summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
5 daysMerge d2a970972800 ("btrfs: fix off-by-one chunk length calculation at ↵android13-5.10-ltsGreg Kroah-Hartman
contains_pending_extent()") into android-mainline Steps on the way to 5.10.215 Resolves the merge conflicts in: fs/fuse/dir.c Change-Id: I48fc0c5680bf9ecf543aac129bbaee0cdb172881 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
5 daysMerge c2f8af101ce2 ("mtd: rawnand: meson: fix scrambling mode value in ↵Greg Kroah-Hartman
command macro") into android-mainline Steps on the way to 5.10.215 Resolves merge conflicts with: drivers/tty/serial/max310x.c Change-Id: I93ae999461d2049fe2a01b3f781c2f0c222d77cd Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
5 daysUPSTREAM: bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUSMatthew Wilcox (Oracle)
commit 5af385f5f4cddf908f663974847a4083b2ff2c79 upstream. bits_per() rounds up to the next power of two when passed a power of two. This causes crashes on some machines and configurations. Reported-by: Михаил Новоселов <m.novosyolov@rosalinux.ru> Tested-by: Ильфат Гаптрахманов <i.gaptrakhmanov@rosalinux.ru> Link: https://gitlab.freedesktop.org/drm/amd/-/issues/3347 Link: https://lore.kernel.org/all/1c978cf1-2934-4e66-e4b3-e81b04cb3571@rosalinux.ru/ Fixes: f2d5dcb48f7b (bounds: support non-power-of-two CONFIG_NR_CPUS) Cc: <stable@vger.kernel.org> Change-Id: Icf971ddfeabb4f8fc979afe68df9bd26b50b7919 Signed-off-by: Matthew Wilcox (Oracle) <willy@infradead.org> Cc: Rik van Riel <riel@surriel.com> Cc: Mel Gorman <mgorman@techsingularity.net> Cc: Peter Zijlstra <peterz@infradead.org> Cc: Ingo Molnar <mingo@kernel.org> Cc: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 66297b2ceda841f809637731d287bda3a93b49d8) Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
5 daysMerge 83a2275f9d32 ("bounds: support non-power-of-two CONFIG_NR_CPUS") into ↵Greg Kroah-Hartman
android-mainline Steps on the way to 5.10.215 Change-Id: I83162be2e64ffc8de47784524f927c2f44a06fbe Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
5 daysRevert "block: introduce zone_write_granularity limit"Greg Kroah-Hartman
This reverts commit 6b4bb49e3418a78af0e35d18d97a926865276ec1 which is commit a805a4fa4fa376bbc145762bb8b09caa2fa8af48 upstream. It breaks the Android kernel abi and can be brought back in the future in an abi-safe way if it is really needed. Bug: 161946584 Change-Id: Ib32d4f828dc1ebceb03c73906e7867eaffbdee2f Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
5 daysRevert "block: Clear zone limits for a non-zoned stacked queue"Greg Kroah-Hartman
This reverts commit 96661f8c3d5f8d776252f549874196b4bfb74354 which is commit c8f6f88d25929ad2f290b428efcae3b526f3eab0 upstream. It breaks the Android kernel abi and can be brought back in the future in an abi-safe way if it is really needed. Bug: 161946584 Change-Id: I4de870534a51a42360da6558ea0164c0f66ee7a0 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
5 daysMerge 96661f8c3d5f ("block: Clear zone limits for a non-zoned stacked ↵Greg Kroah-Hartman
queue") into android-mainline Steps on the way to 5.10.215 Change-Id: I02c56ebfa17aa7793e5c3c044bacb4ffa32316a2 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
5 daysMerge 0eb348f4d736 ("ext4: correct best extent lstart adjustment logic") ↵Greg Kroah-Hartman
into android-mainline Steps on the way to 5.10.215 Change-Id: Ic166b67a20e8e41af4db39c06a2d2fef914066dc Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
5 daysMerge 6796844c054f ("sparc: vDSO: fix return value of __setup handler") into ↵Greg Kroah-Hartman
android-mainline Steps on the way to 5.10.215 Resolves merge conflicts in: drivers/tty/serial/max310x.c Change-Id: I56ba9d336491315ce1d75db70354e2821885241c Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
5 daysRevert "timers: Rename del_timer_sync() to timer_delete_sync()"Greg Kroah-Hartman
This reverts commit d8166e8adb7ffc3033cfab4c3b8c5f32d9d77e14 which is commit 9b13df3fb64ee95e2397585404e442afee2c7d4f upstream. It breaks the Android kernel abi by turning del_timer_sync() into an inline function, which breaks the abi. Fix this by putting it back as needed AND fix up the only use of this new function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c which is what caused this commit to be backported to 5.4.274 in the first place. Bug: 161946584 Change-Id: Icd26c7c81e6172f36eeeb69827989bfab1d32afe Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
6 daysMerge c560327d900b ("drm/vmwgfx: Fix possible null pointer derefence with ↵Greg Kroah-Hartman
invalid contexts") into android-mainline Steps on the way to 5.10.215 Change-Id: Ic9d31ed724a124bc27ce5f06cb463fc44d549633 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
6 daysMerge branch 'android13-5.10' into branch 'android13-5.10-lts'Greg Kroah-Hartman
Sync up the android13-5.10-lts branch up with recent changes and merges in the android13-5.10 branch. Changes in here include the following: * 0136a878f2b2 Merge tag 'android13-5.10.210_r00' into branch android13-5.10 * 32e6a7b364f7 UPSTREAM: selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior * be5580525551 UPSTREAM: powercap: dtpm_cpu: Fix error check against freq_qos_add_request() * 5654ee1eab60 UPSTREAM: usb: core: Prevent null pointer dereference in update_port_device_state * 56dc58f68371 UPSTREAM: scs: add CONFIG_MMU dependency for vfree_atomic() * b75708bc1f47 UPSTREAM: mm/damon/vaddr: change asm-generic/mman-common.h to linux/mman.h * 7cdc4dd8136e UPSTREAM: coresight: etm4x: Remove bogous __exit annotation for some functions * fdaca9c4c59a UPSTREAM: ASoC: hdmi-codec: register hpd callback on component probe * 942024e326e4 UPSTREAM: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() * 0c24e4d29f2a UPSTREAM: crypto: xts - use 'spawn' for underlying single-block cipher * d7c73d7e697d UPSTREAM: scsi: ufs: core: Correct clear TM error log * d5a29659918d UPSTREAM: firmware: arm_ffa: Assign the missing IDR allocation ID to the FFA device * 48083a5b498c UPSTREAM: mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() * 5c0247fa3189 UPSTREAM: ata: libata-scsi: Fix delayed scsi_rescan_device() execution * 05ec1b13e7ca UPSTREAM: firmware: arm_ffa: Don't set the memory region attributes for MEM_LEND * 9443d76d12f5 UPSTREAM: task_work: add kerneldoc annotation for 'data' argument * 402051fcbf13 ANDROID: export one function for mm metrics * 62314e2b0fa4 ANDROID: GKI: rockchip: Add symbols for some charger and * ce4db2481eb5 UPSTREAM: cpuidle: teo: Update idle duration estimate when choosing shallower state * 18126b265062 UPSTREAM: firmware: arm_scmi: Fix chan_free cleanup on SMC * 2d2a6139c295 UPSTREAM: clk: Fix memory leak in devm_clk_notifier_register() * 6eae7cd7caa5 UPSTREAM: selftests: damon: add config file * 4599499a5a3e UPSTREAM: firmware: arm_ffa: Set handle field to zero in memory descriptor * a1755ffcd68a UPSTREAM: usb: dwc3: qcom: fix wakeup implementation * 9429d3dd709b UPSTREAM: kernfs: fix potential NULL dereference in __kernfs_remove * f6d1a01fac51 ANDROID: irq: put irq_resolve_mapping under protection of __irq_enter_raw * fd07886c72df ANDROID: usb: Optimize the problem of slow transfer rate in USB accessory mode * 4399b7da1b98 ANDROID: 16K: Fix show maps CFI failure * 8a4d40f25a1f ANDROID: 16K: Handle pad VMA splits and merges * fda5f6128c13 ANDROID: 16K: madvise_vma_pad_pages: Remove filemap_fault check * 115d1ca5da7e ANDROID: 16K: Only madvise padding from dynamic linker context * 634ea3b4d201 ANDROID: 16K: Separate padding from ELF LOAD segment mappings * 3cbf5a289f8a ANDROID: 16K: Exclude ELF padding for fault around range * 7699c552289a ANDROID: 16K: Use MADV_DONTNEED to save VMA padding pages. * f2822b2e999a ANDROID: 16K: Introduce ELF padding representation for VMAs * a002ae8d8db1 ANDROID: 16K: Introduce /sys/kernel/mm/pgsize_miration/enabled * 42fe3e1559f1 UPSTREAM: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path * 7f9f20283d31 UPSTREAM: netfilter: nf_tables: release batch on table validation from abort path * 578bf5a40c25 UPSTREAM: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout * adbb45dfbafb UPSTREAM: netfilter: nft_set_pipapo: release elements in clone only from destroy path * 6a1e219e608c UPSTREAM: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain * f5b5be364645 BACKPORT: mm: update mark_victim tracepoints fields * 82cf5d6a4665 Revert "FROMGIT: BACKPORT: mm: update mark_victim tracepoints fields" Change-Id: Idd3f7556caa6856861f2c80961dee9e102892848 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
8 daysMerge tag 'android13-5.10.210_r00' into branch android13-5.10Greg Kroah-Hartman
This catches the android13-5.10 branch up to the 5.10.210 LTS release. Included in here are the following commits: * 70b6ab09a34b Revert "hrtimer: Report offline hrtimer enqueue" * 104f774967e1 Revert "scsi: core: Introduce enum scsi_disposition" * 9ace6893a600 Revert "scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler" * 80e820038026 Revert "scsi: core: Move scsi_host_busy() out of host lock if it is for per-command" * 17c44ed96d6f Revert "bpf: Add map and need_defer parameters to .map_fd_put_ptr()" * d364016872f2 Revert "drm/mipi-dsi: Fix detach call without attach" * ff7fafe3e6be Revert "serial: Add rs485_supported to uart_port" * 32186f0cb54e Revert "serial: 8250_exar: Fill in rs485_supported" * 3647b304a115 Revert "serial: 8250_exar: Set missing rs485_supported flag" * 354be74b7ea9 Revert "ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()" * 46028d3cad00 Merge 5.10.210 into android13-5.10-lts |\ | * aa6ca808a467 Linux 5.10.210 | * cf5a69e35591 PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq() | * 9f53d24852ff net: bcmgenet: Fix EEE implementation | * 9a865a11d689 netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() | * 67f386f75637 drm/msm/dsi: Enable runtime PM | * 21b38d85f6de PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() | * ede393e11819 PM: runtime: add devm_pm_runtime_enable helper | * a891a0621e72 dm: limit the number of targets and parameter size area | * c90746c03b3c nilfs2: replace WARN_ONs for invalid DAT metadata block requests | * f3e4963566f5 nilfs2: fix potential bug in end_buffer_async_write | * db896bbe4a9c sched/membarrier: reduce the ability to hammer on sys_membarrier | * 8f8f18564374 net: prevent mss overflow in skb_segment() | * f7e0231eeaa3 Revert "arm64: Stash shadow stack pointer in the task struct on interrupt" | * 70ca0dbae4e9 hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range() | * c80ddc10927f netfilter: ipset: Missing gc cancellations fixed | * a24d5f2ac8ef netfilter: ipset: fix performance regression in swap operation | * 583a6c76b949 scripts/decode_stacktrace.sh: optionally use LLVM utilities | * 0f906882eba5 scripts: decode_stacktrace: demangle Rust symbols | * a3d71b6ae935 scripts/decode_stacktrace.sh: support old bash version | * ae992f14b117 scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm | * 00f09825e14c serial: 8250_exar: Set missing rs485_supported flag | * 84bf7b87594d serial: 8250_exar: Fill in rs485_supported | * dfd8b9d26b8b serial: Add rs485_supported to uart_port | * 0c3687822259 crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init | * e0d2eeec88ae mips: Fix max_mapnr being uninitialized on early stages | * 41a4bd51d87c PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support | * ff67f77fb0fc bus: moxtet: Add spi device table | * 88ec9bbcd33c Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" | * 6a42eb0d2170 tracing: Inform kmemleak of saved_cmdlines allocation | * 3a6e27dbe2fe pmdomain: core: Move the unused cleanup to a _sync initcall | * 978e50ef8c38 can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) | * e4a6d3acaddb of: property: fix typo in io-channels | * 8180d0c27b93 ceph: prevent use-after-free in encode_cap_msg() | * 2e9506c9e0b9 s390/qeth: Fix potential loss of L3-IP@ in case of network issues | * 888679afbfc2 irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update | * 2809645d8ae2 irqchip/irq-brcmstb-l2: Add write memory barrier before exit | * 45a3657c3fae wifi: mac80211: reload info pointer in ieee80211_tx_dequeue() | * c7fa9590a9b2 nfp: flower: prevent re-adding mac index for bonded port | * 962091c40813 nfp: use correct macro for LengthSelect in BAR config | * 58054faf3bd2 crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked | * 98a4026b22ff nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() | * 364a66be2abd nilfs2: fix data corruption in dsync block recovery for small block sizes | * a643d8d17947 ALSA: hda/conexant: Add quirk for SWS JS201D | * ca0533fe6650 mmc: slot-gpio: Allow non-sleeping GPIO ro | * bdc29f9ca3b1 x86/mm/ident_map: Use gbpages only where full GB page should be mapped. | * 09f21bee5b02 x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6 | * 1a8a72ee17e4 serial: max310x: improve crystal stable clock detection | * 6f248ee7aade serial: max310x: set default value when reading clock ready bit | * 92a0a5d61376 ring-buffer: Clean ring_buffer_poll_wait() error return | * 9ec807e7b6f5 hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove | * 93d8109bf182 media: rc: bpf attach/detach requires write permission | * a98ccbcddbb5 iio: accel: bma400: Fix a compilation problem | * 36a49290d7e6 iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC | * fa5884dd5bc2 staging: iio: ad5933: fix type mismatch regression | * 8a744f925de0 tracing: Fix wasted memory in saved_cmdlines logic | * d033a555d9a1 ext4: fix double-free of blocks due to wrong extents moved_len | * f86e12415b4e misc: fastrpc: Mark all sessions as invalid in cb_remove | * a423042052ec binder: signal epoll threads of self-work | * 6d11240dd11b ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL | * cdaddb457d9e xen-netback: properly sync TX responses | * 0d8011a878fd net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() | * 2f6d16f0520d nfc: nci: free rx_data_reassembly skb on NCI device cleanup | * 5abf3e8af2e3 kbuild: Fix changing ELF file type for output of gen_btf for big endian | * 6717c593c7cf firewire: core: correct documentation of fw_csr_string() kernel API | * 2dc1d93b2c77 lsm: fix the logic in security_inode_getsecctx() | * 7d4e19f7ff64 scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock" | * ca188f2512d6 modpost: trim leading spaces when processing source files list | * 7a14b8a477b8 i2c: i801: Fix block process call transactions | * 5e8a6140d42f i2c: i801: Remove i801_set_block_buffer_mode | * 230e89b5ad0a powerpc/kasan: Fix addr error caused by page alignment | * 486a4176bc78 media: ir_toy: fix a memleak in irtoy_tx | * b8da59ad91e8 usb: f_mass_storage: forbid async queue when shutdown happen | * 9a8ccbc6ecbf USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT | * 9d07bdbfa490 usb: ucsi_acpi: Fix command completion handling | * f304eb483393 HID: wacom: Do not register input devices until after hid_hw_start | * 4f7927310e2d HID: wacom: generic: Avoid reporting a serial of '0' to userspace | * d51fc41e159f ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx | * 8da18c51ce4a ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32 | * 81e7d2530d45 mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again | * 56cfbe607107 tracing/trigger: Fix to return error if failed to alloc snapshot | * 6d05659b60ac i40e: Fix waiting for queues of all VSIs to be disabled | * f026f23849fb MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler | * ed8c87ac8afc net: sysfs: Fix /sys/class/net/<iface> path for statistics | * 4a98bc739d07 ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() | * f8cd86c67d4c spi: ppc4xx: Drop write-only variable | * 55cfccb658fc net: openvswitch: limit the number of recursions from action sets | * 3f9b9585b7e4 of: unittest: Fix compile in the non-dynamic case | * dc8bce9c71ef btrfs: send: return EOPNOTSUPP on unknown flags | * 22965e4fee0f btrfs: forbid deleting live subvol qgroup | * 3f5d47eb163b btrfs: do not ASSERT() if the newly created subvolume already got read | * d7247ce32ab2 btrfs: forbid creating subvol qgroups | * 4cee42fcf54f netfilter: nft_set_rbtree: skip end interval element from gc | * feace3c24044 net: stmmac: xgmac: fix a typo of register name in DPP safety handling | * 78115a3473b1 net: stmmac: xgmac: use #define for string constants | * 8868106251cd clocksource: Skip watchdog check for large watchdog intervals | * cda4ca038caf vhost: use kzalloc() instead of kmalloc() followed by memset() | * 63d97c3abafd Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID | * 9a564a9a0731 Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU | * b1f576be92d0 hrtimer: Report offline hrtimer enqueue | * b87060b3e835 usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK | * 34fd6f444b8a USB: serial: cp210x: add ID for IMST iM871A-USB | * 53479fcfd04c USB: serial: option: add Fibocom FM101-GL variant | * c537b88b39d3 USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e | * e800ef36d1fa net/af_iucv: clean up a try_then_request_module() | * 9f56f3833117 blk-iocost: Fix an UBSAN shift-out-of-bounds warning | * 9878c660d1f0 scsi: core: Move scsi_host_busy() out of host lock if it is for per-command | * 1dd947c21d3f netfilter: nft_set_pipapo: remove scratch_aligned pointer | * d6fcad0da2bd netfilter: nft_set_pipapo: add helper to release pcpu scratch area | * 1771e8347ff1 netfilter: nft_set_pipapo: store index in scratch maps | * d1ec65c49e74 netfilter: nft_ct: reject direction for ct id | * 730fce47e593 netfilter: nft_compat: restrict match/target protocol to u16 | * 78909916a22b netfilter: nft_compat: reject unused compat flag | * b06e067e93fa ppp_async: limit MRU to 64K | * 19d7314f2fb9 tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() | * 09e91f3e7e5c rxrpc: Fix response to PING RESPONSE ACKs to a dead call | * 88081ba41522 inet: read sk->sk_family once in inet_recv_error() | * 7e42379d29de hwmon: (coretemp) Fix bogus core_id to attr name mapping | * f0da068c75c2 hwmon: (coretemp) Fix out-of-bounds memory access | * 9551de5caa2b hwmon: (aspeed-pwm-tacho) mutex for tach reading | * edfd328fe7bd atm: idt77252: fix a memleak in open_card_ubr0 | * e77bf828f1ca tunnels: fix out of bounds access when building IPv6 PMTU error | * fd473100bfed selftests: net: avoid just another constant wait | * 2fc45a4631ac net: stmmac: xgmac: fix handling of DPP safety error for DMA channels | * 66c8243e6130 drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case | * be3b82e4871b phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP | * 784d31548236 dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV | * 68459d2b0c21 phy: renesas: rcar-gen3-usb2: Fix returning wrong error code | * ae6769ba5141 dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA | * fbe1c5c6a8a2 dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA | * 3496a1da711e dmaengine: ti: k3-udma: Report short packet errors | * b7dbf4115bd8 dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools | * 6db18971f73a PM: sleep: Fix error handling in dpm_prepare() | * 6388d0e3200d uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ | * 2563e7c6877d bonding: remove print in bond_verify_device_path | * d1a9900e6442 HID: apple: Add 2021 magic keyboard FN key mapping | * b1e3ea7c48a5 HID: apple: Add support for the 2021 Magic Keyboard | * e5eca7954aac net: sysfs: Fix /sys/class/net/<iface> path | * f199018dc762 af_unix: fix lockdep positive in sk_diag_dump_icons() | * 9c9cab01c7a3 net: ipv4: fix a memleak in ip_setup_cork | * 65ee90efc928 netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations | * 32fa7abb18b0 netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger | * d0b5b1f12429 llc: call sock_orphan() at release time | * e34c91e7e8a3 ipv6: Ensure natural alignment of const ipv6 loopback and router addresses | * b45fae96bd1e ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() | * f8bccfa175a5 ixgbe: Refactor overtemp event handling | * e16c254f60d3 ixgbe: Refactor returning internal error codes | * 2499c0661b18 ixgbe: Remove non-inclusive language | * f48bf9a83b16 tcp: add sanity checks to rx zerocopy | * 14690e419bb3 net-zerocopy: Refactor frag-is-remappable test. | * a9bc32879a08 ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() | * a57b114a84f8 ip6_tunnel: use dev_sw_netstats_rx_add() | * f5944853f7a9 scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler | * 7efadce40a6b scsi: core: Introduce enum scsi_disposition | * dca11bfa0125 scsi: isci: Fix an error code problem in isci_io_request_build() | * 948090f66aed drm: using mul_u32_u32() requires linux/math64.h | * 02161f622df3 wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update | * b54eecdc08d4 perf: Fix the nr_addr_filters fix | * 73eda2693117 drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()' | * feacc800407c drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()' | * e016e358461b ceph: fix deadlock or deadcode of misusing dget() | * 7610ba131925 blk-mq: fix IO hang from sbitmap wakeup race | * 27ae156e638d virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings | * 0079078f5ee8 libsubcmd: Fix memory leak in uniq() | * 32a824378841 PCI/AER: Decode Requester ID when no error info found | * feaf0752b310 fs/kernfs/dir: obey S_ISGID | * 6f921430b07a tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE | * e962b59d3749 usb: hub: Replace hardcoded quirk value with BIT() macro | * 4a5d0528cf19 PCI: switchtec: Fix stdev_release() crash after surprise hot remove | * 385e49a40fff PCI: Only override AMD USB controller if required | * bb59b30a5ce2 mfd: ti_am335x_tscadc: Fix TI SoC dependencies | * e4fdf3b17686 xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import | * 89bdf3a9f98c i3c: master: cdns: Update maximum prescaler value for i2c clock | * b345f330aeed um: net: Fix return type of uml_net_start_xmit() | * ef21984653fc um: Don't use vfprintf() for os_info() | * e4cc55538841 um: Fix naming clash between UML and scheduler | * d47f5d41d8c0 leds: trigger: panic: Don't register panic notifier if creating the trigger failed | * 8342ac4a552a drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' | * 48bb06f8e380 drm/amdgpu: Let KFD sync with VM fences | * e90c8f9785ea watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786 | * 6f59516a36b9 clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() | * 2cb6059468f8 clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() | * 5fd28ab1c89d drm/msm/dpu: Ratelimit framedone timeout msgs | * 179fe24bd675 media: ddbridge: fix an error code problem in ddb_probe | * ac2630fd3c90 IB/ipoib: Fix mcast list locking | * 9503ce5f8795 drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time | * 1eeca000f268 ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL | * 3841b8a64e60 ALSA: hda: Intel: add HDA_ARL PCI ID support | * 56d717aa7bbe PCI: add INTEL_HDA_ARL to pci_ids.h | * b68e373dc031 media: rockchip: rga: fix swizzling for RGB formats | * 32c5e3f8085f media: stk1160: Fixed high volume of stk1160_dbg messages | * 425a441c5c32 drm/mipi-dsi: Fix detach call without attach | * 0ec29a0f0366 drm/framebuffer: Fix use of uninitialized variable | * d7b81afa11ba drm/drm_file: fix use of uninitialized variable | * 9a572fc1f6af f2fs: fix write pointers on zoned device after roll forward | * 7fb8c132738b drm/amd/display: Fix tiled display misalignment | * 3a1da8abd772 RDMA/IPoIB: Fix error code return in ipoib_mcast_join | * 13d20b2c20be fast_dput(): handle underflows gracefully | * 706fb30da0a5 ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument | * 354785abdf5e ALSA: hda: Refer to correct stream index at loops | * 80c69f576ff3 f2fs: fix to check return value of f2fs_reserve_new_block() | * e474e7a7d6f9 i40e: Fix VF disable behavior to block all traffic | * ed6de41473c8 Bluetooth: L2CAP: Fix possible multiple reject send | * e1bcd9a42e5b Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066 | * 27575c2f1f46 wifi: cfg80211: free beacon_ies when overridden from hidden BSS | * 40bcbf7d9069 wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() | * 1632481a990d wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices | * 2131606a5fd7 arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property | * 4668f3e6ac23 arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property | * 82f6e7e68e95 md: Whenassemble the array, consult the superblock of the freshest device | * 1746cd95a553 block: prevent an integer overflow in bvec_try_merge_hw_page | * 1335310a6a87 net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path | * 9c51d26ff95f ARM: dts: imx23/28: Fix the DMA controller node name | * 6c22388d960f ARM: dts: imx23-sansa: Use preferred i2c-gpios properties | * fb9bdf84b612 ARM: dts: imx27-apf27dev: Fix LED name | * 1dd3a37909d7 ARM: dts: imx25/27: Pass timing0 | * 3c2bce897698 ARM: dts: imx25: Fix the iim compatible string | * 95bc866c1197 block/rnbd-srv: Check for unlikely string overflow | * 03ca1d3d8f4d ionic: pass opcode to devcmd_wait | * ba108f3db98c ARM: dts: imx1: Fix sram node | * 2f22ce556e38 ARM: dts: imx27: Fix sram node | * e6c0ea054cf9 ARM: dts: imx: Use flash@0,0 pattern | * bfbaf1551bee ARM: dts: imx25/27-eukrea: Fix RTC node name | * 24bb6b264792 ARM: dts: rockchip: fix rk3036 hdmi ports node | * 11c1fc73bf17 bpf: Set uattr->batch.count as zero before batched update or deletion | * 2e7f8d05ec95 scsi: libfc: Fix up timeout error in fc_fcp_rec_error() | * a72670f465a1 scsi: libfc: Don't schedule abort twice | * 80700978cb34 bpf: Add map and need_defer parameters to .map_fd_put_ptr() | * 84770a996ad8 wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() | * c390b6a2c30b ARM: dts: imx7s: Fix nand-controller #size-cells | * d7cb295b53f9 ARM: dts: imx7s: Fix lcdif compatible | * 73ead7a37a4d ARM: dts: imx7d: Fix coresight funnel ports | * 86781b3a8eae scsi: arcmsr: Support new PCI device IDs 1883 and 1886 | * db516f6030bf bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk | * 4f87b8d93297 PCI: Add no PM reset quirk for NVIDIA Spectrum devices | * 9bc7617a0d46 scsi: lpfc: Fix possible file string name overflow when updating firmware | * 9b9bbba16be4 selftests/bpf: Fix pyperf180 compilation failure with clang18 | * 747838941f1c selftests/bpf: satisfy compiler by having explicit return in btf test | * 69e905beca19 wifi: rt2x00: restart beacon queue when hardware reset | * cfbbb3199e71 ext4: avoid online resizing failures due to oversized flex bg | * e7b9fa6c298f ext4: remove unnecessary check from alloc_flex_gd() | * b96019242269 ext4: unify the type of flexbg_size to unsigned int | * 64448275f8ef ext4: fix inconsistent between segment fstrim and full fstrim | * 5183595c0bfd ecryptfs: Reject casefold directory inodes | * c430e6bb4395 SUNRPC: Fix a suspicious RCU usage warning | * 150a3a387149 KVM: s390: fix setting of fpc register | * 856caf2730ea s390/ptrace: handle setting of fpc register correctly | * e2b77d107b33 jfs: fix array-index-out-of-bounds in diNewExt | * 5f1f459520ed rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() | * ae53c54ed74c afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() | * a02356d996b4 afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu() | * 108c4db05791 crypto: stm32/crc32 - fix parsing list of devices | * a63e48cd835c pstore/ram: Fix crash when setting number of cpus to an odd number | * bc6ef64dbe71 jfs: fix uaf in jfs_evict_inode | * 2037cb9d95f1 jfs: fix array-index-out-of-bounds in dbAdjTree | * 1c40ca3d39d7 jfs: fix slab-out-of-bounds Read in dtSearch | * 7aa33854477d UBSAN: array-index-out-of-bounds in dtSplitRoot | * de34de6e57bb FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree | * 95c864c81148 ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events | * 3399cc7013e7 PM / devfreq: Synchronize devfreq_monitor_[start/stop] | * b17a71435e7e ACPI: extlog: fix NULL pointer dereference check | * c2615948536a PNP: ACPI: fix fortify warning | * 3a13ed6298c4 ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop | * c74b2af2ccbc audit: Send netlink ACK before setting connection in auditd_set | * 37e00ed71e86 regulator: core: Only increment use_count when enable_count changes | * 19c71322702d debugobjects: Stop accessing objects after releasing hash bucket lock | * c57cb397fe23 perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file | * 5224b9db24f6 x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel | * beee482cc4c9 powerpc/lib: Validate size for vector operations | * 24a58abcfff3 powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE | * 02e5b2ff4753 x86/boot: Ignore NMIs during very early boot | * 9d06c199d881 powerpc/mm: Fix build failures due to arch_reserved_kernel_pages() | * 3928c06363de powerpc: Fix build error due to is_valid_bugaddr() | * 353496cb35e2 drivers/perf: pmuv3: don't expose SW_INCR event in sysfs | * aa28eecb43ca powerpc/mm: Fix null-pointer dereference in pgtable_cache_add | * 4e806600eb14 x86/entry/ia32: Ensure s32 is sign extended to s64 | * cdc01845df11 tick/sched: Preserve number of idle sleeps across CPU hotplug events | * 3736a7832bfe mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan | * 95a8a5193e06 spi: bcm-qspi: fix SFDP BFPT read by usig mspi read | * f1ba5bf9e0ac gpio: eic-sprd: Clear interrupt after set the interrupt type | * 0924bcd2fd49 drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume | * b6abe30de368 drm/exynos: fix accidental on-stack copy of exynos_drm_plane | * 4e56c5a9b9cf drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33] | * e1c50b0c6242 btrfs: avoid copying BTRFS_ROOT_SUBVOL_DEAD flag to snapshot of subvolume being deleted | * d073f4608b47 btrfs: remove err variable from btrfs_delete_subvolume | * 90ad17575d26 mm/sparsemem: fix race in accessing memory_section->usage | * 74a80f8dda6a mm: use __pfn_to_section() instead of open coding it | * 43872f44eee6 media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run | * 9087d0c2ba04 arm64: dts: qcom: sc7180: fix USB wakeup interrupt types | * 3de807b14036 arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts | * 8b2c7bb60510 ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12 | * 162ae0e78bda pipe: wakeup wr_wait after setting max_usage | * b6f27626f56e fs/pipe: move check to pipe_has_watch_queue() | * f46eb832389f PM: sleep: Fix possible deadlocks in core system-wide PM code | * 8b604883d4cb PM: core: Remove unnecessary (void *) conversions | * 57df40f80089 PM: sleep: Avoid calling put_device() under dpm_list_mtx | * 2245a8498569 PM: sleep: Use dev_printk() when possible | * 8a6a51b80bbd drm/bridge: nxp-ptn3460: simplify some error checking | * bedbbdf05663 drm/tidss: Fix atomic_flush check | * ea192526910d drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking | * f55261469be8 drm: Don't unref the same fb many times by mistake due to deadlock handling | * bb575bc3e767 gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 | * 55a60251fa50 netfilter: nf_tables: reject QUEUE/DROP verdict parameters | * 9489e214ea8f netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain | * 05dd9facfb9a wifi: iwlwifi: fix a memory corruption | * c0760a5c3e28 exec: Fix error handling in begin_new_exec() | * 30f38928b69b rbd: don't move requests to the running list on errors | * 2bdf872bcfe6 btrfs: don't abort filesystem when attempting to snapshot deleted subvolume | * 5d3687baa9db btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args | * f27937426b57 btrfs: don't warn if discard range is not aligned to sector | * f8a7a51a6c2d btrfs: tree-checker: fix inline ref size in error messages | * be90e25880f2 btrfs: ref-verify: free ref cache before clearing mount opt | * 7c3a572e1581 net: fec: fix the unhandled context fault from smmu | * a52b2faf6010 fjes: fix memleaks in fjes_hw_setup | * e1bf3ec97a82 selftests: netdevsim: fix the udp_tunnel_nic test | * 83f99138bf3b net: mvpp2: clear BM pool before initialization | * 6a2e2d9890e7 netfilter: nf_tables: validate NFPROTO_* family | * 4fbdc3a18f61 netfilter: nf_tables: restrict anonymous set and map names to 16 bytes | * cf116d9c3c2a net/mlx5e: fix a double-free in arfs_create_groups | * 1123661a089a net/mlx5: DR, Use the right GVMI number for drop action | * a3eba5989fc9 ipv6: init the accept_queue's spinlocks in inet6_create | * be8d1f619ea3 netlink: fix potential sleeping issue in mqueue_flush_file | * 69ca75e063a5 tcp: Add memory barrier to tcp_push() | * 8499e2f1218e afs: Hide silly-rename files from userspace | * ef70dfa0b1e5 tracing: Ensure visibility when inserting an element into tracing_map | * 5ae8d5004463 net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv | * 9ccdef19cf94 llc: Drop support for ETH_P_TR_802_2. | * 04f2a74b562f llc: make llc_ui_sendmsg() more robust against bonding changes | * ea4c3cb7fded vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING | * fc74f86a3367 bnxt_en: Wait for FLR to complete during probe | * bc99dcedd2f4 tcp: make sure init the accept_queue's spinlocks once | * 5fed92ca32ea net/smc: fix illegal rmb_desc access in SMC-D connection dump | * c71e1c1a08c2 KVM: use __vcalloc for very large allocations | * 95670878a612 mm: vmalloc: introduce array allocation functions | * 02f629bb460d smb3: Replace smb2pdu 1-element arrays with flex-arrays | * 443b16ee3d9c stddef: Introduce DECLARE_FLEX_ARRAY() helper | * bfc0647791d7 block: Remove special-casing of compound pages | * ff4332f1ec75 rename(): fix the locking of subdirectories | * d132010e6d5c ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path | * c6e6640784e4 nouveau/vmm: don't set addr on the fail path to avoid warning | * 83217f1bcb35 rtc: Adjust failure return code for cmos_set_alarm() | * b51578bd86be mmc: mmc_spi: remove custom DMA mapped buffers | * 59020bf0999f mmc: core: Use mrq.sbc in close-ended ffu | * 625cb3f3bc8a scripts/get_abi: fix source path leak | * 311dc5afad11 lsm: new security_file_ioctl_compat() hook * | 8d3bb9cb3b7d Merge f726690397df ("arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts") into android13-5.10-lts |\| | * f726690397df arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts | * dfc2c685f3a9 arm64: dts: qcom: sdm845: fix USB wakeup interrupt types | * ac4dcccbe910 async: Introduce async_schedule_dev_nocall() | * 9ef68b58fd00 async: Split async_schedule_node_domain() | * 1dd8449e2008 parisc/firmware: Fix F-extend for PDC addresses | * 20a6dea2d1c6 bus: mhi: host: Drop chan lock before queuing buffers * | c449d2a618ef Merge 69ca89d80f2c ("rpmsg: virtio: Free driver_override when rpmsg_remove()") into android13-5.10-lts |\| | * 69ca89d80f2c rpmsg: virtio: Free driver_override when rpmsg_remove() | * cd51e26a3b89 crypto: s390/aes - Fix buffer overread in CTR mode | * c6a8111aacbf hwrng: core - Fix page fault dead lock on mmap-ed hwrng * | cedc53c62e75 Merge 981a31b7547a ("PM: hibernate: Enforce ordering during image compression/decompression") into android13-5.10-lts |\| | * 981a31b7547a PM: hibernate: Enforce ordering during image compression/decompression * | 9f30cf152210 Revert "crypto: api - Disallow identical driver names" * | 7c6cdc23f361 Merge 462c383e732f ("crypto: api - Disallow identical driver names") into android13-5.10-lts |\| | * 462c383e732f crypto: api - Disallow identical driver names * | 1d535cec0cb4 Merge fa9491224183 ("ext4: allow for the last group to be marked as trimmed") into android13-5.10-lts |\| | * fa9491224183 ext4: allow for the last group to be marked as trimmed * | 7530ef4a12d2 Merge d173ef1255bb ("iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.") into android13-5.10-lts |\| | * d173ef1255bb iio:adc:ad7091r: Move exports into IIO_AD7091R namespace. * | d82f901b3eb5 Merge 9de69732dde4 ("dmaengine: fix NULL pointer in channel unregistration function") into android13-5.10-lts |\| | * 9de69732dde4 dmaengine: fix NULL pointer in channel unregistration function | * 653d2890602c iio: adc: ad7091r: Enable internal vref if external vref is not supplied | * 1eba6f7ffa29 iio: adc: ad7091r: Allow users to configure device events | * 9ec7498a25f1 iio: adc: ad7091r: Set alert bit in config register | * be5d6a297d30 serial: sc16is7xx: add check for unsupported SPI modes during probe | * 8df2aec94bf5 spi: introduce SPI_MODE_X_MASK macro | * 6ec08ce3bf7f serial: sc16is7xx: set safe default SPI clock frequency | * e83f1149942f units: add the HZ macros | * 762217e973ea units: change from 'L' to 'UL' * | 3c981dac49d9 Merge f37f4a0c537c ("PCI: mediatek: Clear interrupt status before dispatching handler") into android13-5.10-lts |\| | * f37f4a0c537c PCI: mediatek: Clear interrupt status before dispatching handler | * 490eaca84275 usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled | * bf703214190c usb: cdns3: fix iso transfer error when mult is not zero | * 6aec2f089d5c usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config | * 2fdc98b05cb2 usb: cdns3: fix uvc failure work since sg support enabled | * 67d3c71cf856 usb: cdns3: Fixes for sparse warnings * 4e1bc8d8e8ae Merge branch 'android13-5.10' into branch 'android13-5.10-lts' * e7daca75b4c3 ANDROID: GKI: db845c: Update symbols list and ABI Change-Id: Id4da30bdbee443883c82f6dece1214f29b4f5ee8 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
9 daysUPSTREAM: selftests: timers: Fix valid-adjtimex signed left-shift undefined ↵John Stultz
behavior [ Upstream commit 076361362122a6d8a4c45f172ced5576b2d4a50d ] The struct adjtimex freq field takes a signed value who's units are in shifted (<<16) parts-per-million. Unfortunately for negative adjustments, the straightforward use of: freq = ppm << 16 trips undefined behavior warnings with clang: valid-adjtimex.c:66:6: warning: shifting a negative signed value is undefined [-Wshift-negative-value] -499<<16, ~~~~^ valid-adjtimex.c:67:6: warning: shifting a negative signed value is undefined [-Wshift-negative-value] -450<<16, ~~~~^ .. Fix it by using a multiply by (1 << 16) instead of shifting negative values in the valid-adjtimex test case. Align the values for better readability. Bug: 339526723 Reported-by: Lee Jones <joneslee@google.com> Reported-by: Muhammad Usama Anjum <usama.anjum@collabora.com> Change-Id: Ied611c13a802acf9c7a2427f0a61eb358b571a3d Signed-off-by: John Stultz <jstultz@google.com> Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Reviewed-by: Muhammad Usama Anjum <usama.anjum@collabora.com> Link: https://lore.kernel.org/r/20240409202222.2830476-1-jstultz@google.com Link: https://lore.kernel.org/lkml/0c6d4f0d-2064-4444-986b-1d1ed782135f@collabora.com/ Signed-off-by: Sasha Levin <sashal@kernel.org> (cherry picked from commit 1f3484dec916a3c4f43c4c44bad398bc24373110) Signed-off-by: Edward Liaw <edliaw@google.com>
9 daysUPSTREAM: powercap: dtpm_cpu: Fix error check against freq_qos_add_request()Daniel Lezcano
The caller of the function freq_qos_add_request() checks again a non zero value but freq_qos_add_request() can return '1' if the request already exists. Therefore, the setup function fails while the QoS request actually did not failed. Fix that by changing the check against a negative value like all the other callers of the function. Bug: 254441685 Fixes: 0e8f68d7f0485 ("Add CPU energy model based support") Signed-off-by: Daniel Lezcano <daniel.lezcano@linaro.org> Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com> (cherry picked from commit b50155cb0d609437236c88201206267835c6f965) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: If7620f9b32b6493e08cca43dc714c33be05cdbcd
9 daysUPSTREAM: usb: core: Prevent null pointer dereference in ↵Udipto Goswami
update_port_device_state Currently, the function update_port_device_state gets the usb_hub from udev->parent by calling usb_hub_to_struct_hub. However, in case the actconfig or the maxchild is 0, the usb_hub would be NULL and upon further accessing to get port_dev would result in null pointer dereference. Fix this by introducing an if check after the usb_hub is populated. Bug: 254441685 Fixes: 83cb2604f641 ("usb: core: add sysfs entry for usb device state") Cc: stable@vger.kernel.org Signed-off-by: Udipto Goswami <quic_ugoswami@quicinc.com> Reviewed-by: Alan Stern <stern@rowland.harvard.edu> Link: https://lore.kernel.org/r/20240110095814.7626-1-quic_ugoswami@quicinc.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 12783c0b9e2c7915a50d5ec829630ff2da50472c) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I8a6c942a6d14f2f4a79276dc11762c42f820dbf4
9 daysUPSTREAM: scs: add CONFIG_MMU dependency for vfree_atomic()Samuel Holland
The shadow call stack implementation fails to build without CONFIG_MMU: ld.lld: error: undefined symbol: vfree_atomic >>> referenced by scs.c >>> kernel/scs.o:(scs_free) in archive vmlinux.a Bug: 254441685 Link: https://lkml.kernel.org/r/20240122175204.2371009-1-samuel.holland@sifive.com Fixes: a2abe7cbd8fe ("scs: switch to vmapped shadow stacks") Signed-off-by: Samuel Holland <samuel.holland@sifive.com> Reviewed-by: Sami Tolvanen <samitolvanen@google.com> Cc: Will Deacon <will@kernel.org> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 6f9dc684cae638dda0570154509884ee78d0f75c) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I906b8ff918a3ab886af248da9362c0bed542e5d1
9 daysUPSTREAM: mm/damon/vaddr: change asm-generic/mman-common.h to linux/mman.hTanzir Hasan
asm-generic/mman-common.h can be replaced by linux/mman.h and the file will still build correctly. It is an asm-generic file which should be avoided if possible. Bug: 254441685 Link: https://lkml.kernel.org/r/20231221-asmgenericvaddr-v1-1-742b170c914e@google.com Fixes: 6dea8add4d28 ("mm/damon/vaddr: support DAMON-based Operation Schemes") Signed-off-by: Tanzir Hasan <tanzirh@google.com> Suggested-by: Al Viro <viro@zeniv.linux.org.uk> Reviewed-by: SeongJae Park <sj@kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 1ae41dffd48a700f4bf69e5377f4311de7d92b78) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I366f846f5069b1921bdbf020c65bba8a62bac38b
9 daysUPSTREAM: coresight: etm4x: Remove bogous __exit annotation for some functionsUwe Kleine-König
etm4_platform_driver (which lives in ".data" contains a reference to etm4_remove_platform_dev(). So the latter must not be marked with __exit which results in the function being discarded for a build with CONFIG_CORESIGHT_SOURCE_ETM4X=y which in turn makes the remove pointer contain invalid data. etm4x_amba_driver referencing etm4_remove_amba() has the same issue. Drop the __exit annotations for the two affected functions and a third one that is called by the other two. For reasons I don't understand this isn't catched by building with CONFIG_DEBUG_SECTION_MISMATCH=y. Bug: 254441685 Fixes: c23bc382ef0e ("coresight: etm4x: Refactor probing routine") Fixes: 5214b563588e ("coresight: etm4x: Add support for sysreg only devices") Signed-off-by: Uwe Kleine-König <u.kleine-koenig@pengutronix.de> Reviewed-by: James Clark <james.clark@arm.com> Link: https://lore.kernel.org/all/20230929081540.yija47lsj35xtj4v@pengutronix.de/ Link: https://lore.kernel.org/r/20230929081637.2377335-1-u.kleine-koenig@pengutronix.de Signed-off-by: Suzuki K Poulose <suzuki.poulose@arm.com> (cherry picked from commit 348ddab81f7b0983d9fb158df910254f08d3f887) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: Ic393a9e014f0438a4f3365ae1d287bd16ce020fd
9 daysUPSTREAM: ASoC: hdmi-codec: register hpd callback on component probeJerome Brunet
The HDMI hotplug callback to the hdmi-codec is currently registered when jack is set. The hotplug not only serves to report the ASoC jack state but also to get the ELD. It should be registered when the component probes instead, so it does not depend on the card driver registering a jack for the HDMI to properly report the ELD. Bug: 254441685 Fixes: 25ce4f2b3593 ("ASoC: hdmi-codec: Get ELD in before reporting plugged event") Signed-off-by: Jerome Brunet <jbrunet@baylibre.com> Link: https://lore.kernel.org/r/20231106104013.704356-1-jbrunet@baylibre.com Signed-off-by: Mark Brown <broonie@kernel.org> (cherry picked from commit 15be353d55f9e12e34f9a819f51eb41fdef5eda8) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: Ifb81843ff4ae55c78d7f2635a8d577c48f02439d
9 daysUPSTREAM: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()Jimmy Hu
It is possible that typec_register_partner() returns ERR_PTR on failure. When port->partner is an error, a NULL pointer dereference may occur as shown below. [91222.095236][ T319] typec port0: failed to register partner (-17) ... [91225.061491][ T319] Unable to handle kernel NULL pointer dereference at virtual address 000000000000039f [91225.274642][ T319] pc : tcpm_pd_data_request+0x310/0x13fc [91225.274646][ T319] lr : tcpm_pd_data_request+0x298/0x13fc [91225.308067][ T319] Call trace: [91225.308070][ T319] tcpm_pd_data_request+0x310/0x13fc [91225.308073][ T319] tcpm_pd_rx_handler+0x100/0x9e8 [91225.355900][ T319] kthread_worker_fn+0x178/0x58c [91225.355902][ T319] kthread+0x150/0x200 [91225.355905][ T319] ret_from_fork+0x10/0x30 Add a check for port->partner to avoid dereferencing a NULL pointer. Bug: 254441685 Fixes: 5e1d4c49fbc8 ("usb: typec: tcpm: Determine common SVDM Version") Cc: stable@vger.kernel.org Signed-off-by: Jimmy Hu <hhhuuu@google.com> Link: https://lore.kernel.org/r/20231020012132.100960-1-hhhuuu@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 4987daf86c152ff882d51572d154ad12e4ff3a4b) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: Ifb3355341cd4461019e0c2ed67d0801e54db320d
9 daysUPSTREAM: crypto: xts - use 'spawn' for underlying single-block cipherEric Biggers
Since commit adad556efcdd ("crypto: api - Fix built-in testing dependency failures"), the following warning appears when booting an x86_64 kernel that is configured with CONFIG_CRYPTO_MANAGER_EXTRA_TESTS=y and CONFIG_CRYPTO_AES_NI_INTEL=y, even when CONFIG_CRYPTO_XTS=y and CONFIG_CRYPTO_AES=y: alg: skcipher: skipping comparison tests for xts-aes-aesni because xts(ecb(aes-generic)) is unavailable This is caused by an issue in the xts template where it allocates an "aes" single-block cipher without declaring a dependency on it via the crypto_spawn mechanism. This issue was exposed by the above commit because it reversed the order that the algorithms are tested in. Specifically, when "xts(ecb(aes-generic))" is instantiated and tested during the comparison tests for "xts-aes-aesni", the "xts" template allocates an "aes" crypto_cipher for encrypting tweaks. This resolves to "aes-aesni". (Getting "aes-aesni" instead of "aes-generic" here is a bit weird, but it's apparently intended.) Due to the above-mentioned commit, the testing of "aes-aesni", and the finalization of its registration, now happens at this point instead of before. At the end of that, crypto_remove_spawns() unregisters all algorithm instances that depend on a lower-priority "aes" implementation such as "aes-generic" but that do not depend on "aes-aesni". However, because "xts" does not use the crypto_spawn mechanism for its "aes", its dependency on "aes-aesni" is not recognized by crypto_remove_spawns(). Thus, crypto_remove_spawns() unexpectedly unregisters "xts(ecb(aes-generic))". Fix this issue by making the "xts" template use the crypto_spawn mechanism for its "aes" dependency, like what other templates do. Note, this fix could be applied as far back as commit f1c131b45410 ("crypto: xts - Convert to skcipher"). However, the issue only got exposed by the much more recent changes to how the crypto API runs the self-tests, so there should be no need to backport this to very old kernels. Also, an alternative fix would be to flip the list iteration order in crypto_start_tests() to restore the original testing order. I'm thinking we should do that too, since the original order seems more natural, but it shouldn't be relied on for correctness. Bug: 254441685 Fixes: adad556efcdd ("crypto: api - Fix built-in testing dependency failures") Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> (cherry picked from commit bb40d32689d73c46de39a0529d551f523f21dc9b) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: Ia38963ae6570182f4039041d1846cfcdd37fef57
9 daysUPSTREAM: scsi: ufs: core: Correct clear TM error logPeter Wang
The clear TM function error log status was inverted. Bug: 254441685 Fixes: 4693fad7d6d4 ("scsi: ufs: core: Log error handler activity") Signed-off-by: Peter Wang <peter.wang@mediatek.com> Link: https://lore.kernel.org/r/20231003022002.25578-1-peter.wang@mediatek.com Reviewed-by: Bart Van Assche <bvanassche@acm.org> Reviewed-by: Stanley Chu <stanley.chu@mediatek.com> Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com> (cherry picked from commit a20c4350c6a12405b7f732b3ee6801ffe2cc45ce) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I777762dfbd9dc17048bbb2c3f2547504fcf47467
9 daysUPSTREAM: firmware: arm_ffa: Assign the missing IDR allocation ID to the FFA ↵Sudeep Holla
device Commit 19b8766459c4 ("firmware: arm_ffa: Fix FFA device names for logical partitions") added an ID to the FFA device using ida_alloc() and append the same to "arm-ffa" to make up a unique device name. However it missed to stash the id value in ffa_dev to help freeing the ID later when the device is destroyed. Due to the missing/unassigned ID in FFA device, we get the following warning when the FF-A device is unregistered. | ida_free called for id=0 which is not allocated. | WARNING: CPU: 7 PID: 1 at lib/idr.c:525 ida_free+0x114/0x164 | CPU: 7 PID: 1 Comm: swapper/0 Not tainted 6.6.0-rc4 #209 | pstate: 61400009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) | pc : ida_free+0x114/0x164 | lr : ida_free+0x114/0x164 | Call trace: | ida_free+0x114/0x164 | ffa_release_device+0x24/0x3c | device_release+0x34/0x8c | kobject_put+0x94/0xf8 | put_device+0x18/0x24 | klist_devices_put+0x14/0x20 | klist_next+0xc8/0x114 | bus_for_each_dev+0xd8/0x144 | arm_ffa_bus_exit+0x30/0x54 | ffa_init+0x68/0x330 | do_one_initcall+0xdc/0x250 | do_initcall_level+0x8c/0xac | do_initcalls+0x54/0x94 | do_basic_setup+0x1c/0x28 | kernel_init_freeable+0x104/0x170 | kernel_init+0x20/0x1a0 | ret_from_fork+0x10/0x20 Fix the same by actually assigning the ID in the FFA device this time for real. Bug: 254441685 Fixes: 19b8766459c4 ("firmware: arm_ffa: Fix FFA device names for logical partitions") Link: https://lore.kernel.org/r/20231003085932.3553985-1-sudeep.holla@arm.com Signed-off-by: Sudeep Holla <sudeep.holla@arm.com> (cherry picked from commit 7d0bc6360f17ea323ab25939a34857123d7d87e5) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: Id2b3639e41367def2b5d0e87c991490f5fcdeb08
9 daysUPSTREAM: mm/damon/vaddr-test: fix memory leak in ↵Jinjie Ruan
damon_do_test_apply_three_regions() When CONFIG_DAMON_VADDR_KUNIT_TEST=y and making CONFIG_DEBUG_KMEMLEAK=y and CONFIG_DEBUG_KMEMLEAK_AUTO_SCAN=y, the below memory leak is detected. Since commit 9f86d624292c ("mm/damon/vaddr-test: remove unnecessary variables"), the damon_destroy_ctx() is removed, but still call damon_new_target() and damon_new_region(), the damon_region which is allocated by kmem_cache_alloc() in damon_new_region() and the damon_target which is allocated by kmalloc in damon_new_target() are not freed. And the damon_region which is allocated in damon_new_region() in damon_set_regions() is also not freed. So use damon_destroy_target to free all the damon_regions and damon_target. unreferenced object 0xffff888107c9a940 (size 64): comm "kunit_try_catch", pid 1069, jiffies 4294670592 (age 732.761s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 06 00 00 00 6b 6b 6b 6b ............kkkk 60 c7 9c 07 81 88 ff ff f8 cb 9c 07 81 88 ff ff `............... backtrace: [<ffffffff817e0167>] kmalloc_trace+0x27/0xa0 [<ffffffff819c11cf>] damon_new_target+0x3f/0x1b0 [<ffffffff819c7d55>] damon_do_test_apply_three_regions.constprop.0+0x95/0x3e0 [<ffffffff819c82be>] damon_test_apply_three_regions1+0x21e/0x260 [<ffffffff829fce6a>] kunit_generic_run_threadfn_adapter+0x4a/0x90 [<ffffffff81237cf6>] kthread+0x2b6/0x380 [<ffffffff81097add>] ret_from_fork+0x2d/0x70 [<ffffffff81003791>] ret_from_fork_asm+0x11/0x20 unreferenced object 0xffff8881079cc740 (size 56): comm "kunit_try_catch", pid 1069, jiffies 4294670592 (age 732.761s) hex dump (first 32 bytes): 05 00 00 00 00 00 00 00 14 00 00 00 00 00 00 00 ................ 6b 6b 6b 6b 6b 6b 6b 6b 00 00 00 00 6b 6b 6b 6b kkkkkkkk....kkkk backtrace: [<ffffffff819bc492>] damon_new_region+0x22/0x1c0 [<ffffffff819c7d91>] damon_do_test_apply_three_regions.constprop.0+0xd1/0x3e0 [<ffffffff819c82be>] damon_test_apply_three_regions1+0x21e/0x260 [<ffffffff829fce6a>] kunit_generic_run_threadfn_adapter+0x4a/0x90 [<ffffffff81237cf6>] kthread+0x2b6/0x380 [<ffffffff81097add>] ret_from_fork+0x2d/0x70 [<ffffffff81003791>] ret_from_fork_asm+0x11/0x20 unreferenced object 0xffff888107c9ac40 (size 64): comm "kunit_try_catch", pid 1071, jiffies 4294670595 (age 732.843s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 06 00 00 00 6b 6b 6b 6b ............kkkk a0 cc 9c 07 81 88 ff ff 78 a1 76 07 81 88 ff ff ........x.v..... backtrace: [<ffffffff817e0167>] kmalloc_trace+0x27/0xa0 [<ffffffff819c11cf>] damon_new_target+0x3f/0x1b0 [<ffffffff819c7d55>] damon_do_test_apply_three_regions.constprop.0+0x95/0x3e0 [<ffffffff819c851e>] damon_test_apply_three_regions2+0x21e/0x260 [<ffffffff829fce6a>] kunit_generic_run_threadfn_adapter+0x4a/0x90 [<ffffffff81237cf6>] kthread+0x2b6/0x380 [<ffffffff81097add>] ret_from_fork+0x2d/0x70 [<ffffffff81003791>] ret_from_fork_asm+0x11/0x20 unreferenced object 0xffff8881079ccc80 (size 56): comm "kunit_try_catch", pid 1071, jiffies 4294670595 (age 732.843s) hex dump (first 32 bytes): 05 00 00 00 00 00 00 00 14 00 00 00 00 00 00 00 ................ 6b 6b 6b 6b 6b 6b 6b 6b 00 00 00 00 6b 6b 6b 6b kkkkkkkk....kkkk backtrace: [<ffffffff819bc492>] damon_new_region+0x22/0x1c0 [<ffffffff819c7d91>] damon_do_test_apply_three_regions.constprop.0+0xd1/0x3e0 [<ffffffff819c851e>] damon_test_apply_three_regions2+0x21e/0x260 [<ffffffff829fce6a>] kunit_generic_run_threadfn_adapter+0x4a/0x90 [<ffffffff81237cf6>] kthread+0x2b6/0x380 [<ffffffff81097add>] ret_from_fork+0x2d/0x70 [<ffffffff81003791>] ret_from_fork_asm+0x11/0x20 unreferenced object 0xffff888107c9af40 (size 64): comm "kunit_try_catch", pid 1073, jiffies 4294670597 (age 733.011s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 06 00 00 00 6b 6b 6b 6b ............kkkk 20 a2 76 07 81 88 ff ff b8 a6 76 07 81 88 ff ff .v.......v..... backtrace: [<ffffffff817e0167>] kmalloc_trace+0x27/0xa0 [<ffffffff819c11cf>] damon_new_target+0x3f/0x1b0 [<ffffffff819c7d55>] damon_do_test_apply_three_regions.constprop.0+0x95/0x3e0 [<ffffffff819c877e>] damon_test_apply_three_regions3+0x21e/0x260 [<ffffffff829fce6a>] kunit_generic_run_threadfn_adapter+0x4a/0x90 [<ffffffff81237cf6>] kthread+0x2b6/0x380 [<ffffffff81097add>] ret_from_fork+0x2d/0x70 [<ffffffff81003791>] ret_from_fork_asm+0x11/0x20 unreferenced object 0xffff88810776a200 (size 56): comm "kunit_try_catch", pid 1073, jiffies 4294670597 (age 733.011s) hex dump (first 32 bytes): 05 00 00 00 00 00 00 00 14 00 00 00 00 00 00 00 ................ 6b 6b 6b 6b 6b 6b 6b 6b 00 00 00 00 6b 6b 6b 6b kkkkkkkk....kkkk backtrace: [<ffffffff819bc492>] damon_new_region+0x22/0x1c0 [<ffffffff819c7d91>] damon_do_test_apply_three_regions.constprop.0+0xd1/0x3e0 [<ffffffff819c877e>] damon_test_apply_three_regions3+0x21e/0x260 [<ffffffff829fce6a>] kunit_generic_run_threadfn_adapter+0x4a/0x90 [<ffffffff81237cf6>] kthread+0x2b6/0x380 [<ffffffff81097add>] ret_from_fork+0x2d/0x70 [<ffffffff81003791>] ret_from_fork_asm+0x11/0x20 unreferenced object 0xffff88810776a740 (size 56): comm "kunit_try_catch", pid 1073, jiffies 4294670597 (age 733.025s) hex dump (first 32 bytes): 3d 00 00 00 00 00 00 00 3f 00 00 00 00 00 00 00 =.......?....... 6b 6b 6b 6b 6b 6b 6b 6b 00 00 00 00 6b 6b 6b 6b kkkkkkkk....kkkk backtrace: [<ffffffff819bc492>] damon_new_region+0x22/0x1c0 [<ffffffff819bfcc2>] damon_set_regions+0x4c2/0x8e0 [<ffffffff819c7dbb>] damon_do_test_apply_three_regions.constprop.0+0xfb/0x3e0 [<ffffffff819c877e>] damon_test_apply_three_regions3+0x21e/0x260 [<ffffffff829fce6a>] kunit_generic_run_threadfn_adapter+0x4a/0x90 [<ffffffff81237cf6>] kthread+0x2b6/0x380 [<ffffffff81097add>] ret_from_fork+0x2d/0x70 [<ffffffff81003791>] ret_from_fork_asm+0x11/0x20 unreferenced object 0xffff888108038240 (size 64): comm "kunit_try_catch", pid 1075, jiffies 4294670600 (age 733.022s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 03 00 00 00 6b 6b 6b 6b ............kkkk 48 ad 76 07 81 88 ff ff 98 ae 76 07 81 88 ff ff H.v.......v..... backtrace: [<ffffffff817e0167>] kmalloc_trace+0x27/0xa0 [<ffffffff819c11cf>] damon_new_target+0x3f/0x1b0 [<ffffffff819c7d55>] damon_do_test_apply_three_regions.constprop.0+0x95/0x3e0 [<ffffffff819c898d>] damon_test_apply_three_regions4+0x1cd/0x210 [<ffffffff829fce6a>] kunit_generic_run_threadfn_adapter+0x4a/0x90 [<ffffffff81237cf6>] kthread+0x2b6/0x380 [<ffffffff81097add>] ret_from_fork+0x2d/0x70 [<ffffffff81003791>] ret_from_fork_asm+0x11/0x20 unreferenced object 0xffff88810776ad28 (size 56): comm "kunit_try_catch", pid 1075, jiffies 4294670600 (age 733.022s) hex dump (first 32 bytes): 05 00 00 00 00 00 00 00 07 00 00 00 00 00 00 00 ................ 6b 6b 6b 6b 6b 6b 6b 6b 00 00 00 00 6b 6b 6b 6b kkkkkkkk....kkkk backtrace: [<ffffffff819bc492>] damon_new_region+0x22/0x1c0 [<ffffffff819bfcc2>] damon_set_regions+0x4c2/0x8e0 [<ffffffff819c7dbb>] damon_do_test_apply_three_regions.constprop.0+0xfb/0x3e0 [<ffffffff819c898d>] damon_test_apply_three_regions4+0x1cd/0x210 [<ffffffff829fce6a>] kunit_generic_run_threadfn_adapter+0x4a/0x90 [<ffffffff81237cf6>] kthread+0x2b6/0x380 [<ffffffff81097add>] ret_from_fork+0x2d/0x70 [<ffffffff81003791>] ret_from_fork_asm+0x11/0x20 Bug: 254441685 Link: https://lkml.kernel.org/r/20230925072100.3725620-1-ruanjinjie@huawei.com Fixes: 9f86d624292c ("mm/damon/vaddr-test: remove unnecessary variables") Signed-off-by: Jinjie Ruan <ruanjinjie@huawei.com> Reviewed-by: SeongJae Park <sj@kernel.org> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 45120b15743fa7c0aa53d5db6dfb4c8f87be4abd) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I13643159b95789a52064ca25509fc67f714be132
9 daysUPSTREAM: ata: libata-scsi: Fix delayed scsi_rescan_device() executionDamien Le Moal
Commit 6aa0365a3c85 ("ata: libata-scsi: Avoid deadlock on rescan after device resume") modified ata_scsi_dev_rescan() to check the scsi device "is_suspended" power field to ensure that the scsi device associated with an ATA device is fully resumed when scsi_rescan_device() is executed. However, this fix is problematic as: 1) It relies on a PM internal field that should not be used without PM device locking protection. 2) The check for is_suspended and the call to scsi_rescan_device() are not atomic and a suspend PM event may be triggered between them, casuing scsi_rescan_device() to be called on a suspended device and in that function blocking while holding the scsi device lock. This would deadlock a following resume operation. These problems can trigger PM deadlocks on resume, especially with resume operations triggered quickly after or during suspend operations. E.g., a simple bash script like: for (( i=0; i<10; i++ )); do echo "+2 > /sys/class/rtc/rtc0/wakealarm echo mem > /sys/power/state done that triggers a resume 2 seconds after starting suspending a system can quickly lead to a PM deadlock preventing the system from correctly resuming. Fix this by replacing the check on is_suspended with a check on the return value given by scsi_rescan_device() as that function will fail if called against a suspended device. Also make sure rescan tasks already scheduled are first cancelled before suspending an ata port. Bug: 254441685 Fixes: 6aa0365a3c85 ("ata: libata-scsi: Avoid deadlock on rescan after device resume") Cc: stable@vger.kernel.org Signed-off-by: Damien Le Moal <dlemoal@kernel.org> Reviewed-by: Hannes Reinecke <hare@suse.de> Reviewed-by: Niklas Cassel <niklas.cassel@wdc.com> Tested-by: Geert Uytterhoeven <geert+renesas@glider.be> Reviewed-by: Martin K. Petersen <martin.petersen@oracle.com> (cherry picked from commit 8b4d9469d0b0e553208ee6f62f2807111fde18b9) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: Ia9441dbd32116adea3c88df2a479b29f6a149ffd
9 daysUPSTREAM: firmware: arm_ffa: Don't set the memory region attributes for MEM_LENDSudeep Holla
As per the FF-A specification: section "Usage of other memory region attributes", in a transaction to donate memory or lend memory to a single borrower, if the receiver is a PE or Proxy endpoint, the owner must not specify the attributes and the relayer will return INVALID_PARAMETERS if the attributes are set. Let us not set the memory region attributes for MEM_LEND. Bug: 254441685 Fixes: 82a8daaecfd9 ("firmware: arm_ffa: Add support for MEM_LEND") Reported-by: Joao Alves <joao.alves@arm.com> Reported-by: Olivier Deprez <olivier.deprez@arm.com> Link: https://lore.kernel.org/r/20230919-ffa_v1-1_notif-v2-13-6f3a3ca3923c@arm.com Signed-off-by: Sudeep Holla <sudeep.holla@arm.com> (cherry picked from commit 9dda1178479aa0a73fe0eaabfe2d9a1c603cfeed) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: If348b3729a8bf545c795cdc046fb1e91a35053cb
9 daysUPSTREAM: task_work: add kerneldoc annotation for 'data' argumentJens Axboe
A previous commit changed the arguments to task_work_cancel_match(), but didn't document all of them. Bug: 254441685 Link: https://lkml.kernel.org/r/93938bff-baa3-4091-85f5-784aae297a07@kernel.dk Fixes: c7aab1a7c52b ("task_work: add helper for more targeted task_work canceling") Signed-off-by: Jens Axboe <axboe@kernel.dk> Reported-by: kernel test robot <lkp@intel.com> Closes: https://lore.kernel.org/oe-kbuild-all/202309120307.zis3yQGe-lkp@intel.com/ Acked-by: Oleg Nesterov <oleg@redhat.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 4653e5dd04cb869526477a76b87d0aa1a5c65101) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I48b0978a9c1e285b8a683e0e5544c1b9558f64d2
9 daysANDROID: export one function for mm metricsRobin Hsu
export function for sysfs node formating Bug: 299190787 Change-Id: I71e6a0815efa8df99d036bf457b8a0081999f3de Signed-off-by: Robin Hsu <robinhsu@google.com>
10 daysANDROID: GKI: rockchip: Add symbols for some charger andBian Jin chen
1 function symbol(s) added 'void kernel_power_off()' Bug: 239396464 Signed-off-by: Kever Yang <kever.yang@rock-chips.com> Signed-off-by: Bian Jin chen <kenjc.bian@rock-chips.com> Change-Id: I2ceb58bcf3ba2b5a11b1163dff41ebe1a7f77f0d
2024-05-23UPSTREAM: cpuidle: teo: Update idle duration estimate when choosing ↵Rafael J. Wysocki
shallower state The TEO governor takes CPU utilization into account by refining idle state selection when the utilization is above a certain threshold. This is done by choosing an idle state shallower than the previously selected one. However, when doing this, the idle duration estimate needs to be adjusted so as to prevent the scheduler tick from being stopped when the candidate idle state is shallow, which may lead to excessive energy usage if the CPU is not woken up quickly enough going forward. Moreover, if the scheduler tick has been stopped already and the new idle duration estimate is too small, the replacement candidate state cannot be used. Modify the relevant code to take the above observations into account. Bug: 254441685 Fixes: 9ce0f7c4bc64 ("cpuidle: teo: Introduce util-awareness") Link: https://lore.kernel.org/linux-pm/CAJZ5v0jJxHj65r2HXBTd3wfbZtsg=_StzwO1kA5STDnaPe_dWA@mail.gmail.com Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com> Reviewed-and-tested-by: Kajetan Puchalski <kajetan.puchalski@arm.com> (cherry picked from commit 3f0b0966b30982e843950b170b7a9ddfd8094428) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: Ic5784c6330d94310f5d3938d141b51c81be2f9d9
2024-05-23UPSTREAM: firmware: arm_scmi: Fix chan_free cleanup on SMCCristian Marussi
SCMI transport based on SMC can optionally use an additional IRQ to signal message completion. The associated interrupt handler is currently allocated using devres but on shutdown the core SCMI stack will call .chan_free() well before any managed cleanup is invoked by devres. As a consequence, the arrival of a late reply to an in-flight pending transaction could still trigger the interrupt handler well after the SCMI core has cleaned up the channels, with unpleasant results. Inhibit further message processing on the IRQ path by explicitly freeing the IRQ inside .chan_free() callback itself. Bug: 254441685 Fixes: dd820ee21d5e ("firmware: arm_scmi: Augment SMC/HVC to allow optional interrupt") Reported-by: Bjorn Andersson <andersson@kernel.org> Signed-off-by: Cristian Marussi <cristian.marussi@arm.com> Link: https://lore.kernel.org/r/20230719173533.2739319-1-cristian.marussi@arm.com Signed-off-by: Sudeep Holla <sudeep.holla@arm.com> (cherry picked from commit d1ff11d7ad8704f8d615f6446041c221b2d2ec4d) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I9996056d3dddd9b208de7e5afb5aa3d345325e01
2024-05-23UPSTREAM: clk: Fix memory leak in devm_clk_notifier_register()Fei Shao
devm_clk_notifier_register() allocates a devres resource for clk notifier but didn't register that to the device, so the notifier didn't get unregistered on device detach and the allocated resource was leaked. Fix the issue by registering the resource through devres_add(). This issue was found with kmemleak on a Chromebook. Bug: 254441685 Fixes: 6d30d50d037d ("clk: add devm variant of clk_notifier_register") Signed-off-by: Fei Shao <fshao@chromium.org> Link: https://lore.kernel.org/r/20230619112253.v2.1.I13f060c10549ef181603e921291bdea95f83033c@changeid Reviewed-by: Dan Carpenter <dan.carpenter@linaro.org> Signed-off-by: Stephen Boyd <sboyd@kernel.org> (cherry picked from commit 7fb933e56f77a57ef7cfc59fc34cbbf1b1fa31ff) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: If7f84e9d2551dd5876deb867c807499138a2716c
2024-05-23UPSTREAM: selftests: damon: add config fileAnders Roxell
Building and running the subsuite 'damon' of kselftest, shows the following issues: selftests: damon: debugfs_attrs.sh /sys/kernel/debug/damon not found By creating a config file enabling DAMON fragments in the selftests/damon/ directory the tests pass. Bug: 254441685 Link: https://lkml.kernel.org/r/20230412092854.3306197-1-anders.roxell@linaro.org Fixes: b348eb7abd09 ("mm/damon: add user space selftests") Signed-off-by: Anders Roxell <anders.roxell@linaro.org> Reported-by: Naresh Kamboju <naresh.kamboju@linaro.org> Reviewed-by: SeongJae Park <sj@kernel.org> Acked-by: Shuah Khan <skhan@linuxfoundation.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 7b1798ec9836670d221dcc162dc18f8b64e959e5) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I80ff280a1f586c660a9d1cb05c9ecaa665a6ff21
2024-05-23UPSTREAM: firmware: arm_ffa: Set handle field to zero in memory descriptorBalint Dobszay
As described in the commit 111a833dc5cb ("firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors") some fields in the memory descriptor have to be zeroed explicitly. The handle field is one of these, but it was left out from that change, fix this now. Bug: 254441685 Fixes: 111a833dc5cb ("firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors") Reported-by: Imre Kis <imre.kis@arm.com> Signed-off-by: Balint Dobszay <balint.dobszay@arm.com> Link: https://lore.kernel.org/r/20230601140749.93812-1-balint.dobszay@arm.com Signed-off-by: Sudeep Holla <sudeep.holla@arm.com> (cherry picked from commit 3aa0519a4780f1b8e11966bd879d4a2934ba455f) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: Ib0a28feca23b814b899bacc972bd8f1e80469047
2024-05-21UPSTREAM: usb: dwc3: qcom: fix wakeup implementationJohan Hovold
It is the Qualcomm glue wakeup interrupts that may be able to wake the system from suspend and this can now be described in the devicetree. Move the wakeup-source property handling over from the core driver and instead propagate the capability setting to the core device during probe. This is needed as there is currently no way for the core driver to query the wakeup setting of the glue device, but it is the core driver that manages the PHY power state during suspend. Also don't leave the PHYs enabled when system wakeup has been disabled through sysfs. Bug: 254441685 Fixes: 649f5c842ba3 ("usb: dwc3: core: Host wake up support from system suspend") Signed-off-by: Johan Hovold <johan+linaro@kernel.org> Link: https://lore.kernel.org/r/20220804151001.23612-9-johan+linaro@kernel.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit e3fafbd8e36530eb015a1bb31273bcf7f7035422) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I8bce368099261ca5ff6f2ad67e2d5504d46cd188
2024-05-21UPSTREAM: kernfs: fix potential NULL dereference in __kernfs_removeYushan Zhou
When lockdep is enabled, lockdep_assert_held_write would cause potential NULL pointer dereference. Fix the following smatch warnings: fs/kernfs/dir.c:1353 __kernfs_remove() warn: variable dereferenced before check 'kn' (see line 1346) Bug: 254441685 Fixes: 393c3714081a ("kernfs: switch global kernfs_rwsem lock to per-fs lock") Signed-off-by: Yushan Zhou <katrinzhou@tencent.com> Link: https://lore.kernel.org/r/20220630082512.3482581-1-zys.zljxml@gmail.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 72b5d5aef246a0387cefa23121dd90901c7a691a) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I22a1d2e27262cbf957cbb9a400c162581dc3ad52
2024-05-20ANDROID: cpufreq: brcmstb-avs-cpufreq: fix build errorandroid13-5.10.214_r00Greg Kroah-Hartman
In commit 9127599c075c ("cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value"), a check is made in a way that causes a build warning, which in Android systems, breaks the build. Fix this up by moving the definition of the variable above the check to remove the warning. Fixes: 9127599c075c ("cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value") Change-Id: I8477905e3447eb4eabf3aa0899534c06a0cca125 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
2024-05-20Revert "remoteproc: Add new get_loaded_rsc_table() to rproc_ops"Greg Kroah-Hartman
This reverts commit 7b95472049858aa35cb6defb5f7fa96b71e3b326 which is commit 1a631382be1d22ddab0582dae3498b3d28e2e44a upstream. It breaks the Android kernel abi and can be brought back in the future in an abi-safe way if it is really needed. Bug: 161946584 Change-Id: I6b803ae688ecf0106b12c244b953c3fd1605d6de Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
2024-05-20Revert "remoteproc: stm32: Move resource table setup to rproc_ops"Greg Kroah-Hartman
This reverts commit 9d057eacf804e2cd39f1bf4e1d1c045fe35cc4e3 which is commit 8a471396d21ca499d89d4071b2b670258f009ffa upstream. It breaks the Android kernel abi and can be brought back in the future in an abi-safe way if it is really needed. Bug: 161946584 Change-Id: I87e3536f7f26a145917a54da94324b4c8f442ba2 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
2024-05-20Revert "remoteproc: stm32: Fix incorrect type assignment returned by ↵Greg Kroah-Hartman
stm32_rproc_get_loaded_rsc_tablef" This reverts commit 40260d06497d6a11b4462457f3614c5ed5dfd739 which is commit c77b35ce66af25bdd6fde60b62e35b9b316ea5c2 upstream. It breaks the Android kernel abi and can be brought back in the future in an abi-safe way if it is really needed. Bug: 161946584 Change-Id: Ib0d934b5b267257be3e925c7e3cd6e88c2623a00 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
2024-05-20Revert "remoteproc: stm32: fix phys_addr_t format string"Greg Kroah-Hartman
This reverts commit 5148026b65cac1156111c0229f96d7afc5812a48 which is commit 3e25e407a1c93b53a87a7743ea0cd4703d3985b7 upstream. It breaks the Android kernel abi and can be brought back in the future in an abi-safe way if it is really needed. Bug: 161946584 Change-Id: I3f103fd05d2a7aeb35665162aa2f10d021d01cc0 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
2024-05-20Revert "remoteproc: stm32: use correct format strings on 64-bit"Greg Kroah-Hartman
This reverts commit f0b0a4de789d0fd7640f63c76eeba68caec18744 which is commit 03bd158e1535e68bcd2b1e095b0ebcad7c84bd20 upstream. It breaks the Android kernel abi and can be brought back in the future in an abi-safe way if it is really needed. Bug: 161946584 Change-Id: I8f629e3f572a8af3ab30cc2bb8c98ac3eadd97e7 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
2024-05-20Revert "remoteproc: stm32: Fix incorrect type in assignment for va"Greg Kroah-Hartman
This reverts commit 0dd5b63ae2b5075c555bfbca06c0cf2161c5a502 which is commit 32381bbccba4c21145c571701f8f7fb1d9b3a92e upstream. It breaks the Android kernel abi and can be brought back in the future in an abi-safe way if it is really needed. Bug: 161946584 Change-Id: Ic7512dc88e8c32c3adc7fec73f4cc0c89fd58c80 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
2024-05-20Revert "block: add a new set_read_only method"Greg Kroah-Hartman
This reverts commit 2a0f8202f77a9b5b39d16b49081b2671d3253faf which is commit e00adcadf3af7a8335026d71ab9f0e0a922191ac upstream. It breaks the Android kernel abi and can be brought back in the future in an abi-safe way if it is really needed. Bug: 161946584 Change-Id: I20342421827a743bfb159577aa151698b101d17d Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
2024-05-20Revert "md: implement ->set_read_only to hook into BLKROSET processing"Greg Kroah-Hartman
This reverts commit ab25f7cd4914986aac4339a74bc12983ea67256c which is commit 118cf084adb3964d06e1667cf7d702e56e5cd2c5 upstream. It breaks the Android kernel abi and can be brought back in the future in an abi-safe way if it is really needed. Bug: 161946584 Change-Id: I6f11869ebbf73fed88b101bc13ddd029ff6d185d Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
2024-05-20Revert "md: Don't clear MD_CLOSING when the raid is about to stop"Greg Kroah-Hartman
This reverts commit bb567cb5cdbe6f0f06b6fa0fc951f3298c7fa80b which is commit 9674f54e41fffaf06f6a60202e1fa4cc13de3cf5 upstream. It breaks the Android kernel abi and can be brought back in the future in an abi-safe way if it is really needed. Bug: 161946584 Change-Id: I4c121821592a6813e9125c7946fc43240c1304e1 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
2024-05-20ANDROID: irq: put irq_resolve_mapping under protection of __irq_enter_rawlei.zhang8
With commit 3f9d45d8021df4739103db8f902f588782c4f81b ("ANDROID: genirq: Allow an interrupt to be marked as 'raw'"), irq_find_mapping was moved out of scope between irq_enter() and irq_exit(). This result in el1_irq->__handle_domain_irq-> irq_find_mapping->rcu_read_unlock->rcu_read_unlock_special-> irq_work_queue_on->el1_irq because ir_irq() return false. Now one RCU stall issue was observed due to IPI_IRQ_WORK irq storm. IPI_IRQ_WORK irq was triggered from handle_domain_irq->...-> rcu_read_unlock_special->irq_work_queue_on again and again unexpectedly due to in_irq() return false even it is in IRQ context. This patch fix its side effect without reverting commit 3f9d45d8021df4739103db8f902f588782c4f81b. During call path "handle_domain_irq->irq_find_mapping->...-> rcu_read_unlock_special()" with use_softirq is true. 1)before this patch, in_irq() is false This will result in IPI_IRQ_WORK irq storm due to next IPI_IRQ_WORK irq will be triggered under IRQ context again and again. 2)after this patch,in_irq() will be true RCU_SOFTIRQ will be raised(but not next IPI_IRQ_WORK irq) under IRQ context. Bug: 339061905 Fixes: 3f9d45d8021d ("FROMLIST: genirq: Allow an interrupt to be marked as 'raw'") Change-Id: I27caeaf6817e42b3c15effe8b750cb83af90aeb3 Signed-off-by: lei.zhang8 <lei.zhang8@transsion.com>
2024-05-17ANDROID: usb: Optimize the problem of slow transfer rate in USB accessory modehulianqin
The data transfer rate using Google Restore in USB3.2 mode is slower, only about 140MB/s at 5Gbps. The bMaxBurst is not set, and num_fifos in dwc3_gadget_resize_tx_fifosis 1, which results in only 131btye of dwc3 ram space being allocated to ep. Modify bMaxBurst to 6. The 5Gbps rate increases from 140MB/s to 350MB/s. The 10Gbps rate is increased from 220MB/s to 500MB/s. Bug: 340049583 BUG: 341178033 Change-Id: I5710af32c72d0b57afaecc00c4f0909af4b9a299 Signed-off-by: Lianqin Hu <hulianqin@vivo.corp-partner.google.com> Signed-off-by: Lianqin Hu <hulianqin@vivo.com> (cherry picked from commit 23f2a9f5f13426263f557ff67ce8f4e3f7965d12) Signed-off-by: Lianqin Hu <hulianqin@vivo.com>
2024-05-16Revert "bpf: Defer the free of inner map when necessary"Greg Kroah-Hartman
This reverts commit 90c445799fd1dc214d7c6279c144e33a35e29ef2 which is commit 876673364161da50eed6b472d746ef88242b2368 upstream. It breaks the Android kernel build AND the kernel abi and can be brought back in the future in an abi-safe way if it is really needed. Bug: 161946584 Change-Id: I8c7820bcca06e847cdc7c894005d383a2ac828a0 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>