3212 Commits

Author	SHA1	Message	Date
Greg Kroah-Hartman	c51de219f5	Merge tag 'android14-5.15.131_r00' into android-14-5.15 ... This catches the android14-5.15 branch up with the 5.15.131 LTS upstream release. It contains the following commits: * b92c49c7b8 Merge 5.15.131 into android14-5.15-lts |\ | * aff03380bd Linux 5.15.131 | * cd8ab566cf usb: typec: tcpci: clear the fault status bit | * 403b2e9409 usb: typec: tcpci: move tcpci.h to include/linux/usb/ | * f29483873e pinctrl: amd: Don't show `Invalid config param` errors | * b911bef132 nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse | * 1c6ddf739f nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers() | * f6e61aef5c tcpm: Avoid soft reset when partner does not support get_status | * da0e7d435e fsi: master-ast-cf: Add MODULE_FIRMWARE macro | * 72eca651d7 firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe | * 907216337b serial: sc16is7xx: fix bug when first setting GPIO direction | * 45d9611ebf serial: sc16is7xx: fix broken port 0 uart init | * f90e267dd2 serial: qcom-geni: fix opp vote on shutdown | * 46d13013b5 wifi: mt76: mt7921: do not support one stream on secondary antenna only | * a5c2a467e9 Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition | * f49294ad68 staging: rtl8712: fix race condition | * d17cec60e8 HID: wacom: remove the battery when the EKR is off | * 842c7da3ee usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 | * 276a906f81 usb: dwc3: meson-g12a: do post init to fix broken usb after resumption | * 60f938e84f ALSA: usb-audio: Fix init call orders for UAC1 | * e949dd2a9b USB: serial: option: add FOXCONN T99W368/T99W373 product | * c41411d8b3 USB: serial: option: add Quectel EM05G variant (0x030e) | * 09baa839d4 modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules | * 997a194914 rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff | * 3d0f640860 net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index | * da95090821 mmc: au1xmmc: force non-modular build and remove symbol_get usage | * e3e68100c0 ARM: pxa: remove use of symbol_get() | * bb5bf157b5 ksmbd: replace one-element array with flex-array member in struct smb2_ea_info | * 2e3f57f74c ksmbd: fix wrong DataOffset validation of create context | * b3ad7f39fd erofs: ensure that the post-EOF tails are all zeroed * | 5879d78a5a Merge 5.15.130 into android14-5.15-lts |\| | * 8f790700c9 Linux 5.15.130 | * 69347c3340 rcu-tasks: Add trc_inspect_reader() checks for exiting critical section | * 8046fb611f rcu-tasks: Wait for trc_read_check_handler() IPIs | * da22db901c rcu-tasks: Fix IPI failure handling in trc_wait_for_one_reader | * a0249d365a rcu: Prevent expedited GP from enabling tick on offline CPU | * 7aec063d60 ARM: module: Use module_init_layout_section() to spot init sections | * 4a8976052a arm64: module: Use module_init_layout_section() to spot init sections | * f8a74159d1 arm64: module-plts: inline linux/moduleloader.h | * 363bbb5008 module: Expose module_init_layout_section() | * 758e3d0cb7 ACPI: thermal: Drop nocrt parameter * | 7d5fd694ae ANDROID: GKI: Update the .stg defintion due to opaque type change. * | d3d222d2f0 Revert "drm/display/dp: Fix the DP DSC Receiver cap size" * | 7ae847d162 Merge 5.15.129 into android14-5.15-lts |\| | * 9e43368a33 Linux 5.15.129 | * d48016d748 mm,ima,kexec,of: use memblock_free_late from ima_free_kexec_buffer | * 1c41cd30d5 mm: memory-failure: fix unexpected return value in soft_offline_page() | * 0712721e4f mm: memory-failure: kill soft_offline_free_page() | * efd02b5cad dma-buf/sw_sync: Avoid recursive lock during fence signal | * 8dbf913520 pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} | * f1c0402b8e clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' | * 10bc3eddc6 scsi: core: raid_class: Remove raid_component_add() | * d3d57cdbfd scsi: snic: Fix double free in snic_tgt_create() | * ef56cc8889 can: raw: add missing refcount for memory leak fix | * 930f3f1649 drm/i915: Fix premature release of request's reusable memory | * 3cb86cc565 cgroup/cpuset: Free DL BW in case can_attach() fails | * ffff4fc4ba sched/deadline: Create DL BW alloc, free & check overflow interface | * 86aa907959 cgroup/cpuset: Iterate only if DEADLINE tasks are present | * 43d8cbfefa sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets | * d0eb4917f4 sched/cpuset: Bring back cpuset_mutex | * 918879de0e cgroup/cpuset: Rename functions dealing with DEADLINE accounting | * 78efab71a6 torture: Fix hang during kthread shutdown phase | * c8fb97dd7f nfsd: use vfs setgid helper | * 0196651186 nfs: use vfs setgid helper | * a7a1849899 x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 | * ad79f943c8 x86/fpu: Invalidate FPU state correctly on exec() | * b190cf1f27 drm/display/dp: Fix the DP DSC Receiver cap size | * c8aab333d4 drm/vmwgfx: Fix shader stage validation | * b53ed41516 PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus | * 60ba1bfa03 media: vcodec: Fix potential array out-of-bounds in encoder queue_setup | * 544cd10def of: dynamic: Refactor action prints to not use "%pOF" inside devtree_lock | * f1d4a58818 of: unittest: Fix EXPECT for parse_phandle_with_args_map() test | * ce66cd4786 radix tree: remove unused variable | * 898c8c5b11 lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels | * ff90a4c6ed batman-adv: Hold rtnl lock during MTU update via netlink | * ea38c0d9aa batman-adv: Fix batadv_v_ogm_aggr_send memory leak | * 7f3f72eb8f batman-adv: Fix TT global entry leak when client roamed back | * f7667b4988 batman-adv: Do not get eth header before batadv_check_management_packet | * 3f9312dd75 batman-adv: Don't increase MTU when set by user | * cde5a240d7 batman-adv: Trigger events for auto adjusted MTU | * 22426e1ce6 selinux: set next pointer before attaching to list | * 711595bfdc nfsd: Fix race to FREE_STATEID and cl_revoked | * bd1697e122 NFS: Fix a use after free in nfs_direct_join_group() | * 5f64261374 mm: add a call to flush_cache_vmap() in vmap_pfn() | * 440c10034b ALSA: ymfpci: Fix the missing snd_card_free() call at probe error | * 5cc7d81cf5 clk: Fix slab-out-of-bounds error in devm_clk_release() | * 0f72859acf NFSv4: Fix dropped lock for racing OPEN and delegation return | * 9c025420fe ibmveth: Use dcbf rather than dcbfl | * 7e546bd089 Revert "KVM: x86: enable TDP MMU by default" | * 67af12f558 net/ncsi: change from ndo_set_mac_address to dev_set_mac_address | * 4451457d61 net/ncsi: make one oem_gma function for all mfr id | * f683f4be80 bonding: fix macvlan over alb bond support | * 0fa8046e92 net: remove bond_slave_has_mac_rcu() | * f0ec97fca6 rtnetlink: Reject negative ifindexes in RTM_NEWLINK | * 00247cfd2b rtnetlink: return ENODEV when ifname does not exist and group is given | * 75cfb7de44 netfilter: nf_tables: fix out of memory error handling | * f22954f8c5 netfilter: nf_tables: flush pending destroy work before netlink notifier | * ff34403fef net/sched: fix a qdisc modification with ambiguous command request | * 30624ea3f8 igc: Fix the typo in the PTM Control macro | * f697c3ead1 igb: Avoid starting unnecessary workqueues | * d7823d752c ice: fix receive buffer size miscalculation | * ace1b0ae30 net: validate veth and vxcan peer ifindexes | * 335be58541 net: bcmgenet: Fix return value check for fixed_phy_register() | * 60a5034584 net: bgmac: Fix return value check for fixed_phy_register() | * 5b52c9ba42 ipvlan: Fix a reference count leak warning in ipvlan_ns_exit() | * 2bad37b6f6 dccp: annotate data-races in dccp_poll() | * 9b015360e8 sock: annotate data-races around prot->memory_pressure | * c52c6c0223 octeontx2-af: SDP: fix receive link config | * ce6e2b14bc tracing: Fix memleak due to race between current_tracer and trace | * ef748360ba tracing: Fix cpu buffers unavailable due to 'record_disabled' missed | * fdf5804d74 can: raw: fix lockdep issue in raw_release() | * 278fccf587 drm/amd/display: check TG is non-null before checking if enabled | * a955e6a0e3 drm/amd/display: do not wait for mpc idle if tg is disabled | * e0bd4f0c60 can: raw: fix receiver memory leak | * b832174b7f jbd2: fix a race when checking checkpoint buffer busy | * 9c31bb2684 jbd2: remove journal_clean_one_cp_list() | * d91783e686 jbd2: remove t_checkpoint_io_list | * a0ab49e7a7 ALSA: pcm: Fix potential data race at PCM memory allocation helpers | * 2e56d380da fbdev: fix potential OOB read in fast_imageblit() | * 14163f4a4f fbdev: Fix sys_imageblit() for arbitrary image widths | * 5b60bd9081 fbdev: Improve performance of sys_imageblit() | * 166f0bf456 MIPS: cpu-features: Use boot_cpu_type for CPU type based features | * 8f106e9740 MIPS: cpu-features: Enable octeon_cache by cpu_type | * d1d0b239f9 fs: dlm: fix mismatch of plock results from userspace | * 77d334c446 fs: dlm: use dlm_plock_info for do_unlock_close | * f9a33cc7d9 fs: dlm: change plock interrupted message to debug again | * 7ac088841f fs: dlm: add pid to debug log | * df9c842ab0 dlm: replace usage of found with dedicated list iterator variable | * 33e9c610e3 dlm: improve plock logging if interrupted | * d9ce077f8b PCI: acpiphp: Reassign resources on bridge if necessary | * 8cc8645dd3 xprtrdma: Remap Receive buffers after a reconnect | * 91a707507e NFSv4: fix out path in __nfs4_get_acl_uncached | * 323b830eeb NFSv4.2: fix error handling in nfs42_proc_getxattr | * 5de0a325c4 objtool/x86: Fix SRSO mess * | 642354c26d Merge 5.15.128 into android14-5.15-lts |\| | * 5ddfe5cc87 Linux 5.15.128 | * 9080f4fcc2 x86/srso: Correct the mitigation status when SMT is disabled | * 484eefc6ff objtool/x86: Fixup frame-pointer vs rethunk | * 55f1cbeaa1 x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG | * fa24cd0fbc x86/srso: Disable the mitigation on unaffected configurations | * aa0777ce0d x86/CPU/AMD: Fix the DIV(0) initial fix attempt | * bbe585239d x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() | * 19f23d16b0 x86/static_call: Fix __static_call_fixup() | * df6495f203 x86/srso: Explain the untraining sequences a bit more | * 43548590ad x86/cpu: Cleanup the untrain mess | * 035e906bfc x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 | * 19c1c04996 x86/cpu: Rename original retbleed methods | * f77dbb9096 x86/cpu: Clean up SRSO return thunk mess | * f624ce6c7f x86/ibt: Add ANNOTATE_NOENDBR | * f1171d455d objtool: Add frame-pointer-specific function ignore | * 08f7cfd44f x86/alternative: Make custom return thunk unconditional | * 0d810eff09 x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() | * 8089aae602 x86/cpu: Fix __x86_return_thunk symbol type | * 5b28fda5fd mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove | * e8c5081da2 net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled | * 431db3f48c virtio-net: set queues after driver_ok | * d39fc9b94d af_unix: Fix null-ptr-deref in unix_stream_sendpage(). | * 9a4d8dc706 arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 | * 6b64974e02 exfat: check if filename entries exceeds max filename length | * 6065b30171 netfilter: set default timeout to 3 secs for sctp shutdown send and recv state | * a00c5d2c20 drm/amd: flush any delayed gfxoff on suspend entry | * d578c919de drm/qxl: fix UAF on handle creation | * ff09f9e671 mmc: block: Fix in_flight[issue_type] value error | * b803fedb6e mmc: wbsd: fix double mmc_free_host() in wbsd_init() | * 961f7ce162 cifs: Release folio lock on fscache read hit. | * cc3f194f46 ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. | * 18e27df4f2 serial: 8250: Fix oops for port->pm on uart_change_pm() | * e9b8ee715d riscv: uaccess: Return the number of bytes effectively not copied | * b2a331abcb ALSA: hda/realtek - Remodified 3k pull low procedure | * dfb9676ed2 soc: aspeed: socinfo: Add kfree for kstrdup | * c5ac7522a8 ASoC: meson: axg-tdm-formatter: fix channel slot allocation | * fd346ef1cd ASoC: rt5665: add missed regulator_bulk_disable | * e878458d82 ARM: dts: imx: Set default tuning step for imx6sx usdhc | * 430c29a54e arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict | * 03522d73a4 bus: ti-sysc: Flush posted write on enable before reset | * 578371ce0d net: do not allow gso_size to be set to GSO_BY_FRAGS | * 5fc4fd3f3e sock: Fix misuse of sk_under_memory_pressure() | * fc3d82d295 net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset | * f11c2802e1 i40e: fix misleading debug logs | * 5ba2b936f3 iavf: fix FDIR rule fields masks validation | * ae6834689f team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves | * 0ffbc341cf net: phy: broadcom: stub c45 read/write for 54810 | * bf221e5e4b netfilter: nft_dynset: disallow object maps | * 9177869b85 ipvs: fix racy memcpy in proc_do_sync_threshold | * 1adaec4758 netfilter: nf_tables: deactivate catchall elements in next generation | * 82109740d6 netfilter: nf_tables: fix false-positive lockdep splat | * b2f6d73395 drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs | * 7207ee323a selftests: mirror_gre_changes: Tighten up the TTL test match | * c2a6ffe3f1 net: phy: fix IRQ-based wake-on-lan over hibernate / power off | * 8e5e967348 xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH | * 075448a2eb xfrm: add NULL check in xfrm_update_ae_params | * e1e04cc2ef ip_vti: fix potential slab-use-after-free in decode_session6 | * a1639a82ce ip6_vti: fix slab-use-after-free in decode_session6 | * 44b3d40967 xfrm: fix slab-use-after-free in decode_session6 | * a465ace883 net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure | * fed1cd2cd3 net: af_key: fix sadb_x_filter validation | * 1960f46807 net: xfrm: Fix xfrm_address_filter OOB read | * 080dedb1ca i2c: designware: Handle invalid SMBus block data response length value | * 416c538684 i2c: designware: Correct length byte validation logic | * b966e9e1e2 btrfs: fix BUG_ON condition in btrfs_cancel_balance | * 77698e6ff6 tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms | * 2a52344643 tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux | * 8ef25fb134 powerpc/rtas_flash: allow user copy to flash block cache objects | * bb70e2b70f fbdev: mmp: fix value check in mmphw_probe() | * 184f1b68bb i2c: hisi: Only handle the interrupt of the driver's transfer | * c4e671dae5 i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue | * b99f490ea8 cifs: fix potential oops in cifs_oplock_break | * a5ae5a81bc vduse: Use proper spinlock for IRQ injection | * 5b7d5c2dd6 virtio-mmio: don't break lifecycle of vm_dev | * edf3b5aadb btrfs: move out now unused BG from the reclaim list | * 170773563e ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node | * 4ffbfe1c98 ARM: dts: imx6sll: fixup of operating points | * e2ff5cf681 mmc: sunxi: fix deferred probing | * f93e8c5a7b mmc: bcm2835: fix deferred probing | * 4eeba5d476 USB: dwc3: fix use-after-free on core driver unbind | * a78fe5c9d8 USB: dwc3: qcom: fix NULL-deref on suspend | * 8a6b753402 tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A | * 701bb5fee7 tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms | * fa254ab7d0 tty: serial: fsl_lpuart: Add i.MXRT1050 support | * 20351ddb1f usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() | * 31a0e60fe1 USB: dwc3: gadget: drop dead hibernation code | * d9e004104e usb: dwc3: Fix typos in gadget.c | * 2fa487a946 usb: dwc3: Remove DWC3 locking during gadget suspend/resume | * 7dfb384e76 usb: dwc3: gadget: Synchronize IRQ between soft connect/disconnect | * d3c82f24ee drm/amd/display: fix access hdcp_workqueue assert | * 0ba6c7ba08 drm/amd/display: phase3 mst hdcp for multiple displays | * 99c444d3c3 drm/amd/display: save restore hdcp state when display is unplugged from mst hub | * 4f1beb75f6 ARM: dts: aspeed: asrock: Correct firmware flash SPI clocks | * f84c2ca349 igc: read before write to SRRCTL register | * 9fa82f031a iio: addac: stx104: Fix race condition when converting analog-to-digital | * d31d04ec40 iio: addac: stx104: Fix race condition for stx104_write_raw() | * 89a007f3a3 iio: stx104: Move to addac subdirectory | * cadf8f2d7c iio: adc: stx104: Implement and utilize register structures | * 6089d35434 iio: adc: stx104: Utilize iomap interface | * 565b96d9a7 iio: add addac subdirectory | * 49b830d75f ring-buffer: Do not swap cpu_buffer during resize process | * 6657ecbcc3 powerpc/kasan: Disable KCOV in KASAN code | * 8703b26387 ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() | * 5ed4dbc137 ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 | * c7d8b5f46f fs/ntfs3: Mark ntfs dirty when on-disk struct is corrupted | * 3a00ec562f fs: ntfs3: Fix possible null-pointer dereferences in mi_read() | * e7799bb4db fs/ntfs3: Enhance sanity check while generating attr_list | * ef568da1fd drm/amdgpu: Fix potential fence use-after-free v2 | * 5720c7e185 Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally | * 548a6b64b3 Bluetooth: L2CAP: Fix use-after-free | * 302d045963 watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) | * 2ea70379e4 firewire: net: fix use after free in fwnet_finish_incoming_packet() | * 97fd1c8e9c pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() | * 85e8881500 gfs2: Fix possible data races in gfs2_show_options() | * eafb79d244 usb: chipidea: imx: add missing USB PHY DPDM wakeup setting | * 7bdb4c9630 usb: chipidea: imx: don't request QoS for imx8ulp | * 25decbbb66 thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() | * 776b34615a media: platform: mediatek: vpu: fix NULL ptr dereference | * cb174344bf usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push | * 1676748aa2 media: v4l2-mem2mem: add lock to protect parameter num_rdy | * 9850867042 smb: client: fix warning in cifs_smb3_do_mount() | * a3f252436e ovl: check type and offset of struct vfsmount in ovl_entry | * 1a650d3ccd RDMA/mlx5: Return the firmware result upon destroying QP/RQ | * 9631d88503 HID: add quirk for 03f0:464a HP Elite Presenter Mouse | * 4921792e04 drm/amdgpu: install stub fence into potential unused fence pointers | * fd41646d43 HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard | * ff10cd3e9b dma-remap: use kvmalloc_array/kvfree for larger dma memory remap | * e9ce774052 ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion | * 7d53d1e476 iopoll: Call cpu_relax() in busy loops | * ca66e9dd98 ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings | * cc15908308 PCI: tegra194: Fix possible array out of bounds access | * e2d10f1de1 net: tls: avoid discarding data on record close | * 9a15ca8939 net/tls: Multi-threaded calls to TX tls_dev_del | * 2d93157b7e net/tls: Perform immediate device ctx cleanup when possible | * 51222e1c77 macsec: use DEV_STATS_INC() | * 3d64a232e4 macsec: Fix traffic counters/statistics | * 396a192140 selftests: forwarding: tc_actions: Use ncat instead of nc | * d61a0886d3 selftests: forwarding: tc_actions: cleanup temporary files when test is aborted | * a798977df6 mmc: sdhci-f-sdh30: Replace with sdhci_pltfm * | e87edba21f Merge 5.15.127 into android14-5.15-lts |\| | * f6f7927ac6 Linux 5.15.127 | * c597d8cb0d timers/nohz: Last resort update jiffies on nohz_full IRQ entry | * b4d36e6c5d timers/nohz: Switch to ONESHOT_STOPPED in the low-res handler when the tick is stopped | * c3b954a51b tick: Detect and fix jiffies update stall | * af99918f0e sch_netem: fix issues in netem_change() vs get_dist_table() | * 5d094d4e7b alpha: remove __init annotation from exported page_is_ram() | * f8d6d25756 scsi: qedf: Fix firmware halt over suspend and resume | * 85db1cd174 scsi: qedi: Fix firmware halt over suspend and resume | * e70469c289 scsi: fnic: Replace return codes in fnic_clean_pending_aborts() | * 6bc7f4c8c2 scsi: core: Fix possible memory leak if device_add() fails | * 461f8ac666 scsi: snic: Fix possible memory leak if device_add() fails | * 171e117cdc scsi: 53c700: Check that command slot is not NULL | * 7a792b3d88 scsi: storvsc: Fix handling of virtual Fibre Channel timeouts | * 0f52d7b782 scsi: core: Fix legacy /proc parsing buffer overflow | * b757ef99df netfilter: nf_tables: report use refcount overflow | * 9bdbbcf9d1 nvme-rdma: fix potential unbalanced freeze & unfreeze | * d68f8ef6ef nvme-tcp: fix potential unbalanced freeze & unfreeze | * ae6e21f8bb btrfs: set cache_block_group_error if we find an error | * 314135b7ba btrfs: reject invalid reloc tree root keys with stack dump | * 69dd147de4 btrfs: exit gracefully if reloc roots don't match | * c40d4b60c5 btrfs: don't stop integrity writeback too early | * 555e126dd3 ibmvnic: Handle DMA unmapping of login buffs in release functions | * 34fcc82382 ibmvnic: Unmap DMA login rsp buffer on send login fail | * cee62753cf ibmvnic: Enforce stronger sanity checks on login response | * 27e8db8380 net/mlx5: Skip clock update work when device is in error state | * f638fc2f73 net/mlx5: Allow 0 for total host VFs | * 086a80eb62 dmaengine: mcf-edma: Fix a potential un-allocated memory access | * 7e1dc94b2d nexthop: Fix infinite nexthop bucket dump when using maximum nexthop ID | * 608a4327c2 nexthop: Make nexthop bucket dump more efficient | * 4457300cfd nexthop: Fix infinite nexthop dump when using maximum nexthop ID | * 91307347d6 net: hns3: add wait until mac link down | * 094310eb2b net: hns3: refactor hclge_mac_link_status_wait for interface reuse | * 1ae9703c2e net: phy: at803x: remove set/get wol callbacks for AR8032 | * 7d496cd83a RDMA/umem: Set iova in ODP flow | * f78a4238a8 wifi: cfg80211: fix sband iftype data lookup for AP_VLAN | * 26a27dd760 drm/rockchip: Don't spam logs in atomic check | * 918c1e6843 IB/hfi1: Fix possible panic during hotplug remove | * df21468bfd iavf: fix potential races for FDIR filters | * b1f985cf1c drivers: net: prevent tun_build_skb() to exceed the packet size limit | * f239c9e1d9 dccp: fix data-race around dp->dccps_mss_cache | * 49a1fee22f bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves | * 789fcd94c9 xsk: fix refcount underflow in error path | * e958081219 tunnels: fix kasan splat when generating ipv4 pmtu error | * 7903311b2c net/packet: annotate data-races around tp->status | * f4614e379b mISDN: Update parameter type of dsp_cmx_send() | * 3961761af3 bpf, sockmap: Fix bug that strp_done cannot be called | * 20d53895d5 bpf, sockmap: Fix map type error in sock_map_del_link | * a09c258cfa net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail() | * 85af0b226c selftests: forwarding: tc_flower: Relax success criterion | * 7b3fa99526 selftests: forwarding: Switch off timeout | * e410f85ebc selftests: forwarding: Skip test when no interfaces are specified | * 4a44994526 selftests: forwarding: ethtool_extended_state: Skip when using veth pairs | * b8d216e9c6 selftests: forwarding: ethtool: Skip when using veth pairs | * b9dfb80d9f selftests: forwarding: Add a helper to skip test when using veth pairs | * b973eb76df selftests/rseq: Fix build with undefined __weak | * b8b8db5857 drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes | * 4c6767c8bf x86: Move gds_ucode_mitigated() declaration to header | * f919cbc904 x86/speculation: Add cpu_show_gds() prototype | * 9290ef14c9 x86/mm: Fix VDSO and VVAR placement on 5-level paging machines | * 829409510d x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 | * c41a22b93d x86/srso: Fix build breakage with the LLVM linker | * c2372b1559 usb: typec: tcpm: Fix response to vsafe0V event | * f776b94ccd usb: common: usb-conn-gpio: Prevent bailing out if initial role is none | * 00cc14b52d usb: dwc3: Properly handle processing of pending events | * 7a11d1e262 usb-storage: alauda: Fix uninit-value in alauda_check_media() | * 945e1b3c36 misc: rtsx: judge ASPM Mode to set PETXCFG Reg | * 03eebad962 binder: fix memory leak in binder_init() | * a8e2ae6296 iio: adc: ina2xx: avoid NULL pointer dereference on OF device match | * 2df8ae1e42 iio: cros_ec: Fix the allocation size for cros_ec_command | * a7cedc2b76 io_uring: correct check for O_TMPFILE | * 697bc23463 selftests/bpf: Fix sk_assign on s390x | * 1272772621 selftests/bpf: Workaround verification failure for fexit_bpf2bpf/func_replace_return_code | * ee701208f4 selftests/bpf: make test_align selftest more robust | * 683d2969a0 bpf: aggressively forget precise markings during state checkpointing | * 2516deeb87 bpf: stop setting precise in current state | * c47d0178ad bpf: allow precision tracking for programs with subprogs | * 3645510cf9 nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput | * 36a3b560c7 radix tree test suite: fix incorrect allocation size for pthreads | * 8d10284243 hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 | * 3ad4ba2b61 drm/amd/display: check attr flag before set cursor degamma on DCN3+ | * 621204fca0 drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap() | * 64e6253f64 drm/nouveau/gr: enable memory loads on helper invocation on all channels | * bcd9eeb3a3 riscv,mmio: Fix readX()-to-delay() ordering | * 57772ae9b3 dmaengine: pl330: Return DMA_PAUSED when transaction is paused | * 3ca8f5c733 ipv6: adjust ndisc_is_useropt() to also return true for PIO | * 6cde607776 mmc: moxart: read scr register without changing byte order | * 3f00757ab4 wireguard: allowedips: expand maximum node depth | * aeb9749076 ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea() | * 595679098b ksmbd: validate command request size * | 19d2b2b033 Merge 5.15.126 into android14-5.15-lts |\| | * 24c4de4069 Linux 5.15.126 | * aeb4db8ab7 PM: sleep: wakeirq: fix wake irq arming | * b5d3a4251b PM / wakeirq: support enabling wake-up irq after runtime_suspend called | * a36b522767 soundwire: fix enumeration completion | * 7996facaf0 soundwire: bus: pm_runtime_request_resume on peripheral attachment | * c91c07ae08 selftests/rseq: Play nice with binaries statically linked against glibc 2.35+ | * 1cdb50faf7 selftests/rseq: check if libc rseq support is registered | * 0f1f471b91 drm/imx/ipuv3: Fix front porch adjustment upon hactive aligning | * 5058c14440 powerpc/mm/altmap: Fix altmap boundary check | * eb7a5e4d14 mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() | * 70643e98cb mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts | * 1796b492f8 mtd: rawnand: rockchip: fix oobfree offset and description | * f6807b62fb mtd: rawnand: omap_elm: Fix incorrect type in assignment | * 596be6716b ext2: Drop fragment support | * 0ccfe21949 fs: Protect reconfiguration of sb read-write from racing writes | * 27d0f755d6 net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb | * fbe5a2fed8 Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb | * afd9a31b5a fs/sysv: Null check to prevent null-ptr-deref bug | * 80ec112c19 fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_load_attr_list() | * 0d6f639f1d file: reinstate f_pos locking optimization for regular files | * b44d28b98f bpf, cpumap: Make sure kthread is running before map update returns | * 8089eb93d6 drm/ttm: check null pointer before accessing when swapping | * ef0d07c668 open: make RESOLVE_CACHED correctly test for O_TMPFILE | * c81bdf8f9f bpf: Disable preemption in bpf_event_output | * ae07cfe2b0 rbd: prevent busy loop when requesting exclusive lock | * 7978bcca4c wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) | * 32ca6a55e1 net: tap_open(): set sk_uid from current_fsuid() | * 4ed3eed99e net: tun_chr_open(): set sk_uid from current_fsuid() | * adacc3a954 arm64: dts: stratix10: fix incorrect I2C property for SCL signal | * b92c88009d mtd: rawnand: meson: fix OOB available bytes for ECC | * b0875c583e mtd: spinand: toshiba: Fix ecc_get_status | * 1c33ca1e19 exfat: release s_lock before calling dir_emit() | * 8a34a242cf exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree | * a74878207b x86/CPU/AMD: Do not leak quotient data after a division by 0 | * b8f029fc40 firmware: arm_scmi: Drop OF node reference in the transport channel setup | * 287c2c8677 ceph: defer stopping mdsc delayed_work | * 98b521d10e USB: zaurus: Add ID for A-300/B-500/C-700 | * cd6872f2cf libceph: fix potential hang in ceph_osdc_notify() | * e5f5b4a898 scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices | * 212a9a3c67 scsi: zfcp: Defer fc_rport blocking until after ADISC response | * dac3827253 tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen | * 4517782e1b tcp_metrics: annotate data-races around tm->tcpm_net | * e842a68667 tcp_metrics: annotate data-races around tm->tcpm_vals[] | * d3184bea4a tcp_metrics: annotate data-races around tm->tcpm_lock | * 9a7367cbe3 tcp_metrics: annotate data-races around tm->tcpm_stamp | * 6f6bd67f48 tcp_metrics: fix addr_same() helper | * b0acbcf1e7 prestera: fix fallback to previous version on same major version | * d6d9d0f5a5 net/mlx5: fs_core: Skip the FTs in the same FS_TYPE_PRIO_CHAINS fs_prio | * c999fb1039 net/mlx5: fs_core: Make find_closest_ft more generic | * 32ef2c0c6c vxlan: Fix nexthop hash size | * 1bb54a21f4 ip6mr: Fix skb_under_panic in ip6mr_cache_report() | * 64e3affee2 s390/qeth: Don't call dev_close/dev_open (DOWN/UP) | * a0da2684db net: dcb: choose correct policy to parse DCB_ATTR_BCN | * 193333229a net: netsec: Ignore 'phy-mode' on SynQuacer in DT mode | * 766c9dd00c net: korina: handle clk prepare error in korina_probe() | * 6cecfdf650 net: ll_temac: fix error checking of irq_of_parse_and_map() | * 3761ff4f86 net: ll_temac: Switch to use dev_err_probe() helper | * 5c534640a7 bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire | * 79c3d81c9a net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free | * 9edf795502 net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free | * 262430dfc6 net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free | * b58d34068f bpf, cpumap: Handle skb as well when clean up ptr_ring | * f04f6d9b3b net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX. | * 2c55d49415 net: add missing data-race annotation for sk_ll_usec | * e934c50c48 net: add missing data-race annotations around sk->sk_peek_off | * fdd8d8d54d net: add missing READ_ONCE(sk->sk_rcvbuf) annotation | * 98f0d1db3a net: add missing READ_ONCE(sk->sk_sndbuf) annotation | * 0d1047b77b net: add missing READ_ONCE(sk->sk_rcvlowat) annotation | * 6c058a1f67 net: annotate data-races around sk->sk_max_pacing_rate | * 2950c5ac65 qed: Fix scheduling in a tasklet while getting stats | * a19952dbb5 qed: Fix kernel-doc warnings | * 6d8c259f48 mISDN: hfcpci: Fix potential deadlock on &hc->lock | * 8dedcc6af3 net: sched: cls_u32: Fix match key mis-addressing | * 675d29de69 perf test uprobe_from_different_cu: Skip if there is no gcc | * 0f6e3d8d7f net: dsa: fix value check in bcm_sf2_sw_probe() | * 047508edd6 rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length | * cc9ebceaa6 bpf: Add length check for SK_DIAG_BPF_STORAGE_REQ_MAP_FD parsing | * 8f9a04c742 net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() | * 00cecb0a8f net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx | * 4c224ea31b wifi: cfg80211: Fix return value in scan logic | * 8e72db3ffa KVM: s390: fix sthyi error handling | * 809edb4262 word-at-a-time: use the same return type for has_zero regardless of endianness | * b7880809d7 arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux | * 804e72062b iommu/arm-smmu-v3: Document nesting-related errata | * 744e6b80b8 iommu/arm-smmu-v3: Add explicit feature for nesting | * fd86b59442 iommu/arm-smmu-v3: Document MMU-700 erratum 2812531 | * 2de9f3dcfe iommu/arm-smmu-v3: Work around MMU-600 erratum 1076982 | * a850fa85d4 arm64: errata: Add detection for TRBE write to out-of-range | * 073699df4a arm64: errata: Add workaround for TSB flush failures | * 44b45e8161 net/mlx5: Free irqs only on shutdown callback | * 40601542c4 perf: Fix function pointer case | * c12fa4ac89 io_uring: gate iowait schedule on having pending requests * | de0b2bd1c2 UPSTREAM: x86/srso: Fix build breakage with the LLVM linker * | edaca1a5a8 Merge 5.15.125 into android14-5.15-lts |\| | * c275eaaaa3 Linux 5.15.125 | * 754e0c7c4a x86: fix backwards merge of GDS/SRSO bit | * b14a3924c2 xen/netback: Fix buffer overrun triggered by unusual packet | * 153f9a7b02 x86/srso: Tie SBPB bit setting to microcode patch detection | * df4c3823cb x86/srso: Fix return thunks in generated code | * 0071b17eb6 x86/srso: Add IBPB on VMEXIT | * 5398faac76 x86/srso: Add IBPB | * c24aaa7dde x86/srso: Add SRSO_NO support | * 4e9115e194 x86/srso: Add IBPB_BRTYPE support | * b35087763a x86/srso: Add a Speculative RAS Overflow mitigation | * c3b4c64452 x86/cpu, kvm: Add support for CPUID_80000021_EAX | * 236dd71333 x86/bugs: Increase the x86 bugs vector size to two u32s | * 0242a8bdef Documentation/x86: Fix backwards on/off logic about YMM support | * 27a72e3508 x86/mm: Initialize text poking earlier | * d0317b9502 mm: Move mm_cachep initialization to mm_init() | * 8e4c253087 x86/mm: Use mm_alloc() in poking_init() | * 13ec5cb4c1 x86/mm: fix poking_init() for Xen PV guests | * 3e90080d56 x86/xen: Fix secondary processors' FPU initialization | * 348741a9e4 KVM: Add GDS_NO support to KVM | * 59d78655f8 x86/speculation: Add Kconfig option for GDS | * 0cc5643b63 x86/speculation: Add force option to GDS mitigation | * 348a89e201 x86/speculation: Add Gather Data Sampling mitigation | * a094d3b309 x86/fpu: Move FPU initialization into arch_cpu_finalize_init() | * 59f2739111 x86/fpu: Mark init functions __init | * bb9c20d903 x86/fpu: Remove cpuinfo argument from init functions | * de8b7ce4c5 x86/init: Initialize signal frame size late | * 041d929233 init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() | * 8ae795ed61 init: Invoke arch_cpu_finalize_init() earlier | * 7e270cebaf init: Remove check_bugs() leftovers | * 285384ac24 um/cpu: Switch to arch_cpu_finalize_init() | * 6ea4217864 sparc/cpu: Switch to arch_cpu_finalize_init() | * 21a1fc8d13 sh/cpu: Switch to arch_cpu_finalize_init() | * dfeb371a27 mips/cpu: Switch to arch_cpu_finalize_init() | * 4baf46a3ba m68k/cpu: Switch to arch_cpu_finalize_init() | * 8c8165cd25 ia64/cpu: Switch to arch_cpu_finalize_init() | * de8c592cc5 ARM: cpu: Switch to arch_cpu_finalize_init() | * 75da6209d3 x86/cpu: Switch to arch_cpu_finalize_init() | * 0774fc2177 init: Provide arch_cpu_finalize_init() * | a662b58fb5 Revert "ring-buffer: Fix wrong stat of cpu_buffer->read" * | e02ff715d5 Revert "locking/rtmutex: Fix task->pi_waiters integrity" * | 5f5a985931 Merge 5.15.124 into android14-5.15-lts |\| | * 38d4ca22a5 Linux 5.15.124 | * 78001ffa9b selftests: mptcp: join: only check for ip6tables if needed | * 66cf5f394a ASoC: cs42l51: fix driver to properly autoload with automatic module loading | * 3359fdf49d io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq | * 374edda0db selftests: mptcp: sockopt: use 'iptables-legacy' if available | * 43bbe1a091 cpufreq: intel_pstate: Drop ACPI _PSS states table patching | * 73b4cbed91 ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily | * cd03166968 ACPI: processor: perflib: Use the "no limit" frequency QoS | * e8e93e2f01 tracing: Fix trace_event_raw_event_synth() if else statement | * f3b6e63004 rbd: retrieve and check lock owner twice before blocklisting | * bb25c5c0e4 rbd: harden get_lock_owner_info() a bit | * b223e9ffb6 rbd: make get_lock_owner_info() return a single locker or NULL | * 098d0b9ba0 dm cache policy smq: ensure IO doesn't prevent cleaner policy progress | * 7c9b8cca49 ceph: never send metrics if disable_send_metrics is set | * e443b3a508 ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register | * 585355a76e s390/dasd: fix hanging device after quiesce/resume | * 0061453d6e virtio-net: fix race between set queues and probe | * 427d42838c KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid | * 4ed1549129 locking/rtmutex: Fix task->pi_waiters integrity | * c579caef7c irqchip/gic-v4.1: Properly lock VPEs when doing a directLPI invalidation | * 6cb3c511af irq-bcm6345-l1: Do not assume a fixed block to cpu mapping | * 354e8bd5f5 tpm_tis: Explicitly check for error code | * 8130c32b4a nfsd: Remove incorrect check in nfsd4_validate_stateid | * 9b8a31a231 file: always lock position for FMODE_ATOMIC_POS | * 1f5ea62a0f btrfs: check for commit error at btrfs_attach_transaction_barrier() | * 883c3ed9a1 btrfs: check if the transaction was aborted at btrfs_wait_for_commit() | * a7abb1690f hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled | * 3f3cdca844 hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature | * a676ddc4ca ALSA: hda/relatek: Enable Mute LED on HP 250 G8 | * dd125fcd58 Revert "xhci: add quirk for host controllers that don't update endpoint DCS" | * 5138c22831 tty: n_gsm: fix UAF in gsm_cleanup_mux | * baf420e303 staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() | * acacdbe0f7 staging: r8712: Fix memory leak in _r8712_init_xmit_priv() | * ba2975efe9 Documentation: security-bugs.rst: clarify CVE handling | * 28ae486f8e Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group | * 98a118840b Revert "usb: xhci: tegra: Fix error check" | * 2eaa43508a usb: xhci-mtk: set the dma max_seg_size | * cd2d96c4bc usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config | * 3af06a8502 USB: quirks: add quirk for Focusrite Scarlett | * 8fb5a01196 usb: ohci-at91: Fix the unhandle interrupt when resume | * 6366b11785 usb: dwc3: don't reset device side if dwc3 was configured as host-only | * 6f126e0263 usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy | * a2d2fa6612 Revert "usb: dwc3: core: Enable AutoRetry feature in the controller" | * 97620ed1bc can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED | * 0ac13ef002 USB: serial: simple: sort driver entries | * 378e036237 USB: serial: simple: add Kaufmann RKS+CAN VCP | * 5b9a5cf1bf USB: serial: option: add Quectel EC200A module support | * 3990913997 USB: serial: option: support Quectel EM060K_128 | * b800c0d557 serial: sifive: Fix sifive_serial_console_setup() section | * 8fa462ad0f serial: 8250_dw: Preserve original value of DLF register | * dc4f6c537f serial: qcom-geni: drop bogus runtime pm state update | * 41c487de4c KVM: VMX: Don't fudge CR0 and CR4 for restricted L2 guest | * 5883a4e847 KVM: Grab a reference to KVM for VM and vCPU stats file descriptors | * 0f7a2b5671 USB: gadget: Fix the memory leak in raw_gadget driver | * 2f9bfccced usb: gadget: call usb_gadget_check_config() to verify UDC capability | * a49884561a Revert "usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init()" | * 813cede7b2 tracing: Fix warning in trace_buffered_event_disable() | * 23e8a65f9a ring-buffer: Fix wrong stat of cpu_buffer->read | * ae5b8b1c2e ata: pata_ns87415: mark ns87560_tf_read static | * 6bbbe1b216 RDMA/irdma: Report correct WC error | * bd79de8bd3 drm/amd: Fix an error handling mistake in psp_sw_init() | * 4e1c1d7429 dm raid: protect md_stop() with 'reconfig_mutex' | * 0c4db5a04d dm raid: clean up four equivalent goto tags in raid_ctr() | * 2e321ee96f dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths | * 4b9f3ef1f3 block: Fix a source code comment in include/uapi/linux/blkzoned.h | * 2861b33820 ASoC: fsl_spdif: Silence output on stop | * 5ec0e4deee drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() | * b79a0e71d6 RDMA/bnxt_re: Prevent handling any completions after qp destroy | * 3ad5f655eb RDMA/mthca: Fix crash when polling CQ for shared QPs | * c5b5dbcbf9 RDMA/irdma: Fix data race on CQP request done | * bf0f9f65b7 RDMA/irdma: Fix data race on CQP completion stats | * fd6e50ec2c RDMA/irdma: Add missing read barriers | * 5fbb5068d2 drm/msm/adreno: Fix snapshot BINDLESS_DATA size | * 4e9d4a2161 drm/msm/dpu: drop enum dpu_core_perf_data_bus_id | * 6ab756a55e RDMA/mlx4: Make check for invalid flags stricter | * 9dde876a4d tipc: stop tipc crypto on failure in tipc_node_create | * df019bc124 tipc: check return value of pskb_trim() | * 42afa7ef66 benet: fix return value check in be_lancer_xmit_workarounds() | * 95cf4fa31b net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64 | * 98f6bbdfc0 net/sched: mqprio: add extack to mqprio_parse_nlattr() | * b1e85c9d28 net/sched: mqprio: refactor nlattr parsing to a separate function | * 5bee91121c netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID | * 98bcfcaecc netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR | * 50cbb9d195 netfilter: nft_set_rbtree: fix overlap expiration walk | * feba294c45 igc: Fix Kernel Panic during ndo_tx_timeout callback | * 8412fe3686 platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 | * 238420a24d net: stmmac: Apply redundant write work around on 4.xx too | * 9be8ec5a0c team: reset team's flags when down link is P2P device | * bf2d7b63e2 bonding: reset bond's flags when down link is P2P device | * c28b393876 ice: Fix memory management in ice_ethtool_fdir.c | * ecb741a17c tcp: Reduce chance of collisions in inet6_hashfn(). | * dd48780a7b ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address | * 46e4029735 ethernet: atheros: fix return value check in atl1e_tso_csum() | * 6d8a71e4c3 phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() | * 49f5b3c949 vxlan: calculate correct header length for GPE | * 77396fa909 vxlan: move to its own directory | * 96dbc68b7f net: hns3: fix wrong bw weight of disabled tc issue | * 9755714d23 net: hns3: fix wrong tc bandwidth weight data issue | * 01460ac6ff net: phy: marvell10g: fix 88x3310 power up | * 57743a86cc iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED | * 1542e399a1 iavf: fix potential deadlock on allocation failure | * 5a40483557 i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() | * c9b936984d media: staging: atomisp: select V4L2_FWNODE | * 6aa7cb3bb5 soundwire: qcom: update status correctly with mask | * 3f28ec4a40 phy: qcom-snps-femto-v2: properly enable ref clock | * ac3fe4c2a7 phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend | * e7c0c5af51 phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc | * 450ef59bef phy: qcom-snps: Use dev_err_probe() to simplify code | * d6f9258281 drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel | * fc399b0fdf drm/amdgpu: fix vkms crtc settings | * aa56bcff46 scsi: qla2xxx: Fix hang in task management | * 58daf4e870 scsi: qla2xxx: Add debug prints in the device remove path | * f90d44e5bb scsi: qla2xxx: Fix task management cmd fail due to unavailable resource | * 01366f0b65 scsi: qla2xxx: Fix task management cmd failure | * 25cea82ea2 scsi: qla2xxx: Multi-que support for TMF | * 2e18fd3f61 scsi: qla2xxx: Remove unused declarations for qla2xxx | * ace6bed424 tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails | * 30c8ba1da3 Revert "tracing: Add "(fault)" name injection to kernel probes" | * 5f52389bdd tracing: Allow synthetic events to pass around stacktraces | * e7b4d24fa0 tracing/probes: Fix to avoid double count of the string length on the array | * 3a1a229712 tracing/probes: Add symstr type for dynamic events | * 7ac170d93b pwm: meson: fix handling of period/duty if greater than UINT_MAX | * bae3c43a9d pwm: meson: Simplify duplicated per-channel tracking | * 5cb0349cfc cifs: if deferred close is disabled then close files immediately | * c600e23fbc ksmbd: remove internal.h include | * c8117ac423 cifs: use fs_context for automounts | * 5076cc8bc1 cifs: missing directory in MAINTAINERS file | * da60170558 drm/ttm: never consider pinned BOs for eviction&swap | * c556573e4b tty: fix hang on tty device with no_room set | * d262770b95 n_tty: Rename tail to old_tail in n_tty_read() | * 7738335d73 drm/ttm: Don't leak a resource on eviction error | * 4400b96587 drm/ttm: Don't print error message if eviction was interrupted | * 354cdda79a fs: dlm: interrupt posix locks only when process is killed | * 97e7a0f8de dlm: rearrange async condition return | * 75ce95abc6 dlm: cleanup plock_op vs plock_xop | * b409d8df9b PCI: rockchip: Don't advertise MSI-X in PCIe capabilities | * cbd1494e51 PCI: rockchip: Fix window mapping and address translation for endpoint | * eb39c4c051 PCI: rockchip: Remove writes to unused registers | * 05f13e85fb PCI/ASPM: Avoid link retraining race | * 52d274956a PCI/ASPM: Factor out pcie_wait_for_retrain() | * cf8c181500 PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() | * 8b9249d74c i2c: nomadik: Remove a useless call in the remove function | * f07d8d345b i2c: nomadik: Use devm_clk_get_enabled() | * 4954c87053 i2c: nomadik: Remove unnecessary goto label | * 24562f0a46 i2c: Improve size determinations | * 9845744e57 i2c: Delete error messages for failed memory allocations | * 89eae1f0aa btrfs: fix race between quota disable and relocation | * b19e905212 gpio: mvebu: fix irq domain leak | * a999660042 gpio: mvebu: Make use of devm_pwmchip_add | * 34fe5fbc20 pwm: Add a stub for devm_pwmchip_add() | * f3d2344811 gpio: tps68470: Make tps68470_gpio_output() always set the initial value | * 21d063d27b io_uring: don't audit the capability check in io_uring_create() | * 49a2686add KVM: s390: pv: fix index value of replaced ASCE | * fee1e6a735 jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint * | d737715c00 Merge 5.15.123 into android14-5.15-lts |\| | * 09996673e3 Linux 5.15.123 | * e6c2f1ce41 Revert "drm/amd/display: edp do not add non-edid timings" | * 68eafe2947 nixge: fix mac address error handling again | * 22f4093a42 tracing/histograms: Return an error if we fail to add histogram to hist_vars list | * 78471c3ad3 jbd2: recheck chechpointing non-dirty buffer | * 0ae6b6d217 net: phy: prevent stale pointer dereference in phy_init() | * b7168d2906 tcp: annotate data-races around fastopenq.max_qlen | * accb138c10 tcp: annotate data-races around icsk->icsk_user_timeout | * 6b88371f00 tcp: annotate data-races around tp->notsent_lowat | * 4f0a31f732 tcp: annotate data-races around rskq_defer_accept | * ff0fedfc75 tcp: annotate data-races around tp->linger2 | * e187d88f3b tcp: annotate data-races around icsk->icsk_syn_retries | * d5617eeb54 tcp: annotate data-races around tp->keepalive_probes | * 9b2296a2ad tcp: annotate data-races around tp->keepalive_intvl | * f70ebecdf3 tcp: annotate data-races around tp->keepalive_time | * 0bcee93252 tcp: annotate data-races around tp->tcp_tx_delay | * 10013f764a netfilter: nf_tables: skip bound chain on rule flush | * dbe1a82d46 netfilter: nf_tables: skip bound chain in netns release path | * 706ce3c81b netfilter: nft_set_pipapo: fix improper element removal | * 62615b895a netfilter: nf_tables: fix spurious set element insertion failure | * c17b4ec9cc llc: Don't drop packet from non-root netns. | * 2400ae8fd8 fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe | * 40276640be Revert "tcp: avoid the lookup process failing to get sk in ehash table" | * b04ab5243e net:ipv6: check return value of pskb_trim() | * b87a7e3a33 net: ipv4: Use kfree_sensitive instead of kfree | * 5dd4d1ff8b tcp: annotate data-races around tcp_rsk(req)->ts_recent | * fa941f53a2 igc: Prevent garbled TX queue with XDP ZEROCOPY | * e35dc107a1 bpf: Fix subprog idx logic in check_max_stack_depth | * 4e87eb2248 octeontx2-pf: Dont allocate BPIDs for LBK interfaces | * 87fc9616d6 security: keys: Modify mismatched function name | * 0fb37ce6c0 iavf: Fix out-of-bounds when setting channels on remove | * 345c44e18c iavf: Fix use-after-free in free_netdev | * 52ed161463 net: sched: cls_bpf: Undo tcf_bind_filter in case of an error | * 5ed16ecae5 net: ethernet: mtk_eth_soc: handle probe deferral | * 39479093a4 ethernet: use of_get_ethdev_address() | * cb1e666ec0 of: net: add a helper for loading netdev->dev_addr | * 43da399e50 ethernet: use eth_hw_addr_set() instead of ether_addr_copy() | * 3fb402bd20 bridge: Add extack warning when enabling STP in netns. | * ec4ac15ece net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field() | * 6a5d6096ae pinctrl: amd: Use amd_pinconf_set() for all config options | * 4727cece29 perf build: Fix library not found error when using CSLIBS | * 29fb046ec0 fbdev: imxfb: warn about invalid left/right margin | * 5d19146753 spi: bcm63xx: fix max prepend length | * 2febd5f81e FS: JFS: Check for read-only mounted filesystem in txBegin | * 3e94d0d378 FS: JFS: Fix null-ptr-deref Read in txBegin | * 13ae3f2fd2 MIPS: dec: prom: Address -Warray-bounds warning | * 39f6292d75 fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev | * 985f966669 udf: Fix uninitialized array access for some pathnames | * 579d814de8 quota: fix warning in dqgrab() | * 32c2f51fff quota: Properly disable quotas when add_dquot_ref() fails | * d363075066 ALSA: emu10k1: roll up loops in DSP setup code for Audigy | * c0d7dbc6b7 drm/radeon: Fix integer overflow in radeon_cs_parser_init | * bca9fb7a5a ext4: correct inline offset when handling xattrs in inode body | * 87336783d0 ASoC: codecs: wcd938x: fix soundwire initialisation race | * a14527c394 ASoC: codecs: wcd938x: fix codec initialisation race | * 4ca000456e ASoC: codecs: wcd934x: fix resource leaks on component remove | * 5a34d25205 ASoC: codecs: wcd938x: fix missing mbhc init error handling | * aa44782a02 ASoC: codecs: wcd938x: fix resource leaks on component remove | * 90ab6446eb ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove | * a05a277a8d ASoC: codecs: wcd938x: fix missing clsh ctrl error handling | * 574ffa6fdf ASoC: fsl_sai: Disable bit clock with transmitter | * 925bbcdbc4 drm/amd/display: Keep PHY active for DP displays on DCN31 | * 742340371b drm/amd/display: Disable MPC split by default on special asic | * 1369d0c586 drm/client: Fix memory leak in drm_client_modeset_probe | * a85e23a1ef drm/client: Fix memory leak in drm_client_target_cloned | * 82690148ff selftests: tc: add ConnTrack procfs kconfig | * 3c3941bb1e can: bcm: Fix UAF in bcm_proc_show() | * 1484537876 regmap: Account for register length in SMBus I/O limits | * 6ce258d0c6 regmap: Drop initial version of maximum transfer length fixes | * d3ee089a16 selftests: tc: add 'ct' action kconfig dep | * 4a888b22cc selftests: tc: set timeout to 15 minutes | * 62ee584032 fuse: ioctl: translate ENOSYS in outarg | * ab80a901f8 btrfs: zoned: fix memory leak after finding block group with super blocks | * 6ba7ac692a fuse: revalidate: don't invalidate if interrupted | * c9060caab4 btrfs: fix warning when putting transaction with qgroups enabled after abort | * 232a104e38 perf probe: Add test for regression introduced by switch to die_get_decl_file() | * 9aecfebea2 keys: Fix linking a duplicate key to a keyring's assoc_array | * 0b24b5e187 ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx | * 2d04042a9f ALSA: hda/realtek: Add quirk for Clevo NS70AU | * a5de09b7f9 ALSA: hda/realtek - remove 3k pull low procedure * | 19f4d8d2d0 Merge android14-5.15 into android14-5.15-lts * | 72b4713d5e Merge 5.15.122 into android14-5.15-lts |\| | * 5c6a716301 Linux 5.15.122 | * be824fdb82 x86/cpu/amd: Add a Zenbleed fix | * 5398be2c48 x86/cpu/amd: Move the errata checking functionality up * | 2b60f8671a Revert "Revert "8250: add support for ASIX devices with a FIFO bug"" * | 4b20633d79 BACKPORT: mm/damon/ops-common: atomically test and clear young on ptes and pmds * | 9f5bde3ccf Merge 5.15.121 into android14-5.15-lts |\| | * cdd3cdb682 Linux 5.15.121 | * 30580f3a33 drm/atomic: Fix potential use-after-free in nonblocking commits | * ab2fa2fafb net/sched: sch_qfq: reintroduce lmax bound check for MTU | * 204d7c36e8 MIPS: kvm: Fix build error with KVM_MIPS_DEBUG_COP0_COUNTERS enabled | * 522ee1b303 scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue | * 0715da5139 scsi: qla2xxx: Pointer may be dereferenced | * 541af83572 scsi: qla2xxx: Correct the index of array | * 1ccd52b790 scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() | * 5a52a2e14f scsi: qla2xxx: Fix potential NULL pointer dereference | * 89250e775d scsi: qla2xxx: Fix buffer overrun | * 4406fe8a96 scsi: qla2xxx: Avoid fcport pointer dereference | * 748d8f8698 scsi: qla2xxx: Array index may go out of bound | * 079c8264ed scsi: qla2xxx: Wait for io return on terminate rport | * 25d63eb730 tracing/probes: Fix to update dynamic data counter if fetcharg uses it | * 8277bcacf1 tracing/probes: Fix not to count error code to total length | * 610193a23f selftests: mptcp: depend on SYN_COOKIES | * c8b375871e selftests: mptcp: sockopt: return error if wrong mark | * 3b5d9b7b87 tracing: Fix null pointer dereference in tracing_err_log_open() | * 391da52c87 xtensa: ISS: fix call to split_if_spec | * 179feeeef6 ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() | * bb14a93bcc ring-buffer: Fix deadloop issue on reading trace_pipe | * 3e36cc94d6 net: ena: fix shift-out-of-bounds in exponential backoff | * b763e63424 samples: ftrace: Save required argument registers in sample trampolines | * 954792db9f tracing: Fix memory leak of iter->temp when reading trace_pipe | * 97f54b330c tracing/histograms: Add histograms to hist_vars if they have referenced variables | * b45a33897f s390/decompressor: fix misaligned symbol build error | * 1856cf9132 bus: ixp4xx: fix IXP4XX_EXP_T1_MASK | * 7269c250dd Revert "8250: add support for ASIX devices with a FIFO bug" | * 20f7c4d51c soundwire: qcom: fix storing port config out-of-bounds | * 39a0e723d3 opp: Fix use-after-free in lazy_opp_tables after probe deferral | * 0ff4a97ac2 meson saradc: fix clock divider mask length | * e5fdd73c88 xhci: Show ZHAOXIN xHCI root hub speed correctly | * 6eaedbffec xhci: Fix TRB prefetch issue of ZHAOXIN hosts | * 328b18a42a xhci: Fix resume issue of some ZHAOXIN hosts | * d9c91ef5d8 ceph: don't let check_caps skip sending responses for revoke msgs | * db8ca8d9b4 libceph: harden msgr2.1 frame segment length checks | * 974ac045a0 firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() | * becf8c69b7 tty: serial: imx: fix rs485 rx after tx | * 9dd8091959 tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk | * 073dbbe574 tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error | * 21e2fe510a serial: atmel: don't enable IRQs prematurely | * af4e0ce2af drm/ttm: Don't leak a resource on swapout move error | * 22c16c896c drm/amdgpu: avoid restore process run into dead loop. | * 85b9335d8e drm/amd/display: Correct `DMUB_FW_VERSION` macro | * 9ced7e65c3 drm/amdgpu: fix clearing mappings for BOs that are always valid in VM | * 0121d83ddf drm/rockchip: vop: Leave vblank enabled in self-refresh | * 941a395e96 drm/atomic: Allow vblank-enabled + self-refresh "disable" | * 54163ad21e fs: dlm: return positive pid value for F_GETLK | * 866bf37b7c dm init: add dm-mod.waitfor to wait for asynchronously probed block devices | * 4f61488541 md/raid0: add discard support for the 'original' layout | * 3435c5674e mfd: pm8008: Fix module autoloading | * 560c458340 misc: pci_endpoint_test: Re-init completion for every test | * 14bdee38e9 misc: pci_endpoint_test: Free IRQs before removing the device | * eec34da87b PCI: rockchip: Set address alignment for endpoint mode | * 750fd00a0a PCI: rockchip: Use u32 variable to access 32-bit registers | * 875d7a7f85 PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core | * 7b0026977a PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked | * 049d774b8b PCI: rockchip: Write PCI Device ID to correct register | * 20c62b3c1e PCI: rockchip: Assert PCI Configuration Enable bit after probe | * e8cc74b6b4 PCI: qcom: Disable write access to read only registers for IP v2.3.3 | * 7b2f1ddc94 PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 | * 1d24c5b10d PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold | * f930cf3f21 dm integrity: reduce vmalloc space footprint on 32-bit architectures | * 70564215ad hwrng: imx-rngc - fix the timeout for init and self check | * de984faecd jfs: jfs_dmap: Validate db_l2nbperpage while mounting | * d04a3ff04c ext4: only update i_reserved_data_blocks on successful block allocation | * c327b83c59 ext4: turn quotas off if mount failed after enabling quotas | * 8830523440 ext4: fix to check return value of freeze_bdev() in ext4_shutdown() | * c7514dceb7 ext4: fix wrong unit use in ext4_mb_new_blocks | * 5523851fad ext4: get block from bh in ext4_free_blocks for fast commit replay | * ba92af119b ext4: fix wrong unit use in ext4_mb_clear_bb | * 951ee9c9bb ext4: Fix reusing stale buffer heads from last failed mounting | * cd517f9a9d MIPS: KVM: Fix NULL pointer dereference | * fd89522a61 MIPS: Loongson: Fix cpu_probe_loongson() again | * 0e1854f87b erofs: fix compact 4B support for 16k block size | * e4e7f67cc1 arm64: errata: Add detection for TRBE overwrite in FILL mode | * affdbc8fbc powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 | * 9f1627d8b0 misc: fastrpc: Create fastrpc scalar with correct buffer count | * faea67e6a5 powerpc: Fail build if using recordmcount with binutils v2.37 | * 7eeed3ed1a mm/damon/ops-common: atomically test and clear young on ptes and pmds | * 7efc5bee24 net: bcmgenet: Ensure MDIO unregistration has clocks enabled | * 626c1c2913 mtd: rawnand: meson: fix unaligned DMA buffers handling | * e08295290c tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation | * 936adde9c3 pinctrl: amd: Only use special debounce behavior for GPIO 0 | * 0bcf6b12e6 pinctrl: amd: Detect and mask spurious interrupts | * dff67c64f6 pinctrl: amd: Detect internal GPIO0 debounce handling | * cc5050add0 pinctrl: amd: Fix mistake in handling clearing pins at startup | * 982c29e0d2 f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() | * 333feb7ba8 fs/ntfs3: Check fields while reading | * 04d2c9a6cb nvme-pci: fix DMA direction of unmapping integrity data | * c58e45fbea nvme-pci: remove nvme_queue from nvme_iod | * 91d3554ab1 net/sched: sch_qfq: account for stab overhead in qfq_enqueue | * 8e0326cbc4 net/sched: sch_qfq: refactor parsing of netlink parameters | * 78a0900e8d net/sched: make psched_mtu() RTNL-less safe | * 31976c68be netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write() | * 8a128e601f riscv: mm: fix truncation warning on RV32 | * 3bd945532d net/sched: flower: Ensure both minimum and maximum ports are specified | * d26299f50f bpf: cpumap: Fix memory leak in cpu_map_update_elem | * 099abb1cd2 wifi: airo: avoid uninitialized warning in airo_get_rate() | * 0e9ebc1745 erofs: fix fsdax unavailability for chunk-based regular files | * 41ccbc2ecb erofs: decouple basic mount options from fs_context | * ed84618f8d erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF | * e649333bcf octeontx2-pf: Add additional check for MCAM rules | * c62da24de3 drm/i915: Fix one wrong caching mode enum usage | * 567397dd8e riscv, bpf: Fix inconsistent JIT image generation | * 4e4e1f99bb bpf, riscv: Support riscv jit to provide bpf_line_info | * 420d30d367 igc: Fix inserting of empty frame for launchtime | * efc7f25937 igc: Fix launchtime before start of cycle | * d29387922b kernel/trace: Fix cleanup logic of enable_trace_eprobe | * 7aefc43277 platform/x86: wmi: Break possible infinite loop when parsing GUID | * 02081e5718 platform/x86: wmi: move variables | * f3583db898 platform/x86: wmi: use guid_t and guid_equal() | * 3b6fef4110 platform/x86: wmi: remove unnecessary argument | * 82abd1c37d ipv6/addrconf: fix a potential refcount underflow for idev | * 1d63fdf6d3 NTB: ntb_tool: Add check for devm_kcalloc | * 0aa187a999 NTB: ntb_transport: fix possible memory leak while device_register() fails | * 7e475cf97c ntb: intel: Fix error handling in intel_ntb_pci_driver_init() | * 3326ecef63 NTB: amd: Fix error handling in amd_ntb_pci_driver_init() | * fe1a2ed411 ntb: idt: Fix error handling in idt_pci_driver_init() | * 7f2153c1ae udp6: fix udp6_ehashfn() typo | * 3fabca5d9c icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). | * ea438eed94 net: prevent skb corruption on frag list segmentation | * 02474292a4 net: bgmac: postpone turning IRQs off to avoid SoC hangs | * 1417dd787a ionic: remove WARN_ON to prevent panic_on_warn | * aa915d12c1 gve: Set default duplex configuration to full | * 5b55f2d6ef net/sched: cls_fw: Fix improper refcount update leads to use-after-free | * 1d263bbdc5 net: mvneta: fix txq_map in case of txq_number==1 | * 4a4804e6ae bpf: Fix max stack depth check for async callbacks | * 1b555dff83 scsi: qla2xxx: Fix error code in qla2x00_start_sp() | * 6e8af127dd igc: Handle PPS start time programming for past time values | * 809ea3a3eb igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings | * 82ac62d76a net/mlx5e: Check for NOT_READY flag state after locking | * 4892e1e548 net/mlx5e: fix memory leak in mlx5e_ptp_open | * c61303ae2c net/mlx5e: fix double free in mlx5e_destroy_flow_table | * f4b1f26251 igc: Remove delay during TX ring configuration | * b3540c0de8 drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags | * 9dbc0fa2e8 drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime | * 486b2551b0 drm/panel: simple: Add connector_type for innolux_at043tn24 | * eb94740351 ksmbd: validate session id and tree id in the compound request | * 3813eee515 ksmbd: fix out-of-bound read in smb2_write | * 35f450f54d ksmbd: validate command payload size | * 08871ede83 ksmbd: use ksmbd_req_buf_next() in ksmbd_smb2_check_message() | * d528faa9e8 workqueue: clean up WORK_* constant types, clarify masking | * aed37b12a2 net: lan743x: Don't sleep in atomic context | * d9e1cfae8d io_uring: add reschedule point to handle_tw_list() | * f8307d862c io_uring: Use io_schedule* in cqring wait | * ecb9443b20 block/partition: fix signedness issue for Amiga partitions | * 478a7a30c3 tty: serial: fsl_lpuart: add earlycon for imx8ulp platform | * 75308d64c0 wireguard: netlink: send staged packets when setting initial private key | * 8c660cfd72 wireguard: queueing: use saner cpu selection wrapping | * 870dcc31c0 netfilter: nf_tables: prevent OOB access in nft_byteorder_eval | * 041e2ac88c netfilter: nf_tables: do not ignore genmask when looking up chain by id | * 6f03ce2f1a netfilter: conntrack: Avoid nf_ct_helper_hash uses after free | * 2bd6f13734 netfilter: nf_tables: unbind non-anonymous set if rule construction fails | * 30235c2457 fanotify: disallow mount/sb marks on kernel internal pseudo fs | * d97481c7b2 ovl: fix null pointer dereference in ovl_get_acl_rcu() | * db42d2bf4f fs: no need to check source | * 86b93cbfe1 leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename | * ecc8d95067 ARM: orion5x: fix d2net gpio initialization | * 1c401bb993 ARM: dts: qcom: ipq4019: fix broken NAND controller properties override | * 02b5d96f7d ASoC: mediatek: mt8173: Fix snd_soc_component_initialize error path | * 5f35f98e56 ASoC: mediatek: mt8173: Fix irq error path | * 6e7f6b4b5c btrfs: do not BUG_ON() on tree mod log failure at __btrfs_cow_block() | * bdc8a582e1 btrfs: fix extent buffer leak after tree mod log failure at split_node() | * 7ba0da31dd btrfs: fix race when deleting quota root from the dirty cow roots list | * bacd1c80e3 btrfs: reinsert BGs failed to reclaim | * d1ca553f94 btrfs: bail out reclaim process if filesystem is read-only | * d8e172616f btrfs: delete unused BGs while reclaiming BGs | * 12b6d68498 btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile | * dd15d1c5c2 fs: avoid empty option when generating legacy mount string | * 79b9ab357b jffs2: reduce stack usage in jffs2_build_xattr_subsystem() | * 5ca021be52 ipvs: increase ip_vs_conn_tab_bits range for 64BIT | * 6db001a7ed fs: Lock moved directories | * 40f99ad8e2 fs: Establish locking order for unrelated directories | * 8fdae421c2 Revert "f2fs: fix potential corruption when moving a directory" | * eca9c3d86d ext4: Remove ext4 locking of moved directory | * 487f229efe shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs | * 17bdba70a8 autofs: use flexible array in ioctl structure | * e7acd18e5e integrity: Fix possible multiple allocation in integrity_inode_get() | * f4e0809d3a um: Use HOST_DIR for mrproper | * f67b0e3081 bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent | * 991e9c186a bcache: Remove unnecessary NULL point check in node allocations | * cbdd5b3322 bcache: fixup btree_cache_wait list damage | * 99d0599742 mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used. | * c893918bf4 mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS | * 4a489c8e9c mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M | * 5b555f2500 mmc: core: disable TRIM on Kingston EMMC04G-M627 | * 8e29835366 io_uring: wait interruptibly for request completions on exit | * e5da56c682 NFSD: add encoding of op_recall flag for write delegation | * 8a77b1d466 i2c: qup: Add missing unwind goto in qup_i2c_probe() | * 5bf90e5e79 btrfs: do not BUG_ON() on tree mod log failure at balance_level() | * e15eb4ec86 extcon: usbc-tusb320: Convert to i2c's .probe_new() | * 112c15d097 i2c: xiic: Don't try to handle more interrupt events after error | * 9eaef43fef i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() | * 0fa0cd1f98 apparmor: fix missing error check for rhashtable_insert_fast | * 196f6c7190 sh: dma: Fix DMA channel offset calculation | * 6342e46566 s390/qeth: Fix vipa deletion | * 307623bae6 octeontx-af: fix hardware timestamp configuration | * deee40944a net: dsa: tag_sja1105: fix MAC DA patching from meta frames | * e4db7f4369 pptp: Fix fib lookup calls. | * a4284246fc riscv: move memblock_allow_resize() after linear mapping is ready | * ae682149bc net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX | * edd944b70a xsk: Honor SO_BINDTODEVICE on bind | * 428ccde924 tcp: annotate data races in __tcp_oow_rate_limited() | * 0dad52a840 net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode | * ada440952d powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y | * f3380d895e ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr() | * e425e2ba93 octeontx2-af: Add validation before accessing cgx and lmac | * eeaf264cd4 octeontx2-af: Fix mapping for NIX block from CGX connection | * d58d718136 f2fs: fix error path handling in truncate_dnode() | * c0dd447558 mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 | * 217b6ea8cf spi: bcm-qspi: return error if neither hif_mspi nor mspi is available | * 2e2e5f9300 net: dsa: vsc73xx: fix MTU configuration | * b8aedf29db ibmvnic: Do not reset dql stats on NON_FATAL err | * 6a5a705fa8 Add MODULE_FIRMWARE() for FIRMWARE_TG357766. | * a6527128fe net/sched: act_ipt: add sanity checks on table name and hook locations | * 1fba2510b5 sctp: fix potential deadlock on &net->sctp.addr_wq_lock | * baa76d9b61 media: cec: i2c: ch7322: also select REGMAP | * 677c5707ec drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times | * 2a0acbc6b7 rtc: st-lpc: Release some resources in st_rtc_probe() in case of error | * 7834580ca1 md/raid10: fix the condition to call bio_end_io_acct() | * d623fd42a0 pwm: mtk_disp: Fix the disable flow of disp_pwm | * db3c7f3eb8 pwm: ab8500: Fix error code in probe() | * 05b35ea06d pwm: sysfs: Do not apply state to already disabled PWMs | * aa12faec23 pwm: imx-tpm: force 'real_period' to be zero in suspend | * 07e229f06e phy: tegra: xusb: check return value of devm_kzalloc() | * f7454b8fd2 mfd: stmpe: Only disable the regulators if they are enabled | * a9ccf140a2 KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler | * 2070f3e0bc KVM: s390: vsie: fix the length of APCB bitmap | * 52f371952a mfd: stmfx: Nullify stmfx->vdd in case of error | * b1dbc919c1 mfd: stmfx: Fix error path in stmfx_chip_init | * 9783c2ec8d nvmem: rmem: Use NVMEM_DEVID_AUTO | * e6bd54f497 test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation | * 22c7e378b0 serial: 8250_omap: Use force_suspend and resume for system suspend | * 10f6656c95 Revert "usb: common: usb-conn-gpio: Set last role to unknown before initial detection" | * 76ac2acb75 mfd: intel-lpss: Add missing check for platform_get_resource | * 0e8b1a2835 usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() | * f232c1caac usb: common: usb-conn-gpio: Set last role to unknown before initial detection | * dfda400a4d usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() | * 81ecef54d8 usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() | * f219ea71ee KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes | * de846dec7a media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() | * 7ad558baf6 media: venus: helpers: Fix ALIGN() of non power of two | * 3bedb7a273 mfd: rt5033: Drop rt5033-battery sub-device | * a77616f5a3 coresight: Fix loss of connection info when a module is unloaded | * ca9e766c8a kernfs: fix missing kernfs_idr_lock to remove an ID from the IDR | * e7ecade51b serial: 8250: lock port for UART_IER access in omap8250_irq() | * c1a4ad35c5 serial: 8250: lock port for stop_rx() in omap8250_irq() | * c2194a3610 usb: hide unused usbfs_notify_suspend/resume functions | * ecf26d6e1b usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() | * b10200650e extcon: Fix kernel doc of property capability fields to avoid warnings | * 44e383e22a extcon: Fix kernel doc of property fields to avoid warnings | * a8ea7ed644 usb: gadget: u_serial: Add null pointer check in gserial_suspend | * b626cd5e4a usb: dwc3: qcom: Fix potential memory leak | * 1cee6f0410 clk: qcom: ipq6018: fix networking resets | * 6ad5ded420 clk: qcom: reset: support resetting multiple bits | * 40844343a8 clk: qcom: reset: Allow specifying custom reset delay | * cab904bf50 media: i2c: Correct format propagation for st-mipid02 | * 784a8027b8 media: usb: siano: Fix warning due to null work_func_t function pointer | * 1e1af31c4c media: videodev2.h: Fix struct v4l2_input tuner index comment | * a3727915b3 media: usb: Check az6007_read() return value | * 2a50c146cb clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks | * 8d762ad800 clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs | * 10e2b1c5d8 serial: 8250: omap: Fix freeing of resources on failed register | * a1a5c56060 usb: dwc2: Fix some error handling paths | * fa1547b471 usb: dwc2: platform: Improve error reporting for problems during .remove() | * 0a9c0fa3e9 sh: j2: Use ioremap() to translate device tree address into kernel memory | * 629e97f0c8 w1: fix loop in w1_fini() | * cb263e9b6d w1: w1_therm: fix locking behavior in convert_t | * fbf4ace39b SUNRPC: Fix UAF in svc_tcp_listen_data_ready() | * 92905470a1 block: increment diskseq on all media change events | * 8744a9eda7 block: change all __u32 annotations to __be32 in affs_hardblocks.h | * de4d538380 block: add overflow checks for Amiga partition support | * bc0129a644 block: fix signed int overflow in Amiga partition support | * 92a37fc522 ALSA: jack: Fix mutex call in snd_jack_report() | * 2f533bcb07 ALSA: hda/realtek: Add quirk for Clevo NPx0SNx | * 5bcdfe1544 iio: accel: fxls8962af: fixup buffer scan element type | * 8cc75ce657 iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF | * 92cee2da5b iio: adc: ad7192: Fix internal/external clock selection | * f88a05ef44 iio: adc: ad7192: Fix null ad7192_state pointer access | * b84998a407 phy: tegra: xusb: Clear the driver reference in usb-phy dev | * 8585c6cb03 usb: dwc3: gadget: Propagate core init errors to UDC during pullup | * 9cd1627ff0 USB: serial: option: add LARA-R6 01B PIDs | * fb348857e7 io_uring: ensure IOPOLL locks around deferred work | * 4909d0ad17 bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page | * 902256de2b ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error | * b3889a5990 ksmbd: avoid field overflow warning | * ef26b05023 efi/libstub: Disable PCI DMA before grabbing the EFI memory map | * 5c883c42bd kbuild: Disable GCOV for *.mod.o | * 3d9f6fc71d hwrng: st - keep clock enabled while hwrng is registered | * cd5bd4b713 dax/kmem: Pass valid argument to memory_group_register_static | * 2a327c8c31 dax: Introduce alloc_dev_dax_id() | * 9c2f993b6c dax: Fix dax_mapping_release() use after free | * 63fb45ddc4 SMB3: Do not send lease break acknowledgment if all file handles have been closed | * 7f6023610b NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION | * 6d9f814b26 crypto: qat - unmap buffers before free for RSA | * 718f30e30b crypto: qat - unmap buffer before free for DH | * 3894f5880f crypto: qat - Use helper to set reqsize | * 30682e1214 crypto: kpp - Add helper to set reqsize | * 41bd35a161 crypto: qat - use reference to structure in dma_map_single() | * a3fcd2d23d crypto: qat - replace get_current_node() with numa_node_id() | * 9560559cba crypto: qat - honor CRYPTO_TFM_REQ_MAY_SLEEP flag | * f6ee18555b ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard | * 5e0424cd8a modpost: fix off by one in is_executable_section() | * 7c0c62e557 crypto: marvell/cesa - Fix type mismatch warning | * 6bfdced5b6 modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} | * cd7806eec3 modpost: fix section mismatch message for R_ARM_ABS32 | * 7543ffe03a crypto: nx - fix build warnings when DEBUG_FS is not enabled | * b030d23925 modpost: remove broken calculation of exception_table_entry size | * c76d991b6f hwrng: virtio - Fix race on data_avail and actual data | * 64410e7b03 hwrng: virtio - always add a pending request | * 9a9ef96529 hwrng: virtio - don't waste entropy | * f5634d2154 hwrng: virtio - don't wait on cleanup | * 91806246e4 hwrng: virtio - add an internal buffer | * 36874844f7 powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary | * 271c25008a powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo | * fafeeb398d riscv: uprobes: Restore thread.bad_cause | * 3786416e1f powerpc: update ppc_save_regs to save current r1 in pt_regs | * b08d9a11df powerpc: simplify ppc_save_regs | * d3a0d96c16 powerpc/powernv/sriov: perform null check on iov before dereferencing iov | * 0a95dd17a7 pinctrl: at91-pio4: check return value of devm_kasprintf() | * 50aa3e6abb pinctrl: microchip-sgpio: check return value of devm_kasprintf() | * f7d9231300 powerpc/64s: Fix VAS mm use after free | * 5e79521da1 perf dwarf-aux: Fix off-by-one in die_get_varname() | * ac6c849428 perf script: Fix allocation of evsel->priv related to per-event dump files | * 939bf462a1 powerpc/signal32: Force inlining of __unsafe_save_user_regs() and save_tm_user_regs_unsafe() | * 7d25fc45c4 powerpc/interrupt: Don't read MSR from interrupt_exit_kernel_prepare() | * d4f3531cd2 kcsan: Don't expect 64 bits atomic builtins from 32 bits architectures | * 196f18dd7f pinctrl: cherryview: Return correct value if pin in push-pull mode | * c92365c3f3 perf bench: Add missing setlocale() call to allow usage of %'d style formatting | * e456d9b2dd perf bench: Use unbuffered output when pipe/tee'ing to a file | * c02b496d92 PCI: Add pci_clear_master() stub for non-CONFIG_PCI | * d1bfe6ca73 PCI: ftpci100: Release the clock resources | * 7fe2876aac PCI: pciehp: Cancel bringup sequence if card is not present | * dfbf41e4fc scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() | * 9856c0de49 PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free | * 6053df4da4 pinctrl: bcm2835: Handle gpiochip_add_pin_range() errors | * b1de5105d2 scsi: qedf: Fix NULL dereference in error handling | * 48e6b7602e PCI: vmd: Reset VMD config register between soft reboots | * 34c701b52d PCI: cadence: Fix Gen2 Link Retraining process | * a326cf0107 clk: Fix memory leak in devm_clk_notifier_register() | * a0e7e33b8c ASoC: imx-audmix: check return value of devm_kasprintf() | * 62f29ca45f ovl: update of dentry revalidate flags after copy up | * a089ec635a drivers: meson: secure-pwrc: always enable DMA domain | * 8ca6b2add2 clk: ti: clkctrl: check return value of kasprintf() | * b700e5d4fe clk: keystone: sci-clk: check return value of kasprintf() | * 06759faca0 clk: si5341: free unused memory on probe failure | * 34b11a9a7d clk: si5341: check return value of {devm_}kasprintf() | * 4ade98acef clk: si5341: return error if one synth clock registration fails | * 9875046f14 clk: cdce925: check return value of kasprintf() | * d8832e85a1 clk: vc5: check memory returned by kasprintf() | * f180408f16 drm/msm/dpu: correct MERGE_3D length | * e45377cfe1 arm64: dts: mediatek: mt8192: Fix CPUs capacity-dmips-mhz | * 30111c478b arm64: dts: mediatek: Add cpufreq nodes for MT8192 | * 3c3f3d35f5 drm/msm/dp: Free resources after unregistering them | * ec3b55b2c9 drm/msm/dpu: do not enable color-management if DSPPs are not available | * 300e26e3e6 ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer | * fd1c117bb5 clk: tegra: tegra124-emc: Fix potential memory leak | * 2f276dd9c0 clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider() | * 141d87977b arm64: dts: qcom: sm8250-edo: Panel framebuffer is 2.5k instead of 4k | * bcea444ab4 clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() | * 50b5ddde8f clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe | * 1fb12e7716 RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context | * 79226176cd RDMA/bnxt_re: wraparound mbox producer index | * bf35c202a3 drm/msm/a5xx: really check for A510 in a5xx_gpu_init | * 4300a47e40 amdgpu: validate offset_in_bo of drm_amdgpu_gem_va | * 9b8087950b drm/radeon: fix possible division-by-zero errors | * b979dc54b6 drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode | * 52c2b295e3 drm/amdkfd: Fix potential deallocation of previously deallocated memory. | * 95afd2c7c7 ARM: dts: BCM5301X: fix duplex-full => full-duplex | * 838534e86c hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 | * 31c90fa841 hwmon: (adm1275) Allow setting sample averaging | * 3ff1062bd0 hwmon: (gsc-hwmon) fix fan pwm temperature scaling | * 535eafe715 ARM: dts: stm32: fix i2s endpoint format property for stm32mp15xx-dkx | * 8909898d0b ARM: dts: stm32: Fix audio routing on STM32MP15xx DHCOM PDK2 | * 555ddd671c arm64: dts: ti: k3-j7200: Fix physical address of pin | * 716efd0898 fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() | * 95cb88a853 arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 | * 06c6fdaa11 ARM: dts: iwg20d-q7-common: Fix backlight pwm specifier | * 8ac3083a26 RDMA/hns: Fix hns_roce_table_get return value | * 8d158b32cb IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate | * b2ffd8212e IB/hfi1: Use bitmap_zalloc() when applicable | * 192ab38065 RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes | * f5ca4d358b soc/fsl/qe: fix usb.c build errors | * 9dcc95e3fc ARM: dts: meson8: correct uart_B and uart_C clock references | * 1b4d08bdc0 ASoC: es8316: Do not set rate constraints for unsupported MCLKs | * b324de100d ASoC: es8316: Increment max value for ALC Capture Target Volume control | * 38d04765ad memory: brcmstb_dpfe: fix testing array offset after use | * 17b723acee ARM: dts: stm32: Shorten the AV96 HDMI sound card name | * 9c14802f14 arm64: dts: mediatek: mt8183: Add mediatek,broken-save-restore-fw to kukui | * 8f08ff836c arm64: dts: qcom: apq8096: fix fixed regulator name property | * 2e8c8fd792 ARM: omap2: fix missing tick_broadcast() prototype | * 016aeb9a76 ARM: ep93xx: fix missing-prototype warnings | * 314850a4d0 drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H | * 04f16697d3 arm64: dts: qcom: apq8016-sbc: Fix 1.8V power rail on LS expansion | * 7ce11e9098 arm64: dts: qcom: apq8016-sbc: Fix regulator constraints | * 8d139a395d arm64: dts: qcom: Drop unneeded extra device-specific includes | * 078578f608 arm64: dts: qcom: apq8016-sbc: fix mpps state names | * 25d624af5a arm64: dts: qcom: apq8016-sbc: Clarify firmware-names | * d7d784424a arm64: dts: qcom: apq8016-sbc: Update modem and WiFi firmware path | * 6a843066e0 arm64: dts: qcom: db820c: Move blsp1_uart2 pin states to msm8996.dtsi | * 23f7e4bf89 arm64: dts: qcom: sdm845: correct camss unit address | * dea5289b05 arm64: dts: qcom: sdm630: correct camss unit address | * b12e9fb281 arm64: dts: qcom: msm8996: correct camss unit address | * 5a8bbab2b1 arm64: dts: qcom: msm8994: correct SPMI unit address | * 46474b10dc arm64: dts: qcom: msm8916: correct camss unit address | * b4ed5be2ea ARM: dts: gta04: Move model property out of pinctrl node | * 70b8eeb7c6 drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK | * 2422edc225 drm/msm/disp/dpu: get timing engine status from intf status register | * adac5cf609 drm/msm/dsi: don't allow enabling 14nm VCO with unprogrammed rate | * 6882389691 RDMA/bnxt_re: Fix to remove an unnecessary log | * b41dd1d896 RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid | * 9ccca79eb3 RDMA/bnxt_re: Use unique names while registering interrupts | * ced019c1f9 RDMA/bnxt_re: Fix to remove unnecessary return labels | * adc129e894 RDMA/bnxt_re: Disable/kill tasklet only if it is enabled | * f95ff838ac clk: imx: scu: use _safe list iterator to avoid a use after free | * f564dd7109 arm64: dts: microchip: sparx5: do not use PSCI on reference boards | * 3752e6a98e bus: ti-sysc: Fix dispc quirk masking bool variables | * 6d07673027 ARM: dts: stm32: Move ethernet MAC EEPROM from SoM to carrier boards | * a14e6f9392 drm/panel: sharp-ls043t1le01: adjust mode settings | * 6b5a02a572 drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` | * ec43cfdcbd Input: adxl34x - do not hardcode interrupt trigger type | * fd6cdc56ee ARM: dts: meson8b: correct uart_B and uart_C clock references | * 5899bc4058 ARM: dts: BCM5301X: Drop "clock-names" from the SPI node | * ba51c4072f drm/vram-helper: fix function names in vram helper doc | * 019f013e8b drm/bridge: tc358768: fix THS_TRAILCNT computation | * ed8bfa0461 drm/bridge: tc358768: fix TXTAGOCNT computation | * cec2271095 drm/bridge: tc358768: fix THS_ZEROCNT computation | * 47b8546301 drm/bridge: tc358768: fix TCLK_TRAILCNT computation | * a07e6484f9 drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation | * 34b805ab38 drm/bridge: tc358768: fix TCLK_ZEROCNT computation | * 9e0668ecef drm/bridge: tc358768: fix PLL target frequency | * 81bb5e859f drm/bridge: tc358768: fix PLL parameters computation | * 6451b3274f drm/bridge: tc358768: always enable HS video mode | * 26a0ba5d16 Input: drv260x - sleep between polling GO bit | * efb61a7185 drm/amd/display: Explicitly specify update type per plane info change | * 53e0a5ba9d radeon: avoid double free in ci_dpm_init() | * 6173df9026 drm/amd/display: Add logging for display MALL refresh setting | * a4b0164fc1 netlink: Add __sock_i_ino() for __netlink_diag_dump(). | * 04daf3f674 ipvlan: Fix return value of ipvlan_queue_xmit() | * eb720f669b netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. | * c052797ac3 netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one | * 5848ad4250 lib/ts_bm: reset initial match offset for every block of text | * fc8429f8d8 net: nfc: Fix use-after-free caused by nfc_llcp_find_local | * 60ec0058c7 nfc: llcp: simplify llcp_sock_connect() error paths | * 91f4ef204e sfc: fix crash when reading stats while NIC is resetting | * 9ced40bf84 net: axienet: Move reset before 64-bit DMA detection | * ebd6d2077a gtp: Fix use-after-free in __gtp_encap_destroy(). | * 4f22f55dc8 selftests: rtnetlink: remove netdevsim device after ipsec offload test | * 029d892b05 bonding: do not assume skb mac_header is set | * 619384319b netlink: do not hard code device address lenth in fdb dumps | * a641240b7e netlink: fix potential deadlock in netlink_set_err() | * d4aee9512a net: stmmac: fix double serdes powerdown | * cfe147bdd0 igc: Fix race condition in PTP tx code | * c729f590fe can: length: fix bitstuffing count | * 4bc4797017 bpf: Fix bpf socket lookup from tc/xdp to respect socket VRF bindings | * a254e029b7 bpf: Call __bpf_sk_lookup()/__bpf_skc_lookup() directly via TC hookpoint | * 9eb2651c67 bpf: Factor out socket lookup functions for the TC hookpoint. | * a66cce0339 bpf: Omit superfluous address family check in __bpf_skc_lookup | * 7e3d771f85 wifi: ath9k: convert msecs to jiffies where needed | * 248fc11128 wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection | * 365cd15e8f wifi: cfg80211: rewrite merging of inherited elements * | ab76251526 ANDROID: ABI: Update STG ABI to format version 2 * | 2afb23c898 Merge 3b9de981fe ("wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler()") into android14-5.15-lts |\| | * 3b9de981fe wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() | * d0f665eee9 iwlwifi: don't dump_stack() when we get an unexpected interrupt | * a6db476ff3 wifi: iwlwifi: pull from TXQs with softirqs disabled | * a572c6852b rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO | * 48c2d1455a wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() | * 8c561a59c6 memstick r592: make memstick_debug_get_tpc_name() static | * 79c0fbf8f3 kexec: fix a memory leak in crash_shrink_memory() | * ed8d827f43 watchdog/perf: more properly prevent false positives with turbo modes | * c29d8d1f56 watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config | * 15b37d2b4a wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown | * 4391fa1808 wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled | * ac4bf9426a selftests/bpf: Fix check_mtu using wrong variable type | * 95b4b940f0 wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes | * ef24fe436b wifi: ray_cs: Fix an error handling path in ray_probe() | * 0700d878b0 wifi: ray_cs: Drop useless status variable in parse_addr() | * d696cbbe43 wifi: ray_cs: Utilize strnlen() in parse_addr() | * 93890d0573 wifi: wl3501_cs: Fix an error handling path in wl3501_probe() | * eaffd568a2 wl3501_cs: use eth_hw_addr_set() | * c6143548e6 wifi: atmel: Fix an error handling path in atmel_probe() | * 5a0a312d34 wifi: orinoco: Fix an error handling path in orinoco_cs_probe() | * f5bb5474f4 wifi: orinoco: Fix an error handling path in spectrum_cs_probe() | * ec856ca3b0 regulator: core: Streamline debugfs operations | * fc2f8b9054 regulator: core: Fix more error checking for debugfs_create_dir() | * 534508689e bpftool: JIT limited misreported as negative value on aarch64 | * e7e0b6e066 nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() | * edeb029dd9 spi: dw: Round of n_bytes to power of 2 | * ac6158b5c4 bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen | * 71754ee427 libbpf: fix offsetof() and container_of() to work with CO-RE | * 3e7ee33b95 sctp: add bpf_bypass_getsockopt proto callback | * a32a89bb04 wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() | * a55f88dd15 wifi: wilc1000: fix for absent RSN capabilities WFA testcase | * e215a8a428 spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG | * e92f61e070 samples/bpf: Fix buffer overflow in tcp_basertt | * c77eb01a6e libbpf: btf_dump_type_data_check_overflow needs to consider BTF_MEMBER_BITFIELD_SIZE | * ad5425e707 wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx | * 06da826e3b wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation | * 7930565596 igc: Enable and fix RX hash usage by netstack | * 38a9d7dac3 pstore/ram: Add check for kstrdup | * 745cec2bd3 ima: Fix build warnings | * 41da2c318c evm: Fix build warnings | * 757b06fb02 evm: Complete description of evm_inode_setattr() | * 85872ffac4 locking/atomic: arm: fix sync ops | * cf78062aa9 x86/mm: Fix __swp_entry_to_pte() for Xen PV guests | * bd4c759d31 perf/ibs: Fix interface via core pmu events | * 87666a7d3e kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined | * f766d45ab2 rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale | * bfe210f625 rcu/rcuscale: Move rcu_scale_*() after kfree_scale_cleanup() | * 751cb95117 rcuscale: Move shutdown from wait_event() to wait_event_idle() | * a6d33ea305 rcuscale: Always log error message | * e610497ba1 rcutorture: Correct name of use_softirq module parameter | * c756e8a227 thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() | * e2b32b0c5f cpufreq: intel_pstate: Fix energy_performance_preference for passive | * b51194170f ARM: 9303/1: kprobes: avoid missing-declaration warnings | * 4864c82cb8 powercap: RAPL: Fix CONFIG_IOSF_MBI dependency | * 2c06e0e010 perf/arm-cmn: Fix DTC reset | * 3c4f5aee37 PM: domains: fix integer overflow issues in genpd_parse_state() | * 289e2054ee clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe | * 5017132f2f tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode(). | * 0670c4c567 posix-timers: Prevent RT livelock in itimer_delete() | * f222873711 svcrdma: Prevent page release when nothing was received | * 6689782746 irqchip/jcore-aic: Fix missing allocation of IRQ descriptors | * e6b7362290 md/raid10: fix io loss while replacement replace rdev | * f4368a462b md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request | * 3c76920e54 md/raid10: fix wrong setting of max_corr_read_errors | * d3bf54a69b md/raid10: fix overflow of md/safe_mode_delay | * a134dd582c md/raid10: check slab-out-of-bounds in md_bitmap_get_counter | * eb120c0aff blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost | * 1bc29ba959 x86/resctrl: Only show tasks' pid in current pid namespace | * d9c194281b fs: pipe: reveal missing function protoypes | * 25aa2ad37c netfilter: nf_tables: drop map element references from preparation phase * | bf93b1c960 ANDROID: Set arch attribute for allmodconfig builds * | 6e44a01a15 Merge 5.15.120 into android14-5.15-lts |\| | * d54cfc4205 Linux 5.15.120 | * c06edf13f4 nubus: Partially revert proc_create_single_data() conversion | * 6e65fa33ed parisc: Delete redundant register definitions in <asm/assembly.h> | * b4d8f89000 drm/amdgpu: Validate VM ioctl flags. | * 26eb191bf5 scripts/tags.sh: Resolve gtags empty index generation | * 989b4a753c perf symbols: Symbol lookup with kcore can fail if multiple segments match stext | * 87f51cf60e Revert "thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe" | * 6a28f3490d HID: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651. | * 67ce772463 HID: wacom: Use ktime_t rather than int when dealing with timestamps | * 3477323177 bpf: ensure main program has an extable | * d874cf9799 can: isotp: isotp_sendmsg(): fix return error fix on TX path | * 27d03d15bb x86/smp: Use dedicated cache-line for mwait_play_dead() | * d6c745ca4f x86/microcode/AMD: Load late on both threads too | * 9052349685 drm/amdgpu: Set vmbo destroy after pt bo is created | * 796481bedc mm, hwpoison: when copy-on-write hits poison, take page offline | * 6713b8f11a mm, hwpoison: try to recover from copy-on write faults | * b46021ab83 mptcp: consolidate fallback and non fallback state machine | * 42ff95b4bd mptcp: fix possible divide by zero in recvmsg() * | cf7fcaaad7 ANDROID: GKI: update the .stg file * | 6f8b8ba07b Revert "gpio: Allow per-parent interrupt data" * | 5315d334e4 Revert "gpiolib: Fix GPIO chip IRQ initialization restriction" * | f05620ff64 Merge 5.15.119 into android14-5.15-lts |\| | * 4af60700a6 Linux 5.15.119 | * 10fbd2e04e act_mirred: remove unneded merge conflict markers | * 2230b3f874 i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle | * 907a069ec3 x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys | * 7949f83f7e vhost_net: revert upend_idx only on retriable error | * fdac0aa4a1 drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl | * f012d3037c drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl | * a44b4230d2 drm/exynos: vidi: fix a wrong error return | * 79b4125bce ARM: dts: Fix erroneous ADS touchscreen polarities | * 9684c4fdee s390/purgatory: disable branch profiling | * 3c4d87e9fa ASoC: nau8824: Add quirk to active-high jack-detect | * d77eac1b14 soundwire: dmi-quirks: add new mapping for HP Spectre x360 | * 53ad4af4ec ASoC: simple-card: Add missing of_node_put() in case of error | * bb45dc7b67 spi: lpspi: disable lpspi module irq in DMA mode | * f8d9d8f172 s390/cio: unregister device when the only path is gone | * e10d15fdfc Input: soc_button_array - add invalid acpi_index DMI quirk handling | * 26bde09a15 nvme: double KA polling frequency to avoid KATO with TBKAS on | * e3bbc14837 usb: gadget: udc: fix NULL dereference in remove() | * cce681383d nfcsim.c: Fix error checking for debugfs_create_dir | * 8a5ddd1430 media: cec: core: don't set last_initiator if tx in progress | * 01cf989090 arm64: Add missing Set/Way CMO encodings | * f97b16c0a5 HID: wacom: Add error check to wacom_parse_and_register() | * e8bdb1f886 scsi: target: iscsi: Prevent login threads from racing between each other | * 1cc379d53b gpio: sifive: add missing check for platform_get_irq | * 497d401408 gpiolib: Fix GPIO chip IRQ initialization restriction | * 7973c4b3b9 gpio: Allow per-parent interrupt data | * c1a2b52d99 sch_netem: acquire qdisc lock in netem_change() | * 3138c85031 selftests: forwarding: Fix race condition in mirror installation | * b7db41a865 bpf/btf: Accept function names that contain dots | * 0f8d81254f Revert "net: phy: dp83867: perform soft reset and retain established link" | * 57130334da netfilter: nfnetlink_osf: fix module autoload | * 53defc6ecf netfilter: nf_tables: disallow updates of anonymous sets | * 2f2f9eaa6d netfilter: nf_tables: reject unbound chain set before commit phase | * 2938e7d582 netfilter: nf_tables: reject unbound anonymous set before commit phase | * baa3ec1b31 netfilter: nf_tables: disallow element updates of bound anonymous sets | * 45eb6944d0 netfilter: nft_set_pipapo: .walk does not deal with generations | * 4004f12aac netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain | * 314a8697d0 netfilter: nf_tables: fix chain binding transaction logic | * 1328e8d4c3 be2net: Extend xmit workaround to BE3 chip | * 768f94c5f6 net: dsa: mt7530: fix handling of BPDUs on MT7530 switch | * aa528e7d37 net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch | * efea112a87 ipvs: align inner_mac_header for encapsulation | * 24d7d9aee0 mmc: usdhi60rol0: fix deferred probing | * d1e08bed03 mmc: sh_mmcif: fix deferred probing | * 34c4906b9a mmc: sdhci-acpi: fix deferred probing | * 41f1e8dab0 mmc: owl: fix deferred probing | * b86ca9e08c mmc: omap_hsmmc: fix deferred probing | * 445a9568de mmc: omap: fix deferred probing | * 840deb8d14 mmc: mvsdio: fix deferred probing | * 92f73c4f92 mmc: mtk-sd: fix deferred probing | * aedecd013d net: qca_spi: Avoid high load if QCA7000 is not available | * 156dd06fb3 xfrm: Linearize the skb after offloading if needed. | * d967bd7ea6 selftests: net: fcnal-test: check if FIPS mode is enabled | * 964cfdfd4b xfrm: fix inbound ipv4/udp/esp packets to UDPv6 dualstack sockets | * 25e89fa7b5 bpf: Fix verifier id tracking of scalars on spill | * 0b180495f6 bpf: track immediate values written to stack by BPF_ST instruction | * 3229a29e95 xfrm: Ensure policies always checked on XFRM-I input path | * d055ee18ca xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c | * 491ce3c1d9 xfrm: Treat already-verified secpath entries as optional | * 0ce3d0c068 ieee802154: hwsim: Fix possible memory leaks | * 29672dc47d mmc: meson-gx: fix deferred probing | * 9bac4a2b73 memfd: check for non-NULL file_seals in memfd_create() syscall | * 103734b429 x86/mm: Avoid using set_pgd() outside of real PGD pages | * 793d0224bb nilfs2: prevent general protection fault in nilfs_clear_dirty_page() | * 96987c383c io_uring/net: disable partial retries for recvmsg with cmsg | * 25a543ca30 io_uring/net: clear msg_controllen on partial sendmsg retry | * 34a7e5021a io_uring/net: save msghdr->msg_control for retries | * b07bb2914a writeback: fix dereferencing NULL mapping->host on writeback_page_template | * 3c46a240dd regmap: spi-avmm: Fix regmap_bus max_raw_write | * 4796d9b069 regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK | * ba9952e2f5 ip_tunnels: allow VXLAN/GENEVE to inherit TOS/TTL from VLAN | * acee272283 mmc: mmci: stm32: fix max busy timeout calculation | * 999173f295 mmc: meson-gx: remove redundant mmc_request_done() call from irq context | * 00010b52c7 mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916 | * 4a557910bb cgroup: Do not corrupt task iteration when rebinding subsystem | * 815b244011 PCI: hv: Add a per-bus mutex state_lock | * 34e21b8ff3 PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic | * 7d852ca7af PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev | * 5e0d33cc78 Revert "PCI: hv: Fix a timing issue which causes kdump to fail occasionally" | * ac0df91c7d PCI: hv: Fix a race condition bug in hv_pci_query_relations() | * 80c5d97b4a Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs | * 4d31eb2e26 Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails | * 953dd7e2df KVM: Avoid illegal stage2 mapping on invalid memory slot | * 1d6c932068 ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep() | * b12011cea5 nilfs2: fix buffer corruption due to concurrent device reads | * 485f6be254 selftests: mptcp: join: skip check if MIB counter not supported | * 64cb73ea77 selftests: mptcp: join: use 'iptables-legacy' if available | * 979a941d7e selftests: mptcp: pm nl: remove hardcoded default limits | * ac65930751 selftests/mount_setattr: fix redefine struct mount_attr build error | * 726d033133 selftests: mptcp: lib: skip if not below kernel version | * b28fc26683 selftests: mptcp: lib: skip if missing symbol | * 024a24e5d4 tick/common: Align tick period during sched_timer setup | * 3c1aa91b37 drm/amd/display: Add wrapper to call planes and stream update | * eea850c025 drm/amd/display: Use dc_update_planes_and_stream | * fb7c68bbcc drm/amd/display: Add minimal pipe split transition state | * b5f0e898f6 tpm, tpm_tis: Claim locality in interrupt handler | * 39e7872537 tracing: Add tracing_reset_all_online_cpus_unlocked() function | * 5a24be76af drm/amd/display: fix the system hang while disable PSR * | fe598ae9ca Revert "net: Remove DECnet leftovers from flow.h." * | 87e8932c28 Merge 5.15.118 into android14-5.15-lts |\| | * f676530194 Linux 5.15.118 | * e5bf1f7d1f nilfs2: reject devices with insufficient block count | * 2bc9231afc mmc: block: ensure error propagation for non-blk | * 4b7b50d4eb of: overlay: add entry to of_overlay_action_name[] | * 84770cc54e neighbour: delete neigh_lookup_nodev as not used | * 4180651825 net: Remove DECnet leftovers from flow.h. | * 4c39a2414a net: Remove unused inline function dst_hold_and_use() | * bb76281b6e neighbour: Remove unused inline function neigh_key_eq16() | * 67866cad76 rcu/kvfree: Avoid freeing new kfree_rcu() memory after old grace period | * c91ed3a5c2 cgroup: always put cset in cgroup_css_set_put_fork | * 33b801be2d afs: Fix vlserver probe RTT handling | * f824bcc3e1 selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET | * 2077c7dbfe net: tipc: resize nlattr array to correct size | * f734e16ee1 dm: don't lock fs when the map is NULL during suspend or resume | * 8a8179f6a3 net: lapbether: only support ethernet devices | * 052417e8b3 net/sched: cls_api: Fix lockup on flushing explicitly created chain | * c0cb9d453f ext4: drop the call to ext4_error() from ext4_get_group_info() | * eb4ccc102d cifs: fix lease break oops in xfstest generic/098 | * 1cb181271e drm/nouveau: add nv_encoder pointer check for NULL | * c79dccc263 drm/nouveau/dp: check for NULL nv_connector->native_mode | * 909b7f7497 drm/nouveau: don't detect DSM for non-NVIDIA device | * 10e1e07bde igb: fix nvm.ops.read() error handling | * fe03fd373c igc: Clean the TX buffer and TX descriptor ring | * 032b8cbeb1 sctp: fix an error code in sctp_sf_eat_auth() | * 981e78781a ipvlan: fix bound dev checking for IPv6 l3s mode | * 3e76522d1a net: ethtool: correct MAX attribute value for stats | * 18512de744 IB/isert: Fix incorrect release of isert connection | * 63e9e71983 IB/isert: Fix possible list corruption in CMA handler | * 29ff057c0a IB/isert: Fix dead lock in ib_isert | * fced7aaaa3 IB/uverbs: Fix to consider event queue closing also upon non-blocking mode | * cd44977ecc RDMA/cma: Always set static rate to 0 for RoCE | * 5a9dee176b RDMA/mlx5: Initiate dropless RQ for RAW Ethernet functions | * 35828874aa octeontx2-af: fix lbk link credits on cn10k | * 7506e77357 octeontx2-af: fixed resource availability check | * 4dd914b9e2 iavf: remove mask from iavf_irq_enable_queues() | * e6342cd13d RDMA/rxe: Fix the use-before-initialization error of resp_pkts | * 466f25fd2d RDMA/rxe: Removed unused name from rxe_task struct | * 13d087b358 RDMA/rxe: Remove the unused variable obj | * 0e1098d72f net/sched: cls_u32: Fix reference counter leak leading to overflow | * d56661cd8d net/sched: act_pedit: Parse L3 Header for L4 offset | * 17b330b782 net/sched: act_pedit: remove extra check for key type | * 219b8e9838 net/sched: simplify tcf_pedit_act | * 688e6db596 ping6: Fix send to link-local addresses with VRF. | * 471a4c08e3 net: enetc: correct the indexes of highest and 2nd highest TCs | * 44ebe988cb netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE | * 133b73d853 netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM | * e4188f8b81 netfilter: nf_tables: integrate pipapo into commit protocol | * 4da9d4e740 spi: fsl-dspi: avoid SCK glitches with continuous transfers | * 08acd41bb1 RDMA/rxe: Fix packet length checks | * 01f6f867ad RDMA/rtrs: Fix rxe_dealloc_pd warning | * 01bbead309 RDMA/rtrs: Fix the last iu->buf leak in err path | * 1938f080a1 usb: dwc3: gadget: Reset num TRBs before giving back the request | * ed02955049 serial: lantiq: add missing interrupt ack | * 235845b576 USB: serial: option: add Quectel EM061KGL series | * e05e9cca77 thunderbolt: Mask ring interrupt on Intel hardware as well | * 0bd227610c thunderbolt: dma_test: Use correct value for absent rings when creating paths | * 2a974abc09 Remove DECnet support from kernel | * 28010d3a9a ALSA: hda/realtek: Add a quirk for Compaq N14JP6 | * 203a01ae57 drm/amdgpu: add missing radeon secondary PCI ID | * b1b64a76b7 drm/amd/display: edp do not add non-edid timings | * 98c8c0f2b3 net: usb: qmi_wwan: add support for Compal RXM-G1 | * fd81222d1a RDMA/uverbs: Restrict usage of privileged QKEYs | * 14c30c2439 nouveau: fix client work fence deletion race | * f4c5eebb37 dm thin metadata: check fail_io before using data_sm | * ee09c0b1b0 ALSA: usb-audio: Add quirk flag for HEM devices to enable native DSD playback | * 953cc0bf2d powerpc/purgatory: remove PGO flags | * faf45f2c5e x86/purgatory: remove PGO flags | * d38e051ec6 kexec: support purgatories with .text.hot sections | * 4357336192 nilfs2: fix possible out-of-bounds segment allocation in resize ioctl | * 74ea184af9 nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() | * 941e7452df nios2: dts: Fix tse_mac "max-frame-size" property | * 8a8efde4a7 ocfs2: check new file size on fallocate call | * 559b7a0d9f ocfs2: fix use-after-free when unmounting read-only filesystem | * 8262a9f3b8 epoll: ep_autoremove_wake_function should use list_del_init_careful | * c0a2422955 wifi: cfg80211: fix double lock bug in reg_wdev_chan_valid() | * 1a65bac4ed wifi: cfg80211: fix locking in regulatory disconnect | * 0e388fce7a io_uring: hold uring mutex around poll removal | * 27825a6da7 irqchip/gic: Correctly validate OF quirk descriptors | * f50018e2dd NVMe: Add MAXIO 1602 to bogus nid list. | * 4204b539ca drm:amd:amdgpu: Fix missing buffer object unlock in failure path | * 7cb02d5dc2 xen/blkfront: Only check REQ_FUA for writes | * a75928bb92 ASoC: dwc: move DMA init to snd_soc_dai_driver probe() | * 37f7864c17 mips: Move initrd_start check after initrd address sanitisation. | * 0d6e654294 MIPS: Alchemy: fix dbdma2 | * 1907b6148f MIPS: unhide PATA_PLATFORM | * 8f50d247b5 parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory() | * 717368977b parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu() | * 7e85809d27 ASoC: soc-pcm: test if a BE can be prepared | * 68086376a1 btrfs: handle memory allocation failure in btrfs_csum_one_bio | * 39ea949526 btrfs: scrub: try harder to mark RAID56 block groups read-only | * 9df872ec4a power: supply: Fix logic checking if system is running from battery | * 42e6a4a1e0 irqchip/gic-v3: Disable pseudo NMIs on Mediatek devices w/ firmware issues | * 2105f2fa57 regulator: Fix error checking for debugfs_create_dir | * 91b3d6aa07 platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 | * c845ec79c3 power: supply: Ratelimit no data debug output | * 19d09d31da tools: gpio: fix debounce_period_us output of lsgpio | * c11bb961ca ARM: dts: vexpress: add missing cache properties | * 36fdd1d5b4 power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() | * 3b86c54e6e power: supply: sc27xx: Fix external_power_changed race | * 200d8ad44e power: supply: ab8500: Fix external_power_changed race | * 48992b9287 of: overlay: Fix missing of_node_put() in error case of init_overlay_changeset() | * 282f0c63cf of: overlay: rework overlay apply and remove kfree()s | * 5f306cbfa5 of: overlay: rename variables to be consistent | * 1cc40dccad drm/amdgpu: fix Null pointer dereference error in amdgpu_device_recover_vram | * 7cf3bf3cc0 ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate | * de091a6e1f test_firmware: fix a memory leak with reqs buffer | * bfb0b366e8 test_firmware: prevent race conditions by a correct implementation of locking | * 4b5511aa0a test_firmware: Use kstrtobool() instead of strtobool() * | 105a464bd6 Merge branch 'android14-5.15' into 'android14-5.15-lts' * | 7aef878cc2 Revert "neighbour: fix unaligned access to pneigh_entry" * | f5d9ff9c9c Revert "net/ipv6: fix bool/int mismatch for skip_notify_on_dev_down" * | 403dbb90c2 Merge 5.15.117 into android14-5.15-lts |\| | * 471e639e59 Linux 5.15.117 | * ef876dd258 Revert "staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE" | * 6cfe9ddb6a xfs: verify buffer contents when we skip log replay | * b5a52009d9 Revert "debugobject: Ensure pool refill (again)" | * 3cc6805547 ext4: only check dquot_initialize_needed() when debugging | * 86ebb5b534 Revert "ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled" | * 9945284195 vhost_vdpa: support PACKED when setting-getting vring_base | * 17882a3556 vhost: support PACKED when setting-getting vring_base | * d18688ff42 vduse: avoid empty string for dev name | * 952d1e4cbc riscv: fix kprobe __user string arg print fault issue | * 62958e78b7 eeprom: at24: also select REGMAP | * 66b99b3bd7 i2c: sprd: Delete i2c adapter in .remove's error path | * 58648a533a firmware: arm_ffa: Set handle field to zero in memory descriptor | * e1ab7ed792 i2c: mv64xxx: Fix reading invalid status value in atomic mode | * 003421fc43 arm64: dts: imx8mn-beacon: Fix SPI CS pinmux | * 2a4f0ad59d ASoC: mediatek: mt8195: fix use-after-free in driver remove path | * cc4a2c0b1e ASoC: mediatek: mt8195-afe-pcm: Convert to platform remove callback returning void | * 036bba96bf arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts | * d97c8306a9 arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP signals | * 2212344664 arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified sc7180-lite boards | * c589ba11da ASoC: codecs: wsa881x: do not set can_multi_write flag | * 980011869a ARM: dts: at91: sama7g5ek: fix debounce delay property for shdwc | * ac817e26f9 usb: usbfs: Use consistent mmap functions | * 35d9f521bc usb: usbfs: Enforce page requirements for mmap | * 64e4a3b253 pinctrl: meson-axg: add missing GPIOA_18 gpio group | * 4124536ad9 rbd: get snapshot context after exclusive lock is ensured to be held | * 1af3b16b62 rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting | * 2326488a96 tee: amdtee: Add return_origin to 'struct tee_cmd_load_ta' | * 0a8e5a6166 Bluetooth: hci_qca: fix debugfs registration | * 2a7e918e22 Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk | * 36482bf16f s390/dasd: Use correct lock while counting channel queue length | * fd03b5575c ceph: fix use-after-free bug for inodes when flushing capsnaps | * e022640b1f can: j1939: avoid possible use-after-free when j1939_can_rx_register fails | * 67eb5a5153 can: j1939: change j1939_netdev_lock type to mutex | * e2a6db7cab can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket | * 4ce28f3ab3 drm/amd/pm: Fix power context allocation in SMU13 | * 2984dbacf6 drm/amdgpu: fix xclk freq on CHIP_STONEY | * 77558dd165 drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid SKUs | * 4b1bf59460 drm/i915/gt: Use the correct error value when kernel_context() fails | * 17c01feed6 ALSA: hda/realtek: Add Lenovo P3 Tower platform | * 800e4c5b36 ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01 | * 9dab648ccd ALSA: hda/realtek: Add quirk for Clevo NS50AU | * cd67fdd3cc Input: fix open count when closing inhibited device | * 2545d1b4d1 Input: psmouse - fix OOB access in Elantech protocol | * ed263c550f Input: xpad - delete a Razer DeathAdder mouse VID/PID entry | * 5db4229b14 batman-adv: Broken sync while rescheduling delayed work | * aedad6c7fb bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks | * a94401de2b bnxt_en: Query default VLAN before VNIC setup on a VF | * cf0a3e9467 bnxt_en: Don't issue AP reset during ethtool's reset operation | * 40d074f7e4 lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() | * b6b1799c37 bpf: Add extra path pointer check to d_path helper | * a242c6a92c net: sched: fix possible refcount leak in tc_chain_tmplt_add() | * d7c69f7b83 net: sched: act_police: fix sparse errors in tcf_police_dump() | * e7e0f94974 net: sched: move rtm_tca_policy declaration to include file | * c5e0a2f49c drm/i915/selftests: Add some missing error propagation | * 234f0337b4 drm/i915/selftests: Stop using kthread_stop() | * 1f942073e1 drm/i915/selftests: Increase timeout for live_parallel_switch | * 3604ab1519 rfs: annotate lockless accesses to RFS sock flow table | * 2501f5a955 rfs: annotate lockless accesses to sk->sk_rxhash | * dd5296e3b2 ipv6: rpl: Fix Route of Death. | * eab6cda0bf netfilter: ipset: Add schedule point in call_ad(). | * 7b053b2e8c netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper | * 34d67ecf3d selftests/bpf: Fix sockopt_sk selftest | * 01363bf8ef selftests/bpf: Verify optval=NULL case | * 7e74801e1b wifi: cfg80211: fix locking in sched scan stop work | * 6c25c96a46 qed/qede: Fix scheduling while atomic | * 668c3f9514 Bluetooth: L2CAP: Add missing checks for invalid DCID | * 53c056ccda Bluetooth: Fix l2cap_disconnect_req deadlock | * c16e79e27e drm/i915: Use 18 fast wake AUX sync len | * 567873901a drm/i915: Explain the magic numbers for AUX SYNC/precharge length | * dd40bcc357 net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values | * 9d66ffd8ac net: enetc: correct the statistics of rx bytes | * 8db1acf2b1 net/smc: Avoid to access invalid RMBs' MRs in SMCRv1 ADD LINK CONT | * 9b001a7d1e net/ipv6: fix bool/int mismatch for skip_notify_on_dev_down | * c85bee3a4a bpf: Fix UAF in task local storage | * 54c8aea7e8 net: dsa: lan9303: allow vid != 0 in port_fdb_{add|del} methods | * ab0eca3f54 neighbour: fix unaligned access to pneigh_entry | * bdcc42186d wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll | * 7b0c76354a afs: Fix setting of mtime when creating a file/dir/symlink | * 8ef72e7830 spi: qup: Request DMA before enabling clocks | * f0e84db82e platform/surface: aggregator: Allow completion work-items to be executed in parallel | * 547da24832 blk-iocost: avoid 64-bit division in ioc_timer_fn | * 3b07425c3d f2fs: fix iostat lock protection | * b85fb01a76 bonding (gcc13): synchronize bond_{a,t}lb_xmit() types | * 0dfc81a283 i40e: fix build warning in ice_fltr_add_mac_to_list() | * 2e12542c19 i40e: use int for i40e_status | * 81f552df07 i40e: Remove string printing for i40e_status | * d13f56d4b2 sfc (gcc13): synchronize ef100_enqueue_skb()'s return type | * a9ad05e354 remove the sx8 block driver | * c7cf7760b9 gcc-plugins: Reorganize gimple includes for GCC 13 | * 8d00b4e329 ata: ahci: fix enum constants for gcc-13 * | 97a41de737 Revert "tcp: deny tcp_disconnect() when threads are waiting" * | 8340dc3122 Merge 5.15.116 into android14-5.15-lts |\| | * 7349e40704 Linux 5.15.116 | * 62886f17d3 RDMA/irdma: Do not generate SW completions for NOPs | * 14d148401c RDMA/irdma: Fix drain SQ hang with no completion | * e88b19b252 ARM: defconfig: drop CONFIG_DRM_RCAR_LVDS | * a1c76e2907 ext4: enable the lazy init thread when remounting read/write | * 76a7dfc9cc selftests: mptcp: join: skip if MPTCP is not supported | * 807114223d selftests: mptcp: simult flows: skip if MPTCP is not supported | * 9319c8b75e selftests: mptcp: diag: skip if MPTCP is not supported | * c971ca2b9d drm/amdgpu/gfx10: Disable gfxoff before disabling powergating. | * 7a20262fa9 scsi: dpt_i2o: Do not process completions with invalid addresses | * daeab37ddb scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD) | * 78a79c6252 drm/rcar: stop using 'imply' for dependencies | * 4c3dda6b7c tpm, tpm_tis: Request threaded interrupt handler | * 19750d7b57 regmap: Account for register length when chunking | * 6cb7e7579a KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() | * d56c2ab325 ksmbd: fix incorrect AllocationSize set in smb2_get_info | * 380b47932e ksmbd: fix credit count leakage | * 8a870c07a1 KVM: x86: Account fastpath-only VM-Exits in vCPU stats | * 808ed7d86e test_firmware: fix the memory leak of the allocated firmware buffer | * 4b7a35eb8a serial: 8250_tegra: Fix an error handling path in tegra_uart_probe() | * fc8ef07141 fbcon: Fix null-ptr-deref in soft_cursor | * a0790a7739 ext4: add lockdep annotations for i_data_sem for ea_inode's | * a8c3024c3e ext4: disallow ea_inodes with extended attributes | * 39a66e7a29 ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() | * bdbfbb7d50 ext4: add EA_INODE checking to ext4_iget() | * efa3fe247d selftests: mptcp: sockopt: skip if MPTCP is not supported | * 95ad73b627 selftests: mptcp: pm nl: skip if MPTCP is not supported | * 30bacfd8ca selftests: mptcp: connect: skip if MPTCP is not supported | * 2712a1ba05 tracing/probe: trace_probe_primary_from_call(): checked list_first_entry | * 8a716b28b9 selinux: don't use make's grouped targets feature yet | * 11a8e7fd72 block: fix revalidate performance regression | * 538d850485 usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM | * 57a2fd7b2c usb: cdns3: allocate TX FIFO size according to composite EP number | * d42d869b2c iommu/amd: Fix domain flush size when syncing iotlb | * cb21384372 powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall | * f257c1a6cc btrfs: fix csum_tree_block page iteration to avoid tripping on -Werror=array-bounds | * 292806cfe4 tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK | * 3fda903511 mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order | * dade1f4a37 mmc: vub300: fix invalid response handling | * 3eb4590bc3 block/blk-iocost (gcc13): keep large values in a new enum | * 43124187fe ath6kl: Use struct_group() to avoid size-mismatched casting | * 43f4aca98b x86/boot: Wrap literal addresses in absolute_pointer() | * 3cfd7f042e drm/amd/pm: reverse mclk and fclk clocks levels for renoir | * 7e0c25b390 drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp | * fce05ec3de drm/amd/pm: reverse mclk and fclk clocks levels for vangogh | * b0dda610b4 ata: libata-scsi: Use correct device no in ata_find_dev() | * 57f4555bdf scsi: stex: Fix gcc 13 warnings | * 6f675380db misc: fastrpc: reject new invocations during device removal | * cebe84b9c0 misc: fastrpc: return -EPIPE to invocations on device removal | * d3103fc0d1 md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk() | * 599e19202b usb: gadget: f_fs: Add unbind event before functionfs_unbind | * c762eafe79 dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type | * 7099a87cf5 net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 | * 16bd13e701 iio: dac: build ad5758 driver when AD5758 is selected | * b6622c1fd2 iio: adc: ad7192: Change "shorted" channels to differential | * aeec28d838 iio: dac: mcp4725: Fix i2c_master_send() return value handling | * 23c6a184c2 iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag | * 4349ee3dee iio: light: vcnl4035: fixed chip ID check | * db633585e9 dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value | * 6bd3d6305b iio: imu: inv_icm42600: fix timestamp reset | * 536b4ffa93 HID: wacom: avoid integer overflow in wacom_intuos_inout() | * cfa747cc65 HID: google: add jewel USB id | * 11bc983e43 iio: adc: mxs-lradc: fix the order of two cleanup operations | * a5461c3134 iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT method | * 6a7d946733 media: uvcvideo: Don't expose unsupported formats to userspace | * 6dd02a7bff mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() | * 0f3c55c7d6 nvme-pci: Add quirk for Teamgroup MP33 SSD | * c9079eb6f1 drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged | * 4238ea044e atm: hide unused procfs functions | * 5d4c31d939 drm/msm: Be more shouty if per-process pgtables aren't working | * 825cc70fbf ALSA: oss: avoid missing-prototype warnings | * a79da1659c nvme-multipath: don't call blk_mark_disk_dead in nvme_mpath_remove_disk | * 9a195b9917 netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT | * 82f505878f wifi: b43: fix incorrect __packed annotation | * ab62fc176e scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed | * e04de12881 wifi: mac80211: simplify chanctx allocation | * 24dc97e135 arm64: vdso: Pass (void *) to virt_to_page() | * 2944b9f0fd arm64/mm: mark private VM_FAULT_X defines as vm_fault_t | * 39d84ddd9e ARM: dts: stm32: add pin map for CAN controller on stm32f7 | * b2f00acd53 wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value | * ce135055be ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P | * 66f05cf2b2 s390/topology: honour nr_cpu_ids when adding CPUs | * 7980368542 s390/pkey: zeroize key blobs | * 42624bc8c3 media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 | * 22fc36d59e media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() | * a47a3f7a9b media: dvb-core: Fix use-after-free due to race at dvb_register_device() | * 50831747cb media: dvb-core: Fix use-after-free due on race condition at dvb_net | * 9f74fec18f media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table | * d6c47b2359 media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() | * 747a121914 media: dvb_ca_en50221: fix a size write bug | * 34562df408 media: netup_unidvb: fix irq init by register it at the end of probe | * 5e56e3d5eb media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address | * 5240bc8c0c media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() | * cd6764cf45 media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer | * ef0d867e29 media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() | * abaf49c5a9 media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() | * 4b61ee116a media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() | * 5e9ad9962f media: dvb_demux: fix a bug for the continuity counter | * ae3e3ac8b2 ASoC: ssm2602: Add workaround for playback distortions | * 6cf7f03d2d ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI codecs | * 133c78bc67 xfrm: Check if_id in inbound policy/secpath match | * f1a6d366cd um: harddog: fix modular build | * e9d167ca48 ASoC: dwc: limit the number of overrun messages | * 84dfd8bee5 nvme-pci: add quirk for missing secondary temperature thresholds | * b32eeafd4e nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G | * f7af470fad block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE | * 8ba70707c3 nbd: Fix debugfs_create_dir error checking | * 156f5237e9 fbdev: stifb: Fix info entry in sti_struct on error path | * b3c7854287 fbdev: modedb: Add 1920x1080 at 60 Hz video mode | * ad3de274e0 fbdev: imsttfb: Fix use after free bug in imsttfb_probe | * fd8b4e28f4 gfs2: Don't deref jdesc in evict | * a00cc85628 platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield | * 736626df53 media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE | * 1eae6e9196 ARM: 9295/1: unwind:fix unwind abort for uleb128 case | * af739a7015 btrfs: abort transaction when sibling keys check fails for leaves | * 872a038dd4 drm/ast: Fix ARM compatibility | * 3291f4a107 mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() | * fe6f6f4706 drm/amdgpu: Use the default reset when loading or reloading the driver | * 2226d9ef63 ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs. | * 65221bdde7 watchdog: menz069_wdt: fix watchdog initialisation | * 6a7bf00389 drm/amdgpu: release gpu full access after "amdgpu_device_ip_late_init" | * 8ac106aade rtnetlink: call validate_linkmsg in rtnl_create_link | * beeffe764e mtd: rawnand: marvell: don't set the NAND frequency select | * 6494318f11 mtd: rawnand: marvell: ensure timing values are written | * 0fad29dabc net: dsa: mv88e6xxx: Increase wait after reset deactivation | * 45f47d2cf1 net/sched: flower: fix possible OOB write in fl_set_geneve_opt() | * b15adce7d3 net/mlx5: Read embedded cpu after init bit cleared | * c3caee8fe1 net/mlx5e: Fix error handling in mlx5e_refresh_tirs | * 1abb7b04ec udp6: Fix race condition in udp6_sendmsg & connect | * 7dc379f885 net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report | * 91b07931c1 net: sched: fix NULL pointer dereference in mq_attach | * b1cb1ba1fb net/sched: Prohibit regrafting ingress or clsact Qdiscs | * cde00dcdf0 net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs | * 2e859de5ae net/sched: sch_clsact: Only create under TC_H_CLSACT | * cff0af3d13 net/sched: sch_ingress: Only create under TC_H_INGRESS | * a907a389c7 tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set | * fade445f39 tcp: deny tcp_disconnect() when threads are waiting | * 5434c81287 af_packet: do not use READ_ONCE() in packet_bind() | * 60bd1403ba RDMA/irdma: Fix Local Invalidate fencing | * 0b3c392b82 RDMA/irdma: Prevent QP use after free | * bd2af69575 RDMA/irdma: Add SW mechanism to generate completions on error | * 2d04dde4de mtd: rawnand: ingenic: fix empty stub helper definitions | * 8f61d394b0 amd-xgbe: fix the false linkup in xgbe_phy_status | * aefcb6ea1d af_packet: Fix data-races of pkt_sk(sk)->num. | * c8775b97bf netrom: fix info-leak in nr_write_internal() | * 8045788add net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure | * 8d9d0bfd4c net/mlx5e: Don't attach netdev profile while handling internal error | * d002e0287d net/mlx5: fw_tracer, Fix event handling | * 3a7793ae69 riscv: Fix unused variable warning when BUILTIN_DTB is set | * 3f1191bc5b dmaengine: pl330: rename _start to prevent build error | * c4be5d71d7 iommu/amd: Don't block updates to GATag if guest mode is on | * b4fd38c0c7 iommu/rockchip: Fix unwind goto issue | * 190ea1c391 RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx | * 2fa9ee0fd6 RDMA/bnxt_re: Fix a possible memory leak | * fdc977f2e7 dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved() | * f68eff0faf dmaengine: at_xdmac: Move the free desc to the tail of the desc list | * ba0e7ca84a RDMA/hns: Modify the value of long message loopback slice | * 15aeb44199 RDMA/hns: Fix base address table allocation | * b0f40ecc46 RDMA/efa: Fix unsupported page sizes in device | * f370588ec3 RDMA/bnxt_re: Fix the page_size used during the MR creation * | 6720675504 Revert "Revert "binder_alloc: add missing mmap_lock calls when using the VMA"" * | 1b16baaf8b Revert "Revert "android: binder: stop saving a pointer to the VMA"" * | d62b5b7db6 Revert "binder: add lockless binder_alloc_(set|get)_vma()" * | 4bbb48a4fe Revert "binder: fix UAF of alloc->vma in race with munmap()" * | e772cc3c8f Merge 5.15.115 into android14-5.15-lts |\| | * d7af3e5ba4 Linux 5.15.115 | * e226893c93 netfilter: ctnetlink: Support offloaded conntrack entry deletion | * 395d846c61 ipv{4,6}/raw: fix output xfrm lookup wrt protocol | * 1bb8a65190 binder: fix UAF of alloc->vma in race with munmap() | * 1cae0d5136 binder: add lockless binder_alloc_(set|get)_vma() | * dd7aff43d0 Revert "android: binder: stop saving a pointer to the VMA" | * 6802c70090 Revert "binder_alloc: add missing mmap_lock calls when using the VMA" | * 09411f1b86 bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() | * 0f21b86217 xdp: xdp_mem_allocator can be NULL in trace_mem_connect(). | * b6c4afcbd6 irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable | * 13b290f020 page_pool: fix inconsistency for page_pool_ring_[un]lock() | * 3af319d514 net: page_pool: use in_softirq() instead | * 1c097b9db1 xdp: Allow registering memory model without rxq reference | * 623d965c2d net/mlx5e: Fix SQ wake logic in ptp napi_poll context | * 9085886c04 irqchip/mips-gic: Use raw spinlock for gic_lock | * 4517730b4c irqchip/mips-gic: Get rid of the reliance on irq_cpu_online() | * 5fd7c1e36b binder: fix UAF caused by faulty buffer cleanup | * c88d21c0ae bonding: fix send_peer_notif overflow | * 7ee611fc85 Bonding: add arp_missed_max option | * 5b925b48be net: dsa: mt7530: fix network connectivity with multiple CPU ports | * 5a7266feaa net: dsa: mt7530: split-off common parts from mt7531_setup | * 0753c1ef24 net: dsa: mt7530: rework mt753[01]_setup | * 9902f91cf6 net: dsa: introduce helpers for iterating through ports using dp | * d84b42b725 net: phy: mscc: enable VSC8501/2 RGMII RX clock | * 3dce2f3d83 platform/x86: ISST: Remove 8 socket limit | * 017a634f9f platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering | * ff455f7fbc net/mlx5: Devcom, serialize devcom registration | * 69966bce28 net/mlx5e: Fix deadlock in tc route query code | * 1c4e3cf894 net/mlx5: devcom only supports 2 ports | * 79ea1a12fb bpf: fix a memory leak in the LRU and LRU_PERCPU hash maps | * 1f06b2a604 power: supply: bq24190: Call power_supply_changed() after updating input current | * 8c6f881dc1 power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier() | * 1f9367a890 power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize | * 75a7e9de60 power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes | * e4c708a9bb power: supply: bq27xxx: Move bq27xxx_battery_update() down | * 2288fa1ae9 power: supply: bq27xxx: expose battery data when CI=1 * | b5c8629086 Merge branch 'android14-5.15' into 'android14-5.15-lts' * | 7a20f4ad2b Revert "usb: gadget: Properly configure the device for remote wakeup" * | c51cba3cb0 Revert "usb: dwc3: fix gadget mode suspend interrupt handler issue" * | dc7c06dba7 Merge 5.15.114 into android14-5.15-lts |\| | * 0ab06468cb Linux 5.15.114 | * 193c59ba72 net: phy: mscc: add VSC8502 to MODULE_DEVICE_TABLE | * 350b95e86c 3c589_cs: Fix an error handling path in tc589_probe() | * 7c2fa3e56d regulator: mt6359: add read check for PMIC MT6359 | * 28ebfb74fb firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors | * 34b0985ebd arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert delay | * 1e75506536 net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device | * a89a69cea4 net/mlx5: Fix error message when failing to allocate device memory | * e8a974bbf4 net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE | * 5e0cc0d502 net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs | * 792a8233fc net/mlx5e: do as little as possible in napi poll when budget is 0 | * fdf8f33e7d platform/mellanox: mlxbf-pmc: fix sscanf() error checking | * d5ab5447d9 forcedeth: Fix an error handling path in nv_probe() | * ae7c4ec426 sctp: fix an issue that plpmtu can never go to complete state | * ee553694be ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg | * aafa5019e2 x86/show_trace_log_lvl: Ensure stack pointer is aligned, again | * 90314394a1 xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() | * ff151810fb coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() | * 24cf114743 regulator: pca9450: Fix BUCK2 enable_mask | * cd41ec2350 fs: fix undefined behavior in bit shift for SB_NOUSER | * c2f6599109 firmware: arm_ffa: Fix FFA device names for logical partitions | * 6a26c62625 firmware: arm_ffa: Check if ffa_driver remove is present before executing | * f64567bd95 power: supply: sbs-charger: Fix INHIBITED bit for Status reg | * 71a9f146b3 power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status() | * e98e5bebfc power: supply: bq27xxx: Fix poll_interval handling and races on remove | * e01820a94a power: supply: bq27xxx: Fix I2C IRQ race on remove | * d21b344857 power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition | * c530f60e5a power: supply: mt6360: add a check of devm_work_autocancel in mt6360_charger_probe | * 0dd4881238 power: supply: leds: Fix blink to LED on transition | * 5e4bb063dc cifs: mapchars mount option ignored | * 9b92e2d0eb ipv6: Fix out-of-bounds access in ipv6_find_tlv() | * bf478c2643 bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields | * 79081b3f48 octeontx2-pf: Fix TSOv6 offload | * 114657365c selftests: fib_tests: mute cleanup error message | * e06841a2ab net: fix skb leak in __skb_tstamp_tx() | * 8f1512d78b ASoC: lpass: Fix for KASAN use_after_free out of bounds | * b1bde4b436 media: radio-shark: Add endpoint checks | * 43f569fd06 USB: sisusbvga: Add endpoint checks | * da0f4b5576 USB: core: Add routines for endpoint checks in old drivers | * 387bd0a3af udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). | * cf3b5cd712 net: fix stack overflow when LRO is disabled for virtual interfaces | * 9e12c58a5e fbdev: udlfb: Fix endpoint check | * aee97eec77 debugobjects: Don't wake up kswapd from fill_pool() | * c09a7b6190 x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms | * a9ffd42eb9 perf/x86/uncore: Correct the number of CHAs on SPR | * 277f206bb8 parisc: Fix flush_dcache_page() for usage from irq context | * eff115ca94 selftests/memfd: Fix unknown type name build failure | * 1a98b6e028 x86/mm: Avoid incomplete Global INVLPG flushes | * 683bb30c69 dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type | * 647af8a998 btrfs: use nofs when cleaning up aborted transactions | * 7e93fe1d17 gpio: mockup: Fix mode of debugfs files | * 3a2d238c5a parisc: Allow to reboot machine after system halt | * 96f8dd0483 parisc: Handle kgdb breakpoints only in kernel context | * 16deb7413a m68k: Move signal frame following exception on 68020/030 | * 9be921854e net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize | * 1f6ae24e3d ASoC: rt5682: Disable jack detection interrupt during suspend | * 693acaa739 mmc: sdhci-esdhc-imx: make "no-mmc-hs400" works | * 7177586e06 ALSA: hda/realtek: Enable headset onLenovo M70/M90 | * e6a624451a ALSA: hda: Fix unhandled register update during auto-suspend period | * 7716da3fa1 ALSA: hda/ca0132: add quirk for EVGA X299 DARK | * c37eb46c61 arm64: Also reset KASAN tag if page is not PG_mte_tagged | * 291fe3d6f5 ocfs2: Switch to security_inode_init_security() | * 4badd33929 spi: fsl-cpm: Use 16 bit mode for large transfers with even size | * 28ffe8c846 spi: fsl-spi: Re-organise transfer bits_per_word adaptation | * 381e55bffe ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15 | * ca338fa803 watchdog: sp5100_tco: Immediately trigger upon starting. | * 6312c7cc07 dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries | * 7ef9045fe7 dt-bindings: ata: ahci-ceva: convert to yaml | * f191711553 usb: dwc3: fix gadget mode suspend interrupt handler issue | * 7919af1dcb usb: gadget: Properly configure the device for remote wakeup * | 49839eb143 ANDROID: GKI: preserve CRC generation for some bluetooth symbols * | 4c5606f8aa Revert "tipc: add tipc_bearer_min_mtu to calculate min mtu" * | f0cd76bc48 Revert "tipc: do not update mtu if msg_max is too small in mtu negotiation" * | 6fb55b36cd Revert "tipc: check the bearer min mtu properly when setting it by netlink" * | f7240aa50d Revert "firmware: arm_sdei: Fix sleep from invalid context BUG" * | 4a21190782 Revert "ASoC: fsl_micfil: Fix error handler with pm_runtime_enable" * | f373d7e7f5 Merge 5.15.113 into android14-5.15-lts |\| | * 1fe619a7d2 Linux 5.15.113 | * 7de20a23e5 HID: wacom: add three styli to wacom_intuos_get_tool_type | * 25b835d408 HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs | * a540aabefa HID: wacom: Force pen out of prox if no events have been received in a while | * b4c7b54b83 s390/qdio: fix do_sqbs() inline assembly constraint | * b8427b8522 nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() | * cafdd9cefc powerpc/64s/radix: Fix soft dirty tracking | * fe59dd824f tpm/tpm_tis: Disable interrupts for more Lenovo devices | * b9eb4491f0 powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device | * 317ee8c54f ceph: force updating the msg pointer in non-split case | * e3d1adcad5 vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF | * 03e39ec739 thunderbolt: Clear registers properly when auto clear isn't in use | * 742ed5bb68 serial: qcom-geni: fix enabling deactivated interrupt | * 6960267e7d serial: 8250_exar: Add support for USR298x PCI Modems | * 7d8873ecbd serial: Add support for Advantech PCI-1611U card | * 51d90382d2 statfs: enforce statfs[64] structure initialization | * 865be1cff2 ksmbd: fix global-out-of-bounds in smb2_find_context_vals | * 7657321b26 ksmbd: fix wrong UserName check in session_user | * 61e043326e ksmbd: allocate one more byte for implied bcc[0] | * 1c2461b41f ksmbd: smb2: Allow messages padded to 8byte boundary | * 49f4794538 SMB3: drop reference to cfile before sending oplock break | * 653d30a151 SMB3: Close all deferred handles of inode in case of handle lease break | * 972a33e6cc can: kvaser_pciefd: Disable interrupts in probe error path | * 143623940a can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt | * c724a6edc1 can: kvaser_pciefd: Clear listen-only bit if not explicitly requested | * f04628305c can: kvaser_pciefd: Empty SRB buffer in probe | * da711a8af0 can: kvaser_pciefd: Call request_irq() before enabling interrupts | * 4857ccfbe2 can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() | * 9ac2448c24 can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag | * a17cf315f2 can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag | * 83af087604 ALSA: hda/realtek: Add quirk for 2nd ASUS GU603 | * cc1924ab21 ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 | * 3a32c51494 ALSA: hda/realtek: Add quirk for Clevo L140AU | * 059a18e95e ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table | * e8c7d7c43d ALSA: hda: Fix Oops by 9.1 surround channel names | * 831a1ffb0a xhci: Fix incorrect tracking of free space on transfer rings | * 4c5c487069 xhci-pci: Only run d3cold avoidance quirk for s2idle | * fc0e18f95c usb: typec: altmodes/displayport: fix pin_assignment_show | * 0ed9257a8a usb: gadget: u_ether: Fix host MAC address case | * c51a131cac usb: dwc3: debugfs: Resume dwc3 before accessing registers | * 720be29c7d USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value | * 2ef3ecff09 usb-storage: fix deadlock when a scsi command timeouts more than once | * 3b43d9df27 USB: usbtmc: Fix direction for 0-length ioctl control messages | * 15d7441332 ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go | * 62499cf3dd bridge: always declare tunnel functions | * ec5caa765f netfilter: nft_set_rbtree: fix null deref on element insertion | * b0cc763806 netfilter: nf_tables: fix nft_trans type confusion | * addaba6801 vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() | * 3a0450d38a igb: fix bit_shift to be in [1..8] range | * c15c3bb90c net: dsa: mv88e6xxx: Fix mv88e6393x EPC write command offset | * 234e744d86 cassini: Fix a memory leak in the error handling path of cas_init_one() | * 76a7cd047b scsi: storvsc: Don't pass unused PFNs to Hyper-V host | * 05ad5a4d42 wifi: iwlwifi: mvm: don't trust firmware n_channels | * d66490c293 wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock | * fce7d92a89 wifi: mac80211: fix min center freq offset tracing | * fd8bc0f581 net: bcmgenet: Restore phy_stop() depending upon suspend/close | * 99c5acfd1f net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() | * ed1283c46d s390/cio: include subchannels without devices also for evaluation | * 673cb47989 tipc: check the bearer min mtu properly when setting it by netlink | * 575e84d90a tipc: do not update mtu if msg_max is too small in mtu negotiation | * 5cf99d5f65 tipc: add tipc_bearer_min_mtu to calculate min mtu | * 6a7690f2bd virtio_net: Fix error unwinding of XDP initialization | * 18c0bd6888 virtio-net: Maintain reverse cleanup order | * cdd8160dcd net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() | * f51d15d9bc drm/exynos: fix g2d_open/close helper function definitions | * 45a158a212 SUNRPC: Fix trace_svc_register() call site | * 1c28b206ae SUNRPC: always free ctxt when freeing deferred request | * 54832355b0 SUNRPC: Remove svc_rqst::rq_xprt_hlen | * 7a1dca0131 SUNRPC: Remove dead code in svc_tcp_release_rqst() | * 9712097e89 SUNRPC: Clean up svc_deferred_class trace events | * 8c26ecd887 tracing: Introduce helpers to safely handle dynamic-sized sockaddrs | * 7851771789 SUNRPC: double free xprt_ctxt while still in use | * 051af3f0b7 media: netup_unidvb: fix use-after-free at del_timer() | * 8e37baf621 net: hns3: fix reset delay time to avoid configuration timeout | * aaf7c7d844 net: hns3: fix sending pfc frames after reset issue | * 56640004ee net: hns3: fix output information incomplete for dumping tx queue info with debugfs | * 98e9648018 erspan: get the proto with the md version for collect_md | * 5258395e67 serial: 8250_bcm7271: fix leak in `brcmuart_probe` | * cc2f7cee93 serial: 8250_bcm7271: balance clk_enable calls | * f76a18e53a serial: arc_uart: fix of_iomap leak in `arc_serial_probe` | * 15251e783a tcp: fix possible sk_priority leak in tcp_v4_send_reset() | * 2832d62446 vsock: avoid to close connected socket after the timeout | * 2c1617dc6d ALSA: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15 | * bbb5ac533c ALSA: firewire-digi00x: prevent potential use after free | * 81c8431524 net: phy: dp83867: add w/a for packet errors seen with short cables | * c1bc2870f1 net: fec: Better handle pm_runtime_get() failing in .remove() | * b598e76b49 selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test | * 5041897b9f selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test | * d6c89d776b af_key: Reject optional tunnel/BEET mode templates in outbound policies | * 19457a4423 cpupower: Make TSC read per CPU for Mperf monitor | * 3a4ff14b0e ASoC: fsl_micfil: Fix error handler with pm_runtime_enable | * a2e5a77ae3 dt-bindings: display/msm: dsi-controller-main: Document qcom, master-dsi and qcom, sync-dual-dsi | * e1c9c7482e drm/msm/dpu: Remove duplicate register defines from INTF | * 85eb9aef4f drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header | * b688a4115b drm/msm/dpu: Add INTF_5 interrupts | * d8a291e39a drm/msm/dp: unregister audio driver during unbind | * 288247879f Revert "Fix XFRM-I support for nested ESP tunnels" | * 46f1a95354 xfrm: don't check the default policy if the policy allows the packet | * 98f179c5b0 platform/x86: hp-wmi: add micmute to hp_wmi_keymap struct | * a832a43fdd platform/x86: Move existing HP drivers to a new hp subdir | * df14d64b36 platform/x86: hp-wmi: Support touchpad on/off | * 6158e958e8 parisc: Replace regular spinlock with spin_trylock on panic path | * 1fa3fb4f70 mfd: dln2: Fix memory leak in dln2_probe() | * c9faa002ea soundwire: qcom: gracefully handle too many ports in DT | * b61382a825 phy: st: miphy28lp: use _poll_timeout functions for waits | * dc9c54d34d Input: xpad - add constants for GIP interface numbers | * 92c089a931 iommu/sprd: Release dma buffer to avoid memory leak | * a2bc5241ee iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any | * aa50d0a460 clk: tegra20: fix gcc-7 constant overflow warning | * 20f9bfc664 fs/ntfs3: Fix a possible null-pointer dereference in ni_clear() | * 85afd30074 fs/ntfs3: Add length check in indx_get_root | * 2a67f26f70 fs/ntfs3: Validate MFT flags before replaying logs | * d4b7448252 fs/ntfs3: Fix NULL dereference in ni_write_inode | * 1fd5b80c93 fs/ntfs3: Enhance the attribute size check | * 6d3d3283e6 fs/ntfs3: Fix NULL pointer dereference in 'ni_write_inode' | * 8ebcbd1811 iommu/arm-smmu-qcom: Limit the SMR groups to 128 | * 036e02dfd5 RDMA/core: Fix multiple -Warray-bounds warnings | * ff70ad9159 recordmcount: Fix memory leaks in the uwrite function | * f3458b84c6 sched: Fix KCSAN noinstr violation | * 0652b54957 mcb-pci: Reallocate memory region to avoid memory overlapping | * 1ba5594739 serial: 8250: Reinit port->pm on port specific driver unbind | * ee009c2abc usb: typec: tcpm: fix multiple times discover svids error | * 973f84956b HID: wacom: generic: Set battery quirk only when we see battery data | * b2069cfe1b spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 | * 6293d0533c HID: logitech-hidpp: Reconcile USB and Unifying serials | * 3f1719790c HID: logitech-hidpp: Don't use the USB serial for USB devices | * a97e60bd28 staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE | * 116b9c002c Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp | * 392a06f965 Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set | * c018360885 Bluetooth: btintel: Add LE States quirk support | * 7aa14a7a3a ipvs: Update width of source for ip_vs_sync_conn_options | * 52851d0c33 nbd: fix incomplete validation of ioctl arg | * 3d3f8fe01a wifi: ath11k: Fix SKB corruption in REO destination ring | * 87940e4030 wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace | * 35e304dbce null_blk: Always check queue mode setting from configfs | * 82f877ec9b wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf | * 7545f21eee wifi: iwlwifi: pcie: fix possible NULL pointer dereference | * 095018267c bpf: Add preempt_count_{sub,add} into btf id deny list | * e3e6e252d7 samples/bpf: Fix fout leak in hbm's run_bpf_prog | * e2759a59a4 f2fs: fix to check readonly condition correctly | * d8f4ad5f39 f2fs: fix to drop all dirty pages during umount() if cp_error is set | * 613f6cde5e ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() | * bc4a3e1d07 ext4: set goal start correctly in ext4_mb_normalize_request | * 203e8875d2 scsi: ufs: ufs-pci: Add support for Intel Lunar Lake | * 71ee06193e gfs2: Fix inode height consistency check | * e84282efc8 scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition | * c6ed54dd90 lib: cpu_rmap: Avoid use after free on rmap->obj array entries | * 1911cca591 scsi: target: iscsit: Free cmds before session free | * a6f9f53d73 net: Catch invalid index in XPS mapping | * e3644d15d7 net: pasemi: Fix return type of pasemi_mac_start_tx() | * d5eaf2a6b0 bnxt: avoid overflow in bnxt_get_nvram_directory() | * f910374870 scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow | * 99f8a15af6 ext2: Check block size validity during mount | * e242c66f7e wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex | * fe913db2ac bpf: Annotate data races in bpf_local_storage | * aa186074b6 wifi: ath: Silence memcpy run-time false positive warning | * 9f87ee85ce media: Prefer designated initializers over memset for subdev pad ops | * 66acfe798c drm/amd: Fix an out of bounds error in BIOS parser | * d997c920a5 ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects | * 3a7a4aa395 ACPICA: Avoid undefined behavior: applying zero offset to null pointer | * 0aa3d558f1 drm/msm/dp: Clean up handling of DP AUX interrupts | * 33cc6ef106 drm/tegra: Avoid potential 32-bit integer overflow | * 19882a49b2 remoteproc: stm32_rproc: Add mutex protection for workqueue | * f4a573eed6 ACPI: EC: Fix oops when removing custom query handlers | * 66caf22787 firmware: arm_sdei: Fix sleep from invalid context BUG | * 162a9b3215 memstick: r592: Fix UAF bug in r592_remove due to race condition | * dcf632bca4 media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish | * f0a06203f2 media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() | * c127337841 arm64: dts: qcom: msm8996: Add missing DWC3 quirks | * 15856ab956 regmap: cache: Return error in cache sync operations for REGCACHE_NONE | * e9c5fc4f3f drm/amd/display: Use DC_LOG_DC in the trasform pixel function | * 9fd5be74b3 drm/displayid: add displayid_get_header() and check bounds better | * 37cab61a52 fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() | * e30a55e98a rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access | * 718b66c5eb refscale: Move shutdown from wait_event() to wait_event_idle() | * 620a3c2822 ext4: allow ext4_get_group_info() to fail | * 99f7ce0fac ext4: allow to find by goal if EXT4_MB_HINT_GOAL_ONLY is set | * 1de53f2223 ext4: fix lockdep warning when enabling MMP | * c53936d9fb ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled | * 3f937d6615 ext4: reflect error codes from ext4_multi_mount_protect() to its callers | * 1284253ce9 ext4: remove an unused variable warning with CONFIG_QUOTA=n | * 96b3233f42 fbdev: arcfb: Fix error handling in arcfb_probe() | * 33b5890dfa drm/i915/dp: prevent potential div-by-zero | * a41559ae36 af_unix: Fix data races around sk->sk_shutdown. | * 610fd07c13 af_unix: Fix a data race of sk->sk_receive_queue->qlen. | * 62d43dd14b net: datagram: fix data-races in datagram_poll() | * 7c8be27727 ipvlan:Fix out-of-bounds caused by unclear skb->cb | * 3c9d916e39 gve: Remove the code of clearing PBA bit | * 43d938a82e tcp: add annotations around sk->sk_shutdown accesses | * 9dd9ffe118 net: add vlan_get_protocol_and_depth() helper | * 538b511bc5 net: deal with most data-races in sk_wait_event() | * 159a81d5e5 net: annotate sk->sk_err write from do_recvmmsg() | * 1d5c8b01f1 netlink: annotate accesses to nlk->cb_running | * 1a2b27f2d7 netfilter: conntrack: fix possible bug_on with enable_hooks=1 | * 8d56f00c61 netfilter: nf_tables: always release netdev hooks from notifier | * de260d1e02 net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). | * 5f5549b998 net: stmmac: Initialize MAC_ONEUS_TIC_COUNTER register | * b0a513ba5b net: stmmac: switch to use interrupt for hw crosstimestamping | * 46e100be0f linux/dim: Do nothing if no time delta between samples | * 2fdce3e52d tick/broadcast: Make broadcast device replacement work correctly | * 6e455b89f0 scsi: ufs: core: Fix I/O hang that occurs when BKOPS fails in W-LUN suspend | * b614567e0d net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe() | * da3cd1a81d ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings | * ac88a1f41f drm/mipi-dsi: Set the fwnode for mipi_dsi_device * | 5807982cf4 ANDROID: GKI: fix up mhi.ko build location. * | e42a74b5f8 Merge 5.15.112 into android14-5.15-lts |\| | * 9d6bde8536 Linux 5.15.112 | * 0788273bd0 drm/amd/display: Fix hang when skipping modeset | * de9a3ed423 RISC-V: Fix up a cherry-pick warning in setup_vm_final() | * 3c9b08a169 drbd: correctly submit flush bio on barrier | * d0bcf6caa2 serial: 8250: Fix serial8250_tx_empty() race with DMA Tx | * 0b401c2ccc drm/msm/adreno: adreno_gpu: Use suspend() instead of idle() on load error | * 8beaa3cb29 ext4: fix invalid free tracking in ext4_xattr_move_to_block() | * 978e5e9111 ext4: remove a BUG_ON in ext4_mb_release_group_pa() | * 2b3b8f18c0 ext4: bail out of ext4_xattr_ibody_get() fails for any reason | * f22b274429 ext4: add bounds checking in get_max_inline_xattr_value_size() | * 640c8c3659 ext4: fix deadlock when converting an inline directory in nojournal mode | * b253193611 ext4: improve error handling from ext4_dirhash() | * b2f1314e6e ext4: improve error recovery code paths in __ext4_remount() | * 5f7d66e5e5 ext4: check iomap type only if ext4_iomap_begin() does not fail | * f5e687698c ext4: fix data races when using cached status extents | * 6d9a705a65 ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum | * d55e76e115 ext4: fix WARNING in mb_find_extent | * c5c385baee locking/rwsem: Add __always_inline annotation to __down_read_common() and inlined callers | * ed76d3a891 ksmbd: not allow guest user on multichannel | * 4f9baa0667 ksmbd: fix deadlock in ksmbd_find_crypto_ctx() | * bc77a6e933 ksmbd: fix racy issue while destroying session on multichannel | * a89ff57e4d ksmbd: fix kernel oops from idr_remove() | * 876a7e3b58 ksmbd: add channel rwlock | * 05cbc9806a ksmbd: replace sessions list in connection with xarray | * f86a1a74d9 ksmbd: fix multi session connection failure | * bb3b772f18 ksmbd: set RSS capable in FSCTL_QUERY_NETWORK_INTERFACE_INFO | * 2456e2889c wifi: rtw88: rtw8821c: Fix rfe_option field width | * 615aff165b drm/amd/display: Add NULL plane_state check for cursor disable logic | * c11b90aced drm/amd/display: Refine condition of cursor visibility for pipe-split | * bf16debcda drm/msm/adreno: fix runtime PM imbalance at gpu load | * bac00e57cd drm/msm: Remove struct_mutex usage | * 17eeeac92b drm/i915/dg2: Add HDMI pixel clock frequencies 267.30 and 319.89 MHz | * 6d5e6d5a70 drm/i915/dg2: Add additional HDMI pixel clock frequencies | * 06af228515 drm/i915/dg2: Support 4k@30 on HDMI | * a63c6b1eed ASoC: soc-pcm.c: call __soc_pcm_close() in soc_pcm_close() | * aa803e6eca ASoC: DPCM: Don't pick up BE without substream | * 44b685c4ba ASoC: soc-pcm: Move debugfs removal out of spinlock | * 0d5017dea0 ASoC: soc-compress: Inherit atomicity from DAI link for Compress FE | * a536c367b0 ASoC: soc-pcm: Fix DPCM lockdep warning due to nested stream locks | * e2e5b8c729 fs/ntfs3: Refactoring of various minor issues | * 5047a228d4 HID: wacom: insert timestamp to packed Bluetooth (BT) events | * db587340a0 HID: wacom: Set a default resolution for older tablets | * 823787470e drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend | * b39ba90d69 drm/amdgpu: Fix vram recover doesn't work after whole GPU reset (v2) | * cd3c0f7013 drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras | * 6d4b6abedd drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() | * db307e725d drm/amd/display: fix flickering caused by S/G mode | * 61b694b742 drm/panel: otm8009a: Set backlight parent to panel device | * 8f57f3e112 f2fs: fix potential corruption when moving a directory | * e2d1cc82ad drm/msm: fix NULL-deref on irq uninstall | * 8f0e1ad532 drm/msm: fix NULL-deref on snapshot tear down | * 74543041c0 drm/bridge: lt8912b: Fix DSI Video Mode | * 9d79ccd971 ARM: dts: s5pv210: correct MIPI CSIS clock name | * 137259261c ARM: dts: exynos: fix WM8960 clock name in Itop Elite | * eb15fb94d4 remoteproc: imx_rproc: Call of_node_put() on iteration error | * de26e064ed remoteproc: st: Call of_node_put() on iteration error | * 8915e44eb3 remoteproc: stm32: Call of_node_put() on iteration error | * 975b80702f sh: nmi_debug: fix return value of __setup handler | * 66dbc36121 sh: init: use OF_EARLY_FLATTREE for early init | * bb870c4b73 sh: mcount.S: fix build error when PRINTK is not enabled | * be95f9ebaf sh: math-emu: fix macro redefined warning | * 9fdf3666e3 SMB3: force unmount was failing to close deferred close files | * c3a0ae5259 smb3: fix problem remounting a share after shutdown | * 17ad86d8c1 inotify: Avoid reporting event with invalid wd | * e51cd74e32 platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i | * 21de866f75 platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet | * 5af78b437c cifs: release leases for deferred close handles when freezing | * f43b5573cd cifs: fix pcchunk length type in smb2_copychunk_range | * 69dfa5a2e8 btrfs: fix space cache inconsistency after error loading it from disk | * e0710a4979 btrfs: print-tree: parent bytenr must be aligned to sector size | * bcc401bb86 btrfs: zero the buffer before marking it dirty in btrfs_redirty_list_add | * f264be2414 btrfs: don't free qgroup space unless specified | * 29478148bb btrfs: fix encoded write i_size corruption with no-holes | * 91f585024e btrfs: zoned: fix wrong use of bitops API in btrfs_ensure_empty_zones | * 77c6323dad btrfs: fix btrfs_prev_leaf() to not return the same key twice | * b13e20cc58 perf stat: Separate bperf from bpf_profiler | * 2baa45d8f5 perf evlist: Refactor evlist__for_each_cpu() | * 871149abc1 perf symbols: Fix return incorrect build_id size in elf_read_build_id() | * f716374c4e crypto: engine - fix crypto_queue backlog handling | * fa4e304bbd crypto: engine - Use crypto_request_complete | * e7ce4ba116 crypto: api - Add scaffolding to change completion function signature | * a8cc4d5adf crypto: engine - check if BH is disabled during completion | * 7b36a06bac crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs() | * b6e2d1e253 perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() | * 4f128167e6 perf pmu: zfree() expects a pointer to a pointer to zero it after freeing its contents | * e685e2e2bd perf vendor events power9: Remove UTF-8 characters from JSON files | * a6ef72c38c perf scripts intel-pt-events.py: Fix IPC output for Python 2 | * 53f7b55f6b net: enetc: check the index of the SFI rather than the handle | * a0cb00295d virtio_net: suppress cpu stall when free_unused_bufs | * b4e16ea5f1 virtio_net: split free_unused_bufs() | * f495e435e5 net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621 | * dfad4eb4c4 ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` | * 10c5ea3957 drm/amdgpu: add a missing lock for AMDGPU_SCHED | * 54c466c60e af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). | * c177dd465f ionic: catch failure from devlink_alloc | * da81af0ef8 ethtool: Fix uninitialized number of lanes | * 27b0d1b81f ionic: remove noise from ethtool rxnfc error msg | * d37f6a8323 octeontx2-vf: Detach LF resources on probe cleanup | * 00e985958b octeontx2-pf: Disable packet I/O for graceful exit | * b5ad803dec octeontx2-af: Skip PFs if not enabled | * e39148d3d7 octeontx2-af: Secure APR table update with the lock | * a895ab54af rxrpc: Fix hard call timeout units | * f5b44b2a17 sfc: Fix module EEPROM reporting for QSFP modules | * 98a20dcedd r8152: move setting r8153b_rx_agg_chg_indicate() | * 4fbf19a5bd r8152: fix the poor throughput for 2.5G devices | * d0ebe36065 r8152: fix flow control issue of RTL8156A | * 55aeff5361 net/sched: act_mirred: Add carrier check | * 59bf62f0ed RISC-V: mm: Enable huge page support to kernel_page_present() function | * cc4ae807db watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe() | * b36cc1c394 writeback: fix call of incorrect macro | * f98f2ac30f net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu | * 56444f3061 selftests: srv6: make srv6_end_dt46_l3vpn_test more robust | * c5ce7c4517 sit: update dev->needed_headroom in ipip6_tunnel_bind_dev() | * cb145932fc net/sched: cls_api: remove block_cb from driver_list before freeing | * 480577d419 net/ncsi: clear Tx enable mode when handling a Config required AEN | * 5e756a59ce scsi: qedi: Fix use after free bug in qedi_remove() | * fd6204d772 drm/hyperv: Don't overwrite dirt_needed value set by host | * f8d9e062a6 fs/ntfs3: Fix null-ptr-deref on inode->i_op in ntfs_lookup() | * ce30b2f48b ASoC: soc-pcm: fix BE handling of PAUSE_RELEASE | * 74201b3c3e ASoC: soc-pcm: test refcount before triggering | * 2cf8c9f883 ASoC: soc-pcm: serialize BE triggers | * 703ebcf64a ASoC: soc-pcm: Fix and cleanup DPCM locking | * c474bb8000 ASoC: soc-pcm: align BE 'atomicity' with that of the FE | * 13390bea97 ASoC: soc-pcm: use GFP_ATOMIC for dpcm structure | * 25361a0155 mailbox: zynqmp: Fix counts of child nodes | * f9dd36311b mailbox: zynq: Switch to flexible array to simplify code | * 2343385fe6 bus: mhi: host: Range check CHDBOFF and ERDBOFF | * a7561c04ad bus: mhi: host: Use mhi_tryset_pm_state() for setting fw error state | * 7517f62ea0 bus: mhi: host: Remove duplicate ee check for syserr | * 9fbf10148f bus: mhi: Move host MHI code to "host" directory | * 43b2f7d690 ubifs: Fix memory leak in do_rename | * 9933a9086c ubifs: Fix AA deadlock when setting xattr for encrypted file | * 21ad89e197 crypto: ccp - Clear PSP interrupt status register before calling handler | * 93f8b66403 ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus * | bc77a1c78d Revert "uapi/linux/const.h: prefer ISO-friendly __typeof__" * | 87f6012910 Revert "sched: Make struct sched_statistics independent of fair sched class" * | 5390c024c3 Revert "sched: Fix DEBUG && !SCHEDSTATS warn" * | ece8426754 Revert "platform: Provide a remove callback that returns no value" * | 9325fcde01 Revert "media: rcar_fdp1: Convert to platform remove callback returning void" * | c2773262b8 Merge 5.15.111 into android14-5.15-lts |\| | * b0ece631f8 Linux 5.15.111 | * 0a008c5098 sched: Fix DEBUG && !SCHEDSTATS warn | * 21c2a45448 netfilter: nf_tables: deactivate anonymous set from preparation phase | * aa6ff950f8 arm64: dts: qcom: sdm845: correct dynamic power coefficients - again | * 2931ed45bf sound/oss/dmasound: fix 'dmasound_setup' defined but not used | * 503e554782 debugobject: Ensure pool refill (again) | * 6b84832966 perf intel-pt: Fix CYC timestamps after standalone CBR | * 06106efa20 perf auxtrace: Fix address filter entire kernel size | * 11c6fb35df dm: don't lock fs when the map is NULL in process of resume | * e11765cea2 dm ioctl: fix nested locking in table_clear() to remove deadlock concern | * f76fcb9d43 dm flakey: fix a crash with invalid table line | * a5d8c6bf58 dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path | * 56e952ae6d dm clone: call kmem_cache_destroy() in dm_clone_init() error path | * f382705d04 dm verity: fix error handling for check_at_most_once on FEC | * 1821a33bb2 ia64: fix an addr to taddr in huge_pte_offset() | * 3a57c70e9e s390/dasd: fix hanging blockdevice after request requeue | * ed7e8beb20 btrfs: scrub: reject unsupported scrub flags | * 14383698c0 scripts/gdb: fix lx-timerlist for Python3 | * 33383fbe4f clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent | * e8353dea7d wifi: rtl8xxxu: RTL8192EU always needs full init | * 384a0dcac2 mailbox: zynqmp: Fix typo in IPI documentation | * 09206edff0 mailbox: zynqmp: Fix IPI isr handling | * 6d1af51781 mtd: core: fix error path for nvmem provider | * 8444b46e16 mtd: core: fix nvmem error reporting | * 7c253e9868 mtd: core: provide unique name for nvmem device, take two | * 6869508407 md/raid10: fix null-ptr-deref in raid10_sync_request | * 8d07d91196 nilfs2: fix infinite loop in nilfs_mdt_get_block() | * 13f73ef77b nilfs2: do not write dirty data after degenerating to read-only | * ab0748f246 ALSA: usb-audio: Add quirk for Pioneer DDJ-800 | * a87e5b9b4c parisc: Fix argument pointer in real64_call_asm() | * f1b4681cfa afs: Fix updating of i_size with dv jump from server | * 33f302c9bf mfd: tqmx86: Correct board names for TQMxE39x | * ce01b75447 mfd: tqmx86: Specify IO port register range more precisely | * a23b3b2be0 mfd: tqmx86: Do not access I2C_DETECT register through io_base | * 388d2578c7 thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe | * bdcf9fec87 dmaengine: at_xdmac: do not enable all cyclic channels | * a5227b3be8 dmaengine: at_xdmac: Fix race for the tx desc callback | * 2b68028d77 dmaengine: at_xdmac: Fix concurrency over chan's completed_cookie | * 738a4fdbd1 dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing | * fd6316dec2 dmaengine: dw-edma: Fix to change for continuous transfer | * dd23c11136 dma: gpi: remove spurious unlock in gpi_ch_init | * dce3bdaee3 phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port | * 1cccf7c5c7 pwm: mtk-disp: Configure double buffering before reading in .get_state() | * d2798512fa pwm: mtk-disp: Disable shadow registers before setting backlight values | * 8ffa1cb8bc leds: tca6507: Fix error handling of using fwnode_property_read_string | * e63e3a0fc0 dmaengine: mv_xor_v2: Fix an error code. | * 332ca024a8 leds: TI_LMU_COMMON: select REGMAP instead of depending on it | * c904a070d7 pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration | * 40566def18 ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline | * 18eb23891a ext4: fix i_disksize exceeding i_size problem in paritally written case | * 3dc3a86b88 SMB3: Close deferred file handles in case of handle lease break | * 0f87e18203 SMB3: Add missing locks to protect deferred close file list | * b574e73db8 timekeeping: Fix references to nonexistent ktime_get_fast_ns() | * ccfede0a2c openrisc: Properly store r31 to pt_regs on unhandled exceptions | * 1c7456aa5d clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails | * c87c6d5050 RDMA/mlx5: Use correct device num_ports when modify DC | * d2823237da SUNRPC: remove the maximum number of retries in call_bind_status | * c11e44ac1a RDMA/mlx5: Fix flow counter query via DEVX | * 7acad58049 Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe | * b6157a9f0f clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling | * 33f9b8de1b clk: qcom: regmap: add PHY clock source implementation | * 0ccc1a6bac NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease | * a2bd706ab6 IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests | * 6bbc49661c IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order | * 00cc21e32e RDMA/srpt: Add a check for valid 'mad_agent' pointer | * 03b9d26f33 RDMA/cm: Trace icm_send_rej event before the cm state is reset | * 30218b7698 clk: qcom: gcc-sm6115: Mark RCGs shared where applicable | * 5255051c8f RDMA/siw: Remove namespace check from siw_netdev_event() | * 48ba87f6e1 clk: add missing of_node_put() in "assigned-clocks" property parsing | * 3d7c6f2076 power: supply: generic-adc-battery: fix unit scaling | * c58ea97aa9 fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de() | * cd7e1d6792 fs/ntfs3: Fix OOB read in indx_insert_into_buffer | * 952bbfcedb fs/ntfs3: Add check for kmemdup | * 3030f2b9b3 fs/ntfs3: Fix memory leak if ntfs_read_mft failed | * d1faeb14bc rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time | * 9911be2155 RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() | * 44438a4959 rtc: omap: include header for omap_rtc_power_off_program prototype | * 6d19fe968e workqueue: Fix hung time report of worker pools | * 6c073c5a5b workqueue: Introduce show_one_worker_pool and show_one_workqueue. | * e89f95c685 RDMA/rdmavt: Delete unnecessary NULL check | * 9721b14e6c RDMA/siw: Fix potential page_array out of range access | * 8d909684bd clk: at91: clk-sam9x60-pll: fix return value check | * 623941780d sched/rt: Fix bad task migration for rt tasks | * 594d2a0555 Revert "objtool: Support addition to set CFA base" | * 80973ce36f perf/core: Fix hardlockup failure caused by perf throttle | * 3e09b68fc5 sched/fair: Fix inaccurate tally of ttwu_move_affine | * c3b9f95598 sched: Make struct sched_statistics independent of fair sched class | * 6002989848 sched/fair: Use __schedstat_set() in set_next_entity() | * 94bcf94c25 powerpc/rtas: use memmove for potentially overlapping buffer copy | * f7107d44df macintosh: via-pmu-led: requires ATA to be set | * 85842228df powerpc/sysdev/tsi108: fix resource printk format warnings | * 179cc5ab95 powerpc/wii: fix resource printk format warnings | * 516c27922c powerpc/mpc512x: fix resource printk format warning | * da961d510b macintosh/windfarm_smu_sat: Add missing of_node_put() | * 5b9fc529b6 virtio_ring: don't update event idx on get_buf | * ee0b614631 spmi: Add a check for remove callback when removing a SPMI driver | * be267f30b0 staging: rtl8192e: Fix W_DISABLE# does not work after stop/start | * 424cf29296 serial: 8250: Add missing wakeup event reporting | * 8dfd00bfd5 tty: serial: fsl_lpuart: adjust buffer length to the intended size | * 59ecc2cf34 firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe | * ee53a7a880 usb: mtu3: fix kernel panic at qmu transfer done irq handler | * 6b0d399dac usb: chipidea: fix missing goto in `ci_hdrc_probe` | * 6d4325ebd8 usb: gadget: tegra-xudc: Fix crash in vbus_draw | * d96f6bc107 sh: sq: Fix incorrect element size for allocating bitmap buffer | * 397eb669da uapi/linux/const.h: prefer ISO-friendly __typeof__ | * d1c4dedcd2 scripts/gdb: raise error with reduced debugging information | * 2d65599ad1 i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path | * d453f25faf spi: cadence-quadspi: fix suspend-resume implementations | * 6a129c0e99 ASoC: fsl_mqs: move of_node_put() to the correct location | * 8506318455 coresight: etm_pmu: Set the module field | * db6f1b2bba HID: amd_sfh: Add support for shutdown operation | * b711dd0ba9 scripts/gdb: bail early if there are no generic PD | * eaecf281c2 scripts/gdb: bail early if there are no clocks | * 0110bfacff ia64: salinfo: placate defined-but-not-used warning | * 51395777f6 ia64: mm/contig: fix section mismatch warning/error | * 1a2a0d5b06 PCI/EDR: Clear Device Status after EDR error recovery | * cc4f0e168a of: Fix modalias string generation | * 770d30b135 vmci_host: fix a race condition in vmci_host_poll() causing GPF | * 08c7608798 spi: fsl-spi: Fix CPM/QE mode Litte Endian | * f345d4d71e spi: qup: Don't skip cleanup in remove's error path | * 77b0c0dd2c linux/vt_buffer.h: allow either builtin or modular for macros | * af9ec18aa8 ASoC: es8316: Handle optional IRQ assignment | * 39287d16b2 PCI: imx6: Install the fault handler only on compatible match | * 1e58fb6b1c usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition | * f90822ad63 spi: imx: Don't skip cleanup in remove's error path | * e9ded9dd5d spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync | * 193f7fffdc serial: 8250_bcm7271: Fix arbitration handling | * f67cc4929e iio: light: max44009: add missing OF device matching | * 7e42057532 fpga: bridge: fix kernel-doc parameter description | * 72b1ce9045 serial: stm32: Re-assert RTS/DE GPIO in RS485 mode only if more data are transmitted | * 59ed254dd3 serial: stm32: re-introduce an irq flag condition in usart_receive_chars | * 4b7bb1c7be usb: dwc3: gadget: Change condition for processing suspend event | * beb12083c1 usb: host: xhci-rcar: remove leftover quirk handling | * 295f3fcaa8 pstore: Revert pmsg_lock back to a normal mutex | * 2491b999a6 drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() | * 209850f177 drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() | * 1ffb2ca650 ipmi: ASPEED_BT_IPMI_BMC: select REGMAP_MMIO instead of depending on it | * 43e4197dd5 tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. | * 1d2f799c16 net: amd: Fix link leak when verifying config failed | * 5d6e5c054e netlink: Use copy_to_user() for optval in netlink_getsockopt(). | * a789192f36 Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" | * a54ec573d9 ipv4: Fix potential uninit variable access bug in __ip_make_skb() | * d0b43125ec net/sched: sch_fq: fix integer overflow of "credit" | * 7a45b4e1c8 netfilter: nf_tables: don't write table validation state without mutex | * 8913abddad bpf: Don't EFAULT for getsockopt with optval=NULL | * 77f245ce05 net: stmmac:fix system hang when setting up tag_8021q VLAN for DSA ports | * a9e96eef82 net/mlx5: E-switch, Don't destroy indirect table in split rule | * 05cf6f353d ixgbe: Enable setting RSS table to default values | * 624b73f776 ixgbe: Allow flow hash to be set via ethtool | * e302e9ca14 wifi: iwlwifi: fw: fix memory leak in debugfs | * 53b3b1f563 wifi: iwlwifi: mvm: check firmware response size | * aa11a89445 wifi: mt76: mt7921e: improve reliability of dma reset | * f8923ad9dd wifi: mt76: fix 6GHz high channel not be scanned | * 613b51663f wifi: mt76: mt7921e: fix probe timeout after reboot | * 5279aaf9f5 wifi: mt76: add flexible polling wait-interval support | * ac9fec5b56 wifi: mt76: handle failure of vzalloc in mt7615_coredump_work | * 210e6d01cc wifi: iwlwifi: make the loop for card preparation effective | * dff2a7b330 jdb2: Don't refuse invalidation of already invalidated buffers | * 358317ad9c wifi: iwlwifi: fw: move memset before early return | * cccf85e047 wifi: iwlwifi: mvm: initialize seq variable | * b3cecbb257 wifi: iwlwifi: yoyo: Fix possible division by zero | * 4636c35b7e wifi: iwlwifi: yoyo: skip dump correctly on hw error | * 34222897e0 md/raid10: don't call bio_start_io_acct twice for bio which experienced read error | * d6cfcf98b8 md/raid10: fix memleak of md thread | * 7f673fa34c md/raid10: fix memleak for 'conf->bio_split' | * 8d09065802 md/raid10: fix leak of 'r10bio->remaining' for recovery | * 901b4918fa md/raid10: fix task hung in raid10d | * fc04998351 md/raid10: factor out code from wait_barrier() to stop_waiting_barrier() | * 39db562b3f md: raid10 add nowait support | * 74af08efa5 md: drop queue limitation for RAID1 and RAID10 | * 337d1d88be bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap | * 12e70c6f4e selftests/bpf: Fix leaked bpf_link in get_stackid_cannot_attach | * 103a427542 nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage" | * 9fe41e6482 nvme: fix async event trace event | * 13475e6391 nvme: handle the persistent internal error AER | * 30b9073583 nvmet: fix I/O Command Set specific Identify Controller | * 42bcbc2a90 nvmet: fix Identify Active Namespace ID list handling | * 92cf81746e nvmet: fix Identify Controller handling | * ac86d59eaa nvmet: fix Identify Namespace handling | * c7e98afeca nvmet: fix error handling in nvmet_execute_identify_cns_cs_ns() | * 537083b127 nvmet: move the call to nvmet_ns_changed out of nvmet_ns_revalidate | * 080826d167 nvmet: use i_size_read() to set size for file-ns | * f333854dce bpf, sockmap: fix deadlocks in the sockhash and sockmap | * c8a67bc857 net: ethernet: stmmac: dwmac-rk: fix optional phy regulator handling | * fd8c83d837 scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() | * 9a7f63283a f2fs: fix to avoid use-after-free for cached IPU bio | * 119f278ea9 xsk: Fix unaligned descriptor validation | * 1056b20993 crypto: drbg - Only fail when jent is unavailable in FIPS mode | * 9317d66120 crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors | * 80bfd8b184 bpftool: Fix bug for long instructions in program CFG dumps | * afdc3a4bd7 selftests/bpf: Wait for receive in cg_storage_multi test | * c5fa99bce6 selftests: xsk: Disable IPv6 on VETH1 | * c4afd6410f net: qrtr: correct types of trace event parameters | * eb77c0c0a1 wifi: rt2x00: Fix memory leak when handling surveys | * 0b0c3e37a4 wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() | * 0a847af3cb wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() | * 3e660d1175 crypto: sa2ul - Select CRYPTO_DES | * d82d82e037 crypto: caam - Clear some memory in instantiate_rng | * 169134da41 f2fs: compress: fix to call f2fs_wait_on_page_writeback() in f2fs_write_raw_pages() | * d0cf44f06d f2fs: apply zone capacity to all zone type | * 2cc6a05661 f2fs: enforce single zone capacity | * e5a56f13ba f2fs: handle dqget error in f2fs_transfer_project_quota() | * 6d6415e5bc scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS | * eb4cf26d2e scsi: target: iscsit: Fix TAS handling during conn cleanup | * 9158c86fd3 scsi: target: Fix multiple LUN_RESET handling | * ad4a647aa5 net/packet: convert po->auxdata to an atomic flag | * f1a111ca05 net/packet: convert po->origdev to an atomic flag | * c3238c7dbe net/packet: annotate accesses to po->xmit | * 97e7b1c1da vlan: partially enable SIOCSHWTSTAMP in container | * 5f44dfa841 net: pcs: xpcs: remove double-read of link state when using AN | * a7282fc797 bpf: Remove misleading spec_v1 check on var-offset stack read | * 60f9ed23b9 selftests/bpf: Fix a fd leak in an error path in network_helpers.c | * 9b9e803b48 scm: fix MSG_CTRUNC setting condition for SO_PASSSEC | * 670754766a bpf: fix precision propagation verbose logging | * c022b09fcc bpf: take into account liveness when propagating precision | * 23634d119c wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() | * 3fc0be9f48 wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() | * 2ba1e4a623 tools: bpftool: Remove invalid \' json escape | * 484d95c69f wifi: ath6kl: reduce WARN to dev_dbg() in callback | * 19ba40acb1 wifi: brcmfmac: support CQM RSSI notification with older firmware | * 378364abbe wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() | * 59073060fe wifi: ath9k: hif_usb: fix memory leak of remain_skbs | * 104b1b48b6 wifi: ath6kl: minor fix for allocation size | * d1138f118f hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E | * f1d68061b0 cpufreq: use correct unit when verify cur freq | * a55050c798 tick/common: Align tick period with the HZ tick. | * 54202488c8 drm/i915: Make intel_get_crtc_new_encoder() less oopsy | * 500ffa58e7 debugobject: Prevent init race with static objects | * af04d8d3c1 arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step | * 00132fab90 x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() | * ad6481f49f regulator: stm32-pwr: fix of_iomap leak | * b8c2678d0f media: venus: dec: Fix handling of the start cmd | * 2ed8f8c09d media: rc: gpio-ir-recv: Fix support for wake-up | * 4b1afffdd9 drm/amd/display: Fix potential null dereference | * 2322b262d2 media: rcar_fdp1: Fix refcount leak in probe and remove function | * 5847021f80 media: rcar_fdp1: Convert to platform remove callback returning void | * d18789f434 platform: Provide a remove callback that returns no value | * 825281f34b media: rcar_fdp1: Fix the correct variable assignments | * 3c300022c1 media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() | * 2f48c0a463 media: saa7134: fix use after free bug in saa7134_finidev due to race condition | * c94388b5b9 media: dm1105: Fix use after free bug in dm1105_remove due to race condition | * cac0f4f36e media: rkvdec: fix use after free bug in rkvdec_remove | * d991f6139f x86/apic: Fix atomic update of offset in reserve_eilvt_offset() | * 1e3056b806 regulator: core: Avoid lockdep reports when resolving supplies | * 4e5c973818 regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() | * 678b3f29aa drm/ttm/pool: Fix ttm_pool_alloc error path | * b19bebc963 drm/ttm: optimize pool allocations a bit v2 | * 1e26766dc8 arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator | * bee1a28573 arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator | * fb0bea59d0 arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply | * 8853aab167 mailbox: mpfs: switch to txdone_poll | * 623275db28 drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() | * 5a8aedb7b9 ACPI: VIOT: Initialize the correct IOMMU fwspec | * 111af97983 firmware: arm_scmi: Fix xfers allocation on Rx channel | * 657776d47b ARM: dts: gta04: fix excess dma channel usage | * d3047a1b04 drm: rcar-du: Fix a NULL vs IS_ERR() bug | * 3cfaa8713e mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data | * 60cadfcfa4 ACPI: processor: Fix evaluating _PDC method when running as Xen dom0 | * aa8d52ddf7 drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings | * d28ec12c48 drm: msm: adreno: Disable preemption on Adreno 510 | * 2ad781393e drm/msm/adreno: drop bogus pm_runtime_set_active() | * 86c1a99528 drm/msm/adreno: Defer enabling runpm until hw_init() | * 1ad4b8c455 media: max9286: Free control handler | * 3d7003c400 drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 | * a3ea89b597 firmware: qcom_scm: Clear download bit during reboot | * ca4ce92e3e media: av7110: prevent underflow in write_ts_to_decoder() | * 519b084940 media: bdisp: Add missing check for create_workqueue | * 11c58a0c19 x86/MCE/AMD: Use an u64 for bank_map | * 88a9d3c0b5 ARM: dts: qcom: ipq8064: Fix the PCI I/O port range | * 112ff0f253 ARM: dts: qcom: ipq8064: reduce pci IO size to 64K | * 99e7b14569 ARM: dts: qcom: ipq4019: Fix the PCI I/O port range | * 96158bfc76 arm64: dts: qcom: sm8250: Fix the PCI I/O port range | * cc1ae8710a arm64: dts: qcom: msm8996: Fix the PCI I/O port range | * 656657bdeb arm64: dts: qcom: ipq6018: Fix the PCI I/O port range | * a19c40b979 arm64: dts: qcom: ipq8074: Fix the PCI I/O port range | * 9f89689d8b arm64: dts: qcom: msm8998: Fix the PCI I/O port range | * 1611140296 arm64: dts: qcom: sdm845: Fix the PCI I/O port range | * 3e7be9b632 arm64: dts: qcom: sdm845: correct dynamic power coefficients | * a9e9a4a627 arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name | * a46878476c arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename | * 1994284cb9 arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name | * 6ae67829fa arm64: dts: Move BCM4908 dts to bcmbca folder | * fe8ab85ed4 arm64: dts: Add base DTS file for bcmbca device Asus GT-AX6000 | * aefde9ada4 ARM64: dts: Add DTS files for bcmbca SoC BCM6858 | * 273be36e42 arm64: dts: Add DTS files for bcmbca SoC BCM4912 | * fe07b3b5af arm64: dts: Add DTS files for bcmbca SoC BCM63158 | * 77112d23a6 arm64: dts: broadcom: bcm4908: add DT for Netgear RAXE500 | * a53862a202 arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property | * e3143e6cca regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted | * 30b4edaf22 EDAC/skx: Fix overflows on the DRAM row address mapping arrays | * d450fa8657 drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources | * 62cd3e0561 arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table | * 667c86b2a9 arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table | * 6a50350033 soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe | * fb2a6e0029 tools/x86/kcpuid: Fix avx512bw and avx512lvl fields in Fn00000007 | * 00f79abccc drm/probe-helper: Cancel previous job before starting new one | * 9fde84fb59 drm/vgem: add missing mutex_destroy | * a51b71af16 drm/rockchip: Drop unbalanced obj unref | * 0834a2b554 erofs: fix potential overflow calculating xattr_isize | * 060fecf111 erofs: stop parsing non-compact HEAD index if clusterofs is invalid | * 5a37916d98 tpm, tpm_tis: Claim locality when interrupts are reenabled on resume | * 46da635566 tpm, tpm: Implement usage counter for locality | * 51162b05a4 tpm, tpm_tis: Claim locality before writing interrupt registers | * b665edd7a5 tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed | * fd9b4b2bff tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register | * 8c08c74de7 tpm, tpm_tis: Do not skip reset of original interrupt vector | * dfa1e84b77 selinux: ensure av_permissions.h is built when needed | * 8a3a1f7b54 selinux: fix Makefile dependencies of flask.h | * 08e4037057 selftests/resctrl: Check for return value after write_schemata() | * 25661fe5f6 selftests/resctrl: Allow ->setup() to return errors | * b5adaf5045 selftests/resctrl: Move ->setup() call outside of test specific branches | * f9eeea03a5 selftests/resctrl: Extend CPU vendor detection | * ebd40f52de selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem | * 988901984d rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check | * 74f06429b7 sound/oss/dmasound: fix build when drivers are mixed =y/=m | * c628b07d59 xfs: don't consider future format versions valid | * ce84028492 ubifs: Free memory for tmpfile name | * 20ef288612 ubi: Fix return value overwrite issue in try_write_vid_and_data() | * 3ae75f82c3 ubifs: Fix memleak when insert_old_idx() failed | * 149ea56995 Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path" | * dc299bd1d5 iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE | * b7bc8f6c8a tracing: Fix permissions for the buffer_percent file | * b91a5aa1e7 riscv: mm: remove redundant parameter of create_fdt_early_page_table | * ec1814116f i2c: omap: Fix standard mode false ACK readings | * 671f21fbcb ksmbd: fix memleak in session setup | * 227eb2689b ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() | * c053e389db ksmbd: call rcu_barrier() in ksmbd_server_exit() | * 2db4b91480 writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs | * 0b46ee654a relayfs: fix out-of-bounds access in relay_file_read | * a18bdaca46 KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted | * a79fb2ce4f reiserfs: Add security prefix to xattr name in reiserfs_security_write() | * 4c3d1a6720 rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed | * 09e177d6f7 crypto: safexcel - Cleanup ring IRQ workqueues on load failure | * 63b7fbaa12 crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON() | * c63741e872 ring-buffer: Sync IRQ works before buffer destruction | * 333f49fcf0 pinctrl: qcom: lpass-lpi: set output value before enabling output | * 3028ac7dc0 soundwire: qcom: correct setting ignore bit on v1.5.1 | * 01fefb82fd pwm: meson: Fix g12a ao clk81 name | * dcf6611e80 pwm: meson: Fix axg ao mux parents | * 2104e15b00 wifi: mt76: add missing locking to protect against concurrent rx/status calls | * 4a07d2d511 kheaders: Use array declaration instead of char | * 99d561199b ipmi: fix SSIF not responding under certain cond. | * 8fddbd9c5c ipmi:ssif: Add send_retries increment | * 3ef93b7bd9 MIPS: fw: Allow firmware to pass a empty env | * e047e40676 tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem | * 9c0b37d0da xhci: fix debugfs register accesses while suspended | * 321e16a570 tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH | * fa30909fbd staging: iio: resolver: ads1210: fix config mode | * ac44e1275d ext4: use ext4_journal_start/stop for fast commit transactions | * 5bb4005fb6 blk-crypto: make blk_crypto_evict_key() more robust | * f8d9d6c3ff blk-crypto: make blk_crypto_evict_key() return void | * d206f79d9c blk-mq: release crypto keyslot before reporting I/O complete | * 2c62f4abd7 posix-cpu-timers: Implement the missing timer_wait_running callback | * dca7427a8b hwmon: (adt7475) Use device_property APIs when configuring polarity | * d50321946e hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write | * d40fa6f788 USB: dwc3: fix runtime pm imbalance on unbind | * 9436221ea2 USB: dwc3: fix runtime pm imbalance on probe errors | * bfd6936281 IMA: allow/fix UML builds | * c23e103fd7 PCI: qcom: Fix the incorrect register usage in v2.7.0 config | * 8a0b61e5a7 PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock | * 402d2b1d54 arm64: Stash shadow stack pointer in the task struct on interrupt | * 21cc4e5304 arm64: Always load shadow stack pointer directly from the task struct | * a00f75f71f wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset | * a646556769 wireguard: timers: cast enum limits members to int in prints | * 95ec7a59ce x86/cpu: Add model number for Intel Arrow Lake processor | * 5208204006 asm-generic/io.h: suppress endianness warnings for readq() and writeq() | * 5e3c87e4d3 selftests mount: Fix mount_setattr_test builds failed | * e1383b4401 ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 | * 21976532f2 iio: adc: palmas_gpadc: fix NULL dereference on rmmod | * 50015dbdec x86/hyperv: Block root partition functionality in a Confidential VM | * a7d91f67a1 ASoC: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm | * cf5b14b8de ASOC: Intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15 * 547398c9b4 ANDROID: add more gki_module headers to .gitignore file Change-Id: I6ce864f3f76fbb9722003a5a61febd40d9cdf949 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-10-26 17:37:32 +00:00
Eric Biggers	e8b59bcd78	ANDROID: fips140: fix the error injection module parameters ... Commit 63f46b45dd ("ANDROID: fips140: eliminate crypto-fips.a build step") made all fips140 source files other than fips140-module.c be compiled in the "fake built-in code" mode. This broke the fail_selftest and fail_integrity_check module parameters, as they are defined in fips140-eval-testing.c. Fix this by making fips140-eval-testing.c be compiled "normally", overriding fips140-defs.h. Bug: 188620248 Fixes: 63f46b45dd ("ANDROID: fips140: eliminate crypto-fips.a build step") Change-Id: Iebb70bdcbb698b92a7791fa7307e2325b1a9e4b6 Signed-off-by: Eric Biggers <ebiggers@google.com>	2023-08-24 21:51:58 +00:00
Greg Kroah-Hartman	105a464bd6	Merge branch 'android14-5.15' into 'android14-5.15-lts' ... This catches the -lts branch up with all of the recent changes that have gone into the non-lts branch, INCLUDING the ABI update which we want here to ensure that we do NOT break any newly added dependent symbols (and to bring back in the reverts that were required before the ABI break). This includes the following commits: 5c138afc95 ANDROID: GKI: Include kheaders in gki_system_dlkm_modules f025c9bd5a ANDROID: 6/16/2023 KMI update d05f5134f2 ANDROID: GKI: provide more padding for struct usb_phy e010dc3625 UPSTREAM: neighbour: fix unaligned access to pneigh_entry abe4076974 UPSTREAM: net/ipv6: fix bool/int mismatch for skip_notify_on_dev_down 00ce9cfb40 ANDROID: GKI: Update symbol list for Amlogic 45e4388a79 ANDROID: GKI enable CONFIG_NETFILTER_XT_MATCH_CONNBYTES=y 78f4244dc9 BACKPORT: cgroup/cpuset: Free DL BW in case can_attach() fails 72c8100467 BACKPORT: sched/deadline: Create DL BW alloc, free & check overflow interface 71cf567de1 FROMGIT: cgroup/cpuset: Iterate only if DEADLINE tasks are present 16a812c05e BACKPORT: sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets 0dfe87dff2 BACKPORT: sched/cpuset: Bring back cpuset_mutex 2a32b2b9e8 FROMGIT: cgroup/cpuset: Rename functions dealing with DEADLINE accounting 1351520d67 ANDROID: 6/16/2023 KMI update 0270aeeb9f UPSTREAM: binder: fix UAF of alloc->vma in race with munmap() b094b04779 UPSTREAM: binder: add lockless binder_alloc_(set|get)_vma() acd8193fa0 UPSTREAM: Revert "android: binder: stop saving a pointer to the VMA" 45efb0a2fb UPSTREAM: Revert "binder_alloc: add missing mmap_lock calls when using the VMA" bc4e0df357 UPSTREAM: usb: dwc3: fix gadget mode suspend interrupt handler issue b03d86bd51 UPSTREAM: usb: gadget: Properly configure the device for remote wakeup 49cb2707a8 UPSTREAM: tcp: deny tcp_disconnect() when threads are waiting 744ad30e2d ANDROID: GKI: Add RTK STB KMI symbol list faaabc7aa2 ANDROID: Remove all but top-level OWNERS 88bfbed31c ANDROID: Enable GKI Dr. No Enforcement Change-Id: Id933d56267bad97aba87ffce873bedfbe1d3a2b1 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-18 12:27:43 +00:00
Greg Kroah-Hartman	8340dc3122	Merge 5.15.116 into android14-5.15-lts ... Changes in 5.15.116 RDMA/bnxt_re: Fix the page_size used during the MR creation RDMA/efa: Fix unsupported page sizes in device RDMA/hns: Fix base address table allocation RDMA/hns: Modify the value of long message loopback slice dmaengine: at_xdmac: Move the free desc to the tail of the desc list dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved() RDMA/bnxt_re: Fix a possible memory leak RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx iommu/rockchip: Fix unwind goto issue iommu/amd: Don't block updates to GATag if guest mode is on dmaengine: pl330: rename _start to prevent build error riscv: Fix unused variable warning when BUILTIN_DTB is set net/mlx5: fw_tracer, Fix event handling net/mlx5e: Don't attach netdev profile while handling internal error net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure netrom: fix info-leak in nr_write_internal() af_packet: Fix data-races of pkt_sk(sk)->num. amd-xgbe: fix the false linkup in xgbe_phy_status mtd: rawnand: ingenic: fix empty stub helper definitions RDMA/irdma: Add SW mechanism to generate completions on error RDMA/irdma: Prevent QP use after free RDMA/irdma: Fix Local Invalidate fencing af_packet: do not use READ_ONCE() in packet_bind() tcp: deny tcp_disconnect() when threads are waiting tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set net/sched: sch_ingress: Only create under TC_H_INGRESS net/sched: sch_clsact: Only create under TC_H_CLSACT net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs net/sched: Prohibit regrafting ingress or clsact Qdiscs net: sched: fix NULL pointer dereference in mq_attach net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report udp6: Fix race condition in udp6_sendmsg & connect net/mlx5e: Fix error handling in mlx5e_refresh_tirs net/mlx5: Read embedded cpu after init bit cleared net/sched: flower: fix possible OOB write in fl_set_geneve_opt() net: dsa: mv88e6xxx: Increase wait after reset deactivation mtd: rawnand: marvell: ensure timing values are written mtd: rawnand: marvell: don't set the NAND frequency select rtnetlink: call validate_linkmsg in rtnl_create_link drm/amdgpu: release gpu full access after "amdgpu_device_ip_late_init" watchdog: menz069_wdt: fix watchdog initialisation ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs. drm/amdgpu: Use the default reset when loading or reloading the driver mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() drm/ast: Fix ARM compatibility btrfs: abort transaction when sibling keys check fails for leaves ARM: 9295/1: unwind:fix unwind abort for uleb128 case media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield gfs2: Don't deref jdesc in evict fbdev: imsttfb: Fix use after free bug in imsttfb_probe fbdev: modedb: Add 1920x1080 at 60 Hz video mode fbdev: stifb: Fix info entry in sti_struct on error path nbd: Fix debugfs_create_dir error checking block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G nvme-pci: add quirk for missing secondary temperature thresholds ASoC: dwc: limit the number of overrun messages um: harddog: fix modular build xfrm: Check if_id in inbound policy/secpath match ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI codecs ASoC: ssm2602: Add workaround for playback distortions media: dvb_demux: fix a bug for the continuity counter media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address media: netup_unidvb: fix irq init by register it at the end of probe media: dvb_ca_en50221: fix a size write bug media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table media: dvb-core: Fix use-after-free due on race condition at dvb_net media: dvb-core: Fix use-after-free due to race at dvb_register_device() media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 s390/pkey: zeroize key blobs s390/topology: honour nr_cpu_ids when adding CPUs ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value ARM: dts: stm32: add pin map for CAN controller on stm32f7 arm64/mm: mark private VM_FAULT_X defines as vm_fault_t arm64: vdso: Pass (void *) to virt_to_page() wifi: mac80211: simplify chanctx allocation scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed wifi: b43: fix incorrect __packed annotation netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT nvme-multipath: don't call blk_mark_disk_dead in nvme_mpath_remove_disk ALSA: oss: avoid missing-prototype warnings drm/msm: Be more shouty if per-process pgtables aren't working atm: hide unused procfs functions drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged nvme-pci: Add quirk for Teamgroup MP33 SSD mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() media: uvcvideo: Don't expose unsupported formats to userspace iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT method iio: adc: mxs-lradc: fix the order of two cleanup operations HID: google: add jewel USB id HID: wacom: avoid integer overflow in wacom_intuos_inout() iio: imu: inv_icm42600: fix timestamp reset dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value iio: light: vcnl4035: fixed chip ID check iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag iio: dac: mcp4725: Fix i2c_master_send() return value handling iio: adc: ad7192: Change "shorted" channels to differential iio: dac: build ad5758 driver when AD5758 is selected net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type usb: gadget: f_fs: Add unbind event before functionfs_unbind md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk() misc: fastrpc: return -EPIPE to invocations on device removal misc: fastrpc: reject new invocations during device removal scsi: stex: Fix gcc 13 warnings ata: libata-scsi: Use correct device no in ata_find_dev() drm/amd/pm: reverse mclk and fclk clocks levels for vangogh drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp drm/amd/pm: reverse mclk and fclk clocks levels for renoir x86/boot: Wrap literal addresses in absolute_pointer() ath6kl: Use struct_group() to avoid size-mismatched casting block/blk-iocost (gcc13): keep large values in a new enum mmc: vub300: fix invalid response handling mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK btrfs: fix csum_tree_block page iteration to avoid tripping on -Werror=array-bounds powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall iommu/amd: Fix domain flush size when syncing iotlb usb: cdns3: allocate TX FIFO size according to composite EP number usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM block: fix revalidate performance regression selinux: don't use make's grouped targets feature yet tracing/probe: trace_probe_primary_from_call(): checked list_first_entry selftests: mptcp: connect: skip if MPTCP is not supported selftests: mptcp: pm nl: skip if MPTCP is not supported selftests: mptcp: sockopt: skip if MPTCP is not supported ext4: add EA_INODE checking to ext4_iget() ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() ext4: disallow ea_inodes with extended attributes ext4: add lockdep annotations for i_data_sem for ea_inode's fbcon: Fix null-ptr-deref in soft_cursor serial: 8250_tegra: Fix an error handling path in tegra_uart_probe() test_firmware: fix the memory leak of the allocated firmware buffer KVM: x86: Account fastpath-only VM-Exits in vCPU stats ksmbd: fix credit count leakage ksmbd: fix incorrect AllocationSize set in smb2_get_info KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() regmap: Account for register length when chunking tpm, tpm_tis: Request threaded interrupt handler drm/rcar: stop using 'imply' for dependencies scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD) scsi: dpt_i2o: Do not process completions with invalid addresses drm/amdgpu/gfx10: Disable gfxoff before disabling powergating. selftests: mptcp: diag: skip if MPTCP is not supported selftests: mptcp: simult flows: skip if MPTCP is not supported selftests: mptcp: join: skip if MPTCP is not supported ext4: enable the lazy init thread when remounting read/write ARM: defconfig: drop CONFIG_DRM_RCAR_LVDS RDMA/irdma: Fix drain SQ hang with no completion RDMA/irdma: Do not generate SW completions for NOPs Linux 5.15.116 Change-Id: I9c1fcca4400982e913153ad26f22826434c3c4d8 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-15 12:41:38 +00:00
Matthias Maennich	faaabc7aa2	ANDROID: Remove all but top-level OWNERS ... Now that the branch is used to create production GKI images, need to institute ACK DrNo for all commits. The DrNo approvers are in the android-mainline branch at /OWNERS_DrNo. Bug: 287162457 Signed-off-by: Matthias Maennich <maennich@google.com> Change-Id: Id5bb83d7add5f314df6816c1c51b4bf2d8018e79	2023-06-15 09:54:56 +01:00
Greg Kroah-Hartman	e42a74b5f8	Merge 5.15.112 into android14-5.15-lts ... Changes in 5.15.112 ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus crypto: ccp - Clear PSP interrupt status register before calling handler ubifs: Fix AA deadlock when setting xattr for encrypted file ubifs: Fix memory leak in do_rename bus: mhi: Move host MHI code to "host" directory bus: mhi: host: Remove duplicate ee check for syserr bus: mhi: host: Use mhi_tryset_pm_state() for setting fw error state bus: mhi: host: Range check CHDBOFF and ERDBOFF mailbox: zynq: Switch to flexible array to simplify code mailbox: zynqmp: Fix counts of child nodes ASoC: soc-pcm: use GFP_ATOMIC for dpcm structure ASoC: soc-pcm: align BE 'atomicity' with that of the FE ASoC: soc-pcm: Fix and cleanup DPCM locking ASoC: soc-pcm: serialize BE triggers ASoC: soc-pcm: test refcount before triggering ASoC: soc-pcm: fix BE handling of PAUSE_RELEASE fs/ntfs3: Fix null-ptr-deref on inode->i_op in ntfs_lookup() drm/hyperv: Don't overwrite dirt_needed value set by host scsi: qedi: Fix use after free bug in qedi_remove() net/ncsi: clear Tx enable mode when handling a Config required AEN net/sched: cls_api: remove block_cb from driver_list before freeing sit: update dev->needed_headroom in ipip6_tunnel_bind_dev() selftests: srv6: make srv6_end_dt46_l3vpn_test more robust net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu writeback: fix call of incorrect macro watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe() RISC-V: mm: Enable huge page support to kernel_page_present() function net/sched: act_mirred: Add carrier check r8152: fix flow control issue of RTL8156A r8152: fix the poor throughput for 2.5G devices r8152: move setting r8153b_rx_agg_chg_indicate() sfc: Fix module EEPROM reporting for QSFP modules rxrpc: Fix hard call timeout units octeontx2-af: Secure APR table update with the lock octeontx2-af: Skip PFs if not enabled octeontx2-pf: Disable packet I/O for graceful exit octeontx2-vf: Detach LF resources on probe cleanup ionic: remove noise from ethtool rxnfc error msg ethtool: Fix uninitialized number of lanes ionic: catch failure from devlink_alloc af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). drm/amdgpu: add a missing lock for AMDGPU_SCHED ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621 virtio_net: split free_unused_bufs() virtio_net: suppress cpu stall when free_unused_bufs net: enetc: check the index of the SFI rather than the handle perf scripts intel-pt-events.py: Fix IPC output for Python 2 perf vendor events power9: Remove UTF-8 characters from JSON files perf pmu: zfree() expects a pointer to a pointer to zero it after freeing its contents perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs() crypto: engine - check if BH is disabled during completion crypto: api - Add scaffolding to change completion function signature crypto: engine - Use crypto_request_complete crypto: engine - fix crypto_queue backlog handling perf symbols: Fix return incorrect build_id size in elf_read_build_id() perf evlist: Refactor evlist__for_each_cpu() perf stat: Separate bperf from bpf_profiler btrfs: fix btrfs_prev_leaf() to not return the same key twice btrfs: zoned: fix wrong use of bitops API in btrfs_ensure_empty_zones btrfs: fix encoded write i_size corruption with no-holes btrfs: don't free qgroup space unless specified btrfs: zero the buffer before marking it dirty in btrfs_redirty_list_add btrfs: print-tree: parent bytenr must be aligned to sector size btrfs: fix space cache inconsistency after error loading it from disk cifs: fix pcchunk length type in smb2_copychunk_range cifs: release leases for deferred close handles when freezing platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i inotify: Avoid reporting event with invalid wd smb3: fix problem remounting a share after shutdown SMB3: force unmount was failing to close deferred close files sh: math-emu: fix macro redefined warning sh: mcount.S: fix build error when PRINTK is not enabled sh: init: use OF_EARLY_FLATTREE for early init sh: nmi_debug: fix return value of __setup handler remoteproc: stm32: Call of_node_put() on iteration error remoteproc: st: Call of_node_put() on iteration error remoteproc: imx_rproc: Call of_node_put() on iteration error ARM: dts: exynos: fix WM8960 clock name in Itop Elite ARM: dts: s5pv210: correct MIPI CSIS clock name drm/bridge: lt8912b: Fix DSI Video Mode drm/msm: fix NULL-deref on snapshot tear down drm/msm: fix NULL-deref on irq uninstall f2fs: fix potential corruption when moving a directory drm/panel: otm8009a: Set backlight parent to panel device drm/amd/display: fix flickering caused by S/G mode drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras drm/amdgpu: Fix vram recover doesn't work after whole GPU reset (v2) drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend HID: wacom: Set a default resolution for older tablets HID: wacom: insert timestamp to packed Bluetooth (BT) events fs/ntfs3: Refactoring of various minor issues ASoC: soc-pcm: Fix DPCM lockdep warning due to nested stream locks ASoC: soc-compress: Inherit atomicity from DAI link for Compress FE ASoC: soc-pcm: Move debugfs removal out of spinlock ASoC: DPCM: Don't pick up BE without substream ASoC: soc-pcm.c: call __soc_pcm_close() in soc_pcm_close() drm/i915/dg2: Support 4k@30 on HDMI drm/i915/dg2: Add additional HDMI pixel clock frequencies drm/i915/dg2: Add HDMI pixel clock frequencies 267.30 and 319.89 MHz drm/msm: Remove struct_mutex usage drm/msm/adreno: fix runtime PM imbalance at gpu load drm/amd/display: Refine condition of cursor visibility for pipe-split drm/amd/display: Add NULL plane_state check for cursor disable logic wifi: rtw88: rtw8821c: Fix rfe_option field width ksmbd: set RSS capable in FSCTL_QUERY_NETWORK_INTERFACE_INFO ksmbd: fix multi session connection failure ksmbd: replace sessions list in connection with xarray ksmbd: add channel rwlock ksmbd: fix kernel oops from idr_remove() ksmbd: fix racy issue while destroying session on multichannel ksmbd: fix deadlock in ksmbd_find_crypto_ctx() ksmbd: not allow guest user on multichannel locking/rwsem: Add __always_inline annotation to __down_read_common() and inlined callers ext4: fix WARNING in mb_find_extent ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum ext4: fix data races when using cached status extents ext4: check iomap type only if ext4_iomap_begin() does not fail ext4: improve error recovery code paths in __ext4_remount() ext4: improve error handling from ext4_dirhash() ext4: fix deadlock when converting an inline directory in nojournal mode ext4: add bounds checking in get_max_inline_xattr_value_size() ext4: bail out of ext4_xattr_ibody_get() fails for any reason ext4: remove a BUG_ON in ext4_mb_release_group_pa() ext4: fix invalid free tracking in ext4_xattr_move_to_block() drm/msm/adreno: adreno_gpu: Use suspend() instead of idle() on load error serial: 8250: Fix serial8250_tx_empty() race with DMA Tx drbd: correctly submit flush bio on barrier RISC-V: Fix up a cherry-pick warning in setup_vm_final() drm/amd/display: Fix hang when skipping modeset Linux 5.15.112 Change-Id: Ie61cc0aea78266c2c5adb0a889f55affa78883e5 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-12 20:22:34 +00:00
Roberto Sassu	6cb7e7579a	KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() ... commit c3d03e8e35 upstream. Commit ac4e97abce ("scatterlist: sg_set_buf() argument must be in linear mapping") checks that both the signature and the digest reside in the linear mapping area. However, more recently commit ba14a194a4 ("fork: Add generic vmalloced stack support") made it possible to move the stack in the vmalloc area, which is not contiguous, and thus not suitable for sg_set_buf() which needs adjacent pages. Always make a copy of the signature and digest in the same buffer used to store the key and its parameters, and pass them to sg_init_one(). Prefer it to conditionally doing the copy if necessary, to keep the code simple. The buffer allocated with kmalloc() is in the linear mapping area. Cc: stable@vger.kernel.org # 4.9.x Fixes: ba14a194a4 ("fork: Add generic vmalloced stack support") Link: https://lore.kernel.org/linux-integrity/Y4pIpxbjBdajymBJ@sol.localdomain/ Suggested-by: Eric Biggers <ebiggers@kernel.org> Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com> Reviewed-by: Eric Biggers <ebiggers@google.com> Tested-by: Stefan Berger <stefanb@linux.ibm.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-06-09 10:32:34 +02:00
Greg Kroah-Hartman	c2773262b8	Merge 5.15.111 into android14-5.15-lts ... Changes in 5.15.111 ASOC: Intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15 ASoC: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm x86/hyperv: Block root partition functionality in a Confidential VM iio: adc: palmas_gpadc: fix NULL dereference on rmmod ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 selftests mount: Fix mount_setattr_test builds failed asm-generic/io.h: suppress endianness warnings for readq() and writeq() x86/cpu: Add model number for Intel Arrow Lake processor wireguard: timers: cast enum limits members to int in prints wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset arm64: Always load shadow stack pointer directly from the task struct arm64: Stash shadow stack pointer in the task struct on interrupt PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock PCI: qcom: Fix the incorrect register usage in v2.7.0 config IMA: allow/fix UML builds USB: dwc3: fix runtime pm imbalance on probe errors USB: dwc3: fix runtime pm imbalance on unbind hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write hwmon: (adt7475) Use device_property APIs when configuring polarity posix-cpu-timers: Implement the missing timer_wait_running callback blk-mq: release crypto keyslot before reporting I/O complete blk-crypto: make blk_crypto_evict_key() return void blk-crypto: make blk_crypto_evict_key() more robust ext4: use ext4_journal_start/stop for fast commit transactions staging: iio: resolver: ads1210: fix config mode tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH xhci: fix debugfs register accesses while suspended tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem MIPS: fw: Allow firmware to pass a empty env ipmi:ssif: Add send_retries increment ipmi: fix SSIF not responding under certain cond. kheaders: Use array declaration instead of char wifi: mt76: add missing locking to protect against concurrent rx/status calls pwm: meson: Fix axg ao mux parents pwm: meson: Fix g12a ao clk81 name soundwire: qcom: correct setting ignore bit on v1.5.1 pinctrl: qcom: lpass-lpi: set output value before enabling output ring-buffer: Sync IRQ works before buffer destruction crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON() crypto: safexcel - Cleanup ring IRQ workqueues on load failure rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed reiserfs: Add security prefix to xattr name in reiserfs_security_write() KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted relayfs: fix out-of-bounds access in relay_file_read writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs ksmbd: call rcu_barrier() in ksmbd_server_exit() ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() ksmbd: fix memleak in session setup i2c: omap: Fix standard mode false ACK readings riscv: mm: remove redundant parameter of create_fdt_early_page_table tracing: Fix permissions for the buffer_percent file iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path" ubifs: Fix memleak when insert_old_idx() failed ubi: Fix return value overwrite issue in try_write_vid_and_data() ubifs: Free memory for tmpfile name xfs: don't consider future format versions valid sound/oss/dmasound: fix build when drivers are mixed =y/=m rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem selftests/resctrl: Extend CPU vendor detection selftests/resctrl: Move ->setup() call outside of test specific branches selftests/resctrl: Allow ->setup() to return errors selftests/resctrl: Check for return value after write_schemata() selinux: fix Makefile dependencies of flask.h selinux: ensure av_permissions.h is built when needed tpm, tpm_tis: Do not skip reset of original interrupt vector tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed tpm, tpm_tis: Claim locality before writing interrupt registers tpm, tpm: Implement usage counter for locality tpm, tpm_tis: Claim locality when interrupts are reenabled on resume erofs: stop parsing non-compact HEAD index if clusterofs is invalid erofs: fix potential overflow calculating xattr_isize drm/rockchip: Drop unbalanced obj unref drm/vgem: add missing mutex_destroy drm/probe-helper: Cancel previous job before starting new one tools/x86/kcpuid: Fix avx512bw and avx512lvl fields in Fn00000007 soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources EDAC/skx: Fix overflows on the DRAM row address mapping arrays regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property arm64: dts: broadcom: bcm4908: add DT for Netgear RAXE500 arm64: dts: Add DTS files for bcmbca SoC BCM63158 arm64: dts: Add DTS files for bcmbca SoC BCM4912 ARM64: dts: Add DTS files for bcmbca SoC BCM6858 arm64: dts: Add base DTS file for bcmbca device Asus GT-AX6000 arm64: dts: Move BCM4908 dts to bcmbca folder arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name arm64: dts: qcom: sdm845: correct dynamic power coefficients arm64: dts: qcom: sdm845: Fix the PCI I/O port range arm64: dts: qcom: msm8998: Fix the PCI I/O port range arm64: dts: qcom: ipq8074: Fix the PCI I/O port range arm64: dts: qcom: ipq6018: Fix the PCI I/O port range arm64: dts: qcom: msm8996: Fix the PCI I/O port range arm64: dts: qcom: sm8250: Fix the PCI I/O port range ARM: dts: qcom: ipq4019: Fix the PCI I/O port range ARM: dts: qcom: ipq8064: reduce pci IO size to 64K ARM: dts: qcom: ipq8064: Fix the PCI I/O port range x86/MCE/AMD: Use an u64 for bank_map media: bdisp: Add missing check for create_workqueue media: av7110: prevent underflow in write_ts_to_decoder() firmware: qcom_scm: Clear download bit during reboot drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 media: max9286: Free control handler drm/msm/adreno: Defer enabling runpm until hw_init() drm/msm/adreno: drop bogus pm_runtime_set_active() drm: msm: adreno: Disable preemption on Adreno 510 drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings ACPI: processor: Fix evaluating _PDC method when running as Xen dom0 mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data drm: rcar-du: Fix a NULL vs IS_ERR() bug ARM: dts: gta04: fix excess dma channel usage firmware: arm_scmi: Fix xfers allocation on Rx channel ACPI: VIOT: Initialize the correct IOMMU fwspec drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() mailbox: mpfs: switch to txdone_poll arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator drm/ttm: optimize pool allocations a bit v2 drm/ttm/pool: Fix ttm_pool_alloc error path regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() regulator: core: Avoid lockdep reports when resolving supplies x86/apic: Fix atomic update of offset in reserve_eilvt_offset() media: rkvdec: fix use after free bug in rkvdec_remove media: dm1105: Fix use after free bug in dm1105_remove due to race condition media: saa7134: fix use after free bug in saa7134_finidev due to race condition media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() media: rcar_fdp1: Fix the correct variable assignments platform: Provide a remove callback that returns no value media: rcar_fdp1: Convert to platform remove callback returning void media: rcar_fdp1: Fix refcount leak in probe and remove function drm/amd/display: Fix potential null dereference media: rc: gpio-ir-recv: Fix support for wake-up media: venus: dec: Fix handling of the start cmd regulator: stm32-pwr: fix of_iomap leak x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step debugobject: Prevent init race with static objects drm/i915: Make intel_get_crtc_new_encoder() less oopsy tick/common: Align tick period with the HZ tick. cpufreq: use correct unit when verify cur freq hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E wifi: ath6kl: minor fix for allocation size wifi: ath9k: hif_usb: fix memory leak of remain_skbs wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() wifi: brcmfmac: support CQM RSSI notification with older firmware wifi: ath6kl: reduce WARN to dev_dbg() in callback tools: bpftool: Remove invalid \' json escape wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() bpf: take into account liveness when propagating precision bpf: fix precision propagation verbose logging scm: fix MSG_CTRUNC setting condition for SO_PASSSEC selftests/bpf: Fix a fd leak in an error path in network_helpers.c bpf: Remove misleading spec_v1 check on var-offset stack read net: pcs: xpcs: remove double-read of link state when using AN vlan: partially enable SIOCSHWTSTAMP in container net/packet: annotate accesses to po->xmit net/packet: convert po->origdev to an atomic flag net/packet: convert po->auxdata to an atomic flag scsi: target: Fix multiple LUN_RESET handling scsi: target: iscsit: Fix TAS handling during conn cleanup scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS f2fs: handle dqget error in f2fs_transfer_project_quota() f2fs: enforce single zone capacity f2fs: apply zone capacity to all zone type f2fs: compress: fix to call f2fs_wait_on_page_writeback() in f2fs_write_raw_pages() crypto: caam - Clear some memory in instantiate_rng crypto: sa2ul - Select CRYPTO_DES wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() wifi: rt2x00: Fix memory leak when handling surveys net: qrtr: correct types of trace event parameters selftests: xsk: Disable IPv6 on VETH1 selftests/bpf: Wait for receive in cg_storage_multi test bpftool: Fix bug for long instructions in program CFG dumps crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors crypto: drbg - Only fail when jent is unavailable in FIPS mode xsk: Fix unaligned descriptor validation f2fs: fix to avoid use-after-free for cached IPU bio scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() net: ethernet: stmmac: dwmac-rk: fix optional phy regulator handling bpf, sockmap: fix deadlocks in the sockhash and sockmap nvmet: use i_size_read() to set size for file-ns nvmet: move the call to nvmet_ns_changed out of nvmet_ns_revalidate nvmet: fix error handling in nvmet_execute_identify_cns_cs_ns() nvmet: fix Identify Namespace handling nvmet: fix Identify Controller handling nvmet: fix Identify Active Namespace ID list handling nvmet: fix I/O Command Set specific Identify Controller nvme: handle the persistent internal error AER nvme: fix async event trace event nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage" selftests/bpf: Fix leaked bpf_link in get_stackid_cannot_attach bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap md: drop queue limitation for RAID1 and RAID10 md: raid10 add nowait support md/raid10: factor out code from wait_barrier() to stop_waiting_barrier() md/raid10: fix task hung in raid10d md/raid10: fix leak of 'r10bio->remaining' for recovery md/raid10: fix memleak for 'conf->bio_split' md/raid10: fix memleak of md thread md/raid10: don't call bio_start_io_acct twice for bio which experienced read error wifi: iwlwifi: yoyo: skip dump correctly on hw error wifi: iwlwifi: yoyo: Fix possible division by zero wifi: iwlwifi: mvm: initialize seq variable wifi: iwlwifi: fw: move memset before early return jdb2: Don't refuse invalidation of already invalidated buffers wifi: iwlwifi: make the loop for card preparation effective wifi: mt76: handle failure of vzalloc in mt7615_coredump_work wifi: mt76: add flexible polling wait-interval support wifi: mt76: mt7921e: fix probe timeout after reboot wifi: mt76: fix 6GHz high channel not be scanned wifi: mt76: mt7921e: improve reliability of dma reset wifi: iwlwifi: mvm: check firmware response size wifi: iwlwifi: fw: fix memory leak in debugfs ixgbe: Allow flow hash to be set via ethtool ixgbe: Enable setting RSS table to default values net/mlx5: E-switch, Don't destroy indirect table in split rule net: stmmac:fix system hang when setting up tag_8021q VLAN for DSA ports bpf: Don't EFAULT for getsockopt with optval=NULL netfilter: nf_tables: don't write table validation state without mutex net/sched: sch_fq: fix integer overflow of "credit" ipv4: Fix potential uninit variable access bug in __ip_make_skb() Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" netlink: Use copy_to_user() for optval in netlink_getsockopt(). net: amd: Fix link leak when verifying config failed tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. ipmi: ASPEED_BT_IPMI_BMC: select REGMAP_MMIO instead of depending on it drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() pstore: Revert pmsg_lock back to a normal mutex usb: host: xhci-rcar: remove leftover quirk handling usb: dwc3: gadget: Change condition for processing suspend event serial: stm32: re-introduce an irq flag condition in usart_receive_chars serial: stm32: Re-assert RTS/DE GPIO in RS485 mode only if more data are transmitted fpga: bridge: fix kernel-doc parameter description iio: light: max44009: add missing OF device matching serial: 8250_bcm7271: Fix arbitration handling spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync spi: imx: Don't skip cleanup in remove's error path usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition PCI: imx6: Install the fault handler only on compatible match ASoC: es8316: Handle optional IRQ assignment linux/vt_buffer.h: allow either builtin or modular for macros spi: qup: Don't skip cleanup in remove's error path spi: fsl-spi: Fix CPM/QE mode Litte Endian vmci_host: fix a race condition in vmci_host_poll() causing GPF of: Fix modalias string generation PCI/EDR: Clear Device Status after EDR error recovery ia64: mm/contig: fix section mismatch warning/error ia64: salinfo: placate defined-but-not-used warning scripts/gdb: bail early if there are no clocks scripts/gdb: bail early if there are no generic PD HID: amd_sfh: Add support for shutdown operation coresight: etm_pmu: Set the module field ASoC: fsl_mqs: move of_node_put() to the correct location spi: cadence-quadspi: fix suspend-resume implementations i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path scripts/gdb: raise error with reduced debugging information uapi/linux/const.h: prefer ISO-friendly __typeof__ sh: sq: Fix incorrect element size for allocating bitmap buffer usb: gadget: tegra-xudc: Fix crash in vbus_draw usb: chipidea: fix missing goto in `ci_hdrc_probe` usb: mtu3: fix kernel panic at qmu transfer done irq handler firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe tty: serial: fsl_lpuart: adjust buffer length to the intended size serial: 8250: Add missing wakeup event reporting staging: rtl8192e: Fix W_DISABLE# does not work after stop/start spmi: Add a check for remove callback when removing a SPMI driver virtio_ring: don't update event idx on get_buf macintosh/windfarm_smu_sat: Add missing of_node_put() powerpc/mpc512x: fix resource printk format warning powerpc/wii: fix resource printk format warnings powerpc/sysdev/tsi108: fix resource printk format warnings macintosh: via-pmu-led: requires ATA to be set powerpc/rtas: use memmove for potentially overlapping buffer copy sched/fair: Use __schedstat_set() in set_next_entity() sched: Make struct sched_statistics independent of fair sched class sched/fair: Fix inaccurate tally of ttwu_move_affine perf/core: Fix hardlockup failure caused by perf throttle Revert "objtool: Support addition to set CFA base" sched/rt: Fix bad task migration for rt tasks clk: at91: clk-sam9x60-pll: fix return value check RDMA/siw: Fix potential page_array out of range access RDMA/rdmavt: Delete unnecessary NULL check workqueue: Introduce show_one_worker_pool and show_one_workqueue. workqueue: Fix hung time report of worker pools rtc: omap: include header for omap_rtc_power_off_program prototype RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time fs/ntfs3: Fix memory leak if ntfs_read_mft failed fs/ntfs3: Add check for kmemdup fs/ntfs3: Fix OOB read in indx_insert_into_buffer fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de() power: supply: generic-adc-battery: fix unit scaling clk: add missing of_node_put() in "assigned-clocks" property parsing RDMA/siw: Remove namespace check from siw_netdev_event() clk: qcom: gcc-sm6115: Mark RCGs shared where applicable RDMA/cm: Trace icm_send_rej event before the cm state is reset RDMA/srpt: Add a check for valid 'mad_agent' pointer IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease clk: qcom: regmap: add PHY clock source implementation clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe RDMA/mlx5: Fix flow counter query via DEVX SUNRPC: remove the maximum number of retries in call_bind_status RDMA/mlx5: Use correct device num_ports when modify DC clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails openrisc: Properly store r31 to pt_regs on unhandled exceptions timekeeping: Fix references to nonexistent ktime_get_fast_ns() SMB3: Add missing locks to protect deferred close file list SMB3: Close deferred file handles in case of handle lease break ext4: fix i_disksize exceeding i_size problem in paritally written case ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration leds: TI_LMU_COMMON: select REGMAP instead of depending on it dmaengine: mv_xor_v2: Fix an error code. leds: tca6507: Fix error handling of using fwnode_property_read_string pwm: mtk-disp: Disable shadow registers before setting backlight values pwm: mtk-disp: Configure double buffering before reading in .get_state() phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port dma: gpi: remove spurious unlock in gpi_ch_init dmaengine: dw-edma: Fix to change for continuous transfer dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing dmaengine: at_xdmac: Fix concurrency over chan's completed_cookie dmaengine: at_xdmac: Fix race for the tx desc callback dmaengine: at_xdmac: do not enable all cyclic channels thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe mfd: tqmx86: Do not access I2C_DETECT register through io_base mfd: tqmx86: Specify IO port register range more precisely mfd: tqmx86: Correct board names for TQMxE39x afs: Fix updating of i_size with dv jump from server parisc: Fix argument pointer in real64_call_asm() ALSA: usb-audio: Add quirk for Pioneer DDJ-800 nilfs2: do not write dirty data after degenerating to read-only nilfs2: fix infinite loop in nilfs_mdt_get_block() md/raid10: fix null-ptr-deref in raid10_sync_request mtd: core: provide unique name for nvmem device, take two mtd: core: fix nvmem error reporting mtd: core: fix error path for nvmem provider mailbox: zynqmp: Fix IPI isr handling mailbox: zynqmp: Fix typo in IPI documentation wifi: rtl8xxxu: RTL8192EU always needs full init clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent scripts/gdb: fix lx-timerlist for Python3 btrfs: scrub: reject unsupported scrub flags s390/dasd: fix hanging blockdevice after request requeue ia64: fix an addr to taddr in huge_pte_offset() dm verity: fix error handling for check_at_most_once on FEC dm clone: call kmem_cache_destroy() in dm_clone_init() error path dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path dm flakey: fix a crash with invalid table line dm ioctl: fix nested locking in table_clear() to remove deadlock concern dm: don't lock fs when the map is NULL in process of resume perf auxtrace: Fix address filter entire kernel size perf intel-pt: Fix CYC timestamps after standalone CBR debugobject: Ensure pool refill (again) sound/oss/dmasound: fix 'dmasound_setup' defined but not used arm64: dts: qcom: sdm845: correct dynamic power coefficients - again netfilter: nf_tables: deactivate anonymous set from preparation phase sched: Fix DEBUG && !SCHEDSTATS warn Linux 5.15.111 Change-Id: Ic17a1be536afd1897c1b88d5d054afbac9182d1a Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-08 13:25:38 +00:00
Olivier Bacon	f716374c4e	crypto: engine - fix crypto_queue backlog handling ... [ Upstream commit 4140aafcff ] CRYPTO_TFM_REQ_MAY_BACKLOG tells the crypto driver that it should internally backlog requests until the crypto hw's queue becomes full. At that point, crypto_engine backlogs the request and returns -EBUSY. Calling driver such as dm-crypt then waits until the complete() function is called with a status of -EINPROGRESS before sending a new request. The problem lies in the call to complete() with a value of -EINPROGRESS that is made when a backlog item is present on the queue. The call is done before the successful execution of the crypto request. In the case that do_one_request() returns < 0 and the retry support is available, the request is put back in the queue. This leads upper drivers to send a new request even if the queue is still full. The problem can be reproduced by doing a large dd into a crypto dm-crypt device. This is pretty easy to see when using Freescale CAAM crypto driver and SWIOTLB dma. Since the actual amount of requests that can be hold in the queue is unlimited we get IOs error and dma allocation. The fix is to call complete with a value of -EINPROGRESS only if the request is not enqueued back in crypto_queue. This is done by calling complete() later in the code. In order to delay the decision, crypto_queue is modified to correctly set the backlog pointer when a request is enqueued back. Fixes: 6a89f492f8 ("crypto: engine - support for parallel requests based on retry mechanism") Co-developed-by: Sylvain Ouellet <souellet@genetec.com> Signed-off-by: Sylvain Ouellet <souellet@genetec.com> Signed-off-by: Olivier Bacon <obacon@genetec.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-05-17 11:50:20 +02:00
Herbert Xu	fa4e304bbd	crypto: engine - Use crypto_request_complete ... [ Upstream commit 6909823d47 ] Use the crypto_request_complete helper instead of calling the completion function directly. Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Stable-dep-of: 4140aafcff ("crypto: engine - fix crypto_queue backlog handling") Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-05-17 11:50:20 +02:00
Corentin Labbe	a8cc4d5adf	crypto: engine - check if BH is disabled during completion ... [ Upstream commit 4058cf0894 ] When doing iperf over ipsec with crypto hardware sun8i-ce, I hit some spinlock recursion bug. This is due to completion function called with enabled BH. Add check a to detect this. Fixes: 735d37b542 ("crypto: engine - Introduce the block request crypto engine framework") Signed-off-by: Corentin Labbe <clabbe@baylibre.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Stable-dep-of: 4140aafcff ("crypto: engine - fix crypto_queue backlog handling") Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-05-17 11:50:20 +02:00
Herbert Xu	1056b20993	crypto: drbg - Only fail when jent is unavailable in FIPS mode ... [ Upstream commit 686cd976b6 ] When jent initialisation fails for any reason other than ENOENT, the entire drbg fails to initialise, even when we're not in FIPS mode. This is wrong because we can still use the kernel RNG when we're not in FIPS mode. Change it so that it only fails when we are in FIPS mode. Fixes: 57225e6797 ("crypto: drbg - Use callback API for random readiness") Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Reviewed-by: Stephan Mueller <smueller@chronox.de> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-05-11 23:00:27 +09:00
Nicolai Stange	9317d66120	crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors ... [ Upstream commit 559edd47cc ] Now that drbg_prepare_hrng() doesn't do anything but to instantiate a jitterentropy crypto_rng instance, it looks a little odd to have the related error handling at its only caller, drbg_instantiate(). Move the handling of jitterentropy allocation failures from drbg_instantiate() close to the allocation itself in drbg_prepare_hrng(). There is no change in behaviour. Signed-off-by: Nicolai Stange <nstange@suse.de> Reviewed-by: Stephan Müller <smueller@chronox.de> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Stable-dep-of: 686cd976b6 ("crypto: drbg - Only fail when jent is unavailable in FIPS mode") Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-05-11 23:00:27 +09:00
Toke Høiland-Jørgensen	63b7fbaa12	crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON() ... commit a543ada7db upstream. The crypto_unregister_alg() function expects callers to ensure that any algorithm that is unregistered has a refcnt of exactly 1, and issues a BUG_ON() if this is not the case. However, there are in fact drivers that will call crypto_unregister_alg() without ensuring that the refcnt has been lowered first, most notably on system shutdown. This causes the BUG_ON() to trigger, which prevents a clean shutdown and hangs the system. To avoid such hangs on shutdown, demote the BUG_ON() in crypto_unregister_alg() to a WARN_ON() with early return. Cc stable because this problem was observed on a 6.2 kernel, cf the link below. Link: https://lore.kernel.org/r/87r0tyq8ph.fsf@toke.dk Cc: stable@vger.kernel.org Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-05-11 23:00:17 +09:00
Greg Kroah-Hartman	4ea7053789	Merge 5.15.108 into android14-5.15 ... Changes in 5.15.108 Revert "pinctrl: amd: Disable and mask interrupts on resume" ALSA: emu10k1: fix capture interrupt handler unlinking ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard ALSA: i2c/cs8427: fix iec958 mixer control deactivation ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() ALSA: emu10k1: don't create old pass-through playback device on Audigy ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} Bluetooth: Fix race condition in hidp_session_thread btrfs: print checksum type and implementation at mount time btrfs: fix fast csum implementation detection fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace mtdblock: tolerate corrected bit-flips mtd: rawnand: meson: fix bitmask for length in command word mtd: rawnand: stm32_fmc2: remove unsupported EDO mode mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min KVM: arm64: PMU: Restore the guest's EL0 event counting after migration drm/i915/dsi: fix DSS CTL register offsets for TGL+ clk: sprd: set max_register according to mapping range RDMA/irdma: Fix memory leak of PBLE objects RDMA/irdma: Increase iWARP CM default rexmit count RDMA/irdma: Add ipv4 check to irdma_find_listener() IB/mlx5: Add support for 400G_8X lane speed RDMA/cma: Allow UD qp_type to join multicast only bpf: tcp: Use sock_gen_put instead of sock_put in bpf_iter_tcp 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition niu: Fix missing unwind goto in niu_alloc_channels() tcp: restrict net.ipv4.tcp_app_win drm/armada: Fix a potential double free in an error handling path qlcnic: check pci_reset_function result net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() sctp: fix a potential overflow in sctp_ifwdtsn_skip RDMA/core: Fix GID entry ref leak when create_ah fails udp6: fix potential access to stale information net: macb: fix a memory corruption in extended buffer descriptor mode skbuff: Fix a race between coalescing and releasing SKBs libbpf: Fix single-line struct definition output in btf_dump ARM: 9290/1: uaccess: Fix KASAN false-positives power: supply: cros_usbpd: reclassify "default case!" as debug wifi: mwifiex: mark OF related data as maybe unused i2c: imx-lpi2c: clean rx/tx buffers upon new message i2c: hisi: Avoid redundant interrupts efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F verify_pefile: relax wrapper length check asymmetric_keys: log on fatal failures in PE/pkcs7 wifi: iwlwifi: mvm: fix mvmtxq->stopped handling ACPI: resource: Add Medion S17413 to IRQ override quirk counter: stm32-lptimer-cnt: Provide defines for clock polarities counter: stm32-timer-cnt: Provide defines for slave mode selection counter: Internalize sysfs interface code counter: 104-quad-8: Fix Synapse action reported for Index signals tracing: Add trace_array_puts() to write into instance tracing: Have tracing_snapshot_instance_cond() write errors to the appropriate instance i915/perf: Replace DRM_DEBUG with driver specific drm_dbg call drm/i915: fix race condition UAF in i915_perf_add_config_ioctl riscv: add icache flush for nommu sigreturn trampoline net: sfp: initialize sfp->i2c_block_size at sfp allocation net: phy: nxp-c45-tja11xx: add remove callback net: phy: nxp-c45-tja11xx: fix unsigned long multiplication overflow scsi: ses: Handle enclosure with just a primary component gracefully x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() mptcp: use mptcp_schedule_work instead of open-coding it mptcp: stricter state check in mptcp_worker ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size ubi: Fix deadlock caused by recursively holding work_sem powerpc/papr_scm: Update the NUMA distance table for the target node sched/fair: Move calculate of avg_load to a better location sched/fair: Fix imbalance overflow x86/rtc: Remove __init for runtime functions i2c: ocores: generate stop condition after timeout in polling mode nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG GAMMIX S50 nvme-pci: avoid the deepest sleep state on ZHITAI TiPro7000 SSDs nvme-pci: Crucial P2 has bogus namespace ids nvme-pci: add NVME_QUIRK_BOGUS_NID for Lexar NM610 nvme-pci: add NVME_QUIRK_BOGUS_NID for Lexar NM760 nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN nvme-pci: add NVME_QUIRK_BOGUS_NID for T-FORCE Z330 SSD kexec: turn all kexec_mutex acquisitions into trylocks panic, kexec: make __crash_kexec() NMI safe counter: fix docum. build problems after filename change counter: Add the necessary colons and indents to the comments of counter_compi nvme-pci: avoid the deepest sleep state on ZHITAI TiPro5000 SSDs Linux 5.15.108 Change-Id: Icdb539c68f2ea04d37818cb4fe66b08384b77609 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-04-25 16:02:54 +00:00
Robbie Harwood	0efd9ed929	asymmetric_keys: log on fatal failures in PE/pkcs7 ... [ Upstream commit 3584c1dbff ] These particular errors can be encountered while trying to kexec when secureboot lockdown is in place. Without this change, even with a signed debug build, one still needs to reboot the machine to add the appropriate dyndbg parameters (since lockdown blocks debugfs). Accordingly, upgrade all pr_debug() before fatal error into pr_warn(). Signed-off-by: Robbie Harwood <rharwood@redhat.com> Signed-off-by: David Howells <dhowells@redhat.com> cc: Jarkko Sakkinen <jarkko@kernel.org> cc: Eric Biederman <ebiederm@xmission.com> cc: Herbert Xu <herbert@gondor.apana.org.au> cc: keyrings@vger.kernel.org cc: linux-crypto@vger.kernel.org cc: kexec@lists.infradead.org Link: https://lore.kernel.org/r/20230220171254.592347-3-rharwood@redhat.com/ # v2 Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-04-20 12:13:54 +02:00
Robbie Harwood	ae2b44aead	verify_pefile: relax wrapper length check ... [ Upstream commit 4fc5c74dde ] The PE Format Specification (section "The Attribute Certificate Table (Image Only)") states that `dwLength` is to be rounded up to 8-byte alignment when used for traversal. Therefore, the field is not required to be an 8-byte multiple in the first place. Accordingly, pesign has not performed this alignment since version 0.110. This causes kexec failure on pesign'd binaries with "PEFILE: Signature wrapper len wrong". Update the comment and relax the check. Signed-off-by: Robbie Harwood <rharwood@redhat.com> Signed-off-by: David Howells <dhowells@redhat.com> cc: Jarkko Sakkinen <jarkko@kernel.org> cc: Eric Biederman <ebiederm@xmission.com> cc: Herbert Xu <herbert@gondor.apana.org.au> cc: keyrings@vger.kernel.org cc: linux-crypto@vger.kernel.org cc: kexec@lists.infradead.org Link: https://learn.microsoft.com/en-us/windows/win32/debug/pe-format#the-attribute-certificate-table-image-only Link: https://github.com/rhboot/pesign Link: https://lore.kernel.org/r/20230220171254.592347-2-rharwood@redhat.com/ # v2 Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-04-20 12:13:54 +02:00
Greg Kroah-Hartman	ea8aebc48c	Merge 5.15.99 into android14-5.15 ... Changes in 5.15.99 HID: asus: use spinlock to protect concurrent accesses HID: asus: use spinlock to safely schedule workers powerpc/mm: Rearrange if-else block to avoid clang warning ARM: OMAP2+: Fix memory leak in realtime_counter_init() arm64: dts: qcom: qcs404: use symbol names for PCIe resets arm64: dts: qcom: msm8996-tone: Fix USB taking 6 minutes to wake up arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k arm64: dts: qcom: sm6125: Reorder HSUSB PHY clocks to match bindings arm64: dts: imx8m: Align SoC unique ID node unit address ARM: zynq: Fix refcount leak in zynq_early_slcr_init arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name arm64: dts: qcom: sc7180: correct SPMI bus address cells arm64: dts: qcom: sc7280: correct SPMI bus address cells arm64: dts: meson-gx: Fix Ethernet MAC address unit name arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address arm64: dts: msm8992-bullhead: add memory hole region arm64: dts: qcom: msm8992-bullhead: Fix cont_splash_mem size arm64: dts: qcom: msm8992-bullhead: Disable dfps_data_mem arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names arm64: dts: qcom: Fix IPQ8074 PCIe PHY nodes arm64: dts: qcom: ipq8074: fix PCIe PHY serdes size arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges arm64: dts: qcom: ipq8074: fix Gen3 PCIe node arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names arm64: dts: meson: remove CPU opps below 1GHz for G12A boards ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init() ARM: bcm2835_defconfig: Enable the framebuffer ARM: s3c: fix s3c64xx_set_timer_source prototype arm64: dts: ti: k3-j7200: Fix wakeup pinmux range ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato ARM: imx: Call ida_simple_remove() for ida_simple_get arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names property arm64: dts: amlogic: meson-gx: add missing unit address to rng node name arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip locking/rwsem: Optimize down_read_trylock() under highly contended case locking/rwsem: Disable preemption in all down_read*() and up_read() code paths arm64: dts: renesas: beacon-renesom: Fix gpio expander reference arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN ARM: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference ARM: dts: imx7s: correct iomuxc gpr mux controller cells arm64: dts: mt8192: Fix CPU map for single-cluster SoC arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node blk-mq: avoid sleep in blk_mq_alloc_request_hctx blk-mq: remove stale comment for blk_mq_sched_mark_restart_hctx blk-mq: correct stale comment of .get_budget arm64: dts: qcom: msm8992-lg-bullhead: Correct memory overlaps with the SMEM and MPSS memory regions s390/dasd: Fix potential memleak in dasd_eckd_init() sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity() sched/rt: pick_next_rt_entity(): check list_entry x86/perf/zhaoxin: Add stepping check for ZXC KEYS: asymmetric: Fix ECDSA use via keyctl uapi arm64: dts: qcom: pmk8350: Specify PBS register for PON arm64: dts: qcom: pmk8350: Use the correct PON compatible block: bio-integrity: Copy flags when bio_integrity_payload is cloned wifi: rsi: Fix memory leak in rsi_coex_attach() wifi: rtlwifi: rtl8821ae: don't call kfree_skb() under spin_lock_irqsave() wifi: rtlwifi: rtl8188ee: don't call kfree_skb() under spin_lock_irqsave() wifi: rtlwifi: rtl8723be: don't call kfree_skb() under spin_lock_irqsave() wifi: iwlegacy: common: don't call dev_kfree_skb() under spin_lock_irqsave() wifi: libertas: fix memory leak in lbs_init_adapter() wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave() wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() libbpf: Fix btf__align_of() by taking into account field offsets wifi: ipw2x00: don't call dev_kfree_skb() under spin_lock_irqsave() wifi: ipw2200: fix memory leak in ipw_wdev_init() wifi: wilc1000: fix potential memory leak in wilc_mac_xmit() wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() wifi: libertas_tf: don't call kfree_skb() under spin_lock_irqsave() wifi: libertas: if_usb: don't call kfree_skb() under spin_lock_irqsave() wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave() wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave() wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave() crypto: x86/ghash - fix unaligned access in ghash_setkey() ACPICA: Drop port I/O validation for some regions genirq: Fix the return type of kstat_cpu_irqs_sum() rcu-tasks: Improve comments explaining tasks_rcu_exit_srcu purpose rcu-tasks: Remove preemption disablement around srcu_read_[un]lock() calls rcu-tasks: Fix synchronize_rcu_tasks() VS zap_pid_ns_processes() lib/mpi: Fix buffer overrun when SG is too long crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2 ACPICA: nsrepair: handle cases without a return value correctly thermal/drivers/tsens: Drop msm8976-specific defines thermal/drivers/tsens: Add compat string for the qcom,msm8960 thermal/drivers/tsens: Sort out msm8976 vs msm8956 data thermal/drivers/tsens: fix slope values for msm8939 thermal/drivers/tsens: limit num_sensors to 9 for msm8939 wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU wifi: orinoco: check return value of hermes_write_wordrec() wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function ath9k: hif_usb: simplify if-if to if-else ath9k: htc: clean up statistics macros wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data() ACPI: battery: Fix missing NUL-termination with large strings crypto: ccp - Failure on re-initialization due to duplicate sysfs filename crypto: essiv - Handle EBUSY correctly crypto: seqiv - Handle EBUSY correctly powercap: fix possible name leak in powercap_register_zone() x86: Mark stop_this_cpu() __noreturn x86/microcode: Rip out the OLD_INTERFACE x86/microcode: Default-disable late loading x86/microcode: Print previous version of microcode after reload x86/microcode: Add a parameter to microcode_check() to store CPU capabilities x86/microcode: Check CPU capabilities after late microcode update correctly x86/microcode: Adjust late loading result reporting message crypto: xts - Handle EBUSY correctly leds: led-class: Add missing put_device() to led_put() crypto: ccp - Refactor out sev_fw_alloc() crypto: ccp - Flush the SEV-ES TMR memory before giving it to firmware bpftool: profile online CPUs instead of possible mt76: mt7915: fix polling firmware-own status net/mlx5: Enhance debug print in page allocation failure irqchip: Fix refcount leak in platform_irqchip_probe irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe irqchip/ti-sci: Fix refcount leak in ti_sci_intr_irq_domain_probe s390/mem_detect: fix detect_memory() error handling s390/vmem: fix empty page tables cleanup under KASAN net: add sock_init_data_uid() tun: tun_chr_open(): correctly initialize socket uid tap: tap_open(): correctly initialize socket uid OPP: fix error checking in opp_migrate_dentry() Bluetooth: L2CAP: Fix potential user-after-free Bluetooth: hci_qca: get wakeup status from serdev device handle s390/ap: fix status returned by ap_aqic() s390/ap: fix status returned by ap_qact() libbpf: Fix alen calculation in libbpf_nla_dump_errormsg() rds: rds_rm_zerocopy_callback() correct order for list_add_tail() crypto: rsa-pkcs1pad - Use akcipher_request_complete m68k: /proc/hardware should depend on PROC_FS RISC-V: time: initialize hrtimer based broadcast clock event device wifi: iwl3945: Add missing check for create_singlethread_workqueue wifi: iwl4965: Add missing check for create_singlethread_workqueue() wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() selftests/bpf: Fix out-of-srctree build ACPI: resource: Add IRQ overrides for MAINGEAR Vector Pro 2 models ACPI: resource: Do IRQ override on all TongFang GMxRGxx crypto: crypto4xx - Call dma_unmap_page when done wifi: mac80211: make rate u32 in sta_set_rate_info_rx() thermal/drivers/hisi: Drop second sensor hi3660 can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a bus error bpf: Fix global subprog context argument resolution logic irqchip/irq-brcmstb-l2: Set IRQ_LEVEL for level triggered interrupts irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts selftests/net: Interpret UDP_GRO cmsg data as an int value l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register() net: bcmgenet: fix MoCA LED control selftest: fib_tests: Always cleanup before exit sefltests: netdevsim: wait for devlink instance after netns removal drm: Fix potential null-ptr-deref due to drmm_mode_config_init() drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats drm/bridge: ti-sn65dsi83: Fix delay after reset deassert to match spec drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC drm/bridge: megachips: Fix error handling in i2c_register_driver() drm/vkms: Fix memory leak in vkms_init() drm/vkms: Fix null-ptr-deref in vkms_release() drm/vc4: dpi: Add option for inverting pixel clock and output enable drm/vc4: dpi: Fix format mapping for RGB565 drm: tidss: Fix pixel format definition gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() hwmon: (ftsteutates) Fix scaling of measurements drm/msm/hdmi: Add missing check for alloc_ordered_workqueue pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups drm/vc4: hvs: Set AXI panic modes drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5 drm/vc4: hdmi: Correct interlaced timings again drm/msm: clean event_thread->worker in case of an error scsi: qla2xxx: edif: Fix I/O timeout due to over-subscription scsi: qla2xxx: Fix exchange oversubscription scsi: qla2xxx: Fix exchange oversubscription for management commands ASoC: fsl_sai: Update to modern clocking terminology ASoC: fsl_sai: initialize is_dsp_mode flag drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() ALSA: hda/ca0132: minor fix for allocation size drm/msm/gem: Add check for kmalloc drm/msm/dpu: Disallow unallocated resources to be returned drm/bridge: lt9611: fix sleep mode setup drm/bridge: lt9611: fix HPD reenablement drm/bridge: lt9611: fix polarity programming drm/bridge: lt9611: fix programming of video modes drm/bridge: lt9611: fix clock calculation drm/bridge: lt9611: pass a pointer to the of node drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness drm: exynos: dsi: Fix MIPI_DSI*_NO_* mode flags drm/msm/dsi: Allow 2 CTRLs on v2.5.0 drm/msm: use strscpy instead of strncpy drm/msm/dpu: Add check for cstate drm/msm/dpu: Add check for pstates drm/msm/mdp5: Add check for kzalloc pinctrl: bcm2835: Remove of_node_put() in bcm2835_of_gpio_ranges_fallback() pinctrl: mediatek: fix coding style pinctrl: mediatek: Initialize variable pullen and pullup to zero pinctrl: mediatek: Initialize variable *buf to zero gpu: host1x: Don't skip assigning syncpoints to channels drm/tegra: firewall: Check for is_addr_reg existence in IMM check drm/msm/dpu: set pdpu->is_rt_pipe early in dpu_plane_sspp_atomic_update() drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd drm/mediatek: Use NULL instead of 0 for NULL pointer drm/mediatek: Drop unbalanced obj unref drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc drm/mediatek: Clean dangling pointer on bind error path ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress() gpio: vf610: connect GPIO label to dev name spi: dw_bt1: fix MUX_MMIO dependencies ASoC: mchp-spdifrx: fix controls which rely on rsr register ASoC: mchp-spdifrx: fix return value in case completion times out ASoC: mchp-spdifrx: fix controls that works with completion mechanism ASoC: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove() ASoC: rsnd: fixup #endif position ASoC: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params() ASoC: dt-bindings: meson: fix gx-card codec node regex hwmon: (ltc2945) Handle error case in ltc2945_value_store drm/amdgpu: fix enum odm_combine_mode mismatch scsi: mpt3sas: Fix a memory leak scsi: aic94xx: Add missing check for dma_map_single() HID: multitouch: Add quirks for flipped axes HID: retain initial quirks set up when creating HID devices ASoC: codecs: Change bulk clock voting to optional voting in digital codecs ASoC: codecs: rx-macro: move clk provider to managed variants ASoC: codecs: tx-macro: move clk provider to managed variants ASoC: codecs: rx-macro: move to individual clks from bulk ASoC: codecs: tx-macro: move to individual clks from bulk ASoC: codecs: lpass: fix incorrect mclk rate spi: bcm63xx-hsspi: Fix multi-bit mode setting hwmon: (mlxreg-fan) Return zero speed for broken fan ASoC: tlv320adcx140: fix 'ti,gpio-config' DT property init dm: remove flush_scheduled_work() during local_exit() NFSv4: keep state manager thread active if swap is enabled nfs4trace: fix state manager flag printing NFS: fix disabling of swap spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one() ASoC: soc-dapm.h: fixup warning struct snd_pcm_substream not declared HID: bigben: use spinlock to protect concurrent accesses HID: bigben_worker() remove unneeded check on report_field HID: bigben: use spinlock to safely schedule workers hid: bigben_probe(): validate report count drm/shmem-helper: Fix locking for drm_gem_shmem_get_pages_sgt() nfsd: fix race to check ls_layouts cifs: Fix lost destroy smbd connection when MR allocate failed cifs: Fix warning and UAF when destroy the MR list gfs2: jdata writepage fix perf llvm: Fix inadvertent file creation leds: led-core: Fix refcount leak in of_led_get() perf inject: Use perf_data__read() for auxtrace perf intel-pt: Add documentation for Event Trace and TNT disable perf intel-pt: Add link to the perf wiki's Intel PT page perf intel-pt: Add support for emulated ptwrite perf intel-pt: Do not try to queue auxtrace data on pipe perf tools: Fix auto-complete on aarch64 sparc: allow PM configs for sparc32 COMPILE_TEST selftests/ftrace: Fix bash specific "==" operator printf: fix errname.c list objtool: add UACCESS exceptions for __tsan_volatile_read/write mfd: cs5535: Don't build on UML mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0 dmaengine: HISI_DMA should depend on ARCH_HISI iio: light: tsl2563: Do not hardcode interrupt trigger type usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe() i2c: designware: fix i2c_dw_clk_rate() return size to be u32 soundwire: cadence: Don't overflow the command FIFOs driver core: fix potential null-ptr-deref in device_add() kobject: modify kobject_get_path() to take a const * kobject: Fix slab-out-of-bounds in fill_kobj_path() alpha/boot/tools/objstrip: fix the check for ELF header media: uvcvideo: Do not check for V4L2_CTRL_WHICH_DEF_VAL media: uvcvideo: Remove s_ctrl and g_ctrl media: uvcvideo: refactor __uvc_ctrl_add_mapping media: uvcvideo: Add support for V4L2_CTRL_TYPE_CTRL_CLASS media: uvcvideo: Use control names from framework media: uvcvideo: Check controls flags before accessing them media: uvcvideo: Check for INACTIVE in uvc_ctrl_is_accessible() coresight: etm4x: Fix accesses to TRCSEQRSTEVR and TRCSEQSTR coresight: cti: Prevent negative values of enable count coresight: cti: Add PM runtime call in enable_store ACPI: resource: Add helper function acpi_dev_get_memory_resources() usb: typec: intel_pmc_mux: Use the helper acpi_dev_get_memory_resources() usb: typec: intel_pmc_mux: Don't leak the ACPI device reference count PCI/IOV: Enlarge virtfn sysfs name buffer PCI: switchtec: Return -EFAULT for copy_to_user() errors tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown() tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown() serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init() Revert "char: pcmcia: cm4000_cs: Replace mdelay with usleep_range in set_protocol" eeprom: idt_89hpesx: Fix error handling in idt_init() applicom: Fix PCI device refcount leak in applicom_init() firmware: stratix10-svc: add missing gen_pool_destroy() in stratix10_svc_drv_probe() VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF misc/mei/hdcp: Use correct macros to initialize uuid_le driver core: fix resource leak in device_add() drivers: base: transport_class: fix possible memory leak drivers: base: transport_class: fix resource leak when transport_add_device() fails firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle fotg210-udc: Add missing completion handler dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers usb: early: xhci-dbc: Fix a potential out-of-bound memory access tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case RDMA/cxgb4: add null-ptr-check after ip_dev_find() usb: musb: mediatek: don't unregister something that wasn't registered usb: gadget: configfs: use to_config_usb_cfg() in os_desc_link() usb: gadget: configfs: use to_usb_function_instance() in cfg (un)link func usb: gadget: configfs: remove using list iterator after loop body as a ptr usb: gadget: configfs: Restrict symlink creation is UDC already binded iommu/vt-d: Set No Execute Enable bit in PASID table entry power: supply: remove faulty cooling logic RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish() usb: max-3421: Fix setting of I/O pins RDMA/irdma: Cap MSIX used to online CPUs + 1 serial: fsl_lpuart: fix RS485 RTS polariy inverse issue tty: serial: imx: Handle RS485 DE signal active high tty: serial: imx: disable Ageing Timer interrupt request irq dmaengine: dw-edma: Fix readq_ch() return value truncation phy: rockchip-typec: fix tcphy_get_mode error case iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() iommu: Fix error unwind in iommu_group_alloc() dmaengine: sf-pdma: pdma_desc memory leak fix dmaengine: dw-axi-dmac: Do not dereference NULL structure iommu/vt-d: Fix error handling in sva enable/disable paths iommu/vt-d: Remove duplicate identity domain flag iommu/vt-d: Check FL and SL capability sanity in scalable mode iommu/vt-d: Use second level for GPA->HPA translation iommu/vt-d: Allow to use flush-queue when first level is default IB/hfi1: Fix math bugs in hfi1_can_pin_pages() IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers media: ti: cal: fix possible memory leak in cal_ctx_create() media: platform: ti: Add missing check for devm_regulator_get powerpc: Remove linker flag from KBUILD_AFLAGS s390/vdso: remove -nostdlib compiler flag s390/vdso: Drop '-shared' from KBUILD_CFLAGS_64 builddeb: clean generated package content media: max9286: Fix memleak in max9286_v4l2_register() media: ov2740: Fix memleak in ov2740_init_controls() media: ov5675: Fix memleak in ov5675_init_controls() media: i2c: ov772x: Fix memleak in ov772x_probe() media: i2c: imx219: Split common registers from mode tables media: i2c: imx219: Fix binning for RAW8 capture media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data media: v4l2-jpeg: ignore the unknown APP14 marker media: imx-jpeg: Apply clk_bulk api instead of operating specific clk media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() media: i2c: ov7670: 0 instead of -EINVAL was returned media: usb: siano: Fix use after free bugs caused by do_submit_urb media: saa7134: Use video_unregister_device for radio_dev rpmsg: glink: Avoid infinite loop on intent for missing channel udf: Define EFSCORRUPTED error code ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy blk-iocost: fix divide by 0 error in calc_lcoefs() trace/blktrace: fix memory leak with using debugfs_lookup() wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() rcu: Make RCU_LOCKDEP_WARN() avoid early lockdep checks rcu: Suppress smp_processor_id() complaint in synchronize_rcu_expedited_wait() rcu-tasks: Make rude RCU-Tasks work well with CPU hotplug wifi: ath11k: debugfs: fix to work with multiple PCI devices thermal: intel: Fix unsigned comparison with less than zero timers: Prevent union confusion from unexpected restart_syscall() x86/bugs: Reset speculation control settings on init wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds wifi: mt7601u: fix an integer underflow inet: fix fast path in __inet_hash_connect() ice: restrict PTP HW clock freq adjustments to 100, 000, 000 PPB ice: add missing checks for PF vsi type ACPI: Don't build ACPICA with '-Os' thermal: intel: intel_pch: Add support for Wellsburg PCH clocksource: Suspend the watchdog temporarily when high read latency detected crypto: hisilicon: Wipe entire pool on error net: bcmgenet: Add a check for oversized packets m68k: Check syscall_trace_enter() return code netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj() tools/power/x86/intel-speed-select: Add Emerald Rapid quirk wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup ACPI: video: Fix Lenovo Ideapad Z570 DMI match net/mlx5: fw_tracer: Fix debug print coda: Avoid partial allocation of sig_inputArgs uaccess: Add minimum bounds check on kernel buffer size s390/idle: mark arch_cpu_idle() noinstr time/debug: Fix memory leak with using debugfs_lookup() PM: domains: fix memory leak with using debugfs_lookup() PM: EM: fix memory leak with using debugfs_lookup() Bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE hv_netvsc: Check status in SEND_RNDIS_PKT completion message scm: add user copy checks to put_cmsg() drm/amd/display: Revert Reduce delay when sink device not able to ACK 00340h write drm/amd/display: Fix potential null-deref in dm_resume drm/omap: dsi: Fix excessive stack usage HID: Add Mapping for System Microphone Mute drm/tiny: ili9486: Do not assume 8-bit only SPI controllers drm/radeon: free iio for atombios when driver shutdown scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write Revert "fbcon: don't lose the console font across generic->chip driver switch" drm: amd: display: Fix memory leakage drm/msm/dsi: Add missing check for alloc_ordered_workqueue docs/scripts/gdb: add necessary make scripts_gdb step ASoC: soc-compress: Reposition and add pcm_mutex ASoC: kirkwood: Iterate over array indexes instead of using pointer math regulator: max77802: Bounds check regulator id against opmode regulator: s5m8767: Bounds check id indexing into arrays gfs2: Improve gfs2_make_fs_rw error handling hwmon: (coretemp) Simplify platform device handling pinctrl: at91: use devm_kasprintf() to avoid potential leaks scsi: snic: Fix memory leak with using debugfs_lookup() HID: logitech-hidpp: Don't restart communication if not necessary drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5 dm thin: add cond_resched() to various workqueue loops dm cache: add cond_resched() to various workqueue loops nfsd: zero out pointers after putting nfsd_files on COPY setup error drm/shmem-helper: Revert accidental non-GPL export wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu firmware: coreboot: framebuffer: Ignore reserved pixel color bits block: don't allow multiple bios for IOCB_NOWAIT issue rtc: pm8xxx: fix set-alarm race ipmi:ssif: resend_msg() cannot fail ipmi_ssif: Rename idle state and check s390/extmem: return correct segment type in __segment_load() s390: discard .interp section s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler s390/kprobes: fix current_kprobe never cleared after kprobes reenter cifs: Fix uninitialized memory read in smb3_qfs_tcon() btrfs: hold block group refcount during async discard locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath ksmbd: fix wrong data area length for smb2 lock request ksmbd: do not allow the actual frame length to be smaller than the rfc1002 length ARM: dts: exynos: correct HDMI phy compatible in Exynos4 hfs: fix missing hfs_bnode_get() in __hfs_bnode_create fs: hfsplus: fix UAF issue in hfsplus_put_super exfat: fix reporting fs error when reading dir beyond EOF exfat: fix unexpected EOF while reading dir exfat: redefine DIR_DELETED as the bad cluster number exfat: fix inode->i_blocks for non-512 byte sector size device fs: dlm: don't set stop rx flag after node reset fs: dlm: move sending fin message into state change handling fs: dlm: send FIN ack back in right cases f2fs: fix information leak in f2fs_move_inline_dirents() f2fs: fix cgroup writeback accounting with fs-layer encryption ocfs2: fix defrag path triggering jbd2 ASSERT ocfs2: fix non-auto defrag path not working issue selftests/landlock: Skip overlayfs tests when not supported selftests/landlock: Test ptrace as much as possible with Yama udf: Truncate added extents on failed expansion udf: Do not bother merging very long extents udf: Do not update file length for failed writes to inline files udf: Preserve link count of system files udf: Detect system inodes linked into directory hierarchy udf: Fix file corruption when appending just after end of preallocated extent RDMA/siw: Fix user page pinning accounting KVM: Destroy target device if coalesced MMIO unregistration fails KVM: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI KVM: SVM: Fix potential overflow in SEV's send|receive_update_data() KVM: SVM: hyper-v: placate modpost section mismatch error KVM: s390: disable migration mode when dirty tracking is disabled x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) x86/crash: Disable virt in core NMI crash handler to avoid double shootdown x86/reboot: Disable virtualization in an emergency if SVM is supported x86/reboot: Disable SVM, not just VMX, when stopping CPUs x86/kprobes: Fix __recover_optprobed_insn check optimizing logic x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter x86/microcode/AMD: Add a @cpu parameter to the reloading functions x86/microcode/AMD: Fix mixed steppings support x86/speculation: Allow enabling STIBP with legacy IBRS Documentation/hw-vuln: Document the interaction between IBRS and STIBP brd: return 0/-error from brd_insert_page() ima: Align ima_file_mmap() parameters with mmap_file LSM hook irqdomain: Fix association race irqdomain: Fix disassociation race irqdomain: Look for existing mapping only once irqdomain: Drop bogus fwspec-mapping error handling irqdomain: Fix domain registration race crypto: qat - fix out-of-bounds read io_uring: handle TIF_NOTIFY_RESUME when checking for task_work io_uring: mark task TASK_RUNNING before handling resume/task work io_uring: add a conditional reschedule to the IOPOLL cancelation loop io_uring/rsrc: disallow multi-source reg buffers io_uring: remove MSG_NOSIGNAL from recvmsg io_uring/poll: allow some retries for poll triggering spuriously ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC jbd2: fix data missing when reusing bh which is ready to be checkpointed ext4: optimize ea_inode block expansion ext4: refuse to create ea block when umounted mtd: spi-nor: sfdp: Fix index value for SCCR dwords mtd: spi-nor: spansion: Consider reserved bits in CFR5 register mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type dm: send just one event on resize, not two dm: add cond_resched() to dm_wq_work() wifi: rtl8xxxu: Use a longer retry limit of 48 wifi: ath11k: allow system suspend to survive ath11k wifi: cfg80211: Fix use after free for wext qede: fix interrupt coalescing configuration thermal: intel: powerclamp: Fix cur_state for multi package system dm flakey: fix logic when corrupting a bio dm flakey: don't corrupt the zero page dm flakey: fix a bug with 32-bit highmem systems ARM: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node ARM: dts: exynos: correct TMU phandle in Exynos4210 ARM: dts: exynos: correct TMU phandle in Exynos4 ARM: dts: exynos: correct TMU phandle in Odroid XU3 family ARM: dts: exynos: correct TMU phandle in Exynos5250 ARM: dts: exynos: correct TMU phandle in Odroid XU ARM: dts: exynos: correct TMU phandle in Odroid HC1 fuse: add inode/permission checks to fileattr_get/fileattr_set rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails ceph: update the time stamps and try to drop the suid/sgid alpha: fix FEN fault handling dax/kmem: Fix leak of memory-hotplug resources mips: fix syscall_get_nr media: ipu3-cio2: Fix PM runtime usage_count in driver unbind remoteproc/mtk_scp: Move clk ops outside send_lock docs: gdbmacros: print newest record mm: memcontrol: deprecate charge moving mm/thp: check and bail out if page in deferred queue already ktest.pl: Give back console on Ctrt^C on monitor ktest.pl: Fix missing "end_monitor" when machine check fails ktest.pl: Add RUN_TIMEOUT option with default unlimited ring-buffer: Handle race between rb_move_tail and rb_check_pages tools/bootconfig: fix single & used for logical condition scsi: qla2xxx: Fix link failure in NPIV environment scsi: qla2xxx: Check if port is online before sending ELS scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests scsi: qla2xxx: Remove unintended flag clearing scsi: qla2xxx: Fix erroneous link down scsi: qla2xxx: Remove increment of interface err cnt scsi: ses: Don't attach if enclosure has no components scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses scsi: ses: Fix possible desc_ptr out-of-bounds accesses scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() RISC-V: add a spin_shadow_stack declaration riscv: mm: fix regression due to update_mmu_cache change riscv: jump_label: Fixup unaligned arch_static_branch function riscv, mm: Perform BPF exhandler fixup on page fault riscv: ftrace: Remove wasted nops for !RISCV_ISA_C riscv: ftrace: Reduce the detour code size to half MIPS: DTS: CI20: fix otg power gpio PCI/PM: Observe reset delay irrespective of bridge_d3 PCI: hotplug: Allow marking devices as disconnected during bind/unbind PCI: Avoid FLR for AMD FCH AHCI adapters iommu/vt-d: Avoid superfluous IOTLB tracking in lazy mode vfio/type1: prevent underflow of locked_vm via exec() vfio/type1: track locked_vm per dma vfio/type1: restore locked_vm drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv drm/radeon: Fix eDP for single-display iMac11,2 drm/i915: Don't use BAR mappings for ring buffers with LLC drm/edid: fix AVI infoframe aspect ratio handling perf intel-pt: pkt-decoder: Add CFE and EVD packets qede: avoid uninitialized entries in coal_entry array media: uvcvideo: Fix memory leak of object map on error exit path iommu/vt-d: Fix an unbalanced rcu_read_lock/rcu_read_unlock() arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY wifi: ath9k: use proper statements in conditionals kbuild: Port silent mode detection to future gnu make. Linux 5.15.99 Change-Id: I52781008c0a83946c09698b9b5625a5f7ee2e545 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-03-17 13:35:31 +00:00
Herbert Xu	b677cb4f0b	crypto: rsa-pkcs1pad - Use akcipher_request_complete ... [ Upstream commit 564cabc0ca ] Use the akcipher_request_complete helper instead of calling the completion function directly. In fact the previous code was buggy in that EINPROGRESS was never passed back to the original caller. Fixes: 3d5b1ecdea ("crypto: rsa - RSA padding algorithm") Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-03-10 09:39:16 +01:00
Herbert Xu	912eb10b65	crypto: xts - Handle EBUSY correctly ... [ Upstream commit 51c082514c ] As it is xts only handles the special return value of EINPROGRESS, which means that in all other cases it will free data related to the request. However, as the caller of xts may specify MAY_BACKLOG, we also need to expect EBUSY and treat it in the same way. Otherwise backlogged requests will trigger a use-after-free. Fixes: 8083b1bf81 ("crypto: xts - add support for ciphertext stealing") Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Acked-by: Ard Biesheuvel <ardb@kernel.org> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-03-10 09:39:13 +01:00
Herbert Xu	36ec108b7b	crypto: seqiv - Handle EBUSY correctly ... [ Upstream commit 32e62025e5 ] As it is seqiv only handles the special return value of EINPROGERSS, which means that in all other cases it will free data related to the request. However, as the caller of seqiv may specify MAY_BACKLOG, we also need to expect EBUSY and treat it in the same way. Otherwise backlogged requests will trigger a use-after-free. Fixes: 0a270321db ("[CRYPTO] seqiv: Add Sequence Number IV Generator") Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-03-10 09:39:11 +01:00
Herbert Xu	840a1d3b77	crypto: essiv - Handle EBUSY correctly ... [ Upstream commit b5a772adf4 ] As it is essiv only handles the special return value of EINPROGERSS, which means that in all other cases it will free data related to the request. However, as the caller of essiv may specify MAY_BACKLOG, we also need to expect EBUSY and treat it in the same way. Otherwise backlogged requests will trigger a use-after-free. Fixes: be1eb7f78a ("crypto: essiv - create wrapper template...") Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Acked-by: Ard Biesheuvel <ardb@kernel.org> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-03-10 09:39:11 +01:00
Denis Kenzior	2936952fa6	KEYS: asymmetric: Fix ECDSA use via keyctl uapi ... [ Upstream commit 10de7b5429 ] When support for ECDSA keys was added, constraints for data & signature sizes were never updated. This makes it impossible to use such keys via keyctl API from userspace. Update constraint on max_data_size to 64 bytes in order to support SHA512-based signatures. Also update the signature length constraints per ECDSA signature encoding described in RFC 5480. Fixes: 299f561a66 ("x509: Add support for parsing x509 certs with ECDSA keys") Signed-off-by: Denis Kenzior <denkenz@gmail.com> Reviewed-by: Stefan Berger <stefanb@linux.ibm.com> Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-03-10 09:39:05 +01:00
Greg Kroah-Hartman	962d1816e1	Merge 5.15.86 into android14-5.15 ... Changes in 5.15.86 drm/amd/display: Manually adjust strobe for DCN303 usb: musb: remove extra check in musb_gadget_vbus_draw arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable arm64: dts: qcom: msm8996: Add MSM8996 Pro support arm64: dts: qcom: msm8996: fix supported-hw in cpufreq OPP tables arm64: dts: qcom: msm8996: fix GPU OPP table ARM: dts: qcom: apq8064: fix coresight compatible arm64: dts: qcom: sdm630: fix UART1 pin bias arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias arm64: dts: qcom: msm8916: Drop MSS fallback compatible objtool, kcsan: Add volatile read/write instrumentation to whitelist ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96 ARM: dts: stm32: Fix AV96 WLAN regulator gpio property drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static arm64: dts: qcom: pm660: Use unique ADC5_VCOIN address in node name arm64: dts: qcom: sm8250: correct LPASS pin pull down soc: qcom: llcc: make irq truly optional arm64: dts: qcom: Correct QMP PHY child node name arm64: dts: qcom: sm8150: fix UFS PHY registers arm64: dts: qcom: sm8250: fix UFS PHY registers arm64: dts: qcom: sm8350: fix UFS PHY registers arm64: dts: qcom: sm8250: drop bogus DP PHY clock soc: qcom: apr: make code more reuseable soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index arm64: dts: qcom: sm6125: fix SDHCI CQE reg names arm: dts: spear600: Fix clcd interrupt soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe arm64: Treat ESR_ELx as a 64-bit register arm64: mm: kfence: only handle translation faults perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node ARM: dts: nuvoton: Remove bogus unit addresses from fixed-partition nodes arm64: dts: mt6779: Fix devicetree build warnings arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators arm64: dts: mt2712e: Fix unit address for pinctrl node arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names arm64: dts: mt2712-evb: Fix usb vbus regulators unit names arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port ARM: dts: turris-omnia: Add ethernet aliases ARM: dts: turris-omnia: Add switch port 6 node arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC seccomp: Move copy_seccomp() to no failure path. pstore/ram: Fix error return code in ramoops_probe() ARM: mmp: fix timer_read delay pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init() tpm/tpm_crb: Fix error message in __crb_relinquish_locality() ovl: store lower path in ovl_inode ovl: use ovl_copy_{real,upper}attr() wrappers ovl: remove privs in ovl_copyfile() ovl: remove privs in ovl_fallocate() sched/fair: Cleanup task_util and capacity type sched/uclamp: Fix relationship between uclamp and migration margin sched/uclamp: Make task_fits_capacity() use util_fits_cpu() sched/uclamp: Make select_idle_capacity() use util_fits_cpu() sched/fair: Removed useless update of p->recent_used_cpu sched/core: Introduce sched_asym_cpucap_active() sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() cpuidle: dt: Return the correct numbers of parsed idle states alpha: fix TIF_NOTIFY_SIGNAL handling alpha: fix syscall entry in !AUDUT_SYSCALL case x86/sgx: Reduce delay and interference of enclave release PM: hibernate: Fix mistake in kerneldoc comment fs: don't audit the capability check in simple_xattr_list() cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() selftests/ftrace: event_triggers: wait longer for test_event_enable perf: Fix possible memleak in pmu_dev_alloc() lib/debugobjects: fix stat count and optimize debug_objects_mem_init platform/x86: huawei-wmi: fix return value calculation timerqueue: Use rb_entry_safe() in timerqueue_getnext() proc: fixup uptime selftest lib/fonts: fix undefined behavior in bit shift for get_default_font ocfs2: fix memory leak in ocfs2_stack_glue_init() MIPS: vpe-mt: fix possible memory leak while module exiting MIPS: vpe-cmp: fix possible memory leak while module exiting selftests/efivarfs: Add checking of the test return value PNP: fix name memory leak in pnp_alloc_dev() perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() thermal: core: fix some possible name leaks in error paths irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() SUNRPC: Return true/false (not 1/0) from bool functions NFSD: Finish converting the NFSv2 GETACL result encoder nfsd: don't call nfsd_file_put from client states seqfile display genirq/irqdesc: Don't try to remove non-existing sysfs files cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value lib/notifier-error-inject: fix error when writing -errno to debugfs file debugfs: fix error when writing negative value to atomic_t debugfs file rapidio: fix possible name leaks when rio_add_device() fails rapidio: rio: fix possible name leak in rio_register_mport() clocksource/drivers/sh_cmt: Access registers according to spec mips: ralink: mt7621: define MT7621_SYSC_BASE with __iomem mips: ralink: mt7621: soc queries and tests as functions mips: ralink: mt7621: do not use kzalloc too early futex: Move to kernel/futex/ futex: Resend potentially swallowed owner death notification cpu/hotplug: Make target_store() a nop when target == state cpu/hotplug: Do not bail-out in DYING/STARTING sections clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock() ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() x86/xen: Fix memory leak in xen_init_lock_cpu() xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() PM: runtime: Do not call __rpm_callback() from rpm_idle() platform/chrome: cros_ec_typec: Cleanup switch handle return paths platform/chrome: cros_ec_typec: zero out stale pointers platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() MIPS: BCM63xx: Add check for NULL for clk in clk_enable MIPS: OCTEON: warn only once if deprecated link status is being used lockd: set other missing fields when unlocking files fs: sysv: Fix sysv_nblocks() returns wrong value rapidio: fix possible UAF when kfifo_alloc() fails eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD relay: fix type mismatch when allocating memory in relay_create_buf() hfs: Fix OOB Write in hfs_asc2mac rapidio: devices: fix missing put_device in mport_cdev_open platform/mellanox: mlxbf-pmc: Fix event typo wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() wifi: rtl8xxxu: Fix reading the vendor of combo chips drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge libbpf: Fix use-after-free in btf_dump_name_dups libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() ata: libata: move ata_{port,link,dev}_dbg to standard pr_XXX() macros ata: add/use ata_taskfile::{error|status} fields ata: libata: fix NCQ autosense logic ipmi: kcs: Poll OBF briefly to reduce OBE latency drm/amdgpu/powerplay/psm: Fix memory leak in power state init media: v4l2-ctrls: Fix off-by-one error in integer menu control check media: coda: jpeg: Add check for kmalloc media: adv748x: afe: Select input port when initializing AFE media: i2c: ad5820: Fix error path venus: pm_helpers: Fix error check in vcodec_domains_get() soreuseport: Fix socket selection for SO_INCOMING_CPU. media: exynos4-is: don't rely on the v4l2_async_subdev internals libbpf: Btf dedup identical struct test needs check for nested structs/arrays can: kvaser_usb: do not increase tx statistics when sending error message frames can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT can: kvaser_usb_leaf: Set Warning state even without bus errors can: kvaser_usb: make use of units.h in assignment of frequency can: kvaser_usb_leaf: Fix improved state not being reported can: kvaser_usb_leaf: Fix wrong CAN state after stopping can: kvaser_usb_leaf: Fix bogus restart events can: kvaser_usb: Add struct kvaser_usb_busparams can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming drm/rockchip: lvds: fix PM usage counter unbalance in poweron clk: renesas: r9a06g032: Repair grave increment error spi: Update reference to struct spi_controller drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure ima: Handle -ESTALE returned by ima_filter_rule_match() drm/msm/hdmi: drop unused GPIO support drm/msm/hdmi: use devres helper for runtime PM management bpf: Fix slot type check in check_stack_write_var_off media: vivid: fix compose size exceed boundary media: platform: exynos4-is: fix return value check in fimc_md_probe() bpf: propagate precision in ALU/ALU64 operations bpf: Check the other end of slot_type for STACK_SPILL bpf: propagate precision across all frames, not just the last one clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs mtd: Fix device name leak when register device failed in add_mtd_device() Input: joystick - fix Kconfig warning for JOYSTICK_ADC wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port media: camss: Clean up received buffers on failed start of streaming net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() rxrpc: Fix ack.bufferSize to be 0 when generating an ack bfq: fix waker_bfqq inconsistency crash drm/radeon: Add the missed acpi_put_table() to fix memory leak drm/mediatek: Modify dpi power on/off sequence. ASoC: pxa: fix null-pointer dereference in filter() libbpf: Fix uninitialized warning in btf_dump_dump_type_data nvmet: only allocate a single slab for bvecs regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() nvme: return err on nvme_init_non_mdts_limits fail regulator: qcom-rpmh: Fix PMR735a S3 regulator spec drm/fourcc: Add packed 10bit YUV 4:2:0 format drm/fourcc: Fix vsub/hsub for Q410 and Q401 integrity: Fix memory leakage in keyring allocation error path ima: Fix misuse of dereference of pointer in template_desc_init_fields() block: clear ->slave_dir when dropping the main slave_dir reference wifi: ath10k: Fix return value in ath10k_pci_init() drm/msm/a6xx: Fix speed-bin detection vs probe-defer mtd: lpddr2_nvm: Fix possible null-ptr-deref Input: elants_i2c - properly handle the reset GPIO when power is off media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() media: solo6x10: fix possible memory leak in solo_sysfs_init() media: platform: exynos4-is: Fix error handling in fimc_md_init() media: videobuf-dma-contig: use dma_mmap_coherent inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict() mtd: spi-nor: hide jedec_id sysfs attribute if not present mtd: spi-nor: Fix the number of bytes for the dummy cycles bpf: Move skb->len == 0 checks into __bpf_redirect HID: hid-sensor-custom: set fixed size for custom attributes pinctrl: k210: call of_node_put() ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT regulator: core: use kfree_const() to free space conditionally clk: rockchip: Fix memory leak in rockchip_clk_register_pll() drm/amdgpu: fix pci device refcount leak bonding: fix link recovery in mode 2 when updelay is nonzero mtd: maps: pxa2xx-flash: fix memory leak in probe drbd: remove call to memset before free device/resource/connection drbd: destroy workqueue when drbd device was freed ASoC: qcom: Add checks for devm_kcalloc media: vimc: Fix wrong function called when vimc_init() fails media: imon: fix a race condition in send_packet() clk: imx8mn: rename vpu_pll to m7_alt_pll clk: imx: replace osc_hdmi with dummy clk: imx8mn: fix imx8mn_sai2_sels clocks list clk: imx8mn: fix imx8mn_enet_phy_sels clocks list pinctrl: pinconf-generic: add missing of_node_put() media: dvb-core: Fix ignored return value in dvb_register_frontend() media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() ASoC: dt-bindings: wcd9335: fix reset line polarity in example ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding NFSv4.2: Fix a memory stomp in decode_attr_security_label NFSv4.2: Fix initialisation of struct nfs4_label NFSv4: Fix a credential leak in _nfs4_discover_trunking() NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn NFS: Fix an Oops in nfs_d_automount() ALSA: asihpi: fix missing pci_disable_device() wifi: iwlwifi: mvm: fix double free on tx path. ASoC: mediatek: mt8173: Fix debugfs registration for components ASoC: mediatek: mt8173: Enable IRQ when pdata is ready drm/amd/pm/smu11: BACO is supported when it's in BACO state drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() drm/amdkfd: Fix memory leakage ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe netfilter: conntrack: set icmpv6 redirects as RELATED Input: wistron_btns - disable on UML bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect bonding: uninitialized variable in bond_miimon_inspect() spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE wifi: mac80211: fix memory leak in ieee80211_if_add() wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails mt76: stop the radar detector after leaving dfs channel wifi: mt76: mt7921: fix reporting of TX AGGR histogram wifi: mt76: fix coverity overrun-call in mt76_get_txpower() regulator: core: fix module refcount leak in set_supply() clk: qcom: lpass-sc7180: Fix pm_runtime usage clk: qcom: clk-krait: fix wrong div2 functions hsr: Add a rcu-read lock to hsr_forward_skb(). hsr: Avoid double remove of a node. hsr: Disable netpoll. hsr: Synchronize sending frames to have always incremented outgoing seq nr. hsr: Synchronize sequence number updates. configfs: fix possible memory leak in configfs_create_dir() regulator: core: fix resource leak in regulator_register() hwmon: (jc42) Convert register access and caching to regmap/regcache hwmon: (jc42) Restore the min/max/critical temperatures on resume bpf, sockmap: fix race in sock_map_free() ALSA: pcm: Set missing stop_operating flag at undoing trigger start media: saa7164: fix missing pci_disable_device() ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() SUNRPC: Fix missing release socket in rpc_sockname() NFSv4.x: Fail client initialisation if state manager thread can't run riscv, bpf: Emit fixed-length instructions for BPF_PSEUDO_FUNC mmc: alcor: fix return value check of mmc_add_host() mmc: moxart: fix return value check of mmc_add_host() mmc: mxcmmc: fix return value check of mmc_add_host() mmc: pxamci: fix return value check of mmc_add_host() mmc: rtsx_pci: fix return value check of mmc_add_host() mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() mmc: toshsd: fix return value check of mmc_add_host() mmc: vub300: fix return value check of mmc_add_host() mmc: wmt-sdmmc: fix return value check of mmc_add_host() mmc: atmel-mci: fix return value check of mmc_add_host() mmc: omap_hsmmc: fix return value check of mmc_add_host() mmc: meson-gx: fix return value check of mmc_add_host() mmc: via-sdmmc: fix return value check of mmc_add_host() mmc: wbsd: fix return value check of mmc_add_host() mmc: mmci: fix return value check of mmc_add_host() mmc: renesas_sdhi: alway populate SCC pointer memstick: ms_block: Add error handling support for add_disk() memstick/ms_block: Add check for alloc_ordered_workqueue mmc: core: Normalize the error handling branch in sd_read_ext_regs() regulator: qcom-labibb: Fix missing of_node_put() in qcom_labibb_regulator_probe() media: c8sectpfe: Add of_node_put() when breaking out of loop media: coda: Add check for dcoda_iram_alloc media: coda: Add check for kmalloc clk: samsung: Fix memory leak in _samsung_clk_register_pll() spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h wifi: rtl8xxxu: Fix the channel width reporting wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() blktrace: Fix output non-blktrace event when blk_classic option enabled bpf: Do not zero-extend kfunc return values clk: socfpga: Fix memory leak in socfpga_gate_init() net: vmw_vsock: vmci: Check memcpy_from_msg() net: defxx: Fix missing err handling in dfx_init() net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() net: stmmac: fix possible memory leak in stmmac_dvr_probe() drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() net: farsync: Fix kmemleak when rmmods farsync net/tunnel: wait until all sk_user_data reader finish before releasing the sock net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() af_unix: call proto_unregister() in the error path in af_unix_init() net: amd-xgbe: Fix logic around active and passive cables net: amd-xgbe: Check only the minimum speed for active/passive cables can: tcan4x5x: Remove invalid write in clear_interrupts can: m_can: Call the RAM init directly from m_can_chip_config can: tcan4x5x: Fix use of register error status mask net: lan9303: Fix read error execution path ntb_netdev: Use dev_kfree_skb_any() in interrupt context sctp: sysctl: make extra pointers netns aware Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() stmmac: fix potential division by 0 i40e: Fix the inability to attach XDP program on downed interface net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path apparmor: fix a memleak in multi_transaction_new() apparmor: fix lockdep warning when removing a namespace apparmor: Fix abi check to include v8 abi crypto: hisilicon/qm - fix missing destroy qp_idr crypto: sun8i-ss - use dma_addr instead u32 crypto: nitrox - avoid double free on error path in nitrox_sriov_init() scsi: core: Fix a race between scsi_done() and scsi_timeout() apparmor: Use pointer to struct aa_label for lbs_cred PCI: dwc: Fix n_fts[] array overrun RDMA/core: Fix order of nldev_exit call PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled f2fs: Fix the race condition of resize flag between resizefs crypto: rockchip - do not do custom power management crypto: rockchip - do not store mode globally crypto: rockchip - add fallback for cipher crypto: rockchip - add fallback for ahash crypto: rockchip - better handle cipher key crypto: rockchip - remove non-aligned handling crypto: rockchip - rework by using crypto_engine apparmor: Fix memleak in alloc_ns() f2fs: fix to invalidate dcc->f2fs_issue_discard in error path f2fs: fix normal discard process f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super() RDMA/irdma: Report the correct link speed scsi: qla2xxx: Fix set-but-not-used variable warnings RDMA/siw: Fix immediate work request flush to completion queue IB/mad: Don't call to function that might sleep while in atomic context PCI: vmd: Disable MSI remapping after suspend RDMA/restrack: Release MR restrack when delete RDMA/core: Make sure "ib_port" is valid when access sysfs node RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port RDMA/siw: Set defined status for work completion with undefined status scsi: scsi_debug: Fix a warning in resp_write_scat() crypto: ccree - Remove debugfs when platform_driver_register failed crypto: cryptd - Use request context instead of stack for sub-request crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data() RDMA/hns: Fix ext_sge num error when post send PCI: Check for alloc failure in pci_request_irq() RDMA/hfi: Decrease PCI device reference count in error path crypto: ccree - Make cc_debugfs_global_fini() available for module init function RDMA/hns: fix memory leak in hns_roce_alloc_mr() RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed dt-bindings: imx6q-pcie: Fix clock names for imx6sx and imx8mq dt-bindings: visconti-pcie: Fix interrupts array max constraints scsi: hpsa: Fix possible memory leak in hpsa_init_one() crypto: tcrypt - Fix multibuffer skcipher speed test mem leak padata: Always leave BHs disabled when running ->parallel() padata: Fix list iterator in padata_do_serial() scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() scsi: hpsa: Fix error handling in hpsa_add_sas_host() scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() scsi: efct: Fix possible memleak in efct_device_init() scsi: scsi_debug: Fix a warning in resp_verify() scsi: scsi_debug: Fix a warning in resp_report_zones() scsi: fcoe: Fix possible name leak when device_register() fails scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() scsi: ipr: Fix WARNING in ipr_init() scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails scsi: snic: Fix possible UAF in snic_tgt_create() RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() f2fs: avoid victim selection from previous victim section RDMA/nldev: Fix failure to send large messages crypto: amlogic - Remove kcalloc without check crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() riscv/mm: add arch hook arch_clear_hugepage_flags RDMA/hfi1: Fix error return code in parse_platform_config() RDMA/srp: Fix error return code in srp_parse_options() PCI: mt7621: Rename mt7621_pci_ to mt7621_pcie_ PCI: mt7621: Add sentinel to quirks table orangefs: Fix sysfs not cleanup when dev init failed RDMA/hns: Fix AH attr queried by query_qp RDMA/hns: Fix PBL page MTR find RDMA/hns: Fix page size cap from firmware RDMA/hns: Fix error code of CMD crypto: img-hash - Fix variable dereferenced before check 'hdev->req' hwrng: amd - Fix PCI device refcount leak hwrng: geode - Fix PCI device refcount leak IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces RISC-V: Align the shadow stack drivers: dio: fix possible memory leak in dio_init() serial: tegra: Read DMA status before terminating serial: 8250_bcm7271: Fix error handling in brcmuart_init() class: fix possible memory leak in __class_register() vfio: platform: Do not pass return buffer to ACPI _RST method uio: uio_dmem_genirq: Fix missing unlock in irq configuration uio: uio_dmem_genirq: Fix deadlock between irq config and handling usb: fotg210-udc: Fix ages old endianness issues staging: vme_user: Fix possible UAF in tsi148_dma_list_add usb: typec: Check for ops->exit instead of ops->enter in altmode_exit usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails usb: typec: tipd: Fix spurious fwnode_handle_put in error path extcon: usbc-tusb320: Add support for mode setting and reset extcon: usbc-tusb320: Add support for TUSB320L usb: typec: Factor out non-PD fwnode properties extcon: usbc-tusb320: Factor out extcon into dedicated functions extcon: usbc-tusb320: Add USB TYPE-C support extcon: usbc-tusb320: Update state on probe even if no IRQ pending serial: amba-pl011: avoid SBSA UART accessing DMACR register serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. serial: stm32: move dma_request_chan() before clk_prepare_enable() serial: pch: Fix PCI device refcount leak in pch_request_dma() tty: serial: clean up stop-tx part in altera_uart_tx_chars() tty: serial: altera_uart_{r,t}x_chars() need only uart_port serial: altera_uart: fix locking in polling mode serial: sunsab: Fix error handling in sunsab_init() test_firmware: fix memory leak in test_firmware_init() misc: ocxl: fix possible name leak in ocxl_file_register_afu() ocxl: fix pci device refcount leak when calling get_function_0() misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() iio: temperature: ltc2983: make bulk write buffer DMA-safe iio: adis: handle devices that cannot unmask the drdy pin iio: adis: stylistic changes iio:imu:adis: Move exports into IIO_ADISLIB namespace iio: adis: add '__adis_enable_irq()' implementation counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update coresight: trbe: remove cpuhp instance node before remove cpuhp state usb: roles: fix of node refcount leak in usb_role_switch_is_parent() usb: gadget: f_hid: fix f_hidg lifetime vs cdev usb: gadget: f_hid: fix refcount leak on error path drivers: mcb: fix resource leak in mcb_probe() mcb: mcb-parse: fix error handing in chameleon_parse_gdd() chardev: fix error handling in cdev_device_add() i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe staging: rtl8192u: Fix use after free in ieee80211_rx() staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() vme: Fix error not catched in fake_init() gpiolib: Get rid of redundant 'else' gpiolib: cdev: fix NULL-pointer dereferences gpiolib: make struct comments into real kernel docs gpiolib: protect the GPIO device against being dropped while in use by user-space i2c: mux: reg: check return value after calling platform_get_resource() i2c: ismt: Fix an out-of-bounds bug in ismt_access() usb: storage: Add check for kcalloc tracing/hist: Fix issue of losting command info in error_log ksmbd: Fix resource leak in ksmbd_session_rpc_open() samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() thermal/drivers/imx8mm_thermal: Validate temperature range thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2 thermal/drivers/qcom/lmh: Fix irq handler return value fbdev: ssd1307fb: Drop optional dependency fbdev: pm2fb: fix missing pci_disable_device() fbdev: via: Fix error in via_core_init() fbdev: vermilion: decrease reference count in error path fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() fbdev: geode: don't build on UML fbdev: uvesafb: don't build on UML fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() HSI: omap_ssi_core: fix possible memory leak in ssi_probe() power: supply: fix residue sysfs file in error handle route of __power_supply_register() perf trace: Return error if a system call doesn't exist perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number perf trace: Handle failure when trace point folder is missed perf symbol: correction while adjusting symbol power: supply: z2_battery: Fix possible memleak in z2_batt_probe() HSI: omap_ssi_core: Fix error handling in ssi_init() power: supply: ab8500: Fix error handling in ab8500_charger_init() power: supply: fix null pointer dereferencing in power_supply_get_battery_info perf stat: Refactor __run_perf_stat() common code perf stat: Do not delay the workload with --delay RDMA/siw: Fix pointer cast warning fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst() overflow: Implement size_t saturating arithmetic helpers fs/ntfs3: Harden against integer overflows iommu/sun50i: Fix reset release iommu/sun50i: Consider all fault sources for reset iommu/sun50i: Fix R/W permission check iommu/sun50i: Fix flush size iommu/rockchip: fix permission bits in page table entries v2 phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices include/uapi/linux/swab: Fix potentially missing __always_inline pwm: tegra: Improve required rate calculation fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs dmaengine: idxd: Fix crc_val field for completion record rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0 rtc: cmos: Fix event handler registration ordering issue rtc: cmos: Fix wake alarm breakage rtc: cmos: fix build on non-ACPI platforms rtc: cmos: Call cmos_wake_setup() from cmos_do_probe() rtc: cmos: Call rtc_wake_setup() from cmos_do_probe() rtc: cmos: Eliminate forward declarations of some functions rtc: cmos: Rename ACPI-related functions rtc: cmos: Disable ACPI RTC event on removal rtc: snvs: Allow a time difference on clock register read rtc: pcf85063: Fix reading alarm iommu/amd: Fix pci device refcount leak in ppr_notifier() iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() macintosh: fix possible memory leak in macio_add_one_device() macintosh/macio-adb: check the return value of ioremap() powerpc/52xx: Fix a resource leak in an error handling path cxl: Fix refcount leak in cxl_calc_capp_routing powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() powerpc/perf: callchain validate kernel stack pointer bounds powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() powerpc/hv-gpci: Fix hv_gpci event list selftests/powerpc: Fix resource leaks iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY pwm: sifive: Call pwm_sifive_update_clock() while mutex is held pwm: mtk-disp: Fix the parameters calculated by the enabled flag of disp_pwm pwm: mediatek: always use bus clock for PWM on MT7622 remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove remoteproc: qcom_q6v5_pas: detach power domains on remove remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in q6v5_wcss_qcs404_power_on() powerpc/eeh: Drop redundant spinlock initialization powerpc/pseries/eeh: use correct API for error log size mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe() mfd: pm8008: Remove driver data structure pm8008_data mfd: pm8008: Fix return value check in pm8008_probe() netfilter: flowtable: really fix NAT IPv6 offload rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() rtc: pcf85063: fix pcf85063_clkout_control nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure net: macsec: fix net device access prior to holding a lock mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() block, bfq: fix possible uaf for 'bfqq->bic' selftests/bpf: Add test for unstable CT lookup API net: enetc: avoid buffer leaks on xdp_do_redirect() failure nfc: pn533: Clear nfc_target before being used unix: Fix race in SOCK_SEQPACKET's unix_dgram_sendmsg() r6040: Fix kmemleak in probe and remove igc: Enhance Qbv scheduling by using first flag bit igc: Use strict cycles for Qbv scheduling igc: Add checking for basetime less than zero igc: allow BaseTime 0 enrollment for Qbv igc: recalculate Qbv end_time by considering cycle time igc: Lift TAPRIO schedule restriction igc: Set Qbv start_time and end_time to end_time if not being configured in GCL rtc: mxc_v2: Add missing clk_disable_unprepare() selftests: devlink: fix the fd redirect in dummy_reporter_test openvswitch: Fix flow lookup to use unmasked key soc: mediatek: pm-domains: Fix the power glitch issue arm64: dts: mt8183: Fix Mali GPU clock skbuff: Account for tail adjustment during pull operations mailbox: mpfs: read the system controller's status mailbox: arm_mhuv2: Fix return value check in mhuv2_probe() mailbox: zynq-ipi: fix error handling while device_register() fails net_sched: reject TCF_EM_SIMPLE case for complex ematch module rxrpc: Fix missing unlock in rxrpc_do_sendmsg() myri10ge: Fix an error handling path in myri10ge_probe() net: stream: purge sk_error_queue in sk_stream_kill_queues() HID: amd_sfh: Add missing check for dma_alloc_coherent rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() arm64: make is_ttbrX_addr() noinstr-safe video: hyperv_fb: Avoid taking busy spinlock on panic path x86/hyperv: Remove unregister syscore call from Hyper-V cleanup binfmt_misc: fix shift-out-of-bounds in check_special_flags fs: jfs: fix shift-out-of-bounds in dbAllocAG udf: Avoid double brelse() in udf_rename() jfs: Fix fortify moan in symlink fs: jfs: fix shift-out-of-bounds in dbDiscardAG ACPICA: Fix error code path in acpi_ds_call_control_method() nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() nilfs2: fix shift-out-of-bounds due to too large exponent of block size acct: fix potential integer overflow in encode_comp_t() hfs: fix OOB Read in __hfs_brec_find drm/etnaviv: add missing quirks for GC300 media: imx-jpeg: Disable useless interrupt to avoid kernel panic brcmfmac: return error when getting invalid max_flowrings from dongle wifi: ath9k: verify the expected usb_endpoints are present wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out ASoC: codecs: rt298: Add quirk for KBL-R RVP platform ipmi: fix memleak when unload ipmi driver drm/amd/display: prevent memory leak Revert "drm/amd/display: Limit max DSC target bpp for specific monitors" qed (gcc13): use u16 for fid to be big enough bpf: make sure skb->len != 0 when redirecting to a tunneling device net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() hamradio: baycom_epp: Fix return type of baycom_send_packet() wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() igb: Do not free q_vector unless new one was allocated drm/amdgpu: Fix type of second parameter in trans_msg() callback drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback s390/ctcm: Fix return type of ctc{mp,}m_tx() s390/netiucv: Fix return type of netiucv_tx() s390/lcs: Fix return type of lcs_start_xmit() drm/msm: Use drm_mode_copy() drm/rockchip: Use drm_mode_copy() drm/sti: Use drm_mode_copy() drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid() drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() md/raid1: stop mdx_raid1 thread when raid1 array run failed drm/amd/display: fix array index out of bound error in bios parser net: add atomic_long_t to net_device_stats fields ipv6/sit: use DEV_STATS_INC() to avoid data-races mrp: introduce active flags to prevent UAF when applicant uninit ppp: associate skb with a device at tx bpf: Prevent decl_tag from being referenced in func_proto arg ethtool: avoiding integer overflow in ethtool_phys_id() media: dvb-frontends: fix leak of memory fw media: dvbdev: adopts refcnt to avoid UAF media: dvb-usb: fix memory leak in dvb_usb_adapter_init() blk-mq: fix possible memleak when register 'hctx' failed drm/amd/display: Use the largest vready_offset in pipe group libbpf: Avoid enum forward-declarations in public API in C++ mode regulator: core: fix use_count leakage when handling boot-on wifi: mt76: do not run mt76u_status_worker if the device is not running mmc: f-sdh30: Add quirks for broken timeout clock capability mmc: renesas_sdhi: better reset from HS400 mode media: si470x: Fix use-after-free in si470x_int_in_callback() clk: st: Fix memory leak in st_of_quadfs_setup() crypto: hisilicon/hpre - fix resource leak in remove process scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs scsi: ufs: Reduce the START STOP UNIT timeout scsi: elx: libefc: Fix second parameter type in state callbacks hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() tools/include: Add _RET_IP_ and math definitions to kernel.h KVM: selftests: Fix build regression by using accessor function hwmon: (jc42) Fix missing unlock on error in jc42_write() ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c ALSA: hda: add snd_hdac_stop_streams() helper ASoC: Intel: Skylake: Fix driver hang during shutdown ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() ASoC: wm8994: Fix potential deadlock ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() ASoC: rt5670: Remove unbalanced pm_runtime_put() drm/i915/display: Don't disable DDI/Transcoder when setting phy test pattern LoadPin: Ignore the "contents" argument of the LSM hooks pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() afs: Fix lost servers_outstanding count pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES ima: Simplify ima_lsm_copy_rule ALSA: usb-audio: add the quirk for KT0206 device ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list usb: cdnsp: fix lack of ZLP for ep0 usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq arm64: dts: qcom: sm8250: fix USB-DP PHY registers usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode usb: dwc3: core: defer probe on ulpi_read_id timeout xhci: Prevent infinite loop in transaction errors recovery for streams HID: wacom: Ensure bootloader PID is usable in hidraw mode HID: mcp2221: don't connect hidraw loop: Fix the max_loop commandline argument treatment when it is set to 0 9p: set req refcount to zero to avoid uninitialized usage security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 reiserfs: Add missing calls to reiserfs_security_free() iio: fix memory leak in iio_device_register_eventset() iio: adc: ad_sigma_delta: do not use internal iio_dev lock iio: adc128s052: add proper .data members in adc128_of_match table regulator: core: fix deadlock on regulator enable floppy: Fix memory leak in do_floppy_init() gcov: add support for checksum field fbdev: fbcon: release buffer when fbcon_do_set_font() failed ovl: fix use inode directly in rcu-walk mode btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range scsi: qla2xxx: Fix crash when I/O abort times out net: stmmac: fix errno when create_singlethread_workqueue() fails media: dvbdev: fix build warning due to comments media: dvbdev: fix refcnt bug extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code pwm: tegra: Fix 32 bit build Linux 5.15.86 Change-Id: Ic157edd6a65abf4a3167b5d227edeb0564f1be4e Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-01-18 12:52:16 +00:00
Eric Biggers	ae4ca7a09b	ANDROID: fips140: allow building without LTO ... Following "ANDROID: fips140: eliminate crypto-fips.a build step", the only remaining dependency on LTO is the fact that the part of the module linker script that merges the text and rodata sections and adds some symbols is guarded by '#ifdef CONFIG_LTO_CLANG'. This doesn't actually need to be the case, though. So guard it by alternatively IS_ENABLED(CONFIG_CRYPTO_FIPS140_MOD). Then, remove the dependency of CRYPTO_FIPS140_MOD on LTO_CLANG. (Note: the android14-6.1 kernel currently has LTO disabled, which is part of the motivation for this change. I don't know whether it will stay that way, though.) Bug: 188620248 Change-Id: I1aa7b293ac7a793721275e06e3ae40628e26bbc4 Signed-off-by: Eric Biggers <ebiggers@google.com>	2023-01-09 21:19:29 +00:00
Eric Biggers	63f46b45dd	ANDROID: fips140: eliminate crypto-fips.a build step ... To trick the build system into compiling some source files as built-in code despite their actual destination being fips140.ko, a layer of indirection was being used where the files were first built into a static library crypto-fips.a, and then that static library was linked into fips140.o before the final link of fips140.ko. The problem with that approach is that it is incompatible with the usual behavior of linking, where linking to a static library incorporates only the needed parts of the library, not the whole library. The only reason that it happened to work anyway is due to the dependency of the fips140 module on LTO, combined with a peculiarity of the way that the kernel build system built LTO modules: the build system actually created ${modname}.o as a static library (despite the .o suffix), and used the --whole-archive linker flag when linking ${modname}.ko. commit c25e1c5582 ("kbuild: do not create *.prelink.o for Clang LTO or IBT") in Linux v5.19 changed that. Now, ${modname}.o is an object file, and the --whole-archive flag isn't used when linking ${modname}.ko. Therefore, the crypto-fips.a hack no longer works, as things from this static library (such as the initcalls) get lost during linking. Replace it with a different hack that eliminates the dependency on LTO and should be less fragile: undefine MODULE in fips140-defs.h, and re-define it in the one file where it is needed. (For consistency, also move the definition of __DISABLE_EXPORTS into fips140-defs.h.) Bug: 188620248 Change-Id: I4a6a5f68381a7540bf37ba610216442dae0d2a7a Signed-off-by: Eric Biggers <ebiggers@google.com>	2023-01-09 21:19:29 +00:00
Eric Biggers	bfcfcce380	ANDROID: fips140: unapply ABS32 relocations generated by KCFI ... KCFI generates ABS32 relocations in the .text section. In the temporary copy of the .text section that the FIPS integrity check is done on, these relocations need to be unapplied for the integrity check to pass. Example from 'llvm-readelf --relocs --wide fips140.ko': Relocation section '.rela.text' at offset 0x5b4a8 contains 2008 entries: Offset Info Type Symbol's Value Symbol's Name + Addend [...] 0000000000000c80 0000092900000102 R_AARCH64_ABS32 0000000050e29065 __kcfi_typeid_pmull_ghash_update_p64 + 0 0000000000000e08 0000092800000102 R_AARCH64_ABS32 0000000050e29065 __kcfi_typeid_pmull_ghash_update_p8 + 0 Bug: 188620248 Change-Id: I85c01641114a66b2603abce467977823469f50c8 Signed-off-by: Eric Biggers <ebiggers@google.com>	2023-01-09 21:19:29 +00:00
Eric Biggers	6da26b8750	ANDROID: fips140: require 'm' to enable CRYPTO_FIPS140_MOD ... CONFIG_CRYPTO_FIPS140_MOD builds a loadable kernel module when set to 'y'. That's very unusual, as it doesn't follow the convention of loadable modules being 'm'. I'm guessing that the reason that a bool was used instead of a tristate is because this functionality is not supported built-in, so there are only two allowed settings: disabled or modular. However, there's actually a way to express that in the kconfig language: a tristate that depends on 'm'. Let's do it that way. This also eliminates the need to explicitly depend on MODULES. (Note: I decided to keep MOD in the name, since the word "module" in "FIPS 140 cryptographic module" is a different meaning of "module", and I didn't want to bother renaming CRYPTO_FIPS140_MOD_EVAL_TESTING too.) Bug: 188620248 Change-Id: Ib195d64d68c23ca93dd244d9ac77255992870424 Signed-off-by: Eric Biggers <ebiggers@google.com>	2023-01-09 21:19:29 +00:00
Eric Biggers	d4966a8203	ANDROID: fips140: remove CONFIG_CRYPTO_FIPS140 option ... There is no good reason for the CRYPTO_FIPS140 kconfig option to exist separately from CRYPTO_FIPS140_MOD. It existed mainly to guard some code in the module loader that was needed only for loading the fips140 module. However, that code has been removed, since an alternate solution that doesn't require changes to the module loader was found. The remaining references to CRYPTO_FIPS140 are in: - scripts/module.lds.S. But the guarded code only affects building the fips140 module, so CRYPTO_FIPS140_MOD should be used here instead. - lib/crypto/, for guarding the Android vendor hooks required by the fips140 module. However, Android vendor hooks are already guarded by ANDROID_VENDOR_HOOKS. The extra guard by CRYPTO_FIPS140 isn't useful, especially since CRYPTO_FIPS140 was effectively hardcoded to y anyway. It did have the side effect of making the hooks be guarded by arm64, which excluded them from builds of arch/x86/purgatory/. However, a cleaner way to accomplish that is to check for __DISABLE_EXPORTS, which handles both arch/x86/purgatory/ and fips140.ko itself. Bug: 188620248 Change-Id: Ic6141cd2a553540c2bf95774e71de7310926e3ce Signed-off-by: Eric Biggers <ebiggers@google.com>	2023-01-09 21:19:29 +00:00
Eric Biggers	320dfca58a	ANDROID: fips140: fix in-tree builds ... Kernel code is expected to support both in-tree and out-of-tree builds. Fix in-tree builds of the fips140 module by using the full include path for fips140-defs.h. Bug: 188620248 Change-Id: Iba5ed888bc6a316bd4d0a97479768f50094d63d0 Signed-off-by: Eric Biggers <ebiggers@google.com>	2023-01-09 21:19:29 +00:00
Eric Biggers	685a2ade28	ANDROID: fips140: add crypto_memneq() back to the module ... crypto_memneq() is one of the utility functions that was intentionally included in the fips140 module, out of concerns that it would be seen as "cryptographic" and thus would be required to be included the module for the FIPS certification. It should not have been removed from the module, so add it back. Bug: 188620248 Fixes: 916c8c836f ("ANDROID: FIPS: remove memneq.o from the list of objects for the fips module") Change-Id: I8a19dfd73390f8c1348885f97fa42d900e47b82b Signed-off-by: Eric Biggers <ebiggers@google.com>	2023-01-06 17:59:57 +00:00
Zhang Yiqun	221afb2a1b	crypto: tcrypt - Fix multibuffer skcipher speed test mem leak ... [ Upstream commit 1aa33fc8d4 ] In the past, the data for mb-skcipher test has been allocated twice, that means the first allcated memory area is without free, which may cause a potential memory leakage. So this patch is to remove one allocation to fix this error. Fixes: e161c5930c ("crypto: tcrypt - add multibuf skcipher...") Signed-off-by: Zhang Yiqun <zhangyiqun@phytium.com.cn> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-31 13:14:24 +01:00
Herbert Xu	442caec12f	crypto: cryptd - Use request context instead of stack for sub-request ... [ Upstream commit 3a58c23117 ] cryptd is buggy as it tries to use sync_skcipher without going through the proper sync_skcipher interface. In fact it doesn't even need sync_skcipher since it's already a proper skcipher and can easily access the request context instead of using something off the stack. Fixes: 36b3875a97 ("crypto: cryptd - Remove VLA usage of skcipher") Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-31 13:14:23 +01:00
Eric Biggers	0210faf748	UPSTREAM: crypto: algboss - compile out test-related code when tests disabled ... When CONFIG_CRYPTO_MANAGER_DISABLE_TESTS is set, the code in algboss.c that handles CRYPTO_MSG_ALG_REGISTER is unnecessary, so make it be compiled out. Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Bug: 256875295 (cherry picked from commit 441cb1b730) Change-Id: I11ebf60e1915ad5d13bd16a26d6c2c0944b4c401 Signed-off-by: Eric Biggers <ebiggers@google.com>	2022-12-16 18:58:21 +00:00
Eric Biggers	118fe0a09c	UPSTREAM: crypto: api - compile out crypto_boot_test_finished when tests disabled ... The crypto_boot_test_finished static key is unnecessary when self-tests are disabled in the kconfig, so optimize it out accordingly, along with the entirety of crypto_start_tests(). This mainly avoids the overhead of an unnecessary static_branch_enable() on every boot. Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Bug: 256875295 (cherry picked from commit 06bd9c967e) Change-Id: I68eff9772dc219a8786bf410cb4e946052ea7811 Signed-off-by: Eric Biggers <ebiggers@google.com>	2022-12-16 18:58:21 +00:00
Eric Biggers	749d7493ad	UPSTREAM: crypto: algboss - optimize registration of internal algorithms ... Since algboss always skips testing of algorithms with the CRYPTO_ALG_INTERNAL flag, there is no need to go through the dance of creating the test kthread, which creates a lot of overhead. Instead, we can just directly finish the algorithm registration, like is now done when self-tests are disabled entirely. Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Bug: 256875295 (cherry picked from commit 9cadd73ade) Change-Id: I10f814cd6903d41265f69297d8568b43ec30012e Signed-off-by: Eric Biggers <ebiggers@google.com>	2022-12-16 18:58:21 +00:00
Eric Biggers	f342a2c751	BACKPORT: crypto: api - optimize algorithm registration when self-tests disabled ... Currently, registering an algorithm with the crypto API always causes a notification to be posted to the "cryptomgr", which then creates a kthread to self-test the algorithm. However, if self-tests are disabled in the kconfig (as is the default option), then this kthread just notifies waiters that the algorithm has been tested, then exits. This causes a significant amount of overhead, especially in the kthread creation and destruction, which is not necessary at all. For example, in a quick test I found that booting a "minimum" x86_64 kernel with all the crypto options enabled (except for the self-tests) takes about 400ms until PID 1 can start. Of that, a full 13ms is spent just doing this pointless dance, involving a kthread being created, run, and destroyed over 200 times. That's over 3% of the entire kernel start time. Fix this by just skipping the creation of the test larval and the posting of the registration notification entirely, when self-tests are disabled. Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Bug: 256875295 (cherry picked from commit a7008584ab) (Resolved trivial conflict due to missing upstream commit d6097b8d5d) Change-Id: Ia6be068618e9286c1be01415a6766ba2fa94fc0d Signed-off-by: Eric Biggers <ebiggers@google.com>	2022-12-16 18:58:21 +00:00
Herbert Xu	21f8e3133a	UPSTREAM: crypto: api - Fix boot-up crash when crypto manager is disabled ... When the crypto manager is disabled, we need to explicitly set the crypto algorithms' tested status so that they can be used. Fixes: cad439fc04 ("crypto: api - Do not create test larvals if...") Reported-by: Geert Uytterhoeven <geert@linux-m68k.org> Reported-by: Ido Schimmel <idosch@idosch.org> Reported-by: Guenter Roeck <linux@roeck-us.net> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Tested-by: Ido Schimmel <idosch@nvidia.com> Tested-by: Geert Uytterhoeven <geert@linux-m68k.org> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Bug: 256875295 (cherry picked from commit beaaaa37c6) Change-Id: I6cb42580e4774fbfd075497468b488be3447b7a9 Signed-off-by: Eric Biggers <ebiggers@google.com>	2022-12-16 18:58:21 +00:00
Herbert Xu	cd504c8ec9	UPSTREAM: crypto: api - Do not create test larvals if manager is disabled ... The delayed boot-time testing patch created a dependency loop between api.c and algapi.c because it added a crypto_alg_tested call to the former when the crypto manager is disabled. We could instead avoid creating the test larvals if the crypto manager is disabled. This avoids the dependency loop as well as saving some unnecessary work, albeit in a very unlikely case. Reported-by: Nathan Chancellor <nathan@kernel.org> Reported-by: Naresh Kamboju <naresh.kamboju@linaro.org> Reported-by: kernel test robot <lkp@intel.com> Fixes: adad556efc ("crypto: api - Fix built-in testing dependency failures") Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Bug: 256875295 (cherry picked from commit cad439fc04) Change-Id: I4e0e0b2022dc060fc1d84744e04beae411165ad0 Signed-off-by: Eric Biggers <ebiggers@google.com>	2022-12-16 18:58:21 +00:00
Herbert Xu	6be352041a	UPSTREAM: crypto: api - Export crypto_boot_test_finished ... We need to export crypto_boot_test_finished in case api.c is built-in while algapi.c is built as a module. Fixes: adad556efc ("crypto: api - Fix built-in testing dependency failures") Reported-by: Stephen Rothwell <sfr@canb.auug.org.au> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Tested-by: Stephen Rothwell <sfr@canb.auug.org.au> # ppc32 build Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Bug: 256875295 (cherry picked from commit e42dff467e) Change-Id: Iefc190f29539084e7c84e23120e861de2e0b9351 Signed-off-by: Eric Biggers <ebiggers@google.com>	2022-12-16 18:58:21 +00:00
Herbert Xu	9a70f42d47	UPSTREAM: crypto: api - Fix built-in testing dependency failures ... When complex algorithms that depend on other algorithms are built into the kernel, the order of registration must be done such that the underlying algorithms are ready before the ones on top are registered. As otherwise they would fail during the self-test which is required during registration. In the past we have used subsystem initialisation ordering to guarantee this. The number of such precedence levels are limited and they may cause ripple effects in other subsystems. This patch solves this problem by delaying all self-tests during boot-up for built-in algorithms. They will be tested either when something else in the kernel requests for them, or when we have finished registering all built-in algorithms, whichever comes earlier. Reported-by: Vladis Dronov <vdronov@redhat.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Bug: 256875295 (cherry picked from commit adad556efc) Change-Id: I9cb048ffe0ce7e471cc6e71904f1b2c462b57be4 Signed-off-by: Eric Biggers <ebiggers@google.com>	2022-12-16 18:58:21 +00:00
Eric Biggers	679bf6a591	ANDROID: crypto: testmgr - add back deleted hctr2 test vectors ... The merge of 5.15.61 into this branch incorrectly deleted the test vectors that were added by the following commits: commit 0035442093 ("UPSTREAM: crypto: xctr - Add XCTR support") commit e3efa8253b ("UPSTREAM: crypto: polyval - Add POLYVAL support") commit d672bb9c20 ("UPSTREAM: crypto: hctr2 - Add HCTR2 support") This causes a build error when CONFIG_CRYPTO_MANAGER_DISABLE_TESTS is not set. Fix this by adding back the test vectors. Bug: 233652475 Fixes: 47c7e57022 ("Merge 5.15.61 into android14-5.15") Change-Id: I7dce7570d51a97b88ae751046443df6f0a9038b2 Signed-off-by: Eric Biggers <ebiggers@google.com>	2022-12-16 08:10:27 +00:00
Greg Kroah-Hartman	335a32d033	Merge 5.15.75 into android14-5.15 ... Changes in 5.15.75 Revert "fs: check FMODE_LSEEK to control internal pipe splicing" ALSA: oss: Fix potential deadlock at unregistration ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() ALSA: usb-audio: Fix potential memory leaks ALSA: usb-audio: Fix NULL dererence at error path ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 ALSA: hda/realtek: Correct pin configs for ASUS G533Z ALSA: hda/realtek: Add quirk for ASUS GV601R laptop ALSA: hda/realtek: Add Intel Reference SSID to support headset keys mtd: rawnand: atmel: Unmap streaming DMA mappings io_uring/net: don't update msg_name if not provided hv_netvsc: Fix race between VF offering and VF association message from host cifs: destage dirty pages before re-reading them for cache=none cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message iio: dac: ad5593r: Fix i2c read protocol requirements iio: ltc2497: Fix reading conversion results iio: adc: ad7923: fix channel readings for some variants iio: pressure: dps310: Refactor startup procedure iio: pressure: dps310: Reset chip after timeout xhci: dbc: Fix memory leak in xhci_alloc_dbc() usb: add quirks for Lenovo OneLink+ Dock can: kvaser_usb: Fix use of uninitialized completion can: kvaser_usb_leaf: Fix overread with an invalid command can: kvaser_usb_leaf: Fix TX queue out of sync after restart can: kvaser_usb_leaf: Fix CAN state after restart mmc: sdhci-sprd: Fix minimum clock limit i2c: designware: Fix handling of real but unexpected device interrupts fs: dlm: fix race between test_bit() and queue_work() fs: dlm: handle -EBUSY first in lock arg validation HID: multitouch: Add memory barriers quota: Check next/prev free block number after reading from quota file platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure ASoC: wcd9335: fix order of Slimbus unprepare/disable ASoC: wcd934x: fix order of Slimbus unprepare/disable hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API net: thunderbolt: Enable DMA paths only after rings are enabled regulator: qcom_rpm: Fix circular deferral regression arm64: topology: move store_cpu_topology() to shared code riscv: topology: fix default topology reporting RISC-V: Make port I/O string accessors actually work parisc: fbdev/stifb: Align graphics memory size to 4MB riscv: Allow PROT_WRITE-only mmap() riscv: Make VM_WRITE imply VM_READ riscv: always honor the CONFIG_CMDLINE_FORCE when parsing dtb riscv: Pass -mno-relax only on lld < 15.0.0 UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK nvmem: core: Fix memleak in nvmem_register() nvme-multipath: fix possible hang in live ns resize with ANA access nvme-pci: set min_align_mask before calculating max_hw_sectors Revert "drm/amdgpu: use dirty framebuffer helper" dmaengine: mxs: use platform_driver_register drm/virtio: Check whether transferred 2D BO is shmem drm/virtio: Unlock reservations on virtio_gpu_object_shmem_init() error drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() drm/udl: Restore display mode on resume arm64: errata: Add Cortex-A55 to the repeat tlbi list mm/damon: validate if the pmd entry is present before accessing mm/mmap: undo ->mmap() when arch_validate_flags() fails xen/gntdev: Prevent leaking grants xen/gntdev: Accommodate VMA splitting PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge serial: 8250: Let drivers request full 16550A feature probing serial: 8250: Request full 16550A feature probing for OxSemi PCIe devices NFSD: Protect against send buffer overflow in NFSv3 READDIR NFSD: Protect against send buffer overflow in NFSv2 READ NFSD: Protect against send buffer overflow in NFSv3 READ powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain powerpc/boot: Explicitly disable usage of SPE instructions slimbus: qcom-ngd: use correct error in message of pdr_add_lookup() failure slimbus: qcom-ngd: cleanup in probe error path scsi: qedf: Populate sysfs attributes for vport gpio: rockchip: request GPIO mux to pinctrl when setting direction pinctrl: rockchip: add pinmux_ops.gpio_set_direction callback fbdev: smscufx: Fix use-after-free in ufx_ops_open() ksmbd: fix endless loop when encryption for response fails ksmbd: Fix wrong return value and message length check in smb2_ioctl() ksmbd: Fix user namespace mapping fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE btrfs: fix race between quota enable and quota rescan ioctl btrfs: set generation before calling btrfs_clean_tree_block in btrfs_init_new_buffer f2fs: complete checkpoints during remount f2fs: flush pending checkpoints when freezing super f2fs: increase the limit for reserve_root f2fs: fix to do sanity check on destination blkaddr during recovery f2fs: fix to do sanity check on summary info hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero jbd2: wake up journal waiters in FIFO order, not LIFO jbd2: fix potential buffer head reference count leak jbd2: fix potential use-after-free in jbd2_fc_wait_bufs jbd2: add miss release buffer head in fc_do_one_pass() ext4: avoid crash when inline data creation follows DIO write ext4: fix null-ptr-deref in ext4_write_info ext4: make ext4_lazyinit_thread freezable ext4: fix check for block being out of directory size ext4: don't increase iversion counter for ea_inodes ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate ext4: place buffer head allocation before handle start ext4: fix dir corruption when ext4_dx_add_entry() fails ext4: fix miss release buffer head in ext4_fc_write_inode ext4: fix potential memory leak in ext4_fc_record_modified_inode() ext4: fix potential memory leak in ext4_fc_record_regions() ext4: update 'state->fc_regions_size' after successful memory allocation livepatch: fix race between fork and KLP transition ftrace: Properly unset FTRACE_HASH_FL_MOD ring-buffer: Allow splice to read previous partially read pages ring-buffer: Have the shortest_full queue be the shortest not longest ring-buffer: Check pending waiters when doing wake ups as well ring-buffer: Add ring_buffer_wake_waiters() ring-buffer: Fix race between reset page and reading page tracing: Disable interrupt or preemption before acquiring arch_spinlock_t tracing: Wake up ring buffer waiters on closing of the file tracing: Wake up waiters when tracing is disabled tracing: Add ioctl() to force ring buffer waiters to wake up tracing: Move duplicate code of trace_kprobe/eprobe.c into header tracing: Add "(fault)" name injection to kernel probes tracing: Fix reading strings from synthetic events thunderbolt: Explicitly enable lane adapter hotplug events at startup efi: libstub: drop pointless get_memory_map() call media: cedrus: Set the platform driver data earlier media: cedrus: Fix endless loop in cedrus_h265_skip_bits() blk-wbt: call rq_qos_add() after wb_normal is initialized KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility KVM: nVMX: Unconditionally purge queued/injected events on nested "exit" KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02 KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS staging: greybus: audio_helper: remove unused and wrong debugfs usage drm/nouveau/kms/nv140-: Disable interlacing drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() drm/i915: Fix watermark calculations for gen12+ RC CCS modifier drm/i915: Fix watermark calculations for gen12+ MC CCS modifier drm/i915: Fix watermark calculations for gen12+ CCS+CC modifier drm/amd/display: Fix vblank refcount in vrr transition smb3: must initialize two ACL struct fields to zero selinux: use "grep -E" instead of "egrep" ima: fix blocking of security.ima xattrs of unsupported algorithms userfaultfd: open userfaultfds with O_RDONLY ntfs3: rework xattr handlers and switch to POSIX ACL VFS helpers thermal: cpufreq_cooling: Check the policy first in cpufreq_cooling_register() sh: machvec: Use char[] for section boundaries MIPS: SGI-IP27: Free some unused memory MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create() ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd() ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE objtool: Preserve special st_shndx indexes in elf_update_symbol nfsd: Fix a memory leak in an error handling path SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation SUNRPC: Fix svcxdr_init_encode's buflen calculation NFSD: Protect against send buffer overflow in NFSv2 READDIR NFSD: Fix handling of oversized NFSv4 COMPOUND requests wifi: rtlwifi: 8192de: correct checking of IQK reload wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() leds: lm3601x: Don't use mutex after it was destroyed bpf: Fix reference state management for synchronous callbacks wifi: mac80211: allow bw change during channel switch in mesh bpftool: Fix a wrong type cast in btf_dumper_int spi: mt7621: Fix an error message in mt7621_spi_probe() x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register xsk: Fix backpressure mechanism on Tx bpf: Disable preemption when increasing per-cpu map_locked bpf: Propagate error from htab_lock_bucket() to userspace bpf: Use this_cpu_{inc|dec|inc_return} for bpf_task_storage_busy Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() wifi: rtw88: add missing destroy_workqueue() on error path in rtw_core_init() selftests/xsk: Avoid use-after-free on ctx spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() wifi: rtl8xxxu: Fix skb misuse in TX queue selection spi: meson-spicc: do not rely on busy flag in pow2 clk ops bpf: btf: fix truncated last_member_type_id in btf_struct_resolve wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask wifi: mt76: sdio: fix transmitting packet hangs wifi: mt76: mt7615: add mt7615_mutex_acquire/release in mt7615_sta_set_decap_offload wifi: mt76: mt7915: do not check state before configuring implicit beamform Bluetooth: RFCOMM: Fix possible deadlock on socket shutdown/release net: fs_enet: Fix wrong check in do_pd_setup bpf: Ensure correct locking around vulnerable function find_vpid() Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure netfilter: conntrack: fix the gc rescheduling delay netfilter: conntrack: revisit the gc initial rescheduling bias wifi: ath11k: fix number of VHT beamformee spatial streams x86/microcode/AMD: Track patch allocation size explicitly x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe skmsg: Schedule psock work if the cached skb exists on the psock i2c: mlxbf: support lock mechanism Bluetooth: hci_core: Fix not handling link timeouts propertly xfrm: Reinject transport-mode packets through workqueue netfilter: nft_fib: Fix for rpath check with VRF devices spi: s3c64xx: Fix large transfers with DMA wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM vhost/vsock: Use kvmalloc/kvfree for larger packets. eth: alx: take rtnl_lock on resume mISDN: fix use-after-free bugs in l1oip timer handlers sctp: handle the error returned from sctp_auth_asoc_init_active_key tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited spi: Ensure that sg_table won't be used after being freed hwmon: (pmbus/mp2888) Fix sensors readouts for MPS Multi-phase mp2888 controller net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() bnx2x: fix potential memory leak in bnx2x_tpa_stop() net: wwan: iosm: Call mutex_init before locking it net/ieee802154: reject zero-sized raw_sendmsg() once: add DO_ONCE_SLOW() for sleepable contexts net: mvpp2: fix mvpp2 debugfs leak drm: bridge: adv7511: fix CEC power down control register offset drm: bridge: adv7511: unregister cec i2c device after cec adapter drm/bridge: Avoid uninitialized variable warning drm/mipi-dsi: Detach devices when removing the host drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling drm/bridge: parade-ps8640: Fix regulator supply order drm/dp_mst: fix drm_dp_dpcd_read return value checks drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node() ASoC: mt6359: fix tests for platform_get_irq() failure platform/chrome: fix double-free in chromeos_laptop_prepare() platform/chrome: fix memory corruption in ioctl ASoC: tas2764: Allow mono streams ASoC: tas2764: Drop conflicting set_bias_level power setting ASoC: tas2764: Fix mute/unmute platform/x86: msi-laptop: Fix old-ec check for backlight registering platform/x86: msi-laptop: Fix resource cleanup platform/chrome: cros_ec_typec: Correct alt mode index drm/amdgpu: add missing pci_disable_device() in amdgpu_pmops_runtime_resume() drm/bridge: megachips: Fix a null pointer dereference bug ASoC: rsnd: Add check for rsnd_mod_power_on ALSA: hda: beep: Simplify keep-power-at-enable behavior drm/bochs: fix blanking drm/omap: dss: Fix refcount leak bugs drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue() mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa() drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() ASoC: codecs: tx-macro: fix kcontrol put ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() ALSA: dmaengine: increment buffer pointer atomically mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe ALSA: hda/hdmi: Don't skip notification handling during PM operation memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() memory: of: Fix refcount leak bug in of_get_ddr_timings() memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() locks: fix TOCTOU race when granting write lease soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() soc: qcom: smem_state: Add refcounting for the 'state->of_node' ARM: dts: imx6qdl-kontron-samx6i: hook up DDC i2c bus ARM: dts: turris-omnia: Fix mpp26 pin name and comment ARM: dts: kirkwood: lsxl: fix serial line ARM: dts: kirkwood: lsxl: remove first ethernet port ia64: export memory_add_physaddr_to_nid to fix cxl build error soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA arm64: dts: ti: k3-j7200: fix main pinmux range ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family ARM: Drop CMDLINE_* dependency on ATAGS ext4: don't run ext4lazyinit for read-only filesystems arm64: ftrace: fix module PLTs with mcount ARM: dts: exynos: fix polarity of VBUS GPIO of Origen iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX iio: adc: at91-sama5d2_adc: check return status for pressure and touch iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume iio: inkern: only release the device node when done with it iio: inkern: fix return value in devm_of_iio_channel_get_by_name() iio: ABI: Fix wrong format of differential capacitance channel ABI. iio: magnetometer: yas530: Change data type of hard_offsets to signed RDMA/mlx5: Don't compare mkey tags in DEVX indirect mkey usb: common: debug: Check non-standard control requests clk: meson: Hold reference returned by of_get_parent() clk: oxnas: Hold reference returned by of_get_parent() clk: qoriq: Hold reference returned by of_get_parent() clk: berlin: Add of_node_put() for of_get_parent() clk: sprd: Hold reference returned by of_get_parent() clk: tegra: Fix refcount leak in tegra210_clock_init clk: tegra: Fix refcount leak in tegra114_clock_init clk: tegra20: Fix refcount leak in tegra20_clock_init HSI: omap_ssi: Fix refcount leak in ssi_probe HSI: omap_ssi_port: Fix dma_map_sg error check media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop tty: xilinx_uartps: Fix the ignore_status media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start() media: uvcvideo: Fix memory leak in uvc_gpio_parse media: uvcvideo: Use entity get_cur in uvc_ctrl_set media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init RDMA/rxe: Fix "kernel NULL pointer dereference" error RDMA/rxe: Fix the error caused by qp->sk misc: ocxl: fix possible refcount leak in afu_ioctl() fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() dmaengine: hisilicon: Disable channels when unregister hisi_dma dmaengine: hisilicon: Fix CQ head update dmaengine: hisilicon: Add multi-thread support for a DMA channel dyndbg: fix static_branch manipulation dyndbg: fix module.dyndbg handling dyndbg: let query-modname override actual module name dyndbg: drop EXPORTed dynamic_debug_exec_queries clk: qcom: sm6115: Select QCOM_GDSC mtd: devices: docg3: check the return value of devm_ioremap() in the probe phy: amlogic: phy-meson-axg-mipi-pcie-analog: Hold reference returned by of_get_parent() phy: phy-mtk-tphy: fix the phy type setting issue mtd: rawnand: intel: Read the chip-select line from the correct OF node mtd: rawnand: intel: Remove undocumented compatible string mtd: rawnand: fsl_elbc: Fix none ECC mode RDMA/irdma: Align AE id codes to correct flush code and event RDMA/srp: Fix srp_abort() RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. RDMA/siw: Fix QP destroy to wait for all references dropped. ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() ata: fix ata_id_has_devslp() ata: fix ata_id_has_ncq_autosense() ata: fix ata_id_has_dipm() mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() md: Replace snprintf with scnprintf md/raid5: Ensure stripe_fill happens on non-read IO with journal md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk() RDMA/cm: Use SLID in the work completion as the DLID in responder side IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers xhci: Don't show warning for reinit on known broken suspend usb: gadget: function: fix dangling pnp_string in f_printer.c drivers: serial: jsm: fix some leaks in probe serial: 8250: Toggle IER bits on only after irq has been set up tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown phy: qualcomm: call clk_disable_unprepare in the error handling staging: vt6655: fix some erroneous memory clean-up loops slimbus: qcom-ngd-ctrl: allow compile testing without QCOM_RPROC_COMMON firmware: google: Test spinlock on panic path to avoid lockups serial: 8250: Fix restoring termios speed after suspend scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() scsi: iscsi: Rename iscsi_conn_queue_work() scsi: iscsi: Add recv workqueue helpers scsi: iscsi: Run recv path from workqueue scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical clk: qcom: gcc-sm6115: Override default Alpha PLL regs RDMA/rxe: Fix resize_finish() in rxe_queue.c fsi: core: Check error number after calling ida_simple_get mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() mfd: lp8788: Fix an error handling path in lp8788_probe() mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() mfd: fsl-imx25: Fix check for platform_get_irq() errors mfd: sm501: Add check for platform_driver_register() clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() usb: mtu3: fix failed runtime suspend in host only mode spmi: pmic-arb: correct duplicate APID to PPID mapping logic clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD clk: baikal-t1: Fix invalid xGMAC PTP clock divider clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent clk: baikal-t1: Add SATA internal ref clock buffer clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration clk: imx: scu: fix memleak on platform_device_add() fails clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe clk: ast2600: BCLK comes from EPLL mailbox: mpfs: fix handling of the reg property mailbox: mpfs: account for mbox offsets while sending mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg powerpc/configs: Properly enable PAPR_SCM in pseries_defconfig powerpc/math_emu/efp: Include module.h powerpc/sysdev/fsl_msi: Add missing of_node_put() powerpc/pci_dn: Add missing of_node_put() powerpc/powernv: add missing of_node_put() in opal_export_attrs() powerpc: Fix fallocate and fadvise64_64 compat parameter combination x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 powerpc: Fix SPE Power ISA properties for e500v1 platforms powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe() powerpc/pseries/vas: Pass hw_cpu_id to node associativity HCALL crypto: sahara - don't sleep when in softirq crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr hwrng: arm-smccc-trng - fix NO_ENTROPY handling cgroup: Honor caller's cgroup NS when resolving path hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear() crypto: qat - fix default value of WDT timer crypto: hisilicon/qm - fix missing put dfx access cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset iommu/omap: Fix buffer overflow in debugfs crypto: akcipher - default implementation for setting a private key crypto: ccp - Release dma channels before dmaengine unrgister crypto: inside-secure - Change swab to swab32 crypto: qat - fix DMA transfer direction cifs: return correct error in ->calc_signature() iommu/iova: Fix module config properly tracing: kprobe: Fix kprobe event gen test module on exit tracing: kprobe: Make gen test module work in arm and riscv tracing/osnoise: Fix possible recursive locking in stop_per_cpu_kthreads kbuild: remove the target in signal traps when interrupted kbuild: rpm-pkg: fix breakage when V=1 is used crypto: marvell/octeontx - prevent integer overflows crypto: cavium - prevent integer overflow loading firmware thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id ACPI: APEI: do not add task_work to kernel thread to avoid memory leak f2fs: fix race condition on setting FI_NO_EXTENT flag f2fs: fix to account FS_CP_DATA_IO correctly selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle fs: dlm: fix race in lowcomms rcu: Avoid triggering strict-GP irq-work when RCU is idle rcu: Back off upon fill_page_cache_func() allocation failure rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE() ACPI: video: Add Toshiba Satellite/Portege Z830 quirk ACPI: tables: FPDT: Don't call acpi_os_map_memory() on invalid phys address cpufreq: intel_pstate: Add Tigerlake support in no-HWP mode MIPS: BCM47XX: Cast memcmp() of function to (void *) powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash ARM: decompressor: Include .data.rel.ro.local ACPI: x86: Add a quirk for Dell Inspiron 14 2-in-1 for StorageD3Enable x86/entry: Work around Clang __bdos() bug NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data NFSD: fix use-after-free on source server when doing inter-server copy wifi: brcmfmac: fix invalid address access when enabling SCAN log level bpftool: Clear errno after libcap's checks ice: set tx_tstamps when creating new Tx rings via ethtool net: ethernet: ti: davinci_mdio: Add workaround for errata i2329 openvswitch: Fix double reporting of drops in dropwatch openvswitch: Fix overreporting of drops in dropwatch tcp: annotate data-race around tcp_md5sig_pool_populated x86/mce: Retrieve poison range from hardware wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() thunderbolt: Add back Intel Falcon Ridge end-to-end flow control workaround xfrm: Update ipcomp_scratches with NULL when freed iavf: Fix race between iavf_close and iavf_reset_task wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() Bluetooth: btintel: Mark Intel controller to support LE_STATES quirk regulator: core: Prevent integer underflow wifi: mt76: mt7921: reset msta->airtime_ac while clearing up hw value Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times can: bcm: check the result of can_send() in bcm_can_tx() wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 wifi: rt2x00: set VGC gain for both chains of MT7620 wifi: rt2x00: set SoC wmac clock register wifi: rt2x00: correctly set BBP register 86 for MT7620 hwmon: (sht4x) do not overflow clamping operation on 32-bit platforms net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory Bluetooth: L2CAP: Fix user-after-free r8152: Rate limit overflow messages drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() drm: Use size_t type for len variable in drm_copy_field() drm: Prevent drm_copy_field() to attempt copying a NULL pointer drm/komeda: Fix handling of atomic commits in the atomic_commit_tail hook gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() drm/amd/display: fix overflow on MIN_I64 definition udmabuf: Set ubuf->sg = NULL if the creation of sg table fails drm: bridge: dw_hdmi: only trigger hotplug event on link change ALSA: usb-audio: Register card at the last interface drm/vc4: vec: Fix timings for VEC modes drm: panel-orientation-quirks: Add quirk for Anbernic Win600 platform/chrome: cros_ec: Notify the PM of wake events during resume platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading ASoC: SOF: pci: Change DMI match info to support all Chrome platforms drm/amdgpu: fix initial connector audio value drm/meson: reorder driver deinit sequence to fix use-after-free bug drm/meson: explicitly remove aggregate driver at module unload time mmc: sdhci-msm: add compatible string check for sdm670 drm/dp: Don't rewrite link config when setting phy test pattern drm/amd/display: Remove interface for periodic interrupt 1 ARM: dts: imx7d-sdb: config the max pressure for tsc2046 ARM: dts: imx6q: add missing properties for sram ARM: dts: imx6dl: add missing properties for sram ARM: dts: imx6qp: add missing properties for sram ARM: dts: imx6sl: add missing properties for sram ARM: dts: imx6sll: add missing properties for sram ARM: dts: imx6sx: add missing properties for sram kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply btrfs: dump extra info if one free space cache has more bitmaps than it should btrfs: scrub: try to fix super block errors btrfs: don't print information about space cache or tree every remount ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n clk: zynqmp: Fix stack-out-of-bounds in strncpy` media: cx88: Fix a null-ptr-deref bug in buffer_prepare() media: platform: fix some double free in meson-ge2d and mtk-jpeg and s5p-mfc clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate usb: host: xhci-plat: suspend and resume clocks usb: host: xhci-plat: suspend/resume clks for brcm dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow scsi: 3w-9xxx: Avoid disabling device if failing to enable it nbd: Fix hung when signal interrupts nbd_start_device_ioctl() iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() staging: vt6655: fix potential memory leak blk-throttle: prevent overflow while calculating wait time ata: libahci_platform: Sanity check the DT child nodes number bcache: fix set_at_max_writeback_rate() for multiple attached devices soundwire: cadence: Don't overwrite msg->buf during write commands soundwire: intel: fix error handling on dai registration issues HID: roccat: Fix use-after-free in roccat_read() eventfd: guard wake_up in eventfd fs calls as well md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() usb: musb: Fix musb_gadget.c rxstate overflow bug arm64: dts: imx8mp: Add snps,gfladj-refclk-lpm-sel quirk to USB nodes usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after resume bug Revert "usb: storage: Add quirk for Samsung Fit flash" staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw() staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled ext2: Use kvmalloc() for group descriptor array nvme: copy firmware_rev on each init nvmet-tcp: add bounds check on Transfer Tag usb: idmouse: fix an uninit-value in idmouse_open clk: bcm2835: Make peripheral PLLC critical clk: bcm2835: Round UART input clock up perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc io_uring/af_unix: defer registered files gc to io_uring release io_uring: correct pinned_vm accounting io_uring/rw: fix short rw error handling io_uring/rw: fix error'ed retry return values io_uring/rw: fix unexpected link breakage mm: hugetlb: fix UAF in hugetlb_handle_userfault net: ieee802154: return -EINVAL for unknown addr type ALSA: usb-audio: Fix last interface check for registration blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() net: ethernet: ti: davinci_mdio: fix build for mdio bitbang uses Revert "net/ieee802154: reject zero-sized raw_sendmsg()" net/ieee802154: don't warn zero-sized raw_sendmsg() drm/amd/display: Fix build breakage with CONFIG_DEBUG_FS=n Kconfig.debug: simplify the dependency of DEBUG_INFO_DWARF4/5 Kconfig.debug: add toolchain checks for DEBUG_INFO_DWARF_TOOLCHAIN_DEFAULT lib/Kconfig.debug: Add check for non-constant .{s,u}leb128 support to DWARF5 ext4: continue to expand file system when the target size doesn't reach thermal: intel_powerclamp: Use first online CPU as control_cpu gcov: support GCC 12.1 and newer compilers io-wq: Fix memory leak in worker creation Linux 5.15.75 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Id3dfe8285e830d01df7adb33729e78a75c1cac1a	2022-11-02 08:51:19 +01:00
Ignat Korchagin	779a9930f3	crypto: akcipher - default implementation for setting a private key ... [ Upstream commit bc155c6c18 ] Changes from v1: * removed the default implementation from set_pub_key: it is assumed that an implementation must always have this callback defined as there are no use case for an algorithm, which doesn't need a public key Many akcipher implementations (like ECDSA) support only signature verifications, so they don't have all callbacks defined. Commit 78a0324f4a ("crypto: akcipher - default implementations for request callbacks") introduced default callbacks for sign/verify operations, which just return an error code. However, these are not enough, because before calling sign the caller would likely call set_priv_key first on the instantiated transform (as the in-kernel testmgr does). This function does not have a default stub, so the kernel crashes, when trying to set a private key on an akcipher, which doesn't support signature generation. I've noticed this, when trying to add a KAT vector for ECDSA signature to the testmgr. With this patch the testmgr returns an error in dmesg (as it should) instead of crashing the kernel NULL ptr dereference. Fixes: 78a0324f4a ("crypto: akcipher - default implementations for request callbacks") Signed-off-by: Ignat Korchagin <ignat@cloudflare.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-10-26 12:35:25 +02:00
Stephan Müller	578fd5ff9c	UPSTREAM: crypto: jitter - add oversampling of noise source ... The output n bits can receive more than n bits of min entropy, of course, but the fixed output of the conditioning function can only asymptotically approach the output size bits of min entropy, not attain that bound. Random maps will tend to have output collisions, which reduces the creditable output entropy (that is what SP 800-90B Section 3.1.5.1.2 attempts to bound). The value "64" is justified in Appendix A.4 of the current 90C draft, and aligns with NIST's in "epsilon" definition in this document, which is that a string can be considered "full entropy" if you can bound the min entropy in each bit of output to at least 1-epsilon, where epsilon is required to be <= 2^(-32). Note, this patch causes the Jitter RNG to cut its performance in half in FIPS mode because the conditioning function of the LFSR produces 64 bits of entropy in one block. The oversampling requires that additionally 64 bits of entropy are sampled from the noise source. If the conditioner is changed, such as using SHA-256, the impact of the oversampling is only one fourth, because for the 256 bit block of the conditioner, only 64 additional bits from the noise source must be sampled. This patch is derived from the user space jitterentropy-library. Signed-off-by: Stephan Mueller <smueller@chronox.de> Reviewed-by: Simo Sorce <simo@redhat.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Bug: 188620248 (cherry picked from commit 908dffaf88) Change-Id: I7ae1fe58c1b5ea5f206a8f3675f0c20e255a97ec Signed-off-by: Eric Biggers <ebiggers@google.com>	2022-10-06 16:56:20 +00:00
Greg Kroah-Hartman	47c7e57022	Merge 5.15.61 into android14-5.15 ... Changes in 5.15.61 Makefile: link with -z noexecstack --no-warn-rwx-segments x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments Revert "pNFS: nfs3_set_ds_client should set NFS_CS_NOPING" scsi: Revert "scsi: qla2xxx: Fix disk failure to rediscover" pNFS/flexfiles: Report RDMA connection errors to the server NFSD: Clean up the show_nf_flags() macro nfsd: eliminate the NFSD_FILE_BREAK_* flags ALSA: usb-audio: Add quirk for Behringer UMC202HD ALSA: bcd2000: Fix a UAF bug on the error path of probing ALSA: hda/realtek: Add quirk for Clevo NV45PZ ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx wifi: mac80211_hwsim: fix race condition in pending packet wifi: mac80211_hwsim: add back erroneously removed cast wifi: mac80211_hwsim: use 32-bit skb cookie add barriers to buffer_uptodate and set_buffer_uptodate lockd: detect and reject lock arguments that overflow HID: hid-input: add Surface Go battery quirk HID: wacom: Only report rotation for art pen HID: wacom: Don't register pad_input for touch switch KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 KVM: s390: pv: don't present the ecall interrupt twice KVM: x86: Split kvm_is_valid_cr4() and export only the non-vendor bits KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value KVM: nVMX: Account for KVM reserved CR4 bits in consistency checks KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4 KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP KVM: nVMX: Always enable TSC scaling for L2 when it was enabled for L1 KVM: x86: Tag kvm_mmu_x86_module_init() with __init KVM: x86: do not report preemption if the steal time cache is stale KVM: x86: revalidate steal time cache if MSR value changes riscv: set default pm_power_off to NULL ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model ALSA: hda/cirrus - support for iMac 12,1 model ALSA: hda/realtek: Add quirk for another Asus K42JZ model ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED tty: vt: initialize unicode screen buffer vfs: Check the truncate maximum size in inode_newsize_ok() fs: Add missing umask strip in vfs_tmpfile thermal: sysfs: Fix cooling_device_stats_setup() error code path fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters fbcon: Fix accelerated fbdev scrolling while logo is still shown usbnet: Fix linkwatch use-after-free on disconnect fix short copy handling in copy_mc_pipe_to_iter() crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() parisc: Fix device names in /proc/iomem parisc: Drop pa_swapper_pg_lock spinlock parisc: Check the return value of ioremap() in lba_driver_probe() parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode riscv:uprobe fix SR_SPIE set/clear handling dt-bindings: riscv: fix SiFive l2-cache's cache-sets RISC-V: kexec: Fixup use of smp_processor_id() in preemptible context RISC-V: Fixup get incorrect user mode PC for kernel mode regs RISC-V: Fixup schedule out issue in machine_crash_shutdown() RISC-V: Add modules to virtual kernel memory layout dump rtc: rx8025: fix 12/24 hour mode detection on RX-8035 drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error drm/shmem-helper: Add missing vunmap on error drm/vc4: hdmi: Disable audio if dmas property is present but empty drm/hyperv-drm: Include framebuffer and EDID headers drm/nouveau: fix another off-by-one in nvbios_addr drm/nouveau: Don't pm_runtime_put_sync(), only pm_runtime_put_autosuspend() drm/nouveau/acpi: Don't print error when we get -EINPROGRESS from pm_runtime drm/nouveau/kms: Fix failure path for creating DP connectors drm/amdgpu: Check BO's requested pinning domains against its preferred_domains drm/amdgpu: fix check in fbdev init bpf: Fix KASAN use-after-free Read in compute_effective_progs btrfs: reject log replay if there is unsupported RO compat flag mtd: rawnand: arasan: Fix clock rate in NV-DDR mtd: rawnand: arasan: Update NAND bus clock instead of system clock um: Remove straying parenthesis um: seed rng using host OS rng iio: fix iio_format_avail_range() printing for none IIO_VAL_INT iio: light: isl29028: Fix the warning in isl29028_remove() scsi: sg: Allow waiting for commands to complete on removed device scsi: qla2xxx: Fix incorrect display of max frame size scsi: qla2xxx: Zero undefined mailbox IN registers soundwire: qcom: Check device status before reading devid ksmbd: fix memory leak in smb2_handle_negotiate ksmbd: prevent out of bound read for SMB2_TREE_CONNNECT ksmbd: fix use-after-free bug in smb2_tree_disconect fuse: limit nsec fuse: ioctl: translate ENOSYS serial: mvebu-uart: uart2 error bits clearing md-raid: destroy the bitmap after destroying the thread md-raid10: fix KASAN warning mbcache: don't reclaim used entries mbcache: add functions to delete entry if unused media: [PATCH] pci: atomisp_cmd: fix three missing checks on list iterator ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() PCI: Add defines for normal and subtractive PCI bridges powerpc/fsl-pci: Fix Class Code of PCIe Root Port powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E powerpc/powernv: Avoid crashing if rng is NULL MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK coresight: Clear the connection field properly usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion USB: HCD: Fix URB giveback issue in tasklet function ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC usb: dwc3: gadget: refactor dwc3_repare_one_trb usb: dwc3: gadget: fix high speed multiplier setting netfilter: nf_tables: do not allow SET_ID to refer to another table netfilter: nf_tables: do not allow CHAIN_ID to refer to another table netfilter: nf_tables: do not allow RULE_ID to refer to another chain netfilter: nf_tables: fix null deref due to zeroed list head epoll: autoremove wakers even more aggressively x86: Handle idle=nomwait cmdline properly for x86_idle arch: make TRACE_IRQFLAGS_NMI_SUPPORT generic arm64: Do not forget syscall when starting a new thread. arm64: fix oops in concurrently setting insn_emulation sysctls arm64: kasan: Revert "arm64: mte: reset the page tag in page->flags" ext2: Add more validity checks for inode counts sched/fair: Introduce SIS_UTIL to search idle CPU based on sum of util_avg genirq: Don't return error on missing optional irq_request_resources() irqchip/mips-gic: Only register IPI domain when SMP is enabled genirq: GENERIC_IRQ_IPI depends on SMP sched/core: Always flush pending blk_plug irqchip/mips-gic: Check the return value of ioremap() in gic_of_init() wait: Fix __wait_event_hrtimeout for RT/DL tasks ARM: dts: imx6ul: add missing properties for sram ARM: dts: imx6ul: change operating-points to uint32-matrix ARM: dts: imx6ul: fix keypad compatible ARM: dts: imx6ul: fix csi node compatible ARM: dts: imx6ul: fix lcdif node compatible ARM: dts: imx6ul: fix qspi node compatible ARM: dts: BCM5301X: Add DT for Meraki MR26 ARM: dts: ux500: Fix Codina accelerometer mounting matrix ARM: dts: ux500: Fix Gavini accelerometer mounting matrix spi: synquacer: Add missing clk_disable_unprepare() ARM: OMAP2+: display: Fix refcount leak bug ARM: OMAP2+: pdata-quirks: Fix refcount leak bug ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks ACPI: EC: Drop the EC_FLAGS_IGNORE_DSDT_GPE quirk ACPI: PM: save NVS memory for Lenovo G40-45 ACPI: LPSS: Fix missing check in register_device_clock() ARM: dts: qcom: sdx55: Fix the IRQ trigger type for UART arm64: dts: qcom: ipq8074: fix NAND node name arm64: dts: allwinner: a64: orangepi-win: Fix LED node name ARM: shmobile: rcar-gen2: Increase refcount for new reference firmware: tegra: Fix error check return value of debugfs_create_file() hwmon: (dell-smm) Add Dell XPS 13 7390 to fan control whitelist hwmon: (sht15) Fix wrong assumptions in device remove callback PM: hibernate: defer device probing when resuming from hibernation selinux: fix memleak in security_read_state_kernel() selinux: Add boundary check in put_entry() kasan: test: Silence GCC 12 warnings drm/amdgpu: Remove one duplicated ef removal powerpc/64s: Disable stack variable initialisation for prom_init spi: spi-rspi: Fix PIO fallback on RZ platforms ARM: findbit: fix overflowing offset meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init arm64: dts: renesas: beacon: Fix regulator node names spi: spi-altera-dfl: Fix an error handling path ARM: bcm: Fix refcount leak in bcm_kona_smc_init ACPI: processor/idle: Annotate more functions to live in cpuidle section ARM: dts: imx7d-colibri-emmc: add cpu1 supply soc: renesas: r8a779a0-sysc: Fix A2DP1 and A2CV[2357] PDR values scsi: hisi_sas: Use managed PCI functions dt-bindings: iio: accel: Add DT binding doc for ADXL355 soc: amlogic: Fix refcount leak in meson-secure-pwrc.c arm64: dts: renesas: Fix thermal-sensors on single-zone sensors x86/pmem: Fix platform-device leak in error path ARM: dts: ast2500-evb: fix board compatible ARM: dts: ast2600-evb: fix board compatible ARM: dts: ast2600-evb-a1: fix board compatible arm64: dts: mt8192: Fix idle-states nodes naming scheme arm64: dts: mt8192: Fix idle-states entry-method arm64: select TRACE_IRQFLAGS_NMI_SUPPORT arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 locking/lockdep: Fix lockdep_init_map_*() confusion arm64: dts: qcom: sc7180: Remove ipa_fw_mem node on trogdor soc: fsl: guts: machine variable might be unset block: fix infinite loop for invalid zone append ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg ARM: OMAP2+: Fix refcount leak in omapdss_init_of ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init arm64: dts: qcom: sdm630: disable GPU by default arm64: dts: qcom: sdm630: fix the qusb2phy ref clock arm64: dts: qcom: sdm630: fix gpu's interconnect path arm64: dts: qcom: sdm636-sony-xperia-ganges-mermaid: correct sdc2 pinconf cpufreq: zynq: Fix refcount leak in zynq_get_revision regulator: qcom_smd: Fix pm8916_pldo range ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP ARM: dts: qcom-msm8974: fix irq type on blsp2_uart1 soc: qcom: ocmem: Fix refcount leak in of_get_ocmem soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register ARM: dts: qcom: pm8841: add required thermal-sensor-cells bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() stack: Declare {randomize_,}kstack_offset to fix Sparse warnings arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node ACPI: APEI: explicit init of HEST and GHES in apci_init() drivers/iio: Remove all strcpy() uses ACPI: VIOT: Fix ACS setup arm64: dts: qcom: sm6125: Move sdc2 pinctrl from seine-pdx201 to sm6125 arm64: dts: qcom: sm6125: Append -state suffix to pinctrl nodes arm64: dts: qcom: sm8250: add missing PCIe PHY clock-cells arm64: dts: mt7622: fix BPI-R64 WPS button arm64: tegra: Fixup SYSRAM references arm64: tegra: Update Tegra234 BPMP channel addresses arm64: tegra: Mark BPMP channels as no-memory-wc arm64: tegra: Fix SDMMC1 CD on P2888 erofs: avoid consecutive detection for Highmem memory blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created spi: Fix simplification of devm_spi_register_controller spi: tegra20-slink: fix UAF in tegra_slink_remove() hwmon: (drivetemp) Add module alias blktrace: Trace remapped requests correctly PM: domains: Ensure genpd_debugfs_dir exists before remove dm writecache: return void from functions dm writecache: count number of blocks read, not number of read bios dm writecache: count number of blocks written, not number of write bios dm writecache: count number of blocks discarded, not number of discard bios regulator: of: Fix refcount leak bug in of_get_regulation_constraints() soc: qcom: Make QCOM_RPMPD depend on PM arm64: dts: qcom: qcs404: Fix incorrect USB2 PHYs assignment irqdomain: Report irq number for NOMAP domains drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() x86/extable: Fix ex_handler_msr() print condition selftests/seccomp: Fix compile warning when CC=clang thermal/tools/tmon: Include pthread and time headers in tmon.h dm: return early from dm_pr_call() if DM device is suspended pwm: sifive: Simplify offset calculation for PWMCMP registers pwm: sifive: Ensure the clk is enabled exactly once per running PWM pwm: sifive: Shut down hardware only after pwmchip_remove() completed pwm: lpc18xx-sct: Reduce number of devm memory allocations pwm: lpc18xx-sct: Simplify driver by not using pwm_[gs]et_chip_data() pwm: lpc18xx: Fix period handling drm/dp: Export symbol / kerneldoc fixes for DP AUX bus drm/bridge: tc358767: Move (e)DP bridge endpoint parsing into dedicated function ath10k: do not enforce interrupt trigger type drm/st7735r: Fix module autoloading for Okaya RH128128T drm/panel: Fix build error when CONFIG_DRM_PANEL_SAMSUNG_ATNA33XC20=y && CONFIG_DRM_DISPLAY_HELPER=m wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() ath11k: fix netdev open race drm/mipi-dbi: align max_chunk to 2 in spi_transfer ath11k: Fix incorrect debug_mask mappings drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() drm/mediatek: Modify dsi funcs to atomic operations drm/mediatek: Separate poweron/poweroff from enable/disable and define new funcs drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function drm/meson: encoder_hdmi: switch to bridge DRM_BRIDGE_ATTACH_NO_CONNECTOR drm/meson: encoder_hdmi: Fix refcount leak in meson_encoder_hdmi_init drm/bridge: lt9611uxc: Cancel only driver's work i2c: npcm: Remove own slave addresses 2:10 i2c: npcm: Correct slave role behavior i2c: mxs: Silence a clang warning virtio-gpu: fix a missing check to avoid NULL dereference drm/shmem-helper: Unexport drm_gem_shmem_create_with_handle() drm/shmem-helper: Export dedicated wrappers for GEM object functions drm/shmem-helper: Pass GEM shmem object in public interfaces drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init drm: adv7511: override i2c address of cec before accessing it crypto: sun8i-ss - do not allocate memory when handling hash requests crypto: sun8i-ss - fix error codes in allocate_flows() net: fix sk_wmem_schedule() and sk_rmem_schedule() errors can: netlink: allow configuring of fixed bit rates without need for do_set_bittiming callback can: netlink: allow configuring of fixed data bit rates without need for do_set_data_bittiming callback i2c: Fix a potential use after free crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs() media: atmel: atmel-sama7g5-isc: fix warning in configs without OF media: tw686x: Register the irq at the end of probe media: imx-jpeg: Correct some definition according specification media: imx-jpeg: Leave a blank space before the configuration data media: imx-jpeg: Add pm-runtime support for imx-jpeg media: imx-jpeg: use NV12M to represent non contiguous NV12 media: imx-jpeg: Set V4L2_BUF_FLAG_LAST at eos media: imx-jpeg: Refactor function mxc_jpeg_parse media: imx-jpeg: Identify and handle precision correctly media: imx-jpeg: Handle source change in a function media: imx-jpeg: Support dynamic resolution change media: imx-jpeg: Align upwards buffer size media: imx-jpeg: Implement drain using v4l2-mem2mem helpers ath9k: fix use-after-free in ath9k_hif_usb_rx_cb wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() drm/radeon: fix incorrrect SPDX-License-Identifiers rcutorture: Warn on individual rcu_torture_init() error conditions rcutorture: Don't cpuhp_remove_state() if cpuhp_setup_state() failed rcutorture: Fix ksoftirqd boosting timing and iteration test_bpf: fix incorrect netdev features crypto: ccp - During shutdown, check SEV data pointer before using drm: bridge: adv7511: Add check for mipi_dsi_driver_register media: imx-jpeg: Disable slot interrupt when frame done drm/mcde: Fix refcount leak in mcde_dsi_bind media: hdpvr: fix error value returns in hdpvr_read media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set media: driver/nxp/imx-jpeg: fix a unexpected return value problem media: tw686x: Fix memory leak in tw686x_video_init drm/vc4: plane: Remove subpixel positioning check drm/vc4: plane: Fix margin calculations for the right/bottom edges drm/bridge: Add a function to abstract away panels drm/vc4: dsi: Switch to devm_drm_of_get_bridge drm/vc4: Use of_device_get_match_data() drm/vc4: dsi: Release workaround buffer and DMA drm/vc4: dsi: Correct DSI divider calculations drm/vc4: dsi: Correct pixel order for DSI0 drm/vc4: dsi: Register dsi0 as the correct vc4 encoder type drm/vc4: dsi: Fix dsi0 interrupt support drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration drm/vc4: hdmi: Fix HPD GPIO detection drm/vc4: hdmi: Avoid full hdmi audio fifo writes drm/vc4: hdmi: Reset HDMI MISC_CONTROL register drm/vc4: hdmi: Fix timings for interlaced modes drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE selftests/xsk: Destroy BPF resources only when ctx refcount drops to 0 drm/rockchip: vop: Don't crash for invalid duplicate_state() drm/rockchip: Fix an error handling path rockchip_dp_probe() drm/mediatek: dpi: Remove output format of YUV drm/mediatek: dpi: Only enable dpi after the bridge is enabled drm: bridge: sii8620: fix possible off-by-one hinic: Use the bitmap API when applicable net: hinic: fix bug that ethtool get wrong stats net: hinic: avoid kernel hung in hinic_get_stats64() drm/msm/mdp5: Fix global state lock backoff crypto: hisilicon/sec - don't sleep when in softirq crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment drm/msm: Avoid dirtyfb stalls on video mode displays (v2) drm/msm/dpu: Fix for non-visible planes mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg mt76: mt7615: do not update pm stats in case of error ieee80211: add EHT 1K aggregation definitions mt76: mt7921: fix aggregation subframes setting to HE max mt76: mt7921: enlarge maximum VHT MPDU length to 11454 mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() mediatek: mt76: eeprom: fix missing of_node_put() in mt76_find_power_limits_node() skmsg: Fix invalid last sg check in sk_msg_recvmsg() drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed. tcp: make retransmitted SKB fit into the send window libbpf: Fix the name of a reused map selftests: timers: valid-adjtimex: build fix for newer toolchains selftests: timers: clocksource-switch: fix passing errors from child bpf: Fix subprog names in stack traces. fs: check FMODE_LSEEK to control internal pipe splicing media: cedrus: h265: Fix flag name media: hantro: postproc: Fix motion vector space size media: hantro: Simplify postprocessor media: hevc: Embedded indexes in RPS media: staging: media: hantro: Fix typos wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() wifi: p54: Fix an error handling path in p54spi_probe() wifi: p54: add missing parentheses in p54_flush() selftests/bpf: fix a test for snprintf() overflow libbpf: fix an snprintf() overflow check can: pch_can: do not report txerr and rxerr during bus-off can: rcar_can: do not report txerr and rxerr during bus-off can: sja1000: do not report txerr and rxerr during bus-off can: hi311x: do not report txerr and rxerr during bus-off can: sun4i_can: do not report txerr and rxerr during bus-off can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off can: usb_8dev: do not report txerr and rxerr during bus-off can: error: specify the values of data[5..7] of CAN error frames can: pch_can: pch_can_error(): initialize errc before using it Bluetooth: hci_intel: Add check for platform_driver_register i2c: cadence: Support PEC for SMBus block read i2c: mux-gpmux: Add of_node_put() when breaking out of loop wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue wifi: libertas: Fix possible refcount leak in if_usb_probe() media: cedrus: hevc: Add check for invalid timestamp net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS net/mlx5: Adjust log_max_qp to be 18 at most crypto: hisilicon/hpre - don't use GFP_KERNEL to alloc mem during softirq crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of crypto: hisilicon/sec - fix auth key size error inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH() ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH() net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set netdevsim: fib: Fix reference count leak on route deletion failure wifi: rtw88: check the return value of alloc_workqueue() iavf: Fix max_rate limiting iavf: Fix 'tc qdisc show' listing too many queues netdevsim: Avoid allocation warnings triggered from user space net: rose: fix netdev reference changes net: ionic: fix error check for vlan flags in ionic_set_nic_features() dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock net: usb: make USB_RTL8153_ECM non user configurable wireguard: ratelimiter: use hrtimer in selftest wireguard: allowedips: don't corrupt stack when detecting overflow HID: amd_sfh: Don't show client init failed as error when discovery fails clk: renesas: r9a06g032: Fix UART clkgrp bitsel mtd: maps: Fix refcount leak in of_flash_probe_versatile mtd: maps: Fix refcount leak in ap_flash_init mtd: rawnand: meson: Fix a potential double free issue of: check previous kernel's ima-kexec-buffer against memory bounds scsi: qla2xxx: edif: Reduce Initiator-Initiator thrashing scsi: qla2xxx: edif: Fix potential stuck session in sa update scsi: qla2xxx: edif: Reduce connection thrash scsi: qla2xxx: edif: Fix inconsistent check of db_flags scsi: qla2xxx: edif: Synchronize NPIV deletion with authentication application scsi: qla2xxx: edif: Add retry for ELS passthrough scsi: qla2xxx: edif: Fix n2n discovery issue with secure target scsi: qla2xxx: edif: Fix n2n login retry for secure device KVM: SVM: Unwind "speculative" RIP advancement if INTn injection "fails" KVM: SVM: Stuff next_rip on emulated INT3 injection if NRIPS is supported phy: samsung: exynosautov9-ufs: correct TSRV register configurations PCI: microchip: Fix refcount leak in mc_pcie_init_irq_domains() PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep() HID: cp2112: prevent a buffer overflow in cp2112_xfer() mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release mtd: partitions: Fix refcount leak in parse_redboot_of mtd: parsers: ofpart: Fix refcount leak in bcm4908_partitions_fw_offset mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path PCI: mediatek-gen3: Fix refcount leak in mtk_pcie_init_irq_domains() fpga: altera-pr-ip: fix unsigned comparison with less than zero usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init() usb: xhci: tegra: Fix error check netfilter: xtables: Bring SPDX identifier back scsi: qla2xxx: edif: Send LOGO for unexpected IKE message scsi: qla2xxx: edif: Reduce disruption due to multiple app start scsi: qla2xxx: edif: Fix no login after app start scsi: qla2xxx: edif: Tear down session if keys have been removed scsi: qla2xxx: edif: Fix session thrash scsi: qla2xxx: edif: Fix no logout on delete for N2N iio: accel: bma400: Fix the scale min and max macro values platform/chrome: cros_ec: Always expose last resume result iio: accel: bma400: Reordering of header files clk: mediatek: reset: Fix written reset bit offset lib/test_hmm: avoid accessing uninitialized pages memremap: remove support for external pgmap refcounts mm/memremap: fix memunmap_pages() race with get_dev_pagemap() KVM: Don't set Accessed/Dirty bits for ZERO_PAGE mwifiex: Ignore BTCOEX events from the 88W8897 firmware mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv scsi: iscsi: Allow iscsi_if_stop_conn() to be called from kernel scsi: iscsi: Add helper to remove a session from the kernel scsi: iscsi: Fix session removal on shutdown dmaengine: dw-edma: Fix eDMA Rd/Wr-channels and DMA-direction semantics mtd: dataflash: Add SPI ID table clk: qcom: camcc-sm8250: Fix halt on boot by reducing driver's init level misc: rtsx: Fix an error handling path in rtsx_pci_probe() driver core: fix potential deadlock in __driver_attach clk: qcom: clk-krait: unlock spin after mux completion clk: qcom: gcc-msm8939: Add missing SYSTEM_MM_NOC_BFDCD_CLK_SRC clk: qcom: gcc-msm8939: Fix bimc_ddr_clk_src rcgr base address clk: qcom: gcc-msm8939: Add missing system_mm_noc_bfdcd_clk_src clk: qcom: gcc-msm8939: Point MM peripherals to system_mm_noc clock usb: host: xhci: use snprintf() in xhci_decode_trb() RDMA/rxe: Fix deadlock in rxe_do_local_ops() clk: qcom: ipq8074: fix NSS core PLL-s clk: qcom: ipq8074: SW workaround for UBI32 PLL lock clk: qcom: ipq8074: fix NSS port frequency tables clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks clk: qcom: camcc-sdm845: Fix topology around titan_top power domain clk: qcom: camcc-sm8250: Fix topology around titan_top power domain clk: qcom: clk-rcg2: Fail Duty-Cycle configuration if MND divider is not enabled. clk: qcom: clk-rcg2: Make sure to not write d=0 to the NMD register mm/mempolicy: fix get_nodes out of bound access PCI: dwc: Stop link on host_init errors and de-initialization PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu() PCI: dwc: Disable outbound windows only for controllers using iATU PCI: dwc: Set INCREASE_REGION_SIZE flag based on limit address PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors PCI: dwc: Always enable CDM check if "snps,enable-cdm-check" exists soundwire: bus_type: fix remove and shutdown support soundwire: revisit driver bind/unbind and callbacks KVM: arm64: Don't return from void function dmaengine: sf-pdma: Add multithread support for a DMA channel PCI: endpoint: Don't stop controller when unbinding endpoint function scsi: qla2xxx: Check correct variable in qla24xx_async_gffid() intel_th: Fix a resource leak in an error handling path intel_th: msu-sink: Potential dereference of null pointer intel_th: msu: Fix vmalloced buffers binder: fix redefinition of seq_file attributes staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch mmc: mxcmmc: Silence a clang warning mmc: renesas_sdhi: Get the reset handle early in the probe memstick/ms_block: Fix some incorrect memory allocation memstick/ms_block: Fix a memory leak mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R of: device: Fix missing of_node_put() in of_dma_set_restricted_buffer mmc: block: Add single read for 4k sector cards KVM: s390: pv: leak the topmost page table when destroy fails PCI/portdrv: Don't disable AER reporting in get_port_device_capability() PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks scsi: smartpqi: Fix DMA direction for RAID requests xtensa: iss/network: provide release() callback xtensa: iss: fix handling error cases in iss_net_configure() usb: gadget: udc: amd5536 depends on HAS_DMA usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() usb: dwc3: core: Deprecate GCTL.CORESOFTRESET usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup usb: dwc3: qcom: fix missing optional irq warnings eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write() phy: stm32: fix error return in stm32_usbphyc_phy_init interconnect: imx: fix max_node_id um: random: Don't initialise hwrng struct with zero RDMA/irdma: Fix a window for use-after-free RDMA/irdma: Fix VLAN connection with wildcard address RDMA/irdma: Fix setting of QP context err_rq_idx_valid field RDMA/rtrs-srv: Fix modinfo output for stringify RDMA/rtrs: Fix warning when use poll mode on client side. RDMA/rtrs: Replace duplicate check with is_pollqueue helper RDMA/rtrs: Introduce destroy_cq helper RDMA/rtrs: Do not allow sessname to contain special symbols / and . RDMA/rtrs: Rename rtrs_sess to rtrs_path RDMA/rtrs-srv: Rename rtrs_srv_sess to rtrs_srv_path RDMA/rtrs-clt: Rename rtrs_clt_sess to rtrs_clt_path RDMA/rtrs-clt: Replace list_next_or_null_rr_rcu with an inline function RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() RDMA/hns: Fix incorrect clearing of interrupt status register RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event iio: cros: Register FIFO callback after sensor is registered clk: qcom: gcc-msm8939: Fix weird field spacing in ftbl_gcc_camss_cci_clk RDMA/hfi1: fix potential memory leak in setup_base_ctxt() gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() HID: mcp2221: prevent a buffer overflow in mcp_smbus_write() HID: amd_sfh: Add NULL check for hid device dmaengine: imx-dma: Cast of_device_get_match_data() with (uintptr_t) scripts/gdb: lx-dmesg: read records individually scripts/gdb: fix 'lx-dmesg' on 32 bits arch RDMA/rxe: Fix mw bind to allow any consumer key portion mmc: cavium-octeon: Add of_node_put() when breaking out of loop mmc: cavium-thunderx: Add of_node_put() when breaking out of loop HID: alps: Declare U1_UNICORN_LEGACY support RDMA/rxe: For invalidate compare according to set keys in mr PCI: tegra194: Fix Root Port interrupt handling PCI: tegra194: Fix link up retry sequence HID: amd_sfh: Handle condition of "no sensors" USB: serial: fix tty-port initialized comments usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() mtd: spi-nor: fix spi_nor_spimem_setup_op() call in spi_nor_erase_{sector,chip}() KVM: nVMX: Set UMIP bit CR4_FIXED1 MSR when emulating UMIP platform/olpc: Fix uninitialized data in debugfs write RDMA/srpt: Duplicate port name members RDMA/srpt: Introduce a reference count in struct srpt_device RDMA/srpt: Fix a use-after-free android: binder: stop saving a pointer to the VMA mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region selftests: kvm: set rax before vmcall of/fdt: declared return type does not match actual return type RDMA/mlx5: Add missing check for return value in get namespace flow RDMA/rxe: Add memory barriers to kernel queues RDMA/rxe: Remove the is_user members of struct rxe_sq/rxe_rq/rxe_srq RDMA/rxe: Fix error unwind in rxe_create_qp() block/rnbd-srv: Set keep_id to true after mutex_trylock null_blk: fix ida error handling in null_add_dev() nvme: use command_id instead of req->tag in trace_nvme_complete_rq() nvme: define compat_ioctl again to unbreak 32-bit userspace. nvme: disable namespace access for unsupported metadata nvme: don't return an error from nvme_configure_metadata nvme: catch -ENODEV from nvme_revalidate_zones again block/bio: remove duplicate append pages code block: ensure iov_iter advances for added pages jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction() ext4: recover csum seed of tmp_inode after migrating to extents jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted usb: cdns3: Don't use priv_dev uninitialized in cdns3_gadget_ep_enable() opp: Fix error check in dev_pm_opp_attach_genpd() ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe ASoC: samsung: Fix error handling in aries_audio_probe ASoC: imx-audmux: Silence a clang warning ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe ASoC: codecs: da7210: add check for i2c_add_driver ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe serial: 8250: Export ICR access helpers for internal use serial: 8250: dma: Allow driver operations before starting DMA transfers serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV rpmsg: char: Add mutex protection for rpmsg_eptdev_open() rpmsg: mtk_rpmsg: Fix circular locking dependency remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init selftests/livepatch: better synchronize test_klp_callbacks_busy profiling: fix shift too large makes kernel panic remoteproc: imx_rproc: Fix refcount leak in imx_rproc_addr_init ASoC: samsung: h1940_uda1380: include proepr GPIO consumer header powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable ASoC: samsung: change gpiod_speaker_power and rx1950_audio from global to static variables tty: n_gsm: Delete gsmtty open SABM frame when config requester tty: n_gsm: fix user open not possible at responder until initiator open tty: n_gsm: fix tty registration before control channel open tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output() tty: n_gsm: fix missing timer to handle stalled links tty: n_gsm: fix non flow control frames during mux flow off tty: n_gsm: fix packet re-transmission without open control channel tty: n_gsm: fix race condition in gsmld_write() tty: n_gsm: fix resource allocation order in gsm_activate_mux() ASoC: qcom: Fix missing of_node_put() in asoc_qcom_lpass_cpu_platform_probe() ASoC: imx-card: Fix DSD/PDM mclk frequency remoteproc: qcom: wcnss: Fix handling of IRQs vfio/ccw: Do not change FSM state in subchannel event serial: 8250_fsl: Don't report FE, PE and OE twice tty: n_gsm: fix wrong T1 retry count handling tty: n_gsm: fix DM command tty: n_gsm: fix missing corner cases in gsmld_poll() MIPS: vdso: Utilize __pa() for gic_pfn swiotlb: fail map correctly with failed io_tlb_default_mem ASoC: mt6359: Fix refcount leak bug serial: 8250_bcm7271: Save/restore RTS in suspend/resume iommu/exynos: Handle failed IOMMU device registration properly 9p: fix a bunch of checkpatch warnings 9p: Drop kref usage 9p: Add client parameter to p9_req_put() net: 9p: fix refcount leak in p9_read_work() error handling MIPS: Fixed __debug_virt_addr_valid() rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge kfifo: fix kfifo_to_user() return type lib/smp_processor_id: fix imbalanced instrumentation_end() call proc: fix a dentry lock race between release_task and lookup remoteproc: qcom: pas: Check if coredump is enabled remoteproc: sysmon: Wait for SSCTL service to come up mfd: t7l66xb: Drop platform disable callback mfd: max77620: Fix refcount leak in max77620_initialise_fps iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop perf tools: Fix dso_id inode generation comparison s390/dump: fix old lowcore virtual vs physical address confusion s390/maccess: fix semantics of memcpy_real() and its callers s390/crash: fix incorrect number of bytes to copy to user space s390/zcore: fix race when reading from hardware system area ASoC: fsl_asrc: force cast the asrc_format type ASoC: fsl-asoc-card: force cast the asrc_format type ASoC: fsl_easrc: use snd_pcm_format_t type for sample_format ASoC: imx-card: use snd_pcm_format_t type for asrc_format ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp() fuse: Remove the control interface for virtio-fs ASoC: audio-graph-card: Add of_node_put() in fail path watchdog: sp5100_tco: Fix a memory leak of EFCH MMIO resource watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe() video: fbdev: amba-clcd: Fix refcount leak bugs video: fbdev: sis: fix typos in SiS_GetModeID() ASoC: mchp-spdifrx: disable end of block interrupt on failures powerpc/32: Call mmu_mark_initmem_nx() regardless of data block mapping. powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32 powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias tty: serial: fsl_lpuart: correct the count of break characters s390/dump: fix os_info virtual vs physical address confusion s390/smp: cleanup target CPU callback starting s390/smp: cleanup control register update routines s390/maccess: rework absolute lowcore accessors s390/smp: enforce lowcore protection on CPU restart f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader powerpc/xive: Fix refcount leak in xive_get_max_prio powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address perf symbol: Fail to read phdr workaround kprobes: Forbid probing on trampoline and BPF code areas x86/bus_lock: Don't assume the init value of DEBUGCTLMSR.BUS_LOCK_DETECT to be zero powerpc/pci: Fix PHB numbering when using opal-phbid genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO scripts/faddr2line: Fix vmlinux detection on arm64 sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed x86/numa: Use cpumask_available instead of hardcoded NULL check video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() tools/thermal: Fix possible path truncations sched: Fix the check of nr_running at queue wakelist sched: Remove the limitation of WF_ON_CPU on wakelist if wakee cpu is idle sched/core: Do not requeue task on CPU excluded from cpus_mask x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y f2fs: allow compression for mmap files in compress_mode=user f2fs: do not allow to decompress files have FI_COMPRESS_RELEASED video: fbdev: vt8623fb: Check the size of screen before memset_io() video: fbdev: arkfb: Check the size of screen before memset_io() video: fbdev: s3fb: Check the size of screen before memset_io() scsi: ufs: core: Correct ufshcd_shutdown() flow scsi: zfcp: Fix missing auto port scan and thus missing target ports scsi: qla2xxx: Fix imbalance vha->vref_count scsi: qla2xxx: Fix discovery issues in FC-AL topology scsi: qla2xxx: Turn off multi-queue for 8G adapters scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts scsi: qla2xxx: Fix excessive I/O error messages by default scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection scsi: qla2xxx: Wind down adapter after PCIe error scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os scsi: qla2xxx: Fix losing target when it reappears during delete scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests x86/bugs: Enable STIBP for IBPB mitigated RETBleed ftrace/x86: Add back ftrace_expected assignment x86/kprobes: Update kcb status flag after singlestepping x86/olpc: fix 'logical not is only applied to the left hand side' SMB3: fix lease break timeout when multiple deferred close handles for the same file. posix-cpu-timers: Cleanup CPU timers before freeing them during exec Input: gscps2 - check return value of ioremap() in gscps2_probe() __follow_mount_rcu(): verify that mount_lock remains unchanged spmi: trace: fix stack-out-of-bound access in SPMI tracing functions drm/mediatek: Allow commands to be sent during video mode drm/mediatek: Keep dsi as LP00 before dcs cmds transfer crypto: blake2s - remove shash module drm/dp/mst: Read the extended DPCD capabilities during system resume drm/vc4: drv: Adopt the dma configuration from the HVS or V3D component usbnet: smsc95xx: Don't clear read-only PHY interrupt usbnet: smsc95xx: Avoid link settings race on interrupt reception usbnet: smsc95xx: Forward PHY interrupts to PHY driver to avoid polling usbnet: smsc95xx: Fix deadlock on runtime resume firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails scsi: lpfc: Fix EEH support for NVMe I/O scsi: lpfc: SLI path split: Refactor lpfc_iocbq scsi: lpfc: SLI path split: Refactor fast and slow paths to native SLI4 scsi: lpfc: SLI path split: Refactor SCSI paths scsi: lpfc: Remove extra atomic_inc on cmd_pending in queuecommand after VMID intel_th: pci: Add Meteor Lake-P support intel_th: pci: Add Raptor Lake-S PCH support intel_th: pci: Add Raptor Lake-S CPU support KVM: set_msr_mce: Permit guests to ignore single-bit ECC errors KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) PCI/AER: Iterate over error counters instead of error strings PCI: qcom: Power on PHY before IPQ8074 DBI register accesses serial: 8250_pci: Refactor the loop in pci_ite887x_init() serial: 8250_pci: Replace dev_*() by pci_*() macros serial: 8250: Fold EndRun device support into OxSemi Tornado code serial: 8250: Add proper clock handling for OxSemi PCIe devices tty: 8250: Add support for Brainboxes PX cards. dm writecache: set a default MAX_WRITEBACK_JOBS kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification dm thin: fix use-after-free crash in dm_sm_register_threshold_callback net/9p: Initialize the iounit field during fid creation ARM: remove some dead code timekeeping: contribute wall clock to rng on time change locking/csd_lock: Change csdlock_debug from early_param to __setup block: remove the struct blk_queue_ctx forward declaration block: don't allow the same type rq_qos add more than once btrfs: ensure pages are unlocked on cow_file_range() failure btrfs: reset block group chunk force if we have to wait btrfs: properly flag filesystem with BTRFS_FEATURE_INCOMPAT_BIG_METADATA ACPI: CPPC: Do not prevent CPPC from working in the future powerpc/powernv/kvm: Use darn for H_RANDOM on Power9 KVM: x86/pmu: Introduce the ctrl_mask value for fixed counter KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU doesn't support global_ctrl KVM: VMX: Add helper to check if the guest PMU has PERF_GLOBAL_CTRL KVM: nVMX: Attempt to load PERF_GLOBAL_CTRL on nVMX xfer iff it exists dm raid: fix address sanitizer warning in raid_status dm raid: fix address sanitizer warning in raid_resume tracing: Add '__rel_loc' using trace event macros tracing: Avoid -Warray-bounds warning for __rel_loc macro ext4: update s_overhead_clusters in the superblock during an on-line resize ext4: fix extent status tree race in writeback error recovery path ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h ext4: fix use-after-free in ext4_xattr_set_entry ext4: correct max_inline_xattr_value_size computing ext4: correct the misjudgment in ext4_iget_extra_inode ext4: fix warning in ext4_iomap_begin as race between bmap and write ext4: check if directory block is within i_size ext4: make sure ext4_append() always allocates new block ext4: remove EA inode entry from mbcache on inode eviction ext4: use kmemdup() to replace kmalloc + memcpy ext4: unindent codeblock in ext4_xattr_block_set() ext4: fix race when reusing xattr blocks KEYS: asymmetric: enforce SM2 signature use pkey algo tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH xen-blkback: fix persistent grants negotiation xen-blkback: Apply 'feature_persistent' parameter when connect xen-blkfront: Apply 'feature_persistent' parameter when connect powerpc: Fix eh field when calling lwarx on PPC32 tracing: Use a struct alignof to determine trace event field alignment net_sched: cls_route: remove from list when handle is 0 mac80211: fix a memory leak where sta_info is not freed tcp: fix over estimation in sk_forced_mem_schedule() crypto: lib/blake2s - reduce stack frame usage in self test Revert "mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv" Revert "s390/smp: enforce lowcore protection on CPU restart" drm/bridge: tc358767: Fix (e)DP bridge endpoint parsing in dedicated function net: phy: smsc: Disable Energy Detect Power-Down in interrupt mode drm/vc4: change vc4_dma_range_matches from a global to static tracing/perf: Avoid -Warray-bounds warning for __rel_loc macro drm/msm: Fix dirtyfb refcounting drm/meson: Fix refcount leak in meson_encoder_hdmi_init io_uring: mem-account pbuf buckets Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP" Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression drm/bridge: Move devm_drm_of_get_bridge to bridge/panel.c scsi: lpfc: Fix locking for lpfc_sli_iocbq_lookup() scsi: lpfc: Fix element offset in __lpfc_sli_release_iocbq_s4() scsi: lpfc: Resolve some cleanup issues following SLI path refactoring Linux 5.15.61 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Iec359ed301bcbcd6e19b67ee8534418fab26850b	2022-09-21 17:30:12 +02:00
Nathan Huckleberry	92f23b71ab	UPSTREAM: crypto: x86/polyval - Add PCLMULQDQ accelerated implementation of POLYVAL ... Add hardware accelerated version of POLYVAL for x86-64 CPUs with PCLMULQDQ support. This implementation is accelerated using PCLMULQDQ instructions to perform the finite field computations. For added efficiency, 8 blocks of the message are processed simultaneously by precomputing the first 8 powers of the key. Schoolbook multiplication is used instead of Karatsuba multiplication because it was found to be slightly faster on x86-64 machines. Montgomery reduction must be used instead of Barrett reduction due to the difference in modulus between POLYVAL's field and other finite fields. More information on POLYVAL can be found in the HCTR2 paper: "Length-preserving encryption with HCTR2": https://eprint.iacr.org/2021/1441.pdf Signed-off-by: Nathan Huckleberry <nhuck@google.com> Reviewed-by: Ard Biesheuvel <ardb@kernel.org> Reviewed-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Bug: 233652475 Link: https://lore.kernel.org/linux-arm-kernel/20220520181501.2159644-4-nhuck@google.com/T/ (cherry picked from commit 34f7f6c301) Change-Id: I18a532b8338e62ca7c85d8106ef22eeeab7b3355 Signed-off-by: Nathan Huckleberry <nhuck@google.com>	2022-09-07 06:51:23 +00:00
Nathan Huckleberry	37915fdb0d	UPSTREAM: crypto: x86/aesni-xctr - Add accelerated implementation of XCTR ... Add hardware accelerated version of XCTR for x86-64 CPUs with AESNI support. More information on XCTR can be found in the HCTR2 paper: "Length-preserving encryption with HCTR2": https://eprint.iacr.org/2021/1441.pdf Signed-off-by: Nathan Huckleberry <nhuck@google.com> Reviewed-by: Ard Biesheuvel <ardb@kernel.org> Reviewed-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Bug: 233652475 Link: https://lore.kernel.org/linux-arm-kernel/20220520181501.2159644-4-nhuck@google.com/T/ (cherry picked from commit fd94fcf099) Change-Id: I04bcbe4b1f5f63fc98f634b44651e1a621e5656e Signed-off-by: Nathan Huckleberry <nhuck@google.com>	2022-09-07 06:51:23 +00:00
Nathan Huckleberry	d672bb9c20	UPSTREAM: crypto: hctr2 - Add HCTR2 support ... Add support for HCTR2 as a template. HCTR2 is a length-preserving encryption mode that is efficient on processors with instructions to accelerate AES and carryless multiplication, e.g. x86 processors with AES-NI and CLMUL, and ARM processors with the ARMv8 Crypto Extensions. As a length-preserving encryption mode, HCTR2 is suitable for applications such as storage encryption where ciphertext expansion is not possible, and thus authenticated encryption cannot be used. Currently, such applications usually use XTS, or in some cases Adiantum. XTS has the disadvantage that it is a narrow-block mode: a bitflip will only change 16 bytes in the resulting ciphertext or plaintext. This reveals more information to an attacker than necessary. HCTR2 is a wide-block mode, so it provides a stronger security property: a bitflip will change the entire message. HCTR2 is somewhat similar to Adiantum, which is also a wide-block mode. However, HCTR2 is designed to take advantage of existing crypto instructions, while Adiantum targets devices without such hardware support. Adiantum is also designed with longer messages in mind, while HCTR2 is designed to be efficient even on short messages. HCTR2 requires POLYVAL and XCTR as components. More information on HCTR2 can be found here: "Length-preserving encryption with HCTR2": https://eprint.iacr.org/2021/1441.pdf Signed-off-by: Nathan Huckleberry <nhuck@google.com> Reviewed-by: Ard Biesheuvel <ardb@kernel.org> Reviewed-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Bug: 233652475 Link: https://lore.kernel.org/linux-arm-kernel/20220520181501.2159644-4-nhuck@google.com/T/ (cherry picked from commit 7ff554ced7) Change-Id: Ia97eaf73d2fe8176f20cf41cadf658fb4238269c Signed-off-by: Nathan Huckleberry <nhuck@google.com>	2022-09-07 06:51:23 +00:00
Nathan Huckleberry	e3efa8253b	UPSTREAM: crypto: polyval - Add POLYVAL support ... Add support for POLYVAL, an ε-Δ-universal hash function similar to GHASH. This patch only uses POLYVAL as a component to implement HCTR2 mode. It should be noted that POLYVAL was originally specified for use in AES-GCM-SIV (RFC 8452), but the kernel does not currently support this mode. POLYVAL is implemented as an shash algorithm. The implementation is modified from ghash-generic.c. For more information on POLYVAL see: Length-preserving encryption with HCTR2: https://eprint.iacr.org/2021/1441.pdf AES-GCM-SIV: Nonce Misuse-Resistant Authenticated Encryption: https://datatracker.ietf.org/doc/html/rfc8452 Signed-off-by: Nathan Huckleberry <nhuck@google.com> Reviewed-by: Eric Biggers <ebiggers@google.com> Reviewed-by: Ard Biesheuvel <ardb@kernel.org> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Bug: 233652475 Link: https://lore.kernel.org/linux-arm-kernel/20220520181501.2159644-4-nhuck@google.com/T/ (cherry picked from commit f3c923a09c) Change-Id: I7a7e177ecddaa103421b3b4e2d2f072e30e0c934 Signed-off-by: Nathan Huckleberry <nhuck@google.com>	2022-09-07 06:51:23 +00:00