330 Commits

Author	SHA1	Message	Date
Thomas Turner	23ea704e18	Merge tag 'v4.19.325-cip132' of https://git.kernel.org/pub/scm/linux/kernel/git/cip/linux-cip into android13-4.19-kona ... version 4.19.325-cip132 * tag 'v4.19.325-cip132' of https://git.kernel.org/pub/scm/linux/kernel/git/cip/linux-cip: CIP: Bump version suffix to -cip132 after merge from cip/linux-4.19.y-st tree Update localversion-st, tree is up-to-date with 5.10.254. x86/CPU: Fix FPDSS on Zen1 seg6: separate dst_cache for input and output paths in seg6 lwtunnel netfilter: nft_ct: fix use-after-free in timeout object destroy apparmor: fix differential encoding verification apparmor: fix missing bounds check on DEFAULT table in verify_dfa() ext4: convert inline data to extents when truncate exceeds inline size virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl crypto: authencesn - Fix src offset when decrypting in-place crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption crypto: authenc - use memcpy_sglist() instead of null skcipher crypto: algif_aead - snapshot IV for async AEAD requests crypto: algif_aead - Revert to operating out-of-place crypto: algif_aead - use memcpy_sglist() instead of null skcipher crypto: doc - fix kernel-doc notation in chacha.c and af_alg.c Buffer overflow in drivers/xen/sys-hypervisor.c xen/privcmd: fix double free via VMA splitting crypto: algif_aead - Fix minimum RX size check for decryption crypto: scatterwalk - Backport memcpy_sglist() batman-adv: avoid OGM aggregation when skb tailroom is insufficient device property: Check fwnode->secondary when finding properties device property: Check fwnode->secondary in fwnode_graph_get_next_endpoint() device property: Retrieve fwnode from of_node via accessor media: device property: Return true in fwnode_device_is_available for NULL ops ext4: fix the might_sleep() warnings in kvfree() mm/huge_memory: fix folio isn't locked in softleaf_to_folio() usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop usb: gadget: f_hid: move list and spinlock inits from bind to alloc net: rfkill: prevent unlimited numbers of rfkill events from being created cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path cpufreq: governor: Free dbs_data directly when gov->init() fails xen/privcmd: unregister xenstore notifier on module exit rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) net: stmmac: fix integer underflow in chain mode net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure mmc: vub300: fix NULL-deref on disconnect net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() batman-adv: reject oversized global TT response buffers arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity wifi: brcmsmac: Fix dma_free_coherent() size tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG apparmor: fix unprivileged local user can do privileged policy management apparmor: Fix double free of ns_name in aa_replace_profiles() apparmor: fix side-effect bug in match_char() macro usage apparmor: fix: limit the number of levels of policy namespaces apparmor: replace recursive profile removal with iterative approach apparmor: fix memory leak in verify_header apparmor: validate DFA start states are in bounds in unpack_pdb mm/rmap: fix two comments related to huge_pmd_unshare() mm/hugetlb: fix two comments related to huge_pmd_unshare() mm/hugetlb: make detecting shared pte more reliable Input: uinput - take event lock when submitting FF request "event" Input: uinput - fix circular locking dependency with ff-core xfrm_user: fix info leak in build_report() wifi: rt2x00usb: fix devres lifetime usb: gadget: f_uac1_legacy: validate control request size usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer USB: dummy-hcd: Fix locking/synchronization error vxlan: validate ND option lengths in vxlan_na_create comedi: me4000: Fix potential overrun of firmware buffer comedi: me_daq: Fix potential overrun of firmware buffer comedi: ni_atmio16d: Fix invalid clean-up after failed attach comedi: Reinit dev->spinlock between attachments to low-level drivers comedi: dt2815: add hardware detection to prevent crash bridge: br_nd_send: validate ND option lengths usb: ulpi: fix double free in ulpi_register_interface() error path usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive iio: gyro: mpu3050: Fix out-of-sequence free_irq() iio: gyro: mpu3050: Move iio_device_register() to correct location iio: gyro: mpu3050: Fix irq resource leak iio: gyro: mpu3050: Fix incorrect free_irq() variable Input: xpad - add support for Razer Wolverine V3 Pro USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam USB: serial: option: add support for Rolling Wireless RW135R-GL USB: serial: io_edgeport: add support for Blackbox IC135A drm/ast: dp501: Fix initialization of SCU2C MIPS: Fix the GCC version check for `__multi3' workaround Bluetooth: SMP: force responder MITM requirements before building the pairing response Bluetooth: SMP: derive legacy responder STK authentication from MITM state ALSA: ctxfi: Fix missing SPDIFI1 index handling ALSA: caiaq: fix stack out-of-bounds read in init_card USB: serial: option: add MeiG Smart SRM825WN drm/ioc32: stop speculation on the drm_compat_ioctl path media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar Revert "media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar" drm/vmwgfx: Add seqno waiter for sync_files Revert "drm/vmwgfx: Add seqno waiter for sync_files" ipv6: avoid overflows in ip6_datagram_send_ctl() net/sched: cls_flow: fix NULL pointer dereference on shared blocks net/sched: cls_fw: fix NULL pointer dereference on shared blocks net/x25: Fix overflow when accumulating packets net/x25: Fix potential double free of skb net: macb: properly unregister fixed rate clocks net: macb: fix clk handling on PCI glue driver removal Bluetooth: MGMT: validate LTK enc_size on load netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent netfilter: nf_conntrack_helper: pass helper to expect cleanup netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr netfilter: x_tables: ensure names are nul-terminated netfilter: nfnetlink_log: account for netlink header size net: ipv6: flowlabel: defer exclusive option free until RCU teardown bpf: Fix regsafe() for pointers to packet net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec ipv6: prevent possible UaF in addrconf_permanent_addr() net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() bridge: br_nd_send: linearize skb before parsing ND options ip6_tunnel: clear skb2->cb[] in ip4ip6_err() ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() tg3: Fix race for querying speed/duplex net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak crypto: af-alg - fix NULL pointer dereference in scatterwalk HID: multitouch: Check to ensure report responses match the request atm: lec: fix use-after-free in sock_def_readable() HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA dmaengine: xilinx_dma: Program interrupt delay timeout btrfs: fix lost error when running device stats on multiple devices fs btrfs: fix super block offset in error message in btrfs_validate_super() dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA dmaengine: xilinx: xilinx_dma: Fix dma_device directions ext4: reject mount if bigalloc with s_first_data_block != 0 ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() ext4: make recently_deleted() properly work with lazy itable initialization scsi: ses: Handle positive SCSI error from ses_recv_diag() scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() alarmtimer: Fix argument order in alarm_timer_forward() cpufreq: conservative: Reset requested_freq on limits change s390/barrier: Make array_index_mask_nospec() __always_inline sysctl: fix uninitialized variable in proc_do_large_bitmap ACPICA: Allow address_space_handler Install and _REG execution as 2 separate steps ACPICA: include/acpi/acpixf.h: Fix indentation drm/i915/gmbus: fix spurious timeout on 512-byte burst reads scsi: scsi_transport_sas: Fix the maximum channel scanning issue RDMA/rw: Fall back to direct SGE on MR pool exhaustion net: macb: use the current queue number for stats netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop net: fix fanout UAF in packet_release() via NETDEV_UP race rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size openvswitch: validate MPLS set/set_masked payload length net: openvswitch: Avoid releasing netdev before teardown completes pinctrl: mediatek: common: Fix probe failure for devices without EINT Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb Bluetooth: hci_ll: Fix firmware leak on error path Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() af_key: validate families in pfkey_send_migrate() xfrm: call xdo_dev_state_delete during state update dma-buf: Include ioctl.h in UAPI header xen/privcmd: restrict usage in unprivileged domU i2c: fsi: Fix a potential leak in fsi_i2c_probe() icmp: fix NULL pointer dereference in icmp_tag_validation() nfnetlink_osf: validate individual option lengths in fingerprints net: bonding: fix NULL deref in bond_debug_rlb_hash_show udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n net: macb: fix uninitialized rx_fs_lock wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom wifi: mac80211: fix NULL deref in mesh_matches_local() PM: runtime: Fix a race condition related to device removal net: bcmgenet: increase WoL poll timeout netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() netfilter: xt_time: use unsigned int for monthday bit shift netfilter: xt_CT: drop pending enqueued packets on template removal netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() netfilter: ctnetlink: remove refcounting in expectation dumpers net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect Bluetooth: HIDP: Fix possible UAF Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU staging: rtl8723bs: fix null dereference in find_network net/tcp-md5: Fix MAC comparison to be constant-time ALSA: pcm: fix wait_time calculations can: gs_usb: gs_can_open(): always configure bitrates before starting device usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling nfsd: fix heap overflow in NFSv4.0 LOCK replay cache arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation smb: client: fix iface port assignment in parse_server_interfaces iio: light: bh1780: fix PM runtime leak on error path tracing: Fix syscall events activation by ensuring refcount hits zero s390/xor: Fix xor_xc_2() inline assembly constraints drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink smb: client: Don't log plaintext credentials in cifs_set_cifscreds wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() wifi: libertas: fix use-after-free in lbs_free_adapter() ext4: fix dirtyclusters double decrement on fs shutdown ext4: drop extent cache when splitting extent fails drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() net: Handle napi_schedule() calls from non-interrupt drm/radeon: apply state adjust rules to some additional HAINAN vairants serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access net: macb: fix use-after-free access to PTP clock nvdimm/bus: Fix potential use after free in asynchronous initialization iio: chemical: bme680: Fix measurement wait duration calculation iio: potentiometer: mcp4131: fix double application of wiper shift iio: dac: ds4424: reject -128 RAW value btrfs: abort transaction on failure to update root in the received subvol ioctl x86/apic: Disable x2apic on resume if the kernel expects so drm/amdgpu: Fix use-after-free race in VM acquire net: ethernet: arc: emac: quiesce interrupts before requesting IRQ net: ncsi: fix skb leak in error paths parisc: Fix initial page table creation for boot nouveau/dpcd: return EBUSY for aux xfer if the device is asleep parisc: Increase initial mapping to 64 MB with KALLSYMS batman-adv: Avoid double-rtnl_lock ELP metric worker media: dvb-net: fix OOB access in ULE extension header tables staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() usb: image: mdc800: kill download URB on timeout usb: mdc800: handle signal and read racing usb: class: cdc-wdm: fix reordering issue in read code path USB: usbcore: Introduce usb_bulk_msg_killable() usb: misc: uss720: properly clean up reference in uss720_probe() usb: yurex: fix race in probe usb: xhci: Fix memory leak in xhci_disable_slot() usb/core/quirks: Add Huawei ME906S-device to wakeup quirk net: usb: lan78xx: skip LTM configuration for LAN7850 net: usb: lan78xx: fix silent drop of packets with checksum errors cgroup: fix race between task migration and iteration e1000/e1000e: Fix leak in DMA error cleanup i40e: fix src IP mask checks and memcpy argument names in cloud filter nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set sched: idle: Make skipping governor callbacks more consistent netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path netfilter: x_tables: guard option walkers against 1-byte tail reads can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value serial: caif: hold tty->link reference in ldisc_open and ser_release net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit powerpc: 83xx: km83xx: Fix keymile vendor prefix remoteproc: sysmon: Correct subsys_name_len type in QMI request powerpc/uaccess: Fix inline assembly for clang build on PPC32 scsi: ses: Fix devices attaching to different hosts ACPI: OSI: Add DMI quirk for Acer Aspire One D255 unshare: fix unshare_fs() handling ACPI: PM: Save NVS memory on Lenovo G70-35 scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled nfc: rawsock: cancel tx_work before socket teardown nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback nfc: nci: free skb on nci_transceive early error paths net: nfc: nci: Fix zero-length proprietary notifications amd-xgbe: fix sleep while atomic on suspend/resume xen/acpi-processor: fix _CST detection using undersized evaluation buffer wifi: wlcore: Fix a locking bug can: bcm: fix locking for bcm_op runtime updates atm: lec: fix null-ptr-deref in lec_arp_clear_vccs platform/x86: thinkpad_acpi: Fix errors reading battery thresholds drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() Squashfs: check metadata block offset is within range wifi: radiotap: reject radiotap with unknown bits ALSA: usb-audio: Use correct version for UAC3 header validation can: ucan: Fix infinite loop from zero-length messages can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message net: usb: pegasus: validate USB endpoints net: usb: kalmia: validate USB endpoints net: usb: kaweth: validate USB endpoints nfc: pn533: properly drop the usb interface reference on disconnect media: dvb-core: fix wrong reinitialization of ringbuffer on reopen net: arcnet: com20020-pci: fix support for 2.5Mbit cards ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 clk: tegra: tegra124-emc: fix device leak on set_rate() drm/tegra: dsi: fix device leak on probe ARM: omap2: Fix reference count leaks in omap_control_init() ARM: OMAP2+: add missing of_node_put before break and return ARM: clean up the memset64() C wrapper Change-Id: If58eb7898e90d049cd97232a5f2c1fc971671b1f	2026-05-12 18:00:02 +01:00
Alan Stern	e299619a6f	USB: usbcore: Introduce usb_bulk_msg_killable() ... commit 416909962e7cdf29fd01ac523c953f37708df93d upstream. The synchronous message API in usbcore (usb_control_msg(), usb_bulk_msg(), and so on) uses uninterruptible waits. However, drivers may call these routines in the context of a user thread, which means it ought to be possible to at least kill them. For this reason, introduce a new usb_bulk_msg_killable() function which behaves the same as usb_bulk_msg() except for using wait_for_completion_killable_timeout() instead of wait_for_completion_timeout(). The same can be done later for usb_control_msg() later on, if it turns out to be needed. Signed-off-by: Alan Stern <stern@rowland.harvard.edu> Suggested-by: Oliver Neukum <oneukum@suse.com> Link: https://lore.kernel.org/linux-usb/3acfe838-6334-4f6d-be7c-4bb01704b33d@rowland.harvard.edu/ Fixes: 1da177e4c3 ("Linux-2.6.12-rc2") CC: stable@vger.kernel.org Link: https://patch.msgid.link/248628b4-cc83-4e81-a620-3ce4e0376d41@rowland.harvard.edu Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Ulrich Hecht <uli@kernel.org>	2026-05-07 10:55:16 +02:00
Thomas Turner	e0479e4a5b	Merge tag 'v4.19.325-cip127' of https://git.kernel.org/pub/scm/linux/kernel/git/cip/linux-cip into android13-4.19-kona ... version 4.19.325-cip127 * tag 'v4.19.325-cip127' of https://git.kernel.org/pub/scm/linux/kernel/git/cip/linux-cip: CIP: Bump version suffix to -cip127 after merge from cip/linux-4.19.y-st tree Update localversion-st, tree is up-to-date with 5.10.247. usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer scsi: pm80xx: Set phy->enable_completion only when we drm/amd/display: Check NULL before accessing wifi: ath10k: Fix connection after GTK rekeying pinctrl: single: fix bias pull up/down handling in pin_config_set ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up fs: writeback: fix use-after-free in __mark_inode_dirty() libceph: fix potential use-after-free in have_mon_and_osd_map() drm: sti: fix device leaks at component probe USB: serial: option: add support for Rolling RW101R-GL USB: serial: ftdi_sio: add support for u-blox EVK-M101 usb: storage: sddr55: Reject out-of-bound new_pba USB: storage: Remove subclass and protocol overrides from Novatek quirk usb: storage: Fix memory leak in USB bulk transport usb: gadget: f_eem: Fix memory leak in eem_unwrap slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves dm-verity: fix unreliable memory allocation can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling can: sja1000: fix max irq loop handling atm/fore200e: Fix possible data race in fore200e_open() MIPS: mm: Prevent a TLB shutdown on initial uniquification iio:common:ssp_sensors: Fix an error handling path ssp_probe() spi: bcm63xx: fix premature CS deassertion on RX-only transactions net: sxgbe: fix potential NULL dereference in sxgbe_rx() can: kvaser_usb: leaf: Fix potential infinite loop in command parsers mtd: onenand: Pass correct pointer to IRQ handler fsdax: mark the iomap argument to dax_iomap_sector as const net: sctp: Fix some typos iommu/amd: Skip enabling command/event buffers for kdump nvme-fc: use lock accessing port_state and rport state net: netpoll: fix incorrect refcount handling causing incorrect cleanup net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error tipc: Fix use-after-free in tipc_mon_reinit_self(). sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode net/sched: sch_qfq: Fix null-deref in agg_dequeue Input: pegasus-notetaker - fix potential out-of-bounds access Input: remove third argument of usb_maxpacket() usb: deprecate the third argument of usb_maxpacket() ata: libata-scsi: Fix system suspend for a security locked drive fs/proc: fix uaf in proc_readdir_de() pmdomain: imx: Fix reference count leak in imx_gpc_remove pmdomain: arm: scmi: Fix genpd leak on provider registration failure net: qede: Initialize qede_ll_ops with designated initializer uio_hv_generic: Set event for all channels on the device ALSA: usb-audio: fix uac2 clock source at terminal parser kconfig/nconf: Initialize the default locale at startup kconfig/mconf: Initialize the default locale at startup vsock: Ignore signal/timeout on connect() if already established s390/ctcm: Fix double-kfree net: openvswitch: remove never-working support for setting nsh fields mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() MIPS: Malta: Fix !EVA SOC-it PCI MMIO scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() scsi: sg: Do not sleep in atomic context Input: cros_ec_keyb - fix an invalid memory access be2net: pass wrb_params in case of OS2BMC HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155 isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() spi: Try to get ACPI GPIO IRQ earlier ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe strparser: Fix signed/unsigned mismatch bug gcov: add support for GCC 15 mm/ksm: fix flag-dropping behavior in ksm_madvise ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd ASoC: cs4271: Fix regulator leak on probe failure regulator: fixed: use dev_err_probe for register Bluetooth: L2CAP: export l2cap_chan_hold for modules net_sched: remove need_resched() from qdisc_run() net/mlx5e: Fix maxrate wraparound in threshold between units net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion Bluetooth: 6lowpan: reset link-local header on ipv6 recv path net: fec: correct rx_bytes statistic for the case SHIFT16 is set ASoC: max98090/91: fixed max98091 ALSA widget powering up/down HID: quirks: avoid Cooler Master MM712 dongle wakeup bug NFS4: Fix state renewals missing after boot extcon: adc-jack: Cleanup wakeup source only if it was enabled net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup sctp: Prevent TOCTOU out-of-bounds write sctp: Hold RCU read lock while iterating over address list net: vlan: sync VLAN features with lower device ceph: add checking of wait_for_completion_killable() return value fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds ACPI: property: Return present device nodes only on fwnode interface 9p: sysfs_init: don't hardcode error to ENOMEM 9p: fix /sys/fs/9p/caches overwriting itself fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink ACPICA: Update dsmethod.c to get rid of unused variable warning page_pool: Clamp pool size to max 16K pages Bluetooth: bcsp: receive data only if registered Bluetooth: SCO: Fix UAF on sco_conn_free net: macb: avoid dealing with endianness in macb_set_hwaddr() nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing NFSv4.1: fix mount hang after CREATE_SESSION failure NFSv4: handle ERR_GRACE on delegation recalls remoteproc: qcom: q6v5: Avoid handling handover twice sparc/module: Add R_SPARC_UA64 relocation handling net: intel: fm10k: Fix parameter idx set but not used jfs: fix uninitialized waitqueue in transaction manager jfs: Verify inode mode when loading from disk ipv6: np->rxpmtu race annotation usb: xhci: plat: Facilitate using autosuspend for xhci plat devices usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs allow finish_no_open(file, ERR_PTR(-E...)) scsi: lpfc: Define size of debugfs entry for xri rebalancing scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency net/cls_cgroup: Fix task_get_classid() during qdisc run media: redrat3: use int type to store negative error codes net: sh_eth: Disable WoL if system can not suspend usb: gadget: f_hid: Fix zero length packet transfer net: call cond_resched() less often in __release_sock() ALSA: usb-audio: apply quirk for MOONDROP Quark2 net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms dmaengine: mv_xor: match alloc_wc and free_wc scsi: pm8001: Use int instead of u32 to store error codes mips: lantiq: xway: sysctrl: rename stp clock mips: lantiq: danube: add missing properties to cpu node media: fix uninitialized symbol warnings extcon: adc-jack: Fix wakeup source leaks on device unbind rds: Fix endianness annotation for RDS_MPATH_HASH net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV. char: misc: Does not request module for miscdevice with dynamic minor usb: gadget: f_ncm: Fix MAC assignment NCM ethernet iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register media: imon: make send_packet() more robust net: ipv6: fix field-spanning memcpy warning in AH output bridge: Redirect to backup port when port is administratively down media: pci: ivtv: Don't create fake v4l2_fh drm/amdkfd: return -ENOTTY for unsupported IOCTLs selftests/net: Ensure assert() triggers in psock_tpacket.c selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8 PCI: Disable MSI on RDC PCI to PCIe bridges drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf() mfd: madera: Work around false-positive -Wininitialized warning mfd: stmpe: Remove IRQ domain upon removal tools/power x86_energy_perf_policy: Prefer driver HWP limits tools/power x86_energy_perf_policy: Enhance HWP enable tools/cpupower: Fix incorrect size in cpuidle_state_disable() hwmon: (dell-smm) Add support for Dell OptiPlex 7040 uprobe: Do not emulate/sstep original instruction when ip is changed clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel video: backlight: lp855x_bl: Set correct EPROM start for LP8556 tee: allow a driver to allocate a tee_device without a pool ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment arc: Fix __fls() const-foldability via __builtin_clzl() cpufreq/longhaul: handle NULL policy in longhaul_exit selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 ACPI: video: force native for Lenovo 82K8 memstick: Add timeout to prevent indefinite waiting bpf: Don't use %pK through printk spi: loopback-test: Don't use %pK through printk soc: qcom: smem: Fix endian-unaware access of num_entries usb: gadget: f_fs: Fix epfile null pointer access after ep enable. serial: 8250_dw: Use devm_clk_get_optional() to get the input clock can: gs_usb: increase max interface to U8_MAX devcoredump: Fix circular locking dependency with devcd->mutex. x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID net: phy: dp83867: Disable EEE support as not implemented regmap: slimbus: fix bus_context pointer in regmap init calls usbnet: Prevents free active kevent wifi: ath10k: Fix memory leak on unsupported WMI command ASoC: qdsp6: q6asm: do not sleep while atomic fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS fbdev: bitblit: bound-check glyph index in bit_putcs* ACPI: video: Fix use-after-free in acpi_video_switch_brightness() fbdev: atyfb: Check if pll_ops->init_pll failed net: usb: asix_devices: Check return value of usbnet_get_endpoints btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot() x86/bugs: Fix reporting of LFENCE retpoline Conflicts: drivers/slimbus/qcom-ngd-ctrl.c drivers/usb/gadget/function/f_fs.c drivers/usb/host/xhci-plat.c Change-Id: Id995e84f0ff2c819145f7ebd62bc8dcd47fbbb47	2026-01-21 21:23:37 +00:00
Vincent Mailhol	c5c11597b5	usb: deprecate the third argument of usb_maxpacket() ... [ Upstream commit 0f08c2e7458e25c967d844170f8ad1aac3b57a02 ] This is a transitional patch with the ultimate goal of changing the prototype of usb_maxpacket() from: | static inline __u16 | usb_maxpacket(struct usb_device *udev, int pipe, int is_out) into: | static inline u16 usb_maxpacket(struct usb_device *udev, int pipe) The third argument of usb_maxpacket(): is_out gets removed because it can be derived from its second argument: pipe using usb_pipeout(pipe). Furthermore, in the current version, ubs_pipeout(pipe) is called regardless in order to sanitize the is_out parameter. In order to make a smooth change, we first deprecate the is_out parameter by simply ignoring it (using a variadic function) and will remove it later, once all the callers get updated. The body of the function is reworked accordingly and is_out is replaced by usb_pipeout(pipe). The WARN_ON() calls become unnecessary and get removed. Finally, the return type is changed from __u16 to u16 because this is not a UAPI function. Signed-off-by: Vincent Mailhol <mailhol.vincent@wanadoo.fr> Link: https://lore.kernel.org/r/20220317035514.6378-2-mailhol.vincent@wanadoo.fr Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Stable-dep-of: 69aeb5073123 ("Input: pegasus-notetaker - fix potential out-of-bounds access") Signed-off-by: Sasha Levin <sashal@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Ulrich Hecht <uli@kernel.org>	2025-12-22 04:34:10 +01:00
Michael Bestas	9aff51ad3a	Merge tag 'v4.19.325-cip123' of https://git.kernel.org/pub/scm/linux/kernel/git/cip/linux-cip into android13-4.19-kona ... version 4.19.325-cip123 * tag 'v4.19.325-cip123' of https://git.kernel.org/pub/scm/linux/kernel/git/cip/linux-cip: CIP: Bump version suffix to -cip123 after merge from cip/linux-4.19.y-st tree Update localversion-st, tree is up-to-date with 5.4.296. emulex/benet: Fix build by return mismatch in be_cmd_unlock() net/sched: Abort __tc_modify_qdisc if parent class does not exist mtk-sd: Prevent memory corruption from DMA map failure mmc: mediatek: use data instead of mrq parameter from msdc_{un}prepare_data() scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu() btrfs: don't abort filesystem when attempting to snapshot deleted subvolume VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify net: ipv6: Discard next-hop MTU less than minimum link MTU Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY vt: add missing notification when switching back to text mode net: usb: qmi_wwan: add SIMCom 8230C composition atm: idt77252: Add missing `dma_map_error()` bnxt_en: Fix DCB ETS validation can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level net: appletalk: Fix device refcount leak in atrtr_create() md/raid1: Fix stack memory use after return in raid1_reshape wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() dma-buf: fix timeout handling in dma_resv_wait_timeout v2 Input: xpad - support Acer NGR 200 Controller Input: xpad - add VID for Turtle Beach controllers Input: xpad - add support for Amazon Game Controller netlink: Fix rmem check in netlink_broadcast_deliver(). netlink: make sure we allow at least one dump skb Revert "ACPI: battery: negate current when discharging" usb: gadget: u_serial: Fix race condition in TTY wakeup drm/sched: Increment job count before swapping tail spsc queue x86/mce: Make sure CMCI banks are cleared during shutdown on Intel x86/mce: Don't remove sysfs if thresholding sysfs init fails x86/mce/amd: Fix threshold limit reset rxrpc: Fix oops due to non-existence of prealloc backlog struct atm: clip: Fix NULL pointer dereference in vcc_sendmsg() atm: clip: Fix infinite recursive call of clip_push(). atm: clip: Fix memory leak of struct clip_vcc. atm: clip: Fix potential null-ptr-deref in to_atmarpd(). tipc: Fix use-after-free in tipc_conn_close(). netlink: Fix wraparounds of sk->sk_rmem_alloc. fix proc_sys_compare() handling of in-lookup dentries proc: Clear the pieces of proc_inode that proc_evict_inode cares about staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher() media: uvcvideo: Rollback non processed entities on error media: uvcvideo: Send control events for partial succeeds media: uvcvideo: Return the number of processed controls ACPI: PAD: fix crash in exit_round_robin() usb: typec: displayport: Fix potential deadlock Logitech C-270 even more broken rose: fix dangling neighbour pointers in rose_rt_device_down() net: rose: Fix fall-through warnings for Clang ethernet: atl1: Add missing DMA mapping error checks and count errors btrfs: use btrfs_record_snapshot_destroy() during rmdir btrfs: propagate last_unlink_trans earlier when doing a rmdir RDMA/mlx5: Fix CC counters query for MPV scsi: ufs: core: Fix spelling of a sysfs attribute name ACPICA: Refuse to evaluate a method if arguments are missing wifi: ath6kl: remove WARN on bad firmware input wifi: mac80211: drop invalid source address OCB frames powerpc: Fix struct termio related ioctl macros ata: pata_cs5536: fix build on 32-bit UML ALSA: sb: Force to disable DMAs once when DMA mode is changed net/sched: Always pass notifications when child class becomes empty nui: Fix dma_mapping_error() check enic: fix incorrect MTU comparison in enic_change_mtu() amd-xgbe: align CL37 AN sequence as per databook btrfs: fix missing error handling when searching for inode refs during log replay mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data usb: typec: altmodes/displayport: do not index invalid pin_assignments Revert "mmc: sdhci: Disable SD card clock before changing parameters" mmc: sdhci: Add a helper function for dump register in dynamic debug mode vsock/vmci: Clear the vmci transport packet properly when initializing it arm64: Restrict pagetable teardown to avoid false warning drm/bridge: cdns-dsi: Fix connecting to next bridge drm/tegra: Assign plane type before registration HID: wacom: fix kobject reference count leak HID: wacom: fix memory leak on sysfs attribute creation failure HID: wacom: fix memory leak on kobject creation failure dm-raid: fix variable in journal device check Bluetooth: L2CAP: Fix L2CAP MTU negotiation atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). um: ubd: Add missing error check in start_io_thread() vsock/uapi: fix linux/vm_sockets.h userspace compilation errors wifi: mac80211: fix beacon interval calculation overflow ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() i2c: robotfuzz-osif: disable zero-length read messages i2c: tiny-usb: disable zero-length read messages RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private media: vivid: Change the siize of the composing media: omap3isp: use sgtable-based scatterlist wrappers jfs: validate AG parameters in dbMount() to prevent crashes fs/jfs: consolidate sanity checking in dbMount VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF ovl: Check for NULL d_inode() in ovl_dentry_upper() ceph: fix possible integer overflow in ceph_zero_objects() ALSA: hda: Ignore unsol events for cards being shut down usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode usb: cdc-wdm: avoid setting WDM_READ for ZLP-s usb: Add checks for snprintf() calls in usb_alloc_dev() usb: potential integer overflow in usbg_make_tpg() iio: pressure: zpa2326: Use aligned_s64 for the timestamp md/md-bitmap: fix dm-raid max_write_behind setting dmaengine: xilinx_dma: Set dma_device directions mfd: max14577: Fix wakeup source leaks on device unbind mailbox: Not protect module_put with spin_lock_irqsave cifs: Fix cifs_query_path_info() for Windows NT servers CIP: Bump version suffix to -cip122 after merge from cip/linux-4.19.y-st tree Update localversion-st, tree is up-to-date with 5.4.295. ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms ARM: dts: am335x-bone-common: Increase MDIO reset deassert time ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board ARM: dts: am335x-bone-common: get rid of phy_id property mtd: nand: sunxi: Add randomizer configuration before randomizer enable mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() bridge: netfilter: Fix forwarding of fragmented packets vxlan: Annotate FDB data races hwmon: (gpio-fan) Add missing mutex locks nfs: handle failure of nfs_get_lock_context in unlock path sch_htb: make htb_deactivate() idempotent scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() perf: Fix sample vs do_exit() jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() mm/huge_memory: fix dereferencing invalid pmd migration entry posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() net: atm: fix /proc/net/atm/lec handling net: atm: add lec_mutex calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer atm: atmtcp: Free invalid length skb in atmtcp_c_send(). mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). wifi: carl9170: do not ping device which has failed to load firmware drm/nouveau/bl: increase buffer size to avoid truncate warning ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged ALSA: hda/intel: Add Thinkpad E15 to PM deny list Input: sparcspkr - avoid unannotated fall-through HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() atm: Revert atm_account_tx() if copy_from_iter_full() fails. selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len scsi: s390: zfcp: Ensure synchronous unit_add jffs2: check jffs2_prealloc_raw_node_refs() result in few other places jffs2: check that raw node were preallocated before writing summary drivers/rapidio/rio_cm.c: prevent possible heap overwrite Revert "x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2" on v6.6 and older powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery platform/x86: dell_rbu: Stop overwriting data buffer tee: Prevent size calculation wraparound on 32-bit kernels ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value watchdog: da9052_wdt: respect TWDMIN i40e: fix MMIO write access to an invalid page in i40e_clear_hw sock: Correct error checking condition for (assign|release)_proto_idx() vxlan: Do not treat dst cache initialization errors as fatal clk: rockchip: rk3036: mark ddrphy as critical wifi: mac80211: do not offer a mesh path if forwarding is disabled net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get() pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction() pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction() pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name() ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT tcp: always seek for minimal rtt in tcp_rcv_rtt_update() net: dlink: add synchronization for stats update sctp: Do not wake readers in __sctp_write_space() emulex/benet: correct command version selection in be_cmd_get_stats() i2c: designware: Invoke runtime suspend on quick slave re-registration net: macb: Check return value of dma_set_mask_and_coherent() cpufreq: Force sync policy boost with global boost on sysfs update nios2: force update_mmu_cache on spurious tlb-permission--related pagefaults media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() media: tc358743: ignore video while HPD is low drm/amdkfd: Set SDMA_RLCx_IB_CNTL/SWITCH_INSIDE_IB jfs: Fix null-ptr-deref in jfs_ioc_trim drm/amdgpu/gfx9: fix CSIB handling drm/amdgpu/gfx8: fix CSIB handling jfs: fix array-index-out-of-bounds read in add_missing_indices drm/amdgpu/gfx7: fix CSIB handling drm/amd/display: Add NULL pointer checks in dm_force_atomic_commit() media: uapi: v4l: Fix V4L2_TYPE_IS_OUTPUT condition sunrpc: update nextcheck time when adding new cache entries drm/amdgpu/gfx6: fix CSIB handling ACPI: battery: negate current when discharging power: supply: bq27xxx: Retrieve again when busy ACPICA: fix acpi parse and parseext cache leaks ACPICA: Avoid sequence overread in call to strncmp() ACPICA: fix acpi operand cache leak in dswstate.c PCI: Fix lock symmetry in pci_slot_unlock() regulator: max14577: Add error check for max14577_read_reg() staging: iio: ad5933: Correct settling cycles encoding per datasheet net: ch9200: fix uninitialised access during mii_nway_restart ftrace: Fix UAF when lookup kallsym after ftrace disabled dm-mirror: fix a tiny race condition mm: fix ratelimit_pages update error in dirty_ratio_handler() ipc: fix to protect IPCS lookups using RCU parisc: fix building with gcc-15 vgacon: Add check for vc_origin address range in vgacon_scroll() NFC: nci: uart: Set tty->disc_data only in success path f2fs: prevent kernel warning due to negative i_nlink from corrupted image Input: ims-pcu - check record size in ims_pcu_flash_firmware() ext4: fix calculation of credits for extent tree modification ext4: inline: fix len overflow in ext4_prepare_inline_data ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 media: v4l2-dev: fix error handling in __video_register_device() media: gspca: Add error handling for stv06xx_read_sensor() wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723 nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() gfs2: move msleep to sleepable context configfs: Do not override creating attribute file failure in populate_attrs() calipso: unlock rcu before returning -EAFNOSUPPORT usb: Flush altsetting 0 endpoints before reinitializating them after reset. fs/filesystems: Fix potential unsigned integer underflow in fs_name() net/mdiobus: Fix potential out-of-bounds read/write access MIPS: Move '-Wa,-msoft-float' check from as-option to cc-option x86/boot/compressed: prefer cc-option for CFLAGS additions net: mdio: C22 is now optional, EOPNOTSUPP if not provided i40e: retry VFLR handling if there is ongoing VF reset i40e: return false from i40e_reset_vf if reset is in progress net_sched: sch_sfq: fix a potential crash on gso_skb handling scsi: iscsi: Fix incorrect error path labels for flashnode operations NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes NFSD: Fix ia_size underflow Input: synaptics-rmi - fix crash with unsupported versions of F34 Input: synaptics-rmi4 - convert to use sysfs_emit() APIs do_change_type(): refuse to operate on unmounted/not ours mounts net/mlx4_en: Prevent potential integer overflow calculating Hz rtc: Fix offset calculation for .start_secs < 0 rtc: sh: assign correct interrupts with DT perf tests switch-tracking: Fix timestamp comparison mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove() rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send() perf ui browser hists: Set actions->thread before calling do_zoom_thread() fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() soc: aspeed: lpc: Fix impossible judgment condition arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device bus: fsl-mc: fix double-free on mc_dev nilfs2: do not propagate ENOENT error from nilfs_btree_propagate() nilfs2: add pointer check for nilfs_direct_propagate() Squashfs: check return result of sb_min_blocksize ARM: dts: at91: at91sam9263: fix NAND chip selects ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select f2fs: fix to correct check conditions in f2fs_cross_rename f2fs: use d_inode(dentry) cleanup dentry->d_inode calipso: Don't call calipso functions for AF_INET sk. net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy wifi: ath9k_htc: Abort software beacon handling if disabled bpf: Fix WARN() in get_bpf_raw_tp_regs pinctrl: at91: Fix possible out-of-boundary access net: ncsi: Fix GCPS 64-bit member variables f2fs: fix to do sanity check on sbi->total_valid_block_count drm/tegra: rgb: Fix the unbound reference count drm: rcar-du: Fix memory leak in rcar_du_vsps_init() selftests/seccomp: fix syscall_restart test for arm compat firmware: psci: Fix refcount leak in psci_dt_init m68k: mac: Fix macintosh_config for Mac II drm/vmwgfx: Add seqno waiter for sync_files ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions" x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges() crypto: marvell/cesa - Avoid empty transfer descriptor crypto: marvell/cesa - Handle zero-length skcipher requests x86/cpu: Sanitize CPUID(0x80000000) output perf/core: Fix broken throttling when max_samples_per_tick=1 gfs2: gfs2_create_inode error handling fix netfilter: nft_socket: fix sk refcount leaks thunderbolt: Do not double dequeue a configuration request usb: usbtmc: Fix timeout value in get_stb usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE pinctrl: armada-37xx: set GPIO output value before setting direction pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31 tracing: Fix compilation warning on arm32 platform/x86: thinkpad_acpi: Ignore battery threshold change event notification platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys spi: spi-sun4i: fix early activation um: let 'make clean' properly clean underlying SUBARCH as well platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS nfs: don't share pNFS DS connections between net namespaces HID: quirks: Add ADATA XPG alpha wireless mouse support coredump: fix error handling for replace_fd() smb: client: Reset all search buffer pointers when releasing buffer smb: client: Fix use-after-free in cifs_fill_dirent drm/i915/gvt: fix unterminated-string-initialization warning netfilter: nf_tables: do not defer rule destruction via call_rcu netfilter: nf_tables: wait for rcu grace period on net_device removal netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx mm/page_alloc.c: avoid infinite retries caused by cpuset race llc: fix data loss when reading from a socket in llc_ui_recvmsg() ALSA: pcm: Fix race of buffer access at PCM OSS layer can: bcm: add missing rcu read protection for procfs content can: bcm: add locking for bcm_op runtime updates crypto: algif_hash - fix double free in hash_accept net: dwmac-sun8i: Use parsed internal PHY address instead of 1 __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock xenbus: Allow PVH dom0 a non-local xenstore btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 pinctrl: meson: define the pull up/down resistor value as 60 kOhm drm: Add valid clones check regulator: ad5398: Add device tree support bpftool: Fix readlink usage in get_fd_type HID: usbkbd: Fix the bit shift number for LED_KANA scsi: st: Restore some drive settings after reset scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine hwmon: (xgene-hwmon) use appropriate type for the latency value ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB net/mlx4_core: Avoid impossible mlx4_db_alloc() order value smack: recognize ipv4 CIPSO w/o categories pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map ASoC: ops: Enforce platform maximum on initial value ACPI: HED: Always initialize before evged PCI: Fix old_size lower bound in calculate_iosize() too EDAC/ie31200: work around false positive build warning net: pktgen: fix access outside of user given buffer in pktgen_thread_write() MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core MIPS: Use arch specific syscall name match function cpuidle: menu: Avoid discarding useful information x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() bonding: report duplicate MAC address in all situations net: xgene-v2: remove incorrect ACPI_PTR annotation x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 net: pktgen: fix mpls maximum labels list parsing pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" media: cx231xx: set device_caps for 417 dm cache: prevent BUG_ON by blocking retries on failed device resumes media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 ieee802154: ca8210: Use proper setters and getters for bitwise types rtc: ds1307: stop disabling alarms on probe powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 mmc: sdhci: Disable SD card clock before changing parameters posix-timers: Add cond_resched() to posix_timer_add() search loop xen: Add support for XenServer 6.1 platform device dm: restrict dm device size to 2^63-512 bytes kbuild: fix argument parsing in scripts/config scsi: st: ERASE does not change tape location scsi: st: Tighten the page format heuristics with MODE SELECT ext4: reorder capability check last um: Update min_low_pfn to match changes in uml_reserved um: Store full CSGSFS and SS register from mcontext btrfs: send: return -ENAMETOOLONG when attempting a path that is too long btrfs: avoid linker error in btrfs_find_create_tree_block() i2c: pxa: fix call balance of i2c->clk handling routines mmc: host: Wait for Vdd to settle on card power off pNFS/flexfiles: Report ENETDOWN as a connection error tools/build: Don't pass test log files to linker dql: Fix dql->limit value when reset. SUNRPC: rpc_clnt_set_transport() must not change the autobind setting NFSv4: Treat ENETUNREACH errors as fatal for state recovery fbdev: core: tileblit: Implement missing margin clearing for tileblit fbdev: fsl-diu-fb: add missing device_remove_file() mailbox: use error ret code of of_parse_phandle_with_args() kconfig: merge_config: use an empty file as initfile cgroup: Fix compilation issue due to cgroup_mutex not being exported dma-mapping: avoid potential unused data compilation warning scsi: target: iscsi: Fix timeout on deleted connection openvswitch: Fix unsafe attribute parsing in output_userspace() Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5 Input: synaptics - enable SMBus for HP Elitebook 850 G1 phy: Fix error handling in tegra_xusb_port_init ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2() ACPI: PPTT: Fix processor subtable walk qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd() ALSA: sh: SND_AICA should depend on SH_DMA_API spi: loopback-test: Do not split 1024-byte hexdumps RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug staging: axis-fifo: Correct handling of tx_fifo_depth for size validation staging: axis-fifo: avoid parsing ignored device tree properties platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection do_umount(): add missing barrier before refcount checks in sync case MIPS: Fix MAX_REG_OFFSET iio: adc: dln2: Use aligned_s64 for timestamp types: Complement the aligned types with signed 64-bit one USB: usbtmc: use interruptible sleep in usbtmc_read usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition ocfs2: stop quota recovery before disabling quotas ocfs2: implement handshaking with ocfs2 recovery thread ocfs2: switch osb->disable_recovery to enum module: ensure that kobject_put() is safe for module type kobjects xenbus: Use kref to track req lifetime usb: uhci-platform: Make the clock really optional iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo iio: adis16201: Correct inclinometer channel resolution Input: synaptics - enable InterTouch on Dell Precision M3800 Input: synaptics - enable InterTouch on Dynabook Portege X30L-G Input: synaptics - enable InterTouch on Dynabook Portege X30-D net: dsa: b53: fix learning on VLAN unaware bridges scsi: target: Fix WRITE_SAME No Data Buffer crash dm: fix copying after src array boundaries iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid irqchip/gic-v2m: Add const to of_device_id sch_htb: make htb_qlen_notify() idempotent of: module: add buffer overflow check in of_modalias() net: fec: ERR007885 Workaround for conventional TX lan743x: remove redundant initialization of variable current_head_index net: dlink: Correct endianness handling of led_mode tracing: Fix oob write in trace_seq_to_buffer() dm: always update the array size in realloc_argv on success wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload i2c: imx-lpi2c: Fix clock count when probe defers EDAC/altera: Set DDR and SDMMC interrupt mask before registration EDAC/altera: Test the correct error reg offset signal/m68k: Use force_sigsegv(SIGSEGV) in fpsp040_die mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro() x86/bugs: fix backport error in "x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline" x86/bugs: fix backport error in "x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline" CIP: Bump version suffix to -cip121 after merge from cip/linux-4.19.y-st tree Update localversion-st, tree is up-to-date with 5.4.293. x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec() PCI: Rename PCI_IRQ_LEGACY to PCI_IRQ_INTX MIPS: cm: Fix warning if MIPS_CM is disabled comedi: jr3_pci: Fix synchronous deletion of timer scsi: pm80xx: Set phy_attached to zero when device is gone ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls selftests: ublk: fix test_stripe_04 KVM: s390: Don't use %pK through tracepoints sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP ntb: reduce stack usage in idt_scan_mws qibfs: fix _another_ leak usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() usb: host: max3421-hcd: Add missing spi_device_id table parisc: PDT: Fix missing prototype warning MIPS: cm: Detect CM quirks from device tree USB: VLI disk crashes if LPM is used usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive usb: dwc3: gadget: check that event count does not exceed event buffer length USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02) USB: serial: simple: add OWON HDS200 series oscilloscope support USB: serial: option: add Sierra Wireless EM9291 USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe USB: storage: quirk for ADATA Portable HDD CH94 mcb: fix a double free bug in chameleon_parse_gdd() virtio_console: fix missing byte order handling for cols and rows net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too net_sched: hfsc: Fix a UAF vulnerability in class handling tipc: fix NULL pointer dereference in tipc_mon_reinit_self() net: phy: leds: fix memory leak cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error misc: pci_endpoint_test: Use INTX instead of LEGACY net: dsa: mv88e6xxx: fix VTU methods for 6320 family ext4: fix OOB read when checking dotdot dir ext4: optimize __ext4_check_dir_entry() MIPS: ds1287: Match ds1287_set_base_clock() function types MIPS: cevt-ds1287: Add missing ds1287.h include MIPS: dec: Declare which_prom() as static virtio-net: Add validation for used length openvswitch: fix lockup on tx to unregistering netdev with carrier net: openvswitch: fix race on port output mmc: cqhci: Fix checking of CQHCI_HALT state nvmet-fc: Remove unused functions usb: dwc3: support continuous runtime PM with dual role misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). kbuild: Add '-fno-builtin-wcslen' drm/sti: remove duplicate object names drm/repaper: fix integer overflows in repeat functions module: sign with sha512 instead of sha1 by default isofs: Prevent the use of too small fid i2c: cros-ec-tunnel: defer probe if parent EC is not present hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key btrfs: correctly escape subvol in btrfs_show_options() nfs: move nfs_fhandle_hash to common include file NFSD: Constify @fh argument of knfsd_fh_hash() asus-laptop: Fix an uninitialized variable writeback: fix false warning in inode_to_wb() net: b53: enable BPDU reception for management port net: openvswitch: fix nested key length validation in the set() action Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" Bluetooth: btrtl: Prevent potential NULL dereference Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe() scsi: iscsi: Fix missing scsi_host_put() in error path wifi: wl1251: fix memory leak in wl1251_tx_work wifi: mac80211: Purge vif txq in ieee80211_do_stop() wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue() wifi: at76c50x: fix use after free access in at76_disconnect HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition Bluetooth: hci_uart: Fix another race during initialization x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions() PCI: Fix reference leak in pci_alloc_child_bus() of/irq: Fix device node refcount leakages in of_irq_init() of/irq: Fix device node refcount leakage in API irq_of_parse_and_map() gpio: zynq: Fix wakeup source leaks on device unbind ftrace: Add cond_resched() to ftrace_graph_set_hash() crypto: ccp - Fix check for the primary ASP device thermal/drivers/rockchip: Add missing rk3328 mapping entry sctp: detect and prevent references to a freed transport in sendmsg mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock sparc/mm: disable preemption in lazy mmu mode arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string mtd: inftlcore: Add error check for inftl_read_oob() lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets jbd2: remove wrong sb->s_sequence check ext4: fix off-by-one error in do_split media: venus: hfi_parser: add check to avoid out of bound access media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO media: i2c: ov7251: Set enable GPIO low in probe media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() media: streamzap: prevent processing IR data on URB failure mtd: rawnand: brcmnand: fix PM resume warning arm64: cputype: Add MIDR_CORTEX_A76AE xenfs/xensyms: respect hypervisor's "next" indication media: siano: Fix error handling in smsdvb_module_init() media: venus: hfi: add check to handle incorrect queue size media: venus: hfi: add a check to handle OOB in sfr region media: i2c: adv748x: Fix test pattern selection mask bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags bpf: Add endian modifiers to fix endian warnings fbdev: omapfb: Add 'plane' value check drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off drm/amdkfd: Fix pqm_destroy_queue race with GPU reset drm: allow encoder mode_set even when connectors change for crtc Bluetooth: hci_uart: fix race during initialization tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER net: vlan: don't propagate flags on open scsi: st: Fix array overflow in st_setup() ext4: ignore xattrs past end ext4: protect ext4_release_dquot against freezing ahci: add PCI ID for Marvell 88SE9215 SATA Controller ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode jfs: add sanity check for agwidth in dbMount jfs: Prevent copying of nlink with value 0 from disk inode fs/jfs: Prevent integer overflow in AG size calculation fs/jfs: cast inactags to s64 to prevent potential overflow ALSA: usb-audio: Fix CME quirk for UF series keyboards ALSA: hda: intel: Fix Optimus when GPU has no sound HID: pidff: Fix null pointer dereference in pidff_find_fields HID: pidff: Do not send effect envelope if it's empty HID: pidff: Convert infinite length from Linux API to PID standard perf: arm_pmu: Don't disable counter in armpmu_add() x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine pm: cpupower: bench: Prevent NULL dereference on malloc failure net: ppp: Add bound checking for skb data on ppp_sync_txmung ata: sata_sx4: Add error handling in pdc20621_i2c_read() ata: sata_sx4: Drop pointless VPRINTK() calls and convert the remaining ones tipc: fix memory leak in tipc_link_xmit ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() CIP: Bump version suffix to -cip120 after merge from cip/linux-4.19.y-st tree Update localversion-st, tree is up-to-date with 5.4.292. net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy jfs: add index corruption check to DT_GETPAGE() jfs: fix slab-out-of-bounds read in ea_get() tracing: Fix use-after-free in print_graph_function_flags during tracer switching mmc: sdhci-pxav3: set NEED_RSP_BUSY capability x86/tsc: Always save/restore TSC sched_clock() on suspend/resume ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk() arcnet: Add NULL check in com20020pci_probe() ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS vsock: avoid timeout during connect() if the socket is closing net_sched: skbprio: Remove overly strict queue assertions netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets ntb: intel: Fix using link status DB's ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans spufs: fix a leak in spufs_create_context() spufs: fix a leak on spufs_new_file() failure hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9} sched/deadline: Use online cpus for validating runtime affs: don't write overlarge OFS data block size fields affs: generate OFS sequence numbers starting at 1 wifi: iwlwifi: fw: allocate chained SG tables for dump sched/smt: Always inline sched_smt_active() ring-buffer: Fix bytes_dropped calculation issue objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() fs/procfs: fix the comment above proc_pid_wchan() perf python: Check if there is space to copy all the event perf python: Decrement the refcount of just created event on failure perf python: Fixup description of sample.id event member ocfs2: validate l_tree_depth to avoid out-of-bounds access perf units: Fix insufficient array space iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio coresight: catu: Fix number of pages while using 64k pages isofs: fix KMSAN uninit-value bug in do_isofs_readdir() x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment mfd: sm501: Switch to BIT() to mitigate integer overflows RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow power: supply: max77693: Fix wrong conversion of charge input threshold value x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1 IB/mad: Check available slots before posting receive WRs clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent lib: 842: Improve error handling in sw842_compress() clk: amlogic: gxbb: drop incorrect flag on 32k clock fbdev: sm501fb: Add some geometry checks. mdacon: rework dependency list fbdev: au1100fb: Move a variable assignment behind a null pointer check PCI/portdrv: Only disable pciehp interrupts early when needed ALSA: hda/realtek: Always honor no_shutup_pins perf/ring_buffer: Allow the EPOLLRDNORM flag for poll lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*() thermal: int340x: Add NULL check for adev EDAC/ie31200: Fix the error path order of ie31200_init() EDAC/ie31200: Fix the DIMM size mask for several SoCs x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct() cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() net: usb: usbnet: restore usb%d name exception for local mac addresses net: usb: qmi_wwan: add Telit Cinterion FE990B composition net: usb: qmi_wwan: add Telit Cinterion FN990B composition tty: serial: 8250: Add some more device IDs netfilter: socket: Lookup orig tuple for IPv6 SNAT ARM: 9351/1: fault: Add "cut here" line for prefetch aborts ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed() atm: Fix NULL pointer dereference ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() batman-adv: Ignore own maximum aggregation size during RX ARM: shmobile: smp: Enforce shmobile_smp_* alignment mmc: atmel-mci: Add missing clk_disable_unprepare() net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES net: atm: fix use after free in lec_send() Bluetooth: Fix error code in chan_alloc_skb_cb() RDMA/hns: Fix wrong value of max_sge_rd RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path xfrm_output: Force software GSO only in tunnel mode i2c: sis630: Fix an error handling path in sis630_probe() i2c: ali15x3: Fix an error handling path in ali15x3_probe() i2c: ali1535: Fix an error handling path in ali1535_probe() ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe() drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data() qlcnic: fix memory leak issues in qlcnic_sriov_common.c drm/amd/display: Assign normalized_pix_clk when color depth = 14 x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes USB: serial: option: match on interface class for Telit FN990B USB: serial: option: fix Telit Cinterion FE990A name USB: serial: option: add Telit Cinterion FE990B compositions USB: serial: ftdi_sio: add support for Altera USB Blaster 3 block: fix 'kmem_cache of name 'bio-108' already exists' drm/nouveau: Do not override forced connector status x86/irq: Define trace events conditionally nvme: only allow entering LIVE from CONNECTING state sctp: Fix undefined behavior in left shift operation nvmet-rdma: recheck queue state is LIVE in state lock in recv done s390/cio: Fix CHPID "configure" attribute caching HID: ignore non-functional sensor in HP 5MP Camera iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() powercap: call put_device() on an error path in powercap_register_control_type() nvme-fc: go straight to connecting state when initializing net_sched: Prevent creation of classes with TC_H_ROOT ipvs: prevent integer overflow in do_ip_vs_get_ctl() netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio() drivers/hv: Replace binary semaphore with mutex netpoll: hold rcu read lock in __netpoll_send_skb() netpoll: netpoll_send_skb() returns transmit status netpoll: move netpoll_send_skb() out of line netpoll: remove dev argument from netpoll_send_skb_on_dev() netpoll: Fix use correct return type for ndo_start_xmit() pinctrl: bcm281xx: Fix incorrect regmap max_registers value sctp: sysctl: auth_enable: avoid using current->nsproxy sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy Revert "sctp: sysctl: auth_enable: avoid using current->nsproxy" Revert "sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy" sched/isolation: Prevent boot crash when the boot CPU is nohz_full CIP: Bump version suffix to -cip119 after merge from cip/linux-4.19.y-st tree watchdog: renesas_wdt: support handover from bootloader Update localversion-st, tree is up-to-date with 5.4.291. gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl(). gtp: Destroy device along with udp socket's netns dismantle. net: gso: fix ownership in __udp_gso_segment vlan: fix memory leak in vlan_newlink() batman-adv: Drop unmanaged ELP metric worker tee: optee: Fix supplicant wait loop pps: Fix a use-after-free net: rose: lock the socket in rose_bind() btrfs: fix use-after-free when attempting to join an aborted transaction media: lmedm04: Handle errors for lme2510_int_read wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step eeprom: digsy_mtc: Make GPIO lookup table match the device slimbus: messaging: Free transaction ID in delayed interrupt scenario intel_th: pci: Add Panther Lake-P/U support intel_th: pci: Add Panther Lake-H support intel_th: pci: Add Arrow Lake support Squashfs: check the inode number is not the invalid value of zero xhci: pci: Fix indentation in the PCI device ID definitions usb: gadget: Check bmAttributes only if configuration is valid usb: gadget: Fix setting self-powered state on suspend usb: gadget: Set self-powered based on MaxPower and bmAttributes usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality usb: typec: ucsi: increase timeout for PPM reset operations usb: atm: cxacru: fix a flaw in existing endpoint checks usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader usb: renesas_usbhs: Use devm_usb_get_phy() Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection" net: ipv6: fix missing dst ref drop in ila lwtunnel net: ipv6: fix dst ref loop in ila lwtunnel net-timestamp: support TCP GSO case for a few missing flags vlan: enforce underlying device type ppp: Fix KMSAN uninit-value warning with bpf be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe() llc: do not use skb_get() before dev_queue_xmit() hwmon: (ad7314) Validate leading zero bits and return error hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table hwmon: (pmbus) Initialise page count in pmbus_identify() caif_virtio: fix wrong pointer check in cfv_probe() HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() mm/page_alloc: fix uninitialized variable rapidio: fix an API misues when rio_add_net() fails rapidio: add check for rio_add_net() in rio_scan_alloc_net() wifi: nl80211: reject cooked mode if it is set along with other flags wifi: cfg80211: regulatory: improve invalid hints checking x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63 x86/cpu: Validate CPUID leaf 0x2 EDX output x86/cacheinfo: Validate CPUID leaf 0x2 EDX output platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M ALSA: hda/realtek: update ALC222 depop optimize ALSA: hda: intel: Add Dell ALC3271 to power_save denylist HID: appleir: Fix potential NULL dereference at raw event handle Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'" drm/amdgpu: disable BAR resize on Dell G5 SE drm/amdgpu: Check extended configuration space register when system uses large bar drm/amdgpu: skip BAR resizing if the bios already did it acct: perform last write from workqueue kernel/acct.c: use dedicated helper to access rlimit values kernel/acct.c: use #elif instead of #end and #elif pfifo_tail_enqueue: Drop new packet when sch->limit == 0 sched/core: Prevent rescheduling when interrupts are disabled phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk usbnet: gl620a: fix endpoint checking in genelink_bind() perf/core: Fix low freq setting via IOC_PERIOD ftrace: Avoid potential division by zero in function_stat_show() x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems ipvs: Always clear ipvs_property flag in skb_scrub_packet() ASoC: es8328: fix route from DAC to output net: cadence: macb: Synchronize stats calculations sunrpc: suppress warnings for unused procfs functions batman-adv: Ignore neighbor throughput metrics in error case acct: block access to kernel internal filesystems ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() power: supply: da9150-fg: fix potential overflow geneve: Suppress list corruption splat in geneve_destroy_tunnels(). geneve: Fix use-after-free in geneve_find_dev(). powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC ALSA: hda/realtek - Add type for ALC287 powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline powerpc/64s/mm: Move __real_pte stubs into hash-4k.h USB: gadget: f_midi: f_midi_complete to call queue_work usb/gadget: f_midi: Replace tasklet with work usb/gadget: f_midi: convert tasklets to use new tasklet_setup() API usb: dwc3: Fix timeout issue during controller enter/exit from halt state mm: update mark_victim tracepoints fields crypto: testmgr - some more fixes to RSA test vectors crypto: testmgr - populate RSA CRT parameters in RSA test vectors crypto: testmgr - fix version number of RSA tests crypto: testmgr - Fix wrong test case of RSA crypto: testmgr - fix wrong key length for pkcs1pad driver core: bus: Fix double free in driver API bus_register() scsi: storvsc: Set correct data length for sending SCSI command without payload vlan: move dev_put into vlan_dev_uninit vlan: introduce vlan_dev_free_egress_priority Revert "btrfs: avoid monopolizing a core when activating a swap file" parport_pc: add support for ASIX AX99100 can: ems_pci: move ASIX AX99100 ids to pci_ids.h nilfs2: protect access to buffers with no active references nilfs2: do not force clear folio if buffer is referenced nilfs2: do not output warnings when clearing dirty buffers alpha: replace hardcoded stack offsets with autogenerated ones ndisc: extend RCU protection in ndisc_send_skb() openvswitch: use RCU protection in ovs_vport_cmd_fill_info() arp: use RCU protection in arp_xmit() neighbour: use RCU protection in __neigh_notify() neighbour: delete redundant judgment statements ndisc: use RCU protection in ndisc_alloc_skb() ipv6: use RCU protection in ip6_default_advmss() ipv4: use RCU protection in inet_select_addr() ipv4: use RCU protection in rt_is_expired() net: add dev_net_rcu() helper net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() partitions: mac: fix handling of bogus partition table gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock alpha: align stack for page fault and user unaligned trap handlers alpha: make stack 16-byte aligned (most cases) can: c_can: fix unbalanced runtime PM disable in error path USB: serial: option: drop MeiG Smart defines USB: serial: option: fix Telit Cinterion FN990A name USB: serial: option: add Telit Cinterion FN990B compositions USB: serial: option: add MeiG Smart SLM828 usb: cdc-acm: Fix handling of oversized fragments usb: cdc-acm: Check control transfer buffer size before access USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk USB: hub: Ignore non-compliant devices with too many configs or interfaces usb: gadget: f_midi: fix MIDI Streaming descriptor lengths USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI usb: dwc2: gadget: remove of_node reference upon udc_stop usb: gadget: udc: renesas_usb3: Fix compiler warning usb: roles: set switch registered flag early on batman-adv: fix panic during interface removal ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V orangefs: fix a oob in orangefs_debug_write Grab mm lock before grabbing pt lock vfio/pci: Enable iowrite64 and ioread64 for vfio pci media: cxd2841er: fix 64-bit division on gcc-9 xen: remove a confusing comment on auto-translated guest I/O gpio: bcm-kona: Add missing newline to dev_err format string gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0 arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array team: better TEAM_OPTION_TYPE_STRING validation vrf: use RCU protection in l3mdev_l3_out() ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu() HID: multitouch: Add NULL check in mt_input_configured ocfs2: check dir i_size in ocfs2_find_entry MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static ptp: Ensure info->enable callback is always set mtd: onenand: Fix uninitialized retlen in do_otp_read() NFC: nci: Add bounds checking in nci_hci_create_pipe() nilfs2: fix possible int overflows in nilfs_fiemap() ocfs2: handle a symlink read error correctly ocfs2: fix incorrect CPU endianness conversion causing mount failure nvmem: core: improve range check for nvmem_cell_write() crypto: qce - fix goto jump in error path media: uvcvideo: Remove redundant NULL assignment media: uvcvideo: Fix event flags in uvc_ctrl_send_events media: ov5640: fix get_light_freq on auto soc: qcom: smem_state: fix missing of_node_put in error path powerpc/pseries/eeh: Fix get PE state translation serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use serial: sh-sci: Drop __initdata macro for port_cfg usb: gadget: f_tcm: Don't prepare BOT write request twice usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint usb: gadget: f_tcm: Decrement command ref count on cleanup usb: gadget: f_tcm: Translate error to sense wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() HID: hid-sensor-hub: don't use stale platform-data on remove of: reserved-memory: Fix using wrong number of cells to get property 'alignment' of: Fix of_find_node_opts_by_path() handling of alias+path+options of: Correct child specifier used as input of the 2nd nexus node clk: qcom: clk-alpha-pll: fix alpha mode configuration Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc KVM: s390: vsie: fix some corner-cases when grabbing vsie pages KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma binfmt_flat: Fix integer overflow bug on 32 bit systems m68k: vga: Fix I/O defines s390/futex: Fix FUTEX_OP_ANDN implementation leds: lp8860: Write full EEPROM, not only half of it cpufreq: s3c64xx: Fix compilation warning tun: revert fix group permission check netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() udp: gso: do not drop small packets when PMTU reduces tg3: Disable tg3 PCIe AER on system reboot firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry nvme: handle connectivity loss in nvme_set_queue_count usb: xhci: Fix NULL pointer dereference on certain command aborts usb: xhci: Add timeout argument in address_device USB HCD callback media: uvcvideo: Remove dangling pointers media: uvcvideo: Only save async fh if success nilfs2: handle errors that nilfs_prepare_chunk() may return nilfs2: eliminate staggered calls to kunmap in nilfs_rename nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link x86/mm: Don't disable PCID when INVLPG has been fixed by microcode HID: Wacom: Add PCI Wacom device support mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() mmc: core: Respect quirk_max_rate for non-UHS SDIO card tun: fix group permission check printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX sched: Don't try to catch up excess steal time. btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling btrfs: output the reason for open_ctree() failure usb: gadget: f_tcm: Don't free command immediately media: uvcvideo: Fix double free in error path usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE drivers/card_reader/rtsx_usb: Restore interrupt based detection ktest.pl: Check kernelrelease return in get_version NFSD: Reset cb_seq_status after NFS4ERR_DELAY hexagon: Fix unbalanced spinlock in die() hexagon: fix using plain integer as NULL pointer warning in cmpxchg genksyms: fix memory leak when the same symbol is read from *.symref file genksyms: fix memory leak when the same symbol is added from source net: sh_eth: Fix missing rtnl lock in suspend/resume path vsock: Allow retrying on connect() failure net: davicom: fix UAF in dm9000_drv_remove net: rose: fix timer races against user threads PM: hibernate: Add error handling for syscore_suspend() net: fec: implement TSO descriptor cleanup ubifs: skip dumping tnc tree when zroot is null dmaengine: ti: edma: fix OF node reference leaks in edma_driver module: Extend the preempt disabled section in dereference_symbol_descriptor(). ocfs2: mark dquot as inactive if failed to start trans while releasing dquot scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1 media: camif-core: Add check for clk_enable() media: mipi-csis: Add check for clk_enable() PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() media: rc: iguanair: handle timeouts fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() ARM: dts: mediatek: mt7623: fix IR nodename arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property rdma/cxgb4: Prevent potential integer overflow on 32bit RDMA/mlx4: Avoid false error about access to uninitialized gids array perf report: Fix misleading help message about --demangle perf top: Don't complain about lack of vmlinux when not resolving some kernel samples padata: fix sysfs store callback check ktest.pl: Remove unused declarations in run_bisect_test function net: sched: Disallow replacing of child qdisc from one parent to another net/mlxfw: Drop hard coded max FW flash image size selftests: harness: fix printing of mismatch values in __EXPECT() selftests/harness: Display signed values correctly wifi: wlcore: fix unbalanced pm_runtime calls regulator: of: Implement the unwind path of of_regulator_match() team: prevent adding a device which is already a team device lower cpupower: fix TSC MHz calculation wifi: rtlwifi: pci: wait for firmware loading before releasing memory wifi: rtlwifi: fix memory leaks and invalid access at probe error path wifi: rtlwifi: remove unused dualmac control leftovers rtlwifi: replace usage of found with dedicated list iterator variable wifi: rtlwifi: usb: fix workqueue leak when probe fails wifi: rtlwifi: do not complete firmware loading needlessly drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table drm/etnaviv: Fix page property being used for non writecombine buffers afs: Fix directory format encoding struct overflow: Allow mixed type arguments overflow: Correct check_shl_overflow() comment overflow: Add __must_check attribute to check_*() helpers udf: Fix use of check_add_overflow() with mixed type arguments CIP: Bump version suffix to -cip118 after merge from cip/linux-4.19.y-st tree Update localversion-st, tree is up-to-date with 5.4.290. gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp(). arm64: dts: rockchip: add hevc power domain clock to rk3328 Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals Input: xpad - add support for wooting two he (arm) Input: xpad - add unofficial Xbox 360 wireless receiver clone Input: atkbd - map F23 key to support default copilot shortcut Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null" USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() vfio/platform: check the bounds of read/write syscalls net/xen-netback: prevent UAF in xenvif_flush_hash() m68k: Add missing mmap_read_lock() to sys_cacheflush() m68k: Update ->thread.esp0 before calling syscall_trace() in ret_from_signal gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag irqchip/sunxi-nmi: Add missing SKIP_WAKE flag scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request ASoC: wm8994: Add depends on MFD core net: fix data-races around sk->sk_forward_alloc scsi: sg: Fix slab-use-after-free read in sg_release() ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly fs/proc: fix softlockup in __read_vmcore (part 2) poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll() hfs: Sanity check the root record mac802154: check local interfaces before deleting sdata list i2c: mux: demux-pinctrl: check initial mux selection, too nfp: bpf: prevent integer overflow in nfp_bpf_event_output() gtp: use exit_batch_rtnl() method net: add exit_batch_rtnl() method net: net_namespace: Optimize the code net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field() sctp: sysctl: rto_min/max: avoid using current->nsproxy ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv ocfs2: correct return value of ocfs2_local_free_info() phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider phy: core: fix code style in devm_of_phy_provider_unregister arm64: dts: rockchip: fix pd_tcpc0 and pd_tcpc1 node position on rk3399 arm64: dts: rockchip: fix defines in pd_vio node for rk3399 iio: inkern: call iio_device_put() only on mapped devices iio: adc: at91: call input_free_device() on allocated iio_dev iio: adc: ti-ads8688: fix information leak in triggered buffer iio: imu: kmx61: fix information leak in triggered buffer iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer iio: pressure: zpa2326: fix information leak in triggered buffer usb: gadget: f_fs: Remove WARN_ON in functionfs_bind usb: fix reference leak in usb_new_device() USB: usblp: return error when setting unsupported protocol usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null USB: serial: cp210x: add Phoenix Contact UPS Device usb-storage: Add max sectors quirk for Nokia 208 staging: iio: ad9832: Correct phase range check staging: iio: ad9834: Correct phase range check USB: serial: option: add Neoway N723-EA support USB: serial: option: add MeiG Smart SRM815 drm/amd/display: Add check for granularity in dml ceil/floor helpers sctp: sysctl: auth_enable: avoid using current->nsproxy sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy dm thin: make get_first_thin use rcu-safe list first function tcp/dccp: allow a connection when sk_max_ack_backlog is zero tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog net: 802: LLC+SNAP OID:PID lookup on start of skb data ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() dm array: fix cursor index when skipping across block boundaries dm array: fix unreleased btree blocks on closing a faulty array cursor dm array: fix releasing a faulty array block twice in dm_array_cursor_end jbd2: flush filesystem device before updating tail sequence ravb: Fix use-after-free issue in ravb_tx_timeout_work() net/sched: netem: fix backport of "account for backlog updates from child qdisc" CIP: Bump version suffix to -cip117 after merge from cip/linux-4.19.y-st tree Update localversion-st, tree is up-to-date with 5.4.289. RDMA/bnxt_re: Fix max_qp_wrs reported net/sched: netem: account for backlog updates from child qdisc net/sched: cbs: Fix integer overflow in cbs_set_port_rate() netfilter: nft_set_hash: skip duplicated elements pending gc run drm/etnaviv: flush shader L1 cache after user commandstream usb: yurex: make waiting on yurex_write interruptible perf trace: Avoid garbage when not printing a syscall's arguments scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() drm: adv7511: Drop dsi single lane support net/sctp: Prevent autoclose integer overflow in sctp_association_init() sky2: Add device ID 11ab:4373 for Marvell 88E8075 pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking modpost: fix the missed iteration for the max bit in do_input() modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base net: usb: qmi_wwan: add Telit FE910C04 compositions sound: usb: format: don't warn that raw DSD is unsupported wifi: mac80211: wake the queues in case of failure in resume ila: serialize calls to nf_register_net_hooks() af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK af_packet: fix vlan_get_tci() vs MSG_PEEK ALSA: usb-audio: US16x08: Initialize array before use net: llc: reset skb->transport_header netrom: check buffer length before accessing it drm/bridge: adv7511_audio: Update Audio InfoFrame properly drm: bridge: adv7511: Enable SPDIF DAI RDMA/bnxt_re: Fix reporting hw_ver in query_device RDMA/bnxt_re: Add check for path mtu in modify_qp Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet selinux: ignore unknown extended permissions btrfs: avoid monopolizing a core when activating a swap file tracing: Constify string literal data member in struct trace_event_call MIPS: Probe toolchain support of -msym32 virtio-blk: don't keep queue frozen during system suspend platform/x86: asus-nb-wmi: Ignore unknown event 0xCF regmap: Use correct format specifier for logging range errors scsi: qla1280: Fix hw revision numbering for ISP1020/1040 tracing/kprobe: Make trace_kprobe's module callback called after jump_label update mtd: rawnand: fix double free in atmel_pmecc_create_user() dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset dmaengine: mv_xor: fix child node refcount handling in early exit phy: core: Fix that API devm_phy_destroy() fails to destroy the phy phy: core: Fix that API devm_phy_put() fails to release the phy phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() phy: core: Fix an OF node refcount leakage in _of_phy_get() mtd: diskonchip: Cast an operand to prevent potential overflow nfsd: restore callback functionality for NFSv4.0 bpf: Check negative offsets in __bpf_skb_min_len() media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg of: Fix error path in of_parse_phandle_with_args_map() nilfs2: prevent use of deleted inode of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() NFS/pnfs: Fix a live lock between recalled layouts and layoutget zram: refuse to use zero sized block device as backing device sh: clk: Fix clk_enable() to return 0 on NULL clk USB: serial: option: add Telit FE910C04 rmnet compositions USB: serial: option: add MediaTek T7XX compositions USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready USB: serial: option: add MeiG Smart SLM770A USB: serial: option: add TCL IK512 MBIM & ECM efivarfs: Fix error on non-existent file i2c: riic: Always round-up when calculating bus period chelsio/chtls: prevent potential integer overflow on 32bit mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk netfilter: ipset: Fix for recursive locking warning net: ethernet: bgmac-platform: fix an OF node reference leak net: hinic: Fix cleanup in create_rxqs/txqs() net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll i2c: pnx: Fix timeout in wait functions PCI: Add ACS quirk for Broadcom BCM5760X NIC ALSA: usb: Fix UBSAN warning in parse_audio_unit() PCI/AER: Disable AER service on suspend net: sched: fix ordering of qlen adjustment ALSA: usb-audio: Fix a DMA to stack memory bug xen/netfront: fix crash when removing device KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status qca_spi: Make driver probing reliable ACPI: resource: Fix memory resource type union access net: lapb: increase LAPB_HEADER_LEN batman-adv: Do not let TT changes list grows indefinitely batman-adv: Remove uninitialized data in full table TT response batman-adv: Do not send uninitialized TT changes usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer usb: ehci-hcd: fix call balance of clocks handling routines usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() usb: host: max3421-hcd: Correctly abort a USB request. bpf, xdp: Update devmap comments to reflect napi/rcu usage ALSA: usb-audio: Fix out of bounds reads when finding clock sources PCI: rockchip-ep: Fix address translation unit programming Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()" modpost: Add .irqentry.text to OTHER_SECTIONS ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume" jffs2: Fix rtime decompressor jffs2: Prevent rtime decompress memory corruption KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle powerpc/prom_init: Fixup missing powermac #size-cells usb: chipidea: udc: handle USB Error Interrupt if IOC not set PCI: Add 'reset_subordinate' to reset hierarchy below bridge nvdimm: rectify the illogical code within nd_dax_probe() scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset scsi: st: Don't modify unknown block number in MTIOCGET leds: class: Protect brightness_show() with led_cdev->led_access mutex tracing: Use atomic64_inc_return() in trace_clock_counter() netpoll: Use rcu_access_pointer() in __netpoll_setup rocker: fix link status detection in rocker_carrier_init() ASoC: hdmi-codec: reorder channel allocation list wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() wifi: ipw2x00: libipw_rx_any(): fix bad alignment jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree jfs: fix array-index-out-of-bounds in jfs_readdir jfs: fix shift-out-of-bounds in dbSplit jfs: array-index-out-of-bounds fix in dtReadFirst wifi: ath5k: add PCI ID for Arcadyan devices wifi: ath5k: add PCI ID for SX76X net: inet6: do not leave a dangling sk pointer in inet6_create() net: inet: do not leave a dangling sk pointer in inet_create() net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() net: af_can: do not leave a dangling sk pointer in can_create() Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() af_packet: avoid erroring out after sock_init_data() in packet_create() net: ethernet: fs_enet: Use %pa to format resource_size_t net: fec_mpc52xx_phy: Use %pa to format resource_size_t samples/bpf: Fix a resource leak drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera s390/cpum_sf: Handle CPU hotplug remove during sampling regmap: detach regmap from dev on regmap_exit bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt scsi: qla2xxx: Supported speed displayed incorrectly for VPorts ocfs2: update seq_file index in ocfs2_dlm_seq_next tracing: Fix cmp_entries_dup() to respect sort() comparison rules HID: wacom: fix when get product name maybe null pointer bpf: Fix exact match conditions in trie_get_next_key() bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie ocfs2: free inode when ocfs2_get_init_inode() fails spi: mpc52xx: Add cancel_work_sync before module remove drm/sti: Add __iomem for mixer_dbg_mxn's parameter gpio: grgpio: Add NULL check in grgpio_probe gpio: grgpio: use a helper variable to store the address of ofdev->dev crypto: x86/aegis128 - access 32-bit arguments as 32-bit x86/asm: Reorder early variables xen: Fix the issue of resource not being properly released in xenbus_dev_probe() xen/xenbus: fix locking xenbus/backend: Protect xenbus callback with lock xenbus/backend: Add memory pressure handler callback xen/xenbus: reference count registered modules netfilter: ipset: Hold module reference while requesting a module igb: Fix potential invalid memory access in igb_init_module() net/qed: allow old cards not supporting "num_images" to work dccp: Fix memory leak in dccp_feat_change_recv net/ipv6: release expired exception dst cached in socket netfilter: x_tables: fix LED ID check in led_tg_check() ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur dm thin: Add missing destroy_work_on_stack() util_macros.h: fix/rework find_closest() macros ftrace: Fix regression with module command in stack_trace_filter ovl: Filter invalid inodes with missing lookup function media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled media: ts2020: fix null-ptr-deref in ts2020_probe() media: i2c: tc358743: Fix crash in the probe error path when using polling btrfs: ref-verify: fix use-after-free after invalid ref action quota: flush quota_release_work upon quota writeback SUNRPC: correct error code comment in xs_tcp_setup_socket() um/sysrq: remove needless variable sp ALSA: hda/realtek: Set PCBeep to default value for ALC274 Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit" serial: sh-sci: Clean sci_ports[0] after at earlycon exit ipmr: convert /proc handlers to rcu_read_lock() mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device mfd: intel_soc_pmic_bxtwc: Use dev_err_probe() x86/xen/pvh: Annotate indirect branch as safe CIP: Bump version suffix to -cip116 after merge from stable Mark this as 4.19.324-cip115 release. CIP: Bump version suffix to -cip114 after merge from stable Mark this as 4.19.322-cip113 release. CIP: Bump version suffix to -cip112 after merge from stable CIP: Bump version suffix to -cip111 after merge from stable CIP: Bump version suffix to -cip110 after merge from stable CIP: Bump version suffix to -cip109 after merge from stable CIP: Bump version suffix to -cip108 after merge from stable memory: renesas-rpc-if: Clear HS bit during hardware initialization arm64: dts: renesas: rzg2: Add RPC-IF Support spi: spi-rpc-if: Check return value of rpcif_sw_init() memory: renesas-rpc-if: Remove redundant division of dummy memory: renesas-rpc-if: Simplify single/double data register access memory: renesas-rpc-if: Drop usage of RPCIF_DIRMAP_SIZE macro memory: renesas-rpc-if: Return error in case devm_ioremap_resource() fails memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode memory: renesas-rpc-if: fix possible NULL pointer dereference of resource CIP: Bump version suffix to -cip107 after merge from stable ravb: remove undocumented counter processing ravb: remove undocumented endianness selection ravb: update "undocumented" annotations CIP: Bump version suffix to -cip106 after merge from stable Mark this as 4.19.299-cip105 release. CIP: Bump version suffix to -cip104 after merge from stable CIP: Bump version suffix to -cip103 after merge from stable CIP: Bump version suffix to -cip102 after merge from stable CIP: Bump version suffix to -cip101 after merge from stable CIP: Bump version suffix to -cip100 after merge from stable CIP: Bump version suffix to -cip99 after merge from stable CIP: Bump version suffix to -cip98 after merge from stable CIP: Bump version suffix to -cip97 after merge from stable CIP: Bump version suffix to -cip96 after merge from stable CIP: Bump version suffix to -cip95 after merge from stable CIP: Bump version suffix to -cip94 after merge from stable CIP: Bump version suffix to -cip93 after merge from stable CIP: Bump version suffix to -cip92 after merge from stable CIP: Bump version suffix to -cip91 after merge from stable CIP: Bump version suffix to -cip90 after merge from stable CIP: Bump version suffix to -cip89 after merge from stable CIP: Bump version suffix to -cip88 after merge from stable CIP: Bump version suffix to -cip87 after merge from stable CIP: Bump version suffix to -cip86 after merge from stable CIP: Bump version suffix to -cip85 after merge from stable CIP: Bump version suffix to -cip84 after merge from stable CIP: Bump version suffix to -cip83 after merge from stable CIP: Bump version suffix to -cip82 after merge from stable CIP: Bump version suffix to -cip81 after merge from stable drm: rcar-du: Fix Alpha blending issue on Gen3 CIP: Bump version suffix to -cip80 after merge from stable CIP: Bump version suffix to -cip79 after merge from stable CIP: Bump version suffix to -cip78 after merge from stable CIP: Bump version suffix to -cip77 after merge from stable CIP: Bump version suffix to -cip76 after merge from stable CIP: Bump version suffix to -cip75 after merge from stable CIP: Bump version suffix to -cip74 after merge from stable CIP: Bump version suffix to -cip73 after merge from stable CIP: Bump version suffix to -cip72 after merge from stable CIP: Bump version suffix to -cip71 after merge from stable CIP: Bump version suffix to -cip70 after merge from stable CIP: Bump version suffix to -cip69 after merge from stable CIP: Bump version suffix to -cip68 after merge from stable CIP: Bump version suffix to -cip67 after merge from stable CIP: Bump version suffix to -cip66 after merge from stable CIP: Bump version suffix to -cip65 after merge from stable CIP: Bump version suffix to -cip64 after merge from stable CIP: Bump version suffix to -cip63 after merge from stable CIP: Bump version suffix to -cip62 after merge from stable CIP: Bump version suffix to -cip61 after merge from stable CIP: Bump version suffix to -cip60 after merge from stable CIP: Bump version suffix to -cip59 after merge from stable CIP: Bump version suffix to -cip58 after merge from stable CIP: Bump version suffix to -cip57 after merge from stable CIP: Bump version suffix to -cip56 after merge from stable CIP: Bump version suffix to -cip55 after merge from stable CIP: Bump version suffix to -cip54 after merge from stable CIP: Bump version suffix to -cip53 after merge from stable CIP: Bump version suffix to -cip52 after merge from stable CIP: Bump version suffix to -cip51 after merge from stable CIP: Bump version suffix to -cip50 after merge from stable CIP: Bump version suffix to -cip49 after merge from stable media: i2c: imx219: Balance runtime PM use-count media: i2c: imx219: Move out locking/unlocking of vflip and hflip controls from imx219_set_stream CIP: Bump version suffix to -cip48 after merge from stable drm: rcar-du: Fix crash when using LVDS1 clock for CRTC CIP: Bump version suffix to -cip47 after merge from stable CIP: Bump version suffix to -cip46 after merge from stable arm64: dts: renesas: Add support for MIPI Adapter V2.1 connected to HiHope RZ/G2N arm64: dts: renesas: Add support for MIPI Adapter V2.1 connected to HiHope RZ/G2M arm64: dts: renesas: Add support for MIPI Adapter V2.1 connected to HiHope RZ/G2H arm64: dts: renesas: aistarvision-mipi-adapter-2.1: Add parent macro for each sensor arm64: dts: renesas: r8a774e1: Add VIN and CSI-2 nodes media: rcar-csi2: Enable support for R8A774E1 media: dt-bindings: media: renesas,csi2: Add R8A774E1 support media: rcar-vin: Enable support for R8A774E1 media: dt-bindings: media: renesas,vin: Add R8A774E1 support arm64: dts: renesas: r8a774b1: Add VIN and CSI-2 support media: rcar-csi2: Enable support for R8A774B1 media: dt-bindings: rcar-csi2: Add R8A774B1 support media: rcar-vin: Enable support for R8A774B1 media: dt-bindings: rcar-vin: Add R8A774B1 support arm64: dts: renesas: r8a774a1: Add VIN and CSI-2 nodes media: rcar-csi2: Enable support for r8a774a1 media: dt-bindings: media: rcar-csi2: Add r8a774a1 support media: rcar-vin: Enable support for r8a774a1 media: dt-bindings: media: rcar_vin: Add r8a774a1 support arm64: dts: renesas: r8a774c0-cat874: Add support for AISTARVISION MIPI Adapter V2.1 media: i2c: imx219: take lock in imx219_enum_mbus_code/frame_size media: i2c: imx219: Selection compliance fixes media: i2c: imx219: Fix a bug in imx219_enum_frame_size media: i2c: imx219: Implement get_selection media: i2c: imx219: Add support for cropped 640x480 resolution media: i2c: imx219: Add support for RAW8 bit bayer format media: i2c: imx219: Fix power sequence media: i2c: Add driver for Sony IMX219 sensor media: dt-bindings: media: i2c: Add IMX219 CMOS sensor binding media: rcar-csi2: Add support for MEDIA_BUS_FMT_SRGGB8_1X8 format media: rcar-vin: Add support for MEDIA_BUS_FMT_SRGGB8_1X8 format media: rcar-vin: Invalidate pipeline if conversion is not possible on input formats media: rcar-csi2: Update V3M and E3 start procedure media: rcar-vin: fix wrong return value in rvin_set_channel_routing() media: v4l: ctrl: Provide unlocked variant of v4l2_ctrl_grab media: v4l2-async: Log message in case of heterogeneous fwnode match media: v4l2-async: Pass notifier pointer to match functions media: v4l2-async: Accept endpoints and devices for fwnode matching media: device property: Add a function to test is a fwnode is a graph endpoint media: ov5645: Remove unneeded regulator_set_voltage() CIP: Bump version suffix to -cip45 after merge from stable CIP: Bump version suffix to -cip44 after merge from stable CIP: Bump version suffix to -cip43 after merge from stable CIP: Bump version suffix to -cip42 after merge from stable CIP: Bump version suffix to -cip41 after merge from stable spi: spi-mem: Make spi_mem_default_supports_op() static inline pinctrl: renesas: r8a77965: Add QSPI[01] pins, groups and functions pinctrl: renesas: r8a7796: Add QSPI[01] pins, groups and functions pinctrl: renesas: r8a77951: Add QSPI[01] pins, groups and functions pinctrl: renesas: r8a77990: Add QSPI[01] pins, groups and functions pinctrl: renesas: r8a77990: Optimize pinctrl image size for R8A774C0 pinctrl: renesas: r8a77965: Optimize pinctrl image size for R8A774B1 pinctrl: renesas: r8a77951: Optimize pinctrl image size for R8A774E1 pinctrl: renesas: r8a7796: Optimize pinctrl image size for R8A774A1 clk: renesas: r8a774c0: Add RPC clocks clk: renesas: r8a774b1: Add RPC clocks clk: renesas: r8a774a1: Add RPC clocks spi: rpc-if: Fix use-after-free on unbind spi: add Renesas RPC-IF driver spi: spi-mem: Fix a memory leak in spi_mem_dirmap_destroy() spi: spi-mem: Fix spi_mem_dirmap_destroy() kerneldoc spi: spi-mem: Add a new API to support direct mapping spi: spi-mem: Compute length only when needed spi: spi-mem: Fix passing zero to 'PTR_ERR' warning spi: spi-mem: fix reference leak in spi_mem_access_start spi: spi-mem: Split spi_mem_exec_op() code spi: spi-mem: export spi_mem_default_supports_op() spi: spi-mem: Add SPI_MEM_NO_DATA to the spi_mem_data_dir enum memory: renesas-rpc-if: Make rpcif_enable/disable_rpm() as static inline memory: renesas-rpc-if: Fix a node reference leak in rpcif_probe() memory: renesas-rpc-if: Fix unbalanced pm_runtime_enable in rpcif_{enable,disable}_rpm memory: renesas-rpc-if: Return correct value to the caller of rpcif_manual_xfer() memory: add Renesas RPC-IF driver dt-bindings: memory: document Renesas RPC-IF bindings dt-bindings: thermal: rcar-gen3-thermal: Add r8a774e1 support dt-bindings: PCI: rcar-pci-host: Document r8a774e1 bindings dt-bindings: PCI: rcar: Add device tree support for r8a774b1 dt-bindings: timer: renesas: tmu: Document r8a774e1 bindings dt-bindings: pci: rcar-pci-ep: Document missing interrupts property CIP: Bump version suffix to -cip40 after merge from stable arm64: dts: renesas: r8a774c0: Fix MSIOF1 DMA channels CIP: Bump version suffix to -cip39 after merge from stable arm64: dts: renesas: r8a774e1: Add audio support arm64: dts: renesas: r8a774e1: Add missing audio_clk_b CIP: Bump version suffix to -cip38 after merge from stable arm64: dts: renesas: r8a774e1: Add USB-DMAC and HSUSB device nodes arm64: dts: renesas: r8a774e1: Add USB3.0 device nodes arm64: dts: renesas: r8a774e1: Add USB2.0 phy and host (EHCI/OHCI) device nodes dt-bindings: dma: renesas,usb-dmac: Add binding for r8a774e1 dt-bindings: phy: renesas,usb3-phy: Add r8a774e1 support dt-bindings: phy: renesas,usb2-phy: Add r8a774e1 support dt-bindings: sound: renesas, rsnd: Document r8a774e1 bindings arm64: dts: renesas: Add HiHope RZ/G2H board with idk-1110wr display arm64: dts: renesas: r8a774e1: Add PWM device nodes dt-bindings: pwm: renesas,pwm-rcar: Add r8a774e1 support arm64: dts: renesas: r8a774e1-hihope-rzg2h: Setup DU clocks arm64: dts: renesas: r8a774e1: Add LVDS device node drm: rcar-du: lvds: Add support for R8A774E1 SoC dt-bindings: display: renesas,lvds: Document r8a774e1 bindings arm64: dts: renesas: r8a774e1: Populate HDMI encoder node dt-bindings: display: renesas,dw-hdmi: Add r8a774e1 support arm64: dts: renesas: r8a774e1: Populate DU device node drm: rcar-du: Add support for R8A774E1 SoC dt-bindings: display: renesas,du: Document r8a774e1 bindings arm64: dts: renesas: r8a774e1: Add FDP1 device nodes arm64: dts: renesas: r8a774e1: Add VSP instances arm64: dts: renesas: r8a774e1: Add FCPF and FCPV instances arm64: dts: renesas: r8a774e1-hihope-rzg2h-ex: Enable sata misc: pci_endpoint_test: Add Device ID for RZ/G2H PCIe controller arm64: dts: renesas: r8a774e1: Add PCIe EP nodes dt-bindings: pci: rcar-pci-ep: Document r8a774e1 arm64: dts: renesas: r8a774e1: Add SATA controller node arm64: dts: renesas: r8a774e1: Add PCIe device nodes misc: pci_endpoint_test: Add Device ID for RZ/G2M and RZ/G2N PCIe controllers arm64: dts: renesas: r8a774b1: Add PCIe EP nodes arm64: dts: renesas: r8a774a1: Add PCIe EP nodes arm64: dts: renesas: r8a774c0: Add PCIe EP node dt-bindings: pci: rcar-pci-ep: Document r8a774a1 and r8a774b1 ata: sata_rcar: Fix DMA boundary mask arm64: dts: renesas: r8a774b1-hihope-rzg2n-ex: Enable sata arm64: dts: renesas: r8a774b1: Add SATA controller node dt-bindings: ata: sata_rcar: Add r8a774b1 support CIP: Bump version suffix to -cip37 after merge from stable misc: pci_endpoint_test: Add Device ID for RZ/G2E PCIe controller arm64: defconfig: Enable R-Car PCIe endpoint driver PCI: rcar: Add endpoint mode support dt-bindings: PCI: rcar: Add bindings for R-Car PCIe endpoint controller PCI: rcar: Fix calculating mask for PCIEPAMR register PCI: rcar: Move shareable code to a common file arm64: defconfig: Enable CONFIG_PCIE_RCAR_HOST PCI: rcar: Rename pcie-rcar.c to pcie-rcar-host.c PCI: endpoint: functions/pci-epf-test: Print throughput information PCI: endpoint: Add support to handle multiple base for mapping outbound memory PCI: endpoint: Pass page size as argument to pci_epc_mem_init() PCI: endpoint: Fix ->set_msix() to take BIR and offset as arguments PCI: pci-epf-test: Add support to defer core initialization PCI: endpoint: Add notification for core init completion PCI: endpoint: Add core init notifying feature PCI: endpoint: Assign function number for each PF in EPC core PCI: endpoint: Protect concurrent access to pci_epf_ops with mutex PCI: endpoint: Replace spinlock with mutex PCI: endpoint: Use notification chain mechanism to notify EPC events to EPF tools: PCI: Fix fd leakage tools: PCI: Exit with error code when test fails PCI: dwc: Fix dw_pcie_ep_raise_msix_irq() to get correct MSI-X table address PCI: endpoint: Fix clearing start entry in configfs PCI: endpoint: Cast the page number to phys_addr_t PCI: endpoint: Clear BAR before freeing its space PCI: endpoint: Skip odd BAR when skipping 64bit BAR PCI: endpoint: Allocate enough space for fixed size BAR PCI: endpoint: Set endpoint controller pointer to NULL PCI: endpoint: Add support to specify alignment for buffers allocated to BARs PCI: endpoint: Fix a potential NULL pointer dereference PCI: endpoint: Remove features member in struct pci_epc PCI: designware-plat: Remove setting epc->features in Designware plat EP driver PCI: rockchip: Remove pci_epf_linkup() from Rockchip EP driver PCI: cadence: Remove pci_epf_linkup() from Cadence EP driver PCI: pci-epf-test: Use pci_epc_get_features() to get EPC features PCI: pci-epf-test: Do not allocate next BARs memory if current BAR is 64Bit PCI: pci-epf-test: Remove setting epf_bar flags in function driver PCI: endpoint: Fix pci_epf_alloc_space() to set correct MEM TYPE flags PCI: endpoint: Add helper to get first unreserved BAR PCI: cadence: Populate ->get_features() cdns_pcie_epc_ops PCI: rockchip: Populate ->get_features() dw_pcie_ep_ops PCI: pci-dra7xx: Populate ->get_features() dw_pcie_ep_ops PCI: designware-plat: Populate ->get_features() dw_pcie_ep_ops PCI: dwc: Add ->get_features() callback function to dw_pcie_ep_ops PCI: endpoint: Add new pci_epc_ops to get EPC features CIP: Bump version suffix to -cip36 after merge from stable with ravb fix Revert "ravb: Fixed to be able to unload modules" CIP: Bump version suffix to -cip35 after merge from stable CIP: Bump version suffix to -cip34 after merge from stable arm64: dts: renesas: Fix SD Card/eMMC interface device node names arm64: dts: renesas: r8a774e1: Add RWDT node dt-bindings: watchdog: renesas,wdt: Document r8a774e1 support arm64: dts: renesas: r8a774e1: Add MSIOF nodes spi: renesas,sh-msiof: Add r8a774e1 support arm64: dts: renesas: r8a774e1: Add I2C and IIC-DVFS support dt-bindings: i2c: renesas,iic: Document r8a774e1 support dt-bindings: i2c: renesas,i2c: Document r8a774e1 support arm64: dts: renesas: r8a774e1: Add SDHI nodes mmc: renesas_sdhi_internal_dmac: Add r8a774e1 support arm64: dts: renesas: r8a774e1: Add SCIF and HSCIF nodes arm64: dts: renesas: r8a774e1: Add CAN[FD] support can: rcar_can: Remove unused platform data support arm64: dts: renesas: r8a774e1: Add TMU device nodes arm64: dts: renesas: r8a774e1: Add CMT device nodes arm64: dts: renesas: r8a774e1: Add RZ/G2H thermal support thermal: rcar_gen3_thermal: Add r8a774e1 support thermal/drivers/rcar_gen3: Fix undefined temperature if negative thermal: rcar_gen3_thermal: Generate interrupt when temperature changes thermal: rcar_gen3_thermal: Remove temperature bound arm64: dts: renesas: r8a774e1: Add operating points arm64: dts: renesas: r8a774e1: Add Ethernet AVB node arm64: dts: renesas: r8a774e1: Add GPIO device nodes arm64: dts: renesas: r8a774e1: Add SYS-DMAC device nodes dt-bindings: dma: renesas,rcar-dmac: Document R8A774E1 bindings arm64: dts: renesas: r8a774e1: Add IPMMU device nodes iommu/ipmmu-vmsa: Hook up R8A774E1 DT matching code dt-bindings: iommu: renesas,ipmmu-vmsa: Add r8a774e1 support arm64: dts: renesas: Add HiHope RZ/G2H sub board support arm64: dts: renesas: Add HiHope RZ/G2H main board support dt-bindings: arm: renesas: Add HopeRun RZ/G2H boards arm64: dts: renesas: Initial r8a774e1 SoC device tree pinctrl: sh-pfc: pfc-r8a77951: Add R8A774E1 PFC support dt-bindings: pinctrl: sh-pfc: Document r8a774e1 PFC support pinctrl: sh-pfc: Split R-Car H3 support in two independent drivers pinctrl: sh-pfc: pfc-r8a7795: Fix typo in pinmux macro for SCL3 pinctrl: sh-pfc: pfc-r8a7795-es1: Fix typo in pinmux macro for SCL3 pinctrl: sh-pfc: r8a7795: Use new macros for non-GPIO pins pinctrl: sh-pfc: r8a7795-es1: Use new macros for non-GPIO pins pinctrl: sh-pfc: r8a7795: Add TPU pins, groups and functions pinctrl: sh-pfc: r8a7795-es1: Add TPU pins, groups and functions pinctrl: sh-pfc: rcar-gen3: Rename RTS{0,1,3,4}# pin function definitions pinctrl: sh-pfc: rcar-gen3: Retain TDSELCTRL register across suspend/resume pinctrl: sh-pfc: r8a7795: Deduplicate VIN5 pin definitions pinctrl: sh-pfc: r8a7795: Add I2C{0,3,5} pins, groups and functions pinctrl: sh-pfc: r8a7795-es1: Add I2C{0,3,5} pins, groups and functions pinctrl: sh-pfc: r8a7795: Fix VIN versioned groups pinctrl: sh-pfc: r8a77965: Fix DU_DOTCLKIN3 drive/bias control arm64: defconfig: Enable R8A774E1 SoC clk: renesas: cpg-mssr: Add r8a774e1 support dt-bindings: clock: renesas,cpg-mssr: Document r8a774e1 clk: renesas: rzg2: Mark RWDT clocks as critical clk: renesas: cpg-mssr: Mark clocks as critical only if on at boot clk: renesas: rcar-gen3: Allow changing the RPC[D2] clocks clk: renesas: Add r8a774e1 CPG Core Clock Definitions clk: renesas: rcar-gen3: Add RPC clocks soc: renesas: rcar-rst: Add support for RZ/G2H dt-bindings: reset: rcar-rst: Document r8a774e1 reset module soc: renesas: Identify RZ/G2H dt-bindings: arm: renesas: Document RZ/G2H SoC DT bindings soc: renesas: Add Renesas R8A774E1 config option soc: renesas: rcar-sysc: Add r8a774e1 support dt-bindings: power: renesas,rcar-sysc: Document r8a774e1 SYSC binding dt-bindings: power: Add r8a774e1 SYSC power domain definitions arm64: dts: renesas: r8a774a1: Remove audio port node arm64: dts: renesas: Add HiHope RZ/G2N Rev2.0/3.0/4.0 board with idk-1110wr display arm64: dts: renesas: Add HiHope RZ/G2N Rev.3.0/4.0 sub board support arm64: dts: renesas: Add HiHope RZ/G2N Rev.3.0/4.0 main board support arm64: dts: renesas: Add HiHope RZ/G2M Rev.3.0/4.0 board with idk-1110wr display arm64: dts: renesas: hihope-rzg2-ex: Separate out lvds specific nodes into common file arm64: dts: renesas: Add HiHope RZ/G2M Rev.3.0/4.0 sub board support arm64: dts: renesas: Add HiHope RZ/G2M Rev.3.0/4.0 main board support arm64: dts: renesas: Add HiHope RZ/G2M[N] Rev.3.0/4.0 specific into common file arm64: dts: renesas: hihope-common: Separate out Rev.2.0 specific into hihope-rev2.dtsi file arm64: dts: renesas: r8a774b1-hihope-rzg2n[-ex]: Rename HiHope RZ/G2N boards arm64: dts: renesas: r8a774a1-hihope-rzg2m[-ex/-ex-idk-1110wr]: Rename HiHope RZ/G2M boards CIP: Bump version suffix to -cip33 after merge from stable drm: atomic helper: fix W=1 warnings drm: Add drm_atomic_get_old/new_private_obj_state drm: of: Fix linking when CONFIG_OF is not set CIP: Bump version suffix to -cip32 after merge from stable drm: of: Fix double-free bug CIP: Bump version suffix to -cip31 after merge from stable arm64: dts: renesas: Add EK874 board with idk-2121wr display support dt-bindings: display: Add idk-2121wr binding arm64: dts: renesas: rzg2: Add reset control properties for display arm64: dts: renesas: r8a774c0: Point LVDS0 to its companion LVDS1 drm: rcar-du: lvds: Allow for even and odd pixels swap drm: rcar-du: lvds: Get dual link configuration from DT drm: of: Add drm_of_lvds_get_dual_link_pixel_order drm: rcar-du: lvds: Improve identification of panels drm: rcar-du: lvds: Get mode from state drm: Add atomic variants for bridge enable/disable drm: Add drm_atomic_get_(old|new)_connector_for_encoder() helpers drm: rcar_lvds: Fix dual link mode operations drm: rcar-du: Skip LVDS1 output on Gen3 when using dual-link LVDS mode drm: rcar-du: lvds: Add support for dual-link mode dt-bindings: display: renesas: lvds: Add renesas,companion property drm: bridge: Add dual_link field to the drm_bridge_timings structure drm: rcar-du: lvds: Remove LVDS double-enable checks arm64: defconfig: Enable additional support for Renesas platforms ASoC: rsnd: fixup SSI clock during suspend/resume modes CIP: Bump version suffix to -cip30 after merge from stable CIP: Bump version suffix to -cip29 after merge from stable CIP: Bump version suffix to -cip28 after merge from stable CIP: Bump version suffix to -cip27 after merge from stable CIP: Bump version suffix to -cip26 after merge from stable CIP: Bump version suffix to -cip25 after merge from stable arm64: dts: renesas: Add HiHope RZ/G2M board with idk-1110wr display dt-bindings: display: Add idk-1110wr binding CIP: Bump version suffix to -cip24 after merge from stable CIP: Bump version suffix to -cip23 after merge from stable CIP: Bump version suffix to -cip22 after merge from stable CIP: Bump version suffix to -cip21 after merge from stable arm64: dts: renesas: cat874: Enable usb role switch support arm64: dts: renesas: cat874: Enable USB3.0 host/peripheral device node usb: gadget: udc: renesas_usb3: Enhance role switch support usb: typec: fix an IS_ERR() vs NULL bug in hd3ss3220_probe() usb: typec: hd3ss3220: hd3ss3220_probe() warn: passing zero to 'PTR_ERR' usb: typec: add dependency for TYPEC_HD3SS3220 usb: typec: hd3ss3220_irq() can be static usb: typec: driver for TI HD3SS3220 USB Type-C DRP port controller dt-bindings: usb: renesas_usb3: Document usb role switch support dt-bindings: usb: hd3ss3220 device tree binding document usb: roles: Add fwnode_usb_role_switch_get() function device connection: Add fwnode_connection_find_match() usb: roles: Introduce stubs for the exiting functions in role.h device connection: Find connections also by checking the references device property: Introduce fwnode_find_reference() device connection: Find device connections also from device graphs device connection: Prepare support for firmware described connections usb: typec: Find the ports by also matching against the device node usb: roles: Find the muxes by also matching against the device node usb: typec: mux: Fix unsigned comparison with less than zero usb: typec: mux: Find the muxes by also matching against the device node device connection: Add fwnode member to struct device_connection CIP: Bump version suffix to -cip20 after merge from stable arm64: dts: renesas: r8a774b1: Add USB3.0 device nodes arm64: dts: renesas: r8a774b1: Add USB-DMAC and HSUSB device nodes arm64: dts: renesas: r8a774b1: Add USB2.0 phy and host (EHCI/OHCI) device nodes dt-bindings: usb: renesas_usb3: Document r8a774b1 support dt-bindings: usb: renesas_gen3: Rename bindings documentation file to reflect IP block dt-bindings: usb-xhci: Add r8a774b1 support dt-bindings: rcar-gen3-phy-usb3: Add r8a774b1 support dt-bindings: usb: renesas_usbhs: Add r8a774b1 support dt-bindings: usb: renesas_usbhs: Rename bindings documentation file dt-bindings: dmaengine: usb-dmac: Add binding for r8a774b1 dt-bindings: rcar-gen3-phy-usb2: Add r8a774b1 support arm64: dts: renesas: r8a774b1: Add Sound and Audio DMAC device nodes ASoC: rsnd: Document r8a774b1 bindings arm64: dts: renesas: r8a774a1: Remove audio port node arm64: dts: renesas: Add support for Advantech idk-1110wr LVDS panel arm64: dts: renesas: hihope-rzg2-ex: Add LVDS support drm: rcar-du: lvds: Add r8a774b1 support arm64: dts: renesas: hihope-rzg2-ex: Enable backlight arm64: dts: renesas: r8a774b1: Add PWM device nodes arm64: dts: renesas: r8a774b1: Add FDP1 device nodes arm64: dts: renesas: r8a774b1-hihope-rzg2n: Add display clock properties arm64: dts: renesas: r8a774b1: Add HDMI encoder instance arm64: dts: renesas: r8a774b1: Add DU device to DT drm: rcar-du: Add R8A774B1 support arm64: dts: renesas: hihope-common: Move du clk properties out of common dtsi arm64: dts: renesas: r8a774b1: Connect Ethernet-AVB to IPMMU-DS0 arm64: dts: renesas: r8a774b1: Tie SYS-DMAC to IPMMU-DS0/1 arm64: dts: renesas: r8a774b1: Add VSP instances arm64: dts: renesas: r8a774b1: Add FCPF and FCPV instances arm64: dts: renesas: r8a774b1: Add IPMMU device nodes iommu/ipmmu-vmsa: Hook up r8a774b1 DT matching code dt-bindings: iommu: ipmmu-vmsa: Add r8a774b1 support arm64: dts: renesas: r8a774b1: Add CAN and CAN FD support dt-bindings: can: rcar_canfd: document r8a774b1 support dt-bindings: can: rcar_can: document r8a774b1 support arm64: dts: renesas: r8a774b1: Add TMU device nodes clk: renesas: r8a774b1: Add TMU clock dt-bindings: timer: renesas: tmu: Document r8a774b1 bindings arm64: dts: renesas: r8a774b1: Add CMT device nodes dt-bindings: timer: renesas, cmt: Document r8a774b1 CMT support arm64: dts: renesas: r8a774b1: Add RZ/G2N thermal support thermal: rcar_gen3_thermal: Add r8a774b1 support dt-bindings: thermal: rcar-gen3-thermal: Add r8a774b1 support arm64: dts: renesas: r8a774b1: Add OPPs table for cpu devices arm64: dts: renesas: r8a774b1: Add I2C and IIC-DVFS support dt-bindings: i2c: sh_mobile: Add r8a774b1 support dt-bindings: i2c: sh_mobile: Rename bindings documentation file dt-bindings: i2c: rcar: Add r8a774b1 support dt-bindings: i2c: rcar: Rename bindings documentation file arm64: dts: renesas: r8a774b1-hihope-rzg2n: Enable HS400 mode arm64: dts: renesas: r8a774b1: Add SDHI support mmc: renesas_sdhi_internal_dmac: Add r8a774b1 support dt-bindings: mmc: renesas_sdhi: Add r8a774b1 support arm64: dts: renesas: r8a774b1: Add INTC-EX device node arm64: dts: renesas: hihope-rzg2-ex: Let the board specific DT decide about pciec1 arm64: dts: renesas: r8a774b1: Add PCIe device nodes arm64: dts: renesas: r8a774b1: Add all MSIOF nodes arm64: dts: renesas: r8a774b1: Add RWDT node dt-bindings: watchdog: renesas-wdt: Document r8a774b1 support dt-bindings: watchdog: Rename bindings documentation file dt-bindings: spi: sh-msiof: Add r8a774b1 support arm64: dts: renesas: Add HiHope RZ/G2N sub board support arm64: dts: renesas: r8a774b1: Add Ethernet AVB node dt-bindings: net: ravb: Add support for r8a774b1 SoC arm64: dts: renesas: r8a774b1: Add GPIO device nodes dt-bindings: gpio: rcar: Add DT binding for r8a774b1 arm64: dts: renesas: r8a774b1: Add SCIF and HSCIF nodes arm64: dts: renesas: r8a774b1: Add SYS-DMAC device nodes dt-bindings: dmaengine: rcar-dmac: Document R8A774B1 bindings CIP: Bump version suffix to -cip19 after merge from stable arm64: dts: renesas: r8a774c0: cat874: Sort nodes arm64: dts: renesas: Use ip=on for bootargs arm64: dts: renesas: r8a774c0: cat874: Add definition for 12V regulator arm64: dts: renesas: Update 'vsps' properties for readability arm64: dts: renesas: r8a774c0: Fix register range of display node arm64: dts: renesas: r8a774c0: Add missing assigned-clocks for CAN[01] arm64: dts: renesas: r8a774c0: Clean up CPU compatibles arm64: dts: renesas: r8a774c0: Add dynamic power coefficient arm64: dts: renesas: r8a774c0: Create thermal zone to support IPA thermal: rcar_thermal: update calculation formula for R-Car Gen3 SoCs dt-bindings: can: rcar_can: Complete documentation for RZ/G2[EM] dt-bindings: can: rcar_can: document r8a77965 support CIP: Bump version suffix to -cip18 after merge from stable CIP: Bump version suffix to -cip17 after merge from stable arm64: defconfig: Enable R8A774B1 SoC arm64: dts: renesas: Add HiHope RZ/G2N main board support arm64: dts: renesas: Initial r8a774b1 SoC device tree dt-bindings: serial: sh-sci: Document r8a774b1 bindings pinctrl: sh-pfc: pfc-r8a77965: Fix typo in pinmux macro for SCL3 pinctrl: sh-pfc: r8a77965: Add R8A774B1 PFC support dt-bindings: pinctrl: sh-pfc: Document r8a774b1 PFC support pinctrl: sh-pfc: r8a77965: Use new macros for non-GPIO pins pinctrl: sh-pfc: r8a77965: Add TPU pins, groups and functions pinctrl: sh-pfc: r8a77965: Add I2C{0,3,5} pins, groups and functions pinctrl: sh-pfc: r8a77965: Add DRIF pins, groups and functions pinctrl: sh-pfc: r8a77965: Add TMU pins, groups and functions pinctrl: sh-pfc: r8a77965: Replace DU_DOTCLKIN2 by DU_DOTCLKIN3 pinctrl: sh-pfc: r8a77965: Add CAN FD pins, groups and functions pinctrl: sh-pfc: r8a77965: Add CAN pins, groups and functions pinctrl: sh-pfc: r8a77965: Add VIN[4|5] groups/functions pinctrl: sh-pfc: r8a77965: Add Audio SSI pin support pinctrl: sh-pfc: r8a77965: Add Audio clock pin support pinctrl: sh-pfc: r8a77965: Add SATA pins, groups and functions clk: renesas: cpg-mssr: Add r8a774b1 support dt-bindings: clock: renesas: cpg-mssr: Document r8a774b1 binding dt-bindings: clk: Add r8a774b1 CPG Core Clock Definitions soc: renesas: rcar-rst: Add support for RZ/G2N dt-bindings: reset: rcar-rst: Document r8a774b1 reset module soc: renesas: rcar-sysc: Add r8a774b1 support soc: renesas: r8a774c0-sysc: Fix power request conflicts soc: renesas: r8a77990-sysc: Fix power request conflicts soc: renesas: r8a77980-sysc: Fix power request conflicts soc: renesas: r8a77970-sysc: Fix power request conflicts soc: renesas: r8a77965-sysc: Fix power request conflicts soc: renesas: r8a7796-sysc: Fix power request conflicts soc: renesas: r8a7795-sysc: Fix power request conflicts soc: renesas: rcar-sysc: Prepare for fixing power request conflicts dt-bindings: power: rcar-sysc: Document r8a774b1 sysc dt-bindings: power: Add r8a774b1 SYSC power domain definitions soc: renesas: Identify RZ/G2N soc: renesas: Add Renesas R8A774B1 config option dt-bindings: arm: renesas: Add HopeRun RZ/G2N boards dt-bindings: arm: renesas: Document RZ/G2N SoC DT bindings CIP: Bump version suffix to -cip16 after merge from stable CIP: Bump version suffix to -cip15 after merge from stable gitlab-ci: Use external linux-cip-pipelines repository to define CI arm64: dts: renesas: r8a774a1: Add SSIU support for sound ASoC: rsnd: add SSIU BUSIF support ASoC: rsnd: add .get_id/.get_id_sub ASoC: rsnd: move .get_status under rsnd_mod_ops ASoC: rsnd: merge .nolock_start and .prepare ASoC: rsnd: ssiu: Support to init different BUSIF instance ASoC: rsnd: ssiu: Support BUSIF other than BUSIF0 ASoc: rsnd: dma: Calculate PDMACHCRE with consider of BUSIF ASoc: rsnd: dma: Calculate dma address with consider of BUSIF ASoC: rsnd: ssi: Check runtime channel number rather than hw_params ASoC: rsnd: ssi: Fix issue in dma data address assignment ASoC: rsnd: remove is_play parameter from hw_rule function ASoC: rsnd: add support for 8 bit S8 format ASoC: rsnd: add support for 16/24 bit slot widths ASoC: rsnd: add warning message to rsnd_kctrl_accept_runtime() CIP: Bump version suffix to -cip14 after merge from stable gitlab-ci: Remove test timeout gitlab-ci: Remove unofficial build configurations gitlab-ci: Split tests into separate jobs CIP: Bump version suffix to -cip13 after merge from stable arm64: dts: renesas: hihope-rzg2-ex: Enable CAN interfaces arm64: dts: renesas: r8a774a1: Add CANFD support arm64: dts: renesas: r8a774a1: Add missing assigned-clocks for CAN[01] dt-bindings: can: rcar_canfd: document r8a774a1 support arm64: dts: renesas: hihope-common: Add HDMI audio support arm64: dts: renesas: r8a774a1: Use extended audio dmac registers arm64: dts: renesas: cat874: Add BT support arm64: dts: renesas: cat874: Add WLAN support arm64: dts: renesas: hihope-common: Add WLAN support arm64: dts: renesas: hihope-common: Add BT support arm64: dts: renesas: hihope-common: Add PCA9654 I/O expander CIP: Bump version suffix to -cip12 after merge from stable arm64: dts: renesas: r8a774c0: Add CANFD support dt-bindings: can: rcar_canfd: document r8a774c0 support arm64: dts: renesas: cat874: Add HDMI audio arm64: dts: renesas: cat874: Add HDMI video support arm64: defconfig: Enable TDA19988 arm64: dts: renesas: r8a774c0: Add display output support media: use strscpy() instead of strlcpy() drm: rcar-du: Replace EXT_CTRL_REGS feature flag with generation check drm: rcar-du: Disable unused DPAD outputs drm/rcar-du: Use drm_fbdev_generic_setup() drm: rcar-du: Reject modes that fail CRTC timing requirements drm: rcar-du: Fix external clock error checks drm: rcar-du: Fix vblank initialization drm: rcar-du: Fix the return value in case of error in 'rcar_du_crtc_set_crc_source()' drm/rcar-du: Replace drm_dev_unref with drm_dev_put drm: rcar-du: Enable configurable DPAD0 routing on Gen3 drm: rcar-du: Improve non-DPLL clock selection drm: rcar-du: lvds: Adjust operating frequency for D3 and E3 drm: rcar-du: lvds: Fix post-DLL divider calculation drm: rcar-du: Turn LVDS clock output on/off for DPAD0 output on D3/E3 drm: rcar-du: lvds: Add API to enable/disable clock output drm: rcar-du: lvds: Don't fail probe if output is not connected on D3/E3 drm: rcar-du: Simplify encoder registration drm: rcar-du: Move CRTC outputs bitmask to private CRTC state drm: rcar-du: lvds: add R8A774C0 support drm: rcar-du: Add r8a774c0 device support drm: rcar-du: Use LVDS PLL clock as dot clock when possible drm: rcar-du: Perform the initial CRTC setup from rcar_du_crtc_get() drm: rcar-du: lvds: D3/E3 support dt-bindings: display: renesas: lvds: Document r8a774c0 bindings dt-bindings: display: renesas: lvds: Add EXTAL and DU_DOTCLKIN clocks dt-bindings: display: renesas: du: Document r8a774c0 bindings media: dt-bindings: media: renesas-fcp: Add RZ/G2 support media: vsp1: Add RZ/G support CIP: Bump version suffix to -cip11 after merge from stable gitlab-ci: Always store job artifacts gitlab-ci: Increase test timeout to 60 minutes arm64: dts: renesas: hihope-common: Add HDMI support arm64: dts: renesas: r8a774a1: Add HDMI encoder instance arm64: dts: renesas: r8a774a1: Connect Ethernet-AVB to IPMMU-DS0 arm64: dts: renesas: r8a774a1: Tie Audio-DMAC to IPMMU-MP arm64: dts: renesas: r8a774a1: Tie SYS-DMAC to IPMMU-DS0/1 arm64: dts: renesas: r8a774a1: Add FDP1 instance arm64: dts: renesas: r8a774a1: Add DU device to DT arm64: dts: renesas: r8a774a1: Add VSP instances arm64: dts: renesas: hihope-rzg2-ex: Enable PCIe support arm64: dts: renesas: hihope-common: Declare pcie bus clock arm64: dts: renesas: r8a774a1: Add PCIe device nodes drm: rcar-du: Update framebuffer pitch and alignment limits for Gen3 drm: rcar-du: Store V4L2 fourcc in rcar_du_format_info structure drm: rcar-du: Add support for missing pixel formats drm: rcar-du: Rename and document dpll_ch field drm: rcar-du: Rework clock configuration based on hardware limits drm: rcar-du: Support interlaced video output through vsp1 drm: rcar-du: Don't use TV sync mode when not supported by the hardware drm: rcar-du: Cache DSYSR value to ensure known initial value drm: rcar-du: Add interlaced feature flag drm: rcar-du: Refactor Feature and Quirk definitions drm: rcar-du: dw-hdmi: Reject modes with a too high clock frequency drm: rcar-du: lvds: Add r8a774a1 support drm: rcar-du: Add R8A774A1 support PCI: rcar: Do not shadow the 'irq' variable PCI: rcar: Clean up debug messages PCI: rcar: Replace various variable types with unsigned ones for register values PCI: rcar: Replace unsigned long with u32/unsigned int in register accessors dt-bindings: display: renesas: Add r8a774a1 support dt-bindings: display: renesas: lvds: Document r8a774a1 bindings dt-bindings: display: renesas: du: Document the r8a774a1 bindings dt-bindings: PCI: rcar: Add device tree support for r8a774a1 CIP: Bump version suffix to -cip10 after merge from stable arm64: dts: renesas: hihope-common: Enable USB3.0 arm64: dts: renesas: hihope-common: Add USB 2.0 support arm64: dts: renesas: r8a774a1: Fix USB 2.0 clocks phy: renesas: rcar-gen3-usb2: fix imbalance powered flag arm64: dts: renesas: hihope-common: Remove "label" from LEDs arm64: dts: renesas: hihope-common: Add LEDs support arm64: dts: renesas: hihope-common: Add uSD and eMMC mmc: renesas_sdhi: prevent overflow for max_req_size mmc: tmio: introduce macro for max block size mmc: renesas_sdhi: Change HW adjustment register according to speed mode arm64: dts: renesas: r8a774a1: Add dynamic power coefficient arm64: dts: renesas: r8a774a1: Create thermal zone to support IPA arm64: dts: renesas: r8a774a1: Add CPU capacity-dmips-mhz arm64: dts: renesas: r8a774a1: Add CPU topology on r8a774a1 SoC arm64: dts: renesas: r8a774a1: Add operating points thermal: rcar_gen3_thermal: Update temperature conversion method thermal: rcar_gen3_thermal: Update calculation formula of IRQTEMP thermal: rcar_gen3_thermal: Update value of Tj_1 thermal: rcar_gen3_thermal: Fix to show correct trip points number thermal: rcar_gen3_thermal: fix interrupt type thermal: rcar_gen3_thermal: Fix init value of IRQCTL register thermal: rcar_gen3_thermal: Register hwmon sysfs interface arm64: dts: renesas: r8a774a1: Add TMU device nodes clk: renesas: r8a774a1: Add TMU clock arm64: dts: renesas: r8a774a1: Add CMT device nodes arm64: dts: renesas: hihope-common: Add RWDT support watchdog: renesas_wdt: Add a few cycles delay watchdog: renesas_wdt: Use 'dev' instead of dereferencing it repeatedly watchdog: renesas_wdt: drop superfluous glob pattern watchdog: renesas_wdt: don't keep timer value during suspend/resume watchdog: renesas_wdt: Fix typos watchdog: renesas_wdt: stop when unregistering arm64: dts: renesas: Add HiHope RZ/G2M sub board support arm64: dts: renesas: hihope-common: Add pincontrol support to scif2/scif clock arm64: dts: renesas: Add HiHope RZ/G2M main board support dt-bindings: Add vendor prefix for HopeRun dt-bindings: arm: renesas: Add HopeRun RZ/G2[M] boards gitlab-ci: Start testing the r8a774a1-hihope-rzg2m-ex device arm64: dts: renesas: r8a774a1: Add clkp2 clock to CAN nodes arm64: dts: Remove inconsistent use of 'arm,armv8' compatible string arm64: dts: renesas: r8a774a1: Fix hsusb reg size arm64: dts: renesas: r8a774a1: Enable DMA for SCIF2 arm64: dts: renesas: r8a774a1: Replace clock magic numbers arm64: dts: renesas: r8a774a1: Replace power magic numbers arm64: dts: renesas: r8a774a1: Add CAN nodes arm64: dts: renesas: Remove unneeded status from thermal nodes arm64: dts: renesas: Fix whitespace around assignments arm64: dts: renesas: r8a774a1: Add USB3.0 device nodes arm64: dts: renesas: r8a774a1: Add USB-DMAC and HSUSB device nodes arm64: dts: renesas: r8a774a1: Add USB2.0 phy and host(EHCI/OHCI) device nodes arm64: dts: renesas: r8a774a1: Add FCPF and FCPV instances arm64: dts: renesas: r8a774a1: Add audio support arm64: dts: renesas: r8a774a1: Add PWM device nodes arm64: dts: renesas: r8a774a1: Add Cortex-A53 CPU cores arm64: dts: renesas: r8a774a1: Add all MSIOF nodes arm64: dts: renesas: r8a774a1: Add IPMMU device nodes arm64: dts: renesas: r8a774a1: Add RZ/G2M thermal support arm64: dts: renesas: r8a774a1: Add I2C and IIC-DVFS support arm64: dts: renesas: r8a774a1: Add SDHI nodes arm64: dts: renesas: r8a774a1: Add GPIO device nodes arm64: dts: renesas: r8a774a1: Add pinctrl device node arm64: dts: renesas: r8a774a1: Add RWDT node arm64: dts: renesas: r8a774a1: Add Ethernet AVB node arm64: dts: renesas: r8a774a1: Add INTC-EX device node arm64: dts: renesas: r8a774a1: Add SCIF and HSCIF nodes arm64: dts: renesas: r8a774a1: Add SYS-DMAC controller nodes arm64: dts: renesas: Initial r8a774a1 SoC device tree mmc: renesas_sdhi_internal_dmac: set scatter/gather max segment size ravb: Avoid unsupported internal delay mode for R-Car E3/D3 ravb: remove tx buffer addr 4byte alilgnment restriction for R-Car Gen3 spi: sh-msiof: fix deferred probing dmaengine: rcar-dmac: Update copyright information dmaengine: rcar-dmac: set scatter/gather max segment size serial: sh-sci: Fix fallback to PIO in sci_dma_rx_complete() serial: sh-sci: Extract sci_dma_rx_reenable_irq() serial: sh-sci: Extract sci_dma_rx_chan_invalidate() serial: sh-sci: Fix crash in rx_timer_fn() on PIO fallback soc: renesas: rcar-sysc: Fix power domain control after system resume soc: renesas: rcar-sysc: Merge PM Domain registration and linking soc: renesas: rcar-sysc: Remove rcar_sysc_power_{down,up}() helpers clk: renesas: cpg-mssr: Remove error messages on out-of-memory conditions clk: renesas: cpg-mssr: Use genpd of_node instead of local copy gpio: rcar: Pedantic formatting gpio: rcar: select General Output Register to set output states gpio: rcar: reference device instead of platform device thermal: rcar_gen3_thermal: Add r8a774a1 support dt-bindings: dmaengine: usb-dmac: Add binding for r8a774a1 dt-bindings: thermal: rcar-gen3-thermal: Add r8a774a1 support dt-bindings: usb: renesas_usbhs: Add r8a774a1 support dt-bindings: usb-xhci: Add r8a774c0 support dt-bindings: usb-xhci: Add r8a774a1 support dt-bindings: rcar-gen3-phy-usb3: Add r8a774a1 support dt-bindings: can: rcar_can: Add r8a774c0 support dt-bindings: can: rcar_can: Fix RZ/G2 CAN clocks dt-bindings: can: rcar_can: Add r8a774a1 support pinctrl: sh-pfc: sh73a0: Use new macros for non-GPIO pins pinctrl: sh-pfc: sh73a0: Add missing TO pin to tpu4_to3 group pinctrl: sh-pfc: sh73a0: Fix fsic_spdif pin groups pinctrl: sh-pfc: r8a7791: Fix scifb2_data_c pin group pinctrl: sh-pfc: r8a7791: Fix VIN1 versioned groups pinctrl: sh-pfc: r8a7791: Remove bogus marks from vin1_b_data18 group pinctrl: sh-pfc: r8a7791: Remove bogus ctrl marks from qspi_data4_b group pinctrl: sh-pfc: r8a77995: Remove unused PINMUX_IPSR_{MSEL2,PHYS}() pinctrl: sh-pfc: r8a7740: Add missing LCD0 marks to lcd0_data24_1 group pinctrl: sh-pfc: r8a7740: Add missing REF125CK pin to gether_gmii group pinctrl: sh-pfc: r8a7796: Remove placeholder I2C pin data pinctrl: sh-pfc: r8a7796: Use new macros for non-GPIO pins pinctrl: sh-pfc: r8a7796: Add TPU pins, groups and functions pinctrl: sh-pfc: r8a77990: Use new macros for non-GPIO pins pinctrl: sh-pfc: Move PIN_NONE to shared header file pinctrl: sh-pfc: Add PORT_GP_27 helper macro pinctrl: sh-pfc: rcar-gen3: Rename SEL_NDFC to SEL_NDF pinctrl: sh-pfc: rcar-gen3: Rename RTS{0,1,3,4}# pin function definitions pinctrl: sh-pfc: r8a77990: Fix MOD_SEL1 bit30 when using SSI_SCK2 and SSI_WS2 pinctrl: sh-pfc: r8a77990: Fix MOD_SEL1 bit31 when using SIM0_D pinctrl: sh-pfc: r8a77990: Fix MOD_SEL0 bit16 when using NFALE and NFRB_N pinctrl: sh-pfc: rcar-gen3: Rename SEL_ADG_{A,B,C} to SEL_ADG{A,B,C} pinctrl: sh-pfc: rcar-gen3: Remove CC5_OSCOUT pin pinctrl: sh-pfc: rcar-gen3: Remove HDMI CEC pins, groups, and functions pinctrl: sh-pfc: Add missing #include <linux/errno.h> pinctrl: sh-pfc: rcar-gen3: Retain TDSELCTRL register across suspend/resume pinctrl: sh-pfc: r8a77990: Move CANFD pin groups and functions pinctrl: sh-pfc: r8a77990: Rename IOCTRLx registers pinctrl: sh-pfc: r8a7796: Move CANFD pin groups and functions pinctrl: sh-pfc: r8a7796: Deduplicate VIN5 pin definitions pinctrl: sh-pfc: r8a7796: Add I2C{0,3,5} pins, groups and functions pinctrl: sh-pfc: r8a7796: Fix VIN versioned groups pinctrl: sh-pfc: Validate pin tables at runtime pinctrl: sh-pfc: Add check for empty pinmux groups/functions pinctrl: sh-pfc: Mark run-time debug code __init pinctrl: sh-pfc: Correct printk level of group reference warning pinctrl: sh-pfc: Add new non-GPIO helper macros pinctrl: sh-pfc: Add SH_PFC_PIN_CFG_PULL_UP_DOWN shorthand pinctrl: sh-pfc: Rename 2-parameter CPU_ALL_PORT() variant pinctrl: sh-pfc: Improve PINMUX_IPSR_PHYS() documentation pinctrl: sh-pfc: Validate enum IDs for regs with variable-width fields pinctrl: sh-pfc: Validate enum IDs for regs with fixed-width fields pinctrl: sh-pfc: Absorb enum IDs in PINMUX_DATA_REG() macro pinctrl: sh-pfc: Absorb enum IDs in PINMUX_CFG_REG_VAR() macro pinctrl: sh-pfc: Absorb enum IDs in PINMUX_CFG_REG() macro pinctrl: sh-pfc: Validate fixed-size field widths at build time pinctrl: sh-pfc: Make pinmux_cfg_reg.var_field_width[] variable-length pinctrl: sh-pfc: Validate pins/marks in pin groups at build time pinctrl: sh-pfc: Add physical pin multiplexing helper macros pinctrl: sh-pfc: Validate pinmux tables at runtime when debugging pinctrl: sh-pfc: Print actual field width for variable-width fields CIP: Bump version suffix to -cip9 after merge from stable staging: m57621-mmc: delete driver from the tree. CIP: Bump version suffix to -cip8 after merge from stable Update to run all CIP arm, arm64 and x86 configs Update CI to use the latest linux-cip-ci containers CIP: Bump version suffix to -cip7 after merge from stable arm64: dts: renesas: r8a774c0: sort subnodes of the soc node arm64: dts: renesas: r8a774c0: Remove invalid compatible value for CSI40 arm64: dts: renesas: r8a774c0: Fix SCIF5 DMA channels arm64: dts: renesas: r8a774c0: Enable DMA for SCIF2 arm64: dts: renesas: r8a774c0-cat874: Add RWDT support arm64: dts: renesas: r8a774c0-cat874: Add LEDs support arm64: dts: renesas: r8a774c0-cat874: add RTC support arm64: defconfig: enable RX-8581 config option rtc: rx8581: Add support for Epson rx8571 RTC dt-bindings: rtc: add rx8571 compatible rtc: nvmem: remove nvmem from struct rtc_device rtc: nvmem: use devm_nvmem_register() arm64: dts: renesas: cat874: Add USB-HOST support phy: renesas: rcar-gen3-usb2: enable/disable independent irqs phy: renesas: rcar-gen3-usb2: Use pdev's device pointer on dev_vdbg() phy: rcar-gen3-usb2: Add support for r8a77470 phy: renesas: rcar-gen3-usb2: follow the hardware manual procedure phy: renesas: rcar-gen3-usb2: add is_otg_channel to use "role" sysfs phy: renesas: rcar-gen3-usb2: change a condition "dr_mode" phy: renesas: rcar-gen3-usb2: add conditions for uses_otg_pins == false phy: renesas: rcar-gen3-usb2: unify OBINTEN handling phy: renesas: rcar-gen3-usb2: Check a property to use otg pins phy: renesas: rcar-gen3-usb2: Rename has_otg_pins to uses_otg_pins phy: renesas: rcar-gen3-usb2: fix vbus_ctrl for role sysfs arm64: dts: renesas: cat875: Add CAN support arm64: dts: renesas: r8a774c0: Add clkp2 clock to CAN nodes arm64: dts: renesas: r8a774c0: Add CAN nodes arm64: dts: renesas: r8a774c0: Fix cpu nodes style arm64: dts: renesas: r8a774c0: Add OPPs table for cpu devices clk: renesas: rcar-gen3: Remove unused variable clk: renesas: rcar-gen3: Fix cpg_sd_clock_round_rate() return value clk: renesas: rcar-gen3: Correct parent clock of Audio-DMAC clk: renesas: rcar-gen3: Correct parent clock of SYS-DMAC clk: renesas: rcar-gen3: Correct parent clock of HS-USB clk: renesas: rcar-gen3: Correct parent clock of EHCI/OHCI clk: renesas: r8a774c0: Add Z2 clock clk: renesas: rcar-gen3: Support Z and Z2 clocks with high frequency parents math64: New DIV64_U64_ROUND_CLOSEST helper clk: renesas: rcar-gen3: Remove CLK_TYPE_GEN3_Z2 clk: renesas: rcar-gen3: Parameterise Z and Z2 clock offset clk: renesas: rcar-gen3: Parameterise Z and Z2 clock fixed divisor clk: renesas: rcar-gen3: Pass name/offset to cpg_sd_clk_register() clk: renesas: r8a774a1: Fix LAST_DT_CORE_CLK clk: renesas: rcar-gen3: Add spinlock clk: renesas: rcar-gen3: Factor out cpg_reg_modify() clk: renesas: r8a774a1: Add missing CANFD clock clk: renesas: Remove usage of CLK_IS_BASIC clk: renesas: rcar-gen3: Add HS400 quirk for SD clock clk: renesas: rcar-gen3: Add documentation for SD clocks clk: renesas: rcar-gen3: Set state when registering SD clocks clk: renesas: r8a774a1: Add CPEX clock CIP: Bump version suffix to -cip6 after merge from stable Add gitlab-ci.yaml CIP: Bump version suffix to -cip5 after merge from stable CIP: Bump version suffix to -cip4 after merge from stable CIP: Bump version suffix to -cip3 after merge from stable dt-bindings: Add vendor prefix for Silicon Linux. CIP: Bump version suffix to -cip2 after Renesas patches arm64: defconfig: Enable R-Car thermal driver arm64: dts: renesas: r8a774c0: Add thermal support dt-bindings: thermal: rcar-thermal: add R8A774C0 support thermal: rcar_thermal: add R8A774C0 support arm64: dts: renesas: r8a774c0: Connect RZ/G2E Audio-DMAC to IPMMU arm64: dts: renesas: r8a774c0: Connect RZ/G2E AVB to IPMMU arm64: dts: renesas: r8a774c0: Connect RZ/G2E SYS-DMAC to IPMMU arm64: dts: renesas: r8a774c0: Add PWM support dt-bindings: pwm: rcar: Add r8a774c0 support dt-bindings: pwm: rcar: Add r8a774a1 support arm64: dts: renesas: r8a774c0: Add audio support ASoC: rsnd: Add r8a774c0 support ASoC: rsnd: Add r8a774a1 support arm64: dts: renesas: r8a774c0: Add VIN and CSI-2 device nodes media: dt-bindings: rcar-csi2: Add r8a774c0 media: dt-bindings: rcar-vin: Add R8A774C0 support media: rcar-csi2: Add support for RZ/G2E media: rcar-csi2: Fix PHTW table values for E3/V3M media: rcar-csi2: Handle per-SoC number of channels media: rcar: rcar-csi2: Update V3M/E3 PHTW tables media: rcar-csi2: Add R8A77990 support media: rcar-vin: Add support for RZ/G2E media: rcar-vin: Add support for R-Car R8A77990 arm64: dts: renesas: r8a774c0: Add IPMMU device nodes dt-bindings: iommu: ipmmu-vmsa: Add r8a774c0 support dt-bindings: iommu: ipmmu-vmsa: Add r8a774a1 support iommu/ipmmu-vmsa: Hook up r8a774c0 DT matching code iommu/ipmmu-vmsa: Modify ipmmu_slave_whitelist() to check SoC revisions iommu/ipmmu-vmsa: Hook up R8A774A1 DT maching code arm64: dts: renesas: r8a774c0: Add USB3.0 device nodes usb: gadget: udc: renesas_usb3: Add bindings for r8a774c0 usb: gadget: udc: renesas_usb3: Add r8a774a1 support usb: gadget: udc: renesas_usb3: add support for r8a774c0 usb: gadget: udc: renesas_usb3: add a safety connection way for forced_b_device usb: gadget: udc: renesas_usb3: add support for r8a77990 arm64: dts: renesas: r8a774c0: Add USB-DMAC and HSUSB device nodes dt-bindings: dmaengine: usb-dmac: Add binding for r8a774c0 dt-bindings: usb: renesas_usbhs: Add r8a774c0 support dt-bindings: usb: renesas_usbhs: add clock-names property Revert "usb: renesas_usbhs: add extcon notifier to set mode for non-otg channel" usb: renesas_usbhs: Add multiple clocks management usb: renesas_usbhs: Add reset_control usb: renesas_usbhs: add support for RZ/G2E arm64: dts: renesas: r8a774c0: Add USB2.0 phy and host device nodes dt-bindings: rcar-gen3-phy-usb2: Add r8a774c0 support dt-bindings: rcar-gen3-phy-usb2: Add r8a774a1 support arm64: renesas: Enable GPIOLIB to allow GPIO driver selection arm64: enable CMT/TMU support for Renesas SoC clocksource/drivers/sh_tmu: Convert to SPDX identifiers arm64: dts: renesas: r8a774c0: Add TMU device nodes dt-bindings: timer: renesas: tmu: Document r8a774c0 bindings clk: renesas: r8a774c0: Fix LAST_DT_CORE_CLK clk: renesas: r8a774c0: Add TMU clock clk: renesas: r8a774c0: Correct parent clock of DU clk: renesas: r8a774c0: Add missing CANFD clock arm64: dts: renesas: r8a774c0: Add CMT device nodes dt-bindings: timer: renesas, cmt: Document r8a774c0 CMT support dt-bindings: timer: renesas, cmt: Document r8a774a1 CMT support clocksource/drivers/sh_cmt: Add R-Car gen3 support dt-bindings: timer: renesas: cmt: document R-Car gen3 support clocksource/drivers/sh_cmt: Properly line-wrap sh_cmt_of_table[] initializer clocksource/drivers/sh_cmt: Fix clocksource width for 32-bit machines clocksource/drivers/sh_cmt: Fixup for 64-bit machines clocksource/drivers/sh_cmt: Convert to SPDX identifiers pinctrl: sh-pfc: r8a77990: Add DRIF pins, groups and functions pinctrl: sh-pfc: r8a77990: Add TMU pins, groups and functions pinctrl: sh-pfc: r8a77990: GP6_9 does not have pull-down capability pinctrl: sh-pfc: r8a77990: Fix MOD_SEL bit numbering pinctrl: sh-pfc: r8a77990: Fix MOD_SEL0 bit2 when using RX2, TX2 and SCK2 pinctrl: sh-pfc: r8a77990: Fix MOD_SEL0 bit3 when using TX0 pinctrl: sh-pfc: r8a77990: Fix MOD_SEL0 SEL_I2C1 field width pinctrl: sh-pfc: r8a77990: Fix IOCTRL reg state after s2ram on R-Car E3 pinctrl: sh-pfc: r8a77990: Add CAN FD pins, groups and functions pinctrl: sh-pfc: r8a77990: Add CAN pins, groups and functions arm64: dts: renesas: cat875: Enable PCIe support arm64: dts: renesas: r8a774c0-cat874: Add pciec0 support arm64: dts: renesas: r8a774c0: Add PCIe device node dt-bindings: PCI: rcar: Add device tree support for r8a774c0 arm64: dts: renesas: r8a774c0: Add MSIOF nodes spi: sh-msiof: Add r8a774c0 support spi: sh-msiof: Add r8a774a1 support arm64: dts: renesas: r8a774c0: Add I2C and IIC-DVFS support dt-bindings: i2c: rcar: Add r8a774c0 support i2c: sh_mobile: Add support for r8a774c0 (RZ/G2E) i2c: sh_mobile: add support for r8a77990 (R-Car E3) dt-bindings: i2c: sh_mobile: Add r8a774c0 support i2c: sh_mobile: document support for r8a77990 (R-Car E3) pinctrl: sh-pfc: r8a77990: Add HSCIF pins, groups, and functions pinctrl: sh-pfc: r8a77990: Add VIN[4|5] groups/functions pinctrl: sh-pfc: Add optional arg to VIN_DATA_PIN_GROUP pinctrl: sh-pfc: Reduce kernel size for narrow VIN channels arm64: dts: renesas: r8a774c0: Add watchdog support dt-bindings: watchdog: renesas-wdt: Document r8a774c0 support arm64: dts: renesas: cat875: Add ethernet support arm64: dts: renesas: r8a774c0: Add Ethernet AVB node dt-bindings: net: ravb: Add support for r8a774c0 SoC arm64: dts: renesas: r8a774c0-cat874: Add uSD support arm64: dts: renesas: r8a774c0: Add SDHI nodes mmc: renesas_sdhi_internal_dmac: Whitelist r8a774c0 dt-bindings: mmc: renesas_sdhi: Add r8a774c0 support dt-bindings: mmc: renesas_sdhi: Add r8a77470 support mmc: renesas_sdhi_internal_dmac: Whitelist r8a774a1 mmc: renesas_sdhi: Add r8a774a1 support pinctrl: sh-pfc: r8a77990: Add voltage switch operations for SDHI pinctrl: sh-pfc: r8a77990: Add SDHI pins, groups and functions pinctrl: sh-pfc: r8a77990: Add Audio SSI pins, groups and functions pinctrl: sh-pfc: r8a77990: Add Audio clock pins, groups and functions arm64: dts: renesas: r8a774c0-cat874: Add pincontrol support to scif2 arm64: dts: renesas: r8a774c0: Add GPIO device nodes dt-bindings: gpio: rcar: Add r8a774c0 (RZ/G2E) support dt-bindings: gpio: rcar: Add r8a774a1 (RZ/G2M) support arm64: dts: renesas: r8a774c0: Add PFC support arm64: dts: renesas: r8a774c0: Add INTC-EX device node pinctrl: sh-pfc: r8a77990: Add INTC-EX pins, groups and function pinctrl: sh-pfc: rcar: Rename automotive-only arrays to automotive arm64: dts: renesas: r8a774c0: Add secondary CA53 CPU core clk: renesas: cpg-mssr: Add r8a774c0 support dt-bindings: clock: renesas: cpg-mssr: Document r8a774c0 clk: renesas: cpg-mssr: Add r8a774a1 support clk: renesas: rcar-gen3: Add support for mode pin clock selection clk: renesas: rcar-gen3: Add support for RCKSEL clock selection clk: renesas: cpg-mssr: Add support for fixed rate clocks clk: renesas: rcar-gen3: Add support for OSC EXTAL predivider clk: renesas: Add r8a774a1 CPG Core Clock Definitions clk: renesas: Add r8a774c0 CPG Core Clock Definitions arm64: dts: renesas: r8a774c0: Add SCIF and HSCIF nodes dt-bindings: serial: sh-sci: Document r8a774c0 bindings dt-bindings: serial: sh-sci: Document r8a774a1 bindings arm64: dts: renesas: r8a774c0: Add SYS-DMAC controller nodes dmaengine: rcar-dmac: Document R8A774C0 bindings dmaengine: rcar-dmac: Document R8A774A1 bindings arm64: dts: renesas: Add Si-Linux EK874 board support arm64: dts: renesas: Add Si-Linux CAT874 board support arm64: dts: renesas: Initial device tree for r8a774c0 dt-bindings: arm: Add si-linux cat87[45] boards ARM: dts: socfpga: Rename socfpga_cyclone5_de0_{sockit, nano_soc} dt-bindings: irqchip: renesas-irqc: Document r8a774c0 support soc: renesas: rcar-rst: Add support for RZ/G2E dt-bindings: reset: rcar-rst: Document r8a774c0 rst soc: renesas: rcar-rst: Add support for RZ/G2M soc: renesas: rcar-sysc: Add r8a774c0 support dt-bindings: power: rcar-sysc: Document r8a774c0 sysc soc: renesas: rcar-sysc: Add r8a774a1 support dt-bindings: power: Add r8a774c0 SYSC power domain definitions dt-bindings: power: Add r8a774a1 SYSC power domain definitions arm64: defconfig: enable R8A774C0 SoC arm64: defconfig: enable R8A774A1 SoC arm64: Add Renesas R8A774C0 support arm64: Add Renesas R8A774A1 support soc: renesas: Identify RZ/G2E soc: renesas: Identify RZ/G2M dt-bindings: arm: Fix RZ/G2E part number dt-bindings: arm: Document RZ/G2E SoC DT bindings dt-bindings: arm: Document RZ/G2M SoC DT bindings pinctrl: sh-pfc: r8a77990: Add R8A774C0 PFC support pinctrl: sh-pfc: r8a77990: Add MSIOF pins, groups and functions pinctrl: sh-pfc: r8a77990: Add DU pins, groups and function pinctrl: sh-pfc: r8a77990: Add PWM pins, groups and functions dt-bindings: pinctrl: sh-pfc: Document r8a774c0 PFC support pinctrl: sh-pfc: r8a7796: Add R8A774A1 PFC support dt-bindings: pinctrl: sh-pfc: Document r8a774a1 PFC support CIP: Add a number to the version suffix Conflicts: Documentation/devicetree/bindings/i2c/i2c-rcar.txt Documentation/devicetree/bindings/i2c/i2c-sh_mobile.txt Documentation/devicetree/bindings/usb/renesas_usb3.txt Documentation/devicetree/bindings/usb/renesas_usbhs.txt Documentation/devicetree/bindings/watchdog/renesas-wdt.txt arch/arm64/boot/dts/vendor/bindings/display/panel/advantech,idk-1110wr.txt arch/arm64/boot/dts/vendor/bindings/display/panel/advantech,idk-2121wr.yaml arch/arm64/boot/dts/vendor/bindings/i2c/i2c-rcar.txt arch/arm64/boot/dts/vendor/bindings/i2c/i2c-sh_mobile.txt arch/arm64/boot/dts/vendor/bindings/i2c/renesas,i2c.txt arch/arm64/boot/dts/vendor/bindings/i2c/renesas,iic.txt arch/arm64/boot/dts/vendor/bindings/media/i2c/imx219.yaml arch/arm64/boot/dts/vendor/bindings/memory-controllers/renesas,rpc-if.yaml arch/arm64/boot/dts/vendor/bindings/pci/rcar-pci-ep.yaml arch/arm64/boot/dts/vendor/bindings/usb/renesas,usb3-peri.txt arch/arm64/boot/dts/vendor/bindings/usb/renesas,usbhs.txt arch/arm64/boot/dts/vendor/bindings/usb/renesas_usb3.txt arch/arm64/boot/dts/vendor/bindings/usb/renesas_usbhs.txt arch/arm64/boot/dts/vendor/bindings/usb/ti,hd3ss3220.txt arch/arm64/boot/dts/vendor/bindings/watchdog/renesas,wdt.txt arch/arm64/boot/dts/vendor/bindings/watchdog/renesas-wdt.txt drivers/clk/qcom/clk-alpha-pll.c drivers/hid/hid-ids.h drivers/irqchip/irq-gic-v3.c drivers/media/platform/qcom/venus/hfi_parser.c drivers/mmc/host/sdhci.h drivers/platform/x86/intel_cht_int33fe.c drivers/slimbus/messaging.c drivers/usb/dwc3/core.c drivers/usb/dwc3/gadget.c drivers/usb/gadget/function/f_fs.c drivers/usb/typec/mux.c fs/ext4/dir.c kernel/time/posix-timers.c mm/oom_kill.c Change-Id: I6ccf7ce22c6636030db6245952c67bfa54aef5a4	2025-09-02 08:35:50 +00:00
Arnd Bergmann	81128875b4	xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals ... commit 130eac4170859fb368681e00d390f20f44bbf27b upstream. A recent patch caused an unused-function warning in builds with CONFIG_PM disabled, after the function became marked 'static': drivers/usb/host/xhci-pci.c:91:13: error: 'xhci_msix_sync_irqs' defined but not used [-Werror=unused-function] 91 | static void xhci_msix_sync_irqs(struct xhci_hcd *xhci) | ^~~~~~~~~~~~~~~~~~~ This could be solved by adding another #ifdef, but as there is a trend towards removing CONFIG_PM checks in favor of helper macros, do the same conversion here and use pm_ptr() to get either a function pointer or NULL but avoid the warning. As the hidden functions reference some other symbols, make sure those are visible at compile time, at the minimal cost of a few extra bytes for 'struct usb_device'. Fixes: 9abe15d55dcc ("xhci: Move xhci MSI sync function to to xhci-pci") Signed-off-by: Arnd Bergmann <arnd@arndb.de> Link: https://lore.kernel.org/r/20230328131114.1296430-1-arnd@kernel.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Ulrich Hecht <uli@kernel.org>	2025-03-11 08:35:00 +01:00
Michael Bestas	2c5e7c6143	Merge tag 'ASB-2023-07-05_4.19-stable' of https://android.googlesource.com/kernel/common into android13-4.19-kona ... https://source.android.com/docs/security/bulletin/2023-07-01 CVE-2022-42703 CVE-2023-21255 CVE-2023-25012 * tag 'ASB-2023-07-05_4.19-stable' of https://android.googlesource.com/kernel/common: Linux 4.19.288 i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl drm/exynos: vidi: fix a wrong error return ASoC: nau8824: Add quirk to active-high jack-detect s390/cio: unregister device when the only path is gone usb: gadget: udc: fix NULL dereference in remove() nfcsim.c: Fix error checking for debugfs_create_dir media: cec: core: don't set last_initiator if tx in progress arm64: Add missing Set/Way CMO encodings HID: wacom: Add error check to wacom_parse_and_register() scsi: target: iscsi: Prevent login threads from racing between each other sch_netem: acquire qdisc lock in netem_change() netfilter: nfnetlink_osf: fix module autoload netfilter: nf_tables: disallow element updates of bound anonymous sets be2net: Extend xmit workaround to BE3 chip mmc: usdhi60rol0: fix deferred probing mmc: sdhci-acpi: fix deferred probing mmc: omap_hsmmc: fix deferred probing mmc: omap: fix deferred probing mmc: mvsdio: fix deferred probing mmc: mvsdio: convert to devm_platform_ioremap_resource mmc: mtk-sd: fix deferred probing net: qca_spi: Avoid high load if QCA7000 is not available xfrm: Linearize the skb after offloading if needed. ieee802154: hwsim: Fix possible memory leaks rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer() nilfs2: prevent general protection fault in nilfs_clear_dirty_page() cgroup: Do not corrupt task iteration when rebinding subsystem PCI: hv: Fix a race condition bug in hv_pci_query_relations() Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs nilfs2: fix buffer corruption due to concurrent device reads ipmi: move message error checking to avoid deadlock ipmi: Make the smi watcher be disabled immediately when not needed x86/purgatory: remove PGO flags nilfs2: reject devices with insufficient block count serial: lantiq: add missing interrupt ack serial: lantiq: Do not swap register read/writes serial: lantiq: Use readl/writel instead of ltq_r32/ltq_w32 serial: lantiq: Change ltq_w32_mask to asc_update_bits Linux 4.19.287 mmc: block: ensure error propagation for non-blk powerpc: Fix defconfig choice logic when cross compiling drm/nouveau/kms: Fix NULL pointer dereference in nouveau_connector_detect_depth neighbour: delete neigh_lookup_nodev as not used net: Remove unused inline function dst_hold_and_use() neighbour: Remove unused inline function neigh_key_eq16() selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET net: tipc: resize nlattr array to correct size net: lapbether: only support ethernet devices drm/nouveau: add nv_encoder pointer check for NULL drm/nouveau/kms: Don't change EDID when it hasn't actually changed drm/nouveau/dp: check for NULL nv_connector->native_mode igb: fix nvm.ops.read() error handling sctp: fix an error code in sctp_sf_eat_auth() IB/isert: Fix incorrect release of isert connection IB/isert: Fix possible list corruption in CMA handler IB/isert: Fix dead lock in ib_isert IB/uverbs: Fix to consider event queue closing also upon non-blocking mode RDMA/rxe: Fix the use-before-initialization error of resp_pkts RDMA/rxe: Removed unused name from rxe_task struct RDMA/rxe: Remove the unused variable obj ping6: Fix send to link-local addresses with VRF. netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM usb: gadget: f_ncm: Fix NTP-32 support usb: gadget: f_ncm: Add OS descriptor support usb: dwc3: gadget: Reset num TRBs before giving back the request USB: serial: option: add Quectel EM061KGL series Remove DECnet support from kernel net: usb: qmi_wwan: add support for Compal RXM-G1 RDMA/uverbs: Restrict usage of privileged QKEYs nouveau: fix client work fence deletion race powerpc/purgatory: remove PGO flags kexec: support purgatories with .text.hot sections nilfs2: fix possible out-of-bounds segment allocation in resize ioctl nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() nios2: dts: Fix tse_mac "max-frame-size" property ocfs2: check new file size on fallocate call ocfs2: fix use-after-free when unmounting read-only filesystem xen/blkfront: Only check REQ_FUA for writes mips: Move initrd_start check after initrd address sanitisation. MIPS: Alchemy: fix dbdma2 parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu() power: supply: Fix logic checking if system is running from battery irqchip/meson-gpio: Mark OF related data as maybe unused regulator: Fix error checking for debugfs_create_dir power: supply: Ratelimit no data debug output ARM: dts: vexpress: add missing cache properties power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() power: supply: ab8500: Fix external_power_changed race Revert "tcp: deny tcp_disconnect() when threads are waiting" Revert "tcp: deny tcp_disconnect() when threads are waiting" ANDROID: GKI: update ABI xml for incrementalfs.ko Linux 4.19.286 Revert "staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE" btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() btrfs: check return value of btrfs_commit_transaction in relocation ext4: only check dquot_initialize_needed() when debugging i2c: sprd: Delete i2c adapter in .remove's error path pinctrl: meson-axg: add missing GPIOA_18 gpio group Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk ceph: fix use-after-free bug for inodes when flushing capsnaps drm/amdgpu: fix xclk freq on CHIP_STONEY Input: psmouse - fix OOB access in Elantech protocol Input: xpad - delete a Razer DeathAdder mouse VID/PID entry batman-adv: Broken sync while rescheduling delayed work lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() net: sched: fix possible refcount leak in tc_chain_tmplt_add() net: sched: move rtm_tca_policy declaration to include file rfs: annotate lockless accesses to RFS sock flow table rfs: annotate lockless accesses to sk->sk_rxhash Bluetooth: L2CAP: Add missing checks for invalid DCID Bluetooth: Fix l2cap_disconnect_req deadlock net: dsa: lan9303: allow vid != 0 in port_fdb_{add|del} methods spi: qup: Request DMA before enabling clocks i40e: fix build warnings in i40e_alloc.h i40iw: fix build warning in i40iw_manage_apbvt() UPSTREAM: net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize UPSTREAM: cdc_ncm: Fix the build warning UPSTREAM: cdc_ncm: Implement the 32-bit version of NCM Transfer Block Revert "tcp: reduce POLLOUT events caused by TCP_NOTSENT_LOWAT" Revert "tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit" Revert "tcp: factor out __tcp_close() helper" Revert "tcp: add annotations around sk->sk_shutdown accesses" ANDROID: fix abi break in 4.19.284 for cpuhotplug.h UPSTREAM: mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() UPSTREAM: mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() Linux 4.19.285 wifi: rtlwifi: 8192de: correct checking of IQK reload scsi: dpt_i2o: Do not process completions with invalid addresses scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD) regmap: Account for register length when chunking fbcon: Fix null-ptr-deref in soft_cursor ext4: add lockdep annotations for i_data_sem for ea_inode's selinux: don't use make's grouped targets feature yet tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK mmc: vub300: fix invalid response handling rsi: Remove unnecessary boolean condition regulator: da905{2,5}: Remove unnecessary array check hwmon: (scmi) Remove redundant pointer check wifi: rtlwifi: remove always-true condition pointed out by GCC 12 lib/dynamic_debug.c: use address-of operator on section symbols kernel/extable.c: use address-of operator on section symbols eth: sun: cassini: remove dead code gcc-12: disable '-Wdangling-pointer' warning for now ACPI: thermal: drop an always true check x86/boot: Wrap literal addresses in absolute_pointer() ata: libata-scsi: Use correct device no in ata_find_dev() scsi: stex: Fix gcc 13 warnings usb: gadget: f_fs: Add unbind event before functionfs_unbind net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 iio: dac: build ad5758 driver when AD5758 is selected iio: dac: mcp4725: Fix i2c_master_send() return value handling HID: wacom: avoid integer overflow in wacom_intuos_inout() HID: google: add jewel USB id iio: adc: mxs-lradc: fix the order of two cleanup operations mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() atm: hide unused procfs functions ALSA: oss: avoid missing-prototype warnings netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT wifi: b43: fix incorrect __packed annotation scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed arm64/mm: mark private VM_FAULT_X defines as vm_fault_t ARM: dts: stm32: add pin map for CAN controller on stm32f7 wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() media: dvb-core: Fix use-after-free due on race condition at dvb_net media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() media: dvb_ca_en50221: fix a size write bug media: netup_unidvb: fix irq init by register it at the end of probe media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() media: dvb_demux: fix a bug for the continuity counter ASoC: ssm2602: Add workaround for playback distortions xfrm: Check if_id in inbound policy/secpath match ASoC: dwc: limit the number of overrun messages nbd: Fix debugfs_create_dir error checking fbdev: stifb: Fix info entry in sti_struct on error path fbdev: modedb: Add 1920x1080 at 60 Hz video mode media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE ARM: 9295/1: unwind:fix unwind abort for uleb128 case mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() watchdog: menz069_wdt: fix watchdog initialisation net: dsa: mv88e6xxx: Increase wait after reset deactivation net/sched: flower: fix possible OOB write in fl_set_geneve_opt() udp6: Fix race condition in udp6_sendmsg & connect net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report ocfs2/dlm: move BITS_TO_BYTES() to bitops.h for wider use net: sched: fix NULL pointer dereference in mq_attach net/sched: Prohibit regrafting ingress or clsact Qdiscs net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs net/sched: sch_clsact: Only create under TC_H_CLSACT net/sched: sch_ingress: Only create under TC_H_INGRESS tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set tcp: deny tcp_disconnect() when threads are waiting af_packet: do not use READ_ONCE() in packet_bind() amd-xgbe: fix the false linkup in xgbe_phy_status af_packet: Fix data-races of pkt_sk(sk)->num. netrom: fix info-leak in nr_write_internal() net/mlx5: fw_tracer, Fix event handling dmaengine: pl330: rename _start to prevent build error netfilter: ctnetlink: Support offloaded conntrack entry deletion ipv{4,6}/raw: fix output xfrm lookup wrt protocol bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() cdc_ncm: Fix the build warning power: supply: bq24190: Call power_supply_changed() after updating input current power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier() power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize cdc_ncm: Implement the 32-bit version of NCM Transfer Block UPSTREAM: efi: rt-wrapper: Add missing include BACKPORT: arm64: efi: Execute runtime services from a dedicated stack Revert "uapi/linux/const.h: prefer ISO-friendly __typeof__" Linux 4.19.284 drivers: depend on HAS_IOMEM for devm_platform_ioremap_resource() 3c589_cs: Fix an error handling path in tc589_probe() forcedeth: Fix an error handling path in nv_probe() ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg x86/show_trace_log_lvl: Ensure stack pointer is aligned, again xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() power: supply: sbs-charger: Fix INHIBITED bit for Status reg power: supply: bq27xxx: Fix poll_interval handling and races on remove power: supply: bq27xxx: Fix I2C IRQ race on remove power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition power: supply: leds: Fix blink to LED on transition ipv6: Fix out-of-bounds access in ipv6_find_tlv() bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields net: fix skb leak in __skb_tstamp_tx() media: radio-shark: Add endpoint checks USB: sisusbvga: Add endpoint checks USB: core: Add routines for endpoint checks in old drivers udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). ALSA: hda/realtek - Fix inverted bass GPIO pin on Acer 8951G ALSA: hda/realtek - Fixed one of HP ALC671 platform Headset Mic supported parisc: Fix flush_dcache_page() for usage from irq context selftests/memfd: Fix unknown type name build failure x86/mm: Avoid incomplete Global INVLPG flushes btrfs: use nofs when cleaning up aborted transactions parisc: Allow to reboot machine after system halt m68k: Move signal frame following exception on 68020/030 ALSA: hda/ca0132: add quirk for EVGA X299 DARK spi: fsl-cpm: Use 16 bit mode for large transfers with even size spi: fsl-spi: Re-organise transfer bits_per_word adaptation spi: spi-fsl-spi: automatically adapt bits-per-word in cpu mode s390/qdio: fix do_sqbs() inline assembly constraint s390/qdio: get rid of register asm vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF vc_screen: rewrite vcs_size to accept vc, not inode usb: gadget: u_ether: Fix host MAC address case usb: gadget: u_ether: Convert prints to device prints lib/string_helpers: Introduce string_upper() and string_lower() helpers ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 ALSA: hda/realtek - ALC897 headset MIC no sound ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW ALSA: hda/realtek - The front Mic on a HP machine doesn't work ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 ALSA: hda/realtek - Add Headset Mic supported for HP cPC ALSA: hda/realtek - More constifications Add Acer Aspire Ethos 8951G model quirk HID: wacom: Force pen out of prox if no events have been received in a while netfilter: nf_tables: do not allow RULE_ID to refer to another chain netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag netfilter: nf_tables: stricter validation of element data netfilter: nf_tables: allow up to 64 bytes in the set element data area netfilter: nf_tables: add nft_setelem_parse_key() netfilter: nf_tables: validate registers coming from userspace. netfilter: nftables: statify nft_parse_register() netfilter: nftables: add nft_parse_register_store() and use it netfilter: nftables: add nft_parse_register_load() and use it nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() tpm/tpm_tis: Disable interrupts for more Lenovo devices ceph: force updating the msg pointer in non-split case serial: Add support for Advantech PCI-1611U card statfs: enforce statfs[64] structure initialization ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table ALSA: hda: Fix Oops by 9.1 surround channel names usb: typec: altmodes/displayport: fix pin_assignment_show usb-storage: fix deadlock when a scsi command timeouts more than once vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() igb: fix bit_shift to be in [1..8] range cassini: Fix a memory leak in the error handling path of cas_init_one() net: bcmgenet: Restore phy_stop() depending upon suspend/close net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() drm/exynos: fix g2d_open/close helper function definitions media: netup_unidvb: fix use-after-free at del_timer() erspan: get the proto with the md version for collect_md ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode ip6_gre: Make o_seqno start from 0 in native mode ip6_gre: Fix skb_under_panic in __gre6_xmit() serial: arc_uart: fix of_iomap leak in `arc_serial_probe` drivers: provide devm_platform_ioremap_resource() vsock: avoid to close connected socket after the timeout net: fec: Better handle pm_runtime_get() failing in .remove() af_key: Reject optional tunnel/BEET mode templates in outbound policies cpupower: Make TSC read per CPU for Mperf monitor btrfs: fix space cache inconsistency after error loading it from disk btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid mfd: dln2: Fix memory leak in dln2_probe() phy: st: miphy28lp: use _poll_timeout functions for waits Input: xpad - add constants for GIP interface numbers clk: tegra20: fix gcc-7 constant overflow warning recordmcount: Fix memory leaks in the uwrite function sched: Fix KCSAN noinstr violation mcb-pci: Reallocate memory region to avoid memory overlapping serial: 8250: Reinit port->pm on port specific driver unbind usb: typec: tcpm: fix multiple times discover svids error HID: wacom: generic: Set battery quirk only when we see battery data spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 HID: logitech-hidpp: Reconcile USB and Unifying serials HID: logitech-hidpp: Don't use the USB serial for USB devices staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace f2fs: fix to drop all dirty pages during umount() if cp_error is set ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() ext4: set goal start correctly in ext4_mb_normalize_request gfs2: Fix inode height consistency check scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition lib: cpu_rmap: Avoid use after free on rmap->obj array entries net: Catch invalid index in XPS mapping net: pasemi: Fix return type of pasemi_mac_start_tx() ext2: Check block size validity during mount wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects ACPICA: Avoid undefined behavior: applying zero offset to null pointer drm/tegra: Avoid potential 32-bit integer overflow ACPI: EC: Fix oops when removing custom query handlers firmware: arm_sdei: Fix sleep from invalid context BUG memstick: r592: Fix UAF bug in r592_remove due to race condition regmap: cache: Return error in cache sync operations for REGCACHE_NONE drm/amd/display: Use DC_LOG_DC in the trasform pixel function fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() af_unix: Fix data races around sk->sk_shutdown. af_unix: Fix a data race of sk->sk_receive_queue->qlen. net: datagram: fix data-races in datagram_poll() ipvlan:Fix out-of-bounds caused by unclear skb->cb tcp: add annotations around sk->sk_shutdown accesses tcp: factor out __tcp_close() helper tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit tcp: reduce POLLOUT events caused by TCP_NOTSENT_LOWAT net: annotate sk->sk_err write from do_recvmmsg() netlink: annotate accesses to nlk->cb_running net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). Linux 4.19.283 mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors drbd: correctly submit flush bio on barrier serial: 8250: Fix serial8250_tx_empty() race with DMA Tx tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH ext4: fix invalid free tracking in ext4_xattr_move_to_block() ext4: remove a BUG_ON in ext4_mb_release_group_pa() ext4: bail out of ext4_xattr_ibody_get() fails for any reason ext4: add bounds checking in get_max_inline_xattr_value_size() ext4: improve error recovery code paths in __ext4_remount() ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum ext4: fix WARNING in mb_find_extent HID: wacom: Set a default resolution for older tablets drm/panel: otm8009a: Set backlight parent to panel device ARM: dts: s5pv210: correct MIPI CSIS clock name ARM: dts: exynos: fix WM8960 clock name in Itop Elite sh: nmi_debug: fix return value of __setup handler sh: init: use OF_EARLY_FLATTREE for early init sh: math-emu: fix macro redefined warning platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i cifs: fix pcchunk length type in smb2_copychunk_range btrfs: print-tree: parent bytenr must be aligned to sector size btrfs: fix btrfs_prev_leaf() to not return the same key twice perf symbols: Fix return incorrect build_id size in elf_read_build_id() perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() perf vendor events power9: Remove UTF-8 characters from JSON files virtio_net: suppress cpu stall when free_unused_bufs virtio_net: split free_unused_bufs() ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` drm/amdgpu: add a missing lock for AMDGPU_SCHED drm/amdgpu: Add command to override the context priority. drm/amdgpu: Put enable gfx off feature to a delay thread drm/amdgpu: Add amdgpu_gfx_off_ctrl function af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). rxrpc: Fix hard call timeout units net/sched: act_mirred: Add carrier check writeback: fix call of incorrect macro net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu net: dsa: mv88e6xxx: Add missing watchdog ops for 6320 family sit: update dev->needed_headroom in ipip6_tunnel_bind_dev() relayfs: fix out-of-bounds access in relay_file_read kernel/relay.c: fix read_pos error when multiple readers dm verity: fix error handling for check_at_most_once on FEC dm verity: skip redundant verity_handle_err() on I/O errors ipmi: fix SSIF not responding under certain cond. ipmi_ssif: Rename idle state and check ipmi: Fix how the lower layers are told to watch for messages ipmi: Fix SSIF flag requests tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem nohz: Add TICK_DEP_BIT_RCU netfilter: nf_tables: deactivate anonymous set from preparation phase debugobject: Ensure pool refill (again) perf auxtrace: Fix address filter entire kernel size dm ioctl: fix nested locking in table_clear() to remove deadlock concern dm flakey: fix a crash with invalid table line dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path s390/dasd: fix hanging blockdevice after request requeue btrfs: scrub: reject unsupported scrub flags clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent wifi: rtl8xxxu: RTL8192EU always needs full init md/raid10: fix null-ptr-deref in raid10_sync_request nilfs2: fix infinite loop in nilfs_mdt_get_block() nilfs2: do not write dirty data after degenerating to read-only parisc: Fix argument pointer in real64_call_asm() dmaengine: at_xdmac: do not enable all cyclic channels phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port pwm: mtk-disp: Disable shadow registers before setting backlight values pwm: mtk-disp: Adjust the clocks to avoid them mismatch pwm: mtk-disp: Don't check the return code of pwmchip_remove() openrisc: Properly store r31 to pt_regs on unhandled exceptions RDMA/mlx5: Use correct device num_ports when modify DC SUNRPC: remove the maximum number of retries in call_bind_status NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order clk: add missing of_node_put() in "assigned-clocks" property parsing power: supply: generic-adc-battery: fix unit scaling RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() RDMA/rdmavt: Delete unnecessary NULL check perf/core: Fix hardlockup failure caused by perf throttle powerpc/rtas: use memmove for potentially overlapping buffer copy macintosh: via-pmu-led: requires ATA to be set powerpc/sysdev/tsi108: fix resource printk format warnings powerpc/wii: fix resource printk format warnings powerpc/mpc512x: fix resource printk format warning macintosh/windfarm_smu_sat: Add missing of_node_put() spmi: Add a check for remove callback when removing a SPMI driver staging: rtl8192e: Fix W_DISABLE# does not work after stop/start serial: 8250: Add missing wakeup event reporting tty: serial: fsl_lpuart: adjust buffer length to the intended size usb: chipidea: fix missing goto in `ci_hdrc_probe` sh: sq: Fix incorrect element size for allocating bitmap buffer uapi/linux/const.h: prefer ISO-friendly __typeof__ spi: cadence-quadspi: fix suspend-resume implementations mtd: spi-nor: cadence-quadspi: Handle probe deferral while requesting DMA channel mtd: spi-nor: cadence-quadspi: Don't initialize rx_dma_complete on failure mtd: spi-nor: cadence-quadspi: Make driver independent of flash geometry ia64: salinfo: placate defined-but-not-used warning ia64: mm/contig: fix section mismatch warning/error of: Fix modalias string generation vmci_host: fix a race condition in vmci_host_poll() causing GPF spi: fsl-spi: Fix CPM/QE mode Litte Endian spi: qup: Don't skip cleanup in remove's error path spi: qup: fix PM reference leak in spi_qup_remove() linux/vt_buffer.h: allow either builtin or modular for macros usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition fpga: bridge: fix kernel-doc parameter description usb: host: xhci-rcar: remove leftover quirk handling pstore: Revert pmsg_lock back to a normal mutex tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. net: amd: Fix link leak when verifying config failed netlink: Use copy_to_user() for optval in netlink_getsockopt(). Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" ipv4: Fix potential uninit variable access bug in __ip_make_skb() netfilter: nf_tables: don't write table validation state without mutex ixgbe: Enable setting RSS table to default values ixgbe: Allow flow hash to be set via ethtool wifi: iwlwifi: mvm: check firmware response size wifi: iwlwifi: make the loop for card preparation effective md/raid10: fix memleak of md thread md: update the optimal I/O size on reshape md/raid10: fix memleak for 'conf->bio_split' md/raid10: fix leak of 'r10bio->remaining' for recovery crypto: drbg - Only fail when jent is unavailable in FIPS mode crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors bpftool: Fix bug for long instructions in program CFG dumps wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() rtlwifi: Replace RT_TRACE with rtl_dbg rtlwifi: Start changing RT_TRACE into rtl_dbg rtlwifi: rtl_pci: Fix memory leak when hardware init fails scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS scsi: target: iscsit: Fix TAS handling during conn cleanup net/packet: convert po->auxdata to an atomic flag net/packet: convert po->origdev to an atomic flag vlan: partially enable SIOCSHWTSTAMP in container scm: fix MSG_CTRUNC setting condition for SO_PASSSEC tools: bpftool: Remove invalid \' json escape wifi: ath6kl: reduce WARN to dev_dbg() in callback wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() wifi: ath9k: hif_usb: fix memory leak of remain_skbs wifi: ath6kl: minor fix for allocation size debugobject: Prevent init race with static objects debugobjects: Move printk out of db->lock critical sections debugobjects: Add percpu free pools arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() media: rc: gpio-ir-recv: Fix support for wake-up media: rcar_fdp1: Fix refcount leak in probe and remove function media: rcar_fdp1: Fix the correct variable assignments media: saa7134: fix use after free bug in saa7134_finidev due to race condition media: dm1105: Fix use after free bug in dm1105_remove due to race condition x86/apic: Fix atomic update of offset in reserve_eilvt_offset() drm/msm/adreno: drop bogus pm_runtime_set_active() drm/msm/adreno: Defer enabling runpm until hw_init() firmware: qcom_scm: Clear download bit during reboot media: av7110: prevent underflow in write_ts_to_decoder() media: uapi: add MEDIA_BUS_FMT_METADATA_FIXED media bus format. media: bdisp: Add missing check for create_workqueue ARM: dts: qcom: ipq4019: Fix the PCI I/O port range EDAC/skx: Fix overflows on the DRAM row address mapping arrays EDAC, skx: Move debugfs node under EDAC's hierarchy drm/probe-helper: Cancel previous job before starting new one drm/vgem: add missing mutex_destroy drm/rockchip: Drop unbalanced obj unref selinux: ensure av_permissions.h is built when needed selinux: fix Makefile dependencies of flask.h ubifs: Free memory for tmpfile name ubi: Fix return value overwrite issue in try_write_vid_and_data() ubifs: Fix memleak when insert_old_idx() failed Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path" i2c: omap: Fix standard mode false ACK readings KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted reiserfs: Add security prefix to xattr name in reiserfs_security_write() ring-buffer: Sync IRQ works before buffer destruction pwm: meson: Fix axg ao mux parents MIPS: fw: Allow firmware to pass a empty env xhci: fix debugfs register accesses while suspended debugfs: regset32: Add Runtime PM support staging: iio: resolver: ads1210: fix config mode perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE) USB: dwc3: fix runtime pm imbalance on unbind stmmac: debugfs entry name is not be changed when udev rename device name. ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 iio: adc: palmas_gpadc: fix NULL dereference on rmmod USB: serial: option: add UNISOC vendor and TOZED LT70C product bluetooth: Perform careful capability checks in hci_sock_ioctl() wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() Conflicts: drivers/media/dvb-core/dvb_demux.c drivers/usb/dwc3/core.c drivers/usb/gadget/function/f_fs.c drivers/usb/gadget/function/f_ncm.c include/net/pkt_sched.h Change-Id: I5081b8f3529f4df573736bf7d69201f777754b74	2023-07-11 15:03:00 +03:00
Greg Kroah-Hartman	4e2cad2c2a	Merge 4.19.284 into android-4.19-stable ... Changes in 4.19.284 net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). netlink: annotate accesses to nlk->cb_running net: annotate sk->sk_err write from do_recvmmsg() tcp: reduce POLLOUT events caused by TCP_NOTSENT_LOWAT tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit tcp: factor out __tcp_close() helper tcp: add annotations around sk->sk_shutdown accesses ipvlan:Fix out-of-bounds caused by unclear skb->cb net: datagram: fix data-races in datagram_poll() af_unix: Fix a data race of sk->sk_receive_queue->qlen. af_unix: Fix data races around sk->sk_shutdown. fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() drm/amd/display: Use DC_LOG_DC in the trasform pixel function regmap: cache: Return error in cache sync operations for REGCACHE_NONE memstick: r592: Fix UAF bug in r592_remove due to race condition firmware: arm_sdei: Fix sleep from invalid context BUG ACPI: EC: Fix oops when removing custom query handlers drm/tegra: Avoid potential 32-bit integer overflow ACPICA: Avoid undefined behavior: applying zero offset to null pointer ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex ext2: Check block size validity during mount net: pasemi: Fix return type of pasemi_mac_start_tx() net: Catch invalid index in XPS mapping lib: cpu_rmap: Avoid use after free on rmap->obj array entries scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition gfs2: Fix inode height consistency check ext4: set goal start correctly in ext4_mb_normalize_request ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() f2fs: fix to drop all dirty pages during umount() if cp_error is set wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE HID: logitech-hidpp: Don't use the USB serial for USB devices HID: logitech-hidpp: Reconcile USB and Unifying serials spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 HID: wacom: generic: Set battery quirk only when we see battery data usb: typec: tcpm: fix multiple times discover svids error serial: 8250: Reinit port->pm on port specific driver unbind mcb-pci: Reallocate memory region to avoid memory overlapping sched: Fix KCSAN noinstr violation recordmcount: Fix memory leaks in the uwrite function clk: tegra20: fix gcc-7 constant overflow warning Input: xpad - add constants for GIP interface numbers phy: st: miphy28lp: use _poll_timeout functions for waits mfd: dln2: Fix memory leak in dln2_probe() btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid btrfs: fix space cache inconsistency after error loading it from disk cpupower: Make TSC read per CPU for Mperf monitor af_key: Reject optional tunnel/BEET mode templates in outbound policies net: fec: Better handle pm_runtime_get() failing in .remove() vsock: avoid to close connected socket after the timeout drivers: provide devm_platform_ioremap_resource() serial: arc_uart: fix of_iomap leak in `arc_serial_probe` ip6_gre: Fix skb_under_panic in __gre6_xmit() ip6_gre: Make o_seqno start from 0 in native mode ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode erspan: get the proto with the md version for collect_md media: netup_unidvb: fix use-after-free at del_timer() drm/exynos: fix g2d_open/close helper function definitions net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() net: bcmgenet: Restore phy_stop() depending upon suspend/close cassini: Fix a memory leak in the error handling path of cas_init_one() igb: fix bit_shift to be in [1..8] range vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() usb-storage: fix deadlock when a scsi command timeouts more than once usb: typec: altmodes/displayport: fix pin_assignment_show ALSA: hda: Fix Oops by 9.1 surround channel names ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table statfs: enforce statfs[64] structure initialization serial: Add support for Advantech PCI-1611U card ceph: force updating the msg pointer in non-split case tpm/tpm_tis: Disable interrupts for more Lenovo devices nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() netfilter: nftables: add nft_parse_register_load() and use it netfilter: nftables: add nft_parse_register_store() and use it netfilter: nftables: statify nft_parse_register() netfilter: nf_tables: validate registers coming from userspace. netfilter: nf_tables: add nft_setelem_parse_key() netfilter: nf_tables: allow up to 64 bytes in the set element data area netfilter: nf_tables: stricter validation of element data netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag netfilter: nf_tables: do not allow RULE_ID to refer to another chain HID: wacom: Force pen out of prox if no events have been received in a while Add Acer Aspire Ethos 8951G model quirk ALSA: hda/realtek - More constifications ALSA: hda/realtek - Add Headset Mic supported for HP cPC ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 ALSA: hda/realtek - The front Mic on a HP machine doesn't work ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform ALSA: hda/realtek - ALC897 headset MIC no sound ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 lib/string_helpers: Introduce string_upper() and string_lower() helpers usb: gadget: u_ether: Convert prints to device prints usb: gadget: u_ether: Fix host MAC address case vc_screen: rewrite vcs_size to accept vc, not inode vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF s390/qdio: get rid of register asm s390/qdio: fix do_sqbs() inline assembly constraint spi: spi-fsl-spi: automatically adapt bits-per-word in cpu mode spi: fsl-spi: Re-organise transfer bits_per_word adaptation spi: fsl-cpm: Use 16 bit mode for large transfers with even size ALSA: hda/ca0132: add quirk for EVGA X299 DARK m68k: Move signal frame following exception on 68020/030 parisc: Allow to reboot machine after system halt btrfs: use nofs when cleaning up aborted transactions x86/mm: Avoid incomplete Global INVLPG flushes selftests/memfd: Fix unknown type name build failure parisc: Fix flush_dcache_page() for usage from irq context ALSA: hda/realtek - Fixed one of HP ALC671 platform Headset Mic supported ALSA: hda/realtek - Fix inverted bass GPIO pin on Acer 8951G udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). USB: core: Add routines for endpoint checks in old drivers USB: sisusbvga: Add endpoint checks media: radio-shark: Add endpoint checks net: fix skb leak in __skb_tstamp_tx() bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields ipv6: Fix out-of-bounds access in ipv6_find_tlv() power: supply: leds: Fix blink to LED on transition power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition power: supply: bq27xxx: Fix I2C IRQ race on remove power: supply: bq27xxx: Fix poll_interval handling and races on remove power: supply: sbs-charger: Fix INHIBITED bit for Status reg coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() x86/show_trace_log_lvl: Ensure stack pointer is aligned, again ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg forcedeth: Fix an error handling path in nv_probe() 3c589_cs: Fix an error handling path in tc589_probe() drivers: depend on HAS_IOMEM for devm_platform_ioremap_resource() Linux 4.19.284 Change-Id: I88843be551e748e295ea608158a2db7ab4486a65 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-08 11:16:01 +00:00
Alan Stern	26c7373213	USB: core: Add routines for endpoint checks in old drivers ... commit 13890626501ffda22b18213ddaf7930473da5792 upstream. Many of the older USB drivers in the Linux USB stack were written based simply on a vendor's device specification. They use the endpoint information in the spec and assume these endpoints will always be present, with the properties listed, in any device matching the given vendor and product IDs. While that may have been true back then, with spoofing and fuzzing it is not true any more. More and more we are finding that those old drivers need to perform at least a minimum of checking before they try to use any endpoint other than ep0. To make this checking as simple as possible, we now add a couple of utility routines to the USB core. usb_check_bulk_endpoints() and usb_check_int_endpoints() take an interface pointer together with a list of endpoint addresses (numbers and directions). They check that the interface's current alternate setting includes endpoints with those addresses and that each of these endpoints has the right type: bulk or interrupt, respectively. Although we already have usb_find_common_endpoints() and related routines meant for a similar purpose, they are not well suited for this kind of checking. Those routines find endpoints of various kinds, but only one (either the first or the last) of each kind, and they don't verify that the endpoints' addresses agree with what the caller expects. In theory the new routines could be more general: They could take a particular altsetting as their argument instead of always using the interface's current altsetting. In practice I think this won't matter too much; multiple altsettings tend to be used for transferring media (audio or visual) over isochronous endpoints, not bulk or interrupt. Drivers for such devices will generally require more sophisticated checking than these simplistic routines provide. Signed-off-by: Alan Stern <stern@rowland.harvard.edu> Link: https://lore.kernel.org/r/dd2c8e8c-2c87-44ea-ba17-c64b97e201c9@rowland.harvard.edu Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-05-30 12:42:14 +01:00
lucaswei	79d418e128	Revert "Reverting below patches from android-4.19-stable.125" ... This reverts commit d6bbbe0157 ("Reverting below patches from android-4.19-stable.125") Bug: 172988823 Bug: 176525217 Change-Id: I2f907c951c5368caac5fc767d2f52fe9d7528d76 Signed-off-by: lucaswei <lucaswei@google.com> Signed-off-by: Will McVicker <willmcvicker@google.com>	2022-11-21 05:58:56 +02:00
Greg Kroah-Hartman	e0659ad4b9	Revert "USB: core: Prevent nested device-reset calls" ... This reverts commit cc9a12e128 which is commit 9c6d778800b921bde3bff3cff5003d1650f942d1 upstream. It breaks the Android kernel ABI and shouldn't be needed for any normal Android devices. If this is needed in the future, it can be brought back in an ABI-stable manner. Bug: 161946584 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: If15008828936f3675e8109f1b13b6b065aed4c46	2022-09-21 11:35:38 +02:00
Greg Kroah-Hartman	f88ff9a291	Merge 4.19.258 into android-4.19-stable ... Changes in 4.19.258 driver core: Don't probe devices after bus_type.match() probe deferral efi: capsule-loader: Fix use-after-free in efi_capsule_write wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() fs: only do a memory barrier for the first set_buffer_uptodate() Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()" net: dp83822: disable false carrier interrupt drm/msm/dsi: fix the inconsistent indenting drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask ieee802154/adf7242: defer destroy_workqueue call wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() Revert "xhci: turn off port power in shutdown" ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler kcm: fix strp_init() order and cleanup sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb tcp: annotate data-race around challenge_timestamp Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb" net/smc: Remove redundant refcount increase serial: fsl_lpuart: RS485 RTS polariy is inverse staging: rtl8712: fix use after free bugs vt: Clear selection before changing the font USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id binder: fix UAF of ref->proc caused by race condition drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported" clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops" clk: core: Fix runtime PM sequence in clk_core_unprepare() Input: rk805-pwrkey - fix module autoloading hwmon: (gpio-fan) Fix array out of bounds access thunderbolt: Use the actual buffer in tb_async_error() xhci: Add grace period after xHC start to prevent premature runtime suspend. USB: serial: cp210x: add Decagon UCA device id USB: serial: option: add support for OPPO R11 diag port USB: serial: option: add Quectel EM060K modem USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles usb: dwc2: fix wrong order of phy_power_on and phy_init USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) usb-storage: Add ignore-residue quirk for NXP PN7462AU s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages s390: fix nospec table alignments USB: core: Prevent nested device-reset calls usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected net: mac802154: Fix a condition in the receive path ALSA: seq: oss: Fix data-race for max_midi_devs access ALSA: seq: Fix data-race at module auto-loading drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. drm/radeon: add a force flush to delay work when radeon parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() ALSA: aloop: Fix random zeros in capture data when using jiffies timer ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() kprobes: Prohibit probes in gate area debugfs: add debugfs_lookup_and_remove() scsi: mpt3sas: Fix use-after-free warning soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs netfilter: br_netfilter: Drop dst references before setting. netfilter: nf_conntrack_irc: Fix forged IP logic sch_sfb: Don't assume the skb is still around after enqueueing to child tipc: fix shift wrapping bug in map_get() i40e: Fix kernel crash during module removal ipv6: sr: fix out-of-bounds read when setting HMAC data. RDMA/mlx5: Set local port to one when accessing counters tcp: fix early ETIMEDOUT after spurious non-SACK RTO sch_sfb: Also store skb len before calling child enqueue usb: dwc3: fix PHY disable sequence USB: serial: ch341: fix lost character on LCR updates USB: serial: ch341: fix disabled rx timer on older devices usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup x86/nospec: Fix i386 RSB stuffing MIPS: loongson32: ls1c: Fix hang during startup SUNRPC: use _bh spinlocking on ->transport_lock Linux 4.19.258 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I5fbfbfd1f16ccbac20b17300ef0369cb65fa862e	2022-09-21 11:26:39 +02:00
Alan Stern	cc9a12e128	USB: core: Prevent nested device-reset calls ... commit 9c6d778800b921bde3bff3cff5003d1650f942d1 upstream. Automatic kernel fuzzing revealed a recursive locking violation in usb-storage: ============================================ WARNING: possible recursive locking detected 5.18.0 #3 Not tainted -------------------------------------------- kworker/1:3/1205 is trying to acquire lock: ffff888018638db8 (&us_interface_key[i]){+.+.}-{3:3}, at: usb_stor_pre_reset+0x35/0x40 drivers/usb/storage/usb.c:230 but task is already holding lock: ffff888018638db8 (&us_interface_key[i]){+.+.}-{3:3}, at: usb_stor_pre_reset+0x35/0x40 drivers/usb/storage/usb.c:230 ... stack backtrace: CPU: 1 PID: 1205 Comm: kworker/1:3 Not tainted 5.18.0 #3 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014 Workqueue: usb_hub_wq hub_event Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 print_deadlock_bug kernel/locking/lockdep.c:2988 [inline] check_deadlock kernel/locking/lockdep.c:3031 [inline] validate_chain kernel/locking/lockdep.c:3816 [inline] __lock_acquire.cold+0x152/0x3ca kernel/locking/lockdep.c:5053 lock_acquire kernel/locking/lockdep.c:5665 [inline] lock_acquire+0x1ab/0x520 kernel/locking/lockdep.c:5630 __mutex_lock_common kernel/locking/mutex.c:603 [inline] __mutex_lock+0x14f/0x1610 kernel/locking/mutex.c:747 usb_stor_pre_reset+0x35/0x40 drivers/usb/storage/usb.c:230 usb_reset_device+0x37d/0x9a0 drivers/usb/core/hub.c:6109 r871xu_dev_remove+0x21a/0x270 drivers/staging/rtl8712/usb_intf.c:622 usb_unbind_interface+0x1bd/0x890 drivers/usb/core/driver.c:458 device_remove drivers/base/dd.c:545 [inline] device_remove+0x11f/0x170 drivers/base/dd.c:537 __device_release_driver drivers/base/dd.c:1222 [inline] device_release_driver_internal+0x1a7/0x2f0 drivers/base/dd.c:1248 usb_driver_release_interface+0x102/0x180 drivers/usb/core/driver.c:627 usb_forced_unbind_intf+0x4d/0xa0 drivers/usb/core/driver.c:1118 usb_reset_device+0x39b/0x9a0 drivers/usb/core/hub.c:6114 This turned out not to be an error in usb-storage but rather a nested device reset attempt. That is, as the rtl8712 driver was being unbound from a composite device in preparation for an unrelated USB reset (that driver does not have pre_reset or post_reset callbacks), its ->remove routine called usb_reset_device() -- thus nesting one reset call within another. Performing a reset as part of disconnect processing is a questionable practice at best. However, the bug report points out that the USB core does not have any protection against nested resets. Adding a reset_in_progress flag and testing it will prevent such errors in the future. Link: https://lore.kernel.org/all/CAB7eexKUpvX-JNiLzhXBDWgfg2T9e9_0Tw4HQ6keN==voRbP0g@mail.gmail.com/ Cc: stable@vger.kernel.org Reported-and-tested-by: Rondreis <linhaoguo86@gmail.com> Signed-off-by: Alan Stern <stern@rowland.harvard.edu> Link: https://lore.kernel.org/r/YwkflDxvg0KWqyZK@rowland.harvard.edu Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-09-15 12:17:04 +02:00
Greg Kroah-Hartman	ca46612871	ANDROID: GKI: USB: add Android ABI padding to some structures ... To try to mitigate potential future USB api changes, add some padding to the following structures: struct usb_interface struct usb_host_bos struct usb_bus struct usb_device struct usb_driver struct urb struct usb_hcd struct hc_driver struct usb_tt struct usbnet struct driver_info (for usbnet driver) Based on a patch from Oliver Neukum <oneukum@suse.de> from the SLES kernel. Bug: 151154716 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ie9e246d9333ac70fc9cc2b0bf7cb466a8ffdb6de	2020-05-01 15:18:12 +02:00
Hemant Kumar	a10905b7c0	ANDROID: GKI: usb: core: Add support to parse config summary capability descriptors ... USB 3.2 Specification updated configuration summary descriptor different from drafted version. This descriptor is needed per function. Descriptor provides list of configuration indices that include that function. Use bcdVersion to handle spec compliant descriptor and select device preferred config supporting UAC3 or lower revision. Change-Id: I7cf28eaf61ca91496be84d90ad00704fe4acb149 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> Bug: 153666697 (cherry picked from commit 1f64d4e3b5) Signed-off-by: Palmer Dabbelt <palmerdabbelt@google.com> Signed-off-by: Saravana Kannan <saravanak@google.com>	2020-04-24 23:47:06 +00:00
Hemant Kumar	27ac6136bc	ANDROID: GKI: usb: Add support to handle USB SMMU S1 address ... Update helper APIs to return physical address as well as USB SMMU stage 1 address. Physical address is used to map it to iova for remote processor. S1 address is used by xHC. Get sg table containing one or mode page sized physical address corresponding to S1 address for event ring, xfer ring and xfer buffers using dma_get_sgtable(). Accordingly update QMI response buffer for XHCI event ring, xfer ring memory info and xfer buffer. Change-Id: I6c9ea39d8a87a5bdc5a760d2a1ca85ab3024d985 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> Signed-off-by: Mayank Rana <mrana@codeaurora.org> (cherry picked from commit 3e3d0ab182) Signed-off-by: Mark Salyzyn <salyzyn@google.com> Bug: 154042109	2020-04-18 00:27:45 +00:00
Hemant Kumar	52b86b23cc	ANDROID: GKI: usb: Add helper APIs to return xhci phys addresses ... This is a merge of two cherry picks for simplicity and reduction of churn. Cherry picked from commit 787b74a487 ("usb: xhci: Add helper APIs to return xhci dma addresses") Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> Cherry picked from commit b8360b2a98 ("usb: core: Remove helper APIs returning dcba dma address") Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> dma address of secondary event ring and transfer ring are required to pass to remote entity. Remote entity uses these addresses to program xhci controller registers. Change to EXPORT_SYMBOL_GPL usage instead. (cherry picked from commit 787b74a487) (cherry picked from commit b8360b2a98) Signed-off-by: Mark Salyzyn <salyzyn@google.com> Bug: 154042109 Change-Id: I9fd1e95b00f2185b01374a46d7dff3182c3b3d78	2020-04-18 00:27:36 +00:00
Manu Gautam	639d56b96d	ANDROID: GKI: usb: hcd: Add USB atomic notifier callback for HC died error ... Add support for USB atomic notifier callbacks when host controller drivers reports death of controller on some fatal error. Current implementation doesn't help to recover from this condition. Controller platform drivers can register for this callback and take necessary steps to reset and add hcd again. Bug: 152001148 Test: Builds Signed-off-by: Manu Gautam <mgautam@codeaurora.org> (cherry picked from commit b31fc5d204) Signed-off-by: Sandeep Patil <sspatil@google.com> Change-Id: Ie9064e669424096fee8c35cddccab29faf60cc6b Signed-off-by: Will McVicker <willmcvicker@google.com>	2020-04-16 16:53:39 -07:00
Hemant Kumar	5b6a5354d0	ANDROID: GKI: USB: Fix ABI diff for struct usb_bus ... Adds new member skip_resume to struct usb_bus to resolve ABI diff. This patch also adds the capability to skip device resume during system resume. It allows xHC to remain in low power mode and not resume the bus when system wide resume happens. Instead, the controller comes out of low power mode only when usb device issues a remote wakeup or if there is host initiated bus resume. Test: build Bug: 153445212 Change-Id: I96cdcb9e3642906b4afa08d9bde07e123d9b3977 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> (cherry picked from commit 567a7ba0cc) [hridya: partial cherry-pick] Signed-off-by: Hridya Valsaraju <hridya@google.com>	2020-04-13 22:13:50 +00:00
Hemant Kumar	f7fbc946c2	ANDROID: GKI: usb: Add helper API to issue stop endpoint command ... This API is used to issue stop endpoint command on requested endpoint in order to retire all active TRBs in the transfer ring. Test: build Bug: 153446435 Change-Id: I312772367a2cd293982a66ea8b75e04a8b1f2fd0 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> (cherry picked from commit 106c645a79) [hridya: resolved minor conflicts, EXPORT_SYMBOL -> EXPORT_SYMBOL_GPL, added some null pointer checks] Signed-off-by: Hridya Valsaraju <hridya@google.com>	2020-04-09 12:47:53 -07:00
Hemant Kumar	5dfdaa15ca	ANDROID: GKI: usb: xhci: Add support for secondary interrupters ... Implement APIs to dynamically allocate and free secondary event rings based upon interrupter number. Also add exported APIs in usb core layer which allows secondary event ring management via remote processor entity. Change-Id: I5ee7d44d6cad8e35e22d3c1a027a1eec5d208585 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> Signed-off-by: Jack Pham <jackp@codeaurora.org> Signed-off-by: Mayank Rana <mrana@codeaurora.org> (cherry picked from commit 8d48fb820f) [connoro: squashed the following commits: a44f0d73af usb: xhci: Clear event handler busy flag upon event ring cleanup a1504b40da usb: xhci: Acknowledge pending events in secondary event ring a7e7dd8a34 usb: host: xhci: Fix bound check for interrupter number c4d9817a3c usb: core: Allow secondary event ring clean upon disconnect 576c1e1fe6 usb: host: xhci: Fix secondary event ring setup] Bug: 151258428 Signed-off-by: Connor O'Brien <connoro@google.com>	2020-04-06 16:26:54 -07:00
Hemant Kumar	7ff8c34945	ANDROID: GKI: usb: core: Add helper function to return controller id ... Function provides controller id used by a remote entity to identify which usb controller to program to initiate data transfer. Test: build Bug: 151977651 Change-Id: Ied396f34496104c139a7910ee86844c124e6803f Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> (cherry picked from commit f906c280ee) [hridya: EXPORT_SYMBOL -> EXPORT_SYMBOL_GPL] Signed-off-by: Hridya Valsaraju <hridya@google.com>	2020-03-26 14:45:12 -07:00
Hemant Kumar	63c8ae772f	usb: core: Add usb_set_interface_timeout API ... Currently control transfer timeout is a fixed value of 5 sec. Introduce generic api for customized timeout value which any class driver can use. Change-Id: I76730ad3d021f36ba9f97d91669a5c2f24c67942 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> Signed-off-by: Elson Roy Serrao <eserrao@codeaurora.org>	2019-09-22 15:39:09 -07:00
Ivaylo Georgiev	91e9b4e0bc	Merge android-4.19.41 (44c5f03) into msm-4.19 ... * refs/heads/tmp-44c5f03: Linux 4.19.41 mm/kmemleak.c: fix unused-function warning ASoC: wm_adsp: Check for buffer in trigger stop media: v4l2: i2c: ov7670: Fix PLL bypass register values i2c: i2c-stm32f7: Fix SDADEL minimum formula x86/mm/tlb: Revert "x86/mm: Align TLB invalidation info" x86/mm: Fix a crash with kmemleak_scan() x86/mm/KASLR: Fix the size of the direct mapping section clk: x86: Add system specific quirk to mark clocks as critical x86/mce: Improve error message when kernel cannot recover, p2 powerpc/mm/hash: Handle mmap_min_addr correctly in get_unmapped_area topdown search mac80211: Honor SW_CRYPTO_CONTROL for unicast keys in AP VLAN mode selinux: never allow relabeling on context mounts selinux: avoid silent denials in permissive mode under RCU walk gpio: mxc: add check to return defer probe if clock tree NOT ready Input: stmfts - acknowledge that setting brightness is a blocking call Input: snvs_pwrkey - initialize necessary driver data before enabling IRQ IB/core: Destroy QP if XRC QP fails IB/core: Fix potential memory leak while creating MAD agents IB/core: Unregister notifier before freeing MAD security platform/x86: intel_pmc_core: Handle CFL regmap properly platform/x86: intel_pmc_core: Fix PCH IP name ASoC: stm32: fix sai driver name initialisation ASoC: wm_adsp: Correct handling of compressed streams that restart ASoC: Intel: bytcr_rt5651: Revert "Fix DMIC map headsetmic mapping" scsi: RDMA/srpt: Fix a credit leak for aborted commands staging: iio: adt7316: fix the dac write calculation staging: iio: adt7316: fix the dac read calculation staging: iio: adt7316: allow adt751x to use internal vref for all dacs clk: qcom: Add missing freq for usb30_master_clk on 8998 Bluetooth: mediatek: fix up an error path to restore bdev->tx_state Bluetooth: btusb: request wake pin with NOAUTOEN perf/x86/amd: Update generic hardware cache events for Family 17h block: pass no-op callback to INIT_WORK(). ARM: iop: don't use using 64-bit DMA masks ARM: orion: don't use using 64-bit DMA masks fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock xsysace: Fix error handling in ace_setup sh: fix multiple function definition build errors hugetlbfs: fix memory leak for resv_map kmemleak: powerpc: skip scanning holes in the .bss section KVM: SVM: prevent DBG_DECRYPT and DBG_ENCRYPT overflow libcxgb: fix incorrect ppmax calculation net: hns: Fix WARNING when remove HNS driver with SMMU enabled net: hns: fix ICMP6 neighbor solicitation messages discard problem net: hns: Fix probabilistic memory overwrite when HNS driver initialized net: hns: Use NAPI_POLL_WEIGHT for hns driver net: hns: fix KASAN: use-after-free in hns_nic_net_xmit_hw() arm64: fix wrong check of on_sdei_stack in nmi context arm/mach-at91/pm : fix possible object reference leak scsi: storvsc: Fix calculation of sub-channel count scsi: core: add new RDAC LENOVO/DE_Series device vfio/pci: use correct format characters HID: input: add mapping for Assistant key rtc: da9063: set uie_unsupported when relevant block: use blk_free_flush_queue() to free hctx->fq in blk_mq_init_hctx mfd: twl-core: Disable IRQ while suspended debugfs: fix use-after-free on symlink traversal jffs2: fix use-after-free on symlink traversal net: stmmac: don't log oversized frames net: stmmac: fix dropping of multi-descriptor RX frames net: stmmac: don't overwrite discard_frame status net: stmmac: don't stop NAPI processing when dropping a packet net: stmmac: ratelimit RX error logs net: stmmac: use correct DMA buffer size in the RX descriptor bonding: show full hw address in sysfs for slave entries net/mlx5: E-Switch, Fix esw manager vport indication for more vport commands net: hns3: fix compile error HID: quirks: Fix keyboard + touchpad on Lenovo Miix 630 riscv: fix accessing 8-byte variable from RV32 igb: Fix WARN_ONCE on runtime suspend reset: meson-audio-arb: Fix missing .owner setting of reset_controller_dev ARM: dts: rockchip: Fix gpu opp node names for rk3288 batman-adv: fix warning in function batadv_v_elp_get_throughput batman-adv: Reduce tt_global hash refcnt only for removed entry batman-adv: Reduce tt_local hash refcnt only for removed entry batman-adv: Reduce claim hash refcnt only for removed entry rtc: sh: Fix invalid alarm warning for non-enabled alarm rtc: cros-ec: Fail suspend/resume if wake IRQ can't be configured HID: debug: fix race condition with between rdesc_show() and device removal HID: logitech: check the return value of create_singlethread_workqueue arm64: dts: rockchip: fix rk3328-roc-cc gmac2io tx/rx_delay efi: Fix debugobjects warning on 'efi_rts_work' nvme-loop: init nvmet_ctrl fatal_err_work when allocate USB: core: Fix bug caused by duplicate interface PM usage counter USB: core: Fix unterminated string returned by usb_string() usb: usbip: fix isoc packet num validation in get_pipe USB: dummy-hcd: Fix failure to give back unlinked URBs USB: w1 ds2490: Fix bug caused by improper use of altsetting array USB: yurex: Fix protection fault after device removal ALSA: hda/realtek - Apply the fixup for ASUS Q325UAR ALSA: hda/realtek - Fixed Dell AIO speaker noise ALSA: hda/realtek - Add new Dell platform for headset mode i2c: Prevent runtime suspend of adapter when Host Notify is required i2c: Allow recovery of the initial IRQ by an I2C client device. i2c: Clear client->irq in i2c_device_remove i2c: Remove unnecessary call to irq_find_mapping i2c: imx: correct the method of getting private data in notifier_call i2c: synquacer: fix enumeration of slave devices mac80211: don't attempt to rename ERR_PTR() debugfs dirs mwifiex: Make resume actually do something useful again on SDIO cards iwlwifi: fix driver operation for 5350 ANDROID: cuttlefish 4.19: enable CONFIG_CRYPTO_AES_NI_INTEL=y Change-Id: I855e323ab82278f40f6d48305c7e4d21027637fd Signed-off-by: Ivaylo Georgiev <irgeorgiev@codeaurora.org>	2019-05-31 06:03:57 -07:00
Alan Stern	83c6688d67	USB: core: Fix bug caused by duplicate interface PM usage counter ... commit c2b71462d294cf517a0bc6e4fd6424d7cee5596f upstream. The syzkaller fuzzer reported a bug in the USB hub driver which turned out to be caused by a negative runtime-PM usage counter. This allowed a hub to be runtime suspended at a time when the driver did not expect it. The symptom is a WARNING issued because the hub's status URB is submitted while it is already active: URB 0000000031fb463e submitted while active WARNING: CPU: 0 PID: 2917 at drivers/usb/core/urb.c:363 The negative runtime-PM usage count was caused by an unfortunate design decision made when runtime PM was first implemented for USB. At that time, USB class drivers were allowed to unbind from their interfaces without balancing the usage counter (i.e., leaving it with a positive count). The core code would take care of setting the counter back to 0 before allowing another driver to bind to the interface. Later on when runtime PM was implemented for the entire kernel, the opposite decision was made: Drivers were required to balance their runtime-PM get and put calls. In order to maintain backward compatibility, however, the USB subsystem adapted to the new implementation by keeping an independent usage counter for each interface and using it to automatically adjust the normal usage counter back to 0 whenever a driver was unbound. This approach involves duplicating information, but what is worse, it doesn't work properly in cases where a USB class driver delays decrementing the usage counter until after the driver's disconnect() routine has returned and the counter has been adjusted back to 0. Doing so would cause the usage counter to become negative. There's even a warning about this in the USB power management documentation! As it happens, this is exactly what the hub driver does. The kick_hub_wq() routine increments the runtime-PM usage counter, and the corresponding decrement is carried out by hub_event() in the context of the hub_wq work-queue thread. This work routine may sometimes run after the driver has been unbound from its interface, and when it does it causes the usage counter to go negative. It is not possible for hub_disconnect() to wait for a pending hub_event() call to finish, because hub_disconnect() is called with the device lock held and hub_event() acquires that lock. The only feasible fix is to reverse the original design decision: remove the duplicate interface-specific usage counter and require USB drivers to balance their runtime PM gets and puts. As far as I know, all existing drivers currently do this. Signed-off-by: Alan Stern <stern@rowland.harvard.edu> Reported-and-tested-by: syzbot+7634edaea4d0b341c625@syzkaller.appspotmail.com CC: <stable@vger.kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-05-08 07:21:44 +02:00
Hemant Kumar	567a7ba0cc	USB: Allow skipping device resume during system resume ... This allows xHC to remain in low power mode and not resume the bus when system wide resume happens. Controller comes out of low power mode only when usb device issues a remote wakeup or if there is a host initiated bus resume. Change-Id: I96cdcb9e3642906b4afa08d9bde07e123d9b3977 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org>	2019-04-01 11:34:44 -07:00
Rishabh Bhatnagar	4ac13bd161	Merge remote-tracking branch 'origin_4.19/tmp-0567d2f' into msm-4.19 ... * origin_4.19/tmp-0567d2f: Linux 4.19.9 HID: quirks: fix RetroUSB.com devices mac80211: ignore NullFunc frames in the duplicate detection mac80211: fix reordering of buffered broadcast packets mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext mac80211: Clear beacon_int in ieee80211_do_stop mac80211: fix GFP_KERNEL under tasklet context mac80211_hwsim: Timer should be initialized before device registered cfg80211: Fix busy loop regression in ieee80211_ie_split_ric() libnvdimm, pfn: Pad pfn namespaces relative to other regions kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var() gnss: sirf: fix activation retry handling tty: do not set TTY_IO_ERROR flag if console port tty: serial: 8250_mtk: always resume the device in probe. Drivers: hv: vmbus: Offload the handling of channels to two workqueues x86/efi: Allocate e820 buffer before calling efi_exit_boot_service kprobes/x86: Fix instruction patching corruption when copying more than one RIP-relative instruction drm/i915: Downgrade Gen9 Plane WM latency error drm/amdgpu/gmc8: always load MC firmware in the driver drm/amdgpu/gmc8: update MC firmware for polaris drm/msm: Move fence put to where failure occurs drm/lease: Send a distinct uevent drm/amdgpu: update mc firmware image for polaris12 variants crypto: do not free algorithm before using Revert commit ef9209b642 "staging: rtl8723bs: Fix indenting errors and an off-by-one mistake in core/rtw_mlme_ext.c" staging: rtl8712: Fix possible buffer overrun cifs: Fix separator when building path from dentry Revert "x86/e820: put !E820_TYPE_RAM regions into memblock.reserved" arm64: dts: rockchip: remove vdd_log from rock960 to fix a stability issues xhci: Prevent U1/U2 link pm states if exit latency is too long xhci: workaround CSS timeout on AMD SNPS 3.0 xHC ARM: 8806/1: kprobes: Fix false positive with FORTIFY_SOURCE dmaengine: cppi41: delete channel from pending list when stop channel dmaengine: imx-sdma: use GFP_NOWAIT for dma descriptor allocations dmaengine: imx-sdma: implement channel termination via worker Revert "dmaengine: imx-sdma: alloclate bd memory from dma pool" Revert "dmaengine: imx-sdma: Use GFP_NOWAIT for dma allocations" dmaengine: dw: Fix FIFO size for Intel Merrifield SUNRPC: Fix leak of krb5p encode pages arm64: hibernate: Avoid sending cross-calling with interrupts disabled vhost/vsock: fix use-after-free in network stack callers virtio/s390: fix race in ccw_io_helper() virtio/s390: avoid race on vcdev->config parisc: Enable -ffunction-sections for modules on 32-bit kernel Revert "mfd: cros_ec: Use devm_kzalloc for private data" media: dvb-pll: don't re-validate tuner frequencies media: dvb-pll: fix tuner frequency ranges media: vicodec: fix memchr() kernel oops media: gspca: fix frame overflow error ALSA: hda/realtek: Fix mic issue on Acer AIO Veriton Z4860G/Z6860G ALSA: hda/realtek: Fix mic issue on Acer AIO Veriton Z4660G ALSA: hda/realtek - Add support for Acer Aspire C24-860 headset mic ALSA: hda/realtek: ALC286 mic and headset-mode fixups for Acer Aspire U27-880 ALSA: hda/realtek - Fix speaker output regression on Thinkpad T570 ALSA: pcm: Fix interval evaluation with openmin/max ALSA: pcm: Call snd_pcm_unlink() conditionally at closing ALSA: pcm: Fix starvation on down_write_nonblock() ALSA: hda: Add support for AMD Stoney Ridge ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c ALSA: usb-audio: Add SMSL D1 to quirks for native DSD support USB: serial: console: fix reported terminal settings USB: check usb_get_extra_descriptor for proper size usb: appledisplay: Add 27" Apple Cinema Display usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device net: amd: add missing of_node_put() team: no need to do team_notify_peers or team_mcast_rejoin when disabling port ibmvnic: Update driver queues after change in ring size support ibmvnic: Fix RX queue buffer cleanup flexfiles: use per-mirror specified stateid for IO NFSv4.2 copy do not allocate memory under the lock iommu/vt-d: Use memunmap to free memremap net: faraday: ftmac100: remove netif_running(netdev) check before disabling interrupts riscv: fix warning in arch/riscv/include/asm/module.h net/ibmnvic: Fix deadlock problem in reset qed: Fix QM getters to always return a valid pq qed: Fix bitmap_weight() check NFSv4: Fix a NFSv4 state manager deadlock net: ena: fix crash during failed resume from hibernation mtd: spi-nor: Fix Cadence QSPI page fault kernel panic HID: multitouch: Add pointstick support for Cirque Touchpad Revert "HID: uhid: use strlcpy() instead of strncpy()" cpufreq: ti-cpufreq: Only register platform_device when supported mtd: rawnand: qcom: Namespace prefix some commands tc-testing: tdc.py: Guard against lack of returncode in executed command tc-testing: tdc.py: ignore errors when decoding stdout/stderr gpio: mockup: fix indicated direction gpio: pxa: fix legacy non pinctrl aware builds again drivers/net/ethernet/qlogic/qed/qed_rdma.h: fix typo net/mlx4: Fix UBSAN warning of signed integer overflow net/mlx4_core: Fix uninitialized variable compilation warning net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command drm/amd/display: Support amdgpu "max bpc" connector property (v2) drm/amdgpu: Add amdgpu "max bpc" connector property (v2) bnxt_en: Fix filling time in bnxt_fill_coredump_record() nvme-fc: resolve io failures during connect s390/ism: clear dmbe_mask bit before SMC IRQ handling Revert "usb: gadget: ffs: Fix BUG when userland exits with submitted AIO transfers" usb: dwc2: pci: Fix an error code in probe qed: Fix reading wrong value in loop condition qed: Fix rdma_info structure allocation qed: Fix overriding offload_tc by protocols without APP TLV qed: Fix PTT leak in qed_drain() bnx2x: Assign unique DMAE channel number for FW DMAE transactions. amd/iommu: Fix Guest Virtual APIC Log Tail Address Register batman-adv: Expand merged fragment buffer for full packet batman-adv: Use explicit tvlv padding for ELP packets HID: input: Ignore battery reported by Symbol DS4308 test_firmware: fix error return getting clobbered can: rcar_can: Fix erroneous registration can: ucan: remove set but not used variable 'udev' scsi: ufs: Fix hynix ufs bug with quirk on hi36xx SoC iommu/ipmmu-vmsa: Fix crash on early domain free mt76: fix building without CONFIG_LEDS_CLASS brcmutil: really fix decoding channel info for 160 MHz bandwidth iommu/vt-d: Fix NULL pointer dereference in prq_event_thread() media: ipu3-cio2: Unregister device nodes first, then release resources media: omap3isp: Unregister media device as first media: cec: check for non-OK/NACK conditions while claiming a LA media: vicodec: lower minimum height to 360 ANDROID: cuttlefish_defconfig: Enable VIRT_WIFI FROMGIT: mac80211-next: rtnetlink wifi simulation device Linux 4.19.8 blk-mq: punt failed direct issue to dispatch list tipc: use destination length for copy string arc: [devboards] Add support of NFSv3 ACL ARC: change defconfig defaults to ARCv2 btrfs: tree-checker: Don't check max block group size as current max chunk size limit is unreliable Input: elan_i2c - add support for ELAN0621 touchpad Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15ARR Input: elan_i2c - add ELAN0620 to the ACPI table Input: cros_ec_keyb - fix button/switch capability reports Input: matrix_keypad - check for errors from of_get_named_gpio() Input: synaptics - add PNP ID for ThinkPad P50 to SMBus Input: xpad - quirk all PDP Xbox One gamepads scsi: lpfc: fix block guard enablement on SLI3 adapters i40e: Fix deletion of MAC filters selinux: add support for RTM_NEWCHAIN, RTM_DELCHAIN, and RTM_GETCHAIN svm: Add mutex_lock to protect apic_access_page_done on AMD systems kgdboc: Fix warning with module build kgdboc: Fix restrict error userfaultfd: shmem: UFFDIO_COPY: set the page dirty if VM_WRITE is not set userfaultfd: shmem: add i_size checks userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails drm/meson: Fix OOB memory accesses in meson_viu_set_osd_lut() drm/meson: Enable fast_io in meson_dw_hdmi_regmap_config drm/meson: Fixes for drm_crtc_vblank_on/off support drm: set is_master to 0 upon drm_new_set_master() failure drm/amd/dm: Don't forget to attach MST encoders drm/ast: Fix incorrect free on ioregs tracing/fgraph: Fix set_graph_function from showing interrupts IB/mlx5: Avoid load failure due to unknown link width mips: fix mips_get_syscall_arg o32 check MIPS: ralink: Fix mt7620 nd_sd pinmux tracepoint: Use __idx instead of idx in DO_TRACE macro to make it unique sched, trace: Fix prev_state output in sched_switch tracepoint arm64: ftrace: Fix to enable syscall events on arm64 mtd: nand: Fix memory allocation in nanddev_bbt_init() uprobes: Fix handle_swbp() vs. unregister() + register() race once more iser: set sector for ambiguous mr status errors unifdef: use memcpy instead of strncpy test_hexdump: use memcpy instead of strncpy blk-mq: fix corruption with direct issue ANDROID: cuttlefish_defconfig: Enable CONFIG_ARM64_LSE_ATOMICS ANDROID: Move from clang r328903 to r346389b. Linux 4.19.7 misc: mic/scif: fix copy-paste error in scif_create_remote_lookup Drivers: hv: vmbus: check the creation_status in vmbus_establish_gpadl() mm: use swp_offset as key in shmem_replace_page() mm: cleancache: fix corruption on missed inode invalidation lib/test_kmod.c: fix rmmod double free iio:st_magn: Fix enable device after trigger iio/hid-sensors: Fix IIO_CHAN_INFO_RAW returning wrong values for signed numbers Revert "usb: dwc3: gadget: skip Set/Clear Halt when invalid" usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series USB: usb-storage: Add new IDs to ums-realtek staging: rtl8723bs: Add missing return for cfg80211_rtw_get_station staging: rtl8723bs: Fix incorrect sense of ether_addr_equal staging: mt7621-pinctrl: fix uninitialized variable ngroups staging: mt7621-dma: fix potentially dereferencing uninitialized 'tx_desc' staging: vchiq_arm: fix compat VCHIQ_IOC_AWAIT_COMPLETION staging: most: use format specifier "%s" in snprintf dmaengine: at_hdmac: fix module unloading dmaengine: at_hdmac: fix memory leak in at_dma_xlate() ARM: dts: rockchip: Remove @0 from the veyron memory node ASoC: pcm186x: Fix device reset-registers trigger value ASoC: intel: cht_bsw_max98090_ti: Add quirk for boards using pmc_plt_clk_0 ext2: fix potential use after free ext2: initialize opts.s_mount_opt as zero before using it binder: fix race that allows malicious free of live buffer function_graph: Reverse the order of pushing the ret_stack and the callback function_graph: Move return callback before update of curr_ret_stack function_graph: Have profiler use curr_ret_stack and not depth function_graph: Use new curr_ret_depth to manage depth instead of curr_ret_stack function_graph: Make ftrace_push_return_trace() static MIPS: function_graph: Simplify with function_graph_enter() arm64: function_graph: Simplify with function_graph_enter() s390/function_graph: Simplify with function_graph_enter() riscv/function_graph: Simplify with function_graph_enter() parisc: function_graph: Simplify with function_graph_enter() sparc/function_graph: Simplify with function_graph_enter() sh/function_graph: Simplify with function_graph_enter() powerpc/function_graph: Simplify with function_graph_enter() nds32: function_graph: Simplify with function_graph_enter() x86/function_graph: Simplify with function_graph_enter() microblaze: function_graph: Simplify with function_graph_enter() ARM: function_graph: Simplify with function_graph_enter() function_graph: Create function_graph_enter() to consolidate architecture code ALSA: hda/realtek - Add auto-mute quirk for HP Spectre x360 laptop ALSA: hda/realtek - fix the pop noise on headphone for lenovo laptops ALSA: hda/realtek - fix headset mic detection for MSI MS-B171 ALSA: hda/realtek - Support ALC300 ALSA: hda: Add ASRock N68C-S UCC the power_save blacklist ALSA: sparc: Fix invalid snd_free_pages() at error path ALSA: control: Fix race between adding and removing a user element ALSA: ac97: Fix incorrect bit shift at AC97-SPSA control write ALSA: wss: Fix invalid snd_free_pages() at error path fs: fix lost error code in dio_complete perf/x86/intel: Disallow precise_ip on BTS events perf/x86/intel: Add generic branch tracing check to intel_pmu_has_bts() perf/x86/intel: Move branch tracing setup to the Intel-specific source file x86/fpu: Disable bottom halves while loading FPU registers x86/MCE/AMD: Fix the thresholding machinery initialization order arm64: dts: rockchip: Fix PCIe reset polarity for rk3399-puma-haikou. PCI: Fix incorrect value returned from pcie_get_speed_cap() PCI: dwc: Fix MSI-X EP framework address calculation bug PCI: layerscape: Fix wrong invocation of outbound window disable accessor btrfs: relocation: set trans to be NULL after ending transaction Btrfs: fix race between enabling quotas and subvolume creation Btrfs: fix rare chances for data loss when doing a fast fsync Btrfs: ensure path name is null terminated at btrfs_control_ioctl btrfs: Always try all copies when reading extent buffers udf: Allow mounting volumes with incorrect identification strings xtensa: fix coprocessor part of ptrace_{get,set}xregs xtensa: fix coprocessor context offset definitions xtensa: enable coprocessors that are being flushed KVM: VMX: re-add ple_gap module parameter KVM: X86: Fix scan ioapic use-before-initialization KVM: LAPIC: Fix pv ipis use-before-initialization KVM: x86: Fix kernel info-leak in KVM_HC_CLOCK_PAIRING hypercall KVM: nVMX/nSVM: Fix bug which sets vcpu->arch.tsc_offset to L1 tsc_offset kvm: svm: Ensure an IBPB on all affected CPUs when freeing a vmcb kvm: mmu: Fix race in emulated page table writes userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas x86/speculation: Provide IBPB always command line options x86/speculation: Add seccomp Spectre v2 user space protection mode x86/speculation: Enable prctl mode for spectre_v2_user x86/speculation: Add prctl() control for indirect branch speculation x86/speculation: Prepare arch_smt_update() for PRCTL mode x86/speculation: Prevent stale SPEC_CTRL msr content x86/speculation: Split out TIF update ptrace: Remove unused ptrace_may_access_sched() and MODE_IBRS x86/speculation: Prepare for conditional IBPB in switch_mm() x86/speculation: Avoid __switch_to_xtra() calls x86/process: Consolidate and simplify switch_to_xtra() code x86/speculation: Prepare for per task indirect branch speculation control x86/speculation: Add command line control for indirect branch speculation x86/speculation: Unify conditional spectre v2 print functions x86/speculataion: Mark command line parser data __initdata x86/speculation: Mark string arrays const correctly x86/speculation: Reorder the spec_v2 code x86/l1tf: Show actual SMT state x86/speculation: Rework SMT state change sched/smt: Expose sched_smt_present static key x86/Kconfig: Select SCHED_SMT if SMP enabled sched/smt: Make sched_smt_present track topology x86/speculation: Reorganize speculation control MSRs update x86/speculation: Rename SSBD update functions x86/speculation: Disable STIBP when enhanced IBRS is in use x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() x86/speculation: Remove unnecessary ret variable in cpu_show_common() x86/speculation: Clean up spectre_v2_parse_cmdline() x86/speculation: Update the TIF_SSBD comment x86/retpoline: Remove minimal retpoline support x86/retpoline: Make CONFIG_RETPOLINE depend on compiler support x86/speculation: Add RETPOLINE_AMD support to the inline asm CALL_NOSPEC variant x86/speculation: Propagate information about RSB filling mitigation to sysfs x86/speculation: Apply IBPB more strictly to avoid cross-process data leak x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation tipc: fix lockdep warning during node delete net: phy: add workaround for issue where PHY driver doesn't bind to the device tcp: defer SACK compression after DupThresh net/dim: Update DIM start sample after each DIM iteration virtio-net: fail XDP set if guest csum is negotiated virtio-net: disable guest csum during XDP set net: skb_scrub_packet(): Scrub offload_fwd_mark net: thunderx: set xdp_prog to NULL if bpf_prog_add fails usbnet: ipheth: fix potential recvmsg bug and recvmsg bug 2 s390/qeth: fix length check in SNMP processing rapidio/rionet: do not free skb before reading its length packet: copy user buffers before orphan or clone net: thunderx: set tso_hdrs pointer to NULL in nicvf_free_snd_queue net: gemini: Fix copy/paste error net: don't keep lonely packets forever in the gro hash lan743x: fix return value for lan743x_tx_napi_poll lan743x: Enable driver to work with LAN7431 mm/khugepaged: collapse_shmem() do not crash on Compound mm/khugepaged: collapse_shmem() without freezing new_page mm/khugepaged: minor reorderings in collapse_shmem() mm/khugepaged: collapse_shmem() remember to clear holes mm/khugepaged: fix crashes due to misaccounted holes mm/khugepaged: collapse_shmem() stop if punched or truncated mm/huge_memory: fix lockdep complaint on 32-bit i_size_read() mm/huge_memory: splitting set mapping+index before unfreeze mm/huge_memory: rename freeze_page() to unmap_page() ANDROID: cuttlefish_defconfig: Enable CONFIG_CRYPTO_ADIANTUM FROMGIT: fscrypt: add Adiantum support BACKPORT, FROMGIT: crypto: adiantum - add Adiantum support FROMGIT: crypto: arm/nhpoly1305 - add NEON-accelerated NHPoly1305 FROMGIT: crypto: nhpoly1305 - add NHPoly1305 support FROMGIT: crypto: poly1305 - add Poly1305 core API FROMGIT: crypto: poly1305 - use structures for key and accumulator FROMGIT: crypto: arm/chacha - add XChaCha12 support FROMGIT: crypto: arm/chacha20 - refactor to allow varying number of rounds FROMGIT: crypto: arm/chacha20 - add XChaCha20 support FROMGIT: crypto: arm/chacha20 - limit the preemption-disabled section FROMGIT: crypto: chacha - add XChaCha12 support BACKPORT, FROMGIT: crypto: chacha20-generic - refactor to allow varying number of rounds FROMGIT: crypto: chacha20-generic - add XChaCha20 support FROMGIT: crypto: chacha20-generic - don't unnecessarily use atomic walk FROMGIT: crypto: chacha20-generic - add HChaCha20 library function FROMGIT: crypto: arm/aes - add some hardening against cache-timing attacks UPSTREAM: crypto: arm/chacha20 - faster 8-bit rotations and other optimizations UPSTREAM: crypto: chacha20 - Fix chacha20_block() keystream alignment (again) ANDROID: cuttlefish_defconfig: Enable CONFIG_SDCARD_FS ANDROID: sdcardfs: Add sdcardfs filesystem ANDROID: sdcardfs: Define magic value ANDROID: fs: Restore vfs_path_lookup() export ANDROID: vfs: add d_canonical_path for stacked filesystem support ANDROID: vfs: Add permission2 for filesystems with per mount permissions ANDROID: vfs: Add setattr2 for filesystems with per mount permissions ANDROID: vfs: Allow filesystems to access their private mount data ANDROID: mnt: Add filesystem private data to mount points ANDROID: sdcardfs: Enable modular sdcardfs Revert "proc: Convert proc_mount to use mount_ns." ANDROID: binder: add support for RT prio inheritance. UPSTREAM: binder: Add BINDER_GET_NODE_INFO_FOR_REF ioctl. ANDROID: net: ipv6: autoconf routes into per-device tables ANDROID: cuttlefish_defconfig: Enable SECURITY_PERF_EVENTS_RESTRICT ANDROID: security,perf: Allow further restriction of perf_event_open ANDROID: netfilter: xt_IDLETIMER: Add new netlink msg type ANDROID: cuttlefish_defconfig: Enable CONFIG_NETFILTER_XT_MATCH_QUOTA2 ANDROID: netfilter: xt_quota2: adding the original quota2 from xtables-addons ANDROID: power: wakeup_reason: add an API to log wakeup reasons ANDROID: trace: sched: add sched blocked tracepoint which dumps out context of sleep. ANDROID: add extra free kbytes tunable CHROMIUM: cgroups: relax permissions on moving tasks between cgroups ANDROID: cpu: send KOBJ_ONLINE event when enabling cpus ANDROID: fs: FS tracepoints to track IO. ANDROID: cuttlefish_defconfig: Enable CONFIG_DM_VERITY_AVB ANDROID: AVB error handler to invalidate vbmeta partition. ANDROID: cuttlefish_defconfig: Enable CONFIG_CPUSETS ANDROID: cpuset: Make cpusets restore on hotplug ANDROID: taskstats: track fsync syscalls ANDROID: uid_cputime: add per-uid IO usage accounting ANDROID: cuttlefish_defconfig: Enable CONFIG_UID_SYS_STATS ANDROID: uid_cputime: Adds accounting for the cputimes per uid. ANDROID: cuttlefish_defconfig: Enable CONFIG_MMC ANDROID: mmc: core: Add "ignore mmc pm notify" functionality ANDROID: cuttlefish_defconfig: Enable CONFIG_USB_CONFIGFS_F_AUDIO_SRC ANDROID: usb: gadget: f_audio_source: New gadget driver for audio output ANDROID: usb: gadget: f_midi: set fi->f to NULL when free f_midi function ANDROID: usb: gadget: f_midi: create F_midi device ANDROID: cuttlefish_defconfig: Enable CONFIG_USB_CONFIGFS_F_ACC ANDROID: usb: gadget: f_accessory: Add Android Accessory function ANDROID: usb: gadget: configfs: Add device attribute to determine gadget state ANDROID: usb: gadget: configfs: Add "state" attribute to android_device ANDROID: cuttlefish_defconfig: Enable CONFIG_USB_CONFIGFS_UEVENT ANDROID: usb: gadget: configfs: Add function devices to the parent ANDROID: usb: gadget: configfs: Add Uevent to notify userspace ANDROID: usb: gadget: configfs: Add usb_function ptr to fi struct ANDROID: mm: add a field to store names for private anonymous memory ANDROID: fs: epoll: use freezable blocking call ANDROID: cuttlefish_defconfig: Enable CONFIG_CMDLINE_EXTEND ANDROID: of: Support CONFIG_CMDLINE_EXTEND config option ANDROID: arm64: copy CONFIG_CMDLINE_EXTEND from ARM UPSTREAM: tcp: start receiver buffer autotuning sooner UPSTREAM: tcp: up initial rmem to 128KB and SYN rwin to around 64KB ANDROID: net: xfrm: make PF_KEY SHA256 use RFC-compliant truncation. ANDROID: cuttlefish_defconfig: Enable EAS related defines BACKPORT: sched/fair: Fix cpu_util_wake() for 'execl' type workloads ANDROID: defconfig / build config for cuttlefish ANDROID: Kbuild, LLVMLinux: allow overriding clang target triple ANDROID: x86: Remove a useless warning message Revert "x86: Force asm-goto" Revert "x86: Allow generating user-space headers without a compiler" Linux 4.19.6 media: ov5640: fix auto controls values when switching to manual mode media: ov5640: fix wrong binning value in exposure calculation media: ov5640: fix auto gain & exposure when changing mode media: ov5640: fix exposure regression media: ov5640: Fix timings setup code media: ov5640: Re-work MIPI startup sequence rcu: Make need_resched() respond to urgent RCU-QS needs gfs2: Fix iomap buffer head reference counting bug tty: wipe buffer if not echoing data tty: wipe buffer. include/linux/pfn_t.h: force '~' to be parsed as an unary operator dax: Avoid losing wakeup in dax_lock_mapping_entry mm, page_alloc: check for max order in hot path tmpfs: make lseek(SEEK_DATA/SEK_HOLE) return ENXIO with a negative offset mm, memory_hotplug: check zone_movable in has_unmovable_pages z3fold: fix possible reclaim races efi/arm: Revert deferred unmap of early memmap mapping powerpc/numa: Suppress "VPHN is not supported" messages NFSv4: Fix an Oops during delegation callbacks kdb: Use strscpy with destination buffer size drm/amdgpu: fix bug with IH ring setup RISC-V: Silence some module warnings on 32-bit riscv: add missing vdso_install target SUNRPC: Fix a bogus get/put in generic_key_to_expire() block: copy ioprio in __bio_clone_fast() and bounce perf/x86/intel/uncore: Add more IMC PCI IDs for KabyLake and CoffeeLake CPUs sched/fair: Fix cpu_util_wake() for 'execl' type workloads powerpc/io: Fix the IO workarounds code to work with Radix floppy: fix race condition in __floppy_read_block_0() crypto: simd - correctly take reqsize of wrapped skcipher into account rtc: pcf2127: fix a kmemleak caused in pcf2127_i2c_gather_write rtc: cmos: Do not export alarm rtc_ops when we do not support alarms cpufreq: imx6q: add return value check for voltage scale KVM: PPC: Move and undef TRACE_INCLUDE_PATH/FILE scsi: hisi_sas: Remove set but not used variable 'dq_list' scsi: lpfc: fix remoteport access tools/testing/nvdimm: Fix the array size for dimm devices. pinctrl: meson: fix meson8b ao pull register bits pinctrl: meson: fix meson8 ao pull register bits pinctrl: meson: fix gxl ao pull register bits pinctrl: meson: fix gxbb ao pull register bits pinctrl: meson: fix pinconf bias disable fanotify: fix handling of events on child sub-directory fsnotify: generalize handling of extra event flags IB/hfi1: Eliminate races in the SDMA send error path ACPICA: AML interpreter: add region addresses in global list during initialization can: flexcan: remove not needed struct flexcan_priv::tx_mb and struct flexcan_priv::tx_mb_idx can: flexcan: Always use last mailbox for TX can: hi311x: Use level-triggered interrupt can: raw: check for CAN FD capable netdev in raw_sendmsg() can: flexcan: handle tx-complete CAN frames via rx-offload infrastructure can: flexcan: use can_rx_offload_queue_sorted() for flexcan_irq_bus_*() can: rx-offload: rename can_rx_offload_irq_queue_err_skb() to can_rx_offload_queue_tail() can: rx-offload: introduce can_rx_offload_get_echo_skb() and can_rx_offload_queue_sorted() functions can: dev: __can_get_echo_skb(): print error message, if trying to echo non existing skb can: dev: __can_get_echo_skb(): Don't crash the kernel if can_priv::echo_skb is accessed out of bounds can: dev: __can_get_echo_skb(): replace struct can_frame by canfd_frame to access frame length can: dev: can_get_echo_skb(): factor out non sending code to __can_get_echo_skb() can: flexcan: Unlock the MB unconditionally drm/ast: Remove existing framebuffers before loading driver drm/ast: fixed cursor may disappear sometimes drm/ast: change resolution may cause screen blurred drm/i915: Disable LP3 watermarks on all SNB machines drm/amdgpu: Fix oops when pp_funcs->switch_power_profile is unset drm/vc4: Set ->legacy_cursor_update to false when doing non-async updates drm/amdgpu: Add missing firmware entry for HAINAN drm/fb-helper: Blacklist writeback when adding connectors to fbdev tcp: do not release socket ownership in tcp_close() mm/memory.c: recheck page table entry with page table lock held mm: don't warn about large allocations for slab llc: do not use sk_eat_skb() gfs2: Don't leave s_fs_info pointing to freed memory in init_sbd sctp: clear the transport of some out_chunk_list chunks in sctp_assoc_rm_peer bfs: add sanity check at bfs_fill_super() Input: synaptics - avoid using uninitialized variable when probing selinux: Add __GFP_NOWARN to allocation at str_read() v9fs_dir_readdir: fix double-free on p9stat_read error tools/power/cpupower: fix compilation with STATIC=true opp: ti-opp-supply: Correct the supply in _get_optimal_vdd_voltage call opp: ti-opp-supply: Dynamically update u_volt_min brcmfmac: fix reporting support for 160 MHz channels iwlwifi: mvm: don't use SAR Geo if basic SAR is not used iwlwifi: mvm: fix regulatory domain update when the firmware starts iwlwifi: mvm: support sta_statistics() even on older firmware iwlwifi: fix wrong WGDS_WIFI_DATA_SIZE gpio: don't free unallocated ida on gpiochip_add_data_with_key() error path mmc: sdhci-pci: Workaround GLK firmware failing to restore the tuning value mmc: sdhci-pci: Try "cd" for card-detect lookup before using NULL Documentation/security-bugs: Postpone fix publication in exceptional cases Documentation/security-bugs: Clarify treatment of embargoed information MAINTAINERS: Add Sasha as a stable branch maintainer ALSA: oss: Use kvzalloc() for local buffer allocations usb: xhci: Prevent bus suspend if a port connect change or polling state is detected xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc usb: xhci: fix timeout for transition from RExit to U0 usb: xhci: fix uninitialized completion when USB3 port got wrong status xhci: Add check for invalid byte size error when UAS devices are connected. xhci: handle port status events for removed USB3 hcd xhci: Fix leaking USB3 shared_hcd at xhci removal usb: dwc3: Fix NULL pointer exception in dwc3_pci_remove() usb: dwc3: core: Clean up ULPI device usb: dwc3: gadget: Properly check last unaligned/zero chain TRB usb: dwc3: gadget: fix ISOC TRB type on unaligned transfers usb: core: Fix hub port connection events lost efi/libstub: arm: support building with clang HID: steam: remove input device when a hid client is running. Linux 4.19.5 mt76x0: run vco calibration for each channel configuration libceph: fall back to sendmsg for slab pages HID: Add quirk for Microsoft PIXART OEM mouse HID: Add quirk for Primax PIXART OEM mice HID: uhid: forbid UHID_CREATE under KERNEL_DS or elevated privileges ACPI / platform: Add SMB0001 HID to forbidden_id_list drivers/misc/sgi-gru: fix Spectre v1 vulnerability mtd: rawnand: atmel: fix OF child-node lookup gnss: sirf: fix synchronous write timeout gnss: serial: fix synchronous write timeout USB: misc: appledisplay: add 20" Apple Cinema Display misc: atmel-ssc: Fix section annotation on atmel_ssc_get_driver_data usb: quirks: Add delay-init quirk for Corsair K70 LUX RGB USB: Wait for extra delay time after USB_PORT_FEAT_RESET for quirky hub USB: quirks: Add no-lpm quirk for Raydium touchscreens usb: cdc-acm: add entry for Hiro (Conexant) modem can: kvaser_usb: Fix potential uninitialized variable use can: kvaser_usb: Fix accessing freed memory in kvaser_usb_start_xmit() ALSA: hda/ca0132 - Call pci_iounmap() instead of iounmap() ALSA: hda/realtek - Add quirk entry for HP Pavilion 15 uio: Fix an Oops on load RISC-V: Fix raw_copy_{to,from}_user() MIPS: OCTEON: cavium_octeon_defconfig: re-enable OCTEON USB driver media: v4l: event: Add subscription to list before calling "add" operation x86/ldt: Remove unused variable in map_ldt_struct() x86/ldt: Unmap PTEs for the slot before freeing LDT pages x86/mm: Move LDT remap out of KASLR region on 5-level paging SUNRPC: drop pointless static qualifier in xdr_get_next_encode_buffer() Revert "scripts/setlocalversion: git: Make -dirty check more robust" kbuild: deb-pkg: fix too low build version number net: aquantia: invalid checksumm offload implementation net: aquantia: fixed enable unicast on 32 macvlan net: aquantia: fix potential IOMMU fault after driver unbind net: stmmac: Fix RX packet size > 8191 qed: Fix potential memory corruption qed: Fix SPQ entries not returned to pool in error flows qed: Fix blocking/unlimited SPQ entries leak qed: Fix memory/entry leak in qed_init_sp_request() i40e: restore NETIF_F_GSO_IPXIP[46] to netdev features ice: Change req_speeds to be u16 ice: Fix the bytecount sent to netdev_tx_sent_queue ice: Fix dead device link issue with flow control perf tools: Do not zero sample_id_all for group members perf tools: Fix undefined symbol scnprintf in libperf-jvmti.so sched/core: Take the hotplug lock in sched_init_smp() i2c: qcom-geni: Fix runtime PM mismatch with child devices i2c: omap: Enable for ARCH_K3 nvme: make sure ns head inherits underlying device limits of/device: Really only set bus DMA mask when appropriate ceph: quota: fix null pointer dereference in quota check s390/perf: Change CPUM_CF return code in event init function drm/amd/amdgpu/dm: Fix dm_dp_create_fake_mst_encoder() drm/amd/display: Drop reusing drm connector for MST block: Clear kernel memory before copying to user drm/amd/display: Stop leaking planes lib/raid6: Fix arm64 test build mtd: nand: Fix nanddev_pos_next_page() kernel-doc header clk: fixed-factor: fix of_node_get-put imbalance xen/grant-table: Fix incorrect gnttab_dma_free_pages() pr_debug message arm64: dts: renesas: condor: switch from EtherAVB to GEther arm64: dts: renesas: r8a7795: add missing dma-names on hscif2 Revert "drm/exynos/decon5433: implement frame counter" ARM: dts: fsl: Fix improperly quoted stdout-path values ARM: dts: imx6sll: fix typo for fsl,imx6sll-i2c node hwmon: (ibmpowernv) Remove bogus __init annotations net: hns3: Fix for out-of-bounds access when setting pfc back pressure s390/qeth: unregister netdevice only when registered s390/qeth: fix HiperSockets sniffer netfilter: nft_compat: ebtables 'nat' table is normal chain type netfilter: ipset: Fix calling ip_set() macro at dumping netfilter: xt_IDLETIMER: add sysfs filename checking routine netfilter: ipset: Correct rcu_dereference() call in ip_set_put_comment() bpf: fix bpf_prog_get_info_by_fd to return 0 func_lens for unpriv s390/mm: Fix ERROR: "__node_distance" undefined! s390/mm: fix mis-accounting of pgtable_bytes netfilter: ipset: fix ip_set_list allocation failure netfilter: ipset: actually allow allowable CIDR 0 in hash:net,port,net netfilter: ipset: list:set: Decrease refcount synchronously on deletion and replace Revert "netfilter: nft_numgen: add map lookups for numgen random operations" HID: alps: allow incoming reports when only the trackstick is opened Revert "HID: add NOGET quirk for Eaton Ellipse MAX UPS" HID: i2c-hid: Add a small delay after sleep command for Raydium touchpanel s390/vdso: add missing FORCE to build targets s390/decompressor: add missing FORCE to build targets netfilter: bridge: define INT_MIN & INT_MAX in userspace netfilter: ipv6: fix oops when defragmenting locally generated fragments serial: sh-sci: Fix receive on SCIFA/SCIFB variants with DMA clk: ti: fix OF child-node lookup clk: renesas: r9a06g032: Fix UART34567 clock rate clk: meson: clk-pll: drop CLK_GET_RATE_NOCACHE where unnecessary arm64: percpu: Initialize ret in the default case clk: meson-axg: pcie: drop the mpll3 clock parent platform/x86: acerhdf: Add BIOS entry for Gateway LT31 v1.3307 x86/earlyprintk: Add a force option for pciserial device apparmor: Fix uninitialized value in aa_split_fqname clk: samsung: exynos5420: Enable PERIS clocks for suspend fs/exofs: fix potential memory leak in mount option parsing perf symbols: Set PLT entry/header sizes properly on Sparc clk: fixed-rate: fix of_node_get-put imbalance platform/x86: intel_telemetry: report debugfs failure afs: Handle EIO from delivery function drm/edid: Add 6 bpc quirk for BOE panel. um: Give start_idle_thread() a return code perf unwind: Take pgoff into account when reporting elf to libdwfl hfsplus: prevent btree data loss on root split hfs: prevent btree data loss on root split reiserfs: propagate errors from fill_with_dentries() properly ixgbe: fix MAC anti-spoofing filter after VFLR net: hns3: bugfix for the initialization of command queue's spin lock net: hns3: bugfix for handling mailbox while the command queue reinitialized net: hns3: bugfix for rtnl_lock's range in the hclge_reset() net: hns3: bugfix for rtnl_lock's range in the hclgevf_reset() block: brd: associate with queue until adding disk arm64: kprobe: make page to RO mode when allocate it cifs: fix return value for cifs_listxattr cifs: don't dereference smb_file_target before null check drm/i915: Replace some PAGE_SIZE with I915_GTT_PAGE_SIZE f2fs: fix to keep project quota consistent f2fs: guarantee journalled quota data by checkpoint f2fs: cleanup dirty pages if recover failed f2fs: fix data corruption issue with hardware encryption f2fs: fix to recover inode->i_flags of inode block during POR f2fs: spread f2fs_set_inode_flags() f2fs: fix to spread clear_cold_data() Revert "f2fs: fix to clear PG_checked flag in set_page_dirty()" f2fs: account read IOs and use IO counts for is_idle f2fs: fix to account IO correctly for cgroup writeback f2fs: fix to account IO correctly f2fs: remove request_list check in is_idle() f2fs: allow to mount, if quota is failed f2fs: update REQ_TIME in f2fs_cross_rename() f2fs: do not update REQ_TIME in case of error conditions f2fs: remove unneeded disable_nat_bits() f2fs: remove unused sbi->trigger_ssr_threshold f2fs: shrink sbi->sb_lock coverage in set_file_temperature() f2fs: use rb_*_cached friends f2fs: fix to recover cold bit of inode block during POR f2fs: submit cached bio to avoid endless PageWriteback f2fs: checkpoint disabling f2fs: clear PageError on the read path f2fs: allow out-place-update for direct IO in LFS mode f2fs: refactor ->page_mkwrite() flow Revert: "f2fs: check last page index in cached bio to decide submission" f2fs: support superblock checksum f2fs: add to account skip count of background GC f2fs: add to account meta IO f2fs: keep lazytime on remount f2fs: fix missing up_read f2fs: return correct errno in f2fs_gc f2fs: avoid f2fs_bug_on if f2fs_get_meta_page_nofail got EIO f2fs: mark inode dirty explicitly in recover_inode() f2fs: fix to recover inode's crtime during POR f2fs: fix to recover inode's i_gc_failures during POR f2fs: fix to recover inode's i_flags during POR f2fs: fix to recover inode's project id during POR f2fs: update i_size after DIO completion f2fs: report ENOENT correctly in f2fs_rename f2fs: fix remount problem of option io_bits f2fs: fix to recover inode's uid/gid during POR f2fs: avoid infinite loop in f2fs_alloc_nid f2fs: add new idle interval timing for discard and gc paths f2fs: split IO error injection according to RW f2fs: add SPDX license identifiers f2fs: surround fault_injection related option parsing using CONFIG_F2FS_FAULT_INJECTION f2fs: fix setattr project check upon fssetxattr ioctl f2fs: avoid sleeping under spin_lock f2fs: plug readahead IO in readdir() f2fs: fix to do sanity check with current segment number f2fs: fix memory leak of percpu counter in fill_super() f2fs: fix memory leak of write_io in fill_super() f2fs: cache NULL when both default_acl and acl are NULL f2fs: fix to flush all dirty inodes recovered in readonly fs f2fs: report error if quota off error during umount f2fs: submit bio after shutdown f2fs: avoid wrong decrypted data from disk Revert "f2fs: use printk_ratelimited for f2fs_msg" f2fs: fix unnecessary periodic wakeup of discard thread when dev is busy f2fs: fix to avoid NULL pointer dereference on se->discard_map f2fs: add additional sanity check in f2fs_acl_from_disk() ANDROID: arm64: defconfig: Enable CONFIG_SCHED_TUNE ANDROID: thermal: cpu_cooling: Migrate to using the EM framework ANDROID: Add hold functionality to schedtune CPU boost ANDROID: sched/rt: Add schedtune accounting to rt task enqueue/dequeue ANDROID: sched: Make the cpu_util* accessors available without sugov ANDROID: sched/events: Introduce overutilized trace event ANDROID: sched/events: Introduce rt_rq load tracking trace event ANDROID: sched/events: Introduce schedtune trace events ANDROID: sched/events: Introduce find_best_target trace event ANDROID: sched/events: Introduce util_est trace events ANDROID: sched/events: Introduce task_group load tracking trace event ANDROID: sched/events: Introduce sched_entity load tracking trace event ANDROID: sched/events: Introduce cfs_rq load tracking trace event ANDROID: sched/autogroup: Define autogroup_path() for !CONFIG_SCHED_DEBUG ANDROID: sched/fair: Also do misfit in overloaded groups ANDROID: sched/fair: Don't balance misfits if it would overload local group ANDROID: sched/fair: Attempt to improve throughput for asym cap systems ANDROID: cpufreq/schedutil: add up/down frequency transition rate limits ANDROID: cpufreq/schedutil: Select frequency using util_avg for RT ANDROID: sched: Update max cpu capacity in case of max frequency constraints ANDROID: arm: enable max frequency capping ANDROID: arm64: enable max frequency capping ANDROID: implement max frequency capping ANDROID: sched/fair: add arch scaling function for max frequency capping ANDROID: sched/fair: Bypass energy computation for prefer_idle tasks ANDROID: sched: fair: Bypass energy-aware wakeup for prefer-idle tasks FROMLIST: sched/fair: Use wake_q length as a hint for wake_wide ANDROID: sched: Unconditionally honor sync flag for energy-aware wakeups ANDROID: Add find_best_target to minimise energy calculation overhead ANDROID: sched/fair: Factor out CPU selection from find_energy_efficient_cpu ANDROID: sched: Introduce sysctl_sched_cstate_aware ANDROID: sched, cpuidle: Track cpuidle state index in the scheduler ANDROID: sched: fair/tune: Add schedtune with cgroups interface ANDROID: drivers: Introduce a legacy Energy Model loading driver ANDROID: cpufreq: scmi: Register an Energy Model UPSTREAM: firmware: arm_scmi: add a getter for power of performance states ANDROID: cpufreq: arm_big_little: Register an Energy Model ANDROID: cpufreq: scpi: Register an Energy Model ANDROID: PM / OPP: cpufreq-dt: Move power estimation function FROMLIST: cpufreq: dt: Register an Energy Model ANDROID: arm: dts: vexpress-v2p-ca15_a7: Add dynamic-power-coefficient properties ANDROID: arm64: dts: juno-r2: Add dynamic-power-coefficient properties ANDROID: arm64: dts: juno: Add dynamic-power-coefficient properties ANDROID: arm, arm64: Enable kernel config options required for EAS ANDROID: sched: Enable idle balance to pull single task towards cpu with higher capacity ANDROID: sched: Prevent unnecessary active balance of single task in sched group FROMLIST: sched/fair: Select an energy-efficient CPU on task wake-up FROMLIST: sched/fair: Introduce an energy estimation helper function FROMLIST: sched: Add over-utilization/tipping point indicator FROMLIST: sched/fair: Clean-up update_sg_lb_stats parameters FROMLIST: sched: Introduce a sysctl for Energy Aware Scheduling FROMLIST: sched: Introduce sched_energy_present static key FROMLIST: sched/topology: Make Energy Aware Scheduling depend on schedutil FROMLIST: sched/topology: Disable EAS on inappropriate platforms FROMLIST: sched/topology: Lowest CPU asymmetry sched_domain level pointer FROMLIST: sched/topology: Reference the Energy Model of CPUs when available FROMLIST: PM / EM: Expose the Energy Model in sysfs FROMLIST: PM: Introduce an Energy Model management framework FROMLIST: sched/cpufreq: Prepare schedutil for Energy Aware Scheduling FROMLIST: sched: Relocate arch_scale_cpu_capacity UPSTREAM: sched/core: Disable SD_PREFER_SIBLING on asymmetric CPU capacity domains UPSTREAM: sched/fair: Don't move tasks to lower capacity CPUs unless necessary UPSTREAM: sched/fair: Set rq->rd->overload when misfit UPSTREAM: sched/fair: Wrap rq->rd->overload accesses with READ/WRITE_ONCE() UPSTREAM: sched/core: Change root_domain->overload type to int UPSTREAM: sched/fair: Change 'prefer_sibling' type to bool UPSTREAM: sched/fair: Kick nohz balance if rq->misfit_task_load UPSTREAM: sched/fair: Consider misfit tasks when load-balancing UPSTREAM: sched/fair: Add sched_group per-CPU max capacity UPSTREAM: sched/fair: Add 'group_misfit_task' load-balance type UPSTREAM: sched/topology: Add static_key for asymmetric CPU capacity optimizations UPSTREAM: sched/topology, arch/arm: Rebuild sched_domain hierarchy when CPU capacity changes UPSTREAM: sched/topology, arch/arm64: Rebuild the sched_domain hierarchy when the CPU capacity changes UPSTREAM: sched/topology, drivers/base/arch_topology: Rebuild the sched_domain hierarchy when capacities change UPSTREAM: sched/topology: Add SD_ASYM_CPUCAPACITY flag detection Change-Id: I19fafa34b3fd39c4125708cb5c9c5a7634c40ec4 Signed-off-by: Rishabh Bhatnagar <rishabhb@codeaurora.org>	2018-12-20 17:43:16 -08:00
Mathias Payer	1b2e742bf7	USB: check usb_get_extra_descriptor for proper size ... commit 704620afc70cf47abb9d6a1a57f3825d2bca49cf upstream. When reading an extra descriptor, we need to properly check the minimum and maximum size allowed, to prevent from invalid data being sent by a device. Reported-by: Hui Peng <benquike@gmail.com> Reported-by: Mathias Payer <mathias.payer@nebelwelt.net> Co-developed-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Hui Peng <benquike@gmail.com> Signed-off-by: Mathias Payer <mathias.payer@nebelwelt.net> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Cc: stable <stable@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2018-12-13 09:16:15 +01:00
Hemant Kumar	1f64d4e3b5	usb: core: Add support to parse config summary capability descriptors ... USB 3.2 Specification updated configuration summary descriptor different from drafted version. This descriptor is needed per function. Descriptor provides list of configuration indices that include that function. Use bcdVersion to handle spec compliant descriptor and select device preferred config supporting UAC3 or lower revision. Change-Id: I7cf28eaf61ca91496be84d90ad00704fe4acb149 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org>	2018-11-20 12:30:32 -08:00
Hemant Kumar	106c645a79	usb: Add helper API to issue stop endpoint command ... This API is used to issue stop endpoint command on requested endpoint in order to retire all active TRBs in the transfer ring. Change-Id: I312772367a2cd293982a66ea8b75e04a8b1f2fd0 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org>	2018-11-13 14:17:32 -08:00
Hemant Kumar	e97aab2199	usb: core: Drive resume for 20ms for devices behind external hub ... skip_extended_resume_delay module parameter is completely skipping delay required to drive bus resume for devices behind the external hub(s). This is causing resume failure for the device. Fix the issue by driving resume for 20ms. Change-Id: I13ba8094c7eab119f1d41ebc9e15c9aa91096201 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org>	2018-11-12 16:41:43 -08:00
Hemant Kumar	3e3d0ab182	usb: Add support to handle USB SMMU S1 address ... Update helper APIs to return physical address as well as USB SMMU stage 1 address. Physical address is used to map it to iova for remote processor. S1 address is used by xHC. Get sg table containing one or mode page sized physical address corresponding to S1 address for event ring, xfer ring and xfer buffers using dma_get_sgtable(). Accordingly update QMI response buffer for XHCI event ring, xfer ring memory info and xfer buffer. Change-Id: I6c9ea39d8a87a5bdc5a760d2a1ca85ab3024d985 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> Signed-off-by: Mayank Rana <mrana@codeaurora.org>	2018-11-12 16:41:40 -08:00
Hemant Kumar	b8360b2a98	usb: core: Remove helper APIs returning dcba dma address ... Since dcba dma address is not required by class driver therefore remove the API definitions. Change-Id: I2623cf3bf406ca0d47ea2549b5163d9e9b7351a1 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> Signed-off-by: Mayank Rana <mrana@codeaurora.org>	2018-11-12 16:41:14 -08:00
Hemant Kumar	f906c280ee	usb: core: Add helper function to return controller id ... Function provides controller id used by a remote entity to identify which usb controller to program to initiate data transfer. Change-Id: Ied396f34496104c139a7910ee86844c124e6803f Signed-off-by: Hemant Kumar <hemantk@codeaurora.org>	2018-11-12 14:54:27 -08:00
Hemant Kumar	787b74a487	usb: xhci: Add helper APIs to return xhci dma addresses ... dma address of secondary event ring, transfer ring and device context base address are required to pass to remote entity. Remote entity uses these addresses to program xhci controller registers. Change-Id: Ie0756d646a396a11b41b93e886bca9aff636ee5d Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> Signed-off-by: Jack Pham <jackp@codeaurora.org>	2018-11-12 14:41:17 -08:00
Hemant Kumar	8d48fb820f	usb: xhci: Add support for secondary interrupters ... Implement APIs to dynamically allocate and free secondary event rings based upon interrupter number. Also add exported APIs in usb core layer which allows secondary event ring management via remote processor entity. Change-Id: I5ee7d44d6cad8e35e22d3c1a027a1eec5d208585 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> Signed-off-by: Jack Pham <jackp@codeaurora.org> Signed-off-by: Mayank Rana <mrana@codeaurora.org>	2018-11-12 14:39:54 -08:00
Manu Gautam	b31fc5d204	usb: hcd: Add USB atomic notifier callback for HC died error ... Add support for USB atomic notifier callbacks when host controller drivers reports death of controller on some fatal error. Current implementation doesn't help to recover from this condition. Controller platform drivers can register for this callback and take necessary steps to reset and add hcd again. CRs-fixed: 1048766 Change-Id: Ie9064e669424096fee8c35cddccab29faf60cc6b Signed-off-by: Manu Gautam <mgautam@codeaurora.org>	2018-08-09 15:57:54 -07:00
Nicolas Boichat	aa071a92bb	usb: hub: Per-port setting to reduce TRSTRCY to 10 ms ... Currently, the USB hub core waits for 50 ms after enumerating the device. This was added to help "some high speed devices" to enumerate (b789696af8 "[PATCH] USB: relax usbcore reset timings"). On some devices, the time-to-active is important, so we provide a per-port option to reduce the time to what the USB specification requires: 10 ms. Signed-off-by: Nicolas Boichat <drinkcat@chromium.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2018-05-31 12:48:17 +02:00
Nicolas Boichat	2524422715	usb: hub: Per-port setting to use old enumeration scheme ... The "old" enumeration scheme is considerably faster (it takes ~244ms instead of ~356ms to get the descriptor). It is currently only possible to use the old scheme globally (/sys/module/usbcore/parameters/old_scheme_first), which is not desirable as the new scheme was introduced to increase compatibility with more devices. However, in our case, we care about time-to-active for a specific USB device (which we make the firmware for), on a specific port (that is pogo-pin based: not a standard USB port). This new sysfs option makes it possible to use the old scheme on a single port only. Signed-off-by: Nicolas Boichat <drinkcat@chromium.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2018-05-31 12:48:17 +02:00
Mathias Nyman	013eedb8c5	USB: Add support to store lane count used by USB 3.2 ... USB 3.2 specification adds Dual-lane support, doubling the maximum SuperSpeedPlus data rate from 10Gbps to 20Gbps. Dual-lane takes into use a second set of rx and tx wires/pins in the Type-C cable and connector. Add "rx_lanes" and "tx_lanes" variables to struct usb_device to store the numer of lanes in use. Number of lanes can be read using the extended port status hub request that was introduced in USB 3.1. Extended port status rx and tx lane count are zero based, maximum lanes supported by non inter-chip (SSIC) USB 3.2 is 2 (dual lane) with rx and tx lane count symmetric. SSIC devices support asymmetric lanes up to 4 lanes per direction. If extended port status is not available then default to one lane. Signed-off-by: Mathias Nyman <mathias.nyman@linux.intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2018-04-22 16:11:19 +02:00
Felipe Balbi	886ee36e72	usb: core: add support for USB_REQ_SET_ISOCH_DELAY ... USB SS and SSP hubs provide wHubDelay values on their hub descriptor which we should inform the USB Device about. The USB Specification 3.0 explains, on section 9.4.11, how to calculate the value and how to issue the request. Note that a USB_REQ_SET_ISOCH_DELAY is valid on all device states (Default, Address, Configured), we just *chose* to issue it from Address state right after successfully fetching the USB Device Descriptor. Signed-off-by: Felipe Balbi <felipe.balbi@linux.intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2017-12-15 20:45:43 +01:00
Alan Stern	aa15d3d257	USB: remove the URB_NO_FSBR flag ... The URB_NO_FSBR flag has never really been used. It was introduced as a potential way for UHCI to minimize PCI bus usage (by not attempting full-speed bulk and control transfers more than once per frame), but the flag was not set by any drivers. There's no point in keeping it around. This patch simplifies the API by removing it. Unfortunately, it does have to be kept as part of the usbfs ABI, but at least we can document in include/uapi/linux/usbdevice_fs.h that it doesn't do anything. Signed-off-by: Alan Stern <stern@rowland.harvard.edu> Acked-by: Shuah Khan <shuahkh@osg.samsung.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2017-12-12 13:16:07 +01:00
Linus Torvalds	4e4510fec4	Merge tag 'sound-4.15-rc1' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/tiwai/sound ... Pull sound updates from Takashi Iwai: "There are no big surprising changes in this cycle, yet not too boring, either. The biggest change from diffstat POV is the removal of the legacy OSS driver codes that have been already disabled for a long time. This will bring a few trivial merge conflicts. As new features in ASoC side, there are two things: a new AC97 bus implementation and AMD Stony platform support. Both include the relevant changes shared with other subsystems, e.g. AC97 MFD changes and DRM AMD changes. Some other highlighted topics are: - A bunch of USB-audio drivers got the hardening against the malicious device accesses with a new helper code for endpoint sanity check - Lots of cleanups for ASoC Intel platform code, including support for their open source audio firmware - Continued ASoC core componentization works - Support for scaling MCLK with sample rate in ASoC simple-card - Stabler PCM hot-unplug capability, especially for ASoC usages" * tag 'sound-4.15-rc1' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/tiwai/sound: (302 commits) Documentation: sound: hd-audio: notes.rst ASoC: bcm2835: Support left/right justified and DSP modes ASoC: bcm2835: Enforce full symmetry ASoC: bcm2835: Support additional samplerates up to 384kHz ASoC: bcm2835: Add support for TDM modes ASoC: add mclk-fs support to audio graph card ASoC: add mclk-fs to audio graph card binding ASoC: rt5514: work around link error ASoC: rt5514: mark PM functions as __maybe_unused ASoC: rt5663: Check the JD status in the button pushing ASoC: amd: Modified DMA transfer Mechanism for Playback ASoC: rt5645: Wait for 400msec before concluding on value of RT5645_VENDOR_ID2 ASoC: sun4i-codec: fixed 32bit audio capture support for H3/H2+ ASoC: da7213: add support for DSP modes ASoC: sun8i-codec: Add a comment on the LRCK inversion ASoC: sun8i-codec: Set the BCLK divider ASoC: rt5663: Delay and retry reading rt5663 ID register ASoC: amd: use do_div rather than 64 bit division to fix 32 bit builds ASoC: cs42l56: Fix reset GPIO name in example DT binding ASoC: rt5514-spi: check irq status to schedule data copy in resume function ...	2017-11-14 18:01:46 -08:00
Linus Torvalds	894025f24b	Merge tag 'usb-4.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb ... Pull USB/PHY updates from Greg KH: "Here is the big set of USB and PHY driver updates for 4.15-rc1. There is the usual amount of gadget and xhci driver updates, along with phy and chipidea enhancements. There's also a lot of SPDX tags and license boilerplate cleanups as well, which provide some churn in the diffstat. Other major thing is the typec code that moved out of staging and into the "real" part of the drivers/usb/ tree, which was nice to see happen. All of these have been in linux-next with no reported issues for a while" * tag 'usb-4.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb: (263 commits) usb: gadget: f_fs: Fix use-after-free in ffs_free_inst USB: usbfs: compute urb->actual_length for isochronous usb: core: message: remember to reset 'ret' to 0 when necessary USB: typec: Remove remaining redundant license text USB: typec: add SPDX identifiers to some files USB: renesas_usbhs: rcar?.h: add SPDX tags USB: chipidea: ci_hdrc_tegra.c: add SPDX line USB: host: xhci-debugfs: add SPDX lines USB: add SPDX identifiers to all remaining Makefiles usb: host: isp1362-hcd: remove a couple of redundant assignments USB: adutux: remove redundant variable minor usb: core: add a new usb_get_ptm_status() helper usb: core: add a 'type' parameter to usb_get_status() usb: core: introduce a new usb_get_std_status() helper usb: core: rename usb_get_status() 'type' argument to 'recip' usb: core: add Status Type definitions USB: gadget: Remove redundant license text USB: gadget: function: Remove redundant license text USB: gadget: udc: Remove redundant license text USB: gadget: legacy: Remove redundant license text ...	2017-11-13 21:14:07 -08:00
Takashi Iwai	76727c2c3b	Merge tag 'asoc-v4.15' of https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linus ... ASoC: Updates for v4.15 The biggest thing this release has been the conversion of the AC98 bus to the driver model, that's been a long time coming so thanks to Robert Jarzmik for his dedication there. Due to there being some AC97 MFD there's a few fairly large changes in input and the MFD layer, mainly to the wm97xx driver. There's also some drivers/drm changes to support the new AMD Stoney platform, these are shared with the DRM subsystem and should be being merged via both. Within the subsystem the overwhelming bulk of the changes is in the Intel drivers which continue to need lots of cleanups and fixes, this release they've also gained support for their open source firmware. There's also some large changs in the core as Morimoto-san continues to mirror operations into the component level in preparation for conversion of drivers to that. - The AC97 bus has finally caught up with the driver model thanks to some dedicated and persistent work from Robert Jarzmik. - Continued work from Morimoto-san on moving us towards being able to use components for everything. - Lots of cleanups for the Intel platform code, including support for their open source audio firmware. - Support for scaling MCLK with sample rate in simple-card. - Support for AMD Stoney platform.	2017-11-13 15:45:57 +01:00
Felipe Balbi	f8f3e4acbd	usb: core: add a new usb_get_ptm_status() helper ... Drivers who are interested in the PTM status stype, should use this new helper to make sure they issue the correct GetStatus message. Signed-off-by: Felipe Balbi <felipe.balbi@linux.intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2017-11-07 15:47:20 +01:00
Felipe Balbi	2e43f0fe37	usb: core: add a 'type' parameter to usb_get_status() ... This new 'type' parameter will allows interested drivers to request for PTM status or Standard status. Signed-off-by: Felipe Balbi <felipe.balbi@linux.intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2017-11-07 15:47:20 +01:00
Felipe Balbi	d9e1e1484a	usb: core: introduce a new usb_get_std_status() helper ... This new helper is a simple wrapper around usb_get_status(). This patch is in preparation to adding support for fetching PTM_STATUS types. No functional changes. Signed-off-by: Felipe Balbi <felipe.balbi@linux.intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2017-11-07 15:47:19 +01:00
Felipe Balbi	3c377ef100	usb: core: rename usb_get_status() 'type' argument to 'recip' ... This makes it a lot clearer that we're expecting a recipient as the argument. A follow-up patch will use the argument 'type' as the status type selector (standard or ptm). Signed-off-by: Felipe Balbi <felipe.balbi@linux.intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2017-11-07 15:47:19 +01:00
Greg Kroah-Hartman	b24413180f	License cleanup: add SPDX GPL-2.0 license identifier to files with no license ... Many source files in the tree are missing licensing information, which makes it harder for compliance tools to determine the correct license. By default all files without license information are under the default license of the kernel, which is GPL version 2. Update the files which contain no license information with the 'GPL-2.0' SPDX license identifier. The SPDX identifier is a legally binding shorthand, which can be used instead of the full boiler plate text. This patch is based on work done by Thomas Gleixner and Kate Stewart and Philippe Ombredanne. How this work was done: Patches were generated and checked against linux-4.14-rc6 for a subset of the use cases: - file had no licensing information it it. - file was a */uapi/* one with no licensing information in it, - file was a */uapi/* one with existing licensing information, Further patches will be generated in subsequent months to fix up cases where non-standard license headers were used, and references to license had to be inferred by heuristics based on keywords. The analysis to determine which SPDX License Identifier to be applied to a file was done in a spreadsheet of side by side results from of the output of two independent scanners (ScanCode & Windriver) producing SPDX tag:value files created by Philippe Ombredanne. Philippe prepared the base worksheet, and did an initial spot review of a few 1000 files. The 4.13 kernel was the starting point of the analysis with 60,537 files assessed. Kate Stewart did a file by file comparison of the scanner results in the spreadsheet to determine which SPDX license identifier(s) to be applied to the file. She confirmed any determination that was not immediately clear with lawyers working with the Linux Foundation. Criteria used to select files for SPDX license identifier tagging was: - Files considered eligible had to be source code files. - Make and config files were included as candidates if they contained >5 lines of source - File already had some variant of a license header in it (even if <5 lines). All documentation files were explicitly excluded. The following heuristics were used to determine which SPDX license identifiers to apply. - when both scanners couldn't find any license traces, file was considered to have no license information in it, and the top level COPYING file license applied. For non */uapi/* files that summary was: SPDX license identifier # files ---------------------------------------------------|------- GPL-2.0 11139 and resulted in the first patch in this series. If that file was a */uapi/* path one, it was "GPL-2.0 WITH Linux-syscall-note" otherwise it was "GPL-2.0". Results of that was: SPDX license identifier # files ---------------------------------------------------|------- GPL-2.0 WITH Linux-syscall-note 930 and resulted in the second patch in this series. - if a file had some form of licensing information in it, and was one of the */uapi/* ones, it was denoted with the Linux-syscall-note if any GPL family license was found in the file or had no licensing in it (per prior point). Results summary: SPDX license identifier # files ---------------------------------------------------|------ GPL-2.0 WITH Linux-syscall-note 270 GPL-2.0+ WITH Linux-syscall-note 169 ((GPL-2.0 WITH Linux-syscall-note) OR BSD-2-Clause) 21 ((GPL-2.0 WITH Linux-syscall-note) OR BSD-3-Clause) 17 LGPL-2.1+ WITH Linux-syscall-note 15 GPL-1.0+ WITH Linux-syscall-note 14 ((GPL-2.0+ WITH Linux-syscall-note) OR BSD-3-Clause) 5 LGPL-2.0+ WITH Linux-syscall-note 4 LGPL-2.1 WITH Linux-syscall-note 3 ((GPL-2.0 WITH Linux-syscall-note) OR MIT) 3 ((GPL-2.0 WITH Linux-syscall-note) AND MIT) 1 and that resulted in the third patch in this series. - when the two scanners agreed on the detected license(s), that became the concluded license(s). - when there was disagreement between the two scanners (one detected a license but the other didn't, or they both detected different licenses) a manual inspection of the file occurred. - In most cases a manual inspection of the information in the file resulted in a clear resolution of the license that should apply (and which scanner probably needed to revisit its heuristics). - When it was not immediately clear, the license identifier was confirmed with lawyers working with the Linux Foundation. - If there was any question as to the appropriate license identifier, the file was flagged for further research and to be revisited later in time. In total, over 70 hours of logged manual review was done on the spreadsheet to determine the SPDX license identifiers to apply to the source files by Kate, Philippe, Thomas and, in some cases, confirmation by lawyers working with the Linux Foundation. Kate also obtained a third independent scan of the 4.13 code base from FOSSology, and compared selected files where the other two scanners disagreed against that SPDX file, to see if there was new insights. The Windriver scanner is based on an older version of FOSSology in part, so they are related. Thomas did random spot checks in about 500 files from the spreadsheets for the uapi headers and agreed with SPDX license identifier in the files he inspected. For the non-uapi files Thomas did random spot checks in about 15000 files. In initial set of patches against 4.14-rc6, 3 files were found to have copy/paste license identifier errors, and have been fixed to reflect the correct identifier. Additionally Philippe spent 10 hours this week doing a detailed manual inspection and review of the 12,461 patched files from the initial patch version early this week with: - a full scancode scan run, collecting the matched texts, detected license ids and scores - reviewing anything where there was a license detected (about 500+ files) to ensure that the applied SPDX license was correct - reviewing anything where there was no detection but the patch license was not GPL-2.0 WITH Linux-syscall-note to ensure that the applied SPDX license was correct This produced a worksheet with 20 files needing minor correction. This worksheet was then exported into 3 different .csv files for the different types of files to be modified. These .csv files were then reviewed by Greg. Thomas wrote a script to parse the csv files and add the proper SPDX tag to the file, in the format that the file expected. This script was further refined by Greg based on the output to detect more types of files automatically and to distinguish between header and source .c files (which need different comment types.) Finally Greg ran the script using the .csv files to generate the patches. Reviewed-by: Kate Stewart <kstewart@linuxfoundation.org> Reviewed-by: Philippe Ombredanne <pombredanne@nexb.com> Reviewed-by: Thomas Gleixner <tglx@linutronix.de> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2017-11-02 11:10:55 +01:00