1072369 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Paul Lawrence	e19a3cd1ce	ANDROID: fuse-bpf: Ignore readaheads unless they go to the daemon ... readpages will be triggered on the fuse fs in passthrough mode though system calls like fadvise. If the daemon isn't aware of the file, this will likely cause a hang. For the moment, simply ignore fadvise in this situation Bug: 301201239 Test: fuse_test, atest ScopedStorageDeviceTest both pass Signed-off-by: Paul Lawrence <paullawrence@google.com> (cherry picked from https://android-review.googlesource.com/q/commit:ac9071df3ba6715219a16a44d4711f041b0c25de) Merged-In: I524a84aeeb1b1593e51264fcc37f7cfa66757168 Change-Id: I524a84aeeb1b1593e51264fcc37f7cfa66757168	2023-12-01 16:06:07 +00:00
Martin Liu	5421e17c17	ANDROID: Update the ABI symbol list ... Adding the following symbols: - __traceiter_android_vh_ptep_clear_flush_young - __tracepoint_android_vh_ptep_clear_flush_young Bug: 312692863 Change-Id: I5e6232bb1121d3d59ea57380c7950412b1652208 Signed-off-by: Martin Liu <liumartin@google.com>	2023-12-01 16:05:35 +00:00
Martin Liu	46f8b2ca58	ANDROID: GKI: add a vendor hook in ptep_clear_flush_young() ... Add a vendor hook to be able to skip ptep tlb flush. Bug: 312692863 Test: boot Change-Id: Ifbc7a52111616d0542b866532a9bf82368e6c8f1 Signed-off-by: Martin Liu <liumartin@google.com>	2023-12-01 16:05:35 +00:00
Andrew Yang	0add0e52ef	UPSTREAM: fs: drop_caches: draining pages before dropping caches ... commit 8a144612eb upstream. We expect a file page access after dropping caches should be a major fault, but sometimes it's still a minor fault. That's because a file page can't be dropped if it's in a per-cpu pagevec. Draining all pages from per-cpu pagevec to lru list before trying to drop caches. Link: https://lkml.kernel.org/r/20230630092203.16080-1-andrew.yang@mediatek.com Change-Id: I9b03c53e39b87134d5ddd0c40ac9b36cf4d190cd Signed-off-by: Andrew Yang <andrew.yang@mediatek.com> Cc: Al Viro <viro@zeniv.linux.org.uk> Cc: AngeloGioacchino Del Regno <angelogioacchino.delregno@collabora.com> Cc: Christian Brauner <brauner@kernel.org> Cc: Matthias Brugger <matthias.bgg@gmail.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Bug: 285794522 Signed-off-by: Will McVicker <willmcviker@google.com>	2023-11-30 23:45:53 +00:00
Treehugger Robot	0d1f309e44	Merge "Merge tag 'android14-5.15.137_r00' into branch 'android14-5.15'" into android14-5.15	2023-11-30 23:03:53 +00:00
Greg Kroah-Hartman	6dfd4d406c	Merge tag 'android14-5.15.137_r00' into branch 'android14-5.15' ... This merges the 5.15.y LTS releases up to 5.15.137 into the android14-5.15 branch. Include in here are the following commits: * 575f85f973 Revert "ipv4/fib: send notify when delete source address routes" * b4bfba5c30 Revert "perf: Disallow mis-matched inherited group reads" * 2173e8b338 Revert "xfrm: fix a data-race in xfrm_gen_index()" * f0fd3e2493 Revert "Bluetooth: hci_core: Fix build warnings" * 2fbc60aaf5 ANDROID: GKI: arm64: drop CONFIG_DEBUG_PREEMPT forced disable * 7254996719 Merge 5.15.137 into android14-5.15-lts |\ | * 12952a23a5 Linux 5.15.137 | * dff33880d4 xfrm6: fix inet6_dev refcount underflow problem | * 5a9d05a4f1 Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name | * a6df96ee0b Bluetooth: hci_sock: fix slab oob read in create_monitor_event | * c08d609fb2 phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins | * e1b030b101 phy: mapphone-mdm6600: Fix runtime PM for remove | * 59f1095ab5 phy: mapphone-mdm6600: Fix runtime disable on probe | * b618062c0b serial: 8250: omap: Move uart_write() inside PM section | * 67f29cd2f8 ASoC: pxa: fix a memory leak in probe() | * 76d04c3395 gpio: vf610: set value before the direction to avoid a glitch | * 4b129e3964 platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events | * e1a058cc24 platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e | * c6bbe51dcd platform/surface: platform_profile: Propagate error if profile registration fails | * a73c8d7169 s390/cio: fix a memleak in css_alloc_subchannel | * c8b6c2df1e selftests/ftrace: Add new test case which checks non unique symbol | * 3ad81e6aff s390/pci: fix iommu bitmap allocation | * 71d224acc4 perf: Disallow mis-matched inherited group reads | * 5aa89a11a2 USB: serial: option: add Fibocom to DELL custom modem FM101R-GL | * 8c376d8636 USB: serial: option: add entry for Sierra EM9191 with new firmware | * 4832212161 USB: serial: option: add Telit LE910C4-WWX 0x1035 composition | * e750fb71dc nvme-rdma: do not try to stop unallocated queues | * a9fd6d44ab nvme-pci: add BOGUS_NID for Intel 0a54 device | * 071382bda1 ACPI: irq: Fix incorrect return value in acpi_register_gsi() | * 431a5010bc NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server | * 5762e72ef1 pNFS: Fix a hang in nfs4_evict_inode() | * 5a3abee2ee Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" | * 2495982537 mmc: core: Capture correct oemid-bits for eMMC cards | * 8041e7b7e7 mmc: core: sdio: hold retuning if sdio in 1-bit mode | * 262029c0c5 mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw | * 3e363db1c1 mtd: physmap-core: Restore map_rom fallback | * 71823463b1 mtd: spinand: micron: correct bitmask for ecc status | * a50d2f17d5 mtd: rawnand: arasan: Ensure program page operations are successful | * ae53c92e92 mtd: rawnand: marvell: Ensure program page operations are successful | * c0ca2ab230 mtd: rawnand: pl353: Ensure program page operations are successful | * a707062804 mtd: rawnand: qcom: Unmap the right resource upon probe failure | * 3f928d1362 net: fix ifname in netlink ntf during netns move | * ac43ec299a net: move from strlcpy with unused retval to strscpy | * 30e2db4030 net: introduce a function to check if a netdev name is in use | * 38ba547935 Bluetooth: hci_event: Fix using memcmp when comparing keys | * 3b2da6d62b net/mlx5: Handle fw tracer change ownership event based on MTRC | * f6e2638245 platform/x86: touchscreen_dmi: Add info for the Positivo C4128B | * ca56d8afe6 HID: multitouch: Add required quirk for Synaptics 0xcd7e device | * ca5bec7ecf btrfs: error out when reallocating block for defrag using a stale transaction | * 2692fd37aa btrfs: error when COWing block from a root that is being deleted | * ef491d9560 btrfs: error out when COWing block using a stale transaction | * f89ed0a096 btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c | * df486b75fe drm: panel-orientation-quirks: Add quirk for One Mix 2S | * d5ba30ee4f ipv4/fib: send notify when delete source address routes | * 9d07b7abd2 sky2: Make sure there is at least one frag_addr available | * f652eb4adf regulator/core: Revert "fix kobject release warning and memory leak in regulator_register()" | * aa77b187b1 wifi: cfg80211: avoid leaking stack data into trace | * 30a2285a2e wifi: mac80211: allow transmitting EAPOL frames with tainted key | * b64eb31a1b wifi: cfg80211: Fix 6GHz scan configuration | * bbec172451 Bluetooth: hci_core: Fix build warnings | * 02b0e69918 Bluetooth: Avoid redundant authentication | * 38681af225 Bluetooth: btusb: add shutdown function for QCA6174 | * e6e9a32c3e HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event | * 06aabf7715 wifi: iwlwifi: Ensure ack flag is properly cleared. | * 6063f6f64f wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len | * 59ebfeb7b3 tracing: relax trace_event_eval_update() execution with cond_resched() | * 3d85fb391f ata: libata-eh: Fix compilation warning in ata_eh_link_report() | * 89e3cc1b07 ata: libata-core: Fix compilation warning in ata_dev_config_ncq() | * 137c658ea3 gpio: timberdale: Fix potential deadlock on &tgpio->lock | * 68f106c2b2 overlayfs: set ctime when setting mtime and atime | * ef3c62e2f0 i2c: mux: Avoid potential false error message in i2c_mux_add_adapter | * e2f64f3eeb btrfs: initialize start_slot in btrfs_log_prealloc_extents | * 266dab0ce4 btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 | * bc424f18fb fs-writeback: do not requeue a clean inode having skipped pages | * 9260982359 ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone | * 3898d8d685 ksmbd: not allow to open file if delelete on close bit is set | * d3dc26c4fd nfp: flower: avoid rmmod nfp crash issues | * 6c52b12159 mctp: perform route lookups under a RCU read-side lock | * db3f17e571 mctp: Allow local delivery to the null EID | * 29017ab1a5 powerpc/47x: Fix 47x syscall return crash | * 558ee0fafd powerpc/32s: Do kuep_lock() and kuep_unlock() in assembly | * d00f4ae3ac powerpc/32s: Remove capability to disable KUEP at boottime | * fcb3f09e81 drm/atomic-helper: relax unregistered connector check | * 403d201d1f perf/x86/lbr: Filter vsyscall addresses | * 419ac18d88 perf/x86: Move branch classifier | * 030099bc91 perf: Add irq and exception return branch types | * ae80d5290c iio: adc: ad7192: Correct reference voltage | * 569a126f24 iio: cros_ec: fix an use-after-free in cros_ec_sensors_push_data() | * a9c471892d iio: core: introduce iio_device_{claim|release}_buffer_mode() APIs | * eafbb19661 iio: core: Hide read accesses to iio_dev->currentmode | * 919721348c iio: Un-inline iio_buffer_enabled() | * 7f74bc91eb serial: 8250_omap: Fix errors with no_console_suspend | * d67d831e1d serial: 8250: omap: Fix imprecise external abort for omap_8250_pm() | * aff3019b55 selftests/mm: fix awk usage in charge_reserved_hugetlb.sh and hugetlb_reparenting_test.sh that may cause error | * 4f1d3d1ca5 net: pktgen: Fix interface flags printing | * 8bdf95e29f netfilter: nf_tables: revert do not remove elements if set backend implements .abort | * cc19daa037 netfilter: nf_tables: do not remove elements if set backend implements .abort | * db33720697 netfilter: nft_set_rbtree: .deactivate fails if element has expired | * 44768cad01 neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section | * b33179dbf3 net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve | * 0426d7bc17 bonding: Return pointer to data after pull on skb | * 66982023d7 net: dsa: bcm_sf2: Fix possible memory leak in bcm_sf2_mdio_register() | * 0ea476863e i40e: prevent crash on probe if hw registers have invalid values | * f9202217a6 net: usb: smsc95xx: Fix an error code in smsc95xx_reset() | * a2ceb30cc1 ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr | * a270aa7a47 tun: prevent negative ifindex | * 9d55719f98 tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb | * 8ae344291e tcp: fix excessive TLP and RACK timeouts from HZ rounding | * 8b6b4ca42a net: rfkill: gpio: prevent value glitch during probe | * 4df9ba0d7a net: ipv6: fix return value check in esp_remove_trailer | * a9651e66d0 net: ipv4: fix return value check in esp_remove_trailer | * 26a3c734cb xfrm: interface: use DEV_STATS_INC() | * f8bc4b708b xfrm: fix a data-race in xfrm_gen_index() | * b660e58ef7 qed: fix LL2 RX buffer allocation | * d35f398b88 ASoC: codecs: wcd938x: fix unbind tear down order | * d182d8ed7b ASoC: codecs: wcd938x: drop bogus bind error handling | * 8d32a6b67e ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors | * 6df571a6c1 ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind | * 36eabe8703 drm/i915: Retry gtt fault when out of fence registers | * 34f62612be nvmet-tcp: Fix a possible UAF in queue intialization setup | * 04e0eef74b netfilter: nft_payload: fix wrong mac header matching | * efe43d1bcb fs/ntfs3: fix deadlock in mark_as_free_ex | * ab40c7ab7a fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea() | * 24badb9dd8 fs/ntfs3: Fix possible null-pointer dereference in hdr_find_e() | * ff38d2a705 tcp: check mptcp-level constraints for backlog coalescing | * 582f799335 x86/sev: Check for user-space IOIO pointing to kernel space | * 5c2c01be80 x86/sev: Check IOBM for IOIO exceptions from user-space | * 6797c6d09e x86/sev: Disable MMIO emulation from user mode | * 0b4e772a6a KVM: x86: Mask LVTPC when handling a PMI | * f61c43be1e regmap: fix NULL deref on lookup | * ffdc881f68 nfc: nci: fix possible NULL pointer dereference in send_acknowledge() | * d42aeae14f ice: reset first in crash dump kernels | * e42cecb513 ice: fix over-shifted variable | * f6c093b977 Bluetooth: avoid memcmp() out of bounds warning | * e5f8b43c9c Bluetooth: hci_event: Fix coding style | * 1597c1ed0e Bluetooth: vhci: Fix race when opening vhci device | * 1ef0715268 Bluetooth: Fix a refcnt underflow problem for hci_conn | * dd6b62fdd2 Bluetooth: Reject connection with the device which has same BD_ADDR | * 848a05c442 Bluetooth: hci_event: Ignore NULL link key | * e7a2aa7770 xfs: don't expose internal symlink metadata buffers to the vfs | * fe5c6fbc5e Documentation: sysctl: align cells in second content column | * 1815844652 lib/Kconfig.debug: do not enable DEBUG_PREEMPT by default * | 045b9e5d22 Merge branch 'android14-5.15' into branch 'android14-5.15-lts' * | 0a427f1810 Revert "net: add sysctl accept_ra_min_rtr_lft" * | 9144a81de4 Revert "net: change accept_ra_min_rtr_lft to affect all RA lifetimes" * | 7b3ee41b62 Revert "net: release reference to inet6_dev pointer" * | 6e12d0e4ec Revert "scsi: core: Use a structure member to track the SCSI command submitter" * | 856192806f Revert "scsi: core: Rename scsi_mq_done() into scsi_done() and export it" * | d22695f24c Revert "scsi: ib_srp: Call scsi_done() directly" * | 52a4732da9 Revert "RDMA/srp: Do not call scsi_done() from srp_abort()" * | 3f8a032cfc Revert "net: macsec: indicate next pn update when offloading" * | 3f8e18a053 Revert "net: phy: mscc: macsec: reject PN update requests" * | fec7f6b9b7 Merge 5.15.136 into android14-5.15-lts |\| | * 00c0398540 Linux 5.15.136 | * 5266b5b6e9 eth: remove remaining copies of the NAPI_POLL_WEIGHT define | * 528f0ba9f7 usb: hub: Guard against accesses to uninitialized BOS descriptors | * 542a3f1a3c Revert "kernel/sched: Modify initial boot task idle setup" | * 737ce5518a arm64: armv8_deprecated: fix unused-function error | * 2e10931e2d arm64: armv8_deprecated: rework deprected instruction handling | * abd4aa0819 arm64: armv8_deprecated: move aarch32 helper earlier | * f10abdb04c arm64: armv8_deprecated move emulation functions | * 0b4eec015f arm64: armv8_deprecated: fold ops into insn_emulation | * a8d2910be6 arm64: rework EL0 MRS emulation | * 057f9123b1 arm64: factor insn read out of call_undef_hook() | * 3f82927cab arm64: factor out EL1 SSBS emulation hook | * 474385adcd arm64: split EL0/EL1 UNDEF handlers | * de03586354 arm64: allow kprobes on EL0 handlers | * 7154e2db88 arm64: rework BTI exception handling | * cd5ceadc2b arm64: rework FPAC exception handling | * b6358002fd arm64: consistently pass ESR_ELx to die() | * 7ddb1ef2bb arm64: die(): pass 'err' as long | * 9a3e177ef5 arm64: report EL1 UNDEFs better | * d6808be3ff powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() | * 9c0dc3e2c9 powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE | * 4da05eba66 dmaengine: mediatek: Fix deadlock caused by synchronize_irq() | * 82f61b2d51 dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq | * ecba5afe86 x86/alternatives: Disable KASAN in apply_alternatives() | * cbd2aac004 usb: cdnsp: Fixes issue with dequeuing not queued requests | * 7014807fb7 usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call | * 50259cf71a usb: gadget: udc-xilinx: replace memcpy with memcpy_toio | * 308f192496 counter: microchip-tcb-capture: Fix the use of internal GCLK logic | * 5a6ce81d7c pinctrl: avoid unsafe code pattern in find_pinctrl() | * 1c790191ca cgroup: Remove duplicates in cgroup v1 tasks file | * 1680c82929 tee: amdtee: fix use-after-free vulnerability in amdtee_close_session | * b8ec40a90a Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case | * d092630e8a Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table | * 7cea6fa2d7 Input: xpad - add PXN V900 support | * 6ff4e50e2d Input: psmouse - fix fast_reconnect function for PS/2 mode | * 6a4a396386 Input: powermate - fix use-after-free in powermate_config_complete | * 6ad7f52d8c ceph: fix type promotion bug on 32bit systems | * c0c4acd53a ceph: fix incorrect revoked caps assert in ceph_fill_file_size() | * 58f0e6324e libceph: use kernel_connect() | * d727b97f8f thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding | * 04c38bedd0 thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge | * a586742a37 mcb: remove is_added flag from mcb_device struct | * 4382d1a996 x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs | * 763167003a ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA | * 510d4a01d8 drm/amd/display: Don't set dpms_off for seamless boot | * 9cb61ab9f4 drm/amdgpu: add missing NULL check | * f9a1af37b8 iio: pressure: ms5611: ms5611_prom_is_valid false negative bug | * 09b8ed9547 iio: pressure: dps310: Adjust Timeout Settings | * 4c80ecef85 iio: pressure: bmp280: Fix NULL pointer exception | * a625de7e54 usb: musb: Modify the "HWVers" register address | * eb28694f6d usb: musb: Get the musb_qh poniter after musb_giveback | * ee88141873 usb: cdns3: Modify the return value of cdns_set_active () to void when CONFIG_PM_SLEEP is disabled | * 3b2dbc4f33 usb: dwc3: Soft reset phy on probe for host | * 42c56e0156 net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read | * 524f453617 usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer | * 1d8e7fe855 xhci: Keep interrupt disabled in initialization until host is running. | * cb34e3b25c dmaengine: stm32-mdma: abort resume if no ongoing transfer | * d56dbfe750 media: mtk-jpeg: Fix use after free bug due to uncanceled work | * 5e13e69ddf net: release reference to inet6_dev pointer | * aade10d51d net: change accept_ra_min_rtr_lft to affect all RA lifetimes | * 8f12d2d66c net: add sysctl accept_ra_min_rtr_lft | * bc9f6cbeb9 workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() | * 25dd54b95a nfc: nci: assert requested protocol is valid | * b2bb3b43b9 pinctrl: renesas: rzn1: Enable missing PINMUX | * c4140dd77c net/smc: Fix pos miscalculation in statistics | * d888d3f70b net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() | * 249a1fdb95 net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp | * 2112cacb38 ixgbe: fix crash with empty VF macvlan list | * 935a15334d net: phy: mscc: macsec: reject PN update requests | * 667fe9101a net: macsec: indicate next pn update when offloading | * 2dcb31e65d bpf: Fix verifier log for async callback return values | * 6a217af2c6 drm/vmwgfx: fix typo of sizeof argument | * 72ef708865 riscv, bpf: Sign-extend return values | * 7795592e08 riscv, bpf: Factor out emit_call for kernel and bpf context | * 58941cc742 xen-netback: use default TX queue size for vifs | * cffdced18a eth: remove copies of the NAPI_POLL_WEIGHT define | * 5c360eec53 mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type | * 84c6aa0ae5 ieee802154: ca8210: Fix a potential UAF in ca8210_probe | * 616761cf9d ravb: Fix use-after-free issue in ravb_tx_timeout_work() | * 30ebd41775 ravb: Fix up dma_free_coherent() call in ravb_remove() | * 3f39de2bd1 drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow | * 85ae07d4dc drm/msm/dsi: fix irq_of_parse_and_map() error checking | * 9a890c7d4d drm/msm/dsi: skip the wait for video mode done if not applicable | * b9de60b683 drm/msm/dp: do not reinitialize phy unless retry during link training | * afe5f596b5 KEYS: trusted: Remove redundant static calls usage | * 20e73ece06 KEYS: trusted: allow use of kernel RNG for key material | * a01d68b6c6 ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset | * 5b5e58299e net: prevent address rewrite in kernel_bind() | * 56e96b38d2 quota: Fix slow quotaoff | * 28ddc1e0b8 HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect | * b930f0f7bb lib/test_meminit: fix off-by-one error in test_pages() | * 982bd86fd6 platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section mismatch warning | * 124cf0ea4b platform/x86: think-lmi: Fix reference leak | * 3d2a16f878 of: overlay: Reorder struct fragment fields kerneldoc | * 10f4a0b665 perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7 | * b7966e2191 RDMA/cxgb4: Check skb value for failure to allocate | * b9bdffb3f9 RDMA/srp: Do not call scsi_done() from srp_abort() | * 7d4999589e scsi: ib_srp: Call scsi_done() directly | * d2746cdfd5 scsi: core: Rename scsi_mq_done() into scsi_done() and export it | * 8f2350e204 scsi: core: Use a structure member to track the SCSI command submitter | * 29298c85a8 iommu/vt-d: Avoid memory allocation in iommu_suspend() * | 9b75bdddae Revert "netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp" * | ca18f7a2cf Merge 5.15.135 into android14-5.15-lts |\| | * 02e21884dc Linux 5.15.135 | * c8af81a9d3 xen/events: replace evtchn_rwlock with RCU | * c346494ec7 parisc: Restore __ldcw_align for PA-RISC 2.0 processors | * 694e13732e ksmbd: fix uaf in smb20_oplock_break_ack | * e914c3a47e RDMA/mlx5: Fix NULL string error | * 81b7bf367e RDMA/siw: Fix connection failure handling | * 5d8bd13820 RDMA/uverbs: Fix typo of sizeof argument | * 60c9ed8852 RDMA/cma: Fix truncation compilation warning in make_cma_ports | * 7f6136ced1 RDMA/cma: Initialize ib_sa_multicast structure to 0 when join | * 1dd6095fc7 gpio: pxa: disable pinctrl calls for MMP_GPIO | * 844fcf4c69 gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() | * 1878d6666c IB/mlx4: Fix the size of a buffer in add_port_entries() | * 718d9b44af of: dynamic: Fix potential memory leak in of_changeset_action() | * e0878f38b6 RDMA/core: Require admin capabilities to set system parameters | * 18a839064f dm zoned: free dmz->ddev array in dmz_put_zoned_devices | * 8781fe259d HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit | * 949ccc91c3 HID: sony: remove duplicate NULL check before calling usb_free_urb() | * a02c02adc2 sctp: update hb timer immediately after users change hb_interval | * 7783b471bf sctp: update transport state when processing a dupcook packet | * 1abac613c0 tcp: fix delayed ACKs for MSS boundary condition | * 821b3b00bc tcp: fix quick-ack counting to count actual ACKs of new data | * 24fb22bddb tipc: fix a potential deadlock on &tx->lock | * 2e53585e23 net: stmmac: dwmac-stm32: fix resume on STM32 MCU | * 74e5693240 ipv4: Set offload_failed flag in fibmatch results | * a4b9bbd1d1 netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure | * 88497f74d6 netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp | * 0c9cf5e880 ibmveth: Remove condition to recompute TCP header checksum. | * 5a899e2ce8 net: ethernet: ti: am65-cpsw: Fix error code in am65_cpsw_nuss_init_tx_chns() | * 4837a192f6 net: nfc: llcp: Add lock when modifying device list | * cda10784a1 net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg | * 2801a1ddb2 net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent | * cb145e6c20 ptp: ocp: Fix error handling in ptp_ocp_device_init | * cd11899563 ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() | * 147d89ee41 net: fix possible store tearing in neigh_periodic_work() | * bdb4fcf18e modpost: add missing else to the "of" check | * bc8b89b696 bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets | * 9fb4dfb8e2 NFSv4: Fix a nfs4_state_manager() race | * fcdd79fda3 ima: rework CONFIG_IMA dependency block | * b67adca1e1 scsi: target: core: Fix deadlock due to recursive locking | * 9a103e0b10 ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig | * bb6aee0696 regmap: rbtree: Fix wrong register marked as in-cache when creating new node | * 0cee8c1b3a wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling | * 3f6fbbccba drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close() | * ebad2e4c48 bpf: Fix tr dereferencing | * 5afb996349 wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet | * 7c8faa3108 wifi: iwlwifi: mvm: Fix a memory corruption issue | * 5db7af530e iwlwifi: avoid void pointer arithmetic | * 6ff75f524d wifi: iwlwifi: dbg_ini: fix structure packing | * 0ea2a63497 ubi: Refuse attaching if mtd's erasesize is 0 | * bb0707fde7 HID: sony: Fix a potential memory leak in sony_probe() | * 8afbacf619 arm64: Add Cortex-A520 CPU part definition | * 0da6d21ba2 drm/amd: Fix detection of _PR3 on the PCIe root port | * 1ad7ccd45a net: prevent rewrite of msg_name in sock_sendmsg() | * 0fb3df9427 net: replace calls to sock->ops->connect() with kernel_connect() | * 37b54e8ace wifi: mwifiex: Fix tlv_buf_left calculation | * e80f55d6d2 qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info | * 1e69422efc vringh: don't use vringh_kiov_advance() in vringh_iov_xfer() | * 4e2f83952b scsi: zfcp: Fix a double put in zfcp_port_enqueue() | * 310bca649b Revert "clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz" | * 3f59e63568 block: fix use-after-free of q->q_usage_counter | * b75b017b3f rbd: take header_rwsem in rbd_dev_refresh() only when updating | * 33229d7834 rbd: decouple parent info read-in from updating rbd_dev | * ab73e7ed79 rbd: decouple header read-in from updating rbd_dev->header | * b4ddad3fb0 rbd: move rbd_dev_refresh() definition | * bb1fae816c iommu/arm-smmu-v3: Avoid constructing invalid range commands | * c4edc7b5c8 iommu/arm-smmu-v3: Set TTL invalidation hint better | * a98ad3adf6 arm64: Avoid repeated AA64MMFR1_EL1 register read on pagefault path | * aad6ba1715 ring-buffer: Fix bytes info in per_cpu buffer stats | * 8012d0b051 ring-buffer: remove obsolete comment for free_buffer_page() | * 65a218ca51 NFSv4: Fix a state manager thread deadlock regression | * 8454a2f5e9 NFS: rename nfs_client_kset to nfs_kset | * f8b0b6a8e1 NFS: Cleanup unused rpc_clnt variable | * 686746be7b ASoC: tegra: Fix redundant PLLA and PLLA_OUT0 updates | * 0a210e6384 ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol | * b4f7f15568 spi: zynqmp-gqspi: fix clock imbalance on probe failure | * e514f897ad spi: zynqmp-gqspi: Convert to platform remove callback returning void * | aaa8347a71 Merge 5.15.134 into android14-5.15-lts |\| | * 1edcec18cf Linux 5.15.134 | * 09a6830237 netfilter: nf_tables: fix kdoc warnings after gc rework | * 66cb6d74f5 drm/meson: fix memory leak on ->hpd_notify callback | * 91f1f025b6 fs: binfmt_elf_efpic: fix personality for ELF-FDPIC | * 1cae7473a6 ata: libata-sata: increase PMP SRST timeout to 10s | * e74adc5899 ata: libata-core: Do not register PM operations for SAS ports | * 4cbd55a819 ata: libata-core: Fix port and device removal | * ddc525fffb ata: libata-core: Fix ata_port_request_pm() locking | * 2990a195ed net: thunderbolt: Fix TCPv6 GSO checksum calculation | * 132a5ae413 bpf: Fix BTF_ID symbol generation collision in tools/ | * 58d560e98d bpf: Fix BTF_ID symbol generation collision | * f8673f651b btrfs: properly report 0 avail for very full file systems | * b5d00cd7db ring-buffer: Update "shortest_full" in polling | * 00d2cb8066 proc: nommu: /proc/<pid>/maps: release mmap read lock | * 40527ebb3e Revert "SUNRPC dont update timeout value on connection reset" | * a2b1d486fb io_uring/fs: remove sqe->rw_flags checking from LINKAT | * 111fe77cb1 sched/rt: Fix live lock between select_fallback_rq() and RT push | * 3569ad5966 kernel/sched: Modify initial boot task idle setup | * 07f78e9767 i2c: i801: unregister tco_pdev in i801_probe() error path | * 70df8b9c59 ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES | * a7e0c10a8c ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q | * 0c5fd85fb0 netfilter: nf_tables: disallow rule removal from chain binding | * 3936e87149 nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() | * 2b837f13a8 serial: 8250_port: Check IRQ data before use | * a48d2bcd23 Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux" | * 78e70c6238 misc: rtsx: Fix some platforms can not boot and move the l1ss judgment to probe | * f090a8b4d2 x86/srso: Add SRSO mitigation for Hygon processors | * f5a604757a iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range | * efce75bd2d Smack:- Use overlay inode label in smack_inode_copy_up() | * 0e3450487f smack: Retrieve transmuting information in smack_inode_getsecurity() | * 3586b3feed smack: Record transmuting in smk_transmuted | * 9690ad557d nvme-pci: always return an ERR_PTR from nvme_pci_alloc_dev | * 3c29c6e8cd scsi: qla2xxx: Fix NULL pointer dereference in target mode | * 6e5e4223c8 i40e: fix potential NULL pointer dereferencing of pf->vf i40e_sync_vsi_filters() | * aff3994d4b watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running | * 83a30e9455 watchdog: iTCO_wdt: No need to stop the timer in probe | * 1e8c573f50 nvme-pci: do not set the NUMA node of device if it has none | * 182d13dadb nvme-pci: factor out a nvme_pci_alloc_dev helper | * af58072e86 nvme-pci: factor the iod mempool creation into a helper | * c8bc44936f cgroup: Fix suspicious rcu_dereference_check() usage warning | * ce6b88a585 sched/cpuacct: Optimize away RCU read lock | * b1deb15552 perf build: Define YYNOMEM as YYNOABORT for bison < 3.81 | * 86e65ffc4d fbdev/sh7760fb: Depend on FB=y | * 4bf0044fe4 ncsi: Propagate carrier gain/loss events to the NCSI controller | * 288990ec35 powerpc/watchpoints: Annotate atomic context in more places | * 47a94e87f0 powerpc/watchpoint: Disable pagefaults when getting user instruction | * 7eb09f70d9 powerpc/watchpoints: Disable preemption in thread_change_pc() | * 134b01a390 media: vb2: frame_vector.c: replace WARN_ONCE with a comment | * baf7cf0fdb ASoC: imx-rpmsg: Set ignore_pmdown_time for dai_link | * 9da93c7449 bpf: Clarify error expectations from bpf_clone_redirect | * e1a8b79ad7 ASoC: fsl: imx-pcm-rpmsg: Add SNDRV_PCM_INFO_BATCH flag | * 45e028accb spi: stm32: add a delay before SPI disable | * 25850bf83d spi: nxp-fspi: reset the FLSHxCR1 registers | * 50662d21e4 ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset() | * 8e3cdab909 smb3: correct places where ENOTSUPP is used instead of preferred EOPNOTSUPP | * d540a4370a scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command | * fde57d7ba9 scsi: pm80xx: Use phy-specific SAS address when sending PHY_START command | * a1589abd7c drm/amdgpu: Handle null atom context in VBIOS info ioctl | * fd334cfd84 drm/amd/display: Don't check registers, if using AUX BL control | * a8bc0f6357 platform/mellanox: mlxbf-bootctl: add NET dependency into Kconfig | * 344f2f3e61 ring-buffer: Do not attempt to read past "commit" | * 3db9b42070 selftests: fix dependency checker script | * 4aa90e624c btrfs: improve error message after failure to add delayed dir index item | * 53e7c559b7 ring-buffer: Avoid softlockup in ring_buffer_resize() | * b4874f72cf selftests/ftrace: Correctly enable event in instance-event.tc | * 8c5c9ecbfa scsi: ufs: core: Move __ufshcd_send_uic_cmd() outside host_lock | * e08e61d50a scsi: qedf: Add synchronization between I/O completions and abort | * ada7fcba2d parisc: irq: Make irq_stack_union static to avoid sparse warning | * b7e376a26b parisc: drivers: Fix sparse warning | * d8c6fad002 parisc: iosapic.c: Fix sparse warnings | * 1ecdcfec4e parisc: sba: Fix compile warning wrt list of SBA devices | * bd1ec7f998 spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain | * ff05ed4ae2 spi: sun6i: reduce DMA RX transfer width to single byte | * ac0d068099 dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock | * d938c3d278 i2c: npcm7xx: Fix callback completion ordering | * 0c615323a7 gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip | * 2a47ee15a6 soc: imx8m: Enable OCOTP clock for imx8mm before reading registers | * 7c59b882b9 xtensa: boot/lib: fix function prototypes | * 70460e81e2 xtensa: boot: don't add include-dirs | * bc51434b66 xtensa: iss/network: make functions static | * 8e0f78a84f xtensa: add default definition for XCHAL_HAVE_DIV32 | * be57fc50dc firmware: imx-dsp: Fix an error handling path in imx_dsp_setup_channels() | * 1df81ea9e4 power: supply: ucs1002: fix error code in ucs1002_get_property() | * 6937e44ffb bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up | * 0e75aa86a7 ARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot | * 1b39eae117 ARM: dts: ti: omap: Fix bandgap thermal cells addressing for omap3/4 | * fcbf770c66 ARM: dts: omap: correct indentation | * f5e12de36a treewide: Replace GPLv2 boilerplate/reference with SPDX - gpl-2.0_56.RULE (part 1) | * 6829bc7978 clk: tegra: fix error return case for recalc_rate | * 78277b096d bus: ti-sysc: Fix missing AM35xx SoC matching | * 5435a49b3b bus: ti-sysc: Use fsleep() instead of usleep_range() in sysc_reset() | * c39df101d8 drm/bridge: ti-sn65dsi83: Do not generate HFP/HBP/HSA and EOT packet | * 4bf10fd51c MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled | * d2640d8687 btrfs: reset destination buffer when read_extent_buffer() gets invalid range | * 1a541999f3 scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() | * 532a239605 scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called | * 6642b4eb08 ata: ahci: Add Elkhart Lake AHCI controller | * 0726119607 ata: ahci: Rename board_ahci_mobile | * 8274154712 ata: ahci: Add support for AMD A85 FCH (Hudson D4) | * bd69c74dca ata: libata: Rename link flag ATA_LFLAG_NO_DB_DELAY | * f5ba6d9d6b netfilter: nft_exthdr: Fix non-linear header modification | * 7ca3a1b0f4 netfilter: exthdr: add support for tcp option removal | * fb6f65780c Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN | * 191fc23cfa Input: i8042 - rename i8042-x86ia64io.h to i8042-acpipnpio.h | * 5d2b57c0bc xfs: fix xfs_inodegc_stop racing with mod_delayed_work | * 657f842859 xfs: disable reaping in fscounters scrub | * 8444467ead xfs: check that per-cpu inodegc workers actually run on that cpu | * 67db9ecb84 xfs: explicitly specify cpu when forcing inodegc delayed work to run immediately | * 99e65f075e xfs: introduce xfs_inodegc_push() | * 2df3819632 xfs: bound maximum wait time for inodegc work | * 08dc215967 i2c: mux: gpio: Add missing fwnode_handle_put() | * f912d9d874 i2c: mux: gpio: Replace custom acpi_get_local_address() | * 1aa39eee57 i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() | * 9910b1411e gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() | * d7acb70317 Fix up backport of 1361917030 ("interconnect: Teach lockdep about icc_bw_lock order") | * d645206e9b igc: Expose tx-usecs coalesce setting to user | * d7a2bf6faa bnxt_en: Flush XDP for bnxt_poll_nitroa0()'s NAPI | * 56d2418a07 net: ena: Flush XDP packets on error. | * 07b569051f locking/seqlock: Do the lockdep annotation before locking in do_write_seqcount_begin_nested() | * a70dbdede0 netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP | * 0dcc9b4097 netfilter: nf_tables: disable toggling dormant table state more than once | * ea82139e6e net: rds: Fix possible NULL-pointer dereference | * cd05eec2ee team: fix null-ptr-deref when team device type is changed | * 8bc97117b5 net: bridge: use DEV_STATS_INC() | * 0d3939cccb net: hns3: add 5ms delay before clear firmware reset irq source | * d6d182d856 net: hns3: fix fail to delete tc flower rules during reset issue | * 7c47b238f4 net: hns3: only enable unicast promisc when mac table full | * 96af9a55b7 net: hns3: fix GRE checksum offload issue | * 13ea4b92e8 x86/srso: Fix SBPB enablement for spec_rstack_overflow=off | * e2c34afe83 x86/srso: Fix srso_show_state() side effect | * 21efa88e77 platform/x86: intel_scu_ipc: Fail IPC send if still busy | * 0a5d236b52 platform/x86: intel_scu_ipc: Don't override scu in intel_scu_ipc_dev_simple_command() | * ab78000c38 platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt() | * 47329633b3 platform/x86: intel_scu_ipc: Check status after timeout in busy_loop() | * 26df9ab5de dccp: fix dccp_v4_err()/dccp_v6_err() again | * 3b14e84318 powerpc/perf/hv-24x7: Update domain value check | * 8860d354f6 ipv4: fix null-deref in ipv4_link_failure | * c196ecd3f8 igc: Fix infinite initialization loop with early XDP redirect | * a2d69dcb6c ionic: fix 16bit math issue when PAGE_SIZE >= 64KB | * 3796e449a0 i40e: Fix VF VLAN offloading when port VLAN is configured | * a628f3b5cd i40e: Add VF VLAN pruning | * 7a9eee3b5d iavf: do not process adminq tasks when __IAVF_IN_REMOVE_TASK is set | * f3c6a17900 ASoC: imx-audmix: Fix return error with devm_clk_get() | * f90a7b9586 net/core: Fix ETH_P_1588 flow dissector | * 55629e6164 selftests: tls: swap the TX and RX sockets in some tests | * acabf5df49 bpf: Avoid deadlock when using queue and stack maps from NMI | * c6e44f4c31 netfilter: nf_tables: disallow element removal on anonymous sets | * 6a8de77753 ASoC: meson: spdifin: start hw on dai probe | * ef99506eaf netfilter: nf_tables: fix memleak when more than 255 elements expired | * 8d7a00b904 netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration | * 83d3a4607c netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails | * 949369f9f0 netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC | * 2e6846b613 netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention | * 9af7dfb3c9 netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction | * 9366966caf netfilter: nf_tables: defer gc run if previous batch is still pending | * 082791b421 netfilter: nf_tables: use correct lock to protect gc_list | * b44a459c65 netfilter: nf_tables: GC transaction race with abort path | * 24707fa1e1 netfilter: nf_tables: GC transaction race with netns dismantle | * 6796800f0d netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path | * af78b0489e netfilter: nf_tables: don't fail inserts if duplicate has expired | * 8f24fe69e3 netfilter: nf_tables: remove busy mark and gc batch API | * b290795bd2 netfilter: nft_set_hash: mark set element as dead when deleting from packet path | * 479a2cf525 netfilter: nf_tables: adapt set backend to use GC transaction API | * d19e8bf3ea netfilter: nf_tables: GC transaction API to avoid race with control plane | * 7c7e658a36 netfilter: nf_tables: don't skip expired elements during walk | * a2d1125ee0 tracing: Have event inject files inc the trace array ref count | * 6b6c088c38 ext4: do not let fstrim block system suspend | * a9d3bb58da ext4: move setting of trimmed bit into ext4_try_to_trim_range() | * d91abea15c ext4: replace the traditional ternary conditional operator with with max()/min() | * 656f0495e4 ext4: change s_last_trim_minblks type to unsigned long | * be57857fb3 ext4: scope ret locally in ext4_try_to_trim_range() | * e832b55881 ata: libahci: clear pending interrupt status | * f6189f3731 ata: ahci: Drop pointless VPRINTK() calls and convert the remaining ones | * fa6d449e4d tracing: Increase trace array ref count on enable and filter files | * 7a688f191a tracing: Make trace_marker{,_raw} stream-like | * 68fc0e75c7 NFSv4.1: fix pnfs MDS=DS session trunking | * 0ff78c4554 NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server | * d381bfe138 SUNRPC: Mark the cred for revalidation if the server rejects it | * f1c434ddaf NFS/pNFS: Report EINVAL errors from connect() to the server | * 0c0a7e1f2a NFS: More fixes for nfs_direct_write_reschedule_io() | * a354b4a367 NFS: Use the correct commit info in nfs_join_page_group() * | a2d74a39de ANDROID: GKI: add strscpy to fips140 build symbol list. * | 24e4d2248c Merge 5.15.133 into android14-5.15-lts |\| | * b911329317 Linux 5.15.133 | * e3a29b80e9 interconnect: Teach lockdep about icc_bw_lock order | * c6244cd00c drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma | * 08569c92f7 net/sched: Retire rsvp classifier | * 6b080fa8aa drm/amdgpu: fix amdgpu_cs_p1_user_fence | * 6386a2d4dc drm/amd/display: fix the white screen issue when >= 64GB DRAM | * e04b7073bd ext4: fix rec_len verify error | * 93763d5870 scsi: pm8001: Setup IRQs on resume | * 72a22696cf scsi: megaraid_sas: Fix deadlock on firmware crashdump | * 54603e8a88 ata: libata: disallow dev-initiated LPM transitions to unsupported states | * 01c7c38a90 i2c: aspeed: Reset the i2c controller when timeout occurs | * 763d39f4e8 tracefs: Add missing lockdown check to tracefs_create_dir() | * bf195968e3 nfsd: fix change_info in NFSv4 RENAME replies | * bf38c1d29f tracing: Have option files inc the trace array ref count | * 85ad4688b7 tracing: Have current_trace inc the trace array ref count | * 962e672323 tracing: Have tracing_max_latency inc the trace array ref count | * 380bbd46d6 btrfs: release path before inode lookup during the ino lookup ioctl | * 779c3cf274 btrfs: fix lockdep splat and potential deadlock after failure running delayed items | * f9c78afcee ovl: fix incorrect fdput() on aio completion | * 05a7289a5d ovl: fix failed copyup of fileattr on a symlink | * 8bcb80293b attr: block mode changes of symlinks | * d30af15e46 md/raid1: fix error: ISO C90 forbids mixed declarations | * abdfde0377 samples/hw_breakpoint: fix building without module unloading | * 58787ff3d0 x86/purgatory: Remove LTO flags | * 8abf1ec895 x86/boot/compressed: Reserve more memory for page tables | * e1a27664fc scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file() | * f0fd24f1fa selftests: tracing: Fix to unmount tracefs for recovering environment | * dded6b81ad scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() | * 1d5caeac96 drm: gm12u320: Fix the timeout usage for usb_bulk_msg() | * b9f0572b38 btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super | * cba491ee38 btrfs: add a helper to read the superblock metadata_uuid | * cb3671a2ee btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h | * f16fe29368 perf test shell stat_bpf_counters: Fix test on Intel | * ad73216e00 perf test: Remove bash construct from stat_bpf_counters.sh test | * d8f81baeb9 MIPS: Use "grep -E" instead of "egrep" | * dfe961b1e4 mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller | * 56cf9f446b mtd: rawnand: brcmnand: Allow SoC to provide I/O operations | * 34fcb59437 jbd2: correct the end of the journal recovery scan range | * a4605449cc jbd2: rename jbd_debug() to jbd2_debug() | * db6c90f267 jbd2: kill t_handle_lock transaction spinlock | * e927089822 jbd2: fix use-after-free of transaction_t race | * b0412dd1c2 jbd2: refactor wait logic for transaction updates into a common function | * f980bf1586 printk: Consolidate console deferred printing | * 9be2957f01 interconnect: Fix locking for runpm vs reclaim | * f3f6bf22a4 kobject: Add sanity check for kset->kobj.ktype in kset_register() | * 81bbe66670 media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning | * d4ef3c9c79 usb: ehci: add workaround for chipidea PORTSC.PEC bug | * c829d25e26 serial: cpm_uart: Avoid suspicious locking | * 5353df78c2 scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() | * b97aaf9faf tools: iio: iio_generic_buffer: Fix some integer type and calculation | * 60a71fd191 usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc | * c861a61be6 usb: cdns3: Put the cdns set active part outside the spin lock | * 930c60e139 media: pci: cx23885: replace BUG with error return | * 48bb6a9fa5 media: tuners: qt1010: replace BUG_ON with a regular error | * 2a33fc5713 media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer | * 5b1ea100ad media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() | * 3dd5846a87 media: anysee: fix null-ptr-deref in anysee_master_xfer | * 033b0c0780 media: af9005: Fix null-ptr-deref in af9005_i2c_xfer | * 903566208a media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() | * d9ef84a7c2 media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer | * ca49cef3ac PCI: fu740: Set the number of MSI vectors | * d35e7ae10e powerpc/pseries: fix possible memory leak in ibmebus_bus_init() | * 46870eea54 ARM: 9317/1: kexec: Make smp stop calls asynchronous | * ef7311101c jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount | * aa5b019a3e fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() | * 7ac65c29b6 ext2: fix datatype of block number in ext2_xattr_set2() | * 4f96c0665f md: raid1: fix potential OOB in raid1_remove_disk() | * f3e9fc7b02 bus: ti-sysc: Configure uart quirks for k3 SoC | * 3157aa794c drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() | * 78bc9d2599 drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN31 | * 5eca70c14b ALSA: hda: intel-dsp-cfg: add LunarLake support | * e8ba418d49 samples/hw_breakpoint: Fix kernel BUG 'invalid opcode: 0000' | * 961df5a3f5 arm64: dts: qcom: sm8250-edo: correct ramoops pmsg-size | * 49cd549000 arm64: dts: qcom: sm8150-kumano: correct ramoops pmsg-size | * 1e0a38bb84 arm64: dts: qcom: sm6125-pdx201: correct ramoops pmsg-size | * 201071956e drm/bridge: tc358762: Instruct DSI host to generate HSE packets | * c64ee9dd33 wifi: mac80211_hwsim: drop short frames | * 66594a1e6d netfilter: ebtables: fix fortify warnings in size_entry_mwt() | * fedd9377dd wifi: mac80211: check S1G action frame size | * e08333e2ab alx: fix OOB-read compiler warning | * 2b0a093cdf mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450 | * 0a1f87f0ca tpm_tis: Resend command to recover from data transfer errors | * 67589d2479 crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() | * 389106425d wifi: wil6210: fix fortify warnings | * ddb8f358b5 wifi: mwifiex: fix fortify warning | * a7ebe459c7 wifi: ath9k: fix printk specifier | * 3de6b6ab69 wifi: ath9k: fix fortify warnings | * 6b0adfafb0 crypto: lrw,xts - Replace strlcpy with strscpy | * dc100292e5 devlink: remove reload failed checks in params get/set callbacks | * 7b7964cd9d ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects | * eda268b5b7 hw_breakpoint: fix single-stepping when using bpf_overflow_handler | * 6e743b7261 perf/imx_ddr: speed up overflow frequency of cycle | * f9a2c79c29 perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 | * ed1afb5972 ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 | * f685311dbe scftorture: Forgive memory-allocation failure if KASAN | * 4f03fba096 rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle() | * f1ceff37ac kernel/fork: beware of __put_task_struct() calling context | * 430787056d ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer | * 766e56fadd locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock | * 6994f806c6 btrfs: output extra debug info if we failed to find an inline backref | * 71eeddcad7 autofs: fix memory leak of waitqueues in autofs_catatonic_mode * | 661e59ac7a FROMLIST: lib/test_meminit: fix off-by-one error in test_pages() * | e25a34ce77 ANDROID: GKI: db845c: add pcie_capability_clear_and_set_word to the symbol list * | 4a80d037ed Revert "fs/nls: make load_nls() take a const parameter" * | 24a6c40238 Revert "tracing: Introduce pipe_cpumask to avoid race on trace_pipes" * | 682d0f1c2e Revert "tracing: Zero the pipe cpumask on alloc to avoid spurious -EBUSY" * | e2c62c87d6 Revert "crypto: api - Use work queue in crypto_destroy_instance" * | b5df330aac Merge 5.15.132 into android14-5.15-lts |/ * 35ecaa3632 Linux 5.15.132 * 0c0d79f336 pcd: fix error codes in pcd_init_unit() * 893978f1b4 drm/amd/display: Fix a bug when searching for insert_above_mpcc * 0b8e09b39e MIPS: Only fiddle with CHECKFLAGS if `need-compiler' * 55d2e7c1ab kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg(). * e80228b274 ixgbe: fix timestamp configuration code * 5b55dac919 ipv6: fix ip6_sock_set_addr_preferences() typo * 481bd6dcc5 net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() * 3600c0dc0d platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events * 07c0abc806 platform/mellanox: mlxbf-pmc: Fix potential buffer overflows * 7c34ea3451 platform/mellanox: mlxbf-tmfifo: Drop jumbo frames * 694035201a platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors * 97275339c3 kcm: Fix memory leak in error path of kcm_sendmsg() * 864da4a5d5 r8152: check budget for r8152_poll() * fbdc4e9908 net: dsa: sja1105: hide all multicast addresses from "bridge fdb show" * 6a4480c5e6 hsr: Fix uninit-value access in fill_frame_info() * 072324cfab net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() * 5bb09dddc7 net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() * 06b4934ab2 net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in smcr_port_add * aea3801c23 kselftest/runner.sh: Propagate SIGTERM to runner child * 2f1e86014d net: ipv4: fix one memleak in __inet_del_ifa() * f086e859dd ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2 * 8173d90270 ARM: dts: samsung: exynos4210-i9100: Fix LCD screen's physical size * 072cd213c6 block: don't add or resize partition on the disk with GENHD_FL_NO_PART * c6ce1c5dd3 block: rename GENHD_FL_NO_PART_SCAN to GENHD_FL_NO_PART * 6c06a7f6b4 block: move GENHD_FL_BLOCK_EVENTS_ON_EXCL_WRITE to disk->event_flags * 8247ff0d50 block: move GENHD_FL_NATIVE_CAPACITY to disk->state * 5ad42b999a pcd: cleanup initialization * 7607bc7fe6 pcd: move the identify buffer into pcd_identify * 242bbe2188 perf hists browser: Fix the number of entries for 'e' key * 4d7a8a44e0 perf tools: Handle old data in PERF_RECORD_ATTR * a8f91f480c perf hists browser: Fix hierarchy mode header * 4ee1cf2a5b MIPS: Fix CONFIG_CPU_DADDI_WORKAROUNDS `modules_install' regression * df4d8d5ab6 drm/amd/display: prevent potential division by zero errors * 3b51d016bb mtd: rawnand: brcmnand: Fix potential false time out warning * 2353b7bb61 mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write * b59ff750bf mtd: rawnand: brcmnand: Fix crash during the panic_write * ca5218aef9 btrfs: use the correct superblock to compare fsid in btrfs_validate_super * f326073389 btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART * 7ef0e8b812 btrfs: free qgroup rsv on io failure * 5fd6f40d17 fuse: nlookup missing decrement in fuse_direntplus_link * 65b6890c3d ata: pata_ftide010: Add missing MODULE_DESCRIPTION * 0b62825dc6 ata: sata_gemini: Add missing MODULE_DESCRIPTION * 81dd61cb1c ata: pata_falcon: fix IO base selection for Q40 * 20bc2c4703 lib: test_scanf: Add explicit type cast to result initialization in test_number_prefix() * 4315b4a95e ext4: add correct group descriptors and reserved GDT blocks to system zone * ef5fea70e5 jbd2: check 'jh->b_transaction' before removing it from checkpoint * 6778a38572 jbd2: fix checkpoint cleanup performance regression * 6b195e07a2 dmaengine: sh: rz-dmac: Fix destination and source data size setting * 0476f2016d ARC: atomics: Add compiler barrier to atomic operations... * 3375186d5e net/mlx5: Free IRQ rmap and notifier on kernel shutdown * 2348a375ee sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory() * f5160dc17e net: hns3: remove GSO partial feature bit * 6d548b7cb2 net: hns3: fix the port information display when sfp is absent * cc3c67e081 net: hns3: fix invalid mutex between tc qdisc and dcb ets command issue * 2c9643fa63 net: hns3: fix debugfs concurrency issue between kfree buffer and read * 8bfa87cf4a net: hns3: fix byte order conversion issue in hclge_dbg_fd_tcam_read() * 19280e8dfb netfilter: nfnetlink_osf: avoid OOB read * 1ad7b189cc netfilter: nftables: exthdr: fix 4-byte stack OOB write * 347f765176 net: dsa: sja1105: complete tc-cbs offload support on SJA1110 * cb4494cfe4 net: dsa: sja1105: fix -ENOSPC when replacing the same tc-cbs too many times * 77b850b84d net: dsa: sja1105: fix bandwidth discrepancy between tc-cbs software and offload * d11109c03d ip_tunnels: use DEV_STATS_INC() * fcfb5842ef idr: fix param name in idr_alloc_cyclic() doc * 131cd74a8e s390/zcrypt: don't leak memory if dev_set_name() fails * 12de76fddd igb: Change IGB_MIN to allow set rx/tx value between 64 and 80 * 7c2f90b1c2 igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80 * f4c5640d6d igc: Change IGC_MIN to allow set rx/tx value between 64 and 80 * 9210b3dd74 octeontx2-af: Fix truncation of smq in CN10K NIX AQ enqueue mbox handler * 1840f08c2a kcm: Destroy mutex in kcm_exit_net() * 6ea277b2c6 net: sched: sch_qfq: Fix UAF in qfq_dequeue() * 3868de7c53 af_unix: Fix data race around sk->sk_err. * d95456660f af_unix: Fix data-races around sk->sk_shutdown. * e5edc6e44a af_unix: Fix data-race around unix_tot_inflight. * 9151ed4b00 af_unix: Fix data-races around user->unix_inflight. * 907fbed65c net: phy: micrel: Correct bit assignments for phy_device flags * 5d2d3f2300 net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr * 77dd55f5ec veth: Fixing transmit return status for dropped packets * 56603b2c82 igb: disable virtualization features on 82580 * 149bc7834d ipv4: ignore dst hint for multipath routes * e18b49495a drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt() * 5979985f2d xsk: Fix xsk_diag use-after-free error during socket cleanup * 49acc5c5b2 net: fib: avoid warn splat in flow dissector * ed4e0adfa4 net: read sk->sk_family once in sk_mc_loop() * e0b483a058 ipv4: annotate data-races around fi->fib_dead * 74df0319e4 sctp: annotate data-races around sk->sk_wmem_queued * 973a4c302d net/sched: fq_pie: avoid stalls in fq_pie_timer() * 5e22217c11 pwm: lpc32xx: Remove handling of PWM channels * 676152264d watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load * d6aa2be137 perf top: Don't pass an ERR_PTR() directly to perf_session__delete() * 79bd17c99e perf vendor events: Drop some of the JSON/events for power10 platform * 1356eaceef perf vendor events: Update the JSON/events descriptions for power10 platform * 24481d5c74 x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm() * 6e98631656 perf annotate bpf: Don't enclose non-debug code with an assert() * 184be0d592 Input: tca6416-keypad - fix interrupt enable disbalance * 0b79f5a19c Input: tca6416-keypad - always expect proper IRQ number in i2c client * 1e3167aa4b backlight: gpio_backlight: Drop output GPIO direction check for initial power state * 6fc8bdc3cf pwm: atmel-tcb: Fix resource freeing in error path and remove * 6b2bb1a1a6 pwm: atmel-tcb: Harmonize resource allocation order * d4734ef765 pwm: atmel-tcb: Convert to platform remove callback returning void * c3bc668581 perf trace: Really free the evsel->priv area * 8e96f741b3 perf trace: Use zfree() to reduce chances of use after free * 414cf7a2cc kconfig: fix possible buffer overflow * be9ce0dbde gfs2: low-memory forced flush fixes * 751facd363 gfs2: Switch to wait_event in gfs2_logd * d0245b0669 kbuild: do not run depmod for 'make modules_sign' * 05333a6a21 bus: mhi: host: Skip MHI reset if device is in RDDM * e2964c98ec NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info * da302f1d47 NFS: Fix a potential data corruption * 0db19df21b clk: qcom: mss-sc7180: fix missing resume during probe * f64f682be7 clk: qcom: q6sstop-qcs404: fix missing resume during probe * b2f39b813d soc: qcom: qmi_encdec: Restrict string length in decode * e61db89226 clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock * a8474506c9 clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz * a69b951c83 dt-bindings: clock: xlnx,versal-clk: drop select:false * ead2436cf0 pinctrl: cherryview: fix address_space_handler() argument * 8859f58c17 parisc: led: Reduce CPU overhead for disk & lan LED computation * 2655e1d970 parisc: led: Fix LAN receive and transmit LEDs * 7ad44409cd lib/test_meminit: allocate pages up to order MAX_ORDER * 2d8138cea7 clk: qcom: turingcc-qcs404: fix missing resume during probe * 9f5db4ab19 drm/ast: Fix DRAM init on AST2200 * cfc47807a4 clk: qcom: camcc-sc7180: fix async resume during probe * 309c27162a fbdev/ep93xx-fb: Do not assign to struct fb_info.dev * 4316e951f1 scsi: qla2xxx: Fix firmware resource tracking * 7b89c3727b scsi: qla2xxx: Error code did not return to upper layer * 15a71bb25b scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit() * 1063921562 scsi: qla2xxx: Flush mailbox commands on chip reset * def49a05ae scsi: qla2xxx: Remove unsupported ql2xenabledif option * be12c9f4c6 scsi: qla2xxx: Fix TMF leak through * 4322f3de9f scsi: qla2xxx: Fix session hang in gnl * a4708402c4 scsi: qla2xxx: Turn off noisy message log * b0453b0cf5 scsi: qla2xxx: Fix erroneous link up failure * 5934b2125f scsi: qla2xxx: Fix command flush during TMF * 4a16a46c84 scsi: qla2xxx: fix inconsistent TMF timeout * f1ea164be5 scsi: qla2xxx: Fix deletion race condition * 683945b177 scsi: qla2xxx: Limit TMF to 8 per function * fde268c234 scsi: qla2xxx: Adjust IOCB resource on qpair create * c29848249f io_uring: break iopolling on signal * 0def123f12 io_uring: break out of iowq iopoll on teardown * 1a0aba2bf2 io_uring: always lock in io_apoll_task_func * 2920cc4c64 net/ipv6: SKB symmetric hash should incorporate transport ports * 529bcc70c4 udf: initialize newblock to 0 * fae2d591f3 Revert "drm/amdgpu: install stub fence into potential unused fence pointers" * f01e21d6c7 md/md-bitmap: remove unnecessary local variable in backlog_store() * 99a8d14d79 tracing: Zero the pipe cpumask on alloc to avoid spurious -EBUSY * 05c581ad3e perf/x86/uncore: Correct the number of CHAs on EMR * 861cfdc51f x86/sgx: Break up long non-preemptible delays in sgx_vepc_release() * 7e3ddbea87 USB: core: Fix oversight in SuperSpeed initialization * 7fe9d87996 USB: core: Fix race by not overwriting udev->descriptor in hub_port_init() * eda9a29665 USB: core: Change usb_get_device_descriptor() API * 56c49a3328 USB: core: Unite old scheme and new scheme descriptor reads * 0ad6bad31d usb: typec: bus: verify partner exists in typec_altmode_attention * 31220bd89c usb: typec: tcpm: set initial svdm version based on pd revision * 3acc6b9f26 cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug * cb65ad51f1 crypto: stm32 - fix loop iterating through scatterlist for DMA * 9ab2c149c2 s390/ipl: add missing secure/has_secure file to ipl type 'unknown' * 6aff273257 arm64: sdei: abort running SDEI handlers during crash * fedecaeef8 pstore/ram: Check start of empty przs during init * 8d68582b93 mmc: renesas_sdhi: register irqs before registering controller * 5294144b6a fsverity: skip PKCS#7 parser when keyring is empty * 86608e1b0c net: handle ARPHRD_PPP in dev_is_mac_header_xmit() * 51ffed9ca1 X.509: if signature is unsupported skip validation * 6ecf09699e dccp: Fix out of bounds access in DCCP error handler * 7a2978e8d3 dlm: fix plock lookup when using multiple lockspaces * 703cf47d47 parisc: Fix /proc/cpuinfo output for lscpu * 49a49d4420 procfs: block chmod on /proc/thread-self/comm * 44f6ec5893 Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset" * d73d3787c9 ntb: Fix calculation ntb_transport_tx_free_entry() * da0c7293f4 ntb: Clean up tx tail index on link down * bfa051f650 ntb: Drop packets when qp link is down * 8f4edcd655 scsi: mpt3sas: Perform additional retries if doorbell read returns 0 * 58388f2958 Revert "scsi: qla2xxx: Fix buffer overrun" * bd188d1e38 media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts * 6e9632a01e media: dvb: symbol fixup for dvb_attach() * 9a43563cfd arm64: csum: Fix OoB access in IP checksum code for negative lengths * a0a49da2a7 i3c: master: svc: fix probe failure when no i3c device exist * a905ac21b2 xtensa: PMU: fix base address for the newer hardware * 8742dbf9c2 backlight/lv5207lp: Compare against struct fb_info.device * 568132f74c backlight/bd6107: Compare against struct fb_info.device * 4e7b4ddc90 backlight/gpio_backlight: Compare against struct fb_info.device * 3b018c3d10 ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch() * cbb7d8a4b4 ipmi_si: fix a memleak in try_smi_init() * 6043dd31f7 PCI: rockchip: Use 64-bit mask on MSI 64-bit PCI address * aba1bf1974 media: i2c: ccs: Check rules is non-NULL * df64819dd6 mm/vmalloc: add a safer version of find_vm_area() for debug * 20b7d0a62a scsi: core: Fix the scsi_set_resid() documentation * 20990d6a85 printk: ringbuffer: Fix truncating buffer size min_t cast * 0a22f9c17b rcu: dump vmalloc memory info safely * d479c841b1 ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl * 111bafa210 PM / devfreq: Fix leak in devfreq_dev_release() * be7353af5b igb: set max size RX buffer when store bad packet is enabled * d579038659 skbuff: skb_segment, Call zero copy functions before using skbuff frags * 267a29f8bf netfilter: xt_sctp: validate the flag_info count * b3d07714ad netfilter: xt_u32: validate user space input * a9e6142e5f netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c * 3e48f741e9 igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU * de16cb7986 virtio_ring: fix avail_wrap_counter in virtqueue_add_packed * d6f80ddb9e cpufreq: Fix the race condition while updating the transition_task of policy * 42d8c7fa0b dmaengine: ste_dma40: Add missing IRQ check in d40_probe * 329d0f168c um: Fix hostaudio build errors * 58d17e7660 mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() * 679a71b311 mtd: spi-nor: Check bus width while setting QE bit * 8869fd166f leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead * 0f715ea7d3 leds: multicolor: Use rounded division when calculating color components * 1a68bef237 leds: pwm: Fix error code in led_pwm_create_fwnode() * abd740db89 rpmsg: glink: Add check for kstrdup * b45cf29f97 phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write * 40d637359f phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate * 52942a47d0 phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 * 31d7e6c768 mtd: rawnand: brcmnand: Fix mtd oobsize * 6182318ac0 tracing: Fix race issue between cpu buffer write and swap * 548f48ec19 tracing: Remove extra space at the end of hwlat_detector/mode * 2ba8bb0072 x86/speculation: Mark all Skylake CPUs as vulnerable to GDS * dde88ab4e4 HID: multitouch: Correct devm device reference for hidinput input_dev name * 4fb28379b3 HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() * 1bb42aca7a Revert "IB/isert: Fix incorrect release of isert connection" * 4f1807fddd amba: bus: fix refcount leak * 1c37013734 serial: tegra: handle clk prepare error in tegra_uart_hw_init() * 076fb40cf2 scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock * c4772759ab scsi: core: Use 32-bit hostnum in scsi_host_lookup() * 6248f43053 cgroup:namespace: Remove unused cgroup_namespaces_init() * 04824d50e6 media: i2c: rdacm21: Fix uninitialized value * f3572eef85 media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors * 205f717441 media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working * 89ecb4b400 media: ov2680: Add ov2680_fill_format() helper function * 784d1b83ae media: ov2680: Don't take the lock for try_fmt calls * dbb717b4ee media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s * 4c1a5c2885 media: ov2680: Fix vflip / hflip set functions * 958905ed42 media: ov2680: Fix ov2680_bayer_order() * cdd5fca720 media: ov2680: Remove auto-gain and auto-exposure controls * 322a805ffd media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips * abba34017e media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() * 1717f67be8 USB: gadget: f_mass_storage: Fix unused variable warning * 121b8d30f4 media: venus: hfi_venus: Only consider sys_idle_indicator on V1 * f6b483ead6 media: go7007: Remove redundant if statement * d079a3e1cc platform/x86: dell-sysman: Fix reference leak * 426bd74187 iommu/vt-d: Fix to flush cache of PASID directory table * 9dc6f66081 iommu/qcom: Disable and reset context bank before programming * 3274e32fc9 fsi: aspeed: Reset master errors after CFAM reset * 7a17deca33 IB/uverbs: Fix an potential error pointer dereference * 42d111304d RDMA/hns: Fix CQ and QP cache affinity * b051c3bf3b RDMA/hns: Fix incorrect post-send with direct wqe of wr-list * 154822356e RDMA/hns: Fix port active speed * de4aca5b28 iommu/sprd: Add missing force_aperture * 46b76f13f1 driver core: test_async: fix an error code * a6992ecefe dma-buf/sync_file: Fix docs syntax * d3256d8040 coresight: tmc: Explicit type conversions to prevent integer overflow * 93a5b461a4 RDMA/irdma: Replace one-element array with flexible-array member * 97097ea2f3 scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly * 1c996be7f2 scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly * cb6d20a8b5 scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly * 2f0d202d82 x86/APM: drop the duplicate APM_MINOR_DEV macro * f34508d934 serial: sprd: Fix DMA buffer leak issue * c54c66d904 serial: sprd: Assign sprd_port after initialized to avoid wrong access * f61fc650c4 scsi: qla4xxx: Add length check when parsing nlattrs * 46ad449efd scsi: be2iscsi: Add length check when parsing nlattrs * 4bd57d8890 scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() * e9bac3cc74 scsi: iscsi: Add length check for nlattr payload * 9285efd959 scsi: iscsi: Rename iscsi_set_param() to iscsi_if_set_param() * 7231d60d41 scsi: RDMA/srp: Fix residual handling * 484ddaa90b usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() * cbb8f7097e media: mediatek: vcodec: Return NULL if no vdec_fb is found * 18dc93de90 media: rkvdec: increase max supported height for H.264 * f1e7d999f3 scsi: hisi_sas: Fix normally completed I/O analysed as failed * 46d1b2a3d5 scsi: hisi_sas: Fix warnings detected by sparse * e454e98595 scsi: hisi_sas: Modify v3 HW SATA completion error processing * 7caac45b52 scsi: hisi_sas: Modify v3 HW SSP underflow error processing * f64d02822b media: cx24120: Add retval check for cx24120_message_send() * 7ca7cd0211 media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() * fb24b65aac media: dib7000p: Fix potential division by zero * 56a3d8ae45 drivers: usb: smsusb: fix error handling code in smsusb_init_device * d1b51b130d iommu: rockchip: Fix directory table address encoding * a50d60b8f2 iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind * caf058833b media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() * 711e9e44f6 media: i2c: tvp5150: check return value of devm_kasprintf() * 30d4380eb0 media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables * 663114dfc1 RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() * 1473e40b39 pNFS: Fix assignment of xprtdata.cred * fb7ddc1138 NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ * 53a1e5ab1b NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN * 19a648a075 NFSD: da_addr_body field missing in some GETDEVICEINFO replies * b0f127a7c6 fs: lockd: avoid possible wrong NULL parameter * 8f994b830d jfs: validate max amount of blocks before allocation. * f6a84ef1d0 ext4: fix unttached inode after power cut with orphan file feature enabled * a9ddbfed53 powerpc/iommu: Fix notifiers being shared by PCI and VIO buses * a70c8de305 nfs/blocklayout: Use the passed in gfp flags * 2935443dc9 powerpc/pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT * 75dcb650a7 powerpc: Don't include lppaca.h in paca.h * cefcb002c5 PCI: layerscape: Add workaround for lost link capabilities during reset * 4be323c737 PCI: layerscape: Add the endpoint linkup notifier support * 69c712389e PCI: dwc: Add start_link/stop_link inlines * aac0a9a157 wifi: ath10k: Use RMW accessors for changing LNKCTL * 3539bab5f9 wifi: ath11k: Use RMW accessors for changing LNKCTL * ea670d0146 net/mlx5: Use RMW accessors for changing LNKCTL * 348ef09df9 drm/radeon: Use RMW accessors for changing LNKCTL * 5468237382 drm/amdgpu: Use RMW accessors for changing LNKCTL * 00f79e78bf powerpc/perf: Convert fsl_emb notifier to state machine callbacks * a26a5e4be2 powerpc/fadump: reset dump area size if fadump memory reserve fails * 13fd667db9 vfio/type1: fix cap_migration information leak * 6b708243d3 powerpc/radix: Move some functions into #ifdef CONFIG_KVM_BOOK3S_HV_POSSIBLE * dbde1d9c54 clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op * 824e97302f clk: imx8mp: fix sai4 clock * 66ef144dbd PCI/ASPM: Use RMW accessors for changing LNKCTL * f46fa8ab8d PCI: pciehp: Use RMW accessors for changing LNKCTL * 759d978e83 pinctrl: mcp23s08: check return value of devm_kasprintf() * 02faf0bd6f PCI: Mark NVIDIA T4 GPUs to avoid bus reset * 4c20a41432 PCI: microchip: Correct the DED and SEC interrupt bit offsets * 377f7aeddd clk: qcom: gcc-sm6350: Fix gcc_sdcc2_apps_clk_src * 1c4a98c55f clk: qcom: reset: Use the correct type of sleep/delay based on length * bd4eff9c83 clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src * b1cb8bf42b ext4: avoid potential data overflow in next_linear_group * 3e24082f16 ext4: correct grp validation in ext4_mb_good_group * febacbefe4 EDAC/igen6: Fix the issue of no error events * 964f62caac clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src * f1399e1543 clk: sunxi-ng: Modify mismatched function name * 92913d32e7 drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() * 3ad53071fe ipmi:ssif: Fix a memory leak when scanning for an adapter * 7792869495 ipmi:ssif: Add check for kstrdup * 53abafedfe ALSA: ac97: Fix possible error value of *rac97 * 48fc5717b2 of: unittest: Fix overlay type in apply/revert check * 01bb96ad38 of: overlay: Call of_changeset_init() early * 30f04a41e7 md: raid0: account for split bio in iostat accounting * 9643cc0b17 md/raid0: Fix performance regression for large sequential writes * 17fbf7da49 md/raid0: Factor out helper for mapping and submitting a bio * d04f1e322f md: add error_handlers for raid0 and linear * d8b6adb840 md: Set MD_BROKEN for RAID1 and RAID10 * a68fabdad9 bus: ti-sysc: Fix cast to enum warning * 7636dfc42b arm64: dts: qcom: apq8016-sbc: Fix ov5640 regulator supply names * fff4d36247 drm/mediatek: Fix potential memory leak if vmap() fail * e5758ad9a3 drm/mediatek: Remove freeing not dynamic allocated memory * 97274bea01 bus: ti-sysc: Fix build warning for 64-bit build * cc6b09671d io_uring: fix drain stalls by invalid SQE * 0152e7758c audit: fix possible soft lockup in __audit_inode_child() * 48e4c48190 drm/msm/a2xx: Call adreno_gpu_init() earlier * 76c3ad1244 drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() * 32e0609273 smackfs: Prevent underflow in smk_set_cipso() * 502dfc5875 firmware: meson_sm: fix to avoid potential NULL pointer dereference * c0b1eee648 drm/msm/mdp5: Don't leak some plane state * d0b82c217f drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask * b7b0c48851 ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig * 8025396b76 drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 * 27eee65b2e drm/armada: Fix off-by-one error in armada_overlay_get_property() * cc9254b24a arm64: dts: qcom: sm8150: Fix the I2C7 interrupt * ea5bc6f5aa of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() * 4197eeb55f drm/tegra: dpaux: Fix incorrect return value of platform_get_irq * 9712279e97 drm/msm: Update dev core dump to not print backwards * 8ef5d1f16d md/md-bitmap: hold 'reconfig_mutex' in backlog_store() * 3826383647 md/bitmap: don't set max_write_behind if there is no write mostly device * a3d36107ee md/raid10: use dereference_rdev_and_rrdev() to get devices * 94ca5eed95 md/raid10: factor out dereference_rdev_and_rrdev() * 246bac7d3c drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl' * de93b4711a arm64: dts: qcom: sdm845: Fix the min frequency of "ice_core_clk" * a9e56fa8a0 arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC * db0ba31254 ARM: dts: BCM53573: Fix Ethernet info for Luxul devices * c4413633ef drm: adv7511: Fix low refresh rate register for ADV7533/5 * 57b6d92c79 ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split) * b7f47031e3 ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210 * 2f0246b3c7 ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split) * d12beb1b1e ARM: dts: s3c64xx: align pinctrl with dtschema * 188f2d41fa x86/mm: Fix PAT bit missing from page protection modify mask * 1dd43e1e54 drm/etnaviv: fix dumping of active MMU context * 1634fe406c arm64: dts: qcom: pmi8994: Add missing OVP interrupt * 4b7eb5e2c1 arm64: dts: qcom: Move WLED num-strings from pmi8994 to sony-xperia-tone * 92919d98e6 arm64: dts: qcom: pmi8994: Remove hardcoded linear WLED enabled-strings * 3659098572 arm64: dts: qcom: pm660l: Add missing short interrupt * ea48fd91df arm64: dts: qcom: correct SPMI WLED register range encoding * eee01e0d6a arm64: dts: qcom: pmi8998: Add node for WLED * b788afdbfd arm64: dts: qcom: sm8250-sony-xperia: correct GPIO keys wakeup again * 2840d9b9c8 ARM: dts: BCM53573: Use updated "spi-gpio" binding properties * b35f3ca187 ARM: dts: BCM53573: Add cells sizes to PCIe node * bed08bb832 drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() * 261e694566 arm64: dts: qcom: sm8250: Mark PCIe hosts as DMA coherent * 12a93e53ea arm64: dts: qcom: pmk8350: fix ADC-TM compatible string * 4c9a637258 arm64: dts: qcom: sm8350: Use proper CPU compatibles * 4c918fb77d arm64: dts: qcom: sm8350: Add missing LMH interrupts to cpufreq * 9c022ab2db arm64: dts: qcom: msm8996: Add missing interrupt to the USB2 controller * bda65ecaec arm64: dts: qcom: sm8250-edo: Rectify gpio-keys * 6119aaced9 arm64: dts: qcom: sm8250-edo: Add GPIO line names for PMIC GPIOs * c0dc9d7d3f arm64: dts: qcom: sm8250-edo: Add gpio line names for TLMM * d2d698daa1 arm64: dts: qcom: sm8250: correct dynamic power coefficients * 510bae3d37 soc: qcom: ocmem: Fix NUM_PORTS & NUM_MACROS macros * b08c7a31ba soc: qcom: ocmem: Add OCMEM hardware version print * dc04034502 ASoC: stac9766: fix build errors with REGMAP_AC97 * 89602de9a2 quota: fix dqput() to follow the guarantees dquot_srcu should provide * 1df46e717e quota: add new helper dquot_active() * bd0a6452f0 quota: rename dquot_active() to inode_quota_active() * 5b82402234 quota: factor out dquot_write_dquot() * 6c6efd3a1d drm/bridge: tc358764: Fix debug print parameter order * a48e7def00 netrom: Deny concurrent connect(). * 4cf994d3f4 net/sched: sch_hfsc: Ensure inner classes have fsc curve * edb5b1b3b9 hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() * a85fd81165 mlxsw: i2c: Limit single transaction buffer size * 7790b6a2f5 mlxsw: i2c: Fix chunk size setting in output mailbox buffer * 510e0cbd64 net: arcnet: Do not call kfree_skb() under local_irq_disable() * 93a572b9d4 wifi: ath9k: use IS_ERR() with debugfs_create_dir() * 5138beea8e Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() * d7fd24b8d1 wifi: mwifiex: avoid possible NULL skb pointer dereference * 71ce8be48b wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute * 11f93fff6e wifi: ath9k: protect WMI command response buffer replacement with a lock * 6904c7afd5 wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx * cec7db9ea0 samples/bpf: fix broken map lookup probe * 89f19a9a05 wifi: mwifiex: Fix missed return in oob checks failed path * 308eb3a609 wifi: mwifiex: fix memory leak in mwifiex_histogram_read() * 9c00731bf0 fs: ocfs2: namei: check return value of ocfs2_add_entry() * f683992d30 lwt: Check LWTUNNEL_XMIT_CONTINUE strictly * e3f647e4b6 lwt: Fix return values of BPF xmit ops * 4ff9981340 hwrng: iproc-rng200 - Implement suspend and resume calls * 5a70ab6b59 crypto: caam - fix unchecked return value error * 660b6b1c5c ice: ice_aq_check_events: fix off-by-one check when filling buffer * 55fab9389d net-memcg: Fix scope of sockmem pressure indicators * 41c40d8483 selftests/bpf: Clean up fmod_ret in bench_rename test script * 50c78e7144 net: tcp: fix unexcepted socket die when snd_wnd is 0 * 942d8cefb0 Bluetooth: Fix potential use-after-free when clear keys * 7b0243d26a Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() * 048545d9fc crypto: api - Use work queue in crypto_destroy_instance * 56cb7bbefc crypto: stm32 - Properly handle pm_runtime_get failing * e3c4a6b073 selftests/bpf: fix static assert compilation issue for test_cls_*.c * 43423b3e04 wifi: mwifiex: fix error recovery in PCIE buffer descriptor management * 7c54b6fc39 wifi: mwifiex: Fix OOB and integer underflow when rx packets * a20b96cf69 wifi: mt76: mt7915: fix power-limits while chan_switch * 5c75a43795 can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM * 890843254f spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() * 2ff9ac0cf2 wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH * 802008e8c7 ipv6: Add reasons for skb drops to __udp6_lib_rcv * 7dcbc0bb0e bpf: reject unhashed sockets in bpf_sk_assign * caa2883b18 udp: re-score reuseport groups when connected sockets are present * b60dfa4559 regmap: rbtree: Use alloc_flags for memory allocations * 34f1180658 hwrng: pic32 - use devm_clk_get_enabled * 5af3c8676b hwrng: nomadik - keep clock enabled while hwrng is registered * 14c6d1e808 tcp: tcp_enter_quickack_mode() should be static * 7b75b4c90a bpf: Clear the probe_addr for uprobe * 75d3960be7 bpftool: Use a local bpf_perf_event_value to fix accessing its fields * 8ea6871116 cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit() * be2092d2a7 x86/efistub: Fix PCI ROM preservation in mixed mode * 9eb25ea7b6 ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table * 26097a7f28 ACPI: x86: s2idle: Post-increment variables when getting constraints * 8a962f11a9 s390/paes: fix PKEY_TYPE_EP11_AES handling for secure keyblobs * 7833a74f8d s390/pkey: fix/harmonize internal keyblob headers * 208383d685 selftests/futex: Order calls to futex_lock_pi * c7802ff51a perf/imx_ddr: don't enable counter0 if none of 4 counters are used * 0a872a0521 x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved * 3af6f77e80 selftests/resctrl: Close perf value read fd on errors * 4505ad996b selftests/resctrl: Unmount resctrl FS if child fails to run benchmark * c68a196e7f selftests/resctrl: Don't leak buffer in fill_cache() * fdcb63afd3 selftests/resctrl: Add resctrl.h into build deps * b2ba11ed4d selftests/resctrl: Make resctrl_tests run using kselftest framework * e0478944f4 OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd() * ec9d118ad9 refscale: Fix uninitalized use of wait_queue_head_t * e280033ef1 ARM: ptrace: Restore syscall skipping for tracers * 4c3f33904d ARM: ptrace: Restore syscall restart tracing * 0481251b7c selftests/harness: Actually report SKIP for signal tests * 060ca3f789 tmpfs: verify {g,u}id mount options correctly * d412e9b34b fs: Fix error checking for d_hash_and_lookup() * a4229f93bc eventfd: prevent underflow for eventfd semaphores * cedb871933 reiserfs: Check the return value from __getblk() * c1a4117f15 Revert "net: macsec: preserve ingress frame ordering" * 40671f90d5 udf: Handle error when adding extent to a file * 099bf90d7f udf: Check consistency of Space Bitmap Descriptor * 7039aa1be9 of: kexec: Mark ima_{free,stable}_kexec_buffer() as __init * 759d51eda2 net: Avoid address overwrite in kernel_connect * 7c4cce5700 arm64: lib: Import latest version of Arm Optimized Routines' strncmp * 104df1c695 crypto: rsa-pkcs1pad - Use helper to set reqsize * 273f461531 platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications * 9ef5c25bcf tracing: Introduce pipe_cpumask to avoid race on trace_pipes * 8c1b60dad0 ALSA: seq: oss: Fix racy open/close of MIDI devices * fa05aea281 scsi: lpfc: Fix incorrect big endian type assignment in bsg loopback path * f0bf8a0711 scsi: storvsc: Always set no_report_opcodes * e9e62419e7 sctp: handle invalid error codes without calling BUG() * 3714bb4a1d bnx2x: fix page fault following EEH recovery * 53b8cc2f96 netlabel: fix shift wrapping bug in netlbl_catmap_setlong() * 867cdd7f95 drm/amdgpu: Match against exact bootloader status * 0863204deb net: hns3: restore user pause configure when disable autoneg * ac93def0db scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock * bef6c89a92 scsi: lpfc: Remove reftag check in DIF paths * b439e33a8c idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM * 156b803194 wifi: brcmfmac: Fix field-spanning write in brcmf_scan_params_v2_to_v1() * 87ea5e8940 net: usb: qmi_wwan: add Quectel EM05GV2 * e1313fa9d2 vmbus_testing: fix wrong python syntax for integer value comparison * 5faad57ba6 clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM * e13f0dd5fb kprobes: Prohibit probing on CFI preamble symbol * ee49b97cb5 security: keys: perform capable check only on privileged operations * f44f50305d ata: pata_arasan_cf: Use dev_err_probe() instead dev_err() in data_xfer() * a85c523aec ovl: Always reevaluate the file signature for IMA * 3faa126258 drm/amd/display: Exit idle optimizations before attempt to access PHY * c152ca4f21 platform/x86: huawei-wmi: Silence ambient light sensor * a9988b9c7a platform/x86/intel/hid: Add HP Dragonfly G2 to VGBS DMI quirks * 7f3901b04c platform/x86: intel: hid: Always call BTNL ACPI method * 23151421ed ASoC: atmel: Fix the 8K sample parameter in I2SC master * c934d2a697 ASoC: rt711-sdca: fix for JD event handling in ClockStop Mode0 * 20587011d2 ASoC: rt711: fix for JD event handling in ClockStop Mode0 * b41f798964 ASoc: codecs: ES8316: Fix DMIC config * cc2b0a2055 ASoC: rt5682-sdw: fix for JD event handling in ClockStop Mode0 * 5b64fc2471 fs/nls: make load_nls() take a const parameter * f85908f6bf s390/dasd: fix hanging device after request requeue * a4845e6948 s390/dasd: use correct number of retries for ERP requests * e062aa1acf m68k: Fix invalid .section syntax * bbfa7d712b vxlan: generalize vxlan_parse_gpe_hdr and remove unused args * b10215ffdb ethernet: atheros: fix return value check in atl1c_tso_csum() * 6bb94f46d3 ASoC: da7219: Check for failure reading AAD IRQ events * 279a6dad0c ASoC: da7219: Flush pending AAD IRQ when suspending * d424c636b7 ksmbd: no response from compound read * 82373d1b76 ksmbd: fix out of bounds in smb3_decrypt_req() * 20d449a087 9p: virtio: make sure 'offs' is initialized in zc_request * c4269c7258 media: pci: cx23885: fix error handling for cx23885 ATSC boards * 17d75773b6 media: pulse8-cec: handle possible ping error * f281a37393 phy: qcom-snps-femto-v2: use qcom_snps_hsphy_suspend/resume error code * dfff9c91cb ARM: dts: imx: Set default tuning step for imx7d usdhc * 4e364cab13 ARM: dts: imx: Adjust dma-apbh node name * 99319298fd ARM: dts: imx7s: Drop dma-apb interrupt-names * 1dc2c12854 ARM: dts: imx: update sdma node name format Change-Id: I91b781c9fec447d5ef02e49d8186afe20b5a5ecc Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-11-30 10:16:57 +00:00
Rick Yiu	73c2c0d53d	ANDROID: Update the ABI symbol list ... Adding the following symbols: - __traceiter_android_rvh_set_user_nice_locked - __tracepoint_android_rvh_set_user_nice_locked Bug: 300872872 Change-Id: Ib3aa1294e601d672d986f58cb8b66343f69ef417 Signed-off-by: Rick Yiu <rickyiu@google.com>	2023-11-30 10:13:24 +00:00
Rick Yiu	87344b2ab7	ANDROID: sched: Add trace_android_rvh_set_user_nice_locked ... We will need vendor hook of set_user_nice with lock to avoid race condition. Bug: 300872872 Change-Id: I24fc1e13cc6578dcc418d956a5146ad29ff76a56 Signed-off-by: Rick Yiu <rickyiu@google.com>	2023-11-30 10:13:18 +00:00
Ruchira Revdekar	bd1e76c09b	ANDROID: GKI: update symbol list ... INFO: ABI DIFFERENCES HAVE BEEN DETECTED! INFO: 1 function symbol(s) added 'void __balance_callbacks(struct rq*)' Bug: 241223356 Change-Id: Icdb97781ec7af4f183249f0db62ed3bb758000f4 Signed-off-by: Ruchira Revdekar <quic_rrevdeka@quicinc.com>	2023-11-29 20:46:03 +00:00
Stephen Dickey	fdaddcab76	ANDROID: GKI: vendor code needs __balance_callbacks access ... Vendor module code needs to ensure that pushes to the balance callback queue are handled prior to releasing rq locks. Export __balance_callbacks to facilitate this. Bug: 241223356 Change-Id: I86a3f5cb6cc7b97d87bd2db3e11cb7a8d99d4aef Signed-off-by: Stephen Dickey <quic_dickey@quicinc.com> (cherry picked from commit a2f552f49c9084dcc48b2066888d06a324e34b98)	2023-11-29 20:46:03 +00:00
Vincent Donnefort	e2fbc5cc3a	ANDROID: KVM: arm64: pkvm_module_ops documentation ... This structure is at the heart of the module support for pKVM. Add a description to help anyone trying to create a module. Bug: 312200309 Change-Id: Ie1d9043a6a94d15dd8ef25c6f0f8d442da26bc1f Signed-off-by: Vincent Donnefort <vdonnefort@google.com> (cherry picked from commit af85ead8ce)	2023-11-29 18:02:56 +00:00
Jimmy Hu	bf291bdd70	UPSTREAM: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() ... It is possible that typec_register_partner() returns ERR_PTR on failure. When port->partner is an error, a NULL pointer dereference may occur as shown below. [91222.095236][ T319] typec port0: failed to register partner (-17) ... [91225.061491][ T319] Unable to handle kernel NULL pointer dereference at virtual address 000000000000039f [91225.274642][ T319] pc : tcpm_pd_data_request+0x310/0x13fc [91225.274646][ T319] lr : tcpm_pd_data_request+0x298/0x13fc [91225.308067][ T319] Call trace: [91225.308070][ T319] tcpm_pd_data_request+0x310/0x13fc [91225.308073][ T319] tcpm_pd_rx_handler+0x100/0x9e8 [91225.355900][ T319] kthread_worker_fn+0x178/0x58c [91225.355902][ T319] kthread+0x150/0x200 [91225.355905][ T319] ret_from_fork+0x10/0x30 Add a check for port->partner to avoid dereferencing a NULL pointer. Fixes: 5e1d4c49fb ("usb: typec: tcpm: Determine common SVDM Version") Cc: stable@vger.kernel.org Signed-off-by: Jimmy Hu <hhhuuu@google.com> Link: https://lore.kernel.org/r/20231020012132.100960-1-hhhuuu@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Bug: 280207787 (cherry picked from commit 4987daf86c152ff882d51572d154ad12e4ff3a4b) Change-Id: I609640ff70258b8fd0e7f9eaad9eb60db35ccfad Signed-off-by: Kyle Tso <kyletso@google.com>	2023-11-29 14:56:21 +08:00
Alan Stern	52ecdc264d	UPSTREAM: USB: core: Fix race by not overwriting udev->descriptor in hub_port_init() ... commit ff33299ec8 upstream. Syzbot reported an out-of-bounds read in sysfs.c:read_descriptors(): BUG: KASAN: slab-out-of-bounds in read_descriptors+0x263/0x280 drivers/usb/core/sysfs.c:883 Read of size 8 at addr ffff88801e78b8c8 by task udevd/5011 CPU: 0 PID: 5011 Comm: udevd Not tainted 6.4.0-rc6-syzkaller-00195-g40f71e7cd3c6 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd9/0x150 lib/dump_stack.c:106 print_address_description.constprop.0+0x2c/0x3c0 mm/kasan/report.c:351 print_report mm/kasan/report.c:462 [inline] kasan_report+0x11c/0x130 mm/kasan/report.c:572 read_descriptors+0x263/0x280 drivers/usb/core/sysfs.c:883 ... Allocated by task 758: ... __do_kmalloc_node mm/slab_common.c:966 [inline] __kmalloc+0x5e/0x190 mm/slab_common.c:979 kmalloc include/linux/slab.h:563 [inline] kzalloc include/linux/slab.h:680 [inline] usb_get_configuration+0x1f7/0x5170 drivers/usb/core/config.c:887 usb_enumerate_device drivers/usb/core/hub.c:2407 [inline] usb_new_device+0x12b0/0x19d0 drivers/usb/core/hub.c:2545 As analyzed by Khazhy Kumykov, the cause of this bug is a race between read_descriptors() and hub_port_init(): The first routine uses a field in udev->descriptor, not expecting it to change, while the second overwrites it. Prior to commit 45bf39f8df ("USB: core: Don't hold device lock while reading the "descriptors" sysfs file") this race couldn't occur, because the routines were mutually exclusive thanks to the device locking. Removing that locking from read_descriptors() exposed it to the race. The best way to fix the bug is to keep hub_port_init() from changing udev->descriptor once udev has been initialized and registered. Drivers expect the descriptors stored in the kernel to be immutable; we should not undermine this expectation. In fact, this change should have been made long ago. So now hub_port_init() will take an additional argument, specifying a buffer in which to store the device descriptor it reads. (If udev has not yet been initialized, the buffer pointer will be NULL and then hub_port_init() will store the device descriptor in udev as before.) This eliminates the data race responsible for the out-of-bounds read. The changes to hub_port_init() appear more extensive than they really are, because of indentation changes resulting from an attempt to avoid writing to other parts of the usb_device structure after it has been initialized. Similar changes should be made to the code that reads the BOS descriptor, but that can be handled in a separate patch later on. This patch is sufficient to fix the bug found by syzbot. Bug: 290990909 Reported-and-tested-by: syzbot+18996170f8096c6174d0@syzkaller.appspotmail.com Closes: https://lore.kernel.org/linux-usb/000000000000c0ffe505fe86c9ca@google.com/#r Signed-off-by: Alan Stern <stern@rowland.harvard.edu> Cc: Khazhy Kumykov <khazhy@google.com> Fixes: 45bf39f8df ("USB: core: Don't hold device lock while reading the "descriptors" sysfs file") Cc: stable@vger.kernel.org Link: https://lore.kernel.org/r/b958b47a-9a46-4c22-a9f9-e42e42c31251@rowland.harvard.edu Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 7fe9d87996) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: Ia5e4a65cd5d895bf0d85a5aa5efa1c4d1368d069	2023-11-28 18:27:32 +00:00
Alan Stern	a7f103722b	UPSTREAM: USB: core: Change usb_get_device_descriptor() API ... commit de28e469da upstream. The usb_get_device_descriptor() routine reads the device descriptor from the udev device and stores it directly in udev->descriptor. This interface is error prone, because the USB subsystem expects in-memory copies of a device's descriptors to be immutable once the device has been initialized. The interface is changed so that the device descriptor is left in a kmalloc-ed buffer, not copied into the usb_device structure. A pointer to the buffer is returned to the caller, who is then responsible for kfree-ing it. The corresponding changes needed in the various callers are fairly small. Bug: 290990909 Signed-off-by: Alan Stern <stern@rowland.harvard.edu> Link: https://lore.kernel.org/r/d0111bb6-56c1-4f90-adf2-6cfe152f6561@rowland.harvard.edu Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit eda9a29665) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I7c4be5b5dd06f7d5ba8aacad33ecf78f4a3b49e6	2023-11-28 18:27:28 +00:00
Alan Stern	28e703ec05	UPSTREAM: USB: core: Unite old scheme and new scheme descriptor reads ... commit 85d07c5562 upstream. In preparation for reworking the usb_get_device_descriptor() routine, it is desirable to unite the two different code paths responsible for initially determining endpoint 0's maximum packet size in a newly discovered USB device. Making this determination presents a chicken-and-egg sort of problem, in that the only way to learn the maxpacket value is to get it from the device descriptor retrieved from the device, but communicating with the device to retrieve a descriptor requires us to know beforehand the ep0 maxpacket size. In practice this problem is solved in two different ways, referred to in hub.c as the "old scheme" and the "new scheme". The old scheme (which is the approach recommended by the USB-2 spec) involves asking the device to send just the first eight bytes of its device descriptor. Such a transfer uses packets containing no more than eight bytes each, and every USB device must have an ep0 maxpacket size >= 8, so this should succeed. Since the bMaxPacketSize0 field of the device descriptor lies within the first eight bytes, this is all we need. The new scheme is an imitation of the technique used in an early Windows USB implementation, giving it the happy advantage of working with a wide variety of devices (some of them at the time would not work with the old scheme, although that's probably less true now). It involves making an initial guess of the ep0 maxpacket size, asking the device to send up to 64 bytes worth of its device descriptor (which is only 18 bytes long), and then resetting the device to clear any error condition that might have resulted from the guess being wrong. The initial guess is determined by the connection speed; it should be correct in all cases other than full speed, for which the allowed values are 8, 16, 32, and 64 (in this case the initial guess is 64). The reason for this patch is that the old- and new-scheme parts of hub_port_init() use different code paths, one involving usb_get_device_descriptor() and one not, for their initial reads of the device descriptor. Since these reads have essentially the same purpose and are made under essentially the same circumstances, this is illogical. It makes more sense to have both of them use a common subroutine. This subroutine does basically what the new scheme's code did, because that approach is more general than the one used by the old scheme. It only needs to know how many bytes to transfer and whether or not it is being called for the first iteration of a retry loop (in case of certain time-out errors). There are two main differences from the former code: We initialize the bDescriptorType field of the transfer buffer to 0 before performing the transfer, to avoid possibly accessing an uninitialized value afterward. We read the device descriptor into a temporary buffer rather than storing it directly into udev->descriptor, which the old scheme implementation used to do. Since the whole point of this first read of the device descriptor is to determine the bMaxPacketSize0 value, that is what the new routine returns (or an error code). The value is stored in a local variable rather than in udev->descriptor. As a side effect, this necessitates moving a section of code that checks the bcdUSB field for SuperSpeed devices until after the full device descriptor has been retrieved. Bug: 290990909 Signed-off-by: Alan Stern <stern@rowland.harvard.edu> Cc: Oliver Neukum <oneukum@suse.com> Link: https://lore.kernel.org/r/495cb5d4-f956-4f4a-a875-1e67e9489510@rowland.harvard.edu Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 56c49a3328) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I2ffdb9ee11219fca6aeb2cda7867ea53fd6ca61c	2023-11-28 18:27:26 +00:00
erinwang	e5f9357102	ANDROID: GKI: Update symbol list for lenovo ... 2 function symbol(s) added 'unsigned int regulator_get_linear_step(struct regulator*)' 'int smp_call_function_any(const struct cpumask*, smp_call_func_t, void*, int)' Bug: 313550784 Change-Id: I733654a7d0ca8daba31ef7eedb874d0c8da1cd29 Signed-off-by: erinwang <erinwang2@lenovo.com>	2023-11-28 12:11:51 +00:00
Jayant Chowdhary	dcf95aa0af	FROMGIT: usb:gadget:uvc Do not use worker thread to pump isoc usb requests ... When we use an async work queue to perform the function of pumping usb requests to the usb controller, it is possible that amongst other factors, thread scheduling affects at what cadence we're able to pump requests. This could mean isoc usb requests miss their uframes - resulting in video stream flickers on the host device. To avoid this, we make the async_wq thread only produce isoc usb_requests with uvc buffers encoded into them. The process of queueing to the endpoint is done by the uvc_video_complete() handler. In case no usb_requests are ready with encoded information, we just queue a zero length request to the endpoint from the complete handler. For bulk endpoints the async_wq thread still queues usb requests to the endpoint. Signed-off-by: Michael Grzeschik <m.grzeschik@pengutronix.de> Signed-off-by: Jayant Chowdhary <jchowdhary@google.com> Suggested-by: Avichal Rakesh <arakesh@google.com> Suggested-by: Alan Stern <stern@rowland.harvard.edu> Link: https://lore.kernel.org/r/20231120062026.3759463-1-jchowdhary@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Bug: 301915972 (cherry picked from commit 6acba0345b68772830582ca1ca369a2f45631275 https://kernel.googlesource.com/pub/scm/linux/kernel/git/gregkh/usb usb-next) Change-Id: I5597cc29e9caec69e4f3575938d7d640857aaa28 Signed-off-by: Avichal Rakesh <arakesh@google.com>	2023-11-27 11:51:11 -08:00
Avichal Rakesh	8078e50f5e	FROMGIT: usb: gadget: uvc: Fix use-after-free for inflight usb_requests ... Currently, the uvc gadget driver allocates all uvc_requests as one array and deallocates them all when the video stream stops. This includes de-allocating all the usb_requests associated with those uvc_requests. This can lead to use-after-free issues if any of those de-allocated usb_requests were still owned by the usb controller. This is patch 2 of 2 in fixing the use-after-free issue. It adds a new flag to uvc_video to track when frames and requests should be flowing. When disabling the video stream, the flag is tripped and, instead of de-allocating all uvc_requests and usb_requests, the gadget driver only de-allocates those usb_requests that are currently owned by it (as present in req_free). Other usb_requests are left untouched until their completion handler is called which takes care of freeing the usb_request and its corresponding uvc_request. Now that uvc_video does not depends on uvc->state, this patch removes unnecessary upates to uvc->state that were made to accommodate uvc_video logic. This should ensure that uvc gadget driver never accidentally de-allocates a usb_request that it doesn't own. Link: https://lore.kernel.org/7cd81649-2795-45b6-8c10-b7df1055020d@google.com Reviewed-by: Daniel Scally <dan.scally@ideasonboard.com> Reviewed-by: Michael Grzeschik <m.grzeschik@pengutronix.de> Suggested-by: Michael Grzeschik <m.grzeschik@pengutronix.de> Tested-by: Michael Grzeschik <m.grzeschik@pengutronix.de> Signed-off-by: Avichal Rakesh <arakesh@google.com> Link: https://lore.kernel.org/r/20231109004104.3467968-4-arakesh@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Bug: 296925310 (cherry picked from commit da324ffce34c521b239f319d4051260444a3eb4a https://kernel.googlesource.com/pub/scm/linux/kernel/git/gregkh/usb usb-next) Change-Id: Ib0378394dc20e894507f60c70f71c579d046cd7a Signed-off-by: Avichal Rakesh <arakesh@google.com>	2023-11-27 11:51:08 -08:00
Avichal Rakesh	0041748215	FROMGIT: usb: gadget: uvc: move video disable logic to its own function ... This patch refactors the video disable logic in uvcg_video_enable into its own separate function 'uvcg_video_disable'. This function is now used anywhere uvcg_video_enable(video, 0) was used. Reviewed-by: Daniel Scally <dan.scally@ideasonboard.com> Suggested-by: Michael Grzeschik <m.grzeschik@pengutronix.de> Signed-off-by: Avichal Rakesh <arakesh@google.com> Link: https://lore.kernel.org/r/20231109004104.3467968-3-arakesh@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Bug: 296925310 (cherry picked from commit 2079b60bda3257146a4e8ed7525513865f7e6b3e https://kernel.googlesource.com/pub/scm/linux/kernel/git/gregkh/usb usb-next) Change-Id: Ie8934e6fe1577373b01e3c66626e4239cf9f8c83 Signed-off-by: Avichal Rakesh <arakesh@google.com>	2023-11-27 11:51:04 -08:00
Avichal Rakesh	563283055b	FROMGIT: usb: gadget: uvc: Allocate uvc_requests one at a time ... Currently, the uvc gadget driver allocates all uvc_requests as one array and deallocates them all when the video stream stops. This includes de-allocating all the usb_requests associated with those uvc_requests. This can lead to use-after-free issues if any of those de-allocated usb_requests were still owned by the usb controller. This patch is 1 of 2 patches addressing the use-after-free issue. Instead of bulk allocating all uvc_requests as an array, this patch allocates uvc_requests one at a time, which should allows for similar granularity when deallocating the uvc_requests. This patch has no functional changes other than allocating each uvc_request separately, and similarly freeing each of them separately. Link: https://lore.kernel.org/7cd81649-2795-45b6-8c10-b7df1055020d@google.com Reviewed-by: Daniel Scally <dan.scally@ideasonboard.com> Reviewed-by: Michael Grzeschik <m.grzeschik@pengutronix.de> Suggested-by: Michael Grzeschik <m.grzeschik@pengutronix.de> Tested-by: Michael Grzeschik <m.grzeschik@pengutronix.de> Signed-off-by: Avichal Rakesh <arakesh@google.com> Link: https://lore.kernel.org/r/20231109004104.3467968-2-arakesh@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Bug: 296925310 (cherry picked from commit aeb686a98a9e9743c4c0338957e59643a2708146 https://kernel.googlesource.com/pub/scm/linux/kernel/git/gregkh/usb usb-next) Change-Id: I33400ac6b28e72c6c10805e167e8bab7e2520a28 Signed-off-by: Avichal Rakesh <arakesh@google.com>	2023-11-27 11:50:58 -08:00
Avichal Rakesh	848fa308a9	FROMGIT: usb: gadget: uvc: prevent use of disabled endpoint ... Currently the set_alt callback immediately disables the endpoint and queues the v4l2 streamoff event. However, as the streamoff event is processed asynchronously, it is possible that the video_pump thread attempts to queue requests to an already disabled endpoint. This change moves disabling usb endpoint to the end of streamoff event callback. As the endpoint's state can no longer be used, video_pump is now guarded by uvc->state as well. To be consistent with the actual streaming state, uvc->state is now toggled between CONNECTED and STREAMING from the v4l2 event callback only. Link: https://lore.kernel.org/20230615171558.GK741@pendragon.ideasonboard.com/ Link: https://lore.kernel.org/20230531085544.253363-1-dan.scally@ideasonboard.com/ Reviewed-by: Daniel Scally <dan.scally@ideasonboard.com> Reviewed-by: Michael Grzeschik <m.grzeschik@pengutronix.de> Tested-by: Michael Grzeschik <m.grzeschik@pengutronix.de> Signed-off-by: Avichal Rakesh <arakesh@google.com> Link: https://lore.kernel.org/r/20231109004104.3467968-1-arakesh@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Bug: 296925310 (cherry picked from commit 991544dc579b636e69defa3eec486fd6f6191e59 https://kernel.googlesource.com/pub/scm/linux/kernel/git/gregkh/usb usb-next) Change-Id: Ic5631a526e72cbcf299dcb8167bb3d34468d37e9 Signed-off-by: Avichal Rakesh <arakesh@google.com>	2023-11-27 11:50:53 -08:00
Sai Harshini Nimmala	24e0a18cb4	ANDROID: abi_gki_aarch64_qcom: Update symbol list ... Leaf changes summary: 1 artifact changed Changed leaf types summary: 0 leaf type changed Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 0 Added function Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 1 Added variable 1 Added variable: [A] 'tracepoint __tracepoint_android_rvh_update_thermal_stats' 1 function symbol(s) added 'int __traceiter_android_rvh_update_thermal_stats(void*, int)' Bug: 203763121 Signed-off-by: Sai Harshini Nimmala <quic_snimmala@quicinc.com> Change-Id: Ibbdd26ae66d1db01f4b76479c41a36eb590a7133 (cherry picked from commit 0e29f56ef055bb8ccba3a5d259002ec36c76da38)	2023-11-27 19:01:03 +00:00
Shaleen Agrawal	8ab43e8a3e	ANDROID: arch_topology: Add android_rvh_update_thermal_stats ... Add trace hook so modules can track thermal changes to process vendor value adds. Bug: 203763121 Change-Id: I5c54b313d3c92c0514f18b07797dd20c9c6f5161 Signed-off-by: Shaleen Agrawal <shalagra@codeaurora.org>	2023-11-27 19:01:03 +00:00
liujing40	6ac8b4fbb4	ANDROID: fuse-bpf: Add NULL pointer check in fuse_release_in ... If open request sent to classic fuse, backing_file is null. In fuse_release_initialize, fput will trigger a crash. Bug: 297831741 Signed-off-by: liujing40 <liujing40@xiaomi.corp-partner.google.com> (cherry picked from https://android-review.googlesource.com/q/commit:4d2ff573981f06ba09e1ddda8726bb73ff6a2c3f) Merged-In: I2d54d99d62b54c39a6dc9064f8f62488433aff6f Change-Id: I2d54d99d62b54c39a6dc9064f8f62488433aff6f	2023-11-27 18:54:21 +00:00
vincent wang	4030b1eeed	ANDROID: GKI: update symbol list for lenovo ... Update vendor hook symbols for lenovo Bug: 312392542 Change-Id: I1e596bee5a7c776ab4c2af12fd473bf0e6fb2db8 Signed-off-by: vincent wang <vincentwang3@lenovo.com>	2023-11-27 18:37:02 +00:00
vincent wang	71647086d7	ANDROID: GKI: add a vendor hook in cpufreq_online ... In this vendor hook, we can register the energy model before sending the notification to avoid pd_init failure for some clusters. more detail info about pd_init failure, pls refer to the link: https://lore.kernel.org/lkml/20230118044733.29391-1-bhuwz@163.com/T/ But the change patch cannot be submitted upstream due to differences in the cpufreq code, the failure only appears on the aosp kernel. Bug: 312392542 Change-Id: Ied4c72d73083d794ad6d8af1eb305be4fb382de3 Signed-off-by: vincent wang <vincentwang3@lenovo.com>	2023-11-27 18:37:02 +00:00
Biswarup Pal	2cecfa7378	FROMGIT: Input: uinput - allow injecting event times ... Currently, uinput doesn't use the input_set_timestamp API, so any event injected using uinput is not accurately timestamped in terms of measuring when the actual event happened. Hence, call the input_set_timestamp API from uinput in order to provide a more accurate sense of time for the event. Propagate only the timestamps which are a) positive, b) within a pre-defined offset (10 secs) from the current time, and c) not in the future. Bug: 271946580 Bug: 277040837 Change-Id: I928be61d0114b78e2098995ee49eeb0376bef2a3 (cherry picked from commit 3a2df60200 https://git.kernel.org/pub/scm/linux/kernel/git/dtor/input.git master) Signed-off-by: Biswarup Pal <biswarupp@google.com> Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net> Reviewed-by: Siarhei Vishniakou <svv@google.com> Link: https://lore.kernel.org/r/20230427000152.1407471-1-biswarupp@google.com Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com> (cherry picked from commit ee1f5fc55cc7bf1bca78edbb8a1f9d989d4ea03e)	2023-11-24 11:39:37 +00:00
Chungkai Mei	e9a7a2060a	ANDROID: Update the ABI symbol list ... Adding the following symbols: - __traceiter_android_rvh_update_load_sum - __tracepoint_android_rvh_update_load_sum Bug: 181105055 Change-Id: Ie70d640f252f40af86aff48bcf2d5cfd80485393 Signed-off-by: Chungkai Mei <chungkai@google.com>	2023-11-23 06:34:17 +00:00
Chungkai Mei	984523c368	ANDROID: sched: Add vendor hook for update_load_sum ... vendor may have the need to modify update_load_sum function Bug: 181105055 Change-Id: I35964977a4b8917c62773d48a37340f880774e38 Signed-off-by: Chungkai Mei <chungkai@google.com>	2023-11-23 06:34:17 +00:00
yenchia.chen	f88c9605bd	ANDROID: GKI: update mtktv symbol ... 3 function symbol(s) added 'struct phy* devm_phy_optional_get(struct device*, const char*)' 'int pci_generic_config_read32(struct pci_bus*, unsigned int, int, int, u32*)' 'int pci_generic_config_write32(struct pci_bus*, unsigned int, int, int, u32)' Bug: 312087040 Change-Id: I36cacba1ca1a63719610559c2c913f7b5d97c17f Signed-off-by: yenchia.chen <yenchia.chen@mediatek.com>	2023-11-21 13:44:16 +00:00
Dongyun Liu	b6fd46aaf1	ANDROID: GKI: Add symbol list for Transsion ... Add symbol list for Transsion 4 variable symbol(s) added 'unsigned long avenrun[3]' 'DEFINE_PER_CPU(struct kernel_stat, kstat)' 'DEFINE_PER_CPU(struct kernel_cpustat, kernel_cpustat)' 'DEFINE_PER_CPU(struct vm_event_state, vm_event_states)' Bug: 310505482 Change-Id: I96affa0a092e35f9193af08dfd462323874cf6de Signed-off-by: Dongyun Liu <dongyun.liu@transsion.com>	2023-11-20 16:46:13 +00:00
Vincent Donnefort	17d202d85b	ANDROID: KVM: arm64: mount procfs for pKVM module loading ... modprobe needs /proc/cmdline to pass module arguments to the module loader. Sadly, so early in the boot, nothing mounts that FS. Bug: 301483379 Change-Id: Iaab3000e3b7f908fc81f7f36adf2f73c7d3129a4 Signed-off-by: Vincent Donnefort <vdonnefort@google.com>	2023-11-20 08:41:19 +00:00
qinglin.li	be8f9c8bf9	ANDROID: GKI: Update symbol list for Amlogic ... Update amlogic abi symbol list Bug: 311606631 Change-Id: Ie7e9fd1e07b43690ebef04d49818fa0700522d36 Signed-off-by: Qinglin Li <qinglin.li@amlogic.com>	2023-11-17 18:02:25 +00:00
yixuanjiang	76fcf197f2	UPSTREAM: ASoC: soc-compress: Fix deadlock in soc_compr_open_fe ... [ Upstream commit 2222214749 ] Modify the error handling flow by release lock. The require mutex will keep holding if open fail. Fixes: aa9ff6a495 ("ASoC: soc-compress: Reposition and add pcm_mutex") Signed-off-by: yixuanjiang <yixuanjiang@google.com> Link: https://lore.kernel.org/r/20230619033127.2522477-1-yixuanjiang@google.com Signed-off-by: Mark Brown <broonie@kernel.org> Bug: 303236405 Change-Id: Ib7350b211390b7c2730fc99d6e87d41fe9d3a87f Signed-off-by: Yixuan Jiang <yixuanjiang@google.com>	2023-11-17 16:20:39 +00:00
Kuninori Morimoto	7f194d670f	BACKPORT: ASoC: add snd_soc_card_mutex_lock/unlock() ... ASoC need to use card->mutex with _INIT or _RUNTIME, but there is no helper function for it. This patch adds its helper function and use it. Because people might misunderstand that _init() is mutex initialization, this patch renames _INIT to _ROOT and adds new snd_soc_card_mutex_lock_root() for it. Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@renesas.com> Link: https://lore.kernel.org/r/87a5zlx3tw.wl-kuninori.morimoto.gx@renesas.com Signed-off-by: Mark Brown <broonie@kernel.org> Bug: 303236405 (cherry picked from commit 0f3b818486) [ Yixuan Jiang: Fix minor conflict ] Change-Id: Ie8cd7aeeea759576423760d25b5fb5b2c9ae0d12 Signed-off-by: Yixuan Jiang <yixuanjiang@google.com>	2023-11-17 16:20:39 +00:00
Kuninori Morimoto	8cdc41d9b8	BACKPORT: ASoC: expand snd_soc_dpcm_mutex_lock/unlock() ... soc-pcm.c has snd_soc_dpcm_mutex_lock/unlock(), but other files can't use it because it is static function. It requests snd_soc_pcm_runtime as parameter (A), but sometimes we want to use it by snd_soc_card (B). (A) static inline void snd_soc_dpcm_mutex_lock(struct snd_soc_pcm_runtime *rtd) { mutex_lock_nested(&rtd->card->pcm_mutex, rtd->card->pcm_subclass); } ^^^^^^^^^ (B) mutex_lock_nested(&card->pcm_mutex, card->pcm_subclass); ^^^^ We want to use it with both "rtd" and "card" for dapm lock/unlock. To enable it, this patch uses _Generic macro. This patch makes snd_soc_dpcm_mutex_{un}lock() global function, and use it on each files. Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@renesas.com> Link: https://lore.kernel.org/r/87bkk1x3ud.wl-kuninori.morimoto.gx@renesas.com Signed-off-by: Mark Brown <broonie@kernel.org> Bug: 303236405 (cherry picked from commit 38e42f6d6c) [ Yixuan Jiang: Fix minor conflict ] Change-Id: I6cd7fc467b9ec23d6b051d3d531695568996f7a5 Signed-off-by: Yixuan Jiang <yixuanjiang@google.com>	2023-11-17 16:20:39 +00:00
Kuninori Morimoto	2721efad0a	BACKPORT: ASoC: expand snd_soc_dapm_mutex_lock/unlock() ... soc.h has snd_soc_dapm_mutex_lock/unlock() definition and many drivers are using it, but soc-dapm.c is not. 1st reason is snd_soc_dapm_mutex_lock/unlock() requests snd_soc_dapm_context pointer as parameter (A), but sometimes soc-dapm.c needs to use snd_soc_card (B). (A) static inline void snd_soc_dapm_mutex_lock(struct snd_soc_dapm_context *dapm) { mutex_lock_nested(&dapm->card->dapm_mutex, SND_SOC_DAPM_CLASS_RUNTIME); } ^^^^^^^^^^ (B) mutex_lock_nested(&card->dapm_mutex, SND_SOC_DAPM_CLASS_RUNTIME); ^^^^ 2nd reason is it want to use SND_SOC_DAPM_CLASS_INIT for mutex_lock_nested(), but helper is using _RUNTIME (A). The conclusion is we want to use "dapm vs card" and "_RUNTIME vs _INIT" for dapm lock/unlock. To enable this selfish request, this patch uses _Generic macro. We can use snd_soc_dapm_mutex_lock/unlock() for both dapm and card case. snd_soc_dapm_mutex_lock(dapm); snd_soc_dapm_mutex_unlock(dapm); snd_soc_dapm_mutex_lock(card); snd_soc_dapm_mutex_unlock(card); Current soc-dapm.c is using both mutex_lock() and mutex_lock_nested(). This patch handles mutex_lock() as mutex_lock_nested(..., 0), in other words, handles below as same. mutex_lock(&card->dapm_mutex); mutex_lock_nested(&card->dapm_mutex, SND_SOC_DAPM_CLASS_INIT); Because people might misunderstand that _init() is mutex initialization, this patch renames _INIT to _ROOT and adds new snd_soc_dapm_mutex_lock_root() for it. This patch also moves snd_soc_dapm_subclass definition from soc-dapm.h to soc.h to keep related code together. Because very complex soc.h vs soc-dapm.h relationship, it is difficult/impossible to define these helper into soc-dapm.h. Change-Id: I064718bbad9d053a0c84549be0a5e942f29a5dee Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@renesas.com> Link: https://lore.kernel.org/r/87cz4hx3v0.wl-kuninori.morimoto.gx@renesas.com Signed-off-by: Mark Brown <broonie@kernel.org> Bug: 303236405 (cherry picked from commit 4a778bdc7a) [ Yixuan Jiang: Fix minor conflict ] Change-Id: I0fdbc15471f438cd6d8b6c63b106de7186b07ea2 Signed-off-by: Yixuan Jiang <yixuanjiang@google.com>	2023-11-17 16:20:39 +00:00
Keir Fraser	b7bcf839e1	ANDROID: KVM: arm64: Fix error path in pkvm_mem_abort() ... On one error path, pin_user_pages has succeeded and should be undone. Bug: 310131277 Change-Id: I92fe0c54bb5b8005f848491f5e9be1090b61fbd1 Signed-off-by: Keir Fraser <keirf@google.com>	2023-11-10 09:59:50 +00:00
qinglin.li	27aaaa9af5	ANDROID: GKI: Update symbol list for Amlogic ... 1 function symbol(s) added 'int __traceiter_android_vh_isolate_freepages(void*, struct compact_control*, struct page*, bool*)' 1 variable symbol(s) added 'struct tracepoint __tracepoint_android_vh_isolate_freepages' Bug: 309371168 Change-Id: Id49463977ff3cbd57b815f2443b60cc1aaac1352 Signed-off-by: Qinglin Li <qinglin.li@amlogic.com>	2023-11-08 19:27:57 +08:00
qinglin.li	0681d570ba	ANDROID: mm: add vendor hook in isolate_freepages() ... By this vh, so that we can skip if this page needs to be treated specially, like as cma. In the Android kernel, the use of cma is restricted, and filecache cannot use cma.But during the memory compaction process, filecache may be migrated to cma pool, so a judgment needs to be added here to restrict filecache from entering cma. Bug: 309371168 Change-Id: I3ec29bdf5f7b6ac4c7af0a317aa41ad77b71444d Signed-off-by: Qinglin Li <qinglin.li@amlogic.com>	2023-11-08 19:27:25 +08:00
qinglin.li	f206a8c31c	ANDROID: GKI: Update symbol list for Amlogic ... 2 function symbol(s) added 'void debugfs_lookup_and_remove(const char*, struct dentry*)' 'irqreturn_t usb_hcd_irq(int, void*)' Bug: 309359622 Change-Id: I0637daec55e054b4ef1a481b65a2691547376ea0 Signed-off-by: Qinglin Li <qinglin.li@amlogic.com>	2023-11-06 14:27:25 +08:00
tfshen	88b56693e9	ANDROID: GKI: Update symbol list for rtktv ... 1 function symbol(s) added 'int hid_open_report(hid_device*)' Bug: 285483154 Change-Id: I3e9b9e1a9c9d260930b17f479c2e9675e3cd4468 Signed-off-by: tfshen <tfshen@realtek.com>	2023-11-03 08:14:56 +00:00
Lyon Wang	dbeed23196	ANDROID: fs/passthrough: Fix compatibility with R/O file system ... Look at the passthrough file and check to see if its mount is read-only. Bug: 297482438 Signed-off-by: Lyon Wang <lyon.wang@mediatek.com> Change-Id: I0f483c6bcb1effe395eee07b6d721f343840d115	2023-11-01 22:07:44 +00:00
Chungkai Mei	bde02310d4	ANDROID: Update the ABI symbol list ... Adding the following symbols: - __traceiter_android_rvh_util_fits_cpu - __tracepoint_android_rvh_util_fits_cpu Bug: 261704404 Change-Id: I9e94aa6d5dbee3311b4f359d01d4b66b5d205fdd Signed-off-by: Chungkai Mei <chungkai@google.com>	2023-11-01 17:13:13 +00:00
Will Deacon	71320d0c1e	Revert "ANDROID: KVM: arm64: Don't allocate from handle_host_mem_abort" ... This reverts commit 951d15786a. Reason for revert: b/306244914 Change-Id: Icd3c3c8c7d330631c12a9133434abcb50fe9347d Signed-off-by: Will Deacon <willdeacon@google.com>	2023-11-01 11:11:49 +00:00
Kyle Zeng	7b356cb300	UPSTREAM: netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c ... commit 050d91c03b upstream. The missing IP_SET_HASH_WITH_NET0 macro in ip_set_hash_netportnet can lead to the use of wrong `CIDR_POS(c)` for calculating array offsets, which can lead to integer underflow. As a result, it leads to slab out-of-bound access. This patch adds back the IP_SET_HASH_WITH_NET0 macro to ip_set_hash_netportnet to address the issue. Bug: 302199939 Fixes: 886503f34d ("netfilter: ipset: actually allow allowable CIDR 0 in hash:net,port,net") Suggested-by: Jozsef Kadlecsik <kadlec@netfilter.org> Signed-off-by: Kyle Zeng <zengyhkyle@gmail.com> Acked-by: Jozsef Kadlecsik <kadlec@netfilter.org> Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit a9e6142e5f) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I11cc1650e7df9d54041164b6bdb01f3a0de46de4	2023-10-31 17:44:03 +00:00
Stefano Garzarella	7d75f8038b	UPSTREAM: vringh: don't use vringh_kiov_advance() in vringh_iov_xfer() ... commit 7aed44babc upstream. In the while loop of vringh_iov_xfer(), `partlen` could be 0 if one of the `iov` has 0 lenght. In this case, we should skip the iov and go to the next one. But calling vringh_kiov_advance() with 0 lenght does not cause the advancement, since it returns immediately if asked to advance by 0 bytes. Let's restore the code that was there before commit b8c06ad4d6 ("vringh: implement vringh_kiov_advance()"), avoiding using vringh_kiov_advance(). Bug: 302200656 Fixes: b8c06ad4d6 ("vringh: implement vringh_kiov_advance()") Cc: stable@vger.kernel.org Reported-by: Jason Wang <jasowang@redhat.com> Signed-off-by: Stefano Garzarella <sgarzare@redhat.com> Acked-by: Jason Wang <jasowang@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 3a72decd6b) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I5ed14650aca07e0f8d52023cf148bd63e87d04c9	2023-10-31 16:50:05 +00:00
Shuzhen Wang	484868e95c	BACKPORT: usb: gadget: uvc: Add missing initialization of ssp config descriptor ... In case the uvc gadget is super speed plus, the corresponding config descriptor wasn't initialized. As a result, the host will not recognize the devices when using super speed plus connection. This patch initializes them to super speed descriptors. Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com> Signed-off-by: Shuzhen Wang <shuzhenwang@google.com> Link: https://lore.kernel.org/r/20231027183440.1994315-1-shuzhenwang@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Bug: 301887900 Change-Id: I79c699bafaf959990da3a8101c8bfe0f8dabf72f (cherry picked from commit c70793fb7632a153862ee9060e6d48131469a29c https://kernel.googlesource.com/pub/scm/linux/kernel/git/gregkh/usb usb-next) [arakesh: Resolved minor merge conflicts in f_uvc.c] Signed-off-by: Avichal Rakesh <arakesh@google.com>	2023-10-30 16:14:15 -07:00
Linyu Yuan	ae71397d90	BACKPORT: usb: gadget: unconditionally allocate hs/ss descriptor in bind operation ... Take f_midi_bind() for example, when composite layer call it, it will allocate hs descriptor by calling gadget_is_dualspeed() API to check gadget max support speed capability, but most other gadget function didn't do like this. To follow other function drivers, it is safe to remove the check which mean support all possible link speed by default in function driver. Similar change apply to midi2 and uvc. Also in midi and midi2, as there is no descriptor difference between super speed and super speed plus, follow other gadget function drivers, do not allocate descriptor for super speed plus, composite layer will handle it properly. Signed-off-by: Linyu Yuan <quic_linyyuan@quicinc.com> Link: https://lore.kernel.org/r/20230803091053.9714-5-quic_linyyuan@quicinc.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Bug: 301887900 Change-Id: I8b287266b3973c66e559bd3eea9adbe95e051be7 (cherry picked from commit 46decc82ff https://kernel.googlesource.com/pub/scm/linux/kernel/git/gregkh/usb usb-next) [arakesh: f_midi2.c doesn't exist, so dropped those changes] Signed-off-by: Avichal Rakesh <arakesh@google.com>	2023-10-30 16:14:04 -07:00
Linyu Yuan	f5beeb23ed	UPSTREAM: usb: gadget: f_uvc: change endpoint allocation in uvc_function_bind() ... when call uvc_function_bind(), gadget still have no connection speed, just follow other gadget function, use fs endpoint descriptor to allocate a video endpoint, remove gadget_is_{super|dual}speed() API call. Signed-off-by: Linyu Yuan <quic_linyyuan@quicinc.com> Link: https://lore.kernel.org/r/20230803091053.9714-4-quic_linyyuan@quicinc.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Bug: 301887900 Change-Id: I076e51716e4bab7a70a43ad3e080b4c4e110c9db (cherry picked from commit 3c5b006f3e https://kernel.googlesource.com/pub/scm/linux/kernel/git/gregkh/usb usb-next) Signed-off-by: Avichal Rakesh <arakesh@google.com>	2023-10-30 16:13:49 -07:00