Author	SHA1	Message	Date
Michael Bestas	ee69f5d73d	Merge remote-tracking branch 'sm8350/lineage-20' into lineage-22.2 ... * sm8350/lineage-20: ANDROID: bpf: do not fail to load if log is full ANDROID: fix kernelci compressed kernel linking ANDROID: GKI: Update symbol list for Zebra UPSTREAM: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() Linux 5.4.295 scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() perf: Fix sample vs do_exit() s390/pci: Fix __pcilg_mio_inuser() inline assembly rtc: test: Fix invalid format specifier. jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() mm/huge_memory: fix dereferencing invalid pmd migration entry rtc: Make rtc_time64_to_tm() support dates before 1970 rtc: Improve performance of rtc_time64_to_tm(). Add tests. xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms ARM: dts: am335x-bone-common: Increase MDIO reset deassert time ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board net: atm: fix /proc/net/atm/lec handling ... Change-Id: Ibdde607f7a4ae5a74994603f513e7f94a9eb04ad	2025-09-02 13:51:29 +03:00
Michael Bestas	2b9e22c70c	Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina ... https://source.android.com/docs/security/bulletin/2025-08-01 * tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common: ANDROID: bpf: do not fail to load if log is full ANDROID: fix kernelci compressed kernel linking ANDROID: GKI: Update symbol list for Zebra UPSTREAM: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() Linux 5.4.295 scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() perf: Fix sample vs do_exit() s390/pci: Fix __pcilg_mio_inuser() inline assembly rtc: test: Fix invalid format specifier. jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() mm/huge_memory: fix dereferencing invalid pmd migration entry rtc: Make rtc_time64_to_tm() support dates before 1970 rtc: Improve performance of rtc_time64_to_tm(). Add tests. xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms ARM: dts: am335x-bone-common: Increase MDIO reset deassert time ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board net: atm: fix /proc/net/atm/lec handling net: atm: add lec_mutex calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior atm: atmtcp: Free invalid length skb in atmtcp_c_send(). mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). wifi: carl9170: do not ping device which has failed to load firmware aoe: clean device rq_list in aoedev_downdev() hwmon: (occ) fix unaligned accesses drm/nouveau/bl: increase buffer size to avoid truncate warning erofs: remove unused trace event erofs_destroy_inode ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged ALSA: hda/intel: Add Thinkpad E15 to PM deny list Input: sparcspkr - avoid unannotated fall-through HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() atm: Revert atm_account_tx() if copy_from_iter_full() fails. selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len scsi: s390: zfcp: Ensure synchronous unit_add scsi: storvsc: Increase the timeouts to storvsc_timeout jffs2: check jffs2_prealloc_raw_node_refs() result in few other places jffs2: check that raw node were preallocated before writing summary drivers/rapidio/rio_cm.c: prevent possible heap overwrite Revert "x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2" on v6.6 and older powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery platform/x86: dell_rbu: Stop overwriting data buffer platform: Add Surface platform directory Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first" tee: Prevent size calculation wraparound on 32-bit kernels ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value watchdog: da9052_wdt: respect TWDMIN i40e: fix MMIO write access to an invalid page in i40e_clear_hw sock: Correct error checking condition for (assign|release)_proto_idx() scsi: lpfc: Use memcpy() for BIOS version vxlan: Do not treat dst cache initialization errors as fatal clk: rockchip: rk3036: mark ddrphy as critical wifi: mac80211: do not offer a mesh path if forwarding is disabled net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get() pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction() pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction() pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name() ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows tcp: always seek for minimal rtt in tcp_rcv_rtt_update() net: dlink: add synchronization for stats update sctp: Do not wake readers in __sctp_write_space() emulex/benet: correct command version selection in be_cmd_get_stats() i2c: designware: Invoke runtime suspend on quick slave re-registration net: macb: Check return value of dma_set_mask_and_coherent() cpufreq: Force sync policy boost with global boost on sysfs update nios2: force update_mmu_cache on spurious tlb-permission--related pagefaults media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() media: tc358743: ignore video while HPD is low drm/amdkfd: Set SDMA_RLCx_IB_CNTL/SWITCH_INSIDE_IB jfs: Fix null-ptr-deref in jfs_ioc_trim drm/amdgpu/gfx9: fix CSIB handling drm/amdgpu/gfx8: fix CSIB handling jfs: fix array-index-out-of-bounds read in add_missing_indices drm/amdgpu/gfx7: fix CSIB handling drm/amdgpu/gfx10: fix CSIB handling drm/msm/a6xx: Increase HFI response timeout drm/amd/display: Add NULL pointer checks in dm_force_atomic_commit() media: uapi: v4l: Fix V4L2_TYPE_IS_OUTPUT condition drm/msm/hdmi: add runtime PM calls to DDC transfer function drm/bridge: analogix_dp: Add irq flag IRQF_NO_AUTOEN instead of calling disable_irq() sunrpc: update nextcheck time when adding new cache entries drm/amdgpu/gfx6: fix CSIB handling ACPI: battery: negate current when discharging PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn() power: supply: bq27xxx: Retrieve again when busy ACPICA: fix acpi parse and parseext cache leaks ACPICA: Avoid sequence overread in call to strncmp() ACPICA: fix acpi operand cache leak in dswstate.c iio: adc: ad7606_spi: fix reg write value mask PCI: Fix lock symmetry in pci_slot_unlock() PCI: Add ACS quirk for Loongson PCIe uio_hv_generic: Use correct size for interrupt and monitor pages regulator: max14577: Add error check for max14577_read_reg() mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS staging: iio: ad5933: Correct settling cycles encoding per datasheet net: ch9200: fix uninitialised access during mii_nway_restart ftrace: Fix UAF when lookup kallsym after ftrace disabled dm-mirror: fix a tiny race condition mtd: nand: sunxi: Add randomizer configuration before randomizer enable mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk mm: fix ratelimit_pages update error in dirty_ratio_handler() ipc: fix to protect IPCS lookups using RCU parisc: fix building with gcc-15 vgacon: Add check for vc_origin address range in vgacon_scroll() fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var EDAC/altera: Use correct write width with the INTTEST register NFC: nci: uart: Set tty->disc_data only in success path f2fs: prevent kernel warning due to negative i_nlink from corrupted image Input: ims-pcu - check record size in ims_pcu_flash_firmware() ext4: fix calculation of credits for extent tree modification ext4: inline: fix len overflow in ext4_prepare_inline_data bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap() media: v4l2-dev: fix error handling in __video_register_device() media: gspca: Add error handling for stv06xx_read_sensor() wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723 nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() gfs2: move msleep to sleepable context configfs: Do not override creating attribute file failure in populate_attrs() net: usb: aqc111: debug info before sanitation calipso: unlock rcu before returning -EAFNOSUPPORT xen/arm: call uaccess_ttbr0_enable for dm_op hypercall usb: Flush altsetting 0 endpoints before reinitializating them after reset. fs/filesystems: Fix potential unsigned integer underflow in fs_name() net/mdiobus: Fix potential out-of-bounds read/write access drm/amd/display: Do not add '-mhard-float' to dcn2{1,0}_resource.o for clang drm/amd/display: Do not add '-mhard-float' to dml_ccflags for clang MIPS: Move '-Wa,-msoft-float' check from as-option to cc-option x86/boot/compressed: prefer cc-option for CFLAGS additions net: mdio: C22 is now optional, EOPNOTSUPP if not provided net_sched: tbf: fix a race in tbf_change() net_sched: red: fix a race in __red_change() net_sched: prio: fix a race in prio_tune() net/mlx5: Fix return value when searching for existing flow group net/mlx5: Wait for inactive autogroups i40e: retry VFLR handling if there is ongoing VF reset i40e: return false from i40e_reset_vf if reset is in progress net_sched: sch_sfq: fix a potential crash on gso_skb handling scsi: iscsi: Fix incorrect error path labels for flashnode operations NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes NFSD: Fix ia_size underflow Input: synaptics-rmi - fix crash with unsupported versions of F34 Input: synaptics-rmi4 - convert to use sysfs_emit() APIs pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id() do_change_type(): refuse to operate on unmounted/not ours mounts PM: sleep: Fix power.is_suspended cleanup for direct-complete devices ice: create new Tx scheduler nodes for new queues only Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION net/mlx4_en: Prevent potential integer overflow calculating Hz vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl() serial: Fix potential null-ptr-deref in mlb_usio_probe() usb: renesas_usbhs: Reorder clock handling and power management in probe rtc: Fix offset calculation for .start_secs < 0 rtc: sh: assign correct interrupts with DT perf record: Fix incorrect --user-regs comments perf tests switch-tracking: Fix timestamp comparison mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove() rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send() perf scripts python: exported-sql-viewer.py: Fix pattern matching with Python 3 perf ui browser hists: Set actions->thread before calling do_zoom_thread() fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() soc: aspeed: lpc: Fix impossible judgment condition arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device bus: fsl-mc: fix double-free on mc_dev nilfs2: do not propagate ENOENT error from nilfs_btree_propagate() nilfs2: add pointer check for nilfs_direct_propagate() Squashfs: check return result of sb_min_blocksize ARM: dts: at91: at91sam9263: fix NAND chip selects ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select f2fs: fix to correct check conditions in f2fs_cross_rename f2fs: use d_inode(dentry) cleanup dentry->d_inode calipso: Don't call calipso functions for AF_INET sk. net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy net: usb: aqc111: fix error handling of usbnet read calls netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy wifi: ath9k_htc: Abort software beacon handling if disabled bpf: Fix WARN() in get_bpf_raw_tp_regs pinctrl: at91: Fix possible out-of-boundary access ktls, sockmap: Fix missing uncharge operation netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it f2fs: clean up w/ fscrypt_is_bounce_page() RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h wifi: rtw88: do not ignore hardware read error during DPK net: ncsi: Fix GCPS 64-bit member variables f2fs: fix to do sanity check on sbi->total_valid_block_count drm/tegra: rgb: Fix the unbound reference count drm/vkms: Adjust vkms_state->active_planes allocation type drm: rcar-du: Fix memory leak in rcar_du_vsps_init() selftests/seccomp: fix syscall_restart test for arm compat firmware: psci: Fix refcount leak in psci_dt_init m68k: mac: Fix macintosh_config for Mac II drm/vmwgfx: Add seqno waiter for sync_files spi: sh-msiof: Fix maximum DMA transfer size ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions" x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges() PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks() EDAC/skx_common: Fix general protection fault crypto: marvell/cesa - Avoid empty transfer descriptor crypto: marvell/cesa - Handle zero-length skcipher requests x86/cpu: Sanitize CPUID(0x80000000) output perf/core: Fix broken throttling when max_samples_per_tick=1 gfs2: gfs2_create_inode error handling fix netfilter: nft_socket: fix sk refcount leaks thunderbolt: Do not double dequeue a configuration request usb: usbtmc: Fix timeout value in get_stb usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE pinctrl: armada-37xx: set GPIO output value before setting direction pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31 tracing: Fix compilation warning on arm32 BACKPORT: binder: Create safe versions of binder log files UPSTREAM: binder: Refactor binder_node print synchronization Revert "coredump: hand a pidfd to the usermode coredump helper" Linux 5.4.294 xen/swiotlb: relax alignment requirements platform/x86: thinkpad_acpi: Ignore battery threshold change event notification platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys spi: spi-sun4i: fix early activation um: let 'make clean' properly clean underlying SUBARCH as well platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS nfs: don't share pNFS DS connections between net namespaces HID: quirks: Add ADATA XPG alpha wireless mouse support coredump: hand a pidfd to the usermode coredump helper fork: use pidfd_prepare() pid: add pidfd_prepare() pidfd: check pid has attached task in fdinfo coredump: fix error handling for replace_fd() net_sched: hfsc: Address reentrant enqueue adding class to eltree twice smb: client: Reset all search buffer pointers when releasing buffer smb: client: Fix use-after-free in cifs_fill_dirent drm/i915/gvt: fix unterminated-string-initialization warning netfilter: nf_tables: do not defer rule destruction via call_rcu netfilter: nf_tables: wait for rcu grace period on net_device removal netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx kbuild: Disable -Wdefault-const-init-unsafe spi: spi-fsl-dspi: restrict register range for regmap access mm/page_alloc.c: avoid infinite retries caused by cpuset race memcg: always call cond_resched() after fn() drm/edid: fixed the bug that hdr metadata was not reset llc: fix data loss when reading from a socket in llc_ui_recvmsg() ALSA: pcm: Fix race of buffer access at PCM OSS layer can: bcm: add missing rcu read protection for procfs content can: bcm: add locking for bcm_op runtime updates crypto: algif_hash - fix double free in hash_accept sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() net: dwmac-sun8i: Use parsed internal PHY address instead of 1 bridge: netfilter: Fix forwarding of fragmented packets xfrm: Sanitize marks before insert __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock xenbus: Allow PVH dom0 a non-local xenstore btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref nvmet-tcp: don't restore null sk_state_change ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 pinctrl: meson: define the pull up/down resistor value as 60 kOhm drm: Add valid clones check drm/atomic: clarify the rules around drm_atomic_state->allow_modeset regulator: ad5398: Add device tree support wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate bpftool: Fix readlink usage in get_fd_type HID: usbkbd: Fix the bit shift number for LED_KANA scsi: st: Restore some drive settings after reset scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine rcu: fix header guard for rcu_all_qs() rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y vxlan: Annotate FDB data races hwmon: (xgene-hwmon) use appropriate type for the latency value ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). net/mlx5e: reduce rep rxq depth to 256 for ECPF net/mlx5e: set the tx_queue_len for pfifo_fast net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB phy: core: don't require set_mode() callback for phy_get_mode() to work net/mlx4_core: Avoid impossible mlx4_db_alloc() order value smack: recognize ipv4 CIPSO w/o categories pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map ASoC: ops: Enforce platform maximum on initial value net/mlx5: Apply rate-limiting to high temperature warning net/mlx5: Modify LSB bitmask in temperature event to include only the first bit ACPI: HED: Always initialize before evged PCI: Fix old_size lower bound in calculate_iosize() too EDAC/ie31200: work around false positive build warning net: pktgen: fix access outside of user given buffer in pktgen_thread_write() wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU scsi: mpt3sas: Send a diag reset if target reset fails MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core MIPS: Use arch specific syscall name match function cpuidle: menu: Avoid discarding useful information x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() bonding: report duplicate MAC address in all situations net: xgene-v2: remove incorrect ACPI_PTR annotation drm/amdkfd: KFD release_work possible circular locking net/mlx5: Avoid report two health errors on same syndrome fpga: altera-cvp: Increase credit timeout drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence hwmon: (gpio-fan) Add missing mutex locks x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 net: pktgen: fix mpls maximum labels list parsing pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" media: cx231xx: set device_caps for 417 orangefs: Do not truncate file size dm cache: prevent BUG_ON by blocking retries on failed device resumes media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 ieee802154: ca8210: Use proper setters and getters for bitwise types rtc: ds1307: stop disabling alarms on probe powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 mmc: sdhci: Disable SD card clock before changing parameters netfilter: conntrack: Bound nf_conntrack sysctl writes posix-timers: Add cond_resched() to posix_timer_add() search loop xen: Add support for XenServer 6.1 platform device dm: restrict dm device size to 2^63-512 bytes kbuild: fix argument parsing in scripts/config scsi: st: ERASE does not change tape location scsi: st: Tighten the page format heuristics with MODE SELECT ext4: reorder capability check last um: Update min_low_pfn to match changes in uml_reserved um: Store full CSGSFS and SS register from mcontext btrfs: send: return -ENAMETOOLONG when attempting a path that is too long btrfs: avoid linker error in btrfs_find_create_tree_block() i2c: pxa: fix call balance of i2c->clk handling routines mmc: host: Wait for Vdd to settle on card power off libnvdimm/labels: Fix divide error in nd_label_data_init() pNFS/flexfiles: Report ENETDOWN as a connection error tools/build: Don't pass test log files to linker dql: Fix dql->limit value when reset. SUNRPC: rpc_clnt_set_transport() must not change the autobind setting NFSv4: Treat ENETUNREACH errors as fatal for state recovery fbdev: core: tileblit: Implement missing margin clearing for tileblit fbdev: fsl-diu-fb: add missing device_remove_file() mailbox: use error ret code of of_parse_phandle_with_args() kconfig: merge_config: use an empty file as initfile cgroup: Fix compilation issue due to cgroup_mutex not being exported dma-mapping: avoid potential unused data compilation warning scsi: target: iscsi: Fix timeout on deleted connection openvswitch: Fix unsafe attribute parsing in output_userspace() Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5 Input: synaptics - enable SMBus for HP Elitebook 850 G1 clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable() phy: renesas: rcar-gen3-usb2: Set timing registers only once phy: Fix error handling in tegra_xusb_port_init ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2() ACPI: PPTT: Fix processor subtable walk dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted" NFSv4/pnfs: Reset the layout state after a layoutreturn NFSv4/pnfs: pnfs_set_layout_stateid() should update the layout cred qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd() ALSA: sh: SND_AICA should depend on SH_DMA_API net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING spi: loopback-test: Do not split 1024-byte hexdumps nfs: handle failure of nfs_get_lock_context in unlock path RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug iio: chemical: sps30: use aligned_s64 for timestamp iio: adc: ad7768-1: Fix insufficient alignment of timestamp. staging: axis-fifo: Correct handling of tx_fifo_depth for size validation staging: axis-fifo: avoid parsing ignored device tree properties staging: axis-fifo: Remove hardware resets for user errors staging: axis-fifo: replace spinlock with mutex platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection do_umount(): add missing barrier before refcount checks in sync case nvme: unblock ctrl state transition for firmware update MIPS: Fix MAX_REG_OFFSET iio: adc: dln2: Use aligned_s64 for timestamp types: Complement the aligned types with signed 64-bit one usb: usbtmc: Fix erroneous generic_read ioctl return usb: usbtmc: Fix erroneous wait_srq ioctl return usb: usbtmc: Fix erroneous get_stb ioctl error returns USB: usbtmc: use interruptible sleep in usbtmc_read usb: typec: ucsi: displayport: Fix NULL pointer access usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition ocfs2: stop quota recovery before disabling quotas ocfs2: implement handshaking with ocfs2 recovery thread ocfs2: switch osb->disable_recovery to enum module: ensure that kobject_put() is safe for module type kobjects xenbus: Use kref to track req lifetime usb: uhci-platform: Make the clock really optional iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo iio: adis16201: Correct inclinometer channel resolution iio: adc: ad7606: fix serial register access staging: iio: adc: ad7816: Correct conditional logic for store mode Input: synaptics - enable InterTouch on Dell Precision M3800 Input: synaptics - enable InterTouch on Dynabook Portege X30L-G Input: synaptics - enable InterTouch on Dynabook Portege X30-D net: dsa: b53: fix learning on VLAN unaware bridges netfilter: ipset: fix region locking in hash types sch_htb: make htb_deactivate() idempotent scsi: target: Fix WRITE_SAME No Data Buffer crash dm: fix copying after src array boundaries iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid arm64: dts: rockchip: fix iface clock-name on px30 iommus usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling usb: chipidea: ci_hdrc_imx: use dev_err_probe() usb: chipidea: imx: refine the error handling for hsic usb: chipidea: imx: change hsic power regulator as optional irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() irqchip/gic-v2m: Mark a few functions __init irqchip/gic-v2m: Add const to of_device_id sch_htb: make htb_qlen_notify() idempotent of: module: add buffer overflow check in of_modalias() PCI: imx6: Skip controller_id generation logic for i.MX7D net: fec: ERR007885 Workaround for conventional TX net: lan743x: Fix memleak issue when GSO enabled lan743x: fix endianness when accessing descriptors lan743x: remove redundant initialization of variable current_head_index nvme-tcp: fix premature queue removal and I/O failover net: dlink: Correct endianness handling of led_mode net_sched: qfq: Fix double list add in class with netem as child qdisc net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc net_sched: drr: Fix double list add in class with netem as child qdisc net/mlx5: E-Switch, Initialize MAC Address for Default GID tracing: Fix oob write in trace_seq_to_buffer() dm: always update the array size in realloc_argv on success dm-integrity: fix a warning on invalid table line wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload parisc: Fix double SIGFPE crash i2c: imx-lpi2c: Fix clock count when probe defers EDAC/altera: Set DDR and SDMMC interrupt mask before registration EDAC/altera: Test the correct error reg offset Conflicts: Makefile drivers/platform/Kconfig drivers/platform/Makefile include/linux/pid.h Change-Id: Iab0fd96a23cfe218e945cbf71eef0e87dce204db	2025-09-01 13:17:46 +03:00
Akshay M Joshi	d72ce6ed64	ANDROID: GKI: Update symbol list for Zebra ... 3 function symbol(s) added 'void drm_client_dev_hotplug(struct drm_device*)' 'int drm_edid_to_sad(struct edid*, struct cea_sad**)' 'int drm_edid_to_speaker_allocation(struct edid*, u8**)' Bug: 427631467 Change-Id: I0e0dbe03e7d3deaa5bf0b7f42d4cdc3b48577973 Signed-off-by: Akshay M Joshi <aakshayjoshi892@gmail.com>	2025-06-30 05:23:36 -07:00
Michael Bestas	94fe92b480	Merge remote-tracking branch 'sm8350/lineage-20' into lineage-22.2 ... * sm8350/lineage-20: UPSTREAM: net: sched: Disallow replacing of child qdisc from one parent to another FROMGIT: media: venus: hfi: add a check to handle OOB in sfr region FROMGIT: media: venus: hfi: add check to handle incorrect queue size FROMGIT: media: venus: hfi_parser: refactor hfi packet parsing logic FROMGIT: media: venus: hfi_parser: add check to avoid out of bound access UPSTREAM: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 UPSTREAM: f2fs: compress: don't allow unaligned truncation on released compress inode UPSTREAM: net: core: reject skb_copy(_expand) for fraglist GSO skbs UPSTREAM: udp: prevent local UDP tunnel packets from being GROed UPSTREAM: udp: do not transition UDP GRO fraglist partial checksums to unnecessary UPSTREAM: udp: do not accept non-tunnel GSO skbs landing in a tunnel UPSTREAM: binder: Return EFAULT if we fail BINDER_ENABLE_ONEWAY_SPAM_DETECTION UPSTREAM: usb: dwc3: host: Set XHCI_SG_TRB_CACHE_SIZE_QUIRK UPSTREAM: usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK UPSTREAM: usb: xhci: Add error handling in xhci_map_urb_for_dma UPSTREAM: usb: xhci: Use temporary buffer to consolidate SG UPSTREAM: usb: xhci: Set quirk for XHCI_SG_TRB_CACHE_SIZE_QUIRK defconfig: Enable RTL8152 ETH-USB driver ANDROID: ABI: Cuttlefish Symbol update fw-api: CL 28563606 - update fw common interface files ... Change-Id: I39d8fa1352de578a5a6c15be2b4b9911bf1c154c	2025-04-23 17:52:52 +03:00
Tommy Webb	3b5fdef6b4	Merge tag 'ASB-2025-03-05_11-5.4' into android13-5.4-lahaina ... https://source.android.com/docs/security/bulletin/2025-03-01 CVE-2024-46852 CVE-2024-50302 CVE-2025-22413 # By Greg Kroah-Hartman (7) and others # Via Greg Kroah-Hartman (3) and Terence Tritton (xWF) (1) * tag 'ASB-2025-03-05_11-5.4': ANDROID: ABI: Cuttlefish Symbol update Revert "net: net_namespace: Optimize the code" Revert "net: add exit_batch_rtnl() method" Revert "gtp: use exit_batch_rtnl() method" Revert "gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp()." Revert "gtp: Destroy device along with udp socket's netns dismantle." Linux 5.4.290 Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals drm/v3d: Assign job pointer to NULL before signaling the fence Input: xpad - add support for wooting two he (arm) Input: xpad - add unofficial Xbox 360 wireless receiver clone Input: atkbd - map F23 key to support default copilot shortcut Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null" USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() ext4: fix slab-use-after-free in ext4_split_extent_at() ext4: avoid ext4_error()'s caused by ENOMEM in the truncate path vfio/platform: check the bounds of read/write syscalls net/xen-netback: prevent UAF in xenvif_flush_hash() net: xen-netback: hash.c: Use built-in RCU list checking signal/m68k: Use force_sigsegv(SIGSEGV) in fpsp040_die m68k: Add missing mmap_read_lock() to sys_cacheflush() m68k: Update ->thread.esp0 before calling syscall_trace() in ret_from_signal gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag irqchip/sunxi-nmi: Add missing SKIP_WAKE flag scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request ASoC: wm8994: Add depends on MFD core net: fix data-races around sk->sk_forward_alloc scsi: sg: Fix slab-use-after-free read in sg_release() ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() hrtimers: Handle CPU state correctly on hotplug irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly fs/proc: fix softlockup in __read_vmcore (part 2) net: ethernet: xgbe: re-add aneg to supported features in PHY quirks nvmet: propagate npwg topology poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll() kheaders: Ignore silly-rename files hfs: Sanity check the root record mac802154: check local interfaces before deleting sdata list i2c: mux: demux-pinctrl: check initial mux selection, too drm/v3d: Ensure job pointer is set to NULL after job completion nfp: bpf: prevent integer overflow in nfp_bpf_event_output() gtp: Destroy device along with udp socket's netns dismantle. gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp(). gtp: use exit_batch_rtnl() method net: add exit_batch_rtnl() method net: net_namespace: Optimize the code net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field() sctp: sysctl: rto_min/max: avoid using current->nsproxy ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv ocfs2: correct return value of ocfs2_local_free_info() phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider phy: core: fix code style in devm_of_phy_provider_unregister arm64: dts: rockchip: add hevc power domain clock to rk3328 arm64: dts: rockchip: add #power-domain-cells to power domain nodes arm64: dts: rockchip: fix pd_tcpc0 and pd_tcpc1 node position on rk3399 arm64: dts: rockchip: fix defines in pd_vio node for rk3399 iio: inkern: call iio_device_put() only on mapped devices iio: adc: at91: call input_free_device() on allocated iio_dev iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() iio: gyro: fxas21002c: Fix missing data update in trigger handler iio: adc: ti-ads8688: fix information leak in triggered buffer iio: imu: kmx61: fix information leak in triggered buffer iio: light: vcnl4035: fix information leak in triggered buffer iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer iio: pressure: zpa2326: fix information leak in triggered buffer usb: gadget: f_fs: Remove WARN_ON in functionfs_bind usb: fix reference leak in usb_new_device() USB: core: Disable LPM only for non-suspended ports USB: usblp: return error when setting unsupported protocol usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null USB: serial: cp210x: add Phoenix Contact UPS Device usb-storage: Add max sectors quirk for Nokia 208 staging: iio: ad9832: Correct phase range check staging: iio: ad9834: Correct phase range check USB: serial: option: add Neoway N723-EA support USB: serial: option: add MeiG Smart SRM815 drm/amd/display: increase MAX_SURFACES to the value supported by hw ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] drm/amd/display: Add check for granularity in dml ceil/floor helpers sctp: sysctl: auth_enable: avoid using current->nsproxy sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy dm thin: make get_first_thin use rcu-safe list first function tls: Fix tls_sw_sendmsg error handling net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute tcp/dccp: allow a connection when sk_max_ack_backlog is zero tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog net: 802: LLC+SNAP OID:PID lookup on start of skb data ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() dm array: fix cursor index when skipping across block boundaries dm array: fix unreleased btree blocks on closing a faulty array cursor dm array: fix releasing a faulty array block twice in dm_array_cursor_end jbd2: flush filesystem device before updating tail sequence Change-Id: I83cf20e29c63126cd17dfa393dca0ce7dfa47a76	2025-04-12 09:31:28 +00:00
Michael Bestas	869b1e64a6	Merge branch 'staging/kernel-msm/MMI-U1UGS34.23-110-23-2' into lineage-22.2 ... Based on tag 'MMI-U1UGS34.23-110-23-2' of https://github.com/MotorolaMobilityLLC/kernel-msm "Fogos push for Android 14" * staging/kernel-msm/MMI-U1UGS34.23-110-23-2: (698 commits) mmc: sdhci-msm: Move MMC_CAP2_MAX_DISCARD_SIZE to prevent merge conflict Reapply "UPSTREAM: binder: fix the missing BR_FROZEN_REPLY in binder_return_strings" Revert "qseecom: Suppress suspend warning if without bus scaling." Revert "Penang: fix for device suspend tests fail. [1/2]" Revert "Penang: resolve kasan panic" Revert "Penang: kasan panic" Revert "penang: device suspend tests fail" Revert "net: qrtr: get svc_id before queueing sk_buff" Revert "af_unix: Do not use atomic ops for unix_sk(sk)->inflight." Revert "af_unix: Fix garbage collector racing against connect()" Revert "BACKPORT: net: fix __dst_negative_advice() race" Revert "ANDROID: ABI fixup for abi break in struct dst_ops" Revert "BACKPORT:sched: Provide sched_set_fifo()" Revert "msm: npu: Fix use after free issue" Revert "fs:EROFS:Porting 5.10 erofs to 5.4" Revert "BACKPORT:erofs: add per-cpu threads for decompression as an option" Revert "UPSTREAM: erofs: fix an error code in z_erofs_init_zip_subsystem()" msm: adsprpc: Avoid taking reference for group_info adsprpc: Handle UAF scenario in put_args msm: adsprpc: use-after-free (UAF) in global maps ... Change-Id: Ia48438f247670d77560472205994632fa62062dd	2025-03-21 18:12:22 +02:00
Terence Tritton	0d3e5b23e5	ANDROID: ABI: Cuttlefish Symbol update ... android11-5.4 is broken on Cuttlefish aarch64 because of the use of blk_mq_quiesce_queue_nowait in virtio_blk.ko. The following steps were used to update the cuttlefish symbol list. $ BUILD_CONFIG=common/build.config.gki.aarch64 build/build.sh $ BUILD_CONFIG=common-modules/virtual-\ device/build.config.cuttlefish.aarch64 build/build.sh $ build/abi/extract_symbols out/android11-5.4/dist/ --whitelist \ common/android/abi_gki_aarch64_cuttlefish --additions-only $ BUILD_CONFIG=common/build.config.gki.aarch64 build/build_abi.sh \ --update --print-report Change-Id: I01fac6926d4362c00cbd212091ab7d4fa98b885c Bug: 391465004 Signed-off-by: Terry Tritton <ttritton@google.com>	2025-02-18 01:00:45 -08:00
Michael Bestas	b964d75b7e	Merge tag 'LA.UM.9.14.r1-25800-LAHAINA.QSSI15.0' of https://git.codelinaro.org/clo/la/kernel/msm-5.4 into android13-5.4-lahaina ... "LA.UM.9.14.r1-25800-LAHAINA.QSSI15.0" * tag 'LA.UM.9.14.r1-25800-LAHAINA.QSSI15.0' of https://git.codelinaro.org/clo/la/kernel/msm-5.4: msm: eva: Validating the SFR buffer size before accessing msm: eva: Copy back the validated size to avoid security issue msm: npu: Fix use after free issue USB: dwc3: gadget: Add stop transfer request for isoc transfers arm64: defconfig: Enable uvc for QCM6490 IOT target firmware: qcom_scm: do not clear dump mode from shutdown msm: virtio_npu: Fix use-after-free issue in unmap_buf msm: virtio_npu: Fix use-after-free issue in virt_npu_map_buf i2c: i2c-master-msm-geni: add null pointer check in event call back firmware: qcom_scm: handle echo b > /proc/sysrq-trigger scripts: mod: replace with a safe function msm: ep_pcie: Disable hot reset and ignore linkdown coresight-tmc: Replace deprecated function USB: dwc3: gadget: Queue data for 16 micro frames ahead in future power: reset: Disable support of dynamic download mode (ramdump) Conflicts: arch/arm64/boot/dts/vendor/bindings/sound/rt5645.txt Change-Id: I57c063465c2804c77c5a6f62acb6c7987a38bc7f	2025-02-14 02:42:56 +02:00
Michael Bestas	b9715311a2	Merge tag 'ASB-2025-02-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina ... https://source.android.com/docs/security/bulletin/2025-02-01 CVE-2024-53104 CVE-2025-0088 * tag 'ASB-2025-02-05_11-5.4' of https://android.googlesource.com/kernel/common: (449 commits) ANDROID: gki - change networking configuration ANDROID: kernelci build-break for 64-bit riscv clang builds (5.4 only) Revert "BACKPORT: RISC-V: Stop relying on GCC's register allocator's hueristics" Revert "ANDROID: declare sp_in_global outside of CONFIG_FRAME_POINTER" ANDROID: GKI: add Trimble symbol list UPSTREAM: selinux: ignore unknown extended permissions ANDROID: ABI: Update allowed list for galaxy Revert "netfilter: Replace zero-length array with flexible-array member" Revert "tracing: Constify string literal data member in struct trace_event_call" Revert "skb_expand_head() adjust skb->truesize incorrectly" Linux 5.4.289 ftrace: use preempt_enable/disable notrace macros to avoid double fault mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() drm: adv7511: Drop dsi single lane support net/sctp: Prevent autoclose integer overflow in sctp_association_init() sky2: Add device ID 11ab:4373 for Marvell 88E8075 pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking RDMA/uverbs: Prevent integer overflow issue modpost: fix the missed iteration for the max bit in do_input() modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host ... Conflicts: arch/arm64/boot/dts/vendor/bindings/clock/adi,axi-clkgen.yaml arch/arm64/boot/dts/vendor/bindings/clock/axi-clkgen.txt drivers/rpmsg/qcom_glink_native.c drivers/soc/qcom/socinfo.c Change-Id: I60727e0cdd974fda5ca71f938bc2f984a8bbf19a	2025-02-06 22:53:05 +02:00
joann_liu	bf5b85fe24	ANDROID: GKI: add Trimble symbol list ... Add symbol list for cdc_mbim.ko and qmi_wwan.ko Leaf changes summary: 3 artifacts changed Changed leaf types summary: 0 leaf type changed Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 3 Added functions Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 0 Added variable 3 Added functions: [A] 'function void in6_dev_finish_destroy(inet6_dev*)' [A] 'function void netdev_stats_to_stats64(rtnl_link_stats64*, const net_device_stats*)' [A] 'function net_device* netdev_upper_get_next_dev_rcu(net_device*, list_head**)' Bug: 390219540 Change-Id: I9ea4615f36b1e9ec89d2f8247eafae6f0fdb0778 Signed-off-by: joann_liu <joann_liu@pegatroncorp.com>	2025-01-16 06:41:15 -08:00
Heegon Lee	1194f08d5c	ANDROID: ABI: Update allowed list for galaxy ... Leaf changes summary: 1 artifact changed Changed leaf types summary: 0 leaf type changed Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 1 Added function Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 0 Added variable 1 Added function: [A] 'function int usb_driver_set_configuration(usb_device*, int)' Bug: 390078050 Change-Id: I2c3b389c4b0032b877f1c6112695eff296b6a68e Signed-off-by: Heegon Lee <heegon.lee@samsung.com>	2025-01-15 17:23:38 +09:00
Michael Bestas	0262d4e51f	Merge tag 'ASB-2024-12-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina ... https://source.android.com/docs/security/bulletin/2024-12-01 * tag 'ASB-2024-12-05_11-5.4' of https://android.googlesource.com/kernel/common: (552 commits) UPSTREAM: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT ANDROID: add file for recording allowed ABI breaks Revert "spi: Fix deadlock when adding SPI controllers on SPI buses" Revert "spi: fix use-after-free of the add_lock mutex" ANDROID: declare sp_in_global outside of CONFIG_FRAME_POINTER BACKPORT: RISC-V: Stop relying on GCC's register allocator's hueristics UPSTREAM: x86/percpu: Clean up percpu_add_op() UPSTREAM: x86/percpu: Clean up percpu_from_op() UPSTREAM: x86/percpu: Clean up percpu_to_op() UPSTREAM: x86/percpu: Introduce size abstraction macros BACKPORT: FROMGIT: binder: add delivered_freeze to debugfs output BACKPORT: FROMGIT: binder: fix memleak of proc->delivered_freeze FROMGIT: binder: allow freeze notification for dead nodes FROMGIT: binder: fix BINDER_WORK_CLEAR_FREEZE_NOTIFICATION debug logs FROMGIT: binder: fix BINDER_WORK_FROZEN_BINDER debug logs BACKPORT: FROMGIT: binder: fix freeze UAF in binder_release_work() FROMGIT: binder: fix OOB in binder_add_freeze_work() FROMGIT: binder: fix node UAF in binder_add_freeze_work() Linux 5.4.286 mm: avoid leaving partial pfn mappings around in error case ... Conflicts: arch/arm64/boot/dts/vendor/bindings/gpu/samsung-rotator.txt arch/arm64/boot/dts/vendor/bindings/gpu/samsung-rotator.yaml drivers/clk/qcom/clk-rpmh.c drivers/usb/dwc3/core.c fs/erofs/decompressor.c net/qrtr/qrtr.c Change-Id: Iae3a7502b304d7be66da795411c4f330eef8b693	2024-12-17 03:24:53 +02:00
Aleksei Vetrov	e3a8df3001	ANDROID: add file for recording allowed ABI breaks ... The tooling is configured to block any changes that has a chance to break ABI, including the possibly safe: * replacement of ANDROID_KABI_RESERVE with ANDROID_KABI_USE * changes to internal structures that are not accessible to modules * addition of enumerators These changes are difficult for the tooling to identify as definitively non-breaking, therefore, a human reviewer must check the change and approve it as non-breaking. This change adds a file to record the approval with the change that was marked as breaking. This allows the tooling to: * unblock presubmits for the change * don't block presubmits when it is cherry-picked to another branch * filter compatibility reports between a release branch and a tip of the development branch it was forked from The file is prefilled with all breaks that happened from the KMI freeze. Bug: 365521273 Change-Id: I63fbed5c364cb8c7bd149bf40d084d3d87533bf7 Signed-off-by: Aleksei Vetrov <vvvvvv@google.com>	2024-11-22 11:19:15 +00:00
kamasali Satyanarayan	222ee0825f	Merge android11-5.4.281 (d62984a) into msm-5.4 ... * remotes/origin/tmp-d62984a: ANDROID: delete tool added by mistake ANDROID: fix ENOMEM check of binder_proc_ext ANDROID: binder: fix KMI issues due to frozen notification BACKPORT: FROMGIT: binder: frozen notification binder_features flag BACKPORT: FROMGIT: binder: frozen notification BACKPORT: selftests/binderfs: add test for feature files UPSTREAM: docs: binderfs: add section about feature files BACKPORT: binderfs: add support for feature files FROMLIST: binder: fix memory leaks of spam and pending work FROMGIT: Binder: add TF_UPDATE_TXN to replace outdated txn BACKPORT: binder: tell userspace to dump current backtrace when detected oneway spamming UPSTREAM: net: sched: sch_multiq: fix possible OOB write in multiq_tune() FROMLIST: binder: fix UAF caused by offsets overwrite Revert "net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD()" Linux 5.4.281 tap: add missing verification for short frame tun: add missing verification for short frame filelock: Fix fcntl/close race recovery compat path ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 jfs: don't walk off the end of ealist ocfs2: add bounds checking to ocfs2_check_dir_entry() net: relax socket state check at accept time. drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() ACPI: processor_idle: Fix invalid comparison with insertion sort for latency ARM: 9324/1: fix get_user() broken with veneer hfsplus: fix uninit-value in copy_name selftests/vDSO: fix clang build errors and warnings spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices fs: better handle deep ancestor chains in is_subdir() Bluetooth: hci_core: cancel all works upon hci_unregister_dev() scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed powerpc/eeh: avoid possible crash when edev->pdev changes powerpc/pseries: Whitelist dtl slub object for copying to userspace net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() net: usb: qmi_wwan: add Telit FN912 compositions ALSA: dmaengine_pcm: terminate dmaengine before synchronize s390/sclp: Fix sclp_init() cleanup on failure can: kvaser_usb: fix return value for hif_usb_send_regout ASoC: ti: omap-hdmi: Fix too long driver name ASoC: ti: davinci-mcasp: Set min period size using FIFO config bytcr_rt5640 : inverse jack detect for Archos 101 cesium Input: elantech - fix touchpad state on resume for Lenovo N24 mips: fix compat_sys_lseek syscall ALSA: hda/realtek: Add more codec ID to no shutup pins list KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() wifi: cfg80211: wext: add extra SIOCSIWSCAN data check mei: demote client disconnect warning on suspend to debug fs/file: fix the check in find_next_fd() kconfig: remove wrong expr_trans_bool() kconfig: gconf: give a proper initial state to the Save button ila: block BH in ila_output() Input: silead - Always support 10 fingers wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata ACPI: EC: Avoid returning AE_OK on errors in address space handler ACPI: EC: Abort address space access upon error scsi: qedf: Set qed_slowpath_params to zero before use filelock: Remove locks reliably when fcntl/close race is detected gcc-plugins: Rename last_stmt() for GCC 14+ ANDROID: GKI: refresh ABI to include kimage_vaddr ANDROID: preserve CRC for struct tcp_sock Linux 5.4.280 i2c: rcar: bring hardware to known state when probing nilfs2: fix kernel bug on rename operation of broken directory tcp: avoid too many retransmit packets tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() net: tcp: fix unexcepted socket die when snd_wnd is 0 tcp: refactor tcp_retransmit_timer() SUNRPC: Fix RPC client cleaned up the freed pipefs dentries libceph: fix race between delayed_work() and ceph_monc_stop() ALSA: hda/realtek: Limit mic boost on VAIO PRO PX nvmem: meson-efuse: Fix return value of nvmem callbacks hpet: Support 32-bit userspace USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k USB: serial: option: add Rolling RW350-GL variants USB: serial: option: add Netprisma LCUK54 series modules USB: serial: option: add support for Foxconn T99W651 USB: serial: option: add Fibocom FM350-GL USB: serial: option: add Telit FN912 rmnet compositions USB: serial: option: add Telit generic core-dump composition octeontx2-af: fix detection of IP layer ARM: davinci: Convert comma to semicolon s390: Mark psw in __load_psw_mask() as __unitialized udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). ppp: reject claimed-as-LCP but actually malformed packets net: ethernet: lantiq_etop: fix double free in detach net: lantiq_etop: add blank line after declaration octeontx2-af: Fix incorrect value output on error path in rvu_check_rsrc_availability() tcp: fix incorrect undo caused by DSACK of TLP retransmit tcp: add TCP_INFO status for failed client TFO vfs: don't mod negative dentry count when on shrinker list fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading filelock: fix potential use-after-free in posix_lock_inode nilfs2: fix incorrect inode allocation from reserved inodes nvme-multipath: find NUMA path only for online numa-node ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897 i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr media: dw2102: fix a potential buffer overflow bnx2x: Fix multiple UBSAN array-index-out-of-bounds drm/amdgpu/atomfirmware: silence UBSAN warning drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" fsnotify: Do not generate events for O_PATH file descriptors can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct mm: optimize the redundant loop of mm_update_owner_next() nilfs2: add missing check for inode numbers on directory entries nilfs2: fix inode number range checks inet_diag: Initialize pad field in struct inet_diag_req_v2 selftests: make order checking verbose in msg_zerocopy selftest selftests: fix OOM in msg_zerocopy selftest bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() wifi: wilc1000: fix ies_len type in connect path tcp_metrics: validate source addr length UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open() net: tcp better handling of reordering then loss cases tcp: add ece_ack flag to reno sack functions tcp: tcp_mark_head_lost is only valid for sack-tcp s390/pkey: Wipe sensitive data on failure jffs2: Fix potential illegal address access in jffs2_free_inode powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#" orangefs: fix out-of-bounds fsid access powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n i2c: i801: Annotate apanel_addr as __ro_after_init media: dvb-frontends: tda10048: Fix integer overflow media: s2255: Use refcount_t instead of atomic_t for num_channels media: dvb-frontends: tda18271c2dd: Remove casting during div net: dsa: mv88e6xxx: Correct check for empty list Input: ff-core - prefer struct_size over open coded arithmetic firmware: dmi: Stop decoding on broken entry sctp: prefer struct_size over open coded arithmetic media: dw2102: Don't translate i2c read into write drm/amd/display: Skip finding free audio for unknown engine_id drm/amdgpu: Initialize timestamp for some legacy SOCs scsi: qedf: Make qedf_execute_tmf() non-preemptible IB/core: Implement a limit on UMAD receive List media: dvb-usb: dib0700_devices: Add missing release_firmware() media: dvb: as102-fe: Fix as10x_register_addr packing drm/lima: fix shared irq handling on driver remove Compiler Attributes: Add __uninitialized macro Linux 5.4.279 arm64: dts: rockchip: Add sound-dai-cells for RK3368 ARM: dts: rockchip: rk3066a: add #sound-dai-cells to hdmi node tcp: Fix data races around icsk->icsk_af_ops. ipv6: Fix data races around sk->sk_prot. ipv6: annotate some data-races around sk->sk_prot nfs: Leave pages in the pagecache if readpage failed pwm: stm32: Refuse too small period requests mtd: spinand: macronix: Add support for serial NAND flash ftruncate: pass a signed offset ata: libata-core: Fix double free on error batman-adv: Don't accept TT entries for out-of-spec VIDs drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes hexagon: fix fadvise64_64 calling conventions csky, hexagon: fix broken sys_sync_file_range net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new net: can: j1939: recover socket queue on CAN bus error during BAM transmission net: can: j1939: Initialize unused data in j1939_send_one() tty: mcf: MCF54418 has 10 UARTS usb: atm: cxacru: fix endpoint checking in cxacru_bind() usb: musb: da8xx: fix a resource leak in probe() usb: gadget: printer: SS+ support net: usb: ax88179_178a: improve link status logs iio: chemical: bme680: Fix sensor data read operation iio: chemical: bme680: Fix overflows in compensate() functions iio: chemical: bme680: Fix calibration data variable iio: chemical: bme680: Fix pressure value output iio: adc: ad7266: Fix variable checking bug mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro() mmc: sdhci: Do not invert write-protect twice mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos x86: stop playing stack games in profile_pc() gpio: davinci: Validate the obtained number of IRQs nvme: fixup comment for nvme RDMA Provider Type soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message media: dvbdev: Initialize sbuf ALSA: emux: improve patch ioctl data validation net/dpaa2: Avoid explicit cpumask var allocation on stack net/iucv: Avoid explicit cpumask var allocation on stack mtd: partitions: redboot: Added conversion of operands to a larger type drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers parisc: use correct compat recv/recvfrom syscalls sparc: fix old compat_sys_select() net: phy: micrel: add Microchip KSZ 9477 to the device table net: phy: mchp: Add support for LAN8814 QUAD PHY net: dsa: microchip: fix initial port flush problem ASoC: fsl-asoc-card: set priv->pdev before using it netfilter: nf_tables: validate family when identifying table via handle drm/amdgpu: fix UBSAN warning in kv_dpm.c pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER iio: dac: ad5592r: fix temperature channel scaling value iio: dac: ad5592r: un-indent code-block for scale read iio: dac: ad5592r-base: Replace indio_dev->mlock with own device lock x86/amd_nb: Check for invalid SMN reads PCI: Add PCI_ERROR_RESPONSE and related definitions perf/core: Fix missing wakeup when waiting for context reference kheaders: explicitly define file modes for archived headers Revert "kheaders: substituting --sort in archive creation" tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test arm64: dts: qcom: qcs404: fix bluetooth device address ARM: dts: samsung: smdk4412: fix keypad no-autorepeat ARM: dts: samsung: exynos4412-origen: fix keypad no-autorepeat ARM: dts: samsung: smdkv310: fix keypad no-autorepeat i2c: ocores: set IACK bit after core is enabled gcov: add support for GCC 14 drm/radeon: fix UBSAN warning in kv_dpm.c ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." dmaengine: ioatdma: Fix missing kmem_cache_destroy() regulator: core: Fix modpost error "regulator_get_regmap" undefined net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings netfilter: ipset: Fix suspicious rcu_dereference_protected() virtio_net: checksum offloading handling fix net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() net/sched: act_api: rely on rcu in tcf_idr_check_alloc netns: Make get_net_ns() handle zero refcount net xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() ipv6: prevent possible NULL dereference in rt6_probe() ipv6: prevent possible NULL deref in fib6_nh_init() netrom: Fix a memory leak in nr_heartbeat_expiry() cipso: fix total option length computation mips: bmips: BCM6358: make sure CBR is correctly set MIPS: Routerboard 532: Fix vendor retry check code MIPS: Octeon: Add PCIe link status check PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports udf: udftime: prevent overflow in udf_disk_stamp_to_time() usb: misc: uss720: check for incompatible versions of the Belkin F5U002 powerpc/io: Avoid clang null pointer arithmetic warnings powerpc/pseries: Enforce hcall result buffer validity and size Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl scsi: qedi: Fix crash while reading debugfs attribute drop_monitor: replace spin_lock by raw_spin_lock batman-adv: bypass empty buckets in batadv_purge_orig_ref() selftests/bpf: Prevent client connect before server bind in test_tc_tunnel.sh rcutorture: Fix rcu_torture_one_read() pipe_count overflow comment i2c: at91: Fix the functionality flags of the slave-only interface usb-storage: alauda: Check whether the media is initialized greybus: Fix use-after-free bug in gb_interface_release due to race condition. netfilter: nftables: exthdr: fix 4-byte stack OOB write hugetlb_encode.h: fix undefined behaviour (34 << 26) hv_utils: drain the timesync packets on onchannelcallback tick/nohz_full: Don't abuse smp_call_function_single() in tick_setup_device() nilfs2: fix potential kernel bug due to lack of writeback flag waiting intel_th: pci: Add Lunar Lake support intel_th: pci: Add Meteor Lake-S support intel_th: pci: Add Sapphire Rapids SOC support intel_th: pci: Add Granite Rapids SOC support intel_th: pci: Add Granite Rapids support dmaengine: axi-dmac: fix possible race in remove() PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id ocfs2: fix races between hole punching and AIO+DIO ocfs2: use coarse time for new created files fs/proc: fix softlockup in __read_vmcore vmci: prevent speculation leaks by sanitizing event in event_deliver() tracing/selftests: Fix kprobe event name test for .isra. functions drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found drm/exynos/vidi: fix memory leak in .get_modes() drivers: core: synchronize really_probe() and dev_uevent() ionic: fix use after netif_napi_del() net/ipv6: Fix the RT cache flush via sysctl using a previous delay netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets tcp: fix race in tcp_v6_syn_recv_sock() drm/bridge/panel: Fix runtime warning on panel bridge release drm/komeda: check for error-valued pointer liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() iommu: Return right value in iommu_sva_bind_device() iommu/amd: Fix sysfs leak in iommu init HID: core: remove unnecessary WARN_ON() in implement() gpio: tqmx86: fix typo in Kconfig label SUNRPC: return proper error from gss_wrap_req_priv Input: try trimming too long modalias strings scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory xhci: Apply broken streams quirk to Etron EJ188 xHCI host xhci: Apply reset resume quirk to Etron EJ188 xHCI host xhci: Set correct transferred length for cancelled bulk transfers jfs: xattr: fix buffer overflow for invalid xattr mei: me: release irq in mei_me_pci_resume error path USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors nilfs2: return the mapped address from nilfs_get_page() nilfs2: Remove check for PageError selftests/mm: compaction_test: fix bogus test success on Aarch64 selftests/mm: conform test to TAP format output selftests/mm: compaction_test: fix incorrect write of zero to nr_hugepages serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler serial: sc16is7xx: replace hardcoded divisor value with BIT() macro drm/amd/display: Handle Y carry-over in VCP X.Y calculation ASoC: ti: davinci-mcasp: Fix race condition during probe ASoC: ti: davinci-mcasp: Handle missing required DT properties ASoC: ti: davinci-mcasp: Simplify the configuration parameter handling ASoC: ti: davinci-mcasp: Remove legacy dma_request parsing ASoC: ti: davinci-mcasp: Use platform_get_irq_byname_optional ASoC: ti: davinci-mcasp: remove always zero of davinci_mcasp_get_dt_params ASoC: ti: davinci-mcasp: remove redundant assignment to variable ret usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete ipv6: fix possible race in __fib6_drop_pcpu_from() af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill(). af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen(). af_unix: Use unix_recvq_full_lockless() in unix_stream_connect(). af_unix: Annotate data-race of net->unx.sysctl_max_dgram_qlen. af_unix: Annotate data-races around sk->sk_state in UNIX_DIAG. af_unix: Annotate data-races around sk->sk_state in sendmsg() and recvmsg(). af_unix: Annotate data-races around sk->sk_state in unix_write_space() and poll(). af_unix: Annotate data-race of sk->sk_state in unix_inq_len(). ptp: Fix error message on failed pin verification net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP net/mlx5: Stop waiting for PCI if pci channel is offline tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB vxlan: Fix regression when dropping packets due to invalid src addresses net: sched: sch_multiq: fix possible OOB write in multiq_tune() ipv6: sr: block BH in seg6_output_core() and seg6_input_core() wifi: iwlwifi: mvm: don't read past the mfuart notifcation wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64 wifi: cfg80211: pmsr: use correct nla_get_uX functions wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects Conflicts: kernel/gen_kheaders.sh Change-Id: I4a0de5504b5e61a23b78a1a8f06aceaac810f3c7 Signed-off-by: kamasali Satyanarayan <quic_kamasali@quicinc.com>	2024-10-29 01:43:17 -07:00
kamasali Satyanarayan	e88bb9b374	Merge android11-5.4.278(7453ecf) into msm-5.4 ... * remotes/origin/tmp-7453ecf: UPSTREAM: usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() ANDROID: 16K: Don't set padding vm_flags on 32-bit archs ANDROID: GKI: refresh ABI to include kimage_vaddr BACKPORT: arm64: move kimage_vaddr to .rodata BACKPORT: arm64: kernel: Convert to modern annotations for assembly data ANDROID: fix kernelci build breaks due to hid/uhid cyclic dependency UPSTREAM: af_unix: Fix garbage collector racing against connect() Revert "drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector" Linux 5.4.278 nfs: fix undefined behavior in nfs_block_bits() s390/ap: Fix crash in AP internal function modify_bitmap() ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() sparc: move struct termio to asm/termios.h xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING net: fix __dst_negative_advice() race kdb: Use format-specifiers rather than memset() for padding in kdb_read() kdb: Merge identical case statements in kdb_read() kdb: Fix console handling when editing and tab-completing commands kdb: Use format-strings rather than '\0' injection in kdb_read() kdb: Fix buffer overflow during tab-complete sparc64: Fix number of online CPUs intel_th: pci: Add Meteor Lake-S CPU support net/9p: fix uninit-value in p9_client_rpc() net/ipv6: Fix route deleting failure when metric equals 0 crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak crypto: ecrdsa - Fix module auto-load on add_key KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode fbdev: savage: Handle err return when savagefb_check_var failed media: v4l2-core: hold videodev_lock until dev reg, finishes media: mxl5xx: Move xpt structures off stack media: mc: mark the media devnode as registered from the, start arm64: dts: hi3798cv200: fix the size of GICR wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING arm64: tegra: Correct Tegra132 I2C alias ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx ata: pata_legacy: make legacy_exit() work again drm/amdgpu: add error handle to avoid out-of-bounds media: lgdt3306a: Add a check against null-pointer-def f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() x86/mm: Remove broken vsyscall emulation code from the page fault code vxlan: Fix regression when dropping packets due to invalid src addresses nilfs2: fix use-after-free of timer for log writer thread afs: Don't cross .backup mountpoint from backup volume io_uring: fail NOP if non-zero op flags is passed in mmc: core: Do not force a retune before RPMB switch binder: fix max_thread type inconsistency SUNRPC: Fix loop termination condition in gss_free_in_token_pages() genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline ALSA: timer: Set lower bound of start tick time ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound spi: stm32: Don't warn about spurious interrupts kconfig: fix comparison to constant symbols, 'm', 'n' netfilter: tproxy: bail out if IP has been disabled on the device net:fec: Add fec_enet_deinit() net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM smsc95xx: use usbnet->driver_priv smsc95xx: remove redundant function arguments enic: Validate length of nl attributes in enic_set_vf_port dma-buf/sw-sync: don't enable IRQ from sync_print_obj() net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion nvmet: fix ns enable/disable possible hang spi: Don't mark message DMA mapped when no transfer in it is netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() nfc: nci: Fix kcov check in nci_rx_work() net: fec: avoid lock evasion when reading pps_enable virtio: delete vq in vp_find_vqs_msix() when request_irq() fails arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY openvswitch: Set the skbuff pkt_type for proper pmtud support. tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). params: lift param_set_uint_minmax to common code ipv6: sr: fix memleak in seg6_hmac_init_algo sunrpc: fix NFSACL RPC retry on soft mount nfc: nci: Fix uninit-value in nci_rx_work x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION() media: cec: cec-api: add locking in cec_release() media: cec: cec-adap: always cancel work in cec_transmit_msg_fh um: Fix the -Wmissing-prototypes warning for __switch_mm powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() media: stk1160: fix bounds checking in stk1160_copy_video() um: Add winch to winch_handlers before registering winch IRQ um: Fix return value in ubd_init() drm/msm/dpu: Always flush the slave INTF on the CTL Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation Input: ims-pcu - fix printf string overflow libsubcmd: Fix parse-options memory leak serial: sh-sci: protect invalidating RXDMA on shutdown f2fs: fix to release node block count in error path of f2fs_new_node_page() extcon: max8997: select IRQ_DOMAIN instead of depending on it ppdev: Add an error check in register_device ppdev: Remove usage of the deprecated ida_simple_xx() API stm class: Fix a double free in stm_register_device() usb: gadget: u_audio: Clear uac pointer when freed. microblaze: Remove early printk call from cpuinfo-static.c microblaze: Remove gcc flag for non existing early_printk.c file iio: pressure: dps310: support negative temperature values greybus: arche-ctrl: move device table to its right location serial: max3100: Fix bitwise types serial: max3100: Update uart_driver_registered on driver removal serial: max3100: Lock port->lock when calling uart_handle_cts_change() firmware: dmi-id: add a release callback function dmaengine: idma64: Add check for dma_set_max_seg_size soundwire: cadence: fix invalid PDI offset soundwire: cadence_master: improve PDI allocation soundwire: intel: don't filter out PDI0/1 soundwire: cadence/intel: simplify PDI/port mapping greybus: lights: check return of get_channel_from_mode sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level sched/topology: Don't set SD_BALANCE_WAKE on cpuset domain relax af_packet: do not call packet_read_pending() from tpacket_destruct_skb() netrom: fix possible dead-lock in nr_rt_ioctl() RDMA/IPoIB: Fix format truncation compilation errors selftests/kcmp: remove unused open mode selftests/kcmp: Make the test output consistent and clear SUNRPC: Fix gss_free_in_token_pages() sunrpc: removed redundant procp check ext4: avoid excessive credit estimate in ext4_tmpfile() x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map RDMA/hns: Use complete parentheses in macros drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value drm/arm/malidp: fix a possible null pointer dereference fbdev: sh7760fb: allow modular build platform/x86: wmi: Make two functions static media: radio-shark2: Avoid led_names truncations media: ngene: Add dvb_ca_en50221_init return value check fbdev: sisfb: hide unused variables powerpc/fsl-soc: hide unused const variable drm/mediatek: Add 0 size check to mtk_drm_gem_obj fbdev: shmobile: fix snprintf truncation mtd: rawnand: hynix: fixed typo drm/amd/display: Fix potential index out of bounds in color transformation function ipv6: sr: fix invalid unregister error path ipv6: sr: fix incorrect unregister order ipv6: sr: add missing seg6_local_exit net: openvswitch: fix overwriting ct original tuple for ICMPv6 net: usb: smsc95xx: stop lying about skb->truesize af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg net: ethernet: cortina: Locking fixes m68k: mac: Fix reboot hang on Mac IIci m68k: Fix spinlock race in kernel thread creation net: usb: sr9700: stop lying about skb->truesize usb: aqc111: stop lying about skb->truesize wifi: mwl8k: initialize cmd->addr[] properly scsi: qedf: Ensure the copied buf is NUL terminated scsi: bfa: Ensure the copied buf is NUL terminated HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors Revert "sh: Handle calling csum_partial with misaligned data" sh: kprobes: Merge arch_copy_kprobe() into arch_prepare_kprobe() wifi: ar5523: enable proper endpoint verification wifi: carl9170: add a proper sanity check for endpoints macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" tcp: avoid premature drops in tcp_add_backlog() tcp: fix a signed-integer-overflow bug in tcp_add_backlog() tcp: minor optimization in tcp_add_backlog() wifi: ath10k: populate board data for WCN3990 wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() x86/purgatory: Switch to the position-independent small code model scsi: hpsa: Fix allocation size for Scsi_Host private data scsi: libsas: Fix the failure of adding phy with zero-address to port cpufreq: exit() callback is optional cpufreq: Rearrange locking in cpufreq_remove_dev() cpufreq: Split cpufreq_offline() cpufreq: Reorganize checks in cpufreq_offline() ACPI: disable -Wstringop-truncation irqchip/alpine-msi: Fix off-by-one in allocation error path scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL scsi: ufs: core: Perform read back after disabling interrupts scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV scsi: ufs: qcom: Perform read back after writing reset bit qed: avoid truncating work queue length x86/boot: Ignore relocations in .notes sections in walk_relocs() too wifi: ath10k: poll service ready message before failing md: fix resync softlockup when bitmap size is less than array size null_blk: Fix missing mutex_destroy() at module removal jffs2: prevent xattr node from overflowing the eraseblock s390/cio: fix tracepoint subchannel type field crypto: ccp - drop platform ifdef checks parisc: add missing export of __cmpxchg_u8() nilfs2: fix out-of-range warning ecryptfs: Fix buffer size for tag 66 packet firmware: raspberrypi: Use correct device for DMA mappings crypto: bcm - Fix pointer arithmetic openpromfs: finish conversion to the new mount API nvme: find numa distance only if controller has valid numa id drm/amdkfd: Flush the process wq before creating a kfd_process ASoC: da7219-aad: fix usage of device_get_named_child_node() ASoC: dt-bindings: rt5645: add cbj sleeve gpio property ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating drm/amd/display: Set color_mgmt_changed to true on unsuspend net: usb: qmi_wwan: add Telit FN920C04 compositions wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class nilfs2: fix potential hang in nilfs_detach_log_writer() nilfs2: fix unexpected freezing of nilfs_segctor_sync() net: smc91x: Fix m68k kernel compilation for ColdFire CPU ring-buffer: Fix a race between readers and resize checks speakup: Fix sizeof() vs ARRAY_SIZE() bug tty: n_gsm: fix possible out-of-bounds in gsm0_receive() x86/tsc: Trust initial offset in architectural TSC-adjust MSRs Linux 5.4.277 docs: kernel_include.py: Cope with docutils 0.21 serial: kgdboc: Fix NMI-safety problems from keyboard reset code usb: typec: ucsi: displayport: Fix potential deadlock drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() arm64: dts: qcom: Fix 'interrupt-map' parent address cells firmware: arm_scmi: Harden accesses to the reset domains smb: client: fix potential OOBs in smb2_parse_contexts() net: bcmgenet: synchronize UMAC_CMD access net: bcmgenet: synchronize use of bcmgenet_set_rx_mode() net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access net: bcmgenet: keep MAC in reset until PHY is up Revert "net: bcmgenet: use RGMII loopback for MAC reset" Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems" ext4: fix bug_on in __es_tree_search pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin() Linux 5.4.276 pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback pinctrl: mediatek: remove set but not used variable 'e' pinctrl: mediatek: Fix some off by one bugs pinctrl: mediatek: Fix fallback behavior for bias_set_combo regulator: core: fix debugfs creation regression net: fix out-of-bounds access in ops_init drm/vmwgfx: Fix invalid reads in fence signaled events dyndbg: fix old BUG_ON in >control parser tipc: fix UAF in error path usb: gadget: f_fs: Fix a race condition when processing setup packets. usb: gadget: composite: fix OS descriptors w_value logic firewire: nosy: ensure user_length is taken into account when fetching packet contents net: qede: use return from qede_parse_flow_attr() for flower net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() net: bridge: fix corrupted ethernet header on multicast-to-unicast phonet: fix rtm_phonet_notify() skb allocation rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets xfrm: Preserve vlan tags for transport mode software GRO pinctrl: mediatek: Fix fallback call path net:usb:qmi_wwan: support Rolling modules fs/9p: drop inodes immediately on non-.L too clk: Don't hold prepare_lock when calling kref_put() gpio: crystalcove: Use -ENOTSUPP consistently gpio: wcove: Use -ENOTSUPP consistently 9p: explicitly deny setlease attempts fs/9p: translate O_TRUNC into OTRUNC fs/9p: only translate RWX permissions for plain 9P2000 selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior MIPS: scall: Save thread_info.syscall unconditionally on entry gpu: host1x: Do not setup DMA for virtual devices scsi: target: Fix SELinux error when systemd-modules loads the target module btrfs: always clear PERTRANS metadata during commit btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve tools/power turbostat: Fix Bzy_MHz documentation typo tools/power turbostat: Fix added raw MSR output firewire: ohci: mask bus reset interrupts between ISR and bottom half ata: sata_gemini: Check clk_enable() result net: bcmgenet: Reset RBUF on first open ALSA: line6: Zero-initialize message buffers scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload net: mark racy access on sk->sk_rcvbuf wifi: cfg80211: fix rdev_dump_mpp() arguments order wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc gfs2: Fix invalid metadata access in punch_hole scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change tipc: fix a possible memleak in tipc_buf_append net: bridge: fix multicast-to-unicast with fraglist GSO net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 net: dsa: mv88e6xxx: Add number of MACs in the ATU net: qede: use return from qede_parse_flow_attr() for flow_spec net l2tp: drop flow hash on forward nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). bna: ensure the copied buf is NUL terminated s390/mm: Fix clearing storage keys for huge pages s390/mm: Fix storage key clearing for guest huge pages pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() power: rt9455: hide unused rt9455_boost_voltage_values nfs: Handle error of rpc_proc_register() in nfs_net_init(). nfs: make the rpc_stat per net namespace nfs: expose /proc/net/sunrpc/nfs in net namespaces sunrpc: add a struct rpc_stats arg to rpc_create_args pinctrl: mediatek: paris: Rework support for PIN_CONFIG_{INPUT,OUTPUT}_ENABLE pinctrl: mediatek: paris: Rework mtk_pinconf_{get,set} switch/case logic pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback pinctrl: mediatek: remove shadow variable declaration pinctrl: mediatek: Backward compatible to previous Mediatek's bias-pull usage pinctrl: mediatek: Refine mtk_pinconf_get() pinctrl: mediatek: Refine mtk_pinconf_get() and mtk_pinconf_set() pinctrl: mediatek: Supporting driving setting without mapping current to register value pinctrl: mediatek: Check gpio pin number and use binary search in mtk_hw_pin_field_lookup() pinctrl: core: delete incorrect free in pinctrl_enable() wifi: nl80211: don't free NULL coalescing rule dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state" dmaengine: pl330: issue_pending waits until WFP state Revert "clk: Get runtime PM before walking tree during disable_unused" Linux 5.4.275 serial: core: fix kernel-doc for uart_port_unlock_irqrestore() udp: preserve the connected status if only UDP cmsg dm: limit the number of targets and parameter size area bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up i2c: smbus: fix NULL function pointer dereference idma64: Don't try to serve interrupts when device is powered off dmaengine: owl: fix register access functions tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge() tcp: Clean up kernel listener's reqsk in inet_twsk_purge() mtd: diskonchip: work around ubsan link failure stackdepot: respect __GFP_NOLOCKDEP allocation flag net: b44: set pause params only when interface is up ethernet: Add helper for assigning packet type when dest address does not match device address irqchip/gic-v3-its: Prevent double free on error drm/amdgpu: Fix leak when GPU memory allocation fails arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma btrfs: fix information leak in btrfs_ioctl_logical_to_ino() Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853 Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together tracing: Show size of requested perf buffer net/mlx5e: Fix a race in command alloc flow Revert "crypto: api - Disallow identical driver names" drm/amdgpu: validate the parameters of bo mapping operations more clearly amdgpu: validate offset_in_bo of drm_amdgpu_gem_va drm/amdgpu: restrict bo mapping within gpu address limits serial: mxs-auart: add spinlock around changing cts state serial: core: Provide port lock wrappers af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). iavf: Fix TC config comparison with existing adapter TC config i40e: Do not use WQ_MEM_RECLAIM flag for workqueue mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work mlxsw: spectrum_acl_tcam: Fix incorrect list API usage mlxsw: spectrum_acl_tcam: Fix warning during rehash mlxsw: spectrum_acl_tcam: Fix memory leak during rehash mlxsw: spectrum_acl_tcam: Rate limit error message mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work net: openvswitch: Fix Use-After-Free in ovs_ct_exit ipvs: Fix checksumming on GSO of SCTP packets net: gtp: Fix Use-After-Free in gtp_dellink net: usb: ax88179_178a: stop lying about skb->truesize NFC: trf7970a: disable all regulators on removal mlxsw: core: Unregister EMAD trap using FORWARD action vxlan: drop packets from invalid src-address ARC: [plat-hsdk]: Remove misplaced interrupt-cells property arm64: dts: mediatek: mt2712: fix validation errors arm64: dts: mt2712: add ethernet device node arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block arm64: dts: mediatek: mt7622: fix ethernet controller "compatible" arm64: dts: mediatek: mt7622: fix IR nodename arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma arm64: dts: rockchip: fix alphabetical ordering RK3399 puma KVM: async_pf: Cleanup kvm_setup_async_pf() nilfs2: fix OOB in nilfs_set_de_type nouveau: fix instmem race condition around ptr stores fs: sysfs: Fix reference leak in sysfs_break_active_protection() speakup: Avoid crash on very long word usb: Disable USB3 LPM at shutdown usb: dwc2: host: Fix dereference issue in DDMA completion flow. Revert "usb: cdc-wdm: close race between read and workqueue" USB: serial: option: add Telit FN920C04 rmnet compositions USB: serial: option: add Rolling RW101-GL and RW135-GL support USB: serial: option: support Quectel EM060K sub-models USB: serial: option: add Lonsung U8300/U9300 product USB: serial: option: add support for Fibocom FM650/FG650 USB: serial: option: add Fibocom FM135-GL variants serial/pmac_zilog: Remove flawed mitigation for rx irq flood comedi: vmk80xx: fix incomplete endpoint checking binder: check offset alignment in binder_get_object() x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ clk: Get runtime PM before walking tree during disable_unused clk: Initialize struct clk_core kref earlier clk: Print an info line before disabling unused clocks clk: remove extra empty line clk: Mark 'all_lists' as const clk: Remove prepare_lock hold assertion in __clk_release() drm: nv04: Fix out of bounds access RDMA/mlx5: Fix port number for counter query in multi-port configuration RDMA/rxe: Fix the problem "mutex_destroy missing" tun: limit printing rate when illegal packet received by tun dev netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() Revert "tracing/trigger: Fix to return error if failed to alloc snapshot" kprobes: Fix possible use-after-free issue on kprobe registration selftests/ftrace: Limit length in subsystem-enable tests btrfs: record delayed inode root in transaction x86/apic: Force native_apic_mem_read() to use the MOV instruction selftests: timers: Fix abs() warning in posix_timers test vhost: Add smp_rmb() in vhost_vq_avail_empty() drm/client: Fully protect modes[] with dev->mode_config.mutex btrfs: qgroup: correctly model root qgroup rsv in convert net: ena: Fix potential sign extension issue af_unix: Fix garbage collector racing against connect() af_unix: Do not use atomic ops for unix_sk(sk)->inflight. net/mlx5: Properly link new fs rules into the tree ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr ipv4/route: avoid unused-but-set-variable warning ipv6: fib: hide unused 'pn' variable geneve: fix header validation in geneve[6]_xmit_skb u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file net: openvswitch: fix unwanted error log on timeout policy probing nouveau: fix function cast warning Bluetooth: Fix memory leak in hci_req_sync_complete() batman-adv: Avoid infinite loop trying to resize local TT Change-Id: I36df890fc0cf15277cf5d6be8f56774233fb4431 Signed-off-by: kamasali Satyanarayan <quic_kamasali@quicinc.com>	2024-10-15 16:13:40 +05:30
Michael Bestas	defbd8dccd	Merge tag 'LA.UM.9.14.r1-25000.02-LAHAINA.QSSI14.0' of https://git.codelinaro.org/clo/la/kernel/msm-5.4 into android13-5.4-lahaina ... "LA.UM.9.14.r1-25000.02-LAHAINA.QSSI14.0" * tag 'LA.UM.9.14.r1-25000.02-LAHAINA.QSSI14.0' of https://git.codelinaro.org/clo/la/kernel/msm-5.4: msm-5.4.c3: qseecom: Fix possible race condition msm: adsprpc: Avoid taking reference for group_info adsprpc: Handle UAF scenario in put_args msm-5.4.c3: qseecom: Fix possible race condition USB: storage: Replace the sprintf with scnprintf adsprpc: Handle UAF scenario in put_args msm: adsprpc: Avoid taking reference for group_info usb: gadget: f_gsi: bail out if opts is null msm: ep_pcie: Avoid setting host wake pending flag for D0 msm: ep_pcie: Prevent repetitive wake operation if wake is in process msm_ipa: Install exception rule for PPPoE-MPLS securemsm-kernel: Decrement the server object ref count in mutex context qcedev: fix UAF in qcedev_smmu thermal: qcom: Add support to update tsens trip based on nvmem data msm: eva: Fix UAF issue when remove module msm: cvp: OOB write fix due to integer underflow msm: ep_pcie: Avoid writing req_L1_exit during dstate change msm: eva: Adding kref count for cvp_get_inst_from_id Change-Id: I3dad70dec062688b50554d7676a4b85bcb42fad9	2024-10-09 18:08:09 +00:00
Michael Bestas	df44b16b4f	Merge branch 'android11-5.4-lts' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina ... * 'android11-5.4-lts' of https://android.googlesource.com/kernel/common: (482 commits) ANDROID: GKI: refresh ABI to include kimage_vaddr ANDROID: preserve CRC for struct tcp_sock ANDROID: 16K: Don't set padding vm_flags on 32-bit archs Linux 5.4.280 i2c: rcar: bring hardware to known state when probing nilfs2: fix kernel bug on rename operation of broken directory tcp: avoid too many retransmit packets tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() net: tcp: fix unexcepted socket die when snd_wnd is 0 tcp: refactor tcp_retransmit_timer() SUNRPC: Fix RPC client cleaned up the freed pipefs dentries libceph: fix race between delayed_work() and ceph_monc_stop() ALSA: hda/realtek: Limit mic boost on VAIO PRO PX nvmem: meson-efuse: Fix return value of nvmem callbacks hpet: Support 32-bit userspace USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k USB: serial: option: add Rolling RW350-GL variants USB: serial: option: add Netprisma LCUK54 series modules ... Conflicts: kernel/gen_kheaders.sh Change-Id: Ib57235b05d1bd369b3852565eabea8e658b59aed	2024-08-05 21:50:23 +03:00
kamasali Satyanarayan	f60d08db83	Merge android11-5.4.274 (564901b) into msm-5.4 ... * remotes/origin/tmp-564901b: ANDROID: 16K: Only check basename of linker context UPSTREAM: af_unix: Do not use atomic ops for unix_sk(sk)->inflight. ANDROID: ABI fixup for abi break in struct dst_ops BACKPORT: net: fix __dst_negative_advice() race UPSTREAM: selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior ANDROID: 16K: Fix show maps CFI failure ANDROID: 16K: Handle pad VMA splits and merges ANDROID: 16K: madvise_vma_pad_pages: Remove filemap_fault check ANDROID: 16K: Only madvise padding from dynamic linker context ANDROID: 16K: Separate padding from ELF LOAD segment mappings ANDROID: 16K: Exclude ELF padding for fault around range ANDROID: 16K: Use MADV_DONTNEED to save VMA padding pages. ANDROID: 16K: Introduce ELF padding representation for VMAs ANDROID: 16K: Introduce /sys/kernel/mm/pgsize_miration/enabled Revert "timers: Rename del_timer_sync() to timer_delete_sync()" Reapply "media: ttpci: fix two memleaks in budget_av_attach" Revert "media: rename VFL_TYPE_GRABBER to _VIDEO" Revert "media: media/pci: rename VFL_TYPE_GRABBER to _VIDEO" Revert "media: ttpci: fix two memleaks in budget_av_attach" Revert "net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()" Revert "regmap: allow to define reg_update_bits for no bus configuration" Revert "regmap: Add bulk read/write callbacks into regmap_config" Revert "serial: max310x: fix IO data corruption in batched operations" Revert "geneve: make sure to pull inner header in geneve_rx()" ANDROID: GKI: add snd_compr_stop_error to Xiaomi_abi UPSTREAM: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path UPSTREAM: netfilter: nf_tables: release batch on table validation from abort path UPSTREAM: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout Linux 5.4.274 firmware: meson_sm: fix to avoid potential NULL pointer dereference ip_gre: do not report erspan version on GRE interface erspan: Check IFLA_GRE_ERSPAN_VER is set. VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() Bluetooth: btintel: Fixe build regression x86/alternative: Don't call text_poke() in lazy TLB mode drm/i915/gt: Reset queue_priority_hint on parking x86/mm/pat: fix VM_PAT handling in COW mappings virtio: reenable config if freezing device failed drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put() tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc netfilter: nf_tables: discard table flag update with pending basechain deletion netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path netfilter: nf_tables: release batch on table validation from abort path netfilter: nf_tables: reject new basechain after table flag update fbmon: prevent division by zero in fb_videomode_from_videomode() fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined usb: typec: tcpci: add generic tcpci fallback compatible tools: iio: replace seekdir() in iio_generic_buffer ktest: force $buildonly = 1 for 'make_warnings_file' test type Input: allocate keycode for Display refresh rate toggle block: prevent division by zero in blk_rq_stat_sum() Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default" SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int drm/amd/display: Fix nanosec stat overflow media: sta2x11: fix irq handler cast isofs: handle CDs with bad root inode but good Joliet root directory scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() sysv: don't call sb_bread() with pointers_lock held Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails Bluetooth: btintel: Fix null ptr deref in btintel_read_version btrfs: send: handle path ref underflow in header iterate_inode_ref() btrfs: export: handle invalid inode or root reference in btrfs_get_parent() btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num() ionic: set adminq irq affinity arm64: dts: rockchip: fix rk3399 hdmi ports node arm64: dts: rockchip: fix rk3328 hdmi ports node panic: Flush kernel log buffer at the end VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() wifi: ath9k: fix LNA selection in ath_ant_try_scan() s390/entry: align system call table on 8 bytes x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone ata: sata_mv: Fix PCI device ID table declaration compilation warning scsi: mylex: Fix sysfs buffer lengths ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw net: ravb: Always process TX descriptor ring erspan: make sure erspan_base_hdr is present in skb->head erspan: Add type I version 0 support. init: open /initrd.image with O_LARGEFILE initramfs: switch initramfs unpacking to struct file based APIs fs: add a vfs_fchmod helper fs: add a vfs_fchown helper staging: vc04_services: fix information leak in create_component() staging: vc04_services: changen strncpy() to strscpy_pad() staging: mmal-vchiq: Fix client_component for 64 bit kernel staging: mmal-vchiq: Allocate and free components as required i40e: fix vf may be used uninitialized in this function warning ipv6: Fix infinite recursion in fib6_dump_done(). selftests: reuseaddr_conflict: add missing new line at the end of the output net: stmmac: fix rx queue priority assignment net/sched: act_skbmod: prevent kernel-infoleak bpf, sockmap: Prevent lock inversion deadlock in map delete elem netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() netfilter: nf_tables: flush pending destroy work before exit_net release mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped." vfio/platform: Create persistent IRQ handlers vfio/pci: Create persistent INTx handler vfio: Introduce interface to flush virqfd inject workqueue vfio/pci: Lock external INTx masking ops vfio/pci: Disable auto-enable of exclusive INTx IRQ net/rds: fix possible cp null dereference netfilter: nf_tables: disallow timeout for anonymous sets Bluetooth: Fix TOCTOU in HCI debugfs implementation Bluetooth: hci_event: set the conn encrypted before conn establishes x86/cpufeatures: Add new word for scattered features r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d dm integrity: fix out-of-range warning tcp: properly terminate timers for kernel sockets ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa() nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet USB: core: Fix deadlock in usb_deauthorize_interface() scsi: lpfc: Correct size for wqe for memset() x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled scsi: qla2xxx: Fix command flush on cable pull usb: udc: remove warning when queue disabled ep usb: dwc2: gadget: LPM flow fix usb: dwc2: host: Fix ISOC flow in DDMA mode usb: dwc2: host: Fix hibernation flow usb: dwc2: host: Fix remote wakeup from hibernation scsi: core: Fix unremoved procfs host directory regression ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs usb: cdc-wdm: close race between read and workqueue mmc: core: Avoid negative index with array access mmc: core: Initialize mmc_blk_ioc_data exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack() wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes mm/migrate: set swap entry values of THP tail pages properly. mm/memory-failure: fix an incorrect use of tail pages vt: fix memory overlapping when deleting chars in the buffer bounds: support non-power-of-two CONFIG_NR_CPUS powerpc: xor_vmx: Add '-mhard-float' to CFLAGS efivarfs: Request at most 512 bytes for variable names perf/core: Fix reentry problem in perf_output_read_group() loop: loop_set_status_from_info() check before assignment loop: Check for overflow while configuring loop loop: Factor out configuring loop from status loop: Refactor loop_set_status() size calculation loop: Factor out setting loop device size loop: Remove sector_t truncation checks loop: Call loop_config_discard() only after new config is applied Revert "loop: Check for overflow while configuring loop" btrfs: allocate btrfs_ioctl_defrag_range_args on stack printk: Update @console_may_schedule in console_trylock_spinning() xen/events: close evtchn after mapping cleanup x86/speculation: Support intra-function call validation objtool: Add support for intra-function calls objtool: is_fentry_call() crashes if call has no destination fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion vt: fix unicode buffer corruption when deleting characters tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled usb: port: Don't try to peer unused USB ports based on location usb: gadget: ncm: Fix handling of zero block length packets USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform xfrm: Avoid clang fortify warning in copy_to_user_tmpl() netfilter: nf_tables: reject constant set with timeout netfilter: nf_tables: disallow anonymous set with timeout flag netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout comedi: comedi_test: Prevent timers rescheduling during deletion dm snapshot: fix lockup in dm_exception_table_exit ahci: asm1064: asm1166: don't limit reported ports ahci: asm1064: correct count of reported ports x86/CPU/AMD: Update the Zenbleed microcode revisions nilfs2: prevent kernel bug at submit_bh_wbc() nilfs2: use a more common logging style nilfs2: fix failure to detect DAT corruption in btree and direct mappings memtest: use {READ,WRITE}_ONCE in memory scanning drm/vc4: hdmi: do not return negative values from .get_modes() drm/imx/ipuv3: do not return negative values from .get_modes() drm/exynos: do not return negative values from .get_modes() s390/zcrypt: fix reference counting on zcrypt card objects soc: fsl: qbman: Use raw spinlock for cgr_lock soc: fsl: qbman: Add CGR update function soc: fsl: qbman: Add helper for sanity checking cgr ops soc: fsl: qbman: Always disable interrupts when taking cgr_lock ring-buffer: Fix full_waiters_pending in poll ring-buffer: Fix resetting of shortest_full vfio/platform: Disable virqfds on cleanup kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1 speakup: Fix 8bit characters from direct synth slimbus: core: Remove usage of the deprecated ida_simple_xx() API nvmem: meson-efuse: fix function pointer type mismatch firmware: meson_sm: Rework driver as a proper platform driver ext4: fix corruption during on-line resize hwmon: (amc6821) add of_match table mmc: core: Fix switch on gp3 partition dm-raid: fix lockdep waring in "pers->hot_add_disk" Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" PCI/PM: Drain runtime-idle callbacks before driver removal PCI: Drop pci_device_remove() test of pci_dev->driver btrfs: fix off-by-one chunk length calculation at contains_pending_extent() fuse: don't unhash root mmc: tmio: avoid concurrent runs of mmc_request_done() PM: sleep: wakeirq: fix wake irq warning in system suspend USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M USB: serial: option: add MeiG Smart SLM320 product USB: serial: cp210x: add ID for MGP Instruments PDS100 USB: serial: add device ID for VeriFone adapter USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB powerpc/fsl: Fix mfpmr build errors with newer binutils clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays PM: suspend: Set mem_sleep_current during kernel command line setup parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds parisc: Fix csum_ipv6_magic on 64-bit systems parisc: Fix csum_ipv6_magic on 32-bit systems parisc: Fix ip_fast_csum parisc: Do not hardcode registers in checksum functions mtd: rawnand: meson: fix scrambling mode value in command macro ubi: correct the calculation of fastmap size ubi: Check for too small LEB size in VTBL code ubifs: Set page uptodate in the correct place fat: fix uninitialized field in nostale filehandles ext4: correct best extent lstart adjustment logic selftests/mqueue: Set timeout to 180 seconds crypto: qat - resolve race condition during AER recovery crypto: qat - fix double free during reset sparc: vDSO: fix return value of __setup handler sparc64: NMI watchdog: fix return value of __setup handler KVM: Always flush async #PF workqueue when vCPU is being destroyed media: xc4000: Fix atomicity violation in xc4000_get_frequency serial: max310x: fix NULL pointer dereference in I2C instantiation arm: dts: marvell: Fix maxium->maxim typo in brownstone dts ARM: dts: mmp2-brownstone: Don't redeclare phandle references smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity() smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr() clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd media: staging: ipu3-imgu: Set fields before media_entity_pads_init() wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach timers: Rename del_timer_sync() to timer_delete_sync() timers: Use del_timer_sync() even on UP timers: Update kernel-doc for various functions x86/bugs: Use sysfs_emit() x86/cpu: Support AMD Automatic IBRS Documentation/hw-vuln: Update spectre doc amdkfd: use calloc instead of kzalloc to avoid integer overflow Linux 5.4.273 regmap: Add missing map->bus check spi: spi-mt65xx: Fix NULL pointer access in interrupt handler bpf: report RCU QS in cpumap kthread rcu: add a helper to report consolidated flavor QS netfilter: nf_tables: do not compare internal table flags on updates ARM: dts: sun8i-h2-plus-bananapi-m2-zero: add regulator nodes vcc-dram and vcc1v2 octeontx2-af: Use separate handlers for interrupts net/bnx2x: Prevent access to a freed page in page_pool hsr: Handle failures in module init rds: introduce acquire/release ordering in acquire/release_in_xmit() packet: annotate data-races around ignore_outgoing hsr: Fix uninit-value access in hsr_get_node() s390/vtime: fix average steal time calculation octeontx2-af: Use matching wake_up API variant in CGX command interface usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin staging: greybus: fix get_channel_from_mode() failure path serial: 8250_exar: Don't remove GPIO device on suspend rtc: mt6397: select IRQ_DOMAIN instead of depending on it kconfig: fix infinite loop when expanding a macro at the end of file tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT serial: max310x: fix syntax error in IRQ error message tty: vt: fix 20 vs 0x20 typo in EScsiignore afs: Revert "afs: Hide silly-rename files from userspace" NFS: Fix an off by one in root_nfs_cat() watchdog: stm32_iwdg: initialize default timeout net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn RDMA/device: Fix a race between mad_client and cm_client init scsi: csiostor: Avoid function pointer casts ALSA: usb-audio: Stop parsing channels bits when all channels are found. clk: Fix clk_core_get NULL dereference sparc32: Fix section mismatch in leon_pci_grpci backlight: lp8788: Fully initialize backlight_properties during probe backlight: lm3639: Fully initialize backlight_properties during probe backlight: da9052: Fully initialize backlight_properties during probe backlight: lm3630a: Don't set bl->props.brightness in get_brightness backlight: lm3630a: Initialize backlight_properties on init powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc. drm/msm/dpu: add division of drm_display_mode's hskew parameter powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip media: ttpci: fix two memleaks in budget_av_attach media: media/pci: rename VFL_TYPE_GRABBER to _VIDEO media: rename VFL_TYPE_GRABBER to _VIDEO media: v4l2-core: correctly validate video and metadata ioctls media: go7007: fix a memleak in go7007_load_encoder media: dvb-frontends: avoid stack overflow warnings with clang media: pvrusb2: fix uaf in pvr2_context_set_notify drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int() ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs mtd: rawnand: lpc32xx_mlc: fix irq handler prototype mtd: maps: physmap-core: fix flash size larger than 32-bit crypto: arm/sha - fix function cast warnings mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref drm/tegra: put drm_gem_object ref on error in tegra_fb_create clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister() PCI: Mark 3ware-9650SE Root Port Extended Tags as broken drm/mediatek: dsi: Fix DSI RGB666 formats and definitions clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times media: pvrusb2: fix pvr2_stream_callback casts media: pvrusb2: remove redundant NULL check media: go7007: add check of return value of go7007_read_addr() media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak perf stat: Avoid metric-only segv ALSA: seq: fix function cast warnings drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode() perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str() PCI: switchtec: Fix an error handling path in switchtec_pci_probe() quota: Fix rcu annotations of inode dquot pointers quota: Fix potential NULL pointer dereference quota: simplify drop_dquot_ref() clk: qcom: reset: Ensure write completion on reset de/assertion clk: qcom: reset: Commonize the de/assert functions clk: qcom: reset: support resetting multiple bits clk: qcom: reset: Allow specifying custom reset delay media: edia: dvbdev: fix a use-after-free media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity media: v4l2-tpg: fix some memleaks in tpg_alloc media: em28xx: annotate unchecked call to media_device_register() perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample() drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' perf record: Fix possible incorrect free in record__switch_output() PCI/DPC: Print all TLP Prefixes, not just the first media: tc358743: register v4l2 async device only after successful setup dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA drm/rockchip: lvds: do not overwrite error code drm: Don't treat 0 as -1 in drm_fixp2int_ceil drm/rockchip: inno_hdmi: Fix video timing drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe() drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe() drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe() drm/tegra: dsi: Make use of the helper function dev_err_probe() gpu: host1x: mipi: Update tegra_mipi_request() to be node based drm/tegra: dsi: Add missing check for of_find_device_by_node dm: call the resume method on internal suspend dm raid: fix false positive for requeue needed during reshape nfp: flower: handle acti_netdevs allocation failure net/x25: fix incorrect parameter validation in the x25_getsockopt() function net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function udp: fix incorrect parameter validation in the udp_lib_getsockopt() function l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function net: hns3: fix port duplex configure error in IMP reset net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() ipv6: fib6_rules: flush route cache when rule is changed bpf: Fix stackmap overflow check on 32-bit arches bpf: Fix hashtab overflow check on 32-bit arches sr9800: Add check for usbnet_get_endpoints Bluetooth: hci_core: Fix possible buffer overflow Bluetooth: Remove superfluous call to hci_conn_check_pending() igb: Fix missing time sync events igb: move PEROUT and EXTTS isr logic to separate functions mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function SUNRPC: fix some memleaks in gssx_dec_option_array x86, relocs: Ignore relocations in .notes section ACPI: scan: Fix device check notification handling ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address ARM: dts: imx6dl-yapp4: Move phy reset into switch node ARM: dts: arm: realview: Fix development chip ROM compatible value net: ena: Remove ena_select_queue net: ena: cosmetic: fix line break issues wifi: brcmsmac: avoid function pointer casts iommu/amd: Mark interrupt as managed bus: tegra-aconnect: Update dependency to ARCH_TEGRA ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() arm64: dts: qcom: msm8996: Pad addresses arm64: dts: qcom: msm8996: Move regulator consumers to db820c arm64: dts: qcom: msm8996: Use node references in db820c arm64: dts: qcom: db820c: Move non-soc entries out of /soc bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly bpf: Factor out bpf_spin_lock into helpers. bpf: Add typecast to bpf helpers to help BTF generation arm64: dts: mediatek: mt7622: add missing "device_type" to memory nodes wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() net: blackhole_dev: fix build warning for ethh set but not used af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc(). sock_diag: annotate data-races around sock_diag_handlers[family] wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir() wifi: wilc1000: fix RCU usage in connect path wifi: wilc1000: fix declarations ordering wifi: b43: Disable QoS for bcm4331 wifi: b43: Stop correct queue in DMA worker when QoS is disabled b43: main: Fix use true/false for bool type wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled b43: dma: Fix use true/false for bool type variable wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() timekeeping: Fix cross-timestamp interpolation for non-x86 timekeeping: Fix cross-timestamp interpolation corner case decision timekeeping: Fix cross-timestamp interpolation on counter wrap aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts fs/select: rework stack allocation hack for clang nbd: null check for nla_nest_start do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC Input: gpio_keys_polled - suppress deferred probe error for gpio ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet firewire: core: use long bus reset on gap count error Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security scsi: mpt3sas: Prevent sending diag_reset when the controller is ready btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve dm-verity, dm-crypt: align "struct bvec_iter" correctly block: sed-opal: handle empty atoms when parsing response parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check net/iucv: fix the allocation size of iucv_path_table array RDMA/mlx5: Relax DEVX access upon modify commands HID: multitouch: Add required quirk for Synaptics 0xcddc device MIPS: Clear Cause.BD in instruction_pointer_set x86/xen: Add some null pointer checking to smp.c ASoC: rt5645: Make LattePanda board DMI match more precise selftests: tls: use exact comparison in recv_partial io_uring: drop any code related to SCM_RIGHTS io_uring/unix: drop usage of io_uring socket UPSTREAM: arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts UPSTREAM: arm64: dts: qcom: add PDC interrupt controller for SDM845 Linux 5.4.272 arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts arm64: dts: qcom: add PDC interrupt controller for SDM845 serial: max310x: fix IO data corruption in batched operations serial: max310x: implement I2C support serial: max310x: make accessing revision id interface-agnostic regmap: Add bulk read/write callbacks into regmap_config regmap: allow to define reg_update_bits for no bus configuration serial: max310x: Unprepare and disable clock in error path getrusage: use sig->stats_lock rather than lock_task_sighand() getrusage: use __for_each_thread() getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand() getrusage: add the "signal_struct *sig" local variable y2038: rusage: use __kernel_old_timeval hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed hv_netvsc: use netif_is_bond_master() instead of open code hv_netvsc: Make netvsc/VF binding check both MAC and serial number Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU serial: max310x: prevent infinite while() loop in port startup serial: max310x: use a separate regmap for each port serial: max310x: use regmap methods for SPI batch operations serial: max310x: Make use of device properties serial: max310x: fail probe if clock crystal is unstable serial: max310x: Try to get crystal clock rate from property serial: max310x: Use devm_clk_get_optional() to get the input clock um: allow not setting extra rpaths in the linux binary selftests: mm: fix map_hugetlb failure on 64K page size systems netrom: Fix data-races around sysctl_net_busy_read netrom: Fix a data-race around sysctl_netrom_link_fails_count netrom: Fix a data-race around sysctl_netrom_routing_control netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size netrom: Fix a data-race around sysctl_netrom_transport_busy_delay netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries netrom: Fix a data-race around sysctl_netrom_transport_timeout netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser netrom: Fix a data-race around sysctl_netrom_default_path_quality netfilter: nf_conntrack_h323: Add protection for bmp length out of range netfilter: nft_ct: fix l3num expectations with inet pseudo family net/rds: fix WARNING in rds_conn_connect_if_down net/ipv6: avoid possible UAF in ip6_route_mpath_notify() net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() geneve: make sure to pull inner header in geneve_rx() ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able net: lan78xx: fix runtime PM count underflow on link stop lan78xx: Fix race conditions in suspend/resume handling lan78xx: Fix partial packet errors on suspend/resume lan78xx: Add missing return code checks lan78xx: Fix white space and style issues Linux 5.4.271 gpio: 74x164: Enable output pins after registers are reset fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super cachefiles: fix memory leak in cachefiles_add_cache() x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers mmc: core: Fix eMMC initialization with 1-bit bus connection dmaengine: fsl-qdma: init irq after reg initialization dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read btrfs: dev-replace: properly validate device names wifi: nl80211: reject iftype change with mesh ID change gtp: fix use-after-free and null-ptr-deref in gtp_newlink() afs: Fix endless loop in directory parsing ALSA: Drop leftover snd-rtctimer stuff from Makefile power: supply: bq27xxx-i2c: Do not free non existing IRQ efi/capsule-loader: fix incorrect allocation size rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate() Bluetooth: Enforce validation on max value of connection interval Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST Bluetooth: Avoid potential use-after-free in hci_error_reset net: usb: dm9601: fix wrong return value in dm9601_mdio_read lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() tun: Fix xdp_rxq_info's queue_index when detaching net: ip_tunnel: prevent perpetual headroom growth netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter ANDROID: GKI: update .xml file due to USB changes in 5.4.270 Revert "bpf: Add map and need_defer parameters to .map_fd_put_ptr()" Revert "hrtimer: Report offline hrtimer enqueue" Revert "drm/mipi-dsi: Fix detach call without attach" Linux 5.4.270 scripts/bpf: Fix xdp_md forward declaration typo fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3 netfilter: nf_tables: set dormant flag on hook register failure tls: stop recv() if initial process_rx_list gave us non-DATA tls: rx: drop pointless else after goto tls: rx: jump to a more appropriate label s390: use the correct count for __iowrite64_copy() packet: move from strlcpy with unused retval to strscpy ipv6: sr: fix possible use-after-free and null-ptr-deref afs: Increase buffer size in afs_update_volume_status() ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid nouveau: fix function cast warnings scsi: jazz_esp: Only build if SCSI core is builtin bpf, scripts: Correct GPL license name scripts/bpf: teach bpf_helpers_doc.py to dump BPF helper definitions RDMA/srpt: fix function pointer cast warnings RDMA/srpt: Make debug output more detailed RDMA/bnxt_re: Return error for SRQ resize IB/hfi1: Fix a memleak in init_credit_return usb: roles: don't get/set_role() when usb_role_switch is unregistered usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs usb: cdns3: fix memory double free when handle zero packet usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable() ARM: ep93xx: Add terminator to gpiod_lookup_table l2tp: pass correct message length to ip6_append_data PCI/MSI: Prevent MSI hardware interrupt number truncation gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() dm-crypt: don't modify the data when using authenticated encryption IB/hfi1: Fix sdma.h tx->num_descs off-by-one error PCI: tegra: Fix OF node reference leak PCI: tegra: Fix reporting GPIO error value arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node drm/amdgpu: Fix type of second parameter in trans_msg() callback iomap: Set all uptodate bits for an Uptodate page dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata() x86/alternatives: Disable KASAN in apply_alternatives() drm/amdgpu: Check for valid number of registers to read Revert "drm/sun4i: dsi: Change the start delay calculation" ALSA: hda/realtek - Enable micmute LED on and HP system selftests/bpf: Avoid running unprivileged tests with alignment requirements net: bridge: clear bridge's private skb space on xmit spi: mt7621: Fix an error message in mt7621_spi_probe() pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups pinctrl: pinctrl-rockchip: Fix a bunch of kerneldoc misdemeanours tcp: add annotations around sk->sk_shutdown accesses tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit tcp: factor out __tcp_close() helper pmdomain: renesas: r8a77980-sysc: CR7 must be always on s390/qeth: Fix potential loss of L3-IP@ in case of network issues virtio-blk: Ensure no requests in virtqueues before deleting vqs. firewire: core: send bus reset promptly on gap count error scsi: lpfc: Use unsigned type for num_sge hwmon: (coretemp) Enlarge per package core count limit nvmet-fc: abort command when there is no binding netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616 nvmet-tcp: fix nvme tcp ida memory leak regulator: pwm-regulator: Add validity checks in continuous .get_voltage ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers ahci: asm1166: correct count of reported ports fbdev: sis: Error out if pixclock equals zero fbdev: savage: Error out if pixclock equals zero wifi: mac80211: fix race condition on enabling fast-xmit wifi: cfg80211: fix missing interfaces when dumping dmaengine: fsl-qdma: increase size of 'irq_name' dmaengine: shdma: increase size of 'dev_id' scsi: target: core: Add TMF to tmr_list handling sched/rt: Disallow writing invalid values to sched_rt_period_us sched/rt: Fix sysctl_sched_rr_timeslice intial value userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb nilfs2: replace WARN_ONs for invalid DAT metadata block requests memcg: add refcnt for pcpu stock to avoid UAF problem in drain_all_stock() sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset net/sched: Retire dsmark qdisc net/sched: Retire ATM qdisc net/sched: Retire CBQ qdisc KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() Linux 5.4.269 of: gpio unittest kfree() wrong object of: unittest: fix EXPECT text for gpio hog errors net: bcmgenet: Fix EEE implementation Revert "Revert "mtd: rawnand: gpmi: Fix setting busy timeout setting"" netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() lsm: new security_file_ioctl_compat() hook drm/msm/dsi: Enable runtime PM PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() PM: runtime: add devm_pm_runtime_enable helper nilfs2: fix potential bug in end_buffer_async_write sched/membarrier: reduce the ability to hammer on sys_membarrier net: prevent mss overflow in skb_segment() netfilter: ipset: Missing gc cancellations fixed netfilter: ipset: fix performance regression in swap operation KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache mips: Fix max_mapnr being uninitialized on early stages arch, mm: remove stale mentions of DISCONIGMEM bus: moxtet: Add spi device table Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" tracing: Inform kmemleak of saved_cmdlines allocation pmdomain: core: Move the unused cleanup to a _sync initcall can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) irqchip/irq-brcmstb-l2: Add write memory barrier before exit nfp: flower: prevent re-adding mac index for bonded port nfp: use correct macro for LengthSelect in BAR config nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() nilfs2: fix data corruption in dsync block recovery for small block sizes ALSA: hda/conexant: Add quirk for SWS JS201D mmc: slot-gpio: Allow non-sleeping GPIO ro x86/mm/ident_map: Use gbpages only where full GB page should be mapped. x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6 serial: max310x: improve crystal stable clock detection serial: max310x: set default value when reading clock ready bit ring-buffer: Clean ring_buffer_poll_wait() error return iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC staging: iio: ad5933: fix type mismatch regression tracing: Fix wasted memory in saved_cmdlines logic ext4: fix double-free of blocks due to wrong extents moved_len misc: fastrpc: Mark all sessions as invalid in cb_remove binder: signal epoll threads of self-work ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL xen-netback: properly sync TX responses nfc: nci: free rx_data_reassembly skb on NCI device cleanup kbuild: Fix changing ELF file type for output of gen_btf for big endian firewire: core: correct documentation of fw_csr_string() kernel API scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock" i2c: i801: Fix block process call transactions i2c: i801: Remove i801_set_block_buffer_mode usb: f_mass_storage: forbid async queue when shutdown happen USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT HID: wacom: Do not register input devices until after hid_hw_start HID: wacom: generic: Avoid reporting a serial of '0' to userspace mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again tracing/trigger: Fix to return error if failed to alloc snapshot i40e: Fix waiting for queues of all VSIs to be disabled MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() spi: ppc4xx: Drop write-only variable of: unittest: Fix compile in the non-dynamic case of: unittest: add overlay gpio test to catch gpio hog problem btrfs: send: return EOPNOTSUPP on unknown flags btrfs: forbid deleting live subvol qgroup btrfs: forbid creating subvol qgroups netfilter: nft_set_rbtree: skip end interval element from gc net: stmmac: xgmac: fix a typo of register name in DPP safety handling net: stmmac: xgmac: use #define for string constants vhost: use kzalloc() instead of kmalloc() followed by memset() Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID hrtimer: Report offline hrtimer enqueue USB: serial: cp210x: add ID for IMST iM871A-USB USB: serial: option: add Fibocom FM101-GL variant USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e net/af_iucv: clean up a try_then_request_module() netfilter: nft_ct: reject direction for ct id netfilter: nft_compat: restrict match/target protocol to u16 netfilter: nft_compat: reject unused compat flag ppp_async: limit MRU to 64K tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() rxrpc: Fix response to PING RESPONSE ACKs to a dead call inet: read sk->sk_family once in inet_recv_error() hwmon: (coretemp) Fix bogus core_id to attr name mapping hwmon: (coretemp) Fix out-of-bounds memory access hwmon: (aspeed-pwm-tacho) mutex for tach reading atm: idt77252: fix a memleak in open_card_ubr0 selftests: net: avoid just another constant wait net: stmmac: xgmac: fix handling of DPP safety error for DMA channels phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV phy: renesas: rcar-gen3-usb2: Fix returning wrong error code dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA bonding: remove print in bond_verify_device_path HID: apple: Add 2021 magic keyboard FN key mapping HID: apple: Swap the Fn and Left Control keys on Apple keyboards HID: apple: Add support for the 2021 Magic Keyboard net: sysfs: Fix /sys/class/net/<iface> path af_unix: fix lockdep positive in sk_diag_dump_icons() net: ipv4: fix a memleak in ip_setup_cork netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger llc: call sock_orphan() at release time ipv6: Ensure natural alignment of const ipv6 loopback and router addresses ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() ixgbe: Refactor overtemp event handling ixgbe: Refactor returning internal error codes ixgbe: Remove non-inclusive language net: remove unneeded break scsi: isci: Fix an error code problem in isci_io_request_build() wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update perf: Fix the nr_addr_filters fix drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()' ceph: fix deadlock or deadcode of misusing dget() blk-mq: fix IO hang from sbitmap wakeup race virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings libsubcmd: Fix memory leak in uniq() PCI/AER: Decode Requester ID when no error info found fs/kernfs/dir: obey S_ISGID usb: hub: Replace hardcoded quirk value with BIT() macro PCI: switchtec: Fix stdev_release() crash after surprise hot remove PCI: Only override AMD USB controller if required mfd: ti_am335x_tscadc: Fix TI SoC dependencies i3c: master: cdns: Update maximum prescaler value for i2c clock um: net: Fix return type of uml_net_start_xmit() um: Don't use vfprintf() for os_info() um: Fix naming clash between UML and scheduler leds: trigger: panic: Don't register panic notifier if creating the trigger failed drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' drm/amdgpu: Let KFD sync with VM fences clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() drm/msm/dpu: Ratelimit framedone timeout msgs media: ddbridge: fix an error code problem in ddb_probe IB/ipoib: Fix mcast list locking drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time ALSA: hda: Intel: add HDA_ARL PCI ID support PCI: add INTEL_HDA_ARL to pci_ids.h media: rockchip: rga: fix swizzling for RGB formats media: stk1160: Fixed high volume of stk1160_dbg messages drm/mipi-dsi: Fix detach call without attach drm/framebuffer: Fix use of uninitialized variable drm/drm_file: fix use of uninitialized variable RDMA/IPoIB: Fix error code return in ipoib_mcast_join fast_dput(): handle underflows gracefully ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument f2fs: fix to check return value of f2fs_reserve_new_block() wifi: cfg80211: free beacon_ies when overridden from hidden BSS wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property md: Whenassemble the array, consult the superblock of the freshest device block: prevent an integer overflow in bvec_try_merge_hw_page ARM: dts: imx23/28: Fix the DMA controller node name ARM: dts: imx23-sansa: Use preferred i2c-gpios properties ARM: dts: imx27-apf27dev: Fix LED name ARM: dts: imx25/27: Pass timing0 ARM: dts: imx1: Fix sram node ARM: dts: imx27: Fix sram node ARM: dts: imx: Use flash@0,0 pattern ARM: dts: imx25/27-eukrea: Fix RTC node name ARM: dts: rockchip: fix rk3036 hdmi ports node scsi: libfc: Fix up timeout error in fc_fcp_rec_error() scsi: libfc: Don't schedule abort twice bpf: Add map and need_defer parameters to .map_fd_put_ptr() wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() ARM: dts: imx7s: Fix nand-controller #size-cells ARM: dts: imx7s: Fix lcdif compatible ARM: dts: imx7d: Fix coresight funnel ports bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk PCI: Add no PM reset quirk for NVIDIA Spectrum devices scsi: lpfc: Fix possible file string name overflow when updating firmware selftests/bpf: Fix pyperf180 compilation failure with clang18 selftests/bpf: satisfy compiler by having explicit return in btf test wifi: rt2x00: restart beacon queue when hardware reset ext4: avoid online resizing failures due to oversized flex bg ext4: remove unnecessary check from alloc_flex_gd() ext4: unify the type of flexbg_size to unsigned int ext4: fix inconsistent between segment fstrim and full fstrim ecryptfs: Reject casefold directory inodes SUNRPC: Fix a suspicious RCU usage warning KVM: s390: fix setting of fpc register s390/ptrace: handle setting of fpc register correctly jfs: fix array-index-out-of-bounds in diNewExt rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() crypto: stm32/crc32 - fix parsing list of devices pstore/ram: Fix crash when setting number of cpus to an odd number jfs: fix uaf in jfs_evict_inode jfs: fix array-index-out-of-bounds in dbAdjTree jfs: fix slab-out-of-bounds Read in dtSearch UBSAN: array-index-out-of-bounds in dtSplitRoot FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree ACPI: extlog: fix NULL pointer dereference check PNP: ACPI: fix fortify warning ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop audit: Send netlink ACK before setting connection in auditd_set regulator: core: Only increment use_count when enable_count changes perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel powerpc/lib: Validate size for vector operations powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE powerpc/mm: Fix build failures due to arch_reserved_kernel_pages() powerpc: Fix build error due to is_valid_bugaddr() powerpc/mm: Fix null-pointer dereference in pgtable_cache_add x86/entry/ia32: Ensure s32 is sign extended to s64 tick/sched: Preserve number of idle sleeps across CPU hotplug events mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan spi: bcm-qspi: fix SFDP BFPT read by usig mspi read gpio: eic-sprd: Clear interrupt after set the interrupt type drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume drm/exynos: fix accidental on-stack copy of exynos_drm_plane drm/bridge: nxp-ptn3460: simplify some error checking drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking drm: Don't unref the same fb many times by mistake due to deadlock handling gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 netfilter: nf_tables: reject QUEUE/DROP verdict parameters rbd: don't move requests to the running list on errors btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args btrfs: don't warn if discard range is not aligned to sector btrfs: tree-checker: fix inline ref size in error messages btrfs: ref-verify: free ref cache before clearing mount opt net: fec: fix the unhandled context fault from smmu fjes: fix memleaks in fjes_hw_setup netfilter: nf_tables: validate NFPROTO_* family netfilter: nf_tables: restrict anonymous set and map names to 16 bytes net/mlx5e: fix a double-free in arfs_create_groups net/mlx5: Use kfree(ft->g) in arfs_create_groups() net/mlx5: DR, Use the right GVMI number for drop action netlink: fix potential sleeping issue in mqueue_flush_file tcp: Add memory barrier to tcp_push() afs: Hide silly-rename files from userspace tracing: Ensure visibility when inserting an element into tracing_map net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv llc: Drop support for ETH_P_TR_802_2. llc: make llc_ui_sendmsg() more robust against bonding changes vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING net/smc: fix illegal rmb_desc access in SMC-D connection dump x86/CPU/AMD: Fix disabling XSAVES on AMD family 0x17 due to erratum powerpc: Use always instead of always-y in for crtsavres.o fs: move S_ISGID stripping into the vfs_*() helpers fs: add mode_strip_sgid() helper mtd: spinand: macronix: Fix MX35LFxGE4AD page size block: Remove special-casing of compound pages rename(): fix the locking of subdirectories ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path nouveau/vmm: don't set addr on the fail path to avoid warning mmc: core: Use mrq.sbc in close-ended ffu arm64: dts: qcom: sdm845: fix USB wakeup interrupt types parisc/firmware: Fix F-extend for PDC addresses rpmsg: virtio: Free driver_override when rpmsg_remove() hwrng: core - Fix page fault dead lock on mmap-ed hwrng PM: hibernate: Enforce ordering during image compression/decompression crypto: api - Disallow identical driver names ext4: allow for the last group to be marked as trimmed serial: sc16is7xx: add check for unsupported SPI modes during probe spi: introduce SPI_MODE_X_MASK macro serial: sc16is7xx: set safe default SPI clock frequency units: add the HZ macros units: change from 'L' to 'UL' units: Add Watt units include/linux/units.h: add helpers for kelvin to/from Celsius conversion PCI: mediatek: Clear interrupt status before dispatching handler Conflicts: both modified: include/linux/timer.h both modified: mm/memory-failure.c both modified: mm/mlock.c both modified: mm/mprotect.c both modified: scripts/Makefile.extrawarn Change-Id: Ia59be9dbba9400fa82dcd3c3a7d50ee6012701fb Signed-off-by: kamasali Satyanarayan <kamasali@qti.qualcomm.com>	2024-07-24 20:38:43 -07:00
Giuliano Procida	b61187c891	ANDROID: GKI: refresh ABI to include kimage_vaddr ... This symbol is now recognised by ABI tooling. Bug: 352610488 Change-Id: I8bc6702c41239cd0a190b2128865faf673d97930 Signed-off-by: Giuliano Procida <gprocida@google.com>	2024-07-22 12:26:41 +01:00
Greg Kroah-Hartman	33437b2981	ANDROID: preserve CRC for struct tcp_sock ... In commit fe7a7b8942 ("tcp: add TCP_INFO status for failed client TFO"), 2 unused bits in struct tcp_sock were renamed and used. This does not change the binary abi, but the checking tools do notice this, so mark it as such so that the CRC generation remains the same. Fixes: fe7a7b8942 ("tcp: add TCP_INFO status for failed client TFO") Change-Id: I160605fb220d393c77ed4972957cbf823980694c Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-07-20 12:53:22 +00:00
Giuliano Procida	dc1385281a	ANDROID: GKI: refresh ABI to include kimage_vaddr ... This symbol is now recognised by ABI tooling. Bug: 352610488 Change-Id: I2136a106eaf1c194d49c891ef0d27d0b40b780ba Signed-off-by: Giuliano Procida <gprocida@google.com>	2024-07-12 15:32:13 +01:00
Michael Bestas	73abf253d5	Merge tag 'ASB-2024-06-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina ... https://source.android.com/docs/security/bulletin/2024-06-01 CVE-2024-26926 * tag 'ASB-2024-06-05_11-5.4' of https://android.googlesource.com/kernel/common: ANDROID: ABI fixup for abi break in struct dst_ops BACKPORT: net: fix __dst_negative_advice() race UPSTREAM: selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior Revert "timers: Rename del_timer_sync() to timer_delete_sync()" Reapply "media: ttpci: fix two memleaks in budget_av_attach" Revert "media: rename VFL_TYPE_GRABBER to _VIDEO" Revert "media: media/pci: rename VFL_TYPE_GRABBER to _VIDEO" Revert "media: ttpci: fix two memleaks in budget_av_attach" Revert "net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()" Revert "regmap: allow to define reg_update_bits for no bus configuration" Revert "regmap: Add bulk read/write callbacks into regmap_config" Revert "serial: max310x: fix IO data corruption in batched operations" Revert "geneve: make sure to pull inner header in geneve_rx()" Linux 5.4.274 firmware: meson_sm: fix to avoid potential NULL pointer dereference ip_gre: do not report erspan version on GRE interface erspan: Check IFLA_GRE_ERSPAN_VER is set. VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() Bluetooth: btintel: Fixe build regression x86/alternative: Don't call text_poke() in lazy TLB mode drm/i915/gt: Reset queue_priority_hint on parking x86/mm/pat: fix VM_PAT handling in COW mappings virtio: reenable config if freezing device failed drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put() tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc netfilter: nf_tables: discard table flag update with pending basechain deletion netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path netfilter: nf_tables: release batch on table validation from abort path netfilter: nf_tables: reject new basechain after table flag update fbmon: prevent division by zero in fb_videomode_from_videomode() fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined usb: typec: tcpci: add generic tcpci fallback compatible tools: iio: replace seekdir() in iio_generic_buffer ktest: force $buildonly = 1 for 'make_warnings_file' test type Input: allocate keycode for Display refresh rate toggle block: prevent division by zero in blk_rq_stat_sum() Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default" SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int drm/amd/display: Fix nanosec stat overflow media: sta2x11: fix irq handler cast isofs: handle CDs with bad root inode but good Joliet root directory scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() sysv: don't call sb_bread() with pointers_lock held Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails Bluetooth: btintel: Fix null ptr deref in btintel_read_version btrfs: send: handle path ref underflow in header iterate_inode_ref() btrfs: export: handle invalid inode or root reference in btrfs_get_parent() btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num() ionic: set adminq irq affinity arm64: dts: rockchip: fix rk3399 hdmi ports node arm64: dts: rockchip: fix rk3328 hdmi ports node panic: Flush kernel log buffer at the end VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() wifi: ath9k: fix LNA selection in ath_ant_try_scan() s390/entry: align system call table on 8 bytes x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone ata: sata_mv: Fix PCI device ID table declaration compilation warning scsi: mylex: Fix sysfs buffer lengths ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw net: ravb: Always process TX descriptor ring erspan: make sure erspan_base_hdr is present in skb->head erspan: Add type I version 0 support. init: open /initrd.image with O_LARGEFILE initramfs: switch initramfs unpacking to struct file based APIs fs: add a vfs_fchmod helper fs: add a vfs_fchown helper staging: vc04_services: fix information leak in create_component() staging: vc04_services: changen strncpy() to strscpy_pad() staging: mmal-vchiq: Fix client_component for 64 bit kernel staging: mmal-vchiq: Allocate and free components as required i40e: fix vf may be used uninitialized in this function warning ipv6: Fix infinite recursion in fib6_dump_done(). selftests: reuseaddr_conflict: add missing new line at the end of the output net: stmmac: fix rx queue priority assignment net/sched: act_skbmod: prevent kernel-infoleak bpf, sockmap: Prevent lock inversion deadlock in map delete elem netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() netfilter: nf_tables: flush pending destroy work before exit_net release mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped." vfio/platform: Create persistent IRQ handlers vfio/pci: Create persistent INTx handler vfio: Introduce interface to flush virqfd inject workqueue vfio/pci: Lock external INTx masking ops vfio/pci: Disable auto-enable of exclusive INTx IRQ net/rds: fix possible cp null dereference netfilter: nf_tables: disallow timeout for anonymous sets Bluetooth: Fix TOCTOU in HCI debugfs implementation Bluetooth: hci_event: set the conn encrypted before conn establishes x86/cpufeatures: Add new word for scattered features r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d dm integrity: fix out-of-range warning tcp: properly terminate timers for kernel sockets ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa() nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet USB: core: Fix deadlock in usb_deauthorize_interface() scsi: lpfc: Correct size for wqe for memset() x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled scsi: qla2xxx: Fix command flush on cable pull usb: udc: remove warning when queue disabled ep usb: dwc2: gadget: LPM flow fix usb: dwc2: host: Fix ISOC flow in DDMA mode usb: dwc2: host: Fix hibernation flow usb: dwc2: host: Fix remote wakeup from hibernation scsi: core: Fix unremoved procfs host directory regression ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs usb: cdc-wdm: close race between read and workqueue mmc: core: Avoid negative index with array access mmc: core: Initialize mmc_blk_ioc_data exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack() wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes mm/migrate: set swap entry values of THP tail pages properly. mm/memory-failure: fix an incorrect use of tail pages vt: fix memory overlapping when deleting chars in the buffer bounds: support non-power-of-two CONFIG_NR_CPUS powerpc: xor_vmx: Add '-mhard-float' to CFLAGS efivarfs: Request at most 512 bytes for variable names perf/core: Fix reentry problem in perf_output_read_group() loop: loop_set_status_from_info() check before assignment loop: Check for overflow while configuring loop loop: Factor out configuring loop from status loop: Refactor loop_set_status() size calculation loop: Factor out setting loop device size loop: Remove sector_t truncation checks loop: Call loop_config_discard() only after new config is applied Revert "loop: Check for overflow while configuring loop" btrfs: allocate btrfs_ioctl_defrag_range_args on stack printk: Update @console_may_schedule in console_trylock_spinning() xen/events: close evtchn after mapping cleanup x86/speculation: Support intra-function call validation objtool: Add support for intra-function calls objtool: is_fentry_call() crashes if call has no destination fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion vt: fix unicode buffer corruption when deleting characters tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled usb: port: Don't try to peer unused USB ports based on location usb: gadget: ncm: Fix handling of zero block length packets USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform xfrm: Avoid clang fortify warning in copy_to_user_tmpl() netfilter: nf_tables: reject constant set with timeout netfilter: nf_tables: disallow anonymous set with timeout flag netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout comedi: comedi_test: Prevent timers rescheduling during deletion dm snapshot: fix lockup in dm_exception_table_exit ahci: asm1064: asm1166: don't limit reported ports ahci: asm1064: correct count of reported ports x86/CPU/AMD: Update the Zenbleed microcode revisions nilfs2: prevent kernel bug at submit_bh_wbc() nilfs2: use a more common logging style nilfs2: fix failure to detect DAT corruption in btree and direct mappings memtest: use {READ,WRITE}_ONCE in memory scanning drm/vc4: hdmi: do not return negative values from .get_modes() drm/imx/ipuv3: do not return negative values from .get_modes() drm/exynos: do not return negative values from .get_modes() s390/zcrypt: fix reference counting on zcrypt card objects soc: fsl: qbman: Use raw spinlock for cgr_lock soc: fsl: qbman: Add CGR update function soc: fsl: qbman: Add helper for sanity checking cgr ops soc: fsl: qbman: Always disable interrupts when taking cgr_lock ring-buffer: Fix full_waiters_pending in poll ring-buffer: Fix resetting of shortest_full vfio/platform: Disable virqfds on cleanup kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1 speakup: Fix 8bit characters from direct synth slimbus: core: Remove usage of the deprecated ida_simple_xx() API nvmem: meson-efuse: fix function pointer type mismatch firmware: meson_sm: Rework driver as a proper platform driver ext4: fix corruption during on-line resize hwmon: (amc6821) add of_match table mmc: core: Fix switch on gp3 partition dm-raid: fix lockdep waring in "pers->hot_add_disk" Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" PCI/PM: Drain runtime-idle callbacks before driver removal PCI: Drop pci_device_remove() test of pci_dev->driver btrfs: fix off-by-one chunk length calculation at contains_pending_extent() fuse: don't unhash root mmc: tmio: avoid concurrent runs of mmc_request_done() PM: sleep: wakeirq: fix wake irq warning in system suspend USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M USB: serial: option: add MeiG Smart SLM320 product USB: serial: cp210x: add ID for MGP Instruments PDS100 USB: serial: add device ID for VeriFone adapter USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB powerpc/fsl: Fix mfpmr build errors with newer binutils clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays PM: suspend: Set mem_sleep_current during kernel command line setup parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds parisc: Fix csum_ipv6_magic on 64-bit systems parisc: Fix csum_ipv6_magic on 32-bit systems parisc: Fix ip_fast_csum parisc: Do not hardcode registers in checksum functions mtd: rawnand: meson: fix scrambling mode value in command macro ubi: correct the calculation of fastmap size ubi: Check for too small LEB size in VTBL code ubifs: Set page uptodate in the correct place fat: fix uninitialized field in nostale filehandles ext4: correct best extent lstart adjustment logic selftests/mqueue: Set timeout to 180 seconds crypto: qat - resolve race condition during AER recovery crypto: qat - fix double free during reset sparc: vDSO: fix return value of __setup handler sparc64: NMI watchdog: fix return value of __setup handler KVM: Always flush async #PF workqueue when vCPU is being destroyed media: xc4000: Fix atomicity violation in xc4000_get_frequency serial: max310x: fix NULL pointer dereference in I2C instantiation arm: dts: marvell: Fix maxium->maxim typo in brownstone dts ARM: dts: mmp2-brownstone: Don't redeclare phandle references smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity() smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr() clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd media: staging: ipu3-imgu: Set fields before media_entity_pads_init() wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach timers: Rename del_timer_sync() to timer_delete_sync() timers: Use del_timer_sync() even on UP timers: Update kernel-doc for various functions x86/bugs: Use sysfs_emit() x86/cpu: Support AMD Automatic IBRS Documentation/hw-vuln: Update spectre doc amdkfd: use calloc instead of kzalloc to avoid integer overflow Linux 5.4.273 regmap: Add missing map->bus check spi: spi-mt65xx: Fix NULL pointer access in interrupt handler bpf: report RCU QS in cpumap kthread rcu: add a helper to report consolidated flavor QS netfilter: nf_tables: do not compare internal table flags on updates ARM: dts: sun8i-h2-plus-bananapi-m2-zero: add regulator nodes vcc-dram and vcc1v2 octeontx2-af: Use separate handlers for interrupts net/bnx2x: Prevent access to a freed page in page_pool hsr: Handle failures in module init rds: introduce acquire/release ordering in acquire/release_in_xmit() packet: annotate data-races around ignore_outgoing hsr: Fix uninit-value access in hsr_get_node() s390/vtime: fix average steal time calculation octeontx2-af: Use matching wake_up API variant in CGX command interface usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin staging: greybus: fix get_channel_from_mode() failure path serial: 8250_exar: Don't remove GPIO device on suspend rtc: mt6397: select IRQ_DOMAIN instead of depending on it kconfig: fix infinite loop when expanding a macro at the end of file tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT serial: max310x: fix syntax error in IRQ error message tty: vt: fix 20 vs 0x20 typo in EScsiignore afs: Revert "afs: Hide silly-rename files from userspace" NFS: Fix an off by one in root_nfs_cat() watchdog: stm32_iwdg: initialize default timeout net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn RDMA/device: Fix a race between mad_client and cm_client init scsi: csiostor: Avoid function pointer casts ALSA: usb-audio: Stop parsing channels bits when all channels are found. clk: Fix clk_core_get NULL dereference sparc32: Fix section mismatch in leon_pci_grpci backlight: lp8788: Fully initialize backlight_properties during probe backlight: lm3639: Fully initialize backlight_properties during probe backlight: da9052: Fully initialize backlight_properties during probe backlight: lm3630a: Don't set bl->props.brightness in get_brightness backlight: lm3630a: Initialize backlight_properties on init powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc. drm/msm/dpu: add division of drm_display_mode's hskew parameter powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip media: ttpci: fix two memleaks in budget_av_attach media: media/pci: rename VFL_TYPE_GRABBER to _VIDEO media: rename VFL_TYPE_GRABBER to _VIDEO media: v4l2-core: correctly validate video and metadata ioctls media: go7007: fix a memleak in go7007_load_encoder media: dvb-frontends: avoid stack overflow warnings with clang media: pvrusb2: fix uaf in pvr2_context_set_notify drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int() ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs mtd: rawnand: lpc32xx_mlc: fix irq handler prototype mtd: maps: physmap-core: fix flash size larger than 32-bit crypto: arm/sha - fix function cast warnings mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref drm/tegra: put drm_gem_object ref on error in tegra_fb_create clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister() PCI: Mark 3ware-9650SE Root Port Extended Tags as broken drm/mediatek: dsi: Fix DSI RGB666 formats and definitions clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times media: pvrusb2: fix pvr2_stream_callback casts media: pvrusb2: remove redundant NULL check media: go7007: add check of return value of go7007_read_addr() media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak perf stat: Avoid metric-only segv ALSA: seq: fix function cast warnings drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode() perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str() PCI: switchtec: Fix an error handling path in switchtec_pci_probe() quota: Fix rcu annotations of inode dquot pointers quota: Fix potential NULL pointer dereference quota: simplify drop_dquot_ref() clk: qcom: reset: Ensure write completion on reset de/assertion clk: qcom: reset: Commonize the de/assert functions clk: qcom: reset: support resetting multiple bits clk: qcom: reset: Allow specifying custom reset delay media: edia: dvbdev: fix a use-after-free media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity media: v4l2-tpg: fix some memleaks in tpg_alloc media: em28xx: annotate unchecked call to media_device_register() perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample() drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' perf record: Fix possible incorrect free in record__switch_output() PCI/DPC: Print all TLP Prefixes, not just the first media: tc358743: register v4l2 async device only after successful setup dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA drm/rockchip: lvds: do not overwrite error code drm: Don't treat 0 as -1 in drm_fixp2int_ceil drm/rockchip: inno_hdmi: Fix video timing drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe() drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe() drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe() drm/tegra: dsi: Make use of the helper function dev_err_probe() gpu: host1x: mipi: Update tegra_mipi_request() to be node based drm/tegra: dsi: Add missing check for of_find_device_by_node dm: call the resume method on internal suspend dm raid: fix false positive for requeue needed during reshape nfp: flower: handle acti_netdevs allocation failure net/x25: fix incorrect parameter validation in the x25_getsockopt() function net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function udp: fix incorrect parameter validation in the udp_lib_getsockopt() function l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function net: hns3: fix port duplex configure error in IMP reset net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() ipv6: fib6_rules: flush route cache when rule is changed bpf: Fix stackmap overflow check on 32-bit arches bpf: Fix hashtab overflow check on 32-bit arches sr9800: Add check for usbnet_get_endpoints Bluetooth: hci_core: Fix possible buffer overflow Bluetooth: Remove superfluous call to hci_conn_check_pending() igb: Fix missing time sync events igb: move PEROUT and EXTTS isr logic to separate functions mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function SUNRPC: fix some memleaks in gssx_dec_option_array x86, relocs: Ignore relocations in .notes section ACPI: scan: Fix device check notification handling ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address ARM: dts: imx6dl-yapp4: Move phy reset into switch node ARM: dts: arm: realview: Fix development chip ROM compatible value net: ena: Remove ena_select_queue net: ena: cosmetic: fix line break issues wifi: brcmsmac: avoid function pointer casts iommu/amd: Mark interrupt as managed bus: tegra-aconnect: Update dependency to ARCH_TEGRA ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() arm64: dts: qcom: msm8996: Pad addresses arm64: dts: qcom: msm8996: Move regulator consumers to db820c arm64: dts: qcom: msm8996: Use node references in db820c arm64: dts: qcom: db820c: Move non-soc entries out of /soc bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly bpf: Factor out bpf_spin_lock into helpers. bpf: Add typecast to bpf helpers to help BTF generation arm64: dts: mediatek: mt7622: add missing "device_type" to memory nodes wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() net: blackhole_dev: fix build warning for ethh set but not used af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc(). sock_diag: annotate data-races around sock_diag_handlers[family] wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir() wifi: wilc1000: fix RCU usage in connect path wifi: wilc1000: fix declarations ordering wifi: b43: Disable QoS for bcm4331 wifi: b43: Stop correct queue in DMA worker when QoS is disabled b43: main: Fix use true/false for bool type wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled b43: dma: Fix use true/false for bool type variable wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() timekeeping: Fix cross-timestamp interpolation for non-x86 timekeeping: Fix cross-timestamp interpolation corner case decision timekeeping: Fix cross-timestamp interpolation on counter wrap aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts fs/select: rework stack allocation hack for clang nbd: null check for nla_nest_start do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC Input: gpio_keys_polled - suppress deferred probe error for gpio ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet firewire: core: use long bus reset on gap count error Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security scsi: mpt3sas: Prevent sending diag_reset when the controller is ready btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve dm-verity, dm-crypt: align "struct bvec_iter" correctly block: sed-opal: handle empty atoms when parsing response parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check net/iucv: fix the allocation size of iucv_path_table array RDMA/mlx5: Relax DEVX access upon modify commands HID: multitouch: Add required quirk for Synaptics 0xcddc device MIPS: Clear Cause.BD in instruction_pointer_set x86/xen: Add some null pointer checking to smp.c ASoC: rt5645: Make LattePanda board DMI match more precise selftests: tls: use exact comparison in recv_partial io_uring: drop any code related to SCM_RIGHTS io_uring/unix: drop usage of io_uring socket UPSTREAM: arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts UPSTREAM: arm64: dts: qcom: add PDC interrupt controller for SDM845 Linux 5.4.272 arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts arm64: dts: qcom: add PDC interrupt controller for SDM845 serial: max310x: fix IO data corruption in batched operations serial: max310x: implement I2C support serial: max310x: make accessing revision id interface-agnostic regmap: Add bulk read/write callbacks into regmap_config regmap: allow to define reg_update_bits for no bus configuration serial: max310x: Unprepare and disable clock in error path getrusage: use sig->stats_lock rather than lock_task_sighand() getrusage: use __for_each_thread() getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand() getrusage: add the "signal_struct *sig" local variable y2038: rusage: use __kernel_old_timeval hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed hv_netvsc: use netif_is_bond_master() instead of open code hv_netvsc: Make netvsc/VF binding check both MAC and serial number Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU serial: max310x: prevent infinite while() loop in port startup serial: max310x: use a separate regmap for each port serial: max310x: use regmap methods for SPI batch operations serial: max310x: Make use of device properties serial: max310x: fail probe if clock crystal is unstable serial: max310x: Try to get crystal clock rate from property serial: max310x: Use devm_clk_get_optional() to get the input clock um: allow not setting extra rpaths in the linux binary selftests: mm: fix map_hugetlb failure on 64K page size systems netrom: Fix data-races around sysctl_net_busy_read netrom: Fix a data-race around sysctl_netrom_link_fails_count netrom: Fix a data-race around sysctl_netrom_routing_control netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size netrom: Fix a data-race around sysctl_netrom_transport_busy_delay netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries netrom: Fix a data-race around sysctl_netrom_transport_timeout netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser netrom: Fix a data-race around sysctl_netrom_default_path_quality netfilter: nf_conntrack_h323: Add protection for bmp length out of range netfilter: nft_ct: fix l3num expectations with inet pseudo family net/rds: fix WARNING in rds_conn_connect_if_down net/ipv6: avoid possible UAF in ip6_route_mpath_notify() net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() geneve: make sure to pull inner header in geneve_rx() ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able net: lan78xx: fix runtime PM count underflow on link stop lan78xx: Fix race conditions in suspend/resume handling lan78xx: Fix partial packet errors on suspend/resume lan78xx: Add missing return code checks lan78xx: Fix white space and style issues Linux 5.4.271 gpio: 74x164: Enable output pins after registers are reset fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super cachefiles: fix memory leak in cachefiles_add_cache() x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers mmc: core: Fix eMMC initialization with 1-bit bus connection dmaengine: fsl-qdma: init irq after reg initialization dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read btrfs: dev-replace: properly validate device names wifi: nl80211: reject iftype change with mesh ID change gtp: fix use-after-free and null-ptr-deref in gtp_newlink() afs: Fix endless loop in directory parsing ALSA: Drop leftover snd-rtctimer stuff from Makefile power: supply: bq27xxx-i2c: Do not free non existing IRQ efi/capsule-loader: fix incorrect allocation size rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate() Bluetooth: Enforce validation on max value of connection interval Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST Bluetooth: Avoid potential use-after-free in hci_error_reset net: usb: dm9601: fix wrong return value in dm9601_mdio_read lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() tun: Fix xdp_rxq_info's queue_index when detaching net: ip_tunnel: prevent perpetual headroom growth netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter ANDROID: GKI: update .xml file due to USB changes in 5.4.270 Revert "bpf: Add map and need_defer parameters to .map_fd_put_ptr()" Revert "hrtimer: Report offline hrtimer enqueue" Revert "drm/mipi-dsi: Fix detach call without attach" Linux 5.4.270 scripts/bpf: Fix xdp_md forward declaration typo fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3 netfilter: nf_tables: set dormant flag on hook register failure tls: stop recv() if initial process_rx_list gave us non-DATA tls: rx: drop pointless else after goto tls: rx: jump to a more appropriate label s390: use the correct count for __iowrite64_copy() packet: move from strlcpy with unused retval to strscpy ipv6: sr: fix possible use-after-free and null-ptr-deref afs: Increase buffer size in afs_update_volume_status() ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid nouveau: fix function cast warnings scsi: jazz_esp: Only build if SCSI core is builtin bpf, scripts: Correct GPL license name scripts/bpf: teach bpf_helpers_doc.py to dump BPF helper definitions RDMA/srpt: fix function pointer cast warnings RDMA/srpt: Make debug output more detailed RDMA/bnxt_re: Return error for SRQ resize IB/hfi1: Fix a memleak in init_credit_return usb: roles: don't get/set_role() when usb_role_switch is unregistered usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs usb: cdns3: fix memory double free when handle zero packet usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable() ARM: ep93xx: Add terminator to gpiod_lookup_table l2tp: pass correct message length to ip6_append_data PCI/MSI: Prevent MSI hardware interrupt number truncation gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() dm-crypt: don't modify the data when using authenticated encryption IB/hfi1: Fix sdma.h tx->num_descs off-by-one error PCI: tegra: Fix OF node reference leak PCI: tegra: Fix reporting GPIO error value arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node drm/amdgpu: Fix type of second parameter in trans_msg() callback iomap: Set all uptodate bits for an Uptodate page dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata() x86/alternatives: Disable KASAN in apply_alternatives() drm/amdgpu: Check for valid number of registers to read Revert "drm/sun4i: dsi: Change the start delay calculation" ALSA: hda/realtek - Enable micmute LED on and HP system selftests/bpf: Avoid running unprivileged tests with alignment requirements net: bridge: clear bridge's private skb space on xmit spi: mt7621: Fix an error message in mt7621_spi_probe() pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups pinctrl: pinctrl-rockchip: Fix a bunch of kerneldoc misdemeanours tcp: add annotations around sk->sk_shutdown accesses tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit tcp: factor out __tcp_close() helper pmdomain: renesas: r8a77980-sysc: CR7 must be always on s390/qeth: Fix potential loss of L3-IP@ in case of network issues virtio-blk: Ensure no requests in virtqueues before deleting vqs. firewire: core: send bus reset promptly on gap count error scsi: lpfc: Use unsigned type for num_sge hwmon: (coretemp) Enlarge per package core count limit nvmet-fc: abort command when there is no binding netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616 nvmet-tcp: fix nvme tcp ida memory leak regulator: pwm-regulator: Add validity checks in continuous .get_voltage ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers ahci: asm1166: correct count of reported ports fbdev: sis: Error out if pixclock equals zero fbdev: savage: Error out if pixclock equals zero wifi: mac80211: fix race condition on enabling fast-xmit wifi: cfg80211: fix missing interfaces when dumping dmaengine: fsl-qdma: increase size of 'irq_name' dmaengine: shdma: increase size of 'dev_id' scsi: target: core: Add TMF to tmr_list handling sched/rt: Disallow writing invalid values to sched_rt_period_us sched/rt: Fix sysctl_sched_rr_timeslice intial value userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb nilfs2: replace WARN_ONs for invalid DAT metadata block requests memcg: add refcnt for pcpu stock to avoid UAF problem in drain_all_stock() sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset net/sched: Retire dsmark qdisc net/sched: Retire ATM qdisc net/sched: Retire CBQ qdisc KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() Linux 5.4.269 of: gpio unittest kfree() wrong object of: unittest: fix EXPECT text for gpio hog errors net: bcmgenet: Fix EEE implementation Revert "Revert "mtd: rawnand: gpmi: Fix setting busy timeout setting"" netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() lsm: new security_file_ioctl_compat() hook drm/msm/dsi: Enable runtime PM PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() PM: runtime: add devm_pm_runtime_enable helper nilfs2: fix potential bug in end_buffer_async_write sched/membarrier: reduce the ability to hammer on sys_membarrier net: prevent mss overflow in skb_segment() netfilter: ipset: Missing gc cancellations fixed netfilter: ipset: fix performance regression in swap operation KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache mips: Fix max_mapnr being uninitialized on early stages arch, mm: remove stale mentions of DISCONIGMEM bus: moxtet: Add spi device table Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" tracing: Inform kmemleak of saved_cmdlines allocation pmdomain: core: Move the unused cleanup to a _sync initcall can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) irqchip/irq-brcmstb-l2: Add write memory barrier before exit nfp: flower: prevent re-adding mac index for bonded port nfp: use correct macro for LengthSelect in BAR config nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() nilfs2: fix data corruption in dsync block recovery for small block sizes ALSA: hda/conexant: Add quirk for SWS JS201D mmc: slot-gpio: Allow non-sleeping GPIO ro x86/mm/ident_map: Use gbpages only where full GB page should be mapped. x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6 serial: max310x: improve crystal stable clock detection serial: max310x: set default value when reading clock ready bit ring-buffer: Clean ring_buffer_poll_wait() error return iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC staging: iio: ad5933: fix type mismatch regression tracing: Fix wasted memory in saved_cmdlines logic ext4: fix double-free of blocks due to wrong extents moved_len misc: fastrpc: Mark all sessions as invalid in cb_remove binder: signal epoll threads of self-work ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL xen-netback: properly sync TX responses nfc: nci: free rx_data_reassembly skb on NCI device cleanup kbuild: Fix changing ELF file type for output of gen_btf for big endian firewire: core: correct documentation of fw_csr_string() kernel API scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock" i2c: i801: Fix block process call transactions i2c: i801: Remove i801_set_block_buffer_mode usb: f_mass_storage: forbid async queue when shutdown happen USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT HID: wacom: Do not register input devices until after hid_hw_start HID: wacom: generic: Avoid reporting a serial of '0' to userspace mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again tracing/trigger: Fix to return error if failed to alloc snapshot i40e: Fix waiting for queues of all VSIs to be disabled MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() spi: ppc4xx: Drop write-only variable of: unittest: Fix compile in the non-dynamic case of: unittest: add overlay gpio test to catch gpio hog problem btrfs: send: return EOPNOTSUPP on unknown flags btrfs: forbid deleting live subvol qgroup btrfs: forbid creating subvol qgroups netfilter: nft_set_rbtree: skip end interval element from gc net: stmmac: xgmac: fix a typo of register name in DPP safety handling net: stmmac: xgmac: use #define for string constants vhost: use kzalloc() instead of kmalloc() followed by memset() Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID hrtimer: Report offline hrtimer enqueue USB: serial: cp210x: add ID for IMST iM871A-USB USB: serial: option: add Fibocom FM101-GL variant USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e net/af_iucv: clean up a try_then_request_module() netfilter: nft_ct: reject direction for ct id netfilter: nft_compat: restrict match/target protocol to u16 netfilter: nft_compat: reject unused compat flag ppp_async: limit MRU to 64K tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() rxrpc: Fix response to PING RESPONSE ACKs to a dead call inet: read sk->sk_family once in inet_recv_error() hwmon: (coretemp) Fix bogus core_id to attr name mapping hwmon: (coretemp) Fix out-of-bounds memory access hwmon: (aspeed-pwm-tacho) mutex for tach reading atm: idt77252: fix a memleak in open_card_ubr0 selftests: net: avoid just another constant wait net: stmmac: xgmac: fix handling of DPP safety error for DMA channels phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV phy: renesas: rcar-gen3-usb2: Fix returning wrong error code dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA bonding: remove print in bond_verify_device_path HID: apple: Add 2021 magic keyboard FN key mapping HID: apple: Swap the Fn and Left Control keys on Apple keyboards HID: apple: Add support for the 2021 Magic Keyboard net: sysfs: Fix /sys/class/net/<iface> path af_unix: fix lockdep positive in sk_diag_dump_icons() net: ipv4: fix a memleak in ip_setup_cork netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger llc: call sock_orphan() at release time ipv6: Ensure natural alignment of const ipv6 loopback and router addresses ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() ixgbe: Refactor overtemp event handling ixgbe: Refactor returning internal error codes ixgbe: Remove non-inclusive language net: remove unneeded break scsi: isci: Fix an error code problem in isci_io_request_build() wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update perf: Fix the nr_addr_filters fix drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()' ceph: fix deadlock or deadcode of misusing dget() blk-mq: fix IO hang from sbitmap wakeup race virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings libsubcmd: Fix memory leak in uniq() PCI/AER: Decode Requester ID when no error info found fs/kernfs/dir: obey S_ISGID usb: hub: Replace hardcoded quirk value with BIT() macro PCI: switchtec: Fix stdev_release() crash after surprise hot remove PCI: Only override AMD USB controller if required mfd: ti_am335x_tscadc: Fix TI SoC dependencies i3c: master: cdns: Update maximum prescaler value for i2c clock um: net: Fix return type of uml_net_start_xmit() um: Don't use vfprintf() for os_info() um: Fix naming clash between UML and scheduler leds: trigger: panic: Don't register panic notifier if creating the trigger failed drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' drm/amdgpu: Let KFD sync with VM fences clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() drm/msm/dpu: Ratelimit framedone timeout msgs media: ddbridge: fix an error code problem in ddb_probe IB/ipoib: Fix mcast list locking drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time ALSA: hda: Intel: add HDA_ARL PCI ID support PCI: add INTEL_HDA_ARL to pci_ids.h media: rockchip: rga: fix swizzling for RGB formats media: stk1160: Fixed high volume of stk1160_dbg messages drm/mipi-dsi: Fix detach call without attach drm/framebuffer: Fix use of uninitialized variable drm/drm_file: fix use of uninitialized variable RDMA/IPoIB: Fix error code return in ipoib_mcast_join fast_dput(): handle underflows gracefully ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument f2fs: fix to check return value of f2fs_reserve_new_block() wifi: cfg80211: free beacon_ies when overridden from hidden BSS wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property md: Whenassemble the array, consult the superblock of the freshest device block: prevent an integer overflow in bvec_try_merge_hw_page ARM: dts: imx23/28: Fix the DMA controller node name ARM: dts: imx23-sansa: Use preferred i2c-gpios properties ARM: dts: imx27-apf27dev: Fix LED name ARM: dts: imx25/27: Pass timing0 ARM: dts: imx1: Fix sram node ARM: dts: imx27: Fix sram node ARM: dts: imx: Use flash@0,0 pattern ARM: dts: imx25/27-eukrea: Fix RTC node name ARM: dts: rockchip: fix rk3036 hdmi ports node scsi: libfc: Fix up timeout error in fc_fcp_rec_error() scsi: libfc: Don't schedule abort twice bpf: Add map and need_defer parameters to .map_fd_put_ptr() wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() ARM: dts: imx7s: Fix nand-controller #size-cells ARM: dts: imx7s: Fix lcdif compatible ARM: dts: imx7d: Fix coresight funnel ports bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk PCI: Add no PM reset quirk for NVIDIA Spectrum devices scsi: lpfc: Fix possible file string name overflow when updating firmware selftests/bpf: Fix pyperf180 compilation failure with clang18 selftests/bpf: satisfy compiler by having explicit return in btf test wifi: rt2x00: restart beacon queue when hardware reset ext4: avoid online resizing failures due to oversized flex bg ext4: remove unnecessary check from alloc_flex_gd() ext4: unify the type of flexbg_size to unsigned int ext4: fix inconsistent between segment fstrim and full fstrim ecryptfs: Reject casefold directory inodes SUNRPC: Fix a suspicious RCU usage warning KVM: s390: fix setting of fpc register s390/ptrace: handle setting of fpc register correctly jfs: fix array-index-out-of-bounds in diNewExt rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() crypto: stm32/crc32 - fix parsing list of devices pstore/ram: Fix crash when setting number of cpus to an odd number jfs: fix uaf in jfs_evict_inode jfs: fix array-index-out-of-bounds in dbAdjTree jfs: fix slab-out-of-bounds Read in dtSearch UBSAN: array-index-out-of-bounds in dtSplitRoot FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree ACPI: extlog: fix NULL pointer dereference check PNP: ACPI: fix fortify warning ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop audit: Send netlink ACK before setting connection in auditd_set regulator: core: Only increment use_count when enable_count changes perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel powerpc/lib: Validate size for vector operations powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE powerpc/mm: Fix build failures due to arch_reserved_kernel_pages() powerpc: Fix build error due to is_valid_bugaddr() powerpc/mm: Fix null-pointer dereference in pgtable_cache_add x86/entry/ia32: Ensure s32 is sign extended to s64 tick/sched: Preserve number of idle sleeps across CPU hotplug events mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan spi: bcm-qspi: fix SFDP BFPT read by usig mspi read gpio: eic-sprd: Clear interrupt after set the interrupt type drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume drm/exynos: fix accidental on-stack copy of exynos_drm_plane drm/bridge: nxp-ptn3460: simplify some error checking drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking drm: Don't unref the same fb many times by mistake due to deadlock handling gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 netfilter: nf_tables: reject QUEUE/DROP verdict parameters rbd: don't move requests to the running list on errors btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args btrfs: don't warn if discard range is not aligned to sector btrfs: tree-checker: fix inline ref size in error messages btrfs: ref-verify: free ref cache before clearing mount opt net: fec: fix the unhandled context fault from smmu fjes: fix memleaks in fjes_hw_setup netfilter: nf_tables: validate NFPROTO_* family netfilter: nf_tables: restrict anonymous set and map names to 16 bytes net/mlx5e: fix a double-free in arfs_create_groups net/mlx5: Use kfree(ft->g) in arfs_create_groups() net/mlx5: DR, Use the right GVMI number for drop action netlink: fix potential sleeping issue in mqueue_flush_file tcp: Add memory barrier to tcp_push() afs: Hide silly-rename files from userspace tracing: Ensure visibility when inserting an element into tracing_map net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv llc: Drop support for ETH_P_TR_802_2. llc: make llc_ui_sendmsg() more robust against bonding changes vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING net/smc: fix illegal rmb_desc access in SMC-D connection dump x86/CPU/AMD: Fix disabling XSAVES on AMD family 0x17 due to erratum powerpc: Use always instead of always-y in for crtsavres.o fs: move S_ISGID stripping into the vfs_*() helpers fs: add mode_strip_sgid() helper mtd: spinand: macronix: Fix MX35LFxGE4AD page size block: Remove special-casing of compound pages rename(): fix the locking of subdirectories ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path nouveau/vmm: don't set addr on the fail path to avoid warning mmc: core: Use mrq.sbc in close-ended ffu arm64: dts: qcom: sdm845: fix USB wakeup interrupt types parisc/firmware: Fix F-extend for PDC addresses rpmsg: virtio: Free driver_override when rpmsg_remove() hwrng: core - Fix page fault dead lock on mmap-ed hwrng PM: hibernate: Enforce ordering during image compression/decompression crypto: api - Disallow identical driver names ext4: allow for the last group to be marked as trimmed serial: sc16is7xx: add check for unsupported SPI modes during probe spi: introduce SPI_MODE_X_MASK macro serial: sc16is7xx: set safe default SPI clock frequency units: add the HZ macros units: change from 'L' to 'UL' units: Add Watt units include/linux/units.h: add helpers for kelvin to/from Celsius conversion PCI: mediatek: Clear interrupt status before dispatching handler Conflicts: include/linux/timer.h mm/memory-failure.c Change-Id: I4974903c79ecddc3d9225b0b723a30b6c83ef572	2024-06-22 17:58:09 +03:00
Greg Kroah-Hartman	85547bc085	Merge tag 'android11-5.4.274_r00' into branch 'android11-5.4' ... This is the merge of the upstream 5.4.274 relelease into the android11-5.4 branch. Included in here are the following commits: * 181edea14a Revert "timers: Rename del_timer_sync() to timer_delete_sync()" * 46cf330263 Merge 5.4.274 into android11-5.4-lts |\ | * 0dbd436fb9 Linux 5.4.274 | * fba9c24c19 firmware: meson_sm: fix to avoid potential NULL pointer dereference | * 35a5acfa7a ip_gre: do not report erspan version on GRE interface | * 61206032d6 erspan: Check IFLA_GRE_ERSPAN_VER is set. | * 7f12ecf453 VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() | * d006b709db Bluetooth: btintel: Fixe build regression | * 0bf9fd89ba x86/alternative: Don't call text_poke() in lazy TLB mode | * 67944e6db6 drm/i915/gt: Reset queue_priority_hint on parking | * 09e6bb5321 x86/mm/pat: fix VM_PAT handling in COW mappings | * 6e5da7d65b virtio: reenable config if freezing device failed | * e7bda8f58b drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put() | * 7a529c9023 tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc | * 9a3b90904d netfilter: nf_tables: discard table flag update with pending basechain deletion | * 61ac728434 netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path | * 0a14e16239 netfilter: nf_tables: release batch on table validation from abort path | * 41bad13c0e netfilter: nf_tables: reject new basechain after table flag update | * 72d091b751 fbmon: prevent division by zero in fb_videomode_from_videomode() | * 77f34b9af3 fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 | * 0eab73ffb6 usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined | * 261a831427 usb: typec: tcpci: add generic tcpci fallback compatible | * fcc68c952c tools: iio: replace seekdir() in iio_generic_buffer | * 97832659b1 ktest: force $buildonly = 1 for 'make_warnings_file' test type | * 71de605098 Input: allocate keycode for Display refresh rate toggle | * edd073c78d block: prevent division by zero in blk_rq_stat_sum() | * 73daab5b8c Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default" | * 4256e1460e SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int | * 08a07d5a20 drm/amd/display: Fix nanosec stat overflow | * 4a35b778d0 media: sta2x11: fix irq handler cast | * 2c1f840469 isofs: handle CDs with bad root inode but good Joliet root directory | * e2cd32435b scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() | * 1b4fe801b5 sysv: don't call sb_bread() with pointers_lock held | * e04cae532a Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails | * 68a69bb2ec Bluetooth: btintel: Fix null ptr deref in btintel_read_version | * 024529c27c btrfs: send: handle path ref underflow in header iterate_inode_ref() | * a9252c8cfa btrfs: export: handle invalid inode or root reference in btrfs_get_parent() | * 576164bd01 btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() | * 41aff62bf1 tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num() | * 97ad3fc426 ionic: set adminq irq affinity | * 67611c11d7 arm64: dts: rockchip: fix rk3399 hdmi ports node | * 223145f838 arm64: dts: rockchip: fix rk3328 hdmi ports node | * 60d417f3e4 panic: Flush kernel log buffer at the end | * f15eca9513 VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() | * dec0f1b008 wifi: ath9k: fix LNA selection in ath_ant_try_scan() | * 485b5d1d6a s390/entry: align system call table on 8 bytes | * 976b1b2680 x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() | * 039458c058 ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone | * fc4387dce4 ata: sata_mv: Fix PCI device ID table declaration compilation warning | * 0e9207b054 scsi: mylex: Fix sysfs buffer lengths | * d887674f09 ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit | * 517884404e ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw | * 9c11271714 net: ravb: Always process TX descriptor ring | * e54a0c79cd erspan: make sure erspan_base_hdr is present in skb->head | * 959fe471f1 erspan: Add type I version 0 support. | * 19d7e7c1ee init: open /initrd.image with O_LARGEFILE | * 32e34d96b3 initramfs: switch initramfs unpacking to struct file based APIs | * 13b2d81505 fs: add a vfs_fchmod helper | * 8eba8d1145 fs: add a vfs_fchown helper | * 9550632ba9 staging: vc04_services: fix information leak in create_component() | * bbd974d444 staging: vc04_services: changen strncpy() to strscpy_pad() | * d07aab3ca7 staging: mmal-vchiq: Fix client_component for 64 bit kernel | * 50bc5a96f8 staging: mmal-vchiq: Allocate and free components as required | * 9dcf0fcb80 i40e: fix vf may be used uninitialized in this function warning | * 9c52581961 ipv6: Fix infinite recursion in fib6_dump_done(). | * 73fac254ec selftests: reuseaddr_conflict: add missing new line at the end of the output | * 2882bb3b91 net: stmmac: fix rx queue priority assignment | * f356eb2fb5 net/sched: act_skbmod: prevent kernel-infoleak | * f7990498b0 bpf, sockmap: Prevent lock inversion deadlock in map delete elem | * a347bc8e62 netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() | * f4e14695fe netfilter: nf_tables: flush pending destroy work before exit_net release | * ab81b3d2f3 mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations | * 144c56d5dd Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped." | * 07afdfd8a6 vfio/platform: Create persistent IRQ handlers | * b18fa894d6 vfio/pci: Create persistent INTx handler | * 3777fa4c8f vfio: Introduce interface to flush virqfd inject workqueue | * 1e71b6449d vfio/pci: Lock external INTx masking ops | * 26389925d6 vfio/pci: Disable auto-enable of exclusive INTx IRQ | * bcd46782e2 net/rds: fix possible cp null dereference | * 49ce99ae43 netfilter: nf_tables: disallow timeout for anonymous sets | * f5450973eb Bluetooth: Fix TOCTOU in HCI debugfs implementation | * 5c8b927293 Bluetooth: hci_event: set the conn encrypted before conn establishes | * 9d161e8af4 x86/cpufeatures: Add new word for scattered features | * ff7a4adbd7 r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d | * e78f604693 dm integrity: fix out-of-range warning | * 44e62f5d35 tcp: properly terminate timers for kernel sockets | * a4bb81d890 ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa() | * 03fe259649 nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet | * 12d6a5681a USB: core: Fix deadlock in usb_deauthorize_interface() | * ea9a4fce2e scsi: lpfc: Correct size for wqe for memset() | * fa24c1a49d x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled | * d7a68eee87 scsi: qla2xxx: Fix command flush on cable pull | * 68d951880d usb: udc: remove warning when queue disabled ep | * a79ac9f3da usb: dwc2: gadget: LPM flow fix | * 693bbbccd9 usb: dwc2: host: Fix ISOC flow in DDMA mode | * eb97df08c3 usb: dwc2: host: Fix hibernation flow | * 4cf44c9fa0 usb: dwc2: host: Fix remote wakeup from hibernation | * 0053f15d50 scsi: core: Fix unremoved procfs host directory regression | * 4206ad65a0 ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs | * 3afdcc4e1a usb: cdc-wdm: close race between read and workqueue | * b9a7339ae4 mmc: core: Avoid negative index with array access | * fd20d84bae mmc: core: Initialize mmc_blk_ioc_data | * c7a9b1b777 exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack() | * be1dd9254f wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes | * 747d4ee747 mm/migrate: set swap entry values of THP tail pages properly. | * 7f75e937ec mm/memory-failure: fix an incorrect use of tail pages | * 815be99d93 vt: fix memory overlapping when deleting chars in the buffer | * d6077e0d38 bounds: support non-power-of-two CONFIG_NR_CPUS | * 282e4deafe powerpc: xor_vmx: Add '-mhard-float' to CFLAGS | * 34b5d2ff9e efivarfs: Request at most 512 bytes for variable names | * 37a65df6a9 perf/core: Fix reentry problem in perf_output_read_group() | * 861021710b loop: loop_set_status_from_info() check before assignment | * b40877b856 loop: Check for overflow while configuring loop | * f4476da8ea loop: Factor out configuring loop from status | * 7423a124fa loop: Refactor loop_set_status() size calculation | * 3c9e7e8cb6 loop: Factor out setting loop device size | * e08b2e4176 loop: Remove sector_t truncation checks | * ea3bec644a loop: Call loop_config_discard() only after new config is applied | * 2ea7077748 Revert "loop: Check for overflow while configuring loop" | * 735e525d8c btrfs: allocate btrfs_ioctl_defrag_range_args on stack | * 501561d808 printk: Update @console_may_schedule in console_trylock_spinning() | * 9470f5b250 xen/events: close evtchn after mapping cleanup | * 03b19c7fa1 x86/speculation: Support intra-function call validation | * f8f25fde0c objtool: Add support for intra-function calls | * eafb29361a objtool: is_fentry_call() crashes if call has no destination | * 396dbbc189 fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion | * ff7342090c vt: fix unicode buffer corruption when deleting characters | * 741dee500f tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled | * d79cd5c29a usb: port: Don't try to peer unused USB ports based on location | * a766761d20 usb: gadget: ncm: Fix handling of zero block length packets | * eb7b01ca77 USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command | * 9e93b41109 ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform | * 57ae281a67 xfrm: Avoid clang fortify warning in copy_to_user_tmpl() | * 0920c618d2 netfilter: nf_tables: reject constant set with timeout | * e9a0d3f376 netfilter: nf_tables: disallow anonymous set with timeout flag | * edcf1a3f18 netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout | * 1ba8fdef88 comedi: comedi_test: Prevent timers rescheduling during deletion | * e7d4cff57c dm snapshot: fix lockup in dm_exception_table_exit | * 35ff8175d9 ahci: asm1064: asm1166: don't limit reported ports | * 86e248c2d6 ahci: asm1064: correct count of reported ports | * 89c4357725 x86/CPU/AMD: Update the Zenbleed microcode revisions | * 32eaee72e9 nilfs2: prevent kernel bug at submit_bh_wbc() | * 6503d76d91 nilfs2: use a more common logging style | * 9cbe1ad5f4 nilfs2: fix failure to detect DAT corruption in btree and direct mappings | * f2cee08a69 memtest: use {READ,WRITE}_ONCE in memory scanning | * 673fb93c92 drm/vc4: hdmi: do not return negative values from .get_modes() | * 7ecbec89e4 drm/imx/ipuv3: do not return negative values from .get_modes() | * 348aa3d47e drm/exynos: do not return negative values from .get_modes() | * 9daddee03d s390/zcrypt: fix reference counting on zcrypt card objects | * ff50716b7d soc: fsl: qbman: Use raw spinlock for cgr_lock | * f248ecc186 soc: fsl: qbman: Add CGR update function | * 6e9629518c soc: fsl: qbman: Add helper for sanity checking cgr ops | * 62c3ecd283 soc: fsl: qbman: Always disable interrupts when taking cgr_lock | * 3f91ba9653 ring-buffer: Fix full_waiters_pending in poll | * f7578a3b7c ring-buffer: Fix resetting of shortest_full | * b0beb669a8 vfio/platform: Disable virqfds on cleanup | * b046ab1642 kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1 | * 31722ed2c3 speakup: Fix 8bit characters from direct synth | * b2b93a38d6 slimbus: core: Remove usage of the deprecated ida_simple_xx() API | * aec74a14d1 nvmem: meson-efuse: fix function pointer type mismatch | * 525ae72d9f firmware: meson_sm: Rework driver as a proper platform driver | * ee4e9c1976 ext4: fix corruption during on-line resize | * 1a560f1969 hwmon: (amc6821) add of_match table | * d7bc1877c1 mmc: core: Fix switch on gp3 partition | * 24019e5ac6 dm-raid: fix lockdep waring in "pers->hot_add_disk" | * 0b949dc225 Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" | * 47d8aafcfe PCI/PM: Drain runtime-idle callbacks before driver removal | * ec6f7c0807 PCI: Drop pci_device_remove() test of pci_dev->driver | * 287a9a9b6e btrfs: fix off-by-one chunk length calculation at contains_pending_extent() | * ab95a42020 fuse: don't unhash root | * c180d65df8 mmc: tmio: avoid concurrent runs of mmc_request_done() | * 2e94147e20 PM: sleep: wakeirq: fix wake irq warning in system suspend | * bd140aef69 USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M | * b11cd74c31 USB: serial: option: add MeiG Smart SLM320 product | * f5167c50af USB: serial: cp210x: add ID for MGP Instruments PDS100 | * 4fda3ad19d USB: serial: add device ID for VeriFone adapter | * 3f01bf964e USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB | * 4fc30a31e1 powerpc/fsl: Fix mfpmr build errors with newer binutils | * 86bf75d915 clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays | * b2dfb216f3 clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays | * 83fe1bbd9e clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays | * ddcd5ea7b2 PM: suspend: Set mem_sleep_current during kernel command line setup | * 42dcb0a374 parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds | * 10e031fbe5 parisc: Fix csum_ipv6_magic on 64-bit systems | * 4dc4793c9d parisc: Fix csum_ipv6_magic on 32-bit systems | * 89cb6c7169 parisc: Fix ip_fast_csum | * 331b43d79a parisc: Do not hardcode registers in checksum functions | * 64a1ccfa9a mtd: rawnand: meson: fix scrambling mode value in command macro | * a1d549aec8 ubi: correct the calculation of fastmap size | * 4e09d5210b ubi: Check for too small LEB size in VTBL code | * 778c6ad402 ubifs: Set page uptodate in the correct place | * f52d7663a1 fat: fix uninitialized field in nostale filehandles | * b224a3b8d3 ext4: correct best extent lstart adjustment logic | * e8b25c7bae selftests/mqueue: Set timeout to 180 seconds | * 8e81cd58ae crypto: qat - resolve race condition during AER recovery | * 5a9f7e9123 crypto: qat - fix double free during reset | * fca0c42c34 sparc: vDSO: fix return value of __setup handler | * 75159bcec2 sparc64: NMI watchdog: fix return value of __setup handler | * 82e25cc1c2 KVM: Always flush async #PF workqueue when vCPU is being destroyed | * ce6e52cade media: xc4000: Fix atomicity violation in xc4000_get_frequency | * 7d271b798a serial: max310x: fix NULL pointer dereference in I2C instantiation | * d453dd485e arm: dts: marvell: Fix maxium->maxim typo in brownstone dts | * 36f6b76341 ARM: dts: mmp2-brownstone: Don't redeclare phandle references | * 60f9cecf6a smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity() | * cec55e30e3 smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr() | * 9a353d80ba clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd | * a7923ecece media: staging: ipu3-imgu: Set fields before media_entity_pads_init() | * 8e3f03f4ef wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach | * df4209170b timers: Rename del_timer_sync() to timer_delete_sync() | * ef5f71db1e timers: Use del_timer_sync() even on UP | * 9ec9c420db timers: Update kernel-doc for various functions | * c513b79129 x86/bugs: Use sysfs_emit() | * 922bc61d8c x86/cpu: Support AMD Automatic IBRS | * d9caea5f1b Documentation/hw-vuln: Update spectre doc | * 8b05647042 amdkfd: use calloc instead of kzalloc to avoid integer overflow * | ff7463a1e9 Reapply "media: ttpci: fix two memleaks in budget_av_attach" * | 7cc7098648 Revert "media: rename VFL_TYPE_GRABBER to _VIDEO" * | b8c488bb24 Revert "media: media/pci: rename VFL_TYPE_GRABBER to _VIDEO" * | be024bb2cd Revert "media: ttpci: fix two memleaks in budget_av_attach" * | d873f54a70 Revert "net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()" * | 960240ce53 Merge 5.4.273 into android11-5.4-lts |\| | * 24489321d0 Linux 5.4.273 | * b37f030486 regmap: Add missing map->bus check | * 55f8ea6731 spi: spi-mt65xx: Fix NULL pointer access in interrupt handler | * 59426454b8 bpf: report RCU QS in cpumap kthread | * 3ffe591b27 rcu: add a helper to report consolidated flavor QS | * 2531f907d3 netfilter: nf_tables: do not compare internal table flags on updates | * 71002d9eb1 ARM: dts: sun8i-h2-plus-bananapi-m2-zero: add regulator nodes vcc-dram and vcc1v2 | * 94cb17e5cf octeontx2-af: Use separate handlers for interrupts | * 4f37d3a7e0 net/bnx2x: Prevent access to a freed page in page_pool | * 69f9f55891 hsr: Handle failures in module init | * f781fb5177 rds: introduce acquire/release ordering in acquire/release_in_xmit() | * 84c510411e packet: annotate data-races around ignore_outgoing | * 889ed056ea hsr: Fix uninit-value access in hsr_get_node() | * 48cef94b69 s390/vtime: fix average steal time calculation | * 305c31b970 octeontx2-af: Use matching wake_up API variant in CGX command interface | * b63362b317 usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin | * 254b27c4ae staging: greybus: fix get_channel_from_mode() failure path | * f6bf49e76f serial: 8250_exar: Don't remove GPIO device on suspend | * 8dd52ab78f rtc: mt6397: select IRQ_DOMAIN instead of depending on it | * ca6279d1a1 kconfig: fix infinite loop when expanding a macro at the end of file | * a8cc354a81 tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT | * f1c9a0c338 serial: max310x: fix syntax error in IRQ error message | * bd2f4df259 tty: vt: fix 20 vs 0x20 typo in EScsiignore | * 854ebf45a4 afs: Revert "afs: Hide silly-rename files from userspace" | * afcbba70bf NFS: Fix an off by one in root_nfs_cat() | * bcc3ec2bdb watchdog: stm32_iwdg: initialize default timeout | * e95eeb7f7d net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() | * 3b8415daaa scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn | * 2b38dbd7fa RDMA/device: Fix a race between mad_client and cm_client init | * 39b1af7bc9 scsi: csiostor: Avoid function pointer casts | * 6d5dc96b15 ALSA: usb-audio: Stop parsing channels bits when all channels are found. | * d7ae7d1265 clk: Fix clk_core_get NULL dereference | * a1129b0922 sparc32: Fix section mismatch in leon_pci_grpci | * c8c038beb4 backlight: lp8788: Fully initialize backlight_properties during probe | * 8c351a9ef5 backlight: lm3639: Fully initialize backlight_properties during probe | * 12a0153f78 backlight: da9052: Fully initialize backlight_properties during probe | * 1c8d8c6b4e backlight: lm3630a: Don't set bl->props.brightness in get_brightness | * 40a89f1bc4 backlight: lm3630a: Initialize backlight_properties on init | * bb9981f915 powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc. | * a6e96cc265 drm/msm/dpu: add division of drm_display_mode's hskew parameter | * 41eec45c71 powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks | * dfde84cc6c drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip | * af37aed049 media: ttpci: fix two memleaks in budget_av_attach | * 353f980a5d media: media/pci: rename VFL_TYPE_GRABBER to _VIDEO | * fa83fca55c media: rename VFL_TYPE_GRABBER to _VIDEO | * 25f5765521 media: v4l2-core: correctly validate video and metadata ioctls | * 291cda0b80 media: go7007: fix a memleak in go7007_load_encoder | * fa8b472952 media: dvb-frontends: avoid stack overflow warnings with clang | * d29ed08964 media: pvrusb2: fix uaf in pvr2_context_set_notify | * 86c10c56f2 drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int() | * 23d57b99ca ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs | * 8df143c608 mtd: rawnand: lpc32xx_mlc: fix irq handler prototype | * d9d4d1363b mtd: maps: physmap-core: fix flash size larger than 32-bit | * a8c73f0439 crypto: arm/sha - fix function cast warnings | * 4b6569e142 mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref | * ac1170674d mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref | * 3472fa83d9 drm/tegra: put drm_gem_object ref on error in tegra_fb_create | * f27aaaecf7 clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister() | * 44163c73b0 PCI: Mark 3ware-9650SE Root Port Extended Tags as broken | * 9b074f2ed1 drm/mediatek: dsi: Fix DSI RGB666 formats and definitions | * 2e1120e480 clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times | * d2f3c762ba media: pvrusb2: fix pvr2_stream_callback casts | * e9d391cc70 media: pvrusb2: remove redundant NULL check | * 013fb50518 media: go7007: add check of return value of go7007_read_addr() | * 8c2e4efe12 media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak | * cf95808632 perf stat: Avoid metric-only segv | * 9e411c40bd ALSA: seq: fix function cast warnings | * a0ae3335b3 drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode() | * 9df9108a91 perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str() | * 79ab819393 PCI: switchtec: Fix an error handling path in switchtec_pci_probe() | * 00b07b4962 quota: Fix rcu annotations of inode dquot pointers | * 49669f8e7e quota: Fix potential NULL pointer dereference | * ff29b5f9f0 quota: simplify drop_dquot_ref() | * 68435ffc1c clk: qcom: reset: Ensure write completion on reset de/assertion | * 026d3984a1 clk: qcom: reset: Commonize the de/assert functions | * 48846ddc71 clk: qcom: reset: support resetting multiple bits | * 7f82802d47 clk: qcom: reset: Allow specifying custom reset delay | * f20c3270f3 media: edia: dvbdev: fix a use-after-free | * 0175f2d34c media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity | * 8269ab1641 media: v4l2-tpg: fix some memleaks in tpg_alloc | * 2e6892b2be media: em28xx: annotate unchecked call to media_device_register() | * 639155da9b perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample() | * e019d87e02 drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' | * 1d4d674173 perf record: Fix possible incorrect free in record__switch_output() | * adc8a91676 PCI/DPC: Print all TLP Prefixes, not just the first | * daf21394f9 media: tc358743: register v4l2 async device only after successful setup | * ba34d8a5aa dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA | * cc31a90eb7 drm/rockchip: lvds: do not overwrite error code | * f1dfd026cd drm: Don't treat 0 as -1 in drm_fixp2int_ceil | * b061b28b66 drm/rockchip: inno_hdmi: Fix video timing | * 91dc47cd72 drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe() | * 030d46f859 drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe() | * b4cb57ec2c drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe() | * e04e773fb8 drm/tegra: dsi: Make use of the helper function dev_err_probe() | * 85f28e98c5 gpu: host1x: mipi: Update tegra_mipi_request() to be node based | * f05631a852 drm/tegra: dsi: Add missing check for of_find_device_by_node | * da7ece2197 dm: call the resume method on internal suspend | * 6070692ea3 dm raid: fix false positive for requeue needed during reshape | * 3b1e8a617e nfp: flower: handle acti_netdevs allocation failure | * e06f0d3f66 net/x25: fix incorrect parameter validation in the x25_getsockopt() function | * 26843eefcf net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function | * b9979cae62 udp: fix incorrect parameter validation in the udp_lib_getsockopt() function | * 1bd08e5314 l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function | * 2e7f3cabc6 tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function | * fb6639c748 net: hns3: fix port duplex configure error in IMP reset | * ec6bb01e02 net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() | * a9f5faf28e ipv6: fib6_rules: flush route cache when rule is changed | * 21e5fa4688 bpf: Fix stackmap overflow check on 32-bit arches | * 92c81fbb3e bpf: Fix hashtab overflow check on 32-bit arches | * 8a8b6a2468 sr9800: Add check for usbnet_get_endpoints | * 54a03e4ac1 Bluetooth: hci_core: Fix possible buffer overflow | * f6177a1723 Bluetooth: Remove superfluous call to hci_conn_check_pending() | * 03df15b579 igb: Fix missing time sync events | * 141897c5b0 igb: move PEROUT and EXTTS isr logic to separate functions | * 8081d80a92 mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function | * bfa9d86d39 SUNRPC: fix some memleaks in gssx_dec_option_array | * 52018aa146 x86, relocs: Ignore relocations in .notes section | * 450ac90ed4 ACPI: scan: Fix device check notification handling | * 33b498a123 ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node | * 0655698da8 ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address | * 8deafa61fb ARM: dts: imx6dl-yapp4: Move phy reset into switch node | * 174e3c8ee7 ARM: dts: arm: realview: Fix development chip ROM compatible value | * de8abc894b net: ena: Remove ena_select_queue | * f434eacad6 net: ena: cosmetic: fix line break issues | * a4fc14a662 wifi: brcmsmac: avoid function pointer casts | * 6234e09e69 iommu/amd: Mark interrupt as managed | * 073b5bbb13 bus: tegra-aconnect: Update dependency to ARCH_TEGRA | * ea96bf3f80 ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() | * 2eb2a5d6f5 arm64: dts: qcom: msm8996: Pad addresses | * a8f3650656 arm64: dts: qcom: msm8996: Move regulator consumers to db820c | * 1f685fa06c arm64: dts: qcom: msm8996: Use node references in db820c | * adcf4eeb34 arm64: dts: qcom: db820c: Move non-soc entries out of /soc | * 6bbbd2fd08 bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly | * 6f51d61a43 bpf: Factor out bpf_spin_lock into helpers. | * cf0d888ea7 bpf: Add typecast to bpf helpers to help BTF generation | * e1f7fef6e2 arm64: dts: mediatek: mt7622: add missing "device_type" to memory nodes | * bea9573c79 wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() | * 6fd9061497 net: blackhole_dev: fix build warning for ethh set but not used | * ef036a0598 af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc(). | * 4bdfc38a98 sock_diag: annotate data-races around sock_diag_handlers[family] | * 76ac9c141e wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir() | * e556006de4 wifi: wilc1000: fix RCU usage in connect path | * 1bda3ff1fd wifi: wilc1000: fix declarations ordering | * 8c6210d175 wifi: b43: Disable QoS for bcm4331 | * 12062b149f wifi: b43: Stop correct queue in DMA worker when QoS is disabled | * c668f0f825 b43: main: Fix use true/false for bool type | * 47ec637b11 wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled | * 31aaf17200 wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled | * 801be44049 b43: dma: Fix use true/false for bool type variable | * 88a9dffaec wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() | * be26970980 timekeeping: Fix cross-timestamp interpolation for non-x86 | * fee4e84c4e timekeeping: Fix cross-timestamp interpolation corner case decision | * 7cec7d8388 timekeeping: Fix cross-timestamp interpolation on counter wrap | * 1a54aa506b aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts | * 72dacc72b2 fs/select: rework stack allocation hack for clang | * 44214d744b nbd: null check for nla_nest_start | * 772a7def98 do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak | * 3f6186cc65 ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll | * 9f27f4d5d1 ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode | * f1d3be9eb9 ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC | * 5f3c13930b Input: gpio_keys_polled - suppress deferred probe error for gpio | * fa14a15373 ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet | * da17f556ad firewire: core: use long bus reset on gap count error | * 5f369efd9d Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security | * 6e9c113992 scsi: mpt3sas: Prevent sending diag_reset when the controller is ready | * 2daa2a8e89 btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve | * 890a1b31fa dm-verity, dm-crypt: align "struct bvec_iter" correctly | * 5d8afc25c7 block: sed-opal: handle empty atoms when parsing response | * 745718d00f parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check | * b43b1a7062 net/iucv: fix the allocation size of iucv_path_table array | * c411a3c828 RDMA/mlx5: Relax DEVX access upon modify commands | * 69dd0a99da HID: multitouch: Add required quirk for Synaptics 0xcddc device | * 7d7fa0bea3 MIPS: Clear Cause.BD in instruction_pointer_set | * 025a8a96c7 x86/xen: Add some null pointer checking to smp.c | * 4c00abb52a ASoC: rt5645: Make LattePanda board DMI match more precise | * ef5de5d505 selftests: tls: use exact comparison in recv_partial | * cfb24022bb io_uring: drop any code related to SCM_RIGHTS | * 2692b8a016 io_uring/unix: drop usage of io_uring socket * | f509fa9b09 Revert "regmap: allow to define reg_update_bits for no bus configuration" * | 012b5eceed Revert "regmap: Add bulk read/write callbacks into regmap_config" * | 0efa1aa851 Revert "serial: max310x: fix IO data corruption in batched operations" * | 43bbe91c9f Revert "geneve: make sure to pull inner header in geneve_rx()" * | ee2f1c68f1 Merge 5.4.272 into android11-5.4-lts |\| | * 8407582630 Linux 5.4.272 | * 345ced4052 arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts | * 1b3d8cbd1c arm64: dts: qcom: add PDC interrupt controller for SDM845 | * 59b3583da1 serial: max310x: fix IO data corruption in batched operations | * f5c252aaa1 serial: max310x: implement I2C support | * 112094efd6 serial: max310x: make accessing revision id interface-agnostic | * b96b017919 regmap: Add bulk read/write callbacks into regmap_config | * 758c6799da regmap: allow to define reg_update_bits for no bus configuration | * 9a7bbea266 serial: max310x: Unprepare and disable clock in error path | * 664a6a904a getrusage: use sig->stats_lock rather than lock_task_sighand() | * 2b34f60383 getrusage: use __for_each_thread() | * c50a059431 getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand() | * ef8a8b36a1 getrusage: add the "signal_struct *sig" local variable | * f184f21978 y2038: rusage: use __kernel_old_timeval | * c7441c77c9 hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed | * f2ab3eaa64 hv_netvsc: use netif_is_bond_master() instead of open code | * 9b5ef7a528 hv_netvsc: Make netvsc/VF binding check both MAC and serial number | * 5402ec577f Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU | * bf6bb3612e serial: max310x: prevent infinite while() loop in port startup | * 7e30e5c143 serial: max310x: use a separate regmap for each port | * 3fb7c9bcd0 serial: max310x: use regmap methods for SPI batch operations | * 2c9c830d74 serial: max310x: Make use of device properties | * b765176ae1 serial: max310x: fail probe if clock crystal is unstable | * 816700131e serial: max310x: Try to get crystal clock rate from property | * c76dcad53b serial: max310x: Use devm_clk_get_optional() to get the input clock | * b569d91e51 um: allow not setting extra rpaths in the linux binary | * 47c68edecc selftests: mm: fix map_hugetlb failure on 64K page size systems | * f9055fa2b2 netrom: Fix data-races around sysctl_net_busy_read | * 07bbccd1ad netrom: Fix a data-race around sysctl_netrom_link_fails_count | * c4309e5f8e netrom: Fix a data-race around sysctl_netrom_routing_control | * cbba77abb4 netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout | * 89aa78a343 netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size | * 1f60795dca netrom: Fix a data-race around sysctl_netrom_transport_busy_delay | * 80578681ea netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay | * f716a68234 netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries | * eadec8da44 netrom: Fix a data-race around sysctl_netrom_transport_timeout | * eda02a0bed netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser | * 1e84b108f2 netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser | * 7f61523255 netrom: Fix a data-race around sysctl_netrom_default_path_quality | * 4bafcc43ba netfilter: nf_conntrack_h323: Add protection for bmp length out of range | * 6ec3032022 netfilter: nft_ct: fix l3num expectations with inet pseudo family | * 997efea2bf net/rds: fix WARNING in rds_conn_connect_if_down | * 664f9c6472 net/ipv6: avoid possible UAF in ip6_route_mpath_notify() | * d9fefc5113 net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() | * 59d2a40769 geneve: make sure to pull inner header in geneve_rx() | * a248b1f58a ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able | * 7f08778469 net: lan78xx: fix runtime PM count underflow on link stop | * 81934a2ab5 lan78xx: Fix race conditions in suspend/resume handling | * 57b9c48cd5 lan78xx: Fix partial packet errors on suspend/resume | * e68b46e9aa lan78xx: Add missing return code checks | * b1cc23ffe1 lan78xx: Fix white space and style issues * | 79ed7de671 Merge branch 'android11-5.4' into branch 'android11-5.4-lts' * | 26385fa150 UPSTREAM: arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts * | e1dfe2d3de UPSTREAM: arm64: dts: qcom: add PDC interrupt controller for SDM845 * | 40df6b551d Merge 5.4.271 into android11-5.4-lts |\| | * 3fec063b05 Linux 5.4.271 | * 9162730a83 gpio: 74x164: Enable output pins after registers are reset | * 1dde8ef4b7 fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super | * 037d5a949b cachefiles: fix memory leak in cachefiles_add_cache() | * ace0fdf796 x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers | * 9d660e5adf mmc: core: Fix eMMC initialization with 1-bit bus connection | * 3cc5fb824c dmaengine: fsl-qdma: init irq after reg initialization | * 518d78b4fa dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read | * c6652e20d7 btrfs: dev-replace: properly validate device names | * 0cfbb26ee5 wifi: nl80211: reject iftype change with mesh ID change | * ec92aa2cab gtp: fix use-after-free and null-ptr-deref in gtp_newlink() | * 5c78be006e afs: Fix endless loop in directory parsing | * 26dda65b09 ALSA: Drop leftover snd-rtctimer stuff from Makefile | * 7394abc892 power: supply: bq27xxx-i2c: Do not free non existing IRQ | * 950d4d74d3 efi/capsule-loader: fix incorrect allocation size | * b9fbc44159 rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back | * 260410c589 netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate() | * 20f6f150e1 Bluetooth: Enforce validation on max value of connection interval | * 79820a7e1e Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST | * 98fb98fd37 Bluetooth: Avoid potential use-after-free in hci_error_reset | * 6e0000a432 net: usb: dm9601: fix wrong return value in dm9601_mdio_read | * 69624e28d6 lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected | * 9d4ffb5b9d ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() | * f5f11f7e28 tun: Fix xdp_rxq_info's queue_index when detaching | * f81e94d2dc net: ip_tunnel: prevent perpetual headroom growth | * 9ae51361da netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter * | 7dde2bcd3f ANDROID: GKI: update .xml file due to USB changes in 5.4.270 * | 1ac7c39f24 Merge 5.4.270 into android11-5.4-lts |\| | * e133c1ee6d Linux 5.4.270 | * 7a54338219 scripts/bpf: Fix xdp_md forward declaration typo | * b4eea7a05e fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio | * c28fc1aa6f drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set | * 29db9725f2 drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3 | * ae4360cbd3 netfilter: nf_tables: set dormant flag on hook register failure | * f310143961 tls: stop recv() if initial process_rx_list gave us non-DATA | * a26742ada7 tls: rx: drop pointless else after goto | * c1287c1d6b tls: rx: jump to a more appropriate label | * 06de230254 s390: use the correct count for __iowrite64_copy() | * 7eee00feb6 packet: move from strlcpy with unused retval to strscpy | * 82831e3ff7 ipv6: sr: fix possible use-after-free and null-ptr-deref | * 5c27d85a69 afs: Increase buffer size in afs_update_volume_status() | * 799a4afaa5 ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid | * 5888f34249 ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid | * a50cb1d6f3 nouveau: fix function cast warnings | * fe031dfcea scsi: jazz_esp: Only build if SCSI core is builtin | * dd90af71fa bpf, scripts: Correct GPL license name | * 1f18b5bb45 scripts/bpf: teach bpf_helpers_doc.py to dump BPF helper definitions | * 48ebca0a11 RDMA/srpt: fix function pointer cast warnings | * 3107633774 RDMA/srpt: Make debug output more detailed | * 6e461952df RDMA/bnxt_re: Return error for SRQ resize | * cecfb90cf7 IB/hfi1: Fix a memleak in init_credit_return | * bbcf72333b usb: roles: don't get/set_role() when usb_role_switch is unregistered | * a31cf46d10 usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs | * aad6132ae6 usb: cdns3: fix memory double free when handle zero packet | * cfa9abb557 usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable() | * 999a8bb70d ARM: ep93xx: Add terminator to gpiod_lookup_table | * c1d3a84a67 l2tp: pass correct message length to ip6_append_data | * caf4a67c01 PCI/MSI: Prevent MSI hardware interrupt number truncation | * f8cbd17919 gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() | * 0dccbb9353 dm-crypt: don't modify the data when using authenticated encryption | * 5833024a98 IB/hfi1: Fix sdma.h tx->num_descs off-by-one error | * 6ede985c6b PCI: tegra: Fix OF node reference leak | * e04a2afd08 PCI: tegra: Fix reporting GPIO error value | * e3fc080911 arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node | * efd63c23a4 drm/amdgpu: Fix type of second parameter in trans_msg() callback | * f691ab24cf iomap: Set all uptodate bits for an Uptodate page | * 45227ae32f dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata() | * 3770c38cd6 x86/alternatives: Disable KASAN in apply_alternatives() | * f45dc10a3c drm/amdgpu: Check for valid number of registers to read | * 90aa9135a4 Revert "drm/sun4i: dsi: Change the start delay calculation" | * 7000efb6d8 ALSA: hda/realtek - Enable micmute LED on and HP system | * 82c53047fe selftests/bpf: Avoid running unprivileged tests with alignment requirements | * 81e03f638d net: bridge: clear bridge's private skb space on xmit | * 82174d6bd7 spi: mt7621: Fix an error message in mt7621_spi_probe() | * 954a7a0011 pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups | * 759756e2cf pinctrl: pinctrl-rockchip: Fix a bunch of kerneldoc misdemeanours | * 99dc568545 tcp: add annotations around sk->sk_shutdown accesses | * 41ca938616 tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit | * 5a9dc14df2 tcp: factor out __tcp_close() helper | * d428676420 pmdomain: renesas: r8a77980-sysc: CR7 must be always on | * 3bc35da667 s390/qeth: Fix potential loss of L3-IP@ in case of network issues | * b7bfaea8f5 virtio-blk: Ensure no requests in virtqueues before deleting vqs. | * d124ab01fc firewire: core: send bus reset promptly on gap count error | * b5854f923d scsi: lpfc: Use unsigned type for num_sge | * 60635f8a05 hwmon: (coretemp) Enlarge per package core count limit | * 6d338fb1a1 nvmet-fc: abort command when there is no binding | * ac524b7b3f netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new | * 6f5015ce25 ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616 | * c3a25d4fdd nvmet-tcp: fix nvme tcp ida memory leak | * 5068cb91ed regulator: pwm-regulator: Add validity checks in continuous .get_voltage | * 6b92b1bc16 ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() | * 260fc96283 ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() | * bccb418eba ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers | * e896bf4878 ahci: asm1166: correct count of reported ports | * 6db07619d1 fbdev: sis: Error out if pixclock equals zero | * 84dce0f6a4 fbdev: savage: Error out if pixclock equals zero | * 85720b69ae wifi: mac80211: fix race condition on enabling fast-xmit | * d3032de2c8 wifi: cfg80211: fix missing interfaces when dumping | * bb3813a6a7 dmaengine: fsl-qdma: increase size of 'irq_name' | * a7229c75c3 dmaengine: shdma: increase size of 'dev_id' | * 11f3fe5001 scsi: target: core: Add TMF to tmr_list handling | * d2fc4134aa sched/rt: Disallow writing invalid values to sched_rt_period_us | * b69677bfd7 sched/rt: Fix sysctl_sched_rr_timeslice intial value | * 429aaf144b userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb | * b0911b8d37 nilfs2: replace WARN_ONs for invalid DAT metadata block requests | * febd743200 memcg: add refcnt for pcpu stock to avoid UAF problem in drain_all_stock() | * d7b5bdb52d sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset | * 010dc505ea net/sched: Retire dsmark qdisc | * 40e8abb86d net/sched: Retire ATM qdisc | * 493685f3dd net/sched: Retire CBQ qdisc | * 9d17e73504 KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler | * 68799371c9 KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() * | 3298a76a41 Revert "bpf: Add map and need_defer parameters to .map_fd_put_ptr()" * | 241e0d860f Revert "hrtimer: Report offline hrtimer enqueue" * | ce97b1b6bc Revert "drm/mipi-dsi: Fix detach call without attach" * | 806fb883ea Merge 5.4.269 into android11-5.4-lts |/ * 6e1f54a498 Linux 5.4.269 * e9aa8e5a72 of: gpio unittest kfree() wrong object * 6ac8965955 of: unittest: fix EXPECT text for gpio hog errors * 7dd275ce3b net: bcmgenet: Fix EEE implementation * 10c586da9f Revert "Revert "mtd: rawnand: gpmi: Fix setting busy timeout setting"" * 25b42be4e0 netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() * 3dd76bebcd lsm: new security_file_ioctl_compat() hook * efdf644062 drm/msm/dsi: Enable runtime PM * fef59ee6c0 PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() * 835ed5effb PM: runtime: add devm_pm_runtime_enable helper * d31c8721e8 nilfs2: fix potential bug in end_buffer_async_write * 2441a64070 sched/membarrier: reduce the ability to hammer on sys_membarrier * cd1022eaf8 net: prevent mss overflow in skb_segment() * 6587af96ef netfilter: ipset: Missing gc cancellations fixed * c7f2733e50 netfilter: ipset: fix performance regression in swap operation * d04acadb64 KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache * 4705a9fc50 mips: Fix max_mapnr being uninitialized on early stages * 5e0854b60a arch, mm: remove stale mentions of DISCONIGMEM * c324e2716d bus: moxtet: Add spi device table * 7f71d9817c Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" * 60e092289c tracing: Inform kmemleak of saved_cmdlines allocation * fbe86124b7 pmdomain: core: Move the unused cleanup to a _sync initcall * 08de58abed can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) * a257ffde37 irqchip/irq-brcmstb-l2: Add write memory barrier before exit * 91a7c00235 nfp: flower: prevent re-adding mac index for bonded port * b22c9a37c7 nfp: use correct macro for LengthSelect in BAR config * 862ee4422c nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() * a6efe6dbaa nilfs2: fix data corruption in dsync block recovery for small block sizes * 6ce7d5e6d2 ALSA: hda/conexant: Add quirk for SWS JS201D * 6b8bdc509e mmc: slot-gpio: Allow non-sleeping GPIO ro * 4f2fde5051 x86/mm/ident_map: Use gbpages only where full GB page should be mapped. * 4c7b1d08ad x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6 * ed14ab2611 serial: max310x: improve crystal stable clock detection * 5814a9045c serial: max310x: set default value when reading clock ready bit * ef60665ea9 ring-buffer: Clean ring_buffer_poll_wait() error return * 7200170e88 iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC * 720d0112b3 staging: iio: ad5933: fix type mismatch regression * 77e7a316cd tracing: Fix wasted memory in saved_cmdlines logic * afbcad9ae7 ext4: fix double-free of blocks due to wrong extents moved_len * 15238f4b21 misc: fastrpc: Mark all sessions as invalid in cb_remove * 42beab162d binder: signal epoll threads of self-work * 93a52449fe ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL * 9086b27eac xen-netback: properly sync TX responses * 71349abe3a nfc: nci: free rx_data_reassembly skb on NCI device cleanup * 4ae191effb kbuild: Fix changing ELF file type for output of gen_btf for big endian * 750a4e5999 firewire: core: correct documentation of fw_csr_string() kernel API * 2209fc6e3d scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock" * d074d5ff5a i2c: i801: Fix block process call transactions * 4de1489d80 i2c: i801: Remove i801_set_block_buffer_mode * df112ccb9b usb: f_mass_storage: forbid async queue when shutdown happen * addaa8627f USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT * dbaca8fa9e HID: wacom: Do not register input devices until after hid_hw_start * e13bed5cfe HID: wacom: generic: Avoid reporting a serial of '0' to userspace * 1f12e4b328 mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again * 8ffd5590f4 tracing/trigger: Fix to return error if failed to alloc snapshot * a67f1f83f3 i40e: Fix waiting for queues of all VSIs to be disabled * 9a3a82affa MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler * 422d5243b9 ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() * 91b48c6339 spi: ppc4xx: Drop write-only variable * 61da1f41d0 of: unittest: Fix compile in the non-dynamic case * f6997a2416 of: unittest: add overlay gpio test to catch gpio hog problem * 89485251f6 btrfs: send: return EOPNOTSUPP on unknown flags * 863837df8a btrfs: forbid deleting live subvol qgroup * d25031ba2a btrfs: forbid creating subvol qgroups * 10e9cb3931 netfilter: nft_set_rbtree: skip end interval element from gc * 7fde2acc6d net: stmmac: xgmac: fix a typo of register name in DPP safety handling * b9ff931f00 net: stmmac: xgmac: use #define for string constants * 88c7e1e7a6 vhost: use kzalloc() instead of kmalloc() followed by memset() * 09e77c7d67 Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID * a012efe0df hrtimer: Report offline hrtimer enqueue * 4a589de93c USB: serial: cp210x: add ID for IMST iM871A-USB * cd0ab7f2a8 USB: serial: option: add Fibocom FM101-GL variant * 896695af51 USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e * 11ca9624cc net/af_iucv: clean up a try_then_request_module() * 1c7488156e netfilter: nft_ct: reject direction for ct id * 8e2a84c6da netfilter: nft_compat: restrict match/target protocol to u16 * f139a4c6d2 netfilter: nft_compat: reject unused compat flag * 56fae81633 ppp_async: limit MRU to 64K * 6f70f0b412 tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() * ef1f56f2cd rxrpc: Fix response to PING RESPONSE ACKs to a dead call * 5993f121fb inet: read sk->sk_family once in inet_recv_error() * 7c96975c24 hwmon: (coretemp) Fix bogus core_id to attr name mapping * 1eb74c00c9 hwmon: (coretemp) Fix out-of-bounds memory access * 51d76b7230 hwmon: (aspeed-pwm-tacho) mutex for tach reading * df0965935a atm: idt77252: fix a memleak in open_card_ubr0 * a0ac20fd53 selftests: net: avoid just another constant wait * e9837c83be net: stmmac: xgmac: fix handling of DPP safety error for DMA channels * 8398d8d735 phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP * 0cb90f27a3 dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV * 6ff4827315 phy: renesas: rcar-gen3-usb2: Fix returning wrong error code * 1c75fe450b dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA * c263609416 dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA * 817bedcd7f bonding: remove print in bond_verify_device_path * e95120698b HID: apple: Add 2021 magic keyboard FN key mapping * 5991ab8940 HID: apple: Swap the Fn and Left Control keys on Apple keyboards * 6d4771ab2d HID: apple: Add support for the 2021 Magic Keyboard * 67f56ef9e1 net: sysfs: Fix /sys/class/net/<iface> path * b169ffde73 af_unix: fix lockdep positive in sk_diag_dump_icons() * b3dace37f1 net: ipv4: fix a memleak in ip_setup_cork * f549f340c9 netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations * 06608603fa netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger * 64babb17e8 llc: call sock_orphan() at release time * 2a09d1784c ipv6: Ensure natural alignment of const ipv6 loopback and router addresses * 7f1a24914b ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() * a10e95d6cf ixgbe: Refactor overtemp event handling * 2d533ddca2 ixgbe: Refactor returning internal error codes * 980c806f67 ixgbe: Remove non-inclusive language * 7c03b74865 net: remove unneeded break * b81f679ac5 scsi: isci: Fix an error code problem in isci_io_request_build() * 12f58dce48 wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update * ad2bd6cd17 perf: Fix the nr_addr_filters fix * 34da3b9fa5 drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()' * 6ab4fd508f ceph: fix deadlock or deadcode of misusing dget() * ecd7744a14 blk-mq: fix IO hang from sbitmap wakeup race * 977105472f virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings * 884b746209 libsubcmd: Fix memory leak in uniq() * 3e06e9b906 PCI/AER: Decode Requester ID when no error info found * 133bf750d7 fs/kernfs/dir: obey S_ISGID * 17c252f192 usb: hub: Replace hardcoded quirk value with BIT() macro * d8c2935499 PCI: switchtec: Fix stdev_release() crash after surprise hot remove * a32a24da0e PCI: Only override AMD USB controller if required * e2048eb3cb mfd: ti_am335x_tscadc: Fix TI SoC dependencies * 838cbe01db i3c: master: cdns: Update maximum prescaler value for i2c clock * a6946682dd um: net: Fix return type of uml_net_start_xmit() * c8115f2bd8 um: Don't use vfprintf() for os_info() * 735a29ce08 um: Fix naming clash between UML and scheduler * ddd1f258f0 leds: trigger: panic: Don't register panic notifier if creating the trigger failed * 9052b3e0e7 drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' * 548f9a37d7 drm/amdgpu: Let KFD sync with VM fences * 15d674571a clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() * 105444e207 clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() * 8a96f1caf1 drm/msm/dpu: Ratelimit framedone timeout msgs * 4d181fe966 media: ddbridge: fix an error code problem in ddb_probe * 615e3adc20 IB/ipoib: Fix mcast list locking * fb703d31fd drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time * c1b2e5e837 ALSA: hda: Intel: add HDA_ARL PCI ID support * c91bda92fb PCI: add INTEL_HDA_ARL to pci_ids.h * fbbee078cf media: rockchip: rga: fix swizzling for RGB formats * acb1bffe5f media: stk1160: Fixed high volume of stk1160_dbg messages * 67997250d3 drm/mipi-dsi: Fix detach call without attach * d778e10dde drm/framebuffer: Fix use of uninitialized variable * da980f8db0 drm/drm_file: fix use of uninitialized variable * 00a5feb060 RDMA/IPoIB: Fix error code return in ipoib_mcast_join * b0f907a4ef fast_dput(): handle underflows gracefully * 12ba5b9cf8 ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument * 9fceaf8182 f2fs: fix to check return value of f2fs_reserve_new_block() * 52240224e7 wifi: cfg80211: free beacon_ies when overridden from hidden BSS * 18c2989c30 wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() * 8ec36f2d0c wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices * f3b7a31bf1 arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property * c3f22192a2 arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property * 351b37b88e md: Whenassemble the array, consult the superblock of the freshest device * 6f2cd02ff5 block: prevent an integer overflow in bvec_try_merge_hw_page * fb9c25ea0a ARM: dts: imx23/28: Fix the DMA controller node name * c48e75a7ee ARM: dts: imx23-sansa: Use preferred i2c-gpios properties * 83b1cceca9 ARM: dts: imx27-apf27dev: Fix LED name * 06c3f5920f ARM: dts: imx25/27: Pass timing0 * 826e8fa48e ARM: dts: imx1: Fix sram node * 05f309a3fa ARM: dts: imx27: Fix sram node * 1e35a4cf5a ARM: dts: imx: Use flash@0,0 pattern * 30cfab1c8c ARM: dts: imx25/27-eukrea: Fix RTC node name * ca14da9a1e ARM: dts: rockchip: fix rk3036 hdmi ports node * e9ac3e3398 scsi: libfc: Fix up timeout error in fc_fcp_rec_error() * f5a875051e scsi: libfc: Don't schedule abort twice * eb6f68ec92 bpf: Add map and need_defer parameters to .map_fd_put_ptr() * f11f0fd1ad wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() * 53dd674b32 ARM: dts: imx7s: Fix nand-controller #size-cells * a86ce3671d ARM: dts: imx7s: Fix lcdif compatible * 183edc0ad2 ARM: dts: imx7d: Fix coresight funnel ports * 6c50e561ce bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk * 4d981d9224 PCI: Add no PM reset quirk for NVIDIA Spectrum devices * 0e8c8aa8e3 scsi: lpfc: Fix possible file string name overflow when updating firmware * cbd0b6268a selftests/bpf: Fix pyperf180 compilation failure with clang18 * 982bdaa0fc selftests/bpf: satisfy compiler by having explicit return in btf test * e1f113b57d wifi: rt2x00: restart beacon queue when hardware reset * b183fe8702 ext4: avoid online resizing failures due to oversized flex bg * 92c3c5cfed ext4: remove unnecessary check from alloc_flex_gd() * 7cb19e1336 ext4: unify the type of flexbg_size to unsigned int * 360c28a2fd ext4: fix inconsistent between segment fstrim and full fstrim * ec10755496 ecryptfs: Reject casefold directory inodes * 7a96d85bf1 SUNRPC: Fix a suspicious RCU usage warning * 5e63c9ae80 KVM: s390: fix setting of fpc register * 6d0822f2cc s390/ptrace: handle setting of fpc register correctly * de6a91aed1 jfs: fix array-index-out-of-bounds in diNewExt * 592d29eb6b rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() * f4a0b57632 afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() * 3f4cba4cf8 crypto: stm32/crc32 - fix parsing list of devices * e9f6ac5089 pstore/ram: Fix crash when setting number of cpus to an odd number * 93df0a2a0b jfs: fix uaf in jfs_evict_inode * 3f8217c323 jfs: fix array-index-out-of-bounds in dbAdjTree * 1b9d682858 jfs: fix slab-out-of-bounds Read in dtSearch * fd3486a893 UBSAN: array-index-out-of-bounds in dtSplitRoot * 98f9537fe6 FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree * d2049af7dd ACPI: extlog: fix NULL pointer dereference check * 0d2adafba9 PNP: ACPI: fix fortify warning * b0b96859ab ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop * 20277842d9 audit: Send netlink ACK before setting connection in auditd_set * 27756ae366 regulator: core: Only increment use_count when enable_count changes * aed181fbc2 perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file * 980d5fe989 x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel * 0580f4403a powerpc/lib: Validate size for vector operations * 7cd81d2358 powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE * 9bf6c6f097 powerpc/mm: Fix build failures due to arch_reserved_kernel_pages() * 171468044b powerpc: Fix build error due to is_valid_bugaddr() * f6781add1c powerpc/mm: Fix null-pointer dereference in pgtable_cache_add * 3cdbfac106 x86/entry/ia32: Ensure s32 is sign extended to s64 * aa8bd0d9b2 tick/sched: Preserve number of idle sleeps across CPU hotplug events * 200d17b226 mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan * b2b0d40775 spi: bcm-qspi: fix SFDP BFPT read by usig mspi read * 344e8f3392 gpio: eic-sprd: Clear interrupt after set the interrupt type * f81d67832c drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume * 83d86b4a77 drm/exynos: fix accidental on-stack copy of exynos_drm_plane * 3e835d6e65 drm/bridge: nxp-ptn3460: simplify some error checking * 021e214947 drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking * 9dd334a824 drm: Don't unref the same fb many times by mistake due to deadlock handling * 5624d628a1 gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 * 4e66422f1b netfilter: nf_tables: reject QUEUE/DROP verdict parameters * bd517df3bd rbd: don't move requests to the running list on errors * 69a0876252 btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args * d0bf04c965 btrfs: don't warn if discard range is not aligned to sector * 927d1a3d32 btrfs: tree-checker: fix inline ref size in error messages * 5c9e576bfd btrfs: ref-verify: free ref cache before clearing mount opt * d3d6162eb1 net: fec: fix the unhandled context fault from smmu * 3422bfda92 fjes: fix memleaks in fjes_hw_setup * 07bcc3cd3d netfilter: nf_tables: validate NFPROTO_* family * b55e492f06 netfilter: nf_tables: restrict anonymous set and map names to 16 bytes * 2501afe6c4 net/mlx5e: fix a double-free in arfs_create_groups * bca555e8a2 net/mlx5: Use kfree(ft->g) in arfs_create_groups() * 0917d771f6 net/mlx5: DR, Use the right GVMI number for drop action * 4f4dc7098b netlink: fix potential sleeping issue in mqueue_flush_file * da70948068 tcp: Add memory barrier to tcp_push() * 01d15b68f0 afs: Hide silly-rename files from userspace * dad9b28f67 tracing: Ensure visibility when inserting an element into tracing_map * a37ae111db net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv * b8e8838f82 llc: Drop support for ETH_P_TR_802_2. * b643d0defc llc: make llc_ui_sendmsg() more robust against bonding changes * 06f30fdbc4 vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING * 1fea9969b8 net/smc: fix illegal rmb_desc access in SMC-D connection dump * 5c6183f3c7 x86/CPU/AMD: Fix disabling XSAVES on AMD family 0x17 due to erratum * 7e180b702a powerpc: Use always instead of always-y in for crtsavres.o * 457ef4fe54 fs: move S_ISGID stripping into the vfs_*() helpers * 0cb0093fd6 fs: add mode_strip_sgid() helper * 635a0039e8 mtd: spinand: macronix: Fix MX35LFxGE4AD page size * 3f4e660144 block: Remove special-casing of compound pages * 0785e29899 rename(): fix the locking of subdirectories * f0824ca283 ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path * a1e80a33bf nouveau/vmm: don't set addr on the fail path to avoid warning * f49f9e8027 mmc: core: Use mrq.sbc in close-ended ffu * e15b1553d0 arm64: dts: qcom: sdm845: fix USB wakeup interrupt types * 830c99794b parisc/firmware: Fix F-extend for PDC addresses * dd50fe18c2 rpmsg: virtio: Free driver_override when rpmsg_remove() * 5030d4c798 hwrng: core - Fix page fault dead lock on mmap-ed hwrng * 5bc17b4fc2 PM: hibernate: Enforce ordering during image compression/decompression * cf6889bb8b crypto: api - Disallow identical driver names * a7edaf40fc ext4: allow for the last group to be marked as trimmed * e2ecfd5565 serial: sc16is7xx: add check for unsupported SPI modes during probe * 120b65f80b spi: introduce SPI_MODE_X_MASK macro * 2b708e6b28 serial: sc16is7xx: set safe default SPI clock frequency * e53321b341 units: add the HZ macros * 34d74cf3c7 units: change from 'L' to 'UL' * 7478445a45 units: Add Watt units * b617974548 include/linux/units.h: add helpers for kelvin to/from Celsius conversion * 2ed05a8cc9 PCI: mediatek: Clear interrupt status before dispatching handler Change-Id: I1ddbcc9d61402546e16694894da56199a22ec74d Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-06-01 07:06:09 +00:00
Michael Bestas	71d8fed9fd	Merge tag 'LA.UM.9.14.r1-24700-LAHAINA.QSSI15.0' of https://git.codelinaro.org/clo/la/kernel/msm-5.4 into android13-5.4-lahaina ... "LA.UM.9.14.r1-24700-LAHAINA.QSSI15.0" * tag 'LA.UM.9.14.r1-24700-LAHAINA.QSSI15.0' of https://git.codelinaro.org/clo/la/kernel/msm-5.4: msm: npu v1: Fix OOB issue in IPC between driver and firmware mmc: sdhci-msm: Disable partial_init and clk-scaling to avoid RED error slimbus: qcom-ngd-ctrl: Avoid accessing deallocated stack msm_ipa: new structure for tunnel design for uC msm: ipa3: change variable name for indication of rx tlv format soc: qcom: llcc: Handle a second device without data corruption msm: eva: User after free fix in msm_cvp_mark_user_persist rpmsg: slatecom: out of bound read from process_cmd soc: qcom: msm_minidump: Configurable Encryption support defconfig: arm64: Disable trimming non-whitelisted symbols soc: qcom: add out of bound check for AON fifo rpmsg: slatecom: maintain rx_size to read Revert LLCC changes bus: mhi: Fix potential out-of-bound access Conflicts: arch/arm64/boot/dts/vendor/bindings/interrupt-controller/ti,sci-intr.txt drivers/soc/qcom/llcc-slice.c drivers/usb/dwc3/core.c kernel/events/core.c mm/memory-failure.c Change-Id: Ie4d89454f0766d0a48ebd4f2e6facb6deca9ea57	2024-05-29 02:59:55 +03:00
Michael Bestas	1cba2b4252	Merge tag 'ASB-2024-05-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina ... https://source.android.com/docs/security/bulletin/2024-05-01 CVE-2023-4622 * tag 'ASB-2024-05-05_11-5.4' of https://android.googlesource.com/kernel/common: ANDROID: 16K: Fix show maps CFI failure ANDROID: 16K: Handle pad VMA splits and merges ANDROID: 16K: madvise_vma_pad_pages: Remove filemap_fault check ANDROID: 16K: Only madvise padding from dynamic linker context ANDROID: 16K: Separate padding from ELF LOAD segment mappings ANDROID: 16K: Exclude ELF padding for fault around range ANDROID: 16K: Use MADV_DONTNEED to save VMA padding pages. ANDROID: 16K: Introduce ELF padding representation for VMAs ANDROID: 16K: Introduce /sys/kernel/mm/pgsize_miration/enabled ANDROID: GKI: add snd_compr_stop_error to Xiaomi_abi UPSTREAM: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path UPSTREAM: netfilter: nf_tables: release batch on table validation from abort path UPSTREAM: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout Conflicts: mm/Makefile mm/mlock.c mm/mprotect.c Change-Id: I559d13f0370fd2ede446df61fd1ce0550fa45155	2024-05-07 20:29:15 +03:00
Michael Bestas	6120cc56e9	Merge tag 'ASB-2024-04-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina ... https://source.android.com/docs/security/bulletin/2024-04-01 * tag 'ASB-2024-04-05_11-5.4' of https://android.googlesource.com/kernel/common: FROMLIST: binder: check offset alignment in binder_get_object() BACKPORT: f2fs: expose # of overprivision segments ANDROID: GKI: Update symbol list for Zebra ANDROID: GKI: db845c: Update symbols list and ABI UPSTREAM: drm/msm/dsi: Enable runtime PM UPSTREAM: PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() UPSTREAM: PM: runtime: add devm_pm_runtime_enable helper Change-Id: Ie646a1c4ae01dacb93625c5ef26283c0d9f5df33	2024-04-19 23:55:43 +03:00
liaohj	398970c390	qcom: whitelist: Add necessary api for aw8838 dlkm ... add "device_remove_bin_file" white list for aw8838 driver. it could be found in the latest abi_gki_aarch64*.xml file. Change-Id: I1d73efccfd0d6f2e5d412a3e327843b04b62ce2b Signed-off-by: liaohj <liaohj@lenovo.com> Reviewed-on: https://gerrit.mot.com/2706089 SLTApproved: Slta Waiver SME-Granted: SME Approvals Granted Tested-by: Jira Key Reviewed-by: Zhenxin Xi <xizx@motorola.com> Submit-Approved: Jira Key	2024-04-18 14:45:18 +08:00
liaohj	ba9b664158	qcom: whitelist: Add necessary api for fs1815 dlkm ... add "snd_soc_add_card_controls" white list for fs1815 driver. it could be found in the latest abi_gki_aarch64*.xml file. Change-Id: I3f31e167317f273322858da8bf2188c161c88a3d Signed-off-by: liaohj <liaohj@lenovo.com> Reviewed-on: https://gerrit.mot.com/2658776 SME-Granted: SME Approvals Granted SLTApproved: Slta Waiver Tested-by: Jira Key Reviewed-by: Huosheng Liao <liaohs@motorola.com> Reviewed-by: Wanlong Zhou <zhouwl@motorola.com> Submit-Approved: Jira Key	2024-04-18 14:45:17 +08:00
sunyue5	1fe500f6a4	remove "sock_from_file" symbol from qc white list ... As this symbol has still not been supported in the lastest GKI abi symbol manifest file, we have to implement this function by ourselves Change-Id: I1d898e0d3082815722c42d58ad22acf832379cbf Signed-off-by: sunyue5 <sunyue5@motorola.com> Reviewed-on: https://gerrit.mot.com/2245023 SME-Granted: SME Approvals Granted SLTApproved: Slta Waiver Tested-by: Jira Key Reviewed-by: Daniel Finimundi <danielrf@motorola.com> Reviewed-by: Xiangpo Zhao <zhaoxp3@motorola.com> Submit-Approved: Jira Key (cherry picked from commit 765bedbc5102b33d1f11a59b949b5f43d11e5172) Reviewed-on: https://gerrit.mot.com/2246086 Reviewed-by: Bin Liu <liubin7@motorola.com> Reviewed-by: Yue Sun <sunyue5@lenovo.com> Reviewed-by: Hujun Liao <liaohj@motorola.com>	2024-04-18 14:45:09 +08:00
sunyue5	480c466493	abi: Fix wlan module build error in GKI build ... qca_cld3_xxx.ko compile failure when make user build add whitelist ERROR: "init_task" [../../vendor/qcom/opensource/wlan/qcacld-3.0/.qca6390/wlan.ko] undefined! ERROR: "sock_from_file" [../../vendor/qcom/opensource/wlan/qcacld-3.0/.qca6390/wlan.ko] undefined! Change-Id: Icb2c09bf24325d243939bec6c69a9ca36abce4c8 Signed-off-by: sunyue5 <sunyue5@motorola.com> Reviewed-on: https://gerrit.mot.com/2244333 SME-Granted: SME Approvals Granted SLTApproved: Slta Waiver Tested-by: Jira Key Reviewed-by: Xiangpo Zhao <zhaoxp3@motorola.com> Submit-Approved: Jira Key (cherry picked from commit c284adb02295bb3957431144862ae19c96420a1e) Reviewed-on: https://gerrit.mot.com/2244347 Reviewed-by: Huosheng Liao <liaohs@motorola.com>	2024-04-18 14:45:09 +08:00
mahj8	5f1f1dd223	kernel: export some api for user version build ... As user version build error, so export some api for miami Change-Id: Icec594c6bde56e47baad6e482f486f8987761110 Signed-off-by: mahj8 <mahj8@motorola.com> Reviewed-on: https://gerrit.mot.com/2241288 SME-Granted: SME Approvals Granted SLTApproved: Slta Waiver Tested-by: Jira Key Reviewed-by: Huosheng Liao <liaohs@motorola.com> Submit-Approved: Jira Key	2024-04-18 14:45:09 +08:00
liuwang2	c848de7dae	abi: add platform_get_irq_optional to qcom ABI list to fix user build error ... camera ois use platform_get_irq_optional. and this api exists in abi_gki_aarch64.xml. Change-Id: Ic962a879e7b89510fcff203a0a278843d679bd70 Signed-off-by: liuwang2 <liuwang2@lenovo.com> Reviewed-on: https://gerrit.mot.com/2139758 SME-Granted: SME Approvals Granted SLTApproved: Slta Waiver Tested-by: Jira Key Reviewed-by: Zhichao Chen <chenzc2@motorola.com> Reviewed-by: Zhenxin Xi <xizx@motorola.com> Submit-Approved: Jira Key	2024-04-18 14:45:07 +08:00
huaqin85	4692ceb6c1	qcom: Update qcom whitelist for goodix ... Build Error log: ERROR: "strncat" [../../motorola/kernel/modules/drivers/input/touchscreen/goodix_berlin_mmi/goodix_brl_mmi.ko] undefined! ERROR: "input_mt_sync_frame" [../../motorola/kernel/modules/drivers/input/touchscreen/goodix_berlin_mmi/goodix_brl_mmi.ko] undefined! Change-Id: Id28c2ec2c1c4830070694b6eff6fc1f802644bf2 Signed-off-by: huaqin85 <huaqin85@motorola.com> Reviewed-on: https://gerrit.mot.com/2134025 SME-Granted: SME Approvals Granted SLTApproved: Slta Waiver Reviewed-by: Huosheng Liao <liaohs@motorola.com> Tested-by: Jira Key Submit-Approved: Jira Key	2024-04-18 14:45:07 +08:00
huaqin85	03e0add8c9	qcom: Update qcom whitelist for bq2597x ... Build Error log: ERROR: "__regmap_init_i2c" [../../motorola/kernel/modules/drivers/power/bq2597x_mmi_iio/bq2597x_mmi_iio.ko] undefined! Change-Id: I12bc97000e0b6c1927a872e4c6dee21a6343cbb9 Signed-off-by: huaqin85 <huaqin85@motorola.com> Reviewed-on: https://gerrit.mot.com/2133405 SME-Granted: SME Approvals Granted SLTApproved: Slta Waiver Tested-by: Jira Key Reviewed-by: Huosheng Liao <liaohs@motorola.com> Submit-Approved: Jira Key	2024-04-18 14:45:07 +08:00
wuwl10	a7b30f0325	abi: add strcat to ABI list to fix build error ... Focal_fps_mmi.ko will use strcat to cat version. we need to add it to abi list to avoid build error on user build. Change-Id: I2fd3e35faff5c239111d417b5a5d9efd56ebec4b Signed-off-by: wuwl10 <wuwl10@motorola.com> Reviewed-on: https://gerrit.mot.com/2131504 SLTApproved: Slta Waiver SME-Granted: SME Approvals Granted Tested-by: Jira Key Reviewed-by: gaoyx9 <gaoyx9@motorola.com> Submit-Approved: gaoyx9 <gaoyx9@motorola.com> Tested-by: gaoyx9 <gaoyx9@motorola.com> Reviewed-by: Minghui Wei <weimh1@motorola.com> Reviewed-by: Huosheng Liao <liaohs@motorola.com>	2024-04-18 14:45:07 +08:00
mahj8	d1f79327f4	gki: add some api to qcom gki white list ... for build user version error, so need to add some api to qcom gki white list Change-Id: I0da80b6b41bbdb3e9cb416a8f7385c3d46c44976 Signed-off-by: mahj8 <mahj8@motorola.com> Reviewed-on: https://gerrit.mot.com/2093395 SME-Granted: SME Approvals Granted SLTApproved: Slta Waiver Tested-by: Jira Key Reviewed-by: Huosheng Liao <liaohs@motorola.com> Submit-Approved: Jira Key	2024-04-18 14:45:06 +08:00
houdz1	fbb79eff17	gki: update qcom whitelist for leds_lm3697.ko ... mfd_add_devices/mfd_remove_devices and devm_pwm_get are in GKI Whitelist and they have been used by leds_lm3697.ko. so add it to qcom whitelist for user build. Change-Id: I73e25d25bbbcade53d5ca072c3175202188b40fb Signed-off-by: houdz1 <houdz1@lenovo.com> Reviewed-on: https://gerrit.mot.com/2090764 SME-Granted: SME Approvals Granted SLTApproved: Slta Waiver Tested-by: Jira Key Reviewed-by: Huosheng Liao <liaohs@motorola.com> Submit-Approved: Jira Key	2024-04-18 14:45:06 +08:00
liuyc20	74ea94bc50	gki: add memset32 and regmap_raw_write ABI to qcom whitelist ... memset32 & regmap_raw_write are in GKI Whitelist and they have been used by RT9426A_mmi_fg.ko. so add it to qcom whitelist for user build. Change-Id: Ic7a09e482808786eecb3a8c456307bdf76fa21eb Signed-off-by: liuyc20 <liuyc20@lenovo.com> Reviewed-on: https://gerrit.mot.com/2090736 SLTApproved: Slta Waiver SME-Granted: SME Approvals Granted Tested-by: Jira Key Reviewed-by: Huosheng Liao <liaohs@motorola.com> Reviewed-by: Minghui Wei <weimh1@motorola.com> Submit-Approved: Jira Key	2024-04-18 14:45:06 +08:00
liuyc20	7f4f01daed	gki: add i2c_smbug api for sd77426 driver ... gki build fail. add i2c_smbus_read_word_data/i2c_smbus_write_word_data, build pass Change-Id: I218e26eebec3c3fcc664a1c64ca7bede9b35da19 Signed-off-by: liuyc20 <liuyc20@lenovo.com> Reviewed-on: https://gerrit.mot.com/2044706 SME-Granted: SME Approvals Granted SLTApproved: Slta Waiver Tested-by: Jira Key Reviewed-by: Huosheng Liao <liaohs@motorola.com> Submit-Approved: Jira Key	2024-04-18 14:45:05 +08:00
chailu1	5e221066a4	gki: add smbus and typec api for rt17xx driver ... gki/pd/rt17xx add smbus and typec api for rt17xx driver Change-Id: I7fbab6c45390177896a69af573ce8b97e54354d3 Signed-off-by: chailu1 <chailu1@lenovo.com> Reviewed-on: https://gerrit.mot.com/2040743 SME-Granted: SME Approvals Granted SLTApproved: Slta Waiver Tested-by: Jira Key Reviewed-by: Huosheng Liao <liaohs@motorola.com> Submit-Approved: Jira Key	2024-04-18 14:45:05 +08:00
zhouwl	0195c133d5	gki: Fix aw882xx_acf.ko compile failure ... aw882xx_acf.ko compile failure when make user build add whitelist. ERROR: "class_remove_file_ns" [techpack/audio/asoc/codecs/aw882xxacf/aw882xx_acf.ko] undefined! ERROR: "class_create_file_ns" [techpack/audio/asoc/codecs/aw882xxacf/aw882xx_acf.ko] undefined! Change-Id: I519cde4702a223dc2a171eba4f90114fa4fdec20 Signed-off-by: zhouwl <zhouwl@lenovo.com> Reviewed-on: https://gerrit.mot.com/2004700 SME-Granted: SME Approvals Granted SLTApproved: Slta Waiver Tested-by: Jira Key Reviewed-by: Minghui Wei <weimh1@motorola.com> Reviewed-by: Hujun Liao <liaohj@motorola.com> Submit-Approved: gaoyx9 <gaoyx9@motorola.com>	2024-04-18 14:45:04 +08:00
mahj8	14ba79f992	gki: add power supply api for mmi_parallel_charger_iio.ko ... add power_supply_register and power_supply_unregister api for mmi_parallel_charger_iio.ko DLKM Change-Id: I59e7dc17aea0926ab94df3643ce858ca5f096254 Signed-off-by: mahj8 <mahj8@lenovo.com> Reviewed-on: https://gerrit.mot.com/1963306 SME-Granted: SME Approvals Granted SLTApproved: Slta Waiver Tested-by: Jira Key Reviewed-by: Lu Chai <chailu1@motorola.com> Reviewed-by: Huosheng Liao <liaohs@motorola.com> Submit-Approved: Jira Key	2024-04-18 14:45:03 +08:00
linyx10	07f8b5f50a	Add the ABI required by mcDrvModule.ko to qcom gki whitelist. ... These ABI are used in mcDrvModule.ko and they have been added to GKI whitelist, so add them to qcom whitelist: d_path get_task_exe_file get_task_mm ktime_get_raw_ts64 mmput release_pages Change-Id: If1d64546756b658e4e726ee8abef452d79a9aa5c Signed-off-by: linyx10 <linyx10@lenovo.com> Reviewed-on: https://gerrit.mot.com/1892816 SME-Granted: SME Approvals Granted SLTApproved: Slta Waiver Tested-by: Jira Key Reviewed-by: Binsheng Que <quebs2@motorola.com> Reviewed-by: Zhenxin Xi <xizx@motorola.com> Submit-Approved: Jira Key	2024-04-18 14:45:02 +08:00
mahj8	4100bb2c01	gki: add orderly_poweroff api for mmi-smbcharger-iio ... add orderly_poweroff api for mmi-smbcharger-iio LKM Change-Id: I65873ce599f651cce2350131606166fa8427f39b Signed-off-by: mahj8 <mahj8@lenovo.com> Reviewed-on: https://gerrit.mot.com/1817449 SLTApproved: Slta Waiver SME-Granted: SME Approvals Granted Tested-by: Jira Key Reviewed-by: Xiaojun Ji <jixj@motorola.com> Reviewed-by: Huosheng Liao <liaohs@motorola.com> Submit-Approved: Jira Key	2024-04-18 14:45:00 +08:00
chenyb1	71fbd43f47	Thermal: Fix Thermal Compiling Error. ... Add " thermal_zone_device_unregister" to fix compling error. Specific for user build Change-Id: I6a872ea85ce6bb856a73b5e40dd34c72d3abb016 Reviewed-on: https://gerrit.mot.com/1804395 SLTApproved: Slta Waiver SME-Granted: SME Approvals Granted Tested-by: Jira Key Reviewed-by: Lu Chai <chailu1@motorola.com> Reviewed-by: Xiaojun Ji <jixj@motorola.com> Reviewed-by: Hujun Liao <liaohj@motorola.com> Submit-Approved: Jira Key	2024-04-18 14:45:00 +08:00
wengjun1	34153b6226	Update qcom whitelist for chipone touchscreen ... The "rt_mutex_lock" and "rt_mutex_unlock" functions can be found in the latest google whitelist, so update the qcom whitelist for chipone touchscreen. Change-Id: I01c538b544d130b7c0dfe6999219c9af7fd8836f Signed-off-by: wengjun1 <wengjun1@motorola.com> Reviewed-on: https://gerrit.mot.com/1797282 SLTApproved: Slta Waiver SME-Granted: SME Approvals Granted Tested-by: Jira Key Reviewed-by: Jianqiu Huang <huangjq9@motorola.com> Reviewed-by: Xiaojun Ji <jixj@motorola.com> Reviewed-by: Yeqing Wang <wangyq13@motorola.com> Reviewed-by: Huosheng Liao <liaohs@motorola.com> Submit-Approved: Jira Key	2024-04-18 14:45:00 +08:00
liaohj	076ab2592b	qcom: whitelist: Add necessary api for aw882xx dlkm ... add "flip_open/filp_close" white list for aw882xx All of them could be found in the latest abi_gki_aarch64*.xml file. Change-Id: Ia89d6371a7c097dee12fa78dd9d5acb72e2f581b Signed-off-by: liaohj <liaohj@lenovo.com> Reviewed-on: https://gerrit.mot.com/1794660 SME-Granted: SME Approvals Granted SLTApproved: Slta Waiver Tested-by: Jira Key Reviewed-by: Huosheng Liao <liaohs@motorola.com> Submit-Approved: Jira Key	2024-04-18 14:45:00 +08:00
wuwl10	633ebc419c	qcom: Update qcom whitelist for chipone fps ... The "wakeup_source_add" and "wakeup_source_remove" functions can be found in the latest google whitelist, so update the qcom whitelist for chipone fps. Change-Id: I5332205b17b5228927f482ac991cd1fe893f72fd Signed-off-by: wuwl10 <wuwl10@motorola.com> Reviewed-on: https://gerrit.mot.com/1789294 SME-Granted: SME Approvals Granted SLTApproved: Slta Waiver Tested-by: Jira Key Reviewed-by: Huosheng Liao <liaohs@motorola.com> Submit-Approved: Jira Key	2024-04-18 14:44:59 +08:00
liuwang2	018eb758fb	ibiza: add some api to qcom whitelist ... [detail] These api exists in google whitelist abi_gki_aarch64.xml. Change-Id: I3dbc41b216fc71e341901ab4ff5e133fd25859dc Signed-off-by: liuwang2 <liuwang2@lenovo.com> Reviewed-on: https://gerrit.mot.com/1789286 SME-Granted: SME Approvals Granted SLTApproved: Slta Waiver Tested-by: Jira Key Reviewed-by: Dawei Wang <wangdw10@motorola.com> Reviewed-by: Zhenxin Xi <xizx@motorola.com> Submit-Approved: Jira Key	2024-04-18 14:44:59 +08:00
jixj	29f34870c1	qcom/gki-whitelist: add "remove_proc_subtree" for utags.ko ... This abi is used in utags.ko and it has been added to GKI whitelist so add it to qcom whitelist Change-Id: I32d9122e5e685ed6390b9f574a57a216e914065e Reviewed-on: https://gerrit.mot.com/1788243 SLTApproved: Slta Waiver SME-Granted: SME Approvals Granted Tested-by: Jira Key Reviewed-by: Zhenxin Xi <xizx@motorola.com> Submit-Approved: Jira Key	2024-04-18 14:44:59 +08:00