Commit d9303523 authored by Greg Kroah-Hartman's avatar Greg Kroah-Hartman
Browse files

Merge 6.6.54 into android15-6.6-lts



Changes in 6.6.54
	EDAC/synopsys: Fix ECC status and IRQ control race condition
	EDAC/synopsys: Fix error injection on Zynq UltraScale+
	wifi: rtw88: always wait for both firmware loading attempts
	crypto: xor - fix template benchmarking
	ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
	wifi: brcmfmac: export firmware interface functions
	wifi: brcmfmac: introducing fwil query functions
	wifi: ath9k: Remove error checks when creating debugfs entries
	wifi: ath12k: fix BSS chan info request WMI command
	wifi: ath12k: match WMI BSS chan info structure with firmware definition
	wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he()
	net: stmmac: dwmac-loongson: Init ref and PTP clocks rate
	arm64: signal: Fix some under-bracketed UAPI macros
	wifi: rtw88: remove CPT execution branch never used
	RISC-V: KVM: Fix sbiret init before forwarding to userspace
	RISC-V: KVM: Allow legacy PMU access from guest
	RISC-V: KVM: Fix to allow hpmcounter31 from the guest
	mount: handle OOM on mnt_warn_timestamp_expiry
	ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
	powercap: intel_rapl: Fix off by one in get_rpi()
	kselftest/arm64: signal: fix/refactor SVE vector length enumeration
	drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
	wifi: mac80211: don't use rate mask for offchannel TX either
	wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
	wifi: iwlwifi: config: label 'gl' devices as discrete
	wifi: iwlwifi: mvm: increase the time between ranging measurements
	padata: Honor the caller's alignment in case of chunk_size 0
	drivers/perf: hisi_pcie: Record hardware counts correctly
	drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
	kselftest/arm64: Actually test SME vector length changes via sigreturn
	can: j1939: use correct function name in comment
	ACPI: CPPC: Fix MASK_VAL() usage
	netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
	netfilter: nf_tables: reject element expiration with no timeout
	netfilter: nf_tables: reject expiration higher than timeout
	netfilter: nf_tables: remove annotation to access set timeout while holding lock
	perf/arm-cmn: Rework DTC counters (again)
	perf/arm-cmn: Improve debugfs pretty-printing for large configs
	perf/arm-cmn: Refactor node ID handling. Again.
	perf/arm-cmn: Fix CCLA register offset
	perf/arm-cmn: Ensure dtm_idx is big enough
	cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
	wifi: mt76: mt7915: fix oops on non-dbdc mt7986
	wifi: mt76: mt7996: use hweight16 to get correct tx antenna
	wifi: mt76: mt7996: fix traffic delay when switching back to working channel
	wifi: mt76: mt7996: fix wmm set of station interface to 3
	wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
	wifi: mt76: mt7996: fix EHT beamforming capability check
	x86/sgx: Fix deadlock in SGX NUMA node search
	pm:cpupower: Add missing powercap_set_enabled() stub function
	crypto: hisilicon/hpre - mask cluster timeout error
	crypto: hisilicon/qm - reset device before enabling it
	crypto: hisilicon/qm - inject error before stopping queue
	wifi: mt76: mt7603: fix mixed declarations and code
	wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
	wifi: mt76: mt7915: fix rx filter setting for bfee functionality
	wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
	wifi: mt76: mt7996: fix uninitialized TLV data
	wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
	wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
	wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
	Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
	Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
	sock_map: Add a cond_resched() in sock_hash_free()
	can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
	can: m_can: enable NAPI before enabling interrupts
	can: m_can: m_can_close(): stop clocks after device has been shut down
	Bluetooth: btusb: Fix not handling ZPL/short-transfer
	bareudp: Pull inner IP header in bareudp_udp_encap_recv().
	bareudp: Pull inner IP header on xmit.
	net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
	r8169: disable ALDPS per default for RTL8125
	net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
	net: tipc: avoid possible garbage value
	ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
	ublk: move zone report data out of request pdu
	nbd: fix race between timeout and normal completion
	block, bfq: fix possible UAF for bfqq->bic with merge chain
	block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
	block, bfq: don't break merge chain in bfq_split_bfqq()
	cachefiles: Fix non-taking of sb_writers around set/removexattr
	erofs: fix incorrect symlink detection in fast symlink
	block, bfq: fix uaf for accessing waker_bfqq after splitting
	block, bfq: fix procress reference leakage for bfqq in merge chain
	io_uring/io-wq: do not allow pinning outside of cpuset
	io_uring/io-wq: inherit cpuset of cgroup in io worker
	block: print symbolic error name instead of error code
	block: fix potential invalid pointer dereference in blk_add_partition
	spi: ppc4xx: handle irq_of_parse_and_map() errors
	arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
	arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
	firmware: arm_scmi: Fix double free in OPTEE transport
	spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
	regulator: Return actual error in of_regulator_bulk_get_all()
	arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
	arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
	arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
	ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
	arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
	arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
	arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
	spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
	ARM: dts: microchip: sama7g5: Fix RTT clock
	ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
	ARM: versatile: fix OF node leak in CPUs prepare
	reset: berlin: fix OF node leak in probe() error path
	reset: k210: fix OF node leak in probe() error path
	clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
	arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
	x86/mm: Use IPIs to synchronize LAM enablement
	ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
	ASoC: tas2781: remove unused acpi_subysystem_id
	ASoC: tas2781: Use of_property_read_reg()
	ASoC: tas2781-i2c: Drop weird GPIO code
	ASoC: tas2781-i2c: Get the right GPIO line
	selftests/ftrace: Add required dependency for kprobe tests
	ALSA: hda: cs35l41: fix module autoloading
	m68k: Fix kernel_clone_args.flags in m68k_clone()
	ASoC: loongson: fix error release
	hwmon: (max16065) Fix overflows seen when writing limits
	hwmon: (max16065) Remove use of i2c_match_id()
	hwmon: (max16065) Fix alarm attributes
	mtd: slram: insert break after errors in parsing the map
	hwmon: (ntc_thermistor) fix module autoloading
	power: supply: axp20x_battery: Remove design from min and max voltage
	power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
	fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
	iommu/amd: Do not set the D bit on AMD v2 table entries
	mtd: powernv: Add check devm_kasprintf() returned value
	rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
	mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
	mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
	mtd: rawnand: mtk: Fix init error path
	iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
	iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
	iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
	pmdomain: core: Harden inter-column space in debug summary
	drm/stm: Fix an error handling path in stm_drm_platform_probe()
	drm/stm: ltdc: check memory returned by devm_kzalloc()
	drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
	drm/amdgpu: properly handle vbios fake edid sizing
	drm/radeon: properly handle vbios fake edid sizing
	scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
	scsi: NCR5380: Check for phase match during PDMA fixup
	drm/amd/amdgpu: Properly tune the size of struct
	drm/rockchip: vop: Allow 4096px width scaling
	drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
	drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
	drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
	drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
	scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
	jfs: fix out-of-bounds in dbNextAG() and diAlloc()
	drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
	drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
	powerpc/8xx: Fix initial memory mapping
	powerpc/8xx: Fix kernel vs user address comparison
	powerpc/vdso: Inconditionally use CFUNC macro
	drm/msm: Fix incorrect file name output in adreno_request_fw()
	drm/msm/a5xx: disable preemption in submits by default
	drm/msm/a5xx: properly clear preemption records on resume
	drm/msm/a5xx: fix races in preemption evaluation stage
	drm/msm/a5xx: workaround early ring-buffer emptiness check
	ipmi: docs: don't advertise deprecated sysfs entries
	drm/msm/dsi: correct programming sequence for SM8350 / SM8450
	drm/msm: fix %s null argument error
	drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
	xen: use correct end address of kernel for conflict checking
	HID: wacom: Support sequence numbers smaller than 16-bit
	HID: wacom: Do not warn about dropped packets for first packet
	ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
	minmax: avoid overly complex min()/max() macro arguments in xen
	xen: introduce generic helper checking for memory map conflicts
	xen: move max_pfn in xen_memory_setup() out of function scope
	xen: add capability to remap non-RAM pages to different PFNs
	xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
	xen/swiotlb: add alignment check for dma buffers
	xen/swiotlb: fix allocated size
	tpm: Clean up TPM space after command failure
	sched/fair: Make SCHED_IDLE entity be preempted in strict hierarchy
	selftests/bpf: Workaround strict bpf_lsm return value check.
	selftests/bpf: Fix error linking uprobe_multi on mips
	bpf: Use -Wno-error in certain tests when building with GCC
	bpf: Disable some `attribute ignored' warnings in GCC
	bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
	selftests/bpf: Add CFLAGS per source file and runner
	selftests/bpf: Fix wrong binary in Makefile log output
	tools/runqslower: Fix LDFLAGS and add LDLIBS support
	selftests/bpf: Use pid_t consistently in test_progs.c
	selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
	selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
	selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size
	selftests/bpf: Drop unneeded error.h includes
	selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
	selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
	selftests/bpf: Fix missing BUILD_BUG_ON() declaration
	selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
	selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
	selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
	selftests/bpf: Fix include of <sys/fcntl.h>
	selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
	selftests/bpf: Fix compiling kfree_skb.c with musl-libc
	selftests/bpf: Fix compiling flow_dissector.c with musl-libc
	selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
	selftests/bpf: Fix compiling core_reloc.c with musl-libc
	selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
	selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
	selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
	selftests/bpf: Fix arg parsing in veristat, test_progs
	selftests/bpf: Fix error compiling test_lru_map.c
	selftests/bpf: Fix C++ compile error from missing _Bool type
	selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
	selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
	selftests/bpf: Fix compile if backtrace support missing in libc
	selftests/bpf: Fix error compiling tc_redirect.c with musl libc
	samples/bpf: Fix compilation errors with cf-protection option
	bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
	xz: cleanup CRC32 edits from 2018
	kthread: fix task state in kthread worker if being frozen
	ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
	smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
	ext4: avoid buffer_head leak in ext4_mark_inode_used()
	ext4: avoid potential buffer_head leak in __ext4_new_inode()
	ext4: avoid negative min_clusters in find_group_orlov()
	ext4: return error on ext4_find_inline_entry
	ext4: avoid OOB when system.data xattr changes underneath the filesystem
	ext4: check stripe size compatibility on remount as well
	sched/numa: Document vma_numab_state fields
	sched/numa: Rename vma_numab_state::access_pids[] => ::pids_active[], ::next_pid_reset => ::pids_active_reset
	sched/numa: Trace decisions related to skipping VMAs
	sched/numa: Move up the access pid reset logic
	sched/numa: Complete scanning of partial VMAs regardless of PID activity
	sched/numa: Complete scanning of inactive VMAs when there is no alternative
	sched/numa: Fix the vma scan starving issue
	nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
	nilfs2: determine empty node blocks as corrupted
	nilfs2: fix potential oob read in nilfs_btree_check_delete()
	bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
	bpf: Fix helper writes to read-only maps
	bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
	bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
	perf mem: Free the allocated sort string, fixing a leak
	perf inject: Fix leader sampling inserting additional samples
	perf annotate: Split branch stack cycles info from 'struct annotation'
	perf annotate: Move some source code related fields from 'struct annotation' to 'struct annotated_source'
	perf ui/browser/annotate: Use global annotation_options
	perf report: Fix --total-cycles --stdio output error
	perf sched timehist: Fix missing free of session in perf_sched__timehist()
	perf stat: Display iostat headers correctly
	perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time
	perf time-utils: Fix 32-bit nsec parsing
	clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
	clk: imx: imx6ul: fix default parent for enet*_ref_sel
	clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() after error detection
	clk: imx: composite-8m: Enable gate clk with mcore_booted
	clk: imx: composite-93: keep root clock on when mcore enabled
	clk: imx: composite-7ulp: Check the PCC present bit
	clk: imx: fracn-gppll: fix fractional part of PLL getting lost
	clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
	clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
	clk: imx: imx8qxp: Parent should be initialized earlier than the clock
	remoteproc: imx_rproc: Correct ddr alias for i.MX8M
	remoteproc: imx_rproc: Initialize workqueue earlier
	clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
	clk: qcom: dispcc-sm8550: fix several supposed typos
	clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
	clk: qcom: dispcc-sm8650: Update the GDSC flags
	clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
	leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
	pinctrl: ti: ti-iodelay: Convert to platform remove callback returning void
	pinctrl: Use device_get_match_data()
	pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
	pinctrl: ti: ti-iodelay: Fix some error handling paths
	Input: ilitek_ts_i2c - avoid wrong input subsystem sync
	Input: ilitek_ts_i2c - add report id message validation
	drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
	drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
	PCI: Wait for Link before restoring Downstream Buses
	firewire: core: correct range of block for case of switch statement
	PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
	clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
	clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
	leds: leds-pca995x: Add support for NXP PCA9956B
	leds: pca995x: Use device_for_each_child_node() to access device child nodes
	leds: pca995x: Fix device child node usage in pca995x_probe()
	x86/PCI: Check pcie_find_root_port() return for NULL
	nvdimm: Fix devs leaks in scan_labels()
	PCI: xilinx-nwl: Fix register misspelling
	PCI: xilinx-nwl: Clean up clock on probe failure/removal
	media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
	RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
	pinctrl: single: fix missing error code in pcs_probe()
	clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
	media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
	media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
	media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
	RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
	RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
	clk: ti: dra7-atl: Fix leak of of_nodes
	clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
	clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
	nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
	nfsd: fix refcount leak when file is unhashed after being found
	pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
	IB/core: Fix ib_cache_setup_one error flow cleanup
	PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
	RDMA/erdma: Return QP state in erdma_query_qp
	RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
	watchdog: imx_sc_wdt: Don't disable WDT in suspend
	RDMA/hns: Don't modify rq next block addr in HIP09 QPC
	RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
	RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
	RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
	RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
	RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
	RDMA/hns: Optimize hem allocation performance
	RDMA/hns: Fix restricted __le16 degrades to integer issue
	RDMA/mlx5: Obtain upper net device only when needed
	riscv: Fix fp alignment bug in perf_callchain_user()
	RDMA/cxgb4: Added NULL check for lookup_atid
	RDMA/irdma: fix error message in irdma_modify_qp_roce()
	ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
	ntb_perf: Fix printk format
	ntb: Force physically contiguous allocation of rx ring buffers
	nfsd: call cache_put if xdr_reserve_space returns NULL
	nfsd: return -EINVAL when namelen is 0
	crypto: caam - Pad SG length when allocating hash edesc
	crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
	f2fs: atomic: fix to avoid racing w/ GC
	f2fs: reduce expensive checkpoint trigger frequency
	f2fs: fix to avoid racing in between read and OPU dio write
	f2fs: Create COW inode from parent dentry for atomic write
	f2fs: fix to wait page writeback before setting gcing flag
	f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
	f2fs: support .shutdown in f2fs_sops
	f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
	f2fs: compress: do sanity check on cluster when CONFIG_F2FS_CHECK_FS is on
	f2fs: compress: don't redirty sparse cluster during {,de}compress
	f2fs: prevent atomic file from being dirtied before commit
	f2fs: clean up w/ dotdot_name
	f2fs: get rid of online repaire on corrupted directory
	f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
	spi: atmel-quadspi: Undo runtime PM changes at driver exit time
	spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
	lib/sbitmap: define swap_lock as raw_spinlock_t
	spi: atmel-quadspi: Avoid overwriting delay register settings
	nvme-multipath: system fails to create generic nvme device
	iio: adc: ad7606: fix oversampling gpio array
	iio: adc: ad7606: fix standby gpio state to match the documentation
	driver core: Fix error handling in driver API device_rename()
	ABI: testing: fix admv8818 attr description
	iio: chemical: bme680: Fix read/write ops to device by adding mutexes
	iio: magnetometer: ak8975: Convert enum->pointer for data in the match tables
	iio: magnetometer: ak8975: drop incorrect AK09116 compatible
	dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
	driver core: Fix a potential null-ptr-deref in module_add_driver()
	serial: 8250: omap: Cleanup on error in request_irq
	coresight: tmc: sg: Do not leak sg_table
	interconnect: icc-clk: Add missed num_nodes initialization
	cxl/pci: Fix to record only non-zero ranges
	vhost_vdpa: assign irq bypass producer token correctly
	ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
	Revert "dm: requeue IO if mapping table not yet available"
	net: xilinx: axienet: Schedule NAPI in two steps
	net: xilinx: axienet: Fix packet counting
	netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
	net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
	net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
	tcp: check skb is non-NULL in tcp_rto_delta_us()
	net: qrtr: Update packets cloning when broadcasting
	bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
	virtio_net: Fix mismatched buf address when unmapping for small packets
	net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
	netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
	netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
	netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
	io_uring/sqpoll: do not allow pinning outside of cpuset
	io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
	mm: call the security_mmap_file() LSM hook in remap_file_pages()
	drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
	drm/vmwgfx: Prevent unmapping active read buffers
	Revert "net: libwx: fix alloc msix vectors failed"
	xen: move checks for e820 conflicts further up
	xen: allow mapping ACPI data using a different physical address
	io_uring/sqpoll: retain test for whether the CPU is valid
	io_uring/sqpoll: do not put cpumask on stack
	Remove *.orig pattern from .gitignore
	PCI: Revert to the original speed after PCIe failed link retraining
	PCI: Clear the LBMS bit after a link retrain
	PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
	PCI: imx6: Fix missing call to phy_power_off() in error handling
	PCI: Correct error reporting with PCIe failed link retraining
	PCI: Use an error code with PCIe failed link retraining
	PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
	Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
	ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
	soc: fsl: cpm1: tsa: Fix tsa_write8()
	soc: versatile: integrator: fix OF node leak in probe() error path
	Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
	iommufd: Protect against overflow of ALIGN() during iova allocation
	Input: adp5588-keys - fix check on return code
	Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
	Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
	Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
	KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
	KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
	KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
	KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
	drm/amd/display: Skip Recompute DSC Params if no Stream on Link
	drm/amd/display: Add HDMI DSC native YCbCr422 support
	drm/amd/display: Round calculated vtotal
	drm/amd/display: Validate backlight caps are sane
	KEYS: prevent NULL pointer dereference in find_asymmetric_key()
	powerpc/atomic: Use YZ constraints for DS-form instructions
	fs: Create a generic is_dot_dotdot() utility
	ksmbd: make __dir_empty() compatible with POSIX
	ksmbd: allow write with FILE_APPEND_DATA
	ksmbd: handle caseless file creation
	ata: libata-scsi: Fix ata_msense_control() CDL page reporting
	scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
	scsi: ufs: qcom: Update MODE_MAX cfg_bw value
	scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
	scsi: mac_scsi: Refactor polling loop
	scsi: mac_scsi: Disallow bus errors during PDMA send
	can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
	wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
	usbnet: fix cyclical race on disconnect with work queue
	arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
	USB: appledisplay: close race between probe and completion handler
	USB: misc: cypress_cy7c63: check for short transfer
	USB: class: CDC-ACM: fix race between get_serial and set_serial
	usb: cdnsp: Fix incorrect usb_request status
	usb: dwc2: drd: fix clock gating on USB role switch
	bus: integrator-lm: fix OF node leak in probe()
	bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
	firmware_loader: Block path traversal
	tty: rp2: Fix reset with non forgiving PCIe host bridges
	xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
	serial: qcom-geni: fix fifo polling timeout
	crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
	drbd: Fix atomicity violation in drbd_uuid_set_bm()
	drbd: Add NULL check for net_conf to prevent dereference in state validation
	ACPI: sysfs: validate return type of _STR method
	ACPI: resource: Add another DMI match for the TongFang GMxXGxx
	efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
	perf/x86/intel/pt: Fix sampling synchronization
	wifi: mt76: mt7921: Check devm_kasprintf() returned value
	wifi: mt76: mt7915: check devm_kasprintf() returned value
	wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
	wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
	wifi: rtw88: 8822c: Fix reported RX band width
	wifi: mt76: mt7615: check devm_kasprintf() returned value
	debugobjects: Fix conditions in fill_pool()
	btrfs: tree-checker: fix the wrong output of data backref objectid
	btrfs: always update fstrim_range on failure in FITRIM ioctl
	f2fs: fix several potential integer overflows in file offsets
	f2fs: prevent possible int overflow in dir_block_index()
	f2fs: avoid potential int overflow in sanity_check_area_boundary()
	f2fs: Require FMODE_WRITE for atomic write ioctls
	f2fs: fix to check atomic_file in f2fs ioctl interfaces
	hwrng: mtk - Use devm_pm_runtime_enable
	hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
	hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
	arm64: esr: Define ESR_ELx_EC_* constants as UL
	arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a
	arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
	arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
	arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
	vfs: fix race between evice_inodes() and find_inode()&iput()
	fs: Fix file_set_fowner LSM hook inconsistencies
	nfs: fix memory leak in error path of nfs4_do_reclaim
	EDAC/igen6: Fix conversion of system address to physical memory address
	icmp: change the order of rate limits
	cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put
	padata: use integer wrap around to prevent deadlock on seq_nr overflow
	spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
	ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
	soc: versatile: realview: fix memory leak during device remove
	soc: versatile: realview: fix soc_dev leak during device remove
	usb: yurex: Replace snprintf() with the safer scnprintf() variant
	USB: misc: yurex: fix race between read and write
	xhci: Add a quirk for writing ERST in high-low order
	usb: xhci: fix loss of data on Cadence xHC
	pps: remove usage of the deprecated ida_simple_xx() API
	pps: add an error check in parport_attach
	tty: serial: kgdboc: Fix 8250_* kgdb over serial
	serial: don't use uninitialized value in uart_poll_init()
	x86/idtentry: Incorporate definitions/declarations of the FRED entries
	x86/entry: Remove unwanted instrumentation in common_interrupt()
	lib/bitmap: add bitmap_{read,write}()
	btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
	btrfs: reorder btrfs_inode to fill gaps
	btrfs: update comment for struct btrfs_inode::lock
	btrfs: fix race setting file private on concurrent lseek using same fd
	dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
	dt-bindings: spi: nxp-fspi: add imx8ulp support
	thunderbolt: Fix debug log when DisplayPort adapter not available for pairing
	thunderbolt: Use tb_tunnel_dbg() where possible to make logging more consistent
	thunderbolt: Expose tb_tunnel_xxx() log macros to the rest of the driver
	thunderbolt: Create multiple DisplayPort tunnels if there are more DP IN/OUT pairs
	thunderbolt: Use constants for path weight and priority
	thunderbolt: Use weight constants in tb_usb3_consumed_bandwidth()
	thunderbolt: Make is_gen4_link() available to the rest of the driver
	thunderbolt: Change bandwidth reservations to comply USB4 v2
	thunderbolt: Introduce tb_port_path_direction_downstream()
	thunderbolt: Introduce tb_for_each_upstream_port_on_path()
	thunderbolt: Introduce tb_switch_depth()
	thunderbolt: Add support for asymmetric link
	thunderbolt: Configure asymmetric link if needed and bandwidth allows
	thunderbolt: Improve DisplayPort tunnel setup process to be more robust
	mm/filemap: return early if failed to allocate memory for split
	lib/xarray: introduce a new helper xas_get_order
	mm/filemap: optimize filemap folio adding
	bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
	dm-verity: restart or panic on an I/O error
	lockdep: fix deadlock issue between lockdep and rcu
	mm: only enforce minimum stack gap size if it's sensible
	spi: fspi: add support for imx8ulp
	module: Fix KCOV-ignored file name
	mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu read lock
	i2c: aspeed: Update the stop sw state when the bus recovery occurs
	i2c: isch: Add missed 'else'
	Documentation: KVM: fix warning in "make htmldocs"
	bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
	usb: yurex: Fix inconsistent locking bug in yurex_read()
	perf/arm-cmn: Fail DTC counter allocation correctly
	iio: magnetometer: ak8975: Fix 'Unexpected device' error
	wifi: brcmfmac: add linefeed at end of file
	thunderbolt: Send uevent after asymmetric/symmetric switch
	thunderbolt: Fix minimum allocated USB 3.x and PCIe bandwidth
	thunderbolt: Fix NULL pointer dereference in tb_port_update_credits()
	x86/tdx: Fix "in-kernel MMIO" check
	spi: atmel-quadspi: Fix wrong register value written to MR
	Revert: "dm-verity: restart or panic on an I/O error"
	Linux 6.6.54

Commits that affect the gki_defconfig arm64 build:
  32ba3160 arm64: signal: Fix some under-bracketed UAPI macros [1 file, +3 | -3]
  c82ea72d mount: handle OOM on mnt_warn_timestamp_expiry [1 file, +11 | -3]
  ea8d90a5 Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED [3 files, +13 | -10]
  7eebbdde Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL [1 file, +4 | -1]
  80bd490a sock_map: Add a cond_resched() in sock_hash_free() [1 file, +1 | -0]
  c3d941cc can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). [1 file, +3 | -1]
  2b5e904d net: tipc: avoid possible garbage value [1 file, +1 | -1]
  0ceb2f2b ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() [1 file, +1 | -1]
  75a5e590 ublk: move zone report data out of request pdu [1 file, +46 | -16]
  7faed289 block, bfq: fix possible UAF for bfqq->bic with merge chain [1 file, +2 | -1]
  e50c9a35 block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator() [1 file, +6 | -2]
  19f3bec2 block, bfq: don't break merge chain in bfq_split_bfqq() [1 file, +1 | -1]
  0c9b52bf erofs: fix incorrect symlink detection in fast symlink [1 file, +6 | -14]
  0780451f block, bfq: fix uaf for accessing waker_bfqq after splitting [1 file, +28 | -3]
  c3eba0a4 block, bfq: fix procress reference leakage for bfqq in merge chain [1 file, +17 | -20]
  7b3a3558 io_uring/io-wq: do not allow pinning outside of cpuset [1 file, +18 | -5]
  5740c0fa io_uring/io-wq: inherit cpuset of cgroup in io worker [1 file, +1 | -1]
  0d7ddfc8 block: print symbolic error name instead of error code [1 file, +2 | -2]
  80f5bfbb block: fix potential invalid pointer dereference in blk_add_partition [1 file, +5 | -3]
  1ccd886a regulator: Return actual error in of_regulator_bulk_get_all() [1 file, +1 | -1]
  8e6f4aa4 pmdomain: core: Harden inter-column space in debug summary [1 file, +1 | -1]
  85572bf6 HID: wacom: Support sequence numbers smaller than 16-bit [1 file, +7 | -2]
  f7b4ba5f HID: wacom: Do not warn about dropped packets for first packet [2 files, +6 | -2]
  5a4f8de9 sched/fair: Make SCHED_IDLE entity be preempted in strict hierarchy [1 file, +9 | -13]
  2288b54b bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos [1 file, +8 | -0]
  cfd257f5 kthread: fix task state in kthread worker if being frozen [1 file, +9 | -1]
  e4006410 ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard [1 file, +4 | -6]
  7a349fee ext4: avoid buffer_head leak in ext4_mark_inode_used() [1 file, +3 | -2]
  fae0793a ext4: avoid potential buffer_head leak in __ext4_new_inode() [1 file, +4 | -3]
  9f707685 ext4: avoid negative min_clusters in find_group_orlov() [1 file, +2 | -0]
  dd3f90e8 ext4: return error on ext4_find_inline_entry [1 file, +7 | -3]
  2a6579ef ext4: avoid OOB when system.data xattr changes underneath the filesystem [1 file, +21 | -10]
  faeff8b1 ext4: check stripe size compatibility on remount as well [1 file, +22 | -7]
  ba4eb7f2 sched/numa: Document vma_numab_state fields [1 file, +21 | -0]
  707e9a6c sched/numa: Rename vma_numab_state::access_pids[] => ::pids_active[], ::next_pid_reset => ::pids_active_reset [3 files, +11 | -11]
  6654e54a sched/numa: Trace decisions related to skipping VMAs [3 files, +71 | -4]
  7f019776 sched/numa: Move up the access pid reset logic [1 file, +7 | -10]
  cb7846df sched/numa: Complete scanning of partial VMAs regardless of PID activity [3 files, +18 | -4]
  e3a2d3f6 sched/numa: Complete scanning of inactive VMAs when there is no alternative [4 files, +61 | -4]
  66f3fc74 sched/numa: Fix the vma scan starving issue [1 file, +9 | -0]
  81197a9b bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit [1 file, +2 | -2]
  a2c8dc7e bpf: Fix helper writes to read-only maps [6 files, +24 | -45]
  abf7559b bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types [1 file, +11 | -5]
  a634fa8e bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error [3 files, +26 | -21]
  390de4d0 PCI: Wait for Link before restoring Downstream Buses [1 file, +6 | -2]
  18a672c6 nvdimm: Fix devs leaks in scan_labels() [1 file, +17 | -17]
  b6edb3fd pinctrl: single: fix missing error code in pcs_probe() [1 file, +2 | -1]
  95248d74 PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port() [1 file, +2 | -2]
  d889928b f2fs: atomic: fix to avoid racing w/ GC [2 files, +16 | -2]
  67c3c463 f2fs: fix to avoid racing in between read and OPU dio write [1 file, +4 | -0]
  87f9d26f f2fs: Create COW inode from parent dentry for atomic write [1 file, +3 | -9]
  1bb0686a f2fs: fix to wait page writeback before setting gcing flag [1 file, +4 | -0]
  783b6ca3 f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation [1 file, +4 | -0]
  4263b3ef f2fs: compress: do sanity check on cluster when CONFIG_F2FS_CHECK_FS is on [2 files, +35 | -30]
  b6f186bd f2fs: compress: don't redirty sparse cluster during {,de}compress [3 files, +61 | -26]
  66b1b825 f2fs: clean up w/ dotdot_name [1 file, +2 | -3]
  649ec8b3 f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error() [1 file, +6 | -4]
  54fd8725 lib/sbitmap: define swap_lock as raw_spinlock_t [2 files, +3 | -3]
  30b9bf4b nvme-multipath: system fails to create generic nvme device [1 file, +1 | -1]
  dd69fb02 driver core: Fix error handling in driver API device_rename() [1 file, +10 | -5]
  b8e45b91 driver core: Fix a potential null-ptr-deref in module_add_driver() [1 file, +9 | -5]
  9360d077 Revert "dm: requeue IO if mapping table not yet available" [2 files, +11 | -4]
  af4b8a70 netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() [1 file, +2 | -12]
  570f7d8c tcp: check skb is non-NULL in tcp_rto_delta_us() [1 file, +19 | -2]
  b3f7607f netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS [1 file, +2 | -5]
  358124ba io_uring/sqpoll: do not allow pinning outside of cpuset [1 file, +4 | -1]
  4bdf75c2 io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL [1 file, +2 | -2]
  49d3a4ad mm: call the security_mmap_file() LSM hook in remap_file_pages() [1 file, +4 | -0]
  859f62a2 io_uring/sqpoll: retain test for whether the CPU is valid [1 file, +2 | -0]
  01ad0576 io_uring/sqpoll: do not put cpumask on stack [1 file, +10 | -3]
  fb176957 PCI: Revert to the original speed after PCIe failed link retraining [1 file, +10 | -1]
  894f2111 PCI: Clear the LBMS bit after a link retrain [1 file, +9 | -1]
  a200897d PCI: Correct error reporting with PCIe failed link retraining [1 file, +8 | -4]
  3d8573ab PCI: Use an error code with PCIe failed link retraining [3 files, +14 | -14]
  a3765b49 KEYS: prevent NULL pointer dereference in find_asymmetric_key() [1 file, +4 | -3]
  ef836204 fs: Create a generic is_dot_dotdot() utility [5 files, +14 | -32]
  568c7c4c scsi: sd: Fix off-by-one error in sd_read_block_characteristics() [1 file, +1 | -1]
  1e44ee6c usbnet: fix cyclical race on disconnect with work queue [2 files, +43 | -9]
  a0b4cbeb USB: class: CDC-ACM: fix race between get_serial and set_serial [1 file, +2 | -0]
  7420c1bf firmware_loader: Block path traversal [1 file, +30 | -0]
  e29a1f8b xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them. [1 file, +5 | -3]
  633bd1d6 serial: qcom-geni: fix fifo polling timeout [1 file, +17 | -14]
  19fd2f2c efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption [1 file, +1 | -1]
  b18a5c83 f2fs: fix several potential integer overflows in file offsets [2 files, +3 | -3]
  0c598a02 f2fs: prevent possible int overflow in dir_block_index() [1 file, +2 | -1]
  56d86516 f2fs: avoid potential int overflow in sanity_check_area_boundary() [1 file, +2 | -2]
  5e0de753 f2fs: Require FMODE_WRITE for atomic write ioctls [1 file, +9 | -0]
  7cb51731 f2fs: fix to check atomic_file in f2fs ioctl interfaces [1 file, +12 | -1]
  1b4089d5 hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume [1 file, +1 | -0]
  93e1215f arm64: esr: Define ESR_ELx_EC_* constants as UL [1 file, +44 | -44]
  0eed942b vfs: fix race between evice_inodes() and find_inode()&iput() [1 file, +4 | -0]
  4d3d0869 fs: Fix file_set_fowner LSM hook inconsistencies [1 file, +4 | -10]
  662ec522 icmp: change the order of rate limits [3 files, +76 | -57]
  eef5d621 xhci: Add a quirk for writing ERST in high-low order [2 files, +6 | -1]
  88e26a19 tty: serial: kgdboc: Fix 8250_* kgdb over serial [1 file, +2 | -1]
  1d8c1add serial: don't use uninitialized value in uart_poll_init() [1 file, +6 | -7]
  459b724c lib/bitmap: add bitmap_{read,write}() [1 file, +77 | -0]
  ff3c557f mm/filemap: return early if failed to allocate memory for split [1 file, +4 | -1]
  734594d4 lib/xarray: introduce a new helper xas_get_order [3 files, +71 | -18]
  b3c10ac8 bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0 [1 file, +0 | -1]
  bd24f30f dm-verity: restart or panic on an I/O error [1 file, +21 | -2]
  93476056 mm: only enforce minimum stack gap size if it's sensible [1 file, +1 | -1]
  790c630a bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() [1 file, +6 | -3]
  cada2646 Revert: "dm-verity: restart or panic on an I/O error" [1 file, +2 | -21]
  commits=104  lines added=1286  lines removed=641

Change-Id: I4bc58755cc6f17017f20178d9a119864269ea188
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@google.com>
parents 5611cd3d 63a57420
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment