merge-upstream/v6.1.132 from branch/tag: upstream/v6.1.132 into branch: main-R109-cos-6.1
Changelog:
-------------------------------------------------------------
Acs, Jakub (1):
block, bfq: fix re-introduced UAF in bic_set_bfqq()
Alex Henrie (2):
HID: apple: fix up the F6 key on the Omoton KB066 keyboard
HID: apple: disable Fn key handling on the Omoton KB066
Alex Hung (1):
drm/amd/display: Assign normalized_pix_clk when color depth = 14
Alexander Stein (1):
arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply
Alexey Kashavkin (1):
netfilter: nft_exthdr: fix offset with ipv4_find_option()
Amit Cohen (1):
net: switchdev: Convert blocking notification chain to a raw one
Andreas Kemnade (1):
i2c: omap: fix IRQ storms
Andrey Albershteyn (1):
xfs: reset XFS_ATTR_INCOMPLETE filter on node removal
Andrii Nakryiko (1):
lib/buildid: Handle memfd_secret() files in build_id_parse()
Andy Shevchenko (1):
hrtimers: Mark is_migration_base() with __always_inline
Ard Biesheuvel (1):
efi/libstub: Avoid physical address 0x0 when doing random allocation
Arnd Bergmann (2):
x86/irq: Define trace events conditionally
ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP
Arthur Mongodin (1):
mptcp: Fix data stream corruption in the address announcement
Artur Weber (1):
pinctrl: bcm281xx: Fix incorrect regmap max_registers value
Asahi Lina (1):
scripts: generate_rust_analyzer: Handle sub-modules with no Makefile
Benjamin Berg (1):
wifi: iwlwifi: mvm: ensure offloading TID queue exists
Biju Das (1):
can: rcar_canfd: Fix page entries in the AFL list
Boon Khai Ng (1):
USB: serial: ftdi_sio: add support for Altera USB Blaster 3
Brahmajit Das (1):
vboxsf: fix building with GCC 15
Breno Leitao (1):
netpoll: hold rcu read lock in __netpoll_send_skb()
Carolina Jubran (1):
net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
Charles Keepax (1):
ASoC: ops: Consistently treat platform_max as control value
Chengen Du (1):
iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
Chia-Lin Kao (AceLan) (1):
HID: ignore non-functional sensor in HP 5MP Camera
Christian Eggers (1):
regulator: check that dummy regulator has been probed before using it
Christoph Hellwig (1):
xfs: consider minlen sized extents in xfs_rtallocate_extent_block
Christophe JAILLET (4):
ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
i2c: ali1535: Fix an error handling path in ali1535_probe()
i2c: ali15x3: Fix an error handling path in ali15x3_probe()
i2c: sis630: Fix an error handling path in sis630_probe()
Christopher Lentocha (1):
nvme-pci: quirk Acer FA100 for non-uniqueue identifiers
Cong Wang (1):
net_sched: Prevent creation of classes with TC_H_ROOT
Cosmin Ratiu (1):
xfrm_output: Force software GSO only in tunnel mode
Dan Carpenter (3):
ipvs: prevent integer overflow in do_ip_vs_get_ctl()
Bluetooth: Fix error code in chan_alloc_skb_cb()
net: atm: fix use after free in lec_send()
Daniel Lezcano (1):
thermal/cpufreq_cooling: Remove structure member documentation
Daniel Wagner (2):
nvme-fc: go straight to connecting state when initializing
nvme: only allow entering LIVE from CONNECTING state
Darrick J. Wong (17):
xfs: pass refcount intent directly through the log intent code
xfs: pass xfs_extent_free_item directly through the log intent code
xfs: fix confusing xfs_extent_item variable names
xfs: pass the xfs_bmbt_irec directly through the log intent code
xfs: pass per-ag references to xfs_free_extent
xfs: reserve less log space when recovering log intent items
xfs: move the xfs_rtbitmap.c declarations to xfs_rtbitmap.h
xfs: convert rt bitmap extent lengths to xfs_rtbxlen_t
xfs: don't leak recovered attri intent items
xfs: make rextslog computation consistent with mkfs
xfs: fix 32-bit truncation in xfs_compute_rextslog
xfs: don't allow overly small or large realtime volumes
xfs: remove unused fields from struct xbtree_ifakeroot
xfs: recompute growfsrtfree transaction reservation while growing rt volume
xfs: force all buffers to be written during btree bulk load
xfs: remove conditional building of rt geometry validator functions
xfs: give xfs_extfree_intent its own perag reference
Dave Chinner (4):
xfs: validate block number being freed before adding to xefi
xfs: fix bounds check in xfs_defer_agfl_block()
xfs: use deferred frees for btree block freeing
xfs: initialise di_crc in xfs_log_dinode
David Rosca (1):
drm/amdgpu: Fix JPEG video caps max size for navi1x and raven
David Woodhouse (1):
clockevents/drivers/i8253: Fix stop sequence for timer 0
Edson Juliano Drosdeck (1):
ALSA: hda/realtek: Limit mic boost on Positivo ARN50
Eric Dumazet (1):
tcp: fix races in tcp_abort()
Eric W. Biederman (1):
alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
Fabio Porcedda (2):
USB: serial: option: add Telit Cinterion FE990B compositions
USB: serial: option: fix Telit Cinterion FE990A name
Felix Moessbauer (1):
hrtimer: Use and report correct timerslack values for realtime tasks
Florent Revest (1):
x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
Gannon Kolding (1):
ACPI: resource: IRQ override for Eluktronics MECH-17
Gavrilov Ilia (1):
xsk: fix an integer overflow in xp_create_and_assign_umem()
Geert Uytterhoeven (1):
ARM: shmobile: smp: Enforce shmobile_smp_* alignment
George Stark (1):
leds: mlxreg: Use devm_mutex_init() for mutex initialization
Greg Kroah-Hartman (1):
Linux 6.1.132
Grzegorz Nitka (1):
ice: fix memory leak in aRFS after reset
Gu Bowen (1):
mmc: atmel-mci: Add missing clk_disable_unprepare()
Guillaume Nault (2):
gre: Fix IPv6 link-local address generation.
Revert "gre: Fix IPv6 link-local address generation."
Haibo Chen (2):
can: flexcan: only change CAN state when link up in system PM
can: flexcan: disable transceiver during system PM
Hangbin Liu (1):
bonding: fix incorrect MAC address setting to receive NS messages
Haoxiang Li (1):
qlcnic: fix memory leak issues in qlcnic_sriov_common.c
Hector Martin (3):
ASoC: tas2770: Fix volume scale
ASoC: tas2764: Fix power control mask
ASoC: tas2764: Set the SDOUT polarity correctly
Henrique Carvalho (1):
smb: client: Fix match_session bug preventing session reuse
Ievgen Vovk (1):
HID: hid-apple: Apple Magic Keyboard a3203 USB-C support
Ilya Maximets (1):
net: openvswitch: remove misbehaving actions length check
Imre Deak (1):
drm/dp_mst: Fix locking when skipping CSN before topology probing
Ivan Abramov (1):
drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
Jan Beulich (1):
Xen/swiotlb: mark xen_swiotlb_fixup() __init
Jann Horn (1):
sched: Clarify wake_up_q()'s write to task->wake_q.next
Jason-JH.Lin (1):
drm/mediatek: Fix coverity issue with unintentional integer overflow
Jens Axboe (5):
io_uring: return error pointer from io_mem_alloc()
io_uring: add ring freeing helper
mm: add nommu variant of vm_insert_pages()
io_uring: get rid of remap_pfn_range() for mapping rings/sqes
io_uring: don't attempt to mmap larger than what the user asks for
Jiachen Zhang (1):
xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
Jianbo Liu (1):
net/mlx5: Bridge, fix the crash caused by LAG state check
Joe Hattori (2):
powercap: call put_device() on an error path in powercap_register_control_type()
firmware: imx-scu: fix OF node leak in .probe()
Johan Hovold (1):
USB: serial: option: match on interface class for Telit FN990B
Joseph Huang (1):
net: dsa: mv88e6xxx: Verify after ATU Load ops
Jun Yang (1):
sched: address a potential NULL pointer dereference in the GRED scheduler.
Junxian Huang (4):
RDMA/hns: Fix soft lockup during bt pages loop
RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
RDMA/hns: Fix wrong value of max_sge_rd
Justin Iurman (1):
net: lwtunnel: fix recursion loops
Justin Klaassen (1):
arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S
Kamal Dasu (1):
mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops
Kan Liang (1):
perf/x86/intel: Use better start period for frequency mode
Kashyap Desai (1):
RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
Kohei Enju (1):
netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
Konstantin Komarov (2):
fs/ntfs3: Fix shift-out-of-bounds in ntfs_fill_super
fs/ntfs3: Change new sparse cluster processing
Kuninori Morimoto (2):
ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
ASoC: rsnd: adjust convert rate limitation
Kuniyuki Iwashima (2):
ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
Lin Ma (1):
net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
Long Li (2):
xfs: add lock protection when remove perag from radix tree
xfs: fix perag leak when growfs fails
Luiz Augusto von Dentz (2):
Bluetooth: hci_event: Fix enabling passive scanning
Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context"
Magnus Lindholm (1):
scsi: qla1280: Fix kernel oops when debug level > 2
Marek Vasut (2):
soc: imx8m: Remove global soc_uid
soc: imx8m: Use devm_* to simplify probe failure handling
Mario Limonciello (3):
drm/amd/display: Restore correct backlight brightness after a GPU reset
drm/amd/display: Fix slab-use-after-free on hdcp_work
drm/amd/display: Use HW lock mgr for PSR1 when only one eDP
Mark Pearson (1):
platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles
Martin Rodriguez Reboredo (1):
scripts: generate_rust_analyzer: provide `cfg`s for `core` and `alloc`
Matt Johnston (1):
net: mctp i2c: Copy headers if cloned
Matthew Maurer (1):
rust: Disallow BTF generation with Rust + LTO
Matthieu Baerts (NGI0) (1):
mptcp: safety check before fallback
Maurizio Lombardi (2):
nvme-tcp: add basic support for the C2HTermReq PDU
nvme-tcp: Fix a C2HTermReq error message
Maíra Canal (1):
drm/v3d: Don't run jobs that have errors flagged in its fence
Michael Kelley (3):
fbdev: hyperv_fb: iounmap() the correct memory when removing a device
drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
Miklos Szeredi (1):
fuse: don't truncate cached, mutated symlink
Ming Lei (1):
block: fix 'kmem_cache of name 'bio-108' already exists'
Miri Korenblit (1):
wifi: cfg80211: cancel wiphy_work before freeing wiphy
Murad Masimov (4):
cifs: Fix integer overflow while processing acregmax mount option
cifs: Fix integer overflow while processing acdirmax mount option
cifs: Fix integer overflow while processing actimeo mount option
cifs: Fix integer overflow while processing closetimeo mount option
Namjae Jeon (1):
ksmbd: fix incorrect validation for num_aces field of smb_acl
Nicklas Bo Jensen (1):
netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap around
Nikita Zhandarovich (1):
drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
Oleg Nesterov (1):
sched/isolation: Prevent boot crash when the boot CPU is nohz_full
Paulo Alcantara (2):
smb: client: fix noisy when tree connecting to DFS interlink targets
smb: client: fix potential UAF in cifs_dump_full_key()
Pavel Begunkov (1):
io_uring: fix corner case forgetting to vunmap
Peng Fan (1):
soc: imx8m: Unregister cpufreq and soc dev in cleanup path
Peter Oberparleiter (1):
s390/cio: Fix CHPID "configure" attribute caching
Phil Elwell (2):
ARM: dts: bcm2711: PL011 UARTs are actually r1p5
ARM: dts: bcm2711: Don't mark timer regs unconfigured
Rik van Riel (1):
scsi: core: Use GFP_NOIO to avoid circular locking dependency
Ruozhu Li (1):
nvmet-rdma: recheck queue state is LIVE in state lock in recv done
Saranya R (1):
soc: qcom: pdr: Fix the potential deadlock
Saravanan Vajravel (1):
RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
Sebastian Andrzej Siewior (2):
netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
netfilter: nft_counter: Use u64_stats_t for statistic.
Stefan Eichenberger (1):
arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to sound card
Stephan Gerhold (1):
net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
Steve French (1):
smb3: add support for IAKerb
Sven Eckelmann (1):
batman-adv: Ignore own maximum aggregation size during RX
Sybil Isabel Dorsett (1):
platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e
Taehee Yoo (1):
eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
Tamir Duberstein (1):
scripts: generate_rust_analyzer: add missing macros deps
Terry Cheong (1):
ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
Thomas Mizrahi (1):
ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model
Thomas Zimmermann (1):
drm/nouveau: Do not override forced connector status
Varada Pavani (1):
clk: samsung: update PLL locktime for PLL142XX used on FSD platform
Ville Syrjälä (1):
drm/atomic: Filter out redundant DPMS calls
Vinay Varma (1):
scripts: `make rust-analyzer` for out-of-tree modules
Vitaly Prosyak (1):
drm/amdgpu: fix use-after-free bug
Vitaly Rodionov (1):
ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
Wentao Liang (1):
net/mlx5: handle errors in mlx5_chains_create_table()
Werner Sembach (4):
Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ
Input: i8042 - add required quirks for missing old boardnames
Input: i8042 - swap old quirk combination with new quirk for several devices
Input: i8042 - swap old quirk combination with new quirk for more devices
Xueming Feng (1):
tcp: fix forever orphan socket caused by tcp_abort
Ye Bin (1):
proc: fix UAF in proc_get_inode()
Yu-Chun Lin (1):
sctp: Fix undefined behavior in left shift operation
Yunfei Dong (1):
media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
Zhang Lixu (2):
HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
HID: intel-ish-hid: Send clock sync message immediately after reset
Zhang Tianci (1):
xfs: update dir3 leaf block metadata after swap
Zhenhua Huang (1):
arm64: mm: Populate vmemmap at the page level if not section aligned
Zi Yan (1):
mm/migrate: fix shmem xarray update during migration
BUG=b/407182694
TEST=tryjob, validation and K8s e2e
RELEASE_NOTE=Updated the Linux kernel to v6.1.132.
Change-Id: Ic6665c53b51b4178bbbea36806ab12d0ab7c2d62
Signed-off-by: COS Kernel Merge Bot <cloud-image-merge-automation@prod.google.com>
