android/android_kernel_xiaomi_sm8450
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,035,723 Commits 2 Branches 0 Tags 2.3 GiB
lineage-22.0
Commit Graph

310 Commits

Author SHA1 Message Date
Kamati Srinivas
c558e5abfe drivers: qcom: Add support to freeze-restore watchdog 
Freeze the watchdog during suspend and enable it
after resume.

Change-Id: I7e09d2d78f494b8aee9d9c59f681fe6e574a4f9a
Signed-off-by: Shreyas K K <quic_shrekk@quicinc.com>
Signed-off-by: Auditya Bhattaram <quic_audityab@quicinc.com>
Signed-off-by: Kamati Srinivas <quic_kamasrin@quicinc.com>
 2024-05-07 13:25:25 +05:30
Elliot Berman
b5ed7b787a virt: gunyah: Correct max_buf_size for a connection 
Continuation messages can carry a maximum payload of
GH_RM_MAX_MSG_SIZE_BYTES. When initializing a connection buffer for
reply sequences, the hdr_size is 4 bytes larger than the
GH_RM_MAX_MSG_SIZE_BYTES: see the difference between
struct gh_rm_rpc_hdr and struct gh_rm_rpc_reply_hdr.

Fix the calculation.

Change-Id: If7a1124f581c9d1da8f7749d0296e064e6499cdf
Signed-off-by: Elliot Berman <quic_eberman@quicinc.com>
 2023-08-03 09:06:36 -07:00
Srinivasarao Pathipati
57d7f6b039 Merge keystone/android12-5.10-keystone-qcom-release.149+ (a3f0c2f) into msm-5.10 
* refs/heads/tmp-a3f0c2f:
  Revert "Input: atmel_mxt_ts - fix up inverted RESET handler"
  ANDROID: cpu: correct dl_cpu_busy() calls
  ANDROID: usb: gadget: uvc: remove duplicate code in unbind
  ANDROID: mm: disable speculative page faults for CONFIG_NUMA
  ANDROID: disable page table moves when speculative page faults are enabled
  ANDROID: mm: skip pte_alloc during speculative page fault
  UPSTREAM: binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
  UPSTREAM: binder: Address corner cases in deferred copy and fixup
  UPSTREAM: binder: fix pointer cast warning
  UPSTREAM: binder: defer copies of pre-patched txn data
  UPSTREAM: binder: read pre-translated fds from sender buffer
  UPSTREAM: binder: avoid potential data leakage when copying txn
  UPSTREAM: bpf: Ensure correct locking around vulnerable function find_vpid()
  BACKPORT: UPSTREAM: usb: typec: ucsi: Wait for the USB role switches
  UPSTREAM: HID: roccat: Fix use-after-free in roccat_read()
  ANDROID: arm64: mm: perform clean & invalidation in __dma_map_area
  BACKPORT: ANDROID: dma-buf: heaps: replace mutex lock with spinlock
  UPSTREAM: binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
  UPSTREAM: binder: Address corner cases in deferred copy and fixup
  UPSTREAM: binder: fix pointer cast warning
  UPSTREAM: binder: defer copies of pre-patched txn data
  UPSTREAM: binder: read pre-translated fds from sender buffer
  UPSTREAM: binder: avoid potential data leakage when copying txn
  ANDROID: khugepaged: fix mixing declarations warning in retract_page_tables
  ANDROID: mm: fix build issue in spf when CONFIG_USERFAULTFD=n
  ANDROID: mm: disable speculative page faults for CONFIG_NUMA
  ANDROID: mm: fix invalid backport in speculative page fault path
  ANDROID: disable page table moves when speculative page faults are enabled
  ANDROID: mm: assert that mmap_lock is taken exclusively in vm_write_begin
  ANDROID: mm: remove sequence counting when mmap_lock is not exclusively owned
  ANDROID: mm/khugepaged: add missing vm_write_{begin|end}
  BACKPORT: FROMLIST: mm: implement speculative handling in filemap_fault()
  ANDROID: mm: prevent reads of unstable pmd during speculation
  ANDROID: mm: prevent speculative page fault handling for in do_swap_page()
  ANDROID: mm: prevent speculative page fault handling for userfaults
  ANDROID: mm: skip pte_alloc during speculative page fault
  FROMGIT: mm/madvise: fix madvise_pageout for private file mappings
  ANDROID: GKI: Update symbols to symbol list
  Revert "FROMGIT: mm/vmalloc: Add override for lazy vunmap"
  Revert "FROMGIT: arm64: Work around Cortex-A510 erratum 2454944"
  UPSTREAM: efi: capsule-loader: Fix use-after-free in efi_capsule_write
  FROMGIT: arm64: Work around Cortex-A510 erratum 2454944
  FROMGIT: mm/vmalloc: Add override for lazy vunmap
  BACKPORT: mm/page_alloc: always initialize memory map for the holes
  UPSTREAM: usb: dwc3: gadget: Submit endxfer command if delayed during disconnect
  UPSTREAM: usb: dwc3: Fix ep0 handling when getting reset while doing control transfer
  UPSTREAM: mm/damon/core: initialize damon_target->list in damon_new_target()
  UPSTREAM: usb: typec: ucsi: Remove incorrect warning
  UPSTREAM: xhci: Don't show warning for reinit on known broken suspend
  UPSTREAM: mm/damon: validate if the pmd entry is present before accessing
  UPSTREAM: mm/damon/dbgfs: fix memory leak when using debugfs_lookup()
  UPSTREAM: mm/damon/dbgfs: avoid duplicate context directory creation
  UPSTREAM: crypto: lib - remove unneeded selection of XOR_BLOCKS
  UPSTREAM: pinctrl: sunxi: Fix name for A100 R_PIO
  UPSTREAM: cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
  BACKPORT: usb: gadget: f_uac2: fix superspeed transfer
  BACKPORT: usb: dwc3: qcom: fix runtime PM wakeup
  UPSTREAM: KVM: arm64: Reject 32bit user PSTATE on asymmetric systems
  UPSTREAM: KVM: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems
  UPSTREAM: Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression
  UPSTREAM: mm: fix page leak with multiple threads mapping the same page
  UPSTREAM: PM: domains: Ensure genpd_debugfs_dir exists before remove
  UPSTREAM: usb: gadget: uvc: fix changing interface name via configfs
  BACKPORT: dma-mapping: Fix build error unused-value
  UPSTREAM: tools/vm/slabinfo: Handle files in debugfs
  UPSTREAM: mm/damon: use set_huge_pte_at() to make huge pte old
  UPSTREAM: usb: gadget: f_mass_storage: Make CD-ROM emulation works with Windows OS
  UPSTREAM: blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx
  UPSTREAM: PM: domains: Fix initialization of genpd's next_wakeup
  BACKPORT: f2fs: don't use casefolded comparison for "." and ".."
  UPSTREAM: regulator: scmi: Fix refcount leak in scmi_regulator_probe
  UPSTREAM: block/mq-deadline: Set the fifo_time member also if inserting at head
  BACKPORT: Revert "mm/cma.c: remove redundant cma_mutex lock"
  UPSTREAM: module.h: simplify MODULE_IMPORT_NS
  UPSTREAM: iommu/mediatek: Add mutex for m4u_group and m4u_dom in data
  UPSTREAM: iommu/mediatek: Remove clk_disable in mtk_iommu_remove
  UPSTREAM: iommu/mediatek: Fix 2 HW sharing pgtable issue
  UPSTREAM: mm: hugetlb: add missing cache flushing in hugetlb_unshare_all_pmds()
  UPSTREAM: selftests/damon: add damon to selftests root Makefile
  FROMGIT: f2fs: allow to read node block after shutdown
  BACKPORT: f2fs: do not submit NEW_ADDR to read node block
  BACKPORT: ext4,f2fs: fix readahead of verity data
  ANDROID: GKI: db845c: Update symbols list and ABI
  Linux 5.10.149
  wifi: mac80211: fix MBSSID parsing use-after-free
  wifi: mac80211: don't parse mbssid in assoc response
  mac80211: mlme: find auth challenge directly
  Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
  Linux 5.10.148
  misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
  misc: pci_endpoint_test: Aggregate params checking for xfer
  Input: xpad - fix wireless 360 controller breaking after suspend
  Input: xpad - add supported devices as contributed on github
  wifi: cfg80211: update hidden BSSes to avoid WARN_ON
  wifi: mac80211: fix crash in beacon protection for P2P-device
  wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
  wifi: cfg80211: avoid nontransmitted BSS list corruption
  wifi: cfg80211: fix BSS refcounting bugs
  wifi: cfg80211: ensure length byte is present before access
  wifi: cfg80211/mac80211: reject bad MBSSID elements
  wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans()
  random: use expired timer rather than wq for mixing fast pool
  random: avoid reading two cache lines on irq randomness
  USB: serial: qcserial: add new usb-id for Dell branded EM7455
  scsi: stex: Properly zero out the passthrough command structure
  efi: Correct Macmini DMI match in uefi cert quirk
  ALSA: hda: Fix position reporting on Poulsbo
  random: clamp credited irq bits to maximum mixed
  random: restore O_NONBLOCK support
  Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
  rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
  USB: serial: ftdi_sio: fix 300 bps rate for SIO
  usb: mon: make mmapped memory read only
  mmc: core: Terminate infinite loop in SD-UHS voltage switch
  mmc: core: Replace with already defined values for readability
  drm/amd/display: skip audio setup when audio stream is enabled
  drm/amd/display: update gamut remap if plane has changed
  net: atlantic: fix potential memory leak in aq_ndev_close()
  arch: um: Mark the stack non-executable to fix a binutils warning
  um: Cleanup compiler warning in arch/x86/um/tls_32.c
  um: Cleanup syscall_handler_t cast in syscalls_32.h
  ALSA: hda/hdmi: Fix the converter reuse for the silent stream
  net/ieee802154: fix uninit value bug in dgram_sendmsg
  scsi: qedf: Fix a UAF bug in __qedf_probe()
  ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
  dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
  dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
  dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
  firmware: arm_scmi: Add SCMI PM driver remove routine
  compiler_attributes.h: move __compiletime_{error|warning}
  fs: fix UAF/GPF bug in nilfs_mdt_destroy
  powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
  mm: gup: fix the fast GUP race against THP collapse
  ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
  xsk: Inherit need_wakeup flag for shared sockets
  perf tools: Fixup get_current_dir_name() compilation
  docs: update mediator information in CoC docs
  Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
  ceph: don't truncate file in atomic_open
  nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
  nilfs2: fix leak of nilfs_root in case of writer thread creation failure
  nilfs2: fix use-after-free bug of struct nilfs_root
  nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level()
  Linux 5.10.147
  ALSA: hda/hdmi: fix warning about PCM count when used with SOF
  x86/alternative: Fix race in try_get_desc()
  KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
  clk: iproc: Do not rely on node name for correct PLL setup
  clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
  selftests: Fix the if conditions of in test_extra_filter()
  net: stmmac: power up/down serdes in stmmac_open/release
  nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
  nvme: add new line after variable declatation
  cxgb4: fix missing unlock on ETHOFLD desc collect fail path
  net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
  usbnet: Fix memory leak in usbnet_disconnect()
  Input: melfas_mip4 - fix return value check in mip4_probe()
  Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
  ASoC: tas2770: Reinit regcache on reset
  soc: sunxi: sram: Fix debugfs info for A64 SRAM C
  soc: sunxi: sram: Fix probe function ordering issues
  soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
  soc: sunxi: sram: Prevent the driver from being unbound
  soc: sunxi: sram: Actually claim SRAM regions
  reset: imx7: Fix the iMX8MP PCIe PHY PERST support
  ARM: dts: am33xx: Fix MMCHS0 dma properties
  scsi: hisi_sas: Revert "scsi: hisi_sas: Limit max hw sectors for v3 HW"
  swiotlb: max mapping size takes min align mask into account
  media: rkvdec: Disable H.264 error detection
  media: dvb_vb2: fix possible out of bound access
  mm: fix madivse_pageout mishandling on non-LRU page
  mm/migrate_device.c: flush TLB while holding PTL
  mm: prevent page_frag_alloc() from corrupting the memory
  mm/page_alloc: fix race condition between build_all_zonelists and page allocation
  mmc: hsq: Fix data stomping during mmc recovery
  mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
  libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
  net: mt7531: only do PLL once after the reset
  ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
  ARM: dts: integrator: Tag PCI host with device_type
  clk: ingenic-tcu: Properly enable registers before accessing timers
  Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
  net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
  thunderbolt: Explicitly reset plug events delay back to USB4 spec value
  usb: typec: ucsi: Remove incorrect warning
  uas: ignore UAS for Thinkplus chips
  usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
  uas: add no-uas quirk for Hiksemi usb_disk
  btrfs: fix hang during unmount when stopping a space reclaim worker
  ALSA: hda: Fix Nvidia dp infoframe
  ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
  ALSA: hda/tegra: Reset hardware
  ALSA: hda/tegra: Use clk_bulk helpers
  thunderbolt: Add support for Intel Maple Ridge single port controller
  thunderbolt: Add support for Intel Maple Ridge
  Revert "usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind"
  Linux 5.10.146
  ext4: make directory inode spreading reflect flexbg size
  ext4: limit the number of retries after discarding preallocations blocks
  ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0
  devdax: Fix soft-reservation memory description
  i2c: mlxbf: Fix frequency calculation
  i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
  i2c: mlxbf: incorrect base address passed during io write
  i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
  workqueue: don't skip lockdep work dependency in cancel_work_sync()
  drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
  drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
  drm/amd/display: Limit user regamma to a valid value
  drm/amdgpu: use dirty framebuffer helper
  drm/gma500: Fix BUG: sleeping function called from invalid context errors
  Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
  cifs: always initialize struct msghdr smb_msg completely
  cifs: use discard iterator to discard unneeded network data more efficiently
  drm/amdgpu: Fix check for RAS support
  vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
  usb: xhci-mtk: fix issue of out-of-bounds array access
  s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
  serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
  serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
  serial: Create uart_xmit_advance()
  drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
  selftests: forwarding: add shebang for sch_red.sh
  net: sched: fix possible refcount leak in tc_new_tfilter()
  net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD
  net/smc: Stop the CLC flow if no link to map buffers on
  drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
  perf kcore_copy: Do not check /proc/modules is unchanged
  perf jit: Include program header in ELF files
  can: gs_usb: gs_can_open(): fix race dev->can.state condition
  netfilter: ebtables: fix memory leak when blob is malformed
  netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
  netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
  net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
  net/sched: taprio: avoid disabling offload when it was never enabled
  net: socket: remove register_gifconf
  net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
  wireguard: netlink: avoid variable-sized memcpy on sockaddr
  wireguard: ratelimiter: disable timings test by default
  net: ipa: properly limit modem routing table use
  net: ipa: kill IPA_TABLE_ENTRY_SIZE
  net: ipa: DMA addresses are nicely aligned
  net: ipa: avoid 64-bit modulus
  net: ipa: fix table alignment requirement
  net: ipa: fix assumptions about DMA address size
  of: mdio: Add of_node_put() when breaking out of for_each_xx
  drm/hisilicon: Add depends on MMU
  drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
  sfc: fix null pointer dereference in efx_hard_start_xmit
  sfc: fix TX channel offset when using legacy interrupts
  i40e: Fix set max_tx_rate when it is lower than 1 Mbps
  i40e: Fix VF set max MTU size
  iavf: Fix set max MTU size with port VLAN and jumbo frames
  iavf: Fix bad page state
  MIPS: Loongson32: Fix PHY-mode being left unspecified
  MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
  drm/panel: simple: Fix innolux_g121i1_l01 bus_format
  net: team: Unsync device addresses on ndo_stop
  net: bonding: Unsync device addresses on ndo_stop
  net: bonding: Share lacpdu_mcast_addr definition
  scsi: mpt3sas: Fix return value check of dma_get_required_mask()
  scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
  net: phy: aquantia: wait for the suspend/resume operations to finish
  net: core: fix flow symmetric hash
  net: let flow have same hash in two directions
  ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
  iavf: Fix cached head and tail value for iavf_get_tx_pending
  netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
  netfilter: nf_conntrack_irc: Tighten matching on DCC message
  netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
  arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
  dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
  arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
  drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
  arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
  xfs: validate inode fork size against fork format
  xfs: reorder iunlink remove operation in xfs_ifree
  xfs: fix up non-directory creation in SGID directories
  interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
  KVM: SEV: add cache flush to solve SEV cache incoherency issues
  mm/slub: fix to return errno if kmalloc() fails
  can: flexcan: flexcan_mailbox_read() fix return value for drop = true
  riscv: fix a nasty sigreturn bug...
  gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
  gpio: mockup: fix NULL pointer dereference when removing debugfs
  wifi: mt76: fix reading current per-tid starting sequence number for aggregation
  efi: libstub: check Shim mode using MokSBStateRT
  efi: x86: Wipe setup_data on pure EFI boot
  media: flexcop-usb: fix endpoint type check
  iommu/vt-d: Check correct capability for sagaw determination
  ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
  ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
  ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
  ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
  ALSA: hda/realtek: Re-arrange quirk table entries
  ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
  ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
  ALSA: hda: add Intel 5 Series / 3400 PCI DID
  ALSA: hda/tegra: set depop delay for tegra
  USB: serial: option: add Quectel RM520N
  USB: serial: option: add Quectel BG95 0x0203 composition
  USB: core: Fix RST error in hub.c
  arm64/bti: Disable in kernel BTI when cross section thunks are broken
  arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
  Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
  vfio/type1: Unpin zero pages
  vfio/type1: Prepare for batched pinning with struct vfio_batch
  vfio/type1: Change success value of vaddr_get_pfn()
  Revert "usb: add quirks for Lenovo OneLink+ Dock"
  usb: cdns3: fix issue with rearming ISO OUT endpoint
  usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
  usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
  usb: add quirks for Lenovo OneLink+ Dock
  tty: serial: atmel: Preserve previous USART mode if RS485 disabled
  serial: atmel: remove redundant assignment in rs485_config
  mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
  usb: xhci-mtk: relax TT periodic bandwidth allocation
  usb: xhci-mtk: allow multiple Start-Split in a microframe
  usb: xhci-mtk: add some schedule error number
  usb: xhci-mtk: add a function to (un)load bandwidth info
  usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
  usb: xhci-mtk: add only one extra CS for FS/LS INTR
  usb: xhci-mtk: get the microframe boundary for ESIT
  usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
  usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
  usb: dwc3: gadget: Refactor pullup()
  usb: dwc3: gadget: Prevent repeat pullup()
  usb: dwc3: Issue core soft reset before enabling run/stop
  usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
  usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
  usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
  drm/amdgpu: make sure to init common IP before gmc
  drm/amdgpu: Separate vf2pf work item init from virt data exchange
  drm/amdgpu: indirect register access for nv12 sriov
  drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
  Linux 5.10.145
  ALSA: hda/sigmatel: Fix unused variable warning for beep power change
  cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
  video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write
  mksysmap: Fix the mismatch of 'L0' symbols in System.map
  MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
  afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
  net: usb: qmi_wwan: add Quectel RM520N
  ALSA: hda/tegra: Align BDL entry to 4KB boundary
  ALSA: hda/sigmatel: Keep power up while beep is enabled
  wifi: mac80211_hwsim: check length for virtio packets
  rxrpc: Fix calc of resend age
  rxrpc: Fix local destruction being repeated
  regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
  ASoC: nau8824: Fix semaphore unbalance at error paths
  Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
  video: fbdev: i740fb: Error out if 'pixclock' equals zero
  tools/include/uapi: Fix <asm/errno.h> for parisc and xtensa
  cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
  cifs: revalidate mapping when doing direct writes
  of/device: Fix up of_dma_configure_id() stub
  tracing: hold caller_addr to hardirq_{enable,disable}_ip
  parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
  drm/meson: Fix OSD1 RGB to YCbCr coefficient
  drm/meson: Correct OSD1 global alpha value
  gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
  NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
  pinctrl: sunxi: Fix name for A100 R_PIO
  of: fdt: fix off-by-one error in unflatten_dt_nodes()
  net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
  platform/x86/intel: hid: add quirk to support Surface Go 3
  usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
  powerpc/pseries/mobility: ignore ibm, platform-facilities updates
  powerpc/pseries/mobility: refactor node lookup during DT update
  dmaengine: bestcomm: fix system boot lockups
  parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
  parisc: Optimize per-pagetable spinlocks
  serial: 8250: Fix reporting real baudrate value in c_ospeed field
  KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
  KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
  Revert "USB: core: Prevent nested device-reset calls"
  Revert "xhci: Add grace period after xHC start to prevent premature runtime suspend."
  Revert "mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse"
  Revert "io_uring: disable polling pollfree files"
  Linux 5.10.144
  Input: goodix - add compatible string for GT1158
  soc: fsl: select FSL_GUTS driver for DPIO
  x86/ftrace: Use alternative RET encoding
  x86/ibt,ftrace: Make function-graph play nice
  Revert "x86/ftrace: Use alternative RET encoding"
  mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
  usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS
  platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
  perf/arm_pmu_platform: fix tests for platform_get_irq() failure
  drm/amd/amdgpu: skip ucode loading if ucode_size == 0
  nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
  Input: iforce - add support for Boeder Force Feedback Wheel
  ieee802154: cc2520: add rc code in cc2520_tx()
  gpio: mockup: remove gpio debugfs when remove device
  tg3: Disable tg3 device on system reboot to avoid triggering AER
  hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
  HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
  drm/msm/rd: Fix FIFO-full deadlock
  Input: goodix - add support for GT1158
  tracefs: Only clobber mode/uid/gid on remount if asked
  iommu/vt-d: Correctly calculate sagaw value of IOMMU
  ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
  ARM: dts: imx: align SPI NOR node name with dtschema
  Linux 5.10.143
  arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly
  hwmon: (mr75203) enable polling for all VM channels
  hwmon: (mr75203) fix multi-channel voltage reading
  hwmon: (mr75203) fix voltage equation for negative source input
  hwmon: (mr75203) update pvt->v_num and vm_num to the actual number of used sensors
  hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
  iommu/amd: use full 64-bit value in build_completion_wait()
  swiotlb: avoid potential left shift overflow
  MIPS: loongson32: ls1c: Fix hang during startup
  ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
  ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
  sch_sfb: Also store skb len before calling child enqueue
  tcp: fix early ETIMEDOUT after spurious non-SACK RTO
  nvme-tcp: fix regression that causes sporadic requests to time out
  nvme-tcp: fix UAF when detecting digest errors
  RDMA/mlx5: Set local port to one when accessing counters
  IB/core: Fix a nested dead lock as part of ODP flow
  ipv6: sr: fix out-of-bounds read when setting HMAC data.
  RDMA/siw: Pass a pointer to virt_to_page()
  xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
  i40e: Fix kernel crash during module removal
  ice: use bitmap_free instead of devm_kfree
  tipc: fix shift wrapping bug in map_get()
  sch_sfb: Don't assume the skb is still around after enqueueing to child
  afs: Use the operation issue time instead of the reply time for callbacks
  rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
  ALSA: usb-audio: Register card again for iface over delayed_register option
  ALSA: usb-audio: Inform the delayed registration more properly
  netfilter: nf_conntrack_irc: Fix forged IP logic
  netfilter: nf_tables: clean up hook list when offload flags check fails
  netfilter: br_netfilter: Drop dst references before setting.
  ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
  ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
  ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
  ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
  RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift
  RDMA/hns: Fix supported page size
  soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
  RDMA/cma: Fix arguments order in net device validation
  tee: fix compiler warning in tee_shm_register()
  regulator: core: Clean up on enable failure
  ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
  smb3: missing inode locks in punch hole
  cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
  cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
  cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
  scsi: lpfc: Add missing destroy_workqueue() in error path
  scsi: mpt3sas: Fix use-after-free warning
  drm/i915: Implement WaEdpLinkRateDataReload
  nvmet: fix a use-after-free
  debugfs: add debugfs_lookup_and_remove()
  kprobes: Prohibit probes in gate area
  ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
  ALSA: aloop: Fix random zeros in capture data when using jiffies timer
  ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
  drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
  fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
  net/core/skbuff: Check the return value of skb_copy_bits()
  arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
  parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
  parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
  drm/radeon: add a force flush to delay work when radeon
  drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
  drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
  drm/gem: Fix GEM handle release errors
  scsi: megaraid_sas: Fix double kfree()
  scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
  Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
  fs: only do a memory barrier for the first set_buffer_uptodate()
  wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
  efi: capsule-loader: Fix use-after-free in efi_capsule_write
  efi: libstub: Disable struct randomization
  tty: n_gsm: avoid call of sleeping functions from atomic context
  tty: n_gsm: initialize more members at gsm_alloc_mux()
  xen-blkfront: Cache feature_persistent value before advertisement
  NFSD: Fix verifier returned in stable WRITEs
  Linux 5.10.142
  USB: serial: ch341: fix disabled rx timer on older devices
  USB: serial: ch341: fix lost character on LCR updates
  usb: dwc3: disable USB core PHY management
  usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
  usb: dwc3: fix PHY disable sequence
  mmc: core: Fix UHS-I SD 1.8V workaround branch
  btrfs: harden identification of a stale device
  drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
  ALSA: seq: Fix data-race at module auto-loading
  ALSA: seq: oss: Fix data-race for max_midi_devs access
  ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
  net: mac802154: Fix a condition in the receive path
  net: Use u64_stats_fetch_begin_irq() for stats fetch.
  ip: fix triggering of 'icmp redirect'
  wifi: mac80211: Fix UAF in ieee80211_scan_rx()
  wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
  driver core: Don't probe devices after bus_type.match() probe deferral
  usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
  USB: core: Prevent nested device-reset calls
  s390: fix nospec table alignments
  s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
  usb-storage: Add ignore-residue quirk for NXP PN7462AU
  USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
  usb: dwc2: fix wrong order of phy_power_on and phy_init
  usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
  USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
  USB: serial: option: add Quectel EM060K modem
  USB: serial: option: add support for OPPO R11 diag port
  USB: serial: cp210x: add Decagon UCA device id
  xhci: Add grace period after xHC start to prevent premature runtime suspend.
  media: mceusb: Use new usb_control_msg_*() routines
  thunderbolt: Use the actual buffer in tb_async_error()
  xen-blkfront: Advertise feature-persistent as user requested
  xen-blkback: Advertise feature-persistent as user requested
  mm: pagewalk: Fix race between unmap and page walker
  xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
  KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
  gpio: pca953x: Add mutex_lock for regcache sync in PM
  hwmon: (gpio-fan) Fix array out of bounds access
  clk: bcm: rpi: Add missing newline
  clk: bcm: rpi: Prevent out-of-bounds access
  clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
  clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
  Input: rk805-pwrkey - fix module autoloading
  clk: core: Fix runtime PM sequence in clk_core_unprepare()
  Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
  clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
  drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported"
  binder: fix UAF of ref->proc caused by race condition
  USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
  misc: fastrpc: fix memory corruption on open
  misc: fastrpc: fix memory corruption on probe
  iio: adc: mcp3911: use correct formula for AD conversion
  iio: ad7292: Prevent regulator double disable
  Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
  tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
  vt: Clear selection before changing the font
  powerpc: align syscall table for ppc32
  staging: rtl8712: fix use after free bugs
  serial: fsl_lpuart: RS485 RTS polariy is inverse
  net/smc: Remove redundant refcount increase
  Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
  tcp: annotate data-race around challenge_timestamp
  sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
  kcm: fix strp_init() order and cleanup
  ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
  net/sched: fix netdevice reference leaks in attach_default_qdiscs()
  net: sched: tbf: don't call qdisc_put() while holding tree lock
  Revert "xhci: turn off port power in shutdown"
  wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
  ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
  ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
  ieee802154/adf7242: defer destroy_workqueue call
  bpf, cgroup: Fix kernel BUG in purge_effective_progs
  iio: adc: mcp3911: make use of the sign bit
  platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
  drm/msm/dsi: Fix number of regulators for SDM660
  drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
  drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
  drm/msm/dsi: fix the inconsistent indenting
  Linux 5.10.141
  net: neigh: don't call kfree_skb() under spin_lock_irqsave()
  net/af_packet: check len when min_header_len equals to 0
  xfs: revert "xfs: actually bump warning counts when we send warnings"
  xfs: fix soft lockup via spinning in filestream ag selection loop
  xfs: fix overfilling of reserve pool
  xfs: always succeed at setting the reserve pool size
  xfs: remove infinite loop when reserving free block pool
  io_uring: disable polling pollfree files
  kprobes: don't call disarm_kprobe() for disabled kprobes
  lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
  netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
  drm/amdgpu: Increase tlb flush timeout for sriov
  drm/amd/display: Fix pixel clock programming
  drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid
  s390/hypfs: avoid error message under KVM
  neigh: fix possible DoS due to net iface start/stop loop
  drm/amd/display: clear optc underflow before turn off odm clock
  drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
  drm/amd/display: Avoid MPC infinite loop
  mmc: mtk-sd: Clear interrupts when cqe off/disable
  mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse
  bpf: Don't redirect packets with invalid pkt_len
  ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
  fbdev: fb_pm2fb: Avoid potential divide by zero error
  net: fix refcount bug in sk_psock_get (2)
  HID: hidraw: fix memory leak in hidraw_release()
  media: pvrusb2: fix memory leak in pvr_probe
  udmabuf: Set the DMA mask for the udmabuf device (v2)
  HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
  Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
  Bluetooth: L2CAP: Fix build errors in some archs
  kbuild: Fix include path in scripts/Makefile.modpost
  s390/mm: do not trigger write fault when vma does not allow VM_WRITE
  crypto: lib - remove unneeded selection of XOR_BLOCKS
  x86/nospec: Fix i386 RSB stuffing
  x86/nospec: Unwreck the RSB stuffing
  mm: Force TLB flush for PFNMAP mappings before unlink_file_vma()
  Linux 5.10.140
  bpf: Don't use tnum_range on array range checking for poke descriptors
  scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq
  scsi: ufs: core: Enable link lost interrupt
  perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU
  perf python: Fix build when PYTHON_CONFIG is user supplied
  blk-mq: fix io hung due to missing commit_rqs
  Documentation/ABI: Mention retbleed vulnerability info file for sysfs
  arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76
  md: call __md_stop_writes in md_stop
  Revert "md-raid: destroy the bitmap after destroying the thread"
  mm/hugetlb: fix hugetlb not supporting softdirty tracking
  xen/privcmd: fix error exit of privcmd_ioctl_dm_op()
  ACPI: processor: Remove freq Qos request for all CPUs
  s390: fix double free of GS and RI CBs on fork() failure
  asm-generic: sections: refactor memory_intersects
  loop: Check for overflow while configuring loop
  x86/bugs: Add "unknown" reporting for MMIO Stale Data
  x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry
  perf/x86/lbr: Enable the branch type for the Arch LBR by default
  btrfs: check if root is readonly while setting security xattr
  btrfs: add info when mount fails due to stale replace target
  btrfs: replace: drop assert for suspended replace
  btrfs: fix silent failure when deleting root reference
  ionic: fix up issues with handling EAGAIN on FW cmds
  rxrpc: Fix locking in rxrpc's sendmsg
  ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter
  net: Fix a data-race around sysctl_somaxconn.
  net: Fix data-races around sysctl_devconf_inherit_init_net.
  net: Fix data-races around sysctl_fb_tunnels_only_for_init_net.
  net: Fix a data-race around netdev_budget_usecs.
  net: Fix a data-race around netdev_budget.
  net: Fix a data-race around sysctl_net_busy_read.
  net: Fix a data-race around sysctl_net_busy_poll.
  net: Fix a data-race around sysctl_tstamp_allow_data.
  net: Fix data-races around sysctl_optmem_max.
  bpf: Folding omem_charge() into sk_storage_charge()
  ratelimit: Fix data-races in ___ratelimit().
  net: Fix data-races around netdev_tstamp_prequeue.
  net: Fix data-races around netdev_max_backlog.
  net: Fix data-races around weight_p and dev_weight_[rt]x_bias.
  net: Fix data-races around sysctl_[rw]mem_(max|default).
  net: Fix data-races around sysctl_[rw]mem(_offset)?.
  tcp: tweak len/truesize ratio for coalesce candidates
  netfilter: nf_tables: disallow binding to already bound chain
  netfilter: nf_tables: disallow jump to implicit chain from set element
  netfilter: nf_tables: upfront validation of data via nft_data_init()
  netfilter: bitwise: improve error goto labels
  netfilter: nft_cmp: optimize comparison for 16-bytes
  netfilter: nf_tables: consolidate rule verdict trace call
  netfilter: nftables: remove redundant assignment of variable err
  netfilter: nft_tunnel: restrict it to netdev family
  netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families
  netfilter: nf_tables: do not leave chain stats enabled on error
  netfilter: nft_payload: do not truncate csum_offset and csum_type
  netfilter: nft_payload: report ERANGE for too long offset and length
  bnxt_en: fix NQ resource accounting during vf creation on 57500 chips
  netfilter: ebtables: reject blobs that don't provide all entry points
  net: ipvtap - add __init/__exit annotations to module init/exit funcs
  bonding: 802.3ad: fix no transmission of LACPDUs
  net: moxa: get rid of asymmetry in DMA mapping/unmapping
  net: ipa: don't assume SMEM is page-aligned
  net/mlx5e: Properly disable vlan strip on non-UL reps
  ice: xsk: prohibit usage of non-balanced queue id
  ice: xsk: Force rings to be sized to power of 2
  nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout
  rose: check NULL rose_loopback_neigh->loopback
  mm/smaps: don't access young/dirty bit if pte unpresent
  mm/huge_memory.c: use helper function migration_entry_to_page()
  SUNRPC: RPC level errors should set task->tk_rpc_status
  NFSv4.2 fix problems with __nfs42_ssc_open
  NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open()
  xfrm: policy: fix metadata dst->dev xmit null pointer dereference
  af_key: Do not call xfrm_probe_algs in parallel
  xfrm: clone missing x->lastused in xfrm_do_migrate
  xfrm: fix refcount leak in __xfrm_policy_check()
  kernel/sched: Remove dl_boosted flag comment
  xfs: only bother with sync_filesystem during readonly remount
  xfs: return errors in xfs_fs_sync_fs
  vfs: make sync_filesystem return errors from ->sync_fs
  fs: remove __sync_filesystem
  xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP*
  xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list()
  pinctrl: amd: Don't save/restore interrupt status and wake status bits
  kernel/sys_ni: add compat entry for fadvise64_64
  parisc: Fix exception handler for fldw and fstw instructions
  audit: fix potential double free on error path from fsnotify_add_inode_mark
  Revert "ALSA: control: Use deferred fasync helper"
  Revert "block: remove the request_queue to argument request based tracepoints"
  Revert "blktrace: Trace remapped requests correctly"
  Revert "USB: HCD: Fix URB giveback issue in tasklet function"
  Linux 5.10.139
  kbuild: dummy-tools: avoid tmpdir leak in dummy gcc
  Linux 5.10.138
  tee: fix memory leak in tee_shm_register()
  bpf: Fix KASAN use-after-free Read in compute_effective_progs
  qrtr: Convert qrtr_ports from IDR to XArray
  PCI/ERR: Retain status from error notification
  can: j1939: j1939_session_destroy(): fix memory leak of skbs
  can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once()
  tracing/probes: Have kprobes and uprobes use $COMM too
  netfilter: nf_tables: fix audit memory leak in nf_tables_commit
  netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect()
  MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0
  video: fbdev: i740fb: Check the argument of i740_calc_vclk()
  powerpc/64: Init jump labels before parse_early_param()
  smb3: check xattr value length earlier
  f2fs: fix to do sanity check on segment type in build_sit_entries()
  f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page()
  ALSA: control: Use deferred fasync helper
  ALSA: timer: Use deferred fasync helper
  ALSA: core: Add async signal helpers
  powerpc/32: Don't always pass -mcpu=powerpc to the compiler
  watchdog: export lockup_detector_reconfigure
  RISC-V: Add fast call path of crash_kexec()
  riscv: mmap with PROT_WRITE but no PROT_READ is invalid
  modules: Ensure natural alignment for .altinstructions and __bug_table sections
  mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start
  vfio: Clear the caps->buf to NULL after free
  tty: serial: Fix refcount leak bug in ucc_uart.c
  lib/list_debug.c: Detect uninitialized lists
  ext4: avoid resizing to a partial cluster size
  ext4: avoid remove directory when directory is corrupted
  drivers:md:fix a potential use-after-free bug
  nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown
  md: Notify sysfs sync_completed in md_reap_sync_thread()
  dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed
  selftests/kprobe: Do not test for GRP/ without event failures
  csky/kprobe: reclaim insn_slot on kprobe unregistration
  RDMA/rxe: Limit the number of calls to each tasklet
  um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups
  PCI/ACPI: Guard ARM64-specific mcfg_quirks
  cxl: Fix a memory leak in an error handling path
  pinctrl: intel: Check against matching data instead of ACPI companion
  gadgetfs: ep_io - wait until IRQ finishes
  scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input
  clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description
  zram: do not lookup algorithm in backends table
  uacce: Handle parent device removal or parent driver module rmmod
  clk: qcom: ipq8074: dont disable gcc_sleep_clk_src
  vboxguest: Do not use devm for irq
  usb: dwc2: gadget: remove D+ pull-up while no vbus with usb-role-switch
  usb: renesas: Fix refcount leak bug
  usb: host: ohci-ppc-of: Fix refcount leak bug
  clk: ti: Stop using legacy clkctrl names for omap4 and 5
  drm/meson: Fix overflow implicit truncation warnings
  irqchip/tegra: Fix overflow implicit truncation warnings
  usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info
  usb: cdns3 fix use-after-free at workaround 2
  platform/chrome: cros_ec_proto: don't show MKBP version if unsupported
  PCI: Add ACS quirk for Broadcom BCM5750x NICs
  drm/sun4i: dsi: Prevent underflow when computing packet sizes
  netfilter: add helper function to set up the nfnetlink header and use it
  netfilter: nftables: add helper function to set the base sequence number
  audit: log nftables configuration change events once per table
  drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors()
  ASoC: SOF: intel: move sof_intel_dsp_desc() forward
  locking/atomic: Make test_and_*_bit() ordered on failure
  gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file
  kbuild: fix the modules order between drivers and libs
  igb: Add lock to avoid data race
  stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove()
  fec: Fix timer capture timing in `fec_ptp_enable_pps()`
  i40e: Fix to stop tx_timeout recovery if GLOBR fails
  regulator: pca9450: Remove restrictions for regulator-name
  i2c: imx: Make sure to unregister adapter on remove()
  ice: Ignore EEXIST when setting promisc mode
  net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions()
  net: genl: fix error path memory leak in policy dumping
  net: dsa: felix: fix ethtool 256-511 and 512-1023 TX packet counters
  net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry
  net: moxa: pass pdev instead of ndev to DMA functions
  net: dsa: mv88e6060: prevent crash on an unused port
  spi: meson-spicc: add local pow2 clock ops to preserve rate between messages
  powerpc/pci: Fix get_phb_number() locking
  netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified
  netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag
  netfilter: nf_tables: really skip inactive sets when allocating name
  ASoC: tas2770: Fix handling of mute/unmute
  ASoC: tas2770: Drop conflicting set_bias_level power setting
  ASoC: tas2770: Allow mono streams
  ASoC: tas2770: Set correct FSYNC polarity
  iavf: Fix adminq error handling
  nios2: add force_successful_syscall_return()
  nios2: restarts apply only to the first sigframe we build...
  nios2: fix syscall restart checks
  nios2: traced syscall does need to check the syscall number
  nios2: don't leave NULLs in sys_call_table[]
  nios2: page fault et.al. are *not* restartable syscalls...
  dpaa2-eth: trace the allocated address instead of page struct
  perf probe: Fix an error handling path in 'parse_perf_probe_command()'
  geneve: fix TOS inheriting for ipv4
  atm: idt77252: fix use-after-free bugs caused by tst_timer
  xen/xenbus: fix return type in xenbus_file_read()
  nfp: ethtool: fix the display error of `ethtool -m DEVNAME`
  NTB: ntb_tool: uninitialized heap data in tool_fn_write()
  tools build: Switch to new openssl API for test-libcrypto
  kbuild: dummy-tools: avoid tmpdir leak in dummy gcc
  ceph: don't leak snap_rwsem in handle_cap_grant
  tools/vm/slabinfo: use alphabetic order when two values are equal
  ceph: use correct index when encoding client supported features
  dt-bindings: clock: qcom,gcc-msm8996: add more GCC clock sources
  dt-bindings: arm: qcom: fix MSM8916 MTP compatibles
  vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout()
  vsock: Fix memory leak in vsock_connect()
  plip: avoid rcu debug splat
  ipv6: do not use RT_TOS for IPv6 flowlabel
  geneve: do not use RT_TOS for IPv6 flowlabel
  ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool
  pinctrl: qcom: sm8250: Fix PDC map
  pinctrl: sunxi: Add I/O bias setting for H6 R-PIO
  pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed
  pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map
  net: bgmac: Fix a BUG triggered by wrong bytes_compl
  devlink: Fix use-after-free after a failed reload
  virtio_net: fix memory leak inside XPD_TX with mergeable
  SUNRPC: Reinitialise the backchannel request buffers before reuse
  sunrpc: fix expiry of auth creds
  net: atlantic: fix aq_vec index out of range error
  can: mcp251x: Fix race condition on receive interrupt
  bpf: Check the validity of max_rdwr_access for sock local storage map iterator
  bpf: Acquire map uref in .init_seq_private for sock{map,hash} iterator
  bpf: Acquire map uref in .init_seq_private for sock local storage map iterator
  bpf: Acquire map uref in .init_seq_private for hash map iterator
  bpf: Acquire map uref in .init_seq_private for array map iterator
  NFSv4/pnfs: Fix a use-after-free bug in open
  NFSv4.1: RECLAIM_COMPLETE must handle EACCES
  NFSv4: Fix races in the legacy idmapper upcall
  NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly
  NFSv4.1: Don't decrease the value of seq_nr_highest_sent
  Documentation: ACPI: EINJ: Fix obsolete example
  apparmor: Fix memleak in aa_simple_write_to_buffer()
  apparmor: fix reference count leak in aa_pivotroot()
  apparmor: fix overlapping attachment computation
  apparmor: fix setting unconfined mode on a loaded profile
  apparmor: fix aa_label_asxprint return check
  apparmor: Fix failed mount permission check error message
  apparmor: fix absroot causing audited secids to begin with =
  apparmor: fix quiet_denied for file rules
  can: ems_usb: fix clang's -Wunaligned-access warning
  ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II
  tracing: Have filter accept "common_cpu" to be consistent
  btrfs: fix lost error handling when looking up extended ref on log replay
  mmc: meson-gx: Fix an error handling path in meson_mmc_probe()
  mmc: pxamci: Fix an error handling path in pxamci_probe()
  mmc: pxamci: Fix another error handling path in pxamci_probe()
  ata: libata-eh: Add missing command name
  rds: add missing barrier to release_refill
  x86/mm: Use proper mask when setting PUD mapping
  ALSA: hda/realtek: Add quirk for Clevo NS50PU, NS70PU
  ALSA: info: Fix llseek return value when using callback
  Linux 5.10.137
  btrfs: raid56: don't trust any cached sector in __raid56_parity_recover()
  btrfs: only write the sectors in the vertical stripe which has data stripes
  sched/fair: Fix fault in reweight_entity
  net_sched: cls_route: disallow handle of 0
  net/9p: Initialize the iounit field during fid creation
  tee: add overflow check in register_shm_helper()
  kvm: x86/pmu: Fix the compare function used by the pmu event filter
  mtd: rawnand: arasan: Prevent an unsupported configuration
  Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression
  Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP"
  drm/vc4: change vc4_dma_range_matches from a global to static
  drm/bridge: tc358767: Fix (e)DP bridge endpoint parsing in dedicated function
  Revert "mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv"
  tcp: fix over estimation in sk_forced_mem_schedule()
  mac80211: fix a memory leak where sta_info is not freed
  KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()
  KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq
  KVM: Add infrastructure and macro to mark VM as bugged
  net_sched: cls_route: remove from list when handle is 0
  dm raid: fix address sanitizer warning in raid_status
  dm raid: fix address sanitizer warning in raid_resume
  ext4: correct the misjudgment in ext4_iget_extra_inode
  ext4: correct max_inline_xattr_value_size computing
  ext4: fix extent status tree race in writeback error recovery path
  ext4: update s_overhead_clusters in the superblock during an on-line resize
  ext4: fix use-after-free in ext4_xattr_set_entry
  ext4: make sure ext4_append() always allocates new block
  ext4: fix warning in ext4_iomap_begin as race between bmap and write
  ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h
  ext4: check if directory block is within i_size
  tracing: Use a struct alignof to determine trace event field alignment
  tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH
  KEYS: asymmetric: enforce SM2 signature use pkey algo
  xen-blkfront: Apply 'feature_persistent' parameter when connect
  xen-blkback: Apply 'feature_persistent' parameter when connect
  xen-blkback: fix persistent grants negotiation
  KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU doesn't support global_ctrl
  KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU
  KVM: x86/pmu: Introduce the ctrl_mask value for fixed counter
  KVM: x86/pmu: Use different raw event masks for AMD and Intel
  KVM: x86/pmu: Use binary search to check filtered events
  KVM: x86/pmu: preserve IA32_PERF_CAPABILITIES across CPUID refresh
  KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4
  KVM: x86: Move vendor CR4 validity check to dedicated kvm_x86_ops hook
  KVM: SVM: Drop VMXE check from svm_set_cr4()
  KVM: VMX: Drop explicit 'nested' check from vmx_set_cr4()
  KVM: VMX: Drop guest CPUID check for VMXE in vmx_set_cr4()
  ACPI: CPPC: Do not prevent CPPC from working in the future
  btrfs: reset block group chunk force if we have to wait
  btrfs: reject log replay if there is unsupported RO compat flag
  um: Allow PM with suspend-to-idle
  timekeeping: contribute wall clock to rng on time change
  dm thin: fix use-after-free crash in dm_sm_register_threshold_callback
  kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification
  dm writecache: set a default MAX_WRITEBACK_JOBS
  serial: 8250: Fold EndRun device support into OxSemi Tornado code
  serial: 8250_pci: Replace dev_*() by pci_*() macros
  serial: 8250_pci: Refactor the loop in pci_ite887x_init()
  serial: 8250: Correct the clock for OxSemi PCIe devices
  serial: 8250: Dissociate 4MHz Titan ports from Oxford ports
  PCI/AER: Iterate over error counters instead of error strings
  PCI/ERR: Recover from RCEC AER errors
  PCI/ERR: Add pci_walk_bridge() to pcie_do_recovery()
  PCI/ERR: Avoid negated conditional for clarity
  PCI/ERR: Use "bridge" for clarity in pcie_do_recovery()
  PCI/ERR: Simplify by computing pci_pcie_type() once
  PCI/ERR: Simplify by using pci_upstream_bridge()
  PCI/ERR: Rename reset_link() to reset_subordinates()
  PCI/ERR: Bind RCEC devices to the Root Port driver
  PCI/AER: Write AER Capability only when we control it
  iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE)
  KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS)
  KVM: set_msr_mce: Permit guests to ignore single-bit ECC errors
  intel_th: pci: Add Raptor Lake-S CPU support
  intel_th: pci: Add Raptor Lake-S PCH support
  intel_th: pci: Add Meteor Lake-P support
  firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails
  usbnet: smsc95xx: Avoid link settings race on interrupt reception
  usbnet: smsc95xx: Don't clear read-only PHY interrupt
  mtd: rawnand: arasan: Fix clock rate in NV-DDR
  mtd: rawnand: arasan: Support NV-DDR interface
  mtd: rawnand: arasan: Fix a macro parameter
  mtd: rawnand: Add NV-DDR timings
  mtd: rawnand: arasan: Check the proposed data interface is supported
  mtd: rawnand: Add a helper to clarify the interface configuration
  drm/vc4: drv: Adopt the dma configuration from the HVS or V3D component
  HID: hid-input: add Surface Go battery quirk
  HID: Ignore battery for Elan touchscreen on HP Spectre X360 15-df0xxx
  drm/mediatek: Keep dsi as LP00 before dcs cmds transfer
  drm/mediatek: Allow commands to be sent during video mode
  drm/i915/dg1: Update DMC_DEBUG3 register
  spmi: trace: fix stack-out-of-bound access in SPMI tracing functions
  __follow_mount_rcu(): verify that mount_lock remains unchanged
  Input: gscps2 - check return value of ioremap() in gscps2_probe()
  posix-cpu-timers: Cleanup CPU timers before freeing them during exec
  x86/olpc: fix 'logical not is only applied to the left hand side'
  ftrace/x86: Add back ftrace_expected assignment
  x86/bugs: Enable STIBP for IBPB mitigated RETBleed
  scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests
  scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os
  scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection
  scsi: qla2xxx: Turn off multi-queue for 8G adapters
  scsi: qla2xxx: Fix discovery issues in FC-AL topology
  scsi: zfcp: Fix missing auto port scan and thus missing target ports
  video: fbdev: s3fb: Check the size of screen before memset_io()
  video: fbdev: arkfb: Check the size of screen before memset_io()
  video: fbdev: vt8623fb: Check the size of screen before memset_io()
  x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y
  sched: Fix the check of nr_running at queue wakelist
  tools/thermal: Fix possible path truncations
  video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock()
  x86/numa: Use cpumask_available instead of hardcoded NULL check
  sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed
  sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy()
  scripts/faddr2line: Fix vmlinux detection on arm64
  genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO
  powerpc/pci: Fix PHB numbering when using opal-phbid
  kprobes: Forbid probing on trampoline and BPF code areas
  perf symbol: Fail to read phdr workaround
  powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address
  powerpc/xive: Fix refcount leak in xive_get_max_prio
  powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader
  f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time
  f2fs: write checkpoint during FG_GC
  f2fs: don't set GC_FAILURE_PIN for background GC
  powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias
  powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32
  ASoC: mchp-spdifrx: disable end of block interrupt on failures
  video: fbdev: sis: fix typos in SiS_GetModeID()
  video: fbdev: amba-clcd: Fix refcount leak bugs
  watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe()
  ASoC: audio-graph-card: Add of_node_put() in fail path
  fuse: Remove the control interface for virtio-fs
  ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp()
  ASoC: fsl_easrc: use snd_pcm_format_t type for sample_format
  s390/zcore: fix race when reading from hardware system area
  s390/dump: fix old lowcore virtual vs physical address confusion
  perf tools: Fix dso_id inode generation comparison
  iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop
  mfd: max77620: Fix refcount leak in max77620_initialise_fps
  mfd: t7l66xb: Drop platform disable callback
  remoteproc: sysmon: Wait for SSCTL service to come up
  lib/smp_processor_id: fix imbalanced instrumentation_end() call
  kfifo: fix kfifo_to_user() return type
  rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge
  iommu/exynos: Handle failed IOMMU device registration properly
  tty: n_gsm: fix missing corner cases in gsmld_poll()
  tty: n_gsm: fix DM command
  tty: n_gsm: fix wrong T1 retry count handling
  vfio/ccw: Do not change FSM state in subchannel event
  vfio/mdev: Make to_mdev_device() into a static inline
  vfio: Split creation of a vfio_device into init and register ops
  vfio: Simplify the lifetime logic for vfio_device
  vfio: Remove extra put/gets around vfio_device->group
  remoteproc: qcom: wcnss: Fix handling of IRQs
  ASoC: qcom: Fix missing of_node_put() in asoc_qcom_lpass_cpu_platform_probe()
  tty: n_gsm: fix race condition in gsmld_write()
  tty: n_gsm: fix packet re-transmission without open control channel
  tty: n_gsm: fix non flow control frames during mux flow off
  tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output()
  tty: n_gsm: fix user open not possible at responder until initiator open
  tty: n_gsm: Delete gsmtty open SABM frame when config requester
  ASoC: samsung: change gpiod_speaker_power and rx1950_audio from global to static variables
  powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable
  ASoC: samsung: h1940_uda1380: include proepr GPIO consumer header
  profiling: fix shift too large makes kernel panic
  selftests/livepatch: better synchronize test_klp_callbacks_busy
  remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init
  rpmsg: mtk_rpmsg: Fix circular locking dependency
  ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV
  ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV
  serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty()
  serial: 8250: Export ICR access helpers for internal use
  ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe
  ASoC: codecs: da7210: add check for i2c_add_driver
  ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe
  ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe
  ASoC: samsung: Fix error handling in aries_audio_probe
  ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe
  opp: Fix error check in dev_pm_opp_attach_genpd()
  usb: cdns3: Don't use priv_dev uninitialized in cdns3_gadget_ep_enable()
  jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted
  ext4: recover csum seed of tmp_inode after migrating to extents
  jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction()
  nvme: use command_id instead of req->tag in trace_nvme_complete_rq()
  null_blk: fix ida error handling in null_add_dev()
  RDMA/rxe: Fix error unwind in rxe_create_qp()
  RDMA/mlx5: Add missing check for return value in get namespace flow
  selftests: kvm: set rax before vmcall
  mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region
  RDMA/srpt: Fix a use-after-free
  RDMA/srpt: Introduce a reference count in struct srpt_device
  RDMA/srpt: Duplicate port name members
  platform/olpc: Fix uninitialized data in debugfs write
  usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable()
  USB: serial: fix tty-port initialized comments
  PCI: tegra194: Fix link up retry sequence
  PCI: tegra194: Fix Root Port interrupt handling
  HID: alps: Declare U1_UNICORN_LEGACY support
  mmc: cavium-thunderx: Add of_node_put() when breaking out of loop
  mmc: cavium-octeon: Add of_node_put() when breaking out of loop
  HID: mcp2221: prevent a buffer overflow in mcp_smbus_write()
  gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data()
  RDMA/hfi1: fix potential memory leak in setup_base_ctxt()
  RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event
  RDMA/hns: Fix incorrect clearing of interrupt status register
  RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr()
  RDMA/qedr: Improve error logs for rdma_alloc_tid error return
  RDMA/rtrs-srv: Fix modinfo output for stringify
  RDMA/rtrs: Avoid Wtautological-constant-out-of-range-compare
  RDMA/rtrs: Define MIN_CHUNK_SIZE
  um: random: Don't initialise hwrng struct with zero
  interconnect: imx: fix max_node_id
  eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write()
  usb: dwc3: qcom: fix missing optional irq warnings
  usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup
  usb: dwc3: core: Deprecate GCTL.CORESOFTRESET
  usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc()
  usb: gadget: udc: amd5536 depends on HAS_DMA
  xtensa: iss: fix handling error cases in iss_net_configure()
  xtensa: iss/network: provide release() callback
  scsi: smartpqi: Fix DMA direction for RAID requests
  PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks
  PCI/portdrv: Don't disable AER reporting in get_port_device_capability()
  KVM: s390: pv: leak the topmost page table when destroy fails
  mmc: block: Add single read for 4k sector cards
  mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R
  memstick/ms_block: Fix a memory leak
  memstick/ms_block: Fix some incorrect memory allocation
  mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch
  staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback
  intel_th: msu: Fix vmalloced buffers
  intel_th: msu-sink: Potential dereference of null pointer
  intel_th: Fix a resource leak in an error handling path
  PCI: endpoint: Don't stop controller when unbinding endpoint function
  dmaengine: sf-pdma: Add multithread support for a DMA channel
  dmaengine: sf-pdma: apply proper spinlock flags in sf_pdma_prep_dma_memcpy()
  KVM: arm64: Don't return from void function
  soundwire: bus_type: fix remove and shutdown support
  PCI: dwc: Always enable CDM check if "snps,enable-cdm-check" exists
  PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors
  PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu()
  clk: qcom: camcc-sdm845: Fix topology around titan_top power domain
  clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks
  clk: qcom: ipq8074: fix NSS port frequency tables
  clk: qcom: ipq8074: SW workaround for UBI32 PLL lock
  clk: qcom: ipq8074: fix NSS core PLL-s
  usb: host: xhci: use snprintf() in xhci_decode_trb()
  clk: qcom: clk-krait: unlock spin after mux completion
  driver core: fix potential deadlock in __driver_attach
  misc: rtsx: Fix an error handling path in rtsx_pci_probe()
  dmaengine: dw-edma: Fix eDMA Rd/Wr-channels and DMA-direction semantics
  mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv
  mwifiex: Ignore BTCOEX events from the 88W8897 firmware
  KVM: Don't set Accessed/Dirty bits for ZERO_PAGE
  clk: mediatek: reset: Fix written reset bit offset
  iio: accel: bma400: Reordering of header files
  platform/chrome: cros_ec: Always expose last resume result
  iio: accel: bma400: Fix the scale min and max macro values
  netfilter: xtables: Bring SPDX identifier back
  usb: xhci: tegra: Fix error check
  usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init()
  usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe
  usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe
  fpga: altera-pr-ip: fix unsigned comparison with less than zero
  mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path
  mtd: partitions: Fix refcount leak in parse_redboot_of
  mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release
  HID: cp2112: prevent a buffer overflow in cp2112_xfer()
  PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep()
  mtd: rawnand: meson: Fix a potential double free issue
  mtd: maps: Fix refcount leak in ap_flash_init
  mtd: maps: Fix refcount leak in of_flash_probe_versatile
  clk: renesas: r9a06g032: Fix UART clkgrp bitsel
  wireguard: allowedips: don't corrupt stack when detecting overflow
  wireguard: ratelimiter: use hrtimer in selftest
  dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock
  net: ionic: fix error check for vlan flags in ionic_set_nic_features()
  net: rose: fix netdev reference changes
  netdevsim: Avoid allocation warnings triggered from user space
  iavf: Fix max_rate limiting
  net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set
  tcp: Fix data-races around sysctl_tcp_l3mdev_accept.
  ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH()
  tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if()
  inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH()
  crypto: hisilicon/sec - fix auth key size error
  crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of
  crypto: hisilicon/hpre - don't use GFP_KERNEL to alloc mem during softirq
  net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS
  net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version
  media: cedrus: hevc: Add check for invalid timestamp
  wifi: libertas: Fix possible refcount leak in if_usb_probe()
  wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue
  wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()`
  i2c: mux-gpmux: Add of_node_put() when breaking out of loop
  i2c: cadence: Support PEC for SMBus block read
  Bluetooth: hci_intel: Add check for platform_driver_register
  can: pch_can: pch_can_error(): initialize errc before using it
  can: error: specify the values of data[5..7] of CAN error frames
  can: usb_8dev: do not report txerr and rxerr during bus-off
  can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off
  can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off
  can: sun4i_can: do not report txerr and rxerr during bus-off
  can: hi311x: do not report txerr and rxerr during bus-off
  can: sja1000: do not report txerr and rxerr during bus-off
  can: rcar_can: do not report txerr and rxerr during bus-off
  can: pch_can: do not report txerr and rxerr during bus-off
  selftests/bpf: fix a test for snprintf() overflow
  wifi: p54: add missing parentheses in p54_flush()
  wifi: p54: Fix an error handling path in p54spi_probe()
  wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
  fs: check FMODE_LSEEK to control internal pipe splicing
  bpf: Fix subprog names in stack traces.
  selftests: timers: clocksource-switch: fix passing errors from child
  selftests: timers: valid-adjtimex: build fix for newer toolchains
  libbpf: Fix the name of a reused map
  tcp: make retransmitted SKB fit into the send window
  drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed.
  mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init()
  mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg
  media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment
  crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq
  crypto: hisilicon/sec - don't sleep when in softirq
  crypto: hisilicon/sec - fixes some coding style
  drm/msm/mdp5: Fix global state lock backoff
  net: hinic: avoid kernel hung in hinic_get_stats64()
  net: hinic: fix bug that ethtool get wrong stats
  hinic: Use the bitmap API when applicable
  lib: bitmap: provide devm_bitmap_alloc() and devm_bitmap_zalloc()
  lib: bitmap: order includes alphabetically
  drm: bridge: sii8620: fix possible off-by-one
  drm/mediatek: dpi: Only enable dpi after the bridge is enabled
  drm/mediatek: dpi: Remove output format of YUV
  drm/rockchip: Fix an error handling path rockchip_dp_probe()
  drm/rockchip: vop: Don't crash for invalid duplicate_state()
  selftests/xsk: Destroy BPF resources only when ctx refcount drops to 0
  crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE
  drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes
  drm/vc4: hdmi: Fix timings for interlaced modes
  drm/vc4: hdmi: Limit the BCM2711 to the max without scrambling
  drm/vc4: hdmi: Don't access the connector state in reset if kmalloc fails
  drm/vc4: hdmi: Avoid full hdmi audio fifo writes
  drm/vc4: hdmi: Remove firmware logic for MAI threshold setting
  drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration
  drm/vc4: dsi: Fix dsi0 interrupt support
  drm/vc4: dsi: Register dsi0 as the correct vc4 encoder type
  drm/vc4: dsi: Introduce a variant structure
  drm/vc4: dsi: Use snprintf for the PHY clocks instead of an array
  drm/vc4: drv: Remove the DSI pointer in vc4_drv
  drm/vc4: dsi: Correct pixel order for DSI0
  drm/vc4: dsi: Correct DSI divider calculations
  drm/vc4: plane: Fix margin calculations for the right/bottom edges
  drm/vc4: plane: Remove subpixel positioning check
  media: tw686x: Fix memory leak in tw686x_video_init
  media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set
  media: hdpvr: fix error value returns in hdpvr_read
  drm/mcde: Fix refcount leak in mcde_dsi_bind
  drm: bridge: adv7511: Add check for mipi_dsi_driver_register
  crypto: ccp - During shutdown, check SEV data pointer before using
  test_bpf: fix incorrect netdev features
  drm/radeon: fix incorrrect SPDX-License-Identifiers
  wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd()
  ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
  media: tw686x: Register the irq at the end of probe
  crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs()
  i2c: Fix a potential use after free
  net: fix sk_wmem_schedule() and sk_rmem_schedule() errors
  crypto: sun8i-ss - fix error codes in allocate_flows()
  crypto: sun8i-ss - do not allocate memory when handling hash requests
  drm: adv7511: override i2c address of cec before accessing it
  virtio-gpu: fix a missing check to avoid NULL dereference
  i2c: npcm: Correct slave role behavior
  i2c: npcm: Remove own slave addresses 2:10
  drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function
  drm/mediatek: Separate poweron/poweroff from enable/disable and define new funcs
  drm/mediatek: Modify dsi funcs to atomic operations
  drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers()
  ath11k: Fix incorrect debug_mask mappings
  drm/mipi-dbi: align max_chunk to 2 in spi_transfer
  ath11k: fix netdev open race
  wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c()
  drm/st7735r: Fix module autoloading for Okaya RH128128T
  ath10k: do not enforce interrupt trigger type
  drm/bridge: tc358767: Make sure Refclk clock are enabled
  drm/bridge: tc358767: Move (e)DP bridge endpoint parsing into dedicated function
  pwm: lpc18xx-sct: Convert to devm_platform_ioremap_resource()
  pwm: sifive: Shut down hardware only after pwmchip_remove() completed
  pwm: sifive: Ensure the clk is enabled exactly once per running PWM
  pwm: sifive: Simplify offset calculation for PWMCMP registers
  pwm: sifive: Don't check the return code of pwmchip_remove()
  dm: return early from dm_pr_call() if DM device is suspended
  thermal/tools/tmon: Include pthread and time headers in tmon.h
  selftests/seccomp: Fix compile warning when CC=clang
  nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt()
  drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX
  arm64: dts: qcom: qcs404: Fix incorrect USB2 PHYs assignment
  soc: qcom: Make QCOM_RPMPD depend on PM
  regulator: of: Fix refcount leak bug in of_get_regulation_constraints()
  blktrace: Trace remapped requests correctly
  block: remove the request_queue to argument request based tracepoints
  hwmon: (drivetemp) Add module alias
  blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created
  erofs: avoid consecutive detection for Highmem memory
  arm64: tegra: Fix SDMMC1 CD on P2888
  arm64: dts: mt7622: fix BPI-R64 WPS button
  bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe()
  ARM: dts: qcom: pm8841: add required thermal-sensor-cells
  soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register
  soc: qcom: ocmem: Fix refcount leak in of_get_ocmem
  ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
  regulator: qcom_smd: Fix pm8916_pldo range
  cpufreq: zynq: Fix refcount leak in zynq_get_revision
  ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init
  ARM: OMAP2+: Fix refcount leak in omapdss_init_of
  ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg
  block: fix infinite loop for invalid zone append
  soc: fsl: guts: machine variable might be unset
  locking/lockdep: Fix lockdep_init_map_*() confusion
  arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1
  hexagon: select ARCH_WANT_LD_ORPHAN_WARN
  ARM: dts: ast2600-evb: fix board compatible
  ARM: dts: ast2500-evb: fix board compatible
  x86/pmem: Fix platform-device leak in error path
  arm64: dts: renesas: Fix thermal-sensors on single-zone sensors
  soc: amlogic: Fix refcount leak in meson-secure-pwrc.c
  soc: renesas: r8a779a0-sysc: Fix A2DP1 and A2CV[2357] PDR values
  Input: atmel_mxt_ts - fix up inverted RESET handler
  ARM: dts: imx7d-colibri-emmc: add cpu1 supply
  ACPI: processor/idle: Annotate more functions to live in cpuidle section
  ARM: bcm: Fix refcount leak in bcm_kona_smc_init
  arm64: dts: renesas: beacon: Fix regulator node names
  meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init
  ARM: findbit: fix overflowing offset
  spi: spi-rspi: Fix PIO fallback on RZ platforms
  powerpc/64s: Disable stack variable initialisation for prom_init
  selinux: Add boundary check in put_entry()
  PM: hibernate: defer device probing when resuming from hibernation
  firmware: tegra: Fix error check return value of debugfs_create_file()
  ARM: shmobile: rcar-gen2: Increase refcount for new reference
  arm64: dts: allwinner: a64: orangepi-win: Fix LED node name
  arm64: dts: qcom: ipq8074: fix NAND node name
  ACPI: LPSS: Fix missing check in register_device_clock()
  ACPI: PM: save NVS memory for Lenovo G40-45
  ACPI: EC: Drop the EC_FLAGS_IGNORE_DSDT_GPE quirk
  ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks
  ARM: OMAP2+: display: Fix refcount leak bug
  spi: synquacer: Add missing clk_disable_unprepare()
  ARM: dts: BCM5301X: Add DT for Meraki MR26
  ARM: dts: imx6ul: fix qspi node compatible
  ARM: dts: imx6ul: fix lcdif node compatible
  ARM: dts: imx6ul: fix csi node compatible
  ARM: dts: imx6ul: fix keypad compatible
  ARM: dts: imx6ul: change operating-points to uint32-matrix
  ARM: dts: imx6ul: add missing properties for sram
  wait: Fix __wait_event_hrtimeout for RT/DL tasks
  irqchip/mips-gic: Check the return value of ioremap() in gic_of_init()
  genirq: GENERIC_IRQ_IPI depends on SMP
  irqchip/mips-gic: Only register IPI domain when SMP is enabled
  genirq: Don't return error on missing optional irq_request_resources()
  ext2: Add more validity checks for inode counts
  arm64: fix oops in concurrently setting insn_emulation sysctls
  arm64: Do not forget syscall when starting a new thread.
  x86: Handle idle=nomwait cmdline properly for x86_idle
  epoll: autoremove wakers even more aggressively
  netfilter: nf_tables: fix null deref due to zeroed list head
  netfilter: nf_tables: do not allow RULE_ID to refer to another chain
  netfilter: nf_tables: do not allow CHAIN_ID to refer to another table
  netfilter: nf_tables: do not allow SET_ID to refer to another table
  lockdep: Allow tuning tracing capacity constants.
  usb: dwc3: gadget: fix high speed multiplier setting
  usb: dwc3: gadget: refactor dwc3_repare_one_trb
  arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC
  ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC
  USB: HCD: Fix URB giveback issue in tasklet function
  usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion
  coresight: Clear the connection field properly
  MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  powerpc/powernv: Avoid crashing if rng is NULL
  powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E
  powerpc/fsl-pci: Fix Class Code of PCIe Root Port
  PCI: Add defines for normal and subtractive PCI bridges
  ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr()
  media: [PATCH] pci: atomisp_cmd: fix three missing checks on list iterator
  md-raid10: fix KASAN warning
  md-raid: destroy the bitmap after destroying the thread
  serial: mvebu-uart: uart2 error bits clearing
  fuse: limit nsec
  scsi: qla2xxx: Zero undefined mailbox IN registers
  scsi: qla2xxx: Fix incorrect display of max frame size
  scsi: sg: Allow waiting for commands to complete on removed device
  iio: light: isl29028: Fix the warning in isl29028_remove()
  mtd: rawnand: arasan: Update NAND bus clock instead of system clock
  drm/amdgpu: Check BO's requested pinning domains against its preferred_domains
  drm/nouveau/acpi: Don't print error when we get -EINPROGRESS from pm_runtime
  drm/nouveau: Don't pm_runtime_put_sync(), only pm_runtime_put_autosuspend()
  drm/nouveau: fix another off-by-one in nvbios_addr
  drm/vc4: hdmi: Disable audio if dmas property is present but empty
  drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error
  parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode
  parisc: Check the return value of ioremap() in lba_driver_probe()
  parisc: Fix device names in /proc/iomem
  ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh()
  usbnet: Fix linkwatch use-after-free on disconnect
  fbcon: Fix accelerated fbdev scrolling while logo is still shown
  fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters
  thermal: sysfs: Fix cooling_device_stats_setup() error code path
  fs: Add missing umask strip in vfs_tmpfile
  vfs: Check the truncate maximum size in inode_newsize_ok()
  tty: vt: initialize unicode screen buffer
  ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED
  ALSA: hda/realtek: Add quirk for another Asus K42JZ model
  ALSA: hda/cirrus - support for iMac 12,1 model
  ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model
  mm/mremap: hold the rmap lock in write mode when moving page table entries.
  xfs: fix I_DONTCACHE
  xfs: only set IOMAP_F_SHARED when providing a srcmap to a write
  mm: Add kvrealloc()
  riscv: set default pm_power_off to NULL
  KVM: x86: Tag kvm_mmu_x86_module_init() with __init
  KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP
  KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks
  KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value
  KVM: s390: pv: don't present the ecall interrupt twice
  KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0
  KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case
  KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case
  HID: wacom: Don't register pad_input for touch switch
  HID: wacom: Only report rotation for art pen
  add barriers to buffer_uptodate and set_buffer_uptodate
  wifi: mac80211_hwsim: use 32-bit skb cookie
  wifi: mac80211_hwsim: add back erroneously removed cast
  wifi: mac80211_hwsim: fix race condition in pending packet
  ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx
  ALSA: hda/realtek: Add quirk for Clevo NV45PZ
  ALSA: bcd2000: Fix a UAF bug on the error path of probing
  scsi: Revert "scsi: qla2xxx: Fix disk failure to rediscover"
  Revert "pNFS: nfs3_set_ds_client should set NFS_CS_NOPING"
  x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments
  Makefile: link with -z noexecstack --no-warn-rwx-segments

 Conflicts:
	Documentation/devicetree/bindings
	Documentation/devicetree/bindings/arm/qcom.yaml
	Documentation/devicetree/bindings/clock/qcom,gcc-msm8996.yaml
	Documentation/devicetree/bindings/dma/moxa,moxart-dma.txt
	Documentation/devicetree/bindings/regulator/nxp,pca9450-regulator.yaml
	drivers/interconnect/qcom/icc-rpmh.c
	drivers/remoteproc/qcom_sysmon.c
	drivers/rpmsg/qcom_glink_native.c
	net/qrtr/qrtr.c

Change-Id: If4f77aa8e63e7847571d37c1ba947f235236afff
Signed-off-by: Srinivasarao Pathipati <quic_c_spathi@quicinc.com>
 2023-02-01 11:44:19 +05:30
Pascal Terjan
eddb352a80 vboxguest: Do not use devm for irq 
[ Upstream commit 6169525b76764acb81918aa387ac168fb9a55575 ]

When relying on devm it doesn't get freed early enough which causes the
following warning when unloading the module:

[249348.837181] remove_proc_entry: removing non-empty directory 'irq/20', leaking at least 'vboxguest'
[249348.837219] WARNING: CPU: 0 PID: 6708 at fs/proc/generic.c:715 remove_proc_entry+0x119/0x140

[249348.837379] Call Trace:
[249348.837385]  unregister_irq_proc+0xbd/0xe0
[249348.837392]  free_desc+0x23/0x60
[249348.837396]  irq_free_descs+0x4a/0x70
[249348.837401]  irq_domain_free_irqs+0x160/0x1a0
[249348.837452]  mp_unmap_irq+0x5c/0x60
[249348.837458]  acpi_unregister_gsi_ioapic+0x29/0x40
[249348.837463]  acpi_unregister_gsi+0x17/0x30
[249348.837467]  acpi_pci_irq_disable+0xbf/0xe0
[249348.837473]  pcibios_disable_device+0x20/0x30
[249348.837478]  pci_disable_device+0xef/0x120
[249348.837482]  vbg_pci_remove+0x6c/0x70 [vboxguest]

Reviewed-by: Hans de Goede <hdegoede@redhat.com>
Signed-off-by: Pascal Terjan <pterjan@google.com>
Link: https://lore.kernel.org/r/20220612133744.4030602-1-pterjan@google.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
 2022-08-25 11:38:14 +02:00
qctecmdr
39d29e1a62 Merge "virt: gunyah: rm_core: Remove NULL check for connection" 2022-08-19 16:52:31 -07:00
Naina Mehta
ace61da167 virt: gunyah: rm_core: Remove NULL check for connection 
Remove NULL check for connection in validate_work.

Change-Id: I3fcdaefa6a062c527b4d4dd73dcee08d8601763d
Signed-off-by: Naina Mehta <quic_nainmeht@quicinc.com>
 2022-08-18 20:27:33 +05:30
Elliot Berman
e45d9f9083 virt: gunyah: rsc_mgr: Allocate right buffer size of requests 
The correct size for sending RM messages is GH_MSGQ_MAX_MSG_SIZE_BYTES.
The amount of actual payload data is GH_RM_MAX_MSG_SIZE_BYTES and is
incorrect.

Change-Id: I8aa7de79ab57b60da366c0a4a1f82233d22ab59c
Signed-off-by: Elliot Berman <quic_eberman@quicinc.com>
 2022-08-15 09:49:53 -07:00
Elliot Berman
94623298e7 virt: gunyah: rm_core: Clean up sequence idr earlier 
When RM sends an error for a given call, Linux can re-use that sequence
number later. Presently, the sequence number is kept as reserved and
could cause a denial of service if many messages are crafted which
always return an RM error.

Change-Id: Icc2b054ab8d110c63759e30d62650ebc9d02b234
Signed-off-by: Elliot Berman <quic_eberman@quicinc.com>
 2022-08-02 11:01:22 -07:00
Elliot Berman
bc672049f8 virt: gunyah: rm_core: Use a single buffer to process messages from RM 
The message buffer received by gh_msgq_recv is now not directly used by
any upper layers and always copied to a "buff" in gh_rm_connection, so
the same buffer can be re-used in the gh_msgq_recv loop.

Change-Id: I92988711b84b6f1e6b653c7d8cb5b66abc7a322e
Signed-off-by: Elliot Berman <quic_eberman@quicinc.com>
 2022-08-02 11:01:11 -07:00
Elliot Berman
6fdbe50c1b virt: gunyah: rm_core: Re-use alloc'd message when sending requests 
No need to allocate a message queue buffer for each message queue
fragment, re-use the same one.

Change-Id: I5743a704ec08732a2e405724ba795d2d8cea90e3
Signed-off-by: Elliot Berman <quic_eberman@quicinc.com>
 2022-08-02 11:00:14 -07:00
Elliot Berman
b9d45e26fe virt: gunyah: rm_core: Guard against unexpected messages 
Gracefully handle non-standard sequences of messages such as
continuation messages without receiving a reply/notification message
first, or a new reply/notification message without having finished the
last message sequence.

Change-Id: I52922fc9ccefb1f7dbb40fbffd2ad6b7fd1162b7
Signed-off-by: Elliot Berman <quic_eberman@quicinc.com>
 2022-08-02 11:00:04 -07:00
Elliot Berman
f4d861e81b virt: gunyah: rm_core: Consolidate handling of complete messages 
Consolidate the handling of complete replies or notifications into one
common function that is called after each message is received. This
reduces redundant lines of code.

Change-Id: Iaa52c9d07d86327498f6aa2b60fa8aaa6bfe2c7f
Signed-off-by: Elliot Berman <quic_eberman@quicinc.com>
 2022-08-02 10:59:49 -07:00
Elliot Berman
f8532d564c virt: gunyah: rm_core: Rename connection variables 
Rename "recv_buff" and "recv_buff_size" to "payload" and "size",
respectively. gh_rm_connection on tracks received buffers, so it is
redundant to add "recv". Rename "reply_err_code" to "rm_error" to make
it clear that this field is used for the resource manager's return error
code, and not some other value. While here, re-org and document the
gh_rm_connection struct.

Change-Id: I101262dd907a0e678d8d2c5232a17745f057edaf
Signed-off-by: Elliot Berman <quic_eberman@quicinc.com>
 2022-08-02 23:27:46 +05:30
Elliot Berman
e7dcbdc4df virt: gunyah: rm_core: Remove current_recv_buffer tracking 
current_recv_buffer tracks the current end of an ongoing message from
resource manager. It can be easily tracked by "conection->recv_buff +
connection->recv_buff_size". Do that instead to make code clearer.

Change-Id: I191dbdbf39c802868e1c6a262ef5420c02f127b2
Signed-off-by: Elliot Berman <quic_eberman@quicinc.com>
 2022-08-02 01:57:38 -07:00
Elliot Berman
586bb7d8c6 virt: gunyah: rm_core: Always allocate a connection for notifications 
Currently, there is an optimized path to directly use the message queue
buffer when a received notification fits within a single message and
there aren't any fragments. This greatly complicates buffer management
and might not provide any measurable benefit.

Suppose Linux receives a notification with one fragment then a
notification with 3 fragments. In current flow, there is 1 alloc for the
first notification and 4 allocations for the 2nd notification (1 for
each message + 1 for overall combined buffer). In the new flow, we could
optimize this to 0 allocations for each message because we can re-use
the same message buffer for each fragment and then a single alloc for
the entire payload.

There is, however, a slightly increased cost for single-message
notifications in the form of an extra memcpy from the message buffer to
notification buffer. Under the code optimizations and simplifications
that come with this cost, it is a worthy cost.

Change-Id: Ib52bd332f59b108d7dab9121c0beefed0aa66994
Signed-off-by: Elliot Berman <quic_eberman@quicinc.com>
 2022-08-02 12:42:03 +05:30
Elliot Berman
17658bf233 virt: gunyah: rm_core: Validate notifications using payload size only 
Preparation for cleaning up the resource manager core.

Notification size validation needs to only be performed on the payload
size. The RM RPC header will always be present, else the RM driver would
not have been able to determine that the message is a notification.
Thus, considering the RPC header is not required.

Change-Id: Id6a561a77d693e4f8f307d9d0d96b8d173940c60
Signed-off-by: Elliot Berman <quic_eberman@quicinc.com>
 2022-08-01 22:26:19 -07:00
Mukesh Ojha
71b2fd2ae2 gunyah: virtio: Fix race between close_vb_dev and mmio_init 
commit 946c77b433 ("gunyah: virtio: Fix race between close_vb_dev
and mmio_init") incorrectly tried to handle NULL pointer issue which
is further creating a problem like sleeping while atomic.

Fix this by taking appropriate lock.

Change-Id: Icb935fb09ba5d1dbb9b33fbc4a3dac140e9985e7
Signed-off-by: Srivatsa Vaddagiri <quic_svaddagi@quicinc.com>
Signed-off-by: Mukesh Ojha <quic_mojha@quicinc.com>
 2022-07-11 23:19:31 -07:00
Mukesh Ojha
28f7dfce94 Revert "gunyah: virtio: Fix race between close_vb_dev and mmio_init" 
This reverts commit 946c77b433 is causing
a regression in regular run so revert this till proper fix gets
identified.

Change-Id: Ic4d917e93a05f981f565549cf5e926affa40bcda
Signed-off-by: Mukesh Ojha <quic_mojha@quicinc.com>
 2022-06-28 05:48:57 -07:00
Sreenad Menon
060fe1f9c6 gunyah: virtio: Check for valid config_size in ioctl 
Check for valid config_size in GET_DRIVER_CONFIG_DATA ioctl.

Change-Id: I22b688f465e131a4f3894232a1846212f3358e83
Signed-off-by: Sreenad Menon <quic_sreemeno@quicinc.com>
 2022-06-14 16:44:38 +05:30
Mukesh Ojha
946c77b433 gunyah: virtio: Fix race between close_vb_dev and mmio_init 
There can be race where cross vm thread is closing the backend
device while mmio initialization is in place which could
result in NULL pointer dereference issue.

While at it, also handle it at some of similar place where
this race could occur by protecting with appropriate lock.

Change-Id: I6d01071ce452a95e6f5483a6de12c60d3ae41a65
Signed-off-by: Mukesh Ojha <quic_mojha@quicinc.com>
 2022-05-30 14:31:57 +05:30
Huang Yiwei
9fc68b0c4c soc: qcom: Delete pet_timer in watchdog suspend handler 
In previous commit <4c0a0f317397> ("soc: qcom: Remove syscore ops from
watchdog driver"), the code to delete pet_timer in suspend handler has
been removed, and this is causing watchdog may not work properly when
stuck happens in suspend process because the pet_timer is still petting
the watchdog. So add the code back to make watchdog can detect the suspend
stuck and trigger a crash for analyze. Also move the handler ahead to
late_suspend stage, so it can cover more potential stuck issue, including
synchronize_irq before no_irq.

Change-Id: Ief6484db65581bb92456c121e7f35e68c4d178dc
Signed-off-by: Huang Yiwei <quic_hyiwei@quicinc.com>
 2022-03-22 10:08:36 +08:00
qctecmdr
042fdf3e54 Merge "gunyah: Fix memory leak" 2022-03-10 22:00:15 -08:00
Patrick Daly
f178e9fe7f gunyah: Fix memory leak 
If gunyah returns an error in response to a message sent over gh_rm_msgq,
free connection->recv_buff prior to returning an error to the caller.

Change-Id: Ia23dcbb6a5bdb3d7a037d537e7dcf61695991a66
Signed-off-by: Patrick Daly <quic_pdaly@quicinc.com>
 2022-03-08 15:12:21 -08:00
Naman Jain
25e1bdd5b7 gunyah: gh_rm_core: Add checks for static analysis flagged issues 
Add a check for pointer returned by kzalloc for info before
proceeding further in gh_rm_get_vm_id_info.

Add a check for vm.name before calling gh_get_vm_name in
gh_rm_get_vm_id_info.

Add a check for pointer returned by kcalloc for peers_array in
gh_vm_check_peer.

Change-Id: Ifc254f4700b78e10bac378d46df668df5a61c4d7
Signed-off-by: Naman Jain <quic_namajain@quicinc.com>
 2022-02-24 14:32:44 +05:30
Naman Jain
6ad521f857 gunyah: gh_rm_iface: Add a check for kzalloc allocated memory 
Add a check for pointer returned by kzalloc for req_payload before
proceeding further in gh_rm_vm_irq_notify.

Change-Id: Ibd57792adab1490e37fee7cf73f99a638181d539
Signed-off-by: Naman Jain <quic_namajain@quicinc.com>
 2022-02-14 05:24:23 -08:00
Naman Jain
470047b5c8 gunyah: gh_rm_iface: Avoid integer overflow for multiplication 
Add a check to ensure that overflow does not happen in multiplication
operation.

Change-Id: I8b3be6acd92147543ab785c5762a1b2609e5a93d
Signed-off-by: Naman Jain <quic_namajain@quicinc.com>
 2022-01-27 17:49:09 +05:30
qctecmdr
5d6410d7dc Merge "gunyah: gh_guest_pops: Modify input device error path" 2022-01-17 07:07:28 -08:00
Guru Das Srinagesh
c802eea56e gunyah: gh_guest_pops: Modify input device error path 
As a rule, input_free_device() must not be called after
input_deregister_device() - otherwise, the following use-after-free
would result:

[    6.474163][  T660] refcount_t: underflow; use-after-free.
[    6.480715][  T660] WARNING: CPU: 0 PID: 660 at lib/refcount.c:28 refcount_warn_saturate+0x10c/0x150
...
[    6.863702][  T660] Hardware name: Qualcomm Technologies, Inc. Waipio MTP with PM8010 (DT)
[    6.872196][  T660] pstate: 62400005 (nZCv daif +PAN -UAO +TCO BTYPE=--)
[    6.879088][  T660] pc : refcount_warn_saturate+0x10c/0x150
[    6.884825][  T660] lr : refcount_warn_saturate+0x10c/0x150
[    6.890561][  T660] sp : ffffffc0198bbae0
[    6.894695][  T660] x29: ffffffc0198bbae0 x28: 0000000000000100
[    6.900891][  T660] x27: ffffffc012ce7200 x26: ffffff87aa8bb558
[    6.907085][  T660] x25: 000000000000001b x24: 00000000000006c0
[    6.913280][  T660] x23: 0000000000000002 x22: 0000000000000000
[    6.919474][  T660] x21: ffffff87afabde80 x20: ffffff87a73f9880
[    6.925668][  T660] x19: ffffff87ab4f8330 x18: ffffffc019cbd078
[    6.931862][  T660] x17: ffffffffff583fad x16: 000000000011babe
[    6.938057][  T660] x15: 0000000005f5e100 x14: 00000000fff5d384
[    6.944251][  T660] x13: 0000000000000004 x12: 0000000007584f6c
[    6.950446][  T660] x11: 0000000000000015 x10: 000000000682aaab
[    6.956640][  T660] x9 : 0afbe76635bba000 x8 : 0afbe76635bba000
[    6.962834][  T660] x7 : 0000000000000000 x6 : ffffffc0101cca54
[    6.969028][  T660] x5 : 0000000000000000 x4 : 0000000000000080
[    6.975222][  T660] x3 : ffffffc0198bb690 x2 : ffffffc010214ca0
[    6.981416][  T660] x1 : ffffffc010214ca0 x0 : 0000000000000026
[    6.987611][  T660] Call trace:
[    6.990853][  T660]  refcount_warn_saturate+0x10c/0x150
[    6.996237][  T660]  kobject_put+0xa4/0xc0
[    7.000459][  T660]  put_device+0x1c/0x2c
[    7.004596][  T660]  input_free_device+0x50/0x6c
[    7.009360][  T660]  gh_guest_pops_exit_poff+0x34/0x48 [gh_guest_pops]
[    7.016080][  T660]  init_module+0x110/0x118 [gh_guest_pops]
[    7.021907][  T660]  do_one_initcall+0x7c/0x17c
[    7.026582][  T660]  do_init_module+0x60/0x25c
[    7.031159][  T660]  load_module+0x27b8/0x3138
[    7.035735][  T660]  __se_sys_finit_module+0xf0/0x130
[    7.040935][  T660]  __arm64_sys_finit_module+0x20/0x30
[    7.046320][  T660]  el0_svc_common.llvm.18406837026321461925+0xc4/0x1e8
[    7.053208][  T660]  do_el0_svc+0x28/0xa0
[    7.057345][  T660]  el0_svc+0x24/0x38
[    7.061210][  T660]  el0_sync_handler+0x88/0xec
[    7.065883][  T660]  el0_sync+0x1c0/0x200

input_free_device() should be called only if input_register_device() has
not succeeded. If it has, calling input_deregister_device() would
suffice.

Change-Id: I83f8cd27f02a0a1bcdaa2cfe7f28f2f3fedb10da
Signed-off-by: Guru Das Srinagesh <quic_gurus@quicinc.com>
 2022-01-14 12:19:45 -08:00
qctecmdr
0f35e27887 Merge "gunyah: virtio: Cleanup gh_rm_mem_qcom_lookup_sgl calls" 2021-12-09 03:16:25 -08:00
Patrick Daly
b87746b7d1 gunyah: virtio: Cleanup gh_rm_mem_qcom_lookup_sgl calls 
Recent hypervisor images no longer support gh_rm_mem_qcom_lookup_sgl().
Remove this to cleanup associated error messages in the log.

Change-Id: Icefc92aa82e74fdb15db4a474f8447fbb94b4d94
Signed-off-by: Patrick Daly <quic_pdaly@quicinc.com>
 2021-12-08 15:39:14 -08:00
Cong Zhang
abfe4ddd88 soc: qcom: hyp_core_ctl: Ignore other VM except TUIVM 
Since multivm is supported, more than cpusys VM and TUI VM would be
bootup on the device. Each VM may need its own vcpu populate function.
Only TUI VM need enable hyp_core_ctl. Add vcpu callback function for
each VM.

Change-Id: I89c758e9a49bb3e70fe76546ac97f9882ad725fa
Signed-off-by: Cong Zhang <quic_congzhan@quicinc.com>
 2021-11-24 23:01:49 -08:00
Cong Zhang
197e94ee22 gunyah: rm: Update vm prop table with different VM names 
The vm prop table is updated when RM driver probe, we have only one
TUIVM before, so if we are not PVM, we are TUIVM. But after we add OEMVM
support, we need update right vm prop table with different VM names.

Change-Id: I2e9bb8cec803f13abf53099ca33bdf4efcc01283
Signed-off-by: Cong Zhang <quic_congzhan@quicinc.com>
 2021-11-11 03:20:37 -08:00
Cong Zhang
1828176d8d gunyah: rm: Fix get VMID failure in svm res work 
SVM res work function need to run after gh_rm_core_initialized is set.

Change-Id: I8edb75cf35fd6633db345add005d43e1cab6eac0
Signed-off-by: Cong Zhang <quic_congzhan@quicinc.com>
 2021-11-11 03:20:25 -08:00
qctecmdr
8c878d3967 Merge "gunyah: rm: Add peer property check when TUIVM bootup" 2021-11-04 05:19:11 -07:00
qctecmdr
d08b1a2128 Merge "mem-buf: Rework mem_buf_vm_get_backend_api()" 2021-11-03 19:49:45 -07:00
qctecmdr
9801402b89 Merge "gunyah: rm_drv: Fix vm get id failure" 2021-11-01 20:19:50 -07:00
Patrick Daly
8c684e938d gunyah: Define gh_rm_mem_donate 
Add support for a new gunyah API which transfers ownership
of memory to a different VM.

Change-Id: Ie4dd102f13f29a0128094214c7333355b505c632
Signed-off-by: Patrick Daly <quic_pdaly@quicinc.com>
 2021-11-01 15:18:50 -07:00
Cong Zhang
907dfe5fe7 gunyah: rm: Add peer property check when TUIVM bootup 
If OEMVM bootup before TUIVM, we need check peer property to get VMID
and populate hyper resource between TUIVM and OEMVM.

Change-Id: I198eb0379ac504f13a49409d070c2edacf9dff4b
Signed-off-by: Cong Zhang <congzhan@codeaurora.org>
 2021-10-21 09:41:41 +08:00
Cong Zhang
64afe89151 gunyah: rm: Add callback for VM status notification 
If any VM bootup after current SVM, SVM will receive VM status
notification. Hyp resource will be populated in callback of the
notification.

Change-Id: I2bf578db6e3036da230c18bf80aeeaac454e0145
Signed-off-by: Cong Zhang <quic_congzhan@quicinc.com>
 2021-10-21 00:12:45 +08:00
qctecmdr
5db3e1b3d3 Merge "gunyah: Use app status field to unisolate CPUs for tuivm" 2021-10-13 11:11:57 -07:00
Cong Zhang
448036c5a8 gunyah: rm_drv: Fix vm get id failure 
ID info of the response is in response payload, it's not a pointer. And
length of entries is variable, so we need check each id size to find the
next entry.

Change-Id: I5497b12a78e6bfc4a31bbb34d16e130a9052b6e5
Signed-off-by: Cong Zhang <congzhan@codeaurora.org>
 2021-10-13 19:39:20 +08:00
Prakruthi Deepak Heragu
35138d4fe8 gunyah: Use app status field to unisolate CPUs for tuivm 
Instead of using 8 seconds timer to unisolate CPUs, unisolate them after
the TUI service comes up and sets the app status on SVM. This guarantees
that the userspace of TUI vm is up.

Change-Id: I3a0ece08934ece9e0cfa1b8bdb307b5d572f43d9
Signed-off-by: Prakruthi Deepak Heragu <pheragu@codeaurora.org>
 2021-10-06 17:06:13 -07:00
Guru Das Srinagesh
f88a72489f gunyah: gh_msgq: Use GFP_ATOMIC allocations in gh_msgq_alloc_entry() 
Commit 81d6b86bd9 ("gunyah: gh_msgq: Disallow multiple
registrations with same label") makes the entire gh_msgq_alloc_entry()
function a critical section by calling it with the gh_msgq_cap_list_lock
spinlock held. It also changed the allocation flags of one of the three
memory allocation operations from GFP_KERNEL to GFP_ATOMIC for this
reason, leaving the other two intact. This sometimes leads to the
following:

[    0.052850][    T1] BUG: sleeping function called from invalid context at mm/slab.h:557
[    0.052852][    T1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 1, name: swapper/0
[    0.052854][    T1] Preemption disabled at:
[    0.052861][    T1] [<ffffffc010578698>] gh_msgq_populate_cap_info+0x3c/0x26c
[    0.052864][    T1] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 5.10.43-debug-04611-g00783572e88c-dirty #1
[    0.052866][    T1] Hardware name: Qualcomm Technologies, Inc. Waipio SVM MTP (DT)
[    0.052868][    T1] Call trace:
[    0.052873][    T1]  dump_backtrace+0x0/0x20c
[    0.052875][    T1]  show_stack+0x18/0x24
[    0.052880][    T1]  dump_stack_lvl+0xbc/0x134
[    0.052883][    T1]  ___might_sleep+0x16c/0x1c0
[    0.052884][    T1]  __might_sleep+0x50/0x88
[    0.052887][    T1]  __kmalloc_track_caller+0x6c/0x388
[    0.052891][    T1]  kvasprintf+0xa8/0x134
[    0.052892][    T1]  kasprintf+0x54/0x7c
[    0.052894][    T1]  gh_msgq_alloc_entry+0x98/0x128
[    0.052896][    T1]  gh_msgq_populate_cap_info+0x74/0x26c
[    0.052897][    T1]  gh_msgq_probe_direction+0x78/0xf0
[    0.052899][    T1]  gh_msgq_probe+0x4c/0xdc
[    0.052901][    T1]  gh_rm_drv_probe+0x34/0x310
[    0.052904][    T1]  platform_drv_probe+0x3c/0x9c
[    0.052906][    T1]  really_probe+0x11c/0x4c8
[    0.052909][    T1]  driver_probe_device+0x84/0xec
[    0.052911][    T1]  device_driver_attach+0x4c/0x70
[    0.052913][    T1] __driver_attach.llvm.3781602661191075997+0x40/0x154
[    0.052915][    T1]  bus_for_each_dev+0x7c/0xc8
[    0.052917][    T1]  bus_add_driver+0x110/0x20c
[    0.052919][    T1]  driver_register+0x64/0x104
[    0.052921][    T1]  __platform_driver_register+0x44/0x50
[    0.052926][    T1] __initstub__kmod_gh_rm_drv__334_1315_gh_rm_driver_init6+0x1c/0x28
[    0.052928][    T1]  do_one_initcall+0x50/0x29c
[    0.052931][    T1]  do_initcall_level+0xa4/0x16c
[    0.052933][    T1]  do_initcalls+0x60/0xa0
[    0.052934][    T1]  do_basic_setup+0x20/0x2c
[    0.052936][    T1]  kernel_init_freeable+0x8c/0xdc
[    0.052939][    T1]  kernel_init+0x14/0x110
[    0.052941][    T1]  ret_from_fork+0x10/0x30

Even though the error signature says "BUG:" it isn't really a kernel
panic. It only dumps the stack and then carries on, courtesy
CONFIG_DEBUG_ATOMIC_SLEEP.

Change the remaining two memory allocation operations to use GFP_ATOMIC
as well and thereby fix the appearance of this error message.

Change-Id: I7d377bf605122b44a606e0d5d33fc9aba6bb6f25
Signed-off-by: Guru Das Srinagesh <gurus@codeaurora.org>
 2021-10-04 13:56:29 -07:00
qctecmdr
2ee43f4460 Merge "gunyah: gh_rm_core: Check payload size in gh_rm_init_connection_buff()" 2021-09-24 11:53:02 -07:00
qctecmdr
b6c01f8b2e Merge "gunyah: virtio: Fix potential overflow issue" 2021-09-24 05:20:11 -07:00
qctecmdr
c2f755855d Merge "gunyah: gh_msgq: Return negative error code in gh_msgq_register()" 2021-09-20 19:17:21 -07:00
Srivatsa Vaddagiri
a2e99a0194 gunyah: virtio: Fix potential overflow issue 
GH_WAIT_FOR_EVENT or other ioctls could be called many times which
could cause vb_dev->refcount to overflow. Prevent that by checking for
maximum allowed value of refcount.

Change-Id: Ia6ae411a575b94e45db50d390665b8b0ce724631
Signed-off-by: Srivatsa Vaddagiri <vatsa@codeaurora.org>
 2021-09-16 23:49:37 -07:00
Guru Das Srinagesh
4a159ea000 gunyah: gh_msgq: Return negative error code in gh_msgq_register() 
An error condition is signified by a negative number. Add this missing
negative number in one of the error paths of gh_msgq_register().

Change-Id: Ief0880fbcae0fb2a9f0842876b8119401482856a
Signed-off-by: Guru Das Srinagesh <gurus@codeaurora.org>
 2021-09-16 09:42:58 -07:00
Guru Das Srinagesh
9e0fd1e0d1 gunyah: gh_rm_core: Check payload size in gh_rm_init_connection_buff() 
Ensure that the payload being copied to the connection's recv_buff
buffer does not exceed the buffer's maximum size.

Change-Id: Ic0e0b894e7746430916b24f45e583822ccea2748
Signed-off-by: Guru Das Srinagesh <gurus@codeaurora.org>
 2021-09-14 12:25:28 -07:00
qctecmdr
9a74d68c7a Merge "gunyah: gh_rm_drv: Avoid integer overflow for req_payload_size calculation" 2021-09-13 15:39:35 -07:00