Skip to content
Snippets Groups Projects
Select Git revision
20 results
Search by author
  • Any Author
  • 72162444 72162444 72162444 72162444 gaochangning
  • Aakash Dave Aakash Dave aakash.dave
  • Aaron Kim Aaron Kim akim
  • Aaron Kloc Aaron Kloc akloc
  • Aaron Lan Aaron Lan aaron.lan
  • Aaron Nabil Aaron Nabil aaronna
  • Aaron Pohle Aaron Pohle aaron.pohle
  • Abbott Chung Abbott Chung chung.abbott
  • Abdallah Omar Abdallah Omar abdallah_omar
  • Abdessamii Chalbi Abdessamii Chalbi abdessamii.chalbi
  • Abdul Hussain Sirajudeen Abdul Hussain Sirajudeen abdul.hussain
  • Abdullah Alghamdi Abdullah Alghamdi a.alghamdi
  • Abdullah Elmarghany Abdullah Elmarghany abdullah_elmarghany
  • Abel Fang Abel Fang abel_fang
  • Abel Vesa Abel Vesa abel.vesa
  • Abhijeet Badurkar Abhijeet Badurkar abhijeet.badurkar
  • Abhijit Adsule Abhijit Adsule adsule
  • Abhijit Murthy Abhijit Murthy abhijit
  • Abhi Khanal Abhi Khanal akhanal
  • Abhilash Sahoo Abhilash Sahoo abhilashsahoo
20 authors
  1. Feb 20, 2025
  3. Feb 04, 2025
  5. Jan 29, 2025
  7. Jan 28, 2025
    • Todd Kjos's avatar
      ANDROID: KABI macros to release excess KABI fields for use with backports · 154d9fa3
      Todd Kjos authored 
      
With KMI freeze, we reserve padding in structs to be exclusively used
for LTS updates that would otherwise break the KMI. These fields are
reserved via the ANDROID_KABI_RESERVE() macro that adds a u64 field to
the struct. The ANDROID_KABI_USE() macro is used when the field is
needed for an LTS patch backport.

Since these fields must be reserved at KMI freeze time, we have make
our best guess at what might be needed - and sometimes reserve too many
fields. An example of this is the 8 ANDROID_KABI_RESERVE() fields in
`struct net_device` for android13-5.15. We are now 3 years into the
6 year lifetime for android13-5.15 and none of those 8 padding fields
have been used. At this point it is reasonable to allow 1 or 2 of those
fields to be used for non-LTS backports.

We won't relax the rule that ANDROID_KABI_RESERVE() is exclusively
for LTS backports, Instead we'll introduce a new macro,
ANDROID_KABI_BACKPORT_OK() to release some KABI fields for general use
as the branches age and the use of padding for LTS becomes unlikely.

We release the field for use by replacing the ANDROID_KABI_RESERVE()
with the new ANDROID_KABI_BACKPORT_OK() macro, which has the exact
same implementation, but allows others to use it for backporting
features from upstream.

When an ANDROID_KABI_BACKPORT_OK() field is going to be used, the
ANDROID_KABI_BACKPORT_USE() macro is used to indicate that the field
was used for a feature backport, not an LTS patch.

This patch adds the two new macros:

ANDROID_KABI_BACKPORT_OK() : exactly the same as ANDROID_KABI_RESERVE()
ANDROID_KABI_BACKPORT_USE() ; exacly the same as ANDROID_KABI_USE()

Patches that change an ANDROID_KABI_RESERVE() to ANDROID_KABI_BACKPORT_OK() must
be reviewed and get a CR+1 from gregkh@, joneslee@ or tkjos@ to make
sure it really is acceptable to reduce the padding for LTS merges.

Bug: 392673958
Signed-off-by: default avatarTodd Kjos <tkjos@google.com>
Change-Id: I19b9dfc16d891fb6fe48ec4379c6fa3dcb6adf24
(cherry picked from commit f1954b6e)
      154d9fa3
  9. Jan 27, 2025
    • Chris Wulff's avatar
      UPSTREAM: usb: gadget: u_audio: Check return codes from usb_ep_enable and config_ep_by_speed. · 08fd4e9d
      Chris Wulff authored 
      
These functions can fail if descriptors are malformed, or missing,
for the selected USB speed.

Bug: 254441685
Fixes: eb9fecb9 ("usb: gadget: f_uac2: split out audio core")
Fixes: 24f779da ("usb: gadget: f_uac2/u_audio: add feedback endpoint support")
Cc: stable@vger.kernel.org
Signed-off-by: default avatarChris Wulff <crwulff@gmail.com>
Link: https://lore.kernel.org/r/20240721192314.3532697-2-crwulff@gmail.com


Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 76a7bfc445b8e9893c091e24ccfd4f51dfdc0a70)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: Id4e0f235ee4153c2400945aff1a42aacbba3bc31
      08fd4e9d
    • Meng Li's avatar
      UPSTREAM: usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock · 887a45b8
      Meng Li authored 
      
When config CONFIG_USB_DWC3_DUAL_ROLE is selected, and trigger system
to enter suspend status with below command:
echo mem > /sys/power/state
There will be a deadlock issue occurring. Detailed invoking path as
below:
dwc3_suspend_common()
    spin_lock_irqsave(&dwc->lock, flags);              <-- 1st
    dwc3_gadget_suspend(dwc);
        dwc3_gadget_soft_disconnect(dwc);
            spin_lock_irqsave(&dwc->lock, flags);      <-- 2nd
This issue is exposed by commit c7ebd814 ("usb: dwc3: gadget: Fix
NULL pointer dereference in dwc3_gadget_suspend") that removes the code
of checking whether dwc->gadget_driver is NULL or not. It causes the
following code is executed and deadlock occurs when trying to get the
spinlock. In fact, the root cause is the commit 5265397f("usb: dwc3:
Remove DWC3 locking during gadget suspend/resume") that forgot to remove
the lock of otg mode. So, remove the redundant lock of otg mode during
gadget suspend/resume.

Bug: 254441685
Fixes: 5265397f ("usb: dwc3: Remove DWC3 locking during gadget suspend/resume")
Cc: Xu Yang <xu.yang_2@nxp.com>
Cc: stable@vger.kernel.org
Signed-off-by: default avatarMeng Li <Meng.Li@windriver.com>
Acked-by: default avatarThinh Nguyen <Thinh.Nguyen@synopsys.com>
Link: https://lore.kernel.org/r/20240618031918.2585799-1-Meng.Li@windriver.com


Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 7838de15)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: If88964a9d84a6517c472616c3dcc04594d7dd43a
      887a45b8
    • Hector Martin's avatar
      UPSTREAM: xhci: Handle TD clearing for multiple streams case · 2b48d051
      Hector Martin authored 
      When multiple streams are in use, multiple TDs might be in flight when
an endpoint is stopped. We need to issue a Set TR Dequeue Pointer for
each, to ensure everything is reset properly and the caches cleared.
Change the logic so that any N>1 TDs found active for different streams
are deferred until after the first one is processed, calling
xhci_invalidate_cancelled_tds() again from xhci_handle_cmd_set_deq() to
queue another command until we are done with all of them. Also change
the error/"should never happen" paths to ensure we at least clear any
affected TDs, even if we can't issue a command to clear the hardware
cache, and complain loudly with an xhci_warn() if this ever happens.

This problem case dates back to commit e9df17eb ("USB: xhci: Correct
assumptions about number of rings per endpoint.") early on in the XHCI
driver's life, when stream support was first added.
It was then identified but not fixed nor made into a warning in commit
674f8438 ("xhci: split handling halted endpoints into two steps"),
which added a FIXME comment for the problem case (without materially
changing the behavior as far as I can tell, though the new logic made
the problem more obvious).

Then later, in commit 94f33914 ("xhci: Fix failure to give back some
cached cancelled URBs."), it was acknowledged again.

[Mathias: commit 94f33914 ("xhci: Fix failure to give back some cached
cancelled URBs.") was a targeted regression fix to the previously mentioned
patch. Users reported issues with usb stuck after unmounting/disconnecting
UAS devices. This rolled back the TD clearing of multiple streams to its
original state.]

Apparently the commit author was aware of the problem (yet still chose
to submit it): It was still mentioned as a FIXME, an xhci_dbg() was
added to log the problem condition, and the remaining issue was mentioned
in the commit description. The choice of making the log type xhci_dbg()
for what is, at this point, a completely unhandled and known broken
condition is puzzling and unfortunate, as it guarantees that no actual
users would see the log in production, thereby making it nigh
undebuggable (indeed, even if you turn on DEBUG, the message doesn't
really hint at there being a problem at all).

It took me *months* of random xHC crashes to finally find a reliable
repro and be able to do a deep dive debug session, which could all have
been avoided had this unhandled, broken condition been actually reported
with a warning, as it should have been as a bug intentionally left in
unfixed (never mind that it shouldn't have been left in at all).

> Another fix to solve clearing the caches of all stream rings with
> cancelled TDs is needed, but not as urgent.

3 years after that statement and 14 years after the original bug was
introduced, I think it's finally time to fix it. And maybe next time
let's not leave bugs unfixed (that are actually worse than the original
bug), and let's actually get people to review kernel commits please.

Fixes xHC crashes and IOMMU faults with UAS devices when handling
errors/faults. Easiest repro is to use `hdparm` to mark an early sector
(e.g. 1024) on a disk as bad, then `cat /dev/sdX > /dev/null` in a loop.
At least in the case of JMicron controllers, the read errors end up
having to cancel two TDs (for two queued requests to different streams)
and the one that didn't get cleared properly ends up faulting the xHC
entirely when it tries to access DMA pages that have since been unmapped,
referred to by the stale TDs. This normally happens quickly (after two
or three loops). After this fix, I left the `cat` in a loop running
overnight and experienced no xHC failures, with all read errors
recovered properly. Repro'd and tested on an Apple M1 Mac Mini
(dwc3 host).

On systems without an IOMMU, this bug would instead silently corrupt
freed memory, making this a security bug (even on systems with IOMMUs
this could silently corrupt memory belonging to other USB devices on the
same controller, so it's still a security bug). Given that the kernel
autoprobes partition tables, I'm pretty sure a malicious USB device
pretending to be a UAS device and reporting an error with the right
timing could deliberately trigger a UAF and write to freed memory, with
no user action.

[Mathias: Commit message and code comment edit, original at:]
https://lore.kernel.org/linux-usb/20240524-xhci-streams-v1-1-6b1f13819bea@marcan.st/



Bug: 254441685
Fixes: e9df17eb ("USB: xhci: Correct assumptions about number of rings per endpoint.")
Fixes: 94f33914 ("xhci: Fix failure to give back some cached cancelled URBs.")
Fixes: 674f8438 ("xhci: split handling halted endpoints into two steps")
Cc: stable@vger.kernel.org
Cc: security@kernel.org
Reviewed-by: default avatarNeal Gompa <neal@gompa.dev>
Signed-off-by: default avatarHector Martin <marcan@marcan.st>
Signed-off-by: default avatarMathias Nyman <mathias.nyman@linux.intel.com>
Link: https://lore.kernel.org/r/20240611120610.3264502-5-mathias.nyman@linux.intel.com


Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 5ceac4402f5d975e5a01c806438eb4e554771577)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: Idea7a49f862627d29059e529c5722c69ea028ee4
      2b48d051
    • Marc Zyngier's avatar
      UPSTREAM: KVM: arm64: Fix AArch32 register narrowing on userspace write · 8382bc9b
      Marc Zyngier authored 
      
When userspace writes to one of the core registers, we make
sure to narrow the corresponding GPRs if PSTATE indicates
an AArch32 context.

The code tries to check whether the context is EL0 or EL1 so
that it narrows the correct registers. But it does so by checking
the full PSTATE instead of PSTATE.M.

As a consequence, and if we are restoring an AArch32 EL0 context
in a 64bit guest, and that PSTATE has *any* bit set outside of
PSTATE.M, we narrow *all* registers instead of only the first 15,
destroying the 64bit state.

Obviously, this is not something the guest is likely to enjoy.

Correctly masking PSTATE to only evaluate PSTATE.M fixes it.

Bug: 254441685
Fixes: 90c1f934 ("KVM: arm64: Get rid of the AArch32 register mapping code")
Reported-by: default avatarNina Schoetterl-Glausch <nsg@linux.ibm.com>
Cc: stable@vger.kernel.org
Reviewed-by: default avatarNina Schoetterl-Glausch <nsg@linux.ibm.com>
Acked-by: default avatarOliver Upton <oliver.upton@linux.dev>
Link: https://lore.kernel.org/r/20240524141956.1450304-2-maz@kernel.org


Signed-off-by: default avatarMarc Zyngier <maz@kernel.org>
(cherry picked from commit 947051e3)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: Ia067293b9d6b05ea6e3f9605d12cd6e4fe7f450f
      8382bc9b
    • Chris Wulff's avatar
      UPSTREAM: usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind. · 852ccb6a
      Chris Wulff authored 
      
Hang on to the control IDs instead of pointers since those are correctly
handled with locks.

Bug: 254441685
Fixes: 8fe9a03f ("usb: gadget: u_audio: Rate ctl notifies about current srate (0=stopped)")
Fixes: c565ad07 ("usb: gadget: u_audio: Support multiple sampling rates")
Fixes: 02de698c ("usb: gadget: u_audio: add bi-directional volume and mute support")
Signed-off-by: default avatarChris Wulff <chris.wulff@biamp.com>
Link: https://lore.kernel.org/stable/CO1PR17MB5419C2BF44D400E4E620C1ADE1172%40CO1PR17MB5419.namprd17.prod.outlook.com
Link: https://lore.kernel.org/r/CO1PR17MB5419C2BF44D400E4E620C1ADE1172@CO1PR17MB5419.namprd17.prod.outlook.com


Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 1b739388aa3f8dfb63a9fca777e6dfa6912d0464)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: Ica607c445c2b9c296c9dfdd54d56aef082619df2
      852ccb6a
  11. Jan 25, 2025
    • Greg Kroah-Hartman's avatar
      Merge tag 'android12-5.10.233_r00' into android12-5.10 · c1f6eb35
      Greg Kroah-Hartman authored 
      
This merges the android12-5.10.233_r00 tag into the android12-5.10 branch,
catching it up with the latest LTS releases.

It contains the following commits:

* 5c3dd95c7d4d ANDROID: GKI: virtual_device: add blk_mq_quiesce_queue_nowait to the symbol list
* f3d5fcc6b820 Revert "tracing: Constify string literal data member in struct trace_event_call"
* 44a38c8bdc83 Revert "skb_expand_head() adjust skb->truesize incorrectly"
*   e36dd359bbee Merge 5.10.233 into android12-5.10-lts
|\
| * 14c02f4e6920 Linux 5.10.233
| * d675fefbaec3 mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()
| * 17c3f7988f32 drm: adv7511: Drop dsi single lane support
| * 081bdb3a3167 net/sctp: Prevent autoclose integer overflow in sctp_association_init()
| * 5a1dd20a9d86 sky2: Add device ID 11ab:4373 for Marvell 88E8075
| * c55d186376a8 pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
| * 42a6eb4ed7a9 RDMA/uverbs: Prevent integer overflow issue
| * 50804bd95f00 modpost: fix the missed iteration for the max bit in do_input()
| * 0cd78baf4dd2 modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
| * d5a30a6117ea btrfs: don't set lock_owner when locking extent buffer for reading
| * 51b03b7473a0 btrfs: locking: remove the recursion handling code
| * 20d96aa61607 ARC: build: Try to guess GCC variant of cross compiler
| * 58713417015b irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
| * af37dc1f017b net: usb: qmi_wwan: add Telit FE910C04 compositions
| * e529b4686038 bpf: fix potential error return
| * 6f3ce0ee5c3c sound: usb: format: don't warn that raw DSD is unsupported
| * a2718ed1eb8c btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
| * 12a6e304325d wifi: mac80211: wake the queues in case of failure in resume
| * 2558d753df06 tracing: Prevent bad count for tracing_cpumask_write
| * 1bf53a2145fa kernel: Initialize cpumask before parsing
| * ba5120a2fb5f btrfs: fix use-after-free when COWing tree bock and tracing is enabled
| * bf267f2f81bc btrfs: rename and export __btrfs_cow_block()
| * 1817e3e849f6 btrfs: locking: remove all the blocking helpers
| * 4da6be8eb618 btrfs: switch extent buffer tree lock to rw_semaphore
| * 42d7147c9c21 dmaengine: dw: Select only supported masters for ACPI devices
| * d3017895e393 ila: serialize calls to nf_register_net_hooks()
| * 0d3fa6c3c9ca af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
| * fa57f07ba062 af_packet: fix vlan_get_tci() vs MSG_PEEK
| * 7eaa71f56a6f RDMA/rtrs: Ensure 'ib_sge list' is accessible
| * 925f2be402f9 eth: bcmsysport: fix call balance of priv->clk handling routines
| * 9c76fb573889 ALSA: usb-audio: US16x08: Initialize array before use
| * 0f67a980f2ae net: llc: reset skb->transport_header
| * 6a14b46052ee netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
| * cf6befa7c569 netrom: check buffer length before accessing it
| * 60e64b6261d1 drm/bridge: adv7511_audio: Update Audio InfoFrame properly
| * bbcbb83a7f1f RDMA/bnxt_re: Fix the locking while accessing the QP table
| * 070d214c0183 RDMA/bnxt_re: Fix max_qp_wrs reported
| * cff07807f693 RDMA/bnxt_re: Fix reporting hw_ver in query_device
| * 5684c11d3aec RDMA/bnxt_re: Add check for path mtu in modify_qp
| * aea89a85bc74 RDMA/mlx5: Enforce same type port association for multiport RoCE
| * af3626302040 net/mlx5: Make API mlx5_core_is_ecpf accept const pointer
| * 6531f9c7e518 thunderbolt: Add support for Intel Panther Lake-M/P
| * f8b8c8c83528 thunderbolt: Add support for Intel Lunar Lake
| * e7cca35083b8 thunderbolt: Add Intel Barlow Ridge PCI ID
| * a534e5d47e4f thunderbolt: Add support for Intel Meteor Lake
| * aeb4a70248f5 thunderbolt: Add support for Intel Raptor Lake
| * 21347105ded3 thunderbolt: Add support for Intel Alder Lake
| * 712137b177b4 selinux: ignore unknown extended permissions
| * 36c569dfa724 x86/hyperv: Fix hv tsc page based sched_clock for hibernation
| * c47e02201171 ipv6: prevent possible UAF in ip6_xmit()
| * 3cb8e49178e1 skb_expand_head() adjust skb->truesize incorrectly
| * f67138dd338c nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
| * a1c3a19446a4 btrfs: avoid monopolizing a core when activating a swap file
| * b29c7783ac1f power: supply: gpio-charger: Fix set charge current limits
| * 5c4a141ff09e tracing: Constify string literal data member in struct trace_event_call
| * e3b89e6a6422 arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs
| * de29cb3bdfb2 arm64: mm: Rename asid2idx() to ctxid2asid()
| * 109f91d8b933 drm/dp_mst: Fix MST sideband message body length check
| * 221109ba2127 bpf: fix recursive lock when verdict program return SK_PASS
| * 79f87a6ec39f bpf: Check validity of link->type in bpf_link_show_fdinfo()
| * 1504108cb602 ipv6: fix possible UAF in ip6_finish_output2()
| * ee6b1db17f82 ipv6: use skb_expand_head in ip6_xmit
| * 4132c4ad00dd ipv6: use skb_expand_head in ip6_finish_output2
| * 23f95bbe7250 skbuff: introduce skb_expand_head()
| * 3754c15b9348 MIPS: Probe toolchain support of -msym32
| * 9ca428c6397a virtio-blk: don't keep queue frozen during system suspend
| * bbb55d1cb0b0 scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error
| * f37f301d84ea scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
| * 3cc9e1a56692 platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
| * c06a5b7f12a4 regmap: Use correct format specifier for logging range errors
| * 1c58d374ca44 ALSA: hda/conexant: fix Z60MR100 startup pop issue
| * f36d024bd15e scsi: megaraid_sas: Fix for a potential deadlock
| * c1d93e7100e5 scsi: qla1280: Fix hw revision numbering for ISP1020/1040
| * 7911ca06b674 watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04
| * 7fca949e30c3 tracing/kprobe: Make trace_kprobe's module callback called after jump_label update
| * 1562871ef613 mtd: rawnand: fix double free in atmel_pmecc_create_user()
| * ed1a8aaa3445 dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
| * e87dbcfdf1c0 dmaengine: mv_xor: fix child node refcount handling in early exit
| * 619a5aeb0f0d phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
| * 8826abb0ae2d phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider
| * 574e5cfae2d8 phy: core: Fix that API devm_phy_put() fails to release the phy
| * 9e21f671b9a9 phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
| * 722ece95fcce phy: core: Fix an OF node refcount leakage in _of_phy_get()
| * 36a6523d097d mtd: diskonchip: Cast an operand to prevent potential overflow
| * 9ad478986fd1 nfsd: restore callback functionality for NFSv4.0
| * d814eeb7faa4 bpf: Check negative offsets in __bpf_skb_min_len()
| * 1b63193b150c tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress()
| * 4e5aab3e4115 mm/vmstat: fix a W=1 clang compiler warning
| * e11778189513 media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
| * 4e2e9adaea7d epoll: Add synchronous wakeup support for ep_poll_callback
| * 6e1e991c4017 ceph: validate snapdirname option length when mounting
| * b7f89856c5fc of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
| * c86a40c26857 of: Fix error path in of_parse_phandle_with_args_map()
| * 9416f17809a1 udmabuf: also check for F_SEAL_FUTURE_WRITE
| * 5d4ed71327b0 nilfs2: prevent use of deleted inode
| * 8d42147c83ee of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
| * 64ee07cfd50f NFS/pnfs: Fix a live lock between recalled layouts and layoutget
| * d81f4e73aff9 Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
| * 8b53be082fc6 btrfs: tree-checker: reject inline extent items with 0 ref count
| * 98f31cf96f47 zram: refuse to use zero sized block device as backing device
| * df56b6f9b430 sh: clk: Fix clk_enable() to return 0 on NULL clk
| * 6742afdf6171 hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers
| * 525c3d0595b0 USB: serial: option: add Telit FE910C04 rmnet compositions
| * b38b9456621d USB: serial: option: add MediaTek T7XX compositions
| * 25a5f80417b2 USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
| * 452c1654c3cd USB: serial: option: add MeiG Smart SLM770A
| * daf09316ddc2 USB: serial: option: add TCL IK512 MBIM & ECM
| * 0e8098cc2538 efivarfs: Fix error on non-existent file
| * de4359fa4f81 i2c: riic: Always round-up when calculating bus period
| * 8eb181aee760 chelsio/chtls: prevent potential integer overflow on 32bit
| * ddfb709c2895 mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
| * ad26612c2af9 netfilter: ipset: Fix for recursive locking warning
| * a24ce83a2de1 net: ethernet: bgmac-platform: fix an OF node reference leak
| * 1942218bf95f net: hinic: Fix cleanup in create_rxqs/txqs()
| * 64f3f7388b90 ionic: use ee->offset when returning sprom data
| * 81bdfcd6e6a9 netdevsim: prevent bad user input in nsim_dev_health_break_write()
| * 2fb425f27ee6 netdevsim: switch to memdup_user_nul()
| * 82c7ad9ca099 net/smc: check return value of sock_recvmsg when draining clc data
| * 846bada23bfc net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
| * e18830b7c498 net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
| * 7678451d66b8 erofs: fix incorrect symlink detection in fast symlink
| * 0ab621fcdff1 erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
| * 0f851f8c62d0 i2c: pnx: Fix timeout in wait functions
| * e430962901c7 usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled
| * 4ba1ee910938 usb: cdns3: Add quirk flag to enable suspend residency
| * 9339c91863de PCI: Add ACS quirk for Broadcom BCM5760X NIC
| * dab416edff9d ALSA: usb: Fix UBSAN warning in parse_audio_unit()
| * f9869f6772e3 MIPS: Loongson64: DTS: Fix msi node for ls7a
| * 0dde3ae52a0d PCI: Use preserve_config in place of pci_flags
| * 6c7731ad179a PCI/AER: Disable AER service on suspend
| * 5e473f462a16 net: sched: fix ordering of qlen adjustment
* | ce60eb156bfb Merge 5.10.232 into android12-5.10-lts
|\|
| * abc9475430fd Linux 5.10.232
| * 20ad30bed789 x86/static-call: fix 32-bit build
| * e7c1fcdda47b ALSA: usb-audio: Fix a DMA to stack memory bug
| * b751972c26f6 x86/xen: remove hypercall page
| * b09001da8227 x86/xen: use new hypercall functions instead of hypercall page
| * 76b42b1340ca x86/xen: add central hypercall functions
| * 05df6e6cd9a7 x86/xen: don't do PV iret hypercall through hypercall page
| * bed5b6a6f207 x86/static-call: provide a way to do very early static-call updates
| * 4099bcd87390 objtool/x86: allow syscall instruction
| * e74011db5179 x86: make get_cpu_vendor() accessible from Xen code
| * 1d5354a9182b xen/netfront: fix crash when removing device
| * dac3f7ba392c Revert "clkdev: remove CONFIG_CLKDEV_LOOKUP"
| * 8b7e0d915689 Revert "clocksource/drivers:sp804: Make user selectable"
| * 7f4e1fee0a74 drm/i915: Fix memory leak by correcting cache object name in error handler
| * 47b341f714e6 tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe()
| * dadf82c1b260 bpf: sync_linked_regs() must preserve subreg_def
| * 6fd69b2f2991 blk-iocost: Avoid using clamp() on inuse in __propagate_weights()
| * 32a849c676ea ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired
| * 45af429f76e7 team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
| * a1a97584334c bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
| * 49cb8083c8df net: bonding, dummy, ifb, team: advertise NETIF_F_GSO_SOFTWARE
| * 216509dda290 net/sched: netem: account for backlog updates from child qdisc
| * 0fd8c3179b08 qca_spi: Make driver probing reliable
| * ab891aeb28d1 qca_spi: Fix clock speed for multiple QCA7000
| * 68e6a5f0cdd8 cxgb4: use port number to set mac addr
| * cf604286b70d ACPI: resource: Fix memory resource type union access
| * 76d856f03d02 net: lapb: increase LAPB_HEADER_LEN
| * 4d2b56e2fb1e selftests: mlxsw: sharedbuffer: Remove duplicate test cases
| * 938742593a57 selftests: mlxsw: sharedbuffer: Remove h1 ingress test case
| * a771f349c95d tipc: fix NULL deref in cleanup_bearer()
| * 784fc6707949 batman-adv: Do not let TT changes list grows indefinitely
| * 48e63887c01f batman-adv: Remove uninitialized data in full table TT response
| * 4fb09749f266 batman-adv: Do not send uninitialized TT changes
| * 616aa5f3c86e acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
| * 632fb232b6bb exfat: fix potential deadlock on __exfat_get_dentry_set
| * e26fa236758e virtio/vsock: Fix accept_queue memory leak
| * 7b2e41b2d251 bpf, sockmap: Fix update element with same
| * 7ba7e748bd71 xfs: fix scrub tracepoints when inode-rooted btrees are involved
| * 4e33aedc3026 xfs: don't drop errno values when we fail to ficlone the entire range
| * 28b3c03a6790 usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer
| * 922142bcff97 usb: ehci-hcd: fix call balance of clocks handling routines
| * 0f6184603ba8 usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature
| * 1e05b5b36aea ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys()
| * ff6f8a29e2a7 usb: host: max3421-hcd: Correctly abort a USB request.
| * bd92492a960c tcp: check space before adding MPTCP SYN options
* | 15eb0c592846 ANDROID: fix up crc problems 5.10.231
* | 649b793f1e0f Revert "xfrm: rename xfrm_state_offload struct to allow reuse"
* | 296cb9cacf0e Revert "xfrm: store and rely on direction to construct offload flags"
* | eca4deab369c Revert "netdevsim: rely on XFRM state direction instead of flags"
* | 92e4264d4e74 Revert "netdevsim: copy addresses for both in and out paths"
* | c45665fcb5e0 Revert "i3c: fix incorrect address slot lookup on 64-bit"
* | e5ef3ebd0450 Revert "i3c: master: Replace hard code 2 with macro I3C_ADDR_SLOT_STATUS_BITS"
* | 3bfa1c707fcd Revert "i3c: master: Extend address status bit to 4 and add I3C_ADDR_SLOT_EXT_DESIRED"
* | 7b7cc2901dc4 Revert "i3c: master: Fix dynamic address leak when 'assigned-address' is present"
* | 1ee5d6b1bfee Merge 5.10.231 into android12-5.10-lts
|\|
| * df8d35efada4 Linux 5.10.231
| * af442dd3e3fc octeontx2-pf: Fix otx2_get_fecparam()
| * ddeef5079c6b octeontx2: Fix condition.
| * bde4e7c15271 media: uvcvideo: Require entities to have a non-zero unique ID
| * 45a92cbc88e4 ALSA: usb-audio: Fix out of bounds reads when finding clock sources
| * 3fc53e46fdc8 scsi: core: Fix scsi_mode_select() buffer length handling
| * a0777b45095f scsi: sd: Fix sd_do_mode_sense() buffer length handling
| * 38283b035c9d PCI: rockchip-ep: Fix address translation unit programming
| * 43c48ad24c03 Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()"
| * f5e45e9464c7 modpost: Add .irqentry.text to OTHER_SECTIONS
| * 969ee61aa117 ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume"
| * 4fcd903a5d9e drm/amd/display: Check BIOS images before it is used
| * 7d5f99db8b15 xhci: dbc: Fix STALL transfer event handling
| * 99f0fe6d0191 jffs2: Fix rtime decompressor
| * f6fc251baefc jffs2: Prevent rtime decompress memory corruption
| * dbedf8ddde53 KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE
| * c329033f1b72 KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device
| * f4dbf393bfb4 KVM: arm64: vgic-its: Add a data length check in vgic_its_save_*
| * c3cded0ff622 Revert "unicode: Don't special case ignorable code points"
| * 7522e61c5350 btrfs: fix missing snapshot drew unlock when root is dead during swap activation
| * 354f24382480 sched/core: Prevent wakeup of ksoftirqd during idle load balance
| * a676dbc8af8c sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy
| * 4aaaf22aa193 sched/fair: Add NOHZ balancer flag for nohz.next_balance updates
| * f8d61ae46cf4 sched/fair: Trigger the update of blocked load on newly idle cpu
| * 0669c671ab36 sched/fair: Merge for each idle cpu loop of ILB
| * 88136224a8f1 sched/fair: Remove unused parameter of update_nohz_stats
| * 1940ddbeb9af sched/fair: Remove update of blocked load from newidle_balance
| * f3794dbff0ed sched/core: Remove the unnecessary need_resched() check in nohz_csd_func()
| * 44624fbc019f misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle
| * a79a7e3c03ae powerpc/prom_init: Fixup missing powermac #size-cells
| * 5a2eaa3ad2b8 MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a
| * 19bc36c8d4ec usb: chipidea: udc: handle USB Error Interrupt if IOC not set
| * 5ac1dd51aaa0 i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock
| * e5f0e94f95b8 PCI: Add ACS quirk for Wangxun FF5xxx NICs
| * 1af3a54dcea4 PCI: Add 'reset_subordinate' to reset hierarchy below bridge
| * dff561e4060d f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
| * 22169b367563 nvdimm: rectify the illogical code within nd_dax_probe()
| * 38953b4419d1 pinctrl: qcom-pmic-gpio: add support for PM8937
| * 5d552000fe9f scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset
| * 910f9d22095d scsi: st: Don't modify unknown block number in MTIOCGET
| * ddcfc5708da9 leds: class: Protect brightness_show() with led_cdev->led_access mutex
| * 3dd2c5cb2c69 scsi: hisi_sas: Add cond_resched() for no forced preemption model
| * dd72b3ac2fc0 tracing: Use atomic64_inc_return() in trace_clock_counter()
| * 170b0323b032 pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU
| * 18347e7e0404 netpoll: Use rcu_access_pointer() in __netpoll_setup
| * 78b13b562206 net/neighbor: clear error in case strict check is not set
| * f795bdf9dbe2 rocker: fix link status detection in rocker_carrier_init()
| * 042da326b0a3 ASoC: hdmi-codec: reorder channel allocation list
| * e07b54b67e9c Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables
| * 7522d7d745d1 wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw()
| * 856b24b5d92c wifi: ipw2x00: libipw_rx_any(): fix bad alignment
| * 13c3a54f48a6 drm/amdgpu: set the right AMDGPU sg segment limitation
| * 03c4c3e02cf9 drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov
| * 368a53315222 jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
| * 97e693593162 jfs: fix array-index-out-of-bounds in jfs_readdir
| * df7c76636952 jfs: fix shift-out-of-bounds in dbSplit
| * 8c97a4d5463a jfs: array-index-out-of-bounds fix in dtReadFirst
| * 3ccce34a5c3f dma-debug: fix a possible deadlock on radix_lock
| * 064149161c37 drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr
| * d28d22728b85 wifi: ath5k: add PCI ID for Arcadyan devices
| * 9400aeb5cd02 wifi: ath5k: add PCI ID for SX76X
| * 35360255ca30 net: inet6: do not leave a dangling sk pointer in inet6_create()
| * 2bc34d8c8898 net: inet: do not leave a dangling sk pointer in inet_create()
| * 14959fd7538b net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
| * ce39b5576785 net: af_can: do not leave a dangling sk pointer in can_create()
| * daa13175a6de Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
| * 1dc1e1db9270 af_packet: avoid erroring out after sock_init_data() in packet_create()
| * 50a90e5af499 net/sched: cbs: Fix integer overflow in cbs_set_port_rate()
| * a75fe481c42c net: ethernet: fs_enet: Use %pa to format resource_size_t
| * fbc8d9665322 net: fec_mpc52xx_phy: Use %pa to format resource_size_t
| * 00c9f6e82591 samples/bpf: Fix a resource leak
| * 86b66b8091c9 r8169: don't apply UDP padding quirk on RTL8126A
| * 823f4dff6cbd drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check()
| * 418cf1b2c399 drm/mcde: Enable module autoloading
| * a3c885165d7c drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model
| * c04d1dc54b11 drm/vc4: hvs: Set AXI panic modes for the HVS
| * c5623d7f9f90 media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108
| * 7850ca9a6695 media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera
| * f4f2ef66d288 kcsan: Turn report_filterlist_lock into a raw_spinlock
| * 34cd4ec08b89 kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all()
| * 8f855689c164 btrfs: avoid unnecessary device path update for the same device
| * 99192c735ed4 s390/cpum_sf: Handle CPU hotplug remove during sampling
| * c2527d07c7e9 iommu/arm-smmu: Defer probe of clients after smmu device bound
| * 24328b776fb2 ocfs2: update seq_file index in ocfs2_dlm_seq_next
| * d3aeb50fcb12 mmc: core: Further prevent card detect during shutdown
| * af940c0d623d mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet
| * 287e4952d77b regmap: detach regmap from dev on regmap_exit
| * 7175728f6b2d dma-buf: fix dma_fence_array_signaled v4
| * 70f3de869865 bpf: fix OOB devmap writes when deleting elements
| * 336e30f32ae7 bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
| * e3732102a9d6 nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
| * df43d8da6bac scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt
| * 12f04fc8580e scsi: qla2xxx: Fix use after free on unload
| * c87add0d819b scsi: qla2xxx: Supported speed displayed incorrectly for VPorts
| * 406e57325daa scsi: qla2xxx: Fix NVMe and NPIV connect issue
| * d7fd14dd866f ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG)
| * a59d39e4770f ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8
| * b3ebf8cbd886 ALSA: usb-audio: add mixer mapping for Corsair HS80
| * 1152dd13845e arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
| * 4a6f053af119 tracing: Fix cmp_entries_dup() to respect sort() comparison rules
| * 4cbc202f28a5 watchdog: rti: of: honor timeout-sec property
| * 5912a921289e HID: wacom: fix when get product name maybe null pointer
| * 43c6d763569f bpf: Fix exact match conditions in trie_get_next_key()
| * adb4a970bfa9 bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
| * 9c19ea59965e ocfs2: free inode when ocfs2_get_init_inode() fails
| * e0c6ce842409 spi: mpc52xx: Add cancel_work_sync before module remove
| * dbedc7e142df tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
| * 8cd416aaac68 drm/sti: Add __iomem for mixer_dbg_mxn's parameter
| * 7fd09abc4bdd i3c: master: Fix dynamic address leak when 'assigned-address' is present
| * b70ba15c66d5 i3c: master: Extend address status bit to 4 and add I3C_ADDR_SLOT_EXT_DESIRED
| * 1c47272e535d i3c: master: Replace hard code 2 with macro I3C_ADDR_SLOT_STATUS_BITS
| * 3aecd6fd55cf i3c: fix incorrect address slot lookup on 64-bit
| * fbb3aa94fc8d dt-bindings: serial: rs485: Fix rs485-rts-delay property
| * 0da0be3b1d17 dt_bindings: rs485: Correct delay values
| * 4733f68e59bb gpio: grgpio: Add NULL check in grgpio_probe
| * c8e3aa367e71 gpio: grgpio: use a helper variable to store the address of ofdev->dev
| * d9fa09ca004b geneve: do not assume mac header is set in geneve_xmit_skb()
| * d93efe18b49a ethtool: Fix wrong mod state in case of verbose and no_mask bitset
| * e21855091f11 netfilter: nft_set_hash: skip duplicated elements pending gc run
| * 6099b5d3e371 netfilter: ipset: Hold module reference while requesting a module
| * 98ea587a4048 net: sched: fix erspan_opt settings in cls_flower
| * e0155b1b1509 igb: Fix potential invalid memory access in igb_init_module()
| * 9da327f2e6b7 net/qed: allow old cards not supporting "num_images" to work
| * 650ee9a22d7a tipc: Fix use-after-free of kernel socket in cleanup_bearer().
| * c99507fff94b dccp: Fix memory leak in dccp_feat_change_recv
| * b90d061345bb net/ipv6: release expired exception dst cached in socket
| * b3282c2bebee can: j1939: j1939_session_new(): fix skb reference counting
| * aa632691c722 net: hsr: avoid potential out-of-bound access in fill_frame_info()
| * f9653b00bef2 net/sched: tbf: correct backlog statistic for GSO packets
| * 7f5eda0e315b ptp: Add error handling for adjfine callback in ptp_clock_adjtime
| * ad28612ebae1 netfilter: x_tables: fix LED ID check in led_tg_check()
| * 0b2cbed82b7c ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
| * 273cab979da1 can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics
| * 265f8341470f can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL
| * 601ec0003c17 watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart()
| * 05bed96e4cb0 iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call
| * 4715e23b3a7f drm/etnaviv: flush shader L1 cache after user commandstream
| * c1406d8329f5 btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
| * 2d505a801e57 nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
| * 7fd29d284b55 nfsd: make sure exp active before svc_export_show
| * 1f53e8400b13 dm thin: Add missing destroy_work_on_stack()
| * c6ac663c92c8 PCI: keystone: Add link up check to ks_pcie_other_map_bus()
| * 093ecc6d82ff i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
| * aa10c746e79a scsi: ufs: exynos: Fix hibern8 notify callbacks
| * a1f2aff064ef util_macros.h: fix/rework find_closest() macros
| * afc1e3c00b3f ad7780: fix division by zero in ad7780_write_raw()
| * 6fd018aa168e btrfs: ref-verify: fix use-after-free after invalid ref action
| * 6f3821acd7c3 quota: flush quota_release_work upon quota writeback
| * 366e55e91fe9 octeontx2-pf: Fix out-of-bounds read in otx2_get_fecparam()
| * 442dadf32d1c ASoC: fsl_micfil: fix the naming style for mask definition
| * 971b48934577 sh: intc: Fix use-after-free bug in register_intc_controller()
| * 86a1f9fa2480 sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
| * 8c06a00a9be6 SUNRPC: Replace internal use of SOCKWQ_ASYNC_NOSPACE
| * a4b153bdaad5 sunrpc: remove unnecessary test in rpc_task_set_client()
| * 3ccfa8269fae SUNRPC: Convert rpc_client refcount to use refcount_t
| * e2730edfff6b SUNRPC: correct error code comment in xs_tcp_setup_socket()
| * f69fb61c69a0 nfs: ignore SB_RDONLY when mounting nfs
| * bd4624d73373 modpost: remove incorrect code in do_eisa_entry()
| * b0660da68491 rtc: ab-eoz9: don't fail temperature reads on undervoltage notification
| * 7f5a2ed5c181 9p/xen: fix release of IRQ
| * fa365f688014 9p/xen: fix init sequence
| * 57ee79e9c94c block: return unsigned int from bdev_io_min
| * 25ec6cd751c9 jffs2: fix use of uninitialized variable
| * 8d8b3f5f4cbf ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
| * 04c0b0f37617 ubi: fastmap: Fix duplicate slab cache names while attaching
| * 36b25baf96b8 ubifs: Correct the total block count by deducting journal reservation
| * 0d68e8514d90 rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
| * cd154812858d rtc: abx80x: Fix WDT bit position of the status register
| * c48db3147c14 rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq()
| * 5237a297ffd3 NFSv4.0: Fix a use-after-free problem in the asynchronous open()
| * 2365f57820c0 um: Always dump trace for specified task in show_stack
| * 634b3c3d0b5c um: Fix the return value of elf_core_copy_task_fpregs
| * e6102b72edc4 um: Fix potential integer overflow during physmem setup
| * 52ee41452527 rpmsg: glink: Propagate TX failures in intentless mode as well
| * 02999e135b01 SUNRPC: make sure cache entry active before cache_show
| * 3c5f545c9a1f NFSD: Prevent a potential integer overflow
| * a44a4260a28c lib: string_helpers: silence snprintf() output truncation warning
| * 8ceb21d76426 usb: dwc3: gadget: Fix looping of queued SG entries
| * a98340265f28 usb: dwc3: gadget: Fix checking for number of TRBs left
| * 3591fe07aa53 ALSA: hda/realtek: Apply quirk for Medion E15433
| * 99af54eb0c96 ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max
| * 820bc3f297e8 ALSA: hda/realtek: Set PCBeep to default value for ALC274
| * ee68e7bd8022 ALSA: hda/realtek: Update ALC225 depop procedure
| * 03a469024f67 media: v4l2-core: v4l2-dv-timings: check cvt/gtf result
| * d7408a052aa1 media: wl128x: Fix atomicity violation in fmc_send_cmd()
| * f74b360a012a HID: wacom: Interpret tilt data from Intuos Pro BT as signed values
| * 2d2192fd2e6b block: fix ordering between checking BLK_MQ_S_STOPPED request adding
| * dad458e77540 arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled
| * 77755dc95ff2 sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
| * 35f8f72b4579 um: vector: Do not use drvdata in release
| * 3997d11fd996 serial: 8250: omap: Move pm_runtime_get_sync
| * 6be99d4c117b um: net: Do not use drvdata in release
| * 509ba8746f81 um: ubd: Do not use drvdata in release
| * 0f6737cad88b ubi: wl: Put source PEB into correct list if trying locking LEB failed
| * fb6d3c6c1218 platform/chrome: cros_ec_typec: fix missing fwnode reference decrement
| * 11b414ff9ab4 spi: Fix acpi deferred irq probe
| * 2e151b8ca316 netfilter: ipset: add missing range check in bitmap_ip_uadt
| * fa0e202e23ff Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit"
| * 0ff91b3bf53e serial: sh-sci: Clean sci_ports[0] after at earlycon exit
| * b12869cab514 Revert "usb: gadget: composite: fix OS descriptors w_value logic"
| * 5be4bc1c73ca driver core: bus: Fix double free in driver API bus_register()
| * e844bccad7ee Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}()
| * a26842e4683f exfat: fix uninit-value in __exfat_get_dentry_set
| * 7fc42f249daf locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass()
| * 0b9622163926 tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler
| * f856246ff6da apparmor: test: Fix memory leak for aa_unpack_strdup()
| * b9322408d83a comedi: Flush partial mappings in error case
| * a4236cc4f952 fsnotify: fix sending inotify event with unexpected filename
| * da6e6ff1f6c5 PCI: Fix use-after-free of slot->bus on hot remove
| * 5442dbd3342a KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status
| * 1a89ef73b510 crypto: x86/aegis128 - access 32-bit arguments as 32-bit
| * e8f728442dd5 perf/x86/intel/pt: Fix buffer full but size is 0 case
| * 626a8b956719 ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata()
| * bbf3f1fd8a0a jfs: xattr: check invalid xattr size more strictly
| * ea0527d5cc61 ext4: fix FS_IOC_GETFSMAP handling
| * 442c6f05d94e ext4: supress data-race warnings in ext4_free_inodes_{count,set}()
| * 62dc01c83fa7 ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
| * 03d68e2d244c soc: qcom: socinfo: fix revision check in qcom_socinfo_probe()
| * 4c9fded47888 usb: ehci-spear: fix call balance of sehci clk handling routines
| * 0aa9e30b5b4a xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
| * e47f0e95441b apparmor: fix 'Do simple duplicate message elimination'
| * f89f677adc78 ALSA: hda/realtek: Update ALC256 depop procedure
| * 6e99925d8548 ALSA: hda/realtek - Add type for ALC287
| * 9f26a607d846 staging: greybus: uart: clean up TIOCGSERIAL
| * 7bf3e45ea60b misc: apds990x: Fix missing pm_runtime_disable()
| * 8a960584638f USB: chaoskey: Fix possible deadlock chaoskey_list_lock
| * bb37389d14f4 USB: chaoskey: fail open after removal
| * 2e72f53f740a usb: yurex: make waiting on yurex_write interruptible
| * 30b9a7786c48 usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read()
| * 653903e36ca2 iio: light: al3010: Fix an error handling path in al3010_probe()
| * 75e6dc33f16a ipmr: fix tables suspicious RCU usage
| * e5dffbd159ef ipmr: convert /proc handlers to rcu_read_lock()
| * a9615376a999 bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
| * 6b41c5627117 net: hsr: fix hsr_init_sk() vs network/transport headers.
| * 1564c7ed9d29 net: introduce a netdev feature for UDP GRO forwarding
| * 4654bcb686ac spi: atmel-quadspi: Fix register name in verbose logging function
| * b58678e3f243 net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken
| * 3dbdb3f85b74 marvell: pxa168_eth: fix call balance of pep->clk handling routines
| * 882ea20ce07c net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration
| * b18ab1198587 tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets
| * 6728375984cb net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device
| * c399dd6e7042 power: supply: bq27xxx: Fix registers of bq27426
| * c5351bfba7b9 power: supply: bq27xxx: Support CHARGE_NOW for bq27z561/bq28z610/bq34z100
| * da4008a289e1 power: supply: core: Remove might_sleep() from power_supply_put()
| * 70f1bad32127 fs_parser: update mount_api doc to match function signature
| * 0918f5643fc6 vfio/pci: Properly hide first-in-list PCIe extended capability
| * 145482f4c894 vdpa/mlx5: Fix suboptimal range on iotlb iteration
| * eb681998c889 NFSD: Fix nfsd4_shutdown_copy()
| * 9d4f174342a7 NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir()
| * 752a75811f27 NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
| * 9df83cc000ed remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region
| * b5ba1b37142f rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length
| * 295cb2524309 rpmsg: glink: Fix GLINK command prefix
| * 9761e51e1d43 rpmsg: glink: Send READ_NOTIFY command in FIFO full case
| * 3dd661b963a3 rpmsg: glink: Add TX_DATA_CONT command while sending
| * e72735fcce17 perf trace: Avoid garbage when not printing a syscall's arguments
| * 10eb66d4f295 perf trace: Do not lose last events in a race
| * 68ccc1830e9d m68k: coldfire/device.c: only build FEC when HW macros are defined
| * 2255a994d6f1 m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x
| * 10f14161e830 perf trace: avoid garbage when not printing a trace event's arguments
| * af87c2069952 f2fs: check curseg->inited before write_sum_page in change_curseg
| * c6d54485cf81 f2fs: remove the unused flush argument to change_curseg
| * 5bb54d3b377e f2fs: open code allocate_segment_by_default
| * c6ad7333e530 f2fs: remove struct segment_allocation default_salloc_ops
| * a7e306f7c32d f2fs: avoid using native allocate_segment_by_default()
| * 6e5de38f605c f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block
| * 43b2e068aef4 PCI: cpqphp: Fix PCIBIOS_* return value confusion
| * 1fe390f27875 PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads
| * edb4833a3838 perf probe: Correct demangled symbols in C++ program
| * 0b04b48e4cc2 perf probe: Fix libdw memory leak
| * 26db806fa23e perf cs-etm: Don't flush when packet_queue fills up
| * c751d28b403f clk: clk-axi-clkgen: make sure to enable the AXI bus clock
| * a68e4f76ee85 clk: axi-clkgen: use devm_platform_ioremap_resource() short-hand
| * 43afa76e6efe dt-bindings: clock: axi-clkgen: include AXI clk
| * fc7ef5873472 dt-bindings: clock: adi,axi-clkgen: convert old binding to yaml format
| * 29216bb390e3 fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
| * d161e5ea0ca7 fbdev/sh7760fb: Alloc DMA memory from hardware device
| * 6f1fabc9e331 powerpc/kexec: Fix return of uninitialized variable
| * fd57d992f371 powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static
| * 66b7ddd1804e ocfs2: fix uninitialized value in ocfs2_file_read_iter()
| * bd715e191d44 RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
| * a4d2011cbe03 scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
| * a56777a3ef5b scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
| * e3b9ba55c18f scsi: fusion: Remove unused variable 'rc'
| * ef2c2580189e scsi: bfa: Fix use-after-free in bfad_im_module_exit()
| * cc30125eb6b6 mfd: rt5033: Fix missing regmap_del_irq_chip()
| * 896927b0157a RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey
| * 6956c0e7346c powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
| * 54cb5fa850f9 mtd: rawnand: atmel: Fix possible memory leak
| * c912aae5363a cpufreq: loongson2: Unregister platform_driver on failure
| * 61d590d7076b mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices
| * c472b55cc0bc mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device
| * 0b648968bfa4 mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
| * 48d3964f2bcd mfd: intel_soc_pmic_bxtwc: Use dev_err_probe()
| * 2630b18bed7d mfd: da9052-spi: Change read-mask to write-mask
| * b86340df10b1 mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race
| * a85e5215609d powerpc/vdso: Flag VDSO64 entry points as functions
| * 62a8d90e3221 trace/trace_event_perf: remove duplicate samples on the first tracepoint event
| * 49e8a0e07b02 wireguard: selftests: load nf_conntrack if not present
| * 63bc9a42a02e netpoll: Use rcu_access_pointer() in netpoll_poll_lock
| * fb91ce37dc9a Bluetooth: fix use-after-free in device_for_each_child()
| * 49de4ac80427 driver core: Introduce device_find_any_child() helper
| * f2d06d4e129e ALSA: 6fire: Release resources at card release
| * 4dd821dcbfce ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
| * bf0aa35a7cb8 ALSA: us122l: Use snd_card_free_when_closed() at disconnection
| * 24fe9f7ca83e ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
| * d5a733ee2624 ALSA: usx2y: Cleanup probe and disconnect callbacks
| * cfb1f6bc2eed ALSA: usx2y: Coding style fixes
| * 9a70db03857a ALSA: usx2y: Fix spaces
| * 5674ae441c89 net: rfkill: gpio: Add check for clk_enable()
| * b751f3423fbd drm/amdkfd: Fix wrong usage of INIT_WORK()
| * 6543a34f34a1 selftests: net: really check for bg process completion
| * 1df5d631ba9e bpf, sockmap: Fix sk_msg_reset_curr
| * d26d977633d1 bpf, sockmap: Several fixes to bpf_msg_pop_data
| * 2b4530ecc018 bpf, sockmap: Several fixes to bpf_msg_push_data
| * 5a0ae8e4f79c selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap
| * 78eb4af79e8a selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap
| * 74d2b00f488f selftests, bpf: Add one test for sockmap with strparser
| * 3e35560e80a9 selftests/bpf: Fix SENDPAGE data logic in test_sockmap
| * a9fa0d2ce890 selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap
| * 224b9bc4977c netlink: typographical error in nlmsg_type constants definition
| * 59362f51f4c2 drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk()
| * 3fd17a47ee72 wifi: wfx: Fix error handling in wfx_core_init()
| * 67d32d63c058 drm/etnaviv: hold GPU lock across perfmon sampling
| * 02aac657c48e drm/etnaviv: fix power register offset on GC300
| * 17551e3d94b7 drm/etnaviv: dump: fix sparse warnings
| * 04c0cd65a844 drm/etnaviv: Request pages from DMA32 zone on addressing_limited
| * 54163a35fe44 drm/etnaviv: rework linear window offset calculation
| * e5e10c00610d drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq()
| * e44d23fa0dc6 drm/panfrost: Remove unused id_mask from struct panfrost_model
| * 5ff9de1f2712 octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
| * 2d1648603752 octeontx2-pf: ethtool fec mode support
| * 8cafe71ad0fb octeontx2-af: Add new CGX_CMD to get PHY FEC statistics
| * 9bb714350200 octeontx2-af: forward error correction configuration
| * a5f3aebadcb7 octeontx2-pf: Calculate LBK link instead of hardcoding
| * 4dce1962411f octeontx2-af: Mbox changes for 98xx
| * 50c56b0f5fe3 drm: fsl-dcu: enable PIXCLK on LS1021A
| * b773f406b6de drm/fsl-dcu: Convert to Linux IRQ interfaces
| * 5fa329c44e1e wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
| * 4496d25157c9 selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap
| * addabcb1bd37 selftests/bpf: Fix msg_verify_data in test_sockmap
| * d4f54c609d28 drm/bridge: tc358767: Fix link properties discovery
| * e4decf4c8b56 netdevsim: copy addresses for both in and out paths
| * 7fd24ee949bd netdevsim: rely on XFRM state direction instead of flags
| * 76ff31c0113d xfrm: store and rely on direction to construct offload flags
| * 837f37f0cf39 xfrm: rename xfrm_state_offload struct to allow reuse
| * bfdad9de02a3 bpf: Fix the xdp_adjust_tail sample prog issue
| * 7706afc21304 ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode
| * 5e3385bca11a ASoC: fsl_micfil: fix regmap_write_bits usage
| * b2a72a772ef0 ASoC: fsl_micfil: use GENMASK to define register bit fields
| * 226fc91c860b ASoC: fsl_micfil: do not define SHIFT/MASK for single bits
| * fa55ed175c7b ASoC: fsl_micfil: Drop unnecessary register read
| * 78a71b056c2c dt-bindings: vendor-prefixes: Add NeoFidelity, Inc
| * 54550eeb8f86 wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2
| * f3749bc13cb3 wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1
| * 145f3ac8c92e drm/v3d: Address race-condition in MMU flush
| * c992e517c8a6 drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq()
| * 0bde5b6e230a drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq()
| * d1ae370b82e9 wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq()
| * 29ee7d6fa18f wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq()
| * 1d602e4b6dcb drm/omap: Fix locking in omap_gem_new_dmabuf()
| * c941af142200 wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
| * ba35d3b212fb drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused
| * 0c24b82bc4d1 media: atomisp: Add check for rgby_data memory allocation failure
| * 4478f599a283 media: atomisp: remove #ifdef HAS_NO_HMEM
| * 380c0e1d96f3 firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
| * 02dff60d0c99 selftests/resctrl: Protect against array overrun during iMC config parsing
| * 5f0e91a5f4ed regmap: irq: Set lockdep class for hierarchical IRQ domains
| * 409b1e428cf9 pmdomain: ti-sci: Add missing of_node_put() for args.np
| * dd1985f9752f ARM: dts: cubieboard4: Fix DCDC5 regulator constraints
| * 9db3ef898a6e pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle
| * e8174fb173cc cgroup/bpf: only cgroup v2 can be attached by bpf programs
| * 067d0c56630d Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline"
| * 2295468c0c20 arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad
| * 1b07333bbc3a arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4
| * 839e76cea2ab tpm: fix signed/unsigned bug when checking event logs
| * dad86eb91cf9 mmc: mmc_spi: drop buggy snprintf()
| * 748557ca7dc9 soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
| * c9c6a62c91e9 soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq()
| * f9dc2ae5a2cd spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq()
| * 85cf7a3c6f7d spi: spi-fsl-lpspi: downgrade log level for pio mode
| * ef1db3d1d2bf clocksource/drivers:sp804: Make user selectable
| * d08932bb6e38 clkdev: remove CONFIG_CLKDEV_LOOKUP
| * e48e204f364a kcsan, seqlock: Fix incorrect assumption in read_seqbegin()
| * dc684d966f48 time: Fix references to _msecs_to_jiffies() handling of values
| * 069601e4b657 crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()
| * 28f8ffa945f7 crypto: bcm - add error check in the ahash_hmac_init function
| * dead96e1c748 crypto: caam - add error check to caam_rsa_set_priv_key_form
| * a56860294ccd crypto: cavium - Fix the if condition to exit loop after timeout
| * a92ccd3618e4 crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
| * 99ec5eb5bbf3 EDAC/fsl_ddr: Fix bad bit shift operations
| * e0269ea7a628 EDAC/bluefield: Fix potential integer overflow
| * 29551174590e firmware: google: Unregister driver_info on failure
| * cc386170b331 crypto: caam - Fix the pointer passed to caam_qi_shutdown()
| * e8a2b1c1c2ea hfsplus: don't query the device logical block size multiple times
| * 3cab4bbc6691 s390/syscalls: Avoid creation of arch/arch/ directory
| * cf9efea8c092 acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block()
| * 6c772871c2e5 arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG
| * ff01ac3e766c m68k: mvme147: Reinstate early console
| * f65ca93b859d m68k: mvme16x: Add and use "mvme16x.h"
| * 21f46b07c20b m68k: mvme147: Fix SCSI controller IRQ numbers
| * 452f9ddd12be nvme-pci: fix freeing of the HMB descriptor table
| * d3df9f26cff9 initramfs: avoid filename buffer overrun
| * 17f35a6c9391 mips: asm: fix warning when disabling MIPS_FP_SUPPORT
| * 72d6dd978f1d x86/xen/pvh: Annotate indirect branch as safe
| * 8ce88918e4d8 kselftest/arm64: mte: fix printf type warnings about longs
| * 8025d65d6242 x86/barrier: Do not serialize MSR accesses on AMD
| * 67be3cd92aa0 nvme: fix metadata handling in nvme-passthrough
| * 73b078e3314d cifs: Fix buffer overflow when parsing NFS reparse points
| * 36741bfcfbff rcu-tasks: Idle tasks on offline CPUs are in quiescent states
| * e01ff1251c77 ipmr: Fix access to mfc_cache_list without lock held
| * e8529cfd7086 ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry
| * e05e8f54d23f proc/softirqs: replace seq_printf with seq_put_decimal_ull_width
| * 444c9d41210c ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div()
| * ddd61392263d ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate()
| * a8ebe0a22527 can: j1939: fix error in J1939 documentation.
| * f6b4294a0249 regulator: rk808: Add apply_bit for BUCK3 on RK809
| * b070a9e0dbf3 soc: qcom: Add check devm_kasprintf() returned value
| * 6df3ee9073cd net: usb: qmi_wwan: add Quectel RG650V
| * bc014d8d6561 x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB
| * f61da9401963 ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13
| * 501ac2d1aae6 selftests/watchdog-test: Fix system accidentally reset after watchdog-test
| * 6b5737b14af1 mac80211: fix user-power when emulating chanctx
| * 9347d7c552c8 ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet
| * 43323a4e5b3f mm: resolve faulty mmap_region() error path behaviour
| * a32712d54c61 mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling
| * 7a450540c82f mm: unconditionally close VMAs on error
| * f68a0236337e mm: avoid unsafe VMA hook invocation when error arises on mmap hook
| * 57cc8d253099 mm: revert "mm: shmem: fix data-race in shmem_getattr()"
* | d4fc80b9cb93 Merge ed98d26021db ("NFSD: Never decrement pending_async_copies on error") into android12-5.10-lts
|\|
| * ed98d26021db NFSD: Never decrement pending_async_copies on error
| * 059434d23c45 NFSD: Initialize struct nfsd4_copy earlier
| * 9e52ff544e0b NFSD: Limit the number of concurrent async COPY operations
| * 4fcb25459430 NFSD: Async COPY result needs to return a write verifier
| * 7f9b91ed15df NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point
* | cb9e797d9422 Merge 2e7ce4e50d14 ("media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set") into android12-5.10-lts
|\|
| * 2e7ce4e50d14 media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
| * c29a44d9a402 mmc: core: fix return value check in devm_mmc_alloc_host()
| * b22ddca004d3 drm/bridge: tc358768: Fix DSI command tx
| * 938c13740f8b Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
| * 0a5014ad37c7 nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
| * 344558d81c7c ocfs2: fix UBSAN warning in ocfs2_verify_volume()
| * b017697a517f nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
| * d4b42f926adc KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN
| * c96f90911dd1 vdpa/mlx5: Fix PA offset with unaligned starting iotlb map
| * 28d4ed71ae0b ocfs2: uncache inode which has failed entering the group
| * 5fe8bcc82f1d x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y
| * ffad2ac8c859 net/mlx5e: kTLS, Fix incorrect page refcounting
| * a508c74ceae2 net/mlx5: fs, lock FTE when checking if active
| * 6e3f2c512d2b netlink: terminate outstanding dump on socket close
| * b5214ca796fb clk: qcom: gcc-qcs404: fix initial rate of GPLL3
| * 3e7f845614ee leds: lp55xx: Remove redundant test for invalid channel number
| * 5dabb7af57bc ftrace: Fix regression with module command in stack_trace_filter
| * 5f86e79c0b22 ovl: Filter invalid inodes with missing lookup function
| * 2cc30545dd3a media: uvcvideo: Stop stream during unregister
| * 74a65313578b media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
| * da56bb858954 media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate()
| * 580d1e5cf2cd media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled
| * 5a53f97cd597 media: ts2020: fix null-ptr-deref in ts2020_probe()
| * 5c9ab34c87af media: i2c: tc358743: Fix crash in the probe error path when using polling
| * b240a0472f8e arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer
* 9c3241c2874a Merge branch 'android12-5.10' into android12-5.10-lts

Change-Id: I0ee1514b567fb164420092bc59edcf957fda60be
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@google.com>
      c1f6eb35
    • Suzuki K Poulose's avatar
      UPSTREAM: coresight: etm4x: Do not hardcode IOMEM access for register restore · 384bf306
      Suzuki K Poulose authored 
      
When we restore the register state for ETM4x, while coming back
from CPU idle, we hardcode IOMEM access. This is wrong and could
blow up for an ETM with system instructions access (and for ETE).

Bug: 254441685
Fixes: f5bd5236 ("coresight: etm4x: Convert all register accesses")
Reported-by: default avatarYabin Cui <yabinc@google.com>
Reviewed-by: default avatarMike Leach <mike.leach@linaro.org>
Signed-off-by: default avatarSuzuki K Poulose <suzuki.poulose@arm.com>
Tested-by: default avatarYabin Cui <yabinc@google.com>
Link: https://lore.kernel.org/r/20240412142702.2882478-2-suzuki.poulose@arm.com


(cherry picked from commit 1e7ba33f)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: Id73e801dbe289464fd7e422f25301cb0df2d369e
      384bf306
    • Anshuman Khandual's avatar
      UPSTREAM: coresight: etm4x: Fix unbalanced pm_runtime_enable() · 0542a84d
      Anshuman Khandual authored 
      
There is an unbalanced pm_runtime_enable() in etm4_probe_platform_dev()
when etm4_probe() fails. This problem can be observed via the coresight
etm4 module's (load -> unload -> load) sequence when etm4_probe() fails
in etm4_probe_platform_dev().

[   63.379943] coresight-etm4x 7040000.etm: Unbalanced pm_runtime_enable!
[   63.393630] coresight-etm4x 7140000.etm: Unbalanced pm_runtime_enable!
[   63.407455] coresight-etm4x 7240000.etm: Unbalanced pm_runtime_enable!
[   63.420983] coresight-etm4x 7340000.etm: Unbalanced pm_runtime_enable!
[   63.420999] coresight-etm4x 7440000.etm: Unbalanced pm_runtime_enable!
[   63.441209] coresight-etm4x 7540000.etm: Unbalanced pm_runtime_enable!
[   63.454689] coresight-etm4x 7640000.etm: Unbalanced pm_runtime_enable!
[   63.474982] coresight-etm4x 7740000.etm: Unbalanced pm_runtime_enable!

This fixes the above problem - with an explicit pm_runtime_disable() call
when etm4_probe() fails during etm4_probe_platform_dev().

Bug: 254441685
Cc: Lorenzo Pieralisi <lpieralisi@kernel.org>
Cc: Hanjun Guo <guohanjun@huawei.com>
Cc: Sudeep Holla <sudeep.holla@arm.com>
Cc: "Rafael J. Wysocki" <rafael@kernel.org>
Cc: Len Brown <lenb@kernel.org>
Cc: Suzuki K Poulose <suzuki.poulose@arm.com>
Cc: Mike Leach <mike.leach@linaro.org>
Cc: James Clark <james.clark@arm.com>
Cc: Leo Yan <leo.yan@linaro.org>
Cc: linux-acpi@vger.kernel.org
Cc: linux-arm-kernel@lists.infradead.org
Cc: linux-kernel@vger.kernel.org
Cc: coresight@lists.linaro.org
Fixes: 5214b563 ("coresight: etm4x: Add support for sysreg only devices")
Reviewed-by: default avatarJames Clark <james.clark@arm.com>
Signed-off-by: default avatarAnshuman Khandual <anshuman.khandual@arm.com>
Signed-off-by: default avatarSuzuki K Poulose <suzuki.poulose@arm.com>
Link: https://lore.kernel.org/r/20240314055843.2625883-2-anshuman.khandual@arm.com


(cherry picked from commit caa41c47)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: Ia3670ff733938f8cef943c5f2d5ff8b05438bf90
      0542a84d
    • Arnd Bergmann's avatar
      UPSTREAM: ubsan: fix unused variable warning in test module · 30540d85
      Arnd Bergmann authored 
      
This is one of the drivers with an unused variable that is marked 'const'.
Adding a __used annotation here avoids the warning and lets us enable
the option by default:

lib/test_ubsan.c:137:28: error: unused variable 'skip_ubsan_array' [-Werror,-Wunused-const-variable]

Bug: 254441685
Fixes: 4a26f49b ("ubsan: expand tests and reporting")
Signed-off-by: default avatarArnd Bergmann <arnd@arndb.de>
Link: https://lore.kernel.org/r/20240403080702.3509288-3-arnd@kernel.org


Signed-off-by: default avatarKees Cook <keescook@chromium.org>
(cherry picked from commit bbda3ba6)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: I983f90764f748c9fa747287703ba5219e6cc9ad8
      30540d85
    • Daniel Lezcano's avatar
      BACKPORT: powercap: dtpm_cpu: Fix error check against freq_qos_add_request() · 96b23148
      Daniel Lezcano authored 
      
The caller of the function freq_qos_add_request() checks again a non
zero value but freq_qos_add_request() can return '1' if the request
already exists. Therefore, the setup function fails while the QoS
request actually did not failed.

Fix that by changing the check against a negative value like all the
other callers of the function.

Bug: 254441685
Fixes: 0e8f68d7 ("Add CPU energy model based support")
Signed-off-by: default avatarDaniel Lezcano <daniel.lezcano@linaro.org>
Signed-off-by: default avatarRafael J. Wysocki <rafael.j.wysocki@intel.com>
(cherry picked from commit b50155cb)
[Lee: Fixed trivial surrounding diff conflict - no functional changes intended]
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: I7ae72beddcd6c56e51baf6570016b30a33af452d
      96b23148
    • Udipto Goswami's avatar
      UPSTREAM: usb: gadget: ncm: Fix indentations in documentation of NCM section · 280f4071
      Udipto Goswami authored 
      
Currently, the section of NCM which describes attributes are having wrong
indentation.

Fix this by following the correct format recommended.

Bug: 254441685
Fixes: 1900daee ("usb: gadget: ncm: Add support to update wMaxSegmentSize via configfs")
Reported-by: default avatarStephen Rothwell <sfr@canb.auug.org.au>
Closes: https://lore.kernel.org/all/20240108160221.743649b5@canb.auug.org.au/


Signed-off-by: default avatarUdipto Goswami <quic_ugoswami@quicinc.com>
Link: https://lore.kernel.org/r/20240108132720.7786-1-quic_ugoswami@quicinc.com


Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 20d03ae3)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: I687d71d70933bb3784860c91529eec9205750ee4
      280f4071
    • Samuel Holland's avatar
      BACKPORT: scs: add CONFIG_MMU dependency for vfree_atomic() · c45f62b1
      Samuel Holland authored 
      The shadow call stack implementation fails to build without CONFIG_MMU:

  ld.lld: error: undefined symbol: vfree_atomic
  >>> referenced by scs.c
  >>>               kernel/scs.o:(scs_free) in archive vmlinux.a

Bug: 254441685
Link: https://lkml.kernel.org/r/20240122175204.2371009-1-samuel.holland@sifive.com


Fixes: a2abe7cb ("scs: switch to vmapped shadow stacks")
Signed-off-by: default avatarSamuel Holland <samuel.holland@sifive.com>
Reviewed-by: default avatarSami Tolvanen <samitolvanen@google.com>
Cc: Will Deacon <will@kernel.org>
Cc: <stable@vger.kernel.org>
Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
(cherry picked from commit 6f9dc684)
[Lee: Fixed trivial surrounding diff conflict - no functional changes intended]
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: I61bbbd6461ccf453524bb2ea625770d4140a848f
      c45f62b1
    • Tanzir Hasan's avatar
      UPSTREAM: mm/damon/vaddr: change asm-generic/mman-common.h to linux/mman.h · beab58a2
      Tanzir Hasan authored 
      asm-generic/mman-common.h can be replaced by linux/mman.h and the file
will still build correctly.  It is an asm-generic file which should be
avoided if possible.

Bug: 254441685
Link: https://lkml.kernel.org/r/20231221-asmgenericvaddr-v1-1-742b170c914e@google.com


Fixes: 6dea8add ("mm/damon/vaddr: support DAMON-based Operation Schemes")
Signed-off-by: default avatarTanzir Hasan <tanzirh@google.com>
Suggested-by: default avatarAl Viro <viro@zeniv.linux.org.uk>
Reviewed-by: default avatarSeongJae Park <sj@kernel.org>
Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
(cherry picked from commit 1ae41dff)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: If92c0124ddaefe2510f95a0ae12b6c88b7e9acf9
      beab58a2
    • Jerome Brunet's avatar
      UPSTREAM: ASoC: hdmi-codec: fix missing report for jack initial status · 73d985d1
      Jerome Brunet authored 
      
This fixes a problem introduced while fixing ELD reporting with no jack
set.

Most driver using the hdmi-codec will call the 'plugged_cb' callback
directly when registered to report the initial state of the HDMI connector.

With the commit mentionned, this occurs before jack is ready and the
initial report is lost for platforms actually providing a jack for HDMI.

Fix this by storing the hdmi connector status regardless of jack being set
or not and report the last status when jack gets set.

With this, the initial state is reported correctly even if it is
disconnected. This was not done initially and is also a fix.

Bug: 254441685
Fixes: 15be353d ("ASoC: hdmi-codec: register hpd callback on component probe")
Reported-by: default avatarZhengqiao Xia <xiazhengqiao@huaqin.corp-partner.google.com>
Closes: https://lore.kernel.org/alsa-devel/CADYyEwTNyY+fR9SgfDa-g6iiDwkU3MUdPVCYexs2_3wbcM8_vg@mail.gmail.com/


Cc: Hsin-Yi Wang <hsinyi@google.com>
Tested-by: default avatarZhengqiao Xia <xiazhengqiao@huaqin.corp-partner.google.com>
Signed-off-by: default avatarJerome Brunet <jbrunet@baylibre.com>
Link: https://msgid.link/r/20231218145655.134929-1-jbrunet@baylibre.com


Signed-off-by: default avatarMark Brown <broonie@kernel.org>
(cherry picked from commit 025222a9)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: I2f0f8e52bde5f0fa2cafb4a78b31637e140e560a
      73d985d1
    • Dan Vacura's avatar
      UPSTREAM: usb: gadget: uvc: fix dropped frame after missed isoc · 1aa6d763
      Dan Vacura authored 
      
With the re-use of the previous completion status in 0d1c407b
("usb: dwc3: gadget: Return proper request status") it could be possible
that the next frame would also get dropped if the current frame has a
missed isoc error. Ensure that an interrupt is requested for the start
of a new frame.

Bug: 254441685
Fixes: fc78941d ("usb: gadget: uvc: decrease the interrupt load to a quarter")
Cc: <stable@vger.kernel.org>
Signed-off-by: default avatarDan Vacura <w36195@motorola.com>
Link: https://lore.kernel.org/r/20221018215044.765044-2-w36195@motorola.com


Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 8e8e923a49967b798e7d69f1ce9eff1dd2533547)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: I5369ea7ef5fb76385241c8d137ee2907eb443c5a
      1aa6d763
    • Yuezhang Mo's avatar
      BACKPORT: exfat: fix overflow for large capacity partition · 4c22b859
      Yuezhang Mo authored 
      
Using int type for sector index, there will be overflow in a large
capacity partition.

For example, if storage with sector size of 512 bytes and partition
capacity is larger than 2TB, there will be overflow.

Bug: 254441685
Fixes: 1b613838 ("exfat: reduce block requests when zeroing a cluster")
Cc: stable@vger.kernel.org # v5.19+
Signed-off-by: default avatarYuezhang Mo <Yuezhang.Mo@sony.com>
Reviewed-by: default avatarAndy Wu <Andy.Wu@sony.com>
Reviewed-by: default avatarAoyama Wataru <wataru.aoyama@sony.com>
Acked-by: default avatarSungjong Seo <sj1557.seo@samsung.com>
Signed-off-by: default avatarNamjae Jeon <linkinjeon@kernel.org>
(cherry picked from commit 2e9ceb67)
[Lee: Fixed trivial surrounding diff conflict - no functional changes intended]
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: Ie3d1357020cac831ada221e0c734dbaa22767131
      4c22b859
    • Daniel Lee's avatar
      FROMGIT: f2fs: Introduce linear search for dentries · dea08dbb
      Daniel Lee authored 
      This patch addresses an issue where some files in case-insensitive
directories become inaccessible due to changes in how the kernel function,
utf8_casefold(), generates case-folded strings from the commit 5c26d2f1
("unicode: Don't special case ignorable code points").

F2FS uses these case-folded names to calculate hash values for locating
dentries and stores them on disk. Since utf8_casefold() can produce
different output across kernel versions, stored hash values and newly
calculated hash values may differ. This results in affected files no
longer being found via the hash-based lookup.

To resolve this, the patch introduces a linear search fallback.
If the initial hash-based search fails, F2FS will sequentially scan the
directory entries.

Fixes: 5c26d2f1 ("unicode: Don't special case ignorable code points")
Link: https://bugzilla.kernel.org/show_bug.cgi?id=219586


Change-Id: Ib37b714040d6b969b3161c50e3c02205af7c688c
Signed-off-by: default avatarDaniel Lee <chullee@google.com>
Reviewed-by: default avatarChao Yu <chao@kernel.org>
Signed-off-by: default avatarJaegeuk Kim <jaegeuk@kernel.org>
(cherry picked from commit 91b587ba https://git.kernel.org/pub/scm/linux/kernel/git/jaegeuk/f2fs.git

 dev)
Bug: 384758596
Signed-off-by: default avatarDaniel Rosenberg <drosen@google.com>
      dea08dbb
  13. Jan 21, 2025
  15. Jan 16, 2025
  17. Jan 14, 2025
    • Chenghao Zhao's avatar
      ANDROID: GKI: Update symbol list for honor · 1d50fa14
      Chenghao Zhao authored 
      
Update symbol list for honor in android/abi_gki_aarch64_honor

2 Added functions:

  [A] 'function int netdev_get_name(net*, char*, int)'
  [A] 'function void tcp_send_active_reset(sock*, gfp_t)'

Bug: 334000512
Change-Id: If29a9a5587090d86c4d7b8be94aa42af9d89f9ed
Signed-off-by: default avatarChenghao Zhao <zhaochenghao@honor.com>
      1d50fa14
    • Dezhi Huang's avatar
      ANDROID: Allow vendor modules perform more operationson on sock. · 964c7bd0
      Dezhi Huang authored 
      
Export netdev_get_name, tcp_send_active_reset functions, allow vendor
modules perform more operations on socks and improve users' online
experience.When users browse websites or watch videos, we will sense
the bad sock is on which device, so that the sock can be switched to
another good device by us, so that the internet service will no longer
be stuck. In a similar scenario, if the user downloads from multiple
devices and the rate of one device is low,we can reset the TCP stream
with a lower rate and establish it on the device with a higher rate.

Bug: 334000512
Change-Id: I9ed90ea9fe6f3dc9f11ae1661ca9f2f5fdad5820
Signed-off-by: default avatarDezhi Huang <huangdezhi@hihonor.com>
(cherry picked from commit 21614c79)
(cherry picked from commit b5ee53c6)
(cherry picked from commit eeecbaa4)
      964c7bd0
  19. Jan 13, 2025
  21. Jan 12, 2025
    • Rui Chen's avatar
      ANDROID: ABI: update symbol list for honor · 21d5db41
      Rui Chen authored 
      
Leaf changes summary: 8 artifacts changed
Changed leaf types summary: 0 leaf type changed
Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 4 Added functions
Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 4 Added variables

4 Added functions:

  [A] 'function int __traceiter_android_vh_do_read_fault(void*, vm_fault*, unsigned long int)'
  [A] 'function int __traceiter_android_vh_filemap_map_pages(void*, file*, unsigned long int, unsigned long int, vm_fault_t)'
  [A] 'function int __traceiter_android_vh_filemap_read(void*, file*, loff_t, size_t)'
  [A] 'function int __traceiter_android_vh_should_fault_around(void*, vm_fault*, bool*)'

4 Added variables:

  [A] 'tracepoint __tracepoint_android_vh_do_read_fault'
  [A] 'tracepoint __tracepoint_android_vh_filemap_map_pages'
  [A] 'tracepoint __tracepoint_android_vh_filemap_read'
  [A] 'tracepoint __tracepoint_android_vh_should_fault_around'

Bug: 351175506
Bug: 384865438
Change-Id: I5ae29bb53f361cb89fb6d34464f074760359df21
Signed-off-by: default avatarRui Chen <chenrui9@honor.com>
      21d5db41
    • Sooyong Suk's avatar
      ANDROID: mm: add vendor hook in fault and read file · 577ed006
      Sooyong Suk authored 
      
Add a vendor hook to notify vendor module fault and read events.

Bug: 351175506
Bug: 384865438
Change-Id: I4c46e9e00aa5f5555fd42a6b0815563497658b34
Signed-off-by: default avatarSooyong Suk <s.suk@samsung.corp-partner.google.com>
(cherry picked from commit a9867d87)
Signed-off-by: default avatarRui Chen <chenrui9@honor.com>
      577ed006