[GIT PULL] gpio fixes for v7.4-rc3

[GIT PULL] gpio fixes for v7.4-rc3

[Bartosz Golaszewski]

Linus,

Please pull the following set of GPIO fixes for the next RC. To no surprise,
this batch was mostly driven by issues found by LLMs (notably: sashiko) during
reviews of other changes. This is why it's bigger than what I normally send at
this stage. It's likely that the next week's PR will be similar in size.

Thanks,
Bartosz

The following changes since commit 6628e7d4c6b25c8d18f1345e3a20d21829aae7e4:

  Linux 7.4-rc1 (2026-11-01 13:26:31 -0800)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux.git gpio-fixes-for-v7.4-rc3

for you to fetch changes up to f8a4fdf57cedb9cb3f47d94269ff27fea8e819e8:

  gpiolib: fix stack out-of-bounds access in gpiochip_add_hog() (2026-11-12 09:32:48 +0100)

----------------------------------------------------------------
gpio fixes for v7.4-rc3

Fixes in GPIO core:
- fix a race in shared GPIO descriptor release path
- fix several issues in gpio-shared-proxy: race between concurrent
  initial users, dropping votes in error paths and driving the default
  value with no votes cast
- fix stack out-of-bounds access bugs in GPIO hog handling
- fix a race in GPIO descriptor consumer label update
- reset lookup flags on each hogged line
- fix GPIO descriptor leak and fast-path cancellation in gpiod_get_array()
- fix return value in of_gpiochip_instance_match() stub for !CONFIG_OF
- fix potential misconfiguration of flags for hogged lines on OF systems
- fix a reference leak in deferred GPIO controller setup error path

Fixes in GPIO drivers:
- fix interrupt handling bugs in gpio-aspeed
- fix an interrupt leak and two UAF bugs in gpio-virtuser
- fix a UAF bugs in gpio-sodaville, gpio-mpc8xxx and gpio-brcmstb
- fix a sleeping-while-atomic bug in gpio-mvebu
- reject unsupported interrupt types in gpio-mpfs
- fix an irqchip leak in gpio-regmap helper
- fix debounce arithmetic in gpio-rockchip
- propagate runtime PM failures in gpio-omap
- defer GPIO chip registration to postcore_initcall() in gpio-sa1100

----------------------------------------------------------------
Avi Weiss (1):
      gpio: omap: Propagate runtime PM failures in probe and request

Bartosz Golaszewski (8):
      Merge tag 'v7.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux into gpio/for-current
      gpio: of: fix potential misconfiguration of hogged lines
      gpiolib: synchronize updates of descriptor labels
      gpio: mvebu: fix sleeping-while-atomic in mvebu_gpio_level_irq_mask()
      gpio: virtuser: fix interrupt leak and UAF
      gpio: sodaville: fix use-after-free bug when registering the irqchip
      gpio: shared: fix a race in shared desc release path
      gpiolib: fix stack out-of-bounds access in gpiochip_add_hog()

Billy Tsai (2):
      gpio: aspeed: Clear only the acked line's G4 interrupt status
      gpio: aspeed: Preserve the pending G7 interrupt status on control writes

Cunhao Lu (1):
      gpio: rockchip: Fix debounce arithmetic for GPIO v2

Dmitry Torokhov (4):
      gpio: sa1100: defer GPIO chip registration to postcore_initcall
      gpiolib: fix GPIO descriptor leak in gpiod_get_array()
      gpiolib: fix fast-path cancellation in gpiod_get_array()
      gpiolib: of: return -ENOENT from of_gpio_count() stub

Guangshuo Li (2):
      gpio: brcmstb: fix UAF after IRQ domain setup failure
      gpio: mpc8xxx: Fix potential use-after-free of IRQ domain

Isaac Adjei (1):
      gpio: mpfs: reject unsupported interrupt types

Jinseob Kim (1):
      gpiolib: reset lookup flags for each hogged line

Long Zhao (1):
      gpio: regmap: free the irqchip if adding the irq domain fails

Shawn Guo (4):
      gpio: shared-proxy: Fix race between concurrent first users
      gpio: shared-proxy: Drop the vote of a released proxy on write failure
      gpio: shared-proxy: Drive the default value when no votes are cast
      gpio: shared-proxy: Drop the vote when switching to input

Wentao Liang (1):
      gpio: keep the chip reference when deferred setup fails

Yu Zhang (1):
      gpio: virtuser: remove the debugfs files before freeing the line data

 drivers/gpio/gpio-aspeed.c       | 19 +++++++-
 drivers/gpio/gpio-brcmstb.c      |  1 +
 drivers/gpio/gpio-mpc8xxx.c      | 22 ++++++---
 drivers/gpio/gpio-mpfs.c         |  2 +
 drivers/gpio/gpio-mvebu.c        |  2 +
 drivers/gpio/gpio-omap.c         | 13 +++++-
 drivers/gpio/gpio-regmap.c       |  5 ++
 drivers/gpio/gpio-rockchip.c     | 15 ++++--
 drivers/gpio/gpio-sa1100.c       | 32 +++++++++++--
 drivers/gpio/gpio-shared-proxy.c | 98 +++++++++++++++++++++++++++++++++++-----
 drivers/gpio/gpio-sodaville.c    |  9 ++--
 drivers/gpio/gpio-virtuser.c     | 85 +++++++++++++++++++++++-----------
 drivers/gpio/gpiolib-of.c        |  2 +-
 drivers/gpio/gpiolib-of.h        |  2 +-
 drivers/gpio/gpiolib-shared.c    |  6 +--
 drivers/gpio/gpiolib-shared.h    |  1 +
 drivers/gpio/gpiolib.c           | 69 ++++++++++++++++------------
 drivers/gpio/gpiolib.h           |  2 +
 18 files changed, 288 insertions(+), 97 deletions(-)