Files
linux/include/uapi
Greg Kroah-Hartman 5f12c91ab0 Merge tag 'android14-5.15.148_r00' into android14-5.15
This merges up to the 5.15.148 LTS release into the android14-5.15
branch.  Included in here are the following commits:

*   30f4052325 Merge "Merge branch 'android14-5.15' into branch 'android14-5.15-lts'" into android14-5.15-lts
|\
| * 2e2880028c Merge branch 'android14-5.15' into branch 'android14-5.15-lts'
* | abe9e11e84 UPSTREAM: drm/msm/dsi: Enable runtime PM
* | 6205c3735f UPSTREAM: PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
|/
*   c169b3e6e4 Merge 5.15.148 into android14-5.15-lts
|\
| * 6139f2a02f Linux 5.15.148
| * 84c39986fe Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
| * c8483a4845 arm64: dts: armada-3720-turris-mox: set irq type for RTC
| * 98052220f1 netfilter: nft_quota: copy content when cloning expression
| * 3be3c61232 netfilter: nft_last: copy content when cloning expression
| * 42d4617848 netfilter: nft_limit: Clone packet limits' cost value
| * d808805851 netfilter: nft_limit: fix stateful object memory leak
| * e562d84225 netfilter: nft_connlimit: memleak if nf_ct_netns_get() fails
| * 10823cfe8e netfilter: nf_tables: typo NULL check in _clone() function
| * 0f2dca5165 block: Remove special-casing of compound pages
| * 08bf561118 i2c: s3c24xx: fix transferring more than one message in polling mode
| * 38ce342a19 i2c: s3c24xx: fix read transfers in polling mode
| * 62b3387bee ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work
| * 58485b95fd selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes
| * 348112522a mlxsw: spectrum_acl_tcam: Fix stack corruption
| * 005f2d10f9 mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
| * 077c4776d7 mlxsw: spectrum_acl_tcam: Make fini symmetric to init
| * d28048d319 mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
| * 196f3595e8 mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
| * 87c5403393 mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
| * 3732db294e ethtool: netlink: Add missing ethnl_ops_begin/complete
| * 7f3d781e0d kdb: Fix a potential buffer overflow in kdb_local()
| * 995d6099d8 ipvs: avoid stat macros calls from preemptible context
| * 27513eff4c netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description
| * d6420b66ad netfilter: nf_tables: skip dead set elements in netlink dump
| * 77be8c495a netfilter: nf_tables: do not allow mismatch field size and set key length
| * b8eb65bd13 netfilter: nft_limit: do not ignore unsupported flags
| * d7b5da4fde netfilter: nf_tables: memcg accounting for dynamically allocated objects
| * 3bb4403d20 netfilter: nft_limit: move stateful fields out of expression data
| * 8a6635074a netfilter: nft_limit: rename stateful structure
| * e2e8fdd0ad netfilter: nft_quota: move stateful fields out of expression data
| * b147911d2a netfilter: nft_last: move stateful fields out of expression data
| * 36997eb13d netfilter: nft_connlimit: move stateful fields out of expression data
| * 713a138855 netfilter: nf_tables: reject invalid set policy
| * 78e8546646 net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe
| * 29ffa63f21 bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
| * 684290895a net: stmmac: ethtool: Fixed calltrace caused by unbalanced disable_irq_wake calls
| * 8e481c7f81 net: ravb: Fix dma_addr_t truncation in error case
| * f05301ad05 mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req()
| * 413b913507 mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
| * 9b82d5f5d0 mptcp: strict validation before using mp_opt->hmac
| * c99f490a42 mptcp: drop unused sk in mptcp_get_options
| * cbe983d0e4 mptcp: mptcp_parse_option() fix for MPTCPOPT_MP_JOIN
| * 4f2c4ba321 net: phy: micrel: populate .soft_reset for KSZ9131
| * 890bc96ef1 net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames
| * 3b52548622 net: qualcomm: rmnet: fix global oob in rmnet_policy
| * 18babcfa36 s390/pci: fix max size calculation in zpci_memcpy_toio()
| * bf3304054e PCI: keystone: Fix race condition when initializing PHYs
| * a300f741f6 nvmet-tcp: Fix the H2C expected PDU len calculation
| * b02a005b19 nvmet: re-fix tracing strncpy() warning
| * 763c67e96b serial: imx: Correct clock error message in function probe()
| * 1ed3c20205 usb: xhci-mtk: fix a short packet issue of gen1 isoc-in transfer
| * 0a12db736e apparmor: avoid crash when parsed profile name is empty
| * 367d061a18 perf env: Avoid recursively taking env->bpf_progs.lock
| * 0613a2fbdf nvmet-tcp: fix a crash in nvmet_req_complete()
| * 4cb3cf7177 nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
| * 013d7878c7 usb: cdc-acm: return correct error code on unsupported break
| * c50f88954c tty: use 'if' in send_break() instead of 'goto'
| * a222bd01ca tty: don't check for signal_pending() in send_break()
| * 370b18aefe tty: early return from send_break() on TTY_DRIVER_HARDWARE_BREAK
| * 6f98751fa4 tty: change tty_write_lock()'s ndelay parameter to bool
| * 7ab8ef24fd perf genelf: Set ELF program header addresses properly
| * 08715e4fa5 iio: adc: ad9467: fix scale setting
| * d7773702f8 iio: adc: ad9467: don't ignore error codes
| * fd1957c706 iio: adc: ad9467: fix reset gpio handling
| * 71204292a7 iio: adc: ad9467: Benefit from devm_clk_get_enabled() to simplify
| * fbcc37f4b4 selftests/sgx: Skip non X86_64 platform
| * 71005a1d9b selftests/sgx: Fix uninitialized pointer dereference in error path
| * ff168d4fdb serial: imx: fix tx statemachine deadlock
| * 714778c299 software node: Let args be NULL in software_node_get_reference_args
| * c203812b4e libapi: Add missing linux/types.h header to get the __u64 type on io.h
| * 828cd82948 serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed
| * 96d289b57d power: supply: bq256xx: fix some problem in bq256xx_hw_init
| * 435671571e power: supply: cw2015: correct time_to_empty units in sysfs
| * 07733ca556 MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup()
| * 4590f46c15 MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup()
| * c1669b54c3 riscv: Fix module_alloc() that did not reset the linear mapping permissions
| * 938f70d146 riscv: Check if the code to patch lies in the exit section
| * 8e0935435b mips: Fix incorrect max_low_pfn adjustment
| * 4b88c9c83f mips: dmi: Fix early remap on MIPS32
| * d1c8c7ef39 mfd: intel-lpss: Fix the fractional clock divider flags
| * 6109ff5ad5 leds: aw2013: Select missing dependency REGMAP_I2C
| * c3e3a2144b mfd: syscon: Fix null pointer dereference in of_syscon_register()
| * a004323a38 ARM: 9330/1: davinci: also select PINCTRL
| * 77c20b4cbc iommu/dma: Trace bounce buffer usage when mapping buffers
| * fc7c3be665 serial: sc16is7xx: set safe default SPI clock frequency
| * 160ef3fc35 serial: sc16is7xx: add check for unsupported SPI modes during probe
| * b1effdda4f HID: wacom: Correct behavior when processing some confidence == false touches
| * 400ad6fe24 iio: adc: ad7091r: Pass iio_dev to event handler
| * 12c2759ab1 KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
| * d99976d145 KVM: arm64: vgic-v4: Restore pending state on host userspace write
| * 9bd4c6e658 x86/kvm: Do not try to disable kvmclock if it was not enabled
| * a4563156c3 PCI: mediatek: Clear interrupt status before dispatching handler
| * 0f59d3772a PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
| * 25aab84f1a wifi: mwifiex: configure BSSID consistently when starting AP
| * a61373d32c wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors
| * 1f0b697913 wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code
| * 5600943b0c wifi: mt76: fix broken precal loading from MTD for mt7915
| * 4124a004d5 iommu/arm-smmu-qcom: Add missing GMU entry to match table
| * a7b98aa10f bpf: Fix re-attachment branch in bpf_tracing_prog_attach
| * 4c71c01df8 Bluetooth: Fix atomicity violation in {min,max}_key_size_set
| * 27e58d3b52 rootfs: Fix support for rootfstype= when root= is given
| * 79ea1c6f06 io_uring/rw: ensure io->bytes_done is always initialized
| * 801c8adb85 pwm: jz4740: Don't use dev_err_probe() in .request()
| * c9ed30eea4 netfilter: nf_tables: check if catch-all set element is active in next generation
| * 5010c27120 block: add check that partition length needs to be aligned with block size
| * 6a73c9fdb7 scsi: mpi3mr: Refresh sdev queue depth after controller reset
| * 610ca0cadb fbdev: flush deferred work in fb_deferred_io_fsync()
| * cb32c0e1bd ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx
| * d37d61c077 ALSA: oxygen: Fix right channel of capture volume mixer
| * 314cf7c2dd serial: imx: Ensure that imx_uart_rs485_config() is called with enabled clock
| * ac0c3a2fe7 usb: mon: Fix atomicity violation in mon_bin_vma_fault
| * d7ce8ebd50 usb: typec: class: fix typec_altmode_put_partner to put plugs
| * 4212a9ff65 Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs"
| * 2c64904a0e usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
| * e1b3be9bab usb: cdns3: fix iso transfer error when mult is not zero
| * 9cdf2c9159 usb: cdns3: fix uvc failure work since sg support enabled
| * 2e349cf0d0 usb: chipidea: wait controller resume finished for wakeup irq
| * 295b4fa321 Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-only"
| * 4f5a109b8f Revert "usb: dwc3: Soft reset phy on probe for host"
| * ea968824c4 usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart
| * e3e35301f1 usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host()
| * 41e05f246f tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug
| * 98fee5bee9 binder: fix race between mmput() and do_exit()
| * e03023fcdb xen-netback: don't produce zero-size SKB frags
| * 409c30ff6c virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session()
| * f97f612864 dma-mapping: Fix build error unused-value
| * 72d29dcdf5 Input: atkbd - use ab83 as id when skipping the getid command
| * 9c1fa9eedc binder: fix unused alloc->free_async_space
| * c44b276bc1 binder: fix async space check for 0-sized buffers
| * 0921867f77 keys, dns: Fix size check of V1 server-list header
| * 10193a5001 selftests/bpf: Add assert for user stacks in test_task_stack
| * cc9c60b253 of: unittest: Fix of_count_phandle_with_args() expected value message
| * 4541004084 of: Fix double free in of_parse_phandle_with_args_map
| * 83f5d6c1ef ksmbd: validate the zero field of packet header
| * 4af4674158 drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init
| * bf1acc6258 IB/iser: Prevent invalidating wrong MR
| * 106136f209 mmc: sdhci_omap: Fix TI SoC dependencies
| * da9eae2c1a mmc: sdhci_am654: Fix TI SoC dependencies
| * e517645ead ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
| * 3a09488f4f ALSA: scarlett2: Add missing error checks to *_ctl_get()
| * 12023666f2 ALSA: scarlett2: Allow passing any output to line_out_remap()
| * 51d5697e1c ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config()
| * 0ba9386e19 ALSA: scarlett2: Add missing error check to scarlett2_config_save()
| * c60490b817 ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[]
| * cf55afb5a5 pwm: stm32: Fix enable count for clk in .probe()
| * df19bf4044 pwm: stm32: Use hweight32 in stm32_pwm_detect_channels
| * c82c21e7d9 pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable
| * fa019c01db clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw
| * 256d1232c8 clk: fixed-rate: add devm_clk_hw_register_fixed_rate
| * a30ca04dde clk: asm9260: use parent index to link the reference clock
| * c45ca73b01 clk: si5341: fix an error code problem in si5341_output_clk_set_rate
| * 347f9d7258 watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused
| * 3646d83db8 watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling
| * 1711bdfe5e watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO
| * b9bced8ca7 watchdog: set cdev owner before adding
| * 9117fc44fd drivers: clk: zynqmp: update divider round rate logic
| * 8f4941940d clk: zynqmp: Add a check for NULL pointer
| * f46c0ec5a5 clk: zynqmp: make bestdiv unsigned
| * e27660be6f drivers: clk: zynqmp: calculate closest mux rate
| * 8aff5f6723 clk: qcom: videocc-sm8150: Add missing PLL config property
| * b31526b8c5 clk: qcom: videocc-sm8150: Update the videocc resets
| * 1dd84d5e83 dt-bindings: clock: Update the videocc resets for sm8150
| * c72dbb780d gpu/drm/radeon: fix two memleaks in radeon_vm_init
| * b6dcba02ee drivers/amd/pm: fix a use-after-free in kv_parse_power_table
| * 2bf47c89bb drm/amd/pm: fix a double-free in si_dpm_init
| * 11d1f2d895 drm/amdgpu/debugfs: fix error code when smc register accessors are NULL
| * 720919b58d media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of m88ds3103_probe()
| * 0a50ca097a media: dvbdev: drop refcount on error path in dvb_device_open()
| * 11e60be408 f2fs: fix the f2fs_file_write_iter tracepoint
| * f3a220d975 f2fs: fix to update iostat correctly in f2fs_filemap_fault()
| * df2571b4d5 f2fs: fix to check compress file in f2fs_move_file_range()
| * a3316290a8 media: rkisp1: Disable runtime PM in probe error path
| * f4176c5185 clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config
| * d3a8c5c783 media: cx231xx: fix a memleak in cx231xx_init_isoc
| * 9f583fc91c drm/bridge: tc358767: Fix return value on error case
| * a3cb0b5b1b drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable
| * a5934df4df drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table
| * 1a6cccd7fd drm/radeon/dpm: fix a memleak in sumo_parse_power_table
| * 14bbfaa5df drm/radeon: check the alloc_workqueue return value in radeon_crtc_init()
| * 929af5cd8a drm/drv: propagate errors from drm_modeset_register_all()
| * cbf207b171 drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks
| * 6d8dc61985 drm/msm/mdp4: flush vblank event on disable
| * d3aa670bba ASoC: cs35l34: Fix GPIO name and drop legacy include
| * a0f27f673e ASoC: cs35l33: Fix GPIO name and drop legacy include
| * 528844bb1e drm/radeon: check return value of radeon_ring_lock()
| * 4e57efe03a drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check()
| * 1f7008dd12 drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg()
| * f100ba617d f2fs: fix to avoid dirent corruption
| * 4c5e6a02dc drm/bridge: Fix typo in post_disable() description
| * ec3634ebe2 media: pvrusb2: fix use after free on context disconnection
| * 1821c4d1c3 drm/tilcdc: Fix irq free on unload
| * 08ccff6ece drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
| * 45c4c4b04a drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer
| * ab45a15a50 drm/panel-elida-kd35t133: hold panel in reset for unprepare
| * a811031da2 RDMA/hns: Fix inappropriate err code for unsupported operations
| * 5245c05cd9 RDMA/usnic: Silence uninitialized symbol smatch warnings
| * ab8038e7bc Revert "drm/omapdrm: Annotate dma-fence critical section in commit path"
| * d847363bc5 Revert "drm/tidss: Annotate dma-fence critical section in commit path"
| * 13e3dd2df0 ARM: davinci: always select CONFIG_CPU_ARM926T
| * 4329426cf6 ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
| * d0464a7edf mlxbf_gige: Enable the GigE port in mlxbf_gige_open
| * 8d632d0fd2 net: mellanox: mlxbf_gige: Replace non-standard interrupt handling
| * 86f3df0495 mlxbf_gige: Fix intermittent no ip issue
| * 172ba7d46c net/sched: act_ct: fix skb leak and crash on ooo frags
| * c3d8edb170 null_blk: don't cap max_hw_sectors to BLK_DEF_MAX_SECTORS
| * 8676b014e4 block: make BLK_DEF_MAX_SECTORS unsigned
| * ce3440b699 Bluetooth: btmtkuart: fix recv_buf() return value
| * cede5d0c29 Bluetooth: Fix bogus check for re-auth no supported with non-ssp
| * 166d65b0d5 netfilter: nf_tables: mark newset as dead on transaction abort
| * e907e95729 wifi: iwlwifi: mvm: send TX path flush in rfkill
| * 8d6c614212 wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request
| * 5f4ea050bb wifi: rtlwifi: rtl8192se: using calculate_bit_shift()
| * aaf4723f52 wifi: rtlwifi: rtl8192ee: using calculate_bit_shift()
| * dbbbd2cc8f wifi: rtlwifi: rtl8192de: using calculate_bit_shift()
| * 7e0d54f5dc wifi: rtlwifi: rtl8192ce: using calculate_bit_shift()
| * 5dbc5c5222 wifi: rtlwifi: rtl8192cu: using calculate_bit_shift()
| * 62de564726 wifi: rtlwifi: rtl8192c: using calculate_bit_shift()
| * aec0dee37b wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift()
| * 37871c978d wifi: rtlwifi: add calculate_bit_shift()
| * 493cfed247 arm64: dts: qcom: sc7280: Mark SDHCI hosts as cache-coherent
| * 2c97f94500 block: add check of 'minors' and 'first_minor' in device_add_disk()
| * df4f5a35c5 arm64: dts: qcom: sm8150-hdk: fix SS USB regulators
| * 6f20058dad soc: qcom: llcc: Fix dis_cap_alloc and retain_on_pc configuration
| * ccc94806d0 dma-mapping: clear dev->dma_mem to NULL after freeing it
| * 99326214f9 dma-mapping: Add dma_release_coherent_memory to DMA API
| * 930cd34add virtio/vsock: fix logic which reduces credit update messages
| * a18eff8ba0 selftests/net: fix grep checking for fib_nexthop_multiprefix
| * 62c904c472 scsi: hisi_sas: Correct the number of global debugfs registers
| * 6bf2126107 scsi: hisi_sas: Rollback some operations if FLR failed
| * 84e174afb5 scsi: hisi_sas: Replace with standard error code return value
| * 0d17931d7e scsi: hisi_sas: Prevent parallel FLR and controller reset
| * 0760d1d6d8 scsi: hisi_sas: Rename HISI_SAS_{RESET -> RESETTING}_BIT
| * 80b0b7c79f block: Set memalloc_noio to false on device_add_disk() error path
| * 0296268425 bpf: Fix verification of indirect var-off stack access
| * 8c2127dc93 arm64: dts: qcom: sc7280: fix usb_2 wakeup interrupt types
| * 97c60adff1 arm64: dts: qcom: sdm845-db845c: correct LED panic indicator
| * 6211a043ab arm64: dts: qcom: qrb5165-rb5: correct LED panic indicator
| * 609c7d556c scsi: fnic: Return error if vmalloc() failed
| * 67e6707f07 bpf: fix check for attempt to corrupt spilled pointer
| * f40cd60f3f arm64: dts: qcom: sm8250: Make watchdog bark interrupt edge triggered
| * a413fdd3ea arm64: dts: qcom: sm8150: Make watchdog bark interrupt edge triggered
| * a78ae10607 arm64: dts: qcom: sdm845: Make watchdog bark interrupt edge triggered
| * 06ec7a3961 arm64: dts: qcom: sc7280: Make watchdog bark interrupt edge triggered
| * 0c55ace45d arm64: dts: qcom: sc7180: Make watchdog bark interrupt edge triggered
| * 65b28cad75 ARM: dts: qcom: sdx65: correct SPMI node name
| * bb88e2174a bpf: enforce precision of R0 on callback return
| * fa5b150abf arm64: dts: ti: k3-am65-main: Fix DSS irq trigger type
| * 18051358d9 wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior
| * bf98ac3288 firmware: meson_sm: populate platform devices from sm device tree data
| * 41b3228281 firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create()
| * 7e36646237 net/ncsi: Fix netlink major/minor version numbers
| * 024e24086e ARM: dts: qcom: apq8064: correct XOADC register address
| * ef2373f31f wifi: libertas: stop selecting wext
| * 69f7c1f5d2 wifi: ath11k: Defer on rproc_get failure
| * 131afd9a57 bpf: Add crosstask check to __bpf_get_stack
| * 1ed921e42a bpf, lpm: Fix check prefixlen before walking trie
| * 2b67863c5b wifi: rtw88: fix RX filter in FIF_ALLMULTI flag
| * 9d4f4dea82 NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT
| * d0e09a7ba3 blocklayoutdriver: Fix reference leak of pnfs_device_node
| * a5f2f91b3f crypto: scomp - fix req->dst buffer overflow
| * dc6779550f crypto: sahara - do not resize req->src when doing hash operations
| * a5e0e39dac crypto: sahara - fix processing hash requests with req->nbytes < sg->length
| * 2dc0f23ac4 crypto: sahara - improve error handling in sahara_sha_process()
| * faa25455f7 crypto: sahara - fix wait_for_completion_timeout() error handling
| * 2104f405af crypto: sahara - fix ahash reqsize
| * 34c6a33567 crypto: sahara - handle zero-length aes requests
| * a7b435e816 crypto: sahara - avoid skcipher fallback code duplication
| * b1664c5334 crypto: virtio - Wait for tasklet to complete on device remove
| * ee0586d73c gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
| * 00e3321c65 fs: indicate request originates from old mount API
| * 8fb12524c8 pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
| * 8dd9e58c69 crypto: sahara - fix error handling in sahara_hw_descriptor_create()
| * 3413d878fd crypto: sahara - fix processing requests with cryptlen < sg->length
| * a962882a35 crypto: sahara - fix ahash selftest failure
| * 6f31caf8aa crypto: sahara - fix cbc selftest failure
| * 6fb7db05ad crypto: sahara - remove FLAGS_NEW_KEY logic
| * d2205b9b57 crypto: af_alg - Disallow multiple in-flight AIO requests
| * 088123ddb4 crypto: ccp - fix memleak in ccp_init_dm_workarea
| * d3ff5362b4 crypto: sa2ul - Return crypto_aead_setkey to transfer the error
| * 75cba72ddb crypto: virtio - Handle dataq logic with tasklet
| * 5e37fa0b4c selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket
| * d8ac253776 mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
| * a252d5c1ef kunit: debugfs: Fix unchecked dereference in debugfs_print_results()
| * f23aa841a0 ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error
| * f5de4ad61d ACPI: LPSS: Fix the fractional clock divider flags
| * 6b15fb99b0 spi: sh-msiof: Enforce fixed DTDL for R-Car H3
| * 2aa141f8bc efivarfs: force RO when remounting if SetVariable is not supported
| * a4529a08d3 calipso: fix memory leak in netlbl_calipso_add_pass()
| * dd645fc8f8 cpufreq: scmi: process the result of devm_of_clk_add_hw_provider()
| * aead146e88 cpufreq: Use of_property_present() for testing DT property presence
| * 435841c106 of: Add of_property_present() helper
| * c5df417936 of: property: define of_property_read_u{8,16,32,64}_array() unconditionally
| * c1814a4ffd ACPI: LPIT: Avoid u32 multiplication overflow
| * 3a370502a5 ACPI: video: check for error while searching for backlight device parent
| * 45f6080748 mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response
| * 9c92f01bb9 spi: spi-zynqmp-gqspi: fix driver kconfig dependencies
| * f105c26300 powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
| * 6b58d16037 powerpc/powernv: Add a null pointer check in opal_powercap_init()
| * c0b111ea78 powerpc/powernv: Add a null pointer check in opal_event_init()
| * 2a82c4439b powerpc/powernv: Add a null pointer check to scom_debug_init_one()
| * 5daf0ef626 selftests/powerpc: Fix error handling in FPU/VMX preemption tests
| * 999a27b3ce powerpc/pseries/memhp: Fix access beyond end of drmem array
| * 5d69c8859e powerpc/44x: select I2C for CURRITUCK
| * 467c9c9dc0 powerpc: add crtsavres.o to always-y instead of extra-y
| * 0b11a145eb powerpc: remove checks for binutils older than 2.25
| * 63ecb08533 powerpc/toc: Future proof kernel toc
| * 2de654d858 powerpc: Mark .opd section read-only
| * 700cf4bead EDAC/thunderx: Fix possible out-of-bounds string access
| * b53730a40e x86/lib: Fix overflow when counting digits
| * 0a43304cf6 coresight: etm4x: Fix width of CCITMIN field
| * b67064bd37 PCI: Add ACS quirk for more Zhaoxin Root Ports
| * e62243b353 leds: ledtrig-tty: Free allocated ttyname buffer on deactivate
| * 6c3388c0af parport: parport_serial: Add Brainboxes device IDs and geometry
| * 72095a5430 parport: parport_serial: Add Brainboxes BAR details
| * 5cf604ee53 uio: Fix use-after-free in uio_open
| * 659be220e6 binder: fix comment on binder_alloc_new_buf() return value
| * 2900c0ee59 binder: fix trivial typo of binder_free_buf_locked()
| * 8ad4d580e8 binder: fix use-after-free in shinker's callback
| * 1263bd9e08 binder: use EPOLLERR from eventpoll.h
| * 0ee3ded745 Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
| * 12b07f443d kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list
| * 66cb0868b1 bpf: Add --skip_encoding_btf_inconsistent_proto, --btf_gen_optimized to pahole flags for v1.25
| * 2a2495b6a3 Revert "ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek"
| * 313cfcaefa ACPI: resource: Add another DMI match for the TongFang GMxXGxx
| * dec512974c drm/crtc: fix uninitialized variable use
| * 21eea9b6c4 ARM: sun9i: smp: fix return code check of of_property_match_string
| * dc26b67704 net: qrtr: ns: Return 0 if server port is not present
| * 5dbcdaf4db ida: Fix crash in ida_free when the bitmap is empty
| * c9f5b801bc i2c: rk3x: fix potential spinlock recursion on poll
| * 3f0dc646b5 ASoC: Intel: bytcr_rt5640: Add quirk for the Medion Lifetab S10346
| * adf4616a44 Input: xpad - add Razer Wolverine V2 support
| * d66ffc87ba wifi: iwlwifi: pcie: avoid a NULL pointer dereference
| * fd13543dbb ARC: fix spare error
| * b3f44f21d3 s390/scm: fix virtual vs physical address confusion
| * 46445552ed Input: i8042 - add nomux quirk for Acer P459-G2-M
| * 0f0da2d6bd Input: atkbd - skip ATKBD_CMD_GETID in translated mode
| * 274b4c8162 reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning
| * 5d307038fa ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI
| * a9655e7e4b tracing: Fix uaf issue when open the hist or hist_debug file
| * 64d81f61ad MIPS: dts: loongson: drop incorrect dwmac fallback compatible
| * 3f483a39e2 stmmac: dwmac-loongson: drop useless check for compatible fallback
| * aeb0d506f7 tracing: Add size check when printing trace_marker output
| * c3729567de tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing
| * c8af7ad729 jbd2: fix soft lockup in journal_finish_inode_data_buffers()
| * 7b0586ada9 platform/x86: intel-vbtn: Fix missing tablet-mode-switch events
| * 6511772fc0 neighbour: Don't let neigh_forced_gc() disable preemption for long
| * 2e1846b0c0 drm/crtc: Fix uninit-value bug in drm_mode_setcrtc
| * c01c44559a jbd2: correct the printing of write_flags in jbd2_write_superblock()
| * 5378fd3c43 clk: rockchip: rk3128: Fix HCLK_OTG gate register
| * a14da83838 hwmon: (corsair-psu) Fix probe when built-in
| * 7945405205 drm/exynos: fix a wrong error checking
| * e02a2693ae drm/exynos: fix a potential error pointer dereference
| * 10250096f3 drm/amdgpu: Add NULL checks for function pointers
| * 8b98524821 nvme: introduce helper function to get ctrl state
| * c11fc224e5 ASoC: ops: add correct range check for limiting volume
| * 09c0f2814b ASoC: da7219: Support low DC impedance headset
| * 16d3a65eaa net/tg3: fix race condition in tg3_reset_task()
| * 9904379f19 nouveau/tu102: flush all pdbs on vmm flush
| * 7a3ff8a2bb ASoC: rt5650: add mutex to avoid the jack detection failure
| * ebf8d5ec4a ASoC: cs43130: Fix incorrect frame delay configuration
| * ec52e3e241 ASoC: cs43130: Fix the position of const qualifier
| * ce6cce0799 ASoC: Intel: Skylake: mem leak in skl register function
| * cb6b6ff7a7 ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16
| * 4ec0f3b3d8 ASoC: Intel: Skylake: Fix mem leak in few functions
| * 20e23f6b14 ASoC: wm8974: Correct boost mixer inputs
| * 05d753d74c nvme-core: check for too small lba shift
| * 9ad8b171c4 drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
| * f8eadbe713 debugfs: fix automount d_fsdata usage
| * 473fb46aa3 wifi: cfg80211: lock wiphy mutex for rfkill poll
| * 5d520ae3da mptcp: fix uninit-value in mptcp_incoming_options
| * 8d40e3514a ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro
| * 3dec0bd9c0 pinctrl: lochnagar: Don't build on MIPS
| * 32a6cfc676 f2fs: explicitly null-terminate the xattr list
* | 0e69322670 Merge branch 'android14-5.15' into branch 'android14-5.15-lts'
* | 2c882816b1 Revert "ipv6: remove max_size check inline with ipv4"
* |   a51283fc69 Merge "Merge 5.15.147 into android14-5.15-lts" into android14-5.15-lts
|\ \
| * | 5352f41951 Merge 5.15.147 into android14-5.15-lts
| |\|
| | * ddcaf49990 Linux 5.15.147
| | * 231752a0a0 net: usb: ax88179_178a: move priv to driver_priv
| | * d800d18ba1 net: usb: ax88179_178a: remove redundant init code
| | * 329197033b tracing/kprobes: Fix symbol counting logic by looking at modules as well
| | * ccb7eef5f2 kallsyms: Make module_kallsyms_on_each_symbol generally available
| | * ab3a3aadb3 netfilter: nf_tables: Reject tables of unsupported family
| | * 0eb556b238 perf inject: Fix GEN_ELF_TEXT_OFFSET for jit
| | * b8a5308fee ipv6: remove max_size check inline with ipv4
| | * ba5efd8544 net: tls, update curr on splice as well
| | * 06bb52d2ef mmc: sdhci-sprd: Fix eMMC init failure after hw reset
| | * 6722186854 mmc: core: Cancel delayed work before releasing host
| | * edaefc210e mmc: rpmb: fixes pause retune on all RPMB partitions.
| | * 41f20ac9bd mmc: meson-mx-sdhc: Fix initialization frozen issue
| | * 91432aebce mm: fix unmap_mapping_range high bits shift bug
| | * 5e44f5da12 i2c: core: Fix atomic xfer check for non-preempt config
| | * 1d5c1617e1 x86/kprobes: fix incorrect return address calculation in kprobe_emulate_call_indirect
| | * 10086ff58c firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards
| | * 660b3c3bc8 mm/memory-failure: check the mapcount of the precise page
| | * 80eb449f80 selftests: secretmem: floor the memory size to the multiple of page_size
| | * a58ae5ab71 net: Implement missing SO_TIMESTAMPING_NEW cmsg support
| | * 500c7f32ad bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters()
| | * fda00eb3cd asix: Add check for usbnet_get_endpoints
| | * 0817c1b215 octeontx2-af: Re-enable MAC TX in otx2_stop processing
| | * 20fce91b4f octeontx2-af: Always configure NIX TX link credits based on max frame size
| | * 6bbbcff3c7 octeontx2-af: Set NIX link credits based on max LMAC
| | * 6ef9a28e1b octeontx2-af: Don't enable Pause frames by default
| | * bc56ed720e net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues
| | * cfcf549014 igc: Fix hicredit calculation
| | * 6c853b5768 i40e: Restore VF MSI-X state during PCI reset
| | * 9400f854fa ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux
| | * e08b666e44 ASoC: meson: g12a-toacodec: Fix event generation
| | * 3a78a57764 ASoC: meson: g12a-tohdmitx: Validate written enum values
| | * f74281f241 ASoC: meson: g12a-toacodec: Validate written enum values
| | * 947db598ac i40e: fix use-after-free in i40e_aqc_add_filters()
| | * 975d6f66f2 net: Save and restore msg_namelen in sock_sendmsg
| | * b2869e7600 netfilter: nft_immediate: drop chain reference counter on error
| | * 51976846f2 net: bcmgenet: Fix FCS generation for fragmented skbuffs
| | * c748c358de sfc: fix a double-free bug in efx_probe_filters
| | * 5c161f2220 ARM: sun9i: smp: Fix array-index-out-of-bounds read in sunxi_mc_smp_init
| | * fd2e782923 net-timestamp: extend SOF_TIMESTAMPING_OPT_ID to HW timestamps
| | * dc5643abc1 can: raw: add support for SO_MARK
| | * 464fb49ca9 can: raw: add support for SO_TXTIME/SCM_TXTIME
| | * ba80ff7a85 net: Implement missing getsockopt(SO_TIMESTAMPING_NEW)
| | * 5636941e42 r8169: Fix PCI error on system resume
| | * 0ce9a244d3 net: sched: em_text: fix possible memory leak in em_text_destroy()
| | * c0b56aa9d1 mlxbf_gige: fix receive packet race condition
| | * 271567afd4 ASoC: fsl_rpmsg: Fix error handler with pm_runtime_enable
| | * 1867a90947 igc: Check VLAN EtherType mask
| | * f24370ddf7 igc: Check VLAN TCI mask
| | * 4ec5efdb90 igc: Report VLAN EtherType matching back to user
| | * b17f8024a5 i40e: Fix filter input checks to prevent config with invalid values
| | * def90597ef drm/i915/dp: Fix passing the correct DPCD_REV for drm_dp_set_phy_test_pattern
| | * a7b67635de octeontx2-af: Fix marking couple of structure as __packed
| | * 802af3c88a nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local
| | * 5d3e98ef12 drm/bridge: ti-sn65dsi86: Never store more than msg->size bytes in AUX xfer
| | * 2f8cefc8b6 wifi: iwlwifi: pcie: don't synchronize IRQs from IRQ
| | * 1f2f662c8b Revert "PCI/ASPM: Remove pcie_aspm_pm_state_change()"
| | * 200cecd6ff ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP ProBook 440 G6
| | * 90ab9a70f0 block: Don't invalidate pagecache for invalid falloc modes
| | * c496c35310 keys, dns: Fix missing size check of V1 server-list header
* | | 9f5237b3b3 ANDROID: db845c: Enable device tree overlay support
|/ /
* | 91bf8d14e7 Revert "device property: Add const qualifier to device_get_match_data() parameter"
* | 88efb6da37 Revert "spi: Introduce spi_get_device_match_data() helper"
* | 049200ae06 Revert "iio: imu: adis16475: add spi_device_id table"
* | 34a1ceac5a Revert "device property: Allow const parameter to dev_fwnode()"
* | 19757b5e8d Merge 5.15.146 into android14-5.15-lts
|\|
| * 26c690eff0 Linux 5.15.146
| * 13578b4ea4 bpf: Fix prog_array_map_poke_run map poke update
| * 339add0430 device property: Allow const parameter to dev_fwnode()
| * 4d9dcdb333 dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata()
| * a033bb82a1 ring-buffer: Fix slowpath of interrupted event
| * d10f7540c5 netfilter: nf_tables: skip set commit for deleted/destroyed sets
| * d739f2b6d8 ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
| * 53bed9b9f4 ring-buffer: Remove useless update to write_stamp in rb_try_to_discard()
| * 7fb264aede tracing: Fix blocked reader of snapshot buffer
| * c73cb01af1 ring-buffer: Fix wake ups when buffer_percent is set to 100
| * c0be52181f mm/filemap: avoid buffered read/write race to read inconsistent data
| * 2b16d960c7 Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
| * ded3cfdefe smb: client: fix OOB in smbCalcSize()
| * bfd18c0f57 smb: client: fix OOB in SMB2_query_info_init()
| * 1228354a98 iio: imu: adis16475: add spi_device_id table
| * bd1be85dbb spi: Introduce spi_get_device_match_data() helper
| * fcf6fce2f1 device property: Add const qualifier to device_get_match_data() parameter
| * d63fafd6cc net: usb: ax88179_178a: avoid failed operations when device is disconnected
| * f860413aa0 net: usb: ax88179_178a: wol optimizations
| * 2964a0de75 net: usb: ax88179_178a: clean up pm calls
| * 597305fd77 ethernet: constify references to netdev->dev_addr in drivers
| * 32d9a4ce52 usb: fotg210-hcd: delete an incorrect bounds test
| * d529cc2278 ARM: dts: Fix occasional boot hang for am3 usb
| * 8bf06286d7 ksmbd: fix wrong allocation size update in smb2_open()
| * 06208a04a7 ksmbd: avoid duplicate opinfo_put() call on error of smb21_lease_break_ack()
| * 9444c47d2c ksmbd: lazy v2 lease break on smb2_write()
| * f58afd8c70 ksmbd: send v2 lease break notification for directory
| * 86967f6965 ksmbd: downgrade RWH lease caching state to RH for directory
| * f7c8270be3 ksmbd: set v2 lease capability
| * 1bf476d8a8 ksmbd: set epoch in create context v2 lease
| * ac38551859 ksmbd: have a dependency on cifs ARC4
| * b54b9fbc16 fuse: share lookup state between submount and its parent
| * 1c811b7c83 x86/alternatives: Sync core before enabling interrupts
| * ccda72aa73 KVM: arm64: vgic: Force vcpu vgic teardown on vcpu destroy
| * 46bc250b08 lib/vsprintf: Fix %pfwf when current node refcount == 0
| * f9dc6e0a0b gpio: dwapb: mask/unmask IRQ when disable/enale it
| * e4d3534c68 bus: ti-sysc: Flush posted write only after srst_udelay
| * d47b2b6a08 tracing / synthetic: Disable events after testing in synth_event_gen_test_init()
| * da95f8b7bc scsi: core: Always send batch on reset or error handling command
| * 686774523f dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp
| * 7c25c5d727 net: ks8851: Fix TX stall caused by TX buffer overrun
| * 28855385bf net: rfkill: gpio: set GPIO direction
| * 4431cf7c33 net: 9p: avoid freeing uninit memory in p9pdu_vreadf
| * 85fd35ce5b Input: soc_button_array - add mapping for airplane mode button
| * a346cfc638 Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE
| * 916ca52a3e Bluetooth: L2CAP: Send reject on command corrupted request
| * 70db6466c0 Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent
| * 094ae245f7 USB: serial: option: add Quectel RM500Q R13 firmware support
| * d0adf8fe08 USB: serial: option: add Foxconn T99W265 with new baseline
| * a67f0b5bc2 USB: serial: option: add Quectel EG912Y module support
| * 0e285069fd USB: serial: ftdi_sio: update Actisense PIDs constant names
| * 433889344e wifi: cfg80211: fix certs build to not depend on file order
| * 69fab6dc37 wifi: cfg80211: Add my certificate
| * 498f212a77 ALSA: usb-audio: Increase delay in MOTU M quirk
| * 5a16bb60b8 iio: triggered-buffer: prevent possible freeing of wrong buffer
| * 3becd9bc5a iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma()
| * b9ccf18e31 iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table
| * f1d9a66e9c scsi: bnx2fc: Fix skb double free in bnx2fc_rcv()
| * 1e3effe67e Input: ipaq-micro-keys - add error handling for devm_kmemdup
| * 25c441a073 iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw
| * 3cbae23d48 interconnect: Treat xlate() returning NULL node as an error
| * f47e3f60f2 smb: client: fix OOB in smb2_query_reparse_point()
| * fd3951b798 smb: client: fix NULL deref in asn1_ber_decoder()
| * 6ded9038e4 drm/i915: Fix intel_atomic_setup_scalers() plane_state handling
| * f9954b18c4 drm/i915: Relocate intel_atomic_setup_scalers()
| * 2a4ef0d6e5 drm/i915/mtl: limit second scaler vertical scaling in ver >= 14
| * 6bbeb3960a ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE
| * c0c4e9767e gpiolib: cdev: add gpio_device locking wrapper around gpio_ioctl()
| * 8bdcedfdb0 pinctrl: at91-pio4: use dedicated lock class for IRQ
| * f0c52b790a i2c: aspeed: Handle the coalesced stop conditions with the start conditions.
| * c87ab6e306 ASoC: hdmi-codec: fix missing report for jack initial status
| * 98fb5eaade afs: Fix use-after-free due to get/remove race in volume tree
| * 57bf562950 afs: Use refcount_t rather than atomic_t
| * d1fe946cb5 afs: Fix overwriting of result of DNS query
| * 2552b32b0b keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
| * a1ab650f14 net: check dev->gso_max_size in gso_features_check()
| * 56eaa3ec31 afs: Fix dynamic root lookup DNS check
| * 3f85785bc4 afs: Fix the dynamic root's d_delete to always delete unused dentries
| * 3739e0a52d net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev()
| * c124a75b24 net: mana: select PAGE_POOL
| * c0e527c532 net/rose: fix races in rose_kill_by_device()
| * 66d2116880 ethernet: atheros: fix a memleak in atl1e_setup_ring_resources
| * 87255af408 net: sched: ife: fix potential use-after-free
| * 242670aab8 net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors
| * da2396b546 net/mlx5: Fix fw tracer first block check
| * b0873aa484 net/mlx5e: fix a potential double-free in fs_udp_create_groups
| * 4ddba57b65 net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list()
| * 5ae420f65a Revert "net/mlx5e: fix double free of encap_header"
| * 135fa6fac9 Revert "net/mlx5e: fix double free of encap_header in update funcs"
| * b387f06849 wifi: mac80211: mesh_plink: fix matches_local logic
| * 6558f4aa20 wifi: iwlwifi: pcie: add another missing bh-disable for rxq->lock
| * 183ea95f73 s390/vx: fix save/restore of fpu kernel context
| * 58f3fc8333 reset: Fix crash when freeing non-existent optional resets
| * 52c69a070b ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init
| * d3ffbbb0bc ARM: dts: dra7: Fix DRA7 L3 NoC node register size
* | 3a3430e518 Merge 5.15.145 into android14-5.15-lts
|\|
| * d93fa2c788 Linux 5.15.145
| * ee41f667aa kasan: disable kasan_non_canonical_hook() for HW tags
| * f30f893143 tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols
| * 7aa33c99b5 Revert "drm/bridge: lt9611uxc: Switch to devm MIPI-DSI helpers"
| * 4a8350a0ea Revert "drm/bridge: lt9611uxc: Register and attach our DSI device at probe"
| * e21817ce16 Revert "drm/bridge: lt9611uxc: fix the race in the error path"
| * 811b5eaee7 ksmbd: don't update ->op_state as OPLOCK_STATE_NONE on error
| * bd47f9c8b5 ksmbd: move setting SMB2_FLAGS_ASYNC_COMMAND and AsyncId
| * 5e1f31378a ksmbd: release interim response after sending status pending response
| * c21d044508 ksmbd: move oplock handling after unlock parent dir
| * 772d81aeec ksmbd: separately allocate ci per dentry
| * 8ed1118da8 ksmbd: fix possible deadlock in smb2_open
| * ae3356cbe9 ksmbd: prevent memory leak on error return
| * 8dc9eb7d35 ksmbd: handle malformed smb1 message
| * 1f50c418d4 ksmbd: fix kernel-doc comment of ksmbd_vfs_kern_path_locked()
| * 3fecda5d85 ksmbd: no need to wait for binded connection termination at logoff
| * 841bcade09 ksmbd: add support for surrogate pair conversion
| * 0eaeb8aec4 ksmbd: fix missing RDMA-capable flag for IPoIB device in ksmbd_rdma_capable_netdev()
| * 20b4f6bd4c ksmbd: fix recursive locking in vfs helpers
| * f30a2ff715 ksmbd: fix kernel-doc comment of ksmbd_vfs_setxattr()
| * df79244f73 ksmbd: reorganize ksmbd_iov_pin_rsp()
| * 845837fbfe ksmbd: Remove unused field in ksmbd_user struct
| * fab0175b7f ksmbd: fix potential double free on smb2_read_pipe() error path
| * ef435dec8a ksmbd: fix Null pointer dereferences in ksmbd_update_fstate()
| * 4b9b7ea1ff ksmbd: fix wrong error response status by using set_smb2_rsp_status()
| * dd45db4d9b ksmbd: fix race condition between tree conn lookup and disconnect
| * 0901be8dc6 ksmbd: fix race condition from parallel smb2 lock requests
| * 50e13932ba ksmbd: fix race condition from parallel smb2 logoff requests
| * f99d5d1d2a ksmbd: fix race condition with fp
| * c77fd3e25a ksmbd: fix race condition between session lookup and expire
| * b9a3e45496 ksmbd: check iov vector index in ksmbd_conn_write()
| * 01df133b1a ksmbd: return invalid parameter error response if smb2 request is invalid
| * 4a67467f11 ksmbd: fix passing freed memory 'aux_payload_buf'
| * fbed0adfe5 ksmbd: remove unneeded mark_inode_dirty in set_info_sec()
| * a9128c4134 ksmbd: remove experimental warning
| * 6997fa65bf ksmbd: add missing calling smb2_set_err_rsp() on error
| * bd554ed4fd ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()
| * 7019440463 ksmbd: Fix one kernel-doc comment
| * c5aa74449a ksmbd: reduce descriptor size if remaining bytes is less than request size
| * e12b092416 ksmbd: fix `force create mode' and `force directory mode'
| * 6f0207218c ksmbd: fix wrong interim response on compound
| * f2283680a8 ksmbd: add support for read compound
| * d7ad0ac5a8 ksmbd: switch to use kmemdup_nul() helper
| * 5c0df9d30c ksmbd: fix out of bounds in init_smb2_rsp_hdr()
| * 017d85c94f ksmbd: validate session id and tree id in compound request
| * 4a027b9651 ksmbd: check if a mount point is crossed during path lookup
| * cf63b94fec ksmbd: Fix unsigned expression compared with zero
| * 5f36e22910 ksmbd: Replace one-element array with flexible-array member
| * d9902ad14f ksmbd: Use struct_size() helper in ksmbd_negotiate_smb_dialect()
| * 97f5c1e308 ksmbd: add missing compound request handing in some commands
| * 6763921847 ksmbd: fix out of bounds read in smb2_sess_setup
| * d91ba80185 ksmbd: Replace the ternary conditional operator with min()
| * 2222ada095 ksmbd: use kvzalloc instead of kvmalloc
| * 638043bef9 ksmbd: Change the return value of ksmbd_vfs_query_maximal_access to void
| * 7585898ddf ksmbd: return a literal instead of 'err' in ksmbd_vfs_kern_path_locked()
| * 4910a79a5f ksmbd: use kzalloc() instead of __GFP_ZERO
| * b657622862 ksmbd: remove unused ksmbd_tree_conn_share function
| * ce95f7d2dc ksmbd: add mnt_want_write to ksmbd vfs functions
| * 0d1a3f97ef ksmbd: validate smb request protocol id
| * df3a4518ae ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop
| * ae33f07c87 ksmbd: fix posix_acls and acls dereferencing possible ERR_PTR()
| * 55ceeb4e1c ksmbd: fix out-of-bound read in parse_lease_state()
| * 4adb4fbd74 ksmbd: fix out-of-bound read in deassemble_neg_contexts()
| * 049ed0f953 ksmbd: call putname after using the last component
| * b423ddab61 ksmbd: fix UAF issue from opinfo->conn
| * 19b2b9af31 ksmbd: fix multiple out-of-bounds read during context decoding
| * 61a306c1cc ksmbd: fix uninitialized pointer read in smb2_create_link()
| * ea799dd275 ksmbd: fix uninitialized pointer read in ksmbd_vfs_rename()
| * b36295c17f ksmbd: fix racy issue under cocurrent smb2 tree disconnect
| * ae06b798f7 ksmbd: fix racy issue from smb2 close and logoff with multichannel
| * dff87902d9 ksmbd: block asynchronous requests when making a delay on session setup
| * a6a9601ba9 ksmbd: destroy expired sessions
| * 708c304b58 ksmbd: fix racy issue from session setup and logoff
| * 019aae488d ksmbd: fix racy issue from using ->d_parent and ->d_name
| * b31e1ef301 fs: introduce lock_rename_child() helper
| * 380a0fe8bd ksmbd: remove unused compression negotiate ctx packing
| * 0dbfcc34ef ksmbd: avoid duplicate negotiate ctx offset increments
| * 2ca23947df ksmbd: set NegotiateContextCount once instead of every inc
| * 39f5b4b313 ksmbd: avoid out of bounds access in decode_preauth_ctxt()
| * 921536046b ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
| * 9494242c8e ksmbd: delete asynchronous work from list
| * 427caadf90 ksmbd: remove unused is_char_allowed function
| * 289b46fd11 ksmbd: fix wrong signingkey creation when encryption is AES256
| * bfe8372ef2 ksmbd: fix possible memory leak in smb2_lock()
| * d625db885a ksmbd: Fix parameter name and comment mismatch
| * 0d3f06fd65 ksmbd: Fix spelling mistake "excceed" -> "exceeded"
| * 1f1aca1d50 ksmbd: update Kconfig to note Kerberos support and fix indentation
| * a35ebf6589 ksmbd: Remove duplicated codes
| * b15734ec29 ksmbd: fix typo, syncronous->synchronous
| * 1f485b54d0 ksmbd: Implements sess->rpc_handle_list as xarray
| * b1caecbf34 ksmbd: Implements sess->ksmbd_chann_list as xarray
| * d7f088dc27 ksmbd: send proper error response in smb2_tree_connect()
| * bcab5c8105 ksmbd: Convert to use sysfs_emit()/sysfs_emit_at() APIs
| * 46c517bc0a ksmbd: Fix resource leak in smb2_lock()
| * 9ea6b43d8a ksmbd: use F_SETLK when unlocking a file
| * 8263acd267 ksmbd: set SMB2_SESSION_FLAG_ENCRYPT_DATA when enforcing data encryption for this share
| * 64b4d72c59 ksmbd: replace one-element arrays with flexible-array members
| * 2bdd995f13 ksmbd: validate share name from share config response
| * ef97ccd0fc ksmbd: call ib_drain_qp when disconnected
| * b3e852bea8 ksmbd: make utf-8 file name comparison work in __caseless_lookup()
| * 131e308593 ksmbd: hide socket error message when ipv6 config is disable
| * 507cb106c3 ksmbd: reduce server smbdirect max send/receive segment sizes
| * fe4d09792b ksmbd: decrease the number of SMB3 smbdirect server SGEs
| * d5a3b1024a ksmbd: set NTLMSSP_NEGOTIATE_SEAL flag to challenge blob
| * 4d796ff899 ksmbd: fix encryption failure issue for session logoff response
| * e925de7def ksmbd: fill sids in SMB_FIND_FILE_POSIX_INFO response
| * 95b72edca5 ksmbd: set file permission mode to match Samba server posix extension behavior
| * 813ef06ea2 ksmbd: change security id to the one samba used for posix extension
| * 62e6846ee3 ksmbd: casefold utf-8 share names and fix ascii lowercase conversion
| * 43e2963be1 ksmbd: remove generic_fillattr use in smb2_open()
| * aa77fc8182 ksmbd: constify struct path
| * b79a9f991e ksmbd: don't open-code %pD
| * d6686d5791 ksmbd: don't open-code file_path()
| * a7ddc4951f ksmbd: remove unnecessary generic_fillattr in smb2_open
| * ebb8c61657 ksmbd: request update to stale share config
| * c7aff8b8ff ksmbd: use wait_event instead of schedule_timeout()
| * 1f82ecbc7f ksmbd: remove unused ksmbd_share_configs_cleanup function
| * 8d0f823193 ksmbd: remove duplicate flag set in smb2_write
| * d4b374ff2a ksmbd: smbd: Remove useless license text when SPDX-License-Identifier is already used
| * ff403dbe43 ksmbd: smbd: relax the count of sges required
| * 9d609b52f9 ksmbd: smbd: fix connection dropped issue
| * 32af379e13 ksmbd: Fix some kernel-doc comments
| * 81602ee1c4 ksmbd: fix wrong smbd max read/write size check
| * 918a690d8a ksmbd: smbd: handle multiple Buffer descriptors
| * 673c186f81 ksmbd: smbd: change the return value of get_sg_list
| * 30bd0df6e6 ksmbd: smbd: simplify tracking pending packets
| * f17ed7b338 ksmbd: smbd: introduce read/write credits for RDMA read/write
| * 982fcdec10 ksmbd: smbd: change prototypes of RDMA read/write related functions
| * 6bb4399303 ksmbd: validate length in smb2_write()
| * 8e32e15840 ksmbd: remove filename in ksmbd_file
| * e9a3251246 smb3: fix ksmbd bigendian bug in oplock break, and move its struct to smbfs_common
| * dc232946d1 ksmbd: replace usage of found with dedicated list iterator variable
| * a5213868c6 ksmbd: Remove a redundant zeroing of memory
| * 7ee6f9ba97 ksmbd: shorten experimental warning on loading the module
| * a5a8c9133d ksmbd: store fids as opaque u64 integers
| * 170598b6f3 ksmbd: use netif_is_bridge_port
| * c5049d2d73 ksmbd: add support for key exchange
| * 09b4c60383 ksmbd: smbd: validate buffer descriptor structures
| * 858b964451 ksmbd: smbd: fix missing client's memory region invalidation
| * 51d0b879d6 ksmbd: add smb-direct shutdown
| * d15077ad35 ksmbd: smbd: change the default maximum read/write, receive size
| * ba7c3ff905 ksmbd: smbd: create MR pool
| * 97b3a08892 ksmbd: smbd: call rdma_accept() under CM handler
| * 8a49ab3e59 ksmbd: set 445 port to smbdirect port by default
| * 178ecc3257 ksmbd: register ksmbd ib client with ib_register_client()
| * 91d7307569 ksmbd: Fix smb2_get_name() kernel-doc comment
| * dd56eb361f ksmbd: Delete an invalid argument description in smb2_populate_readdir_entry()
| * 36167446ce ksmbd: Fix smb2_set_info_file() kernel-doc comment
| * 2fa426c9d7 ksmbd: Fix buffer_check_err() kernel-doc comment
| * e5b04973e7 ksmbd: set both ipv4 and ipv6 in FSCTL_QUERY_NETWORK_INTERFACE_INFO
| * a63256708a ksmbd: Remove unused fields from ksmbd_file struct definition
| * de203cdf1e ksmbd: Remove unused parameter from smb2_get_name()
| * 82ae5fe3e6 ksmbd: use oid registry functions to decode OIDs
| * 7833bd31bc ksmbd: change LeaseKey data type to u8 array
| * 199b8b5ceb ksmbd: remove smb2_buf_length in smb2_transform_hdr
| * e0c5842057 ksmbd: remove smb2_buf_length in smb2_hdr
| * 6cd90c01b0 ksmbd: remove md4 leftovers
| * 84af59bcab ksmbd: Remove redundant 'flush_workqueue()' calls
| * a33bb607a1 ksmdb: use cmd helper variable in smb2_get_ksmbd_tcon()
| * 5fed9cbbaf ksmbd: use ksmbd_req_buf_next() in ksmbd_verify_smb_message()
* 2773ab8870 Reapply "kasan: print the original fault addr when access invalid shadow"

Change-Id: I54bd429db3190962e1a0b26565054a0c428185c4
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
2024-03-28 10:29:58 +00:00
..