Skip to content
Snippets Groups Projects
Select Git revision
0 results
Search by author
  • Any Author
0 authors
  1. Oct 25, 2024
  3. Oct 16, 2024
  5. Oct 15, 2024
    • Gabriel Krisman Bertazi's avatar
      UPSTREAM: unicode: Don't special case ignorable code points · 54bd602c
      Gabriel Krisman Bertazi authored 
      
We don't need to handle them separately. Instead, just let them
decompose/casefold to themselves.

Change-Id: I01c3f2c98ae4d84269586cec09f18239cbee0abb
Signed-off-by: default avatarGabriel Krisman Bertazi <krisman@suse.de>
(cherry picked from commit 5c26d2f1)
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@google.com>
Signed-off-by: default avatarLee Jones <joneslee@google.com>
      android14-6.1-2024-10_r2
      54bd602c
    • hao lv's avatar
      ANDROID: GKI: update symbol list for transsion · a16aca77
      hao lv authored 
      
INFO: 49 function symbol(s) added
  'int __percpu_counter_init(struct percpu_counter*, s64, gfp_t, struct lock_class_key*)'
  'int __traceiter_android_rvh_delayacct_init(void*, void*)'
  'int __traceiter_android_rvh_delayacct_tsk_free(void*, struct task_struct*)'
  'int __traceiter_android_rvh_delayacct_tsk_init(void*, struct task_struct*)'
  'int __traceiter_android_vh_delayacct_add_tsk(void*, struct taskstats*, struct task_struct*, int*)'
  'int __traceiter_android_vh_delayacct_blkio_end(void*, struct task_struct*)'
  'int __traceiter_android_vh_delayacct_blkio_start(void*, void*)'
  'int __traceiter_android_vh_delayacct_blkio_ticks(void*, struct task_struct*, __u64*)'
  'int __traceiter_android_vh_delayacct_compact_end(void*, void*)'
  'int __traceiter_android_vh_delayacct_compact_start(void*, void*)'
  'int __traceiter_android_vh_delayacct_freepages_end(void*, void*)'
  'int __traceiter_android_vh_delayacct_freepages_start(void*, void*)'
  'int __traceiter_android_vh_delayacct_swapin_end(void*, void*)'
  'int __traceiter_android_vh_delayacct_swapin_start(void*, void*)'
  'int __traceiter_android_vh_delayacct_thrashing_end(void*, bool*)'
  'int __traceiter_android_vh_delayacct_thrashing_start(void*, bool*)'
  'int __traceiter_android_vh_delayacct_wpcopy_end(void*, void*)'
  'int __traceiter_android_vh_delayacct_wpcopy_start(void*, void*)'
  'int __traceiter_android_vh_exit_mm(void*, struct mm_struct*)'
  'int _atomic_dec_and_lock_irqsave(atomic_t*, spinlock_t*, unsigned long*)'
  'void add_disk_randomness(struct gendisk*)'
  'void bio_uninit(struct bio*)'
  'struct gendisk* blk_mq_alloc_disk_for_queue(struct request_queue*, struct lock_class_key*)'
  'int block_read_full_folio(struct folio*, get_block_t*)'
  'struct bsg_device* bsg_register_queue(struct request_queue*, struct device*, const char*, bsg_sg_io_fn*)'
  'void bsg_unregister_queue(struct bsg_device*)'
  'void buffer_check_dirty_writeback(struct folio*, bool*, bool*)'
  'void call_rcu_hurry(struct callback_head*, rcu_callback_t)'
  'unsigned long clock_t_to_jiffies(unsigned long)'
  'int devcgroup_check_permission(short, u32, u32, short)'
  'int filemap_fdatawait_keep_errors(struct address_space*)'
  'bool folio_mark_dirty(struct folio*)'
  'void folio_unlock(struct folio*)'
  'void invalidate_bh_lrus()'
  'void mempool_exit(mempool_t*)'
  'int mempool_init(mempool_t*, int, mempool_alloc_t*, mempool_free_t*, void*)'
  'void percpu_counter_destroy(struct percpu_counter*)'
  'void percpu_ref_exit(struct percpu_ref*)'
  'int percpu_ref_init(struct percpu_ref*, percpu_ref_func_t*, unsigned int, gfp_t)'
  'bool percpu_ref_is_zero(struct percpu_ref*)'
  'void percpu_ref_kill_and_confirm(struct percpu_ref*, percpu_ref_func_t*)'
  'void percpu_ref_resurrect(struct percpu_ref*)'
  'void percpu_ref_switch_to_atomic_sync(struct percpu_ref*)'
  'void percpu_ref_switch_to_percpu(struct percpu_ref*)'
  'struct folio* read_cache_folio(struct address_space*, unsigned long, filler_t*, struct file*)'
  'int register_tracepoint_module_notifier(struct notifier_block*)'
  'int scsi_register_driver(struct device_driver*)'
  'void set_delayacct_enabled(bool)'
  'void trace_seq_puts(struct trace_seq*, const char*)'

19 variable symbol(s) added
  'struct tracepoint __tracepoint_android_rvh_delayacct_init'
  'struct tracepoint __tracepoint_android_rvh_delayacct_tsk_free'
  'struct tracepoint __tracepoint_android_rvh_delayacct_tsk_init'
  'struct tracepoint __tracepoint_android_vh_delayacct_add_tsk'
  'struct tracepoint __tracepoint_android_vh_delayacct_blkio_end'
  'struct tracepoint __tracepoint_android_vh_delayacct_blkio_start'
  'struct tracepoint __tracepoint_android_vh_delayacct_blkio_ticks'
  'struct tracepoint __tracepoint_android_vh_delayacct_compact_end'
  'struct tracepoint __tracepoint_android_vh_delayacct_compact_start'
  'struct tracepoint __tracepoint_android_vh_delayacct_freepages_end'
  'struct tracepoint __tracepoint_android_vh_delayacct_freepages_start'
  'struct tracepoint __tracepoint_android_vh_delayacct_swapin_end'
  'struct tracepoint __tracepoint_android_vh_delayacct_swapin_start'
  'struct tracepoint __tracepoint_android_vh_delayacct_thrashing_end'
  'struct tracepoint __tracepoint_android_vh_delayacct_thrashing_start'
  'struct tracepoint __tracepoint_android_vh_delayacct_wpcopy_end'
  'struct tracepoint __tracepoint_android_vh_delayacct_wpcopy_start'
  'struct tracepoint __tracepoint_android_vh_exit_mm'
  'struct cgroup_subsys io_cgrp_subsys'

Bug: 372173984
Bug: 373488657

Change-Id: Iba231c44acd0d1e5c6c8c19259ed3a3c4f8cb190
Signed-off-by: default avatarhao lv <hao.lv5@transsion.com>
(cherry picked from commit 311457e8)
      a16aca77
  7. Oct 01, 2024
  9. Sep 30, 2024
  11. Sep 27, 2024
  13. Sep 26, 2024
    • meitaogao's avatar
      ANDROID: GKI: Update KMI symbol list for ASR · bcc435d3
      meitaogao authored 
      
INFO: 9 function symbol(s) added
  'unsigned int kmem_cache_size(struct kmem_cache*)'
  'void media_device_unregister_entity(struct media_entity*)'
  'void* memset16(uint16_t*, uint16_t, size_t)'
  'const char* const* v4l2_ctrl_get_menu(u32)'
  'bool v4l2_ctrl_type_op_equal(const struct v4l2_ctrl*, union v4l2_ctrl_ptr, union v4l2_ctrl_ptr)'
  'void v4l2_ctrl_type_op_init(const struct v4l2_ctrl*, u32, union v4l2_ctrl_ptr)'
  'void v4l2_ctrl_type_op_log(const struct v4l2_ctrl*)'
  'void v4l2_m2m_buf_done_and_job_finish(struct v4l2_m2m_dev*, struct v4l2_m2m_ctx*, enum vb2_buffer_state)'
  'struct vb2_v4l2_buffer* v4l2_m2m_last_buf(struct v4l2_m2m_queue_ctx*)'

Bug: 369670477
Change-Id: I5c3fa32e903685836b7812d33df8ddd6b2c65054
Signed-off-by: default avatarmeitaogao <meitaogao@asrmicro.com>
      bcc435d3
  15. Sep 25, 2024
    • yipeng xiang's avatar
      ANDROID: GKI: Export a symbol “next_arg” for honor · 9e167c1c
      yipeng xiang authored 
      
Export a symbol “next_arg” in android/abi_gki_aarch64_honor

Bug: 368221985
Change-Id: I0bd8fc321752f0fa3d103b56510b33eadcb6e39b
Signed-off-by: default avataryipeng xiang <yipengxiang@honor.corp-partner.google.com>
      9e167c1c
    • Stephen Hemminger's avatar
      BACKPORT: netem: fix return value if duplicate enqueue fails · 4dcae85a
      Stephen Hemminger authored 
      
[ Upstream commit c07ff859 ]

There is a bug in netem_enqueue() introduced by
commit 5845f706 ("net: netem: fix skb length BUG_ON in __skb_to_sgvec")
that can lead to a use-after-free.

This commit made netem_enqueue() always return NET_XMIT_SUCCESS
when a packet is duplicated, which can cause the parent qdisc's q.qlen
to be mistakenly incremented. When this happens qlen_notify() may be
skipped on the parent during destruction, leaving a dangling pointer
for some classful qdiscs like DRR.

There are two ways for the bug happen:

- If the duplicated packet is dropped by rootq->enqueue() and then
  the original packet is also dropped.
- If rootq->enqueue() sends the duplicated packet to a different qdisc
  and the original packet is dropped.

In both cases NET_XMIT_SUCCESS is returned even though no packets
are enqueued at the netem qdisc.

The fix is to defer the enqueue of the duplicate packet until after
the original packet has been guaranteed to return NET_XMIT_SUCCESS.

Bug: 362391455
Fixes: 5845f706 ("net: netem: fix skb length BUG_ON in __skb_to_sgvec")
Reported-by: default avatarBudimir Markovic <markovicbudimir@gmail.com>
Signed-off-by: default avatarStephen Hemminger <stephen@networkplumber.org>
Reviewed-by: default avatarSimon Horman <horms@kernel.org>
Link: https://patch.msgid.link/20240819175753.5151-1-stephen@networkplumber.org


Signed-off-by: default avatarJakub Kicinski <kuba@kernel.org>
Signed-off-by: default avatarSasha Levin <sashal@kernel.org>
(cherry picked from commit 0486d31d)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: I390f02549c726e961f57daace468d5cd48468722
      4dcae85a
    • Kalesh Singh's avatar
      ANDROID: 16K: Fixup padding vm_flags bits on VMA splits · f4bcd4ef
      Kalesh Singh authored 
      
In some cases VMAs are split without the mmap write lock held;
later the lock is taken to fixup vm_flags of the original VMA.
Since some uppper bits of vm_flags are used to encode the ELF
padding ranges, they need to be modified on splits. This is
usually handled correctly by __split_vma(). However in the above
case, the flags get over witten later under the write lock.

Preserve vm_flag bits on reset to correctly represent padding.

Bug: 357901498
Change-Id: I1cb75419e614791a47cbdb0341373f619daf0bf2
Signed-off-by: default avatarKalesh Singh <kaleshsingh@google.com>
      f4bcd4ef
    • Kalesh Singh's avatar
      ANDROID: 16K: Introduce pgsize_migration_inline.h · 9027204d
      Kalesh Singh authored 
      
Introduce inline header to avoid circular dependency. This
will be used in a subsequent patch.

Also take opportunity to do some small noop refactor in
vma_pad_pages() and split_pad_vma() for more robust code.

Bug: 357901498
Change-Id: Ia5f447758d0d07ed3e1429ca1e35dcc0741cc22a
Signed-off-by: default avatarKalesh Singh <kaleshsingh@google.com>
      9027204d
    • Carlos Llamas's avatar
      FROMLIST: binder: fix BINDER_WORK_FROZEN_BINDER debug logs · 03b93dc7
      Carlos Llamas authored 
      
The BINDER_WORK_FROZEN_BINDER type is not handled in the binder_logs
entries and it shows up as "unknown work" when logged:

  proc 649
  context binder-test
    thread 649: l 00 need_return 0 tr 0
    ref 13: desc 1 node 8 s 1 w 0 d 0000000053c4c0c3
    unknown work: type 10

This patch add the freeze work type and is now logged as such:

  proc 637
  context binder-test
    thread 637: l 00 need_return 0 tr 0
    ref 8: desc 1 node 3 s 1 w 0 d 00000000dc39e9c6
    has frozen binder

Fixes: d579b04a ("binder: frozen notification")
Cc: stable@vger.kernel.org
Signed-off-by: default avatarCarlos Llamas <cmllamas@google.com>

Bug: 366003708
Link: https://lore.kernel.org/all/20240924184401.76043-5-cmllamas@google.com/


Change-Id: I06f888aa5218db19eeda79e315385506af09d9d5
Signed-off-by: default avatarCarlos Llamas <cmllamas@google.com>
      03b93dc7
    • Carlos Llamas's avatar
      BACKPORT: FROMLIST: binder: fix freeze UAF in binder_release_work() · 9c6fdb6b
      Carlos Llamas authored 
      
When a binder reference is cleaned up, any freeze work queued in the
associated process should also be removed. Otherwise, the reference is
freed while its ref->freeze.work is still queued in proc->work leading
to a use-after-free issue as shown by the following KASAN report:

  ==================================================================
  BUG: KASAN: slab-use-after-free in binder_release_work+0x398/0x3d0
  Read of size 8 at addr ffff31600ee91488 by task kworker/5:1/211

  CPU: 5 UID: 0 PID: 211 Comm: kworker/5:1 Not tainted 6.11.0-rc7-00382-gfc6c92196396 #22
  Hardware name: linux,dummy-virt (DT)
  Workqueue: events binder_deferred_func
  Call trace:
   binder_release_work+0x398/0x3d0
   binder_deferred_func+0xb60/0x109c
   process_one_work+0x51c/0xbd4
   worker_thread+0x608/0xee8

  Allocated by task 703:
   __kmalloc_cache_noprof+0x130/0x280
   binder_thread_write+0xdb4/0x42a0
   binder_ioctl+0x18f0/0x25ac
   __arm64_sys_ioctl+0x124/0x190
   invoke_syscall+0x6c/0x254

  Freed by task 211:
   kfree+0xc4/0x230
   binder_deferred_func+0xae8/0x109c
   process_one_work+0x51c/0xbd4
   worker_thread+0x608/0xee8
  ==================================================================

This commit fixes the issue by ensuring any queued freeze work is removed
when cleaning up a binder reference.

Fixes: d579b04a ("binder: frozen notification")
Cc: stable@vger.kernel.org
Signed-off-by: default avatarCarlos Llamas <cmllamas@google.com>

Bug: 366003708
Link: https://lore.kernel.org/all/20240924184401.76043-4-cmllamas@google.com/


Change-Id: Icc40e7dd6157981f4adbea7243e55be118552321
[cmllamas: drop BINDER_STAT_FREEZE as it's not supported here]
Signed-off-by: default avatarCarlos Llamas <cmllamas@google.com>
      9c6fdb6b
    • Carlos Llamas's avatar
      FROMLIST: binder: fix OOB in binder_add_freeze_work() · 07a43515
      Carlos Llamas authored 
      
In binder_add_freeze_work() we iterate over the proc->nodes with the
proc->inner_lock held. However, this lock is temporarily dropped to
acquire the node->lock first (lock nesting order). This can race with
binder_deferred_release() which removes the nodes from the proc->nodes
rbtree and adds them into binder_dead_nodes list. This leads to a broken
iteration in binder_add_freeze_work() as rb_next() will use data from
binder_dead_nodes, triggering an out-of-bounds access:

  ==================================================================
  BUG: KASAN: global-out-of-bounds in rb_next+0xfc/0x124
  Read of size 8 at addr ffffcb84285f7170 by task freeze/660

  CPU: 8 UID: 0 PID: 660 Comm: freeze Not tainted 6.11.0-07343-ga727812a8d45 #18
  Hardware name: linux,dummy-virt (DT)
  Call trace:
   rb_next+0xfc/0x124
   binder_add_freeze_work+0x344/0x534
   binder_ioctl+0x1e70/0x25ac
   __arm64_sys_ioctl+0x124/0x190

  The buggy address belongs to the variable:
   binder_dead_nodes+0x10/0x40
  [...]
  ==================================================================

This is possible because proc->nodes (rbtree) and binder_dead_nodes
(list) share entries in binder_node through a union:

	struct binder_node {
	[...]
		union {
			struct rb_node rb_node;
			struct hlist_node dead_node;
		};

Fix the race by checking that the proc is still alive. If not, simply
break out of the iteration.

Fixes: d579b04a ("binder: frozen notification")
Cc: stable@vger.kernel.org
Signed-off-by: default avatarCarlos Llamas <cmllamas@google.com>

Bug: 366003708
Link: https://lore.kernel.org/all/20240924184401.76043-3-cmllamas@google.com/


Change-Id: I5ec9d49277a23b864862665b52213460750c535e
Signed-off-by: default avatarCarlos Llamas <cmllamas@google.com>
      07a43515
    • Carlos Llamas's avatar
      FROMLIST: binder: fix node UAF in binder_add_freeze_work() · a26cde40
      Carlos Llamas authored 
      
In binder_add_freeze_work() we iterate over the proc->nodes with the
proc->inner_lock held. However, this lock is temporarily dropped in
order to acquire the node->lock first (lock nesting order). This can
race with binder_node_release() and trigger a use-after-free:

  ==================================================================
  BUG: KASAN: slab-use-after-free in _raw_spin_lock+0xe4/0x19c
  Write of size 4 at addr ffff53c04c29dd04 by task freeze/640

  CPU: 5 UID: 0 PID: 640 Comm: freeze Not tainted 6.11.0-07343-ga727812a8d45 #17
  Hardware name: linux,dummy-virt (DT)
  Call trace:
   _raw_spin_lock+0xe4/0x19c
   binder_add_freeze_work+0x148/0x478
   binder_ioctl+0x1e70/0x25ac
   __arm64_sys_ioctl+0x124/0x190

  Allocated by task 637:
   __kmalloc_cache_noprof+0x12c/0x27c
   binder_new_node+0x50/0x700
   binder_transaction+0x35ac/0x6f74
   binder_thread_write+0xfb8/0x42a0
   binder_ioctl+0x18f0/0x25ac
   __arm64_sys_ioctl+0x124/0x190

  Freed by task 637:
   kfree+0xf0/0x330
   binder_thread_read+0x1e88/0x3a68
   binder_ioctl+0x16d8/0x25ac
   __arm64_sys_ioctl+0x124/0x190
  ==================================================================

Fix the race by taking a temporary reference on the node before
releasing the proc->inner lock. This ensures the node remains alive
while in use.

Fixes: d579b04a ("binder: frozen notification")
Cc: stable@vger.kernel.org
Signed-off-by: default avatarCarlos Llamas <cmllamas@google.com>

Bug: 366003708
Link: https://lore.kernel.org/all/20240924184401.76043-2-cmllamas@google.com/


Change-Id: I47b053532dd4cd3424d35d6f254ca4d00c426411
Signed-off-by: default avatarCarlos Llamas <cmllamas@google.com>
      a26cde40
    • Philip Chen's avatar
      FROMGIT: virtio_pmem: Check device status before requesting flush · df571cd9
      Philip Chen authored 
      
If a pmem device is in a bad status, the driver side could wait for
host ack forever in virtio_pmem_flush(), causing the system to hang.

So add a status check in the beginning of virtio_pmem_flush() to return
early if the device is not activated.

Signed-off-by: default avatarPhilip Chen <philipchen@chromium.org>
Signed-off-by: default avatarMichael S. Tsirkin <mst@redhat.com>
Acked-by: default avatarPankaj Gupta <pankaj.gupta.linux@gmail.com>

Bug: 358391069
Change-Id: I325e6f0ea047c4c5fa82cf4b590cbf7240f39b7b
(cherry picked from commit e25fbcd9 https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git

 master)
Signed-off-by: default avatarPhilip Chen <philipchen@google.com>
      df571cd9
  17. Sep 24, 2024
  19. Sep 23, 2024
    • Chenghao Zhao's avatar
      ANDROID: ABI: update symbol list for honor · 2cd8ac81
      Chenghao Zhao authored 
      
2 function symbol(s) added
  'int netdev_get_name(struct net*, char*, int)'
  'void tcp_send_active_reset(struct sock*, gfp_t)'

Bug: 334000512
Change-Id: I83507ca33d4547088b61c6f83cfb48cc94474185
Signed-off-by: default avatarChenghao Zhao <zhaochenghao@honor.com>
      2cd8ac81
    • Dezhi Huang's avatar
      ANDROID: Allow vendor modules perform more operationson on sock. · b5ee53c6
      Dezhi Huang authored 
      
Export netdev_get_name, tcp_send_active_reset functions, allow vendor
modules perform more operations on socks and improve users' online
experience.When users browse websites or watch videos, we will sense
the bad sock is on which device, so that the sock can be switched to
another good device by us, so that the internet service will no longer
be stuck. In a similar scenario, if the user downloads from multiple
devices and the rate of one device is low,we can reset the TCP stream
with a lower rate and establish it on the device with a higher rate.

Bug: 334000512
Change-Id: I9ed90ea9fe6f3dc9f11ae1661ca9f2f5fdad5820
Signed-off-by: default avatarDezhi Huang <huangdezhi@hihonor.com>
(cherry picked from commit 21614c79)
      b5ee53c6
    • Yuxuan Yan's avatar
      ANDROID: GKI: update symbol list file for xiaomi · e64a80a0
      Yuxuan Yan authored 
      
add 3 function:
    android_vh_page_should_be_protected()
    android_vh_page_referenced_check_bypass()
    __page_mapcount()

Bug: 348285765

Change-Id: Idbcdf69693a3f4e83ada35aebf3f138648c73d10
Signed-off-by: default avatarYuxuan Yan <yanyuxuan3@xiaomi.corp-partner.google.com>
      e64a80a0
    • Yuxuan Yan's avatar
      ANDROID: GKI: add vendor hooks android_vh_page_should_be_protected() and · 530ff6a3
      Yuxuan Yan authored 
      android_vh_modify_scan_control().

add two vendor hooks:
    android_vh_page_should_be_protected():protect pages from memory
reclaim.
    android_vh_page_referenced_check_bypass():bypass rmap in active list
shrink.

The new vendor data field in scan_control are used to track how many
pages are protected in current reclaim and the "protected / scanned"
rate. These parameters are useful for understanding the impact of page
protection operations on LRU and reclaim, helping us make better
decsions.

Bug: 348285765
Change-Id: I49567a4b1f978821a94da0a8339b2b8fdfd52daf
Signed-off-by: default avatarYuxuan Yan <yanyuxuan3@xiaomi.corp-partner.google.com>
      530ff6a3
    • Greg Kroah-Hartman's avatar
      Merge tag 'android14-6.1.99_r00' into android14-6.1 · 41e1c6f9
      Greg Kroah-Hartman authored 
      
This merges up to the 6.1.99 LTS release into android14-6.1.  This
includes the following commits:

*   12f9bcc0 Merge 6.1.99 into android14-6.1-lts
|\
| * cac15753 Linux 6.1.99
| * 1f4a10cb Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB"
* | e6e7b108 Merge 6.1.98 into android14-6.1-lts
|\|
| * 266ee8e0 Linux 6.1.98
| * 86e3ffea nilfs2: fix incorrect inode allocation from reserved inodes
| * a077a6cd null_blk: Do not allow runt zone with zone capacity smaller then zone size
| * 2fed4a94 spi: cadence: Ensure data lines set to low during dummy-cycle period
| * 41f5e284 nfc/nci: Add the inconsistency check between the input data length and count
| * 833112b7 kbuild: fix short log for AS in link-vmlinux.sh
| * 940a71f0 nvmet: fix a possible leak when destroy a ctrl during qp establishment
| * 273a824a platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro
| * 363585e3 platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6" tablet
| * 85646d77 regmap-i2c: Subtract reg size from max_write
| * 62fc41a6 nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset
| * ce39d857 dma-mapping: benchmark: avoid needless copy_to_user if benchmark fails
| * d62da841 nvme-multipath: find NUMA path only for online numa-node
| * 154f4ca8 ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897
| * 850ef5d2 fs/ntfs3: Mark volume as dirty if xattr is broken
| * 3d32327f i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
| * 7069aa6d clk: mediatek: mt8183: Only enable runtime PM on mt8183-mfgcfg
| * e3e33879 clk: mediatek: clk-mtk: Register MFG notifier in mtk_clk_simple_probe()
| * 661baa17 clk: qcom: gcc-sm6350: Fix gpll6* & gpll7 parents
| * e5411f26 media: dw2102: fix a potential buffer overflow
| * 9c3906c3 ima: Avoid blocking in RCU read-side critical section
| * ee42c150 arm64: dts: rockchip: Fix the DCDC_REG2 minimum voltage on Quartz64 Model B
| * 9504a155 bnx2x: Fix multiple UBSAN array-index-out-of-bounds
| * 1c67f793 mtd: rawnand: rockchip: ensure NVDDR timings are rejected
| * 670f841c mtd: rawnand: Bypass a couple of sanity checks during NAND identification
| * ca0f2e72 mtd: rawnand: Ensure ECC configuration is propagated to upper layers
| * c550679d powerpc/pseries: Fix scv instruction crash with kexec
| * dd4674d0 drm: panel-orientation-quirks: Add quirk for Valve Galileo
| * 742cac67 drm/amdgpu/atomfirmware: silence UBSAN warning
| * 1f325352 drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
| * cbbe17a3 Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
| * 4e071611 fsnotify: Do not generate events for O_PATH file descriptors
| * 44aa3e76 can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct
| * e6e200b2 Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
| * c126aff7 scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add()
| * 525ad8dd f2fs: Add inline to f2fs_build_fault_attr() stub
| * aa1d8cc0 btrfs: fix adding block group to a reclaim list and the unused list during reclaim
| * c83ed422 mm: avoid overflows in dirty throttling logic
| * d259d0c3 mm: optimize the redundant loop of mm_update_owner_next()
| * 1b7d549e nilfs2: add missing check for inode numbers on directory entries
| * fae1959d nilfs2: fix inode number range checks
| * 98c89589 Revert "igc: fix a log entry using uninitialized netdev"
| * 89a5f062 platform/x86: toshiba_acpi: Fix quickstart quirk handling
| * ab557f5c mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file
| * d6f487e0 inet_diag: Initialize pad field in struct inet_diag_req_v2
| * 8d9fa5e8 selftests: make order checking verbose in msg_zerocopy selftest
| * fb8fc89b selftests: fix OOM in msg_zerocopy selftest
| * c8eb8ab9 bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
| * 4c06c133 netfilter: nf_tables: unconditionally flush pending work before notifier
| * 653deee4 riscv: kexec: Avoid deadlock in kexec crash path
| * b610a875 wifi: wilc1000: fix ies_len type in connect path
| * 4b3b6c7e net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx()
| * 12f6119d net: allow skb_datagram_iter to be called from any context
| * b368762d e1000e: Fix S0ix residency on corporate systems
| * c159afd3 KVM: s390: fix LPSWEY handling
| * 31f03bb0 tcp_metrics: validate source addr length
| * f8b7bd50 net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup()
| * bc3ff8d3 net/mlx5: E-switch, Create ingress ACL when needed
| * 965fbc6d UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open()
| * a0d1afe8 mac802154: fix time calculation in ieee802154_configure_durations()
| * 325d8659 tools/power turbostat: Remember global max_die_id
| * 0c97527e cdrom: rearrange last_media_change check to avoid unintentional overflow
| * c0d7a3b2 btrfs: scrub: initialize ret in scrub_simple_mirror() to fix compilation warning
| * c5179588 s390/pkey: Wipe sensitive data on failure
| * 751987a5 jffs2: Fix potential illegal address access in jffs2_free_inode
| * e1683ff4 serial: imx: Raise TX trigger level to 8
| * b869ec89 scsi: mpi3mr: Sanitise num_phys
| * bc84dd2c f2fs: check validation of fault attrs in f2fs_build_fault_attr()
| * a21d76bd bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
| * 2e9d8aa5 igc: fix a log entry using uninitialized netdev
| * ce8d4967 powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#"
| * ae9edc2b kunit: Fix timeout message
| * 74159d40 orangefs: fix out-of-bounds fsid access
| * 9c06fe8c powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n
| * d4889c95 i2c: i801: Annotate apanel_addr as __ro_after_init
| * 1663e247 media: dvb-frontends: tda10048: Fix integer overflow
| * 1aa04c84 media: s2255: Use refcount_t instead of atomic_t for num_channels
| * fa547cdd media: dvb-frontends: tda18271c2dd: Remove casting during div
| * aa03f591 net: dsa: mv88e6xxx: Correct check for empty list
| * 22ea2a7f wifi: mt76: replace skb_put with skb_put_zero
| * 948554f1 usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB
| * 46c82c5e Input: ff-core - prefer struct_size over open coded arithmetic
| * d792fc8f firmware: dmi: Stop decoding on broken entry
| * f2c9c42f sctp: prefer struct_size over open coded arithmetic
| * a010daa3 media: dw2102: Don't translate i2c read into write
| * ee18ed34 drm/amdgpu: fix uninitialized scalar variable warning
| * 87426135 drm/amd/display: Skip finding free audio for unknown engine_id
| * d2c3645a drm/amd/display: Check pipe offset before setting vblank
| * ae91ffbc drm/amd/display: Check index msg_id before read or write
| * bf312c05 drm/amdgpu: Initialize timestamp for some legacy SOCs
| * 7eb74d14 drm/amdgpu: Fix uninitialized variable warnings
| * 28c8d274 crypto: aead,cipher - zeroize key buffer after use
| * fa49c65a scsi: qedf: Make qedf_execute_tmf() non-preemptible
| * 63d202d9 IB/core: Implement a limit on UMAD receive List
| * 95e9377c media: dvb-usb: dib0700_devices: Add missing release_firmware()
| * c72990a6 media: dvb: as102-fe: Fix as10x_register_addr packing
| * 8d3f83df powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
| * 0a487e97 drm/lima: fix shared irq handling on driver remove
| * eda60520 crypto: hisilicon/debugfs - Fix debugfs uninit process issue
| * 42d64dbe locking/mutex: Introduce devm_mutex_init()
* | e44db575 ANDROID: db845c symbol list additions
* | ab63f81b Revert "mm/page_alloc: Separate THP PCP into movable and non-movable categories"
* | 9a2454ec Merge 6.1.97 into android14-6.1-lts
|\|
| * 7753af06 Linux 6.1.97
| * f19cca5d tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset()
| * fbfd2c87 serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
| * 1dc9d050 serial: imx: only set receiver level if it is zero
| * 16d92a6d arm64: dts: rockchip: Add sound-dai-cells for RK3368
| * 4e66009d arm64: dts: rockchip: fix PMIC interrupt pin on ROCK Pi E
| * 2581e814 ARM: dts: rockchip: rk3066a: add #sound-dai-cells to hdmi node
| * bccc0c84 arm64: dts: rockchip: Rename LED related pinctrl nodes on rk3308-rock-pi-s
| * b619f741 arm64: dts: rockchip: Fix SD NAND and eMMC init on rk3308-rock-pi-s
| * fcafdf32 efi/x86: Free EFI memory map only when installing a new one.
| * 01b3cddf efi: xen: Set EFI_PARAVIRT for Xen dom0 boot on all architectures
| * 0d01140e efi: memmap: Move manipulation routines into x86 arch tree
| * 7ad4e0a4 gfs2: Fix slab-use-after-free in gfs2_qd_dealloc
| * 447434ea mm/page_alloc: Separate THP PCP into movable and non-movable categories
| * 978e27ff Revert "cpufreq: amd-pstate: Fix the inconsistency in max frequency units"
| * d2b56368 pwm: stm32: Refuse too small period requests
| * f910aee9 syscalls: fix sys_fanotify_mark prototype
| * e1b88ac1 syscalls: fix compat_sys_io_pgetevents_time64 usage
| * 5ae6af68 ftruncate: pass a signed offset
| * 702c1edb ata: libata-core: Fix double free on error
| * 5f0d0bf9 ata: ahci: Clean up sysfs file on error
| * f926c022 can: mcp251xfd: fix infinite loop when xmit fails
| * 778a8e67 batman-adv: Don't accept TT entries for out-of-spec VIDs
| * c92a15b3 drm/amdgpu/atomfirmware: fix parsing of vram_info
| * 30cbf6ff drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
| * ca0fabd3 drm/i915/gt: Fix potential UAF by revoke of fence registers
| * 6ce0544c drm/amdgpu: avoid using null object of framebuffer
| * f95ed0f5 drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
| * 948dc69f hexagon: fix fadvise64_64 calling conventions
| * 0f922755 csky, hexagon: fix broken sys_sync_file_range
| * 87936f51 btrfs: zoned: fix initial free space detection
| * 41dd6b0e sh: rework sync_file_range ABI
| * bf3c44f6 kbuild: Install dtb files as 0644 in Makefile.dtbinst
| * 84394f35 irqchip/loongson-liointc: Set different ISRs for different cores
| * 71af0f2f cpu/hotplug: Fix dynstate assignment in __cpuhp_setup_state_cpuslocked()
| * e0560219 cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing
| * 26b18dd3 net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
| * 4ff69789 net: can: j1939: recover socket queue on CAN bus error during BAM transmission
| * f97cbce6 net: can: j1939: Initialize unused data in j1939_send_one()
| * a44aedd5 tty: mcf: MCF54418 has 10 UARTS
| * 94307bc3 ALSA: hda/realtek: fix mute/micmute LEDs don't work for EliteBook 645/665 G11.
| * e97ef9a3 serial: imx: set receiver level before starting uart
| * 98840e41 serial: 8250_omap: Implementation of Errata i2310
| * a47407ae usb: ucsi: stm32: fix command completion handling
| * a11b7162 usb: gadget: aspeed_udc: fix device address configuration
| * d77e2b51 usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
| * 5584c776 usb: atm: cxacru: fix endpoint checking in cxacru_bind()
| * 7afa50ce usb: musb: da8xx: fix a resource leak in probe()
| * e9835f39 usb: gadget: printer: fix races against disable
| * e48b92ed usb: gadget: printer: SS+ support
| * a59d8437 net: usb: ax88179_178a: improve link status logs
| * d441ad2a iio: chemical: bme680: Fix sensor data read operation
| * ba1bb3e2 iio: chemical: bme680: Fix overflows in compensate() functions
| * 94f303ed iio: chemical: bme680: Fix calibration data variable
| * 4decfc47 iio: chemical: bme680: Fix pressure value output
| * 90d4d02b iio: accel: fxls8962af: select IIO_BUFFER & IIO_KFIFO_BUF
| * df188072 iio: adc: ad7266: Fix variable checking bug
| * 274239d9 i2c: testunit: discard write requests while old command is running
| * 86826b1f i2c: testunit: don't erase registers after STOP
| * 8cfb468a counter: ti-eqep: enable clock at probe
| * 70516c5f iio: xilinx-ams: Don't include ams_ctrl_channels in scan_mask
| * f8ec1677 mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro()
| * 2f3555c2 mmc: sdhci: Do not invert write-protect twice
| * dca15c18 mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos
| * 81027f81 mmc: sdhci-brcmstb: check R1_STATUS for erase/trim/discard
| * ea6beb81 nfs: drop the incorrect assertion in nfs_swap_rw()
| * 9ea2d1c6 ocfs2: fix DIO failure due to insufficient transaction credits
| * a4f9251e pinctrl: qcom: spmi-gpio: drop broken pm8008 support
| * ceabd79f Revert "MIPS: pci: lantiq: restore reset gpio polarity"
| * 3ae15c02 parisc: use generic sys_fanotify_mark implementation
| * 161cef81 x86: stop playing stack games in profile_pc()
| * 7fb37498 ima: Fix use-after-free on a dentry's dname.name
| * b7931771 randomize_kstack: Remove non-functional per-arch entropy filtering
| * 31594c5a gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1)
| * c3b42574 riscv: stacktrace: convert arch_stack_walk() to noinstr
| * 09f64e7a drm/amdgpu: Fix pci state save during mode-1 reset
| * 87a2448e drm/amd/amdgpu: Fix style errors in amdgpu_drv.c & amdgpu_device.c
| * 89d7008a gpio: davinci: Validate the obtained number of IRQs
| * c717cef1 drm/panel: simple: Add missing display timing flags for KOE TX26D202VM0BWA
| * d8e27666 nvme: fixup comment for nvme RDMA Provider Type
| * b719f2bc drm/radeon/radeon_display: Decrease the size of allocated memory
| * 9e424deb soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message
| * 06c53310 media: dvbdev: Initialize sbuf
| * d0ff2443 ALSA: emux: improve patch ioctl data validation
| * fd7ef325 crypto: ecdh - explicitly zeroize private_key
| * 48147337 net/dpaa2: Avoid explicit cpumask var allocation on stack
| * d85ca817 net/iucv: Avoid explicit cpumask var allocation on stack
| * 782bdaf9 RDMA/restrack: Fix potential invalid address access
| * b30f3197 bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
| * 5bcb9cf6 bpf: Add a check for struct bpf_fib_lookup size
| * cc33a7a2 wifi: ieee80211: check for NULL in ieee80211_mle_size_ok()
| * 08193826 mtd: partitions: redboot: Added conversion of operands to a larger type
| * ed1fa6d6 x86/fpu: Fix AMD X86_BUG_FXSAVE_LEAK fixup
| * 7d18ab6e vduse: Temporarily fail if control queue feature requested
| * d99a4e14 vduse: validate block features only with block devices
| * 5f414012 drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
| * e4f602e3 bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
| * efb27ad0 netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
| * 736c74dc tcp: fix tcp_rcv_fastopen_synack() to enter TCP_CA_Loss for failed TFO
| * 853c0387 powerpc: restore some missing spu syscalls
| * 2eb9a4bc parisc: use correct compat recv/recvfrom syscalls
| * ef03810c sparc: fix compat recv/recvfrom syscalls
| * 04c12712 sparc: fix old compat_sys_select()
| * f75c21bf net: dsa: microchip: fix wrong register write when masking interrupt
| * c14f3c37 Fix race for duplicate reqsk on identical SYN
| * 4e0c539e xdp: Remove WARN() from __xdp_reg_mem_model()
| * 75fabdc9 net: dsa: microchip: use collision based back pressure mode
| * aecaaf8a net: phy: micrel: add Microchip KSZ 9477 to the device table
| * 5516c9ee ibmvnic: Free any outstanding tx skbs during scrq reset
| * d1b9df04 bpf: Fix overrunning reservations in ringbuf
| * bfa86a96 mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems
| * 2dfaf2c4 net: dsa: microchip: fix initial port flush problem
| * 8faf91e5 ASoC: fsl-asoc-card: set priv->pdev before using it
| * 20f19c91 ASoC: amd: acp: remove i2s configuration check in acp_i2s_probe()
| * d9912994 s390/pci: Add missing virt_to_phys() for directed DIBV
| * 87358401 ASoC: rockchip: i2s-tdm: Fix trcm mode by setting clock on right mclk
| * b45176b8 netfilter: nf_tables: use timestamp to check for set element timeout
| * 7491c3c5 dt-bindings: i2c: atmel,at91sam: correct path to i2c-controller schema
| * 58d65ce9 dt-bindings: i2c: Drop unneeded quotes
| * 777f3c99 MIPS: pci: lantiq: restore reset gpio polarity
| * ae7b2aa8 pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set
| * 8a5859bb pinctrl: rockchip: use dedicated pinctrl type for RK3328
| * 6bed115e pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins
| * 940ce6f2 pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins
| * b36efd2e pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
| * 4312eace Input: ili210x - fix ili251x_read_touch_data() return value
| * b2f1ce6c ACPI: x86: Force StorageD3Enable on more products
| * c538c886 ACPI: x86: utils: Add Picasso to the list for forcing StorageD3Enable
| * 411e6aa9 usb: typec: ucsi: Ack also failed Get Error commands
| * 8cace39c usb: typec: ucsi: Never send a lone connector change ack
* | 47b24bf8 Revert "net/sched: fix false lockdep warning on qdisc root lock"
* | 0a6ad70f Revert "net/sched: unregister lockdep keys in qdisc_create/qdisc_alloc error path"
* | 325f5b8e Revert "tty: add the option to have a tty reject a new ldisc"
* | 7455bf54 Merge 6.1.96 into android14-6.1-lts
|\|
| * 99e6a620 Linux 6.1.96
| * 19526f54 Revert "mm: mmap: allow for the maximum number of bits for randomizing mmap_base by default"
| * 8a630e8a hid: asus: asus_report_fixup: fix potential read out of bounds
| * 48d3f91d net/sched: unregister lockdep keys in qdisc_create/qdisc_alloc error path
| * d04943bb drm/amd/display: revert Exit idle optimizations before HDCP execution
| * 5efe0b5d kheaders: explicitly define file modes for archived headers
| * f0b5d1d9 Revert "kheaders: substituting --sort in archive creation"
| * 8ab1361b x86/cpu: Fix x86_match_cpu() to match just X86_VENDOR_INTEL
| * b0727ed7 x86/cpu/vfm: Add new macros to work with (vendor/family/model) values
| * 6efd1d4b tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test
| * 8d5d123f pmdomain: ti-sci: Fix duplicate PD referrals
| * 95881ebd ARM: dts: samsung: smdk4412: fix keypad no-autorepeat
| * 7c1448ea ARM: dts: samsung: exynos4412-origen: fix keypad no-autorepeat
| * 2df48353 ARM: dts: samsung: smdkv310: fix keypad no-autorepeat
| * 8154edd6 perf script: Show also errors for --insn-trace option
| * 4bd6f883 perf: script: add raw|disasm arguments to --insn-trace option
| * 520f2892 spi: stm32: qspi: Clamp stm32_qspi_get_mode() output to CCR_BUSWIDTH_4
| * 56de6648 arm64: dts: imx8qm-mek: fix gpio number for reg_usdhc2_vmmc
| * 065494ad spi: stm32: qspi: Fix dual flash mode sanity test in stm32_qspi_setup()
| * fd6cfb11 dt-bindings: i2c: google,cros-ec-i2c-tunnel: correct path to i2c-controller schema
| * 92278b2d i2c: ocores: set IACK bit after core is enabled
| * 51897f99 mm/page_table_check: fix crash on ZONE_DEVICE
| * 6f7c39a6 tcp: clear tp->retrans_stamp in tcp_rcv_fastopen_synack()
| * 665e9326 mm: mmap: allow for the maximum number of bits for randomizing mmap_base by default
| * 4cb3b5bc kcov: don't lose track of remote references during softirqs
| * 9ad02301 gcov: add support for GCC 14
| * fc5cb952 drm/amdgpu: fix UBSAN warning in kv_dpm.c
| * f803532b drm/radeon: fix UBSAN warning in kv_dpm.c
| * 013e8f23 drm/i915/mso: using joiner is not possible with eDP MSO
| * 661882cf ALSA: hda/realtek: Limit mic boost on N14AP7
| * 72eed766 ALSA: hda/realtek: fix mute/micmute LEDs don't work for ProBook 445/465 G11.
| * 9e6e37d9 KVM: x86: Always sync PIR to IRR prior to scanning I/O APIC routes
| * 68df4fc4 KVM: arm64: Disassociate vcpus from redistributor region on teardown
| * 92c77807 KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
| * b95fce86 cifs: fix typo in module parameter enable_gcm_256
| * 15cb476c btrfs: retry block group reclaim without infinite loop
| * 893eeba9 net: do not leave a dangling sk pointer, when socket creation fails
| * 44f52143 net: usb: ax88179_178a: improve reset check
| * dda369a7 net: stmmac: Assign configured channel value to EXTTS event
| * d8abba1e MIPS: dts: bcm63268: Add missing properties to the TWD node
| * 27033125 kbuild: Remove support for Clang's ThinLTO caching
| * 99958641 RDMA/mlx5: Add check for srq max_sge attribute
| * a331f275 firmware: psci: Fix return value from psci_system_suspend()
| * ddc1f5f1 ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
| * 87d2639f arm64: dts: freescale: imx8mm-verdin: enable hysteresis on slow input pin
| * 97af5de2 arm64: dts: imx93-11x11-evk: Remove the 'no-sdio' property
| * 474a1661 regulator: bd71815: fix ramp values
| * 6136f19e dmaengine: ioatdma: Fix missing kmem_cache_destroy()
| * 6a104377 dmaengine: ioatdma: Fix kmemleak in ioat_pci_probe()
| * 98b35b2b dmaengine: ioatdma: Fix error path in ioat3_dma_probe()
| * d7f4e58f dmaengine: ioat: use PCI core macros for PCIe Capability
| * 98d79caf dmaengine: ioatdma: Fix leaking on version mismatch
| * 95dc59ba dmaengine: ioat: Drop redundant pci_enable_pcie_error_reporting()
| * 83163667 dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
| * 1bd1857f regulator: core: Fix modpost error "regulator_get_regmap" undefined
| * 1803875f net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings
| * e214f102 bnxt_en: Restore PTP tx_avail count in case of skb_pad() error
| * dd37b869 ice: Fix VSI list rule with ICE_SW_LKUP_LAST type
| * ec4d970b seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors
| * 788d585e netfilter: ipset: Fix suspicious rcu_dereference_protected()
| * 49780570 octeontx2-pf: Add error handling to VLAN unoffload handling
| * 04619db3 virtio_net: checksum offloading handling fix
| * 521d42a1 net: stmmac: No need to calculate speed divider when offload is disabled
| * d50d62d5 ptp: fix integer overflow in max_vclocks_store
| * 2f82f75f sched: act_ct: add netns into the key of tcf_ct_flow_table
| * 623c90d8 tipc: force a dst refcount before doing decryption
| * 6fc78d67 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
| * 668be2b6 net/sched: act_api: rely on rcu in tcf_idr_check_alloc
| * 5bd1b7ab net: phy: mxl-gpy: Remove interrupt mask clearing from config_init
| * 70993aca net: phy: mxl-gpy: enhance delay time required by loopback disable function
| * 7d0606bd net: lan743x: Support WOL at both the PHY and MAC appropriately
| * 2af9aa9a net: lan743x: disable WOL upon resume to restore full data path operation
| * e2ec0717 qca_spi: Make interrupt remembering atomic
| * 1b631bff netns: Make get_net_ns() handle zero refcount net
| * 83c02fb2 xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
| * 51ee2f7c ipv6: prevent possible NULL dereference in rt6_probe()
| * 88b9a55e ipv6: prevent possible NULL deref in fib6_nh_init()
| * a02fd5d7 netrom: Fix a memory leak in nr_heartbeat_expiry()
| * eb1bde62 ALSA: hda/realtek: Enable headset mic on IdeaPad 330-17IKB 81DM
| * dacc15e9 bpf: Avoid splat in pskb_pull_reason
| * 7dabc4b4 cipso: fix total option length computation
| * 224b69e8 ice: avoid IRQ collision to fix init failure on ACPI S3 resume
| * 531d85b4 ice: move RDMA init to ice_idc.c
| * 7de448db ALSA/hda: intel-dsp-config: Document AVS as dsp_driver option
| * 71b027d3 ALSA: hda/realtek: Remove Framework Laptop 16 from quirks
| * 32ef4dc2 tracing: Build event generation tests only as modules
| * 6c0f6ccd mips: bmips: BCM6358: make sure CBR is correctly set
| * a6061f60 MIPS: Routerboard 532: Fix vendor retry check code
| * 3c6332f3 tty: add the option to have a tty reject a new ldisc
| * 6466b919 usb: gadget: function: Remove usage of the deprecated ida_simple_xx() API
| * 3b3655a1 serial: exar: adding missing CTI and Exar PCI ids
| * 7f9e70c6 serial: imx: Introduce timeout when waiting on transmitter empty
| * d996deb8 MIPS: Octeon: Add PCIe link status check
| * 70196fea PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports
| * 29dfe9e8 udf: udftime: prevent overflow in udf_disk_stamp_to_time()
| * 69170a88 usb: dwc3: pci: Don't set "linux,phy_charger_detect" property on Lenovo Yoga Tab2 1380
| * dd425700 Avoid hw_desc array overrun in dw-axi-dmac
| * 8fc246a8 usb: misc: uss720: check for incompatible versions of the Belkin F5U002
| * a9cea048 f2fs: remove clear SB_INLINECRYPT flag in default_options
| * 8092775c iommu/arm-smmu-v3: Free MSIs in case of ENOMEM
| * 10c19cf7 power: supply: cros_usbpd: provide ID table for avoiding fallback match
| * 5cb3339b platform/x86: p2sb: Don't init until unassigned resources have been assigned
| * 7bbcd3b1 powerpc/io: Avoid clang null pointer arithmetic warnings
| * 8aa11aa0 powerpc/pseries: Enforce hcall result buffer validity and size
| * cf56640e ALSA: hda/realtek: Add quirks for Lenovo 13X
| * 9fd8ddd2 drm/lima: mask irqs in timeout path before hard reset
| * 394d6606 drm/lima: add mask irq callback to gp and pp
| * 4cd1360c ASoC: Intel: sof_sdw: add JD2 quirk for HP Omen 14
| * 6239d65b platform/x86: toshiba_acpi: Add quirk for buttons on Z830
| * fc1f0309 drm/amd/display: Exit idle optimizations before HDCP execution
| * be4a1fc8 Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl
| * aa2fb9c5 HID: asus: fix more n-key report descriptors if n-key quirked
| * 5368c463 HID: Add quirk for Logitech Casa touchpad
| * 0b81faa0 wifi: mt76: mt7921s: fix potential hung tasks during chip recovery
| * 96826b16 netpoll: Fix race condition in netpoll_owner_active
| * e8fc7647 net: dsa: realtek: keep default LED state in rtl8366rb
| * d927fae2 kselftest: arm64: Add a null pointer check
| * 048b3381 net/sched: fix false lockdep warning on qdisc root lock
| * eaddb866 scsi: qedi: Fix crash while reading debugfs attribute
| * f251ccef drop_monitor: replace spin_lock by raw_spin_lock
| * 63310043 af_packet: avoid a false positive warning in packet_setsockopt()
| * 2e48d735 wifi: ath9k: work around memset overflow warning
| * fed79148 batman-adv: bypass empty buckets in batadv_purge_orig_ref()
| * 63f2d537 selftests/bpf: Fix flaky test btf_map_in_map/lookup_update
| * fb9088a7 selftests/bpf: Prevent client connect before server bind in test_tc_tunnel.sh
| * 61ec76ec block/ioctl: prefer different overflow check
| * cf9b1652 rcutorture: Fix invalid context warning when enable srcu barrier testing
| * dbd4175e rcutorture: Make stall-tasks directly exit when rcutorture tests end
| * 9bc282fb rcutorture: Fix rcu_torture_one_read() pipe_count overflow comment
| * 55c22375 io_uring/sqpoll: work around a potential audit memory leak
| * 7c42ce55 crypto: hisilicon/sec - Fix memory leak for sec resource release
| * 4925da08 padata: Disable BH when taking works lock on MT path
* | cb7d32c2 Merge aosp/android14-6.1 to aosp/android14-6.1-lts
* | 6f4a686a Revert "i2c: add fwnode APIs"
* | efbc7c75 Revert "i2c: acpi: Unbind mux adapters before delete"
* | ced50587 Merge 6.1.95 into android14-6.1-lts
|\|
| * a6398e37 Linux 6.1.95
| * edd2754a zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
| * e44999ec i2c: designware: Fix the functionality flags of the slave-only interface
| * 1a0bbb90 i2c: at91: Fix the functionality flags of the slave-only interface
| * ea25a4c0 misc: microchip: pci1xxxx: Fix a memory leak in the error handling of gp_aux_bus_probe()
| * e0e2eec7 usb-storage: alauda: Check whether the media is initialized
| * ae917519 serial: core: Add UPIO_UNKNOWN constant for unknown port type
| * 29d35f0b serial: 8250_dw: fall back to poll if there's no interrupt
| * 9a733d69 greybus: Fix use-after-free bug in gb_interface_release due to race condition.
| * 12a4a28e Bluetooth: qca: generalise device address check
| * 47988653 Bluetooth: qca: fix wcn3991 device address check
| * 9afc658c cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
| * 4733dea7 remoteproc: k3-r5: Jump to error handling labels in start/stop errors
| * 04b0c419 Revert "fork: defer linking file vma until vma is fully initialized"
| * 35e39537 mptcp: pm: update add_addr counters after connect
| * 51861fc0 serial: 8250_pxa: Configure tx_loadsz to match FIFO IRQ level
| * 00b0752c mm/memory-failure: fix handling of dissolved but not taken off from buddy pages
| * b2494506 mm/huge_memory: don't unpoison huge_zero_folio
| * 2641261b tick/nohz_full: Don't abuse smp_call_function_single() in tick_setup_device()
| * 271dcd97 nilfs2: fix potential kernel bug due to lack of writeback flag waiting
| * 17765964 btrfs: zoned: fix use-after-free due to race with dev replace
| * babfd2d0 btrfs: zoned: factor out DUP bg handling from btrfs_load_block_group_zone_info
| * 43a89d48 btrfs: zoned: factor out single bg handling from btrfs_load_block_group_zone_info
| * 7fd274c0 btrfs: zoned: factor out per-zone logic from btrfs_load_block_group_zone_info
| * c60f0a44 btrfs: zoned: introduce a zone_info struct in btrfs_load_block_group_zone_info
| * d2fa51eb intel_th: pci: Add Lunar Lake support
| * 5b64a368 intel_th: pci: Add Meteor Lake-S support
| * a1fb1bd6 intel_th: pci: Add Sapphire Rapids SOC support
| * b7b6bc60 intel_th: pci: Add Granite Rapids SOC support
| * bb8b9d91 intel_th: pci: Add Granite Rapids support
| * 32728014 drm/i915/dpt: Make DPT object unshrinkable
| * d205e302 drm/i915/gt: Disarm breadcrumbs if engines are already idle
| * 919f8626 riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
| * dd5042ee remoteproc: k3-r5: Do not allow core1 to power up before core0 via sysfs
| * 2a1ec20b remoteproc: k3-r5: Wait for core0 power-up before powering up core1
| * f6a426a0 dmaengine: axi-dmac: fix possible race in remove()
| * eab9d5a8 PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id
| * ea042dc2 ocfs2: fix races between hole punching and AIO+DIO
| * a2e8105e ocfs2: use coarse time for new created files
| * a373ad83 fs/proc: fix softlockup in __read_vmcore
| * 06bea44b knfsd: LOOKUP can return an illegal error value
| * bbce9fb5 spmi: hisi-spmi-controller: Do not override device identifier
| * 95bac1c8 vmci: prevent speculation leaks by sanitizing event in event_deliver()
| * 5eabdf17 sock_map: avoid race between sock_map_close and sk_psock_put
| * ae080302 null_blk: Print correct max open zones limit in null_init_zoned_dev()
| * e2585bc1 tracing/selftests: Fix kprobe event name test for .isra. functions
| * 6625417d riscv: fix overlap of allocated page and PTR_ERR
| * c81705d6 perf/core: Fix missing wakeup when waiting for context reference
| * 355784a5 x86/amd_nb: Check for invalid SMN reads
| * 2458f236 irqchip/gic-v3-its: Fix potential race condition in its_vlpi_prop_update()
| * 9dc3200a mptcp: pm: inc RmAddr MIB counter once per RM_ADDR ID
| * f03c46ea mptcp: ensure snd_una is properly initialized on connect
| * c3ca24df drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found
| * dcba6bed drm/exynos/vidi: fix memory leak in .get_modes()
| * 08891eea drivers: core: synchronize really_probe() and dev_uevent()
| * cc09e1d3 iio: imu: inv_icm42600: delete unneeded update watermark call
| * 1b82cc86 iio: dac: ad5592r: fix temperature channel scaling value
| * f35eb2c4 iio: adc: ad9467: fix scan type sign
| * b9da7e96 x86/boot: Don't add the EFI stub to targets, again
| * 34ae447b misc: microchip: pci1xxxx: fix double free in the error handling of gp_aux_bus_probe()
| * cde177fa bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send()
| * e9c6513c af_unix: Read with MSG_PEEK loops if the first unread byte is OOB
| * 60cd7148 ionic: fix use after netif_napi_del()
| * caaa2129 net: bridge: mst: fix suspicious rcu usage in br_mst_set_state
| * 09f4337c net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state
| * cd68f849 net/ipv6: Fix the RT cache flush via sysctl using a previous delay
| * 5872043b nvmet-passthru: propagate status from id override functions
| * a6ea39fd net: stmmac: replace priv->speed with the portTransmitRate from the tc-cbs parameters
| * c495ebe9 gve: ignore nonrelevant GSO type bits when processing TSO headers
| * 950217d9 net: pse-pd: Use EOPNOTSUPP error code instead of ENOTSUPP
| * 390b353d netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type
| * 4431d374 Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ
| * 0f99dc35 net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets
| * 11f1f0c4 geneve: Fix incorrect inner network header offset when innerprotoinherit is set
| * 0b160b12 tcp: fix race in tcp_v6_syn_recv_sock()
| * c8879a39 drm/bridge/panel: Fix runtime warning on panel bridge release
| * 3b1cf943 drm/komeda: check for error-valued pointer
| * f1ab15a0 liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
| * f2583f81 net: hns3: add cond_resched() to hns3 ring buffer init process
| * 6d0007f7 net: hns3: fix kernel crash problem in concurrent scenario
| * 84a0d868 net: sfp: Always call `sfp_sm_mod_remove()` on remove
| * 2b7be0eb drm/vmwgfx: Remove STDU logic from generic mode_valid function
| * b1aae9c5 drm/vmwgfx: 3D disabled should not effect STDU memory limits
| * b7479b39 drm/vmwgfx: Filter modes which exceed graphics memory
| * 862bd36d drm/vmwgfx: Refactor drm connector probing for display modes
| * 67adcfae drm/vmwgfx: Port the framebuffer code to drm fb helpers
| * 789c99a1 HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
| * f2af9dba iommu/amd: Fix sysfs leak in iommu init
| * bfd546fc HID: core: remove unnecessary WARN_ON() in implement()
| * 2df8c16e gpio: tqmx86: fix broken IRQ_TYPE_EDGE_BOTH interrupt type
| * 4ada932c gpio: tqmx86: store IRQ trigger type and unmask status separately
| * 0f6b55f9 gpio: tqmx86: Convert to immutable irq_chip
| * 8c2e28a2 gpio: tqmx86: introduce shadow register for GPIO output value
| * a09c3dbe gpio: tqmx86: remove unneeded call to platform_set_drvdata()
| * 82004405 gpio: tqmx86: fix typo in Kconfig label
| * 3150d4e4 platform/x86: dell-smbios: Fix wrong token data in sysfs
| * 0abb51ac NFS: add barriers when testing for NFS_FSDATA_BLOCKED
| * 3cde566d SUNRPC: return proper error from gss_wrap_req_priv
| * e6ddef11 NFSv4.1 enforce rootpath check in fs_location query
| * 81fce119 clk: sifive: Do not register clkdevs for PRCI clocks
| * fcb4ce61 selftests/ftrace: Fix to check required event file
| * 320ba9cb cachefiles: flush all requests after setting CACHEFILES_DEAD
| * eac51d9d cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
| * 1fd5f317 cachefiles: never get a new anonymous fd if ondemand_id is valid
| * bb00aef6 cachefiles: remove err_put_fd label in cachefiles_ondemand_daemon_read()
| * cb55625f cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
| * 99e9c5bd cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
| * a0cc87f8 cachefiles: add restore command to recover inflight ondemand read requests
| * 5344f2ab cachefiles: add spin_lock for cachefiles_ondemand_info
| * f17443d5 cachefiles: resend an open request if the read request's object is closed
| * bb512c85 cachefiles: extract ondemand info field from cachefiles_object
| * e43fb9a2 cachefiles: introduce object ondemand state
| * 9f13aacd cachefiles: remove requests from xarray during flushing requests
| * dad92526 cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
| * bee55952 cxl/test: Add missing vmalloc.h for tools/testing/cxl/test/mem.c
| * 6dfa1d80 Input: try trimming too long modalias strings
| * ce1afd73 powerpc/uaccess: Fix build errors seen with GCC 13/14
| * d2212849 gve: Clear napi->skb before dev_kfree_skb_any()
| * d19254d8 scsi: sd: Use READ(16) when reading block zero on large capacity disks
| * 46bab2bc scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
| * a9624afc scsi: mpi3mr: Fix ATA NCQ priority support
| * a136698d thunderbolt: debugfs: Fix margin debugfs node creation condition
| * 0daacb57 xhci: Apply broken streams quirk to Etron EJ188 xHCI host
| * 633f72cb xhci: Handle TD clearing for multiple streams case
| * 0a1c2a58 xhci: Apply reset resume quirk to Etron EJ188 xHCI host
| * f6559d28 xhci: Set correct transferred length for cancelled bulk transfers
| * 33aecc57 jfs: xattr: fix buffer overflow for invalid xattr
| * b6e5e696 landlock: Fix d_parent walk
| * 03f916e5 tty: n_tty: Fix buffer offsets when lookahead is used
| * 185a1b1f mei: me: release irq in mei_me_pci_resume error path
| * 2ad7e02c usb: typec: tcpm: Ignore received Hard Reset in TOGGLING state
| * 40536965 usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps
| * fb9f366a USB: xen-hcd: Traverse host/ when CONFIG_USB_XEN_HCD is selected
| * 02a4c049 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
| * c2844d5e io_uring: check for non-NULL file pointer in io_file_can_poll()
| * 129dcd3e nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
| * ea2ac923 nilfs2: return the mapped address from nilfs_get_page()
| * 8b0d6d18 btrfs: fix leak of qgroup extent records after transaction abort
| * b1a5d3f7 btrfs: make btrfs_destroy_delayed_refs() return void
| * 95e69b16 btrfs: remove unnecessary prototype declarations at disk-io.c
| * be70a6c5 wifi: ath10k: fix QCOM_RPROC_COMMON dependency
| * 46a072e0 selftests/mm: compaction_test: fix bogus test success on Aarch64
| * 264b8a7e selftests/mm: log a consistent test name for check_compaction
| * 5ba39134 selftests/mm: conform test to TAP format output
| * 499fd1db selftests/mm: compaction_test: fix incorrect write of zero to nr_hugepages
| * 198a8083 mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL
| * fe5c2bdc mm, vmalloc: fix high order __GFP_NOFAIL allocations
| * b1574c8c i2c: acpi: Unbind mux adapters before delete
| * ef1e9b62 i2c: add fwnode APIs
| * c0cd2d88 HID: i2c-hid: elan: fix reset suspend current leakage
| * 274ecd40 HID: i2c-hid: elan: Add ili9882t timing
| * 0fce1c95 firmware: qcom_scm: disable clocks if qcom_scm_bw_enable() fails
| * 5ee241f7 mmc: davinci: Don't strip remove function when driver is builtin
| * c3d39fdc serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler
| * aeb2b22e serial: sc16is7xx: replace hardcoded divisor value with BIT() macro
| * c0b8f491 misc/pvpanic-pci: register attributes via pci_driver
| * 96826e74 misc/pvpanic: deduplicate common code
| * 1529c86d arm64: dts: qcom: sa8155p-adp: fix SDHC2 CD pin configuration
| * eedbb969 arm64: dts: qcom: sm8150: align TLMM pin configuration with DT schema
| * a869a9b6 drm/amd/display: Fix incorrect DSC instance for MST
| * ed82dc58 drm/amd/display: drop unnecessary NULL checks in debugfs
| * b6621895 xtensa: fix MAKE_PC_FROM_RA second argument
| * eccf114a xtensa: stacktrace: include <asm/ftrace.h> for prototype
| * 5253a35e iio: accel: mxc4005: Reset chip on probe() and resume()
| * 02db5953 iio: accel: mxc4005: allow module autoloading via OF compatible
| * a0fdccb1 usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
| * b55bc525 usb: gadget: f_fs: use io_data->status consistently
| * e8b85823 btrfs: fix wrong block_start calculation for btrfs_drop_extent_map_range()
| * b45cfd9b Bluetooth: qca: fix invalid device address check
| * 2498960d ipv6: fix possible race in __fib6_drop_pcpu_from()
| * 6b9ff162 af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill().
| * 4a967bac af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen().
| * e3f2599e af_unix: Use skb_queue_empty_lockless() in unix_release_sock().
| * 4c64c3e2 af_unix: annotate lockless accesses to sk->sk_err
| * f5c42766 af_unix: Use unix_recvq_full_lockless() in unix_stream_connect().
| * 8b29fcd7 af_unix: Annotate data-race of net->unx.sysctl_max_dgram_qlen.
| * 19425cfe af_unix: Annotate data-races around sk->sk_state in UNIX_DIAG.
| * fda68a7d af_unix: Annotate data-race of sk->sk_state in unix_stream_read_skb().
| * f53cf044 af_unix: Annotate data-races around sk->sk_state in sendmsg() and recvmsg().
| * 018fc5d9 af_unix: Annotate data-race of sk->sk_state in unix_stream_connect().
| * 35bdc364 af_unix: Annotate data-races around sk->sk_state in unix_write_space() and poll().
| * a8814322 af_unix: Annotate data-race of sk->sk_state in unix_inq_len().
| * a59dc9cb af_unix: Annodate data-races around sk->sk_state for writers.
| * ca326055 af_unix: Set sk->sk_state under unix_state_lock() for truly disconencted peer.
| * fe394d59 net: wwan: iosm: Fix tainted pointer delete is case of region creation fail
| * a62c5054 ice: remove af_xdp_zc_qps bitmap
| * 447a5433 ice: remove null checks before devm_kfree() calls
| * a388961b ice: Introduce new parameters in ice_sched_node
| * 17ccdebe ice: fix iteration of TLVs in Preserved Fields Area
| * 952557eb ptp: Fix error message on failed pin verification
| * 0bf6cc96 net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
| * 531eab2d net/mlx5: Fix tainted pointer delete is case of flow rules creation fail
| * e7d4485d net/mlx5: Always stop health timer during driver removal
| * 0819acb8 net/mlx5: Split function_setup() to enable and open functions
| * 0c42eef3 net/mlx5: Stop waiting for PCI if pci channel is offline
| * e4df7b53 net/mlx5: Stop waiting for PCI up if teardown was triggered
| * a2ab7dae tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB
| * a31d0e5d vxlan: Fix regression when dropping packets due to invalid src addresses
| * 0f208fad net: sched: sch_multiq: fix possible OOB write in multiq_tune()
| * 1a0c20c0 net/smc: avoid overwriting when adjusting sock bufsizes
| * 87ef68f3 octeontx2-af: Always allocate PF entries from low prioriy zone
| * 3708b6c2 bpf: Set run context for rawtp test_run callback
| * a170d5a4 ipv6: sr: block BH in seg6_output_core() and seg6_input_core()
| * 9b3d1ba4 ipv6: ioam: block BH from ioam6_output()
| * 9bcdfdc6 net/ncsi: Fix the multi thread manner of NCSI driver
| * f2cd7e1b net/ncsi: Simplify Kconfig/dts control flow
| * e6ad2311 ax25: Replace kfree() in ax25_dev_free() with ax25_dev_put()
| * f4df9d6c ax25: Fix refcount imbalance on inbound connections
| * bd403f39 wifi: mac80211: correctly parse Spatial Reuse Parameter Set element
| * a8bc8276 wifi: iwlwifi: mvm: don't read past the mfuart notifcation
| * 9e719ae3 wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
| * ca4c2307 wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef
| * 8014a7db wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64
| * a5c20830 wifi: cfg80211: pmsr: use correct nla_get_uX functions
| * 6d540b03 wifi: cfg80211: Lock wiphy in cfg80211_get_station
| * 96c950d6 wifi: cfg80211: fully move wiphy work to unbound workqueue
| * 9c49b58b wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
| * 617dadbf wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
* | c6bbb760 ANDROID: ABI fixup for abi break in struct dst_ops
* | 079775fd Merge 6.1.94 into android14-6.1-lts
|/
* eb44d830 Linux 6.1.94
* 6d6fe13c smp: Provide 'setup_max_cpus' definition on UP too
* b09b556e smb: client: fix deadlock in smb2_find_smb_tcon()
* 3174d8b7 powerpc/bpf: enforce full ordering for ATOMIC operations with BPF_FETCH
* 1ff2bd56 btrfs: fix crash on racing fsync and size-extending write into prealloc
* e601937b NFS: Fix READ_PLUS when server doesn't support OP_READ_PLUS
* a54419e6 nfs: fix undefined behavior in nfs_block_bits()
* 728b663f EDAC/igen6: Convert PCIBIOS_* return codes to errnos
* 4e060b30 i3c: master: svc: fix invalidate IBI type and miss call client IBI handler
* 07c8050f s390/cpacf: Make use of invalid opcode produce a link error
* 1d39dcff s390/cpacf: Split and rework cpacf query functions
* 8c5f5911 s390/ap: Fix crash in AP internal function modify_bitmap()
* ff19ea00 parisc: Define sigset_t in parisc uapi header
* bca17801 parisc: Define HAVE_ARCH_HUGETLB_UNMAPPED_AREA
* e941b712 ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
* 16a392f6 ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow
* d47445b0 sparc: move struct termio to asm/termios.h
* 81dd3c82 net: fix __dst_negative_advice() race
* 10938be3 kdb: Use format-specifiers rather than memset() for padding in kdb_read()
* 60e2a14a kdb: Merge identical case statements in kdb_read()
* 0ec478e7 kdb: Fix console handling when editing and tab-completing commands
* b4e6a259 kdb: Use format-strings rather than '\0' injection in kdb_read()
* 33d9c814 kdb: Fix buffer overflow during tab-complete
* 6da1ffc4 watchdog: rti_wdt: Set min_hw_heartbeat_ms to accommodate a safety margin
* c7071d30 mm/hugetlb: pass correct order_per_bit to cma_declare_contiguous_nid
* 04b42782 mm/cma: drop incorrect alignment check in cma_init_reserved_mem
* 14a339e7 sparc64: Fix number of online CPUs
* 3ec82c9a intel_th: pci: Add Meteor Lake-S CPU support
* 82590ce3 cpufreq: amd-pstate: Fix the inconsistency in max frequency units
* 9ff078f5 kmsan: do not wipe out origin when doing partial unpoisoning
* ca71f204 net/9p: fix uninit-value in p9_client_rpc()
* 66840863 net/ipv6: Fix route deleting failure when metric equals 0
* 65bb86fb scsi: core: Handle devices which return an unusually large VPD page count
* 7a2bc8b3 mm: fix race between __split_huge_pmd_locked() and GUP-fast
* e7428e7e crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
* dd999fde crypto: ecrdsa - Fix module auto-load on add_key
* 458458c1 crypto: ecdsa - Fix module auto-load on add-key
* e0032f5c KVM: arm64: AArch32: Fix spurious trapping of conditional instructions
* 5b12ce0b KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode
* 4f902f03 KVM: arm64: Fix AArch32 register narrowing on userspace write
* 7da44257 drm/amd: Fix shutdown (again) on some SMU v13.0.4/11 platforms
* cb299cdb 9p: add missing locking around taking dentry fid list
* 97820893 drm/amdgpu/atomfirmware: add intergrated info v2.3 table
* edaa5748 fbdev: savage: Handle err return when savagefb_check_var failed
* 1a156761 mmc: sdhci-acpi: Add quirk to enable pull-up on the card-detect GPIO on Asus T100TA
* 4ac34dc6 mmc: sdhci-acpi: Disable write protect detection on Toshiba WT10-A
* 21109f13 mmc: sdhci-acpi: Fix Lenovo Yoga Tablet 2 Pro 1380 sdcard slot not working
* c2107d30 mmc: sdhci-acpi: Sort DMI quirks alphabetically
* 32b76505 mmc: sdhci: Add support for "Tuning Error" interrupts
* 36a28616 mmc: core: Add mmc_gpiod_set_cd_config() function
* 7170d0c0 media: v4l2-core: hold videodev_lock until dev reg, finishes
* 5d931a26 media: mxl5xx: Move xpt structures off stack
* 9ef7ee4c media: mc: mark the media devnode as registered from the, start
* 788fd0f1 media: mc: Fix graph walk in media_pipeline_start
* 9d180538 arm64: dts: hi3798cv200: fix the size of GICR
* 46fe2af4 wifi: rtlwifi: rtl8192de: Fix endianness issue in RX path
* 6973383a wifi: rtlwifi: rtl8192de: Fix low speed with WPA3-SAE
* 83daddb6 wifi: rtlwifi: rtl8192de: Fix 5 GHz TX power
* 2c13c9f6 wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU
* c365394a wifi: rtw89: pci: correct TX resource checking for PCI DMA channel of firmware command
* 3f8d5e80 md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
* 3f099721 arm64: dts: qcom: qcs404: fix bluetooth device address
* 2eea8b44 arm64: tegra: Correct Tegra132 I2C alias
* ef2f4d60 ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx
* 3988a285 soc: qcom: rpmh-rsc: Enhance check for VRM in-flight request
* 560d69c9 thermal/drivers/qcom/lmh: Check for SCM availability at probe
* 5e0d41aa ata: pata_legacy: make legacy_exit() work again
* 336b8b2e wifi: rtw89: correct aSIFSTime for 6GHz band
* 934e1e43 bcache: fix variable length array abuse in btree_iter
* 011552f2 drm/amdgpu: add error handle to avoid out-of-bounds
* d082757b media: lgdt3306a: Add a check against null-pointer-def
* 8c8aa473 f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
* 376fad5e scripts/gdb: fix SB_* constants parsing
* 6bbd9c02 vxlan: Fix regression when dropping packets due to invalid src addresses
* 7a898d5e mptcp: fix full TCP keep-alive support
* dc62d53f mptcp: cleanup SOL_TCP handling
* e7d48faa mptcp: avoid some duplicate code in socket option handling
* 164320fc drm/i915/audio: Fix audio time stamp programming for DP
* 86a30d63 nilfs2: fix use-after-free of timer for log writer thread
* 79fc40a2 riscv: signal: handle syscall restart before get_signal
* bc20a0a2 afs: Don't cross .backup mountpoint from backup volume
* 26542625 mmc: core: Do not force a retune before RPMB switch
* 883e5d54 maple_tree: fix mas_empty_area_rev() null pointer dereference
* 34f30053 maple_tree: fix allocation in mas_sparse_area()
* cf0df435 Bluetooth: btrtl: Add missing MODULE_FIRMWARE declarations
* a17e06d7 drm: Check polling initialized before enabling in drm_helper_probe_single_connector_modes
* 4ad8d57d drm: Check output polling initialized before disabling

Change-Id: I849966e53c4a46d2ee81b3b6078f953a08502872
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@google.com>
      41e1c6f9
  21. Sep 20, 2024
  23. Sep 19, 2024
  25. Sep 18, 2024