merge-upstream/v6.12.67 from branch/tag: upstream/v6.12.67 into branch: cos-6.12
Changelog:
-------------------------------------------------------------
Aboorva Devarajan (1):
mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free
Aditya Garg (1):
net: hv_netvsc: reject RSS hash key programming without RX indirection table
Alan Liu (1):
drm/amdgpu: Fix query for VPE block_type and ip_count
Alex Deucher (1):
drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[]
Alexander Stein (2):
arm64: dts: mba8mx: Fix Ethernet PHY IRQ support
ASoC: fsl_sai: Add missing registers to cache default
Alexander Sverdlin (1):
counter: interrupt-cnt: Drop IRQF_NO_THREAD flag
Alexander Usyskin (1):
mei: me: add nova lake point S DID
Alexandre Knecht (1):
bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress
Alok Tiwari (1):
net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
Amery Hung (2):
bpf: Make variables in bpf_prog_test_run_xdp less confusing
bpf: Support specifying linear xdp packet data size for BPF_PROG_TEST_RUN
Andreas Gruenbacher (1):
Revert "gfs2: Fix use of bio_chain"
Andrew Elantsev (1):
ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025
Anthony Brandon (1):
dmaengine: xilinx: xdma: Fix regmap max_register
Antony Antony (1):
xfrm: set ipv4 no_pmtu_disc flag only on output sa when direction is set
Arnaud Ferraris (1):
tcpm: allow looking for role_sw device in the main node
Bagas Sanjaya (3):
mm: describe @flags parameter in memalloc_flags_save()
textsearch: describe @list member in ts_ops search
mm, kfence: describe @slab parameter in __kfence_obj_info()
Bartosz Golaszewski (2):
gpio: rockchip: mark the GPIO controller as sleeping
pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
Ben Dooks (1):
mm: numa,memblock: include <asm/numa.h> for 'numa_nodes_parsed'
Benjamin Tissoires (1):
HID: usbhid: paper over wrong bNumDescriptor field
Biju Das (1):
dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all()
Binbin Zhou (4):
LoongArch: dts: loongson-2k0500: Add default interrupt controller address cells
LoongArch: dts: loongson-2k1000: Add default interrupt controller address cells
LoongArch: dts: loongson-2k1000: Fix i2c-gpio node names
LoongArch: dts: loongson-2k2000: Add default interrupt controller address cells
Boris Burkov (1):
btrfs: fix qgroup_snapshot_quick_inherit() squota bug
Brian Foster (1):
xfs: set max_agbno to allow sparse alloc of last full inode chunk
Brian Kao (2):
scsi: ufs: core: Fix EH failure after W-LUN resume error
scsi: core: Fix error handler encryption support
Brian Kocoloski (1):
drm/amdkfd: Fix improper NULL termination of queue restore SMI event string
Bruno Faccini (2):
mm/fake-numa: allow later numa node hotplug
mm/fake-numa: handle cases with no SRAT info
Charlene Liu (1):
drm/amd/display: Fix DP no audio issue
ChenXiaoSong (3):
smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value
smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value
smb/client: fix NT_STATUS_NO_DATA_DETECTED value
Chuck Lever (1):
NFSD: Remove NFSERR_EAGAIN
Cole Leavitt (1):
ASoC: sdw_utils: cs42l43: Enable Headphone pin for LINEOUT jack type
Dan Carpenter (1):
phy: stm32-usphyc: Fix off by one in probe()
Dan Williams (1):
x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers
Di Zhu (1):
netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates
Dragan Simic (1):
phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path
Edward Adam Davis (1):
NFSD: net ref data still needs to be freed even if net hasn't startup
Emil Svendsen (2):
ASoC: tlv320adcx140: fix null pointer
ASoC: tlv320adcx140: fix word length
Emil Tantilov (2):
idpf: keep the netdev when a reset fails
idpf: fix memory leak in idpf_vport_rel()
Eric Biggers (1):
lib/crypto: aes: Fix missing MMU protection for AES S-box
Eric Dumazet (8):
wifi: avoid kernel-infoleak from struct iw_point
arp: do not assume dev_hard_header() does not change skb->head
net: bridge: annotate data-races around fdb->{updated,used}
ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
net: update netdev_lock_{type,name}
macvlan: fix possible UAF in macvlan_forward_source()
ipv4: ip_gre: make ipgre_header() robust
net/sched: sch_qfq: do not free existing class in qfq_change_class()
Ernest Van Hoecke (1):
gpio: pca953x: handle short interrupt pulses on PCAL devices
Ethan Nelson-Moore (1):
USB: serial: ftdi_sio: add support for PICAXE AXE027 cable
Fei Shao (1):
spi: mt65xx: Use IRQF_ONESHOT with threaded IRQ
Fernando Fernandez Mancera (2):
netfilter: nft_synproxy: avoid possible data-race on update operation
netfilter: nf_conncount: update last_gc only when GC has been performed
Filipe Manana (4):
btrfs: always detect conflicting inodes when logging inode refs
btrfs: tracepoints: use btrfs_root_id() to get the id of a root
btrfs: truncate ordered extent when skipping writeback past i_size
btrfs: use variable for end offset in extent_writepage_io()
Florian Westphal (2):
netfilter: nft_set_pipapo: fix range overlap detection
netfilter: nf_tables: avoid chain re-validation if possible
Gal Pressman (2):
net/mlx5e: Don't print error message due to invalid module
selftests: drv-net: fix RPS mask handling for high CPU numbers
Gao Xiang (2):
erofs: don't bother with s_stack_depth increasing for now
erofs: fix file-backed mounts no longer working on EROFS partitions
Greg Kroah-Hartman (2):
Linux 6.12.66
Linux 6.12.67
Guo Ren (Alibaba DAMO Academy) (1):
riscv: pgtable: Cleanup useless VA_USER_XXX definitions
Günther Noack (1):
selftests/landlock: Properly close a file descriptor
Haibo Chen (1):
arm64: dts: add off-on-delay-us for usdhc2 regulator
Haotian Zhang (3):
counter: 104-quad-8: Fix incorrect return value in IRQ handler
phy: ti: da8xx-usb: Handle devm_pm_runtime_enable() errors
dmaengine: omap-dma: fix dma_pool resource leak in error paths
Haoxiang Li (5):
ALSA: ac97: fix a double free in snd_ac97_controller_register()
EDAC/x38: Fix a resource leak in x38_probe1()
EDAC/i3200: Fix a resource leak in i3200_probe1()
drm/amdkfd: fix a memory leak in device_queue_manager_init()
drm/vmwgfx: Fix an error return check in vmw_compat_shader_add()
Harshita Bhilwaria (1):
crypto: qat - fix duplicate restarting msg during AER error
Huacai Chen (1):
USB: OHCI/UHCI: Add soft dependencies on ehci_platform
Ian Forbes (1):
drm/vmwgfx: Merge vmw_bo_release and vmw_bo_free functions
Ian Ray (1):
ARM: dts: imx6q-ba16: fix RTC interrupt level
Ido Schimmel (1):
bridge: mcast: Fix use-after-free during router port configuration
Ilikara Zheng (1):
nvme-pci: disable secondary temp for Wodposit WPBSNM8
Ilya Dryomov (3):
libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
libceph: return the handler error from mon_handle_auth_done()
libceph: make calc_target() set t->paused, not just clear it
Ivaylo Ivanov (1):
phy: phy-snps-eusb2: refactor constructs names
Janne Grunau (1):
dmaengine: apple-admac: Add "apple,t8103-admac" compatible
Jarkko Sakkinen (1):
tpm2-sessions: Fix out of range indexing in name_size
Jaroslav Kysela (1):
ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer
Jerry Wu (1):
net: mscc: ocelot: Fix crash when adding interface under a lag
Jianbo Liu (1):
xfrm: Fix inner mode lookup in tunnel mode GSO segmentation
Jiasheng Jiang (1):
btrfs: fix memory leaks in create_space_info() error paths
Johan Hovold (16):
ASoC: codecs: wsa884x: fix codec initialisation
phy: drop probe registration printks
ASoC: codecs: wsa883x: fix unnecessary initialisation
phy: ti: gmii-sel: fix regmap leak on probe failure
ASoC: codecs: wsa881x: fix unnecessary initialisation
dmaengine: at_hdmac: fix device leak on of_dma_xlate()
dmaengine: bcm-sba-raid: fix device leak on probe
dmaengine: dw: dmamux: fix OF node leak on route allocation failure
dmaengine: idxd: fix device leaks on compat bind and unbind
dmaengine: lpc18xx-dmamux: fix device leak on route allocation
dmaengine: lpc32xx-dmamux: fix device leak on route allocation
dmaengine: stm32: dmamux: fix device leak on route allocation
dmaengine: stm32: dmamux: fix OF node leak on route allocation failure
dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation
dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation
dmaengine: ti: k3-udma: fix device leak on udma lookup
Johannes Berg (1):
wifi: mac80211: restore non-chanctx injection behaviour
Johannes Brüderl (1):
usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor
Joshua Hahn (2):
mm/page_alloc/vmstat: simplify refresh_cpu_vm_stats change detection
mm/page_alloc: batch page freeing in decay_pcp_high
Joshua Hay (1):
idpf: cap maximum Rx buffer size
Jussi Laako (1):
ALSA: usb-audio: Update for native DSD support quirks
Kai Vehmanen (1):
ALSA: hda/realtek: enable woofer speakers on Medion NM14LNL
Kery Qi (1):
net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback
Krzysztof Kozlowski (2):
ASoC: rockchip: Fix Wvoid-pointer-to-enum-cast warning (again)
phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again)
Kuniyuki Iwashima (2):
tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
ipv6: Fix use-after-free in inet6_addr_del().
Lisa Robinson (1):
LoongArch: Fix PMU counter allocation for mixed-type event groups
Loic Poulain (1):
phy: qcom-qusb2: Fix NULL pointer dereference on early suspend
Louis Chauvet (1):
phy: rockchip: inno-usb2: fix disconnection in gadget mode
Luca Ceresoli (1):
phy: rockchip: inno-usb2: fix communication disruption in gadget mode
Lyude Paul (1):
drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare
Marc Kleine-Budde (1):
can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak
Marcus Hughes (1):
net: sfp: extend Potron XGSPON quirk to cover additional EEPROM variant
Marek Vasut (2):
arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM
drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel
Mario Limonciello (1):
drm/amd/display: Bump the HDMI clock to 340MHz
Mario Limonciello (AMD) (1):
drm/amd: Clean up kfd node on surprise disconnect
Mateusz Litwin (1):
spi: cadence-quadspi: Prevent lost complete() call during indirect read
Matthieu Buffet (2):
selftests/landlock: Fix TCP bind(AF_UNSPEC) test case
selftests/landlock: Remove invalid unix socket bind()
Miaoqian Lin (2):
drm/pl111: Fix error handling in pl111_amba_probe
dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()
Michal Luczaj (1):
vsock: Make accept()ed sockets use custom setsockopt()
Michal Rábek (1):
scsi: sg: Fix occasional bogus elapsed time that exceeds timeout
Mikulas Patocka (1):
dm-snapshot: fix 'scheduling while atomic' on real-time kernels
Ming Lei (1):
io_uring: move local task_work in exit cancel loop
Miquel Sabaté Solà (1):
btrfs: fix NULL dereference on root when tracing inode eviction
Mohammad Heib (1):
net: fix memory leak in skb_segment_list for GRO packets
Morduan Zang (1):
efi/cper: Fix cper_bits_to_str buffer handling and return value
Naohiro Aota (3):
btrfs: factor out init_space_info() from create_space_info()
btrfs: factor out check_removing_space_info() from btrfs_free_block_groups()
btrfs: introduce btrfs_space_info sub-group
Nathan Chancellor (3):
drm/amd/display: Respect user's CONFIG_FRAME_WARN more for dml files
drm/amd/display: Apply e4479aecf658 to dml
HID: intel-ish-hid: Fix -Wcast-function-type-strict in devm_ishtp_alloc_workqueue()
Neil Armstrong (1):
i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA
NeilBrown (2):
nfsd: provide locking for v4_end_grace
nfsd: use correct loop termination in nfsd4_revoke_states()
Niklas Cassel (1):
ata: libata-core: Disable LPM on ST2000DM008-2FR102
Nilay Shroff (2):
null_blk: fix kmemleak by releasing references to fault configfs items
nvme: fix PCIe subsystem reset controller state transition
Nirjhar Roy (IBM) (1):
xfs: Fix the return value of xfs_rtcopy_summary()
Olga Kornievskaia (1):
nfsd: check that server is running in unlock_filesystem
Ondrej Ille (1):
can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit.
Paul Chaignon (2):
bpf: Reject narrower access to pointer ctx fields
selftests/bpf: Test invalid narrower ctx load
Pavel Butsykin (1):
mm/zswap: fix error pointer free in zswap_cpu_comp_prepare()
Peng Fan (1):
firmware: imx: scu-irq: Set mu_resource_id before get handle
Petko Manolov (1):
net: usb: pegasus: fix memory leak in update_eth_regs_async()
Potin Lai (1):
gpio: pca953x: Add support for level-triggered interrupts
Qu Wenruo (8):
btrfs: qgroup: update all parent qgroups when doing quick inherit
btrfs: only enforce free space tree if v1 cache is required for bs < ps cases
btrfs: fix error handling of submit_uncompressed_range()
btrfs: subpage: dump the involved bitmap when ASSERT() failed
btrfs: add extra error messages for delalloc range related errors
btrfs: remove btrfs_fs_info::sectors_per_page
btrfs: fix beyond-EOF write handling
btrfs: send: check for inline extents in range_is_hole_in_parent()
Rafael Beims (1):
phy: freescale: imx8m-pcie: assert phy reset during power on
René Rebe (1):
HID: quirks: work around VID/PID conflict for appledisplay
Richard Fitzgerald (1):
ALSA: hda/cirrus_scodec_test: Fix incorrect setup of gpiochip
Robbie Ko (1):
btrfs: fix deadlock in wait_current_trans() due to ignored transaction type
Rosen Penev (1):
drm/amd/display: shrink struct members
Ryan Roberts (1):
mm: kmsan: fix poisoning of high-order non-compound pages
Saeed Mahameed (4):
net/mlx5e: Fix crash on profile change rollback failure
net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv
net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv
net/mlx5e: Restore destroying state bit after profile cleanup
Sam Edwards (1):
libceph: reset sparse-read state in osd_fault()
Sam James (1):
alpha: don't reference obsolete termio struct for TC* constants
Scott Mayhew (2):
NFSD: Fix permission check for read access to executable-only files
NFSv4: ensure the open stateid seqid doesn't go backwards
Sean Christopherson (1):
x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1
Sebastian Andrzej Siewior (1):
ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels
SeongJae Park (3):
mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure
mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure
mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure
Shakeel Butt (1):
lib/buildid: use __kernel_read() for sleepable context
Shardul Bankar (1):
bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path
Sheetal (1):
dmaengine: tegra-adma: Fix use-after-free
Sherry Sun (1):
arm64: dts: imx8qm-ss-dma: correct the dma channels of lpuart
Shivam Kumar (1):
nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
Srijit Bose (1):
bnxt_en: Fix potential data corruption with HW GRO/LRO
Stefano Garzarella (1):
vsock/test: add a final full barrier after run all tests
Stefano Radaelli (1):
phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it
Sumeet Pawnikar (2):
powercap: fix race condition in register_control_type()
powercap: fix sscanf() error return value handling
Suraj Gupta (1):
dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing
Szymon Wilczek (1):
can: etas_es58x: allow partial RX URB allocation to succeed
Takashi Iwai (2):
ALSA: ac97bus: Use guard() for mutex locks
ALSA: hda: intel-dsp-config: Prefer legacy driver as fallback
Tetsuo Handa (3):
bpf: Fix reference count leak in bpf_prog_test_run_xdp()
can: j1939: make j1939_session_activate() fail if device is no longer registered
net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts
Thinh Nguyen (1):
usb: dwc3: Check for USB4 IP_NAME
Thomas Fourier (2):
atm: Fix dma_free_coherent() size
net: 3com: 3c59x: fix possible null dereference in vortex_probe1()
Thomas Weißschuh (1):
hrtimer: Fix softirq base check in update_needs_ipi()
Toke Høiland-Jørgensen (1):
bpf, test_run: Subtract size of xdp_frame from allowed metadata size
Tommaso Merciai (1):
i2c: riic: Move suspend handling to NOIRQ phase
Trond Myklebust (3):
NFS: Fix up the automount fs_context to use the correct cred
pNFS: Fix a deadlock when returning a delegation during open()
NFS: Fix a deadlock involving nfs_release_folio()
Tuo Li (1):
libceph: make free_choose_arg_map() resilient to partial allocation
Tzung-Bi Shih (1):
drm/amd/display: mark static functions noinline_for_stack
Ulrich Mohr (1):
USB: serial: option: add Telit LE910 MBIM composition
Vlastimil Babka (1):
mm/page_alloc: prevent pcp corruption with SMP=n
Wadim Egorov (1):
arm64: dts: ti: k3-am62-lp-sk-nand: Rename pinctrls to fix schema warnings
Wayne Chang (1):
phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7
Wei Fang (1):
net: enetc: fix build warning when PAGE_SIZE is greater than 128K
Weiming Shi (1):
net: sock: fix hardened usercopy panic in sock_recv_errqueue
Wen Xiong (1):
scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset
Wentao Liang (1):
phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe()
Xiang Mei (1):
net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset
Xiaochen Shen (2):
x86/resctrl: Add missing resctrl initialization for Hygon
x86/resctrl: Fix memory bandwidth counter width for Hygon
Xin Wang (2):
drm/xe: make xe_gt_idle_disable_c6() handle the forcewake internally
drm/xe: Ensure GT is in C0 during resumes
Xingui Yang (1):
scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
Yang Erkun (1):
ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref
Yang Li (1):
csky: fix csky_cmpxchg_fixup not working
Yang Wang (1):
drm/amd/pm: fix smu overdrive data type wrong issue on smu 14.0.2
Yaxiong Tian (1):
PM: EM: Fix incorrect description of the cost field in struct em_perf_state
Yeoreum Yun (1):
arm64: Fix cleared E0POE bit after cpu_suspend()/resume()
Yohei Kojima (1):
net: netdevsim: fix inconsistent carrier state after link/unlink
Yonghong Song (1):
bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than 4K
Zhang Lixu (1):
HID: intel-ish-hid: Use dedicated unbound workqueues to prevent resume blocking
Zhen Ni (1):
dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure
Zilin Guan (4):
netfilter: nf_tables: fix memory leak in nf_tables_newrule()
net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
pnfs/blocklayout: Fix memory leak in bl_parse_scsi()
yuan.gao (1):
inet: ping: Fix icmp out counting
ziming zhang (1):
libceph: prevent potential out-of-bounds reads in handle_auth_done()
BUG=b/478408709
TEST=tryjob, validation and K8s e2e
RELEASE_NOTE=Updated the Linux kernel to v6.12.67.
Change-Id: Ic2c88f2acb10c481bc0356181ff03c0169b5f74e
Signed-off-by: COS Kernel Merge Bot <cloud-image-merge-automation@prod.google.com>
Reviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/126901
Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
Reviewed-by: Robert Kolchmeyer <rkolchmeyer@google.com>
Reviewed-by: Kevin Berry <kpberry@google.com>
