mirror of
https://github.com/hardkernel/linux.git
synced 2026-06-05 10:31:46 +09:00
fb69bae8ea291efef93d48603fc444bc23bf1695
1166405 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
Quentin Perret
|
fb69bae8ea |
FROMLIST: KVM: arm64: Always check the state from hyp_ack_unshare()
There are multiple pKVM memory transitions where the state of a page is not cross-checked from the completer's PoV for performance reasons. For example, if a page is PKVM_PAGE_OWNED from the initiator's PoV, we should be guaranteed by construction that it is PKVM_NOPAGE for everybody else, hence allowing us to save a page-table lookup. When it was introduced, hyp_ack_unshare() followed that logic and bailed out without checking the PKVM_PAGE_SHARED_BORROWED state in the hypervisor's stage-1. This was correct as we could safely assume that all host-initiated shares were directed at the hypervisor at the time. But with the introduction of other types of shares (e.g. for FF-A or non-protected guests), it is now very much required to cross check this state to prevent the host from running __pkvm_host_unshare_hyp() on a page shared with TZ or a non-protected guest. Thankfully, if an attacker were to try this, the hyp_unmap() call from hyp_complete_unshare() would fail, hence causing to WARN() from __do_unshare() with the host lock held, which is fatal. But this is fragile at best, and can hardly be considered a security measure. Let's just do the right thing and always check the state from hyp_ack_unshare(). Bug: 381409114 Link: https://lore.kernel.org/kvmarm/20241128154406.602875-1-qperret@google.com/ Change-Id: Id3bbd1fc3c75df506b0919f4d6f7be74b6f013f3 Signed-off-by: Quentin Perret <qperret@google.com> |
||
|
Greg Kroah-Hartman
|
bfad6b019c |
Merge tag 'android14-6.1.115_r00' into android14-6.1
Merge up to the 6.1.115 LTS release into android14-6.1. Changes in here include: * |
||
|
Xiuhong Wang
|
93460febf9 |
UPSTREAM: f2fs: fix fiemap failure issue when page size is 16KB
After enable 16K page size, an infinite loop may occur in
fiemap (fm_length=UINT64_MAX) on a file, such as the 16KB
scratch.img during the remount operation in Android.
The condition for whether fiemap continues to map is to check
whether the number of bytes corresponding to the next map.m_lblk
exceeds blks_to_bytes(inode,max_inode_blocks(inode)) if there are HOLE.
The latter does not take into account the maximum size of a file with 16KB
page size, so the loop cannot be jumped out.
The following is the fail trace:
When f2fs_map_blocks reaches map.m_lblk=3936, it needs to go to the
first direct node block, so the map is 3936 + 4090 = 8026,
The next map is the second direct node block, that is,
8026 + 4090 = 12116,
The next map is the first indirect node block, that is,
12116 + 4090 * 4090 = 16740216,
The next map is the second indirect node block, that is,
16740216 + 4090 * 4090 = 33468316,
The next map is the first double indirect node block, that is,
33468316 + 4090 * 4090 * 4090 = 68451397316
Since map.m_lblk represents the address of a block, which is 32
bits, truncation will occur, that is, 68451397316 becomes
4026887876, and the number of bytes corresponding to the block
number does not exceed blks_to_bytes(inode,max_inode_blocks(inode)),
so the loop will not be jumped out.
The next time, it will be considered that it should still be a
double indirect node block, that is,
4026887876 + 4090 * 4090 * 4090 = 72444816876, which will be
truncated to 3725340140, and the loop will not be jumped out.
156.374871: f2fs_map_blocks: dev = (254,57), ino = 7449, file offset = 0, start blkaddr = 0x8e00, len = 0x200, flags = 2,seg_type = 8, may_create = 0, multidevice = 0, flag = 1, err = 0
156.374916: f2fs_map_blocks: dev = (254,57), ino = 7449, file offset = 512, start blkaddr = 0x0, len = 0x0, flags = 0 , seg_type = 8, may_create = 0, multidevice = 0, flag = 1, err = 0
156.374920: f2fs_map_blocks: dev = (254,57), ino = 7449, file offset = 513, start blkaddr = 0x0, len = 0x0, flags = 0, seg_type = 8, may_create = 0, multidevice = 0, flag = 1, err = 0
......
156.385747: f2fs_map_blocks: dev = (254,57), ino = 7449, file offset = 3935, start blkaddr = 0x0, len = 0x0, flags = 0, seg_type = 8, may_create = 0, multidevice = 0, flag = 1, err = 0
156.385752: f2fs_map_blocks: dev = (254,57), ino = 7449, file offset = 3936, start blkaddr = 0x0, len = 0x0, flags = 0, seg_type = 8, may_create = 0, multidevice = 0, flag = 1, err = 0
156.385755: f2fs_map_blocks: dev = (254,57), ino = 7449, file offset = 8026, start blkaddr = 0x0, len = 0x0, flags = 0, seg_type = 8, may_create = 0, multidevice = 0, flag = 1, err = 0
156.385758: f2fs_map_blocks: dev = (254,57), ino = 7449, file offset = 12116, start blkaddr = 0x0, len = 0x0, flags = 0, seg_type = 8, may_create = 0, multidevice = 0, flag = 1, err = 0
156.385761: f2fs_map_blocks: dev = (254,57), ino = 7449, file offset = 16740216, start blkaddr = 0x0, len = 0x0, flags = 0, seg_type = 8, may_create = 0, multidevice = 0, flag = 1, err = 0
156.385764: f2fs_map_blocks: dev = (254,57), ino = 7449, file offset = 33468316, start blkaddr = 0x0, len = 0x0, flags = 0, seg_type = 8, may_create = 0, multidevice = 0, flag = 1, err = 0
156.385767: f2fs_map_blocks: dev = (254,57), ino = 7449, file offset = 4026887876, start blkaddr = 0x0, len = 0x0, flags = 0, seg_type = 8, may_create = 0, multidevice = 0, flag = 1, err = 0
156.385770: f2fs_map_blocks: dev = (254,57), ino = 7449, file offset = 3725340140, start blkaddr = 0x0, len = 0x0, flags = 0, seg_type = 8, may_create = 0, multidevice = 0, flag = 1, err = 0
156.385772: f2fs_map_blocks: dev = (254,57), ino = 7449, file offset = 4026887876, start blkaddr = 0x0, len = 0x0, flags = 0, seg_type = 8, may_create = 0, multidevice = 0, flag = 1, err = 0
156.385775: f2fs_map_blocks: dev = (254,57), ino = 7449, file offset = 3725340140, start blkaddr = 0x0, len = 0x0, flags = 0, seg_type = 8, may_create = 0, multidevice = 0, flag = 1, err = 0
Commit a6a010f5def5 ("f2fs: Restrict max filesize for 16K f2fs")
has set the maximum allowed file size to (U32_MAX + 1) * F2FS_BLKSIZE,
so max_file_blocks should be used here to limit it, that is,
maxbytes defined above. And the max_inode_blocks function is not
called by other functions except here, so cleanup it.
Signed-off-by: Xiuhong Wang <xiuhong.wang@unisoc.com>
Signed-off-by: Zhiguo Niu <zhiguo.niu@unisoc.com>
Reviewed-by: Chao Yu <chao@kernel.org>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
(cherry picked from commit a7a7c1d423a6351a6541e95c797da5358e5ad1ea)
Bug: 375052311
Test: fiemap_writer_test --gtest_filter=FiemapWriterTest.CreateUnalignedFile
Signed-off-by: Daniel Rosenberg <drosen@google.com>
(cherry picked from https://android-review.googlesource.com/q/commit:fffd1d38a4e6b678e915859b77b50fe207ac0613)
Merged-In: I9ac9e56550716bd118c832e5e092792b7d231097
Change-Id: I9ac9e56550716bd118c832e5e092792b7d231097
|
||
|
Seiya Wang
|
3a856b7c13 |
ANDROID: GKI: Update symbol list for mtk
1 function symbol(s) added 'int hci_cmd_sync_status(struct hci_dev*, u16, u32, const void*, u32)' Bug: 380913021 Signed-off-by: Seiya Wang <seiya.wang@mediatek.com> Change-Id: I80c88da3392ae2634672d21f5f64b853f359fbdd |
||
|
Pedro Tammela
|
929ff4817a |
UPSTREAM: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
[ Upstream commit 2e95c4384438adeaa772caa560244b1a2efef816 ] In qdisc_tree_reduce_backlog, Qdiscs with major handle ffff: are assumed to be either root or ingress. This assumption is bogus since it's valid to create egress qdiscs with major handle ffff: Budimir Markovic found that for qdiscs like DRR that maintain an active class list, it will cause a UAF with a dangling class pointer. In |
||
|
Dmitry Antipov
|
7cd56b010f |
UPSTREAM: net: sched: use RCU read-side critical section in taprio_dump()
[ Upstream commit b22db8b8befe90b61c98626ca1a2fbb0505e9fe3 ] Fix possible use-after-free in 'taprio_dump()' by adding RCU read-side critical section there. Never seen on x86 but found on a KASAN-enabled arm64 system when investigating https://syzkaller.appspot.com/bug?extid=b65e0af58423fc8a73aa: [T15862] BUG: KASAN: slab-use-after-free in taprio_dump+0xa0c/0xbb0 [T15862] Read of size 4 at addr ffff0000d4bb88f8 by task repro/15862 [T15862] [T15862] CPU: 0 UID: 0 PID: 15862 Comm: repro Not tainted 6.11.0-rc1-00293-gdefaf1a2113a-dirty #2 [T15862] Hardware name: QEMU QEMU Virtual Machine, BIOS edk2-20240524-5.fc40 05/24/2024 [T15862] Call trace: [T15862] dump_backtrace+0x20c/0x220 [T15862] show_stack+0x2c/0x40 [T15862] dump_stack_lvl+0xf8/0x174 [T15862] print_report+0x170/0x4d8 [T15862] kasan_report+0xb8/0x1d4 [T15862] __asan_report_load4_noabort+0x20/0x2c [T15862] taprio_dump+0xa0c/0xbb0 [T15862] tc_fill_qdisc+0x540/0x1020 [T15862] qdisc_notify.isra.0+0x330/0x3a0 [T15862] tc_modify_qdisc+0x7b8/0x1838 [T15862] rtnetlink_rcv_msg+0x3c8/0xc20 [T15862] netlink_rcv_skb+0x1f8/0x3d4 [T15862] rtnetlink_rcv+0x28/0x40 [T15862] netlink_unicast+0x51c/0x790 [T15862] netlink_sendmsg+0x79c/0xc20 [T15862] __sock_sendmsg+0xe0/0x1a0 [T15862] ____sys_sendmsg+0x6c0/0x840 [T15862] ___sys_sendmsg+0x1ac/0x1f0 [T15862] __sys_sendmsg+0x110/0x1d0 [T15862] __arm64_sys_sendmsg+0x74/0xb0 [T15862] invoke_syscall+0x88/0x2e0 [T15862] el0_svc_common.constprop.0+0xe4/0x2a0 [T15862] do_el0_svc+0x44/0x60 [T15862] el0_svc+0x50/0x184 [T15862] el0t_64_sync_handler+0x120/0x12c [T15862] el0t_64_sync+0x190/0x194 [T15862] [T15862] Allocated by task 15857: [T15862] kasan_save_stack+0x3c/0x70 [T15862] kasan_save_track+0x20/0x3c [T15862] kasan_save_alloc_info+0x40/0x60 [T15862] __kasan_kmalloc+0xd4/0xe0 [T15862] __kmalloc_cache_noprof+0x194/0x334 [T15862] taprio_change+0x45c/0x2fe0 [T15862] tc_modify_qdisc+0x6a8/0x1838 [T15862] rtnetlink_rcv_msg+0x3c8/0xc20 [T15862] netlink_rcv_skb+0x1f8/0x3d4 [T15862] rtnetlink_rcv+0x28/0x40 [T15862] netlink_unicast+0x51c/0x790 [T15862] netlink_sendmsg+0x79c/0xc20 [T15862] __sock_sendmsg+0xe0/0x1a0 [T15862] ____sys_sendmsg+0x6c0/0x840 [T15862] ___sys_sendmsg+0x1ac/0x1f0 [T15862] __sys_sendmsg+0x110/0x1d0 [T15862] __arm64_sys_sendmsg+0x74/0xb0 [T15862] invoke_syscall+0x88/0x2e0 [T15862] el0_svc_common.constprop.0+0xe4/0x2a0 [T15862] do_el0_svc+0x44/0x60 [T15862] el0_svc+0x50/0x184 [T15862] el0t_64_sync_handler+0x120/0x12c [T15862] el0t_64_sync+0x190/0x194 [T15862] [T15862] Freed by task 6192: [T15862] kasan_save_stack+0x3c/0x70 [T15862] kasan_save_track+0x20/0x3c [T15862] kasan_save_free_info+0x4c/0x80 [T15862] poison_slab_object+0x110/0x160 [T15862] __kasan_slab_free+0x3c/0x74 [T15862] kfree+0x134/0x3c0 [T15862] taprio_free_sched_cb+0x18c/0x220 [T15862] rcu_core+0x920/0x1b7c [T15862] rcu_core_si+0x10/0x1c [T15862] handle_softirqs+0x2e8/0xd64 [T15862] __do_softirq+0x14/0x20 Bug: 377467434 Fixes: |
||
|
Yeongjin Gil
|
226e9f92a0 |
UPSTREAM: f2fs: compress: don't redirty sparse cluster during {,de}compress
In f2fs_do_write_data_page, when the data block is NULL_ADDR, it skips
writepage considering that it has been already truncated.
This results in an infinite loop as the PAGECACHE_TAG_TOWRITE tag is not
cleared during the writeback process for a compressed file including
NULL_ADDR in compress_mode=user.
This is the reproduction process:
1. dd if=/dev/zero bs=4096 count=1024 seek=1024 of=testfile
2. f2fs_io compress testfile
3. dd if=/dev/zero bs=4096 count=1 conv=notrunc of=testfile
4. f2fs_io decompress testfile
To prevent the problem, let's check whether the cluster is fully
allocated before redirty its pages.
Bug: 325092012
Fixes:
|
||
|
Chao Yu
|
84a9f618b5 |
UPSTREAM: f2fs: compress: don't {,de}compress non-full cluster
f2fs won't compress non-full cluster in tail of file, let's skip
dirtying and rewrite such cluster during f2fs_ioc_{,de}compress_file.
Bug: 325092012
Change-Id: I88e6b431b27b4768a312e0977ebe1c9e9cc23600
Signed-off-by: Chao Yu <chao@kernel.org>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
(cherry picked from commit
|
||
|
Chao Yu
|
3b2e004494 |
UPSTREAM: f2fs: allow f2fs_ioc_{,de}compress_file to be interrupted
This patch allows f2fs_ioc_{,de}compress_file() to be interrupted, so that,
userspace won't be blocked when manual {,de}compression on large file is
interrupted by signal.
Bug: 325092012
Change-Id: I020026926732b184f227621cd64506dae92a00a1
Signed-off-by: Chao Yu <chao@kernel.org>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
(cherry picked from commit
|
||
|
Chao Yu
|
24492cb6b9 |
UPSTREAM: f2fs: compress: do sanity check on cluster when CONFIG_F2FS_CHECK_FS is on
This patch covers sanity check logic on cluster w/ CONFIG_F2FS_CHECK_FS, otherwise, there will be performance regression while querying cluster mapping info. Callers of f2fs_is_compressed_cluster() only care about whether cluster is compressed or not, rather than # of valid blocks in compressed cluster, so, let's adjust f2fs_is_compressed_cluster()'s logic according to caller's requirement. Bug: 325092012 Change-Id: Ie3ddef60c5a3cdb2b18b0261f7188d39b7147935 Signed-off-by: Chao Yu <chao@kernel.org> Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org> (cherry picked from commit 2aaea533bf063ed3b442df5fe5f6abfc538054c9) |
||
|
Daeho Jeong
|
268f1fed50 |
UPSTREAM: f2fs: support SEEK_DATA and SEEK_HOLE for compression files
Fix to support SEEK_DATA and SEEK_HOLE for compression files Bug: 325092012 Change-Id: Iba62c53e634682205f84c8dc3566ab8df9079158 Signed-off-by: Daeho Jeong <daehojeong@google.com> Reviewed-by: Chao Yu <chao@kernel.org> Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org> (cherry picked from commit a94c7fded76bfd1a061deae7be80fedbfa26774e) |
||
|
Aleksei Vetrov
|
672918d432 |
ANDROID: add file for recording allowed ABI breaks
The tooling is configured to block any changes that has a chance to break ABI, including the possibly safe: * replacement of ANDROID_KABI_RESERVE with ANDROID_KABI_USE * changes to internal structures that are not accessible to modules * addition of enumerators These changes are difficult for the tooling to identify as definitively non-breaking, therefore, a human reviewer must check the change and approve it as non-breaking. This change adds a file to record the approval with the change that was marked as breaking. This allows the tooling to: * unblock presubmits for the change * don't block presubmits when it is cherry-picked to another branch * filter compatibility reports between a release branch and a tip of the development branch it was forked from The file is prefilled with all breaks that happened from the KMI freeze. Bug: 365521273 Change-Id: I63fbed5c364cb8c7bd149bf40d084d3d87533bf7 Signed-off-by: Aleksei Vetrov <vvvvvv@google.com> |
||
|
zhengwei
|
1ca5db7e29 |
ANDROID: GKI: update symbol list for honor
1 function symbol(s) added 'int __traceiter_android_rvh_hw_protection_shutdown(void*, const char*)' 1 variable symbol(s) added 'struct tracepoint __tracepoint_android_rvh_hw_protection_shutdown' Bug: 380204228 Change-Id: Ia2f4df5e3555feb420813cc92ab784fc58012fff Signed-off-by: zhengwei <zhengwei2@honor.com> |
||
|
Dezhi Huang
|
13f2b693c7 |
ANDROID: vendor_hooks: add hook to record reboot reason
Add hook to record the reason for calling hw_protection_shutdown Bug: 380204228 Bug: 334006616 Change-Id: I9dce8056693c96f1d5f1fab9af02a2e68ed6ab91 Signed-off-by: Dezhi Huang <huangdezhi@hihonor.com> (cherry picked from commit 70e95a10a553c0c530694b8939d25fbb984647d0) |
||
|
Carlos Llamas
|
51bee18173 |
BACKPORT: FROMGIT: binder: add delivered_freeze to debugfs output
Add the pending proc->delivered_freeze work to the debugfs output. This
information was omitted in the original implementation of the freeze
notification and can be valuable for debugging issues.
Fixes: d579b04a52a1 ("binder: frozen notification")
Cc: stable@vger.kernel.org
Signed-off-by: Carlos Llamas <cmllamas@google.com>
Acked-by: Todd Kjos <tkjos@google.com>
Reviewed-by: Alice Ryhl <aliceryhl@google.com>
Link: https://lore.kernel.org/r/20240926233632.821189-9-cmllamas@google.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Bug: 366003708
(cherry picked from commit cb2aeb2ec25884133110ffe5a67ff3cf7dee5ceb
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc.git
char-misc-next)
Change-Id: Ifc9a22b52e38c35af661732486fa1f154adb34de
[cmllamas: fix KMI break with proc_wrapper()]
Signed-off-by: Carlos Llamas <cmllamas@google.com>
|
||
|
Carlos Llamas
|
2791dfac50 |
BACKPORT: FROMGIT: binder: fix memleak of proc->delivered_freeze
If a freeze notification is cleared with BC_CLEAR_FREEZE_NOTIFICATION
before calling binder_freeze_notification_done(), then it is detached
from its reference (e.g. ref->freeze) but the work remains queued in
proc->delivered_freeze. This leads to a memory leak when the process
exits as any pending entries in proc->delivered_freeze are not freed:
unreferenced object 0xffff38e8cfa36180 (size 64):
comm "binder-util", pid 655, jiffies 4294936641
hex dump (first 32 bytes):
b8 e9 9e c8 e8 38 ff ff b8 e9 9e c8 e8 38 ff ff .....8.......8..
0b 00 00 00 00 00 00 00 3c 1f 4b 00 00 00 00 00 ........<.K.....
backtrace (crc 95983b32):
[<000000000d0582cf>] kmemleak_alloc+0x34/0x40
[<000000009c99a513>] __kmalloc_cache_noprof+0x208/0x280
[<00000000313b1704>] binder_thread_write+0xdec/0x439c
[<000000000cbd33bb>] binder_ioctl+0x1b68/0x22cc
[<000000002bbedeeb>] __arm64_sys_ioctl+0x124/0x190
[<00000000b439adee>] invoke_syscall+0x6c/0x254
[<00000000173558fc>] el0_svc_common.constprop.0+0xac/0x230
[<0000000084f72311>] do_el0_svc+0x40/0x58
[<000000008b872457>] el0_svc+0x38/0x78
[<00000000ee778653>] el0t_64_sync_handler+0x120/0x12c
[<00000000a8ec61bf>] el0t_64_sync+0x190/0x194
This patch fixes the leak by ensuring that any pending entries in
proc->delivered_freeze are freed during binder_deferred_release().
Fixes: d579b04a52a1 ("binder: frozen notification")
Cc: stable@vger.kernel.org
Signed-off-by: Carlos Llamas <cmllamas@google.com>
Reviewed-by: Alice Ryhl <aliceryhl@google.com>
Acked-by: Todd Kjos <tkjos@google.com>
Link: https://lore.kernel.org/r/20240926233632.821189-8-cmllamas@google.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Bug: 366003708
(cherry picked from commit 1db76ec2b4b206ff943e292a0b55e68ff3443598
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc.git
char-misc-next)
Change-Id: Iafdec3421c521b4b591b94455deba7ee5102c8ca
[cmllamas: drop BINDER_STAT_FREEZE and use proc_wrapper()]
Signed-off-by: Carlos Llamas <cmllamas@google.com>
|
||
|
Carlos Llamas
|
c5233c5678 |
FROMGIT: binder: allow freeze notification for dead nodes
Alice points out that binder_request_freeze_notification() should not
return EINVAL when the relevant node is dead [1]. The node can die at
any point even if the user input is valid. Instead, allow the request
to be allocated but skip the initial notification for dead nodes. This
avoids propagating unnecessary errors back to userspace.
Fixes: d579b04a52a1 ("binder: frozen notification")
Cc: stable@vger.kernel.org
Suggested-by: Alice Ryhl <aliceryhl@google.com>
Link: https://lore.kernel.org/all/CAH5fLghapZJ4PbbkC8V5A6Zay-_sgTzwVpwqk6RWWUNKKyJC_Q@mail.gmail.com/ [1]
Signed-off-by: Carlos Llamas <cmllamas@google.com>
Acked-by: Todd Kjos <tkjos@google.com>
Link: https://lore.kernel.org/r/20240926233632.821189-7-cmllamas@google.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Bug: 366003708
(cherry picked from commit ca63c66935b978441055e3d87d30225267f99329
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc.git
char-misc-next)
Change-Id: I03af1eedfeb194f5a775388cbb4e7487e4a5dfc0
Signed-off-by: Carlos Llamas <cmllamas@google.com>
|
||
|
Carlos Llamas
|
194a332e5f |
FROMGIT: binder: fix BINDER_WORK_CLEAR_FREEZE_NOTIFICATION debug logs
proc 699
context binder-test
thread 699: l 00 need_return 0 tr 0
ref 25: desc 1 node 20 s 1 w 0 d 00000000c03e09a3
unknown work: type 11
proc 640
context binder-test
thread 640: l 00 need_return 0 tr 0
ref 8: desc 1 node 3 s 1 w 0 d 000000002bb493e1
has cleared freeze notification
Fixes: d579b04a52a1 ("binder: frozen notification")
Cc: stable@vger.kernel.org
Suggested-by: Alice Ryhl <aliceryhl@google.com>
Signed-off-by: Carlos Llamas <cmllamas@google.com>
Reviewed-by: Alice Ryhl <aliceryhl@google.com>
Acked-by: Todd Kjos <tkjos@google.com>
Link: https://lore.kernel.org/r/20240926233632.821189-6-cmllamas@google.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Bug: 366003708
(cherry picked from commit 595ea72efff9fa65bc52b6406e0822f90841f266
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc.git
char-misc-next)
Change-Id: Ic6311aaea2040aaf4534cdaa4cbfa378afe31869
Signed-off-by: Carlos Llamas <cmllamas@google.com>
|
||
|
Pierre Couillaud
|
5b095ade12 |
ANDROID: GKI: Update symbol list for BCMSTB
INFO: 1 function symbol(s) added 'unsigned long __alloc_pages_bulk(gfp_t, int, nodemask_t*, int, struct list_head*, struct page**)' refs #SWANDROID-14843 Bug: 379775015 Change-Id: I7834e0e8b49e568e4f517109d21000b7f1352b70 Signed-off-by: Pierre Couillaud <pierre@broadcom.com> |
||
|
Jing Wei
|
516ca8799f |
ANDROID: psi: Add vendor hooks for PSI tracing
Add hooks to capture various per-zone memory stats when a trigger threshold is hit. Bug: 379593530 Change-Id: Ia748b9525da3996366802f536e66eaa35af4416e Signed-off-by: Jing Wei <jing.wei5@transsion.com> |
||
|
Daniel Okazaki
|
4a105e4e1c |
ANDROID: ABI: Update pixel symbol list
Adding the following symbols: - klist_add_head - klist_add_tail - klist_init - klist_iter_exit - klist_iter_init - klist_next - klist_node_attached - klist_remove Bug: 308028804 Change-Id: Ibfe7f62f18a36ca4ca6e07dc8ddf0a7fdde5114c Signed-off-by: Daniel Okazaki <dtokazaki@google.com> (cherry picked from commit 35cf4d8eab4665136971dc66c163c9cd18907c3a) |
||
|
zhengwei
|
6cf2e7d968 |
ANDROID: GKI: update symbol list for honor
INFO: 2 function symbol(s) added 'int __traceiter_android_vh_slab_alloc_node(void*, void*, unsigned long, struct kmem_cache*)' 'int __traceiter_android_vh_slab_free(void*, unsigned long, struct kmem_cache*)' 2 variable symbol(s) added 'struct tracepoint __tracepoint_android_vh_slab_alloc_node' 'struct tracepoint __tracepoint_android_vh_slab_free' Bug: 379598560 Change-Id: I27e41cf5545297e6c62a581d677a298bd629ad3e Signed-off-by: zhengwei <zhengwei2@honor.com> |
||
|
Dezhi Huang
|
eb0102684f |
ANDROID: vendor_hooks: add hook to record slab alloc and free
Add hook to record slab usage for calling slab_alloc_node and slab_free check for memory leaks. Bug: 379598560 Bug: 341216009 Change-Id: Ibb5f77b8244096fc999190244d197b7a40e6591c Signed-off-by: Dezhi Huang <huangdezhi@hihonor.com> (cherry picked from commit d5c66ad281a72e29802ae72fec0526e58a151377) |
||
|
Greg Kroah-Hartman
|
47a8b5f3ed |
Merge 0d968ced73 ("mm/page_alloc: treat RT tasks similar to __GFP_HIGH") into android14-6.1-lts
Steps on the way to 6.1.116 Change-Id: I6502f70497285f1569aecf03c33c126b96d3001b Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
Greg Kroah-Hartman
|
500bbbbd01 |
Merge 241398329a ("mm/page_alloc: rename ALLOC_HIGH to ALLOC_MIN_RESERVE") into android14-6.1-lts
Steps on the way to 6.1.116 Change-Id: Ib7c11329d114065714cd5d11ef69e65ab4d0bd51 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
Greg Kroah-Hartman
|
ad46e48e1b |
Merge b5dc5b7de7 ("cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()") into android14-6.1-lts
Steps on the way to 6.1.116 Resolves merge conflicts in: net/wireless/core.c Change-Id: Ia10a58f63842e7bbc9440d960071985de9a399b8 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
Greg Kroah-Hartman
|
0df5dc7d73 |
Merge bdbc96c231 ("fsdax: dax_unshare_iter needs to copy entire blocks") into android14-6.1-lts
Steps on the way to 6.1.116 Resolves merge conflicts in: fs/iomap/buffered-io.c Change-Id: Ibe7e7f5a94bee171200931351878cf40e37b8bbc Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
Greg Kroah-Hartman
|
a566b71fed |
Merge d321732352 ("netfilter: nft_payload: sanitize offset and length before calling skb_checksum()") into android14-6.1-lts
Steps on the way to 6.1.116 Change-Id: If62fadaf5fbd6d9663368509dd05b285a930f6d5 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
Greg Kroah-Hartman
|
bb558c55a5 |
Revert "genetlink: hold RCU in genlmsg_mcast()"
This reverts commit
|
||
|
Greg Kroah-Hartman
|
c5efbe731b |
Revert "tty/serial: Make ->dcd_change()+uart_handle_dcd_change() status bool active"
This reverts commit |
||
|
Greg Kroah-Hartman
|
3aee75909f |
Revert "serial: Make uart_handle_cts_change() status param bool active"
This reverts commit |
||
|
Greg Kroah-Hartman
|
d82cacc625 |
Revert "serial: imx: Update mctrl old_status on RTSD interrupt"
This reverts commit
|
||
|
Greg Kroah-Hartman
|
ca7ef58ce4 |
Revert "arm64:uprobe fix the uprobe SWBP_INSN in big-endian"
This reverts commit |
||
|
Greg Kroah-Hartman
|
bfff915c97 |
Revert "arm64: probes: Fix uprobes for big-endian kernels"
This reverts commit
|
||
|
Greg Kroah-Hartman
|
535085db57 |
Revert "arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning"
This reverts commit |
||
|
Greg Kroah-Hartman
|
983df5e9ef |
Revert "usb: gadget: Add function wakeup support"
This reverts commit |
||
|
Greg Kroah-Hartman
|
56f28f2269 |
Revert "XHCI: Separate PORT and CAPs macros into dedicated file"
This reverts commit
|
||
|
Greg Kroah-Hartman
|
fae9c0cd1a |
Revert "usb: dwc3: core: Fix system suspend on TI AM62 platforms"
This reverts commit
|
||
|
Sumit Semwal
|
defe0024cf |
UPSTREAM: Revert "arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings"
This reverts commit
|
||
|
Greg Kroah-Hartman
|
45a7ce8a2b |
ANDROID: GKI: fix up build break where timer_delete_sync() was used
We reverted the commit that renamed del_timer_sync() to timer_delete_sync() a long while back, but that broke the build when commit |
||
|
Greg Kroah-Hartman
|
a332a3d23d |
Merge 6.1.115 into android14-6.1-lts
Changes in 6.1.115
bpf: Use raw_spinlock_t in ringbuf
iio: accel: bma400: Fix uninitialized variable field_value in tap event handling.
bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
bpf: devmap: provide rxq after redirect
bpf: Fix memory leak in bpf_core_apply
RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
RDMA/bnxt_re: Add a check for memory allocation
x86/resctrl: Avoid overflow in MB settings in bw_validate()
ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
s390/pci: Handle PCI error codes other than 0x3a
bpf: fix kfunc btf caching for modules
iio: frequency: {admv4420,adrf6780}: format Kconfig entries
iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
selftests/bpf: Fix cross-compiling urandom_read
ALSA: hda/cs8409: Fix possible NULL dereference
RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
RDMA/irdma: Fix misspelling of "accept*"
RDMA/srpt: Make slab cache names unique
ipv4: give an IPv4 dev to blackhole_netdev
RDMA/bnxt_re: Return more meaningful error
RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
drm/msm/dpu: make sure phys resources are properly initialized
drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
drm/msm: Allocate memory for disp snapshot with kvzalloc()
net: usb: usbnet: fix race in probe failure
octeontx2-af: Fix potential integer overflows on integer shifts
drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
macsec: don't increment counters for an unrelated SA
netdevsim: use cond_resched() in nsim_dev_trap_report_work()
net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
net: systemport: fix potential memory leak in bcm_sysport_xmit()
irqchip/renesas-rzg2l: Align struct member names to tabs
irqchip/renesas-rzg2l: Document structure members
irqchip/renesas-rzg2l: Add support for suspend to RAM
irqchip/renesas-rzg2l: Fix missing put_device
drm/msm/dpu: Wire up DSC mask for active CTL configuration
drm/msm/dpu: don't always program merge_3d block
tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
genetlink: hold RCU in genlmsg_mcast()
ravb: Remove setting of RX software timestamp
net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
scsi: target: core: Fix null-ptr-deref in target_alloc_device()
smb: client: fix OOBs when building SMB2_IOCTL request
usb: typec: altmode should keep reference to parent
s390: Initialize psw mask in perf_arch_fetch_caller_regs()
Bluetooth: bnep: fix wild-memory-access in proto_unregister
net/mlx5: Remove redundant cmdif revision check
net/mlx5: split mlx5_cmd_init() to probe and reload routines
net/mlx5: Fix command bitmask initialization
net/mlx5: Unregister notifier on eswitch init failure
riscv, bpf: Make BPF_CMPXCHG fully ordered
bpf: Fix iter/task tid filtering
arm64:uprobe fix the uprobe SWBP_INSN in big-endian
arm64: probes: Fix uprobes for big-endian kernels
xhci: dbgtty: remove kfifo_out() wrapper
xhci: dbgtty: use kfifo from tty_port struct
xhci: dbc: honor usb transfer size boundaries.
usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant
usb: gadget: f_uac2: fix non-newline-terminated function name
usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
usb: gadget: Add function wakeup support
XHCI: Separate PORT and CAPs macros into dedicated file
usb: dwc3: core: Fix system suspend on TI AM62 platforms
tty/serial: Make ->dcd_change()+uart_handle_dcd_change() status bool active
serial: Make uart_handle_cts_change() status param bool active
serial: imx: Update mctrl old_status on RTSD interrupt
block, bfq: fix procress reference leakage for bfqq in merge chain
exec: don't WARN for racy path_noexec check
fs/ntfs3: Add more attributes checks in mi_enum_attr()
drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values
ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
arm64: Force position-independent veneers
udf: refactor udf_current_aext() to handle error
udf: fix uninit-value use in udf_get_fileshortad
ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
platform/x86: dell-sysman: add support for alienware products
LoongArch: Add support to clone a time namespace
LoongArch: Don't crash in stack_top() for tasks without vDSO
jfs: Fix sanity check in dbMount
tracing: Consider the NULL character when validating the event length
xfrm: extract dst lookup parameters into a struct
xfrm: respect ip protocols rules criteria when performing dst lookups
net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
be2net: fix potential memory leak in be_xmit()
net: plip: fix break; causing plip to never transmit
octeon_ep: Implement helper for iterating packets in Rx queue
octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
netfilter: xtables: fix typo causing some targets not to load on IPv6
net: wwan: fix global oob in wwan_rtnl_policy
docs: net: reformat driver.rst from a list to sections
net: provide macros for commonly copied lockless queue stop/wake code
net/sched: adjust device watchdog timer to detect stopped queue at right time
net: fix races in netdev_tx_sent_queue()/dev_watchdog()
net: usb: usbnet: fix name regression
net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions created by classifiers
net: sched: fix use-after-free in taprio_change()
r8169: avoid unsolicited interrupts
posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
Bluetooth: SCO: Fix UAF on sco_sock_timeout
Bluetooth: ISO: Fix UAF on iso_sock_timeout
bpf,perf: Fix perf_event_detach_bpf_prog error handling
ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
ALSA: hda/realtek: Update default depop procedure
cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
btrfs: zoned: fix zone unusable accounting for freed reserved extent
drm/amd: Guard against bad data for ATIF ACPI method
ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
nilfs2: fix kernel bug due to missing clearing of buffer delay flag
openat2: explicitly return -E2BIG for (usize > PAGE_SIZE)
KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
KVM: arm64: Don't eagerly teardown the vgic on init error
ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
LoongArch: Get correct cores_per_package for SMT systems
xfrm: fix one more kernel-infoleak in algo dumping
hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
selinux: improve error checking in sel_write_load()
serial: protect uart_port_dtr_rts() in uart_shutdown() too
net: phy: dp83822: Fix reset pin definitions
ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
platform/x86: dell-wmi: Ignore suspend notifications
ACPI: PRM: Clean up guid type in struct prm_handler_info
arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
xfrm: validate new SA's prefixlen using SA family when sel.family is unset
Linux 6.1.115
Change-Id: I3348b13afe931340f904062b8a22d8d6c4a46d5c
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
|
||
|
jiangxinpei
|
55c3fa9885 |
ANDROID: GKI: Update Honor abi symbol list
1 function symbol(s) added 'unsigned int pm_wakeup_irq()' Bug: 343147334 Change-Id: I9ed79c6457e8e13e44144a3e46969c2720354b99 Signed-off-by: jiangxinpei <jiangxinpei@honor.corp-partner.google.com> Signed-off-by: Dezhi Huang <huangdezhi@hihonor.com> (cherry picked from commit a494753f4514ea740f3028d04bbf9a5c9e03c050) |
||
|
Dezhi Huang
|
cbc36a1928 |
ANDROID: Allow vendor modules perform more operationson.
Export pm_wakeup_irq for obtain the wakeup source when the system wakes up,it used to handle different processing logic for different wakeup sources. Bug: 378615449 Change-Id: I65c14afb1d3da2e43c58519f8b0233a875db2726 Signed-off-by: Dezhi Huang <huangdezhi@hihonor.com> (cherry picked from commit 413bd75728ea00056e1f061da7ad091d618b5806) |
||
|
Kever Yang
|
7160754546 |
ANDROID: GKI: Add drm symbol need by rockchip soc
INFO: 1 function symbol(s) added 'int drm_atomic_add_encoder_bridges(struct drm_atomic_state*, struct drm_encoder*)' Bug: 300024866 Change-Id: I03fc88ceb8fc24fc7fc8f45dd3247e3fc3c7d09e Signed-off-by: Kever Yang <kever.yang@rock-chips.com> |
||
|
Greg Kroah-Hartman
|
db64cb409e |
Revert "irqchip/gic-v4: Don't allow a VMOVP on a dying VPE"
This reverts commit
|
||
|
Seiya Wang
|
5f814d6bb4 |
ANDROID: GKI: Update symbol list for mtk
9 function symbol(s) added 'int sock_copy_user_timeval(struct __kernel_sock_timeval*, sockptr_t, int, bool)' 'int sock_get_timeout(long, void*, bool)' 'bool vsock_addr_bound(const struct sockaddr_vm*)' 'int vsock_addr_cast(const struct sockaddr*, size_t, struct sockaddr_vm**)' 'bool vsock_addr_equals_addr(const struct sockaddr_vm*, const struct sockaddr_vm*)' 'void vsock_addr_init(struct sockaddr_vm*, u32, u32)' 'void vsock_addr_unbind(struct sockaddr_vm*)' 'int vsock_addr_validate(const struct sockaddr_vm*)' 'void vsock_deliver_tap(struct sk_buff*(*)(void*), void*)' Bug: 378967808 Change-Id: I0c8fe511bb499030efd9bd817da0603147f102fd Signed-off-by: Seiya Wang <seiya.wang@mediatek.com> |
||
|
Greg Kroah-Hartman
|
4d5ecb6e03 |
Merge 6.1.114 into android14-6.1-lts
Changes in 6.1.114 btrfs: fix uninitialized pointer free in add_inode_ref() btrfs: fix uninitialized pointer free on read_alloc_one_name() error ksmbd: fix user-after-free from session log off ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2 mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow udf: New directory iteration code udf: Convert udf_expand_dir_adinicb() to new directory iteration udf: Move udf_expand_dir_adinicb() to its callsite udf: Implement searching for directory entry using new iteration code udf: Provide function to mark entry as deleted using new directory iteration code udf: Convert udf_rename() to new directory iteration code udf: Convert udf_readdir() to new directory iteration udf: Convert udf_lookup() to use new directory iteration code udf: Convert udf_get_parent() to new directory iteration code udf: Convert empty_dir() to new directory iteration code udf: Convert udf_rmdir() to new directory iteration code udf: Convert udf_unlink() to new directory iteration code udf: Implement adding of dir entries using new iteration code udf: Convert udf_add_nondir() to new directory iteration udf: Convert udf_mkdir() to new directory iteration code udf: Convert udf_link() to new directory iteration code udf: Remove old directory iteration code udf: Handle error when expanding directory udf: Don't return bh from udf_expand_dir_adinicb() net: enetc: remove xdp_drops statistic from enetc_xdp_drop() net: enetc: add missing static descriptor and inline keyword posix-clock: Fix missing timespec64 check in pc_clock_settime() arm64: probes: Remove broken LDR (literal) uprobe support arm64: probes: Fix simulate_ldr*_literal() net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1 fat: fix uninitialized variable mm/swapfile: skip HugeTLB pages for unuse_vma devlink: drop the filter argument from devlinks_xa_find_get devlink: bump the instance index directly when iterating maple_tree: correct tree corruption on spanning store drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE) iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices s390/sclp: Deactivate sclp after all its users s390/sclp_vt220: Convert newlines to CRLF instead of LFCR KVM: s390: gaccess: Check if guest address is in memslot KVM: s390: Change virtual to physical address access in diag 0x258 handler x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET x86/cpufeatures: Add a IBPB_NO_RET BUG flag x86/entry: Have entry_ibpb() invalidate return predictions x86/bugs: Skip RSB fill at VMEXIT x86/bugs: Do not use UNTRAIN_RET with IBPB on entry blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race io_uring/sqpoll: close race on waiting for sqring entries scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down drm/radeon: Fix encoder->possible_clones drm/vmwgfx: Handle surface check failure correctly drm/amdgpu/swsmu: Only force workload setup on init drm/amdgpu: prevent BO_HANDLES error from being overwritten iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency() iio: light: veml6030: fix ALS sensor resolution iio: light: veml6030: fix IIO device retrieval from embedded device iio: light: opt3001: add missing full-scale range value iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig Bluetooth: Call iso_exit() on module unload Bluetooth: Remove debugfs directory on module init failure Bluetooth: ISO: Fix multiple init when debugfs is disabled Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 xhci: Fix incorrect stream context type macro xhci: Mitigate failed set dequeue pointer commands USB: serial: option: add support for Quectel EG916Q-GL USB: serial: option: add Telit FN920C04 MBIM compositions usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG parport: Proper fix for array out-of-bounds access x86/resctrl: Annotate get_mem_config() functions as __init x86/apic: Always explicitly disarm TSC-deadline timer x86/entry_32: Do not clobber user EFLAGS.ZF x86/entry_32: Clear CPU buffers after register restore in NMI return tty: n_gsm: Fix use-after-free in gsm_cleanup_mux pinctrl: ocelot: fix system hang on level based interrupts pinctrl: apple: check devm_kasprintf() returned value irqchip/gic-v4: Don't allow a VMOVP on a dying VPE irqchip/sifive-plic: Unmask interrupt in plic_irq_enable() tcp: fix mptcp DSS corruption due to large pmtu xmit mptcp: prevent MPC handshake on port-based signal endpoints nilfs2: propagate directory read errors from nilfs_find_entry() powerpc/64: Add big-endian ELFv2 flavour to crypto VMX asm generation ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2 udf: Allocate name buffer in directory iterator on heap udf: Avoid directory type conversion failure due to ENOMEM Linux 6.1.114 Change-Id: I02423f0d3a5feb145be5ce9aacc44ea4675e573b Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |
||
|
Greg Kroah-Hartman
|
edae6e6e3d |
Merge 6.1.113 into android14-6.1-lts
Changes in 6.1.113
EDAC/synopsys: Fix ECC status and IRQ control race condition
EDAC/synopsys: Fix error injection on Zynq UltraScale+
wifi: rtw88: always wait for both firmware loading attempts
crypto: xor - fix template benchmarking
ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
wifi: ath9k: fix parameter check in ath9k_init_debug()
wifi: ath9k: Remove error checks when creating debugfs entries
net: stmmac: dwmac-loongson: Init ref and PTP clocks rate
wifi: rtw88: remove CPT execution branch never used
RISC-V: KVM: Fix sbiret init before forwarding to userspace
fs/namespace: fnic: Switch to use %ptTd
mount: handle OOM on mnt_warn_timestamp_expiry
kselftest/arm64: Don't pass headers to the compiler as source
kselftest/arm64: Verify simultaneous SSVE and ZA context generation
kselftest/arm64: Fix enumeration of systems without 128 bit SME for SSVE+ZA
kselftest/arm64: signal: fix/refactor SVE vector length enumeration
drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
wifi: mac80211: don't use rate mask for offchannel TX either
wifi: iwlwifi: mvm: increase the time between ranging measurements
ACPICA: Implement ACPI_WARNING_ONCE and ACPI_ERROR_ONCE
ACPICA: executer/exsystem: Don't nag user about every Stall() violating the spec
padata: Honor the caller's alignment in case of chunk_size 0
drivers/perf: hisi_pcie: Record hardware counts correctly
kselftest/arm64: Actually test SME vector length changes via sigreturn
can: j1939: use correct function name in comment
ACPI: CPPC: Fix MASK_VAL() usage
netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
netfilter: nf_tables: reject element expiration with no timeout
netfilter: nf_tables: reject expiration higher than timeout
netfilter: nf_tables: remove annotation to access set timeout while holding lock
perf/arm-cmn: Rework DTC counters (again)
perf/arm-cmn: Improve debugfs pretty-printing for large configs
perf/arm-cmn: Refactor node ID handling. Again.
perf/arm-cmn: Ensure dtm_idx is big enough
cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
x86/sgx: Fix deadlock in SGX NUMA node search
crypto: hisilicon/hpre - enable sva error interrupt event
crypto: hisilicon/hpre - mask cluster timeout error
crypto: hisilicon/qm - fix coding style issues
crypto: hisilicon/qm - reset device before enabling it
crypto: hisilicon/qm - inject error before stopping queue
wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
wifi: mt76: mt7915: fix rx filter setting for bfee functionality
wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
sock_map: Add a cond_resched() in sock_hash_free()
can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
can: m_can: Remove repeated check for is_peripheral
can: m_can: enable NAPI before enabling interrupts
can: m_can: m_can_close(): stop clocks after device has been shut down
Bluetooth: btusb: Fix not handling ZPL/short-transfer
bareudp: Pull inner IP header in bareudp_udp_encap_recv().
bareudp: Pull inner IP header on xmit.
net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
r8169: disable ALDPS per default for RTL8125
net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
net: tipc: avoid possible garbage value
ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
nbd: fix race between timeout and normal completion
block, bfq: fix possible UAF for bfqq->bic with merge chain
block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
block, bfq: don't break merge chain in bfq_split_bfqq()
block: print symbolic error name instead of error code
block: fix potential invalid pointer dereference in blk_add_partition
spi: ppc4xx: handle irq_of_parse_and_map() errors
arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
firmware: arm_scmi: Fix double free in OPTEE transport
spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
regulator: Return actual error in of_regulator_bulk_get_all()
arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
ARM: dts: microchip: sama7g5: Fix RTT clock
ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
ARM: versatile: fix OF node leak in CPUs prepare
reset: berlin: fix OF node leak in probe() error path
reset: k210: fix OF node leak in probe() error path
clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
ALSA: hda: cs35l41: fix module autoloading
m68k: Fix kernel_clone_args.flags in m68k_clone()
hwmon: (max16065) Fix overflows seen when writing limits
i2c: Add i2c_get_match_data()
hwmon: (max16065) Remove use of i2c_match_id()
hwmon: (max16065) Fix alarm attributes
mtd: slram: insert break after errors in parsing the map
hwmon: (ntc_thermistor) fix module autoloading
power: supply: axp20x_battery: Remove design from min and max voltage
power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
iommu/amd: Do not set the D bit on AMD v2 table entries
mtd: powernv: Add check devm_kasprintf() returned value
rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
mtd: rawnand: mtk: Fix init error path
pmdomain: core: Harden inter-column space in debug summary
drm/stm: Fix an error handling path in stm_drm_platform_probe()
drm/stm: ltdc: check memory returned by devm_kzalloc()
drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
drm/amdgpu: Replace one-element array with flexible-array member
drm/amdgpu: properly handle vbios fake edid sizing
drm/radeon: Replace one-element array with flexible-array member
drm/radeon: properly handle vbios fake edid sizing
scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
scsi: NCR5380: Check for phase match during PDMA fixup
drm/amd/amdgpu: Properly tune the size of struct
drm/rockchip: vop: Allow 4096px width scaling
drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
jfs: fix out-of-bounds in dbNextAG() and diAlloc()
drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
powerpc/8xx: Fix initial memory mapping
powerpc/8xx: Fix kernel vs user address comparison
drm/msm: Fix incorrect file name output in adreno_request_fw()
drm/msm/a5xx: disable preemption in submits by default
drm/msm/a5xx: properly clear preemption records on resume
drm/msm/a5xx: fix races in preemption evaluation stage
drm/msm/a5xx: workaround early ring-buffer emptiness check
ipmi: docs: don't advertise deprecated sysfs entries
drm/msm: fix %s null argument error
drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
xen: use correct end address of kernel for conflict checking
HID: wacom: Support sequence numbers smaller than 16-bit
HID: wacom: Do not warn about dropped packets for first packet
xen/swiotlb: add alignment check for dma buffers
xen/swiotlb: fix allocated size
tpm: Clean up TPM space after command failure
selftests/bpf: Add selftest deny_namespace to s390x deny list
selftests/bpf: Add tests for _opts variants of bpf_*_get_fd_by_id()
selftests/bpf: Workaround strict bpf_lsm return value check.
selftests/bpf: Use pid_t consistently in test_progs.c
selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
selftests/bpf: Fix missing BUILD_BUG_ON() declaration
selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
selftests/bpf: Fix include of <sys/fcntl.h>
selftests/bpf: Fix compiling kfree_skb.c with musl-libc
selftests/bpf: Fix compiling flow_dissector.c with musl-libc
selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
selftests/bpf: Fix compiling core_reloc.c with musl-libc
selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
selftests/bpf: Fix error compiling test_lru_map.c
selftests/bpf: Fix C++ compile error from missing _Bool type
selftests/bpf: Replace extract_build_id with read_build_id
selftests/bpf: Move test_progs helpers to testing_helpers object
selftests/bpf: Fix compile if backtrace support missing in libc
bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
xz: cleanup CRC32 edits from 2018
kthread: fix task state in kthread worker if being frozen
ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
ext4: avoid buffer_head leak in ext4_mark_inode_used()
ext4: avoid potential buffer_head leak in __ext4_new_inode()
ext4: avoid negative min_clusters in find_group_orlov()
ext4: return error on ext4_find_inline_entry
ext4: avoid OOB when system.data xattr changes underneath the filesystem
nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
nilfs2: determine empty node blocks as corrupted
nilfs2: fix potential oob read in nilfs_btree_check_delete()
bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
perf mem: Free the allocated sort string, fixing a leak
perf inject: Fix leader sampling inserting additional samples
perf sched timehist: Fix missing free of session in perf_sched__timehist()
perf stat: Display iostat headers correctly
perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time
perf time-utils: Fix 32-bit nsec parsing
clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() after error detection
clk: imx: composite-8m: Enable gate clk with mcore_booted
clk: imx: composite-7ulp: Check the PCC present bit
clk: imx: fracn-gppll: support integer pll
clk: imx: fracn-gppll: fix fractional part of PLL getting lost
clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
clk: imx: imx8qxp: Parent should be initialized earlier than the clock
remoteproc: imx_rproc: Correct ddr alias for i.MX8M
remoteproc: imx_rproc: Initialize workqueue earlier
clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
Input: ilitek_ts_i2c - avoid wrong input subsystem sync
Input: ilitek_ts_i2c - add report id message validation
drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
PCI/PM: Increase wait time after resume
PCI/PM: Drop pci_bridge_wait_for_secondary_bus() timeout parameter
PCI: Wait for Link before restoring Downstream Buses
PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
nvdimm: Fix devs leaks in scan_labels()
PCI: xilinx-nwl: Fix register misspelling
PCI: xilinx-nwl: Clean up clock on probe failure/removal
RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
pinctrl: single: fix missing error code in pcs_probe()
RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
clk: ti: dra7-atl: Fix leak of of_nodes
nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
nfsd: fix refcount leak when file is unhashed after being found
pinctrl: mvebu: Use devm_platform_get_and_ioremap_resource()
pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
IB/core: Fix ib_cache_setup_one error flow cleanup
PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
RDMA/erdma: Return QP state in erdma_query_qp
watchdog: imx_sc_wdt: Don't disable WDT in suspend
RDMA/hns: Don't modify rq next block addr in HIP09 QPC
RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
RDMA/hns: Optimize hem allocation performance
riscv: Fix fp alignment bug in perf_callchain_user()
RDMA/cxgb4: Added NULL check for lookup_atid
RDMA/irdma: fix error message in irdma_modify_qp_roce()
ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
ntb_perf: Fix printk format
ntb: Force physically contiguous allocation of rx ring buffers
nfsd: call cache_put if xdr_reserve_space returns NULL
nfsd: return -EINVAL when namelen is 0
f2fs: fix to update i_ctime in __f2fs_setxattr()
f2fs: remove unneeded check condition in __f2fs_setxattr()
f2fs: reduce expensive checkpoint trigger frequency
f2fs: factor the read/write tracing logic into a helper
f2fs: fix to avoid racing in between read and OPU dio write
f2fs: fix to wait page writeback before setting gcing flag
f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
f2fs: clean up w/ dotdot_name
f2fs: get rid of online repaire on corrupted directory
spi: atmel-quadspi: Undo runtime PM changes at driver exit time
spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
lib/sbitmap: define swap_lock as raw_spinlock_t
nvme-multipath: system fails to create generic nvme device
iio: adc: ad7606: fix oversampling gpio array
iio: adc: ad7606: fix standby gpio state to match the documentation
ABI: testing: fix admv8818 attr description
iio: chemical: bme680: Fix read/write ops to device by adding mutexes
iio: magnetometer: ak8975: Convert enum->pointer for data in the match tables
iio: magnetometer: ak8975: drop incorrect AK09116 compatible
dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
coresight: tmc: sg: Do not leak sg_table
cxl/pci: Break out range register decoding from cxl_hdm_decode_init()
cxl/pci: Fix to record only non-zero ranges
vdpa: Add eventfd for the vdpa callback
vhost_vdpa: assign irq bypass producer token correctly
ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
Revert "dm: requeue IO if mapping table not yet available"
net: xilinx: axienet: Schedule NAPI in two steps
net: xilinx: axienet: Fix packet counting
netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
tcp: check skb is non-NULL in tcp_rto_delta_us()
net: qrtr: Update packets cloning when broadcasting
bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
io_uring/sqpoll: do not allow pinning outside of cpuset
drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
io_uring/io-wq: do not allow pinning outside of cpuset
io_uring/io-wq: inherit cpuset of cgroup in io worker
vfio/pci: fix potential memory leak in vfio_intx_enable()
selinux,smack: don't bypass permissions check in inode_setsecctx hook
drm/vmwgfx: Prevent unmapping active read buffers
io_uring/sqpoll: retain test for whether the CPU is valid
io_uring/sqpoll: do not put cpumask on stack
Remove *.orig pattern from .gitignore
PCI: imx6: Fix missing call to phy_power_off() in error handling
PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
soc: versatile: integrator: fix OF node leak in probe() error path
Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
Input: adp5588-keys - fix check on return code
Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
drm/amd/display: Skip Recompute DSC Params if no Stream on Link
drm/amd/display: Round calculated vtotal
drm/amd/display: Validate backlight caps are sane
KEYS: prevent NULL pointer dereference in find_asymmetric_key()
fs: Create a generic is_dot_dotdot() utility
ksmbd: make __dir_empty() compatible with POSIX
ksmbd: allow write with FILE_APPEND_DATA
ksmbd: handle caseless file creation
scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
scsi: mac_scsi: Refactor polling loop
scsi: mac_scsi: Disallow bus errors during PDMA send
usbnet: fix cyclical race on disconnect with work queue
arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
USB: appledisplay: close race between probe and completion handler
USB: misc: cypress_cy7c63: check for short transfer
USB: class: CDC-ACM: fix race between get_serial and set_serial
usb: cdnsp: Fix incorrect usb_request status
usb: dwc2: drd: fix clock gating on USB role switch
bus: integrator-lm: fix OF node leak in probe()
bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
firmware_loader: Block path traversal
tty: rp2: Fix reset with non forgiving PCIe host bridges
xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
drbd: Fix atomicity violation in drbd_uuid_set_bm()
drbd: Add NULL check for net_conf to prevent dereference in state validation
ACPI: sysfs: validate return type of _STR method
ACPI: resource: Add another DMI match for the TongFang GMxXGxx
efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
perf/x86/intel/pt: Fix sampling synchronization
wifi: rtw88: 8822c: Fix reported RX band width
wifi: mt76: mt7615: check devm_kasprintf() returned value
debugobjects: Fix conditions in fill_pool()
f2fs: fix several potential integer overflows in file offsets
f2fs: prevent possible int overflow in dir_block_index()
f2fs: avoid potential int overflow in sanity_check_area_boundary()
f2fs: fix to check atomic_file in f2fs ioctl interfaces
hwrng: mtk - Use devm_pm_runtime_enable
hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
vfs: fix race between evice_inodes() and find_inode()&iput()
fs: Fix file_set_fowner LSM hook inconsistencies
nfs: fix memory leak in error path of nfs4_do_reclaim
EDAC/igen6: Fix conversion of system address to physical memory address
padata: use integer wrap around to prevent deadlock on seq_nr overflow
soc: versatile: realview: fix memory leak during device remove
soc: versatile: realview: fix soc_dev leak during device remove
powerpc/64: Option to build big-endian with ELFv2 ABI
powerpc/64: Add support to build with prefixed instructions
powerpc/atomic: Use YZ constraints for DS-form instructions
usb: yurex: Replace snprintf() with the safer scnprintf() variant
USB: misc: yurex: fix race between read and write
xhci: fix event ring segment table related masks and variables in header
xhci: remove xhci_test_trb_in_td_math early development check
xhci: Refactor interrupter code for initial multi interrupter support.
xhci: Preserve RsvdP bits in ERSTBA register correctly
xhci: Add a quirk for writing ERST in high-low order
usb: xhci: fix loss of data on Cadence xHC
pps: remove usage of the deprecated ida_simple_xx() API
pps: add an error check in parport_attach
x86/idtentry: Incorporate definitions/declarations of the FRED entries
x86/entry: Remove unwanted instrumentation in common_interrupt()
mm/filemap: return early if failed to allocate memory for split
lib/xarray: introduce a new helper xas_get_order
mm/filemap: optimize filemap folio adding
icmp: Add counters for rate limits
icmp: change the order of rate limits
bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
lockdep: fix deadlock issue between lockdep and rcu
mm: only enforce minimum stack gap size if it's sensible
module: Fix KCOV-ignored file name
mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu read lock
i2c: aspeed: Update the stop sw state when the bus recovery occurs
i2c: isch: Add missed 'else'
usb: yurex: Fix inconsistent locking bug in yurex_read()
perf/arm-cmn: Fail DTC counter allocation correctly
iio: magnetometer: ak8975: Fix 'Unexpected device' error
powerpc: Allow CONFIG_PPC64_BIG_ENDIAN_ELF_ABI_V2 with ld.lld 15+
PCI/PM: Mark devices disconnected if upstream PCIe link is down on resume
x86/tdx: Fix "in-kernel MMIO" check
wifi: mt76: do not run mt76_unregister_device() on unregistered hw
static_call: Handle module init failure correctly in static_call_del_module()
static_call: Replace pointless WARN_ON() in static_call_module_notify()
jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
jump_label: Fix static_key_slow_dec() yet again
scsi: pm8001: Do not overwrite PCI queue mapping
mailbox: rockchip: fix a typo in module autoloading
mailbox: bcm2835: Fix timeout during suspend mode
ceph: remove the incorrect Fw reference check when dirtying pages
ieee802154: Fix build error
net: sparx5: Fix invalid timestamps
net/mlx5: Fix error path in multi-packet WQE transmit
net/mlx5: Added cond_resched() to crdump collection
net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
selftests: netfilter: Fix nft_audit.sh for newer nft binaries
netfilter: nf_tables: prevent nf_skb_duplicated corruption
Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
net: ethernet: lantiq_etop: fix memory disclosure
net: avoid potential underflow in qdisc_pkt_len_init() with UFO
net: add more sanity checks to qdisc_pkt_len_init()
net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
ppp: do not assume bh is held in ppp_channel_bridge_input()
fsdax,xfs: port unshare to fsdax
iomap: constrain the file range passed to iomap_file_unshare
sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
i2c: xiic: improve error message when transfer fails to start
i2c: xiic: Try re-initialization on bus busy timeout
loop: don't set QUEUE_FLAG_NOMERGES
Bluetooth: hci_sock: Fix not validating setsockopt user input
media: usbtv: Remove useless locks in usbtv_video_free()
ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized
ALSA: mixer_oss: Remove some incorrect kfree_const() usages
ALSA: hda/realtek: Fix the push button function for the ALC257
ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
f2fs: Require FMODE_WRITE for atomic write ioctls
wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
wifi: iwlwifi: mvm: Fix a race in scan abort flow
wifi: cfg80211: Set correct chandef when starting CAC
net/xen-netback: prevent UAF in xenvif_flush_hash()
net: hisilicon: hip04: fix OF node leak in probe()
net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
net: hisilicon: hns_mdio: fix OF node leak in probe()
ACPI: PAD: fix crash in exit_round_robin()
ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
net: sched: consistently use rcu_replace_pointer() in taprio_change()
Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
blk_iocost: fix more out of bound shifts
nvme-pci: qdepth 1 quirk
wifi: ath11k: fix array out-of-bound access in SoC stats
wifi: rtw88: select WANT_DEV_COREDUMP
ACPI: EC: Do not release locks during operation region accesses
ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
tipc: guard against string buffer overrun
net: mvpp2: Increase size of queue_name buffer
bnxt_en: Extend maximum length of version string by 1 byte
ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
wifi: rtw89: correct base HT rate mask for firmware
ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
net: atlantic: Avoid warning about potential string truncation
crypto: simd - Do not call crypto_alloc_tfm during registration
tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
wifi: mac80211: fix RCU list iterations
ACPICA: iasl: handle empty connection_node
proc: add config & param to block forcing mem writes
wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
nfp: Use IRQF_NO_AUTOEN flag in request_irq()
ALSA: usb-audio: Add input value sanity checks for standard types
x86/ioapic: Handle allocation failures gracefully
ALSA: usb-audio: Define macros for quirk table entries
ALSA: usb-audio: Replace complex quirk lines with macros
ALSA: usb-audio: Add logitech Audio profile quirk
ASoC: codecs: wsa883x: Handle reading version failure
tools/x86/kcpuid: Protect against faulty "max subleaf" values
x86/kexec: Add EFI config table identity mapping for kexec kernel
ALSA: asihpi: Fix potential OOB array access
ALSA: hdsp: Break infinite MIDI input flush loop
selftests/nolibc: avoid passing NULL to printf("%s")
x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
fbdev: pxafb: Fix possible use after free in pxafb_task()
rcuscale: Provide clear error when async specified without primitives
iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
power: reset: brcmstb: Do not go into infinite loop if reset fails
iommu/vt-d: Always reserve a domain ID for identity setup
iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
drm/stm: Avoid use-after-free issues with crtc and plane
drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
ata: pata_serverworks: Do not use the term blacklist
ata: sata_sil: Rename sil_blacklist to sil_quirks
drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
drm/amd/display: Check null pointers before using dc->clk_mgr
drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)
jfs: UBSAN: shift-out-of-bounds in dbFindBits
jfs: Fix uaf in dbFreeBits
jfs: check if leafidx greater than num leaves per dmap tree
scsi: smartpqi: correct stream detection
jfs: Fix uninit-value access of new_ea in ea_buffer
drm/amdgpu: add raven1 gfxoff quirk
drm/amdgpu: enable gfxoff quirk on HP 705G4
drm/amdkfd: Fix resource leak in criu restore queue
HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
platform/x86: touchscreen_dmi: add nanote-next quirk
drm/stm: ltdc: reset plane transparency after plane disable
drm/amd/display: Check stream before comparing them
drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
drm/amd/display: Fix index out of bounds in degamma hardware format translation
drm/amd/display: Fix index out of bounds in DCN30 color transformation
drm/amd/display: Initialize get_bytes_per_element's default to 1
drm/printer: Allow NULL data in devcoredump printer
perf,x86: avoid missing caller address in stack traces captured in uprobe
scsi: aacraid: Rearrange order of struct aac_srb_unit
scsi: lpfc: Update PRLO handling in direct attached topology
drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
drm/amd/pm: ensure the fw_info is not null before using it
of/irq: Refer to actual buffer size in of_irq_parse_one()
powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
ext4: ext4_search_dir should return a proper error
ext4: avoid use-after-free in ext4_ext_show_leaf()
ext4: fix i_data_sem unlock order in ext4_ind_migrate()
iomap: handle a post-direct I/O invalidate race in iomap_write_delalloc_release
blk-integrity: use sysfs_emit
blk-integrity: convert to struct device_attribute
blk-integrity: register sysfs attributes on struct device
spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
spi: s3c64xx: fix timeout counters in flush_fifo
selftests: breakpoints: use remaining time to check if suspend succeed
selftests: vDSO: fix vDSO name for powerpc
selftests: vDSO: fix vdso_config for powerpc
selftests: vDSO: fix vDSO symbols lookup for powerpc64
selftests/mm: fix charge_reserved_hugetlb.sh test
powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
selftests: vDSO: fix ELF hash table entry size for s390x
selftests: vDSO: fix vdso_config for s390
Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
i2c: xiic: Wait for TX empty to avoid missed TX NAKs
media: i2c: ar0521: Use cansleep version of gpiod_set_value()
firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
spi: bcm63xx: Fix module autoloading
power: supply: hwmon: Fix missing temp1_max_alarm attribute
perf/core: Fix small negative period being ignored
parisc: Fix itlb miss handler for 64-bit programs
drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
ALSA: core: add isascii() check to card ID generator
ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
ALSA: usb-audio: Add native DSD support for Luxman D-08u
ALSA: line6: add hw monitor volume control to POD HD500X
ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
ext4: no need to continue when the number of entries is 1
ext4: correct encrypted dentry name hash when not casefolded
ext4: fix slab-use-after-free in ext4_split_extent_at()
ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
ext4: dax: fix overflowing extents beyond inode size when partially writing
ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
ext4: aovid use-after-free in ext4_ext_insert_extent()
ext4: fix double brelse() the buffer of the extents path
ext4: update orig_path in ext4_find_extent()
ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
ext4: fix fast commit inode enqueueing during a full journal commit
ext4: use handle to mark fc as ineligible in __track_dentry_update()
ext4: mark fc as ineligible using an handle in ext4_xattr_set()
parisc: Fix 64-bit userspace syscall path
parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
drm/rockchip: vop: clear DMA stop bit on RK3066
of/irq: Support #msi-cells=<0> in of_msi_get_domain
drm: omapdrm: Add missing check for alloc_ordered_workqueue
resource: fix region_intersects() vs add_memory_driver_managed()
jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
mm: krealloc: consider spare memory for __GFP_ZERO
ocfs2: fix the la space leak when unmounting an ocfs2 volume
ocfs2: fix uninit-value in ocfs2_get_block()
ocfs2: reserve space for inline xattr before attaching reflink tree
ocfs2: cancel dqi_sync_work before freeing oinfo
ocfs2: remove unreasonable unlock in ocfs2_read_blocks
ocfs2: fix null-ptr-deref when journal load failed.
ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
riscv: define ILLEGAL_POINTER_VALUE for 64bit
exfat: fix memory leak in exfat_load_bitmap()
perf hist: Update hist symbol when updating maps
nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
nfsd: map the EBADMSG to nfserr_io to avoid warning
NFSD: Fix NFSv4's PUTPUBFH operation
aoe: fix the potential use-after-free problem in more places
clk: rockchip: fix error for unknown clocks
remoteproc: k3-r5: Fix error handling when power-up failed
clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
media: sun4i_csi: Implement link validate for sun4i_csi subdev
clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
clk: qcom: clk-rpmh: Fix overflow in BCM vote
clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
media: venus: fix use after free bug in venus_remove due to race condition
clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
media: qcom: camss: Fix ordering of pm_runtime_enable
clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
smb: client: use actual path when queryfs
iio: magnetometer: ak8975: Fix reading for ak099xx sensors
gso: fix udp gso fraglist segmentation after pull from frag_list
tomoyo: fallback to realpath if symlink's pathname does not exist
net: stmmac: Fix zero-division error when disabling tc cbs
rtc: at91sam9: fix OF node leak in probe() error path
Input: adp5589-keys - fix NULL pointer dereference
Input: adp5589-keys - fix adp5589_gpio_get_value()
cachefiles: fix dentry leak in cachefiles_open_file()
ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
btrfs: send: fix invalid clone operation for file that got its size decreased
btrfs: wait for fixup workers before stopping cleaner kthread during umount
gpio: davinci: fix lazy disable
Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
ceph: fix cap ref leak via netfs init_request
tracing/hwlat: Fix a race during cpuhp processing
tracing/timerlat: Fix a race during cpuhp processing
close_range(): fix the logics in descriptor table trimming
drm/i915/gem: fix bitwise and logical AND mixup
drm/sched: Add locking to drm_sched_entity_modify_sched
drm/amd/display: Fix system hang while resume with TBT monitor
cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
kconfig: qconf: fix buffer overflow in debug links
i2c: create debugfs entry per adapter
i2c: core: Lock address during client device instantiation
i2c: xiic: Use devm_clk_get_enabled()
i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
dt-bindings: clock: exynos7885: Fix duplicated binding
spi: bcm63xx: Fix missing pm_runtime_disable()
arm64: Add Cortex-715 CPU part definition
arm64: cputype: Add Neoverse-N3 definitions
arm64: errata: Expand speculative SSBS workaround once more
io_uring/net: harden multishot termination case for recv
uprobes: fix kernel info leak via "[uprobes]" vma
mm: z3fold: deprecate CONFIG_Z3FOLD
drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
build-id: require program headers to be right after ELF header
lib/buildid: harden build ID parsing logic
docs/zh_CN: Update the translation of delay-accounting to 6.1-rc8
delayacct: improve the average delay precision of getdelay tool to microsecond
sched: psi: fix bogus pressure spikes from aggregation race
media: i2c: imx335: Enable regulator supplies
media: imx335: Fix reset-gpio handling
remoteproc: k3-r5: Acquire mailbox handle during probe routine
remoteproc: k3-r5: Delay notification of wakeup event
dt-bindings: clock: qcom: Add missing UFS QREF clocks
dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
clk: samsung: exynos7885: do not define number of clocks in bindings
clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
r8169: add tally counter fields added with RTL8125
clk: qcom: gcc-sc8180x: Add GPLL9 support
ACPI: battery: Simplify battery hook locking
ACPI: battery: Fix possible crash when unregistering a battery hook
Revert "arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings"
erofs: get rid of erofs_inode_datablocks()
erofs: get rid of z_erofs_do_map_blocks() forward declaration
erofs: avoid hardcoded blocksize for subpage block support
erofs: set block size to the on-disk block size
erofs: fix incorrect symlink detection in fast symlink
vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
perf report: Fix segfault when 'sym' sort key is not used
fsdax: dax_unshare_iter() should return a valid length
fsdax: unshare: zero destination if srcmap is HOLE or UNWRITTEN
unicode: Don't special case ignorable code points
net: ethernet: cortina: Drop TSO support
tracing: Remove precision vsnprintf() check from print event
ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks table
ALSA: hda/realtek: cs35l41: Fix device ID / model name
drm/crtc: fix uninitialized variable use even harder
tracing: Have saved_cmdlines arrays all in one allocation
bootconfig: Fix the kerneldoc of _xbc_exit()
perf lock: Dynamically allocate lockhash_table
perf sched: Avoid large stack allocations
perf sched: Move start_work_mutex and work_done_wait_mutex initialization to perf_sched__replay()
perf sched: Fix memory leak in perf_sched__map()
perf sched: Move curr_thread initialization to perf_sched__map()
perf sched: Move curr_pid and cpu_last_switched initialization to perf_sched__{lat|map|replay}()
libsubcmd: Don't free the usage string
selftests: net: Remove executable bits from library scripts
Bluetooth: Fix usage of __hci_cmd_sync_status
fs/ntfs3: Do not call file_modified if collapse range failed
fs/ntfs3: Fix sparse warning in ni_fiemap
fs/ntfs3: Refactor enum_rstbl to suppress static checker
virtio_console: fix misc probe bugs
Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
bpf: Check percpu map value size first
s390/facility: Disable compile time optimization for decompressor code
s390/mm: Add cond_resched() to cmm_alloc/free_pages()
bpf, x64: Fix a jit convergence issue
ext4: don't set SB_RDONLY after filesystem errors
ext4: nested locking for xattr inode
s390/cpum_sf: Remove WARN_ON_ONCE statements
ktest.pl: Avoid false positives with grub2 skip regex
RDMA/mad: Improve handling of timed out WRs of mad agent
PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
RDMA/rtrs-srv: Avoid null pointer deref during path establishment
clk: bcm: bcm53573: fix OF node leak in init
PCI: Add ACS quirk for Qualcomm SA8775P
i2c: i801: Use a different adapter-name for IDF adapters
PCI: Mark Creative Labs EMU20k2 INTx masking as broken
RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
io_uring: check if we need to reschedule during overflow flush
ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 unknown
media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
usb: chipidea: udc: enable suspend interrupt after usb reset
usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
comedi: ni_routing: tools: Check when the file could not be opened
LoongArch: Fix memleak in pci_acpi_scan_root()
netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
virtio_pmem: Check device status before requesting flush
tools/iio: Add memory allocation failure check for trigger_name
staging: vme_user: added bound check to geoid
driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd()
scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance
drm/amd/display: Check null pointer before dereferencing se
fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
fbdev: sisfb: Fix strbuf array overflow
drm/rockchip: vop: limit maximum resolution to hardware capabilities
drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
NFSD: Mark filecache "down" if init fails
ice: fix VLAN replay after reset
SUNRPC: Fix integer overflow in decode_rc_list()
NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
net: phy: dp83869: fix memory corruption when enabling fiber
tcp: fix to allow timestamp undo if no retransmits were sent
tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
netfilter: br_netfilter: fix panic with metadata_dst skb
selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test
Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
net: phy: bcm84881: Fix some error handling paths
thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
thermal: intel: int340x: processor: Fix warning during module unload
Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
net: ethernet: adi: adin1110: Fix some error handling path in adin1110_read_fifo()
net: dsa: b53: fix jumbo frame mtu check
net: dsa: b53: fix max MTU for 1g switches
net: dsa: b53: fix max MTU for BCM5325/BCM5365
net: dsa: b53: allow lower MTUs on BCM5325/5365
net: dsa: b53: fix jumbo frames on 10/100 ports
gpio: aspeed: Add the flush write to ensure the write complete.
gpio: aspeed: Use devm_clk api to manage clock source
ice: Fix netif_is_ice() in Safe Mode
i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
igb: Do not bring the device up after non-fatal error
net/sched: accept TCA_STAB only for root qdisc
net: ibm: emac: mal: fix wrong goto
btrfs: zoned: fix missing RCU locking in error message when loading zone info
sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
netfilter: xtables: avoid NFPROTO_UNSPEC where needed
netfilter: fib: check correct rtable in vrf setups
net: ibm/emac: allocate dummy net_device dynamically
net: ibm: emac: mal: add dcr_unmap to _remove
rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
vxlan: Handle error of rtnl_register_module().
mctp: Handle error of rtnl_register_module().
ppp: fix ppp_async_encode() illegal access
slip: make slhc_remember() more robust against malicious packets
rust: macros: provide correct provenance when constructing THIS_MODULE
HID: multitouch: Add support for lenovo Y9000P Touchpad
net/mlx5: Always drain health in shutdown callback
wifi: mac80211: Avoid address calculations via out of bounds array indexing
hwmon: (tmp513) Add missing dependency on REGMAP_I2C
hwmon: (adm9240) Add missing dependency on REGMAP_I2C
hwmon: (adt7470) Add missing dependency on REGMAP_I2C
Revert "net: ibm/emac: allocate dummy net_device dynamically"
HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
HID: plantronics: Workaround for an unexcepted opposite volume key
Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
usb: dwc3: core: Stop processing of pending events if controller is halted
usb: xhci: Fix problem with xhci resume from suspend
usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
usb: gadget: core: force synchronous registration
hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
drm/v3d: Stop the active perfmon before being destroyed
drm/vc4: Stop the active perfmon before being destroyed
scsi: wd33c93: Don't use stale scsi_pointer value
mptcp: fallback when MPTCP opts are dropped after 1st data
ata: libata: avoid superfluous disk spin down + spin up during hibernation
net: explicitly clear the sk pointer, when pf->create fails
net: Fix an unsafe loop on the list
net: dsa: lan9303: ensure chip reset and wait for READY status
mptcp: handle consistently DSS corruption
mptcp: pm: do not remove closing subflows
device-dax: correct pgoff align in dax_set_mapping()
nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
kthread: unpark only parked kthread
secretmem: disable memfd_secret() if arch cannot set direct map
net: ethernet: cortina: Restore TSO support
perf lock: Don't pass an ERR_PTR() directly to perf_session__delete()
block, bfq: fix uaf for accessing waker_bfqq after splitting
Revert "iommu/vt-d: Retrieve IOMMU perfmon capability information"
Linux 6.1.113
Change-Id: Ibad3f07882dd1e60de8b7af941df9e1d887f588f
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
|
||
|
Pablo Neira Ayuso
|
70c5eb7f38 |
UPSTREAM: netfilter: xtables: fix typo causing some targets not to load on IPv6
[ Upstream commit 306ed1728e8438caed30332e1ab46b28c25fe3d8 ]
- There is no NFPROTO_IPV6 family for mark and NFLOG.
- TRACE is also missing module autoload with NFPROTO_IPV6.
This results in ip6tables failing to restore a ruleset. This issue has been
reported by several users providing incomplete patches.
Very similar to Ilya Katsnelson's patch including a missing chunk in the
TRACE extension.
Fixes: 0bfcb7b71e73 ("netfilter: xtables: avoid NFPROTO_UNSPEC where needed")
Reported-by: Ignat Korchagin <ignat@cloudflare.com>
Reported-by: Ilya Katsnelson <me@0upti.me>
Reported-by: Krzysztof Olędzki <ole@ans.pl>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
(cherry picked from commit
|
||
|
Greg Kroah-Hartman
|
ca877f130b |
Merge 8f5ad212f4 ("net: ibm: emac: mal: add dcr_unmap to _remove") into android14-6.1
Steps on the way to 6.1.113 Change-Id: I03a621f712ea5dbe45be6ab423169708b32cb6c0 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> |