27942 Commits

Author	SHA1	Message	Date
Todd Kjos	87478bdad1	Merge tag 'android13-5.15.123_r00' into android13-5.15 ... This is the 5.15.123 merge into the android13-5.15 branch. It contains the following commits: * 83c56fbab4 Merge 5.15.123 into android13-5.15-lts |\ | * 09996673e3 Linux 5.15.123 | * e6c2f1ce41 Revert "drm/amd/display: edp do not add non-edid timings" | * 68eafe2947 nixge: fix mac address error handling again | * 22f4093a42 tracing/histograms: Return an error if we fail to add histogram to hist_vars list | * 78471c3ad3 jbd2: recheck chechpointing non-dirty buffer | * 0ae6b6d217 net: phy: prevent stale pointer dereference in phy_init() | * b7168d2906 tcp: annotate data-races around fastopenq.max_qlen | * accb138c10 tcp: annotate data-races around icsk->icsk_user_timeout | * 6b88371f00 tcp: annotate data-races around tp->notsent_lowat | * 4f0a31f732 tcp: annotate data-races around rskq_defer_accept | * ff0fedfc75 tcp: annotate data-races around tp->linger2 | * e187d88f3b tcp: annotate data-races around icsk->icsk_syn_retries | * d5617eeb54 tcp: annotate data-races around tp->keepalive_probes | * 9b2296a2ad tcp: annotate data-races around tp->keepalive_intvl | * f70ebecdf3 tcp: annotate data-races around tp->keepalive_time | * 0bcee93252 tcp: annotate data-races around tp->tcp_tx_delay | * 10013f764a netfilter: nf_tables: skip bound chain on rule flush | * dbe1a82d46 netfilter: nf_tables: skip bound chain in netns release path | * 706ce3c81b netfilter: nft_set_pipapo: fix improper element removal | * 62615b895a netfilter: nf_tables: fix spurious set element insertion failure | * c17b4ec9cc llc: Don't drop packet from non-root netns. | * 2400ae8fd8 fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe | * 40276640be Revert "tcp: avoid the lookup process failing to get sk in ehash table" | * b04ab5243e net:ipv6: check return value of pskb_trim() | * b87a7e3a33 net: ipv4: Use kfree_sensitive instead of kfree | * 5dd4d1ff8b tcp: annotate data-races around tcp_rsk(req)->ts_recent | * fa941f53a2 igc: Prevent garbled TX queue with XDP ZEROCOPY | * e35dc107a1 bpf: Fix subprog idx logic in check_max_stack_depth | * 4e87eb2248 octeontx2-pf: Dont allocate BPIDs for LBK interfaces | * 87fc9616d6 security: keys: Modify mismatched function name | * 0fb37ce6c0 iavf: Fix out-of-bounds when setting channels on remove | * 345c44e18c iavf: Fix use-after-free in free_netdev | * 52ed161463 net: sched: cls_bpf: Undo tcf_bind_filter in case of an error | * 5ed16ecae5 net: ethernet: mtk_eth_soc: handle probe deferral | * 39479093a4 ethernet: use of_get_ethdev_address() | * cb1e666ec0 of: net: add a helper for loading netdev->dev_addr | * 43da399e50 ethernet: use eth_hw_addr_set() instead of ether_addr_copy() | * 3fb402bd20 bridge: Add extack warning when enabling STP in netns. | * ec4ac15ece net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field() | * 6a5d6096ae pinctrl: amd: Use amd_pinconf_set() for all config options | * 4727cece29 perf build: Fix library not found error when using CSLIBS | * 29fb046ec0 fbdev: imxfb: warn about invalid left/right margin | * 5d19146753 spi: bcm63xx: fix max prepend length | * 2febd5f81e FS: JFS: Check for read-only mounted filesystem in txBegin | * 3e94d0d378 FS: JFS: Fix null-ptr-deref Read in txBegin | * 13ae3f2fd2 MIPS: dec: prom: Address -Warray-bounds warning | * 39f6292d75 fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev | * 985f966669 udf: Fix uninitialized array access for some pathnames | * 579d814de8 quota: fix warning in dqgrab() | * 32c2f51fff quota: Properly disable quotas when add_dquot_ref() fails | * d363075066 ALSA: emu10k1: roll up loops in DSP setup code for Audigy | * c0d7dbc6b7 drm/radeon: Fix integer overflow in radeon_cs_parser_init | * bca9fb7a5a ext4: correct inline offset when handling xattrs in inode body | * 87336783d0 ASoC: codecs: wcd938x: fix soundwire initialisation race | * a14527c394 ASoC: codecs: wcd938x: fix codec initialisation race | * 4ca000456e ASoC: codecs: wcd934x: fix resource leaks on component remove | * 5a34d25205 ASoC: codecs: wcd938x: fix missing mbhc init error handling | * aa44782a02 ASoC: codecs: wcd938x: fix resource leaks on component remove | * 90ab6446eb ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove | * a05a277a8d ASoC: codecs: wcd938x: fix missing clsh ctrl error handling | * 574ffa6fdf ASoC: fsl_sai: Disable bit clock with transmitter | * 925bbcdbc4 drm/amd/display: Keep PHY active for DP displays on DCN31 | * 742340371b drm/amd/display: Disable MPC split by default on special asic | * 1369d0c586 drm/client: Fix memory leak in drm_client_modeset_probe | * a85e23a1ef drm/client: Fix memory leak in drm_client_target_cloned | * 82690148ff selftests: tc: add ConnTrack procfs kconfig | * 3c3941bb1e can: bcm: Fix UAF in bcm_proc_show() | * 1484537876 regmap: Account for register length in SMBus I/O limits | * 6ce258d0c6 regmap: Drop initial version of maximum transfer length fixes | * d3ee089a16 selftests: tc: add 'ct' action kconfig dep | * 4a888b22cc selftests: tc: set timeout to 15 minutes | * 62ee584032 fuse: ioctl: translate ENOSYS in outarg | * ab80a901f8 btrfs: zoned: fix memory leak after finding block group with super blocks | * 6ba7ac692a fuse: revalidate: don't invalidate if interrupted | * c9060caab4 btrfs: fix warning when putting transaction with qgroups enabled after abort | * 232a104e38 perf probe: Add test for regression introduced by switch to die_get_decl_file() | * 9aecfebea2 keys: Fix linking a duplicate key to a keyring's assoc_array | * 0b24b5e187 ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx | * 2d04042a9f ALSA: hda/realtek: Add quirk for Clevo NS70AU | * a5de09b7f9 ALSA: hda/realtek - remove 3k pull low procedure * | a15edf0b7a Merge android13-5.15 into android13-5.15-lts * | 1463976ddc Merge 5.15.122 into android13-5.15-lts |\| | * 5c6a716301 Linux 5.15.122 | * be824fdb82 x86/cpu/amd: Add a Zenbleed fix | * 5398be2c48 x86/cpu/amd: Move the errata checking functionality up * | f51c74ca5d Revert "Revert "8250: add support for ASIX devices with a FIFO bug"" * | 6a88bacd17 BACKPORT: mm/damon/ops-common: atomically test and clear young on ptes and pmds * | 8dbcfdab4d Merge 5.15.121 into android13-5.15-lts |\| | * cdd3cdb682 Linux 5.15.121 | * 30580f3a33 drm/atomic: Fix potential use-after-free in nonblocking commits | * ab2fa2fafb net/sched: sch_qfq: reintroduce lmax bound check for MTU | * 204d7c36e8 MIPS: kvm: Fix build error with KVM_MIPS_DEBUG_COP0_COUNTERS enabled | * 522ee1b303 scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue | * 0715da5139 scsi: qla2xxx: Pointer may be dereferenced | * 541af83572 scsi: qla2xxx: Correct the index of array | * 1ccd52b790 scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() | * 5a52a2e14f scsi: qla2xxx: Fix potential NULL pointer dereference | * 89250e775d scsi: qla2xxx: Fix buffer overrun | * 4406fe8a96 scsi: qla2xxx: Avoid fcport pointer dereference | * 748d8f8698 scsi: qla2xxx: Array index may go out of bound | * 079c8264ed scsi: qla2xxx: Wait for io return on terminate rport | * 25d63eb730 tracing/probes: Fix to update dynamic data counter if fetcharg uses it | * 8277bcacf1 tracing/probes: Fix not to count error code to total length | * 610193a23f selftests: mptcp: depend on SYN_COOKIES | * c8b375871e selftests: mptcp: sockopt: return error if wrong mark | * 3b5d9b7b87 tracing: Fix null pointer dereference in tracing_err_log_open() | * 391da52c87 xtensa: ISS: fix call to split_if_spec | * 179feeeef6 ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() | * bb14a93bcc ring-buffer: Fix deadloop issue on reading trace_pipe | * 3e36cc94d6 net: ena: fix shift-out-of-bounds in exponential backoff | * b763e63424 samples: ftrace: Save required argument registers in sample trampolines | * 954792db9f tracing: Fix memory leak of iter->temp when reading trace_pipe | * 97f54b330c tracing/histograms: Add histograms to hist_vars if they have referenced variables | * b45a33897f s390/decompressor: fix misaligned symbol build error | * 1856cf9132 bus: ixp4xx: fix IXP4XX_EXP_T1_MASK | * 7269c250dd Revert "8250: add support for ASIX devices with a FIFO bug" | * 20f7c4d51c soundwire: qcom: fix storing port config out-of-bounds | * 39a0e723d3 opp: Fix use-after-free in lazy_opp_tables after probe deferral | * 0ff4a97ac2 meson saradc: fix clock divider mask length | * e5fdd73c88 xhci: Show ZHAOXIN xHCI root hub speed correctly | * 6eaedbffec xhci: Fix TRB prefetch issue of ZHAOXIN hosts | * 328b18a42a xhci: Fix resume issue of some ZHAOXIN hosts | * d9c91ef5d8 ceph: don't let check_caps skip sending responses for revoke msgs | * db8ca8d9b4 libceph: harden msgr2.1 frame segment length checks | * 974ac045a0 firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() | * becf8c69b7 tty: serial: imx: fix rs485 rx after tx | * 9dd8091959 tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk | * 073dbbe574 tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error | * 21e2fe510a serial: atmel: don't enable IRQs prematurely | * af4e0ce2af drm/ttm: Don't leak a resource on swapout move error | * 22c16c896c drm/amdgpu: avoid restore process run into dead loop. | * 85b9335d8e drm/amd/display: Correct `DMUB_FW_VERSION` macro | * 9ced7e65c3 drm/amdgpu: fix clearing mappings for BOs that are always valid in VM | * 0121d83ddf drm/rockchip: vop: Leave vblank enabled in self-refresh | * 941a395e96 drm/atomic: Allow vblank-enabled + self-refresh "disable" | * 54163ad21e fs: dlm: return positive pid value for F_GETLK | * 866bf37b7c dm init: add dm-mod.waitfor to wait for asynchronously probed block devices | * 4f61488541 md/raid0: add discard support for the 'original' layout | * 3435c5674e mfd: pm8008: Fix module autoloading | * 560c458340 misc: pci_endpoint_test: Re-init completion for every test | * 14bdee38e9 misc: pci_endpoint_test: Free IRQs before removing the device | * eec34da87b PCI: rockchip: Set address alignment for endpoint mode | * 750fd00a0a PCI: rockchip: Use u32 variable to access 32-bit registers | * 875d7a7f85 PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core | * 7b0026977a PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked | * 049d774b8b PCI: rockchip: Write PCI Device ID to correct register | * 20c62b3c1e PCI: rockchip: Assert PCI Configuration Enable bit after probe | * e8cc74b6b4 PCI: qcom: Disable write access to read only registers for IP v2.3.3 | * 7b2f1ddc94 PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 | * 1d24c5b10d PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold | * f930cf3f21 dm integrity: reduce vmalloc space footprint on 32-bit architectures | * 70564215ad hwrng: imx-rngc - fix the timeout for init and self check | * de984faecd jfs: jfs_dmap: Validate db_l2nbperpage while mounting | * d04a3ff04c ext4: only update i_reserved_data_blocks on successful block allocation | * c327b83c59 ext4: turn quotas off if mount failed after enabling quotas | * 8830523440 ext4: fix to check return value of freeze_bdev() in ext4_shutdown() | * c7514dceb7 ext4: fix wrong unit use in ext4_mb_new_blocks | * 5523851fad ext4: get block from bh in ext4_free_blocks for fast commit replay | * ba92af119b ext4: fix wrong unit use in ext4_mb_clear_bb | * 951ee9c9bb ext4: Fix reusing stale buffer heads from last failed mounting | * cd517f9a9d MIPS: KVM: Fix NULL pointer dereference | * fd89522a61 MIPS: Loongson: Fix cpu_probe_loongson() again | * 0e1854f87b erofs: fix compact 4B support for 16k block size | * e4e7f67cc1 arm64: errata: Add detection for TRBE overwrite in FILL mode | * affdbc8fbc powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 | * 9f1627d8b0 misc: fastrpc: Create fastrpc scalar with correct buffer count | * faea67e6a5 powerpc: Fail build if using recordmcount with binutils v2.37 | * 7eeed3ed1a mm/damon/ops-common: atomically test and clear young on ptes and pmds | * 7efc5bee24 net: bcmgenet: Ensure MDIO unregistration has clocks enabled | * 626c1c2913 mtd: rawnand: meson: fix unaligned DMA buffers handling | * e08295290c tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation | * 936adde9c3 pinctrl: amd: Only use special debounce behavior for GPIO 0 | * 0bcf6b12e6 pinctrl: amd: Detect and mask spurious interrupts | * dff67c64f6 pinctrl: amd: Detect internal GPIO0 debounce handling | * cc5050add0 pinctrl: amd: Fix mistake in handling clearing pins at startup | * 982c29e0d2 f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() | * 333feb7ba8 fs/ntfs3: Check fields while reading | * 04d2c9a6cb nvme-pci: fix DMA direction of unmapping integrity data | * c58e45fbea nvme-pci: remove nvme_queue from nvme_iod | * 91d3554ab1 net/sched: sch_qfq: account for stab overhead in qfq_enqueue | * 8e0326cbc4 net/sched: sch_qfq: refactor parsing of netlink parameters | * 78a0900e8d net/sched: make psched_mtu() RTNL-less safe | * 31976c68be netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write() | * 8a128e601f riscv: mm: fix truncation warning on RV32 | * 3bd945532d net/sched: flower: Ensure both minimum and maximum ports are specified | * d26299f50f bpf: cpumap: Fix memory leak in cpu_map_update_elem | * 099abb1cd2 wifi: airo: avoid uninitialized warning in airo_get_rate() | * 0e9ebc1745 erofs: fix fsdax unavailability for chunk-based regular files | * 41ccbc2ecb erofs: decouple basic mount options from fs_context | * ed84618f8d erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF * | 5a220b2e06 Merge e649333bcf ("octeontx2-pf: Add additional check for MCAM rules") into android13-5.15-lts |\| | * e649333bcf octeontx2-pf: Add additional check for MCAM rules | * c62da24de3 drm/i915: Fix one wrong caching mode enum usage | * 567397dd8e riscv, bpf: Fix inconsistent JIT image generation | * 4e4e1f99bb bpf, riscv: Support riscv jit to provide bpf_line_info | * 420d30d367 igc: Fix inserting of empty frame for launchtime | * efc7f25937 igc: Fix launchtime before start of cycle | * d29387922b kernel/trace: Fix cleanup logic of enable_trace_eprobe | * 7aefc43277 platform/x86: wmi: Break possible infinite loop when parsing GUID | * 02081e5718 platform/x86: wmi: move variables | * f3583db898 platform/x86: wmi: use guid_t and guid_equal() | * 3b6fef4110 platform/x86: wmi: remove unnecessary argument | * 82abd1c37d ipv6/addrconf: fix a potential refcount underflow for idev | * 1d63fdf6d3 NTB: ntb_tool: Add check for devm_kcalloc | * 0aa187a999 NTB: ntb_transport: fix possible memory leak while device_register() fails | * 7e475cf97c ntb: intel: Fix error handling in intel_ntb_pci_driver_init() | * 3326ecef63 NTB: amd: Fix error handling in amd_ntb_pci_driver_init() | * fe1a2ed411 ntb: idt: Fix error handling in idt_pci_driver_init() | * 7f2153c1ae udp6: fix udp6_ehashfn() typo | * 3fabca5d9c icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). | * ea438eed94 net: prevent skb corruption on frag list segmentation | * 02474292a4 net: bgmac: postpone turning IRQs off to avoid SoC hangs | * 1417dd787a ionic: remove WARN_ON to prevent panic_on_warn | * aa915d12c1 gve: Set default duplex configuration to full | * 5b55f2d6ef net/sched: cls_fw: Fix improper refcount update leads to use-after-free | * 1d263bbdc5 net: mvneta: fix txq_map in case of txq_number==1 | * 4a4804e6ae bpf: Fix max stack depth check for async callbacks | * 1b555dff83 scsi: qla2xxx: Fix error code in qla2x00_start_sp() | * 6e8af127dd igc: Handle PPS start time programming for past time values | * 809ea3a3eb igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings | * 82ac62d76a net/mlx5e: Check for NOT_READY flag state after locking | * 4892e1e548 net/mlx5e: fix memory leak in mlx5e_ptp_open | * c61303ae2c net/mlx5e: fix double free in mlx5e_destroy_flow_table | * f4b1f26251 igc: Remove delay during TX ring configuration | * b3540c0de8 drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags | * 9dbc0fa2e8 drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime | * 486b2551b0 drm/panel: simple: Add connector_type for innolux_at043tn24 | * eb94740351 ksmbd: validate session id and tree id in the compound request | * 3813eee515 ksmbd: fix out-of-bound read in smb2_write | * 35f450f54d ksmbd: validate command payload size | * 08871ede83 ksmbd: use ksmbd_req_buf_next() in ksmbd_smb2_check_message() | * d528faa9e8 workqueue: clean up WORK_* constant types, clarify masking | * aed37b12a2 net: lan743x: Don't sleep in atomic context | * d9e1cfae8d io_uring: add reschedule point to handle_tw_list() | * f8307d862c io_uring: Use io_schedule* in cqring wait | * ecb9443b20 block/partition: fix signedness issue for Amiga partitions | * 478a7a30c3 tty: serial: fsl_lpuart: add earlycon for imx8ulp platform | * 75308d64c0 wireguard: netlink: send staged packets when setting initial private key | * 8c660cfd72 wireguard: queueing: use saner cpu selection wrapping | * 870dcc31c0 netfilter: nf_tables: prevent OOB access in nft_byteorder_eval | * 041e2ac88c netfilter: nf_tables: do not ignore genmask when looking up chain by id | * 6f03ce2f1a netfilter: conntrack: Avoid nf_ct_helper_hash uses after free | * 2bd6f13734 netfilter: nf_tables: unbind non-anonymous set if rule construction fails | * 30235c2457 fanotify: disallow mount/sb marks on kernel internal pseudo fs | * d97481c7b2 ovl: fix null pointer dereference in ovl_get_acl_rcu() | * db42d2bf4f fs: no need to check source | * 86b93cbfe1 leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename | * ecc8d95067 ARM: orion5x: fix d2net gpio initialization | * 1c401bb993 ARM: dts: qcom: ipq4019: fix broken NAND controller properties override | * 02b5d96f7d ASoC: mediatek: mt8173: Fix snd_soc_component_initialize error path | * 5f35f98e56 ASoC: mediatek: mt8173: Fix irq error path | * 6e7f6b4b5c btrfs: do not BUG_ON() on tree mod log failure at __btrfs_cow_block() | * bdc8a582e1 btrfs: fix extent buffer leak after tree mod log failure at split_node() | * 7ba0da31dd btrfs: fix race when deleting quota root from the dirty cow roots list | * bacd1c80e3 btrfs: reinsert BGs failed to reclaim | * d1ca553f94 btrfs: bail out reclaim process if filesystem is read-only | * d8e172616f btrfs: delete unused BGs while reclaiming BGs | * 12b6d68498 btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile | * dd15d1c5c2 fs: avoid empty option when generating legacy mount string | * 79b9ab357b jffs2: reduce stack usage in jffs2_build_xattr_subsystem() | * 5ca021be52 ipvs: increase ip_vs_conn_tab_bits range for 64BIT | * 6db001a7ed fs: Lock moved directories | * 40f99ad8e2 fs: Establish locking order for unrelated directories | * 8fdae421c2 Revert "f2fs: fix potential corruption when moving a directory" | * eca9c3d86d ext4: Remove ext4 locking of moved directory | * 487f229efe shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs | * 17bdba70a8 autofs: use flexible array in ioctl structure | * e7acd18e5e integrity: Fix possible multiple allocation in integrity_inode_get() | * f4e0809d3a um: Use HOST_DIR for mrproper | * f67b0e3081 bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent | * 991e9c186a bcache: Remove unnecessary NULL point check in node allocations | * cbdd5b3322 bcache: fixup btree_cache_wait list damage | * 99d0599742 mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used. | * c893918bf4 mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS | * 4a489c8e9c mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M | * 5b555f2500 mmc: core: disable TRIM on Kingston EMMC04G-M627 | * 8e29835366 io_uring: wait interruptibly for request completions on exit | * e5da56c682 NFSD: add encoding of op_recall flag for write delegation | * 8a77b1d466 i2c: qup: Add missing unwind goto in qup_i2c_probe() | * 5bf90e5e79 btrfs: do not BUG_ON() on tree mod log failure at balance_level() | * e15eb4ec86 extcon: usbc-tusb320: Convert to i2c's .probe_new() | * 112c15d097 i2c: xiic: Don't try to handle more interrupt events after error | * 9eaef43fef i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() | * 0fa0cd1f98 apparmor: fix missing error check for rhashtable_insert_fast | * 196f6c7190 sh: dma: Fix DMA channel offset calculation | * 6342e46566 s390/qeth: Fix vipa deletion | * 307623bae6 octeontx-af: fix hardware timestamp configuration | * deee40944a net: dsa: tag_sja1105: fix MAC DA patching from meta frames | * e4db7f4369 pptp: Fix fib lookup calls. | * a4284246fc riscv: move memblock_allow_resize() after linear mapping is ready | * ae682149bc net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX | * edd944b70a xsk: Honor SO_BINDTODEVICE on bind | * 428ccde924 tcp: annotate data races in __tcp_oow_rate_limited() | * 0dad52a840 net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode | * ada440952d powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y | * f3380d895e ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr() | * e425e2ba93 octeontx2-af: Add validation before accessing cgx and lmac | * eeaf264cd4 octeontx2-af: Fix mapping for NIX block from CGX connection | * d58d718136 f2fs: fix error path handling in truncate_dnode() | * c0dd447558 mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 | * 217b6ea8cf spi: bcm-qspi: return error if neither hif_mspi nor mspi is available | * 2e2e5f9300 net: dsa: vsc73xx: fix MTU configuration | * b8aedf29db ibmvnic: Do not reset dql stats on NON_FATAL err | * 6a5a705fa8 Add MODULE_FIRMWARE() for FIRMWARE_TG357766. * | afb2d22171 Merge a6527128fe ("net/sched: act_ipt: add sanity checks on table name and hook locations") into android13-5.15-lts |\| | * a6527128fe net/sched: act_ipt: add sanity checks on table name and hook locations | * 1fba2510b5 sctp: fix potential deadlock on &net->sctp.addr_wq_lock | * baa76d9b61 media: cec: i2c: ch7322: also select REGMAP | * 677c5707ec drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times | * 2a0acbc6b7 rtc: st-lpc: Release some resources in st_rtc_probe() in case of error | * 7834580ca1 md/raid10: fix the condition to call bio_end_io_acct() | * d623fd42a0 pwm: mtk_disp: Fix the disable flow of disp_pwm | * db3c7f3eb8 pwm: ab8500: Fix error code in probe() | * 05b35ea06d pwm: sysfs: Do not apply state to already disabled PWMs | * aa12faec23 pwm: imx-tpm: force 'real_period' to be zero in suspend | * 07e229f06e phy: tegra: xusb: check return value of devm_kzalloc() | * f7454b8fd2 mfd: stmpe: Only disable the regulators if they are enabled | * a9ccf140a2 KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler | * 2070f3e0bc KVM: s390: vsie: fix the length of APCB bitmap | * 52f371952a mfd: stmfx: Nullify stmfx->vdd in case of error | * b1dbc919c1 mfd: stmfx: Fix error path in stmfx_chip_init | * 9783c2ec8d nvmem: rmem: Use NVMEM_DEVID_AUTO | * e6bd54f497 test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation | * 22c7e378b0 serial: 8250_omap: Use force_suspend and resume for system suspend | * 10f6656c95 Revert "usb: common: usb-conn-gpio: Set last role to unknown before initial detection" | * 76ac2acb75 mfd: intel-lpss: Add missing check for platform_get_resource | * 0e8b1a2835 usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() | * f232c1caac usb: common: usb-conn-gpio: Set last role to unknown before initial detection | * dfda400a4d usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() | * 81ecef54d8 usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() | * f219ea71ee KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes | * de846dec7a media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() | * 7ad558baf6 media: venus: helpers: Fix ALIGN() of non power of two | * 3bedb7a273 mfd: rt5033: Drop rt5033-battery sub-device | * a77616f5a3 coresight: Fix loss of connection info when a module is unloaded | * ca9e766c8a kernfs: fix missing kernfs_idr_lock to remove an ID from the IDR | * e7ecade51b serial: 8250: lock port for UART_IER access in omap8250_irq() | * c1a4ad35c5 serial: 8250: lock port for stop_rx() in omap8250_irq() | * c2194a3610 usb: hide unused usbfs_notify_suspend/resume functions | * ecf26d6e1b usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() | * b10200650e extcon: Fix kernel doc of property capability fields to avoid warnings | * 44e383e22a extcon: Fix kernel doc of property fields to avoid warnings | * a8ea7ed644 usb: gadget: u_serial: Add null pointer check in gserial_suspend | * b626cd5e4a usb: dwc3: qcom: Fix potential memory leak | * 1cee6f0410 clk: qcom: ipq6018: fix networking resets | * 6ad5ded420 clk: qcom: reset: support resetting multiple bits | * 40844343a8 clk: qcom: reset: Allow specifying custom reset delay | * cab904bf50 media: i2c: Correct format propagation for st-mipid02 | * 784a8027b8 media: usb: siano: Fix warning due to null work_func_t function pointer | * 1e1af31c4c media: videodev2.h: Fix struct v4l2_input tuner index comment | * a3727915b3 media: usb: Check az6007_read() return value | * 2a50c146cb clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks | * 8d762ad800 clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs | * 10e2b1c5d8 serial: 8250: omap: Fix freeing of resources on failed register | * a1a5c56060 usb: dwc2: Fix some error handling paths | * fa1547b471 usb: dwc2: platform: Improve error reporting for problems during .remove() | * 0a9c0fa3e9 sh: j2: Use ioremap() to translate device tree address into kernel memory | * 629e97f0c8 w1: fix loop in w1_fini() | * cb263e9b6d w1: w1_therm: fix locking behavior in convert_t | * fbf4ace39b SUNRPC: Fix UAF in svc_tcp_listen_data_ready() | * 92905470a1 block: increment diskseq on all media change events | * 8744a9eda7 block: change all __u32 annotations to __be32 in affs_hardblocks.h | * de4d538380 block: add overflow checks for Amiga partition support | * bc0129a644 block: fix signed int overflow in Amiga partition support | * 92a37fc522 ALSA: jack: Fix mutex call in snd_jack_report() | * 2f533bcb07 ALSA: hda/realtek: Add quirk for Clevo NPx0SNx | * 5bcdfe1544 iio: accel: fxls8962af: fixup buffer scan element type | * 8cc75ce657 iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF | * 92cee2da5b iio: adc: ad7192: Fix internal/external clock selection | * f88a05ef44 iio: adc: ad7192: Fix null ad7192_state pointer access | * b84998a407 phy: tegra: xusb: Clear the driver reference in usb-phy dev | * 8585c6cb03 usb: dwc3: gadget: Propagate core init errors to UDC during pullup | * 9cd1627ff0 USB: serial: option: add LARA-R6 01B PIDs * | 49dc6671a5 Merge fb348857e7 ("io_uring: ensure IOPOLL locks around deferred work") into android13-5.15-lts |\| | * fb348857e7 io_uring: ensure IOPOLL locks around deferred work | * 4909d0ad17 bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page | * 902256de2b ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error | * b3889a5990 ksmbd: avoid field overflow warning | * ef26b05023 efi/libstub: Disable PCI DMA before grabbing the EFI memory map | * 5c883c42bd kbuild: Disable GCOV for *.mod.o | * 3d9f6fc71d hwrng: st - keep clock enabled while hwrng is registered | * cd5bd4b713 dax/kmem: Pass valid argument to memory_group_register_static | * 2a327c8c31 dax: Introduce alloc_dev_dax_id() | * 9c2f993b6c dax: Fix dax_mapping_release() use after free | * 63fb45ddc4 SMB3: Do not send lease break acknowledgment if all file handles have been closed | * 7f6023610b NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION | * 6d9f814b26 crypto: qat - unmap buffers before free for RSA | * 718f30e30b crypto: qat - unmap buffer before free for DH | * 3894f5880f crypto: qat - Use helper to set reqsize | * 30682e1214 crypto: kpp - Add helper to set reqsize | * 41bd35a161 crypto: qat - use reference to structure in dma_map_single() | * a3fcd2d23d crypto: qat - replace get_current_node() with numa_node_id() | * 9560559cba crypto: qat - honor CRYPTO_TFM_REQ_MAY_SLEEP flag | * f6ee18555b ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard | * 5e0424cd8a modpost: fix off by one in is_executable_section() | * 7c0c62e557 crypto: marvell/cesa - Fix type mismatch warning | * 6bfdced5b6 modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} | * cd7806eec3 modpost: fix section mismatch message for R_ARM_ABS32 | * 7543ffe03a crypto: nx - fix build warnings when DEBUG_FS is not enabled | * b030d23925 modpost: remove broken calculation of exception_table_entry size | * c76d991b6f hwrng: virtio - Fix race on data_avail and actual data | * 64410e7b03 hwrng: virtio - always add a pending request | * 9a9ef96529 hwrng: virtio - don't waste entropy | * f5634d2154 hwrng: virtio - don't wait on cleanup | * 91806246e4 hwrng: virtio - add an internal buffer | * 36874844f7 powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary | * 271c25008a powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo | * fafeeb398d riscv: uprobes: Restore thread.bad_cause * | 629a010201 Merge 3786416e1f ("powerpc: update ppc_save_regs to save current r1 in pt_regs") into android13-5.15-lts |\| | * 3786416e1f powerpc: update ppc_save_regs to save current r1 in pt_regs | * b08d9a11df powerpc: simplify ppc_save_regs | * d3a0d96c16 powerpc/powernv/sriov: perform null check on iov before dereferencing iov | * 0a95dd17a7 pinctrl: at91-pio4: check return value of devm_kasprintf() | * 50aa3e6abb pinctrl: microchip-sgpio: check return value of devm_kasprintf() | * f7d9231300 powerpc/64s: Fix VAS mm use after free | * 5e79521da1 perf dwarf-aux: Fix off-by-one in die_get_varname() | * ac6c849428 perf script: Fix allocation of evsel->priv related to per-event dump files | * 939bf462a1 powerpc/signal32: Force inlining of __unsafe_save_user_regs() and save_tm_user_regs_unsafe() | * 7d25fc45c4 powerpc/interrupt: Don't read MSR from interrupt_exit_kernel_prepare() | * d4f3531cd2 kcsan: Don't expect 64 bits atomic builtins from 32 bits architectures | * 196f18dd7f pinctrl: cherryview: Return correct value if pin in push-pull mode | * c92365c3f3 perf bench: Add missing setlocale() call to allow usage of %'d style formatting | * e456d9b2dd perf bench: Use unbuffered output when pipe/tee'ing to a file | * c02b496d92 PCI: Add pci_clear_master() stub for non-CONFIG_PCI | * d1bfe6ca73 PCI: ftpci100: Release the clock resources | * 7fe2876aac PCI: pciehp: Cancel bringup sequence if card is not present | * dfbf41e4fc scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() | * 9856c0de49 PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free | * 6053df4da4 pinctrl: bcm2835: Handle gpiochip_add_pin_range() errors | * b1de5105d2 scsi: qedf: Fix NULL dereference in error handling | * 48e6b7602e PCI: vmd: Reset VMD config register between soft reboots | * 34c701b52d PCI: cadence: Fix Gen2 Link Retraining process | * a326cf0107 clk: Fix memory leak in devm_clk_notifier_register() | * a0e7e33b8c ASoC: imx-audmix: check return value of devm_kasprintf() | * 62f29ca45f ovl: update of dentry revalidate flags after copy up | * a089ec635a drivers: meson: secure-pwrc: always enable DMA domain | * 8ca6b2add2 clk: ti: clkctrl: check return value of kasprintf() | * b700e5d4fe clk: keystone: sci-clk: check return value of kasprintf() | * 06759faca0 clk: si5341: free unused memory on probe failure | * 34b11a9a7d clk: si5341: check return value of {devm_}kasprintf() | * 4ade98acef clk: si5341: return error if one synth clock registration fails | * 9875046f14 clk: cdce925: check return value of kasprintf() | * d8832e85a1 clk: vc5: check memory returned by kasprintf() | * f180408f16 drm/msm/dpu: correct MERGE_3D length | * e45377cfe1 arm64: dts: mediatek: mt8192: Fix CPUs capacity-dmips-mhz | * 30111c478b arm64: dts: mediatek: Add cpufreq nodes for MT8192 | * 3c3f3d35f5 drm/msm/dp: Free resources after unregistering them | * ec3b55b2c9 drm/msm/dpu: do not enable color-management if DSPPs are not available | * 300e26e3e6 ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer | * fd1c117bb5 clk: tegra: tegra124-emc: Fix potential memory leak | * 2f276dd9c0 clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider() | * 141d87977b arm64: dts: qcom: sm8250-edo: Panel framebuffer is 2.5k instead of 4k * | 774cde67d9 Merge bcea444ab4 ("clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe()") into android13-5.15-lts |\| | * bcea444ab4 clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() | * 50b5ddde8f clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe | * 1fb12e7716 RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context | * 79226176cd RDMA/bnxt_re: wraparound mbox producer index | * bf35c202a3 drm/msm/a5xx: really check for A510 in a5xx_gpu_init | * 4300a47e40 amdgpu: validate offset_in_bo of drm_amdgpu_gem_va | * 9b8087950b drm/radeon: fix possible division-by-zero errors | * b979dc54b6 drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode | * 52c2b295e3 drm/amdkfd: Fix potential deallocation of previously deallocated memory. | * 95afd2c7c7 ARM: dts: BCM5301X: fix duplex-full => full-duplex | * 838534e86c hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 | * 31c90fa841 hwmon: (adm1275) Allow setting sample averaging | * 3ff1062bd0 hwmon: (gsc-hwmon) fix fan pwm temperature scaling | * 535eafe715 ARM: dts: stm32: fix i2s endpoint format property for stm32mp15xx-dkx | * 8909898d0b ARM: dts: stm32: Fix audio routing on STM32MP15xx DHCOM PDK2 | * 555ddd671c arm64: dts: ti: k3-j7200: Fix physical address of pin | * 716efd0898 fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() | * 95cb88a853 arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 | * 06c6fdaa11 ARM: dts: iwg20d-q7-common: Fix backlight pwm specifier | * 8ac3083a26 RDMA/hns: Fix hns_roce_table_get return value | * 8d158b32cb IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate | * b2ffd8212e IB/hfi1: Use bitmap_zalloc() when applicable | * 192ab38065 RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes | * f5ca4d358b soc/fsl/qe: fix usb.c build errors | * 9dcc95e3fc ARM: dts: meson8: correct uart_B and uart_C clock references | * 1b4d08bdc0 ASoC: es8316: Do not set rate constraints for unsupported MCLKs | * b324de100d ASoC: es8316: Increment max value for ALC Capture Target Volume control | * 38d04765ad memory: brcmstb_dpfe: fix testing array offset after use | * 17b723acee ARM: dts: stm32: Shorten the AV96 HDMI sound card name | * 9c14802f14 arm64: dts: mediatek: mt8183: Add mediatek,broken-save-restore-fw to kukui | * 8f08ff836c arm64: dts: qcom: apq8096: fix fixed regulator name property | * 2e8c8fd792 ARM: omap2: fix missing tick_broadcast() prototype | * 016aeb9a76 ARM: ep93xx: fix missing-prototype warnings | * 314850a4d0 drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H | * 04f16697d3 arm64: dts: qcom: apq8016-sbc: Fix 1.8V power rail on LS expansion | * 7ce11e9098 arm64: dts: qcom: apq8016-sbc: Fix regulator constraints | * 8d139a395d arm64: dts: qcom: Drop unneeded extra device-specific includes | * 078578f608 arm64: dts: qcom: apq8016-sbc: fix mpps state names | * 25d624af5a arm64: dts: qcom: apq8016-sbc: Clarify firmware-names | * d7d784424a arm64: dts: qcom: apq8016-sbc: Update modem and WiFi firmware path | * 6a843066e0 arm64: dts: qcom: db820c: Move blsp1_uart2 pin states to msm8996.dtsi | * 23f7e4bf89 arm64: dts: qcom: sdm845: correct camss unit address | * dea5289b05 arm64: dts: qcom: sdm630: correct camss unit address | * b12e9fb281 arm64: dts: qcom: msm8996: correct camss unit address | * 5a8bbab2b1 arm64: dts: qcom: msm8994: correct SPMI unit address | * 46474b10dc arm64: dts: qcom: msm8916: correct camss unit address * | ab04041733 Merge b4ed5be2ea ("ARM: dts: gta04: Move model property out of pinctrl node") into android13-5.15-lts |\| | * b4ed5be2ea ARM: dts: gta04: Move model property out of pinctrl node | * 70b8eeb7c6 drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK | * 2422edc225 drm/msm/disp/dpu: get timing engine status from intf status register | * adac5cf609 drm/msm/dsi: don't allow enabling 14nm VCO with unprogrammed rate | * 6882389691 RDMA/bnxt_re: Fix to remove an unnecessary log | * b41dd1d896 RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid | * 9ccca79eb3 RDMA/bnxt_re: Use unique names while registering interrupts | * ced019c1f9 RDMA/bnxt_re: Fix to remove unnecessary return labels | * adc129e894 RDMA/bnxt_re: Disable/kill tasklet only if it is enabled | * f95ff838ac clk: imx: scu: use _safe list iterator to avoid a use after free | * f564dd7109 arm64: dts: microchip: sparx5: do not use PSCI on reference boards | * 3752e6a98e bus: ti-sysc: Fix dispc quirk masking bool variables | * 6d07673027 ARM: dts: stm32: Move ethernet MAC EEPROM from SoM to carrier boards | * a14e6f9392 drm/panel: sharp-ls043t1le01: adjust mode settings | * 6b5a02a572 drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` | * ec43cfdcbd Input: adxl34x - do not hardcode interrupt trigger type | * fd6cdc56ee ARM: dts: meson8b: correct uart_B and uart_C clock references | * 5899bc4058 ARM: dts: BCM5301X: Drop "clock-names" from the SPI node | * ba51c4072f drm/vram-helper: fix function names in vram helper doc | * 019f013e8b drm/bridge: tc358768: fix THS_TRAILCNT computation | * ed8bfa0461 drm/bridge: tc358768: fix TXTAGOCNT computation | * cec2271095 drm/bridge: tc358768: fix THS_ZEROCNT computation | * 47b8546301 drm/bridge: tc358768: fix TCLK_TRAILCNT computation | * a07e6484f9 drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation | * 34b805ab38 drm/bridge: tc358768: fix TCLK_ZEROCNT computation | * 9e0668ecef drm/bridge: tc358768: fix PLL target frequency | * 81bb5e859f drm/bridge: tc358768: fix PLL parameters computation | * 6451b3274f drm/bridge: tc358768: always enable HS video mode * | 748fd0d9ca Merge 26a0ba5d16 ("Input: drv260x - sleep between polling GO bit") into android13-5.15-lts |\| | * 26a0ba5d16 Input: drv260x - sleep between polling GO bit | * efb61a7185 drm/amd/display: Explicitly specify update type per plane info change | * 53e0a5ba9d radeon: avoid double free in ci_dpm_init() | * 6173df9026 drm/amd/display: Add logging for display MALL refresh setting | * a4b0164fc1 netlink: Add __sock_i_ino() for __netlink_diag_dump(). | * 04daf3f674 ipvlan: Fix return value of ipvlan_queue_xmit() | * eb720f669b netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. | * c052797ac3 netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one | * 5848ad4250 lib/ts_bm: reset initial match offset for every block of text | * fc8429f8d8 net: nfc: Fix use-after-free caused by nfc_llcp_find_local | * 60ec0058c7 nfc: llcp: simplify llcp_sock_connect() error paths | * 91f4ef204e sfc: fix crash when reading stats while NIC is resetting | * 9ced40bf84 net: axienet: Move reset before 64-bit DMA detection | * ebd6d2077a gtp: Fix use-after-free in __gtp_encap_destroy(). | * 4f22f55dc8 selftests: rtnetlink: remove netdevsim device after ipsec offload test | * 029d892b05 bonding: do not assume skb mac_header is set | * 619384319b netlink: do not hard code device address lenth in fdb dumps | * a641240b7e netlink: fix potential deadlock in netlink_set_err() | * d4aee9512a net: stmmac: fix double serdes powerdown | * cfe147bdd0 igc: Fix race condition in PTP tx code | * c729f590fe can: length: fix bitstuffing count | * 4bc4797017 bpf: Fix bpf socket lookup from tc/xdp to respect socket VRF bindings | * a254e029b7 bpf: Call __bpf_sk_lookup()/__bpf_skc_lookup() directly via TC hookpoint | * 9eb2651c67 bpf: Factor out socket lookup functions for the TC hookpoint. | * a66cce0339 bpf: Omit superfluous address family check in __bpf_skc_lookup * | d03b21a556 Merge 7e3d771f85 ("wifi: ath9k: convert msecs to jiffies where needed") into android13-5.15-lts |\| | * 7e3d771f85 wifi: ath9k: convert msecs to jiffies where needed | * 248fc11128 wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection * | d567dc0a2c Merge 365cd15e8f ("wifi: cfg80211: rewrite merging of inherited elements") into android13-5.15-lts |\| | * 365cd15e8f wifi: cfg80211: rewrite merging of inherited elements * | 1f20dc4cdd Merge 3b9de981fe ("wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler()") into android13-5.15-lts |\| | * 3b9de981fe wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() | * d0f665eee9 iwlwifi: don't dump_stack() when we get an unexpected interrupt | * a6db476ff3 wifi: iwlwifi: pull from TXQs with softirqs disabled * | ca0ea4d0e2 Merge a572c6852b ("rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO") into android13-5.15-lts |\| | * a572c6852b rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO | * 48c2d1455a wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() | * 8c561a59c6 memstick r592: make memstick_debug_get_tpc_name() static | * 79c0fbf8f3 kexec: fix a memory leak in crash_shrink_memory() | * ed8d827f43 watchdog/perf: more properly prevent false positives with turbo modes | * c29d8d1f56 watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config | * 15b37d2b4a wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown | * 4391fa1808 wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled | * ac4bf9426a selftests/bpf: Fix check_mtu using wrong variable type | * 95b4b940f0 wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes | * ef24fe436b wifi: ray_cs: Fix an error handling path in ray_probe() | * 0700d878b0 wifi: ray_cs: Drop useless status variable in parse_addr() | * d696cbbe43 wifi: ray_cs: Utilize strnlen() in parse_addr() | * 93890d0573 wifi: wl3501_cs: Fix an error handling path in wl3501_probe() | * eaffd568a2 wl3501_cs: use eth_hw_addr_set() | * c6143548e6 wifi: atmel: Fix an error handling path in atmel_probe() | * 5a0a312d34 wifi: orinoco: Fix an error handling path in orinoco_cs_probe() | * f5bb5474f4 wifi: orinoco: Fix an error handling path in spectrum_cs_probe() | * ec856ca3b0 regulator: core: Streamline debugfs operations | * fc2f8b9054 regulator: core: Fix more error checking for debugfs_create_dir() | * 534508689e bpftool: JIT limited misreported as negative value on aarch64 | * e7e0b6e066 nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() | * edeb029dd9 spi: dw: Round of n_bytes to power of 2 | * ac6158b5c4 bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen | * 71754ee427 libbpf: fix offsetof() and container_of() to work with CO-RE | * 3e7ee33b95 sctp: add bpf_bypass_getsockopt proto callback | * a32a89bb04 wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() | * a55f88dd15 wifi: wilc1000: fix for absent RSN capabilities WFA testcase | * e215a8a428 spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG | * e92f61e070 samples/bpf: Fix buffer overflow in tcp_basertt | * c77eb01a6e libbpf: btf_dump_type_data_check_overflow needs to consider BTF_MEMBER_BITFIELD_SIZE | * ad5425e707 wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx | * 06da826e3b wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation | * 7930565596 igc: Enable and fix RX hash usage by netstack * | 8523417a40 Merge 38a9d7dac3 ("pstore/ram: Add check for kstrdup") into android13-5.15-lts |\| | * 38a9d7dac3 pstore/ram: Add check for kstrdup | * 745cec2bd3 ima: Fix build warnings | * 41da2c318c evm: Fix build warnings | * 757b06fb02 evm: Complete description of evm_inode_setattr() | * 85872ffac4 locking/atomic: arm: fix sync ops | * cf78062aa9 x86/mm: Fix __swp_entry_to_pte() for Xen PV guests | * bd4c759d31 perf/ibs: Fix interface via core pmu events | * 87666a7d3e kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined | * f766d45ab2 rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale | * bfe210f625 rcu/rcuscale: Move rcu_scale_*() after kfree_scale_cleanup() | * 751cb95117 rcuscale: Move shutdown from wait_event() to wait_event_idle() | * a6d33ea305 rcuscale: Always log error message | * e610497ba1 rcutorture: Correct name of use_softirq module parameter | * c756e8a227 thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() | * e2b32b0c5f cpufreq: intel_pstate: Fix energy_performance_preference for passive | * b51194170f ARM: 9303/1: kprobes: avoid missing-declaration warnings | * 4864c82cb8 powercap: RAPL: Fix CONFIG_IOSF_MBI dependency | * 2c06e0e010 perf/arm-cmn: Fix DTC reset | * 3c4f5aee37 PM: domains: fix integer overflow issues in genpd_parse_state() | * 289e2054ee clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe | * 5017132f2f tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode(). | * 0670c4c567 posix-timers: Prevent RT livelock in itimer_delete() | * f222873711 svcrdma: Prevent page release when nothing was received | * 6689782746 irqchip/jcore-aic: Fix missing allocation of IRQ descriptors | * e6b7362290 md/raid10: fix io loss while replacement replace rdev | * f4368a462b md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request | * 3c76920e54 md/raid10: fix wrong setting of max_corr_read_errors | * d3bf54a69b md/raid10: fix overflow of md/safe_mode_delay | * a134dd582c md/raid10: check slab-out-of-bounds in md_bitmap_get_counter | * eb120c0aff blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost | * 1bc29ba959 x86/resctrl: Only show tasks' pid in current pid namespace | * d9c194281b fs: pipe: reveal missing function protoypes | * 25aa2ad37c netfilter: nf_tables: drop map element references from preparation phase * | af6d4b7f09 Merge branch 'android13-5.15' into branch 'android13-5.15-lts' * | 0ddfb214ca Revert "mptcp: fix possible divide by zero in recvmsg()" * | e10a887ec6 Merge 5.15.120 into android13-5.15-lts |/ * d54cfc4205 Linux 5.15.120 * c06edf13f4 nubus: Partially revert proc_create_single_data() conversion * 6e65fa33ed parisc: Delete redundant register definitions in <asm/assembly.h> * b4d8f89000 drm/amdgpu: Validate VM ioctl flags. * 26eb191bf5 scripts/tags.sh: Resolve gtags empty index generation * 989b4a753c perf symbols: Symbol lookup with kcore can fail if multiple segments match stext * 87f51cf60e Revert "thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe" * 6a28f3490d HID: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651. * 67ce772463 HID: wacom: Use ktime_t rather than int when dealing with timestamps * 3477323177 bpf: ensure main program has an extable * d874cf9799 can: isotp: isotp_sendmsg(): fix return error fix on TX path * 27d03d15bb x86/smp: Use dedicated cache-line for mwait_play_dead() * d6c745ca4f x86/microcode/AMD: Load late on both threads too * 9052349685 drm/amdgpu: Set vmbo destroy after pt bo is created * 796481bedc mm, hwpoison: when copy-on-write hits poison, take page offline * 6713b8f11a mm, hwpoison: try to recover from copy-on write faults * b46021ab83 mptcp: consolidate fallback and non fallback state machine * 42ff95b4bd mptcp: fix possible divide by zero in recvmsg() Change-Id: I887a9ba2d25caf38e0d92106c41dbba6f36cdb5e Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Signed-off-by: Todd Kjos <tkjos@google.com>	2023-09-27 20:24:09 +00:00
Nathan Chancellor	60f97c6435	ANDROID: tools/resolve_btfids: Pass CFLAGS to libsubcmd build via EXTRA_CFLAGS ... When building using kleaf on an host distribution with glibc 2.38 or later, there is a linkage failure when building resolve_btfids: ld.lld: error: undefined symbol: __isoc23_strtol >>> referenced by stdlib.h:483 (/usr/include/stdlib.h:483) >>> libsubcmd-in.o:(pretty_print_string_list) in archive .../libsubcmd.a >>> referenced by stdlib.h:483 (/usr/include/stdlib.h:483) >>> libsubcmd-in.o:(pretty_print_string_list) in archive .../libsubcmd.a >>> referenced by stdlib.h:483 (/usr/include/stdlib.h:483) >>> libsubcmd-in.o:(pager_get_columns) in archive .../libsubcmd.a >>> referenced 2 more times ld.lld: error: undefined symbol: __isoc23_strtoul >>> referenced by parse-options.c:314 (.../tools/lib/subcmd/parse-options.c:314) >>> libsubcmd-in.o:(get_value) in archive .../libsubcmd.a ld.lld: error: undefined symbol: __isoc23_strtoull >>> referenced by parse-options.c:332 (.../tools/lib/subcmd/parse-options.c:332) >>> libsubcmd-in.o:(get_value) in archive .../libsubcmd.a clang-17: error: linker command failed with exit code 1 (use -v to see invocation) These errors imply that the files were build against glibc 2.38 headers but attempted to be linked with an older glibc version. Building with '--debug_make_verbosity=D' reveals that the libsubcmd object files are not built with the additional HOSTCFLAGS the Android build system provides for a hermetic build (namely '-I' for .c files), so they build against the system's headers but link against Android's glibc 2.17, resulting in the error above. This is not an issue upstream after commit 13e07691a16f ("tools/resolve_btfids: Alter how HOSTCC is forced"), as HOST_OVERRIDES (which contains HOSTCFLAGS via EXTRA_CFLAGS) is passed along to libsubcmd. That change is quite invasive as a backport for 5.15 and earlier. As a miminal fix, pass CFLAGS (which contains HOSTCFLAGS via KBUILD_HOSTCFLAGS) to the libsubcmd build via EXTRA_CFLAGS, which really should have been done upstream in commit 0e3a1c902ffb ("tools/resolve_btfids: Build with host flags"), which is present in this branch as commit 9e332a14f3 ("FROMGIT: tools/resolve_btfids: Build with host flags"). Bug: 301145081 Change-Id: I91c1c9a8fb8f83118a6b8ec4da6cc33a773f2124 Fixes: 368cd631746c ("FROMGIT: tools/resolve_btfids: Build with host flags") Link: https://github.com/ClangBuiltLinux/linux/issues/1929 Signed-off-by: Nathan Chancellor <nathan@kernel.org>	2023-09-21 22:33:39 +00:00
Nathan Chancellor	8f75dab19c	ANDROID: libsubcmd: Hoist iterator variable declarations in parse_options_subcommand() ... When applying HOSTCFLAGS to the libsubcmd build to resolve a separate issue, which contain '-std=gnu89' prior to commit 1e24078113ae ("Kbuild: use -std=gnu11 for KBUILD_USERCFLAGS"), the following warning/error occurs: parse-options.c:643:8: error: GCC does not allow variable declarations in for loop initializers before C99 [-Werror,-Wgcc-compat] for (int i = 0; subcommands[i]; i++) { ^ parse-options.c:669:9: error: GCC does not allow variable declarations in for loop initializers before C99 [-Werror,-Wgcc-compat] for (int i = 0; subcommands[i]; i++) ^ This issue was never visible upstream, as commit 1e24078113ae ("Kbuild: use -std=gnu11 for KBUILD_USERCFLAGS") was applied before commit 13e07691a16f ("tools/resolve_btfids: Alter how HOSTCC is forced"). Prior to the latter change, there was no '-std=' flag passed to the libsubcmd build, so the default standard value was used, which may be newer than C99. To resolve this issue to unblock applying HOSTCFLAGS to libsubcmd, just hoist the declarations out of the for loops. Bug: 301145081 Change-Id: I41f17964f3d0822b026f6ae8f06a4d49bc7f15a9 Link: https://github.com/ClangBuiltLinux/linux/issues/1929 Signed-off-by: Nathan Chancellor <nathan@kernel.org>	2023-09-21 22:33:39 +00:00
Paul Lawrence	a1f654ede4	ANDROID: fuse-bpf: Get correct inode in mkdir ... We were getting the inode with the parent inode info Also change variable names to remove confusion Also set bpf correctly in new inode Bug: 293838958 Test: fuse_test, atest ScopedStorageDeviceTest, atest CtsScopedStorageHostTest Signed-off-by: Paul Lawrence <paullawrence@google.com> (cherry picked from https://android-review.googlesource.com/q/commit:12eb00420cad77d7b7fcfbd1088c921ae629e69d) Merged-In: I0b6a6951599e0d211afd2243daacb98679503448 Change-Id: I0b6a6951599e0d211afd2243daacb98679503448	2023-09-05 20:32:22 +00:00
Greg Kroah-Hartman	83c56fbab4	Merge 5.15.123 into android13-5.15-lts ... Changes in 5.15.123 ALSA: hda/realtek - remove 3k pull low procedure ALSA: hda/realtek: Add quirk for Clevo NS70AU ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx keys: Fix linking a duplicate key to a keyring's assoc_array perf probe: Add test for regression introduced by switch to die_get_decl_file() btrfs: fix warning when putting transaction with qgroups enabled after abort fuse: revalidate: don't invalidate if interrupted btrfs: zoned: fix memory leak after finding block group with super blocks fuse: ioctl: translate ENOSYS in outarg selftests: tc: set timeout to 15 minutes selftests: tc: add 'ct' action kconfig dep regmap: Drop initial version of maximum transfer length fixes regmap: Account for register length in SMBus I/O limits can: bcm: Fix UAF in bcm_proc_show() selftests: tc: add ConnTrack procfs kconfig drm/client: Fix memory leak in drm_client_target_cloned drm/client: Fix memory leak in drm_client_modeset_probe drm/amd/display: Disable MPC split by default on special asic drm/amd/display: Keep PHY active for DP displays on DCN31 ASoC: fsl_sai: Disable bit clock with transmitter ASoC: codecs: wcd938x: fix missing clsh ctrl error handling ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove ASoC: codecs: wcd938x: fix resource leaks on component remove ASoC: codecs: wcd938x: fix missing mbhc init error handling ASoC: codecs: wcd934x: fix resource leaks on component remove ASoC: codecs: wcd938x: fix codec initialisation race ASoC: codecs: wcd938x: fix soundwire initialisation race ext4: correct inline offset when handling xattrs in inode body drm/radeon: Fix integer overflow in radeon_cs_parser_init ALSA: emu10k1: roll up loops in DSP setup code for Audigy quota: Properly disable quotas when add_dquot_ref() fails quota: fix warning in dqgrab() udf: Fix uninitialized array access for some pathnames fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev MIPS: dec: prom: Address -Warray-bounds warning FS: JFS: Fix null-ptr-deref Read in txBegin FS: JFS: Check for read-only mounted filesystem in txBegin spi: bcm63xx: fix max prepend length fbdev: imxfb: warn about invalid left/right margin perf build: Fix library not found error when using CSLIBS pinctrl: amd: Use amd_pinconf_set() for all config options net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field() bridge: Add extack warning when enabling STP in netns. ethernet: use eth_hw_addr_set() instead of ether_addr_copy() of: net: add a helper for loading netdev->dev_addr ethernet: use of_get_ethdev_address() net: ethernet: mtk_eth_soc: handle probe deferral net: sched: cls_bpf: Undo tcf_bind_filter in case of an error iavf: Fix use-after-free in free_netdev iavf: Fix out-of-bounds when setting channels on remove security: keys: Modify mismatched function name octeontx2-pf: Dont allocate BPIDs for LBK interfaces bpf: Fix subprog idx logic in check_max_stack_depth igc: Prevent garbled TX queue with XDP ZEROCOPY tcp: annotate data-races around tcp_rsk(req)->ts_recent net: ipv4: Use kfree_sensitive instead of kfree net:ipv6: check return value of pskb_trim() Revert "tcp: avoid the lookup process failing to get sk in ehash table" fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe llc: Don't drop packet from non-root netns. netfilter: nf_tables: fix spurious set element insertion failure netfilter: nft_set_pipapo: fix improper element removal netfilter: nf_tables: skip bound chain in netns release path netfilter: nf_tables: skip bound chain on rule flush tcp: annotate data-races around tp->tcp_tx_delay tcp: annotate data-races around tp->keepalive_time tcp: annotate data-races around tp->keepalive_intvl tcp: annotate data-races around tp->keepalive_probes tcp: annotate data-races around icsk->icsk_syn_retries tcp: annotate data-races around tp->linger2 tcp: annotate data-races around rskq_defer_accept tcp: annotate data-races around tp->notsent_lowat tcp: annotate data-races around icsk->icsk_user_timeout tcp: annotate data-races around fastopenq.max_qlen net: phy: prevent stale pointer dereference in phy_init() jbd2: recheck chechpointing non-dirty buffer tracing/histograms: Return an error if we fail to add histogram to hist_vars list nixge: fix mac address error handling again Revert "drm/amd/display: edp do not add non-edid timings" Linux 5.15.123 Change-Id: Ic01e82bb6dc1520cfe37a2fe7e685585f4d8e390 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-08-24 18:15:12 +00:00
Greg Kroah-Hartman	a15edf0b7a	Merge android13-5.15 into android13-5.15-lts ... Sync up with a lot of abi updates and other bug fixes in the android13-5.15 branch to make maintaining the -lts branch easier and to ensure that no abi breakages are missed in lts merges. This consists of the following commits: * 07610c78ef ANDROID: ABI: Update oplus symbol list * 014ca12b89 ANDROID: Export symbols to do reverse mapping within memcg in kernel modules. * 4f49704212 ANDROID: Revert ABI breakage due to accidental CRC value changes * 461099c5b4 UPSTREAM: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb * 1ca64932b3 UPSTREAM: media: usb: siano: Fix warning due to null work_func_t function pointer * 10800b39da ANDROID: ABI: Create symbol list for Microsoft * d1cef5e9ad BACKPORT: UPSTREAM: perf: Fix function pointer case * a2f1e57122 UPSTREAM: net: tap_open(): set sk_uid from current_fsuid() * 0578bb107f UPSTREAM: net: tun_chr_open(): set sk_uid from current_fsuid() * c1469dbe22 UPSTREAM: netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID * d2351ceb4c BACKPORT: arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly * 3ca64f2c1d UPSTREAM: net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free * c4f310ecd5 UPSTREAM: net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free * db2dc2ae80 UPSTREAM: net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free * f0fefbe055 ANDROID: usb: gadget: f_accessory: Mitgate handling of non-existent USB request * 1c69349e0d ANDROID: dm-bow: Protect Ranges fetched and erased from the RB tree * b9b42d6732 ANDROID: add a new symbol to symbol list for unisoc * 28caaf3085 ANDROID: mm: Add vendor hook to get status of the page being migrated * 6537ae4cd5 ANDROID: GKI: update tuxera symbol list * 67740efa3b FROMGIT: Multi-gen LRU: skip CMA pages when they are not eligible * af8ceb5091 UPSTREAM: net/sched: sch_qfq: account for stab overhead in qfq_enqueue * eec496882b UPSTREAM: netfilter: nf_tables: skip bound chain on rule flush * dc2a55f68f UPSTREAM: net/sched: sch_qfq: refactor parsing of netlink parameters * e904172713 ANDROID: ABI: Add to QCOM symbols list * 8dd7d8410d UPSTREAM: netfilter: nft_set_pipapo: fix improper element removal * 60b4c8ea74 UPSTREAM: tty: n_gsm: fix UAF in gsm_cleanup_mux * daa0bd125a BACKPORT: mm: skip CMA pages when they are not available * 3db113cdcd Revert "BACKPORT: FROMGIT: mm: skip CMA pages when they are not available" * b3dd32ce1e ANDROID: GKI: update xiaomi symbol list * be8c805371 FROMGIT: fs: drop_caches: draining pages before dropping caches * b730973f76 ANDROID: GKI: Update symbols to symbol list * 5aead1412d ANDROID: vendor_hook: fix the error record position of mutex * e77972189d BACKPORT: FROMGIT: usb: common: usb-conn-gpio: Prevent bailing out if initial role is none * 697790241e ANDROID: GKI: Update GKI symbol list and ABI XML * a04724e312 ANDROID: fuse-bpf: Use stored bpf for create_open * df87c26927 ANDROID: fuse-bpf: Add bpf to negative fuse_dentry * de17606319 ANDROID: fuse-bpf: Check inode not null * aa008180c1 ANDROID: fuse-bpf: Fix flock test compile error * 326735624c ANDROID: fuse-bpf: Add partial ioctl support * 6d6ee09bb7 ANDROID: fuse-bpf: Add partial flock support * 10391a144f ANDROID: ABI: update gki symbol list * 255e289386 ANDROID: Add vendor hook for cma adjusting * f9dbe76124 ANDROID: GKI: Update exynos_wear symbol list * e5366d0f95 FROMGIT: BACKPORT: Multi-gen LRU: Fix can_swap in lru_gen_look_around() * a1cd02b590 FROMGIT: BACKPORT: Multi-gen LRU: Avoid race in inc_min_seq() * c3b46dcc26 FROMGIT: BACKPORT: Multi-gen LRU: Fix per-zone reclaim * 6371b5bc4c ANDROID: ABI: Update oplus symbol list ashmem: is_ashmem_file Export is_ashmem_file function which will be used by the minidump module to get ashmem info. * cdabe27cec ANDROID: GKI: Update symbol list * f9ac52c8b5 ANDROID: vendor_hooks: Add hook for blk request * bd148ab7d8 BACKPORT: FROMGIT: irqchip/gic-v3: Workaround for GIC-700 erratum 2941627 * e7b0c0e42a ANDROID: GKI: Update symbol list for Amlogic * a85c984e4d ANDROID: GKI: add symbol list file for moto * 8affb69804 ANDROID: ABI: Update oplus symbol list * 458659366f ANDROID: Inherit "user-aware property" across rtmutex. * 930cf7174f ANDROID: oplus: Update the ABI xml and symbol list * 01e61d3859 ANDROID: vendor_hooks: Add hooks for lookaround * bbd71c9a9e ANDROID: GKI: Update symbol list for Amlogic * 4554a46a86 UPSTREAM: net/sched: cls_fw: Fix improper refcount update leads to use-after-free * 8f388ad9a2 UPSTREAM: fs/ntfs3: Check fields while reading * 667d368492 ANDROID: set kmi_symbol_list_add_only for Kleaf builds. Change-Id: Ifb67bf1e20138e99b28d20b8a2bed243b9ea88dd Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-08-24 18:12:03 +00:00
Paul Lawrence	a04724e312	ANDROID: fuse-bpf: Use stored bpf for create_open ... create_open would always take its parent directory's bpf for the created object. Modify to use the bpf stored in fuse_dentry which is set by lookup. Bug: 291705489 Test: fuse_test passes, adb push file /sdcard/Android/data works Signed-off-by: Paul Lawrence <paullawrence@google.com> Change-Id: I0a1ea2a291a8fdf67923f1827176b2ea96bd4c2d	2023-08-08 18:00:52 +00:00
Paul Lawrence	aa008180c1	ANDROID: fuse-bpf: Fix flock test compile error ... Bug: 293161755 Test: fuse_test compiles Signed-off-by: Paul Lawrence <paullawrence@google.com> Change-Id: I249672bab85966e20a26018f65f135fe15c6eff5	2023-08-08 18:00:52 +00:00
Daniel Rosenberg	6d6ee09bb7	ANDROID: fuse-bpf: Add partial flock support ... This adds passthrough support for flock on fuse-bpf files. It does not give any control via a bpf filter. The flock will act as though it was taken on the lower file. Bug: 289882899 Test: fuse_test -t32 (flock_test) Change-Id: Iba0b9630766cedbd3195532c5e929891593cfe30 Signed-off-by: Daniel Rosenberg <drosen@google.com>	2023-08-08 18:00:52 +00:00
Greg Kroah-Hartman	8dbcfdab4d	Merge 5.15.121 into android13-5.15-lts ... Changes in 5.15.121 netfilter: nf_tables: drop map element references from preparation phase fs: pipe: reveal missing function protoypes x86/resctrl: Only show tasks' pid in current pid namespace blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost md/raid10: check slab-out-of-bounds in md_bitmap_get_counter md/raid10: fix overflow of md/safe_mode_delay md/raid10: fix wrong setting of max_corr_read_errors md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request md/raid10: fix io loss while replacement replace rdev irqchip/jcore-aic: Fix missing allocation of IRQ descriptors svcrdma: Prevent page release when nothing was received posix-timers: Prevent RT livelock in itimer_delete() tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode(). clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe PM: domains: fix integer overflow issues in genpd_parse_state() perf/arm-cmn: Fix DTC reset powercap: RAPL: Fix CONFIG_IOSF_MBI dependency ARM: 9303/1: kprobes: avoid missing-declaration warnings cpufreq: intel_pstate: Fix energy_performance_preference for passive thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() rcutorture: Correct name of use_softirq module parameter rcuscale: Always log error message rcuscale: Move shutdown from wait_event() to wait_event_idle() rcu/rcuscale: Move rcu_scale_*() after kfree_scale_cleanup() rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined perf/ibs: Fix interface via core pmu events x86/mm: Fix __swp_entry_to_pte() for Xen PV guests locking/atomic: arm: fix sync ops evm: Complete description of evm_inode_setattr() evm: Fix build warnings ima: Fix build warnings pstore/ram: Add check for kstrdup igc: Enable and fix RX hash usage by netstack wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx libbpf: btf_dump_type_data_check_overflow needs to consider BTF_MEMBER_BITFIELD_SIZE samples/bpf: Fix buffer overflow in tcp_basertt spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG wifi: wilc1000: fix for absent RSN capabilities WFA testcase wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() sctp: add bpf_bypass_getsockopt proto callback libbpf: fix offsetof() and container_of() to work with CO-RE bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen spi: dw: Round of n_bytes to power of 2 nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() bpftool: JIT limited misreported as negative value on aarch64 regulator: core: Fix more error checking for debugfs_create_dir() regulator: core: Streamline debugfs operations wifi: orinoco: Fix an error handling path in spectrum_cs_probe() wifi: orinoco: Fix an error handling path in orinoco_cs_probe() wifi: atmel: Fix an error handling path in atmel_probe() wl3501_cs: use eth_hw_addr_set() wifi: wl3501_cs: Fix an error handling path in wl3501_probe() wifi: ray_cs: Utilize strnlen() in parse_addr() wifi: ray_cs: Drop useless status variable in parse_addr() wifi: ray_cs: Fix an error handling path in ray_probe() wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes selftests/bpf: Fix check_mtu using wrong variable type wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config watchdog/perf: more properly prevent false positives with turbo modes kexec: fix a memory leak in crash_shrink_memory() memstick r592: make memstick_debug_get_tpc_name() static wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO wifi: iwlwifi: pull from TXQs with softirqs disabled iwlwifi: don't dump_stack() when we get an unexpected interrupt wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() wifi: cfg80211: rewrite merging of inherited elements wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection wifi: ath9k: convert msecs to jiffies where needed bpf: Omit superfluous address family check in __bpf_skc_lookup bpf: Factor out socket lookup functions for the TC hookpoint. bpf: Call __bpf_sk_lookup()/__bpf_skc_lookup() directly via TC hookpoint bpf: Fix bpf socket lookup from tc/xdp to respect socket VRF bindings can: length: fix bitstuffing count igc: Fix race condition in PTP tx code net: stmmac: fix double serdes powerdown netlink: fix potential deadlock in netlink_set_err() netlink: do not hard code device address lenth in fdb dumps bonding: do not assume skb mac_header is set selftests: rtnetlink: remove netdevsim device after ipsec offload test gtp: Fix use-after-free in __gtp_encap_destroy(). net: axienet: Move reset before 64-bit DMA detection sfc: fix crash when reading stats while NIC is resetting nfc: llcp: simplify llcp_sock_connect() error paths net: nfc: Fix use-after-free caused by nfc_llcp_find_local lib/ts_bm: reset initial match offset for every block of text netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. ipvlan: Fix return value of ipvlan_queue_xmit() netlink: Add __sock_i_ino() for __netlink_diag_dump(). drm/amd/display: Add logging for display MALL refresh setting radeon: avoid double free in ci_dpm_init() drm/amd/display: Explicitly specify update type per plane info change Input: drv260x - sleep between polling GO bit drm/bridge: tc358768: always enable HS video mode drm/bridge: tc358768: fix PLL parameters computation drm/bridge: tc358768: fix PLL target frequency drm/bridge: tc358768: fix TCLK_ZEROCNT computation drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation drm/bridge: tc358768: fix TCLK_TRAILCNT computation drm/bridge: tc358768: fix THS_ZEROCNT computation drm/bridge: tc358768: fix TXTAGOCNT computation drm/bridge: tc358768: fix THS_TRAILCNT computation drm/vram-helper: fix function names in vram helper doc ARM: dts: BCM5301X: Drop "clock-names" from the SPI node ARM: dts: meson8b: correct uart_B and uart_C clock references Input: adxl34x - do not hardcode interrupt trigger type drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` drm/panel: sharp-ls043t1le01: adjust mode settings ARM: dts: stm32: Move ethernet MAC EEPROM from SoM to carrier boards bus: ti-sysc: Fix dispc quirk masking bool variables arm64: dts: microchip: sparx5: do not use PSCI on reference boards clk: imx: scu: use _safe list iterator to avoid a use after free RDMA/bnxt_re: Disable/kill tasklet only if it is enabled RDMA/bnxt_re: Fix to remove unnecessary return labels RDMA/bnxt_re: Use unique names while registering interrupts RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid RDMA/bnxt_re: Fix to remove an unnecessary log drm/msm/dsi: don't allow enabling 14nm VCO with unprogrammed rate drm/msm/disp/dpu: get timing engine status from intf status register drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK ARM: dts: gta04: Move model property out of pinctrl node arm64: dts: qcom: msm8916: correct camss unit address arm64: dts: qcom: msm8994: correct SPMI unit address arm64: dts: qcom: msm8996: correct camss unit address arm64: dts: qcom: sdm630: correct camss unit address arm64: dts: qcom: sdm845: correct camss unit address arm64: dts: qcom: db820c: Move blsp1_uart2 pin states to msm8996.dtsi arm64: dts: qcom: apq8016-sbc: Update modem and WiFi firmware path arm64: dts: qcom: apq8016-sbc: Clarify firmware-names arm64: dts: qcom: apq8016-sbc: fix mpps state names arm64: dts: qcom: Drop unneeded extra device-specific includes arm64: dts: qcom: apq8016-sbc: Fix regulator constraints arm64: dts: qcom: apq8016-sbc: Fix 1.8V power rail on LS expansion drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H ARM: ep93xx: fix missing-prototype warnings ARM: omap2: fix missing tick_broadcast() prototype arm64: dts: qcom: apq8096: fix fixed regulator name property arm64: dts: mediatek: mt8183: Add mediatek,broken-save-restore-fw to kukui ARM: dts: stm32: Shorten the AV96 HDMI sound card name memory: brcmstb_dpfe: fix testing array offset after use ASoC: es8316: Increment max value for ALC Capture Target Volume control ASoC: es8316: Do not set rate constraints for unsupported MCLKs ARM: dts: meson8: correct uart_B and uart_C clock references soc/fsl/qe: fix usb.c build errors RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes IB/hfi1: Use bitmap_zalloc() when applicable IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate RDMA/hns: Fix hns_roce_table_get return value ARM: dts: iwg20d-q7-common: Fix backlight pwm specifier arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() arm64: dts: ti: k3-j7200: Fix physical address of pin ARM: dts: stm32: Fix audio routing on STM32MP15xx DHCOM PDK2 ARM: dts: stm32: fix i2s endpoint format property for stm32mp15xx-dkx hwmon: (gsc-hwmon) fix fan pwm temperature scaling hwmon: (adm1275) Allow setting sample averaging hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 ARM: dts: BCM5301X: fix duplex-full => full-duplex drm/amdkfd: Fix potential deallocation of previously deallocated memory. drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode drm/radeon: fix possible division-by-zero errors amdgpu: validate offset_in_bo of drm_amdgpu_gem_va drm/msm/a5xx: really check for A510 in a5xx_gpu_init RDMA/bnxt_re: wraparound mbox producer index RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() arm64: dts: qcom: sm8250-edo: Panel framebuffer is 2.5k instead of 4k clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider() clk: tegra: tegra124-emc: Fix potential memory leak ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer drm/msm/dpu: do not enable color-management if DSPPs are not available drm/msm/dp: Free resources after unregistering them arm64: dts: mediatek: Add cpufreq nodes for MT8192 arm64: dts: mediatek: mt8192: Fix CPUs capacity-dmips-mhz drm/msm/dpu: correct MERGE_3D length clk: vc5: check memory returned by kasprintf() clk: cdce925: check return value of kasprintf() clk: si5341: return error if one synth clock registration fails clk: si5341: check return value of {devm_}kasprintf() clk: si5341: free unused memory on probe failure clk: keystone: sci-clk: check return value of kasprintf() clk: ti: clkctrl: check return value of kasprintf() drivers: meson: secure-pwrc: always enable DMA domain ovl: update of dentry revalidate flags after copy up ASoC: imx-audmix: check return value of devm_kasprintf() clk: Fix memory leak in devm_clk_notifier_register() PCI: cadence: Fix Gen2 Link Retraining process PCI: vmd: Reset VMD config register between soft reboots scsi: qedf: Fix NULL dereference in error handling pinctrl: bcm2835: Handle gpiochip_add_pin_range() errors PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() PCI: pciehp: Cancel bringup sequence if card is not present PCI: ftpci100: Release the clock resources PCI: Add pci_clear_master() stub for non-CONFIG_PCI perf bench: Use unbuffered output when pipe/tee'ing to a file perf bench: Add missing setlocale() call to allow usage of %'d style formatting pinctrl: cherryview: Return correct value if pin in push-pull mode kcsan: Don't expect 64 bits atomic builtins from 32 bits architectures powerpc/interrupt: Don't read MSR from interrupt_exit_kernel_prepare() powerpc/signal32: Force inlining of __unsafe_save_user_regs() and save_tm_user_regs_unsafe() perf script: Fix allocation of evsel->priv related to per-event dump files perf dwarf-aux: Fix off-by-one in die_get_varname() powerpc/64s: Fix VAS mm use after free pinctrl: microchip-sgpio: check return value of devm_kasprintf() pinctrl: at91-pio4: check return value of devm_kasprintf() powerpc/powernv/sriov: perform null check on iov before dereferencing iov powerpc: simplify ppc_save_regs powerpc: update ppc_save_regs to save current r1 in pt_regs riscv: uprobes: Restore thread.bad_cause powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary hwrng: virtio - add an internal buffer hwrng: virtio - don't wait on cleanup hwrng: virtio - don't waste entropy hwrng: virtio - always add a pending request hwrng: virtio - Fix race on data_avail and actual data modpost: remove broken calculation of exception_table_entry size crypto: nx - fix build warnings when DEBUG_FS is not enabled modpost: fix section mismatch message for R_ARM_ABS32 modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} crypto: marvell/cesa - Fix type mismatch warning modpost: fix off by one in is_executable_section() ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard crypto: qat - honor CRYPTO_TFM_REQ_MAY_SLEEP flag crypto: qat - replace get_current_node() with numa_node_id() crypto: qat - use reference to structure in dma_map_single() crypto: kpp - Add helper to set reqsize crypto: qat - Use helper to set reqsize crypto: qat - unmap buffer before free for DH crypto: qat - unmap buffers before free for RSA NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION SMB3: Do not send lease break acknowledgment if all file handles have been closed dax: Fix dax_mapping_release() use after free dax: Introduce alloc_dev_dax_id() dax/kmem: Pass valid argument to memory_group_register_static hwrng: st - keep clock enabled while hwrng is registered kbuild: Disable GCOV for *.mod.o efi/libstub: Disable PCI DMA before grabbing the EFI memory map ksmbd: avoid field overflow warning ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page io_uring: ensure IOPOLL locks around deferred work USB: serial: option: add LARA-R6 01B PIDs usb: dwc3: gadget: Propagate core init errors to UDC during pullup phy: tegra: xusb: Clear the driver reference in usb-phy dev iio: adc: ad7192: Fix null ad7192_state pointer access iio: adc: ad7192: Fix internal/external clock selection iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF iio: accel: fxls8962af: fixup buffer scan element type ALSA: hda/realtek: Add quirk for Clevo NPx0SNx ALSA: jack: Fix mutex call in snd_jack_report() block: fix signed int overflow in Amiga partition support block: add overflow checks for Amiga partition support block: change all __u32 annotations to __be32 in affs_hardblocks.h block: increment diskseq on all media change events SUNRPC: Fix UAF in svc_tcp_listen_data_ready() w1: w1_therm: fix locking behavior in convert_t w1: fix loop in w1_fini() sh: j2: Use ioremap() to translate device tree address into kernel memory usb: dwc2: platform: Improve error reporting for problems during .remove() usb: dwc2: Fix some error handling paths serial: 8250: omap: Fix freeing of resources on failed register clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks media: usb: Check az6007_read() return value media: videodev2.h: Fix struct v4l2_input tuner index comment media: usb: siano: Fix warning due to null work_func_t function pointer media: i2c: Correct format propagation for st-mipid02 clk: qcom: reset: Allow specifying custom reset delay clk: qcom: reset: support resetting multiple bits clk: qcom: ipq6018: fix networking resets usb: dwc3: qcom: Fix potential memory leak usb: gadget: u_serial: Add null pointer check in gserial_suspend extcon: Fix kernel doc of property fields to avoid warnings extcon: Fix kernel doc of property capability fields to avoid warnings usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() usb: hide unused usbfs_notify_suspend/resume functions serial: 8250: lock port for stop_rx() in omap8250_irq() serial: 8250: lock port for UART_IER access in omap8250_irq() kernfs: fix missing kernfs_idr_lock to remove an ID from the IDR coresight: Fix loss of connection info when a module is unloaded mfd: rt5033: Drop rt5033-battery sub-device media: venus: helpers: Fix ALIGN() of non power of two media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() usb: common: usb-conn-gpio: Set last role to unknown before initial detection usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() mfd: intel-lpss: Add missing check for platform_get_resource Revert "usb: common: usb-conn-gpio: Set last role to unknown before initial detection" serial: 8250_omap: Use force_suspend and resume for system suspend test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation nvmem: rmem: Use NVMEM_DEVID_AUTO mfd: stmfx: Fix error path in stmfx_chip_init mfd: stmfx: Nullify stmfx->vdd in case of error KVM: s390: vsie: fix the length of APCB bitmap KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler mfd: stmpe: Only disable the regulators if they are enabled phy: tegra: xusb: check return value of devm_kzalloc() pwm: imx-tpm: force 'real_period' to be zero in suspend pwm: sysfs: Do not apply state to already disabled PWMs pwm: ab8500: Fix error code in probe() pwm: mtk_disp: Fix the disable flow of disp_pwm md/raid10: fix the condition to call bio_end_io_acct() rtc: st-lpc: Release some resources in st_rtc_probe() in case of error drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times media: cec: i2c: ch7322: also select REGMAP sctp: fix potential deadlock on &net->sctp.addr_wq_lock net/sched: act_ipt: add sanity checks on table name and hook locations Add MODULE_FIRMWARE() for FIRMWARE_TG357766. ibmvnic: Do not reset dql stats on NON_FATAL err net: dsa: vsc73xx: fix MTU configuration spi: bcm-qspi: return error if neither hif_mspi nor mspi is available mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 f2fs: fix error path handling in truncate_dnode() octeontx2-af: Fix mapping for NIX block from CGX connection octeontx2-af: Add validation before accessing cgx and lmac ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr() powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode tcp: annotate data races in __tcp_oow_rate_limited() xsk: Honor SO_BINDTODEVICE on bind net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX riscv: move memblock_allow_resize() after linear mapping is ready pptp: Fix fib lookup calls. net: dsa: tag_sja1105: fix MAC DA patching from meta frames octeontx-af: fix hardware timestamp configuration s390/qeth: Fix vipa deletion sh: dma: Fix DMA channel offset calculation apparmor: fix missing error check for rhashtable_insert_fast i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() i2c: xiic: Don't try to handle more interrupt events after error extcon: usbc-tusb320: Convert to i2c's .probe_new() btrfs: do not BUG_ON() on tree mod log failure at balance_level() i2c: qup: Add missing unwind goto in qup_i2c_probe() NFSD: add encoding of op_recall flag for write delegation io_uring: wait interruptibly for request completions on exit mmc: core: disable TRIM on Kingston EMMC04G-M627 mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used. bcache: fixup btree_cache_wait list damage bcache: Remove unnecessary NULL point check in node allocations bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent um: Use HOST_DIR for mrproper integrity: Fix possible multiple allocation in integrity_inode_get() autofs: use flexible array in ioctl structure shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs ext4: Remove ext4 locking of moved directory Revert "f2fs: fix potential corruption when moving a directory" fs: Establish locking order for unrelated directories fs: Lock moved directories ipvs: increase ip_vs_conn_tab_bits range for 64BIT jffs2: reduce stack usage in jffs2_build_xattr_subsystem() fs: avoid empty option when generating legacy mount string btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile btrfs: delete unused BGs while reclaiming BGs btrfs: bail out reclaim process if filesystem is read-only btrfs: reinsert BGs failed to reclaim btrfs: fix race when deleting quota root from the dirty cow roots list btrfs: fix extent buffer leak after tree mod log failure at split_node() btrfs: do not BUG_ON() on tree mod log failure at __btrfs_cow_block() ASoC: mediatek: mt8173: Fix irq error path ASoC: mediatek: mt8173: Fix snd_soc_component_initialize error path ARM: dts: qcom: ipq4019: fix broken NAND controller properties override ARM: orion5x: fix d2net gpio initialization leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename fs: no need to check source ovl: fix null pointer dereference in ovl_get_acl_rcu() fanotify: disallow mount/sb marks on kernel internal pseudo fs netfilter: nf_tables: unbind non-anonymous set if rule construction fails netfilter: conntrack: Avoid nf_ct_helper_hash uses after free netfilter: nf_tables: do not ignore genmask when looking up chain by id netfilter: nf_tables: prevent OOB access in nft_byteorder_eval wireguard: queueing: use saner cpu selection wrapping wireguard: netlink: send staged packets when setting initial private key tty: serial: fsl_lpuart: add earlycon for imx8ulp platform block/partition: fix signedness issue for Amiga partitions io_uring: Use io_schedule* in cqring wait io_uring: add reschedule point to handle_tw_list() net: lan743x: Don't sleep in atomic context workqueue: clean up WORK_* constant types, clarify masking ksmbd: use ksmbd_req_buf_next() in ksmbd_smb2_check_message() ksmbd: validate command payload size ksmbd: fix out-of-bound read in smb2_write ksmbd: validate session id and tree id in the compound request drm/panel: simple: Add connector_type for innolux_at043tn24 drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags igc: Remove delay during TX ring configuration net/mlx5e: fix double free in mlx5e_destroy_flow_table net/mlx5e: fix memory leak in mlx5e_ptp_open net/mlx5e: Check for NOT_READY flag state after locking igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings igc: Handle PPS start time programming for past time values scsi: qla2xxx: Fix error code in qla2x00_start_sp() bpf: Fix max stack depth check for async callbacks net: mvneta: fix txq_map in case of txq_number==1 net/sched: cls_fw: Fix improper refcount update leads to use-after-free gve: Set default duplex configuration to full ionic: remove WARN_ON to prevent panic_on_warn net: bgmac: postpone turning IRQs off to avoid SoC hangs net: prevent skb corruption on frag list segmentation icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). udp6: fix udp6_ehashfn() typo ntb: idt: Fix error handling in idt_pci_driver_init() NTB: amd: Fix error handling in amd_ntb_pci_driver_init() ntb: intel: Fix error handling in intel_ntb_pci_driver_init() NTB: ntb_transport: fix possible memory leak while device_register() fails NTB: ntb_tool: Add check for devm_kcalloc ipv6/addrconf: fix a potential refcount underflow for idev platform/x86: wmi: remove unnecessary argument platform/x86: wmi: use guid_t and guid_equal() platform/x86: wmi: move variables platform/x86: wmi: Break possible infinite loop when parsing GUID kernel/trace: Fix cleanup logic of enable_trace_eprobe igc: Fix launchtime before start of cycle igc: Fix inserting of empty frame for launchtime bpf, riscv: Support riscv jit to provide bpf_line_info riscv, bpf: Fix inconsistent JIT image generation drm/i915: Fix one wrong caching mode enum usage octeontx2-pf: Add additional check for MCAM rules erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF erofs: decouple basic mount options from fs_context erofs: fix fsdax unavailability for chunk-based regular files wifi: airo: avoid uninitialized warning in airo_get_rate() bpf: cpumap: Fix memory leak in cpu_map_update_elem net/sched: flower: Ensure both minimum and maximum ports are specified riscv: mm: fix truncation warning on RV32 netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write() net/sched: make psched_mtu() RTNL-less safe net/sched: sch_qfq: refactor parsing of netlink parameters net/sched: sch_qfq: account for stab overhead in qfq_enqueue nvme-pci: remove nvme_queue from nvme_iod nvme-pci: fix DMA direction of unmapping integrity data fs/ntfs3: Check fields while reading f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() pinctrl: amd: Fix mistake in handling clearing pins at startup pinctrl: amd: Detect internal GPIO0 debounce handling pinctrl: amd: Detect and mask spurious interrupts pinctrl: amd: Only use special debounce behavior for GPIO 0 tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation mtd: rawnand: meson: fix unaligned DMA buffers handling net: bcmgenet: Ensure MDIO unregistration has clocks enabled mm/damon/ops-common: atomically test and clear young on ptes and pmds powerpc: Fail build if using recordmcount with binutils v2.37 misc: fastrpc: Create fastrpc scalar with correct buffer count powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 arm64: errata: Add detection for TRBE overwrite in FILL mode erofs: fix compact 4B support for 16k block size MIPS: Loongson: Fix cpu_probe_loongson() again MIPS: KVM: Fix NULL pointer dereference ext4: Fix reusing stale buffer heads from last failed mounting ext4: fix wrong unit use in ext4_mb_clear_bb ext4: get block from bh in ext4_free_blocks for fast commit replay ext4: fix wrong unit use in ext4_mb_new_blocks ext4: fix to check return value of freeze_bdev() in ext4_shutdown() ext4: turn quotas off if mount failed after enabling quotas ext4: only update i_reserved_data_blocks on successful block allocation jfs: jfs_dmap: Validate db_l2nbperpage while mounting hwrng: imx-rngc - fix the timeout for init and self check dm integrity: reduce vmalloc space footprint on 32-bit architectures PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 PCI: qcom: Disable write access to read only registers for IP v2.3.3 PCI: rockchip: Assert PCI Configuration Enable bit after probe PCI: rockchip: Write PCI Device ID to correct register PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core PCI: rockchip: Use u32 variable to access 32-bit registers PCI: rockchip: Set address alignment for endpoint mode misc: pci_endpoint_test: Free IRQs before removing the device misc: pci_endpoint_test: Re-init completion for every test mfd: pm8008: Fix module autoloading md/raid0: add discard support for the 'original' layout dm init: add dm-mod.waitfor to wait for asynchronously probed block devices fs: dlm: return positive pid value for F_GETLK drm/atomic: Allow vblank-enabled + self-refresh "disable" drm/rockchip: vop: Leave vblank enabled in self-refresh drm/amdgpu: fix clearing mappings for BOs that are always valid in VM drm/amd/display: Correct `DMUB_FW_VERSION` macro drm/amdgpu: avoid restore process run into dead loop. drm/ttm: Don't leak a resource on swapout move error serial: atmel: don't enable IRQs prematurely tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk tty: serial: imx: fix rs485 rx after tx firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() libceph: harden msgr2.1 frame segment length checks ceph: don't let check_caps skip sending responses for revoke msgs xhci: Fix resume issue of some ZHAOXIN hosts xhci: Fix TRB prefetch issue of ZHAOXIN hosts xhci: Show ZHAOXIN xHCI root hub speed correctly meson saradc: fix clock divider mask length opp: Fix use-after-free in lazy_opp_tables after probe deferral soundwire: qcom: fix storing port config out-of-bounds Revert "8250: add support for ASIX devices with a FIFO bug" bus: ixp4xx: fix IXP4XX_EXP_T1_MASK s390/decompressor: fix misaligned symbol build error tracing/histograms: Add histograms to hist_vars if they have referenced variables tracing: Fix memory leak of iter->temp when reading trace_pipe samples: ftrace: Save required argument registers in sample trampolines net: ena: fix shift-out-of-bounds in exponential backoff ring-buffer: Fix deadloop issue on reading trace_pipe ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() xtensa: ISS: fix call to split_if_spec tracing: Fix null pointer dereference in tracing_err_log_open() selftests: mptcp: sockopt: return error if wrong mark selftests: mptcp: depend on SYN_COOKIES tracing/probes: Fix not to count error code to total length tracing/probes: Fix to update dynamic data counter if fetcharg uses it scsi: qla2xxx: Wait for io return on terminate rport scsi: qla2xxx: Array index may go out of bound scsi: qla2xxx: Avoid fcport pointer dereference scsi: qla2xxx: Fix buffer overrun scsi: qla2xxx: Fix potential NULL pointer dereference scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() scsi: qla2xxx: Correct the index of array scsi: qla2xxx: Pointer may be dereferenced scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue MIPS: kvm: Fix build error with KVM_MIPS_DEBUG_COP0_COUNTERS enabled net/sched: sch_qfq: reintroduce lmax bound check for MTU drm/atomic: Fix potential use-after-free in nonblocking commits Linux 5.15.121 Note, this merges away commit e4e7f67cc1 ("arm64: errata: Add detection for TRBE overwrite in FILL mode") as it causes ABI issues. If that is to be needed for this branch, it can come back later in an ABI-safe way. It also merges away commit 7eeed3ed1a ("mm/damon/ops-common: atomically test and clear young on ptes and pmds") as it had too many merge conflicts. If that is needed in a future release it needs to be added as a proper BACKPORT. Change-Id: I3616f191a93077f7e462279d628b9ee9a30b6ea5 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-08-03 12:22:25 +00:00
Greg Kroah-Hartman	5a220b2e06	Merge e649333bcf ("octeontx2-pf: Add additional check for MCAM rules") into android13-5.15-lts ... Steps on the way to 5.15.121 Change-Id: Ic1648332fcacf8686a9dcb7de46e6afd28eb775c Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-08-03 11:57:36 +00:00
Greg Kroah-Hartman	629a010201	Merge 3786416e1f ("powerpc: update ppc_save_regs to save current r1 in pt_regs") into android13-5.15-lts ... Steps on the way to 5.15.121 Resolves merge conflicts in: drivers/pinctrl/bcm/pinctrl-bcm2835.c Change-Id: Ifd551fc338bb9156d68180274888449af2ee1922 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-08-03 11:41:05 +00:00
Greg Kroah-Hartman	748fd0d9ca	Merge 26a0ba5d16 ("Input: drv260x - sleep between polling GO bit") into android13-5.15-lts ... Steps on the way to 5.15.121 Change-Id: I86e12f6d1961f47f208c0d1ea240ffad750d66a6 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-07-27 13:06:27 +00:00
James Clark	4727cece29	perf build: Fix library not found error when using CSLIBS ... [ Upstream commit 1feece2780ac2f8de45177fe53979726cee4b3d1 ] -L only specifies the search path for libraries directly provided in the link line with -l. Because -lopencsd isn't specified, it's only linked because it's a dependency of -lopencsd_c_api. Dependencies like this are resolved using the default system search paths or -rpath-link=... rather than -L. This means that compilation only works if OpenCSD is installed to the system rather than provided with the CSLIBS (-L) option. This could be fixed by adding -Wl,-rpath-link=$(CSLIBS) but that is less conventional than just adding -lopencsd to the link line so that it uses -L. -lopencsd seems to have been removed in commit ed17b1914978eddb ("perf tools: Drop requirement for libstdc++.so for libopencsd check") because it was thought that there was a chance compilation would work even if it didn't exist, but I think that only applies to libstdc++ so there is no harm to add it back. libopencsd.so and libopencsd_c_api.so would always exist together. Testing ======= The following scenarios now all work: * Cross build with OpenCSD installed * Cross build using CSLIBS=... * Native build with OpenCSD installed * Native build using CSLIBS=... * Static cross build with OpenCSD installed * Static cross build with CSLIBS=... Committer testing: ⬢[acme@toolbox perf-tools]$ alias m alias m='make -k BUILD_BPF_SKEL=1 CORESIGHT=1 O=/tmp/build/perf-tools -C tools/perf install-bin && git status && perf test python ; perf record -o /dev/null sleep 0.01 ; perf stat --null sleep 0.01' ⬢[acme@toolbox perf-tools]$ ldd ~/bin/perf | grep csd libopencsd_c_api.so.1 => /lib64/libopencsd_c_api.so.1 (0x00007fd49c44e000) libopencsd.so.1 => /lib64/libopencsd.so.1 (0x00007fd49bd56000) ⬢[acme@toolbox perf-tools]$ cat /etc/redhat-release Fedora release 36 (Thirty Six) ⬢[acme@toolbox perf-tools]$ Fixes: ed17b1914978eddb ("perf tools: Drop requirement for libstdc++.so for libopencsd check") Reported-by: Radhey Shyam Pandey <radhey.shyam.pandey@amd.com> Signed-off-by: James Clark <james.clark@arm.com> Tested-by: Arnaldo Carvalho de Melo <acme@redhat.com> Tested-by: Radhey Shyam Pandey <radhey.shyam.pandey@amd.com> Cc: Adrian Hunter <adrian.hunter@intel.com> Cc: Alexander Shishkin <alexander.shishkin@linux.intel.com> Cc: Ian Rogers <irogers@google.com> Cc: Ingo Molnar <mingo@redhat.com> Cc: Jiri Olsa <jolsa@kernel.org> Cc: Mark Rutland <mark.rutland@arm.com> Cc: Namhyung Kim <namhyung@kernel.org> Cc: Peter Zijlstra <peterz@infradead.org> Cc: Uwe Kleine-König <uwe@kleine-koenig.org> Cc: coresight@lists.linaro.org Closes: https://lore.kernel.org/linux-arm-kernel/56905d7a-a91e-883a-b707-9d5f686ba5f1@arm.com/ Link: https://lore.kernel.org/all/36cc4dc6-bf4b-1093-1c0a-876e368af183@kleine-koenig.org/ Link: https://lore.kernel.org/r/20230707154546.456720-1-james.clark@arm.com Signed-off-by: Arnaldo Carvalho de Melo <acme@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-07-27 08:46:59 +02:00
Matthieu Baerts	82690148ff	selftests: tc: add ConnTrack procfs kconfig ... commit 031c99e71fedcce93b6785d38b7d287bf59e3952 upstream. When looking at the TC selftest reports, I noticed one test was failing because /proc/net/nf_conntrack was not available. not ok 373 3992 - Add ct action triggering DNAT tuple conflict Could not match regex pattern. Verify command output: cat: /proc/net/nf_conntrack: No such file or directory It is only available if NF_CONNTRACK_PROCFS kconfig is set. So the issue can be fixed simply by adding it to the list of required kconfig. Fixes: e469056413 ("tc-testing: add test for ct DNAT tuple collision") Cc: stable@vger.kernel.org Link: https://lore.kernel.org/netdev/0e061d4a-9a23-9f58-3b35-d8919de332d7@tessares.net/T/ [1] Signed-off-by: Matthieu Baerts <matthieu.baerts@tessares.net> Tested-by: Zhengchao Shao <shaozhengchao@huawei.com> Link: https://lore.kernel.org/r/20230713-tc-selftests-lkft-v1-3-1eb4fd3a96e7@tessares.net Acked-by: Jamal Hadi Salim <jhs@mojatatu.com> Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-07-27 08:46:55 +02:00
Matthieu Baerts	d3ee089a16	selftests: tc: add 'ct' action kconfig dep ... commit 719b4774a8cb1a501e2d22a5a4a3a0a870e427d5 upstream. When looking for something else in LKFT reports [1], I noticed most of the tests were skipped because the "teardown stage" did not complete successfully. Pedro found out this is due to the fact CONFIG_NF_FLOW_TABLE is required but not listed in the 'config' file. Adding it to the list fixes the issues on LKFT side. CONFIG_NET_ACT_CT is now set to 'm' in the final kconfig. Fixes: c34b961a24 ("net/sched: act_ct: Create nf flow table per zone") Cc: stable@vger.kernel.org Link: https://qa-reports.linaro.org/lkft/linux-next-master/build/next-20230711/testrun/18267241/suite/kselftest-tc-testing/test/tc-testing_tdc_sh/log [1] Link: https://lore.kernel.org/netdev/0e061d4a-9a23-9f58-3b35-d8919de332d7@tessares.net/T/ [2] Suggested-by: Pedro Tammela <pctammela@mojatatu.com> Signed-off-by: Matthieu Baerts <matthieu.baerts@tessares.net> Tested-by: Zhengchao Shao <shaozhengchao@huawei.com> Link: https://lore.kernel.org/r/20230713-tc-selftests-lkft-v1-2-1eb4fd3a96e7@tessares.net Acked-by: Jamal Hadi Salim <jhs@mojatatu.com> Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-07-27 08:46:54 +02:00
Matthieu Baerts	4a888b22cc	selftests: tc: set timeout to 15 minutes ... commit fda05798c22a354efde09a76bdfc276b2d591829 upstream. When looking for something else in LKFT reports [1], I noticed that the TC selftest ended with a timeout error: not ok 1 selftests: tc-testing: tdc.sh # TIMEOUT 45 seconds The timeout had been introduced 3 years ago, see the Fixes commit below. This timeout is only in place when executing the selftests via the kselftests runner scripts. I guess this is not what most TC devs are using and nobody noticed the issue before. The new timeout is set to 15 minutes as suggested by Pedro [2]. It looks like it is plenty more time than what it takes in "normal" conditions. Fixes: 852c8cbf34 ("selftests/kselftest/runner.sh: Add 45 second timeout per test") Cc: stable@vger.kernel.org Link: https://qa-reports.linaro.org/lkft/linux-next-master/build/next-20230711/testrun/18267241/suite/kselftest-tc-testing/test/tc-testing_tdc_sh/log [1] Link: https://lore.kernel.org/netdev/0e061d4a-9a23-9f58-3b35-d8919de332d7@tessares.net/T/ [2] Suggested-by: Pedro Tammela <pctammela@mojatatu.com> Signed-off-by: Matthieu Baerts <matthieu.baerts@tessares.net> Reviewed-by: Zhengchao Shao <shaozhengchao@huawei.com> Link: https://lore.kernel.org/r/20230713-tc-selftests-lkft-v1-1-1eb4fd3a96e7@tessares.net Acked-by: Jamal Hadi Salim <jhs@mojatatu.com> Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-07-27 08:46:54 +02:00
Georg Müller	232a104e38	perf probe: Add test for regression introduced by switch to die_get_decl_file() ... commit 56cbeacf143530576905623ac72ae0964f3293a6 upstream. This patch adds a test to validate that 'perf probe' works for binaries where DWARF info is split into multiple CUs Signed-off-by: Georg Müller <georgmueller@gmx.net> Acked-by: Masami Hiramatsu (Google) <mhiramat@kernel.org> Cc: Adrian Hunter <adrian.hunter@intel.com> Cc: Alexander Shishkin <alexander.shishkin@linux.intel.com> Cc: Ian Rogers <irogers@google.com> Cc: Ingo Molnar <mingo@redhat.com> Cc: Jiri Olsa <jolsa@kernel.org> Cc: Mark Rutland <mark.rutland@arm.com> Cc: Namhyung Kim <namhyung@kernel.org> Cc: Peter Zijlstra <peterz@infradead.org> Cc: regressions@lists.linux.dev Cc: stable@vger.kernel.org Link: https://lore.kernel.org/r/20230628084551.1860532-5-georgmueller@gmx.net Signed-off-by: Arnaldo Carvalho de Melo <acme@redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-07-27 08:46:53 +02:00
Greg Kroah-Hartman	ca0ea4d0e2	Merge a572c6852b ("rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO") into android13-5.15-lts ... Steps on the way to 5.15.121 Change-Id: I895ce938404faa819fbfbdbee05aeaf187d99404 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-07-24 12:25:23 +00:00
Greg Kroah-Hartman	8523417a40	Merge 38a9d7dac3 ("pstore/ram: Add check for kstrdup") into android13-5.15-lts ... Steps on the way to 5.15.121 Change-Id: I9714647fff52ec446455ad9d71297594d6451269 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-07-24 12:21:51 +00:00
Matthieu Baerts	610193a23f	selftests: mptcp: depend on SYN_COOKIES ... commit 6c8880fcaa5c45355179b759c1d11737775e31fc upstream. MPTCP selftests are using TCP SYN Cookies for quite a while now, since v5.9. Some CIs don't have this config option enabled and this is causing issues in the tests: # ns1 MPTCP -> ns1 (10.0.1.1:10000 ) MPTCP (duration 167ms) sysctl: cannot stat /proc/sys/net/ipv4/tcp_syncookies: No such file or directory # [ OK ]./mptcp_connect.sh: line 554: [: -eq: unary operator expected There is no impact in the results but the test is not doing what it is supposed to do. Fixes: fed61c4b58 ("selftests: mptcp: make 2nd net namespace use tcp syn cookies unconditionally") Cc: stable@vger.kernel.org Signed-off-by: Matthieu Baerts <matthieu.baerts@tessares.net> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-07-23 13:47:56 +02:00
Matthieu Baerts	c8b375871e	selftests: mptcp: sockopt: return error if wrong mark ... commit 9ac4c28eb70cd5ea5472a5e1c495dcdd597d4597 upstream. When an error was detected when checking the marks, a message was correctly printed mentioning the error but followed by another one saying everything was OK and the selftest was not marked as failed as expected. Now the 'ret' variable is directly set to 1 in order to make sure the exit is done with an error, similar to what is done in other functions. While at it, the error is correctly propagated to the caller. Link: https://github.com/multipath-tcp/mptcp_net-next/issues/368 Fixes: dc65fe82fb ("selftests: mptcp: add packet mark test case") Cc: stable@vger.kernel.org Acked-by: Paolo Abeni <pabeni@redhat.com> Signed-off-by: Matthieu Baerts <matthieu.baerts@tessares.net> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-07-23 13:47:56 +02:00
Jason A. Donenfeld	75308d64c0	wireguard: netlink: send staged packets when setting initial private key ... commit f58d0a9b4c6a7a5199c3af967e43cc8b654604d4 upstream. Packets bound for peers can queue up prior to the device private key being set. For example, if persistent keepalive is set, a packet is queued up to be sent as soon as the device comes up. However, if the private key hasn't been set yet, the handshake message never sends, and no timer is armed to retry, since that would be pointless. But, if a user later sets a private key, the expectation is that those queued packets, such as a persistent keepalive, are actually sent. So adjust the configuration logic to account for this edge case, and add a test case to make sure this works. Maxim noticed this with a wg-quick(8) config to the tune of: [Interface] PostUp = wg set %i private-key somefile [Peer] PublicKey = ... Endpoint = ... PersistentKeepalive = 25 Here, the private key gets set after the device comes up using a PostUp script, triggering the bug. Fixes: e7096c131e ("net: WireGuard secure network tunnel") Cc: stable@vger.kernel.org Reported-by: Maxim Cournoyer <maxim.cournoyer@gmail.com> Tested-by: Maxim Cournoyer <maxim.cournoyer@gmail.com> Link: https://lore.kernel.org/wireguard/87fs7xtqrv.fsf@gmail.com/ Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-07-23 13:47:37 +02:00
Namhyung Kim	5e79521da1	perf dwarf-aux: Fix off-by-one in die_get_varname() ... [ Upstream commit 3abfcfd847717d232e36963f31a361747c388fe7 ] The die_get_varname() returns "(unknown_type)" string if it failed to find a type for the variable. But it had a space before the opening parenthesis and it made the closing parenthesis cut off due to the off-by-one in the string length (14). Signed-off-by: Namhyung Kim <namhyung@kernel.org> Fixes: 88fd633cdf ("perf probe: No need to use formatting strbuf method") Cc: Adrian Hunter <adrian.hunter@intel.com> Cc: Ian Rogers <irogers@google.com> Cc: Ingo Molnar <mingo@kernel.org> Cc: Jiri Olsa <jolsa@kernel.org> Cc: Masami Hiramatsu <mhiramat@kernel.org> Cc: Peter Zijlstra <peterz@infradead.org> Link: https://lore.kernel.org/r/20230612234102.3909116-1-namhyung@kernel.org Signed-off-by: Arnaldo Carvalho de Melo <acme@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-07-23 13:47:12 +02:00
Arnaldo Carvalho de Melo	ac6c849428	perf script: Fix allocation of evsel->priv related to per-event dump files ... [ Upstream commit 36d3e4138e1b6cc9ab179f3f397b5548f8b1eaae ] When printing output we may want to generate per event files, where the --per-event-dump option should be used, creating perf.data.EVENT.dump files instead of printing to stdout. The callback thar processes event thus expects that evsel->priv->fp should point to either the per-event FILE descriptor or to stdout. The a3af66f51b ("perf script: Fix crash because of missing evsel->priv") changeset fixed a case where evsel->priv wasn't setup, thus set to NULL, causing a segfault when trying to access evsel->priv->fp. But it did it for the non --per-event-dump case by allocating a 'struct perf_evsel_script' just to set its ->fp to stdout. Since evsel->priv is only freed when --per-event-dump is used, we ended up with a memory leak, detected using ASAN. Fix it by using the same method as perf_script__setup_per_event_dump(), and reuse that static 'struct perf_evsel_script'. Also check if evsel_script__new() failed. Fixes: a3af66f51b ("perf script: Fix crash because of missing evsel->priv") Reported-by: Ian Rogers <irogers@google.com> Tested-by: Ian Rogers <irogers@google.com> Cc: Adrian Hunter <adrian.hunter@intel.com> Cc: Jiri Olsa <jolsa@kernel.org> Cc: Namhyung Kim <namhyung@kernel.org> Cc: Ravi Bangoria <ravi.bangoria@linux.ibm.com> Link: https://lore.kernel.org/lkml/ZH+F0wGAWV14zvMP@kernel.org Signed-off-by: Arnaldo Carvalho de Melo <acme@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-07-23 13:47:12 +02:00
Arnaldo Carvalho de Melo	c92365c3f3	perf bench: Add missing setlocale() call to allow usage of %'d style formatting ... [ Upstream commit 16203e9cd01896b4244100a8e3fb9f6e612ab2b1 ] Without this we were not getting the thousands separator for big numbers. Noticed while developing 'perf bench uprobe', but the use of %' predates that, for instance 'perf bench syscall' uses it. Before: # perf bench uprobe all # Running uprobe/baseline benchmark... # Executed 1000 usleep(1000) calls Total time: 1054082243ns 1054082.243000 nsecs/op # After: # perf bench uprobe all # Running uprobe/baseline benchmark... # Executed 1,000 usleep(1000) calls Total time: 1,053,715,144ns 1,053,715.144000 nsecs/op # Fixes: c2a0820305 ("perf bench: Add basic syscall benchmark") Cc: Adrian Hunter <adrian.hunter@intel.com> Cc: Andre Fredette <anfredet@redhat.com> Cc: Clark Williams <williams@redhat.com> Cc: Dave Tucker <datucker@redhat.com> Cc: Davidlohr Bueso <dave@stgolabs.net> Cc: Derek Barbosa <debarbos@redhat.com> Cc: Ian Rogers <irogers@google.com> Cc: Jiri Olsa <jolsa@kernel.org> Cc: Namhyung Kim <namhyung@kernel.org> Cc: Tiezhu Yang <yangtiezhu@loongson.cn> Link: https://lore.kernel.org/lkml/ZH3lcepZ4tBYr1jv@kernel.org Signed-off-by: Arnaldo Carvalho de Melo <acme@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-07-23 13:47:11 +02:00
Sohaib Mohamed	e456d9b2dd	perf bench: Use unbuffered output when pipe/tee'ing to a file ... [ Upstream commit f0a29c9647ff8bbb424641f79bc1894e83dec218 ] The output of 'perf bench' gets buffered when I pipe it to a file or to tee, in such a way that I can see it only at the end. E.g. $ perf bench internals synthesize -t < output comes out fine after each test run > $ perf bench internals synthesize -t | tee file.txt < output comes out only at the end of all tests > This patch resolves this issue for 'bench' and 'test' subcommands. See, also: $ perf bench mem all | tee file.txt $ perf bench sched all | tee file.txt $ perf bench internals all -t | tee file.txt $ perf bench internals all | tee file.txt Committer testing: It really gets staggered, i.e. outputs in bursts, when the buffer fills up and has to be drained to make up space for more output. Suggested-by: Riccardo Mancini <rickyman7@gmail.com> Signed-off-by: Sohaib Mohamed <sohaib.amhmd@gmail.com> Tested-by: Arnaldo Carvalho de Melo <acme@redhat.com> Acked-by: Jiri Olsa <jolsa@redhat.com> Cc: Adrian Hunter <adrian.hunter@intel.com> Cc: Alexander Shishkin <alexander.shishkin@linux.intel.com> Cc: Fabian Hemmer <copy@copy.sh> Cc: Ian Rogers <irogers@google.com> Cc: Mark Rutland <mark.rutland@arm.com> Cc: Namhyung Kim <namhyung@kernel.org> Cc: Peter Zijlstra <peterz@infradead.org> Link: http://lore.kernel.org/lkml/20211119061409.78004-1-sohaib.amhmd@gmail.com Signed-off-by: Arnaldo Carvalho de Melo <acme@redhat.com> Stable-dep-of: 16203e9cd018 ("perf bench: Add missing setlocale() call to allow usage of %'d style formatting") Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-07-23 13:47:11 +02:00
Sabrina Dubroca	4f22f55dc8	selftests: rtnetlink: remove netdevsim device after ipsec offload test ... [ Upstream commit 5f789f103671fec3733ebe756e56adf15c90c21d ] On systems where netdevsim is built-in or loaded before the test starts, kci_test_ipsec_offload doesn't remove the netdevsim device it created during the test. Fixes: e05b2d141f ("netdevsim: move netdev creation/destruction to dev probe") Signed-off-by: Sabrina Dubroca <sd@queasysnail.net> Reviewed-by: Simon Horman <simon.horman@corigine.com> Reviewed-by: Jiri Pirko <jiri@nvidia.com> Link: https://lore.kernel.org/r/e1cb94f4f82f4eca4a444feec4488a1323396357.1687466906.git.sd@queasysnail.net Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-07-23 13:46:55 +02:00
Jesper Dangaard Brouer	ac4bf9426a	selftests/bpf: Fix check_mtu using wrong variable type ... [ Upstream commit 095641817e1bf6aa2560e025e47575188ee3edaf ] Dan Carpenter found via Smatch static checker, that unsigned 'mtu_lo' is never less than zero. Variable mtu_lo should have been an 'int', because read_mtu_device_lo() uses minus as error indications. Fixes: b62eba5632 ("selftests/bpf: Tests using bpf_check_mtu BPF-helper") Reported-by: Dan Carpenter <dan.carpenter@linaro.org> Signed-off-by: Jesper Dangaard Brouer <brouer@redhat.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Reviewed-by: Simon Horman <simon.horman@corigine.com> Link: https://lore.kernel.org/bpf/168605104733.3636467.17945947801753092590.stgit@firesoul Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-07-23 13:46:52 +02:00
Alan Maguire	534508689e	bpftool: JIT limited misreported as negative value on aarch64 ... [ Upstream commit 04cb8453a91c7c22f60ddadb6cef0d19abb33bb5 ] On aarch64, "bpftool feature" reports an incorrect BPF JIT limit: $ sudo /sbin/bpftool feature Scanning system configuration... bpf() syscall restricted to privileged users JIT compiler is enabled JIT compiler hardening is disabled JIT compiler kallsyms exports are enabled for root skipping kernel config, can't open file: No such file or directory Global memory limit for JIT compiler for unprivileged users is -201326592 bytes This is because /proc/sys/net/core/bpf_jit_limit reports $ sudo cat /proc/sys/net/core/bpf_jit_limit 68169519595520 ...and an int is assumed in read_procfs(). Change read_procfs() to return a long to avoid negative value reporting. Fixes: 7a4522bbef ("tools: bpftool: add probes for /proc/ eBPF parameters") Reported-by: Nicky Veitch <nicky.veitch@oracle.com> Signed-off-by: Alan Maguire <alan.maguire@oracle.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Jiri Olsa <jolsa@kernel.org> Acked-by: Quentin Monnet <quentin@isovalent.com> Link: https://lore.kernel.org/bpf/20230512113134.58996-1-alan.maguire@oracle.com Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-07-23 13:46:50 +02:00
Andrii Nakryiko	71754ee427	libbpf: fix offsetof() and container_of() to work with CO-RE ... [ Upstream commit bdeeed3498c7871c17465bb4f11d1bc67f9098af ] It seems like __builtin_offset() doesn't preserve CO-RE field relocations properly. So if offsetof() macro is defined through __builtin_offset(), CO-RE-enabled BPF code using container_of() will be subtly and silently broken. To avoid this problem, redefine offsetof() and container_of() in the form that works with CO-RE relocations more reliably. Fixes: 5fbc220862 ("tools/libpf: Add offsetof/container_of macro in bpf_helpers.h") Reported-by: Lennart Poettering <lennart@poettering.net> Signed-off-by: Andrii Nakryiko <andrii@kernel.org> Acked-by: Yonghong Song <yhs@fb.com> Link: https://lore.kernel.org/r/20230509065502.2306180-1-andrii@kernel.org Signed-off-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-07-23 13:46:49 +02:00
Martin KaFai Lau	c77eb01a6e	libbpf: btf_dump_type_data_check_overflow needs to consider BTF_MEMBER_BITFIELD_SIZE ... [ Upstream commit c39028b333f3a3a765c5c0b9726b8e38aedf0ba1 ] The btf_dump/struct_data selftest is failing with: [...] test_btf_dump_struct_data:FAIL:unexpected return value dumping fs_context unexpected unexpected return value dumping fs_context: actual -7 != expected 264 [...] The reason is in btf_dump_type_data_check_overflow(). It does not use BTF_MEMBER_BITFIELD_SIZE from the struct's member (btf_member). Instead, it is using the enum size which is 4. It had been working till the recent commit 4e04143c869c ("fs_context: drop the unused lsm_flags member") removed an integer member which also removed the 4 bytes padding at the end of the fs_context. Missing this 4 bytes padding exposed this bug. In particular, when btf_dump_type_data_check_overflow() reaches the member 'phase', -E2BIG is returned. The fix is to pass bit_sz to btf_dump_type_data_check_overflow(). In btf_dump_type_data_check_overflow(), it does a different size check when bit_sz is not zero. The current fs_context: [3600] ENUM 'fs_context_purpose' encoding=UNSIGNED size=4 vlen=3 'FS_CONTEXT_FOR_MOUNT' val=0 'FS_CONTEXT_FOR_SUBMOUNT' val=1 'FS_CONTEXT_FOR_RECONFIGURE' val=2 [3601] ENUM 'fs_context_phase' encoding=UNSIGNED size=4 vlen=7 'FS_CONTEXT_CREATE_PARAMS' val=0 'FS_CONTEXT_CREATING' val=1 'FS_CONTEXT_AWAITING_MOUNT' val=2 'FS_CONTEXT_AWAITING_RECONF' val=3 'FS_CONTEXT_RECONF_PARAMS' val=4 'FS_CONTEXT_RECONFIGURING' val=5 'FS_CONTEXT_FAILED' val=6 [3602] STRUCT 'fs_context' size=264 vlen=21 'ops' type_id=3603 bits_offset=0 'uapi_mutex' type_id=235 bits_offset=64 'fs_type' type_id=872 bits_offset=1216 'fs_private' type_id=21 bits_offset=1280 'sget_key' type_id=21 bits_offset=1344 'root' type_id=781 bits_offset=1408 'user_ns' type_id=251 bits_offset=1472 'net_ns' type_id=984 bits_offset=1536 'cred' type_id=1785 bits_offset=1600 'log' type_id=3621 bits_offset=1664 'source' type_id=42 bits_offset=1792 'security' type_id=21 bits_offset=1856 's_fs_info' type_id=21 bits_offset=1920 'sb_flags' type_id=20 bits_offset=1984 'sb_flags_mask' type_id=20 bits_offset=2016 's_iflags' type_id=20 bits_offset=2048 'purpose' type_id=3600 bits_offset=2080 bitfield_size=8 'phase' type_id=3601 bits_offset=2088 bitfield_size=8 'need_free' type_id=67 bits_offset=2096 bitfield_size=1 'global' type_id=67 bits_offset=2097 bitfield_size=1 'oldapi' type_id=67 bits_offset=2098 bitfield_size=1 Fixes: 920d16af9b ("libbpf: BTF dumper support for typed data") Signed-off-by: Martin KaFai Lau <martin.lau@kernel.org> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Yonghong Song <yhs@fb.com> Link: https://lore.kernel.org/bpf/20230428013638.1581263-1-martin.lau@linux.dev Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-07-23 13:46:49 +02:00
Colin Ian King	87666a7d3e	kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined ... [ Upstream commit 375b9ff53cb6f9c042817b75f2be0a650626dc4f ] In the unlikely case that CLOCK_REALTIME is not defined, variable ret is not initialized and further accumulation of return values to ret can leave ret in an undefined state. Fix this by initialized ret to zero and changing the assignment of ret to an accumulation for the CLOCK_REALTIME case. Fixes: 03f55c7952 ("kselftest: Extend vDSO selftest to clock_getres") Signed-off-by: Colin Ian King <colin.i.king@gmail.com> Reviewed-by: Vincenzo Frascino <vincenzo.frascino@arm.com> Signed-off-by: Shuah Khan <skhan@linuxfoundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-07-23 13:46:47 +02:00
Paul E. McKenney	e610497ba1	rcutorture: Correct name of use_softirq module parameter ... [ Upstream commit b409afe0268faeb77267f028ea85f2d93438fced ] The BUSTED-BOOST and TREE03 scenarios specify a mythical tree.use_softirq module parameter, which means a failure to get full test coverage. This commit therefore corrects the name to rcutree.use_softirq. Fixes: e2b949d543 ("rcutorture: Make TREE03 use real-time tree.use_softirq setting") Signed-off-by: Paul E. McKenney <paulmck@kernel.org> Reviewed-by: Joel Fernandes (Google) <joel@joelfernandes.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-07-23 13:46:46 +02:00
Greg Kroah-Hartman	e10a887ec6	Merge 5.15.120 into android13-5.15-lts ... Changes in 5.15.120 mptcp: fix possible divide by zero in recvmsg() mptcp: consolidate fallback and non fallback state machine mm, hwpoison: try to recover from copy-on write faults mm, hwpoison: when copy-on-write hits poison, take page offline drm/amdgpu: Set vmbo destroy after pt bo is created x86/microcode/AMD: Load late on both threads too x86/smp: Use dedicated cache-line for mwait_play_dead() can: isotp: isotp_sendmsg(): fix return error fix on TX path bpf: ensure main program has an extable HID: wacom: Use ktime_t rather than int when dealing with timestamps HID: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651. Revert "thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe" perf symbols: Symbol lookup with kcore can fail if multiple segments match stext scripts/tags.sh: Resolve gtags empty index generation drm/amdgpu: Validate VM ioctl flags. parisc: Delete redundant register definitions in <asm/assembly.h> nubus: Partially revert proc_create_single_data() conversion Linux 5.15.120 Change-Id: Ia7cc570db352c8a998df9f4e500b63474e08c890 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-07-10 16:45:16 +00:00
Krister Johansen	989b4a753c	perf symbols: Symbol lookup with kcore can fail if multiple segments match stext ... commit 1c249565426e3a9940102c0ba9f63914f7cda73d upstream. This problem was encountered on an arm64 system with a lot of memory. Without kernel debug symbols installed, and with both kcore and kallsyms available, perf managed to get confused and returned "unknown" for all of the kernel symbols that it tried to look up. On this system, stext fell within the vmalloc segment. The kcore symbol matching code tries to find the first segment that contains stext and uses that to replace the segment generated from just the kallsyms information. In this case, however, there were two: a very large vmalloc segment, and the text segment. This caused perf to get confused because multiple overlapping segments were inserted into the RB tree that holds the discovered segments. However, that alone wasn't sufficient to cause the problem. Even when we could find the segment, the offsets were adjusted in such a way that the newly generated symbols didn't line up with the instruction addresses in the trace. The most obvious solution would be to consult which segment type is text from kcore, but this information is not exposed to users. Instead, select the smallest matching segment that contains stext instead of the first matching segment. This allows us to match the text segment instead of vmalloc, if one is contained within the other. Reviewed-by: Adrian Hunter <adrian.hunter@intel.com> Signed-off-by: Krister Johansen <kjlx@templeofstupid.com> Cc: Alexander Shishkin <alexander.shishkin@linux.intel.com> Cc: David Reaver <me@davidreaver.com> Cc: Ian Rogers <irogers@google.com> Cc: Jiri Olsa <jolsa@kernel.org> Cc: Mark Rutland <mark.rutland@arm.com> Cc: Michael Petlan <mpetlan@redhat.com> Cc: Namhyung Kim <namhyung@kernel.org> Cc: Peter Zijlstra <peterz@infradead.org> Link: http://lore.kernel.org/lkml/20230125183418.GD1963@templeofstupid.com Signed-off-by: Arnaldo Carvalho de Melo <acme@redhat.com> Signed-off-by: Krister Johansen <kjlx@templeofstupid.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-07-05 18:25:05 +01:00
Greg Kroah-Hartman	06fe0f3c6d	Merge 5.15.119 into android13-5.15-lts ... Changes in 5.15.119 drm/amd/display: fix the system hang while disable PSR tracing: Add tracing_reset_all_online_cpus_unlocked() function tpm, tpm_tis: Claim locality in interrupt handler drm/amd/display: Add minimal pipe split transition state drm/amd/display: Use dc_update_planes_and_stream drm/amd/display: Add wrapper to call planes and stream update tick/common: Align tick period during sched_timer setup selftests: mptcp: lib: skip if missing symbol selftests: mptcp: lib: skip if not below kernel version selftests/mount_setattr: fix redefine struct mount_attr build error selftests: mptcp: pm nl: remove hardcoded default limits selftests: mptcp: join: use 'iptables-legacy' if available selftests: mptcp: join: skip check if MIB counter not supported nilfs2: fix buffer corruption due to concurrent device reads ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep() KVM: Avoid illegal stage2 mapping on invalid memory slot Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs PCI: hv: Fix a race condition bug in hv_pci_query_relations() Revert "PCI: hv: Fix a timing issue which causes kdump to fail occasionally" PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic PCI: hv: Add a per-bus mutex state_lock cgroup: Do not corrupt task iteration when rebinding subsystem mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916 mmc: meson-gx: remove redundant mmc_request_done() call from irq context mmc: mmci: stm32: fix max busy timeout calculation ip_tunnels: allow VXLAN/GENEVE to inherit TOS/TTL from VLAN regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK regmap: spi-avmm: Fix regmap_bus max_raw_write writeback: fix dereferencing NULL mapping->host on writeback_page_template io_uring/net: save msghdr->msg_control for retries io_uring/net: clear msg_controllen on partial sendmsg retry io_uring/net: disable partial retries for recvmsg with cmsg nilfs2: prevent general protection fault in nilfs_clear_dirty_page() x86/mm: Avoid using set_pgd() outside of real PGD pages memfd: check for non-NULL file_seals in memfd_create() syscall mmc: meson-gx: fix deferred probing ieee802154: hwsim: Fix possible memory leaks xfrm: Treat already-verified secpath entries as optional xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c xfrm: Ensure policies always checked on XFRM-I input path bpf: track immediate values written to stack by BPF_ST instruction bpf: Fix verifier id tracking of scalars on spill xfrm: fix inbound ipv4/udp/esp packets to UDPv6 dualstack sockets selftests: net: fcnal-test: check if FIPS mode is enabled xfrm: Linearize the skb after offloading if needed. net: qca_spi: Avoid high load if QCA7000 is not available mmc: mtk-sd: fix deferred probing mmc: mvsdio: fix deferred probing mmc: omap: fix deferred probing mmc: omap_hsmmc: fix deferred probing mmc: owl: fix deferred probing mmc: sdhci-acpi: fix deferred probing mmc: sh_mmcif: fix deferred probing mmc: usdhi60rol0: fix deferred probing ipvs: align inner_mac_header for encapsulation net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch net: dsa: mt7530: fix handling of BPDUs on MT7530 switch be2net: Extend xmit workaround to BE3 chip netfilter: nf_tables: fix chain binding transaction logic netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain netfilter: nft_set_pipapo: .walk does not deal with generations netfilter: nf_tables: disallow element updates of bound anonymous sets netfilter: nf_tables: reject unbound anonymous set before commit phase netfilter: nf_tables: reject unbound chain set before commit phase netfilter: nf_tables: disallow updates of anonymous sets netfilter: nfnetlink_osf: fix module autoload Revert "net: phy: dp83867: perform soft reset and retain established link" bpf/btf: Accept function names that contain dots selftests: forwarding: Fix race condition in mirror installation sch_netem: acquire qdisc lock in netem_change() gpio: Allow per-parent interrupt data gpiolib: Fix GPIO chip IRQ initialization restriction gpio: sifive: add missing check for platform_get_irq scsi: target: iscsi: Prevent login threads from racing between each other HID: wacom: Add error check to wacom_parse_and_register() arm64: Add missing Set/Way CMO encodings media: cec: core: don't set last_initiator if tx in progress nfcsim.c: Fix error checking for debugfs_create_dir usb: gadget: udc: fix NULL dereference in remove() nvme: double KA polling frequency to avoid KATO with TBKAS on Input: soc_button_array - add invalid acpi_index DMI quirk handling s390/cio: unregister device when the only path is gone spi: lpspi: disable lpspi module irq in DMA mode ASoC: simple-card: Add missing of_node_put() in case of error soundwire: dmi-quirks: add new mapping for HP Spectre x360 ASoC: nau8824: Add quirk to active-high jack-detect s390/purgatory: disable branch profiling ARM: dts: Fix erroneous ADS touchscreen polarities drm/exynos: vidi: fix a wrong error return drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl vhost_net: revert upend_idx only on retriable error x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle act_mirred: remove unneded merge conflict markers Linux 5.15.119 Change-Id: I241b649c295326ba7376a152072c2944b64ec535 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-28 10:03:35 +00:00
Greg Kroah-Hartman	10fbd2e04e	act_mirred: remove unneded merge conflict markers ... In commit 169a410739 ("act_mirred: use the backlog for nested calls to mirred ingress"), a merge conflict marker snuck in, so remove it. Reported-by: Bart Van Assche <bvanassche@google.com> Fixes: 169a410739 ("act_mirred: use the backlog for nested calls to mirred ingress") Cc: Sasha Levin <sashal@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-06-28 10:29:53 +02:00
Danielle Ratson	3138c85031	selftests: forwarding: Fix race condition in mirror installation ... [ Upstream commit c7c059fba6fb19c3bc924925c984772e733cb594 ] When mirroring to a gretap in hardware the device expects to be programmed with the egress port and all the encapsulating headers. This requires the driver to resolve the path the packet will take in the software data path and program the device accordingly. If the path cannot be resolved (in this case because of an unresolved neighbor), then mirror installation fails until the path is resolved. This results in a race that causes the test to sometimes fail. Fix this by setting the neighbor's state to permanent in a couple of tests, so that it is always valid. Fixes: 35c31d5c32 ("selftests: forwarding: Test mirror-to-gretap w/ UL 802.1d") Fixes: 239e754af8 ("selftests: forwarding: Test mirror-to-gretap w/ UL 802.1q") Signed-off-by: Danielle Ratson <danieller@nvidia.com> Reviewed-by: Petr Machata <petrm@nvidia.com> Signed-off-by: Petr Machata <petrm@nvidia.com> Link: https://lore.kernel.org/r/268816ac729cb6028c7a34d4dda6f4ec7af55333.1687264607.git.petrm@nvidia.com Signed-off-by: Paolo Abeni <pabeni@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-06-28 10:29:50 +02:00
Magali Lemes	d967bd7ea6	selftests: net: fcnal-test: check if FIPS mode is enabled ... [ Upstream commit d7a2fc1437f71cb058c7b11bc33dfc19e4bf277a ] There are some MD5 tests which fail when the kernel is in FIPS mode, since MD5 is not FIPS compliant. Add a check and only run those tests if FIPS mode is not enabled. Fixes: f0bee1ebb5 ("fcnal-test: Add TCP MD5 tests") Fixes: 5cad8bce26 ("fcnal-test: Add TCP MD5 tests for VRF") Reviewed-by: David Ahern <dsahern@kernel.org> Signed-off-by: Magali Lemes <magali.lemes@canonical.com> Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-06-28 10:29:46 +02:00
Eduard Zingerman	0b180495f6	bpf: track immediate values written to stack by BPF_ST instruction ... [ Upstream commit ecdf985d7615356b78241fdb159c091830ed0380 ] For aligned stack writes using BPF_ST instruction track stored values in a same way BPF_STX is handled, e.g. make sure that the following commands produce similar verifier knowledge: fp[-8] = 42; r1 = 42; fp[-8] = r1; This covers two cases: - non-null values written to stack are stored as spill of fake registers; - null values written to stack are stored as STACK_ZERO marks. Previously both cases above used STACK_MISC marks instead. Some verifier test cases relied on the old logic to obtain STACK_MISC marks for some stack values. These test cases are updated in the same commit to avoid failures during bisect. Signed-off-by: Eduard Zingerman <eddyz87@gmail.com> Link: https://lore.kernel.org/r/20230214232030.1502829-2-eddyz87@gmail.com Signed-off-by: Alexei Starovoitov <ast@kernel.org> Stable-dep-of: 713274f1f2c8 ("bpf: Fix verifier id tracking of scalars on spill") Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-06-28 10:29:46 +02:00
Matthieu Baerts	485f6be254	selftests: mptcp: join: skip check if MIB counter not supported ... commit 47867f0a7e831e24e5eab3330667ce9682d50fb1 upstream. Selftests are supposed to run on any kernels, including the old ones not supporting all MPTCP features. One of them is the MPTCP MIB counters introduced in commit fc518953bc ("mptcp: add and use MIB counter infrastructure") and more later. The MPTCP Join selftest heavily relies on these counters. If a counter is not supported by the kernel, it is not displayed when using 'nstat -z'. We can then detect that and skip the verification. A new helper (get_counter()) has been added to do the required checks and return an error if the counter is not available. Note that if we expect to have these features available and if SELFTESTS_MPTCP_LIB_EXPECT_ALL_FEATURES env var is set to 1, the tests will be marked as failed instead of skipped. This new helper also makes sure we get the exact counter we want to avoid issues we had in the past, e.g. with MPTcpExtRmAddr and MPTcpExtRmAddrDrop sharing the same prefix. While at it, we uniform the way we fetch a MIB counter. Note for the backports: we rarely change these modified blocks so if there is are conflicts, it is very likely because a counter is not used in the older kernels and we don't need that chunk. Link: https://github.com/multipath-tcp/mptcp_net-next/issues/368 Fixes: b08fbf2410 ("selftests: add test-cases for MPTCP MP_JOIN") Cc: stable@vger.kernel.org Signed-off-by: Matthieu Baerts <matthieu.baerts@tessares.net> Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Matthieu Baerts <matthieu.baerts@tessares.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-06-28 10:29:41 +02:00
Matthieu Baerts	64cb73ea77	selftests: mptcp: join: use 'iptables-legacy' if available ... commit 0c4cd3f86a40028845ad6f8af5b37165666404cd upstream. IPTables commands using 'iptables-nft' fail on old kernels, at least 5.15 because it doesn't see the default IPTables chains: $ iptables -L iptables/1.8.2 Failed to initialize nft: Protocol not supported As a first step before switching to NFTables, we can use iptables-legacy if available. Link: https://github.com/multipath-tcp/mptcp_net-next/issues/368 Fixes: 8d014eaa92 ("selftests: mptcp: add ADD_ADDR timeout test case") Cc: stable@vger.kernel.org Signed-off-by: Matthieu Baerts <matthieu.baerts@tessares.net> Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Matthieu Baerts <matthieu.baerts@tessares.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-06-28 10:29:41 +02:00
Matthieu Baerts	979a941d7e	selftests: mptcp: pm nl: remove hardcoded default limits ... commit 2177d0b08e421971e035672b70f3228d9485c650 upstream. Selftests are supposed to run on any kernels, including the old ones not supporting all MPTCP features. One of them is the checks of the default limits returned by the MPTCP in-kernel path-manager. The default values have been modified by commit 72bcbc46a5c3 ("mptcp: increase default max additional subflows to 2"). Instead of comparing with hardcoded values, we can get the default one and compare with them. Note that if we expect to have the latest version, we continue to check the hardcoded values to avoid unexpected behaviour changes. Link: https://github.com/multipath-tcp/mptcp_net-next/issues/368 Fixes: eedbc68532 ("selftests: add PM netlink functional tests") Cc: stable@vger.kernel.org Signed-off-by: Matthieu Baerts <matthieu.baerts@tessares.net> Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Matthieu Baerts <matthieu.baerts@tessares.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-06-28 10:29:41 +02:00
Shuah Khan	ac65930751	selftests/mount_setattr: fix redefine struct mount_attr build error ... commit d8e45bf1aed2e5fddd8985b5bb1aaf774a97aba8 upstream. Fix the following build error due to redefining struct mount_attr by removing duplicate define from mount_setattr_test.c gcc -g -isystem .../tools/testing/selftests/../../../usr/include -Wall -O2 -pthread mount_setattr_test.c -o .../tools/testing/selftests/mount_setattr/mount_setattr_test mount_setattr_test.c:107:8: error: redefinition of ‘struct mount_attr’ 107 | struct mount_attr { | ^~~~~~~~~~ In file included from /usr/include/x86_64-linux-gnu/sys/mount.h:32, from mount_setattr_test.c:10: .../usr/include/linux/mount.h:129:8: note: originally defined here 129 | struct mount_attr { | ^~~~~~~~~~ make: *** [../lib.mk:145: .../tools/testing/selftests/mount_setattr/mount_setattr_test] Error 1 Signed-off-by: Shuah Khan <skhan@linuxfoundation.org> Cc: Hardik Garg <hargar@linux.microsoft.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-06-28 10:29:41 +02:00
Matthieu Baerts	726d033133	selftests: mptcp: lib: skip if not below kernel version ... commit b1a6a38ab8a633546cefae890da842f19e006c74 upstream. Selftests are supposed to run on any kernels, including the old ones not supporting all MPTCP features. A new function is now available to easily detect if a feature is missing by looking at the kernel version. That's clearly not ideal and this kind of check should be avoided as soon as possible. But sometimes, there are no external sign that a "feature" is available or not: internal behaviours can change without modifying the uAPI and these selftests are verifying the internal behaviours. Sometimes, the only (easy) way to verify if the feature is present is to run the test but then the validation cannot determine if there is a failure with the feature or if the feature is missing. Then it looks better to check the kernel version instead of having tests that can never fail. In any case, we need a solution not to have a whole selftest being marked as failed just because one sub-test has failed. Note that this env var car be set to 1 not to do such check and run the linked sub-test: SELFTESTS_MPTCP_LIB_NO_KVERSION_CHECK. This new helper is going to be used in the following commits. In order to ease the backport of such future patches, it would be good if this patch is backported up to the introduction of MPTCP selftests, hence the Fixes tag below: this type of check was supposed to be done from the beginning. Link: https://github.com/multipath-tcp/mptcp_net-next/issues/368 Fixes: 048d19d444 ("mptcp: add basic kselftest for mptcp") Cc: stable@vger.kernel.org Signed-off-by: Matthieu Baerts <matthieu.baerts@tessares.net> Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-06-28 10:29:41 +02:00
Matthieu Baerts	b28fc26683	selftests: mptcp: lib: skip if missing symbol ... commit 673004821ab98c6645bd21af56a290854e88f533 upstream. Selftests are supposed to run on any kernels, including the old ones not supporting all MPTCP features. New functions are now available to easily detect if a certain feature is missing by looking at kallsyms. These new helpers are going to be used in the following commits. In order to ease the backport of such future patches, it would be good if this patch is backported up to the introduction of MPTCP selftests, hence the Fixes tag below: this type of check was supposed to be done from the beginning. Link: https://github.com/multipath-tcp/mptcp_net-next/issues/368 Fixes: 048d19d444 ("mptcp: add basic kselftest for mptcp") Cc: stable@vger.kernel.org Signed-off-by: Matthieu Baerts <matthieu.baerts@tessares.net> Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-06-28 10:29:41 +02:00
Greg Kroah-Hartman	2210dcc35b	Merge 5.15.118 into android13-5.15-lts ... Changes in 5.15.118 test_firmware: Use kstrtobool() instead of strtobool() test_firmware: prevent race conditions by a correct implementation of locking test_firmware: fix a memory leak with reqs buffer ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate drm/amdgpu: fix Null pointer dereference error in amdgpu_device_recover_vram of: overlay: rename variables to be consistent of: overlay: rework overlay apply and remove kfree()s of: overlay: Fix missing of_node_put() in error case of init_overlay_changeset() power: supply: ab8500: Fix external_power_changed race power: supply: sc27xx: Fix external_power_changed race power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() ARM: dts: vexpress: add missing cache properties tools: gpio: fix debounce_period_us output of lsgpio power: supply: Ratelimit no data debug output platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 regulator: Fix error checking for debugfs_create_dir irqchip/gic-v3: Disable pseudo NMIs on Mediatek devices w/ firmware issues power: supply: Fix logic checking if system is running from battery btrfs: scrub: try harder to mark RAID56 block groups read-only btrfs: handle memory allocation failure in btrfs_csum_one_bio ASoC: soc-pcm: test if a BE can be prepared parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu() parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory() MIPS: unhide PATA_PLATFORM MIPS: Alchemy: fix dbdma2 mips: Move initrd_start check after initrd address sanitisation. ASoC: dwc: move DMA init to snd_soc_dai_driver probe() xen/blkfront: Only check REQ_FUA for writes drm:amd:amdgpu: Fix missing buffer object unlock in failure path NVMe: Add MAXIO 1602 to bogus nid list. irqchip/gic: Correctly validate OF quirk descriptors io_uring: hold uring mutex around poll removal wifi: cfg80211: fix locking in regulatory disconnect wifi: cfg80211: fix double lock bug in reg_wdev_chan_valid() epoll: ep_autoremove_wake_function should use list_del_init_careful ocfs2: fix use-after-free when unmounting read-only filesystem ocfs2: check new file size on fallocate call nios2: dts: Fix tse_mac "max-frame-size" property nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() nilfs2: fix possible out-of-bounds segment allocation in resize ioctl kexec: support purgatories with .text.hot sections x86/purgatory: remove PGO flags powerpc/purgatory: remove PGO flags ALSA: usb-audio: Add quirk flag for HEM devices to enable native DSD playback dm thin metadata: check fail_io before using data_sm nouveau: fix client work fence deletion race RDMA/uverbs: Restrict usage of privileged QKEYs net: usb: qmi_wwan: add support for Compal RXM-G1 drm/amd/display: edp do not add non-edid timings drm/amdgpu: add missing radeon secondary PCI ID ALSA: hda/realtek: Add a quirk for Compaq N14JP6 Remove DECnet support from kernel thunderbolt: dma_test: Use correct value for absent rings when creating paths thunderbolt: Mask ring interrupt on Intel hardware as well USB: serial: option: add Quectel EM061KGL series serial: lantiq: add missing interrupt ack usb: dwc3: gadget: Reset num TRBs before giving back the request RDMA/rtrs: Fix the last iu->buf leak in err path RDMA/rtrs: Fix rxe_dealloc_pd warning RDMA/rxe: Fix packet length checks spi: fsl-dspi: avoid SCK glitches with continuous transfers netfilter: nf_tables: integrate pipapo into commit protocol netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE net: enetc: correct the indexes of highest and 2nd highest TCs ping6: Fix send to link-local addresses with VRF. net/sched: simplify tcf_pedit_act net/sched: act_pedit: remove extra check for key type net/sched: act_pedit: Parse L3 Header for L4 offset net/sched: cls_u32: Fix reference counter leak leading to overflow RDMA/rxe: Remove the unused variable obj RDMA/rxe: Removed unused name from rxe_task struct RDMA/rxe: Fix the use-before-initialization error of resp_pkts iavf: remove mask from iavf_irq_enable_queues() octeontx2-af: fixed resource availability check octeontx2-af: fix lbk link credits on cn10k RDMA/mlx5: Initiate dropless RQ for RAW Ethernet functions RDMA/cma: Always set static rate to 0 for RoCE IB/uverbs: Fix to consider event queue closing also upon non-blocking mode IB/isert: Fix dead lock in ib_isert IB/isert: Fix possible list corruption in CMA handler IB/isert: Fix incorrect release of isert connection net: ethtool: correct MAX attribute value for stats ipvlan: fix bound dev checking for IPv6 l3s mode sctp: fix an error code in sctp_sf_eat_auth() igc: Clean the TX buffer and TX descriptor ring igb: fix nvm.ops.read() error handling drm/nouveau: don't detect DSM for non-NVIDIA device drm/nouveau/dp: check for NULL nv_connector->native_mode drm/nouveau: add nv_encoder pointer check for NULL cifs: fix lease break oops in xfstest generic/098 ext4: drop the call to ext4_error() from ext4_get_group_info() net/sched: cls_api: Fix lockup on flushing explicitly created chain net: lapbether: only support ethernet devices dm: don't lock fs when the map is NULL during suspend or resume net: tipc: resize nlattr array to correct size selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET afs: Fix vlserver probe RTT handling cgroup: always put cset in cgroup_css_set_put_fork rcu/kvfree: Avoid freeing new kfree_rcu() memory after old grace period neighbour: Remove unused inline function neigh_key_eq16() net: Remove unused inline function dst_hold_and_use() net: Remove DECnet leftovers from flow.h. neighbour: delete neigh_lookup_nodev as not used of: overlay: add entry to of_overlay_action_name[] mmc: block: ensure error propagation for non-blk nilfs2: reject devices with insufficient block count Linux 5.15.118 Change-Id: I6c577a46faade097c6e1962115117421e0c14a59 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-27 09:02:14 +00:00
Greg Kroah-Hartman	4660e403ec	Merge 5.15.117 into android13-5.15-lts ... Changes in 5.15.117 ata: ahci: fix enum constants for gcc-13 gcc-plugins: Reorganize gimple includes for GCC 13 remove the sx8 block driver sfc (gcc13): synchronize ef100_enqueue_skb()'s return type i40e: Remove string printing for i40e_status i40e: use int for i40e_status i40e: fix build warning in ice_fltr_add_mac_to_list() bonding (gcc13): synchronize bond_{a,t}lb_xmit() types f2fs: fix iostat lock protection blk-iocost: avoid 64-bit division in ioc_timer_fn platform/surface: aggregator: Allow completion work-items to be executed in parallel spi: qup: Request DMA before enabling clocks afs: Fix setting of mtime when creating a file/dir/symlink wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll neighbour: fix unaligned access to pneigh_entry net: dsa: lan9303: allow vid != 0 in port_fdb_{add|del} methods bpf: Fix UAF in task local storage net/ipv6: fix bool/int mismatch for skip_notify_on_dev_down net/smc: Avoid to access invalid RMBs' MRs in SMCRv1 ADD LINK CONT net: enetc: correct the statistics of rx bytes net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values drm/i915: Explain the magic numbers for AUX SYNC/precharge length drm/i915: Use 18 fast wake AUX sync len Bluetooth: Fix l2cap_disconnect_req deadlock Bluetooth: L2CAP: Add missing checks for invalid DCID qed/qede: Fix scheduling while atomic wifi: cfg80211: fix locking in sched scan stop work selftests/bpf: Verify optval=NULL case selftests/bpf: Fix sockopt_sk selftest netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper netfilter: ipset: Add schedule point in call_ad(). ipv6: rpl: Fix Route of Death. rfs: annotate lockless accesses to sk->sk_rxhash rfs: annotate lockless accesses to RFS sock flow table drm/i915/selftests: Increase timeout for live_parallel_switch drm/i915/selftests: Stop using kthread_stop() drm/i915/selftests: Add some missing error propagation net: sched: move rtm_tca_policy declaration to include file net: sched: act_police: fix sparse errors in tcf_police_dump() net: sched: fix possible refcount leak in tc_chain_tmplt_add() bpf: Add extra path pointer check to d_path helper lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() bnxt_en: Don't issue AP reset during ethtool's reset operation bnxt_en: Query default VLAN before VNIC setup on a VF bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks batman-adv: Broken sync while rescheduling delayed work Input: xpad - delete a Razer DeathAdder mouse VID/PID entry Input: psmouse - fix OOB access in Elantech protocol Input: fix open count when closing inhibited device ALSA: hda/realtek: Add quirk for Clevo NS50AU ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01 ALSA: hda/realtek: Add Lenovo P3 Tower platform drm/i915/gt: Use the correct error value when kernel_context() fails drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid SKUs drm/amdgpu: fix xclk freq on CHIP_STONEY drm/amd/pm: Fix power context allocation in SMU13 can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket can: j1939: change j1939_netdev_lock type to mutex can: j1939: avoid possible use-after-free when j1939_can_rx_register fails ceph: fix use-after-free bug for inodes when flushing capsnaps s390/dasd: Use correct lock while counting channel queue length Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk Bluetooth: hci_qca: fix debugfs registration tee: amdtee: Add return_origin to 'struct tee_cmd_load_ta' rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting rbd: get snapshot context after exclusive lock is ensured to be held pinctrl: meson-axg: add missing GPIOA_18 gpio group usb: usbfs: Enforce page requirements for mmap usb: usbfs: Use consistent mmap functions ARM: dts: at91: sama7g5ek: fix debounce delay property for shdwc ASoC: codecs: wsa881x: do not set can_multi_write flag arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified sc7180-lite boards arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP signals arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts ASoC: mediatek: mt8195-afe-pcm: Convert to platform remove callback returning void ASoC: mediatek: mt8195: fix use-after-free in driver remove path arm64: dts: imx8mn-beacon: Fix SPI CS pinmux i2c: mv64xxx: Fix reading invalid status value in atomic mode firmware: arm_ffa: Set handle field to zero in memory descriptor i2c: sprd: Delete i2c adapter in .remove's error path eeprom: at24: also select REGMAP riscv: fix kprobe __user string arg print fault issue vduse: avoid empty string for dev name vhost: support PACKED when setting-getting vring_base vhost_vdpa: support PACKED when setting-getting vring_base Revert "ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled" ext4: only check dquot_initialize_needed() when debugging Revert "debugobject: Ensure pool refill (again)" xfs: verify buffer contents when we skip log replay Revert "staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE" Linux 5.15.117 Change-Id: I134eb653ad25faffbe6ba413d319d4209da671d5 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-27 08:18:09 +00:00
Greg Kroah-Hartman	9b36b1ce2b	Merge 5.15.116 into android13-5.15-lts ... Changes in 5.15.116 RDMA/bnxt_re: Fix the page_size used during the MR creation RDMA/efa: Fix unsupported page sizes in device RDMA/hns: Fix base address table allocation RDMA/hns: Modify the value of long message loopback slice dmaengine: at_xdmac: Move the free desc to the tail of the desc list dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved() RDMA/bnxt_re: Fix a possible memory leak RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx iommu/rockchip: Fix unwind goto issue iommu/amd: Don't block updates to GATag if guest mode is on dmaengine: pl330: rename _start to prevent build error riscv: Fix unused variable warning when BUILTIN_DTB is set net/mlx5: fw_tracer, Fix event handling net/mlx5e: Don't attach netdev profile while handling internal error net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure netrom: fix info-leak in nr_write_internal() af_packet: Fix data-races of pkt_sk(sk)->num. amd-xgbe: fix the false linkup in xgbe_phy_status mtd: rawnand: ingenic: fix empty stub helper definitions RDMA/irdma: Add SW mechanism to generate completions on error RDMA/irdma: Prevent QP use after free RDMA/irdma: Fix Local Invalidate fencing af_packet: do not use READ_ONCE() in packet_bind() tcp: deny tcp_disconnect() when threads are waiting tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set net/sched: sch_ingress: Only create under TC_H_INGRESS net/sched: sch_clsact: Only create under TC_H_CLSACT net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs net/sched: Prohibit regrafting ingress or clsact Qdiscs net: sched: fix NULL pointer dereference in mq_attach net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report udp6: Fix race condition in udp6_sendmsg & connect net/mlx5e: Fix error handling in mlx5e_refresh_tirs net/mlx5: Read embedded cpu after init bit cleared net/sched: flower: fix possible OOB write in fl_set_geneve_opt() net: dsa: mv88e6xxx: Increase wait after reset deactivation mtd: rawnand: marvell: ensure timing values are written mtd: rawnand: marvell: don't set the NAND frequency select rtnetlink: call validate_linkmsg in rtnl_create_link drm/amdgpu: release gpu full access after "amdgpu_device_ip_late_init" watchdog: menz069_wdt: fix watchdog initialisation ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs. drm/amdgpu: Use the default reset when loading or reloading the driver mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() drm/ast: Fix ARM compatibility btrfs: abort transaction when sibling keys check fails for leaves ARM: 9295/1: unwind:fix unwind abort for uleb128 case media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield gfs2: Don't deref jdesc in evict fbdev: imsttfb: Fix use after free bug in imsttfb_probe fbdev: modedb: Add 1920x1080 at 60 Hz video mode fbdev: stifb: Fix info entry in sti_struct on error path nbd: Fix debugfs_create_dir error checking block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G nvme-pci: add quirk for missing secondary temperature thresholds ASoC: dwc: limit the number of overrun messages um: harddog: fix modular build xfrm: Check if_id in inbound policy/secpath match ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI codecs ASoC: ssm2602: Add workaround for playback distortions media: dvb_demux: fix a bug for the continuity counter media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address media: netup_unidvb: fix irq init by register it at the end of probe media: dvb_ca_en50221: fix a size write bug media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table media: dvb-core: Fix use-after-free due on race condition at dvb_net media: dvb-core: Fix use-after-free due to race at dvb_register_device() media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 s390/pkey: zeroize key blobs s390/topology: honour nr_cpu_ids when adding CPUs ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value ARM: dts: stm32: add pin map for CAN controller on stm32f7 arm64/mm: mark private VM_FAULT_X defines as vm_fault_t arm64: vdso: Pass (void *) to virt_to_page() wifi: mac80211: simplify chanctx allocation scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed wifi: b43: fix incorrect __packed annotation netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT nvme-multipath: don't call blk_mark_disk_dead in nvme_mpath_remove_disk ALSA: oss: avoid missing-prototype warnings drm/msm: Be more shouty if per-process pgtables aren't working atm: hide unused procfs functions drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged nvme-pci: Add quirk for Teamgroup MP33 SSD mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() media: uvcvideo: Don't expose unsupported formats to userspace iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT method iio: adc: mxs-lradc: fix the order of two cleanup operations HID: google: add jewel USB id HID: wacom: avoid integer overflow in wacom_intuos_inout() iio: imu: inv_icm42600: fix timestamp reset dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value iio: light: vcnl4035: fixed chip ID check iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag iio: dac: mcp4725: Fix i2c_master_send() return value handling iio: adc: ad7192: Change "shorted" channels to differential iio: dac: build ad5758 driver when AD5758 is selected net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type usb: gadget: f_fs: Add unbind event before functionfs_unbind md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk() misc: fastrpc: return -EPIPE to invocations on device removal misc: fastrpc: reject new invocations during device removal scsi: stex: Fix gcc 13 warnings ata: libata-scsi: Use correct device no in ata_find_dev() drm/amd/pm: reverse mclk and fclk clocks levels for vangogh drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp drm/amd/pm: reverse mclk and fclk clocks levels for renoir x86/boot: Wrap literal addresses in absolute_pointer() ath6kl: Use struct_group() to avoid size-mismatched casting block/blk-iocost (gcc13): keep large values in a new enum mmc: vub300: fix invalid response handling mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK btrfs: fix csum_tree_block page iteration to avoid tripping on -Werror=array-bounds powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall iommu/amd: Fix domain flush size when syncing iotlb usb: cdns3: allocate TX FIFO size according to composite EP number usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM block: fix revalidate performance regression selinux: don't use make's grouped targets feature yet tracing/probe: trace_probe_primary_from_call(): checked list_first_entry selftests: mptcp: connect: skip if MPTCP is not supported selftests: mptcp: pm nl: skip if MPTCP is not supported selftests: mptcp: sockopt: skip if MPTCP is not supported ext4: add EA_INODE checking to ext4_iget() ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() ext4: disallow ea_inodes with extended attributes ext4: add lockdep annotations for i_data_sem for ea_inode's fbcon: Fix null-ptr-deref in soft_cursor serial: 8250_tegra: Fix an error handling path in tegra_uart_probe() test_firmware: fix the memory leak of the allocated firmware buffer KVM: x86: Account fastpath-only VM-Exits in vCPU stats ksmbd: fix credit count leakage ksmbd: fix incorrect AllocationSize set in smb2_get_info KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() regmap: Account for register length when chunking tpm, tpm_tis: Request threaded interrupt handler drm/rcar: stop using 'imply' for dependencies scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD) scsi: dpt_i2o: Do not process completions with invalid addresses drm/amdgpu/gfx10: Disable gfxoff before disabling powergating. selftests: mptcp: diag: skip if MPTCP is not supported selftests: mptcp: simult flows: skip if MPTCP is not supported selftests: mptcp: join: skip if MPTCP is not supported ext4: enable the lazy init thread when remounting read/write ARM: defconfig: drop CONFIG_DRM_RCAR_LVDS RDMA/irdma: Fix drain SQ hang with no completion RDMA/irdma: Do not generate SW completions for NOPs Linux 5.15.116 Change-Id: I30886dcef1327a03133a6371a890f53dbd4b4bda Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-26 15:22:15 +00:00