5192 Commits

Author SHA1 Message Date
Aeron-Aeron
f31c45ff89 Merge remote-tracking branch 'org/lineage-23.0' into bka
Signed-off-by: Aeron-Aeron <aeronrules2@gmail.com>
2025-12-23 04:44:40 +00:00
Aeron-Aeron
0c41c4add6 Merge tag 'v4.19.325-cip125' into lineage-23.0
version 4.19.325-cip125
2025-12-17 07:01:42 +00:00
Yann E. MORIN
d8e4c490fc kconfig: lxdialog: fix 'space' to (de)select options
[ Upstream commit 694174f94ebeeb5ec5cc0e9de9b40c82057e1d95 ]

In case a menu has comment without letters/numbers (eg. characters
matching the regexp '^[^[:alpha:][:digit:]]+$', for example - or *),
hitting space will cycle through those comments, rather than
selecting/deselecting the currently-highlighted option.

This is the behaviour of hitting any letter/digit: jump to the next
option which prompt starts with that letter. The only letters that
do not behave as such are 'y' 'm' and 'n'. Prompts that start with
one of those three letters are instead matched on the first letter
that is not 'y', 'm' or 'n'.

Fix that by treating 'space' as we treat y/m/n, ie. as an action key,
not as shortcut to jump to  prompt.

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Cherniaev Andrei <dungeonlords789@naver.com>
[masahiro: took from Buildroot, adjusted the commit subject]
Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>
2025-11-16 14:51:31 +00:00
Masahiro Yamada
ce79ba3985 kconfig: gconf: fix potential memory leak in renderer_edited()
[ Upstream commit f72ed4c6a375e52a3f4b75615e4a89d29d8acea7 ]

If gtk_tree_model_get_iter() fails, gtk_tree_path_free() is not called.

Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Acked-by: Randy Dunlap <rdunlap@infradead.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>
2025-11-16 14:51:31 +00:00
Masahiro Yamada
0f272e0d3c kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
[ Upstream commit cae9cdbcd9af044810bcceeb43a87accca47c71d ]

The on_treeview2_cursor_changed() handler is connected to both the left
and right tree views, but it hardcodes model2 (the GtkTreeModel of the
right tree view). This is incorrect. Get the associated model from the
view.

Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>
2025-11-16 14:51:31 +00:00
Shankari Anand
e0fabadd49 kconfig: nconf: Ensure null termination where strncpy is used
[ Upstream commit f468992936894c9ce3b1659cf38c230d33b77a16 ]

strncpy() does not guarantee null-termination if the source string is
longer than the destination buffer.

Ensure the buffer is explicitly null-terminated to prevent potential
string overflows or undefined behavior.

Signed-off-by: Shankari Anand <shankari.ak0208@gmail.com>
Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Acked-by: Randy Dunlap <rdunlap@infradead.org>
Tested-by: Randy Dunlap <rdunlap@infradead.org>
Tested-by: Nicolas Schier <n.schier@avm.de>
Acked-by: Nicolas Schier <n.schier@avm.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>
2025-11-16 14:51:31 +00:00
Suchit Karunakaran
377d85da60 kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
[ Upstream commit 5ac726653a1029a2eccba93bbe59e01fc9725828 ]

strcpy() performs no bounds checking and can lead to buffer overflows if
the input string exceeds the destination buffer size. This patch replaces
it with strncpy(), and null terminates the input string.

Signed-off-by: Suchit Karunakaran <suchitkarunakaran@gmail.com>
Reviewed-by: Nicolas Schier <nicolas.schier@linux.dev>
Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>
2025-11-16 14:51:31 +00:00
Kees Cook
56c27f55e3 randstruct: gcc-plugin: Fix attribute addition
[ Upstream commit f39f18f3c3531aa802b58a20d39d96e82eb96c14 ]

Based on changes in the 2021 public version of the randstruct
out-of-tree GCC plugin[1], more carefully update the attributes on
resulting decls, to avoid tripping checks in GCC 15's
comptypes_check_enum_int() when it has been configured with
"--enable-checking=misc":

arch/arm64/kernel/kexec_image.c:132:14: internal compiler error: in comptypes_check_enum_int, at c/c-typeck.cc:1519
  132 | const struct kexec_file_ops kexec_image_ops = {
      |              ^~~~~~~~~~~~~~
 internal_error(char const*, ...), at gcc/gcc/diagnostic-global-context.cc:517
 fancy_abort(char const*, int, char const*), at gcc/gcc/diagnostic.cc:1803
 comptypes_check_enum_int(tree_node*, tree_node*, bool*), at gcc/gcc/c/c-typeck.cc:1519
 ...

Link: https://archive.org/download/grsecurity/grsecurity-3.1-5.10.41-202105280954.patch.gz [1]
Reported-by: Thiago Jung Bauermann <thiago.bauermann@linaro.org>
Closes: https://github.com/KSPP/linux/issues/367
Closes: https://lore.kernel.org/lkml/20250530000646.104457-1-thiago.bauermann@linaro.org/
Reported-by: Ingo Saitz <ingo@hannover.ccc.de>
Closes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104745
Fixes: 313dd1b629 ("gcc-plugins: Add the randstruct plugin")
Tested-by: Thiago Jung Bauermann <thiago.bauermann@linaro.org>
Link: https://lore.kernel.org/r/20250530221824.work.623-kees@kernel.org
Signed-off-by: Kees Cook <kees@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>
2025-10-16 12:15:30 +02:00
Kees Cook
65100f7c3c randstruct: gcc-plugin: Remove bogus void member
[ Upstream commit e136a4062174a9a8d1c1447ca040ea81accfa6a8 ]

When building the randomized replacement tree of struct members, the
randstruct GCC plugin would insert, as the first member, a 0-sized void
member. This appears as though it was done to catch non-designated
("unnamed") static initializers, which wouldn't be stable since they
depend on the original struct layout order.

This was accomplished by having the side-effect of the "void member"
tripping an assert in GCC internals (count_type_elements) if the member
list ever needed to be counted (e.g. for figuring out the order of members
during a non-designated initialization), which would catch impossible type
(void) in the struct:

security/landlock/fs.c: In function ‘hook_file_ioctl_common’:
security/landlock/fs.c:1745:61: internal compiler error: in count_type_elements, at expr.cc:7075
 1745 |                         .u.op = &(struct lsm_ioctlop_audit) {
      |                                                             ^

static HOST_WIDE_INT
count_type_elements (const_tree type, bool for_ctor_p)
{
  switch (TREE_CODE (type))
...
    case VOID_TYPE:
    default:
      gcc_unreachable ();
    }
}

However this is a redundant safety measure since randstruct uses the
__designated_initializer attribute both internally and within the
__randomized_layout attribute macro so that this would be enforced
by the compiler directly even when randstruct was not enabled (via
-Wdesignated-init).

A recent change in Landlock ended up tripping the same member counting
routine when using a full-struct copy initializer as part of an anonymous
initializer. This, however, is a false positive as the initializer is
copying between identical structs (and hence identical layouts). The
"path" member is "struct path", a randomized struct, and is being copied
to from another "struct path", the "f_path" member:

        landlock_log_denial(landlock_cred(file->f_cred), &(struct landlock_request) {
                .type = LANDLOCK_REQUEST_FS_ACCESS,
                .audit = {
                        .type = LSM_AUDIT_DATA_IOCTL_OP,
                        .u.op = &(struct lsm_ioctlop_audit) {
                                .path = file->f_path,
                                .cmd = cmd,
                        },
                },
	...

As can be seen with the coming randstruct KUnit test, there appears to
be no behavioral problems with this kind of initialization when the void
member is removed from the randstruct GCC plugin, so remove it.

Reported-by: "Dr. David Alan Gilbert" <linux@treblig.org>
Closes: https://lore.kernel.org/lkml/Z_PRaKx7q70MKgCA@gallifrey/
Reported-by: Mark Brown <broonie@kernel.org>
Closes: https://lore.kernel.org/lkml/20250407-kbuild-disable-gcc-plugins-v1-1-5d46ae583f5e@kernel.org/
Reported-by: WangYuli <wangyuli@uniontech.com>
Closes: https://lore.kernel.org/lkml/337D5D4887277B27+3c677db3-a8b9-47f0-93a4-7809355f1381@uniontech.com/
Fixes: 313dd1b629 ("gcc-plugins: Add the randstruct plugin")
Signed-off-by: Kees Cook <kees@kernel.org>
Stable-dep-of: f39f18f3c353 ("randstruct: gcc-plugin: Fix attribute addition")
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>
2025-10-16 12:15:30 +02:00
bengris32
c6aa1292ca Merge branch 'linux-4.19.y-cip' of https://git.kernel.org/pub/scm/linux/kernel/git/cip/linux-cip into android-4.19.y-mediatek
* 'linux-4.19.y-cip' of https://git.kernel.org/pub/scm/linux/kernel/git/cip/linux-cip:
  CIP: Bump version suffix to -cip124 after merge from cip/linux-4.19.y-st tree
  Update localversion-st, tree is up-to-date with 5.4.298.
  f2fs: fix to do sanity check on ino and xnid
  squashfs: fix memory leak in squashfs_fill_super
  pNFS: Handle RPC size limit for layoutcommits
  wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
  usb: core: usb_submit_urb: downgrade type check
  udf: Verify partition map count
  f2fs: fix to avoid panic in f2fs_evict_inode
  usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
  Revert "drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS"
  net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions
  HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()
  HID: asus: fix UAF via HID_CLAIMED_INPUT validation
  efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
  sctp: initialize more fields in sctp_v6_from_sk()
  net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts
  net/mlx5e: Set local Xoff after FW update
  net: dlink: fix multicast stats being counted incorrectly
  atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
  net/atm: remove the atmdev_ops {get, set}sockopt methods
  Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced
  powerpc/kvm: Fix ifdef to remove build warning
  net: ipv4: fix regression in local-broadcast routes
  vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put()
  scsi: core: sysfs: Correct sysfs attributes access rights
  ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
  alloc_fdtable(): change calling conventions.
  ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
  net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
  ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
  ALSA: usb-audio: Fix size validation in convert_chmap_v3()
  scsi: qla4xxx: Prevent a potential error pointer dereference
  usb: xhci: Fix slot_id resource race conflict
  nfs: fix UAF in direct writes
  NFS: Fix up commit deadlocks
  Bluetooth: fix use-after-free in device_for_each_child()
  selftests: forwarding: tc_actions.sh: add matchall mirror test
  codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
  sch_qfq: make qfq_qlen_notify() idempotent
  sch_hfsc: make hfsc_qlen_notify() idempotent
  sch_drr: make drr_qlen_notify() idempotent
  btrfs: populate otime when logging an inode item
  media: venus: hfi: explicitly release IRQ during teardown
  f2fs: fix to avoid out-of-boundary access in dnode page
  media: venus: protect against spurious interrupts during probe
  media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
  drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
  media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
  media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
  ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
  usb: musb: omap2430: fix device leak at unbind
  NFS: Fix the setting of capabilities when automounting a new filesystem
  NFS: Fix up handling of outstanding layoutcommit in nfs_update_inode()
  NFSv4: Fix nfs4_bitmap_copy_adjust()
  usb: typec: fusb302: cache PD RX state
  cdc-acm: fix race between initial clearing halt and open
  USB: cdc-acm: do not log successful probe on later errors
  nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
  tracing: Add down_write(trace_event_sem) when adding trace event
  usb: hub: Don't try to recover devices lost during warm reset.
  usb: hub: avoid warm port reset during USB3 disconnect
  x86/mce/amd: Add default names for MCA banks and blocks
  iio: hid-sensor-prox: Fix incorrect OFFSET calculation
  mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n
  mm/zsmalloc.c: convert to use kmem_cache_zalloc in cache_alloc_zspage()
  net: usbnet: Fix the wrong netif_carrier_on() call
  net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
  PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
  ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value
  kbuild: Add KBUILD_CPPFLAGS to as-option invocation
  kbuild: add $(CLANG_FLAGS) to KBUILD_CPPFLAGS
  kbuild: Add CLANG_FLAGS to as-instr
  mips: Include KBUILD_CPPFLAGS in CHECKFLAGS invocation
  kbuild: Update assembler calls to use proper flags and language target
  ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
  usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
  USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
  usb: storage: realtek_cr: Use correct byte order for bcs->Residue
  USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
  usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
  iio: proximity: isl29501: fix buffered read on big-endian systems
  ftrace: Also allocate and copy hash for reading of filter files
  fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
  fs/buffer: fix use-after-free when call bh_read() helper
  drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
  media: venus: Add a check for packet size after reading from shared memory
  media: ov2659: Fix memory leaks in ov2659_probe()
  media: usbtv: Lock resolution while streaming
  media: gspca: Add bounds checking to firmware parser
  jbd2: prevent softlockup in jbd2_log_do_checkpoint()
  PCI: endpoint: Fix configfs group removal on driver teardown
  PCI: endpoint: Fix configfs group list head handling
  mtd: rawnand: fsmc: Add missing check after DMA map
  wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
  zynq_fpga: use sgtable-based scatterlist wrappers
  ata: libata-scsi: Fix ata_to_sense_error() status handling
  ext4: fix reserved gdt blocks handling in fsmap
  ext4: fix fsmap end of range reporting with bigalloc
  ext4: check fast symlink for ea_inode correctly
  Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
  vt: defkeymap: Map keycodes above 127 to K_HOLE
  usb: gadget: udc: renesas_usb3: fix device leak at unbind
  usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
  m68k: Fix lost column on framebuffer debug console
  serial: 8250: fix panic due to PSLVERR
  media: uvcvideo: Do not mark valid metadata as invalid
  media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
  btrfs: fix log tree replay failure due to file with 0 links and extents
  thunderbolt: Fix copy+paste error in match_service_id()
  misc: rtsx: usb: Ensure mmc child device is active when card is present
  scsi: lpfc: Remove redundant assignment to avoid memory leak
  rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
  pNFS: Fix uninited ptr deref in block/scsi layout
  pNFS: Fix disk addr range check in block/scsi layout
  pNFS: Fix stripe mapping in block/scsi layout
  ipmi: Fix strcpy source and destination the same
  kconfig: lxdialog: fix 'space' to (de)select options
  kconfig: gconf: fix potential memory leak in renderer_edited()
  kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
  scsi: aacraid: Stop using PCI_IRQ_AFFINITY
  scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
  kconfig: nconf: Ensure null termination where strncpy is used
  kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
  PCI: pnv_php: Work around switches with broken presence detection
  media: uvcvideo: Fix bandwidth issue for Alcor camera
  media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
  media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
  media: usb: hdpvr: disable zero-length read messages
  media: tc358743: Increase FIFO trigger level to 374
  media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
  media: tc358743: Check I2C succeeded during probe
  pinctrl: stm32: Manage irq affinity settings
  scsi: mpt3sas: Correctly handle ATA device errors
  RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
  MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
  jfs: upper bound check of tree index in dbAllocAG
  jfs: Regular file corruption check
  jfs: truncate good inode pages when hard link is 0
  scsi: bfa: Double-free fix
  MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
  watchdog: dw_wdt: Fix default timeout
  fs/orangefs: use snprintf() instead of sprintf()
  scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
  ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
  vhost: fail early when __vhost_add_used() fails
  uapi: in6: restore visibility of most IPv6 socket options
  net: ncsi: Fix buffer overflow in fetching version id
  net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
  net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
  wifi: iwlegacy: Check rate_idx range after addition
  netmem: fix skb_frag_address_safe with unreadable skbs
  wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
  wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
  net: fec: allow disable coalescing
  (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
  s390/stp: Remove udelay from stp_sync_clock()
  wifi: iwlwifi: mvm: fix scan request validation
  net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
  net: ipv4: fix incorrect MTU in broadcast routes
  wifi: cfg80211: Fix interface type validation
  et131x: Add missing check after DMA map
  be2net: Use correct byte order and format string for TCP seq and ack_seq
  s390/time: Use monotonic clock in get_cycles()
  wifi: cfg80211: reject HTC bit for management frames
  ktest.pl: Prevent recursion of default variable options
  ASoC: codecs: rt5640: Retry DEVICE_ID verification
  ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
  ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
  platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
  pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
  ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
  ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
  mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
  ACPI: processor: fix acpi_object initialization
  PM: sleep: console: Fix the black screen issue
  thermal: sysfs: Return ENODATA instead of EAGAIN for reads
  selftests: tracing: Use mutex_unlock for testing glob filter
  ARM: tegra: Use I/O memcpy to write to IRAM
  gpio: tps65912: check the return value of regmap_update_bits()
  ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
  cpufreq: Exit governor when failed to start old governor
  usb: xhci: Avoid showing errors during surprise removal
  usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
  usb: xhci: Avoid showing warnings for dying controller
  selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
  usb: xhci: print xhci->xhc_state when queue_command failed
  securityfs: don't pin dentries twice, once is enough...
  hfs: fix not erasing deleted b-tree node issue
  drbd: add missing kref_get in handle_write_conflicts
  arm64: Handle KCOV __init vs inline mismatches
  hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
  hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
  hfs: fix slab-out-of-bounds in hfs_bnode_read()
  sctp: linearize cloned gso packets in sctp_rcv
  netfilter: ctnetlink: fix refcount leak on table dump
  udp: also consider secpath when evaluating ipsec use for checksumming
  fs: Prevent file descriptor table allocations exceeding INT_MAX
  sunvdc: Balance device refcount in vdc_port_mpgroup_check
  NFSD: detect mismatch of file handle and delegation stateid in OPEN op
  net: dpaa: fix device leak when querying time stamp info
  net: gianfar: fix device leak when querying time stamp info
  netlink: avoid infinite retry looping in netlink_unicast()
  ALSA: usb-audio: Validate UAC3 cluster segment descriptors
  ALSA: usb-audio: Validate UAC3 power domain descriptors, too
  usb: gadget : fix use-after-free in composite_dev_cleanup()
  MIPS: mm: tlb-r4k: Uniquify TLB entries on init
  USB: serial: option: add Foxconn T99W709
  vsock: Do not allow binding to VMADDR_PORT_ANY
  net/packet: fix a race in packet_set_ring() and packet_notifier()
  perf/core: Prevent VMA split of buffer mappings
  perf/core: Exit early on perf_mmap() fail
  perf/core: Don't leak AUX buffer refcount on allocation failure
  pptp: fix pptp_xmit() error path
  smb: client: let recv_done() cleanup before notifying the callers.
  benet: fix BUG when creating VFs
  ipv6: reject malicious packets in ipv6_gso_segment()
  pptp: ensure minimal skb length in pptp_xmit()
  netpoll: prevent hanging NAPI when netcons gets enabled
  NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
  pci/hotplug/pnv-php: Wrap warnings in macro
  pci/hotplug/pnv-php: Improve error msg on power state change failure
  usb: chipidea: udc: fix sleeping function called from invalid context
  f2fs: fix to avoid out-of-boundary access in devs.path
  f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
  rtc: pcf8563: fix incorrect maximum clock rate handling
  rtc: hym8563: fix incorrect maximum clock rate handling
  rtc: ds1307: fix incorrect maximum clock rate handling
  mtd: rawnand: atmel: set pmecc data setup time
  mtd: rawnand: atmel: Fix dma_mapping_error() address
  jfs: fix metapage reference count leak in dbAllocCtl
  fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
  crypto: qat - fix seq_file position update in adf_ring_next()
  dmaengine: nbpfaxi: Add missing check after DMA map
  dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
  fs/orangefs: Allow 2 more characters in do_c_string()
  crypto: img-hash - Fix dma_unmap_sg() nents value
  scsi: isci: Fix dma_unmap_sg() nents value
  scsi: mvsas: Fix dma_unmap_sg() nents value
  scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
  perf tests bp_account: Fix leaked file descriptor
  crypto: ccp - Fix crash when rebind ccp device for ccp.ko
  pinctrl: sunxi: Fix memory leak on krealloc failure
  power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
  clk: davinci: Add NULL check in davinci_lpsc_clk_register()
  mtd: fix possible integer overflow in erase_xfer()
  crypto: marvell/cesa - Fix engine load inaccuracy
  PCI: rockchip-host: Fix "Unexpected Completion" log message
  vrf: Drop existing dst reference in vrf_ip6_input_dst
  netfilter: xt_nfacct: don't assume acct name is null-terminated
  can: kvaser_usb: Assign netdev.dev_port based on device channel index
  wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE
  Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
  mwl8k: Add missing check after DMA map
  wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
  net/sched: Restrict conditions for adding duplicating netems to qdisc tree
  arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
  netfilter: nf_tables: adjust lockdep assertions handling
  drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
  m68k: Don't unregister boot console needlessly
  tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
  iwlwifi: Add missing check for alloc_ordered_workqueue
  wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
  wifi: rtl818x: Kill URBs before clearing tx status queue
  caif: reduce stack size, again
  staging: nvec: Fix incorrect null termination of battery manufacturer
  samples: mei: Fix building on musl libc
  usb: early: xhci-dbc: Fix early_ioremap leak
  Revert "vmci: Prevent the dispatching of uninitialized payloads"
  pps: fix poll support
  vmci: Prevent the dispatching of uninitialized payloads
  staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
  ARM: dts: vfxxx: Correctly use two tuples for timer address
  ASoC: ops: dynamically allocate struct snd_ctl_elem_value
  hfsplus: remove mutex_lock check in hfsplus_free_extents
  ASoC: Intel: fix SND_SOC_SOF dependencies
  ethernet: intel: fix building with large NR_CPUS
  usb: phy: mxs: disconnect line when USB charger is attached
  usb: chipidea: udc: protect usb interrupt enable
  usb: chipidea: udc: add new API ci_hdrc_gadget_connect
  comedi: comedi_test: Fix possible deletion of uninitialized timers
  nilfs2: reject invalid file types when reading inodes
  i2c: qup: jump out of the loop in case of timeout
  net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
  net: appletalk: Fix use-after-free in AARP proxy probe
  net: appletalk: fix kerneldoc warnings
  RDMA/core: Rate limit GID cache warning messages
  usb: hub: fix detection of high tier USB3 devices behind suspended hubs
  net_sched: sch_sfq: reject invalid perturb period
  net_sched: sch_sfq: move the limit validation
  net_sched: sch_sfq: use a temporary work area for validating configuration
  net_sched: sch_sfq: don't allow 1 packet limit
  net_sched: sch_sfq: handle bigger packets
  net_sched: sch_sfq: annotate data-races around q->perturb_period
  power: supply: bq24190_charger: Fix runtime PM imbalance on error
  xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
  virtio-net: ensure the received length does not exceed allocated size
  usb: dwc3: qcom: Don't leave BCR asserted
  usb: musb: fix gadget state on disconnect
  net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
  net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
  Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
  Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
  Bluetooth: SMP: If an unallowed command is received consider it a failure
  Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
  usb: net: sierra: check for no status endpoint
  net/sched: sch_qfq: Fix race condition on qfq_aggregate
  net: emaclite: Fix missing pointer increment in aligned_read()
  comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
  comedi: Fix some signed shift left operations
  comedi: das6402: Fix bit shift out of bounds
  comedi: das16m1: Fix bit shift out of bounds
  comedi: aio_iiro_16: Fix bit shift out of bounds
  comedi: pcl812: Fix bit shift out of bounds
  iio: adc: max1363: Reorder mode_list[] entries
  iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
  soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
  soc: aspeed: lpc-snoop: Cleanup resources in stack-order
  mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
  memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
  isofs: Verify inode mode when loading from disk
  dmaengine: nbpfaxi: Fix memory corruption in probe()
  af_packet: fix soft lockup issue caused by tpacket_snd()
  af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
  phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
  HID: core: do not bypass hid_hw_raw_request
  HID: core: ensure __hid_request reserves the report ID as the first byte
  HID: core: ensure the allocated report buffer can contain the reserved report ID
  pch_uart: Fix dma_sync_sg_for_device() nents value
  Input: xpad - set correct controller type for Acer NGR200
  i2c: stm32: fix the device used for the DMA map
  usb: gadget: configfs: Fix OOB read on empty string write
  USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
  USB: serial: option: add Foxconn T99W640
  USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
  dma-mapping: add generic helpers for mapping sgtable objects
  usb: renesas_usbhs: Flush the notify_hotplug_work
  gpio: rcar: Use raw_spinlock to protect register access

Change-Id: Ia6b8b00918487999c648f298d3550afc7eaaae03
Signed-off-by: bengris32 <bengris32@protonmail.ch>
2025-10-12 13:39:56 +01:00
bengris32
0db149109a scripts: generate_initcall_order.pl: Error on invalid initcall name
Taken from upstream generate_initcall_order.pl

Give a proper error message if the initcall name is invalid,
much better than the somewhat confusing error messages seen
before:

Use of uninitialized value in concatenation (.) or string at ../scripts/generate_initcall_order.pl line 82.
Use of uninitialized value in concatenation (.) or string at ../scripts/generate_initcall_order.pl line 82.
../scripts/generate_initcall_order.pl: child 1438757 returned invalid data at ../scripts/generate_initcall_order.pl line 114, <$fh> line 2.

turns into:

../scripts/generate_initcall_order.pl: ERROR: invalid initcall name univ8250_console_init in object ./drivers/tty/serial/8250/8250_core.o at ../scripts/generate_initcall_order.pl line 61, <$fh> line 4.
../scripts/generate_initcall_order.pl: ERROR: invalid initcall name mboot_params_early_init in object ./drivers/misc/mediatek/aee/mrdump/mboot_params.o at ../scripts/generate_initcall_order.pl line 61, <$fh> line 4.

Change-Id: I184bc4ad5eeeb6add634a137ea00901a927b5991
Signed-off-by: bengris32 <bengris32@protonmail.ch>
2025-09-21 00:15:30 +01:00
Toke Høiland-Jørgensen
5ccc906068 UPSTREAM: bpf: Fix bpf_redirect_neigh helper api to support supplying nexthop
Based on the discussion in [0], update the bpf_redirect_neigh() helper to
accept an optional parameter specifying the nexthop information. This makes
it possible to combine bpf_fib_lookup() and bpf_redirect_neigh() without
incurring a duplicate FIB lookup - since the FIB lookup helper will return
the nexthop information even if no neighbour is present, this can simply
be passed on to bpf_redirect_neigh() if bpf_fib_lookup() returns
BPF_FIB_LKUP_RET_NO_NEIGH. Thus fix & extend it before helper API is frozen.

  [0] https://lore.kernel.org/bpf/393e17fc-d187-3a8d-2f0d-a627c7c63fca@iogearbox.net/

Change-Id: I2c24b13263ccc6452023c6f76e635ab2114ce142
Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Reviewed-by: David Ahern <dsahern@kernel.org>
Link: https://lore.kernel.org/bpf/160322915615.32199.1187570224032024535.stgit@toke.dk
2025-09-20 03:22:41 +01:00
Alan Maguire
af684854b7 UPSTREAM: bpf: Add bpf_snprintf_btf helper
A helper is added to support tracing kernel type information in BPF
using the BPF Type Format (BTF).  Its signature is

long bpf_snprintf_btf(char *str, u32 str_size, struct btf_ptr *ptr,
		      u32 btf_ptr_size, u64 flags);

struct btf_ptr * specifies

- a pointer to the data to be traced
- the BTF id of the type of data pointed to
- a flags field is provided for future use; these flags
  are not to be confused with the BTF_F_* flags
  below that control how the btf_ptr is displayed; the
  flags member of the struct btf_ptr may be used to
  disambiguate types in kernel versus module BTF, etc;
  the main distinction is the flags relate to the type
  and information needed in identifying it; not how it
  is displayed.

For example a BPF program with a struct sk_buff *skb
could do the following:

	static struct btf_ptr b = { };

	b.ptr = skb;
	b.type_id = __builtin_btf_type_id(struct sk_buff, 1);
	bpf_snprintf_btf(str, sizeof(str), &b, sizeof(b), 0, 0);

Default output looks like this:

(struct sk_buff){
 .transport_header = (__u16)65535,
 .mac_header = (__u16)65535,
 .end = (sk_buff_data_t)192,
 .head = (unsigned char *)0x000000007524fd8b,
 .data = (unsigned char *)0x000000007524fd8b,
 .truesize = (unsigned int)768,
 .users = (refcount_t){
  .refs = (atomic_t){
   .counter = (int)1,
  },
 },
}

Flags modifying display are as follows:

- BTF_F_COMPACT:	no formatting around type information
- BTF_F_NONAME:		no struct/union member names/types
- BTF_F_PTR_RAW:	show raw (unobfuscated) pointer values;
			equivalent to %px.
- BTF_F_ZERO:		show zero-valued struct/union members;
			they are not displayed by default

Change-Id: I77f2c2a0d41aee2f4f10e3288a36de475fd2cb46
Signed-off-by: Alan Maguire <alan.maguire@oracle.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Link: https://lore.kernel.org/bpf/1601292670-1616-4-git-send-email-alan.maguire@oracle.com
2025-09-20 03:22:27 +01:00
Jiri Olsa
b1b48c9c9e UPSTREAM: bpf: Add d_path helper
Adding d_path helper function that returns full path for
given 'struct path' object, which needs to be the kernel
BTF 'path' object. The path is returned in buffer provided
'buf' of size 'sz' and is zero terminated.

  bpf_d_path(&file->f_path, buf, size);

The helper calls directly d_path function, so there's only
limited set of function it can be called from. Adding just
very modest set for the start.

Updating also bpf.h tools uapi header and adding 'path' to
bpf_helpers_doc.py script.

Change-Id: If390ec6189a537b730b9ae595d374cbfa83f6f5b
Signed-off-by: Jiri Olsa <jolsa@kernel.org>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Acked-by: Andrii Nakryiko <andriin@fb.com>
Acked-by: KP Singh <kpsingh@google.com>
Link: https://lore.kernel.org/bpf/20200825192124.710397-11-jolsa@kernel.org
2025-09-20 03:22:15 +01:00
Jakub Sitnicki
d0b3abb329 UPSTREAM: bpf: Introduce SK_LOOKUP program type with a dedicated attach point
Add a new program type BPF_PROG_TYPE_SK_LOOKUP with a dedicated attach type
BPF_SK_LOOKUP. The new program kind is to be invoked by the transport layer
when looking up a listening socket for a new connection request for
connection oriented protocols, or when looking up an unconnected socket for
a packet for connection-less protocols.

When called, SK_LOOKUP BPF program can select a socket that will receive
the packet. This serves as a mechanism to overcome the limits of what
bind() API allows to express. Two use-cases driving this work are:

 (1) steer packets destined to an IP range, on fixed port to a socket

     192.0.2.0/24, port 80 -> NGINX socket

 (2) steer packets destined to an IP address, on any port to a socket

     198.51.100.1, any port -> L7 proxy socket

In its run-time context program receives information about the packet that
triggered the socket lookup. Namely IP version, L4 protocol identifier, and
address 4-tuple. Context can be further extended to include ingress
interface identifier.

To select a socket BPF program fetches it from a map holding socket
references, like SOCKMAP or SOCKHASH, and calls bpf_sk_assign(ctx, sk, ...)
helper to record the selection. Transport layer then uses the selected
socket as a result of socket lookup.

In its basic form, SK_LOOKUP acts as a filter and hence must return either
SK_PASS or SK_DROP. If the program returns with SK_PASS, transport should
look for a socket to receive the packet, or use the one selected by the
program if available, while SK_DROP informs the transport layer that the
lookup should fail.

This patch only enables the user to attach an SK_LOOKUP program to a
network namespace. Subsequent patches hook it up to run on local delivery
path in ipv4 and ipv6 stacks.

Suggested-by: Marek Majkowski <marek@cloudflare.com>
Change-Id: I4474b8a8bfe16f90a0604d39de2c486809f2dfc5
Signed-off-by: Jakub Sitnicki <jakub@cloudflare.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Link: https://lore.kernel.org/bpf/20200717103536.397595-3-jakub@cloudflare.com
2025-09-20 03:21:49 +01:00
Jiri Olsa
6f7eed12cf UPSTREAM: bpf: Resolve BTF IDs in vmlinux image
Using BTF_ID_LIST macro to define lists for several helpers
using BTF arguments.

And running resolve_btfids on vmlinux elf object during linking,
so the .BTF_ids section gets the IDs resolved.

Change-Id: I4defbf7ee9cd47c47766a71a66820d24380e3061
Signed-off-by: Jiri Olsa <jolsa@kernel.org>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Tested-by: Andrii Nakryiko <andriin@fb.com>
Acked-by: Andrii Nakryiko <andriin@fb.com>
Link: https://lore.kernel.org/bpf/20200711215329.41165-5-jolsa@kernel.org
2025-09-20 03:21:47 +01:00
Song Liu
585c3265dc UPSTREAM: bpf: Introduce helper bpf_get_task_stack()
Introduce helper bpf_get_task_stack(), which dumps stack trace of given
task. This is different to bpf_get_stack(), which gets stack track of
current task. One potential use case of bpf_get_task_stack() is to call
it from bpf_iter__task and dump all /proc/<pid>/stack to a seq_file.

bpf_get_task_stack() uses stack_trace_save_tsk() instead of
get_perf_callchain() for kernel stack. The benefit of this choice is that
stack_trace_save_tsk() doesn't require changes in arch/. The downside of
using stack_trace_save_tsk() is that stack_trace_save_tsk() dumps the
stack trace to unsigned long array. For 32-bit systems, we need to
translate it to u64 array.

Change-Id: Ief4d6331116f2df922da24cd4cff87b023e861e7
Signed-off-by: Song Liu <songliubraving@fb.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Acked-by: Andrii Nakryiko <andriin@fb.com>
Link: https://lore.kernel.org/bpf/20200630062846.664389-3-songliubraving@fb.com
2025-09-20 03:21:46 +01:00
Yonghong Song
e89c278184 UPSTREAM: bpf: Add bpf_skc_to_udp6_sock() helper
The helper is used in tracing programs to cast a socket
pointer to a udp6_sock pointer.
The return value could be NULL if the casting is illegal.

Change-Id: Ic8ac98123cd4f949a0649f3723d3e0a9da071ae2
Signed-off-by: Yonghong Song <yhs@fb.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Acked-by: Martin KaFai Lau <kafai@fb.com>
Cc: Eric Dumazet <edumazet@google.com>
Link: https://lore.kernel.org/bpf/20200623230815.3988481-1-yhs@fb.com
2025-09-20 03:21:43 +01:00
Yonghong Song
82998aa67b UPSTREAM: bpf: Add bpf_skc_to_{tcp, tcp_timewait, tcp_request}_sock() helpers
Three more helpers are added to cast a sock_common pointer to
an tcp_sock, tcp_timewait_sock or a tcp_request_sock for
tracing programs.

Change-Id: Id0ca4c0315d17d9f672e5c4fd3a0712877b45d03
Signed-off-by: Yonghong Song <yhs@fb.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Acked-by: Martin KaFai Lau <kafai@fb.com>
Link: https://lore.kernel.org/bpf/20200623230811.3988277-1-yhs@fb.com
2025-09-20 03:21:43 +01:00
Yonghong Song
6cc292bbce UPSTREAM: bpf: Add bpf_skc_to_tcp6_sock() helper
The helper is used in tracing programs to cast a socket
pointer to a tcp6_sock pointer.
The return value could be NULL if the casting is illegal.

A new helper return type RET_PTR_TO_BTF_ID_OR_NULL is added
so the verifier is able to deduce proper return types for the helper.

Different from the previous BTF_ID based helpers,
the bpf_skc_to_tcp6_sock() argument can be several possible
btf_ids. More specifically, all possible socket data structures
with sock_common appearing in the first in the memory layout.
This patch only added socket types related to tcp and udp.

All possible argument btf_id and return value btf_id
for helper bpf_skc_to_tcp6_sock() are pre-calculcated and
cached. In the future, it is even possible to precompute
these btf_id's at kernel build time.

Change-Id: Ie8449335dbb1f9be85b2d3bcc2d6cfc8e53600cb
Signed-off-by: Yonghong Song <yhs@fb.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Acked-by: Andrii Nakryiko <andriin@fb.com>
Acked-by: Martin KaFai Lau <kafai@fb.com>
Link: https://lore.kernel.org/bpf/20200623230809.3988195-1-yhs@fb.com
2025-09-20 03:21:43 +01:00
Quentin Monnet
62aa34d6a9 UPSTREAM: bpf: Minor fixes to BPF helpers documentation
Minor improvements to the documentation for BPF helpers:

* Fix formatting for the description of "bpf_socket" for
  bpf_getsockopt() and bpf_setsockopt(), thus suppressing two warnings
  from rst2man about "Unexpected indentation".
* Fix formatting for return values for bpf_sk_assign() and seq_file
  helpers.
* Fix and harmonise formatting, in particular for function/struct names.
* Remove blank lines before "Return:" sections.
* Replace tabs found in the middle of text lines.
* Fix typos.
* Add a note to the footer (in Python script) about "bpftool feature
  probe", including for listing features available to unprivileged
  users, and add a reference to bpftool man page.

Thanks to Florian for reporting two typos (duplicated words).

Change-Id: I8df1710320d35531d4cca8d3d1a7bc3d788ee0a8
Signed-off-by: Quentin Monnet <quentin@isovalent.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Link: https://lore.kernel.org/bpf/20200511161536.29853-4-quentin@isovalent.com
2025-09-20 03:21:26 +01:00
Yonghong Song
e5f3003727 UPSTREAM: bpf: Add bpf_seq_printf and bpf_seq_write helpers
Two helpers bpf_seq_printf and bpf_seq_write, are added for
writing data to the seq_file buffer.

bpf_seq_printf supports common format string flag/width/type
fields so at least I can get identical results for
netlink and ipv6_route targets.

For bpf_seq_printf and bpf_seq_write, return value -EOVERFLOW
specifically indicates a write failure due to overflow, which
means the object will be repeated in the next bpf invocation
if object collection stays the same. Note that if the object
collection is changed, depending how collection traversal is
done, even if the object still in the collection, it may not
be visited.

For bpf_seq_printf, format %s, %p{i,I}{4,6} needs to
read kernel memory. Reading kernel memory may fail in
the following two cases:
  - invalid kernel address, or
  - valid kernel address but requiring a major fault
If reading kernel memory failed, the %s string will be
an empty string and %p{i,I}{4,6} will be all 0.
Not returning error to bpf program is consistent with
what bpf_trace_printk() does for now.

bpf_seq_printf may return -EBUSY meaning that internal percpu
buffer for memory copy of strings or other pointees is
not available. Bpf program can return 1 to indicate it
wants the same object to be repeated. Right now, this should not
happen on no-RT kernels since migrate_disable(), which guards
bpf prog call, calls preempt_disable().

Change-Id: If3f9578a12dd29a90e69a6daa23dd67841b7bf9a
Signed-off-by: Yonghong Song <yhs@fb.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Acked-by: Andrii Nakryiko <andriin@fb.com>
Link: https://lore.kernel.org/bpf/20200509175914.2476661-1-yhs@fb.com
2025-09-20 03:21:25 +01:00
Carlos Neira
ccdca6ebce UPSTREAM: bpf: Added new helper bpf_get_ns_current_pid_tgid
New bpf helper bpf_get_ns_current_pid_tgid,
This helper will return pid and tgid from current task
which namespace matches dev_t and inode number provided,
this will allows us to instrument a process inside a container.

Change-Id: I5787829c729f08c9c0b5901784799b2e673dca6d
Signed-off-by: Carlos Neira <cneirabustos@gmail.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Acked-by: Yonghong Song <yhs@fb.com>
Link: https://lore.kernel.org/bpf/20200304204157.58695-3-cneirabustos@gmail.com
2025-09-20 03:21:09 +01:00
Fangrui Song
d6537be1f1 BACKPORT: bpf: Support llvm-objcopy for vmlinux BTF
commit 90ceddcb495008ac8ba7a3dce297841efcd7d584 upstream.

Simplify gen_btf logic to make it work with llvm-objcopy. The existing
'file format' and 'architecture' parsing logic is brittle and does not
work with llvm-objcopy/llvm-objdump.

'file format' output of llvm-objdump>=11 will match GNU objdump, but
'architecture' (bfdarch) may not.

.BTF in .tmp_vmlinux.btf is non-SHF_ALLOC. Add the SHF_ALLOC flag
because it is part of vmlinux image used for introspection. C code
can reference the section via linker script defined __start_BTF and
__stop_BTF. This fixes a small problem that previous .BTF had the
SHF_WRITE flag (objcopy -I binary -O elf* synthesized .data).

Additionally, `objcopy -I binary` synthesized symbols
_binary__btf_vmlinux_bin_start and _binary__btf_vmlinux_bin_stop (not
used elsewhere) are replaced with more commonplace __start_BTF and
__stop_BTF.

Add 2>/dev/null because GNU objcopy (but not llvm-objcopy) warns
"empty loadable segment detected at vaddr=0xffffffff81000000, is this intentional?"

We use a dd command to change the e_type field in the ELF header from
ET_EXEC to ET_REL so that lld will accept .btf.vmlinux.bin.o.  Accepting
ET_EXEC as an input file is an extremely rare GNU ld feature that lld
does not intend to support, because this is error-prone.

The output section description .BTF in include/asm-generic/vmlinux.lds.h
avoids potential subtle orphan section placement issues and suppresses
--orphan-handling=warn warnings.

Fixes: df786c9b9476 ("bpf: Force .BTF section start to zero when dumping from vmlinux")
Fixes: cb0cc635c7a9 ("powerpc: Include .BTF section")
Reported-by: Nathan Chancellor <natechancellor@gmail.com>
Change-Id: I145b50cfe3e0e1e034fb750cf55642905382a06c
Signed-off-by: Fangrui Song <maskray@google.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Tested-by: Stanislav Fomichev <sdf@google.com>
Tested-by: Andrii Nakryiko <andriin@fb.com>
Reviewed-by: Stanislav Fomichev <sdf@google.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Acked-by: Andrii Nakryiko <andriin@fb.com>
Acked-by: Michael Ellerman <mpe@ellerman.id.au> (powerpc)
Link: https://github.com/ClangBuiltLinux/linux/issues/871
Link: https://lore.kernel.org/bpf/20200318222746.173648-1-maskray@google.com
Signed-off-by: Maria Teguiani <teguiani@google.com>
Tested-by: Matthias Maennich <maennich@google.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2025-09-20 03:20:04 +01:00
Andrii Nakryiko
e2ae973cf0 UPSTREAM: btf: rename /sys/kernel/btf/kernel into /sys/kernel/btf/vmlinux
Expose kernel's BTF under the name vmlinux to be more uniform with using
kernel module names as file names in the future.

Fixes: 341dfcf8d78e ("btf: expose BTF info through sysfs")
Suggested-by: Daniel Borkmann <daniel@iogearbox.net>
Change-Id: I0c478e34bd67044a37b166b60c1de07025c3ec90
Signed-off-by: Andrii Nakryiko <andriin@fb.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
2025-09-20 03:19:57 +01:00
Andrii Nakryiko
8ec3715f22 BACKPORT: btf: expose BTF info through sysfs
Make .BTF section allocated and expose its contents through sysfs.

/sys/kernel/btf directory is created to contain all the BTFs present
inside kernel. Currently there is only kernel's main BTF, represented as
/sys/kernel/btf/kernel file. Once kernel modules' BTFs are supported,
each module will expose its BTF as /sys/kernel/btf/<module-name> file.

Current approach relies on a few pieces coming together:
1. pahole is used to take almost final vmlinux image (modulo .BTF and
   kallsyms) and generate .BTF section by converting DWARF info into
   BTF. This section is not allocated and not mapped to any segment,
   though, so is not yet accessible from inside kernel at runtime.
2. objcopy dumps .BTF contents into binary file and subsequently
   convert binary file into linkable object file with automatically
   generated symbols _binary__btf_kernel_bin_start and
   _binary__btf_kernel_bin_end, pointing to start and end, respectively,
   of BTF raw data.
3. final vmlinux image is generated by linking this object file (and
   kallsyms, if necessary). sysfs_btf.c then creates
   /sys/kernel/btf/kernel file and exposes embedded BTF contents through
   it. This allows, e.g., libbpf and bpftool access BTF info at
   well-known location, without resorting to searching for vmlinux image
   on disk (location of which is not standardized and vmlinux image
   might not be even available in some scenarios, e.g., inside qemu
   during testing).

Alternative approach using .incbin assembler directive to embed BTF
contents directly was attempted but didn't work, because sysfs_proc.o is
not re-compiled during link-vmlinux.sh stage. This is required, though,
to update embedded BTF data (initially empty data is embedded, then
pahole generates BTF info and we need to regenerate sysfs_btf.o with
updated contents, but it's too late at that point).

If BTF couldn't be generated due to missing or too old pahole,
sysfs_btf.c handles that gracefully by detecting that
_binary__btf_kernel_bin_start (weak symbol) is 0 and not creating
/sys/kernel/btf at all.

v2->v3:
- added Documentation/ABI/testing/sysfs-kernel-btf (Greg K-H);
- created proper kobject (btf_kobj) for btf directory (Greg K-H);
- undo v2 change of reusing vmlinux, as it causes extra kallsyms pass
  due to initially missing  __binary__btf_kernel_bin_{start/end} symbols;

v1->v2:
- allow kallsyms stage to re-use vmlinux generated by gen_btf();

Reviewed-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Change-Id: Ife57356dd14b9ae0d2e3801eea7c602c6245952f
Signed-off-by: Andrii Nakryiko <andriin@fb.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
2025-09-20 03:19:57 +01:00
Andrii Nakryiko
edf6c407d0 UPSTREAM: kbuild: handle old pahole more gracefully when generating BTF
When CONFIG_DEBUG_INFO_BTF is enabled but available version of pahole is too
old to support BTF generation, build script is supposed to emit warning and
proceed with the build. Due to using exit instead of return from BASH function,
existing handling code prematurely exits exit code 0, not completing some of
the build steps. This patch fixes issue by correctly returning just from
gen_btf() function only.

Fixes: e83b9f55448a ("kbuild: add ability to generate BTF type info for vmlinux")
Cc: Masahiro Yamada <yamada.masahiro@socionext.com>
Cc: Arnaldo Carvalho de Melo <acme@redhat.com>
Cc: Daniel Borkmann <daniel@iogearbox.net>
Cc: Alexei Starovoitov <ast@fb.com>
Cc: Yonghong Song <yhs@fb.com>
Cc: Martin KaFai Lau <kafai@fb.com>
Change-Id: If817e5a03a739213cecde92b827550b1de86d296
Signed-off-by: Andrii Nakryiko <andriin@fb.com>
Acked-by: Song Liu <songliubraving@fb.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
2025-09-20 03:19:56 +01:00
Andrii Nakryiko
322bb25969 UPSTREAM: kbuild: tolerate missing pahole when generating BTF
When BTF generation is enabled through CONFIG_DEBUG_INFO_BTF,
scripts/link-vmlinux.sh detects if pahole version is too old and
gracefully continues build process, skipping BTF generation build step.
But if pahole is not available, build will still fail. This patch adds
check for whether pahole exists at all and bails out gracefully, if not.

Cc: Alexei Starovoitov <ast@fb.com>
Reported-by: Yonghong Song <yhs@fb.com>
Fixes: e83b9f55448a ("kbuild: add ability to generate BTF type info for vmlinux")
Change-Id: I89e477f03aba8e16789b2a330469b2ac562df4d5
Signed-off-by: Andrii Nakryiko <andriin@fb.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
2025-09-20 03:19:56 +01:00
Andrii Nakryiko
5efa2595cb BACKPORT: kbuild: add ability to generate BTF type info for vmlinux
This patch adds new config option to trigger generation of BTF type
information from DWARF debuginfo for vmlinux and kernel modules through
pahole, which in turn relies on libbpf for btf_dedup() algorithm.

The intent is to record compact type information of all types used
inside kernel, including all the structs/unions/typedefs/etc. This
enables BPF's compile-once-run-everywhere ([0]) approach, in which
tracing programs that are inspecting kernel's internal data (e.g.,
struct task_struct) can be compiled on a system running some kernel
version, but would be possible to run on other kernel versions (and
configurations) without recompilation, even if the layout of structs
changed and/or some of the fields were added, removed, or renamed.

This is only possible if BPF loader can get kernel type info to adjust
all the offsets correctly. This patch is a first time in this direction,
making sure that BTF type info is part of Linux kernel image in
non-loadable ELF section.

BTF deduplication ([1]) algorithm typically provides 100x savings
compared to DWARF data, so resulting .BTF section is not big as is
typically about 2MB in size.

[0] http://vger.kernel.org/lpc-bpf2018.html#session-2
[1] https://facebookmicrosites.github.io/bpf/blog/2018/11/14/btf-enhancement.html

Cc: Masahiro Yamada <yamada.masahiro@socionext.com>
Cc: Arnaldo Carvalho de Melo <acme@redhat.com>
Cc: Daniel Borkmann <daniel@iogearbox.net>
Cc: Alexei Starovoitov <ast@fb.com>
Cc: Yonghong Song <yhs@fb.com>
Cc: Martin KaFai Lau <kafai@fb.com>
Change-Id: Id935f6e3ac658d9a92d55acd39e8287c644c941d
Signed-off-by: Andrii Nakryiko <andriin@fb.com>
Acked-by: David S. Miller <davem@davemloft.net>
Acked-by: Alexei Starovoitov <ast@kernel.org>
Acked-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
2025-09-20 03:19:56 +01:00
bengris32
38aec899a8 Revert "[ALPS04983389] mm: enable speculative page faults"
This reverts commit b7dc309446.

Change-Id: I8c160c3246fa3585bdf6af5f689196e2c8b74e6f
Signed-off-by: bengris32 <bengris32@protonmail.ch>
2025-09-20 01:31:36 +01:00
Nathan Chancellor
5b754bde26 kbuild: Add KBUILD_CPPFLAGS to as-option invocation
commit 43fc0a99906e04792786edf8534d8d58d1e9de0c upstream.

After commit feb843a469fb ("kbuild: add $(CLANG_FLAGS) to
KBUILD_CPPFLAGS"), there is an error while building certain PowerPC
assembly files with clang:

  arch/powerpc/lib/copypage_power7.S: Assembler messages:
  arch/powerpc/lib/copypage_power7.S:34: Error: junk at end of line: `0b01000'
  arch/powerpc/lib/copypage_power7.S:35: Error: junk at end of line: `0b01010'
  arch/powerpc/lib/copypage_power7.S:37: Error: junk at end of line: `0b01000'
  arch/powerpc/lib/copypage_power7.S:38: Error: junk at end of line: `0b01010'
  arch/powerpc/lib/copypage_power7.S:40: Error: junk at end of line: `0b01010'
  clang: error: assembler command failed with exit code 1 (use -v to see invocation)

as-option only uses KBUILD_AFLAGS, so after removing CLANG_FLAGS from
KBUILD_AFLAGS, there is no more '--target=' or '--prefix=' flags. As a
result of those missing flags, the host target
will be tested during as-option calls and likely fail, meaning necessary
flags may not get added when building assembly files, resulting in
errors like seen above.

Add KBUILD_CPPFLAGS to as-option invocations to clear up the errors.
This should have been done in commit d5c8d6e0fa61 ("kbuild: Update
assembler calls to use proper flags and language target"), which
switched from using the assembler target to the assembler-with-cpp
target, so flags that affect preprocessing are passed along in all
relevant tests. as-option now mirrors cc-option.

Fixes: feb843a469fb ("kbuild: add $(CLANG_FLAGS) to KBUILD_CPPFLAGS")
Reported-by: Linux Kernel Functional Testing <lkft@linaro.org>
Closes: https://lore.kernel.org/CA+G9fYs=koW9WardsTtora+nMgLR3raHz-LSLr58tgX4T5Mxag@mail.gmail.com/
Signed-off-by: Nathan Chancellor <nathan@kernel.org>
Tested-by: Naresh Kamboju <naresh.kamboju@linaro.org>
Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Signed-off-by: Nathan Chancellor <nathan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>
2025-09-16 13:55:19 +02:00
Nathan Chancellor
310cec5e18 kbuild: Add CLANG_FLAGS to as-instr
commit cff6e7f50bd315e5b39c4e46c704ac587ceb965f upstream.

A future change will move CLANG_FLAGS from KBUILD_{A,C}FLAGS to
KBUILD_CPPFLAGS so that '--target' is available while preprocessing.
When that occurs, the following errors appear multiple times when
building ARCH=powerpc powernv_defconfig:

  ld.lld: error: vmlinux.a(arch/powerpc/kernel/head_64.o):(.text+0x12d4): relocation R_PPC64_ADDR16_HI out of range: -4611686018409717520 is not in [-2147483648, 2147483647]; references '__start___soft_mask_table'
  ld.lld: error: vmlinux.a(arch/powerpc/kernel/head_64.o):(.text+0x12e8): relocation R_PPC64_ADDR16_HI out of range: -4611686018409717392 is not in [-2147483648, 2147483647]; references '__stop___soft_mask_table'

Diffing the .o.cmd files reveals that -DHAVE_AS_ATHIGH=1 is not present
anymore, because as-instr only uses KBUILD_AFLAGS, which will no longer
contain '--target'.

Mirror Kconfig's as-instr and add CLANG_FLAGS explicitly to the
invocation to ensure the target information is always present.

Signed-off-by: Nathan Chancellor <nathan@kernel.org>
Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Signed-off-by: Nathan Chancellor <nathan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>
2025-09-16 13:55:19 +02:00
Nick Desaulniers
2178c7f3d7 kbuild: Update assembler calls to use proper flags and language target
commit d5c8d6e0fa61401a729e9eb6a9c7077b2d3aebb0 upstream.

as-instr uses KBUILD_AFLAGS, but as-option uses KBUILD_CFLAGS. This can
cause as-option to fail unexpectedly when CONFIG_WERROR is set, because
clang will emit -Werror,-Wunused-command-line-argument for various -m
and -f flags in KBUILD_CFLAGS for assembler sources.

Callers of as-option and as-instr should be adding flags to
KBUILD_AFLAGS / aflags-y, not KBUILD_CFLAGS / cflags-y. Use
KBUILD_AFLAGS in all macros to clear up the initial problem.

Unfortunately, -Wunused-command-line-argument can still be triggered
with clang by the presence of warning flags or macro definitions because
'-x assembler' is used, instead of '-x assembler-with-cpp', which will
consume these flags. Switch to '-x assembler-with-cpp' in places where
'-x assembler' is used, as the compiler is always used as the driver for
out of line assembler sources in the kernel.

Finally, add -Werror to these macros so that they behave consistently
whether or not CONFIG_WERROR is set.

[nathan: Reworded and expanded on problems in commit message
         Use '-x assembler-with-cpp' in a couple more places]

Link: https://github.com/ClangBuiltLinux/linux/issues/1699
Suggested-by: Masahiro Yamada <masahiroy@kernel.org>
Signed-off-by: Nick Desaulniers <ndesaulniers@google.com>
Signed-off-by: Nathan Chancellor <nathan@kernel.org>
Tested-by: Linux Kernel Functional Testing <lkft@linaro.org>
Tested-by: Anders Roxell <anders.roxell@linaro.org>
Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Signed-off-by: Nathan Chancellor <nathan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>
2025-09-16 13:55:19 +02:00
Yann E. MORIN
7fc5ac460c kconfig: lxdialog: fix 'space' to (de)select options
[ Upstream commit 694174f94ebeeb5ec5cc0e9de9b40c82057e1d95 ]

In case a menu has comment without letters/numbers (eg. characters
matching the regexp '^[^[:alpha:][:digit:]]+$', for example - or *),
hitting space will cycle through those comments, rather than
selecting/deselecting the currently-highlighted option.

This is the behaviour of hitting any letter/digit: jump to the next
option which prompt starts with that letter. The only letters that
do not behave as such are 'y' 'm' and 'n'. Prompts that start with
one of those three letters are instead matched on the first letter
that is not 'y', 'm' or 'n'.

Fix that by treating 'space' as we treat y/m/n, ie. as an action key,
not as shortcut to jump to  prompt.

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Cherniaev Andrei <dungeonlords789@naver.com>
[masahiro: took from Buildroot, adjusted the commit subject]
Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>
2025-09-16 13:55:17 +02:00
Masahiro Yamada
8d42918ca2 kconfig: gconf: fix potential memory leak in renderer_edited()
[ Upstream commit f72ed4c6a375e52a3f4b75615e4a89d29d8acea7 ]

If gtk_tree_model_get_iter() fails, gtk_tree_path_free() is not called.

Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Acked-by: Randy Dunlap <rdunlap@infradead.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>
2025-09-16 13:55:17 +02:00
Masahiro Yamada
e6bb064b11 kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
[ Upstream commit cae9cdbcd9af044810bcceeb43a87accca47c71d ]

The on_treeview2_cursor_changed() handler is connected to both the left
and right tree views, but it hardcodes model2 (the GtkTreeModel of the
right tree view). This is incorrect. Get the associated model from the
view.

Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>
2025-09-16 13:55:17 +02:00
Shankari Anand
49a48e85bc kconfig: nconf: Ensure null termination where strncpy is used
[ Upstream commit f468992936894c9ce3b1659cf38c230d33b77a16 ]

strncpy() does not guarantee null-termination if the source string is
longer than the destination buffer.

Ensure the buffer is explicitly null-terminated to prevent potential
string overflows or undefined behavior.

Signed-off-by: Shankari Anand <shankari.ak0208@gmail.com>
Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Acked-by: Randy Dunlap <rdunlap@infradead.org>
Tested-by: Randy Dunlap <rdunlap@infradead.org>
Tested-by: Nicolas Schier <n.schier@avm.de>
Acked-by: Nicolas Schier <n.schier@avm.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>
2025-09-16 13:55:17 +02:00
Suchit Karunakaran
b56bd393df kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
[ Upstream commit 5ac726653a1029a2eccba93bbe59e01fc9725828 ]

strcpy() performs no bounds checking and can lead to buffer overflows if
the input string exceeds the destination buffer size. This patch replaces
it with strncpy(), and null terminates the input string.

Signed-off-by: Suchit Karunakaran <suchitkarunakaran@gmail.com>
Reviewed-by: Nicolas Schier <nicolas.schier@linux.dev>
Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>
2025-09-16 13:55:17 +02:00
bengris32
3b5670d492 Merge branch 'linux-4.19.y-cip' of https://git.kernel.org/pub/scm/linux/kernel/git/cip/linux-cip into lineage-22.2
* 'linux-4.19.y-cip' of https://git.kernel.org/pub/scm/linux/kernel/git/cip/linux-cip:
  CIP: Bump version suffix to -cip122 after merge from cip/linux-4.19.y-st tree
  Update localversion-st, tree is up-to-date with 5.4.295.
  ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms
  ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
  ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board
  ARM: dts: am335x-bone-common: get rid of phy_id property
  mtd: nand: sunxi: Add randomizer configuration before randomizer enable
  mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk
  sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
  bridge: netfilter: Fix forwarding of fragmented packets
  vxlan: Annotate FDB data races
  hwmon: (gpio-fan) Add missing mutex locks
  nfs: handle failure of nfs_get_lock_context in unlock path
  sch_htb: make htb_deactivate() idempotent
  scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops
  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
  perf: Fix sample vs do_exit()
  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
  mm/huge_memory: fix dereferencing invalid pmd migration entry
  posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
  net: atm: fix /proc/net/atm/lec handling
  net: atm: add lec_mutex
  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
  tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
  atm: atmtcp: Free invalid length skb in atmtcp_c_send().
  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
  wifi: carl9170: do not ping device which has failed to load firmware
  drm/nouveau/bl: increase buffer size to avoid truncate warning
  ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
  ALSA: hda/intel: Add Thinkpad E15 to PM deny list
  Input: sparcspkr - avoid unannotated fall-through
  HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
  atm: Revert atm_account_tx() if copy_from_iter_full() fails.
  selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
  scsi: s390: zfcp: Ensure synchronous unit_add
  jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
  jffs2: check that raw node were preallocated before writing summary
  drivers/rapidio/rio_cm.c: prevent possible heap overwrite
  Revert "x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2" on v6.6 and older
  powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery
  platform/x86: dell_rbu: Stop overwriting data buffer
  tee: Prevent size calculation wraparound on 32-bit kernels
  ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY
  bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
  watchdog: da9052_wdt: respect TWDMIN
  i40e: fix MMIO write access to an invalid page in i40e_clear_hw
  sock: Correct error checking condition for (assign|release)_proto_idx()
  vxlan: Do not treat dst cache initialization errors as fatal
  clk: rockchip: rk3036: mark ddrphy as critical
  wifi: mac80211: do not offer a mesh path if forwarding is disabled
  net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
  pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
  pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction()
  pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction()
  pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name()
  ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT
  tcp: always seek for minimal rtt in tcp_rcv_rtt_update()
  net: dlink: add synchronization for stats update
  sctp: Do not wake readers in __sctp_write_space()
  emulex/benet: correct command version selection in be_cmd_get_stats()
  i2c: designware: Invoke runtime suspend on quick slave re-registration
  net: macb: Check return value of dma_set_mask_and_coherent()
  cpufreq: Force sync policy boost with global boost on sysfs update
  nios2: force update_mmu_cache on spurious tlb-permission--related pagefaults
  media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode()
  media: tc358743: ignore video while HPD is low
  drm/amdkfd: Set SDMA_RLCx_IB_CNTL/SWITCH_INSIDE_IB
  jfs: Fix null-ptr-deref in jfs_ioc_trim
  drm/amdgpu/gfx9: fix CSIB handling
  drm/amdgpu/gfx8: fix CSIB handling
  jfs: fix array-index-out-of-bounds read in add_missing_indices
  drm/amdgpu/gfx7: fix CSIB handling
  drm/amd/display: Add NULL pointer checks in dm_force_atomic_commit()
  media: uapi: v4l: Fix V4L2_TYPE_IS_OUTPUT condition
  sunrpc: update nextcheck time when adding new cache entries
  drm/amdgpu/gfx6: fix CSIB handling
  ACPI: battery: negate current when discharging
  power: supply: bq27xxx: Retrieve again when busy
  ACPICA: fix acpi parse and parseext cache leaks
  ACPICA: Avoid sequence overread in call to strncmp()
  ACPICA: fix acpi operand cache leak in dswstate.c
  PCI: Fix lock symmetry in pci_slot_unlock()
  regulator: max14577: Add error check for max14577_read_reg()
  staging: iio: ad5933: Correct settling cycles encoding per datasheet
  net: ch9200: fix uninitialised access during mii_nway_restart
  ftrace: Fix UAF when lookup kallsym after ftrace disabled
  dm-mirror: fix a tiny race condition
  mm: fix ratelimit_pages update error in dirty_ratio_handler()
  ipc: fix to protect IPCS lookups using RCU
  parisc: fix building with gcc-15
  vgacon: Add check for vc_origin address range in vgacon_scroll()
  NFC: nci: uart: Set tty->disc_data only in success path
  f2fs: prevent kernel warning due to negative i_nlink from corrupted image
  Input: ims-pcu - check record size in ims_pcu_flash_firmware()
  ext4: fix calculation of credits for extent tree modification
  ext4: inline: fix len overflow in ext4_prepare_inline_data
  ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
  media: v4l2-dev: fix error handling in __video_register_device()
  media: gspca: Add error handling for stv06xx_read_sensor()
  wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723
  nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
  wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
  gfs2: move msleep to sleepable context
  configfs: Do not override creating attribute file failure in populate_attrs()
  calipso: unlock rcu before returning -EAFNOSUPPORT
  usb: Flush altsetting 0 endpoints before reinitializating them after reset.
  fs/filesystems: Fix potential unsigned integer underflow in fs_name()
  net/mdiobus: Fix potential out-of-bounds read/write access
  MIPS: Move '-Wa,-msoft-float' check from as-option to cc-option
  x86/boot/compressed: prefer cc-option for CFLAGS additions
  net: mdio: C22 is now optional, EOPNOTSUPP if not provided
  i40e: retry VFLR handling if there is ongoing VF reset
  i40e: return false from i40e_reset_vf if reset is in progress
  net_sched: sch_sfq: fix a potential crash on gso_skb handling
  scsi: iscsi: Fix incorrect error path labels for flashnode operations
  NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes
  NFSD: Fix ia_size underflow
  Input: synaptics-rmi - fix crash with unsupported versions of F34
  Input: synaptics-rmi4 - convert to use sysfs_emit() APIs
  do_change_type(): refuse to operate on unmounted/not ours mounts
  net/mlx4_en: Prevent potential integer overflow calculating Hz
  rtc: Fix offset calculation for .start_secs < 0
  rtc: sh: assign correct interrupts with DT
  perf tests switch-tracking: Fix timestamp comparison
  mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE
  mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove()
  rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send()
  perf ui browser hists: Set actions->thread before calling do_zoom_thread()
  fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
  soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()
  soc: aspeed: lpc: Fix impossible judgment condition
  arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou
  ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device
  bus: fsl-mc: fix double-free on mc_dev
  nilfs2: do not propagate ENOENT error from nilfs_btree_propagate()
  nilfs2: add pointer check for nilfs_direct_propagate()
  Squashfs: check return result of sb_min_blocksize
  ARM: dts: at91: at91sam9263: fix NAND chip selects
  ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select
  f2fs: fix to correct check conditions in f2fs_cross_rename
  f2fs: use d_inode(dentry) cleanup dentry->d_inode
  calipso: Don't call calipso functions for AF_INET sk.
  net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy
  wifi: ath9k_htc: Abort software beacon handling if disabled
  bpf: Fix WARN() in get_bpf_raw_tp_regs
  pinctrl: at91: Fix possible out-of-boundary access
  net: ncsi: Fix GCPS 64-bit member variables
  f2fs: fix to do sanity check on sbi->total_valid_block_count
  drm/tegra: rgb: Fix the unbound reference count
  drm: rcar-du: Fix memory leak in rcar_du_vsps_init()
  selftests/seccomp: fix syscall_restart test for arm compat
  firmware: psci: Fix refcount leak in psci_dt_init
  m68k: mac: Fix macintosh_config for Mac II
  drm/vmwgfx: Add seqno waiter for sync_files
  ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions"
  x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges()
  crypto: marvell/cesa - Avoid empty transfer descriptor
  crypto: marvell/cesa - Handle zero-length skcipher requests
  x86/cpu: Sanitize CPUID(0x80000000) output
  perf/core: Fix broken throttling when max_samples_per_tick=1
  gfs2: gfs2_create_inode error handling fix
  netfilter: nft_socket: fix sk refcount leaks
  thunderbolt: Do not double dequeue a configuration request
  usb: usbtmc: Fix timeout value in get_stb
  usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device
  usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE
  pinctrl: armada-37xx: set GPIO output value before setting direction
  pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31
  tracing: Fix compilation warning on arm32
  platform/x86: thinkpad_acpi: Ignore battery threshold change event notification
  platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys
  spi: spi-sun4i: fix early activation
  um: let 'make clean' properly clean underlying SUBARCH as well
  platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS
  nfs: don't share pNFS DS connections between net namespaces
  HID: quirks: Add ADATA XPG alpha wireless mouse support
  coredump: fix error handling for replace_fd()
  smb: client: Reset all search buffer pointers when releasing buffer
  smb: client: Fix use-after-free in cifs_fill_dirent
  drm/i915/gvt: fix unterminated-string-initialization warning
  netfilter: nf_tables: do not defer rule destruction via call_rcu
  netfilter: nf_tables: wait for rcu grace period on net_device removal
  netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
  mm/page_alloc.c: avoid infinite retries caused by cpuset race
  llc: fix data loss when reading from a socket in llc_ui_recvmsg()
  ALSA: pcm: Fix race of buffer access at PCM OSS layer
  can: bcm: add missing rcu read protection for procfs content
  can: bcm: add locking for bcm_op runtime updates
  crypto: algif_hash - fix double free in hash_accept
  net: dwmac-sun8i: Use parsed internal PHY address instead of 1
  __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
  xenbus: Allow PVH dom0 a non-local xenstore
  btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref
  ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013
  pinctrl: meson: define the pull up/down resistor value as 60 kOhm
  drm: Add valid clones check
  regulator: ad5398: Add device tree support
  bpftool: Fix readlink usage in get_fd_type
  HID: usbkbd: Fix the bit shift number for LED_KANA
  scsi: st: Restore some drive settings after reset
  scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine
  hwmon: (xgene-hwmon) use appropriate type for the latency value
  ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure().
  net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB
  net/mlx4_core: Avoid impossible mlx4_db_alloc() order value
  smack: recognize ipv4 CIPSO w/o categories
  pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map
  ASoC: ops: Enforce platform maximum on initial value
  ACPI: HED: Always initialize before evged
  PCI: Fix old_size lower bound in calculate_iosize() too
  EDAC/ie31200: work around false positive build warning
  net: pktgen: fix access outside of user given buffer in pktgen_thread_write()
  MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core
  MIPS: Use arch specific syscall name match function
  cpuidle: menu: Avoid discarding useful information
  x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus()
  bonding: report duplicate MAC address in all situations
  net: xgene-v2: remove incorrect ACPI_PTR annotation
  x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2
  net: pktgen: fix mpls maximum labels list parsing
  pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned"
  media: cx231xx: set device_caps for 417
  dm cache: prevent BUG_ON by blocking retries on failed device resumes
  media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe()
  ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114
  ieee802154: ca8210: Use proper setters and getters for bitwise types
  rtc: ds1307: stop disabling alarms on probe
  powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7
  mmc: sdhci: Disable SD card clock before changing parameters
  posix-timers: Add cond_resched() to posix_timer_add() search loop
  xen: Add support for XenServer 6.1 platform device
  dm: restrict dm device size to 2^63-512 bytes
  kbuild: fix argument parsing in scripts/config
  scsi: st: ERASE does not change tape location
  scsi: st: Tighten the page format heuristics with MODE SELECT
  ext4: reorder capability check last
  um: Update min_low_pfn to match changes in uml_reserved
  um: Store full CSGSFS and SS register from mcontext
  btrfs: send: return -ENAMETOOLONG when attempting a path that is too long
  btrfs: avoid linker error in btrfs_find_create_tree_block()
  i2c: pxa: fix call balance of i2c->clk handling routines
  mmc: host: Wait for Vdd to settle on card power off
  pNFS/flexfiles: Report ENETDOWN as a connection error
  tools/build: Don't pass test log files to linker
  dql: Fix dql->limit value when reset.
  SUNRPC: rpc_clnt_set_transport() must not change the autobind setting
  NFSv4: Treat ENETUNREACH errors as fatal for state recovery
  fbdev: core: tileblit: Implement missing margin clearing for tileblit
  fbdev: fsl-diu-fb: add missing device_remove_file()
  mailbox: use error ret code of of_parse_phandle_with_args()
  kconfig: merge_config: use an empty file as initfile
  cgroup: Fix compilation issue due to cgroup_mutex not being exported
  dma-mapping: avoid potential unused data compilation warning
  scsi: target: iscsi: Fix timeout on deleted connection
  openvswitch: Fix unsafe attribute parsing in output_userspace()
  Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5
  Input: synaptics - enable SMBus for HP Elitebook 850 G1
  phy: Fix error handling in tegra_xusb_port_init
  ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2()
  ACPI: PPTT: Fix processor subtable walk
  qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd()
  ALSA: sh: SND_AICA should depend on SH_DMA_API
  spi: loopback-test: Do not split 1024-byte hexdumps
  RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
  staging: axis-fifo: Correct handling of tx_fifo_depth for size validation
  staging: axis-fifo: avoid parsing ignored device tree properties
  platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection
  do_umount(): add missing barrier before refcount checks in sync case
  MIPS: Fix MAX_REG_OFFSET
  iio: adc: dln2: Use aligned_s64 for timestamp
  types: Complement the aligned types with signed 64-bit one
  USB: usbtmc: use interruptible sleep in usbtmc_read
  usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition
  ocfs2: stop quota recovery before disabling quotas
  ocfs2: implement handshaking with ocfs2 recovery thread
  ocfs2: switch osb->disable_recovery to enum
  module: ensure that kobject_put() is safe for module type kobjects
  xenbus: Use kref to track req lifetime
  usb: uhci-platform: Make the clock really optional
  iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo
  iio: adis16201: Correct inclinometer channel resolution
  Input: synaptics - enable InterTouch on Dell Precision M3800
  Input: synaptics - enable InterTouch on Dynabook Portege X30L-G
  Input: synaptics - enable InterTouch on Dynabook Portege X30-D
  net: dsa: b53: fix learning on VLAN unaware bridges
  scsi: target: Fix WRITE_SAME No Data Buffer crash
  dm: fix copying after src array boundaries
  iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
  irqchip/gic-v2m: Add const to of_device_id
  sch_htb: make htb_qlen_notify() idempotent
  of: module: add buffer overflow check in of_modalias()
  net: fec: ERR007885 Workaround for conventional TX
  lan743x: remove redundant initialization of variable current_head_index
  net: dlink: Correct endianness handling of led_mode
  tracing: Fix oob write in trace_seq_to_buffer()
  dm: always update the array size in realloc_argv on success
  wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
  amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload
  i2c: imx-lpi2c: Fix clock count when probe defers
  EDAC/altera: Set DDR and SDMMC interrupt mask before registration
  EDAC/altera: Test the correct error reg offset
  signal/m68k: Use force_sigsegv(SIGSEGV) in fpsp040_die
  mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro()
  x86/bugs: fix backport error in "x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline"

Change-Id: Ia48bfc7454e776a311efd14a33b7c414038c8a6d
2025-08-04 15:06:56 +01:00
Seyediman Seyedarab
338a784a91 kbuild: fix argument parsing in scripts/config
[ Upstream commit f757f6011c92b5a01db742c39149bed9e526478f ]

The script previously assumed --file was always the first argument,
which caused issues when it appeared later. This patch updates the
parsing logic to scan all arguments to find --file, sets the config
file correctly, and resets the argument list with the remaining
commands.

It also fixes --refresh to respect --file by passing KCONFIG_CONFIG=$FN
to make oldconfig.

Signed-off-by: Seyediman Seyedarab <imandevel@gmail.com>
Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>
2025-07-17 10:07:56 +02:00
Daniel Gomez
1f9146f89d kconfig: merge_config: use an empty file as initfile
[ Upstream commit a26fe287eed112b4e21e854f173c8918a6a8596d ]

The scripts/kconfig/merge_config.sh script requires an existing
$INITFILE (or the $1 argument) as a base file for merging Kconfig
fragments. However, an empty $INITFILE can serve as an initial starting
point, later referenced by the KCONFIG_ALLCONFIG Makefile variable
if -m is not used. This variable can point to any configuration file
containing preset config symbols (the merged output) as stated in
Documentation/kbuild/kconfig.rst. When -m is used $INITFILE will
contain just the merge output requiring the user to run make (i.e.
KCONFIG_ALLCONFIG=<$INITFILE> make <allnoconfig/alldefconfig> or make
olddefconfig).

Instead of failing when `$INITFILE` is missing, create an empty file and
use it as the starting point for merges.

Signed-off-by: Daniel Gomez <da.gomez@samsung.com>
Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>
2025-07-17 10:07:55 +02:00
bengris32
2162cb9481 Merge branch 'linux-4.19.y-cip' of https://git.kernel.org/pub/scm/linux/kernel/git/cip/linux-cip into lineage-22.1
* 'linux-4.19.y-cip' of https://git.kernel.org/pub/scm/linux/kernel/git/cip/linux-cip:
  CIP: Bump version suffix to -cip120 after merge from cip/linux-4.19.y-st tree
  Update localversion-st, tree is up-to-date with 5.4.292.
  net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy
  jfs: add index corruption check to DT_GETPAGE()
  jfs: fix slab-out-of-bounds read in ea_get()
  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
  x86/tsc: Always save/restore TSC sched_clock() on suspend/resume
  ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()
  arcnet: Add NULL check in com20020pci_probe()
  ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
  vsock: avoid timeout during connect() if the socket is closing
  net_sched: skbprio: Remove overly strict queue assertions
  netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
  ntb: intel: Fix using link status DB's
  ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
  spufs: fix a leak in spufs_create_context()
  spufs: fix a leak on spufs_new_file() failure
  hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
  sched/deadline: Use online cpus for validating runtime
  affs: don't write overlarge OFS data block size fields
  affs: generate OFS sequence numbers starting at 1
  wifi: iwlwifi: fw: allocate chained SG tables for dump
  sched/smt: Always inline sched_smt_active()
  ring-buffer: Fix bytes_dropped calculation issue
  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
  fs/procfs: fix the comment above proc_pid_wchan()
  perf python: Check if there is space to copy all the event
  perf python: Decrement the refcount of just created event on failure
  perf python: Fixup description of sample.id event member
  ocfs2: validate l_tree_depth to avoid out-of-bounds access
  perf units: Fix insufficient array space
  iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio
  coresight: catu: Fix number of pages while using 64k pages
  isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
  mfd: sm501: Switch to BIT() to mitigate integer overflows
  RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
  power: supply: max77693: Fix wrong conversion of charge input threshold value
  x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
  IB/mad: Check available slots before posting receive WRs
  clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
  lib: 842: Improve error handling in sw842_compress()
  clk: amlogic: gxbb: drop incorrect flag on 32k clock
  fbdev: sm501fb: Add some geometry checks.
  mdacon: rework dependency list
  fbdev: au1100fb: Move a variable assignment behind a null pointer check
  PCI/portdrv: Only disable pciehp interrupts early when needed
  ALSA: hda/realtek: Always honor no_shutup_pins
  perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
  lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
  thermal: int340x: Add NULL check for adev
  EDAC/ie31200: Fix the error path order of ie31200_init()
  EDAC/ie31200: Fix the DIMM size mask for several SoCs
  x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct()
  cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
  net: usb: usbnet: restore usb%d name exception for local mac addresses
  net: usb: qmi_wwan: add Telit Cinterion FE990B composition
  net: usb: qmi_wwan: add Telit Cinterion FN990B composition
  tty: serial: 8250: Add some more device IDs
  netfilter: socket: Lookup orig tuple for IPv6 SNAT
  ARM: 9351/1: fault: Add "cut here" line for prefetch aborts
  ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed()
  atm: Fix NULL pointer dereference
  ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names
  drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
  batman-adv: Ignore own maximum aggregation size during RX
  ARM: shmobile: smp: Enforce shmobile_smp_* alignment
  mmc: atmel-mci: Add missing clk_disable_unprepare()
  net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
  net: atm: fix use after free in lec_send()
  Bluetooth: Fix error code in chan_alloc_skb_cb()
  RDMA/hns: Fix wrong value of max_sge_rd
  RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
  xfrm_output: Force software GSO only in tunnel mode
  i2c: sis630: Fix an error handling path in sis630_probe()
  i2c: ali15x3: Fix an error handling path in ali15x3_probe()
  i2c: ali1535: Fix an error handling path in ali1535_probe()
  ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
  drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
  qlcnic: fix memory leak issues in qlcnic_sriov_common.c
  drm/amd/display: Assign normalized_pix_clk when color depth = 14
  x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
  USB: serial: option: match on interface class for Telit FN990B
  USB: serial: option: fix Telit Cinterion FE990A name
  USB: serial: option: add Telit Cinterion FE990B compositions
  USB: serial: ftdi_sio: add support for Altera USB Blaster 3
  block: fix 'kmem_cache of name 'bio-108' already exists'
  drm/nouveau: Do not override forced connector status
  x86/irq: Define trace events conditionally
  nvme: only allow entering LIVE from CONNECTING state
  sctp: Fix undefined behavior in left shift operation
  nvmet-rdma: recheck queue state is LIVE in state lock in recv done
  s390/cio: Fix CHPID "configure" attribute caching
  HID: ignore non-functional sensor in HP 5MP Camera
  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  powercap: call put_device() on an error path in powercap_register_control_type()
  nvme-fc: go straight to connecting state when initializing
  net_sched: Prevent creation of classes with TC_H_ROOT
  ipvs: prevent integer overflow in do_ip_vs_get_ctl()
  netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
  Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
  drivers/hv: Replace binary semaphore with mutex
  netpoll: hold rcu read lock in __netpoll_send_skb()
  netpoll: netpoll_send_skb() returns transmit status
  netpoll: move netpoll_send_skb() out of line
  netpoll: remove dev argument from netpoll_send_skb_on_dev()
  netpoll: Fix use correct return type for ndo_start_xmit()
  pinctrl: bcm281xx: Fix incorrect regmap max_registers value
  sctp: sysctl: auth_enable: avoid using current->nsproxy
  sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
  Revert "sctp: sysctl: auth_enable: avoid using current->nsproxy"
  Revert "sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy"
  sched/isolation: Prevent boot crash when the boot CPU is nohz_full
  CIP: Bump version suffix to -cip119 after merge from cip/linux-4.19.y-st tree
  watchdog: renesas_wdt: support handover from bootloader
  Update localversion-st, tree is up-to-date with 5.4.291.
  gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().
  gtp: Destroy device along with udp socket's netns dismantle.
  net: gso: fix ownership in __udp_gso_segment
  vlan: fix memory leak in vlan_newlink()
  batman-adv: Drop unmanaged ELP metric worker
  tee: optee: Fix supplicant wait loop
  pps: Fix a use-after-free
  net: rose: lock the socket in rose_bind()
  btrfs: fix use-after-free when attempting to join an aborted transaction
  media: lmedm04: Handle errors for lme2510_int_read
  wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step
  eeprom: digsy_mtc: Make GPIO lookup table match the device
  slimbus: messaging: Free transaction ID in delayed interrupt scenario
  intel_th: pci: Add Panther Lake-P/U support
  intel_th: pci: Add Panther Lake-H support
  intel_th: pci: Add Arrow Lake support
  Squashfs: check the inode number is not the invalid value of zero
  xhci: pci: Fix indentation in the PCI device ID definitions
  usb: gadget: Check bmAttributes only if configuration is valid
  usb: gadget: Fix setting self-powered state on suspend
  usb: gadget: Set self-powered based on MaxPower and bmAttributes
  usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
  usb: typec: ucsi: increase timeout for PPM reset operations
  usb: atm: cxacru: fix a flaw in existing endpoint checks
  usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
  usb: renesas_usbhs: Use devm_usb_get_phy()
  Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
  net: ipv6: fix missing dst ref drop in ila lwtunnel
  net: ipv6: fix dst ref loop in ila lwtunnel
  net-timestamp: support TCP GSO case for a few missing flags
  vlan: enforce underlying device type
  ppp: Fix KMSAN uninit-value warning with bpf
  be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
  hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
  llc: do not use skb_get() before dev_queue_xmit()
  hwmon: (ad7314) Validate leading zero bits and return error
  hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
  hwmon: (pmbus) Initialise page count in pmbus_identify()
  caif_virtio: fix wrong pointer check in cfv_probe()
  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
  mm/page_alloc: fix uninitialized variable
  rapidio: fix an API misues when rio_add_net() fails
  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  wifi: nl80211: reject cooked mode if it is set along with other flags
  wifi: cfg80211: regulatory: improve invalid hints checking
  x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
  x86/cpu: Validate CPUID leaf 0x2 EDX output
  x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
  platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
  drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
  ALSA: hda/realtek: update ALC222 depop optimize
  ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
  HID: appleir: Fix potential NULL dereference at raw event handle
  Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
  drm/amdgpu: disable BAR resize on Dell G5 SE
  drm/amdgpu: Check extended configuration space register when system uses large bar
  drm/amdgpu: skip BAR resizing if the bios already did it
  acct: perform last write from workqueue
  kernel/acct.c: use dedicated helper to access rlimit values
  kernel/acct.c: use #elif instead of #end and #elif
  pfifo_tail_enqueue: Drop new packet when sch->limit == 0
  sched/core: Prevent rescheduling when interrupts are disabled
  phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk
  usbnet: gl620a: fix endpoint checking in genelink_bind()
  perf/core: Fix low freq setting via IOC_PERIOD
  ftrace: Avoid potential division by zero in function_stat_show()
  x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems
  ipvs: Always clear ipvs_property flag in skb_scrub_packet()
  ASoC: es8328: fix route from DAC to output
  net: cadence: macb: Synchronize stats calculations
  sunrpc: suppress warnings for unused procfs functions
  batman-adv: Ignore neighbor throughput metrics in error case
  acct: block access to kernel internal filesystems
  ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED
  nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()
  power: supply: da9150-fg: fix potential overflow
  geneve: Suppress list corruption splat in geneve_destroy_tunnels().
  geneve: Fix use-after-free in geneve_find_dev().
  powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC
  ALSA: hda/realtek - Add type for ALC287
  powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline
  powerpc/64s/mm: Move __real_pte stubs into hash-4k.h
  USB: gadget: f_midi: f_midi_complete to call queue_work
  usb/gadget: f_midi: Replace tasklet with work
  usb/gadget: f_midi: convert tasklets to use new tasklet_setup() API
  usb: dwc3: Fix timeout issue during controller enter/exit from halt state
  mm: update mark_victim tracepoints fields
  crypto: testmgr - some more fixes to RSA test vectors
  crypto: testmgr - populate RSA CRT parameters in RSA test vectors
  crypto: testmgr - fix version number of RSA tests
  crypto: testmgr - Fix wrong test case of RSA
  crypto: testmgr - fix wrong key length for pkcs1pad
  driver core: bus: Fix double free in driver API bus_register()
  scsi: storvsc: Set correct data length for sending SCSI command without payload
  vlan: move dev_put into vlan_dev_uninit
  vlan: introduce vlan_dev_free_egress_priority
  Revert "btrfs: avoid monopolizing a core when activating a swap file"
  parport_pc: add support for ASIX AX99100
  can: ems_pci: move ASIX AX99100 ids to pci_ids.h
  nilfs2: protect access to buffers with no active references
  nilfs2: do not force clear folio if buffer is referenced
  nilfs2: do not output warnings when clearing dirty buffers
  alpha: replace hardcoded stack offsets with autogenerated ones
  ndisc: extend RCU protection in ndisc_send_skb()
  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
  arp: use RCU protection in arp_xmit()
  neighbour: use RCU protection in __neigh_notify()
  neighbour: delete redundant judgment statements
  ndisc: use RCU protection in ndisc_alloc_skb()
  ipv6: use RCU protection in ip6_default_advmss()
  ipv4: use RCU protection in inet_select_addr()
  ipv4: use RCU protection in rt_is_expired()
  net: add dev_net_rcu() helper
  net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
  partitions: mac: fix handling of bogus partition table
  gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock
  alpha: align stack for page fault and user unaligned trap handlers
  alpha: make stack 16-byte aligned (most cases)
  can: c_can: fix unbalanced runtime PM disable in error path
  USB: serial: option: drop MeiG Smart defines
  USB: serial: option: fix Telit Cinterion FN990A name
  USB: serial: option: add Telit Cinterion FN990B compositions
  USB: serial: option: add MeiG Smart SLM828
  usb: cdc-acm: Fix handling of oversized fragments
  usb: cdc-acm: Check control transfer buffer size before access
  USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk
  USB: hub: Ignore non-compliant devices with too many configs or interfaces
  usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
  USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone
  USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist
  USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI
  usb: dwc2: gadget: remove of_node reference upon udc_stop
  usb: gadget: udc: renesas_usb3: Fix compiler warning
  usb: roles: set switch registered flag early on
  batman-adv: fix panic during interface removal
  ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V
  orangefs: fix a oob in orangefs_debug_write
  Grab mm lock before grabbing pt lock
  vfio/pci: Enable iowrite64 and ioread64 for vfio pci
  media: cxd2841er: fix 64-bit division on gcc-9
  xen: remove a confusing comment on auto-translated guest I/O
  gpio: bcm-kona: Add missing newline to dev_err format string
  gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0
  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
  team: better TEAM_OPTION_TYPE_STRING validation
  vrf: use RCU protection in l3mdev_l3_out()
  ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu()
  HID: multitouch: Add NULL check in mt_input_configured
  ocfs2: check dir i_size in ocfs2_find_entry
  MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static
  ptp: Ensure info->enable callback is always set
  mtd: onenand: Fix uninitialized retlen in do_otp_read()
  NFC: nci: Add bounds checking in nci_hci_create_pipe()
  nilfs2: fix possible int overflows in nilfs_fiemap()
  ocfs2: handle a symlink read error correctly
  ocfs2: fix incorrect CPU endianness conversion causing mount failure
  nvmem: core: improve range check for nvmem_cell_write()
  crypto: qce - fix goto jump in error path
  media: uvcvideo: Remove redundant NULL assignment
  media: uvcvideo: Fix event flags in uvc_ctrl_send_events
  media: ov5640: fix get_light_freq on auto
  soc: qcom: smem_state: fix missing of_node_put in error path
  powerpc/pseries/eeh: Fix get PE state translation
  serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use
  serial: sh-sci: Drop __initdata macro for port_cfg
  usb: gadget: f_tcm: Don't prepare BOT write request twice
  usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint
  usb: gadget: f_tcm: Decrement command ref count on cleanup
  usb: gadget: f_tcm: Translate error to sense
  wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
  HID: hid-sensor-hub: don't use stale platform-data on remove
  of: reserved-memory: Fix using wrong number of cells to get property 'alignment'
  of: Fix of_find_node_opts_by_path() handling of alias+path+options
  of: Correct child specifier used as input of the 2nd nexus node
  clk: qcom: clk-alpha-pll: fix alpha mode configuration
  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
  KVM: s390: vsie: fix some corner-cases when grabbing vsie pages
  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
  arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma
  binfmt_flat: Fix integer overflow bug on 32 bit systems
  m68k: vga: Fix I/O defines
  s390/futex: Fix FUTEX_OP_ANDN implementation
  leds: lp8860: Write full EEPROM, not only half of it
  cpufreq: s3c64xx: Fix compilation warning
  tun: revert fix group permission check
  netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
  udp: gso: do not drop small packets when PMTU reduces
  tg3: Disable tg3 PCIe AER on system reboot
  firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry
  nvme: handle connectivity loss in nvme_set_queue_count
  usb: xhci: Fix NULL pointer dereference on certain command aborts
  usb: xhci: Add timeout argument in address_device USB HCD callback
  media: uvcvideo: Remove dangling pointers
  media: uvcvideo: Only save async fh if success
  nilfs2: handle errors that nilfs_prepare_chunk() may return
  nilfs2: eliminate staggered calls to kunmap in nilfs_rename
  nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link
  x86/mm: Don't disable PCID when INVLPG has been fixed by microcode
  HID: Wacom: Add PCI Wacom device support
  mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id
  wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy()
  mmc: core: Respect quirk_max_rate for non-UHS SDIO card
  tun: fix group permission check
  printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
  sched: Don't try to catch up excess steal time.
  btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling
  btrfs: output the reason for open_ctree() failure
  usb: gadget: f_tcm: Don't free command immediately
  media: uvcvideo: Fix double free in error path
  usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE
  drivers/card_reader/rtsx_usb: Restore interrupt based detection
  ktest.pl: Check kernelrelease return in get_version
  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
  hexagon: Fix unbalanced spinlock in die()
  hexagon: fix using plain integer as NULL pointer warning in cmpxchg
  genksyms: fix memory leak when the same symbol is read from *.symref file
  genksyms: fix memory leak when the same symbol is added from source
  net: sh_eth: Fix missing rtnl lock in suspend/resume path
  vsock: Allow retrying on connect() failure
  net: davicom: fix UAF in dm9000_drv_remove
  net: rose: fix timer races against user threads
  PM: hibernate: Add error handling for syscore_suspend()
  net: fec: implement TSO descriptor cleanup
  ubifs: skip dumping tnc tree when zroot is null
  dmaengine: ti: edma: fix OF node reference leaks in edma_driver
  module: Extend the preempt disabled section in dereference_symbol_descriptor().
  ocfs2: mark dquot as inactive if failed to start trans while releasing dquot
  scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1
  media: camif-core: Add check for clk_enable()
  media: mipi-csis: Add check for clk_enable()
  PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy()
  media: rc: iguanair: handle timeouts
  fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device()
  ARM: dts: mediatek: mt7623: fix IR nodename
  arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names
  arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property
  rdma/cxgb4: Prevent potential integer overflow on 32bit
  RDMA/mlx4: Avoid false error about access to uninitialized gids array
  perf report: Fix misleading help message about --demangle
  perf top: Don't complain about lack of vmlinux when not resolving some kernel samples
  padata: fix sysfs store callback check
  ktest.pl: Remove unused declarations in run_bisect_test function
  net: sched: Disallow replacing of child qdisc from one parent to another
  net/mlxfw: Drop hard coded max FW flash image size
  selftests: harness: fix printing of mismatch values in __EXPECT()
  selftests/harness: Display signed values correctly
  wifi: wlcore: fix unbalanced pm_runtime calls
  regulator: of: Implement the unwind path of of_regulator_match()
  team: prevent adding a device which is already a team device lower
  cpupower: fix TSC MHz calculation
  wifi: rtlwifi: pci: wait for firmware loading before releasing memory
  wifi: rtlwifi: fix memory leaks and invalid access at probe error path
  wifi: rtlwifi: remove unused dualmac control leftovers
  rtlwifi: replace usage of found with dedicated list iterator variable
  wifi: rtlwifi: usb: fix workqueue leak when probe fails
  wifi: rtlwifi: do not complete firmware loading needlessly
  drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
  drm/etnaviv: Fix page property being used for non writecombine buffers
  afs: Fix directory format encoding struct
  overflow: Allow mixed type arguments
  overflow: Correct check_shl_overflow() comment
  overflow: Add __must_check attribute to check_*() helpers
  udf: Fix use of check_add_overflow() with mixed type arguments

Change-Id: Ia7c26633509cfe8ec59d7dd0d6efd602629c87f4
Signed-off-by: bengris32 <bengris32@protonmail.ch>
2025-06-01 18:10:49 +01:00
Masahiro Yamada
2859c4849f genksyms: fix memory leak when the same symbol is read from *.symref file
[ Upstream commit be2fa44b5180a1f021efb40c55fdf63c249c3209 ]

When a symbol that is already registered is read again from *.symref
file, __add_symbol() removes the previous one from the hash table without
freeing it.

[Test Case]

  $ cat foo.c
  #include <linux/export.h>
  void foo(void);
  void foo(void) {}
  EXPORT_SYMBOL(foo);

  $ cat foo.symref
  foo void foo ( void )
  foo void foo ( void )

When a symbol is removed from the hash table, it must be freed along
with its ->name and ->defn members. However, sym->name cannot be freed
because it is sometimes shared with node->string, but not always. If
sym->name and node->string share the same memory, free(sym->name) could
lead to a double-free bug.

To resolve this issue, always assign a strdup'ed string to sym->name.

Fixes: 64e6c1e123 ("genksyms: track symbol checksum changes")
Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>
2025-04-03 10:09:47 +02:00
Masahiro Yamada
06ec6f1e79 genksyms: fix memory leak when the same symbol is added from source
[ Upstream commit 45c9c4101d3d2fdfa00852274bbebba65fcc3cf2 ]

When a symbol that is already registered is added again, __add_symbol()
returns without freeing the symbol definition, making it unreachable.

The following test cases demonstrate different memory leak points.

[Test Case 1]

Forward declaration with exactly the same definition

  $ cat foo.c
  #include <linux/export.h>
  void foo(void);
  void foo(void) {}
  EXPORT_SYMBOL(foo);

[Test Case 2]

Forward declaration with a different definition (e.g. attribute)

  $ cat foo.c
  #include <linux/export.h>
  void foo(void);
  __attribute__((__section__(".ref.text"))) void foo(void) {}
  EXPORT_SYMBOL(foo);

[Test Case 3]

Preserving an overridden symbol (compile with KBUILD_PRESERVE=1)

  $ cat foo.c
  #include <linux/export.h>
  void foo(void);
  void foo(void) { }
  EXPORT_SYMBOL(foo);

  $ cat foo.symref
  override foo void foo ( int )

The memory leaks in Test Case 1 and 2 have existed since the introduction
of genksyms into the kernel tree. [1]

The memory leak in Test Case 3 was introduced by commit 5dae9a550a
("genksyms: allow to ignore symbol checksum changes").

When multiple init_declarators are reduced to an init_declarator_list,
the decl_spec must be duplicated. Otherwise, the following Test Case 4
would result in a double-free bug.

[Test Case 4]

  $ cat foo.c
  #include <linux/export.h>

  extern int foo, bar;

  int foo, bar;
  EXPORT_SYMBOL(foo);

In this case, 'foo' and 'bar' share the same decl_spec, 'int'. It must
be unshared before being passed to add_symbol().

[1]: https://git.kernel.org/pub/scm/linux/kernel/git/history/history.git/commit/?id=46bd1da672d66ccd8a639d3c1f8a166048cca608

Fixes: 5dae9a550a ("genksyms: allow to ignore symbol checksum changes")
Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>
2025-04-03 10:09:47 +02:00
bengris32
4289aa84bd Merge tag 'v4.19.325-cip118' of https://git.kernel.org/pub/scm/linux/kernel/git/cip/linux-cip into staging/lineage-22.1
version 4.19.325-cip118

* tag 'v4.19.325-cip118' of https://git.kernel.org/pub/scm/linux/kernel/git/cip/linux-cip:
  CIP: Bump version suffix to -cip118 after merge from cip/linux-4.19.y-st tree
  Update localversion-st, tree is up-to-date with 5.4.290.
  gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp().
  arm64: dts: rockchip: add hevc power domain clock to rk3328
  Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals
  xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals
  Input: xpad - add support for wooting two he (arm)
  Input: xpad - add unofficial Xbox 360 wireless receiver clone
  Input: atkbd - map F23 key to support default copilot shortcut
  Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null"
  USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
  vfio/platform: check the bounds of read/write syscalls
  net/xen-netback: prevent UAF in xenvif_flush_hash()
  m68k: Add missing mmap_read_lock() to sys_cacheflush()
  m68k: Update ->thread.esp0 before calling syscall_trace() in ret_from_signal
  gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag
  irqchip/sunxi-nmi: Add missing SKIP_WAKE flag
  scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request
  ASoC: wm8994: Add depends on MFD core
  net: fix data-races around sk->sk_forward_alloc
  scsi: sg: Fix slab-use-after-free read in sg_release()
  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
  irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
  fs/proc: fix softlockup in __read_vmcore (part 2)
  poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll()
  hfs: Sanity check the root record
  mac802154: check local interfaces before deleting sdata list
  i2c: mux: demux-pinctrl: check initial mux selection, too
  nfp: bpf: prevent integer overflow in nfp_bpf_event_output()
  gtp: use exit_batch_rtnl() method
  net: add exit_batch_rtnl() method
  net: net_namespace: Optimize the code
  net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()
  sctp: sysctl: rto_min/max: avoid using current->nsproxy
  ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
  ocfs2: correct return value of ocfs2_local_free_info()
  phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider
  phy: core: fix code style in devm_of_phy_provider_unregister
  arm64: dts: rockchip: fix pd_tcpc0 and pd_tcpc1 node position on rk3399
  arm64: dts: rockchip: fix defines in pd_vio node for rk3399
  iio: inkern: call iio_device_put() only on mapped devices
  iio: adc: at91: call input_free_device() on allocated iio_dev
  iio: adc: ti-ads8688: fix information leak in triggered buffer
  iio: imu: kmx61: fix information leak in triggered buffer
  iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
  iio: pressure: zpa2326: fix information leak in triggered buffer
  usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
  usb: fix reference leak in usb_new_device()
  USB: usblp: return error when setting unsupported protocol
  usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null
  USB: serial: cp210x: add Phoenix Contact UPS Device
  usb-storage: Add max sectors quirk for Nokia 208
  staging: iio: ad9832: Correct phase range check
  staging: iio: ad9834: Correct phase range check
  USB: serial: option: add Neoway N723-EA support
  USB: serial: option: add MeiG Smart SRM815
  drm/amd/display: Add check for granularity in dml ceil/floor helpers
  sctp: sysctl: auth_enable: avoid using current->nsproxy
  sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
  dm thin: make get_first_thin use rcu-safe list first function
  tcp/dccp: allow a connection when sk_max_ack_backlog is zero
  tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog
  net: 802: LLC+SNAP OID:PID lookup on start of skb data
  ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()
  dm array: fix cursor index when skipping across block boundaries
  dm array: fix unreleased btree blocks on closing a faulty array cursor
  dm array: fix releasing a faulty array block twice in dm_array_cursor_end
  jbd2: flush filesystem device before updating tail sequence
  ravb: Fix use-after-free issue in ravb_tx_timeout_work()
  net/sched: netem: fix backport of "account for backlog updates from child qdisc"
  CIP: Bump version suffix to -cip117 after merge from cip/linux-4.19.y-st tree
  Update localversion-st, tree is up-to-date with 5.4.289.
  RDMA/bnxt_re: Fix max_qp_wrs reported
  net/sched: netem: account for backlog updates from child qdisc
  net/sched: cbs: Fix integer overflow in cbs_set_port_rate()
  netfilter: nft_set_hash: skip duplicated elements pending gc run
  drm/etnaviv: flush shader L1 cache after user commandstream
  usb: yurex: make waiting on yurex_write interruptible
  perf trace: Avoid garbage when not printing a syscall's arguments
  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices
  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device
  mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()
  drm: adv7511: Drop dsi single lane support
  net/sctp: Prevent autoclose integer overflow in sctp_association_init()
  sky2: Add device ID 11ab:4373 for Marvell 88E8075
  pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
  modpost: fix the missed iteration for the max bit in do_input()
  modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
  irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
  net: usb: qmi_wwan: add Telit FE910C04 compositions
  sound: usb: format: don't warn that raw DSD is unsupported
  wifi: mac80211: wake the queues in case of failure in resume
  ila: serialize calls to nf_register_net_hooks()
  af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
  af_packet: fix vlan_get_tci() vs MSG_PEEK
  ALSA: usb-audio: US16x08: Initialize array before use
  net: llc: reset skb->transport_header
  netrom: check buffer length before accessing it
  drm/bridge: adv7511_audio: Update Audio InfoFrame properly
  drm: bridge: adv7511: Enable SPDIF DAI
  RDMA/bnxt_re: Fix reporting hw_ver in query_device
  RDMA/bnxt_re: Add check for path mtu in modify_qp
  Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
  selinux: ignore unknown extended permissions
  btrfs: avoid monopolizing a core when activating a swap file
  tracing: Constify string literal data member in struct trace_event_call
  MIPS: Probe toolchain support of -msym32
  virtio-blk: don't keep queue frozen during system suspend
  platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
  regmap: Use correct format specifier for logging range errors
  scsi: qla1280: Fix hw revision numbering for ISP1020/1040
  tracing/kprobe: Make trace_kprobe's module callback called after jump_label update
  mtd: rawnand: fix double free in atmel_pmecc_create_user()
  dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
  dmaengine: mv_xor: fix child node refcount handling in early exit
  phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
  phy: core: Fix that API devm_phy_put() fails to release the phy
  phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
  phy: core: Fix an OF node refcount leakage in _of_phy_get()
  mtd: diskonchip: Cast an operand to prevent potential overflow
  nfsd: restore callback functionality for NFSv4.0
  bpf: Check negative offsets in __bpf_skb_min_len()
  media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
  of: Fix error path in of_parse_phandle_with_args_map()
  nilfs2: prevent use of deleted inode
  of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
  NFS/pnfs: Fix a live lock between recalled layouts and layoutget
  zram: refuse to use zero sized block device as backing device
  sh: clk: Fix clk_enable() to return 0 on NULL clk
  USB: serial: option: add Telit FE910C04 rmnet compositions
  USB: serial: option: add MediaTek T7XX compositions
  USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
  USB: serial: option: add MeiG Smart SLM770A
  USB: serial: option: add TCL IK512 MBIM & ECM
  efivarfs: Fix error on non-existent file
  i2c: riic: Always round-up when calculating bus period
  chelsio/chtls: prevent potential integer overflow on 32bit
  mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
  netfilter: ipset: Fix for recursive locking warning
  net: ethernet: bgmac-platform: fix an OF node reference leak
  net: hinic: Fix cleanup in create_rxqs/txqs()
  net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
  i2c: pnx: Fix timeout in wait functions
  PCI: Add ACS quirk for Broadcom BCM5760X NIC
  ALSA: usb: Fix UBSAN warning in parse_audio_unit()
  PCI/AER: Disable AER service on suspend
  net: sched: fix ordering of qlen adjustment
  ALSA: usb-audio: Fix a DMA to stack memory bug
  xen/netfront: fix crash when removing device
  KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status
  qca_spi: Make driver probing reliable
  ACPI: resource: Fix memory resource type union access
  net: lapb: increase LAPB_HEADER_LEN
  batman-adv: Do not let TT changes list grows indefinitely
  batman-adv: Remove uninitialized data in full table TT response
  batman-adv: Do not send uninitialized TT changes
  usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer
  usb: ehci-hcd: fix call balance of clocks handling routines
  usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature
  ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys()
  usb: host: max3421-hcd: Correctly abort a USB request.
  bpf, xdp: Update devmap comments to reflect napi/rcu usage
  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
  PCI: rockchip-ep: Fix address translation unit programming
  Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()"
  modpost: Add .irqentry.text to OTHER_SECTIONS
  ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume"
  jffs2: Fix rtime decompressor
  jffs2: Prevent rtime decompress memory corruption
  KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE
  KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device
  KVM: arm64: vgic-its: Add a data length check in vgic_its_save_*
  misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle
  powerpc/prom_init: Fixup missing powermac #size-cells
  usb: chipidea: udc: handle USB Error Interrupt if IOC not set
  PCI: Add 'reset_subordinate' to reset hierarchy below bridge
  nvdimm: rectify the illogical code within nd_dax_probe()
  scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset
  scsi: st: Don't modify unknown block number in MTIOCGET
  leds: class: Protect brightness_show() with led_cdev->led_access mutex
  tracing: Use atomic64_inc_return() in trace_clock_counter()
  netpoll: Use rcu_access_pointer() in __netpoll_setup
  rocker: fix link status detection in rocker_carrier_init()
  ASoC: hdmi-codec: reorder channel allocation list
  wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw()
  wifi: ipw2x00: libipw_rx_any(): fix bad alignment
  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  jfs: fix array-index-out-of-bounds in jfs_readdir
  jfs: fix shift-out-of-bounds in dbSplit
  jfs: array-index-out-of-bounds fix in dtReadFirst
  wifi: ath5k: add PCI ID for Arcadyan devices
  wifi: ath5k: add PCI ID for SX76X
  net: inet6: do not leave a dangling sk pointer in inet6_create()
  net: inet: do not leave a dangling sk pointer in inet_create()
  net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
  net: af_can: do not leave a dangling sk pointer in can_create()
  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
  af_packet: avoid erroring out after sock_init_data() in packet_create()
  net: ethernet: fs_enet: Use %pa to format resource_size_t
  net: fec_mpc52xx_phy: Use %pa to format resource_size_t
  samples/bpf: Fix a resource leak
  drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check()
  media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108
  media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera
  s390/cpum_sf: Handle CPU hotplug remove during sampling
  regmap: detach regmap from dev on regmap_exit
  bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt
  scsi: qla2xxx: Supported speed displayed incorrectly for VPorts
  ocfs2: update seq_file index in ocfs2_dlm_seq_next
  tracing: Fix cmp_entries_dup() to respect sort() comparison rules
  HID: wacom: fix when get product name maybe null pointer
  bpf: Fix exact match conditions in trie_get_next_key()
  bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
  ocfs2: free inode when ocfs2_get_init_inode() fails
  spi: mpc52xx: Add cancel_work_sync before module remove
  drm/sti: Add __iomem for mixer_dbg_mxn's parameter
  gpio: grgpio: Add NULL check in grgpio_probe
  gpio: grgpio: use a helper variable to store the address of ofdev->dev
  crypto: x86/aegis128 - access 32-bit arguments as 32-bit
  x86/asm: Reorder early variables
  xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
  xen/xenbus: fix locking
  xenbus/backend: Protect xenbus callback with lock
  xenbus/backend: Add memory pressure handler callback
  xen/xenbus: reference count registered modules
  netfilter: ipset: Hold module reference while requesting a module
  igb: Fix potential invalid memory access in igb_init_module()
  net/qed: allow old cards not supporting "num_images" to work
  dccp: Fix memory leak in dccp_feat_change_recv
  net/ipv6: release expired exception dst cached in socket
  netfilter: x_tables: fix LED ID check in led_tg_check()
  ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
  can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics
  can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL
  watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart()
  nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
  dm thin: Add missing destroy_work_on_stack()
  util_macros.h: fix/rework find_closest() macros
  ftrace: Fix regression with module command in stack_trace_filter
  ovl: Filter invalid inodes with missing lookup function
  media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate()
  media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled
  media: ts2020: fix null-ptr-deref in ts2020_probe()
  media: i2c: tc358743: Fix crash in the probe error path when using polling
  btrfs: ref-verify: fix use-after-free after invalid ref action
  quota: flush quota_release_work upon quota writeback
  SUNRPC: correct error code comment in xs_tcp_setup_socket()
  um/sysrq: remove needless variable sp
  ALSA: hda/realtek: Set PCBeep to default value for ALC274
  Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit"
  serial: sh-sci: Clean sci_ports[0] after at earlycon exit
  ipmr: convert /proc handlers to rcu_read_lock()
  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
  mfd: intel_soc_pmic_bxtwc: Use dev_err_probe()
  x86/xen/pvh: Annotate indirect branch as safe
  CIP: Bump version suffix to -cip116 after merge from stable
  Mark this as 4.19.324-cip115 release.
  CIP: Bump version suffix to -cip114 after merge from stable
  Mark this as 4.19.322-cip113 release.
  CIP: Bump version suffix to -cip112 after merge from stable
  CIP: Bump version suffix to -cip111 after merge from stable
  CIP: Bump version suffix to -cip110 after merge from stable
  CIP: Bump version suffix to -cip109 after merge from stable
  CIP: Bump version suffix to -cip108 after merge from stable
  memory: renesas-rpc-if: Clear HS bit during hardware initialization
  arm64: dts: renesas: rzg2: Add RPC-IF Support
  spi: spi-rpc-if: Check return value of rpcif_sw_init()
  memory: renesas-rpc-if: Remove redundant division of dummy
  memory: renesas-rpc-if: Simplify single/double data register access
  memory: renesas-rpc-if: Drop usage of RPCIF_DIRMAP_SIZE macro
  memory: renesas-rpc-if: Return error in case devm_ioremap_resource() fails
  memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode
  memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
  memory: renesas-rpc-if: fix possible NULL pointer dereference of resource
  CIP: Bump version suffix to -cip107 after merge from stable
  ravb: remove undocumented counter processing
  ravb: remove undocumented endianness selection
  ravb: update "undocumented" annotations
  CIP: Bump version suffix to -cip106 after merge from stable
  Mark this as 4.19.299-cip105 release.
  CIP: Bump version suffix to -cip104 after merge from stable
  CIP: Bump version suffix to -cip103 after merge from stable
  CIP: Bump version suffix to -cip102 after merge from stable
  CIP: Bump version suffix to -cip101 after merge from stable
  CIP: Bump version suffix to -cip100 after merge from stable
  CIP: Bump version suffix to -cip99 after merge from stable
  CIP: Bump version suffix to -cip98 after merge from stable
  CIP: Bump version suffix to -cip97 after merge from stable
  CIP: Bump version suffix to -cip96 after merge from stable
  CIP: Bump version suffix to -cip95 after merge from stable
  CIP: Bump version suffix to -cip94 after merge from stable
  CIP: Bump version suffix to -cip93 after merge from stable
  CIP: Bump version suffix to -cip92 after merge from stable
  CIP: Bump version suffix to -cip91 after merge from stable
  CIP: Bump version suffix to -cip90 after merge from stable
  CIP: Bump version suffix to -cip89 after merge from stable
  CIP: Bump version suffix to -cip88 after merge from stable
  CIP: Bump version suffix to -cip87 after merge from stable
  CIP: Bump version suffix to -cip86 after merge from stable
  CIP: Bump version suffix to -cip85 after merge from stable
  CIP: Bump version suffix to -cip84 after merge from stable
  CIP: Bump version suffix to -cip83 after merge from stable
  CIP: Bump version suffix to -cip82 after merge from stable
  CIP: Bump version suffix to -cip81 after merge from stable
  drm: rcar-du: Fix Alpha blending issue on Gen3
  CIP: Bump version suffix to -cip80 after merge from stable
  CIP: Bump version suffix to -cip79 after merge from stable
  CIP: Bump version suffix to -cip78 after merge from stable
  CIP: Bump version suffix to -cip77 after merge from stable
  CIP: Bump version suffix to -cip76 after merge from stable
  CIP: Bump version suffix to -cip75 after merge from stable
  CIP: Bump version suffix to -cip74 after merge from stable
  CIP: Bump version suffix to -cip73 after merge from stable
  CIP: Bump version suffix to -cip72 after merge from stable
  CIP: Bump version suffix to -cip71 after merge from stable
  CIP: Bump version suffix to -cip70 after merge from stable
  CIP: Bump version suffix to -cip69 after merge from stable
  CIP: Bump version suffix to -cip68 after merge from stable
  CIP: Bump version suffix to -cip67 after merge from stable
  CIP: Bump version suffix to -cip66 after merge from stable
  CIP: Bump version suffix to -cip65 after merge from stable
  CIP: Bump version suffix to -cip64 after merge from stable
  CIP: Bump version suffix to -cip63 after merge from stable
  CIP: Bump version suffix to -cip62 after merge from stable
  CIP: Bump version suffix to -cip61 after merge from stable
  CIP: Bump version suffix to -cip60 after merge from stable
  CIP: Bump version suffix to -cip59 after merge from stable
  CIP: Bump version suffix to -cip58 after merge from stable
  CIP: Bump version suffix to -cip57 after merge from stable
  CIP: Bump version suffix to -cip56 after merge from stable
  CIP: Bump version suffix to -cip55 after merge from stable
  CIP: Bump version suffix to -cip54 after merge from stable
  CIP: Bump version suffix to -cip53 after merge from stable
  CIP: Bump version suffix to -cip52 after merge from stable
  CIP: Bump version suffix to -cip51 after merge from stable
  CIP: Bump version suffix to -cip50 after merge from stable
  CIP: Bump version suffix to -cip49 after merge from stable
  media: i2c: imx219: Balance runtime PM use-count
  media: i2c: imx219: Move out locking/unlocking of vflip and hflip controls from imx219_set_stream
  CIP: Bump version suffix to -cip48 after merge from stable
  drm: rcar-du: Fix crash when using LVDS1 clock for CRTC
  CIP: Bump version suffix to -cip47 after merge from stable
  CIP: Bump version suffix to -cip46 after merge from stable
  arm64: dts: renesas: Add support for MIPI Adapter V2.1 connected to HiHope RZ/G2N
  arm64: dts: renesas: Add support for MIPI Adapter V2.1 connected to HiHope RZ/G2M
  arm64: dts: renesas: Add support for MIPI Adapter V2.1 connected to HiHope RZ/G2H
  arm64: dts: renesas: aistarvision-mipi-adapter-2.1: Add parent macro for each sensor
  arm64: dts: renesas: r8a774e1: Add VIN and CSI-2 nodes
  media: rcar-csi2: Enable support for R8A774E1
  media: dt-bindings: media: renesas,csi2: Add R8A774E1 support
  media: rcar-vin: Enable support for R8A774E1
  media: dt-bindings: media: renesas,vin: Add R8A774E1 support
  arm64: dts: renesas: r8a774b1: Add VIN and CSI-2 support
  media: rcar-csi2: Enable support for R8A774B1
  media: dt-bindings: rcar-csi2: Add R8A774B1 support
  media: rcar-vin: Enable support for R8A774B1
  media: dt-bindings: rcar-vin: Add R8A774B1 support
  arm64: dts: renesas: r8a774a1: Add VIN and CSI-2 nodes
  media: rcar-csi2: Enable support for r8a774a1
  media: dt-bindings: media: rcar-csi2: Add r8a774a1 support
  media: rcar-vin: Enable support for r8a774a1
  media: dt-bindings: media: rcar_vin: Add r8a774a1 support
  arm64: dts: renesas: r8a774c0-cat874: Add support for AISTARVISION MIPI Adapter V2.1
  media: i2c: imx219: take lock in imx219_enum_mbus_code/frame_size
  media: i2c: imx219: Selection compliance fixes
  media: i2c: imx219: Fix a bug in imx219_enum_frame_size
  media: i2c: imx219: Implement get_selection
  media: i2c: imx219: Add support for cropped 640x480 resolution
  media: i2c: imx219: Add support for RAW8 bit bayer format
  media: i2c: imx219: Fix power sequence
  media: i2c: Add driver for Sony IMX219 sensor
  media: dt-bindings: media: i2c: Add IMX219 CMOS sensor binding
  media: rcar-csi2: Add support for MEDIA_BUS_FMT_SRGGB8_1X8 format
  media: rcar-vin: Add support for MEDIA_BUS_FMT_SRGGB8_1X8 format
  media: rcar-vin: Invalidate pipeline if conversion is not possible on input formats
  media: rcar-csi2: Update V3M and E3 start procedure
  media: rcar-vin: fix wrong return value in rvin_set_channel_routing()
  media: v4l: ctrl: Provide unlocked variant of v4l2_ctrl_grab
  media: v4l2-async: Log message in case of heterogeneous fwnode match
  media: v4l2-async: Pass notifier pointer to match functions
  media: v4l2-async: Accept endpoints and devices for fwnode matching
  media: device property: Add a function to test is a fwnode is a graph endpoint
  media: ov5645: Remove unneeded regulator_set_voltage()
  CIP: Bump version suffix to -cip45 after merge from stable
  CIP: Bump version suffix to -cip44 after merge from stable
  CIP: Bump version suffix to -cip43 after merge from stable
  CIP: Bump version suffix to -cip42 after merge from stable
  CIP: Bump version suffix to -cip41 after merge from stable
  spi: spi-mem: Make spi_mem_default_supports_op() static inline
  pinctrl: renesas: r8a77965: Add QSPI[01] pins, groups and functions
  pinctrl: renesas: r8a7796: Add QSPI[01] pins, groups and functions
  pinctrl: renesas: r8a77951: Add QSPI[01] pins, groups and functions
  pinctrl: renesas: r8a77990: Add QSPI[01] pins, groups and functions
  pinctrl: renesas: r8a77990: Optimize pinctrl image size for R8A774C0
  pinctrl: renesas: r8a77965: Optimize pinctrl image size for R8A774B1
  pinctrl: renesas: r8a77951: Optimize pinctrl image size for R8A774E1
  pinctrl: renesas: r8a7796: Optimize pinctrl image size for R8A774A1
  clk: renesas: r8a774c0: Add RPC clocks
  clk: renesas: r8a774b1: Add RPC clocks
  clk: renesas: r8a774a1: Add RPC clocks
  spi: rpc-if: Fix use-after-free on unbind
  spi: add Renesas RPC-IF driver
  spi: spi-mem: Fix a memory leak in spi_mem_dirmap_destroy()
  spi: spi-mem: Fix spi_mem_dirmap_destroy() kerneldoc
  spi: spi-mem: Add a new API to support direct mapping
  spi: spi-mem: Compute length only when needed
  spi: spi-mem: Fix passing zero to 'PTR_ERR' warning
  spi: spi-mem: fix reference leak in spi_mem_access_start
  spi: spi-mem: Split spi_mem_exec_op() code
  spi: spi-mem: export spi_mem_default_supports_op()
  spi: spi-mem: Add SPI_MEM_NO_DATA to the spi_mem_data_dir enum
  memory: renesas-rpc-if: Make rpcif_enable/disable_rpm() as static inline
  memory: renesas-rpc-if: Fix a node reference leak in rpcif_probe()
  memory: renesas-rpc-if: Fix unbalanced pm_runtime_enable in rpcif_{enable,disable}_rpm
  memory: renesas-rpc-if: Return correct value to the caller of rpcif_manual_xfer()
  memory: add Renesas RPC-IF driver
  dt-bindings: memory: document Renesas RPC-IF bindings
  dt-bindings: thermal: rcar-gen3-thermal: Add r8a774e1 support
  dt-bindings: PCI: rcar-pci-host: Document r8a774e1 bindings
  dt-bindings: PCI: rcar: Add device tree support for r8a774b1
  dt-bindings: timer: renesas: tmu: Document r8a774e1 bindings
  dt-bindings: pci: rcar-pci-ep: Document missing interrupts property
  CIP: Bump version suffix to -cip40 after merge from stable
  arm64: dts: renesas: r8a774c0: Fix MSIOF1 DMA channels
  CIP: Bump version suffix to -cip39 after merge from stable
  arm64: dts: renesas: r8a774e1: Add audio support
  arm64: dts: renesas: r8a774e1: Add missing audio_clk_b
  CIP: Bump version suffix to -cip38 after merge from stable
  arm64: dts: renesas: r8a774e1: Add USB-DMAC and HSUSB device nodes
  arm64: dts: renesas: r8a774e1: Add USB3.0 device nodes
  arm64: dts: renesas: r8a774e1: Add USB2.0 phy and host (EHCI/OHCI) device nodes
  dt-bindings: dma: renesas,usb-dmac: Add binding for r8a774e1
  dt-bindings: phy: renesas,usb3-phy: Add r8a774e1 support
  dt-bindings: phy: renesas,usb2-phy: Add r8a774e1 support
  dt-bindings: sound: renesas, rsnd: Document r8a774e1 bindings
  arm64: dts: renesas: Add HiHope RZ/G2H board with idk-1110wr display
  arm64: dts: renesas: r8a774e1: Add PWM device nodes
  dt-bindings: pwm: renesas,pwm-rcar: Add r8a774e1 support
  arm64: dts: renesas: r8a774e1-hihope-rzg2h: Setup DU clocks
  arm64: dts: renesas: r8a774e1: Add LVDS device node
  drm: rcar-du: lvds: Add support for R8A774E1 SoC
  dt-bindings: display: renesas,lvds: Document r8a774e1 bindings
  arm64: dts: renesas: r8a774e1: Populate HDMI encoder node
  dt-bindings: display: renesas,dw-hdmi: Add r8a774e1 support
  arm64: dts: renesas: r8a774e1: Populate DU device node
  drm: rcar-du: Add support for R8A774E1 SoC
  dt-bindings: display: renesas,du: Document r8a774e1 bindings
  arm64: dts: renesas: r8a774e1: Add FDP1 device nodes
  arm64: dts: renesas: r8a774e1: Add VSP instances
  arm64: dts: renesas: r8a774e1: Add FCPF and FCPV instances
  arm64: dts: renesas: r8a774e1-hihope-rzg2h-ex: Enable sata
  misc: pci_endpoint_test: Add Device ID for RZ/G2H PCIe controller
  arm64: dts: renesas: r8a774e1: Add PCIe EP nodes
  dt-bindings: pci: rcar-pci-ep: Document r8a774e1
  arm64: dts: renesas: r8a774e1: Add SATA controller node
  arm64: dts: renesas: r8a774e1: Add PCIe device nodes
  misc: pci_endpoint_test: Add Device ID for RZ/G2M and RZ/G2N PCIe controllers
  arm64: dts: renesas: r8a774b1: Add PCIe EP nodes
  arm64: dts: renesas: r8a774a1: Add PCIe EP nodes
  arm64: dts: renesas: r8a774c0: Add PCIe EP node
  dt-bindings: pci: rcar-pci-ep: Document r8a774a1 and r8a774b1
  ata: sata_rcar: Fix DMA boundary mask
  arm64: dts: renesas: r8a774b1-hihope-rzg2n-ex: Enable sata
  arm64: dts: renesas: r8a774b1: Add SATA controller node
  dt-bindings: ata: sata_rcar: Add r8a774b1 support
  CIP: Bump version suffix to -cip37 after merge from stable
  misc: pci_endpoint_test: Add Device ID for RZ/G2E PCIe controller
  arm64: defconfig: Enable R-Car PCIe endpoint driver
  PCI: rcar: Add endpoint mode support
  dt-bindings: PCI: rcar: Add bindings for R-Car PCIe endpoint controller
  PCI: rcar: Fix calculating mask for PCIEPAMR register
  PCI: rcar: Move shareable code to a common file
  arm64: defconfig: Enable CONFIG_PCIE_RCAR_HOST
  PCI: rcar: Rename pcie-rcar.c to pcie-rcar-host.c
  PCI: endpoint: functions/pci-epf-test: Print throughput information
  PCI: endpoint: Add support to handle multiple base for mapping outbound memory
  PCI: endpoint: Pass page size as argument to pci_epc_mem_init()
  PCI: endpoint: Fix ->set_msix() to take BIR and offset as arguments
  PCI: pci-epf-test: Add support to defer core initialization
  PCI: endpoint: Add notification for core init completion
  PCI: endpoint: Add core init notifying feature
  PCI: endpoint: Assign function number for each PF in EPC core
  PCI: endpoint: Protect concurrent access to pci_epf_ops with mutex
  PCI: endpoint: Replace spinlock with mutex
  PCI: endpoint: Use notification chain mechanism to notify EPC events to EPF
  tools: PCI: Fix fd leakage
  tools: PCI: Exit with error code when test fails
  PCI: dwc: Fix dw_pcie_ep_raise_msix_irq() to get correct MSI-X table address
  PCI: endpoint: Fix clearing start entry in configfs
  PCI: endpoint: Cast the page number to phys_addr_t
  PCI: endpoint: Clear BAR before freeing its space
  PCI: endpoint: Skip odd BAR when skipping 64bit BAR
  PCI: endpoint: Allocate enough space for fixed size BAR
  PCI: endpoint: Set endpoint controller pointer to NULL
  PCI: endpoint: Add support to specify alignment for buffers allocated to BARs
  PCI: endpoint: Fix a potential NULL pointer dereference
  PCI: endpoint: Remove features member in struct pci_epc
  PCI: designware-plat: Remove setting epc->features in Designware plat EP driver
  PCI: rockchip: Remove pci_epf_linkup() from Rockchip EP driver
  PCI: cadence: Remove pci_epf_linkup() from Cadence EP driver
  PCI: pci-epf-test: Use pci_epc_get_features() to get EPC features
  PCI: pci-epf-test: Do not allocate next BARs memory if current BAR is 64Bit
  PCI: pci-epf-test: Remove setting epf_bar flags in function driver
  PCI: endpoint: Fix pci_epf_alloc_space() to set correct MEM TYPE flags
  PCI: endpoint: Add helper to get first unreserved BAR
  PCI: cadence: Populate ->get_features() cdns_pcie_epc_ops
  PCI: rockchip: Populate ->get_features() dw_pcie_ep_ops
  PCI: pci-dra7xx: Populate ->get_features() dw_pcie_ep_ops
  PCI: designware-plat: Populate ->get_features() dw_pcie_ep_ops
  PCI: dwc: Add ->get_features() callback function to dw_pcie_ep_ops
  PCI: endpoint: Add new pci_epc_ops to get EPC features
  CIP: Bump version suffix to -cip36 after merge from stable with ravb fix
  Revert "ravb: Fixed to be able to unload modules"
  CIP: Bump version suffix to -cip35 after merge from stable
  CIP: Bump version suffix to -cip34 after merge from stable
  arm64: dts: renesas: Fix SD Card/eMMC interface device node names
  arm64: dts: renesas: r8a774e1: Add RWDT node
  dt-bindings: watchdog: renesas,wdt: Document r8a774e1 support
  arm64: dts: renesas: r8a774e1: Add MSIOF nodes
  spi: renesas,sh-msiof: Add r8a774e1 support
  arm64: dts: renesas: r8a774e1: Add I2C and IIC-DVFS support
  dt-bindings: i2c: renesas,iic: Document r8a774e1 support
  dt-bindings: i2c: renesas,i2c: Document r8a774e1 support
  arm64: dts: renesas: r8a774e1: Add SDHI nodes
  mmc: renesas_sdhi_internal_dmac: Add r8a774e1 support
  arm64: dts: renesas: r8a774e1: Add SCIF and HSCIF nodes
  arm64: dts: renesas: r8a774e1: Add CAN[FD] support
  can: rcar_can: Remove unused platform data support
  arm64: dts: renesas: r8a774e1: Add TMU device nodes
  arm64: dts: renesas: r8a774e1: Add CMT device nodes
  arm64: dts: renesas: r8a774e1: Add RZ/G2H thermal support
  thermal: rcar_gen3_thermal: Add r8a774e1 support
  thermal/drivers/rcar_gen3: Fix undefined temperature if negative
  thermal: rcar_gen3_thermal: Generate interrupt when temperature changes
  thermal: rcar_gen3_thermal: Remove temperature bound
  arm64: dts: renesas: r8a774e1: Add operating points
  arm64: dts: renesas: r8a774e1: Add Ethernet AVB node
  arm64: dts: renesas: r8a774e1: Add GPIO device nodes
  arm64: dts: renesas: r8a774e1: Add SYS-DMAC device nodes
  dt-bindings: dma: renesas,rcar-dmac: Document R8A774E1 bindings
  arm64: dts: renesas: r8a774e1: Add IPMMU device nodes
  iommu/ipmmu-vmsa: Hook up R8A774E1 DT matching code
  dt-bindings: iommu: renesas,ipmmu-vmsa: Add r8a774e1 support
  arm64: dts: renesas: Add HiHope RZ/G2H sub board support
  arm64: dts: renesas: Add HiHope RZ/G2H main board support
  dt-bindings: arm: renesas: Add HopeRun RZ/G2H boards
  arm64: dts: renesas: Initial r8a774e1 SoC device tree
  pinctrl: sh-pfc: pfc-r8a77951: Add R8A774E1 PFC support
  dt-bindings: pinctrl: sh-pfc: Document r8a774e1 PFC support
  pinctrl: sh-pfc: Split R-Car H3 support in two independent drivers
  pinctrl: sh-pfc: pfc-r8a7795: Fix typo in pinmux macro for SCL3
  pinctrl: sh-pfc: pfc-r8a7795-es1: Fix typo in pinmux macro for SCL3
  pinctrl: sh-pfc: r8a7795: Use new macros for non-GPIO pins
  pinctrl: sh-pfc: r8a7795-es1: Use new macros for non-GPIO pins
  pinctrl: sh-pfc: r8a7795: Add TPU pins, groups and functions
  pinctrl: sh-pfc: r8a7795-es1: Add TPU pins, groups and functions
  pinctrl: sh-pfc: rcar-gen3: Rename RTS{0,1,3,4}# pin function definitions
  pinctrl: sh-pfc: rcar-gen3: Retain TDSELCTRL register across suspend/resume
  pinctrl: sh-pfc: r8a7795: Deduplicate VIN5 pin definitions
  pinctrl: sh-pfc: r8a7795: Add I2C{0,3,5} pins, groups and functions
  pinctrl: sh-pfc: r8a7795-es1: Add I2C{0,3,5} pins, groups and functions
  pinctrl: sh-pfc: r8a7795: Fix VIN versioned groups
  pinctrl: sh-pfc: r8a77965: Fix DU_DOTCLKIN3 drive/bias control
  arm64: defconfig: Enable R8A774E1 SoC
  clk: renesas: cpg-mssr: Add r8a774e1 support
  dt-bindings: clock: renesas,cpg-mssr: Document r8a774e1
  clk: renesas: rzg2: Mark RWDT clocks as critical
  clk: renesas: cpg-mssr: Mark clocks as critical only if on at boot
  clk: renesas: rcar-gen3: Allow changing the RPC[D2] clocks
  clk: renesas: Add r8a774e1 CPG Core Clock Definitions
  clk: renesas: rcar-gen3: Add RPC clocks
  soc: renesas: rcar-rst: Add support for RZ/G2H
  dt-bindings: reset: rcar-rst: Document r8a774e1 reset module
  soc: renesas: Identify RZ/G2H
  dt-bindings: arm: renesas: Document RZ/G2H SoC DT bindings
  soc: renesas: Add Renesas R8A774E1 config option
  soc: renesas: rcar-sysc: Add r8a774e1 support
  dt-bindings: power: renesas,rcar-sysc: Document r8a774e1 SYSC binding
  dt-bindings: power: Add r8a774e1 SYSC power domain definitions
  arm64: dts: renesas: r8a774a1: Remove audio port node
  arm64: dts: renesas: Add HiHope RZ/G2N Rev2.0/3.0/4.0 board with idk-1110wr display
  arm64: dts: renesas: Add HiHope RZ/G2N Rev.3.0/4.0 sub board support
  arm64: dts: renesas: Add HiHope RZ/G2N Rev.3.0/4.0 main board support
  arm64: dts: renesas: Add HiHope RZ/G2M Rev.3.0/4.0 board with idk-1110wr display
  arm64: dts: renesas: hihope-rzg2-ex: Separate out lvds specific nodes into common file
  arm64: dts: renesas: Add HiHope RZ/G2M Rev.3.0/4.0 sub board support
  arm64: dts: renesas: Add HiHope RZ/G2M Rev.3.0/4.0 main board support
  arm64: dts: renesas: Add HiHope RZ/G2M[N] Rev.3.0/4.0 specific into common file
  arm64: dts: renesas: hihope-common: Separate out Rev.2.0 specific into hihope-rev2.dtsi file
  arm64: dts: renesas: r8a774b1-hihope-rzg2n[-ex]: Rename HiHope RZ/G2N boards
  arm64: dts: renesas: r8a774a1-hihope-rzg2m[-ex/-ex-idk-1110wr]: Rename HiHope RZ/G2M boards
  CIP: Bump version suffix to -cip33 after merge from stable
  drm: atomic helper: fix W=1 warnings
  drm: Add drm_atomic_get_old/new_private_obj_state
  drm: of: Fix linking when CONFIG_OF is not set
  CIP: Bump version suffix to -cip32 after merge from stable
  drm: of: Fix double-free bug
  CIP: Bump version suffix to -cip31 after merge from stable
  arm64: dts: renesas: Add EK874 board with idk-2121wr display support
  dt-bindings: display: Add idk-2121wr binding
  arm64: dts: renesas: rzg2: Add reset control properties for display
  arm64: dts: renesas: r8a774c0: Point LVDS0 to its companion LVDS1
  drm: rcar-du: lvds: Allow for even and odd pixels swap
  drm: rcar-du: lvds: Get dual link configuration from DT
  drm: of: Add drm_of_lvds_get_dual_link_pixel_order
  drm: rcar-du: lvds: Improve identification of panels
  drm: rcar-du: lvds: Get mode from state
  drm: Add atomic variants for bridge enable/disable
  drm: Add drm_atomic_get_(old|new)_connector_for_encoder() helpers
  drm: rcar_lvds: Fix dual link mode operations
  drm: rcar-du: Skip LVDS1 output on Gen3 when using dual-link LVDS mode
  drm: rcar-du: lvds: Add support for dual-link mode
  dt-bindings: display: renesas: lvds: Add renesas,companion property
  drm: bridge: Add dual_link field to the drm_bridge_timings structure
  drm: rcar-du: lvds: Remove LVDS double-enable checks
  arm64: defconfig: Enable additional support for Renesas platforms
  ASoC: rsnd: fixup SSI clock during suspend/resume modes
  CIP: Bump version suffix to -cip30 after merge from stable
  CIP: Bump version suffix to -cip29 after merge from stable
  CIP: Bump version suffix to -cip28 after merge from stable
  CIP: Bump version suffix to -cip27 after merge from stable
  CIP: Bump version suffix to -cip26 after merge from stable
  CIP: Bump version suffix to -cip25 after merge from stable
  arm64: dts: renesas: Add HiHope RZ/G2M board with idk-1110wr display
  dt-bindings: display: Add idk-1110wr binding
  CIP: Bump version suffix to -cip24 after merge from stable
  CIP: Bump version suffix to -cip23 after merge from stable
  CIP: Bump version suffix to -cip22 after merge from stable
  CIP: Bump version suffix to -cip21 after merge from stable
  arm64: dts: renesas: cat874: Enable usb role switch support
  arm64: dts: renesas: cat874: Enable USB3.0 host/peripheral device node
  usb: gadget: udc: renesas_usb3: Enhance role switch support
  usb: typec: fix an IS_ERR() vs NULL bug in hd3ss3220_probe()
  usb: typec: hd3ss3220: hd3ss3220_probe() warn: passing zero to 'PTR_ERR'
  usb: typec: add dependency for TYPEC_HD3SS3220
  usb: typec: hd3ss3220_irq() can be static
  usb: typec: driver for TI HD3SS3220 USB Type-C DRP port controller
  dt-bindings: usb: renesas_usb3: Document usb role switch support
  dt-bindings: usb: hd3ss3220 device tree binding document
  usb: roles: Add fwnode_usb_role_switch_get() function
  device connection: Add fwnode_connection_find_match()
  usb: roles: Introduce stubs for the exiting functions in role.h
  device connection: Find connections also by checking the references
  device property: Introduce fwnode_find_reference()
  device connection: Find device connections also from device graphs
  device connection: Prepare support for firmware described connections
  usb: typec: Find the ports by also matching against the device node
  usb: roles: Find the muxes by also matching against the device node
  usb: typec: mux: Fix unsigned comparison with less than zero
  usb: typec: mux: Find the muxes by also matching against the device node
  device connection: Add fwnode member to struct device_connection
  CIP: Bump version suffix to -cip20 after merge from stable
  arm64: dts: renesas: r8a774b1: Add USB3.0 device nodes
  arm64: dts: renesas: r8a774b1: Add USB-DMAC and HSUSB device nodes
  arm64: dts: renesas: r8a774b1: Add USB2.0 phy and host (EHCI/OHCI) device nodes
  dt-bindings: usb: renesas_usb3: Document r8a774b1 support
  dt-bindings: usb: renesas_gen3: Rename bindings documentation file to reflect IP block
  dt-bindings: usb-xhci: Add r8a774b1 support
  dt-bindings: rcar-gen3-phy-usb3: Add r8a774b1 support
  dt-bindings: usb: renesas_usbhs: Add r8a774b1 support
  dt-bindings: usb: renesas_usbhs: Rename bindings documentation file
  dt-bindings: dmaengine: usb-dmac: Add binding for r8a774b1
  dt-bindings: rcar-gen3-phy-usb2: Add r8a774b1 support
  arm64: dts: renesas: r8a774b1: Add Sound and Audio DMAC device nodes
  ASoC: rsnd: Document r8a774b1 bindings
  arm64: dts: renesas: r8a774a1: Remove audio port node
  arm64: dts: renesas: Add support for Advantech idk-1110wr LVDS panel
  arm64: dts: renesas: hihope-rzg2-ex: Add LVDS support
  drm: rcar-du: lvds: Add r8a774b1 support
  arm64: dts: renesas: hihope-rzg2-ex: Enable backlight
  arm64: dts: renesas: r8a774b1: Add PWM device nodes
  arm64: dts: renesas: r8a774b1: Add FDP1 device nodes
  arm64: dts: renesas: r8a774b1-hihope-rzg2n: Add display clock properties
  arm64: dts: renesas: r8a774b1: Add HDMI encoder instance
  arm64: dts: renesas: r8a774b1: Add DU device to DT
  drm: rcar-du: Add R8A774B1 support
  arm64: dts: renesas: hihope-common: Move du clk properties out of common dtsi
  arm64: dts: renesas: r8a774b1: Connect Ethernet-AVB to IPMMU-DS0
  arm64: dts: renesas: r8a774b1: Tie SYS-DMAC to IPMMU-DS0/1
  arm64: dts: renesas: r8a774b1: Add VSP instances
  arm64: dts: renesas: r8a774b1: Add FCPF and FCPV instances
  arm64: dts: renesas: r8a774b1: Add IPMMU device nodes
  iommu/ipmmu-vmsa: Hook up r8a774b1 DT matching code
  dt-bindings: iommu: ipmmu-vmsa: Add r8a774b1 support
  arm64: dts: renesas: r8a774b1: Add CAN and CAN FD support
  dt-bindings: can: rcar_canfd: document r8a774b1 support
  dt-bindings: can: rcar_can: document r8a774b1 support
  arm64: dts: renesas: r8a774b1: Add TMU device nodes
  clk: renesas: r8a774b1: Add TMU clock
  dt-bindings: timer: renesas: tmu: Document r8a774b1 bindings
  arm64: dts: renesas: r8a774b1: Add CMT device nodes
  dt-bindings: timer: renesas, cmt: Document r8a774b1 CMT support
  arm64: dts: renesas: r8a774b1: Add RZ/G2N thermal support
  thermal: rcar_gen3_thermal: Add r8a774b1 support
  dt-bindings: thermal: rcar-gen3-thermal: Add r8a774b1 support
  arm64: dts: renesas: r8a774b1: Add OPPs table for cpu devices
  arm64: dts: renesas: r8a774b1: Add I2C and IIC-DVFS support
  dt-bindings: i2c: sh_mobile: Add r8a774b1 support
  dt-bindings: i2c: sh_mobile: Rename bindings documentation file
  dt-bindings: i2c: rcar: Add r8a774b1 support
  dt-bindings: i2c: rcar: Rename bindings documentation file
  arm64: dts: renesas: r8a774b1-hihope-rzg2n: Enable HS400 mode
  arm64: dts: renesas: r8a774b1: Add SDHI support
  mmc: renesas_sdhi_internal_dmac: Add r8a774b1 support
  dt-bindings: mmc: renesas_sdhi: Add r8a774b1 support
  arm64: dts: renesas: r8a774b1: Add INTC-EX device node
  arm64: dts: renesas: hihope-rzg2-ex: Let the board specific DT decide about pciec1
  arm64: dts: renesas: r8a774b1: Add PCIe device nodes
  arm64: dts: renesas: r8a774b1: Add all MSIOF nodes
  arm64: dts: renesas: r8a774b1: Add RWDT node
  dt-bindings: watchdog: renesas-wdt: Document r8a774b1 support
  dt-bindings: watchdog: Rename bindings documentation file
  dt-bindings: spi: sh-msiof: Add r8a774b1 support
  arm64: dts: renesas: Add HiHope RZ/G2N sub board support
  arm64: dts: renesas: r8a774b1: Add Ethernet AVB node
  dt-bindings: net: ravb: Add support for r8a774b1 SoC
  arm64: dts: renesas: r8a774b1: Add GPIO device nodes
  dt-bindings: gpio: rcar: Add DT binding for r8a774b1
  arm64: dts: renesas: r8a774b1: Add SCIF and HSCIF nodes
  arm64: dts: renesas: r8a774b1: Add SYS-DMAC device nodes
  dt-bindings: dmaengine: rcar-dmac: Document R8A774B1 bindings
  CIP: Bump version suffix to -cip19 after merge from stable
  arm64: dts: renesas: r8a774c0: cat874: Sort nodes
  arm64: dts: renesas: Use ip=on for bootargs
  arm64: dts: renesas: r8a774c0: cat874: Add definition for 12V regulator
  arm64: dts: renesas: Update 'vsps' properties for readability
  arm64: dts: renesas: r8a774c0: Fix register range of display node
  arm64: dts: renesas: r8a774c0: Add missing assigned-clocks for CAN[01]
  arm64: dts: renesas: r8a774c0: Clean up CPU compatibles
  arm64: dts: renesas: r8a774c0: Add dynamic power coefficient
  arm64: dts: renesas: r8a774c0: Create thermal zone to support IPA
  thermal: rcar_thermal: update calculation formula for R-Car Gen3 SoCs
  dt-bindings: can: rcar_can: Complete documentation for RZ/G2[EM]
  dt-bindings: can: rcar_can: document r8a77965 support
  CIP: Bump version suffix to -cip18 after merge from stable
  CIP: Bump version suffix to -cip17 after merge from stable
  arm64: defconfig: Enable R8A774B1 SoC
  arm64: dts: renesas: Add HiHope RZ/G2N main board support
  arm64: dts: renesas: Initial r8a774b1 SoC device tree
  dt-bindings: serial: sh-sci: Document r8a774b1 bindings
  pinctrl: sh-pfc: pfc-r8a77965: Fix typo in pinmux macro for SCL3
  pinctrl: sh-pfc: r8a77965: Add R8A774B1 PFC support
  dt-bindings: pinctrl: sh-pfc: Document r8a774b1 PFC support
  pinctrl: sh-pfc: r8a77965: Use new macros for non-GPIO pins
  pinctrl: sh-pfc: r8a77965: Add TPU pins, groups and functions
  pinctrl: sh-pfc: r8a77965: Add I2C{0,3,5} pins, groups and functions
  pinctrl: sh-pfc: r8a77965: Add DRIF pins, groups and functions
  pinctrl: sh-pfc: r8a77965: Add TMU pins, groups and functions
  pinctrl: sh-pfc: r8a77965: Replace DU_DOTCLKIN2 by DU_DOTCLKIN3
  pinctrl: sh-pfc: r8a77965: Add CAN FD pins, groups and functions
  pinctrl: sh-pfc: r8a77965: Add CAN pins, groups and functions
  pinctrl: sh-pfc: r8a77965: Add VIN[4|5] groups/functions
  pinctrl: sh-pfc: r8a77965: Add Audio SSI pin support
  pinctrl: sh-pfc: r8a77965: Add Audio clock pin support
  pinctrl: sh-pfc: r8a77965: Add SATA pins, groups and functions
  clk: renesas: cpg-mssr: Add r8a774b1 support
  dt-bindings: clock: renesas: cpg-mssr: Document r8a774b1 binding
  dt-bindings: clk: Add r8a774b1 CPG Core Clock Definitions
  soc: renesas: rcar-rst: Add support for RZ/G2N
  dt-bindings: reset: rcar-rst: Document r8a774b1 reset module
  soc: renesas: rcar-sysc: Add r8a774b1 support
  soc: renesas: r8a774c0-sysc: Fix power request conflicts
  soc: renesas: r8a77990-sysc: Fix power request conflicts
  soc: renesas: r8a77980-sysc: Fix power request conflicts
  soc: renesas: r8a77970-sysc: Fix power request conflicts
  soc: renesas: r8a77965-sysc: Fix power request conflicts
  soc: renesas: r8a7796-sysc: Fix power request conflicts
  soc: renesas: r8a7795-sysc: Fix power request conflicts
  soc: renesas: rcar-sysc: Prepare for fixing power request conflicts
  dt-bindings: power: rcar-sysc: Document r8a774b1 sysc
  dt-bindings: power: Add r8a774b1 SYSC power domain definitions
  soc: renesas: Identify RZ/G2N
  soc: renesas: Add Renesas R8A774B1 config option
  dt-bindings: arm: renesas: Add HopeRun RZ/G2N boards
  dt-bindings: arm: renesas: Document RZ/G2N SoC DT bindings
  CIP: Bump version suffix to -cip16 after merge from stable
  CIP: Bump version suffix to -cip15 after merge from stable
  gitlab-ci: Use external linux-cip-pipelines repository to define CI
  arm64: dts: renesas: r8a774a1: Add SSIU support for sound
  ASoC: rsnd: add SSIU BUSIF support
  ASoC: rsnd: add .get_id/.get_id_sub
  ASoC: rsnd: move .get_status under rsnd_mod_ops
  ASoC: rsnd: merge .nolock_start and .prepare
  ASoC: rsnd: ssiu: Support to init different BUSIF instance
  ASoC: rsnd: ssiu: Support BUSIF other than BUSIF0
  ASoc: rsnd: dma: Calculate PDMACHCRE with consider of BUSIF
  ASoc: rsnd: dma: Calculate dma address with consider of BUSIF
  ASoC: rsnd: ssi: Check runtime channel number rather than hw_params
  ASoC: rsnd: ssi: Fix issue in dma data address assignment
  ASoC: rsnd: remove is_play parameter from hw_rule function
  ASoC: rsnd: add support for 8 bit S8 format
  ASoC: rsnd: add support for 16/24 bit slot widths
  ASoC: rsnd: add warning message to rsnd_kctrl_accept_runtime()
  CIP: Bump version suffix to -cip14 after merge from stable
  gitlab-ci: Remove test timeout
  gitlab-ci: Remove unofficial build configurations
  gitlab-ci: Split tests into separate jobs
  CIP: Bump version suffix to -cip13 after merge from stable
  arm64: dts: renesas: hihope-rzg2-ex: Enable CAN interfaces
  arm64: dts: renesas: r8a774a1: Add CANFD support
  arm64: dts: renesas: r8a774a1: Add missing assigned-clocks for CAN[01]
  dt-bindings: can: rcar_canfd: document r8a774a1 support
  arm64: dts: renesas: hihope-common: Add HDMI audio support
  arm64: dts: renesas: r8a774a1: Use extended audio dmac registers
  arm64: dts: renesas: cat874: Add BT support
  arm64: dts: renesas: cat874: Add WLAN support
  arm64: dts: renesas: hihope-common: Add WLAN support
  arm64: dts: renesas: hihope-common: Add BT support
  arm64: dts: renesas: hihope-common: Add PCA9654 I/O expander
  CIP: Bump version suffix to -cip12 after merge from stable
  arm64: dts: renesas: r8a774c0: Add CANFD support
  dt-bindings: can: rcar_canfd: document r8a774c0 support
  arm64: dts: renesas: cat874: Add HDMI audio
  arm64: dts: renesas: cat874: Add HDMI video support
  arm64: defconfig: Enable TDA19988
  arm64: dts: renesas: r8a774c0: Add display output support
  media: use strscpy() instead of strlcpy()
  drm: rcar-du: Replace EXT_CTRL_REGS feature flag with generation check
  drm: rcar-du: Disable unused DPAD outputs
  drm/rcar-du: Use drm_fbdev_generic_setup()
  drm: rcar-du: Reject modes that fail CRTC timing requirements
  drm: rcar-du: Fix external clock error checks
  drm: rcar-du: Fix vblank initialization
  drm: rcar-du: Fix the return value in case of error in 'rcar_du_crtc_set_crc_source()'
  drm/rcar-du: Replace drm_dev_unref with drm_dev_put
  drm: rcar-du: Enable configurable DPAD0 routing on Gen3
  drm: rcar-du: Improve non-DPLL clock selection
  drm: rcar-du: lvds: Adjust operating frequency for D3 and E3
  drm: rcar-du: lvds: Fix post-DLL divider calculation
  drm: rcar-du: Turn LVDS clock output on/off for DPAD0 output on D3/E3
  drm: rcar-du: lvds: Add API to enable/disable clock output
  drm: rcar-du: lvds: Don't fail probe if output is not connected on D3/E3
  drm: rcar-du: Simplify encoder registration
  drm: rcar-du: Move CRTC outputs bitmask to private CRTC state
  drm: rcar-du: lvds: add R8A774C0 support
  drm: rcar-du: Add r8a774c0 device support
  drm: rcar-du: Use LVDS PLL clock as dot clock when possible
  drm: rcar-du: Perform the initial CRTC setup from rcar_du_crtc_get()
  drm: rcar-du: lvds: D3/E3 support
  dt-bindings: display: renesas: lvds: Document r8a774c0 bindings
  dt-bindings: display: renesas: lvds: Add EXTAL and DU_DOTCLKIN clocks
  dt-bindings: display: renesas: du: Document r8a774c0 bindings
  media: dt-bindings: media: renesas-fcp: Add RZ/G2 support
  media: vsp1: Add RZ/G support
  CIP: Bump version suffix to -cip11 after merge from stable
  gitlab-ci: Always store job artifacts
  gitlab-ci: Increase test timeout to 60 minutes
  arm64: dts: renesas: hihope-common: Add HDMI support
  arm64: dts: renesas: r8a774a1: Add HDMI encoder instance
  arm64: dts: renesas: r8a774a1: Connect Ethernet-AVB to IPMMU-DS0
  arm64: dts: renesas: r8a774a1: Tie Audio-DMAC to IPMMU-MP
  arm64: dts: renesas: r8a774a1: Tie SYS-DMAC to IPMMU-DS0/1
  arm64: dts: renesas: r8a774a1: Add FDP1 instance
  arm64: dts: renesas: r8a774a1: Add DU device to DT
  arm64: dts: renesas: r8a774a1: Add VSP instances
  arm64: dts: renesas: hihope-rzg2-ex: Enable PCIe support
  arm64: dts: renesas: hihope-common: Declare pcie bus clock
  arm64: dts: renesas: r8a774a1: Add PCIe device nodes
  drm: rcar-du: Update framebuffer pitch and alignment limits for Gen3
  drm: rcar-du: Store V4L2 fourcc in rcar_du_format_info structure
  drm: rcar-du: Add support for missing pixel formats
  drm: rcar-du: Rename and document dpll_ch field
  drm: rcar-du: Rework clock configuration based on hardware limits
  drm: rcar-du: Support interlaced video output through vsp1
  drm: rcar-du: Don't use TV sync mode when not supported by the hardware
  drm: rcar-du: Cache DSYSR value to ensure known initial value
  drm: rcar-du: Add interlaced feature flag
  drm: rcar-du: Refactor Feature and Quirk definitions
  drm: rcar-du: dw-hdmi: Reject modes with a too high clock frequency
  drm: rcar-du: lvds: Add r8a774a1 support
  drm: rcar-du: Add R8A774A1 support
  PCI: rcar: Do not shadow the 'irq' variable
  PCI: rcar: Clean up debug messages
  PCI: rcar: Replace various variable types with unsigned ones for register values
  PCI: rcar: Replace unsigned long with u32/unsigned int in register accessors
  dt-bindings: display: renesas: Add r8a774a1 support
  dt-bindings: display: renesas: lvds: Document r8a774a1 bindings
  dt-bindings: display: renesas: du: Document the r8a774a1 bindings
  dt-bindings: PCI: rcar: Add device tree support for r8a774a1
  CIP: Bump version suffix to -cip10 after merge from stable
  arm64: dts: renesas: hihope-common: Enable USB3.0
  arm64: dts: renesas: hihope-common: Add USB 2.0 support
  arm64: dts: renesas: r8a774a1: Fix USB 2.0 clocks
  phy: renesas: rcar-gen3-usb2: fix imbalance powered flag
  arm64: dts: renesas: hihope-common: Remove "label" from LEDs
  arm64: dts: renesas: hihope-common: Add LEDs support
  arm64: dts: renesas: hihope-common: Add uSD and eMMC
  mmc: renesas_sdhi: prevent overflow for max_req_size
  mmc: tmio: introduce macro for max block size
  mmc: renesas_sdhi: Change HW adjustment register according to speed mode
  arm64: dts: renesas: r8a774a1: Add dynamic power coefficient
  arm64: dts: renesas: r8a774a1: Create thermal zone to support IPA
  arm64: dts: renesas: r8a774a1: Add CPU capacity-dmips-mhz
  arm64: dts: renesas: r8a774a1: Add CPU topology on r8a774a1 SoC
  arm64: dts: renesas: r8a774a1: Add operating points
  thermal: rcar_gen3_thermal: Update temperature conversion method
  thermal: rcar_gen3_thermal: Update calculation formula of IRQTEMP
  thermal: rcar_gen3_thermal: Update value of Tj_1
  thermal: rcar_gen3_thermal: Fix to show correct trip points number
  thermal: rcar_gen3_thermal: fix interrupt type
  thermal: rcar_gen3_thermal: Fix init value of IRQCTL register
  thermal: rcar_gen3_thermal: Register hwmon sysfs interface
  arm64: dts: renesas: r8a774a1: Add TMU device nodes
  clk: renesas: r8a774a1: Add TMU clock
  arm64: dts: renesas: r8a774a1: Add CMT device nodes
  arm64: dts: renesas: hihope-common: Add RWDT support
  watchdog: renesas_wdt: Add a few cycles delay
  watchdog: renesas_wdt: Use 'dev' instead of dereferencing it repeatedly
  watchdog: renesas_wdt: drop superfluous glob pattern
  watchdog: renesas_wdt: don't keep timer value during suspend/resume
  watchdog: renesas_wdt: Fix typos
  watchdog: renesas_wdt: stop when unregistering
  arm64: dts: renesas: Add HiHope RZ/G2M sub board support
  arm64: dts: renesas: hihope-common: Add pincontrol support to scif2/scif clock
  arm64: dts: renesas: Add HiHope RZ/G2M main board support
  dt-bindings: Add vendor prefix for HopeRun
  dt-bindings: arm: renesas: Add HopeRun RZ/G2[M] boards
  gitlab-ci: Start testing the r8a774a1-hihope-rzg2m-ex device
  arm64: dts: renesas: r8a774a1: Add clkp2 clock to CAN nodes
  arm64: dts: Remove inconsistent use of 'arm,armv8' compatible string
  arm64: dts: renesas: r8a774a1: Fix hsusb reg size
  arm64: dts: renesas: r8a774a1: Enable DMA for SCIF2
  arm64: dts: renesas: r8a774a1: Replace clock magic numbers
  arm64: dts: renesas: r8a774a1: Replace power magic numbers
  arm64: dts: renesas: r8a774a1: Add CAN nodes
  arm64: dts: renesas: Remove unneeded status from thermal nodes
  arm64: dts: renesas: Fix whitespace around assignments
  arm64: dts: renesas: r8a774a1: Add USB3.0 device nodes
  arm64: dts: renesas: r8a774a1: Add USB-DMAC and HSUSB device nodes
  arm64: dts: renesas: r8a774a1: Add USB2.0 phy and host(EHCI/OHCI) device nodes
  arm64: dts: renesas: r8a774a1: Add FCPF and FCPV instances
  arm64: dts: renesas: r8a774a1: Add audio support
  arm64: dts: renesas: r8a774a1: Add PWM device nodes
  arm64: dts: renesas: r8a774a1: Add Cortex-A53 CPU cores
  arm64: dts: renesas: r8a774a1: Add all MSIOF nodes
  arm64: dts: renesas: r8a774a1: Add IPMMU device nodes
  arm64: dts: renesas: r8a774a1: Add RZ/G2M thermal support
  arm64: dts: renesas: r8a774a1: Add I2C and IIC-DVFS support
  arm64: dts: renesas: r8a774a1: Add SDHI nodes
  arm64: dts: renesas: r8a774a1: Add GPIO device nodes
  arm64: dts: renesas: r8a774a1: Add pinctrl device node
  arm64: dts: renesas: r8a774a1: Add RWDT node
  arm64: dts: renesas: r8a774a1: Add Ethernet AVB node
  arm64: dts: renesas: r8a774a1: Add INTC-EX device node
  arm64: dts: renesas: r8a774a1: Add SCIF and HSCIF nodes
  arm64: dts: renesas: r8a774a1: Add SYS-DMAC controller nodes
  arm64: dts: renesas: Initial r8a774a1 SoC device tree
  mmc: renesas_sdhi_internal_dmac: set scatter/gather max segment size
  ravb: Avoid unsupported internal delay mode for R-Car E3/D3
  ravb: remove tx buffer addr 4byte alilgnment restriction for R-Car Gen3
  spi: sh-msiof: fix deferred probing
  dmaengine: rcar-dmac: Update copyright information
  dmaengine: rcar-dmac: set scatter/gather max segment size
  serial: sh-sci: Fix fallback to PIO in sci_dma_rx_complete()
  serial: sh-sci: Extract sci_dma_rx_reenable_irq()
  serial: sh-sci: Extract sci_dma_rx_chan_invalidate()
  serial: sh-sci: Fix crash in rx_timer_fn() on PIO fallback
  soc: renesas: rcar-sysc: Fix power domain control after system resume
  soc: renesas: rcar-sysc: Merge PM Domain registration and linking
  soc: renesas: rcar-sysc: Remove rcar_sysc_power_{down,up}() helpers
  clk: renesas: cpg-mssr: Remove error messages on out-of-memory conditions
  clk: renesas: cpg-mssr: Use genpd of_node instead of local copy
  gpio: rcar: Pedantic formatting
  gpio: rcar: select General Output Register to set output states
  gpio: rcar: reference device instead of platform device
  thermal: rcar_gen3_thermal: Add r8a774a1 support
  dt-bindings: dmaengine: usb-dmac: Add binding for r8a774a1
  dt-bindings: thermal: rcar-gen3-thermal: Add r8a774a1 support
  dt-bindings: usb: renesas_usbhs: Add r8a774a1 support
  dt-bindings: usb-xhci: Add r8a774c0 support
  dt-bindings: usb-xhci: Add r8a774a1 support
  dt-bindings: rcar-gen3-phy-usb3: Add r8a774a1 support
  dt-bindings: can: rcar_can: Add r8a774c0 support
  dt-bindings: can: rcar_can: Fix RZ/G2 CAN clocks
  dt-bindings: can: rcar_can: Add r8a774a1 support
  pinctrl: sh-pfc: sh73a0: Use new macros for non-GPIO pins
  pinctrl: sh-pfc: sh73a0: Add missing TO pin to tpu4_to3 group
  pinctrl: sh-pfc: sh73a0: Fix fsic_spdif pin groups
  pinctrl: sh-pfc: r8a7791: Fix scifb2_data_c pin group
  pinctrl: sh-pfc: r8a7791: Fix VIN1 versioned groups
  pinctrl: sh-pfc: r8a7791: Remove bogus marks from vin1_b_data18 group
  pinctrl: sh-pfc: r8a7791: Remove bogus ctrl marks from qspi_data4_b group
  pinctrl: sh-pfc: r8a77995: Remove unused PINMUX_IPSR_{MSEL2,PHYS}()
  pinctrl: sh-pfc: r8a7740: Add missing LCD0 marks to lcd0_data24_1 group
  pinctrl: sh-pfc: r8a7740: Add missing REF125CK pin to gether_gmii group
  pinctrl: sh-pfc: r8a7796: Remove placeholder I2C pin data
  pinctrl: sh-pfc: r8a7796: Use new macros for non-GPIO pins
  pinctrl: sh-pfc: r8a7796: Add TPU pins, groups and functions
  pinctrl: sh-pfc: r8a77990: Use new macros for non-GPIO pins
  pinctrl: sh-pfc: Move PIN_NONE to shared header file
  pinctrl: sh-pfc: Add PORT_GP_27 helper macro
  pinctrl: sh-pfc: rcar-gen3: Rename SEL_NDFC to SEL_NDF
  pinctrl: sh-pfc: rcar-gen3: Rename RTS{0,1,3,4}# pin function definitions
  pinctrl: sh-pfc: r8a77990: Fix MOD_SEL1 bit30 when using SSI_SCK2 and SSI_WS2
  pinctrl: sh-pfc: r8a77990: Fix MOD_SEL1 bit31 when using SIM0_D
  pinctrl: sh-pfc: r8a77990: Fix MOD_SEL0 bit16 when using NFALE and NFRB_N
  pinctrl: sh-pfc: rcar-gen3: Rename SEL_ADG_{A,B,C} to SEL_ADG{A,B,C}
  pinctrl: sh-pfc: rcar-gen3: Remove CC5_OSCOUT pin
  pinctrl: sh-pfc: rcar-gen3: Remove HDMI CEC pins, groups, and functions
  pinctrl: sh-pfc: Add missing #include <linux/errno.h>
  pinctrl: sh-pfc: rcar-gen3: Retain TDSELCTRL register across suspend/resume
  pinctrl: sh-pfc: r8a77990: Move CANFD pin groups and functions
  pinctrl: sh-pfc: r8a77990: Rename IOCTRLx registers
  pinctrl: sh-pfc: r8a7796: Move CANFD pin groups and functions
  pinctrl: sh-pfc: r8a7796: Deduplicate VIN5 pin definitions
  pinctrl: sh-pfc: r8a7796: Add I2C{0,3,5} pins, groups and functions
  pinctrl: sh-pfc: r8a7796: Fix VIN versioned groups
  pinctrl: sh-pfc: Validate pin tables at runtime
  pinctrl: sh-pfc: Add check for empty pinmux groups/functions
  pinctrl: sh-pfc: Mark run-time debug code __init
  pinctrl: sh-pfc: Correct printk level of group reference warning
  pinctrl: sh-pfc: Add new non-GPIO helper macros
  pinctrl: sh-pfc: Add SH_PFC_PIN_CFG_PULL_UP_DOWN shorthand
  pinctrl: sh-pfc: Rename 2-parameter CPU_ALL_PORT() variant
  pinctrl: sh-pfc: Improve PINMUX_IPSR_PHYS() documentation
  pinctrl: sh-pfc: Validate enum IDs for regs with variable-width fields
  pinctrl: sh-pfc: Validate enum IDs for regs with fixed-width fields
  pinctrl: sh-pfc: Absorb enum IDs in PINMUX_DATA_REG() macro
  pinctrl: sh-pfc: Absorb enum IDs in PINMUX_CFG_REG_VAR() macro
  pinctrl: sh-pfc: Absorb enum IDs in PINMUX_CFG_REG() macro
  pinctrl: sh-pfc: Validate fixed-size field widths at build time
  pinctrl: sh-pfc: Make pinmux_cfg_reg.var_field_width[] variable-length
  pinctrl: sh-pfc: Validate pins/marks in pin groups at build time
  pinctrl: sh-pfc: Add physical pin multiplexing helper macros
  pinctrl: sh-pfc: Validate pinmux tables at runtime when debugging
  pinctrl: sh-pfc: Print actual field width for variable-width fields
  CIP: Bump version suffix to -cip9 after merge from stable
  staging: m57621-mmc: delete driver from the tree.
  CIP: Bump version suffix to -cip8 after merge from stable
  Update to run all CIP arm, arm64 and x86 configs
  Update CI to use the latest linux-cip-ci containers
  CIP: Bump version suffix to -cip7 after merge from stable
  arm64: dts: renesas: r8a774c0: sort subnodes of the soc node
  arm64: dts: renesas: r8a774c0: Remove invalid compatible value for CSI40
  arm64: dts: renesas: r8a774c0: Fix SCIF5 DMA channels
  arm64: dts: renesas: r8a774c0: Enable DMA for SCIF2
  arm64: dts: renesas: r8a774c0-cat874: Add RWDT support
  arm64: dts: renesas: r8a774c0-cat874: Add LEDs support
  arm64: dts: renesas: r8a774c0-cat874: add RTC support
  arm64: defconfig: enable RX-8581 config option
  rtc: rx8581: Add support for Epson rx8571 RTC
  dt-bindings: rtc: add rx8571 compatible
  rtc: nvmem: remove nvmem from struct rtc_device
  rtc: nvmem: use devm_nvmem_register()
  arm64: dts: renesas: cat874: Add USB-HOST support
  phy: renesas: rcar-gen3-usb2: enable/disable independent irqs
  phy: renesas: rcar-gen3-usb2: Use pdev's device pointer on dev_vdbg()
  phy: rcar-gen3-usb2: Add support for r8a77470
  phy: renesas: rcar-gen3-usb2: follow the hardware manual procedure
  phy: renesas: rcar-gen3-usb2: add is_otg_channel to use "role" sysfs
  phy: renesas: rcar-gen3-usb2: change a condition "dr_mode"
  phy: renesas: rcar-gen3-usb2: add conditions for uses_otg_pins == false
  phy: renesas: rcar-gen3-usb2: unify OBINTEN handling
  phy: renesas: rcar-gen3-usb2: Check a property to use otg pins
  phy: renesas: rcar-gen3-usb2: Rename has_otg_pins to uses_otg_pins
  phy: renesas: rcar-gen3-usb2: fix vbus_ctrl for role sysfs
  arm64: dts: renesas: cat875: Add CAN support
  arm64: dts: renesas: r8a774c0: Add clkp2 clock to CAN nodes
  arm64: dts: renesas: r8a774c0: Add CAN nodes
  arm64: dts: renesas: r8a774c0: Fix cpu nodes style
  arm64: dts: renesas: r8a774c0: Add OPPs table for cpu devices
  clk: renesas: rcar-gen3: Remove unused variable
  clk: renesas: rcar-gen3: Fix cpg_sd_clock_round_rate() return value
  clk: renesas: rcar-gen3: Correct parent clock of Audio-DMAC
  clk: renesas: rcar-gen3: Correct parent clock of SYS-DMAC
  clk: renesas: rcar-gen3: Correct parent clock of HS-USB
  clk: renesas: rcar-gen3: Correct parent clock of EHCI/OHCI
  clk: renesas: r8a774c0: Add Z2 clock
  clk: renesas: rcar-gen3: Support Z and Z2 clocks with high frequency parents
  math64: New DIV64_U64_ROUND_CLOSEST helper
  clk: renesas: rcar-gen3: Remove CLK_TYPE_GEN3_Z2
  clk: renesas: rcar-gen3: Parameterise Z and Z2 clock offset
  clk: renesas: rcar-gen3: Parameterise Z and Z2 clock fixed divisor
  clk: renesas: rcar-gen3: Pass name/offset to cpg_sd_clk_register()
  clk: renesas: r8a774a1: Fix LAST_DT_CORE_CLK
  clk: renesas: rcar-gen3: Add spinlock
  clk: renesas: rcar-gen3: Factor out cpg_reg_modify()
  clk: renesas: r8a774a1: Add missing CANFD clock
  clk: renesas: Remove usage of CLK_IS_BASIC
  clk: renesas: rcar-gen3: Add HS400 quirk for SD clock
  clk: renesas: rcar-gen3: Add documentation for SD clocks
  clk: renesas: rcar-gen3: Set state when registering SD clocks
  clk: renesas: r8a774a1: Add CPEX clock
  CIP: Bump version suffix to -cip6 after merge from stable
  Add gitlab-ci.yaml
  CIP: Bump version suffix to -cip5 after merge from stable
  CIP: Bump version suffix to -cip4 after merge from stable
  CIP: Bump version suffix to -cip3 after merge from stable
  dt-bindings: Add vendor prefix for Silicon Linux.
  CIP: Bump version suffix to -cip2 after Renesas patches
  arm64: defconfig: Enable R-Car thermal driver
  arm64: dts: renesas: r8a774c0: Add thermal support
  dt-bindings: thermal: rcar-thermal: add R8A774C0 support
  thermal: rcar_thermal: add R8A774C0 support
  arm64: dts: renesas: r8a774c0: Connect RZ/G2E Audio-DMAC to IPMMU
  arm64: dts: renesas: r8a774c0: Connect RZ/G2E AVB to IPMMU
  arm64: dts: renesas: r8a774c0: Connect RZ/G2E SYS-DMAC to IPMMU
  arm64: dts: renesas: r8a774c0: Add PWM support
  dt-bindings: pwm: rcar: Add r8a774c0 support
  dt-bindings: pwm: rcar: Add r8a774a1 support
  arm64: dts: renesas: r8a774c0: Add audio support
  ASoC: rsnd: Add r8a774c0 support
  ASoC: rsnd: Add r8a774a1 support
  arm64: dts: renesas: r8a774c0: Add VIN and CSI-2 device nodes
  media: dt-bindings: rcar-csi2: Add r8a774c0
  media: dt-bindings: rcar-vin: Add R8A774C0 support
  media: rcar-csi2: Add support for RZ/G2E
  media: rcar-csi2: Fix PHTW table values for E3/V3M
  media: rcar-csi2: Handle per-SoC number of channels
  media: rcar: rcar-csi2: Update V3M/E3 PHTW tables
  media: rcar-csi2: Add R8A77990 support
  media: rcar-vin: Add support for RZ/G2E
  media: rcar-vin: Add support for R-Car R8A77990
  arm64: dts: renesas: r8a774c0: Add IPMMU device nodes
  dt-bindings: iommu: ipmmu-vmsa: Add r8a774c0 support
  dt-bindings: iommu: ipmmu-vmsa: Add r8a774a1 support
  iommu/ipmmu-vmsa: Hook up r8a774c0 DT matching code
  iommu/ipmmu-vmsa: Modify ipmmu_slave_whitelist() to check SoC revisions
  iommu/ipmmu-vmsa: Hook up R8A774A1 DT maching code
  arm64: dts: renesas: r8a774c0: Add USB3.0 device nodes
  usb: gadget: udc: renesas_usb3: Add bindings for r8a774c0
  usb: gadget: udc: renesas_usb3: Add r8a774a1 support
  usb: gadget: udc: renesas_usb3: add support for r8a774c0
  usb: gadget: udc: renesas_usb3: add a safety connection way for forced_b_device
  usb: gadget: udc: renesas_usb3: add support for r8a77990
  arm64: dts: renesas: r8a774c0: Add USB-DMAC and HSUSB device nodes
  dt-bindings: dmaengine: usb-dmac: Add binding for r8a774c0
  dt-bindings: usb: renesas_usbhs: Add r8a774c0 support
  dt-bindings: usb: renesas_usbhs: add clock-names property
  Revert "usb: renesas_usbhs: add extcon notifier to set mode for non-otg channel"
  usb: renesas_usbhs: Add multiple clocks management
  usb: renesas_usbhs: Add reset_control
  usb: renesas_usbhs: add support for RZ/G2E
  arm64: dts: renesas: r8a774c0: Add USB2.0 phy and host device nodes
  dt-bindings: rcar-gen3-phy-usb2: Add r8a774c0 support
  dt-bindings: rcar-gen3-phy-usb2: Add r8a774a1 support
  arm64: renesas: Enable GPIOLIB to allow GPIO driver selection
  arm64: enable CMT/TMU support for Renesas SoC
  clocksource/drivers/sh_tmu: Convert to SPDX identifiers
  arm64: dts: renesas: r8a774c0: Add TMU device nodes
  dt-bindings: timer: renesas: tmu: Document r8a774c0 bindings
  clk: renesas: r8a774c0: Fix LAST_DT_CORE_CLK
  clk: renesas: r8a774c0: Add TMU clock
  clk: renesas: r8a774c0: Correct parent clock of DU
  clk: renesas: r8a774c0: Add missing CANFD clock
  arm64: dts: renesas: r8a774c0: Add CMT device nodes
  dt-bindings: timer: renesas, cmt: Document r8a774c0 CMT support
  dt-bindings: timer: renesas, cmt: Document r8a774a1 CMT support
  clocksource/drivers/sh_cmt: Add R-Car gen3 support
  dt-bindings: timer: renesas: cmt: document R-Car gen3 support
  clocksource/drivers/sh_cmt: Properly line-wrap sh_cmt_of_table[] initializer
  clocksource/drivers/sh_cmt: Fix clocksource width for 32-bit machines
  clocksource/drivers/sh_cmt: Fixup for 64-bit machines
  clocksource/drivers/sh_cmt: Convert to SPDX identifiers
  pinctrl: sh-pfc: r8a77990: Add DRIF pins, groups and functions
  pinctrl: sh-pfc: r8a77990: Add TMU pins, groups and functions
  pinctrl: sh-pfc: r8a77990: GP6_9 does not have pull-down capability
  pinctrl: sh-pfc: r8a77990: Fix MOD_SEL bit numbering
  pinctrl: sh-pfc: r8a77990: Fix MOD_SEL0 bit2 when using RX2, TX2 and SCK2
  pinctrl: sh-pfc: r8a77990: Fix MOD_SEL0 bit3 when using TX0
  pinctrl: sh-pfc: r8a77990: Fix MOD_SEL0 SEL_I2C1 field width
  pinctrl: sh-pfc: r8a77990: Fix IOCTRL reg state after s2ram on R-Car E3
  pinctrl: sh-pfc: r8a77990: Add CAN FD pins, groups and functions
  pinctrl: sh-pfc: r8a77990: Add CAN pins, groups and functions
  arm64: dts: renesas: cat875: Enable PCIe support
  arm64: dts: renesas: r8a774c0-cat874: Add pciec0 support
  arm64: dts: renesas: r8a774c0: Add PCIe device node
  dt-bindings: PCI: rcar: Add device tree support for r8a774c0
  arm64: dts: renesas: r8a774c0: Add MSIOF nodes
  spi: sh-msiof: Add r8a774c0 support
  spi: sh-msiof: Add r8a774a1 support
  arm64: dts: renesas: r8a774c0: Add I2C and IIC-DVFS support
  dt-bindings: i2c: rcar: Add r8a774c0 support
  i2c: sh_mobile: Add support for r8a774c0 (RZ/G2E)
  i2c: sh_mobile: add support for r8a77990 (R-Car E3)
  dt-bindings: i2c: sh_mobile: Add r8a774c0 support
  i2c: sh_mobile: document support for r8a77990 (R-Car E3)
  pinctrl: sh-pfc: r8a77990: Add HSCIF pins, groups, and functions
  pinctrl: sh-pfc: r8a77990: Add VIN[4|5] groups/functions
  pinctrl: sh-pfc: Add optional arg to VIN_DATA_PIN_GROUP
  pinctrl: sh-pfc: Reduce kernel size for narrow VIN channels
  arm64: dts: renesas: r8a774c0: Add watchdog support
  dt-bindings: watchdog: renesas-wdt: Document r8a774c0 support
  arm64: dts: renesas: cat875: Add ethernet support
  arm64: dts: renesas: r8a774c0: Add Ethernet AVB node
  dt-bindings: net: ravb: Add support for r8a774c0 SoC
  arm64: dts: renesas: r8a774c0-cat874: Add uSD support
  arm64: dts: renesas: r8a774c0: Add SDHI nodes
  mmc: renesas_sdhi_internal_dmac: Whitelist r8a774c0
  dt-bindings: mmc: renesas_sdhi: Add r8a774c0 support
  dt-bindings: mmc: renesas_sdhi: Add r8a77470 support
  mmc: renesas_sdhi_internal_dmac: Whitelist r8a774a1
  mmc: renesas_sdhi: Add r8a774a1 support
  pinctrl: sh-pfc: r8a77990: Add voltage switch operations for SDHI
  pinctrl: sh-pfc: r8a77990: Add SDHI pins, groups and functions
  pinctrl: sh-pfc: r8a77990: Add Audio SSI pins, groups and functions
  pinctrl: sh-pfc: r8a77990: Add Audio clock pins, groups and functions
  arm64: dts: renesas: r8a774c0-cat874: Add pincontrol support to scif2
  arm64: dts: renesas: r8a774c0: Add GPIO device nodes
  dt-bindings: gpio: rcar: Add r8a774c0 (RZ/G2E) support
  dt-bindings: gpio: rcar: Add r8a774a1 (RZ/G2M) support
  arm64: dts: renesas: r8a774c0: Add PFC support
  arm64: dts: renesas: r8a774c0: Add INTC-EX device node
  pinctrl: sh-pfc: r8a77990: Add INTC-EX pins, groups and function
  pinctrl: sh-pfc: rcar: Rename automotive-only arrays to automotive
  arm64: dts: renesas: r8a774c0: Add secondary CA53 CPU core
  clk: renesas: cpg-mssr: Add r8a774c0 support
  dt-bindings: clock: renesas: cpg-mssr: Document r8a774c0
  clk: renesas: cpg-mssr: Add r8a774a1 support
  clk: renesas: rcar-gen3: Add support for mode pin clock selection
  clk: renesas: rcar-gen3: Add support for RCKSEL clock selection
  clk: renesas: cpg-mssr: Add support for fixed rate clocks
  clk: renesas: rcar-gen3: Add support for OSC EXTAL predivider
  clk: renesas: Add r8a774a1 CPG Core Clock Definitions
  clk: renesas: Add r8a774c0 CPG Core Clock Definitions
  arm64: dts: renesas: r8a774c0: Add SCIF and HSCIF nodes
  dt-bindings: serial: sh-sci: Document r8a774c0 bindings
  dt-bindings: serial: sh-sci: Document r8a774a1 bindings
  arm64: dts: renesas: r8a774c0: Add SYS-DMAC controller nodes
  dmaengine: rcar-dmac: Document R8A774C0 bindings
  dmaengine: rcar-dmac: Document R8A774A1 bindings
  arm64: dts: renesas: Add Si-Linux EK874 board support
  arm64: dts: renesas: Add Si-Linux CAT874 board support
  arm64: dts: renesas: Initial device tree for r8a774c0
  dt-bindings: arm: Add si-linux cat87[45] boards
  ARM: dts: socfpga: Rename socfpga_cyclone5_de0_{sockit, nano_soc}
  dt-bindings: irqchip: renesas-irqc: Document r8a774c0 support
  soc: renesas: rcar-rst: Add support for RZ/G2E
  dt-bindings: reset: rcar-rst: Document r8a774c0 rst
  soc: renesas: rcar-rst: Add support for RZ/G2M
  soc: renesas: rcar-sysc: Add r8a774c0 support
  dt-bindings: power: rcar-sysc: Document r8a774c0 sysc
  soc: renesas: rcar-sysc: Add r8a774a1 support
  dt-bindings: power: Add r8a774c0 SYSC power domain definitions
  dt-bindings: power: Add r8a774a1 SYSC power domain definitions
  arm64: defconfig: enable R8A774C0 SoC
  arm64: defconfig: enable R8A774A1 SoC
  arm64: Add Renesas R8A774C0 support
  arm64: Add Renesas R8A774A1 support
  soc: renesas: Identify RZ/G2E
  soc: renesas: Identify RZ/G2M
  dt-bindings: arm: Fix RZ/G2E part number
  dt-bindings: arm: Document RZ/G2E SoC DT bindings
  dt-bindings: arm: Document RZ/G2M SoC DT bindings
  pinctrl: sh-pfc: r8a77990: Add R8A774C0 PFC support
  pinctrl: sh-pfc: r8a77990: Add MSIOF pins, groups and functions
  pinctrl: sh-pfc: r8a77990: Add DU pins, groups and function
  pinctrl: sh-pfc: r8a77990: Add PWM pins, groups and functions
  dt-bindings: pinctrl: sh-pfc: Document r8a774c0 PFC support
  pinctrl: sh-pfc: r8a7796: Add R8A774A1 PFC support
  dt-bindings: pinctrl: sh-pfc: Document r8a774a1 PFC support
  CIP: Add a number to the version suffix

Signed-off-by: bengris32 <bengris32@protonmail.ch>
Change-Id: I8df832a466b4899d9b12006b6238f003c5aebd26
Signed-off-by: bengris32 <bengris32@protonmail.ch>
2025-03-19 23:15:11 +00:00
Nathan Chancellor
e959651145 kbuild: Switch to 'f' variants of integrated assembler flag
It has been brought up a few times in various code reviews that clang
3.5 introduced -f{,no-}integrated-as as the preferred way to enable and
disable the integrated assembler, mentioning that -{no-,}integrated-as
are now considered legacy flags.

Switch the kernel over to using those variants in case there is ever a
time where clang decides to remove the non-'f' variants of the flag.

Also, fix a typo in a comment ("intergrated" -> "integrated").

Link: https://releases.llvm.org/3.5.0/tools/clang/docs/ReleaseNotes.html#new-compiler-flags
Reviewed-by: Nick Desaulniers <ndesaulniers@google.com>
Signed-off-by: Nathan Chancellor <nathan@kernel.org>
Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Change-Id: I55090cfe8541905c1a5f1808c8ebc285ef362df4
2025-02-10 12:48:05 +00:00
Masahiro Yamada
2f324820f3 modpost: fix the missed iteration for the max bit in do_input()
[ Upstream commit bf36b4bf1b9a7a0015610e2f038ee84ddb085de2 ]

This loop should iterate over the range from 'min' to 'max' inclusively.
The last interation is missed.

Fixes: 1d8f430c15 ("[PATCH] Input: add modalias support")
Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Tested-by: John Paul Adrian Glaubitz <glaubitz@physik.fu-berlin.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>
2025-02-07 03:34:27 +01:00
Masahiro Yamada
2ae0d40ada modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
[ Upstream commit 77dc55a978e69625f9718460012e5ef0172dc4de ]

When building a 64-bit kernel on a 32-bit build host, incorrect
input MODULE_ALIAS() entries may be generated.

For example, when compiling a 64-bit kernel with CONFIG_INPUT_MOUSEDEV=m
on a 64-bit build machine, you will get the correct output:

  $ grep MODULE_ALIAS drivers/input/mousedev.mod.c
  MODULE_ALIAS("input:b*v*p*e*-e*1,*2,*k*110,*r*0,*1,*a*m*l*s*f*w*");
  MODULE_ALIAS("input:b*v*p*e*-e*1,*2,*k*r*8,*a*m*l*s*f*w*");
  MODULE_ALIAS("input:b*v*p*e*-e*1,*3,*k*14A,*r*a*0,*1,*m*l*s*f*w*");
  MODULE_ALIAS("input:b*v*p*e*-e*1,*3,*k*145,*r*a*0,*1,*18,*1C,*m*l*s*f*w*");
  MODULE_ALIAS("input:b*v*p*e*-e*1,*3,*k*110,*r*a*0,*1,*m*l*s*f*w*");

However, building the same kernel on a 32-bit machine results in
incorrect output:

  $ grep MODULE_ALIAS drivers/input/mousedev.mod.c
  MODULE_ALIAS("input:b*v*p*e*-e*1,*2,*k*110,*130,*r*0,*1,*a*m*l*s*f*w*");
  MODULE_ALIAS("input:b*v*p*e*-e*1,*2,*k*r*8,*a*m*l*s*f*w*");
  MODULE_ALIAS("input:b*v*p*e*-e*1,*3,*k*14A,*16A,*r*a*0,*1,*20,*21,*m*l*s*f*w*");
  MODULE_ALIAS("input:b*v*p*e*-e*1,*3,*k*145,*165,*r*a*0,*1,*18,*1C,*20,*21,*38,*3C,*m*l*s*f*w*");
  MODULE_ALIAS("input:b*v*p*e*-e*1,*3,*k*110,*130,*r*a*0,*1,*20,*21,*m*l*s*f*w*");

A similar issue occurs with CONFIG_INPUT_JOYDEV=m. On a 64-bit build
machine, the output is:

  $ grep MODULE_ALIAS drivers/input/joydev.mod.c
  MODULE_ALIAS("input:b*v*p*e*-e*3,*k*r*a*0,*m*l*s*f*w*");
  MODULE_ALIAS("input:b*v*p*e*-e*3,*k*r*a*2,*m*l*s*f*w*");
  MODULE_ALIAS("input:b*v*p*e*-e*3,*k*r*a*8,*m*l*s*f*w*");
  MODULE_ALIAS("input:b*v*p*e*-e*3,*k*r*a*6,*m*l*s*f*w*");
  MODULE_ALIAS("input:b*v*p*e*-e*1,*k*120,*r*a*m*l*s*f*w*");
  MODULE_ALIAS("input:b*v*p*e*-e*1,*k*130,*r*a*m*l*s*f*w*");
  MODULE_ALIAS("input:b*v*p*e*-e*1,*k*2C0,*r*a*m*l*s*f*w*");

However, on a 32-bit machine, the output is incorrect:

  $ grep MODULE_ALIAS drivers/input/joydev.mod.c
  MODULE_ALIAS("input:b*v*p*e*-e*3,*k*r*a*0,*20,*m*l*s*f*w*");
  MODULE_ALIAS("input:b*v*p*e*-e*3,*k*r*a*2,*22,*m*l*s*f*w*");
  MODULE_ALIAS("input:b*v*p*e*-e*3,*k*r*a*8,*28,*m*l*s*f*w*");
  MODULE_ALIAS("input:b*v*p*e*-e*3,*k*r*a*6,*26,*m*l*s*f*w*");
  MODULE_ALIAS("input:b*v*p*e*-e*1,*k*11F,*13F,*r*a*m*l*s*f*w*");
  MODULE_ALIAS("input:b*v*p*e*-e*1,*k*11F,*13F,*r*a*m*l*s*f*w*");
  MODULE_ALIAS("input:b*v*p*e*-e*1,*k*2C0,*2E0,*r*a*m*l*s*f*w*");

When building a 64-bit kernel, BITS_PER_LONG is defined as 64. However,
on a 32-bit build machine, the constant 1L is a signed 32-bit value.
Left-shifting it beyond 32 bits causes wraparound, and shifting by 31
or 63 bits makes it a negative value.

The fix in commit e0e9263271 ("[PATCH] PATCH: 1 line 2.6.18 bugfix:
modpost-64bit-fix.patch") is incorrect; it only addresses cases where
a 64-bit kernel is built on a 64-bit build machine, overlooking cases
on a 32-bit build machine.

Using 1ULL ensures a 64-bit width on both 32-bit and 64-bit machines,
avoiding the wraparound issue.

Fixes: e0e9263271 ("[PATCH] PATCH: 1 line 2.6.18 bugfix: modpost-64bit-fix.patch")
Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Stable-dep-of: bf36b4bf1b9a ("modpost: fix the missed iteration for the max bit in do_input()")
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>
2025-02-07 03:34:27 +01:00
Thomas Gleixner
5600e92aa1 modpost: Add .irqentry.text to OTHER_SECTIONS
commit 7912405643a14b527cd4a4f33c1d4392da900888 upstream.

The compiler can fully inline the actual handler function of an interrupt
entry into the .irqentry.text entry point. If such a function contains an
access which has an exception table entry, modpost complains about a
section mismatch:

  WARNING: vmlinux.o(__ex_table+0x447c): Section mismatch in reference ...

  The relocation at __ex_table+0x447c references section ".irqentry.text"
  which is not in the list of authorized sections.

Add .irqentry.text to OTHER_SECTIONS to cure the issue.

Reported-by: Sergey Senozhatsky <senozhatsky@chromium.org>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Cc: stable@vger.kernel.org # needed for linux-5.4-y
Link: https://lore.kernel.org/all/20241128111844.GE10431@google.com/
Signed-off-by: Masahiro Yamada <masahiroy@kernel.org>
Signed-off-by: Sergey Senozhatsky <senozhatsky@chromium.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>
2025-02-07 03:34:24 +01:00
bengris32
dc38585c87 Merge branch 'android-4.19-stable' of https://android.googlesource.com/kernel/common into lineage-21
* 'android-4.19-stable' of https://android.googlesource.com/kernel/common:
  Revert "UPSTREAM: unicode: Don't special case ignorable code points"
  Reapply "UPSTREAM: unicode: Don't special case ignorable code points"
  Revert "UPSTREAM: unicode: Don't special case ignorable code points"
  Linux 4.19.325
  sh: intc: Fix use-after-free bug in register_intc_controller()
  modpost: remove incorrect code in do_eisa_entry()
  9p/xen: fix release of IRQ
  9p/xen: fix init sequence
  block: return unsigned int from bdev_io_min
  jffs2: fix use of uninitialized variable
  ubi: fastmap: Fix duplicate slab cache names while attaching
  ubifs: Correct the total block count by deducting journal reservation
  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
  NFSv4.0: Fix a use-after-free problem in the asynchronous open()
  um: Fix the return value of elf_core_copy_task_fpregs
  rpmsg: glink: Propagate TX failures in intentless mode as well
  NFSD: Prevent a potential integer overflow
  lib: string_helpers: silence snprintf() output truncation warning
  usb: dwc3: gadget: Fix checking for number of TRBs left
  media: wl128x: Fix atomicity violation in fmc_send_cmd()
  HID: wacom: Interpret tilt data from Intuos Pro BT as signed values
  block: fix ordering between checking BLK_MQ_S_STOPPED request adding
  arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled
  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  um: vector: Do not use drvdata in release
  serial: 8250: omap: Move pm_runtime_get_sync
  um: net: Do not use drvdata in release
  um: ubd: Do not use drvdata in release
  ubi: wl: Put source PEB into correct list if trying locking LEB failed
  spi: Fix acpi deferred irq probe
  netfilter: ipset: add missing range check in bitmap_ip_uadt
  Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit"
  serial: sh-sci: Clean sci_ports[0] after at earlycon exit
  Revert "usb: gadget: composite: fix OS descriptors w_value logic"
  ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
  Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}()
  tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler
  PCI: Fix use-after-free of slot->bus on hot remove
  ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata()
  jfs: xattr: check invalid xattr size more strictly
  ext4: fix FS_IOC_GETFSMAP handling
  ext4: supress data-race warnings in ext4_free_inodes_{count,set}()
  usb: ehci-spear: fix call balance of sehci clk handling routines
  apparmor: fix 'Do simple duplicate message elimination'
  misc: apds990x: Fix missing pm_runtime_disable()
  USB: chaoskey: Fix possible deadlock chaoskey_list_lock
  USB: chaoskey: fail open after removal
  usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read()
  net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken
  marvell: pxa168_eth: fix call balance of pep->clk handling routines
  net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration
  tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets
  net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device
  power: supply: core: Remove might_sleep() from power_supply_put()
  vfio/pci: Properly hide first-in-list PCIe extended capability
  NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir()
  NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
  rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length
  rpmsg: glink: Fix GLINK command prefix
  rpmsg: glink: Send READ_NOTIFY command in FIFO full case
  rpmsg: glink: Add TX_DATA_CONT command while sending
  m68k: coldfire/device.c: only build FEC when HW macros are defined
  m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x
  PCI: cpqphp: Fix PCIBIOS_* return value confusion
  PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads
  perf probe: Correct demangled symbols in C++ program
  clk: clk-axi-clkgen: make sure to enable the AXI bus clock
  clk: axi-clkgen: use devm_platform_ioremap_resource() short-hand
  dt-bindings: clock: axi-clkgen: include AXI clk
  dt-bindings: clock: adi,axi-clkgen: convert old binding to yaml format
  fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
  fbdev/sh7760fb: Alloc DMA memory from hardware device
  powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static
  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
  scsi: fusion: Remove unused variable 'rc'
  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  mfd: rt5033: Fix missing regmap_del_irq_chip()
  RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey
  mtd: rawnand: atmel: Fix possible memory leak
  cpufreq: loongson2: Unregister platform_driver on failure
  mfd: da9052-spi: Change read-mask to write-mask
  powerpc/vdso: Flag VDSO64 entry points as functions
  trace/trace_event_perf: remove duplicate samples on the first tracepoint event
  netpoll: Use rcu_access_pointer() in netpoll_poll_lock
  ALSA: 6fire: Release resources at card release
  ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
  ALSA: us122l: Use snd_card_free_when_closed() at disconnection
  net: rfkill: gpio: Add check for clk_enable()
  drm/etnaviv: hold GPU lock across perfmon sampling
  drm/etnaviv: fix power register offset on GC300
  drm/etnaviv: dump: fix sparse warnings
  drm/etnaviv: consolidate hardware fence handling in etnaviv_gpu
  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
  bpf: Fix the xdp_adjust_tail sample prog issue
  drm/omap: Fix locking in omap_gem_new_dmabuf()
  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
  drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused
  firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
  regmap: irq: Set lockdep class for hierarchical IRQ domains
  ARM: dts: cubieboard4: Fix DCDC5 regulator constraints
  mmc: mmc_spi: drop buggy snprintf()
  soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
  time: Fix references to _msecs_to_jiffies() handling of values
  crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()
  crypto: bcm - add error check in the ahash_hmac_init function
  crypto: cavium - Fix the if condition to exit loop after timeout
  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
  EDAC/fsl_ddr: Fix bad bit shift operations
  hfsplus: don't query the device logical block size multiple times
  s390/syscalls: Avoid creation of arch/arch/ directory
  acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block()
  m68k: mvme147: Reinstate early console
  m68k: mvme16x: Add and use "mvme16x.h"
  m68k: mvme147: Fix SCSI controller IRQ numbers
  initramfs: avoid filename buffer overrun
  nvme: fix metadata handling in nvme-passthrough
  proc/softirqs: replace seq_printf with seq_put_decimal_ull_width
  net: usb: qmi_wwan: add Quectel RG650V
  x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB
  selftests/watchdog-test: Fix system accidentally reset after watchdog-test
  mac80211: fix user-power when emulating chanctx
  ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet
  mm: revert "mm: shmem: fix data-race in shmem_getattr()"
  kbuild: Use uname for LINUX_COMPILE_HOST detection
  media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
  Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
  ocfs2: fix UBSAN warning in ocfs2_verify_volume()
  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
  ocfs2: uncache inode which has failed entering the group
  netlink: terminate outstanding dump on socket close
  Linux 4.19.324
  9p: fix slab cache name creation for real
  net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition
  fs: Fix uninitialized value issue in from_kuid and from_kgid
  powerpc/powernv: Free name on error in opal_event_init()
  sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML
  bpf: use kvzmalloc to allocate BPF verifier environment
  HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad
  9p: Avoid creating multiple slab caches with the same name
  ALSA: usb-audio: Add endianness annotations
  vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
  hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
  ALSA: usb-audio: Add quirks for Dell WD19 dock
  ALSA: usb-audio: Support jack detection on Dell dock
  ALSA: usb-audio: Add custom mixer status quirks for RME CC devices
  ALSA: pcm: Return 0 when size < start_threshold in capture
  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
  irqchip/gic-v3: Force propagation of the active state with a read-back
  USB: serial: option: add Quectel RG650V
  USB: serial: option: add Fibocom FG132 0x0112 composition
  USB: serial: qcserial: add support for Sierra Wireless EM86xx
  USB: serial: io_edgeport: fix use after free in debug printk
  usb: musb: sunxi: Fix accessing an released usb phy
  fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
  net: bridge: xmit: make sure we have at least eth header len bytes
  bonding (gcc13): synchronize bond_{a,t}lb_xmit() types
  btrfs: reinitialize delayed ref list after deleting it from the list
  nfs: Fix KMSAN warning in decode_getfattr_attrs()
  dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
  dm cache: fix potential out-of-bounds access on the first resume
  dm cache: optimize dirty bit checking with find_next_bit when resizing
  dm cache: fix out-of-bounds access to the dirty bitset when resizing
  dm cache: correct the number of origin blocks to match the target length
  drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
  drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
  media: v4l2-tpg: prevent the risk of a division by zero
  media: cx24116: prevent overflows on SNR calculus
  media: s5p-jpeg: prevent buffer overflows
  ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
  media: adv7604: prevent underflow condition when reporting colorspace
  media: dvb_frontend: don't play tricks with underflow values
  media: dvbdev: prevent the risk of out of memory access
  media: stb0899_algo: initialize cfr before using it
  net: hns3: fix kernel crash when uninstalling driver
  can: c_can: fix {rx,tx}_errors statistics
  sctp: properly validate chunk size in sctp_sf_ootb()
  security/keys: fix slab-out-of-bounds in key_task_permission
  HID: core: zero-initialize the report buffer
  ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
  ARM: dts: rockchip: drop grf reference from rk3036 hdmi
  ARM: dts: rockchip: fix rk3036 acodec node
  arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
  Linux 4.19.323
  vt: prevent kernel-infoleak in con_font_get()
  mm: shmem: fix data-race in shmem_getattr()
  nilfs2: fix kernel bug due to missing clearing of checked flag
  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
  nilfs2: fix potential deadlock with newly created symlinks
  wifi: iwlegacy: Clear stale interrupts before resuming device
  wifi: ath10k: Fix memory leak in management tx
  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
  Revert "driver core: Fix uevent_show() vs driver detach race"
  xhci: Fix Link TRB DMA in command ring stopped completion event
  usb: phy: Fix API devm_usb_put_phy() can not release the phy
  usbip: tools: Fix detach_port() invalid port error path
  misc: sgi-gru: Don't disable preemption in GRU driver
  net: amd: mvme147: Fix probe banner message
  firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state()
  netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
  net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
  net: support ip generic csum processing in skb_csum_hwoffload_help
  bpf: Fix out-of-bounds write in trie_get_next_key()
  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
  gtp: allow -1 to be specified as file description from userspace
  gtp: simplify error handling code in 'gtp_encap_enable()'
  wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
  cgroup: Fix potential overflow issue when checking max_depth
  usb: dwc3: core: Stop processing of pending events if controller is halted
  usb: dwc3: Add splitdisable quirk for Hisilicon Kirin Soc
  usb: dwc3: remove generic PHY calibrate() calls
  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
  arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
  selinux: improve error checking in sel_write_load()
  hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
  ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
  drm/amd: Guard against bad data for ATIF ACPI method
  ALSA: hda/realtek: Update default depop procedure
  posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
  net: usb: usbnet: fix name regression
  be2net: fix potential memory leak in be_xmit()
  net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
  jfs: Fix sanity check in dbMount
  udf: fix uninit-value use in udf_get_fileshortad
  KVM: s390: gaccess: Check if guest address is in memslot
  KVM: s390: gaccess: Cleanup access to guest pages
  KVM: s390: gaccess: Refactor access address range check
  KVM: s390: gaccess: Refactor gpa and length calculation
  arm64: probes: Fix uprobes for big-endian kernels
  arm64:uprobe fix the uprobe SWBP_INSN in big-endian
  Bluetooth: bnep: fix wild-memory-access in proto_unregister
  usb: typec: altmode should keep reference to parent
  net: systemport: fix potential memory leak in bcm_sysport_xmit()
  net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
  macsec: don't increment counters for an unrelated SA
  drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
  RDMA/bnxt_re: Return more meaningful error
  RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
  RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
  clk: Fix slab-out-of-bounds error in devm_clk_release()
  clk: Fix pointer casting to prevent oops in devm_clk_release()
  nilfs2: propagate directory read errors from nilfs_find_entry()
  x86/apic: Always explicitly disarm TSC-deadline timer
  parport: Proper fix for array out-of-bounds access
  USB: serial: option: add Telit FN920C04 MBIM compositions
  USB: serial: option: add support for Quectel EG916Q-GL
  xhci: Fix incorrect stream context type macro
  Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
  Bluetooth: Remove debugfs directory on module init failure
  iio: light: opt3001: add missing full-scale range value
  iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
  iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
  iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
  drm/vmwgfx: Handle surface check failure correctly
  x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
  KVM: s390: Change virtual to physical address access in diag 0x258 handler
  s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
  net: dsa: mv88e6xxx: Fix out-of-bound access
  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
  fat: fix uninitialized variable
  PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
  arm64: probes: Fix simulate_ldr*_literal()
  arm64: probes: Remove broken LDR (literal) uprobe support
  posix-clock: Fix missing timespec64 check in pc_clock_settime()
  net: Fix an unsafe loop on the list
  usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
  usb: xhci: Fix problem with xhci resume from suspend
  Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
  HID: plantronics: Workaround for an unexcepted opposite volume key
  CDC-NCM: avoid overflow in sanity checking
  net: ipv6: ensure we call ipv6_mc_down() at most once
  ppp: fix ppp_async_encode() illegal access
  net: ibm: emac: mal: fix wrong goto
  igb: Do not bring the device up after non-fatal error
  gpio: aspeed: Use devm_clk api to manage clock source
  clk: Provide new devm_clk helpers for prepared and enabled clocks
  clk: generalize devm_clk_get() a bit
  clk: Add (devm_)clk_get_optional() functions
  gpio: aspeed: Add the flush write to ensure the write complete.
  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
  netfilter: br_netfilter: fix panic with metadata_dst skb
  tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
  SUNRPC: Fix integer overflow in decode_rc_list()
  NFS: Remove print_overflow_msg()
  fbdev: sisfb: Fix strbuf array overflow
  driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
  tools/iio: Add memory allocation failure check for trigger_name
  usb: chipidea: udc: enable suspend interrupt after usb reset
  media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
  PCI: Mark Creative Labs EMU20k2 INTx masking as broken
  i2c: i801: Use a different adapter-name for IDF adapters
  clk: bcm: bcm53573: fix OF node leak in init
  ktest.pl: Avoid false positives with grub2 skip regex
  s390/cpum_sf: Remove WARN_ON_ONCE statements
  ext4: nested locking for xattr inode
  s390/mm: Add cond_resched() to cmm_alloc/free_pages()
  s390/facility: Disable compile time optimization for decompressor code
  bpf: Check percpu map value size first
  Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
  virtio_console: fix misc probe bugs
  drm/crtc: fix uninitialized variable use even harder
  drm: Move drm_mode_setcrtc() local re-init to failure path
  tracing: Remove precision vsnprintf() check from print event
  net: ethernet: cortina: Drop TSO support
  ext4: fix inode tree inconsistency caused by ENOMEM
  ACPI: battery: Fix possible crash when unregistering a battery hook
  ACPI: battery: Simplify battery hook locking
  rtc: at91sam9: fix OF node leak in probe() error path
  rtc: at91sam9: drop platform_data support
  nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
  nfsd: use ktime_get_seconds() for timestamps
  uprobes: fix kernel info leak via "[uprobes]" vma
  arm64: errata: Expand speculative SSBS workaround once more
  arm64: cputype: Add Neoverse-N3 definitions
  arm64: Add Cortex-715 CPU part definition
  ext4: update orig_path in ext4_find_extent()
  ext4: fix slab-use-after-free in ext4_split_extent_at()
  ext4: avoid ext4_error()'s caused by ENOMEM in the truncate path
  gpio: davinci: fix lazy disable
  btrfs: wait for fixup workers before stopping cleaner kthread during umount
  Input: adp5589-keys - fix adp5589_gpio_get_value()
  tomoyo: fallback to realpath if symlink's pathname does not exist
  iio: magnetometer: ak8975: Fix reading for ak099xx sensors
  media: venus: fix use after free bug in venus_remove due to race condition
  media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
  clk: rockchip: fix error for unknown clocks
  aoe: fix the potential use-after-free problem in more places
  riscv: define ILLEGAL_POINTER_VALUE for 64bit
  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
  ocfs2: fix null-ptr-deref when journal load failed.
  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
  ocfs2: cancel dqi_sync_work before freeing oinfo
  ocfs2: reserve space for inline xattr before attaching reflink tree
  ocfs2: fix uninit-value in ocfs2_get_block()
  ocfs2: fix the la space leak when unmounting an ocfs2 volume
  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
  of/irq: Support #msi-cells=<0> in of_msi_get_domain
  parisc: Fix 64-bit userspace syscall path
  ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
  ext4: fix double brelse() the buffer of the extents path
  ext4: aovid use-after-free in ext4_ext_insert_extent()
  ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
  ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
  ext4: no need to continue when the number of entries is 1
  ALSA: core: add isascii() check to card ID generator
  parisc: Fix itlb miss handler for 64-bit programs
  perf/core: Fix small negative period being ignored
  spi: bcm63xx: Fix module autoloading
  i2c: xiic: Wait for TX empty to avoid missed TX NAKs
  selftests: vDSO: fix vDSO symbols lookup for powerpc64
  selftests: breakpoints: use remaining time to check if suspend succeed
  spi: s3c64xx: fix timeout counters in flush_fifo
  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
  ext4: ext4_search_dir should return a proper error
  of/irq: Refer to actual buffer size in of_irq_parse_one()
  drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
  scsi: aacraid: Rearrange order of struct aac_srb_unit
  drm/printer: Allow NULL data in devcoredump printer
  drm/amd/display: Fix index out of bounds in degamma hardware format translation
  drm/amd/display: Check stream before comparing them
  jfs: Fix uninit-value access of new_ea in ea_buffer
  jfs: check if leafidx greater than num leaves per dmap tree
  jfs: Fix uaf in dbFreeBits
  jfs: UBSAN: shift-out-of-bounds in dbFindBits
  ata: sata_sil: Rename sil_blacklist to sil_quirks
  power: reset: brcmstb: Do not go into infinite loop if reset fails
  fbdev: pxafb: Fix possible use after free in pxafb_task()
  ALSA: hdsp: Break infinite MIDI input flush loop
  ALSA: asihpi: Fix potential OOB array access
  signal: Replace BUG_ON()s
  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
  ACPICA: iasl: handle empty connection_node
  tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
  ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
  ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
  net: mvpp2: Increase size of queue_name buffer
  tipc: guard against string buffer overrun
  ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
  ACPI: EC: Do not release locks during operation region accesses
  ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
  ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
  net: hisilicon: hns_mdio: fix OF node leak in probe()
  net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
  net: hisilicon: hip04: fix OF node leak in probe()
  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
  wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
  f2fs: Require FMODE_WRITE for atomic write ioctls
  ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
  ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
  ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
  net: add more sanity checks to qdisc_pkt_len_init()
  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
  net: ethernet: lantiq_etop: fix memory disclosure
  r8152: Factor out OOB link list waits
  netfilter: nf_tables: prevent nf_skb_duplicated corruption
  netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
  ceph: remove the incorrect Fw reference check when dirtying pages
  mailbox: bcm2835: Fix timeout during suspend mode
  mailbox: rockchip: fix a typo in module autoloading
  usb: yurex: Fix inconsistent locking bug in yurex_read()
  i2c: isch: Add missed 'else'
  i2c: aspeed: Update the stop sw state when the bus recovery occurs
  pps: add an error check in parport_attach
  pps: remove usage of the deprecated ida_simple_xx() API
  USB: misc: yurex: fix race between read and write
  usb: yurex: Replace snprintf() with the safer scnprintf() variant
  soc: versatile: realview: fix soc_dev leak during device remove
  soc: versatile: realview: fix memory leak during device remove
  PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
  PCI: xilinx-nwl: Use irq_data_get_irq_chip_data()
  nfs: fix memory leak in error path of nfs4_do_reclaim
  fs: Fix file_set_fowner LSM hook inconsistencies
  vfs: fix race between evice_inodes() and find_inode()&iput()
  f2fs: avoid potential int overflow in sanity_check_area_boundary()
  f2fs: prevent possible int overflow in dir_block_index()
  ACPI: sysfs: validate return type of _STR method
  drbd: Add NULL check for net_conf to prevent dereference in state validation
  drbd: Fix atomicity violation in drbd_uuid_set_bm()
  tty: rp2: Fix reset with non forgiving PCIe host bridges
  firmware_loader: Block path traversal
  USB: misc: cypress_cy7c63: check for short transfer
  USB: appledisplay: close race between probe and completion handler
  soc: versatile: integrator: fix OF node leak in probe() error path
  Remove *.orig pattern from .gitignore
  crypto: aead,cipher - zeroize key buffer after use
  netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
  net: qrtr: Update packets cloning when broadcasting
  tcp: check skb is non-NULL in tcp_rto_delta_us()
  tcp: introduce tcp_skb_timestamp_us() helper
  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  coresight: tmc: sg: Do not leak sg_table
  f2fs: reduce expensive checkpoint trigger frequency
  f2fs: remove unneeded check condition in __f2fs_setxattr()
  f2fs: fix to update i_ctime in __f2fs_setxattr()
  f2fs: fix typo
  f2fs: enhance to update i_mode and acl atomically in f2fs_setattr()
  nfsd: call cache_put if xdr_reserve_space returns NULL
  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
  RDMA/cxgb4: Added NULL check for lookup_atid
  pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
  clk: ti: dra7-atl: Fix leak of of_nodes
  pinctrl: single: fix missing error code in pcs_probe()
  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
  PCI: xilinx-nwl: Fix register misspelling
  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
  clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
  perf time-utils: Fix 32-bit nsec parsing
  perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time
  perf sched timehist: Fix missing free of session in perf_sched__timehist()
  nilfs2: fix potential oob read in nilfs_btree_check_delete()
  nilfs2: determine empty node blocks as corrupted
  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
  ext4: avoid OOB when system.data xattr changes underneath the filesystem
  ext4: return error on ext4_find_inline_entry
  ext4: avoid negative min_clusters in find_group_orlov()
  smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
  ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
  jbd2: introduce/export functions jbd2_journal_submit|finish_inode_data_buffers()
  kthread: fix task state in kthread worker if being frozen
  kthread: add kthread_work tracepoints
  xz: cleanup CRC32 edits from 2018
  selftests/bpf: Fix error compiling test_lru_map.c
  xen/swiotlb: add alignment check for dma buffers
  xen/swiotlb: simplify range_straddles_page_boundary()
  xen: use correct end address of kernel for conflict checking
  drm/msm: fix %s null argument error
  ipmi: docs: don't advertise deprecated sysfs entries
  drm/msm/a5xx: fix races in preemption evaluation stage
  drm/msm/a5xx: properly clear preemption records on resume
  jfs: fix out-of-bounds in dbNextAG() and diAlloc()
  drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
  drm/rockchip: vop: Allow 4096px width scaling
  drm/radeon: properly handle vbios fake edid sizing
  drm/radeon: Replace one-element array with flexible-array member
  drm/amdgpu: properly handle vbios fake edid sizing
  drm/amdgpu: Replace one-element array with flexible-array member
  drm/amd: fix typo
  drm/stm: Fix an error handling path in stm_drm_platform_probe()
  fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
  power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
  hwmon: (ntc_thermistor) fix module autoloading
  mtd: slram: insert break after errors in parsing the map
  hwmon: (max16065) Fix overflows seen when writing limits
  clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
  reset: berlin: fix OF node leak in probe() error path
  ARM: versatile: fix OF node leak in CPUs prepare
  spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
  spi: ppc4xx: handle irq_of_parse_and_map() errors
  block, bfq: don't break merge chain in bfq_split_bfqq()
  block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
  block, bfq: fix possible UAF for bfqq->bic with merge chain
  Bluetooth: btusb: Fix not handling ZPL/short-transfer
  can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
  wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
  wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
  netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
  wifi: ath9k: Remove error checks when creating debugfs entries
  wifi: ath9k: fix parameter check in ath9k_init_debug()
  ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
  USB: serial: pl2303: add device id for Macrosilicon MS3020
  gpio: prevent potential speculation leaks in gpio_device_get_desc()
  ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
  ocfs2: add bounds checking to ocfs2_xattr_find_entry()
  x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
  spi: bcm63xx: Enable module autoloading
  ASoC: tda7419: fix module autoloading
  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
  wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room()
  net: ftgmac100: Ensure tx descriptor updates are visible
  microblaze: don't treat zero reserved memory regions as error
  pinctrl: at91: make it work with current gpiolib
  ASoC: allow module autoloading for table db1200_pids
  selftests/kcmp: remove call to ksft_set_plan()
  selftests/vm: remove call to ksft_set_plan()
  soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
  net: dpaa: Pad packets to ETH_ZLEN
  net: ftgmac100: Enable TX interrupt to avoid TX timeout
  net/mlx5: Update the list of the PCI supported devices
  arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
  scripts: kconfig: merge_config: config files: add a trailing newline
  net: phy: vitesse: repair vsc73xx autonegotiation
  net: ethernet: use ip_hdrlen() instead of bit shift
  usbnet: ipheth: fix carrier detection in modes 1 and 4
  staging: iio: frequency: ad9834: Validate frequency parameter value
  staging: iio: frequency: ad9833: Load clock using clock framework
  staging: iio: frequency: ad9833: Get frequency value statically

Change-Id: Id96e4bf331d59a5f3f52791887390bc747dc31cb
Signed-off-by: bengris32 <bengris32@protonmail.ch>
2024-12-17 21:41:20 +00:00