merge-upstream/v6.6.40 from branch/tag: upstream/v6.6.40 into branch: cos-6.6
Changelog:
-------------------------------------------------------------
Aleksandr Mishin (1):
mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file
Alex Deucher (2):
drm/amdgpu/atomfirmware: silence UBSAN warning
drm/amdgpu: silence UBSAN warning
Alex Hung (4):
drm/amd/display: Check index msg_id before read or write
drm/amd/display: Check pipe offset before setting vblank
drm/amd/display: Skip finding free audio for unknown engine_id
drm/amd/display: Fix uninitialized variables in DM
Armin Wolf (1):
platform/x86: toshiba_acpi: Fix quickstart quirk handling
Atish Patra (1):
RISC-V: KVM: Fix the initial sample period value
Chao Yu (1):
f2fs: check validation of fault attrs in f2fs_build_fault_attr()
Chenghai Huang (1):
crypto: hisilicon/debugfs - Fix debugfs uninit process issue
Chris Mi (1):
net/mlx5: E-switch, Create ingress ACL when needed
Christian Borntraeger (1):
KVM: s390: fix LPSWEY handling
Corinna Vinschen (1):
igc: fix a log entry using uninitialized netdev
Damien Le Moal (1):
null_blk: Do not allow runt zone with zone capacity smaller then zone size
Dave Jiang (1):
net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx()
Dima Ruinskiy (1):
e1000e: Fix S0ix residency on corporate systems
Dmitry Antipov (1):
mac802154: fix time calculation in ieee802154_configure_durations()
Dmitry Torokhov (2):
gpiolib: of: fix lookup quirk for MIPS Lantiq
gpiolib: of: add polarity quirk for TSC2005
Dragan Simic (1):
arm64: dts: rockchip: Fix the DCDC_REG2 minimum voltage on Quartz64 Model B
Eduard Zingerman (3):
selftests/bpf: adjust dummy_st_ops_success to detect additional error
selftests/bpf: do not pass NULL for non-nullable params in dummy_st_ops
selftests/bpf: dummy_st_ops should reject 0 for non-nullable params
Edward Adam Davis (2):
Bluetooth: Ignore too large handle values in BIG
nfc/nci: Add the inconsistency check between the input data length and count
Erick Archer (2):
sctp: prefer struct_size over open coded arithmetic
Input: ff-core - prefer struct_size over open coded arithmetic
Erico Nunes (1):
drm/lima: fix shared irq handling on driver remove
Fedor Pchelkin (1):
dma-mapping: benchmark: avoid needless copy_to_user if benchmark fails
Fei Shao (1):
media: mediatek: vcodec: Only free buffer VA that is not NULL
Felix Fietkau (1):
wifi: mt76: replace skb_put with skb_put_zero
Florian Westphal (1):
netfilter: nf_tables: unconditionally flush pending work before notifier
Frank Oltmanns (1):
clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common
GUO Zihua (1):
ima: Avoid blocking in RCU read-side critical section
Gabor Juhos (1):
clk: qcom: clk-alpha-pll: set ALPHA_EN bit for Stromer Plus PLLs
George Stark (2):
locking/mutex: Introduce devm_mutex_init()
leds: an30259a: Use devm_mutex_init() for mutex initialization
Ghadi Elie Rahme (1):
bnx2x: Fix multiple UBSAN array-index-out-of-bounds
Greg Kroah-Hartman (8):
Revert "bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()"
Revert "powerpc/bpf: use bpf_jit_binary_pack_[alloc|finalize|free]"
Revert "powerpc/bpf: rename powerpc64_jit_data to powerpc_jit_data"
Revert "bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()"
Linux 6.6.38
Linux 6.6.39
Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB"
Linux 6.6.40
Greg Kurz (1):
powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#"
Hailey Mothershead (1):
crypto: aead,cipher - zeroize key buffer after use
Hector Martin (1):
Bluetooth: hci_bcm4377: Fix msgid release
Heiner Kallweit (1):
i2c: i801: Annotate apanel_addr as __ro_after_init
Holger Dengler (1):
s390/pkey: Wipe sensitive data on failure
Huacai Chen (1):
cpu: Fix broken cmdline "nosmp" and "maxcpus=0"
Iulia Tanasescu (1):
Bluetooth: ISO: Check socket flag instead of hcon
Jakub Kicinski (1):
tcp_metrics: validate source addr length
Jan Kara (3):
mm: avoid overflows in dirty throttling logic
fsnotify: Do not generate events for O_PATH file descriptors
Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
Jean Delvare (1):
firmware: dmi: Stop decoding on broken entry
Jesse Zhang (2):
drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
drm/amdgpu: fix the warning about the expression (int)size - len
Jian-Hong Pan (1):
ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897
Jianbo Liu (1):
net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup()
Jiawen Wu (1):
net: txgbe: initialize num_q_vectors for MSI/INTx interrupts
Jim Wylder (1):
regmap-i2c: Subtract reg size from max_write
Jimmy Assarsson (1):
can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct
Jinglin Wen (1):
powerpc/64s: Fix unnecessary copy to 0 when kernel is booted at address 0
Jinliang Zheng (1):
mm: optimize the redundant loop of mm_update_owner_next()
John Hubbard (1):
selftests/net: fix uninitialized variables
John Meneghini (1):
scsi: qedf: Make qedf_execute_tmf() non-preemptible
John Schoenick (1):
drm: panel-orientation-quirks: Add quirk for Valve Galileo
Jose E. Marchesi (1):
bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
Jozef Hopko (1):
wifi: wilc1000: fix ies_len type in connect path
Julien Panis (1):
thermal/drivers/mediatek/lvts_thermal: Check NULL ptr on lvts_data
Justin Stitt (1):
cdrom: rearrange last_media_change check to avoid unintentional overflow
Konstantin Komarov (1):
fs/ntfs3: Mark volume as dirty if xattr is broken
Kundan Kumar (1):
nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset
Len Brown (1):
tools/power turbostat: Remember global max_die_id
Lu Yao (1):
btrfs: scrub: initialize ret in scrub_simple_mirror() to fix compilation warning
Luca Weiss (1):
clk: qcom: gcc-sm6350: Fix gpll6* & gpll7 parents
Luiz Augusto von Dentz (1):
Bluetooth: hci_event: Fix setting of unicast qos interval
Ma Jun (2):
drm/amdgpu: Fix uninitialized variable warnings
drm/amdgpu: Initialize timestamp for some legacy SOCs
Ma Ke (1):
drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
Mahesh Salgaonkar (1):
powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
Marek Vasut (1):
net: phy: phy_device: Fix PHY LED blinking code comment
Masahiro Yamada (1):
kbuild: fix short log for AS in link-vmlinux.sh
Matt Jan (1):
connector: Fix invalid conversion in cn_proc.h
Matthias Schiffer (1):
serial: imx: Raise TX trigger level to 8
Mauro Carvalho Chehab (1):
media: dw2102: fix a potential buffer overflow
Md Sadre Alam (1):
clk: qcom: gcc-ipq9574: Add BRANCH_HALT_VOTED flag
Michael Bunk (1):
media: dw2102: Don't translate i2c read into write
Michael Ellerman (1):
powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n
Michael Guralnik (1):
IB/core: Implement a limit on UMAD receive List
Mickaël Salaün (1):
kunit: Fix timeout message
Mike Christie (4):
vhost: Use virtqueue mutex for swapping worker
vhost: Release worker mutex during flushes
vhost_task: Handle SIGKILL by flushing work and exiting
vhost-scsi: Handle vhost_vq_work_queue failures for events
Mike Marshall (1):
orangefs: fix out-of-bounds fsid access
Miquel Raynal (3):
mtd: rawnand: Ensure ECC configuration is propagated to upper layers
mtd: rawnand: Fix the nand_read_data_op() early check
mtd: rawnand: Bypass a couple of sanity checks during NAND identification
Naohiro Aota (1):
btrfs: fix adding block group to a reclaim list and the unused list during reclaim
Nathan Chancellor (2):
f2fs: Add inline to f2fs_build_fault_attr() stub
scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add()
Neal Cardwell (1):
UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open()
Nicholas Piggin (1):
powerpc/pseries: Fix scv instruction crash with kexec
Niklas Neronin (1):
usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB
Nilay Shroff (1):
nvme-multipath: find NUMA path only for online numa-node
Pavel Skripkin (1):
bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX
Pin-yen Lin (1):
clk: mediatek: mt8183: Only enable runtime PM on mt8183-mfgcfg
Piotr Wojtaszczyk (1):
i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
Ricardo Ribalda (5):
media: dvb: as102-fe: Fix as10x_register_addr packing
media: dvb-usb: dib0700_devices: Add missing release_firmware()
media: dvb-frontends: tda18271c2dd: Remove casting during div
media: s2255: Use refcount_t instead of atomic_t for num_channels
media: dvb-frontends: tda10048: Fix integer overflow
Ryusuke Konishi (3):
nilfs2: fix inode number range checks
nilfs2: add missing check for inode numbers on directory entries
nilfs2: fix incorrect inode allocation from reserved inodes
Sagi Grimberg (2):
net: allow skb_datagram_iter to be called from any context
nvmet: fix a possible leak when destroy a ctrl during qp establishment
Sam Sun (1):
bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
Samuel Holland (1):
riscv: Apply SiFive CIP-1200 workaround to single-ASID sfence.vma
Sasha Neftin (1):
Revert "igc: fix a log entry using uninitialized netdev"
Shigeru Yoshida (1):
inet_diag: Initialize pad field in struct inet_diag_req_v2
Shiji Yang (1):
gpio: mmio: do not calculate bgpio_bits via "ngpios"
Simon Horman (1):
net: dsa: mv88e6xxx: Correct check for empty list
Song Shuai (1):
riscv: kexec: Avoid deadlock in kexec crash path
StanleyYP Wang (1):
wifi: mt76: mt7996: add sanity checks for background radar trigger
Takashi Iwai (1):
ALSA: ump: Set default protocol when not given explicitly
Tim Huang (1):
drm/amdgpu: fix uninitialized scalar variable warning
Tomas Henzl (1):
scsi: mpi3mr: Sanitise num_phys
Val Packett (1):
mtd: rawnand: rockchip: ensure NVDDR timings are rejected
Wang Yong (1):
jffs2: Fix potential illegal address access in jffs2_free_inode
Witold Sadowski (1):
spi: cadence: Ensure data lines set to low during dummy-cycle period
Yijie Yang (1):
net: stmmac: dwmac-qcom-ethqos: fix error array size
Zijian Zhang (2):
selftests: fix OOM in msg_zerocopy selftest
selftests: make order checking verbose in msg_zerocopy selftest
Zijun Hu (1):
Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
hmtheboy154 (2):
platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6" tablet
platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro
BUG=b/353174391
TEST=tryjob, validation and K8s e2e
RELEASE_NOTE=Updated the Linux kernel to v6.6.40.
Change-Id: I07887ac0d1a2dd91398123476437c691a64d3957
Signed-off-by: COS Kernel Merge Bot <cloud-image-merge-automation@prod.google.com>