Skip to content
Snippets Groups Projects
Select Git revision
0 results
Search by author
  • Any Author
0 authors
  1. Feb 20, 2025
  3. Feb 04, 2025
  5. Jan 29, 2025
  7. Jan 28, 2025
    • Todd Kjos's avatar
      ANDROID: KABI macros to release excess KABI fields for use with backports · 154d9fa3
      Todd Kjos authored 
      
With KMI freeze, we reserve padding in structs to be exclusively used
for LTS updates that would otherwise break the KMI. These fields are
reserved via the ANDROID_KABI_RESERVE() macro that adds a u64 field to
the struct. The ANDROID_KABI_USE() macro is used when the field is
needed for an LTS patch backport.

Since these fields must be reserved at KMI freeze time, we have make
our best guess at what might be needed - and sometimes reserve too many
fields. An example of this is the 8 ANDROID_KABI_RESERVE() fields in
`struct net_device` for android13-5.15. We are now 3 years into the
6 year lifetime for android13-5.15 and none of those 8 padding fields
have been used. At this point it is reasonable to allow 1 or 2 of those
fields to be used for non-LTS backports.

We won't relax the rule that ANDROID_KABI_RESERVE() is exclusively
for LTS backports, Instead we'll introduce a new macro,
ANDROID_KABI_BACKPORT_OK() to release some KABI fields for general use
as the branches age and the use of padding for LTS becomes unlikely.

We release the field for use by replacing the ANDROID_KABI_RESERVE()
with the new ANDROID_KABI_BACKPORT_OK() macro, which has the exact
same implementation, but allows others to use it for backporting
features from upstream.

When an ANDROID_KABI_BACKPORT_OK() field is going to be used, the
ANDROID_KABI_BACKPORT_USE() macro is used to indicate that the field
was used for a feature backport, not an LTS patch.

This patch adds the two new macros:

ANDROID_KABI_BACKPORT_OK() : exactly the same as ANDROID_KABI_RESERVE()
ANDROID_KABI_BACKPORT_USE() ; exacly the same as ANDROID_KABI_USE()

Patches that change an ANDROID_KABI_RESERVE() to ANDROID_KABI_BACKPORT_OK() must
be reviewed and get a CR+1 from gregkh@, joneslee@ or tkjos@ to make
sure it really is acceptable to reduce the padding for LTS merges.

Bug: 392673958
Signed-off-by: default avatarTodd Kjos <tkjos@google.com>
Change-Id: I19b9dfc16d891fb6fe48ec4379c6fa3dcb6adf24
(cherry picked from commit f1954b6e)
      154d9fa3
  9. Jan 27, 2025
    • Chris Wulff's avatar
      UPSTREAM: usb: gadget: u_audio: Check return codes from usb_ep_enable and config_ep_by_speed. · 08fd4e9d
      Chris Wulff authored 
      
These functions can fail if descriptors are malformed, or missing,
for the selected USB speed.

Bug: 254441685
Fixes: eb9fecb9 ("usb: gadget: f_uac2: split out audio core")
Fixes: 24f779da ("usb: gadget: f_uac2/u_audio: add feedback endpoint support")
Cc: stable@vger.kernel.org
Signed-off-by: default avatarChris Wulff <crwulff@gmail.com>
Link: https://lore.kernel.org/r/20240721192314.3532697-2-crwulff@gmail.com


Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 76a7bfc4)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: Id4e0f235ee4153c2400945aff1a42aacbba3bc31
      08fd4e9d
    • Meng Li's avatar
      UPSTREAM: usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock · 887a45b8
      Meng Li authored 
      
When config CONFIG_USB_DWC3_DUAL_ROLE is selected, and trigger system
to enter suspend status with below command:
echo mem > /sys/power/state
There will be a deadlock issue occurring. Detailed invoking path as
below:
dwc3_suspend_common()
    spin_lock_irqsave(&dwc->lock, flags);              <-- 1st
    dwc3_gadget_suspend(dwc);
        dwc3_gadget_soft_disconnect(dwc);
            spin_lock_irqsave(&dwc->lock, flags);      <-- 2nd
This issue is exposed by commit c7ebd814 ("usb: dwc3: gadget: Fix
NULL pointer dereference in dwc3_gadget_suspend") that removes the code
of checking whether dwc->gadget_driver is NULL or not. It causes the
following code is executed and deadlock occurs when trying to get the
spinlock. In fact, the root cause is the commit 5265397f("usb: dwc3:
Remove DWC3 locking during gadget suspend/resume") that forgot to remove
the lock of otg mode. So, remove the redundant lock of otg mode during
gadget suspend/resume.

Bug: 254441685
Fixes: 5265397f ("usb: dwc3: Remove DWC3 locking during gadget suspend/resume")
Cc: Xu Yang <xu.yang_2@nxp.com>
Cc: stable@vger.kernel.org
Signed-off-by: default avatarMeng Li <Meng.Li@windriver.com>
Acked-by: default avatarThinh Nguyen <Thinh.Nguyen@synopsys.com>
Link: https://lore.kernel.org/r/20240618031918.2585799-1-Meng.Li@windriver.com


Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 7838de15)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: If88964a9d84a6517c472616c3dcc04594d7dd43a
      887a45b8
    • Hector Martin's avatar
      UPSTREAM: xhci: Handle TD clearing for multiple streams case · 2b48d051
      Hector Martin authored 
      When multiple streams are in use, multiple TDs might be in flight when
an endpoint is stopped. We need to issue a Set TR Dequeue Pointer for
each, to ensure everything is reset properly and the caches cleared.
Change the logic so that any N>1 TDs found active for different streams
are deferred until after the first one is processed, calling
xhci_invalidate_cancelled_tds() again from xhci_handle_cmd_set_deq() to
queue another command until we are done with all of them. Also change
the error/"should never happen" paths to ensure we at least clear any
affected TDs, even if we can't issue a command to clear the hardware
cache, and complain loudly with an xhci_warn() if this ever happens.

This problem case dates back to commit e9df17eb ("USB: xhci: Correct
assumptions about number of rings per endpoint.") early on in the XHCI
driver's life, when stream support was first added.
It was then identified but not fixed nor made into a warning in commit
674f8438 ("xhci: split handling halted endpoints into two steps"),
which added a FIXME comment for the problem case (without materially
changing the behavior as far as I can tell, though the new logic made
the problem more obvious).

Then later, in commit 94f33914 ("xhci: Fix failure to give back some
cached cancelled URBs."), it was acknowledged again.

[Mathias: commit 94f33914 ("xhci: Fix failure to give back some cached
cancelled URBs.") was a targeted regression fix to the previously mentioned
patch. Users reported issues with usb stuck after unmounting/disconnecting
UAS devices. This rolled back the TD clearing of multiple streams to its
original state.]

Apparently the commit author was aware of the problem (yet still chose
to submit it): It was still mentioned as a FIXME, an xhci_dbg() was
added to log the problem condition, and the remaining issue was mentioned
in the commit description. The choice of making the log type xhci_dbg()
for what is, at this point, a completely unhandled and known broken
condition is puzzling and unfortunate, as it guarantees that no actual
users would see the log in production, thereby making it nigh
undebuggable (indeed, even if you turn on DEBUG, the message doesn't
really hint at there being a problem at all).

It took me *months* of random xHC crashes to finally find a reliable
repro and be able to do a deep dive debug session, which could all have
been avoided had this unhandled, broken condition been actually reported
with a warning, as it should have been as a bug intentionally left in
unfixed (never mind that it shouldn't have been left in at all).

> Another fix to solve clearing the caches of all stream rings with
> cancelled TDs is needed, but not as urgent.

3 years after that statement and 14 years after the original bug was
introduced, I think it's finally time to fix it. And maybe next time
let's not leave bugs unfixed (that are actually worse than the original
bug), and let's actually get people to review kernel commits please.

Fixes xHC crashes and IOMMU faults with UAS devices when handling
errors/faults. Easiest repro is to use `hdparm` to mark an early sector
(e.g. 1024) on a disk as bad, then `cat /dev/sdX > /dev/null` in a loop.
At least in the case of JMicron controllers, the read errors end up
having to cancel two TDs (for two queued requests to different streams)
and the one that didn't get cleared properly ends up faulting the xHC
entirely when it tries to access DMA pages that have since been unmapped,
referred to by the stale TDs. This normally happens quickly (after two
or three loops). After this fix, I left the `cat` in a loop running
overnight and experienced no xHC failures, with all read errors
recovered properly. Repro'd and tested on an Apple M1 Mac Mini
(dwc3 host).

On systems without an IOMMU, this bug would instead silently corrupt
freed memory, making this a security bug (even on systems with IOMMUs
this could silently corrupt memory belonging to other USB devices on the
same controller, so it's still a security bug). Given that the kernel
autoprobes partition tables, I'm pretty sure a malicious USB device
pretending to be a UAS device and reporting an error with the right
timing could deliberately trigger a UAF and write to freed memory, with
no user action.

[Mathias: Commit message and code comment edit, original at:]
https://lore.kernel.org/linux-usb/20240524-xhci-streams-v1-1-6b1f13819bea@marcan.st/



Bug: 254441685
Fixes: e9df17eb ("USB: xhci: Correct assumptions about number of rings per endpoint.")
Fixes: 94f33914 ("xhci: Fix failure to give back some cached cancelled URBs.")
Fixes: 674f8438 ("xhci: split handling halted endpoints into two steps")
Cc: stable@vger.kernel.org
Cc: security@kernel.org
Reviewed-by: default avatarNeal Gompa <neal@gompa.dev>
Signed-off-by: default avatarHector Martin <marcan@marcan.st>
Signed-off-by: default avatarMathias Nyman <mathias.nyman@linux.intel.com>
Link: https://lore.kernel.org/r/20240611120610.3264502-5-mathias.nyman@linux.intel.com


Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 5ceac440)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: Idea7a49f862627d29059e529c5722c69ea028ee4
      2b48d051
    • Marc Zyngier's avatar
      UPSTREAM: KVM: arm64: Fix AArch32 register narrowing on userspace write · 8382bc9b
      Marc Zyngier authored 
      
When userspace writes to one of the core registers, we make
sure to narrow the corresponding GPRs if PSTATE indicates
an AArch32 context.

The code tries to check whether the context is EL0 or EL1 so
that it narrows the correct registers. But it does so by checking
the full PSTATE instead of PSTATE.M.

As a consequence, and if we are restoring an AArch32 EL0 context
in a 64bit guest, and that PSTATE has *any* bit set outside of
PSTATE.M, we narrow *all* registers instead of only the first 15,
destroying the 64bit state.

Obviously, this is not something the guest is likely to enjoy.

Correctly masking PSTATE to only evaluate PSTATE.M fixes it.

Bug: 254441685
Fixes: 90c1f934 ("KVM: arm64: Get rid of the AArch32 register mapping code")
Reported-by: default avatarNina Schoetterl-Glausch <nsg@linux.ibm.com>
Cc: stable@vger.kernel.org
Reviewed-by: default avatarNina Schoetterl-Glausch <nsg@linux.ibm.com>
Acked-by: default avatarOliver Upton <oliver.upton@linux.dev>
Link: https://lore.kernel.org/r/20240524141956.1450304-2-maz@kernel.org


Signed-off-by: default avatarMarc Zyngier <maz@kernel.org>
(cherry picked from commit 947051e3)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: Ia067293b9d6b05ea6e3f9605d12cd6e4fe7f450f
      8382bc9b
    • Chris Wulff's avatar
      UPSTREAM: usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind. · 852ccb6a
      Chris Wulff authored 
      
Hang on to the control IDs instead of pointers since those are correctly
handled with locks.

Bug: 254441685
Fixes: 8fe9a03f ("usb: gadget: u_audio: Rate ctl notifies about current srate (0=stopped)")
Fixes: c565ad07 ("usb: gadget: u_audio: Support multiple sampling rates")
Fixes: 02de698c ("usb: gadget: u_audio: add bi-directional volume and mute support")
Signed-off-by: default avatarChris Wulff <chris.wulff@biamp.com>
Link: https://lore.kernel.org/stable/CO1PR17MB5419C2BF44D400E4E620C1ADE1172%40CO1PR17MB5419.namprd17.prod.outlook.com
Link: https://lore.kernel.org/r/CO1PR17MB5419C2BF44D400E4E620C1ADE1172@CO1PR17MB5419.namprd17.prod.outlook.com


Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 1b739388)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: Ica607c445c2b9c296c9dfdd54d56aef082619df2
      852ccb6a
  11. Jan 25, 2025
    • Greg Kroah-Hartman's avatar
      Merge tag 'android12-5.10.233_r00' into android12-5.10 · c1f6eb35
      Greg Kroah-Hartman authored 
      
This merges the android12-5.10.233_r00 tag into the android12-5.10 branch,
catching it up with the latest LTS releases.

It contains the following commits:

* 5c3dd95c ANDROID: GKI: virtual_device: add blk_mq_quiesce_queue_nowait to the symbol list
* f3d5fcc6 Revert "tracing: Constify string literal data member in struct trace_event_call"
* 44a38c8b Revert "skb_expand_head() adjust skb->truesize incorrectly"
*   e36dd359 Merge 5.10.233 into android12-5.10-lts
|\
| * 14c02f4e Linux 5.10.233
| * d675fefb mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()
| * 17c3f798 drm: adv7511: Drop dsi single lane support
| * 081bdb3a net/sctp: Prevent autoclose integer overflow in sctp_association_init()
| * 5a1dd20a sky2: Add device ID 11ab:4373 for Marvell 88E8075
| * c55d1863 pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
| * 42a6eb4e RDMA/uverbs: Prevent integer overflow issue
| * 50804bd9 modpost: fix the missed iteration for the max bit in do_input()
| * 0cd78baf modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
| * d5a30a61 btrfs: don't set lock_owner when locking extent buffer for reading
| * 51b03b74 btrfs: locking: remove the recursion handling code
| * 20d96aa6 ARC: build: Try to guess GCC variant of cross compiler
| * 58713417 irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
| * af37dc1f net: usb: qmi_wwan: add Telit FE910C04 compositions
| * e529b468 bpf: fix potential error return
| * 6f3ce0ee sound: usb: format: don't warn that raw DSD is unsupported
| * a2718ed1 btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
| * 12a6e304 wifi: mac80211: wake the queues in case of failure in resume
| * 2558d753 tracing: Prevent bad count for tracing_cpumask_write
| * 1bf53a21 kernel: Initialize cpumask before parsing
| * ba5120a2 btrfs: fix use-after-free when COWing tree bock and tracing is enabled
| * bf267f2f btrfs: rename and export __btrfs_cow_block()
| * 1817e3e8 btrfs: locking: remove all the blocking helpers
| * 4da6be8e btrfs: switch extent buffer tree lock to rw_semaphore
| * 42d7147c dmaengine: dw: Select only supported masters for ACPI devices
| * d3017895 ila: serialize calls to nf_register_net_hooks()
| * 0d3fa6c3 af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
| * fa57f07b af_packet: fix vlan_get_tci() vs MSG_PEEK
| * 7eaa71f5 RDMA/rtrs: Ensure 'ib_sge list' is accessible
| * 925f2be4 eth: bcmsysport: fix call balance of priv->clk handling routines
| * 9c76fb57 ALSA: usb-audio: US16x08: Initialize array before use
| * 0f67a980 net: llc: reset skb->transport_header
| * 6a14b460 netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
| * cf6befa7 netrom: check buffer length before accessing it
| * 60e64b62 drm/bridge: adv7511_audio: Update Audio InfoFrame properly
| * bbcbb83a RDMA/bnxt_re: Fix the locking while accessing the QP table
| * 070d214c RDMA/bnxt_re: Fix max_qp_wrs reported
| * cff07807 RDMA/bnxt_re: Fix reporting hw_ver in query_device
| * 5684c11d RDMA/bnxt_re: Add check for path mtu in modify_qp
| * aea89a85 RDMA/mlx5: Enforce same type port association for multiport RoCE
| * af362630 net/mlx5: Make API mlx5_core_is_ecpf accept const pointer
| * 6531f9c7 thunderbolt: Add support for Intel Panther Lake-M/P
| * f8b8c8c8 thunderbolt: Add support for Intel Lunar Lake
| * e7cca350 thunderbolt: Add Intel Barlow Ridge PCI ID
| * a534e5d4 thunderbolt: Add support for Intel Meteor Lake
| * aeb4a702 thunderbolt: Add support for Intel Raptor Lake
| * 21347105 thunderbolt: Add support for Intel Alder Lake
| * 712137b1 selinux: ignore unknown extended permissions
| * 36c569df x86/hyperv: Fix hv tsc page based sched_clock for hibernation
| * c47e0220 ipv6: prevent possible UAF in ip6_xmit()
| * 3cb8e491 skb_expand_head() adjust skb->truesize incorrectly
| * f67138dd nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
| * a1c3a194 btrfs: avoid monopolizing a core when activating a swap file
| * b29c7783 power: supply: gpio-charger: Fix set charge current limits
| * 5c4a141f tracing: Constify string literal data member in struct trace_event_call
| * e3b89e6a arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs
| * de29cb3b arm64: mm: Rename asid2idx() to ctxid2asid()
| * 109f91d8 drm/dp_mst: Fix MST sideband message body length check
| * 221109ba bpf: fix recursive lock when verdict program return SK_PASS
| * 79f87a6e bpf: Check validity of link->type in bpf_link_show_fdinfo()
| * 1504108c ipv6: fix possible UAF in ip6_finish_output2()
| * ee6b1db1 ipv6: use skb_expand_head in ip6_xmit
| * 4132c4ad ipv6: use skb_expand_head in ip6_finish_output2
| * 23f95bbe skbuff: introduce skb_expand_head()
| * 3754c15b MIPS: Probe toolchain support of -msym32
| * 9ca428c6 virtio-blk: don't keep queue frozen during system suspend
| * bbb55d1c scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error
| * f37f301d scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
| * 3cc9e1a5 platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
| * c06a5b7f regmap: Use correct format specifier for logging range errors
| * 1c58d374 ALSA: hda/conexant: fix Z60MR100 startup pop issue
| * f36d024b scsi: megaraid_sas: Fix for a potential deadlock
| * c1d93e71 scsi: qla1280: Fix hw revision numbering for ISP1020/1040
| * 7911ca06 watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04
| * 7fca949e tracing/kprobe: Make trace_kprobe's module callback called after jump_label update
| * 1562871e mtd: rawnand: fix double free in atmel_pmecc_create_user()
| * ed1a8aaa dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
| * e87dbcfd dmaengine: mv_xor: fix child node refcount handling in early exit
| * 619a5aeb phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
| * 8826abb0 phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider
| * 574e5cfa phy: core: Fix that API devm_phy_put() fails to release the phy
| * 9e21f671 phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
| * 722ece95 phy: core: Fix an OF node refcount leakage in _of_phy_get()
| * 36a6523d mtd: diskonchip: Cast an operand to prevent potential overflow
| * 9ad47898 nfsd: restore callback functionality for NFSv4.0
| * d814eeb7 bpf: Check negative offsets in __bpf_skb_min_len()
| * 1b63193b tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress()
| * 4e5aab3e mm/vmstat: fix a W=1 clang compiler warning
| * e1177818 media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
| * 4e2e9ada epoll: Add synchronous wakeup support for ep_poll_callback
| * 6e1e991c ceph: validate snapdirname option length when mounting
| * b7f89856 of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
| * c86a40c2 of: Fix error path in of_parse_phandle_with_args_map()
| * 9416f178 udmabuf: also check for F_SEAL_FUTURE_WRITE
| * 5d4ed713 nilfs2: prevent use of deleted inode
| * 8d42147c of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
| * 64ee07cf NFS/pnfs: Fix a live lock between recalled layouts and layoutget
| * d81f4e73 Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
| * 8b53be08 btrfs: tree-checker: reject inline extent items with 0 ref count
| * 98f31cf9 zram: refuse to use zero sized block device as backing device
| * df56b6f9 sh: clk: Fix clk_enable() to return 0 on NULL clk
| * 6742afdf hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers
| * 525c3d05 USB: serial: option: add Telit FE910C04 rmnet compositions
| * b38b9456 USB: serial: option: add MediaTek T7XX compositions
| * 25a5f804 USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
| * 452c1654 USB: serial: option: add MeiG Smart SLM770A
| * daf09316 USB: serial: option: add TCL IK512 MBIM & ECM
| * 0e8098cc efivarfs: Fix error on non-existent file
| * de4359fa i2c: riic: Always round-up when calculating bus period
| * 8eb181ae chelsio/chtls: prevent potential integer overflow on 32bit
| * ddfb709c mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
| * ad26612c netfilter: ipset: Fix for recursive locking warning
| * a24ce83a net: ethernet: bgmac-platform: fix an OF node reference leak
| * 1942218b net: hinic: Fix cleanup in create_rxqs/txqs()
| * 64f3f738 ionic: use ee->offset when returning sprom data
| * 81bdfcd6 netdevsim: prevent bad user input in nsim_dev_health_break_write()
| * 2fb425f2 netdevsim: switch to memdup_user_nul()
| * 82c7ad9c net/smc: check return value of sock_recvmsg when draining clc data
| * 846bada2 net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
| * e18830b7 net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
| * 7678451d erofs: fix incorrect symlink detection in fast symlink
| * 0ab621fc erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
| * 0f851f8c i2c: pnx: Fix timeout in wait functions
| * e4309629 usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled
| * 4ba1ee91 usb: cdns3: Add quirk flag to enable suspend residency
| * 9339c918 PCI: Add ACS quirk for Broadcom BCM5760X NIC
| * dab416ed ALSA: usb: Fix UBSAN warning in parse_audio_unit()
| * f9869f67 MIPS: Loongson64: DTS: Fix msi node for ls7a
| * 0dde3ae5 PCI: Use preserve_config in place of pci_flags
| * 6c7731ad PCI/AER: Disable AER service on suspend
| * 5e473f46 net: sched: fix ordering of qlen adjustment
* | ce60eb15 Merge 5.10.232 into android12-5.10-lts
|\|
| * abc94754 Linux 5.10.232
| * 20ad30be x86/static-call: fix 32-bit build
| * e7c1fcdd ALSA: usb-audio: Fix a DMA to stack memory bug
| * b751972c x86/xen: remove hypercall page
| * b09001da x86/xen: use new hypercall functions instead of hypercall page
| * 76b42b13 x86/xen: add central hypercall functions
| * 05df6e6c x86/xen: don't do PV iret hypercall through hypercall page
| * bed5b6a6 x86/static-call: provide a way to do very early static-call updates
| * 4099bcd8 objtool/x86: allow syscall instruction
| * e74011db x86: make get_cpu_vendor() accessible from Xen code
| * 1d5354a9 xen/netfront: fix crash when removing device
| * dac3f7ba Revert "clkdev: remove CONFIG_CLKDEV_LOOKUP"
| * 8b7e0d91 Revert "clocksource/drivers:sp804: Make user selectable"
| * 7f4e1fee drm/i915: Fix memory leak by correcting cache object name in error handler
| * 47b341f7 tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe()
| * dadf82c1 bpf: sync_linked_regs() must preserve subreg_def
| * 6fd69b2f blk-iocost: Avoid using clamp() on inuse in __propagate_weights()
| * 32a849c6 ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired
| * 45af429f team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
| * a1a97584 bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
| * 49cb8083 net: bonding, dummy, ifb, team: advertise NETIF_F_GSO_SOFTWARE
| * 216509dd net/sched: netem: account for backlog updates from child qdisc
| * 0fd8c317 qca_spi: Make driver probing reliable
| * ab891aeb qca_spi: Fix clock speed for multiple QCA7000
| * 68e6a5f0 cxgb4: use port number to set mac addr
| * cf604286 ACPI: resource: Fix memory resource type union access
| * 76d856f0 net: lapb: increase LAPB_HEADER_LEN
| * 4d2b56e2 selftests: mlxsw: sharedbuffer: Remove duplicate test cases
| * 93874259 selftests: mlxsw: sharedbuffer: Remove h1 ingress test case
| * a771f349 tipc: fix NULL deref in cleanup_bearer()
| * 784fc670 batman-adv: Do not let TT changes list grows indefinitely
| * 48e63887 batman-adv: Remove uninitialized data in full table TT response
| * 4fb09749 batman-adv: Do not send uninitialized TT changes
| * 616aa5f3 acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
| * 632fb232 exfat: fix potential deadlock on __exfat_get_dentry_set
| * e26fa236 virtio/vsock: Fix accept_queue memory leak
| * 7b2e41b2 bpf, sockmap: Fix update element with same
| * 7ba7e748 xfs: fix scrub tracepoints when inode-rooted btrees are involved
| * 4e33aedc xfs: don't drop errno values when we fail to ficlone the entire range
| * 28b3c03a usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer
| * 922142bc usb: ehci-hcd: fix call balance of clocks handling routines
| * 0f618460 usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature
| * 1e05b5b3 ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys()
| * ff6f8a29 usb: host: max3421-hcd: Correctly abort a USB request.
| * bd92492a tcp: check space before adding MPTCP SYN options
* | 15eb0c59 ANDROID: fix up crc problems 5.10.231
* | 649b793f Revert "xfrm: rename xfrm_state_offload struct to allow reuse"
* | 296cb9ca Revert "xfrm: store and rely on direction to construct offload flags"
* | eca4deab Revert "netdevsim: rely on XFRM state direction instead of flags"
* | 92e4264d Revert "netdevsim: copy addresses for both in and out paths"
* | c45665fc Revert "i3c: fix incorrect address slot lookup on 64-bit"
* | e5ef3ebd Revert "i3c: master: Replace hard code 2 with macro I3C_ADDR_SLOT_STATUS_BITS"
* | 3bfa1c70 Revert "i3c: master: Extend address status bit to 4 and add I3C_ADDR_SLOT_EXT_DESIRED"
* | 7b7cc290 Revert "i3c: master: Fix dynamic address leak when 'assigned-address' is present"
* | 1ee5d6b1 Merge 5.10.231 into android12-5.10-lts
|\|
| * df8d35ef Linux 5.10.231
| * af442dd3 octeontx2-pf: Fix otx2_get_fecparam()
| * ddeef507 octeontx2: Fix condition.
| * bde4e7c1 media: uvcvideo: Require entities to have a non-zero unique ID
| * 45a92cbc ALSA: usb-audio: Fix out of bounds reads when finding clock sources
| * 3fc53e46 scsi: core: Fix scsi_mode_select() buffer length handling
| * a0777b45 scsi: sd: Fix sd_do_mode_sense() buffer length handling
| * 38283b03 PCI: rockchip-ep: Fix address translation unit programming
| * 43c48ad2 Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()"
| * f5e45e94 modpost: Add .irqentry.text to OTHER_SECTIONS
| * 969ee61a ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume"
| * 4fcd903a drm/amd/display: Check BIOS images before it is used
| * 7d5f99db xhci: dbc: Fix STALL transfer event handling
| * 99f0fe6d jffs2: Fix rtime decompressor
| * f6fc251b jffs2: Prevent rtime decompress memory corruption
| * dbedf8dd KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE
| * c329033f KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device
| * f4dbf393 KVM: arm64: vgic-its: Add a data length check in vgic_its_save_*
| * c3cded0f Revert "unicode: Don't special case ignorable code points"
| * 7522e61c btrfs: fix missing snapshot drew unlock when root is dead during swap activation
| * 354f2438 sched/core: Prevent wakeup of ksoftirqd during idle load balance
| * a676dbc8 sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy
| * 4aaaf22a sched/fair: Add NOHZ balancer flag for nohz.next_balance updates
| * f8d61ae4 sched/fair: Trigger the update of blocked load on newly idle cpu
| * 0669c671 sched/fair: Merge for each idle cpu loop of ILB
| * 88136224 sched/fair: Remove unused parameter of update_nohz_stats
| * 1940ddbe sched/fair: Remove update of blocked load from newidle_balance
| * f3794dbf sched/core: Remove the unnecessary need_resched() check in nohz_csd_func()
| * 44624fbc misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle
| * a79a7e3c powerpc/prom_init: Fixup missing powermac #size-cells
| * 5a2eaa3a MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a
| * 19bc36c8 usb: chipidea: udc: handle USB Error Interrupt if IOC not set
| * 5ac1dd51 i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock
| * e5f0e94f PCI: Add ACS quirk for Wangxun FF5xxx NICs
| * 1af3a54d PCI: Add 'reset_subordinate' to reset hierarchy below bridge
| * dff561e4 f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
| * 22169b36 nvdimm: rectify the illogical code within nd_dax_probe()
| * 38953b44 pinctrl: qcom-pmic-gpio: add support for PM8937
| * 5d552000 scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset
| * 910f9d22 scsi: st: Don't modify unknown block number in MTIOCGET
| * ddcfc570 leds: class: Protect brightness_show() with led_cdev->led_access mutex
| * 3dd2c5cb scsi: hisi_sas: Add cond_resched() for no forced preemption model
| * dd72b3ac tracing: Use atomic64_inc_return() in trace_clock_counter()
| * 170b0323 pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU
| * 18347e7e netpoll: Use rcu_access_pointer() in __netpoll_setup
| * 78b13b56 net/neighbor: clear error in case strict check is not set
| * f795bdf9 rocker: fix link status detection in rocker_carrier_init()
| * 042da326 ASoC: hdmi-codec: reorder channel allocation list
| * e07b54b6 Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables
| * 7522d7d7 wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw()
| * 856b24b5 wifi: ipw2x00: libipw_rx_any(): fix bad alignment
| * 13c3a54f drm/amdgpu: set the right AMDGPU sg segment limitation
| * 03c4c3e0 drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov
| * 368a5331 jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
| * 97e69359 jfs: fix array-index-out-of-bounds in jfs_readdir
| * df7c7663 jfs: fix shift-out-of-bounds in dbSplit
| * 8c97a4d5 jfs: array-index-out-of-bounds fix in dtReadFirst
| * 3ccce34a dma-debug: fix a possible deadlock on radix_lock
| * 06414916 drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr
| * d28d2272 wifi: ath5k: add PCI ID for Arcadyan devices
| * 9400aeb5 wifi: ath5k: add PCI ID for SX76X
| * 35360255 net: inet6: do not leave a dangling sk pointer in inet6_create()
| * 2bc34d8c net: inet: do not leave a dangling sk pointer in inet_create()
| * 14959fd7 net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
| * ce39b557 net: af_can: do not leave a dangling sk pointer in can_create()
| * daa13175 Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
| * 1dc1e1db af_packet: avoid erroring out after sock_init_data() in packet_create()
| * 50a90e5a net/sched: cbs: Fix integer overflow in cbs_set_port_rate()
| * a75fe481 net: ethernet: fs_enet: Use %pa to format resource_size_t
| * fbc8d966 net: fec_mpc52xx_phy: Use %pa to format resource_size_t
| * 00c9f6e8 samples/bpf: Fix a resource leak
| * 86b66b80 r8169: don't apply UDP padding quirk on RTL8126A
| * 823f4dff drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check()
| * 418cf1b2 drm/mcde: Enable module autoloading
| * a3c88516 drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model
| * c04d1dc5 drm/vc4: hvs: Set AXI panic modes for the HVS
| * c5623d7f media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108
| * 7850ca9a media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera
| * f4f2ef66 kcsan: Turn report_filterlist_lock into a raw_spinlock
| * 34cd4ec0 kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all()
| * 8f855689 btrfs: avoid unnecessary device path update for the same device
| * 99192c73 s390/cpum_sf: Handle CPU hotplug remove during sampling
| * c2527d07 iommu/arm-smmu: Defer probe of clients after smmu device bound
| * 24328b77 ocfs2: update seq_file index in ocfs2_dlm_seq_next
| * d3aeb50f mmc: core: Further prevent card detect during shutdown
| * af940c0d mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet
| * 287e4952 regmap: detach regmap from dev on regmap_exit
| * 7175728f dma-buf: fix dma_fence_array_signaled v4
| * 70f3de86 bpf: fix OOB devmap writes when deleting elements
| * 336e30f3 bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
| * e3732102 nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
| * df43d8da scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt
| * 12f04fc8 scsi: qla2xxx: Fix use after free on unload
| * c87add0d scsi: qla2xxx: Supported speed displayed incorrectly for VPorts
| * 406e5732 scsi: qla2xxx: Fix NVMe and NPIV connect issue
| * d7fd14dd ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG)
| * a59d39e4 ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8
| * b3ebf8cb ALSA: usb-audio: add mixer mapping for Corsair HS80
| * 1152dd13 arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
| * 4a6f053a tracing: Fix cmp_entries_dup() to respect sort() comparison rules
| * 4cbc202f watchdog: rti: of: honor timeout-sec property
| * 5912a921 HID: wacom: fix when get product name maybe null pointer
| * 43c6d763 bpf: Fix exact match conditions in trie_get_next_key()
| * adb4a970 bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
| * 9c19ea59 ocfs2: free inode when ocfs2_get_init_inode() fails
| * e0c6ce84 spi: mpc52xx: Add cancel_work_sync before module remove
| * dbedc7e1 tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
| * 8cd416aa drm/sti: Add __iomem for mixer_dbg_mxn's parameter
| * 7fd09abc i3c: master: Fix dynamic address leak when 'assigned-address' is present
| * b70ba15c i3c: master: Extend address status bit to 4 and add I3C_ADDR_SLOT_EXT_DESIRED
| * 1c47272e i3c: master: Replace hard code 2 with macro I3C_ADDR_SLOT_STATUS_BITS
| * 3aecd6fd i3c: fix incorrect address slot lookup on 64-bit
| * fbb3aa94 dt-bindings: serial: rs485: Fix rs485-rts-delay property
| * 0da0be3b dt_bindings: rs485: Correct delay values
| * 4733f68e gpio: grgpio: Add NULL check in grgpio_probe
| * c8e3aa36 gpio: grgpio: use a helper variable to store the address of ofdev->dev
| * d9fa09ca geneve: do not assume mac header is set in geneve_xmit_skb()
| * d93efe18 ethtool: Fix wrong mod state in case of verbose and no_mask bitset
| * e2185509 netfilter: nft_set_hash: skip duplicated elements pending gc run
| * 6099b5d3 netfilter: ipset: Hold module reference while requesting a module
| * 98ea587a net: sched: fix erspan_opt settings in cls_flower
| * e0155b1b igb: Fix potential invalid memory access in igb_init_module()
| * 9da327f2 net/qed: allow old cards not supporting "num_images" to work
| * 650ee9a2 tipc: Fix use-after-free of kernel socket in cleanup_bearer().
| * c99507ff dccp: Fix memory leak in dccp_feat_change_recv
| * b90d0613 net/ipv6: release expired exception dst cached in socket
| * b3282c2b can: j1939: j1939_session_new(): fix skb reference counting
| * aa632691 net: hsr: avoid potential out-of-bound access in fill_frame_info()
| * f9653b00 net/sched: tbf: correct backlog statistic for GSO packets
| * 7f5eda0e ptp: Add error handling for adjfine callback in ptp_clock_adjtime
| * ad28612e netfilter: x_tables: fix LED ID check in led_tg_check()
| * 0b2cbed8 ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
| * 273cab97 can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics
| * 265f8341 can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL
| * 601ec000 watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart()
| * 05bed96e iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call
| * 4715e23b drm/etnaviv: flush shader L1 cache after user commandstream
| * c1406d83 btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
| * 2d505a80 nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
| * 7fd29d28 nfsd: make sure exp active before svc_export_show
| * 1f53e840 dm thin: Add missing destroy_work_on_stack()
| * c6ac663c PCI: keystone: Add link up check to ks_pcie_other_map_bus()
| * 093ecc6d i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
| * aa10c746 scsi: ufs: exynos: Fix hibern8 notify callbacks
| * a1f2aff0 util_macros.h: fix/rework find_closest() macros
| * afc1e3c0 ad7780: fix division by zero in ad7780_write_raw()
| * 6fd018aa btrfs: ref-verify: fix use-after-free after invalid ref action
| * 6f3821ac quota: flush quota_release_work upon quota writeback
| * 366e55e9 octeontx2-pf: Fix out-of-bounds read in otx2_get_fecparam()
| * 442dadf3 ASoC: fsl_micfil: fix the naming style for mask definition
| * 971b4893 sh: intc: Fix use-after-free bug in register_intc_controller()
| * 86a1f9fa sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
| * 8c06a00a SUNRPC: Replace internal use of SOCKWQ_ASYNC_NOSPACE
| * a4b153bd sunrpc: remove unnecessary test in rpc_task_set_client()
| * 3ccfa826 SUNRPC: Convert rpc_client refcount to use refcount_t
| * e2730edf SUNRPC: correct error code comment in xs_tcp_setup_socket()
| * f69fb61c nfs: ignore SB_RDONLY when mounting nfs
| * bd4624d7 modpost: remove incorrect code in do_eisa_entry()
| * b0660da6 rtc: ab-eoz9: don't fail temperature reads on undervoltage notification
| * 7f5a2ed5 9p/xen: fix release of IRQ
| * fa365f68 9p/xen: fix init sequence
| * 57ee79e9 block: return unsigned int from bdev_io_min
| * 25ec6cd7 jffs2: fix use of uninitialized variable
| * 8d8b3f5f ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
| * 04c0b0f3 ubi: fastmap: Fix duplicate slab cache names while attaching
| * 36b25baf ubifs: Correct the total block count by deducting journal reservation
| * 0d68e851 rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
| * cd154812 rtc: abx80x: Fix WDT bit position of the status register
| * c48db314 rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq()
| * 5237a297 NFSv4.0: Fix a use-after-free problem in the asynchronous open()
| * 2365f578 um: Always dump trace for specified task in show_stack
| * 634b3c3d um: Fix the return value of elf_core_copy_task_fpregs
| * e6102b72 um: Fix potential integer overflow during physmem setup
| * 52ee4145 rpmsg: glink: Propagate TX failures in intentless mode as well
| * 02999e13 SUNRPC: make sure cache entry active before cache_show
| * 3c5f545c NFSD: Prevent a potential integer overflow
| * a44a4260 lib: string_helpers: silence snprintf() output truncation warning
| * 8ceb21d7 usb: dwc3: gadget: Fix looping of queued SG entries
| * a9834026 usb: dwc3: gadget: Fix checking for number of TRBs left
| * 3591fe07 ALSA: hda/realtek: Apply quirk for Medion E15433
| * 99af54eb ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max
| * 820bc3f2 ALSA: hda/realtek: Set PCBeep to default value for ALC274
| * ee68e7bd ALSA: hda/realtek: Update ALC225 depop procedure
| * 03a46902 media: v4l2-core: v4l2-dv-timings: check cvt/gtf result
| * d7408a05 media: wl128x: Fix atomicity violation in fmc_send_cmd()
| * f74b360a HID: wacom: Interpret tilt data from Intuos Pro BT as signed values
| * 2d2192fd block: fix ordering between checking BLK_MQ_S_STOPPED request adding
| * dad458e7 arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled
| * 77755dc9 sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
| * 35f8f72b um: vector: Do not use drvdata in release
| * 3997d11f serial: 8250: omap: Move pm_runtime_get_sync
| * 6be99d4c um: net: Do not use drvdata in release
| * 509ba874 um: ubd: Do not use drvdata in release
| * 0f6737ca ubi: wl: Put source PEB into correct list if trying locking LEB failed
| * fb6d3c6c platform/chrome: cros_ec_typec: fix missing fwnode reference decrement
| * 11b414ff spi: Fix acpi deferred irq probe
| * 2e151b8c netfilter: ipset: add missing range check in bitmap_ip_uadt
| * fa0e202e Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit"
| * 0ff91b3b serial: sh-sci: Clean sci_ports[0] after at earlycon exit
| * b12869ca Revert "usb: gadget: composite: fix OS descriptors w_value logic"
| * 5be4bc1c driver core: bus: Fix double free in driver API bus_register()
| * e844bcca Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}()
| * a26842e4 exfat: fix uninit-value in __exfat_get_dentry_set
| * 7fc42f24 locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass()
| * 0b962216 tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler
| * f856246f apparmor: test: Fix memory leak for aa_unpack_strdup()
| * b9322408 comedi: Flush partial mappings in error case
| * a4236cc4 fsnotify: fix sending inotify event with unexpected filename
| * da6e6ff1 PCI: Fix use-after-free of slot->bus on hot remove
| * 5442dbd3 KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status
| * 1a89ef73 crypto: x86/aegis128 - access 32-bit arguments as 32-bit
| * e8f72844 perf/x86/intel/pt: Fix buffer full but size is 0 case
| * 626a8b95 ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata()
| * bbf3f1fd jfs: xattr: check invalid xattr size more strictly
| * ea0527d5 ext4: fix FS_IOC_GETFSMAP handling
| * 442c6f05 ext4: supress data-race warnings in ext4_free_inodes_{count,set}()
| * 62dc01c8 ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
| * 03d68e2d soc: qcom: socinfo: fix revision check in qcom_socinfo_probe()
| * 4c9fded4 usb: ehci-spear: fix call balance of sehci clk handling routines
| * 0aa9e30b xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
| * e47f0e95 apparmor: fix 'Do simple duplicate message elimination'
| * f89f677a ALSA: hda/realtek: Update ALC256 depop procedure
| * 6e99925d ALSA: hda/realtek - Add type for ALC287
| * 9f26a607 staging: greybus: uart: clean up TIOCGSERIAL
| * 7bf3e45e misc: apds990x: Fix missing pm_runtime_disable()
| * 8a960584 USB: chaoskey: Fix possible deadlock chaoskey_list_lock
| * bb37389d USB: chaoskey: fail open after removal
| * 2e72f53f usb: yurex: make waiting on yurex_write interruptible
| * 30b9a778 usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read()
| * 653903e3 iio: light: al3010: Fix an error handling path in al3010_probe()
| * 75e6dc33 ipmr: fix tables suspicious RCU usage
| * e5dffbd1 ipmr: convert /proc handlers to rcu_read_lock()
| * a9615376 bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
| * 6b41c562 net: hsr: fix hsr_init_sk() vs network/transport headers.
| * 1564c7ed net: introduce a netdev feature for UDP GRO forwarding
| * 4654bcb6 spi: atmel-quadspi: Fix register name in verbose logging function
| * b58678e3 net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken
| * 3dbdb3f8 marvell: pxa168_eth: fix call balance of pep->clk handling routines
| * 882ea20c net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration
| * b18ab119 tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets
| * 67283759 net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device
| * c399dd6e power: supply: bq27xxx: Fix registers of bq27426
| * c5351bfb power: supply: bq27xxx: Support CHARGE_NOW for bq27z561/bq28z610/bq34z100
| * da4008a2 power: supply: core: Remove might_sleep() from power_supply_put()
| * 70f1bad3 fs_parser: update mount_api doc to match function signature
| * 0918f564 vfio/pci: Properly hide first-in-list PCIe extended capability
| * 145482f4 vdpa/mlx5: Fix suboptimal range on iotlb iteration
| * eb681998 NFSD: Fix nfsd4_shutdown_copy()
| * 9d4f1743 NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir()
| * 752a7581 NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
| * 9df83cc0 remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region
| * b5ba1b37 rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length
| * 295cb252 rpmsg: glink: Fix GLINK command prefix
| * 9761e51e rpmsg: glink: Send READ_NOTIFY command in FIFO full case
| * 3dd661b9 rpmsg: glink: Add TX_DATA_CONT command while sending
| * e72735fc perf trace: Avoid garbage when not printing a syscall's arguments
| * 10eb66d4 perf trace: Do not lose last events in a race
| * 68ccc183 m68k: coldfire/device.c: only build FEC when HW macros are defined
| * 2255a994 m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x
| * 10f14161 perf trace: avoid garbage when not printing a trace event's arguments
| * af87c206 f2fs: check curseg->inited before write_sum_page in change_curseg
| * c6d54485 f2fs: remove the unused flush argument to change_curseg
| * 5bb54d3b f2fs: open code allocate_segment_by_default
| * c6ad7333 f2fs: remove struct segment_allocation default_salloc_ops
| * a7e306f7 f2fs: avoid using native allocate_segment_by_default()
| * 6e5de38f f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block
| * 43b2e068 PCI: cpqphp: Fix PCIBIOS_* return value confusion
| * 1fe390f2 PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads
| * edb4833a perf probe: Correct demangled symbols in C++ program
| * 0b04b48e perf probe: Fix libdw memory leak
| * 26db806f perf cs-etm: Don't flush when packet_queue fills up
| * c751d28b clk: clk-axi-clkgen: make sure to enable the AXI bus clock
| * a68e4f76 clk: axi-clkgen: use devm_platform_ioremap_resource() short-hand
| * 43afa76e dt-bindings: clock: axi-clkgen: include AXI clk
| * fc7ef587 dt-bindings: clock: adi,axi-clkgen: convert old binding to yaml format
| * 29216bb3 fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
| * d161e5ea fbdev/sh7760fb: Alloc DMA memory from hardware device
| * 6f1fabc9 powerpc/kexec: Fix return of uninitialized variable
| * fd57d992 powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static
| * 66b7ddd1 ocfs2: fix uninitialized value in ocfs2_file_read_iter()
| * bd715e19 RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
| * a4d2011c scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
| * a56777a3 scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
| * e3b9ba55 scsi: fusion: Remove unused variable 'rc'
| * ef2c2580 scsi: bfa: Fix use-after-free in bfad_im_module_exit()
| * cc30125e mfd: rt5033: Fix missing regmap_del_irq_chip()
| * 896927b0 RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey
| * 6956c0e7 powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
| * 54cb5fa8 mtd: rawnand: atmel: Fix possible memory leak
| * c912aae5 cpufreq: loongson2: Unregister platform_driver on failure
| * 61d590d7 mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices
| * c472b55c mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device
| * 0b648968 mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
| * 48d3964f mfd: intel_soc_pmic_bxtwc: Use dev_err_probe()
| * 2630b18b mfd: da9052-spi: Change read-mask to write-mask
| * b86340df mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race
| * a85e5215 powerpc/vdso: Flag VDSO64 entry points as functions
| * 62a8d90e trace/trace_event_perf: remove duplicate samples on the first tracepoint event
| * 49e8a0e0 wireguard: selftests: load nf_conntrack if not present
| * 63bc9a42 netpoll: Use rcu_access_pointer() in netpoll_poll_lock
| * fb91ce37 Bluetooth: fix use-after-free in device_for_each_child()
| * 49de4ac8 driver core: Introduce device_find_any_child() helper
| * f2d06d4e ALSA: 6fire: Release resources at card release
| * 4dd821dc ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
| * bf0aa35a ALSA: us122l: Use snd_card_free_when_closed() at disconnection
| * 24fe9f7c ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
| * d5a733ee ALSA: usx2y: Cleanup probe and disconnect callbacks
| * cfb1f6bc ALSA: usx2y: Coding style fixes
| * 9a70db03 ALSA: usx2y: Fix spaces
| * 5674ae44 net: rfkill: gpio: Add check for clk_enable()
| * b751f342 drm/amdkfd: Fix wrong usage of INIT_WORK()
| * 6543a34f selftests: net: really check for bg process completion
| * 1df5d631 bpf, sockmap: Fix sk_msg_reset_curr
| * d26d9776 bpf, sockmap: Several fixes to bpf_msg_pop_data
| * 2b4530ec bpf, sockmap: Several fixes to bpf_msg_push_data
| * 5a0ae8e4 selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap
| * 78eb4af7 selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap
| * 74d2b00f selftests, bpf: Add one test for sockmap with strparser
| * 3e35560e selftests/bpf: Fix SENDPAGE data logic in test_sockmap
| * a9fa0d2c selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap
| * 224b9bc4 netlink: typographical error in nlmsg_type constants definition
| * 59362f51 drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk()
| * 3fd17a47 wifi: wfx: Fix error handling in wfx_core_init()
| * 67d32d63 drm/etnaviv: hold GPU lock across perfmon sampling
| * 02aac657 drm/etnaviv: fix power register offset on GC300
| * 17551e3d drm/etnaviv: dump: fix sparse warnings
| * 04c0cd65 drm/etnaviv: Request pages from DMA32 zone on addressing_limited
| * 54163a35 drm/etnaviv: rework linear window offset calculation
| * e5e10c00 drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq()
| * e44d23fa drm/panfrost: Remove unused id_mask from struct panfrost_model
| * 5ff9de1f octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
| * 2d164860 octeontx2-pf: ethtool fec mode support
| * 8cafe71a octeontx2-af: Add new CGX_CMD to get PHY FEC statistics
| * 9bb71435 octeontx2-af: forward error correction configuration
| * a5f3aeba octeontx2-pf: Calculate LBK link instead of hardcoding
| * 4dce1962 octeontx2-af: Mbox changes for 98xx
| * 50c56b0f drm: fsl-dcu: enable PIXCLK on LS1021A
| * b773f406 drm/fsl-dcu: Convert to Linux IRQ interfaces
| * 5fa329c4 wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
| * 4496d251 selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap
| * addabcb1 selftests/bpf: Fix msg_verify_data in test_sockmap
| * d4f54c60 drm/bridge: tc358767: Fix link properties discovery
| * e4decf4c netdevsim: copy addresses for both in and out paths
| * 7fd24ee9 netdevsim: rely on XFRM state direction instead of flags
| * 76ff31c0 xfrm: store and rely on direction to construct offload flags
| * 837f37f0 xfrm: rename xfrm_state_offload struct to allow reuse
| * bfdad9de bpf: Fix the xdp_adjust_tail sample prog issue
| * 7706afc2 ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode
| * 5e3385bc ASoC: fsl_micfil: fix regmap_write_bits usage
| * b2a72a77 ASoC: fsl_micfil: use GENMASK to define register bit fields
| * 226fc91c ASoC: fsl_micfil: do not define SHIFT/MASK for single bits
| * fa55ed17 ASoC: fsl_micfil: Drop unnecessary register read
| * 78a71b05 dt-bindings: vendor-prefixes: Add NeoFidelity, Inc
| * 54550eeb wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2
| * f3749bc1 wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1
| * 145f3ac8 drm/v3d: Address race-condition in MMU flush
| * c992e517 drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq()
| * 0bde5b6e drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq()
| * d1ae370b wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq()
| * 29ee7d6f wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq()
| * 1d602e4b drm/omap: Fix locking in omap_gem_new_dmabuf()
| * c941af14 wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
| * ba35d3b2 drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused
| * 0c24b82b media: atomisp: Add check for rgby_data memory allocation failure
| * 4478f599 media: atomisp: remove #ifdef HAS_NO_HMEM
| * 380c0e1d firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
| * 02dff60d selftests/resctrl: Protect against array overrun during iMC config parsing
| * 5f0e91a5 regmap: irq: Set lockdep class for hierarchical IRQ domains
| * 409b1e42 pmdomain: ti-sci: Add missing of_node_put() for args.np
| * dd1985f9 ARM: dts: cubieboard4: Fix DCDC5 regulator constraints
| * 9db3ef89 pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle
| * e8174fb1 cgroup/bpf: only cgroup v2 can be attached by bpf programs
| * 067d0c56 Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline"
| * 2295468c arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad
| * 1b07333b arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4
| * 839e76ce tpm: fix signed/unsigned bug when checking event logs
| * dad86eb9 mmc: mmc_spi: drop buggy snprintf()
| * 748557ca soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
| * c9c6a62c soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq()
| * f9dc2ae5 spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq()
| * 85cf7a3c spi: spi-fsl-lpspi: downgrade log level for pio mode
| * ef1db3d1 clocksource/drivers:sp804: Make user selectable
| * d08932bb clkdev: remove CONFIG_CLKDEV_LOOKUP
| * e48e204f kcsan, seqlock: Fix incorrect assumption in read_seqbegin()
| * dc684d96 time: Fix references to _msecs_to_jiffies() handling of values
| * 069601e4 crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()
| * 28f8ffa9 crypto: bcm - add error check in the ahash_hmac_init function
| * dead96e1 crypto: caam - add error check to caam_rsa_set_priv_key_form
| * a5686029 crypto: cavium - Fix the if condition to exit loop after timeout
| * a92ccd36 crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
| * 99ec5eb5 EDAC/fsl_ddr: Fix bad bit shift operations
| * e0269ea7 EDAC/bluefield: Fix potential integer overflow
| * 29551174 firmware: google: Unregister driver_info on failure
| * cc386170 crypto: caam - Fix the pointer passed to caam_qi_shutdown()
| * e8a2b1c1 hfsplus: don't query the device logical block size multiple times
| * 3cab4bbc s390/syscalls: Avoid creation of arch/arch/ directory
| * cf9efea8 acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block()
| * 6c772871 arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG
| * ff01ac3e m68k: mvme147: Reinstate early console
| * f65ca93b m68k: mvme16x: Add and use "mvme16x.h"
| * 21f46b07 m68k: mvme147: Fix SCSI controller IRQ numbers
| * 452f9ddd nvme-pci: fix freeing of the HMB descriptor table
| * d3df9f26 initramfs: avoid filename buffer overrun
| * 17f35a6c mips: asm: fix warning when disabling MIPS_FP_SUPPORT
| * 72d6dd97 x86/xen/pvh: Annotate indirect branch as safe
| * 8ce88918 kselftest/arm64: mte: fix printf type warnings about longs
| * 8025d65d x86/barrier: Do not serialize MSR accesses on AMD
| * 67be3cd9 nvme: fix metadata handling in nvme-passthrough
| * 73b078e3 cifs: Fix buffer overflow when parsing NFS reparse points
| * 36741bfc rcu-tasks: Idle tasks on offline CPUs are in quiescent states
| * e01ff125 ipmr: Fix access to mfc_cache_list without lock held
| * e8529cfd ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry
| * e05e8f54 proc/softirqs: replace seq_printf with seq_put_decimal_ull_width
| * 444c9d41 ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div()
| * ddd61392 ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate()
| * a8ebe0a2 can: j1939: fix error in J1939 documentation.
| * f6b4294a regulator: rk808: Add apply_bit for BUCK3 on RK809
| * b070a9e0 soc: qcom: Add check devm_kasprintf() returned value
| * 6df3ee90 net: usb: qmi_wwan: add Quectel RG650V
| * bc014d8d x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB
| * f61da940 ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13
| * 501ac2d1 selftests/watchdog-test: Fix system accidentally reset after watchdog-test
| * 6b5737b1 mac80211: fix user-power when emulating chanctx
| * 9347d7c5 ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet
| * 43323a4e mm: resolve faulty mmap_region() error path behaviour
| * a32712d5 mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling
| * 7a450540 mm: unconditionally close VMAs on error
| * f68a0236 mm: avoid unsafe VMA hook invocation when error arises on mmap hook
| * 57cc8d25 mm: revert "mm: shmem: fix data-race in shmem_getattr()"
* | d4fc80b9 Merge ed98d260 ("NFSD: Never decrement pending_async_copies on error") into android12-5.10-lts
|\|
| * ed98d260 NFSD: Never decrement pending_async_copies on error
| * 059434d2 NFSD: Initialize struct nfsd4_copy earlier
| * 9e52ff54 NFSD: Limit the number of concurrent async COPY operations
| * 4fcb2545 NFSD: Async COPY result needs to return a write verifier
| * 7f9b91ed NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point
* | cb9e797d Merge 2e7ce4e5 ("media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set") into android12-5.10-lts
|\|
| * 2e7ce4e5 media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
| * c29a44d9 mmc: core: fix return value check in devm_mmc_alloc_host()
| * b22ddca0 drm/bridge: tc358768: Fix DSI command tx
| * 938c1374 Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
| * 0a5014ad nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
| * 344558d8 ocfs2: fix UBSAN warning in ocfs2_verify_volume()
| * b017697a nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
| * d4b42f92 KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN
| * c96f9091 vdpa/mlx5: Fix PA offset with unaligned starting iotlb map
| * 28d4ed71 ocfs2: uncache inode which has failed entering the group
| * 5fe8bcc8 x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y
| * ffad2ac8 net/mlx5e: kTLS, Fix incorrect page refcounting
| * a508c74c net/mlx5: fs, lock FTE when checking if active
| * 6e3f2c51 netlink: terminate outstanding dump on socket close
| * b5214ca7 clk: qcom: gcc-qcs404: fix initial rate of GPLL3
| * 3e7f8456 leds: lp55xx: Remove redundant test for invalid channel number
| * 5dabb7af ftrace: Fix regression with module command in stack_trace_filter
| * 5f86e79c ovl: Filter invalid inodes with missing lookup function
| * 2cc30545 media: uvcvideo: Stop stream during unregister
| * 74a65313 media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
| * da56bb85 media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate()
| * 580d1e5c media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled
| * 5a53f97c media: ts2020: fix null-ptr-deref in ts2020_probe()
| * 5c9ab34c media: i2c: tc358743: Fix crash in the probe error path when using polling
| * b240a047 arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer
* 9c3241c2 Merge branch 'android12-5.10' into android12-5.10-lts

Change-Id: I0ee1514b567fb164420092bc59edcf957fda60be
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@google.com>
      c1f6eb35
    • Suzuki K Poulose's avatar
      UPSTREAM: coresight: etm4x: Do not hardcode IOMEM access for register restore · 384bf306
      Suzuki K Poulose authored 
      
When we restore the register state for ETM4x, while coming back
from CPU idle, we hardcode IOMEM access. This is wrong and could
blow up for an ETM with system instructions access (and for ETE).

Bug: 254441685
Fixes: f5bd5236 ("coresight: etm4x: Convert all register accesses")
Reported-by: default avatarYabin Cui <yabinc@google.com>
Reviewed-by: default avatarMike Leach <mike.leach@linaro.org>
Signed-off-by: default avatarSuzuki K Poulose <suzuki.poulose@arm.com>
Tested-by: default avatarYabin Cui <yabinc@google.com>
Link: https://lore.kernel.org/r/20240412142702.2882478-2-suzuki.poulose@arm.com


(cherry picked from commit 1e7ba33f)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: Id73e801dbe289464fd7e422f25301cb0df2d369e
      384bf306
    • Anshuman Khandual's avatar
      UPSTREAM: coresight: etm4x: Fix unbalanced pm_runtime_enable() · 0542a84d
      Anshuman Khandual authored 
      
There is an unbalanced pm_runtime_enable() in etm4_probe_platform_dev()
when etm4_probe() fails. This problem can be observed via the coresight
etm4 module's (load -> unload -> load) sequence when etm4_probe() fails
in etm4_probe_platform_dev().

[   63.379943] coresight-etm4x 7040000.etm: Unbalanced pm_runtime_enable!
[   63.393630] coresight-etm4x 7140000.etm: Unbalanced pm_runtime_enable!
[   63.407455] coresight-etm4x 7240000.etm: Unbalanced pm_runtime_enable!
[   63.420983] coresight-etm4x 7340000.etm: Unbalanced pm_runtime_enable!
[   63.420999] coresight-etm4x 7440000.etm: Unbalanced pm_runtime_enable!
[   63.441209] coresight-etm4x 7540000.etm: Unbalanced pm_runtime_enable!
[   63.454689] coresight-etm4x 7640000.etm: Unbalanced pm_runtime_enable!
[   63.474982] coresight-etm4x 7740000.etm: Unbalanced pm_runtime_enable!

This fixes the above problem - with an explicit pm_runtime_disable() call
when etm4_probe() fails during etm4_probe_platform_dev().

Bug: 254441685
Cc: Lorenzo Pieralisi <lpieralisi@kernel.org>
Cc: Hanjun Guo <guohanjun@huawei.com>
Cc: Sudeep Holla <sudeep.holla@arm.com>
Cc: "Rafael J. Wysocki" <rafael@kernel.org>
Cc: Len Brown <lenb@kernel.org>
Cc: Suzuki K Poulose <suzuki.poulose@arm.com>
Cc: Mike Leach <mike.leach@linaro.org>
Cc: James Clark <james.clark@arm.com>
Cc: Leo Yan <leo.yan@linaro.org>
Cc: linux-acpi@vger.kernel.org
Cc: linux-arm-kernel@lists.infradead.org
Cc: linux-kernel@vger.kernel.org
Cc: coresight@lists.linaro.org
Fixes: 5214b563 ("coresight: etm4x: Add support for sysreg only devices")
Reviewed-by: default avatarJames Clark <james.clark@arm.com>
Signed-off-by: default avatarAnshuman Khandual <anshuman.khandual@arm.com>
Signed-off-by: default avatarSuzuki K Poulose <suzuki.poulose@arm.com>
Link: https://lore.kernel.org/r/20240314055843.2625883-2-anshuman.khandual@arm.com


(cherry picked from commit caa41c47)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: Ia3670ff733938f8cef943c5f2d5ff8b05438bf90
      0542a84d
    • Arnd Bergmann's avatar
      UPSTREAM: ubsan: fix unused variable warning in test module · 30540d85
      Arnd Bergmann authored 
      
This is one of the drivers with an unused variable that is marked 'const'.
Adding a __used annotation here avoids the warning and lets us enable
the option by default:

lib/test_ubsan.c:137:28: error: unused variable 'skip_ubsan_array' [-Werror,-Wunused-const-variable]

Bug: 254441685
Fixes: 4a26f49b ("ubsan: expand tests and reporting")
Signed-off-by: default avatarArnd Bergmann <arnd@arndb.de>
Link: https://lore.kernel.org/r/20240403080702.3509288-3-arnd@kernel.org


Signed-off-by: default avatarKees Cook <keescook@chromium.org>
(cherry picked from commit bbda3ba6)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: I983f90764f748c9fa747287703ba5219e6cc9ad8
      30540d85
    • Daniel Lezcano's avatar
      BACKPORT: powercap: dtpm_cpu: Fix error check against freq_qos_add_request() · 96b23148
      Daniel Lezcano authored 
      
The caller of the function freq_qos_add_request() checks again a non
zero value but freq_qos_add_request() can return '1' if the request
already exists. Therefore, the setup function fails while the QoS
request actually did not failed.

Fix that by changing the check against a negative value like all the
other callers of the function.

Bug: 254441685
Fixes: 0e8f68d7 ("Add CPU energy model based support")
Signed-off-by: default avatarDaniel Lezcano <daniel.lezcano@linaro.org>
Signed-off-by: default avatarRafael J. Wysocki <rafael.j.wysocki@intel.com>
(cherry picked from commit b50155cb)
[Lee: Fixed trivial surrounding diff conflict - no functional changes intended]
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: I7ae72beddcd6c56e51baf6570016b30a33af452d
      96b23148
    • Udipto Goswami's avatar
      UPSTREAM: usb: gadget: ncm: Fix indentations in documentation of NCM section · 280f4071
      Udipto Goswami authored 
      
Currently, the section of NCM which describes attributes are having wrong
indentation.

Fix this by following the correct format recommended.

Bug: 254441685
Fixes: 1900daee ("usb: gadget: ncm: Add support to update wMaxSegmentSize via configfs")
Reported-by: default avatarStephen Rothwell <sfr@canb.auug.org.au>
Closes: https://lore.kernel.org/all/20240108160221.743649b5@canb.auug.org.au/


Signed-off-by: default avatarUdipto Goswami <quic_ugoswami@quicinc.com>
Link: https://lore.kernel.org/r/20240108132720.7786-1-quic_ugoswami@quicinc.com


Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 20d03ae3)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: I687d71d70933bb3784860c91529eec9205750ee4
      280f4071
    • Samuel Holland's avatar
      BACKPORT: scs: add CONFIG_MMU dependency for vfree_atomic() · c45f62b1
      Samuel Holland authored 
      The shadow call stack implementation fails to build without CONFIG_MMU:

  ld.lld: error: undefined symbol: vfree_atomic
  >>> referenced by scs.c
  >>>               kernel/scs.o:(scs_free) in archive vmlinux.a

Bug: 254441685
Link: https://lkml.kernel.org/r/20240122175204.2371009-1-samuel.holland@sifive.com


Fixes: a2abe7cb ("scs: switch to vmapped shadow stacks")
Signed-off-by: default avatarSamuel Holland <samuel.holland@sifive.com>
Reviewed-by: default avatarSami Tolvanen <samitolvanen@google.com>
Cc: Will Deacon <will@kernel.org>
Cc: <stable@vger.kernel.org>
Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
(cherry picked from commit 6f9dc684)
[Lee: Fixed trivial surrounding diff conflict - no functional changes intended]
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: I61bbbd6461ccf453524bb2ea625770d4140a848f
      c45f62b1
    • Tanzir Hasan's avatar
      UPSTREAM: mm/damon/vaddr: change asm-generic/mman-common.h to linux/mman.h · beab58a2
      Tanzir Hasan authored 
      asm-generic/mman-common.h can be replaced by linux/mman.h and the file
will still build correctly.  It is an asm-generic file which should be
avoided if possible.

Bug: 254441685
Link: https://lkml.kernel.org/r/20231221-asmgenericvaddr-v1-1-742b170c914e@google.com


Fixes: 6dea8add ("mm/damon/vaddr: support DAMON-based Operation Schemes")
Signed-off-by: default avatarTanzir Hasan <tanzirh@google.com>
Suggested-by: default avatarAl Viro <viro@zeniv.linux.org.uk>
Reviewed-by: default avatarSeongJae Park <sj@kernel.org>
Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
(cherry picked from commit 1ae41dff)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: If92c0124ddaefe2510f95a0ae12b6c88b7e9acf9
      beab58a2