merge-upstream/v6.6.68 from branch/tag: upstream/v6.6.68 into branch: cos-6.6
Changelog:
-------------------------------------------------------------
Adrian Moreno (1):
selftests: openvswitch: fix tcpdump execution
Ajit Khaparde (1):
PCI: Add ACS quirk for Broadcom BCM5760X NIC
Alex Markuze (1):
ceph: improve error handling and short/overflow-read logic in __ceph_sync_read()
Alexandre Ghiti (2):
riscv: Fix wrong usage of __pa() on a fixmap address
riscv: Fix IPIs usage in kfence_protect_page()
Andy Shevchenko (3):
hwmon: (tmp513) Don't use "proxy" headers
hwmon: (tmp513) Simplify with dev_err_probe()
hwmon: (tmp513) Use SI constants from units.h
Anumula Murali Mohan Reddy (1):
cxgb4: use port number to set mac addr
Benjamin Lin (1):
wifi: mac80211: fix station NSS capability initialization order
Borislav Petkov (AMD) (1):
EDAC/amd64: Simplify ECC check on unified memory controllers
Brett Creeley (1):
ionic: Fix netdev notifier unregister on failure
Chen Ni (1):
xfs: convert comma to semicolon
Christoph Hellwig (1):
xfs: fix the contact address for the sysfs ABI documentation
Christophe JAILLET (1):
spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user()
Dan Carpenter (4):
net/mlx5: DR, prevent potential error pointer dereference
ALSA: usb-audio: Fix a DMA to stack memory bug
net: hinic: Fix cleanup in create_rxqs/txqs()
chelsio/chtls: prevent potential integer overflow on 32bit
Daniel Borkmann (3):
bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
selftests/bpf: Add netlink helper library
Daniel Machon (2):
net: sparx5: fix FDMA performance issue
net: sparx5: fix the maximum frame length register
Daniel Swanemar (1):
USB: serial: option: add TCL IK512 MBIM & ECM
Daniele Palmas (1):
USB: serial: option: add Telit FE910C04 rmnet compositions
Danielle Ratson (3):
selftests: mlxsw: sharedbuffer: Remove h1 ingress test case
selftests: mlxsw: sharedbuffer: Remove duplicate test cases
selftests: mlxsw: sharedbuffer: Ensure no extra packets are counted
Daniil Tatianin (1):
ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired
Darrick J. Wong (15):
xfs: update btree keys correctly when _insrec splits an inode root block
xfs: don't drop errno values when we fail to ficlone the entire range
xfs: return from xfs_symlink_verify early on V4 filesystems
xfs: fix scrub tracepoints when inode-rooted btrees are involved
xfs: only run precommits once per transaction object
xfs: verify buffer, inode, and dquot items every tx commit
xfs: use consistent uid/gid when grabbing dquots for inodes
xfs: declare xfs_file.c symbols in xfs_file.h
xfs: create a new helper to return a file's allocation unit
xfs: fix file_path handling in tracepoints
xfs: attr forks require attr, not attr2
xfs: conditionally allow FS_XFLAG_REALTIME changes if S_DAX is set
xfs: use XFS_BUF_DADDR_NULL for daddrs in getfsmap code
xfs: take m_growlock when running growfsrt
xfs: reset rootdir extent size hint after growfsrt
David (Ming Qiang) Wu (1):
amdgpu/uvd: get ring reference from rq scheduler
David Laight (1):
ipvs: Fix clamp() of ip_vs_conn_tab on small memory systems
Davidlohr Bueso (1):
cxl/pci: Fix potential bogus return value upon successful probing
Eduard Zingerman (1):
bpf: sync_linked_regs() must preserve subreg_def
Edward Adam Davis (1):
nilfs2: prevent use of deleted inode
Enzo Matsumiya (1):
smb: client: fix TCP timers deadlock after rmmod
Eric Dumazet (5):
tipc: fix NULL deref in cleanup_bearer()
net: lapb: increase LAPB_HEADER_LEN
net: defer final 'struct net' free in netns dismantle
netdevsim: prevent bad user input in nsim_dev_health_break_write()
net: tun: fix tun_napi_alloc_frags()
Eugene Kobyak (1):
drm/i915: Fix NULL pointer dereference in capture_engine
Florian Westphal (1):
netfilter: nf_tables: do not defer rule destruction via call_rcu
Francesco Dolcini (3):
net: fec: refactor PPS channel configuration
net: fec: make PPS channel configurable
dt-bindings: net: fec: add pps channel property
Frederik Deweerdt (1):
splice: do not checksum AF_UNIX sockets
Frédéric Danis (1):
Bluetooth: SCO: Add support for 16 bits transparent voice setting
Geert Uytterhoeven (1):
i2c: riic: Always round-up when calculating bus period
Greg Kroah-Hartman (2):
Linux 6.6.67
Linux 6.6.68
Guangguan Wang (6):
net/smc: protect link down work from execute after lgr freed
net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
net/smc: check smcd_v2_ext_offset when receiving proposal msg
net/smc: check return value of sock_recvmsg when draining clc data
Hans de Goede (1):
platform/x86: p2sb: Make p2sb_get_devfn() return void
Haoyu Li (2):
wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon
wifi: cfg80211: sme: init n_channels before channels[] access
Herve Codina (1):
of: Fix error path in of_parse_phandle_with_args_map()
Huaisheng Ye (1):
cxl/region: Fix region creation for greater than x2 switches
Ilpo Järvinen (1):
ACPI: resource: Fix memory resource type union access
Ilya Dryomov (1):
ceph: validate snapdirname option length when mounting
Isaac J. Manjarres (1):
selftests/memfd: run sysctl tests when PID namespace support is enabled
Iulia Tanasescu (2):
Bluetooth: ISO: Reassociate a socket with an active BIS
Bluetooth: iso: Fix recursive locking warning
Jaakko Salo (1):
ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5
Jack Wu (1):
USB: serial: option: add MediaTek T7XX compositions
James Bottomley (1):
efivarfs: Fix error on non-existent file
James Morse (1):
KVM: arm64: Disable MPAM visibility by default and ignore VMM writes
Jann Horn (4):
bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
bpf: Fix theoretical prog_array UAF in __uprobe_perf_func()
io_uring: Fix registered ring file refcount leak
udmabuf: also check for F_SEAL_FUTURE_WRITE
Jens Axboe (2):
io_uring/rw: split io_read() into a helper
io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN
Jesse Van Gavere (1):
net: dsa: microchip: KSZ9896 register regmap alignment to 32 bit boundaries
Jiasheng Jiang (1):
drm/i915: Fix memory leak by correcting cache object name in error handler
Jiaxun Yang (1):
MIPS: Loongson64: DTS: Fix msi node for ls7a
Jiri Olsa (1):
bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
Jiwei Sun (1):
PCI: vmd: Create domain symlink before pci_bus_add_devices()
Joe Hattori (6):
ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys()
usb: typec: anx7411: fix fwnode_handle reference leak
usb: typec: anx7411: fix OF node reference leaks in anx7411_typec_switch_probe()
net: ethernet: bgmac-platform: fix an OF node reference leak
net: mdiobus: fix an OF node reference leak
mmc: mtk-sd: disable wakeup in .remove() and in the error path of .probe()
Johannes Berg (1):
wifi: mac80211: clean up 'ret' in sta_link_apply_parameters()
John Garry (2):
xfs: Fix xfs_flush_unmap_range() range for RT
xfs: Fix xfs_prepare_shift() range for RT
Juergen Gross (9):
xen/netfront: fix crash when removing device
x86: make get_cpu_vendor() accessible from Xen code
objtool/x86: allow syscall instruction
x86/static-call: provide a way to do very early static-call updates
x86/xen: don't do PV iret hypercall through hypercall page
x86/xen: add central hypercall functions
x86/xen: use new hypercall functions instead of hypercall page
x86/xen: remove hypercall page
x86/static-call: fix 32-bit build
Julian Sun (1):
xfs: remove unused parameter in macro XFS_DQUOT_LOGRES
Kai-Heng Feng (1):
PCI/AER: Disable AER service on suspend
Kairui Song (2):
zram: refuse to use zero sized block device as backing device
zram: fix uninitialized ZRAM not releasing backing device
Kan Liang (1):
perf/x86/intel/ds: Unconditionally drain PEBS DS when changing PEBS_DATA_CFG
Kumar Kartikeya Dwivedi (1):
bpf: Check size for BTF-based ctx access of pointer members
Lianqin Hu (1):
usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer
Lin Ma (1):
wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one
Lion Ackermann (1):
net: sched: fix ordering of qlen adjustment
Luiz Augusto von Dentz (1):
Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating
Mank Wang (1):
USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
Marios Makassikis (2):
ksmbd: count all requests in req_running counter
ksmbd: fix broken transfers when exceeding max simultaneous operations
Mark Tomlinson (1):
usb: host: max3421-hcd: Correctly abort a USB request.
Martin Ottens (1):
net/sched: netem: account for backlog updates from child qdisc
Matthew Wilcox (Oracle) (1):
vmalloc: fix accounting with i915
Max Kellermann (1):
ceph: fix memory leaks in __ceph_sync_read()
Michael Kelley (1):
Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
Michal Hrusecky (1):
USB: serial: option: add MeiG Smart SLM770A
Michal Luczaj (2):
bpf, sockmap: Fix race between element replace and close()
bpf, sockmap: Fix update element with same
Michel Dänzer (1):
drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update
Mika Westerberg (1):
thunderbolt: Improve redrive mode handling
MoYuanhao (1):
tcp: check space before adding MPTCP SYN options
Murad Masimov (3):
hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers
hwmon: (tmp513) Fix Current Register value interpretation
hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers
Namjae Jeon (1):
ksmbd: fix racy issue from session lookup and expire
Nathan Chancellor (2):
blk-iocost: Avoid using clamp() on inuse in __propagate_weights()
hexagon: Disable constant extender optimization for LLVM prior to 19.1.0
Neal Frager (1):
usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode
Nikita Yushchenko (6):
net: renesas: rswitch: fix race window between tx start and complete
net: renesas: rswitch: fix leaked pointer on error path
net: renesas: rswitch: avoid use-after-put for a device tree node
net: renesas: rswitch: handle stop vs interrupt race
net: renesas: rswitch: fix initial MPIC register setting
net: renesas: rswitch: rework ts tags management
Nikolay Kuratov (1):
tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe()
Olaf Hering (1):
tools: hv: change permissions of NetworkManager configuration file
Paul Barker (1):
Documentation: PM: Clarify pm_runtime_resume_and_get() return value
Pavel Begunkov (2):
io_uring: check if iowq is killed before queuing
io_uring/rw: avoid punting to io-wq directly
Peng Hongchi (1):
usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled
Phil Sutter (2):
netfilter: IDLETIMER: Fix for possible ABBA deadlock
netfilter: ipset: Fix for recursive locking warning
Pierre-Eric Pelloux-Prayer (1):
drm/amdgpu: don't access invalid sched
Pierre-Louis Bossart (2):
ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP
ASoC: Intel: sof_sdw: add quirk for Dell SKU 0B8C
Prathamesh Shete (1):
mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
Qu Wenruo (1):
btrfs: tree-checker: reject inline extent items with 0 ref count
Radu Rendec (1):
net: rswitch: Avoid use-after-free in rswitch_poll()
Remi Pommarel (3):
batman-adv: Do not send uninitialized TT changes
batman-adv: Remove uninitialized data in full table TT response
batman-adv: Do not let TT changes list grows indefinitely
Roger Quadros (2):
usb: cdns3-ti: Add workaround for Errata i2409
usb: cdns3: Add quirk flag to enable suspend residency
Russell King (Oracle) (1):
net: stmmac: fix TSO DMA API usage causing oops
Ryusuke Konishi (1):
nilfs2: fix buffer head leaks in calls to truncate_inode_pages()
Sean Christopherson (2):
KVM: x86: Cache CPUID.0xD XSTATE offsets+sizes during module init
KVM: x86: Play nice with protected guests in complete_hypercall_exit()
Shannon Nelson (1):
ionic: use ee->offset when returning sprom data
Shin'ichiro Kawasaki (4):
p2sb: Factor out p2sb_read_from_cache()
p2sb: Introduce the global flag p2sb_hidden_by_bios
p2sb: Move P2SB hide and unhide code to p2sb_scan_and_cache()
p2sb: Do not scan and remove the P2SB device when it is unhidden
Shung-Hsi Yu (1):
selftests/bpf: remove use of __xlated()
Stefan Wahren (5):
usb: dwc2: Fix HCD resume
usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature
usb: dwc2: Fix HCD port connection race
qca_spi: Fix clock speed for multiple QCA7000
qca_spi: Make driver probing reliable
Steven Rostedt (3):
tracing: Fix test_event_printk() to process entire print argument
tracing: Add missing helper functions in event pointer dereference check
tracing: Add "%s" check in test_event_printk()
Suraj Sonawane (1):
acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
Takashi Iwai (2):
usb: gadget: midi2: Fix interpretation of is_midi1 bits
ALSA: control: Avoid WARN() for symlink errors
Tejun Heo (1):
blk-cgroup: Fix UAF in blkcg_unpin_online()
Thadeu Lima de Souza Cascardo (1):
Bluetooth: btmtk: avoid UAF in btmtk_process_coredump
Thomas Weißschuh (1):
ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init()
Tiezhu Yang (1):
selftests/bpf: Use asm constraint "m" for LoongArch
Tomas Glozar (1):
rtla/timerlat: Make timerlat_hist_cpu->*_count unsigned long long
Trond Myklebust (1):
NFS/pnfs: Fix a live lock between recalled layouts and layoutget
Umesh Nerlige Ramappa (3):
i915/guc: Reset engine utilization buffer before registration
i915/guc: Ensure busyness counter increases motonically
i915/guc: Accumulate active runtime on gt reset
Venkata Prasad Potturu (1):
ASoC: amd: yc: Fix the wrong return value
Vidya Sagar (1):
PCI: Use preserve_config in place of pci_flags
Ville Syrjälä (1):
drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
Vitalii Mordan (1):
usb: ehci-hcd: fix call balance of clocks handling routines
Vladimir Oltean (7):
net: mscc: ocelot: fix memory leak on ocelot_port_add_txtstamp_skb()
net: mscc: ocelot: improve handling of TX timestamp for unknown skb
net: mscc: ocelot: ocelot->ts_id_lock and ocelot_port->tx_skbs.lock are IRQ-safe
net: mscc: ocelot: be resilient to loss of PTP packets during transmission
net: mscc: ocelot: perform error cleanup in ocelot_hwstamp_set()
net: dsa: felix: fix stuck CPU-injected packets with short taprio windows
net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic()
Vladimir Riabchun (1):
i2c: pnx: Fix timeout in wait functions
Weizhao Ouyang (1):
kselftest/arm64: abi: fix SVCR detection
Xuewen Yan (1):
epoll: Add synchronous wakeup support for ep_poll_callback
Yang Yingliang (1):
drm/panel: novatek-nt35950: fix return value check in nt35950_probe()
Yoshihiro Shimoda (6):
net: rswitch: Drop unused argument/return value
net: rswitch: Use unsigned int for desc related array index
net: rswitch: Use build_skb() for RX
net: rswitch: Add unmap_addrs instead of dma address in each desc
net: rswitch: Add a setting ext descriptor function
net: rswitch: Add jumbo frames handling for TX
Zijun Hu (3):
of/irq: Fix interrupt-map cell length check in of_irq_parse_imap_parent()
of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
Zizhi Wo (1):
xfs: Fix the owner setting issue for rmap query in xfs fsmap
lei lu (1):
xfs: don't walk off the end of a directory data block
liuderong (1):
scsi: ufs: core: Update compl_time_stamp_local_clock after completing a cqe
BUG=b/386467630
TEST=tryjob, validation and K8s e2e
RELEASE_NOTE=Updated the Linux kernel to v6.6.68.
Change-Id: Id62aa0d04be927e4d2304b3e47058d9843631235
Signed-off-by: COS Kernel Merge Bot <cloud-image-merge-automation@prod.google.com>
