merge-upstream/v6.1.134 from branch/tag: upstream/v6.1.134 into branch: main-R109-cos-6.1
Changelog:
-------------------------------------------------------------
Abhishek Tamboli (1):
usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
Acs, Jakub (1):
ext4: fix OOB read when checking dotdot dir
Al Viro (3):
spufs: fix a leak on spufs_new_file() failure
spufs: fix gang directory lifetimes
spufs: fix a leak in spufs_create_context()
Alex Deucher (1):
drm/amdgpu/gfx11: fix num_mec
Alex Hung (1):
drm/amd/display: Check denominator crb_pipes before used
Alistair Popple (1):
fuse: fix dax truncate/punch_hole fault path
Andrei Kuchynski (1):
usb: typec: ucsi: Fix NULL pointer access
Andrii Nakryiko (1):
libbpf: Fix hypothetical STT_SECTION extern NULL deref case
AngeloGioacchino Del Regno (2):
drm/mediatek: mtk_hdmi: Unregister audio platform device on failure
drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
Angelos Oikonomopoulos (1):
arm64: Don't call NULL in do_compat_alignment_fixup()
Anshuman Khandual (1):
arch/powerpc: drop GENERIC_PTDUMP from mpc885_ads_defconfig
Antheas Kapenekakis (1):
ALSA: hda/realtek: Fix Asus Z13 2025 audio
Arnaldo Carvalho de Melo (5):
perf units: Fix insufficient array space
perf python: Fixup description of sample.id event member
perf python: Decrement the refcount of just created event on failure
perf python: Don't keep a raw_data pointer to consumed ring buffer space
perf python: Check if there is space to copy all the event
Arnd Bergmann (2):
x86/platform: Only allow CONFIG_EISA for 32-bit
mdacon: rework dependency list
Artur Weber (1):
power: supply: max77693: Fix wrong conversion of charge input threshold value
Barnabás Czémán (1):
clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock
Bart Van Assche (1):
fs/procfs: fix the comment above proc_pid_wchan()
Benjamin Berg (2):
x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct()
um: remove copy_from_kernel_nofault_allowed
Benjamin Gaignard (1):
media: verisilicon: HEVC: Initialize start_bit field
Cameron Williams (2):
tty: serial: 8250: Add some more device IDs
tty: serial: 8250: Add Brainboxes XC devices
Chao Gao (1):
x86/fpu/xstate: Fix inconsistencies in guest FPU xfeatures
Cheng Xu (1):
RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
Chenyuan Yang (1):
thermal: int340x: Add NULL check for adev
Chiara Meiohas (1):
RDMA/mlx5: Fix calculation of total invalidated pages
Chuck Lever (1):
NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up
Cong Wang (1):
net_sched: skbprio: Remove overly strict queue assertions
Dan Carpenter (3):
PCI: Remove stray put_device() in pci_register_host_bridge()
drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()
fs/ntfs3: Fix a couple integer overflows on 32bit systems
Daniel Bárta (1):
ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0
Daniel Stodden (1):
PCI/ASPM: Fix link state exit during switch upstream function removal
Danila Chernetsov (1):
fbdev: sm501fb: Add some geometry checks.
David Oberhollenzer (1):
net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy
Debin Zhu (1):
netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
Dhruv Deshpande (1):
ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx
Dmitry Panchenko (1):
platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet
Dominique Martinet (1):
net: usb: usbnet: restore usb%d name exception for local mac addresses
Douglas Raillard (2):
tracing: Ensure module defining synth event cannot be unloaded while tracing
tracing: Fix synth event printk format for str fields
Emmanuel Grumbach (1):
wifi: iwlwifi: mvm: use the right version of the rate API
Eric Sandeen (1):
watch_queue: fix pipe accounting mismatch
Fabio Porcedda (2):
net: usb: qmi_wwan: add Telit Cinterion FN990B composition
net: usb: qmi_wwan: add Telit Cinterion FE990B composition
Fabrice Gasnier (1):
counter: stm32-lptimer-cnt: fix error handling when enabling
Fabrizio Castro (3):
pinctrl: renesas: rza2: Fix missing of_node_put() call
pinctrl: renesas: rzg2l: Fix missing of_node_put() call
pinctrl: renesas: rzv2m: Fix missing of_node_put() call
Feng Tang (1):
PCI/portdrv: Only disable pciehp interrupts early when needed
Feng Yang (1):
ring-buffer: Fix bytes_dropped calculation issue
Fernando Fernandez Mancera (1):
ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
Geert Uytterhoeven (1):
drm/bridge: ti-sn65dsi86: Fix multiple instances
Geetha sowjanya (2):
octeontx2-af: Fix mbox INTR handler when num VFs > 64
octeontx2-af: Free NIX_AF_INT_VEC_GEN irq
Giovanni Gherdovich (1):
ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid
Greg Kroah-Hartman (2):
Linux 6.1.133
Linux 6.1.134
Guilherme G. Piccoli (1):
x86/tsc: Always save/restore TSC sched_clock() on suspend/resume
Guillaume Nault (1):
tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().
Hans Zhang (1):
PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload
Hengqi Chen (2):
LoongArch: BPF: Fix off-by-one error in build_prologue()
LoongArch: BPF: Use move_addr() for BPF_PSEUDO_FUNC
Henry Martin (2):
ASoC: imx-card: Add NULL check in imx_card_probe()
arcnet: Add NULL check in com20020pci_probe()
Herbert Xu (1):
crypto: nx - Fix uninitialised hv_nxc on error
Hermes Wu (1):
drm/bridge: it6505: fix HDCP V match check is not performed correctly
Hou Tao (1):
bpf: Use preempt_count() directly in bpf_send_signal_common()
Huacai Chen (1):
LoongArch: Increase ARCH_DMA_MINALIGN up to 16
Ian Rogers (1):
perf evlist: Add success path to evlist__create_syswide_maps
Icenowy Zheng (2):
nvme-pci: clean up CMBMSC when registering CMB fails
nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
Ido Schimmel (2):
ipv6: Start path selection from the first nexthop
ipv6: Do not consider link down nexthops in path selection
Ilkka Koskinen (1):
coresight: catu: Fix number of pages while using 64k pages
Ilpo Järvinen (1):
PCI: pciehp: Don't enable HPIE when resuming in poll mode
Ivan Orlov (1):
kunit/overflow: Fix UB in overflow_allocation_test
Jann Horn (3):
x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
Jayesh Choudhary (1):
ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible
Jens Axboe (1):
io_uring/filetable: ensure node switch is always done, if needed
Jerome Brunet (4):
clk: amlogic: gxbb: drop incorrect flag on 32k clock
clk: amlogic: g12b: fix cluster A parent data
clk: amlogic: gxbb: drop non existing 32k clock parent
clk: amlogic: g12a: fix mmc A peripheral clock
Jie Zhan (1):
cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
Jim Quinlan (3):
PCI: brcmstb: Use internal register to change link capability
PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
PCI: brcmstb: Fix potential premature regulator disabling
Jiri Kosina (1):
HID: remove superfluous (and wrong) Makefile entry for CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER
Joe Hattori (2):
media: platform: allgro-dvt: unregister v4l2_device on the error path
soundwire: slave: fix an OF node reference leak in soundwire slave device
Johannes Berg (1):
wifi: iwlwifi: fw: allocate chained SG tables for dump
John Keeping (1):
serial: 8250_dma: terminate correct DMA in tx_dma_flush()
Jonathan Cameron (2):
iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio
iio: accel: msa311: Fix failure to release runtime pm if direct mode claim fails.
Josef Bacik (1):
btrfs: handle errors from btrfs_dec_ref() properly
Josh Poimboeuf (4):
objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
sched/smt: Always inline sched_smt_active()
context_tracking: Always inline ct_{nmi,irq}_{enter,exit}()
rcu-tasks: Always inline rcu_irq_work_resched()
José Expósito (1):
drm/vkms: Fix use after free and double free on init error
Juhan Jin (1):
riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra
Kai-Heng Feng (1):
PCI: Use downstream bridges for distributing resources
Kan Liang (1):
perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read
Karel Balej (1):
mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
Kees Cook (2):
ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed()
ARM: 9351/1: fault: Add "cut here" line for prefetch aborts
Kevin Loughlin (1):
x86/sev: Add missing RIP_REL_REF() invocations during sme_enable()
Konstantin Andreev (1):
smack: dont compile ipv6 code unless ipv6 is configured
Kuniyuki Iwashima (1):
udp: Fix memory accounting leak.
Lama Kayal (1):
net/mlx5e: SHAMPO, Make reserved size independent of page size
Li Lingfeng (1):
nfsd: put dl_stid if fail to queue dl_recall
Lin Ma (2):
netfilter: nft_tunnel: fix geneve_opt type confusion addition
net: fix geneve_opt length integer overflow
Lubomir Rintel (1):
rndis_host: Flag RNDIS modems as WWAN devices
Luca Weiss (2):
remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
remoteproc: qcom_q6v5_mss: Handle platforms with one power domain
Luo Qiu (1):
memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
Maher Sanalla (1):
IB/mad: Check available slots before posting receive WRs
Marcus Meissner (1):
perf tools: annotate asm_pure_loop.S
Marijn Suijten (1):
drm/msm/dsi: Set PHY usescase (and mode) before registering DSI host
Mario Limonciello (1):
drm/amd: Keep display off while going into S4
Mark Zhang (1):
rtnetlink: Allocate vfinfo size for VF GUIDs when supported
Markus Elfring (2):
fbdev: au1100fb: Move a variable assignment behind a null pointer check
ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()
Matthias Proske (1):
wifi: brcmfmac: keep power during suspend if board requires it
Maxim Mikityanskiy (1):
netfilter: socket: Lookup orig tuple for IPv6 SNAT
Miaoqian Lin (1):
ksmbd: use aead_request_free to match aead_request_alloc
Mike Rapoport (Microsoft) (1):
x86/mm/pat: cpa-test: fix length for CPA_ARRAY test
Minjoong Kim (1):
atm: Fix NULL pointer dereference
Murad Masimov (2):
acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
media: streamzap: fix race between device disconnection and urb callback
Namjae Jeon (3):
ksmbd: fix multichannel connection failure
ksmbd: fix use-after-free in ksmbd_sessions_deregister()
ksmbd: fix session use-after-free in multichannel connection
Navon John Lukose (1):
ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx
Nikita Shubin (1):
ntb: intel: Fix using link status DB's
Nikita Zhandarovich (1):
mfd: sm501: Switch to BIT() to mitigate integer overflows
Niklas Neronin (1):
usb: xhci: correct debug message page size calculation
Nishanth Aravamudan (1):
PCI: Avoid reset when disabled via sysfs
Norbert Szetei (2):
ksmbd: add bounds check for create lease context
ksmbd: validate zero num_subauth before sub_auth is accessed
Oliver Hartkopp (1):
can: statistics: use atomic access in hot path
Pablo Neira Ayuso (1):
netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only
Patrisious Haddad (1):
RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
Paul Menzel (1):
ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
Peng Fan (1):
remoteproc: core: Clear table_sz when rproc_shutdown
Peter Geis (1):
clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
Peter Zijlstra (1):
lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock
Peter Zijlstra (Intel) (1):
perf/x86/intel: Apply static call for drain_pebs
Prathamesh Shete (1):
pinctrl: tegra: Set SFIO mode to Mux Register
Qasim Ijaz (2):
isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
jfs: fix slab-out-of-bounds read in ea_get()
Qiuxu Zhuo (3):
EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
EDAC/ie31200: Fix the DIMM size mask for several SoCs
EDAC/ie31200: Fix the error path order of ie31200_init()
Rafael J. Wysocki (2):
PM: sleep: Adjust check before setting power.must_resume
PM: sleep: Fix handling devices with direct_complete set on errors
Ran Xiaokai (1):
tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
Roger Quadros (1):
memory: omap-gpmc: drop no compatible check
Roman Gushchin (1):
RDMA/core: Don't expose hw_counters outside of init net namespace
Roman Smirnov (1):
jfs: add index corruption check to DT_GETPAGE()
Sagi Grimberg (1):
nvme-tcp: fix possible UAF in nvme_tcp_poll
Saket Kumar Bhaskar (1):
selftests/bpf: Select NUMA_NO_NODE to create map
Sebastian Andrzej Siewior (1):
lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
Sherry Sun (2):
tty: serial: fsl_lpuart: use UARTMODIR register bits for lpuart32 platform
tty: serial: fsl_lpuart: disable transmitter before changing RS485 related registers
Shrikanth Hegde (1):
sched/deadline: Use online cpus for validating runtime
Simon Tatham (2):
affs: generate OFS sequence numbers starting at 1
affs: don't write overlarge OFS data block size fields
Sourabh Jain (1):
kexec: initialize ELF lowest address to ULONG_MAX
Srinivas Pandruvada (1):
platform/x86: ISST: Correct command storage data length
Stanislav Spassov (1):
x86/fpu: Fix guest FPU state buffer allocation size
Stanley Chu (1):
i3c: master: svc: Fix missing the IBI rules
Stefan Binding (2):
ALSA: hda/realtek: Add support for ASUS ROG Strix G614 Laptops using CS35L41 HDA
ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using CS35L41 HDA
Stefan Eichenberger (1):
ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6
Stefano Garzarella (1):
vsock: avoid timeout during connect() if the socket is closing
Steven Rostedt (1):
tracing: Do not use PERF enums when perf is not defined
Takashi Iwai (1):
ALSA: hda/realtek: Always honor no_shutup_pins
Tanya Agarwal (1):
lib: 842: Improve error handling in sw842_compress()
Tao Chen (1):
perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
Tasos Sahanidis (1):
hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
Tengda Wu (1):
tracing: Fix use-after-free in print_graph_function_flags during tracer switching
Terry Junge (2):
ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names
HID: hid-plantronics: Add mic mute mapping and generalize quirks
Thadeu Lima de Souza Cascardo (1):
drm/amd/display: avoid NPD when ASIC does not support DMUB
Theodore Ts'o (1):
ext4: don't over-report free space or inodes in statvfs
Thippeswamy Havalige (1):
PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe
Tim Schumacher (1):
selinux: Chain up tool resolving errors in install_policy.sh
Tobias Waldekranz (1):
net: mvpp2: Prevent parser TCAM memory corruption
Tomi Valkeinen (1):
drm: xlnx: zynqmp: Fix max dma segment size
Trond Myklebust (1):
NFSv4: Don't trigger uneccessary scans for return-on-close delegations
Ulf Hansson (1):
mmc: sdhci-omap: Disable MMC_CAP_AGGRESSIVE_PM for eMMC/SD
Uwe Kleine-König (2):
media: i2c: et8ek8: Don't strip remove function when driver is builtin
iio: adc: ad7124: Fix comparison of channel configs
Vasiliy Kovalev (1):
ocfs2: validate l_tree_depth to avoid out-of-bounds access
Viktor Malik (1):
selftests/bpf: Fix string read in strncmp benchmark
Vitaliy Shevtsov (2):
ASoC: cs35l41: check the return value from spi_setup()
drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()
Vladimir Lypak (1):
clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock
Vladis Dronov (1):
x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled
Waiman Long (1):
locking/semaphore: Use wake_q to wake up processes outside lock critical section
Wayne Lin (1):
drm/dp_mst: Fix drm RAD print
Wenkai Lin (2):
crypto: hisilicon/sec2 - fix for aead authsize alignment
crypto: hisilicon/sec2 - fix for aead auth key length
Wentao Guan (1):
HID: i2c-hid: improve i2c_hid_get_report error message
Will McVicker (1):
clk: samsung: Fix UBSAN panic in samsung_clk_init()
William Breathitt Gray (1):
counter: microchip-tcb-capture: Fix undefined counter channel state on probe
Yajun Deng (1):
ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
Yanjun Yang (1):
ARM: Remove address checking for MMUless devices
Ying Lu (1):
usbnet:fix NPE during rx_complete
Yuanfang Zhang (1):
coresight-etm4x: add isb() before reading the TRCSTATR
Yuezhang Mo (1):
exfat: fix the infinite loop in exfat_find_last_cluster()
Zijun Hu (1):
of: property: Increase NR_FWNODE_REFERENCE_ARGS
zuoqian (1):
cpufreq: scpi: compare kHz instead of Hz
谢致邦 (XIE Zhibang) (2):
staging: rtl8723bs: select CONFIG_CRYPTO_LIB_AES
LoongArch: Fix help text of CMDLINE_EXTEND in Kconfig
BUG=b/409950880
TEST=tryjob, validation and K8s e2e
RELEASE_NOTE=Updated the Linux kernel to v6.1.134.
Change-Id: I4584ee1964c531fc6e57532564ea2719cda4ccd3
Signed-off-by: COS Kernel Merge Bot <cloud-image-merge-automation@prod.google.com>
