Commit Graph

1074315 Commits

Author SHA1 Message Date
yenchia.chen
f395ea0980 ANDROID: GKI: update mtktv symbol
8 function symbol(s) added
  'int tty_termios_hw_change(const struct ktermios*, const struct ktermios*)'
  'void usb_serial_deregister_drivers(struct usb_serial_driver* const*)'
  'void usb_serial_generic_close(struct usb_serial_port*)'
  'int usb_serial_generic_get_icount(struct tty_struct*, struct serial_icounter_struct*)'
  'int usb_serial_generic_open(struct tty_struct*, struct usb_serial_port*)'
  'void usb_serial_generic_throttle(struct tty_struct*)'
  'void usb_serial_generic_unthrottle(struct tty_struct*)'
  'int usb_serial_register_drivers(struct usb_serial_driver* const*, const char*, const struct usb_device_id*)'

Bug: 333350374
Change-Id: Ie1ea35a1c6795adef7d5fd65f9fc29f855d683bb
Signed-off-by: yenchia.chen <yenchia.chen@mediatek.com>
2024-04-10 18:08:17 +00:00
Pablo Neira Ayuso
a5d03f57d6 UPSTREAM: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
commit 01acb2e8666a6529697141a6017edbf206921913 upstream.

Remove netdevice from inet/ingress basechain in case NETDEV_UNREGISTER
event is reported, otherwise a stale reference to netdevice remains in
the hook list.

Bug: 332803585
Fixes: 60a3815da7 ("netfilter: add inet ingress support")
Cc: stable@vger.kernel.org
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 70f17b48c8)
Signed-off-by: Lee Jones <joneslee@google.com>
Change-Id: I28482dca416b61dcf2e722ba0aef62d2d41a8f23
2024-04-09 11:43:59 +01:00
Roderick Colenbrander
0cf6fdfb0a UPSTREAM: HID: playstation: support updated DualSense rumble mode.
Newer DualSense firmware supports a revised classic rumble mode,
which feels more similar to rumble as supported on previous PlayStation
controllers. It has been made the default on PlayStation and non-PlayStation
devices now (e.g. iOS and Windows). Default to this new mode when
supported.

Signed-off-by: Roderick Colenbrander <roderick.colenbrander@sony.com>
Signed-off-by: Benjamin Tissoires <benjamin.tissoires@redhat.com>
Link: https://lore.kernel.org/r/20221010212313.78275-4-roderick.colenbrander@sony.com

Bug: 260685629
(cherry picked from commit 9fecab247e)
Change-Id: Icd330111a4d1b1e76a04cd11c623d0982ce3d66f
Signed-off-by: Farid Chahla <farid.chahla@sony.com>
(cherry picked from commit cf8edf192858c5997cae10fa2c028ee9e2a9db6b)
Signed-off-by: Lee Jones <joneslee@google.com>
2024-04-09 09:13:39 +00:00
Roderick Colenbrander
e3da19b218 UPSTREAM: HID: playstation: stop DualSense output work on remove.
Ensure we don't schedule any new output work on removal and wait
for any existing work to complete. If we don't do this e.g. rumble
work can get queued during deletion and we trigger a kernel crash.

Signed-off-by: Roderick Colenbrander <roderick.colenbrander@sony.com>
CC: stable@vger.kernel.org
Signed-off-by: Benjamin Tissoires <benjamin.tissoires@redhat.com>
Link: https://lore.kernel.org/r/20221010212313.78275-2-roderick.colenbrander@sony.com

Bug: 260685629
(cherry picked from commit 182934a1e9)
Change-Id: I40cadfde5765cdabf45def929860258d6019bf10
Signed-off-by: Farid Chahla <farid.chahla@sony.com>
(cherry picked from commit 72fd6526898fc536159dc2ee72f6aaff34183547)
Signed-off-by: Lee Jones <joneslee@google.com>
2024-04-09 09:13:37 +00:00
Greg Kroah-Hartman
62085a0e6d UPSTREAM: HID: playstation: convert to use dev_groups
There is no need for a driver to individually add/create device groups,
the driver core will do it automatically for you.  Convert the
hid-playstation driver to use the dev_groups pointer instead of manually
calling the driver core to create the group and have it be cleaned up
later on by the devm core.

Cc: Roderick Colenbrander <roderick.colenbrander@sony.com>
Cc: Jiri Kosina <jikos@kernel.org>
Cc: Benjamin Tissoires <benjamin.tissoires@redhat.com>
Cc: linux-input@vger.kernel.org
Cc: linux-kernel@vger.kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Acked-by: Roderick Colenbrander <roderick.colenbrander@sony.com>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>

Bug: 260685629
(cherry picked from commit b4a9af9be6)
Change-Id: I516a1b0ef7f4f8545e0c1b9485b49879dd7a3136
Signed-off-by: Farid Chahla <farid.chahla@sony.com>
(cherry picked from commit 2096eced42faf94979f530ddb99cf0cef601af46)
Signed-off-by: Lee Jones <joneslee@google.com>
2024-04-09 09:13:34 +00:00
Jiri Kosina
adce8aae67 UPSTREAM: HID: playstation: fix return from dualsense_player_led_set_brightness()
brightness_set_blocking() callback expects function returning int. This fixes
the follwoing build failure:

drivers/hid/hid-playstation.c: In function ‘dualsense_player_led_set_brightness’:
drivers/hid/hid-playstation.c:885:1: error: no return statement in function returning non-void [-Werror=return-type]
 }
 ^

Signed-off-by: Jiri Kosina <jkosina@suse.cz>

Bug: 260685629
(cherry picked from commit 3c92cb4cb6)
Change-Id: Id16b960826a26ac22c1a14572444f9af29689ed6
Signed-off-by: Farid Chahla <farid.chahla@sony.com>
(cherry picked from commit 4281e236100d7ca198bca4e0e7e74410dc3fe751)
Signed-off-by: Lee Jones <joneslee@google.com>
2024-04-09 09:13:30 +00:00
Roderick Colenbrander
c996cb50e2 UPSTREAM: HID: playstation: expose DualSense player LEDs through LED class.
The DualSense player LEDs were so far not adjustable from user-space.
This patch exposes each LED individually through the LED class. Each
LED uses the new 'player' function resulting in a name like:
'inputX:white:player-1' for the first LED.

Signed-off-by: Roderick Colenbrander <roderick.colenbrander@sony.com>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>

Bug: 260685629
(cherry picked from commit 8c0ab553b0)
Change-Id: I49c699a99b0b8a7bb7980560e3ea7a12faf646aa
Signed-off-by: Farid Chahla <farid.chahla@sony.com>
(cherry picked from commit 1c2aceb8d7ca297ec5b485163361d40a93023347)
Signed-off-by: Lee Jones <joneslee@google.com>
2024-04-09 09:13:30 +00:00
Roderick Colenbrander
f011142fea UPSTREAM: leds: add new LED_FUNCTION_PLAYER for player LEDs for game controllers.
Player LEDs are commonly found on game controllers from Nintendo and Sony
to indicate a player ID across a number of LEDs. For example, "Player 2"
might be indicated as "-x--" on a device with 4 LEDs where "x" means on.

This patch introduces LED_FUNCTION_PLAYER1-5 defines to properly indicate
player LEDs from the kernel. Until now there was no good standard, which
resulted in inconsistent behavior across xpad, hid-sony, hid-wiimote and
other drivers. Moving forward new drivers should use LED_FUNCTION_PLAYERx.

Note: management of Player IDs is left to user space, though a kernel
driver may pick a default value.

Signed-off-by: Roderick Colenbrander <roderick.colenbrander@sony.com>
Acked-by: Pavel Machek <pavel@ucw.cz>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>

Bug: 260685629
(cherry picked from commit 61177c088a)
Change-Id: Ie1de4d66304bb25fc2c9fcdb1ec9b7589ad9e7ac
Signed-off-by: Farid Chahla <farid.chahla@sony.com>
(cherry picked from commit 8abc9ed234b1b10e4949720e056c294dab4552d7)
Signed-off-by: Lee Jones <joneslee@google.com>
2024-04-09 09:13:25 +00:00
Roderick Colenbrander
19cbe31642 UPSTREAM: HID: playstation: expose DualSense lightbar through a multi-color LED.
The DualSense lightbar has so far been supported, but it was not yet
adjustable from user space. This patch exposes it through a multi-color
LED.

Signed-off-by: Roderick Colenbrander <roderick.colenbrander@sony.com>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>

Bug: 260685629
(cherry picked from commit fc97b4d6a1)
Change-Id: I48204113da804b13ad5bed2f651a5826ab5a86f7
Signed-off-by: Farid Chahla <farid.chahla@sony.com>
(cherry picked from commit 392b327fe02113aaaa332ca4cf06e4edb36f5566)
Signed-off-by: Lee Jones <joneslee@google.com>
2024-04-09 09:13:25 +00:00
Carlos Galo
3507c287a6 UPSTREAM: mm: update mark_victim tracepoints fields
The current implementation of the mark_victim tracepoint provides only the
process ID (pid) of the victim process.  This limitation poses challenges
for userspace tools requiring real-time OOM analysis and intervention.
Although this information is available from the kernel logs, it’s not
the appropriate format to provide OOM notifications.  In Android, BPF
programs are used with the mark_victim trace events to notify userspace of
an OOM kill.  For consistency, update the trace event to include the same
information about the OOMed victim as the kernel logs.

- UID
   In Android each installed application has a unique UID. Including
   the `uid` assists in correlating OOM events with specific apps.

- Process Name (comm)
   Enables identification of the affected process.

- OOM Score
  Will allow userspace to get additional insight of the relative kill
  priority of the OOM victim. In Android, the oom_score_adj is used to
  categorize app state (foreground, background, etc.), which aids in
  analyzing user-perceptible impacts of OOM events [1].

- Total VM, RSS Stats, and pgtables
  Amount of memory used by the victim that will, potentially, be freed up
  by killing it.

[1] 246dc8fc95:frameworks/base/services/core/java/com/android/server/am/ProcessList.java;l=188-283
Signed-off-by: Carlos Galo <carlosgalo@google.com>
Reviewed-by: Steven Rostedt <rostedt@goodmis.org>
Cc: Suren Baghdasaryan <surenb@google.com>
Cc: Michal Hocko <mhocko@suse.com>
Cc: "Masami Hiramatsu (Google)" <mhiramat@kernel.org>
Cc: Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>

Bug: 331214192
(cherry picked from commit 72ba14deb40a9e9668ec5e66a341ed657e5215c2)
Link: https://lore.kernel.org/all/20240223173258.174828-1-carlosgalo@google.com/
Change-Id: I24f503ceca04b83f8abf42fcd04a3409e17be6b5
2024-04-08 18:32:15 +00:00
Carlos Galo
cd4da4b748 Revert "FROMGIT: mm: update mark_victim tracepoints fields"
This reverts commit b9e9a2c009.

Reason for revert: b/331214192
Signed-off-by: Carlos Galo <carlosgalo@google.com>

Change-Id: I5895d3b8a0577f7aa67a8fbab81991ced49f8eab
2024-04-08 18:29:40 +00:00
Pablo Neira Ayuso
948f42ca2b UPSTREAM: netfilter: nft_set_pipapo: release elements in clone only from destroy path
[ Upstream commit b0e256f3dd2ba6532f37c5c22e07cb07a36031ee ]

Clone already always provides a current view of the lookup table, use it
to destroy the set, otherwise it is possible to destroy elements twice.

This fix requires:

 212ed75dc5 ("netfilter: nf_tables: integrate pipapo into commit protocol")

which came after:

 9827a0e6e2 ("netfilter: nft_set_pipapo: release elements in clone from abort path").

Bug: 330876672
Fixes: 9827a0e6e2 ("netfilter: nft_set_pipapo: release elements in clone from abort path")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
(cherry picked from commit ff90050771)
Signed-off-by: Lee Jones <joneslee@google.com>
Change-Id: I8c0811e69f82681c7fcfdca1111f1702e27bb80e
2024-04-08 09:59:22 +01:00
qinglin.li
6a45518094 ANDROID: GKI: Update symbol list for Amlogic
1 function symbol(s) added
  'int __traceiter_android_rvh_set_sugov_update(void*, struct sugov_policy*, unsigned int, bool*)'

1 variable symbol(s) added
  'struct tracepoint __tracepoint_android_rvh_set_sugov_update'

Bug: 332649159
Change-Id: Id8efeb5dd38638e2b08a5f2bad5db6744cc0fb15
Signed-off-by: Qinglin Li <qinglin.li@amlogic.com>
2024-04-03 17:05:03 +00:00
erinwang
3de9177e81 ANDROID: GKI: Update symbol list for lenovo
2 function symbol(s) added
  'unsigned long* devm_bitmap_zalloc(struct device*, unsigned int, gfp_t)'
  'void tracing_on()'

Bug: 331118893

Change-Id: I3baa632e1ebb7cb09d4651d656f0dcc6cda21cd3
Signed-off-by: erinwang <erinwang2@lenovo.com>
2024-04-02 08:02:51 +00:00
Carlos Llamas
668dfb812d FROMLIST: binder: check offset alignment in binder_get_object()
Commit 6d98eb95b4 ("binder: avoid potential data leakage when copying
txn") introduced changes to how binder objects are copied. In doing so,
it unintentionally removed an offset alignment check done through calls
to binder_alloc_copy_from_buffer() -> check_buffer().

These calls were replaced in binder_get_object() with copy_from_user(),
so now an explicit offset alignment check is needed here. This avoids
later complications when unwinding the objects gets harder.

It is worth noting this check existed prior to commit 7a67a39320
("binder: add function to copy binder object from buffer"), likely
removed due to redundancy at the time.

Fixes: 6d98eb95b4 ("binder: avoid potential data leakage when copying txn")
Cc:  <stable@vger.kernel.org>
Signed-off-by: Carlos Llamas <cmllamas@google.com>

Bug: 320661088
Link: https://lore.kernel.org/all/20240330190115.1877819-1-cmllamas@google.com/
Change-Id: Iaddabaa28de7ba7b7d35dbb639d38ca79dbc5077
Signed-off-by: Carlos Llamas <cmllamas@google.com>
2024-03-30 19:12:27 +00:00
Ben Fennema
3b3c1c80e8 ANDROID: GKI: Update the ABI symbol list
Update the pixel_watch symbol list.

Bug: 330275264
Change-Id: I843394f80d93a3f3d1a33846d1af4f189803b829
Signed-off-by: Ben Fennema <fennema@google.com>
2024-03-29 12:46:34 -07:00
qinglin.li
f600c62d25 ANDROID: GKI: Update symbol list for Amlogic
12 function symbol(s) added
  'struct backing_dev_info* bdi_alloc(int)'
  'void bdi_put(struct backing_dev_info*)'
  'int bdi_register(struct backing_dev_info*, const char*, ...)'
  'void crypto_unregister_ahashes(struct ahash_alg*, int)'
  'void deactivate_locked_super(struct super_block*)'
  'loff_t fixed_size_llseek(struct file*, loff_t, int, loff_t)'
  'void generic_shutdown_super(struct super_block*)'
  'struct gpio_desc* gpiod_get_index_optional(struct device*, const char*, unsigned int, enum gpiod_flags)'
  'int lookup_bdev(const char*, dev_t*)'
  'struct nvmem_device* nvmem_register(const struct nvmem_config*)'
  'void nvmem_unregister(struct nvmem_device*)'
  'struct super_block* sget_fc(struct fs_context*, int(*)(struct super_block*, struct fs_context*), int(*)(struct super_block*, struct fs_context*))'

Bug: 331874739
Change-Id: Icaa620cd09b0cccb3a1075c1f0429355d90103f4
Signed-off-by: Qinglin Li <qinglin.li@amlogic.com>
2024-03-29 17:26:20 +00:00
Vilas Bhat
d154026d33 ANDROID: GKI: Update the ABI symbol list
Update the pixel_watch symbol list.

6 function symbol(s) added
  __module_get
  emergency_restart
  kernel_restart
  watchdog_init_timeout
  watchdog_register_device
  watchdog_unregister_device

Bug: 329913683
Change-Id: I7bce78be9c642c7fea483aab25b1eb6ce15a232d
Signed-off-by: Vilas Bhat <vilasbhat@google.com>
2024-03-28 19:59:00 -07:00
Greg Kroah-Hartman
5f12c91ab0 Merge tag 'android14-5.15.148_r00' into android14-5.15
This merges up to the 5.15.148 LTS release into the android14-5.15
branch.  Included in here are the following commits:

*   30f4052325 Merge "Merge branch 'android14-5.15' into branch 'android14-5.15-lts'" into android14-5.15-lts
|\
| * 2e2880028c Merge branch 'android14-5.15' into branch 'android14-5.15-lts'
* | abe9e11e84 UPSTREAM: drm/msm/dsi: Enable runtime PM
* | 6205c3735f UPSTREAM: PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
|/
*   c169b3e6e4 Merge 5.15.148 into android14-5.15-lts
|\
| * 6139f2a02f Linux 5.15.148
| * 84c39986fe Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
| * c8483a4845 arm64: dts: armada-3720-turris-mox: set irq type for RTC
| * 98052220f1 netfilter: nft_quota: copy content when cloning expression
| * 3be3c61232 netfilter: nft_last: copy content when cloning expression
| * 42d4617848 netfilter: nft_limit: Clone packet limits' cost value
| * d808805851 netfilter: nft_limit: fix stateful object memory leak
| * e562d84225 netfilter: nft_connlimit: memleak if nf_ct_netns_get() fails
| * 10823cfe8e netfilter: nf_tables: typo NULL check in _clone() function
| * 0f2dca5165 block: Remove special-casing of compound pages
| * 08bf561118 i2c: s3c24xx: fix transferring more than one message in polling mode
| * 38ce342a19 i2c: s3c24xx: fix read transfers in polling mode
| * 62b3387bee ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work
| * 58485b95fd selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes
| * 348112522a mlxsw: spectrum_acl_tcam: Fix stack corruption
| * 005f2d10f9 mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
| * 077c4776d7 mlxsw: spectrum_acl_tcam: Make fini symmetric to init
| * d28048d319 mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
| * 196f3595e8 mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
| * 87c5403393 mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
| * 3732db294e ethtool: netlink: Add missing ethnl_ops_begin/complete
| * 7f3d781e0d kdb: Fix a potential buffer overflow in kdb_local()
| * 995d6099d8 ipvs: avoid stat macros calls from preemptible context
| * 27513eff4c netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description
| * d6420b66ad netfilter: nf_tables: skip dead set elements in netlink dump
| * 77be8c495a netfilter: nf_tables: do not allow mismatch field size and set key length
| * b8eb65bd13 netfilter: nft_limit: do not ignore unsupported flags
| * d7b5da4fde netfilter: nf_tables: memcg accounting for dynamically allocated objects
| * 3bb4403d20 netfilter: nft_limit: move stateful fields out of expression data
| * 8a6635074a netfilter: nft_limit: rename stateful structure
| * e2e8fdd0ad netfilter: nft_quota: move stateful fields out of expression data
| * b147911d2a netfilter: nft_last: move stateful fields out of expression data
| * 36997eb13d netfilter: nft_connlimit: move stateful fields out of expression data
| * 713a138855 netfilter: nf_tables: reject invalid set policy
| * 78e8546646 net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe
| * 29ffa63f21 bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
| * 684290895a net: stmmac: ethtool: Fixed calltrace caused by unbalanced disable_irq_wake calls
| * 8e481c7f81 net: ravb: Fix dma_addr_t truncation in error case
| * f05301ad05 mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req()
| * 413b913507 mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
| * 9b82d5f5d0 mptcp: strict validation before using mp_opt->hmac
| * c99f490a42 mptcp: drop unused sk in mptcp_get_options
| * cbe983d0e4 mptcp: mptcp_parse_option() fix for MPTCPOPT_MP_JOIN
| * 4f2c4ba321 net: phy: micrel: populate .soft_reset for KSZ9131
| * 890bc96ef1 net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames
| * 3b52548622 net: qualcomm: rmnet: fix global oob in rmnet_policy
| * 18babcfa36 s390/pci: fix max size calculation in zpci_memcpy_toio()
| * bf3304054e PCI: keystone: Fix race condition when initializing PHYs
| * a300f741f6 nvmet-tcp: Fix the H2C expected PDU len calculation
| * b02a005b19 nvmet: re-fix tracing strncpy() warning
| * 763c67e96b serial: imx: Correct clock error message in function probe()
| * 1ed3c20205 usb: xhci-mtk: fix a short packet issue of gen1 isoc-in transfer
| * 0a12db736e apparmor: avoid crash when parsed profile name is empty
| * 367d061a18 perf env: Avoid recursively taking env->bpf_progs.lock
| * 0613a2fbdf nvmet-tcp: fix a crash in nvmet_req_complete()
| * 4cb3cf7177 nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
| * 013d7878c7 usb: cdc-acm: return correct error code on unsupported break
| * c50f88954c tty: use 'if' in send_break() instead of 'goto'
| * a222bd01ca tty: don't check for signal_pending() in send_break()
| * 370b18aefe tty: early return from send_break() on TTY_DRIVER_HARDWARE_BREAK
| * 6f98751fa4 tty: change tty_write_lock()'s ndelay parameter to bool
| * 7ab8ef24fd perf genelf: Set ELF program header addresses properly
| * 08715e4fa5 iio: adc: ad9467: fix scale setting
| * d7773702f8 iio: adc: ad9467: don't ignore error codes
| * fd1957c706 iio: adc: ad9467: fix reset gpio handling
| * 71204292a7 iio: adc: ad9467: Benefit from devm_clk_get_enabled() to simplify
| * fbcc37f4b4 selftests/sgx: Skip non X86_64 platform
| * 71005a1d9b selftests/sgx: Fix uninitialized pointer dereference in error path
| * ff168d4fdb serial: imx: fix tx statemachine deadlock
| * 714778c299 software node: Let args be NULL in software_node_get_reference_args
| * c203812b4e libapi: Add missing linux/types.h header to get the __u64 type on io.h
| * 828cd82948 serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed
| * 96d289b57d power: supply: bq256xx: fix some problem in bq256xx_hw_init
| * 435671571e power: supply: cw2015: correct time_to_empty units in sysfs
| * 07733ca556 MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup()
| * 4590f46c15 MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup()
| * c1669b54c3 riscv: Fix module_alloc() that did not reset the linear mapping permissions
| * 938f70d146 riscv: Check if the code to patch lies in the exit section
| * 8e0935435b mips: Fix incorrect max_low_pfn adjustment
| * 4b88c9c83f mips: dmi: Fix early remap on MIPS32
| * d1c8c7ef39 mfd: intel-lpss: Fix the fractional clock divider flags
| * 6109ff5ad5 leds: aw2013: Select missing dependency REGMAP_I2C
| * c3e3a2144b mfd: syscon: Fix null pointer dereference in of_syscon_register()
| * a004323a38 ARM: 9330/1: davinci: also select PINCTRL
| * 77c20b4cbc iommu/dma: Trace bounce buffer usage when mapping buffers
| * fc7c3be665 serial: sc16is7xx: set safe default SPI clock frequency
| * 160ef3fc35 serial: sc16is7xx: add check for unsupported SPI modes during probe
| * b1effdda4f HID: wacom: Correct behavior when processing some confidence == false touches
| * 400ad6fe24 iio: adc: ad7091r: Pass iio_dev to event handler
| * 12c2759ab1 KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
| * d99976d145 KVM: arm64: vgic-v4: Restore pending state on host userspace write
| * 9bd4c6e658 x86/kvm: Do not try to disable kvmclock if it was not enabled
| * a4563156c3 PCI: mediatek: Clear interrupt status before dispatching handler
| * 0f59d3772a PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
| * 25aab84f1a wifi: mwifiex: configure BSSID consistently when starting AP
| * a61373d32c wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors
| * 1f0b697913 wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code
| * 5600943b0c wifi: mt76: fix broken precal loading from MTD for mt7915
| * 4124a004d5 iommu/arm-smmu-qcom: Add missing GMU entry to match table
| * a7b98aa10f bpf: Fix re-attachment branch in bpf_tracing_prog_attach
| * 4c71c01df8 Bluetooth: Fix atomicity violation in {min,max}_key_size_set
| * 27e58d3b52 rootfs: Fix support for rootfstype= when root= is given
| * 79ea1c6f06 io_uring/rw: ensure io->bytes_done is always initialized
| * 801c8adb85 pwm: jz4740: Don't use dev_err_probe() in .request()
| * c9ed30eea4 netfilter: nf_tables: check if catch-all set element is active in next generation
| * 5010c27120 block: add check that partition length needs to be aligned with block size
| * 6a73c9fdb7 scsi: mpi3mr: Refresh sdev queue depth after controller reset
| * 610ca0cadb fbdev: flush deferred work in fb_deferred_io_fsync()
| * cb32c0e1bd ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx
| * d37d61c077 ALSA: oxygen: Fix right channel of capture volume mixer
| * 314cf7c2dd serial: imx: Ensure that imx_uart_rs485_config() is called with enabled clock
| * ac0c3a2fe7 usb: mon: Fix atomicity violation in mon_bin_vma_fault
| * d7ce8ebd50 usb: typec: class: fix typec_altmode_put_partner to put plugs
| * 4212a9ff65 Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs"
| * 2c64904a0e usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
| * e1b3be9bab usb: cdns3: fix iso transfer error when mult is not zero
| * 9cdf2c9159 usb: cdns3: fix uvc failure work since sg support enabled
| * 2e349cf0d0 usb: chipidea: wait controller resume finished for wakeup irq
| * 295b4fa321 Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-only"
| * 4f5a109b8f Revert "usb: dwc3: Soft reset phy on probe for host"
| * ea968824c4 usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart
| * e3e35301f1 usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host()
| * 41e05f246f tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug
| * 98fee5bee9 binder: fix race between mmput() and do_exit()
| * e03023fcdb xen-netback: don't produce zero-size SKB frags
| * 409c30ff6c virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session()
| * f97f612864 dma-mapping: Fix build error unused-value
| * 72d29dcdf5 Input: atkbd - use ab83 as id when skipping the getid command
| * 9c1fa9eedc binder: fix unused alloc->free_async_space
| * c44b276bc1 binder: fix async space check for 0-sized buffers
| * 0921867f77 keys, dns: Fix size check of V1 server-list header
| * 10193a5001 selftests/bpf: Add assert for user stacks in test_task_stack
| * cc9c60b253 of: unittest: Fix of_count_phandle_with_args() expected value message
| * 4541004084 of: Fix double free in of_parse_phandle_with_args_map
| * 83f5d6c1ef ksmbd: validate the zero field of packet header
| * 4af4674158 drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init
| * bf1acc6258 IB/iser: Prevent invalidating wrong MR
| * 106136f209 mmc: sdhci_omap: Fix TI SoC dependencies
| * da9eae2c1a mmc: sdhci_am654: Fix TI SoC dependencies
| * e517645ead ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
| * 3a09488f4f ALSA: scarlett2: Add missing error checks to *_ctl_get()
| * 12023666f2 ALSA: scarlett2: Allow passing any output to line_out_remap()
| * 51d5697e1c ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config()
| * 0ba9386e19 ALSA: scarlett2: Add missing error check to scarlett2_config_save()
| * c60490b817 ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[]
| * cf55afb5a5 pwm: stm32: Fix enable count for clk in .probe()
| * df19bf4044 pwm: stm32: Use hweight32 in stm32_pwm_detect_channels
| * c82c21e7d9 pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable
| * fa019c01db clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw
| * 256d1232c8 clk: fixed-rate: add devm_clk_hw_register_fixed_rate
| * a30ca04dde clk: asm9260: use parent index to link the reference clock
| * c45ca73b01 clk: si5341: fix an error code problem in si5341_output_clk_set_rate
| * 347f9d7258 watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused
| * 3646d83db8 watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling
| * 1711bdfe5e watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO
| * b9bced8ca7 watchdog: set cdev owner before adding
| * 9117fc44fd drivers: clk: zynqmp: update divider round rate logic
| * 8f4941940d clk: zynqmp: Add a check for NULL pointer
| * f46c0ec5a5 clk: zynqmp: make bestdiv unsigned
| * e27660be6f drivers: clk: zynqmp: calculate closest mux rate
| * 8aff5f6723 clk: qcom: videocc-sm8150: Add missing PLL config property
| * b31526b8c5 clk: qcom: videocc-sm8150: Update the videocc resets
| * 1dd84d5e83 dt-bindings: clock: Update the videocc resets for sm8150
| * c72dbb780d gpu/drm/radeon: fix two memleaks in radeon_vm_init
| * b6dcba02ee drivers/amd/pm: fix a use-after-free in kv_parse_power_table
| * 2bf47c89bb drm/amd/pm: fix a double-free in si_dpm_init
| * 11d1f2d895 drm/amdgpu/debugfs: fix error code when smc register accessors are NULL
| * 720919b58d media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of m88ds3103_probe()
| * 0a50ca097a media: dvbdev: drop refcount on error path in dvb_device_open()
| * 11e60be408 f2fs: fix the f2fs_file_write_iter tracepoint
| * f3a220d975 f2fs: fix to update iostat correctly in f2fs_filemap_fault()
| * df2571b4d5 f2fs: fix to check compress file in f2fs_move_file_range()
| * a3316290a8 media: rkisp1: Disable runtime PM in probe error path
| * f4176c5185 clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config
| * d3a8c5c783 media: cx231xx: fix a memleak in cx231xx_init_isoc
| * 9f583fc91c drm/bridge: tc358767: Fix return value on error case
| * a3cb0b5b1b drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable
| * a5934df4df drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table
| * 1a6cccd7fd drm/radeon/dpm: fix a memleak in sumo_parse_power_table
| * 14bbfaa5df drm/radeon: check the alloc_workqueue return value in radeon_crtc_init()
| * 929af5cd8a drm/drv: propagate errors from drm_modeset_register_all()
| * cbf207b171 drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks
| * 6d8dc61985 drm/msm/mdp4: flush vblank event on disable
| * d3aa670bba ASoC: cs35l34: Fix GPIO name and drop legacy include
| * a0f27f673e ASoC: cs35l33: Fix GPIO name and drop legacy include
| * 528844bb1e drm/radeon: check return value of radeon_ring_lock()
| * 4e57efe03a drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check()
| * 1f7008dd12 drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg()
| * f100ba617d f2fs: fix to avoid dirent corruption
| * 4c5e6a02dc drm/bridge: Fix typo in post_disable() description
| * ec3634ebe2 media: pvrusb2: fix use after free on context disconnection
| * 1821c4d1c3 drm/tilcdc: Fix irq free on unload
| * 08ccff6ece drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
| * 45c4c4b04a drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer
| * ab45a15a50 drm/panel-elida-kd35t133: hold panel in reset for unprepare
| * a811031da2 RDMA/hns: Fix inappropriate err code for unsupported operations
| * 5245c05cd9 RDMA/usnic: Silence uninitialized symbol smatch warnings
| * ab8038e7bc Revert "drm/omapdrm: Annotate dma-fence critical section in commit path"
| * d847363bc5 Revert "drm/tidss: Annotate dma-fence critical section in commit path"
| * 13e3dd2df0 ARM: davinci: always select CONFIG_CPU_ARM926T
| * 4329426cf6 ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
| * d0464a7edf mlxbf_gige: Enable the GigE port in mlxbf_gige_open
| * 8d632d0fd2 net: mellanox: mlxbf_gige: Replace non-standard interrupt handling
| * 86f3df0495 mlxbf_gige: Fix intermittent no ip issue
| * 172ba7d46c net/sched: act_ct: fix skb leak and crash on ooo frags
| * c3d8edb170 null_blk: don't cap max_hw_sectors to BLK_DEF_MAX_SECTORS
| * 8676b014e4 block: make BLK_DEF_MAX_SECTORS unsigned
| * ce3440b699 Bluetooth: btmtkuart: fix recv_buf() return value
| * cede5d0c29 Bluetooth: Fix bogus check for re-auth no supported with non-ssp
| * 166d65b0d5 netfilter: nf_tables: mark newset as dead on transaction abort
| * e907e95729 wifi: iwlwifi: mvm: send TX path flush in rfkill
| * 8d6c614212 wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request
| * 5f4ea050bb wifi: rtlwifi: rtl8192se: using calculate_bit_shift()
| * aaf4723f52 wifi: rtlwifi: rtl8192ee: using calculate_bit_shift()
| * dbbbd2cc8f wifi: rtlwifi: rtl8192de: using calculate_bit_shift()
| * 7e0d54f5dc wifi: rtlwifi: rtl8192ce: using calculate_bit_shift()
| * 5dbc5c5222 wifi: rtlwifi: rtl8192cu: using calculate_bit_shift()
| * 62de564726 wifi: rtlwifi: rtl8192c: using calculate_bit_shift()
| * aec0dee37b wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift()
| * 37871c978d wifi: rtlwifi: add calculate_bit_shift()
| * 493cfed247 arm64: dts: qcom: sc7280: Mark SDHCI hosts as cache-coherent
| * 2c97f94500 block: add check of 'minors' and 'first_minor' in device_add_disk()
| * df4f5a35c5 arm64: dts: qcom: sm8150-hdk: fix SS USB regulators
| * 6f20058dad soc: qcom: llcc: Fix dis_cap_alloc and retain_on_pc configuration
| * ccc94806d0 dma-mapping: clear dev->dma_mem to NULL after freeing it
| * 99326214f9 dma-mapping: Add dma_release_coherent_memory to DMA API
| * 930cd34add virtio/vsock: fix logic which reduces credit update messages
| * a18eff8ba0 selftests/net: fix grep checking for fib_nexthop_multiprefix
| * 62c904c472 scsi: hisi_sas: Correct the number of global debugfs registers
| * 6bf2126107 scsi: hisi_sas: Rollback some operations if FLR failed
| * 84e174afb5 scsi: hisi_sas: Replace with standard error code return value
| * 0d17931d7e scsi: hisi_sas: Prevent parallel FLR and controller reset
| * 0760d1d6d8 scsi: hisi_sas: Rename HISI_SAS_{RESET -> RESETTING}_BIT
| * 80b0b7c79f block: Set memalloc_noio to false on device_add_disk() error path
| * 0296268425 bpf: Fix verification of indirect var-off stack access
| * 8c2127dc93 arm64: dts: qcom: sc7280: fix usb_2 wakeup interrupt types
| * 97c60adff1 arm64: dts: qcom: sdm845-db845c: correct LED panic indicator
| * 6211a043ab arm64: dts: qcom: qrb5165-rb5: correct LED panic indicator
| * 609c7d556c scsi: fnic: Return error if vmalloc() failed
| * 67e6707f07 bpf: fix check for attempt to corrupt spilled pointer
| * f40cd60f3f arm64: dts: qcom: sm8250: Make watchdog bark interrupt edge triggered
| * a413fdd3ea arm64: dts: qcom: sm8150: Make watchdog bark interrupt edge triggered
| * a78ae10607 arm64: dts: qcom: sdm845: Make watchdog bark interrupt edge triggered
| * 06ec7a3961 arm64: dts: qcom: sc7280: Make watchdog bark interrupt edge triggered
| * 0c55ace45d arm64: dts: qcom: sc7180: Make watchdog bark interrupt edge triggered
| * 65b28cad75 ARM: dts: qcom: sdx65: correct SPMI node name
| * bb88e2174a bpf: enforce precision of R0 on callback return
| * fa5b150abf arm64: dts: ti: k3-am65-main: Fix DSS irq trigger type
| * 18051358d9 wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior
| * bf98ac3288 firmware: meson_sm: populate platform devices from sm device tree data
| * 41b3228281 firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create()
| * 7e36646237 net/ncsi: Fix netlink major/minor version numbers
| * 024e24086e ARM: dts: qcom: apq8064: correct XOADC register address
| * ef2373f31f wifi: libertas: stop selecting wext
| * 69f7c1f5d2 wifi: ath11k: Defer on rproc_get failure
| * 131afd9a57 bpf: Add crosstask check to __bpf_get_stack
| * 1ed921e42a bpf, lpm: Fix check prefixlen before walking trie
| * 2b67863c5b wifi: rtw88: fix RX filter in FIF_ALLMULTI flag
| * 9d4f4dea82 NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT
| * d0e09a7ba3 blocklayoutdriver: Fix reference leak of pnfs_device_node
| * a5f2f91b3f crypto: scomp - fix req->dst buffer overflow
| * dc6779550f crypto: sahara - do not resize req->src when doing hash operations
| * a5e0e39dac crypto: sahara - fix processing hash requests with req->nbytes < sg->length
| * 2dc0f23ac4 crypto: sahara - improve error handling in sahara_sha_process()
| * faa25455f7 crypto: sahara - fix wait_for_completion_timeout() error handling
| * 2104f405af crypto: sahara - fix ahash reqsize
| * 34c6a33567 crypto: sahara - handle zero-length aes requests
| * a7b435e816 crypto: sahara - avoid skcipher fallback code duplication
| * b1664c5334 crypto: virtio - Wait for tasklet to complete on device remove
| * ee0586d73c gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
| * 00e3321c65 fs: indicate request originates from old mount API
| * 8fb12524c8 pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
| * 8dd9e58c69 crypto: sahara - fix error handling in sahara_hw_descriptor_create()
| * 3413d878fd crypto: sahara - fix processing requests with cryptlen < sg->length
| * a962882a35 crypto: sahara - fix ahash selftest failure
| * 6f31caf8aa crypto: sahara - fix cbc selftest failure
| * 6fb7db05ad crypto: sahara - remove FLAGS_NEW_KEY logic
| * d2205b9b57 crypto: af_alg - Disallow multiple in-flight AIO requests
| * 088123ddb4 crypto: ccp - fix memleak in ccp_init_dm_workarea
| * d3ff5362b4 crypto: sa2ul - Return crypto_aead_setkey to transfer the error
| * 75cba72ddb crypto: virtio - Handle dataq logic with tasklet
| * 5e37fa0b4c selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket
| * d8ac253776 mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
| * a252d5c1ef kunit: debugfs: Fix unchecked dereference in debugfs_print_results()
| * f23aa841a0 ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error
| * f5de4ad61d ACPI: LPSS: Fix the fractional clock divider flags
| * 6b15fb99b0 spi: sh-msiof: Enforce fixed DTDL for R-Car H3
| * 2aa141f8bc efivarfs: force RO when remounting if SetVariable is not supported
| * a4529a08d3 calipso: fix memory leak in netlbl_calipso_add_pass()
| * dd645fc8f8 cpufreq: scmi: process the result of devm_of_clk_add_hw_provider()
| * aead146e88 cpufreq: Use of_property_present() for testing DT property presence
| * 435841c106 of: Add of_property_present() helper
| * c5df417936 of: property: define of_property_read_u{8,16,32,64}_array() unconditionally
| * c1814a4ffd ACPI: LPIT: Avoid u32 multiplication overflow
| * 3a370502a5 ACPI: video: check for error while searching for backlight device parent
| * 45f6080748 mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response
| * 9c92f01bb9 spi: spi-zynqmp-gqspi: fix driver kconfig dependencies
| * f105c26300 powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
| * 6b58d16037 powerpc/powernv: Add a null pointer check in opal_powercap_init()
| * c0b111ea78 powerpc/powernv: Add a null pointer check in opal_event_init()
| * 2a82c4439b powerpc/powernv: Add a null pointer check to scom_debug_init_one()
| * 5daf0ef626 selftests/powerpc: Fix error handling in FPU/VMX preemption tests
| * 999a27b3ce powerpc/pseries/memhp: Fix access beyond end of drmem array
| * 5d69c8859e powerpc/44x: select I2C for CURRITUCK
| * 467c9c9dc0 powerpc: add crtsavres.o to always-y instead of extra-y
| * 0b11a145eb powerpc: remove checks for binutils older than 2.25
| * 63ecb08533 powerpc/toc: Future proof kernel toc
| * 2de654d858 powerpc: Mark .opd section read-only
| * 700cf4bead EDAC/thunderx: Fix possible out-of-bounds string access
| * b53730a40e x86/lib: Fix overflow when counting digits
| * 0a43304cf6 coresight: etm4x: Fix width of CCITMIN field
| * b67064bd37 PCI: Add ACS quirk for more Zhaoxin Root Ports
| * e62243b353 leds: ledtrig-tty: Free allocated ttyname buffer on deactivate
| * 6c3388c0af parport: parport_serial: Add Brainboxes device IDs and geometry
| * 72095a5430 parport: parport_serial: Add Brainboxes BAR details
| * 5cf604ee53 uio: Fix use-after-free in uio_open
| * 659be220e6 binder: fix comment on binder_alloc_new_buf() return value
| * 2900c0ee59 binder: fix trivial typo of binder_free_buf_locked()
| * 8ad4d580e8 binder: fix use-after-free in shinker's callback
| * 1263bd9e08 binder: use EPOLLERR from eventpoll.h
| * 0ee3ded745 Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
| * 12b07f443d kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list
| * 66cb0868b1 bpf: Add --skip_encoding_btf_inconsistent_proto, --btf_gen_optimized to pahole flags for v1.25
| * 2a2495b6a3 Revert "ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek"
| * 313cfcaefa ACPI: resource: Add another DMI match for the TongFang GMxXGxx
| * dec512974c drm/crtc: fix uninitialized variable use
| * 21eea9b6c4 ARM: sun9i: smp: fix return code check of of_property_match_string
| * dc26b67704 net: qrtr: ns: Return 0 if server port is not present
| * 5dbcdaf4db ida: Fix crash in ida_free when the bitmap is empty
| * c9f5b801bc i2c: rk3x: fix potential spinlock recursion on poll
| * 3f0dc646b5 ASoC: Intel: bytcr_rt5640: Add quirk for the Medion Lifetab S10346
| * adf4616a44 Input: xpad - add Razer Wolverine V2 support
| * d66ffc87ba wifi: iwlwifi: pcie: avoid a NULL pointer dereference
| * fd13543dbb ARC: fix spare error
| * b3f44f21d3 s390/scm: fix virtual vs physical address confusion
| * 46445552ed Input: i8042 - add nomux quirk for Acer P459-G2-M
| * 0f0da2d6bd Input: atkbd - skip ATKBD_CMD_GETID in translated mode
| * 274b4c8162 reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning
| * 5d307038fa ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI
| * a9655e7e4b tracing: Fix uaf issue when open the hist or hist_debug file
| * 64d81f61ad MIPS: dts: loongson: drop incorrect dwmac fallback compatible
| * 3f483a39e2 stmmac: dwmac-loongson: drop useless check for compatible fallback
| * aeb0d506f7 tracing: Add size check when printing trace_marker output
| * c3729567de tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing
| * c8af7ad729 jbd2: fix soft lockup in journal_finish_inode_data_buffers()
| * 7b0586ada9 platform/x86: intel-vbtn: Fix missing tablet-mode-switch events
| * 6511772fc0 neighbour: Don't let neigh_forced_gc() disable preemption for long
| * 2e1846b0c0 drm/crtc: Fix uninit-value bug in drm_mode_setcrtc
| * c01c44559a jbd2: correct the printing of write_flags in jbd2_write_superblock()
| * 5378fd3c43 clk: rockchip: rk3128: Fix HCLK_OTG gate register
| * a14da83838 hwmon: (corsair-psu) Fix probe when built-in
| * 7945405205 drm/exynos: fix a wrong error checking
| * e02a2693ae drm/exynos: fix a potential error pointer dereference
| * 10250096f3 drm/amdgpu: Add NULL checks for function pointers
| * 8b98524821 nvme: introduce helper function to get ctrl state
| * c11fc224e5 ASoC: ops: add correct range check for limiting volume
| * 09c0f2814b ASoC: da7219: Support low DC impedance headset
| * 16d3a65eaa net/tg3: fix race condition in tg3_reset_task()
| * 9904379f19 nouveau/tu102: flush all pdbs on vmm flush
| * 7a3ff8a2bb ASoC: rt5650: add mutex to avoid the jack detection failure
| * ebf8d5ec4a ASoC: cs43130: Fix incorrect frame delay configuration
| * ec52e3e241 ASoC: cs43130: Fix the position of const qualifier
| * ce6cce0799 ASoC: Intel: Skylake: mem leak in skl register function
| * cb6b6ff7a7 ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16
| * 4ec0f3b3d8 ASoC: Intel: Skylake: Fix mem leak in few functions
| * 20e23f6b14 ASoC: wm8974: Correct boost mixer inputs
| * 05d753d74c nvme-core: check for too small lba shift
| * 9ad8b171c4 drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
| * f8eadbe713 debugfs: fix automount d_fsdata usage
| * 473fb46aa3 wifi: cfg80211: lock wiphy mutex for rfkill poll
| * 5d520ae3da mptcp: fix uninit-value in mptcp_incoming_options
| * 8d40e3514a ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro
| * 3dec0bd9c0 pinctrl: lochnagar: Don't build on MIPS
| * 32a6cfc676 f2fs: explicitly null-terminate the xattr list
* | 0e69322670 Merge branch 'android14-5.15' into branch 'android14-5.15-lts'
* | 2c882816b1 Revert "ipv6: remove max_size check inline with ipv4"
* |   a51283fc69 Merge "Merge 5.15.147 into android14-5.15-lts" into android14-5.15-lts
|\ \
| * | 5352f41951 Merge 5.15.147 into android14-5.15-lts
| |\|
| | * ddcaf49990 Linux 5.15.147
| | * 231752a0a0 net: usb: ax88179_178a: move priv to driver_priv
| | * d800d18ba1 net: usb: ax88179_178a: remove redundant init code
| | * 329197033b tracing/kprobes: Fix symbol counting logic by looking at modules as well
| | * ccb7eef5f2 kallsyms: Make module_kallsyms_on_each_symbol generally available
| | * ab3a3aadb3 netfilter: nf_tables: Reject tables of unsupported family
| | * 0eb556b238 perf inject: Fix GEN_ELF_TEXT_OFFSET for jit
| | * b8a5308fee ipv6: remove max_size check inline with ipv4
| | * ba5efd8544 net: tls, update curr on splice as well
| | * 06bb52d2ef mmc: sdhci-sprd: Fix eMMC init failure after hw reset
| | * 6722186854 mmc: core: Cancel delayed work before releasing host
| | * edaefc210e mmc: rpmb: fixes pause retune on all RPMB partitions.
| | * 41f20ac9bd mmc: meson-mx-sdhc: Fix initialization frozen issue
| | * 91432aebce mm: fix unmap_mapping_range high bits shift bug
| | * 5e44f5da12 i2c: core: Fix atomic xfer check for non-preempt config
| | * 1d5c1617e1 x86/kprobes: fix incorrect return address calculation in kprobe_emulate_call_indirect
| | * 10086ff58c firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards
| | * 660b3c3bc8 mm/memory-failure: check the mapcount of the precise page
| | * 80eb449f80 selftests: secretmem: floor the memory size to the multiple of page_size
| | * a58ae5ab71 net: Implement missing SO_TIMESTAMPING_NEW cmsg support
| | * 500c7f32ad bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters()
| | * fda00eb3cd asix: Add check for usbnet_get_endpoints
| | * 0817c1b215 octeontx2-af: Re-enable MAC TX in otx2_stop processing
| | * 20fce91b4f octeontx2-af: Always configure NIX TX link credits based on max frame size
| | * 6bbbcff3c7 octeontx2-af: Set NIX link credits based on max LMAC
| | * 6ef9a28e1b octeontx2-af: Don't enable Pause frames by default
| | * bc56ed720e net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues
| | * cfcf549014 igc: Fix hicredit calculation
| | * 6c853b5768 i40e: Restore VF MSI-X state during PCI reset
| | * 9400f854fa ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux
| | * e08b666e44 ASoC: meson: g12a-toacodec: Fix event generation
| | * 3a78a57764 ASoC: meson: g12a-tohdmitx: Validate written enum values
| | * f74281f241 ASoC: meson: g12a-toacodec: Validate written enum values
| | * 947db598ac i40e: fix use-after-free in i40e_aqc_add_filters()
| | * 975d6f66f2 net: Save and restore msg_namelen in sock_sendmsg
| | * b2869e7600 netfilter: nft_immediate: drop chain reference counter on error
| | * 51976846f2 net: bcmgenet: Fix FCS generation for fragmented skbuffs
| | * c748c358de sfc: fix a double-free bug in efx_probe_filters
| | * 5c161f2220 ARM: sun9i: smp: Fix array-index-out-of-bounds read in sunxi_mc_smp_init
| | * fd2e782923 net-timestamp: extend SOF_TIMESTAMPING_OPT_ID to HW timestamps
| | * dc5643abc1 can: raw: add support for SO_MARK
| | * 464fb49ca9 can: raw: add support for SO_TXTIME/SCM_TXTIME
| | * ba80ff7a85 net: Implement missing getsockopt(SO_TIMESTAMPING_NEW)
| | * 5636941e42 r8169: Fix PCI error on system resume
| | * 0ce9a244d3 net: sched: em_text: fix possible memory leak in em_text_destroy()
| | * c0b56aa9d1 mlxbf_gige: fix receive packet race condition
| | * 271567afd4 ASoC: fsl_rpmsg: Fix error handler with pm_runtime_enable
| | * 1867a90947 igc: Check VLAN EtherType mask
| | * f24370ddf7 igc: Check VLAN TCI mask
| | * 4ec5efdb90 igc: Report VLAN EtherType matching back to user
| | * b17f8024a5 i40e: Fix filter input checks to prevent config with invalid values
| | * def90597ef drm/i915/dp: Fix passing the correct DPCD_REV for drm_dp_set_phy_test_pattern
| | * a7b67635de octeontx2-af: Fix marking couple of structure as __packed
| | * 802af3c88a nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local
| | * 5d3e98ef12 drm/bridge: ti-sn65dsi86: Never store more than msg->size bytes in AUX xfer
| | * 2f8cefc8b6 wifi: iwlwifi: pcie: don't synchronize IRQs from IRQ
| | * 1f2f662c8b Revert "PCI/ASPM: Remove pcie_aspm_pm_state_change()"
| | * 200cecd6ff ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP ProBook 440 G6
| | * 90ab9a70f0 block: Don't invalidate pagecache for invalid falloc modes
| | * c496c35310 keys, dns: Fix missing size check of V1 server-list header
* | | 9f5237b3b3 ANDROID: db845c: Enable device tree overlay support
|/ /
* | 91bf8d14e7 Revert "device property: Add const qualifier to device_get_match_data() parameter"
* | 88efb6da37 Revert "spi: Introduce spi_get_device_match_data() helper"
* | 049200ae06 Revert "iio: imu: adis16475: add spi_device_id table"
* | 34a1ceac5a Revert "device property: Allow const parameter to dev_fwnode()"
* | 19757b5e8d Merge 5.15.146 into android14-5.15-lts
|\|
| * 26c690eff0 Linux 5.15.146
| * 13578b4ea4 bpf: Fix prog_array_map_poke_run map poke update
| * 339add0430 device property: Allow const parameter to dev_fwnode()
| * 4d9dcdb333 dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata()
| * a033bb82a1 ring-buffer: Fix slowpath of interrupted event
| * d10f7540c5 netfilter: nf_tables: skip set commit for deleted/destroyed sets
| * d739f2b6d8 ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
| * 53bed9b9f4 ring-buffer: Remove useless update to write_stamp in rb_try_to_discard()
| * 7fb264aede tracing: Fix blocked reader of snapshot buffer
| * c73cb01af1 ring-buffer: Fix wake ups when buffer_percent is set to 100
| * c0be52181f mm/filemap: avoid buffered read/write race to read inconsistent data
| * 2b16d960c7 Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
| * ded3cfdefe smb: client: fix OOB in smbCalcSize()
| * bfd18c0f57 smb: client: fix OOB in SMB2_query_info_init()
| * 1228354a98 iio: imu: adis16475: add spi_device_id table
| * bd1be85dbb spi: Introduce spi_get_device_match_data() helper
| * fcf6fce2f1 device property: Add const qualifier to device_get_match_data() parameter
| * d63fafd6cc net: usb: ax88179_178a: avoid failed operations when device is disconnected
| * f860413aa0 net: usb: ax88179_178a: wol optimizations
| * 2964a0de75 net: usb: ax88179_178a: clean up pm calls
| * 597305fd77 ethernet: constify references to netdev->dev_addr in drivers
| * 32d9a4ce52 usb: fotg210-hcd: delete an incorrect bounds test
| * d529cc2278 ARM: dts: Fix occasional boot hang for am3 usb
| * 8bf06286d7 ksmbd: fix wrong allocation size update in smb2_open()
| * 06208a04a7 ksmbd: avoid duplicate opinfo_put() call on error of smb21_lease_break_ack()
| * 9444c47d2c ksmbd: lazy v2 lease break on smb2_write()
| * f58afd8c70 ksmbd: send v2 lease break notification for directory
| * 86967f6965 ksmbd: downgrade RWH lease caching state to RH for directory
| * f7c8270be3 ksmbd: set v2 lease capability
| * 1bf476d8a8 ksmbd: set epoch in create context v2 lease
| * ac38551859 ksmbd: have a dependency on cifs ARC4
| * b54b9fbc16 fuse: share lookup state between submount and its parent
| * 1c811b7c83 x86/alternatives: Sync core before enabling interrupts
| * ccda72aa73 KVM: arm64: vgic: Force vcpu vgic teardown on vcpu destroy
| * 46bc250b08 lib/vsprintf: Fix %pfwf when current node refcount == 0
| * f9dc6e0a0b gpio: dwapb: mask/unmask IRQ when disable/enale it
| * e4d3534c68 bus: ti-sysc: Flush posted write only after srst_udelay
| * d47b2b6a08 tracing / synthetic: Disable events after testing in synth_event_gen_test_init()
| * da95f8b7bc scsi: core: Always send batch on reset or error handling command
| * 686774523f dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp
| * 7c25c5d727 net: ks8851: Fix TX stall caused by TX buffer overrun
| * 28855385bf net: rfkill: gpio: set GPIO direction
| * 4431cf7c33 net: 9p: avoid freeing uninit memory in p9pdu_vreadf
| * 85fd35ce5b Input: soc_button_array - add mapping for airplane mode button
| * a346cfc638 Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE
| * 916ca52a3e Bluetooth: L2CAP: Send reject on command corrupted request
| * 70db6466c0 Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent
| * 094ae245f7 USB: serial: option: add Quectel RM500Q R13 firmware support
| * d0adf8fe08 USB: serial: option: add Foxconn T99W265 with new baseline
| * a67f0b5bc2 USB: serial: option: add Quectel EG912Y module support
| * 0e285069fd USB: serial: ftdi_sio: update Actisense PIDs constant names
| * 433889344e wifi: cfg80211: fix certs build to not depend on file order
| * 69fab6dc37 wifi: cfg80211: Add my certificate
| * 498f212a77 ALSA: usb-audio: Increase delay in MOTU M quirk
| * 5a16bb60b8 iio: triggered-buffer: prevent possible freeing of wrong buffer
| * 3becd9bc5a iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma()
| * b9ccf18e31 iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table
| * f1d9a66e9c scsi: bnx2fc: Fix skb double free in bnx2fc_rcv()
| * 1e3effe67e Input: ipaq-micro-keys - add error handling for devm_kmemdup
| * 25c441a073 iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw
| * 3cbae23d48 interconnect: Treat xlate() returning NULL node as an error
| * f47e3f60f2 smb: client: fix OOB in smb2_query_reparse_point()
| * fd3951b798 smb: client: fix NULL deref in asn1_ber_decoder()
| * 6ded9038e4 drm/i915: Fix intel_atomic_setup_scalers() plane_state handling
| * f9954b18c4 drm/i915: Relocate intel_atomic_setup_scalers()
| * 2a4ef0d6e5 drm/i915/mtl: limit second scaler vertical scaling in ver >= 14
| * 6bbeb3960a ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE
| * c0c4e9767e gpiolib: cdev: add gpio_device locking wrapper around gpio_ioctl()
| * 8bdcedfdb0 pinctrl: at91-pio4: use dedicated lock class for IRQ
| * f0c52b790a i2c: aspeed: Handle the coalesced stop conditions with the start conditions.
| * c87ab6e306 ASoC: hdmi-codec: fix missing report for jack initial status
| * 98fb5eaade afs: Fix use-after-free due to get/remove race in volume tree
| * 57bf562950 afs: Use refcount_t rather than atomic_t
| * d1fe946cb5 afs: Fix overwriting of result of DNS query
| * 2552b32b0b keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
| * a1ab650f14 net: check dev->gso_max_size in gso_features_check()
| * 56eaa3ec31 afs: Fix dynamic root lookup DNS check
| * 3f85785bc4 afs: Fix the dynamic root's d_delete to always delete unused dentries
| * 3739e0a52d net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev()
| * c124a75b24 net: mana: select PAGE_POOL
| * c0e527c532 net/rose: fix races in rose_kill_by_device()
| * 66d2116880 ethernet: atheros: fix a memleak in atl1e_setup_ring_resources
| * 87255af408 net: sched: ife: fix potential use-after-free
| * 242670aab8 net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors
| * da2396b546 net/mlx5: Fix fw tracer first block check
| * b0873aa484 net/mlx5e: fix a potential double-free in fs_udp_create_groups
| * 4ddba57b65 net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list()
| * 5ae420f65a Revert "net/mlx5e: fix double free of encap_header"
| * 135fa6fac9 Revert "net/mlx5e: fix double free of encap_header in update funcs"
| * b387f06849 wifi: mac80211: mesh_plink: fix matches_local logic
| * 6558f4aa20 wifi: iwlwifi: pcie: add another missing bh-disable for rxq->lock
| * 183ea95f73 s390/vx: fix save/restore of fpu kernel context
| * 58f3fc8333 reset: Fix crash when freeing non-existent optional resets
| * 52c69a070b ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init
| * d3ffbbb0bc ARM: dts: dra7: Fix DRA7 L3 NoC node register size
* | 3a3430e518 Merge 5.15.145 into android14-5.15-lts
|\|
| * d93fa2c788 Linux 5.15.145
| * ee41f667aa kasan: disable kasan_non_canonical_hook() for HW tags
| * f30f893143 tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols
| * 7aa33c99b5 Revert "drm/bridge: lt9611uxc: Switch to devm MIPI-DSI helpers"
| * 4a8350a0ea Revert "drm/bridge: lt9611uxc: Register and attach our DSI device at probe"
| * e21817ce16 Revert "drm/bridge: lt9611uxc: fix the race in the error path"
| * 811b5eaee7 ksmbd: don't update ->op_state as OPLOCK_STATE_NONE on error
| * bd47f9c8b5 ksmbd: move setting SMB2_FLAGS_ASYNC_COMMAND and AsyncId
| * 5e1f31378a ksmbd: release interim response after sending status pending response
| * c21d044508 ksmbd: move oplock handling after unlock parent dir
| * 772d81aeec ksmbd: separately allocate ci per dentry
| * 8ed1118da8 ksmbd: fix possible deadlock in smb2_open
| * ae3356cbe9 ksmbd: prevent memory leak on error return
| * 8dc9eb7d35 ksmbd: handle malformed smb1 message
| * 1f50c418d4 ksmbd: fix kernel-doc comment of ksmbd_vfs_kern_path_locked()
| * 3fecda5d85 ksmbd: no need to wait for binded connection termination at logoff
| * 841bcade09 ksmbd: add support for surrogate pair conversion
| * 0eaeb8aec4 ksmbd: fix missing RDMA-capable flag for IPoIB device in ksmbd_rdma_capable_netdev()
| * 20b4f6bd4c ksmbd: fix recursive locking in vfs helpers
| * f30a2ff715 ksmbd: fix kernel-doc comment of ksmbd_vfs_setxattr()
| * df79244f73 ksmbd: reorganize ksmbd_iov_pin_rsp()
| * 845837fbfe ksmbd: Remove unused field in ksmbd_user struct
| * fab0175b7f ksmbd: fix potential double free on smb2_read_pipe() error path
| * ef435dec8a ksmbd: fix Null pointer dereferences in ksmbd_update_fstate()
| * 4b9b7ea1ff ksmbd: fix wrong error response status by using set_smb2_rsp_status()
| * dd45db4d9b ksmbd: fix race condition between tree conn lookup and disconnect
| * 0901be8dc6 ksmbd: fix race condition from parallel smb2 lock requests
| * 50e13932ba ksmbd: fix race condition from parallel smb2 logoff requests
| * f99d5d1d2a ksmbd: fix race condition with fp
| * c77fd3e25a ksmbd: fix race condition between session lookup and expire
| * b9a3e45496 ksmbd: check iov vector index in ksmbd_conn_write()
| * 01df133b1a ksmbd: return invalid parameter error response if smb2 request is invalid
| * 4a67467f11 ksmbd: fix passing freed memory 'aux_payload_buf'
| * fbed0adfe5 ksmbd: remove unneeded mark_inode_dirty in set_info_sec()
| * a9128c4134 ksmbd: remove experimental warning
| * 6997fa65bf ksmbd: add missing calling smb2_set_err_rsp() on error
| * bd554ed4fd ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()
| * 7019440463 ksmbd: Fix one kernel-doc comment
| * c5aa74449a ksmbd: reduce descriptor size if remaining bytes is less than request size
| * e12b092416 ksmbd: fix `force create mode' and `force directory mode'
| * 6f0207218c ksmbd: fix wrong interim response on compound
| * f2283680a8 ksmbd: add support for read compound
| * d7ad0ac5a8 ksmbd: switch to use kmemdup_nul() helper
| * 5c0df9d30c ksmbd: fix out of bounds in init_smb2_rsp_hdr()
| * 017d85c94f ksmbd: validate session id and tree id in compound request
| * 4a027b9651 ksmbd: check if a mount point is crossed during path lookup
| * cf63b94fec ksmbd: Fix unsigned expression compared with zero
| * 5f36e22910 ksmbd: Replace one-element array with flexible-array member
| * d9902ad14f ksmbd: Use struct_size() helper in ksmbd_negotiate_smb_dialect()
| * 97f5c1e308 ksmbd: add missing compound request handing in some commands
| * 6763921847 ksmbd: fix out of bounds read in smb2_sess_setup
| * d91ba80185 ksmbd: Replace the ternary conditional operator with min()
| * 2222ada095 ksmbd: use kvzalloc instead of kvmalloc
| * 638043bef9 ksmbd: Change the return value of ksmbd_vfs_query_maximal_access to void
| * 7585898ddf ksmbd: return a literal instead of 'err' in ksmbd_vfs_kern_path_locked()
| * 4910a79a5f ksmbd: use kzalloc() instead of __GFP_ZERO
| * b657622862 ksmbd: remove unused ksmbd_tree_conn_share function
| * ce95f7d2dc ksmbd: add mnt_want_write to ksmbd vfs functions
| * 0d1a3f97ef ksmbd: validate smb request protocol id
| * df3a4518ae ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop
| * ae33f07c87 ksmbd: fix posix_acls and acls dereferencing possible ERR_PTR()
| * 55ceeb4e1c ksmbd: fix out-of-bound read in parse_lease_state()
| * 4adb4fbd74 ksmbd: fix out-of-bound read in deassemble_neg_contexts()
| * 049ed0f953 ksmbd: call putname after using the last component
| * b423ddab61 ksmbd: fix UAF issue from opinfo->conn
| * 19b2b9af31 ksmbd: fix multiple out-of-bounds read during context decoding
| * 61a306c1cc ksmbd: fix uninitialized pointer read in smb2_create_link()
| * ea799dd275 ksmbd: fix uninitialized pointer read in ksmbd_vfs_rename()
| * b36295c17f ksmbd: fix racy issue under cocurrent smb2 tree disconnect
| * ae06b798f7 ksmbd: fix racy issue from smb2 close and logoff with multichannel
| * dff87902d9 ksmbd: block asynchronous requests when making a delay on session setup
| * a6a9601ba9 ksmbd: destroy expired sessions
| * 708c304b58 ksmbd: fix racy issue from session setup and logoff
| * 019aae488d ksmbd: fix racy issue from using ->d_parent and ->d_name
| * b31e1ef301 fs: introduce lock_rename_child() helper
| * 380a0fe8bd ksmbd: remove unused compression negotiate ctx packing
| * 0dbfcc34ef ksmbd: avoid duplicate negotiate ctx offset increments
| * 2ca23947df ksmbd: set NegotiateContextCount once instead of every inc
| * 39f5b4b313 ksmbd: avoid out of bounds access in decode_preauth_ctxt()
| * 921536046b ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
| * 9494242c8e ksmbd: delete asynchronous work from list
| * 427caadf90 ksmbd: remove unused is_char_allowed function
| * 289b46fd11 ksmbd: fix wrong signingkey creation when encryption is AES256
| * bfe8372ef2 ksmbd: fix possible memory leak in smb2_lock()
| * d625db885a ksmbd: Fix parameter name and comment mismatch
| * 0d3f06fd65 ksmbd: Fix spelling mistake "excceed" -> "exceeded"
| * 1f1aca1d50 ksmbd: update Kconfig to note Kerberos support and fix indentation
| * a35ebf6589 ksmbd: Remove duplicated codes
| * b15734ec29 ksmbd: fix typo, syncronous->synchronous
| * 1f485b54d0 ksmbd: Implements sess->rpc_handle_list as xarray
| * b1caecbf34 ksmbd: Implements sess->ksmbd_chann_list as xarray
| * d7f088dc27 ksmbd: send proper error response in smb2_tree_connect()
| * bcab5c8105 ksmbd: Convert to use sysfs_emit()/sysfs_emit_at() APIs
| * 46c517bc0a ksmbd: Fix resource leak in smb2_lock()
| * 9ea6b43d8a ksmbd: use F_SETLK when unlocking a file
| * 8263acd267 ksmbd: set SMB2_SESSION_FLAG_ENCRYPT_DATA when enforcing data encryption for this share
| * 64b4d72c59 ksmbd: replace one-element arrays with flexible-array members
| * 2bdd995f13 ksmbd: validate share name from share config response
| * ef97ccd0fc ksmbd: call ib_drain_qp when disconnected
| * b3e852bea8 ksmbd: make utf-8 file name comparison work in __caseless_lookup()
| * 131e308593 ksmbd: hide socket error message when ipv6 config is disable
| * 507cb106c3 ksmbd: reduce server smbdirect max send/receive segment sizes
| * fe4d09792b ksmbd: decrease the number of SMB3 smbdirect server SGEs
| * d5a3b1024a ksmbd: set NTLMSSP_NEGOTIATE_SEAL flag to challenge blob
| * 4d796ff899 ksmbd: fix encryption failure issue for session logoff response
| * e925de7def ksmbd: fill sids in SMB_FIND_FILE_POSIX_INFO response
| * 95b72edca5 ksmbd: set file permission mode to match Samba server posix extension behavior
| * 813ef06ea2 ksmbd: change security id to the one samba used for posix extension
| * 62e6846ee3 ksmbd: casefold utf-8 share names and fix ascii lowercase conversion
| * 43e2963be1 ksmbd: remove generic_fillattr use in smb2_open()
| * aa77fc8182 ksmbd: constify struct path
| * b79a9f991e ksmbd: don't open-code %pD
| * d6686d5791 ksmbd: don't open-code file_path()
| * a7ddc4951f ksmbd: remove unnecessary generic_fillattr in smb2_open
| * ebb8c61657 ksmbd: request update to stale share config
| * c7aff8b8ff ksmbd: use wait_event instead of schedule_timeout()
| * 1f82ecbc7f ksmbd: remove unused ksmbd_share_configs_cleanup function
| * 8d0f823193 ksmbd: remove duplicate flag set in smb2_write
| * d4b374ff2a ksmbd: smbd: Remove useless license text when SPDX-License-Identifier is already used
| * ff403dbe43 ksmbd: smbd: relax the count of sges required
| * 9d609b52f9 ksmbd: smbd: fix connection dropped issue
| * 32af379e13 ksmbd: Fix some kernel-doc comments
| * 81602ee1c4 ksmbd: fix wrong smbd max read/write size check
| * 918a690d8a ksmbd: smbd: handle multiple Buffer descriptors
| * 673c186f81 ksmbd: smbd: change the return value of get_sg_list
| * 30bd0df6e6 ksmbd: smbd: simplify tracking pending packets
| * f17ed7b338 ksmbd: smbd: introduce read/write credits for RDMA read/write
| * 982fcdec10 ksmbd: smbd: change prototypes of RDMA read/write related functions
| * 6bb4399303 ksmbd: validate length in smb2_write()
| * 8e32e15840 ksmbd: remove filename in ksmbd_file
| * e9a3251246 smb3: fix ksmbd bigendian bug in oplock break, and move its struct to smbfs_common
| * dc232946d1 ksmbd: replace usage of found with dedicated list iterator variable
| * a5213868c6 ksmbd: Remove a redundant zeroing of memory
| * 7ee6f9ba97 ksmbd: shorten experimental warning on loading the module
| * a5a8c9133d ksmbd: store fids as opaque u64 integers
| * 170598b6f3 ksmbd: use netif_is_bridge_port
| * c5049d2d73 ksmbd: add support for key exchange
| * 09b4c60383 ksmbd: smbd: validate buffer descriptor structures
| * 858b964451 ksmbd: smbd: fix missing client's memory region invalidation
| * 51d0b879d6 ksmbd: add smb-direct shutdown
| * d15077ad35 ksmbd: smbd: change the default maximum read/write, receive size
| * ba7c3ff905 ksmbd: smbd: create MR pool
| * 97b3a08892 ksmbd: smbd: call rdma_accept() under CM handler
| * 8a49ab3e59 ksmbd: set 445 port to smbdirect port by default
| * 178ecc3257 ksmbd: register ksmbd ib client with ib_register_client()
| * 91d7307569 ksmbd: Fix smb2_get_name() kernel-doc comment
| * dd56eb361f ksmbd: Delete an invalid argument description in smb2_populate_readdir_entry()
| * 36167446ce ksmbd: Fix smb2_set_info_file() kernel-doc comment
| * 2fa426c9d7 ksmbd: Fix buffer_check_err() kernel-doc comment
| * e5b04973e7 ksmbd: set both ipv4 and ipv6 in FSCTL_QUERY_NETWORK_INTERFACE_INFO
| * a63256708a ksmbd: Remove unused fields from ksmbd_file struct definition
| * de203cdf1e ksmbd: Remove unused parameter from smb2_get_name()
| * 82ae5fe3e6 ksmbd: use oid registry functions to decode OIDs
| * 7833bd31bc ksmbd: change LeaseKey data type to u8 array
| * 199b8b5ceb ksmbd: remove smb2_buf_length in smb2_transform_hdr
| * e0c5842057 ksmbd: remove smb2_buf_length in smb2_hdr
| * 6cd90c01b0 ksmbd: remove md4 leftovers
| * 84af59bcab ksmbd: Remove redundant 'flush_workqueue()' calls
| * a33bb607a1 ksmdb: use cmd helper variable in smb2_get_ksmbd_tcon()
| * 5fed9cbbaf ksmbd: use ksmbd_req_buf_next() in ksmbd_verify_smb_message()
* 2773ab8870 Reapply "kasan: print the original fault addr when access invalid shadow"

Change-Id: I54bd429db3190962e1a0b26565054a0c428185c4
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
2024-03-28 10:29:58 +00:00
Will Deacon
ec86765bae ANDROID: KVM: arm64: Fix TLB invalidation when coalescing into a block
Wnen coalescing a table into a block, the break-before-make sequence
must invalidate the whole range of addresses translated by the entry in
order to avoid the possibility of a TLB conflict.

Fix the coalescing post-table walker so that the whole range of the old
table is invalidated, rather than just the first address, since a
refcount of 1 on the child page is not sufficient to ensure the absence
of any valid mappings.

Cc: Sebastian Ene <sebastianene@google.com>
Reported-by: Mostafa Saleh <smostafa@google.com>
Fixes: 6b38102053 ("ANDROID: KVM: arm64: Coalesce host stage2 entries on ownership reclaim")
Bug: 331232642
Signed-off-by: Will Deacon <willdeacon@google.com>
Change-Id: I4c94f552e4385599ad88b1be50b69ffbafa64a9b
2024-03-25 19:05:42 +00:00
Vincent Donnefort
5854f4c2af ANDROID: KVM: arm64: Fix missing trace event for nVHE dyn HVCs
The hyp event host_hcall was missing when a custom HVC runs.

Bug: 278749606
Bug: 244543039
Bug: 244373730
Signed-off-by: Vincent Donnefort <vdonnefort@google.com>
(cherry picked from https://android-review.googlesource.com/q/commit:a1836ffbea9fcb70fa9d49af7382b9343285036f)
Merged-In: I760cab4fbd36a13ad262842880d9ec484f23fd22
Change-Id: I760cab4fbd36a13ad262842880d9ec484f23fd22
2024-03-22 11:52:35 +00:00
Pablo Neira Ayuso
865e6d9df1 UPSTREAM: netfilter: nf_tables: disallow timeout for anonymous sets
commit e26d3009ef upstream.

Never used from userspace, disallow these parameters.

Bug: 329205828
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit b7be6c737a)
Signed-off-by: Lee Jones <joneslee@google.com>
Change-Id: I3d8358a6dee3246e3ac56697dbb2be8fdc5f716f
2024-03-21 15:02:40 +00:00
Ard Biesheuvel
537e133918 UPSTREAM: arm64: Apply dynamic shadow call stack patching in two passes
Code patching for the dynamically enabled shadow call stack comes down
to finding PACIASP and AUTIASP instructions -which behave as NOPs on
cores that do not implement pointer authentication- and converting them
into shadow call stack pushes and pops, respectively.

Due to past bad experiences with the highly complex and overengineered
DWARF standard that describes the unwind metadata that we are using to
locate these instructions, let's make this patching logic a little bit
more robust so that any issues with the unwind metadata detected at boot
time can de dealt with gracefully.

The DWARF annotations that are used for this are emitted at function
granularity, and due to the fact that the instructions we are patching
will simply behave as NOPs if left unpatched, we can abort on errors as
long as we don't leave any functions in a half-patched state.

So do a dry run of each FDE frame (covering a single function) before
performing the actual patching, and give up if the DWARF metadata cannot
be understood.

Change-Id: Iea167b37a4d84e2b444189c7af939cf58d6dc9cf
Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
Acked-by: Will Deacon <will@kernel.org>
Reviewed-by: Sami Tolvanen <samitolvanen@google.com>
Link: https://lore.kernel.org/r/20221213142849.1629026-1-ardb@kernel.org
Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
(cherry picked from commit 54c968bec3)
Signed-off-by: Mark-PK Tsai <mark-pk.tsai@mediatek.com>
2024-03-15 21:59:42 +00:00
Lokesh Gidra
96305e30e9 ANDROID: userfaultfd: abort uffdio ops if mmap_lock is contended
Check if the mmap_lock is contended when looping over the pages that
are requested to be filled. When it is observed, we rely on the already
existing mechanism to return bytes copied/filled and -EAGAIN as error.

This helps by avoiding contention of mmap_lock for long running
userfaultfd operations. The userspace can perform other tasks before
retrying the operation for the remaining pages.

Bug: 320478828
Change-Id: I6d485fd03c96a826956ee3962e58058be3cf81c1
Signed-off-by: Lokesh Gidra <lokeshgidra@google.com>
2024-03-15 18:59:03 +00:00
Lokesh Gidra
3673533a09 ANDROID: userfaultfd: add MMAP_TRYLOCK mode for COPY/ZEROPAGE
In case mmap_lock is contended, it is possible that userspace can spend
time performing other tasks rather than waiting in uninterruptible-sleep
state for the lock to become available. Even if no other task is
available, it is better to yield or sleep rather than adding contention
to already contended lock.

We introduce MMAP_TRYLOCK mode so that when possible, userspace can
request to use mmap_read_trylock(), returning -EAGAIN if and when it
fails.

Bug: 320478828
Change-Id: I2d196fd317e054af03dbd35ac1b0c7634cb370dc
Signed-off-by: Lokesh Gidra <lokeshgidra@google.com>
2024-03-15 18:59:03 +00:00
Suren Baghdasaryan
3fd32dc171 ANDROID: fix isolate_migratepages_range return value
When [1] was cherry-picked from 5.10 into 5.15 kernel, it modified
the variable used to store isolate_migratepages_block() return value
like it was done in 5.10. However in 5.15 the variable used to store
the return value is different. As a result, failure to isolate a block
is not reported back to the caller. Fix by restoring the original
code and using the right variable to store the return value.

[1] ANDROID: mm: do not allow file-backed pages from CMA

Bug: 326556976
Change-Id: I06900eb43de356584ff63acfe6e994f11610b494
Signed-off-by: Suren Baghdasaryan <surenb@google.com>
2024-03-14 22:54:46 +00:00
Bart Van Assche
483395b445 Revert "ANDROID: Add CONFIG_BLK_DEV_NULL_BLK=m to gki_defconfig"
This reverts commit d217ccf7c8.

Debug drivers should not be included in the GKI kernel configuration.
Hence this revert.

Bug: 326456248
Change-Id: I18db9d07ad49b22f09b6b3414d39e6ed0a728d73
Signed-off-by: Bart Van Assche <bvanassche@google.com>
2024-03-14 00:27:10 +00:00
Eric Biggers
7b301c7079 ANDROID: fips140 - fix integrity check by unapplying dynamic SCS
Since the kernel now has dynamic Shadow Call Stack (SCS) enabled, on
CPUs that don't support Pointer Authentication Codes (PAC) the kernel
runtime-patches paciasp and autiasp instructions into instructions that
push and pop from the shadow call stack.  This includes instructions in
loaded modules.  This broke the fips140 integrity check which needs to
know how to undo all text changes made by the module loader in order to
re-create the original text.

Fix this by updating fips140.ko to undo the dynamic SCS patching.

Bug: 188620248
Change-Id: I992bcd6c34b3340c6489b40a125715e1304cb445
Signed-off-by: Eric Biggers <ebiggers@google.com>
2024-03-14 00:07:14 +00:00
Eric Biggers
b1f8c25026 ANDROID: fips140 - add option for debugging the integrity check
There now have been two times where I've had to debug the fips140
integrity check failing due to a new type of runtime code patching.
Debugging such issues requires dumping the text and rodata actually used
for the integrity check and comparing them with the originals.  Add a
kconfig option to make this easier.  Similar to
CRYPTO_FIPS140_MOD_EVAL_TESTING, the production build won't use this.

Bug: 188620248
Change-Id: I392de466ff31f999d65997dbc610e23e9eeca49d
Signed-off-by: Eric Biggers <ebiggers@google.com>
2024-03-14 00:07:14 +00:00
Daniel Rosenberg
1225d7ed6c ANDROID: fuse-bpf: Fix readdir for getdents
If you call getdents with a buffer size less than a page,
entries can be skipped. This correctly sets the point to continue from.

Bug: 325550828
Test: getdents with low buffer size
Change-Id: I324e7e815d31742bd4e2d70c5d07c2b09a67a7c2
Signed-off-by: Daniel Rosenberg <drosen@google.com>
2024-03-13 21:18:33 +00:00
Jaegeuk Kim
37b83a89de BACKPORT: f2fs: split initial and dynamic conditions for extent_cache
Let's allocate the extent_cache tree without dynamic conditions to avoid a
missing condition causing a panic as below.

 # create a file w/ a compressed flag
 # disable the compression
 # panic while updating extent_cache

F2FS-fs (dm-64): Swapfile: last extent is not aligned to section
F2FS-fs (dm-64): Swapfile (3) is not align to section: 1) creat(), 2) ioctl(F2FS_IOC_SET_PIN_FILE), 3) fallocate(2097152 * N)
Adding 124996k swap on ./swap-file.  Priority:0 extents:2 across:17179494468k
==================================================================
BUG: KASAN: null-ptr-deref in instrument_atomic_read_write out/common/include/linux/instrumented.h:101 [inline]
BUG: KASAN: null-ptr-deref in atomic_try_cmpxchg_acquire out/common/include/asm-generic/atomic-instrumented.h:705 [inline]
BUG: KASAN: null-ptr-deref in queued_write_lock out/common/include/asm-generic/qrwlock.h:92 [inline]
BUG: KASAN: null-ptr-deref in __raw_write_lock out/common/include/linux/rwlock_api_smp.h:211 [inline]
BUG: KASAN: null-ptr-deref in _raw_write_lock+0x5a/0x110 out/common/kernel/locking/spinlock.c:295
Write of size 4 at addr 0000000000000030 by task syz-executor154/3327

CPU: 0 PID: 3327 Comm: syz-executor154 Tainted: G           O      5.10.185 #1
Hardware name: emulation qemu-x86/qemu-x86, BIOS 2023.01-21885-gb3cc1cd24d 01/01/2023
Call Trace:
 __dump_stack out/common/lib/dump_stack.c:77 [inline]
 dump_stack_lvl+0x17e/0x1c4 out/common/lib/dump_stack.c:118
 __kasan_report+0x16c/0x260 out/common/mm/kasan/report.c:415
 kasan_report+0x51/0x70 out/common/mm/kasan/report.c:428
 kasan_check_range+0x2f3/0x340 out/common/mm/kasan/generic.c:186
 __kasan_check_write+0x14/0x20 out/common/mm/kasan/shadow.c:37
 instrument_atomic_read_write out/common/include/linux/instrumented.h:101 [inline]
 atomic_try_cmpxchg_acquire out/common/include/asm-generic/atomic-instrumented.h:705 [inline]
 queued_write_lock out/common/include/asm-generic/qrwlock.h:92 [inline]
 __raw_write_lock out/common/include/linux/rwlock_api_smp.h:211 [inline]
 _raw_write_lock+0x5a/0x110 out/common/kernel/locking/spinlock.c:295
 __drop_extent_tree+0xdf/0x2f0 out/common/fs/f2fs/extent_cache.c:1155
 f2fs_drop_extent_tree+0x17/0x30 out/common/fs/f2fs/extent_cache.c:1172
 f2fs_insert_range out/common/fs/f2fs/file.c:1600 [inline]
 f2fs_fallocate+0x19fd/0x1f40 out/common/fs/f2fs/file.c:1764
 vfs_fallocate+0x514/0x9b0 out/common/fs/open.c:310
 ksys_fallocate out/common/fs/open.c:333 [inline]
 __do_sys_fallocate out/common/fs/open.c:341 [inline]
 __se_sys_fallocate out/common/fs/open.c:339 [inline]
 __x64_sys_fallocate+0xb8/0x100 out/common/fs/open.c:339
 do_syscall_64+0x35/0x50 out/common/arch/x86/entry/common.c:46

Bug: 323236756
Cc: stable@vger.kernel.org
Fixes: 72840cccc0 ("f2fs: allocate the extent_cache by default")
Reported-and-tested-by: syzbot+d342e330a37b48c094b7@syzkaller.appspotmail.com
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
(cherry picked from commit f803982190f0265fd36cf84670aa6daefc2b0768)
Change-Id: I584b9e37a4790baf5f6613778365b90f128bb765
2024-03-11 18:12:38 -07:00
RD Babiera
ac4797cea5 UPSTREAM: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
The DisplayPort driver's sysfs nodes may be present to the userspace before
typec_altmode_set_drvdata() completes in dp_altmode_probe. This means that
a sysfs read can trigger a NULL pointer error by deferencing dp->hpd in
hpd_show or dp->lock in pin_assignment_show, as dev_get_drvdata() returns
NULL in those cases.

Remove manual sysfs node creation in favor of adding attribute group as
default for devices bound to the driver. The ATTRIBUTE_GROUPS() macro is
not used here otherwise the path to the sysfs nodes is no longer compliant
with the ABI.

Fixes: 0e3bb7d689 ("usb: typec: Add driver for DisplayPort alternate mode")
Cc: stable@vger.kernel.org
Signed-off-by: RD Babiera <rdbabiera@google.com>
Link: https://lore.kernel.org/r/20240229001101.3889432-2-rdbabiera@google.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

Bug: 313517804
(cherry picked from commit 165376f6b23e9a779850e750fb2eb06622e5a531)
Change-Id: I13aaa956ff2b37e29eb0d90bbac0b7e1ac969b80
Signed-off-by: RD Babiera <rdbabiera@google.com>
2024-03-11 18:04:32 +00:00
lipeifeng
5aed5c3435 ANDROID: uid_sys_stat: fix data-error of cputime and io
'commit b6115e14010 ("ANDROID: uid_sys_stat: split the global
lock uid_lock to the fine-grained locks for each hlist in hash_table.")'

The above patch split the global lock to per-uid lock to reduce lock
competition. But result in data-error from uid_cputime_show and uid_io_show in
some cases.

E.g, if thread1 and thread2 read /proc/uid_cputime/show_uid_stat at the same time,
thread2 maybe operate in partA and zero active_stime and active_utime of uid_entry
when thread1 is between partB and partC, which would cause thread1 show the error data.
static int uid_cputime_show(struct seq_file *m, void *v)
{
	...
	/*partA*/
	for (bkt = 0, uid_entry = NULL; uid_entry == NULL &&
		bkt < HASH_SIZE(hash_table); bkt++) {
		lock_uid_by_bkt(bkt);
		hlist_for_each_entry(uid_entry, &hash_table[bkt], hash) {
			uid_entry->active_stime = 0;
			uid_entry->active_utime = 0;
		}
		unlock_uid_by_bkt(bkt);
	}

	rcu_read_lock();
	/* partB */
	do_each_thread(temp, task) {
		...
		lock_uid(uid);
		if (!(task->flags & PF_EXITING)) {
			task_cputime_adjusted(task, &utime, &stime);
			uid_entry->active_utime += utime;
			uid_entry->active_stime += stime;
		}
		unlock_uid(uid);
	} while_each_thread(temp, task);
	rcu_read_unlock();

	for (bkt = 0, uid_entry = NULL; uid_entry == NULL &&
		bkt < HASH_SIZE(hash_table); bkt++) {
		lock_uid_by_bkt(bkt);
		hlist_for_each_entry(uid_entry, &hash_table[bkt], hash) {
			u64 total_utime = uid_entry->utime +
						uid_entry->active_utime;
			u64 total_stime = uid_entry->stime +
						uid_entry->active_stime;
			/* partC */
			seq_printf(m, "%d: %llu %llu\n", uid_entry->uid,
				ktime_to_us(total_utime), ktime_to_us(total_stime));
		}
		unlock_uid_by_bkt(bkt);
	}

The patch ensures that the calculation and seq_printf of each uid_entry is within
the uid_lock range, in order to accurate data.

Bug: 278138377

Change-Id: Iaa2ccd95c4b4b333f04b2ba18d7699d94017394e
Signed-off-by: lipeifeng <lipeifeng@oppo.com>
(cherry picked from commit ea35d2bd073214e84be242287a2e91741c6588ed)
2024-03-11 16:47:39 +00:00
RD Babiera
c3b70e94f1 UPSTREAM: usb: typec: class: fix typec_altmode_put_partner to put plugs
usb: typec: class: fix typec_altmode_put_partner to put plugs
When typec_altmode_put_partner is called by a plug altmode upon release,
the port altmode the plug belongs to will not remove its reference to the
plug. The check to see if the altmode being released is a plug evaluates
against the released altmode's partner instead of the calling altmode, so
change adev in typec_altmode_put_partner to properly refer to the altmode
being released.

Because typec_altmode_set_partner calls get_device() on the port altmode,
add partner_adev that points to the port altmode in typec_put_partner to
call put_device() on. typec_altmode_set_partner is not called for port
altmodes, so add a check in typec_altmode_release to prevent
typec_altmode_put_partner() calls on port altmode release.

Fixes: 8a37d87d72 ("usb: typec: Bus type for alternate modes")
Cc:  <stable@vger.kernel.org>
Co-developed-by: Christian A. Ehrhardt <lk@c--e.de>
Signed-off-by: Christian A. Ehrhardt <lk@c--e.de>
Signed-off-by: RD Babiera <rdbabiera@google.com>
Tested-by: Christian A. Ehrhardt <lk@c--e.de>
Acked-by: Heikki Krogerus <heikki.krogerus@linux.intel.com>
Link: https://lore.kernel.org/r/20240103181754.2492492-2-rdbabiera@google.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

Bug: 324496488
(cherry picked from commit 5962ded777d689cd8bf04454273e32228d7fb71f)
Signed-off-by: RD Babiera <rdbabiera@google.com>
(cherry picked from https://android-review.googlesource.com/q/commit:fe6e5059f610845f3373a734d228148a660ca44e)
Merged-In: I688a333753b2e8069c0437a6d9dea30bf029c92c
Change-Id: I688a333753b2e8069c0437a6d9dea30bf029c92c
2024-03-11 16:10:41 +00:00
RD Babiera
282bfc6c30 UPSTREAM: Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs"
This reverts commit b17b7fe6dd5c6ff74b38b0758ca799cdbb79e26e.

That commit messed up the reference counting, so it needs to
be rethought.

Fixes: b17b7fe6dd5c ("usb: typec: class: fix typec_altmode_put_partner to put plugs")
Cc: stable@vger.kernel.org
Cc: RD Babiera <rdbabiera@google.com>
Reported-by: Chris Bainbridge <chris.bainbridge@gmail.com>
Closes: https://lore.kernel.org/lkml/CAP-bSRb3SXpgo_BEdqZB-p1K5625fMegRZ17ZkPE1J8ZYgEHDg@mail.gmail.com/
Signed-off-by: Heikki Krogerus <heikki.krogerus@linux.intel.com>

Bug: 324496488
(cherry picked from commit 9c6b789e954fae73c548f39332bcc56bdf0d4373)
Signed-off-by: RD Babiera <rdbabiera@google.com>
(cherry picked from https://android-review.googlesource.com/q/commit:27167a6e39a6894d905ea97aece1aa9f0120f452)
Merged-In: I2755a5e44dd1970d60e5d996dd7fc6d88f79684a
Change-Id: I2755a5e44dd1970d60e5d996dd7fc6d88f79684a
2024-03-11 16:10:41 +00:00
Ben Fennema
2390d58862 ANDROID: GKI: Update the ABI symbol list
Update the pixel_watch symbol list.

3 function symbol(s) added
  'void gic_resume()'
  'ssize_t mipi_dsi_dcs_write(struct mipi_dsi_device*, u8, const void*, size_t)'
  'int snd_soc_get_dai_name(const struct of_phandle_args*, const char**)'

Bug: 327650099
Change-Id: I7a7efaa91f1a37f44d3e950af4ec9947fb349acc
Signed-off-by: Ben Fennema <fennema@google.com>
2024-03-06 01:08:23 +00:00
Lokesh Gidra
0d0784d6b2 ANDROID: Update ABI for userfaultfd_ctx
The struct is not public so shouldn't cause real ABI breakage.

Bug: 320478828
Bug: 324640390
Change-Id: I724ca4c00bae09bc311d6495383cfd3a77592d7a
Signed-off-by: Lokesh Gidra <lokeshgidra@google.com>
2024-03-04 14:20:49 -08:00
Lokesh Gidra
ee9964b308 ANDROID: userfaultfd: allow SPF for UFFD_FEATURE_SIGBUS on private+anon
Currently we bail out of speculative page fault when we detect that the
fault address is in a userfaultfd registered vma. However, if userfaultfd
is being used with UFFD_FEATURE_SIGBUS feature, then handle_userfault()
doesn't do much and is easiest to handle with SPF. This patch lets
MISSING userfaultfs on private anonymous mappings be allowed with SPF if
UFFD_FEATURE_SIGBUS is used.

With this patch we get >99% success rate for userfaults caused during
userfaultfd GC's compaction phase. This translates into eliminating
uninterruptible sleep time in do_page_fault() due to userfaults.

ABI breakage note: 'userfaultfd_ctx' struct, which has been modified in
this CL, is private and hence cannot cause real breakage.

Bug: 324640390
Bug: 320478828
Signed-off-by: Lokesh Gidra <lokeshgidra@google.com>
Change-Id: Ic7fde0fde03602b35179bc0cf891ddbbc434190f
2024-03-04 14:20:00 -08:00
Eric Biggers
9cef46f39e ANDROID: remove LTO check from build.config.gki.aarch64.fips140
Don't check the "LTO" variable in build.config.gki.aarch64.fips140,
since fips140.ko no longer depends on LTO.  Also, Kleaf doesn't set the
"LTO" variable anyway; it was specific to build.sh.

Bug: 188620248
Change-Id: I213faa4c8c1a23898c08da121b0a5dc602b7218a
Signed-off-by: Eric Biggers <ebiggers@google.com>
2024-03-04 11:19:36 +00:00
Greg Kroah-Hartman
b74b4cbe62 Revert "interconnect: Fix locking for runpm vs reclaim"
This reverts commit 9be2957f01 which is
commit af42269c35 upstream.

It is reported to cause crashes, so revert it for now.

Bug: 326555421
Change-Id: I2fb3626c306e0444f4e0eb42a95488e688942ba9
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
2024-02-29 07:19:33 +00:00
Greg Kroah-Hartman
f115661832 Revert "interconnect: Teach lockdep about icc_bw_lock order"
This reverts commit e3a29b80e9 which is
commit 1361917030 upstream.

It is reported to cause crashes, so revert it for now.

Bug: 326555421
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: I3dd7744a9b706a959cbed3a793be668147dfcb9a
2024-02-28 15:44:43 +00:00
Vilas Bhat
d96725ec1a BACKPORT: FROMGIT: PM: runtime: add tracepoint for runtime_status changes
Existing runtime PM ftrace events (`rpm_suspend`, `rpm_resume`,
`rpm_return_int`) offer limited visibility into the exact timing of device
runtime power state transitions, particularly when asynchronous operations
are involved. When the `rpm_suspend` or `rpm_resume` functions are invoked
with the `RPM_ASYNC` flag, a return value of 0 i.e., success merely
indicates that the device power state request has been queued, not that
the device has yet transitioned.

A new ftrace event, `rpm_status`, is introduced. This event directly logs
the `power.runtime_status` value of a device whenever it changes providing
granular tracking of runtime power state transitions regardless of
synchronous or asynchronous `rpm_suspend` / `rpm_resume` usage.

Signed-off-by: Vilas Bhat <vilasbhat@google.com>
Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>

Bug: 325508361
(cherry picked from commit 015abee404760249a5c968b9ce29216b94b8ced1
 https://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm.git
 linux-next)
[vilasbhat: Removed reference to RPM_INVALID from patch as it does not exist
in 5.15]
Change-Id: Iad7cae74c41b23b430331379c180b5e59bc32c40
Signed-off-by: Vilas Bhat <vilasbhat@google.com>
2024-02-27 22:01:38 +00:00
Pablo Neira Ayuso
4403e2517a UPSTREAM: netfilter: nft_set_rbtree: skip end interval element from gc
commit 60c0c230c6f046da536d3df8b39a20b9a9fd6af0 upstream.

rbtree lazy gc on insert might collect an end interval element that has
been just added in this transactions, skip end interval elements that
are not yet active.

Bug: 325477234
Fixes: f718863aca ("netfilter: nft_set_rbtree: fix overlap expiration walk")
Cc: stable@vger.kernel.org
Reported-by: lonial con <kongln9170@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 1296c110c5)
Signed-off-by: Lee Jones <joneslee@google.com>
Change-Id: I42f7bca418d47948292b15ace9f371b81ccd7fe8
2024-02-27 16:29:16 +00:00
Sajid Dalvi
288abb8b19 ANDROID: PCI: dwc: Wait for the link only if it has been started
In dw_pcie_host_init() regardless of whether the link has been
started or not, the code waits for the link to come up. Even in
cases where start_link() is not defined the code ends up spinning
in a loop for 1 second. Since in some systems dw_pcie_host_init()
gets called during probe, this one second loop for each pcie
interface instance ends up extending the boot time.

Wait for the link up in only if the start_link() is defined.

The patch submitted to the upstream kernel (see link below) was not
accepted due to no upstream user.

The change here is a simplified version of that patch, which will wait
for a link only if start_link ops has been defined.

Also, this patch was already applied before in
https://r.android.com/2548250 but the functionality was lost after
https://lore.kernel.org/all/20220624143428.8334-14-Sergey.Semin@baikalelectronics.ru/
was pulled in from the LTS merge.

This patch restores the functionality (of removing the delay) which was
lost during the LTS merge.

Bug: 315052790
Link: https://lore.kernel.org/all/20240112093006.2832105-1-ajayagarwal@google.com/
Change-Id: I4e8d00f6195062728417e41ddd51072880676920
Signed-off-by: Sajid Dalvi <sdalvi@google.com>
2024-02-20 16:13:40 -06:00
Greg Kroah-Hartman
30f4052325 Merge "Merge branch 'android14-5.15' into branch 'android14-5.15-lts'" into android14-5.15-lts 2024-02-15 13:25:56 +00:00
Greg Kroah-Hartman
2e2880028c Merge branch 'android14-5.15' into branch 'android14-5.15-lts'
Catch up on a number of changes merged on the normal branch to the LTS
branch.  This includes the following commits:

* eb7a469127 ANDROID: introduce a vendor hook to allow speculative swap pagefaults
* 8014b372fb ANDROID: mm: allow limited speculative page faulting in do_swap_page()
* d87717c9e0 ANDROID: GKI: fix ABI breakage in struct ipv6_devconf
* e9eafb11e1 Reapply "net: release reference to inet6_dev pointer"
* bdf29bd281 Reapply "net: change accept_ra_min_rtr_lft to affect all RA lifetimes"
* aa0920715e Reapply "net: add sysctl accept_ra_min_rtr_lft"
* cfef864314 ANDROID: GKI: explicit include of stringify.h
* 1bbef27576 ANDROID: GKI: Preserve CRC value for wireless_send_event()
* 6fba8c7e34 BACKPORT: wifi: nl80211: Allow authentication frames and set keys on NAN interface
* a2c880b765 UPSTREAM: wifi: cfg80211: Allow action frames to be transmitted with link BSS in MLD
* a2a5f22724 BACKPORT: wifi: cfg80211: include puncturing bitmap in channel switch events
* 2fe5888b30 BACKPORT: wifi: nl80211: validate and configure puncturing bitmap
* 1ef87d0cd0 BACKPORT: wifi: cfg80211: move puncturing bitmap validation from mac80211
* c7c4d0de0f UPSTREAM: wifi: nl80211: add MLO_LINK_ID to CMD_STOP_AP event
* e17b1173b0 ANDROID: GKI: add symbol list for pixel watch
* cea40c5b94 ANDROID: GKI: Do not export non-existent unsafe DDK header
* 7aa924029c UPSTREAM: net: tls, update curr on splice as well
* cf3a0a202e BACKPORT: f2fs: Restrict max filesize for 16K f2fs
* 27bd7b3da9 BACKPORT: f2fs: Support Block Size == Page Size
* e548514692 UPSTREAM: arm64: scs: Disable LTO for SCS patching code
* 46ed54bf00 UPSTREAM: netfilter: nf_tables: check if catch-all set element is active in next generation
* c523387084 ANDROID: Update the ABI symbol list
* 8d40c367ee Reapply "perf: Fix perf_event_validate_size()"
* 671218461d ANDROID: binder: fix integer as NULL assignment
* d632b78a61 UPSTREAM: ida: Fix crash in ida_free when the bitmap is empty
* f7b4a1559d UPSTREAM: netfilter: nf_tables: Reject tables of unsupported family
* 0a649455af ANDROID: ABI break fix caused by kernfs_root and kernfs_elem_dir size increase
* 1de2411a19 UPSTREAM: kernfs: fix NULL dereferencing in kernfs_remove
* 05de9bcede UPSTREAM: kernfs: prevent early freeing of root node
* d8dbc91f9a UPSTREAM: kernfs: switch global kernfs_rwsem lock to per-fs lock
* 73ba66a3c5 Reapply "perf: Disallow mis-matched inherited group reads"
* 076f9f28f5 FROMGIT: mm: memcg: don't periodically flush stats when memcg is disabled
* a330adce53 UPSTREAM: Revert "drm/bridge: lt9611uxc: Switch to devm MIPI-DSI helpers"
* ac7b9d215a UPSTREAM: Revert "drm/bridge: lt9611uxc: Register and attach our DSI device at probe"
* a9030727b0 UPSTREAM: Revert "drm/bridge: lt9611uxc: fix the race in the error path"
* d9ce9afcf1 ANDROID: mm: Fix VMA ref count after fast-mremap

Change-Id: Ie898504ffae8e2eeba23c320e565b4b55c98d344
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
2024-02-14 14:41:57 +00:00
Konrad Dybcio
abe9e11e84 UPSTREAM: drm/msm/dsi: Enable runtime PM
[ Upstream commit 6ab502bc1cf3147ea1d8540d04b83a7a4cb6d1f1 ]

Some devices power the DSI PHY/PLL through a power rail that we model
as a GENPD. Enable runtime PM to make it suspendable.

Signed-off-by: Konrad Dybcio <konrad.dybcio@linaro.org>
Reviewed-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Patchwork: https://patchwork.freedesktop.org/patch/543352/
Link: https://lore.kernel.org/r/20230620-topic-dsiphy_rpm-v2-2-a11a751f34f0@linaro.org
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Stable-dep-of: 3d07a411b4fa ("drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks")
Signed-off-by: Amit Pundir <amit.pundir@linaro.org>
Change-Id: I9f1a28e7c47c394fe7200826627a5373455f3826
2024-02-14 13:14:59 +05:30
Douglas Anderson
6205c3735f UPSTREAM: PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
[ Upstream commit b4060db925 ]

The PM Runtime docs say:

  Drivers in ->remove() callback should undo the runtime PM changes done
  in ->probe(). Usually this means calling pm_runtime_disable(),
  pm_runtime_dont_use_autosuspend() etc.

From grepping code, it's clear that many people aren't aware of the
need to call pm_runtime_dont_use_autosuspend().

When brainstorming solutions, one idea that came up was to leverage
the new-ish devm_pm_runtime_enable() function. The idea here is that:

 * When the devm action is called we know that the driver is being
   removed. It's the perfect time to undo the use_autosuspend.

 * The code of pm_runtime_dont_use_autosuspend() already handles the
   case of being called when autosuspend wasn't enabled.

Suggested-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com>
Signed-off-by: Douglas Anderson <dianders@chromium.org>
Reviewed-by: Ulf Hansson <ulf.hansson@linaro.org>
Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
Stable-dep-of: 3d07a411b4fa ("drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks")
Signed-off-by: Amit Pundir <amit.pundir@linaro.org>
Change-Id: I3433f1936cdc52ed4c26263de7c5c6fcd058e30c
2024-02-14 13:13:52 +05:30
Bart Van Assche
ff1e211db6 ANDROID: null_blk: Support configuring the maximum segment size
Add support for configuring the maximum segment size.

Add support for segments smaller than the page size.

This patch enables testing segments smaller than the page size with a
driver that does not call blk_rq_map_sg().

Bug: 308663717
Bug: 319125789
Change-Id: I74165d83e71201116378c4598c2f9a2ff8c8b623
Signed-off-by: Bart Van Assche <bvanassche@acm.org>
Signed-off-by: Juan Yescas <jyescas@google.com>
2024-02-14 02:31:28 +00:00
Bart Van Assche
0ffd03e67d ANDROID: scsi_debug: Support configuring the maximum segment size
Add a kernel module parameter for configuring the maximum segment size.
This patch enables testing SCSI support for segments smaller than the
page size.

Bug: 308663717
Bug: 319125789
Change-Id: Ib645dead4e10d4aaf5a1dfc1d064038153737bc1
Signed-off-by: Bart Van Assche <bvanassche@acm.org>
Signed-off-by: Juan Yescas <jyescas@google.com>
2024-02-14 02:31:28 +00:00