Merge 6.6.102 into android15-6.6-lts
GKI (arm64) relevant 58 out of 262 changes, affecting 79 files +524/-269 15da7321 audit,module: restore audit logging in load failure case [4 files, +10/-9] 8d1bfdd3 fs_context: fix parameter name in infofc() macro [1 file, +1/-1] d89f71ae ublk: use vmalloc for ublk_device's __queues [1 file, +2/-2] ee1c30d7 ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() [1 file, +9/-7] 4c39fc79 ASoC: ops: dynamically allocate struct snd_ctl_elem_value [1 file, +15/-11] f24e5b44 usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe() [1 file, +1/-1] 7ed42b79 pps: fix poll support [2 files, +10/-2] c6ec2709 powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() [1 file, +2/-0] 4f886798 soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS [1 file, +2/-0] 81f50619 PM / devfreq: Check governor before using governor->name [1 file, +3/-7] 39a0d418 cpufreq: Initialize cpufreq-based frequency-invariance later [1 file, +9/-9] f7e5ae0d cpufreq: Init policy->rwsem before it may be possibly used [1 file, +2/-1] c69d0649 bpf, sockmap: Fix psock incorrectly pointing to sk [1 file, +7/-0] cc7af1b8 net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain [1 file, +2/-1] c45a3390 tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range [1 file, +2/-1] e0b8b668 net: dst: annotate data-races around dst->input [4 files, +5/-5] f73c0bc2 net: dst: annotate data-races around dst->output [4 files, +5/-5] b1c6b13f sched/psi: Optimize psi_group_change() cpu_clock() usage [2 files, +68/-59] 103c4e27 net/sched: Restrict conditions for adding duplicating netems to qdisc tree [1 file, +40/-0] 20a1e653 tcp: call tcp_measure_rcv_mss() for ooo packets [1 file, +1/-0] 9d5aecb5 Bluetooth: hci_event: Mask data status from LE ext adv reports [2 files, +7/-2] ee250248 bpf: Disable migration in nf_hook_run_bpf(). [1 file, +1/-1] e1b7932a ipv6: prevent infinite loop in rt6_nlmsg_size() [2 files, +20/-18] 9cb6de8e ipv6: fix possible infinite loop in fib6_info_uses_dev() [1 file, +11/-6] 3bb72c2e ipv6: annotate data-races around rt->fib6_nsiblings [2 files, +16/-9] a2b437a8 media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check [1 file, +4/-4] 33c778ea proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al [4 files, +9/-1] 9b2a3e71 pinmux: fix race causing mux_owner NULL with active mux_usecount [1 file, +9/-11] f56f6054 bpf: Check flow_dissector ctx accesses are aligned [1 file, +3/-0] 4795bcaf bpf: Check netfilter ctx accesses are aligned [1 file, +3/-0] f9bd6925 module: Restore the moduleparam prefix length check [1 file, +2/-3] 15da2369 ucount: fix atomic_long_inc_below() argument type [1 file, +1/-1] dabfa395 f2fs: fix KMSAN uninit-value in extent_info usage [1 file, +1/-1] 3d37cada f2fs: fix to avoid UAF in f2fs_sync_inode_meta() [1 file, +6/-2] 880ef748 f2fs: fix to avoid panic in f2fs_evict_inode [1 file, +13/-0] 1023836d f2fs: vm_unmap_ram() may be called from an invalid context [1 file, +1/-1] f289690f f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode [1 file, +4/-1] 450b2a5c scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume [1 file, +9/-1] 05b450da scsi: sd: Make sd shutdown issue START STOP UNIT appropriately [1 file, +3/-1] 14721603 sched: Add test_and_clear_wake_up_bit() and atomic_dec_and_wake_up() [1 file, +60/-0] 5005d243 pptp: ensure minimal skb length in pptp_xmit() [1 file, +9/-6] ef05007b ipv6: reject malicious packets in ipv6_gso_segment() [2 files, +26/-1] 0d459540 net: drop UFO packets in udp_rcv_segment() [1 file, +18/-6] bd7f84df pptp: fix pptp_xmit() error path [1 file, +4/-3] f07ab7a4 perf/core: Don't leak AUX buffer refcount on allocation failure [1 file, +4/-3] f41e9eba perf/core: Exit early on perf_mmap() fail [1 file, +3/-0] 6757a31a perf/core: Prevent VMA split of buffer mappings [1 file, +10/-0] 88caf46d net/packet: fix a race in packet_set_ring() and packet_notifier() [1 file, +6/-6] 44bd006d vsock: Do not allow binding to VMADDR_PORT_ANY [1 file, +2/-1] 8afa818c sched/core: Remove ifdeffery for saved_state [2 files, +2/-10] e241ca2f freezer,sched: Use saved_state to reduce some spurious wakeups [2 files, +32/-30] 2e629851 freezer,sched: Do not restore saved_state of a thawed task [1 file, +1/-1] 036bdae8 freezer,sched: Clean saved_state when restoring it during thaw [1 file, +1/-0] ae591cf2 sched,freezer: Remove unnecessary warning in __thaw_task [1 file, +3/-12] 3c623658 net: usbnet: Avoid potential RCU stall on LINK_CHANGE event [2 files, +9/-3] fdf6959b net: usbnet: Fix the wrong netif_carrier_on() call [1 file, +3/-3] 575b7162 ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx() [1 file, +7/-0] aada327a usb: gadget : fix use-after-free in composite_dev_cleanup() [1 file, +5/-0] Changes in 6.6.102 ASoC: amd: yc: Add DMI quirk for HP Laptop 17 cp-2033dx ethernet: intel: fix building with large NR_CPUS ASoC: amd: yc: Add DMI entries to support HP 15-fb1xxx ASoC: Intel: fix SND_SOC_SOF dependencies ASoC: amd: yc: add DMI quirk for ASUS M6501RM audit,module: restore audit logging in load failure case fs_context: fix parameter name in infofc() macro fs/ntfs3: cancle set bad inode after removing name fails ublk: use vmalloc for ublk_device's __queues hfsplus: make splice write available again hfs: make splice write available again hfsplus: remove mutex_lock check in hfsplus_free_extents Revert "fs/ntfs3: Replace inode_trylock with inode_lock" gfs2: No more self recovery ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() ASoC: ops: dynamically allocate struct snd_ctl_elem_value ASoC: mediatek: use reserved memory or enable buffer pre-allocation selftests: Fix errno checking in syscall_user_dispatch test soc: qcom: QMI encoding/decoding for big endian arm64: dts: qcom: sdm845: Expand IMEM region arm64: dts: qcom: sc7180: Expand IMEM region arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely ARM: dts: vfxxx: Correctly use two tuples for timer address usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe() usb: misc: apple-mfi-fastcharge: Make power supply names unique spi: stm32: Check for cfg availability in stm32_spi_probe staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() vmci: Prevent the dispatching of uninitialized payloads pps: fix poll support Revert "vmci: Prevent the dispatching of uninitialized payloads" powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() usb: early: xhci-dbc: Fix early_ioremap leak arm: dts: ti: omap: Fixup pinheader typo soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed PM / devfreq: Check governor before using governor->name cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode cpufreq: Initialize cpufreq-based frequency-invariance later cpufreq: Init policy->rwsem before it may be possibly used samples: mei: Fix building on musl libc soc: qcom: pmic_glink: fix OF node leak interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg interconnect: qcom: sc8180x: specify num_nodes staging: nvec: Fix incorrect null termination of battery manufacturer selftests/tracing: Fix false failure of subsystem event test drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed bpf, sockmap: Fix psock incorrectly pointing to sk bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls selftests/bpf: fix signedness bug in redir_partial() net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure caif: reduce stack size, again wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band wifi: rtl818x: Kill URBs before clearing tx status queue wifi: iwlwifi: Fix memory leak in iwl_mvm_init() iwlwifi: Add missing check for alloc_ordered_workqueue wifi: ath11k: clear initialized flag for deinit-ed srng lists tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range net/mlx5: Check device memory pointer before usage net: dst: annotate data-races around dst->input net: dst: annotate data-races around dst->output kselftest/arm64: Fix check for setting new VLs in sve-ptrace drm/msm/dpu: Fill in min_prefill_lines for SC8180X m68k: Don't unregister boot console needlessly drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value sched/psi: Optimize psi_group_change() cpu_clock() usage fbcon: Fix outdated registered_fb reference in comment netfilter: nf_tables: Drop dead code from fill_*_info routines netfilter: nf_tables: adjust lockdep assertions handling arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX um: rtc: Avoid shadowing err in uml_rtc_start() net/sched: Restrict conditions for adding duplicating netems to qdisc tree net_sched: act_ctinfo: use atomic64_t for three counters xen/gntdev: remove struct gntdev_copy_batch from stack tcp: call tcp_measure_rcv_mss() for ooo packets wifi: rtl8xxxu: Fix RX skb size for aggregation disabled mwl8k: Add missing check after DMA map iommu/amd: Fix geometry.aperture_end for V2 tables wifi: mac80211: reject TDLS operations when station is not associated wifi: plfxlc: Fix error handling in usb driver probe wifi: mac80211: Do not schedule stopped TXQs wifi: mac80211: Don't call fq_flow_idx() for management frames wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key() Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" wifi: ath12k: fix endianness handling while accessing wmi service bit wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon() kcsan: test: Initialize dummy variable Bluetooth: hci_event: Mask data status from LE ext adv reports bpf: Disable migration in nf_hook_run_bpf(). tools/rv: Do not skip idle in trace can: peak_usb: fix USB FD devices potential malfunction can: kvaser_pciefd: Store device channel index can: kvaser_usb: Assign netdev.dev_port based on device channel index netfilter: xt_nfacct: don't assume acct name is null-terminated net/mlx5e: Clear Read-Only port buffer size in PBMC before update net/mlx5e: Remove skb secpath if xfrm state is not found selftests: rtnetlink.sh: remove esp4_offload after test vrf: Drop existing dst reference in vrf_ip6_input_dst ipv6: prevent infinite loop in rt6_nlmsg_size() ipv6: fix possible infinite loop in fib6_info_uses_dev() ipv6: annotate data-races around rt->fib6_nsiblings bpf/preload: Don't select USERMODE_DRIVER PCI: rockchip-host: Fix "Unexpected Completion" log message crypto: sun8i-ce - fix nents passed to dma_unmap_sg() crypto: qat - use unmanaged allocation for dc_data crypto: marvell/cesa - Fix engine load inaccuracy mtd: fix possible integer overflow in erase_xfer() clk: davinci: Add NULL check in davinci_lpsc_clk_register() media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check clk: xilinx: vcu: unregister pll_post only if registered correctly power: supply: cpcap-charger: Fix null check for power_supply_get_by_name power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set crypto: arm/aes-neonbs - work around gcc-15 warning PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails pinctrl: sunxi: Fix memory leak on krealloc failure fanotify: sanitize handle_type values when reporting fid clk: clk-axi-clkgen: fix fpfd_max frequency for zynq Fix dma_unmap_sg() nents value perf tools: Fix use-after-free in help_unknown_cmd() perf dso: Add missed dso__put to dso__load_kcore perf sched: Free thread->priv using priv_destructor perf sched: Fix memory leaks for evsel->priv in timehist perf sched: Fix memory leaks in 'perf sched latency' crypto: inside-secure - Fix `dma_unmap_sg()` nents value crypto: ccp - Fix crash when rebind ccp device for ccp.ko RDMA/hns: Fix -Wframe-larger-than issue kernel: trace: preemptirq_delay_test: use offstack cpu mask proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al pinmux: fix race causing mux_owner NULL with active mux_usecount perf tests bp_account: Fix leaked file descriptor clk: sunxi-ng: v3s: Fix de clock definition scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value scsi: elx: efct: Fix dma_unmap_sg() nents value scsi: mvsas: Fix dma_unmap_sg() nents value scsi: isci: Fix dma_unmap_sg() nents value watchdog: ziirave_wdt: check record length in ziirave_firm_verify() hwrng: mtk - handle devm_pm_runtime_enable errors crypto: keembay - Fix dma_unmap_sg() nents value crypto: img-hash - Fix dma_unmap_sg() nents value soundwire: stream: restore params when prepare ports fail PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute fs/orangefs: Allow 2 more characters in do_c_string() dmaengine: mv_xor: Fix missing check after DMA map and missing unmap dmaengine: nbpfaxi: Add missing check after DMA map ASoC: fsl_xcvr: get channel status data when PHY is not exists sh: Do not use hyphen in exported variable name perf tools: Remove libtraceevent in .gitignore crypto: qat - fix DMA direction for compression on GEN2 devices crypto: qat - fix seq_file position update in adf_ring_next() fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref jfs: fix metapage reference count leak in dbAllocCtl mtd: rawnand: atmel: Fix dma_mapping_error() address mtd: rawnand: rockchip: Add missing check after DMA map mtd: rawnand: atmel: set pmecc data setup time vhost-scsi: Fix log flooding with target does not exist errors bpf: Check flow_dissector ctx accesses are aligned bpf: Check netfilter ctx accesses are aligned apparmor: ensure WB_HISTORY_SIZE value is a power of 2 apparmor: fix loop detection used in conflicting attachment resolution module: Restore the moduleparam prefix length check ucount: fix atomic_long_inc_below() argument type rtc: ds1307: fix incorrect maximum clock rate handling rtc: hym8563: fix incorrect maximum clock rate handling rtc: nct3018y: fix incorrect maximum clock rate handling rtc: pcf85063: fix incorrect maximum clock rate handling rtc: pcf8563: fix incorrect maximum clock rate handling rtc: rv3028: fix incorrect maximum clock rate handling f2fs: fix KMSAN uninit-value in extent_info usage f2fs: doc: fix wrong quota mount option description f2fs: fix to avoid UAF in f2fs_sync_inode_meta() f2fs: fix to avoid panic in f2fs_evict_inode f2fs: fix to avoid out-of-boundary access in devs.path f2fs: vm_unmap_ram() may be called from an invalid context f2fs: fix to update upper_p in __get_secs_required() correctly f2fs: fix to calculate dirty data during has_not_enough_free_secs() f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode vfio: Fix unbalanced vfio_df_close call in no-iommu mode vfio: Prevent open_count decrement to negative vfio/pds: Fix missing detach_ioas op vfio/pci: Separate SR-IOV VF dev_set scsi: mpt3sas: Fix a fw_event memory leak scsi: Revert "scsi: iscsi: Fix HW conn removal use after free" scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume scsi: sd: Make sd shutdown issue START STOP UNIT appropriately kconfig: qconf: fix ConfigList::updateListAllforAll() sched/psi: Fix psi_seq initialization PCI: pnv_php: Clean up allocated IRQs on unplug PCI: pnv_php: Work around switches with broken presence detection powerpc/eeh: Export eeh_unfreeze_pe() powerpc/eeh: Make EEH driver device hotplug safe PCI: pnv_php: Fix surprise plug detection and recovery pNFS/flexfiles: don't attempt pnfs on fatal DS errors sched: Add test_and_clear_wake_up_bit() and atomic_dec_and_wake_up() NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate() NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() NFSv4.2: another fix for listxattr NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY md/md-cluster: handle REMOVE message earlier netpoll: prevent hanging NAPI when netcons gets enabled phy: mscc: Fix parsing of unicast frames net: ipa: add IPA v5.1 and v5.5 to ipa_version_string() pptp: ensure minimal skb length in pptp_xmit() netlink: specs: ethtool: fix module EEPROM input/output arguments net/mlx5: Correctly set gso_segs when LRO is used ipv6: reject malicious packets in ipv6_gso_segment() net: drop UFO packets in udp_rcv_segment() net/sched: taprio: enforce minimum value for picos_per_byte sunrpc: fix client side handling of tls alerts benet: fix BUG when creating VFs net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing irqchip: Build IMX_MU_MSI only on ARM ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out() smb: server: remove separate empty_recvmsg_queue smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection smb: server: let recv_done() avoid touching data_transfer after cleanup/move smb: client: Use min() macro smb: client: Correct typos in multiple comments across various files smb: smbdirect: add smbdirect_socket.h smb: client: make use of common smbdirect_socket smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already smb: client: let recv_done() cleanup before notifying the callers. pptp: fix pptp_xmit() error path smb: client: return an error if rdma_connect does not return within 5 seconds sunrpc: fix handling of server side tls alerts perf/core: Don't leak AUX buffer refcount on allocation failure perf/core: Exit early on perf_mmap() fail perf/core: Prevent VMA split of buffer mappings selftests/perf_events: Add a mmap() correctness test net/packet: fix a race in packet_set_ring() and packet_notifier() vsock: Do not allow binding to VMADDR_PORT_ANY ksmbd: fix null pointer dereference error in generate_encryptionkey ksmbd: fix Preauh_HashValue race condition ksmbd: fix corrupted mtime and ctime in smb2_open ksmbd: limit repeated connections from clients with the same IP smb: server: Fix extension string in ksmbd_extract_shortname() USB: serial: option: add Foxconn T99W709 i2c: stm32f7: Use devm_clk_get_enabled() i2c: stm32f7: use dev_err_probe upon calls of devm_request_irq i2c: stm32f7: perform most of irq job in threaded handler i2c: stm32f7: simplify status messages in case of errors i2c: stm32f7: unmap DMA mapped buffer sched/core: Remove ifdeffery for saved_state freezer,sched: Use saved_state to reduce some spurious wakeups freezer,sched: Do not restore saved_state of a thawed task freezer,sched: Clean saved_state when restoring it during thaw sched,freezer: Remove unnecessary warning in __thaw_task Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano net: usbnet: Avoid potential RCU stall on LINK_CHANGE event net: usbnet: Fix the wrong netif_carrier_on() call x86/sev: Evict cache lines during SNP memory validation ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe() ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx() x86/fpu: Delay instruction pointer fixup until after warning MIPS: mm: tlb-r4k: Uniquify TLB entries on init mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery usb: gadget : fix use-after-free in composite_dev_cleanup() Linux 6.6.102 Change-Id: I20974e10a42842997e38139e0f11762bf20f4df0 Signed-off-by:Greg Kroah-Hartman <gregkh@google.com>
Loading