When the dwc3 device is runtime suspended, various required clocks are in
disabled state and it is not guaranteed that access to any registers would
work. Depending on the SoC glue, a register read could be as benign as
returning 0 or be fatal enough to hang the system.
In order to prevent such scenarios of fatal errors, make sure to resume
dwc3 then allow the function to proceed.
Fixes: 72246da40f ("usb: Introduce DesignWare USB3 DRD Driver")
Cc: stable@vger.kernel.org #3.2: 30332eeefe: debugfs: regset32: Add Runtime PM support
Signed-off-by: Udipto Goswami <quic_ugoswami@quicinc.com>
Reviewed-by: Johan Hovold <johan+linaro@kernel.org>
Tested-by: Johan Hovold <johan+linaro@kernel.org>
Acked-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Link: https://lore.kernel.org/r/20230509144836.6803-1-quic_ugoswami@quicinc.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Bug: 282654910
(cherry picked from commit 614ce6a2ea50068b45339257891e51e639ac9001 usb-linus)
Change-Id: Ie89d818b2d77681075cc517184ad1a5fa755dd88
Signed-off-by: Udipto Goswami <quic_ugoswami@quicinc.com>
Several sequences utilize the same routine for forcing the control endpoint
back into the SETUP phase. This is required, because those operations need
to ensure that EP0 is back in the default state.
Fixes: c96683798e27 ("usb: dwc3: ep0: Don't prepare beyond Setup stage")
Cc: stable@vger.kernel.org
Acked-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Signed-off-by: Wesley Cheng <quic_wcheng@quicinc.com>
Link: https://lore.kernel.org/r/20230420212759.29429-2-quic_wcheng@quicinc.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Bug: 280741172
Bug: 277690231
Change-Id: I9b468a021b04e765b074d9b48f46c6e828022705
(cherry picked from commit 8f40fc0808137c157dd408d2632e63bfca2aecdb usb-linus)
Signed-off-by: Wesley Cheng <quic_wcheng@quicinc.com>
Signed-off-by: Udipto Goswami <quic_ugoswami@quicinc.com>
(cherry picked from commit 15e99e4bfa52797c066ae4fec1babd3f3b60f093)
Do not call gadget stop until the poll for controller halt is
completed. DEVTEN is cleared as part of gadget stop, so the intention to
allow ep0 events to continue while waiting for controller halt is not
happening.
Fixes: c96683798e27 ("usb: dwc3: ep0: Don't prepare beyond Setup stage")
Cc: stable@vger.kernel.org
Acked-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Signed-off-by: Wesley Cheng <quic_wcheng@quicinc.com>
Link: https://lore.kernel.org/r/20230420212759.29429-2-quic_wcheng@quicinc.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Bug: 280741172
Bug: 277690231
[ugoswami: Modified the function dwc3_gadget_run_stop to remove dependency from cleanup patch.]
(cherry picked from commit 39674be56fba1cd3a03bf4617f523a35f85fd2c1 usb-linus)
Change-Id: I2a8a42e938a680cefc0d1a56274caf155a4f99cd
Signed-off-by: Wesley Cheng <quic_wcheng@quicinc.com>
Signed-off-by: Udipto Goswami <quic_ugoswami@quicinc.com>
(cherry picked from commit 45902380021d3fe742f9e6d49337ad3746f00d64)
It was observed that there are hosts that may complete pending SETUP
transactions before the stop active transfers and controller halt occurs,
leading to lingering endxfer commands on DEPs on subsequent pullup/gadget
start iterations.
dwc3_gadget_ep_disable name=ep8in flags=0x3009 direction=1
dwc3_gadget_ep_disable name=ep4in flags=1 direction=1
dwc3_gadget_ep_disable name=ep3out flags=1 direction=0
usb_gadget_disconnect deactivated=0 connected=0 ret=0
The sequence shows that the USB gadget disconnect (dwc3_gadget_pullup(0))
routine completed successfully, allowing for the USB gadget to proceed with
a USB gadget connect. However, if this occurs the system runs into an
issue where:
BUG: spinlock already unlocked on CPU
spin_bug+0x0
dwc3_remove_requests+0x278
dwc3_ep0_out_start+0xb0
__dwc3_gadget_start+0x25c
This is due to the pending endxfers, leading to gadget start (w/o lock
held) to execute the remove requests, which will unlock the dwc3
spinlock as part of giveback.
To mitigate this, resolve the pending endxfers on the pullup disable
path by re-locating the SETUP phase check after stop active transfers, since
that is where the DWC3_EP_DELAY_STOP is potentially set. This also allows
for handling of a host that may be unresponsive by using the completion
timeout to trigger the stall and restart for EP0.
Fixes: c96683798e27 ("usb: dwc3: ep0: Don't prepare beyond Setup stage")
Signed-off-by: Wesley Cheng <quic_wcheng@quicinc.com>
Fixes: c96683798e27 ("usb: dwc3: ep0: Don't prepare beyond Setup stage")
Cc: stable@vger.kernel.org
Acked-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Signed-off-by: Wesley Cheng <quic_wcheng@quicinc.com>
Link: https://lore.kernel.org/r/20230413195742.11821-2-quic_wcheng@quicinc.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Bug: 280741172
Bug: 277690231
(cherry picked from commit 02435a739b81ae24aff5d6e930efef9458e2af3c usb-linus)
Change-Id: Ifa9aeab01a4f45feaae59c2d393e6712f5370f08
Signed-off-by: Wesley Cheng <quic_wcheng@quicinc.com>
Signed-off-by: Udipto Goswami <quic_ugoswami@quicinc.com>
(cherry picked from commit 5dd4405fee1bf7505d4211c083c695a2cf7adaea)
Previously, there was a 100uS delay inserted after issuing an end transfer
command for specific controller revisions. This was due to the fact that
there was a GUCTL2 bit field which enabled synchronous completion of the
end transfer command once the CMDACT bit was cleared in the DEPCMD
register. Since this bit does not exist for all controller revisions and
the current implementation heavily relies on utizling the EndTransfer
command completion interrupt, add the delay back in for uses where the
interrupt on completion bit is not set, and increase the duration to 1ms
for the controller to complete the command.
An issue was seen where the USB request buffer was unmapped while the DWC3
controller was still accessing the TRB. However, it was confirmed that the
end transfer command was successfully submitted. (no end transfer timeout)
In situations, such as dwc3_gadget_soft_disconnect() and
__dwc3_gadget_ep_disable(), the dwc3_remove_request() is utilized, which
will issue the end transfer command, and follow up with
dwc3_gadget_giveback(). At least for the USB ep disable path, it is
required for any pending and started requests to be completed and returned
to the function driver in the same context of the disable call. Without
the GUCTL2 bit, it is not ensured that the end transfer is completed before
the buffers are unmapped.
Fixes: cf2f8b63f7 ("usb: dwc3: gadget: Remove END_TRANSFER delay")
Cc: stable <stable@kernel.org>
Signed-off-by: Wesley Cheng <quic_wcheng@quicinc.com>
Acked-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Link: https://lore.kernel.org/r/20230306200557.29387-1-quic_wcheng@quicinc.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Bug: 271815733
Bug: 279141860
Change-Id: I9e06d4810e7052717c7b8e16facd7b765b1ce414
(cherry picked from commit d8a2bb4eb75866275b5cf7de2e593ac3449643e2 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-linus)
Signed-off-by: Wesley Cheng <quic_wcheng@quicinc.com>
(cherry picked from commit 35a0e36ee86b9328e6d4e7b353638df730d7bb2e)
This reverts commit 17f230fd930d9c71578c197001623574bfec530d.
Reason for revert: Still present MTP functional issues when using MAC OS.
We can revert this later if we find and fix any userspace issues that might be causing this.
Bug: 188778499
Change-Id: I9507207b4093d3eba25132657c84ecf7407d6df9
Signed-off-by: Saravana Kannan <saravanak@google.com>
(cherry picked from commit f2d87eb3a02f9bc3442910120f431dac74c8ae10)
If we delay sending End Transfer for Setup TRB to be prepared, we need
to check if the End Transfer was in preparation for a driver
teardown/soft-disconnect. In those cases, just send the End Transfer
command without delay.
In the case of soft-disconnect, there's a very small chance the command
may not go through immediately. But should it happen, the Setup TRB will
be prepared during the polling of the controller halted state, allowing
the command to go through then.
In the case of disabling endpoint due to reconfiguration (e.g.
set_interface(alt-setting) or usb reset), then it's driven by the host.
Typically the host wouldn't immediately cancel the control request and
send another control transfer to trigger the End Transfer command
timeout.
Bug: 254441685
Fixes: 4db0fbb60136 ("usb: dwc3: gadget: Don't delay End Transfer on delayed_status")
Cc: stable@vger.kernel.org
Signed-off-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Link: https://lore.kernel.org/r/f1617a323e190b9cc408fb8b65456e32b5814113.1670546756.git.Thinh.Nguyen@synopsys.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit c4e3ef5685393c5051b52cf1e94b8891d49793ab)
Signed-off-by: Lee Jones <joneslee@google.com>
Change-Id: I8467a9e885f1006bbe0c10de3f22405918961352
Currently we process the suspend interrupt event only if the
device is in configured state. Consider a case where device
is not configured and got suspend interrupt, in that case our
gadget will still use 100mA as composite_suspend didn't happen.
But battery charging specification (BC1.2) expects a downstream
device to draw less than 2.5mA when unconnected OR suspended.
Fix this by removing the condition for processing suspend event,
and thus composite_resume would set vbus draw to 2.
Fixes: 72704f876f ("dwc3: gadget: Implement the suspend entry event handler")
Signed-off-by: Prashanth K <quic_prashk@quicinc.com>
Acked-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Link: https://lore.kernel.org/r/1677217619-10261-2-git-send-email-quic_prashk@quicinc.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Bug: 272680990
(cherry picked from commit 4decf4060ecfee1f7a710999fcd421645ac0c419
https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git/ usb-next)
Change-Id: I902b8911debb7c049a4a0128077ea8d931900d1d
Signed-off-by: Prashanth K <quic_prashk@quicinc.com>
Changes in 5.15.93
firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region
bus: sunxi-rsb: Fix error handling in sunxi_rsb_init()
ASoC: Intel: boards: fix spelling in comments
ASoC: Intel: bytcht_es8316: move comment to the right place
ASoC: Intel: bytcht_es8316: Drop reference count of ACPI device after use
ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
ASoC: Intel: bytcr_rt5640: Drop reference count of ACPI device after use
ASoC: Intel: bytcr_wm5102: Drop reference count of ACPI device after use
bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers
ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
bpf: Support <8-byte scalar spill and refill
bpf: Fix to preserve reg parent/live fields when copying range info
bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX
drm/vc4: hdmi: make CEC adapter name unique
scsi: Revert "scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT"
vhost/net: Clear the pending messages when the backend is removed
WRITE is "data source", not destination...
READ is "data destination", not source...
fix iov_iter_bvec() "direction" argument
fix "direction" argument of iov_iter_kvec()
ice: Prevent set_channel from changing queues while RDMA active
qede: execute xdp_do_flush() before napi_complete_done()
virtio-net: execute xdp_do_flush() before napi_complete_done()
dpaa_eth: execute xdp_do_flush() before napi_complete_done()
dpaa2-eth: execute xdp_do_flush() before napi_complete_done()
sfc: correctly advertise tunneled IPv6 segmentation
net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices
block/bfq-iosched.c: use "false" rather than "BLK_RW_ASYNC"
block, bfq: replace 0/1 with false/true in bic apis
block, bfq: fix uaf for bfqq in bic_set_bfqq()
netrom: Fix use-after-free caused by accept on already connected socket
drm/i915/guc: Fix locking when searching for a hung request
drm/i915/adlp: Fix typo for reference clock
netfilter: br_netfilter: disable sabotage_in hook after first suppression
squashfs: harden sanity check in squashfs_read_xattr_id_table
net: phy: meson-gxl: Add generic dummy stubs for MMD register access
ip/ip6_gre: Fix changing addr gen mode not generating IPv6 link local address
ip/ip6_gre: Fix non-point-to-point tunnel not generating IPv6 link local address
riscv: kprobe: Fixup kernel panic when probing an illegal position
igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp()
can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
ata: libata: Fix sata_down_spd_limit() when no link speed is reported
selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning
selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided
selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs
selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking
virtio-net: Keep stop() to follow mirror sequence of open()
net: openvswitch: fix flow memory leak in ovs_flow_cmd_new
efi: fix potential NULL deref in efi_mem_reserve_persistent
i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU
i2c: mxs: suppress probe-deferral error message
scsi: target: core: Fix warning on RT kernels
perf/x86/intel: Add Emerald Rapids
scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
i2c: rk3x: fix a bunch of kernel-doc warnings
platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table
platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF
net/x25: Fix to not accept on connected socket
drm/amd/display: Fix timing not changning when freesync video is enabled
iio: adc: stm32-dfsdm: fill module aliases
usb: dwc3: qcom: enable vbus override when in OTG dr-mode
usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait
vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
Input: i8042 - add Clevo PCX0DX to i8042 quirk table
fbcon: Check font dimension limits
net: qrtr: free memory on error path in radix_tree_insert()
watchdog: diag288_wdt: do not use stack buffers for hardware data
watchdog: diag288_wdt: fix __diag288() inline assembly
ALSA: hda/realtek: Add Acer Predator PH315-54
efi: Accept version 2 of memory attributes table
iio: hid: fix the retval in accel_3d_capture_sample
iio: hid: fix the retval in gyro_3d_capture_sample
iio: adc: berlin2-adc: Add missing of_node_put() in error path
iio:adc:twl6030: Enable measurements of VUSB, VBAT and others
iio: imu: fxos8700: fix ACCEL measurement range selection
iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback
iio: imu: fxos8700: fix IMU data bits returned to user space
iio: imu: fxos8700: fix map label of channel type to MAGN sensor
iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback
iio: imu: fxos8700: fix incorrect ODR mode readback
iio: imu: fxos8700: fix failed initialization ODR mode assignment
iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN
iio: imu: fxos8700: fix MAGN sensor scale and unit
nvmem: qcom-spmi-sdam: fix module autoloading
parisc: Fix return code of pdc_iodc_print()
parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case
riscv: disable generation of unwind tables
mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps
usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints
kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup()
x86/debug: Fix stack recursion caused by wrongly ordered DR7 accesses
fpga: stratix10-soc: Fix return value check in s10_ops_write_init()
mm/swapfile: add cond_resched() in get_swap_pages()
highmem: round down the address passed to kunmap_flush_on_unmap()
Squashfs: fix handling and sanity checking of xattr_ids count
drm/i915: Fix potential bit_17 double-free
nvmem: core: initialise nvmem->id early
nvmem: core: remove nvmem_config wp_gpio
nvmem: core: fix cell removal on error
serial: 8250_dma: Fix DMA Rx completion race
serial: 8250_dma: Fix DMA Rx rearm race
phy: qcom-qmp-combo: disable runtime PM on unbind
phy: qcom-qmp-combo: fix memleak on probe deferral
phy: qcom-qmp-usb: fix memleak on probe deferral
phy: qcom-qmp-combo: fix broken power on
phy: qcom-qmp-combo: fix runtime suspend
bpf: Fix incorrect state pruning for <8B spill/fill
bpf: Do not reject when the stack read size is different from the tracked scalar size
iio:adc:twl6030: Enable measurement of VAC
powerpc/imc-pmu: Revert nest_init_lock to being a mutex
fs/ntfs3: Validate attribute data and valid sizes
ovl: Use "buf" flexible array for memcpy() destination
fbdev: smscufx: fix error handling code in ufx_usb_probe
f2fs: fix to do sanity check on i_extra_isize in is_alive()
wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads
gfs2: Cosmetic gfs2_dinode_{in,out} cleanup
gfs2: Always check inode size of inline inodes
bpf: Skip invalid kfunc call in backtrack_insn
Linux 5.15.93
Change-Id: I36ae60a781fc72667896bc649af5788cda1ef6c2
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Changes in 5.15.87
usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init
cifs: fix oops during encryption
Revert "selftests/bpf: Add test for unstable CT lookup API"
nvme-pci: fix doorbell buffer value endianness
nvme-pci: fix mempool alloc size
nvme-pci: fix page size checks
ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA
ACPI: resource: do IRQ override on LENOVO IdeaPad
ACPI: resource: do IRQ override on XMG Core 15
ACPI: resource: do IRQ override on Lenovo 14ALC7
block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq
ata: ahci: Fix PCS quirk application for suspend
nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition
nvmet: don't defer passthrough commands with trivial effects to the workqueue
fs/ntfs3: Validate BOOT record_size
fs/ntfs3: Add overflow check for attribute size
fs/ntfs3: Validate data run offset
fs/ntfs3: Add null pointer check to attr_load_runs_vcn
fs/ntfs3: Fix memory leak on ntfs_fill_super() error path
fs/ntfs3: Add null pointer check for inode operations
fs/ntfs3: Validate attribute name offset
fs/ntfs3: Validate buffer length while parsing index
fs/ntfs3: Validate resident attribute name
fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15
fs/ntfs3: Validate index root when initialize NTFS security
fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init()
fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super()
fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
fs/ntfs3: Fix slab-out-of-bounds in r_page
objtool: Fix SEGFAULT
powerpc/rtas: avoid device tree lookups in rtas_os_term()
powerpc/rtas: avoid scheduling in rtas_os_term()
HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint
HID: plantronics: Additional PIDs for double volume key presses quirk
pstore: Properly assign mem_type property
pstore/zone: Use GFP_ATOMIC to allocate zone buffer
hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount
binfmt: Fix error return code in load_elf_fdpic_binary()
ovl: Use ovl mounter's fsuid and fsgid in ovl_link()
ALSA: line6: correct midi status byte when receiving data from podxt
ALSA: line6: fix stack overflow in line6_midi_transmit
pnode: terminate at peers of source
mfd: mt6360: Add bounds checking in Regmap read/write call-backs
md: fix a crash in mempool_free
mm, compaction: fix fast_isolate_around() to stay within boundaries
f2fs: should put a page when checking the summary info
f2fs: allow to read node block after shutdown
mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING
tpm: acpi: Call acpi_put_table() to fix memory leak
tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak
tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak
SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
kcsan: Instrument memcpy/memset/memmove with newer Clang
ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio
ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire
rcu-tasks: Simplify trc_read_check_handler() atomic operations
net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO
net/af_packet: make sure to pull mac header
media: stv0288: use explicitly signed char
soc: qcom: Select REMAP_MMIO for LLCC driver
kest.pl: Fix grub2 menu handling for rebooting
ktest.pl minconfig: Unset configs instead of just removing them
jbd2: use the correct print format
perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D
perf/x86/intel/uncore: Clear attr_update properly
arm64: dts: qcom: sdm845-db845c: correct SPI2 pins drive strength
mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K
btrfs: fix resolving backrefs for inline extent followed by prealloc
ARM: ux500: do not directly dereference __iomem
arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength
selftests: Use optional USERCFLAGS and USERLDFLAGS
PM/devfreq: governor: Add a private governor_data for governor
cpufreq: Init completion before kobject_init_and_add()
ALSA: patch_realtek: Fix Dell Inspiron Plus 16
ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops
fs: dlm: fix sock release if listen fails
fs: dlm: retry accept() until -EAGAIN or error returns
mptcp: mark ops structures as ro_after_init
mptcp: remove MPTCP 'ifdef' in TCP SYN cookies
dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort
dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
dm thin: Use last transaction's pmd->root when commit failed
dm thin: resume even if in FAIL mode
dm thin: Fix UAF in run_timer_softirq()
dm integrity: Fix UAF in dm_integrity_dtr()
dm clone: Fix UAF in clone_dtr()
dm cache: Fix UAF in destroy()
dm cache: set needs_check flag after aborting metadata
tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx'
perf/core: Call LSM hook after copying perf_event_attr
of/kexec: Fix reading 32-bit "linux,initrd-{start,end}" values
KVM: VMX: Resume guest immediately when injecting #GP on ECREATE
KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1
x86/microcode/intel: Do not retry microcode reloading on the APs
ftrace/x86: Add back ftrace_expected for ftrace bug reports
x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK
x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK
tracing: Fix race where eprobes can be called before the event
tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE
tracing/hist: Fix wrong return value in parse_action_params()
tracing/probes: Handle system names with hyphens
tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line
staging: media: tegra-video: fix chan->mipi value on error
staging: media: tegra-video: fix device_node use after free
ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod
media: dvb-core: Fix double free in dvb_register_device()
media: dvb-core: Fix UAF due to refcount races at releasing
cifs: fix confusing debug message
cifs: fix missing display of three mount options
rtc: ds1347: fix value written to century register
block: mq-deadline: Do not break sequential write streams to zoned HDDs
md/bitmap: Fix bitmap chunk size overflow issues
efi: Add iMac Pro 2017 to uefi skip cert quirk
wifi: wilc1000: sdio: fix module autoloading
ASoC: jz4740-i2s: Handle independent FIFO flush bits
ipu3-imgu: Fix NULL pointer dereference in imgu_subdev_set_selection()
ipmi: fix long wait in unload when IPMI disconnect
mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type()
ima: Fix a potential NULL pointer access in ima_restore_measurement_list
ipmi: fix use after free in _ipmi_destroy_user()
PCI: Fix pci_device_is_present() for VFs by checking PF
PCI/sysfs: Fix double free in error path
riscv: stacktrace: Fixup ftrace_graph_ret_addr retp argument
riscv: mm: notify remote harts about mmu cache updates
crypto: n2 - add missing hash statesize
crypto: ccp - Add support for TEE for PCI ID 0x14CA
driver core: Fix bus_type.match() error handling in __driver_attach()
phy: qcom-qmp-combo: fix sc8180x reset
iommu/amd: Fix ivrs_acpihid cmdline parsing code
remoteproc: core: Do pm_relax when in RPROC_OFFLINE state
parisc: led: Fix potential null-ptr-deref in start_task()
device_cgroup: Roll back to original exceptions after copy failure
drm/connector: send hotplug uevent on connector cleanup
drm/vmwgfx: Validate the box size for the snooped cursor
drm/i915/dsi: fix VBT send packet port selection for dual link DSI
drm/ingenic: Fix missing platform_driver_unregister() call in ingenic_drm_init()
ext4: silence the warning when evicting inode with dioread_nolock
ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop
ext4: remove trailing newline from ext4_msg() message
fs: ext4: initialize fsdata in pagecache_write()
ext4: fix use-after-free in ext4_orphan_cleanup
ext4: fix undefined behavior in bit shift for ext4_check_flag_values
ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode
ext4: add helper to check quota inums
ext4: fix bug_on in __es_tree_search caused by bad quota inode
ext4: fix reserved cluster accounting in __es_remove_extent()
ext4: check and assert if marking an no_delete evicting inode dirty
ext4: fix bug_on in __es_tree_search caused by bad boot loader inode
ext4: fix leaking uninitialized memory in fast-commit journal
ext4: fix uninititialized value in 'ext4_evict_inode'
ext4: init quota for 'old.inode' in 'ext4_rename'
ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline
ext4: fix corruption when online resizing a 1K bigalloc fs
ext4: fix error code return to user-space in ext4_get_branch()
ext4: avoid BUG_ON when creating xattrs
ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
ext4: fix inode leak in ext4_xattr_inode_create() on an error path
ext4: initialize quota before expanding inode in setproject ioctl
ext4: avoid unaccounted block allocation when expanding inode
ext4: allocate extended attribute value in vmalloc area
drm/amdgpu: handle polaris10/11 overlap asics (v2)
drm/amdgpu: make display pinning more flexible (v2)
block: mq-deadline: Fix dd_finish_request() for zoned devices
tracing: Fix issue of missing one synthetic field
ext4: remove unused enum EXT4_FC_COMMIT_FAILED
ext4: use ext4_debug() instead of jbd_debug()
ext4: introduce EXT4_FC_TAG_BASE_LEN helper
ext4: factor out ext4_fc_get_tl()
ext4: fix potential out of bound read in ext4_fc_replay_scan()
ext4: disable fast-commit of encrypted dir operations
ext4: don't set up encryption key during jbd2 transaction
ext4: add missing validation of fast-commit record lengths
ext4: fix unaligned memory access in ext4_fc_reserve_space()
ext4: fix off-by-one errors in fast-commit block filling
ARM: renumber bits related to _TIF_WORK_MASK
phy: qcom-qmp-combo: fix out-of-bounds clock access
btrfs: replace strncpy() with strscpy()
btrfs: move missing device handling in a dedicate function
btrfs: fix extent map use-after-free when handling missing device in read_one_chunk
x86/mce: Get rid of msr_ops
x86/MCE/AMD: Clear DFR errors found in THR handler
media: s5p-mfc: Fix to handle reference queue during finishing
media: s5p-mfc: Clear workbit to handle error condition
media: s5p-mfc: Fix in register read and write for H264
perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor
perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data
ravb: Fix "failed to switch device to config mode" message during unbind
ext4: goto right label 'failed_mount3a'
ext4: correct inconsistent error msg in nojournal mode
mbcache: automatically delete entries from cache on freeing
ext4: fix deadlock due to mbcache entry corruption
drm/i915/migrate: don't check the scratch page
drm/i915/migrate: fix offset calculation
drm/i915/migrate: fix length calculation
SUNRPC: ensure the matching upcall is in-flight upon downcall
btrfs: fix an error handling path in btrfs_defrag_leaves()
bpf: pull before calling skb_postpull_rcsum()
drm/panfrost: Fix GEM handle creation ref-counting
netfilter: nf_tables: consolidate set description
netfilter: nf_tables: add function to create set stateful expressions
netfilter: nf_tables: perform type checking for existing sets
vmxnet3: correctly report csum_level for encapsulated packet
netfilter: nf_tables: honor set timeout and garbage collection updates
veth: Fix race with AF_XDP exposing old or uninitialized descriptors
nfsd: shut down the NFSv4 state objects before the filecache
net: hns3: add interrupts re-initialization while doing VF FLR
net: hns3: refactor hns3_nic_reuse_page()
net: hns3: extract macro to simplify ring stats update code
net: hns3: fix miss L3E checking for rx packet
net: hns3: fix VF promisc mode not update when mac table full
net: sched: fix memory leak in tcindex_set_parms
qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure
net: dsa: mv88e6xxx: depend on PTP conditionally
nfc: Fix potential resource leaks
vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init()
vhost/vsock: Fix error handling in vhost_vsock_init()
vringh: fix range used in iotlb_translate()
vhost: fix range used in translate_desc()
vdpa_sim: fix vringh initialization in vdpasim_queue_ready()
net/mlx5: E-Switch, properly handle ingress tagged packets on VST
net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path
net/mlx5: Avoid recovery in probe flows
net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default
net/mlx5e: TC, Refactor mlx5e_tc_add_flow_mod_hdr() to get flow attr
net/mlx5e: Always clear dest encap in neigh-update-del
net/mlx5e: Fix hw mtu initializing at XDP SQ allocation
net: amd-xgbe: add missed tasklet_kill
net: ena: Fix toeplitz initial hash value
net: ena: Don't register memory info on XDP exchange
net: ena: Account for the number of processed bytes in XDP
net: ena: Use bitmask to indicate packet redirection
net: ena: Fix rx_copybreak value update
net: ena: Set default value for RX interrupt moderation
net: ena: Update NUMA TPH hint register upon NUMA node update
net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe
RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device
RDMA/mlx5: Fix validation of max_rd_atomic caps for DC
drm/meson: Reduce the FIFO lines held when AFBC is not used
filelock: new helper: vfs_inode_has_locks
ceph: switch to vfs_inode_has_locks() to fix file lock bug
gpio: sifive: Fix refcount leak in sifive_gpio_probe
net: sched: atm: dont intepret cls results when asked to drop
net: sched: cbq: dont intepret cls results when asked to drop
net: sparx5: Fix reading of the MAC address
netfilter: ipset: fix hash:net,port,net hang with /0 subnet
netfilter: ipset: Rework long task execution when adding/deleting entries
perf tools: Fix resources leak in perf_data__open_dir()
drm/imx: ipuv3-plane: Fix overlay plane width
fs/ntfs3: don't hold ni_lock when calling truncate_setsize()
drivers/net/bonding/bond_3ad: return when there's no aggregator
octeontx2-pf: Fix lmtst ID used in aura free
usb: rndis_host: Secure rndis_query check against int overflow
perf stat: Fix handling of --for-each-cgroup with --bpf-counters to match non BPF mode
drm/i915: unpin on error in intel_vgpu_shadow_mm_pin()
caif: fix memory leak in cfctrl_linkup_request()
udf: Fix extension of the last extent in the file
ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet
nvme: fix multipath crash caused by flush request when blktrace is enabled
io_uring: check for valid register opcode earlier
nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it
nvme: also return I/O command effects from nvme_command_effects
btrfs: check superblock to ensure the fs was not modified at thaw time
x86/kexec: Fix double-free of elf header buffer
x86/bugs: Flush IBP in ib_prctl_set()
nfsd: fix handling of readdir in v4root vs. mount upcall timeout
fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB
block: don't allow splitting of a REQ_NOWAIT bio
io_uring: fix CQ waiting timeout handling
thermal: int340x: Add missing attribute for data rate base
riscv: uaccess: fix type of 0 variable on error in get_user()
riscv, kprobes: Stricter c.jr/c.jalr decoding
drm/i915/gvt: fix gvt debugfs destroy
drm/i915/gvt: fix vgpu debugfs clean in remove
hfs/hfsplus: use WARN_ON for sanity check
hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling
ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
Revert "ACPI: PM: Add support for upcoming AMD uPEP HID AMDI007"
mptcp: dedicated request sock for subflow in v6
mptcp: use proper req destructor for IPv6
ext4: don't allow journal inode to have encrypt flag
selftests: set the BUILD variable to absolute path
btrfs: make thaw time super block check to also verify checksum
net: hns3: fix return value check bug of rx copybreak
mbcache: Avoid nesting of cache->c_list_lock under bit locks
efi: random: combine bootloader provided RNG seed with RNG protocol output
io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res()
drm/mgag200: Fix PLL setup for G200_SE_A rev >=4
Linux 5.15.87
Change-Id: I1df39ccb245b1e224417ee8deb8c7a5f9be2650a
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Changes in 5.15.86
drm/amd/display: Manually adjust strobe for DCN303
usb: musb: remove extra check in musb_gadget_vbus_draw
arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins
arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable
arm64: dts: qcom: msm8996: Add MSM8996 Pro support
arm64: dts: qcom: msm8996: fix supported-hw in cpufreq OPP tables
arm64: dts: qcom: msm8996: fix GPU OPP table
ARM: dts: qcom: apq8064: fix coresight compatible
arm64: dts: qcom: sdm630: fix UART1 pin bias
arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias
arm64: dts: qcom: msm8916: Drop MSS fallback compatible
objtool, kcsan: Add volatile read/write instrumentation to whitelist
ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96
ARM: dts: stm32: Fix AV96 WLAN regulator gpio property
drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static
arm64: dts: qcom: pm660: Use unique ADC5_VCOIN address in node name
arm64: dts: qcom: sm8250: correct LPASS pin pull down
soc: qcom: llcc: make irq truly optional
arm64: dts: qcom: Correct QMP PHY child node name
arm64: dts: qcom: sm8150: fix UFS PHY registers
arm64: dts: qcom: sm8250: fix UFS PHY registers
arm64: dts: qcom: sm8350: fix UFS PHY registers
arm64: dts: qcom: sm8250: drop bogus DP PHY clock
soc: qcom: apr: make code more reuseable
soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index
arm64: dts: qcom: sm6125: fix SDHCI CQE reg names
arm: dts: spear600: Fix clcd interrupt
soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync
soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe
soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe
arm64: Treat ESR_ELx as a 64-bit register
arm64: mm: kfence: only handle translation faults
perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init()
perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init()
perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init()
arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node
arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node
ARM: dts: nuvoton: Remove bogus unit addresses from fixed-partition nodes
arm64: dts: mt6779: Fix devicetree build warnings
arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators
arm64: dts: mt2712e: Fix unit address for pinctrl node
arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names
arm64: dts: mt2712-evb: Fix usb vbus regulators unit names
arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings
arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name
ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port
ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port
ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port
ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port
ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port
ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port
ARM: dts: turris-omnia: Add ethernet aliases
ARM: dts: turris-omnia: Add switch port 6 node
arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC
seccomp: Move copy_seccomp() to no failure path.
pstore/ram: Fix error return code in ramoops_probe()
ARM: mmp: fix timer_read delay
pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP
tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init()
tpm/tpm_crb: Fix error message in __crb_relinquish_locality()
ovl: store lower path in ovl_inode
ovl: use ovl_copy_{real,upper}attr() wrappers
ovl: remove privs in ovl_copyfile()
ovl: remove privs in ovl_fallocate()
sched/fair: Cleanup task_util and capacity type
sched/uclamp: Fix relationship between uclamp and migration margin
sched/uclamp: Make task_fits_capacity() use util_fits_cpu()
sched/uclamp: Make select_idle_capacity() use util_fits_cpu()
sched/fair: Removed useless update of p->recent_used_cpu
sched/core: Introduce sched_asym_cpucap_active()
sched/uclamp: Make asym_fits_capacity() use util_fits_cpu()
cpuidle: dt: Return the correct numbers of parsed idle states
alpha: fix TIF_NOTIFY_SIGNAL handling
alpha: fix syscall entry in !AUDUT_SYSCALL case
x86/sgx: Reduce delay and interference of enclave release
PM: hibernate: Fix mistake in kerneldoc comment
fs: don't audit the capability check in simple_xattr_list()
cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut()
selftests/ftrace: event_triggers: wait longer for test_event_enable
perf: Fix possible memleak in pmu_dev_alloc()
lib/debugobjects: fix stat count and optimize debug_objects_mem_init
platform/x86: huawei-wmi: fix return value calculation
timerqueue: Use rb_entry_safe() in timerqueue_getnext()
proc: fixup uptime selftest
lib/fonts: fix undefined behavior in bit shift for get_default_font
ocfs2: fix memory leak in ocfs2_stack_glue_init()
MIPS: vpe-mt: fix possible memory leak while module exiting
MIPS: vpe-cmp: fix possible memory leak while module exiting
selftests/efivarfs: Add checking of the test return value
PNP: fix name memory leak in pnp_alloc_dev()
perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology()
perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox()
perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map()
perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box()
platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init()
thermal: core: fix some possible name leaks in error paths
irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe()
irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init()
EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper()
SUNRPC: Return true/false (not 1/0) from bool functions
NFSD: Finish converting the NFSv2 GETACL result encoder
nfsd: don't call nfsd_file_put from client states seqfile display
genirq/irqdesc: Don't try to remove non-existing sysfs files
cpufreq: amd_freq_sensitivity: Add missing pci_dev_put()
libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value
lib/notifier-error-inject: fix error when writing -errno to debugfs file
debugfs: fix error when writing negative value to atomic_t debugfs file
rapidio: fix possible name leaks when rio_add_device() fails
rapidio: rio: fix possible name leak in rio_register_mport()
clocksource/drivers/sh_cmt: Access registers according to spec
mips: ralink: mt7621: define MT7621_SYSC_BASE with __iomem
mips: ralink: mt7621: soc queries and tests as functions
mips: ralink: mt7621: do not use kzalloc too early
futex: Move to kernel/futex/
futex: Resend potentially swallowed owner death notification
cpu/hotplug: Make target_store() a nop when target == state
cpu/hotplug: Do not bail-out in DYING/STARTING sections
clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock()
ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()
uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix
x86/xen: Fix memory leak in xen_smp_intr_init{_pv}()
x86/xen: Fix memory leak in xen_init_lock_cpu()
xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource()
PM: runtime: Do not call __rpm_callback() from rpm_idle()
platform/chrome: cros_ec_typec: Cleanup switch handle return paths
platform/chrome: cros_ec_typec: zero out stale pointers
platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]()
platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register()
MIPS: BCM63xx: Add check for NULL for clk in clk_enable
MIPS: OCTEON: warn only once if deprecated link status is being used
lockd: set other missing fields when unlocking files
fs: sysv: Fix sysv_nblocks() returns wrong value
rapidio: fix possible UAF when kfifo_alloc() fails
eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD
relay: fix type mismatch when allocating memory in relay_create_buf()
hfs: Fix OOB Write in hfs_asc2mac
rapidio: devices: fix missing put_device in mport_cdev_open
platform/mellanox: mlxbf-pmc: Fix event typo
wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs()
wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb()
wifi: rtl8xxxu: Fix reading the vendor of combo chips
drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge
libbpf: Fix use-after-free in btf_dump_name_dups
libbpf: Fix null-pointer dereference in find_prog_by_sec_insn()
ata: libata: move ata_{port,link,dev}_dbg to standard pr_XXX() macros
ata: add/use ata_taskfile::{error|status} fields
ata: libata: fix NCQ autosense logic
ipmi: kcs: Poll OBF briefly to reduce OBE latency
drm/amdgpu/powerplay/psm: Fix memory leak in power state init
media: v4l2-ctrls: Fix off-by-one error in integer menu control check
media: coda: jpeg: Add check for kmalloc
media: adv748x: afe: Select input port when initializing AFE
media: i2c: ad5820: Fix error path
venus: pm_helpers: Fix error check in vcodec_domains_get()
soreuseport: Fix socket selection for SO_INCOMING_CPU.
media: exynos4-is: don't rely on the v4l2_async_subdev internals
libbpf: Btf dedup identical struct test needs check for nested structs/arrays
can: kvaser_usb: do not increase tx statistics when sending error message frames
can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device
can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event
can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT
can: kvaser_usb_leaf: Set Warning state even without bus errors
can: kvaser_usb: make use of units.h in assignment of frequency
can: kvaser_usb_leaf: Fix improved state not being reported
can: kvaser_usb_leaf: Fix wrong CAN state after stopping
can: kvaser_usb_leaf: Fix bogus restart events
can: kvaser_usb: Add struct kvaser_usb_busparams
can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming
drm/rockchip: lvds: fix PM usage counter unbalance in poweron
clk: renesas: r9a06g032: Repair grave increment error
spi: Update reference to struct spi_controller
drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure
ima: Handle -ESTALE returned by ima_filter_rule_match()
drm/msm/hdmi: drop unused GPIO support
drm/msm/hdmi: use devres helper for runtime PM management
bpf: Fix slot type check in check_stack_write_var_off
media: vivid: fix compose size exceed boundary
media: platform: exynos4-is: fix return value check in fimc_md_probe()
bpf: propagate precision in ALU/ALU64 operations
bpf: Check the other end of slot_type for STACK_SPILL
bpf: propagate precision across all frames, not just the last one
clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs
mtd: Fix device name leak when register device failed in add_mtd_device()
Input: joystick - fix Kconfig warning for JOYSTICK_ADC
wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port
media: camss: Clean up received buffers on failed start of streaming
net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write()
rxrpc: Fix ack.bufferSize to be 0 when generating an ack
bfq: fix waker_bfqq inconsistency crash
drm/radeon: Add the missed acpi_put_table() to fix memory leak
drm/mediatek: Modify dpi power on/off sequence.
ASoC: pxa: fix null-pointer dereference in filter()
libbpf: Fix uninitialized warning in btf_dump_dump_type_data
nvmet: only allocate a single slab for bvecs
regulator: core: fix unbalanced of node refcount in regulator_dev_lookup()
amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table()
nvme: return err on nvme_init_non_mdts_limits fail
regulator: qcom-rpmh: Fix PMR735a S3 regulator spec
drm/fourcc: Add packed 10bit YUV 4:2:0 format
drm/fourcc: Fix vsub/hsub for Q410 and Q401
integrity: Fix memory leakage in keyring allocation error path
ima: Fix misuse of dereference of pointer in template_desc_init_fields()
block: clear ->slave_dir when dropping the main slave_dir reference
wifi: ath10k: Fix return value in ath10k_pci_init()
drm/msm/a6xx: Fix speed-bin detection vs probe-defer
mtd: lpddr2_nvm: Fix possible null-ptr-deref
Input: elants_i2c - properly handle the reset GPIO when power is off
media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init()
media: solo6x10: fix possible memory leak in solo_sysfs_init()
media: platform: exynos4-is: Fix error handling in fimc_md_init()
media: videobuf-dma-contig: use dma_mmap_coherent
inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict()
mtd: spi-nor: hide jedec_id sysfs attribute if not present
mtd: spi-nor: Fix the number of bytes for the dummy cycles
bpf: Move skb->len == 0 checks into __bpf_redirect
HID: hid-sensor-custom: set fixed size for custom attributes
pinctrl: k210: call of_node_put()
ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT
ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT
regulator: core: use kfree_const() to free space conditionally
clk: rockchip: Fix memory leak in rockchip_clk_register_pll()
drm/amdgpu: fix pci device refcount leak
bonding: fix link recovery in mode 2 when updelay is nonzero
mtd: maps: pxa2xx-flash: fix memory leak in probe
drbd: remove call to memset before free device/resource/connection
drbd: destroy workqueue when drbd device was freed
ASoC: qcom: Add checks for devm_kcalloc
media: vimc: Fix wrong function called when vimc_init() fails
media: imon: fix a race condition in send_packet()
clk: imx8mn: rename vpu_pll to m7_alt_pll
clk: imx: replace osc_hdmi with dummy
clk: imx8mn: fix imx8mn_sai2_sels clocks list
clk: imx8mn: fix imx8mn_enet_phy_sels clocks list
pinctrl: pinconf-generic: add missing of_node_put()
media: dvb-core: Fix ignored return value in dvb_register_frontend()
media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC
drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe()
ASoC: dt-bindings: wcd9335: fix reset line polarity in example
ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd
NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding
NFSv4.2: Fix a memory stomp in decode_attr_security_label
NFSv4.2: Fix initialisation of struct nfs4_label
NFSv4: Fix a credential leak in _nfs4_discover_trunking()
NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn
NFS: Fix an Oops in nfs_d_automount()
ALSA: asihpi: fix missing pci_disable_device()
wifi: iwlwifi: mvm: fix double free on tx path.
ASoC: mediatek: mt8173: Fix debugfs registration for components
ASoC: mediatek: mt8173: Enable IRQ when pdata is ready
drm/amd/pm/smu11: BACO is supported when it's in BACO state
drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()
drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios()
drm/amdkfd: Fix memory leakage
ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe
netfilter: conntrack: set icmpv6 redirects as RELATED
Input: wistron_btns - disable on UML
bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data
bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes
bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect
bonding: uninitialized variable in bond_miimon_inspect()
spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE
wifi: mac80211: fix memory leak in ieee80211_if_add()
wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails
mt76: stop the radar detector after leaving dfs channel
wifi: mt76: mt7921: fix reporting of TX AGGR histogram
wifi: mt76: fix coverity overrun-call in mt76_get_txpower()
regulator: core: fix module refcount leak in set_supply()
clk: qcom: lpass-sc7180: Fix pm_runtime usage
clk: qcom: clk-krait: fix wrong div2 functions
hsr: Add a rcu-read lock to hsr_forward_skb().
hsr: Avoid double remove of a node.
hsr: Disable netpoll.
hsr: Synchronize sending frames to have always incremented outgoing seq nr.
hsr: Synchronize sequence number updates.
configfs: fix possible memory leak in configfs_create_dir()
regulator: core: fix resource leak in regulator_register()
hwmon: (jc42) Convert register access and caching to regmap/regcache
hwmon: (jc42) Restore the min/max/critical temperatures on resume
bpf, sockmap: fix race in sock_map_free()
ALSA: pcm: Set missing stop_operating flag at undoing trigger start
media: saa7164: fix missing pci_disable_device()
ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt
xprtrdma: Fix regbuf data not freed in rpcrdma_req_create()
SUNRPC: Fix missing release socket in rpc_sockname()
NFSv4.x: Fail client initialisation if state manager thread can't run
riscv, bpf: Emit fixed-length instructions for BPF_PSEUDO_FUNC
mmc: alcor: fix return value check of mmc_add_host()
mmc: moxart: fix return value check of mmc_add_host()
mmc: mxcmmc: fix return value check of mmc_add_host()
mmc: pxamci: fix return value check of mmc_add_host()
mmc: rtsx_pci: fix return value check of mmc_add_host()
mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host()
mmc: toshsd: fix return value check of mmc_add_host()
mmc: vub300: fix return value check of mmc_add_host()
mmc: wmt-sdmmc: fix return value check of mmc_add_host()
mmc: atmel-mci: fix return value check of mmc_add_host()
mmc: omap_hsmmc: fix return value check of mmc_add_host()
mmc: meson-gx: fix return value check of mmc_add_host()
mmc: via-sdmmc: fix return value check of mmc_add_host()
mmc: wbsd: fix return value check of mmc_add_host()
mmc: mmci: fix return value check of mmc_add_host()
mmc: renesas_sdhi: alway populate SCC pointer
memstick: ms_block: Add error handling support for add_disk()
memstick/ms_block: Add check for alloc_ordered_workqueue
mmc: core: Normalize the error handling branch in sd_read_ext_regs()
regulator: qcom-labibb: Fix missing of_node_put() in qcom_labibb_regulator_probe()
media: c8sectpfe: Add of_node_put() when breaking out of loop
media: coda: Add check for dcoda_iram_alloc
media: coda: Add check for kmalloc
clk: samsung: Fix memory leak in _samsung_clk_register_pll()
spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode
wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h
wifi: rtl8xxxu: Fix the channel width reporting
wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware()
blktrace: Fix output non-blktrace event when blk_classic option enabled
bpf: Do not zero-extend kfunc return values
clk: socfpga: Fix memory leak in socfpga_gate_init()
net: vmw_vsock: vmci: Check memcpy_from_msg()
net: defxx: Fix missing err handling in dfx_init()
net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload()
net: stmmac: fix possible memory leak in stmmac_dvr_probe()
drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init()
of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave()
net: farsync: Fix kmemleak when rmmods farsync
net/tunnel: wait until all sk_user_data reader finish before releasing the sock
net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave()
net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave()
net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave()
net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave()
hamradio: don't call dev_kfree_skb() under spin_lock_irqsave()
net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave()
af_unix: call proto_unregister() in the error path in af_unix_init()
net: amd-xgbe: Fix logic around active and passive cables
net: amd-xgbe: Check only the minimum speed for active/passive cables
can: tcan4x5x: Remove invalid write in clear_interrupts
can: m_can: Call the RAM init directly from m_can_chip_config
can: tcan4x5x: Fix use of register error status mask
net: lan9303: Fix read error execution path
ntb_netdev: Use dev_kfree_skb_any() in interrupt context
sctp: sysctl: make extra pointers netns aware
Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS
Bluetooth: btintel: Fix missing free skb in btintel_setup_combined()
Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave()
Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave()
Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave()
Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave()
Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave()
Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave()
Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave()
stmmac: fix potential division by 0
i40e: Fix the inability to attach XDP program on downed interface
net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path
apparmor: fix a memleak in multi_transaction_new()
apparmor: fix lockdep warning when removing a namespace
apparmor: Fix abi check to include v8 abi
crypto: hisilicon/qm - fix missing destroy qp_idr
crypto: sun8i-ss - use dma_addr instead u32
crypto: nitrox - avoid double free on error path in nitrox_sriov_init()
scsi: core: Fix a race between scsi_done() and scsi_timeout()
apparmor: Use pointer to struct aa_label for lbs_cred
PCI: dwc: Fix n_fts[] array overrun
RDMA/core: Fix order of nldev_exit call
PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled
f2fs: Fix the race condition of resize flag between resizefs
crypto: rockchip - do not do custom power management
crypto: rockchip - do not store mode globally
crypto: rockchip - add fallback for cipher
crypto: rockchip - add fallback for ahash
crypto: rockchip - better handle cipher key
crypto: rockchip - remove non-aligned handling
crypto: rockchip - rework by using crypto_engine
apparmor: Fix memleak in alloc_ns()
f2fs: fix to invalidate dcc->f2fs_issue_discard in error path
f2fs: fix normal discard process
f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super()
RDMA/irdma: Report the correct link speed
scsi: qla2xxx: Fix set-but-not-used variable warnings
RDMA/siw: Fix immediate work request flush to completion queue
IB/mad: Don't call to function that might sleep while in atomic context
PCI: vmd: Disable MSI remapping after suspend
RDMA/restrack: Release MR restrack when delete
RDMA/core: Make sure "ib_port" is valid when access sysfs node
RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port
RDMA/siw: Set defined status for work completion with undefined status
scsi: scsi_debug: Fix a warning in resp_write_scat()
crypto: ccree - Remove debugfs when platform_driver_register failed
crypto: cryptd - Use request context instead of stack for sub-request
crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set()
RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data()
RDMA/hns: Fix ext_sge num error when post send
PCI: Check for alloc failure in pci_request_irq()
RDMA/hfi: Decrease PCI device reference count in error path
crypto: ccree - Make cc_debugfs_global_fini() available for module init function
RDMA/hns: fix memory leak in hns_roce_alloc_mr()
RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed
dt-bindings: imx6q-pcie: Fix clock names for imx6sx and imx8mq
dt-bindings: visconti-pcie: Fix interrupts array max constraints
scsi: hpsa: Fix possible memory leak in hpsa_init_one()
crypto: tcrypt - Fix multibuffer skcipher speed test mem leak
padata: Always leave BHs disabled when running ->parallel()
padata: Fix list iterator in padata_do_serial()
scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()
scsi: hpsa: Fix error handling in hpsa_add_sas_host()
scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device()
scsi: efct: Fix possible memleak in efct_device_init()
scsi: scsi_debug: Fix a warning in resp_verify()
scsi: scsi_debug: Fix a warning in resp_report_zones()
scsi: fcoe: Fix possible name leak when device_register() fails
scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper()
scsi: ipr: Fix WARNING in ipr_init()
scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails
scsi: snic: Fix possible UAF in snic_tgt_create()
RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps()
f2fs: avoid victim selection from previous victim section
RDMA/nldev: Fix failure to send large messages
crypto: amlogic - Remove kcalloc without check
crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe()
riscv/mm: add arch hook arch_clear_hugepage_flags
RDMA/hfi1: Fix error return code in parse_platform_config()
RDMA/srp: Fix error return code in srp_parse_options()
PCI: mt7621: Rename mt7621_pci_ to mt7621_pcie_
PCI: mt7621: Add sentinel to quirks table
orangefs: Fix sysfs not cleanup when dev init failed
RDMA/hns: Fix AH attr queried by query_qp
RDMA/hns: Fix PBL page MTR find
RDMA/hns: Fix page size cap from firmware
RDMA/hns: Fix error code of CMD
crypto: img-hash - Fix variable dereferenced before check 'hdev->req'
hwrng: amd - Fix PCI device refcount leak
hwrng: geode - Fix PCI device refcount leak
IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces
RISC-V: Align the shadow stack
drivers: dio: fix possible memory leak in dio_init()
serial: tegra: Read DMA status before terminating
serial: 8250_bcm7271: Fix error handling in brcmuart_init()
class: fix possible memory leak in __class_register()
vfio: platform: Do not pass return buffer to ACPI _RST method
uio: uio_dmem_genirq: Fix missing unlock in irq configuration
uio: uio_dmem_genirq: Fix deadlock between irq config and handling
usb: fotg210-udc: Fix ages old endianness issues
staging: vme_user: Fix possible UAF in tsi148_dma_list_add
usb: typec: Check for ops->exit instead of ops->enter in altmode_exit
usb: typec: tcpci: fix of node refcount leak in tcpci_register_port()
usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails
usb: typec: tipd: Fix spurious fwnode_handle_put in error path
extcon: usbc-tusb320: Add support for mode setting and reset
extcon: usbc-tusb320: Add support for TUSB320L
usb: typec: Factor out non-PD fwnode properties
extcon: usbc-tusb320: Factor out extcon into dedicated functions
extcon: usbc-tusb320: Add USB TYPE-C support
extcon: usbc-tusb320: Update state on probe even if no IRQ pending
serial: amba-pl011: avoid SBSA UART accessing DMACR register
serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle.
serial: stm32: move dma_request_chan() before clk_prepare_enable()
serial: pch: Fix PCI device refcount leak in pch_request_dma()
tty: serial: clean up stop-tx part in altera_uart_tx_chars()
tty: serial: altera_uart_{r,t}x_chars() need only uart_port
serial: altera_uart: fix locking in polling mode
serial: sunsab: Fix error handling in sunsab_init()
test_firmware: fix memory leak in test_firmware_init()
misc: ocxl: fix possible name leak in ocxl_file_register_afu()
ocxl: fix pci device refcount leak when calling get_function_0()
misc: tifm: fix possible memory leak in tifm_7xx1_switch_media()
misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()
cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter()
cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()
iio: temperature: ltc2983: make bulk write buffer DMA-safe
iio: adis: handle devices that cannot unmask the drdy pin
iio: adis: stylistic changes
iio:imu:adis: Move exports into IIO_ADISLIB namespace
iio: adis: add '__adis_enable_irq()' implementation
counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update
coresight: trbe: remove cpuhp instance node before remove cpuhp state
usb: roles: fix of node refcount leak in usb_role_switch_is_parent()
usb: gadget: f_hid: fix f_hidg lifetime vs cdev
usb: gadget: f_hid: fix refcount leak on error path
drivers: mcb: fix resource leak in mcb_probe()
mcb: mcb-parse: fix error handing in chameleon_parse_gdd()
chardev: fix error handling in cdev_device_add()
i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe
staging: rtl8192u: Fix use after free in ieee80211_rx()
staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor()
vme: Fix error not catched in fake_init()
gpiolib: Get rid of redundant 'else'
gpiolib: cdev: fix NULL-pointer dereferences
gpiolib: make struct comments into real kernel docs
gpiolib: protect the GPIO device against being dropped while in use by user-space
i2c: mux: reg: check return value after calling platform_get_resource()
i2c: ismt: Fix an out-of-bounds bug in ismt_access()
usb: storage: Add check for kcalloc
tracing/hist: Fix issue of losting command info in error_log
ksmbd: Fix resource leak in ksmbd_session_rpc_open()
samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe()
thermal/drivers/imx8mm_thermal: Validate temperature range
thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2
thermal/drivers/qcom/lmh: Fix irq handler return value
fbdev: ssd1307fb: Drop optional dependency
fbdev: pm2fb: fix missing pci_disable_device()
fbdev: via: Fix error in via_core_init()
fbdev: vermilion: decrease reference count in error path
fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe()
fbdev: geode: don't build on UML
fbdev: uvesafb: don't build on UML
fbdev: uvesafb: Fixes an error handling path in uvesafb_probe()
HSI: omap_ssi_core: fix unbalanced pm_runtime_disable()
HSI: omap_ssi_core: fix possible memory leak in ssi_probe()
power: supply: fix residue sysfs file in error handle route of __power_supply_register()
perf trace: Return error if a system call doesn't exist
perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number
perf trace: Handle failure when trace point folder is missed
perf symbol: correction while adjusting symbol
power: supply: z2_battery: Fix possible memleak in z2_batt_probe()
HSI: omap_ssi_core: Fix error handling in ssi_init()
power: supply: ab8500: Fix error handling in ab8500_charger_init()
power: supply: fix null pointer dereferencing in power_supply_get_battery_info
perf stat: Refactor __run_perf_stat() common code
perf stat: Do not delay the workload with --delay
RDMA/siw: Fix pointer cast warning
fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
overflow: Implement size_t saturating arithmetic helpers
fs/ntfs3: Harden against integer overflows
iommu/sun50i: Fix reset release
iommu/sun50i: Consider all fault sources for reset
iommu/sun50i: Fix R/W permission check
iommu/sun50i: Fix flush size
iommu/rockchip: fix permission bits in page table entries v2
phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices
include/uapi/linux/swab: Fix potentially missing __always_inline
pwm: tegra: Improve required rate calculation
fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs
dmaengine: idxd: Fix crc_val field for completion record
rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0
rtc: cmos: Fix event handler registration ordering issue
rtc: cmos: Fix wake alarm breakage
rtc: cmos: fix build on non-ACPI platforms
rtc: cmos: Call cmos_wake_setup() from cmos_do_probe()
rtc: cmos: Call rtc_wake_setup() from cmos_do_probe()
rtc: cmos: Eliminate forward declarations of some functions
rtc: cmos: Rename ACPI-related functions
rtc: cmos: Disable ACPI RTC event on removal
rtc: snvs: Allow a time difference on clock register read
rtc: pcf85063: Fix reading alarm
iommu/amd: Fix pci device refcount leak in ppr_notifier()
iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
macintosh: fix possible memory leak in macio_add_one_device()
macintosh/macio-adb: check the return value of ioremap()
powerpc/52xx: Fix a resource leak in an error handling path
cxl: Fix refcount leak in cxl_calc_capp_routing
powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds
powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data()
powerpc/perf: callchain validate kernel stack pointer bounds
powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe()
powerpc/hv-gpci: Fix hv_gpci event list
selftests/powerpc: Fix resource leaks
iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY
pwm: sifive: Call pwm_sifive_update_clock() while mutex is held
pwm: mtk-disp: Fix the parameters calculated by the enabled flag of disp_pwm
pwm: mediatek: always use bus clock for PWM on MT7622
remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev()
remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio()
remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove
remoteproc: qcom_q6v5_pas: detach power domains on remove
remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region()
remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in q6v5_wcss_qcs404_power_on()
powerpc/eeh: Drop redundant spinlock initialization
powerpc/pseries/eeh: use correct API for error log size
mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ
mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe()
mfd: pm8008: Remove driver data structure pm8008_data
mfd: pm8008: Fix return value check in pm8008_probe()
netfilter: flowtable: really fix NAT IPv6 offload
rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe()
rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe()
rtc: pcf85063: fix pcf85063_clkout_control
nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure
net: macsec: fix net device access prior to holding a lock
mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()
mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()
mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()
block, bfq: fix possible uaf for 'bfqq->bic'
selftests/bpf: Add test for unstable CT lookup API
net: enetc: avoid buffer leaks on xdp_do_redirect() failure
nfc: pn533: Clear nfc_target before being used
unix: Fix race in SOCK_SEQPACKET's unix_dgram_sendmsg()
r6040: Fix kmemleak in probe and remove
igc: Enhance Qbv scheduling by using first flag bit
igc: Use strict cycles for Qbv scheduling
igc: Add checking for basetime less than zero
igc: allow BaseTime 0 enrollment for Qbv
igc: recalculate Qbv end_time by considering cycle time
igc: Lift TAPRIO schedule restriction
igc: Set Qbv start_time and end_time to end_time if not being configured in GCL
rtc: mxc_v2: Add missing clk_disable_unprepare()
selftests: devlink: fix the fd redirect in dummy_reporter_test
openvswitch: Fix flow lookup to use unmasked key
soc: mediatek: pm-domains: Fix the power glitch issue
arm64: dts: mt8183: Fix Mali GPU clock
skbuff: Account for tail adjustment during pull operations
mailbox: mpfs: read the system controller's status
mailbox: arm_mhuv2: Fix return value check in mhuv2_probe()
mailbox: zynq-ipi: fix error handling while device_register() fails
net_sched: reject TCF_EM_SIMPLE case for complex ematch module
rxrpc: Fix missing unlock in rxrpc_do_sendmsg()
myri10ge: Fix an error handling path in myri10ge_probe()
net: stream: purge sk_error_queue in sk_stream_kill_queues()
HID: amd_sfh: Add missing check for dma_alloc_coherent
rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state()
arm64: make is_ttbrX_addr() noinstr-safe
video: hyperv_fb: Avoid taking busy spinlock on panic path
x86/hyperv: Remove unregister syscore call from Hyper-V cleanup
binfmt_misc: fix shift-out-of-bounds in check_special_flags
fs: jfs: fix shift-out-of-bounds in dbAllocAG
udf: Avoid double brelse() in udf_rename()
jfs: Fix fortify moan in symlink
fs: jfs: fix shift-out-of-bounds in dbDiscardAG
ACPICA: Fix error code path in acpi_ds_call_control_method()
nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()
nilfs2: fix shift-out-of-bounds due to too large exponent of block size
acct: fix potential integer overflow in encode_comp_t()
hfs: fix OOB Read in __hfs_brec_find
drm/etnaviv: add missing quirks for GC300
media: imx-jpeg: Disable useless interrupt to avoid kernel panic
brcmfmac: return error when getting invalid max_flowrings from dongle
wifi: ath9k: verify the expected usb_endpoints are present
wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out
ASoC: codecs: rt298: Add quirk for KBL-R RVP platform
ipmi: fix memleak when unload ipmi driver
drm/amd/display: prevent memory leak
Revert "drm/amd/display: Limit max DSC target bpp for specific monitors"
qed (gcc13): use u16 for fid to be big enough
bpf: make sure skb->len != 0 when redirecting to a tunneling device
net: ethernet: ti: Fix return type of netcp_ndo_start_xmit()
hamradio: baycom_epp: Fix return type of baycom_send_packet()
wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request()
igb: Do not free q_vector unless new one was allocated
drm/amdgpu: Fix type of second parameter in trans_msg() callback
drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback
s390/ctcm: Fix return type of ctc{mp,}m_tx()
s390/netiucv: Fix return type of netiucv_tx()
s390/lcs: Fix return type of lcs_start_xmit()
drm/msm: Use drm_mode_copy()
drm/rockchip: Use drm_mode_copy()
drm/sti: Use drm_mode_copy()
drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid()
drivers/md/md-bitmap: check the return value of md_bitmap_get_counter()
md/raid1: stop mdx_raid1 thread when raid1 array run failed
drm/amd/display: fix array index out of bound error in bios parser
net: add atomic_long_t to net_device_stats fields
ipv6/sit: use DEV_STATS_INC() to avoid data-races
mrp: introduce active flags to prevent UAF when applicant uninit
ppp: associate skb with a device at tx
bpf: Prevent decl_tag from being referenced in func_proto arg
ethtool: avoiding integer overflow in ethtool_phys_id()
media: dvb-frontends: fix leak of memory fw
media: dvbdev: adopts refcnt to avoid UAF
media: dvb-usb: fix memory leak in dvb_usb_adapter_init()
blk-mq: fix possible memleak when register 'hctx' failed
drm/amd/display: Use the largest vready_offset in pipe group
libbpf: Avoid enum forward-declarations in public API in C++ mode
regulator: core: fix use_count leakage when handling boot-on
wifi: mt76: do not run mt76u_status_worker if the device is not running
mmc: f-sdh30: Add quirks for broken timeout clock capability
mmc: renesas_sdhi: better reset from HS400 mode
media: si470x: Fix use-after-free in si470x_int_in_callback()
clk: st: Fix memory leak in st_of_quadfs_setup()
crypto: hisilicon/hpre - fix resource leak in remove process
scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs
scsi: ufs: Reduce the START STOP UNIT timeout
scsi: elx: libefc: Fix second parameter type in state callbacks
hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid()
drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid()
orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()
orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()
tools/include: Add _RET_IP_ and math definitions to kernel.h
KVM: selftests: Fix build regression by using accessor function
hwmon: (jc42) Fix missing unlock on error in jc42_write()
ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c
ALSA: hda: add snd_hdac_stop_streams() helper
ASoC: Intel: Skylake: Fix driver hang during shutdown
ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe()
ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link()
ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume()
ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe()
ASoC: wm8994: Fix potential deadlock
ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume()
ASoC: rt5670: Remove unbalanced pm_runtime_put()
drm/i915/display: Don't disable DDI/Transcoder when setting phy test pattern
LoadPin: Ignore the "contents" argument of the LSM hooks
pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion
perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option()
afs: Fix lost servers_outstanding count
pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES
ima: Simplify ima_lsm_copy_rule
ALSA: usb-audio: add the quirk for KT0206 device
ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB
ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list
usb: cdnsp: fix lack of ZLP for ep0
usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq
arm64: dts: qcom: sm8250: fix USB-DP PHY registers
usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode
usb: dwc3: core: defer probe on ulpi_read_id timeout
xhci: Prevent infinite loop in transaction errors recovery for streams
HID: wacom: Ensure bootloader PID is usable in hidraw mode
HID: mcp2221: don't connect hidraw
loop: Fix the max_loop commandline argument treatment when it is set to 0
9p: set req refcount to zero to avoid uninitialized usage
security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6
reiserfs: Add missing calls to reiserfs_security_free()
iio: fix memory leak in iio_device_register_eventset()
iio: adc: ad_sigma_delta: do not use internal iio_dev lock
iio: adc128s052: add proper .data members in adc128_of_match table
regulator: core: fix deadlock on regulator enable
floppy: Fix memory leak in do_floppy_init()
gcov: add support for checksum field
fbdev: fbcon: release buffer when fbcon_do_set_font() failed
ovl: fix use inode directly in rcu-walk mode
btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range
scsi: qla2xxx: Fix crash when I/O abort times out
net: stmmac: fix errno when create_singlethread_workqueue() fails
media: dvbdev: fix build warning due to comments
media: dvbdev: fix refcnt bug
extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered
mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code
pwm: tegra: Fix 32 bit build
Linux 5.15.86
Change-Id: I4ec30b690e8dbd554044495e26360a86cc042069
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Changes in 5.15.85
udf: Discard preallocation before extending file with a hole
udf: Fix preallocation discarding at indirect extent boundary
udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size
udf: Fix extending file within last block
usb: gadget: uvc: Prevent buffer overflow in setup handler
USB: serial: option: add Quectel EM05-G modem
USB: serial: cp210x: add Kamstrup RF sniffer PIDs
USB: serial: f81232: fix division by zero on line-speed change
USB: serial: f81534: fix division by zero on line-speed change
xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N
igb: Initialize mailbox message for VF reset
usb: dwc3: pci: Update PCIe device ID for USB3 controller on CPU sub-system for Raptor Lake
HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk
Bluetooth: L2CAP: Fix u8 overflow
selftests: net: Use "grep -E" instead of "egrep"
net: loopback: use NET_NAME_PREDICTABLE for name_assign_type
Linux 5.15.85
Change-Id: I0e9aead7abc736a094e48a563a0fb8d23a536e43
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Changes in 5.15.83
clk: generalize devm_clk_get() a bit
clk: Provide new devm_clk helpers for prepared and enabled clocks
mmc: mtk-sd: Fix missing clk_disable_unprepare in msdc_of_clock_parse()
arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series
arm: dts: rockchip: fix node name for hym8563 rtc
arm: dts: rockchip: remove clock-frequency from rtc
ARM: dts: rockchip: fix ir-receiver node names
arm64: dts: rockchip: fix ir-receiver node names
ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name
fs: use acquire ordering in __fget_light()
ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels
ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation
ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register
spi: mediatek: Fix DEVAPC Violation at KO Remove
ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188
ASoC: rt711-sdca: fix the latency time of clock stop prepare state machine transitions
9p/fd: Use P9_HDRSZ for header size
regulator: slg51000: Wait after asserting CS pin
ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
selftests/net: Find nettest in current directory
btrfs: send: avoid unaligned encoded writes when attempting to clone range
ASoC: soc-pcm: Add NULL check in BE reparenting
regulator: twl6030: fix get status of twl6032 regulators
fbcon: Use kzalloc() in fbcon_prepare_logo()
usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer
9p/xen: check logical size for buffer size
net: usb: qmi_wwan: add u-blox 0x1342 composition
mm/khugepaged: take the right locks for page table retraction
mm/khugepaged: fix GUP-fast interaction by sending IPI
mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
rtc: mc146818-lib: extract mc146818_avoid_UIP
rtc: cmos: avoid UIP when writing alarm time
rtc: cmos: avoid UIP when reading alarm time
cifs: fix use-after-free caused by invalid pointer `hostname`
drm/bridge: anx7625: Fix edid_read break case in sp_tx_edid_read()
xen/netback: Ensure protocol headers don't fall in the non-linear area
xen/netback: do some code cleanup
xen/netback: don't call kfree_skb() with interrupts disabled
media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area()
soundwire: intel: Initialize clock stop timeout
Revert "ARM: dts: imx7: Fix NAND controller size-cells"
media: v4l2-dv-timings.c: fix too strict blanking sanity checks
memcg: fix possible use-after-free in memcg_write_event_control()
mm/gup: fix gup_pud_range() for dax
Bluetooth: btusb: Add debug message for CSR controllers
Bluetooth: Fix crash when replugging CSR fake controllers
net: mana: Fix race on per-CQ variable napi work_done
KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field
drm/vmwgfx: Don't use screen objects when SEV is active
drm/amdgpu/sdma_v4_0: turn off SDMA ring buffer in the s2idle suspend
drm/shmem-helper: Remove errant put in error path
drm/shmem-helper: Avoid vm_open error paths
net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing()
HID: usbhid: Add ALWAYS_POLL quirk for some mice
HID: hid-lg4ff: Add check for empty lbuf
HID: core: fix shift-out-of-bounds in hid_report_raw_event
HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10
can: af_can: fix NULL pointer dereference in can_rcv_filter
clk: Fix pointer casting to prevent oops in devm_clk_release()
gpiolib: improve coding style for local variables
gpiolib: check the 'ngpios' property in core gpiolib code
gpiolib: fix memory leak in gpiochip_setup_dev()
netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one
drm/vmwgfx: Fix race issue calling pin_user_pages
ieee802154: cc2520: Fix error return code in cc2520_hw_init()
ca8210: Fix crash by zero initializing data
netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark
drm/bridge: ti-sn65dsi86: Fix output polarity setting bug
gpio: amd8111: Fix PCI device reference count leak
e1000e: Fix TX dispatch condition
igb: Allocate MSI-X vector when testing
net: broadcom: Add PTP_1588_CLOCK_OPTIONAL dependency for BCMGENET under ARCH_BCM2835
drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420
af_unix: Get user_ns from in_skb in unix_diag_get_exact().
vmxnet3: correctly report encapsulated LRO packet
vmxnet3: use correct intrConf reference when using extended queues
Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()
Bluetooth: Fix not cleanup led when bt_init fails
net: dsa: ksz: Check return value
net: dsa: hellcreek: Check return value
net: dsa: sja1105: Check return value
selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload
mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
net: encx24j600: Add parentheses to fix precedence
net: encx24j600: Fix invalid logic in reading of MISTAT register
net: mdiobus: fwnode_mdiobus_register_phy() rework error handling
net: mdiobus: fix double put fwnode in the error path
octeontx2-pf: Fix potential memory leak in otx2_init_tc()
xen-netfront: Fix NULL sring after live migration
net: mvneta: Prevent out of bounds read in mvneta_config_rss()
i40e: Fix not setting default xps_cpus after reset
i40e: Fix for VF MAC address 0
i40e: Disallow ip4 and ip6 l4_4_bytes
NFC: nci: Bounds check struct nfc_target arrays
nvme initialize core quirks before calling nvme_init_subsystem
gpio/rockchip: fix refcount leak in rockchip_gpiolib_register()
net: stmmac: fix "snps,axi-config" node property parsing
ip_gre: do not report erspan version on GRE interface
net: microchip: sparx5: Fix missing destroy_workqueue of mact_queue
net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq
net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
tipc: Fix potential OOB in tipc_link_proto_rcv()
ipv4: Fix incorrect route flushing when source address is deleted
ipv4: Fix incorrect route flushing when table ID 0 is used
net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions()
tipc: call tipc_lxc_xmit without holding node_read_lock
ethernet: aeroflex: fix potential skb leak in greth_init_rings()
dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove()
xen/netback: fix build warning
net: phy: mxl-gpy: fix version reporting
net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq()
ipv6: avoid use-after-free in ip6_fragment()
net: thunderbolt: fix memory leak in tbnet_open()
net: mvneta: Fix an out of bounds check
macsec: add missing attribute validation for offload
s390/qeth: fix various format strings
s390/qeth: fix use-after-free in hsci
can: esd_usb: Allow REC and TEC to return to zero
block: move CONFIG_BLOCK guard to top Makefile
io_uring: move to separate directory
io_uring: Fix a null-ptr-deref in io_tctx_exit_cb()
Linux 5.15.83
Change-Id: I6fa315bcb552a500c6bfe8331d4f630f75065798
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Changes in 5.15.81
ASoC: fsl_sai: use local device pointer
ASoC: fsl_asrc fsl_esai fsl_sai: allow CONFIG_PM=N
serial: Add rs485_supported to uart_port
serial: fsl_lpuart: Fill in rs485_supported
tty: serial: fsl_lpuart: don't break the on-going transfer when global reset
sctp: remove the unnecessary sinfo_stream check in sctp_prsctp_prune_unsent
sctp: clear out_curr if all frag chunks of current msg are pruned
cifs: introduce new helper for cifs_reconnect()
cifs: split out dfs code from cifs_reconnect()
cifs: support nested dfs links over reconnect
cifs: Fix connections leak when tlink setup failed
ata: libata-scsi: simplify __ata_scsi_queuecmd()
ata: libata-core: do not issue non-internal commands once EH is pending
drm/display: Don't assume dual mode adaptors support i2c sub-addressing
nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH
nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro
nvme-pci: disable namespace identifiers for the MAXIO MAP1001
nvme-pci: disable write zeroes on various Kingston SSD
nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV7000
iio: ms5611: Simplify IO callback parameters
iio: pressure: ms5611: fixed value compensation bug
ceph: do not update snapshot context when there is no new snapshot
ceph: avoid putting the realm twice when decoding snaps fails
x86/sgx: Create utility to validate user provided offset and length
x86/sgx: Add overflow check in sgx_validate_offset_length()
binder: validate alloc->mm in ->mmap() handler
ceph: Use kcalloc for allocating multiple elements
ceph: fix NULL pointer dereference for req->r_session
wifi: mac80211: fix memory free error when registering wiphy fail
wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support
riscv: dts: sifive unleashed: Add PWM controlled LEDs
audit: fix undefined behavior in bit shift for AUDIT_BIT
wifi: airo: do not assign -1 to unsigned char
wifi: mac80211: Fix ack frame idr leak when mesh has no route
wifi: ath11k: Fix QCN9074 firmware boot on x86
spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run
selftests/bpf: Add verifier test for release_reference()
Revert "net: macsec: report real_dev features when HW offloading is enabled"
platform/x86: ideapad-laptop: Disable touchpad_switch
platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1
platform/x86/intel/pmt: Sapphire Rapids PMT errata fix
platform/x86/intel/hid: Add some ACPI device IDs
scsi: ibmvfc: Avoid path failures during live migration
scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC
drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017)
block, bfq: fix null pointer dereference in bfq_bio_bfqg()
arm64/syscall: Include asm/ptrace.h in syscall_wrapper header.
nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked
Revert "drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10 properly""
ALSA: usb-audio: add quirk to fix Hamedal C20 disconnect issue
RISC-V: vdso: Do not add missing symbols to version section in linker script
MIPS: pic32: treat port as signed integer
xfrm: fix "disable_policy" on ipv4 early demux
xfrm: replay: Fix ESN wrap around for GSO
af_key: Fix send_acquire race with pfkey_register
ARM: dts: am335x-pcm-953: Define fixed regulators in root node
ASoC: hdac_hda: fix hda pcm buffer overflow issue
ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove
ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open()
x86/hyperv: Restore VP assist page after cpu offlining/onlining
scsi: storvsc: Fix handling of srb_status and capacity change events
ASoC: max98373: Add checks for devm_kcalloc
regulator: core: fix kobject release warning and memory leak in regulator_register()
spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld()
regulator: core: fix UAF in destroy_regulator()
bus: sunxi-rsb: Remove the shutdown callback
bus: sunxi-rsb: Support atomic transfers
tee: optee: fix possible memory leak in optee_register_device()
ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl
selftests: mptcp: more stable simult_flows tests
selftests: mptcp: fix mibit vs mbit mix up
net: liquidio: simplify if expression
rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc
rxrpc: Use refcount_t rather than atomic_t
rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975]
net: dsa: sja1105: disallow C45 transactions on the BASE-TX MDIO bus
nfc/nci: fix race with opening and closing
net: pch_gbe: fix potential memleak in pch_gbe_tx_queue()
9p/fd: fix issue of list_del corruption in p9_fd_cancel()
netfilter: conntrack: Fix data-races around ct mark
netfilter: nf_tables: do not set up extensions for end interval
iavf: Fix a crash during reset task
iavf: Do not restart Tx queues after reset task failure
iavf: Fix race condition between iavf_shutdown and iavf_remove
ARM: mxs: fix memory leak in mxs_machine_init()
ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties
net: ethernet: mtk_eth_soc: fix error handling in mtk_open()
net/mlx4: Check retval of mlx4_bitmap_init
net: mvpp2: fix possible invalid pointer dereference
net/qla3xxx: fix potential memleak in ql3xxx_send()
octeontx2-af: debugsfs: fix pci device refcount leak
net: pch_gbe: fix pci device refcount leak while module exiting
nfp: fill splittable of devlink_port_attrs correctly
nfp: add port from netdev validation for EEPROM access
macsec: Fix invalid error code set
Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work()
Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register()
netfilter: ipset: regression in ip_set_hash_ip.c
net/mlx5: Do not query pci info while pci disabled
net/mlx5: Fix FW tracer timestamp calculation
net/mlx5: Fix handling of entry refcount when command is not issued to FW
tipc: set con sock in tipc_conn_alloc
tipc: add an extra conn_get in tipc_conn_alloc
tipc: check skb_linearize() return value in tipc_disc_rcv()
xfrm: Fix oops in __xfrm_state_delete()
xfrm: Fix ignored return value in xfrm6_init()
net: wwan: iosm: use ACPI_FREE() but not kfree() in ipc_pcie_read_bios_cfg()
sfc: fix potential memleak in __ef100_hard_start_xmit()
net: sparx5: fix error handling in sparx5_port_open()
net: sched: allow act_ct to be built without NF_NAT
NFC: nci: fix memory leak in nci_rx_data_packet()
regulator: twl6030: re-add TWL6032_SUBCLASS
bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending()
dma-buf: fix racing conflict of dma_heap_add()
netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface
netfilter: flowtable_offload: add missing locking
fs: do not update freeing inode i_io_list
dccp/tcp: Reset saddr on failure after inet6?_hash_connect().
ipv4: Fix error return code in fib_table_insert()
arcnet: fix potential memory leak in com20020_probe()
s390/dasd: fix no record found for raw_track_access
nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION
nfc: st-nci: fix memory leaks in EVT_TRANSACTION
nfc: st-nci: fix incorrect sizing calculations in EVT_TRANSACTION
net: enetc: manage ENETC_F_QBV in priv->active_offloads only when enabled
net: enetc: cache accesses to &priv->si->hw
net: enetc: preserve TX ring priority across reconfiguration
octeontx2-pf: Add check for devm_kcalloc
octeontx2-af: Fix reference count issue in rvu_sdp_init()
net: thunderx: Fix the ACPI memory leak
s390/crashdump: fix TOD programmable field size
lib/vdso: use "grep -E" instead of "egrep"
init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash
nios2: add FORCE for vmlinuz.gz
mmc: sdhci-brcmstb: Re-organize flags
mmc: sdhci-brcmstb: Enable Clock Gating to save power
mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI
KVM: arm64: pkvm: Fixup boot mode to reflect that the kernel resumes from EL1
usb: dwc3: exynos: Fix remove() function
usb: cdnsp: Fix issue with Clear Feature Halt Endpoint
usb: cdnsp: fix issue with ZLP - added TD_SIZE = 1
ext4: fix use-after-free in ext4_ext_shift_extents
arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency
iio: light: apds9960: fix wrong register for gesture gain
iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails
bus: ixp4xx: Don't touch bit 7 on IXP42x
usb: dwc3: gadget: conditionally remove requests
usb: dwc3: gadget: Return -ESHUTDOWN on ep disable
usb: dwc3: gadget: Clear ep descriptor last
nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty
gcov: clang: fix the buffer overflow issue
mm: vmscan: fix extreme overreclaim and swap floods
KVM: x86: nSVM: leave nested mode on vCPU free
KVM: x86: forcibly leave nested mode on vCPU reset
KVM: x86: nSVM: harden svm_free_nested against freeing vmcb02 while still in use
KVM: x86: add kvm_leave_nested
KVM: x86: remove exit_int_info warning in svm_handle_exit
x86/tsx: Add a feature bit for TSX control MSR support
x86/pm: Add enumeration check before spec MSRs save/restore setup
x86/ioremap: Fix page aligned size calculation in __ioremap_caller()
Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode
ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01
tools: iio: iio_generic_buffer: Fix read size
serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios()
Input: goodix - try resetting the controller when no config is set
Input: soc_button_array - add use_low_level_irq module parameter
Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[]
Input: i8042 - apply probe defer to more ASUS ZenBook models
ASoC: stm32: dfsdm: manage cb buffers cleanup
xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too
xen/platform-pci: add missing free_irq() in error path
platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr()
platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017)
drm/amdgpu: disable BACO support on more cards
zonefs: fix zone report size in __zonefs_io_error()
platform/x86: hp-wmi: Ignore Smart Experience App event
platform/x86: ideapad-laptop: Fix interrupt storm on fn-lock toggle on some Yoga laptops
tcp: configurable source port perturb table size
net: usb: qmi_wwan: add Telit 0x103a composition
scsi: iscsi: Fix possible memory leak when device_register() failed
gpu: host1x: Avoid trying to use GART on Tegra20
dm integrity: flush the journal on suspend
dm integrity: clear the journal on suspend
fuse: lock inode unconditionally in fuse_fallocate()
wifi: wilc1000: validate pairwise and authentication suite offsets
wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
wifi: wilc1000: validate number of channels
genirq/msi: Shutdown managed interrupts with unsatifiable affinities
genirq: Always limit the affinity to online CPUs
irqchip/gic-v3: Always trust the managed affinity provided by the core code
genirq: Take the proposed affinity at face value if force==true
btrfs: free btrfs_path before copying root refs to userspace
btrfs: free btrfs_path before copying fspath to userspace
btrfs: free btrfs_path before copying subvol info to userspace
btrfs: zoned: fix missing endianness conversion in sb_write_pointer
btrfs: use kvcalloc in btrfs_get_dev_zone_info
btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs()
drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN
drm/amd/display: No display after resume from WB/CB
drm/amdgpu: Enable Aldebaran devices to report CU Occupancy
drm/amdgpu: always register an MMU notifier for userptr
drm/i915: fix TLB invalidation for Gen12 video and compute engines
cifs: fix missed refcounting of ipc tcon
Linux 5.15.81
Change-Id: I8add86e459b7e7f0877dbbc9e479a8b208b6bc87
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Sync up with android13-5.15 for the following commits:
a60104c6cc Merge tag 'android13-5.15.78_r00' into android13-5.15
0c8a58469b UPSTREAM: usb: gadget: uvc: Prevent buffer overflow in setup handler
85b6370411 UPSTREAM: usb: gadget: uvc: also use try_format in set_format
0a1c1e4f64 UPSTREAM: usb: gadget: uvc: default the ctrl request interface offsets
fce2002702 UPSTREAM: usb: gadget: uvc: don't put item still in use
38ce45512f UPSTREAM: usb: gadget: uvc: Fix argument to sizeof() in uvc_register_video()
eae0c310a5 UPSTREAM: usb: gadget: uvc: add v4l2 try_format api call
5f385970be UPSTREAM: usb: gadget: uvc: add v4l2 enumeration api calls
4aa53ed66b BACKPORT: media: uvcvideo: move uvc_format_desc to common header
fc7969e41e BACKPORT: media: v4l: move helper functions for fractions from uvc to v4l2-common
0f48a44f70 UPSTREAM: usb: gadget: uvc: increase worker prio to WQ_HIGHPRI
8792df01c4 UPSTREAM: usb: move from strlcpy with unused retval to strscpy
1b2bc88b59 UPSTREAM: usb: gadget: uvc: Fix comment blocks style
8bc4e80471 UPSTREAM: usb: gadget: uvc: track frames in format entries
28431ab172 ANDROID: clocksource/arm_arch_timer: Add workaround for erratum 858921
6b4d1d8995 UPSTREAM: usb: gadget: f_fs: Ensure ep0req is dequeued before free_request
001fc069da UPSTREAM: usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
c190539f4e UPSTREAM: usb: gadget: uvc: move structs to common header
e5fe1a95c3 UPSTREAM: usb: gadget: uvc: prevent index variables to start from 0
413bfd5f1b UPSTREAM: usb: gadget: uvc: implement dwPresentationTime and scrSourceClock
baa5c6d923 UPSTREAM: usb: gadget: uvc: ensure the vdev is unset
82beac34d8 BACKPORT: UPSTREAM: usb: dwc3: EP clear halt leading to clearing of delayed_status
016d61094b ANDROID: mm/oom_kill: fix task_struct refcount_t: underflow; use-after-free.
2f40ae382f ANDROID: ABI: Update allowed list for QCOM
c7562e628c ANDROID: GKI: update allowed list for exynosauto SoC
8945ccdb22 ANDROID: GKI: update xiaomi symbol list
8501db9cda ANDROID: loop: Add vendor hook to update cmd
b73474bacc ANDROID: GKI: Update abi_gki_aarch64_qcom
0f1629ced8 ANDROID: direct_io: Add a vendor hook to update OEM-specific field of struct bio
647d9c21bc ANDROID: GKI: update xiaomi symbol list
5e05d41272 ANDROID: GKI: Update abi_gki_aarch64_qcom symbols.
4fa690983d ANDROID: GKI: Update abi_gki_aarch64_qcom
5d96c24be9 ANDROID: uid_sys_stats: defer process_notifier work if uid_lock is contended
75aa4c087e FROMGIT: bpf: btf: limit logging of ignored BTF mismatches
f162762e3a UPSTREAM: skbuff: Account for tail adjustment during pull operations
25f2c8b4c7 ANDROID: Update the ABI symbol list and xml
d0822a3f9b ANDROID: mm: Export find_vm_area
37d8fe8dc3 ANDROID: GKI: update xiaomi symbol list
b3084d784b ANDROID: vendor_hooks:vendor hook for control memory dirty rate
6d9e986186 FROMGIT: mm/cma.c: delete kmemleak objects when freeing CMA areas to buddy at boot
e51492910c BACKPORT: FROMGIT: mm/cma.c: make kmemleak aware of all CMA regions
bac2fa84f7 UPSTREAM: mm: kmemleak: alloc gray object for reserved region with direct map
b1b50c61eb UPSTREAM: usb: dwc3: gadget: Don't delay End Transfer on delayed_status
f77134986a UPSTREAM: usb: dwc3: gadget: Do not clear ep delayed stop flag during ep disable
70947d4104 UPSTREAM: usb: dwc3: gadget: Skip waiting for CMDACT cleared during endxfer
6cac29527d UPSTREAM: usb: dwc3: Increase DWC3 controller halt timeout
c24377e58a ANDROID: mm: fix vma refcounting for SPF in vm_area_dup
1b8d144a47 UPSTREAM: usb: dwc3: Remove DWC3 locking during gadget suspend/resume
25e07b302b UPSTREAM: usb: dwc3: Avoid unmapping USB requests if endxfer is not complete
adcf982b9a UPSTREAM: usb: dwc3: gadget: Continue handling EP0 xfercomplete events
5dedf5e350 UPSTREAM: usb: dwc3: gadget: Synchronize IRQ between soft connect/disconnect
4483376b15 UPSTREAM: usb: dwc3: gadget: Force sending delayed status during soft disconnect
fec000d477 UPSTREAM: usb: dwc3: Do not service EP0 and conndone events if soft disconnected
c2a767880d UPSTREAM: usb: dwc3: gadget: conditionally remove requests
ad7838324a UPSTREAM: usb: dwc3: ep0: Properly handle setup_packet_pending scenario in data stage
f0c8e8fb26 UPSTREAM: usb: dwc3: gadget: Fix IN endpoint max packet size allocation
7dcee70181 UPSTREAM: usb: dwc3: gadget: Delay issuing End Transfer
7ec08af1cc UPSTREAM: usb: dwc3: gadget: Only End Transfer for ep0 data phase
1fd897b8fd UPSTREAM: usb: dwc3: ep0: Don't prepare beyond Setup stage
aa96dec5f3 UPSTREAM: usb: dwc3: gadget: move cmd_endtransfer to extra function
fd0d0cdd6d UPSTREAM: usb: dwc3: gadget: ep_queue simplify isoc start condition
8dd53dc29a UPSTREAM: usb: dwc3: gadget: Skip reading GEVNTSIZn
f99c14b160 UPSTREAM: usb: dwc3: gadget: Ignore Update Transfer cmd params
3c022868a2 UPSTREAM: usb: dwc3: gadget: Skip checking Update Transfer status
4baf5030d0 ANDROID: fips140: add crypto_memneq() back to the module
55dd45162b ANDROID: kbuild: Search external devicetree path when running clean target
a2593b3a74 ANDROID: Re-enable fast mremap and fix UAF with SPF
28e537ca36 Revert "ANDROID: Make SPF aware of fast mremaps"
11662bc7d0 ANDROID: fips140: add dump_jitterentropy command to fips140_lab_util
8e10ceb0f1 ANDROID: GKI: Update allowed list for QCOM
74ccad59c9 Revert "ANDROID: ABI: Update symbols to unisoc whitelist"
ab2dfaed45 ANDROID: page_pinner: prevent pp_buffer uninitialized access
0ef8ae8d3a ANDROID: cpufreq: add macro guard to protect vendor hook
7a3d34495c ANDROID: remove unnecessary SPECULATIVE_PAGE_FAULT config dependency
f5ade1a7ad ANDROID: usb: gadget: f_accessory: update SS/SSP descriptors
c265df840a ANDROID: Update the ABI symbol list and xml
ed6f0796dd ANDROID: sched/pelt: export ___update_load_[sum|avg]
85aa38928c ANDROID: GKI: add symbol list file for honor
6525e159bb ANDROID: Update the GKI symbol list and ABI XML
9d0ccb89bc ANDROID: irqchip/irq-gic-v3: Add vendor hook for gic suspend
b3c4378d24 ANDROID: ABI: Update symbols to unisoc whitelist
af027c97fc ANDROID: Make SPF aware of fast mremaps
8d58de2c76 ANDROID: abi_gki_aarch64_qcom: Add secure hibernation APIs
57c0c76264 ANDROID: GKI: Update symbol list for mtk
cb0ff59972 ANDROID: cpufreq: add vendor hook in cpufreq_offline
b5b2dbf1a2 UPSTREAM: locks: fix TOCTOU race when granting write lease
22b130dfad ANDROID: Update symbol list for sunxi
69fefbb3db ANDROID: GKI: Source GKI_BUILD_CONFIG_FRAGMENT after setting all variables
e80bb46694 ANDROID: Revert "ANDROID: allmodconfig: disable WERROR"
6bbccfc63e UPSTREAM: drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame
0667e5dfa3 BACKPORT: Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled
9c8074484f UPSTREAM: crypto: algboss - compile out test-related code when tests disabled
02ffa3bd9d UPSTREAM: crypto: api - compile out crypto_boot_test_finished when tests disabled
7bf98ba526 UPSTREAM: crypto: algboss - optimize registration of internal algorithms
46b75c8648 BACKPORT: crypto: api - optimize algorithm registration when self-tests disabled
9662706fb0 UPSTREAM: crypto: api - Fix boot-up crash when crypto manager is disabled
3f5a00a5ef UPSTREAM: crypto: api - Do not create test larvals if manager is disabled
da83ad2055 UPSTREAM: crypto: api - Export crypto_boot_test_finished
e07f20669c UPSTREAM: crypto: api - Fix built-in testing dependency failures
f72cb1622f ANDROID: GKI: Add a general aarch64 symbol list
ac16892391 ANDROID: GKI: db845c: remove led-multicolor override
39b026b051 ANDROID: GKI: enable mulitcolor-led
cf8edf1928 UPSTREAM: HID: playstation: support updated DualSense rumble mode.
a7bb941a00 UPSTREAM: HID: playstation: add initial DualSense Edge controller support
72fd652689 UPSTREAM: HID: playstation: stop DualSense output work on remove.
2096eced42 UPSTREAM: HID: playstation: convert to use dev_groups
4281e23610 UPSTREAM: HID: playstation: fix return from dualsense_player_led_set_brightness()
1c2aceb8d7 UPSTREAM: HID: playstation: expose DualSense player LEDs through LED class.
8abc9ed234 UPSTREAM: leds: add new LED_FUNCTION_PLAYER for player LEDs for game controllers.
392b327fe0 UPSTREAM: HID: playstation: expose DualSense lightbar through a multi-color LED.
f0ecfd1af7 ANDROID: GKI: Add Tuxera symbol list
ac26e9c7b8 ANDROID: cma: allow to use CMA in swap-in path
60a61c1a04 ANDROID: GKI: update xiaomi symbol list
cac282fc1a ANDROID: dm: Add a vendor hook to update bio after clone
be6c9a9b11 ANDROID: GKI: Update symbol list
4ff88497a3 ANDROID: GKI: export symbols to modify lru stats
f8c2625ba0 ANDROID: GKI: Update exynos_wear symbol list
3cc69a0a0a ANDROID: vendor hooks: Encrypt snapshot for bootloader based hibernation
72ec9e1cd2 ANDROID: vendor hooks: Export symbols for bootloader based hibernation
37a7d66607 ANDROID: abi_gki_aarch64_qcom: Update symbol list
474a540f29 ANDROID: irq: put irq_resolve_mapping under protection of __irq_enter_raw
aea6e535a2 BACKPORT: UPSTREAM: usb: typec: ucsi: Wait for the USB role switches
680c12419c UPSTREAM: rpmsg: char: Avoid double destroy of default endpoint
1a1ee4bb87 BACKPORT: exfat: fix overflow for large capacity partition
737bf2358f UPSTREAM: usb: gadget: uvc: fix changing interface name via configfs
1b90823b62 UPSTREAM: dma-mapping: Fix build error unused-value
6fcc6343c3 UPSTREAM: bpf: Ensure correct locking around vulnerable function find_vpid()
5df791308b ANDROID: abi_gki_aarch64_qcom: whitelist symbols added for cma retries
6f0ba6ad99 ANDROID: mm/cma: add vendor_hook in cma_alloc for retries
8022d8faf6 ANDROID: arm64: mm: perform clean & invalidation in __dma_map_area
28f65c4aa3 FROMLIST: sched: Fix use-after-free bug in dup_user_cpus_ptr()
6be735d61e UPSTREAM: HID: roccat: Fix use-after-free in roccat_read()
8e0c2cedbc UPSTREAM: mm/damon: use set_huge_pte_at() to make huge pte old
1d0c369729 UPSTREAM: usb: gadget: f_mass_storage: Make CD-ROM emulation works with Windows OS
bcf5cce758 UPSTREAM: gen_compile_commands: handle multiple lines per .mod file
96ce46922d UPSTREAM: scripts/nsdeps: adjust to the format change of *.mod files
19be6b818a BACKPORT: kbuild: avoid regex RS for POSIX awk
61f4b98fe0 UPSTREAM: KVM: arm64: Always start with clearing SVE flag on load
a11aae86d8 UPSTREAM: powerpc/64: Include cache.h directly in paca.h
a3eb9c5744 UPSTREAM: KVM: arm64: vgic-v3: Consistently populate ID_AA64PFR0_EL1.GIC
bf995d5fbf UPSTREAM: module.h: simplify MODULE_IMPORT_NS
4009f67147 UPSTREAM: mac80211_hwsim: fix RCU protected chanctx access
e295ae9c84 UPSTREAM: KVM: arm64: nvhe: Eliminate kernel-doc warnings
b1cad5be29 BACKPORT: KVM: arm64: Actually prevent SMC64 SYSTEM_RESET2 from AArch32
46d726e380 UPSTREAM: KVM: arm64: Generally disallow SMC64 for AArch32 guests
35c5fa9834 UPSTREAM: virtio: use virtio_device_ready() in virtio_device_restore()
aa7f73725f UPSTREAM: mm: fix use-after-free bug when mm->mmap is reused after being freed
bc920538bb UPSTREAM: kasan: test: prevent cache merging in kmem_cache_double_destroy
435eac40de UPSTREAM: arm64: Ensure that the 'bti' macro is defined where linkage.h is included
03a56596ef UPSTREAM: mmc: mediatek: free the ext_csd when mmc_get_ext_csd success
ac6122b362 UPSTREAM: scsi: ufs: Fix double space in SCSI_UFS_HWMON description
a094f7c2d4 UPSTREAM: scsi: ufs: mediatek: Avoid sched_clock() misuse
9fe6ac18f7 UPSTREAM: scsi: ufs: core: SCSI_UFS_HWMON depends on HWMON=y
ce550b4d77 ANDROID: GKI: db845c: Update symbols list and ABI
f9bfdf7a59 BACKPORT: f2fs: invalidate meta pages only for post_read required inode
9b96bd8907 ANDROID: GKI: Update symbols to symbol list
65d4d9d5da ANDROID: cpu/hotplug: call perf event through function pointer
5feed5b144 Merge tag 'android13-5.15.74_r00' into android13-5.15
35c0e672b8 ANDROID: abi_gki_aarch64_qcom: Update symbol list
f5cbc8d09c UPSTREAM: usb: dwc3: gadget: Submit endxfer command if delayed during disconnect
150b3c4e4b BACKPORT: ANDROID: dma-buf: heaps: replace mutex lock with spinlock
1e8b8c6263 ANDROID: Update symbol list for mtk
fa068ecbc8 ANDROID: Fix license for BUILD.bazel file.
d47ef1a984 UPSTREAM: gcov: clang: fix the buffer overflow issue
4951a62804 ANDROID: kleaf: load() then package().
d2cfc10a38 UPSTREAM: perf/arm-cmn: Add debugfs topology info
942d043ca8 UPSTREAM: perf/arm-cmn: Add CI-700 Support
ef74c2d064 UPSTREAM: dt-bindings: perf: arm-cmn: Add CI-700
d14ad92dd0 UPSTREAM: perf/arm-cmn: Support new IP features
d0205771e2 UPSTREAM: perf/arm-cmn: Demarcate CMN-600 specifics
b6a7974310 UPSTREAM: perf/arm-cmn: Move group validation data off-stack
9a74f34abd UPSTREAM: perf/arm-cmn: Optimise DTC counter accesses
fb9091356e UPSTREAM: perf/arm-cmn: Optimise DTM counter reads
86d818633c UPSTREAM: perf/arm-cmn: Refactor DTM handling
3081baf827 UPSTREAM: perf/arm-cmn: Streamline node iteration
534bc126aa UPSTREAM: perf/arm-cmn: Refactor node ID handling
11319db7b8 UPSTREAM: perf/arm-cmn: Drop compile-test restriction
40b2978978 UPSTREAM: perf/arm-cmn: Account for NUMA affinity
e82a3f108d UPSTREAM: fs: erofs: add sanity check for kobject in erofs_unregister_sysfs
8ff9996c5d ANDROID: cpufreq: times: record fast switch frequency transitions
09d0ae9798 ANDROID: abi_gki_aarch64_qcom: Add android_vh_madvise_cold_or_pageout
485c0121e7 ANDROID: GKI: MGLRU ABI Fixup
3263c8d514 ANDROID: GKI: Build multi-gen LRU
383505860c BACKPORT: mm: multi-gen LRU: design doc
3fa3e8ad5d UPSTREAM: mm: multi-gen LRU: admin guide
a95784fdac BACKPORT: mm: multi-gen LRU: debugfs interface
dd4f2bd6c0 UPSTREAM: mm: multi-gen LRU: thrashing prevention
94d1a38c47 BACKPORT: mm: multi-gen LRU: kill switch
8726e22e86 BACKPORT: mm: multi-gen LRU: optimize multiple memcgs
35e2163024 BACKPORT: mm: multi-gen LRU: support page table walks
009d857059 BACKPORT: mm: multi-gen LRU: exploit locality in rmap
53af55e4cc BACKPORT: mm: multi-gen LRU: minimal implementation
f4d4c46c3a BACKPORT: mm: multi-gen LRU: groundwork
ce62ece686 UPSTREAM: Revert "include/linux/mm_inline.h: fold __update_lru_size() into its sole caller"
3cebab25d5 BACKPORT: mm/vmscan.c: refactor shrink_node()
f3f123ebb5 BACKPORT: mm: x86: add CONFIG_ARCH_HAS_NONLEAF_PMD_YOUNG
de96dbc641 BACKPORT: mm: x86, arm64: add arch_has_hw_pte_young()
970353b36e Revert "FROMLIST: mm: x86, arm64: add arch_has_hw_pte_young()"
475108fadd Revert "FROMLIST: mm: x86: add CONFIG_ARCH_HAS_NONLEAF_PMD_YOUNG"
8d47a32fa8 Revert "FROMLIST: mm/vmscan.c: refactor shrink_node()"
e849bd2f88 Revert "FROMLIST: Revert "include/linux/mm_inline.h: fold __update_lru_size() into its sole caller""
60f9c51c88 Revert "FROMLIST: mm: multi-gen LRU: groundwork"
6e620d5117 Revert "FROMLIST: mm: multi-gen LRU: minimal implementation"
4bce99229a Revert "FROMLIST: mm: multi-gen LRU: exploit locality in rmap"
16e5220b3d Revert "FROMLIST: mm: multi-gen LRU: support page table walks"
4124cf4b02 Revert "FROMLIST: mm: multi-gen LRU: optimize multiple memcgs"
3a3733721b Revert "FROMLIST: mm: multi-gen LRU: kill switch"
a62a81e770 Revert "FROMLIST: mm: multi-gen LRU: thrashing prevention"
f4b12ac3bc Revert "FROMLIST: mm: multi-gen LRU: debugfs interface"
81c19190ff Revert "FROMLIST: mm: multi-gen LRU: admin guide"
b49c49542f Revert "FROMLIST: mm: multi-gen LRU: design doc"
d8c59190ad Revert "ANDROID: GKI: build multi-gen LRU"
4931d96eb3 ANDROID: mm: Use intended order-adjusted batch size
1bb821dcab ANDROID: ABI: Update allowed list for QCOM
e47b11059b ANDROID: GKI: Add exynos_wear symbol list
23fb3111f6 ANDROID: page_pinner: prevent pp_buffer access before initialization
2bd8e6670e ANDROID: KVM: arm64: Use 32-bit function ID for PSCI MEM_PROTECT call
050466c42e ANDROID: ABI: Update allowed list for QCOM
9449b4f1af ANDROID: mm: preserve vma->anon_vma after MREMAP_DONTUNMAP for SPF
cf5cad44fd ANDROID: mm: disable speculative page faults for CONFIG_NUMA
5fcb50b055 ANDROID: mm: fix speculative walk which is unsafe under RCU
749aa64ba8 ANDROID: mm: avoid using vmacache in lockless vma search
3e7526c672 ANDROID: disable page table moves when speculative page faults are enabled
3b43f23348 ANDROID: mm: skip pte_alloc during speculative page fault
d9d7f843da ANDROID: mm: introduce vma refcounting to protect vma during SPF
d7c52b0cd0 UPSTREAM: crypto: arm/xor - make vectorized C code Clang-friendly
f759aa5f65 UPSTREAM: efi: capsule-loader: Fix use-after-free in efi_capsule_write
564233e471 ANDROID: mm: add a vendor hook to rmqueue_bulk()
979df868f5 FROMGIT: mm/madvise: fix madvise_pageout for private file mappings
99e3951ea4 ANDROID: vendor_hooks: Allow shared pages reclaim via MADV_PAGEOUT
ec736ca13a ANDROID: abi_gki_aarch64_qcom: Update symbol list
710fd74d1d FROMGIT: tty: serial: qcom-geni-serial: Add support for Hibernation feature
6196aa68f6 ANDROID: GKI: Update symbol list for Amlogic
0be362f248 UPSTREAM: KVM: x86: do not report a vCPU as preempted outside instruction boundaries
50358d6729 ANDROID: mm/slab: Use EXPORT_SYMBOL for android_kmalloc_64_create
e161b0c43c ANDROID: GKI: update symbol list for ExynosAuto SoC
1da102d4e3 ANDROID: KVM: arm64: s2mpu: Fix SYNC latency regression
ce39549d92 ANDROID: KVM: arm64: iommu: Add host_stage2_idmap_complete
f0c53a5637 ANDROID: KVM: arm64: Issue CMOs when tearing down shadow pages
aec224bb9e ANDROID: GKI: Update symbol list for xiaomi
4bc79ed42f ANDROID: Add ashmem ioctl to return a unique file identifier
3a049b038e ANDROID: KVM: arm64: Fix repainting of PSCI SYSTEM_RESET2 calls
c2162eca3f ANDROID: reimplement vm_file protection during speculative page fault
a07770525e Revert "ANDROID: add vma->file_ref_count to synchronize vma->vm_file destruction"
578745e43f Revert "ANDROID: arm64/mm: protect vm_file during speculative page fault handling"
24894a547e Revert "ANDROID: x86/mm: protect vm_file during speculative page fault handling"
e9a7e9f2ff Revert "ANDROID: powerpc/mm: protect vm_file during speculative page fault handling"
4288911d5e FROMGIT: usb: core: stop USB enumeration if too many retries
b8b0948987 FROMGIT: f2fs: allow to read node block after shutdown
e796ee5695 ANDROID: KVM: arm64: Adjust PSCI MEM_PROTECT refcount across share/unshare
5e82339f4b UPSTREAM: ext4,f2fs: fix readahead of verity data
3605981d8a FROMLIST: f2fs: fix the msg data type
f9965bb807 BACKPORT: FROMLIST: f2fs: fix the assign logic of iocb
c95f78db38 ANDROID: Update the GKI symbol list and ABI XML
8a7073c106 ANDROID: mm/slab: Create 64-byte slab caches if the hardware supports it
34e03c38fd ANDROID: dma-buf: Add vendor hook for deferred dmabuf sysfs stats release
e4923174ba FROMLIST: cfi: free old cfi shadow asynchronously
9b7bf9c529 FROMLIST: cfi: enable sanitize for cfi.c
432cf292eb ANDROID: GKI: Update abi_gki_aarch64_qcom
a382999851 ANDROID: ABI: Add usb_pipe_type_check symbol
f2f619baa5 ANDROID: GKI: Update symbols to symbol list
69ec48c6a0 ANDROID: GKI: Update symbol list for Amlogic
6707ada5f7 ANDROID: dm-user: Remove bio recount in I/O path
654e0ed6fc UPSTREAM: drm/meson: Fix overflow implicit truncation warnings
aaa6cd7d0d UPSTREAM: irqchip/tegra: Fix overflow implicit truncation warnings
d75ef462c3 UPSTREAM: video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write
777857c7a1 UPSTREAM: i2c: ismt: prevent memory corruption in ismt_access()
b006f3a809 ANDROID: GKI: Update symbol list for mtk STB projects
7266895825 FROMLIST: KVM: arm64: pkvm: Fixup boot mode to reflect that the kernel resumes from EL1
b72960ae91 ANDROID: ABI: Add teace_android_rvh_rto_next_cpu to unisoc whitelist
02ac822b3d BACKPORT: rcu: Remove __read_mostly annotations from rcu_scheduler_active externs
4baff5cba1 ANDROID: ABI: Export vendor_hook to be used by memcgv2 optimization mechanism
5993940dd7 FROMLIST: xfrm: Fix oops in __xfrm_state_delete()
aaf18200c3 BACKPORT: KVM: arm64: Fix bad dereference on MTE-enabled systems
201d5f4a3e FROMLIST: binder: fix UAF of alloc->vma in race with munmap()
20af947ec9 Revert "Revert "BACKPORT: FROMLIST: ext4: implement speculative fault handling""
365ffc56b4 ANDROID: fix a race between speculative page walk and unmap operations
68f9882b75 ANDROID: GKI: update .xml file after cfg80211 changes
f6fa00feb4 UPSTREAM: wifi: cfg80211: add hardware timestamps to frame RX info
2a2c366c47 UPSTREAM: wifi: cfg80211: add a function for reporting TX status with hardware timestamps
1148c260a1 BACKPORT: wifi: nl80211: add RX and TX timestamp attributes
9c20617add BACKPORT: wifi: nl80211: add EML/MLD capabilities to per-iftype capabilities
23c1ff4ec5 FROMGIT: wifi: cfg80211: support reporting failed links
5bdebe9301 FROMGIT: wifi: cfg80211: Fix bitrates overflow issue
41f5642f15 UPSTREAM: wifi: cfg80211: fix MCS divisor value
3658e1b900 BACKPORT: wifi: nl80211: add MLD address to assoc BSS entries
20d705c31e UPSTREAM: wifi: nl80211: remove redundant err variable
acf72eda07 BACKPORT: wifi: nl80211: Add POWERED_ADDR_CHANGE feature
4743d0ad6c BACKPORT: wifi: cfg80211/mac80211: check EHT capability size correctly
89abd0e78b UPSTREAM: wifi: cfg80211: Update RNR parsing to align with Draft P802.11be_D2.0
d4ecf4c3c4 UPSTREAM: wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
da9a72662d FROMGIT: wifi: nl80211: use link ID in NL80211_CMD_SET_BSS
94afbcfb15 UPSTREAM: wifi: cfg80211: add link id to txq params
8e9375450e BACKPORT: wifi: mac80211: Align with Draft P802.11be_D2.0
fadbf9a2ca BACKPORT: wifi: mac80211: Align with Draft P802.11be_D1.5
3ae950a584 UPSTREAM: wifi: nl80211: add MLO link ID to the NL80211_CMD_FRAME TX API
483086ceca UPSTREAM: wifi: cfg80211: report link ID in NL80211_CMD_FRAME
46c8675945 UPSTREAM: wifi: cfg80211/nl80211: move rx management data into a struct
6d81ebd631 BACKPORT: wifi: nl80211/mac80211: clarify link ID in control port TX
dfdfc3041e UPSTREAM: wifi: nl80211: require MLD address on link STA add/modify
5697efd6e4 UPSTREAM: wifi: cfg80211: add cfg80211_get_iftype_ext_capa()
2c60081d52 UPSTREAM: wifi: nl80211: fix some attribute policy entries
9e73ea479d UPSTREAM: wifi: nl80211: reject fragmented and non-inheritance elements
c74a4e8436 UPSTREAM: wifi: nl80211: reject link specific elements on assoc link
3594b5cb98 UPSTREAM: wifi: cfg80211: set country_elem to NULL
2d971fdf0a UPSTREAM: wifi: nl80211: advertise MLO support
8f37e21b18 UPSTREAM: wifi: nl80211: allow link ID in set_wiphy with frequency
eed91854a5 BACKPORT: wifi: cfg80211/mac80211: Support control port TX from specific link
3120619c1b UPSTREAM: wifi: nl80211: Support MLD parameters in nl80211_set_station()
eab9f6c4ab UPSTREAM: wifi: nl80211: check MLO support in authenticate
85f1514d21 UPSTREAM: wifi: nl80211: set BSS to NULL if IS_ERR()
d9847463ac ANDROID: abi_gki_aarch64_qcom: Add drm_plane_from_index
c6432173e0 ANDROID: GKI: Update symbols to symbol list
0051c6ca25 ANDROID: add func in mm/memcontrol.c
671ba4d337 UPSTREAM: af_key: Do not call xfrm_probe_algs in parallel
4431f52671 UPSTREAM: mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
c0a7deb29d ANDROID: KVM: arm64: Donate memory per vcpu for each vcpu shadow state
76094a9979 ANDROID: KVM: arm64: Initialize shadow vcpus with separate hypercalls
31d3b09cb7 ANDROID: KVM: arm64: Refactor unpinning host vcpu
bf48426928 ANDROID: KVM: arm64: Separate functions for shadow vm and vcpu init
bf94ae1300 ANDROID: KVM: arm64: Refactor code for reclaiming guest memory into a function
2c4a77c9b4 UPSTREAM: mm: Force TLB flush for PFNMAP mappings before unlink_file_vma()
e8e8278ea7 ANDROID: sched: check on_rq in freezer_should_skip()
15a4d4c54f BACKPORT: mm: don't be stuck to rmap lock on reclaim path
2ac3611cdf UPSTREAM: crypto: x86/polyval - Fix crashes when keys are not 16-byte aligned
379be12c0f ANDROID: KVM: arm64: Only unpin a vCPU SVE state if set
d6b5e9db8c ANDROID: GKI: Update symbol list for xiaomi
9527695a56 FROMGIT: f2fs: let's avoid to get cp_rwsem twice by f2fs_evict_inode by d_invalidate
d9b344dc29 ANDROID: ABI: Update symbols to unisoc whitelist for the scheduler 6st
2f4a562ed8 UPSTREAM: virtio_mmio: add support to set IRQ of a virtio device as wakeup source
56a0806bcb UPSTREAM: dt-bindings: virtio: mmio: add optional wakeup-source property
c4ef0b793d BACKPORT: mm: re-allow pinning of zero pfns
45cda0a886 BACKPORT: mm: fix is_pinnable_page against a cma page
7d53a26b25 ANDROID: Update symbol list for mtk
1f44f2214d UPSTREAM: thermal: sysfs: Fix cooling_device_stats_setup() error code path
161b98aa4c FROMGIT: usb: dwc3: gadget: Don't set IMI for no_interrupt
7947f2f48a FROMGIT: usb: dwc3: gadget: Stop processing more requests on IMI
3bdd7e23e2 FROMGIT: usb: gadget: uvc: fix sg handling during video encode
55249e0b76 FROMGIT: usb: gadget: uvc: fix sg handling in error case
45238b84d8 FROMGIT: usb: gadget: uvc: fix dropped frame after missed isoc
2d2cd1af72 UPSTREAM: usb: gadget: uvc: improve sg exit condition
3248ae0d9d UPSTREAM: usb: gadget: uvc: giveback vb2 buffer on req complete
23616a2948 UPSTREAM: usb: gadget: uvc: rework uvcg_queue_next_buffer to uvcg_complete_buffer
a50df26246 UPSTREAM: usb: gadget: uvc: use on returned header len in video_encode_isoc_sg
c91c6e0a3f UPSTREAM: usb: gadget: uvc: consistently use define for headerlen
2616a2072c FROMGIT: arm64: io: Use asm-generic high level MMIO accessors
15fbf32b75 ANDROID: GKI: Update abi_gki_aarch64_qcom for trace_mmio
93602bed42 UPSTREAM: usb: dwc3: gadget: fix high speed multiplier setting
14bd2d1473 UPSTREAM: usb: dwc3: gadget: refactor dwc3_repare_one_trb
68d8dea7fe ANDROID: GKI: Update abi_gki_aarch64_qcom for timespec64_to_jiffies
fdf67142f3 ANDROID: vendor_hook: skip trace_android_vh_page_trylock_set when ignore_references is true
a9092347ad ANDROID: ABI: Export psi_system symbol to be used by memcgv2 optimization mechanism
6d81bca908 ANDROID: ABI: export psi_system for memcgv2's vh function optimization
ecb0dcb24a UPSTREAM: mm/damon/dbgfs: fix memory leak when using debugfs_lookup()
52808991c0 UPSTREAM: wifi: mac80211: fix MBSSID parsing use-after-free
ec4ab62846 UPSTREAM: mac80211: fix memory leaks with element parsing
4ae50d8935 UPSTREAM: mac80211: always allocate struct ieee802_11_elems
33c9746293 UPSTREAM: mac80211: mlme: find auth challenge directly
d3f1cd61da UPSTREAM: mac80211: move CRC into struct ieee802_11_elems
397e82f22b UPSTREAM: mac80211: mesh: clean up rx_bcn_presp API
1b7036d9ee UPSTREAM: wifi: cfg80211: update hidden BSSes to avoid WARN_ON
db5865ed3c UPSTREAM: wifi: mac80211: fix crash in beacon protection for P2P-device
b2126d0131 UPSTREAM: wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
64265011ea UPSTREAM: wifi: cfg80211: avoid nontransmitted BSS list corruption
56203e0ecb UPSTREAM: wifi: cfg80211: fix BSS refcounting bugs
3ebea46325 UPSTREAM: wifi: cfg80211: ensure length byte is present before access
0abe9e97c8 UPSTREAM: wifi: cfg80211/mac80211: reject bad MBSSID elements
50802a459b UPSTREAM: wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans()
0a4e0e56b6 UPSTREAM: usb: gadget: f_serial: Ensure gserial disconnected during unbind
a42bb7b44d UPSTREAM: wifi: nl80211: better validate link ID for stations
3ce62ab9f9 UPSTREAM: wifi: cfg80211: clean up links appropriately
6b5b4300ba UPSTREAM: wifi: cfg80211: add ieee80211_chanwidth_rate_flags()
dda95a93f4 UPSTREAM: wifi: cfg80211: extend cfg80211_rx_assoc_resp() for MLO
a4670eb422 BACKPORT: wifi: cfg80211: put cfg80211_rx_assoc_resp() arguments into a struct
c1bcc88a92 BACKPORT: wifi: cfg80211: adjust assoc comeback for MLO
db5bcd0cd8 BACKPORT: wifi: cfg80211: prepare association failure APIs for MLO
4c026e7989 BACKPORT: wifi: cfg80211: remove BSS pointer from cfg80211_disassoc_request
54c7401e6f UPSTREAM: wifi: nl80211: acquire wdev mutex for dump_survey
cedf0a45f1 UPSTREAM: wifi: cfg80211: drop BSS elements from assoc trace for now
85139f4bfc UPSTREAM: wifi: cfg80211: make cfg80211_auth_request::key_idx signed
e75dfe1943 UPSTREAM: wifi: nl80211: enable setting the link address at new station
d104fc76c4 UPSTREAM: wifi: nl80211: hold wdev mutex for station APIs
80f8155cfc UPSTREAM: wifi: nl80211: hold wdev mutex for channel switch APIs
7f076a74a7 UPSTREAM: wifi: nl80211: hold wdev mutex in add/mod/del link station
b1bdeb8543 UPSTREAM: wifi: cfg80211: Allow MLO TX with link source address
6f2a6c919a ANDROID: ABI: add debugfs_lookup_and_remove to whitelist
cabd649d1b UPSTREAM: sched/debug: fix dentry leak in update_sched_domain_debugfs
e681f878fc UPSTREAM: debugfs: add debugfs_lookup_and_remove()
08ef164027 ANDROID: sched: Move scratch_mask to a percpu variable
c61797f241 ANDROID: sched: Keep sched_class::set_cpus_allowed stable
448eb7ef25 FROMGIT: sched: Always clear user_cpus_ptr in do_set_cpus_allowed()
ec8cf94166 BACKPORT: FROMGIT: sched: Enforce user requested affinity
50a3a47c14 BACKPORT: FROMGIT: sched: Always preserve the user requested cpumask
54aeb5c372 BACKPORT: FROMGIT: sched: Introduce affinity_context
5001781910 FROMGIT: sched: Add __releases annotations to affine_move_task()
b3bb41cebd ANDROID: GKI: Update abi_gki_aarch64_qcom for DMA
dba7a32ef7 ANDROID: GKI: Update symbols to symbol list
ba5d7b443e ANDROID: GKI: Update symbol list for Exynos SoC
2eb7ccbee2 BACKPORT: FROMGIT: mmc: core: SD: Add BROKEN-SD-DISCARD quirk
3ade531891 BACKPORT: wifi: cfg80211: Fix validating BSS pointers in __cfg80211_connect_result
0436dc8907 UPSTREAM: mmc: sdhci: Fix host->cmd is null
e91ba0b70e ANDROID: ABI: Update symbols to unisoc whitelist for the wlan
ea095dd932 ANDROID: ABI: Update symbols to unisoc whitelist
545bb8eb6b FROMGIT: seccomp: Move copy_seccomp() to no failure path.
41300cf104 BACKPORT: FROMLIST: tracing: Add register read/write tracing support
e8a2596dec UPSTREAM: fbcon: Prevent that screen size is smaller than font size
b54f2a0d7b UPSTREAM: fbcon: Disallow setting font bigger than screen size
52833e8faf UPSTREAM: fbmem: Check virtual screen sizes in fb_set_var()
ea2a1b81e8 ANDROID: GKI: Update symbol list for VIVO
e0a18fbf05 ANDROID: GKI: Update symbol list for sunxi
3d7ba02e51 ANDROID: ABI: update allowed list for galaxy
ed0b913a4b ANDROID: ABI: Update symbols to unisoc whitelist for UFS the 1st
16aecf0f68 UPSTREAM: usb: gadget: f_fs: change ep->ep safe in ffs_epfile_io()
9dec42d377 UPSTREAM: usb: gadget: f_fs: change ep->status safe in ffs_epfile_io()
6f90f3b9c9 ANDROID: KVM: arm64: Fix MMIO guard map error handling
8324bb0aed ANDROID: GKI: Update symbols to symbol list
95af22de88 UPSTREAM: cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
546f62e71b FROMLIST: locking/rwsem: Limit # of null owner retries for handoff writer
4ece302f35 FROMLIST: locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath
b5e4b8916f ANDROID: abi_gki_aarch64_sony: Export block driver symbols to collect device info
ca65be56ed ANDROID: GKI: block: export block_rq_complete
316e668d5f ANDROID: ABI: update allowed list for galaxy
6d4b5281a6 ANDROID: KVM: arm64: s2mpu: Add SysMMU_SYNC timeout
c0a46be9dc ANDROID: KVM: arm64: Force CMOs with FWB when reclaiming guest pages
24d27dff64 BACKPORT: locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter
48b7cad9b0 ANDROID: Update mtktv symbol list
38e30fccb8 ANDROID: arm64: Reclaim some cpucaps to aid in backporting
e76686ed1d ANDROID: GKI: Update symbol list for mtk STB projects
7639b80540 ANDROID: debug_symbols: Add put_task_stack
807d95c66b ANDROID: abi_gki_aarch64_qcom: Add hibernation APIs
fae48a3639 ANDROID: fix kernelci build-break for !CONFIG_ANDROID_VENDOR_OEM_DATA
6232eecfa7 ANDROID: mm/filemap: Fix missing put_page() for speculative page fault
0555154508 ANDROID: abi_gki_aarch64_qcom: Add clk_restore_context and clk_save_context
fa951e233f BACKPORT: HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
1554564451 ANDROID: abi_gki_aarch64_qcom: Add drm driver APIs
16a71479cb ANDROID: sched: Export sched_domains_mutex for lockdep
d2cb755a43 ANDROID: vendor hooks: Add hooks to support bootloader based hibernation
c297152a18 ANDROID: GKI: Update Amlogic symbol list
2455f6610a ANDROID: fix ABI breakage in struct psi_group
9ed7219990 FROMLIST: psi: stop relying on timer_pending for poll_work rescheduling
9040c2052e ANDROID: ABI: Update symbols to unisoc whitelist
646452113d ANDROID: ABI: Update oplus symbol list
b55a937270 ANDROID: GKI: Update symbol list for sunxi
1eedea5f8d ANDROID: abi_gki_aarch64_qcom: Export update_readahead_gfp_mask VH
041ffcd941 ANDROID: mm: add a vendor_hook to change the gfp flags
ee928517b9 ANDROID: GKI: Update vendor symbol list for vivo
4c1cf366ac ANDROID: vendor_hooks: add new parameter to android_vh_blk_alloc_rqs()
5923781e8c ANDROID: KVM: arm64: Do not advertise SVE capability in protected mode
f803a7997d ANDROID: ABI: Update symbols to unisoc whitelist for the drm
ebf773d748 ANDROID: ABI: Update symbols to unisoc whitelist for clock
372abe5b53 ANDROID: KVM: arm64: Fix MMIO guard unmap
809ec777ea ANDROID: GKI: Add RTK TV KMI symbol list
85eea22b5e ANDROID: Update QCOM symbol list for __tracepoint_android_vh_mmc_sd_update_cmdline_timing
b84c40ff60 UPSTREAM: crypto: jitter - add oversampling of noise source
4b6af87d6e BACKPORT: writeback avoid use-after-free after removing device
75b1bf99a9 ANDROID: GKI: Update abi_gki_aarch64_qcom
3ee1075693 FROMGIT: f2fs: support recording stop_checkpoint reason into super_block
e82a19427e FROMLIST: mm: fix use-after free of page_ext after race with memory-offline
898cfbf094 ANDROID: mm: introduce page_pinner
8dea6e5e50 ANDROID: ABI: Add extcon_get_property_capability symbol
8409443201 ANDROID: gki_config: enable F2FS_UNFAIR_RWSEM
285d4132a6 ANDROID: scsi: ufs: add complete init vendor hook
5756b89437 ANDROID: ABI: update allowed list for galaxy
4ec2c6e2d1 ANDROID: GKI: Update symbol list for mtk AI-vision projects
d6b20ddcd9 ANDROID: GKI: Enable HCTR2
2496e06b21 UPSTREAM: fscrypt: Add HCTR2 support for filename encryption
731238ab38 UPSTREAM: crypto: arm64/polyval - Add PMULL accelerated implementation of POLYVAL
6606d9507e UPSTREAM: crypto: x86/polyval - Add PCLMULQDQ accelerated implementation of POLYVAL
e3431e9f2b UPSTREAM: crypto: arm64/aes-xctr - Improve readability of XCTR and CTR modes
8a794a25ae UPSTREAM: crypto: arm64/aes-xctr - Add accelerated implementation of XCTR
9a11762fde UPSTREAM: crypto: x86/aesni-xctr - Add accelerated implementation of XCTR
927d58494f UPSTREAM: crypto: hctr2 - Add HCTR2 support
b07dcba017 UPSTREAM: crypto: polyval - Add POLYVAL support
24a19f56b4 UPSTREAM: crypto: xctr - Add XCTR support
96c87ab88b UPSTREAM: arm64: Add macro version of the BTI instruction
1fd5d6489a UPSTREAM: crypto: arm64/aes-neon-ctr - improve handling of single tail block
b760d25fca ANDROID: GKI: Update symbols to symbol list
8b49e4bee6 ANDROID: KVM: arm64: Initialize ptr auth in protected mode
5405862223 FROMGIT: KVM: arm64: Ignore kvm-arm.mode if !is_hyp_mode_available()
c101b51fb6 UPSTREAM: wifi: mac80211_hwsim: use 32-bit skb cookie
eb82ad82b1 UPSTREAM: wifi: mac80211_hwsim: add back erroneously removed cast
e154458b37 UPSTREAM: wifi: mac80211_hwsim: fix race condition in pending packet
5e1321eb79 ANDROID: abi_gki_aarch64_qcom: Add protocol related symbols
9122cbfc55 ANDROID: Fix lost track action type in save_track_hash
bcb5f0547e UPSTREAM: usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
c2ab21a729 ANDROID: GKI: Update symbols to symbol list
ac82d34706 ANDROID: vendor_hook: rename the the name of hooks
4a9e3b2ca6 ANDROID: vendor_hooks: Add hook in kmalloc_slab()
fcacd896ec BACKPORT: wifi: cfg80211/mac80211: separate link params from station params
5b0ceee1bd UPSTREAM: wifi: cfg80211: add API to add/modify/remove a link station
54f780d093 ANDROID: signal: Add vendor hook for memory reaping
5edc332cee ANDROID: GKI: Update abi_gki_aarch64_pixel
b80df8c286 Revert "ANDROID: vendor_hooks: Add hooks to tcp/udp send/recv msg functions."
8c09081fc0 Revert "ANDROID: sched: Add vendor hook for util-update related functions"
587cfd8e66 ANDROID: fix alignment of struct shash_desc member
e15184fefe BACKPORT: mm: make minimum slab alignment a runtime property
273bbfc4d7 BACKPORT: printk: stop including cache.h from printk.h
088ce42ab0 UPSTREAM: kasan: fix a missing header include of static_keys.h
17e4c2a950 BACKPORT: kasan: split kasan_*enabled() functions into a separate header
afa76a1c3a ANDROID: scsi: ufs: Improve MCQ error handling
9dcd74deff ANDROID: GKI: Add Sony KMI symbol list
b9707158ac ANDROID: ABI: update allowed list for galaxy
daac36f215 ANDROID: GKI: Update symbols to symbol list
effc9c940a ANDROID: GKI: Update abi_gki_aarch64_qcom symbols.
3561c27eeb UPSTREAM: Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
a89fbc0de0 ANDROID: fix add vendor hooks for unusual abort cases
0fd0345839 ANDROID: regmap: Unhide REGMAP_SPMI
314e242119 ANDROID: ABI: update allowed list for galaxy
6b1ae1157f ANDROID: Enable BUILD_GKI_CERTIFICATION_TOOLS for x86_64 GKI
cbc497caa2 ANDROID: irqchip: Fix vendor hook arguments
898941454f UPSTREAM: usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
7bdc155a70 Revert "FROMLIST: usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop"
94c8c2f858 ANDROID: add symbol file for type visibility symbols
0e0c25fffd ANDROID: selftests: incfs: Increase timeout in concurrent_reads_and_writes_test
bba227bfd0 ANDROID: abi_gki_aarch64_qcom: Add iio symbol list for qcom
0c3d2d04cc ANDROID: make sure all types for hooks are defined in KMI
1aeba1eea1 ANDROID: mm: cma: proper ret type for tasks interrupted by fatal signal
c2b91dc63c BACKPORT: erofs: fix use-after-free of on-stack io[]
a75431c61b ANDROID: kleaf: Explicit list of ABI files.
41a23cd26e FROMGIT: kasan: call kasan_malloc() from __kmalloc_*track_caller()
e1c0ed46cf FROMLIST: f2fs: let FI_OPU_WRITE override FADVISE_COLD_BIT
d7735e03b7 ANDROID: GKI: update the ABI xml and pixel symbol list
f8c9fae007 ANDROID: incfs: Add check for ATTR_KILL_SUID and ATTR_MODE in incfs_setattr
66e0726ca5 ANDROID: GKI: update vendor hook for sd
010f93525d UPSTREAM: kbuild: rename cmd_{bzip2,lzma,lzo,lz4,xzkern,zstd22}
8833039066 ANDROID: ABI: Update symbols to unisoc whitelist
a3525f6e75 ANDROID: ABI: Update symbols to unisoc whitelist for sync from local code
7c0b04f044 ANDROID: ABI: Update symbols to unisoc whitelist
e6c55bbd43 ANDROID: GKI: Update symbol list for sunxi
a3e20edea9 ANDROID: GKI: Update symbol list
ef9a35b2e6 ANDROID: ABI: Update symbols for unisoc whitelist Android13-k5.15
70a5111957 ANDROID: net: export symbol for tracepoint_consume_skb
13bedfc2f2 ANDROID: gki_defconfig: Enable CONFIG_HIBERNATION flag
32e1ff60db ANDROID: ABI: Update symbols to unisoc whitelist for sync from local code
42f39fcf09 ANDROID: GKI: update xiaomi symbol list
ca319dfc39 ANDROID: Add headers to vendor_hooks.c for type visibility
e85a386df9 BACKPORT: KVM: x86: avoid calling x86 emulator without a decoded instruction
6b2fb25eac ANDROID: ABI: Update symbols to unisoc whitelist
678d7a0952 BACKPORT: dm verity: set DM_TARGET_IMMUTABLE feature flag
a2c2b6c914 BACKPORT: pipe: Fix missing lock in pipe_resize_ring()
3c2cc4561f FROMLIST: locking/rwsem: Disable preemption while trying for rwsem lock
c82312f9b0 BACKPORT: rpmsg: virtio: Fix possible double free in rpmsg_probe()
e0440af8b2 BACKPORT: rpmsg: virtio: Fix possible double free in rpmsg_virtio_add_ctrl_dev()
cff4cc7a64 Revert "ANDROID: arm64: smp: fix Lockdep warning: RCU used illegally from idle CPU."
6a2905d352 FROMLIST: arm64: mte: move register initialization to C
7a67b48b62 Revert "BACKPORT: FROMLIST: ext4: implement speculative fault handling"
9f7ac5d820 Revert "FROMLIST: arm64: mte: move register initialization to C"
b9f272d887 ANDROID: vendor_hooks:vendor hook for mmput
c96092a914 ANDROID: GKI: Upate sunxi symbol list
5dc0a0bd6b ANDROID: remove CONFIG_TRACEPOINTS from hook definition headers
ecb7d6b106 ANDROID: remove inclusions from hook definition headers
ea45eaaaae BACKPORT: scsi: ufs: core: Increase fDeviceInit poll frequency
c17b8c3da8 FROMGIT: f2fs: increase the limit for reserve_root
35666bb866 FROMGIT: f2fs: complete checkpoints during remount
9e14ab97fe FROMGIT: f2fs: flush pending checkpoints when freezing super
b52dcd4e22 FROMGIT: f2fs: remove gc_urgent_high_limited for cleanup
e4c3ce6f7d FROMGIT: f2fs: fix wrong continue condition in GC
619b99d2d4 BACKPORT: f2fs: handle decompress only post processing in softirq
c119114518 BACKPORT: f2fs: introduce memory mode
3ec6819bff ANDROID: kleaf: Do not include GKI modules in default output of //common:kernel_aarch64.
fe1e4c55de ANDROID: GKI: Update symbols to symbol list
08b9a0b8aa ANDROID: GKI: Update symbol list for Exynos SoC
ca7f18ea25 ANDROID: ABI: Update oplus symbol list
fb2bb8f3ad ANDROID: mm: Add vendor hook in rmqueue()
193dcfee4d ANDROID: abi_gki_aarch64_qcom: Update symbol list.
1cf95b1e07 ANDROID: GKI: Update symbols to symbol list
e1b8ef44fd ANDROID: Revert "psi: allow unprivileged users with CAP_SYS_RESOURCE to write psi files"
c9ee361850 ANDROID: abi_gki_aarch64_qcom: Add hook for set_cpus_allowed_by_task
2508098b95 ANDROID: GKI: Update symbol list
06a2fffcf3 ANDROID: GKI: Update symbol list for mtk AI-vision projects
1f0f167b62 FROMGIT: wifi: cfg80211: Add link_id to cfg80211_ch_switch_started_notify()
c9375148db FROMGIT: wifi: nl80211: send MLO links channel info in GET_INTERFACE
df92dc5573 FROMGIT: wifi: cfg80211: Prevent cfg80211_wext_siwencodeext() on MLD
460e2bc5da FROMGIT: wifi: cfg80211: reject connect response with MLO params for WEP
cad63b2cf1 FROMGIT: wifi: cfg80211: get correct AP link chandef
e6c826aa9b ANDROID: reduce number of opaque structs in KMI
0226fc2e18 ANDROID: vendor_hooks: tune reclaim inactive ratio
8de5430cb7 BACKPORT: FROMGIT: PCI: dwc: Add support for 64-bit MSI target address
8181ea8d96 BACKPORT: FROMGIT: PCI: dwc: Drop dependency on ZONE_DMA32
a8dfddb2b9 Revert "BACKPORT: FROMLIST: PCI: dwc: Drop dependency on ZONE_DMA32"
c5e662db60 Revert "BACKPORT: FROMLIST: PCI: dwc: Add support for 64-bit MSI target address"
ff81c8d3f5 ANDROID: GKI: create initial PASA symbol list
55f112e068 ANDROID: vendor_hooks: Add hooks for cpufreq_acct_update_power
76be364a84 BACKPORT: irq_work: use kasan_record_aux_stack_noalloc() record callstack
cc724041ce ANDROID: vendor_hooks: Add hooks for oem futex optimization
eb6c8ea051 BACKPORT: fuse: send security context of inode on file
05e1c47bbc UPSTREAM: security: Return xattr name from security_dentry_init_security()
e8ac12a811 BACKPORT: fuse: extend init flags
a43215959d BACKPORT: scsi: ufs: core: Fix missing clk change notification on host reset
773f36077b ANDROID: ABI: Dedup the repeated symbols for Unisoc
c4ebf71500 FROMLIST: arm64: mte: move register initialization to C
f42e2933f0 FROMLIST: ufs: allow host driver to disable wb toggling during clock scaling
8d76ae003b ANDROID: GKI: update xiaomi symbol list
be69ad8227 ANDROID: Expand user_struct size.
776d084118 UPSTREAM: usb: gadget: uvc: calculate the number of request depending on framesize
26e36e62c9 UPSTREAM: usb: dwc3: gadget: increase tx fifo size for ss isoc endpoints
928bb2bbe1 UPSTREAM: usb: gadget: uvc: remove pause flag use
85791a9e63 UPSTREAM: usb: gadget: uvc: allow changing interface name via configfs
499ea1f89b UPSTREAM: usb: gadget: uvc: fix list double add in uvcg_video_pump
0db028444c ANDROID: abi_gki_aarch64_qcom: Add blk_mq_free_request
b58af507bf ANDROID: GKI: Update symbols to symbol list
0312e9cd22 ANDROID: vendor_hooks:vendor hook for __alloc_pages_slowpath.
22c312bbde ANDROID: nl80211: enable reserved attributes with upstream assignments
17e63e8b13 ANDROID: fix declaration mismatch for ns_to_kernel_old_timeval
13e5af1463 ANDROID: avoid huge-page not to clear trylock-bit after shrink_page_list.
b337f6e1a9 ANDROID: mm/memory_hotplug: Fix error path handling
695e36b60e ANDROID: GKI: Update symbol list for imx
4d91f7dff5 ANDROID: GKI: update xiaomi symbol list
39088bd0f1 UPSTREAM: usb: gadget: uvc: test if ep->desc is valid on ep_queue
48ffd4d42d UPSTREAM: usb: gadget: uvc: only pump video data if necessary
1b5de9bdc4 UPSTREAM: usb: gadget: uvc: only schedule stream in streaming state
75b799c801 UPSTREAM: usb: dwc3: gadget: Give some time to schedule isoc
8398037818 UPSTREAM: usb: gadget: composite: Show warning if function driver's descriptors are incomplete.
77672b2424 ANDROID: GKI: Add symbol list file for sunxi
555400c6f7 ANDROID: ABI: Update symbols to unisoc whitelist
73b352b9bc ANDROID: GKI: Update Symbol List for Vendor
175fa88bc2 ANDROID: kernel/sched: rebuild_sched_domains export
5dc0125847 ANDROID: vendor_hooks: Add hooks for page_cache_sync_ra
5a3e902fed FROMLIST: cgroup: Fix race condition at rebind_subsystems()
6aafd4a7e6 ANDROID: GKI: Update symbols to symbol list
7e1756dacc ANDROID: GKI: Add initial symbol list for amlogic
885f16fab6 ANDROID: gki_defconfig: enable CONFIG_USB_CONFIGFS_F_UVC
b2a6221a18 ANDROID: GKI: Update symbols to symbol list
7fa896f92d ANDROID: GKI: Update symbols to symbol list
212c9a7426 ANDROID: ABI: Update symbols to unisoc whitelist for mmc 3st
fb9c12a0f6 ANDROID: ABI: Update oplus symbol list
a54b0cc492 ANDROID: Update mtktv symbol list
bc2b2529f6 BACKPORT: cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
a30c0961dd UPSTREAM: cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
b38034b5d5 BACKPORT: FROMLIST: PCI: dwc: Add support for 64-bit MSI target address
6c9828727f BACKPORT: FROMLIST: PCI: dwc: Drop dependency on ZONE_DMA32
cfaccedb79 BACKPORT: f2fs: do not allow to decompress files have FI_COMPRESS_RELEASED
70d1b9fe5f BACKPORT: f2fs: do not set compression bit if kernel doesn't support
66a0472aac BACKPORT: f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time
b57cdff123 BACKPORT: f2fs: do not skip updating inode when retrying to flush node page
db198f61d0 BACKPORT: f2fs: do not count ENOENT for error case
39886a23bb BACKPORT: f2fs: attach inline_data after setting compression
d85467fdca BACKPORT: f2fs: allow compression for mmap files in compress_mode=user
0e65382de3 BACKPORT: f2fs: fix fallocate to use file_modified to update permissions consistently
0d0b29daf8 BACKPORT: f2fs: don't need inode lock for system hidden quota
089aeb07ab BACKPORT: f2fs: fix to clear dirty inode in f2fs_evict_inode()
05a794d93a BACKPORT: f2fs: avoid infinite loop to flush node pages
9449d07f3f BACKPORT: f2fs: fix to do sanity check on inline_dots inode
820c876e42 BACKPORT: f2fs: introduce data read/write showing path info
8637bc7602 BACKPORT: f2fs: fix wrong condition check when failing metapage read
ffb7e4633b BACKPORT: f2fs: replace congestion_wait() calls with io_schedule_timeout()
a60c2d4f12 ANDROID: vendor_hooks: Add hooks for ipa
e956d16bc2 ANDROID: GKI: add restricted vendor hook for mmc
fc9630b3cb ANDROID: vendor_hooks: add vendor hook for dma_heap_buffer_alloc
47351f748e ANDROID: GKI: Update symbol list for Exynos SoC
f729494767 ANDROID: vendor_hook: add hooks to protect locking-tsk in cpu scheduler
e5e38b46e5 ANDROID: GKI: Update symbols to symbol list
1f925159e2 ANDROID: fix kernelci issue: visibility of struct cgroup_subsys
aea5730216 ANDROID: ABI: Update symbols to unisoc whitelist for sync from local code
4899ed313f ANDROID: GKI: update the ABI xml and pixel symbol list
e7cbfabf82 ANDROID: export reclaim_pages
309a6bf81a ANDROID: vendor_hook: Add hook to not be stuck ro rmap lock in kswapd or direct_reclaim
4f5025129f FROMLIST: usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
d4d10fb574 Revert "FROMLIST: usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop"
2487db8d59 ANDROID: freezer: Add vendor hook to freezer for GKI purpose.
9ac0923ef5 ANDROID: user: Add vendor hook to user for GKI purpose
8b885a54ba ANDROID: GKI: Update symbol list for imx
d1bc61dd85 ANDROID: android: Export symbols for invoking cpufreq_update_util()
b109cefd6f FROMGIT: usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion
6349c3bbd5 ANDROID: GKI: add vendor hook to support emmc FFU
64ae41d79b ANDROID: GKI: Update symbols to symbol list
58c2de6dd0 ANDROID: Update symbol list of mediatek
c3677a966d ANDROID: ABI: update allowed list for galaxy
6581a0bfa7 FROMLIST: usb: gadget: f_uac2: fix superspeed transfer
e2c216a2af UPSTREAM: usb: gadget: f_uac2: clean up some inconsistent indenting
2b0d64ba20 UPSTREAM: wifi: cfg80211: Allow P2P client interface to indicate port authorization
5fad12ed63 UPSTREAM: bcache: move uapi header bcache.h to bcache code directory
99b2e4c942 UPSTREAM: arm64: perf: Support new DT compatibles
08f07e3d42 UPSTREAM: arm64: perf: Simplify registration boilerplate
48af748d03 UPSTREAM: arm64: perf: Support Denver and Carmel PMUs
952fbc560f ANDROID: Add symbols required for NVMe in abi_gki_aarch64_qcom
ce8b55bb08 ANDROID: vendor_hooks: protect multi-mapcount pages in kernel
09ebd2be6e ANDROID: add func:do_traversal_all_lruvec in mm/memcontrol.c
efbe140e82 ANDROID: vendor_hooks: account page-mapcount
bf19ba7dd0 ANDROID: GKI: allow mm vendor hooks header inclusion from header files
e99fffe1d4 ANDROID: Update symbol list for mtk
42f3a7e05f UPSTREAM: dma-buf: remove restriction of IOCTL:DMA_BUF_SET_NAME
dbe7eb9794 ANDROID: abi_gki_aarch64_qcom: Update symbol list
1d7ab182b7 ANDROID: ABI update for virtual device virtio_gpu changes
e0bf6839e7 ANDROID: mm: always destroy mmu_notifier percpu_rwsem asynchronously
3c5af3f431 UPSTREAM: kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt)
a379c27044 ANDROID: ABI: Update symbols to unisoc whitelist for mmc 2st
7b610b2916 ANDROID: Update symbol list of mediatek
5b6fcb2222 UPSTREAM: kbuild: Ignore __this_module in gen_autoksyms.sh
d78c536fe7 UPSTREAM: binder: fix redefinition of seq_file attributes
b52b0debf7 ANDROID: Add a script to collect information about a device's dependencies
af6d390801 BACKPORT: FROMLIST: wifi: cfg80211: Add link_id parameter to various key operations for MLO
359b4ecb6b ANDROID: Update symbol list for mtk
6360c456ed ANDROID: update symbol list for pixel
60714690fe ANDROID: scsi: ufs: add vendor hook to override key reprogramming
cacbff013b BACKPORT: Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put
c4fbc06424 BACKPORT: KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID
6bb5d6b3f7 ANDROID: GKI: update symbol list
a2f552f49c ANDROID: GKI: vendor code needs __balance_callbacks access
Change-Id: Ibee4a43f0ecbddf17851d4db250e95e83800a5a2
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Changes in 5.15.80
mm: hwpoison: refactor refcount check handling
mm: hwpoison: handle non-anonymous THP correctly
mm: shmem: don't truncate page if memory failure happens
ASoC: wm5102: Revert "ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe"
ASoC: wm5110: Revert "ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe"
ASoC: wm8997: Revert "ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe"
ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe
ASoC: rt1019: Fix the TDM settings
ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK
spi: intel: Fix the offset to get the 64K erase opcode
ASoC: codecs: jz4725b: add missed Line In power control bit
ASoC: codecs: jz4725b: fix reported volume for Master ctl
ASoC: codecs: jz4725b: use right control for Capture Volume
ASoC: codecs: jz4725b: fix capture selector naming
ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15
selftests/futex: fix build for clang
selftests/intel_pstate: fix build for ARCH=x86_64
ASoC: rt1308-sdw: add the default value of some registers
drm/amd/display: Remove wrong pipe control lock
ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids[]
RDMA/efa: Add EFA 0xefa2 PCI ID
btrfs: raid56: properly handle the error when unable to find the missing stripe
NFSv4: Retry LOCK on OLD_STATEID during delegation return
ACPI: x86: Add another system to quirk list for forcing StorageD3Enable
firmware: arm_scmi: Cleanup the core driver removal callback
i2c: tegra: Allocate DMA memory for DMA engine
i2c: i801: add lis3lv02d's I2C address for Vostro 5568
drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid
btrfs: remove pointless and double ulist frees in error paths of qgroup tests
Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm
x86/cpu: Add several Intel server CPU model numbers
ASoC: codecs: jz4725b: Fix spelling mistake "Sourc" -> "Source", "Routee" -> "Route"
mtd: spi-nor: intel-spi: Disable write protection only if asked
spi: intel: Use correct mask for flash and protected regions
KVM: x86/pmu: Do not speculatively query Intel GP PMCs that don't exist yet
hugetlbfs: don't delete error page from pagecache
arm64: dts: qcom: sa8155p-adp: Specify which LDO modes are allowed
arm64: dts: qcom: sm8150-xperia-kumano: Specify which LDO modes are allowed
arm64: dts: qcom: sm8250-xperia-edo: Specify which LDO modes are allowed
arm64: dts: qcom: sm8350-hdk: Specify which LDO modes are allowed
spi: stm32: Print summary 'callbacks suppressed' message
ARM: dts: at91: sama7g5: fix signal name of pin PB2
ASoC: core: Fix use-after-free in snd_soc_exit()
ASoC: tas2770: Fix set_tdm_slot in case of single slot
ASoC: tas2764: Fix set_tdm_slot in case of single slot
ARM: at91: pm: avoid soft resetting AC DLL
serial: 8250: omap: Fix missing PM runtime calls for omap8250_set_mctrl()
serial: 8250_omap: remove wait loop from Errata i202 workaround
serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove()
serial: 8250: omap: Flush PM QOS work on remove
serial: imx: Add missing .thaw_noirq hook
tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send
bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb()
ASoC: soc-utils: Remove __exit for snd_soc_util_exit()
pinctrl: rockchip: list all pins in a possible mux route for PX30
scsi: scsi_transport_sas: Fix error handling in sas_phy_add()
block: sed-opal: kmalloc the cmd/resp buffers
bpf: Fix memory leaks in __check_func_call
arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro
siox: fix possible memory leak in siox_device_add()
parport_pc: Avoid FIFO port location truncation
pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map
drm/vc4: kms: Fix IS_ERR() vs NULL check for vc4_kms
drm/panel: simple: set bpc field for logic technologies displays
drm/drv: Fix potential memory leak in drm_dev_init()
drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker()
ARM: dts: imx7: Fix NAND controller size-cells
arm64: dts: imx8mm: Fix NAND controller size-cells
arm64: dts: imx8mn: Fix NAND controller size-cells
ata: libata-transport: fix double ata_host_put() in ata_tport_add()
ata: libata-transport: fix error handling in ata_tport_add()
ata: libata-transport: fix error handling in ata_tlink_add()
ata: libata-transport: fix error handling in ata_tdev_add()
nfp: change eeprom length to max length enumerators
MIPS: fix duplicate definitions for exported symbols
MIPS: Loongson64: Add WARN_ON on kexec related kmalloc failed
bpf: Initialize same number of free nodes for each pcpu_freelist
net: bgmac: Drop free_netdev() from bgmac_enet_remove()
mISDN: fix possible memory leak in mISDN_dsp_element_register()
net: hinic: Fix error handling in hinic_module_init()
net: stmmac: ensure tx function is not running in stmmac_xdp_release()
soc: imx8m: Enable OCOTP clock before reading the register
net: liquidio: release resources when liquidio driver open failed
mISDN: fix misuse of put_device() in mISDN_register_device()
net: macvlan: Use built-in RCU list checking
net: caif: fix double disconnect client in chnl_net_open()
bnxt_en: Remove debugfs when pci_register_driver failed
net: mhi: Fix memory leak in mhi_net_dellink()
net: dsa: make dsa_master_ioctl() see through port_hwtstamp_get() shims
xen/pcpu: fix possible memory leak in register_pcpu()
net: ionic: Fix error handling in ionic_init_module()
net: ena: Fix error handling in ena_init()
net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process
bridge: switchdev: Fix memory leaks when changing VLAN protocol
drbd: use after free in drbd_create_device()
platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized
platform/surface: aggregator: Do not check for repeated unsequenced packets
cifs: add check for returning value of SMB2_close_init
net: ag71xx: call phylink_disconnect_phy if ag71xx_hw_enable() fail in ag71xx_open()
net/x25: Fix skb leak in x25_lapb_receive_frame()
cifs: Fix wrong return value checking when GETFLAGS
net: microchip: sparx5: Fix potential null-ptr-deref in sparx_stats_init() and sparx5_start()
net: thunderbolt: Fix error handling in tbnet_init()
cifs: add check for returning value of SMB2_set_info_init
ftrace: Fix the possible incorrect kernel message
ftrace: Optimize the allocation for mcount entries
ftrace: Fix null pointer dereference in ftrace_add_mod()
ring_buffer: Do not deactivate non-existant pages
tracing: Fix memory leak in tracing_read_pipe()
tracing/ring-buffer: Have polling block on watermark
tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event()
tracing: Fix wild-memory-access in register_synth_event()
tracing: Fix race where eprobes can be called before the event
tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit()
tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit()
drm/amd/display: Add HUBP surface flip interrupt handler
ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()
ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro
ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360
Revert "usb: dwc3: disable USB core PHY management"
slimbus: qcom-ngd: Fix build error when CONFIG_SLIM_QCOM_NGD_CTRL=y && CONFIG_QCOM_RPROC_COMMON=m
slimbus: stream: correct presence rate frequencies
speakup: fix a segfault caused by switching consoles
USB: bcma: Make GPIO explicitly optional
USB: serial: option: add Sierra Wireless EM9191
USB: serial: option: remove old LARA-R6 PID
USB: serial: option: add u-blox LARA-R6 00B modem
USB: serial: option: add u-blox LARA-L6 modem
USB: serial: option: add Fibocom FM160 0x0111 composition
usb: add NO_LPM quirk for Realforce 87U Keyboard
usb: chipidea: fix deadlock in ci_otg_del_timer
usb: cdns3: host: fix endless superspeed hub port reset
usb: typec: mux: Enter safe mode only when pins need to be reconfigured
iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger()
iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init()
iio: adc: mp2629: fix wrong comparison of channel
iio: adc: mp2629: fix potential array out of bound access
iio: pressure: ms5611: changed hardcoded SPI speed to value limited
dm ioctl: fix misbehavior if list_versions races with module loading
serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs
serial: 8250: Flush DMA Rx on RLSI
serial: 8250_lpss: Configure DMA also w/o DMA filter
Input: iforce - invert valid length check when fetching device IDs
maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault()
net: phy: marvell: add sleep time after enabling the loopback bit
scsi: zfcp: Fix double free of FSF request when qdio send fails
iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries
iommu/vt-d: Set SRE bit only when hardware has SRS cap
firmware: coreboot: Register bus in module init
mmc: core: properly select voltage range without power cycle
mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout
mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()
docs: update mediator contact information in CoC doc
misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
perf/x86/intel/pt: Fix sampling using single range output
nvme: restrict management ioctls to admin
nvme: ensure subsystem reset is single threaded
serial: 8250_lpss: Use 16B DMA burst with Elkhart Lake
perf: Improve missing SIGTRAP checking
ring-buffer: Include dropped pages in counting dirty patches
tracing: Fix warning on variable 'struct trace_array'
net: use struct_group to copy ip/ipv6 header addresses
scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()
scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper()
kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case
Input: i8042 - fix leaking of platform device on module removal
macvlan: enforce a consistent minimal mtu
tcp: cdg: allow tcp_cdg_release() to be called multiple times
kcm: avoid potential race in kcm_tx_work
kcm: close race conditions on sk_receive_queue
9p: trans_fd/p9_conn_cancel: drop client lock earlier
gfs2: Check sb_bsize_shift after reading superblock
gfs2: Switch from strlcpy to strscpy
9p/trans_fd: always use O_NONBLOCK read/write
wifi: wext: use flex array destination for memcpy()
mm: fs: initialize fsdata passed to write_begin/write_end interface
net/9p: use a dedicated spinlock for trans_fd
ntfs: fix use-after-free in ntfs_attr_find()
ntfs: fix out-of-bounds read in ntfs_attr_find()
ntfs: check overflow when iterating ATTR_RECORDs
Linux 5.15.80
Change-Id: Id31868a01739f6c1e688f4730980dc572d6681bf
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
The usb_ep_clear_halt() API can be called from the function driver, and
translates to dwc3_gadget_ep_set_halt(). This routine is shared with when
the host issues a clear feature ENDPOINT_HALT, and is differentiated by the
protocol argument. If the following sequence occurs, there can be a
situation where the delayed_status flag is improperly cleared for the wrong
SETUP transaction:
1. Vendor specific control transfer returns USB_GADGET_DELAYED_STATUS.
2. DWC3 gadget sets dwc->delayed_status to '1'.
3. Another function driver issues a usb_ep_clear_halt() call.
4. DWC3 gadget issues dwc3_stop_active_transfer() and sets
DWC3_EP_PENDING_CLEAR_STALL.
5. EP command complete interrupt triggers for the end transfer, and
dwc3_ep0_send_delayed_status() is allowed to run, as delayed_status
is '1' due to step#1.
6. STATUS phase is sent, and delayed_status is cleared.
7. Vendor specific control transfer is finished being handled, and issues
usb_composite_setup_continue(). This results in queuing of a data
phase.
Cache the protocol flag so that DWC3 gadget is aware of when the clear halt
is due to a SETUP request from the host versus when it is sourced from a
function driver. This allows for the EP command complete interrupt to know
if it needs to issue a delayed status phase.
type 'struct dwc3' changed
member 'union { struct { u8 clear_stall_protocol; u8 padding1;
u8 padding2; u8 padding3; u8 padding4; u8 padding5; u8 padding6;
u8 padding7; }; struct { u64 android_kabi_reserved1; };
union { }; }' was added.
member 'u64 android_kabi_reserved1' was removed.
Signed-off-by: Wesley Cheng <quic_wcheng@quicinc.com>
Link: https://lore.kernel.org/r/20220414073902.21960-1-quic_wcheng@quicinc.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 2840d6dfcf4306878f7d17ac16d4a0a6422728cc)
BUG: 263499807
[eserrao: Fixed KMI breakage by moving clear_stall_protocol to a new
parent structure]
Change-Id: I46bc6b0246218c60e36f2b6ce45dc9c156cee4f0
Signed-off-by: Elson Roy Serrao <quic_eserrao@quicinc.com>
The gadget driver may wait on the request completion when it sets the
USB_GADGET_DELAYED_STATUS. Make sure that the End Transfer command can
go through if the dwc->delayed_status is set so that the request can
complete. When the delayed_status is set, the Setup packet is already
processed, and the next phase should be either Data or Status. It's
unlikely that the host would cancel the control transfer and send a new
Setup packet during End Transfer command. But if that's the case, we can
try again when ep0state returns to EP0_SETUP_PHASE.
Fixes: e1ee843488d5 ("usb: dwc3: gadget: Force sending delayed status during soft disconnect")
Cc: stable@vger.kernel.org
Signed-off-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Link: https://lore.kernel.org/r/3f9f59e5d74efcbaee444cf4b30ef639cc7b124e.1666146954.git.Thinh.Nguyen@synopsys.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 4db0fbb601361767144e712beb96704b966339f5)
Bug: 263189538
Change-Id: I3cc041f48d4b45ced60b5c5bb9d215a5777ec296
Signed-off-by: Krishna Kurapati <quic_kriskura@quicinc.com>
DWC3_EP_DELAYED_STOP is utilized to defer issuing the end transfer command
until the subsequent SETUP stage, in order to avoid end transfer timeouts.
During cable disconnect scenarios, __dwc3_gadget_ep_disable() is
responsible for ensuring endpoints have no active transfers pending. Since
dwc3_remove_request() can now exit early if the EP delayed stop is set,
avoid clearing all DEP flags, otherwise the transition back into the SETUP
stage won't issue an endxfer command.
Fixes: 2b2da6574e77 ("usb: dwc3: Avoid unmapping USB requests if endxfer is not complete")
Reviewed-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Signed-off-by: Wesley Cheng <quic_wcheng@quicinc.com>
Link: https://lore.kernel.org/r/20220919231213.21364-1-quic_wcheng@quicinc.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 76bff31c7fba6cc21bf8f9785572484d54d31878)
Bug: 263189538
Change-Id: I1853f6be239158e40eb5a3c5f112e96a8936958b
Signed-off-by: Krishna Kurapati <quic_kriskura@quicinc.com>
For endxfer commands that do not require an endpoint complete interrupt,
avoid having to wait for the command active bit to clear. This allows for
EP0 events to continue to be handled, which allows for the controller to
complete it. Otherwise, it is known that the endxfer command will fail if
there is a pending SETUP token that needs to be read.
Suggested-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Reviewed-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Signed-off-by: Wesley Cheng <quic_wcheng@quicinc.com>
Link: https://lore.kernel.org/r/20220901193625.8727-5-quic_wcheng@quicinc.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit b353eb6dc285a0775a447f53e5b2a50bf3f9684f)
Bug: 263189538
Change-Id: If34b7ddc2e3ea10ec94afe43e6dba0878da6776f
Signed-off-by: Krishna Kurapati <quic_kriskura@quicinc.com>
Since EP0 transactions need to be completed before the controller halt
sequence is finished, this may take some time depending on the host and the
enabled functions. Increase the controller halt timeout, so that we give
the controller sufficient time to handle EP0 transfers.
Signed-off-by: Wesley Cheng <quic_wcheng@quicinc.com>
Link: https://lore.kernel.org/r/20220901193625.8727-4-quic_wcheng@quicinc.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 461ee467507cb98a348fa91ff8460908bb0ea423)
Bug: 263189538
Change-Id: Idb8998c4ae1d346a63043f40a3915a8a02601982
Signed-off-by: Krishna Kurapati <quic_kriskura@quicinc.com>
If DWC3_EP_DELAYED_STOP is set during stop active transfers, then do not
continue attempting to unmap request buffers during dwc3_remove_requests().
This can lead to SMMU faults, as the controller has not stopped the
processing of the TRB. Defer this sequence to the EP0 out start, which
ensures that there are no pending SETUP transactions before issuing the
endxfer.
Reviewed-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Signed-off-by: Wesley Cheng <quic_wcheng@quicinc.com>
Link: https://lore.kernel.org/r/20220901193625.8727-2-quic_wcheng@quicinc.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 2b2da6574e77ebf83c0df6d8b838bc37764c4bfa)
Bug: 263189538
Change-Id: I01ba6d79b56211316bfa492ae4d5d41680067c9e
Signed-off-by: Krishna Kurapati <quic_kriskura@quicinc.com>
During soft disconnect, EP0 events are expected to be handled in order to
allow the controller to successfully move into the halted state. Since
__dwc3_gadget_stop() is executed before polling, EP0 has been disabled, and
events are being blocked. Allow xfercomplete events to be handled, so that
cached SETUP packets can be read out from the internal controller memory.
Without doing so, it will lead to endxfer timeouts, which results to
controller halt failures.
Reviewed-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Signed-off-by: Wesley Cheng <quic_wcheng@quicinc.com>
Link: https://lore.kernel.org/r/20220817182359.13550-5-quic_wcheng@quicinc.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit dff981842a0b1c05786c4c0cdea3ac80079ddd57)
Bug: 263189538
Change-Id: Id9cbfacd05a351fda689b6845d2469c5e7e7e51b
Signed-off-by: Krishna Kurapati <quic_kriskura@quicinc.com>
If any function drivers request for a delayed status phase, this leads to a
SETUP transfer timeout error, since the function may take longer to process
the DATA stage. This eventually results in end transfer timeouts, as there
is a pending SETUP transaction.
In addition, allow the DWC3_EP_DELAY_STOP to be set for if there is a
delayed status requested. Ocasionally, a host may abort the current SETUP
transaction, by issuing a subsequent SETUP token. In those situations, it
would result in an endxfer timeout as well.
Reviewed-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Signed-off-by: Wesley Cheng <quic_wcheng@quicinc.com>
Link: https://lore.kernel.org/r/20220817182359.13550-3-quic_wcheng@quicinc.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit e1ee843488d58099a89979627ef85d5bd6c5cacd)
Bug: 263189538
Change-Id: Ifcc747ecfecec7d4329950af1edc035cd55dc96d
Signed-off-by: Krishna Kurapati <quic_kriskura@quicinc.com>
There are some operations that need to be ignored if there is a soft
disconnect in progress. This is to avoid having a pending EP0 transfer in
progress while attempting to stop active transfers and halting the
controller.
There were several instances seen where a soft disconnect was able to occur
during early link negotiation, i.e. bus reset/conndone, which leads to the
conndone handler re-configuring EPs while attempting to halt the
controller, as DEP flags are cleared as part of the soft disconnect path.
ep0out: cmd 'Start New Configuration'
ep0out: cmd 'Set Endpoint Transfer Resource'
ep0in: cmd 'Set Endpoint Transfer Resource'
ep1out: cmd 'Set Endpoint Transfer Resource'
...
event (00030601): Suspend [U3]
event (00000101): Reset [U0]
ep0out: req ffffff87e5c9e100 length 0/0 zsI ==> 0
event (00000201): Connection Done [U0]
ep0out: cmd 'Start New Configuration'
ep0out: cmd 'Set Endpoint Transfer Resource'
In addition, if a soft disconnect occurs, EP0 events are still allowed to
process, however, it will stall/restart during the SETUP phase. The
host is still able to query for the DATA phase, leading to a
xfernotready(DATA) event. Since none of the SETUP transfer parameters are
populated, the xfernotready is treated as a "wrong direction" error,
leading to a duplicate stall/restart routine.
Add the proper softconnect/connected checks in sequences that are
potentially involved during soft disconnect processing.
Reviewed-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Signed-off-by: Wesley Cheng <quic_wcheng@quicinc.com>
Link: https://lore.kernel.org/r/20220817182359.13550-2-quic_wcheng@quicinc.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 359d5a85a758906087801d7b3d3536a984211dec)
Bug: 263189538
Change-Id: Ia933ce7a70febbab8bb122d650691bd937d9ec37
Signed-off-by: Krishna Kurapati <quic_kriskura@quicinc.com>
The functions stop_active_transfers and ep_disable are both calling
remove_requests. This functions in both cases will giveback the requests
with status ESHUTDOWN, which also represents an physical disconnection.
For ep_disable this is not true. This patch adds the status parameter to
remove_requests and sets the status to ECONNRESET on ep_disable.
Signed-off-by: Michael Grzeschik <m.grzeschik@pengutronix.de>
Link: https://lore.kernel.org/r/20220720213523.1055897-1-m.grzeschik@pengutronix.de
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit b44c0e7fef51ee7e8ca8c6efbf706f5613787100)
Bug: 263189538
Change-Id: I1bd7a42e6f2f99a0ce021ef3c94dc630ae9260df
Signed-off-by: Krishna Kurapati <quic_kriskura@quicinc.com>
During a 3 stage SETUP transfer, if the host sends another SETUP token
before completing the status phase, it signifies that the host has aborted
the current control transfer. Currently, if a setup_packet_pending is
received, there are no subsequent calls to dwc3_ep0_out_start() to fetch
the new SETUP packet. This leads to a stall on EP0, as host does not
expect another STATUS phase as it has aborted the current transfer.
Fix this issue by explicitly stalling and restarting EP0, as well as
resetting the trb_enqueue indexes. (without this, there is a chance the
SETUP TRB is set up on trb_endqueue == 1)
Signed-off-by: Wesley Cheng <quic_wcheng@quicinc.com>
Link: https://lore.kernel.org/r/20220712014403.2977-1-quic_wcheng@quicinc.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 5e76ee96be8f7bbf9416a5edddc8c064e7e7c6ac)
Bug: 263189538
Change-Id: Ia0cc555ca8cd94048308406d975b3b4f4aa6ca54
Signed-off-by: Krishna Kurapati <quic_kriskura@quicinc.com>
The current logic to assign the max packet limit for IN endpoints attempts
to take the default HW value and apply the optimal endpoint settings based
on it. However, if the default value reports a TxFIFO size large enough
for only one max packet, it will divide the value and assign a smaller ep
max packet limit.
For example, if the default TxFIFO size fits 1024B, current logic will
assign 1024/3 = 341B to ep max packet size. If function drivers attempt to
request for an endpoint with a wMaxPacketSize of 1024B (SS BULK max packet
size) then it will fail, as the gadget is unable to find an endpoint which
can fit the requested size.
Functionally, if the TxFIFO has enough space to fit one max packet, it will
be sufficient, at least when initializing the endpoints.
Fixes: d94ea53198 ("usb: dwc3: gadget: Properly set maxpacket limit")
Cc: stable <stable@kernel.org>
Signed-off-by: Wesley Cheng <quic_wcheng@quicinc.com>
Link: https://lore.kernel.org/r/20220523213948.22142-1-quic_wcheng@quicinc.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 9c1e916960c1192e746bf615e4dae25423473a64)
Bug: 263189538
Change-Id: I56995b3d5bbfa8dc61a0e4084d6109d90951244d
Signed-off-by: Krishna Kurapati <quic_kriskura@quicinc.com>
If the controller hasn't DMA'ed the Setup data from its fifo, it won't
process the End Transfer command. Polling for the command completion may
block the driver from servicing the Setup phase and cause a timeout.
Previously we only check and delay issuing End Transfer in the case of
endpoint dequeue. Let's do that for all End Transfer scenarios.
Signed-off-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Link: https://lore.kernel.org/r/2fcf3b5d90068d549589a57a27a79f76c6769b04.1650593829.git.Thinh.Nguyen@synopsys.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit f66eef8fb8989a7193cafc3870f7c7b2b97f16cb)
Bug: 263189538
Change-Id: I58dc40ff7defdd03f52da900ee0b179ffe55d2cc
Signed-off-by: Krishna Kurapati <quic_kriskura@quicinc.com>
The driver shouldn't be able to issue End Transfer to the control
endpoint at anytime. Typically we should only do so in error cases such
as invalid/unexpected direction of Data Phase as described in the
control transfer flow of the programming guide. It _may_ end started
data phase during controller deinitialization from soft disconnect or
driver removal. However, that should not happen because the driver
should be maintained in EP0_SETUP_PHASE during driver tear-down. On
soft-connect, the controller should be reset from a soft-reset and there
should be no issue starting the control endpoint.
Signed-off-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Link: https://lore.kernel.org/r/3c6643678863a26702e4115e9e19d7d94a30d49c.1650593829.git.Thinh.Nguyen@synopsys.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit ace17b6ee4f92ab0375d12a1b42494f8590a96b6)
Bug: 263189538
Change-Id: Ifd58ee4b1f213db72d6bcc7137c96ee2a399e21c
Signed-off-by: Krishna Kurapati <quic_kriskura@quicinc.com>
Since we can't guarantee that the host won't send new Setup packet
before going through the device-initiated disconnect, don't prepare
beyond the Setup stage and keep the device in EP0_SETUP_PHASE. This
ensures that the device-initated disconnect sequence can go through
gracefully. Note that the controller won't service the End Transfer
command if it can't DMA out the Setup packet.
Signed-off-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Link: https://lore.kernel.org/r/6bacec56ecabb2c6e49a09cedfcac281fdc97de0.1650593829.git.Thinh.Nguyen@synopsys.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit c96683798e272366866a5c0ce3073c0b5a256db7)
Bug: 263189538
Change-Id: Ice2d6837acebd312e732527504f4013f33a8fe6d
Signed-off-by: Krishna Kurapati <quic_kriskura@quicinc.com>
The driver knows what it needs to set for GEVNTSIZn, and the controller
doesn't modify this register unless there's a hard reset. To save a few
microseconds of register read in read-modify-write operation, simply do
register write with the expected values. This can improve performance
when there are many interrupts generated, which the driver needs to
check and handle.
Signed-off-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Link: https://lore.kernel.org/r/efddf4ee5821c4bc5ae7ad90d629ec7a0ebcbf9a.1638240306.git.Thinh.Nguyen@synopsys.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 76c4c95dac0da03f64d8b59a8834faf8020af8dc)
Bug: 263189538
Change-Id: I7dec7b568f12b1529ab1e52a600056be98910f02
Signed-off-by: Krishna Kurapati <quic_kriskura@quicinc.com>
commit 63130462c919ece0ad0d9bb5a1f795ef8d79687e upstream.
Since commit 0f0101719138 ("usb: dwc3: Don't switch OTG -> peripheral
if extcon is present"), Dual Role support on Intel Merrifield platform
broke due to rearranging the call to dwc3_get_extcon().
It appears to be caused by ulpi_read_id() masking the timeout on the first
test write. In the past dwc3 probe continued by calling dwc3_core_soft_reset()
followed by dwc3_get_extcon() which happend to return -EPROBE_DEFER.
On deferred probe ulpi_read_id() finally succeeded. Due to above mentioned
rearranging -EPROBE_DEFER is not returned and probe completes without phy.
On Intel Merrifield the timeout on the first test write issue is reproducible
but it is difficult to find the root cause. Using a mainline kernel and
rootfs with buildroot ulpi_read_id() succeeds. As soon as adding
ftrace / bootconfig to find out why, ulpi_read_id() fails and we can't
analyze the flow. Using another rootfs ulpi_read_id() fails even without
adding ftrace. We suspect the issue is some kind of timing / race, but
merely retrying ulpi_read_id() does not resolve the issue.
As we now changed ulpi_read_id() to return -ETIMEDOUT in this case, we
need to handle the error by calling dwc3_core_soft_reset() and request
-EPROBE_DEFER. On deferred probe ulpi_read_id() is retried and succeeds.
Fixes: ef6a7bcfb0 ("usb: ulpi: Support device discovery via DT")
Cc: stable@vger.kernel.org
Acked-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Signed-off-by: Ferry Toth <ftoth@exalondelft.nl>
Link: https://lore.kernel.org/r/20221205201527.13525-3-ftoth@exalondelft.nl
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
commit 62c73bfea048e66168df09da6d3e4510ecda40bb upstream.
dwc->desired_dr_role is changed by dwc3_set_mode inside a spinlock but
then read by __dwc3_set_mode outside of that lock. This can lead to a
race condition when very quick successive role switch events happen:
CPU A
dwc3_set_mode(DWC3_GCTL_PRTCAP_HOST) // first role switch event
spin_lock_irqsave(&dwc->lock, flags);
dwc->desired_dr_role = mode; // DWC3_GCTL_PRTCAP_HOST
spin_unlock_irqrestore(&dwc->lock, flags);
queue_work(system_freezable_wq, &dwc->drd_work);
CPU B
__dwc3_set_mode
// ....
spin_lock_irqsave(&dwc->lock, flags);
// desired_dr_role is DWC3_GCTL_PRTCAP_HOST
dwc3_set_prtcap(dwc, dwc->desired_dr_role);
spin_unlock_irqrestore(&dwc->lock, flags);
CPU A
dwc3_set_mode(DWC3_GCTL_PRTCAP_DEVICE) // second event
spin_lock_irqsave(&dwc->lock, flags);
dwc->desired_dr_role = mode; // DWC3_GCTL_PRTCAP_DEVICE
spin_unlock_irqrestore(&dwc->lock, flags);
CPU B (continues running __dwc3_set_mode)
switch (dwc->desired_dr_role) { // DWC3_GCTL_PRTCAP_DEVICE
// ....
case DWC3_GCTL_PRTCAP_DEVICE:
// ....
ret = dwc3_gadget_init(dwc);
We then have DWC3_GCTL.DWC3_GCTL_PRTCAPDIR = DWC3_GCTL_PRTCAP_HOST and
dwc->current_dr_role = DWC3_GCTL_PRTCAP_HOST but initialized the
controller in device mode. It's also possible to get into a state
where both host and device are intialized at the same time.
Fix this race by creating a local copy of desired_dr_role inside
__dwc3_set_mode while holding dwc->lock.
Fixes: 41ce1456e1 ("usb: dwc3: core: make dwc3_set_mode() work properly")
Cc: stable <stable@kernel.org>
Acked-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Signed-off-by: Sven Peter <sven@svenpeter.dev>
Link: https://lore.kernel.org/r/20221128161526.79730-1-sven@svenpeter.dev
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
[ Upstream commit 3aa07f72894d209fcf922ad686cbb28cf005aaad ]
If there's a disconnection while operating in eSS, there may be a delay
in VBUS drop response from the connector. In that case, the internal
link state may drop to operate in usb2 speed while the controller thinks
the VBUS is still high. The driver must make sure to disable
GUSB2PHYCFG.SUSPHY when sending endpoint command while in usb2 speed.
The End Transfer command may be called, and only that command needs to
go through at this point. Let's keep it simple and unconditionally
disable GUSB2PHYCFG.SUSPHY whenever we issue the command.
This scenario is not seen in real hardware. In a rare case, our
prototype type-c controller/interface may have a slow response
triggerring this issue.
Signed-off-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com>
Link: https://lore.kernel.org/r/5651117207803c26e2f22ddf4e5ce9e865dcf7c7.1668045468.git.Thinh.Nguyen@synopsys.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
[ Upstream commit b44c0e7fef51ee7e8ca8c6efbf706f5613787100 ]
The functions stop_active_transfers and ep_disable are both calling
remove_requests. This functions in both cases will giveback the requests
with status ESHUTDOWN, which also represents an physical disconnection.
For ep_disable this is not true. This patch adds the status parameter to
remove_requests and sets the status to ECONNRESET on ep_disable.
Signed-off-by: Michael Grzeschik <m.grzeschik@pengutronix.de>
Link: https://lore.kernel.org/r/20220720213523.1055897-1-m.grzeschik@pengutronix.de
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Stable-dep-of: f90f5afd5083 ("usb: dwc3: gadget: Clear ep descriptor last")
Signed-off-by: Sasha Levin <sashal@kernel.org>
Thinh Nguyen