Merge 6.12.36 into android16-6.12-lts
GKI (arm64) relevant 43 out of 213 changes, affecting 47 files +324/-116 8a997e1a mailbox: Not protect module_put with spin_lock_irqsave [1 file, +1/-1] dcd5b321 leds: multicolor: Fix intensity setting while SW blinking [1 file, +2/-1] 3a0f33c4 fuse: fix race between concurrent setattrs from multiple nodes [1 file, +11/-0] 9f0fa018 PCI: dwc: Make link training more robust by setting PORT_LOGIC_LINK_WIDTH to one lane [1 file, +1/-4] 53809d38 usb: Add checks for snprintf() calls in usb_alloc_dev() [1 file, +10/-4] cf69fedb usb: gadget: f_hid: wake up readers on disable/unbind [1 file, +17/-2] 10cc2cfd usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode [1 file, +4/-0] 1ef27374 usb: typec: mux: do not return on EOPNOTSUPP in {mux, switch}_set [1 file, +2/-2] 1818fc36 ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock [1 file, +2/-0] ae2353d8 scsi: ufs: core: Don't perform UFS clkscaling during host async scan [1 file, +3/-0] 04373900 ovl: Check for NULL d_inode() in ovl_dentry_upper() [1 file, +3/-1] 4149f0ee f2fs: don't over-report free space or inodes in statvfs [1 file, +18/-12] 61a9ad7b af_unix: Don't leave consecutive consumed OOB skbs. [1 file, +11/-2] 93abf5e0 fs/proc/task_mmu: fix PAGE_IS_PFNZERO detection for the huge zero folio [1 file, +1/-1] 29d39e0d lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly() [1 file, +8/-1] a4f182ff HID: wacom: fix crash in wacom_aes_battery_handler() [1 file, +1/-0] ce23b73f Bluetooth: hci_core: Fix use-after-free in vhci_flush() [2 files, +32/-4] 0ee87c28 ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() [1 file, +2/-0] b10a7953 attach_recursive_mnt(): do not lock the covering tree when sliding something under it [1 file, +4/-4] 949060a6 af_unix: Don't set -ECONNRESET for consumed OOB skb. [1 file, +12/-6] dbcd5464 vsock/uapi: fix linux/vm_sockets.h userspace compilation errors [1 file, +4/-0] 104048a4 net: selftests: fix TCP packet checksum [1 file, +3/-2] 2b878849 serial: core: restore of_node information in sysfs [1 file, +1/-0] 5a8400eb Bluetooth: L2CAP: Fix L2CAP MTU negotiation [1 file, +8/-1] cf95f842 maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() [1 file, +3/-1] 7b4ac843 mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked" [1 file, +10/-4] c465f523 f2fs: fix to zero post-eof page [1 file, +38/-0] a85999b9 HID: wacom: fix memory leak on kobject creation failure [1 file, +3/-1] 2746d020 HID: wacom: fix memory leak on sysfs attribute creation failure [1 file, +1/-0] 70017f56 HID: wacom: fix kobject reference count leak [1 file, +1/-0] 6a87e794 scsi: ufs: core: Fix clk scaling to be conditional in reset and restore [1 file, +2/-1] 0519b610 media: uvcvideo: Rollback non processed entities on error [1 file, +23/-11] 8b8a366e io_uring: fix potential page leak in io_sqe_buffer_register() [1 file, +5/-4] 53fd75f2 io_uring/rsrc: fix folio unpinning [1 file, +9/-4] 50998b0a io_uring/rsrc: don't rely on user vaddr alignment [2 files, +5/-1] 399214d7 io_uring/net: improve recv bundles [1 file, +18/-0] 0c07f2bf io_uring/net: only retry recv bundle for a full transfer [1 file, +10/-4] 725fcba8 io_uring/net: only consider msg_inq if larger than 1 [1 file, +2/-2] b8be3ae0 io_uring/net: always use current transfer count for buffer put [1 file, +1/-1] c8d152b8 io_uring/net: mark iov as dynamically allocated even for single segments [1 file, +6/-5] 560c3b51 io_uring/kbuf: flag partial buffer mappings [3 files, +17/-8] 1f4b030e mm/vma: reset VMA iterator on commit_merge() OOM failure [1 file, +8/-19] 287b9cec usb: typec: tcpm: PSSourceOffTimer timeout in PR_Swap enters ERROR_RECOVERY [1 file, +1/-2] Changes in 6.12.36 cifs: Correctly set SMB1 SessionKey field in Session Setup Request cifs: Fix cifs_query_path_info() for Windows NT servers cifs: Fix encoding of SMB1 Session Setup NTLMSSP Request in non-UNICODE mode NFSv4: Always set NLINK even if the server doesn't support it NFSv4.2: fix listxattr to return selinux security label NFSv4.2: fix setattr caching of TIME_[MODIFY|ACCESS]_SET when timestamps are delegated mailbox: Not protect module_put with spin_lock_irqsave mfd: max14577: Fix wakeup source leaks on device unbind sunrpc: don't immediately retransmit on seqno miss dm vdo indexer: don't read request structure after enqueuing leds: multicolor: Fix intensity setting while SW blinking fuse: fix race between concurrent setattrs from multiple nodes cxl/region: Add a dev_err() on missing target list entries NFSv4: xattr handlers should check for absent nfs filehandles hwmon: (pmbus/max34440) Fix support for max34451 ksmbd: allow a filename to contain special characters on SMB3.1.1 posix extension ksmbd: provide zero as a unique ID to the Mac client rust: module: place cleanup_module() in .exit.text section rust: arm: fix unknown (to Clang) argument '-mno-fdpic' dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using dmaengine: xilinx_dma: Set dma_device directions PCI: dwc: Make link training more robust by setting PORT_LOGIC_LINK_WIDTH to one lane PCI: apple: Fix missing OF node reference in apple_pcie_setup_port PCI: imx6: Add workaround for errata ERR051624 nvme-tcp: fix I/O stalls on congested sockets nvme-tcp: sanitize request list handling md/md-bitmap: fix dm-raid max_write_behind setting amd/amdkfd: fix a kfd_process ref leak bcache: fix NULL pointer in cache_set_flush() drm/amdgpu: seq64 memory unmap uses uninterruptible lock drm/scheduler: signal scheduled fence when kill job iio: pressure: zpa2326: Use aligned_s64 for the timestamp um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h um: use proper care when taking mmap lock during segfault 8250: microchip: pci1xxxx: Add PCIe Hot reset disable support for Rev C0 and later devices coresight: Only check bottom two claim bits usb: dwc2: also exit clock_gating when stopping udc while suspended iio: adc: ad_sigma_delta: Fix use of uninitialized status_pos misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe() usb: potential integer overflow in usbg_make_tpg() tty: serial: uartlite: register uart driver in init usb: common: usb-conn-gpio: use a unique name for usb connector device usb: Add checks for snprintf() calls in usb_alloc_dev() usb: cdc-wdm: avoid setting WDM_READ for ZLP-s usb: gadget: f_hid: wake up readers on disable/unbind usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode usb: typec: mux: do not return on EOPNOTSUPP in {mux, switch}_set riscv: add a data fence for CMODX in the kernel mode ALSA: hda: Ignore unsol events for cards being shut down ALSA: hda: Add new pci id for AMD GPU display HD audio controller ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock ASoC: rt1320: fix speaker noise when volume bar is 100% ceph: fix possible integer overflow in ceph_zero_objects() scsi: ufs: core: Don't perform UFS clkscaling during host async scan ovl: Check for NULL d_inode() in ovl_dentry_upper() btrfs: handle csum tree error with rescue=ibadroots correctly drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1 Revert "drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1" btrfs: factor out nocow ordered extent and extent map generation into a helper btrfs: use unsigned types for constants defined as bit shifts btrfs: fix qgroup reservation leak on failure to allocate ordered extent fs/jfs: consolidate sanity checking in dbMount jfs: validate AG parameters in dbMount() to prevent crashes ASoC: codec: wcd9335: Convert to GPIO descriptors ASoC: codecs: wcd9335: Fix missing free of regulator supplies f2fs: don't over-report free space or inodes in statvfs PCI: apple: Use helper function for_each_child_of_node_scoped() PCI: apple: Set only available ports up accel/ivpu: Do not fail on cmdq if failed to allocate preemption buffers accel/ivpu: Remove copy engine support accel/ivpu: Make command queue ID allocated on XArray accel/ivpu: Separate DB ID and CMDQ ID allocations from CMDQ allocation accel/ivpu: Add debugfs interface for setting HWS priority bands accel/ivpu: Trigger device recovery on engine reset/resume failure af_unix: Don't leave consecutive consumed OOB skbs. i2c: tiny-usb: disable zero-length read messages i2c: robotfuzz-osif: disable zero-length read messages ata: ahci: Use correct DMI identifier for ASUSPRO-D840SA LPM quirk smb: client: remove \t from TP_printk statements mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write ASoC: amd: yc: Add DMI quirk for Lenovo IdeaPad Slim 5 15 s390/pkey: Prevent overflow in size calculation for memdup_user() fs/proc/task_mmu: fix PAGE_IS_PFNZERO detection for the huge zero folio lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly() Revert "riscv: Define TASK_SIZE_MAX for __access_ok()" Revert "riscv: misaligned: fix sleeping function called during misaligned access handling" drm/xe/display: Add check for alloc_ordered_workqueue() HID: wacom: fix crash in wacom_aes_battery_handler() atm: clip: prevent NULL deref in clip_push() Bluetooth: hci_core: Fix use-after-free in vhci_flush() ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() attach_recursive_mnt(): do not lock the covering tree when sliding something under it libbpf: Fix null pointer dereference in btf_dump__free on allocation failure ethernet: ionic: Fix DMA mapping tests wifi: mac80211: fix beacon interval calculation overflow af_unix: Don't set -ECONNRESET for consumed OOB skb. wifi: mac80211: Add link iteration macro for link data wifi: mac80211: Create separate links for VLAN interfaces wifi: mac80211: finish link init before RCU publish vsock/uapi: fix linux/vm_sockets.h userspace compilation errors bnxt: properly flush XDP redirect lists um: ubd: Add missing error check in start_io_thread() libbpf: Fix possible use-after-free for externs net: enetc: Correct endianness handling in _enetc_rd_reg64 netlink: specs: tc: replace underscores with dashes in names atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR net: selftests: fix TCP packet checksum drm/amdgpu/discovery: optionally use fw based ip discovery drm/amd: Adjust output for discovery error handling drm/i915: fix build error some more drm/bridge: ti-sn65dsi86: make use of debugfs_init callback drm/bridge: ti-sn65dsi86: Add HPD for DisplayPort connector type drm/xe: Process deferred GGTT node removals on device unwind smb: client: fix potential deadlock when reconnecting channels smb: smbdirect: add smbdirect_pdu.h with protocol definitions smb: client: make use of common smbdirect_pdu.h smb: smbdirect: add smbdirect.h with public structures smb: smbdirect: add smbdirect_socket.h smb: client: make use of common smbdirect_socket smb: smbdirect: introduce smbdirect_socket_parameters smb: client: make use of common smbdirect_socket_parameters cifs: Fix the smbd_response slab to allow usercopy cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code EDAC/amd64: Fix size calculation for Non-Power-of-Two DIMMs x86/traps: Initialize DR6 by writing its architectural reset value staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher() dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive serial: core: restore of_node information in sysfs serial: imx: Restore original RXTL for console to fix data loss Bluetooth: L2CAP: Fix L2CAP MTU negotiation dm-raid: fix variable in journal device check btrfs: fix a race between renames and directory logging btrfs: update superblock's device bytes_used when dropping chunk spi: spi-cadence-quadspi: Fix pm runtime unbalance net: libwx: fix the creation of page_pool maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked" f2fs: fix to zero post-eof page HID: lenovo: Restrict F7/9/11 mode to compact keyboards only HID: wacom: fix memory leak on kobject creation failure HID: wacom: fix memory leak on sysfs attribute creation failure HID: wacom: fix kobject reference count leak scsi: megaraid_sas: Fix invalid node index scsi: ufs: core: Fix clk scaling to be conditional in reset and restore drm/ast: Fix comment on modeset lock drm/cirrus-qemu: Fix pitch programming drm/etnaviv: Protect the scheduler's pending list with its lock drm/tegra: Assign plane type before registration drm/tegra: Fix a possible null pointer dereference drm/udl: Unregister device before cleaning up on disconnect drm/msm/gpu: Fix crash when throttling GPU immediately during boot drm/amdkfd: Fix race in GWS queue scheduling drm/bridge: cdns-dsi: Fix the clock variable for mode_valid() drm/bridge: cdns-dsi: Fix phy de-init and flag it so drm/bridge: cdns-dsi: Fix connecting to next bridge drm/bridge: cdns-dsi: Check return value when getting default PHY config drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready drm/amd/display: Add null pointer check for get_first_active_display() drm/amdgpu: amdgpu_vram_mgr_new(): Clamp lpfn to total vram drm/amd/display: Correct non-OLED pre_T11_delay. drm/xe/vm: move rebind_work init earlier drm/xe/sched: stop re-submitting signalled jobs drm/xe/guc_submit: add back fix drm/amd/display: Fix RMCM programming seq errors drm/amdgpu: Add kicker device detection drm/amd/display: Check dce_hwseq before dereferencing it drm/xe: Fix memset on iomem drm/xe: Fix taking invalid lock on wedge drm/xe: Fix early wedge on GuC load failure drm/i915/dsi: Fix off by one in BXT_MIPI_TRANS_VTOTAL drm/amdgpu: Fix SDMA UTC_L1 handling during start/stop sequences drm/amdgpu: switch job hw_fence to amdgpu_fence drm/amd/display: Fix mpv playback corruption on weston media: uvcvideo: Rollback non processed entities on error x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE x86/pkeys: Simplify PKRU update in signal frame net: libwx: fix Tx L4 checksum io_uring: fix potential page leak in io_sqe_buffer_register() io_uring/rsrc: fix folio unpinning io_uring/rsrc: don't rely on user vaddr alignment io_uring/net: improve recv bundles io_uring/net: only retry recv bundle for a full transfer io_uring/net: only consider msg_inq if larger than 1 io_uring/net: always use current transfer count for buffer put io_uring/net: mark iov as dynamically allocated even for single segments io_uring/kbuf: flag partial buffer mappings mm/vma: reset VMA iterator on commit_merge() OOM failure r8169: add support for RTL8125D net: phy: realtek: merge the drivers for internal NBase-T PHY's net: phy: realtek: add RTL8125D-internal PHY btrfs: do proper folio cleanup when cow_file_range() failed iio: dac: ad3552r: changes to use FIELD_PREP iio: dac: ad3552r: extract common code (no changes in behavior intended) iio: dac: ad3552r-common: fix ad3541/2r ranges drm/xe: Carve out wopcm portion from the stolen memory usb: typec: tcpm: PSSourceOffTimer timeout in PR_Swap enters ERROR_RECOVERY drm/msm/dp: account for widebus and yuv420 during mode validation drm/fbdev-dma: Add shadow buffering for deferred I/O btrfs: skip inodes without loaded extent maps when shrinking extent maps btrfs: make the extent map shrinker run asynchronously as a work queue job btrfs: do regular iput instead of delayed iput during extent map shrinking riscv/atomic: Do proper sign extension also for unsigned in arch_cmpxchg arm64: dts: rockchip: Add avdd HDMI supplies to RockPro64 board dtsi ALSA: hda/realtek: Bass speaker fixup for ASUS UM5606KA drm/amdkfd: remove gfx 12 trap handler page size cap drm/amdkfd: Fix instruction hazard in gfx12 trap handler net: stmmac: Fix accessing freed irq affinity_hint spi: fsl-qspi: use devm function instead of driver remove btrfs: zoned: fix extent range end unlock in cow_file_range() btrfs: fix use-after-free on inode when scanning root during em shrinking spi: fsl-qspi: Fix double cleanup in probe error path Linux 6.12.36 Change-Id: Ie7748fa6d766a9cf7800e67297e404cb90bd359c Signed-off-by:Greg Kroah-Hartman <gregkh@google.com>
Loading