: owl: fix deferred probing \| * `251101c32a` mmc: omap_hsmmc: fix deferred probing \| * `0057a905de` mmc: omap: fix deferred probing \| * `f73b380518` mmc: mvsdio: fix deferred probing \| * `4806f6b6b7` mmc: mtk-sd: fix deferred probing \| * `d28b7a8733` net: qca_spi: Avoid high load if QCA7000 is not available \| * `1d4dd09f13` sfc: use budget for TX completions \| * `0bbb8164ed` net/mlx5: DR, Fix wrong action data allocation in decap action \| * `b062caf4f7` xfrm: Linearize the skb after offloading if needed. \| * `fff9a18e01` selftests: net: fcnal-test: check if FIPS mode is enabled \| * `0793ead2ff` selftests: net: vrf-xfrm-tests: change authentication and encryption algos \| * `6919634176` selftests: net: tls: check if FIPS mode is enabled \| * `ac5671d100` bpf: Fix a bpf_jit_dump issue for x86_64 with sysctl bpf_jit_enable. \| * `8bb51cdc4f` xfrm: fix inbound ipv4/udp/esp packets to UDPv6 dualstack sockets \| * `d9a0b1a53c` bpf: Fix verifier id tracking of scalars on spill \| * `461fc3391c` bpf: track immediate values written to stack by BPF_ST instruction \| * `b36ba84f09` KVM: arm64: PMU: Restore the host's PMUSERENR_EL0 \| * `c803e91600` xfrm: Ensure policies always checked on XFRM-I input path \| * `94e81817f0` xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c \| * `8ea03341f7` xfrm: Treat already-verified secpath entries as optional \| * `43489b2cba` ieee802154: hwsim: Fix possible memory leaks \| * `caddcdf2a9` mmc: meson-gx: fix deferred probing \| * `1a2793a25a` memfd: check for non-NULL file_seals in memfd_create() syscall \| * `364fdcbb03` x86/mm: Avoid using set_pgd() outside of real PGD pages \| * `cbfee3d9d5` nilfs2: prevent general protection fault in nilfs_clear_dirty_page() \| * `24f473769e` io_uring/poll: serialize poll linked timer start with poll removal \| * `2d80c85fa4` arm64: dts: rockchip: Fix rk356x PCIe register and range mappings \| * `277a7c23b5` regmap: spi-avmm: Fix regmap_bus max_raw_write \| * `b385b1d28e` regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK \| * `ad5daeaa3d` spi: spi-geni-qcom: correctly handle -EPROBE_DEFER from dma_request_chan() \| * `21945b7a86` wifi: iwlwifi: pcie: Handle SO-F device for PCI id 0x7AF0 \| * `1dfca388fc` bpf: ensure main program has an extable \| * `03b2149d5a` mmc: sunxi: fix deferred probing \| * `8b8756324c` mmc: bcm2835: fix deferred probing \| * `1db5a39a90` mmc: sdhci-spear: fix deferred probing \| * `f1b17198e4` mmc: mmci: stm32: fix max busy timeout calculation \| * `6c2af0fd83` mmc: meson-gx: remove redundant mmc_request_done() call from irq context \| * `687d34c578` mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916 \| * `3dd0041c41` mmc: litex_mmc: set PROBE_PREFER_ASYNCHRONOUS \| * `0d7a4e6589` cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex in freezer_css_{online,offline}() \| * `7b162a18d3` cgroup: Do not corrupt task iteration when rebinding subsystem \| * `c2c46a7028` mptcp: consolidate fallback and non fallback state machine \| * `1d31275426` mptcp: fix possible list corruption on passive MPJ \| * `b747e75598` mptcp: fix possible divide by zero in recvmsg() \| * `b7bb71dfb5` mptcp: handle correctly disconnect() failures \| * `1d9dc9bed9` io_uring/net: disable partial retries for recvmsg with cmsg \| * `4d729cc67b` io_uring/net: clear msg_controllen on partial sendmsg retry \| * `4db49d59a8` PCI: hv: Add a per-bus mutex state_lock \| * `091d03d198` PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic \| * `5c09925b18` PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev \| * `da2fff20d9` Revert "PCI: hv: Fix a timing issue which causes kdump to fail occasionally" \| * `a74a9d9b75` PCI: hv: Fix a race condition bug in hv_pci_query_relations() \| * `ba803d7ac1` Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs \| * `191cb91329` Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails \| * `4f7e702b74` KVM: Avoid illegal stage2 mapping on invalid memory slot \| * `390aeb5ae7` ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep() \| * `8e63b1fd24` nilfs2: fix buffer corruption due to concurrent device reads \| * `d5d7cde2ad` scripts: fix the gfp flags header path in gfp-translate \| * `4a89bfb1a1` writeback: fix dereferencing NULL mapping->host on writeback_page_template \| * `1fed1f8513` selftests: mptcp: join: fix "userspace pm add & remove address" \| * `53e096bcae` selftests: mptcp: join: skip fail tests if not supported \| * `f17459121c` selftests: mptcp: join: skip userspace PM tests if not supported \| * `f40a7ded34` selftests: mptcp: join: skip test if iptables/tc cmds fail \| * `bce23d1254` selftests: mptcp: sockopt: skip TCP_INQ checks if not supported \| * `157dcb2000` selftests: mptcp: diag: skip listen tests if not supported \| * `755c8857ab` selftests/mount_setattr: fix redefine struct mount_attr build error \| * `94851666af` selftests: mptcp: join: skip MPC backups tests if not supported \| * `fe1f28db73` selftests: mptcp: join: skip fullmesh flag tests if not supported \| * `6313c493e3` selftests: mptcp: join: skip backup if set flag on ID not supported \| * `efb4f6c2dd` selftests: mptcp: join: skip implicit tests if not supported \| * `dd6c284a34` selftests: mptcp: join: support RM_ADDR for used endpoints or not \| * `695cce2f2c` selftests: mptcp: join: skip Fastclose tests if not supported \| * `0381f30735` selftests: mptcp: join: support local endpoint being tracked or not \| * `1c0d9b4b47` selftests: mptcp: join: skip check if MIB counter not supported \| * `e35edb09e5` selftests: mptcp: join: helpers to skip tests \| * `4d65ec947d` selftests: mptcp: join: use 'iptables-legacy' if available \| * `44d3366bf4` selftests: mptcp: lib: skip if not below kernel version \| * `c5bdd8eb8e` selftests: mptcp: userspace pm: skip if not supported \| * `733bf9d80d` selftests: mptcp: userspace pm: skip if 'ip' tool is unavailable \| * `bfe225dec6` selftests: mptcp: sockopt: skip getsockopt checks if not supported \| * `103b4e62de` selftests: mptcp: sockopt: relax expected returned size \| * `61c1bf0666` selftests: mptcp: pm nl: skip fullmesh flag checks if not supported \| * `41f7f7f6e4` selftests: mptcp: pm nl: remove hardcoded default limits \| * `e79e5e7642` selftests: mptcp: connect: skip disconnect tests if not supported \| * `cba0db9c15` selftests: mptcp: connect: skip transp tests if not supported \| * `9ead68270b` selftests: mptcp: lib: skip if missing symbol \| * `4bed22c687` selftests: mptcp: join: fix ShellCheck warnings \| * `a032ccca15` selftests: mptcp: remove duplicated entries in usage \| * `0c6552f837` tick/common: Align tick period during sched_timer setup \| * `854156d12c` ksmbd: validate session id and tree id in the compound request \| * `c86211159b` ksmbd: fix out-of-bound read in smb2_write \| * `9650cf70ec` ksmbd: validate command payload size \| * `0fd4ac3773` tpm_crb: Add support for CRB devices based on Pluton \| * `a46fa56966` tpm, tpm_tis: Claim locality in interrupt handler \| * `2e7ad879e1` mm: Fix copy_from_user_nofault(). \| * `4ed740c648` ata: libata-scsi: Avoid deadlock on rescan after device resume \| * `c4465bff4d` tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A \| * `17732fed85` tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms \| * `9bcac45389` drm/amd/display: fix the system hang while disable PSR \| * `e538342002` drm/amd/display: Add wrapper to call planes and stream update \| * `8d855bc676` drm/amd/display: Use dc_update_planes_and_stream * \| `1118d7f559` ANDROID: GKI: irq-gic-v3: fix up breakage in 6.1.35 merge * \| `1e4b07ffa3` Merge 6.1.35 into android14-6.1-lts \|\\| \| * `e84a4e368a` Linux 6.1.35 \| * `a76d4933c3` kbuild: Update assembler calls to use proper flags and language target \| * `5abcd2c18d` MIPS: Prefer cc-option for additions to cflags \| * `1d485ddcba` MIPS: Move '-Wa,-msoft-float' check from as-option to cc-option \| * `d51d258997` x86/boot/compressed: prefer cc-option for CFLAGS additions \| * `bdd22f2aa1` scsi: target: core: Fix error path in target_setup_session() \| * `741c96715f` neighbour: delete neigh_lookup_nodev as not used \| * `26435338f9` net/sched: act_api: add specific EXT_WARN_MSG for tc action \| * `ab1bbd79f4` Revert "net/sched: act_api: move TCA_EXT_WARN_MSG to the correct hierarchy" \| * `8f37599811` net/sched: act_api: move TCA_EXT_WARN_MSG to the correct hierarchy \| * `4b4cae8e4b` drm/amdgpu: Don't set struct drm_driver.output_poll_changed \| * `c6cbb4e1c1` rcu/kvfree: Avoid freeing new kfree_rcu() memory after old grace period \| * `8d842af30b` parisc: Delete redundant register definitions in <asm/assembly.h> \| * `616aba5536` afs: Fix vlserver probe RTT handling \| * `34dc1eed99` octeon_ep: Add missing check for ioremap \| * `35d848164f` selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET \| * `6ab77b3b85` net: tipc: resize nlattr array to correct size \| * `d24c965817` dm: don't lock fs when the map is NULL during suspend or resume \| * `010179208c` sfc: fix XDP queues mode with legacy IRQ \| * `23efdbfa8e` net: macsec: fix double free of percpu stats \| * `4ea1f33444` net: lapbether: only support ethernet devices \| * `59f0c7bec3` net: dsa: felix: fix taprio guard band overflow at 10Mbps with jumbo frames \| * `3626e93cd8` net/sched: cls_api: Fix lockup on flushing explicitly created chain \| * `fa285d799d` ext4: drop the call to ext4_error() from ext4_get_group_info() \| * `d7d6e830cd` cifs: fix lease break oops in xfstest generic/098 \| * `e8119d4d16` selftests: forwarding: hw_stats_l3: Set addrgenmode in a separate step \| * `ea3f336f71` net/sched: qdisc_destroy() old ingress and clsact Qdiscs before grafting \| * `ac57be24dc` net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs \| * `096c00ea80` sched: add new attr TCA_EXT_WARN_MSG to report tc extact message \| * `e568e0e168` selftests/tc-testing: Fix SFB db test \| * `700d7bf300` selftests/tc-testing: Fix Error: failed to find target LOG \| * `8a086daf20` selftests/tc-testing: Fix Error: Specified qdisc kind is unknown. \| * `62aecf23f3` drm/nouveau: add nv_encoder pointer check for NULL \| * `fb725beca6` drm/nouveau/dp: check for NULL nv_connector->native_mode \| * `a5acbe4ea5` drm/bridge: ti-sn65dsi86: Avoid possible buffer overflow \| * `90748be0f4` drm/nouveau: don't detect DSM for non-NVIDIA device \| * `835457c0d6` net: phylink: use a dedicated helper to parse usgmii control word \| * `fabf9cb413` net: phylink: report correct max speed for QUSGMII \| * `df7477a8bd` igb: fix nvm.ops.read() error handling \| * `9710e5c30b` igc: Fix possible system crash when loading module \| * `c6612bf33e` igc: Clean the TX buffer and TX descriptor ring \| * `fe289f8fee` sctp: fix an error code in sctp_sf_eat_auth() \| * `0b8ae7d6e4` ipvlan: fix bound dev checking for IPv6 l3s mode \| * `33bd6b76ac` net: ethtool: correct MAX attribute value for stats \| * `277fbf63b3` IB/isert: Fix incorrect release of isert connection \| * `f77965f487` IB/isert: Fix possible list corruption in CMA handler \| * `4e55c9abe9` IB/isert: Fix dead lock in ib_isert \| * `1def2a94f4` RDMA/mlx5: Fix affinity assignment \| * `8618f8f723` IB/uverbs: Fix to consider event queue closing also upon non-blocking mode \| * `4dc0b367c3` RDMA/cma: Always set static rate to 0 for RoCE \| * `ec6d49687d` RDMA/mlx5: Create an indirect flow table for steering anchor \| * `3a83145b66` RDMA/mlx5: Initiate dropless RQ for RAW Ethernet functions \| * `c764fed5e5` octeontx2-af: fix lbk link credits on cn10k \| * `7c6d504146` octeontx2-af: fixed resource availability check \| * `b4a3cae58c` iavf: remove mask from iavf_irq_enable_queues() \| * `26256aa7ed` RDMA/rxe: Fix the use-before-initialization error of resp_pkts \| * `b0b3848e03` RDMA/rxe: Removed unused name from rxe_task struct \| * `e83bc93886` wifi: mac80211: take lock before setting vif links \| * `170ceadf4a` wifi: cfg80211: fix link del callback to call correct handler \| * `49f3a79f03` wifi: mac80211: fix link activation settings order \| * `07f9cc229b` net/sched: cls_u32: Fix reference counter leak leading to overflow \| * `c9411f014e` octeontx2-af: Fix promiscuous mode \| * `5cf38fbc82` net/sched: act_pedit: Parse L3 Header for L4 offset \| * `fb25478f66` net/sched: act_pedit: remove extra check for key type \| * `b4e5d0c4cf` net/sched: simplify tcf_pedit_act \| * `300be9f1dc` igb: Fix extts capture value format for 82580/i354/i350 \| * `a4a912aee1` ping6: Fix send to link-local addresses with VRF. \| * `381d49ec68` net: enetc: correct the indexes of highest and 2nd highest TCs \| * `4aaa3b730d` netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE \| * `bec51844f9` ice: Fix XDP memory leak when NIC is brought up and down \| * `8fddf3f051` netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM \| * `55b7a00f34` netfilter: nf_tables: integrate pipapo into commit protocol \| * `839d38d3b0` spi: fsl-dspi: avoid SCK glitches with continuous transfers \| * `4857924806` spi: cadence-quadspi: Add missing check for dma_set_mask \| * `2906e0d75b` RDMA/rxe: Fix ref count error in check_rkey() \| * `7617a59f00` RDMA/rxe: Fix packet length checks \| * `00b276bc7b` RDMA/rtrs: Fix rxe_dealloc_pd warning \| * `77226c9785` RDMA/rtrs: Fix the last iu->buf leak in err path \| * `03285557de` usb: dwc3: gadget: Reset num TRBs before giving back the request \| * `7bee7f13c0` USB: dwc3: fix use-after-free on core driver unbind \| * `307fe59490` USB: dwc3: qcom: fix NULL-deref on suspend \| * `d8195536ce` usb: gadget: udc: core: Prevent soft_connect_store() race \| * `3c048d42c3` usb: gadget: udc: core: Offload usb_udc_vbus_handler processing \| * `3a1882841f` usb: typec: Fix fast_role_swap_current show function \| * `2bf8ea2e9e` usb: typec: ucsi: Fix command cancellation \| * `b352f7b6a6` serial: lantiq: add missing interrupt ack \| * `04b3145db2` USB: serial: option: add Quectel EM061KGL series \| * `03b5964a28` clk: pxa: fix NULL pointer dereference in pxa3xx_clk_update_accr \| * `5532962c9e` thunderbolt: Mask ring interrupt on Intel hardware as well \| * `d799f73d5d` thunderbolt: dma_test: Use correct value for absent rings when creating paths \| * `081b5f1ebc` thunderbolt: Do not touch CL state configuration during discovery \| * `1eb0eff7da` ALSA: hda/realtek: Add a quirk for Compaq N14JP6 \| * `21863dc45a` drm/amdgpu: add missing radeon secondary PCI ID \| * `6f5b5ce939` drm/amd/pm: workaround for compute workload type on some skus \| * `b69a10df90` drm/amd: Tighten permissions on VBIOS flashing attributes \| * `b2706d862b` drm/amd: Make sure image is written to trigger VBIOS image update flow \| * `ee8c6580c3` drm/amd/display: edp do not add non-edid timings \| * `2cb6026df1` net: usb: qmi_wwan: add support for Compal RXM-G1 \| * `5d1fdfb3d1` drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1 \| * `f6d74371ce` RDMA/uverbs: Restrict usage of privileged QKEYs \| * `5a144bad3e` nouveau: fix client work fence deletion race \| * `33965ac340` net: ethernet: stmicro: stmmac: fix possible memory leak in __stmmac_open \| * `bfaf388d35` dm thin: fix issue_discard to pass GFP_NOIO to __blkdev_issue_discard \| * `088ad777ee` dm thin metadata: check fail_io before using data_sm \| * `1886db9a4e` ALSA: usb-audio: Add quirk flag for HEM devices to enable native DSD playback \| * `029e0f1f75` ALSA: usb-audio: Fix broken resume due to UAC3 power state \| * `9e1c7968a2` btrfs: can_nocow_file_extent should pass down args->strict from callers \| * `4e9da0cda1` btrfs: fix iomap_begin length for nocow writes \| * `4389fb6b6a` btrfs: do not ASSERT() on duplicated global roots \| * `7e23b1ec72` powerpc/purgatory: remove PGO flags \| * `352f62431a` riscv/purgatory: remove PGO flags \| * `2cf6e32e86` x86/purgatory: remove PGO flags \| * `013027918a` kexec: support purgatories with .text.hot sections \| * `c9c3163c7a` io_uring/net: save msghdr->msg_control for retries \| * `cffaa97ffb` LoongArch: Fix perf event id calculation \| * `ad64865722` nilfs2: reject devices with insufficient block count \| * `69caea4eed` nilfs2: fix possible out-of-bounds segment allocation in resize ioctl \| * `8f47a9665a` nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() \| * `3d4bc38f71` nios2: dts: Fix tse_mac "max-frame-size" property \| * `447f325497` zswap: do not shrink if cgroup may not zswap \| * `9f17645f85` ocfs2: check new file size on fallocate call \| * `534b4bbc85` ocfs2: fix use-after-free when unmounting read-only filesystem \| * `3a340c63c0` epoll: ep_autoremove_wake_function should use list_del_init_careful \| * `6d304091e0` wifi: cfg80211: fix double lock bug in reg_wdev_chan_valid() \| * `b11f953a61` wifi: cfg80211: fix locking in regulatory disconnect \| * `9a9adc42a5` irqchip/gic: Correctly validate OF quirk descriptors \| * `22efb27a21` NVMe: Add MAXIO 1602 to bogus nid list. \| * `c9c2059450` io_uring: unlock sqd->lock before sq thread release CPU \| * `8ca9880735` drm:amd:amdgpu: Fix missing buffer object unlock in failure path \| * `41c383c496` xen/blkfront: Only check REQ_FUA for writes \| * `75955d6986` ASoC: dwc: move DMA init to snd_soc_dai_driver probe() \| * `7e57a56374` ASoC: cs35l41: Fix default regmap values for some registers \| * `424fc90272` mips: Move initrd_start check after initrd address sanitisation. \| * `dd035c08ee` MIPS: Alchemy: fix dbdma2 \| * `34dd1a90ab` MIPS: Restore Au1300 support \| * `048ad52d52` MIPS: unhide PATA_PLATFORM \| * `3d48ea53c4` parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory() \| * `e522a12e48` parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu() \| * `0b09b35cae` ASoC: Intel: avs: Add missing checks on FE startup \| * `5daa27bcb3` ASoC: Intel: avs: Account for UID of ACPI device \| * `c33fded7f1` ASoC: soc-pcm: test if a BE can be prepared \| * `0a9b2164b7` btrfs: handle memory allocation failure in btrfs_csum_one_bio \| * `e9a5175d5e` btrfs: scrub: try harder to mark RAID56 block groups read-only \| * `c45aed7431` drm: panel-orientation-quirks: Change Air's quirk to support Air Plus \| * `2d9144c0ca` power: supply: Fix logic checking if system is running from battery \| * `808e103eba` irqchip/meson-gpio: Mark OF related data as maybe unused \| * `0cdb593c2f` irqchip/gic-v3: Disable pseudo NMIs on Mediatek devices w/ firmware issues \| * `bf8324676b` regulator: Fix error checking for debugfs_create_dir \| * `c94be1f039` platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 \| * `cdf9cfc1bb` PCI/DPC: Quirk PIO log size for Intel Ice Lake Root Ports \| * `22358b9c41` power: supply: Ratelimit no data debug output \| * `a7620312a0` selftests: gpio: gpio-sim: Fix BUG: test FAILED due to recent change \| * `79a0a3695e` tools: gpio: fix debounce_period_us output of lsgpio \| * `cc1444a363` ARM: dts: vexpress: add missing cache properties \| * `398bf0d67b` power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() \| * `66a88d04cf` power: supply: sc27xx: Fix external_power_changed race \| * `e3d2bdca18` power: supply: ab8500: Fix external_power_changed race \| * `628e40a225` of: overlay: Fix missing of_node_put() in error case of init_overlay_changeset() \| * `e01fc7caac` ksmbd: validate smb request protocol id \| * `fec79e4f7d` EDAC/qcom: Get rid of hardcoded register offsets \| * `4b3ec6b6ff` qcom: llcc/edac: Fix the base address used for accessing LLCC banks \| * `314e973f36` cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks() \| * `c68b4db581` cgroup: always put cset in cgroup_css_set_put_fork \| * `7a2e2ca9ad` cgroup: bpf: use cgroup_lock()/cgroup_unlock() wrappers \| * `6111f0add6` test_firmware: prevent race conditions by a correct implementation of locking \| * `aa2dfdc4ed` test_firmware: Use kstrtobool() instead of strtobool() \| * `100cd6d0e5` x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed * \| `ed6634a559` Merge 'android14-6.1' into 'android14-6.1-lts' * \| `3a63e65526` Revert "Bluetooth: fix debugfs registration" * \| `fb909d9bea` Revert "Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER" * \| `18dcace71e` Revert "net/ipv6: fix bool/int mismatch for skip_notify_on_dev_down" * \| `16cecdd743` Revert "neighbour: fix unaligned access to pneigh_entry" * \| `ee4c9c95ff` Merge 6.1.34 into android14-6.1-lts \|\\| \| * `ca87e77a2e` Linux 6.1.34 \| * `1aaa74177f` Revert "staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE" \| * `a7e9c2e407` wifi: rtw88: correct PS calculation for SUPPORTS_DYNAMIC_PS \| * `8fafd87155` wifi: rtw89: correct PS calculation for SUPPORTS_DYNAMIC_PS \| * `5b2438f0a7` ext4: only check dquot_initialize_needed() when debugging \| * `77eed67ba2` Revert "ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled" \| * `543c12c264` ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop \| * `8f2984233c` ksmbd: fix out-of-bound read in parse_lease_state() \| * `bf12d7fb63` ksmbd: fix out-of-bound read in deassemble_neg_contexts() \| * `fb322da83c` vhost_vdpa: support PACKED when setting-getting vring_base \| * `b839b65456` vhost: support PACKED when setting-getting vring_base \| * `6c5a69c5dd` vduse: avoid empty string for dev name \| * `7e48d635f2` riscv: fix kprobe __user string arg print fault issue \| * `14e4f37e46` soundwire: stream: Add missing clear of alloc_slave_rt \| * `e17734900a` eeprom: at24: also select REGMAP \| * `67180e079b` riscv: mm: Ensure prot of VM_WRITE and VM_EXEC must be readable \| * `e4b76cd771` i2c: sprd: Delete i2c adapter in .remove's error path \| * `c53f2e8462` gpio: sim: fix memory corruption when adding named lines and unnamed hogs \| * `4106894328` firmware: arm_ffa: Set handle field to zero in memory descriptor \| * `f24cb5a042` i2c: mv64xxx: Fix reading invalid status value in atomic mode \| * `8e64012c03` arm64: dts: imx8mn-beacon: Fix SPI CS pinmux \| * `b64bbe8b1a` blk-mq: fix blk_mq_hw_ctx active request accounting \| * `c3d87d415f` ASoC: simple-card-utils: fix PCM constraint error check \| * `c0f9f799ba` ASoC: mediatek: mt8195: fix use-after-free in driver remove path \| * `50f2160afb` ASoC: mediatek: mt8195-afe-pcm: Convert to platform remove callback returning void \| * `370711d7f0` arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts \| * `efe115560a` arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP signals \| * `5a607e53f2` arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified sc7180-lite boards \| * `037449ce1c` ASoC: codecs: wsa881x: do not set can_multi_write flag \| * `8b13854f26` ASoC: codecs: wsa883x: do not set can_multi_write flag \| * `58ab8a0ff8` ARM: dts: at91: sama7g5ek: fix debounce delay property for shdwc \| * `4b8ebe5393` ARM: at91: pm: fix imbalanced reference counter for ethernet devices \| * `c97f30d215` arm64: dts: qcom: sc8280xp: Flush RSC sleep & wake votes \| * `df9bc25d13` mm: page_table_check: Ensure user pages are not slab pages \| * `08378f0314` mm: page_table_check: Make it dependent on EXCLUSIVE_SYSTEM_RAM \| * `3901170529` usb: usbfs: Use consistent mmap functions \| * `80e29f11be` usb: usbfs: Enforce page requirements for mmap \| * `42a7314f2b` pinctrl: meson-axg: add missing GPIOA_18 gpio group \| * `fdeb712929` soc: qcom: icc-bwmon: fix incorrect error code passed to dev_err_probe() \| * `30c26b985c` virtio_net: use control_buf for coalesce params \| * `222a6bc8a7` rbd: get snapshot context after exclusive lock is ensured to be held \| * `d647ee673c` rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting \| * `939f00e482` tee: amdtee: Add return_origin to 'struct tee_cmd_load_ta' \| * `d088bea08a` Bluetooth: hci_qca: fix debugfs registration \| * `e5ae01fd46` Bluetooth: fix debugfs registration \| * `a5490d6a74` Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk \| * `1e1e2ee0cf` s390/dasd: Use correct lock while counting channel queue length \| * `6f5c0eec89` ceph: fix use-after-free bug for inodes when flushing capsnaps \| * `443cf752f7` selftests: mptcp: update userspace pm subflow tests \| * `8f0ba8ec18` selftests: mptcp: update userspace pm addr tests \| * `3fa051b18f` mptcp: update userspace pm infos \| * `9b7fa33fda` mptcp: add address into userspace pm list \| * `d80a36ad40` mptcp: only send RM_ADDR in nl_cmd_remove \| * `e0b04a9f97` can: j1939: avoid possible use-after-free when j1939_can_rx_register fails \| * `8a46c4a2bc` can: j1939: change j1939_netdev_lock type to mutex \| * `db15e90a8c` can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket \| * `727964650a` wifi: iwlwifi: mvm: Fix -Warray-bounds bug in iwl_mvm_wait_d3_notif() \| * `8953be60ec` drm/amd/display: Reduce sdp bw after urgent to 90% \| * `8695a443ad` drm/amd/pm: Fix power context allocation in SMU13 \| * `8e143bae25` drm/amdgpu: change reserved vram info print \| * `34419aa0b4` drm/amdgpu: fix xclk freq on CHIP_STONEY \| * `416ba40ff3` drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid SKUs \| * `8d42c563e4` drm/i915/gt: Use the correct error value when kernel_context() fails \| * `b40b349132` ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using CS35L41 \| * `b1acff11b6` ALSA: hda/realtek: Add Lenovo P3 Tower platform \| * `6321135063` ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01 \| * `0df0097ea2` ALSA: ice1712,ice1724: fix the kcontrol->id initialization \| * `caad8a0a10` ALSA: hda/realtek: Add quirk for Clevo NS50AU \| * `3454490e03` ALSA: cmipci: Fix kctl->id initialization \| * `c35034fd64` ALSA: gus: Fix kctl->id initialization \| * `1f6c520932` ALSA: ymfpci: Fix kctl->id initialization \| * `be0b9b7a6d` ALSA: hda: Fix kctl->id initialization \| * `c8a46f39dd` Input: fix open count when closing inhibited device \| * `f9172a0bb5` Input: psmouse - fix OOB access in Elantech protocol \| * `00b59734f5` Input: xpad - delete a Razer DeathAdder mouse VID/PID entry \| * `32c2c234bc` batman-adv: Broken sync while rescheduling delayed work \| * `f9b9c84696` bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks \| * `abc7062313` bnxt_en: Prevent kernel panic when receiving unexpected PHC_UPDATE event \| * `5ce24936d5` bnxt_en: Skip firmware fatal error recovery if chip is not accessible \| * `5fc86a4580` bnxt_en: Query default VLAN before VNIC setup on a VF \| * `53a0c6d5c9` bnxt_en: Don't issue AP reset during ethtool's reset operation \| * `5df74018d1` net: bcmgenet: Fix EEE implementation \| * `d4925800a4` lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() \| * `c5a17f3247` drm/amdgpu: fix Null pointer dereference error in amdgpu_device_recover_vram \| * `dbc880567a` bpf: Add extra path pointer check to d_path helper \| * `06177b9290` net: sched: fix possible refcount leak in tc_chain_tmplt_add() \| * `e582ceda5a` net: sched: act_police: fix sparse errors in tcf_police_dump() \| * `60f39768ef` net: sched: move rtm_tca_policy declaration to include file \| * `76eef453a6` drm/i915/selftests: Add some missing error propagation \| * `4e7f1f6da7` drm/i915/selftests: Stop using kthread_stop() \| * `9d9a38b563` net: sched: add rcu annotations around qdisc->qdisc_sleeping \| * `8a74ea37e1` rfs: annotate lockless accesses to RFS sock flow table \| * `3d9eface2e` rfs: annotate lockless accesses to sk->sk_rxhash \| * `f8e6aa0e60` tcp: gso: really support BIG TCP \| * `251b5d68ac` ipv6: rpl: Fix Route of Death. \| * `65f2def206` netfilter: nf_tables: out-of-bound check in chain blob \| * `fea199dbf6` netfilter: ipset: Add schedule point in call_ad(). \| * `f057da51c0` netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper \| * `1f26ea49a5` netfilter: nft_bitwise: fix register tracking \| * `81e11b6c1a` selftests/bpf: Fix sockopt_sk selftest \| * `1ba0353545` selftests/bpf: Verify optval=NULL case \| * `0d18f8b90b` wifi: cfg80211: fix locking in sched scan stop work \| * `4a64e92846` qed/qede: Fix scheduling while atomic \| * `79c975514c` wifi: mac80211: don't translate beacon/presp addrs \| * `4dd40fec5b` wifi: mac80211: mlme: fix non-inheritence element \| * `8b6ab4bfba` wifi: cfg80211: reject bad AP MLD address \| * `434cf4fbee` wifi: mac80211: use correct iftype HE cap \| * `3e8a7573ff` Bluetooth: L2CAP: Add missing checks for invalid DCID \| * `66b3f7425a` Bluetooth: ISO: don't try to remove CIG if there are bound CIS left \| * `9c7e51b947` Bluetooth: Fix l2cap_disconnect_req deadlock \| * `17aac12002` Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER \| * `5f285409c9` drm/i915: Use 18 fast wake AUX sync len \| * `7bf7bebdc2` drm/i915: Explain the magic numbers for AUX SYNC/precharge length \| * `1d37434ffc` net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values \| * `a22c0a0346` net: enetc: correct rx_bytes statistics of XDP \| * `b3fc768a74` net: enetc: correct the statistics of rx bytes \| * `7a5cdd4bc1` net/smc: Avoid to access invalid RMBs' MRs in SMCRv1 ADD LINK CONT \| * `76e38e6e1b` net/ipv6: fix bool/int mismatch for skip_notify_on_dev_down \| * `3849e7fcea` bpf: Fix elem_size not being set for inner maps \| * `d7612a922b` bpf: Fix UAF in task local storage \| * `9166225c3b` net/ipv4: ping_group_range: allow GID from 2147483648 to 4294967294 \| * `332f36a09c` net: dsa: lan9303: allow vid != 0 in port_fdb_{add\|del} methods \| * `8af3119388` neighbour: fix unaligned access to pneigh_entry \| * `898c9a0ee7` bpf, sockmap: Avoid potential NULL dereference in sk_psock_verdict_data_ready() \| * `e783f639b8` wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll \| * `84c699681a` afs: Fix setting of mtime when creating a file/dir/symlink \| * `fb7058dd02` spi: qup: Request DMA before enabling clocks \| * `ec2e12b14a` platform/surface: aggregator_tabletsw: Add support for book mode in KIP subsystem \| * `24845da026` platform/surface: aggregator: Allow completion work-items to be executed in parallel \| * `31c3de5f7b` spi: mt65xx: make sure operations completed before unloading \| * `097acf0aa6` net: sfp: fix state loss when updating state_hw_mask \| * `ec3ce2c7cf` scsi: megaraid_sas: Add flexible array member for SGLs * \| `32d0f34bbc` Revert "tcp: deny tcp_disconnect() when threads are waiting" * \| `2a77668d45` Merge 6.1.33 into android14-6.1-lts \|\\| \| * `2f3918bc53` Linux 6.1.33 \| * `c3fcfe8931` ext4: enable the lazy init thread when remounting read/write \| * `84683a2cf5` selftests: mptcp: join: avoid using 'cmp --bytes' \| * `fbb6db561d` selftests: mptcp: simult flows: skip if MPTCP is not supported \| * `4bc022b953` selftests: mptcp: diag: skip if MPTCP is not supported \| * `e8631d84c0` arm64: efi: Use SMBIOS processor version to key off Ampere quirk \| * `b026755cc9` tls: rx: strp: don't use GFP_KERNEL in softirq context \| * `a2961463d7` xfs: verify buffer contents when we skip log replay \| * `4042d7ad40` drm/amd/display: Have Payload Properly Created After Resume \| * `4a9d63181f` iommu/amd/pgtbl_v2: Fix domain max address \| * `3264d875f5` tpm, tpm_tis: Request threaded interrupt handler \| * `77ee4f8c02` regmap: Account for register length when chunking \| * `a8eaa9a06a` fs/ntfs3: Validate MFT flags before replaying logs \| * `0b28edf227` KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() \| * `4f303c0b9d` ksmbd: fix multiple out-of-bounds read during context decoding \| * `522a9417f6` ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate \| * `4c6bdaacb3` ksmbd: fix incorrect AllocationSize set in smb2_get_info \| * `f7add4d159` ksmbd: fix UAF issue from opinfo->conn \| * `8072ea6743` ksmbd: fix credit count leakage \| * `5f4d3810ca` KVM: x86: Account fastpath-only VM-Exits in vCPU stats \| * `b1d5667afa` KVM: arm64: Populate fault info for watchpoint \| * `0659aee089` test_firmware: fix the memory leak of the allocated firmware buffer \| * `eef67dfdc0` test_firmware: fix a memory leak with reqs buffer \| * `33aebb0148` powerpc/xmon: Use KSYM_NAME_LEN in array size \| * `97211945ef` serial: cpm_uart: Fix a COMPILE_TEST dependency \| * `7493392a37` serial: 8250_tegra: Fix an error handling path in tegra_uart_probe() \| * `3270095f6e` fbcon: Fix null-ptr-deref in soft_cursor \| * `ef8aeffb2c` ext4: add lockdep annotations for i_data_sem for ea_inode's \| * `140aa33f96` ext4: disallow ea_inodes with extended attributes \| * `277cea6f77` ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() \| * `b112babc56` ext4: add EA_INODE checking to ext4_iget() \| * `9ce0319b05` mptcp: fix active subflow finalization \| * `977a63afd4` mptcp: fix connect timeout handling \| * `97ecfe67f5` selftests: mptcp: userspace pm: skip if MPTCP is not supported \| * `f324df8de0` selftests: mptcp: sockopt: skip if MPTCP is not supported \| * `0fea987ccf` selftests: mptcp: join: skip if MPTCP is not supported \| * `17ddf2a54e` selftests: mptcp: pm nl: skip if MPTCP is not supported \| * `68ecc09a14` selftests: mptcp: connect: skip if MPTCP is not supported \| * `3f731926a1` tracing/probe: trace_probe_primary_from_call(): checked list_first_entry \| * `7403630eb9` tracing/histograms: Allow variables to have some modifiers \| * `2a1195f0e0` tracing/timerlat: Always wakeup the timerlat thread \| * `007c042256` mtdchar: mark bits of ioctl handler noinline \| * `d7c34c8f60` selinux: don't use make's grouped targets feature yet \| * `6fb0b098f6` io_uring: undeprecate epoll_ctl support \| * `94f97b8df0` riscv: perf: Fix callchain parse error with kernel tracepoint events \| * `c40dc6e266` tpm, tpm_tis: correct tpm_tis_flags enumeration values \| * `b0e21c42c1` iommu/amd: Fix domain flush size when syncing iotlb \| * `251cf7fd5a` powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall \| * `2a72e6814f` block: fix revalidate performance regression \| * `867ad8cba2` phy: qcom-qmp-pcie-msm8996: fix init-count imbalance \| * `5daf7a171d` phy: qcom-qmp-combo: fix init-count imbalance \| * `1af8dd5403` btrfs: fix csum_tree_block page iteration to avoid tripping on -Werror=array-bounds \| * `380d2da555` tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK \| * `2c8aa1163a` mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order \| * `f25568e080` mmc: vub300: fix invalid response handling \| * `03974abbf2` x86/mtrr: Revert 90b926e68f50 ("x86/pat: Fix pat_x_mtrr_type() for MTRR disabled case") \| * `8db2ea7b80` drm/amd/pm: reverse mclk and fclk clocks levels for renoir \| * `f05f3fcc78` drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp \| * `1c729bd5b3` drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5 \| * `0f8f233ed7` drm/amd/pm: resolve reboot exception for si oland \| * `e0a0f5d2ba` drm/amd/pm: reverse mclk and fclk clocks levels for vangogh \| * `00abb872ef` drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4 \| * `2f91f92bd8` drm/amdgpu: enable tmz by default for GC 11.0.1 \| * `009886965e` ata: libata-scsi: Use correct device no in ata_find_dev() \| * `63a44b01df` scsi: stex: Fix gcc 13 warnings \| * `2e787e5153` misc: fastrpc: reject new invocations during device removal \| * `93f2aa05af` misc: fastrpc: return -EPIPE to invocations on device removal \| * `cbfed647fd` md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk() \| * `704842c97a` usb: gadget: f_fs: Add unbind event before functionfs_unbind \| * `cc8c9864da` usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM \| * `08e8ff68a3` dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type \| * `ef12610ff5` net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 \| * `3cfdc3fc18` iio: dac: build ad5758 driver when AD5758 is selected \| * `f453753900` iio: adc: stm32-adc: skip adc-diff-channels setup if none is present \| * `735d033bed` iio: adc: ad7192: Change "shorted" channels to differential \| * `84f4d63ae1` iio: addac: ad74413: fix resistance input processing \| * `ab0c2dffe8` iio: dac: mcp4725: Fix i2c_master_send() return value handling \| * `89f92d4353` iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag \| * `2eb2696051` iio: adc: stm32-adc: skip adc-channels setup if none is present \| * `54d737d796` iio: light: vcnl4035: fixed chip ID check \| * `2896a356ed` dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value \| * `cb2a612c39` iio: imu: inv_icm42600: fix timestamp reset \| * `3fb021f5c1` HID: wacom: avoid integer overflow in wacom_intuos_inout() \| * `254be1f648` HID: google: add jewel USB id \| * `23c241676f` iio: adc: mxs-lradc: fix the order of two cleanup operations \| * `b6867ce5fb` iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT method \| * `47cc3cae30` media: uvcvideo: Don't expose unsupported formats to userspace \| * `4d77637112` drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug \| * `7d233f9359` mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() \| * `4124000cf4` media: mediatek: vcodec: Only apply 4K frame sizes on decoder formats \| * `bafe94ac99` KVM: arm64: vgic: Fix locking comment \| * `150a5f74a5` KVM: arm64: vgic: Wrap vgic_its_create() with config_lock \| * `4129d71e5b` KVM: arm64: vgic: Fix a circular locking issue \| * `7df6008b87` block: Deny writable memory mapping if block is read-only \| * `16ddd3bc67` nvme-pci: Add quirk for Teamgroup MP33 SSD \| * `a731273f3c` ublk: fix AB-BA lockdep warning \| * `68ce1d57e5` drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged \| * `baa8901ad7` ceph: silence smatch warning in reconnect_caps_cb() \| * `56e5d63e4e` atm: hide unused procfs functions \| * `47d0f62679` drm/msm: Be more shouty if per-process pgtables aren't working \| * `c62a9a6bea` ALSA: oss: avoid missing-prototype warnings \| * `e4f1532a9c` nvme: do not let the user delete a ctrl before a complete initialization \| * `f481c2af49` nvme-multipath: don't call blk_mark_disk_dead in nvme_mpath_remove_disk \| * `d001347067` netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT \| * `def67e27f2` net: wwan: t7xx: Ensure init is completed before system sleep \| * `ae72bd1a4b` wifi: b43: fix incorrect __packed annotation \| * `c061e13c72` scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed \| * `7402fb48ef` wifi: iwlwifi: mvm: Add locking to the rate read flow \| * `788f129f63` wifi: mac80211: recalc chanctx mindef before assigning \| * `a034600611` wifi: mac80211: consider reserved chanctx for mindef \| * `aefa37aa32` wifi: mac80211: simplify chanctx allocation \| * `bdd97c99b3` arm64: vdso: Pass (void ) to virt_to_page() \| `6bf0f6bfcd` arm64/mm: mark private VM_FAULT_X defines as vm_fault_t \| * `e0b5316e2e` ARM: dts: stm32: add pin map for CAN controller on stm32f7 \| * `de16dfe7ca` wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value \| * `329da6d07c` ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P \| * `905b247f6e` s390/topology: honour nr_cpu_ids when adding CPUs \| * `26cfe2faa8` s390/pkey: zeroize key blobs \| * `9f2f538cd8` ASoC: SOF: pm: save io region state in case of errors in resume \| * `eb708aee41` ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in error handling \| * `1cc6301dfc` ASoC: SOF: pcm: fix pm_runtime imbalance in error handling \| * `a6637d5a8f` ASoC: SOF: debug: conditionally bump runtime_pm counter on exceptions \| * `d5d61f747e` media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 \| * `d0088ea444` media: dvb-core: Fix kernel WARNING for blocking operation in wait_event() \| `4a8ecfb220` media: dvb-core: Fix use-after-free due to race at dvb_register_device() \| * `93b5dfebcb` media: dvb-core: Fix use-after-free due on race condition at dvb_net \| * `bf3b6f82fd` media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table \| * `ea2938c27b` media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() \| * `dd68399361` media: dvb_ca_en50221: fix a size write bug \| * `058822591b` media: netup_unidvb: fix irq init by register it at the end of probe \| * `b769fbf04a` media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address \| * `5d2923fb0b` media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() \| * `6906e613e6` media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer \| * `4e896b2263` media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() \| * `336ca9b371` media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() \| * `1027c8c068` media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() \| * `8914ae00db` media: dvb_demux: fix a bug for the continuity counter \| * `59dad726de` ASoC: ssm2602: Add workaround for playback distortions \| * `7fbdd3bd7b` ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V \| * `603f239216` ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI codecs \| * `f6d2aa322c` xfrm: Check if_id in inbound policy/secpath match \| * `40798c566b` um: harddog: fix modular build \| * `c03dd93905` ASoC: dwc: limit the number of overrun messages \| * `0960fb87cd` ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12 \| * `7d98a36b10` nvme-pci: add quirk for missing secondary temperature thresholds \| * `53786bfadc` nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G \| * `46193dd43d` block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE \| * `5af920e4d1` nbd: Fix debugfs_create_dir error checking \| * `f83c32ed05` fbdev: stifb: Fix info entry in sti_struct on error path \| * `be2aefa202` fbdev: modedb: Add 1920x1080 at 60 Hz video mode \| * `c6c0a9f619` fbdev: imsttfb: Fix use after free bug in imsttfb_probe \| * `3e336ad6f5` drm/amdgpu: set gfx9 onwards APU atomics support to be true \| * `5ae4a618a1` gfs2: Don't deref jdesc in evict \| * `61c3962ab1` platform/mellanox: fix potential race in mlxbf-tmfifo driver \| * `809efd7a69` platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield \| * `18913fc7c1` media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE \| * `705f4dcc41` hwmon: (k10temp) Add PCI ID for family 19, model 78h \| * `6578e0f196` ARM: 9295/1: unwind:fix unwind abort for uleb128 case \| * `0433baa893` btrfs: abort transaction when sibling keys check fails for leaves \| * `e2d161c539` drm/ast: Fix ARM compatibility \| * `cad1abbe48` mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() \| * `88a042d599` drm/amdgpu: Use the default reset when loading or reloading the driver \| * `6a40da6007` ASoC: Intel: soc-acpi-cht: Add quirk for Nextbook Ares 8A tablet \| * `a7ec48a419` ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs. \| * `867dae5547` watchdog: menz069_wdt: fix watchdog initialisation \| * `787e74b213` drm/amdgpu: release gpu full access after "amdgpu_device_ip_late_init" \| * `e2feb39312` mptcp: add annotations around sk->sk_shutdown accesses \| * `0b9e6d64cd` mptcp: fix data race around msk->first access \| * `519f16d96c` mptcp: consolidate passive msk socket initialization \| * `fa2cbd1d68` mptcp: simplify subflow_syn_recv_sock() \| * `9872e8c632` mptcp: avoid unneeded address copy \| * `1b9e3ab669` mptcp: add annotations around msk->subflow accesses \| * `c5ebb5cec9` mptcp: avoid unneeded __mptcp_nmpc_socket() usage \| * `ea9d7382d5` rtnetlink: call validate_linkmsg in rtnl_create_link \| * `62dcac528b` mtd: rawnand: marvell: don't set the NAND frequency select \| * `2187cb72b9` mtd: rawnand: marvell: ensure timing values are written \| * `a0843347a9` net: dsa: mv88e6xxx: Increase wait after reset deactivation \| * `c3fc733798` tcp: fix mishandling when the sack compression is deferred. \| * `eac615ed3c` net/sched: flower: fix possible OOB write in fl_set_geneve_opt() \| * `4fc2724f44` iommu/mediatek: Flush IOTLB completely only if domain has been attached \| * `9316fdd57f` net/mlx5: Read embedded cpu after init bit cleared \| * `4156c6ff33` net/mlx5e: Fix error handling in mlx5e_refresh_tirs \| * `7c3e271626` nvme: fix the name of Zone Append for verbose logging \| * `4e5a5cda3d` nfsd: fix double fget() bug in __write_ports_addfd() \| * `401a1cf50b` udp6: Fix race condition in udp6_sendmsg & connect \| * `507182f132` net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report \| * `5c05ef3630` net: sched: fix NULL pointer dereference in mq_attach \| * `f8884108a2` net/sched: Prohibit regrafting ingress or clsact Qdiscs \| * `be3e1f71cb` net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs \| * `1ec1434630` net/sched: sch_clsact: Only create under TC_H_CLSACT \| * `89a0f4dcae` net/sched: sch_ingress: Only create under TC_H_INGRESS \| * `d67a5a587c` net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK \| * `8c3ec8e789` net/smc: Scan from current RMB list when no position specified \| * `752836e1a2` tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set \| * `c2251ce048` tcp: deny tcp_disconnect() when threads are waiting \| * `0dec22a09d` af_packet: do not use READ_ONCE() in packet_bind() \| * `906134664f` RDMA/irdma: Fix Local Invalidate fencing \| * `07322c8a12` RDMA/irdma: Prevent QP use after free \| * `3cf7747414` mtd: rawnand: ingenic: fix empty stub helper definitions \| * `789394f1df` perf ftrace latency: Remove unnecessary "--" from --use-nsec option \| * `7164961a9c` amd-xgbe: fix the false linkup in xgbe_phy_status \| * `d615070b0e` tls: improve lockless access safety of tls_err_abort() \| * `0b64a2bf16` af_packet: Fix data-races of pkt_sk(sk)->num. \| * `a2c2364e5f` netrom: fix info-leak in nr_write_internal() \| * `ae0ef97f1e` net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure \| * `724aa4fd9e` net/mlx5e: Don't attach netdev profile while handling internal error \| * `9c7ae143a0` net/mlx5: fw_tracer, Fix event handling \| * `e73b7de4bf` net/mlx5: SF, Drain health before removing device \| * `9e49af9766` net/mlx5: Drain health before unregistering devlink \| * `ddd8d552a8` riscv: Fix unused variable warning when BUILTIN_DTB is set \| * `72fef70abe` dmaengine: pl330: rename _start to prevent build error \| * `bd424277a1` nfsd: make a copy of struct iattr before calling notify_change \| * `dac09fec5b` iommu/amd: Fix up merge conflict resolution \| * `817ce9b1d2` iommu/amd: Handle GALog overflows \| * `c3ff24625a` iommu/amd: Don't block updates to GATag if guest mode is on \| * `bf1f3f4aa4` iommu/rockchip: Fix unwind goto issue \| * `0021441cbb` RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx \| * `dcaa61b73d` RDMA/bnxt_re: Fix a possible memory leak \| * `44fc5eb0e2` dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved() \| * `ef8c761693` RDMA/hns: Modify the value of long message loopback slice \| * `736e1c4e54` RDMA/hns: Fix base address table allocation \| * `38771c0eef` RDMA/hns: Fix timeout attr in query qp for HIP08 \| * `241de3fec1` RDMA/efa: Fix unsupported page sizes in device \| * `21c0eb0648` phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix CNTL2_DIF_TX_CTL0 value \| * `836f874d43` RDMA/bnxt_re: Fix the page_size used during the MR creation * \| `c5df11c964` Merge branch 'android14-6.1' into branch 'android14-6.1-lts' * \| `3a53767f1f` Revert "bpf, sockmap: Pass skb ownership through read_skb" * \| `8e369c7704` Revert "bpf, sockmap: Convert schedule_work into delayed_work" * \| `d7c3711e7d` Revert "bpf, sockmap: Reschedule is now done through backlog" * \| `4903ee3f95` Revert "bpf, sockmap: Improved check for empty queue" * \| `51ffabff7c` Revert "bpf, sockmap: Handle fin correctly" * \| `3ce63059c1` Revert "bpf, sockmap: TCP data stall on recv before accept" * \| `c7e4973846` Revert "bpf, sockmap: Wake up polling after data copy" * \| `0851b00164` Revert "bpf, sockmap: Incorrectly handling copied_seq" * \| `26b6ad0f34` Merge 6.1.32 into android14-6.1-lts \|\\| \| * `76ba310227` Linux 6.1.32 \| * `cd51ba98ae` tools headers UAPI: Sync the linux/in.h with the kernel sources \| * `2cd02ae656` netfilter: ctnetlink: Support offloaded conntrack entry deletion \| * `55ce796e9b` cpufreq: amd-pstate: Add ->fast_switch() callback \| * `c18f6919b4` cpufreq: amd-pstate: Update policy->cur in amd_pstate_adjust_perf() \| * `efc8ec1636` block: fix bio-cache for passthru IO \| * `5d08604754` Revert "thermal/drivers/mellanox: Use generic thermal_zone_get_trip() function" \| * `2333dbc88f` bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() \| * `6c1fad655b` drm/amd: Don't allow s0ix on APUs older than Raven \| * `83a7f27c5b` octeontx2-af: Add validation for lmac type \| * `3236221bb8` RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task" \| * `592af07ac0` wifi: iwlwifi: mvm: fix potential memory leak \| * `0c469078bd` wifi: iwlwifi: mvm: support wowlan info notification version 2 \| * `b5ceb6aac6` wifi: rtw89: correct 5 MHz mask setting \| * `07c8c1a3cf` net: phy: mscc: enable VSC8501/2 RGMII RX clock \| * `7c95f56995` page_pool: fix inconsistency for page_pool_ring_[un]lock() \| * `7dccd5fa7e` net: page_pool: use in_softirq() instead \| * `cd3c5e4e0d` vfio/type1: check pfn valid before converting to struct page \| * `6793a3c632` blk-mq: fix race condition in active queue accounting \| * `fe735073a5` bpf, sockmap: Incorrectly handling copied_seq \| * `dd628fc697` bpf, sockmap: Wake up polling after data copy \| * `ab90b68f65` bpf, sockmap: TCP data stall on recv before accept \| * `3a2129ebae` bpf, sockmap: Handle fin correctly \| * `ba4fec5bd6` bpf, sockmap: Improved check for empty queue \| * `1e4e379ccd` bpf, sockmap: Reschedule is now done through backlog \| * `9f4d7efb33` bpf, sockmap: Convert schedule_work into delayed_work \| * `4ae2af3e59` bpf, sockmap: Pass skb ownership through read_skb \| * `49b5b5bfee` gpio-f7188x: fix chip name and pin count on Nuvoton chip \| * `085f27f48c` net/mlx5: E-switch, Devcom, sync devcom events and devcom comp register \| * `3347ac7a81` tls: rx: strp: preserve decryption status of skbs when needed \| * `ba93977437` tls: rx: strp: factor out copying skb data \| * `52a89de3e9` tls: rx: strp: force mixed decrypted records into copy mode \| * `c48b8399e4` tls: rx: strp: fix determining record length in copy mode \| * `ecd9f6ed9e` tls: rx: strp: set the skb->len of detached / CoW'ed skbs \| * `e734a693a2` tls: rx: device: fix checking decryption status \| * `b3e54fb3a3` platform/x86/amd/pmf: Fix CnQF and auto-mode after resume \| * `8e8c33cc89` selftests/bpf: Fix pkg-config call building sign-file \| * `ca39992f10` firmware: arm_ffa: Fix usage of partition info get count flag \| * `3f5413c954` ipv{4,6}/raw: fix output xfrm lookup wrt protocol \| * `6728486447` inet: Add IP_LOCAL_PORT_RANGE socket option * \| `c3dee37bcd` Revert "Revert "binder_alloc: add missing mmap_lock calls when using the VMA"" * \| `f9689ed69b` Revert "Revert "android: binder: stop saving a pointer to the VMA"" * \| `896fd52618` Revert "binder: add lockless binder_alloc_(set\|get)_vma()" * \| `9f67f4f500` Revert "binder: fix UAF caused by faulty buffer cleanup" * \| `940f3dad8f` Revert "binder: fix UAF of alloc->vma in race with munmap()" * \| `03c3264a15` Merge 6.1.31 into android14-6.1-lts \|\\| \| * `d2869ace6e` Linux 6.1.31 \| * `2f32b89d81` net: phy: mscc: add VSC8502 to MODULE_DEVICE_TABLE \| * `3bcb97e424` 3c589_cs: Fix an error handling path in tc589_probe() \| * `9540765d18` net/smc: Reset connection when trying to use SMCRv2 fails. \| * `be4022669e` regulator: mt6359: add read check for PMIC MT6359 \| * `22157f7445` firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors \| * `1ae70faa86` arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert delay \| * `3e8a82fb55` net/mlx5: Devcom, serialize devcom registration \| * `eaa365c104` net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device \| * `411e4d6caa` net/mlx5: Collect command failures data only for known commands \| * `390aa5c006` net/mlx5: Fix error message when failing to allocate device memory \| * `59dd110ca2` net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE \| * `b17294e7aa` net/mlx5: Handle pairing of E-switch via uplink un/load APIs \| * `e501ab1366` net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs \| * `6f0dce5f78` net/mlx5e: do as little as possible in napi poll when budget is 0 \| * `00959a1bad` net/mlx5e: Use correct encap attribute during invalidation \| * `362063df6c` net/mlx5e: Fix deadlock in tc route query code \| * `2051f762c5` net/mlx5e: Fix SQ wake logic in ptp napi_poll context \| * `47b4f741a3` platform/mellanox: mlxbf-pmc: fix sscanf() error checking \| * `04238c2385` forcedeth: Fix an error handling path in nv_probe() \| * `0392c9185d` sctp: fix an issue that plpmtu can never go to complete state \| * `c9e09b070d` cxl: Wait Memory_Info_Valid before access memory related info \| * `ad72cb5899` ASoC: Intel: avs: Access path components under lock \| * `6ae9cf40b4` ASoC: Intel: avs: Fix declaration of enum avs_channel_config \| * `5eaaad19c8` ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg \| * `d8cfe5ccc9` x86/show_trace_log_lvl: Ensure stack pointer is aligned, again \| * `a7edc86e14` xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() \| * `53384076f7` x86/pci/xen: populate MSI sysfs entries \| * `84b211b028` ARM: dts: imx6qdl-mba6: Add missing pvcie-supply regulator \| * `225a5f394b` coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() \| * `5522469095` platform/x86: ISST: Remove 8 socket limit \| * `f34428b5a3` regulator: pca9450: Fix BUCK2 enable_mask \| * `ccc6e9ded6` fs: fix undefined behavior in bit shift for SB_NOUSER \| * `dfc5aaa57f` firmware: arm_ffa: Fix FFA device names for logical partitions \| * `ad73dc7263` firmware: arm_ffa: Check if ffa_driver remove is present before executing \| * `06ec5be891` optee: fix uninited async notif value \| * `9c744c6ff2` power: supply: sbs-charger: Fix INHIBITED bit for Status reg \| * `71e60a58d7` power: supply: bq24190: Call power_supply_changed() after updating input current \| * `1f02bfd5d9` power: supply: bq25890: Call power_supply_changed() after updating input current or voltage \| * `57842035d2` power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize \| * `221f7cb122` power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes \| * `3c573e7910` power: supply: bq27xxx: Move bq27xxx_battery_update() down \| * `9108ede08d` power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status() \| * `d952a1eaaf` power: supply: bq27xxx: Fix poll_interval handling and races on remove \| * `e65fee4568` power: supply: bq27xxx: Fix I2C IRQ race on remove \| * `d746fbf4f0` power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition \| * `e1073f8147` power: supply: mt6360: add a check of devm_work_autocancel in mt6360_charger_probe \| * `2ac38f130e` power: supply: leds: Fix blink to LED on transition \| * `94373413e1` cifs: mapchars mount option ignored \| * `91dd8aab9c` ipv6: Fix out-of-bounds access in ipv6_find_tlv() \| * `9bc1dbfd91` lan966x: Fix unloading/loading of the driver \| * `1a9e80f757` bpf: fix a memory leak in the LRU and LRU_PERCPU hash maps \| * `177ee41f61` bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields \| * `a1d7c357f4` octeontx2-pf: Fix TSOv6 offload \| * `4883d9e2a2` selftests: fib_tests: mute cleanup error message \| * `722af06e61` drm: fix drmm_mutex_init() \| * `cc18b46859` net: fix skb leak in __skb_tstamp_tx() \| * `8d81d3b0ed` ASoC: lpass: Fix for KASAN use_after_free out of bounds \| * `53764a17f5` media: radio-shark: Add endpoint checks \| * `d5dba4b7bf` USB: sisusbvga: Add endpoint checks \| * `09e9d1f52f` USB: core: Add routines for endpoint checks in old drivers \| * `2a112f0462` udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). \| * `ed66e6327a` net: fix stack overflow when LRO is disabled for virtual interfaces \| * `c8fdf7feca` fbdev: udlfb: Fix endpoint check \| * `d7fff52c99` debugobjects: Don't wake up kswapd from fill_pool() \| * `8694853768` irqchip/mips-gic: Use raw spinlock for gic_lock \| * `dc1b7641a9` irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable \| * `4ca6b06e9b` x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms \| * `ed0ef89508` perf/x86/uncore: Correct the number of CHAs on SPR \| * `f3078be2fe` drm/amd/amdgpu: limit one queue per gang \| * `34570f85a2` selftests/memfd: Fix unknown type name build failure \| * `931ea1ed31` binder: fix UAF of alloc->vma in race with munmap() \| * `e1e198eff1` binder: fix UAF caused by faulty buffer cleanup \| * `d7cee853bc` binder: add lockless binder_alloc_(set\|get)_vma() \| * `72a94f8c14` Revert "android: binder: stop saving a pointer to the VMA" \| * `7e6b854854` Revert "binder_alloc: add missing mmap_lock calls when using the VMA" \| * `8069bcaa5b` drm/amd/pm: Fix output of pp_od_clk_voltage \| * `6acfbdda4d` drm/amd/pm: add missing NotifyPowerSource message mapping for SMU13.0.7 \| * `8756863c7f` drm/radeon: reintroduce radeon_dp_work_func content \| * `3897ac532a` drm/mgag200: Fix gamma lut not initialized. \| * `3970ee926e` dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type \| * `937264cd9a` btrfs: use nofs when cleaning up aborted transactions \| * `63e12910b7` gpio: mockup: Fix mode of debugfs files \| * `b49706d179` parisc: Handle kprobes breakpoints only in kernel context \| * `5596e2ef5f` parisc: Enable LOCKDEP support \| * `d935edd510` parisc: Allow to reboot machine after system halt \| * `c49ffd89b6` parisc: Fix flush_dcache_page() for usage from irq context \| * `c0993b463f` parisc: Handle kgdb breakpoints only in kernel context \| * `e1f14a4071` parisc: Use num_present_cpus() in alternative patching code \| * `bd90ac0002` xtensa: add __bswap{si,di}2 helpers \| * `522bbbfcb6` xtensa: fix signal delivery to FDPIC process \| * `0845660508` m68k: Move signal frame following exception on 68020/030 \| * `6147745d43` net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize \| * `da1e8adab3` ASoC: rt5682: Disable jack detection interrupt during suspend \| * `72c28207c1` power: supply: bq25890: Fix external_power_changed race \| * `0456b91212` power: supply: axp288_fuel_gauge: Fix external_power_changed race \| * `7d5e0150ee` mmc: block: ensure error propagation for non-blk \| * `a24aec210a` mmc: sdhci-esdhc-imx: make "no-mmc-hs400" works \| * `0d97634ad4` SUNRPC: Don't change task->tk_status after the call to rpc_exit_task \| * `40599969ff` ALSA: hda/realtek: Enable headset onLenovo M70/M90 \| * `7d3d306f15` ALSA: hda: Fix unhandled register update during auto-suspend period \| * `5222e81afa` ALSA: hda/ca0132: add quirk for EVGA X299 DARK \| * `688c9af6e5` platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain \| * `c26b9e1931` x86/mm: Avoid incomplete Global INVLPG flushes \| * `4eb600f386` arm64: Also reset KASAN tag if page is not PG_mte_tagged \| * `8bdf47f9db` ocfs2: Switch to security_inode_init_security() \| * `28ee628fff` drm/amd/display: hpd rx irq not working with eDP interface \| * `7bfd4c0ebc` net: dsa: mv88e6xxx: Add RGMII delay to 88E6320 \| * `66ede2e423` platform/x86: hp-wmi: Fix cast to smaller integer type warning \| * `0dbc898f59` skbuff: Proactively round up to kmalloc bucket size \| * `ac2f5739fd` drm/amdgpu/mes11: enable reg active poll \| * `a2fe4534bb` drm/amd/amdgpu: update mes11 api def \| * `ae9e65319f` watchdog: sp5100_tco: Immediately trigger upon starting. \| * `7cd46930b8` tpm: Prevent hwrng from activating during resume \| * `25d38d5eaa` tpm: Re-enable TPM chip boostrapping non-tpm_tis TPM drivers \| * `e76f61a2c5` tpm, tpm_tis: startup chip before testing for interrupts \| * `9953dbf65f` tpm_tis: Use tpm_chip_{start,stop} decoration inside tpm_tis_resume \| * `c5a5d33886` tpm, tpm_tis: Only handle supported interrupts \| * `5c4c8075bc` tpm, tpm_tis: Avoid cache incoherency in test for interrupts \| * `1ec145277a` usb: dwc3: fix gadget mode suspend interrupt handler issue * \| `fd07e1d347` ANDROID: GKI: add skb_pull_data to android/abi_gki_aarch64_virtual_device * \| `83377b0a3f` ANDROID: GKI: preserve CRC generation for some bluetooth symbols * \| `907f29932c` Revert "Revert "usb: gadget: udc: core: Invoke usb_gadget_connect only when started"" * \| `bfd5fc9a7e` Revert "tipc: add tipc_bearer_min_mtu to calculate min mtu" * \| `d71d75e074` Revert "tipc: do not update mtu if msg_max is too small in mtu negotiation" * \| `9626cfb677` Revert "tipc: check the bearer min mtu properly when setting it by netlink" * \| `5caf658594` Revert "platform: Provide a remove callback that returns no value" * \| `f1fdb6e6a9` Revert "ASoC: fsl_micfil: Fix error handler with pm_runtime_enable" * \| `e2b436192b` Revert "firmware: arm_sdei: Fix sleep from invalid context BUG" * \| `26c1cc6858` Merge 6.1.30 into android14-6.1-lts \|\\| \| * `a343b0dd87` Linux 6.1.30 \| * `da9a8dc33d` drm/amdgpu: reserve the old gc_11_0__mes.bin \| `616843d5a1` drm/amd/amdgpu: introduce gc__mes_2.bin v2 \| `09bf14907d` drm/amdgpu: declare firmware for new MES 11.0.4 \| * `f05ccf6a6a` crypto: testmgr - fix RNG performance in fuzz tests \| * `682679fc95` remoteproc: imx_dsp_rproc: Fix kernel test robot sparse warning \| * `7099e14f60` rethook, fprobe: do not trace rethook related functions \| * `c46d3efb4d` rethook: use preempt_{disable, enable}_notrace in rethook_trampoline_handler \| * `4e38a02b22` arm64: mte: Do not set PG_mte_tagged if tags were not initialized \| * `02cf4a336e` s390/qdio: fix do_sqbs() inline assembly constraint \| * `25e8d30507` s390/crypto: use vector instructions only if available for ChaCha20 \| * `eeb63c07ba` s390/dasd: fix command reject error on ESE devices \| * `acc2a40e42` nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() \| * `0fc73f310c` powerpc/64s/radix: Fix soft dirty tracking \| * `ae5d148965` tpm/tpm_tis: Disable interrupts for more Lenovo devices \| * `9a74146540` powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device \| * `fc983cf5dd` powerpc/iommu: DMA address offset is incorrectly calculated with 2MB TCEs \| * `6e092fa42e` dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries \| * `76313a63f7` drm/amdgpu/gfx11: update gpu_clock_counter logic \| * `055852074c` drm/amdgpu: refine get gpu clock counter method \| * `4e2f9159f9` drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11 as well \| * `abfe2ffc00` drm/amdgpu/gfx10: Disable gfxoff before disabling powergating. \| * `9de5a98588` drm/amdgpu/gmc11: implement get_vbios_fb_size() \| * `903e942500` drm/amd/pm: fix possible power mode mismatch between driver and PMFW \| * `595824a450` ceph: force updating the msg pointer in non-split case \| * `3338d0b9ac` vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF \| * `e16629c639` thunderbolt: Clear registers properly when auto clear isn't in use \| * `abc7e50e89` serial: qcom-geni: fix enabling deactivated interrupt \| * `1db5db7a99` serial: 8250_exar: Add support for USR298x PCI Modems \| * `cda8aa19bf` serial: Add support for Advantech PCI-1611U card \| * `2cab13f500` mm: fix zswap writeback race condition \| * `254ee53028` maple_tree: make maple state reusable after mas_empty_area() \| * `6c4172d44c` statfs: enforce statfs[64] structure initialization \| * `154de42fe3` KVM: Fix vcpu_array[0] races \| * `75378b03a9` ksmbd: fix global-out-of-bounds in smb2_find_context_vals \| * `40d90ee027` ksmbd: fix wrong UserName check in session_user \| * `af7335a4b9` ksmbd: allocate one more byte for implied bcc[0] \| * `f1d013b0f0` ksmbd: smb2: Allow messages padded to 8byte boundary \| * `4d25f93e64` SMB3: drop reference to cfile before sending oplock break \| * `3b66d58c89` SMB3: Close all deferred handles of inode in case of handle lease break \| * `107677a8f4` wifi: rtw88: use work to update rate to avoid RCU warning \| * `d61191092d` can: kvaser_pciefd: Disable interrupts in probe error path \| * `eabb11236a` can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt \| * `45ce3beb02` can: kvaser_pciefd: Clear listen-only bit if not explicitly requested \| * `fcdfc1860f` can: kvaser_pciefd: Empty SRB buffer in probe \| * `50bdf44a1b` can: kvaser_pciefd: Call request_irq() before enabling interrupts \| * `24bdfcb099` can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() \| * `9cd1025b1a` can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag \| * `836641cc41` can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag \| * `0eee95cbbb` ALSA: hda/realtek: Fix mute and micmute LEDs for yet another HP laptop \| * `0cc95fdb67` ALSA: hda/realtek: Add quirk for HP EliteBook G10 laptops \| * `4ea7c3388f` ALSA: hda/realtek: Add quirk for 2nd ASUS GU603 \| * `9328c65694` ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 \| * `30043b0a06` ALSA: hda/realtek: Add quirk for Clevo L140AU \| * `0e1e6c0779` ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table \| * `dc8c569d59` ALSA: hda: Fix Oops by 9.1 surround channel names \| * `44f2ed29e1` xhci: Fix incorrect tracking of free space on transfer rings \| * `643a453878` xhci-pci: Only run d3cold avoidance quirk for s2idle \| * `ea56ede911` Revert "usb: gadget: udc: core: Invoke usb_gadget_connect only when started" \| * `7356d42cef` Revert "usb: gadget: udc: core: Prevent redundant calls to pullup" \| * `08bd1be1c7` usb: typec: altmodes/displayport: fix pin_assignment_show \| * `f1f810e541` usb: gadget: u_ether: Fix host MAC address case \| * `a9342bd4c2` usb: dwc3: debugfs: Resume dwc3 before accessing registers \| * `ad43004fd5` usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() \| * `56a0769fa4` USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value \| * `4c3312745f` usb-storage: fix deadlock when a scsi command timeouts more than once \| * `0ced12bdf6` USB: usbtmc: Fix direction for 0-length ioctl control messages \| * `2cd7d88fcb` ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go \| * `d319fe244e` bridge: always declare tunnel functions \| * `a836be60a3` netfilter: nft_set_rbtree: fix null deref on element insertion \| * `8f58c53857` netfilter: nf_tables: fix nft_trans type confusion \| * `d862b63605` net: selftests: Fix optstring \| * `fdc5c8fb57` net: pcs: xpcs: fix C73 AN not getting enabled \| * `ee44bacf46` net: wwan: iosm: fix NULL pointer dereference when removing device \| * `c3e3e8933f` vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() \| * `e02d2b987c` igb: fix bit_shift to be in [1..8] range \| * `516114d7fb` net: dsa: mv88e6xxx: Fix mv88e6393x EPC write command offset \| * `172146c26f` cassini: Fix a memory leak in the error handling path of cas_init_one() \| * `9cae243b9a` tun: Fix memory leak for detached NAPI queue. \| * `e2d59768f8` net: tun: rebuild error handling in tun_get_user \| * `ae42c6f79c` scsi: storvsc: Don't pass unused PFNs to Hyper-V host \| * `557ba100d8` wifi: iwlwifi: mvm: don't trust firmware n_channels \| * `a270c552ce` wifi: iwlwifi: mvm: fix OEM's name in the tas approved list \| * `bc907fbf48` wifi: iwlwifi: fix OEM's name in the ppag approved list \| * `2160e11981` wifi: iwlwifi: fw: fix DBGI dump \| * `a20550b3aa` wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock \| * `bc22656432` wifi: mac80211: Abort running color change when stopping the AP \| * `01a4503d9f` wifi: mac80211: fix min center freq offset tracing \| * `c79d794a2c` wifi: mac80211: fortify the spinlock against deadlock by interrupt \| * `f9a85347e4` wifi: cfg80211: Drop entries with invalid BSSIDs in RNR \| * `dda9c9b117` ice: Fix ice VF reset during iavf initialization \| * `f181d799fb` ice: introduce clear_reset_state operation \| * `36e6c7ada5` net: bcmgenet: Restore phy_stop() depending upon suspend/close \| * `41357a52b8` net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() \| * `e90cefcffd` can: dev: fix missing CAN XL support in can_put_echo_skb() \| * `c9abef1e07` s390/cio: include subchannels without devices also for evaluation \| * `f215b62f59` tipc: check the bearer min mtu properly when setting it by netlink \| * `259683001d` tipc: do not update mtu if msg_max is too small in mtu negotiation \| * `735c64ea88` tipc: add tipc_bearer_min_mtu to calculate min mtu \| * `73f53bc295` virtio_net: Fix error unwinding of XDP initialization \| * `978a55b0c0` virtio-net: Maintain reverse cleanup order \| * `6fbedf987b` net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() \| * `82ede43544` drm/exynos: fix g2d_open/close helper function definitions \| * `866c78a3a9` ASoC: SOF: topology: Fix logic for copying tuples \| * `3e56a1c048` ASoC: mediatek: mt8186: Fix use-after-free in driver remove path \| * `da1b698976` SUNRPC: Fix trace_svc_register() call site \| * `47adb84916` SUNRPC: always free ctxt when freeing deferred request \| * `fd86534872` SUNRPC: double free xprt_ctxt while still in use \| * `07821524f6` media: netup_unidvb: fix use-after-free at del_timer() \| * `4147a0cee1` net: hns3: fix reset timeout when enable full VF \| * `89982e0501` net: hns3: fix reset delay time to avoid configuration timeout \| * `2a06c5ab7b` net: hns3: fix sending pfc frames after reset issue \| * `8ee34c90ce` net: hns3: fix output information incomplete for dumping tx queue info with debugfs \| * `37c1e28967` net: dsa: rzn1-a5psw: disable learning for standalone ports \| * `7ceeb5608d` net: dsa: rzn1-a5psw: fix STP states handling \| * `374c9cf3ad` net: dsa: rzn1-a5psw: enable management frames for CPU port \| * `33a93db909` erspan: get the proto with the md version for collect_md \| * `2a3e5f428f` serial: 8250_bcm7271: fix leak in `brcmuart_probe` \| * `dcf08087c2` serial: 8250_bcm7271: balance clk_enable calls \| * `081790eee6` serial: arc_uart: fix of_iomap leak in `arc_serial_probe` \| * `820a60a416` tcp: fix possible sk_priority leak in tcp_v4_send_reset() \| * `9bcf4794f1` vsock: avoid to close connected socket after the timeout \| * `116cc7670f` sfc: disable RXFCS and RXALL features by default \| * `1c052acd71` ALSA: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15 \| * `a16bf8f9c8` wifi: mt76: connac: fix stats->tx_bytes calculation \| * `ee1a221d94` ALSA: firewire-digi00x: prevent potential use after free \| * `ea9c758184` net: phy: dp83867: add w/a for packet errors seen with short cables \| * `9407454a9b` net: fec: Better handle pm_runtime_get() failing in .remove() \| * `e412fa5d81` selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test \| * `7099beeec9` selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test \| * `c498e5d392` drm/msm: Fix submit error-path leaks \| * `474d57adf1` af_key: Reject optional tunnel/BEET mode templates in outbound policies \| * `e5a0b280b0` xfrm: Reject optional tunnel/BEET mode templates in outbound policies \| * `0d778f0cb1` cpupower: Make TSC read per CPU for Mperf monitor \| * `ce6c7befc2` ASoC: fsl_micfil: Fix error handler with pm_runtime_enable \| * `9d3ac384cb` platform: Provide a remove callback that returns no value \| * `394336e139` dt-bindings: display/msm: dsi-controller-main: Document qcom, master-dsi and qcom, sync-dual-dsi \| * `97d6437cbf` drm/msm/dpu: Remove duplicate register defines from INTF \| * `d6d90e1402` drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header \| * `092f382f65` drm/msm/dpu: Assign missing writeback log_mask \| * `ccde7016d1` drm/msm/dp: unregister audio driver during unbind \| * `6867c4b5db` Revert "Fix XFRM-I support for nested ESP tunnels" \| * `070d0047c6` xfrm: don't check the default policy if the policy allows the packet \| * `7b5a8a23ac` drm/amdgpu: drop gfx_v11_0_cp_ecc_error_irq_funcs \| * `b5f3f923d4` platform/x86: hp-wmi: add micmute to hp_wmi_keymap struct \| * `1189b7f495` platform/x86: Move existing HP drivers to a new hp subdir \| * `c9888aaed1` parisc: Replace regular spinlock with spin_trylock on panic path \| * `e112b2e265` mfd: intel-lpss: Add Intel Meteor Lake PCH-S LPSS PCI IDs \| * `77f43c014a` mfd: dln2: Fix memory leak in dln2_probe() \| * `d3ee2f9e30` mfd: intel_soc_pmic_chtwc: Add Lenovo Yoga Book X90F to intel_cht_wc_models \| * `4e5e9da139` soundwire: bus: Fix unbalanced pm_runtime_put() causing usage count underflow \| * `60eb1afb4f` soundwire: qcom: gracefully handle too many ports in DT \| * `3060b08d63` phy: st: miphy28lp: use _poll_timeout functions for waits \| * `81e8f1abd0` soundwire: dmi-quirks: add remapping for Intel 'Rooks County' NUC M15 \| * `895130e63c` recordmcount: Fix memory leaks in the uwrite function \| * `4e2df91118` lkdtm/stackleak: Fix noinstr violation \| * `fa825017fb` sched: Fix KCSAN noinstr violation \| * `eaa182a6c8` mcb-pci: Reallocate memory region to avoid memory overlapping \| * `af4d6dbb1a` serial: 8250: Reinit port->pm on port specific driver unbind \| * `6a4cef8244` usb: typec: tcpm: fix multiple times discover svids error \| * `1edff076cc` HID: wacom: generic: Set battery quirk only when we see battery data \| * `37358a22a3` HID: Ignore battery for ELAN touchscreen on ROG Flow X13 GV301RA \| * `10ba1c3424` HID: apple: Set the tilde quirk flag on the Geyser 3 \| * `f3e2f3e0a7` ASoC: amd: yc: Add ThinkBook 14 G5+ ARP to quirks list for acp6x \| * `1a6371c50b` ASoC: amd: Add Dell G15 5525 to quirks list \| * `26fda37345` ALSA: hda: LNL: add HD Audio PCI ID \| * `907d6b615e` usb: typec: ucsi: acpi: add quirk for ASUS Zenbook UM325 \| * `b484aa2147` spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 \| * `1844749dcf` HID: logitech-hidpp: Reconcile USB and Unifying serials \| * `16420da845` HID: logitech-hidpp: Don't use the USB serial for USB devices \| * `2e64faf655` ASoC: amd: yc: Add DMI entries to support HP OMEN 16-n0xxx (8A42) \| * `6ce24d176e` staging: axis-fifo: initialize timeouts in init only \| * `b268082188` HID: apple: Set the tilde quirk flag on the Geyser 4 and later \| * `ec310591cf` staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE \| * `022fe9fcac` Bluetooth: btrtl: Add the support for RTL8851B \| * `fd269a0435` Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp \| * `2f4a1b24da` Bluetooth: Add new quirk for broken set random RPA timeout for ATS2851 \| * `76dd7893bd` Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set \| * `803ba6dcc4` Bluetooth: btintel: Add LE States quirk support \| * `ea160ece08` Bluetooth: btrtl: check for NULL in btrtl_set_quirks() \| * `f4f3cbdbf2` Bluetooth: Improve support for Actions Semi ATS2851 based devices \| * `88deda7cd8` Bluetooth: btrtl: add support for the RTL8723CS \| * `c97ab50441` Bluetooth: Add new quirk for broken local ext features page 2 \| * `d9a68e9e89` Bluetooth: btusb: Add new PID/VID 04ca:3801 for MT7663 \| * `75481fa7aa` ipvs: Update width of source for ip_vs_sync_conn_options \| * `fab766c8a1` nbd: fix incomplete validation of ioctl arg \| * `068fd06148` wifi: ath11k: Fix SKB corruption in REO destination ring \| * `57189c8851` wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace \| * `fd35b7bb6d` null_blk: Always check queue mode setting from configfs \| * `63e2d06adf` wifi: iwlwifi: fix iwl_mvm_max_amsdu_size() for MLO \| * `e78526a06b` wifi: ath11k: Ignore frags from uninitialized peer in dp. \| * `1655cfc852` block, bfq: Fix division by zero error on zero wsum \| * `dbebdee3f2` wifi: iwlwifi: mvm: fix ptk_pn memory leak \| * `eb1ef44efa` wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf \| * `19f063df73` wifi: iwlwifi: add a new PCI device ID for BZ device \| * `0f9a1bcb94` wifi: iwlwifi: pcie: fix possible NULL pointer dereference \| * `b4acb6c3ed` md: fix soft lockup in status_resync \| * `60039bf72f` bpf: Add preempt_count_{sub,add} into btf id deny list \| * `f2065b8b0a` samples/bpf: Fix fout leak in hbm's run_bpf_prog \| * `e05d63f8b4` f2fs: fix to check readonly condition correctly \| * `7741ddc882` f2fs: fix to drop all dirty pages during umount() if cp_error is set \| * `f4631d295a` f2fs: Fix system crash due to lack of free space in LFS \| * `c1b0b32f2d` crypto: jitter - permanent and intermittent health errors \| * `9d4430b7f8` ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() \| * `c6bee89700` ext4: set goal start correctly in ext4_mb_normalize_request \| * `7739981b9c` scsi: ufs: ufs-pci: Add support for Intel Lunar Lake \| * `d485903231` gfs2: Fix inode height consistency check \| * `9c6da3b7f1` scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition \| * `c9115f49cf` lib: cpu_rmap: Avoid use after free on rmap->obj array entries \| * `a7a4def6c7` scsi: target: iscsit: Free cmds before session free \| * `d957a100bc` netdev: Enforce index cap in netdev_get_tx_queue \| * `cf1fe8ccb5` net: Catch invalid index in XPS mapping \| * `ee5929c1e8` net: pasemi: Fix return type of pasemi_mac_start_tx() \| * `efb1a25751` bnxt: avoid overflow in bnxt_get_nvram_directory() \| * `8a72289694` scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery \| * `a9df88cb31` scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow \| * `e6f4fb2889` ext2: Check block size validity during mount \| * `f8a6c53ff1` wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex \| * `c35105f375` wifi: brcmfmac: pcie: Provide a buffer of random bytes to the device \| * `4e7a81b5e7` bpf: Annotate data races in bpf_local_storage \| * `660ab31561` wifi: ath: Silence memcpy run-time false positive warning \| * `48e4e06e2c` media: mediatek: vcodec: Fix potential array out-of-bounds in decoder queue_setup \| * `83c42283bf` media: Prefer designated initializers over memset for subdev pad ops \| * `210ef6cd8e` drm/amdgpu: Fix sdma v4 sw fini error \| * `5675ecd2e0` drm/amd: Fix an out of bounds error in BIOS parser \| * `ec5f00a59a` drm/amd/display: Correct DML calculation to follow HW SPEC \| * `cf180afea3` ACPI: video: Remove desktops without backlight DMI quirks \| * `86ba4f7b9f` irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 \| * `57b5a56cec` arm64: dts: qcom: sdm845-polaris: Drop inexistent properties \| * `fee6133490` ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects \| * `8c4a7163b7` ACPICA: Avoid undefined behavior: applying zero offset to null pointer \| * `b1db73e27f` drm/msm/dp: Clean up handling of DP AUX interrupts \| * `a6eb3aa0ec` drm/tegra: Avoid potential 32-bit integer overflow \| * `a7f9c14ace` remoteproc: stm32_rproc: Add mutex protection for workqueue \| * `3dc61a19c9` drm/amd/display: fixed dcn30+ underflow issue \| * `86a159fd5b` ACPI: EC: Fix oops when removing custom query handlers \| * `a8267bc8de` firmware: arm_sdei: Fix sleep from invalid context BUG \| * `b963e1b706` arm64: dts: imx8mq-librem5: Remove dis_u3_susphy_quirk from usb_dwc3_0 \| * `9a342d4eb9` memstick: r592: Fix UAF bug in r592_remove due to race condition \| * `110d420252` drm/rockchip: dw_hdmi: cleanup drm encoder during unbind \| * `79ca94bc3e` ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup() \| * `cc4273233a` media: pvrusb2: VIDEO_PVRUSB2 depends on DVB_CORE to use dvb_* symbols \| * `3c67f49a66` media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish \| * `6738841f6f` media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() \| * `346c975524` arm64: dts: qcom: msm8996: Add missing DWC3 quirks \| * `44361033a8` remoteproc: imx_dsp_rproc: Add custom memory copy implementation for i.MX DSP Cores \| * `10add04ee6` regmap: cache: Return error in cache sync operations for REGCACHE_NONE \| * `34813f041d` drm/amd/display: Use DC_LOG_DC in the trasform pixel function \| * `d547d499e4` drm/amd/display: Enable HostVM based on rIOMMU active \| * `898b031dc2` platform/x86: x86-android-tablets: Add Acer Iconia One 7 B1-750 data \| * `09f7da1301` drm/amd/display: Correct DML calculation to align HW formula \| * `92e6c79aca` drm/amd/display: populate subvp cmd info only for the top pipe \| * `4b17053ba2` drm/displayid: add displayid_get_header() and check bounds better \| * `48960a503f` fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() \| * `e8c322b76e` open: return EINVAL for O_DIRECTORY \| O_CREAT \| * `d0a8c0e31a` rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access \| * `801593f70b` selftests: cgroup: Add 'malloc' failures checks in test_memcontrol \| * `522c441faf` refscale: Move shutdown from wait_event() to wait_event_idle() \| * `b4319e457d` ext4: allow ext4_get_group_info() to fail \| * `f12aa035e8` ext4: allow to find by goal if EXT4_MB_HINT_GOAL_ONLY is set \| * `cd2341c26f` ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled \| * `cc4086759f` ext4: reflect error codes from ext4_multi_mount_protect() to its callers \| * `5a08a72da3` fbdev: arcfb: Fix error handling in arcfb_probe() \| * `dcd289136b` drm/i915: taint kernel when force probing unsupported devices \| * `36fa618775` drm/i915: Expand force_probe to block probe of devices as well. \| * `86d73b1f98` drm/i915/dp: prevent potential div-by-zero \| * `dbf25cc21b` drm/i915: Fix NULL ptr deref by checking new_crtc_state \| * `1b485f39ac` drm/i915/guc: Don't capture Gen8 regs on Xe devices \| * `e410895892` af_unix: Fix data races around sk->sk_shutdown. \| * `75924fb0f3` af_unix: Fix a data race of sk->sk_receive_queue->qlen. \| * `8759c1a361` net: datagram: fix data-races in datagram_poll() \| * `9e62a49608` net: mscc: ocelot: fix stat counter register values \| * `610a433810` ipvlan:Fix out-of-bounds caused by unclear skb->cb \| * `d695dccb74` gve: Remove the code of clearing PBA bit \| * `b4c0af8974` tcp: add annotations around sk->sk_shutdown accesses \| * `55caf900e1` net: add vlan_get_protocol_and_depth() helper \| * `65531f5675` net: deal with most data-races in sk_wait_event() \| * `bd0f360ee8` net: annotate sk->sk_err write from do_recvmmsg() \| * `a115dadf89` netlink: annotate accesses to nlk->cb_running \| * `6b4585a3c9` bonding: fix send_peer_notif overflow \| * `d9176dc690` netfilter: conntrack: fix possible bug_on with enable_hooks=1 \| * `30e4b13b1b` netfilter: nf_tables: always release netdev hooks from notifier \| * `6fa2e7bb7b` net: phy: bcm7xx: Correct read from expansion register \| * `7145f2309d` net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). \| * `edc1f6d89b` net: stmmac: Initialize MAC_ONEUS_TIC_COUNTER register \| * `9e916db758` linux/dim: Do nothing if no time delta between samples \| * `a84b08314f` tick/broadcast: Make broadcast device replacement work correctly \| * `2628417026` scsi: ufs: core: Fix I/O hang that occurs when BKOPS fails in W-LUN suspend \| * `27c6b573d1` net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe() \| * `3e785c8deb` net: skb_partial_csum_set() fix against transport header magic value \| * `8547757056` ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings \| * `3ff962242f` drm/mipi-dsi: Set the fwnode for mipi_dsi_device \| * `efd2821b8a` drm/fbdev-generic: prohibit potential out-of-bounds access * \| `51b8218413` Merge 6.1.29 into android14-6.1-lts \|\\| \| * `fa74641fb6` Linux 6.1.29 \| * `49f63bd062` drm/amd/display: Fix hang when skipping modeset \| * `7f6738e003` spi: fsl-cpm: Use 16 bit mode for large transfers with even size \| * `441fa64299` spi: fsl-spi: Re-organise transfer bits_per_word adaptation \| * `76ce326826` x86: fix clear_user_rep_good() exception handling annotation \| * `4ae066699d` x86/amd_nb: Add PCI ID for family 19h model 78h \| * `514728ffc0` f2fs: inode: fix to do sanity check on extent cache correctly \| * `85eb8b61dd` f2fs: fix to do sanity check on extent cache correctly \| * `18ecffd036` drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values \| * `c5fa4eeddd` ext4: fix invalid free tracking in ext4_xattr_move_to_block() \| * `d87a4e4094` ext4: remove a BUG_ON in ext4_mb_release_group_pa() \| * `19fb73b8ea` ext4: fix lockdep warning when enabling MMP \| * `6e7a97628f` ext4: bail out of ext4_xattr_ibody_get() fails for any reason \| * `1d2caddbee` ext4: add bounds checking in get_max_inline_xattr_value_size() \| * `665cc3ba50` ext4: fix deadlock when converting an inline directory in nojournal mode \| * `f68876aeef` ext4: improve error handling from ext4_dirhash() \| * `25c9fca7b7` ext4: improve error recovery code paths in __ext4_remount() \| * `748e4bb27d` ext4: check iomap type only if ext4_iomap_begin() does not fail \| * `b006e22285` ext4: fix data races when using cached status extents \| * `1fffe47505` ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum \| * `dba62fa84a` ext4: fix WARNING in mb_find_extent \| * `1b9c92432f` locking/rwsem: Add __always_inline annotation to __down_read_common() and inlined callers \| * `98643c9910` drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage \| * `f95a60099d` drm: Add missing DP DSC extended capability definitions. \| * `4aba9ab6a0` ksmbd: fix racy issue from smb2 close and logoff with multichannel \| * `502cf97090` ksmbd: block asynchronous requests when making a delay on session setup \| * `1fc8a2b14e` ksmbd: destroy expired sessions \| * `f623f627ad` ksmbd: fix racy issue from session setup and logoff \| * `91bbf9cb23` ksmbd: Implements sess->ksmbd_chann_list as xarray \| * `3db734e4d9` drm/amd/display: Change default Z8 watermark values \| * `a009acf687` drm/amd/display: Update Z8 SR exit/enter latencies \| * `e22ef15610` drm/amd/display: Update Z8 watermarks for DCN314 \| * `cf49b2ff25` ASoC: codecs: wcd938x: fix accessing regmap on unattached devices \| * `400950f66a` ASoC: codecs: constify static sdw_slave_ops struct \| * `5279ab199c` ASoC: rt1318: Add RT1318 SDCA vendor-specific driver \| * `1d383f9d65` drm/amd/display: Lowering min Z8 residency time \| * `e6332695d4` drm/amd/display: Update minimum stutter residency for DCN314 Z8 \| * `25f6036242` drm/amd/display: Add minimum Z8 residency debug option \| * `97b3d8eed0` drm/amd/display: Fix Z8 support configurations \| * `1822513408` drm/amd/display: Add debug option to skip PSR CRTC disable \| * `bcde2c8779` drm/amd/display: Add Z8 allow states to z-state support list \| * `8346882016` drm/amd/display: Refactor eDP PSR codes \| * `74a03d3c8d` drm/i915: Check pipe source size when using skl+ scalers \| * `549ce5199d` drm/i915/mtl: update scaler source and destination limits for MTL \| * `20a1064a75` wifi: rtw88: rtw8821c: Fix rfe_option field width \| * `6578ae84e9` irqchip/loongson-eiointc: Fix registration of syscore_ops \| * `fa29d577e2` irqchip/loongson-eiointc: Fix incorrect use of acpi_get_vec_parent \| * `9e7f788dd7` irqchip/loongarch: Adjust acpi_cascade_irqdomain_init() and sub-routines \| * `c5111be873` drm/msm: fix missing wq allocation error handling \| * `46062a1c0a` drm/msm: Hangcheck progress detection \| * `a7fdb37d93` drm/msm/adreno: Simplify read64/write64 helpers \| * `cba2856958` f2fs: factor out victim_entry usage from general rb_tree use \| * `4377b1d3b1` f2fs: allocate the extent_cache by default \| * `33112a0a17` f2fs: refactor extent_cache to support for read and more \| * `3af09dee7f` f2fs: remove unnecessary __init_extent_tree \| * `91b1554e66` f2fs: move internal functions into extent_cache.c \| * `155ff41cf2` f2fs: specify extent cache for read explicitly \| * `77d2651cc8` drm/msm/adreno: adreno_gpu: Use suspend() instead of idle() on load error \| * `b2bd08be1a` fs/ntfs3: Refactoring of various minor issues \| * `fb98336e23` HID: wacom: insert timestamp to packed Bluetooth (BT) events \| * `fb2f0c0004` HID: wacom: Set a default resolution for older tablets \| * `7a07311304` drm/amd: Use `amdgpu_ucode_` helpers for MES \| `a3e3a640d4` drm/amd: Add a new helper for loading/validating microcode \| * `3e1fa150e7` drm/amd: Load MES microcode during early_init \| * `369b891842` drm/amdgpu: remove deprecated MES version vars \| * `506da05a5e` drm/amd/pm: avoid potential UBSAN issue on legacy asics \| * `2a179117a3` drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend \| * `17a6941567` drm/amd/pm: parse pp_handle under appropriate conditions \| * `348dcdf102` drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes \| * `7a8248317b` drm/amdgpu: Fix vram recover doesn't work after whole GPU reset (v2) \| * `6197fb331a` drm/amdgpu: change gfx 11.0.4 external_id range \| * `28c2e072fa` drm/amdgpu/jpeg: Remove harvest checking for JPEG3 \| * `f661ad5365` drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras \| * `02e6cb9b3a` drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini \| * `59cb2d46e1` drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() \| * `59e2439111` drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini \| * `f2e43c9804` drm/amd/display: fix flickering caused by S/G mode \| * `4c1e747ca6` drm/amd/display: filter out invalid bits in pipe_fuses \| * `c2b2641ecb` drm/amd/display: Fix 4to1 MPC black screen with DPP RCO \| * `cc9942840a` drm/amd/display: Add NULL plane_state check for cursor disable logic \| * `bfe56245f4` drm/panel: otm8009a: Set backlight parent to panel device \| * `2e51d7c09d` irqchip/loongson-eiointc: Fix returned value on parsing MADT \| * `84c64fb578` irqchip/loongson-pch-pic: Fix pch_pic_acpi_init calling \| * `8a0b544b7c` f2fs: fix potential corruption when moving a directory \| * `424f8cdc0a` f2fs: fix null pointer panic in tracepoint in __replace_atomic_write_block \| * `aa0f98c5d1` drm/i915/dsi: Use unconditional msleep() instead of intel_dsi_msleep() \| * `6e1476225e` drm/msm: fix workqueue leak on bind errors \| * `544711591a` drm/msm: fix vram leak on bind errors \| * `0fad173f9c` drm/msm: fix drm device leak on bind errors \| * `dd8ce825b1` drm/msm: fix NULL-deref on irq uninstall \| * `16e0e6fb45` drm/msm: fix NULL-deref on snapshot tear down \| * `5b6b81decd` drm/i915/color: Fix typo for Plane CSC indexes \| * `2b01534c8f` drm/bridge: lt8912b: Fix DSI Video Mode \| * `47bfe12804` drm/msm/adreno: fix runtime PM imbalance at gpu load \| * `3d0fdfefb3` ARM: dts: aspeed: romed8hm3: Fix GPIO polarity of system-fault LED \| * `f327c74436` ARM: dts: s5pv210: correct MIPI CSIS clock name \| * `5503ea70de` ARM: dts: exynos: fix WM8960 clock name in Itop Elite \| * `6efe88c34f` ARM: dts: aspeed: asrock: Correct firmware flash SPI clocks \| * `a64910ba86` sysctl: clarify register_sysctl_init() base directory order \| * `c3c70209a9` remoteproc: rcar_rproc: Call of_node_put() on iteration error \| * `948f81dac3` remoteproc: imx_rproc: Call of_node_put() on iteration error \| * `fe3497c3bf` remoteproc: imx_dsp_rproc: Call of_node_put() on iteration error \| * `8a0fc842af` remoteproc: st: Call of_node_put() on iteration error \| * `0d6b66657c` remoteproc: stm32: Call of_node_put() on iteration error \| * `fde64a409b` proc_sysctl: enhance documentation \| * `f4708645c1` proc_sysctl: update docs for __register_sysctl_table() \| * `c93185ffd9` sh: nmi_debug: fix return value of __setup handler \| * `2ebd006435` sh: init: use OF_EARLY_FLATTREE for early init \| * `ab2221dc3c` sh: mcount.S: fix build error when PRINTK is not enabled \| * `fdac282b3c` sh: math-emu: fix macro redefined warning \| * `6d103a5765` SMB3: force unmount was failing to close deferred close files \| * `bb0091a5c9` smb3: fix problem remounting a share after shutdown \| * `145f54ea33` inotify: Avoid reporting event with invalid wd \| * `d759abeb27` platform/x86: thinkpad_acpi: Add profile force ability \| * `66d4f7f327` platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i \| * `e614c1de9e` platform/x86: thinkpad_acpi: Fix platform profiles on T490 \| * `a02d29de79` platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet \| * `61549b7414` platform/x86/intel-uncore-freq: Return error on write frequency \| * `b886ad6b6b` cifs: release leases for deferred close handles when freezing \| * `187f89cff7` cifs: fix pcchunk length type in smb2_copychunk_range \| * `c5544c95ad` btrfs: zoned: fix full zone super block reading on ZNS \| * `4def3a0a85` btrfs: zoned: zone finish data relocation BG with last IO \| * `1e8de3223b` btrfs: fix space cache inconsistency after error loading it from disk \| * `1689eabbc3` btrfs: print-tree: parent bytenr must be aligned to sector size \| * `83ae0282f1` btrfs: make clear_cache mount option to rebuild FST without disabling it \| * `dd5a21941f` btrfs: zero the buffer before marking it dirty in btrfs_redirty_list_add \| * `15e877e592` btrfs: don't free qgroup space unless specified \| * `44c52544b2` btrfs: fix encoded write i_size corruption with no-holes \| * `17eaeee4c5` btrfs: fix assertion of exclop condition when starting balance \| * `0a99cd08e2` btrfs: properly reject clear_cache and v1 cache for block-group-tree \| * `8583cc10aa` btrfs: zoned: fix wrong use of bitops API in btrfs_ensure_empty_zones \| * `bcd7aa2963` btrfs: fix btrfs_prev_leaf() to not return the same key twice \| * `000322b29c` x86/retbleed: Fix return thunk alignment \| * `2feac714c6` RISC-V: fix taking the text_mutex twice during sifive errata patching \| * `0fad198fff` RISC-V: take text_mutex during alternative patching \| * `13a0e212dd` perf stat: Separate bperf from bpf_profiler \| * `602603baae` perf tracepoint: Fix memory leak in is_valid_tracepoint() \| * `3fb0d061dd` perf symbols: Fix return incorrect build_id size in elf_read_build_id() \| * `2dd641d78d` crypto: engine - fix crypto_queue backlog handling \| * `14a2259317` crypto: engine - Use crypto_request_complete \| * `6ba620fc91` crypto: api - Add scaffolding to change completion function signature \| * `1055eddce7` crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs() \| * `267db6bff3` perf cs-etm: Fix timeless decode mode detection \| * `b6671b7172` perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() \| * `d592598f47` perf pmu: zfree() expects a pointer to a pointer to zero it after freeing its contents \| * `36a840a862` perf vendor events power9: Remove UTF-8 characters from JSON files \| * `0dabe1ae74` perf ftrace: Make system wide the default target for latency subcommand \| * `4406061261` perf tests record_offcpu.sh: Fix redirection of stderr to stdin \| * `6d20672d52` perf vendor events s390: Remove UTF-8 characters from JSON file \| * `b2b9169960` perf scripts intel-pt-events.py: Fix IPC output for Python 2 \| * `f108cbc836` perf record: Fix "read LOST count failed" msg with sample read \| * `2424b456c3` net: enetc: check the index of the SFI rather than the handle \| * `d86d42e4a9` virtio_net: suppress cpu stall when free_unused_bufs \| * `4a61d79656` ice: block LAN in case of VF to VF offload \| * `2f80efc46b` net: dsa: mt7530: fix network connectivity with multiple CPU ports \| * `9d46edd93a` net: dsa: mt7530: split-off common parts from mt7531_setup \| * `98fc75c172` net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621 \| * `c6fafaa6f2` KVM: s390: fix race in gmap_make_secure() \| * `4e875cf90d` ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` \| * `7887397338` drm/amdgpu: add a missing lock for AMDGPU_SCHED \| * `f2e8e33862` af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). \| * `0d02efe7f2` ionic: catch failure from devlink_alloc \| * `942a2a0184` ethtool: Fix uninitialized number of lanes \| * `a05e5634c1` ionic: remove noise from ethtool rxnfc error msg \| * `3cad35b62e` octeontx2-vf: Detach LF resources on probe cleanup \| * `401d11f274` octeontx2-pf: Disable packet I/O for graceful exit \| * `d28f6ad8b1` octeontx2-af: Skip PFs if not enabled \| * `ac613d0bd2` octeontx2-af: Fix issues with NPC field hash extract \| * `ab0742bd5b` octeontx2-af: Update/Fix NPC field hash extract feature \| * `2b84d24d3a` octeontx2-pf: Add additional checks while configuring ucast/bcast/mcast rules \| * `bd9234da97` octeontx2-af: Allow mkex profile without DMAC and add L2M/L2B header extraction support \| * `14504aaa8b` octeontx2-pf: Increase the size of dmac filter flows \| * `2376ca72b5` octeontx2-af: Fix depth of cam and mem table. \| * `1c98271e0c` octeontx2-af: Fix start and end bit for scan config \| * `e92399f527` octeontx2-af: Secure APR table update with the lock \| * `419cc2c507` selftests: netfilter: fix libmnl pkg-config usage \| * `4b08cdd239` drm/i915/mtl: Add the missing CPU transcoder mask in intel_device_info \| * `2bb120405a` riscv: compat_syscall_table: Fixup compile warning \| * `40f8b3f5e6` rxrpc: Fix hard call timeout units \| * `ab14de49e4` sfc: Fix module EEPROM reporting for QSFP modules \| * `68b1614b32` r8152: move setting r8153b_rx_agg_chg_indicate() \| * `2642d7c136` r8152: fix the poor throughput for 2.5G devices \| * `fbdde7ef25` r8152: fix flow control issue of RTL8156A \| * `e2efb94966` net/sched: act_mirred: Add carrier check \| * `3b3537d4a0` i2c: tegra: Fix PEC support for SMBUS block read \| * `ffa97b5952` RISC-V: mm: Enable huge page support to kernel_page_present() function \| * `1e8ad3e45b` watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe() \| * `c36975a654` block: Skip destroyed blkg when restart in blkg_destroy_all() \| * `7c4c6e2a40` writeback: fix call of incorrect macro \| * `5ac2914f67` net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu \| * `1f274d5316` net: ipv6: fix skb hash for some RST packets \| * `686c70131e` selftests: srv6: make srv6_end_dt46_l3vpn_test more robust \| * `5a98019e96` sit: update dev->needed_headroom in ipip6_tunnel_bind_dev() \| * `55866fe3fd` net/sched: cls_api: remove block_cb from driver_list before freeing \| * `7fa93e39fb` tcp: fix skb_copy_ubufs() vs BIG TCP \| * `449280afaa` net/ncsi: clear Tx enable mode when handling a Config required AEN \| * `a78b922d11` octeontx2-pf: mcs: Do not reset PN while updating secy \| * `fd59ec1455` octeontx2-pf: mcs: Fix shared counters logic \| * `a8ddb974f0` octeontx2-pf: mcs: Clear stats before freeing resource \| * `c52ebecd89` octeontx2-pf: mcs: Match macsec ethertype along with DMAC \| * `a3dcc45eca` octeontx2-pf: mcs: Fix NULL pointer dereferences \| * `9ff806d070` octeontx2-af: mcs: Fix MCS block interrupt \| * `add6bdb8d6` octeontx2-af: mcs: Config parser to skip 8B header \| * `39b436f0ac` octeontx2-af: mcs: Write TCAM_DATA and TCAM_MASK registers at once \| * `06fdaf7711` octeonxt2-af: mcs: Fix per port bypass config \| * `1924450175` ixgbe: Fix panic during XDP_TX with > 64 CPUs \| * `80a791a199` drm/amd/display: Update bounding box values for DCN321 \| * `7bba2e5e09` drm/amd/display: Do not clear GPINT register when releasing DMUB from reset \| * `ccb0ad946a` drm/amd/display: Reset OUTBOX0 r/w pointer on DMUB reset \| * `bb13726625` drm/amd/display: Fixes for dcn32_clk_mgr implementation \| * `b7ae53dd0d` drm/amd/display: Return error code on DSC atomic check failure \| * `374f7fa01a` drm/amd/display: Add missing WA and MCLK validation \| * `0b47019f54` drm/amd/display: Remove FPU guards from the DML folder \| * `3738a23083` scsi: qedi: Fix use after free bug in qedi_remove() \| * `e60e5d6722` ASoC: Intel: soc-acpi-byt: Fix "WM510205" match no longer working \| * `1193a36f58` KVM: x86/mmu: Refresh CR0.WP prior to checking for emulated permission faults \| * `71e848bac0` KVM: VMX: Make CR0.WP a guest owned bit \| * `27ec4cbc1d` KVM: x86: Make use of kvm_read_cr_bits() when testing bits \| `956777b253` KVM: x86: Do not unload MMU roots when only toggling CR0.WP with TDP enabled \| * `d20a0195b3` KVM: x86/mmu: Avoid indirect call for get_cr3 \| * `28d0f85aff` drm/amd/display: Ext displays with dock can't recognized after resume \| * `d69d5e2a81` fs/ntfs3: Fix null-ptr-deref on inode->i_op in ntfs_lookup() \| * `93eb8dd4b4` mtd: spi-nor: spansion: Enable JFFS2 write buffer for Infineon s25hx SEMPER flash \| * `50f54a48f6` mailbox: zynqmp: Fix counts of child nodes \| * `e63a796b85` mailbox: zynq: Switch to flexible array to simplify code \| * `b12078b67a` soc: qcom: llcc: Do not create EDAC platform device on SDM845 \| * `bf9712195f` qcom: llcc/edac: Support polling mode for ECC handling \| * `4fdb257b2a` mtd: spi-nor: spansion: Enable JFFS2 write buffer for Infineon s28hx SEMPER flash \| * `8630dfcdab` mtd: spi-nor: Add a RWW flag \| * `897a40dbcf` mtd: spi-nor: add SFDP fixups for Quad Page Program \| * `de26d26f55` mtd: spi-nor: spansion: Remove NO_SFDP_FLAGS from s28hs512t info \| * `b951d4924c` KVM: x86/pmu: Disallow legacy LBRs if architectural LBRs are available \| * `189cdd8fe7` KVM: x86: Track supported PERF_CAPABILITIES in kvm_caps \| * `0457b6d04f` perf/x86/core: Zero @lbr instead of returning -1 in x86_perf_get_lbr() stub \| * `9239f895a8` crypto: ccp - Clear PSP interrupt status register before calling handler \| * `add662775d` drm/vmwgfx: Fix Legacy Display Unit atomic drm support \| * `b3204cb3e0` drm/vmwgfx: Remove explicit and broken vblank handling \| * `c613c951e6` usb: dwc3: gadget: Execute gadget stop after halting the controller \| * `065c3d4319` USB: dwc3: gadget: drop dead hibernation code * \| `ec2daee24c` ANDROID: add memset32 to db835c list of exported symbols needed. * \| `3ec1d2a158` Revert "uapi/linux/const.h: prefer ISO-friendly __typeof__" * \| `b4c489e551` Revert "posix-cpu-timers: Implement the missing timer_wait_running callback" * \| `e4446b24fd` Revert "KVM: arm64: Avoid vcpu->mutex v. kvm->lock inversion in CPU_ON" * \| `2bd2fb9c82` Revert "KVM: arm64: Avoid lock inversion when setting the VM register width" * \| `b8b87a4a37` Revert "KVM: arm64: Use config_lock to protect data ordered against KVM_RUN" * \| `6c2658e477` Revert "KVM: arm64: Use config_lock to protect vgic state" * \| `c937035a5d` Revert "KVM: arm64: vgic: Don't acquire its_lock before config_lock" * \| `ef75a88787` Merge 6.1.28 into android14-6.1-lts \|\\| \| * `bf4ad6fa4e` Linux 6.1.28 \| * `4507918cd1` netfilter: nf_tables: deactivate anonymous set from preparation phase \| * `1887a4faff` scsi: libsas: Grab the ATA port lock in sas_ata_device_link_abort() \| * `6dc7e36334` debugobject: Ensure pool refill (again) \| * `010842e882` drm/amd/display (gcc13): fix enum mismatch \| * `915923898f` i40e: use int for i40e_status \| * `8c82be5525` i40e: Remove string printing for i40e_status \| * `3cd9d45e87` i40e: Remove unused i40e status codes \| * `b593f157a8` sfc (gcc13): synchronize ef100_enqueue_skb()'s return type \| * `245653ed73` block/blk-iocost (gcc13): keep large values in a new enum \| * `40db6d172b` perf intel-pt: Fix CYC timestamps after standalone CBR \| * `376e662ebb` perf auxtrace: Fix address filter entire kernel size \| * `146b7251c1` wifi: ath11k: synchronize ath11k_mac_he_gi_to_nl80211_he_gi()'s return type \| * `d8d206beb3` bonding (gcc13): synchronize bond_{a,t}lb_xmit() types \| * `55c91905b9` thunderbolt: Use correct type in tb_port_is_clx_enabled() prototype \| * `e4a37e9060` cifs: protect session status check in smb2_reconnect() \| * `64d62ac6d6` cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname \| * `a744060574` blk-iocost: avoid 64-bit division in ioc_timer_fn \| * `7ac1a137be` dm: don't lock fs when the map is NULL in process of resume \| * `9a94ebc74c` dm ioctl: fix nested locking in table_clear() to remove deadlock concern \| * `cb874a190f` dm flakey: fix a crash with invalid table line \| * `3877b5c150` dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path \| * `21d5198c21` dm clone: call kmem_cache_destroy() in dm_clone_init() error path \| * `1da79e01e4` dm verity: fix error handling for check_at_most_once on FEC \| * `2f5aa54e40` vhost_vdpa: fix unmap process in no-batch mode \| * `6b5b755463` mm/mempolicy: correctly update prev when policy is equal on mbind \| * `840516585c` ia64: fix an addr to taddr in huge_pte_offset() \| * `7964bacf83` s390/dasd: fix hanging blockdevice after request requeue \| * `9628d45a06` btrfs: scrub: reject unsupported scrub flags \| * `7a0a402930` scripts/gdb: fix lx-timerlist for Python3 \| * `a16e911775` clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent \| * `5b4052aa95` clk: microchip: fix potential UAF in auxdev release callback \| * `39712c8aeb` wifi: rtw89: fix potential race condition between napi_init and napi_enable \| * `4309330641` wifi: rtl8xxxu: RTL8192EU always needs full init \| * `ead3b023ae` mailbox: zynqmp: Fix typo in IPI documentation \| * `706ae66574` kcsan: Avoid READ_ONCE() in read_instrumented_memory() \| * `c051c472fb` mailbox: zynqmp: Fix IPI isr handling \| * `8cc1ab7de2` mtd: spi-nor: core: Update flash's current address mode when changing address mode \| * `f1b4affca1` mtd: core: fix error path for nvmem provider \| * `26358f3304` mtd: core: fix nvmem error reporting \| * `43a72c1619` mtd: core: provide unique name for nvmem device, take two \| * `da4c747730` kasan: hw_tags: avoid invalid virt_to_page() \| * `507fbfa79a` md/raid5: Improve performance for sequential IO \| * `b50fd1c3d9` md/raid10: fix null-ptr-deref in raid10_sync_request \| * `acffdf1a7f` drbd: correctly submit flush bio on barrier \| * `8d67449f90` mm: do not reclaim private data from pinned page \| * `25457d07c8` nilfs2: fix infinite loop in nilfs_mdt_get_block() \| * `a73201c607` nilfs2: do not write dirty data after degenerating to read-only \| * `4844052acb` ALSA: hda/realtek: Fix mute and micmute LEDs for an HP laptop \| * `358aa78c02` ALSA: hda/realtek: support HP Pavilion Aero 13-be0xxx Mute LED \| * `6d57f6cc21` ALSA: hda/realtek: Add quirk for ASUS UM3402YAR using CS35L41 \| * `b433bfab89` ALSA: hda/realtek: Add quirk for ThinkPad P1 Gen 6 \| * `9e915d81f5` ALSA: usb-audio: Add quirk for Pioneer DDJ-800 \| * `fd02867177` parisc: Ensure page alignment in flush functions \| * `b80b7a9bb8` parisc: Fix argument pointer in real64_call_asm() \| * `274c0b0c2f` afs: Avoid endless loop if file is larger than expected \| * `7b6ccf752a` afs: Fix getattr to report server i_size on dirs, not local size \| * `2cfce11132` afs: Fix updating of i_size with dv jump from server \| * `72f3217aa1` PM: hibernate: Do not get block device exclusively in test_resume mode \| * `208ba216cc` PM: hibernate: Turn snapshot_test into global variable \| * `fc3153a914` ACPI: PM: Do not turn of unused power resources on the Toshiba Click Mini \| * `fed87ce073` hte: tegra-194: Fix off by one in tegra_hte_map_to_line_id() \| * `a51e150ef9` hte: tegra: fix 'struct of_device_id' build error \| * `5790f76dd2` mfd: arizona-spi: Add missing MODULE_DEVICE_TABLE \| * `d617022971` mfd: ocelot-spi: Fix unsupported bulk read \| * `eefc8cbb60` mfd: tqmx86: Correct board names for TQMxE39x \| * `4598908562` mfd: tqmx86: Specify IO port register range more precisely \| * `8c989fa9e8` mfd: tqmx86: Do not access I2C_DETECT register through io_base \| * `b3b3f66bd4` thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe \| * `86dfb47094` pinctrl-bcm2835.c: fix race condition when setting gpio dir \| * `6107896806` dmaengine: at_xdmac: do not enable all cyclic channels \| * `a8c24a80de` dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing \| * `7d28c500e5` dmaengine: dw-edma: Fix to change for continuous transfer \| * `502c33c7e7` dma: gpi: remove spurious unlock in gpi_ch_init \| * `a1f131d2e1` phy: ti: j721e-wiz: Fix unreachable code in wiz_mode_select() \| * `548113502e` phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port \| * `6c0df503cd` soundwire: intel: don't save hw_params for use in prepare \| * `bae3248bb1` soundwire: cadence: rename sdw_cdns_dai_dma_data as sdw_cdns_dai_runtime \| * `655b647245` pwm: mtk-disp: Configure double buffering before reading in .get_state() \| * `7cbcb1ca53` pwm: mtk-disp: Disable shadow registers before setting backlight values \| * `19f5910a1e` leds: tca6507: Fix error handling of using fwnode_property_read_string \| * `8c16219c96` dmaengine: mv_xor_v2: Fix an error code. \| * `60d95b747f` pinctrl: ralink: reintroduce ralink,rt2880-pinmux compatible string \| * `1b50402d3a` leds: TI_LMU_COMMON: select REGMAP instead of depending on it \| * `eefc7676d5` pinctrl: renesas: r8a779g0: Fix ERROROUTC function names \| * `d6004abdf5` pinctrl: renesas: r8a779g0: Fix Group 6/7 pin functions \| * `3727fafed7` pinctrl: renesas: r8a779g0: Fix Group 4/5 pin functions \| * `9af5833818` pinctrl: renesas: r8a779f0: Fix tsn1_avtp_pps pin group \| * `6a02dda054` pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration \| * `96d440bee1` ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline \| * `d30090eb54` ext4: fix i_disksize exceeding i_size problem in paritally written case \| * `32dce45c8e` SMB3: Close deferred file handles in case of handle lease break \| * `3aa9d065b0` SMB3: Add missing locks to protect deferred close file list \| * `c2b990d7aa` timekeeping: Fix references to nonexistent ktime_get_fast_ns() \| * `b265609a2a` openrisc: Properly store r31 to pt_regs on unhandled exceptions \| * `369d9e8fae` clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails \| * `07ad6cc82b` RDMA/mlx5: Use correct device num_ports when modify DC \| * `43d48cec9a` SUNRPC: remove the maximum number of retries in call_bind_status \| * `10dcd0ed78` RDMA/mlx5: Fix flow counter query via DEVX \| * `9116528937` RDMA/mlx5: Check pcie_relaxed_ordering_enabled() in UMR \| * `4aa9243ebe` swiotlb: fix debugfs reporting of reserved memory pools \| * `e6c69b06e7` swiotlb: relocate PageHighMem test away from rmem_swiotlb_setup \| * `36d087e49d` Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe \| * `ed90364b42` clk: qcom: dispcc-qcm2290: Remove inexistent DSI1PHY clk \| * `86d9cafdd8` clk: qcom: dispcc-qcm2290: get rid of test clock \| * `c3d4119fa5` clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling \| * `b75450f51c` clk: qcom: lpassaudiocc-sc7280: Add required gdsc power domain clks in lpass_cc_sc7280_desc \| * `0b421824ec` clk: qcom: lpasscc-sc7280: Skip qdsp6ss clock registration \| * `8f7f8d06af` iommu/amd: Set page size bitmap during V2 domain allocation \| * `c49a8c5c8b` NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease \| * `9b75bd4eef` clk: imx: imx8ulp: Fix XBAR_DIVBUS and AD_SLOW clock parents \| * `72ff6c1156` clk: imx: fracn-gppll: disable hardware select control \| * `b32bb99316` clk: imx: fracn-gppll: fix the rate table \| * `dce59b5443` IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests \| * `39d39bfb82` IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order \| * `4323aaedeb` RDMA/srpt: Add a check for valid 'mad_agent' pointer \| * `720c915a62` RDMA/cm: Trace icm_send_rej event before the cm state is reset \| * `40b4ad4c17` power: supply: rk817: Fix low SOC bugs \| * `8be358c804` clk: qcom: gcc-sm6115: Mark RCGs shared where applicable \| * `e70ce21939` RDMA/siw: Remove namespace check from siw_netdev_event() \| * `d3b2acaa14` clk: add missing of_node_put() in "assigned-clocks" property parsing \| * `a2b3eaaa97` power: supply: generic-adc-battery: fix unit scaling \| * `37f689d859` iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN \| * `9163a5b4ed` fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de() \| * `17048287ac` fs/ntfs3: Fix OOB read in indx_insert_into_buffer \| * `7898db22ed` fs/ntfs3: Add check for kmemdup \| * `1bc6bb657d` fs/ntfs3: Fix memory leak if ntfs_read_mft failed \| * `7d374becc0` RDMA/erdma: Use fixed hardware page size \| * `bb0433ae6f` rtc: k3: handle errors while enabling wake irq \| * `8a4e9482f4` rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time \| * `3ce0df3493` RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() \| * `5f5876ae29` rtc: omap: include header for omap_rtc_power_off_program prototype \| * `c3c2aee6f9` workqueue: Fix hung time report of worker pools \| * `8fbcfff083` clk: qcom: gcc-qcm2290: Fix up gcc_sdcc2_apps_clk_src \| * `bddbb3b9dc` RDMA/rdmavt: Delete unnecessary NULL check \| * `a6d8529dcf` clk: mediatek: mt8135: Properly use CLK_IS_CRITICAL flag \| * `d193c4aea3` clk: mediatek: mt7622: Properly use CLK_IS_CRITICAL flag \| * `2b18f12fe6` clk: mediatek: Consistently use GATE_MTK() macro \| * `6f24e8ef33` clk: mediatek: mt2712: Add error handling to clk_mt2712_apmixed_probe() \| * `23cc819125` RDMA/siw: Fix potential page_array out of range access \| * `d7c8d32e5d` IB/hifi1: add a null check of kzalloc_node in hfi1_ipoib_txreq_init \| * `a2290ed2af` clk: at91: clk-sam9x60-pll: fix return value check \| * `0489c2b2c3` tracing/user_events: Ensure write index cannot be negative \| * `6472a6d0c7` sched/rt: Fix bad task migration for rt tasks \| * `1969b143d0` riscv: Fix ptdump when KASAN is enabled \| * `e38f070a57` Revert "objtool: Support addition to set CFA base" \| * `2d44928903` perf/core: Fix hardlockup failure caused by perf throttle \| * `944465c772` sched/fair: Fix inaccurate tally of ttwu_move_affine \| * `46f773f39e` powerpc/rtas: use memmove for potentially overlapping buffer copy \| * `8bcecadabb` macintosh: via-pmu-led: requires ATA to be set \| * `5dae22c28f` powerpc/sysdev/tsi108: fix resource printk format warnings \| * `89e458456c` powerpc/wii: fix resource printk format warnings \| * `2f40b71e46` powerpc/mpc512x: fix resource printk format warning \| * `f9325ac52f` powerpc/perf: Properly detect mpc7450 family \| * `7c71aee351` macintosh/windfarm_smu_sat: Add missing of_node_put() \| * `c0f49bbb30` selftests/powerpc/pmu: Fix sample field check in the mmcra_thresh_marked_sample_test \| * `ae69d36d46` fbdev: mmp: Fix deferred clk handling in mmphw_probe() \| * `ce818ee162` virtio_ring: don't update event idx on get_buf \| * `428cc25270` spmi: Add a check for remove callback when removing a SPMI driver \| * `ec01408c0f` staging: rtl8192e: Fix W_DISABLE# does not work after stop/start \| * `7f43a5bde8` spi: cadence-quadspi: use macro DEFINE_SIMPLE_DEV_PM_OPS \| * `727e92fe13` serial: 8250: Add missing wakeup event reporting \| * `1ae3e5f202` tty: serial: fsl_lpuart: adjust buffer length to the intended size \| * `26d40b3fca` firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe \| * `f262734286` usb: mtu3: fix kernel panic at qmu transfer done irq handler \| * `17993a13b5` usb: chipidea: fix missing goto in `ci_hdrc_probe` \| * `94fa043a47` usb: gadget: tegra-xudc: Fix crash in vbus_draw \| * `6a1cfc3036` sh: sq: Fix incorrect element size for allocating bitmap buffer \| * `ef9f854103` uapi/linux/const.h: prefer ISO-friendly __typeof__ \| * `9bc5e54177` scripts/gdb: raise error with reduced debugging information \| * `06e661a259` i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path \| * `a712b5a952` i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path \| * `79acf7fb85` spi: cadence-quadspi: fix suspend-resume implementations \| * `eef4c4109a` drm/panel: novatek-nt35950: Only unregister DSI1 if it exists \| * `08e9653bb9` PCI/PM: Extend D3hot delay for NVIDIA HDA controllers \| * `402299cca8` ASoC: fsl_mqs: move of_node_put() to the correct location \| * `225e81c3af` drm/panel: novatek-nt35950: Improve error handling \| * `18e21fa199` coresight: etm_pmu: Set the module field \| * `f0b58720f2` cacheinfo: Check sib_leaf in cache_leaves_are_shared() \| * `8ba48e58ba` HID: amd_sfh: Handle "no sensors" enabled for SFH1.1 \| * `198474bef3` HID: amd_sfh: Increase sensor command timeout for SFH1.1 \| * `a5e4df860d` HID: amd_sfh: Correct the stop all command \| * `959f6ae96b` HID: amd_sfh: Add support for shutdown operation \| * `dac12293c7` HID: amd_sfh: Fix illuminance value \| * `e66a085d90` HID: amd_sfh: Correct the sensor enable and disable command \| * `269259b7c7` HID: amd_sfh: Correct the structure fields \| * `7035d8b73a` scripts/gdb: bail early if there are no generic PD \| * `ce81376364` scripts/gdb: bail early if there are no clocks \| * `15b29ac9b8` ia64: salinfo: placate defined-but-not-used warning \| * `f890f34a15` ia64: mm/contig: fix section mismatch warning/error \| * `ab0f424cd2` PCI/EDR: Clear Device Status after EDR error recovery \| * `3e28d59a5f` of: Fix modalias string generation \| * `d22b2a3572` vmci_host: fix a race condition in vmci_host_poll() causing GPF \| * `282efdf472` spi: fsl-spi: Fix CPM/QE mode Litte Endian \| * `55a32fd96e` interconnect: qcom: rpm: drop bogus pm domain attach \| * `2d0f63077f` spi: qup: Don't skip cleanup in remove's error path \| * `5e678bfebb` linux/vt_buffer.h: allow either builtin or modular for macros \| * `321946fa10` ASoC: es8316: Handle optional IRQ assignment \| * `873fff9fd6` PCI: imx6: Install the fault handler only on compatible match \| * `9de1183f3f` ASoC: soc-compress: Inherit atomicity from DAI link for Compress FE \| * `df23805209` usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition \| * `6d16305a15` spi: imx: Don't skip cleanup in remove's error path \| * `f6974fb204` spi: atmel-quadspi: Free resources even if runtime resume failed in .remove() \| * `d748e32026` spi: atmel-quadspi: Don't leak clk enable count in pm resume \| * `3eb8bebd02` serial: 8250_bcm7271: Fix arbitration handling \| * `1757621b87` iio: light: max44009: add missing OF device matching \| * `53cdfec251` fpga: bridge: fix kernel-doc parameter description \| * `c996ca87cf` serial: stm32: Re-assert RTS/DE GPIO in RS485 mode only if more data are transmitted \| * `3c5fafc27c` usb: dwc3: gadget: Change condition for processing suspend event \| * `cd5708f605` usb: host: xhci-rcar: remove leftover quirk handling \| * `9145880e8c` pstore: Revert pmsg_lock back to a normal mutex \| * `70ee7b8a6d` drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() \| * `2a50e44a66` drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() \| * `a616392011` ASoC: cs35l41: Only disable internal boost \| * `5eb0e23ab0` ipmi: ASPEED_BT_IPMI_BMC: select REGMAP_MMIO instead of depending on it \| * `cb52e7f24c` tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. \| * `0211342dd6` net: amd: Fix link leak when verifying config failed \| * `f040bee291` netlink: Use copy_to_user() for optval in netlink_getsockopt(). \| * `952030c914` Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" \| * `fc60067260` ipv4: Fix potential uninit variable access bug in __ip_make_skb() \| * `4fbefeab88` net/sched: sch_fq: fix integer overflow of "credit" \| * `8fa6c8dad4` net: dpaa: Fix uninitialized variable in dpaa_stop() \| * `6cf1d03a42` netfilter: nf_tables: don't write table validation state without mutex \| * `551a26668c` bpf: Don't EFAULT for getsockopt with optval=NULL \| * `c3fb321447` bpf: Fix race between btf_put and btf_idr walk. \| * `ad5b2cf5d1` net: stmmac:fix system hang when setting up tag_8021q VLAN for DSA ports \| * `fd40d2eb5e` net/mlx5e: Nullify table pointer when failing to create \| * `15968f6508` net/mlx5: Use recovery timeout on sync reset flow \| * `c63830a1cc` Revert "net/mlx5: Remove "recovery" arg from mlx5_load_one() function" \| * `c499593821` net/mlx5: Suspend auxiliary devices only in case of PCI device suspend \| * `d481a6800b` net/mlx5: Remove "recovery" arg from mlx5_load_one() function \| * `62fea2c2e4` net/mlx5e: Fix error flow in representor failing to add vport rx rule \| * `2ca9f9b837` net/mlx5: E-switch, Don't destroy indirect table in split rule \| * `8b5f696288` net/mlx5: E-switch, Create per vport table based on devlink encap mode \| * `c382b693ff` net/mlx5e: Don't clone flow post action attributes second time \| * `707a31951f` ixgbe: Enable setting RSS table to default values \| * `c8b37d2b5b` ixgbe: Allow flow hash to be set via ethtool \| * `37f64bc8e0` wifi: iwlwifi: fw: fix memory leak in debugfs \| * `80c5ba0078` netfilter: conntrack: fix wrong ct->timeout value \| * `6a62a2a09c` netfilter: conntrack: restore IPS_CONFIRMED out of nf_conntrack_hash_check_insert() \| * `d6e03af0a4` wifi: iwlwifi: mvm: check firmware response size \| * `180c4ae0de` wifi: mt76: connac: fix txd multicast rate setting \| * `d365e14483` wifi: mt76: mt7921e: stop chip reset worker in unregister hook \| * `741bf262bd` wifi: mt76: mt7921e: improve reliability of dma reset \| * `1ab837a342` wifi: mt76: mt7921: fix missing unwind goto in `mt7921u_probe` \| * `11181b6c86` mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data \| * `c42efff820` wifi: mt76: fix 6GHz high channel not be scanned \| * `c5cdab3c04` wifi: mt76: mt7921e: fix probe timeout after reboot \| * `27ce664b7f` wifi: mt76: add flexible polling wait-interval support \| * `710f3c7fb3` wifi: mt76: handle failure of vzalloc in mt7615_coredump_work \| * `9c036152ad` wifi: mt76: mt7915: expose device tree match table \| * `bd5121ef18` wifi: iwlwifi: make the loop for card preparation effective \| * `5611be6c3d` io_uring/rsrc: use nospec'ed indexes \| * `f1bd3414d9` jdb2: Don't refuse invalidation of already invalidated buffers \| * `f6b46f8438` wifi: iwlwifi: fw: move memset before early return \| * `6b345ddd49` wifi: iwlwifi: mvm: initialize seq variable \| * `243f6d6ba5` wifi: iwlwifi: yoyo: Fix possible division by zero \| * `7c31103f7f` wifi: iwlwifi: yoyo: skip dump correctly on hw error \| * `164acf216c` wifi: iwlwifi: mvm: don't drop unencrypted MCAST frames \| * `8f3382624c` md/raid10: don't call bio_start_io_acct twice for bio which experienced read error \| * `36ba0c7b86` md/raid10: fix memleak of md thread \| * `b21019a220` md/raid10: fix memleak for 'conf->bio_split' \| * `11141630f0` md/raid10: fix leak of 'r10bio->remaining' for recovery \| * `9050576bff` md/raid10: fix task hung in raid10d \| * `df6222b01f` f2fs: fix to check return value of inc_valid_block_count() \| * `2eb5d0165b` f2fs: fix to check return value of f2fs_do_truncate_blocks() \| * `a8091dc814` bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap \| * `339d14334a` wifi: iwlwifi: mvm: don't set CHECKSUM_COMPLETE for unsupported protocols \| * `6f14a94501` wifi: iwlwifi: trans: don't trigger d3 interrupt twice \| * `8e5d05ca15` wifi: iwlwifi: debug: fix crash in __iwl_err() \| * `6aa401a654` blk-mq: don't plug for head insertions in blk_execute_rq_nowait \| * `3c0b799346` selftests/bpf: Fix leaked bpf_link in get_stackid_cannot_attach \| * `67c81ecbf7` selftests/bpf: Use read_perf_max_sample_freq() in perf_event_stackmap \| * `160fcf5c6b` nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage" \| * `0f1c4ae80d` nvme: fix async event trace event \| * `1e4f23c61f` nvmet: fix I/O Command Set specific Identify Controller \| * `fd95ae3bb8` nvmet: fix Identify Active Namespace ID list handling \| * `4898a8d6b1` nvmet: fix Identify Controller handling \| * `4a7a14e87c` nvmet: fix Identify Namespace handling \| * `b743d68c9f` nvmet: fix error handling in nvmet_execute_identify_cns_cs_ns() \| * `1d4ac7b0ff` bpf, sockmap: fix deadlocks in the sockhash and sockmap \| * `cfc7ee210f` wifi: ath11k: fix writing to unintended memory region \| * `f43744872a` net: ethernet: stmmac: dwmac-rk: fix optional phy regulator handling \| * `c649bf43a2` net: ethernet: stmmac: dwmac-rk: rework optional clock handling \| * `e6f1ef4a53` scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() \| * `52c3d68d99` bpf/btf: Fix is_int_ptr() \| * `1f1267ce0b` wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table \| * `7d058f0ab1` f2fs: fix to avoid use-after-free for cached IPU bio \| * `3ee343914c` xsk: Fix unaligned descriptor validation \| * `8bc8e34e80` crypto: drbg - Only fail when jent is unavailable in FIPS mode \| * `81366e333c` bpftool: Fix bug for long instructions in program CFG dumps \| * `d199c2b394` selftests/bpf: Wait for receive in cg_storage_multi test \| * `751168d0d2` selftests: xsk: Deflakify STATS_RX_DROPPED test \| * `0ea59567d0` selftests: xsk: Disable IPv6 on VETH1 \| * `30a4ff7eb4` selftests: xsk: Use correct UMEM size in testapp_invalid_desc \| * `90d2f5225d` net: qrtr: correct types of trace event parameters \| * `a7f5be2ac0` f2fs: fix iostat lock protection \| * `bea3f8aa99` wifi: rt2x00: Fix memory leak when handling surveys \| * `828439964f` scsi: hisi_sas: Handle NCQ error when IPTT is valid \| * `cd94f74888` scsi: libsas: Add sas_ata_device_link_abort() \| * `f7871c9df1` wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() \| * `4eb666646c` wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() \| * `7f6714fc2a` crypto: sa2ul - Select CRYPTO_DES \| * `be42155499` crypto: caam - Clear some memory in instantiate_rng \| * `74f74c8b84` f2fs: fix scheduling while atomic in decompression path \| * `6604df2a9d` f2fs: compress: fix to call f2fs_wait_on_page_writeback() in f2fs_write_raw_pages() \| * `88fccb8d0c` f2fs: apply zone capacity to all zone type \| * `d9e30b8ed4` f2fs: fix uninitialized skipped_gc_rwsem \| * `61fbf097b7` f2fs: handle dqget error in f2fs_transfer_project_quota() \| * `10f7b4975b` net: sunhme: Fix uninitialized return code \| * `e3e55385fa` scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS \| * `770c3fd4d7` scsi: target: iscsit: Fix TAS handling during conn cleanup \| * `eacfe32c36` scsi: target: Fix multiple LUN_RESET handling \| * `cc84bbdde9` scsi: target: iscsit: Stop/wait on cmds during conn close \| * `edd9002071` scsi: target: iscsit: isert: Alloc per conn cmd counter \| * `b7ca8ded37` scsi: target: Pass in cmd counter to use during cmd setup \| * `741443436e` scsi: target: Move cmd counter allocation \| * `76b77646f1` scsi: target: Move sess cmd counter to new struct \| * `87ee7227cc` scsi: target: core: Change the way target_xcopy_do_work() sets restiction on max I/O \| * `f9361cf40b` bpf: Fix __reg_bound_offset 64->32 var_off subreg propagation \| * `2361aee1c5` netfilter: keep conntrack reference until IPsecv6 policy checks are done \| * `8d05f25475` net: dsa: qca8k: remove assignment of an_enabled in pcs_get_state() \| * `c997f28917` libbpf: Fix ld_imm64 copy logic for ksym in light skeleton. \| * `382310d9c8` net/packet: convert po->auxdata to an atomic flag \| * `3eae0f4c31` net/packet: convert po->origdev to an atomic flag \| * `f2d971608a` net/packet: annotate accesses to po->xmit \| * `c3ee3540a1` vlan: partially enable SIOCSHWTSTAMP in container \| * `07782db81e` net: pcs: xpcs: remove double-read of link state when using AN \| * `157c84b793` bpf: Remove misleading spec_v1 check on var-offset stack read \| * `b73438a4a6` selftests/bpf: Fix a fd leak in an error path in network_helpers.c \| * `0324300dce` wifi: ath11k: fix deinitialization of firmware resources \| * `af5265c64d` scm: fix MSG_CTRUNC setting condition for SO_PASSSEC \| * `1f1fba8b3a` crypto: qat - fix concurrency issue when device state changes \| * `a62ba7e0d2` bpf: fix precision propagation verbose logging \| * `0049d2edda` bpf: take into account liveness when propagating precision \| * `78eee85913` wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() \| * `154d4d630e` wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() \| * `1c8f46578d` tools: bpftool: Remove invalid \' json escape \| * `644df7e865` wifi: ath6kl: reduce WARN to dev_dbg() in callback \| * `0022a3936e` wifi: brcmfmac: support CQM RSSI notification with older firmware \| * `9354826c02` wifi: ath11k: fix SAC bug on peer addition with sta band migration \| * `76f9b0d6f0` wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() \| * `7e5f42abfc` wifi: ath5k: Use platform_get_irq() to get the interrupt \| * `7d3fd8da72` wifi: ath11k: Use platform_get_irq() to get the interrupt \| * `9b9356a301` wifi: ath9k: hif_usb: fix memory leak of remain_skbs \| * `1a59067bde` wifi: ath6kl: minor fix for allocation size \| * `830d79af9e` platform/chrome: cros_typec_switch: Add missing fwnode_handle_put() \| * `aefea3016a` hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E \| * `d29faefa8d` rpmsg: glink: Propagate TX failures in intentless mode as well \| * `2f51bac276` cpufreq: use correct unit when verify cur freq \| * `0985838a9c` ACPI: bus: Ensure that notify handlers are not running after removal \| * `290e26ec0d` tick/common: Align tick period with the HZ tick. \| * `0fe6ef82e4` drm/i915: Make intel_get_crtc_new_encoder() less oopsy \| * `fc2b20c092` debugobject: Prevent init race with static objects \| * `1d1735c6fb` media: mediatek: vcodec: add remove function for decoder platform driver \| * `c692a44bc5` media: mediatek: vcodec: fix decoder disable pm crash \| * `54e85ee2b4` perf/arm-cmn: Fix port detection for CMN-700 \| * `a8897bffca` arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step \| * `3df8a87394` x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() \| * `f25994f7a9` regulator: stm32-pwr: fix of_iomap leak \| * `16c7fcbfe0` media: venus: dec: Fix capture formats enumeration order \| * `1e229899e3` media: venus: dec: Fix handling of the start cmd \| * `b21a9a57c7` media: rc: gpio-ir-recv: Fix support for wake-up \| * `b75aaebac2` drm/amd/display: Fix potential null dereference \| * `fd22e8c8c3` media: hi846: Fix memleak in hi846_init_controls() \| * `893b267ccc` media: v4l: async: Return async sub-devices to subnotifier list \| * `45b7461d91` media: rcar_fdp1: Fix refcount leak in probe and remove function \| * `affad9e791` media: platform: mtk-mdp3: fix potential frame size overflow in mdp_try_fmt_mplane() \| * `5a72aea9ac` media: saa7134: fix use after free bug in saa7134_finidev due to race condition \| * `305262a23c` media: dm1105: Fix use after free bug in dm1105_remove due to race condition \| * `1495945f7c` platform/x86/amd: pmc: Move out of BIOS SMN pair for STB init \| * `1603a098b4` platform/x86/amd: pmc: Utilize SMN index 0 for driver probe \| * `f82af0dd22` platform/x86/amd: pmc: Move idlemask check into `amd_pmc_idlemask_read` \| * `4e6c35193a` platform/x86/amd: pmc: Don't dump data after resume from s0i3 on picasso \| * `abfb0ff870` platform/x86/amd: pmc: Hide SMU version and program attributes for Picasso \| * `d1dbf5b7ea` platform/x86/amd: pmc: Don't try to read SMU version on Picasso \| * `1c1798c45b` platform/x86/amd/pmf: Move out of BIOS SMN pair for driver probe \| * `6a17add9c6` media: rkvdec: fix use after free bug in rkvdec_remove \| * `2cdc8f729d` media: cedrus: fix use after free bug in cedrus_remove due to race condition \| * `231a6947ff` media: mediatek: vcodec: change lat thread decode error condition \| * `b02cd74741` media: mediatek: vcodec: making sure queue_work successfully \| * `60fe2a3d6d` media: mediatek: vcodec: remove unused lat_buf \| * `8be5ead0b3` media: mediatek: vcodec: add core decode done event \| * `894278b772` media: mediatek: vcodec: move lat_buf to the top of core list \| * `f08900ca36` media: mediatek: vcodec: using each instance lat_buf count replace core ready list \| * `8aae2e6444` media: mediatek: vcodec: add params to record lat and core lat_buf count \| * `01dc8f41fc` media: mediatek: vcodec: Force capture queue format to MM21 \| * `4d5c8a8916` media: mediatek: vcodec: Make MM21 the default capture format \| * `5c4cc91b77` media: mediatek: vcodec: Use 4K frame size when supported by stateful decoder \| * `0333177548` arm64: dts: sc7280: Rename qspi data12 as data23 \| * `edbbd78148` arm64: dts: sc7180: Rename qspi data12 as data23 \| * `39f6de10df` arm64: dts: qcom: msm8994-angler: removed clash with smem_region \| * `57aa05d59b` arm64: dts: qcom: msm8994-angler: Fix cont_splash_mem mapping \| * `7eaa457d1e` x86/apic: Fix atomic update of offset in reserve_eilvt_offset() \| * `849ab4cf18` regulator: core: Avoid lockdep reports when resolving supplies \| * `fd092b355a` regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() \| * `d2151c5d9d` drm/ttm/pool: Fix ttm_pool_alloc error path \| * `5e5a4185c6` drm/ttm: optimize pool allocations a bit v2 \| * `dfd1c26e40` arm64: dts: qcom: apq8096-db820c: drop unit address from PMI8994 regulator \| * `3a0c0f7c2f` arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator \| * `3c8cb6155a` arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator \| * `f3694202d9` arm64: dts: qcom: sc7180-trogdor-pazquel: correct trackpad supply \| * `f89b2591bb` arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply \| * `d7d13d353a` arm64: dts: qcom: sc7280-herobrine-villager: correct trackpad supply \| * `958c6cbc32` gpu: host1x: Fix memory leak of device names \| * `b81cfee967` gpu: host1x: Fix potential double free if IOMMU is disabled \| * `62cb9c468d` soc: renesas: renesas-soc: Release 'chipid' from ioremap() \| * `724911eeae` soc: bcm: brcmstb: biuctrl: fix of_iomap leak \| * `4cf71779ea` mailbox: mpfs: switch to txdone_poll \| * `41a51318ab` drm/mediatek: dp: Change the aux retries times when receiving AUX_DEFER \| * `e80c69eb79` drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() \| * `a260921b81` ACPI: VIOT: Initialize the correct IOMMU fwspec \| * `1a258bfa00` arm64: dts: mediatek: mt8192-asurada: Fix voltage constraint for Vgpu \| * `82f6ffb8e0` cpufreq: qcom-cpufreq-hw: Revert adding cpufreq qos \| * `2e8aad9cd5` cpufreq: mediatek: Raise proc and sram max voltage for MT7622/7623 \| * `9a5fa6333f` cpufreq: mediatek: raise proc/sram max voltage for MT8516 \| * `4bacdbd7d9` cpufreq: mediatek: fix KP caused by handler usage after regulator_put/clk_put \| * `bd1c006872` cpufreq: mediatek: fix passing zero to 'PTR_ERR' \| * `f977dbefea` arm64: dts: apple: t8103: Disable unused PCIe ports \| * `eb617ab023` ARM: dts: stm32: fix spi1 pin assignment on stm32mp15 \| * `7ff92db0dd` perf/arm-cmn: Move overlapping wp_combine field \| * `198ca89dea` firmware: arm_scmi: Fix xfers allocation on Rx channel \| * `da3babe96b` ARM: dts: gta04: fix excess dma channel usage \| * `fd67875eba` drm: rcar-du: Fix a NULL vs IS_ERR() bug \| * `46a1c9ba90` arm64: dts: qcom: sm8450: fix pcie1 gpios properties name \| * `98893ae40b` mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data \| * `1975bf0259` ACPI: processor: Fix evaluating _PDC method when running as Xen dom0 \| * `a24194121e` drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings \| * `acd8f2efa2` arm64: dts: qcom: sm8350-microsoft-surface: fix USB dual-role mode property \| * `577a64725b` virt/coco/sev-guest: Double-buffer messages \| * `0289170151` drm: msm: adreno: Disable preemption on Adreno 510 \| * `a8d2b46954` drm/msm/adreno: drop bogus pm_runtime_set_active() \| * `a9b3ef13eb` arm64: dts: ti: k3-am62a7: Correct L2 cache size to 512KB \| * `fe9dc0a264` arm64: dts: ti: k3-am625: Correct L2 cache size to 512KB \| * `1e9fc6c473` media: max9286: Free control handler \| * `052d22acd7` drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 \| * `1f141fe515` firmware: qcom_scm: Clear download bit during reboot \| * `423350af9e` media: av7110: prevent underflow in write_ts_to_decoder() \| * `0883003ffb` media: amphion: decoder implement display delay enable \| * `51fc1880e4` media: platform: mtk-mdp3: Add missing check and free for ida_alloc \| * `c2e5548173` media: bdisp: Add missing check for create_workqueue \| * `ba8ffb1251` x86/MCE/AMD: Use an u64 for bank_map \| * `c0a8025c74` ARM: dts: qcom: sdx55: Fix the unit address of PCIe EP node \| * `2b5325f9cc` ARM: dts: qcom: ipq8064: Fix the PCI I/O port range \| * `2ebb3f120e` ARM: dts: qcom: ipq4019: Fix the PCI I/O port range \| * `671c3a4d7d` arm64: dts: qcom: sm8450: Fix the PCI I/O port range \| * `5334324f09` arm64: dts: qcom: sm8150: Fix the PCI I/O port range \| * `be81014936` arm64: dts: qcom: sm8250: Fix the PCI I/O port range \| * `87397ffbc9` arm64: dts: qcom: msm8996: Fix the PCI I/O port range \| * `c8178285ba` arm64: dts: qcom: ipq6018: Fix the PCI I/O port range \| * `7803b357d9` arm64: dts: qcom: ipq8074: Fix the PCI I/O port range \| * `ec67a4ef28` arm64: dts: qcom: sc7280: Fix the PCI I/O port range \| * `a35d6fdd7f` arm64: dts: qcom: msm8998: Fix the PCI I/O port range \| * `6035794dd2` arm64: dts: qcom: sdm845: Fix the PCI I/O port range \| * `44018ad5f2` arm64: dts: qcom: sdm845: correct dynamic power coefficients \| * `7cb0802954` arm64: dts: qcom: sc7280: fix EUD port properties \| * `bd90d249bc` arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name \| * `6c6a69f822` arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename \| * `1be866857a` arm64: dts: broadcom: bcmbca: bcm4908: fix LED nodenames \| * `c0454f814b` arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name \| * `93c22d107a` arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property \| * `5ea54b26d6` arm64: dts: ti: k3-am62a7-sk: Fix DDR size to full 4GB \| * `5d77e665ee` arm64: dts: ti: k3-am62-main: Fix GPIO numbers in DT \| * `d585d1072e` regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted \| * `36ecd6c6ed` ARM: dts: qcom-apq8064: Fix opp table child name \| * `6006310a47` EDAC/skx: Fix overflows on the DRAM row address mapping arrays \| * `2c8c8398e1` drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources \| * `6524d3d587` drm/mediatek: dp: Only trigger DRM HPD events if bridge is attached \| * `6fcfd2861f` arm64: dts: renesas: r9a07g043: Update IRQ numbers for SSI channels \| * `14c480b2f3` arm64: dts: renesas: r9a07g043: Introduce SOC_PERIPHERAL_IRQ() macro to specify interrupt property \| * `e83e635bec` arm64: dts: renesas: r9a07g054: Update IRQ numbers for SSI channels \| * `684fecd4f3` arm64: dts: renesas: r9a07g044: Update IRQ numbers for SSI channels \| * `dc062516db` arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table \| * `c82f50e55f` arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table \| * `6dbcc493a1` soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe \| * `f5222fbd79` tools/x86/kcpuid: Fix avx512bw and avx512lvl fields in Fn00000007 \| * `78e32896ec` drm/amdgpu: register a vga_switcheroo client for MacBooks with apple-gmux \| * `809a3fb8d8` drm/probe-helper: Cancel previous job before starting new one \| * `6bd38a1454` drm/vgem: add missing mutex_destroy \| * `46473f3bd1` drm/i915/dg2: Drop one PCI ID \| * `86a77cef09` drm/rockchip: Drop unbalanced obj unref \| * `0955b8eac3` erofs: fix potential overflow calculating xattr_isize \| * `50f1c1fba0` erofs: initialize packed inode after root inode is assigned \| * `7ee7a86e28` erofs: stop parsing non-compact HEAD index if clusterofs is invalid \| * `fe2f093b05` tpm, tpm_tis: Claim locality when interrupts are reenabled on resume \| * `380f9f79b4` tpm, tpm: Implement usage counter for locality \| * `71becf3ffe` tpm, tpm_tis: Claim locality before writing interrupt registers \| * `0085052a2c` tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed \| * `10eea3cfda` tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register \| * `12839c326a` tpm, tpm_tis: Do not skip reset of original interrupt vector \| * `784c206c66` selinux: ensure av_permissions.h is built when needed \| * `5453f22911` selinux: fix Makefile dependencies of flask.h \| * `74f77a799d` selftests/resctrl: Check for return value after write_schemata() \| * `bceef0c7f6` selftests/resctrl: Allow ->setup() to return errors \| * `7a570dda1d` selftests/resctrl: Move ->setup() call outside of test specific branches \| * `0bf90aac43` selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem \| * `ae6803b663` rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check \| * `05f437eba0` kunit: fix bug in the order of lines in debugfs logs \| * `9ad3b38677` kunit: improve KTAP compliance of KUnit test output \| * `d0e2f01b53` ASoC: dt-bindings: qcom,lpass-rx-macro: correct minItems for clocks \| * `a2cbb1a45a` bus: mhi: host: Range check CHDBOFF and ERDBOFF \| * `4afe300afb` bus: mhi: host: Use mhi_tryset_pm_state() for setting fw error state \| * `cc3e7c0333` bus: mhi: host: Remove duplicate ee check for syserr \| * `a6f5c84b41` cxl/hdm: Fail upon detecting 0-sized decoders \| * `0ae98a8b4f` xfs: don't consider future format versions valid \| * `2b2515b809` ceph: fix potential use-after-free bug when trimming caps \| * `9f565752b3` ubifs: Fix memory leak in do_rename \| * `29738e1bcc` ubifs: Free memory for tmpfile name \| * `884e961674` ubi: Fix return value overwrite issue in try_write_vid_and_data() \| * `ef9aac6036` ubifs: Fix memleak when insert_old_idx() failed \| * `18c2346856` Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path" \| * `ccfe866220` RISC-V: Align SBI probe implementation with spec \| * `f8076d2a7f` iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE \| * `f455c9cb9e` drm/amd/pm: re-enable the gfx imu when smu resume \| * `d78777c1d4` swsmu/amdgpu_smu: Fix the wrong if-condition \| * `d79d3430e1` tracing: Fix permissions for the buffer_percent file \| * `339dd534f2` riscv: mm: remove redundant parameter of create_fdt_early_page_table \| * `3c96dd239a` i2c: omap: Fix standard mode false ACK readings \| * `142a975738` ACPI: video: Remove acpi_backlight=video quirk for Lenovo ThinkPad W530 \| * `18973b73fa` ksmbd: fix deadlock in ksmbd_find_crypto_ctx() \| * `1f04905865` ksmbd: not allow guest user on multichannel \| * `c3a3259675` ksmbd: fix memleak in session setup \| * `a70751dd7b` ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() \| * `b80422474f` ksmbd: call rcu_barrier() in ksmbd_server_exit() \| * `bd80d35725` ksmbd: fix racy issue under cocurrent smb2 tree disconnect \| * `cec378687a` KVM: RISC-V: Retry fault if vma_lookup() results become invalid \| * `e43cf7abec` drm/amd/display: fix a divided-by-zero error \| * `09c41688b6` drm/amd/display: fix PSR-SU/DSC interoperability support \| * `2abff94db2` drm/amd/display: limit timing for single dimm memory \| * `5e1574aa06` drm/amd/display: Remove stutter only configurations \| * `f6ee841ff2` relayfs: fix out-of-bounds access in relay_file_read \| * `5bd77c2393` KVM: arm64: vgic: Don't acquire its_lock before config_lock \| * `569f33c3c2` KVM: arm64: Use config_lock to protect vgic state \| * `2b57af7bb9` KVM: arm64: Use config_lock to protect data ordered against KVM_RUN \| * `6c9d3f2a5e` KVM: arm64: Avoid lock inversion when setting the VM register width \| * `36e0c405b8` KVM: arm64: Avoid vcpu->mutex v. kvm->lock inversion in CPU_ON \| * `f01c5f1ae9` KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted \| * `eae127cd2c` reiserfs: Add security prefix to xattr name in reiserfs_security_write() \| * `c8a3341b33` rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed \| * `c0bf94154c` crypto: ccp - Don't initialize CCP for PSP 0x1649 \| * `b952a9cf3d` crypto: arm64/aes-neonbs - fix crash with CFI enabled \| * `4d9d2fd867` crypto: safexcel - Cleanup ring IRQ workqueues on load failure \| * `42ca037d0c` crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON() \| * `d9834abd8b` ring-buffer: Sync IRQ works before buffer destruction \| * `ad7cc2a29e` ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus \| * `cb99866895` pinctrl: qcom: lpass-lpi: set output value before enabling output \| * `956bbf1871` soundwire: qcom: correct setting ignore bit on v1.5.1 \| * `c2c563c137` pwm: meson: Fix g12a ao clk81 name \| * `f7e930b179` pwm: meson: Fix axg ao mux parents \| * `1b0341e8fb` wifi: mt76: add missing locking to protect against concurrent rx/status calls \| * `b9f6845a49` kheaders: Use array declaration instead of char \| * `9fd4768b09` iio: addac: stx104: Fix race condition for stx104_write_raw() \| * `c38a4eb8aa` iio: addac: stx104: Fix race condition when converting analog-to-digital \| * `44847a506e` ipmi: fix SSIF not responding under certain cond. \| * `aeff5808f1` ipmi:ssif: Add send_retries increment \| * `a6b54af407` MIPS: fw: Allow firmware to pass a empty env \| * `7f3340bf06` fs: fix sysctls.c built \| * `3e7b8a723b` tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem \| * `c94e5baa98` serial: max310x: fix IO data corruption in batched operations \| * `65fdabefd9` serial: 8250: Fix serial8250_tx_empty() race with DMA Tx \| * `719a2f969b` serial: fix TIOCSRS485 locking \| * `27df5bca96` xhci: fix debugfs register accesses while suspended \| * `7fb0b81e85` tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH \| * `ad44530d46` staging: iio: resolver: ads1210: fix config mode \| * `64ef787bb1` blk-crypto: make blk_crypto_evict_key() more robust \| * `26632a5382` blk-crypto: make blk_crypto_evict_key() return void \| * `7d206ec7a0` blk-mq: release crypto keyslot before reporting I/O complete \| * `3b5fbb8219` blk-crypto: Add a missing include directive \| * `5ca1668a9f` blk-crypto: move internal only declarations to blk-crypto-internal.h \| * `3aab3abb85` blk-crypto: add a blk_crypto_config_supported_natively helper \| * `f0efb23651` blk-crypto: don't use struct request_queue for public interfaces \| * `316ad076e0` blk-stat: fix QUEUE_FLAG_STATS clear \| * `3285613127` media: ov8856: Do not check for for module version \| * `bccf9fe296` posix-cpu-timers: Implement the missing timer_wait_running callback \| * `1408d27f25` tpm: Add !tpm_amd_is_rng_defective() to the hwrng_unregister() call site \| * `ee508dfbaf` hwmon: (adt7475) Use device_property APIs when configuring polarity \| * `d899ae3e76` hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write \| * `986bd947bc` USB: dwc3: fix runtime pm imbalance on unbind \| * `d4b1e04d27` USB: dwc3: fix runtime pm imbalance on probe errors \| * `befdcb8e88` usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive \| * `491d32c896` usb: gadget: udc: core: Prevent redundant calls to pullup \| * `f6aaeacf05` usb: gadget: udc: core: Invoke usb_gadget_connect only when started \| * `5b6c295947` IMA: allow/fix UML builds \| * `38a42842a6` phy: qcom-qmp-pcie: sc8180x PCIe PHY has 2 lanes \| * `5c274804e2` PCI: qcom: Fix the incorrect register usage in v2.7.0 config \| * `58e56aa838` PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock \| * `a071769560` PCI: kirin: Select REGMAP_MMIO \| * `6e5bf8c9f7` powerpc/boot: Fix boot wrapper code generation with CONFIG_POWER10_CPU \| * `4403c7b7e5` arm64: Stash shadow stack pointer in the task struct on interrupt \| * `2dd0f8994d` arm64: Always load shadow stack pointer directly from the task struct \| * `06003e3975` ASoC: amd: ps: update the acp clock source. \| * `f9dc736e68` ASoC: amd: fix ACP version typo mistake \| * `f66cd99959` wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset \| * `24d158856c` wireguard: timers: cast enum limits members to int in prints \| * `103f618cee` x86/cpu: Add model number for Intel Arrow Lake processor \| * `88b9e97c14` asm-generic/io.h: suppress endianness warnings for readq() and writeq() \| * `5ded8299b7` tracing: Error if a trace event has an array for a __field() \| * `324b854ce4` wifi: ath11k: reduce the MHI timeout to 20s \| * `cde9040428` platform/x86: thinkpad_acpi: Add missing T14s Gen1 type to s2idle quirk list \| * `7e26bfb49d` net: sfp: add quirk enabling 2500Base-x for HG MXPD-483II \| * `388764ea64` scsi: mpi3mr: Handle soft reset in progress fault code (0xF002) \| * `0ac10535ae` selftests mount: Fix mount_setattr_test builds failed \| * `ec6f22171d` net: wwan: t7xx: do not compile with -Werror \| * `c58f26bdee` ASoC: da7213.c: add missing pm_runtime_disable() \| * `e373f76e20` ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 \| * `372bec6747` iio: adc: palmas_gpadc: fix NULL dereference on rmmod \| * `c81f5c8b8c` ASoC: amd: yc: Add DMI entries to support Victus by HP Laptop 16-e1xxx (8A22) \| * `32aae78314` x86/hyperv: Block root partition functionality in a Confidential VM \| * `5c7648e96d` ASoC: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm \| * `a89c7b86b5` ASoC: Intel: soc-acpi: add table for Intel 'Rooks County' NUC M15 \| * `4f7b42a9bf` ASOC: Intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15 * \| `473e97f66c` ANDROID: add Android KABI build files to root .gitignore file * \| `db91e7bd8c` ANDROID: add more gki_module headers to .gitignore file * \| `9fcc8018f0` Merge 6.1.27 into android14-6.1-lts \|\\| \| * `ca48fc16c4` Linux 6.1.27 \| * `0bbec73fdd` riscv: No need to relocate the dtb as it lies in the fixmap region \| * `17509e73ac` riscv: Do not set initial_boot_params to the linear address of the dtb \| * `ed96b31435` riscv: Move early dtb mapping into the fixmap region \| * `7cb8c95c0a` driver core: Don't require dynamic_debug for initcall_debug probe timing \| * `ce0555352a` USB: serial: option: add UNISOC vendor and TOZED LT70C product \| * `17e5ce4d89` btrfs: fix uninitialized variable warnings \| * `47e6893a5b` bluetooth: Perform careful capability checks in hci_sock_ioctl() \| * `c4acbf3761` gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xNU \| * `d27acf15c8` drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var \| * `e29661611e` wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() \| * `34cec5cd7a` mptcp: fix accept vs worker race \| * `b45d8f5375` mptcp: stops worker on unaccepted sockets at listener close \| * `862ea63fad` mm/mempolicy: fix use-after-free of VMA iterator \| * `e1562cc202` KVM: arm64: Retry fault if vma_lookup() results become invalid \| * `d70f63be62` phy: phy-brcm-usb: Utilize platform_get_irq_byname_optional() \| * `7d057bf201` um: Only disable SSE on clang to work around old GCC bugs * \| `da95c44967` Merge branch android14-6.1 into android14-6.1-lts * \| `b6c9bd5fa6` Merge 6.1.26 into android14-6.1-lts \|/ * `ca1c9012c9` Linux 6.1.26 * `ab91b09f39` ASN.1: Fix check for strdup() success * `1831d8cbae` ASoC: fsl_sai: Fix pins setting for i.MX8QM platform * `6cb818ed5f` ASoC: fsl_asrc_dma: fix potential null-ptr-deref * `7a6593b5d7` ASoC: SOF: pm: Tear down pipelines only if DSP was active * `b528537d13` mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock * `71b6df69f1` fpga: bridge: properly initialize bridge device before populating children * `f8c3eb751a` iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() * `342c1db4fa` Input: pegasus-notetaker - check pipe type when probing * `a93c20f583` gcc: disable '-Warray-bounds' for gcc-13 too * `a09b9383b7` sctp: Call inet6_destroy_sock() via sk->sk_destruct(). * `a530b33fe9` dccp: Call inet6_destroy_sock() via sk->sk_destruct(). * `a8cf114105` inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy(). * `588d682251` purgatory: fix disabling debug info * `7ca973d830` fuse: always revalidate rename target dentry * `f9a20ef5e8` MIPS: Define RUNTIME_DISCARD_EXIT in LD script * `8d6a870a42` KVM: arm64: Fix buffer overflow in kvm_arm_set_fw_reg() * `9e7976c0cd` KVM: arm64: Make vcpu flag updates non-preemptible * `d362a03d92` sched/fair: Fixes for capacity inversion detection * `799c7301de` sched/fair: Consider capacity inversion in util_fits_cpu() * `fe1c982958` sched/fair: Detect capacity inversion * `7e6631f782` mm/mmap: regression fix for unmapped_area{_topdown} * `059f24aff6` mm: page_alloc: skip regions with hugetlbfs pages when allocating 1G pages * `bd6f3421a5` mm: kmsan: handle alloc failures in kmsan_vmap_pages_range_noflush() * `433a7ecaed` mm: kmsan: handle alloc failures in kmsan_ioremap_page_range() * `e8a7bdb6f7` mm/huge_memory.c: warn with pr_warn_ratelimited instead of VM_WARN_ON_ONCE_FOLIO * `519dbe737f` mm/khugepaged: check again on anon uffd-wp during isolation * `cc647e05db` mm/userfaultfd: fix uffd-wp handling for THP migration entries Change-Id: I350bd9237fc904298f9b2c6756a227389bcf722e Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-10-26 17:34:36 +00:00
Greg Kroah-Hartman	41aa552887	Revert "crypto: api - Use work queue in crypto_destroy_instance" This reverts commit `c4cb61c5f9` which is commit 9ae4577bc077a7e32c3c7d442c95bc76865c0f17 upstream. It breaks the Android ABI and if it is needed in the future, can be brought back in an abi-safe way. Bug: 161946584 Change-Id: Icc26bcbe08b4d0b48cfae0be695a453531b9db50 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-10-12 12:03:37 +00:00
Azeem Shaikh	ad58d7ebbf	crypto: lrw,xts - Replace strlcpy with strscpy [ Upstream commit babb80b3ecc6f40c962e13c654ebcd27f25ee327 ] strlcpy() reads the entire source buffer first. This read may exceed the destination size limit. This is both inefficient and can lead to linear read overflows if a source string is not NUL-terminated [1]. In an effort to remove strlcpy() completely [2], replace strlcpy() here with strscpy(). Direct replacement is safe here since return value of -errno is used to check for truncation instead of sizeof(dest). [1] https://www.kernel.org/doc/html/latest/process/deprecated.html#strlcpy [2] https://github.com/KSPP/linux/issues/89 Signed-off-by: Azeem Shaikh <azeemshaikh38@gmail.com> Reviewed-by: Kees Cook <keescook@chromium.org> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-09-23 11:11:01 +02:00
Greg Kroah-Hartman	dbb69752f7	This is the 6.1.53 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmUBaBUACgkQONu9yGCS aT6OkBAArqBSUyCYQJrhoUlFYBnBqF7BLSkj0GwINGSUOlt5ilJ3kZwH9ftjvpWp ZtO0Rp/1yH2H5PpcsaLljPl055Sf30e0oCkz6vX16vy17NGnzI4rJi55+nRZbFRH tBMhMjblgIJoTiTPEQPSGghENok+QzJ9Imffo4/Wru3w5ytkBnGcPPXreHJw+8V5 Pjhzg5tcjhz23rk2wzVtR4VfEqWaHQaapv49rKB1Yls578WYn4QXl4jgUyB7rCo7 9vBB7xy77H1hr9m8ifB/9v1ToV/vw6L1xGPWWWbhsSikFAMBoq34SCsq+6RdeURo 43CCcFsx1s5acM7NQWvxkoV5Hgl8Hc3WgFsx5eVBlNd+vS6ezkgdYuGmN76t+dF/ hZ7XGEoEFuoz9NKQC/5rKjdBd2p/IQYx6vf8EpK0IxFPD4h+DY9pn0FvwuAmxAcA M41xLYGbXX5l/QJR016B1AYiB3DqVxRRRyQT0yNip+PDAh2N06MOJ84KgMSR9lg7 jyeFKZM2vQ619RopMIspuHTWxNiMw7x94aUhBnY1oD+fDzaRn+VNL8po6QYHLK8U QTDhrWplTbTuGIF72h+1IyX1aUj6ozoCewl9Y9ry1u9jBb7LZoupVd0s1dwqORIk 2OSo74pDu5F2BT+4hEcCpDRcYvWlfKbZWBunRrMqvHN8BON0Mks= =aFyS -----END PGP SIGNATURE----- Merge 6.1.53 into android14-6.1-lts Changes in 6.1.53 Revert "bridge: Add extack warning when enabling STP in netns." Partially revert "drm/amd/display: Fix possible underflow for displays with large vblank" scsi: ufs: Try harder to change the power mode Revert "Revert drm/amd/display: Enable Freesync Video Mode by default" ARM: dts: imx: Set default tuning step for imx7d usdhc ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP platform powerpc/boot: Disable power10 features after BOOTAFLAGS assignment media: uapi: HEVC: Add num_delta_pocs_of_ref_rps_idx field Revert "MIPS: unhide PATA_PLATFORM" phy: qcom-snps-femto-v2: use qcom_snps_hsphy_suspend/resume error code media: amphion: use dev_err_probe media: pulse8-cec: handle possible ping error media: pci: cx23885: fix error handling for cx23885 ATSC boards 9p: virtio: fix unlikely null pointer deref in handle_rerror 9p: virtio: make sure 'offs' is initialized in zc_request ksmbd: fix out of bounds in smb3_decrypt_req() ksmbd: validate session id and tree id in compound request ksmbd: no response from compound read ksmbd: fix out of bounds in init_smb2_rsp_hdr() ASoC: da7219: Flush pending AAD IRQ when suspending ASoC: da7219: Check for failure reading AAD IRQ events ASoC: nau8821: Add DMI quirk mechanism for active-high jack-detect ethernet: atheros: fix return value check in atl1c_tso_csum() m68k: Fix invalid .section syntax s390/dasd: use correct number of retries for ERP requests s390/dasd: fix hanging device after request requeue fs/nls: make load_nls() take a const parameter ASoC: rt5682-sdw: fix for JD event handling in ClockStop Mode0 ASoc: codecs: ES8316: Fix DMIC config ASoC: rt711: fix for JD event handling in ClockStop Mode0 ASoC: rt711-sdca: fix for JD event handling in ClockStop Mode0 ASoC: atmel: Fix the 8K sample parameter in I2SC master ALSA: usb-audio: Add quirk for Microsoft Modern Wireless Headset platform/x86: intel: hid: Always call BTNL ACPI method platform/x86/intel/hid: Add HP Dragonfly G2 to VGBS DMI quirks platform/x86: think-lmi: Use kfree_sensitive instead of kfree platform/x86: asus-wmi: Fix setting RGB mode on some TUF laptops platform/x86: huawei-wmi: Silence ambient light sensor drm/amd/smu: use AverageGfxclkFrequency* to replace previous GFX Curr Clock drm/amd/display: Guard DCN31 PHYD32CLK logic against chip family drm/amd/display: Exit idle optimizations before attempt to access PHY ovl: Always reevaluate the file signature for IMA ata: pata_arasan_cf: Use dev_err_probe() instead dev_err() in data_xfer() ALSA: usb-audio: Update for native DSD support quirks staging: fbtft: ili9341: use macro FBTFT_REGISTER_SPI_DRIVER security: keys: perform capable check only on privileged operations kprobes: Prohibit probing on CFI preamble symbol clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM vmbus_testing: fix wrong python syntax for integer value comparison Revert "wifi: ath6k: silence false positive -Wno-dangling-pointer warning on GCC 12" net: dsa: microchip: KSZ9477 register regmap alignment to 32 bit boundaries net: annotate data-races around sk->sk_{rcv\|snd}timeo net: usb: qmi_wwan: add Quectel EM05GV2 wifi: brcmfmac: Fix field-spanning write in brcmf_scan_params_v2_to_v1() powerpc/powermac: Use early_* IO variants in via_calibrate_decr() idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM platform/x86/amd/pmf: Fix unsigned comparison with less than zero scsi: lpfc: Remove reftag check in DIF paths scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock net: hns3: restore user pause configure when disable autoneg drm/amdgpu: Match against exact bootloader status wifi: cfg80211: remove links only on AP wifi: mac80211: Use active_links instead of valid_links in Tx netlabel: fix shift wrapping bug in netlbl_catmap_setlong() bnx2x: fix page fault following EEH recovery cifs: fix sockaddr comparison in iface_cmp cifs: fix max_credits implementation sctp: handle invalid error codes without calling BUG() scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity scsi: storvsc: Always set no_report_opcodes scsi: lpfc: Fix incorrect big endian type assignment in bsg loopback path LoongArch: Let pmd_present() return true when splitting pmd LoongArch: Fix the write_fcsr() macro ALSA: seq: oss: Fix racy open/close of MIDI devices net: sfp: handle 100G/25G active optical cables in sfp_parse_support tracing: Introduce pipe_cpumask to avoid race on trace_pipes platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications of: property: Simplify of_link_to_phandle() cpufreq: intel_pstate: set stale CPU frequency to minimum crypto: rsa-pkcs1pad - Use helper to set reqsize tpm: Enable hwrng only for Pluton on AMD CPUs KVM: x86/mmu: Use kstrtobool() instead of strtobool() KVM: x86/mmu: Add "never" option to allow sticky disabling of nx_huge_pages net: Avoid address overwrite in kernel_connect drm/amd/display: ensure async flips are only accepted for fast updates udf: Check consistency of Space Bitmap Descriptor udf: Handle error when adding extent to a file Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN Revert "PCI: tegra194: Enable support for 256 Byte payload" Revert "net: macsec: preserve ingress frame ordering" tools lib subcmd: Add install target tools lib subcmd: Make install_headers clearer tools lib subcmd: Add dependency test to install_headers tools/resolve_btfids: Use pkg-config to locate libelf tools/resolve_btfids: Install subcmd headers tools/resolve_btfids: Alter how HOSTCC is forced tools/resolve_btfids: Compile resolve_btfids as host program tools/resolve_btfids: Tidy HOST_OVERRIDES tools/resolve_btfids: Pass HOSTCFLAGS as EXTRA_CFLAGS to prepare targets tools/resolve_btfids: Fix setting HOSTCFLAGS reiserfs: Check the return value from __getblk() eventfd: prevent underflow for eventfd semaphores fs: Fix error checking for d_hash_and_lookup() iomap: Remove large folio handling in iomap_invalidate_folio() tmpfs: verify {g,u}id mount options correctly selftests/harness: Actually report SKIP for signal tests vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing ARM: ptrace: Restore syscall restart tracing ARM: ptrace: Restore syscall skipping for tracers refscale: Fix uninitalized use of wait_queue_head_t OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd() selftests/resctrl: Add resctrl.h into build deps selftests/resctrl: Don't leak buffer in fill_cache() selftests/resctrl: Unmount resctrl FS if child fails to run benchmark selftests/resctrl: Close perf value read fd on errors arm64/ptrace: Clean up error handling path in sve_set_common() sched/psi: Select KERNFS as needed x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved arm64/sme: Don't use streaming mode to probe the maximum SME VL arm64/fpsimd: Only provide the length to cpufeature for xCR registers sched/rt: Fix sysctl_sched_rr_timeslice intial value perf/imx_ddr: don't enable counter0 if none of 4 counters are used selftests/futex: Order calls to futex_lock_pi s390/pkey: fix/harmonize internal keyblob headers s390/pkey: fix PKEY_TYPE_EP11_AES handling in PKEY_GENSECK2 IOCTL s390/pkey: fix PKEY_TYPE_EP11_AES handling for sysfs attributes s390/paes: fix PKEY_TYPE_EP11_AES handling for secure keyblobs irqchip/loongson-eiointc: Fix return value checking of eiointc_index ACPI: x86: s2idle: Post-increment variables when getting constraints ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table thermal/of: Fix potential uninitialized value access cpufreq: amd-pstate-ut: Remove module parameter access cpufreq: amd-pstate-ut: Fix kernel panic when loading the driver x86/efistub: Fix PCI ROM preservation in mixed mode cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit() selftests/bpf: Fix bpf_nf failure upon test rerun bpftool: use a local copy of perf_event to fix accessing :: Bpf_cookie bpftool: Define a local bpf_perf_link to fix accessing its fields bpftool: Use a local copy of BPF_LINK_TYPE_PERF_EVENT in pid_iter.bpf.c bpftool: Use a local bpf_perf_event_value to fix accessing its fields libbpf: Fix realloc API handling in zero-sized edge cases bpf: Clear the probe_addr for uprobe bpf: Fix an error in verifying a field in a union crypto: qat - change value of default idle filter tcp: tcp_enter_quickack_mode() should be static hwrng: nomadik - keep clock enabled while hwrng is registered hwrng: pic32 - use devm_clk_get_enabled regmap: rbtree: Use alloc_flags for memory allocations wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() wifi: mt76: mt7921: fix non-PSC channel scan fail udp: re-score reuseport groups when connected sockets are present bpf: reject unhashed sockets in bpf_sk_assign wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM wifi: mt76: mt7915: fix power-limits while chan_switch wifi: mwifiex: Fix OOB and integer underflow when rx packets wifi: mwifiex: fix error recovery in PCIE buffer descriptor management selftests/bpf: fix static assert compilation issue for test_cls_.c kbuild: rust_is_available: remove -v option kbuild: rust_is_available: fix version check when CC has multiple arguments kbuild: rust_is_available: add check for `bindgen` invocation kbuild: rust_is_available: fix confusion when a version appears in the path crypto: stm32 - Properly handle pm_runtime_get failing crypto: api - Use work queue in crypto_destroy_instance Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() Bluetooth: Fix potential use-after-free when clear keys Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() net: tcp: fix unexcepted socket die when snd_wnd is 0 selftests/bpf: Fix repeat option when kfunc_call verification fails selftests/bpf: Clean up fmod_ret in bench_rename test script net-memcg: Fix scope of sockmem pressure indicators ice: ice_aq_check_events: fix off-by-one check when filling buffer crypto: caam - fix unchecked return value error hwrng: iproc-rng200 - Implement suspend and resume calls lwt: Fix return values of BPF xmit ops lwt: Check LWTUNNEL_XMIT_CONTINUE strictly fs: ocfs2: namei: check return value of ocfs2_add_entry() net: annotate data-races around sk->sk_lingertime wifi: mwifiex: fix memory leak in mwifiex_histogram_read() wifi: mwifiex: Fix missed return in oob checks failed path ARM: dts: Add .dts files missing from the build samples/bpf: fix bio latency check with tracepoint samples/bpf: fix broken map lookup probe wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx wifi: ath9k: protect WMI command response buffer replacement with a lock wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute mac80211: make ieee80211_tx_info padding explicit wifi: mwifiex: avoid possible NULL skb pointer dereference Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() arm64: mm: use ptep_clear() instead of pte_clear() in clear_flush() wifi: ath9k: use IS_ERR() with debugfs_create_dir() ice: avoid executing commands on other ports when driving sync net: arcnet: Do not call kfree_skb() under local_irq_disable() mlxsw: i2c: Fix chunk size setting in output mailbox buffer mlxsw: i2c: Limit single transaction buffer size mlxsw: core_hwmon: Adjust module label names based on MTCAP sensor counter hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() octeontx2-pf: Refactor schedular queue alloc/free calls octeontx2-pf: Fix PFC TX scheduler free cteonxt2-pf: Fix backpressure config for multiple PFC priorities to work simultaneously sfc: Check firmware supports Ethernet PTP filter net/sched: sch_hfsc: Ensure inner classes have fsc curve netrom: Deny concurrent connect(). drm/bridge: tc358764: Fix debug print parameter order ASoC: cs43130: Fix numerator/denominator mixup quota: factor out dquot_write_dquot() quota: rename dquot_active() to inode_quota_active() quota: add new helper dquot_active() quota: fix dqput() to follow the guarantees dquot_srcu should provide drm/amd/display: Do not set drr on pipe commit drm/hyperv: Fix a compilation issue because of not including screen_info.h ASoC: stac9766: fix build errors with REGMAP_AC97 soc: qcom: ocmem: Add OCMEM hardware version print soc: qcom: ocmem: Fix NUM_PORTS & NUM_MACROS macros arm64: dts: qcom: sm6350: Fix ZAP region arm64: dts: qcom: sm8250: correct dynamic power coefficients arm64: dts: qcom: msm8916-l8150: correct light sensor VDDIO supply arm64: dts: qcom: sm8250-edo: Add gpio line names for TLMM arm64: dts: qcom: sm8250-edo: Add GPIO line names for PMIC GPIOs arm64: dts: qcom: sm8250-edo: Rectify gpio-keys arm64: dts: qcom: sc8280xp-crd: Correct vreg_misc_3p3 GPIO arm64: dts: qcom: sc8280xp: Add missing SCM interconnect arm64: dts: qcom: msm8996: Add missing interrupt to the USB2 controller arm64: dts: qcom: sdm845-tama: Set serial indices and stdout-path arm64: dts: qcom: sm8350: Fix CPU idle state residency times arm64: dts: qcom: sm8350: Add missing LMH interrupts to cpufreq arm64: dts: qcom: sm8350: Use proper CPU compatibles arm64: dts: qcom: pm8350: fix thermal zone name arm64: dts: qcom: pm8350b: fix thermal zone name arm64: dts: qcom: pmr735b: fix thermal zone name arm64: dts: qcom: pmk8350: fix ADC-TM compatible string arm64: dts: qcom: sm8250: Mark PCIe hosts as DMA coherent ARM: dts: stm32: Rename mdio0 to mdio ARM: dts: stm32: YAML validation fails for Argon Boards ARM: dts: stm32: adopt generic iio bindings for adc channels on emstamp-argon ARM: dts: stm32: Add missing detach mailbox for emtrion emSBC-Argon ARM: dts: stm32: YAML validation fails for Odyssey Boards ARM: dts: stm32: Add missing detach mailbox for Odyssey SoM ARM: dts: stm32: Update to generic ADC channel binding on DHSOM systems ARM: dts: stm32: Add missing detach mailbox for DHCOM SoM firmware: ti_sci: Use system_state to determine polling drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() ARM: dts: BCM53573: Drop nonexistent #usb-cells ARM: dts: BCM53573: Add cells sizes to PCIe node ARM: dts: BCM53573: Use updated "spi-gpio" binding properties arm64: tegra: Fix HSUART for Jetson AGX Orin arm64: dts: qcom: sm8250-sony-xperia: correct GPIO keys wakeup again arm64: dts: qcom: pm6150l: Add missing short interrupt arm64: dts: qcom: pm660l: Add missing short interrupt arm64: dts: qcom: pmi8994: Add missing OVP interrupt arm64: tegra: Fix HSUART for Smaug drm/etnaviv: fix dumping of active MMU context block: cleanup queue_wc_store block: don't allow enabling a cache on devices that don't support it x86/mm: Fix PAT bit missing from page protection modify mask drm/bridge: anx7625: Use common macros for DP power sequencing commands drm/bridge: anx7625: Use common macros for HDCP capabilities ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split) ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210 ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split) drm: adv7511: Fix low refresh rate register for ADV7533/5 ARM: dts: BCM53573: Fix Ethernet info for Luxul devices arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC arm64: dts: qcom: sdm845: Fix the min frequency of "ice_core_clk" arm64: dts: qcom: msm8996-gemini: fix touchscreen VIO supply drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl' md: Factor out is_md_suspended helper md: Change active_io to percpu md: restore 'noio_flag' for the last mddev_resume() md/raid10: factor out dereference_rdev_and_rrdev() md/raid10: use dereference_rdev_and_rrdev() to get devices md/md-bitmap: remove unnecessary local variable in backlog_store() md/md-bitmap: hold 'reconfig_mutex' in backlog_store() drm/msm: Update dev core dump to not print backwards drm/tegra: dpaux: Fix incorrect return value of platform_get_irq of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() arm64: dts: qcom: sm8150: Fix the I2C7 interrupt ARM: dts: BCM53573: Fix Tenda AC9 switch CPU port drm/armada: Fix off-by-one error in armada_overlay_get_property() drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask soc: qcom: smem: Fix incompatible types in comparison drm/msm/mdp5: Don't leak some plane state firmware: meson_sm: fix to avoid potential NULL pointer dereference drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done smackfs: Prevent underflow in smk_set_cipso() drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() drm/msm/a2xx: Call adreno_gpu_init() earlier audit: fix possible soft lockup in __audit_inode_child() block/mq-deadline: use correct way to throttling write requests io_uring: fix drain stalls by invalid SQE drm/mediatek: dp: Add missing error checks in mtk_dp_parse_capabilities bus: ti-sysc: Fix build warning for 64-bit build drm/mediatek: Remove freeing not dynamic allocated memory ARM: dts: qcom: ipq4019: correct SDHCI XO clock drm/mediatek: Fix potential memory leak if vmap() fail arm64: dts: qcom: apq8016-sbc: Fix ov5640 regulator supply names arm64: dts: qcom: msm8998: Drop bus clock reference from MMSS SMMU arm64: dts: qcom: msm8998: Add missing power domain to MMSS SMMU arm64: dts: qcom: msm8996: Fix dsi1 interrupts arm64: dts: qcom: sc8280xp-x13s: Unreserve NC pins bus: ti-sysc: Fix cast to enum warning md/raid5-cache: fix a deadlock in r5l_exit_log() md/raid5-cache: fix null-ptr-deref for r5l_flush_stripe_to_raid() firmware: cs_dsp: Fix new control name check md: add error_handlers for raid0 and linear md/raid0: Factor out helper for mapping and submitting a bio md/raid0: Fix performance regression for large sequential writes md: raid0: account for split bio in iostat accounting ASoC: SOF: amd: clear dsp to host interrupt status of: overlay: Call of_changeset_init() early of: unittest: Fix overlay type in apply/revert check ALSA: ac97: Fix possible error value of rac97 ipmi:ssif: Add check for kstrdup ipmi:ssif: Fix a memory leak when scanning for an adapter clk: qcom: gpucc-sm6350: Introduce index-based clk lookup clk: qcom: gpucc-sm6350: Fix clock source names clk: qcom: gcc-sc8280xp: Add EMAC GDSCs clk: qcom: gcc-sc8280xp: Add missing GDSC flags dt-bindings: clock: qcom,gcc-sc8280xp: Add missing GDSCs clk: qcom: gcc-sc8280xp: Add missing GDSCs clk: rockchip: rk3568: Fix PLL rate setting for 78.75MHz PCI: apple: Initialize pcie->nvecs before use PCI: qcom-ep: Switch MHI bus master clock off during L1SS drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() PCI/DOE: Fix destroy_work_on_stack() race clk: sunxi-ng: Modify mismatched function name clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src EDAC/igen6: Fix the issue of no error events ext4: correct grp validation in ext4_mb_good_group ext4: avoid potential data overflow in next_linear_group clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src kvm/vfio: Prepare for accepting vfio device fd kvm/vfio: ensure kvg instance stays around in kvm_vfio_group_add() clk: qcom: reset: Use the correct type of sleep/delay based on length clk: qcom: gcc-sm6350: Fix gcc_sdcc2_apps_clk_src PCI: microchip: Correct the DED and SEC interrupt bit offsets PCI: Mark NVIDIA T4 GPUs to avoid bus reset pinctrl: mcp23s08: check return value of devm_kasprintf() PCI: Allow drivers to request exclusive config regions PCI: Add locking to RMW PCI Express Capability Register accessors PCI: pciehp: Use RMW accessors for changing LNKCTL PCI/ASPM: Use RMW accessors for changing LNKCTL clk: qcom: gcc-sm8450: Use floor ops for SDCC RCGs clk: imx: pllv4: Fix SPLL2 MULT range clk: imx: imx8ulp: update SPLL2 type clk: imx8mp: fix sai4 clock clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op powerpc/radix: Move some functions into #ifdef CONFIG_KVM_BOOK3S_HV_POSSIBLE vfio/type1: fix cap_migration information leak nvdimm: Fix memleak of pmu attr_groups in unregister_nvdimm_pmu() nvdimm: Fix dereference after free in register_nvdimm_pmu() powerpc/fadump: reset dump area size if fadump memory reserve fails powerpc/perf: Convert fsl_emb notifier to state machine callbacks drm/amdgpu: Use RMW accessors for changing LNKCTL drm/radeon: Use RMW accessors for changing LNKCTL net/mlx5: Use RMW accessors for changing LNKCTL wifi: ath11k: Use RMW accessors for changing LNKCTL wifi: ath10k: Use RMW accessors for changing LNKCTL NFSv4.2: Rework scratch handling for READ_PLUS NFSv4.2: Fix READ_PLUS smatch warnings NFSv4.2: Fix up READ_PLUS alignment NFSv4.2: Fix READ_PLUS size calculations powerpc: Don't include lppaca.h in paca.h powerpc/pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT nfs/blocklayout: Use the passed in gfp flags powerpc/pseries: Fix hcall tracepoints with JUMP_LABEL=n powerpc/mpc5xxx: Add missing fwnode_handle_put() powerpc/iommu: Fix notifiers being shared by PCI and VIO buses ext4: fix unttached inode after power cut with orphan file feature enabled jfs: validate max amount of blocks before allocation. fs: lockd: avoid possible wrong NULL parameter NFSD: da_addr_body field missing in some GETDEVICEINFO replies NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ pNFS: Fix assignment of xprtdata.cred cgroup/cpuset: Inherit parent's load balance state in v2 RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() media: ov5640: fix low resolution image abnormal issue media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables media: i2c: tvp5150: check return value of devm_kasprintf() media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind iommu: rockchip: Fix directory table address encoding drivers: usb: smsusb: fix error handling code in smsusb_init_device media: dib7000p: Fix potential division by zero media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() media: cx24120: Add retval check for cx24120_message_send() RDMA/siw: Fabricate a GID on tun and loopback devices scsi: hisi_sas: Fix warnings detected by sparse scsi: hisi_sas: Fix normally completed I/O analysed as failed dt-bindings: extcon: maxim,max77843: restrict connector properties media: amphion: reinit vpu if reqbufs output 0 media: amphion: add helper function to get id name media: mtk-jpeg: Fix use after free bug due to uncanceled work media: rkvdec: increase max supported height for H.264 media: amphion: fix CHECKED_RETURN issues reported by coverity media: amphion: fix REVERSE_INULL issues reported by coverity media: amphion: fix UNINIT issues reported by coverity media: amphion: fix UNUSED_VALUE issue reported by coverity media: amphion: ensure the bitops don't cross boundaries media: mediatek: vcodec: Return NULL if no vdec_fb is found media: mediatek: vcodec: fix potential double free media: mediatek: vcodec: fix resource leaks in vdec_msg_queue_init() usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() scsi: RDMA/srp: Fix residual handling scsi: iscsi: Rename iscsi_set_param() to iscsi_if_set_param() scsi: iscsi: Add length check for nlattr payload scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() scsi: be2iscsi: Add length check when parsing nlattrs scsi: qla4xxx: Add length check when parsing nlattrs iio: accel: adxl313: Fix adxl313_i2c_id[] table serial: sprd: Assign sprd_port after initialized to avoid wrong access serial: sprd: Fix DMA buffer leak issue x86/APM: drop the duplicate APM_MINOR_DEV macro RDMA/rxe: Split rxe_run_task() into two subroutines RDMA/rxe: Fix incomplete state save in rxe_requester scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly RDMA/irdma: Replace one-element array with flexible-array member coresight: tmc: Explicit type conversions to prevent integer overflow interconnect: qcom: qcm2290: Enable sync state dma-buf/sync_file: Fix docs syntax driver core: test_async: fix an error code driver core: Call dma_cleanup() on the test_remove path kernfs: add stub helper for kernfs_generic_poll() extcon: cht_wc: add POWER_SUPPLY dependency iommu/mediatek: Remove unused "mapping" member from mtk_iommu_data iommu/mediatek: Fix two IOMMU share pagetable issue iommu/sprd: Add missing force_aperture RDMA/hns: Fix port active speed RDMA/hns: Fix incorrect post-send with direct wqe of wr-list RDMA/hns: Fix inaccurate error label name in init instance RDMA/hns: Fix CQ and QP cache affinity IB/uverbs: Fix an potential error pointer dereference fsi: aspeed: Reset master errors after CFAM reset iommu/qcom: Disable and reset context bank before programming iommu/vt-d: Fix to flush cache of PASID directory table platform/x86: dell-sysman: Fix reference leak media: cec: core: add adap_nb_transmit_canceled() callback media: cec: core: add adap_unconfigured() callback media: go7007: Remove redundant if statement media: venus: hfi_venus: Only consider sys_idle_indicator on V1 docs: ABI: fix spelling/grammar in SBEFIFO timeout interface USB: gadget: core: Add missing kerneldoc for vbus_work USB: gadget: f_mass_storage: Fix unused variable warning drivers: base: Free devm resources when unregistering a device HID: input: Support devices sending Eraser without Invert media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() media: ov5640: Fix initial RESETB state and annotate timings media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips media: ov2680: Remove auto-gain and auto-exposure controls media: ov2680: Fix ov2680_bayer_order() media: ov2680: Fix vflip / hflip set functions media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s media: ov2680: Don't take the lock for try_fmt calls media: ov2680: Add ov2680_fill_format() helper function media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors media: i2c: rdacm21: Fix uninitialized value f2fs: fix to avoid mmap vs set_compress_option case f2fs: judge whether discard_unit is section only when have CONFIG_BLK_DEV_ZONED f2fs: Only lfs mode is allowed with zoned block device feature Revert "f2fs: fix to do sanity check on extent cache correctly" cgroup:namespace: Remove unused cgroup_namespaces_init() coresight: trbe: Fix TRBE potential sleep in atomic context RDMA/irdma: Prevent zero-length STAG registration scsi: core: Use 32-bit hostnum in scsi_host_lookup() scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock interconnect: qcom: sm8450: Enable sync_state interconnect: qcom: bcm-voter: Improve enable_mask handling interconnect: qcom: bcm-voter: Use enable_maks for keepalive voting serial: tegra: handle clk prepare error in tegra_uart_hw_init() amba: bus: fix refcount leak Revert "IB/isert: Fix incorrect release of isert connection" RDMA/siw: Balance the reference of cep->kref in the error path RDMA/siw: Correct wrong debug message RDMA/efa: Fix wrong resources deallocation order HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() HID: uclogic: Correct devm device reference for hidinput input_dev name HID: multitouch: Correct devm device reference for hidinput input_dev name platform/x86/amd/pmf: Fix a missing cleanup path tick/rcu: Fix false positive "softirq work is pending" messages x86/speculation: Mark all Skylake CPUs as vulnerable to GDS tracing: Remove extra space at the end of hwlat_detector/mode tracing: Fix race issue between cpu buffer write and swap mtd: rawnand: brcmnand: Fix mtd oobsize dmaengine: idxd: Modify the dependence of attribute pasid_enabled phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write rpmsg: glink: Add check for kstrdup leds: pwm: Fix error code in led_pwm_create_fwnode() leds: multicolor: Use rounded division when calculating color components leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead mtd: spi-nor: Check bus width while setting QE bit mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() um: Fix hostaudio build errors dmaengine: ste_dma40: Add missing IRQ check in d40_probe Drivers: hv: vmbus: Don't dereference ACPI root object handle cpufreq: Fix the race condition while updating the transition_task of policy virtio_ring: fix avail_wrap_counter in virtqueue_add_packed igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c netfilter: nft_exthdr: Fix non-linear header modification netfilter: xt_u32: validate user space input netfilter: xt_sctp: validate the flag_info count skbuff: skb_segment, Call zero copy functions before using skbuff frags igb: set max size RX buffer when store bad packet is enabled PM / devfreq: Fix leak in devfreq_dev_release() ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl rcu: dump vmalloc memory info safely printk: ringbuffer: Fix truncating buffer size min_t cast scsi: core: Fix the scsi_set_resid() documentation mm/vmalloc: add a safer version of find_vm_area() for debug cpu/hotplug: Prevent self deadlock on CPU hot-unplug media: i2c: ccs: Check rules is non-NULL media: i2c: Add a camera sensor top level menu PCI: rockchip: Use 64-bit mask on MSI 64-bit PCI address ipmi_si: fix a memleak in try_smi_init() ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch() XArray: Do not return sibling entries from xa_load() io_uring: break iopolling on signal backlight/gpio_backlight: Compare against struct fb_info.device backlight/bd6107: Compare against struct fb_info.device backlight/lv5207lp: Compare against struct fb_info.device drm/amd/display: register edp_backlight_control() for DCN301 xtensa: PMU: fix base address for the newer hardware LoongArch: mm: Add p?d_leaf() definitions i3c: master: svc: fix probe failure when no i3c device exist arm64: csum: Fix OoB access in IP checksum code for negative lengths ALSA: hda/cirrus: Fix broken audio on hardware with two CS42L42 codecs. media: dvb: symbol fixup for dvb_attach() media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts Revert "scsi: qla2xxx: Fix buffer overrun" scsi: mpt3sas: Perform additional retries if doorbell read returns 0 PCI: Free released resource after coalescing PCI: hv: Fix a crash in hv_pci_restore_msi_msg() during hibernation PCI/PM: Only read PCI_PM_CTRL register when available ntb: Drop packets when qp link is down ntb: Clean up tx tail index on link down ntb: Fix calculation ntb_transport_tx_free_entry() Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset" block: don't add or resize partition on the disk with GENHD_FL_NO_PART procfs: block chmod on /proc/thread-self/comm parisc: Fix /proc/cpuinfo output for lscpu drm/amd/display: Add smu write msg id fail retry process bpf: Fix issue in verifying allow_ptr_leaks dlm: fix plock lookup when using multiple lockspaces dccp: Fix out of bounds access in DCCP error handler x86/sev: Make enc_dec_hypercall() accept a size instead of npages r8169: fix ASPM-related issues on a number of systems with NIC version from RTL8168h X.509: if signature is unsupported skip validation net: handle ARPHRD_PPP in dev_is_mac_header_xmit() fsverity: skip PKCS#7 parser when keyring is empty x86/MCE: Always save CS register on AMD Zen IF Poison errors platform/chrome: chromeos_acpi: print hex string for ACPI_TYPE_BUFFER mmc: renesas_sdhi: register irqs before registering controller pstore/ram: Check start of empty przs during init arm64: sdei: abort running SDEI handlers during crash s390/dcssblk: fix kernel crash with list_add corruption s390/ipl: add missing secure/has_secure file to ipl type 'unknown' s390/dasd: fix string length handling crypto: stm32 - fix loop iterating through scatterlist for DMA cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug of: property: fw_devlink: Add a devlink for panel followers usb: typec: tcpm: set initial svdm version based on pd revision usb: typec: bus: verify partner exists in typec_altmode_attention USB: core: Unite old scheme and new scheme descriptor reads USB: core: Change usb_get_device_descriptor() API USB: core: Fix race by not overwriting udev->descriptor in hub_port_init() USB: core: Fix oversight in SuperSpeed initialization x86/sgx: Break up long non-preemptible delays in sgx_vepc_release() perf/x86/uncore: Correct the number of CHAs on EMR serial: sc16is7xx: remove obsolete out_thread label serial: sc16is7xx: fix regression with GPIO configuration tracing: Zero the pipe cpumask on alloc to avoid spurious -EBUSY Revert "drm/amd/display: Do not set drr on pipe commit" md: Free resources in __md_stop NFSv4.2: Fix a potential double free with READ_PLUS NFSv4.2: Rework scratch handling for READ_PLUS (again) md: fix regression for null-ptr-deference in __md_stop() clk: Mark a fwnode as initialized when using CLK_OF_DECLARE() macro treewide: Fix probing of devices in DT overlays clk: Avoid invalid function names in CLK_OF_DECLARE() udf: initialize newblock to 0 Linux 6.1.53 Change-Id: I6f5858bce0f20963ae42515eac36ac14cb686f24 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-09-18 09:57:37 +00:00
Thore Sommer	342d130205	X.509: if signature is unsupported skip validation commit ef5b52a631f8c18353e80ccab8408b963305510c upstream. When the hash algorithm for the signature is not available the digest size is 0 and the signature in the certificate is marked as unsupported. When validating a self-signed certificate, this needs to be checked, because otherwise trying to validate the signature will fail with an warning: Loading compiled-in X.509 certificates WARNING: CPU: 0 PID: 1 at crypto/rsa-pkcs1pad.c:537 \ pkcs1pad_verify+0x46/0x12c ... Problem loading in-kernel X.509 certificate (-22) Signed-off-by: Thore Sommer <public@thson.de> Cc: stable@vger.kernel.org # v4.7+ Fixes: `6c2dc5ae4a` ("X.509: Extract signature digest and make self-signed cert checks earlier") Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-09-13 09:43:03 +02:00
Herbert Xu	c4cb61c5f9	crypto: api - Use work queue in crypto_destroy_instance [ Upstream commit 9ae4577bc077a7e32c3c7d442c95bc76865c0f17 ] The function crypto_drop_spawn expects to be called in process context. However, when an instance is unregistered while it still has active users, the last user may cause the instance to be freed in atomic context. Fix this by delaying the freeing to a work queue. Fixes: `6bfd48096f` ("[CRYPTO] api: Added spawns") Reported-by: Florent Revest <revest@chromium.org> Reported-by: syzbot+d769eed29cc42d75e2a3@syzkaller.appspotmail.com Reported-by: syzbot+610ec0671f51e838436e@syzkaller.appspotmail.com Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Tested-by: Florent Revest <revest@chromium.org> Acked-by: Florent Revest <revest@chromium.org> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-09-13 09:42:32 +02:00
Herbert Xu	9c8dab18f8	crypto: rsa-pkcs1pad - Use helper to set reqsize commit 5b11d1a360ea23c80c6d4ec3f5986a788d0a0995 upstream. The value of reqsize must only be changed through the helper. Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Cc: Giovanni Cabiddu <giovanni.cabiddu@intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-09-13 09:42:26 +02:00
Greg Kroah-Hartman	b435525822	This is the 6.1.39 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmS38qMACgkQONu9yGCS aT56yQ//ZuDuw8Ev3HISVgZhE9FpuXC1RSYXiMCAvwA9rH3KnJ4wKVPEhEWLy9P4 jdJaatSLbLOvA7ME7JnwZxz2qahjBxo1tpx6u2S3zrzz4UlAPNLwCxTxxp4X07VI 3fBNvsmucqFSayCrA8t9xgkaJizuCvHZm7eSoyVIigPwbB5igc2b+bNSRcx1Zo+j SHl4Y4nGK8a47XU9RSlDLVKow0/6rrQLHQ9DLpxACArRHw3h451vD0DMcgOuU/Uv 6qq9u3COcdVw3oc5VENu9XklPmvQkxo3RaCUHyRadVstuc0H/BBUDvEhPn5PcVOV EdBWlTjmhsQo0aUziK4kotLNeX1VRgKa+rrIUBJn68OHv1SRRPZU/eJ8hkL81dCi FDPzXDOszixO7pPv1jj7O9kNcwKPuiHPmdaNPCY6jviOHhZnAEub44DpQamxWvU/ kb5MZRRY72wt9iWeI3kscCCSbf6eyjlmDMoYIeLuYn10n7gIDU80eUOBl9bqEsz/ X+OUxaY+XuKbCoucpNmSHHLmynJ5D0CXhl/5qnlgMoSo4UJ5BUIMj2e3ZqsKLfrR e/09MCRX79y9J+TxUunnQZfq5vBlH1tRsvUyhIfYfW4AaC9BrkOL2XZviQldKY6x FUmsxh62O3iGRtLOWDKQA5MwoJuD54qVcHr1iidWkO2G8T3ctCc= =kyUh -----END PGP SIGNATURE----- Merge 6.1.39 into android14-6.1-lts Changes in 6.1.39 drm: use mgr->dev in drm_dbg_kms in drm_dp_add_payload_part2 fs: pipe: reveal missing function protoypes block: Fix the type of the second bdev_op_is_zoned_write() argument erofs: clean up cached I/O strategies erofs: avoid tagged pointers to mark sync decompression erofs: remove tagged pointer helpers erofs: move zdata.h into zdata.c erofs: kill hooked chains to avoid loops on deduplicated compressed images x86/resctrl: Only show tasks' pid in current pid namespace blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost x86/sev: Fix calculation of end address based on number of pages virt: sevguest: Add CONFIG_CRYPTO dependency blk-mq: fix potential io hang by wrong 'wake_batch' lockd: drop inappropriate svc_get() from locked_get() nvme-auth: rename __nvme_auth_[reset\|free] to nvme_auth[reset\|free]_dhchap nvme-auth: rename authentication work elements nvme-auth: remove symbol export from nvme_auth_reset nvme-auth: no need to reset chap contexts on re-authentication nvme-core: fix memory leak in dhchap_secret_store nvme-core: fix memory leak in dhchap_ctrl_secret nvme-auth: don't ignore key generation failures when initializing ctrl keys nvme-core: add missing fault-injection cleanup nvme-core: fix dev_pm_qos memleak md/raid10: check slab-out-of-bounds in md_bitmap_get_counter md/raid10: fix overflow of md/safe_mode_delay md/raid10: fix wrong setting of max_corr_read_errors md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request md/raid10: fix io loss while replacement replace rdev md/raid1-10: factor out a helper to add bio to plug md/raid1-10: factor out a helper to submit normal write md/raid1-10: submit write io directly if bitmap is not enabled block: fix blktrace debugfs entries leakage irqchip/stm32-exti: Fix warning on initialized field overwritten irqchip/jcore-aic: Fix missing allocation of IRQ descriptors svcrdma: Prevent page release when nothing was received erofs: simplify iloc() erofs: fix compact 4B support for 16k block size posix-timers: Prevent RT livelock in itimer_delete() tick/rcu: Fix bogus ratelimit condition tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode(). clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe PM: domains: fix integer overflow issues in genpd_parse_state() perf/arm-cmn: Fix DTC reset x86/mm: Allow guest.enc_status_change_prepare() to fail x86/tdx: Fix race between set_memory_encrypted() and load_unaligned_zeropad() drivers/perf: hisi: Don't migrate perf to the CPU going to teardown powercap: RAPL: Fix CONFIG_IOSF_MBI dependency PM: domains: Move the verification of in-params from genpd_add_device() ARM: 9303/1: kprobes: avoid missing-declaration warnings cpufreq: intel_pstate: Fix energy_performance_preference for passive thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() rcu: Make rcu_cpu_starting() rely on interrupts being disabled rcu-tasks: Stop rcu_tasks_invoke_cbs() from using never-onlined CPUs rcutorture: Correct name of use_softirq module parameter rcuscale: Move shutdown from wait_event() to wait_event_idle() rcu/rcuscale: Move rcu_scale_() after kfree_scale_cleanup() rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined perf/ibs: Fix interface via core pmu events x86/mm: Fix __swp_entry_to_pte() for Xen PV guests locking/atomic: arm: fix sync ops evm: Complete description of evm_inode_setattr() evm: Fix build warnings ima: Fix build warnings pstore/ram: Add check for kstrdup igc: Enable and fix RX hash usage by netstack wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx libbpf: btf_dump_type_data_check_overflow needs to consider BTF_MEMBER_BITFIELD_SIZE samples/bpf: Fix buffer overflow in tcp_basertt spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG wifi: wilc1000: fix for absent RSN capabilities WFA testcase wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() sctp: add bpf_bypass_getsockopt proto callback libbpf: fix offsetof() and container_of() to work with CO-RE bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen spi: dw: Round of n_bytes to power of 2 nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() bpftool: JIT limited misreported as negative value on aarch64 bpf: Remove bpf trampoline selector bpf: Fix memleak due to fentry attach failure selftests/bpf: Do not use sign-file as testcase regulator: core: Fix more error checking for debugfs_create_dir() regulator: core: Streamline debugfs operations wifi: orinoco: Fix an error handling path in spectrum_cs_probe() wifi: orinoco: Fix an error handling path in orinoco_cs_probe() wifi: atmel: Fix an error handling path in atmel_probe() wifi: wl3501_cs: Fix an error handling path in wl3501_probe() wifi: ray_cs: Fix an error handling path in ray_probe() wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes samples/bpf: xdp1 and xdp2 reduce XDPBUFSIZE to 60 wifi: ath10k: Trigger STA disconnect after reconfig complete on hardware restart wifi: mac80211: recalc min chandef for new STA links selftests/bpf: Fix check_mtu using wrong variable type wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown ice: handle extts in the miscellaneous interrupt thread selftests: cgroup: fix unexpected failure on test_memcg_low watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config watchdog/perf: more properly prevent false positives with turbo modes kexec: fix a memory leak in crash_shrink_memory() mmc: mediatek: Avoid ugly error message when SDIO wakeup IRQ isn't used memstick r592: make memstick_debug_get_tpc_name() static wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() wifi: mac80211: Fix permissions for valid_links debugfs entry rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO wifi: ath11k: Add missing check for ioremap wifi: iwlwifi: pull from TXQs with softirqs disabled wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() wifi: mac80211: Remove "Missing iftype sband data/EHT cap" spam wifi: cfg80211: rewrite merging of inherited elements wifi: cfg80211: drop incorrect nontransmitted BSS update code wifi: cfg80211: fix regulatory disconnect with OCB/NAN wifi: cfg80211/mac80211: Fix ML element common size calculation wifi: ieee80211: Fix the common size calculation for reconfiguration ML mmc: Add MMC_QUIRK_BROKEN_SD_CACHE for Kingston Canvas Go Plus from 11/2019 wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection wifi: ath9k: convert msecs to jiffies where needed bpf: Factor out socket lookup functions for the TC hookpoint. bpf: Call __bpf_sk_lookup()/__bpf_skc_lookup() directly via TC hookpoint bpf: Fix bpf socket lookup from tc/xdp to respect socket VRF bindings can: length: fix bitstuffing count can: kvaser_pciefd: Add function to set skb hwtstamps can: kvaser_pciefd: Set hardware timestamp on transmitted packets net: stmmac: fix double serdes powerdown netlink: fix potential deadlock in netlink_set_err() netlink: do not hard code device address lenth in fdb dumps bonding: do not assume skb mac_header is set selftests: rtnetlink: remove netdevsim device after ipsec offload test gtp: Fix use-after-free in __gtp_encap_destroy(). net: axienet: Move reset before 64-bit DMA detection ocfs2: Fix use of slab data with sendpage sfc: fix crash when reading stats while NIC is resetting net: nfc: Fix use-after-free caused by nfc_llcp_find_local lib/ts_bm: reset initial match offset for every block of text netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. ipvlan: Fix return value of ipvlan_queue_xmit() netlink: Add __sock_i_ino() for __netlink_diag_dump(). drm/amd/display: Add logging for display MALL refresh setting radeon: avoid double free in ci_dpm_init() drm/amd/display: Explicitly specify update type per plane info change drm/bridge: it6505: Move a variable assignment behind a null pointer check in receive_timing_debugfs_show() Input: drv260x - sleep between polling GO bit drm/bridge: ti-sn65dsi83: Fix enable error path drm/bridge: tc358768: always enable HS video mode drm/bridge: tc358768: fix PLL parameters computation drm/bridge: tc358768: fix PLL target frequency drm/bridge: tc358768: fix TCLK_ZEROCNT computation drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation drm/bridge: tc358768: fix TCLK_TRAILCNT computation drm/bridge: tc358768: fix THS_ZEROCNT computation drm/bridge: tc358768: fix TXTAGOCNT computation drm/bridge: tc358768: fix THS_TRAILCNT computation drm/vram-helper: fix function names in vram helper doc ARM: dts: BCM5301X: Drop "clock-names" from the SPI node ARM: dts: meson8b: correct uart_B and uart_C clock references mm: call arch_swap_restore() from do_swap_page() clk: vc5: Use `clamp()` to restrict PLL range bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page clk: vc5: Fix .driver_data content in i2c_device_id clk: vc7: Fix .driver_data content in i2c_device_id clk: rs9: Fix .driver_data content in i2c_device_id Input: adxl34x - do not hardcode interrupt trigger type drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` drm/panel: sharp-ls043t1le01: adjust mode settings driver: soc: xilinx: use _safe loop iterator to avoid a use after free ASoC: Intel: sof_sdw: remove SOF_SDW_TGL_HDMI for MeteorLake devices drm/vkms: isolate pixel conversion functionality drm: Add fixed-point helper to get rounded integer values drm/vkms: Fix RGB565 pixel conversion ARM: dts: stm32: Move ethernet MAC EEPROM from SoM to carrier boards bus: ti-sysc: Fix dispc quirk masking bool variables arm64: dts: microchip: sparx5: do not use PSCI on reference boards drm/bridge: tc358767: Switch to devm MIPI-DSI helpers clk: imx: scu: use _safe list iterator to avoid a use after free hwmon: (f71882fg) prevent possible division by zero RDMA/bnxt_re: Disable/kill tasklet only if it is enabled RDMA/bnxt_re: Fix to remove unnecessary return labels RDMA/bnxt_re: Use unique names while registering interrupts RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid RDMA/bnxt_re: Fix to remove an unnecessary log drm/msm/dsi: don't allow enabling 14nm VCO with unprogrammed rate drm/msm/disp/dpu: get timing engine status from intf status register drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK iommu/virtio: Detach domain on endpoint release iommu/virtio: Return size mapped for a detached domain clk: renesas: rzg2l: Fix CPG_SIPLL5_CLK1 register write ARM: dts: gta04: Move model property out of pinctrl node drm/bridge: anx7625: Convert to i2c's .probe_new() drm/bridge: anx7625: Prevent endless probe loop ARM: dts: qcom: msm8974: do not use underscore in node name (again) arm64: dts: qcom: msm8916: correct camss unit address arm64: dts: qcom: msm8916: correct MMC unit address arm64: dts: qcom: msm8994: correct SPMI unit address arm64: dts: qcom: msm8996: correct camss unit address arm64: dts: qcom: sdm630: correct camss unit address arm64: dts: qcom: sdm845: correct camss unit address arm64: dts: qcom: sm8350: Add GPI DMA compatible fallback arm64: dts: qcom: sm8350: correct DMA controller unit address arm64: dts: qcom: sdm845-polaris: add missing touchscreen child node reg arm64: dts: qcom: apq8016-sbc: Fix regulator constraints arm64: dts: qcom: apq8016-sbc: Fix 1.8V power rail on LS expansion drm/bridge: Introduce pre_enable_prev_first to alter bridge init order drm/bridge: ti-sn65dsi83: Fix enable/disable flow to meet spec drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H ARM: ep93xx: fix missing-prototype warnings ARM: omap2: fix missing tick_broadcast() prototype arm64: dts: qcom: pm7250b: add missing spmi-vadc include arm64: dts: qcom: apq8096: fix fixed regulator name property arm64: dts: mediatek: mt8183: Add mediatek,broken-save-restore-fw to kukui ARM: dts: stm32: Shorten the AV96 HDMI sound card name memory: brcmstb_dpfe: fix testing array offset after use ARM: dts: qcom: apq8074-dragonboard: Set DMA as remotely controlled ASoC: es8316: Increment max value for ALC Capture Target Volume control ASoC: es8316: Do not set rate constraints for unsupported MCLKs ARM: dts: meson8: correct uart_B and uart_C clock references soc/fsl/qe: fix usb.c build errors RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate RDMA/hns: Fix hns_roce_table_get return value ARM: dts: iwg20d-q7-common: Fix backlight pwm specifier arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 drm/msm/dpu: set DSC flush bit correctly at MDP CTL flush register fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() arm64: dts: ti: k3-j7200: Fix physical address of pin Input: pm8941-powerkey - fix debounce on gen2+ PMICs ARM: dts: stm32: Fix audio routing on STM32MP15xx DHCOM PDK2 ARM: dts: stm32: fix i2s endpoint format property for stm32mp15xx-dkx hwmon: (gsc-hwmon) fix fan pwm temperature scaling hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 ARM: dts: BCM5301X: fix duplex-full => full-duplex clk: Export clk_hw_forward_rate_request() drm/amd/display: Fix a test CalculatePrefetchSchedule() drm/amd/display: Fix a test dml32_rq_dlg_get_rq_reg() drm/amdkfd: Fix potential deallocation of previously deallocated memory. soc: mediatek: SVS: Fix MT8192 GPU node name drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode drm/radeon: fix possible division-by-zero errors HID: uclogic: Modular KUnit tests should not depend on KUNIT=y RDMA/rxe: Add ibdev_dbg macros for rxe RDMA/rxe: Replace pr_xxx by rxe_dbg_xxx in rxe_mw.c RDMA/rxe: Fix access checks in rxe_check_bind_mw amdgpu: validate offset_in_bo of drm_amdgpu_gem_va drm/msm/a5xx: really check for A510 in a5xx_gpu_init RDMA/bnxt_re: wraparound mbox producer index RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context clk: imx: clk-imxrt1050: fix memory leak in imxrt1050_clocks_probe clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() arm64: dts: qcom: sdm845: Flush RSC sleep & wake votes arm64: dts: qcom: sm8250-edo: Panel framebuffer is 2.5k instead of 4k clk: bcm: rpi: Fix off by one in raspberrypi_discover_clocks() clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider() clk: tegra: tegra124-emc: Fix potential memory leak ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer drm/msm/dpu: do not enable color-management if DSPPs are not available drm/msm/dpu: Fix slice_last_group_size calculation drm/msm/dsi: Use DSC slice(s) packet size to compute word count drm/msm/dsi: Flip greater-than check for slice_count and slice_per_intf drm/msm/dsi: Remove incorrect references to slice_count drm/msm/dp: Free resources after unregistering them arm64: dts: mediatek: Add cpufreq nodes for MT8192 arm64: dts: mediatek: mt8192: Fix CPUs capacity-dmips-mhz drm/amdgpu: Fix memcpy() in sienna_cichlid_append_powerplay_table function. drm/amdgpu: Fix usage of UMC fill record in RAS drm/msm/dpu: correct MERGE_3D length clk: vc5: check memory returned by kasprintf() clk: cdce925: check return value of kasprintf() clk: si5341: return error if one synth clock registration fails clk: si5341: check return value of {devm_}kasprintf() clk: si5341: free unused memory on probe failure clk: keystone: sci-clk: check return value of kasprintf() clk: ti: clkctrl: check return value of kasprintf() drivers: meson: secure-pwrc: always enable DMA domain ovl: update of dentry revalidate flags after copy up ASoC: imx-audmix: check return value of devm_kasprintf() clk: Fix memory leak in devm_clk_notifier_register() ARM: dts: lan966x: kontron-d10: fix board reset ARM: dts: lan966x: kontron-d10: fix SPI CS ASoC: amd: acp: clear pdm dma interrupt mask PCI: cadence: Fix Gen2 Link Retraining process PCI: vmd: Reset VMD config register between soft reboots scsi: qedf: Fix NULL dereference in error handling pinctrl: bcm2835: Handle gpiochip_add_pin_range() errors platform/x86: lenovo-yogabook: Fix work race on remove() platform/x86: lenovo-yogabook: Reprobe devices on remove() platform/x86: lenovo-yogabook: Set default keyboard backligh brightness on probe() PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() PCI: pciehp: Cancel bringup sequence if card is not present PCI: ftpci100: Release the clock resources pinctrl: sunplus: Add check for kmalloc PCI: Add pci_clear_master() stub for non-CONFIG_PCI scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state perf bench: Add missing setlocale() call to allow usage of %'d style formatting pinctrl: cherryview: Return correct value if pin in push-pull mode platform/x86: think-lmi: mutex protection around multiple WMI calls platform/x86: think-lmi: Correct System password interface platform/x86: think-lmi: Correct NVME password handling pinctrl:sunplus: Add check for kmalloc pinctrl: npcm7xx: Add missing check for ioremap kcsan: Don't expect 64 bits atomic builtins from 32 bits architectures powerpc/interrupt: Don't read MSR from interrupt_exit_kernel_prepare() powerpc/signal32: Force inlining of __unsafe_save_user_regs() and save_tm_user_regs_unsafe() perf script: Fix allocation of evsel->priv related to per-event dump files platform/x86: thinkpad_acpi: Fix lkp-tests warnings for platform profiles perf dwarf-aux: Fix off-by-one in die_get_varname() platform/x86/dell/dell-rbtn: Fix resources leaking on error path perf tool x86: Consolidate is_amd check into single function perf tool x86: Fix perf_env memory leak powerpc/64s: Fix VAS mm use after free pinctrl: microchip-sgpio: check return value of devm_kasprintf() pinctrl: at91-pio4: check return value of devm_kasprintf() powerpc/powernv/sriov: perform null check on iov before dereferencing iov powerpc: simplify ppc_save_regs powerpc: update ppc_save_regs to save current r1 in pt_regs PCI: qcom: Remove PCIE20_ prefix from register definitions PCI: qcom: Sort and group registers and bitfield definitions PCI: qcom: Use lower case for hex PCI: qcom: Use DWC helpers for modifying the read-only DBI registers PCI: qcom: Disable write access to read only registers for IP v2.9.0 riscv: uprobes: Restore thread.bad_cause powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary PCI: endpoint: Fix Kconfig indent style PCI: endpoint: Fix a Kconfig prompt of vNTB driver PCI: endpoint: functions/pci-epf-test: Fix dma_chan direction PCI: vmd: Fix uninitialized variable usage in vmd_enable_domain() vfio/mdev: Move the compat_class initialization to module init hwrng: virtio - Fix race on data_avail and actual data modpost: remove broken calculation of exception_table_entry size crypto: nx - fix build warnings when DEBUG_FS is not enabled modpost: fix section mismatch message for R_ARM_ABS32 modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} crypto: marvell/cesa - Fix type mismatch warning crypto: jitter - correct health test during initialization modpost: fix off by one in is_executable_section() ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard crypto: kpp - Add helper to set reqsize crypto: qat - Use helper to set reqsize crypto: qat - unmap buffer before free for DH crypto: qat - unmap buffers before free for RSA NFSv4.2: fix wrong shrinker_id NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION SMB3: Do not send lease break acknowledgment if all file handles have been closed dax: Fix dax_mapping_release() use after free dax: Introduce alloc_dev_dax_id() dax/kmem: Pass valid argument to memory_group_register_static hwrng: st - keep clock enabled while hwrng is registered kbuild: Disable GCOV for .mod.o efi/libstub: Disable PCI DMA before grabbing the EFI memory map cifs: prevent use-after-free by freeing the cfile later cifs: do all necessary checks for credits within or before locking smb: client: fix broken file attrs with nodfs mounts ksmbd: avoid field overflow warning arm64: sme: Use STR P to clear FFR context field in streaming SVE mode x86/efi: Make efi_set_virtual_address_map IBT safe md/raid1-10: fix casting from randomized structure in raid1_submit_write() USB: serial: option: add LARA-R6 01B PIDs usb: dwc3: gadget: Propagate core init errors to UDC during pullup phy: tegra: xusb: Clear the driver reference in usb-phy dev iio: adc: ad7192: Fix null ad7192_state pointer access iio: adc: ad7192: Fix internal/external clock selection iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF iio: accel: fxls8962af: fixup buffer scan element type Revert "drm/amd/display: edp do not add non-edid timings" mm/mmap: Fix VM_LOCKED check in do_vmi_align_munmap() ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on EliteBook ALSA: hda/realtek: Add quirk for Clevo NPx0SNx ALSA: jack: Fix mutex call in snd_jack_report() ALSA: pcm: Fix potential data race at PCM memory allocation helpers block: fix signed int overflow in Amiga partition support block: add overflow checks for Amiga partition support block: change all __u32 annotations to __be32 in affs_hardblocks.h block: increment diskseq on all media change events btrfs: fix race when deleting free space root from the dirty cow roots list SUNRPC: Fix UAF in svc_tcp_listen_data_ready() w1: w1_therm: fix locking behavior in convert_t w1: fix loop in w1_fini() dt-bindings: power: reset: qcom-pon: Only allow reboot-mode pre-pmk8350 f2fs: do not allow to defragment files have FI_COMPRESS_RELEASED sh: j2: Use ioremap() to translate device tree address into kernel memory usb: dwc2: platform: Improve error reporting for problems during .remove() usb: dwc2: Fix some error handling paths serial: 8250: omap: Fix freeing of resources on failed register clk: qcom: mmcc-msm8974: remove oxili_ocmemgx_clk clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks clk: qcom: gcc-qcm2290: Mark RCGs shared where applicable media: usb: Check az6007_read() return value media: amphion: drop repeated codec data for vc1l format media: amphion: drop repeated codec data for vc1g format media: amphion: initiate a drain of the capture queue in dynamic resolution change media: videodev2.h: Fix struct v4l2_input tuner index comment media: usb: siano: Fix warning due to null work_func_t function pointer media: i2c: Correct format propagation for st-mipid02 media: hi846: fix usage of pm_runtime_get_if_in_use() media: mediatek: vcodec: using decoder status instead of core work count clk: qcom: reset: support resetting multiple bits clk: qcom: ipq6018: fix networking resets clk: qcom: dispcc-qcm2290: Fix BI_TCXO_AO handling clk: qcom: dispcc-qcm2290: Fix GPLL0_OUT_DIV handling clk: qcom: mmcc-msm8974: use clk_rcg2_shared_ops for mdp_clk_src clock staging: vchiq_arm: mark vchiq_platform_init() static usb: dwc3: qcom: Fix potential memory leak usb: gadget: u_serial: Add null pointer check in gserial_suspend extcon: Fix kernel doc of property fields to avoid warnings extcon: Fix kernel doc of property capability fields to avoid warnings usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() usb: hide unused usbfs_notify_suspend/resume functions usb: misc: eud: Fix eud sysfs path (use 'qcom_eud') serial: core: lock port for stop_rx() in uart_suspend_port() serial: 8250: lock port for stop_rx() in omap8250_irq() serial: core: lock port for start_rx() in uart_resume_port() serial: 8250: lock port for UART_IER access in omap8250_irq() kernfs: fix missing kernfs_idr_lock to remove an ID from the IDR lkdtm: replace ll_rw_block with submit_bh i3c: master: svc: fix cpu schedule in spin lock coresight: Fix loss of connection info when a module is unloaded mfd: rt5033: Drop rt5033-battery sub-device media: venus: helpers: Fix ALIGN() of non power of two media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() sh: Avoid using IRQ0 on SH3 and SH4 gfs2: Fix duplicate should_fault_in_pages() call f2fs: fix potential deadlock due to unpaired node_write lock use f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() usb: common: usb-conn-gpio: Set last role to unknown before initial detection usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() mfd: wcd934x: Fix an error handling path in wcd934x_slim_probe() mfd: intel-lpss: Add missing check for platform_get_resource Revert "usb: common: usb-conn-gpio: Set last role to unknown before initial detection" serial: 8250_omap: Use force_suspend and resume for system suspend device property: Fix documentation for fwnode_get_next_parent() device property: Clarify description of returned value in some functions drivers: fwnode: fix fwnode_irq_get[_byname]() nvmem: sunplus-ocotp: release otp->clk before return nvmem: rmem: Use NVMEM_DEVID_AUTO bus: fsl-mc: don't assume child devices are all fsl-mc devices mfd: stmfx: Fix error path in stmfx_chip_init mfd: stmfx: Nullify stmfx->vdd in case of error KVM: s390: vsie: fix the length of APCB bitmap KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler cpufreq: mediatek: correct voltages for MT7622 and MT7623 misc: fastrpc: check return value of devm_kasprintf() clk: qcom: mmcc-msm8974: fix MDSS_GDSC power flags hwtracing: hisi_ptt: Fix potential sleep in atomic context mfd: stmpe: Only disable the regulators if they are enabled phy: tegra: xusb: check return value of devm_kzalloc() lib/bitmap: drop optimization of bitmap_{from,to}_arr64 pwm: imx-tpm: force 'real_period' to be zero in suspend pwm: sysfs: Do not apply state to already disabled PWMs pwm: ab8500: Fix error code in probe() pwm: mtk_disp: Fix the disable flow of disp_pwm md/raid10: fix the condition to call bio_end_io_acct() rtc: st-lpc: Release some resources in st_rtc_probe() in case of error drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times drm/i915/guc/slpc: Apply min softlimit correctly f2fs: check return value of freeze_super() media: cec: i2c: ch7322: also select REGMAP sctp: fix potential deadlock on &net->sctp.addr_wq_lock net/sched: act_ipt: add sanity checks on table name and hook locations net: add a couple of helpers for iph tot_len net/sched: act_ipt: add sanity checks on skb before calling target spi: spi-geni-qcom: enable SPI_CONTROLLER_MUST_TX for GPI DMA mode net: mscc: ocelot: don't report that RX timestamping is enabled by default net: mscc: ocelot: don't keep PTP configuration of all ports in single structure net: dsa: felix: don't drop PTP frames with tag_8021q when RX timestamping is disabled net: dsa: sja1105: always enable the INCL_SRCPT option net: dsa: tag_sja1105: always prefer source port information from INCL_SRCPT Add MODULE_FIRMWARE() for FIRMWARE_TG357766. Bluetooth: fix invalid-bdaddr quirk for non-persistent setup Bluetooth: ISO: use hci_sync for setting CIG parameters Bluetooth: MGMT: add CIS feature bits to controller information Bluetooth: MGMT: Use BIT macro when defining bitfields Bluetooth: MGMT: Fix marking SCAN_RSP as not connectable ibmvnic: Do not reset dql stats on NON_FATAL err net: dsa: vsc73xx: fix MTU configuration mlxsw: minimal: fix potential memory leak in mlxsw_m_linecards_init spi: bcm-qspi: return error if neither hif_mspi nor mspi is available drm/amdgpu: fix number of fence calculations drm/amd: Don't try to enable secure display TA multiple times mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 f2fs: fix error path handling in truncate_dnode() octeontx2-af: Fix mapping for NIX block from CGX connection octeontx2-af: Add validation before accessing cgx and lmac ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr() powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y powerpc: dts: turris1x.dts: Fix PCIe MEM size for pci2 node net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode net: dsa: tag_sja1105: fix source port decoding in vlan_filtering=0 bridge mode net: fix net_dev_start_xmit trace event vs skb_transport_offset() tcp: annotate data races in __tcp_oow_rate_limited() bpf, btf: Warn but return no error for NULL btf from __register_btf_kfunc_id_set() xsk: Honor SO_BINDTODEVICE on bind net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX fanotify: disallow mount/sb marks on kernel internal pseudo fs riscv: move memblock_allow_resize() after linear mapping is ready pptp: Fix fib lookup calls. net: dsa: tag_sja1105: fix MAC DA patching from meta frames net: dsa: sja1105: always enable the send_meta options octeontx-af: fix hardware timestamp configuration afs: Fix accidental truncation when storing data s390/qeth: Fix vipa deletion sh: dma: Fix DMA channel offset calculation apparmor: fix missing error check for rhashtable_insert_fast i2c: xiic: Don't try to handle more interrupt events after error dm: fix undue/missing spaces dm: avoid split of quoted strings where possible dm ioctl: have constant on the right side of the test dm ioctl: Avoid double-fetch of version extcon: usbc-tusb320: Convert to i2c's .probe_new() extcon: usbc-tusb320: Unregister typec port on driver removal btrfs: do not BUG_ON() on tree mod log failure at balance_level() i2c: qup: Add missing unwind goto in qup_i2c_probe() irqchip/loongson-pch-pic: Fix potential incorrect hwirq assignment NFSD: add encoding of op_recall flag for write delegation irqchip/loongson-pch-pic: Fix initialization of HT vector register io_uring: wait interruptibly for request completions on exit mmc: core: disable TRIM on Kingston EMMC04G-M627 mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used. wifi: cfg80211: fix regulatory disconnect for non-MLO wifi: ath10k: Serialize wake_tx_queue ops wifi: mt76: mt7921e: fix init command fail with enabled device bcache: fixup btree_cache_wait list damage bcache: Remove unnecessary NULL point check in node allocations bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent watch_queue: prevent dangling pipe pointer um: Use HOST_DIR for mrproper integrity: Fix possible multiple allocation in integrity_inode_get() autofs: use flexible array in ioctl structure mm/damon/ops-common: atomically test and clear young on ptes and pmds shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs jffs2: reduce stack usage in jffs2_build_xattr_subsystem() fs: avoid empty option when generating legacy mount string ext4: Remove ext4 locking of moved directory Revert "f2fs: fix potential corruption when moving a directory" fs: Establish locking order for unrelated directories fs: Lock moved directories i2c: nvidia-gpu: Add ACPI property to align with device-tree i2c: nvidia-gpu: Remove ccgx,firmware-build property usb: typec: ucsi: Mark dGPUs as DEVICE scope ipvs: increase ip_vs_conn_tab_bits range for 64BIT btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile btrfs: delete unused BGs while reclaiming BGs btrfs: bail out reclaim process if filesystem is read-only btrfs: add block-group tree to lockdep classes btrfs: reinsert BGs failed to reclaim btrfs: fix race when deleting quota root from the dirty cow roots list btrfs: fix extent buffer leak after tree mod log failure at split_node() btrfs: do not BUG_ON() on tree mod log failure at __btrfs_cow_block() ASoC: mediatek: mt8173: Fix irq error path ASoC: mediatek: mt8173: Fix snd_soc_component_initialize error path regulator: tps65219: Fix matching interrupts for their regulators ARM: dts: qcom: ipq4019: fix broken NAND controller properties override ARM: orion5x: fix d2net gpio initialization leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename blktrace: use inline function for blk_trace_remove() while blktrace is disabled fs: no need to check source xfs: explicitly specify cpu when forcing inodegc delayed work to run immediately xfs: check that per-cpu inodegc workers actually run on that cpu xfs: disable reaping in fscounters scrub xfs: fix xfs_inodegc_stop racing with mod_delayed_work mm/mmap: Fix extra maple tree write drm/i915: Fix TypeC mode initialization during system resume drm/i915/tc: Fix TC port link ref init for DP MST during HW readout drm/i915/tc: Fix system resume MST mode restore for DP-alt sinks mtd: parsers: refer to ARCH_BCMBCA instead of ARCH_BCM4908 netfilter: nf_tables: unbind non-anonymous set if rule construction fails netfilter: conntrack: Avoid nf_ct_helper_hash uses after free netfilter: nf_tables: do not ignore genmask when looking up chain by id netfilter: nf_tables: prevent OOB access in nft_byteorder_eval wireguard: queueing: use saner cpu selection wrapping wireguard: netlink: send staged packets when setting initial private key tty: serial: fsl_lpuart: add earlycon for imx8ulp platform block/partition: fix signedness issue for Amiga partitions sh: mach-r2d: Handle virq offset in cascaded IRL demux sh: mach-highlander: Handle virq offset in cascaded IRL demux sh: mach-dreamcast: Handle virq offset in cascaded IRQ demux sh: hd64461: Handle virq offset for offchip IRQ base and HD64461 IRQ io_uring: Use io_schedule* in cqring wait Linux 6.1.39 Change-Id: I5867c943c99c157fa599ecd08da961c632e58302 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-09-02 19:41:42 +00:00
Eric Biggers	63af84cffe	ANDROID: fips140: fix the error injection module parameters Commit 63f46b45dda2 ("ANDROID: fips140: eliminate crypto-fips.a build step") made all fips140 source files other than fips140-module.c be compiled in the "fake built-in code" mode. This broke the fail_selftest and fail_integrity_check module parameters, as they are defined in fips140-eval-testing.c. Fix this by making fips140-eval-testing.c be compiled "normally", overriding fips140-defs.h. Bug: 188620248 Fixes: 63f46b45dda2 ("ANDROID: fips140: eliminate crypto-fips.a build step") Change-Id: Iebb70bdcbb698b92a7791fa7307e2325b1a9e4b6 Signed-off-by: Eric Biggers <ebiggers@google.com>	2023-08-24 21:55:00 +00:00
Stephan Müller	64c358c9ab	crypto: jitter - correct health test during initialization [ Upstream commit d23659769ad1bf2cbafaa0efcbae20ef1a74f77e ] With the update of the permanent and intermittent health errors, the actual indicator for the health test indicates a potential error only for the one offending time stamp gathered in the current iteration round. The next iteration round will "overwrite" the health test result. Thus, the entropy collection loop in jent_gen_entropy checks for the health test failure upon each loop iteration. However, the initialization operation checked for the APT health test once for an APT window which implies it would not catch most errors. Thus, the check for all health errors is now invoked unconditionally during each loop iteration for the startup test. With the change, the error JENT_ERCT becomes unused as all health errors are only reported with the JENT_HEALTH return code. This allows the removal of the error indicator. Fixes: 3fde2fe99aa6 ("crypto: jitter - permanent and intermittent health errors" ) Reported-by: Joachim Vandersmissen <git@jvdsn.com> Signed-off-by: Stephan Mueller <smueller@chronox.de> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-07-19 16:21:42 +02:00
Greg Kroah-Hartman	ed6634a559	Merge 'android14-6.1' into 'android14-6.1-lts' This catches the -lts branch up with all of the recent changes that have gone into the non-lts branch, INCLUDING the ABI update which we want here to ensure that we do NOT break any newly added dependent symbols (and to bring back in the reverts that were required before the ABI break). This includes the following commits: `0a859e781c` ANDROID: GKI: Include kheaders in gki_system_dlkm_modules `35fe0d393f` ANDROID: 6/16/2023 KMI update `fcc5e942e0` ANDROID: sched: Add parameter to android_rvh_schedule. `d4dd4d9f19` ANDROID: GKI: provide more padding for struct usb_phy `bb9c879726` ANDROID: GKI enable CONFIG_NETFILTER_XT_MATCH_CONNBYTES=y `a7b1da66a2` FROMGIT: arm64: set __exception_irq_entry with __irq_entry as a default `d73b3af21f` ANDROID: GKI: update symbol list file for xiaomi `73185e2d4e` ANDROID: Remove all but top-level OWNERS `1090306d3d` ANDROID: Enable GKI Dr. No Enforcement `16c18c497d` ANDROID: 6/16/2023 KMI update `fcc32be061` ANDROID: virt: gunyah: Sync with latest platform ops `69a3ec73e4` FROMGIT: usb: gadget: udc: core: Prevent soft_connect_store() race `18b677ffae` FROMGIT: usb: gadget: udc: core: Offload usb_udc_vbus_handler processing `a1741f9c45` UPSTREAM: Bluetooth: fix debugfs registration `d890debdaf` UPSTREAM: Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER `855c5479cb` UPSTREAM: net/ipv6: fix bool/int mismatch for skip_notify_on_dev_down `b0fa6dd29a` UPSTREAM: neighbour: fix unaligned access to pneigh_entry `1707d64dab` UPSTREAM: tcp: deny tcp_disconnect() when threads are waiting `a7cd7a3dd7` ANDROID: sound: usb: Add vendor's hooking interface `2c6f80378c` ANDROID: GKI: USB: XHCI: add Android ABI padding to struct xhci_driver_overrides `cd3b5ff535` ANDROID: usb: host: add address_device to xhci overrides `e3ff5d6bf0` UPSTREAM: bpf, sockmap: Avoid potential NULL dereference in sk_psock_verdict_data_ready() `07873e75c6` UPSTREAM: bpf, sockmap: Incorrectly handling copied_seq `e218734b1b` UPSTREAM: bpf, sockmap: Wake up polling after data copy `f9cc0b7f9b` UPSTREAM: bpf, sockmap: TCP data stall on recv before accept `028591f2c8` UPSTREAM: bpf, sockmap: Handle fin correctly `e69ad7c838` UPSTREAM: bpf, sockmap: Improved check for empty queue `ecfcbe21d7` UPSTREAM: bpf, sockmap: Reschedule is now done through backlog `42fcf3b6df` UPSTREAM: bpf, sockmap: Convert schedule_work into delayed_work `a59051006b` UPSTREAM: bpf, sockmap: Pass skb ownership through read_skb `86409bb4e1` ANDROID: virt: gunyah: Sync with latest Gunyah patches `705a9b5feb` ANDROID: virt: gunyah: Sync with latest documentation and sample `60662882b7` FROMLIST: usb: xhci-plat: add xhci_plat_priv_overwrite `6496f6cfbb` ANDROID: usb: host: export symbols for xhci hooks usage `90ab8e7f98` ANDROID: usb: host: add xhci hooks for USB offload Change-Id: I895db08515a0bc14c4548bb28b61acb1414a94cd Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-18 12:24:35 +00:00
Matthias Maennich	73185e2d4e	ANDROID: Remove all but top-level OWNERS Now that the branch is used to create production GKI images, need to institute ACK DrNo for all commits. The DrNo approvers are in the android-mainline branch at /OWNERS_DrNo. Bug: 287162457 Signed-off-by: Matthias Maennich <maennich@google.com> Change-Id: Id5bb83d7add5f314df6816c1c51b4bf2d8018e79	2023-06-15 09:54:33 +01:00
Greg Kroah-Hartman	2a77668d45	This is the 6.1.33 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmSC5VIACgkQONu9yGCS aT5RPhAAiVFNzTuQT4DtPzXUzl9hpNtdtZPVa/z28+SbOZyf2YgyDGXLHvnGbJ/2 8DWDV9uSsxdX2InNqzD/IbRSiHjXprpDssthq3Qr5aPH7FO76uICWndrCk0dhZsK kI/+J7BqS1vgtaxsZeo/IHmMQJ5oEzx/JzvcyK5po0rykNDCxWNnh8cK4YtFOVtk eRD8cPWXvJGn88pdPPlQuS75MKBGcAUZLodN//tP+x2bcWzocaTZUCEHL36eLcVc 0CxPykCpFOcLFLIJWQ+pY2/HR2ynTBxYoaXsTpscR+FKbS+Lz9B6PUoXCvqaV2/e lriLjg22lbqxBbBhEk5NLBVozajtU/gNq6pptp/EnZahwjjyavuToZviWf8NWfs0 2u+zQlolinCKnm+8o18dRn24kI7LbUSD2w+V8FydSQNHMikvu/xHgDdLgzmj2XAf ZIAkHdGjRzKL2euDPrp28D5vPfCqDjqT2wUE2vUsc+Ax4k6ewFCPs3cweWD8hoFS fAjTC3Q/oNp6eEbWuWJPxl+DW/tD3ezRGeqrRCXQwubcgwB5iaS5ItdCCfG/lfiJ PNHf4kpg4FlyBf8aPD+R3QA6KOuS1owNNk3cx72zHs8zPusosHWj9hDrXeYVn06G gj1SIoC+jC/L5nbYH9WFLnKm9+EQ28lcp9j7f1PdlDhkcJmzBRY= =Qjnb -----END PGP SIGNATURE----- Merge 6.1.33 into android14-6.1-lts Changes in 6.1.33 RDMA/bnxt_re: Fix the page_size used during the MR creation phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix CNTL2_DIF_TX_CTL0 value RDMA/efa: Fix unsupported page sizes in device RDMA/hns: Fix timeout attr in query qp for HIP08 RDMA/hns: Fix base address table allocation RDMA/hns: Modify the value of long message loopback slice dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved() RDMA/bnxt_re: Fix a possible memory leak RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx iommu/rockchip: Fix unwind goto issue iommu/amd: Don't block updates to GATag if guest mode is on iommu/amd: Handle GALog overflows iommu/amd: Fix up merge conflict resolution nfsd: make a copy of struct iattr before calling notify_change dmaengine: pl330: rename _start to prevent build error riscv: Fix unused variable warning when BUILTIN_DTB is set net/mlx5: Drain health before unregistering devlink net/mlx5: SF, Drain health before removing device net/mlx5: fw_tracer, Fix event handling net/mlx5e: Don't attach netdev profile while handling internal error net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure netrom: fix info-leak in nr_write_internal() af_packet: Fix data-races of pkt_sk(sk)->num. tls: improve lockless access safety of tls_err_abort() amd-xgbe: fix the false linkup in xgbe_phy_status perf ftrace latency: Remove unnecessary "--" from --use-nsec option mtd: rawnand: ingenic: fix empty stub helper definitions RDMA/irdma: Prevent QP use after free RDMA/irdma: Fix Local Invalidate fencing af_packet: do not use READ_ONCE() in packet_bind() tcp: deny tcp_disconnect() when threads are waiting tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set net/smc: Scan from current RMB list when no position specified net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK net/sched: sch_ingress: Only create under TC_H_INGRESS net/sched: sch_clsact: Only create under TC_H_CLSACT net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs net/sched: Prohibit regrafting ingress or clsact Qdiscs net: sched: fix NULL pointer dereference in mq_attach net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report udp6: Fix race condition in udp6_sendmsg & connect nfsd: fix double fget() bug in __write_ports_addfd() nvme: fix the name of Zone Append for verbose logging net/mlx5e: Fix error handling in mlx5e_refresh_tirs net/mlx5: Read embedded cpu after init bit cleared iommu/mediatek: Flush IOTLB completely only if domain has been attached net/sched: flower: fix possible OOB write in fl_set_geneve_opt() tcp: fix mishandling when the sack compression is deferred. net: dsa: mv88e6xxx: Increase wait after reset deactivation mtd: rawnand: marvell: ensure timing values are written mtd: rawnand: marvell: don't set the NAND frequency select rtnetlink: call validate_linkmsg in rtnl_create_link mptcp: avoid unneeded __mptcp_nmpc_socket() usage mptcp: add annotations around msk->subflow accesses mptcp: avoid unneeded address copy mptcp: simplify subflow_syn_recv_sock() mptcp: consolidate passive msk socket initialization mptcp: fix data race around msk->first access mptcp: add annotations around sk->sk_shutdown accesses drm/amdgpu: release gpu full access after "amdgpu_device_ip_late_init" watchdog: menz069_wdt: fix watchdog initialisation ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs. ASoC: Intel: soc-acpi-cht: Add quirk for Nextbook Ares 8A tablet drm/amdgpu: Use the default reset when loading or reloading the driver mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() drm/ast: Fix ARM compatibility btrfs: abort transaction when sibling keys check fails for leaves ARM: 9295/1: unwind:fix unwind abort for uleb128 case hwmon: (k10temp) Add PCI ID for family 19, model 78h media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield platform/mellanox: fix potential race in mlxbf-tmfifo driver gfs2: Don't deref jdesc in evict drm/amdgpu: set gfx9 onwards APU atomics support to be true fbdev: imsttfb: Fix use after free bug in imsttfb_probe fbdev: modedb: Add 1920x1080 at 60 Hz video mode fbdev: stifb: Fix info entry in sti_struct on error path nbd: Fix debugfs_create_dir error checking block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G nvme-pci: add quirk for missing secondary temperature thresholds ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12 ASoC: dwc: limit the number of overrun messages um: harddog: fix modular build xfrm: Check if_id in inbound policy/secpath match ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI codecs ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V ASoC: ssm2602: Add workaround for playback distortions media: dvb_demux: fix a bug for the continuity counter media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address media: netup_unidvb: fix irq init by register it at the end of probe media: dvb_ca_en50221: fix a size write bug media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table media: dvb-core: Fix use-after-free due on race condition at dvb_net media: dvb-core: Fix use-after-free due to race at dvb_register_device() media: dvb-core: Fix kernel WARNING for blocking operation in wait_event() media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 ASoC: SOF: debug: conditionally bump runtime_pm counter on exceptions ASoC: SOF: pcm: fix pm_runtime imbalance in error handling ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in error handling ASoC: SOF: pm: save io region state in case of errors in resume s390/pkey: zeroize key blobs s390/topology: honour nr_cpu_ids when adding CPUs ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value ARM: dts: stm32: add pin map for CAN controller on stm32f7 arm64/mm: mark private VM_FAULT_X defines as vm_fault_t arm64: vdso: Pass (void ) to virt_to_page() wifi: mac80211: simplify chanctx allocation wifi: mac80211: consider reserved chanctx for mindef wifi: mac80211: recalc chanctx mindef before assigning wifi: iwlwifi: mvm: Add locking to the rate read flow scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed wifi: b43: fix incorrect __packed annotation net: wwan: t7xx: Ensure init is completed before system sleep netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT nvme-multipath: don't call blk_mark_disk_dead in nvme_mpath_remove_disk nvme: do not let the user delete a ctrl before a complete initialization ALSA: oss: avoid missing-prototype warnings drm/msm: Be more shouty if per-process pgtables aren't working atm: hide unused procfs functions ceph: silence smatch warning in reconnect_caps_cb() drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged ublk: fix AB-BA lockdep warning nvme-pci: Add quirk for Teamgroup MP33 SSD block: Deny writable memory mapping if block is read-only KVM: arm64: vgic: Fix a circular locking issue KVM: arm64: vgic: Wrap vgic_its_create() with config_lock KVM: arm64: vgic: Fix locking comment media: mediatek: vcodec: Only apply 4K frame sizes on decoder formats mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug media: uvcvideo: Don't expose unsupported formats to userspace iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT method iio: adc: mxs-lradc: fix the order of two cleanup operations HID: google: add jewel USB id HID: wacom: avoid integer overflow in wacom_intuos_inout() iio: imu: inv_icm42600: fix timestamp reset dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value iio: light: vcnl4035: fixed chip ID check iio: adc: stm32-adc: skip adc-channels setup if none is present iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag iio: dac: mcp4725: Fix i2c_master_send() return value handling iio: addac: ad74413: fix resistance input processing iio: adc: ad7192: Change "shorted" channels to differential iio: adc: stm32-adc: skip adc-diff-channels setup if none is present iio: dac: build ad5758 driver when AD5758 is selected net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM usb: gadget: f_fs: Add unbind event before functionfs_unbind md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk() misc: fastrpc: return -EPIPE to invocations on device removal misc: fastrpc: reject new invocations during device removal scsi: stex: Fix gcc 13 warnings ata: libata-scsi: Use correct device no in ata_find_dev() drm/amdgpu: enable tmz by default for GC 11.0.1 drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4 drm/amd/pm: reverse mclk and fclk clocks levels for vangogh drm/amd/pm: resolve reboot exception for si oland drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5 drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp drm/amd/pm: reverse mclk and fclk clocks levels for renoir x86/mtrr: Revert 90b926e68f50 ("x86/pat: Fix pat_x_mtrr_type() for MTRR disabled case") mmc: vub300: fix invalid response handling mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK btrfs: fix csum_tree_block page iteration to avoid tripping on -Werror=array-bounds phy: qcom-qmp-combo: fix init-count imbalance phy: qcom-qmp-pcie-msm8996: fix init-count imbalance block: fix revalidate performance regression powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall iommu/amd: Fix domain flush size when syncing iotlb tpm, tpm_tis: correct tpm_tis_flags enumeration values riscv: perf: Fix callchain parse error with kernel tracepoint events io_uring: undeprecate epoll_ctl support selinux: don't use make's grouped targets feature yet mtdchar: mark bits of ioctl handler noinline tracing/timerlat: Always wakeup the timerlat thread tracing/histograms: Allow variables to have some modifiers tracing/probe: trace_probe_primary_from_call(): checked list_first_entry selftests: mptcp: connect: skip if MPTCP is not supported selftests: mptcp: pm nl: skip if MPTCP is not supported selftests: mptcp: join: skip if MPTCP is not supported selftests: mptcp: sockopt: skip if MPTCP is not supported selftests: mptcp: userspace pm: skip if MPTCP is not supported mptcp: fix connect timeout handling mptcp: fix active subflow finalization ext4: add EA_INODE checking to ext4_iget() ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() ext4: disallow ea_inodes with extended attributes ext4: add lockdep annotations for i_data_sem for ea_inode's fbcon: Fix null-ptr-deref in soft_cursor serial: 8250_tegra: Fix an error handling path in tegra_uart_probe() serial: cpm_uart: Fix a COMPILE_TEST dependency powerpc/xmon: Use KSYM_NAME_LEN in array size test_firmware: fix a memory leak with reqs buffer test_firmware: fix the memory leak of the allocated firmware buffer KVM: arm64: Populate fault info for watchpoint KVM: x86: Account fastpath-only VM-Exits in vCPU stats ksmbd: fix credit count leakage ksmbd: fix UAF issue from opinfo->conn ksmbd: fix incorrect AllocationSize set in smb2_get_info ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate ksmbd: fix multiple out-of-bounds read during context decoding KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() fs/ntfs3: Validate MFT flags before replaying logs regmap: Account for register length when chunking tpm, tpm_tis: Request threaded interrupt handler iommu/amd/pgtbl_v2: Fix domain max address drm/amd/display: Have Payload Properly Created After Resume xfs: verify buffer contents when we skip log replay tls: rx: strp: don't use GFP_KERNEL in softirq context arm64: efi: Use SMBIOS processor version to key off Ampere quirk selftests: mptcp: diag: skip if MPTCP is not supported selftests: mptcp: simult flows: skip if MPTCP is not supported selftests: mptcp: join: avoid using 'cmp --bytes' ext4: enable the lazy init thread when remounting read/write Linux 6.1.33 Note, the following commits were reverted from this merge, due to conflicts with other KVM patches. If they are needed later, they can be brought back in a way that enables them to actually build properly: `bafe94ac99` ("KVM: arm64: vgic: Fix locking comment") `150a5f74a5` ("KVM: arm64: vgic: Wrap vgic_its_create() with config_lock") `4129d71e5b` ("KVM: arm64: vgic: Fix a circular locking issue") Change-Id: I3c4183fbe22b22914ee8985bd6add545abded9d0 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-14 19:17:01 +00:00
Greg Kroah-Hartman	26c1cc6858	This is the 6.1.30 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmRuPHsACgkQONu9yGCS aT6USxAAx2uklTRE3mmIS9qytOjb8Z3gsA8LVaaQ3f25CWNiuverNj0mFyNtI9KX 84ZBS/G8aHA6z0dtdyMupHznHehQp7pVo0LOeVMz2bR+CjkpRQei2NimG8bGRcFK W6c40w99lD9dYpaal3yajs+k+LF3BktmBNc0SynCjjyEy4YA5RbWOhtGX6P4VRqs sPXcmmAHsqDPLfqsgsHiBNsiw+dCP7jY1a17rTxz1g49/4zS6BEGtxxpU4UZNbph rKrX0sgF8UM15IfdFc0CiOXhAcL7QQfUbucJ/94180gclF4j6QqAMueAr6mLWkFd Pj7vLn/KD2wA2dzTBekHZ9SYp31xcXomkzfdLoMMnazfy3RL4sO7WhJks0k0T2En 3LIlsRZx/C2ztf3SLq2z2Bw/ExaefrydLI9cWJBi7CQ5yUVO15edcv40W4pxoMOL xFDZhCksC+JNc74HPYKTmg+SJQsxtYeLrwb6zW43aJByY+rls70crfhdS5fORvmH G8qDS2PCNAqpulxyxQtYxiIcRiM4SqPskves+3nu7gBFGfsv2AJU1gNCorIpZuW8 DS2jrMwPv7gH+eUvqrnrtdA+Vk4TYWslg0mPlVNavX98i9/dC9Vjss3yXCYh7Q6u 0+BpSBLtKM4pahaMgKpYv/V/r+GKvIt7Npki8o/bs1nuykF04aw= =hAQM -----END PGP SIGNATURE----- Merge 6.1.30 into android14-6.1-lts Changes in 6.1.30 drm/fbdev-generic: prohibit potential out-of-bounds access drm/mipi-dsi: Set the fwnode for mipi_dsi_device ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings net: skb_partial_csum_set() fix against transport header magic value net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe() scsi: ufs: core: Fix I/O hang that occurs when BKOPS fails in W-LUN suspend tick/broadcast: Make broadcast device replacement work correctly linux/dim: Do nothing if no time delta between samples net: stmmac: Initialize MAC_ONEUS_TIC_COUNTER register net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). net: phy: bcm7xx: Correct read from expansion register netfilter: nf_tables: always release netdev hooks from notifier netfilter: conntrack: fix possible bug_on with enable_hooks=1 bonding: fix send_peer_notif overflow netlink: annotate accesses to nlk->cb_running net: annotate sk->sk_err write from do_recvmmsg() net: deal with most data-races in sk_wait_event() net: add vlan_get_protocol_and_depth() helper tcp: add annotations around sk->sk_shutdown accesses gve: Remove the code of clearing PBA bit ipvlan:Fix out-of-bounds caused by unclear skb->cb net: mscc: ocelot: fix stat counter register values net: datagram: fix data-races in datagram_poll() af_unix: Fix a data race of sk->sk_receive_queue->qlen. af_unix: Fix data races around sk->sk_shutdown. drm/i915/guc: Don't capture Gen8 regs on Xe devices drm/i915: Fix NULL ptr deref by checking new_crtc_state drm/i915/dp: prevent potential div-by-zero drm/i915: Expand force_probe to block probe of devices as well. drm/i915: taint kernel when force probing unsupported devices fbdev: arcfb: Fix error handling in arcfb_probe() ext4: reflect error codes from ext4_multi_mount_protect() to its callers ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled ext4: allow to find by goal if EXT4_MB_HINT_GOAL_ONLY is set ext4: allow ext4_get_group_info() to fail refscale: Move shutdown from wait_event() to wait_event_idle() selftests: cgroup: Add 'malloc' failures checks in test_memcontrol rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access open: return EINVAL for O_DIRECTORY \| O_CREAT fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() drm/displayid: add displayid_get_header() and check bounds better drm/amd/display: populate subvp cmd info only for the top pipe drm/amd/display: Correct DML calculation to align HW formula platform/x86: x86-android-tablets: Add Acer Iconia One 7 B1-750 data drm/amd/display: Enable HostVM based on rIOMMU active drm/amd/display: Use DC_LOG_DC in the trasform pixel function regmap: cache: Return error in cache sync operations for REGCACHE_NONE remoteproc: imx_dsp_rproc: Add custom memory copy implementation for i.MX DSP Cores arm64: dts: qcom: msm8996: Add missing DWC3 quirks media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish media: pvrusb2: VIDEO_PVRUSB2 depends on DVB_CORE to use dvb_* symbols ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup() drm/rockchip: dw_hdmi: cleanup drm encoder during unbind memstick: r592: Fix UAF bug in r592_remove due to race condition arm64: dts: imx8mq-librem5: Remove dis_u3_susphy_quirk from usb_dwc3_0 firmware: arm_sdei: Fix sleep from invalid context BUG ACPI: EC: Fix oops when removing custom query handlers drm/amd/display: fixed dcn30+ underflow issue remoteproc: stm32_rproc: Add mutex protection for workqueue drm/tegra: Avoid potential 32-bit integer overflow drm/msm/dp: Clean up handling of DP AUX interrupts ACPICA: Avoid undefined behavior: applying zero offset to null pointer ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects arm64: dts: qcom: sdm845-polaris: Drop inexistent properties irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 ACPI: video: Remove desktops without backlight DMI quirks drm/amd/display: Correct DML calculation to follow HW SPEC drm/amd: Fix an out of bounds error in BIOS parser drm/amdgpu: Fix sdma v4 sw fini error media: Prefer designated initializers over memset for subdev pad ops media: mediatek: vcodec: Fix potential array out-of-bounds in decoder queue_setup wifi: ath: Silence memcpy run-time false positive warning bpf: Annotate data races in bpf_local_storage wifi: brcmfmac: pcie: Provide a buffer of random bytes to the device wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex ext2: Check block size validity during mount scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery bnxt: avoid overflow in bnxt_get_nvram_directory() net: pasemi: Fix return type of pasemi_mac_start_tx() net: Catch invalid index in XPS mapping netdev: Enforce index cap in netdev_get_tx_queue scsi: target: iscsit: Free cmds before session free lib: cpu_rmap: Avoid use after free on rmap->obj array entries scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition gfs2: Fix inode height consistency check scsi: ufs: ufs-pci: Add support for Intel Lunar Lake ext4: set goal start correctly in ext4_mb_normalize_request ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() crypto: jitter - permanent and intermittent health errors f2fs: Fix system crash due to lack of free space in LFS f2fs: fix to drop all dirty pages during umount() if cp_error is set f2fs: fix to check readonly condition correctly samples/bpf: Fix fout leak in hbm's run_bpf_prog bpf: Add preempt_count_{sub,add} into btf id deny list md: fix soft lockup in status_resync wifi: iwlwifi: pcie: fix possible NULL pointer dereference wifi: iwlwifi: add a new PCI device ID for BZ device wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf wifi: iwlwifi: mvm: fix ptk_pn memory leak block, bfq: Fix division by zero error on zero wsum wifi: ath11k: Ignore frags from uninitialized peer in dp. wifi: iwlwifi: fix iwl_mvm_max_amsdu_size() for MLO null_blk: Always check queue mode setting from configfs wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace wifi: ath11k: Fix SKB corruption in REO destination ring nbd: fix incomplete validation of ioctl arg ipvs: Update width of source for ip_vs_sync_conn_options Bluetooth: btusb: Add new PID/VID 04ca:3801 for MT7663 Bluetooth: Add new quirk for broken local ext features page 2 Bluetooth: btrtl: add support for the RTL8723CS Bluetooth: Improve support for Actions Semi ATS2851 based devices Bluetooth: btrtl: check for NULL in btrtl_set_quirks() Bluetooth: btintel: Add LE States quirk support Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set Bluetooth: Add new quirk for broken set random RPA timeout for ATS2851 Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp Bluetooth: btrtl: Add the support for RTL8851B staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE HID: apple: Set the tilde quirk flag on the Geyser 4 and later staging: axis-fifo: initialize timeouts in init only ASoC: amd: yc: Add DMI entries to support HP OMEN 16-n0xxx (8A42) HID: logitech-hidpp: Don't use the USB serial for USB devices HID: logitech-hidpp: Reconcile USB and Unifying serials spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 usb: typec: ucsi: acpi: add quirk for ASUS Zenbook UM325 ALSA: hda: LNL: add HD Audio PCI ID ASoC: amd: Add Dell G15 5525 to quirks list ASoC: amd: yc: Add ThinkBook 14 G5+ ARP to quirks list for acp6x HID: apple: Set the tilde quirk flag on the Geyser 3 HID: Ignore battery for ELAN touchscreen on ROG Flow X13 GV301RA HID: wacom: generic: Set battery quirk only when we see battery data usb: typec: tcpm: fix multiple times discover svids error serial: 8250: Reinit port->pm on port specific driver unbind mcb-pci: Reallocate memory region to avoid memory overlapping sched: Fix KCSAN noinstr violation lkdtm/stackleak: Fix noinstr violation recordmcount: Fix memory leaks in the uwrite function soundwire: dmi-quirks: add remapping for Intel 'Rooks County' NUC M15 phy: st: miphy28lp: use _poll_timeout functions for waits soundwire: qcom: gracefully handle too many ports in DT soundwire: bus: Fix unbalanced pm_runtime_put() causing usage count underflow mfd: intel_soc_pmic_chtwc: Add Lenovo Yoga Book X90F to intel_cht_wc_models mfd: dln2: Fix memory leak in dln2_probe() mfd: intel-lpss: Add Intel Meteor Lake PCH-S LPSS PCI IDs parisc: Replace regular spinlock with spin_trylock on panic path platform/x86: Move existing HP drivers to a new hp subdir platform/x86: hp-wmi: add micmute to hp_wmi_keymap struct drm/amdgpu: drop gfx_v11_0_cp_ecc_error_irq_funcs xfrm: don't check the default policy if the policy allows the packet Revert "Fix XFRM-I support for nested ESP tunnels" drm/msm/dp: unregister audio driver during unbind drm/msm/dpu: Assign missing writeback log_mask drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header drm/msm/dpu: Remove duplicate register defines from INTF dt-bindings: display/msm: dsi-controller-main: Document qcom, master-dsi and qcom, sync-dual-dsi platform: Provide a remove callback that returns no value ASoC: fsl_micfil: Fix error handler with pm_runtime_enable cpupower: Make TSC read per CPU for Mperf monitor xfrm: Reject optional tunnel/BEET mode templates in outbound policies af_key: Reject optional tunnel/BEET mode templates in outbound policies drm/msm: Fix submit error-path leaks selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test net: fec: Better handle pm_runtime_get() failing in .remove() net: phy: dp83867: add w/a for packet errors seen with short cables ALSA: firewire-digi00x: prevent potential use after free wifi: mt76: connac: fix stats->tx_bytes calculation ALSA: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15 sfc: disable RXFCS and RXALL features by default vsock: avoid to close connected socket after the timeout tcp: fix possible sk_priority leak in tcp_v4_send_reset() serial: arc_uart: fix of_iomap leak in `arc_serial_probe` serial: 8250_bcm7271: balance clk_enable calls serial: 8250_bcm7271: fix leak in `brcmuart_probe` erspan: get the proto with the md version for collect_md net: dsa: rzn1-a5psw: enable management frames for CPU port net: dsa: rzn1-a5psw: fix STP states handling net: dsa: rzn1-a5psw: disable learning for standalone ports net: hns3: fix output information incomplete for dumping tx queue info with debugfs net: hns3: fix sending pfc frames after reset issue net: hns3: fix reset delay time to avoid configuration timeout net: hns3: fix reset timeout when enable full VF media: netup_unidvb: fix use-after-free at del_timer() SUNRPC: double free xprt_ctxt while still in use SUNRPC: always free ctxt when freeing deferred request SUNRPC: Fix trace_svc_register() call site ASoC: mediatek: mt8186: Fix use-after-free in driver remove path ASoC: SOF: topology: Fix logic for copying tuples drm/exynos: fix g2d_open/close helper function definitions net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() virtio-net: Maintain reverse cleanup order virtio_net: Fix error unwinding of XDP initialization tipc: add tipc_bearer_min_mtu to calculate min mtu tipc: do not update mtu if msg_max is too small in mtu negotiation tipc: check the bearer min mtu properly when setting it by netlink s390/cio: include subchannels without devices also for evaluation can: dev: fix missing CAN XL support in can_put_echo_skb() net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() net: bcmgenet: Restore phy_stop() depending upon suspend/close ice: introduce clear_reset_state operation ice: Fix ice VF reset during iavf initialization wifi: cfg80211: Drop entries with invalid BSSIDs in RNR wifi: mac80211: fortify the spinlock against deadlock by interrupt wifi: mac80211: fix min center freq offset tracing wifi: mac80211: Abort running color change when stopping the AP wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock wifi: iwlwifi: fw: fix DBGI dump wifi: iwlwifi: fix OEM's name in the ppag approved list wifi: iwlwifi: mvm: fix OEM's name in the tas approved list wifi: iwlwifi: mvm: don't trust firmware n_channels scsi: storvsc: Don't pass unused PFNs to Hyper-V host net: tun: rebuild error handling in tun_get_user tun: Fix memory leak for detached NAPI queue. cassini: Fix a memory leak in the error handling path of cas_init_one() net: dsa: mv88e6xxx: Fix mv88e6393x EPC write command offset igb: fix bit_shift to be in [1..8] range vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() net: wwan: iosm: fix NULL pointer dereference when removing device net: pcs: xpcs: fix C73 AN not getting enabled net: selftests: Fix optstring netfilter: nf_tables: fix nft_trans type confusion netfilter: nft_set_rbtree: fix null deref on element insertion bridge: always declare tunnel functions ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go USB: usbtmc: Fix direction for 0-length ioctl control messages usb-storage: fix deadlock when a scsi command timeouts more than once USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() usb: dwc3: debugfs: Resume dwc3 before accessing registers usb: gadget: u_ether: Fix host MAC address case usb: typec: altmodes/displayport: fix pin_assignment_show Revert "usb: gadget: udc: core: Prevent redundant calls to pullup" Revert "usb: gadget: udc: core: Invoke usb_gadget_connect only when started" xhci-pci: Only run d3cold avoidance quirk for s2idle xhci: Fix incorrect tracking of free space on transfer rings ALSA: hda: Fix Oops by 9.1 surround channel names ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table ALSA: hda/realtek: Add quirk for Clevo L140AU ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 ALSA: hda/realtek: Add quirk for 2nd ASUS GU603 ALSA: hda/realtek: Add quirk for HP EliteBook G10 laptops ALSA: hda/realtek: Fix mute and micmute LEDs for yet another HP laptop can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() can: kvaser_pciefd: Call request_irq() before enabling interrupts can: kvaser_pciefd: Empty SRB buffer in probe can: kvaser_pciefd: Clear listen-only bit if not explicitly requested can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt can: kvaser_pciefd: Disable interrupts in probe error path wifi: rtw88: use work to update rate to avoid RCU warning SMB3: Close all deferred handles of inode in case of handle lease break SMB3: drop reference to cfile before sending oplock break ksmbd: smb2: Allow messages padded to 8byte boundary ksmbd: allocate one more byte for implied bcc[0] ksmbd: fix wrong UserName check in session_user ksmbd: fix global-out-of-bounds in smb2_find_context_vals KVM: Fix vcpu_array[0] races statfs: enforce statfs[64] structure initialization maple_tree: make maple state reusable after mas_empty_area() mm: fix zswap writeback race condition serial: Add support for Advantech PCI-1611U card serial: 8250_exar: Add support for USR298x PCI Modems serial: qcom-geni: fix enabling deactivated interrupt thunderbolt: Clear registers properly when auto clear isn't in use vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF ceph: force updating the msg pointer in non-split case drm/amd/pm: fix possible power mode mismatch between driver and PMFW drm/amdgpu/gmc11: implement get_vbios_fb_size() drm/amdgpu/gfx10: Disable gfxoff before disabling powergating. drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11 as well drm/amdgpu: refine get gpu clock counter method drm/amdgpu/gfx11: update gpu_clock_counter logic dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries powerpc/iommu: DMA address offset is incorrectly calculated with 2MB TCEs powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device tpm/tpm_tis: Disable interrupts for more Lenovo devices powerpc/64s/radix: Fix soft dirty tracking nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() s390/dasd: fix command reject error on ESE devices s390/crypto: use vector instructions only if available for ChaCha20 s390/qdio: fix do_sqbs() inline assembly constraint arm64: mte: Do not set PG_mte_tagged if tags were not initialized rethook: use preempt_{disable, enable}_notrace in rethook_trampoline_handler rethook, fprobe: do not trace rethook related functions remoteproc: imx_dsp_rproc: Fix kernel test robot sparse warning crypto: testmgr - fix RNG performance in fuzz tests drm/amdgpu: declare firmware for new MES 11.0.4 drm/amd/amdgpu: introduce gc__mes_2.bin v2 drm/amdgpu: reserve the old gc_11_0__mes.bin Linux 6.1.30 Change-Id: I411885affcf017410aab34bf3fba2dde96df6593 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-12 20:48:03 +00:00
Greg Kroah-Hartman	51b8218413	Merge 6.1.29 into android14-6.1-lts Changes in 6.1.29 USB: dwc3: gadget: drop dead hibernation code usb: dwc3: gadget: Execute gadget stop after halting the controller drm/vmwgfx: Remove explicit and broken vblank handling drm/vmwgfx: Fix Legacy Display Unit atomic drm support crypto: ccp - Clear PSP interrupt status register before calling handler perf/x86/core: Zero @lbr instead of returning -1 in x86_perf_get_lbr() stub KVM: x86: Track supported PERF_CAPABILITIES in kvm_caps KVM: x86/pmu: Disallow legacy LBRs if architectural LBRs are available mtd: spi-nor: spansion: Remove NO_SFDP_FLAGS from s28hs512t info mtd: spi-nor: add SFDP fixups for Quad Page Program mtd: spi-nor: Add a RWW flag mtd: spi-nor: spansion: Enable JFFS2 write buffer for Infineon s28hx SEMPER flash qcom: llcc/edac: Support polling mode for ECC handling soc: qcom: llcc: Do not create EDAC platform device on SDM845 mailbox: zynq: Switch to flexible array to simplify code mailbox: zynqmp: Fix counts of child nodes mtd: spi-nor: spansion: Enable JFFS2 write buffer for Infineon s25hx SEMPER flash fs/ntfs3: Fix null-ptr-deref on inode->i_op in ntfs_lookup() drm/amd/display: Ext displays with dock can't recognized after resume KVM: x86/mmu: Avoid indirect call for get_cr3 KVM: x86: Do not unload MMU roots when only toggling CR0.WP with TDP enabled KVM: x86: Make use of kvm_read_cr_bits() when testing bits KVM: VMX: Make CR0.WP a guest owned bit KVM: x86/mmu: Refresh CR0.WP prior to checking for emulated permission faults ASoC: Intel: soc-acpi-byt: Fix "WM510205" match no longer working scsi: qedi: Fix use after free bug in qedi_remove() drm/amd/display: Remove FPU guards from the DML folder drm/amd/display: Add missing WA and MCLK validation drm/amd/display: Return error code on DSC atomic check failure drm/amd/display: Fixes for dcn32_clk_mgr implementation drm/amd/display: Reset OUTBOX0 r/w pointer on DMUB reset drm/amd/display: Do not clear GPINT register when releasing DMUB from reset drm/amd/display: Update bounding box values for DCN321 ixgbe: Fix panic during XDP_TX with > 64 CPUs octeonxt2-af: mcs: Fix per port bypass config octeontx2-af: mcs: Write TCAM_DATA and TCAM_MASK registers at once octeontx2-af: mcs: Config parser to skip 8B header octeontx2-af: mcs: Fix MCS block interrupt octeontx2-pf: mcs: Fix NULL pointer dereferences octeontx2-pf: mcs: Match macsec ethertype along with DMAC octeontx2-pf: mcs: Clear stats before freeing resource octeontx2-pf: mcs: Fix shared counters logic octeontx2-pf: mcs: Do not reset PN while updating secy net/ncsi: clear Tx enable mode when handling a Config required AEN tcp: fix skb_copy_ubufs() vs BIG TCP net/sched: cls_api: remove block_cb from driver_list before freeing sit: update dev->needed_headroom in ipip6_tunnel_bind_dev() selftests: srv6: make srv6_end_dt46_l3vpn_test more robust net: ipv6: fix skb hash for some RST packets net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu writeback: fix call of incorrect macro block: Skip destroyed blkg when restart in blkg_destroy_all() watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe() RISC-V: mm: Enable huge page support to kernel_page_present() function i2c: tegra: Fix PEC support for SMBUS block read net/sched: act_mirred: Add carrier check r8152: fix flow control issue of RTL8156A r8152: fix the poor throughput for 2.5G devices r8152: move setting r8153b_rx_agg_chg_indicate() sfc: Fix module EEPROM reporting for QSFP modules rxrpc: Fix hard call timeout units riscv: compat_syscall_table: Fixup compile warning drm/i915/mtl: Add the missing CPU transcoder mask in intel_device_info selftests: netfilter: fix libmnl pkg-config usage octeontx2-af: Secure APR table update with the lock octeontx2-af: Fix start and end bit for scan config octeontx2-af: Fix depth of cam and mem table. octeontx2-pf: Increase the size of dmac filter flows octeontx2-af: Allow mkex profile without DMAC and add L2M/L2B header extraction support octeontx2-pf: Add additional checks while configuring ucast/bcast/mcast rules octeontx2-af: Update/Fix NPC field hash extract feature octeontx2-af: Fix issues with NPC field hash extract octeontx2-af: Skip PFs if not enabled octeontx2-pf: Disable packet I/O for graceful exit octeontx2-vf: Detach LF resources on probe cleanup ionic: remove noise from ethtool rxnfc error msg ethtool: Fix uninitialized number of lanes ionic: catch failure from devlink_alloc af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). drm/amdgpu: add a missing lock for AMDGPU_SCHED ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` KVM: s390: fix race in gmap_make_secure() net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621 net: dsa: mt7530: split-off common parts from mt7531_setup net: dsa: mt7530: fix network connectivity with multiple CPU ports ice: block LAN in case of VF to VF offload virtio_net: suppress cpu stall when free_unused_bufs net: enetc: check the index of the SFI rather than the handle perf record: Fix "read LOST count failed" msg with sample read perf scripts intel-pt-events.py: Fix IPC output for Python 2 perf vendor events s390: Remove UTF-8 characters from JSON file perf tests record_offcpu.sh: Fix redirection of stderr to stdin perf ftrace: Make system wide the default target for latency subcommand perf vendor events power9: Remove UTF-8 characters from JSON files perf pmu: zfree() expects a pointer to a pointer to zero it after freeing its contents perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() perf cs-etm: Fix timeless decode mode detection crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs() crypto: api - Add scaffolding to change completion function signature crypto: engine - Use crypto_request_complete crypto: engine - fix crypto_queue backlog handling perf symbols: Fix return incorrect build_id size in elf_read_build_id() perf tracepoint: Fix memory leak in is_valid_tracepoint() perf stat: Separate bperf from bpf_profiler RISC-V: take text_mutex during alternative patching RISC-V: fix taking the text_mutex twice during sifive errata patching x86/retbleed: Fix return thunk alignment btrfs: fix btrfs_prev_leaf() to not return the same key twice btrfs: zoned: fix wrong use of bitops API in btrfs_ensure_empty_zones btrfs: properly reject clear_cache and v1 cache for block-group-tree btrfs: fix assertion of exclop condition when starting balance btrfs: fix encoded write i_size corruption with no-holes btrfs: don't free qgroup space unless specified btrfs: zero the buffer before marking it dirty in btrfs_redirty_list_add btrfs: make clear_cache mount option to rebuild FST without disabling it btrfs: print-tree: parent bytenr must be aligned to sector size btrfs: fix space cache inconsistency after error loading it from disk btrfs: zoned: zone finish data relocation BG with last IO btrfs: zoned: fix full zone super block reading on ZNS cifs: fix pcchunk length type in smb2_copychunk_range cifs: release leases for deferred close handles when freezing platform/x86/intel-uncore-freq: Return error on write frequency platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet platform/x86: thinkpad_acpi: Fix platform profiles on T490 platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i platform/x86: thinkpad_acpi: Add profile force ability inotify: Avoid reporting event with invalid wd smb3: fix problem remounting a share after shutdown SMB3: force unmount was failing to close deferred close files sh: math-emu: fix macro redefined warning sh: mcount.S: fix build error when PRINTK is not enabled sh: init: use OF_EARLY_FLATTREE for early init sh: nmi_debug: fix return value of __setup handler proc_sysctl: update docs for __register_sysctl_table() proc_sysctl: enhance documentation remoteproc: stm32: Call of_node_put() on iteration error remoteproc: st: Call of_node_put() on iteration error remoteproc: imx_dsp_rproc: Call of_node_put() on iteration error remoteproc: imx_rproc: Call of_node_put() on iteration error remoteproc: rcar_rproc: Call of_node_put() on iteration error sysctl: clarify register_sysctl_init() base directory order ARM: dts: aspeed: asrock: Correct firmware flash SPI clocks ARM: dts: exynos: fix WM8960 clock name in Itop Elite ARM: dts: s5pv210: correct MIPI CSIS clock name ARM: dts: aspeed: romed8hm3: Fix GPIO polarity of system-fault LED drm/msm/adreno: fix runtime PM imbalance at gpu load drm/bridge: lt8912b: Fix DSI Video Mode drm/i915/color: Fix typo for Plane CSC indexes drm/msm: fix NULL-deref on snapshot tear down drm/msm: fix NULL-deref on irq uninstall drm/msm: fix drm device leak on bind errors drm/msm: fix vram leak on bind errors drm/msm: fix workqueue leak on bind errors drm/i915/dsi: Use unconditional msleep() instead of intel_dsi_msleep() f2fs: fix null pointer panic in tracepoint in __replace_atomic_write_block f2fs: fix potential corruption when moving a directory irqchip/loongson-pch-pic: Fix pch_pic_acpi_init calling irqchip/loongson-eiointc: Fix returned value on parsing MADT drm/panel: otm8009a: Set backlight parent to panel device drm/amd/display: Add NULL plane_state check for cursor disable logic drm/amd/display: Fix 4to1 MPC black screen with DPP RCO drm/amd/display: filter out invalid bits in pipe_fuses drm/amd/display: fix flickering caused by S/G mode drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras drm/amdgpu/jpeg: Remove harvest checking for JPEG3 drm/amdgpu: change gfx 11.0.4 external_id range drm/amdgpu: Fix vram recover doesn't work after whole GPU reset (v2) drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes drm/amd/pm: parse pp_handle under appropriate conditions drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend drm/amd/pm: avoid potential UBSAN issue on legacy asics drm/amdgpu: remove deprecated MES version vars drm/amd: Load MES microcode during early_init drm/amd: Add a new helper for loading/validating microcode drm/amd: Use `amdgpu_ucode_` helpers for MES HID: wacom: Set a default resolution for older tablets HID: wacom: insert timestamp to packed Bluetooth (BT) events fs/ntfs3: Refactoring of various minor issues drm/msm/adreno: adreno_gpu: Use suspend() instead of idle() on load error f2fs: specify extent cache for read explicitly f2fs: move internal functions into extent_cache.c f2fs: remove unnecessary __init_extent_tree f2fs: refactor extent_cache to support for read and more f2fs: allocate the extent_cache by default f2fs: factor out victim_entry usage from general rb_tree use drm/msm/adreno: Simplify read64/write64 helpers drm/msm: Hangcheck progress detection drm/msm: fix missing wq allocation error handling irqchip/loongarch: Adjust acpi_cascade_irqdomain_init() and sub-routines irqchip/loongson-eiointc: Fix incorrect use of acpi_get_vec_parent irqchip/loongson-eiointc: Fix registration of syscore_ops wifi: rtw88: rtw8821c: Fix rfe_option field width drm/i915/mtl: update scaler source and destination limits for MTL drm/i915: Check pipe source size when using skl+ scalers drm/amd/display: Refactor eDP PSR codes drm/amd/display: Add Z8 allow states to z-state support list drm/amd/display: Add debug option to skip PSR CRTC disable drm/amd/display: Fix Z8 support configurations drm/amd/display: Add minimum Z8 residency debug option drm/amd/display: Update minimum stutter residency for DCN314 Z8 drm/amd/display: Lowering min Z8 residency time ASoC: rt1318: Add RT1318 SDCA vendor-specific driver ASoC: codecs: constify static sdw_slave_ops struct ASoC: codecs: wcd938x: fix accessing regmap on unattached devices drm/amd/display: Update Z8 watermarks for DCN314 drm/amd/display: Update Z8 SR exit/enter latencies drm/amd/display: Change default Z8 watermark values ksmbd: Implements sess->ksmbd_chann_list as xarray ksmbd: fix racy issue from session setup and logoff ksmbd: destroy expired sessions ksmbd: block asynchronous requests when making a delay on session setup ksmbd: fix racy issue from smb2 close and logoff with multichannel drm: Add missing DP DSC extended capability definitions. drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage locking/rwsem: Add __always_inline annotation to __down_read_common() and inlined callers ext4: fix WARNING in mb_find_extent ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum ext4: fix data races when using cached status extents ext4: check iomap type only if ext4_iomap_begin() does not fail ext4: improve error recovery code paths in __ext4_remount() ext4: improve error handling from ext4_dirhash() ext4: fix deadlock when converting an inline directory in nojournal mode ext4: add bounds checking in get_max_inline_xattr_value_size() ext4: bail out of ext4_xattr_ibody_get() fails for any reason ext4: fix lockdep warning when enabling MMP ext4: remove a BUG_ON in ext4_mb_release_group_pa() ext4: fix invalid free tracking in ext4_xattr_move_to_block() drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values f2fs: fix to do sanity check on extent cache correctly f2fs: inode: fix to do sanity check on extent cache correctly x86/amd_nb: Add PCI ID for family 19h model 78h x86: fix clear_user_rep_good() exception handling annotation spi: fsl-spi: Re-organise transfer bits_per_word adaptation spi: fsl-cpm: Use 16 bit mode for large transfers with even size drm/amd/display: Fix hang when skipping modeset Linux 6.1.29 Change-Id: I576de3e4ff6a12decefda8ca0014ca600da837dd Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-12 17:53:47 +00:00
Greg Kroah-Hartman	ef75a88787	Merge 6.1.28 into android14-6.1-lts Changes in 6.1.28 ASOC: Intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15 ASoC: Intel: soc-acpi: add table for Intel 'Rooks County' NUC M15 ASoC: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm x86/hyperv: Block root partition functionality in a Confidential VM ASoC: amd: yc: Add DMI entries to support Victus by HP Laptop 16-e1xxx (8A22) iio: adc: palmas_gpadc: fix NULL dereference on rmmod ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 ASoC: da7213.c: add missing pm_runtime_disable() net: wwan: t7xx: do not compile with -Werror selftests mount: Fix mount_setattr_test builds failed scsi: mpi3mr: Handle soft reset in progress fault code (0xF002) net: sfp: add quirk enabling 2500Base-x for HG MXPD-483II platform/x86: thinkpad_acpi: Add missing T14s Gen1 type to s2idle quirk list wifi: ath11k: reduce the MHI timeout to 20s tracing: Error if a trace event has an array for a __field() asm-generic/io.h: suppress endianness warnings for readq() and writeq() x86/cpu: Add model number for Intel Arrow Lake processor wireguard: timers: cast enum limits members to int in prints wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset ASoC: amd: fix ACP version typo mistake ASoC: amd: ps: update the acp clock source. arm64: Always load shadow stack pointer directly from the task struct arm64: Stash shadow stack pointer in the task struct on interrupt powerpc/boot: Fix boot wrapper code generation with CONFIG_POWER10_CPU PCI: kirin: Select REGMAP_MMIO PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock PCI: qcom: Fix the incorrect register usage in v2.7.0 config phy: qcom-qmp-pcie: sc8180x PCIe PHY has 2 lanes IMA: allow/fix UML builds usb: gadget: udc: core: Invoke usb_gadget_connect only when started usb: gadget: udc: core: Prevent redundant calls to pullup usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive USB: dwc3: fix runtime pm imbalance on probe errors USB: dwc3: fix runtime pm imbalance on unbind hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write hwmon: (adt7475) Use device_property APIs when configuring polarity tpm: Add !tpm_amd_is_rng_defective() to the hwrng_unregister() call site posix-cpu-timers: Implement the missing timer_wait_running callback media: ov8856: Do not check for for module version blk-stat: fix QUEUE_FLAG_STATS clear blk-crypto: don't use struct request_queue for public interfaces blk-crypto: add a blk_crypto_config_supported_natively helper blk-crypto: move internal only declarations to blk-crypto-internal.h blk-crypto: Add a missing include directive blk-mq: release crypto keyslot before reporting I/O complete blk-crypto: make blk_crypto_evict_key() return void blk-crypto: make blk_crypto_evict_key() more robust staging: iio: resolver: ads1210: fix config mode tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH xhci: fix debugfs register accesses while suspended serial: fix TIOCSRS485 locking serial: 8250: Fix serial8250_tx_empty() race with DMA Tx serial: max310x: fix IO data corruption in batched operations tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem fs: fix sysctls.c built MIPS: fw: Allow firmware to pass a empty env ipmi:ssif: Add send_retries increment ipmi: fix SSIF not responding under certain cond. iio: addac: stx104: Fix race condition when converting analog-to-digital iio: addac: stx104: Fix race condition for stx104_write_raw() kheaders: Use array declaration instead of char wifi: mt76: add missing locking to protect against concurrent rx/status calls pwm: meson: Fix axg ao mux parents pwm: meson: Fix g12a ao clk81 name soundwire: qcom: correct setting ignore bit on v1.5.1 pinctrl: qcom: lpass-lpi: set output value before enabling output ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus ring-buffer: Sync IRQ works before buffer destruction crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON() crypto: safexcel - Cleanup ring IRQ workqueues on load failure crypto: arm64/aes-neonbs - fix crash with CFI enabled crypto: ccp - Don't initialize CCP for PSP 0x1649 rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed reiserfs: Add security prefix to xattr name in reiserfs_security_write() KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted KVM: arm64: Avoid vcpu->mutex v. kvm->lock inversion in CPU_ON KVM: arm64: Avoid lock inversion when setting the VM register width KVM: arm64: Use config_lock to protect data ordered against KVM_RUN KVM: arm64: Use config_lock to protect vgic state KVM: arm64: vgic: Don't acquire its_lock before config_lock relayfs: fix out-of-bounds access in relay_file_read drm/amd/display: Remove stutter only configurations drm/amd/display: limit timing for single dimm memory drm/amd/display: fix PSR-SU/DSC interoperability support drm/amd/display: fix a divided-by-zero error KVM: RISC-V: Retry fault if vma_lookup() results become invalid ksmbd: fix racy issue under cocurrent smb2 tree disconnect ksmbd: call rcu_barrier() in ksmbd_server_exit() ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() ksmbd: fix memleak in session setup ksmbd: not allow guest user on multichannel ksmbd: fix deadlock in ksmbd_find_crypto_ctx() ACPI: video: Remove acpi_backlight=video quirk for Lenovo ThinkPad W530 i2c: omap: Fix standard mode false ACK readings riscv: mm: remove redundant parameter of create_fdt_early_page_table tracing: Fix permissions for the buffer_percent file swsmu/amdgpu_smu: Fix the wrong if-condition drm/amd/pm: re-enable the gfx imu when smu resume iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE RISC-V: Align SBI probe implementation with spec Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path" ubifs: Fix memleak when insert_old_idx() failed ubi: Fix return value overwrite issue in try_write_vid_and_data() ubifs: Free memory for tmpfile name ubifs: Fix memory leak in do_rename ceph: fix potential use-after-free bug when trimming caps xfs: don't consider future format versions valid cxl/hdm: Fail upon detecting 0-sized decoders bus: mhi: host: Remove duplicate ee check for syserr bus: mhi: host: Use mhi_tryset_pm_state() for setting fw error state bus: mhi: host: Range check CHDBOFF and ERDBOFF ASoC: dt-bindings: qcom,lpass-rx-macro: correct minItems for clocks kunit: improve KTAP compliance of KUnit test output kunit: fix bug in the order of lines in debugfs logs rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem selftests/resctrl: Move ->setup() call outside of test specific branches selftests/resctrl: Allow ->setup() to return errors selftests/resctrl: Check for return value after write_schemata() selinux: fix Makefile dependencies of flask.h selinux: ensure av_permissions.h is built when needed tpm, tpm_tis: Do not skip reset of original interrupt vector tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed tpm, tpm_tis: Claim locality before writing interrupt registers tpm, tpm: Implement usage counter for locality tpm, tpm_tis: Claim locality when interrupts are reenabled on resume erofs: stop parsing non-compact HEAD index if clusterofs is invalid erofs: initialize packed inode after root inode is assigned erofs: fix potential overflow calculating xattr_isize drm/rockchip: Drop unbalanced obj unref drm/i915/dg2: Drop one PCI ID drm/vgem: add missing mutex_destroy drm/probe-helper: Cancel previous job before starting new one drm/amdgpu: register a vga_switcheroo client for MacBooks with apple-gmux tools/x86/kcpuid: Fix avx512bw and avx512lvl fields in Fn00000007 soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table arm64: dts: renesas: r9a07g044: Update IRQ numbers for SSI channels arm64: dts: renesas: r9a07g054: Update IRQ numbers for SSI channels arm64: dts: renesas: r9a07g043: Introduce SOC_PERIPHERAL_IRQ() macro to specify interrupt property arm64: dts: renesas: r9a07g043: Update IRQ numbers for SSI channels drm/mediatek: dp: Only trigger DRM HPD events if bridge is attached drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources EDAC/skx: Fix overflows on the DRAM row address mapping arrays ARM: dts: qcom-apq8064: Fix opp table child name regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted arm64: dts: ti: k3-am62-main: Fix GPIO numbers in DT arm64: dts: ti: k3-am62a7-sk: Fix DDR size to full 4GB arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name arm64: dts: broadcom: bcmbca: bcm4908: fix LED nodenames arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name arm64: dts: qcom: sc7280: fix EUD port properties arm64: dts: qcom: sdm845: correct dynamic power coefficients arm64: dts: qcom: sdm845: Fix the PCI I/O port range arm64: dts: qcom: msm8998: Fix the PCI I/O port range arm64: dts: qcom: sc7280: Fix the PCI I/O port range arm64: dts: qcom: ipq8074: Fix the PCI I/O port range arm64: dts: qcom: ipq6018: Fix the PCI I/O port range arm64: dts: qcom: msm8996: Fix the PCI I/O port range arm64: dts: qcom: sm8250: Fix the PCI I/O port range arm64: dts: qcom: sm8150: Fix the PCI I/O port range arm64: dts: qcom: sm8450: Fix the PCI I/O port range ARM: dts: qcom: ipq4019: Fix the PCI I/O port range ARM: dts: qcom: ipq8064: Fix the PCI I/O port range ARM: dts: qcom: sdx55: Fix the unit address of PCIe EP node x86/MCE/AMD: Use an u64 for bank_map media: bdisp: Add missing check for create_workqueue media: platform: mtk-mdp3: Add missing check and free for ida_alloc media: amphion: decoder implement display delay enable media: av7110: prevent underflow in write_ts_to_decoder() firmware: qcom_scm: Clear download bit during reboot drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 media: max9286: Free control handler arm64: dts: ti: k3-am625: Correct L2 cache size to 512KB arm64: dts: ti: k3-am62a7: Correct L2 cache size to 512KB drm/msm/adreno: drop bogus pm_runtime_set_active() drm: msm: adreno: Disable preemption on Adreno 510 virt/coco/sev-guest: Double-buffer messages arm64: dts: qcom: sm8350-microsoft-surface: fix USB dual-role mode property drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings ACPI: processor: Fix evaluating _PDC method when running as Xen dom0 mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data arm64: dts: qcom: sm8450: fix pcie1 gpios properties name drm: rcar-du: Fix a NULL vs IS_ERR() bug ARM: dts: gta04: fix excess dma channel usage firmware: arm_scmi: Fix xfers allocation on Rx channel perf/arm-cmn: Move overlapping wp_combine field ARM: dts: stm32: fix spi1 pin assignment on stm32mp15 arm64: dts: apple: t8103: Disable unused PCIe ports cpufreq: mediatek: fix passing zero to 'PTR_ERR' cpufreq: mediatek: fix KP caused by handler usage after regulator_put/clk_put cpufreq: mediatek: raise proc/sram max voltage for MT8516 cpufreq: mediatek: Raise proc and sram max voltage for MT7622/7623 cpufreq: qcom-cpufreq-hw: Revert adding cpufreq qos arm64: dts: mediatek: mt8192-asurada: Fix voltage constraint for Vgpu ACPI: VIOT: Initialize the correct IOMMU fwspec drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() drm/mediatek: dp: Change the aux retries times when receiving AUX_DEFER mailbox: mpfs: switch to txdone_poll soc: bcm: brcmstb: biuctrl: fix of_iomap leak soc: renesas: renesas-soc: Release 'chipid' from ioremap() gpu: host1x: Fix potential double free if IOMMU is disabled gpu: host1x: Fix memory leak of device names arm64: dts: qcom: sc7280-herobrine-villager: correct trackpad supply arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply arm64: dts: qcom: sc7180-trogdor-pazquel: correct trackpad supply arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator arm64: dts: qcom: apq8096-db820c: drop unit address from PMI8994 regulator drm/ttm: optimize pool allocations a bit v2 drm/ttm/pool: Fix ttm_pool_alloc error path regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() regulator: core: Avoid lockdep reports when resolving supplies x86/apic: Fix atomic update of offset in reserve_eilvt_offset() arm64: dts: qcom: msm8994-angler: Fix cont_splash_mem mapping arm64: dts: qcom: msm8994-angler: removed clash with smem_region arm64: dts: sc7180: Rename qspi data12 as data23 arm64: dts: sc7280: Rename qspi data12 as data23 media: mediatek: vcodec: Use 4K frame size when supported by stateful decoder media: mediatek: vcodec: Make MM21 the default capture format media: mediatek: vcodec: Force capture queue format to MM21 media: mediatek: vcodec: add params to record lat and core lat_buf count media: mediatek: vcodec: using each instance lat_buf count replace core ready list media: mediatek: vcodec: move lat_buf to the top of core list media: mediatek: vcodec: add core decode done event media: mediatek: vcodec: remove unused lat_buf media: mediatek: vcodec: making sure queue_work successfully media: mediatek: vcodec: change lat thread decode error condition media: cedrus: fix use after free bug in cedrus_remove due to race condition media: rkvdec: fix use after free bug in rkvdec_remove platform/x86/amd/pmf: Move out of BIOS SMN pair for driver probe platform/x86/amd: pmc: Don't try to read SMU version on Picasso platform/x86/amd: pmc: Hide SMU version and program attributes for Picasso platform/x86/amd: pmc: Don't dump data after resume from s0i3 on picasso platform/x86/amd: pmc: Move idlemask check into `amd_pmc_idlemask_read` platform/x86/amd: pmc: Utilize SMN index 0 for driver probe platform/x86/amd: pmc: Move out of BIOS SMN pair for STB init media: dm1105: Fix use after free bug in dm1105_remove due to race condition media: saa7134: fix use after free bug in saa7134_finidev due to race condition media: platform: mtk-mdp3: fix potential frame size overflow in mdp_try_fmt_mplane() media: rcar_fdp1: Fix refcount leak in probe and remove function media: v4l: async: Return async sub-devices to subnotifier list media: hi846: Fix memleak in hi846_init_controls() drm/amd/display: Fix potential null dereference media: rc: gpio-ir-recv: Fix support for wake-up media: venus: dec: Fix handling of the start cmd media: venus: dec: Fix capture formats enumeration order regulator: stm32-pwr: fix of_iomap leak x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step perf/arm-cmn: Fix port detection for CMN-700 media: mediatek: vcodec: fix decoder disable pm crash media: mediatek: vcodec: add remove function for decoder platform driver debugobject: Prevent init race with static objects drm/i915: Make intel_get_crtc_new_encoder() less oopsy tick/common: Align tick period with the HZ tick. ACPI: bus: Ensure that notify handlers are not running after removal cpufreq: use correct unit when verify cur freq rpmsg: glink: Propagate TX failures in intentless mode as well hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E platform/chrome: cros_typec_switch: Add missing fwnode_handle_put() wifi: ath6kl: minor fix for allocation size wifi: ath9k: hif_usb: fix memory leak of remain_skbs wifi: ath11k: Use platform_get_irq() to get the interrupt wifi: ath5k: Use platform_get_irq() to get the interrupt wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() wifi: ath11k: fix SAC bug on peer addition with sta band migration wifi: brcmfmac: support CQM RSSI notification with older firmware wifi: ath6kl: reduce WARN to dev_dbg() in callback tools: bpftool: Remove invalid \' json escape wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() bpf: take into account liveness when propagating precision bpf: fix precision propagation verbose logging crypto: qat - fix concurrency issue when device state changes scm: fix MSG_CTRUNC setting condition for SO_PASSSEC wifi: ath11k: fix deinitialization of firmware resources selftests/bpf: Fix a fd leak in an error path in network_helpers.c bpf: Remove misleading spec_v1 check on var-offset stack read net: pcs: xpcs: remove double-read of link state when using AN vlan: partially enable SIOCSHWTSTAMP in container net/packet: annotate accesses to po->xmit net/packet: convert po->origdev to an atomic flag net/packet: convert po->auxdata to an atomic flag libbpf: Fix ld_imm64 copy logic for ksym in light skeleton. net: dsa: qca8k: remove assignment of an_enabled in pcs_get_state() netfilter: keep conntrack reference until IPsecv6 policy checks are done bpf: Fix __reg_bound_offset 64->32 var_off subreg propagation scsi: target: core: Change the way target_xcopy_do_work() sets restiction on max I/O scsi: target: Move sess cmd counter to new struct scsi: target: Move cmd counter allocation scsi: target: Pass in cmd counter to use during cmd setup scsi: target: iscsit: isert: Alloc per conn cmd counter scsi: target: iscsit: Stop/wait on cmds during conn close scsi: target: Fix multiple LUN_RESET handling scsi: target: iscsit: Fix TAS handling during conn cleanup scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS net: sunhme: Fix uninitialized return code f2fs: handle dqget error in f2fs_transfer_project_quota() f2fs: fix uninitialized skipped_gc_rwsem f2fs: apply zone capacity to all zone type f2fs: compress: fix to call f2fs_wait_on_page_writeback() in f2fs_write_raw_pages() f2fs: fix scheduling while atomic in decompression path crypto: caam - Clear some memory in instantiate_rng crypto: sa2ul - Select CRYPTO_DES wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() scsi: libsas: Add sas_ata_device_link_abort() scsi: hisi_sas: Handle NCQ error when IPTT is valid wifi: rt2x00: Fix memory leak when handling surveys f2fs: fix iostat lock protection net: qrtr: correct types of trace event parameters selftests: xsk: Use correct UMEM size in testapp_invalid_desc selftests: xsk: Disable IPv6 on VETH1 selftests: xsk: Deflakify STATS_RX_DROPPED test selftests/bpf: Wait for receive in cg_storage_multi test bpftool: Fix bug for long instructions in program CFG dumps crypto: drbg - Only fail when jent is unavailable in FIPS mode xsk: Fix unaligned descriptor validation f2fs: fix to avoid use-after-free for cached IPU bio wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table bpf/btf: Fix is_int_ptr() scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() net: ethernet: stmmac: dwmac-rk: rework optional clock handling net: ethernet: stmmac: dwmac-rk: fix optional phy regulator handling wifi: ath11k: fix writing to unintended memory region bpf, sockmap: fix deadlocks in the sockhash and sockmap nvmet: fix error handling in nvmet_execute_identify_cns_cs_ns() nvmet: fix Identify Namespace handling nvmet: fix Identify Controller handling nvmet: fix Identify Active Namespace ID list handling nvmet: fix I/O Command Set specific Identify Controller nvme: fix async event trace event nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage" selftests/bpf: Use read_perf_max_sample_freq() in perf_event_stackmap selftests/bpf: Fix leaked bpf_link in get_stackid_cannot_attach blk-mq: don't plug for head insertions in blk_execute_rq_nowait wifi: iwlwifi: debug: fix crash in __iwl_err() wifi: iwlwifi: trans: don't trigger d3 interrupt twice wifi: iwlwifi: mvm: don't set CHECKSUM_COMPLETE for unsupported protocols bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap f2fs: fix to check return value of f2fs_do_truncate_blocks() f2fs: fix to check return value of inc_valid_block_count() md/raid10: fix task hung in raid10d md/raid10: fix leak of 'r10bio->remaining' for recovery md/raid10: fix memleak for 'conf->bio_split' md/raid10: fix memleak of md thread md/raid10: don't call bio_start_io_acct twice for bio which experienced read error wifi: iwlwifi: mvm: don't drop unencrypted MCAST frames wifi: iwlwifi: yoyo: skip dump correctly on hw error wifi: iwlwifi: yoyo: Fix possible division by zero wifi: iwlwifi: mvm: initialize seq variable wifi: iwlwifi: fw: move memset before early return jdb2: Don't refuse invalidation of already invalidated buffers io_uring/rsrc: use nospec'ed indexes wifi: iwlwifi: make the loop for card preparation effective wifi: mt76: mt7915: expose device tree match table wifi: mt76: handle failure of vzalloc in mt7615_coredump_work wifi: mt76: add flexible polling wait-interval support wifi: mt76: mt7921e: fix probe timeout after reboot wifi: mt76: fix 6GHz high channel not be scanned mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data wifi: mt76: mt7921: fix missing unwind goto in `mt7921u_probe` wifi: mt76: mt7921e: improve reliability of dma reset wifi: mt76: mt7921e: stop chip reset worker in unregister hook wifi: mt76: connac: fix txd multicast rate setting wifi: iwlwifi: mvm: check firmware response size netfilter: conntrack: restore IPS_CONFIRMED out of nf_conntrack_hash_check_insert() netfilter: conntrack: fix wrong ct->timeout value wifi: iwlwifi: fw: fix memory leak in debugfs ixgbe: Allow flow hash to be set via ethtool ixgbe: Enable setting RSS table to default values net/mlx5e: Don't clone flow post action attributes second time net/mlx5: E-switch, Create per vport table based on devlink encap mode net/mlx5: E-switch, Don't destroy indirect table in split rule net/mlx5e: Fix error flow in representor failing to add vport rx rule net/mlx5: Remove "recovery" arg from mlx5_load_one() function net/mlx5: Suspend auxiliary devices only in case of PCI device suspend Revert "net/mlx5: Remove "recovery" arg from mlx5_load_one() function" net/mlx5: Use recovery timeout on sync reset flow net/mlx5e: Nullify table pointer when failing to create net: stmmac:fix system hang when setting up tag_8021q VLAN for DSA ports bpf: Fix race between btf_put and btf_idr walk. bpf: Don't EFAULT for getsockopt with optval=NULL netfilter: nf_tables: don't write table validation state without mutex net: dpaa: Fix uninitialized variable in dpaa_stop() net/sched: sch_fq: fix integer overflow of "credit" ipv4: Fix potential uninit variable access bug in __ip_make_skb() Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" netlink: Use copy_to_user() for optval in netlink_getsockopt(). net: amd: Fix link leak when verifying config failed tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. ipmi: ASPEED_BT_IPMI_BMC: select REGMAP_MMIO instead of depending on it ASoC: cs35l41: Only disable internal boost drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() pstore: Revert pmsg_lock back to a normal mutex usb: host: xhci-rcar: remove leftover quirk handling usb: dwc3: gadget: Change condition for processing suspend event serial: stm32: Re-assert RTS/DE GPIO in RS485 mode only if more data are transmitted fpga: bridge: fix kernel-doc parameter description iio: light: max44009: add missing OF device matching serial: 8250_bcm7271: Fix arbitration handling spi: atmel-quadspi: Don't leak clk enable count in pm resume spi: atmel-quadspi: Free resources even if runtime resume failed in .remove() spi: imx: Don't skip cleanup in remove's error path usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition ASoC: soc-compress: Inherit atomicity from DAI link for Compress FE PCI: imx6: Install the fault handler only on compatible match ASoC: es8316: Handle optional IRQ assignment linux/vt_buffer.h: allow either builtin or modular for macros spi: qup: Don't skip cleanup in remove's error path interconnect: qcom: rpm: drop bogus pm domain attach spi: fsl-spi: Fix CPM/QE mode Litte Endian vmci_host: fix a race condition in vmci_host_poll() causing GPF of: Fix modalias string generation PCI/EDR: Clear Device Status after EDR error recovery ia64: mm/contig: fix section mismatch warning/error ia64: salinfo: placate defined-but-not-used warning scripts/gdb: bail early if there are no clocks scripts/gdb: bail early if there are no generic PD HID: amd_sfh: Correct the structure fields HID: amd_sfh: Correct the sensor enable and disable command HID: amd_sfh: Fix illuminance value HID: amd_sfh: Add support for shutdown operation HID: amd_sfh: Correct the stop all command HID: amd_sfh: Increase sensor command timeout for SFH1.1 HID: amd_sfh: Handle "no sensors" enabled for SFH1.1 cacheinfo: Check sib_leaf in cache_leaves_are_shared() coresight: etm_pmu: Set the module field drm/panel: novatek-nt35950: Improve error handling ASoC: fsl_mqs: move of_node_put() to the correct location PCI/PM: Extend D3hot delay for NVIDIA HDA controllers drm/panel: novatek-nt35950: Only unregister DSI1 if it exists spi: cadence-quadspi: fix suspend-resume implementations i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path scripts/gdb: raise error with reduced debugging information uapi/linux/const.h: prefer ISO-friendly __typeof__ sh: sq: Fix incorrect element size for allocating bitmap buffer usb: gadget: tegra-xudc: Fix crash in vbus_draw usb: chipidea: fix missing goto in `ci_hdrc_probe` usb: mtu3: fix kernel panic at qmu transfer done irq handler firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe tty: serial: fsl_lpuart: adjust buffer length to the intended size serial: 8250: Add missing wakeup event reporting spi: cadence-quadspi: use macro DEFINE_SIMPLE_DEV_PM_OPS staging: rtl8192e: Fix W_DISABLE# does not work after stop/start spmi: Add a check for remove callback when removing a SPMI driver virtio_ring: don't update event idx on get_buf fbdev: mmp: Fix deferred clk handling in mmphw_probe() selftests/powerpc/pmu: Fix sample field check in the mmcra_thresh_marked_sample_test macintosh/windfarm_smu_sat: Add missing of_node_put() powerpc/perf: Properly detect mpc7450 family powerpc/mpc512x: fix resource printk format warning powerpc/wii: fix resource printk format warnings powerpc/sysdev/tsi108: fix resource printk format warnings macintosh: via-pmu-led: requires ATA to be set powerpc/rtas: use memmove for potentially overlapping buffer copy sched/fair: Fix inaccurate tally of ttwu_move_affine perf/core: Fix hardlockup failure caused by perf throttle Revert "objtool: Support addition to set CFA base" riscv: Fix ptdump when KASAN is enabled sched/rt: Fix bad task migration for rt tasks tracing/user_events: Ensure write index cannot be negative clk: at91: clk-sam9x60-pll: fix return value check IB/hifi1: add a null check of kzalloc_node in hfi1_ipoib_txreq_init RDMA/siw: Fix potential page_array out of range access clk: mediatek: mt2712: Add error handling to clk_mt2712_apmixed_probe() clk: mediatek: Consistently use GATE_MTK() macro clk: mediatek: mt7622: Properly use CLK_IS_CRITICAL flag clk: mediatek: mt8135: Properly use CLK_IS_CRITICAL flag RDMA/rdmavt: Delete unnecessary NULL check clk: qcom: gcc-qcm2290: Fix up gcc_sdcc2_apps_clk_src workqueue: Fix hung time report of worker pools rtc: omap: include header for omap_rtc_power_off_program prototype RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time rtc: k3: handle errors while enabling wake irq RDMA/erdma: Use fixed hardware page size fs/ntfs3: Fix memory leak if ntfs_read_mft failed fs/ntfs3: Add check for kmemdup fs/ntfs3: Fix OOB read in indx_insert_into_buffer fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de() iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN power: supply: generic-adc-battery: fix unit scaling clk: add missing of_node_put() in "assigned-clocks" property parsing RDMA/siw: Remove namespace check from siw_netdev_event() clk: qcom: gcc-sm6115: Mark RCGs shared where applicable power: supply: rk817: Fix low SOC bugs RDMA/cm: Trace icm_send_rej event before the cm state is reset RDMA/srpt: Add a check for valid 'mad_agent' pointer IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests clk: imx: fracn-gppll: fix the rate table clk: imx: fracn-gppll: disable hardware select control clk: imx: imx8ulp: Fix XBAR_DIVBUS and AD_SLOW clock parents NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease iommu/amd: Set page size bitmap during V2 domain allocation clk: qcom: lpasscc-sc7280: Skip qdsp6ss clock registration clk: qcom: lpassaudiocc-sc7280: Add required gdsc power domain clks in lpass_cc_sc7280_desc clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling clk: qcom: dispcc-qcm2290: get rid of test clock clk: qcom: dispcc-qcm2290: Remove inexistent DSI1PHY clk Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe swiotlb: relocate PageHighMem test away from rmem_swiotlb_setup swiotlb: fix debugfs reporting of reserved memory pools RDMA/mlx5: Check pcie_relaxed_ordering_enabled() in UMR RDMA/mlx5: Fix flow counter query via DEVX SUNRPC: remove the maximum number of retries in call_bind_status RDMA/mlx5: Use correct device num_ports when modify DC clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails openrisc: Properly store r31 to pt_regs on unhandled exceptions timekeeping: Fix references to nonexistent ktime_get_fast_ns() SMB3: Add missing locks to protect deferred close file list SMB3: Close deferred file handles in case of handle lease break ext4: fix i_disksize exceeding i_size problem in paritally written case ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration pinctrl: renesas: r8a779f0: Fix tsn1_avtp_pps pin group pinctrl: renesas: r8a779g0: Fix Group 4/5 pin functions pinctrl: renesas: r8a779g0: Fix Group 6/7 pin functions pinctrl: renesas: r8a779g0: Fix ERROROUTC function names leds: TI_LMU_COMMON: select REGMAP instead of depending on it pinctrl: ralink: reintroduce ralink,rt2880-pinmux compatible string dmaengine: mv_xor_v2: Fix an error code. leds: tca6507: Fix error handling of using fwnode_property_read_string pwm: mtk-disp: Disable shadow registers before setting backlight values pwm: mtk-disp: Configure double buffering before reading in .get_state() soundwire: cadence: rename sdw_cdns_dai_dma_data as sdw_cdns_dai_runtime soundwire: intel: don't save hw_params for use in prepare phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port phy: ti: j721e-wiz: Fix unreachable code in wiz_mode_select() dma: gpi: remove spurious unlock in gpi_ch_init dmaengine: dw-edma: Fix to change for continuous transfer dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing dmaengine: at_xdmac: do not enable all cyclic channels pinctrl-bcm2835.c: fix race condition when setting gpio dir thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe mfd: tqmx86: Do not access I2C_DETECT register through io_base mfd: tqmx86: Specify IO port register range more precisely mfd: tqmx86: Correct board names for TQMxE39x mfd: ocelot-spi: Fix unsupported bulk read mfd: arizona-spi: Add missing MODULE_DEVICE_TABLE hte: tegra: fix 'struct of_device_id' build error hte: tegra-194: Fix off by one in tegra_hte_map_to_line_id() ACPI: PM: Do not turn of unused power resources on the Toshiba Click Mini PM: hibernate: Turn snapshot_test into global variable PM: hibernate: Do not get block device exclusively in test_resume mode afs: Fix updating of i_size with dv jump from server afs: Fix getattr to report server i_size on dirs, not local size afs: Avoid endless loop if file is larger than expected parisc: Fix argument pointer in real64_call_asm() parisc: Ensure page alignment in flush functions ALSA: usb-audio: Add quirk for Pioneer DDJ-800 ALSA: hda/realtek: Add quirk for ThinkPad P1 Gen 6 ALSA: hda/realtek: Add quirk for ASUS UM3402YAR using CS35L41 ALSA: hda/realtek: support HP Pavilion Aero 13-be0xxx Mute LED ALSA: hda/realtek: Fix mute and micmute LEDs for an HP laptop nilfs2: do not write dirty data after degenerating to read-only nilfs2: fix infinite loop in nilfs_mdt_get_block() mm: do not reclaim private data from pinned page drbd: correctly submit flush bio on barrier md/raid10: fix null-ptr-deref in raid10_sync_request md/raid5: Improve performance for sequential IO kasan: hw_tags: avoid invalid virt_to_page() mtd: core: provide unique name for nvmem device, take two mtd: core: fix nvmem error reporting mtd: core: fix error path for nvmem provider mtd: spi-nor: core: Update flash's current address mode when changing address mode mailbox: zynqmp: Fix IPI isr handling kcsan: Avoid READ_ONCE() in read_instrumented_memory() mailbox: zynqmp: Fix typo in IPI documentation wifi: rtl8xxxu: RTL8192EU always needs full init wifi: rtw89: fix potential race condition between napi_init and napi_enable clk: microchip: fix potential UAF in auxdev release callback clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent scripts/gdb: fix lx-timerlist for Python3 btrfs: scrub: reject unsupported scrub flags s390/dasd: fix hanging blockdevice after request requeue ia64: fix an addr to taddr in huge_pte_offset() mm/mempolicy: correctly update prev when policy is equal on mbind vhost_vdpa: fix unmap process in no-batch mode dm verity: fix error handling for check_at_most_once on FEC dm clone: call kmem_cache_destroy() in dm_clone_init() error path dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path dm flakey: fix a crash with invalid table line dm ioctl: fix nested locking in table_clear() to remove deadlock concern dm: don't lock fs when the map is NULL in process of resume blk-iocost: avoid 64-bit division in ioc_timer_fn cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname cifs: protect session status check in smb2_reconnect() thunderbolt: Use correct type in tb_port_is_clx_enabled() prototype bonding (gcc13): synchronize bond_{a,t}lb_xmit() types wifi: ath11k: synchronize ath11k_mac_he_gi_to_nl80211_he_gi()'s return type perf auxtrace: Fix address filter entire kernel size perf intel-pt: Fix CYC timestamps after standalone CBR block/blk-iocost (gcc13): keep large values in a new enum sfc (gcc13): synchronize ef100_enqueue_skb()'s return type i40e: Remove unused i40e status codes i40e: Remove string printing for i40e_status i40e: use int for i40e_status drm/amd/display (gcc13): fix enum mismatch debugobject: Ensure pool refill (again) scsi: libsas: Grab the ATA port lock in sas_ata_device_link_abort() netfilter: nf_tables: deactivate anonymous set from preparation phase Linux 6.1.28 Change-Id: I61b5133e2d051cc2aa39b8c7c1be3fc25da40210 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-09 20:20:52 +00:00
Roberto Sassu	0b28edf227	KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() commit c3d03e8e35e005e1a614e51bb59053eeb5857f76 upstream. Commit `ac4e97abce` ("scatterlist: sg_set_buf() argument must be in linear mapping") checks that both the signature and the digest reside in the linear mapping area. However, more recently commit `ba14a194a4` ("fork: Add generic vmalloced stack support") made it possible to move the stack in the vmalloc area, which is not contiguous, and thus not suitable for sg_set_buf() which needs adjacent pages. Always make a copy of the signature and digest in the same buffer used to store the key and its parameters, and pass them to sg_init_one(). Prefer it to conditionally doing the copy if necessary, to keep the code simple. The buffer allocated with kmalloc() is in the linear mapping area. Cc: stable@vger.kernel.org # 4.9.x Fixes: `ba14a194a4` ("fork: Add generic vmalloced stack support") Link: https://lore.kernel.org/linux-integrity/Y4pIpxbjBdajymBJ@sol.localdomain/ Suggested-by: Eric Biggers <ebiggers@kernel.org> Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com> Reviewed-by: Eric Biggers <ebiggers@google.com> Tested-by: Stefan Berger <stefanb@linux.ibm.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-06-09 10:34:28 +02:00
Eric Biggers	f05ccf6a6a	crypto: testmgr - fix RNG performance in fuzz tests commit f900fde28883602b6c5e1027a6c912b673382aaf upstream. The performance of the crypto fuzz tests has greatly regressed since v5.18. When booting a kernel on an arm64 dev board with all software crypto algorithms and CONFIG_CRYPTO_MANAGER_EXTRA_TESTS enabled, the fuzz tests now take about 200 seconds to run, or about 325 seconds with lockdep enabled, compared to about 5 seconds before. The root cause is that the random number generation has become much slower due to commit `d4150779e6` ("random32: use real rng for non-deterministic randomness"). On my same arm64 dev board, at the time the fuzz tests are run, get_random_u8() is about 345x slower than prandom_u32_state(), or about 469x if lockdep is enabled. Lockdep makes a big difference, but much of the rest comes from the get_random_() functions taking a very* slow path when the CRNG is not yet initialized. Since the crypto self-tests run early during boot, even having a hardware RNG driver enabled (CONFIG_CRYPTO_DEV_QCOM_RNG in my case) doesn't prevent this. x86 systems don't have this issue, but they still see a significant regression if lockdep is enabled. Converting the "Fully random bytes" case in generate_random_bytes() to use get_random_bytes() helps significantly, improving the test time to about 27 seconds. But that's still over 5x slower than before. This is all a bit silly, though, since the fuzz tests don't actually need cryptographically secure random numbers. So let's just make them use a non-cryptographically-secure RNG as they did before. The original prandom_u32() is gone now, so let's use prandom_u32_state() instead, with an explicitly managed state, like various other self-tests in the kernel source tree (rbtree_test.c, test_scanf.c, etc.) already do. This also has the benefit that no locking is required anymore, so performance should be even better than the original version that used prandom_u32(). Fixes: `d4150779e6` ("random32: use real rng for non-deterministic randomness") Cc: stable@vger.kernel.org Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-05-24 17:32:53 +01:00
Stephan Müller	c1b0b32f2d	crypto: jitter - permanent and intermittent health errors [ Upstream commit 3fde2fe99aa6dacd4151c87382b07ce7f30f0a52 ] According to SP800-90B, two health failures are allowed: the intermittend and the permanent failure. So far, only the intermittent failure was implemented. The permanent failure was achieved by resetting the entire entropy source including its health test state and waiting for two or more back-to-back health errors. This approach is appropriate for RCT, but not for APT as APT has a non-linear cutoff value. Thus, this patch implements 2 cutoff values for both RCT/APT. This implies that the health state is left untouched when an intermittent failure occurs. The noise source is reset and a new APT powerup-self test is performed. Yet, whith the unchanged health test state, the counting of failures continues until a permanent failure is reached. Any non-failing raw entropy value causes the health tests to reset. The intermittent error has an unchanged significance level of 2^-30. The permanent error has a significance level of 2^-60. Considering that this level also indicates a false-positive rate (see SP800-90B section 4.2) a false-positive must only be incurred with a low probability when considering a fleet of Linux kernels as a whole. Hitting the permanent error may cause a panic(), the following calculation applies: Assuming that a fleet of 10^9 Linux kernels run concurrently with this patch in FIPS mode and on each kernel 2 health tests are performed every minute for one year, the chances of a false positive is about 1:1000 based on the binomial distribution. In addition, any power-up health test errors triggered with jent_entropy_init are treated as permanent errors. A permanent failure causes the entire entropy source to permanently return an error. This implies that a caller can only remedy the situation by re-allocating a new instance of the Jitter RNG. In a subsequent patch, a transparent re-allocation will be provided which also changes the implied heuristic entropy assessment. In addition, when the kernel is booted with fips=1, the Jitter RNG is defined to be part of a FIPS module. The permanent error of the Jitter RNG is translated as a FIPS module error. In this case, the entire FIPS module must cease operation. This is implemented in the kernel by invoking panic(). The patch also fixes an off-by-one in the RCT cutoff value which is now set to 30 instead of 31. This is because the counting of the values starts with 0. Reviewed-by: Vladis Dronov <vdronov@redhat.com> Signed-off-by: Stephan Mueller <smueller@chronox.de> Reviewed-by: Marcelo Henrique Cerri <marcelo.cerri@canonical.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-05-24 17:32:38 +01:00
Olivier Bacon	2dd641d78d	crypto: engine - fix crypto_queue backlog handling [ Upstream commit 4140aafcff167b5b9e8dae6a1709a6de7cac6f74 ] CRYPTO_TFM_REQ_MAY_BACKLOG tells the crypto driver that it should internally backlog requests until the crypto hw's queue becomes full. At that point, crypto_engine backlogs the request and returns -EBUSY. Calling driver such as dm-crypt then waits until the complete() function is called with a status of -EINPROGRESS before sending a new request. The problem lies in the call to complete() with a value of -EINPROGRESS that is made when a backlog item is present on the queue. The call is done before the successful execution of the crypto request. In the case that do_one_request() returns < 0 and the retry support is available, the request is put back in the queue. This leads upper drivers to send a new request even if the queue is still full. The problem can be reproduced by doing a large dd into a crypto dm-crypt device. This is pretty easy to see when using Freescale CAAM crypto driver and SWIOTLB dma. Since the actual amount of requests that can be hold in the queue is unlimited we get IOs error and dma allocation. The fix is to call complete with a value of -EINPROGRESS only if the request is not enqueued back in crypto_queue. This is done by calling complete() later in the code. In order to delay the decision, crypto_queue is modified to correctly set the backlog pointer when a request is enqueued back. Fixes: `6a89f492f8` ("crypto: engine - support for parallel requests based on retry mechanism") Co-developed-by: Sylvain Ouellet <souellet@genetec.com> Signed-off-by: Sylvain Ouellet <souellet@genetec.com> Signed-off-by: Olivier Bacon <obacon@genetec.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-05-17 11:53:40 +02:00
Herbert Xu	14a2259317	crypto: engine - Use crypto_request_complete [ Upstream commit 6909823d47c17cba84e9244d04050b5db8d53789 ] Use the crypto_request_complete helper instead of calling the completion function directly. Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Stable-dep-of: 4140aafcff16 ("crypto: engine - fix crypto_queue backlog handling") Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-05-17 11:53:40 +02:00
Herbert Xu	8bc8e34e80	crypto: drbg - Only fail when jent is unavailable in FIPS mode [ Upstream commit 686cd976b6ddedeeb1a1fb09ba53a891d3cc9a03 ] When jent initialisation fails for any reason other than ENOENT, the entire drbg fails to initialise, even when we're not in FIPS mode. This is wrong because we can still use the kernel RNG when we're not in FIPS mode. Change it so that it only fails when we are in FIPS mode. Fixes: `57225e6797` ("crypto: drbg - Use callback API for random readiness") Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Reviewed-by: Stephan Mueller <smueller@chronox.de> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-05-11 23:03:21 +09:00
Toke Høiland-Jørgensen	42ca037d0c	crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON() commit a543ada7db729514ddd3ba4efa45f4c7b802ad85 upstream. The crypto_unregister_alg() function expects callers to ensure that any algorithm that is unregistered has a refcnt of exactly 1, and issues a BUG_ON() if this is not the case. However, there are in fact drivers that will call crypto_unregister_alg() without ensuring that the refcnt has been lowered first, most notably on system shutdown. This causes the BUG_ON() to trigger, which prevents a clean shutdown and hangs the system. To avoid such hangs on shutdown, demote the BUG_ON() in crypto_unregister_alg() to a WARN_ON() with early return. Cc stable because this problem was observed on a 6.2 kernel, cf the link below. Link: https://lore.kernel.org/r/87r0tyq8ph.fsf@toke.dk Cc: stable@vger.kernel.org Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-05-11 23:03:02 +09:00
Greg Kroah-Hartman	55e4f0c551	This is the 6.1.25 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmRBFW0ACgkQONu9yGCS aT7Jew//Ytw9+JQ71LT1TuJnQ1GayJOL1BW5hgxoYgnBFasWDwsGA9rzHs6KHqHb 0Vjk7MX7VZB+6zWakOxY5CFVM33J4fS7wY8WE2bj8X3QQhD/J0HQDMdELvSBi3qF 7xI6sghEQEwOuwAj2+CBqm/q7rA5FTnO1QgJuk/AKJ6PHGRiQeZ7q1zGpFvSaj7S cyKvY99RsjnUN+PYk4LE2+u/6DVCqiWYVDQrdjalb9zsrXg4+nmPH6ZJzZX8+bbM eM0xAR675V8TXqDi+8bj7tWmiS52XyjYF3Q/bu9BmU67DqslH9FFyVQxhgTHUZpN qWXkojEU2djIc3qt7T/bpZS/vD8Kg3Px1CgyIRN8Y5SlZfhZyqVdTZ4AQCtJuLQJ wDIdQCLlGzzDNFvbD+LdfJSjZt7Ig1sM/HwtPZhUA9yF0FN1XV3dcESzCOeI0/S7 ohRh8cs1sidnxrbvVwiVNENSqbJD7G9/9vVjIfyfcnt57q+fs6xCBhpOyNoVOp74 I5i6ALMcVZoAB50vDjnoGZsSRe9W2AmOV6UMIkVCvRCWYFqBpgVftMTAACNyljni UlXmO7aDQj+nbHD/auclFtU02oHQbk62FSrwoWMFS090zWztQqUhgRY7Qnl13yCM poEvrKlskXhvunsNtdVmI5O3N2GANWKgGwkyFIiXvgxKkw1qpUo= =zeN9 -----END PGP SIGNATURE----- Merge 6.1.25 into android14-6.1 Changes in 6.1.25 Revert "pinctrl: amd: Disable and mask interrupts on resume" drm/amd/display: Pass the right info to drm_dp_remove_payload ALSA: emu10k1: fix capture interrupt handler unlinking ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard ALSA: i2c/cs8427: fix iec958 mixer control deactivation ALSA: hda: patch_realtek: add quirk for Asus N7601ZM ALSA: hda/realtek: Add quirks for Lenovo Z13/Z16 Gen2 ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() ALSA: emu10k1: don't create old pass-through playback device on Audigy ALSA: hda/sigmatel: fix S/PDIF out on Intel D45 motherboards ALSA: hda/hdmi: disable KAE for Intel DG2 Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} Bluetooth: Fix race condition in hidp_session_thread bluetooth: btbcm: Fix logic error in forming the board name. Bluetooth: Free potentially unfreed SCO connection Bluetooth: hci_conn: Fix possible UAF btrfs: restore the thread_pool= behavior in remount for the end I/O workqueues btrfs: fix fast csum implementation detection fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace mtdblock: tolerate corrected bit-flips mtd: rawnand: meson: fix bitmask for length in command word mtd: rawnand: stm32_fmc2: remove unsupported EDO mode mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min KVM: arm64: PMU: Restore the guest's EL0 event counting after migration fbcon: Fix error paths in set_con2fb_map fbcon: set_con2fb_map needs to set con2fb_map! drm/i915/dsi: fix DSS CTL register offsets for TGL+ clk: sprd: set max_register according to mapping range RDMA/irdma: Do not generate SW completions for NOPs RDMA/irdma: Fix memory leak of PBLE objects RDMA/irdma: Increase iWARP CM default rexmit count RDMA/irdma: Add ipv4 check to irdma_find_listener() IB/mlx5: Add support for 400G_8X lane speed RDMA/erdma: Update default EQ depth to 4096 and max_send_wr to 8192 RDMA/erdma: Inline mtt entries into WQE if supported RDMA/erdma: Defer probing if netdevice can not be found clk: rs9: Fix suspend/resume RDMA/cma: Allow UD qp_type to join multicast only bpf: tcp: Use sock_gen_put instead of sock_put in bpf_iter_tcp LoongArch, bpf: Fix jit to skip speculation barrier opcode dmaengine: apple-admac: Handle 'global' interrupt flags dmaengine: apple-admac: Set src_addr_widths capability dmaengine: apple-admac: Fix 'current_tx' not getting freed 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition bpf, arm64: Fixed a BTI error on returning to patched function KVM: arm64: Initialise hypervisor copies of host symbols unconditionally KVM: arm64: Advertise ID_AA64PFR0_EL1.CSV2/3 to protected VMs niu: Fix missing unwind goto in niu_alloc_channels() tcp: restrict net.ipv4.tcp_app_win bonding: fix ns validation on backup slaves iavf: refactor VLAN filter states iavf: remove active_cvlans and active_svlans bitmaps net: openvswitch: fix race on port output Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure Bluetooth: Fix printing errors if LE Connection times out Bluetooth: SCO: Fix possible circular locking dependency sco_sock_getsockopt Bluetooth: Set ISO Data Path on broadcast sink drm/armada: Fix a potential double free in an error handling path qlcnic: check pci_reset_function result net: wwan: iosm: Fix error handling path in ipc_pcie_probe() cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() sctp: fix a potential overflow in sctp_ifwdtsn_skip RDMA/core: Fix GID entry ref leak when create_ah fails selftests: openvswitch: adjust datapath NL message declaration udp6: fix potential access to stale information net: macb: fix a memory corruption in extended buffer descriptor mode skbuff: Fix a race between coalescing and releasing SKBs libbpf: Fix single-line struct definition output in btf_dump ARM: 9290/1: uaccess: Fix KASAN false-positives ARM: dts: qcom: apq8026-lg-lenok: add missing reserved memory power: supply: rk817: Fix unsigned comparison with less than zero power: supply: cros_usbpd: reclassify "default case!" as debug power: supply: axp288_fuel_gauge: Added check for negative values selftests/bpf: Fix progs/find_vma_fail1.c build error. wifi: mwifiex: mark OF related data as maybe unused i2c: imx-lpi2c: clean rx/tx buffers upon new message i2c: hisi: Avoid redundant interrupts efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L block: ublk_drv: mark device as LIVE before adding disk ACPI: video: Add backlight=native DMI quirk for Acer Aspire 3830TG drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F hwmon: (peci/cputemp) Fix miscalculated DTS for SKX hwmon: (xgene) Fix ioremap and memremap leak verify_pefile: relax wrapper length check asymmetric_keys: log on fatal failures in PE/pkcs7 nvme: send Identify with CNS 06h only to I/O controllers wifi: iwlwifi: mvm: fix mvmtxq->stopped handling wifi: iwlwifi: mvm: protect TXQ list manipulation drm/amdgpu: add mes resume when do gfx post soft reset drm/amdgpu: Force signal hw_fences that are embedded in non-sched jobs drm/amdgpu/gfx: set cg flags to enter/exit safe mode ACPI: resource: Add Medion S17413 to IRQ override quirk x86/hyperv: Move VMCB enlightenment definitions to hyperv-tlfs.h KVM: selftests: Move "struct hv_enlightenments" to x86_64/svm.h KVM: SVM: Add a proper field for Hyper-V VMCB enlightenments x86/hyperv: KVM: Rename "hv_enlightenments" to "hv_vmcb_enlightenments" KVM: SVM: Flush Hyper-V TLB when required tracing: Add trace_array_puts() to write into instance tracing: Have tracing_snapshot_instance_cond() write errors to the appropriate instance maple_tree: fix write memory barrier of nodes once dead for RCU mode ksmbd: avoid out of bounds access in decode_preauth_ctxt() riscv: add icache flush for nommu sigreturn trampoline HID: intel-ish-hid: Fix kernel panic during warm reset net: sfp: initialize sfp->i2c_block_size at sfp allocation net: phy: nxp-c45-tja11xx: add remove callback net: phy: nxp-c45-tja11xx: fix unsigned long multiplication overflow scsi: ses: Handle enclosure with just a primary component gracefully x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot cgroup: fix display of forceidle time at root cgroup/cpuset: Fix partition root's cpuset.cpus update bug cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() drm/amd/pm: correct SMU13.0.7 pstate profiling clock settings drm/amd/pm: correct SMU13.0.7 max shader clock reporting mptcp: use mptcp_schedule_work instead of open-coding it mptcp: stricter state check in mptcp_worker ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size ubi: Fix deadlock caused by recursively holding work_sem i2c: mchp-pci1xxxx: Update Timing registers powerpc/papr_scm: Update the NUMA distance table for the target node sched/fair: Fix imbalance overflow x86/rtc: Remove __init for runtime functions i2c: ocores: generate stop condition after timeout in polling mode cifs: fix negotiate context parsing nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN nvme-pci: add NVME_QUIRK_BOGUS_NID for T-FORCE Z330 SSD cgroup/cpuset: Skip spread flags update on v2 cgroup/cpuset: Make cpuset_fork() handle CLONE_INTO_CGROUP properly cgroup/cpuset: Add cpuset_can_fork() and cpuset_cancel_fork() methods Linux 6.1.25 Change-Id: Ib4d2c49ea9bacb8d8dbdb7b3a4eecce937016427 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-04-26 13:13:19 +00:00
Robbie Harwood	3221808c1c	asymmetric_keys: log on fatal failures in PE/pkcs7 [ Upstream commit 3584c1dbfffdabf8e3dc1dd25748bb38dd01cd43 ] These particular errors can be encountered while trying to kexec when secureboot lockdown is in place. Without this change, even with a signed debug build, one still needs to reboot the machine to add the appropriate dyndbg parameters (since lockdown blocks debugfs). Accordingly, upgrade all pr_debug() before fatal error into pr_warn(). Signed-off-by: Robbie Harwood <rharwood@redhat.com> Signed-off-by: David Howells <dhowells@redhat.com> cc: Jarkko Sakkinen <jarkko@kernel.org> cc: Eric Biederman <ebiederm@xmission.com> cc: Herbert Xu <herbert@gondor.apana.org.au> cc: keyrings@vger.kernel.org cc: linux-crypto@vger.kernel.org cc: kexec@lists.infradead.org Link: https://lore.kernel.org/r/20230220171254.592347-3-rharwood@redhat.com/ # v2 Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-04-20 12:35:11 +02:00
Robbie Harwood	d29a47b456	verify_pefile: relax wrapper length check [ Upstream commit 4fc5c74dde69a7eda172514aaeb5a7df3600adb3 ] The PE Format Specification (section "The Attribute Certificate Table (Image Only)") states that `dwLength` is to be rounded up to 8-byte alignment when used for traversal. Therefore, the field is not required to be an 8-byte multiple in the first place. Accordingly, pesign has not performed this alignment since version 0.110. This causes kexec failure on pesign'd binaries with "PEFILE: Signature wrapper len wrong". Update the comment and relax the check. Signed-off-by: Robbie Harwood <rharwood@redhat.com> Signed-off-by: David Howells <dhowells@redhat.com> cc: Jarkko Sakkinen <jarkko@kernel.org> cc: Eric Biederman <ebiederm@xmission.com> cc: Herbert Xu <herbert@gondor.apana.org.au> cc: keyrings@vger.kernel.org cc: linux-crypto@vger.kernel.org cc: kexec@lists.infradead.org Link: https://learn.microsoft.com/en-us/windows/win32/debug/pe-format#the-attribute-certificate-table-image-only Link: https://github.com/rhboot/pesign Link: https://lore.kernel.org/r/20230220171254.592347-2-rharwood@redhat.com/ # v2 Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-04-20 12:35:11 +02:00
Greg Kroah-Hartman	2cb73a87e4	Merge 6.1.16 into android14-6.1 Changes in 6.1.16 HID: asus: use spinlock to protect concurrent accesses HID: asus: use spinlock to safely schedule workers powerpc/mm: Rearrange if-else block to avoid clang warning ata: ahci: Revert "ata: ahci: Add Tiger Lake UP{3,4} AHCI controller" ARM: OMAP2+: Fix memory leak in realtime_counter_init() arm64: dts: qcom: qcs404: use symbol names for PCIe resets arm64: dts: qcom: msm8996-tone: Fix USB taking 6 minutes to wake up arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k arm64: dts: qcom: sm6350: Fix up the ramoops node arm64: dts: qcom: sm6125: Reorder HSUSB PHY clocks to match bindings arm64: dts: qcom: sm6125-seine: Clean up gpio-keys (volume down) arm64: dts: imx8m: Align SoC unique ID node unit address ARM: zynq: Fix refcount leak in zynq_early_slcr_init arm64: dts: mediatek: mt8195: Add power domain to U3PHY1 T-PHY arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description arm64: dts: mediatek: mt8192: Fix systimer 13 MHz clock description arm64: dts: mediatek: mt8195: Fix systimer 13 MHz clock description arm64: dts: mediatek: mt8186: Fix systimer 13 MHz clock description arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name x86/acpi/boot: Do not register processors that cannot be onlined for x2APIC arm64: dts: qcom: sc7180: correct SPMI bus address cells arm64: dts: qcom: sc7280: correct SPMI bus address cells arm64: dts: qcom: sc8280xp: correct SPMI bus address cells arm64: dts: qcom: sc8280xp: Vote for CX in USB controllers arm64: dts: meson-gxl: jethub-j80: Fix WiFi MAC address node arm64: dts: meson-gxl: jethub-j80: Fix Bluetooth MAC node name arm64: dts: meson-axg: jethub-j1xx: Fix MAC address node names arm64: dts: meson-gx: Fix Ethernet MAC address unit name arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE again arm64: dts: ti: k3-am62: Enable SPI nodes at the board level arm64: dts: ti: k3-am62-main: Fix clocks for McSPI arm64: tegra: Fix duplicate regulator on Jetson TX1 arm64: dts: msm8992-bullhead: add memory hole region arm64: dts: qcom: msm8992-bullhead: Fix cont_splash_mem size arm64: dts: qcom: msm8992-bullhead: Disable dfps_data_mem arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges arm64: dts: qcom: ipq8074: fix Gen3 PCIe node arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names arm64: dts: meson: remove CPU opps below 1GHz for G12A boards ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init() arm64: dts: mediatek: mt8192: Mark scp_adsp clock as broken ARM: bcm2835_defconfig: Enable the framebuffer ARM: s3c: fix s3c64xx_set_timer_source prototype arm64: dts: ti: k3-j7200: Fix wakeup pinmux range ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato ARM: imx: Call ida_simple_remove() for ida_simple_get arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible arm64: dts: amlogic: meson-axg-jethome-jethub-j1xx: fix supply name of USB controller node arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names property arm64: dts: amlogic: meson-gx: add missing unit address to rng node name arm64: dts: amlogic: meson-gxl-s905w-jethome-jethub-j80: fix invalid rtc node name arm64: dts: amlogic: meson-axg-jethome-jethub-j1xx: fix invalid rtc node name arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip locking/rwsem: Disable preemption in all down_read() and up_read() code paths arm64: dts: renesas: beacon-renesom: Fix gpio expander reference arm64: dts: meson: radxa-zero: allow usb otg mode arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN ARM: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference ublk_drv: remove nr_aborted_queues from ublk_device ublk_drv: don't probe partitions if the ubq daemon isn't trusted ARM: dts: imx7s: correct iomuxc gpr mux controller cells sbitmap: remove redundant check in __sbitmap_queue_get_batch sbitmap: Use single per-bitmap counting to wake up queued tags sbitmap: correct wake_batch recalculation to avoid potential IO hung arm64: dts: mt8195: Fix CPU map for single-cluster SoC arm64: dts: mt8192: Fix CPU map for single-cluster SoC arm64: dts: mt8186: Fix CPU map for single-cluster SoC arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node arm64: dts: mediatek: mt8186: Fix watchdog compatible arm64: dts: mediatek: mt8195: Fix watchdog compatible arm64: dts: mediatek: mt7986: Fix watchdog compatible ARM: dts: stm32: Update part number NVMEM description on stm32mp131 blk-mq: avoid sleep in blk_mq_alloc_request_hctx blk-mq: remove stale comment for blk_mq_sched_mark_restart_hctx blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait blk-mq: Fix potential io hung for shared sbitmap per tagset blk-mq: correct stale comment of .get_budget arm64: dts: qcom: msm8996: support using GPLL0 as kryocc input arm64: dts: qcom: msm8996 switch from RPM_SMD_BB_CLK1 to RPM_SMD_XO_CLK_SRC arm64: dts: qcom: sm8350: drop incorrect cells from serial arm64: dts: qcom: sm8450: drop incorrect cells from serial arm64: dts: qcom: msm8992-lg-bullhead: Correct memory overlaps with the SMEM and MPSS memory regions arm64: dts: qcom: msm8953: correct TLMM gpio-ranges arm64: dts: qcom: msm8992-: Fix up comments arm64: dts: qcom: msm8992-lg-bullhead: Enable regulators s390/dasd: Fix potential memleak in dasd_eckd_init() sched/rt: pick_next_rt_entity(): check list_entry perf/x86/intel/ds: Fix the conversion from TSC to perf time x86/perf/zhaoxin: Add stepping check for ZXC KEYS: asymmetric: Fix ECDSA use via keyctl uapi block: ublk: check IO buffer based on flag need_get_data arm64: dts: qcom: pmk8350: Specify PBS register for PON arm64: dts: qcom: pmk8350: Use the correct PON compatible erofs: relinquish volume with mutex held block: sync mixed merged request's failfast with 1st bio's block: Fix io statistics for cgroup in throttle path block: bio-integrity: Copy flags when bio_integrity_payload is cloned block: use proper return value from bio_failfast() wifi: mt76: mt7915: add missing of_node_put() wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host wifi: mt76: mt7915: check return value before accessing free_block_num wifi: mt76: mt7915: drop always true condition of __mt7915_reg_addr() wifi: mt76: mt7915: fix unintended sign extension of mt7915_hw_queue_read() wifi: mt76: fix coverity uninit_use_in_call in mt76_connac2_reverse_frag0_hdr_trans() wifi: rsi: Fix memory leak in rsi_coex_attach() wifi: rtlwifi: rtl8821ae: don't call kfree_skb() under spin_lock_irqsave() wifi: rtlwifi: rtl8188ee: don't call kfree_skb() under spin_lock_irqsave() wifi: rtlwifi: rtl8723be: don't call kfree_skb() under spin_lock_irqsave() wifi: iwlegacy: common: don't call dev_kfree_skb() under spin_lock_irqsave() wifi: libertas: fix memory leak in lbs_init_adapter() wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave() wifi: rtw89: 8852c: rfk: correct DACK setting wifi: rtw89: 8852c: rfk: correct DPK settings wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() libbpf: Fix btf__align_of() by taking into account field offsets wifi: ipw2x00: don't call dev_kfree_skb() under spin_lock_irqsave() wifi: ipw2200: fix memory leak in ipw_wdev_init() wifi: wilc1000: fix potential memory leak in wilc_mac_xmit() wifi: wilc1000: add missing unregister_netdev() in wilc_netdev_ifc_init() wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() wifi: libertas_tf: don't call kfree_skb() under spin_lock_irqsave() wifi: libertas: if_usb: don't call kfree_skb() under spin_lock_irqsave() wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave() wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave() wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave() libbpf: Fix invalid return address register in s390 crypto: x86/ghash - fix unaligned access in ghash_setkey() ACPICA: Drop port I/O validation for some regions genirq: Fix the return type of kstat_cpu_irqs_sum() rcu-tasks: Improve comments explaining tasks_rcu_exit_srcu purpose rcu-tasks: Remove preemption disablement around srcu_read_[un]lock() calls rcu-tasks: Fix synchronize_rcu_tasks() VS zap_pid_ns_processes() lib/mpi: Fix buffer overrun when SG is too long crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2 platform/chrome: cros_ec_typec: Update port DP VDO ACPICA: nsrepair: handle cases without a return value correctly selftests/xsk: print correct payload for packet dump selftests/xsk: print correct error codes when exiting arm64/cpufeature: Fix field sign for DIT hwcap detection kselftest/arm64: Fix syscall-abi for systems without 128 bit SME workqueue: Protects wq_unbound_cpumask with wq_pool_attach_mutex s390/early: fix sclp_early_sccb variable lifetime s390/vfio-ap: fix an error handling path in vfio_ap_mdev_probe_queue() x86/signal: Fix the value returned by strict_sas_size() thermal/drivers/tsens: Drop msm8976-specific defines thermal/drivers/tsens: Sort out msm8976 vs msm8956 data thermal/drivers/tsens: fix slope values for msm8939 thermal/drivers/tsens: limit num_sensors to 9 for msm8939 wifi: rtw89: fix potential leak in rtw89_append_probe_req_ie() wifi: rtw89: Add missing check for alloc_workqueue wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU wifi: orinoco: check return value of hermes_write_wordrec() thermal/drivers/imx_sc_thermal: Drop empty platform remove function thermal/drivers/imx_sc_thermal: Fix the loop condition wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data() ACPI: battery: Fix missing NUL-termination with large strings selftests/bpf: Fix build errors if CONFIG_NF_CONNTRACK=m crypto: ccp - Failure on re-initialization due to duplicate sysfs filename crypto: essiv - Handle EBUSY correctly crypto: seqiv - Handle EBUSY correctly powercap: fix possible name leak in powercap_register_zone() x86/microcode: Add a parameter to microcode_check() to store CPU capabilities x86/microcode: Check CPU capabilities after late microcode update correctly x86/microcode: Adjust late loading result reporting message selftests/bpf: Use consistent build-id type for liburandom_read.so selftests/bpf: Fix vmtest static compilation error crypto: xts - Handle EBUSY correctly leds: led-class: Add missing put_device() to led_put() s390/bpf: Add expoline to tail calls wifi: iwlwifi: mei: fix compilation errors in rfkill() kselftest/arm64: Fix enumeration of systems without 128 bit SME can: rcar_canfd: Fix R-Car V3U GAFLCFG field accesses selftests/bpf: Initialize tc in xdp_synproxy crypto: ccp - Flush the SEV-ES TMR memory before giving it to firmware bpftool: profile online CPUs instead of possible wifi: mt76: mt7915: call mt7915_mcu_set_thermal_throttling() only after init_work wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit wifi: mt76: mt7915: fix WED TxS reporting wifi: mt76: add memory barrier to SDIO queue kick wifi: mt76: mt7921: fix error code of return in mt7921_acpi_read net/mlx5: Enhance debug print in page allocation failure irqchip: Fix refcount leak in platform_irqchip_probe irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe irqchip/ti-sci: Fix refcount leak in ti_sci_intr_irq_domain_probe s390/mem_detect: fix detect_memory() error handling s390/vmem: fix empty page tables cleanup under KASAN s390/boot: cleanup decompressor header files s390/mem_detect: rely on diag260() if sclp_early_get_memsize() fails s390/boot: fix mem_detect extended area allocation net: add sock_init_data_uid() tun: tun_chr_open(): correctly initialize socket uid tap: tap_open(): correctly initialize socket uid OPP: fix error checking in opp_migrate_dentry() cpufreq: davinci: Fix clk use after free Bluetooth: hci_conn: Refactor hci_bind_bis() since it always succeeds Bluetooth: L2CAP: Fix potential user-after-free Bluetooth: hci_qca: get wakeup status from serdev device handle net: ipa: generic command param fix s390: vfio-ap: tighten the NIB validity check s390/ap: fix status returned by ap_aqic() s390/ap: fix status returned by ap_qact() libbpf: Fix alen calculation in libbpf_nla_dump_errormsg() xen/grant-dma-iommu: Implement a dummy probe_device() callback rds: rds_rm_zerocopy_callback() correct order for list_add_tail() crypto: rsa-pkcs1pad - Use akcipher_request_complete m68k: /proc/hardware should depend on PROC_FS RISC-V: time: initialize hrtimer based broadcast clock event device clocksource/drivers/riscv: Patch riscv_clock_next_event() jump before first use wifi: iwl3945: Add missing check for create_singlethread_workqueue wifi: iwl4965: Add missing check for create_singlethread_workqueue() wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() selftests/bpf: Fix out-of-srctree build ACPI: resource: Add IRQ overrides for MAINGEAR Vector Pro 2 models ACPI: resource: Do IRQ override on all TongFang GMxRGxx crypto: octeontx2 - Fix objects shared between several modules crypto: crypto4xx - Call dma_unmap_page when done wifi: mac80211: move color collision detection report in a delayed work wifi: mac80211: make rate u32 in sta_set_rate_info_rx() wifi: mac80211: fix non-MLO station association wifi: mac80211: Don't translate MLD addresses for multicast wifi: mac80211: avoid u32_encode_bits() warning wifi: mac80211: fix off-by-one link setting tools/lib/thermal: Fix thermal_sampling_exit() thermal/drivers/hisi: Drop second sensor hi3660 selftests/bpf: Fix map_kptr test. wifi: mac80211: pass 'sta' to ieee80211_rx_data_set_sta() bpf: Zeroing allocated object from slab in bpf memory allocator selftests/bpf: Fix xdp_do_redirect on s390x can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a bus error can: esd_usb: Make use of can_change_state() and relocate checking skb for NULL xsk: check IFF_UP earlier in Tx path LoongArch, bpf: Use 4 instructions for function address in JIT bpf: Fix global subprog context argument resolution logic irqchip/irq-brcmstb-l2: Set IRQ_LEVEL for level triggered interrupts irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link() net/smc: fix application data exception selftests/net: Interpret UDP_GRO cmsg data as an int value l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register() net: bcmgenet: fix MoCA LED control net: lan966x: Fix possible deadlock inside PTP net/mlx4_en: Introduce flexible array to silence overflow warning selftest: fib_tests: Always cleanup before exit sefltests: netdevsim: wait for devlink instance after netns removal drm: Fix potential null-ptr-deref due to drmm_mode_config_init() drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats drm/bridge: ti-sn65dsi83: Fix delay after reset deassert to match spec drm: mxsfb: DRM_IMX_LCDIF should depend on ARCH_MXC drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS \|\| ARCH_MXC drm/bridge: megachips: Fix error handling in i2c_register_driver() drm/vkms: Fix memory leak in vkms_init() drm/vkms: Fix null-ptr-deref in vkms_release() drm/vc4: dpi: Fix format mapping for RGB565 drm: tidss: Fix pixel format definition gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() drm/vc4: drop all currently held locks if deadlock happens hwmon: (ftsteutates) Fix scaling of measurements drm/msm/dpu: check for null return of devm_kzalloc() in dpu_writeback_init() drm/msm/hdmi: Add missing check for alloc_ordered_workqueue pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups drm/vc4: hvs: Set AXI panic modes drm/vc4: hvs: SCALER_DISPBKGND_AUTOHS is only valid on HVS4 drm/vc4: hvs: Correct interrupt masking bit assignment for HVS5 drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5 drm/vc4: hdmi: Correct interlaced timings again drm/msm: clean event_thread->worker in case of an error drm/panel-edp: fix name for IVO product id 854b scsi: qla2xxx: Fix exchange oversubscription scsi: qla2xxx: Fix exchange oversubscription for management commands scsi: qla2xxx: edif: Fix clang warning ASoC: fsl_sai: initialize is_dsp_mode flag drm/bridge: tc358767: Set default CLRSIPO count drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() ALSA: hda/ca0132: minor fix for allocation size drm/amdgpu: Use the sched from entity for amdgpu_cs trace drm/msm/gem: Add check for kmalloc drm/msm/dpu: Disallow unallocated resources to be returned drm/bridge: lt9611: fix sleep mode setup drm/bridge: lt9611: fix HPD reenablement drm/bridge: lt9611: fix polarity programming drm/bridge: lt9611: fix programming of video modes drm/bridge: lt9611: fix clock calculation drm/bridge: lt9611: pass a pointer to the of node regulator: tps65219: use IS_ERR() to detect an error pointer drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness drm: exynos: dsi: Fix MIPI_DSI_NO_ mode flags drm/msm/dsi: Allow 2 CTRLs on v2.5.0 scsi: ufs: exynos: Fix DMA alignment for PAGE_SIZE != 4096 drm/msm/dpu: sc7180: add missing WB2 clock control drm/msm: use strscpy instead of strncpy drm/msm/dpu: Add check for cstate drm/msm/dpu: Add check for pstates drm/msm/mdp5: Add check for kzalloc habanalabs: bugs fixes in timestamps buff alloc pinctrl: bcm2835: Remove of_node_put() in bcm2835_of_gpio_ranges_fallback() pinctrl: mediatek: Initialize variable pullen and pullup to zero pinctrl: mediatek: Initialize variable buf to zero gpu: host1x: Fix mask for syncpoint increment register gpu: host1x: Don't skip assigning syncpoints to channels drm/tegra: firewall: Check for is_addr_reg existence in IMM check pinctrl: renesas: rzg2l: Fix configuring the GPIO pins as interrupts drm/msm/dpu: set pdpu->is_rt_pipe early in dpu_plane_sspp_atomic_update() drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd drm/mediatek: Use NULL instead of 0 for NULL pointer drm/mediatek: Drop unbalanced obj unref drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc drm/mediatek: Clean dangling pointer on bind error path ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress() dt-bindings: display: mediatek: Fix the fallback for mediatek,mt8186-disp-ccorr gpio: vf610: connect GPIO label to dev name ASoC: topology: Properly access value coming from topology file spi: dw_bt1: fix MUX_MMIO dependencies ASoC: mchp-spdifrx: fix controls which rely on rsr register ASoC: mchp-spdifrx: fix return value in case completion times out ASoC: mchp-spdifrx: fix controls that works with completion mechanism ASoC: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove() dm: improve shrinker debug names regmap: apply reg_base and reg_downshift for single register ops ASoC: rsnd: fixup #endif position ASoC: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params() ASoC: dt-bindings: meson: fix gx-card codec node regex regulator: tps65219: use generic set_bypass() hwmon: (asus-ec-sensors) add missing mutex path hwmon: (ltc2945) Handle error case in ltc2945_value_store ALSA: hda: Fix the control element identification for multiple codecs drm/amdgpu: fix enum odm_combine_mode mismatch scsi: mpt3sas: Fix a memory leak scsi: aic94xx: Add missing check for dma_map_single() HID: multitouch: Add quirks for flipped axes HID: retain initial quirks set up when creating HID devices ASoC: qcom: q6apm-lpass-dai: unprepare stream if its already prepared ASoC: qcom: q6apm-dai: fix race condition while updating the position pointer ASoC: qcom: q6apm-dai: Add SNDRV_PCM_INFO_BATCH flag ASoC: codecs: lpass: register mclk after runtime pm ASoC: codecs: lpass: fix incorrect mclk rate drm/amd/display: don't call dc_interrupt_set() for disabled crtcs HID: logitech-hidpp: Hard-code HID++ 1.0 fast scroll support spi: bcm63xx-hsspi: Fix multi-bit mode setting hwmon: (mlxreg-fan) Return zero speed for broken fan ASoC: tlv320adcx140: fix 'ti,gpio-config' DT property init dm: remove flush_scheduled_work() during local_exit() nfs4trace: fix state manager flag printing NFS: fix disabling of swap spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one() ASoC: soc-dapm.h: fixup warning struct snd_pcm_substream not declared HID: bigben: use spinlock to protect concurrent accesses HID: bigben_worker() remove unneeded check on report_field HID: bigben: use spinlock to safely schedule workers hid: bigben_probe(): validate report count ALSA: hda/hdmi: Register with vga_switcheroo on Dual GPU Macbooks drm/shmem-helper: Fix locking for drm_gem_shmem_get_pages_sgt() NFSD: enhance inter-server copy cleanup NFSD: fix leaked reference count of nfsd4_ssc_umount_item nfsd: fix race to check ls_layouts nfsd: clean up potential nfsd_file refcount leaks in COPY codepath NFSD: fix problems with cleanup on errors in nfsd4_copy nfsd: fix courtesy client with deny mode handling in nfs4_upgrade_open nfsd: don't fsync nfsd_files on last close NFSD: copy the whole verifier in nfsd_copy_write_verifier cifs: Fix lost destroy smbd connection when MR allocate failed cifs: Fix warning and UAF when destroy the MR list cifs: use tcon allocation functions even for dummy tcon gfs2: jdata writepage fix perf llvm: Fix inadvertent file creation leds: led-core: Fix refcount leak in of_led_get() leds: is31fl319x: Wrap mutex_destroy() for devm_add_action_or_rest() leds: simatic-ipc-leds-gpio: Make sure we have the GPIO providing driver tools/tracing/rtla: osnoise_hist: use total duration for average calculation perf inject: Use perf_data__read() for auxtrace perf intel-pt: Do not try to queue auxtrace data on pipe perf test bpf: Skip test if kernel-debuginfo is not present perf tools: Fix auto-complete on aarch64 sparc: allow PM configs for sparc32 COMPILE_TEST selftests: find echo binary to use -ne options selftests/ftrace: Fix bash specific "==" operator selftests: use printf instead of echo -ne perf record: Fix segfault with --overwrite and --max-size printf: fix errname.c list perf tests stat_all_metrics: Change true workload to sleep workload for system wide check objtool: add UACCESS exceptions for __tsan_volatile_read/write mfd: cs5535: Don't build on UML mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0 RDMA/erdma: Fix refcount leak in erdma_mmap dmaengine: HISI_DMA should depend on ARCH_HISI RDMA/hns: Fix refcount leak in hns_roce_mmap iio: light: tsl2563: Do not hardcode interrupt trigger type usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe() i2c: designware: fix i2c_dw_clk_rate() return size to be u32 soundwire: cadence: Don't overflow the command FIFOs driver core: fix potential null-ptr-deref in device_add() kobject: modify kobject_get_path() to take a const kobject: Fix slab-out-of-bounds in fill_kobj_path() alpha/boot/tools/objstrip: fix the check for ELF header media: uvcvideo: Check for INACTIVE in uvc_ctrl_is_accessible() media: uvcvideo: Implement mask for V4L2_CTRL_TYPE_MENU media: uvcvideo: Refactor uvc_ctrl_mappings_uvcXX media: uvcvideo: Refactor power_line_frequency_controls_limited coresight: etm4x: Fix accesses to TRCSEQRSTEVR and TRCSEQSTR coresight: cti: Prevent negative values of enable count coresight: cti: Add PM runtime call in enable_store usb: typec: intel_pmc_mux: Don't leak the ACPI device reference count PCI/IOV: Enlarge virtfn sysfs name buffer PCI: switchtec: Return -EFAULT for copy_to_user() errors PCI: endpoint: pci-epf-vntb: Clean up kernel_doc warning PCI: endpoint: pci-epf-vntb: Add epf_ntb_mw_bar_clear() num_mws kernel-doc hwtracing: hisi_ptt: Only add the supported devices to the filters list tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown() tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown() serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init() Revert "char: pcmcia: cm4000_cs: Replace mdelay with usleep_range in set_protocol" eeprom: idt_89hpesx: Fix error handling in idt_init() applicom: Fix PCI device refcount leak in applicom_init() firmware: stratix10-svc: add missing gen_pool_destroy() in stratix10_svc_drv_probe() firmware: stratix10-svc: fix error handle while alloc/add device failed VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF mei: pxp: Use correct macros to initialize uuid_le misc/mei/hdcp: Use correct macros to initialize uuid_le misc: fastrpc: Fix an error handling path in fastrpc_rpmsg_probe() driver core: fix resource leak in device_add() driver core: location: Free struct acpi_pld_info *pld before return false drivers: base: transport_class: fix possible memory leak drivers: base: transport_class: fix resource leak when transport_add_device() fails firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle fotg210-udc: Add missing completion handler dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers fpga: microchip-spi: move SPI I/O buffers out of stack fpga: microchip-spi: rewrite status polling in a time measurable way usb: early: xhci-dbc: Fix a potential out-of-bound memory access tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case RDMA/cxgb4: add null-ptr-check after ip_dev_find() usb: musb: mediatek: don't unregister something that wasn't registered usb: gadget: configfs: Restrict symlink creation is UDC already binded phy: mediatek: remove temporary variable @mask_ PCI: mt7621: Delay phy ports initialization iommu: dart: Add suspend/resume support iommu: dart: Support >64 stream IDs iommu/dart: Fix apple_dart_device_group for PCI groups iommu/vt-d: Set No Execute Enable bit in PASID table entry power: supply: remove faulty cooling logic RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish() usb: max-3421: Fix setting of I/O pins RDMA/irdma: Cap MSIX used to online CPUs + 1 serial: fsl_lpuart: fix RS485 RTS polariy inverse issue tty: serial: imx: Handle RS485 DE signal active high tty: serial: imx: disable Ageing Timer interrupt request irq driver core: fw_devlink: Add DL_FLAG_CYCLE support to device links driver core: fw_devlink: Don't purge child fwnode's consumer links driver core: fw_devlink: Allow marking a fwnode link as being part of a cycle driver core: fw_devlink: Consolidate device link flag computation driver core: fw_devlink: Improve check for fwnode with no device/driver driver core: fw_devlink: Make cycle detection more robust mtd: mtdpart: Don't create platform device that'll never probe usb: host: fsl-mph-dr-of: reuse device_set_of_node_from_dev dmaengine: dw-edma: Fix readq_ch() return value truncation PCI: Fix dropping valid root bus resources with .end = zero phy: rockchip-typec: fix tcphy_get_mode error case PCI: qcom: Fix host-init error handling iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() iommu: Fix error unwind in iommu_group_alloc() iommu/amd: Do not identity map v2 capable device when snp is enabled dmaengine: sf-pdma: pdma_desc memory leak fix dmaengine: dw-axi-dmac: Do not dereference NULL structure dmaengine: ptdma: check for null desc before calling pt_cmd_callback iommu/vt-d: Fix error handling in sva enable/disable paths iommu/vt-d: Allow to use flush-queue when first level is default RDMA/rxe: cleanup some error handling in rxe_verbs.c RDMA/rxe: Fix missing memory barriers in rxe_queue.h IB/hfi1: Fix math bugs in hfi1_can_pin_pages() IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors Revert "remoteproc: qcom_q6v5_mss: map/unmap metadata region before/after use" remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers media: ti: cal: fix possible memory leak in cal_ctx_create() media: platform: ti: Add missing check for devm_regulator_get media: imx: imx7-media-csi: fix missing clk_disable_unprepare() in imx7_csi_init() powerpc: Remove linker flag from KBUILD_AFLAGS s390/vdso: Drop '-shared' from KBUILD_CFLAGS_64 builddeb: clean generated package content media: max9286: Fix memleak in max9286_v4l2_register() media: ov2740: Fix memleak in ov2740_init_controls() media: ov5675: Fix memleak in ov5675_init_controls() media: ov5640: Fix soft reset sequence and timings media: ov5640: Handle delays when no reset_gpio set media: mc: Get media_device directly from pad media: i2c: ov772x: Fix memleak in ov772x_probe() media: i2c: imx219: Split common registers from mode tables media: i2c: imx219: Fix binning for RAW8 capture media: platform: mtk-mdp3: Fix return value check in mdp_probe() media: camss: csiphy-3ph: avoid undefined behavior media: platform: mtk-mdp3: remove unused VIDEO_MEDIATEK_VPU config media: platform: mtk-mdp3: fix Kconfig dependencies media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data media: v4l2-jpeg: ignore the unknown APP14 marker media: hantro: Fix JPEG encoder ENUM_FRMSIZE on RK3399 media: imx-jpeg: Apply clk_bulk api instead of operating specific clk media: amphion: correct the unspecified color space media: drivers/media/v4l2-core/v4l2-h264 : add detection of null pointers media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() media: atomisp: Only set default_run_mode on first open of a stream/asd media: i2c: ov7670: 0 instead of -EINVAL was returned media: usb: siano: Fix use after free bugs caused by do_submit_urb media: saa7134: Use video_unregister_device for radio_dev rpmsg: glink: Avoid infinite loop on intent for missing channel rpmsg: glink: Release driver_override ARM: OMAP2+: omap4-common: Fix refcount leak bug arm64: dts: qcom: msm8996: Add additional A2NoC clocks udf: Define EFSCORRUPTED error code context_tracking: Fix noinstr vs KASAN exit: Detect and fix irq disabled state in oops ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected blk-iocost: fix divide by 0 error in calc_lcoefs() blk-cgroup: dropping parent refcount after pd_free_fn() is done blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and blkcg_deactivate_policy() trace/blktrace: fix memory leak with using debugfs_lookup() btrfs: scrub: improve tree block error reporting arm64: zynqmp: Enable hs termination flag for USB dwc3 controller cpuidle, intel_idle: Fix CPUIDLE_FLAG_INIT_XSTATE x86/fpu: Don't set TIF_NEED_FPU_LOAD for PF_IO_WORKER threads cpuidle: drivers: firmware: psci: Dont instrument suspend code cpuidle: lib/bug: Disable rcu_is_watching() during WARN/BUG perf/x86/intel/uncore: Add Meteor Lake support wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() wifi: ath11k: fix monitor mode bringup crash wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() rcu: Make RCU_LOCKDEP_WARN() avoid early lockdep checks rcu: Suppress smp_processor_id() complaint in synchronize_rcu_expedited_wait() srcu: Delegate work to the boot cpu if using SRCU_SIZE_SMALL rcu-tasks: Make rude RCU-Tasks work well with CPU hotplug rcu-tasks: Handle queue-shrink/callback-enqueue race condition wifi: ath11k: debugfs: fix to work with multiple PCI devices thermal: intel: Fix unsigned comparison with less than zero timers: Prevent union confusion from unexpected restart_syscall() x86/bugs: Reset speculation control settings on init bpftool: Always disable stack protection for BPF objects wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds wifi: mt7601u: fix an integer underflow inet: fix fast path in __inet_hash_connect() ice: restrict PTP HW clock freq adjustments to 100, 000, 000 PPB ice: add missing checks for PF vsi type ACPI: Don't build ACPICA with '-Os' bpf, docs: Fix modulo zero, division by zero, overflow, and underflow thermal: intel: intel_pch: Add support for Wellsburg PCH clocksource: Suspend the watchdog temporarily when high read latency detected crypto: hisilicon: Wipe entire pool on error net: bcmgenet: Add a check for oversized packets m68k: Check syscall_trace_enter() return code s390/mm,ptdump: avoid Kasan vs Memcpy Real markers swapping netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj() can: isotp: check CAN address family in isotp_bind() gcc-plugins: drop -std=gnu++11 to fix GCC 13 build tools/power/x86/intel-speed-select: Add Emerald Rapid quirk wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup ACPI: video: Fix Lenovo Ideapad Z570 DMI match net/mlx5: fw_tracer: Fix debug print coda: Avoid partial allocation of sig_inputArgs uaccess: Add minimum bounds check on kernel buffer size s390/idle: mark arch_cpu_idle() noinstr time/debug: Fix memory leak with using debugfs_lookup() PM: domains: fix memory leak with using debugfs_lookup() PM: EM: fix memory leak with using debugfs_lookup() Bluetooth: Fix issue with Actions Semi ATS2851 based devices Bluetooth: btusb: Add new PID/VID 0489:e0f2 for MT7921 Bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE wifi: rtw89: debug: avoid invalid access on RTW89_DBG_SEL_MAC_30 hv_netvsc: Check status in SEND_RNDIS_PKT completion message s390/kfence: fix page fault reporting devlink: Fix TP_STRUCT_entry in trace of devlink health report scm: add user copy checks to put_cmsg() drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Tab 3 X90F drm: panel-orientation-quirks: Add quirk for DynaBook K50 drm/amd/display: Reduce expected sdp bandwidth for dcn321 drm/amd/display: Revert Reduce delay when sink device not able to ACK 00340h write drm/amd/display: Fix potential null-deref in dm_resume drm/omap: dsi: Fix excessive stack usage HID: Add Mapping for System Microphone Mute drm/tiny: ili9486: Do not assume 8-bit only SPI controllers drm/amd/display: Defer DIG FIFO disable after VID stream enable drm/radeon: free iio for atombios when driver shutdown drm/amd: Avoid BUG() for case of SRIOV missing IP version drm/amdkfd: Page aligned memory reserve size scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write Revert "fbcon: don't lose the console font across generic->chip driver switch" drm/amd: Avoid ASSERT for some message failures drm: amd: display: Fix memory leakage drm/amd/display: fix mapping to non-allocated address HID: uclogic: Add frame type quirk HID: uclogic: Add battery quirk HID: uclogic: Add support for XP-PEN Deco Pro SW HID: uclogic: Add support for XP-PEN Deco Pro MW drm/msm/dsi: Add missing check for alloc_ordered_workqueue drm: rcar-du: Add quirk for H3 ES1.x pclk workaround drm: rcar-du: Fix setting a reserved bit in DPLLCR drm/drm_print: correct format problem drm/amd/display: Set hvm_enabled flag for S/G mode habanalabs: extend fatal messages to contain PCI info habanalabs: fix bug in timestamps registration code docs/scripts/gdb: add necessary make scripts_gdb step drm/msm/dpu: Add DSC hardware blocks to register snapshot ASoC: soc-compress: Reposition and add pcm_mutex ASoC: kirkwood: Iterate over array indexes instead of using pointer math regulator: max77802: Bounds check regulator id against opmode regulator: s5m8767: Bounds check id indexing into arrays Revert "drm/amdgpu: TA unload messages are not actually sent to psp when amdgpu is uninstalled" drm/amd/display: fix FCLK pstate change underflow gfs2: Improve gfs2_make_fs_rw error handling hwmon: (coretemp) Simplify platform device handling hwmon: (nct6775) Directly call ASUS ACPI WMI method hwmon: (nct6775) B650/B660/X670 ASUS boards support pinctrl: at91: use devm_kasprintf() to avoid potential leaks drm/amd/display: Do not commit pipe when updating DRR scsi: snic: Fix memory leak with using debugfs_lookup() scsi: ufs: core: Fix device management cmd timeout flow HID: logitech-hidpp: Don't restart communication if not necessary drm/amd/display: Enable P-state validation checks for DCN314 drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5 drm/amd/display: Disable HUBP/DPP PG on DCN314 for now dm thin: add cond_resched() to various workqueue loops dm cache: add cond_resched() to various workqueue loops nfsd: zero out pointers after putting nfsd_files on COPY setup error nfsd: don't hand out delegation on setuid files being opened for write cifs: prevent data race in smb2_reconnect() drm/shmem-helper: Revert accidental non-GPL export driver core: fw_devlink: Avoid spurious error message wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu scsi: mpt3sas: Remove usage of dma_get_required_mask() API firmware: coreboot: framebuffer: Ignore reserved pixel color bits block: don't allow multiple bios for IOCB_NOWAIT issue block: clear bio->bi_bdev when putting a bio back in the cache block: be a bit more careful in checking for NULL bdev while polling rtc: pm8xxx: fix set-alarm race ipmi: ipmb: Fix the MODULE_PARM_DESC associated to 'retry_time_ms' ipmi:ssif: resend_msg() cannot fail ipmi_ssif: Rename idle state and check io_uring: Replace 0-length array with flexible array io_uring: use user visible tail in io_uring_poll() io_uring: handle TIF_NOTIFY_RESUME when checking for task_work io_uring: add a conditional reschedule to the IOPOLL cancelation loop io_uring: add reschedule point to handle_tw_list() io_uring/rsrc: disallow multi-source reg buffers io_uring: remove MSG_NOSIGNAL from recvmsg io_uring: fix fget leak when fs don't support nowait buffered read s390/extmem: return correct segment type in __segment_load() s390: discard .interp section s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler s390/kprobes: fix current_kprobe never cleared after kprobes reenter KVM: s390: disable migration mode when dirty tracking is disabled cifs: Fix uninitialized memory read in smb3_qfs_tcon() cifs: Fix uninitialized memory reads for oparms.mode cifs: fix mount on old smb servers cifs: introduce cifs_io_parms in smb2_async_writev() cifs: split out smb3_use_rdma_offload() helper cifs: don't try to use rdma offload on encrypted connections cifs: Check the lease context if we actually got a lease cifs: return a single-use cfid if we did not get a lease scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info() scsi: mpi3mr: Remove unnecessary memcpy() to alltgt_info->dmi btrfs: hold block group refcount during async discard locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath ksmbd: fix wrong data area length for smb2 lock request ksmbd: do not allow the actual frame length to be smaller than the rfc1002 length ksmbd: fix possible memory leak in smb2_lock() torture: Fix hang during kthread shutdown phase ARM: dts: exynos: correct HDMI phy compatible in Exynos4 io_uring: mark task TASK_RUNNING before handling resume/task work hfs: fix missing hfs_bnode_get() in __hfs_bnode_create fs: hfsplus: fix UAF issue in hfsplus_put_super exfat: fix reporting fs error when reading dir beyond EOF exfat: fix unexpected EOF while reading dir exfat: redefine DIR_DELETED as the bad cluster number exfat: fix inode->i_blocks for non-512 byte sector size device fs: dlm: don't set stop rx flag after node reset fs: dlm: move sending fin message into state change handling fs: dlm: send FIN ack back in right cases f2fs: fix information leak in f2fs_move_inline_dirents() f2fs: retry to update the inode page given data corruption f2fs: fix cgroup writeback accounting with fs-layer encryption f2fs: fix kernel crash due to null io->bio ocfs2: fix defrag path triggering jbd2 ASSERT ocfs2: fix non-auto defrag path not working issue fs/cramfs/inode.c: initialize file_ra_state selftests/landlock: Skip overlayfs tests when not supported selftests/landlock: Test ptrace as much as possible with Yama udf: Truncate added extents on failed expansion udf: Do not bother merging very long extents udf: Do not update file length for failed writes to inline files udf: Preserve link count of system files udf: Detect system inodes linked into directory hierarchy udf: Fix file corruption when appending just after end of preallocated extent md: don't update recovery_cp when curr_resync is ACTIVE RDMA/siw: Fix user page pinning accounting KVM: Destroy target device if coalesced MMIO unregistration fails KVM: VMX: Fix crash due to uninitialized current_vmcs KVM: Register /dev/kvm as the _very_ last thing during initialization KVM: x86: Purge "highest ISR" cache when updating APICv state KVM: x86: Blindly get current x2APIC reg value on "nodecode write" traps KVM: x86: Don't inhibit APICv/AVIC on xAPIC ID "change" if APIC is disabled KVM: x86: Don't inhibit APICv/AVIC if xAPIC ID mismatch is due to 32-bit ID KVM: SVM: Flush the "current" TLB when activating AVIC KVM: SVM: Process ICR on AVIC IPI delivery failure due to invalid target KVM: SVM: Don't put/load AVIC when setting virtual APIC mode KVM: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI KVM: x86: Inject #GP on x2APIC WRMSR that sets reserved bits 63:32 KVM: SVM: Fix potential overflow in SEV's send\|receive_update_data() KVM: SVM: hyper-v: placate modpost section mismatch error selftests: x86: Fix incorrect kernel headers search path x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) x86/crash: Disable virt in core NMI crash handler to avoid double shootdown x86/reboot: Disable virtualization in an emergency if SVM is supported x86/reboot: Disable SVM, not just VMX, when stopping CPUs x86/kprobes: Fix __recover_optprobed_insn check optimizing logic x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter x86/microcode/AMD: Add a @cpu parameter to the reloading functions x86/microcode/AMD: Fix mixed steppings support x86/speculation: Allow enabling STIBP with legacy IBRS Documentation/hw-vuln: Document the interaction between IBRS and STIBP virt/sev-guest: Return -EIO if certificate buffer is not large enough brd: mark as nowait compatible brd: return 0/-error from brd_insert_page() brd: check for REQ_NOWAIT and set correct page allocation mask ima: fix error handling logic when file measurement failed ima: Align ima_file_mmap() parameters with mmap_file LSM hook selftests/powerpc: Fix incorrect kernel headers search path selftests/ftrace: Fix eprobe syntax test case to check filter support selftests: sched: Fix incorrect kernel headers search path selftests: core: Fix incorrect kernel headers search path selftests: pid_namespace: Fix incorrect kernel headers search path selftests: arm64: Fix incorrect kernel headers search path selftests: clone3: Fix incorrect kernel headers search path selftests: pidfd: Fix incorrect kernel headers search path selftests: membarrier: Fix incorrect kernel headers search path selftests: kcmp: Fix incorrect kernel headers search path selftests: media_tests: Fix incorrect kernel headers search path selftests: gpio: Fix incorrect kernel headers search path selftests: filesystems: Fix incorrect kernel headers search path selftests: user_events: Fix incorrect kernel headers search path selftests: ptp: Fix incorrect kernel headers search path selftests: sync: Fix incorrect kernel headers search path selftests: rseq: Fix incorrect kernel headers search path selftests: move_mount_set_group: Fix incorrect kernel headers search path selftests: mount_setattr: Fix incorrect kernel headers search path selftests: perf_events: Fix incorrect kernel headers search path selftests: ipc: Fix incorrect kernel headers search path selftests: futex: Fix incorrect kernel headers search path selftests: drivers: Fix incorrect kernel headers search path selftests: dmabuf-heaps: Fix incorrect kernel headers search path selftests: vm: Fix incorrect kernel headers search path selftests: seccomp: Fix incorrect kernel headers search path irqdomain: Fix association race irqdomain: Fix disassociation race irqdomain: Look for existing mapping only once irqdomain: Drop bogus fwspec-mapping error handling irqdomain: Refactor __irq_domain_alloc_irqs() irqdomain: Fix mapping-creation race irqdomain: Fix domain registration race crypto: qat - fix out-of-bounds read mm/damon/paddr: fix missing folio_put() ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC jbd2: fix data missing when reusing bh which is ready to be checkpointed ext4: optimize ea_inode block expansion ext4: refuse to create ea block when umounted cxl/pmem: Fix nvdimm registration races mtd: spi-nor: sfdp: Fix index value for SCCR dwords mtd: spi-nor: spansion: Consider reserved bits in CFR5 register mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type dm: send just one event on resize, not two dm: add cond_resched() to dm_wq_work() dm: add cond_resched() to dm_wq_requeue_work() wifi: rtw88: use RTW_FLAG_POWERON flag to prevent to power on/off twice wifi: rtl8xxxu: Use a longer retry limit of 48 wifi: ath11k: allow system suspend to survive ath11k wifi: cfg80211: Fix use after free for wext wifi: cfg80211: Set SSID if it is not already set cpuidle: add ARCH_SUSPEND_POSSIBLE dependencies qede: fix interrupt coalescing configuration thermal: intel: powerclamp: Fix cur_state for multi package system dm flakey: fix logic when corrupting a bio dm cache: free background tracker's queued work in btracker_destroy dm flakey: don't corrupt the zero page dm flakey: fix a bug with 32-bit highmem systems hwmon: (peci/cputemp) Fix off-by-one in coretemp_label allocation hwmon: (nct6775) Fix incorrect parenthesization in nct6775_write_fan_div() ARM: dts: qcom: sdx65: Add Qcom SMMU-500 as the fallback for IOMMU node ARM: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node ARM: dts: exynos: correct TMU phandle in Exynos4210 ARM: dts: exynos: correct TMU phandle in Exynos4 ARM: dts: exynos: correct TMU phandle in Odroid XU3 family ARM: dts: exynos: correct TMU phandle in Exynos5250 ARM: dts: exynos: correct TMU phandle in Odroid XU ARM: dts: exynos: correct TMU phandle in Odroid HC1 arm64: mm: hugetlb: Disable HUGETLB_PAGE_OPTIMIZE_VMEMMAP fuse: add inode/permission checks to fileattr_get/fileattr_set rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails ceph: update the time stamps and try to drop the suid/sgid regulator: core: Use ktime_get_boottime() to determine how long a regulator was off panic: fix the panic_print NMI backtrace setting mm/hwpoison: convert TTU_IGNORE_HWPOISON to TTU_HWPOISON alpha: fix FEN fault handling dax/kmem: Fix leak of memory-hotplug resources mips: fix syscall_get_nr media: ipu3-cio2: Fix PM runtime usage_count in driver unbind remoteproc/mtk_scp: Move clk ops outside send_lock docs: gdbmacros: print newest record mm: memcontrol: deprecate charge moving mm/thp: check and bail out if page in deferred queue already ktest.pl: Give back console on Ctrt^C on monitor kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list ktest.pl: Fix missing "end_monitor" when machine check fails ktest.pl: Add RUN_TIMEOUT option with default unlimited memory tier: release the new_memtier in find_create_memory_tier() ring-buffer: Handle race between rb_move_tail and rb_check_pages tools/bootconfig: fix single & used for logical condition tracing/eprobe: Fix to add filter on eprobe description in README file iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter iommu/amd: Improve page fault error reporting scsi: aacraid: Allocate cmd_priv with scsicmd scsi: qla2xxx: Fix link failure in NPIV environment scsi: qla2xxx: Check if port is online before sending ELS scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests scsi: qla2xxx: Remove unintended flag clearing scsi: qla2xxx: Fix erroneous link down scsi: qla2xxx: Remove increment of interface err cnt scsi: ses: Don't attach if enclosure has no components scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses scsi: ses: Fix possible desc_ptr out-of-bounds accesses scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() RISC-V: add a spin_shadow_stack declaration riscv: Avoid enabling interrupts in die() riscv: mm: fix regression due to update_mmu_cache change riscv: jump_label: Fixup unaligned arch_static_branch function riscv, mm: Perform BPF exhandler fixup on page fault riscv: ftrace: Remove wasted nops for !RISCV_ISA_C riscv: ftrace: Reduce the detour code size to half MIPS: DTS: CI20: fix otg power gpio PCI/PM: Observe reset delay irrespective of bridge_d3 PCI: Unify delay handling for reset and resume PCI: hotplug: Allow marking devices as disconnected during bind/unbind PCI: Avoid FLR for AMD FCH AHCI adapters PCI/DPC: Await readiness of secondary bus after reset bus: mhi: ep: Only send -ENOTCONN status if client driver is available bus: mhi: ep: Move chan->lock to the start of processing queued ch ring bus: mhi: ep: Save channel state locally during suspend and resume iommu/vt-d: Avoid superfluous IOTLB tracking in lazy mode iommu/vt-d: Fix PASID directory pointer coherency vfio/type1: exclude mdevs from VFIO_UPDATE_VADDR vfio/type1: prevent underflow of locked_vm via exec() vfio/type1: track locked_vm per dma vfio/type1: restore locked_vm drm/amd: Fix initialization for nbio 7.5.1 drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv drm/radeon: Fix eDP for single-display iMac11,2 drm/i915: Don't use stolen memory for ring buffers with LLC drm/i915: Don't use BAR mappings for ring buffers with LLC drm/gud: Fix UBSAN warning drm/edid: fix AVI infoframe aspect ratio handling drm/edid: fix parsing of 3D modes from HDMI VSDB qede: avoid uninitialized entries in coal_entry array brd: use radix_tree_maybe_preload instead of radix_tree_preload sbitmap: Advance the queue index before waking up a queue wait: Return number of exclusive waiters awaken sbitmap: Try each queue to wake up at least one waiter kbuild: Port silent mode detection to future gnu make. net: avoid double iput when sock_alloc_file fails Linux 6.1.16 Change-Id: I705caf70ee547e6d55f38d133bdcd50713aed745 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-03-13 15:45:34 +00:00
Herbert Xu	cf7cf7d1d4	crypto: rsa-pkcs1pad - Use akcipher_request_complete [ Upstream commit 564cabc0ca0bdfa8f0fc1ae74b24d0a7554522c5 ] Use the akcipher_request_complete helper instead of calling the completion function directly. In fact the previous code was buggy in that EINPROGRESS was never passed back to the original caller. Fixes: `3d5b1ecdea` ("crypto: rsa - RSA padding algorithm") Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-03-10 09:33:03 +01:00
Herbert Xu	57c3e1d63b	crypto: xts - Handle EBUSY correctly [ Upstream commit 51c082514c2dedf2711c99d93c196cc4eedceb40 ] As it is xts only handles the special return value of EINPROGRESS, which means that in all other cases it will free data related to the request. However, as the caller of xts may specify MAY_BACKLOG, we also need to expect EBUSY and treat it in the same way. Otherwise backlogged requests will trigger a use-after-free. Fixes: `8083b1bf81` ("crypto: xts - add support for ciphertext stealing") Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Acked-by: Ard Biesheuvel <ardb@kernel.org> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-03-10 09:32:57 +01:00
Herbert Xu	4d497e8b20	crypto: seqiv - Handle EBUSY correctly [ Upstream commit 32e62025e5e52fbe4812ef044759de7010b15dbc ] As it is seqiv only handles the special return value of EINPROGERSS, which means that in all other cases it will free data related to the request. However, as the caller of seqiv may specify MAY_BACKLOG, we also need to expect EBUSY and treat it in the same way. Otherwise backlogged requests will trigger a use-after-free. Fixes: `0a270321db` ("[CRYPTO] seqiv: Add Sequence Number IV Generator") Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-03-10 09:32:56 +01:00
Herbert Xu	a006aa3eed	crypto: essiv - Handle EBUSY correctly [ Upstream commit b5a772adf45a32c68bef28e60621f12617161556 ] As it is essiv only handles the special return value of EINPROGERSS, which means that in all other cases it will free data related to the request. However, as the caller of essiv may specify MAY_BACKLOG, we also need to expect EBUSY and treat it in the same way. Otherwise backlogged requests will trigger a use-after-free. Fixes: `be1eb7f78a` ("crypto: essiv - create wrapper template...") Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Acked-by: Ard Biesheuvel <ardb@kernel.org> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-03-10 09:32:56 +01:00
Denis Kenzior	c77d664ab8	KEYS: asymmetric: Fix ECDSA use via keyctl uapi [ Upstream commit 10de7b54293995368c52d9aa153f3e7a359f04a1 ] When support for ECDSA keys was added, constraints for data & signature sizes were never updated. This makes it impossible to use such keys via keyctl API from userspace. Update constraint on max_data_size to 64 bytes in order to support SHA512-based signatures. Also update the signature length constraints per ECDSA signature encoding described in RFC 5480. Fixes: `299f561a66` ("x509: Add support for parsing x509 certs with ECDSA keys") Signed-off-by: Denis Kenzior <denkenz@gmail.com> Reviewed-by: Stefan Berger <stefanb@linux.ibm.com> Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-03-10 09:32:45 +01:00
Greg Kroah-Hartman	c747c01851	This is the 6.1.11 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmPkywAACgkQONu9yGCS aT42Kw/9FFrdwv29yND651dPIglYKgO0Oz27/LFNGqst1A/G1ITzfs/94NSRr+9j uvwmBLbC+n/OXYavliBVWlPaYUCLqoFSfR+q953yz/UT0803E8BUvQ8NN8O7lsg7 hfbWJaASxt5puy2pBFypeWM+OXoVOvUBj3VhbgtUwwcYLPuYafj9rCAytdIIf5fr RKWBLfx7As4OJ+Hb3KNkolTkFDTfV5+zqCAc9Ko474d1bpRnF15UdQN8Kkinr2+O YNGTvDT8jR8eAk/9PiCNrG7DEMSKaczP8n/ap6PikD/KnK7ShtCLwZztLnmu65g1 vZG+cnEda8FuY3Ms03UrHhKqzMzBY/vslzBNMBTNmDsr+b7ilhffAYXPKS8s7xrg bJjmfzfITFAjXrml25enVO0V9RtTxv6E07U7SnDrLsvE2KBFZfUR/3Xl70bVBb0S db60kmEoq3XHHtoVySOHlfihVHSy02V9dlFcLOYMQsDHsGVsRXOR87g6d7+rJS3h hYWz5YxMLJUr2qn2836DPBnX9Ix0VjDx+X2fB4bNYzKc1dMlgzbpYrhk9LEOUDsx emJuqZskjkLby9Bw36N3eHW3fKPOFrwpYwPWYJHdWx1mmFSNdV6MdfEtZXpuEkFJ iFyJPeeODGadoiznnXTaBFfhozRj+B6FXrY6pkF+WMoSt8ZlZpM= =vu7j -----END PGP SIGNATURE----- Merge 6.1.11 into android14-6.1 Changes in 6.1.11 firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() arm64: dts: imx8m-venice: Remove incorrect 'uart-has-rtscts' arm64: dts: freescale: imx8dxl: fix sc_pwrkey's property name linux,keycode ASoC: amd: acp-es8336: Drop reference count of ACPI device after use ASoC: Intel: bytcht_es8316: Drop reference count of ACPI device after use ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use ASoC: Intel: bytcr_rt5640: Drop reference count of ACPI device after use ASoC: Intel: bytcr_wm5102: Drop reference count of ACPI device after use ASoC: Intel: sof_es8336: Drop reference count of ACPI device after use ASoC: Intel: avs: Implement PCI shutdown bpf: Fix off-by-one error in bpf_mem_cache_idx() bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() bpf: Fix to preserve reg parent/live fields when copying range info selftests/filesystems: grant executable permission to run_fat_tests.sh ASoC: SOF: ipc4-mtrace: prevent underflow in sof_ipc4_priority_mask_dfs_write() bpf: Add missing btf_put to register_btf_id_dtor_kfuncs media: v4l2-ctrls-api.c: move ctrl->is_new = 1 to the correct line bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX arm64: dts: imx8mm-verdin: Do not power down eth-phy drm/vc4: hdmi: make CEC adapter name unique drm/ssd130x: Init display before the SSD130X_DISPLAY_ON command scsi: Revert "scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT" bpf: Fix the kernel crash caused by bpf_setsockopt(). ALSA: memalloc: Workaround for Xen PV vhost/net: Clear the pending messages when the backend is removed copy_oldmem_kernel() - WRITE is "data source", not destination WRITE is "data source", not destination... READ is "data destination", not source... zcore: WRITE is "data source", not destination... memcpy_real(): WRITE is "data source", not destination... fix iov_iter_bvec() "direction" argument fix 'direction' argument of iov_iter_{init,bvec}() fix "direction" argument of iov_iter_kvec() use less confusing names for iov_iter direction initializers vhost-scsi: unbreak any layout for response ice: Prevent set_channel from changing queues while RDMA active qede: execute xdp_do_flush() before napi_complete_done() virtio-net: execute xdp_do_flush() before napi_complete_done() dpaa_eth: execute xdp_do_flush() before napi_complete_done() dpaa2-eth: execute xdp_do_flush() before napi_complete_done() skb: Do mix page pool and page referenced frags in GRO sfc: correctly advertise tunneled IPv6 segmentation net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices net: wwan: t7xx: Fix Runtime PM initialization block, bfq: replace 0/1 with false/true in bic apis block, bfq: fix uaf for bfqq in bic_set_bfqq() netrom: Fix use-after-free caused by accept on already connected socket fscache: Use wait_on_bit() to wait for the freeing of relinquished volume platform/x86/amd/pmf: update to auto-mode limits only after AMT event platform/x86/amd/pmf: Add helper routine to update SPS thermals platform/x86/amd/pmf: Fix to update SPS default pprof thermals platform/x86/amd/pmf: Add helper routine to check pprof is balanced platform/x86/amd/pmf: Fix to update SPS thermals when power supply change platform/x86/amd/pmf: Ensure mutexes are initialized before use platform/x86: thinkpad_acpi: Fix thinklight LED brightness returning 255 drm/i915/guc: Fix locking when searching for a hung request drm/i915: Fix request ref counting during error capture & debugfs dump drm/i915: Fix up locking around dumping requests lists drm/i915/adlp: Fix typo for reference clock net/tls: tls_is_tx_ready() checked list_entry ALSA: firewire-motu: fix unreleased lock warning in hwdep device netfilter: br_netfilter: disable sabotage_in hook after first suppression block: ublk: extending queue_size to fix overflow kunit: fix kunit_test_init_section_suites(...) squashfs: harden sanity check in squashfs_read_xattr_id_table maple_tree: should get pivots boundary by type sctp: do not check hb_timer.expires when resetting hb_timer net: phy: meson-gxl: Add generic dummy stubs for MMD register access drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during disable ip/ip6_gre: Fix changing addr gen mode not generating IPv6 link local address ip/ip6_gre: Fix non-point-to-point tunnel not generating IPv6 link local address riscv: kprobe: Fixup kernel panic when probing an illegal position igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() octeontx2-af: Fix devlink unregister can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate can: raw: fix CAN FD frame transmissions over CAN XL devices can: mcp251xfd: mcp251xfd_ring_set_ringparam(): assign missing tx_obj_num_coalesce_irq ata: libata: Fix sata_down_spd_limit() when no link speed is reported selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking virtio-net: Keep stop() to follow mirror sequence of open() net: openvswitch: fix flow memory leak in ovs_flow_cmd_new efi: fix potential NULL deref in efi_mem_reserve_persistent rtc: sunplus: fix format string for printing resource certs: Fix build error when PKCS#11 URI contains semicolon kbuild: modinst: Fix build error when CONFIG_MODULE_SIG_KEY is a PKCS#11 URI i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU i2c: mxs: suppress probe-deferral error message scsi: target: core: Fix warning on RT kernels x86/aperfmperf: Erase stale arch_freq_scale values when disabling frequency invariance readings perf/x86/intel: Add Emerald Rapids perf/x86/intel/cstate: Add Emerald Rapids scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress i2c: rk3x: fix a bunch of kernel-doc warnings Revert "gfs2: stop using generic_writepages in gfs2_ail1_start_one" x86/build: Move '-mindirect-branch-cs-prefix' out of GCC-only block platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table platform/x86: hp-wmi: Handle Omen Key event platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF platform/x86/amd: pmc: Disable IRQ1 wakeup for RN/CZN net/x25: Fix to not accept on connected socket drm/amd/display: Fix timing not changning when freesync video is enabled bcache: Silence memcpy() run-time false positive warnings iio: adc: stm32-dfsdm: fill module aliases usb: dwc3: qcom: enable vbus override when in OTG dr-mode usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF fbcon: Check font dimension limits cgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask() hv_netvsc: Fix missed pagebuf entries in netvsc_dma_map/unmap() ARM: dts: imx7d-smegw01: Fix USB host over-current polarity net: qrtr: free memory on error path in radix_tree_insert() can: isotp: split tx timer into transmission and timeout can: isotp: handle wait_event_interruptible() return values watchdog: diag288_wdt: do not use stack buffers for hardware data watchdog: diag288_wdt: fix __diag288() inline assembly ALSA: hda/realtek: Add Acer Predator PH315-54 ALSA: hda/realtek: fix mute/micmute LEDs, speaker don't work for a HP platform ASoC: codecs: wsa883x: correct playback min/max rates ASoC: SOF: sof-audio: unprepare when swidget->use_count > 0 ASoC: SOF: sof-audio: skip prepare/unprepare if swidget is NULL ASoC: SOF: keep prepare/unprepare widgets in sink path efi: Accept version 2 of memory attributes table rtc: efi: Enable SET/GET WAKEUP services as optional iio: hid: fix the retval in accel_3d_capture_sample iio: hid: fix the retval in gyro_3d_capture_sample iio: adc: xilinx-ams: fix devm_krealloc() return value check iio: adc: berlin2-adc: Add missing of_node_put() in error path iio: imx8qxp-adc: fix irq flood when call imx8qxp_adc_read_raw() iio:adc:twl6030: Enable measurements of VUSB, VBAT and others iio: light: cm32181: Fix PM support on system with 2 I2C resources iio: imu: fxos8700: fix ACCEL measurement range selection iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback iio: imu: fxos8700: fix IMU data bits returned to user space iio: imu: fxos8700: fix map label of channel type to MAGN sensor iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback iio: imu: fxos8700: fix incorrect ODR mode readback iio: imu: fxos8700: fix failed initialization ODR mode assignment iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN iio: imu: fxos8700: fix MAGN sensor scale and unit nvmem: brcm_nvram: Add check for kzalloc nvmem: sunxi_sid: Always use 32-bit MMIO reads nvmem: qcom-spmi-sdam: fix module autoloading parisc: Fix return code of pdc_iodc_print() parisc: Replace hardcoded value with PRIV_USER constant in ptrace.c parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case riscv: disable generation of unwind tables Revert "mm: kmemleak: alloc gray object for reserved region with direct map" mm: multi-gen LRU: fix crash during cgroup migration mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints usb: typec: ucsi: Don't attempt to resume the ports before they exist usb: gadget: udc: do not clear gadget driver.bus kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() HV: hv_balloon: fix memory leak with using debugfs_lookup() x86/debug: Fix stack recursion caused by wrongly ordered DR7 accesses fpga: m10bmc-sec: Fix probe rollback fpga: stratix10-soc: Fix return value check in s10_ops_write_init() mm/uffd: fix pte marker when fork() without fork event mm/swapfile: add cond_resched() in get_swap_pages() mm/khugepaged: fix ->anon_vma race mm, mremap: fix mremap() expanding for vma's with vm_ops->close() mm/MADV_COLLAPSE: catch !none !huge !bad pmd lookups highmem: round down the address passed to kunmap_flush_on_unmap() ia64: fix build error due to switch case label appearing next to declaration Squashfs: fix handling and sanity checking of xattr_ids count maple_tree: fix mas_empty_area_rev() lower bound validation migrate: hugetlb: check for hugetlb shared PMD in node migration dma-buf: actually set signaling bit for private stub fences serial: stm32: Merge hard IRQ and threaded IRQ handling into single IRQ handler drm/i915: Avoid potential vm use-after-free drm/i915: Fix potential bit_17 double-free drm/amd: Fix initialization for nbio 4.3.0 drm/amd/pm: drop unneeded dpm features disablement for SMU 13.0.4/11 drm/amdgpu: update wave data type to 3 for gfx11 nvmem: core: initialise nvmem->id early nvmem: core: remove nvmem_config wp_gpio nvmem: core: fix cleanup after dev_set_name() nvmem: core: fix registration vs use race nvmem: core: fix device node refcounting nvmem: core: fix cell removal on error nvmem: core: fix return value phy: qcom-qmp-combo: fix runtime suspend serial: 8250_dma: Fix DMA Rx completion race serial: 8250_dma: Fix DMA Rx rearm race platform/x86/amd: pmc: add CONFIG_SERIO dependency ASoC: SOF: sof-audio: prepare_widgets: Check swidget for NULL on sink failure iio:adc:twl6030: Enable measurement of VAC powerpc/64s/radix: Fix crash with unaligned relocated kernel powerpc/64s: Fix local irq disable when PMIs are disabled powerpc/imc-pmu: Revert nest_init_lock to being a mutex fs/ntfs3: Validate attribute data and valid sizes ovl: Use "buf" flexible array for memcpy() destination f2fs: initialize locks earlier in f2fs_fill_super() fbdev: smscufx: fix error handling code in ufx_usb_probe f2fs: fix to do sanity check on i_extra_isize in is_alive() wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads gfs2: Cosmetic gfs2_dinode_{in,out} cleanup gfs2: Always check inode size of inline inodes bpf: Skip invalid kfunc call in backtrack_insn Linux 6.1.11 Change-Id: I69722bc9711b91f2fca18de59746ada373f64c5e Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-02-09 13:29:55 +00:00
Al Viro	5a19095103	use less confusing names for iov_iter direction initializers [ Upstream commit de4eda9de2d957ef2d6a8365a01e26a435e958cb ] READ/WRITE proved to be actively confusing - the meanings are "data destination, as used with read(2)" and "data source, as used with write(2)", but people keep interpreting those as "we read data from it" and "we write data to it", i.e. exactly the wrong way. Call them ITER_DEST and ITER_SOURCE - at least that is harder to misinterpret... Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> Stable-dep-of: 6dd88fd59da8 ("vhost-scsi: unbreak any layout for response") Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-09 11:28:04 +01:00
Greg Kroah-Hartman	2712923303	This is the 6.1.2 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmOwLA8ACgkQONu9yGCS aT6RYxAAhsnIlIBCtaca7Uio9TZdluV7Fzn3c9+QogVisrwVMTtP1iHX43ofFC89 BCmiQOS9fForddjNP0vkqjZlshMYYSCDPX0s0mK6R4UoNPVg8oehZ9vJfOiR3MMX C3fApQQhYf5Bx/rC50i58ChdAw/Dqj0WNBZX/ZWod4B2JKUq7ORk7GjnorfuJxuP xO2K6KdpajZufkxtTyKtwqK8FG3dkZP9YF6MqFIvTfQ8qkLnQsrL3moFGU9giSH5 swRCFH/QII+kumKS2bir87QHz0CmvtSa3Ob4DyKiJMkNN8tspE7nOMkds4usCov6 +yM84sWp03j2RKFyadctAMKwdH16IGU0kdgqlhb9OmzGNRvX6/l5q4+QzqzPJHHQ F+v/PEJoKz3K6CK2ai8DPXoTUMgDDCaYDHg139Tv2Dj/ulDg9xzJ+CS6WBMQxMoU xO1OWhpLMDKT8soPogGY13yOsSbhPY6ef3+//eRczxLf8bg3qzoKo362PjqHVxlq IY01Ul+MB3M4NdFuFNMKM2/DBHn9qBeoZdQxnQ/vpxhBbpP2hIyEflyfsUQOmUYU lWBcnxbSLxf87CmJ3f1VSsms6kbgnxYJyNBgkXiU3WHFfcRZqoU/R+SFu2THRMPt ugor1zCHNxBBIdDEMRDWJvDTt34vRsT51Xbig+hH5BVdiKQzQ3k= =MYDV -----END PGP SIGNATURE----- Merge 6.1.2 into android14-6.1 Changes in 6.1.2 MIPS: DTS: CI20: fix reset line polarity of the ethernet controller usb: musb: remove extra check in musb_gadget_vbus_draw arm64: dts: renesas: r8a779g0: Fix HSCIF0 "brg_int" clock arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable arm64: dts: qcom: sdm845-xiaomi-polaris: fix codec pin conf name arm64: dts: qcom: msm8996: Add MSM8996 Pro support arm64: dts: qcom: msm8996: fix supported-hw in cpufreq OPP tables arm64: dts: qcom: msm8996: fix GPU OPP table ARM: dts: qcom: apq8064: fix coresight compatible arm64: dts: qcom: sdm630: fix UART1 pin bias arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias arm64: dts: qcom: msm8916: Drop MSS fallback compatible arm64: dts: fsd: fix drive strength macros as per FSD HW UM arm64: dts: fsd: fix drive strength values as per FSD HW UM memory: renesas-rpc-if: Clear HS bit during hardware initialization objtool, kcsan: Add volatile read/write instrumentation to whitelist ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96 ARM: dts: stm32: Fix AV96 WLAN regulator gpio property drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static firmware: ti_sci: Fix polled mode during system suspend riscv: dts: microchip: fix memory node unit address for icicle arm64: dts: qcom: pm660: Use unique ADC5_VCOIN address in node name arm64: dts: qcom: sm8250: correct LPASS pin pull down arm64: dts: qcom: sc7180-trogdor-homestar: fully configure secondary I2S pins soc: qcom: llcc: make irq truly optional arm64: dts: qcom: sm8150: fix UFS PHY registers arm64: dts: qcom: sm8250: fix UFS PHY registers arm64: dts: qcom: sm8350: fix UFS PHY registers arm64: dts: qcom: sm8450: fix UFS PHY registers arm64: dts: qcom: msm8996: fix sound card reset line polarity arm64: dts: qcom: sm8250-mtp: fix reset line polarity arm64: dts: qcom: sc7280: fix codec reset line polarity for CRD 3.0/3.1 arm64: dts: qcom: sc7280: fix codec reset line polarity for CRD 1.0/2.0 arm64: dts: qcom: sm8250: drop bogus DP PHY clock arm64: dts: qcom: sm6350: drop bogus DP PHY clock soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index arm64: dts: qcom: pm6350: Include header for KEY_POWER arm64: dts: qcom: sm6125: fix SDHCI CQE reg names arm64: dts: renesas: r8a779f0: Fix HSCIF "brg_int" clock arm64: dts: renesas: r8a779f0: Fix SCIF "brg_int" clock arm64: dts: renesas: r9a09g011: Fix unit address format error arm64: dts: renesas: r9a09g011: Fix I2C SoC specific strings dt-bindings: pwm: fix microchip corePWM's pwm-cells soc: sifive: ccache: fix missing iounmap() in error path in sifive_ccache_init() soc: sifive: ccache: fix missing free_irq() in error path in sifive_ccache_init() soc: sifive: ccache: fix missing of_node_put() in sifive_ccache_init() arm64: dts: mt7986: fix trng node name soc/tegra: cbb: Use correct master_id mask for CBB NOC in Tegra194 soc/tegra: cbb: Update slave maps for Tegra234 soc/tegra: cbb: Add checks for potential out of bound errors soc/tegra: cbb: Check firewall before enabling error reporting arm64: dts: qcom: sc7280: Mark all Qualcomm reference boards as LTE arm: dts: spear600: Fix clcd interrupt riscv: dts: microchip: fix the icicle's #pwm-cells soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe arm64: mm: kfence: only handle translation faults perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() drivers: perf: marvell_cn10k: Fix hotplug callback leak in tad_pmu_init() perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node arm64: dts: ti: k3-j7200-mcu-wakeup: Drop dma-coherent in crypto node arm64: dts: ti: k3-j721s2: Fix the interrupt ranges property for main & wkup gpio intr riscv: dts: microchip: remove pcie node from the sev kit ARM: dts: nuvoton: Remove bogus unit addresses from fixed-partition nodes arm64: dts: mediatek: mt8195: Fix CPUs capacity-dmips-mhz arm64: dts: mt7896a: Fix unit_address_vs_reg warning for oscillator arm64: dts: mt6779: Fix devicetree build warnings arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators arm64: dts: mt2712e: Fix unit address for pinctrl node arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names arm64: dts: mt2712-evb: Fix usb vbus regulators unit names arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name arm64: tegra: Fix Prefetchable aperture ranges of Tegra234 PCIe controllers arm64: tegra: Fix non-prefetchable aperture of PCIe C3 controller arm64: dts: mt7986: move wed_pcie node ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port ARM: dts: turris-omnia: Add ethernet aliases ARM: dts: turris-omnia: Add switch port 6 node arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC soc: apple: sart: Stop casting function pointer signatures soc: apple: rtkit: Stop casting function pointer signatures drivers/perf: hisi: Fix some event id for hisi-pcie-pmu seccomp: Move copy_seccomp() to no failure path. pstore/ram: Fix error return code in ramoops_probe() ARM: mmp: fix timer_read delay pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP arch: arm64: apple: t8103: Use standard "iommu" node name tpm: tis_i2c: Fix sanity check interrupt enable mask tpm: Add flag to use default cancellation policy tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init() tpm/tpm_crb: Fix error message in __crb_relinquish_locality() ovl: remove privs in ovl_copyfile() ovl: remove privs in ovl_fallocate() sched/uclamp: Fix relationship between uclamp and migration margin sched/uclamp: Make task_fits_capacity() use util_fits_cpu() sched/uclamp: Fix fits_capacity() check in feec() sched/uclamp: Make select_idle_capacity() use util_fits_cpu() sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() sched/uclamp: Make cpu_overutilized() use util_fits_cpu() sched/uclamp: Cater for uclamp in find_energy_efficient_cpu()'s early exit condition cpuidle: dt: Return the correct numbers of parsed idle states alpha: fix TIF_NOTIFY_SIGNAL handling alpha: fix syscall entry in !AUDUT_SYSCALL case sched/psi: Fix possible missing or delayed pending event x86/sgx: Reduce delay and interference of enclave release PM: hibernate: Fix mistake in kerneldoc comment fs: don't audit the capability check in simple_xattr_list() cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() x86/split_lock: Add sysctl to control the misery mode ACPI: irq: Fix some kernel-doc issues selftests/ftrace: event_triggers: wait longer for test_event_enable perf: Fix possible memleak in pmu_dev_alloc() lib/debugobjects: fix stat count and optimize debug_objects_mem_init platform/x86: huawei-wmi: fix return value calculation timerqueue: Use rb_entry_safe() in timerqueue_getnext() proc: fixup uptime selftest lib/fonts: fix undefined behavior in bit shift for get_default_font ocfs2: fix memory leak in ocfs2_stack_glue_init() selftests: cgroup: fix unsigned comparison with less than zero cpufreq: qcom-hw: Fix the frequency returned by cpufreq_driver->get() MIPS: vpe-mt: fix possible memory leak while module exiting MIPS: vpe-cmp: fix possible memory leak while module exiting selftests/efivarfs: Add checking of the test return value PNP: fix name memory leak in pnp_alloc_dev() mailbox: pcc: Reset pcc_chan_count to zero in case of PCC probe failure ACPI: pfr_telemetry: use ACPI_FREE() to free acpi_object ACPI: pfr_update: use ACPI_FREE() to free acpi_object perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() thermal: core: fix some possible name leaks in error paths irqchip/loongson-pch-pic: Fix translate callback for DT path irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() irqchip/loongson-liointc: Fix improper error handling in liointc_init() EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() NFSD: Finish converting the NFSv2 GETACL result encoder NFSD: Finish converting the NFSv3 GETACL result encoder nfsd: don't call nfsd_file_put from client states seqfile display genirq/irqdesc: Don't try to remove non-existing sysfs files cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value lib/notifier-error-inject: fix error when writing -errno to debugfs file debugfs: fix error when writing negative value to atomic_t debugfs file ocfs2: fix memory leak in ocfs2_mount_volume() rapidio: fix possible name leaks when rio_add_device() fails rapidio: rio: fix possible name leak in rio_register_mport() clocksource/drivers/sh_cmt: Access registers according to spec futex: Resend potentially swallowed owner death notification cpu/hotplug: Make target_store() a nop when target == state cpu/hotplug: Do not bail-out in DYING/STARTING sections clocksource/drivers/timer-ti-dm: Fix warning for omap_timer_match clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock() ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() x86/xen: Fix memory leak in xen_init_lock_cpu() xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() PM: runtime: Do not call __rpm_callback() from rpm_idle() erofs: check the uniqueness of fsid in shared domain in advance erofs: Fix pcluster memleak when its block address is zero erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails erofs: validate the extent length for uncompressed pclusters platform/chrome: cros_ec_typec: zero out stale pointers platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds\|mx]() platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() MIPS: BCM63xx: Add check for NULL for clk in clk_enable MIPS: OCTEON: warn only once if deprecated link status is being used lockd: set other missing fields when unlocking files nfsd: return error if nfs4_setacl fails NFSD: pass range end to vfs_fsync_range() instead of count fs: sysv: Fix sysv_nblocks() returns wrong value rapidio: fix possible UAF when kfifo_alloc() fails eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD relay: fix type mismatch when allocating memory in relay_create_buf() hfs: Fix OOB Write in hfs_asc2mac rapidio: devices: fix missing put_device in mport_cdev_open ipc: fix memory leak in init_mqueue_fs() platform/mellanox: mlxbf-pmc: Fix event typo selftests/bpf: Add missing bpf_iter_vma_offset__destroy call wifi: fix multi-link element subelement iteration wifi: mac80211: mlme: fix null-ptr deref on failed assoc wifi: mac80211: check link ID in auth/assoc continuation wifi: mac80211: fix ifdef symbol name drm/atomic-helper: Don't allocate new plane state in CRTC check wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() wifi: rtl8xxxu: Fix reading the vendor of combo chips wifi: ath11k: fix firmware assert during bandwidth change for peer sta drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge libbpf: Fix use-after-free in btf_dump_name_dups libbpf: Fix memory leak in parse_usdt_arg() selftests/bpf: Fix memory leak caused by not destroying skeleton selftest/bpf: Fix memory leak in kprobe_multi_test selftests/bpf: Fix error failure of case test_xdp_adjust_tail_grow selftest/bpf: Fix error usage of ASSERT_OK in xdp_adjust_tail.c libbpf: Use elf_getshdrnum() instead of e_shnum libbpf: Deal with section with no data gracefully libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() drm: lcdif: Switch to limited range for RGB to YUV conversion ata: libata: fix NCQ autosense logic pinctrl: ocelot: add missing destroy_workqueue() in error path in ocelot_pinctrl_probe() ASoC: Intel: avs: Fix DMA mask assignment ASoC: Intel: avs: Fix potential RX buffer overflow ipmi: kcs: Poll OBF briefly to reduce OBE latency drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10 properly" drm/amdgpu/powerplay/psm: Fix memory leak in power state init net: ethernet: adi: adin1110: Fix SPI transfers samples/bpf: Fix map iteration in xdp1_user samples/bpf: Fix MAC address swapping in xdp2_kern selftests/bpf: fix missing BPF object files drm/bridge: it6505: Initialize AUX channel in it6505_i2c_probe Input: iqs7222 - protect against undefined slider size media: v4l2-ctrls: Fix off-by-one error in integer menu control check media: coda: jpeg: Add check for kmalloc media: amphion: reset instance if it's aborted before codec header parsed media: adv748x: afe: Select input port when initializing AFE media: v4l2-ioctl.c: Unify YCbCr/YUV terms in format descriptions media: cedrus: hevc: Fix offset adjustments media: mediatek: vcodec: fix h264 cavlc bitstream fail drm/i915/guc: Limit scheduling properties to avoid overflow drm/i915: Fix compute pre-emption w/a to apply to compute engines media: i2c: hi846: Fix memory leak in hi846_parse_dt() media: i2c: ad5820: Fix error path venus: pm_helpers: Fix error check in vcodec_domains_get() soreuseport: Fix socket selection for SO_INCOMING_CPU. media: i2c: ov5648: Free V4L2 fwnode data on unbind media: exynos4-is: don't rely on the v4l2_async_subdev internals libbpf: Btf dedup identical struct test needs check for nested structs/arrays can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT can: kvaser_usb_leaf: Set Warning state even without bus errors can: kvaser_usb_leaf: Fix improved state not being reported can: kvaser_usb_leaf: Fix wrong CAN state after stopping can: kvaser_usb_leaf: Fix bogus restart events can: kvaser_usb: Add struct kvaser_usb_busparams can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming clk: renesas: r8a779f0: Fix SD0H clock name clk: renesas: r8a779a0: Fix SD0H clock name ASoC: dt-bindings: rt5682: Set sound-dai-cells to 1 drm/i915/guc: Add error-capture init warnings when needed drm/i915/guc: Fix GuC error capture sizing estimation and reporting dw9768: Enable low-power probe on ACPI drm/amd/display: wait for vblank during pipe programming drm/rockchip: lvds: fix PM usage counter unbalance in poweron drm/i915: Handle all GTs on driver (un)load paths drm/i915: Refactor ttm ghost obj detection drm/i915: Encapsulate lmem rpm stuff in intel_runtime_pm drm/i915/dgfx: Grab wakeref at i915_ttm_unmap_virtual clk: renesas: r9a06g032: Repair grave increment error drm: lcdif: change burst size to 256B drm/panel/panel-sitronix-st7701: Fix RTNI calculation spi: Update reference to struct spi_controller drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED drm/msm/mdp5: stop overriding drvdata ima: Handle -ESTALE returned by ima_filter_rule_match() drm/msm/hdmi: use devres helper for runtime PM management bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID bpf: Fix slot type check in check_stack_write_var_off drm/msm/dpu1: Account for DSC's bits_per_pixel having 4 fractional bits drm/msm/dsi: Remove useless math in DSC calculations drm/msm/dsi: Remove repeated calculation of slice_per_intf drm/msm/dsi: Use DIV_ROUND_UP instead of conditional increment on modulo drm/msm/dsi: Reuse earlier computed dsc->slice_chunk_size drm/msm/dsi: Appropriately set dsc->mux_word_size based on bpc drm/msm/dsi: Migrate to drm_dsc_compute_rc_parameters() drm/msm/dsi: Account for DSC's bits_per_pixel having 4 fractional bits drm/msm/dsi: Disallow 8 BPC DSC configuration for alternative BPC values drm/msm/dsi: Prevent signed BPG offsets from bleeding into adjacent bits media: platform: mtk-mdp3: fix error handling in mdp_cmdq_send() media: platform: mtk-mdp3: fix error handling about components clock_on media: platform: mtk-mdp3: fix error handling in mdp_probe() media: rkvdec: Add required padding media: vivid: fix compose size exceed boundary media: platform: exynos4-is: fix return value check in fimc_md_probe() bpf: propagate precision in ALU/ALU64 operations bpf: propagate precision across all frames, not just the last one clk: qcom: gcc-ipq806x: use parent_data for the last remaining entry clk: qcom: dispcc-sm6350: Add CLK_OPS_PARENT_ENABLE to pixel&byte src clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs mtd: Fix device name leak when register device failed in add_mtd_device() mtd: core: fix possible resource leak in init_mtd() Input: joystick - fix Kconfig warning for JOYSTICK_ADC wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port media: camss: Clean up received buffers on failed start of streaming media: camss: Do not attach an already attached power domain on MSM8916 platform clk: renesas: r8a779f0: Fix HSCIF parent clocks clk: renesas: r8a779f0: Fix SCIF parent clocks virt/sev-guest: Add a MODULE_ALIAS net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() rxrpc: Fix ack.bufferSize to be 0 when generating an ack drm: lcdif: Set and enable FIFO Panic threshold wifi: rtw89: use u32_encode_bits() to fill MAC quota value drm: rcar-du: Drop leftovers dependencies from Kconfig regmap-irq: Use the new num_config_regs property in regmap_add_irq_chip_fwnode drbd: use blk_queue_max_discard_sectors helper bfq: fix waker_bfqq inconsistency crash drm/radeon: Add the missed acpi_put_table() to fix memory leak dt-bindings: pinctrl: update uart/mmc bindings for MT7986 SoC pinctrl: mediatek: fix the pinconf register offset of some pins wifi: iwlwifi: mei: make sure ownership confirmed message is sent wifi: iwlwifi: mei: don't send SAP commands if AMT is disabled wifi: iwlwifi: mei: fix tx DHCP packet for devices with new Tx API wifi: iwlwifi: mei: avoid blocking sap messages handling due to rtnl lock wifi: iwlwifi: mei: fix potential NULL-ptr deref after clone module: Fix NULL vs IS_ERR checking for module_get_next_page ASoC: codecs: wsa883x: Use proper shutdown GPIO polarity ASoC: codecs: wsa883x: use correct header file selftests/bpf: Fix xdp_synproxy compilation failure in 32-bit arch selftests/bpf: Fix incorrect ASSERT in the tcp_hdr_options test drm/mediatek: Modify dpi power on/off sequence. ASoC: pxa: fix null-pointer dereference in filter() nvmet: only allocate a single slab for bvecs regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() nvme: return err on nvme_init_non_mdts_limits fail wifi: rtw89: Fix some error handling path in rtw89_core_sta_assoc() regulator: qcom-rpmh: Fix PMR735a S3 regulator spec drm/fourcc: Fix vsub/hsub for Q410 and Q401 ALSA: memalloc: Allocate more contiguous pages for fallback case integrity: Fix memory leakage in keyring allocation error path ima: Fix misuse of dereference of pointer in template_desc_init_fields() block: clear ->slave_dir when dropping the main slave_dir reference dm: cleanup open_table_device dm: cleanup close_table_device dm: make sure create and remove dm device won't race with open and close table dm: track per-add_disk holder relations in DM selftests/bpf: fix memory leak of lsm_cgroup wifi: ath10k: Fix return value in ath10k_pci_init() drm/msm/a6xx: Fix speed-bin detection vs probe-defer mtd: lpddr2_nvm: Fix possible null-ptr-deref Input: elants_i2c - properly handle the reset GPIO when power is off ASoC: amd: acp: Fix possible UAF in acp_dma_open net: ethernet: mtk_eth_soc: do not overwrite mtu configuration running reset routine media: amphion: add lock around vdec_g_fmt media: amphion: apply vb2_queue_error instead of setting manually media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() media: solo6x10: fix possible memory leak in solo_sysfs_init() media: platform: exynos4-is: Fix error handling in fimc_md_init() media: amphion: Fix error handling in vpu_driver_init() media: videobuf-dma-contig: use dma_mmap_coherent net: ethernet: mtk_eth_soc: fix RSTCTRL_PPE{0,1} definitions udp: Clean up some functions. net: Return errno in sk->sk_prot->get_port(). mtd: spi-nor: hide jedec_id sysfs attribute if not present mtd: spi-nor: Fix the number of bytes for the dummy cycles clk: imx93: correct the flexspi1 clock setting bpf: Pin the start cgroup in cgroup_iter_seq_init() HID: i2c: let RMI devices decide what constitutes wakeup event clk: imx93: unmap anatop base in error handling path clk: imx93: correct enet clock bpf: Move skb->len == 0 checks into __bpf_redirect HID: hid-sensor-custom: set fixed size for custom attributes clk: imx: imxrt1050: fix IMXRT1050_CLK_LCDIF_APB offsets pinctrl: k210: call of_node_put() wifi: rtw89: fix physts IE page check ASoC: Intel: Skylake: Fix Kconfig dependency ASoC: Intel: avs: Lock substream before snd_pcm_stop() ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT regulator: core: use kfree_const() to free space conditionally clk: rockchip: Fix memory leak in rockchip_clk_register_pll() drm/amdgpu: fix pci device refcount leak drm/i915/guc: make default_lists const data selftests/bpf: Make sure zero-len skbs aren't redirectable selftests/bpf: Mount debugfs in setns_by_fd bonding: fix link recovery in mode 2 when updelay is nonzero clk: microchip: check for null return of devm_kzalloc() mtd: core: Fix refcount error in del_mtd_device() mtd: maps: pxa2xx-flash: fix memory leak in probe drbd: remove call to memset before free device/resource/connection drbd: destroy workqueue when drbd device was freed ASoC: qcom: Add checks for devm_kcalloc ASoC: qcom: cleanup and fix dependency of QCOM_COMMON ASoC: mediatek: mt8186: Correct I2S shared clocks media: vimc: Fix wrong function called when vimc_init() fails media: imon: fix a race condition in send_packet() media: imx: imx7-media-csi: Clear BIT_MIPI_DOUBLE_CMPNT for <16b formats media: mt9p031: Drop bogus v4l2_subdev_get_try_crop() call from mt9p031_init_cfg() clk: imx8mn: rename vpu_pll to m7_alt_pll clk: imx: replace osc_hdmi with dummy clk: imx: rename video_pll1 to video_pll clk: imx8mn: fix imx8mn_sai2_sels clocks list clk: imx8mn: fix imx8mn_enet_phy_sels clocks list pinctrl: pinconf-generic: add missing of_node_put() media: dvb-core: Fix ignored return value in dvb_register_frontend() media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() x86/boot: Skip realmode init code when running as Xen PV guest media: sun6i-mipi-csi2: Require both pads to be connected for streaming media: sun8i-a83t-mipi-csi2: Require both pads to be connected for streaming media: sun6i-mipi-csi2: Register async subdev with no sensor attached media: sun8i-a83t-mipi-csi2: Register async subdev with no sensor attached media: amphion: try to wakeup vpu core to avoid failure media: amphion: cancel vpu before release instance media: amphion: lock and check m2m_ctx in event handler media: mediatek: vcodec: Fix getting NULL pointer for dst buffer media: mediatek: vcodec: Fix h264 set lat buffer error media: mediatek: vcodec: Setting lat buf to lat_list when lat decode error media: mediatek: vcodec: Core thread depends on core_list media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() ASoC: dt-bindings: wcd9335: fix reset line polarity in example ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd drm/msm/mdp5: fix reading hw revision on db410c platform NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding NFSv4.2: Always decode the security label NFSv4.2: Fix a memory stomp in decode_attr_security_label NFSv4.2: Fix initialisation of struct nfs4_label NFSv4: Fix a credential leak in _nfs4_discover_trunking() NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn NFS: Fix an Oops in nfs_d_automount() ALSA: asihpi: fix missing pci_disable_device() wifi: plfxlc: fix potential memory leak in __lf_x_usb_enable_rx() wifi: rtl8xxxu: Fix use after rcu_read_unlock in rtl8xxxu_bss_info_changed wifi: iwlwifi: mvm: fix double free on tx path. ASoC: mediatek: mt8173: Enable IRQ when pdata is ready clk: mediatek: fix dependency of MT7986 ADC clocks drm/amd/pm/smu11: BACO is supported when it's in BACO state amdgpu/nv.c: Corrected typo in the video capabilities resolution drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() drm/amdkfd: Fix memory leakage drm/i915/bios: fix a memory leak in generate_lfp_data_ptrs ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe clk: visconti: Fix memory leak in visconti_register_pll() netfilter: conntrack: set icmpv6 redirects as RELATED Input: wistron_btns - disable on UML bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect bonding: uninitialized variable in bond_miimon_inspect() spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE wifi: nl80211: Add checks for nla_nest_start() in nl80211_send_iface() wifi: mac80211: fix memory leak in ieee80211_if_add() wifi: mac80211: fix maybe-unused warning wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails wifi: mt76: mt7921: fix antenna signal are way off in monitor mode wifi: mt76: mt7915: fix mt7915_mac_set_timing() wifi: mt76: mt7915: fix reporting of TX AGGR histogram wifi: mt76: mt7921: fix reporting of TX AGGR histogram wifi: mt76: mt7915: rework eeprom tx paths and streams init wifi: mt76: mt7915: Fix chainmask calculation on mt7915 DBDC wifi: mt76: mt7921: fix wrong power after multiple SAR set wifi: mt76: fix coverity overrun-call in mt76_get_txpower() wifi: mt76: mt7921: Add missing __packed annotation of struct mt7921_clc wifi: mt76: do not send firmware FW_FEATURE_NON_DL region mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2() regulator: core: fix module refcount leak in set_supply() clk: qcom: lpass-sc7280: Fix pm_runtime usage clk: qcom: lpass-sc7180: Fix pm_runtime usage clk: qcom: clk-krait: fix wrong div2 functions Revert "net: hsr: use hlist_head instead of list_head for mac addresses" hsr: Add a rcu-read lock to hsr_forward_skb(). hsr: Avoid double remove of a node. hsr: Disable netpoll. hsr: Synchronize sending frames to have always incremented outgoing seq nr. hsr: Synchronize sequence number updates. configfs: fix possible memory leak in configfs_create_dir() regulator: core: fix resource leak in regulator_register() hwmon: (jc42) Convert register access and caching to regmap/regcache hwmon: (jc42) Restore the min/max/critical temperatures on resume bpf: Add dummy type reference to nf_conn___init to fix type deduplication bpf, sockmap: fix race in sock_map_free() ALSA: pcm: Set missing stop_operating flag at undoing trigger start media: saa7164: fix missing pci_disable_device() media: ov5640: set correct default link frequency ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt pinctrl: thunderbay: fix possible memory leak in thunderbay_build_functions() xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() SUNRPC: Fix missing release socket in rpc_sockname() NFSv4.2: Set the correct size scratch buffer for decoding READ_PLUS NFS: Allow very small rsize & wsize again NFSv4.x: Fail client initialisation if state manager thread can't run riscv, bpf: Emit fixed-length instructions for BPF_PSEUDO_FUNC bpftool: Fix memory leak in do_build_table_cb hwmon: (emc2305) fix unable to probe emc2301/2/3 hwmon: (emc2305) fix pwm never being able to set lower mmc: alcor: fix return value check of mmc_add_host() mmc: moxart: fix return value check of mmc_add_host() mmc: mxcmmc: fix return value check of mmc_add_host() mmc: pxamci: fix return value check of mmc_add_host() mmc: rtsx_pci: fix return value check of mmc_add_host() mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() mmc: toshsd: fix return value check of mmc_add_host() mmc: vub300: fix return value check of mmc_add_host() mmc: wmt-sdmmc: fix return value check of mmc_add_host() mmc: litex_mmc: ensure `host->irq == 0` if polling mmc: atmel-mci: fix return value check of mmc_add_host() mmc: omap_hsmmc: fix return value check of mmc_add_host() mmc: meson-gx: fix return value check of mmc_add_host() mmc: via-sdmmc: fix return value check of mmc_add_host() mmc: wbsd: fix return value check of mmc_add_host() mmc: mmci: fix return value check of mmc_add_host() mmc: renesas_sdhi: alway populate SCC pointer memstick/ms_block: Add check for alloc_ordered_workqueue mmc: core: Normalize the error handling branch in sd_read_ext_regs() nvme: pass nr_maps explicitly to nvme_alloc_io_tag_set regulator: qcom-labibb: Fix missing of_node_put() in qcom_labibb_regulator_probe() media: c8sectpfe: Add of_node_put() when breaking out of loop media: coda: Add check for dcoda_iram_alloc media: coda: Add check for kmalloc media: staging: stkwebcam: Restore MEDIA_{USB,CAMERA}_SUPPORT dependencies clk: samsung: Fix memory leak in _samsung_clk_register_pll() spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h wifi: rtl8xxxu: Fix the channel width reporting wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() blktrace: Fix output non-blktrace event when blk_classic option enabled bpf: Do not zero-extend kfunc return values clk: socfpga: Fix memory leak in socfpga_gate_init() net: vmw_vsock: vmci: Check memcpy_from_msg() net: defxx: Fix missing err handling in dfx_init() net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() net: stmmac: fix possible memory leak in stmmac_dvr_probe() drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() ipvs: use u64_stats_t for the per-cpu counters of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() net: farsync: Fix kmemleak when rmmods farsync net/tunnel: wait until all sk_user_data reader finish before releasing the sock net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() net: setsockopt: fix IPV6_UNICAST_IF option for connected sockets af_unix: call proto_unregister() in the error path in af_unix_init() net: amd-xgbe: Fix logic around active and passive cables net: amd-xgbe: Check only the minimum speed for active/passive cables can: tcan4x5x: Remove invalid write in clear_interrupts can: m_can: Call the RAM init directly from m_can_chip_config can: tcan4x5x: Fix use of register error status mask net: ethernet: ti: am65-cpsw: Fix PM runtime leakage in am65_cpsw_nuss_ndo_slave_open() net: lan9303: Fix read error execution path ntb_netdev: Use dev_kfree_skb_any() in interrupt context sctp: sysctl: make extra pointers netns aware Bluetooth: hci_core: fix error handling in hci_register_dev() Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS Bluetooth: Fix EALREADY and ELOOP cases in bt_status() Bluetooth: hci_conn: Fix crash on hci_create_cis_sync Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() octeontx2-af: cn10k: mcs: Fix a resource leak in the probe and remove functions stmmac: fix potential division by 0 i40e: Fix the inability to attach XDP program on downed interface net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path apparmor: fix a memleak in multi_transaction_new() apparmor: fix lockdep warning when removing a namespace apparmor: Fix abi check to include v8 abi apparmor: Fix regression in stacking due to label flags crypto: hisilicon/qm - fix incorrect parameters usage crypto: hisilicon/qm - re-enable communicate interrupt before notifying PF crypto: sun8i-ss - use dma_addr instead u32 crypto: nitrox - avoid double free on error path in nitrox_sriov_init() crypto: tcrypt - fix return value for multiple subtests scsi: core: Fix a race between scsi_done() and scsi_timeout() apparmor: Use pointer to struct aa_label for lbs_cred PCI: dwc: Fix n_fts[] array overrun RDMA/core: Fix order of nldev_exit call PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled f2fs: Fix the race condition of resize flag between resizefs crypto: rockchip - do not do custom power management crypto: rockchip - do not store mode globally crypto: rockchip - add fallback for cipher crypto: rockchip - add fallback for ahash crypto: rockchip - better handle cipher key crypto: rockchip - remove non-aligned handling crypto: rockchip - rework by using crypto_engine apparmor: Fix memleak in alloc_ns() fortify: Do not cast to "unsigned char" f2fs: fix to invalidate dcc->f2fs_issue_discard in error path f2fs: fix gc mode when gc_urgent_high_remaining is 1 f2fs: fix normal discard process f2fs: allow to set compression for inlined file f2fs: fix the assign logic of iocb f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super() RDMA/irdma: Report the correct link speed scsi: qla2xxx: Fix set-but-not-used variable warnings RDMA/siw: Fix immediate work request flush to completion queue IB/mad: Don't call to function that might sleep while in atomic context PCI: vmd: Disable MSI remapping after suspend PCI: imx6: Initialize PHY before deasserting core reset f2fs: fix to avoid accessing uninitialized spinlock RDMA/restrack: Release MR restrack when delete RDMA/core: Make sure "ib_port" is valid when access sysfs node RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port RDMA/siw: Set defined status for work completion with undefined status RDMA/irdma: Fix inline for multiple SGE's RDMA/irdma: Fix RQ completion opcode RDMA/irdma: Do not request 2-level PBLEs for CQ alloc scsi: scsi_debug: Fix a warning in resp_write_scat() crypto: ccree - Remove debugfs when platform_driver_register failed crypto: cryptd - Use request context instead of stack for sub-request crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() RDMA/rxe: Fix mr->map double free RDMA/hns: Fix ext_sge num error when post send RDMA/hns: Fix incorrect sge nums calculation PCI: Check for alloc failure in pci_request_irq() RDMA/hfi: Decrease PCI device reference count in error path crypto: ccree - Make cc_debugfs_global_fini() available for module init function RDMA/irdma: Initialize net_type before checking it RDMA/hns: fix memory leak in hns_roce_alloc_mr() RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed dt-bindings: imx6q-pcie: Fix clock names for imx6sx and imx8mq dt-bindings: visconti-pcie: Fix interrupts array max constraints PCI: endpoint: pci-epf-vntb: Fix call pci_epc_mem_free_addr() in error path scsi: hpsa: Fix possible memory leak in hpsa_init_one() crypto: tcrypt - Fix multibuffer skcipher speed test mem leak padata: Always leave BHs disabled when running ->parallel() padata: Fix list iterator in padata_do_serial() crypto: x86/aegis128 - fix possible crash with CFI enabled crypto: x86/aria - fix crash with CFI enabled crypto: x86/sha1 - fix possible crash with CFI enabled crypto: x86/sha256 - fix possible crash with CFI enabled crypto: x86/sha512 - fix possible crash with CFI enabled crypto: x86/sm3 - fix possible crash with CFI enabled crypto: x86/sm4 - fix crash with CFI enabled crypto: arm64/sm3 - add NEON assembly implementation crypto: arm64/sm3 - fix possible crash with CFI enabled crypto: hisilicon/qm - fix 'QM_XEQ_DEPTH_CAP' mask value scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() scsi: hpsa: Fix error handling in hpsa_add_sas_host() scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() scsi: efct: Fix possible memleak in efct_device_init() scsi: scsi_debug: Fix a warning in resp_verify() scsi: scsi_debug: Fix a warning in resp_report_zones() scsi: fcoe: Fix possible name leak when device_register() fails scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() scsi: ipr: Fix WARNING in ipr_init() scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails scsi: snic: Fix possible UAF in snic_tgt_create() scsi: ufs: core: Fix the polling implementation RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() f2fs: set zstd compress level correctly f2fs: fix to enable compress for newly created file if extension matches f2fs: avoid victim selection from previous victim section RDMA/nldev: Fix failure to send large messages crypto: qat - fix error return code in adf_probe crypto: amlogic - Remove kcalloc without check crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() riscv/mm: add arch hook arch_clear_hugepage_flags RDMA: Disable IB HW for UML RDMA/hfi1: Fix error return code in parse_platform_config() RDMA/srp: Fix error return code in srp_parse_options() PCI: vmd: Fix secondary bus reset for Intel bridges orangefs: Fix sysfs not cleanup when dev init failed RDMA/hns: Fix the gid problem caused by free mr RDMA/hns: Fix AH attr queried by query_qp RDMA/hns: Fix PBL page MTR find RDMA/hns: Fix page size cap from firmware RDMA/hns: Fix error code of CMD RDMA/hns: Fix XRC caps on HIP08 RISC-V: Fix unannoted hardirqs-on in return to userspace slow-path RISC-V: Fix MEMREMAP_WB for systems with Svpbmt riscv: Fix crash during early errata patching crypto: img-hash - Fix variable dereferenced before check 'hdev->req' hwrng: amd - Fix PCI device refcount leak hwrng: geode - Fix PCI device refcount leak IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces RISC-V: Align the shadow stack f2fs: fix iostat parameter for discard riscv: Fix P4D_SHIFT definition for 3-level page table mode drivers: dio: fix possible memory leak in dio_init() serial: tegra: Read DMA status before terminating serial: 8250_bcm7271: Fix error handling in brcmuart_init() drivers: staging: r8188eu: Fix sleep-in-atomic-context bug in rtw_join_timeout_handler class: fix possible memory leak in __class_register() vfio: platform: Do not pass return buffer to ACPI _RST method vfio/iova_bitmap: Fix PAGE_SIZE unaligned bitmaps uio: uio_dmem_genirq: Fix missing unlock in irq configuration uio: uio_dmem_genirq: Fix deadlock between irq config and handling usb: fotg210-udc: Fix ages old endianness issues interconnect: qcom: sc7180: fix dropped const of qcom_icc_bcm staging: vme_user: Fix possible UAF in tsi148_dma_list_add usb: typec: Check for ops->exit instead of ops->enter in altmode_exit usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails usb: typec: tipd: Fix spurious fwnode_handle_put in error path usb: typec: tipd: Fix typec_unregister_port error paths usb: musb: omap2430: Fix probe regression for missing resources extcon: usbc-tusb320: Update state on probe even if no IRQ pending USB: gadget: Fix use-after-free during usb config switch serial: amba-pl011: avoid SBSA UART accessing DMACR register serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. serial: stm32: move dma_request_chan() before clk_prepare_enable() serial: pch: Fix PCI device refcount leak in pch_request_dma() serial: altera_uart: fix locking in polling mode serial: sunsab: Fix error handling in sunsab_init() habanalabs: fix return value check in hl_fw_get_sec_attest_data() test_firmware: fix memory leak in test_firmware_init() misc: ocxl: fix possible name leak in ocxl_file_register_afu() ocxl: fix pci device refcount leak when calling get_function_0() misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() cxl: fix possible null-ptr-deref in cxl_guest_init_afu\|adapter() cxl: fix possible null-ptr-deref in cxl_pci_init_afu\|adapter() iio: temperature: ltc2983: make bulk write buffer DMA-safe iio: adis: add '__adis_enable_irq()' implementation counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update coresight: trbe: remove cpuhp instance node before remove cpuhp state coresight: cti: Fix null pointer error on CTI init before ETM tracing/user_events: Fix call print_fmt leak usb: roles: fix of node refcount leak in usb_role_switch_is_parent() usb: core: hcd: Fix return value check in usb_hcd_setup_local_mem() usb: gadget: f_hid: fix f_hidg lifetime vs cdev usb: gadget: f_hid: fix refcount leak on error path drivers: mcb: fix resource leak in mcb_probe() mcb: mcb-parse: fix error handing in chameleon_parse_gdd() chardev: fix error handling in cdev_device_add() vfio/iova_bitmap: refactor iova_bitmap_set() to better handle page boundaries i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe staging: rtl8192u: Fix use after free in ieee80211_rx() staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() vme: Fix error not catched in fake_init() gpiolib: cdev: fix NULL-pointer dereferences gpiolib: protect the GPIO device against being dropped while in use by user-space i2c: mux: reg: check return value after calling platform_get_resource() i2c: ismt: Fix an out-of-bounds bug in ismt_access() usb: storage: Add check for kcalloc usb: typec: wusb3801: fix fwnode refcount leak in wusb3801_probe() tracing/hist: Fix issue of losting command info in error_log ksmbd: Fix resource leak in ksmbd_session_rpc_open() samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() thermal/drivers/imx8mm_thermal: Validate temperature range thermal/drivers/k3_j72xx_bandgap: Fix the debug print message thermal/of: Fix memory leak on thermal_of_zone_register() failure thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2 thermal/drivers/qcom/lmh: Fix irq handler return value fbdev: ssd1307fb: Drop optional dependency fbdev: pm2fb: fix missing pci_disable_device() fbdev: via: Fix error in via_core_init() fbdev: vermilion: decrease reference count in error path fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() fbdev: geode: don't build on UML fbdev: uvesafb: don't build on UML fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() led: qcom-lpg: Fix sleeping in atomic perf tools: Fix "kernel lock contention analysis" test by not printing warnings in quiet mode perf stat: Use evsel__is_hybrid() more perf stat: Move common code in print_metric_headers() HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() HSI: omap_ssi_core: fix possible memory leak in ssi_probe() power: supply: fix residue sysfs file in error handle route of __power_supply_register() watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running perf trace: Return error if a system call doesn't exist perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number perf trace: Handle failure when trace point folder is missed perf symbol: correction while adjusting symbol power: supply: z2_battery: Fix possible memleak in z2_batt_probe() power: supply: cw2015: Fix potential null-ptr-deref in cw_bat_probe() HSI: omap_ssi_core: Fix error handling in ssi_init() power: supply: ab8500: Fix error handling in ab8500_charger_init() power: supply: Fix refcount leak in rk817_charger_probe power: supply: bq25890: Factor out regulator registration code power: supply: bq25890: Convert to i2c's .probe_new() power: supply: bq25890: Ensure pump_express_work is cancelled on remove perf branch: Fix interpretation of branch records power: supply: fix null pointer dereferencing in power_supply_get_battery_info gfs2: Partially revert gfs2_inode_lookup change leds: is31fl319x: Fix setting current limit for is31fl319{0,1,3} perf off_cpu: Fix a typo in BTF tracepoint name, it should be 'btf_trace_sched_switch' ftrace: Allow WITH_ARGS flavour of graph tracer with shadow call stack perf stat: Do not delay the workload with --delay RDMA/siw: Fix pointer cast warning fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst() fs/ntfs3: Harden against integer overflows phy: marvell: phy-mvebu-a3700-comphy: Reset COMPHY registers before USB 3.0 power on phy: qcom-qmp-pcie: drop bogus register update dmaengine: idxd: Make max batch size attributes in sysfs invisible for Intel IAA dmaengine: apple-admac: Allocate cache SRAM to channels remoteproc: core: Auto select rproc-virtio device id phy: qcom-qmp-pcie: drop power-down delay config phy: qcom-qmp-pcie: replace power-down delay phy: qcom-qmp-pcie: fix sc8180x initialisation phy: qcom-qmp-pcie: fix ipq8074-gen3 initialisation phy: qcom-qmp-pcie: fix ipq6018 initialisation phy: qcom-qmp-usb: clean up power-down handling phy: qcom-qmp-usb: drop sc8280xp power-down delay phy: qcom-qmp-usb: drop power-down delay config phy: qcom-qmp-usb: clean up status polling phy: qcom-qmp-usb: drop start and pwrdn-ctrl abstraction phy: qcom-qmp-usb: correct registers layout for IPQ8074 USB3 PHY iommu/s390: Fix duplicate domain attachments iommu/sun50i: Fix reset release iommu/sun50i: Consider all fault sources for reset iommu/sun50i: Fix R/W permission check iommu/sun50i: Fix flush size iommu/sun50i: Implement .iotlb_sync_map iommu/rockchip: fix permission bits in page table entries v2 dmaengine: idxd: Make read buffer sysfs attributes invisible for Intel IAA phy: qcom-qmp-usb: fix sc8280xp PCS_USB offset phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices phy: usb: Use slow clock for wake enabled suspend phy: usb: Fix clock imbalance for suspend/resume include/uapi/linux/swab: Fix potentially missing __always_inline pwm: tegra: Improve required rate calculation pwm: tegra: Ensure the clock rate is not less than needed phy: qcom-qmp-pcie: split register tables into common and extra parts phy: qcom-qmp-pcie: split pcs_misc init cfg for ipq8074 pcs table phy: qcom-qmp-pcie: support separate tables for EP mode phy: qcom-qmp-pcie: Support SM8450 PCIe1 PHY in EP mode phy: qcom-qmp-pcie: Fix high latency with 4x2 PHY when ASPM is enabled phy: qcom-qmp-pcie: Fix sm8450_qmp_gen4x2_pcie_pcs_tbl[] register names fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs dmaengine: idxd: Fix crc_val field for completion record rtc: rzn1: Check return value in rzn1_rtc_probe rtc: class: Fix potential memleak in devm_rtc_allocate_device() rtc: pcf2127: Convert to .probe_new() rtc: cmos: Call cmos_wake_setup() from cmos_do_probe() rtc: cmos: Call rtc_wake_setup() from cmos_do_probe() rtc: cmos: Eliminate forward declarations of some functions rtc: cmos: Rename ACPI-related functions rtc: cmos: Disable ACPI RTC event on removal rtc: snvs: Allow a time difference on clock register read rtc: pcf85063: Fix reading alarm iommu/mediatek: Check return value after calling platform_get_resource() iommu: Avoid races around device probe iommu/amd: Fix pci device refcount leak in ppr_notifier() iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() macintosh: fix possible memory leak in macio_add_one_device() macintosh/macio-adb: check the return value of ioremap() powerpc/52xx: Fix a resource leak in an error handling path cxl: Fix refcount leak in cxl_calc_capp_routing powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() powerpc/pseries: fix the object owners enum value in plpks driver powerpc/pseries: Fix the H_CALL error code in PLPKS driver powerpc/pseries: Return -EIO instead of -EINTR for H_ABORTED error powerpc/pseries: fix plpks_read_var() code for different consumers kprobes: Fix check for probe enabled in kill_kprobe() powerpc: dts: turris1x.dts: Add channel labels for temperature sensor powerpc/perf: callchain validate kernel stack pointer bounds powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() powerpc/hv-gpci: Fix hv_gpci event list selftests/powerpc: Fix resource leaks iommu/mediatek: Add platform_device_put for recovering the device refcnt iommu/mediatek: Use component_match_add iommu/mediatek: Add error path for loop of mm_dts_parse iommu/mediatek: Validate number of phandles associated with "mediatek,larbs" iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY pwm: sifive: Call pwm_sifive_update_clock() while mutex is held pwm: mtk-disp: Fix the parameters calculated by the enabled flag of disp_pwm pwm: mediatek: always use bus clock for PWM on MT7622 RISC-V: KVM: Fix reg_val check in kvm_riscv_vcpu_set_reg_config() remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove remoteproc: qcom_q6v5_pas: detach power domains on remove remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in q6v5_wcss_qcs404_power_on() powerpc/pseries/eeh: use correct API for error log size dt-bindings: mfd: qcom,spmi-pmic: Drop PWM reg dependency mfd: axp20x: Do not sleep in the power off handler mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe() mfd: pm8008: Fix return value check in pm8008_probe() netfilter: flowtable: really fix NAT IPv6 offload rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() rtc: pcf85063: fix pcf85063_clkout_control iommu/mediatek: Fix forever loop in error handling nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure net: macsec: fix net device access prior to holding a lock bonding: add missed __rcu annotation for curr_active_slave bonding: do failover when high prio link up mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() block, bfq: fix possible uaf for 'bfqq->bic' selftests/bpf: Select CONFIG_FUNCTION_ERROR_INJECTION bpf: prevent leak of lsm program after failed attach media: v4l2-ctrls-api.c: add back dropped ctrl->is_new = 1 net: enetc: avoid buffer leaks on xdp_do_redirect() failure nfc: pn533: Clear nfc_target before being used unix: Fix race in SOCK_SEQPACKET's unix_dgram_sendmsg() r6040: Fix kmemleak in probe and remove net: dsa: mv88e6xxx: avoid reg_lock deadlock in mv88e6xxx_setup_port() igc: Enhance Qbv scheduling by using first flag bit igc: Use strict cycles for Qbv scheduling igc: Add checking for basetime less than zero igc: allow BaseTime 0 enrollment for Qbv igc: recalculate Qbv end_time by considering cycle time igc: Set Qbv start_time and end_time to end_time if not being configured in GCL rtc: mxc_v2: Add missing clk_disable_unprepare() devlink: hold region lock when flushing snapshots selftests: devlink: fix the fd redirect in dummy_reporter_test openvswitch: Fix flow lookup to use unmasked key soc: mediatek: pm-domains: Fix the power glitch issue arm64: dts: mt8183: Fix Mali GPU clock devlink: protect devlink dump by the instance lock skbuff: Account for tail adjustment during pull operations mailbox: mpfs: read the system controller's status mailbox: arm_mhuv2: Fix return value check in mhuv2_probe() mailbox: zynq-ipi: fix error handling while device_register() fails net_sched: reject TCF_EM_SIMPLE case for complex ematch module rxrpc: Fix missing unlock in rxrpc_do_sendmsg() myri10ge: Fix an error handling path in myri10ge_probe() net: stream: purge sk_error_queue in sk_stream_kill_queues() mctp: serial: Fix starting value for frame check sequence cifs: don't leak -ENOMEM in smb2_open_file() net: dsa: microchip: remove IRQF_TRIGGER_FALLING in request_threaded_irq mctp: Remove device type check at unregister HID: amd_sfh: Add missing check for dma_alloc_coherent net: fec: check the return value of build_skb() rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() arm64: make is_ttbrX_addr() noinstr-safe ARM: dts: aspeed: rainier,everest: Move reserved memory regions video: hyperv_fb: Avoid taking busy spinlock on panic path x86/hyperv: Remove unregister syscore call from Hyper-V cleanup binfmt_misc: fix shift-out-of-bounds in check_special_flags arm64: dts: qcom: sm8450: disable SDHCI SDR104/SDR50 on all boards arm64: dts: qcom: sm6350: Add apps_smmu with streamID to SDHCI 1/2 nodes fs: jfs: fix shift-out-of-bounds in dbAllocAG udf: Avoid double brelse() in udf_rename() jfs: Fix fortify moan in symlink fs: jfs: fix shift-out-of-bounds in dbDiscardAG ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value ACPI: EC: Add quirk for the HP Pavilion Gaming 15-cx0041ur ACPICA: Fix error code path in acpi_ds_call_control_method() thermal/core: Ensure that thermal device is registered in thermal_zone_get_temp ACPI: video: Change GIGABYTE GB-BXBT-2807 quirk to force_none ACPI: video: Change Sony Vaio VPCEH3U1E quirk to force_native ACPI: video: Add force_vendor quirk for Sony Vaio PCG-FRV35 ACPI: video: Add force_native quirk for Sony Vaio VPCY11S1E nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() nilfs2: fix shift-out-of-bounds due to too large exponent of block size acct: fix potential integer overflow in encode_comp_t() x86/apic: Handle no CONFIG_X86_X2APIC on systems with x2APIC enabled by BIOS ACPI: x86: Add skip i2c clients quirk for Lenovo Yoga Tab 3 Pro (YT3-X90F) btrfs: do not panic if we can't allocate a prealloc extent state ACPI: x86: Add skip i2c clients quirk for Medion Lifetab S10346 hfs: fix OOB Read in __hfs_brec_find drm/etnaviv: add missing quirks for GC300 media: imx-jpeg: Disable useless interrupt to avoid kernel panic brcmfmac: return error when getting invalid max_flowrings from dongle wifi: ath9k: verify the expected usb_endpoints are present wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out ASoC: codecs: rt298: Add quirk for KBL-R RVP platform ASoC: Intel: avs: Add quirk for KBL-R RVP platform ipmi: fix memleak when unload ipmi driver wifi: ath10k: Delay the unmapping of the buffer openvswitch: Use kmalloc_size_roundup() to match ksize() usage bnx2: Use kmalloc_size_roundup() to match ksize() usage drm/amd/display: skip commit minimal transition state drm/amd/display: prevent memory leak drm/edid: add a quirk for two LG monitors to get them to work on 10bpc Revert "drm/amd/display: Limit max DSC target bpp for specific monitors" drm/rockchip: use pm_runtime_resume_and_get() instead of pm_runtime_get_sync() blk-mq: avoid double ->queue_rq() because of early timeout HID: apple: fix key translations where multiple quirks attempt to translate the same key HID: apple: enable APPLE_ISO_TILDE_QUIRK for the keyboards of Macs with the T2 chip wifi: ath11k: Fix qmi_msg_handler data structure initialization qed (gcc13): use u16 for fid to be big enough drm/meson: Fix return type of meson_encoder_cvbs_mode_valid() bpf: make sure skb->len != 0 when redirecting to a tunneling device net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() hamradio: baycom_epp: Fix return type of baycom_send_packet() wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() wifi: brcmfmac: Fix potential NULL pointer dereference in 'brcmf_c_preinit_dcmds()' HID: input: do not query XP-PEN Deco LW battery HID: uclogic: Add support for XP-PEN Deco LW igb: Do not free q_vector unless new one was allocated drm/amdgpu: Fix type of second parameter in trans_msg() callback drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback s390/ctcm: Fix return type of ctc{mp,}m_tx() s390/netiucv: Fix return type of netiucv_tx() s390/lcs: Fix return type of lcs_start_xmit() drm/amd/display: Use min transition for SubVP into MPO drm/amd/display: Disable DRR actions during state commit drm/msm: Use drm_mode_copy() drm/rockchip: Use drm_mode_copy() drm/sti: Use drm_mode_copy() drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid() drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() md/raid0, raid10: Don't set discard sectors for request queue md/raid1: stop mdx_raid1 thread when raid1 array run failed drm/amd/display: Workaround to increase phantom pipe vactive in pipesplit drm/amd/display: fix array index out of bound error in bios parser nvme-auth: don't override ctrl keys before validation net: add atomic_long_t to net_device_stats fields ipv6/sit: use DEV_STATS_INC() to avoid data-races mrp: introduce active flags to prevent UAF when applicant uninit net: ethernet: mtk_eth_soc: drop packets to WDMA if the ring is full bpf/verifier: Use kmalloc_size_roundup() to match ksize() usage ppp: associate skb with a device at tx drm/amd/display: Fix display corruption w/ VSR enable bpf: Fix a BTF_ID_LIST bug with CONFIG_DEBUG_INFO_BTF not set bpf: Prevent decl_tag from being referenced in func_proto arg ethtool: avoiding integer overflow in ethtool_phys_id() media: dvb-frontends: fix leak of memory fw media: dvbdev: adopts refcnt to avoid UAF media: dvb-usb: fix memory leak in dvb_usb_adapter_init() media: mediatek: vcodec: Can't set dst buffer to done when lat decode error blk-mq: fix possible memleak when register 'hctx' failed ALSA: usb-audio: Add quirk for Tascam Model 12 drm/amdgpu: Fix potential double free and null pointer dereference drm/amd/display: Use the largest vready_offset in pipe group drm/amd/display: Fix DTBCLK disable requests and SRC_SEL programming ASoC: amd: yc: Add Xiaomi Redmi Book Pro 14 2022 into DMI table libbpf: Avoid enum forward-declarations in public API in C++ mode regulator: core: fix use_count leakage when handling boot-on wifi: mt76: do not run mt76u_status_worker if the device is not running hwmon: (nct6775) add ASUS CROSSHAIR VIII/TUF/ProArt B550M selftests/bpf: Fix conflicts with built-in functions in bpf_iter_ksym nfs: fix possible null-ptr-deref when parsing param mmc: f-sdh30: Add quirks for broken timeout clock capability mmc: renesas_sdhi: add quirk for broken register layout mmc: renesas_sdhi: better reset from HS400 mode mmc: sdhci-tegra: Issue CMD and DAT resets together media: si470x: Fix use-after-free in si470x_int_in_callback() clk: st: Fix memory leak in st_of_quadfs_setup() regulator: core: Use different devices for resource allocation and DT lookup ice: synchronize the misc IRQ when tearing down Tx tracker Bluetooth: hci_bcm: Add CYW4373A0 support Bluetooth: Add quirk to disable extended scanning Bluetooth: Add quirk to disable MWS Transport Configuration regulator: core: Fix resolve supply lookup issue crypto: hisilicon/hpre - fix resource leak in remove process scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs scsi: ufs: Reduce the START STOP UNIT timeout crypto: hisilicon/qm - increase the memory of local variables Revert "PCI: Clear PCI_STATUS when setting up device" scsi: elx: libefc: Fix second parameter type in state callbacks hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() scsi: smartpqi: Add new controller PCI IDs scsi: smartpqi: Correct device removal for multi-actuator devices drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() scsi: target: iscsi: Fix a race condition between login_work and the login thread orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() orangefs: Fix kmemleak in orangefs_sysfs_init() orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() hwmon: (jc42) Fix missing unlock on error in jc42_write() ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove() ASoC: Intel: Skylake: Fix driver hang during shutdown ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() ALSA: hda/hdmi: fix i915 silent stream programming flow ALSA: hda/hdmi: set default audio parameters for KAE silent-stream ALSA: hda/hdmi: fix stream-id config keep-alive for rt suspend ASoC: wm8994: Fix potential deadlock ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() ASoC: rt5670: Remove unbalanced pm_runtime_put() drm/i915/display: Don't disable DDI/Transcoder when setting phy test pattern LoadPin: Ignore the "contents" argument of the LSM hooks lkdtm: cfi: Make PAC test work with GCC 7 and 8 pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion drm/amd/pm: avoid large variable on kernel stack perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() perf tools: Make quiet mode consistent between tools perf probe: Check -v and -q options in the right place MIPS: ralink: mt7621: avoid to init common ralink reset controller perf test: Fix "all PMU test" to skip parametrized events afs: Fix lost servers_outstanding count cfi: Fix CFI failure with KASAN pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES ima: Simplify ima_lsm_copy_rule Input: iqs7222 - drop unused device node references Input: iqs7222 - report malformed properties Input: iqs7222 - add support for IQS7222A v1.13+ dt-bindings: input: iqs7222: Reduce 'linux,code' to optional dt-bindings: input: iqs7222: Correct minimum slider size dt-bindings: input: iqs7222: Add support for IQS7222A v1.13+ ALSA: usb-audio: Workaround for XRUN at prepare ALSA: usb-audio: add the quirk for KT0206 device ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list HID: logitech-hidpp: Guard FF init code against non-USB devices usb: cdnsp: fix lack of ZLP for ep0 usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq arm64: dts: qcom: sm6350: fix USB-DP PHY registers arm64: dts: qcom: sm8250: fix USB-DP PHY registers dt-bindings: clocks: imx8mp: Add ID for usb suspend clock clk: imx: imx8mp: add shared clk gate for usb suspend clk usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode usb: dwc3: core: defer probe on ulpi_read_id timeout usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init xhci: Prevent infinite loop in transaction errors recovery for streams HID: wacom: Ensure bootloader PID is usable in hidraw mode HID: mcp2221: don't connect hidraw loop: Fix the max_loop commandline argument treatment when it is set to 0 9p: set req refcount to zero to avoid uninitialized usage security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 reiserfs: Add missing calls to reiserfs_security_free() iio: fix memory leak in iio_device_register_eventset() iio: adc: ad_sigma_delta: do not use internal iio_dev lock iio: adc128s052: add proper .data members in adc128_of_match table iio: addac: ad74413r: fix integer promotion bug in ad74413_get_input_current_offset() regulator: core: fix deadlock on regulator enable spi: fsl_spi: Don't change speed while chipselect is active floppy: Fix memory leak in do_floppy_init() gcov: add support for checksum field test_maple_tree: add test for mas_spanning_rebalance() on insufficient data maple_tree: fix mas_spanning_rebalance() on insufficient data fbdev: fbcon: release buffer when fbcon_do_set_font() failed ovl: fix use inode directly in rcu-walk mode btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range mm/gup: disallow FOLL_FORCE\|FOLL_WRITE on hugetlb mappings scsi: qla2xxx: Fix crash when I/O abort times out blk-iolatency: Fix memory leak on add_disk() failures io_uring/net: introduce IORING_SEND_ZC_REPORT_USAGE flag io_uring: add completion locking for iopoll io_uring: dont remove file from msg_ring reqs io_uring: improve io_double_lock_ctx fail handling io_uring/net: ensure compat import handlers clear free_iov io_uring/net: fix cleanup after recycle io_uring: protect cq_timeouts with timeout_lock io_uring: remove iopoll spinlock net: stmmac: fix errno when create_singlethread_workqueue() fails media: dvbdev: fix build warning due to comments media: dvbdev: fix refcnt bug drm/amd/display: revert Disable DRR actions during state commit mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code pwm: tegra: Fix 32 bit build Linux 6.1.2 Change-Id: I8f7c080f3b8288ed319fc0e25aaefb7ad5cd6b84 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-01-18 18:44:34 +00:00
Ard Biesheuvel	c6d5a76721	ANDROID: fips140: add kernel crypto module To meet FIPS 140 requirements, add support for building a kernel module "fips140.ko" that contains various cryptographic algorithms built from existing kernel source files. At load time, the module checks its own integrity and self-tests its algorithms, then registers the algorithms with the crypto API to supersede the original algorithms provided by the kernel itself. [ebiggers: this commit originated from "ANDROID: crypto: fips140 - perform load time integrity check", but I've folded many later commits into it to make forward porting easier. See below] Original commits: android12-5.10: 6be141eb36fe ("ANDROID: crypto: fips140 - perform load time integrity check") 868be244bbed ("ANDROID: inject correct HMAC digest into fips140.ko at build time") 091338cb398e ("ANDROID: fips140: add missing static keyword to fips140_init()") c799c6644b52 ("ANDROID: fips140: adjust some log messages") 92de53472e68 ("ANDROID: fips140: log already-live algorithms") 0af06624eadc ("ANDROID: fips140: check for errors from initcalls") 634445a640a4 ("ANDROID: fips140: fix deadlock in unregister_existing_fips140_algos()") e886dd4c339e ("ANDROID: fips140: unregister existing DRBG algorithms") b7397e89db29 ("ANDROID: fips140: add power-up cryptographic self-tests") 50661975be74 ("ANDROID: fips140: add/update module help text") b397a0387cb2 ("ANDROID: fips140: test all implementations") 17ccefe14021 ("ANDROID: fips140: use full 16-byte IV") 1be58af0776a ("ANDROID: fips140: remove non-prediction-resistant DRBG test") 2b5843ae2d90 ("ANDROID: fips140: add AES-CBC-CTS") 2ee56aad318c ("ANDROID: fips140: add AES-CMAC") 960ebb2b565b ("ANDROID: fips140: add jitterentropy to fips140 module") e5b14396f9d2 ("ANDROID: fips140: take into account AES-GCM not being approvable") 52b70d491bd4 ("ANDROID: fips140: use FIPS140_CFLAGS when compiling fips140-selftests.c") 6b995f5a5403 ("ANDROID: fips140: preserve RELA sections without relying on the module loader") e45108ecff64 ("ANDROID: fips140: block crypto operations until tests complete") ecf9341134d1 ("ANDROID: fips140: remove in-place updating of live algorithms") 482b0323cf29 ("ANDROID: fips140: zeroize temporary values from integrity check") 64d769e53f20 ("ANDROID: fips140: add service indicators") 8d7f609cdaa4 ("ANDROID: fips140: add name and version, and a function to retrieve them") 6b7c37f6c449 ("ANDROID: fips140: use UTS_RELEASE as FIPS version") 903e97a0ca6d ("ANDROID: fips140: refactor evaluation testing support") 97fb2104fe22 ("ANDROID: fips140: add support for injecting integrity error") 109f31ac23f5 ("ANDROID: fips140: add userspace interface for evaluation testing") android14-5.15: 84572a0c7981 ("ANDROID: fips140: split dump-section+add-section into 2 ops") b0f8873811d4 ("ANDROID: kleaf: convert fips140 to kleaf") 2535deae8069 ("ANDROID: GKI: Source GKI_BUILD_CONFIG_FRAGMENT after setting all variables") 685a2ade28bb ("ANDROID: fips140: add crypto_memneq() back to the module") 320dfca58a3d ("ANDROID: fips140: fix in-tree builds") d4966a820397 ("ANDROID: fips140: remove CONFIG_CRYPTO_FIPS140 option") 6da26b8750f5 ("ANDROID: fips140: require 'm' to enable CRYPTO_FIPS140_MOD") bfcfcce3803b ("ANDROID: fips140: unapply ABS32 relocations generated by KCFI") 63f46b45dda2 ("ANDROID: fips140: eliminate crypto-fips.a build step") ae4ca7a09bb6 ("ANDROID: fips140: allow building without LTO") Bug: 153614920 Bug: 188620248 Test: tested that the module builds and can be loaded on raven. Change-Id: I3fde49dbc3d16b149b072a27ba5b4c6219015c94 Signed-off-by: Ard Biesheuvel <ardb@google.com> Signed-off-by: Eric Biggers <ebiggers@google.com>	2023-01-09 21:33:43 +00:00
Zhang Yiqun	314398bc10	crypto: tcrypt - Fix multibuffer skcipher speed test mem leak [ Upstream commit 1aa33fc8d4032227253ceb736f47c52b859d9683 ] In the past, the data for mb-skcipher test has been allocated twice, that means the first allcated memory area is without free, which may cause a potential memory leakage. So this patch is to remove one allocation to fix this error. Fixes: `e161c5930c` ("crypto: tcrypt - add multibuf skcipher...") Signed-off-by: Zhang Yiqun <zhangyiqun@phytium.com.cn> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-31 13:32:34 +01:00
Herbert Xu	b5be6724f2	crypto: cryptd - Use request context instead of stack for sub-request [ Upstream commit 3a58c231172537f7b0e19d93ed33decd04f80eab ] cryptd is buggy as it tries to use sync_skcipher without going through the proper sync_skcipher interface. In fact it doesn't even need sync_skcipher since it's already a proper skcipher and can easily access the request context instead of using something off the stack. Fixes: `36b3875a97` ("crypto: cryptd - Remove VLA usage of skcipher") Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-31 13:32:33 +01:00

1 2 3 4 5 ...

3383 Commits