11210 Commits

Author	SHA1	Message	Date
Greg Kroah-Hartman	c51de219f5	Merge tag 'android14-5.15.131_r00' into android-14-5.15 ... This catches the android14-5.15 branch up with the 5.15.131 LTS upstream release. It contains the following commits: * b92c49c7b8 Merge 5.15.131 into android14-5.15-lts |\ | * aff03380bd Linux 5.15.131 | * cd8ab566cf usb: typec: tcpci: clear the fault status bit | * 403b2e9409 usb: typec: tcpci: move tcpci.h to include/linux/usb/ | * f29483873e pinctrl: amd: Don't show `Invalid config param` errors | * b911bef132 nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse | * 1c6ddf739f nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers() | * f6e61aef5c tcpm: Avoid soft reset when partner does not support get_status | * da0e7d435e fsi: master-ast-cf: Add MODULE_FIRMWARE macro | * 72eca651d7 firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe | * 907216337b serial: sc16is7xx: fix bug when first setting GPIO direction | * 45d9611ebf serial: sc16is7xx: fix broken port 0 uart init | * f90e267dd2 serial: qcom-geni: fix opp vote on shutdown | * 46d13013b5 wifi: mt76: mt7921: do not support one stream on secondary antenna only | * a5c2a467e9 Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition | * f49294ad68 staging: rtl8712: fix race condition | * d17cec60e8 HID: wacom: remove the battery when the EKR is off | * 842c7da3ee usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 | * 276a906f81 usb: dwc3: meson-g12a: do post init to fix broken usb after resumption | * 60f938e84f ALSA: usb-audio: Fix init call orders for UAC1 | * e949dd2a9b USB: serial: option: add FOXCONN T99W368/T99W373 product | * c41411d8b3 USB: serial: option: add Quectel EM05G variant (0x030e) | * 09baa839d4 modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules | * 997a194914 rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff | * 3d0f640860 net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index | * da95090821 mmc: au1xmmc: force non-modular build and remove symbol_get usage | * e3e68100c0 ARM: pxa: remove use of symbol_get() | * bb5bf157b5 ksmbd: replace one-element array with flex-array member in struct smb2_ea_info | * 2e3f57f74c ksmbd: fix wrong DataOffset validation of create context | * b3ad7f39fd erofs: ensure that the post-EOF tails are all zeroed * | 5879d78a5a Merge 5.15.130 into android14-5.15-lts |\| | * 8f790700c9 Linux 5.15.130 | * 69347c3340 rcu-tasks: Add trc_inspect_reader() checks for exiting critical section | * 8046fb611f rcu-tasks: Wait for trc_read_check_handler() IPIs | * da22db901c rcu-tasks: Fix IPI failure handling in trc_wait_for_one_reader | * a0249d365a rcu: Prevent expedited GP from enabling tick on offline CPU | * 7aec063d60 ARM: module: Use module_init_layout_section() to spot init sections | * 4a8976052a arm64: module: Use module_init_layout_section() to spot init sections | * f8a74159d1 arm64: module-plts: inline linux/moduleloader.h | * 363bbb5008 module: Expose module_init_layout_section() | * 758e3d0cb7 ACPI: thermal: Drop nocrt parameter * | 7d5fd694ae ANDROID: GKI: Update the .stg defintion due to opaque type change. * | d3d222d2f0 Revert "drm/display/dp: Fix the DP DSC Receiver cap size" * | 7ae847d162 Merge 5.15.129 into android14-5.15-lts |\| | * 9e43368a33 Linux 5.15.129 | * d48016d748 mm,ima,kexec,of: use memblock_free_late from ima_free_kexec_buffer | * 1c41cd30d5 mm: memory-failure: fix unexpected return value in soft_offline_page() | * 0712721e4f mm: memory-failure: kill soft_offline_free_page() | * efd02b5cad dma-buf/sw_sync: Avoid recursive lock during fence signal | * 8dbf913520 pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} | * f1c0402b8e clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' | * 10bc3eddc6 scsi: core: raid_class: Remove raid_component_add() | * d3d57cdbfd scsi: snic: Fix double free in snic_tgt_create() | * ef56cc8889 can: raw: add missing refcount for memory leak fix | * 930f3f1649 drm/i915: Fix premature release of request's reusable memory | * 3cb86cc565 cgroup/cpuset: Free DL BW in case can_attach() fails | * ffff4fc4ba sched/deadline: Create DL BW alloc, free & check overflow interface | * 86aa907959 cgroup/cpuset: Iterate only if DEADLINE tasks are present | * 43d8cbfefa sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets | * d0eb4917f4 sched/cpuset: Bring back cpuset_mutex | * 918879de0e cgroup/cpuset: Rename functions dealing with DEADLINE accounting | * 78efab71a6 torture: Fix hang during kthread shutdown phase | * c8fb97dd7f nfsd: use vfs setgid helper | * 0196651186 nfs: use vfs setgid helper | * a7a1849899 x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 | * ad79f943c8 x86/fpu: Invalidate FPU state correctly on exec() | * b190cf1f27 drm/display/dp: Fix the DP DSC Receiver cap size | * c8aab333d4 drm/vmwgfx: Fix shader stage validation | * b53ed41516 PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus | * 60ba1bfa03 media: vcodec: Fix potential array out-of-bounds in encoder queue_setup | * 544cd10def of: dynamic: Refactor action prints to not use "%pOF" inside devtree_lock | * f1d4a58818 of: unittest: Fix EXPECT for parse_phandle_with_args_map() test | * ce66cd4786 radix tree: remove unused variable | * 898c8c5b11 lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels | * ff90a4c6ed batman-adv: Hold rtnl lock during MTU update via netlink | * ea38c0d9aa batman-adv: Fix batadv_v_ogm_aggr_send memory leak | * 7f3f72eb8f batman-adv: Fix TT global entry leak when client roamed back | * f7667b4988 batman-adv: Do not get eth header before batadv_check_management_packet | * 3f9312dd75 batman-adv: Don't increase MTU when set by user | * cde5a240d7 batman-adv: Trigger events for auto adjusted MTU | * 22426e1ce6 selinux: set next pointer before attaching to list | * 711595bfdc nfsd: Fix race to FREE_STATEID and cl_revoked | * bd1697e122 NFS: Fix a use after free in nfs_direct_join_group() | * 5f64261374 mm: add a call to flush_cache_vmap() in vmap_pfn() | * 440c10034b ALSA: ymfpci: Fix the missing snd_card_free() call at probe error | * 5cc7d81cf5 clk: Fix slab-out-of-bounds error in devm_clk_release() | * 0f72859acf NFSv4: Fix dropped lock for racing OPEN and delegation return | * 9c025420fe ibmveth: Use dcbf rather than dcbfl | * 7e546bd089 Revert "KVM: x86: enable TDP MMU by default" | * 67af12f558 net/ncsi: change from ndo_set_mac_address to dev_set_mac_address | * 4451457d61 net/ncsi: make one oem_gma function for all mfr id | * f683f4be80 bonding: fix macvlan over alb bond support | * 0fa8046e92 net: remove bond_slave_has_mac_rcu() | * f0ec97fca6 rtnetlink: Reject negative ifindexes in RTM_NEWLINK | * 00247cfd2b rtnetlink: return ENODEV when ifname does not exist and group is given | * 75cfb7de44 netfilter: nf_tables: fix out of memory error handling | * f22954f8c5 netfilter: nf_tables: flush pending destroy work before netlink notifier | * ff34403fef net/sched: fix a qdisc modification with ambiguous command request | * 30624ea3f8 igc: Fix the typo in the PTM Control macro | * f697c3ead1 igb: Avoid starting unnecessary workqueues | * d7823d752c ice: fix receive buffer size miscalculation | * ace1b0ae30 net: validate veth and vxcan peer ifindexes | * 335be58541 net: bcmgenet: Fix return value check for fixed_phy_register() | * 60a5034584 net: bgmac: Fix return value check for fixed_phy_register() | * 5b52c9ba42 ipvlan: Fix a reference count leak warning in ipvlan_ns_exit() | * 2bad37b6f6 dccp: annotate data-races in dccp_poll() | * 9b015360e8 sock: annotate data-races around prot->memory_pressure | * c52c6c0223 octeontx2-af: SDP: fix receive link config | * ce6e2b14bc tracing: Fix memleak due to race between current_tracer and trace | * ef748360ba tracing: Fix cpu buffers unavailable due to 'record_disabled' missed | * fdf5804d74 can: raw: fix lockdep issue in raw_release() | * 278fccf587 drm/amd/display: check TG is non-null before checking if enabled | * a955e6a0e3 drm/amd/display: do not wait for mpc idle if tg is disabled | * e0bd4f0c60 can: raw: fix receiver memory leak | * b832174b7f jbd2: fix a race when checking checkpoint buffer busy | * 9c31bb2684 jbd2: remove journal_clean_one_cp_list() | * d91783e686 jbd2: remove t_checkpoint_io_list | * a0ab49e7a7 ALSA: pcm: Fix potential data race at PCM memory allocation helpers | * 2e56d380da fbdev: fix potential OOB read in fast_imageblit() | * 14163f4a4f fbdev: Fix sys_imageblit() for arbitrary image widths | * 5b60bd9081 fbdev: Improve performance of sys_imageblit() | * 166f0bf456 MIPS: cpu-features: Use boot_cpu_type for CPU type based features | * 8f106e9740 MIPS: cpu-features: Enable octeon_cache by cpu_type | * d1d0b239f9 fs: dlm: fix mismatch of plock results from userspace | * 77d334c446 fs: dlm: use dlm_plock_info for do_unlock_close | * f9a33cc7d9 fs: dlm: change plock interrupted message to debug again | * 7ac088841f fs: dlm: add pid to debug log | * df9c842ab0 dlm: replace usage of found with dedicated list iterator variable | * 33e9c610e3 dlm: improve plock logging if interrupted | * d9ce077f8b PCI: acpiphp: Reassign resources on bridge if necessary | * 8cc8645dd3 xprtrdma: Remap Receive buffers after a reconnect | * 91a707507e NFSv4: fix out path in __nfs4_get_acl_uncached | * 323b830eeb NFSv4.2: fix error handling in nfs42_proc_getxattr | * 5de0a325c4 objtool/x86: Fix SRSO mess * | 642354c26d Merge 5.15.128 into android14-5.15-lts |\| | * 5ddfe5cc87 Linux 5.15.128 | * 9080f4fcc2 x86/srso: Correct the mitigation status when SMT is disabled | * 484eefc6ff objtool/x86: Fixup frame-pointer vs rethunk | * 55f1cbeaa1 x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG | * fa24cd0fbc x86/srso: Disable the mitigation on unaffected configurations | * aa0777ce0d x86/CPU/AMD: Fix the DIV(0) initial fix attempt | * bbe585239d x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() | * 19f23d16b0 x86/static_call: Fix __static_call_fixup() | * df6495f203 x86/srso: Explain the untraining sequences a bit more | * 43548590ad x86/cpu: Cleanup the untrain mess | * 035e906bfc x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 | * 19c1c04996 x86/cpu: Rename original retbleed methods | * f77dbb9096 x86/cpu: Clean up SRSO return thunk mess | * f624ce6c7f x86/ibt: Add ANNOTATE_NOENDBR | * f1171d455d objtool: Add frame-pointer-specific function ignore | * 08f7cfd44f x86/alternative: Make custom return thunk unconditional | * 0d810eff09 x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() | * 8089aae602 x86/cpu: Fix __x86_return_thunk symbol type | * 5b28fda5fd mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove | * e8c5081da2 net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled | * 431db3f48c virtio-net: set queues after driver_ok | * d39fc9b94d af_unix: Fix null-ptr-deref in unix_stream_sendpage(). | * 9a4d8dc706 arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 | * 6b64974e02 exfat: check if filename entries exceeds max filename length | * 6065b30171 netfilter: set default timeout to 3 secs for sctp shutdown send and recv state | * a00c5d2c20 drm/amd: flush any delayed gfxoff on suspend entry | * d578c919de drm/qxl: fix UAF on handle creation | * ff09f9e671 mmc: block: Fix in_flight[issue_type] value error | * b803fedb6e mmc: wbsd: fix double mmc_free_host() in wbsd_init() | * 961f7ce162 cifs: Release folio lock on fscache read hit. | * cc3f194f46 ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. | * 18e27df4f2 serial: 8250: Fix oops for port->pm on uart_change_pm() | * e9b8ee715d riscv: uaccess: Return the number of bytes effectively not copied | * b2a331abcb ALSA: hda/realtek - Remodified 3k pull low procedure | * dfb9676ed2 soc: aspeed: socinfo: Add kfree for kstrdup | * c5ac7522a8 ASoC: meson: axg-tdm-formatter: fix channel slot allocation | * fd346ef1cd ASoC: rt5665: add missed regulator_bulk_disable | * e878458d82 ARM: dts: imx: Set default tuning step for imx6sx usdhc | * 430c29a54e arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict | * 03522d73a4 bus: ti-sysc: Flush posted write on enable before reset | * 578371ce0d net: do not allow gso_size to be set to GSO_BY_FRAGS | * 5fc4fd3f3e sock: Fix misuse of sk_under_memory_pressure() | * fc3d82d295 net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset | * f11c2802e1 i40e: fix misleading debug logs | * 5ba2b936f3 iavf: fix FDIR rule fields masks validation | * ae6834689f team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves | * 0ffbc341cf net: phy: broadcom: stub c45 read/write for 54810 | * bf221e5e4b netfilter: nft_dynset: disallow object maps | * 9177869b85 ipvs: fix racy memcpy in proc_do_sync_threshold | * 1adaec4758 netfilter: nf_tables: deactivate catchall elements in next generation | * 82109740d6 netfilter: nf_tables: fix false-positive lockdep splat | * b2f6d73395 drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs | * 7207ee323a selftests: mirror_gre_changes: Tighten up the TTL test match | * c2a6ffe3f1 net: phy: fix IRQ-based wake-on-lan over hibernate / power off | * 8e5e967348 xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH | * 075448a2eb xfrm: add NULL check in xfrm_update_ae_params | * e1e04cc2ef ip_vti: fix potential slab-use-after-free in decode_session6 | * a1639a82ce ip6_vti: fix slab-use-after-free in decode_session6 | * 44b3d40967 xfrm: fix slab-use-after-free in decode_session6 | * a465ace883 net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure | * fed1cd2cd3 net: af_key: fix sadb_x_filter validation | * 1960f46807 net: xfrm: Fix xfrm_address_filter OOB read | * 080dedb1ca i2c: designware: Handle invalid SMBus block data response length value | * 416c538684 i2c: designware: Correct length byte validation logic | * b966e9e1e2 btrfs: fix BUG_ON condition in btrfs_cancel_balance | * 77698e6ff6 tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms | * 2a52344643 tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux | * 8ef25fb134 powerpc/rtas_flash: allow user copy to flash block cache objects | * bb70e2b70f fbdev: mmp: fix value check in mmphw_probe() | * 184f1b68bb i2c: hisi: Only handle the interrupt of the driver's transfer | * c4e671dae5 i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue | * b99f490ea8 cifs: fix potential oops in cifs_oplock_break | * a5ae5a81bc vduse: Use proper spinlock for IRQ injection | * 5b7d5c2dd6 virtio-mmio: don't break lifecycle of vm_dev | * edf3b5aadb btrfs: move out now unused BG from the reclaim list | * 170773563e ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node | * 4ffbfe1c98 ARM: dts: imx6sll: fixup of operating points | * e2ff5cf681 mmc: sunxi: fix deferred probing | * f93e8c5a7b mmc: bcm2835: fix deferred probing | * 4eeba5d476 USB: dwc3: fix use-after-free on core driver unbind | * a78fe5c9d8 USB: dwc3: qcom: fix NULL-deref on suspend | * 8a6b753402 tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A | * 701bb5fee7 tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms | * fa254ab7d0 tty: serial: fsl_lpuart: Add i.MXRT1050 support | * 20351ddb1f usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() | * 31a0e60fe1 USB: dwc3: gadget: drop dead hibernation code | * d9e004104e usb: dwc3: Fix typos in gadget.c | * 2fa487a946 usb: dwc3: Remove DWC3 locking during gadget suspend/resume | * 7dfb384e76 usb: dwc3: gadget: Synchronize IRQ between soft connect/disconnect | * d3c82f24ee drm/amd/display: fix access hdcp_workqueue assert | * 0ba6c7ba08 drm/amd/display: phase3 mst hdcp for multiple displays | * 99c444d3c3 drm/amd/display: save restore hdcp state when display is unplugged from mst hub | * 4f1beb75f6 ARM: dts: aspeed: asrock: Correct firmware flash SPI clocks | * f84c2ca349 igc: read before write to SRRCTL register | * 9fa82f031a iio: addac: stx104: Fix race condition when converting analog-to-digital | * d31d04ec40 iio: addac: stx104: Fix race condition for stx104_write_raw() | * 89a007f3a3 iio: stx104: Move to addac subdirectory | * cadf8f2d7c iio: adc: stx104: Implement and utilize register structures | * 6089d35434 iio: adc: stx104: Utilize iomap interface | * 565b96d9a7 iio: add addac subdirectory | * 49b830d75f ring-buffer: Do not swap cpu_buffer during resize process | * 6657ecbcc3 powerpc/kasan: Disable KCOV in KASAN code | * 8703b26387 ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() | * 5ed4dbc137 ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 | * c7d8b5f46f fs/ntfs3: Mark ntfs dirty when on-disk struct is corrupted | * 3a00ec562f fs: ntfs3: Fix possible null-pointer dereferences in mi_read() | * e7799bb4db fs/ntfs3: Enhance sanity check while generating attr_list | * ef568da1fd drm/amdgpu: Fix potential fence use-after-free v2 | * 5720c7e185 Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally | * 548a6b64b3 Bluetooth: L2CAP: Fix use-after-free | * 302d045963 watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) | * 2ea70379e4 firewire: net: fix use after free in fwnet_finish_incoming_packet() | * 97fd1c8e9c pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() | * 85e8881500 gfs2: Fix possible data races in gfs2_show_options() | * eafb79d244 usb: chipidea: imx: add missing USB PHY DPDM wakeup setting | * 7bdb4c9630 usb: chipidea: imx: don't request QoS for imx8ulp | * 25decbbb66 thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() | * 776b34615a media: platform: mediatek: vpu: fix NULL ptr dereference | * cb174344bf usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push | * 1676748aa2 media: v4l2-mem2mem: add lock to protect parameter num_rdy | * 9850867042 smb: client: fix warning in cifs_smb3_do_mount() | * a3f252436e ovl: check type and offset of struct vfsmount in ovl_entry | * 1a650d3ccd RDMA/mlx5: Return the firmware result upon destroying QP/RQ | * 9631d88503 HID: add quirk for 03f0:464a HP Elite Presenter Mouse | * 4921792e04 drm/amdgpu: install stub fence into potential unused fence pointers | * fd41646d43 HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard | * ff10cd3e9b dma-remap: use kvmalloc_array/kvfree for larger dma memory remap | * e9ce774052 ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion | * 7d53d1e476 iopoll: Call cpu_relax() in busy loops | * ca66e9dd98 ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings | * cc15908308 PCI: tegra194: Fix possible array out of bounds access | * e2d10f1de1 net: tls: avoid discarding data on record close | * 9a15ca8939 net/tls: Multi-threaded calls to TX tls_dev_del | * 2d93157b7e net/tls: Perform immediate device ctx cleanup when possible | * 51222e1c77 macsec: use DEV_STATS_INC() | * 3d64a232e4 macsec: Fix traffic counters/statistics | * 396a192140 selftests: forwarding: tc_actions: Use ncat instead of nc | * d61a0886d3 selftests: forwarding: tc_actions: cleanup temporary files when test is aborted | * a798977df6 mmc: sdhci-f-sdh30: Replace with sdhci_pltfm * | e87edba21f Merge 5.15.127 into android14-5.15-lts |\| | * f6f7927ac6 Linux 5.15.127 | * c597d8cb0d timers/nohz: Last resort update jiffies on nohz_full IRQ entry | * b4d36e6c5d timers/nohz: Switch to ONESHOT_STOPPED in the low-res handler when the tick is stopped | * c3b954a51b tick: Detect and fix jiffies update stall | * af99918f0e sch_netem: fix issues in netem_change() vs get_dist_table() | * 5d094d4e7b alpha: remove __init annotation from exported page_is_ram() | * f8d6d25756 scsi: qedf: Fix firmware halt over suspend and resume | * 85db1cd174 scsi: qedi: Fix firmware halt over suspend and resume | * e70469c289 scsi: fnic: Replace return codes in fnic_clean_pending_aborts() | * 6bc7f4c8c2 scsi: core: Fix possible memory leak if device_add() fails | * 461f8ac666 scsi: snic: Fix possible memory leak if device_add() fails | * 171e117cdc scsi: 53c700: Check that command slot is not NULL | * 7a792b3d88 scsi: storvsc: Fix handling of virtual Fibre Channel timeouts | * 0f52d7b782 scsi: core: Fix legacy /proc parsing buffer overflow | * b757ef99df netfilter: nf_tables: report use refcount overflow | * 9bdbbcf9d1 nvme-rdma: fix potential unbalanced freeze & unfreeze | * d68f8ef6ef nvme-tcp: fix potential unbalanced freeze & unfreeze | * ae6e21f8bb btrfs: set cache_block_group_error if we find an error | * 314135b7ba btrfs: reject invalid reloc tree root keys with stack dump | * 69dd147de4 btrfs: exit gracefully if reloc roots don't match | * c40d4b60c5 btrfs: don't stop integrity writeback too early | * 555e126dd3 ibmvnic: Handle DMA unmapping of login buffs in release functions | * 34fcc82382 ibmvnic: Unmap DMA login rsp buffer on send login fail | * cee62753cf ibmvnic: Enforce stronger sanity checks on login response | * 27e8db8380 net/mlx5: Skip clock update work when device is in error state | * f638fc2f73 net/mlx5: Allow 0 for total host VFs | * 086a80eb62 dmaengine: mcf-edma: Fix a potential un-allocated memory access | * 7e1dc94b2d nexthop: Fix infinite nexthop bucket dump when using maximum nexthop ID | * 608a4327c2 nexthop: Make nexthop bucket dump more efficient | * 4457300cfd nexthop: Fix infinite nexthop dump when using maximum nexthop ID | * 91307347d6 net: hns3: add wait until mac link down | * 094310eb2b net: hns3: refactor hclge_mac_link_status_wait for interface reuse | * 1ae9703c2e net: phy: at803x: remove set/get wol callbacks for AR8032 | * 7d496cd83a RDMA/umem: Set iova in ODP flow | * f78a4238a8 wifi: cfg80211: fix sband iftype data lookup for AP_VLAN | * 26a27dd760 drm/rockchip: Don't spam logs in atomic check | * 918c1e6843 IB/hfi1: Fix possible panic during hotplug remove | * df21468bfd iavf: fix potential races for FDIR filters | * b1f985cf1c drivers: net: prevent tun_build_skb() to exceed the packet size limit | * f239c9e1d9 dccp: fix data-race around dp->dccps_mss_cache | * 49a1fee22f bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves | * 789fcd94c9 xsk: fix refcount underflow in error path | * e958081219 tunnels: fix kasan splat when generating ipv4 pmtu error | * 7903311b2c net/packet: annotate data-races around tp->status | * f4614e379b mISDN: Update parameter type of dsp_cmx_send() | * 3961761af3 bpf, sockmap: Fix bug that strp_done cannot be called | * 20d53895d5 bpf, sockmap: Fix map type error in sock_map_del_link | * a09c258cfa net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail() | * 85af0b226c selftests: forwarding: tc_flower: Relax success criterion | * 7b3fa99526 selftests: forwarding: Switch off timeout | * e410f85ebc selftests: forwarding: Skip test when no interfaces are specified | * 4a44994526 selftests: forwarding: ethtool_extended_state: Skip when using veth pairs | * b8d216e9c6 selftests: forwarding: ethtool: Skip when using veth pairs | * b9dfb80d9f selftests: forwarding: Add a helper to skip test when using veth pairs | * b973eb76df selftests/rseq: Fix build with undefined __weak | * b8b8db5857 drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes | * 4c6767c8bf x86: Move gds_ucode_mitigated() declaration to header | * f919cbc904 x86/speculation: Add cpu_show_gds() prototype | * 9290ef14c9 x86/mm: Fix VDSO and VVAR placement on 5-level paging machines | * 829409510d x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 | * c41a22b93d x86/srso: Fix build breakage with the LLVM linker | * c2372b1559 usb: typec: tcpm: Fix response to vsafe0V event | * f776b94ccd usb: common: usb-conn-gpio: Prevent bailing out if initial role is none | * 00cc14b52d usb: dwc3: Properly handle processing of pending events | * 7a11d1e262 usb-storage: alauda: Fix uninit-value in alauda_check_media() | * 945e1b3c36 misc: rtsx: judge ASPM Mode to set PETXCFG Reg | * 03eebad962 binder: fix memory leak in binder_init() | * a8e2ae6296 iio: adc: ina2xx: avoid NULL pointer dereference on OF device match | * 2df8ae1e42 iio: cros_ec: Fix the allocation size for cros_ec_command | * a7cedc2b76 io_uring: correct check for O_TMPFILE | * 697bc23463 selftests/bpf: Fix sk_assign on s390x | * 1272772621 selftests/bpf: Workaround verification failure for fexit_bpf2bpf/func_replace_return_code | * ee701208f4 selftests/bpf: make test_align selftest more robust | * 683d2969a0 bpf: aggressively forget precise markings during state checkpointing | * 2516deeb87 bpf: stop setting precise in current state | * c47d0178ad bpf: allow precision tracking for programs with subprogs | * 3645510cf9 nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput | * 36a3b560c7 radix tree test suite: fix incorrect allocation size for pthreads | * 8d10284243 hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 | * 3ad4ba2b61 drm/amd/display: check attr flag before set cursor degamma on DCN3+ | * 621204fca0 drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap() | * 64e6253f64 drm/nouveau/gr: enable memory loads on helper invocation on all channels | * bcd9eeb3a3 riscv,mmio: Fix readX()-to-delay() ordering | * 57772ae9b3 dmaengine: pl330: Return DMA_PAUSED when transaction is paused | * 3ca8f5c733 ipv6: adjust ndisc_is_useropt() to also return true for PIO | * 6cde607776 mmc: moxart: read scr register without changing byte order | * 3f00757ab4 wireguard: allowedips: expand maximum node depth | * aeb9749076 ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea() | * 595679098b ksmbd: validate command request size * | 19d2b2b033 Merge 5.15.126 into android14-5.15-lts |\| | * 24c4de4069 Linux 5.15.126 | * aeb4db8ab7 PM: sleep: wakeirq: fix wake irq arming | * b5d3a4251b PM / wakeirq: support enabling wake-up irq after runtime_suspend called | * a36b522767 soundwire: fix enumeration completion | * 7996facaf0 soundwire: bus: pm_runtime_request_resume on peripheral attachment | * c91c07ae08 selftests/rseq: Play nice with binaries statically linked against glibc 2.35+ | * 1cdb50faf7 selftests/rseq: check if libc rseq support is registered | * 0f1f471b91 drm/imx/ipuv3: Fix front porch adjustment upon hactive aligning | * 5058c14440 powerpc/mm/altmap: Fix altmap boundary check | * eb7a5e4d14 mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() | * 70643e98cb mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts | * 1796b492f8 mtd: rawnand: rockchip: fix oobfree offset and description | * f6807b62fb mtd: rawnand: omap_elm: Fix incorrect type in assignment | * 596be6716b ext2: Drop fragment support | * 0ccfe21949 fs: Protect reconfiguration of sb read-write from racing writes | * 27d0f755d6 net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb | * fbe5a2fed8 Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb | * afd9a31b5a fs/sysv: Null check to prevent null-ptr-deref bug | * 80ec112c19 fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_load_attr_list() | * 0d6f639f1d file: reinstate f_pos locking optimization for regular files | * b44d28b98f bpf, cpumap: Make sure kthread is running before map update returns | * 8089eb93d6 drm/ttm: check null pointer before accessing when swapping | * ef0d07c668 open: make RESOLVE_CACHED correctly test for O_TMPFILE | * c81bdf8f9f bpf: Disable preemption in bpf_event_output | * ae07cfe2b0 rbd: prevent busy loop when requesting exclusive lock | * 7978bcca4c wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) | * 32ca6a55e1 net: tap_open(): set sk_uid from current_fsuid() | * 4ed3eed99e net: tun_chr_open(): set sk_uid from current_fsuid() | * adacc3a954 arm64: dts: stratix10: fix incorrect I2C property for SCL signal | * b92c88009d mtd: rawnand: meson: fix OOB available bytes for ECC | * b0875c583e mtd: spinand: toshiba: Fix ecc_get_status | * 1c33ca1e19 exfat: release s_lock before calling dir_emit() | * 8a34a242cf exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree | * a74878207b x86/CPU/AMD: Do not leak quotient data after a division by 0 | * b8f029fc40 firmware: arm_scmi: Drop OF node reference in the transport channel setup | * 287c2c8677 ceph: defer stopping mdsc delayed_work | * 98b521d10e USB: zaurus: Add ID for A-300/B-500/C-700 | * cd6872f2cf libceph: fix potential hang in ceph_osdc_notify() | * e5f5b4a898 scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices | * 212a9a3c67 scsi: zfcp: Defer fc_rport blocking until after ADISC response | * dac3827253 tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen | * 4517782e1b tcp_metrics: annotate data-races around tm->tcpm_net | * e842a68667 tcp_metrics: annotate data-races around tm->tcpm_vals[] | * d3184bea4a tcp_metrics: annotate data-races around tm->tcpm_lock | * 9a7367cbe3 tcp_metrics: annotate data-races around tm->tcpm_stamp | * 6f6bd67f48 tcp_metrics: fix addr_same() helper | * b0acbcf1e7 prestera: fix fallback to previous version on same major version | * d6d9d0f5a5 net/mlx5: fs_core: Skip the FTs in the same FS_TYPE_PRIO_CHAINS fs_prio | * c999fb1039 net/mlx5: fs_core: Make find_closest_ft more generic | * 32ef2c0c6c vxlan: Fix nexthop hash size | * 1bb54a21f4 ip6mr: Fix skb_under_panic in ip6mr_cache_report() | * 64e3affee2 s390/qeth: Don't call dev_close/dev_open (DOWN/UP) | * a0da2684db net: dcb: choose correct policy to parse DCB_ATTR_BCN | * 193333229a net: netsec: Ignore 'phy-mode' on SynQuacer in DT mode | * 766c9dd00c net: korina: handle clk prepare error in korina_probe() | * 6cecfdf650 net: ll_temac: fix error checking of irq_of_parse_and_map() | * 3761ff4f86 net: ll_temac: Switch to use dev_err_probe() helper | * 5c534640a7 bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire | * 79c3d81c9a net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free | * 9edf795502 net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free | * 262430dfc6 net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free | * b58d34068f bpf, cpumap: Handle skb as well when clean up ptr_ring | * f04f6d9b3b net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX. | * 2c55d49415 net: add missing data-race annotation for sk_ll_usec | * e934c50c48 net: add missing data-race annotations around sk->sk_peek_off | * fdd8d8d54d net: add missing READ_ONCE(sk->sk_rcvbuf) annotation | * 98f0d1db3a net: add missing READ_ONCE(sk->sk_sndbuf) annotation | * 0d1047b77b net: add missing READ_ONCE(sk->sk_rcvlowat) annotation | * 6c058a1f67 net: annotate data-races around sk->sk_max_pacing_rate | * 2950c5ac65 qed: Fix scheduling in a tasklet while getting stats | * a19952dbb5 qed: Fix kernel-doc warnings | * 6d8c259f48 mISDN: hfcpci: Fix potential deadlock on &hc->lock | * 8dedcc6af3 net: sched: cls_u32: Fix match key mis-addressing | * 675d29de69 perf test uprobe_from_different_cu: Skip if there is no gcc | * 0f6e3d8d7f net: dsa: fix value check in bcm_sf2_sw_probe() | * 047508edd6 rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length | * cc9ebceaa6 bpf: Add length check for SK_DIAG_BPF_STORAGE_REQ_MAP_FD parsing | * 8f9a04c742 net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() | * 00cecb0a8f net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx | * 4c224ea31b wifi: cfg80211: Fix return value in scan logic | * 8e72db3ffa KVM: s390: fix sthyi error handling | * 809edb4262 word-at-a-time: use the same return type for has_zero regardless of endianness | * b7880809d7 arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux | * 804e72062b iommu/arm-smmu-v3: Document nesting-related errata | * 744e6b80b8 iommu/arm-smmu-v3: Add explicit feature for nesting | * fd86b59442 iommu/arm-smmu-v3: Document MMU-700 erratum 2812531 | * 2de9f3dcfe iommu/arm-smmu-v3: Work around MMU-600 erratum 1076982 | * a850fa85d4 arm64: errata: Add detection for TRBE write to out-of-range | * 073699df4a arm64: errata: Add workaround for TSB flush failures | * 44b45e8161 net/mlx5: Free irqs only on shutdown callback | * 40601542c4 perf: Fix function pointer case | * c12fa4ac89 io_uring: gate iowait schedule on having pending requests * | de0b2bd1c2 UPSTREAM: x86/srso: Fix build breakage with the LLVM linker * | edaca1a5a8 Merge 5.15.125 into android14-5.15-lts |\| | * c275eaaaa3 Linux 5.15.125 | * 754e0c7c4a x86: fix backwards merge of GDS/SRSO bit | * b14a3924c2 xen/netback: Fix buffer overrun triggered by unusual packet | * 153f9a7b02 x86/srso: Tie SBPB bit setting to microcode patch detection | * df4c3823cb x86/srso: Fix return thunks in generated code | * 0071b17eb6 x86/srso: Add IBPB on VMEXIT | * 5398faac76 x86/srso: Add IBPB | * c24aaa7dde x86/srso: Add SRSO_NO support | * 4e9115e194 x86/srso: Add IBPB_BRTYPE support | * b35087763a x86/srso: Add a Speculative RAS Overflow mitigation | * c3b4c64452 x86/cpu, kvm: Add support for CPUID_80000021_EAX | * 236dd71333 x86/bugs: Increase the x86 bugs vector size to two u32s | * 0242a8bdef Documentation/x86: Fix backwards on/off logic about YMM support | * 27a72e3508 x86/mm: Initialize text poking earlier | * d0317b9502 mm: Move mm_cachep initialization to mm_init() | * 8e4c253087 x86/mm: Use mm_alloc() in poking_init() | * 13ec5cb4c1 x86/mm: fix poking_init() for Xen PV guests | * 3e90080d56 x86/xen: Fix secondary processors' FPU initialization | * 348741a9e4 KVM: Add GDS_NO support to KVM | * 59d78655f8 x86/speculation: Add Kconfig option for GDS | * 0cc5643b63 x86/speculation: Add force option to GDS mitigation | * 348a89e201 x86/speculation: Add Gather Data Sampling mitigation | * a094d3b309 x86/fpu: Move FPU initialization into arch_cpu_finalize_init() | * 59f2739111 x86/fpu: Mark init functions __init | * bb9c20d903 x86/fpu: Remove cpuinfo argument from init functions | * de8b7ce4c5 x86/init: Initialize signal frame size late | * 041d929233 init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() | * 8ae795ed61 init: Invoke arch_cpu_finalize_init() earlier | * 7e270cebaf init: Remove check_bugs() leftovers | * 285384ac24 um/cpu: Switch to arch_cpu_finalize_init() | * 6ea4217864 sparc/cpu: Switch to arch_cpu_finalize_init() | * 21a1fc8d13 sh/cpu: Switch to arch_cpu_finalize_init() | * dfeb371a27 mips/cpu: Switch to arch_cpu_finalize_init() | * 4baf46a3ba m68k/cpu: Switch to arch_cpu_finalize_init() | * 8c8165cd25 ia64/cpu: Switch to arch_cpu_finalize_init() | * de8c592cc5 ARM: cpu: Switch to arch_cpu_finalize_init() | * 75da6209d3 x86/cpu: Switch to arch_cpu_finalize_init() | * 0774fc2177 init: Provide arch_cpu_finalize_init() * | a662b58fb5 Revert "ring-buffer: Fix wrong stat of cpu_buffer->read" * | e02ff715d5 Revert "locking/rtmutex: Fix task->pi_waiters integrity" * | 5f5a985931 Merge 5.15.124 into android14-5.15-lts |\| | * 38d4ca22a5 Linux 5.15.124 | * 78001ffa9b selftests: mptcp: join: only check for ip6tables if needed | * 66cf5f394a ASoC: cs42l51: fix driver to properly autoload with automatic module loading | * 3359fdf49d io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq | * 374edda0db selftests: mptcp: sockopt: use 'iptables-legacy' if available | * 43bbe1a091 cpufreq: intel_pstate: Drop ACPI _PSS states table patching | * 73b4cbed91 ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily | * cd03166968 ACPI: processor: perflib: Use the "no limit" frequency QoS | * e8e93e2f01 tracing: Fix trace_event_raw_event_synth() if else statement | * f3b6e63004 rbd: retrieve and check lock owner twice before blocklisting | * bb25c5c0e4 rbd: harden get_lock_owner_info() a bit | * b223e9ffb6 rbd: make get_lock_owner_info() return a single locker or NULL | * 098d0b9ba0 dm cache policy smq: ensure IO doesn't prevent cleaner policy progress | * 7c9b8cca49 ceph: never send metrics if disable_send_metrics is set | * e443b3a508 ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register | * 585355a76e s390/dasd: fix hanging device after quiesce/resume | * 0061453d6e virtio-net: fix race between set queues and probe | * 427d42838c KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid | * 4ed1549129 locking/rtmutex: Fix task->pi_waiters integrity | * c579caef7c irqchip/gic-v4.1: Properly lock VPEs when doing a directLPI invalidation | * 6cb3c511af irq-bcm6345-l1: Do not assume a fixed block to cpu mapping | * 354e8bd5f5 tpm_tis: Explicitly check for error code | * 8130c32b4a nfsd: Remove incorrect check in nfsd4_validate_stateid | * 9b8a31a231 file: always lock position for FMODE_ATOMIC_POS | * 1f5ea62a0f btrfs: check for commit error at btrfs_attach_transaction_barrier() | * 883c3ed9a1 btrfs: check if the transaction was aborted at btrfs_wait_for_commit() | * a7abb1690f hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled | * 3f3cdca844 hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature | * a676ddc4ca ALSA: hda/relatek: Enable Mute LED on HP 250 G8 | * dd125fcd58 Revert "xhci: add quirk for host controllers that don't update endpoint DCS" | * 5138c22831 tty: n_gsm: fix UAF in gsm_cleanup_mux | * baf420e303 staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() | * acacdbe0f7 staging: r8712: Fix memory leak in _r8712_init_xmit_priv() | * ba2975efe9 Documentation: security-bugs.rst: clarify CVE handling | * 28ae486f8e Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group | * 98a118840b Revert "usb: xhci: tegra: Fix error check" | * 2eaa43508a usb: xhci-mtk: set the dma max_seg_size | * cd2d96c4bc usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config | * 3af06a8502 USB: quirks: add quirk for Focusrite Scarlett | * 8fb5a01196 usb: ohci-at91: Fix the unhandle interrupt when resume | * 6366b11785 usb: dwc3: don't reset device side if dwc3 was configured as host-only | * 6f126e0263 usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy | * a2d2fa6612 Revert "usb: dwc3: core: Enable AutoRetry feature in the controller" | * 97620ed1bc can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED | * 0ac13ef002 USB: serial: simple: sort driver entries | * 378e036237 USB: serial: simple: add Kaufmann RKS+CAN VCP | * 5b9a5cf1bf USB: serial: option: add Quectel EC200A module support | * 3990913997 USB: serial: option: support Quectel EM060K_128 | * b800c0d557 serial: sifive: Fix sifive_serial_console_setup() section | * 8fa462ad0f serial: 8250_dw: Preserve original value of DLF register | * dc4f6c537f serial: qcom-geni: drop bogus runtime pm state update | * 41c487de4c KVM: VMX: Don't fudge CR0 and CR4 for restricted L2 guest | * 5883a4e847 KVM: Grab a reference to KVM for VM and vCPU stats file descriptors | * 0f7a2b5671 USB: gadget: Fix the memory leak in raw_gadget driver | * 2f9bfccced usb: gadget: call usb_gadget_check_config() to verify UDC capability | * a49884561a Revert "usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init()" | * 813cede7b2 tracing: Fix warning in trace_buffered_event_disable() | * 23e8a65f9a ring-buffer: Fix wrong stat of cpu_buffer->read | * ae5b8b1c2e ata: pata_ns87415: mark ns87560_tf_read static | * 6bbbe1b216 RDMA/irdma: Report correct WC error | * bd79de8bd3 drm/amd: Fix an error handling mistake in psp_sw_init() | * 4e1c1d7429 dm raid: protect md_stop() with 'reconfig_mutex' | * 0c4db5a04d dm raid: clean up four equivalent goto tags in raid_ctr() | * 2e321ee96f dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths | * 4b9f3ef1f3 block: Fix a source code comment in include/uapi/linux/blkzoned.h | * 2861b33820 ASoC: fsl_spdif: Silence output on stop | * 5ec0e4deee drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() | * b79a0e71d6 RDMA/bnxt_re: Prevent handling any completions after qp destroy | * 3ad5f655eb RDMA/mthca: Fix crash when polling CQ for shared QPs | * c5b5dbcbf9 RDMA/irdma: Fix data race on CQP request done | * bf0f9f65b7 RDMA/irdma: Fix data race on CQP completion stats | * fd6e50ec2c RDMA/irdma: Add missing read barriers | * 5fbb5068d2 drm/msm/adreno: Fix snapshot BINDLESS_DATA size | * 4e9d4a2161 drm/msm/dpu: drop enum dpu_core_perf_data_bus_id | * 6ab756a55e RDMA/mlx4: Make check for invalid flags stricter | * 9dde876a4d tipc: stop tipc crypto on failure in tipc_node_create | * df019bc124 tipc: check return value of pskb_trim() | * 42afa7ef66 benet: fix return value check in be_lancer_xmit_workarounds() | * 95cf4fa31b net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64 | * 98f6bbdfc0 net/sched: mqprio: add extack to mqprio_parse_nlattr() | * b1e85c9d28 net/sched: mqprio: refactor nlattr parsing to a separate function | * 5bee91121c netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID | * 98bcfcaecc netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR | * 50cbb9d195 netfilter: nft_set_rbtree: fix overlap expiration walk | * feba294c45 igc: Fix Kernel Panic during ndo_tx_timeout callback | * 8412fe3686 platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 | * 238420a24d net: stmmac: Apply redundant write work around on 4.xx too | * 9be8ec5a0c team: reset team's flags when down link is P2P device | * bf2d7b63e2 bonding: reset bond's flags when down link is P2P device | * c28b393876 ice: Fix memory management in ice_ethtool_fdir.c | * ecb741a17c tcp: Reduce chance of collisions in inet6_hashfn(). | * dd48780a7b ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address | * 46e4029735 ethernet: atheros: fix return value check in atl1e_tso_csum() | * 6d8a71e4c3 phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() | * 49f5b3c949 vxlan: calculate correct header length for GPE | * 77396fa909 vxlan: move to its own directory | * 96dbc68b7f net: hns3: fix wrong bw weight of disabled tc issue | * 9755714d23 net: hns3: fix wrong tc bandwidth weight data issue | * 01460ac6ff net: phy: marvell10g: fix 88x3310 power up | * 57743a86cc iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED | * 1542e399a1 iavf: fix potential deadlock on allocation failure | * 5a40483557 i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() | * c9b936984d media: staging: atomisp: select V4L2_FWNODE | * 6aa7cb3bb5 soundwire: qcom: update status correctly with mask | * 3f28ec4a40 phy: qcom-snps-femto-v2: properly enable ref clock | * ac3fe4c2a7 phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend | * e7c0c5af51 phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc | * 450ef59bef phy: qcom-snps: Use dev_err_probe() to simplify code | * d6f9258281 drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel | * fc399b0fdf drm/amdgpu: fix vkms crtc settings | * aa56bcff46 scsi: qla2xxx: Fix hang in task management | * 58daf4e870 scsi: qla2xxx: Add debug prints in the device remove path | * f90d44e5bb scsi: qla2xxx: Fix task management cmd fail due to unavailable resource | * 01366f0b65 scsi: qla2xxx: Fix task management cmd failure | * 25cea82ea2 scsi: qla2xxx: Multi-que support for TMF | * 2e18fd3f61 scsi: qla2xxx: Remove unused declarations for qla2xxx | * ace6bed424 tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails | * 30c8ba1da3 Revert "tracing: Add "(fault)" name injection to kernel probes" | * 5f52389bdd tracing: Allow synthetic events to pass around stacktraces | * e7b4d24fa0 tracing/probes: Fix to avoid double count of the string length on the array | * 3a1a229712 tracing/probes: Add symstr type for dynamic events | * 7ac170d93b pwm: meson: fix handling of period/duty if greater than UINT_MAX | * bae3c43a9d pwm: meson: Simplify duplicated per-channel tracking | * 5cb0349cfc cifs: if deferred close is disabled then close files immediately | * c600e23fbc ksmbd: remove internal.h include | * c8117ac423 cifs: use fs_context for automounts | * 5076cc8bc1 cifs: missing directory in MAINTAINERS file | * da60170558 drm/ttm: never consider pinned BOs for eviction&swap | * c556573e4b tty: fix hang on tty device with no_room set | * d262770b95 n_tty: Rename tail to old_tail in n_tty_read() | * 7738335d73 drm/ttm: Don't leak a resource on eviction error | * 4400b96587 drm/ttm: Don't print error message if eviction was interrupted | * 354cdda79a fs: dlm: interrupt posix locks only when process is killed | * 97e7a0f8de dlm: rearrange async condition return | * 75ce95abc6 dlm: cleanup plock_op vs plock_xop | * b409d8df9b PCI: rockchip: Don't advertise MSI-X in PCIe capabilities | * cbd1494e51 PCI: rockchip: Fix window mapping and address translation for endpoint | * eb39c4c051 PCI: rockchip: Remove writes to unused registers | * 05f13e85fb PCI/ASPM: Avoid link retraining race | * 52d274956a PCI/ASPM: Factor out pcie_wait_for_retrain() | * cf8c181500 PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() | * 8b9249d74c i2c: nomadik: Remove a useless call in the remove function | * f07d8d345b i2c: nomadik: Use devm_clk_get_enabled() | * 4954c87053 i2c: nomadik: Remove unnecessary goto label | * 24562f0a46 i2c: Improve size determinations | * 9845744e57 i2c: Delete error messages for failed memory allocations | * 89eae1f0aa btrfs: fix race between quota disable and relocation | * b19e905212 gpio: mvebu: fix irq domain leak | * a999660042 gpio: mvebu: Make use of devm_pwmchip_add | * 34fe5fbc20 pwm: Add a stub for devm_pwmchip_add() | * f3d2344811 gpio: tps68470: Make tps68470_gpio_output() always set the initial value | * 21d063d27b io_uring: don't audit the capability check in io_uring_create() | * 49a2686add KVM: s390: pv: fix index value of replaced ASCE | * fee1e6a735 jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint * | d737715c00 Merge 5.15.123 into android14-5.15-lts |\| | * 09996673e3 Linux 5.15.123 | * e6c2f1ce41 Revert "drm/amd/display: edp do not add non-edid timings" | * 68eafe2947 nixge: fix mac address error handling again | * 22f4093a42 tracing/histograms: Return an error if we fail to add histogram to hist_vars list | * 78471c3ad3 jbd2: recheck chechpointing non-dirty buffer | * 0ae6b6d217 net: phy: prevent stale pointer dereference in phy_init() | * b7168d2906 tcp: annotate data-races around fastopenq.max_qlen | * accb138c10 tcp: annotate data-races around icsk->icsk_user_timeout | * 6b88371f00 tcp: annotate data-races around tp->notsent_lowat | * 4f0a31f732 tcp: annotate data-races around rskq_defer_accept | * ff0fedfc75 tcp: annotate data-races around tp->linger2 | * e187d88f3b tcp: annotate data-races around icsk->icsk_syn_retries | * d5617eeb54 tcp: annotate data-races around tp->keepalive_probes | * 9b2296a2ad tcp: annotate data-races around tp->keepalive_intvl | * f70ebecdf3 tcp: annotate data-races around tp->keepalive_time | * 0bcee93252 tcp: annotate data-races around tp->tcp_tx_delay | * 10013f764a netfilter: nf_tables: skip bound chain on rule flush | * dbe1a82d46 netfilter: nf_tables: skip bound chain in netns release path | * 706ce3c81b netfilter: nft_set_pipapo: fix improper element removal | * 62615b895a netfilter: nf_tables: fix spurious set element insertion failure | * c17b4ec9cc llc: Don't drop packet from non-root netns. | * 2400ae8fd8 fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe | * 40276640be Revert "tcp: avoid the lookup process failing to get sk in ehash table" | * b04ab5243e net:ipv6: check return value of pskb_trim() | * b87a7e3a33 net: ipv4: Use kfree_sensitive instead of kfree | * 5dd4d1ff8b tcp: annotate data-races around tcp_rsk(req)->ts_recent | * fa941f53a2 igc: Prevent garbled TX queue with XDP ZEROCOPY | * e35dc107a1 bpf: Fix subprog idx logic in check_max_stack_depth | * 4e87eb2248 octeontx2-pf: Dont allocate BPIDs for LBK interfaces | * 87fc9616d6 security: keys: Modify mismatched function name | * 0fb37ce6c0 iavf: Fix out-of-bounds when setting channels on remove | * 345c44e18c iavf: Fix use-after-free in free_netdev | * 52ed161463 net: sched: cls_bpf: Undo tcf_bind_filter in case of an error | * 5ed16ecae5 net: ethernet: mtk_eth_soc: handle probe deferral | * 39479093a4 ethernet: use of_get_ethdev_address() | * cb1e666ec0 of: net: add a helper for loading netdev->dev_addr | * 43da399e50 ethernet: use eth_hw_addr_set() instead of ether_addr_copy() | * 3fb402bd20 bridge: Add extack warning when enabling STP in netns. | * ec4ac15ece net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field() | * 6a5d6096ae pinctrl: amd: Use amd_pinconf_set() for all config options | * 4727cece29 perf build: Fix library not found error when using CSLIBS | * 29fb046ec0 fbdev: imxfb: warn about invalid left/right margin | * 5d19146753 spi: bcm63xx: fix max prepend length | * 2febd5f81e FS: JFS: Check for read-only mounted filesystem in txBegin | * 3e94d0d378 FS: JFS: Fix null-ptr-deref Read in txBegin | * 13ae3f2fd2 MIPS: dec: prom: Address -Warray-bounds warning | * 39f6292d75 fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev | * 985f966669 udf: Fix uninitialized array access for some pathnames | * 579d814de8 quota: fix warning in dqgrab() | * 32c2f51fff quota: Properly disable quotas when add_dquot_ref() fails | * d363075066 ALSA: emu10k1: roll up loops in DSP setup code for Audigy | * c0d7dbc6b7 drm/radeon: Fix integer overflow in radeon_cs_parser_init | * bca9fb7a5a ext4: correct inline offset when handling xattrs in inode body | * 87336783d0 ASoC: codecs: wcd938x: fix soundwire initialisation race | * a14527c394 ASoC: codecs: wcd938x: fix codec initialisation race | * 4ca000456e ASoC: codecs: wcd934x: fix resource leaks on component remove | * 5a34d25205 ASoC: codecs: wcd938x: fix missing mbhc init error handling | * aa44782a02 ASoC: codecs: wcd938x: fix resource leaks on component remove | * 90ab6446eb ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove | * a05a277a8d ASoC: codecs: wcd938x: fix missing clsh ctrl error handling | * 574ffa6fdf ASoC: fsl_sai: Disable bit clock with transmitter | * 925bbcdbc4 drm/amd/display: Keep PHY active for DP displays on DCN31 | * 742340371b drm/amd/display: Disable MPC split by default on special asic | * 1369d0c586 drm/client: Fix memory leak in drm_client_modeset_probe | * a85e23a1ef drm/client: Fix memory leak in drm_client_target_cloned | * 82690148ff selftests: tc: add ConnTrack procfs kconfig | * 3c3941bb1e can: bcm: Fix UAF in bcm_proc_show() | * 1484537876 regmap: Account for register length in SMBus I/O limits | * 6ce258d0c6 regmap: Drop initial version of maximum transfer length fixes | * d3ee089a16 selftests: tc: add 'ct' action kconfig dep | * 4a888b22cc selftests: tc: set timeout to 15 minutes | * 62ee584032 fuse: ioctl: translate ENOSYS in outarg | * ab80a901f8 btrfs: zoned: fix memory leak after finding block group with super blocks | * 6ba7ac692a fuse: revalidate: don't invalidate if interrupted | * c9060caab4 btrfs: fix warning when putting transaction with qgroups enabled after abort | * 232a104e38 perf probe: Add test for regression introduced by switch to die_get_decl_file() | * 9aecfebea2 keys: Fix linking a duplicate key to a keyring's assoc_array | * 0b24b5e187 ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx | * 2d04042a9f ALSA: hda/realtek: Add quirk for Clevo NS70AU | * a5de09b7f9 ALSA: hda/realtek - remove 3k pull low procedure * | 19f4d8d2d0 Merge android14-5.15 into android14-5.15-lts * | 72b4713d5e Merge 5.15.122 into android14-5.15-lts |\| | * 5c6a716301 Linux 5.15.122 | * be824fdb82 x86/cpu/amd: Add a Zenbleed fix | * 5398be2c48 x86/cpu/amd: Move the errata checking functionality up * | 2b60f8671a Revert "Revert "8250: add support for ASIX devices with a FIFO bug"" * | 4b20633d79 BACKPORT: mm/damon/ops-common: atomically test and clear young on ptes and pmds * | 9f5bde3ccf Merge 5.15.121 into android14-5.15-lts |\| | * cdd3cdb682 Linux 5.15.121 | * 30580f3a33 drm/atomic: Fix potential use-after-free in nonblocking commits | * ab2fa2fafb net/sched: sch_qfq: reintroduce lmax bound check for MTU | * 204d7c36e8 MIPS: kvm: Fix build error with KVM_MIPS_DEBUG_COP0_COUNTERS enabled | * 522ee1b303 scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue | * 0715da5139 scsi: qla2xxx: Pointer may be dereferenced | * 541af83572 scsi: qla2xxx: Correct the index of array | * 1ccd52b790 scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() | * 5a52a2e14f scsi: qla2xxx: Fix potential NULL pointer dereference | * 89250e775d scsi: qla2xxx: Fix buffer overrun | * 4406fe8a96 scsi: qla2xxx: Avoid fcport pointer dereference | * 748d8f8698 scsi: qla2xxx: Array index may go out of bound | * 079c8264ed scsi: qla2xxx: Wait for io return on terminate rport | * 25d63eb730 tracing/probes: Fix to update dynamic data counter if fetcharg uses it | * 8277bcacf1 tracing/probes: Fix not to count error code to total length | * 610193a23f selftests: mptcp: depend on SYN_COOKIES | * c8b375871e selftests: mptcp: sockopt: return error if wrong mark | * 3b5d9b7b87 tracing: Fix null pointer dereference in tracing_err_log_open() | * 391da52c87 xtensa: ISS: fix call to split_if_spec | * 179feeeef6 ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() | * bb14a93bcc ring-buffer: Fix deadloop issue on reading trace_pipe | * 3e36cc94d6 net: ena: fix shift-out-of-bounds in exponential backoff | * b763e63424 samples: ftrace: Save required argument registers in sample trampolines | * 954792db9f tracing: Fix memory leak of iter->temp when reading trace_pipe | * 97f54b330c tracing/histograms: Add histograms to hist_vars if they have referenced variables | * b45a33897f s390/decompressor: fix misaligned symbol build error | * 1856cf9132 bus: ixp4xx: fix IXP4XX_EXP_T1_MASK | * 7269c250dd Revert "8250: add support for ASIX devices with a FIFO bug" | * 20f7c4d51c soundwire: qcom: fix storing port config out-of-bounds | * 39a0e723d3 opp: Fix use-after-free in lazy_opp_tables after probe deferral | * 0ff4a97ac2 meson saradc: fix clock divider mask length | * e5fdd73c88 xhci: Show ZHAOXIN xHCI root hub speed correctly | * 6eaedbffec xhci: Fix TRB prefetch issue of ZHAOXIN hosts | * 328b18a42a xhci: Fix resume issue of some ZHAOXIN hosts | * d9c91ef5d8 ceph: don't let check_caps skip sending responses for revoke msgs | * db8ca8d9b4 libceph: harden msgr2.1 frame segment length checks | * 974ac045a0 firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() | * becf8c69b7 tty: serial: imx: fix rs485 rx after tx | * 9dd8091959 tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk | * 073dbbe574 tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error | * 21e2fe510a serial: atmel: don't enable IRQs prematurely | * af4e0ce2af drm/ttm: Don't leak a resource on swapout move error | * 22c16c896c drm/amdgpu: avoid restore process run into dead loop. | * 85b9335d8e drm/amd/display: Correct `DMUB_FW_VERSION` macro | * 9ced7e65c3 drm/amdgpu: fix clearing mappings for BOs that are always valid in VM | * 0121d83ddf drm/rockchip: vop: Leave vblank enabled in self-refresh | * 941a395e96 drm/atomic: Allow vblank-enabled + self-refresh "disable" | * 54163ad21e fs: dlm: return positive pid value for F_GETLK | * 866bf37b7c dm init: add dm-mod.waitfor to wait for asynchronously probed block devices | * 4f61488541 md/raid0: add discard support for the 'original' layout | * 3435c5674e mfd: pm8008: Fix module autoloading | * 560c458340 misc: pci_endpoint_test: Re-init completion for every test | * 14bdee38e9 misc: pci_endpoint_test: Free IRQs before removing the device | * eec34da87b PCI: rockchip: Set address alignment for endpoint mode | * 750fd00a0a PCI: rockchip: Use u32 variable to access 32-bit registers | * 875d7a7f85 PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core | * 7b0026977a PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked | * 049d774b8b PCI: rockchip: Write PCI Device ID to correct register | * 20c62b3c1e PCI: rockchip: Assert PCI Configuration Enable bit after probe | * e8cc74b6b4 PCI: qcom: Disable write access to read only registers for IP v2.3.3 | * 7b2f1ddc94 PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 | * 1d24c5b10d PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold | * f930cf3f21 dm integrity: reduce vmalloc space footprint on 32-bit architectures | * 70564215ad hwrng: imx-rngc - fix the timeout for init and self check | * de984faecd jfs: jfs_dmap: Validate db_l2nbperpage while mounting | * d04a3ff04c ext4: only update i_reserved_data_blocks on successful block allocation | * c327b83c59 ext4: turn quotas off if mount failed after enabling quotas | * 8830523440 ext4: fix to check return value of freeze_bdev() in ext4_shutdown() | * c7514dceb7 ext4: fix wrong unit use in ext4_mb_new_blocks | * 5523851fad ext4: get block from bh in ext4_free_blocks for fast commit replay | * ba92af119b ext4: fix wrong unit use in ext4_mb_clear_bb | * 951ee9c9bb ext4: Fix reusing stale buffer heads from last failed mounting | * cd517f9a9d MIPS: KVM: Fix NULL pointer dereference | * fd89522a61 MIPS: Loongson: Fix cpu_probe_loongson() again | * 0e1854f87b erofs: fix compact 4B support for 16k block size | * e4e7f67cc1 arm64: errata: Add detection for TRBE overwrite in FILL mode | * affdbc8fbc powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 | * 9f1627d8b0 misc: fastrpc: Create fastrpc scalar with correct buffer count | * faea67e6a5 powerpc: Fail build if using recordmcount with binutils v2.37 | * 7eeed3ed1a mm/damon/ops-common: atomically test and clear young on ptes and pmds | * 7efc5bee24 net: bcmgenet: Ensure MDIO unregistration has clocks enabled | * 626c1c2913 mtd: rawnand: meson: fix unaligned DMA buffers handling | * e08295290c tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation | * 936adde9c3 pinctrl: amd: Only use special debounce behavior for GPIO 0 | * 0bcf6b12e6 pinctrl: amd: Detect and mask spurious interrupts | * dff67c64f6 pinctrl: amd: Detect internal GPIO0 debounce handling | * cc5050add0 pinctrl: amd: Fix mistake in handling clearing pins at startup | * 982c29e0d2 f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() | * 333feb7ba8 fs/ntfs3: Check fields while reading | * 04d2c9a6cb nvme-pci: fix DMA direction of unmapping integrity data | * c58e45fbea nvme-pci: remove nvme_queue from nvme_iod | * 91d3554ab1 net/sched: sch_qfq: account for stab overhead in qfq_enqueue | * 8e0326cbc4 net/sched: sch_qfq: refactor parsing of netlink parameters | * 78a0900e8d net/sched: make psched_mtu() RTNL-less safe | * 31976c68be netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write() | * 8a128e601f riscv: mm: fix truncation warning on RV32 | * 3bd945532d net/sched: flower: Ensure both minimum and maximum ports are specified | * d26299f50f bpf: cpumap: Fix memory leak in cpu_map_update_elem | * 099abb1cd2 wifi: airo: avoid uninitialized warning in airo_get_rate() | * 0e9ebc1745 erofs: fix fsdax unavailability for chunk-based regular files | * 41ccbc2ecb erofs: decouple basic mount options from fs_context | * ed84618f8d erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF | * e649333bcf octeontx2-pf: Add additional check for MCAM rules | * c62da24de3 drm/i915: Fix one wrong caching mode enum usage | * 567397dd8e riscv, bpf: Fix inconsistent JIT image generation | * 4e4e1f99bb bpf, riscv: Support riscv jit to provide bpf_line_info | * 420d30d367 igc: Fix inserting of empty frame for launchtime | * efc7f25937 igc: Fix launchtime before start of cycle | * d29387922b kernel/trace: Fix cleanup logic of enable_trace_eprobe | * 7aefc43277 platform/x86: wmi: Break possible infinite loop when parsing GUID | * 02081e5718 platform/x86: wmi: move variables | * f3583db898 platform/x86: wmi: use guid_t and guid_equal() | * 3b6fef4110 platform/x86: wmi: remove unnecessary argument | * 82abd1c37d ipv6/addrconf: fix a potential refcount underflow for idev | * 1d63fdf6d3 NTB: ntb_tool: Add check for devm_kcalloc | * 0aa187a999 NTB: ntb_transport: fix possible memory leak while device_register() fails | * 7e475cf97c ntb: intel: Fix error handling in intel_ntb_pci_driver_init() | * 3326ecef63 NTB: amd: Fix error handling in amd_ntb_pci_driver_init() | * fe1a2ed411 ntb: idt: Fix error handling in idt_pci_driver_init() | * 7f2153c1ae udp6: fix udp6_ehashfn() typo | * 3fabca5d9c icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). | * ea438eed94 net: prevent skb corruption on frag list segmentation | * 02474292a4 net: bgmac: postpone turning IRQs off to avoid SoC hangs | * 1417dd787a ionic: remove WARN_ON to prevent panic_on_warn | * aa915d12c1 gve: Set default duplex configuration to full | * 5b55f2d6ef net/sched: cls_fw: Fix improper refcount update leads to use-after-free | * 1d263bbdc5 net: mvneta: fix txq_map in case of txq_number==1 | * 4a4804e6ae bpf: Fix max stack depth check for async callbacks | * 1b555dff83 scsi: qla2xxx: Fix error code in qla2x00_start_sp() | * 6e8af127dd igc: Handle PPS start time programming for past time values | * 809ea3a3eb igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings | * 82ac62d76a net/mlx5e: Check for NOT_READY flag state after locking | * 4892e1e548 net/mlx5e: fix memory leak in mlx5e_ptp_open | * c61303ae2c net/mlx5e: fix double free in mlx5e_destroy_flow_table | * f4b1f26251 igc: Remove delay during TX ring configuration | * b3540c0de8 drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags | * 9dbc0fa2e8 drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime | * 486b2551b0 drm/panel: simple: Add connector_type for innolux_at043tn24 | * eb94740351 ksmbd: validate session id and tree id in the compound request | * 3813eee515 ksmbd: fix out-of-bound read in smb2_write | * 35f450f54d ksmbd: validate command payload size | * 08871ede83 ksmbd: use ksmbd_req_buf_next() in ksmbd_smb2_check_message() | * d528faa9e8 workqueue: clean up WORK_* constant types, clarify masking | * aed37b12a2 net: lan743x: Don't sleep in atomic context | * d9e1cfae8d io_uring: add reschedule point to handle_tw_list() | * f8307d862c io_uring: Use io_schedule* in cqring wait | * ecb9443b20 block/partition: fix signedness issue for Amiga partitions | * 478a7a30c3 tty: serial: fsl_lpuart: add earlycon for imx8ulp platform | * 75308d64c0 wireguard: netlink: send staged packets when setting initial private key | * 8c660cfd72 wireguard: queueing: use saner cpu selection wrapping | * 870dcc31c0 netfilter: nf_tables: prevent OOB access in nft_byteorder_eval | * 041e2ac88c netfilter: nf_tables: do not ignore genmask when looking up chain by id | * 6f03ce2f1a netfilter: conntrack: Avoid nf_ct_helper_hash uses after free | * 2bd6f13734 netfilter: nf_tables: unbind non-anonymous set if rule construction fails | * 30235c2457 fanotify: disallow mount/sb marks on kernel internal pseudo fs | * d97481c7b2 ovl: fix null pointer dereference in ovl_get_acl_rcu() | * db42d2bf4f fs: no need to check source | * 86b93cbfe1 leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename | * ecc8d95067 ARM: orion5x: fix d2net gpio initialization | * 1c401bb993 ARM: dts: qcom: ipq4019: fix broken NAND controller properties override | * 02b5d96f7d ASoC: mediatek: mt8173: Fix snd_soc_component_initialize error path | * 5f35f98e56 ASoC: mediatek: mt8173: Fix irq error path | * 6e7f6b4b5c btrfs: do not BUG_ON() on tree mod log failure at __btrfs_cow_block() | * bdc8a582e1 btrfs: fix extent buffer leak after tree mod log failure at split_node() | * 7ba0da31dd btrfs: fix race when deleting quota root from the dirty cow roots list | * bacd1c80e3 btrfs: reinsert BGs failed to reclaim | * d1ca553f94 btrfs: bail out reclaim process if filesystem is read-only | * d8e172616f btrfs: delete unused BGs while reclaiming BGs | * 12b6d68498 btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile | * dd15d1c5c2 fs: avoid empty option when generating legacy mount string | * 79b9ab357b jffs2: reduce stack usage in jffs2_build_xattr_subsystem() | * 5ca021be52 ipvs: increase ip_vs_conn_tab_bits range for 64BIT | * 6db001a7ed fs: Lock moved directories | * 40f99ad8e2 fs: Establish locking order for unrelated directories | * 8fdae421c2 Revert "f2fs: fix potential corruption when moving a directory" | * eca9c3d86d ext4: Remove ext4 locking of moved directory | * 487f229efe shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs | * 17bdba70a8 autofs: use flexible array in ioctl structure | * e7acd18e5e integrity: Fix possible multiple allocation in integrity_inode_get() | * f4e0809d3a um: Use HOST_DIR for mrproper | * f67b0e3081 bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent | * 991e9c186a bcache: Remove unnecessary NULL point check in node allocations | * cbdd5b3322 bcache: fixup btree_cache_wait list damage | * 99d0599742 mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used. | * c893918bf4 mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS | * 4a489c8e9c mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M | * 5b555f2500 mmc: core: disable TRIM on Kingston EMMC04G-M627 | * 8e29835366 io_uring: wait interruptibly for request completions on exit | * e5da56c682 NFSD: add encoding of op_recall flag for write delegation | * 8a77b1d466 i2c: qup: Add missing unwind goto in qup_i2c_probe() | * 5bf90e5e79 btrfs: do not BUG_ON() on tree mod log failure at balance_level() | * e15eb4ec86 extcon: usbc-tusb320: Convert to i2c's .probe_new() | * 112c15d097 i2c: xiic: Don't try to handle more interrupt events after error | * 9eaef43fef i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() | * 0fa0cd1f98 apparmor: fix missing error check for rhashtable_insert_fast | * 196f6c7190 sh: dma: Fix DMA channel offset calculation | * 6342e46566 s390/qeth: Fix vipa deletion | * 307623bae6 octeontx-af: fix hardware timestamp configuration | * deee40944a net: dsa: tag_sja1105: fix MAC DA patching from meta frames | * e4db7f4369 pptp: Fix fib lookup calls. | * a4284246fc riscv: move memblock_allow_resize() after linear mapping is ready | * ae682149bc net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX | * edd944b70a xsk: Honor SO_BINDTODEVICE on bind | * 428ccde924 tcp: annotate data races in __tcp_oow_rate_limited() | * 0dad52a840 net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode | * ada440952d powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y | * f3380d895e ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr() | * e425e2ba93 octeontx2-af: Add validation before accessing cgx and lmac | * eeaf264cd4 octeontx2-af: Fix mapping for NIX block from CGX connection | * d58d718136 f2fs: fix error path handling in truncate_dnode() | * c0dd447558 mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 | * 217b6ea8cf spi: bcm-qspi: return error if neither hif_mspi nor mspi is available | * 2e2e5f9300 net: dsa: vsc73xx: fix MTU configuration | * b8aedf29db ibmvnic: Do not reset dql stats on NON_FATAL err | * 6a5a705fa8 Add MODULE_FIRMWARE() for FIRMWARE_TG357766. | * a6527128fe net/sched: act_ipt: add sanity checks on table name and hook locations | * 1fba2510b5 sctp: fix potential deadlock on &net->sctp.addr_wq_lock | * baa76d9b61 media: cec: i2c: ch7322: also select REGMAP | * 677c5707ec drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times | * 2a0acbc6b7 rtc: st-lpc: Release some resources in st_rtc_probe() in case of error | * 7834580ca1 md/raid10: fix the condition to call bio_end_io_acct() | * d623fd42a0 pwm: mtk_disp: Fix the disable flow of disp_pwm | * db3c7f3eb8 pwm: ab8500: Fix error code in probe() | * 05b35ea06d pwm: sysfs: Do not apply state to already disabled PWMs | * aa12faec23 pwm: imx-tpm: force 'real_period' to be zero in suspend | * 07e229f06e phy: tegra: xusb: check return value of devm_kzalloc() | * f7454b8fd2 mfd: stmpe: Only disable the regulators if they are enabled | * a9ccf140a2 KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler | * 2070f3e0bc KVM: s390: vsie: fix the length of APCB bitmap | * 52f371952a mfd: stmfx: Nullify stmfx->vdd in case of error | * b1dbc919c1 mfd: stmfx: Fix error path in stmfx_chip_init | * 9783c2ec8d nvmem: rmem: Use NVMEM_DEVID_AUTO | * e6bd54f497 test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation | * 22c7e378b0 serial: 8250_omap: Use force_suspend and resume for system suspend | * 10f6656c95 Revert "usb: common: usb-conn-gpio: Set last role to unknown before initial detection" | * 76ac2acb75 mfd: intel-lpss: Add missing check for platform_get_resource | * 0e8b1a2835 usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() | * f232c1caac usb: common: usb-conn-gpio: Set last role to unknown before initial detection | * dfda400a4d usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() | * 81ecef54d8 usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() | * f219ea71ee KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes | * de846dec7a media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() | * 7ad558baf6 media: venus: helpers: Fix ALIGN() of non power of two | * 3bedb7a273 mfd: rt5033: Drop rt5033-battery sub-device | * a77616f5a3 coresight: Fix loss of connection info when a module is unloaded | * ca9e766c8a kernfs: fix missing kernfs_idr_lock to remove an ID from the IDR | * e7ecade51b serial: 8250: lock port for UART_IER access in omap8250_irq() | * c1a4ad35c5 serial: 8250: lock port for stop_rx() in omap8250_irq() | * c2194a3610 usb: hide unused usbfs_notify_suspend/resume functions | * ecf26d6e1b usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() | * b10200650e extcon: Fix kernel doc of property capability fields to avoid warnings | * 44e383e22a extcon: Fix kernel doc of property fields to avoid warnings | * a8ea7ed644 usb: gadget: u_serial: Add null pointer check in gserial_suspend | * b626cd5e4a usb: dwc3: qcom: Fix potential memory leak | * 1cee6f0410 clk: qcom: ipq6018: fix networking resets | * 6ad5ded420 clk: qcom: reset: support resetting multiple bits | * 40844343a8 clk: qcom: reset: Allow specifying custom reset delay | * cab904bf50 media: i2c: Correct format propagation for st-mipid02 | * 784a8027b8 media: usb: siano: Fix warning due to null work_func_t function pointer | * 1e1af31c4c media: videodev2.h: Fix struct v4l2_input tuner index comment | * a3727915b3 media: usb: Check az6007_read() return value | * 2a50c146cb clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks | * 8d762ad800 clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs | * 10e2b1c5d8 serial: 8250: omap: Fix freeing of resources on failed register | * a1a5c56060 usb: dwc2: Fix some error handling paths | * fa1547b471 usb: dwc2: platform: Improve error reporting for problems during .remove() | * 0a9c0fa3e9 sh: j2: Use ioremap() to translate device tree address into kernel memory | * 629e97f0c8 w1: fix loop in w1_fini() | * cb263e9b6d w1: w1_therm: fix locking behavior in convert_t | * fbf4ace39b SUNRPC: Fix UAF in svc_tcp_listen_data_ready() | * 92905470a1 block: increment diskseq on all media change events | * 8744a9eda7 block: change all __u32 annotations to __be32 in affs_hardblocks.h | * de4d538380 block: add overflow checks for Amiga partition support | * bc0129a644 block: fix signed int overflow in Amiga partition support | * 92a37fc522 ALSA: jack: Fix mutex call in snd_jack_report() | * 2f533bcb07 ALSA: hda/realtek: Add quirk for Clevo NPx0SNx | * 5bcdfe1544 iio: accel: fxls8962af: fixup buffer scan element type | * 8cc75ce657 iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF | * 92cee2da5b iio: adc: ad7192: Fix internal/external clock selection | * f88a05ef44 iio: adc: ad7192: Fix null ad7192_state pointer access | * b84998a407 phy: tegra: xusb: Clear the driver reference in usb-phy dev | * 8585c6cb03 usb: dwc3: gadget: Propagate core init errors to UDC during pullup | * 9cd1627ff0 USB: serial: option: add LARA-R6 01B PIDs | * fb348857e7 io_uring: ensure IOPOLL locks around deferred work | * 4909d0ad17 bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page | * 902256de2b ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error | * b3889a5990 ksmbd: avoid field overflow warning | * ef26b05023 efi/libstub: Disable PCI DMA before grabbing the EFI memory map | * 5c883c42bd kbuild: Disable GCOV for *.mod.o | * 3d9f6fc71d hwrng: st - keep clock enabled while hwrng is registered | * cd5bd4b713 dax/kmem: Pass valid argument to memory_group_register_static | * 2a327c8c31 dax: Introduce alloc_dev_dax_id() | * 9c2f993b6c dax: Fix dax_mapping_release() use after free | * 63fb45ddc4 SMB3: Do not send lease break acknowledgment if all file handles have been closed | * 7f6023610b NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION | * 6d9f814b26 crypto: qat - unmap buffers before free for RSA | * 718f30e30b crypto: qat - unmap buffer before free for DH | * 3894f5880f crypto: qat - Use helper to set reqsize | * 30682e1214 crypto: kpp - Add helper to set reqsize | * 41bd35a161 crypto: qat - use reference to structure in dma_map_single() | * a3fcd2d23d crypto: qat - replace get_current_node() with numa_node_id() | * 9560559cba crypto: qat - honor CRYPTO_TFM_REQ_MAY_SLEEP flag | * f6ee18555b ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard | * 5e0424cd8a modpost: fix off by one in is_executable_section() | * 7c0c62e557 crypto: marvell/cesa - Fix type mismatch warning | * 6bfdced5b6 modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} | * cd7806eec3 modpost: fix section mismatch message for R_ARM_ABS32 | * 7543ffe03a crypto: nx - fix build warnings when DEBUG_FS is not enabled | * b030d23925 modpost: remove broken calculation of exception_table_entry size | * c76d991b6f hwrng: virtio - Fix race on data_avail and actual data | * 64410e7b03 hwrng: virtio - always add a pending request | * 9a9ef96529 hwrng: virtio - don't waste entropy | * f5634d2154 hwrng: virtio - don't wait on cleanup | * 91806246e4 hwrng: virtio - add an internal buffer | * 36874844f7 powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary | * 271c25008a powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo | * fafeeb398d riscv: uprobes: Restore thread.bad_cause | * 3786416e1f powerpc: update ppc_save_regs to save current r1 in pt_regs | * b08d9a11df powerpc: simplify ppc_save_regs | * d3a0d96c16 powerpc/powernv/sriov: perform null check on iov before dereferencing iov | * 0a95dd17a7 pinctrl: at91-pio4: check return value of devm_kasprintf() | * 50aa3e6abb pinctrl: microchip-sgpio: check return value of devm_kasprintf() | * f7d9231300 powerpc/64s: Fix VAS mm use after free | * 5e79521da1 perf dwarf-aux: Fix off-by-one in die_get_varname() | * ac6c849428 perf script: Fix allocation of evsel->priv related to per-event dump files | * 939bf462a1 powerpc/signal32: Force inlining of __unsafe_save_user_regs() and save_tm_user_regs_unsafe() | * 7d25fc45c4 powerpc/interrupt: Don't read MSR from interrupt_exit_kernel_prepare() | * d4f3531cd2 kcsan: Don't expect 64 bits atomic builtins from 32 bits architectures | * 196f18dd7f pinctrl: cherryview: Return correct value if pin in push-pull mode | * c92365c3f3 perf bench: Add missing setlocale() call to allow usage of %'d style formatting | * e456d9b2dd perf bench: Use unbuffered output when pipe/tee'ing to a file | * c02b496d92 PCI: Add pci_clear_master() stub for non-CONFIG_PCI | * d1bfe6ca73 PCI: ftpci100: Release the clock resources | * 7fe2876aac PCI: pciehp: Cancel bringup sequence if card is not present | * dfbf41e4fc scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() | * 9856c0de49 PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free | * 6053df4da4 pinctrl: bcm2835: Handle gpiochip_add_pin_range() errors | * b1de5105d2 scsi: qedf: Fix NULL dereference in error handling | * 48e6b7602e PCI: vmd: Reset VMD config register between soft reboots | * 34c701b52d PCI: cadence: Fix Gen2 Link Retraining process | * a326cf0107 clk: Fix memory leak in devm_clk_notifier_register() | * a0e7e33b8c ASoC: imx-audmix: check return value of devm_kasprintf() | * 62f29ca45f ovl: update of dentry revalidate flags after copy up | * a089ec635a drivers: meson: secure-pwrc: always enable DMA domain | * 8ca6b2add2 clk: ti: clkctrl: check return value of kasprintf() | * b700e5d4fe clk: keystone: sci-clk: check return value of kasprintf() | * 06759faca0 clk: si5341: free unused memory on probe failure | * 34b11a9a7d clk: si5341: check return value of {devm_}kasprintf() | * 4ade98acef clk: si5341: return error if one synth clock registration fails | * 9875046f14 clk: cdce925: check return value of kasprintf() | * d8832e85a1 clk: vc5: check memory returned by kasprintf() | * f180408f16 drm/msm/dpu: correct MERGE_3D length | * e45377cfe1 arm64: dts: mediatek: mt8192: Fix CPUs capacity-dmips-mhz | * 30111c478b arm64: dts: mediatek: Add cpufreq nodes for MT8192 | * 3c3f3d35f5 drm/msm/dp: Free resources after unregistering them | * ec3b55b2c9 drm/msm/dpu: do not enable color-management if DSPPs are not available | * 300e26e3e6 ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer | * fd1c117bb5 clk: tegra: tegra124-emc: Fix potential memory leak | * 2f276dd9c0 clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider() | * 141d87977b arm64: dts: qcom: sm8250-edo: Panel framebuffer is 2.5k instead of 4k | * bcea444ab4 clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() | * 50b5ddde8f clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe | * 1fb12e7716 RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context | * 79226176cd RDMA/bnxt_re: wraparound mbox producer index | * bf35c202a3 drm/msm/a5xx: really check for A510 in a5xx_gpu_init | * 4300a47e40 amdgpu: validate offset_in_bo of drm_amdgpu_gem_va | * 9b8087950b drm/radeon: fix possible division-by-zero errors | * b979dc54b6 drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode | * 52c2b295e3 drm/amdkfd: Fix potential deallocation of previously deallocated memory. | * 95afd2c7c7 ARM: dts: BCM5301X: fix duplex-full => full-duplex | * 838534e86c hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 | * 31c90fa841 hwmon: (adm1275) Allow setting sample averaging | * 3ff1062bd0 hwmon: (gsc-hwmon) fix fan pwm temperature scaling | * 535eafe715 ARM: dts: stm32: fix i2s endpoint format property for stm32mp15xx-dkx | * 8909898d0b ARM: dts: stm32: Fix audio routing on STM32MP15xx DHCOM PDK2 | * 555ddd671c arm64: dts: ti: k3-j7200: Fix physical address of pin | * 716efd0898 fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() | * 95cb88a853 arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 | * 06c6fdaa11 ARM: dts: iwg20d-q7-common: Fix backlight pwm specifier | * 8ac3083a26 RDMA/hns: Fix hns_roce_table_get return value | * 8d158b32cb IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate | * b2ffd8212e IB/hfi1: Use bitmap_zalloc() when applicable | * 192ab38065 RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes | * f5ca4d358b soc/fsl/qe: fix usb.c build errors | * 9dcc95e3fc ARM: dts: meson8: correct uart_B and uart_C clock references | * 1b4d08bdc0 ASoC: es8316: Do not set rate constraints for unsupported MCLKs | * b324de100d ASoC: es8316: Increment max value for ALC Capture Target Volume control | * 38d04765ad memory: brcmstb_dpfe: fix testing array offset after use | * 17b723acee ARM: dts: stm32: Shorten the AV96 HDMI sound card name | * 9c14802f14 arm64: dts: mediatek: mt8183: Add mediatek,broken-save-restore-fw to kukui | * 8f08ff836c arm64: dts: qcom: apq8096: fix fixed regulator name property | * 2e8c8fd792 ARM: omap2: fix missing tick_broadcast() prototype | * 016aeb9a76 ARM: ep93xx: fix missing-prototype warnings | * 314850a4d0 drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H | * 04f16697d3 arm64: dts: qcom: apq8016-sbc: Fix 1.8V power rail on LS expansion | * 7ce11e9098 arm64: dts: qcom: apq8016-sbc: Fix regulator constraints | * 8d139a395d arm64: dts: qcom: Drop unneeded extra device-specific includes | * 078578f608 arm64: dts: qcom: apq8016-sbc: fix mpps state names | * 25d624af5a arm64: dts: qcom: apq8016-sbc: Clarify firmware-names | * d7d784424a arm64: dts: qcom: apq8016-sbc: Update modem and WiFi firmware path | * 6a843066e0 arm64: dts: qcom: db820c: Move blsp1_uart2 pin states to msm8996.dtsi | * 23f7e4bf89 arm64: dts: qcom: sdm845: correct camss unit address | * dea5289b05 arm64: dts: qcom: sdm630: correct camss unit address | * b12e9fb281 arm64: dts: qcom: msm8996: correct camss unit address | * 5a8bbab2b1 arm64: dts: qcom: msm8994: correct SPMI unit address | * 46474b10dc arm64: dts: qcom: msm8916: correct camss unit address | * b4ed5be2ea ARM: dts: gta04: Move model property out of pinctrl node | * 70b8eeb7c6 drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK | * 2422edc225 drm/msm/disp/dpu: get timing engine status from intf status register | * adac5cf609 drm/msm/dsi: don't allow enabling 14nm VCO with unprogrammed rate | * 6882389691 RDMA/bnxt_re: Fix to remove an unnecessary log | * b41dd1d896 RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid | * 9ccca79eb3 RDMA/bnxt_re: Use unique names while registering interrupts | * ced019c1f9 RDMA/bnxt_re: Fix to remove unnecessary return labels | * adc129e894 RDMA/bnxt_re: Disable/kill tasklet only if it is enabled | * f95ff838ac clk: imx: scu: use _safe list iterator to avoid a use after free | * f564dd7109 arm64: dts: microchip: sparx5: do not use PSCI on reference boards | * 3752e6a98e bus: ti-sysc: Fix dispc quirk masking bool variables | * 6d07673027 ARM: dts: stm32: Move ethernet MAC EEPROM from SoM to carrier boards | * a14e6f9392 drm/panel: sharp-ls043t1le01: adjust mode settings | * 6b5a02a572 drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` | * ec43cfdcbd Input: adxl34x - do not hardcode interrupt trigger type | * fd6cdc56ee ARM: dts: meson8b: correct uart_B and uart_C clock references | * 5899bc4058 ARM: dts: BCM5301X: Drop "clock-names" from the SPI node | * ba51c4072f drm/vram-helper: fix function names in vram helper doc | * 019f013e8b drm/bridge: tc358768: fix THS_TRAILCNT computation | * ed8bfa0461 drm/bridge: tc358768: fix TXTAGOCNT computation | * cec2271095 drm/bridge: tc358768: fix THS_ZEROCNT computation | * 47b8546301 drm/bridge: tc358768: fix TCLK_TRAILCNT computation | * a07e6484f9 drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation | * 34b805ab38 drm/bridge: tc358768: fix TCLK_ZEROCNT computation | * 9e0668ecef drm/bridge: tc358768: fix PLL target frequency | * 81bb5e859f drm/bridge: tc358768: fix PLL parameters computation | * 6451b3274f drm/bridge: tc358768: always enable HS video mode | * 26a0ba5d16 Input: drv260x - sleep between polling GO bit | * efb61a7185 drm/amd/display: Explicitly specify update type per plane info change | * 53e0a5ba9d radeon: avoid double free in ci_dpm_init() | * 6173df9026 drm/amd/display: Add logging for display MALL refresh setting | * a4b0164fc1 netlink: Add __sock_i_ino() for __netlink_diag_dump(). | * 04daf3f674 ipvlan: Fix return value of ipvlan_queue_xmit() | * eb720f669b netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. | * c052797ac3 netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one | * 5848ad4250 lib/ts_bm: reset initial match offset for every block of text | * fc8429f8d8 net: nfc: Fix use-after-free caused by nfc_llcp_find_local | * 60ec0058c7 nfc: llcp: simplify llcp_sock_connect() error paths | * 91f4ef204e sfc: fix crash when reading stats while NIC is resetting | * 9ced40bf84 net: axienet: Move reset before 64-bit DMA detection | * ebd6d2077a gtp: Fix use-after-free in __gtp_encap_destroy(). | * 4f22f55dc8 selftests: rtnetlink: remove netdevsim device after ipsec offload test | * 029d892b05 bonding: do not assume skb mac_header is set | * 619384319b netlink: do not hard code device address lenth in fdb dumps | * a641240b7e netlink: fix potential deadlock in netlink_set_err() | * d4aee9512a net: stmmac: fix double serdes powerdown | * cfe147bdd0 igc: Fix race condition in PTP tx code | * c729f590fe can: length: fix bitstuffing count | * 4bc4797017 bpf: Fix bpf socket lookup from tc/xdp to respect socket VRF bindings | * a254e029b7 bpf: Call __bpf_sk_lookup()/__bpf_skc_lookup() directly via TC hookpoint | * 9eb2651c67 bpf: Factor out socket lookup functions for the TC hookpoint. | * a66cce0339 bpf: Omit superfluous address family check in __bpf_skc_lookup | * 7e3d771f85 wifi: ath9k: convert msecs to jiffies where needed | * 248fc11128 wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection | * 365cd15e8f wifi: cfg80211: rewrite merging of inherited elements * | ab76251526 ANDROID: ABI: Update STG ABI to format version 2 * | 2afb23c898 Merge 3b9de981fe ("wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler()") into android14-5.15-lts |\| | * 3b9de981fe wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() | * d0f665eee9 iwlwifi: don't dump_stack() when we get an unexpected interrupt | * a6db476ff3 wifi: iwlwifi: pull from TXQs with softirqs disabled | * a572c6852b rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO | * 48c2d1455a wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() | * 8c561a59c6 memstick r592: make memstick_debug_get_tpc_name() static | * 79c0fbf8f3 kexec: fix a memory leak in crash_shrink_memory() | * ed8d827f43 watchdog/perf: more properly prevent false positives with turbo modes | * c29d8d1f56 watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config | * 15b37d2b4a wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown | * 4391fa1808 wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled | * ac4bf9426a selftests/bpf: Fix check_mtu using wrong variable type | * 95b4b940f0 wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes | * ef24fe436b wifi: ray_cs: Fix an error handling path in ray_probe() | * 0700d878b0 wifi: ray_cs: Drop useless status variable in parse_addr() | * d696cbbe43 wifi: ray_cs: Utilize strnlen() in parse_addr() | * 93890d0573 wifi: wl3501_cs: Fix an error handling path in wl3501_probe() | * eaffd568a2 wl3501_cs: use eth_hw_addr_set() | * c6143548e6 wifi: atmel: Fix an error handling path in atmel_probe() | * 5a0a312d34 wifi: orinoco: Fix an error handling path in orinoco_cs_probe() | * f5bb5474f4 wifi: orinoco: Fix an error handling path in spectrum_cs_probe() | * ec856ca3b0 regulator: core: Streamline debugfs operations | * fc2f8b9054 regulator: core: Fix more error checking for debugfs_create_dir() | * 534508689e bpftool: JIT limited misreported as negative value on aarch64 | * e7e0b6e066 nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() | * edeb029dd9 spi: dw: Round of n_bytes to power of 2 | * ac6158b5c4 bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen | * 71754ee427 libbpf: fix offsetof() and container_of() to work with CO-RE | * 3e7ee33b95 sctp: add bpf_bypass_getsockopt proto callback | * a32a89bb04 wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() | * a55f88dd15 wifi: wilc1000: fix for absent RSN capabilities WFA testcase | * e215a8a428 spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG | * e92f61e070 samples/bpf: Fix buffer overflow in tcp_basertt | * c77eb01a6e libbpf: btf_dump_type_data_check_overflow needs to consider BTF_MEMBER_BITFIELD_SIZE | * ad5425e707 wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx | * 06da826e3b wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation | * 7930565596 igc: Enable and fix RX hash usage by netstack | * 38a9d7dac3 pstore/ram: Add check for kstrdup | * 745cec2bd3 ima: Fix build warnings | * 41da2c318c evm: Fix build warnings | * 757b06fb02 evm: Complete description of evm_inode_setattr() | * 85872ffac4 locking/atomic: arm: fix sync ops | * cf78062aa9 x86/mm: Fix __swp_entry_to_pte() for Xen PV guests | * bd4c759d31 perf/ibs: Fix interface via core pmu events | * 87666a7d3e kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined | * f766d45ab2 rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale | * bfe210f625 rcu/rcuscale: Move rcu_scale_*() after kfree_scale_cleanup() | * 751cb95117 rcuscale: Move shutdown from wait_event() to wait_event_idle() | * a6d33ea305 rcuscale: Always log error message | * e610497ba1 rcutorture: Correct name of use_softirq module parameter | * c756e8a227 thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() | * e2b32b0c5f cpufreq: intel_pstate: Fix energy_performance_preference for passive | * b51194170f ARM: 9303/1: kprobes: avoid missing-declaration warnings | * 4864c82cb8 powercap: RAPL: Fix CONFIG_IOSF_MBI dependency | * 2c06e0e010 perf/arm-cmn: Fix DTC reset | * 3c4f5aee37 PM: domains: fix integer overflow issues in genpd_parse_state() | * 289e2054ee clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe | * 5017132f2f tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode(). | * 0670c4c567 posix-timers: Prevent RT livelock in itimer_delete() | * f222873711 svcrdma: Prevent page release when nothing was received | * 6689782746 irqchip/jcore-aic: Fix missing allocation of IRQ descriptors | * e6b7362290 md/raid10: fix io loss while replacement replace rdev | * f4368a462b md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request | * 3c76920e54 md/raid10: fix wrong setting of max_corr_read_errors | * d3bf54a69b md/raid10: fix overflow of md/safe_mode_delay | * a134dd582c md/raid10: check slab-out-of-bounds in md_bitmap_get_counter | * eb120c0aff blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost | * 1bc29ba959 x86/resctrl: Only show tasks' pid in current pid namespace | * d9c194281b fs: pipe: reveal missing function protoypes | * 25aa2ad37c netfilter: nf_tables: drop map element references from preparation phase * | bf93b1c960 ANDROID: Set arch attribute for allmodconfig builds * | 6e44a01a15 Merge 5.15.120 into android14-5.15-lts |\| | * d54cfc4205 Linux 5.15.120 | * c06edf13f4 nubus: Partially revert proc_create_single_data() conversion | * 6e65fa33ed parisc: Delete redundant register definitions in <asm/assembly.h> | * b4d8f89000 drm/amdgpu: Validate VM ioctl flags. | * 26eb191bf5 scripts/tags.sh: Resolve gtags empty index generation | * 989b4a753c perf symbols: Symbol lookup with kcore can fail if multiple segments match stext | * 87f51cf60e Revert "thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe" | * 6a28f3490d HID: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651. | * 67ce772463 HID: wacom: Use ktime_t rather than int when dealing with timestamps | * 3477323177 bpf: ensure main program has an extable | * d874cf9799 can: isotp: isotp_sendmsg(): fix return error fix on TX path | * 27d03d15bb x86/smp: Use dedicated cache-line for mwait_play_dead() | * d6c745ca4f x86/microcode/AMD: Load late on both threads too | * 9052349685 drm/amdgpu: Set vmbo destroy after pt bo is created | * 796481bedc mm, hwpoison: when copy-on-write hits poison, take page offline | * 6713b8f11a mm, hwpoison: try to recover from copy-on write faults | * b46021ab83 mptcp: consolidate fallback and non fallback state machine | * 42ff95b4bd mptcp: fix possible divide by zero in recvmsg() * | cf7fcaaad7 ANDROID: GKI: update the .stg file * | 6f8b8ba07b Revert "gpio: Allow per-parent interrupt data" * | 5315d334e4 Revert "gpiolib: Fix GPIO chip IRQ initialization restriction" * | f05620ff64 Merge 5.15.119 into android14-5.15-lts |\| | * 4af60700a6 Linux 5.15.119 | * 10fbd2e04e act_mirred: remove unneded merge conflict markers | * 2230b3f874 i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle | * 907a069ec3 x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys | * 7949f83f7e vhost_net: revert upend_idx only on retriable error | * fdac0aa4a1 drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl | * f012d3037c drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl | * a44b4230d2 drm/exynos: vidi: fix a wrong error return | * 79b4125bce ARM: dts: Fix erroneous ADS touchscreen polarities | * 9684c4fdee s390/purgatory: disable branch profiling | * 3c4d87e9fa ASoC: nau8824: Add quirk to active-high jack-detect | * d77eac1b14 soundwire: dmi-quirks: add new mapping for HP Spectre x360 | * 53ad4af4ec ASoC: simple-card: Add missing of_node_put() in case of error | * bb45dc7b67 spi: lpspi: disable lpspi module irq in DMA mode | * f8d9d8f172 s390/cio: unregister device when the only path is gone | * e10d15fdfc Input: soc_button_array - add invalid acpi_index DMI quirk handling | * 26bde09a15 nvme: double KA polling frequency to avoid KATO with TBKAS on | * e3bbc14837 usb: gadget: udc: fix NULL dereference in remove() | * cce681383d nfcsim.c: Fix error checking for debugfs_create_dir | * 8a5ddd1430 media: cec: core: don't set last_initiator if tx in progress | * 01cf989090 arm64: Add missing Set/Way CMO encodings | * f97b16c0a5 HID: wacom: Add error check to wacom_parse_and_register() | * e8bdb1f886 scsi: target: iscsi: Prevent login threads from racing between each other | * 1cc379d53b gpio: sifive: add missing check for platform_get_irq | * 497d401408 gpiolib: Fix GPIO chip IRQ initialization restriction | * 7973c4b3b9 gpio: Allow per-parent interrupt data | * c1a2b52d99 sch_netem: acquire qdisc lock in netem_change() | * 3138c85031 selftests: forwarding: Fix race condition in mirror installation | * b7db41a865 bpf/btf: Accept function names that contain dots | * 0f8d81254f Revert "net: phy: dp83867: perform soft reset and retain established link" | * 57130334da netfilter: nfnetlink_osf: fix module autoload | * 53defc6ecf netfilter: nf_tables: disallow updates of anonymous sets | * 2f2f9eaa6d netfilter: nf_tables: reject unbound chain set before commit phase | * 2938e7d582 netfilter: nf_tables: reject unbound anonymous set before commit phase | * baa3ec1b31 netfilter: nf_tables: disallow element updates of bound anonymous sets | * 45eb6944d0 netfilter: nft_set_pipapo: .walk does not deal with generations | * 4004f12aac netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain | * 314a8697d0 netfilter: nf_tables: fix chain binding transaction logic | * 1328e8d4c3 be2net: Extend xmit workaround to BE3 chip | * 768f94c5f6 net: dsa: mt7530: fix handling of BPDUs on MT7530 switch | * aa528e7d37 net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch | * efea112a87 ipvs: align inner_mac_header for encapsulation | * 24d7d9aee0 mmc: usdhi60rol0: fix deferred probing | * d1e08bed03 mmc: sh_mmcif: fix deferred probing | * 34c4906b9a mmc: sdhci-acpi: fix deferred probing | * 41f1e8dab0 mmc: owl: fix deferred probing | * b86ca9e08c mmc: omap_hsmmc: fix deferred probing | * 445a9568de mmc: omap: fix deferred probing | * 840deb8d14 mmc: mvsdio: fix deferred probing | * 92f73c4f92 mmc: mtk-sd: fix deferred probing | * aedecd013d net: qca_spi: Avoid high load if QCA7000 is not available | * 156dd06fb3 xfrm: Linearize the skb after offloading if needed. | * d967bd7ea6 selftests: net: fcnal-test: check if FIPS mode is enabled | * 964cfdfd4b xfrm: fix inbound ipv4/udp/esp packets to UDPv6 dualstack sockets | * 25e89fa7b5 bpf: Fix verifier id tracking of scalars on spill | * 0b180495f6 bpf: track immediate values written to stack by BPF_ST instruction | * 3229a29e95 xfrm: Ensure policies always checked on XFRM-I input path | * d055ee18ca xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c | * 491ce3c1d9 xfrm: Treat already-verified secpath entries as optional | * 0ce3d0c068 ieee802154: hwsim: Fix possible memory leaks | * 29672dc47d mmc: meson-gx: fix deferred probing | * 9bac4a2b73 memfd: check for non-NULL file_seals in memfd_create() syscall | * 103734b429 x86/mm: Avoid using set_pgd() outside of real PGD pages | * 793d0224bb nilfs2: prevent general protection fault in nilfs_clear_dirty_page() | * 96987c383c io_uring/net: disable partial retries for recvmsg with cmsg | * 25a543ca30 io_uring/net: clear msg_controllen on partial sendmsg retry | * 34a7e5021a io_uring/net: save msghdr->msg_control for retries | * b07bb2914a writeback: fix dereferencing NULL mapping->host on writeback_page_template | * 3c46a240dd regmap: spi-avmm: Fix regmap_bus max_raw_write | * 4796d9b069 regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK | * ba9952e2f5 ip_tunnels: allow VXLAN/GENEVE to inherit TOS/TTL from VLAN | * acee272283 mmc: mmci: stm32: fix max busy timeout calculation | * 999173f295 mmc: meson-gx: remove redundant mmc_request_done() call from irq context | * 00010b52c7 mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916 | * 4a557910bb cgroup: Do not corrupt task iteration when rebinding subsystem | * 815b244011 PCI: hv: Add a per-bus mutex state_lock | * 34e21b8ff3 PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic | * 7d852ca7af PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev | * 5e0d33cc78 Revert "PCI: hv: Fix a timing issue which causes kdump to fail occasionally" | * ac0df91c7d PCI: hv: Fix a race condition bug in hv_pci_query_relations() | * 80c5d97b4a Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs | * 4d31eb2e26 Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails | * 953dd7e2df KVM: Avoid illegal stage2 mapping on invalid memory slot | * 1d6c932068 ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep() | * b12011cea5 nilfs2: fix buffer corruption due to concurrent device reads | * 485f6be254 selftests: mptcp: join: skip check if MIB counter not supported | * 64cb73ea77 selftests: mptcp: join: use 'iptables-legacy' if available | * 979a941d7e selftests: mptcp: pm nl: remove hardcoded default limits | * ac65930751 selftests/mount_setattr: fix redefine struct mount_attr build error | * 726d033133 selftests: mptcp: lib: skip if not below kernel version | * b28fc26683 selftests: mptcp: lib: skip if missing symbol | * 024a24e5d4 tick/common: Align tick period during sched_timer setup | * 3c1aa91b37 drm/amd/display: Add wrapper to call planes and stream update | * eea850c025 drm/amd/display: Use dc_update_planes_and_stream | * fb7c68bbcc drm/amd/display: Add minimal pipe split transition state | * b5f0e898f6 tpm, tpm_tis: Claim locality in interrupt handler | * 39e7872537 tracing: Add tracing_reset_all_online_cpus_unlocked() function | * 5a24be76af drm/amd/display: fix the system hang while disable PSR * | fe598ae9ca Revert "net: Remove DECnet leftovers from flow.h." * | 87e8932c28 Merge 5.15.118 into android14-5.15-lts |\| | * f676530194 Linux 5.15.118 | * e5bf1f7d1f nilfs2: reject devices with insufficient block count | * 2bc9231afc mmc: block: ensure error propagation for non-blk | * 4b7b50d4eb of: overlay: add entry to of_overlay_action_name[] | * 84770cc54e neighbour: delete neigh_lookup_nodev as not used | * 4180651825 net: Remove DECnet leftovers from flow.h. | * 4c39a2414a net: Remove unused inline function dst_hold_and_use() | * bb76281b6e neighbour: Remove unused inline function neigh_key_eq16() | * 67866cad76 rcu/kvfree: Avoid freeing new kfree_rcu() memory after old grace period | * c91ed3a5c2 cgroup: always put cset in cgroup_css_set_put_fork | * 33b801be2d afs: Fix vlserver probe RTT handling | * f824bcc3e1 selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET | * 2077c7dbfe net: tipc: resize nlattr array to correct size | * f734e16ee1 dm: don't lock fs when the map is NULL during suspend or resume | * 8a8179f6a3 net: lapbether: only support ethernet devices | * 052417e8b3 net/sched: cls_api: Fix lockup on flushing explicitly created chain | * c0cb9d453f ext4: drop the call to ext4_error() from ext4_get_group_info() | * eb4ccc102d cifs: fix lease break oops in xfstest generic/098 | * 1cb181271e drm/nouveau: add nv_encoder pointer check for NULL | * c79dccc263 drm/nouveau/dp: check for NULL nv_connector->native_mode | * 909b7f7497 drm/nouveau: don't detect DSM for non-NVIDIA device | * 10e1e07bde igb: fix nvm.ops.read() error handling | * fe03fd373c igc: Clean the TX buffer and TX descriptor ring | * 032b8cbeb1 sctp: fix an error code in sctp_sf_eat_auth() | * 981e78781a ipvlan: fix bound dev checking for IPv6 l3s mode | * 3e76522d1a net: ethtool: correct MAX attribute value for stats | * 18512de744 IB/isert: Fix incorrect release of isert connection | * 63e9e71983 IB/isert: Fix possible list corruption in CMA handler | * 29ff057c0a IB/isert: Fix dead lock in ib_isert | * fced7aaaa3 IB/uverbs: Fix to consider event queue closing also upon non-blocking mode | * cd44977ecc RDMA/cma: Always set static rate to 0 for RoCE | * 5a9dee176b RDMA/mlx5: Initiate dropless RQ for RAW Ethernet functions | * 35828874aa octeontx2-af: fix lbk link credits on cn10k | * 7506e77357 octeontx2-af: fixed resource availability check | * 4dd914b9e2 iavf: remove mask from iavf_irq_enable_queues() | * e6342cd13d RDMA/rxe: Fix the use-before-initialization error of resp_pkts | * 466f25fd2d RDMA/rxe: Removed unused name from rxe_task struct | * 13d087b358 RDMA/rxe: Remove the unused variable obj | * 0e1098d72f net/sched: cls_u32: Fix reference counter leak leading to overflow | * d56661cd8d net/sched: act_pedit: Parse L3 Header for L4 offset | * 17b330b782 net/sched: act_pedit: remove extra check for key type | * 219b8e9838 net/sched: simplify tcf_pedit_act | * 688e6db596 ping6: Fix send to link-local addresses with VRF. | * 471a4c08e3 net: enetc: correct the indexes of highest and 2nd highest TCs | * 44ebe988cb netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE | * 133b73d853 netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM | * e4188f8b81 netfilter: nf_tables: integrate pipapo into commit protocol | * 4da9d4e740 spi: fsl-dspi: avoid SCK glitches with continuous transfers | * 08acd41bb1 RDMA/rxe: Fix packet length checks | * 01f6f867ad RDMA/rtrs: Fix rxe_dealloc_pd warning | * 01bbead309 RDMA/rtrs: Fix the last iu->buf leak in err path | * 1938f080a1 usb: dwc3: gadget: Reset num TRBs before giving back the request | * ed02955049 serial: lantiq: add missing interrupt ack | * 235845b576 USB: serial: option: add Quectel EM061KGL series | * e05e9cca77 thunderbolt: Mask ring interrupt on Intel hardware as well | * 0bd227610c thunderbolt: dma_test: Use correct value for absent rings when creating paths | * 2a974abc09 Remove DECnet support from kernel | * 28010d3a9a ALSA: hda/realtek: Add a quirk for Compaq N14JP6 | * 203a01ae57 drm/amdgpu: add missing radeon secondary PCI ID | * b1b64a76b7 drm/amd/display: edp do not add non-edid timings | * 98c8c0f2b3 net: usb: qmi_wwan: add support for Compal RXM-G1 | * fd81222d1a RDMA/uverbs: Restrict usage of privileged QKEYs | * 14c30c2439 nouveau: fix client work fence deletion race | * f4c5eebb37 dm thin metadata: check fail_io before using data_sm | * ee09c0b1b0 ALSA: usb-audio: Add quirk flag for HEM devices to enable native DSD playback | * 953cc0bf2d powerpc/purgatory: remove PGO flags | * faf45f2c5e x86/purgatory: remove PGO flags | * d38e051ec6 kexec: support purgatories with .text.hot sections | * 4357336192 nilfs2: fix possible out-of-bounds segment allocation in resize ioctl | * 74ea184af9 nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() | * 941e7452df nios2: dts: Fix tse_mac "max-frame-size" property | * 8a8efde4a7 ocfs2: check new file size on fallocate call | * 559b7a0d9f ocfs2: fix use-after-free when unmounting read-only filesystem | * 8262a9f3b8 epoll: ep_autoremove_wake_function should use list_del_init_careful | * c0a2422955 wifi: cfg80211: fix double lock bug in reg_wdev_chan_valid() | * 1a65bac4ed wifi: cfg80211: fix locking in regulatory disconnect | * 0e388fce7a io_uring: hold uring mutex around poll removal | * 27825a6da7 irqchip/gic: Correctly validate OF quirk descriptors | * f50018e2dd NVMe: Add MAXIO 1602 to bogus nid list. | * 4204b539ca drm:amd:amdgpu: Fix missing buffer object unlock in failure path | * 7cb02d5dc2 xen/blkfront: Only check REQ_FUA for writes | * a75928bb92 ASoC: dwc: move DMA init to snd_soc_dai_driver probe() | * 37f7864c17 mips: Move initrd_start check after initrd address sanitisation. | * 0d6e654294 MIPS: Alchemy: fix dbdma2 | * 1907b6148f MIPS: unhide PATA_PLATFORM | * 8f50d247b5 parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory() | * 717368977b parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu() | * 7e85809d27 ASoC: soc-pcm: test if a BE can be prepared | * 68086376a1 btrfs: handle memory allocation failure in btrfs_csum_one_bio | * 39ea949526 btrfs: scrub: try harder to mark RAID56 block groups read-only | * 9df872ec4a power: supply: Fix logic checking if system is running from battery | * 42e6a4a1e0 irqchip/gic-v3: Disable pseudo NMIs on Mediatek devices w/ firmware issues | * 2105f2fa57 regulator: Fix error checking for debugfs_create_dir | * 91b3d6aa07 platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 | * c845ec79c3 power: supply: Ratelimit no data debug output | * 19d09d31da tools: gpio: fix debounce_period_us output of lsgpio | * c11bb961ca ARM: dts: vexpress: add missing cache properties | * 36fdd1d5b4 power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() | * 3b86c54e6e power: supply: sc27xx: Fix external_power_changed race | * 200d8ad44e power: supply: ab8500: Fix external_power_changed race | * 48992b9287 of: overlay: Fix missing of_node_put() in error case of init_overlay_changeset() | * 282f0c63cf of: overlay: rework overlay apply and remove kfree()s | * 5f306cbfa5 of: overlay: rename variables to be consistent | * 1cc40dccad drm/amdgpu: fix Null pointer dereference error in amdgpu_device_recover_vram | * 7cf3bf3cc0 ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate | * de091a6e1f test_firmware: fix a memory leak with reqs buffer | * bfb0b366e8 test_firmware: prevent race conditions by a correct implementation of locking | * 4b5511aa0a test_firmware: Use kstrtobool() instead of strtobool() * | 105a464bd6 Merge branch 'android14-5.15' into 'android14-5.15-lts' * | 7aef878cc2 Revert "neighbour: fix unaligned access to pneigh_entry" * | f5d9ff9c9c Revert "net/ipv6: fix bool/int mismatch for skip_notify_on_dev_down" * | 403dbb90c2 Merge 5.15.117 into android14-5.15-lts |\| | * 471e639e59 Linux 5.15.117 | * ef876dd258 Revert "staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE" | * 6cfe9ddb6a xfs: verify buffer contents when we skip log replay | * b5a52009d9 Revert "debugobject: Ensure pool refill (again)" | * 3cc6805547 ext4: only check dquot_initialize_needed() when debugging | * 86ebb5b534 Revert "ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled" | * 9945284195 vhost_vdpa: support PACKED when setting-getting vring_base | * 17882a3556 vhost: support PACKED when setting-getting vring_base | * d18688ff42 vduse: avoid empty string for dev name | * 952d1e4cbc riscv: fix kprobe __user string arg print fault issue | * 62958e78b7 eeprom: at24: also select REGMAP | * 66b99b3bd7 i2c: sprd: Delete i2c adapter in .remove's error path | * 58648a533a firmware: arm_ffa: Set handle field to zero in memory descriptor | * e1ab7ed792 i2c: mv64xxx: Fix reading invalid status value in atomic mode | * 003421fc43 arm64: dts: imx8mn-beacon: Fix SPI CS pinmux | * 2a4f0ad59d ASoC: mediatek: mt8195: fix use-after-free in driver remove path | * cc4a2c0b1e ASoC: mediatek: mt8195-afe-pcm: Convert to platform remove callback returning void | * 036bba96bf arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts | * d97c8306a9 arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP signals | * 2212344664 arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified sc7180-lite boards | * c589ba11da ASoC: codecs: wsa881x: do not set can_multi_write flag | * 980011869a ARM: dts: at91: sama7g5ek: fix debounce delay property for shdwc | * ac817e26f9 usb: usbfs: Use consistent mmap functions | * 35d9f521bc usb: usbfs: Enforce page requirements for mmap | * 64e4a3b253 pinctrl: meson-axg: add missing GPIOA_18 gpio group | * 4124536ad9 rbd: get snapshot context after exclusive lock is ensured to be held | * 1af3b16b62 rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting | * 2326488a96 tee: amdtee: Add return_origin to 'struct tee_cmd_load_ta' | * 0a8e5a6166 Bluetooth: hci_qca: fix debugfs registration | * 2a7e918e22 Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk | * 36482bf16f s390/dasd: Use correct lock while counting channel queue length | * fd03b5575c ceph: fix use-after-free bug for inodes when flushing capsnaps | * e022640b1f can: j1939: avoid possible use-after-free when j1939_can_rx_register fails | * 67eb5a5153 can: j1939: change j1939_netdev_lock type to mutex | * e2a6db7cab can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket | * 4ce28f3ab3 drm/amd/pm: Fix power context allocation in SMU13 | * 2984dbacf6 drm/amdgpu: fix xclk freq on CHIP_STONEY | * 77558dd165 drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid SKUs | * 4b1bf59460 drm/i915/gt: Use the correct error value when kernel_context() fails | * 17c01feed6 ALSA: hda/realtek: Add Lenovo P3 Tower platform | * 800e4c5b36 ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01 | * 9dab648ccd ALSA: hda/realtek: Add quirk for Clevo NS50AU | * cd67fdd3cc Input: fix open count when closing inhibited device | * 2545d1b4d1 Input: psmouse - fix OOB access in Elantech protocol | * ed263c550f Input: xpad - delete a Razer DeathAdder mouse VID/PID entry | * 5db4229b14 batman-adv: Broken sync while rescheduling delayed work | * aedad6c7fb bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks | * a94401de2b bnxt_en: Query default VLAN before VNIC setup on a VF | * cf0a3e9467 bnxt_en: Don't issue AP reset during ethtool's reset operation | * 40d074f7e4 lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() | * b6b1799c37 bpf: Add extra path pointer check to d_path helper | * a242c6a92c net: sched: fix possible refcount leak in tc_chain_tmplt_add() | * d7c69f7b83 net: sched: act_police: fix sparse errors in tcf_police_dump() | * e7e0f94974 net: sched: move rtm_tca_policy declaration to include file | * c5e0a2f49c drm/i915/selftests: Add some missing error propagation | * 234f0337b4 drm/i915/selftests: Stop using kthread_stop() | * 1f942073e1 drm/i915/selftests: Increase timeout for live_parallel_switch | * 3604ab1519 rfs: annotate lockless accesses to RFS sock flow table | * 2501f5a955 rfs: annotate lockless accesses to sk->sk_rxhash | * dd5296e3b2 ipv6: rpl: Fix Route of Death. | * eab6cda0bf netfilter: ipset: Add schedule point in call_ad(). | * 7b053b2e8c netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper | * 34d67ecf3d selftests/bpf: Fix sockopt_sk selftest | * 01363bf8ef selftests/bpf: Verify optval=NULL case | * 7e74801e1b wifi: cfg80211: fix locking in sched scan stop work | * 6c25c96a46 qed/qede: Fix scheduling while atomic | * 668c3f9514 Bluetooth: L2CAP: Add missing checks for invalid DCID | * 53c056ccda Bluetooth: Fix l2cap_disconnect_req deadlock | * c16e79e27e drm/i915: Use 18 fast wake AUX sync len | * 567873901a drm/i915: Explain the magic numbers for AUX SYNC/precharge length | * dd40bcc357 net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values | * 9d66ffd8ac net: enetc: correct the statistics of rx bytes | * 8db1acf2b1 net/smc: Avoid to access invalid RMBs' MRs in SMCRv1 ADD LINK CONT | * 9b001a7d1e net/ipv6: fix bool/int mismatch for skip_notify_on_dev_down | * c85bee3a4a bpf: Fix UAF in task local storage | * 54c8aea7e8 net: dsa: lan9303: allow vid != 0 in port_fdb_{add|del} methods | * ab0eca3f54 neighbour: fix unaligned access to pneigh_entry | * bdcc42186d wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll | * 7b0c76354a afs: Fix setting of mtime when creating a file/dir/symlink | * 8ef72e7830 spi: qup: Request DMA before enabling clocks | * f0e84db82e platform/surface: aggregator: Allow completion work-items to be executed in parallel | * 547da24832 blk-iocost: avoid 64-bit division in ioc_timer_fn | * 3b07425c3d f2fs: fix iostat lock protection | * b85fb01a76 bonding (gcc13): synchronize bond_{a,t}lb_xmit() types | * 0dfc81a283 i40e: fix build warning in ice_fltr_add_mac_to_list() | * 2e12542c19 i40e: use int for i40e_status | * 81f552df07 i40e: Remove string printing for i40e_status | * d13f56d4b2 sfc (gcc13): synchronize ef100_enqueue_skb()'s return type | * a9ad05e354 remove the sx8 block driver | * c7cf7760b9 gcc-plugins: Reorganize gimple includes for GCC 13 | * 8d00b4e329 ata: ahci: fix enum constants for gcc-13 * | 97a41de737 Revert "tcp: deny tcp_disconnect() when threads are waiting" * | 8340dc3122 Merge 5.15.116 into android14-5.15-lts |\| | * 7349e40704 Linux 5.15.116 | * 62886f17d3 RDMA/irdma: Do not generate SW completions for NOPs | * 14d148401c RDMA/irdma: Fix drain SQ hang with no completion | * e88b19b252 ARM: defconfig: drop CONFIG_DRM_RCAR_LVDS | * a1c76e2907 ext4: enable the lazy init thread when remounting read/write | * 76a7dfc9cc selftests: mptcp: join: skip if MPTCP is not supported | * 807114223d selftests: mptcp: simult flows: skip if MPTCP is not supported | * 9319c8b75e selftests: mptcp: diag: skip if MPTCP is not supported | * c971ca2b9d drm/amdgpu/gfx10: Disable gfxoff before disabling powergating. | * 7a20262fa9 scsi: dpt_i2o: Do not process completions with invalid addresses | * daeab37ddb scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD) | * 78a79c6252 drm/rcar: stop using 'imply' for dependencies | * 4c3dda6b7c tpm, tpm_tis: Request threaded interrupt handler | * 19750d7b57 regmap: Account for register length when chunking | * 6cb7e7579a KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() | * d56c2ab325 ksmbd: fix incorrect AllocationSize set in smb2_get_info | * 380b47932e ksmbd: fix credit count leakage | * 8a870c07a1 KVM: x86: Account fastpath-only VM-Exits in vCPU stats | * 808ed7d86e test_firmware: fix the memory leak of the allocated firmware buffer | * 4b7a35eb8a serial: 8250_tegra: Fix an error handling path in tegra_uart_probe() | * fc8ef07141 fbcon: Fix null-ptr-deref in soft_cursor | * a0790a7739 ext4: add lockdep annotations for i_data_sem for ea_inode's | * a8c3024c3e ext4: disallow ea_inodes with extended attributes | * 39a66e7a29 ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() | * bdbfbb7d50 ext4: add EA_INODE checking to ext4_iget() | * efa3fe247d selftests: mptcp: sockopt: skip if MPTCP is not supported | * 95ad73b627 selftests: mptcp: pm nl: skip if MPTCP is not supported | * 30bacfd8ca selftests: mptcp: connect: skip if MPTCP is not supported | * 2712a1ba05 tracing/probe: trace_probe_primary_from_call(): checked list_first_entry | * 8a716b28b9 selinux: don't use make's grouped targets feature yet | * 11a8e7fd72 block: fix revalidate performance regression | * 538d850485 usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM | * 57a2fd7b2c usb: cdns3: allocate TX FIFO size according to composite EP number | * d42d869b2c iommu/amd: Fix domain flush size when syncing iotlb | * cb21384372 powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall | * f257c1a6cc btrfs: fix csum_tree_block page iteration to avoid tripping on -Werror=array-bounds | * 292806cfe4 tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK | * 3fda903511 mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order | * dade1f4a37 mmc: vub300: fix invalid response handling | * 3eb4590bc3 block/blk-iocost (gcc13): keep large values in a new enum | * 43124187fe ath6kl: Use struct_group() to avoid size-mismatched casting | * 43f4aca98b x86/boot: Wrap literal addresses in absolute_pointer() | * 3cfd7f042e drm/amd/pm: reverse mclk and fclk clocks levels for renoir | * 7e0c25b390 drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp | * fce05ec3de drm/amd/pm: reverse mclk and fclk clocks levels for vangogh | * b0dda610b4 ata: libata-scsi: Use correct device no in ata_find_dev() | * 57f4555bdf scsi: stex: Fix gcc 13 warnings | * 6f675380db misc: fastrpc: reject new invocations during device removal | * cebe84b9c0 misc: fastrpc: return -EPIPE to invocations on device removal | * d3103fc0d1 md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk() | * 599e19202b usb: gadget: f_fs: Add unbind event before functionfs_unbind | * c762eafe79 dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type | * 7099a87cf5 net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 | * 16bd13e701 iio: dac: build ad5758 driver when AD5758 is selected | * b6622c1fd2 iio: adc: ad7192: Change "shorted" channels to differential | * aeec28d838 iio: dac: mcp4725: Fix i2c_master_send() return value handling | * 23c6a184c2 iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag | * 4349ee3dee iio: light: vcnl4035: fixed chip ID check | * db633585e9 dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value | * 6bd3d6305b iio: imu: inv_icm42600: fix timestamp reset | * 536b4ffa93 HID: wacom: avoid integer overflow in wacom_intuos_inout() | * cfa747cc65 HID: google: add jewel USB id | * 11bc983e43 iio: adc: mxs-lradc: fix the order of two cleanup operations | * a5461c3134 iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT method | * 6a7d946733 media: uvcvideo: Don't expose unsupported formats to userspace | * 6dd02a7bff mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() | * 0f3c55c7d6 nvme-pci: Add quirk for Teamgroup MP33 SSD | * c9079eb6f1 drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged | * 4238ea044e atm: hide unused procfs functions | * 5d4c31d939 drm/msm: Be more shouty if per-process pgtables aren't working | * 825cc70fbf ALSA: oss: avoid missing-prototype warnings | * a79da1659c nvme-multipath: don't call blk_mark_disk_dead in nvme_mpath_remove_disk | * 9a195b9917 netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT | * 82f505878f wifi: b43: fix incorrect __packed annotation | * ab62fc176e scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed | * e04de12881 wifi: mac80211: simplify chanctx allocation | * 24dc97e135 arm64: vdso: Pass (void *) to virt_to_page() | * 2944b9f0fd arm64/mm: mark private VM_FAULT_X defines as vm_fault_t | * 39d84ddd9e ARM: dts: stm32: add pin map for CAN controller on stm32f7 | * b2f00acd53 wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value | * ce135055be ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P | * 66f05cf2b2 s390/topology: honour nr_cpu_ids when adding CPUs | * 7980368542 s390/pkey: zeroize key blobs | * 42624bc8c3 media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 | * 22fc36d59e media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() | * a47a3f7a9b media: dvb-core: Fix use-after-free due to race at dvb_register_device() | * 50831747cb media: dvb-core: Fix use-after-free due on race condition at dvb_net | * 9f74fec18f media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table | * d6c47b2359 media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() | * 747a121914 media: dvb_ca_en50221: fix a size write bug | * 34562df408 media: netup_unidvb: fix irq init by register it at the end of probe | * 5e56e3d5eb media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address | * 5240bc8c0c media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() | * cd6764cf45 media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer | * ef0d867e29 media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() | * abaf49c5a9 media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() | * 4b61ee116a media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() | * 5e9ad9962f media: dvb_demux: fix a bug for the continuity counter | * ae3e3ac8b2 ASoC: ssm2602: Add workaround for playback distortions | * 6cf7f03d2d ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI codecs | * 133c78bc67 xfrm: Check if_id in inbound policy/secpath match | * f1a6d366cd um: harddog: fix modular build | * e9d167ca48 ASoC: dwc: limit the number of overrun messages | * 84dfd8bee5 nvme-pci: add quirk for missing secondary temperature thresholds | * b32eeafd4e nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G | * f7af470fad block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE | * 8ba70707c3 nbd: Fix debugfs_create_dir error checking | * 156f5237e9 fbdev: stifb: Fix info entry in sti_struct on error path | * b3c7854287 fbdev: modedb: Add 1920x1080 at 60 Hz video mode | * ad3de274e0 fbdev: imsttfb: Fix use after free bug in imsttfb_probe | * fd8b4e28f4 gfs2: Don't deref jdesc in evict | * a00cc85628 platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield | * 736626df53 media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE | * 1eae6e9196 ARM: 9295/1: unwind:fix unwind abort for uleb128 case | * af739a7015 btrfs: abort transaction when sibling keys check fails for leaves | * 872a038dd4 drm/ast: Fix ARM compatibility | * 3291f4a107 mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() | * fe6f6f4706 drm/amdgpu: Use the default reset when loading or reloading the driver | * 2226d9ef63 ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs. | * 65221bdde7 watchdog: menz069_wdt: fix watchdog initialisation | * 6a7bf00389 drm/amdgpu: release gpu full access after "amdgpu_device_ip_late_init" | * 8ac106aade rtnetlink: call validate_linkmsg in rtnl_create_link | * beeffe764e mtd: rawnand: marvell: don't set the NAND frequency select | * 6494318f11 mtd: rawnand: marvell: ensure timing values are written | * 0fad29dabc net: dsa: mv88e6xxx: Increase wait after reset deactivation | * 45f47d2cf1 net/sched: flower: fix possible OOB write in fl_set_geneve_opt() | * b15adce7d3 net/mlx5: Read embedded cpu after init bit cleared | * c3caee8fe1 net/mlx5e: Fix error handling in mlx5e_refresh_tirs | * 1abb7b04ec udp6: Fix race condition in udp6_sendmsg & connect | * 7dc379f885 net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report | * 91b07931c1 net: sched: fix NULL pointer dereference in mq_attach | * b1cb1ba1fb net/sched: Prohibit regrafting ingress or clsact Qdiscs | * cde00dcdf0 net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs | * 2e859de5ae net/sched: sch_clsact: Only create under TC_H_CLSACT | * cff0af3d13 net/sched: sch_ingress: Only create under TC_H_INGRESS | * a907a389c7 tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set | * fade445f39 tcp: deny tcp_disconnect() when threads are waiting | * 5434c81287 af_packet: do not use READ_ONCE() in packet_bind() | * 60bd1403ba RDMA/irdma: Fix Local Invalidate fencing | * 0b3c392b82 RDMA/irdma: Prevent QP use after free | * bd2af69575 RDMA/irdma: Add SW mechanism to generate completions on error | * 2d04dde4de mtd: rawnand: ingenic: fix empty stub helper definitions | * 8f61d394b0 amd-xgbe: fix the false linkup in xgbe_phy_status | * aefcb6ea1d af_packet: Fix data-races of pkt_sk(sk)->num. | * c8775b97bf netrom: fix info-leak in nr_write_internal() | * 8045788add net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure | * 8d9d0bfd4c net/mlx5e: Don't attach netdev profile while handling internal error | * d002e0287d net/mlx5: fw_tracer, Fix event handling | * 3a7793ae69 riscv: Fix unused variable warning when BUILTIN_DTB is set | * 3f1191bc5b dmaengine: pl330: rename _start to prevent build error | * c4be5d71d7 iommu/amd: Don't block updates to GATag if guest mode is on | * b4fd38c0c7 iommu/rockchip: Fix unwind goto issue | * 190ea1c391 RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx | * 2fa9ee0fd6 RDMA/bnxt_re: Fix a possible memory leak | * fdc977f2e7 dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved() | * f68eff0faf dmaengine: at_xdmac: Move the free desc to the tail of the desc list | * ba0e7ca84a RDMA/hns: Modify the value of long message loopback slice | * 15aeb44199 RDMA/hns: Fix base address table allocation | * b0f40ecc46 RDMA/efa: Fix unsupported page sizes in device | * f370588ec3 RDMA/bnxt_re: Fix the page_size used during the MR creation * | 6720675504 Revert "Revert "binder_alloc: add missing mmap_lock calls when using the VMA"" * | 1b16baaf8b Revert "Revert "android: binder: stop saving a pointer to the VMA"" * | d62b5b7db6 Revert "binder: add lockless binder_alloc_(set|get)_vma()" * | 4bbb48a4fe Revert "binder: fix UAF of alloc->vma in race with munmap()" * | e772cc3c8f Merge 5.15.115 into android14-5.15-lts |\| | * d7af3e5ba4 Linux 5.15.115 | * e226893c93 netfilter: ctnetlink: Support offloaded conntrack entry deletion | * 395d846c61 ipv{4,6}/raw: fix output xfrm lookup wrt protocol | * 1bb8a65190 binder: fix UAF of alloc->vma in race with munmap() | * 1cae0d5136 binder: add lockless binder_alloc_(set|get)_vma() | * dd7aff43d0 Revert "android: binder: stop saving a pointer to the VMA" | * 6802c70090 Revert "binder_alloc: add missing mmap_lock calls when using the VMA" | * 09411f1b86 bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() | * 0f21b86217 xdp: xdp_mem_allocator can be NULL in trace_mem_connect(). | * b6c4afcbd6 irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable | * 13b290f020 page_pool: fix inconsistency for page_pool_ring_[un]lock() | * 3af319d514 net: page_pool: use in_softirq() instead | * 1c097b9db1 xdp: Allow registering memory model without rxq reference | * 623d965c2d net/mlx5e: Fix SQ wake logic in ptp napi_poll context | * 9085886c04 irqchip/mips-gic: Use raw spinlock for gic_lock | * 4517730b4c irqchip/mips-gic: Get rid of the reliance on irq_cpu_online() | * 5fd7c1e36b binder: fix UAF caused by faulty buffer cleanup | * c88d21c0ae bonding: fix send_peer_notif overflow | * 7ee611fc85 Bonding: add arp_missed_max option | * 5b925b48be net: dsa: mt7530: fix network connectivity with multiple CPU ports | * 5a7266feaa net: dsa: mt7530: split-off common parts from mt7531_setup | * 0753c1ef24 net: dsa: mt7530: rework mt753[01]_setup | * 9902f91cf6 net: dsa: introduce helpers for iterating through ports using dp | * d84b42b725 net: phy: mscc: enable VSC8501/2 RGMII RX clock | * 3dce2f3d83 platform/x86: ISST: Remove 8 socket limit | * 017a634f9f platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering | * ff455f7fbc net/mlx5: Devcom, serialize devcom registration | * 69966bce28 net/mlx5e: Fix deadlock in tc route query code | * 1c4e3cf894 net/mlx5: devcom only supports 2 ports | * 79ea1a12fb bpf: fix a memory leak in the LRU and LRU_PERCPU hash maps | * 1f06b2a604 power: supply: bq24190: Call power_supply_changed() after updating input current | * 8c6f881dc1 power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier() | * 1f9367a890 power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize | * 75a7e9de60 power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes | * e4c708a9bb power: supply: bq27xxx: Move bq27xxx_battery_update() down | * 2288fa1ae9 power: supply: bq27xxx: expose battery data when CI=1 * | b5c8629086 Merge branch 'android14-5.15' into 'android14-5.15-lts' * | 7a20f4ad2b Revert "usb: gadget: Properly configure the device for remote wakeup" * | c51cba3cb0 Revert "usb: dwc3: fix gadget mode suspend interrupt handler issue" * | dc7c06dba7 Merge 5.15.114 into android14-5.15-lts |\| | * 0ab06468cb Linux 5.15.114 | * 193c59ba72 net: phy: mscc: add VSC8502 to MODULE_DEVICE_TABLE | * 350b95e86c 3c589_cs: Fix an error handling path in tc589_probe() | * 7c2fa3e56d regulator: mt6359: add read check for PMIC MT6359 | * 28ebfb74fb firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors | * 34b0985ebd arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert delay | * 1e75506536 net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device | * a89a69cea4 net/mlx5: Fix error message when failing to allocate device memory | * e8a974bbf4 net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE | * 5e0cc0d502 net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs | * 792a8233fc net/mlx5e: do as little as possible in napi poll when budget is 0 | * fdf8f33e7d platform/mellanox: mlxbf-pmc: fix sscanf() error checking | * d5ab5447d9 forcedeth: Fix an error handling path in nv_probe() | * ae7c4ec426 sctp: fix an issue that plpmtu can never go to complete state | * ee553694be ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg | * aafa5019e2 x86/show_trace_log_lvl: Ensure stack pointer is aligned, again | * 90314394a1 xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() | * ff151810fb coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() | * 24cf114743 regulator: pca9450: Fix BUCK2 enable_mask | * cd41ec2350 fs: fix undefined behavior in bit shift for SB_NOUSER | * c2f6599109 firmware: arm_ffa: Fix FFA device names for logical partitions | * 6a26c62625 firmware: arm_ffa: Check if ffa_driver remove is present before executing | * f64567bd95 power: supply: sbs-charger: Fix INHIBITED bit for Status reg | * 71a9f146b3 power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status() | * e98e5bebfc power: supply: bq27xxx: Fix poll_interval handling and races on remove | * e01820a94a power: supply: bq27xxx: Fix I2C IRQ race on remove | * d21b344857 power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition | * c530f60e5a power: supply: mt6360: add a check of devm_work_autocancel in mt6360_charger_probe | * 0dd4881238 power: supply: leds: Fix blink to LED on transition | * 5e4bb063dc cifs: mapchars mount option ignored | * 9b92e2d0eb ipv6: Fix out-of-bounds access in ipv6_find_tlv() | * bf478c2643 bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields | * 79081b3f48 octeontx2-pf: Fix TSOv6 offload | * 114657365c selftests: fib_tests: mute cleanup error message | * e06841a2ab net: fix skb leak in __skb_tstamp_tx() | * 8f1512d78b ASoC: lpass: Fix for KASAN use_after_free out of bounds | * b1bde4b436 media: radio-shark: Add endpoint checks | * 43f569fd06 USB: sisusbvga: Add endpoint checks | * da0f4b5576 USB: core: Add routines for endpoint checks in old drivers | * 387bd0a3af udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). | * cf3b5cd712 net: fix stack overflow when LRO is disabled for virtual interfaces | * 9e12c58a5e fbdev: udlfb: Fix endpoint check | * aee97eec77 debugobjects: Don't wake up kswapd from fill_pool() | * c09a7b6190 x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms | * a9ffd42eb9 perf/x86/uncore: Correct the number of CHAs on SPR | * 277f206bb8 parisc: Fix flush_dcache_page() for usage from irq context | * eff115ca94 selftests/memfd: Fix unknown type name build failure | * 1a98b6e028 x86/mm: Avoid incomplete Global INVLPG flushes | * 683bb30c69 dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type | * 647af8a998 btrfs: use nofs when cleaning up aborted transactions | * 7e93fe1d17 gpio: mockup: Fix mode of debugfs files | * 3a2d238c5a parisc: Allow to reboot machine after system halt | * 96f8dd0483 parisc: Handle kgdb breakpoints only in kernel context | * 16deb7413a m68k: Move signal frame following exception on 68020/030 | * 9be921854e net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize | * 1f6ae24e3d ASoC: rt5682: Disable jack detection interrupt during suspend | * 693acaa739 mmc: sdhci-esdhc-imx: make "no-mmc-hs400" works | * 7177586e06 ALSA: hda/realtek: Enable headset onLenovo M70/M90 | * e6a624451a ALSA: hda: Fix unhandled register update during auto-suspend period | * 7716da3fa1 ALSA: hda/ca0132: add quirk for EVGA X299 DARK | * c37eb46c61 arm64: Also reset KASAN tag if page is not PG_mte_tagged | * 291fe3d6f5 ocfs2: Switch to security_inode_init_security() | * 4badd33929 spi: fsl-cpm: Use 16 bit mode for large transfers with even size | * 28ffe8c846 spi: fsl-spi: Re-organise transfer bits_per_word adaptation | * 381e55bffe ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15 | * ca338fa803 watchdog: sp5100_tco: Immediately trigger upon starting. | * 6312c7cc07 dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries | * 7ef9045fe7 dt-bindings: ata: ahci-ceva: convert to yaml | * f191711553 usb: dwc3: fix gadget mode suspend interrupt handler issue | * 7919af1dcb usb: gadget: Properly configure the device for remote wakeup * | 49839eb143 ANDROID: GKI: preserve CRC generation for some bluetooth symbols * | 4c5606f8aa Revert "tipc: add tipc_bearer_min_mtu to calculate min mtu" * | f0cd76bc48 Revert "tipc: do not update mtu if msg_max is too small in mtu negotiation" * | 6fb55b36cd Revert "tipc: check the bearer min mtu properly when setting it by netlink" * | f7240aa50d Revert "firmware: arm_sdei: Fix sleep from invalid context BUG" * | 4a21190782 Revert "ASoC: fsl_micfil: Fix error handler with pm_runtime_enable" * | f373d7e7f5 Merge 5.15.113 into android14-5.15-lts |\| | * 1fe619a7d2 Linux 5.15.113 | * 7de20a23e5 HID: wacom: add three styli to wacom_intuos_get_tool_type | * 25b835d408 HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs | * a540aabefa HID: wacom: Force pen out of prox if no events have been received in a while | * b4c7b54b83 s390/qdio: fix do_sqbs() inline assembly constraint | * b8427b8522 nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() | * cafdd9cefc powerpc/64s/radix: Fix soft dirty tracking | * fe59dd824f tpm/tpm_tis: Disable interrupts for more Lenovo devices | * b9eb4491f0 powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device | * 317ee8c54f ceph: force updating the msg pointer in non-split case | * e3d1adcad5 vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF | * 03e39ec739 thunderbolt: Clear registers properly when auto clear isn't in use | * 742ed5bb68 serial: qcom-geni: fix enabling deactivated interrupt | * 6960267e7d serial: 8250_exar: Add support for USR298x PCI Modems | * 7d8873ecbd serial: Add support for Advantech PCI-1611U card | * 51d90382d2 statfs: enforce statfs[64] structure initialization | * 865be1cff2 ksmbd: fix global-out-of-bounds in smb2_find_context_vals | * 7657321b26 ksmbd: fix wrong UserName check in session_user | * 61e043326e ksmbd: allocate one more byte for implied bcc[0] | * 1c2461b41f ksmbd: smb2: Allow messages padded to 8byte boundary | * 49f4794538 SMB3: drop reference to cfile before sending oplock break | * 653d30a151 SMB3: Close all deferred handles of inode in case of handle lease break | * 972a33e6cc can: kvaser_pciefd: Disable interrupts in probe error path | * 143623940a can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt | * c724a6edc1 can: kvaser_pciefd: Clear listen-only bit if not explicitly requested | * f04628305c can: kvaser_pciefd: Empty SRB buffer in probe | * da711a8af0 can: kvaser_pciefd: Call request_irq() before enabling interrupts | * 4857ccfbe2 can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() | * 9ac2448c24 can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag | * a17cf315f2 can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag | * 83af087604 ALSA: hda/realtek: Add quirk for 2nd ASUS GU603 | * cc1924ab21 ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 | * 3a32c51494 ALSA: hda/realtek: Add quirk for Clevo L140AU | * 059a18e95e ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table | * e8c7d7c43d ALSA: hda: Fix Oops by 9.1 surround channel names | * 831a1ffb0a xhci: Fix incorrect tracking of free space on transfer rings | * 4c5c487069 xhci-pci: Only run d3cold avoidance quirk for s2idle | * fc0e18f95c usb: typec: altmodes/displayport: fix pin_assignment_show | * 0ed9257a8a usb: gadget: u_ether: Fix host MAC address case | * c51a131cac usb: dwc3: debugfs: Resume dwc3 before accessing registers | * 720be29c7d USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value | * 2ef3ecff09 usb-storage: fix deadlock when a scsi command timeouts more than once | * 3b43d9df27 USB: usbtmc: Fix direction for 0-length ioctl control messages | * 15d7441332 ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go | * 62499cf3dd bridge: always declare tunnel functions | * ec5caa765f netfilter: nft_set_rbtree: fix null deref on element insertion | * b0cc763806 netfilter: nf_tables: fix nft_trans type confusion | * addaba6801 vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() | * 3a0450d38a igb: fix bit_shift to be in [1..8] range | * c15c3bb90c net: dsa: mv88e6xxx: Fix mv88e6393x EPC write command offset | * 234e744d86 cassini: Fix a memory leak in the error handling path of cas_init_one() | * 76a7cd047b scsi: storvsc: Don't pass unused PFNs to Hyper-V host | * 05ad5a4d42 wifi: iwlwifi: mvm: don't trust firmware n_channels | * d66490c293 wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock | * fce7d92a89 wifi: mac80211: fix min center freq offset tracing | * fd8bc0f581 net: bcmgenet: Restore phy_stop() depending upon suspend/close | * 99c5acfd1f net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() | * ed1283c46d s390/cio: include subchannels without devices also for evaluation | * 673cb47989 tipc: check the bearer min mtu properly when setting it by netlink | * 575e84d90a tipc: do not update mtu if msg_max is too small in mtu negotiation | * 5cf99d5f65 tipc: add tipc_bearer_min_mtu to calculate min mtu | * 6a7690f2bd virtio_net: Fix error unwinding of XDP initialization | * 18c0bd6888 virtio-net: Maintain reverse cleanup order | * cdd8160dcd net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() | * f51d15d9bc drm/exynos: fix g2d_open/close helper function definitions | * 45a158a212 SUNRPC: Fix trace_svc_register() call site | * 1c28b206ae SUNRPC: always free ctxt when freeing deferred request | * 54832355b0 SUNRPC: Remove svc_rqst::rq_xprt_hlen | * 7a1dca0131 SUNRPC: Remove dead code in svc_tcp_release_rqst() | * 9712097e89 SUNRPC: Clean up svc_deferred_class trace events | * 8c26ecd887 tracing: Introduce helpers to safely handle dynamic-sized sockaddrs | * 7851771789 SUNRPC: double free xprt_ctxt while still in use | * 051af3f0b7 media: netup_unidvb: fix use-after-free at del_timer() | * 8e37baf621 net: hns3: fix reset delay time to avoid configuration timeout | * aaf7c7d844 net: hns3: fix sending pfc frames after reset issue | * 56640004ee net: hns3: fix output information incomplete for dumping tx queue info with debugfs | * 98e9648018 erspan: get the proto with the md version for collect_md | * 5258395e67 serial: 8250_bcm7271: fix leak in `brcmuart_probe` | * cc2f7cee93 serial: 8250_bcm7271: balance clk_enable calls | * f76a18e53a serial: arc_uart: fix of_iomap leak in `arc_serial_probe` | * 15251e783a tcp: fix possible sk_priority leak in tcp_v4_send_reset() | * 2832d62446 vsock: avoid to close connected socket after the timeout | * 2c1617dc6d ALSA: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15 | * bbb5ac533c ALSA: firewire-digi00x: prevent potential use after free | * 81c8431524 net: phy: dp83867: add w/a for packet errors seen with short cables | * c1bc2870f1 net: fec: Better handle pm_runtime_get() failing in .remove() | * b598e76b49 selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test | * 5041897b9f selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test | * d6c89d776b af_key: Reject optional tunnel/BEET mode templates in outbound policies | * 19457a4423 cpupower: Make TSC read per CPU for Mperf monitor | * 3a4ff14b0e ASoC: fsl_micfil: Fix error handler with pm_runtime_enable | * a2e5a77ae3 dt-bindings: display/msm: dsi-controller-main: Document qcom, master-dsi and qcom, sync-dual-dsi | * e1c9c7482e drm/msm/dpu: Remove duplicate register defines from INTF | * 85eb9aef4f drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header | * b688a4115b drm/msm/dpu: Add INTF_5 interrupts | * d8a291e39a drm/msm/dp: unregister audio driver during unbind | * 288247879f Revert "Fix XFRM-I support for nested ESP tunnels" | * 46f1a95354 xfrm: don't check the default policy if the policy allows the packet | * 98f179c5b0 platform/x86: hp-wmi: add micmute to hp_wmi_keymap struct | * a832a43fdd platform/x86: Move existing HP drivers to a new hp subdir | * df14d64b36 platform/x86: hp-wmi: Support touchpad on/off | * 6158e958e8 parisc: Replace regular spinlock with spin_trylock on panic path | * 1fa3fb4f70 mfd: dln2: Fix memory leak in dln2_probe() | * c9faa002ea soundwire: qcom: gracefully handle too many ports in DT | * b61382a825 phy: st: miphy28lp: use _poll_timeout functions for waits | * dc9c54d34d Input: xpad - add constants for GIP interface numbers | * 92c089a931 iommu/sprd: Release dma buffer to avoid memory leak | * a2bc5241ee iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any | * aa50d0a460 clk: tegra20: fix gcc-7 constant overflow warning | * 20f9bfc664 fs/ntfs3: Fix a possible null-pointer dereference in ni_clear() | * 85afd30074 fs/ntfs3: Add length check in indx_get_root | * 2a67f26f70 fs/ntfs3: Validate MFT flags before replaying logs | * d4b7448252 fs/ntfs3: Fix NULL dereference in ni_write_inode | * 1fd5b80c93 fs/ntfs3: Enhance the attribute size check | * 6d3d3283e6 fs/ntfs3: Fix NULL pointer dereference in 'ni_write_inode' | * 8ebcbd1811 iommu/arm-smmu-qcom: Limit the SMR groups to 128 | * 036e02dfd5 RDMA/core: Fix multiple -Warray-bounds warnings | * ff70ad9159 recordmcount: Fix memory leaks in the uwrite function | * f3458b84c6 sched: Fix KCSAN noinstr violation | * 0652b54957 mcb-pci: Reallocate memory region to avoid memory overlapping | * 1ba5594739 serial: 8250: Reinit port->pm on port specific driver unbind | * ee009c2abc usb: typec: tcpm: fix multiple times discover svids error | * 973f84956b HID: wacom: generic: Set battery quirk only when we see battery data | * b2069cfe1b spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 | * 6293d0533c HID: logitech-hidpp: Reconcile USB and Unifying serials | * 3f1719790c HID: logitech-hidpp: Don't use the USB serial for USB devices | * a97e60bd28 staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE | * 116b9c002c Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp | * 392a06f965 Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set | * c018360885 Bluetooth: btintel: Add LE States quirk support | * 7aa14a7a3a ipvs: Update width of source for ip_vs_sync_conn_options | * 52851d0c33 nbd: fix incomplete validation of ioctl arg | * 3d3f8fe01a wifi: ath11k: Fix SKB corruption in REO destination ring | * 87940e4030 wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace | * 35e304dbce null_blk: Always check queue mode setting from configfs | * 82f877ec9b wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf | * 7545f21eee wifi: iwlwifi: pcie: fix possible NULL pointer dereference | * 095018267c bpf: Add preempt_count_{sub,add} into btf id deny list | * e3e6e252d7 samples/bpf: Fix fout leak in hbm's run_bpf_prog | * e2759a59a4 f2fs: fix to check readonly condition correctly | * d8f4ad5f39 f2fs: fix to drop all dirty pages during umount() if cp_error is set | * 613f6cde5e ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() | * bc4a3e1d07 ext4: set goal start correctly in ext4_mb_normalize_request | * 203e8875d2 scsi: ufs: ufs-pci: Add support for Intel Lunar Lake | * 71ee06193e gfs2: Fix inode height consistency check | * e84282efc8 scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition | * c6ed54dd90 lib: cpu_rmap: Avoid use after free on rmap->obj array entries | * 1911cca591 scsi: target: iscsit: Free cmds before session free | * a6f9f53d73 net: Catch invalid index in XPS mapping | * e3644d15d7 net: pasemi: Fix return type of pasemi_mac_start_tx() | * d5eaf2a6b0 bnxt: avoid overflow in bnxt_get_nvram_directory() | * f910374870 scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow | * 99f8a15af6 ext2: Check block size validity during mount | * e242c66f7e wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex | * fe913db2ac bpf: Annotate data races in bpf_local_storage | * aa186074b6 wifi: ath: Silence memcpy run-time false positive warning | * 9f87ee85ce media: Prefer designated initializers over memset for subdev pad ops | * 66acfe798c drm/amd: Fix an out of bounds error in BIOS parser | * d997c920a5 ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects | * 3a7a4aa395 ACPICA: Avoid undefined behavior: applying zero offset to null pointer | * 0aa3d558f1 drm/msm/dp: Clean up handling of DP AUX interrupts | * 33cc6ef106 drm/tegra: Avoid potential 32-bit integer overflow | * 19882a49b2 remoteproc: stm32_rproc: Add mutex protection for workqueue | * f4a573eed6 ACPI: EC: Fix oops when removing custom query handlers | * 66caf22787 firmware: arm_sdei: Fix sleep from invalid context BUG | * 162a9b3215 memstick: r592: Fix UAF bug in r592_remove due to race condition | * dcf632bca4 media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish | * f0a06203f2 media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() | * c127337841 arm64: dts: qcom: msm8996: Add missing DWC3 quirks | * 15856ab956 regmap: cache: Return error in cache sync operations for REGCACHE_NONE | * e9c5fc4f3f drm/amd/display: Use DC_LOG_DC in the trasform pixel function | * 9fd5be74b3 drm/displayid: add displayid_get_header() and check bounds better | * 37cab61a52 fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() | * e30a55e98a rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access | * 718b66c5eb refscale: Move shutdown from wait_event() to wait_event_idle() | * 620a3c2822 ext4: allow ext4_get_group_info() to fail | * 99f7ce0fac ext4: allow to find by goal if EXT4_MB_HINT_GOAL_ONLY is set | * 1de53f2223 ext4: fix lockdep warning when enabling MMP | * c53936d9fb ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled | * 3f937d6615 ext4: reflect error codes from ext4_multi_mount_protect() to its callers | * 1284253ce9 ext4: remove an unused variable warning with CONFIG_QUOTA=n | * 96b3233f42 fbdev: arcfb: Fix error handling in arcfb_probe() | * 33b5890dfa drm/i915/dp: prevent potential div-by-zero | * a41559ae36 af_unix: Fix data races around sk->sk_shutdown. | * 610fd07c13 af_unix: Fix a data race of sk->sk_receive_queue->qlen. | * 62d43dd14b net: datagram: fix data-races in datagram_poll() | * 7c8be27727 ipvlan:Fix out-of-bounds caused by unclear skb->cb | * 3c9d916e39 gve: Remove the code of clearing PBA bit | * 43d938a82e tcp: add annotations around sk->sk_shutdown accesses | * 9dd9ffe118 net: add vlan_get_protocol_and_depth() helper | * 538b511bc5 net: deal with most data-races in sk_wait_event() | * 159a81d5e5 net: annotate sk->sk_err write from do_recvmmsg() | * 1d5c8b01f1 netlink: annotate accesses to nlk->cb_running | * 1a2b27f2d7 netfilter: conntrack: fix possible bug_on with enable_hooks=1 | * 8d56f00c61 netfilter: nf_tables: always release netdev hooks from notifier | * de260d1e02 net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). | * 5f5549b998 net: stmmac: Initialize MAC_ONEUS_TIC_COUNTER register | * b0a513ba5b net: stmmac: switch to use interrupt for hw crosstimestamping | * 46e100be0f linux/dim: Do nothing if no time delta between samples | * 2fdce3e52d tick/broadcast: Make broadcast device replacement work correctly | * 6e455b89f0 scsi: ufs: core: Fix I/O hang that occurs when BKOPS fails in W-LUN suspend | * b614567e0d net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe() | * da3cd1a81d ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings | * ac88a1f41f drm/mipi-dsi: Set the fwnode for mipi_dsi_device * | 5807982cf4 ANDROID: GKI: fix up mhi.ko build location. * | e42a74b5f8 Merge 5.15.112 into android14-5.15-lts |\| | * 9d6bde8536 Linux 5.15.112 | * 0788273bd0 drm/amd/display: Fix hang when skipping modeset | * de9a3ed423 RISC-V: Fix up a cherry-pick warning in setup_vm_final() | * 3c9b08a169 drbd: correctly submit flush bio on barrier | * d0bcf6caa2 serial: 8250: Fix serial8250_tx_empty() race with DMA Tx | * 0b401c2ccc drm/msm/adreno: adreno_gpu: Use suspend() instead of idle() on load error | * 8beaa3cb29 ext4: fix invalid free tracking in ext4_xattr_move_to_block() | * 978e5e9111 ext4: remove a BUG_ON in ext4_mb_release_group_pa() | * 2b3b8f18c0 ext4: bail out of ext4_xattr_ibody_get() fails for any reason | * f22b274429 ext4: add bounds checking in get_max_inline_xattr_value_size() | * 640c8c3659 ext4: fix deadlock when converting an inline directory in nojournal mode | * b253193611 ext4: improve error handling from ext4_dirhash() | * b2f1314e6e ext4: improve error recovery code paths in __ext4_remount() | * 5f7d66e5e5 ext4: check iomap type only if ext4_iomap_begin() does not fail | * f5e687698c ext4: fix data races when using cached status extents | * 6d9a705a65 ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum | * d55e76e115 ext4: fix WARNING in mb_find_extent | * c5c385baee locking/rwsem: Add __always_inline annotation to __down_read_common() and inlined callers | * ed76d3a891 ksmbd: not allow guest user on multichannel | * 4f9baa0667 ksmbd: fix deadlock in ksmbd_find_crypto_ctx() | * bc77a6e933 ksmbd: fix racy issue while destroying session on multichannel | * a89ff57e4d ksmbd: fix kernel oops from idr_remove() | * 876a7e3b58 ksmbd: add channel rwlock | * 05cbc9806a ksmbd: replace sessions list in connection with xarray | * f86a1a74d9 ksmbd: fix multi session connection failure | * bb3b772f18 ksmbd: set RSS capable in FSCTL_QUERY_NETWORK_INTERFACE_INFO | * 2456e2889c wifi: rtw88: rtw8821c: Fix rfe_option field width | * 615aff165b drm/amd/display: Add NULL plane_state check for cursor disable logic | * c11b90aced drm/amd/display: Refine condition of cursor visibility for pipe-split | * bf16debcda drm/msm/adreno: fix runtime PM imbalance at gpu load | * bac00e57cd drm/msm: Remove struct_mutex usage | * 17eeeac92b drm/i915/dg2: Add HDMI pixel clock frequencies 267.30 and 319.89 MHz | * 6d5e6d5a70 drm/i915/dg2: Add additional HDMI pixel clock frequencies | * 06af228515 drm/i915/dg2: Support 4k@30 on HDMI | * a63c6b1eed ASoC: soc-pcm.c: call __soc_pcm_close() in soc_pcm_close() | * aa803e6eca ASoC: DPCM: Don't pick up BE without substream | * 44b685c4ba ASoC: soc-pcm: Move debugfs removal out of spinlock | * 0d5017dea0 ASoC: soc-compress: Inherit atomicity from DAI link for Compress FE | * a536c367b0 ASoC: soc-pcm: Fix DPCM lockdep warning due to nested stream locks | * e2e5b8c729 fs/ntfs3: Refactoring of various minor issues | * 5047a228d4 HID: wacom: insert timestamp to packed Bluetooth (BT) events | * db587340a0 HID: wacom: Set a default resolution for older tablets | * 823787470e drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend | * b39ba90d69 drm/amdgpu: Fix vram recover doesn't work after whole GPU reset (v2) | * cd3c0f7013 drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras | * 6d4b6abedd drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() | * db307e725d drm/amd/display: fix flickering caused by S/G mode | * 61b694b742 drm/panel: otm8009a: Set backlight parent to panel device | * 8f57f3e112 f2fs: fix potential corruption when moving a directory | * e2d1cc82ad drm/msm: fix NULL-deref on irq uninstall | * 8f0e1ad532 drm/msm: fix NULL-deref on snapshot tear down | * 74543041c0 drm/bridge: lt8912b: Fix DSI Video Mode | * 9d79ccd971 ARM: dts: s5pv210: correct MIPI CSIS clock name | * 137259261c ARM: dts: exynos: fix WM8960 clock name in Itop Elite | * eb15fb94d4 remoteproc: imx_rproc: Call of_node_put() on iteration error | * de26e064ed remoteproc: st: Call of_node_put() on iteration error | * 8915e44eb3 remoteproc: stm32: Call of_node_put() on iteration error | * 975b80702f sh: nmi_debug: fix return value of __setup handler | * 66dbc36121 sh: init: use OF_EARLY_FLATTREE for early init | * bb870c4b73 sh: mcount.S: fix build error when PRINTK is not enabled | * be95f9ebaf sh: math-emu: fix macro redefined warning | * 9fdf3666e3 SMB3: force unmount was failing to close deferred close files | * c3a0ae5259 smb3: fix problem remounting a share after shutdown | * 17ad86d8c1 inotify: Avoid reporting event with invalid wd | * e51cd74e32 platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i | * 21de866f75 platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet | * 5af78b437c cifs: release leases for deferred close handles when freezing | * f43b5573cd cifs: fix pcchunk length type in smb2_copychunk_range | * 69dfa5a2e8 btrfs: fix space cache inconsistency after error loading it from disk | * e0710a4979 btrfs: print-tree: parent bytenr must be aligned to sector size | * bcc401bb86 btrfs: zero the buffer before marking it dirty in btrfs_redirty_list_add | * f264be2414 btrfs: don't free qgroup space unless specified | * 29478148bb btrfs: fix encoded write i_size corruption with no-holes | * 91f585024e btrfs: zoned: fix wrong use of bitops API in btrfs_ensure_empty_zones | * 77c6323dad btrfs: fix btrfs_prev_leaf() to not return the same key twice | * b13e20cc58 perf stat: Separate bperf from bpf_profiler | * 2baa45d8f5 perf evlist: Refactor evlist__for_each_cpu() | * 871149abc1 perf symbols: Fix return incorrect build_id size in elf_read_build_id() | * f716374c4e crypto: engine - fix crypto_queue backlog handling | * fa4e304bbd crypto: engine - Use crypto_request_complete | * e7ce4ba116 crypto: api - Add scaffolding to change completion function signature | * a8cc4d5adf crypto: engine - check if BH is disabled during completion | * 7b36a06bac crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs() | * b6e2d1e253 perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() | * 4f128167e6 perf pmu: zfree() expects a pointer to a pointer to zero it after freeing its contents | * e685e2e2bd perf vendor events power9: Remove UTF-8 characters from JSON files | * a6ef72c38c perf scripts intel-pt-events.py: Fix IPC output for Python 2 | * 53f7b55f6b net: enetc: check the index of the SFI rather than the handle | * a0cb00295d virtio_net: suppress cpu stall when free_unused_bufs | * b4e16ea5f1 virtio_net: split free_unused_bufs() | * f495e435e5 net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621 | * dfad4eb4c4 ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` | * 10c5ea3957 drm/amdgpu: add a missing lock for AMDGPU_SCHED | * 54c466c60e af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). | * c177dd465f ionic: catch failure from devlink_alloc | * da81af0ef8 ethtool: Fix uninitialized number of lanes | * 27b0d1b81f ionic: remove noise from ethtool rxnfc error msg | * d37f6a8323 octeontx2-vf: Detach LF resources on probe cleanup | * 00e985958b octeontx2-pf: Disable packet I/O for graceful exit | * b5ad803dec octeontx2-af: Skip PFs if not enabled | * e39148d3d7 octeontx2-af: Secure APR table update with the lock | * a895ab54af rxrpc: Fix hard call timeout units | * f5b44b2a17 sfc: Fix module EEPROM reporting for QSFP modules | * 98a20dcedd r8152: move setting r8153b_rx_agg_chg_indicate() | * 4fbf19a5bd r8152: fix the poor throughput for 2.5G devices | * d0ebe36065 r8152: fix flow control issue of RTL8156A | * 55aeff5361 net/sched: act_mirred: Add carrier check | * 59bf62f0ed RISC-V: mm: Enable huge page support to kernel_page_present() function | * cc4ae807db watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe() | * b36cc1c394 writeback: fix call of incorrect macro | * f98f2ac30f net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu | * 56444f3061 selftests: srv6: make srv6_end_dt46_l3vpn_test more robust | * c5ce7c4517 sit: update dev->needed_headroom in ipip6_tunnel_bind_dev() | * cb145932fc net/sched: cls_api: remove block_cb from driver_list before freeing | * 480577d419 net/ncsi: clear Tx enable mode when handling a Config required AEN | * 5e756a59ce scsi: qedi: Fix use after free bug in qedi_remove() | * fd6204d772 drm/hyperv: Don't overwrite dirt_needed value set by host | * f8d9e062a6 fs/ntfs3: Fix null-ptr-deref on inode->i_op in ntfs_lookup() | * ce30b2f48b ASoC: soc-pcm: fix BE handling of PAUSE_RELEASE | * 74201b3c3e ASoC: soc-pcm: test refcount before triggering | * 2cf8c9f883 ASoC: soc-pcm: serialize BE triggers | * 703ebcf64a ASoC: soc-pcm: Fix and cleanup DPCM locking | * c474bb8000 ASoC: soc-pcm: align BE 'atomicity' with that of the FE | * 13390bea97 ASoC: soc-pcm: use GFP_ATOMIC for dpcm structure | * 25361a0155 mailbox: zynqmp: Fix counts of child nodes | * f9dd36311b mailbox: zynq: Switch to flexible array to simplify code | * 2343385fe6 bus: mhi: host: Range check CHDBOFF and ERDBOFF | * a7561c04ad bus: mhi: host: Use mhi_tryset_pm_state() for setting fw error state | * 7517f62ea0 bus: mhi: host: Remove duplicate ee check for syserr | * 9fbf10148f bus: mhi: Move host MHI code to "host" directory | * 43b2f7d690 ubifs: Fix memory leak in do_rename | * 9933a9086c ubifs: Fix AA deadlock when setting xattr for encrypted file | * 21ad89e197 crypto: ccp - Clear PSP interrupt status register before calling handler | * 93f8b66403 ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus * | bc77a1c78d Revert "uapi/linux/const.h: prefer ISO-friendly __typeof__" * | 87f6012910 Revert "sched: Make struct sched_statistics independent of fair sched class" * | 5390c024c3 Revert "sched: Fix DEBUG && !SCHEDSTATS warn" * | ece8426754 Revert "platform: Provide a remove callback that returns no value" * | 9325fcde01 Revert "media: rcar_fdp1: Convert to platform remove callback returning void" * | c2773262b8 Merge 5.15.111 into android14-5.15-lts |\| | * b0ece631f8 Linux 5.15.111 | * 0a008c5098 sched: Fix DEBUG && !SCHEDSTATS warn | * 21c2a45448 netfilter: nf_tables: deactivate anonymous set from preparation phase | * aa6ff950f8 arm64: dts: qcom: sdm845: correct dynamic power coefficients - again | * 2931ed45bf sound/oss/dmasound: fix 'dmasound_setup' defined but not used | * 503e554782 debugobject: Ensure pool refill (again) | * 6b84832966 perf intel-pt: Fix CYC timestamps after standalone CBR | * 06106efa20 perf auxtrace: Fix address filter entire kernel size | * 11c6fb35df dm: don't lock fs when the map is NULL in process of resume | * e11765cea2 dm ioctl: fix nested locking in table_clear() to remove deadlock concern | * f76fcb9d43 dm flakey: fix a crash with invalid table line | * a5d8c6bf58 dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path | * 56e952ae6d dm clone: call kmem_cache_destroy() in dm_clone_init() error path | * f382705d04 dm verity: fix error handling for check_at_most_once on FEC | * 1821a33bb2 ia64: fix an addr to taddr in huge_pte_offset() | * 3a57c70e9e s390/dasd: fix hanging blockdevice after request requeue | * ed7e8beb20 btrfs: scrub: reject unsupported scrub flags | * 14383698c0 scripts/gdb: fix lx-timerlist for Python3 | * 33383fbe4f clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent | * e8353dea7d wifi: rtl8xxxu: RTL8192EU always needs full init | * 384a0dcac2 mailbox: zynqmp: Fix typo in IPI documentation | * 09206edff0 mailbox: zynqmp: Fix IPI isr handling | * 6d1af51781 mtd: core: fix error path for nvmem provider | * 8444b46e16 mtd: core: fix nvmem error reporting | * 7c253e9868 mtd: core: provide unique name for nvmem device, take two | * 6869508407 md/raid10: fix null-ptr-deref in raid10_sync_request | * 8d07d91196 nilfs2: fix infinite loop in nilfs_mdt_get_block() | * 13f73ef77b nilfs2: do not write dirty data after degenerating to read-only | * ab0748f246 ALSA: usb-audio: Add quirk for Pioneer DDJ-800 | * a87e5b9b4c parisc: Fix argument pointer in real64_call_asm() | * f1b4681cfa afs: Fix updating of i_size with dv jump from server | * 33f302c9bf mfd: tqmx86: Correct board names for TQMxE39x | * ce01b75447 mfd: tqmx86: Specify IO port register range more precisely | * a23b3b2be0 mfd: tqmx86: Do not access I2C_DETECT register through io_base | * 388d2578c7 thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe | * bdcf9fec87 dmaengine: at_xdmac: do not enable all cyclic channels | * a5227b3be8 dmaengine: at_xdmac: Fix race for the tx desc callback | * 2b68028d77 dmaengine: at_xdmac: Fix concurrency over chan's completed_cookie | * 738a4fdbd1 dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing | * fd6316dec2 dmaengine: dw-edma: Fix to change for continuous transfer | * dd23c11136 dma: gpi: remove spurious unlock in gpi_ch_init | * dce3bdaee3 phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port | * 1cccf7c5c7 pwm: mtk-disp: Configure double buffering before reading in .get_state() | * d2798512fa pwm: mtk-disp: Disable shadow registers before setting backlight values | * 8ffa1cb8bc leds: tca6507: Fix error handling of using fwnode_property_read_string | * e63e3a0fc0 dmaengine: mv_xor_v2: Fix an error code. | * 332ca024a8 leds: TI_LMU_COMMON: select REGMAP instead of depending on it | * c904a070d7 pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration | * 40566def18 ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline | * 18eb23891a ext4: fix i_disksize exceeding i_size problem in paritally written case | * 3dc3a86b88 SMB3: Close deferred file handles in case of handle lease break | * 0f87e18203 SMB3: Add missing locks to protect deferred close file list | * b574e73db8 timekeeping: Fix references to nonexistent ktime_get_fast_ns() | * ccfede0a2c openrisc: Properly store r31 to pt_regs on unhandled exceptions | * 1c7456aa5d clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails | * c87c6d5050 RDMA/mlx5: Use correct device num_ports when modify DC | * d2823237da SUNRPC: remove the maximum number of retries in call_bind_status | * c11e44ac1a RDMA/mlx5: Fix flow counter query via DEVX | * 7acad58049 Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe | * b6157a9f0f clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling | * 33f9b8de1b clk: qcom: regmap: add PHY clock source implementation | * 0ccc1a6bac NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease | * a2bd706ab6 IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests | * 6bbc49661c IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order | * 00cc21e32e RDMA/srpt: Add a check for valid 'mad_agent' pointer | * 03b9d26f33 RDMA/cm: Trace icm_send_rej event before the cm state is reset | * 30218b7698 clk: qcom: gcc-sm6115: Mark RCGs shared where applicable | * 5255051c8f RDMA/siw: Remove namespace check from siw_netdev_event() | * 48ba87f6e1 clk: add missing of_node_put() in "assigned-clocks" property parsing | * 3d7c6f2076 power: supply: generic-adc-battery: fix unit scaling | * c58ea97aa9 fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de() | * cd7e1d6792 fs/ntfs3: Fix OOB read in indx_insert_into_buffer | * 952bbfcedb fs/ntfs3: Add check for kmemdup | * 3030f2b9b3 fs/ntfs3: Fix memory leak if ntfs_read_mft failed | * d1faeb14bc rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time | * 9911be2155 RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() | * 44438a4959 rtc: omap: include header for omap_rtc_power_off_program prototype | * 6d19fe968e workqueue: Fix hung time report of worker pools | * 6c073c5a5b workqueue: Introduce show_one_worker_pool and show_one_workqueue. | * e89f95c685 RDMA/rdmavt: Delete unnecessary NULL check | * 9721b14e6c RDMA/siw: Fix potential page_array out of range access | * 8d909684bd clk: at91: clk-sam9x60-pll: fix return value check | * 623941780d sched/rt: Fix bad task migration for rt tasks | * 594d2a0555 Revert "objtool: Support addition to set CFA base" | * 80973ce36f perf/core: Fix hardlockup failure caused by perf throttle | * 3e09b68fc5 sched/fair: Fix inaccurate tally of ttwu_move_affine | * c3b9f95598 sched: Make struct sched_statistics independent of fair sched class | * 6002989848 sched/fair: Use __schedstat_set() in set_next_entity() | * 94bcf94c25 powerpc/rtas: use memmove for potentially overlapping buffer copy | * f7107d44df macintosh: via-pmu-led: requires ATA to be set | * 85842228df powerpc/sysdev/tsi108: fix resource printk format warnings | * 179cc5ab95 powerpc/wii: fix resource printk format warnings | * 516c27922c powerpc/mpc512x: fix resource printk format warning | * da961d510b macintosh/windfarm_smu_sat: Add missing of_node_put() | * 5b9fc529b6 virtio_ring: don't update event idx on get_buf | * ee0b614631 spmi: Add a check for remove callback when removing a SPMI driver | * be267f30b0 staging: rtl8192e: Fix W_DISABLE# does not work after stop/start | * 424cf29296 serial: 8250: Add missing wakeup event reporting | * 8dfd00bfd5 tty: serial: fsl_lpuart: adjust buffer length to the intended size | * 59ecc2cf34 firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe | * ee53a7a880 usb: mtu3: fix kernel panic at qmu transfer done irq handler | * 6b0d399dac usb: chipidea: fix missing goto in `ci_hdrc_probe` | * 6d4325ebd8 usb: gadget: tegra-xudc: Fix crash in vbus_draw | * d96f6bc107 sh: sq: Fix incorrect element size for allocating bitmap buffer | * 397eb669da uapi/linux/const.h: prefer ISO-friendly __typeof__ | * d1c4dedcd2 scripts/gdb: raise error with reduced debugging information | * 2d65599ad1 i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path | * d453f25faf spi: cadence-quadspi: fix suspend-resume implementations | * 6a129c0e99 ASoC: fsl_mqs: move of_node_put() to the correct location | * 8506318455 coresight: etm_pmu: Set the module field | * db6f1b2bba HID: amd_sfh: Add support for shutdown operation | * b711dd0ba9 scripts/gdb: bail early if there are no generic PD | * eaecf281c2 scripts/gdb: bail early if there are no clocks | * 0110bfacff ia64: salinfo: placate defined-but-not-used warning | * 51395777f6 ia64: mm/contig: fix section mismatch warning/error | * 1a2a0d5b06 PCI/EDR: Clear Device Status after EDR error recovery | * cc4f0e168a of: Fix modalias string generation | * 770d30b135 vmci_host: fix a race condition in vmci_host_poll() causing GPF | * 08c7608798 spi: fsl-spi: Fix CPM/QE mode Litte Endian | * f345d4d71e spi: qup: Don't skip cleanup in remove's error path | * 77b0c0dd2c linux/vt_buffer.h: allow either builtin or modular for macros | * af9ec18aa8 ASoC: es8316: Handle optional IRQ assignment | * 39287d16b2 PCI: imx6: Install the fault handler only on compatible match | * 1e58fb6b1c usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition | * f90822ad63 spi: imx: Don't skip cleanup in remove's error path | * e9ded9dd5d spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync | * 193f7fffdc serial: 8250_bcm7271: Fix arbitration handling | * f67cc4929e iio: light: max44009: add missing OF device matching | * 7e42057532 fpga: bridge: fix kernel-doc parameter description | * 72b1ce9045 serial: stm32: Re-assert RTS/DE GPIO in RS485 mode only if more data are transmitted | * 59ed254dd3 serial: stm32: re-introduce an irq flag condition in usart_receive_chars | * 4b7bb1c7be usb: dwc3: gadget: Change condition for processing suspend event | * beb12083c1 usb: host: xhci-rcar: remove leftover quirk handling | * 295f3fcaa8 pstore: Revert pmsg_lock back to a normal mutex | * 2491b999a6 drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() | * 209850f177 drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() | * 1ffb2ca650 ipmi: ASPEED_BT_IPMI_BMC: select REGMAP_MMIO instead of depending on it | * 43e4197dd5 tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. | * 1d2f799c16 net: amd: Fix link leak when verifying config failed | * 5d6e5c054e netlink: Use copy_to_user() for optval in netlink_getsockopt(). | * a789192f36 Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" | * a54ec573d9 ipv4: Fix potential uninit variable access bug in __ip_make_skb() | * d0b43125ec net/sched: sch_fq: fix integer overflow of "credit" | * 7a45b4e1c8 netfilter: nf_tables: don't write table validation state without mutex | * 8913abddad bpf: Don't EFAULT for getsockopt with optval=NULL | * 77f245ce05 net: stmmac:fix system hang when setting up tag_8021q VLAN for DSA ports | * a9e96eef82 net/mlx5: E-switch, Don't destroy indirect table in split rule | * 05cf6f353d ixgbe: Enable setting RSS table to default values | * 624b73f776 ixgbe: Allow flow hash to be set via ethtool | * e302e9ca14 wifi: iwlwifi: fw: fix memory leak in debugfs | * 53b3b1f563 wifi: iwlwifi: mvm: check firmware response size | * aa11a89445 wifi: mt76: mt7921e: improve reliability of dma reset | * f8923ad9dd wifi: mt76: fix 6GHz high channel not be scanned | * 613b51663f wifi: mt76: mt7921e: fix probe timeout after reboot | * 5279aaf9f5 wifi: mt76: add flexible polling wait-interval support | * ac9fec5b56 wifi: mt76: handle failure of vzalloc in mt7615_coredump_work | * 210e6d01cc wifi: iwlwifi: make the loop for card preparation effective | * dff2a7b330 jdb2: Don't refuse invalidation of already invalidated buffers | * 358317ad9c wifi: iwlwifi: fw: move memset before early return | * cccf85e047 wifi: iwlwifi: mvm: initialize seq variable | * b3cecbb257 wifi: iwlwifi: yoyo: Fix possible division by zero | * 4636c35b7e wifi: iwlwifi: yoyo: skip dump correctly on hw error | * 34222897e0 md/raid10: don't call bio_start_io_acct twice for bio which experienced read error | * d6cfcf98b8 md/raid10: fix memleak of md thread | * 7f673fa34c md/raid10: fix memleak for 'conf->bio_split' | * 8d09065802 md/raid10: fix leak of 'r10bio->remaining' for recovery | * 901b4918fa md/raid10: fix task hung in raid10d | * fc04998351 md/raid10: factor out code from wait_barrier() to stop_waiting_barrier() | * 39db562b3f md: raid10 add nowait support | * 74af08efa5 md: drop queue limitation for RAID1 and RAID10 | * 337d1d88be bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap | * 12e70c6f4e selftests/bpf: Fix leaked bpf_link in get_stackid_cannot_attach | * 103a427542 nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage" | * 9fe41e6482 nvme: fix async event trace event | * 13475e6391 nvme: handle the persistent internal error AER | * 30b9073583 nvmet: fix I/O Command Set specific Identify Controller | * 42bcbc2a90 nvmet: fix Identify Active Namespace ID list handling | * 92cf81746e nvmet: fix Identify Controller handling | * ac86d59eaa nvmet: fix Identify Namespace handling | * c7e98afeca nvmet: fix error handling in nvmet_execute_identify_cns_cs_ns() | * 537083b127 nvmet: move the call to nvmet_ns_changed out of nvmet_ns_revalidate | * 080826d167 nvmet: use i_size_read() to set size for file-ns | * f333854dce bpf, sockmap: fix deadlocks in the sockhash and sockmap | * c8a67bc857 net: ethernet: stmmac: dwmac-rk: fix optional phy regulator handling | * fd8c83d837 scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() | * 9a7f63283a f2fs: fix to avoid use-after-free for cached IPU bio | * 119f278ea9 xsk: Fix unaligned descriptor validation | * 1056b20993 crypto: drbg - Only fail when jent is unavailable in FIPS mode | * 9317d66120 crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors | * 80bfd8b184 bpftool: Fix bug for long instructions in program CFG dumps | * afdc3a4bd7 selftests/bpf: Wait for receive in cg_storage_multi test | * c5fa99bce6 selftests: xsk: Disable IPv6 on VETH1 | * c4afd6410f net: qrtr: correct types of trace event parameters | * eb77c0c0a1 wifi: rt2x00: Fix memory leak when handling surveys | * 0b0c3e37a4 wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() | * 0a847af3cb wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() | * 3e660d1175 crypto: sa2ul - Select CRYPTO_DES | * d82d82e037 crypto: caam - Clear some memory in instantiate_rng | * 169134da41 f2fs: compress: fix to call f2fs_wait_on_page_writeback() in f2fs_write_raw_pages() | * d0cf44f06d f2fs: apply zone capacity to all zone type | * 2cc6a05661 f2fs: enforce single zone capacity | * e5a56f13ba f2fs: handle dqget error in f2fs_transfer_project_quota() | * 6d6415e5bc scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS | * eb4cf26d2e scsi: target: iscsit: Fix TAS handling during conn cleanup | * 9158c86fd3 scsi: target: Fix multiple LUN_RESET handling | * ad4a647aa5 net/packet: convert po->auxdata to an atomic flag | * f1a111ca05 net/packet: convert po->origdev to an atomic flag | * c3238c7dbe net/packet: annotate accesses to po->xmit | * 97e7b1c1da vlan: partially enable SIOCSHWTSTAMP in container | * 5f44dfa841 net: pcs: xpcs: remove double-read of link state when using AN | * a7282fc797 bpf: Remove misleading spec_v1 check on var-offset stack read | * 60f9ed23b9 selftests/bpf: Fix a fd leak in an error path in network_helpers.c | * 9b9e803b48 scm: fix MSG_CTRUNC setting condition for SO_PASSSEC | * 670754766a bpf: fix precision propagation verbose logging | * c022b09fcc bpf: take into account liveness when propagating precision | * 23634d119c wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() | * 3fc0be9f48 wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() | * 2ba1e4a623 tools: bpftool: Remove invalid \' json escape | * 484d95c69f wifi: ath6kl: reduce WARN to dev_dbg() in callback | * 19ba40acb1 wifi: brcmfmac: support CQM RSSI notification with older firmware | * 378364abbe wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() | * 59073060fe wifi: ath9k: hif_usb: fix memory leak of remain_skbs | * 104b1b48b6 wifi: ath6kl: minor fix for allocation size | * d1138f118f hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E | * f1d68061b0 cpufreq: use correct unit when verify cur freq | * a55050c798 tick/common: Align tick period with the HZ tick. | * 54202488c8 drm/i915: Make intel_get_crtc_new_encoder() less oopsy | * 500ffa58e7 debugobject: Prevent init race with static objects | * af04d8d3c1 arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step | * 00132fab90 x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() | * ad6481f49f regulator: stm32-pwr: fix of_iomap leak | * b8c2678d0f media: venus: dec: Fix handling of the start cmd | * 2ed8f8c09d media: rc: gpio-ir-recv: Fix support for wake-up | * 4b1afffdd9 drm/amd/display: Fix potential null dereference | * 2322b262d2 media: rcar_fdp1: Fix refcount leak in probe and remove function | * 5847021f80 media: rcar_fdp1: Convert to platform remove callback returning void | * d18789f434 platform: Provide a remove callback that returns no value | * 825281f34b media: rcar_fdp1: Fix the correct variable assignments | * 3c300022c1 media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() | * 2f48c0a463 media: saa7134: fix use after free bug in saa7134_finidev due to race condition | * c94388b5b9 media: dm1105: Fix use after free bug in dm1105_remove due to race condition | * cac0f4f36e media: rkvdec: fix use after free bug in rkvdec_remove | * d991f6139f x86/apic: Fix atomic update of offset in reserve_eilvt_offset() | * 1e3056b806 regulator: core: Avoid lockdep reports when resolving supplies | * 4e5c973818 regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() | * 678b3f29aa drm/ttm/pool: Fix ttm_pool_alloc error path | * b19bebc963 drm/ttm: optimize pool allocations a bit v2 | * 1e26766dc8 arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator | * bee1a28573 arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator | * fb0bea59d0 arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply | * 8853aab167 mailbox: mpfs: switch to txdone_poll | * 623275db28 drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() | * 5a8aedb7b9 ACPI: VIOT: Initialize the correct IOMMU fwspec | * 111af97983 firmware: arm_scmi: Fix xfers allocation on Rx channel | * 657776d47b ARM: dts: gta04: fix excess dma channel usage | * d3047a1b04 drm: rcar-du: Fix a NULL vs IS_ERR() bug | * 3cfaa8713e mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data | * 60cadfcfa4 ACPI: processor: Fix evaluating _PDC method when running as Xen dom0 | * aa8d52ddf7 drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings | * d28ec12c48 drm: msm: adreno: Disable preemption on Adreno 510 | * 2ad781393e drm/msm/adreno: drop bogus pm_runtime_set_active() | * 86c1a99528 drm/msm/adreno: Defer enabling runpm until hw_init() | * 1ad4b8c455 media: max9286: Free control handler | * 3d7003c400 drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 | * a3ea89b597 firmware: qcom_scm: Clear download bit during reboot | * ca4ce92e3e media: av7110: prevent underflow in write_ts_to_decoder() | * 519b084940 media: bdisp: Add missing check for create_workqueue | * 11c58a0c19 x86/MCE/AMD: Use an u64 for bank_map | * 88a9d3c0b5 ARM: dts: qcom: ipq8064: Fix the PCI I/O port range | * 112ff0f253 ARM: dts: qcom: ipq8064: reduce pci IO size to 64K | * 99e7b14569 ARM: dts: qcom: ipq4019: Fix the PCI I/O port range | * 96158bfc76 arm64: dts: qcom: sm8250: Fix the PCI I/O port range | * cc1ae8710a arm64: dts: qcom: msm8996: Fix the PCI I/O port range | * 656657bdeb arm64: dts: qcom: ipq6018: Fix the PCI I/O port range | * a19c40b979 arm64: dts: qcom: ipq8074: Fix the PCI I/O port range | * 9f89689d8b arm64: dts: qcom: msm8998: Fix the PCI I/O port range | * 1611140296 arm64: dts: qcom: sdm845: Fix the PCI I/O port range | * 3e7be9b632 arm64: dts: qcom: sdm845: correct dynamic power coefficients | * a9e9a4a627 arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name | * a46878476c arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename | * 1994284cb9 arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name | * 6ae67829fa arm64: dts: Move BCM4908 dts to bcmbca folder | * fe8ab85ed4 arm64: dts: Add base DTS file for bcmbca device Asus GT-AX6000 | * aefde9ada4 ARM64: dts: Add DTS files for bcmbca SoC BCM6858 | * 273be36e42 arm64: dts: Add DTS files for bcmbca SoC BCM4912 | * fe07b3b5af arm64: dts: Add DTS files for bcmbca SoC BCM63158 | * 77112d23a6 arm64: dts: broadcom: bcm4908: add DT for Netgear RAXE500 | * a53862a202 arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property | * e3143e6cca regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted | * 30b4edaf22 EDAC/skx: Fix overflows on the DRAM row address mapping arrays | * d450fa8657 drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources | * 62cd3e0561 arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table | * 667c86b2a9 arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table | * 6a50350033 soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe | * fb2a6e0029 tools/x86/kcpuid: Fix avx512bw and avx512lvl fields in Fn00000007 | * 00f79abccc drm/probe-helper: Cancel previous job before starting new one | * 9fde84fb59 drm/vgem: add missing mutex_destroy | * a51b71af16 drm/rockchip: Drop unbalanced obj unref | * 0834a2b554 erofs: fix potential overflow calculating xattr_isize | * 060fecf111 erofs: stop parsing non-compact HEAD index if clusterofs is invalid | * 5a37916d98 tpm, tpm_tis: Claim locality when interrupts are reenabled on resume | * 46da635566 tpm, tpm: Implement usage counter for locality | * 51162b05a4 tpm, tpm_tis: Claim locality before writing interrupt registers | * b665edd7a5 tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed | * fd9b4b2bff tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register | * 8c08c74de7 tpm, tpm_tis: Do not skip reset of original interrupt vector | * dfa1e84b77 selinux: ensure av_permissions.h is built when needed | * 8a3a1f7b54 selinux: fix Makefile dependencies of flask.h | * 08e4037057 selftests/resctrl: Check for return value after write_schemata() | * 25661fe5f6 selftests/resctrl: Allow ->setup() to return errors | * b5adaf5045 selftests/resctrl: Move ->setup() call outside of test specific branches | * f9eeea03a5 selftests/resctrl: Extend CPU vendor detection | * ebd40f52de selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem | * 988901984d rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check | * 74f06429b7 sound/oss/dmasound: fix build when drivers are mixed =y/=m | * c628b07d59 xfs: don't consider future format versions valid | * ce84028492 ubifs: Free memory for tmpfile name | * 20ef288612 ubi: Fix return value overwrite issue in try_write_vid_and_data() | * 3ae75f82c3 ubifs: Fix memleak when insert_old_idx() failed | * 149ea56995 Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path" | * dc299bd1d5 iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE | * b7bc8f6c8a tracing: Fix permissions for the buffer_percent file | * b91a5aa1e7 riscv: mm: remove redundant parameter of create_fdt_early_page_table | * ec1814116f i2c: omap: Fix standard mode false ACK readings | * 671f21fbcb ksmbd: fix memleak in session setup | * 227eb2689b ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() | * c053e389db ksmbd: call rcu_barrier() in ksmbd_server_exit() | * 2db4b91480 writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs | * 0b46ee654a relayfs: fix out-of-bounds access in relay_file_read | * a18bdaca46 KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted | * a79fb2ce4f reiserfs: Add security prefix to xattr name in reiserfs_security_write() | * 4c3d1a6720 rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed | * 09e177d6f7 crypto: safexcel - Cleanup ring IRQ workqueues on load failure | * 63b7fbaa12 crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON() | * c63741e872 ring-buffer: Sync IRQ works before buffer destruction | * 333f49fcf0 pinctrl: qcom: lpass-lpi: set output value before enabling output | * 3028ac7dc0 soundwire: qcom: correct setting ignore bit on v1.5.1 | * 01fefb82fd pwm: meson: Fix g12a ao clk81 name | * dcf6611e80 pwm: meson: Fix axg ao mux parents | * 2104e15b00 wifi: mt76: add missing locking to protect against concurrent rx/status calls | * 4a07d2d511 kheaders: Use array declaration instead of char | * 99d561199b ipmi: fix SSIF not responding under certain cond. | * 8fddbd9c5c ipmi:ssif: Add send_retries increment | * 3ef93b7bd9 MIPS: fw: Allow firmware to pass a empty env | * e047e40676 tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem | * 9c0b37d0da xhci: fix debugfs register accesses while suspended | * 321e16a570 tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH | * fa30909fbd staging: iio: resolver: ads1210: fix config mode | * ac44e1275d ext4: use ext4_journal_start/stop for fast commit transactions | * 5bb4005fb6 blk-crypto: make blk_crypto_evict_key() more robust | * f8d9d6c3ff blk-crypto: make blk_crypto_evict_key() return void | * d206f79d9c blk-mq: release crypto keyslot before reporting I/O complete | * 2c62f4abd7 posix-cpu-timers: Implement the missing timer_wait_running callback | * dca7427a8b hwmon: (adt7475) Use device_property APIs when configuring polarity | * d50321946e hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write | * d40fa6f788 USB: dwc3: fix runtime pm imbalance on unbind | * 9436221ea2 USB: dwc3: fix runtime pm imbalance on probe errors | * bfd6936281 IMA: allow/fix UML builds | * c23e103fd7 PCI: qcom: Fix the incorrect register usage in v2.7.0 config | * 8a0b61e5a7 PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock | * 402d2b1d54 arm64: Stash shadow stack pointer in the task struct on interrupt | * 21cc4e5304 arm64: Always load shadow stack pointer directly from the task struct | * a00f75f71f wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset | * a646556769 wireguard: timers: cast enum limits members to int in prints | * 95ec7a59ce x86/cpu: Add model number for Intel Arrow Lake processor | * 5208204006 asm-generic/io.h: suppress endianness warnings for readq() and writeq() | * 5e3c87e4d3 selftests mount: Fix mount_setattr_test builds failed | * e1383b4401 ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 | * 21976532f2 iio: adc: palmas_gpadc: fix NULL dereference on rmmod | * 50015dbdec x86/hyperv: Block root partition functionality in a Confidential VM | * a7d91f67a1 ASoC: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm | * cf5b14b8de ASOC: Intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15 * 547398c9b4 ANDROID: add more gki_module headers to .gitignore file Change-Id: I6ce864f3f76fbb9722003a5a61febd40d9cdf949 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-10-26 17:37:32 +00:00
Paul Lawrence	633bfdda75	ANDROID: fuse-bpf: Align data structs for 32-bit kernels ... BPF is always 64-bit code, so we need to pad the uapi structs to be the same on 32-bit as 64-bit Bug: 285477572 Test: Cuttlefish x86_64, x86 and x86 only all boot and load fuseMedia Change-Id: Idf5b09b2581b8d097048e7d2ff4039cd1806c082 Signed-off-by: Paul Lawrence <paullawrence@google.com>	2023-09-05 21:24:17 +00:00
Greg Kroah-Hartman	5f5a985931	Merge 5.15.124 into android14-5.15-lts ... Changes in 5.15.124 jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint KVM: s390: pv: fix index value of replaced ASCE io_uring: don't audit the capability check in io_uring_create() gpio: tps68470: Make tps68470_gpio_output() always set the initial value pwm: Add a stub for devm_pwmchip_add() gpio: mvebu: Make use of devm_pwmchip_add gpio: mvebu: fix irq domain leak btrfs: fix race between quota disable and relocation i2c: Delete error messages for failed memory allocations i2c: Improve size determinations i2c: nomadik: Remove unnecessary goto label i2c: nomadik: Use devm_clk_get_enabled() i2c: nomadik: Remove a useless call in the remove function PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() PCI/ASPM: Factor out pcie_wait_for_retrain() PCI/ASPM: Avoid link retraining race PCI: rockchip: Remove writes to unused registers PCI: rockchip: Fix window mapping and address translation for endpoint PCI: rockchip: Don't advertise MSI-X in PCIe capabilities dlm: cleanup plock_op vs plock_xop dlm: rearrange async condition return fs: dlm: interrupt posix locks only when process is killed drm/ttm: Don't print error message if eviction was interrupted drm/ttm: Don't leak a resource on eviction error n_tty: Rename tail to old_tail in n_tty_read() tty: fix hang on tty device with no_room set drm/ttm: never consider pinned BOs for eviction&swap cifs: missing directory in MAINTAINERS file cifs: use fs_context for automounts ksmbd: remove internal.h include cifs: if deferred close is disabled then close files immediately pwm: meson: Simplify duplicated per-channel tracking pwm: meson: fix handling of period/duty if greater than UINT_MAX tracing/probes: Add symstr type for dynamic events tracing/probes: Fix to avoid double count of the string length on the array tracing: Allow synthetic events to pass around stacktraces Revert "tracing: Add "(fault)" name injection to kernel probes" tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails scsi: qla2xxx: Remove unused declarations for qla2xxx scsi: qla2xxx: Multi-que support for TMF scsi: qla2xxx: Fix task management cmd failure scsi: qla2xxx: Fix task management cmd fail due to unavailable resource scsi: qla2xxx: Add debug prints in the device remove path scsi: qla2xxx: Fix hang in task management drm/amdgpu: fix vkms crtc settings drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel phy: qcom-snps: Use dev_err_probe() to simplify code phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend phy: qcom-snps-femto-v2: properly enable ref clock soundwire: qcom: update status correctly with mask media: staging: atomisp: select V4L2_FWNODE i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() iavf: fix potential deadlock on allocation failure iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED net: phy: marvell10g: fix 88x3310 power up net: hns3: fix wrong tc bandwidth weight data issue net: hns3: fix wrong bw weight of disabled tc issue vxlan: move to its own directory vxlan: calculate correct header length for GPE phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() ethernet: atheros: fix return value check in atl1e_tso_csum() ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address tcp: Reduce chance of collisions in inet6_hashfn(). ice: Fix memory management in ice_ethtool_fdir.c bonding: reset bond's flags when down link is P2P device team: reset team's flags when down link is P2P device net: stmmac: Apply redundant write work around on 4.xx too platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 igc: Fix Kernel Panic during ndo_tx_timeout callback netfilter: nft_set_rbtree: fix overlap expiration walk netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID net/sched: mqprio: refactor nlattr parsing to a separate function net/sched: mqprio: add extack to mqprio_parse_nlattr() net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64 benet: fix return value check in be_lancer_xmit_workarounds() tipc: check return value of pskb_trim() tipc: stop tipc crypto on failure in tipc_node_create RDMA/mlx4: Make check for invalid flags stricter drm/msm/dpu: drop enum dpu_core_perf_data_bus_id drm/msm/adreno: Fix snapshot BINDLESS_DATA size RDMA/irdma: Add missing read barriers RDMA/irdma: Fix data race on CQP completion stats RDMA/irdma: Fix data race on CQP request done RDMA/mthca: Fix crash when polling CQ for shared QPs RDMA/bnxt_re: Prevent handling any completions after qp destroy drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() ASoC: fsl_spdif: Silence output on stop block: Fix a source code comment in include/uapi/linux/blkzoned.h dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths dm raid: clean up four equivalent goto tags in raid_ctr() dm raid: protect md_stop() with 'reconfig_mutex' drm/amd: Fix an error handling mistake in psp_sw_init() RDMA/irdma: Report correct WC error ata: pata_ns87415: mark ns87560_tf_read static ring-buffer: Fix wrong stat of cpu_buffer->read tracing: Fix warning in trace_buffered_event_disable() Revert "usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init()" usb: gadget: call usb_gadget_check_config() to verify UDC capability USB: gadget: Fix the memory leak in raw_gadget driver KVM: Grab a reference to KVM for VM and vCPU stats file descriptors KVM: VMX: Don't fudge CR0 and CR4 for restricted L2 guest serial: qcom-geni: drop bogus runtime pm state update serial: 8250_dw: Preserve original value of DLF register serial: sifive: Fix sifive_serial_console_setup() section USB: serial: option: support Quectel EM060K_128 USB: serial: option: add Quectel EC200A module support USB: serial: simple: add Kaufmann RKS+CAN VCP USB: serial: simple: sort driver entries can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED Revert "usb: dwc3: core: Enable AutoRetry feature in the controller" usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy usb: dwc3: don't reset device side if dwc3 was configured as host-only usb: ohci-at91: Fix the unhandle interrupt when resume USB: quirks: add quirk for Focusrite Scarlett usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config usb: xhci-mtk: set the dma max_seg_size Revert "usb: xhci: tegra: Fix error check" Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group Documentation: security-bugs.rst: clarify CVE handling staging: r8712: Fix memory leak in _r8712_init_xmit_priv() staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() tty: n_gsm: fix UAF in gsm_cleanup_mux Revert "xhci: add quirk for host controllers that don't update endpoint DCS" ALSA: hda/relatek: Enable Mute LED on HP 250 G8 hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled btrfs: check if the transaction was aborted at btrfs_wait_for_commit() btrfs: check for commit error at btrfs_attach_transaction_barrier() file: always lock position for FMODE_ATOMIC_POS nfsd: Remove incorrect check in nfsd4_validate_stateid tpm_tis: Explicitly check for error code irq-bcm6345-l1: Do not assume a fixed block to cpu mapping irqchip/gic-v4.1: Properly lock VPEs when doing a directLPI invalidation locking/rtmutex: Fix task->pi_waiters integrity KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid virtio-net: fix race between set queues and probe s390/dasd: fix hanging device after quiesce/resume ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register ceph: never send metrics if disable_send_metrics is set dm cache policy smq: ensure IO doesn't prevent cleaner policy progress rbd: make get_lock_owner_info() return a single locker or NULL rbd: harden get_lock_owner_info() a bit rbd: retrieve and check lock owner twice before blocklisting tracing: Fix trace_event_raw_event_synth() if else statement ACPI: processor: perflib: Use the "no limit" frequency QoS ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily cpufreq: intel_pstate: Drop ACPI _PSS states table patching selftests: mptcp: sockopt: use 'iptables-legacy' if available io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq ASoC: cs42l51: fix driver to properly autoload with automatic module loading selftests: mptcp: join: only check for ip6tables if needed Linux 5.15.124 Change-Id: Ifeb2357cc7522671aff42c1408cc917a0f1aa905 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-08-25 16:54:16 +00:00
Greg Kroah-Hartman	9f5bde3ccf	Merge 5.15.121 into android14-5.15-lts ... Changes in 5.15.121 netfilter: nf_tables: drop map element references from preparation phase fs: pipe: reveal missing function protoypes x86/resctrl: Only show tasks' pid in current pid namespace blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost md/raid10: check slab-out-of-bounds in md_bitmap_get_counter md/raid10: fix overflow of md/safe_mode_delay md/raid10: fix wrong setting of max_corr_read_errors md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request md/raid10: fix io loss while replacement replace rdev irqchip/jcore-aic: Fix missing allocation of IRQ descriptors svcrdma: Prevent page release when nothing was received posix-timers: Prevent RT livelock in itimer_delete() tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode(). clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe PM: domains: fix integer overflow issues in genpd_parse_state() perf/arm-cmn: Fix DTC reset powercap: RAPL: Fix CONFIG_IOSF_MBI dependency ARM: 9303/1: kprobes: avoid missing-declaration warnings cpufreq: intel_pstate: Fix energy_performance_preference for passive thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() rcutorture: Correct name of use_softirq module parameter rcuscale: Always log error message rcuscale: Move shutdown from wait_event() to wait_event_idle() rcu/rcuscale: Move rcu_scale_*() after kfree_scale_cleanup() rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined perf/ibs: Fix interface via core pmu events x86/mm: Fix __swp_entry_to_pte() for Xen PV guests locking/atomic: arm: fix sync ops evm: Complete description of evm_inode_setattr() evm: Fix build warnings ima: Fix build warnings pstore/ram: Add check for kstrdup igc: Enable and fix RX hash usage by netstack wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx libbpf: btf_dump_type_data_check_overflow needs to consider BTF_MEMBER_BITFIELD_SIZE samples/bpf: Fix buffer overflow in tcp_basertt spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG wifi: wilc1000: fix for absent RSN capabilities WFA testcase wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() sctp: add bpf_bypass_getsockopt proto callback libbpf: fix offsetof() and container_of() to work with CO-RE bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen spi: dw: Round of n_bytes to power of 2 nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() bpftool: JIT limited misreported as negative value on aarch64 regulator: core: Fix more error checking for debugfs_create_dir() regulator: core: Streamline debugfs operations wifi: orinoco: Fix an error handling path in spectrum_cs_probe() wifi: orinoco: Fix an error handling path in orinoco_cs_probe() wifi: atmel: Fix an error handling path in atmel_probe() wl3501_cs: use eth_hw_addr_set() wifi: wl3501_cs: Fix an error handling path in wl3501_probe() wifi: ray_cs: Utilize strnlen() in parse_addr() wifi: ray_cs: Drop useless status variable in parse_addr() wifi: ray_cs: Fix an error handling path in ray_probe() wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes selftests/bpf: Fix check_mtu using wrong variable type wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config watchdog/perf: more properly prevent false positives with turbo modes kexec: fix a memory leak in crash_shrink_memory() memstick r592: make memstick_debug_get_tpc_name() static wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO wifi: iwlwifi: pull from TXQs with softirqs disabled iwlwifi: don't dump_stack() when we get an unexpected interrupt wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() wifi: cfg80211: rewrite merging of inherited elements wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection wifi: ath9k: convert msecs to jiffies where needed bpf: Omit superfluous address family check in __bpf_skc_lookup bpf: Factor out socket lookup functions for the TC hookpoint. bpf: Call __bpf_sk_lookup()/__bpf_skc_lookup() directly via TC hookpoint bpf: Fix bpf socket lookup from tc/xdp to respect socket VRF bindings can: length: fix bitstuffing count igc: Fix race condition in PTP tx code net: stmmac: fix double serdes powerdown netlink: fix potential deadlock in netlink_set_err() netlink: do not hard code device address lenth in fdb dumps bonding: do not assume skb mac_header is set selftests: rtnetlink: remove netdevsim device after ipsec offload test gtp: Fix use-after-free in __gtp_encap_destroy(). net: axienet: Move reset before 64-bit DMA detection sfc: fix crash when reading stats while NIC is resetting nfc: llcp: simplify llcp_sock_connect() error paths net: nfc: Fix use-after-free caused by nfc_llcp_find_local lib/ts_bm: reset initial match offset for every block of text netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. ipvlan: Fix return value of ipvlan_queue_xmit() netlink: Add __sock_i_ino() for __netlink_diag_dump(). drm/amd/display: Add logging for display MALL refresh setting radeon: avoid double free in ci_dpm_init() drm/amd/display: Explicitly specify update type per plane info change Input: drv260x - sleep between polling GO bit drm/bridge: tc358768: always enable HS video mode drm/bridge: tc358768: fix PLL parameters computation drm/bridge: tc358768: fix PLL target frequency drm/bridge: tc358768: fix TCLK_ZEROCNT computation drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation drm/bridge: tc358768: fix TCLK_TRAILCNT computation drm/bridge: tc358768: fix THS_ZEROCNT computation drm/bridge: tc358768: fix TXTAGOCNT computation drm/bridge: tc358768: fix THS_TRAILCNT computation drm/vram-helper: fix function names in vram helper doc ARM: dts: BCM5301X: Drop "clock-names" from the SPI node ARM: dts: meson8b: correct uart_B and uart_C clock references Input: adxl34x - do not hardcode interrupt trigger type drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` drm/panel: sharp-ls043t1le01: adjust mode settings ARM: dts: stm32: Move ethernet MAC EEPROM from SoM to carrier boards bus: ti-sysc: Fix dispc quirk masking bool variables arm64: dts: microchip: sparx5: do not use PSCI on reference boards clk: imx: scu: use _safe list iterator to avoid a use after free RDMA/bnxt_re: Disable/kill tasklet only if it is enabled RDMA/bnxt_re: Fix to remove unnecessary return labels RDMA/bnxt_re: Use unique names while registering interrupts RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid RDMA/bnxt_re: Fix to remove an unnecessary log drm/msm/dsi: don't allow enabling 14nm VCO with unprogrammed rate drm/msm/disp/dpu: get timing engine status from intf status register drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK ARM: dts: gta04: Move model property out of pinctrl node arm64: dts: qcom: msm8916: correct camss unit address arm64: dts: qcom: msm8994: correct SPMI unit address arm64: dts: qcom: msm8996: correct camss unit address arm64: dts: qcom: sdm630: correct camss unit address arm64: dts: qcom: sdm845: correct camss unit address arm64: dts: qcom: db820c: Move blsp1_uart2 pin states to msm8996.dtsi arm64: dts: qcom: apq8016-sbc: Update modem and WiFi firmware path arm64: dts: qcom: apq8016-sbc: Clarify firmware-names arm64: dts: qcom: apq8016-sbc: fix mpps state names arm64: dts: qcom: Drop unneeded extra device-specific includes arm64: dts: qcom: apq8016-sbc: Fix regulator constraints arm64: dts: qcom: apq8016-sbc: Fix 1.8V power rail on LS expansion drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H ARM: ep93xx: fix missing-prototype warnings ARM: omap2: fix missing tick_broadcast() prototype arm64: dts: qcom: apq8096: fix fixed regulator name property arm64: dts: mediatek: mt8183: Add mediatek,broken-save-restore-fw to kukui ARM: dts: stm32: Shorten the AV96 HDMI sound card name memory: brcmstb_dpfe: fix testing array offset after use ASoC: es8316: Increment max value for ALC Capture Target Volume control ASoC: es8316: Do not set rate constraints for unsupported MCLKs ARM: dts: meson8: correct uart_B and uart_C clock references soc/fsl/qe: fix usb.c build errors RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes IB/hfi1: Use bitmap_zalloc() when applicable IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate RDMA/hns: Fix hns_roce_table_get return value ARM: dts: iwg20d-q7-common: Fix backlight pwm specifier arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() arm64: dts: ti: k3-j7200: Fix physical address of pin ARM: dts: stm32: Fix audio routing on STM32MP15xx DHCOM PDK2 ARM: dts: stm32: fix i2s endpoint format property for stm32mp15xx-dkx hwmon: (gsc-hwmon) fix fan pwm temperature scaling hwmon: (adm1275) Allow setting sample averaging hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 ARM: dts: BCM5301X: fix duplex-full => full-duplex drm/amdkfd: Fix potential deallocation of previously deallocated memory. drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode drm/radeon: fix possible division-by-zero errors amdgpu: validate offset_in_bo of drm_amdgpu_gem_va drm/msm/a5xx: really check for A510 in a5xx_gpu_init RDMA/bnxt_re: wraparound mbox producer index RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() arm64: dts: qcom: sm8250-edo: Panel framebuffer is 2.5k instead of 4k clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider() clk: tegra: tegra124-emc: Fix potential memory leak ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer drm/msm/dpu: do not enable color-management if DSPPs are not available drm/msm/dp: Free resources after unregistering them arm64: dts: mediatek: Add cpufreq nodes for MT8192 arm64: dts: mediatek: mt8192: Fix CPUs capacity-dmips-mhz drm/msm/dpu: correct MERGE_3D length clk: vc5: check memory returned by kasprintf() clk: cdce925: check return value of kasprintf() clk: si5341: return error if one synth clock registration fails clk: si5341: check return value of {devm_}kasprintf() clk: si5341: free unused memory on probe failure clk: keystone: sci-clk: check return value of kasprintf() clk: ti: clkctrl: check return value of kasprintf() drivers: meson: secure-pwrc: always enable DMA domain ovl: update of dentry revalidate flags after copy up ASoC: imx-audmix: check return value of devm_kasprintf() clk: Fix memory leak in devm_clk_notifier_register() PCI: cadence: Fix Gen2 Link Retraining process PCI: vmd: Reset VMD config register between soft reboots scsi: qedf: Fix NULL dereference in error handling pinctrl: bcm2835: Handle gpiochip_add_pin_range() errors PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() PCI: pciehp: Cancel bringup sequence if card is not present PCI: ftpci100: Release the clock resources PCI: Add pci_clear_master() stub for non-CONFIG_PCI perf bench: Use unbuffered output when pipe/tee'ing to a file perf bench: Add missing setlocale() call to allow usage of %'d style formatting pinctrl: cherryview: Return correct value if pin in push-pull mode kcsan: Don't expect 64 bits atomic builtins from 32 bits architectures powerpc/interrupt: Don't read MSR from interrupt_exit_kernel_prepare() powerpc/signal32: Force inlining of __unsafe_save_user_regs() and save_tm_user_regs_unsafe() perf script: Fix allocation of evsel->priv related to per-event dump files perf dwarf-aux: Fix off-by-one in die_get_varname() powerpc/64s: Fix VAS mm use after free pinctrl: microchip-sgpio: check return value of devm_kasprintf() pinctrl: at91-pio4: check return value of devm_kasprintf() powerpc/powernv/sriov: perform null check on iov before dereferencing iov powerpc: simplify ppc_save_regs powerpc: update ppc_save_regs to save current r1 in pt_regs riscv: uprobes: Restore thread.bad_cause powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary hwrng: virtio - add an internal buffer hwrng: virtio - don't wait on cleanup hwrng: virtio - don't waste entropy hwrng: virtio - always add a pending request hwrng: virtio - Fix race on data_avail and actual data modpost: remove broken calculation of exception_table_entry size crypto: nx - fix build warnings when DEBUG_FS is not enabled modpost: fix section mismatch message for R_ARM_ABS32 modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} crypto: marvell/cesa - Fix type mismatch warning modpost: fix off by one in is_executable_section() ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard crypto: qat - honor CRYPTO_TFM_REQ_MAY_SLEEP flag crypto: qat - replace get_current_node() with numa_node_id() crypto: qat - use reference to structure in dma_map_single() crypto: kpp - Add helper to set reqsize crypto: qat - Use helper to set reqsize crypto: qat - unmap buffer before free for DH crypto: qat - unmap buffers before free for RSA NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION SMB3: Do not send lease break acknowledgment if all file handles have been closed dax: Fix dax_mapping_release() use after free dax: Introduce alloc_dev_dax_id() dax/kmem: Pass valid argument to memory_group_register_static hwrng: st - keep clock enabled while hwrng is registered kbuild: Disable GCOV for *.mod.o efi/libstub: Disable PCI DMA before grabbing the EFI memory map ksmbd: avoid field overflow warning ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page io_uring: ensure IOPOLL locks around deferred work USB: serial: option: add LARA-R6 01B PIDs usb: dwc3: gadget: Propagate core init errors to UDC during pullup phy: tegra: xusb: Clear the driver reference in usb-phy dev iio: adc: ad7192: Fix null ad7192_state pointer access iio: adc: ad7192: Fix internal/external clock selection iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF iio: accel: fxls8962af: fixup buffer scan element type ALSA: hda/realtek: Add quirk for Clevo NPx0SNx ALSA: jack: Fix mutex call in snd_jack_report() block: fix signed int overflow in Amiga partition support block: add overflow checks for Amiga partition support block: change all __u32 annotations to __be32 in affs_hardblocks.h block: increment diskseq on all media change events SUNRPC: Fix UAF in svc_tcp_listen_data_ready() w1: w1_therm: fix locking behavior in convert_t w1: fix loop in w1_fini() sh: j2: Use ioremap() to translate device tree address into kernel memory usb: dwc2: platform: Improve error reporting for problems during .remove() usb: dwc2: Fix some error handling paths serial: 8250: omap: Fix freeing of resources on failed register clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks media: usb: Check az6007_read() return value media: videodev2.h: Fix struct v4l2_input tuner index comment media: usb: siano: Fix warning due to null work_func_t function pointer media: i2c: Correct format propagation for st-mipid02 clk: qcom: reset: Allow specifying custom reset delay clk: qcom: reset: support resetting multiple bits clk: qcom: ipq6018: fix networking resets usb: dwc3: qcom: Fix potential memory leak usb: gadget: u_serial: Add null pointer check in gserial_suspend extcon: Fix kernel doc of property fields to avoid warnings extcon: Fix kernel doc of property capability fields to avoid warnings usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() usb: hide unused usbfs_notify_suspend/resume functions serial: 8250: lock port for stop_rx() in omap8250_irq() serial: 8250: lock port for UART_IER access in omap8250_irq() kernfs: fix missing kernfs_idr_lock to remove an ID from the IDR coresight: Fix loss of connection info when a module is unloaded mfd: rt5033: Drop rt5033-battery sub-device media: venus: helpers: Fix ALIGN() of non power of two media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() usb: common: usb-conn-gpio: Set last role to unknown before initial detection usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() mfd: intel-lpss: Add missing check for platform_get_resource Revert "usb: common: usb-conn-gpio: Set last role to unknown before initial detection" serial: 8250_omap: Use force_suspend and resume for system suspend test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation nvmem: rmem: Use NVMEM_DEVID_AUTO mfd: stmfx: Fix error path in stmfx_chip_init mfd: stmfx: Nullify stmfx->vdd in case of error KVM: s390: vsie: fix the length of APCB bitmap KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler mfd: stmpe: Only disable the regulators if they are enabled phy: tegra: xusb: check return value of devm_kzalloc() pwm: imx-tpm: force 'real_period' to be zero in suspend pwm: sysfs: Do not apply state to already disabled PWMs pwm: ab8500: Fix error code in probe() pwm: mtk_disp: Fix the disable flow of disp_pwm md/raid10: fix the condition to call bio_end_io_acct() rtc: st-lpc: Release some resources in st_rtc_probe() in case of error drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times media: cec: i2c: ch7322: also select REGMAP sctp: fix potential deadlock on &net->sctp.addr_wq_lock net/sched: act_ipt: add sanity checks on table name and hook locations Add MODULE_FIRMWARE() for FIRMWARE_TG357766. ibmvnic: Do not reset dql stats on NON_FATAL err net: dsa: vsc73xx: fix MTU configuration spi: bcm-qspi: return error if neither hif_mspi nor mspi is available mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 f2fs: fix error path handling in truncate_dnode() octeontx2-af: Fix mapping for NIX block from CGX connection octeontx2-af: Add validation before accessing cgx and lmac ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr() powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode tcp: annotate data races in __tcp_oow_rate_limited() xsk: Honor SO_BINDTODEVICE on bind net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX riscv: move memblock_allow_resize() after linear mapping is ready pptp: Fix fib lookup calls. net: dsa: tag_sja1105: fix MAC DA patching from meta frames octeontx-af: fix hardware timestamp configuration s390/qeth: Fix vipa deletion sh: dma: Fix DMA channel offset calculation apparmor: fix missing error check for rhashtable_insert_fast i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() i2c: xiic: Don't try to handle more interrupt events after error extcon: usbc-tusb320: Convert to i2c's .probe_new() btrfs: do not BUG_ON() on tree mod log failure at balance_level() i2c: qup: Add missing unwind goto in qup_i2c_probe() NFSD: add encoding of op_recall flag for write delegation io_uring: wait interruptibly for request completions on exit mmc: core: disable TRIM on Kingston EMMC04G-M627 mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used. bcache: fixup btree_cache_wait list damage bcache: Remove unnecessary NULL point check in node allocations bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent um: Use HOST_DIR for mrproper integrity: Fix possible multiple allocation in integrity_inode_get() autofs: use flexible array in ioctl structure shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs ext4: Remove ext4 locking of moved directory Revert "f2fs: fix potential corruption when moving a directory" fs: Establish locking order for unrelated directories fs: Lock moved directories ipvs: increase ip_vs_conn_tab_bits range for 64BIT jffs2: reduce stack usage in jffs2_build_xattr_subsystem() fs: avoid empty option when generating legacy mount string btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile btrfs: delete unused BGs while reclaiming BGs btrfs: bail out reclaim process if filesystem is read-only btrfs: reinsert BGs failed to reclaim btrfs: fix race when deleting quota root from the dirty cow roots list btrfs: fix extent buffer leak after tree mod log failure at split_node() btrfs: do not BUG_ON() on tree mod log failure at __btrfs_cow_block() ASoC: mediatek: mt8173: Fix irq error path ASoC: mediatek: mt8173: Fix snd_soc_component_initialize error path ARM: dts: qcom: ipq4019: fix broken NAND controller properties override ARM: orion5x: fix d2net gpio initialization leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename fs: no need to check source ovl: fix null pointer dereference in ovl_get_acl_rcu() fanotify: disallow mount/sb marks on kernel internal pseudo fs netfilter: nf_tables: unbind non-anonymous set if rule construction fails netfilter: conntrack: Avoid nf_ct_helper_hash uses after free netfilter: nf_tables: do not ignore genmask when looking up chain by id netfilter: nf_tables: prevent OOB access in nft_byteorder_eval wireguard: queueing: use saner cpu selection wrapping wireguard: netlink: send staged packets when setting initial private key tty: serial: fsl_lpuart: add earlycon for imx8ulp platform block/partition: fix signedness issue for Amiga partitions io_uring: Use io_schedule* in cqring wait io_uring: add reschedule point to handle_tw_list() net: lan743x: Don't sleep in atomic context workqueue: clean up WORK_* constant types, clarify masking ksmbd: use ksmbd_req_buf_next() in ksmbd_smb2_check_message() ksmbd: validate command payload size ksmbd: fix out-of-bound read in smb2_write ksmbd: validate session id and tree id in the compound request drm/panel: simple: Add connector_type for innolux_at043tn24 drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags igc: Remove delay during TX ring configuration net/mlx5e: fix double free in mlx5e_destroy_flow_table net/mlx5e: fix memory leak in mlx5e_ptp_open net/mlx5e: Check for NOT_READY flag state after locking igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings igc: Handle PPS start time programming for past time values scsi: qla2xxx: Fix error code in qla2x00_start_sp() bpf: Fix max stack depth check for async callbacks net: mvneta: fix txq_map in case of txq_number==1 net/sched: cls_fw: Fix improper refcount update leads to use-after-free gve: Set default duplex configuration to full ionic: remove WARN_ON to prevent panic_on_warn net: bgmac: postpone turning IRQs off to avoid SoC hangs net: prevent skb corruption on frag list segmentation icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). udp6: fix udp6_ehashfn() typo ntb: idt: Fix error handling in idt_pci_driver_init() NTB: amd: Fix error handling in amd_ntb_pci_driver_init() ntb: intel: Fix error handling in intel_ntb_pci_driver_init() NTB: ntb_transport: fix possible memory leak while device_register() fails NTB: ntb_tool: Add check for devm_kcalloc ipv6/addrconf: fix a potential refcount underflow for idev platform/x86: wmi: remove unnecessary argument platform/x86: wmi: use guid_t and guid_equal() platform/x86: wmi: move variables platform/x86: wmi: Break possible infinite loop when parsing GUID kernel/trace: Fix cleanup logic of enable_trace_eprobe igc: Fix launchtime before start of cycle igc: Fix inserting of empty frame for launchtime bpf, riscv: Support riscv jit to provide bpf_line_info riscv, bpf: Fix inconsistent JIT image generation drm/i915: Fix one wrong caching mode enum usage octeontx2-pf: Add additional check for MCAM rules erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF erofs: decouple basic mount options from fs_context erofs: fix fsdax unavailability for chunk-based regular files wifi: airo: avoid uninitialized warning in airo_get_rate() bpf: cpumap: Fix memory leak in cpu_map_update_elem net/sched: flower: Ensure both minimum and maximum ports are specified riscv: mm: fix truncation warning on RV32 netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write() net/sched: make psched_mtu() RTNL-less safe net/sched: sch_qfq: refactor parsing of netlink parameters net/sched: sch_qfq: account for stab overhead in qfq_enqueue nvme-pci: remove nvme_queue from nvme_iod nvme-pci: fix DMA direction of unmapping integrity data fs/ntfs3: Check fields while reading f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() pinctrl: amd: Fix mistake in handling clearing pins at startup pinctrl: amd: Detect internal GPIO0 debounce handling pinctrl: amd: Detect and mask spurious interrupts pinctrl: amd: Only use special debounce behavior for GPIO 0 tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation mtd: rawnand: meson: fix unaligned DMA buffers handling net: bcmgenet: Ensure MDIO unregistration has clocks enabled mm/damon/ops-common: atomically test and clear young on ptes and pmds powerpc: Fail build if using recordmcount with binutils v2.37 misc: fastrpc: Create fastrpc scalar with correct buffer count powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 arm64: errata: Add detection for TRBE overwrite in FILL mode erofs: fix compact 4B support for 16k block size MIPS: Loongson: Fix cpu_probe_loongson() again MIPS: KVM: Fix NULL pointer dereference ext4: Fix reusing stale buffer heads from last failed mounting ext4: fix wrong unit use in ext4_mb_clear_bb ext4: get block from bh in ext4_free_blocks for fast commit replay ext4: fix wrong unit use in ext4_mb_new_blocks ext4: fix to check return value of freeze_bdev() in ext4_shutdown() ext4: turn quotas off if mount failed after enabling quotas ext4: only update i_reserved_data_blocks on successful block allocation jfs: jfs_dmap: Validate db_l2nbperpage while mounting hwrng: imx-rngc - fix the timeout for init and self check dm integrity: reduce vmalloc space footprint on 32-bit architectures PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 PCI: qcom: Disable write access to read only registers for IP v2.3.3 PCI: rockchip: Assert PCI Configuration Enable bit after probe PCI: rockchip: Write PCI Device ID to correct register PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core PCI: rockchip: Use u32 variable to access 32-bit registers PCI: rockchip: Set address alignment for endpoint mode misc: pci_endpoint_test: Free IRQs before removing the device misc: pci_endpoint_test: Re-init completion for every test mfd: pm8008: Fix module autoloading md/raid0: add discard support for the 'original' layout dm init: add dm-mod.waitfor to wait for asynchronously probed block devices fs: dlm: return positive pid value for F_GETLK drm/atomic: Allow vblank-enabled + self-refresh "disable" drm/rockchip: vop: Leave vblank enabled in self-refresh drm/amdgpu: fix clearing mappings for BOs that are always valid in VM drm/amd/display: Correct `DMUB_FW_VERSION` macro drm/amdgpu: avoid restore process run into dead loop. drm/ttm: Don't leak a resource on swapout move error serial: atmel: don't enable IRQs prematurely tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk tty: serial: imx: fix rs485 rx after tx firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() libceph: harden msgr2.1 frame segment length checks ceph: don't let check_caps skip sending responses for revoke msgs xhci: Fix resume issue of some ZHAOXIN hosts xhci: Fix TRB prefetch issue of ZHAOXIN hosts xhci: Show ZHAOXIN xHCI root hub speed correctly meson saradc: fix clock divider mask length opp: Fix use-after-free in lazy_opp_tables after probe deferral soundwire: qcom: fix storing port config out-of-bounds Revert "8250: add support for ASIX devices with a FIFO bug" bus: ixp4xx: fix IXP4XX_EXP_T1_MASK s390/decompressor: fix misaligned symbol build error tracing/histograms: Add histograms to hist_vars if they have referenced variables tracing: Fix memory leak of iter->temp when reading trace_pipe samples: ftrace: Save required argument registers in sample trampolines net: ena: fix shift-out-of-bounds in exponential backoff ring-buffer: Fix deadloop issue on reading trace_pipe ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() xtensa: ISS: fix call to split_if_spec tracing: Fix null pointer dereference in tracing_err_log_open() selftests: mptcp: sockopt: return error if wrong mark selftests: mptcp: depend on SYN_COOKIES tracing/probes: Fix not to count error code to total length tracing/probes: Fix to update dynamic data counter if fetcharg uses it scsi: qla2xxx: Wait for io return on terminate rport scsi: qla2xxx: Array index may go out of bound scsi: qla2xxx: Avoid fcport pointer dereference scsi: qla2xxx: Fix buffer overrun scsi: qla2xxx: Fix potential NULL pointer dereference scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() scsi: qla2xxx: Correct the index of array scsi: qla2xxx: Pointer may be dereferenced scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue MIPS: kvm: Fix build error with KVM_MIPS_DEBUG_COP0_COUNTERS enabled net/sched: sch_qfq: reintroduce lmax bound check for MTU drm/atomic: Fix potential use-after-free in nonblocking commits Linux 5.15.121 Note, this merges away commit e4e7f67cc1 ("arm64: errata: Add detection for TRBE overwrite in FILL mode") as it causes ABI issues. If that is to be needed for this branch, it can come back later in an ABI-safe way. It also merges away commit 7eeed3ed1a ("mm/damon/ops-common: atomically test and clear young on ptes and pmds") as it had too many merge conflicts. If that is needed in a future release it needs to be added as a proper BACKPORT. Change-Id: Ie91971a85cbb2672e9d2ef1d90814817697ca7b3 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-08-03 18:15:58 +00:00
Bart Van Assche	4b9f3ef1f3	block: Fix a source code comment in include/uapi/linux/blkzoned.h ... [ Upstream commit e0933b526f ] Fix the symbolic names for zone conditions in the blkzoned.h header file. Cc: Hannes Reinecke <hare@suse.de> Cc: Damien Le Moal <dlemoal@kernel.org> Fixes: 6a0cb1bc10 ("block: Implement support for zoned block devices") Signed-off-by: Bart Van Assche <bvanassche@acm.org> Reviewed-by: Damien Le Moal <dlemoal@kernel.org> Link: https://lore.kernel.org/r/20230706201422.3987341-1-bvanassche@acm.org Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-08-03 10:22:38 +02:00
Arnd Bergmann	17bdba70a8	autofs: use flexible array in ioctl structure ... commit e910c8e3aa upstream. Commit df8fc4e934 ("kbuild: Enable -fstrict-flex-arrays=3") introduced a warning for the autofs_dev_ioctl structure: In function 'check_name', inlined from 'validate_dev_ioctl' at fs/autofs/dev-ioctl.c:131:9, inlined from '_autofs_dev_ioctl' at fs/autofs/dev-ioctl.c:624:8: fs/autofs/dev-ioctl.c:33:14: error: 'strchr' reading 1 or more bytes from a region of size 0 [-Werror=stringop-overread] 33 | if (!strchr(name, '/')) | ^~~~~~~~~~~~~~~~~ In file included from include/linux/auto_dev-ioctl.h:10, from fs/autofs/autofs_i.h:10, from fs/autofs/dev-ioctl.c:14: include/uapi/linux/auto_dev-ioctl.h: In function '_autofs_dev_ioctl': include/uapi/linux/auto_dev-ioctl.h:112:14: note: source object 'path' of size 0 112 | char path[0]; | ^~~~ This is easily fixed by changing the gnu 0-length array into a c99 flexible array. Since this is a uapi structure, we have to be careful about possible regressions but this one should be fine as they are equivalent here. While it would break building with ancient gcc versions that predate c99, it helps building with --std=c99 and -Wpedantic builds in user space, as well as non-gnu compilers. This means we probably also want it fixed in stable kernels. Cc: stable@vger.kernel.org Cc: Kees Cook <keescook@chromium.org> Cc: "Gustavo A. R. Silva" <gustavoars@kernel.org> Signed-off-by: Arnd Bergmann <arnd@arndb.de> Signed-off-by: Kees Cook <keescook@chromium.org> Link: https://lore.kernel.org/r/20230523081944.581710-1-arnd@kernel.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-07-23 13:47:33 +02:00
Marek Vasut	1e1af31c4c	media: videodev2.h: Fix struct v4l2_input tuner index comment ... [ Upstream commit 26ae58f65e ] VIDIOC_ENUMINPUT documentation describes the tuner field of struct v4l2_input as index: Documentation/userspace-api/media/v4l/vidioc-enuminput.rst " * - __u32 - ``tuner`` - Capture devices can have zero or more tuners (RF demodulators). When the ``type`` is set to ``V4L2_INPUT_TYPE_TUNER`` this is an RF connector and this field identifies the tuner. It corresponds to struct :c:type:`v4l2_tuner` field ``index``. For details on tuners see :ref:`tuner`. " Drivers I could find also use the 'tuner' field as an index, e.g.: drivers/media/pci/bt8xx/bttv-driver.c bttv_enum_input() drivers/media/usb/go7007/go7007-v4l2.c vidioc_enum_input() However, the UAPI comment claims this field is 'enum v4l2_tuner_type': include/uapi/linux/videodev2.h This field being 'enum v4l2_tuner_type' is unlikely as it seems to be never used that way in drivers, and documentation confirms it. It seem this comment got in accidentally in the commit which this patch fixes. Fix the UAPI comment to stop confusion. This was pointed out by Dmitry while reviewing VIDIOC_ENUMINPUT support for strace. Fixes: 6016af82ea ("[media] v4l2: use __u32 rather than enums in ioctl() structs") Signed-off-by: Marek Vasut <marex@denx.de> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-07-23 13:47:21 +02:00
Michael Schmitz	8744a9eda7	block: change all __u32 annotations to __be32 in affs_hardblocks.h ... commit 95a55437dc upstream. The Amiga partition parser module uses signed int for partition sector address and count, which will overflow for disks larger than 1 TB. Use u64 as type for sector address and size to allow using disks up to 2 TB without LBD support, and disks larger than 2 TB with LBD. The RBD format allows to specify disk sizes up to 2^128 bytes (though native OS limitations reduce this somewhat, to max 2^68 bytes), so check for u64 overflow carefully to protect against overflowing sector_t. This bug was reported originally in 2012, and the fix was created by the RDB author, Joanne Dow <jdow@earthlink.net>. A patch had been discussed and reviewed on linux-m68k at that time but never officially submitted (now resubmitted as patch 1 of this series). Patch 3 (this series) adds additional error checking and warning messages. One of the error checks now makes use of the previously unused rdb_CylBlocks field, which causes a 'sparse' warning (cast to restricted __be32). Annotate all 32 bit fields in affs_hardblocks.h as __be32, as the on-disk format of RDB and partition blocks is always big endian. Reported-by: Martin Steigerwald <Martin@lichtvoll.de> Closes: https://bugzilla.kernel.org/show_bug.cgi?id=43511 Fixes: 1da177e4c3 ("Linux-2.6.12-rc2") Message-ID: <201206192146.09327.Martin@lichtvoll.de> Cc: <stable@vger.kernel.org> # 5.2 Signed-off-by: Michael Schmitz <schmitzmic@gmail.com> Reviewed-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Geert Uytterhoeven <geert@linux-m68k.org> Link: https://lore.kernel.org/r/20230620201725.7020-3-schmitzmic@gmail.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-07-23 13:47:20 +02:00
Greg Kroah-Hartman	87e8932c28	Merge 5.15.118 into android14-5.15-lts ... Changes in 5.15.118 test_firmware: Use kstrtobool() instead of strtobool() test_firmware: prevent race conditions by a correct implementation of locking test_firmware: fix a memory leak with reqs buffer ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate drm/amdgpu: fix Null pointer dereference error in amdgpu_device_recover_vram of: overlay: rename variables to be consistent of: overlay: rework overlay apply and remove kfree()s of: overlay: Fix missing of_node_put() in error case of init_overlay_changeset() power: supply: ab8500: Fix external_power_changed race power: supply: sc27xx: Fix external_power_changed race power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() ARM: dts: vexpress: add missing cache properties tools: gpio: fix debounce_period_us output of lsgpio power: supply: Ratelimit no data debug output platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 regulator: Fix error checking for debugfs_create_dir irqchip/gic-v3: Disable pseudo NMIs on Mediatek devices w/ firmware issues power: supply: Fix logic checking if system is running from battery btrfs: scrub: try harder to mark RAID56 block groups read-only btrfs: handle memory allocation failure in btrfs_csum_one_bio ASoC: soc-pcm: test if a BE can be prepared parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu() parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory() MIPS: unhide PATA_PLATFORM MIPS: Alchemy: fix dbdma2 mips: Move initrd_start check after initrd address sanitisation. ASoC: dwc: move DMA init to snd_soc_dai_driver probe() xen/blkfront: Only check REQ_FUA for writes drm:amd:amdgpu: Fix missing buffer object unlock in failure path NVMe: Add MAXIO 1602 to bogus nid list. irqchip/gic: Correctly validate OF quirk descriptors io_uring: hold uring mutex around poll removal wifi: cfg80211: fix locking in regulatory disconnect wifi: cfg80211: fix double lock bug in reg_wdev_chan_valid() epoll: ep_autoremove_wake_function should use list_del_init_careful ocfs2: fix use-after-free when unmounting read-only filesystem ocfs2: check new file size on fallocate call nios2: dts: Fix tse_mac "max-frame-size" property nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() nilfs2: fix possible out-of-bounds segment allocation in resize ioctl kexec: support purgatories with .text.hot sections x86/purgatory: remove PGO flags powerpc/purgatory: remove PGO flags ALSA: usb-audio: Add quirk flag for HEM devices to enable native DSD playback dm thin metadata: check fail_io before using data_sm nouveau: fix client work fence deletion race RDMA/uverbs: Restrict usage of privileged QKEYs net: usb: qmi_wwan: add support for Compal RXM-G1 drm/amd/display: edp do not add non-edid timings drm/amdgpu: add missing radeon secondary PCI ID ALSA: hda/realtek: Add a quirk for Compaq N14JP6 Remove DECnet support from kernel thunderbolt: dma_test: Use correct value for absent rings when creating paths thunderbolt: Mask ring interrupt on Intel hardware as well USB: serial: option: add Quectel EM061KGL series serial: lantiq: add missing interrupt ack usb: dwc3: gadget: Reset num TRBs before giving back the request RDMA/rtrs: Fix the last iu->buf leak in err path RDMA/rtrs: Fix rxe_dealloc_pd warning RDMA/rxe: Fix packet length checks spi: fsl-dspi: avoid SCK glitches with continuous transfers netfilter: nf_tables: integrate pipapo into commit protocol netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE net: enetc: correct the indexes of highest and 2nd highest TCs ping6: Fix send to link-local addresses with VRF. net/sched: simplify tcf_pedit_act net/sched: act_pedit: remove extra check for key type net/sched: act_pedit: Parse L3 Header for L4 offset net/sched: cls_u32: Fix reference counter leak leading to overflow RDMA/rxe: Remove the unused variable obj RDMA/rxe: Removed unused name from rxe_task struct RDMA/rxe: Fix the use-before-initialization error of resp_pkts iavf: remove mask from iavf_irq_enable_queues() octeontx2-af: fixed resource availability check octeontx2-af: fix lbk link credits on cn10k RDMA/mlx5: Initiate dropless RQ for RAW Ethernet functions RDMA/cma: Always set static rate to 0 for RoCE IB/uverbs: Fix to consider event queue closing also upon non-blocking mode IB/isert: Fix dead lock in ib_isert IB/isert: Fix possible list corruption in CMA handler IB/isert: Fix incorrect release of isert connection net: ethtool: correct MAX attribute value for stats ipvlan: fix bound dev checking for IPv6 l3s mode sctp: fix an error code in sctp_sf_eat_auth() igc: Clean the TX buffer and TX descriptor ring igb: fix nvm.ops.read() error handling drm/nouveau: don't detect DSM for non-NVIDIA device drm/nouveau/dp: check for NULL nv_connector->native_mode drm/nouveau: add nv_encoder pointer check for NULL cifs: fix lease break oops in xfstest generic/098 ext4: drop the call to ext4_error() from ext4_get_group_info() net/sched: cls_api: Fix lockup on flushing explicitly created chain net: lapbether: only support ethernet devices dm: don't lock fs when the map is NULL during suspend or resume net: tipc: resize nlattr array to correct size selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET afs: Fix vlserver probe RTT handling cgroup: always put cset in cgroup_css_set_put_fork rcu/kvfree: Avoid freeing new kfree_rcu() memory after old grace period neighbour: Remove unused inline function neigh_key_eq16() net: Remove unused inline function dst_hold_and_use() net: Remove DECnet leftovers from flow.h. neighbour: delete neigh_lookup_nodev as not used of: overlay: add entry to of_overlay_action_name[] mmc: block: ensure error propagation for non-blk nilfs2: reject devices with insufficient block count Linux 5.15.118 Change-Id: I204c9793d0734c32f6ef9a739adc0691f98e8ae9 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-21 18:21:33 +00:00
Jakub Kicinski	3e76522d1a	net: ethtool: correct MAX attribute value for stats ... [ Upstream commit 52f79609c0 ] When compiling YNL generated code compiler complains about array-initializer-out-of-bounds. Turns out the MAX value for STATS_GRP uses the value for STATS. This may lead to random corruptions in user space (kernel itself doesn't use this value as it never parses stats). Fixes: f09ea6fb12 ("ethtool: add a new command for reading standard stats") Signed-off-by: Jakub Kicinski <kuba@kernel.org> Reviewed-by: David Ahern <dsahern@kernel.org> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-06-21 15:59:17 +02:00
Stephen Hemminger	2a974abc09	Remove DECnet support from kernel ... commit 1202cdd665 upstream. DECnet is an obsolete network protocol that receives more attention from kernel janitors than users. It belongs in computer protocol history museum not in Linux kernel. It has been "Orphaned" in kernel since 2010. The iproute2 support for DECnet was dropped in 5.0 release. The documentation link on Sourceforge says it is abandoned there as well. Leave the UAPI alone to keep userspace programs compiling. This means that there is still an empty neighbour table for AF_DECNET. The table of /proc/sys/net entries was updated to match current directories and reformatted to be alphabetical. Signed-off-by: Stephen Hemminger <stephen@networkplumber.org> Acked-by: David Ahern <dsahern@kernel.org> Acked-by: Nikolay Aleksandrov <razor@blackwall.org> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-06-21 15:59:15 +02:00
Greg Kroah-Hartman	105a464bd6	Merge branch 'android14-5.15' into 'android14-5.15-lts' ... This catches the -lts branch up with all of the recent changes that have gone into the non-lts branch, INCLUDING the ABI update which we want here to ensure that we do NOT break any newly added dependent symbols (and to bring back in the reverts that were required before the ABI break). This includes the following commits: 5c138afc95 ANDROID: GKI: Include kheaders in gki_system_dlkm_modules f025c9bd5a ANDROID: 6/16/2023 KMI update d05f5134f2 ANDROID: GKI: provide more padding for struct usb_phy e010dc3625 UPSTREAM: neighbour: fix unaligned access to pneigh_entry abe4076974 UPSTREAM: net/ipv6: fix bool/int mismatch for skip_notify_on_dev_down 00ce9cfb40 ANDROID: GKI: Update symbol list for Amlogic 45e4388a79 ANDROID: GKI enable CONFIG_NETFILTER_XT_MATCH_CONNBYTES=y 78f4244dc9 BACKPORT: cgroup/cpuset: Free DL BW in case can_attach() fails 72c8100467 BACKPORT: sched/deadline: Create DL BW alloc, free & check overflow interface 71cf567de1 FROMGIT: cgroup/cpuset: Iterate only if DEADLINE tasks are present 16a812c05e BACKPORT: sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets 0dfe87dff2 BACKPORT: sched/cpuset: Bring back cpuset_mutex 2a32b2b9e8 FROMGIT: cgroup/cpuset: Rename functions dealing with DEADLINE accounting 1351520d67 ANDROID: 6/16/2023 KMI update 0270aeeb9f UPSTREAM: binder: fix UAF of alloc->vma in race with munmap() b094b04779 UPSTREAM: binder: add lockless binder_alloc_(set|get)_vma() acd8193fa0 UPSTREAM: Revert "android: binder: stop saving a pointer to the VMA" 45efb0a2fb UPSTREAM: Revert "binder_alloc: add missing mmap_lock calls when using the VMA" bc4e0df357 UPSTREAM: usb: dwc3: fix gadget mode suspend interrupt handler issue b03d86bd51 UPSTREAM: usb: gadget: Properly configure the device for remote wakeup 49cb2707a8 UPSTREAM: tcp: deny tcp_disconnect() when threads are waiting 744ad30e2d ANDROID: GKI: Add RTK STB KMI symbol list faaabc7aa2 ANDROID: Remove all but top-level OWNERS 88bfbed31c ANDROID: Enable GKI Dr. No Enforcement Change-Id: Id933d56267bad97aba87ffce873bedfbe1d3a2b1 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-18 12:27:43 +00:00
Matthias Maennich	faaabc7aa2	ANDROID: Remove all but top-level OWNERS ... Now that the branch is used to create production GKI images, need to institute ACK DrNo for all commits. The DrNo approvers are in the android-mainline branch at /OWNERS_DrNo. Bug: 287162457 Signed-off-by: Matthias Maennich <maennich@google.com> Change-Id: Id5bb83d7add5f314df6816c1c51b4bf2d8018e79	2023-06-15 09:54:56 +01:00
Greg Kroah-Hartman	e772cc3c8f	Merge 5.15.115 into android14-5.15-lts ... Changes in 5.15.115 power: supply: bq27xxx: expose battery data when CI=1 power: supply: bq27xxx: Move bq27xxx_battery_update() down power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier() power: supply: bq24190: Call power_supply_changed() after updating input current bpf: fix a memory leak in the LRU and LRU_PERCPU hash maps net/mlx5: devcom only supports 2 ports net/mlx5e: Fix deadlock in tc route query code net/mlx5: Devcom, serialize devcom registration platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering platform/x86: ISST: Remove 8 socket limit net: phy: mscc: enable VSC8501/2 RGMII RX clock net: dsa: introduce helpers for iterating through ports using dp net: dsa: mt7530: rework mt753[01]_setup net: dsa: mt7530: split-off common parts from mt7531_setup net: dsa: mt7530: fix network connectivity with multiple CPU ports Bonding: add arp_missed_max option bonding: fix send_peer_notif overflow binder: fix UAF caused by faulty buffer cleanup irqchip/mips-gic: Get rid of the reliance on irq_cpu_online() irqchip/mips-gic: Use raw spinlock for gic_lock net/mlx5e: Fix SQ wake logic in ptp napi_poll context xdp: Allow registering memory model without rxq reference net: page_pool: use in_softirq() instead page_pool: fix inconsistency for page_pool_ring_[un]lock() irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable xdp: xdp_mem_allocator can be NULL in trace_mem_connect(). bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() Revert "binder_alloc: add missing mmap_lock calls when using the VMA" Revert "android: binder: stop saving a pointer to the VMA" binder: add lockless binder_alloc_(set|get)_vma() binder: fix UAF of alloc->vma in race with munmap() ipv{4,6}/raw: fix output xfrm lookup wrt protocol netfilter: ctnetlink: Support offloaded conntrack entry deletion Linux 5.15.115 Change-Id: I04ebd85160057dcc604a7b2b13f7fdadc08329ac Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-15 08:02:25 +00:00
Greg Kroah-Hartman	b5c8629086	Merge branch 'android14-5.15' into 'android14-5.15-lts' ... This catches the -lts branch up with all of the recent changes that have gone into the non-lts branch, INCLUDING the ABI update which we want here to ensure that we do NOT break any newly added dependent symbols (and to bring back in the reverts that were required before the ABI break). This includes the following commits: 1463dca508 ANDROID: 6/16/2023 KMI update 61d1582c93 UPSTREAM: tipc: check the bearer min mtu properly when setting it by netlink 5b20b206c4 UPSTREAM: tipc: do not update mtu if msg_max is too small in mtu negotiation b288e3eb9a UPSTREAM: tipc: add tipc_bearer_min_mtu to calculate min mtu 63225f30d6 UPSTREAM: ASoC: fsl_micfil: Fix error handler with pm_runtime_enable b64f71ac97 UPSTREAM: firmware: arm_sdei: Fix sleep from invalid context BUG a45af5569a UPSTREAM: uapi/linux/const.h: prefer ISO-friendly __typeof__ 18bae38a20 UPSTREAM: sched: Fix DEBUG && !SCHEDSTATS warn 8b4a04dce2 UPSTREAM: sched: Make struct sched_statistics independent of fair sched class 7f1bd76f41 UPSTREAM: platform: Provide a remove callback that returns no value b529f9de5b ANDROID: GKI: reserve extra arm64 cpucaps for ABI preservation 2ab1955d56 ANDROID: KVM: arm64: Allow setting {P,U}XN in stage-2 PTEs 69e2ba2e16 ANDROID: KVM: arm64: Restrict host-to-hyp MMIO donations 3f060ac3de ANDROID: KVM: arm64: Allow state changes of MMIO pages 57574f0ae2 ANDROID: KVM: arm64: Allow MMIO perm changes from modules 951d15786a ANDROID: KVM: arm64: Don't allocate from handle_host_mem_abort e609adf5cb ANDROID: KVM: arm64: Donate IOMMU regions to pKVM 1386a01618 ANDROID: KVM: arm64: Map MMIO donation as device at EL2 9debaf482d ANDROID: KVM: arm64: Don't recycle pages from host mem abort aa4b272b34 ANDROID: KVM: arm64: Pin host stage-2 tables 97877e974b ANDROID: KVM: arm64: Move kvm_pte_follow() to header 76380240a2 ANDROID: KVM: arm64: Pre-populate host stage2 a2b45ad90a ANDROID: KVM: arm64: Fix the host ownership later d522a07153 ANDROID: KVM: arm64: Don't recycle non-default PTEs 2bad47ce33 ANDROID: KVM: arm64: Introduce kvm_pgtable_stage2_reclaim_leaves da5b14f0a1 ANDROID: KVM: arm64: Deprecate late pKVM module loading 2c641cfce1 BACKPORT: FROMGIT: usb: core: add sysfs entry for usb device state 61067bd1c2 BACKPORT: usb: xhci: plat: remove error log for failure to get usb-phy 4b219f7fc9 BACKPORT: usb: xhci: plat: Add USB 3.0 phy support 7b23f0d62a UPSTREAM: usb: dwc3: core: add support for realtek SoCs custom's global register start address 2c2c2503ed ANDROID: GKI: Enable CONFIG_RPMSG_CTRL 182ac7a9d9 UPSTREAM: mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() a6c1ea62c9 UPSTREAM: mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() ad90aba4d6 UPSTREAM: net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize 267d3e1f3f ANDROID: set CONFIG_IKHEADERS=m for gki_defconfig. c1d1130811 UPSTREAM: usb: gadget: uvc: queue empty isoc requests if no video buffer is available 634ea38c4e ANDROID: Update the ABI symbol list 719fc80624 ANDROID: fs: Add vendor hooks for ep_create_wakeup_source & timerfd_create 4742f48a5a BACKPORT: arm64: Enable KCSAN d2d27f72cf ANDROID: block: Partially revert "Send requeued requests to the I/O scheduler" cc244e96d7 Revert "ANDROID: block: Warn if a zoned write is about to be reordered" Change-Id: Ifb116236a7ed04eaf472d088aa36a470eb6b138d Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-14 19:54:55 +00:00
Kevin Brodsky	a45af5569a	UPSTREAM: uapi/linux/const.h: prefer ISO-friendly __typeof__ ... [ Upstream commit 31088f6f79 ] typeof is (still) a GNU extension, which means that it cannot be used when building ISO C (e.g. -std=c99). It should therefore be avoided in uapi headers in favour of the ISO-friendly __typeof__. Unfortunately this issue could not be detected by CONFIG_UAPI_HEADER_TEST=y as the __ALIGN_KERNEL() macro is not expanded in any uapi header. This matters from a userspace perspective, not a kernel one. uapi headers and their contents are expected to be usable in a variety of situations, and in particular when building ISO C applications (with -std=c99 or similar). This particular problem can be reproduced by trying to use the __ALIGN_KERNEL macro directly in application code, say: int align(int x, int a) { return __KERNEL_ALIGN(x, a); } and trying to build that with -std=c99. Link: https://lkml.kernel.org/r/20230411092747.3759032-1-kevin.brodsky@arm.com Fixes: a79ff731a1 ("netfilter: xtables: make XT_ALIGN() usable in exported headers by exporting __ALIGN_KERNEL()") Change-Id: I4204df6f16689acb4d0786e3edf2b6ebc457c4e3 Signed-off-by: Kevin Brodsky <kevin.brodsky@arm.com> Reported-by: Ruben Ayrapetyan <ruben.ayrapetyan@arm.com> Tested-by: Ruben Ayrapetyan <ruben.ayrapetyan@arm.com> Reviewed-by: Petr Vorel <pvorel@suse.cz> Tested-by: Petr Vorel <pvorel@suse.cz> Reviewed-by: Masahiro Yamada <masahiroy@kernel.org> Cc: Sam Ravnborg <sam@ravnborg.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 397eb669da) Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-14 12:35:34 +00:00
Greg Kroah-Hartman	dc7c06dba7	Merge 5.15.114 into android14-5.15-lts ... Changes in 5.15.114 usb: gadget: Properly configure the device for remote wakeup usb: dwc3: fix gadget mode suspend interrupt handler issue dt-bindings: ata: ahci-ceva: convert to yaml dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries watchdog: sp5100_tco: Immediately trigger upon starting. ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15 spi: fsl-spi: Re-organise transfer bits_per_word adaptation spi: fsl-cpm: Use 16 bit mode for large transfers with even size ocfs2: Switch to security_inode_init_security() arm64: Also reset KASAN tag if page is not PG_mte_tagged ALSA: hda/ca0132: add quirk for EVGA X299 DARK ALSA: hda: Fix unhandled register update during auto-suspend period ALSA: hda/realtek: Enable headset onLenovo M70/M90 mmc: sdhci-esdhc-imx: make "no-mmc-hs400" works ASoC: rt5682: Disable jack detection interrupt during suspend net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize m68k: Move signal frame following exception on 68020/030 parisc: Handle kgdb breakpoints only in kernel context parisc: Allow to reboot machine after system halt gpio: mockup: Fix mode of debugfs files btrfs: use nofs when cleaning up aborted transactions dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type x86/mm: Avoid incomplete Global INVLPG flushes selftests/memfd: Fix unknown type name build failure parisc: Fix flush_dcache_page() for usage from irq context perf/x86/uncore: Correct the number of CHAs on SPR x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms debugobjects: Don't wake up kswapd from fill_pool() fbdev: udlfb: Fix endpoint check net: fix stack overflow when LRO is disabled for virtual interfaces udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). USB: core: Add routines for endpoint checks in old drivers USB: sisusbvga: Add endpoint checks media: radio-shark: Add endpoint checks ASoC: lpass: Fix for KASAN use_after_free out of bounds net: fix skb leak in __skb_tstamp_tx() selftests: fib_tests: mute cleanup error message octeontx2-pf: Fix TSOv6 offload bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields ipv6: Fix out-of-bounds access in ipv6_find_tlv() cifs: mapchars mount option ignored power: supply: leds: Fix blink to LED on transition power: supply: mt6360: add a check of devm_work_autocancel in mt6360_charger_probe power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition power: supply: bq27xxx: Fix I2C IRQ race on remove power: supply: bq27xxx: Fix poll_interval handling and races on remove power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status() power: supply: sbs-charger: Fix INHIBITED bit for Status reg firmware: arm_ffa: Check if ffa_driver remove is present before executing firmware: arm_ffa: Fix FFA device names for logical partitions fs: fix undefined behavior in bit shift for SB_NOUSER regulator: pca9450: Fix BUCK2 enable_mask coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() x86/show_trace_log_lvl: Ensure stack pointer is aligned, again ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg sctp: fix an issue that plpmtu can never go to complete state forcedeth: Fix an error handling path in nv_probe() platform/mellanox: mlxbf-pmc: fix sscanf() error checking net/mlx5e: do as little as possible in napi poll when budget is 0 net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE net/mlx5: Fix error message when failing to allocate device memory net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert delay firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors regulator: mt6359: add read check for PMIC MT6359 3c589_cs: Fix an error handling path in tc589_probe() net: phy: mscc: add VSC8502 to MODULE_DEVICE_TABLE Linux 5.15.114 Change-Id: Id1e4400f1ebeb6b72fb01fb1093dc807d8a9acc3 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-14 12:26:35 +00:00
Greg Kroah-Hartman	bc77a1c78d	Revert "uapi/linux/const.h: prefer ISO-friendly __typeof__" ... This reverts commit 397eb669da which is commit 31088f6f79 upstream. It breaks the CRC generation of loads of symbols, and is not needed at all for any real Android issue at this point in time, so revert it to preserve the ABI. Bug: 161946584 Change-Id: I93095fb07b431a194e21bb21d4cd22435445dca3 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-12 17:19:37 +00:00
Greg Kroah-Hartman	c2773262b8	Merge 5.15.111 into android14-5.15-lts ... Changes in 5.15.111 ASOC: Intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15 ASoC: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm x86/hyperv: Block root partition functionality in a Confidential VM iio: adc: palmas_gpadc: fix NULL dereference on rmmod ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 selftests mount: Fix mount_setattr_test builds failed asm-generic/io.h: suppress endianness warnings for readq() and writeq() x86/cpu: Add model number for Intel Arrow Lake processor wireguard: timers: cast enum limits members to int in prints wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset arm64: Always load shadow stack pointer directly from the task struct arm64: Stash shadow stack pointer in the task struct on interrupt PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock PCI: qcom: Fix the incorrect register usage in v2.7.0 config IMA: allow/fix UML builds USB: dwc3: fix runtime pm imbalance on probe errors USB: dwc3: fix runtime pm imbalance on unbind hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write hwmon: (adt7475) Use device_property APIs when configuring polarity posix-cpu-timers: Implement the missing timer_wait_running callback blk-mq: release crypto keyslot before reporting I/O complete blk-crypto: make blk_crypto_evict_key() return void blk-crypto: make blk_crypto_evict_key() more robust ext4: use ext4_journal_start/stop for fast commit transactions staging: iio: resolver: ads1210: fix config mode tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH xhci: fix debugfs register accesses while suspended tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem MIPS: fw: Allow firmware to pass a empty env ipmi:ssif: Add send_retries increment ipmi: fix SSIF not responding under certain cond. kheaders: Use array declaration instead of char wifi: mt76: add missing locking to protect against concurrent rx/status calls pwm: meson: Fix axg ao mux parents pwm: meson: Fix g12a ao clk81 name soundwire: qcom: correct setting ignore bit on v1.5.1 pinctrl: qcom: lpass-lpi: set output value before enabling output ring-buffer: Sync IRQ works before buffer destruction crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON() crypto: safexcel - Cleanup ring IRQ workqueues on load failure rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed reiserfs: Add security prefix to xattr name in reiserfs_security_write() KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted relayfs: fix out-of-bounds access in relay_file_read writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs ksmbd: call rcu_barrier() in ksmbd_server_exit() ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() ksmbd: fix memleak in session setup i2c: omap: Fix standard mode false ACK readings riscv: mm: remove redundant parameter of create_fdt_early_page_table tracing: Fix permissions for the buffer_percent file iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path" ubifs: Fix memleak when insert_old_idx() failed ubi: Fix return value overwrite issue in try_write_vid_and_data() ubifs: Free memory for tmpfile name xfs: don't consider future format versions valid sound/oss/dmasound: fix build when drivers are mixed =y/=m rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem selftests/resctrl: Extend CPU vendor detection selftests/resctrl: Move ->setup() call outside of test specific branches selftests/resctrl: Allow ->setup() to return errors selftests/resctrl: Check for return value after write_schemata() selinux: fix Makefile dependencies of flask.h selinux: ensure av_permissions.h is built when needed tpm, tpm_tis: Do not skip reset of original interrupt vector tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed tpm, tpm_tis: Claim locality before writing interrupt registers tpm, tpm: Implement usage counter for locality tpm, tpm_tis: Claim locality when interrupts are reenabled on resume erofs: stop parsing non-compact HEAD index if clusterofs is invalid erofs: fix potential overflow calculating xattr_isize drm/rockchip: Drop unbalanced obj unref drm/vgem: add missing mutex_destroy drm/probe-helper: Cancel previous job before starting new one tools/x86/kcpuid: Fix avx512bw and avx512lvl fields in Fn00000007 soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources EDAC/skx: Fix overflows on the DRAM row address mapping arrays regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property arm64: dts: broadcom: bcm4908: add DT for Netgear RAXE500 arm64: dts: Add DTS files for bcmbca SoC BCM63158 arm64: dts: Add DTS files for bcmbca SoC BCM4912 ARM64: dts: Add DTS files for bcmbca SoC BCM6858 arm64: dts: Add base DTS file for bcmbca device Asus GT-AX6000 arm64: dts: Move BCM4908 dts to bcmbca folder arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name arm64: dts: qcom: sdm845: correct dynamic power coefficients arm64: dts: qcom: sdm845: Fix the PCI I/O port range arm64: dts: qcom: msm8998: Fix the PCI I/O port range arm64: dts: qcom: ipq8074: Fix the PCI I/O port range arm64: dts: qcom: ipq6018: Fix the PCI I/O port range arm64: dts: qcom: msm8996: Fix the PCI I/O port range arm64: dts: qcom: sm8250: Fix the PCI I/O port range ARM: dts: qcom: ipq4019: Fix the PCI I/O port range ARM: dts: qcom: ipq8064: reduce pci IO size to 64K ARM: dts: qcom: ipq8064: Fix the PCI I/O port range x86/MCE/AMD: Use an u64 for bank_map media: bdisp: Add missing check for create_workqueue media: av7110: prevent underflow in write_ts_to_decoder() firmware: qcom_scm: Clear download bit during reboot drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 media: max9286: Free control handler drm/msm/adreno: Defer enabling runpm until hw_init() drm/msm/adreno: drop bogus pm_runtime_set_active() drm: msm: adreno: Disable preemption on Adreno 510 drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings ACPI: processor: Fix evaluating _PDC method when running as Xen dom0 mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data drm: rcar-du: Fix a NULL vs IS_ERR() bug ARM: dts: gta04: fix excess dma channel usage firmware: arm_scmi: Fix xfers allocation on Rx channel ACPI: VIOT: Initialize the correct IOMMU fwspec drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() mailbox: mpfs: switch to txdone_poll arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator drm/ttm: optimize pool allocations a bit v2 drm/ttm/pool: Fix ttm_pool_alloc error path regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() regulator: core: Avoid lockdep reports when resolving supplies x86/apic: Fix atomic update of offset in reserve_eilvt_offset() media: rkvdec: fix use after free bug in rkvdec_remove media: dm1105: Fix use after free bug in dm1105_remove due to race condition media: saa7134: fix use after free bug in saa7134_finidev due to race condition media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() media: rcar_fdp1: Fix the correct variable assignments platform: Provide a remove callback that returns no value media: rcar_fdp1: Convert to platform remove callback returning void media: rcar_fdp1: Fix refcount leak in probe and remove function drm/amd/display: Fix potential null dereference media: rc: gpio-ir-recv: Fix support for wake-up media: venus: dec: Fix handling of the start cmd regulator: stm32-pwr: fix of_iomap leak x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step debugobject: Prevent init race with static objects drm/i915: Make intel_get_crtc_new_encoder() less oopsy tick/common: Align tick period with the HZ tick. cpufreq: use correct unit when verify cur freq hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E wifi: ath6kl: minor fix for allocation size wifi: ath9k: hif_usb: fix memory leak of remain_skbs wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() wifi: brcmfmac: support CQM RSSI notification with older firmware wifi: ath6kl: reduce WARN to dev_dbg() in callback tools: bpftool: Remove invalid \' json escape wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() bpf: take into account liveness when propagating precision bpf: fix precision propagation verbose logging scm: fix MSG_CTRUNC setting condition for SO_PASSSEC selftests/bpf: Fix a fd leak in an error path in network_helpers.c bpf: Remove misleading spec_v1 check on var-offset stack read net: pcs: xpcs: remove double-read of link state when using AN vlan: partially enable SIOCSHWTSTAMP in container net/packet: annotate accesses to po->xmit net/packet: convert po->origdev to an atomic flag net/packet: convert po->auxdata to an atomic flag scsi: target: Fix multiple LUN_RESET handling scsi: target: iscsit: Fix TAS handling during conn cleanup scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS f2fs: handle dqget error in f2fs_transfer_project_quota() f2fs: enforce single zone capacity f2fs: apply zone capacity to all zone type f2fs: compress: fix to call f2fs_wait_on_page_writeback() in f2fs_write_raw_pages() crypto: caam - Clear some memory in instantiate_rng crypto: sa2ul - Select CRYPTO_DES wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() wifi: rt2x00: Fix memory leak when handling surveys net: qrtr: correct types of trace event parameters selftests: xsk: Disable IPv6 on VETH1 selftests/bpf: Wait for receive in cg_storage_multi test bpftool: Fix bug for long instructions in program CFG dumps crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors crypto: drbg - Only fail when jent is unavailable in FIPS mode xsk: Fix unaligned descriptor validation f2fs: fix to avoid use-after-free for cached IPU bio scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() net: ethernet: stmmac: dwmac-rk: fix optional phy regulator handling bpf, sockmap: fix deadlocks in the sockhash and sockmap nvmet: use i_size_read() to set size for file-ns nvmet: move the call to nvmet_ns_changed out of nvmet_ns_revalidate nvmet: fix error handling in nvmet_execute_identify_cns_cs_ns() nvmet: fix Identify Namespace handling nvmet: fix Identify Controller handling nvmet: fix Identify Active Namespace ID list handling nvmet: fix I/O Command Set specific Identify Controller nvme: handle the persistent internal error AER nvme: fix async event trace event nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage" selftests/bpf: Fix leaked bpf_link in get_stackid_cannot_attach bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap md: drop queue limitation for RAID1 and RAID10 md: raid10 add nowait support md/raid10: factor out code from wait_barrier() to stop_waiting_barrier() md/raid10: fix task hung in raid10d md/raid10: fix leak of 'r10bio->remaining' for recovery md/raid10: fix memleak for 'conf->bio_split' md/raid10: fix memleak of md thread md/raid10: don't call bio_start_io_acct twice for bio which experienced read error wifi: iwlwifi: yoyo: skip dump correctly on hw error wifi: iwlwifi: yoyo: Fix possible division by zero wifi: iwlwifi: mvm: initialize seq variable wifi: iwlwifi: fw: move memset before early return jdb2: Don't refuse invalidation of already invalidated buffers wifi: iwlwifi: make the loop for card preparation effective wifi: mt76: handle failure of vzalloc in mt7615_coredump_work wifi: mt76: add flexible polling wait-interval support wifi: mt76: mt7921e: fix probe timeout after reboot wifi: mt76: fix 6GHz high channel not be scanned wifi: mt76: mt7921e: improve reliability of dma reset wifi: iwlwifi: mvm: check firmware response size wifi: iwlwifi: fw: fix memory leak in debugfs ixgbe: Allow flow hash to be set via ethtool ixgbe: Enable setting RSS table to default values net/mlx5: E-switch, Don't destroy indirect table in split rule net: stmmac:fix system hang when setting up tag_8021q VLAN for DSA ports bpf: Don't EFAULT for getsockopt with optval=NULL netfilter: nf_tables: don't write table validation state without mutex net/sched: sch_fq: fix integer overflow of "credit" ipv4: Fix potential uninit variable access bug in __ip_make_skb() Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" netlink: Use copy_to_user() for optval in netlink_getsockopt(). net: amd: Fix link leak when verifying config failed tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. ipmi: ASPEED_BT_IPMI_BMC: select REGMAP_MMIO instead of depending on it drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() pstore: Revert pmsg_lock back to a normal mutex usb: host: xhci-rcar: remove leftover quirk handling usb: dwc3: gadget: Change condition for processing suspend event serial: stm32: re-introduce an irq flag condition in usart_receive_chars serial: stm32: Re-assert RTS/DE GPIO in RS485 mode only if more data are transmitted fpga: bridge: fix kernel-doc parameter description iio: light: max44009: add missing OF device matching serial: 8250_bcm7271: Fix arbitration handling spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync spi: imx: Don't skip cleanup in remove's error path usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition PCI: imx6: Install the fault handler only on compatible match ASoC: es8316: Handle optional IRQ assignment linux/vt_buffer.h: allow either builtin or modular for macros spi: qup: Don't skip cleanup in remove's error path spi: fsl-spi: Fix CPM/QE mode Litte Endian vmci_host: fix a race condition in vmci_host_poll() causing GPF of: Fix modalias string generation PCI/EDR: Clear Device Status after EDR error recovery ia64: mm/contig: fix section mismatch warning/error ia64: salinfo: placate defined-but-not-used warning scripts/gdb: bail early if there are no clocks scripts/gdb: bail early if there are no generic PD HID: amd_sfh: Add support for shutdown operation coresight: etm_pmu: Set the module field ASoC: fsl_mqs: move of_node_put() to the correct location spi: cadence-quadspi: fix suspend-resume implementations i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path scripts/gdb: raise error with reduced debugging information uapi/linux/const.h: prefer ISO-friendly __typeof__ sh: sq: Fix incorrect element size for allocating bitmap buffer usb: gadget: tegra-xudc: Fix crash in vbus_draw usb: chipidea: fix missing goto in `ci_hdrc_probe` usb: mtu3: fix kernel panic at qmu transfer done irq handler firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe tty: serial: fsl_lpuart: adjust buffer length to the intended size serial: 8250: Add missing wakeup event reporting staging: rtl8192e: Fix W_DISABLE# does not work after stop/start spmi: Add a check for remove callback when removing a SPMI driver virtio_ring: don't update event idx on get_buf macintosh/windfarm_smu_sat: Add missing of_node_put() powerpc/mpc512x: fix resource printk format warning powerpc/wii: fix resource printk format warnings powerpc/sysdev/tsi108: fix resource printk format warnings macintosh: via-pmu-led: requires ATA to be set powerpc/rtas: use memmove for potentially overlapping buffer copy sched/fair: Use __schedstat_set() in set_next_entity() sched: Make struct sched_statistics independent of fair sched class sched/fair: Fix inaccurate tally of ttwu_move_affine perf/core: Fix hardlockup failure caused by perf throttle Revert "objtool: Support addition to set CFA base" sched/rt: Fix bad task migration for rt tasks clk: at91: clk-sam9x60-pll: fix return value check RDMA/siw: Fix potential page_array out of range access RDMA/rdmavt: Delete unnecessary NULL check workqueue: Introduce show_one_worker_pool and show_one_workqueue. workqueue: Fix hung time report of worker pools rtc: omap: include header for omap_rtc_power_off_program prototype RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time fs/ntfs3: Fix memory leak if ntfs_read_mft failed fs/ntfs3: Add check for kmemdup fs/ntfs3: Fix OOB read in indx_insert_into_buffer fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de() power: supply: generic-adc-battery: fix unit scaling clk: add missing of_node_put() in "assigned-clocks" property parsing RDMA/siw: Remove namespace check from siw_netdev_event() clk: qcom: gcc-sm6115: Mark RCGs shared where applicable RDMA/cm: Trace icm_send_rej event before the cm state is reset RDMA/srpt: Add a check for valid 'mad_agent' pointer IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease clk: qcom: regmap: add PHY clock source implementation clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe RDMA/mlx5: Fix flow counter query via DEVX SUNRPC: remove the maximum number of retries in call_bind_status RDMA/mlx5: Use correct device num_ports when modify DC clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails openrisc: Properly store r31 to pt_regs on unhandled exceptions timekeeping: Fix references to nonexistent ktime_get_fast_ns() SMB3: Add missing locks to protect deferred close file list SMB3: Close deferred file handles in case of handle lease break ext4: fix i_disksize exceeding i_size problem in paritally written case ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration leds: TI_LMU_COMMON: select REGMAP instead of depending on it dmaengine: mv_xor_v2: Fix an error code. leds: tca6507: Fix error handling of using fwnode_property_read_string pwm: mtk-disp: Disable shadow registers before setting backlight values pwm: mtk-disp: Configure double buffering before reading in .get_state() phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port dma: gpi: remove spurious unlock in gpi_ch_init dmaengine: dw-edma: Fix to change for continuous transfer dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing dmaengine: at_xdmac: Fix concurrency over chan's completed_cookie dmaengine: at_xdmac: Fix race for the tx desc callback dmaengine: at_xdmac: do not enable all cyclic channels thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe mfd: tqmx86: Do not access I2C_DETECT register through io_base mfd: tqmx86: Specify IO port register range more precisely mfd: tqmx86: Correct board names for TQMxE39x afs: Fix updating of i_size with dv jump from server parisc: Fix argument pointer in real64_call_asm() ALSA: usb-audio: Add quirk for Pioneer DDJ-800 nilfs2: do not write dirty data after degenerating to read-only nilfs2: fix infinite loop in nilfs_mdt_get_block() md/raid10: fix null-ptr-deref in raid10_sync_request mtd: core: provide unique name for nvmem device, take two mtd: core: fix nvmem error reporting mtd: core: fix error path for nvmem provider mailbox: zynqmp: Fix IPI isr handling mailbox: zynqmp: Fix typo in IPI documentation wifi: rtl8xxxu: RTL8192EU always needs full init clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent scripts/gdb: fix lx-timerlist for Python3 btrfs: scrub: reject unsupported scrub flags s390/dasd: fix hanging blockdevice after request requeue ia64: fix an addr to taddr in huge_pte_offset() dm verity: fix error handling for check_at_most_once on FEC dm clone: call kmem_cache_destroy() in dm_clone_init() error path dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path dm flakey: fix a crash with invalid table line dm ioctl: fix nested locking in table_clear() to remove deadlock concern dm: don't lock fs when the map is NULL in process of resume perf auxtrace: Fix address filter entire kernel size perf intel-pt: Fix CYC timestamps after standalone CBR debugobject: Ensure pool refill (again) sound/oss/dmasound: fix 'dmasound_setup' defined but not used arm64: dts: qcom: sdm845: correct dynamic power coefficients - again netfilter: nf_tables: deactivate anonymous set from preparation phase sched: Fix DEBUG && !SCHEDSTATS warn Linux 5.15.111 Change-Id: Ic17a1be536afd1897c1b88d5d054afbac9182d1a Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-08 13:25:38 +00:00
Erin MacNeil	645bc81185	UPSTREAM: net: SO_RCVMARK socket option for SO_MARK with recvmsg() ... Adding a new socket option, SO_RCVMARK, to indicate that SO_MARK should be included in the ancillary data returned by recvmsg(). Renamed the sock_recv_ts_and_drops() function to sock_recv_cmsgs(). Signed-off-by: Erin MacNeil <lnx.erin@gmail.com> Reviewed-by: Eric Dumazet <edumazet@google.com> Reviewed-by: David Ahern <dsahern@kernel.org> Acked-by: Marc Kleine-Budde <mkl@pengutronix.de> Link: https://lore.kernel.org/r/20220427200259.2564-1-lnx.erin@gmail.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> (cherry picked from commit 6fd1d51cfa) Signed-off-by: Maciej Żenczykowski <maze@google.com> Change-Id: I99221c48889fcc5a0633f633b6da73ecd66e26f2	2023-06-08 00:00:33 +00:00
Nicolas Dichtel	395d846c61	ipv{4,6}/raw: fix output xfrm lookup wrt protocol ... commit 3632679d9e upstream. With a raw socket bound to IPPROTO_RAW (ie with hdrincl enabled), the protocol field of the flow structure, build by raw_sendmsg() / rawv6_sendmsg()), is set to IPPROTO_RAW. This breaks the ipsec policy lookup when some policies are defined with a protocol in the selector. For ipv6, the sin6_port field from 'struct sockaddr_in6' could be used to specify the protocol. Just accept all values for IPPROTO_RAW socket. For ipv4, the sin_port field of 'struct sockaddr_in' could not be used without breaking backward compatibility (the value of this field was never checked). Let's add a new kind of control message, so that the userland could specify which protocol is used. Fixes: 1da177e4c3 ("Linux-2.6.12-rc2") CC: stable@vger.kernel.org Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com> Link: https://lore.kernel.org/r/20230522120820.1319391-1-nicolas.dichtel@6wind.com Signed-off-by: Paolo Abeni <pabeni@redhat.com> Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-06-05 09:21:26 +02:00
Hangbin Liu	7ee611fc85	Bonding: add arp_missed_max option ... [ Upstream commit 5944b5abd8 ] Currently, we use hard code number to verify if we are in the arp_interval timeslice. But some user may want to reduce/extend the verify timeslice. With the similar team option 'missed_max' the uers could change that number based on their own environment. Acked-by: Jay Vosburgh <jay.vosburgh@canonical.com> Signed-off-by: Hangbin Liu <liuhangbin@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net> Stable-dep-of: 9949e2efb5 ("bonding: fix send_peer_notif overflow") Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-06-05 09:21:19 +02:00
Cezary Rojewski	ee553694be	ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg ... commit 9510965747 upstream. Constant 'C4_CHANNEL' does not exist on the firmware side. Value 0xC is reserved for 'C7_1' instead. Fixes: 04afbbbb1c ("ASoC: Intel: Skylake: Update the topology interface structure") Signed-off-by: Cezary Rojewski <cezary.rojewski@intel.com> Signed-off-by: Amadeusz Sławiński <amadeuszx.slawinski@linux.intel.com> Link: https://lore.kernel.org/r/20230519201711.4073845-4-amadeuszx.slawinski@linux.intel.com Signed-off-by: Mark Brown <broonie@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-05-30 13:55:33 +01:00
Qu Wenruo	ed7e8beb20	btrfs: scrub: reject unsupported scrub flags ... commit 604e6681e1 upstream. Since the introduction of scrub interface, the only flag that we support is BTRFS_SCRUB_READONLY. Thus there is no sanity checks, if there are some undefined flags passed in, we just ignore them. This is problematic if we want to introduce new scrub flags, as we have no way to determine if such flags are supported. Address the problem by introducing a check for the flags, and if unsupported flags are set, return -EOPNOTSUPP to inform the user space. This check should be backported for all supported kernels before any new scrub flags are introduced. CC: stable@vger.kernel.org # 4.14+ Reviewed-by: Anand Jain <anand.jain@oracle.com> Signed-off-by: Qu Wenruo <wqu@suse.com> Reviewed-by: David Sterba <dsterba@suse.com> Signed-off-by: David Sterba <dsterba@suse.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-05-11 23:00:39 +09:00
Kevin Brodsky	397eb669da	uapi/linux/const.h: prefer ISO-friendly __typeof__ ... [ Upstream commit 31088f6f79 ] typeof is (still) a GNU extension, which means that it cannot be used when building ISO C (e.g. -std=c99). It should therefore be avoided in uapi headers in favour of the ISO-friendly __typeof__. Unfortunately this issue could not be detected by CONFIG_UAPI_HEADER_TEST=y as the __ALIGN_KERNEL() macro is not expanded in any uapi header. This matters from a userspace perspective, not a kernel one. uapi headers and their contents are expected to be usable in a variety of situations, and in particular when building ISO C applications (with -std=c99 or similar). This particular problem can be reproduced by trying to use the __ALIGN_KERNEL macro directly in application code, say: #include <linux/const.h> int align(int x, int a) { return __KERNEL_ALIGN(x, a); } and trying to build that with -std=c99. Link: https://lkml.kernel.org/r/20230411092747.3759032-1-kevin.brodsky@arm.com Fixes: a79ff731a1 ("netfilter: xtables: make XT_ALIGN() usable in exported headers by exporting __ALIGN_KERNEL()") Signed-off-by: Kevin Brodsky <kevin.brodsky@arm.com> Reported-by: Ruben Ayrapetyan <ruben.ayrapetyan@arm.com> Tested-by: Ruben Ayrapetyan <ruben.ayrapetyan@arm.com> Reviewed-by: Petr Vorel <pvorel@suse.cz> Tested-by: Petr Vorel <pvorel@suse.cz> Reviewed-by: Masahiro Yamada <masahiroy@kernel.org> Cc: Sam Ravnborg <sam@ravnborg.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-05-11 23:00:33 +09:00
Vinayak Yadawad	82ae4dc64b	UPSTREAM: cfg80211: Update Transition Disable policy during port authorization ... In case of 4way handshake offload, transition disable policy updated by the AP during EAPOL 3/4 is not updated to the upper layer. This results in mismatch between transition disable policy between the upper layer and the driver. This patch addresses this issue by updating transition disable policy as part of port authorization indication. Signed-off-by: Vinayak Yadawad <vinayak.yadawad@broadcom.com> Signed-off-by: Johannes Berg <johannes.berg@intel.com> Bug: 272227555 Change-Id: Iac5d22a2c3999c7bdddc3a1f683fef82ed8ff918 (cherry picked from commit 0ff57171d6) Signed-off-by: Shivani Baranwal <quic_shivbara@quicinc.com> Signed-off-by: Will McVicker <willmcvicker@google.com> Signed-off-by: Carlos Llamas <cmllamas@google.com>	2023-03-30 10:45:33 +00:00
Greg Kroah-Hartman	4403c58acc	Merge 5.15.100 into android14-5.15 ... Changes in 5.15.100 net/sched: Retire tcindex classifier auxdisplay: hd44780: Fix potential memory leak in hd44780_remove() fs/jfs: fix shift exponent db_agl2size negative objtool: Fix memory leak in create_static_call_sections() pwm: sifive: Reduce time the controller lock is held pwm: sifive: Always let the first pwm_apply_state succeed pwm: stm32-lp: fix the check on arr and cmp registers update f2fs: use memcpy_{to,from}_page() where possible fs: f2fs: initialize fsdata in pagecache_write() f2fs: allow set compression option of files without blocks um: vector: Fix memory leak in vector_config ubi: ensure that VID header offset + VID header size <= alloc, size ubifs: Fix build errors as symbol undefined ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted ubifs: Rectify space budget for ubifs_xrename() ubifs: Fix wrong dirty space budget for dirty inode ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1 ubifs: Reserve one leb for each journal head while doing budget ubi: Fix use-after-free when volume resizing failed ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume() ubifs: Fix memory leak in alloc_wbufs() ubi: Fix possible null-ptr-deref in ubi_free_volume() ubifs: Re-statistic cleaned znode count if commit failed ubifs: dirty_cow_znode: Fix memleak in error handling path ubifs: ubifs_writepage: Mark page dirty after writing inode failed ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show() ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed f2fs: fix to avoid potential memory corruption in __update_iostat_latency() ext4: use ext4_fc_tl_mem in fast-commit replay path netfilter: nf_tables: allow to fetch set elements when table has an owner x86: um: vdso: Add '%rcx' and '%r11' to the syscall clobber list um: virtio_uml: free command if adding to virtqueue failed um: virtio_uml: mark device as unregistered when breaking it um: virtio_uml: move device breaking into workqueue um: virt-pci: properly remove PCI device from bus watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path watchdog: Fix kmemleak in watchdog_cdev_register watchdog: pcwd_usb: Fix attempting to access uninitialized memory watchdog: sbsa_wdog: Make sure the timeout programming is within the limits netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() netfilter: ebtables: fix table blob use-after-free netfilter: x_tables: fix percpu counter block leak on error path when creating new netns ipv6: Add lwtunnel encap size of all siblings in nexthop calculation sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop octeontx2-pf: Use correct struct reference in test condition net: fix __dev_kfree_skb_any() vs drop monitor 9p/xen: fix version parsing 9p/xen: fix connection sequence 9p/rdma: unmap receive dma buffer in rdma_request()/post_recv() net/mlx5e: Verify flow_source cap before using it net/mlx5: Geneve, Fix handling of Geneve object id as error code nfc: fix memory leak of se_io context in nfc_genl_se_io net/sched: transition act_pedit to rcu and percpu stats net/sched: act_pedit: fix action bind logic net/sched: act_mpls: fix action bind logic net/sched: act_sample: fix action bind logic ARM: dts: spear320-hmi: correct STMPE GPIO compatible tcp: tcp_check_req() can be called from process context vc_screen: modify vcs_size() handling in vcs_read() rtc: sun6i: Always export the internal oscillator genirq: Refactor accessors to use irq_data_get_affinity_mask genirq: Add and use an irq_data_update_affinity helper scsi: ipr: Work around fortify-string warning rtc: allow rtc_read_alarm without read_alarm callback loop: loop_set_status_from_info() check before assignment ASoC: adau7118: don't disable regulators on device unbind ASoC: zl38060: Remove spurious gpiolib select ASoC: zl38060 add gpiolib dependency ASoC: mediatek: mt8195: add missing initialization thermal: intel: quark_dts: fix error pointer dereference thermal: intel: BXT_PMIC: select REGMAP instead of depending on it tracing: Add NULL checks for buffer in ring_buffer_free_read_page() kernel/printk/index.c: fix memory leak with using debugfs_lookup() firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 bootconfig: Increase max nodes of bootconfig from 1024 to 8192 for DCC support mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak IB/hfi1: Update RMT size calculation iommu/amd: Fix error handling for pdev_pri_ats_enable() media: uvcvideo: Remove format descriptions media: uvcvideo: Handle cameras with invalid descriptors media: uvcvideo: Handle errors from calls to usb_string media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910 media: uvcvideo: Silence memcpy() run-time false positive warnings USB: fix memory leak with using debugfs_lookup() staging: emxx_udc: Add checks for dma_alloc_coherent() tty: fix out-of-bounds access in tty_driver_lookup_tty() tty: serial: fsl_lpuart: disable the CTS when send break signal serial: sc16is7xx: setup GPIO controller later in probe mei: bus-fixup:upon error print return values of send and receive tools/iio/iio_utils:fix memory leak iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() soundwire: bus_type: Avoid lockdep assert in sdw_drv_probe() PCI: loongson: Prevent LS7A MRRS increases USB: dwc3: fix memory leak with using debugfs_lookup() USB: chipidea: fix memory leak with using debugfs_lookup() USB: uhci: fix memory leak with using debugfs_lookup() USB: sl811: fix memory leak with using debugfs_lookup() USB: fotg210: fix memory leak with using debugfs_lookup() USB: isp116x: fix memory leak with using debugfs_lookup() USB: isp1362: fix memory leak with using debugfs_lookup() USB: gadget: gr_udc: fix memory leak with using debugfs_lookup() USB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup() USB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup() USB: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup() USB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math USB: ene_usb6250: Allocate enough memory for full object usb: uvc: Enumerate valid values for color matching usb: gadget: uvc: Make bSourceID read/write PCI: Align extra resources for hotplug bridges properly PCI: Take other bus devices into account when distributing resources tty: pcn_uart: fix memory leak with using debugfs_lookup() misc: vmw_balloon: fix memory leak with using debugfs_lookup() drivers: base: component: fix memory leak with using debugfs_lookup() drivers: base: dd: fix memory leak with using debugfs_lookup() kernel/fail_function: fix memory leak with using debugfs_lookup() PCI: loongson: Add more devices that need MRRS quirk PCI: Add ACS quirk for Wangxun NICs phy: rockchip-typec: Fix unsigned comparison with less than zero soundwire: cadence: Remove wasted space in response_buf soundwire: cadence: Drain the RX FIFO after an IO timeout net: tls: avoid hanging tasks on the tx_lock x86/resctl: fix scheduler confusion with 'current' drm/display/dp_mst: Fix down/up message handling after sink disconnect drm/display/dp_mst: Fix down message handling after a packet reception error Bluetooth: hci_sock: purge socket queues in the destruct() callback media: uvcvideo: Fix race condition with usb_kill_urb drm/virtio: Fix error code in virtio_gpu_object_shmem_init() Revert "scsi: mpt3sas: Fix return value check of dma_get_required_mask()" scsi: mpt3sas: Don't change DMA mask while reallocating pools scsi: mpt3sas: re-do lost mpt3sas DMA mask fix scsi: mpt3sas: Remove usage of dma_get_required_mask() API malidp: Fix NULL vs IS_ERR() checking usb: gadget: uvc: fix missing mutex_unlock() if kstrtou8() fails Linux 5.15.100 Change-Id: If8949c57602ea5475c2f68a78d0d2e421d7969f2 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-03-21 10:16:45 +00:00
Daniel Scally	14cbfd0855	usb: uvc: Enumerate valid values for color matching ... [ Upstream commit e16cab9c15 ] The color matching descriptors defined in the UVC Specification contain 3 fields with discrete numeric values representing particular settings. Enumerate those values so that later code setting them can be more readable. Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com> Signed-off-by: Daniel Scally <dan.scally@ideasonboard.com> Link: https://lore.kernel.org/r/20230202114142.300858-2-dan.scally@ideasonboard.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-03-11 13:57:37 +01:00
Kees Cook	b32d922f86	media: uvcvideo: Silence memcpy() run-time false positive warnings ... [ Upstream commit b839212988 ] The memcpy() in uvc_video_decode_meta() intentionally copies across the length and flags members and into the trailing buf flexible array. Split the copy so that the compiler can better reason about (the lack of) buffer overflows here. Avoid the run-time false positive warning: memcpy: detected field-spanning write (size 12) of single field "&meta->length" at drivers/media/usb/uvc/uvc_video.c:1355 (size 1) Additionally fix a typo in the documentation for struct uvc_meta_buf. Reported-by: ionut_n2001@yahoo.com Link: https://bugzilla.kernel.org/show_bug.cgi?id=216810 Signed-off-by: Kees Cook <keescook@chromium.org> Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com> Signed-off-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-03-11 13:57:33 +01:00
Bean Huo	a3269a6879	UPSTREAM: scsi: ufs: core: bsg: Fix cast to restricted __be16 warning ... Fix the following sparse endianness warning: "sparse warnings: drivers/ufs/core/ufs_bsg.c:91:25: sparse: sparse: cast to restricted __be16." For consistency with endianness annotations of other UFS data structures, change __u16/32 to __be16/32 in UFS ARPMB data structures. Bug: 254441685 Fixes: 6ff265fc5e ("scsi: ufs: core: bsg: Add advanced RPMB support in ufs_bsg") Reported-by: kernel test robot <lkp@intel.com> Signed-off-by: Bean Huo <beanhuo@micron.com> Reviewed-by: Bart Van Assche <bvanassche@acm.org> Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com> (cherry picked from commit e2cb6e8db6) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I78195aa5c606a766c7414b256c9e23b1a16434bd	2023-03-08 14:40:23 +00:00
Greg Kroah-Hartman	6bdcdef440	Merge 5.15.94 into android14-5.15 ... Changes in 5.15.94 mm/migration: return errno when isolate_huge_page failed migrate: hugetlb: check for hugetlb shared PMD in node migration btrfs: limit device extents to the device size btrfs: zlib: zero-initialize zlib workspace ALSA: hda/realtek: Add Positivo N14KP6-TG ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 ALSA: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw of/address: Return an error when no valid dma-ranges are found can: j1939: do not wait 250 ms if the same addr was already claimed xfrm: compat: change expression for switch in xfrm_xlate64 IB/hfi1: Restore allocated resources on failed copyout xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr() IB/IPoIB: Fix legacy IPoIB due to wrong number of queues RDMA/irdma: Fix potential NULL-ptr-dereference RDMA/usnic: use iommu_map_atomic() under spin_lock() xfrm: fix bug with DSCP copy to v6 from v4 tunnel net: phylink: move phy_device_free() to correctly release phy device bonding: fix error checking in bond_debug_reregister() net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY ionic: clean interrupt before enabling queue to avoid credit race uapi: add missing ip/ipv6 header dependencies for linux/stddef.h ice: Do not use WQ_MEM_RECLAIM flag for workqueue net: dsa: mt7530: don't change PVC_EG_TAG when CPU port becomes VLAN-aware net: mscc: ocelot: fix VCAP filters not matching on MAC with "protocol 802.1Q" net/mlx5e: Move repeating clear_bit in mlx5e_rx_reporter_err_rq_cqe_recover net/mlx5e: Introduce the mlx5e_flush_rq function net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change net/mlx5: Bridge, fix ageing of peer FDB entries net/mlx5e: IPoIB, Show unknown speed instead of error net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers net/mlx5: fw_tracer, Zero consumer index when reloading the tracer net/mlx5: Serialize module cleanup with reload and remove igc: Add ndo_tx_timeout support rds: rds_rm_zerocopy_callback() use list_first_entry() selftests: forwarding: lib: quote the sysctl values ALSA: pci: lx6464es: fix a debug loop riscv: stacktrace: Fix missing the first frame ASoC: topology: Return -ENOMEM on memory allocation failure pinctrl: mediatek: Fix the drive register definition of some Pins pinctrl: aspeed: Fix confusing types in return value pinctrl: single: fix potential NULL dereference spi: dw: Fix wrong FIFO level setting for long xfers pinctrl: intel: Restore the pins that used to be in Direct IRQ mode cifs: Fix use-after-free in rdata->read_into_pages() net: USB: Fix wrong-direction WARNING in plusb.c mptcp: be careful on subflow status propagation on errors btrfs: free device in btrfs_close_devices for a single device filesystem usb: core: add quirk for Alcor Link AK9563 smartcard reader usb: typec: altmodes/displayport: Fix probe pin assign check clk: ingenic: jz4760: Update M/N/OD calculation algorithm ceph: flush cap releases when the session is flushed riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch rtmutex: Ensure that the top waiter is always woken up arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive Fix page corruption caused by racy check in __free_pages drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini drm/i915: Initialize the obj flags for shmem objects drm/i915: Fix VBT DSI DVO port handling x86/speculation: Identify processors vulnerable to SMT RSB predictions KVM: x86: Mitigate the cross-thread return address predictions bug Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions Linux 5.15.94 Change-Id: I46aca6bfb09ef8e68122a41734968906982b2a5f Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-02-15 15:06:07 +00:00
Herton R. Krzesinski	70d48c7992	uapi: add missing ip/ipv6 header dependencies for linux/stddef.h ... [ Upstream commit 03702d4d29 ] Since commit 58e0be1ef6 ("net: use struct_group to copy ip/ipv6 header addresses"), ip and ipv6 headers started to use the __struct_group definition, which is defined at include/uapi/linux/stddef.h. However, linux/stddef.h isn't explicitly included in include/uapi/linux/{ip,ipv6}.h, which breaks build of xskxceiver bpf selftest if you install the uapi headers in the system: $ make V=1 xskxceiver -C tools/testing/selftests/bpf ... make: Entering directory '(...)/tools/testing/selftests/bpf' gcc -g -O0 -rdynamic -Wall -Werror (...) In file included from xskxceiver.c:79: /usr/include/linux/ip.h:103:9: error: expected specifier-qualifier-list before ‘__struct_group’ 103 | __struct_group(/* no tag */, addrs, /* no attrs */, | ^~~~~~~~~~~~~~ ... Include the missing <linux/stddef.h> dependency in ip.h and do the same for the ipv6.h header. Fixes: 58e0be1ef6 ("net: use struct_group to copy ip/ipv6 header addresses") Signed-off-by: Herton R. Krzesinski <herton@redhat.com> Reviewed-by: Carlos O'Donell <carlos@redhat.com> Tested-by: Carlos O'Donell <carlos@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-14 19:17:59 +01:00
Greg Kroah-Hartman	e3d8fe0993	Merge 5.15.91 into android14-5.15 ... Changes in 5.15.91 memory: tegra: Remove clients SID override programming memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe() memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe() dmaengine: ti: k3-udma: Do conditional decrement of UDMA_CHAN_RT_PEER_BCNT_REG arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency' ARM: dts: imx7d-pico: Use 'clock-frequency' ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux ARM: imx: add missing of_node_put() HID: intel_ish-hid: Add check for ishtp_dma_tx_map arm64: dts: imx8mm-venice-gw7901: fix USB2 controller OC polarity soc: imx8m: Fix incorrect check for of_clk_get_by_name() reset: uniphier-glue: Use reset_control_bulk API reset: uniphier-glue: Fix possible null-ptr-deref EDAC/highbank: Fix memory leak in highbank_mc_probe() firmware: arm_scmi: Harden shared memory access in fetch_response firmware: arm_scmi: Harden shared memory access in fetch_notification tomoyo: fix broken dependency on *.conf.default RDMA/core: Fix ib block iterator counter overflow IB/hfi1: Reject a zero-length user expected buffer IB/hfi1: Reserve user expected TIDs IB/hfi1: Fix expected receive setup error exit issues IB/hfi1: Immediately remove invalid memory from hardware IB/hfi1: Remove user expected buffer invalidate race affs: initialize fsdata in affs_truncate() PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe() arm64: dts: qcom: msm8992: Don't use sfpb mutex arm64: dts: qcom: msm8992-libra: Add CPU regulators arm64: dts: qcom: msm8992-libra: Fix the memory map phy: ti: fix Kconfig warning and operator precedence NFSD: fix use-after-free in nfsd4_ssc_setup_dul() ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60 amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent amd-xgbe: Delay AN timeout during KR training bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() net: nfc: Fix use-after-free in local_cleanup() net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs net: enetc: avoid deadlock in enetc_tx_onestep_tstamp() sch_htb: Avoid grafting on htb_destroy_class_offload when destroying htb gpio: use raw spinlock for gpio chip shadowed data gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid pinctrl/rockchip: Use temporary variable for struct device pinctrl/rockchip: add error handling for pull/drive register getters pinctrl: rockchip: fix reading pull type on rk3568 net: stmmac: Fix queue statistics reading net/sched: sch_taprio: fix possible use-after-free l2tp: Serialize access to sk_user_data with sk_callback_lock l2tp: Don't sleep and disable BH under writer-side sk_callback_lock l2tp: convert l2tp_tunnel_list to idr l2tp: close all race conditions in l2tp_tunnel_register() octeontx2-pf: Avoid use of GFP_KERNEL in atomic context net: usb: sr9700: Handle negative len net: mdio: validate parameter addr in mdiobus_get_phy() HID: check empty report_list in hid_validate_values() HID: check empty report_list in bigben_probe() net: stmmac: fix invalid call to mdiobus_get_phy() pinctrl: rockchip: fix mux route data for rk3568 HID: revert CHERRY_MOUSE_000C quirk usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait usb: gadget: f_fs: Ensure ep0req is dequeued before free_request Bluetooth: Fix possible deadlock in rfcomm_sk_state_change net: ipa: disable ipa interrupt during suspend net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT net: mlx5: eliminate anonymous module_init & module_exit drm/panfrost: fix GENERIC_ATOMIC64 dependency dmaengine: Fix double increment of client_count in dma_chan_get() net: macb: fix PTP TX timestamp failure due to packet padding virtio-net: correctly enable callback during start_xmit l2tp: prevent lockdep issue in l2tp_tunnel_register() HID: betop: check shape of output reports cifs: fix potential deadlock in cache_refresh_path() dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node() phy: phy-can-transceiver: Skip warning if no "max-bitrate" drm/amd/display: fix issues with driver unload nvme-pci: fix timeout request state check tcp: avoid the lookup process failing to get sk in ehash table octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt ptdma: pt_core_execute_cmd() should use spinlock device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() w1: fix deadloop in __w1_remove_master_device() w1: fix WARNING after calling w1_process() driver core: Fix test_async_probe_init saves device in wrong array selftests/net: toeplitz: fix race on tpacket_v3 block close net: dsa: microchip: ksz9477: port map correction in ALU table entry register thermal/core: Remove duplicate information when an error occurs thermal/core: Rename 'trips' to 'num_trips' thermal: Validate new state in cur_state_store() thermal/core: fix error code in __thermal_cooling_device_register() thermal: core: call put_device() only after device_register() fails net: stmmac: enable all safety features by default tcp: fix rate_app_limited to default to 1 scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist kcsan: test: don't put the expect array on the stack cpufreq: Add SM6375 to cpufreq-dt-platdev blocklist ASoC: fsl_micfil: Correct the number of steps on SX controls net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem drm: Add orientation quirk for Lenovo ideapad D330-10IGL s390/debug: add _ASM_S390_ prefix to header guard s390: expicitly align _edata and _end symbols on page boundary perf/x86/msr: Add Emerald Rapids perf/x86/intel/uncore: Add Emerald Rapids cpufreq: armada-37xx: stop using 0 as NULL pointer ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets spi: spidev: remove debug messages that access spidev->spi without locking KVM: s390: interrupt: use READ_ONCE() before cmpxchg() scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id r8152: add vendor/device ID pair for Microsoft Devkit platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK lockref: stop doing cpu_relax in the cmpxchg loop firmware: coreboot: Check size of table entry and use flex-array drm/i915: Allow switching away via vga-switcheroo if uninitialized Revert "selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID" drm/i915: Remove unused variable x86: ACPI: cstate: Optimize C3 entry on AMD CPUs fs: reiserfs: remove useless new_opts in reiserfs_remount sysctl: add a new register_sysctl_init() interface kernel/panic: move panic sysctls to its own file panic: unset panic_on_warn inside panic() ubsan: no need to unset panic_on_warn in ubsan_epilogue() kasan: no need to unset panic_on_warn in end_report() exit: Add and use make_task_dead. objtool: Add a missing comma to avoid string concatenation hexagon: Fix function name in die() h8300: Fix build errors from do_exit() to make_task_dead() transition csky: Fix function name in csky_alignment() and die() ia64: make IA64_MCA_RECOVERY bool instead of tristate panic: Separate sysctl logic from CONFIG_SMP exit: Put an upper limit on how often we can oops exit: Expose "oops_count" to sysfs exit: Allow oops_limit to be disabled panic: Consolidate open-coded panic_on_warn checks panic: Introduce warn_limit panic: Expose "warn_count" to sysfs docs: Fix path paste-o for /sys/kernel/warn_count exit: Use READ_ONCE() for all oops/warn limit reads Bluetooth: hci_sync: cancel cmd_timer if hci_open failed drm/amdgpu: complete gfxoff allow signal during suspend without delay scsi: hpsa: Fix allocation size for scsi_host_alloc() KVM: SVM: fix tsc scaling cache logic module: Don't wait for GOING modules tracing: Make sure trace_printk() can output as soon as it can be used trace_events_hist: add check for return value of 'create_hist_field' ftrace/scripts: Update the instructions for ftrace-bisect.sh cifs: Fix oops due to uncleared server->smbd_conn in reconnect i2c: mv64xxx: Remove shutdown method from driver i2c: mv64xxx: Add atomic_xfer method to driver ksmbd: add smbd max io size parameter ksmbd: add max connections parameter ksmbd: do not sign response to session request for guest login ksmbd: downgrade ndr version error message to debug ksmbd: limit pdu length size according to connection status ovl: fail on invalid uid/gid mapping at copy up KVM: x86/vmx: Do not skip segment attributes if unusable bit is set KVM: arm64: GICv4.1: Fix race with doorbell on VPE activation/deactivation thermal: intel: int340x: Protect trip temperature from concurrent updates ipv6: fix reachability confirmation with proxy_ndp ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment EDAC/device: Respect any driver-supplied workqueue polling value EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info net: mana: Fix IRQ name - add PCI and queue number scsi: ufs: core: Fix devfreq deadlocks i2c: designware: use casting of u64 in clock multiplication to avoid overflow netlink: prevent potential spectre v1 gadgets net: fix UaF in netns ops registration error path drm/i915/selftest: fix intel_selftest_modify_policy argument types netfilter: nft_set_rbtree: Switch to node list walk for overlap detection netfilter: nft_set_rbtree: skip elements in transaction from garbage collection netlink: annotate data races around nlk->portid netlink: annotate data races around dst_portid and dst_group netlink: annotate data races around sk_state ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() ipv4: prevent potential spectre v1 gadget in fib_metrics_match() netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE netrom: Fix use-after-free of a listening socket. net/sched: sch_taprio: do not schedule in taprio_reset() sctp: fail if no bound addresses can be used for a given scope riscv/kprobe: Fix instruction simulation of JALR nvme: fix passthrough csi check gpio: mxc: Unlock on error path in mxc_flip_edge() ravb: Rename "no_ptp_cfg_active" and "ptp_cfg_active" variables net: ravb: Fix lack of register setting after system resumed for Gen3 net: ravb: Fix possible hang if RIS2_QFF1 happen net: mctp: mark socks as dead on unhash, prevent re-add thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type() net/tg3: resolve deadlock in tg3_reset_task() during EEH net: mdio-mux-meson-g12a: force internal PHY off on mux switch treewide: fix up files incorrectly marked executable tools: gpio: fix -c option of gpio-event-mon Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode" cpufreq: Move to_gov_attr_set() to cpufreq.h cpufreq: governor: Use kobject release() method to free dbs_data kbuild: Allow kernel installation packaging to override pkg-config block: fix and cleanup bio_check_ro x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL netfilter: conntrack: unify established states for SCTP paths perf/x86/amd: fix potential integer overflow on shift of a int Linux 5.15.91 Change-Id: I3349d802533097ac86e5c680fbd40c00c9719ec7 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-02-01 09:38:19 +00:00
Sriram Yagnaraman	033636b322	netfilter: conntrack: unify established states for SCTP paths ... commit a44b765148 upstream. An SCTP endpoint can start an association through a path and tear it down over another one. That means the initial path will not see the shutdown sequence, and the conntrack entry will remain in ESTABLISHED state for 5 days. By merging the HEARTBEAT_ACKED and ESTABLISHED states into one ESTABLISHED state, there remains no difference between a primary or secondary path. The timeout for the merged ESTABLISHED state is set to 210 seconds (hb_interval * max_path_retrans + rto_max). So, even if a path doesn't see the shutdown sequence, it will expire in a reasonable amount of time. With this change in place, there is now more than one state from which we can transition to ESTABLISHED, COOKIE_ECHOED and HEARTBEAT_SENT, so handle the setting of ASSURED bit whenever a state change has happened and the new state is ESTABLISHED. Removed the check for dir==REPLY since the transition to ESTABLISHED can happen only in the reply direction. Fixes: 9fb9cbb108 ("[NETFILTER]: Add nf_conntrack subsystem.") Signed-off-by: Sriram Yagnaraman <sriram.yagnaraman@est.tech> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-01 08:27:30 +01:00
Daniel Scally	e72d262632	UPSTREAM: usb: gadget: uvc: Rename bmInterfaceFlags -> bmInterlaceFlags ... In the specification documents for the Uncompressed and MJPEG USB Video Payloads, the field name is bmInterlaceFlags - it has been misnamed within the kernel. Although renaming the field does break the kernel's interface to userspace it should be low-risk in this instance. The field is read only and hardcoded to 0, so there was never any value in anyone reading it. A search of the uvc-gadget application and all the forks that I could find for it did not reveal any users either. Fixes: cdda479f15 ("USB gadget: video class function driver") Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com> Reviewed-by: Kieran Bingham <kieran.bingham@ideasonboard.com> Signed-off-by: Daniel Scally <dan.scally@ideasonboard.com> Link: https://lore.kernel.org/r/20221206161203.1562827-1-dan.scally@ideasonboard.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 81c25247a2) Bug: 259171206 Change-Id: I95ad86d0c0ab097b215e1ef655beea80c2cdb570 Signed-off-by: Avichal Rakesh <arakesh@google.com> (cherry picked from commit 4d8c2d84cb)	2023-01-25 21:07:26 -08:00
Michael Grzeschik	026d6b9e4a	UPSTREAM: usb: gadget: uvc: default the ctrl request interface offsets ... For the userspace it is needed to distinguish between requests for the control or streaming interface. The userspace would have to parse the configfs to know which interface index it has to compare the ctrl requests against. Since the interface numbers are not fixed, e.g. for composite gadgets, the interface offset depends on the setup. The kernel has this information when handing over the ctrl request to the userspace. This patch removes the offset from the interface numbers and expose the default interface defines in the uapi g_uvc.h. Signed-off-by: Michael Grzeschik <m.grzeschik@pengutronix.de> Link: https://lore.kernel.org/r/20221011075348.1786897-1-m.grzeschik@pengutronix.de Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit d182bf156c) Bug: 259171206 Change-Id: Ie5978ef268731e67ca72940ce6fbc7f980cb4419 Signed-off-by: Avichal Rakesh <arakesh@google.com> (cherry picked from commit 044c3865c6)	2023-01-25 21:07:19 -08:00
Greg Kroah-Hartman	17126d43d4	Merge 5.15.90 into android14-5.15 ... Changes in 5.15.90 btrfs: fix trace event name typo for FLUSH_DELAYED_REFS pNFS/filelayout: Fix coalescing test for single DS selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID tools/virtio: initialize spinlocks in vring_test.c virtio_pci: modify ENOENT to EINVAL vduse: Validate vq_num in vduse_validate_config() net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down() RDMA/srp: Move large values to a new enum for gcc13 btrfs: always report error in run_one_delayed_ref() x86/asm: Fix an assembler warning with current binutils f2fs: let's avoid panic if extent_tree is not created perf/x86/rapl: Treat Tigerlake like Icelake fbdev: omapfb: avoid stack overflow warning Bluetooth: hci_qca: Fix driver shutdown on closed serdev wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices wifi: mac80211: sdata can be NULL during AMPDU start Add exception protection processing for vd in axi_chan_handle_err function zonefs: Detect append writes at invalid locations nilfs2: fix general protection fault in nilfs_btree_insert() efi: fix userspace infinite retry read efivars after EFI runtime services page fault ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP platform drm/amdgpu: disable runtime pm on several sienna cichlid cards(v2) drm/amd: Delay removal of the firmware framebuffer hugetlb: unshare some PMDs when splitting VMAs io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL eventpoll: add EPOLL_URING_WAKE poll wakeup flag eventfd: provide a eventfd_signal_mask() helper io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups io_uring: improve send/recv error handling io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly io_uring: add flag for disabling provided buffer recycling io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG) io_uring: allow re-poll if we made progress io_uring: fix async accept on O_NONBLOCK sockets io_uring: ensure that cached task references are always put on exit io_uring: remove duplicated calls to io_kiocb_ppos io_uring: update kiocb->ki_pos at execution time io_uring: do not recalculate ppos unnecessarily io_uring/rw: defer fsnotify calls to task context xhci-pci: set the dma max_seg_size usb: xhci: Check endpoint is valid before dereferencing it xhci: Fix null pointer dereference when host dies xhci: Add update_hub_device override for PCI xHCI hosts xhci: Add a flag to disable USB3 lpm on a xhci root port level. usb: acpi: add helper to check port lpm capability using acpi _DSM xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables prlimit: do_prlimit needs to have a speculation check USB: serial: option: add Quectel EM05-G (GR) modem USB: serial: option: add Quectel EM05-G (CS) modem USB: serial: option: add Quectel EM05-G (RS) modem USB: serial: option: add Quectel EC200U modem USB: serial: option: add Quectel EM05CN (SG) modem USB: serial: option: add Quectel EM05CN modem staging: vchiq_arm: fix enum vchiq_status return types USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 misc: fastrpc: Don't remove map on creater_process and device_release misc: fastrpc: Fix use-after-free race condition for maps usb: core: hub: disable autosuspend for TI TUSB8041 comedi: adv_pci1760: Fix PWM instruction handling ACPI: PRM: Check whether EFI runtime is available mmc: sunxi-mmc: Fix clock refcount imbalance during unbind mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting btrfs: do not abort transaction on failure to write log tree when syncing log btrfs: fix race between quota rescan and disable leading to NULL pointer deref cifs: do not include page data when checking signature thunderbolt: Use correct function to calculate maximum USB3 link rate riscv: dts: sifive: fu740: fix size of pcie 32bit memory bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD staging: mt7621-dts: change some node hex addresses to lower case tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer tty: fix possible null-ptr-defer in spk_ttyio_release USB: gadgetfs: Fix race between mounting and unmounting USB: serial: cp210x: add SCALANCE LPE-9000 device id usb: cdns3: remove fetched trb from cache before dequeuing usb: host: ehci-fsl: Fix module alias usb: typec: tcpm: Fix altmode re-registration causes sysfs create fail usb: typec: altmodes/displayport: Add pin assignment helper usb: typec: altmodes/displayport: Fix pin assignment calculation usb: gadget: g_webcam: Send color matching descriptor per frame usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 dt-bindings: phy: g12a-usb2-phy: fix compatible string documentation dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation serial: pch_uart: Pass correct sg to dma_unmap_sg() dmaengine: lgm: Move DT parsing after initialization dmaengine: tegra210-adma: fix global intr clear dmaengine: idxd: Let probe fail when workqueue cannot be enabled serial: amba-pl011: fix high priority character transmission in rs486 mode serial: atmel: fix incorrect baudrate setup gsmi: fix null-deref in gsmi_get_variable mei: me: add meteor lake point M DID drm/i915: re-disable RC6p on Sandy Bridge drm/i915/display: Check source height is > 0 drm/amd/display: Fix set scaling doesn's work drm/amd/display: Calculate output_color_space after pixel encoding adjustment drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix drm/amdgpu: drop experimental flag on aldebaran fs/ntfs3: Fix attr_punch_hole() null pointer derenference arm64: efi: Execute runtime services from a dedicated stack efi: rt-wrapper: Add missing include Revert "drm/amdgpu: make display pinning more flexible (v2)" x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN tracing: Use alignof__(struct {type b;}) instead of offsetof() io_uring: io_kiocb_update_pos() should not touch file for non -1 offset io_uring/net: fix fast_iov assignment in io_setup_async_msg() net/ulp: use consistent error code when blocking ULP net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() block: mq-deadline: Rename deadline_is_seq_writes() Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()" soc: qcom: apr: Make qcom,protection-domain optional again mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma io_uring: Clean up a false-positive warning from GCC 9.3.0 io_uring: fix double poll leak on repolling io_uring/rw: ensure kiocb_end_write() is always called io_uring/rw: remove leftover debug statement Linux 5.15.90 Change-Id: I5abc2e695f7183a1d3be9d8f62633bb1df8e8a48 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-01-25 16:13:42 +00:00
Jens Axboe	a2d8ff00a7	eventpoll: add EPOLL_URING_WAKE poll wakeup flag ... [ Upstream commit caf1aeaffc ] We can have dependencies between epoll and io_uring. Consider an epoll context, identified by the epfd file descriptor, and an io_uring file descriptor identified by iofd. If we add iofd to the epfd context, and arm a multishot poll request for epfd with iofd, then the multishot poll request will repeatedly trigger and generate events until terminated by CQ ring overflow. This isn't a desired behavior. Add EPOLL_URING so that io_uring can pass it in as part of the poll wakeup key, and io_uring can check for that to detect a potential recursive invocation. Cc: stable@vger.kernel.org # 6.0 Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-01-24 07:22:43 +01:00
Greg Kroah-Hartman	962d1816e1	Merge 5.15.86 into android14-5.15 ... Changes in 5.15.86 drm/amd/display: Manually adjust strobe for DCN303 usb: musb: remove extra check in musb_gadget_vbus_draw arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable arm64: dts: qcom: msm8996: Add MSM8996 Pro support arm64: dts: qcom: msm8996: fix supported-hw in cpufreq OPP tables arm64: dts: qcom: msm8996: fix GPU OPP table ARM: dts: qcom: apq8064: fix coresight compatible arm64: dts: qcom: sdm630: fix UART1 pin bias arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias arm64: dts: qcom: msm8916: Drop MSS fallback compatible objtool, kcsan: Add volatile read/write instrumentation to whitelist ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96 ARM: dts: stm32: Fix AV96 WLAN regulator gpio property drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static arm64: dts: qcom: pm660: Use unique ADC5_VCOIN address in node name arm64: dts: qcom: sm8250: correct LPASS pin pull down soc: qcom: llcc: make irq truly optional arm64: dts: qcom: Correct QMP PHY child node name arm64: dts: qcom: sm8150: fix UFS PHY registers arm64: dts: qcom: sm8250: fix UFS PHY registers arm64: dts: qcom: sm8350: fix UFS PHY registers arm64: dts: qcom: sm8250: drop bogus DP PHY clock soc: qcom: apr: make code more reuseable soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index arm64: dts: qcom: sm6125: fix SDHCI CQE reg names arm: dts: spear600: Fix clcd interrupt soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe arm64: Treat ESR_ELx as a 64-bit register arm64: mm: kfence: only handle translation faults perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node ARM: dts: nuvoton: Remove bogus unit addresses from fixed-partition nodes arm64: dts: mt6779: Fix devicetree build warnings arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators arm64: dts: mt2712e: Fix unit address for pinctrl node arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names arm64: dts: mt2712-evb: Fix usb vbus regulators unit names arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port ARM: dts: turris-omnia: Add ethernet aliases ARM: dts: turris-omnia: Add switch port 6 node arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC seccomp: Move copy_seccomp() to no failure path. pstore/ram: Fix error return code in ramoops_probe() ARM: mmp: fix timer_read delay pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init() tpm/tpm_crb: Fix error message in __crb_relinquish_locality() ovl: store lower path in ovl_inode ovl: use ovl_copy_{real,upper}attr() wrappers ovl: remove privs in ovl_copyfile() ovl: remove privs in ovl_fallocate() sched/fair: Cleanup task_util and capacity type sched/uclamp: Fix relationship between uclamp and migration margin sched/uclamp: Make task_fits_capacity() use util_fits_cpu() sched/uclamp: Make select_idle_capacity() use util_fits_cpu() sched/fair: Removed useless update of p->recent_used_cpu sched/core: Introduce sched_asym_cpucap_active() sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() cpuidle: dt: Return the correct numbers of parsed idle states alpha: fix TIF_NOTIFY_SIGNAL handling alpha: fix syscall entry in !AUDUT_SYSCALL case x86/sgx: Reduce delay and interference of enclave release PM: hibernate: Fix mistake in kerneldoc comment fs: don't audit the capability check in simple_xattr_list() cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() selftests/ftrace: event_triggers: wait longer for test_event_enable perf: Fix possible memleak in pmu_dev_alloc() lib/debugobjects: fix stat count and optimize debug_objects_mem_init platform/x86: huawei-wmi: fix return value calculation timerqueue: Use rb_entry_safe() in timerqueue_getnext() proc: fixup uptime selftest lib/fonts: fix undefined behavior in bit shift for get_default_font ocfs2: fix memory leak in ocfs2_stack_glue_init() MIPS: vpe-mt: fix possible memory leak while module exiting MIPS: vpe-cmp: fix possible memory leak while module exiting selftests/efivarfs: Add checking of the test return value PNP: fix name memory leak in pnp_alloc_dev() perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() thermal: core: fix some possible name leaks in error paths irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() SUNRPC: Return true/false (not 1/0) from bool functions NFSD: Finish converting the NFSv2 GETACL result encoder nfsd: don't call nfsd_file_put from client states seqfile display genirq/irqdesc: Don't try to remove non-existing sysfs files cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value lib/notifier-error-inject: fix error when writing -errno to debugfs file debugfs: fix error when writing negative value to atomic_t debugfs file rapidio: fix possible name leaks when rio_add_device() fails rapidio: rio: fix possible name leak in rio_register_mport() clocksource/drivers/sh_cmt: Access registers according to spec mips: ralink: mt7621: define MT7621_SYSC_BASE with __iomem mips: ralink: mt7621: soc queries and tests as functions mips: ralink: mt7621: do not use kzalloc too early futex: Move to kernel/futex/ futex: Resend potentially swallowed owner death notification cpu/hotplug: Make target_store() a nop when target == state cpu/hotplug: Do not bail-out in DYING/STARTING sections clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock() ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() x86/xen: Fix memory leak in xen_init_lock_cpu() xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() PM: runtime: Do not call __rpm_callback() from rpm_idle() platform/chrome: cros_ec_typec: Cleanup switch handle return paths platform/chrome: cros_ec_typec: zero out stale pointers platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() MIPS: BCM63xx: Add check for NULL for clk in clk_enable MIPS: OCTEON: warn only once if deprecated link status is being used lockd: set other missing fields when unlocking files fs: sysv: Fix sysv_nblocks() returns wrong value rapidio: fix possible UAF when kfifo_alloc() fails eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD relay: fix type mismatch when allocating memory in relay_create_buf() hfs: Fix OOB Write in hfs_asc2mac rapidio: devices: fix missing put_device in mport_cdev_open platform/mellanox: mlxbf-pmc: Fix event typo wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() wifi: rtl8xxxu: Fix reading the vendor of combo chips drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge libbpf: Fix use-after-free in btf_dump_name_dups libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() ata: libata: move ata_{port,link,dev}_dbg to standard pr_XXX() macros ata: add/use ata_taskfile::{error|status} fields ata: libata: fix NCQ autosense logic ipmi: kcs: Poll OBF briefly to reduce OBE latency drm/amdgpu/powerplay/psm: Fix memory leak in power state init media: v4l2-ctrls: Fix off-by-one error in integer menu control check media: coda: jpeg: Add check for kmalloc media: adv748x: afe: Select input port when initializing AFE media: i2c: ad5820: Fix error path venus: pm_helpers: Fix error check in vcodec_domains_get() soreuseport: Fix socket selection for SO_INCOMING_CPU. media: exynos4-is: don't rely on the v4l2_async_subdev internals libbpf: Btf dedup identical struct test needs check for nested structs/arrays can: kvaser_usb: do not increase tx statistics when sending error message frames can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT can: kvaser_usb_leaf: Set Warning state even without bus errors can: kvaser_usb: make use of units.h in assignment of frequency can: kvaser_usb_leaf: Fix improved state not being reported can: kvaser_usb_leaf: Fix wrong CAN state after stopping can: kvaser_usb_leaf: Fix bogus restart events can: kvaser_usb: Add struct kvaser_usb_busparams can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming drm/rockchip: lvds: fix PM usage counter unbalance in poweron clk: renesas: r9a06g032: Repair grave increment error spi: Update reference to struct spi_controller drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure ima: Handle -ESTALE returned by ima_filter_rule_match() drm/msm/hdmi: drop unused GPIO support drm/msm/hdmi: use devres helper for runtime PM management bpf: Fix slot type check in check_stack_write_var_off media: vivid: fix compose size exceed boundary media: platform: exynos4-is: fix return value check in fimc_md_probe() bpf: propagate precision in ALU/ALU64 operations bpf: Check the other end of slot_type for STACK_SPILL bpf: propagate precision across all frames, not just the last one clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs mtd: Fix device name leak when register device failed in add_mtd_device() Input: joystick - fix Kconfig warning for JOYSTICK_ADC wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port media: camss: Clean up received buffers on failed start of streaming net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() rxrpc: Fix ack.bufferSize to be 0 when generating an ack bfq: fix waker_bfqq inconsistency crash drm/radeon: Add the missed acpi_put_table() to fix memory leak drm/mediatek: Modify dpi power on/off sequence. ASoC: pxa: fix null-pointer dereference in filter() libbpf: Fix uninitialized warning in btf_dump_dump_type_data nvmet: only allocate a single slab for bvecs regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() nvme: return err on nvme_init_non_mdts_limits fail regulator: qcom-rpmh: Fix PMR735a S3 regulator spec drm/fourcc: Add packed 10bit YUV 4:2:0 format drm/fourcc: Fix vsub/hsub for Q410 and Q401 integrity: Fix memory leakage in keyring allocation error path ima: Fix misuse of dereference of pointer in template_desc_init_fields() block: clear ->slave_dir when dropping the main slave_dir reference wifi: ath10k: Fix return value in ath10k_pci_init() drm/msm/a6xx: Fix speed-bin detection vs probe-defer mtd: lpddr2_nvm: Fix possible null-ptr-deref Input: elants_i2c - properly handle the reset GPIO when power is off media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() media: solo6x10: fix possible memory leak in solo_sysfs_init() media: platform: exynos4-is: Fix error handling in fimc_md_init() media: videobuf-dma-contig: use dma_mmap_coherent inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict() mtd: spi-nor: hide jedec_id sysfs attribute if not present mtd: spi-nor: Fix the number of bytes for the dummy cycles bpf: Move skb->len == 0 checks into __bpf_redirect HID: hid-sensor-custom: set fixed size for custom attributes pinctrl: k210: call of_node_put() ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT regulator: core: use kfree_const() to free space conditionally clk: rockchip: Fix memory leak in rockchip_clk_register_pll() drm/amdgpu: fix pci device refcount leak bonding: fix link recovery in mode 2 when updelay is nonzero mtd: maps: pxa2xx-flash: fix memory leak in probe drbd: remove call to memset before free device/resource/connection drbd: destroy workqueue when drbd device was freed ASoC: qcom: Add checks for devm_kcalloc media: vimc: Fix wrong function called when vimc_init() fails media: imon: fix a race condition in send_packet() clk: imx8mn: rename vpu_pll to m7_alt_pll clk: imx: replace osc_hdmi with dummy clk: imx8mn: fix imx8mn_sai2_sels clocks list clk: imx8mn: fix imx8mn_enet_phy_sels clocks list pinctrl: pinconf-generic: add missing of_node_put() media: dvb-core: Fix ignored return value in dvb_register_frontend() media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() ASoC: dt-bindings: wcd9335: fix reset line polarity in example ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding NFSv4.2: Fix a memory stomp in decode_attr_security_label NFSv4.2: Fix initialisation of struct nfs4_label NFSv4: Fix a credential leak in _nfs4_discover_trunking() NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn NFS: Fix an Oops in nfs_d_automount() ALSA: asihpi: fix missing pci_disable_device() wifi: iwlwifi: mvm: fix double free on tx path. ASoC: mediatek: mt8173: Fix debugfs registration for components ASoC: mediatek: mt8173: Enable IRQ when pdata is ready drm/amd/pm/smu11: BACO is supported when it's in BACO state drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() drm/amdkfd: Fix memory leakage ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe netfilter: conntrack: set icmpv6 redirects as RELATED Input: wistron_btns - disable on UML bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect bonding: uninitialized variable in bond_miimon_inspect() spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE wifi: mac80211: fix memory leak in ieee80211_if_add() wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails mt76: stop the radar detector after leaving dfs channel wifi: mt76: mt7921: fix reporting of TX AGGR histogram wifi: mt76: fix coverity overrun-call in mt76_get_txpower() regulator: core: fix module refcount leak in set_supply() clk: qcom: lpass-sc7180: Fix pm_runtime usage clk: qcom: clk-krait: fix wrong div2 functions hsr: Add a rcu-read lock to hsr_forward_skb(). hsr: Avoid double remove of a node. hsr: Disable netpoll. hsr: Synchronize sending frames to have always incremented outgoing seq nr. hsr: Synchronize sequence number updates. configfs: fix possible memory leak in configfs_create_dir() regulator: core: fix resource leak in regulator_register() hwmon: (jc42) Convert register access and caching to regmap/regcache hwmon: (jc42) Restore the min/max/critical temperatures on resume bpf, sockmap: fix race in sock_map_free() ALSA: pcm: Set missing stop_operating flag at undoing trigger start media: saa7164: fix missing pci_disable_device() ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() SUNRPC: Fix missing release socket in rpc_sockname() NFSv4.x: Fail client initialisation if state manager thread can't run riscv, bpf: Emit fixed-length instructions for BPF_PSEUDO_FUNC mmc: alcor: fix return value check of mmc_add_host() mmc: moxart: fix return value check of mmc_add_host() mmc: mxcmmc: fix return value check of mmc_add_host() mmc: pxamci: fix return value check of mmc_add_host() mmc: rtsx_pci: fix return value check of mmc_add_host() mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() mmc: toshsd: fix return value check of mmc_add_host() mmc: vub300: fix return value check of mmc_add_host() mmc: wmt-sdmmc: fix return value check of mmc_add_host() mmc: atmel-mci: fix return value check of mmc_add_host() mmc: omap_hsmmc: fix return value check of mmc_add_host() mmc: meson-gx: fix return value check of mmc_add_host() mmc: via-sdmmc: fix return value check of mmc_add_host() mmc: wbsd: fix return value check of mmc_add_host() mmc: mmci: fix return value check of mmc_add_host() mmc: renesas_sdhi: alway populate SCC pointer memstick: ms_block: Add error handling support for add_disk() memstick/ms_block: Add check for alloc_ordered_workqueue mmc: core: Normalize the error handling branch in sd_read_ext_regs() regulator: qcom-labibb: Fix missing of_node_put() in qcom_labibb_regulator_probe() media: c8sectpfe: Add of_node_put() when breaking out of loop media: coda: Add check for dcoda_iram_alloc media: coda: Add check for kmalloc clk: samsung: Fix memory leak in _samsung_clk_register_pll() spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h wifi: rtl8xxxu: Fix the channel width reporting wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() blktrace: Fix output non-blktrace event when blk_classic option enabled bpf: Do not zero-extend kfunc return values clk: socfpga: Fix memory leak in socfpga_gate_init() net: vmw_vsock: vmci: Check memcpy_from_msg() net: defxx: Fix missing err handling in dfx_init() net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() net: stmmac: fix possible memory leak in stmmac_dvr_probe() drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() net: farsync: Fix kmemleak when rmmods farsync net/tunnel: wait until all sk_user_data reader finish before releasing the sock net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() af_unix: call proto_unregister() in the error path in af_unix_init() net: amd-xgbe: Fix logic around active and passive cables net: amd-xgbe: Check only the minimum speed for active/passive cables can: tcan4x5x: Remove invalid write in clear_interrupts can: m_can: Call the RAM init directly from m_can_chip_config can: tcan4x5x: Fix use of register error status mask net: lan9303: Fix read error execution path ntb_netdev: Use dev_kfree_skb_any() in interrupt context sctp: sysctl: make extra pointers netns aware Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() stmmac: fix potential division by 0 i40e: Fix the inability to attach XDP program on downed interface net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path apparmor: fix a memleak in multi_transaction_new() apparmor: fix lockdep warning when removing a namespace apparmor: Fix abi check to include v8 abi crypto: hisilicon/qm - fix missing destroy qp_idr crypto: sun8i-ss - use dma_addr instead u32 crypto: nitrox - avoid double free on error path in nitrox_sriov_init() scsi: core: Fix a race between scsi_done() and scsi_timeout() apparmor: Use pointer to struct aa_label for lbs_cred PCI: dwc: Fix n_fts[] array overrun RDMA/core: Fix order of nldev_exit call PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled f2fs: Fix the race condition of resize flag between resizefs crypto: rockchip - do not do custom power management crypto: rockchip - do not store mode globally crypto: rockchip - add fallback for cipher crypto: rockchip - add fallback for ahash crypto: rockchip - better handle cipher key crypto: rockchip - remove non-aligned handling crypto: rockchip - rework by using crypto_engine apparmor: Fix memleak in alloc_ns() f2fs: fix to invalidate dcc->f2fs_issue_discard in error path f2fs: fix normal discard process f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super() RDMA/irdma: Report the correct link speed scsi: qla2xxx: Fix set-but-not-used variable warnings RDMA/siw: Fix immediate work request flush to completion queue IB/mad: Don't call to function that might sleep while in atomic context PCI: vmd: Disable MSI remapping after suspend RDMA/restrack: Release MR restrack when delete RDMA/core: Make sure "ib_port" is valid when access sysfs node RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port RDMA/siw: Set defined status for work completion with undefined status scsi: scsi_debug: Fix a warning in resp_write_scat() crypto: ccree - Remove debugfs when platform_driver_register failed crypto: cryptd - Use request context instead of stack for sub-request crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data() RDMA/hns: Fix ext_sge num error when post send PCI: Check for alloc failure in pci_request_irq() RDMA/hfi: Decrease PCI device reference count in error path crypto: ccree - Make cc_debugfs_global_fini() available for module init function RDMA/hns: fix memory leak in hns_roce_alloc_mr() RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed dt-bindings: imx6q-pcie: Fix clock names for imx6sx and imx8mq dt-bindings: visconti-pcie: Fix interrupts array max constraints scsi: hpsa: Fix possible memory leak in hpsa_init_one() crypto: tcrypt - Fix multibuffer skcipher speed test mem leak padata: Always leave BHs disabled when running ->parallel() padata: Fix list iterator in padata_do_serial() scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() scsi: hpsa: Fix error handling in hpsa_add_sas_host() scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() scsi: efct: Fix possible memleak in efct_device_init() scsi: scsi_debug: Fix a warning in resp_verify() scsi: scsi_debug: Fix a warning in resp_report_zones() scsi: fcoe: Fix possible name leak when device_register() fails scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() scsi: ipr: Fix WARNING in ipr_init() scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails scsi: snic: Fix possible UAF in snic_tgt_create() RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() f2fs: avoid victim selection from previous victim section RDMA/nldev: Fix failure to send large messages crypto: amlogic - Remove kcalloc without check crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() riscv/mm: add arch hook arch_clear_hugepage_flags RDMA/hfi1: Fix error return code in parse_platform_config() RDMA/srp: Fix error return code in srp_parse_options() PCI: mt7621: Rename mt7621_pci_ to mt7621_pcie_ PCI: mt7621: Add sentinel to quirks table orangefs: Fix sysfs not cleanup when dev init failed RDMA/hns: Fix AH attr queried by query_qp RDMA/hns: Fix PBL page MTR find RDMA/hns: Fix page size cap from firmware RDMA/hns: Fix error code of CMD crypto: img-hash - Fix variable dereferenced before check 'hdev->req' hwrng: amd - Fix PCI device refcount leak hwrng: geode - Fix PCI device refcount leak IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces RISC-V: Align the shadow stack drivers: dio: fix possible memory leak in dio_init() serial: tegra: Read DMA status before terminating serial: 8250_bcm7271: Fix error handling in brcmuart_init() class: fix possible memory leak in __class_register() vfio: platform: Do not pass return buffer to ACPI _RST method uio: uio_dmem_genirq: Fix missing unlock in irq configuration uio: uio_dmem_genirq: Fix deadlock between irq config and handling usb: fotg210-udc: Fix ages old endianness issues staging: vme_user: Fix possible UAF in tsi148_dma_list_add usb: typec: Check for ops->exit instead of ops->enter in altmode_exit usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails usb: typec: tipd: Fix spurious fwnode_handle_put in error path extcon: usbc-tusb320: Add support for mode setting and reset extcon: usbc-tusb320: Add support for TUSB320L usb: typec: Factor out non-PD fwnode properties extcon: usbc-tusb320: Factor out extcon into dedicated functions extcon: usbc-tusb320: Add USB TYPE-C support extcon: usbc-tusb320: Update state on probe even if no IRQ pending serial: amba-pl011: avoid SBSA UART accessing DMACR register serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. serial: stm32: move dma_request_chan() before clk_prepare_enable() serial: pch: Fix PCI device refcount leak in pch_request_dma() tty: serial: clean up stop-tx part in altera_uart_tx_chars() tty: serial: altera_uart_{r,t}x_chars() need only uart_port serial: altera_uart: fix locking in polling mode serial: sunsab: Fix error handling in sunsab_init() test_firmware: fix memory leak in test_firmware_init() misc: ocxl: fix possible name leak in ocxl_file_register_afu() ocxl: fix pci device refcount leak when calling get_function_0() misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() iio: temperature: ltc2983: make bulk write buffer DMA-safe iio: adis: handle devices that cannot unmask the drdy pin iio: adis: stylistic changes iio:imu:adis: Move exports into IIO_ADISLIB namespace iio: adis: add '__adis_enable_irq()' implementation counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update coresight: trbe: remove cpuhp instance node before remove cpuhp state usb: roles: fix of node refcount leak in usb_role_switch_is_parent() usb: gadget: f_hid: fix f_hidg lifetime vs cdev usb: gadget: f_hid: fix refcount leak on error path drivers: mcb: fix resource leak in mcb_probe() mcb: mcb-parse: fix error handing in chameleon_parse_gdd() chardev: fix error handling in cdev_device_add() i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe staging: rtl8192u: Fix use after free in ieee80211_rx() staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() vme: Fix error not catched in fake_init() gpiolib: Get rid of redundant 'else' gpiolib: cdev: fix NULL-pointer dereferences gpiolib: make struct comments into real kernel docs gpiolib: protect the GPIO device against being dropped while in use by user-space i2c: mux: reg: check return value after calling platform_get_resource() i2c: ismt: Fix an out-of-bounds bug in ismt_access() usb: storage: Add check for kcalloc tracing/hist: Fix issue of losting command info in error_log ksmbd: Fix resource leak in ksmbd_session_rpc_open() samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() thermal/drivers/imx8mm_thermal: Validate temperature range thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2 thermal/drivers/qcom/lmh: Fix irq handler return value fbdev: ssd1307fb: Drop optional dependency fbdev: pm2fb: fix missing pci_disable_device() fbdev: via: Fix error in via_core_init() fbdev: vermilion: decrease reference count in error path fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() fbdev: geode: don't build on UML fbdev: uvesafb: don't build on UML fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() HSI: omap_ssi_core: fix possible memory leak in ssi_probe() power: supply: fix residue sysfs file in error handle route of __power_supply_register() perf trace: Return error if a system call doesn't exist perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number perf trace: Handle failure when trace point folder is missed perf symbol: correction while adjusting symbol power: supply: z2_battery: Fix possible memleak in z2_batt_probe() HSI: omap_ssi_core: Fix error handling in ssi_init() power: supply: ab8500: Fix error handling in ab8500_charger_init() power: supply: fix null pointer dereferencing in power_supply_get_battery_info perf stat: Refactor __run_perf_stat() common code perf stat: Do not delay the workload with --delay RDMA/siw: Fix pointer cast warning fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst() overflow: Implement size_t saturating arithmetic helpers fs/ntfs3: Harden against integer overflows iommu/sun50i: Fix reset release iommu/sun50i: Consider all fault sources for reset iommu/sun50i: Fix R/W permission check iommu/sun50i: Fix flush size iommu/rockchip: fix permission bits in page table entries v2 phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices include/uapi/linux/swab: Fix potentially missing __always_inline pwm: tegra: Improve required rate calculation fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs dmaengine: idxd: Fix crc_val field for completion record rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0 rtc: cmos: Fix event handler registration ordering issue rtc: cmos: Fix wake alarm breakage rtc: cmos: fix build on non-ACPI platforms rtc: cmos: Call cmos_wake_setup() from cmos_do_probe() rtc: cmos: Call rtc_wake_setup() from cmos_do_probe() rtc: cmos: Eliminate forward declarations of some functions rtc: cmos: Rename ACPI-related functions rtc: cmos: Disable ACPI RTC event on removal rtc: snvs: Allow a time difference on clock register read rtc: pcf85063: Fix reading alarm iommu/amd: Fix pci device refcount leak in ppr_notifier() iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() macintosh: fix possible memory leak in macio_add_one_device() macintosh/macio-adb: check the return value of ioremap() powerpc/52xx: Fix a resource leak in an error handling path cxl: Fix refcount leak in cxl_calc_capp_routing powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() powerpc/perf: callchain validate kernel stack pointer bounds powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() powerpc/hv-gpci: Fix hv_gpci event list selftests/powerpc: Fix resource leaks iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY pwm: sifive: Call pwm_sifive_update_clock() while mutex is held pwm: mtk-disp: Fix the parameters calculated by the enabled flag of disp_pwm pwm: mediatek: always use bus clock for PWM on MT7622 remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove remoteproc: qcom_q6v5_pas: detach power domains on remove remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in q6v5_wcss_qcs404_power_on() powerpc/eeh: Drop redundant spinlock initialization powerpc/pseries/eeh: use correct API for error log size mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe() mfd: pm8008: Remove driver data structure pm8008_data mfd: pm8008: Fix return value check in pm8008_probe() netfilter: flowtable: really fix NAT IPv6 offload rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() rtc: pcf85063: fix pcf85063_clkout_control nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure net: macsec: fix net device access prior to holding a lock mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() block, bfq: fix possible uaf for 'bfqq->bic' selftests/bpf: Add test for unstable CT lookup API net: enetc: avoid buffer leaks on xdp_do_redirect() failure nfc: pn533: Clear nfc_target before being used unix: Fix race in SOCK_SEQPACKET's unix_dgram_sendmsg() r6040: Fix kmemleak in probe and remove igc: Enhance Qbv scheduling by using first flag bit igc: Use strict cycles for Qbv scheduling igc: Add checking for basetime less than zero igc: allow BaseTime 0 enrollment for Qbv igc: recalculate Qbv end_time by considering cycle time igc: Lift TAPRIO schedule restriction igc: Set Qbv start_time and end_time to end_time if not being configured in GCL rtc: mxc_v2: Add missing clk_disable_unprepare() selftests: devlink: fix the fd redirect in dummy_reporter_test openvswitch: Fix flow lookup to use unmasked key soc: mediatek: pm-domains: Fix the power glitch issue arm64: dts: mt8183: Fix Mali GPU clock skbuff: Account for tail adjustment during pull operations mailbox: mpfs: read the system controller's status mailbox: arm_mhuv2: Fix return value check in mhuv2_probe() mailbox: zynq-ipi: fix error handling while device_register() fails net_sched: reject TCF_EM_SIMPLE case for complex ematch module rxrpc: Fix missing unlock in rxrpc_do_sendmsg() myri10ge: Fix an error handling path in myri10ge_probe() net: stream: purge sk_error_queue in sk_stream_kill_queues() HID: amd_sfh: Add missing check for dma_alloc_coherent rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() arm64: make is_ttbrX_addr() noinstr-safe video: hyperv_fb: Avoid taking busy spinlock on panic path x86/hyperv: Remove unregister syscore call from Hyper-V cleanup binfmt_misc: fix shift-out-of-bounds in check_special_flags fs: jfs: fix shift-out-of-bounds in dbAllocAG udf: Avoid double brelse() in udf_rename() jfs: Fix fortify moan in symlink fs: jfs: fix shift-out-of-bounds in dbDiscardAG ACPICA: Fix error code path in acpi_ds_call_control_method() nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() nilfs2: fix shift-out-of-bounds due to too large exponent of block size acct: fix potential integer overflow in encode_comp_t() hfs: fix OOB Read in __hfs_brec_find drm/etnaviv: add missing quirks for GC300 media: imx-jpeg: Disable useless interrupt to avoid kernel panic brcmfmac: return error when getting invalid max_flowrings from dongle wifi: ath9k: verify the expected usb_endpoints are present wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out ASoC: codecs: rt298: Add quirk for KBL-R RVP platform ipmi: fix memleak when unload ipmi driver drm/amd/display: prevent memory leak Revert "drm/amd/display: Limit max DSC target bpp for specific monitors" qed (gcc13): use u16 for fid to be big enough bpf: make sure skb->len != 0 when redirecting to a tunneling device net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() hamradio: baycom_epp: Fix return type of baycom_send_packet() wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() igb: Do not free q_vector unless new one was allocated drm/amdgpu: Fix type of second parameter in trans_msg() callback drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback s390/ctcm: Fix return type of ctc{mp,}m_tx() s390/netiucv: Fix return type of netiucv_tx() s390/lcs: Fix return type of lcs_start_xmit() drm/msm: Use drm_mode_copy() drm/rockchip: Use drm_mode_copy() drm/sti: Use drm_mode_copy() drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid() drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() md/raid1: stop mdx_raid1 thread when raid1 array run failed drm/amd/display: fix array index out of bound error in bios parser net: add atomic_long_t to net_device_stats fields ipv6/sit: use DEV_STATS_INC() to avoid data-races mrp: introduce active flags to prevent UAF when applicant uninit ppp: associate skb with a device at tx bpf: Prevent decl_tag from being referenced in func_proto arg ethtool: avoiding integer overflow in ethtool_phys_id() media: dvb-frontends: fix leak of memory fw media: dvbdev: adopts refcnt to avoid UAF media: dvb-usb: fix memory leak in dvb_usb_adapter_init() blk-mq: fix possible memleak when register 'hctx' failed drm/amd/display: Use the largest vready_offset in pipe group libbpf: Avoid enum forward-declarations in public API in C++ mode regulator: core: fix use_count leakage when handling boot-on wifi: mt76: do not run mt76u_status_worker if the device is not running mmc: f-sdh30: Add quirks for broken timeout clock capability mmc: renesas_sdhi: better reset from HS400 mode media: si470x: Fix use-after-free in si470x_int_in_callback() clk: st: Fix memory leak in st_of_quadfs_setup() crypto: hisilicon/hpre - fix resource leak in remove process scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs scsi: ufs: Reduce the START STOP UNIT timeout scsi: elx: libefc: Fix second parameter type in state callbacks hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() tools/include: Add _RET_IP_ and math definitions to kernel.h KVM: selftests: Fix build regression by using accessor function hwmon: (jc42) Fix missing unlock on error in jc42_write() ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c ALSA: hda: add snd_hdac_stop_streams() helper ASoC: Intel: Skylake: Fix driver hang during shutdown ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() ASoC: wm8994: Fix potential deadlock ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() ASoC: rt5670: Remove unbalanced pm_runtime_put() drm/i915/display: Don't disable DDI/Transcoder when setting phy test pattern LoadPin: Ignore the "contents" argument of the LSM hooks pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() afs: Fix lost servers_outstanding count pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES ima: Simplify ima_lsm_copy_rule ALSA: usb-audio: add the quirk for KT0206 device ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list usb: cdnsp: fix lack of ZLP for ep0 usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq arm64: dts: qcom: sm8250: fix USB-DP PHY registers usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode usb: dwc3: core: defer probe on ulpi_read_id timeout xhci: Prevent infinite loop in transaction errors recovery for streams HID: wacom: Ensure bootloader PID is usable in hidraw mode HID: mcp2221: don't connect hidraw loop: Fix the max_loop commandline argument treatment when it is set to 0 9p: set req refcount to zero to avoid uninitialized usage security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 reiserfs: Add missing calls to reiserfs_security_free() iio: fix memory leak in iio_device_register_eventset() iio: adc: ad_sigma_delta: do not use internal iio_dev lock iio: adc128s052: add proper .data members in adc128_of_match table regulator: core: fix deadlock on regulator enable floppy: Fix memory leak in do_floppy_init() gcov: add support for checksum field fbdev: fbcon: release buffer when fbcon_do_set_font() failed ovl: fix use inode directly in rcu-walk mode btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range scsi: qla2xxx: Fix crash when I/O abort times out net: stmmac: fix errno when create_singlethread_workqueue() fails media: dvbdev: fix build warning due to comments media: dvbdev: fix refcnt bug extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code pwm: tegra: Fix 32 bit build Linux 5.15.86 Change-Id: Ic157edd6a65abf4a3167b5d227edeb0564f1be4e Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-01-18 12:52:16 +00:00
Bean Huo	abfb939cd7	FROMGIT: scsi: ufs: core: bsg: Add advanced RPMB support in ufs_bsg ... Add advanced RPMB support in ufs_bsg: 1. According to the UFS specification, only one RPMB operation can be performed at any time. We can ensure this by using reserved slot and its dev_cmd sync operation protection mechanism. 2. For Advanced RPMB, RPMB metadata is packaged in an EHS (Extra Header Segment) of a command UPIU, and the corresponding reply EHS (from the device) should also be returned to the user space. bsg_job->request and bsg_job->reply allow us to pass and return EHS from/back to userspace. Compared to normal/legacy RPMB, the advantages of advanced RPMB are: 1. The data length in the Advanced RPMB data read/write command can be larger than 4KB. For the legacy RPMB, the data length in a single RPMB data transfer is 256 bytes. 2. All of the advanced RPMB operations will be a single command. For legacy RPMB, take the read write-counter value as an example, you need two commands (first SECURITY PROTOCOL OUT, then second SECURITY PROTOCOL IN). Change-Id: Iefadc64abb18c1dd6ac5e416ed692be9b7019d71 Signed-off-by: Bean Huo <beanhuo@micron.com> Reviewed-by: Avri Altman <avri.altman@wdc.com> Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com> Bug: 258234315 (cherry picked from commit 6ff265fc5e git://git.kernel.org/pub/scm/linux/kernel/git/mkp/scsi.git for-next) Signed-off-by: Bart Van Assche <bvanassche@google.com>	2023-01-06 22:40:58 +00:00
Jaegeuk Kim	b205c093f2	Merge remote-tracking branch 'aosp/upstream-f2fs-stable-linux-5.15.y' into android14-5.15 ... * aosp/upstream-f2fs-stable-linux-5.15.y: f2fs: let's avoid panic if extent_tree is not created f2fs: should use a temp extent_info for lookup f2fs: don't mix to use union values in extent_info f2fs: initialize extent_cache parameter f2fs: fix to avoid NULL pointer dereference in f2fs_issue_flush() fs: account for group membership fs: fix acl translation fs: support mapped mounts of mapped filesystems fs: add i_user_ns() helper fs: port higher-level mapping helpers fs: remove unused low-level mapping helpers fs: use low-level mapping helpers docs: update mapping documentation fs: account for filesystem mappings fs: tweak fsuidgid_has_mapping() fs: move mapping helpers fs: add is_idmapped_mnt() helper Revert "fs: add is_idmapped_mnt() helper" Revert "fs: move mapping helpers" Revert "fs: tweak fsuidgid_has_mapping()" Revert "fs: account for filesystem mappings" Revert "docs: update mapping documentation" Revert "fs: use low-level mapping helpers" Revert "fs: remove unused low-level mapping helpers" Revert "fs: add i_user_ns() helper" Revert "fs: account for group membership" fsverity: simplify fsverity_get_digest() fsverity: stop using PG_error to track error status fs-verity: use kmap_local_page() instead of kmap() highmem: Make __kunmap_{local,atomic}() take const void pointer fs-verity: use memcpy_from_page() fs-verity: Use struct_size() helper in enable_verity() fs-verity: remove unused parameter desc_size in fsverity_create_info() fs-verity: define a function to return the integrity protected file digest fscrypt: add additional documentation for SM4 support fscrypt: remove unused Speck definitions fscrypt: Add SM4 XTS/CTS symmetric algorithm support blk-crypto: Add support for SM4-XTS blk crypto mode fscrypt: add comment for fscrypt_valid_enc_modes_v1() blk-crypto: Add a missing include directive blk-crypto: move internal only declarations to blk-crypto-internal.h blk-crypto: add a blk_crypto_config_supported_natively helper blk-crypto: don't use struct request_queue for public interfaces fscrypt: pass super_block to fscrypt_put_master_key_activeref() fscrypt: add fscrypt_context_for_new_inode fscrypt: export fscrypt_fname_encrypt and fscrypt_fname_encrypted_size fscrypt: Add HCTR2 support for filename encryption fs: account for group membership fs: add i_user_ns() helper fs: remove unused low-level mapping helpers fs: use low-level mapping helpers docs: update mapping documentation fs: account for filesystem mappings fs: tweak fsuidgid_has_mapping() fs: move mapping helpers fs: add is_idmapped_mnt() helper Bug: 256243893 Signed-off-by: Jaegeuk Kim <jaegeuk@google.com> Change-Id: Ia7b419ef516dee40be32968cd7c60ce0adabca99	2023-01-04 17:13:29 -08:00
Fenghua Yu	6e98a93c75	dmaengine: idxd: Fix crc_val field for completion record ... [ Upstream commit dc901d98b1 ] The crc_val in the completion record should be 64 bits and not 32 bits. Fixes: 4ac823e9cd ("dmaengine: idxd: fix delta_rec and crc size field for completion record") Reported-by: Nirav N Shah <nirav.n.shah@intel.com> Signed-off-by: Fenghua Yu <fenghua.yu@intel.com> Reviewed-by: Dave Jiang <dave.jiang@intel.com> Link: https://lore.kernel.org/r/20221111012715.2031481-1-fenghua.yu@intel.com Signed-off-by: Vinod Koul <vkoul@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-31 13:14:34 +01:00
Matt Redfearn	c160505c9b	include/uapi/linux/swab: Fix potentially missing __always_inline ... [ Upstream commit defbab270d ] Commit bc27fb68aa ("include/uapi/linux/byteorder, swab: force inlining of some byteswap operations") added __always_inline to swab functions and commit 283d757378 ("uapi/linux/stddef.h: Provide __always_inline to userspace headers") added a definition of __always_inline for use in exported headers when the kernel's compiler.h is not available. However, since swab.h does not include stddef.h, if the header soup does not indirectly include it, the definition of __always_inline is missing, resulting in a compilation failure, which was observed compiling the perf tool using exported headers containing this commit: In file included from /usr/include/linux/byteorder/little_endian.h:12:0, from /usr/include/asm/byteorder.h:14, from tools/include/uapi/linux/perf_event.h:20, from perf.h:8, from builtin-bench.c:18: /usr/include/linux/swab.h:160:8: error: unknown type name `__always_inline' static __always_inline __u16 __swab16p(const __u16 *p) Fix this by replacing the inclusion of linux/compiler.h with linux/stddef.h to ensure that we pick up that definition if required, without relying on it's indirect inclusion. compiler.h is then included indirectly, via stddef.h. Fixes: 283d757378 ("uapi/linux/stddef.h: Provide __always_inline to userspace headers") Signed-off-by: Matt Redfearn <matt.redfearn@mips.com> Signed-off-by: Florian Fainelli <f.fainelli@gmail.com> Signed-off-by: Arnd Bergmann <arnd@arndb.de> Tested-by: Nathan Chancellor <nathan@kernel.org> Reviewed-by: Petr Vaněk <arkamar@atlas.cz> Signed-off-by: Arnd Bergmann <arnd@arndb.de> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-31 13:14:33 +01:00
Baisong Zhong	a69b1faa9b	ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT ... [ Upstream commit cf59e1e4c7 ] Shifting signed 32-bit value by 31 bits is undefined, so changing significant bit to unsigned. The UBSAN warning calltrace like below: UBSAN: shift-out-of-bounds in sound/core/seq/seq_clientmgr.c:509:22 left shift of 1 by 31 places cannot be represented in type 'int' ... Call Trace: <TASK> dump_stack_lvl+0x8d/0xcf ubsan_epilogue+0xa/0x44 __ubsan_handle_shift_out_of_bounds+0x1e7/0x208 snd_seq_deliver_single_event.constprop.21+0x191/0x2f0 snd_seq_deliver_event+0x1a2/0x350 snd_seq_kernel_client_dispatch+0x8b/0xb0 snd_seq_client_notify_subscription+0x72/0xa0 snd_seq_ioctl_subscribe_port+0x128/0x160 snd_seq_kernel_client_ctl+0xce/0xf0 snd_seq_oss_create_client+0x109/0x15b alsa_seq_oss_init+0x11c/0x1aa do_one_initcall+0x80/0x440 kernel_init_freeable+0x370/0x3c3 kernel_init+0x1b/0x190 ret_from_fork+0x1f/0x30 </TASK> Fixes: 1da177e4c3 ("Linux-2.6.12-rc2") Signed-off-by: Baisong Zhong <zhongbaisong@huawei.com> Link: https://lore.kernel.org/r/20221121111630.3119259-1-zhongbaisong@huawei.com Signed-off-by: Takashi Iwai <tiwai@suse.de> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-31 13:14:11 +01:00
Dave Stevenson	ec1727f89e	drm/fourcc: Add packed 10bit YUV 4:2:0 format ... [ Upstream commit 006ea1b582 ] Adds a format that is 3 10bit YUV 4:2:0 samples packed into a 32bit word (with 2 spare bits). Supported on Broadcom BCM2711 chips. Signed-off-by: Dave Stevenson <dave.stevenson@raspberrypi.com> Signed-off-by: Maxime Ripard <maxime@cerno.tech> Acked-by: Thomas Zimmermann <tzimmermann@suse.de> Link: https://lore.kernel.org/r/20211215091739.135042-2-maxime@cerno.tech Stable-dep-of: b230555f32 ("drm/fourcc: Fix vsub/hsub for Q410 and Q401") Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-31 13:14:10 +01:00
Eric Biggers	859f3f0aea	fscrypt: remove unused Speck definitions ... These old unused definitions were originally left around to prevent the same mode numbers from being reused. However, we've now decided to reuse the mode numbers anyway. So let's completely remove these old unused definitions to avoid confusion. There is no reason for any code to be using these constants in any way; and indeed, Debian Code Search shows no uses of them (other than in copies or translations of the header). So this should be perfectly safe. Signed-off-by: Eric Biggers <ebiggers@google.com> Link: https://lore.kernel.org/r/20221202035529.55992-1-ebiggers@kernel.org	2022-12-22 10:57:46 -08:00
Tianjia Zhang	c3a7971736	fscrypt: Add SM4 XTS/CTS symmetric algorithm support ... Add support for XTS and CTS mode variant of SM4 algorithm. The former is used to encrypt file contents, while the latter (SM4-CTS-CBC) is used to encrypt filenames. SM4 is a symmetric algorithm widely used in China, and is even mandatory algorithm in some special scenarios. We need to provide these users with the ability to encrypt files or disks using SM4-XTS. Signed-off-by: Tianjia Zhang <tianjia.zhang@linux.alibaba.com> Signed-off-by: Eric Biggers <ebiggers@google.com> Link: https://lore.kernel.org/r/20221201125819.36932-3-tianjia.zhang@linux.alibaba.com	2022-12-22 10:57:45 -08:00
Nathan Huckleberry	2566b8729c	fscrypt: Add HCTR2 support for filename encryption ... HCTR2 is a tweakable, length-preserving encryption mode that is intended for use on CPUs with dedicated crypto instructions. HCTR2 has the property that a bitflip in the plaintext changes the entire ciphertext. This property fixes a known weakness with filename encryption: when two filenames in the same directory share a prefix of >= 16 bytes, with AES-CTS-CBC their encrypted filenames share a common substring, leaking information. HCTR2 does not have this problem. More information on HCTR2 can be found here: "Length-preserving encryption with HCTR2": https://eprint.iacr.org/2021/1441.pdf Signed-off-by: Nathan Huckleberry <nhuck@google.com> Reviewed-by: Ard Biesheuvel <ardb@kernel.org> Acked-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>	2022-12-21 17:29:34 -08:00
Jaegeuk Kim	085d7798c4	Merge remote-tracking branch 'aosp/upstream-f2fs-stable-linux-5.15.y' into android14-5.15 ... * aosp/upstream-f2fs-stable-linux-5.15.y: f2fs: reset wait_ms to default if any of the victims have been selected f2fs: fix some format WARNING in debug.c and sysfs.c f2fs: don't call f2fs_issue_discard_timeout() when discard_cmd_cnt is 0 in f2fs_put_super() f2fs: fix iostat parameter for discard f2fs: Fix spelling mistake in label: free_bio_enrty_cache -> free_bio_entry_cache f2fs: add block_age-based extent cache f2fs: allocate the extent_cache by default f2fs: refactor extent_cache to support for read and more f2fs: remove unnecessary __init_extent_tree f2fs: move internal functions into extent_cache.c f2fs: specify extent cache for read explicitly f2fs: introduce f2fs_is_readonly() for readability f2fs: remove F2FS_SET_FEATURE() and F2FS_CLEAR_FEATURE() macro f2fs: do some cleanup for f2fs module init MAINTAINERS: Add f2fs bug tracker link f2fs: remove the unused flush argument to change_curseg f2fs: open code allocate_segment_by_default f2fs: remove struct segment_allocation default_salloc_ops f2fs: introduce discard_urgent_util sysfs node f2fs: define MIN_DISCARD_GRANULARITY macro f2fs: init discard policy after thread wakeup f2fs: avoid victim selection from previous victim section f2fs: truncate blocks in batch in __complete_revoke_list() f2fs: make __queue_discard_cmd() return void f2fs: fix description about discard_granularity node f2fs: move set_file_temperature into f2fs_new_inode f2fs: fix to enable compress for newly created file if extension matches f2fs: change type for 'sbi->readdir_ra' f2fs: cleanup for 'f2fs_tuning_parameters' function f2fs: fix to alloc_mode changed after remount on a small volume device f2fs: remove submit label in __submit_discard_cmd() f2fs: fix to do sanity check on i_extra_isize in is_alive() f2fs: introduce F2FS_IOC_START_ATOMIC_REPLACE f2fs: fix to set flush_merge opt and show noflush_merge f2fs: initialize locks earlier in f2fs_fill_super() f2fs: optimize iteration over sparse directories f2fs: fix to avoid accessing uninitialized spinlock f2fs: correct i_size change for atomic writes f2fs: add proc entry to show discard_plist info f2fs: allow to read node block after shutdown f2fs: replace ternary operator with max() f2fs: replace gc_urgent_high_remaining with gc_remaining_trials f2fs: add missing bracket in doc f2fs: use sysfs_emit instead of sprintf f2fs: introduce gc_mode sysfs node f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super() f2fs: fix return val in f2fs_start_ckpt_thread() f2fs: fix the msg data type f2fs: fix the assign logic of iocb f2fs: Fix typo in comments f2fs: introduce max_ordered_discard sysfs node f2fs: allow to set compression for inlined file f2fs: add barrier mount option f2fs: fix normal discard process f2fs: cleanup in f2fs_create_flush_cmd_control() f2fs: fix gc mode when gc_urgent_high_remaining is 1 f2fs: remove batched_trim_sections node f2fs: support fault injection for f2fs_is_valid_blkaddr() f2fs: fix to invalidate dcc->f2fs_issue_discard in error path f2fs: Fix the race condition of resize flag between resizefs f2fs: let's avoid to get cp_rwsem twice by f2fs_evict_inode by d_invalidate f2fs: should put a page when checking the summary info fscrypt: fix keyring memory leak on mount failure Bug: 256243893 Signed-off-by: Jaegeuk Kim <jaegeuk@google.com> Change-Id: I1755d4a31521e16602673d1327e2494cb0b84fdf	2022-12-15 11:40:35 -08:00
Paul Lawrence	ea7caaa306	Revert "ANDROID: fuse-bpf: Add /sys/fs flags for fuse-bpf version" ... This reverts commit 2b6da462a1. Note that this change was reworked completely after being cherry-picked to 13-5.10, so revert this, then re-cherry-pick the version from 13-5.10 Bug: 202785178 Test: None (test with new version) Change-Id: Idbf470e93a56e2fe5f1fda164635f6f171c2d2fb Signed-off-by: Paul Lawrence <paullawrence@google.com>	2022-12-14 09:21:13 -08:00