merge-upstream/v6.12.54 from branch/tag: upstream/v6.12.54 into branch: cos-6.12 Conflicts: arch/x86/kernel/kvm.c Changelog: ------------------------------------------------------------- Aaron Kling (1): cpufreq: tegra186: Set target frequency for all cpus in policy Abel Vesa (1): clk: qcom: tcsrcc-x1e80100: Set the bi_tcxo as parent to eDP refclk Abinash Singh (1): scsi: sd: Fix build warning in sd_revalidate_disk() Adam Xue (1): bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup() Ahmet Eray Karadag (1): ext4: guard against EA inode refcount underflow in xattr update Aleksa Sarai (1): fscontext: do not consume log entries when returning -EMSGSIZE Aleksandar Gerasimovski (1): iio/adc/pac1934: fix channel disable configuration Aleksandrs Vinarskis (1): arm64: dts: qcom: x1e80100-pmics: Disable pm8010 by default Alex Deucher (1): drm/amdgpu: Add additional DCE6 SCL registers Alexander Lobakin (1): xsk: Harden userspace-supplied xdp_desc validation Alexander Sverdlin (1): ARM: AM33xx: Implement TI advisory 1.0.36 (EMU0/EMU1 pins state on reset) Alexandr Sapozhnikov (1): net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() Alexey Gladkov (1): s390: vmlinux.lds.S: Reorder sections Alok Tiwari (1): clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver Amir Mohammad Jahangirzad (1): ACPI: debug: fix signedness issues in read/write helpers Anderson Nascimento (1): btrfs: avoid potential out-of-bounds in btrfs_encode_fh() Andy Shevchenko (2): mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type ACPI: battery: Check for error code from devm_mutex_init() call AngeloGioacchino Del Regno (1): clk: mediatek: mt8195-infra_ao: Fix parent for infra_ao_hdmi_26m Anthony Yznaga (1): sparc64: fix hugetlb for sun4u Arnd Bergmann (1): media: s5p-mfc: remove an unused/uninitialized variable Askar Safin (1): openat2: don't trigger automounts with RESOLVE_NO_XDEV Baokun Li (1): ext4: add ext4_sb_bread_nofail() helper function for ext4_free_branches() Bartosz Golaszewski (1): gpio: wcd934x: mark the GPIO controller as sleeping Borislav Petkov (AMD) (1): KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace Brian Masney (2): clk: at91: peripheral: fix return value clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate() Brian Norris (1): PCI/sysfs: Ensure devices are powered for config reads Catalin Marinas (1): arm64: mte: Do not flag the zero page as PG_mte_tagged Chen-Yu Tsai (1): clk: mediatek: clk-mux: Do not pass flags to clk_mux_determine_rate_flags() Christian Brauner (3): listmount: don't call path_put() under namespace semaphore statmount: don't call path_put() under namespace semaphore mount: handle NULL values in mnt_ns_release() Chuck Lever (1): NFSD: Replace use of NFSD_MAY_LOCK in nfsd4_lock() Clément Le Goffic (1): rtc: optee: fix memory leak on driver removal Corey Minyard (2): Revert "ipmi: fix msg stack when IPMI is disconnected" ipmi: Rework user message limit handling Dan Carpenter (2): clk: qcom: common: Fix NULL vs IS_ERR() check in qcom_cc_icc_register() net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter() Daniel Borkmann (1): bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} Daniel Tang (1): ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT Darrick J. Wong (1): fuse: fix livelock in synchronous file put from fuseblk workers David Lechner (1): media: pci: mg4b: fix uninitialized iio scan data Deepanshu Kartikey (1): ext4: validate ea_ino and size in check_xattrs Donet Tom (1): mm/ksm: fix incorrect KSM counter handling in mm_struct during fork Duoming Zhou (2): scsi: mvsas: Fix use-after-free bugs in mvs_work_queue net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work Dzmitry Sankouski (1): power: supply: max77976_charger: fix constant current reporting Edward Adam Davis (1): media: mc: Clear minor number before put device Eric Biggers (2): KEYS: trusted_tpm1: Compare HMAC values in constant time sctp: Fix MAC comparison to be constant-time Eric Dumazet (1): tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat() Eric Woudstra (1): bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu() Erick Karanja (1): net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe Esben Haabendal (2): rtc: interface: Ensure alarm irq is enabled when UIE is enabled rtc: interface: Fix long-standing race when setting alarm Fangzhi Zuo (1): drm/amd/display: Enable Dynamic DTBCLK Switch Fedor Pchelkin (1): clk: tegra: do not overallocate memory for bpmp clocks Fernando Fernandez Mancera (1): netfilter: nft_objref: validate objref and objrefmap expressions Finn Thain (1): fbdev: Fix logic error in "offb" name match Florian Westphal (1): selftests: netfilter: query conntrack state to check for port clash resolution Fushuai Wang (1): cifs: Fix copy_to_iter return value check Georg Gottleuber (1): nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk Greg Kroah-Hartman (1): Linux 6.12.54 Guenter Roeck (1): ipmi: Fix handling of messages with provided receive message pointer Gunnar Kudrjavets (1): tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single Hans Verkuil (1): media: vivid: fix disappearing <Vendor Command With ID> messages Hans de Goede (2): mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag Haotian Zhang (1): ice: ice_adapter: release xa entry on adapter allocation failure Haoxiang Li (1): fs/ntfs3: Fix a resource leak bug in wnd_extend() Harini T (4): mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop mailbox: zynqmp-ipi: Fix SGI cleanup on unbind Harshit Agarwal (1): sched/deadline: Fix race in push_dl_task() Heiko Carstens (1): s390: Add -Wno-pointer-sign to KBUILD_CFLAGS_DECOMPRESSOR Herbert Xu (1): crypto: essiv - Check ssize for decryption and in-place encryption Hongbo Li (1): irqchip/sifive-plic: Make use of __assign_bit() Huacai Chen (3): LoongArch: Init acpi_gbl_use_global_lock to false init: handle bootloader identifier in kernel parameters ACPICA: Allow to skip Global Lock initialization Ian Forbes (2): drm/vmwgfx: Fix Use-after-free in validation drm/vmwgfx: Fix copy-paste typo in validation Ian Rogers (8): perf disasm: Avoid undefined behavior in incrementing NULL perf test trace_btf_enum: Skip if permissions are insufficient perf evsel: Avoid container_of on a NULL leader libperf event: Ensure tracing data is multiple of 8 sized perf test shell lbr: Avoid failures with perf event paranoia perf test: Don't leak workload gopipe in PERF_RECORD_* perf evsel: Ensure the fallback message is always written to perf test stat: Avoid hybrid assumption when virtualized Ilkka Koskinen (1): perf vendor events arm64 AmpereOneX: Fix typo - should be l1d_cache_access_prefetches Ilya Leoshkevich (4): s390/bpf: Centralize frame offset calculations s390/bpf: Describe the frame using a struct instead of constants s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG Jaehoon Kim (2): s390/dasd: enforce dma_alignment to ensure proper buffer validation s390/dasd: Return BLK_STS_INVAL for EINVAL from do_dasd_request Jai Luthra (2): media: ti: j721e-csi2rx: Use devm_of_platform_populate media: ti: j721e-csi2rx: Fix source subdev link creation James Clark (1): perf test: Add a test for default perf stat command Jan Kara (4): ext4: verify orphan file size is not too big ext4: free orphan info with kvfree writeback: Avoid softlockup when switching many inodes writeback: Avoid excessively long inode switching times Jani Nurminen (1): PCI: xilinx-nwl: Fix ECAM programming Jann Horn (1): drm/panthor: Fix memory leak in panthor_ioctl_group_create() Jason Andryuk (3): xen/events: Cleanup find_virq() return codes xen/events: Return -EEXIST for bound VIRQs xen/events: Update virq_to_irq on migration Jason-JH Lin (1): mailbox: mtk-cmdq: Remove pm_runtime APIs from cmdq_mbox_send_data() Jisheng Zhang (1): pwm: berlin: Fix wrong register in suspend/resume Johan Hovold (2): firmware: meson_sm: fix device leak at probe lib/genalloc: fix device leak in of_gen_pool_get() John David Anglin (1): parisc: Remove spurious if statement from raw_copy_from_user() K Prateek Nayak (1): sched/fair: Block delayed tasks on throttled hierarchy during dequeue KaFai Wan (1): bpf: Avoid RCU context warning when unpinning htab with internal structs Kai Vehmanen (2): ASoC: SOF: ipc4-pcm: fix delay calculation when DSP resamples ASoC: SOF: ipc4-pcm: fix start offset calculation for chain DMA Kirill A. Shutemov (1): x86/mtrr: Rename mtrr_overwrite_state() to guest_force_mtrr_state() Krzysztof Kozlowski (1): pinctrl: samsung: Drop unused S3C24xx driver data Kuniyuki Iwashima (1): tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). Lance Yang (3): mm/thp: fix MTE tag mismatch when replacing zero-filled subpages selftests/mm: skip soft-dirty tests when CONFIG_MEM_SOFT_DIRTY is disabled mm/rmap: fix soft-dirty and uffd-wp bit loss when remapping zero-filled mTHP subpage to shared zeropage Laurent Pinchart (1): media: mc: Fix MUST_CONNECT handling for pads with no links Leo Yan (6): perf arm_spe: Correct setting remote access perf arm-spe: Rename the common data source encoding perf arm_spe: Correct memory level for remote access perf session: Fix handling when buffer exceeds 2 GiB tools build: Align warning options with perf perf python: split Clang options when invoking Popen Li Chen (1): loop: fix backing file reference leak on validation error Li RongQing (1): mm/hugetlb: early exit from hugetlb_pages_alloc_boot() when max_huge_pages=0 Lichen Liu (1): fs: Add 'initramfs_options' to set initramfs mount options Linus Walleij (1): mtd: rawnand: fsmc: Default to autodetect buswidth Lu Baolu (1): iommu/vt-d: PRS isn't usable if PDS isn't supported Lucas Zampieri (1): irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume Lukas Wunner (3): xen/manage: Fix suspend error path PCI/ERR: Fix uevent on failure to recover PCI/AER: Support errors introduced by PCIe r6.0 Ma Ke (3): media: lirc: Fix error handling in lirc_register() of: unittest: Fix device reference count leak in of_unittest_pci_node_verify sparc: fix error handling in scan_one_device() Marek Vasut (5): drm/rcar-du: dsi: Fix 1/2/3 lane support PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock PCI: rcar-gen4: Fix PHY initialization PCI: rcar-host: Drop PMSR spinlock PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock Matthew Auld (1): drm/xe/uapi: loosen used tracking restriction Matthieu Baerts (NGI0) (2): selftests: mptcp: join: validate C-flag + def limit mptcp: pm: in-kernel: usable client side with C-flag Miaoqian Lin (2): ARM: OMAP2+: pm33xx-core: ix device node reference leaks in amx3_idle_init xtensa: simdisk: add input size check in proc_write_simdisk Michael Hennerich (2): iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE iio: frequency: adf4350: Fix prescaler usage. Michael Riesch (1): dt-bindings: phy: rockchip-inno-csi-dphy: make power-domains non-required Miklos Szeredi (2): fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() copy_file_range: limit size if in compat mode Muhammad Usama Anjum (1): wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again Nam Cao (3): eventpoll: Replace rwlock with spinlock powerpc/powernv/pci: Fix underflow and leak issue powerpc/pseries/msi: Fix potential underflow and leak issue Namhyung Kim (2): perf test: Update sysfs path for core PMU caps perf tools: Add fallback for exclude_guest Nathan Chancellor (2): s390/vmlinux.lds.S: Move .vmlinux.info to end of allocatable sections lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older NeilBrown (2): nfsd: refine and rename NFSD_MAY_LOCK nfsd: don't use sv_nrthreads in connection limiting calculations. Nick Morrow (2): wifi: mt76: mt7925u: Add VID/PID for Netgear A9000 wifi: mt76: mt7921u: Add VID/PID for Netgear A7500 Niklas Cassel (2): PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() PCI: tegra194: Reset BARs when running in PCIe endpoint mode Niklas Schnelle (2): PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV PCI/AER: Fix missing uevent on recovery when a reset is requested Ojaswin Mujoo (1): ext4: correctly handle queries for metadata mappings Oleg Nesterov (1): kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths Olga Kornievskaia (4): nfsd: nfserr_jukebox in nlm_fopen should lead to a retry nfsd: unregister with rpcbind when deleting a transport nfsd: fix __fh_verify for localio nfsd: fix access checking for NLM under XPRTSEC policies Omar Sandoval (1): arm64: map [_text, _stext) virtual address range non-executable+read-only Pali Rohár (2): cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points nfsd: Fix NFSD_MAY_BYPASS_GSS and NFSD_MAY_BYPASS_GSS_ON_ROOT Paulo Alcantara (1): smb: client: fix missing timestamp updates after utime(2) Peter Ujfalusi (5): ASoC: SOF: ipc4-topology: Correct the minimum host DMA buffer size ASoC: SOF: ipc4-topology: Account for different ChainDMA host buffer size ASoC: SOF: Intel: hda-pcm: Place the constraint on period time instead of buffer time ASoC: SOF: Intel: Read the LLP via the associated Link DMA channel ASoC: SOF: ipc4-pcm: Enable delay reporting for ChainDMA streams Petr Tesarik (1): dma-mapping: fix direction in dma_alloc direction traces Phillip Lougher (2): Squashfs: add additional inode sanity checking Squashfs: reject negative file sizes in squashfs_read_inode() Pratyush Yadav (2): spi: cadence-quadspi: Flush posted register writes before INDAC access spi: cadence-quadspi: Flush posted register writes before DAC access Qianfeng Rong (3): media: i2c: mt9v111: fix incorrect type for ret iio: dac: ad5360: use int type to store negative error codes iio: dac: ad5421: use int type to store negative error codes Qu Wenruo (1): btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range() Rafael J. Wysocki (7): ACPI: property: Fix buffer properties extraction for subnodes cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() cpufreq: Make drivers using CPUFREQ_ETERNAL specify transition latency ACPI: battery: Add synchronization between interface updates ACPI: property: Disregard references in data-only subnode lists ACPI: property: Add code comments explaining what is going on ACPI: property: Do not pass NULL handles to acpi_attach_data() Randy Dunlap (1): media: cec: extron-da-hd-4k-plus: drop external-module make commands Rex Chen (2): mmc: core: SPI mode remove cmd7 mmc: mmc_spi: multiple block read remove read crc ack Rob Herring (Arm) (1): rtc: x1205: Fix Xicor X1205 vendor prefix Robin Murphy (1): perf/arm-cmn: Fix CMN S3 DTM offset Sakari Ailus (2): mailbox: mtk-cmdq-mailbox: Switch to __pm_runtime_put_autosuspend() mailbox: mtk-cmdq: Switch to pm_runtime_put_autosuspend() Sam James (1): parisc: don't reference obsolete termio struct for TC* constants Santhosh Kumar K (1): spi: cadence-quadspi: Fix cqspi_setup_flash() Scott Mayhew (1): nfsd: decouple the xprtsec policy check from check_nfsd_access() Sean Anderson (2): iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK iio: xilinx-ams: Unmask interrupts after updating alarms Sean Christopherson (5): KVM: SVM: Emulate PERF_CNTR_GLOBAL_STATUS_SET for PerfMonV2 rseq/selftests: Use weak symbol reference, not definition, to link with glibc x86/umip: Check that the instruction opcode is at least two bytes x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases) x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP Sean Nyekjaer (1): iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume SeongJae Park (2): mm/damon/vaddr: do not repeat pte_offset_map_lock() until success mm/damon/lru_sort: use param_ctx for damon_attrs staging Shashank A P (1): fs: quota: create dedicated workqueue for quota_release_work Shin'ichiro Kawasaki (1): PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release Shuhao Fu (1): drm/nouveau: fix bad ret code in nouveau_bo_move_prep Shuicheng Lin (1): drm/xe/hw_engine_group: Fix double write lock release in error path Siddharth Vadapalli (2): PCI: j721e: Fix programming sequence of "strap" settings PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit Simon Schuster (1): copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64) Stephan Gerhold (4): arm64: dts: qcom: msm8916: Add missing MDSS reset arm64: dts: qcom: msm8939: Add missing MDSS reset arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees media: venus: firmware: Use correct reset sequence for IRIS2 Sumit Kumar (1): bus: mhi: ep: Fix chained transfer handling in read path Suren Baghdasaryan (2): slab: prevent warnings when slab obj_exts vector allocation fails slab: mark slab->obj_exts allocation failures unconditionally Tetsuo Handa (2): minixfs: Verify inode mode when loading from disk cramfs: Verify inode mode when loading from disk Thadeu Lima de Souza Cascardo (1): mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations Theodore Ts'o (1): ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() Thomas Fourier (5): media: cx18: Add missing check after DMA map media: pci: ivtv: Add missing check after DMA map crypto: aspeed - Fix dma_unmap_sg() direction crypto: atmel - Fix dma_unmap_sg() direction crypto: rockchip - Fix dma_unmap_sg() nents value Thomas Gleixner (1): rseq: Protect event mask against membarrier IPI Thomas Weißschuh (3): fs: always return zero on success from replace_fd() ACPI: battery: allocate driver data through devm_ APIs ACPI: battery: initialize mutexes through devm_ APIs Thorsten Blum (2): scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl() NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul() Tiezhu Yang (1): LoongArch: Add cflag -fno-isolate-erroneous-paths-dereference Timur Kristóf (3): drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6 drm/amd/display: Properly disable scaling on DCE6 Toke Høiland-Jørgensen (1): page_pool: Fix PP_MAGIC_MASK to avoid crashing on some 32-bit arches Tomi Valkeinen (1): media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try() Varad Gautam (1): asm-generic/io.h: Skip trace helpers if rwmmio events are disabled Vibhore Vardhan (1): arm64: dts: ti: k3-am62a-main: Fix main padcfg length Vidya Sagar (1): PCI: tegra194: Handle errors in BPMP response Vineeth Vijayan (1): s390/cio: Update purge function to unregister the unused subchannels Wang Jiang (1): PCI: endpoint: Remove surplus return statement from pci_epf_test_clean_dma_chan() Xin Li (Intel) (1): x86/fred: Remove ENDBR64 from FRED entry points Yang Shi (1): arm64: kprobes: call set_memory_rox() for kprobe page Yongjian Sun (1): ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch() Yu Kuai (1): blk-crypto: fix missing blktrace bio split events Yuan CHen (1): clk: renesas: cpg-mssr: Fix memory leak in cpg_mssr_reserved_init() Yuan Chen (1): tracing: Fix race condition in kprobe initialization causing NULL pointer dereference Yunseong Kim (1): perf util: Fix compression checks returning -1 as bool Zack Rusin (1): drm/vmwgfx: Fix a null-ptr access in the cursor snooper Zhang Yi (1): ext4: fix an off-by-one issue during moving extents Zhen Ni (2): clocksource/drivers/clps711x: Fix resource leaks in error paths memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe gaoxiang17 (1): pid: Add a judgment for ns null in pid_nr_ns BUG=b/453570798 TEST=tryjob, validation and K8s e2e RELEASE_NOTE=Updated the Linux kernel to v6.12.54. Change-Id: Id14daabeddeb56421fa399ce4b7d90548ea2e597 Signed-off-by: Robert Kolchmeyer <rkolchmeyer@google.com> Reviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/115021 Reviewed-by: Kevin Berry <kpberry@google.com> Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com> 