android/android_kernel_xiaomi_sm8450
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,035,723 Commits 2 Branches 0 Tags 2.3 GiB
lineage-22.0
Commit Graph

1112 Commits

Author SHA1 Message Date
Greg Kroah-Hartman
3414e62421 This is the 5.10.197 stable release 
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmUOqXUACgkQONu9yGCS
 aT61cQ//eD8Xrytp1SrUZNpXeCF3d6Ih6wk7it7jJa9rSuFJa/yq3RG1Eni19FNs
 eZodcbmdNz6H27vonI7XDVemlkWWw0g/6JTZAwZho93Nnolz4qS88UqWWLmKYcs5
 rpAkVFgMFcS4HnL/YG6DY3GP6lsbhyummySFnfzXncfJbX3GN/mRk/YzCvziLjr5
 +cwwMUW+kkd5VUSssxrLS0VHSRW25SL+JLGRweQwePlMm8H+WTFpQSPeU5mu2gPM
 b4kFtAKAk2gzH1JzNJSz6mTM3dtAVFcu+3wAY+NSb4VfSB409rB0YI7ne1Ia6mC9
 TQ3qnfo05JYj5HiglE3QMuamfVuPt2mUwpo7I278fVBwbZo9cDXruVZ9099dVzAc
 B0O+xVvGwC6h6rwIKMfh9mzPtULO1CrHlxEVzSLO2szNMAiQk2+hMZDIKbvpBd59
 D08TFP4C4ffCT1K0mWDDhJpp7t37kMumZcB6JiNjYR0YUeDRMhFd4L8oHV5ENfdP
 FvIEwCOl/D69DsgmKq1jV33kspqoUfxyxs6MjJ44/0aQyKk1EoemMxkgrAwBDasn
 P3KNmShfR7XIgqUz1OX27PAnMDMLZj2DiSSbTyWEUOmfaR/TbaZ04fkHQxWfPfFX
 RIa2SFBop87mBfl8H0rhbic0ggQ4c8Io0xiks62pRvXdbcYfNZs=
 =Pws3
 -----END PGP SIGNATURE-----

Merge 5.10.197 into android12-5.10-lts

Changes in 5.10.197
	autofs: fix memory leak of waitqueues in autofs_catatonic_mode
	btrfs: output extra debug info if we failed to find an inline backref
	locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock
	ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
	kernel/fork: beware of __put_task_struct() calling context
	rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle()
	scftorture: Forgive memory-allocation failure if KASAN
	ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470
	perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
	ACPI: video: Add backlight=native DMI quirk for Apple iMac12,1 and iMac12,2
	hw_breakpoint: fix single-stepping when using bpf_overflow_handler
	devlink: remove reload failed checks in params get/set callbacks
	crypto: lrw,xts - Replace strlcpy with strscpy
	wifi: ath9k: fix fortify warnings
	wifi: ath9k: fix printk specifier
	wifi: mwifiex: fix fortify warning
	wifi: wil6210: fix fortify warnings
	crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()
	tpm_tis: Resend command to recover from data transfer errors
	mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450
	alx: fix OOB-read compiler warning
	netfilter: ebtables: fix fortify warnings in size_entry_mwt()
	wifi: mac80211_hwsim: drop short frames
	drm/bridge: tc358762: Instruct DSI host to generate HSE packets
	samples/hw_breakpoint: Fix kernel BUG 'invalid opcode: 0000'
	ALSA: hda: intel-dsp-cfg: add LunarLake support
	drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
	bus: ti-sysc: Configure uart quirks for k3 SoC
	md: raid1: fix potential OOB in raid1_remove_disk()
	ext2: fix datatype of block number in ext2_xattr_set2()
	fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
	jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
	powerpc/pseries: fix possible memory leak in ibmebus_bus_init()
	media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
	media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
	media: af9005: Fix null-ptr-deref in af9005_i2c_xfer
	media: anysee: fix null-ptr-deref in anysee_master_xfer
	media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()
	media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer
	media: tuners: qt1010: replace BUG_ON with a regular error
	media: pci: cx23885: replace BUG with error return
	usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc
	scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
	serial: cpm_uart: Avoid suspicious locking
	media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning
	kobject: Add sanity check for kset->kobj.ktype in kset_register()
	mtd: rawnand: brcmnand: Allow SoC to provide I/O operations
	mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller
	perf jevents: Make build dependency on test JSONs
	perf tools: Add an option to build without libbfd
	btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h
	btrfs: add a helper to read the superblock metadata_uuid
	btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super
	drm: gm12u320: Fix the timeout usage for usb_bulk_msg()
	scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir()
	selftests: tracing: Fix to unmount tracefs for recovering environment
	scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file()
	x86/boot/compressed: Reserve more memory for page tables
	samples/hw_breakpoint: fix building without module unloading
	md/raid1: fix error: ISO C90 forbids mixed declarations
	attr: block mode changes of symlinks
	ovl: fix incorrect fdput() on aio completion
	btrfs: fix lockdep splat and potential deadlock after failure running delayed items
	btrfs: release path before inode lookup during the ino lookup ioctl
	drm/amdgpu: fix amdgpu_cs_p1_user_fence
	net/sched: Retire rsvp classifier
	proc: fix a dentry lock race between release_task and lookup
	mm/filemap: fix infinite loop in generic_file_buffered_read()
	drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma
	tracing: Have current_trace inc the trace array ref count
	tracing: Have option files inc the trace array ref count
	nfsd: fix change_info in NFSv4 RENAME replies
	tracefs: Add missing lockdown check to tracefs_create_dir()
	i2c: aspeed: Reset the i2c controller when timeout occurs
	ata: libata: disallow dev-initiated LPM transitions to unsupported states
	scsi: megaraid_sas: Fix deadlock on firmware crashdump
	scsi: pm8001: Setup IRQs on resume
	ext4: fix rec_len verify error
	Linux 5.10.197

Change-Id: Ic8626d7d13ec54d438c4d80efe1f8b6bddeb84a8
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
 2023-10-26 17:52:15 +00:00
Wander Lairson Costa
f8bab887a4 kernel/fork: beware of __put_task_struct() calling context 
[ Upstream commit d243b34459cea30cfe5f3a9b2feb44e7daff9938 ]

Under PREEMPT_RT, __put_task_struct() indirectly acquires sleeping
locks. Therefore, it can't be called from an non-preemptible context.

One practical example is splat inside inactive_task_timer(), which is
called in a interrupt context:

  CPU: 1 PID: 2848 Comm: life Kdump: loaded Tainted: G W ---------
   Hardware name: HP ProLiant DL388p Gen8, BIOS P70 07/15/2012
   Call Trace:
   dump_stack_lvl+0x57/0x7d
   mark_lock_irq.cold+0x33/0xba
   mark_lock+0x1e7/0x400
   mark_usage+0x11d/0x140
   __lock_acquire+0x30d/0x930
   lock_acquire.part.0+0x9c/0x210
   rt_spin_lock+0x27/0xe0
   refill_obj_stock+0x3d/0x3a0
   kmem_cache_free+0x357/0x560
   inactive_task_timer+0x1ad/0x340
   __run_hrtimer+0x8a/0x1a0
   __hrtimer_run_queues+0x91/0x130
   hrtimer_interrupt+0x10f/0x220
   __sysvec_apic_timer_interrupt+0x7b/0xd0
   sysvec_apic_timer_interrupt+0x4f/0xd0
   asm_sysvec_apic_timer_interrupt+0x12/0x20
   RIP: 0033:0x7fff196bf6f5

Instead of calling __put_task_struct() directly, we defer it using
call_rcu(). A more natural approach would use a workqueue, but since
in PREEMPT_RT, we can't allocate dynamic memory from atomic context,
the code would become more complex because we would need to put the
work_struct instance in the task_struct and initialize it when we
allocate a new task_struct.

The issue is reproducible with stress-ng:

  while true; do
      stress-ng --sched deadline --sched-period 1000000000 \
	      --sched-runtime 800000000 --sched-deadline \
	      1000000000 --mmapfork 23 -t 20
  done

Reported-by: Hu Chunyu <chuhu@redhat.com>
Suggested-by: Oleg Nesterov <oleg@redhat.com>
Suggested-by: Valentin Schneider <vschneid@redhat.com>
Suggested-by: Peter Zijlstra <peterz@infradead.org>
Signed-off-by: Wander Lairson Costa <wander@redhat.com>
Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>
Link: https://lore.kernel.org/r/20230614122323.37957-2-wander@redhat.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
 2023-09-23 11:01:05 +02:00
Greg Kroah-Hartman
f50fa8d8ce This is the 5.10.189 stable release 
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmTSghkACgkQONu9yGCS
 aT49xRAAgJkv4gAs4lUP9EkwLzBDO59LDHtuihPRWDUHYIkuSvuwxDc6BlXq3xvc
 IYBKuej6NfLHmyBPBJ5vVXVQvk9eTVASFlShRdCQS1QuvSt4/FUBuLTaz/gfVziL
 5Hemr04LA/QSZj44h3va5EZq4g3SIxN1V9dfiACUAUHPdDOsw2pEnm4eSYTvb6XB
 sU1aSrERP9pegbqNKX4o9WVWYFJOKSi8QeBSTDVx0Q2PV3/MbffRARGzQ+wgGJp0
 Q67y7LX7Xpkn52koTMJJYt2Ior3OZNdWwRkKShDjizu2gM0ZfEBd2gdGAXpfJIa2
 thYuAusaYs4DpVwTC5NqxE8iiIqOnTfzji7JN5jwhHRmhs5KxOwcO2kSM6hwOGws
 6iUznxp8Js6T4YPIjcDdl/GEDdA1Uzcy0DnUOP43WJKqpihBAS1z06FCVTsUQfKu
 Bt1v2rT3+riZ8jFgniqF8wkxEXG1OpLOOq1BIoYdKHWfS86YAdOMVrFOsVEnJywY
 akrQOW+6mMrRJ6O7Td3Yn8qYhy2NLcMy9S8xgrA5ewM2BbG5/OrKQk98Z8YBYj3V
 3+WUyXEZ0tSpXd9TqkvAP4zYMye9XvuCctUFzIu5izUxobXzYLYN/2nDZaTyK3cU
 fVOvLdef8P4AJkU5kynzS89oQj0Kz8qKgyI94R8cu0ovFXJv+cM=
 =lV1+
 -----END PGP SIGNATURE-----

Merge 5.10.189 into android12-5.10-lts

Changes in 5.10.189
	init: Provide arch_cpu_finalize_init()
	x86/cpu: Switch to arch_cpu_finalize_init()
	ARM: cpu: Switch to arch_cpu_finalize_init()
	ia64/cpu: Switch to arch_cpu_finalize_init()
	m68k/cpu: Switch to arch_cpu_finalize_init()
	mips/cpu: Switch to arch_cpu_finalize_init()
	sh/cpu: Switch to arch_cpu_finalize_init()
	sparc/cpu: Switch to arch_cpu_finalize_init()
	um/cpu: Switch to arch_cpu_finalize_init()
	init: Remove check_bugs() leftovers
	init: Invoke arch_cpu_finalize_init() earlier
	init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init()
	x86/fpu: Remove cpuinfo argument from init functions
	x86/fpu: Mark init functions __init
	x86/fpu: Move FPU initialization into arch_cpu_finalize_init()
	x86/speculation: Add Gather Data Sampling mitigation
	x86/speculation: Add force option to GDS mitigation
	x86/speculation: Add Kconfig option for GDS
	KVM: Add GDS_NO support to KVM
	x86/xen: Fix secondary processors' FPU initialization
	x86/mm: fix poking_init() for Xen PV guests
	x86/mm: Use mm_alloc() in poking_init()
	mm: Move mm_cachep initialization to mm_init()
	x86/mm: Initialize text poking earlier
	Documentation/x86: Fix backwards on/off logic about YMM support
	x86/cpu: Add VM page flush MSR availablility as a CPUID feature
	x86/cpufeatures: Assign dedicated feature word for CPUID_0x8000001F[EAX]
	tools headers cpufeatures: Sync with the kernel sources
	x86/bugs: Increase the x86 bugs vector size to two u32s
	x86/cpu, kvm: Add support for CPUID_80000021_EAX
	x86/srso: Add a Speculative RAS Overflow mitigation
	x86/srso: Add IBPB_BRTYPE support
	x86/srso: Add SRSO_NO support
	x86/srso: Add IBPB
	x86/srso: Add IBPB on VMEXIT
	x86/srso: Fix return thunks in generated code
	x86/srso: Tie SBPB bit setting to microcode patch detection
	xen/netback: Fix buffer overrun triggered by unusual packet
	x86: fix backwards merge of GDS/SRSO bit
	Linux 5.10.189

Change-Id: Ibaf2cd3f0542d497374bcf135e9faf1791e9af5d
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
 2023-08-23 15:12:23 +00:00
Peter Zijlstra
1ff14defdf mm: Move mm_cachep initialization to mm_init() 
commit af80602799681c78f14fbe20b6185a56020dedee upstream.

In order to allow using mm_alloc() much earlier, move initializing
mm_cachep into mm_init().

Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>
Link: https://lkml.kernel.org/r/20221025201057.751153381@infradead.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
 2023-08-08 19:57:39 +02:00
Peter Zijlstra
6ee042fd24 x86/mm: Use mm_alloc() in poking_init() 
commit 3f4c8211d982099be693be9aa7d6fc4607dff290 upstream.

Instead of duplicating init_mm, allocate a fresh mm. The advantage is
that mm_alloc() has much simpler dependencies. Additionally it makes
more conceptual sense, init_mm has no (and must not have) user state
to duplicate.

Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>
Link: https://lkml.kernel.org/r/20221025201057.816175235@infradead.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
 2023-08-08 19:57:39 +02:00
Greg Kroah-Hartman
d7203e0307 Merge 47e61cadc7 ("MIPS: fw: Allow firmware to pass a empty env") into android12-5.10-lts 
Steps on the way to 5.10.180 to help resolve some testing errors.

Change-Id: I291b51c58e5eeff603ad8bfa999b88c628b0fe8a
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
 2023-06-23 14:15:14 +00:00
Kuniyuki Iwashima
d4a895e924 seccomp: Move copy_seccomp() to no failure path. 
commit a1140cb215fa13dcec06d12ba0c3ee105633b7c4 upstream.

Our syzbot instance reported memory leaks in do_seccomp() [0], similar
to the report [1].  It shows that we miss freeing struct seccomp_filter
and some objects included in it.

We can reproduce the issue with the program below [2] which calls one
seccomp() and two clone() syscalls.

The first clone()d child exits earlier than its parent and sends a
signal to kill it during the second clone(), more precisely before the
fatal_signal_pending() test in copy_process().  When the parent receives
the signal, it has to destroy the embryonic process and return -EINTR to
user space.  In the failure path, we have to call seccomp_filter_release()
to decrement the filter's refcount.

Initially, we called it in free_task() called from the failure path, but
the commit 3a15fb6ed9 ("seccomp: release filter after task is fully
dead") moved it to release_task() to notify user space as early as possible
that the filter is no longer used.

To keep the change and current seccomp refcount semantics, let's move
copy_seccomp() just after the signal check and add a WARN_ON_ONCE() in
free_task() for future debugging.

[0]:
unreferenced object 0xffff8880063add00 (size 256):
  comm "repro_seccomp", pid 230, jiffies 4294687090 (age 9.914s)
  hex dump (first 32 bytes):
    01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00  ................
    ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
  backtrace:
    do_seccomp (./include/linux/slab.h:600 ./include/linux/slab.h:733 kernel/seccomp.c:666 kernel/seccomp.c:708 kernel/seccomp.c:1871 kernel/seccomp.c:1991)
    do_syscall_64 (arch/x86/entry/common.c:50 arch/x86/entry/common.c:80)
    entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:120)
unreferenced object 0xffffc90000035000 (size 4096):
  comm "repro_seccomp", pid 230, jiffies 4294687090 (age 9.915s)
  hex dump (first 32 bytes):
    01 00 00 00 00 00 00 00 00 00 00 00 05 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    __vmalloc_node_range (mm/vmalloc.c:3226)
    __vmalloc_node (mm/vmalloc.c:3261 (discriminator 4))
    bpf_prog_alloc_no_stats (kernel/bpf/core.c:91)
    bpf_prog_alloc (kernel/bpf/core.c:129)
    bpf_prog_create_from_user (net/core/filter.c:1414)
    do_seccomp (kernel/seccomp.c:671 kernel/seccomp.c:708 kernel/seccomp.c:1871 kernel/seccomp.c:1991)
    do_syscall_64 (arch/x86/entry/common.c:50 arch/x86/entry/common.c:80)
    entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:120)
unreferenced object 0xffff888003fa1000 (size 1024):
  comm "repro_seccomp", pid 230, jiffies 4294687090 (age 9.915s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    bpf_prog_alloc_no_stats (./include/linux/slab.h:600 ./include/linux/slab.h:733 kernel/bpf/core.c:95)
    bpf_prog_alloc (kernel/bpf/core.c:129)
    bpf_prog_create_from_user (net/core/filter.c:1414)
    do_seccomp (kernel/seccomp.c:671 kernel/seccomp.c:708 kernel/seccomp.c:1871 kernel/seccomp.c:1991)
    do_syscall_64 (arch/x86/entry/common.c:50 arch/x86/entry/common.c:80)
    entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:120)
unreferenced object 0xffff888006360240 (size 16):
  comm "repro_seccomp", pid 230, jiffies 4294687090 (age 9.915s)
  hex dump (first 16 bytes):
    01 00 37 00 76 65 72 6c e0 83 01 06 80 88 ff ff  ..7.verl........
  backtrace:
    bpf_prog_store_orig_filter (net/core/filter.c:1137)
    bpf_prog_create_from_user (net/core/filter.c:1428)
    do_seccomp (kernel/seccomp.c:671 kernel/seccomp.c:708 kernel/seccomp.c:1871 kernel/seccomp.c:1991)
    do_syscall_64 (arch/x86/entry/common.c:50 arch/x86/entry/common.c:80)
    entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:120)
unreferenced object 0xffff8880060183e0 (size 8):
  comm "repro_seccomp", pid 230, jiffies 4294687090 (age 9.915s)
  hex dump (first 8 bytes):
    06 00 00 00 00 00 ff 7f                          ........
  backtrace:
    kmemdup (mm/util.c:129)
    bpf_prog_store_orig_filter (net/core/filter.c:1144)
    bpf_prog_create_from_user (net/core/filter.c:1428)
    do_seccomp (kernel/seccomp.c:671 kernel/seccomp.c:708 kernel/seccomp.c:1871 kernel/seccomp.c:1991)
    do_syscall_64 (arch/x86/entry/common.c:50 arch/x86/entry/common.c:80)
    entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:120)

[1]: https://syzkaller.appspot.com/bug?id=2809bb0ac77ad9aa3f4afe42d6a610aba594a987

[2]:
#define _GNU_SOURCE
#include <sched.h>
#include <signal.h>
#include <unistd.h>
#include <sys/syscall.h>
#include <linux/filter.h>
#include <linux/seccomp.h>

void main(void)
{
	struct sock_filter filter[] = {
		BPF_STMT(BPF_RET | BPF_K, SECCOMP_RET_ALLOW),
	};
	struct sock_fprog fprog = {
		.len = sizeof(filter) / sizeof(filter[0]),
		.filter = filter,
	};
	long i, pid;

	syscall(__NR_seccomp, SECCOMP_SET_MODE_FILTER, 0, &fprog);

	for (i = 0; i < 2; i++) {
		pid = syscall(__NR_clone, CLONE_NEWNET | SIGKILL, NULL, NULL, 0);
		if (pid == 0)
			return;
	}
}

Fixes: 3a15fb6ed9 ("seccomp: release filter after task is fully dead")
Reported-by: syzbot+ab17848fe269b573eb71@syzkaller.appspotmail.com
Reported-by: Ayushman Dutta <ayudutta@amazon.com>
Suggested-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Kuniyuki Iwashima <kuniyu@amazon.com>
Reviewed-by: Christian Brauner (Microsoft) <brauner@kernel.org>
Signed-off-by: Kees Cook <keescook@chromium.org>
Link: https://lore.kernel.org/r/20220823154532.82913-1-kuniyu@amazon.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
 2023-05-17 11:47:27 +02:00
Greg Kroah-Hartman
87cdb8101e This is the 5.10.175 stable release 
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmQUGpYACgkQONu9yGCS
 aT6Tvw/6ArxWVYpls1upkabuByNmK0vvbDD5uyBzJpJUf1sbKQqG6myLaPSuq0gp
 L/xJrdtP6Nk6hrqPgEfI4bNvX2ycBJZyQQdfTAf99bRiA+iZG1C6Opg7GUj5uJbM
 56w0/Gr+SjaDWw2f0j0yJRYIBn4PzJ6RyxYHaVA+s8jQ8n0wzRRdT3UXA2dNOid/
 5YSCIm9bvBchLBVHqtVk49wzo21kRPKGHxu0tYMdsLfMMmnp+guozvGbcn/JRK0g
 CHQF4UNy8wgtkUOYHPJl5IdWqaHxc6wrJ+NBMgrhF30RFshIA4ZC5+3EVD0fPO1i
 WyxUwnGPMXKHN84lr/vGrwVRUrrF0sbtUmashGI8Eo4t9fm4O0f/zG4d5MHKfRVq
 lXqRDu/uqe29IIXQJCpDTA8VChXSMWgNpN8KTatd1MaV5MZaqkspvXp/8Jg9rwrf
 IoE/0zDtp/QuIianJ684bQ7VvK0dzPc0KIYlRsntrJlMw0ZCwFWuhSoSDDhcvsU8
 eydVpncw+Z5/whuB6ilGQM8C7XnUjcOViDh8ppz8jIIwP6CErBUTPv35iRkimSKQ
 JBQVVSuGWd02jRYNXgarlMQ1z/5A1puHHEOieuIUP7z8eTUkPUIxRnHt65CozdbG
 tFNpv0MuLkOqUTN3+YIV6uz0UyemJIID6qgY68FRKfjwBhyEFik=
 =yaay
 -----END PGP SIGNATURE-----

Merge 5.10.175 into android12-5.10-lts

Changes in 5.10.175
	fs: prevent out-of-bounds array speculation when closing a file descriptor
	fork: allow CLONE_NEWTIME in clone3 flags
	x86/CPU/AMD: Disable XSAVES on AMD family 0x17
	drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc15
	drm/connector: print max_requested_bpc in state debugfs
	ext4: fix cgroup writeback accounting with fs-layer encryption
	ext4: fix RENAME_WHITEOUT handling for inline directories
	ext4: fix another off-by-one fsmap error on 1k block filesystems
	ext4: move where set the MAY_INLINE_DATA flag is set
	ext4: fix WARNING in ext4_update_inline_data
	ext4: zero i_disksize when initializing the bootloader inode
	nfc: change order inside nfc_se_io error path
	udf: Fix off-by-one error when discarding preallocation
	irq: Fix typos in comments
	irqdomain: Look for existing mapping only once
	irqdomain: Refactor __irq_domain_alloc_irqs()
	irqdomain: Fix mapping-creation race
	irqdomain: Change the type of 'size' in __irq_domain_add() to be consistent
	irqdomain: Fix domain registration race
	iommu/vt-d: Fix lockdep splat in intel_pasid_get_entry()
	iommu/vt-d: Fix PASID directory pointer coherency
	arm64: efi: Make efi_rt_lock a raw_spinlock
	RISC-V: Avoid dereferening NULL regs in die()
	riscv: Avoid enabling interrupts in die()
	riscv: Add header include guards to insn.h
	scsi: core: Remove the /proc/scsi/${proc_name} directory earlier
	ext4: Fix possible corruption when moving a directory
	drm/nouveau/kms/nv50-: remove unused functions
	drm/nouveau/kms/nv50: fix nv50_wndw_new_ prototype
	drm/msm: Fix potential invalid ptr free
	drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register
	drm/msm: Document and rename preempt_lock
	drm/msm/a5xx: fix the emptyness check in the preempt code
	drm/msm/a5xx: fix context faults during ring switch
	bgmac: fix *initial* chip reset to support BCM5358
	nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties
	powerpc: dts: t1040rdb: fix compatible string for Rev A boards
	ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()
	selftests: nft_nat: ensuring the listening side is up before starting the client
	net: usb: lan78xx: Remove lots of set but unused 'ret' variables
	net: lan78xx: fix accessing the LAN7800's internal phy specific registers from the MAC driver
	net: caif: Fix use-after-free in cfusbl_device_notify()
	net: stmmac: add to set device wake up flag when stmmac init phy
	net: phylib: get rid of unnecessary locking
	bnxt_en: Avoid order-5 memory allocation for TPA data
	netfilter: ctnetlink: revert to dumping mark regardless of event type
	netfilter: tproxy: fix deadlock due to missing BH disable
	btf: fix resolving BTF_KIND_VAR after ARRAY, STRUCT, UNION, PTR
	net: ethernet: mtk_eth_soc: fix RX data corruption issue
	scsi: megaraid_sas: Update max supported LD IDs to 240
	platform: x86: MLX_PLATFORM: select REGMAP instead of depending on it
	net/smc: fix fallback failed while sendmsg with fastopen
	SUNRPC: Fix a server shutdown leak
	riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode
	RISC-V: Don't check text_mutex during stop_machine
	ext4: Fix deadlock during directory rename
	iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
	watch_queue: fix IOC_WATCH_QUEUE_SET_SIZE alloc error paths
	tpm/eventlog: Don't abort tpm_read_log on faulty ACPI address
	block, bfq: fix possible uaf for 'bfqq->bic'
	block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq
	block/bfq-iosched.c: use "false" rather than "BLK_RW_ASYNC"
	block, bfq: replace 0/1 with false/true in bic apis
	block, bfq: fix uaf for bfqq in bic_set_bfqq()
	MIPS: Fix a compilation issue
	powerpc/kcsan: Exclude udelay to prevent recursive instrumentation
	alpha: fix R_ALPHA_LITERAL reloc for large modules
	macintosh: windfarm: Use unsigned type for 1-bit bitfields
	PCI: Add SolidRun vendor ID
	scripts: handle BrokenPipeError for python scripts
	media: ov5640: Fix analogue gain control
	media: rc: gpio-ir-recv: add remove function
	ipmi/watchdog: replace atomic_add() and atomic_sub()
	ipmi:watchdog: Set panic count to proper value on a panic
	skbuff: Fix nfct leak on napi stolen
	drm/i915: Don't use BAR mappings for ring buffers with LLC
	ext4: refactor ext4_free_blocks() to pull out ext4_mb_clear_bb()
	ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid()
	ext4: add strict range checks while freeing blocks
	ext4: block range must be validated before use in ext4_mb_clear_bb()
	arch: fix broken BuildID for arm64 and riscv
	powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT
	powerpc/vmlinux.lds: Don't discard .rela* for relocatable builds
	s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld < 2.36
	sh: define RUNTIME_DISCARD_EXIT
	UML: define RUNTIME_DISCARD_EXIT
	KVM: nVMX: Don't use Enlightened MSR Bitmap for L3
	KVM: VMX: Introduce vmx_msr_bitmap_l01_changed() helper
	KVM: VMX: Fix crash due to uninitialized current_vmcs
	s390/dasd: add missing discipline function
	Linux 5.10.175

Change-Id: Ia88bd3919a9280f6aa87c2a048ad156d7f3f2e1d
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
 2023-03-24 14:42:30 +00:00
Tobias Klauser
a1eb8bf1e3 fork: allow CLONE_NEWTIME in clone3 flags 
commit a402f1e35313fc7ce2ca60f543c4402c2c7c3544 upstream.

Currently, calling clone3() with CLONE_NEWTIME in clone_args->flags
fails with -EINVAL. This is because CLONE_NEWTIME intersects with
CSIGNAL. However, CSIGNAL was deprecated when clone3 was introduced in
commit 7f192e3cd3 ("fork: add clone3"), allowing re-use of that part
of clone flags.

Fix this by explicitly allowing CLONE_NEWTIME in clone3_args_valid. This
is also in line with the respective check in check_unshare_flags which
allow CLONE_NEWTIME for unshare().

Fixes: 769071ac9f ("ns: Introduce Time Namespace")
Cc: Andrey Vagin <avagin@openvz.org>
Cc: Christian Brauner <brauner@kernel.org>
Cc: stable@vger.kernel.org
Signed-off-by: Tobias Klauser <tklauser@distanz.ch>
Reviewed-by: Christian Brauner <brauner@kernel.org>
Signed-off-by: Christian Brauner (Microsoft) <brauner@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
 2023-03-17 08:45:06 +01:00
Greg Kroah-Hartman
8596b99884 Merge 5.10.162 into android12-5.10-lts 
Changes in 5.10.162
	kernel: provide create_io_thread() helper
	iov_iter: add helper to save iov_iter state
	saner calling conventions for unlazy_child()
	fs: add support for LOOKUP_CACHED
	fix handling of nd->depth on LOOKUP_CACHED failures in try_to_unlazy*
	Make sure nd->path.mnt and nd->path.dentry are always valid pointers
	fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
	tools headers UAPI: Sync openat2.h with the kernel sources
	net: provide __sys_shutdown_sock() that takes a socket
	net: add accept helper not installing fd
	signal: Add task_sigpending() helper
	fs: make do_renameat2() take struct filename
	file: Rename __close_fd_get_file close_fd_get_file
	fs: provide locked helper variant of close_fd_get_file()
	entry: Add support for TIF_NOTIFY_SIGNAL
	task_work: Use TIF_NOTIFY_SIGNAL if available
	x86: Wire up TIF_NOTIFY_SIGNAL
	arc: add support for TIF_NOTIFY_SIGNAL
	arm64: add support for TIF_NOTIFY_SIGNAL
	m68k: add support for TIF_NOTIFY_SIGNAL
	nios32: add support for TIF_NOTIFY_SIGNAL
	parisc: add support for TIF_NOTIFY_SIGNAL
	powerpc: add support for TIF_NOTIFY_SIGNAL
	mips: add support for TIF_NOTIFY_SIGNAL
	s390: add support for TIF_NOTIFY_SIGNAL
	um: add support for TIF_NOTIFY_SIGNAL
	sh: add support for TIF_NOTIFY_SIGNAL
	openrisc: add support for TIF_NOTIFY_SIGNAL
	csky: add support for TIF_NOTIFY_SIGNAL
	hexagon: add support for TIF_NOTIFY_SIGNAL
	microblaze: add support for TIF_NOTIFY_SIGNAL
	arm: add support for TIF_NOTIFY_SIGNAL
	xtensa: add support for TIF_NOTIFY_SIGNAL
	alpha: add support for TIF_NOTIFY_SIGNAL
	c6x: add support for TIF_NOTIFY_SIGNAL
	h8300: add support for TIF_NOTIFY_SIGNAL
	ia64: add support for TIF_NOTIFY_SIGNAL
	nds32: add support for TIF_NOTIFY_SIGNAL
	riscv: add support for TIF_NOTIFY_SIGNAL
	sparc: add support for TIF_NOTIFY_SIGNAL
	ia64: don't call handle_signal() unless there's actually a signal queued
	ARC: unbork 5.11 bootup: fix snafu in _TIF_NOTIFY_SIGNAL handling
	alpha: fix TIF_NOTIFY_SIGNAL handling
	task_work: remove legacy TWA_SIGNAL path
	kernel: remove checking for TIF_NOTIFY_SIGNAL
	coredump: Limit what can interrupt coredumps
	kernel: allow fork with TIF_NOTIFY_SIGNAL pending
	entry/kvm: Exit to user mode when TIF_NOTIFY_SIGNAL is set
	arch: setup PF_IO_WORKER threads like PF_KTHREAD
	arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
	x86/process: setup io_threads more like normal user space threads
	kernel: stop masking signals in create_io_thread()
	kernel: don't call do_exit() for PF_IO_WORKER threads
	task_work: add helper for more targeted task_work canceling
	io_uring: import 5.15-stable io_uring
	signal: kill JOBCTL_TASK_WORK
	task_work: unconditionally run task_work from get_signal()
	net: remove cmsg restriction from io_uring based send/recvmsg calls
	Revert "proc: don't allow async path resolution of /proc/thread-self components"
	Revert "proc: don't allow async path resolution of /proc/self components"
	eventpoll: add EPOLL_URING_WAKE poll wakeup flag
	eventfd: provide a eventfd_signal_mask() helper
	io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups
	Linux 5.10.162

Change-Id: I50a7b8bc8d38fac612113281b218cf5323b0af5e
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
 2023-02-01 16:13:18 +00:00
Jens Axboe
788d082426 io_uring: import 5.15-stable io_uring 
No upstream commit exists.

This imports the io_uring codebase from 5.15.85, wholesale. Changes
from that code base:

- Drop IOCB_ALLOC_CACHE, we don't have that in 5.10.
- Drop MKDIRAT/SYMLINKAT/LINKAT. Would require further VFS backports,
  and we don't support these in 5.10 to begin with.
- sock_from_file() old style calling convention.
- Use compat_get_bitmap() only for CONFIG_COMPAT=y

Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
 2023-01-04 11:39:23 +01:00
Jens Axboe
9ded44b69c kernel: stop masking signals in create_io_thread() 
[ Upstream commit b16b3855d89fba640996fefdd3a113c0aa0e380d ]

This is racy - move the blocking into when the task is created and
we're marking it as PF_IO_WORKER anyway. The IO threads are now
prepared to handle signals like SIGSTOP as well, so clear that from
the mask to allow proper stopping of IO threads.

Acked-by: "Eric W. Biederman" <ebiederm@xmission.com>
Reported-by: Oleg Nesterov <oleg@redhat.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
 2023-01-04 11:39:23 +01:00
Jens Axboe
0f735cf52b kernel: allow fork with TIF_NOTIFY_SIGNAL pending 
[ Upstream commit 66ae0d1e2d9fe6ec70e73fcfdcf4b390e271c1ac ]

fork() fails if signal_pending() is true, but there are two conditions
that can lead to that:

1) An actual signal is pending. We want fork to fail for that one, like
   we always have.

2) TIF_NOTIFY_SIGNAL is pending, because the task has pending task_work.
   We don't need to make it fail for that case.

Allow fork() to proceed if just task_work is pending, by changing the
signal_pending() check to task_sigpending().

Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
 2023-01-04 11:39:22 +01:00
Jens Axboe
1500fed008 kernel: provide create_io_thread() helper 
[ Upstream commit cc440e8738e5c875297ac0e90316745093be7e28 ]

Provide a generic helper for setting up an io_uring worker. Returns a
task_struct so that the caller can do whatever setup is needed, then call
wake_up_new_task() to kick it into gear.

Add a kernel_clone_args member, io_thread, which tells copy_process() to
mark the task with PF_IO_WORKER.

Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
 2023-01-04 11:39:16 +01:00
Suren Baghdasaryan
f677efbea1 Revert "Revert "ANDROID: vendor_hooks:vendor hook for mmput"" 
This reverts commit 501063ce66.

Reason for revert: The vendor hook is actually needed by a partner

Bug: 238821038
Signed-off-by: Suren Baghdasaryan <surenb@google.com>
Change-Id: I1c19add348792967975369a10ec9cb41fa268236
 2022-12-24 12:34:20 -08:00
Greg Kroah-Hartman
3dbfa90b61 This is the 5.10.143 stable release 
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmMi8SIACgkQONu9yGCS
 aT5fNRAAzsIlb9OehdslBs5PcJjQztWRSapzpR+umubzCvVht3HKoPN4EBane+t+
 w3y6BUKJEWrTuomO+KpizGzDG82B9kNYkS88TCrZHTu37knH4nl2mze09KGUjz0l
 A8OgmwfA7DFaZucNQWxmO5m80USMUJoARxT87bQ1edW9L4phquNHpCXnlDbbX15/
 La4d6tQWrEHx7LgxhfxCN4UGJCKzp4xDVnedPsicMALYjEZ6kc9STz95DR+0lQZK
 e7FyR6uLit/TtnuVpJYJcHRs9k+MHe5grtQ/VA5PAxB6uMU2Y0G8dzzUrQKZ/L4N
 ty/qqKS7zaqqD2ywh8JEPuFJMbAFRerXHEuQ9HI7d3guCYsKICE9eNd5eRLrN/rn
 MckBm41/of7vksZvofpx/U4uZdIlNSzF0ybADv/UGMPDyCfEEKOKlok3KFM9UWLK
 MWzufJHaX9MF/J5vfrixO7QPol5MKTdUypZ7BhXeXb9b7F2Y/JrYsHgIIzpE+TH1
 p1wkfmT3YfHA+6Wl5VnjxvZS6QhcZFTY97hOmVPJ4ge1orAGDK9Jj9FpL6EM4XDb
 oaKJU8WB0Ry+YYxjEa0QQY+VWHAEns/lauECM4kJoxDKLo2b5A8qvvpaDGyXz/M4
 2/66ZmV2KKOlEiWAC5oVhxPiWxpVbryO0FhEdR2e9WuidmQ27Mc=
 =XF1H
 -----END PGP SIGNATURE-----

Merge 5.10.143 into android12-5.10-lts

Changes in 5.10.143
	NFSD: Fix verifier returned in stable WRITEs
	xen-blkfront: Cache feature_persistent value before advertisement
	tty: n_gsm: initialize more members at gsm_alloc_mux()
	tty: n_gsm: avoid call of sleeping functions from atomic context
	efi: libstub: Disable struct randomization
	efi: capsule-loader: Fix use-after-free in efi_capsule_write
	wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
	fs: only do a memory barrier for the first set_buffer_uptodate()
	Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
	scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
	scsi: megaraid_sas: Fix double kfree()
	drm/gem: Fix GEM handle release errors
	drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
	drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
	drm/radeon: add a force flush to delay work when radeon
	parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
	parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
	arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
	net/core/skbuff: Check the return value of skb_copy_bits()
	fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
	drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
	ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
	ALSA: aloop: Fix random zeros in capture data when using jiffies timer
	ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
	kprobes: Prohibit probes in gate area
	debugfs: add debugfs_lookup_and_remove()
	nvmet: fix a use-after-free
	drm/i915: Implement WaEdpLinkRateDataReload
	scsi: mpt3sas: Fix use-after-free warning
	scsi: lpfc: Add missing destroy_workqueue() in error path
	cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
	cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
	cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
	smb3: missing inode locks in punch hole
	ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
	regulator: core: Clean up on enable failure
	tee: fix compiler warning in tee_shm_register()
	RDMA/cma: Fix arguments order in net device validation
	soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
	RDMA/hns: Fix supported page size
	RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift
	ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
	ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
	ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
	ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
	netfilter: br_netfilter: Drop dst references before setting.
	netfilter: nf_tables: clean up hook list when offload flags check fails
	netfilter: nf_conntrack_irc: Fix forged IP logic
	ALSA: usb-audio: Inform the delayed registration more properly
	ALSA: usb-audio: Register card again for iface over delayed_register option
	rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
	afs: Use the operation issue time instead of the reply time for callbacks
	sch_sfb: Don't assume the skb is still around after enqueueing to child
	tipc: fix shift wrapping bug in map_get()
	ice: use bitmap_free instead of devm_kfree
	i40e: Fix kernel crash during module removal
	xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
	RDMA/siw: Pass a pointer to virt_to_page()
	ipv6: sr: fix out-of-bounds read when setting HMAC data.
	IB/core: Fix a nested dead lock as part of ODP flow
	RDMA/mlx5: Set local port to one when accessing counters
	nvme-tcp: fix UAF when detecting digest errors
	nvme-tcp: fix regression that causes sporadic requests to time out
	tcp: fix early ETIMEDOUT after spurious non-SACK RTO
	sch_sfb: Also store skb len before calling child enqueue
	ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
	ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
	MIPS: loongson32: ls1c: Fix hang during startup
	swiotlb: avoid potential left shift overflow
	iommu/amd: use full 64-bit value in build_completion_wait()
	hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
	hwmon: (mr75203) update pvt->v_num and vm_num to the actual number of used sensors
	hwmon: (mr75203) fix voltage equation for negative source input
	hwmon: (mr75203) fix multi-channel voltage reading
	hwmon: (mr75203) enable polling for all VM channels
	arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly
	Linux 5.10.143

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: Ia1bc1b76bcad0e2cb3b27d1a37278b1d24c6b90d
 2022-09-22 14:38:08 +02:00
Yishai Hadas
e8de6cb575 IB/core: Fix a nested dead lock as part of ODP flow 
[ Upstream commit 85eaeb5058f0f04dffb124c97c86b4f18db0b833 ]

Fix a nested dead lock as part of ODP flow by using mmput_async().

From the below call trace [1] can see that calling mmput() once we have
the umem_odp->umem_mutex locked as required by
ib_umem_odp_map_dma_and_lock() might trigger in the same task the
exit_mmap()->__mmu_notifier_release()->mlx5_ib_invalidate_range() which
may dead lock when trying to lock the same mutex.

Moving to use mmput_async() will solve the problem as the above
exit_mmap() flow will be called in other task and will be executed once
the lock will be available.

[1]
[64843.077665] task:kworker/u133:2  state:D stack:    0 pid:80906 ppid:
2 flags:0x00004000
[64843.077672] Workqueue: mlx5_ib_page_fault mlx5_ib_eqe_pf_action [mlx5_ib]
[64843.077719] Call Trace:
[64843.077722]  <TASK>
[64843.077724]  __schedule+0x23d/0x590
[64843.077729]  schedule+0x4e/0xb0
[64843.077735]  schedule_preempt_disabled+0xe/0x10
[64843.077740]  __mutex_lock.constprop.0+0x263/0x490
[64843.077747]  __mutex_lock_slowpath+0x13/0x20
[64843.077752]  mutex_lock+0x34/0x40
[64843.077758]  mlx5_ib_invalidate_range+0x48/0x270 [mlx5_ib]
[64843.077808]  __mmu_notifier_release+0x1a4/0x200
[64843.077816]  exit_mmap+0x1bc/0x200
[64843.077822]  ? walk_page_range+0x9c/0x120
[64843.077828]  ? __cond_resched+0x1a/0x50
[64843.077833]  ? mutex_lock+0x13/0x40
[64843.077839]  ? uprobe_clear_state+0xac/0x120
[64843.077860]  mmput+0x5f/0x140
[64843.077867]  ib_umem_odp_map_dma_and_lock+0x21b/0x580 [ib_core]
[64843.077931]  pagefault_real_mr+0x9a/0x140 [mlx5_ib]
[64843.077962]  pagefault_mr+0xb4/0x550 [mlx5_ib]
[64843.077992]  pagefault_single_data_segment.constprop.0+0x2ac/0x560
[mlx5_ib]
[64843.078022]  mlx5_ib_eqe_pf_action+0x528/0x780 [mlx5_ib]
[64843.078051]  process_one_work+0x22b/0x3d0
[64843.078059]  worker_thread+0x53/0x410
[64843.078065]  ? process_one_work+0x3d0/0x3d0
[64843.078073]  kthread+0x12a/0x150
[64843.078079]  ? set_kthread_struct+0x50/0x50
[64843.078085]  ret_from_fork+0x22/0x30
[64843.078093]  </TASK>

Fixes: 36f30e486d ("IB/core: Improve ODP to use hmm_range_fault()")
Reviewed-by: Maor Gottlieb <maorg@nvidia.com>
Signed-off-by: Yishai Hadas <yishaih@nvidia.com>
Link: https://lore.kernel.org/r/74d93541ea533ef7daec6f126deb1072500aeb16.1661251841.git.leonro@nvidia.com
Signed-off-by: Leon Romanovsky <leon@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
 2022-09-15 11:32:05 +02:00
Greg Kroah-Hartman
501063ce66 Revert "ANDROID: vendor_hooks:vendor hook for mmput" 
This reverts commit 8b19ed264b.

The hook android_vh_mmput is not used by any vendor, so remove it to
help with merge issues with future LTS releases.

If this is needed by any real user, it can easily be reverted to add it
back and then the symbol should be added to the abi list at the same
time to prevent it from being removed again later.

Bug: 203756332
Bug: 238821038
Cc: xiaofeng <xiaofeng5@xiaomi.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: Idd40f231640723d2342a9dbac7e9206a800e82dd
 2022-08-17 05:54:29 +00:00
xiaofeng
8b19ed264b ANDROID: vendor_hooks:vendor hook for mmput 
add vendor hook in mmput while mm_users decreased to 0.

Bug: 238821038
Change-Id: I42a717cbeeb3176bac14b4b2391fdb2366c972d3
Signed-off-by: xiaofeng <xiaofeng5@xiaomi.com>
 2022-07-16 14:31:51 +08:00
Greg Kroah-Hartman
9a559b8868 Merge branch 'android12-5.10' into android12-5.10-lts 
Sync up with android12-5.10 for the following commits:

1419b69403 Merge tag 'android12-5.10.101_r00' into android12-5.10
3eec441822 UPSTREAM: usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
821f3e53d9 UPSTREAM: usb: gadget: rndis: prevent integer overflow in rndis_set_response()
39aca15979 FROMGIT: mm/migrate: fix race between lock page and clear PG_Isolated
de0334216b UPSTREAM: arm64: proton-pack: Include unprivileged eBPF status in Spectre v2 mitigation reporting
d236f7b4cb UPSTREAM: arm64: Use the clearbhb instruction in mitigations
98b16e808f UPSTREAM: KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated
0f76dfc55d UPSTREAM: arm64: Mitigate spectre style branch history side channels
5411474f65 UPSTREAM: arm64: Do not include __READ_ONCE() block in assembly files
e9a39a642c UPSTREAM: KVM: arm64: Allow indirect vectors to be used without SPECTRE_V3A
fee1ae7c7c UPSTREAM: arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2
d95b0b4e5d UPSTREAM: arm64: Add percpu vectors for EL1
30180ef431 Revert "BACKPORT: FROMLIST: scsi: core: Reserve one tag for the UFS driver"
28837e415d UPSTREAM: arm64: entry: Add macro for reading symbol addresses from the trampoline
e322fe26a1 UPSTREAM: arm64: entry: Add vectors that have the bhb mitigation sequences
2a90cf9af2 UPSTREAM: arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations
0db372ec4b UPSTREAM: arm64: entry: Allow the trampoline text to occupy multiple pages
158c87e50a UPSTREAM: arm64: entry: Make the kpti trampoline's kpti sequence optional
e6408b96a0 UPSTREAM: arm64: entry: Move trampoline macros out of ifdef'd section
00d8bb6b90 UPSTREAM: arm64: entry: Don't assume tramp_vectors is the start of the vectors
0defb52ce6 UPSTREAM: arm64: entry: Allow tramp_alias to access symbols after the 4K boundary
6e48449c91 UPSTREAM: arm64: entry: Move the trampoline data page before the text page
bb8baaf3af UPSTREAM: arm64: entry: Free up another register on kpti's tramp_exit path
32ba6d5d61 UPSTREAM: arm64: entry: Make the trampoline cleanup optional
c8b567d888 UPSTREAM: arm64: spectre: Rename spectre_v4_patch_fw_mitigation_conduit
17867c11a2 UPSTREAM: arm64: entry.S: Add ventry overflow sanity checks
81ec26aafe UPSTREAM: arm64: cpufeature: add HWCAP for FEAT_RPRES
18c4e4fa56 UPSTREAM: arm64: cpufeature: add HWCAP for FEAT_AFP
68bc555a23 UPSTREAM: arm64: add ID_AA64ISAR2_EL1 sys register
2e2eef400b UPSTREAM: arm64: Add HWCAP for self-synchronising virtual counter
6d1f2678e2 UPSTREAM: arm64: Add Cortex-X2 CPU part definition
51eded5d1b UPSTREAM: arm64: cputype: Add CPU implementor & types for the Apple M1 cores
803ff1161c UPSTREAM: binder: Add invalid handle info in user error log
a40cd23755 UPSTREAM: ARM: fix Thumb2 regression with Spectre BHB
56186c7e4a UPSTREAM: ARM: Spectre-BHB: provide empty stub for non-config
1ea0d91588 UPSTREAM: ARM: fix build warning in proc-v7-bugs.c
fdf3cb8a00 UPSTREAM: ARM: Do not use NOCROSSREFS directive with ld.lld
57bc1e13f0 UPSTREAM: ARM: fix co-processor register typo
a4e68d43f5 UPSTREAM: ARM: fix build error when BPF_SYSCALL is disabled
bd2376838d UPSTREAM: ARM: include unprivileged BPF status in Spectre V2 reporting
afbbe4048f UPSTREAM: ARM: Spectre-BHB workaround
5a41f364e7 UPSTREAM: ARM: use LOADADDR() to get load address of sections
3bfcb356df UPSTREAM: ARM: early traps initialisation
5a64a66802 UPSTREAM: ARM: report Spectre v2 status through sysfs
9362cd2b47 UPSTREAM: x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT
54a2bd029f UPSTREAM: x86/speculation: Warn about Spectre v2 LFENCE mitigation
f1b1f893b4 UPSTREAM: x86/speculation: Update link to AMD speculation whitepaper
c4188388a3 UPSTREAM: x86/speculation: Use generic retpoline by default on AMD
bd02dc4329 UPSTREAM: x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting
3883503747 UPSTREAM: Documentation/hw-vuln: Update spectre doc
1c3e98581b UPSTREAM: x86/speculation: Add eIBRS + Retpoline options
cc9e9aa4e0 UPSTREAM: x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE
414a6076ac UPSTREAM: x86,bugs: Unconditionally allow spectre_v2=retpoline,amd
f27f62fecd UPSTREAM: bpf: Add kconfig knob for disabling unpriv bpf by default
f3ca80cced ANDROID: dm-bow: Protect Ranges fetched and erased from the RB tree
4ebb639f0d ANDROID: mm: page_pinner: fix build warning
fe75d58387 ANDROID: fault: Add vendor hook for TLB conflict
8248a3e758 BACKPORT: sched: Fix yet more sched_fork() races
cd6e5d5d7d ANDROID: mm/slub: Fix Kasan issue with for_each_object_track
8dbcaf63b2 ANDROID: dm kcopyd: Use reserved memory for the copy buffer
7b5fea2f46 ANDROID: GKI: add allowed list file for xiaomi
ae38f9954b ANDROID: GKI: Update symbols to symbol list
786bcb1109 FROMGIT: f2fs: quota: fix loop condition at f2fs_quota_sync()
91fef75d48 FROMGIT: f2fs: Restore rwsem lockdep support
4cc8ec84be ANDROID: ABI: update allowed list for galaxy
fcaaaaae6d UPSTREAM: mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work
91be4236fb ANDROID: GKI: remove vfs-only namespace from 2 symbols
a817d6ed87 ANDROID: mm: Fix page table lookup in speculative fault path
e53b1b9ad4 UPSTREAM: xhci: re-initialize the HC during resume if HCE was set
767f384155 FROMGIT: xhci: make xhci_handshake timeout for xhci_reset() adjustable
ebbf267fc0 ANDROID: vendor_hooks: Add hooks for __alloc_pages_direct_reclaim
135406cecb ANDROID: dma-direct: Document disable_dma32
bf96382fb9 ANDROID: dma-direct: Make DMA32 disablement work for CONFIG_NUMA
8f66dc1a78 UPSTREAM: mmc: block: fix read single on recovery logic
cf221db753 UPSTREAM: fget: check that the fd still exists after getting a ref to it
43754d8b7f ANDROID: GKI: Update symbols to symbol list
f2d0c30576 ANDROID: vendor_hooks: Add hooks for shrink_active_list
62412e5b8c FROMGIT: mm: count time in drain_all_pages during direct reclaim as memory pressure
3b9fe10e46 ANDROID: incremental-fs: remove spurious kfree()
acefa91e51 ANDROID: vendor_hooks: Add hooks for binder
c3ac7418e6 ANDROID: qcom: Add sysfs related symbol

Change-Id: Icbe5fb26e3cef602e3bbc01745a755a95d72a1a0
 2022-03-21 16:49:21 +01:00
Peter Zijlstra
8248a3e758 BACKPORT: sched: Fix yet more sched_fork() races 
Where commit 4ef0c5c6b5ba ("kernel/sched: Fix sched_fork() access an
invalid sched_task_group") fixed a fork race vs cgroup, it opened up a
race vs syscalls by not placing the task on the runqueue before it
gets exposed through the pidhash.

Commit 13765de8148f ("sched/fair: Fix fault in reweight_entity") is
trying to fix a single instance of this, instead fix the whole class
of issues, effectively reverting this commit.

Change-Id: If8d8fc38f2ab1334c45e530aaaedfc7b2825a7e5
Fixes: 4ef0c5c6b5ba ("kernel/sched: Fix sched_fork() access an invalid sched_task_group")
Reported-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>
Tested-by: Tadeusz Struk <tadeusz.struk@linaro.org>
Tested-by: Zhang Qiao <zhangqiao22@huawei.com>
Tested-by: Dietmar Eggemann <dietmar.eggemann@arm.com>
Link: https://lkml.kernel.org/r/YgoeCbwj5mbCR0qA@hirez.programming.kicks-ass.net
BUG: 221793230
(cherry picked from commit b1e8206582f9d680cff7d04828708c8b6ab32957)
[quic_ashayj: Resolved minor merge conflicts]
Signed-off-by: Ashay Jaiswal <quic_ashayj@quicinc.com>
 2022-03-10 20:57:08 +00:00
Greg Kroah-Hartman
79553fad5c This is the 5.10.102 stable release 
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmIWE/gACgkQONu9yGCS
 aT74Cw//awQY9EgXHMRNNU5+qun0ESkj918YvfAIKGDRutaOXK00YUdkqjuxEP6V
 gOso0rbXe1LiravgrbPSaYbgSvhGVPOPXHLhb7QQkiodxMZ0oaEEzST2VzM4a19k
 xfhne2BeqCCl4oUUA84NZPcCpohaLhRjZesMWR23zWNbVMEIt7uV8eeqRcC0S4YA
 r7cA4PURBMUiTlWWssBwlrEVy5JZrlcTYCvljxcpd8ws1Xs0KnmxX4gIDpQzNoFj
 Dfwg3lSFcl+ar/Xrg14qL3q3iO8zpaJ2msguZ4vq+OLiYWoTfoFcBF625eQJn6/B
 eWrzpNUqzFv5Eu31vMnv4Wm/iN8/1Yd+lacSqKwxejdmZzwX79VRqv9kD2naT/eP
 C/tkI1b93Ig7+teIjm+aqMAFDoAeR75oVK0KwKEkDIT19mbX1CSex9VnJtaSHZTM
 ON7N8NBUyIPLmhc3jencrsFNIY11W7xUedcN/+JmrZoi4Xy4Yr0mh3H4fZVs/vAH
 I6uYZgylTZiX0esCqJeiHrasETL0IStDw57+wbrjLlBrATgkMbhZQ+VTBxio/mxV
 yok4TiIB+EHaNMOgIAuT6uaZrXwDwHekR1EX1s4p2cPTz1kstp1ZIC2Gdv910xKB
 gprzPa/ocwqk71QODgwhogwntR/a4edbbYvCVHKLXQH9Pd81jkM=
 =TZTu
 -----END PGP SIGNATURE-----

Merge 5.10.102 into android12-5.10-lts

Changes in 5.10.102
	drm/nouveau/pmu/gm200-: use alternate falcon reset sequence
	mm: memcg: synchronize objcg lists with a dedicated spinlock
	rcu: Do not report strict GPs for outgoing CPUs
	fget: clarify and improve __fget_files() implementation
	fs/proc: task_mmu.c: don't read mapcount for migration entry
	can: isotp: prevent race between isotp_bind() and isotp_setsockopt()
	can: isotp: add SF_BROADCAST support for functional addressing
	scsi: lpfc: Fix mailbox command failure during driver initialization
	HID:Add support for UGTABLET WP5540
	Revert "svm: Add warning message for AVIC IPI invalid target"
	serial: parisc: GSC: fix build when IOSAPIC is not set
	parisc: Drop __init from map_pages declaration
	parisc: Fix data TLB miss in sba_unmap_sg
	parisc: Fix sglist access in ccio-dma.c
	mmc: block: fix read single on recovery logic
	mm: don't try to NUMA-migrate COW pages that have other uses
	PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA topology
	parisc: Add ioread64_lo_hi() and iowrite64_lo_hi()
	btrfs: send: in case of IO error log it
	platform/x86: touchscreen_dmi: Add info for the RWC NANOTE P8 AY07J 2-in-1
	platform/x86: ISST: Fix possible circular locking dependency detected
	selftests: rtc: Increase test timeout so that all tests run
	kselftest: signal all child processes
	net: ieee802154: at86rf230: Stop leaking skb's
	selftests/zram: Skip max_comp_streams interface on newer kernel
	selftests/zram01.sh: Fix compression ratio calculation
	selftests/zram: Adapt the situation that /dev/zram0 is being used
	selftests: openat2: Print also errno in failure messages
	selftests: openat2: Add missing dependency in Makefile
	selftests: openat2: Skip testcases that fail with EOPNOTSUPP
	selftests: skip mincore.check_file_mmap when fs lacks needed support
	ax25: improve the incomplete fix to avoid UAF and NPD bugs
	vfs: make freeze_super abort when sync_filesystem returns error
	quota: make dquot_quota_sync return errors from ->sync_fs
	scsi: pm8001: Fix use-after-free for aborted TMF sas_task
	scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
	nvme: fix a possible use-after-free in controller reset during load
	nvme-tcp: fix possible use-after-free in transport error_recovery work
	nvme-rdma: fix possible use-after-free in transport error_recovery work
	drm/amdgpu: fix logic inversion in check
	x86/Xen: streamline (and fix) PV CPU enumeration
	Revert "module, async: async_synchronize_full() on module init iff async is used"
	gcc-plugins/stackleak: Use noinstr in favor of notrace
	random: wake up /dev/random writers after zap
	kbuild: lto: merge module sections
	kbuild: lto: Merge module sections if and only if CONFIG_LTO_CLANG is enabled
	iwlwifi: fix use-after-free
	drm/radeon: Fix backlight control on iMac 12,1
	drm/i915/opregion: check port number bounds for SWSCI display power state
	vsock: remove vsock from connected table when connect is interrupted by a signal
	drm/i915/gvt: Make DRM_I915_GVT depend on X86
	iwlwifi: pcie: fix locking when "HW not ready"
	iwlwifi: pcie: gen2: fix locking when "HW not ready"
	selftests: netfilter: fix exit value for nft_concat_range
	netfilter: nft_synproxy: unregister hooks on init error path
	ipv6: per-netns exclusive flowlabel checks
	net: dsa: lan9303: fix reset on probe
	net: dsa: lantiq_gswip: fix use after free in gswip_remove()
	net: ieee802154: ca8210: Fix lifs/sifs periods
	ping: fix the dif and sdif check in ping_lookup
	bonding: force carrier update when releasing slave
	drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit
	net_sched: add __rcu annotation to netdev->qdisc
	bonding: fix data-races around agg_select_timer
	libsubcmd: Fix use-after-free for realloc(..., 0)
	dpaa2-eth: Initialize mutex used in one step timestamping path
	perf bpf: Defer freeing string after possible strlen() on it
	selftests/exec: Add non-regular to TEST_GEN_PROGS
	ALSA: hda/realtek: Add quirk for Legion Y9000X 2019
	ALSA: hda/realtek: Fix deadlock by COEF mutex
	ALSA: hda: Fix regression on forced probe mask option
	ALSA: hda: Fix missing codec probe on Shenker Dock 15
	ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw()
	ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range()
	powerpc/lib/sstep: fix 'ptesync' build error
	mtd: rawnand: gpmi: don't leak PM reference in error path
	KVM: SVM: Never reject emulation due to SMAP errata for !SEV guests
	ASoC: tas2770: Insert post reset delay
	block/wbt: fix negative inflight counter when remove scsi device
	NFS: LOOKUP_DIRECTORY is also ok with symlinks
	NFS: Do not report writeback errors in nfs_getattr()
	tty: n_tty: do not look ahead for EOL character past the end of the buffer
	mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe()
	mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status
	Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
	KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id()
	KVM: x86/pmu: Don't truncate the PerfEvtSeln MSR when creating a perf event
	KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW
	NFS: Don't set NFS_INO_INVALID_XATTR if there is no xattr cache
	ARM: OMAP2+: hwmod: Add of_node_put() before break
	ARM: OMAP2+: adjust the location of put_device() call in omapdss_init_of
	phy: usb: Leave some clocks running during suspend
	irqchip/sifive-plic: Add missing thead,c900-plic match string
	netfilter: conntrack: don't refresh sctp entries in closed state
	arm64: dts: meson-gx: add ATF BL32 reserved-memory region
	arm64: dts: meson-g12: add ATF BL32 reserved-memory region
	arm64: dts: meson-g12: drop BL32 region from SEI510/SEI610
	pidfd: fix test failure due to stack overflow on some arches
	selftests: fixup build warnings in pidfd / clone3 tests
	kconfig: let 'shell' return enough output for deep path names
	lib/iov_iter: initialize "flags" in new pipe_buffer
	ata: libata-core: Disable TRIM on M88V29
	soc: aspeed: lpc-ctrl: Block error printing on probe defer cases
	xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create
	drm/rockchip: dw_hdmi: Do not leave clock enabled in error case
	tracing: Fix tp_printk option related with tp_printk_stop_on_boot
	net: usb: qmi_wwan: Add support for Dell DW5829e
	net: macb: Align the dma and coherent dma masks
	kconfig: fix failing to generate auto.conf
	scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop
	EDAC: Fix calculation of returned address and next offset in edac_align_ptr()
	net: sched: limit TC_ACT_REPEAT loops
	dmaengine: sh: rcar-dmac: Check for error num after setting mask
	dmaengine: stm32-dmamux: Fix PM disable depth imbalance in stm32_dmamux_probe
	dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size
	i2c: qcom-cci: don't delete an unregistered adapter
	i2c: qcom-cci: don't put a device tree node before i2c_add_adapter()
	copy_process(): Move fd_install() out of sighand->siglock critical section
	i2c: brcmstb: fix support for DSL and CM variants
	lockdep: Correct lock_classes index mapping
	Linux 5.10.102

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: Ief12c0d77b23f9796b81a8fc3b79ac6589e81dc9
 2022-02-23 12:56:37 +01:00
Waiman Long
9fee985f9a copy_process(): Move fd_install() out of sighand->siglock critical section 
commit ddc204b517e60ae64db34f9832dc41dafa77c751 upstream.

I was made aware of the following lockdep splat:

[ 2516.308763] =====================================================
[ 2516.309085] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected
[ 2516.309433] 5.14.0-51.el9.aarch64+debug #1 Not tainted
[ 2516.309703] -----------------------------------------------------
[ 2516.310149] stress-ng/153663 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 2516.310512] ffff0000e422b198 (&newf->file_lock){+.+.}-{2:2}, at: fd_install+0x368/0x4f0
[ 2516.310944]
               and this task is already holding:
[ 2516.311248] ffff0000c08140d8 (&sighand->siglock){-.-.}-{2:2}, at: copy_process+0x1e2c/0x3e80
[ 2516.311804] which would create a new lock dependency:
[ 2516.312066]  (&sighand->siglock){-.-.}-{2:2} -> (&newf->file_lock){+.+.}-{2:2}
[ 2516.312446]
               but this new dependency connects a HARDIRQ-irq-safe lock:
[ 2516.312983]  (&sighand->siglock){-.-.}-{2:2}
   :
[ 2516.330700]  Possible interrupt unsafe locking scenario:

[ 2516.331075]        CPU0                    CPU1
[ 2516.331328]        ----                    ----
[ 2516.331580]   lock(&newf->file_lock);
[ 2516.331790]                                local_irq_disable();
[ 2516.332231]                                lock(&sighand->siglock);
[ 2516.332579]                                lock(&newf->file_lock);
[ 2516.332922]   <Interrupt>
[ 2516.333069]     lock(&sighand->siglock);
[ 2516.333291]
                *** DEADLOCK ***
[ 2516.389845]
               stack backtrace:
[ 2516.390101] CPU: 3 PID: 153663 Comm: stress-ng Kdump: loaded Not tainted 5.14.0-51.el9.aarch64+debug #1
[ 2516.390756] Hardware name: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015
[ 2516.391155] Call trace:
[ 2516.391302]  dump_backtrace+0x0/0x3e0
[ 2516.391518]  show_stack+0x24/0x30
[ 2516.391717]  dump_stack_lvl+0x9c/0xd8
[ 2516.391938]  dump_stack+0x1c/0x38
[ 2516.392247]  print_bad_irq_dependency+0x620/0x710
[ 2516.392525]  check_irq_usage+0x4fc/0x86c
[ 2516.392756]  check_prev_add+0x180/0x1d90
[ 2516.392988]  validate_chain+0x8e0/0xee0
[ 2516.393215]  __lock_acquire+0x97c/0x1e40
[ 2516.393449]  lock_acquire.part.0+0x240/0x570
[ 2516.393814]  lock_acquire+0x90/0xb4
[ 2516.394021]  _raw_spin_lock+0xe8/0x154
[ 2516.394244]  fd_install+0x368/0x4f0
[ 2516.394451]  copy_process+0x1f5c/0x3e80
[ 2516.394678]  kernel_clone+0x134/0x660
[ 2516.394895]  __do_sys_clone3+0x130/0x1f4
[ 2516.395128]  __arm64_sys_clone3+0x5c/0x7c
[ 2516.395478]  invoke_syscall.constprop.0+0x78/0x1f0
[ 2516.395762]  el0_svc_common.constprop.0+0x22c/0x2c4
[ 2516.396050]  do_el0_svc+0xb0/0x10c
[ 2516.396252]  el0_svc+0x24/0x34
[ 2516.396436]  el0t_64_sync_handler+0xa4/0x12c
[ 2516.396688]  el0t_64_sync+0x198/0x19c
[ 2517.491197] NET: Registered PF_ATMPVC protocol family
[ 2517.491524] NET: Registered PF_ATMSVC protocol family
[ 2591.991877] sched: RT throttling activated

One way to solve this problem is to move the fd_install() call out of
the sighand->siglock critical section.

Before commit 6fd2fe494b ("copy_process(): don't use ksys_close()
on cleanups"), the pidfd installation was done without holding both
the task_list lock and the sighand->siglock. Obviously, holding these
two locks are not really needed to protect the fd_install() call.
So move the fd_install() call down to after the releases of both locks.

Link: https://lore.kernel.org/r/20220208163912.1084752-1-longman@redhat.com
Fixes: 6fd2fe494b ("copy_process(): don't use ksys_close() on cleanups")
Reviewed-by: "Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: Waiman Long <longman@redhat.com>
Signed-off-by: Christian Brauner <brauner@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
 2022-02-23 12:01:08 +01:00
Greg Kroah-Hartman
3b4ca92614 Merge tag 'android12-5.10.81_r00' into android12-5.10 
This is the merge of the upstream LTS release of 5.10.81 into the
android12-5.10 branch.

New symbols were added to be tracked, which are the only ABI changes:

Leaf changes summary: 209 artifacts changed
Changed leaf types summary: 0 leaf type changed
Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 192 Added functions
Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 17 Added variables

192 Added functions:

  [A] 'function void __bforget(buffer_head*)'
  [A] 'function ssize_t __blockdev_direct_IO(kiocb*, inode*, block_device*, iov_iter*, get_block_t*, dio_iodone_t*, dio_submit_t*, int)'
  [A] 'function buffer_head* __bread_gfp(block_device*, sector_t, unsigned int, gfp_t)'
  [A] 'function void __breadahead(block_device*, sector_t, unsigned int)'
  [A] 'function void __brelse(buffer_head*)'
  [A] 'function void __cancel_dirty_page(page*)'
  [A] 'function void __cleancache_invalidate_inode(address_space*)'
  [A] 'function void __filemap_set_wb_err(address_space*, int)'
  [A] 'function void __insert_inode_hash(inode*, unsigned long int)'
  [A] 'function void __mark_inode_dirty(inode*, int)'
  [A] 'function void __pagevec_release(pagevec*)'
  [A] 'function void __remove_inode_hash(inode*)'
  [A] 'function int __set_page_dirty_buffers(page*)'
  [A] 'function int __set_page_dirty_nobuffers(page*)'
  [A] 'function int __test_set_page_writeback(page*, bool)'
  [A] 'function int __traceiter_android_rvh_binder_transaction(void*, binder_proc*, binder_proc*, binder_thread*, binder_transaction_data*)'
  [A] 'function int __traceiter_android_rvh_do_sched_yield(void*, rq*)'
  [A] 'function int __traceiter_android_vh_binder_del_ref(void*, task_struct*, uint32_t)'
  [A] 'function int __traceiter_android_vh_binder_free_proc(void*, binder_proc*)'
  [A] 'function int __traceiter_android_vh_binder_has_work_ilocked(void*, binder_thread*, bool, int*)'
  [A] 'function int __traceiter_android_vh_binder_looper_state_registered(void*, binder_thread*, binder_proc*)'
  [A] 'function int __traceiter_android_vh_binder_new_ref(void*, task_struct*, uint32_t, int)'
  [A] 'function int __traceiter_android_vh_binder_proc_transaction(void*, task_struct*, task_struct*, task_struct*, int, unsigned int, bool)'
  [A] 'function int __traceiter_android_vh_binder_proc_transaction_end(void*, task_struct*, task_struct*, task_struct*, unsigned int, bool, bool)'
  [A] 'function int __traceiter_android_vh_binder_read_done(void*, binder_proc*, binder_thread*)'
  [A] 'function int __traceiter_android_vh_binder_thread_read(void*, list_head**, binder_proc*, binder_thread*)'
  [A] 'function int __traceiter_android_vh_binder_thread_release(void*, binder_proc*, binder_thread*)'
  [A] 'function int __traceiter_android_vh_futex_sleep_start(void*, task_struct*)'
  [A] 'function int __traceiter_block_bio_remap(void*, request_queue*, bio*, dev_t, sector_t)'
  [A] 'function int add_to_page_cache_locked(page*, address_space*, unsigned long int, gfp_t)'
  [A] 'function bio* bio_split(bio*, int, gfp_t, bio_set*)'
  [A] 'function wait_queue_head* bit_waitqueue(void*, int)'
  [A] 'function blk_plug_cb* blk_check_plugged(blk_plug_cb_fn, void*, int)'
  [A] 'function void blk_queue_max_write_same_sectors(request_queue*, unsigned int)'
  [A] 'function int blkdev_issue_discard(block_device*, sector_t, sector_t, gfp_t, unsigned long int)'
  [A] 'function void block_invalidatepage(page*, unsigned int, unsigned int)'
  [A] 'function int block_is_partially_uptodate(page*, unsigned long int, unsigned long int)'
  [A] 'function int buffer_migrate_page(address_space*, page*, page*, migrate_mode)'
  [A] 'function bool capable_wrt_inode_uidgid(const inode*, int)'
  [A] 'function void clean_bdev_aliases(block_device*, sector_t, sector_t)'
  [A] 'function void clear_inode(inode*)'
  [A] 'function int clear_page_dirty_for_io(page*)'
  [A] 'function int clk_set_duty_cycle(clk*, unsigned int, unsigned int)'
  [A] 'function int clocksource_mmio_init(void*, const char*, unsigned long int, int, unsigned int, typedef u64 (clocksource*)*)'
  [A] 'function u64 clocksource_mmio_readl_up(clocksource*)'
  [A] 'function void create_empty_buffers(page*, unsigned long int, unsigned long int)'
  [A] 'function int current_umask()'
  [A] 'function dentry* d_add_ci(dentry*, inode*, qstr*)'
  [A] 'function void d_instantiate(dentry*, inode*)'
  [A] 'function dentry* d_obtain_alias(inode*)'
  [A] 'function dentry* d_splice_alias(inode*, dentry*)'
  [A] 'function void delete_from_page_cache(page*)'
  [A] 'function i3c_device* dev_to_i3cdev(device*)'
  [A] 'function spi_mem_dirmap_desc* devm_spi_mem_dirmap_create(device*, spi_mem*, const spi_mem_dirmap_info*)'
  [A] 'function void disk_stack_limits(gendisk*, block_device*, sector_t)'
  [A] 'function void drop_nlink(inode*)'
  [A] 'function void end_buffer_write_sync(buffer_head*, int)'
  [A] 'function void end_page_writeback(page*)'
  [A] 'function errseq_t errseq_set(errseq_t*, int)'
  [A] 'function int fb_get_options(const char*, char**)'
  [A] 'function int fiemap_fill_next_extent(fiemap_extent_info*, u64, u64, u64, u32)'
  [A] 'function int fiemap_prep(inode*, fiemap_extent_info*, u64, u64*, u32)'
  [A] 'function int file_remove_privs(file*)'
  [A] 'function int file_update_time(file*)'
  [A] 'function int file_write_and_wait_range(file*, loff_t, loff_t)'
  [A] 'function vm_fault_t filemap_fault(vm_fault*)'
  [A] 'function int filemap_fdatawait_range(address_space*, loff_t, loff_t)'
  [A] 'function int filemap_fdatawrite(address_space*)'
  [A] 'function int filemap_flush(address_space*)'
  [A] 'function int filemap_write_and_wait_range(address_space*, loff_t, loff_t)'
  [A] 'function file* filp_open(const char*, int, umode_t)'
  [A] 'function void flush_delayed_fput()'
  [A] 'function int freq_qos_remove_notifier(freq_constraints*, freq_qos_req_type, notifier_block*)'
  [A] 'function int generic_error_remove_page(address_space*, page*)'
  [A] 'function ssize_t generic_file_direct_write(kiocb*, iov_iter*)'
  [A] 'function int generic_file_mmap(file*, vm_area_struct*)'
  [A] 'function int generic_file_open(inode*, file*)'
  [A] 'function ssize_t generic_file_splice_read(file*, loff_t*, pipe_inode_info*, size_t, unsigned int)'
  [A] 'function void generic_fillattr(inode*, kstat*)'
  [A] 'function ssize_t generic_read_dir(file*, char*, size_t, loff_t*)'
  [A] 'function int genphy_restart_aneg(phy_device*)'
  [A] 'function page* grab_cache_page_write_begin(address_space*, unsigned long int, unsigned int)'
  [A] 'function const i3c_device_id* i3c_device_match_id(i3c_device*, const i3c_device_id*)'
  [A] 'function inode* iget5_locked(super_block*, unsigned long int, int (inode*, void*)*, int (inode*, void*)*, void*)'
  [A] 'function inode* igrab(inode*)'
  [A] 'function void ihold(inode*)'
  [A] 'function int iio_device_claim_direct_mode(iio_dev*)'
  [A] 'function void iio_device_release_direct_mode(iio_dev*)'
  [A] 'function int iio_push_event(iio_dev*, u64, s64)'
  [A] 'function int iio_read_mount_matrix(device*, const char*, iio_mount_matrix*)'
  [A] 'function ssize_t iio_show_mount_matrix(iio_dev*, uintptr_t, const iio_chan_spec*, char*)'
  [A] 'function int iio_write_channel_raw(iio_channel*, int)'
  [A] 'function inode* ilookup5(super_block*, unsigned long int, int (inode*, void*)*, void*)'
  [A] 'function int in_group_p(kgid_t)'
  [A] 'function void inc_nlink(inode*)'
  [A] 'function void init_special_inode(inode*, umode_t, dev_t)'
  [A] 'function void inode_dio_wait(inode*)'
  [A] 'function void inode_init_once(inode*)'
  [A] 'function void inode_init_owner(inode*, const inode*, umode_t)'
  [A] 'function int inode_newsize_ok(const inode*, loff_t)'
  [A] 'function void inode_set_flags(inode*, unsigned int, unsigned int)'
  [A] 'function void io_schedule()'
  [A] 'function void iov_iter_advance(iov_iter*, size_t)'
  [A] 'function unsigned long int iov_iter_alignment(const iov_iter*)'
  [A] 'function size_t iov_iter_copy_from_user_atomic(page*, iov_iter*, unsigned long int, size_t)'
  [A] 'function int iov_iter_fault_in_readable(iov_iter*, size_t)'
  [A] 'function ssize_t iov_iter_get_pages(iov_iter*, page**, size_t, unsigned int, size_t*)'
  [A] 'function size_t iov_iter_single_seg_count(const iov_iter*)'
  [A] 'function bool is_bad_inode(inode*)'
  [A] 'function ssize_t iter_file_splice_write(pipe_inode_info*, file*, loff_t*, size_t, unsigned int)'
  [A] 'function ino_t iunique(super_block*, ino_t)'
  [A] 'function int kernel_sock_shutdown(socket*, sock_shutdown_cmd)'
  [A] 'function void kill_block_super(super_block*)'
  [A] 'function int kill_pid(pid*, int, int)'
  [A] 'function bool kthread_freezable_should_stop(bool*)'
  [A] 'function void ll_rw_block(int, int, int, buffer_head**)'
  [A] 'function nls_table* load_nls(char*)'
  [A] 'function nls_table* load_nls_default()'
  [A] 'function void lru_cache_add(page*)'
  [A] 'function void make_bad_inode(inode*)'
  [A] 'function void mark_buffer_async_write(buffer_head*)'
  [A] 'function void mark_buffer_dirty(buffer_head*)'
  [A] 'function void mark_buffer_write_io_error(buffer_head*)'
  [A] 'function void mark_page_accessed(page*)'
  [A] 'function void mnt_drop_write_file(file*)'
  [A] 'function int mnt_want_write_file(file*)'
  [A] 'function dentry* mount_bdev(file_system_type*, int, const char*, void*, int (super_block*, void*, int)*)'
  [A] 'function void mpage_readahead(readahead_control*, get_block_t*)'
  [A] 'function int mpage_readpage(page*, get_block_t*)'
  [A] 'function int notify_change(dentry*, iattr*, inode**)'
  [A] 'function unsigned long int page_cache_next_miss(address_space*, unsigned long int, unsigned long int)'
  [A] 'function unsigned long int page_cache_prev_miss(address_space*, unsigned long int, unsigned long int)'
  [A] 'function bool page_mapped(page*)'
  [A] 'function int page_mkclean(page*)'
  [A] 'function void page_zero_new_buffers(page*, unsigned int, unsigned int)'
  [A] 'function page* pagecache_get_page(address_space*, unsigned long int, int, gfp_t)'
  [A] 'function unsigned int pagevec_lookup_range(pagevec*, address_space*, unsigned long int*, unsigned long int)'
  [A] 'function unsigned int pagevec_lookup_range_tag(pagevec*, address_space*, unsigned long int*, unsigned long int, xa_mark_t)'
  [A] 'function int phy_modify_mmd(phy_device*, int, u32, u16, u16)'
  [A] 'function void put_pages_list(list_head*)'
  [A] 'function gfp_t readahead_gfp_mask(address_space*)'
  [A] 'function int redirty_page_for_writepage(writeback_control*, page*)'
  [A] 'function int rproc_set_firmware(rproc*, const char*)'
  [A] 'function int sb_min_blocksize(super_block*, int)'
  [A] 'function int sb_set_blocksize(super_block*, int)'
  [A] 'function void sched_clock_register(typedef u64 ()*, int, unsigned long int)'
  [A] 'function int security_inode_init_security(inode*, inode*, const qstr*, const initxattrs, void*)'
  [A] 'function void set_nlink(inode*, unsigned int)'
  [A] 'function int setattr_prepare(dentry*, iattr*)'
  [A] 'function int snd_interval_ranges(snd_interval*, unsigned int, const snd_interval*, unsigned int)'
  [A] 'function int snd_pcm_hw_constraint_ratnums(snd_pcm_runtime*, unsigned int, snd_pcm_hw_param_t, const snd_pcm_hw_constraint_ratnums*)'
  [A] 'function int snd_soc_limit_volume(snd_soc_card*, const char*, int)'
  [A] 'function int sock_recvmsg(socket*, msghdr*, int)'
  [A] 'function socket* sockfd_lookup(int, int*)'
  [A] 'function const spi_device_id* spi_get_device_id(const spi_device*)'
  [A] 'function int spi_mem_adjust_op_size(spi_mem*, spi_mem_op*)'
  [A] 'function bool spi_mem_default_supports_op(spi_mem*, const spi_mem_op*)'
  [A] 'function ssize_t spi_mem_dirmap_read(spi_mem_dirmap_desc*, u64, size_t, void*)'
  [A] 'function ssize_t spi_mem_dirmap_write(spi_mem_dirmap_desc*, u64, size_t, void*)'
  [A] 'function int spi_mem_driver_register_with_owner(spi_mem_driver*, module*)'
  [A] 'function void spi_mem_driver_unregister(spi_mem_driver*)'
  [A] 'function bool spi_mem_dtr_supports_op(spi_mem*, const spi_mem_op*)'
  [A] 'function int spi_mem_exec_op(spi_mem*, const spi_mem_op*)'
  [A] 'function const char* spi_mem_get_name(spi_mem*)'
  [A] 'function bool spi_mem_supports_op(spi_mem*, const spi_mem_op*)'
  [A] 'function blk_qc_t submit_bio_noacct(bio*)'
  [A] 'function int sync_dirty_buffer(buffer_head*)'
  [A] 'function int sync_filesystem(super_block*)'
  [A] 'function int sync_inode_metadata(inode*, int)'
  [A] 'function void tag_pages_for_writeback(address_space*, unsigned long int, unsigned long int)'
  [A] 'function timespec64 timestamp_truncate(timespec64, inode*)'
  [A] 'function void touch_atime(const path*)'
  [A] 'function void touchscreen_parse_properties(input_dev*, bool, touchscreen_properties*)'
  [A] 'function void touchscreen_report_pos(input_dev*, const touchscreen_properties*, unsigned int, unsigned int, bool)'
  [A] 'function int trace_set_clr_event(const char*, const char*, int)'
  [A] 'function void truncate_inode_pages(address_space*, loff_t)'
  [A] 'function void truncate_inode_pages_final(address_space*)'
  [A] 'function void truncate_pagecache(inode*, loff_t)'
  [A] 'function void truncate_setsize(inode*, loff_t)'
  [A] 'function int try_to_release_page(page*, gfp_t)'
  [A] 'function void try_to_writeback_inodes_sb(super_block*, wb_reason)'
  [A] 'function void unload_nls(nls_table*)'
  [A] 'function void unlock_buffer(buffer_head*)'
  [A] 'function void unlock_new_inode(inode*)'
  [A] 'function void usbnet_cdc_unbind(usbnet*, usb_interface*)'
  [A] 'function int usbnet_generic_cdc_bind(usbnet*, usb_interface*)'
  [A] 'function int vsscanf(const char*, const char*, va_list)'
  [A] 'function void wait_on_page_bit(page*, int)'
  [A] 'function int wake_bit_function(wait_queue_entry*, unsigned int, int, void*)'
  [A] 'function void wq_worker_comm(char*, size_t, task_struct*)'
  [A] 'function int write_inode_now(inode*, int)'
  [A] 'function int write_one_page(page*)'

17 Added variables:

  [A] 'tracepoint __tracepoint_android_rvh_binder_transaction'
  [A] 'tracepoint __tracepoint_android_rvh_do_ptrauth_fault'
  [A] 'tracepoint __tracepoint_android_rvh_do_sched_yield'
  [A] 'tracepoint __tracepoint_android_vh_binder_del_ref'
  [A] 'tracepoint __tracepoint_android_vh_binder_free_proc'
  [A] 'tracepoint __tracepoint_android_vh_binder_has_work_ilocked'
  [A] 'tracepoint __tracepoint_android_vh_binder_looper_state_registered'
  [A] 'tracepoint __tracepoint_android_vh_binder_new_ref'
  [A] 'tracepoint __tracepoint_android_vh_binder_proc_transaction'
  [A] 'tracepoint __tracepoint_android_vh_binder_proc_transaction_end'
  [A] 'tracepoint __tracepoint_android_vh_binder_read_done'
  [A] 'tracepoint __tracepoint_android_vh_binder_thread_read'
  [A] 'tracepoint __tracepoint_android_vh_binder_thread_release'
  [A] 'tracepoint __tracepoint_android_vh_futex_sleep_start'
  [A] 'tracepoint __tracepoint_android_vh_subpage_dma_contig_alloc'
  [A] 'tracepoint __tracepoint_block_bio_remap'
  [A] 'device platform_bus'

This merge contains the following new commits:

4b64435629 ANDROID: GKI: disable CONFIG_FORTIFY_SOURCE
94097f9434 Merge 5.10.81 into android12-5.10-lts
99957dcea4 Linux 5.10.81
0685efd984 selftests/x86/iopl: Adjust to the faked iopl CLI/STI usage
6a315471cb thermal: Fix NULL pointer dereferences in of_thermal_ functions
bd40513d0b perf/core: Avoid put_page() when GUP fails
df58fb431a scripts/lld-version.sh: Rewrite based on upstream ld-version.sh
be3f603583 erofs: fix unsafe pagevec reuse of hooked pclusters
6c1ad56b2d erofs: remove the occupied parameter from z_erofs_pagevec_enqueue()
5bf5f46483 PCI: Add MSI masking quirk for Nvidia ION AHCI
f28c620e1a PCI/MSI: Deal with devices lying about their MSI mask capability
9b61500ee5 PCI/MSI: Destroy sysfs before freeing entries
c49bfdfe53 parisc/entry: fix trace test in syscall exit path
b31bac0619 x86/iopl: Fake iopl(3) CLI/STI usage
a0958a5354 net: stmmac: dwmac-rk: fix unbalanced pm_runtime_enable warnings
80407c6ad9 net: stmmac: fix issue where clk is being unprepared twice
ac4bb9951c net: stmmac: fix system hang if change mac address after interface ifdown
bcf3752243 net: stmmac: fix missing unlock on error in stmmac_suspend()
483ed89522 net: stmmac: platform: fix build error with !CONFIG_PM_SLEEP
3afe11be64 net: stmmac: add clocks management for gmac driver
f27060e28e bootconfig: init: Fix memblock leak in xbc_make_cmdline()
04e46514fe loop: Use blk_validate_block_size() to validate block size
79ff56c613 block: Add a helper to validate the block size
eaafc59005 fortify: Explicitly disable Clang support
971945b722 Revert "tcp: switch orphan_count to bare per-cpu counters"
e101be336e Revert "net: sched: update default qdisc visibility after Tx queue cnt changes"
2d94ebb760 Revert "serial: core: Fix initializing and restoring termios speed"
c553d9a246 Merge 5.10.80 into android12-5.10-lts
706ebf15a1 Merge branch 'android12-5.10' into `android12-5.10-lts`
f884bb85b8 Linux 5.10.80
1e49a79bc3 soc/tegra: pmc: Fix imbalanced clock disabling in error code path
45490bfa1e x86/sev: Make the #VC exception stacks part of the default stacks storage
fc25889a66 x86/sev: Add an x86 version of cc_platform_has()
74ba917cfd arch/cc: Introduce a function to check for confidential computing features
5be42b203f selftests/bpf: Fix also no-alu32 strobemeta selftest
1e7340950d mmc: moxart: Fix null pointer dereference on pointer host
188bf40391 ath10k: fix invalid dma_addr_t token assignment
d41f4d4dd7 SUNRPC: Partial revert of commit 6f9f17287e
c7a440cd30 PCI: aardvark: Fix PCIe Max Payload Size setting
f967d120a5 PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
f3396f6d83 drm/sun4i: Fix macros in sun8i_csc.h
1023355234 powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n
77d543e687 powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
9dcdadd6cc mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines
51e34fcf72 mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines
e1de04df8e mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines
b4e2e9fbd1 mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines
963db3ccc1 mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines
13566bc111 mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines
9b366f5221 mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines
cbc55cf4a3 mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines
1f420818df s390/cio: make ccw_device_dma_* more robust
c9ca9669de s390/ap: Fix hanging ioctl caused by orphaned replies
57de1fbecf s390/tape: fix timer initialization in tape_std_assign()
1174298a5b s390/cio: check the subchannel validity for dev_busid
7d0341b37d video: backlight: Drop maximum brightness override for brightness zero
332306b1e7 mfd: dln2: Add cell for initializing DLN2 ADC
1d45798736 mm, oom: do not trigger out_of_memory from the #PF
ac7f6befc3 mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
1ada86999d powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
7fcf86565b powerpc/security: Add a helper to query stf_barrier type
951fb7bf38 powerpc/bpf: Validate branch ranges
51cf71d5cb powerpc/lib: Add helper to check if offset is within conditional branch range
74293225f5 memcg: prohibit unconditional exceeding the limit of dying tasks
32246cefb9 9p/net: fix missing error check in p9_check_errors
a8cdf34ff8 net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
0bf5c6a1e4 f2fs: should use GFP_NOFS for directory inodes
7930892cbd irqchip/sifive-plic: Fixup EOI failed when masked
f67f6eb717 posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
1372eb1871 x86/mce: Add errata workaround for Skylake SKX37
1ee5bc2ba8 MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
fc42bbb782 parisc: Fix backtrace to always include init funtion names
241c74cc65 ARM: 9156/1: drop cc-option fallbacks for architecture selection
03f2578153 ARM: 9155/1: fix early early_iounmap()
ee79560cb7 selftests/net: udpgso_bench_rx: fix port argument
8b215edb7a cxgb4: fix eeprom len when diagnostics not implemented
93bc3ef607 net/smc: fix sk_refcnt underflow on linkdown and fallback
7e03b797be vsock: prevent unnecessary refcnt inc for nonblocking connect
ad3d219e84 net: stmmac: allow a tc-taprio base-time of zero
b30459c0ca net: hns3: allow configure ETS bandwidth of all TCs
ee11f16fee net: hns3: fix kernel crash when unload VF while it is being reset
79aa8706b4 net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
b5703462a4 seq_file: fix passing wrong private data
4af0cd17e7 gve: Fix off by one in gve_tx_timeout()
c842a4c4ae bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
8b5c98a67c bpf, sockmap: Remove unhash handler for BPF sockmap usage
0fe81d7a20 arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
727c812433 nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
9f0e683e1b llc: fix out-of-bound array index in llc_sk_dev_hash()
b833274ae6 perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
7091fcc75f zram: off by one in read_block_state()
64bde0c2db mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
a3c205c017 can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for mcp251xfd_chip_rx_int_enable()
300d874748 mfd: core: Add missing of_node_put for loop iteration
6439b91fef bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
acb01e962a net: phy: fix duplex out of sync problem while changing settings
090e17075f drm/nouveau/svm: Fix refcount leak bug and missing check against null bug
ee8a3ae48a ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
d83832d4a8 ice: Fix not stopping Tx queues for VFs
354ae5ca6c ice: Fix replacing VF hardware MAC to existing MAC filter
e04a7a84bb net: vlan: fix a UAF in vlan_dev_real_dev()
3fe164e719 openrisc: fix SMP tlb flush NULL pointer dereference
628773a759 ethtool: fix ethtool msg len calculation for pause stats
e78c267eb7 net: davinci_emac: Fix interrupt pacing disable
111f77594d xen-pciback: Fix return in pm_ctrl_init()
de9721ee8a i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
8c3e204fb6 NFSv4: Fix a regression in nfs_set_open_stateid_locked()
0afb3bc534 scsi: qla2xxx: Turn off target reset during issue_lip
09595fd2ce scsi: qla2xxx: Fix gnl list corruption
cbe31149e5 scsi: qla2xxx: Relogin during fabric disturbance
bc3f207ed9 scsi: qla2xxx: Changes to support FCP2 Target
ba5eb0e443 ar7: fix kernel builds for compiler test
ef9f7ab9ba watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
aaa64ee14a m68k: set a default value for MEMORY_RESERVE
a4cbf00e5a signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
b04c17acf4 dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
bba31f3b1f netfilter: nfnetlink_queue: fix OOB when mac header was cleared
41968262bb soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read
6caab6c96b auxdisplay: ht16k33: Fix frame buffer device blanking
178522aa75 auxdisplay: ht16k33: Connect backlight to fbdev
a1d6a60ee0 auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
0e1709b2a0 Fix user namespace leak
90e7415221 NFS: Fix an Oops in pnfs_mark_request_commit()
10f2108717 NFS: Fix up commit deadlocks
91e43a8500 dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
038dfd67d3 rtc: rv3032: fix error handling in rv3032_clkout_set_rate()
5061e10234 remoteproc: Fix a memory leak in an error handling path in 'rproc_handle_vdev()'
36104e1f71 mtd: core: don't remove debugfs directory if device is in use
0b73c025bf PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation
d2ff7a8b07 mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
c4eb684990 fs: orangefs: fix error return code of orangefs_revalidate_lookup()
3e7b08ebf4 NFS: Fix deadlocks in nfs_scan_commit_list()
1494389185 opp: Fix return in _opp_add_static_v2()
bea3213f19 PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
ec6dba3ffe PCI: aardvark: Don't spam about PIO Response Status
2e548581fe drm/plane-helper: fix uninitialized variable reference
e94c59b64e pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
8ac076ce71 NFS: Fix dentry verifier races
9d438dbf73 i2c: mediatek: fixing the incorrect register offset
f3492c4a92 nfsd: don't alloc under spinlock in rpc_parse_scope_id
602ab1fd40 rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
851b622e7b apparmor: fix error check
9c9c33ea4c power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
dbdf0f2207 mips: cm: Convert to bitfield API to fix out-of-bounds access
c8447cb14a virtio_ring: check desc == NULL when using indirect with packed
80e6643393 ASoC: cs42l42: Correct configuring of switch inversion from ts-inv
cb0fdd9aae ASoC: cs42l42: Use device_property API instead of of_property
ef9d007a91 ASoC: cs42l42: Disable regulators if probe fails
c0faad6e9d powerpc/44x/fsp2: add missing of_node_put
4310970d0b HID: u2fzero: properly handle timeouts in usb_submit_urb
e2f0bff411 HID: u2fzero: clarify error check and length calculations
26be378079 clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL
f2886010a8 serial: xilinx_uartps: Fix race condition causing stuck TX
515778f9d8 phy: qcom-snps: Correct the FSEL_MASK
fd056574a7 phy: ti: gmii-sel: check of_get_address() for failure
0a46740a0a phy: qcom-qusb2: Fix a memory leak on probe
ec40a28495 pinctrl: equilibrium: Fix function addition in multiple groups
a0467ca4d2 soc: qcom: apr: Add of_node_put() before return
b41c528b14 firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()
31e7a836e2 usb: dwc2: drd: reset current session before setting the new one
fc86da757d usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled
6774a42932 usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
068dfa570d serial: imx: fix detach/attach of serial console
d293bd40fb scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer
75df593941 scsi: ufs: Refactor ufshcd_setup_clocks() to remove skip_ref_clk
948d8f2f2f iio: adis: do not disabe IRQs in 'adis_init()'
c8e5edca68 usb: typec: STUSB160X should select REGMAP_I2C
503d6e5fb8 soc: qcom: rpmhpd: Make power_on actually enable the domain
81e37cf40d soc: qcom: rpmhpd: Provide some missing struct member descriptions
b288b841c1 ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
1812deb08f ASoC: cs42l42: Correct some register default values
d34982c087 ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
602fefd456 ARM: dts: stm32: fix SAI sub nodes register range
3fb75227bd ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz
78238479b9 pinctrl: renesas: checker: Fix off-by-one bug in drive register check
51bcffb395 staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
0bb8359f9c staging: most: dim2: do not double-register the same device
8e1feecc04 usb: musb: select GENERIC_PHY instead of depending on it
0058f7fbea RDMA/mlx4: Return missed an error if device doesn't support steering
bce61de564 scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
12c4673204 power: supply: max17040: fix null-ptr-deref in max17040_probe()
c553d67301 power: supply: rt5033_battery: Change voltage values to µV
d8da6328ec usb: gadget: hid: fix error code in do_config()
92a80e1ca2 serial: 8250_dw: Drop wrong use of ACPI_PTR()
cfbf58ac8e powerpc: fix unbalanced node refcount in check_kvm_guest()
54965d92a4 powerpc: Fix is_kvm_guest() / kvm_para_available()
e01a4d7560 powerpc: Reintroduce is_kvm_guest() as a fast-path check
113207234a powerpc: Rename is_kvm_guest() to check_kvm_guest()
61c5d9fa56 powerpc: Refactor is_kvm_guest() declaration to new header
67074c63cd video: fbdev: chipsfb: use memset_io() instead of memset()
fb24243e6d clk: at91: check pmc node status before registering syscore ops
20cc0fa1d0 memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
d3833d3c56 soc/tegra: Fix an error handling path in tegra_powergate_power_up()
9a22442009 ASoC: SOF: topology: do not power down primary core during topology removal
8b6124d924 arm: dts: omap3-gta04a4: accelerometer irq fix
e1959450b7 driver core: Fix possible memory leak in device_link_add()
ddb13ddacc scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
4438a74570 soundwire: debugfs: use controller id and link_id for debugfs
3fe8d239e3 ALSA: hda: Use position buffer for SKL+ again
c550c7c9ae ALSA: hda: Fix hang during shutdown due to link reset
23e8f775d9 ALSA: hda: Release controller display power during shutdown/reboot
5972e974eb ALSA: hda: Reduce udelay() at SKL+ position reporting
1db71de28b arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000
d833ddddec arm64: dts: renesas: beacon: Fix Ethernet PHY mode
d70247b752 arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock
980c7bdd20 JFS: fix memleak in jfs_mount
c4edd206d5 MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
24149c954f scsi: dc395: Fix error case unwinding
6348983be7 ARM: dts: at91: tse850: the emac<->phy interface is rmii
b6493c2b7d bus: ti-sysc: Fix timekeeping_suspended warning on resume
85085c3437 arm64: dts: meson-g12b: Fix the pwm regulator supply properties
4ccb7e4a97 arm64: dts: meson-g12a: Fix the pwm regulator supply properties
20baf01638 arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe
7a1617a991 arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes
64a43b7712 RDMA/bnxt_re: Fix query SRQ failure
fe3c11fc62 ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
2887df89e7 arm64: dts: rockchip: Fix GPU register width for RK3328
3f33f09d9f ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
cdd3dd905c clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
2fde76df18 ARM: dts: BCM5301X: Fix memory nodes names
5282385ee6 RDMA/rxe: Fix wrong port_cap_flags
a2c17c93b7 iio: st_sensors: disable regulators after device unregistration
bfedc81776 iio: st_sensors: Call st_sensors_power_enable() from bus drivers
f84c7a03d1 of: unittest: fix EXPECT text for gpio hog errors
4a50bc0084 bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
84dde8c8c9 bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.
9308f9c9c7 cgroup: Fix rootcg cpu.stat guest double counting
a3fdcd16b1 ibmvnic: Process crqs after enabling interrupts
5b3f720419 ibmvnic: don't stop queue in xmit
366235d4be udp6: allow SO_MARK ctrl msg to affect routing
8f3d88139d selftests/bpf: Fix fclose/pclose mismatch in test_progs
71ec65c700 crypto: pcrypt - Delay write to padata->info
fb41b8f5e8 net: phylink: avoid mvneta warning when setting pause parameters
08449a5c0e net: amd-xgbe: Toggle PLL settings during rate change
b17f424f88 selftests/bpf: Fix fd cleanup in sk_lookup test
2989a396b8 selftests: bpf: Convert sk_lookup ctx access tests to PROG_TEST_RUN
ae1f588ca1 drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
a586453da9 wcn36xx: Fix discarded frames due to wrong sequence number
3965cc2e9f wcn36xx: add proper DMA memory barriers in rx path
62d12650b8 libertas: Fix possible memory leak in probe and disconnect
975c15a19b libertas_tf: Fix possible memory leak in probe and disconnect
3aa98ef8f7 KVM: s390: Fix handle_sske page fault handling
5109802499 samples/kretprobes: Fix return value if register_kretprobe() failed
c3ac751944 spi: spi-rpc-if: Check return value of rpcif_sw_init()
5b7b4afead tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
3925134eff libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
227efdda51 tpm_tis_spi: Add missing SPI ID
ff1a0f71cc tpm: fix Atmel TPM crash caused by too frequent queries
43b4860b58 irq: mips: avoid nested irq_enter()
29a1cc3b50 KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
759f27cfa3 KVM: s390: pv: avoid double free of sida page
a729eb55b3 s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
50fcaa7155 libbpf: Fix BTF header parsing checks
12872fd7e4 libbpf: Fix overflow in BTF sanity checks
255eb8f8af libbpf: Allow loading empty BTFs
4d4d6aa2ef libbpf: Fix BTF data layout checks and allow empty BTF
0b95aaa493 bpftool: Avoid leaking the JSON writer prepared for program metadata
7cd4af996c KVM: selftests: Fix nested SVM tests when built with clang
293fa72d62 KVM: selftests: Add operand to vmsave/vmload/vmrun in svm.c
d337537181 smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
807f01f60c drm/msm: Fix potential NULL dereference in DPU SSPP
6d1f3157aa x86/sev: Fix stack type check in vc_switch_off_ist()
8e2f97df6a clocksource/drivers/timer-ti-dm: Select TIMER_OF
b9f142d748 PM: hibernate: fix sparse warnings
e8c0b74845 nvme-rdma: fix error code in nvme_rdma_setup_ctrl
7668cbe0cb phy: micrel: ksz8041nl: do not use power down mode
d405eb1150 net: enetc: unmap DMA in enetc_send_cmd()
14e12b7a76 mwifiex: Send DELBA requests according to spec
4ed5bb3df6 rsi: stop thread firstly in rsi_91x_init() error handling
e270226475 mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
1a270dada0 mt76: mt7915: fix sta_rec_wtbl tag len
116652a3d5 mt76: mt7915: fix possible infinite loop release semaphore
7a8e4effbb mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
4d5c7f07c7 mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
4187bf3310 platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
25c032c585 mmc: mxs-mmc: disable regulator on error and in the remove function
7c1c7ac9d1 media: ir_toy: assignment to be16 should be of correct type
daf15fa1fd net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
14d2415772 drm/msm: uninitialized variable in msm_gem_import()
3424931fa3 drm/msm: potential error pointer dereference in init()
a342cb4772 tcp: switch orphan_count to bare per-cpu counters
c85c6fadbe kernel/sched: Fix sched_fork() access an invalid sched_task_group
e1ee11473a ath10k: fix max antenna gain unit
786976b25a hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
fbc80c83f1 hwmon: Fix possible memleak in __hwmon_device_register()
e29352f162 net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
41fe79cf11 memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
4756d7fbaf memstick: avoid out-of-range warning
72de92d33f mmc: sdhci-omap: Fix context restore
2fd26ec36e mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
a9fbeb5bbc gve: Recover from queue stall due to missed IRQ
9e4f708df6 b43: fix a lower bounds test
508faf8721 b43legacy: fix a lower bounds test
6a16100141 hwrng: mtk - Force runtime pm ops for sleep ops
8d98683fa6 crypto: qat - disregard spurious PFVF interrupts
d99fdd13a7 crypto: qat - detect PFVF collision after ACK
1fe4b24419 media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
740a794e01 netfilter: nft_dynset: relax superfluous check on set updates
af756be29c rcu: Always inline rcu_dynticks_task*_{enter,exit}()
6880325382 EDAC/amd64: Handle three rank interleaving mode
1b2d422a26 PM: EM: Fix inefficient states detection
d01e847d84 ath9k: Fix potential interrupt storm on queue reset
52e3545eef media: em28xx: Don't use ops->suspend if it is NULL
f03e0624e9 cpuidle: Fix kobject memory leaks in error paths
66f7de13d1 crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
848f1f00c6 kprobes: Do not use local variable when creating debugfs file
c34bfe4204 media: cx23885: Fix snd_card_free call on null card pointer
388cebfa73 media: tm6000: Avoid card name truncation
86626be4b6 media: si470x: Avoid card name truncation
88315edafe media: radio-wl1273: Avoid card name truncation
4280b30ea9 media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
e43b301cb1 media: TDA1997x: handle short reads of hdmi info frame.
c85e591b77 media: v4l2-ioctl: S_CTRL output the right value
e2f3608a0b media: dvb-usb: fix ununit-value in az6027_rc_query
0a85325fc5 media: cxd2880-spi: Fix a null pointer dereference on error handling path
4303b39b50 media: em28xx: add missing em28xx_close_extension
375150b3aa drm/amdgpu: fix warning for overflow check
8980f9d144 arm64: mm: update max_pfn after memory hotplug
cbbf816cb7 drm/ttm: stop calling tt_swapin in vm_access
c39154d3d6 ath10k: sdio: Add missing BH locking around napi_schdule()
ffed645538 ath10k: Fix missing frame timestamp for beacon/probe-resp
08fb0008d9 ath11k: Fix memory leak in ath11k_qmi_driver_event_work
4519fb9105 ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
b6a46ec871 ath11k: Avoid race during regd updates
ac49af173c ath11k: fix some sleeping in atomic bugs
9833cb3206 net: dsa: rtl8366rb: Fix off-by-one bug
78fb8c9992 rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
03725f7125 crypto: caam - disable pkc for non-E SoCs
f0b40bf3e4 Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
310f581f54 wilc1000: fix possible memory leak in cfg_scan_result()
3a95dbc8b7 wcn36xx: Fix Antenna Diversity Switching
ba8ba76885 cgroup: Make rebind_subsystems() disable v2 controllers all at once
a585e04e34 net: net_namespace: Fix undefined member in key_remove_domain()
fb4a58f519 lockdep: Let lock_is_held_type() detect recursive read as read
38098444b7 virtio-gpu: fix possible memory allocation failure
582de9e385 drm/v3d: fix wait for TMU write combiner flush
f0bc12b848 objtool: Fix static_call list generation
b36ab509e1 x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
abf37e855e objtool: Add xen_start_kernel() to noreturn list
6b72caabc4 MIPS: lantiq: dma: fix burst length for DEU
226d68fb6c rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
c20d8c1974 Bluetooth: fix init and cleanup of sco_conn.timeout_work
19337ed10e selftests/bpf: Fix strobemeta selftest regression
bc9199271c netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state
0c5e946794 parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
a1ec31a0be parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
ee75174f6a erofs: don't trigger WARN() when decompression fails
50a2d1229b task_stack: Fix end_of_stack() for architectures with upwards-growing stack
44d4c43bab parisc: fix warning in flush_tlb_all
d8166a27c6 selftests/core: fix conflicting types compile error for close_range()
6f038b1a94 drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
ddfcae9052 x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
c4cfdf5fa8 wcn36xx: Correct band/freq reporting on RX
a27095cda1 spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
b917f9b946 btrfs: do not take the uuid_mutex in btrfs_rm_device
428bb3d71e btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
eeb96ebdc6 ACPI: AC: Quirk GK45 to skip reading _PSR
42d8c280dd net: annotate data-race in neigh_output()
c2e5f43db0 vrf: run conntrack only in context of lower/physdev for locally generated packets
b3ae170b8e ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
b870d8a76c gfs2: Fix glock_hash_walk bugs
16a7981188 gfs2: Cancel remote delete work asynchronously
9ceac307b5 gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
25a45d3999 ARM: clang: Do not rely on lr register for stacktrace
c11aecbe05 smackfs: use __GFP_NOFAIL for smk_cipso_doi()
32a9a8fdba iwlwifi: mvm: disable RX-diversity in powersave
e658d59f0e selftests/bpf: Fix perf_buffer test on system with offline cpus
d6dca066fc selftests: kvm: fix mismatched fclose() after popen()
9f4bd00a6e PM: hibernate: Get block device exclusively in swsusp_check()
7a0b68eecb nvme: drop scan_lock and always kick requeue list when removing namespaces
82327823f3 nvmet-tcp: fix use-after-free when a port is removed
2659d8213d nvmet-rdma: fix use-after-free when a port is removed
e73574f7bc nvmet: fix use-after-free when a port is removed
1a10bf4c9d media: allegro: ignore interrupt if mailbox is not initialized
49cc377654 block: remove inaccurate requeue check
451cef276f mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
16c2dd0ab5 mt76: mt7915: fix an off-by-one bound check
ea7f8803a3 tracing/cfi: Fix cmp_entries_* functions signature mismatch
5736f1dead workqueue: make sysfs of unbound kworker cpumask more clever
ab5c46f258 lib/xz: Validate the value before assigning it to an enum variable
aa5d35e350 lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
cad55afe37 memstick: r592: Fix a UAF bug when removing the driver
2338c35017 md: update superblock after changing rdev flags in state_store
b34ea3c91e block: bump max plugged deferred size from 16 to 32
517feec952 drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
e1d7f0202a leaking_addresses: Always print a trailing newline
9101e2574b net: phy: micrel: make *-skew-ps check more lenient
832fad367c drm/amdkfd: fix resume error when iommu disabled in Picasso
65c84e09e8 ACPI: battery: Accept charges over the design capacity as full
b600866018 iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
219df0f6ba mmc: moxart: Fix reference count leaks in moxart_probe
38608d32ad ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
3c2434d9a6 tracefs: Have tracefs directories not set OTH permission bits by default
8524501a0e net-sysfs: try not to restart the syscall if it will fail eventually
b94e5bd540 media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
e3bc3e1141 media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
b499d40571 media: ipu3-imgu: imgu_fmt: Handle properly try
272e54604c ACPICA: Avoid evaluating methods too early during system resume
f09e1a2d2c fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
6e242c557a ipmi: Disable some operations during a panic
1f38e5e803 media: rcar-csi2: Add checking to rcsi2_start_receiver()
3d5575b3f5 brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
7d54f52d8f rtw88: fix RX clock gate setting while fifo dump
d506a3d60d ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
2709971f9f media: mceusb: return without resubmitting URB in case of -EPROTO error.
40b8e7dee5 media: imx: set a media_device bus_info string
a62edd8390 media: s5p-mfc: Add checking to s5p_mfc_probe().
b570e36a77 media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
f4037b9b10 media: uvcvideo: Set unique vdev name based in type
d934941640 media: uvcvideo: Return -EIO for control errors
2052c4cebc media: uvcvideo: Set capability in s_param
0c91bb4fbd media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
309ea2248d media: atomisp: Fix error handling in probe
f4c652bd35 media: netup_unidvb: handle interrupt properly according to the firmware
09ee09359a media: mt9p031: Fix corrupted frame after restarting stream
aded39ff1f ath10k: high latency fixes for beacon buffer
461a71a1a6 ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets
43ab645788 ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
97890f3633 ath11k: Avoid reg rules update during firmware recovery
2114f80889 drm/amdgpu: Fix MMIO access page fault
68ac723fb1 fscrypt: allow 256-bit master keys with AES-256-XTS
f526d948c3 mwifiex: Properly initialize private structure on interface type changes
bab15174ec mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
7ca1711d59 x86: Increase exception stack sizes
1c04dabbd1 ath11k: Align bss_chan_info structure with firmware
3fac6feca9 smackfs: Fix use-after-free in netlbl_catmap_walk()
02ddf26d84 rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
8d433ab5c8 net: sched: update default qdisc visibility after Tx queue cnt changes
28118dcc87 locking/lockdep: Avoid RCU-induced noinstr fail
b92a5df2c7 MIPS: lantiq: dma: reset correct number of channel
5af57ce8a6 MIPS: lantiq: dma: add small delay after reset
396e302cc8 platform/x86: wmi: do not fail if disabling fails
7f43cda650 rcutorture: Avoid problematic critical section nesting on PREEMPT_RT
7987f31e54 drm/panel-orientation-quirks: add Valve Steam Deck
c10465f6d6 Bluetooth: fix use-after-free error in lock_sock_nested()
4dfba42604 Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
509ae4a4f0 drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
62b90d7eeb drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
780fff2c75 drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
6758d66516 dma-buf: WARN on dmabuf release with pending attachments
890e4edcec power: supply: max17042_battery: Clear status bits in interrupt handler
898622adb7 USB: chipidea: fix interrupt deadlock
6edf4cffe1 USB: iowarrior: fix control-message timeouts
0e71591e91 most: fix control-message timeouts
edc5466254 serial: 8250: fix racy uartclk update
5f31af4e78 USB: serial: keyspan: fix memleak on probe errors
ab4755ea91 iio: ad5770r: make devicetree property reading consistent
6384620608 iio: dac: ad5446: Fix ad5622_write() return value
a4e7a8c432 coresight: cti: Correct the parameter for pm_runtime_put
46709163a5 pinctrl: core: fix possible memory leak in pinctrl_enable()
6bc8317b8c quota: correct error number in free_dqentry()
ceeb0a8a87 quota: check block number when reading the block in quota file
bc1274df3f PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
e2e8961fbc PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
bd5d982822 PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
2b99c6fb65 PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge
4bb5399c1c PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
2ad10bbf84 PCI: aardvark: Fix return value of MSI domain .alloc() method
6a0da19be5 PCI: aardvark: Fix configuring Reference clock
5fb031fcd4 PCI: aardvark: Fix reporting Data Link Layer Link Active
2b861523d7 PCI: aardvark: Do not unmask unused interrupts
1085ee5236 PCI: aardvark: Fix checking for link up via LTSSM state
3bcbace714 PCI: aardvark: Do not clear status bits of masked interrupts
c1a8fb2374 PCI: cadence: Add cdns_plat_pcie_probe() missing return
adcfc317d3 PCI: pci-bridge-emul: Fix emulation of W1C bits
4fd9f0509a ovl: fix use after free in struct ovl_aio_req
af7d25d785 xen/balloon: add late_initcall_sync() for initial ballooning done
96e7880a43 ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
694c0c84a6 ALSA: mixer: oss: Fix racy access to slots
cd0b29a89b ifb: fix building without CONFIG_NET_CLS_ACT
47462c5e60 serial: core: Fix initializing and restoring termios speed
c1e6e42740 ring-buffer: Protect ring_buffer_reset() from reentrancy
93fccb1f89 powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
875609ad80 can: j1939: j1939_can_recv(): ignore messages with invalid source address
c3cb7b5c9d can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
9f9d6d391f KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
bd37419f4f KVM: arm64: Extract ESR_ELx.EC only
924955df37 power: supply: max17042_battery: use VFSOC for capacity when no rsns
f2feac81ed power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
5720436bc7 mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines
7e867f8bb3 soc: fsl: dpio: use the combined functions to protect critical zone
55c97165ad soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
62bd9eac5f signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
5e63b85a48 memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
4fbecebb31 signal: Remove the bogus sigkill_pending in ptrace_stop
5c6fedce4a RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
30cdf50357 perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
aef1a67fbf perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
da8b3b95c5 rsi: Fix module dev_oper_mode parameter description
d69ffec3aa rsi: fix rate mask set leading to P2P failure
41d97e0360 rsi: fix key enabled check causing unwanted encryption for vap_id > 0
46752a7aed rsi: fix occasional initialisation failure with BT coex
a194e9c721 wcn36xx: handle connection loss indication
701cf28e01 libata: fix checking of DMA state
890e416c02 mwifiex: Try waking the firmware until we get an interrupt
d59d2f7af7 mwifiex: Read a PCI register after writing the TX ring write pointer
daccf40320 PM: sleep: Do not let "syscore" devices runtime-suspend during system transitions
1c422d6301 wcn36xx: Fix (QoS) null data frame bitrate/modulation
c1b8ad661f wcn36xx: Fix tx_status mechanism
3d62e1c9bc wcn36xx: Fix HT40 capability for 2Ghz band
c044f34ca2 ifb: Depend on netfilter alternatively to tc
c7400e2ec8 evm: mark evm_fixmode as __ro_after_init
eab090dfcb rtl8187: fix control-message timeouts
73b79ada4c PCI: Mark Atheros QCA6174 to avoid bus reset
30182b8c13 ath10k: fix division by zero in send path
ce56007609 ath10k: fix control-message timeout
1336b2af8a ath6kl: fix control-message timeout
f34487c7f2 ath6kl: fix division by zero in send path
fd1e4d8c61 mwifiex: fix division by zero in fw download path
a5d8d76710 EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
31f5c92546 regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
02ecf56faa regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
5b7e3bb163 hwmon: (pmbus/lm25066) Add offset coefficients
db04fb4111 selinux: fix race condition when computing ocontext SIDs
a09a5f4c07 ia64: kprobes: Fix to pass correct trampoline address to the handler
2f65b76c44 KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup
b4a4c9dc44 btrfs: call btrfs_check_rw_degradable only if there is a missing device
b406439afe btrfs: fix lost error handling when replaying directory deletes
8992aab294 btrfs: clear MISSING device status bit in btrfs_close_one_device
a99da5b680 rds: stop using dmapool
0bfb1c1a16 net/smc: Correct spelling mistake to TCPF_SYN_RECV
9b86eb2f34 net/smc: Fix smc_link->llc_testlink_time overflow
2167a9a12c nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
c9a7d5fe15 vmxnet3: do not stop tx queues after netif_device_detach()
9813218e96 r8169: Add device 10ec:8162 to driver r8169
ad6a2a1e56 nvmet-tcp: fix header digest verification
c8270435cf block: schedule queue restart after BLK_STS_ZONE_RESOURCE
7d1fb5c12c drm: panel-orientation-quirks: Add quirk for GPD Win3
4d41059b9e watchdog: Fix OMAP watchdog early handling
b8cb3f4ffa net: multicast: calculate csum of looped-back and forwarded packets
07f7a18649 spi: spl022: fix Microwire full duplex mode
db1d9d102e nvmet-tcp: fix a memory leak when releasing a queue
0e86b727a9 xen/netfront: stop tx queues during live migration
69b14e23df gpio: mlxbf2.c: Add check for bgpio_init failure
b92ac0a9ca bpf: Prevent increasing bpf_jit_limit above max
a3564fb7b0 bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
0ad7f317b9 fcnal-test: kill hanging ping/nettest binaries on cleanup
bc3e73ebb7 drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
4002f3944d mmc: winbond: don't build on M68K
a1ea41f91d reset: socfpga: add empty driver allowing consumers to probe
a903984385 ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode
f03e04bb9d hyperv/vmbus: include linux/bitops.h
6491ccdde2 sfc: Don't use netif_info before net_device setup
e519acba2f sfc: Export fibre-specific supported link modes
7986fdbbe0 cavium: Fix return values of the probe function
ad01685177 mISDN: Fix return values of the probe function
a6cb5e09e1 scsi: qla2xxx: Fix unmap of already freed sgl
77fee241e6 scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
940783d08d cavium: Return negative value when pci_alloc_irq_vectors() fails
75710d583c ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers
92556e3c2b ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked()
73199aadcd x86/irq: Ensure PI wakeup handler is unregistered before module unload
df8a74fc15 x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
115810a265 x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
b05eea1bcb fuse: fix page stealing
d81e341fb1 ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
4089432dc0 ext4: ensure enough credits in ext4_ext_shift_path_extents
aa21b7e3d3 ext4: fix lazy initialization next schedule time computation in more granular unit
782025948b ALSA: timer: Unconditionally unlink slave instances, too
b980ce4ebb ALSA: timer: Fix use-after-free problem
7c6fd52504 ALSA: synth: missing check for possible NULL after the call to kstrdup
ecd536c57a ALSA: hda: Free card instance properly at probe errors
f503a25a3d ALSA: usb-audio: Add registration quirk for JBL Quantum 400
9259518fab ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
3c7a3f2d79 ALSA: line6: fix control and interrupt message timeouts
21f9c02a4d ALSA: 6fire: fix control and bulk message timeouts
0e4c288a74 ALSA: ua101: fix division by zero at probe
4f9e9c389e ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
62b189f9f3 ALSA: hda/realtek: Add quirk for ASUS UX550VE
a770cb746b ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
88bcfcc50d ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
0288f838a2 ALSA: hda/realtek: Add quirk for Clevo PC70HS
3d0e5d2eaf ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
f0750e9801 ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
a2b3dbc9fd media: v4l2-ioctl: Fix check_ext_ctrls
151eff5880 media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
71a137376b media: rkvdec: Support dynamic resolution changes
b2b5126a77 media: ite-cir: IR receiver stop working after receive overflow
39275d2ec6 media: rkvdec: Do not override sizeimage for output format
949c5b6daa crypto: s5p-sss - Add error handling in s5p_aes_probe()
9ac25cd2f4 firmware/psci: fix application of sizeof to pointer
dd189feeba tpm: Check for integer overflow in tpm2_map_response_body()
32498b8889 parisc: Fix ptrace check on syscall return
15b4142aea parisc: Fix set_fixmap() on PA1.x CPUs
284ad31054 exfat: fix incorrect loading of i_blocks for large files
823b487cfb mmc: dw_mmc: Dont wait for DRTO on Write RSP error
7b24b669d3 mmc: mtk-sd: Add wait dma stop done flow
c1d31266de scsi: qla2xxx: Fix use after free in eh_abort path
37b15db1d8 scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
06cc8187db scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
9d623bf173 ocfs2: fix data corruption on truncate
39264eaa6d libata: fix read log timeout value
ab0a06769e Input: i8042 - Add quirk for Fujitsu Lifebook T725
8c341d11c8 Input: elantench - fix misreporting trackpoint coordinates
d1eb42de7c Input: iforce - fix control-message timeout
afbec52fbc binder: use cred instead of task for getsecid
0d9f4ae7cd binder: use cred instead of task for selinux checks
bd9cea41ac binder: use euid from cred instead of using task
7f1d5a1a7d usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
ff32302687 xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
87acf4924e ANDROID: GKI: fix up abi break in ehci code
525e61a871 Merge 5.10.79 into android12-5.10-lts
bd816c2783 Linux 5.10.79
62424fe4c2 rsi: fix control-message timeout
8971158af1 media: staging/intel-ipu3: css: Fix wrong size comparison imgu_css_fw_init
1cf43e9289 staging: rtl8192u: fix control-message timeouts
9963ba5b9d staging: r8712u: fix control-message timeout
844b02496e comedi: vmk80xx: fix bulk and interrupt message timeouts
b7fd7f3387 comedi: vmk80xx: fix bulk-buffer overflow
33d7a47073 comedi: vmk80xx: fix transfer-buffer overflows
ef143dc0c3 comedi: ni_usb6501: fix NULL-deref in command paths
786f5b0345 comedi: dt9812: fix DMA buffers on stack
86d4aedcbc isofs: Fix out of bound access for corrupted isofs image
c430094541 staging: rtl8712: fix use-after-free in rtl8712_dl_fw
ab4af56ae2 printk/console: Allow to disable console output by using console="" or console=null
07d1db141e binder: don't detect sender/target during buffer cleanup
42681b90c4 usb-storage: Add compatibility quirk flags for iODD 2531/2541
1309753b78 usb: musb: Balance list entry in musb_gadget_queue
2740914312 usb: gadget: Mark USB_FSL_QE broken on 64-bit
94e5305a38 usb: ehci: handshake CMD_RUN instead of STS_HALT
a8db6fd04d Revert "x86/kvm: fix vcpu-id indexed array sizes"
ecf58653f1 KVM: x86: avoid warning with -Wbitwise-instead-of-logical
be686d451e Merge branch 'android12-5.10' into `android12-5.10-lts`
bb235e8cc2 Merge 5.10.78 into android12-5.10-lts
5040520482 Linux 5.10.78
4c7c024327 ALSA: usb-audio: Add Audient iD14 to mixer map quirk table
f3eb44f496 ALSA: usb-audio: Add Schiit Hel device to mixer map quirk table
68765fc977 Revert "wcn36xx: Disable bmps when encryption is disabled"
f84b791d4c ARM: 9120/1: Revert "amba: make use of -1 IRQs warn"
bbc920fb32 Revert "drm/ttm: fix memleak in ttm_transfered_destroy"
6d67b2a73b mm: khugepaged: skip huge page collapse for special files
5a7957491e Revert "usb: core: hcd: Add support for deferring roothub registration"
50f46bd309 Revert "xhci: Set HCD flag to defer primary roothub registration"
d7fc85f610 media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
b93a70bf2b net: ethernet: microchip: lan743x: Fix skb allocation failure
b9c85a71e1 vrf: Revert "Reset skb conntrack connection..."
0382fdf9ae sfc: Fix reading non-legacy supported link modes
748786564a Revert "io_uring: reinforce cancel on flush during exit"
7b57c38d12 scsi: core: Put LLD module refcnt after SCSI device is released
a7c8ce8460 Merge branch 'android12-5.10' into `android12-5.10-lts`
76698ea35f ANDROID: GKI: fix up abi breakage from "cfg80211: fix management registrations locking"
a739489620 Merge 5.10.77 into android12-5.10-lts
09df347cfd Linux 5.10.77
fbb91dadb5 perf script: Check session->header.env.arch before using it
6f416815c5 riscv: Fix asan-stack clang build
7a4cf25d83 riscv: fix misalgned trap vector base address
acb8832f6a scsi: ufs: ufs-exynos: Correct timeout value setting registers
8ecddaca79 KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu
e11a7355fb KVM: s390: clear kicked_mask before sleeping again
727e5deca8 lan743x: fix endianness when accessing descriptors
a7112b8eeb sctp: add vtag check in sctp_sf_ootb
c2442f7219 sctp: add vtag check in sctp_sf_do_8_5_1_E_sa
14c1e02b11 sctp: add vtag check in sctp_sf_violation
dad2486414 sctp: fix the processing for COOKIE_ECHO chunk
8c50693d25 sctp: fix the processing for INIT_ACK chunk
ad111d4435 sctp: use init_tag from inithdr for ABORT chunk
4509000a25 phy: phy_ethtool_ksettings_set: Lock the PHY while changing settings
5b88bb9377 phy: phy_start_aneg: Add an unlocked version
81780b624d phy: phy_ethtool_ksettings_set: Move after phy_start_aneg
258c5fea44 phy: phy_ethtool_ksettings_get: Lock the phy for consistency
58722323d4 net/tls: Fix flipped sign in async_wait.err assignment
44e8c93e1e net: nxp: lpc_eth.c: avoid hang when bringing interface down
c2af2092c9 net: ethernet: microchip: lan743x: Fix dma allocation failure by using dma_set_mask_and_coherent
bfa6fbdb4e net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume fails
e81bed557f mlxsw: pci: Recycle received packet upon allocation failure
be98be1a17 nios2: Make NIOS2_DTB_SOURCE_BOOL depend on !COMPILE_TEST
aead02927a gpio: xgs-iproc: fix parsing of ngpios property
863a423ee0 RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string
2b7c5eed19 net: Prevent infinite while loop in skb_tx_hash()
04121b10cd cfg80211: correct bridge/4addr mode check
aed897e96b net-sysfs: initialize uid and gid before calling net_ns_get_ownership
b0a2cd3855 net: batman-adv: fix error handling
36e911a16b regmap: Fix possible double-free in regcache_rbtree_exit()
e51371bd68 reset: brcmstb-rescal: fix incorrect polarity of status bit
2cf7d935d6 arm64: dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node
10e40fb2f5 RDMA/mlx5: Set user priority for DCT
24fd8e2f02 octeontx2-af: Display all enabled PF VF rsrc_alloc entries.
c63d7f2ca9 nvme-tcp: fix possible req->offset corruption
32f3db20f1 nvme-tcp: fix data digest pointer calculation
4286c72c53 nvmet-tcp: fix data digest pointer calculation
d98883f6c3 IB/hfi1: Fix abba locking issue with sc_disable()
c3e17e58f5 IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
ee4908f909 bpf: Fix error usage of map_fd and fdget() in generic_map_update_batch()
dd2260ec64 bpf: Fix potential race in tail call compatibility check
15dec6d8f8 tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function
cac6b043ce riscv, bpf: Fix potential NULL dereference
01599bf7cc cgroup: Fix memory leak caused by missing cgroup_bpf_offline
eb3b6805e3 drm/amdgpu: fix out of bounds write
c21b400221 drm/ttm: fix memleak in ttm_transfered_destroy
69a7fa5cb0 mm, thp: bail out early in collapse_file for writeback page
8fb858b74a net: lan78xx: fix division by zero in send path
4c22227e39 cfg80211: fix management registrations locking
fa29cec42c cfg80211: scan: fix RCU in cfg80211_add_nontrans_list()
db1191a529 nvme-tcp: fix H2CData PDU send accounting (again)
5043fbd294 ocfs2: fix race between searching chunks and release journal_head from buffer_head
01169a4335 mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning circuit
ee3213b117 mmc: sdhci: Map more voltage level to SDHCI_POWER_330
a95a76fc01 mmc: dw_mmc: exynos: fix the finding clock sample value
12a46f72f4 mmc: mediatek: Move cqhci init behind ungate clock
44c2bc2a6b mmc: cqhci: clear HALT state after CQE enable
efe934629f mmc: vub300: fix control-message timeouts
f3dec7e7ac net/tls: Fix flipped sign in tls_err_abort() calls
c828115a14 Revert "net: mdiobus: Fix memory leak in __mdiobus_register"
11c0406b4c nfc: port100: fix using -ERRNO as command type mask
0b1b3e086b tipc: fix size validations for the MSG_CRYPTO type
5aa5bab579 ata: sata_mv: Fix the error handling of mv_chip_id()
9a52798dce pinctrl: amd: disable and mask interrupts on probe
01c2881bb0 Revert "pinctrl: bcm: ns: support updated DT binding as syscon subnode"
017718dfbb usbnet: fix error return code in usbnet_probe()
693ecbe8f7 usbnet: sanity check for maxpacket
b663890d85 ext4: fix possible UAF when remounting r/o a mmp-protected file system
d4d9c06598 arm64: Avoid premature usercopy failure
e184a21b5c powerpc/bpf: Fix BPF_MOD when imm == 1
3f2c12ec8a io_uring: don't take uring_lock during iowq cancel
5a768b4d3e ARM: 9141/1: only warn about XIP address when not compile testing
15b278f94b ARM: 9139/1: kprobes: fix arch_init_kprobes() prototype
c06d7d9bfc ARM: 9138/1: fix link warning with XIP + frame-pointer
8a6af97c31 ARM: 9134/1: remove duplicate memcpy() definition
6ad8bbc9d3 ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned
3ceaa85c33 ARM: 9132/1: Fix __get_user_check failure with ARM KASAN images
4944ec82eb Merge 5.10.76 into android12-5.10-lts
378e85d1ae Linux 5.10.76
cfa79faf7e pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume()
c56c801391 ARM: 9122/1: select HAVE_FUTEX_CMPXCHG
d088db8637 selftests: bpf: fix backported ASSERT_FALSE
3a845fa00f e1000e: Separate TGP board type from SPT
021b6d11e5 tracing: Have all levels of checks prevent recursion
3a0dc2e35a net: mdiobus: Fix memory leak in __mdiobus_register
cfe9266213 bpf, test, cgroup: Use sk_{alloc,free} for test cases
188907c252 s390/pci: fix zpci_zdev_put() on reserve
f18b90e936 can: isotp: isotp_sendmsg(): fix TX buffer concurrent access in isotp_sendmsg()
2304dfb548 scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma()
c58654f344 net: hns3: fix for miscalculation of rx unused desc
96fe506129 sched/scs: Reset the shadow stack when idle_task_exit
96f0aebf29 scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()
90c8e8c082 scsi: iscsi: Fix set_param() handling
0eb2544796 Input: snvs_pwrkey - add clk handling
ea9c1f5d8a perf/x86/msr: Add Sapphire Rapids CPU support
7a5a1f09c8 libperf tests: Fix test_stat_cpu
e56a3e7ae3 ALSA: hda: avoid write to STATESTS if controller is in reset
85c8d8c160 platform/x86: intel_scu_ipc: Update timeout value in comment
9f591cbdbe isdn: mISDN: Fix sleeping function called from invalid context
ab4f542b51 ARM: dts: spear3xx: Fix gmac node
15d3ad7988 net: stmmac: add support for dwmac 3.40a
f9d16a4284 btrfs: deal with errors when checking if a dir entry exists during log replay
369db2a91d ALSA: hda: intel: Allow repeatedly probing on codec configuration errors
81d8e70cdc gcc-plugins/structleak: add makefile var for disabling structleak
69078a9436 net: hns3: fix the max tx size according to user manual
f40c2281d2 drm: mxsfb: Fix NULL pointer dereference crash on unload
96835b68d7 net: bridge: mcast: use multicast_membership_interval for IGMPv3
0e033cb407 selftests: netfilter: remove stray bash debug line
f8a6541345 netfilter: Kconfig: use 'default y' instead of 'm' for bool config option
7f221ccbee isdn: cpai: check ctr->cnr to avoid array index out of bound
77c0ef979e nfc: nci: fix the UAF of rf_conn_info object
8f042315fc KVM: nVMX: promptly process interrupts delivered while in guest mode
b41fd8f5d2 mm, slub: fix incorrect memcg slab count for bulk free
568f906340 mm, slub: fix potential memoryleak in kmem_cache_open()
48843dd23c mm, slub: fix mismatch between reconstructed freelist depth and cnt
c5c2a80368 powerpc/idle: Don't corrupt back chain when going idle
197ec50b2d KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it went to guest
fbd724c49b KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest()
9258f58432 powerpc64/idle: Fix SP offsets when saving GPRs
3e16d9d525 net: dsa: mt7530: correct ds->num_ports
16802fa4c3 audit: fix possible null-pointer dereference in audit_filter_rules
0d867a3599 ASoC: DAPM: Fix missing kctl change notifications
a2606acf41 ALSA: hda/realtek: Add quirk for Clevo PC50HS
6411397b6d ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset
b721500c97 vfs: check fd has read access in kernel_read_file_from_fd()
895ceeff31 elfcore: correct reference to CONFIG_UML
3cda4bfffd userfaultfd: fix a race between writeprotect and exit_mmap()
93be0eeea1 ocfs2: mount fails with buffer overflow in strlen
f1b98569e8 ocfs2: fix data corruption after conversion from inline format
1727e8688d ceph: fix handling of "meta" errors
603d4bcc0f ceph: skip existing superblocks that are blocklisted or shut down when mounting
d48db508f9 can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes
5abc9b9d3c can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with error length
864e77771a can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
ecfccb1c58 can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer
053bc12df0 can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible()
0917fb0406 can: isotp: isotp_sendmsg(): fix return error on FC timeout on TX path
28f28e4bc3 can: peak_pci: peak_pci_remove(): fix UAF
9697ad6395 can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state notification
4758e92e75 can: rcar_can: fix suspend/resume
4a0928c3eb net: enetc: fix ethtool counter name for PM0_TERR
00ad7a0154 drm/panel: ilitek-ili9881c: Fix sync for Feixin K101-IM2BYL02 panel
eccd00728b ice: Add missing E810 device ids
6418508a3a e1000e: Fix packet loss on Tiger Lake and later
29f1bdcaa3 net: stmmac: Fix E2E delay mechanism
d36b15e3e7 net: hns3: disable sriov before unload hclge layer
6a72e1d78a net: hns3: fix vf reset workqueue cannot exit
32b860d364 net: hns3: schedule the polling again when allocation fails
96c013f40c net: hns3: add limit ets dwrr bandwidth cannot be 0
21f61d1043 net: hns3: reset DWRR of unused tc to zero
53770a4115 powerpc/smp: do not decrement idle task preempt count in CPU offline
81dbd898fb NIOS2: irqflags: rename a redefined register name
6edf99b000 net: dsa: lantiq_gswip: fix register definition
ef97219d5f ipv6: When forwarding count rx stats on the orig netdev
38d984e5e8 tcp: md5: Fix overlap between vrf and non-vrf keys
c28bea6b87 lan78xx: select CRC32
9c8943812d netfilter: ipvs: make global sysctl readonly in non-init netns
911e01990c netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6
69ea08c1b5 ice: fix getting UDP tunnel entry
842fce4319 ASoC: wm8960: Fix clock configuration on slave mode
39afed394c dma-debug: fix sg checks in debug_dma_map_sg()
2a670c3230 netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value
0f4308a164 NFSD: Keep existing listeners on portlist error
546c04c857 xtensa: xtfpga: Try software restart before simulating CPU reset
bfef5d8262 xtensa: xtfpga: use CONFIG_USE_OF instead of CONFIG_OF
d8284c981c drm/amdgpu/display: fix dependencies for DRM_AMD_DC_SI
101e1bcb11 xen/x86: prevent PVH type from getting clobbered
a6285b1b22 block: decode QUEUE_FLAG_HCTX_ACTIVE in debugfs output
85c1827eee ARM: dts: at91: sama5d2_som1_ek: disable ISC node by default
5489c1bed5 arm: dts: vexpress-v2p-ca9: Fix the SMB unit-address
f59da9f7ef io_uring: fix splice_fd_in checks backport typo
b6f32897af xhci: add quirk for host controllers that don't update endpoint DCS
b3b7f831a4 parisc: math-emu: Fix fall-through warnings
234d53d2bb Merge branch 'android12-5.10' into `android12-5.10-lts`
221975092a Merge 5.10.75 into android12-5.10-lts
3a9842b42e Linux 5.10.75
3e28736521 net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's
3593fa147c ionic: don't remove netdev->dev_addr when syncing uc list
f33890d9bb net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown skb
9c546af181 nfp: flow_offload: move flow_indr_dev_register from app init to app start
6da9af2d25 r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256
ecfd4fa15b qed: Fix missing error code in qed_slowpath_start()
51f6e72ca6 mqprio: Correct stats in mqprio_dump_class_stats().
fdaff7f9e8 platform/x86: intel_scu_ipc: Fix busy loop expiry time
057ee6843b acpi/arm64: fix next_platform_timer() section mismatch error
c6b2400095 drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
2c56587174 drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
b28586fb04 drm/msm/a6xx: Track current ctx by seqno
abd1186415 drm/msm/mdp5: fix cursor-related warnings
91a340768b drm/msm: Fix null pointer dereference on pointer edp
a7b45024f6 drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read
d0f0e17103 drm/panel: olimex-lcd-olinuxino: select CRC32
a4a37e6516 spi: bcm-qspi: clear MSPI spifie interrupt during probe
d9428f08e1 platform/mellanox: mlxreg-io: Fix read access of n-bytes size attributes
c216cebdd2 platform/mellanox: mlxreg-io: Fix argument base in kstrtou32() call
e59d839743 mlxsw: thermal: Fix out-of-bounds memory accesses
7eef482db7 ata: ahci_platform: fix null-ptr-deref in ahci_platform_enable_regulators()
116932c0e4 pata_legacy: fix a couple uninitialized variable bugs
50cb95487c NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
3f2960b39f NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
2f21f06a5e nfc: fix error handling of nfc_proto_register()
ba39f55952 vhost-vdpa: Fix the wrong input in config_cb
84e0f2fc66 ethernet: s2io: fix setting mac address during resume
e19c10d6e0 net: encx24j600: check error in devm_regmap_init_encx24j600
f2e1de0750 net: dsa: microchip: Added the condition for scheduling ksz_mib_read_work
9053c5b459 net: stmmac: fix get_hw_feature() on old hardware
12da46cb6a net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp
4f7bddf8c5 net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
afb0c67dfd net: korina: select CRC32
33ca850105 net: arc: select CRC32
17a027aafd gpio: pca953x: Improve bias setting
d84a69ac41 sctp: account stream padding length for reconf chunk
6fecdb5b54 nvme-pci: Fix abort command id
2d937cc12c ARM: dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting
6e6082250b ARM: dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states
48613e687e ARM: dts: bcm2711: fix MDIO #address- and #size-cells
6e6e3018d3 ARM: dts: bcm2711-rpi-4-b: Fix usb's unit address
76644f9459 tee: optee: Fix missing devices unregister during optee_remove
07f8856824 iio: dac: ti-dac5571: fix an error code in probe()
6c0024bcaa iio: ssp_sensors: fix error code in ssp_print_mcu_debug()
0fbc3cf7dd iio: ssp_sensors: add more range checking in ssp_parse_dataframe()
abe5b13dd9 iio: adc: max1027: Fix the number of max1X31 channels
41e84a4f25 iio: light: opt3001: Fixed timeout error when 0 lux
e811506f60 iio: mtk-auxadc: fix case IIO_CHAN_INFO_PROCESSED
1671cfd31b iio: adc: max1027: Fix wrong shift with 12-bit devices
f931076d32 iio: adc128s052: Fix the error handling path of 'adc128_probe()'
4425d059aa iio: adc: ad7793: Fix IRQ flag
d078043a17 iio: adc: ad7780: Fix IRQ flag
a8177f0576 iio: adc: ad7192: Add IRQ flag
be8ef91d61 driver core: Reject pointless SYNC_STATE_ONLY device links
d5f13bbb51 drivers: bus: simple-pm-bus: Add support for probing simple bus only devices
b45923f66e iio: adc: aspeed: set driver data when adc probe.
ea947267eb powerpc/xive: Discard disabled interrupts in get_irqchip_state()
9e46bdfb55 x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically
57e4888640 nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
a7bd0dd3f2 EDAC/armada-xp: Fix output of uncorrectable error counter
92e6e08ca2 virtio: write back F_VERSION_1 before validate
86e3ad8b75 misc: fastrpc: Add missing lock before accessing find_vma()
3f0ca245a8 USB: serial: option: add prod. id for Quectel EG91
ecad614b0c USB: serial: option: add Telit LE910Cx composition 0x1204
bf26bc72dc USB: serial: option: add Quectel EC200S-CN module support
d4b77900cf USB: serial: qcserial: add EM9191 QDL support
3147f57215 Input: xpad - add support for another USB ID of Nacon GC-100
9d89e28711 usb: musb: dsps: Fix the probe error path
3b42751401 efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock()
5100dc4489 efi/cper: use stack buffer for error record decoding
2c5dd2a8af cb710: avoid NULL pointer subtraction
d40e193abd xhci: Enable trust tx length quirk for Fresco FL11 USB controller
dec944bb70 xhci: Fix command ring pointer corruption while aborting a command
dc3e0a20db xhci: guard accesses to ep_state in xhci_endpoint_reset()
0ee66290f0 USB: xhci: dbc: fix tty registration race
9f0d6c781c mei: me: add Ice Lake-N device id.
e4f7171c23 x86/resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails
0e32a2b85c btrfs: fix abort logic in btrfs_replace_file_extents
52924879ed btrfs: update refs for any root except tree log roots
352349aa49 btrfs: check for error when looking up inode during dir entry replay
4ed68471bc btrfs: deal with errors when adding inode reference during log replay
95d3aba5fe btrfs: deal with errors when replaying dir entry during log replay
206868a5b6 btrfs: unlock newly allocated extent buffer after error
e7e3ed5c92 drm/msm: Avoid potential overflow in timeout_to_jiffies()
a31c33aa80 arm64/hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE
0c97008859 csky: Fixup regs.sr broken in ptrace
5dab6e8f14 csky: don't let sigreturn play with priveleged bits of status register
e3c37135c9 clk: socfpga: agilex: fix duplicate s2f_user0_clk
faba7916cd s390: fix strrchr() implementation
7ef43c0f68 nds32/ftrace: Fix Error: invalid operands (*UND* and *UND* sections) for `^'
c3bf276fd7 ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW
1099953b32 ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo 13s Gen2
554a5027f5 ALSA: hda/realtek: Add quirk for TongFang PHxTxX1
0fa256509b ALSA: hda/realtek - ALC236 headset MIC recording issue
1e10c6bf15 ALSA: hda/realtek: Add quirk for Clevo X170KM-G
8a5f01f4b0 ALSA: hda/realtek: Complete partial device name to avoid ambiguity
c6e5290e6c ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254
9bb1659ac5 ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop
7680631ac7 ALSA: seq: Fix a potential UAF by wrong private_free call order
4aab156d30 ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl
f077d699c1 ALSA: usb-audio: Add quirk for VF0770
a336e746e3 Merge 5.10.74 into android12-5.10-lts
77434fe5a0 Linux 5.10.74
42b49f012b hwmon: (pmbus/ibm-cffps) max_power_out swap changes
bb893f0754 sched: Always inline is_percpu_thread()
bdae2a0834 perf/core: fix userpage->time_enabled of inactive events
57c7ca3d55 scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported"
d993d1e1c4 scsi: ses: Fix unsigned comparison with less than zero
621ddffb70 drm/amdgpu: fix gart.bo pin_count leak
a5ba615fbe net: sun: SUNVNET_COMMON should depend on INET
db868b4532 vboxfs: fix broken legacy mount signature checking
42c871d38e mac80211: check return value of rhashtable_init
bda06aff03 net: prevent user from passing illegal stab size
3d68c7b0ab hwmon: (ltc2947) Properly handle errors when looking for the external clock
194e8a4f0a m68k: Handle arrivals of multiple signals correctly
977aee5814 mac80211: Drop frames from invalid MAC address in ad-hoc mode
9ec9a975ea netfilter: nf_nat_masquerade: defer conntrack walk to work queue
5182d6db80 netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic
bcb647c1e1 ASoC: SOF: loader: release_firmware() on load failure to avoid batching
f6952b1e22 HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs
ddc4ba737b netfilter: ip6_tables: zero-initialize fragment offset
ddf026d6ae HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS
0bcfa99e8f ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic
14cbfeeee4 ext4: correct the error path of ext4_write_inline_data_end()
d7a15e1e4f ext4: check and update i_disksize properly
87b4a70303 Merge branch 'android12-5.10' into `android12-5.10-lts`
4b3fd2a81e Merge 5.10.73 into android12-5.10-lts
0268aa579b Linux 5.10.73
825c00c2ee x86/hpet: Use another crystalball to evaluate HPET usability
f2447f6587 x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=n
6bfe1f6fc8 x86/entry: Correct reference to intended CONFIG_64_BIT
5d637bc6f9 x86/sev: Return an error on a returned non-zero SW_EXITINFO1[31:0]
df121cf550 x86/Kconfig: Correct reference to MWINCHIP3D
d7c36115fb x86/platform/olpc: Correct ifdef symbol to intended CONFIG_OLPC_XO15_SCI
f73ca4961d pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init
411b38fe68 powerpc/64s: fix program check interrupt emergency stack path
18a2a2cafc powerpc/bpf: Fix BPF_SUB when imm == 0x80000000
a4037dded5 RISC-V: Include clone3() on rv32
29fdb11ca8 bpf, s390: Fix potential memory leak about jit_data
2c152d9da8 riscv/vdso: make arch_setup_additional_pages wait for mmap_sem for write killable
de834e12b9 i2c: mediatek: Add OFFSET_EXT_CONF setting back
f86de018fd i2c: acpi: fix resource leak in reconfiguration device addition
87990a60b4 powerpc/iommu: Report the correct most efficient DMA mask for PCI devices
985cca1ad1 net: prefer socket bound to interface when not in VRF
97aeed72af i40e: Fix freeing of uninitialized misc IRQ vector
2dc768a98c i40e: fix endless loop under rtnl
d3a07ca78a gve: report 64bit tx_bytes counter from gve_handle_report_stats()
35f6ddd934 gve: fix gve_get_stats()
9a04302252 rtnetlink: fix if_nlmsg_stats_size() under estimation
72c2a68f1d gve: Avoid freeing NULL pointer
5d903a694b gve: Correct available tx qpl check
f69556a420 drm/nouveau/debugfs: fix file release memory leak
65fff0a8ef drm/nouveau/kms/nv50-: fix file release memory leak
f86e19d918 drm/nouveau: avoid a use-after-free when BO init fails
008224cdc1 video: fbdev: gbefb: Only instantiate device when built for IP32
d2ccbaaa66 drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup
18d2568cc7 bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893
40a84fcae2 perf jevents: Tidy error handling
628b31d967 netlink: annotate data races around nlk->bound
144715fbab net: sfp: Fix typo in state machine debug string
3ec73ffeef net/sched: sch_taprio: properly cancel timer from taprio_destroy()
60955b65bd net: bridge: fix under estimation in br_get_linkxstats_size()
c480d15190 net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size()
cb8880680b ARM: imx6: disable the GIC CPU interface before calling stby-poweroff sequence
2b0035d105 dt-bindings: drm/bridge: ti-sn65dsi86: Fix reg value
10afd15972 arm64: dts: ls1028a: add missing CAN nodes
95ba03fb4c ptp_pch: Load module automatically if ID matches
442ea65d0c powerpc/fsl/dts: Fix phy-connection-type for fm1mac3
acff2d182c net_sched: fix NULL deref in fifo_set_limit()
0d2dd40a7b phy: mdio: fix memory leak
6e6f79e398 net/mlx5: E-Switch, Fix double allocation of acl flow counter
d70cb6c77a net/mlx5e: IPSEC RX, enable checksum complete
064faa8e8a bpf: Fix integer overflow in prealloc_elems_and_freelist()
d5f4b27c3c soc: ti: omap-prm: Fix external abort for am335x pruss
1d8f4447e8 bpf, arm: Fix register clobbering in div/mod implementation
29a19eaeb2 iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell XPS 15
6b0132f730 xtensa: call irqchip_init only when CONFIG_USE_OF is selected
3d288ed983 xtensa: use CONFIG_USE_OF instead of CONFIG_OF
997bec509a arm64: dts: qcom: pm8150: use qcom,pm8998-pon binding
fbca14abc1 ath5k: fix building with LEDS=m
8aef3824e9 PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus
d9b838ae39 ARM: dts: imx6qdl-pico: Fix Ethernet support
9e99ad4194 ARM: dts: imx: Fix USB host power regulator polarity on M53Menlo
2ba34cf0c1 ARM: dts: imx: Add missing pinctrl-names for panel on M53Menlo
8f977e97b2 soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment
14f52004bd ARM: at91: pm: do not panic if ram controllers are not enabled
d89a313a57 ARM: dts: qcom: apq8064: Use 27MHz PXO clock as DSI PLL reference
25ac88e601 soc: qcom: socinfo: Fixed argument passed to platform_set_data()
ab8073794b bus: ti-sysc: Add break in switch statement in sysc_init_soc()
427faa29e0 riscv: Flush current cpu icache before other cpus
05287407de ARM: dts: qcom: apq8064: use compatible which contains chipid
ac06fe40e8 ARM: dts: imx6dl-yapp4: Fix lp5562 LED driver probe
71d3ce62ac ARM: dts: omap3430-sdp: Fix NAND device node
f9a855d1bc xen/balloon: fix cancelled balloon action
9aac782ab0 SUNRPC: fix sign error causing rpcsec_gss drops
8f174a208c nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
12d4b17902 nfsd: fix error handling of register_pernet_subsys() in init_nfsd()
1bc2f315a2 ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO
9763ffd4da ovl: fix missing negative dentry check in ovl_rename()
1500f0c836 mmc: sdhci-of-at91: replace while loop with read_poll_timeout
3a0feae5f6 mmc: sdhci-of-at91: wait for calibration done before proceed
e5cb3680b9 mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk
13d17cc717 xen/privcmd: fix error handling in mmap-resource processing
de1e8bd36a drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows
1d4e9f27d2 usb: typec: tcpm: handle SRC_STARTUP state if cc changes
feb3fe702a USB: cdc-acm: fix break reporting
fc8b3e838b USB: cdc-acm: fix racy tty buffer accesses
b3265b88e8 usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle
16d728110b Partially revert "usb: Kconfig: using select for USB_COMMON dependency"
56596148ae ANDROID: Different fix for KABI breakage in 5.10.71 in struct sock
79f3d20a45 ANDROID: ABI: update .xml file with new symbols to track
3cce4e4a1b Merge branch 'android12-5.10' into `android12-5.10-lts`
d306ef529c Merge 5.10.72 into android12-5.10-lts
5aa003b381 Linux 5.10.72
387aecdab7 libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD.
02bf504bc3 perf/x86: Reset destroy callback on event init failure
b56475c29b KVM: x86: nSVM: restore int_vector in svm_clear_vintr
ae34f26d4a kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[]
6d0ff92059 KVM: do not shrink halt_poll_ns below grow_start
b8add3f47a selftests: KVM: Align SMCCC call with the spec in steal_time
352b02562a tools/vm/page-types: remove dependency on opt_file for idle page tracking
84778fd66d smb3: correct smb3 ACL security descriptor
a7be240d17 irqchip/gic: Work around broken Renesas integration
8724a2a0e6 scsi: ses: Retry failed Send/Receive Diagnostic commands
2e28f7dd37 thermal/drivers/tsens: Fix wrong check for tzd in irq handlers
7a670cfb0f nvme-fc: avoid race between time out and tear down
c251d023ed nvme-fc: update hardware queues before using them
c4506403e1 selftests:kvm: fix get_warnings_count() ignoring fscanf() return warn
bcc4b4de63 selftests: be sure to make khdr before other targets
6a4aaf1d84 habanalabs/gaudi: fix LBW RR configuration
2754fa3b73 usb: dwc2: check return value after calling platform_get_resource()
ed6574d484 usb: testusb: Fix for showing the connection speed
60df9f5556 scsi: sd: Free scsi_disk device via put_device()
76c7063c74 ext2: fix sleeping in atomic bugs on error
b114f2d18e sparc64: fix pci_iounmap() when CONFIG_PCI is not set
fdfb3bc873 xen-netback: correct success/error reporting for the SKB-with-fraglist case
a41938d072 net: mdio: introduce a shutdown method to mdio device drivers
63c89930d4 btrfs: fix mount failure due to past and transient device flush error
50628b06e6 btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper error handling
83050cc239 nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN
f986cf2702 platform/x86: touchscreen_dmi: Update info for the Chuwi Hi10 Plus (CWI527) tablet
e561150324 platform/x86: touchscreen_dmi: Add info for the Chuwi HiBook (CWI514) tablet
2ababcd8c2 spi: rockchip: handle zero length transfers without timing out
627dc3c79c ANDROID: Fix up KABI breakage in 5.10.71 in struct sock
c23269dad5 Merge 5.10.71 into android12-5.10-lts
5cd40b137c Linux 5.10.71
96f439a7ed netfilter: nf_tables: Fix oversized kvmalloc() calls
e2d192301a netfilter: conntrack: serialize hash resizes and cleanups
deb2949417 KVM: x86: Handle SRCU initialization failure during page track init
f7ac4d24e1 HID: usbhid: free raw_report buffers in usbhid_stop
57a269a1b1 mm: don't allow oversized kvmalloc() calls
da5b8b9319 netfilter: ipset: Fix oversized kvmalloc() calls
dedfc35a2d HID: betop: fix slab-out-of-bounds Write in betop_probe
17ccc64e4f crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
28f0fdbac0 usb: hso: remove the bailout parameter
4ad4852b9a ASoC: dapm: use component prefix when checking widget names
5c3a90b6ff net: udp: annotate data race around udp_sk(sk)->corkflag
a7f4c633ae HID: u2fzero: ignore incomplete packets without data
3770e21f60 ext4: fix potential infinite loop in ext4_dx_readdir()
a63474dbf6 ext4: add error checking to ext4_ext_replay_set_iblocks()
9ccf35492b ext4: fix reserved space counter leakage
dc0942168a ext4: limit the number of blocks in one ADD_RANGE TLV
d11502fa26 ext4: fix loff_t overflow in ext4_max_bitmap_size()
7cea848678 ipack: ipoctal: fix module reference leak
843efca98e ipack: ipoctal: fix missing allocation-failure check
67d1df6610 ipack: ipoctal: fix tty-registration error handling
f46e5db92f ipack: ipoctal: fix tty registration race
5f6a309a69 ipack: ipoctal: fix stack information leak
3bef1b7242 debugfs: debugfs_create_file_size(): use IS_ERR to check for error
15fd3954bc elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
011b4de950 nvme: add command id quirk for apple controllers
44c600a57d hwmon: (pmbus/mp2975) Add missed POUT attribute for page 1 mp2975 controller
7fc5f60a01 perf/x86/intel: Update event constraints for ICX
3db53827a0 af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
d0d520c19e net: sched: flower: protect fl_walk() with rcu
e63f6d8fe7 net: phy: bcm7xxx: Fixed indirect MMD operations
071febc37e net: hns3: fix always enable rx vlan filter problem after selftest
85e4f5d28d net: hns3: reconstruct function hns3_self_test
8e89876c84 net: hns3: fix prototype warning
d4a14faf79 net: hns3: fix show wrong state when add existing uc mac address
64dae9551f net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and HCLGE_FLAG_DCB_ENABLE
8d3d27664e net: hns3: keep MAC pause mode when multiple TCs are enabled
f8ba689cb6 net: hns3: do not allow call hns3_nic_net_open repeatedly
20f6c4a31a ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup
16138cf938 scsi: csiostor: Add module softdep on cxgb4
0306a2c7df Revert "block, bfq: honor already-setup queue merges"
1f2ca30fbd net: ks8851: fix link error
f1dd6e10f0 selftests, bpf: test_lwt_ip_encap: Really disable rp_filter
4967ae9ab4 selftests, bpf: Fix makefile dependencies on libbpf
59efda5073 bpf: Exempt CAP_BPF from checks against bpf_jit_limit
f908072391 RDMA/hns: Fix inaccurate prints
7e3eda32b8 e100: fix buffer overrun in e100_get_regs
f2edf80cdd e100: fix length calculation in e100_get_regs_len
c20a0ad7b6 dsa: mv88e6xxx: Include tagger overhead when setting MTU for DSA and CPU ports
7b771b1222 dsa: mv88e6xxx: Fix MTU definition
ee4d0495a6 dsa: mv88e6xxx: 6161: Use chip wide MAX MTU
d35d95e8b9 drm/i915/request: fix early tracepoints
8321738c6e smsc95xx: fix stalled rx after link change
8de12ad916 net: ipv4: Fix rtnexthop len when RTA_FLOW is present
b22c5e2c8e net: enetc: fix the incorrect clearing of IF_MODE bits
5ee40530b0 hwmon: (tmp421) fix rounding for negative values
89d96f147d hwmon: (tmp421) report /PVLD condition as fault
560271d09f mptcp: don't return sockets in foreign netns
9c6591ae8e sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
2c204cf594 mac80211-hwsim: fix late beacon hrtimer handling
8576e72ac5 mac80211: mesh: fix potentially unaligned access
1282bb0083 mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
3748871e12 mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
76bbb482d3 hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs
c61736a994 bpf, mips: Validate conditional branch offsets
3f4e68902d RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure
62ba3c5010 IB/cma: Do not send IGMP leaves for sendonly Multicast groups
d93f65586c bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog
12cbdaeeb5 ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
9f382e1edf drm/amdgpu: correct initial cp_hqd_quantum for gfx9
c331fad63b drm/amd/display: Pass PCI deviceid into DC
0a16c9751e RDMA/cma: Do not change route.addr.src_addr.ss_family
31a13f039e media: ir_toy: prevent device from hanging during transmit
249e5e5a50 KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer to KVM guest
3778511dfc KVM: nVMX: Filter out all unsupported controls when eVMCS was activated
4ed671e6bc KVM: x86: nSVM: don't copy virt_ext from vmcb12
bebabb76ad KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect()
782122ae7d x86/kvmclock: Move this_cpu_pvti into kvmclock.h
57de2dcb18 mac80211: fix use-after-free in CCMP/GCMP RX
201ba843fe scsi: ufs: Fix illegal offset in UPIU event trace
bd4e446a69 gpio: pca953x: do not ignore i2c errors
516d905503 hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field
1499bb2c3a hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field
7c4fd5de39 hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field
196dabd96b hwmon: (tmp421) handle I2C errors
23a6dfa10f fs-verity: fix signed integer overflow with i_size near S64_MAX
d1d0016e4a ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect
e9edc7bc61 ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops.
23115ca7d2 usb: cdns3: fix race condition before setting doorbell
3945c48136 cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
2193cf76f4 scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS
a7d4fc8440 cpufreq: schedutil: Use kobject release() method to free sugov_tunables
d570c48dd3 tty: Fix out-of-bound vmalloc access in imageblit
87b6b38b53 ANDROID: GKI: update .xml file with new symbols to track
7d8687d4ef Merge branch 'android12-5.10' into `android12-5.10-lts`
dcf0824c26 Revert "treewide: Change list_sort to use const pointers"
d69751309b Merge 5.10.70 into android12-5.10-lts
33740c9227 Merge 5.10.69 into android12-5.10-lts
beafee90ec Merge 5.10.68 into android12-5.10-lts
91607afb55 Revert "crypto: public_key: fix overflow during implicit conversion"
0dae5f42c0 Revert "drm/vmwgfx: fix potential UAF in vmwgfx_surface.c"
5b4909f961 Revert "drm: serialize drm_file.master with a new spinlock"
49faae8510 Revert "drm: protect drm_master pointers in drm_lease.c"
08ed4cb090 Merge 5.10.67 into android12-5.10-lts
f93026b28e Linux 5.10.70
5909429605 qnx4: work around gcc false positive warning bug
35c0dfbbd3 xen/balloon: fix balloon kthread freezing
8373d58c89 USB: serial: cp210x: fix dropped characters with CP2102
67cdb51ab5 thermal/drivers/int340x: Do not set a wrong tcc offset on resume
cc71740ee4 EDAC/dmc520: Assign the proper type to dimm->edac_mode
9afad85a43 EDAC/synopsys: Fix wrong value type assignment for edac_mode
db76cb05c0 spi: Fix tegra20 build with CONFIG_PM=n
890e25c424 net: 6pack: Fix tx timeout and slot time
044513c1fa alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile
0a511ba6d2 arm64: Mark __stack_chk_guard as __ro_after_init
fec3bd622d parisc: Use absolute_pointer() to define PAGE0
61454e7fd6 qnx4: avoid stringop-overread errors
5520d27f02 sparc: avoid stringop-overread errors
8d768beaf0 net: i825xx: Use absolute_pointer for memcpy from fixed memory location
e99f903271 compiler.h: Introduce absolute_pointer macro
f58d305887 blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd
1ef68b84bc block: flush the integrity workqueue in blk_integrity_unregister
1963bdb748 block: check if a profile is actually registered in blk_integrity_unregister
526261c1b7 amd/display: downgrade validation failure log level
54a4860c62 sparc32: page align size in arch_dma_alloc
ecf0dc5a90 nvme-rdma: destroy cm id before destroy qp to avoid use after free
2a08960577 nvme-multipath: fix ANA state updates when a namespace is not present
372d3e6ea1 xen/balloon: use a kernel thread instead a workqueue
6345a0bee8 bpf: Add oversize check before call kvcalloc()
e567d33508 cpufreq: intel_pstate: Override parameters if HWP forced by BIOS
9561bb9887 ipv6: delay fib6_sernum increase in fib6_add
31df1d037c m68k: Double cast io functions to unsigned long
cc3dd119d3 blk-mq: avoid to iterate over stale request
de7e030033 net: stmmac: allow CSR clock of 300MHz
7721221e87 net: macb: fix use after free on rmmod
a632288053 net: phylink: Update SFP selected interface on advertising changes
3815fe7371 blktrace: Fix uaf in blk_trace access after removing by sysfs
ce092350b4 io_uring: put provided buffer meta data under memcg accounting
7040b37a96 x86/asm: Fix SETZ size enqcmds() build failure
54e85b6c28 x86/asm: Add a missing __iomem annotation in enqcmds()
b18ba3f477 md: fix a lock order reversal in md_alloc
568662e37f irqchip/gic-v3-its: Fix potential VPE leak on error
af7c9ffe2b irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build
0595fc4794 scsi: lpfc: Use correct scnprintf() limit
cb948b158a scsi: qla2xxx: Restore initiator in dual mode
3d42ed6b79 cifs: fix a sign extension bug
8cba4c2698 thermal/core: Potential buffer overflow in thermal_build_list_of_policies()
215df43499 nvme: keep ctrl->namespaces ordered
55e6f8b3c0 treewide: Change list_sort to use const pointers
419fab1cb0 nvme-tcp: fix incorrect h2cdata pdu offset accounting
c6ecdcba9d fpga: machxo2-spi: Fix missing error code in machxo2_write_complete()
5c6bfde245 fpga: machxo2-spi: Return an error on failure
4ea4925c70 tty: synclink_gt: rename a conflicting function name
56a8f0b18f tty: synclink_gt, drop unneeded forward declarations
c64e6c307a scsi: target: Fix the pgr/alua_support_store functions
2d03054251 scsi: iscsi: Adjust iface sysfs attr detection
0032f8b3cf atlantic: Fix issue in the pm resume flow.
c2598bce41 net/mlx4_en: Don't allow aRFS for encapsulated packets
b4e54f5f42 qed: rdma - don't wait for resources under hw error recovery flow
1bba406c07 gpio: uniphier: Fix void functions to remove return value
db94f89e1d s390/qeth: fix NULL deref in qeth_clear_working_pool_list()
3aa50241e1 kselftest/arm64: signal: Skip tests if required features are missing
91d4da33c3 kselftest/arm64: signal: Add SVE to the set of features we can check for
2eaa39d83e net: dsa: realtek: register the MDIO bus under devres
43c880b860 net: dsa: don't allocate the slave_mii_bus using devres
b4561bd29e net/smc: fix 'workqueue leaked lock' in smc_conn_abort_work
8a00c832ef net/smc: add missing error check in smc_clc_prfx_set()
4e0fd1d795 net: hns3: check queue id range before using
ca435999bc net: hns3: fix change RSS 'hfunc' ineffective issue
1365a0dc55 bnxt_en: Fix TX timeout when TX ring size is set to the smallest
d5afe3cf52 enetc: Fix uninitialized struct dim_sample field usage
6c3f1b741c enetc: Fix illegal access when reading affinity_hint
117661cb9d platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR()
22538c1bde afs: Fix updating of i_blocks on file/dir extension
55352944b4 afs: Fix incorrect triggering of sillyrename on 3rd-party invalidation
8d6a21e4cd comedi: Fix memory leak in compat_insnlist()
43241a6c6e net: hso: fix muxed tty registration
68d4fbe622 drm/amd/pm: Update intermediate power state for SI
7dc9225fcd scsi: sd_zbc: Ensure buffer size is aligned to SECTOR_SIZE
3dfffcd260 serial: mvebu-uart: fix driver's tx_empty callback
640946fc56 serial: 8250: 8250_omap: Fix RX_LVL register offset
0ea9ac731a xhci: Set HCD flag to defer primary roothub registration
80af86c122 btrfs: prevent __btrfs_dump_space_info() to underflow its free space
8326be9e51 erofs: fix up erofs_lookup tracepoint
91e4ad05bf mcb: fix error handling in mcb_alloc_bus()
2c28bb016b USB: serial: option: add device id for Foxconn T99W265
600b19610a USB: serial: option: remove duplicate USB device ID
0daf57973f USB: serial: option: add Telit LN920 compositions
dc131d3f13 USB: serial: mos7840: remove duplicated 0xac24 device ID
d58fc9e9c1 usb: core: hcd: Add support for deferring roothub registration
996f7c4a1f usb: dwc3: core: balance phy init and exit
a05ff80001 Re-enable UAS for LaCie Rugged USB3-FW with fk quirk
b9e697e60c staging: greybus: uart: fix tty use after free
d5b0473707 binder: make sure fd closes complete
302e60e26a Revert "USB: bcma: Add a check for devm_gpiod_get"
b33b3db476 USB: cdc-acm: fix minor-number release
0809b8576f USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter
a34d6ef0c7 usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c
f792828491 xen/x86: fix PV trap handling on secondary processors
93028da5e9 cifs: fix incorrect check for null pointer in header_assemble
5940e22528 usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned()
d071c7fd45 usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA
5f4bfac261 usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave
1fbd7eb385 usb: gadget: r8a66597: fix a loop in set_feature()
838297222b mm: fix uninitialized use in overcommit_policy_handler
437be4d6fa ocfs2: drop acl cache for directories too
31bd6cd06a PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
0f8a659a24 ANDROID: GKI: update the .xml file after modifying the ANDROID_KABI_USE() macro
119f513123 ANDROID: GKI: rework the ANDROID_KABI_USE() macro to not use __UNIQUE()
f04036b092 ANDROID: GKI: update .xml file to handle previous issues
5f4196eaa9 Linux 5.10.69
7c09505e9e drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV
83a3cb200e sched/idle: Make the idle timer expire in hard interrupt context
647c19bc61 rtc: rx8010: select REGMAP_I2C
9a14014df7 blk-mq: allow 4x BLK_MAX_REQUEST_COUNT at blk_plug for multiple_queues
23dfb959c6 blk-throttle: fix UAF by deleteing timer in blk_throtl_exit()
a2551d0a29 pwm: stm32-lp: Don't modify HW state in .remove() callback
a6a2b36a8c pwm: rockchip: Don't modify HW state in .remove() callback
0a2ea5c0e5 pwm: img: Don't modify HW state in .remove() callback
db8838e48a habanalabs: add validity check for event ID received from F/W
d7736e2faa nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group
0f36028d01 nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group
5770b54b11 nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group
5acb21e30d nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group
0480f7a480 nilfs2: fix NULL pointer in nilfs_##name##_attr_release
d95b50ff07 nilfs2: fix memory leak in nilfs_sysfs_create_device_group
aa1af89a66 btrfs: fix lockdep warning while mounting sprout fs
c43803c1aa btrfs: update the bdev time directly when closing
921ef7cfef ceph: lockdep annotations for try_nonblocking_invalidate
487ead34a2 ceph: remove the capsnaps when removing caps
386fd6fd01 ceph: request Fw caps before updating the mtime in ceph_write_iter
b26ced2625 dmaengine: xilinx_dma: Set DMA mask for coherent APIs
9c1ea85377 dmaengine: ioat: depends on !UML
35492619e0 dmaengine: sprd: Add missing MODULE_DEVICE_TABLE
c12cf7f9af dmaengine: idxd: depends on !UML
b4bb0b171b iommu/amd: Relocate GAMSup check to early_enable_iommus
2a07348e98 parisc: Move pci_dev_is_behind_card_dino to where it is used
ca907291e1 dma-buf: DMABUF_MOVE_NOTIFY should depend on DMA_SHARED_BUFFER
b9a1526d51 drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION()
45bd9dd1be drm/amdgpu: Disable PCIE_DPM on Intel RKL Platform
c9538018cb thermal/core: Fix thermal_cooling_device_register() prototype
d1f9ecc00d tools/bootconfig: Fix tracing_on option checking in ftrace2bconf.sh
912afe602e Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH
e418ce8b8d ceph: cancel delayed work instead of flushing on mdsc teardown
8193ad306e ceph: allow ceph_put_mds_session to take NULL or ERR_PTR
41aa215734 platform/chrome: cros_ec_trace: Fix format warnings
113a69460d platform/chrome: sensorhub: Add trace events for sample
48271d10bf dmaengine: idxd: fix wq slot allocation index check
777344da34 pwm: mxs: Don't modify HW state in .probe() after the PWM chip was registered
322b70b522 pwm: lpc32xx: Don't modify HW state in .probe() after the PWM chip was registered
c63df77c40 PM: sleep: core: Avoid setting power.must_resume to false
74190973ab profiling: fix shift-out-of-bounds bugs
0796d99c1b nilfs2: use refcount_dec_and_lock() to fix potential UAF
30417cbecc prctl: allow to setup brk for et_dyn executables
e464b3876b 9p/trans_virtio: Remove sysfs file on probe failure
375e779ec3 thermal/drivers/exynos: Fix an error code in exynos_tmu_probe()
38ab04186f perf tools: Allow build-id with trailing zeros
87c4144450 tools lib: Adopt memchr_inv() from kernel
ebcd3fd920 perf test: Fix bpf test sample mismatch reporting
fa64b08931 dmaengine: acpi: Avoid comparison GSI with Linux vIRQ
9d49973b08 um: virtio_uml: fix memory leak on init failures
5d0e6a5e44 coredump: fix memleak in dump_vma_snapshot()
6b24588708 staging: rtl8192u: Fix bitwise vs logical operator in TranslateRxSignalStuff819xUsb()
ccb79116c3 sctp: add param size validation for SCTP_PARAM_SET_PRIMARY
ffca467668 sctp: validate chunk size in __rcv_asconf_lookup
473cea4983 Revert "net/mlx5: Register to devlink ingress VLAN filter trap"
5ce134e65f ARM: 9098/1: ftrace: MODULE_PLT: Fix build problem without DYNAMIC_FTRACE
f91d25a7c8 ARM: 9079/1: ftrace: Add MODULE_PLTS support
ad00533858 ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link()
ce90c6706d ARM: 9077/1: PLT: Move struct plt_entries definition to header
eb46d7c8ae ARM: Qualify enabling of swiotlb_init()
79286ea830 s390/pci_mmio: fully validate the VMA before calling follow_pte()
74d54e5ceb console: consume APC, DM, DCS
9493e92a39 PCI: aardvark: Fix reporting CRS value
9e766b86a9 PCI: pci-bridge-emul: Add PCIe Root Capabilities Register
1b6d7b3a21 ANDROID: GKI: Update symbol list for new modules
4d8524048a Linux 5.10.68
a23d357621 net: dsa: bcm_sf2: Fix array overrun in bcm_sf2_num_active_ports()
9f2972e151 bnxt_en: Fix error recovery regression
619d747c18 x86/mce: Avoid infinite loop for copy from user recovery
47bc9c3929 net: renesas: sh_eth: Fix freeing wrong tx descriptor
b2f9b7455b mfd: lpc_sch: Rename GPIOBASE to prevent build error
027c44b8c8 mfd: lpc_sch: Partially revert "Add support for Intel Quark X1000"
52a7e66671 bnxt_en: Fix possible unintended driver initiated error recovery
9a3f52f73c bnxt_en: Improve logging of error recovery settings information.
639a2eddb7 bnxt_en: Convert to use netif_level() helpers.
01cad477a9 bnxt_en: Consolidate firmware reset event logging.
fad75e0463 bnxt_en: log firmware debug notifications
f90a34faba bnxt_en: Fix asic.rev in devlink dev info command
7245023184 bnxt_en: fix stored FW_PSID version masks
eb635e008c net: dsa: b53: Fix IMP port setup on BCM5301x
87b34cd648 ip_gre: validate csum_start only on pull
9c98d2bd14 qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
8c01c620ae fq_codel: reject silly quantum parameters
6e2d36f2b1 netfilter: socket: icmp6: fix use-after-scope
c361c95560 net: dsa: b53: Set correct number of ports in the DSA struct
0db7e0d9f6 net: dsa: b53: Fix calculating number of switch ports
f89b0d032f net: hso: add failure handler for add_net_device
f450958f7f selftests: mptcp: clean tmp files in simult_flows
5711ced58e net: dsa: tag_rtl4_a: Fix egress tags
b167a0cec1 gpio: mpc8xxx: Use 'devm_gpiochip_add_data()' to simplify the code and avoid a leak
f86956143d gpio: mpc8xxx: Fix a resources leak in the error handling path of 'mpc8xxx_probe()'
c2b52963fd perf bench inject-buildid: Handle writen() errors
5a20adc388 perf unwind: Do not overwrite FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64}
f5176a0798 ARC: export clear_user_page() for modules
9da1fb128c mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()'
5402b31c0c PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
a957d82b23 KVM: arm64: Handle PSCI resets before userspace touches vCPU state
53921242cf KVM: arm64: Fix read-side race on updates to vcpu reset state
b9b89da56a mtd: mtdconcat: Check _read, _write callbacks existence before assignment
812cbb143c mtd: mtdconcat: Judge callback existence based on the master
e8dfc446a1 tracing/boot: Fix a hist trigger dependency for boot time tracing
87479b10eb mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set
f10f727cf9 PCI: Fix pci_dev_str_match_path() alloc while atomic bug
ed44be1cbe KVM: arm64: Restrict IPA size to maximum 48 bits on 4K and 16K page size
62f813769f netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
1cf43a1e57 netfilter: Fix fall-through warnings for Clang
9e89c22d1c PCI: iproc: Fix BCMA probe resource handling
b1f3be0c30 PCI: of: Don't fail devm_pci_alloc_host_bridge() on missing 'ranges'
063c3d980d backlight: ktd253: Stabilize backlight
00303e4592 mfd: axp20x: Update AXP288 volatile ranges
ab7cf22501 s390/bpf: Fix branch shortening during codegen pass
4320c222c2 s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant
d92d3a9c2b s390/bpf: Fix optimizing out zero-extensions
4a93393203 NTB: perf: Fix an error code in perf_setup_inbuf()
ce660d6dfc NTB: Fix an error code in ntb_msit_probe()
e76ccbdedb ethtool: Fix an error code in cxgb2.c
70ac967a7b PCI: ibmphp: Fix double unmap of io_mem
9ae759a36b block, bfq: honor already-setup queue merges
7f2b3242f0 net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
ca8ecd7444 Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6
c422c55505 octeontx2-af: Add additional register check to rvu_poll_reg()
1cac475eeb watchdog: Start watchdog in watchdog_set_last_hw_keepalive only if appropriate
e5609d3fd5 PCI: Add ACS quirks for Cavium multi-function devices
365cdfcc6e PCI: j721e: Add PCIe support for AM64
81381b72f4 PCI: j721e: Add PCIe support for J7200
4892b1515b PCI: cadence: Add quirk flag to set minimum delay in LTSSM Detect.Quiet state
a83e032cc4 PCI: cadence: Use bitfield for *quirk_retrain_flag* instead of bool
3aedfe4b08 tracing/probes: Reject events which have the same name of existing one
75420f9400 PCI: rcar: Fix runtime PM imbalance in rcar_pcie_ep_probe()
b6352e2e27 mfd: Don't use irq_create_mapping() to resolve a mapping
aa638669c8 PCI: tegra: Fix OF node reference leak
d5c5d1b141 PCI: tegra194: Fix MSI-X programming
13f366bab0 PCI: tegra194: Fix handling BME_CHGED event
b7d4f310bb fuse: fix use after free in fuse_read_interrupt()
03cc3a2923 PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms
7a44361a1f mfd: db8500-prcmu: Adjust map to reality
619f137ffd dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
49cf30ebb3 mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
aa39eb744a net: hns3: fix the timing issue of VF clearing interrupt sources
ad47e09221 net: hns3: disable mac in flr process
b76522c7c3 net: hns3: change affinity_mask to numa node range
34fc06d047 net: hns3: pad the short tunnel frame before sending to hardware
0511d099db bnxt_en: make bnxt_free_skbs() safe to call after bnxt_free_mem()
49eff4ab7d KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode changing registers
e68795c110 ibmvnic: check failover_pending in login response
aeb67214ce dt-bindings: arm: Fix Toradex compatible typo
0ab9981fa0 udp_tunnel: Fix udp_tunnel_nic work-queue type
5221e66329 qed: Handle management FW error
e00eae1d6b selftest: net: fix typo in altname test
53947b68c5 tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
35d3ab2ea2 x86/uaccess: Fix 32-bit __get_user_asm_u64() when CC_HAS_ASM_GOTO_OUTPUT=y
cf6f29bb2c net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup
df38f941a7 net/af_unix: fix a data-race in unix_dgram_poll
cad96d0e50 vhost_net: fix OoB on sendmsg() failure.
7843861e21 gen_compile_commands: fix missing 'sys' package
983ef86629 net: ipa: initialize all filter table slots
c5102ced8a events: Reuse value read using READ_ONCE instead of re-reading it
8f8ad122ff nvme-tcp: fix io_work priority inversion
c586bc31d5 net/mlx5: Fix potential sleeping in atomic context
29a5af9112 net/mlx5: FWTrace, cancel work on alloc pd error flow
229e9293b2 perf machine: Initialize srcline string member in add_location struct
33c983f7a1 drm/rockchip: cdn-dp-core: Make cdn_dp_core_resume __maybe_unused
fd9ed47fe6 tipc: increase timeout in tipc_sk_enqueue()
abe460eb6f r6040: Restore MDIO clock frequency after MAC reset
edfab735d5 net/l2tp: Fix reference count leak in l2tp_udp_recv_core
6c3cb65d56 dccp: don't duplicate ccid when cloning dccp sock
f6f8076655 ptp: dp83640: don't define PAGE0
bd6d9a0dd4 net-caif: avoid user-triggerable WARN_ON(1)
855c17ffa6 net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert
c5c9ee2d36 ethtool: Fix rxnfc copy to user buffer overflow
ee3ffd56b4 tipc: fix an use-after-free issue in tipc_recvmsg
12551b75b0 x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
6672dc68e2 x86/pat: Pass valid address to sanitize_phys()
0346f8a2c5 s390/sclp: fix Secure-IPL facility detection
cc9d96c9f9 drm/etnaviv: add missing MMU context put when reaping MMU mapping
ea995e8a62 drm/etnaviv: reference MMU context when setting up hardware state
660dfbf208 drm/etnaviv: fix MMU context leak on GPU reset
22163efedc drm/etnaviv: exec and MMU state is lost when resetting the GPU
6b1c223d8a drm/etnaviv: keep MMU context across runtime suspend/resume
c63e6e0951 drm/etnaviv: stop abusing mmu_context as FE running marker
cf24bd826e drm/etnaviv: put submit prev MMU context when it exists
0759f64847 drm/etnaviv: return context from etnaviv_iommu_context_get
8f95553f00 drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10
87f7032dc2 PCI: Add AMD GPU multi-function power dependencies
cd64b416ae PM: base: power: don't try to use non-existing RTC for storing data
a67e7cdbc6 arm64/sve: Use correct size when reinitialising SVE state
84da60070c bnx2x: Fix enabling network interfaces without VFs
1a5a3ba21a xen: reset legacy rtc flag for PV domU
ce8f81b76d io_uring: ensure symmetry in handling iter types in loop_rw_iter()
88f3d951e2 btrfs: fix upper limit for max_inline for page size 64K
575279059e drm/bridge: lt9611: Fix handling of 4k panels
faf816b0f8 Linux 5.10.67
ad3ea16746 fanotify: limit number of event merge attempts
412974e75f drm/panfrost: Clamp lock region to Bifrost minimum
8976e09443 drm/panfrost: Use u64 for size in lock_region
95251e6833 drm/panfrost: Simplify lock_region calculation
b80a99e048 drm/amd/display: Update bounding box states (v2)
583c4f3d09 drm/amd/display: Update number of DCN3 clock states
7b1abace16 drm/amdgpu: Fix BUG_ON assert
c29485e34e drm/panfrost: Make sure MMU context lifetime is not bound to panfrost_priv
bb693c114e drm/dp_mst: Fix return code on sideband message failure
84cac4f806 drm/msi/mdp4: populate priv->kms in mdp4_kms_init
be1fcecfc1 drm/mgag200: Select clock in PLL update functions
d0aaea1f11 net: dsa: lantiq_gswip: fix maximum frame length
5944d0e2b0 lib/test_stackinit: Fix static initializer test
00cdb2fb4d platform/chrome: cros_ec_proto: Send command again when timeout occurs
b2e72e53cd libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind
6d86634d7b memcg: enable accounting for pids in nested pid namespaces
388f12dabb mm,vmscan: fix divide by zero in get_scan_count
2d2d8b0eca mm/hugetlb: initialize hugetlb_usage in mm_init
ce75a6b399 mm/hmm: bypass devmap pte when all pfn requested flags are fulfilled
e1fa3b2b60 hugetlb: fix hugetlb cgroup refcounting during vma split
27dd91221b s390/pv: fix the forcing of the swiotlb
086faa4a2e cpufreq: powernv: Fix init_chip_info initialization in numa=off
55be9eb193 scsi: qla2xxx: Sync queue idx with queue_pair_map idx
9c8414325e scsi: qla2xxx: Changes to support kdump kernel
137dafa722 scsi: BusLogic: Fix missing pr_cont() use
69775e4e17 ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()
7a5756e905 parisc: fix crash with signals and alloca
9a4e7f9038 io_uring: remove duplicated io_size from rw
6930a2a5be fs/io_uring Don't use the return value from import_iovec().
2c304c65de net: hns3: clean up a type mismatch warning
fb1ee02787 net: w5100: check return value after calling platform_get_resource()
c49a52046d fix array-index-out-of-bounds in taprio_change
a4301d06a0 net: fix NULL pointer reference in cipso_v4_doi_free
5ed5d594d9 ath9k: fix sleeping in atomic context
aa3708236e ath9k: fix OOB read ar9300_eeprom_restore_internal
be457b27dd wcn36xx: Fix missing frame timestamp for beacon/probe-resp
b1d547f2f5 selftests/bpf: Fix potential unreleased lock
3ad66d6782 parport: remove non-zero check on count
1e93025378 net/mlx5: DR, Enable QP retransmission
9c5c65ecbd net/mlx5: DR, fix a potential use-after-free bug
4bbf0a9d90 iwlwifi: mvm: Fix scan channel flags settings
a693aff5e8 iwlwifi: fw: correctly limit to monitor dump
4ed6510e05 iwlwifi: mvm: fix access to BSS elements
9e80a3d88f iwlwifi: mvm: avoid static queue number aliasing
3ed8982df5 iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed
608c8359c5 iwlwifi: pcie: free RBs during configure
eb04c51a43 nfsd: fix crash on LOCKT on reexported NFSv3
0e9f449221 drm/amdkfd: Account for SH/SE count when setting up cu masks.
27d4a96add ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
969eddc3b4 ASoC: rockchip: i2s: Fix regmap_ops hang
7344a8a801 usbip:vhci_hcd USB port can get stuck in the disabled state
29c8f13a34 usbip: give back URBs for unsent unlink requests during cleanup
8de01a896c usb: musb: musb_dsps: request_irq() after initializing musb
c0751eeb93 Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
ba2faddf1f cifs: fix wrong release in sess_alloc_buffer() failed path
7c7d6c9cd8 mmc: core: Return correct emmc response in case of ioctl error
d1e382a04a selftests/bpf: Enlarge select() timeout for test_maps
3aab5bffdd mmc: rtsx_pci: Fix long reads when clock is prescaled
7f43da79eb mmc: sdhci-of-arasan: Check return value of non-void funtions
834ecf61ce mmc: sdhci-of-arasan: Modified SD default speed to 19MHz for ZynqMP
1a40e60e2a of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
be69ed7bb9 ASoC: Intel: Skylake: Fix passing loadable flag for module
4a48ed4794 ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER
d72afec087 soundwire: intel: fix potential race condition during power down
b225eeaf3a btrfs: tree-log: check btrfs_lookup_data_extent return value
87ae522e46 m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch
c10b1afc2f octeontx2-pf: Fix NIX1_RX interface backpressure
6d657f1fa1 rtw88: wow: fix size access error of probe request
aa82a11176 rtw88: wow: build wow function only if CONFIG_PM is on
2fd1964f75 rtw88: use read_poll_timeout instead of fixed sleep
9baf6f8ca2 rtl8xxxu: Fix the handling of TX A-MPDU aggregation
756924bc18 drm/exynos: Always initialize mapping in exynos_drm_register_dma()
9ce6e29375 lockd: lockd server-side shouldn't set fl_ops
2d3fab9cea usb: chipidea: host: fix port index underflow and UBSAN complains
2225a5cd2f gfs2: Don't call dlm after protocol is unmounted
0df5eba67b kselftest/arm64: pac: Fix skipping of tests on systems without PAC
9486d7ac9f kselftest/arm64: mte: Fix misleading output when skipping tests
1f5db5b8a3 net: Fix offloading indirect devices dependency on qdisc order creation
2a69325ee5 staging: rts5208: Fix get_ms_information() heap buffer size
868831492d hwmon: (pmbus/ibm-cffps) Fix write bits for LED control
39738ebfad selftests/bpf: Fix flaky send_signal test
c53c68c9bf rpc: fix gss_svc_init cleanup on failure
4b1b4d3f45 tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
fca514f25c iomap: pass writeback errors to the mapping
49e2bcb7cf serial: sh-sci: fix break handling for sysrq
a99eec36ed opp: Don't print an error if required-opps is missing
6698029de3 Bluetooth: Fix handling of LE Enhanced Connection Complete
240a7025a6 nvme: code command_id with a genctr for use-after-free validation
24618e92d5 nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data
27e8bc1f5b arm64: dts: ls1046a: fix eeprom entries
aa06cfc529 arm64: tegra: Fix compatible string for Tegra132 CPUs
9c2b89f64f ARM: tegra: tamonten: Fix UART pad setting
035e8d5a6d ARM: tegra: acer-a500: Remove bogus USB VBUS regulators
9713dfa518 mac80211: Fix monitor MTU limit so that A-MSDUs get through
83449db3aa drm/display: fix possible null-pointer dereference in dcn10_set_clock()
2254383788 gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
155e704790 net/mlx5: Fix variable type to match 64bit
f86bc4a1a4 drm/msm/dp: return correct edid checksum after corrupted edid checksum read
98d44b7be6 Bluetooth: avoid circular locks in sco_sock_connect
a1073aad49 Bluetooth: schedule SCO timeouts with delayed_work
d6c9142399 drm/vmwgfx: fix potential UAF in vmwgfx_surface.c
3841dfa7eb selftests/bpf: Fix xdp_tx.c prog section name
63ebc1f1df drm/amd/display: fix incorrect CM/TF programming sequence in dwb
d763afc4ea drm/amd/display: fix missing writeback disablement if plane is removed
491c8be219 thunderbolt: Fix port linking by checking all adapters
0f0f1de02b drm: xlnx: zynqmp: release reset to DP controller before accessing DP registers
f76f78f9f4 drm: xlnx: zynqmp_dpsub: Call pm_runtime_get_sync before setting pixel clock
127f3610a0 drm/msm/dsi: Fix DSI and DSI PHY regulator config from SDM660
0bbbe3ec67 drm/msm: mdp4: drop vblank get/put from prepare/complete_commit
ac21cd44c9 net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
2b0fa8d530 nvmem: qfprom: Fix up qfprom_disable_fuse_blowing() ordering
35e5c99b15 arm64: dts: qcom: sm8250: Fix epss_l3 unit address
43ccafc91f arm64: dts: qcom: msm8996: don't use underscore in node name
f868c2d62a arm64: dts: qcom: msm8994: don't use underscore in node name
bda9c84edb arm64: dts: qcom: sdm630: don't use underscore in node name
aa16e76c80 arm64: dts: qcom: ipq6018: drop '0x' from unit address
da714a1983 arm64: dts: qcom: sdm660: use reg value for memory node
34e9c56675 arm64: dts: qcom: ipq8074: fix pci node reg property
74287874c9 ARM: dts: imx53-ppd: Fix ACHC entry
6a00decce3 serial: 8250_omap: Handle optional overrun-throttle-ms property
699c914758 arm64: dts: qcom: sdm630: Fix TLMM node and pinctrl configuration
310a127178 arm64: dts: qcom: sdm630: Rewrite memory map
783be2a942 gfs2: Fix glock recursion in freeze_go_xmote_bh
4e014ff22e media: tegra-cec: Handle errors of clk_prepare_enable()
c159db240c media: TDA1997x: fix tda1997x_query_dv_timings() return value
e3a2e20ed5 media: v4l2-dv-timings.c: fix wrong condition in two for-loops
ac1bcf53e3 media: imx258: Limit the max analogue gain to 480
4cb4967472 media: imx258: Rectify mismatch of VTS value
a64e3f1d8a ASoC: Intel: update sof_pcm512x quirks
9cf8272420 ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output
f1fb1f6fa1 arm64: tegra: Fix Tegra194 PCIe EP compatible string
8fb3d8c151 ARM: dts: at91: use the right property for shutdown controller
f710323dcd bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler()
5d008cb763 ARM: dts: stm32: Update AV96 adv7513 node per dtbs_check
3142476fa0 ARM: dts: stm32: Set {bitclock,frame}-master phandles on ST DKx
37437a60a9 ARM: dts: stm32: Set {bitclock,frame}-master phandles on DHCOM SoM
f4c7c95e3e workqueue: Fix possible memory leaks in wq_numa_init()
6528cc687c Bluetooth: skip invalid hci_sync_conn_complete_evt
3b82e4799f ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
4af60a543b libbpf: Fix race when pinning maps in parallel
874d5aa06c samples: bpf: Fix tracex7 error raised on the missing argument
035f83b5ab staging: ks7010: Fix the initialization of the 'sleep_status' structure
d0a8ef04c2 serial: 8250_pci: make setup_port() parameters explicitly unsigned
2603740df8 hvsi: don't panic on tty_register_driver failure
dd3307a8b3 xtensa: ISS: don't panic in rs_init
b763d2e7d4 serial: 8250: Define RX trigger levels for OxSemi 950 devices
973c57c5e6 s390: make PCI mio support a machine flag
77d62f2bcc s390/jump_label: print real address in a case of a jump label bug
863d2eb2f7 flow_dissector: Fix out-of-bounds warnings
64583448c2 ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
bcc61adefd video: fbdev: riva: Error out if 'pixclock' equals zero
63abc0eb8a video: fbdev: kyro: Error out if 'pixclock' equals zero
6a8dcd2ffb video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
3740418ccd arm64: dts: allwinner: h6: tanix-tx6: Fix regulator node names
be2e11b9f8 drm/bridge: nwl-dsi: Avoid potential multiplication overflow on 32-bit
6a3564739b bpf/tests: Do not PASS tests without actually testing the result
99121dec14 bpf/tests: Fix copy-and-paste error in double word test
6f51f42412 drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex
a5999d18a8 drm/amdgpu: Fix a printing message
5b3a45eedd ethtool: improve compat ioctl handling
52bb703f71 nfp: fix return statement in nfp_net_parse_meta()
23e5fb6475 media: atomisp: pci: fix error return code in atomisp_pci_probe()
e5cecb9105 media: atomisp: Fix runtime PM imbalance in atomisp_pci_probe
9a85b9e376 media: platform: stm32: unprepare clocks at handling errors in probe
c6e5eebd95 media: hantro: vp8: Move noisy WARN_ON to vpu_debug
f462a39eb8 drm/amd/display: Fix timer_per_pixel unit error
b4f5c9454d selftests: firmware: Fix ignored return val of asprintf() warn
e944a22126 bus: fsl-mc: fix mmio base address for child DPRCs
165c55af5f tty: serial: jsm: hold port lock when reporting modem line changes
642639bb8d staging: board: Fix uninitialized spinlock when attaching genpd
03f4492dbf usb: gadget: composite: Allow bMaxPower=0 if self-powered
5534de13b6 USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable()
b2b8137ec9 usb: gadget: u_ether: fix a potential null pointer dereference
566ddd2d94 usb: host: fotg210: fix the actual_length of an iso packet
224cf5e8c8 usb: host: fotg210: fix the endpoint's transactional opportunities calculation
463b3edfba igc: Check if num of q_vectors is smaller than max before array access
d3ca78775d rcu: Fix macro name CONFIG_TASKS_RCU_TRACE
34609faad0 drm: protect drm_master pointers in drm_lease.c
06a553a99b drm: serialize drm_file.master with a new spinlock
54e51d288b drm: avoid blocking in drm_clients_info's rcu section
df19d95141 Smack: Fix wrong semantics in smk_access_entry()
3533aa65e6 netlink: Deal with ESRCH error in nlmsg_notify()
9de06dcd47 video: fbdev: kyro: fix a DoS bug by restricting user input
29ab7f6d50 ARM: dts: qcom: apq8064: correct clock names
e0c17c11b1 iavf: fix locking of critical sections
67c9262e3f iavf: do not override the adapter state in the watchdog task
9f11de5601 iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
e78a0b4a33 net: phy: Fix data type in DP83822 dp8382x_disable_wol()
cca6127587 tipc: keep the skb in rcv queue until the whole data is read
cc12ab5951 PCI: Use pci_update_current_state() in pci_enable_device_flags()
aad29a00a5 crypto: mxs-dcp - Use sg_mapping_iter to copy data
871abd1e61 x86/hyperv: fix for unwanted manipulation of sched_clock when TSC marked unstable
c327b69e96 libbpf: Fix reuse of pinned map on older kernel
6a985c5794 media: dib8000: rewrite the init prbs logic
2048907d8c ASoC: atmel: ATMEL drivers don't need HAS_DMA
10a135969f drm/amdgpu: Fix amdgpu_ras_eeprom_init()
b32d3ded9d drm/vc4: hdmi: Set HD_CTL_WHOLSMP and HD_CTL_CHALIGN_SET
6afd1e053d userfaultfd: prevent concurrent API initialization
1e4cfe954b kbuild: Fix 'no symbols' warning when CONFIG_TRIM_UNUSD_KSYMS=y
981bf9b0aa MIPS: Malta: fix alignment of the devicetree buffer
bb8108546d f2fs: should put a page beyond EOF when preparing a write
d04925fb8d f2fs: deallocate compressed pages when error happens
4b71928e5c f2fs: fix to unmap pages from userspace process in punch_hole()
1c934aba9f f2fs: fix unexpected ENOENT comes from f2fs_map_blocks()
45cb5f86c1 f2fs: fix to account missing .skipped_gc_rwsem
fd69f613af soc: mediatek: cmdq: add address shift in jump
d320c1b2e7 KVM: PPC: Fix clearing never mapped TCEs in realmode
6bf98b94ff clk: at91: clk-generated: Limit the requested rate to our range
9bab2bc4c2 fscache: Fix cookie key hashing
b4849e2ac7 RDMA/hns: Fix QP's resp incomplete assignment
e91077cf17 powerpc/smp: Update cpu_core_map on all PowerPc systems
903ca538f5 platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call
add8e8c340 KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live
4c0c4f7021 scsi: ufs: ufs-exynos: Fix static checker warning
bda5602c1c KVM: PPC: Book3S HV: Fix copy_tofrom_guest routines
926bf91248 clk: imx8m: fix clock tree update of TF-A managed clocks
e84a72f696 HID: i2c-hid: Fix Elan touchpad regression
253bac6c60 iommu/vt-d: Update the virtual command related registers
947579a696 powerpc/config: Renable MTD_PHYSMAP_OF
1bc19e4062 scsi: qedf: Fix error codes in qedf_alloc_global_queues()
dc45777499 scsi: qedi: Fix error codes in qedi_alloc_global_queues()
782c401784 scsi: smartpqi: Fix an error code in pqi_get_raid_map()
41066433be powerpc/numa: Consider the max NUMA node for migratable LPAR
d3612083ec pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
6291fd0eea scsi: fdomain: Fix error return code in fdomain_probe()
f02ab9d1d3 sunrpc: Fix return value of get_srcport()
21a2be1a51 SUNRPC query transport's source port
f19abe0463 SUNRPC/xprtrdma: Fix reconnection locking
f3d3016127 SUNRPC: Fix potential memory corruption
9aa7a3ffb1 NFSv4/pnfs: The layout barrier indicate a minimal value for the seqid
2a542421eb NFSv4/pNFS: Always allow update of a zero valued layout barrier
4b96edea5c NFSv4/pNFS: Fix a layoutget livelock loop
fa55e76641 dma-debug: fix debugfs initialization order
ca7f7e37ba openrisc: don't printk() unconditionally
31fd3211ef f2fs: reduce the scope of setting fsck tag when de->name_len is zero
49e4c83db8 cpuidle: pseries: Mark pseries_idle_proble() as __init
876e45c95e RDMA/mlx5: Delete not-available udata check
a77da9de0d RDMA/efa: Remove double QP type assignment
1988836e30 powerpc/stacktrace: Include linux/delay.h
c5a5528da7 cpuidle: pseries: Fixup CEDE0 latency only for POWER10 onwards
3b2bbcccd6 scsi: ufs: Fix memory corruption by ufshcd_read_desc_param()
d353e093c0 vfio: Use config not menuconfig for VFIO_NOIOMMU
0f711378f0 pinctrl: samsung: Fix pinctrl bank pin count
59137b7dff scsi: BusLogic: Use %X for u32 sized integer rather than %lX
8ea3e622af docs: Fix infiniband uverbs minor number
fe2a1cd622 RDMA/iwcm: Release resources if iw_cm module initialization fails
b824bae96f IB/hfi1: Adjust pkey entry in index 0
273ed4f47e clk: rockchip: drop GRF dependency for rk3328/rk3036 pll types
f1eccc4081 scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND
ef5395fbad pinctrl: armada-37xx: Correct PWM pins definitions
782ceaba97 pinctrl: remove empty lines in pinctrl subsystem
2d586a3f5b f2fs: quota: fix potential deadlock
70fd936367 HID: input: do not report stylus battery state as "full"
4e89aea738 PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
b50db4c02f PCI: aardvark: Fix checking for PIO status
9d60905754 PCI: Export pci_pio_to_address() for module use
fa3c15ccf2 PCI: aardvark: Configure PCIe resources from 'ranges' DT property
df23bd40ed PCI: xilinx-nwl: Enable the clock through CCF
72f2be3432 PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
088a1052f7 PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
9302a3c00c PCI/portdrv: Enable Bandwidth Notification only if port supports it
74d6dfcb0f f2fs: fix to do sanity check for sb/cp fields correctly
ce7e64e63a ARM: 9105/1: atags_to_fdt: don't warn about stack size
ba73bc1666 libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
bcbc44e42d dmaengine: imx-sdma: remove duplicated sdma_load_context
300ccb1292 Revert "dmaengine: imx-sdma: refine to load context only once"
76668bdee0 s390/qdio: cancel the ESTABLISH ccw after timeout
bcc0c767f9 s390/qdio: fix roll-back after timeout on ESTABLISH ccw
2d2aaa200c media: rc-loopback: return number of emitters rather than error
c0eaaa6868 media: uvc: don't do DMA on stack
516dbe27f4 VMCI: fix NULL pointer dereference when unmapping queue pair
6cae39f457 crypto: ccp - shutdown SEV firmware on kexec
7509c4cb7c dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
4f920fefd8 power: supply: max17042: handle fails of reading status register
0d54bbad80 block: bfq: fix bfq_set_next_ioprio_data()
5df14bba00 crypto: public_key: fix overflow during implicit conversion
646870ad8e wcn36xx: Ensure finish scan is not requested before start scan
4753723f8b iio: ltc2983: fix device probe
de32e15180 arm64: head: avoid over-mapping in map_memory
2d3a9dff76 arm64: mm: Fix TLBI vs ASID rollover
01e6c64bbc soc: aspeed: p2a-ctrl: Fix boundary check for mmap
3fdf2feb6c soc: aspeed: lpc-ctrl: Fix boundary check for mmap
e80c45dbe2 soc: qcom: aoss: Fix the out of bound usage of cooling_devs
610e8b2621 pinctrl: ingenic: Fix incorrect pull up/down info
1e1136fbe8 pinctrl: stmfx: Fix hazardous u8[] to unsigned long cast
7524fcd09c clk: socfpga: agilex: add the bypass register for s2f_usr0 clock
96bf326fb9 clk: socfpga: agilex: fix up s2f_user0_clk representation
7eb16be25f clk: socfpga: agilex: fix the parents of the psi_ref_clk
ac99b3aa83 tools/thermal/tmon: Add cross compiling support
2daa118a3f selftests/ftrace: Fix requirement check of README file
8248b61b86 ceph: fix dereference of null pointer cf
c37085d606 9p/xen: Fix end of loop tests for list_for_each_entry
907944851a xen: fix setting of max_pfn in shared_info
37566a343f powerpc/perf/hv-gpci: Fix counter value parsing
5f13c8bae8 PCI/MSI: Skip masking MSI-X on Xen PV
d15554f985 blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
a58f082554 blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
c1b249e02a btrfs: reset replace target device to allocation state on close
0901af53da btrfs: wake up async_delalloc_pages waiters after submit
9ac218642d io-wq: fix wakeup race when adding new work
548ee201fb io_uring: fail links of cancelled timeouts
54eb6211b9 io_uring: add ->splice_fd_in checks
a3ed34bcad io_uring: place fixed tables under memcg limits
5103b73334 io_uring: limit fixed table size by RLIMIT_NOFILE
ebedb252a4 rtc: tps65910: Correct driver module alias

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: Icc858b61fec7d76c8b144958c0d5c1859508ecb2
 2022-01-21 09:35:04 +01:00
Greg Kroah-Hartman
f45f895af5 Merge branch 'android12-5.10' into android12-5.10-lts 
Sync up with android12-5.10 for the following commits:

2c152aa329 UPSTREAM: f2fs: reduce the scope of setting fsck tag when de->name_len is zero
c29dd368ef ANDROID: GKI: Update symbols to abi_gki_aarch64_oplus
428d0bb762 ANDROID: Add initial ASUS symbol list
87a74496ed ANDROID: configfs: add proper module namespace marking
b7a6c15a6f ANDROID: Configure out the macros in android_kabi and android_vendor
bdc772adbd ANDROID: kernel: fix debug_kinfo set twice crash issue
d483eed85f ANDROID: GKI: set vfs-only exports into their own namespace
27fc5a7c69 UPSTREAM: net/packet: rx_owner_map depends on pg_vec
f70ea63f3b ANDROID: GKI: Update symbols to symbol list
a593acdae8 FROMLIST: module.h: allow #define strings to work with MODULE_IMPORT_NS
eb171b4cbe FROMLIST: export: fix string handling of namespace in EXPORT_SYMBOL_NS
05c23b7a50 ANDROID: vendor_hooks: Add hooks for binder
e99926fdfa ANDROID: mm/oom_kill: allow process_mrelease reclaim memory in parallel with exit_mmap
f4f2c619d5 FROMLIST: mm/oom_kill: allow process_mrelease to run under mmap_lock protection
2452622293 FROMLIST: mm: protect free_pgtables with mmap_lock write lock in exit_mmap
fd7af95538 UPSTREAM: mm/oom_kill.c: prevent a race between process_mrelease and exit_mmap
fe50dcab7a UPSTREAM: mm: wire up syscall process_mrelease
7fc3ac4968 UPSTREAM: mm: introduce process_mrelease system call
ac44888155 Revert "FROMGIT: mm: improve mprotect(R|W) efficiency on pages referenced once"
3a624c9ccd ANDROID: fips140: add show_invalid_inputs command to fips140_lab_util
a481d43521 ANDROID: fips140: refactor and rename fips140_lab_test
d4b5ca56b5 ANDROID: GKI: add lenovo symbol list
47874cc690 ANDROID: abi_gki_aarch64_qcom: Add rproc_set_firmware
c41767a8ec UPSTREAM: remoteproc: Add a rproc_set_firmware() API
28d62c68d1 FROMGIT: iommu/io-pgtable-arm-v7s: Add error handle for page table allocation failure
99ad261273 UPSTREAM: sctp: add param size validation for SCTP_PARAM_SET_PRIMARY
282a4de8f0 UPSTREAM: sctp: validate chunk size in __rcv_asconf_lookup
fef7dba3a7 UPSTREAM: bpf: Fix integer overflow in prealloc_elems_and_freelist()
893425f545 ANDROID: GKI: Update symbol list
cef0df2218 ANDROID: ABI: update allowed list for galaxy
a7ab784f60 ANDROID: vendor_hooks: Add hooks for futex
84fc3abca0 ANDROID: dma-contiguous: Add tracehook to allow subpage allocations in dma_alloc_contiguous
d94655c43e ANDROID: Update the ABI xml and symbol list
414c32d38e UPSTREAM: ALSA: memalloc: Align buffer allocations in page size
75617df5b3 ANDROID: Fix mmu_notifier_trylock definition for !CONFIG_MMU_NOTIFIER config
7531e63661 FROMGIT: USB: gadget: bRequestType is a bitfield, not a enum
70c9301d9c ANDROID: qcom: Add flush_delayed_fput to ABI
5d8520b557 ANDROID: fix ABI breakage caused by mm_struct->mmu_notifier_lock addition
a4d26b9a4b ANDROID: fix ABI breakage caused by percpu_rw_semaphore changes
6971350406 ANDROID: fix mmu_notifier race caused by not taking mmap_lock during SPF
2fc2c66b9c ANDROID: percpu-rwsem: enable percpu_sem destruction in atomic context
f3f87608d8 FROMLIST: virtio_mmio: pm: Add notification handlers for restore and freeze
9180348b91 FROMLIST: virtio: do not reset stateful devices on resume
392cb940f6 FROMGIT: f2fs: avoid EINVAL by SBI_NEED_FSCK when pinning a file
ddd9e01504 UPSTREAM: mm, slub: fix incorrect memcg slab count for bulk free
82ac5b0b1d UPSTREAM: mm, slub: fix potential use-after-free in slab_debugfs_fops
e07a663f5d UPSTREAM: mm, slub: fix potential memoryleak in kmem_cache_open()
cd02f347ab UPSTREAM: mm, slub: fix mismatch between reconstructed freelist depth and cnt
6b6725f77d UPSTREAM: mm, slub: fix two bugs in slab_debug_trace_open()
791f85d16d UPSTREAM: mm, slub: allocate private object map for debugfs listings
1260b47d4f FROMGIT: dma-buf: remove restriction of IOCTL:DMA_BUF_SET_NAME
e80be54e4b UPSTREAM: usb: dwc3: core: balance phy init and exit
89137e0047 UPSTREAM: xhci: Fix failure to give back some cached cancelled URBs.
f37b6d79f8 ANDROID: mm/memory_hotplug: Don't special case memory_block_size_bytes
8b7ffd60a5 UPSTREAM: usb: gadget: uvc: fix multiple opens
ae22ebebbb UPSTREAM: aio: fix use-after-free due to missing POLLFREE handling
b9c8788830 UPSTREAM: aio: keep poll requests on waitqueue until completed
f965176884 UPSTREAM: signalfd: use wake_up_pollfree()
49744a390d UPSTREAM: binder: use wake_up_pollfree()
e50fe1de2f UPSTREAM: wait: add wake_up_pollfree()
53afb231f5 UPSTREAM: USB: gadget: zero allocate endpoint 0 buffers
593309a377 BACKPORT: scsi: ufs: Improve SCSI abort handling further
21949c429a FROMGIT: scsi: ufs: Introduce ufshcd_release_scsi_cmd()
d600bdedac FROMGIT: scsi: ufs: Remove the 'update_scaling' local variable
5f9614157c UPSTREAM: scsi: ufs: core: Fix another task management completion race
76760a995c BACKPORT: scsi: ufs: core: Fix task management completion timeout race
dab2a8a288 ANDROID: qcom: Add android_rvh_do_ptrauth_fault to ABI
b4604acd52 UPSTREAM: USB: gadget: detect too-big endpoint 0 requests
2d6a43c036 ANDROID: ABI: Add symbols used by frame buffer driver
183905923f UPSTREAM: xhci: Add bus number to some debug messages
5b15c955a6 UPSTREAM: xhci: Add additional dynamic debug to follow URBs in cancel and error cases.
f4cbe34956 UPSTREAM: Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
c23b0e7c47 UPSTREAM: xhci: Fix failure to give back some cached cancelled URBs.
7320fb1abd UPSTREAM: HID: check for valid USB device for many HID drivers
e98c96b8b8 UPSTREAM: HID: wacom: fix problems when device is not a valid USB device
5a72ef56c8 UPSTREAM: HID: bigbenff: prevent null pointer dereference
7b8a19b917 UPSTREAM: HID: add USB_HID dependancy on some USB HID drivers
8219b106a3 UPSTREAM: HID: add USB_HID dependancy to hid-chicony
a4909c90b7 UPSTREAM: HID: add USB_HID dependancy to hid-prodikeys
ddea17081f UPSTREAM: HID: add hid_is_usb() function to make it simpler for USB detection
81b6ea435e FROMGIT: clk: Don't parent clks until the parent is fully registered
78ea29e570 UPSTREAM: mm/gup: remove the vma allocation from gup_longterm_locked()
709fde7c61 BACKPORT: usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect
ea4a92c6af ANDROID: ABI: Add iio_write_channel_raw symbol
f803f248dd ANDROID: GKI: Update symbols to symbol list
672d51b2a7 UPSTREAM: ASoC: dapm: use component prefix when checking widget names
686cd3b2d8 ANDROID: ABI: Add symbols used by clocksource driver
80c1cef2d1 ANDROID: GKI: Export clocksource_mmio_init
84881c68b1 ANDROID: GKI: Export sched_clock_register
9e5446d7de FROMGIT: f2fs: show number of pending discard commands
28de741861 ANDROID: workqueue: export symbol of the function wq_worker_comm()
71f00d64c1 ANDROID: GKI: Update symbols to symbol list
05aa93d251 ANDROID: vendor_hooks: Add hooks for binder proc transaction

Also update the .xml file for the following new symbols that are now
being tracked:

Leaf changes summary: 165 artifacts changed
Changed leaf types summary: 0 leaf type changed
Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 154 Added functions
Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 11 Added variables

154 Added functions:

  [A] 'function void __bforget(buffer_head*)'
  [A] 'function ssize_t __blockdev_direct_IO(kiocb*, inode*, block_device*, iov_iter*, get_block_t*, dio_iodone_t*, dio_submit_t*, int)'
  [A] 'function buffer_head* __bread_gfp(block_device*, sector_t, unsigned int, gfp_t)'
  [A] 'function void __breadahead(block_device*, sector_t, unsigned int)'
  [A] 'function void __brelse(buffer_head*)'
  [A] 'function void __cancel_dirty_page(page*)'
  [A] 'function void __cleancache_invalidate_inode(address_space*)'
  [A] 'function void __filemap_set_wb_err(address_space*, int)'
  [A] 'function void __insert_inode_hash(inode*, unsigned long int)'
  [A] 'function void __mark_inode_dirty(inode*, int)'
  [A] 'function void __pagevec_release(pagevec*)'
  [A] 'function void __remove_inode_hash(inode*)'
  [A] 'function int __set_page_dirty_buffers(page*)'
  [A] 'function int __set_page_dirty_nobuffers(page*)'
  [A] 'function int __test_set_page_writeback(page*, bool)'
  [A] 'function int __traceiter_android_vh_binder_free_proc(void*, binder_proc*)'
  [A] 'function int __traceiter_android_vh_binder_has_work_ilocked(void*, binder_thread*, bool, int*)'
  [A] 'function int __traceiter_android_vh_binder_looper_state_registered(void*, binder_thread*, binder_proc*)'
  [A] 'function int __traceiter_android_vh_binder_proc_transaction_end(void*, task_struct*, task_struct*, task_struct*, unsigned int, bool, bool)'
  [A] 'function int __traceiter_android_vh_binder_read_done(void*, binder_proc*, binder_thread*)'
  [A] 'function int __traceiter_android_vh_binder_thread_read(void*, list_head**, binder_proc*, binder_thread*)'
  [A] 'function int __traceiter_android_vh_binder_thread_release(void*, binder_proc*, binder_thread*)'
  [A] 'function int __traceiter_android_vh_futex_sleep_start(void*, task_struct*)'
  [A] 'function int __traceiter_block_bio_remap(void*, request_queue*, bio*, dev_t, sector_t)'
  [A] 'function int add_to_page_cache_locked(page*, address_space*, unsigned long int, gfp_t)'
  [A] 'function bio* bio_split(bio*, int, gfp_t, bio_set*)'
  [A] 'function wait_queue_head* bit_waitqueue(void*, int)'
  [A] 'function blk_plug_cb* blk_check_plugged(blk_plug_cb_fn, void*, int)'
  [A] 'function void blk_queue_max_write_same_sectors(request_queue*, unsigned int)'
  [A] 'function int blkdev_issue_discard(block_device*, sector_t, sector_t, gfp_t, unsigned long int)'
  [A] 'function void block_invalidatepage(page*, unsigned int, unsigned int)'
  [A] 'function int block_is_partially_uptodate(page*, unsigned long int, unsigned long int)'
  [A] 'function int buffer_migrate_page(address_space*, page*, page*, migrate_mode)'
  [A] 'function bool capable_wrt_inode_uidgid(const inode*, int)'
  [A] 'function void clean_bdev_aliases(block_device*, sector_t, sector_t)'
  [A] 'function void clear_inode(inode*)'
  [A] 'function int clear_page_dirty_for_io(page*)'
  [A] 'function int clk_set_duty_cycle(clk*, unsigned int, unsigned int)'
  [A] 'function int clocksource_mmio_init(void*, const char*, unsigned long int, int, unsigned int, typedef u64 (clocksource*)*)'
  [A] 'function u64 clocksource_mmio_readl_up(clocksource*)'
  [A] 'function void create_empty_buffers(page*, unsigned long int, unsigned long int)'
  [A] 'function int current_umask()'
  [A] 'function dentry* d_add_ci(dentry*, inode*, qstr*)'
  [A] 'function void d_instantiate(dentry*, inode*)'
  [A] 'function dentry* d_obtain_alias(inode*)'
  [A] 'function dentry* d_splice_alias(inode*, dentry*)'
  [A] 'function void delete_from_page_cache(page*)'
  [A] 'function void disk_stack_limits(gendisk*, block_device*, sector_t)'
  [A] 'function void drop_nlink(inode*)'
  [A] 'function void end_buffer_write_sync(buffer_head*, int)'
  [A] 'function void end_page_writeback(page*)'
  [A] 'function errseq_t errseq_set(errseq_t*, int)'
  [A] 'function int fb_get_options(const char*, char**)'
  [A] 'function int fiemap_fill_next_extent(fiemap_extent_info*, u64, u64, u64, u32)'
  [A] 'function int fiemap_prep(inode*, fiemap_extent_info*, u64, u64*, u32)'
  [A] 'function int file_remove_privs(file*)'
  [A] 'function int file_update_time(file*)'
  [A] 'function int file_write_and_wait_range(file*, loff_t, loff_t)'
  [A] 'function vm_fault_t filemap_fault(vm_fault*)'
  [A] 'function int filemap_fdatawait_range(address_space*, loff_t, loff_t)'
  [A] 'function int filemap_fdatawrite(address_space*)'
  [A] 'function int filemap_flush(address_space*)'
  [A] 'function int filemap_write_and_wait_range(address_space*, loff_t, loff_t)'
  [A] 'function file* filp_open(const char*, int, umode_t)'
  [A] 'function void flush_delayed_fput()'
  [A] 'function int freq_qos_remove_notifier(freq_constraints*, freq_qos_req_type, notifier_block*)'
  [A] 'function int generic_error_remove_page(address_space*, page*)'
  [A] 'function ssize_t generic_file_direct_write(kiocb*, iov_iter*)'
  [A] 'function int generic_file_mmap(file*, vm_area_struct*)'
  [A] 'function int generic_file_open(inode*, file*)'
  [A] 'function ssize_t generic_file_splice_read(file*, loff_t*, pipe_inode_info*, size_t, unsigned int)'
  [A] 'function void generic_fillattr(inode*, kstat*)'
  [A] 'function ssize_t generic_read_dir(file*, char*, size_t, loff_t*)'
  [A] 'function page* grab_cache_page_write_begin(address_space*, unsigned long int, unsigned int)'
  [A] 'function inode* iget5_locked(super_block*, unsigned long int, int (inode*, void*)*, int (inode*, void*)*, void*)'
  [A] 'function inode* igrab(inode*)'
  [A] 'function void ihold(inode*)'
  [A] 'function int iio_write_channel_raw(iio_channel*, int)'
  [A] 'function inode* ilookup5(super_block*, unsigned long int, int (inode*, void*)*, void*)'
  [A] 'function int in_group_p(kgid_t)'
  [A] 'function void inc_nlink(inode*)'
  [A] 'function void init_special_inode(inode*, umode_t, dev_t)'
  [A] 'function void inode_dio_wait(inode*)'
  [A] 'function void inode_init_once(inode*)'
  [A] 'function void inode_init_owner(inode*, const inode*, umode_t)'
  [A] 'function int inode_newsize_ok(const inode*, loff_t)'
  [A] 'function void inode_set_flags(inode*, unsigned int, unsigned int)'
  [A] 'function void io_schedule()'
  [A] 'function void iov_iter_advance(iov_iter*, size_t)'
  [A] 'function unsigned long int iov_iter_alignment(const iov_iter*)'
  [A] 'function size_t iov_iter_copy_from_user_atomic(page*, iov_iter*, unsigned long int, size_t)'
  [A] 'function int iov_iter_fault_in_readable(iov_iter*, size_t)'
  [A] 'function ssize_t iov_iter_get_pages(iov_iter*, page**, size_t, unsigned int, size_t*)'
  [A] 'function size_t iov_iter_single_seg_count(const iov_iter*)'
  [A] 'function bool is_bad_inode(inode*)'
  [A] 'function ssize_t iter_file_splice_write(pipe_inode_info*, file*, loff_t*, size_t, unsigned int)'
  [A] 'function ino_t iunique(super_block*, ino_t)'
  [A] 'function void kill_block_super(super_block*)'
  [A] 'function void ll_rw_block(int, int, int, buffer_head**)'
  [A] 'function nls_table* load_nls(char*)'
  [A] 'function nls_table* load_nls_default()'
  [A] 'function void lru_cache_add(page*)'
  [A] 'function void make_bad_inode(inode*)'
  [A] 'function void mark_buffer_async_write(buffer_head*)'
  [A] 'function void mark_buffer_dirty(buffer_head*)'
  [A] 'function void mark_buffer_write_io_error(buffer_head*)'
  [A] 'function void mark_page_accessed(page*)'
  [A] 'function void mnt_drop_write_file(file*)'
  [A] 'function int mnt_want_write_file(file*)'
  [A] 'function dentry* mount_bdev(file_system_type*, int, const char*, void*, int (super_block*, void*, int)*)'
  [A] 'function void mpage_readahead(readahead_control*, get_block_t*)'
  [A] 'function int mpage_readpage(page*, get_block_t*)'
  [A] 'function int notify_change(dentry*, iattr*, inode**)'
  [A] 'function unsigned long int page_cache_next_miss(address_space*, unsigned long int, unsigned long int)'
  [A] 'function unsigned long int page_cache_prev_miss(address_space*, unsigned long int, unsigned long int)'
  [A] 'function bool page_mapped(page*)'
  [A] 'function int page_mkclean(page*)'
  [A] 'function void page_zero_new_buffers(page*, unsigned int, unsigned int)'
  [A] 'function page* pagecache_get_page(address_space*, unsigned long int, int, gfp_t)'
  [A] 'function unsigned int pagevec_lookup_range(pagevec*, address_space*, unsigned long int*, unsigned long int)'
  [A] 'function unsigned int pagevec_lookup_range_tag(pagevec*, address_space*, unsigned long int*, unsigned long int, xa_mark_t)'
  [A] 'function void put_pages_list(list_head*)'
  [A] 'function gfp_t readahead_gfp_mask(address_space*)'
  [A] 'function int redirty_page_for_writepage(writeback_control*, page*)'
  [A] 'function int rproc_set_firmware(rproc*, const char*)'
  [A] 'function int sb_min_blocksize(super_block*, int)'
  [A] 'function int sb_set_blocksize(super_block*, int)'
  [A] 'function void sched_clock_register(typedef u64 ()*, int, unsigned long int)'
  [A] 'function int security_inode_init_security(inode*, inode*, const qstr*, const initxattrs, void*)'
  [A] 'function void set_nlink(inode*, unsigned int)'
  [A] 'function int setattr_prepare(dentry*, iattr*)'
  [A] 'function blk_qc_t submit_bio_noacct(bio*)'
  [A] 'function int sync_dirty_buffer(buffer_head*)'
  [A] 'function int sync_filesystem(super_block*)'
  [A] 'function int sync_inode_metadata(inode*, int)'
  [A] 'function void tag_pages_for_writeback(address_space*, unsigned long int, unsigned long int)'
  [A] 'function timespec64 timestamp_truncate(timespec64, inode*)'
  [A] 'function void touch_atime(const path*)'
  [A] 'function void truncate_inode_pages(address_space*, loff_t)'
  [A] 'function void truncate_inode_pages_final(address_space*)'
  [A] 'function void truncate_pagecache(inode*, loff_t)'
  [A] 'function void truncate_setsize(inode*, loff_t)'
  [A] 'function int try_to_release_page(page*, gfp_t)'
  [A] 'function void try_to_writeback_inodes_sb(super_block*, wb_reason)'
  [A] 'function void unload_nls(nls_table*)'
  [A] 'function void unlock_buffer(buffer_head*)'
  [A] 'function void unlock_new_inode(inode*)'
  [A] 'function void usbnet_cdc_unbind(usbnet*, usb_interface*)'
  [A] 'function int usbnet_generic_cdc_bind(usbnet*, usb_interface*)'
  [A] 'function void wait_on_page_bit(page*, int)'
  [A] 'function int wake_bit_function(wait_queue_entry*, unsigned int, int, void*)'
  [A] 'function void wq_worker_comm(char*, size_t, task_struct*)'
  [A] 'function int write_inode_now(inode*, int)'
  [A] 'function int write_one_page(page*)'

11 Added variables:

  [A] 'tracepoint __tracepoint_android_rvh_do_ptrauth_fault'
  [A] 'tracepoint __tracepoint_android_vh_binder_free_proc'
  [A] 'tracepoint __tracepoint_android_vh_binder_has_work_ilocked'
  [A] 'tracepoint __tracepoint_android_vh_binder_looper_state_registered'
  [A] 'tracepoint __tracepoint_android_vh_binder_proc_transaction_end'
  [A] 'tracepoint __tracepoint_android_vh_binder_read_done'
  [A] 'tracepoint __tracepoint_android_vh_binder_thread_read'
  [A] 'tracepoint __tracepoint_android_vh_binder_thread_release'
  [A] 'tracepoint __tracepoint_android_vh_futex_sleep_start'
  [A] 'tracepoint __tracepoint_android_vh_subpage_dma_contig_alloc'
  [A] 'tracepoint __tracepoint_block_bio_remap'

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: I064b6ff0420cee2d64e17814f43fbff8e2d9b019

Change-Id: Ia880c70c912f2b801a770feb1fdc4f4eb390d34d
 2022-01-17 18:47:02 +01:00
Qingqing Zhou
b7a6c15a6f ANDROID: Configure out the macros in android_kabi and android_vendor 
Add one CONFIG to control removing the macros or not. On some platform,
configureing out the macros removes the associated members from the
structs, this reduces the object size of the slabs related with the
structs, therefore reduces the total slab memory consumption of system.

Besides, this also reduces vmlinux size a bit, therefore the total
kernel memory size increses a bit.

The macros are ANDROID_KABI_RESERVE, ANDROID_VENDOR_DATA,
ANDROID_VENDOR_DATA_ARRAY, ANDROID_OEM_DATA, ANDROID_OEM_DATA_ARRAY.

Bug: 206561931
Signed-off-by: Qingqing Zhou <quic_qqzhou@quicinc.com>
Change-Id: I0868d299ccce3c4b39f42af17916828500be6cc4
 2022-01-12 16:49:39 +08:00
Suren Baghdasaryan
6971350406 ANDROID: fix mmu_notifier race caused by not taking mmap_lock during SPF 
When pagefaults are handled speculatively,the pair of
mmu_notifier_invalidate_range_start/mmu_notifier_invalidate_range_end
calls happen without mmap_lock being taken. This enables the following
race:

mmu_notifier_invalidate_range_start
                                       mmap_write_lock
                                       mmu_notifier_register
                                       mmap_write_unlock
mmu_notifier_invalidate_range_end

In this case mmu_notifier_invalidate_range_end will see a new
subscriber not seen at the time of mmu_notifier_invalidate_range_start
and will call ops->invalidate_range_end for that subscriber without
the matching ops->invalidate_range_start, creating imbalance.
Fix this by introducing a new mm->mmu_notifier_lock percpu_rw_semaphore
to synchronize mmu_notifier_invalidate_range_start/
mmu_notifier_invalidate_range_end with mmu_notifier_register when
handling pagefaults speculatively without holding mmap_lock.
percpu_rw_semaphore is used instead of rw_semaphore to prevent cache
line bouncing in the pagefault path.

Fixes: 86ee4a531e ("FROMLIST: x86/mm: add speculative pagefault handling")

Bug: 161210518
Signed-off-by: Suren Baghdasaryan <surenb@google.com>
Change-Id: I9c363b2348efcad19818f93b010abf956870ab55
 2021-12-15 21:44:56 +00:00
Greg Kroah-Hartman
bc8ae0e2af Merge branch 'android12-5.10' into android12-5.10-lts 
Sync up with android12-5.10 for the following commits:

32432740cd ANDROID: GKI: Add symbols abi for USB IP kernel modules.
c27d7f71b5 ANDROID: GKI: Fix file mode on mtk abi file
ca9ee53cea UPSTREAM: erofs: fix deadlock when shrink erofs slab
898e7ec950 ANDROID: init_task: Init android vendor and oem data
3c54070823 UPSTREAM: sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
f0a7e5394b ANDROID: Update symbol list for mtk
b943d32888 UPSTREAM: erofs: fix unsafe pagevec reuse of hooked pclusters
028f7128c4 UPSTREAM: erofs: remove the occupied parameter from z_erofs_pagevec_enqueue()
504b13fb83 UPSTREAM: usb: dwc3: gadget: Fix null pointer exception
143ac63130 ANDROID: fips140: support "evaluation testing" builds via build.sh
cbd64e25c2 FROMGIT: sched/scs: Reset task stack state in bringup_cpu()
3ed40fb65a ANDROID: dma-buf: heaps: fix dma-buf heap pool pages stat
851990cc99 ANDROID: ABI: Add several spi_mem related symbols
be30f0ce33 UPSTREAM: spi: spi-mem: add spi_mem_dtr_supports_op()
e5dfa89138 ANDROID: gki_defconfig: enable CONFIG_SPI_MEM
bb18be4257 ANDROID: ABI: Add several iio related symbols
1407b7e124 ANDROID: ABI: Update symbol list for IMX
575a552ac7 ANDROID: usb: gadget: f_accessory: Mitgate handling of non-existent USB request
376046be3b ANDROID: GKI: fix up abi break in ehci code
bf13278d66 UPSTREAM: usb: ehci: handshake CMD_RUN instead of STS_HALT
c3c2bb34ac ANDROID: arm64/mm: Add command line option to make ZONE_DMA32 empty
f8f6c7332b ANDROID: GKI: Add newly added vendor hook to abi symbol list
109f31ac23 ANDROID: fips140: add userspace interface for evaluation testing
97fb2104fe ANDROID: fips140: add support for injecting integrity error
903e97a0ca ANDROID: fips140: refactor evaluation testing support
53a812c6bb ANDROID: sched: add hook point in do_sched_yield()
00d29953bb ANDROID: GKI: Update symbols to symbol list
7a069c6071 FROMGIT: usb: gadget: f_fs: Use stream_open() for endpoint files

Due to api additions in android12-5.10, this also adds more api symbols
to track:

Leaf changes summary: 44 artifacts changed
Changed leaf types summary: 0 leaf type changed
Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 38 Added functions
Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 6 Added variables

38 Added functions:

  [A] 'function int __traceiter_android_rvh_binder_transaction(void*, binder_proc*, binder_proc*, binder_thread*, binder_transaction_data*)'
  [A] 'function int __traceiter_android_rvh_do_sched_yield(void*, rq*)'
  [A] 'function int __traceiter_android_vh_binder_del_ref(void*, task_struct*, uint32_t)'
  [A] 'function int __traceiter_android_vh_binder_new_ref(void*, task_struct*, uint32_t, int)'
  [A] 'function int __traceiter_android_vh_binder_proc_transaction(void*, task_struct*, task_struct*, task_struct*, int, unsigned int, bool)'
  [A] 'function i3c_device* dev_to_i3cdev(device*)'
  [A] 'function spi_mem_dirmap_desc* devm_spi_mem_dirmap_create(device*, spi_mem*, const spi_mem_dirmap_info*)'
  [A] 'function int genphy_restart_aneg(phy_device*)'
  [A] 'function const i3c_device_id* i3c_device_match_id(i3c_device*, const i3c_device_id*)'
  [A] 'function int iio_device_claim_direct_mode(iio_dev*)'
  [A] 'function void iio_device_release_direct_mode(iio_dev*)'
  [A] 'function int iio_push_event(iio_dev*, u64, s64)'
  [A] 'function int iio_read_mount_matrix(device*, const char*, iio_mount_matrix*)'
  [A] 'function ssize_t iio_show_mount_matrix(iio_dev*, uintptr_t, const iio_chan_spec*, char*)'
  [A] 'function int kernel_sock_shutdown(socket*, sock_shutdown_cmd)'
  [A] 'function int kill_pid(pid*, int, int)'
  [A] 'function bool kthread_freezable_should_stop(bool*)'
  [A] 'function int phy_modify_mmd(phy_device*, int, u32, u16, u16)'
  [A] 'function int snd_interval_ranges(snd_interval*, unsigned int, const snd_interval*, unsigned int)'
  [A] 'function int snd_pcm_hw_constraint_ratnums(snd_pcm_runtime*, unsigned int, snd_pcm_hw_param_t, const snd_pcm_hw_constraint_ratnums*)'
  [A] 'function int snd_soc_limit_volume(snd_soc_card*, const char*, int)'
  [A] 'function int sock_recvmsg(socket*, msghdr*, int)'
  [A] 'function socket* sockfd_lookup(int, int*)'
  [A] 'function const spi_device_id* spi_get_device_id(const spi_device*)'
  [A] 'function int spi_mem_adjust_op_size(spi_mem*, spi_mem_op*)'
  [A] 'function bool spi_mem_default_supports_op(spi_mem*, const spi_mem_op*)'
  [A] 'function ssize_t spi_mem_dirmap_read(spi_mem_dirmap_desc*, u64, size_t, void*)'
  [A] 'function ssize_t spi_mem_dirmap_write(spi_mem_dirmap_desc*, u64, size_t, void*)'
  [A] 'function int spi_mem_driver_register_with_owner(spi_mem_driver*, module*)'
  [A] 'function void spi_mem_driver_unregister(spi_mem_driver*)'
  [A] 'function bool spi_mem_dtr_supports_op(spi_mem*, const spi_mem_op*)'
  [A] 'function int spi_mem_exec_op(spi_mem*, const spi_mem_op*)'
  [A] 'function const char* spi_mem_get_name(spi_mem*)'
  [A] 'function bool spi_mem_supports_op(spi_mem*, const spi_mem_op*)'
  [A] 'function void touchscreen_parse_properties(input_dev*, bool, touchscreen_properties*)'
  [A] 'function void touchscreen_report_pos(input_dev*, const touchscreen_properties*, unsigned int, unsigned int, bool)'
  [A] 'function int trace_set_clr_event(const char*, const char*, int)'
  [A] 'function int vsscanf(const char*, const char*, va_list)'

6 Added variables:

  [A] 'tracepoint __tracepoint_android_rvh_binder_transaction'
  [A] 'tracepoint __tracepoint_android_rvh_do_sched_yield'
  [A] 'tracepoint __tracepoint_android_vh_binder_del_ref'
  [A] 'tracepoint __tracepoint_android_vh_binder_new_ref'
  [A] 'tracepoint __tracepoint_android_vh_binder_proc_transaction'
  [A] 'device platform_bus'

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: I6de103b0d75261c17c11454051e2559bb6d1eecf
 2021-12-03 11:46:34 +01:00
Maria Yu
898e7ec950 ANDROID: init_task: Init android vendor and oem data 
Without initialization, it will be random data and hard for
vendor hook to decide.

Bug: 207739506
Change-Id: I278772d87eea38c03a40d4f0bef20ac8644e2ecd
Signed-off-by: Maria Yu <quic_aiquny@quicinc.com>
 2021-12-01 15:38:18 +00:00
Greg Kroah-Hartman
c553d9a246 This is the 5.10.80 stable release 
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmGWT+QACgkQONu9yGCS
 aT5mYw//ZXKzugaeJjuIaFqr7tcM7x8EefbKd2H4oMr8SW3IFElJIbNPJGMJAG/C
 tLZVWZvIum7QzZoxTL+JCCKpDzBERNTo4e5u7UwzAdVqiEX69YkNU0FBOzb4qXJ7
 gOZMBhy4UMIKdKD12CSXXf7ZspocsNXfzdmulRQ7CQcPoPrIMKpc4vuagN1Fy/Dz
 JgXYvRUAkLxtFHoQ/TeXvR4Gv9+w2ToMdb02mI48QBO+YYrFaGt+Rza2eHTv75H+
 Lydz37Nv1Pk32tA1q2jWxCzz16+Kzn+AviKiCfQK0Fb9IqnJksUIWLHSiODlVIcf
 kQHejanPn/p1BnBl8puPk1KFtDW45p2GwYhXG7hjGh08DGlR7QLHBS5Aa3xPYfdd
 uOy4ctygSVTx5nLjPH5vr3OE0wk/TuSSf/eyk2fmcUCspwAgBOnSYSmnJOem7LTK
 VqIgXFdCRplsqN415D35ddruP2BLCKqBu4KjwJ1LGIwgsx/Pmz4hlc5YcpLm8uRg
 XMqGTdcieQFOGmZJjJ2q3ecaCjfb0nmTrOylP5b55/74TFwFo042YR1ua0fEtpD4
 euoHLfYv3BY1dCp34TOUFGX0l+J1kAtf//vfD/JgJx/nX+ksdFBHhYwdbSi2oQG/
 9CceXYJ5duEnG+JmDOWJvcZ3T49K5XaIDNfY2zGpcSu1VZKubWg=
 =tQ0m
 -----END PGP SIGNATURE-----

Merge 5.10.80 into android12-5.10-lts

Changes in 5.10.80
	xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
	usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
	binder: use euid from cred instead of using task
	binder: use cred instead of task for selinux checks
	binder: use cred instead of task for getsecid
	Input: iforce - fix control-message timeout
	Input: elantench - fix misreporting trackpoint coordinates
	Input: i8042 - Add quirk for Fujitsu Lifebook T725
	libata: fix read log timeout value
	ocfs2: fix data corruption on truncate
	scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
	scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
	scsi: qla2xxx: Fix use after free in eh_abort path
	mmc: mtk-sd: Add wait dma stop done flow
	mmc: dw_mmc: Dont wait for DRTO on Write RSP error
	exfat: fix incorrect loading of i_blocks for large files
	parisc: Fix set_fixmap() on PA1.x CPUs
	parisc: Fix ptrace check on syscall return
	tpm: Check for integer overflow in tpm2_map_response_body()
	firmware/psci: fix application of sizeof to pointer
	crypto: s5p-sss - Add error handling in s5p_aes_probe()
	media: rkvdec: Do not override sizeimage for output format
	media: ite-cir: IR receiver stop working after receive overflow
	media: rkvdec: Support dynamic resolution changes
	media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
	media: v4l2-ioctl: Fix check_ext_ctrls
	ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
	ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
	ALSA: hda/realtek: Add quirk for Clevo PC70HS
	ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
	ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
	ALSA: hda/realtek: Add quirk for ASUS UX550VE
	ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
	ALSA: ua101: fix division by zero at probe
	ALSA: 6fire: fix control and bulk message timeouts
	ALSA: line6: fix control and interrupt message timeouts
	ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
	ALSA: usb-audio: Add registration quirk for JBL Quantum 400
	ALSA: hda: Free card instance properly at probe errors
	ALSA: synth: missing check for possible NULL after the call to kstrdup
	ALSA: timer: Fix use-after-free problem
	ALSA: timer: Unconditionally unlink slave instances, too
	ext4: fix lazy initialization next schedule time computation in more granular unit
	ext4: ensure enough credits in ext4_ext_shift_path_extents
	ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
	fuse: fix page stealing
	x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
	x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
	x86/irq: Ensure PI wakeup handler is unregistered before module unload
	ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked()
	ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers
	cavium: Return negative value when pci_alloc_irq_vectors() fails
	scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
	scsi: qla2xxx: Fix unmap of already freed sgl
	mISDN: Fix return values of the probe function
	cavium: Fix return values of the probe function
	sfc: Export fibre-specific supported link modes
	sfc: Don't use netif_info before net_device setup
	hyperv/vmbus: include linux/bitops.h
	ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode
	reset: socfpga: add empty driver allowing consumers to probe
	mmc: winbond: don't build on M68K
	drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
	fcnal-test: kill hanging ping/nettest binaries on cleanup
	bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
	bpf: Prevent increasing bpf_jit_limit above max
	gpio: mlxbf2.c: Add check for bgpio_init failure
	xen/netfront: stop tx queues during live migration
	nvmet-tcp: fix a memory leak when releasing a queue
	spi: spl022: fix Microwire full duplex mode
	net: multicast: calculate csum of looped-back and forwarded packets
	watchdog: Fix OMAP watchdog early handling
	drm: panel-orientation-quirks: Add quirk for GPD Win3
	block: schedule queue restart after BLK_STS_ZONE_RESOURCE
	nvmet-tcp: fix header digest verification
	r8169: Add device 10ec:8162 to driver r8169
	vmxnet3: do not stop tx queues after netif_device_detach()
	nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
	net/smc: Fix smc_link->llc_testlink_time overflow
	net/smc: Correct spelling mistake to TCPF_SYN_RECV
	rds: stop using dmapool
	btrfs: clear MISSING device status bit in btrfs_close_one_device
	btrfs: fix lost error handling when replaying directory deletes
	btrfs: call btrfs_check_rw_degradable only if there is a missing device
	KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup
	ia64: kprobes: Fix to pass correct trampoline address to the handler
	selinux: fix race condition when computing ocontext SIDs
	hwmon: (pmbus/lm25066) Add offset coefficients
	regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
	regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
	EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
	mwifiex: fix division by zero in fw download path
	ath6kl: fix division by zero in send path
	ath6kl: fix control-message timeout
	ath10k: fix control-message timeout
	ath10k: fix division by zero in send path
	PCI: Mark Atheros QCA6174 to avoid bus reset
	rtl8187: fix control-message timeouts
	evm: mark evm_fixmode as __ro_after_init
	ifb: Depend on netfilter alternatively to tc
	wcn36xx: Fix HT40 capability for 2Ghz band
	wcn36xx: Fix tx_status mechanism
	wcn36xx: Fix (QoS) null data frame bitrate/modulation
	PM: sleep: Do not let "syscore" devices runtime-suspend during system transitions
	mwifiex: Read a PCI register after writing the TX ring write pointer
	mwifiex: Try waking the firmware until we get an interrupt
	libata: fix checking of DMA state
	wcn36xx: handle connection loss indication
	rsi: fix occasional initialisation failure with BT coex
	rsi: fix key enabled check causing unwanted encryption for vap_id > 0
	rsi: fix rate mask set leading to P2P failure
	rsi: Fix module dev_oper_mode parameter description
	perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
	perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
	RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
	signal: Remove the bogus sigkill_pending in ptrace_stop
	memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
	signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
	soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
	soc: fsl: dpio: use the combined functions to protect critical zone
	mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines
	power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
	power: supply: max17042_battery: use VFSOC for capacity when no rsns
	KVM: arm64: Extract ESR_ELx.EC only
	KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
	can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
	can: j1939: j1939_can_recv(): ignore messages with invalid source address
	powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
	ring-buffer: Protect ring_buffer_reset() from reentrancy
	serial: core: Fix initializing and restoring termios speed
	ifb: fix building without CONFIG_NET_CLS_ACT
	ALSA: mixer: oss: Fix racy access to slots
	ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
	xen/balloon: add late_initcall_sync() for initial ballooning done
	ovl: fix use after free in struct ovl_aio_req
	PCI: pci-bridge-emul: Fix emulation of W1C bits
	PCI: cadence: Add cdns_plat_pcie_probe() missing return
	PCI: aardvark: Do not clear status bits of masked interrupts
	PCI: aardvark: Fix checking for link up via LTSSM state
	PCI: aardvark: Do not unmask unused interrupts
	PCI: aardvark: Fix reporting Data Link Layer Link Active
	PCI: aardvark: Fix configuring Reference clock
	PCI: aardvark: Fix return value of MSI domain .alloc() method
	PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
	PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge
	PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
	PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
	PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
	quota: check block number when reading the block in quota file
	quota: correct error number in free_dqentry()
	pinctrl: core: fix possible memory leak in pinctrl_enable()
	coresight: cti: Correct the parameter for pm_runtime_put
	iio: dac: ad5446: Fix ad5622_write() return value
	iio: ad5770r: make devicetree property reading consistent
	USB: serial: keyspan: fix memleak on probe errors
	serial: 8250: fix racy uartclk update
	most: fix control-message timeouts
	USB: iowarrior: fix control-message timeouts
	USB: chipidea: fix interrupt deadlock
	power: supply: max17042_battery: Clear status bits in interrupt handler
	dma-buf: WARN on dmabuf release with pending attachments
	drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
	drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
	drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
	Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
	Bluetooth: fix use-after-free error in lock_sock_nested()
	drm/panel-orientation-quirks: add Valve Steam Deck
	rcutorture: Avoid problematic critical section nesting on PREEMPT_RT
	platform/x86: wmi: do not fail if disabling fails
	MIPS: lantiq: dma: add small delay after reset
	MIPS: lantiq: dma: reset correct number of channel
	locking/lockdep: Avoid RCU-induced noinstr fail
	net: sched: update default qdisc visibility after Tx queue cnt changes
	rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
	smackfs: Fix use-after-free in netlbl_catmap_walk()
	ath11k: Align bss_chan_info structure with firmware
	x86: Increase exception stack sizes
	mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
	mwifiex: Properly initialize private structure on interface type changes
	fscrypt: allow 256-bit master keys with AES-256-XTS
	drm/amdgpu: Fix MMIO access page fault
	ath11k: Avoid reg rules update during firmware recovery
	ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
	ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets
	ath10k: high latency fixes for beacon buffer
	media: mt9p031: Fix corrupted frame after restarting stream
	media: netup_unidvb: handle interrupt properly according to the firmware
	media: atomisp: Fix error handling in probe
	media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
	media: uvcvideo: Set capability in s_param
	media: uvcvideo: Return -EIO for control errors
	media: uvcvideo: Set unique vdev name based in type
	media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
	media: s5p-mfc: Add checking to s5p_mfc_probe().
	media: imx: set a media_device bus_info string
	media: mceusb: return without resubmitting URB in case of -EPROTO error.
	ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
	rtw88: fix RX clock gate setting while fifo dump
	brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
	media: rcar-csi2: Add checking to rcsi2_start_receiver()
	ipmi: Disable some operations during a panic
	fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
	ACPICA: Avoid evaluating methods too early during system resume
	media: ipu3-imgu: imgu_fmt: Handle properly try
	media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
	media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
	net-sysfs: try not to restart the syscall if it will fail eventually
	tracefs: Have tracefs directories not set OTH permission bits by default
	ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
	mmc: moxart: Fix reference count leaks in moxart_probe
	iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
	ACPI: battery: Accept charges over the design capacity as full
	drm/amdkfd: fix resume error when iommu disabled in Picasso
	net: phy: micrel: make *-skew-ps check more lenient
	leaking_addresses: Always print a trailing newline
	drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
	block: bump max plugged deferred size from 16 to 32
	md: update superblock after changing rdev flags in state_store
	memstick: r592: Fix a UAF bug when removing the driver
	lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
	lib/xz: Validate the value before assigning it to an enum variable
	workqueue: make sysfs of unbound kworker cpumask more clever
	tracing/cfi: Fix cmp_entries_* functions signature mismatch
	mt76: mt7915: fix an off-by-one bound check
	mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
	block: remove inaccurate requeue check
	media: allegro: ignore interrupt if mailbox is not initialized
	nvmet: fix use-after-free when a port is removed
	nvmet-rdma: fix use-after-free when a port is removed
	nvmet-tcp: fix use-after-free when a port is removed
	nvme: drop scan_lock and always kick requeue list when removing namespaces
	PM: hibernate: Get block device exclusively in swsusp_check()
	selftests: kvm: fix mismatched fclose() after popen()
	selftests/bpf: Fix perf_buffer test on system with offline cpus
	iwlwifi: mvm: disable RX-diversity in powersave
	smackfs: use __GFP_NOFAIL for smk_cipso_doi()
	ARM: clang: Do not rely on lr register for stacktrace
	gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
	gfs2: Cancel remote delete work asynchronously
	gfs2: Fix glock_hash_walk bugs
	ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
	vrf: run conntrack only in context of lower/physdev for locally generated packets
	net: annotate data-race in neigh_output()
	ACPI: AC: Quirk GK45 to skip reading _PSR
	btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
	btrfs: do not take the uuid_mutex in btrfs_rm_device
	spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
	wcn36xx: Correct band/freq reporting on RX
	x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
	drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
	selftests/core: fix conflicting types compile error for close_range()
	parisc: fix warning in flush_tlb_all
	task_stack: Fix end_of_stack() for architectures with upwards-growing stack
	erofs: don't trigger WARN() when decompression fails
	parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
	parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
	netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state
	selftests/bpf: Fix strobemeta selftest regression
	Bluetooth: fix init and cleanup of sco_conn.timeout_work
	rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
	MIPS: lantiq: dma: fix burst length for DEU
	objtool: Add xen_start_kernel() to noreturn list
	x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
	objtool: Fix static_call list generation
	drm/v3d: fix wait for TMU write combiner flush
	virtio-gpu: fix possible memory allocation failure
	lockdep: Let lock_is_held_type() detect recursive read as read
	net: net_namespace: Fix undefined member in key_remove_domain()
	cgroup: Make rebind_subsystems() disable v2 controllers all at once
	wcn36xx: Fix Antenna Diversity Switching
	wilc1000: fix possible memory leak in cfg_scan_result()
	Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
	crypto: caam - disable pkc for non-E SoCs
	rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
	net: dsa: rtl8366rb: Fix off-by-one bug
	ath11k: fix some sleeping in atomic bugs
	ath11k: Avoid race during regd updates
	ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
	ath11k: Fix memory leak in ath11k_qmi_driver_event_work
	ath10k: Fix missing frame timestamp for beacon/probe-resp
	ath10k: sdio: Add missing BH locking around napi_schdule()
	drm/ttm: stop calling tt_swapin in vm_access
	arm64: mm: update max_pfn after memory hotplug
	drm/amdgpu: fix warning for overflow check
	media: em28xx: add missing em28xx_close_extension
	media: cxd2880-spi: Fix a null pointer dereference on error handling path
	media: dvb-usb: fix ununit-value in az6027_rc_query
	media: v4l2-ioctl: S_CTRL output the right value
	media: TDA1997x: handle short reads of hdmi info frame.
	media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
	media: radio-wl1273: Avoid card name truncation
	media: si470x: Avoid card name truncation
	media: tm6000: Avoid card name truncation
	media: cx23885: Fix snd_card_free call on null card pointer
	kprobes: Do not use local variable when creating debugfs file
	crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
	cpuidle: Fix kobject memory leaks in error paths
	media: em28xx: Don't use ops->suspend if it is NULL
	ath9k: Fix potential interrupt storm on queue reset
	PM: EM: Fix inefficient states detection
	EDAC/amd64: Handle three rank interleaving mode
	rcu: Always inline rcu_dynticks_task*_{enter,exit}()
	netfilter: nft_dynset: relax superfluous check on set updates
	media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
	crypto: qat - detect PFVF collision after ACK
	crypto: qat - disregard spurious PFVF interrupts
	hwrng: mtk - Force runtime pm ops for sleep ops
	b43legacy: fix a lower bounds test
	b43: fix a lower bounds test
	gve: Recover from queue stall due to missed IRQ
	mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
	mmc: sdhci-omap: Fix context restore
	memstick: avoid out-of-range warning
	memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
	net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
	hwmon: Fix possible memleak in __hwmon_device_register()
	hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
	ath10k: fix max antenna gain unit
	kernel/sched: Fix sched_fork() access an invalid sched_task_group
	tcp: switch orphan_count to bare per-cpu counters
	drm/msm: potential error pointer dereference in init()
	drm/msm: uninitialized variable in msm_gem_import()
	net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
	media: ir_toy: assignment to be16 should be of correct type
	mmc: mxs-mmc: disable regulator on error and in the remove function
	platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
	mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
	mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
	mt76: mt7915: fix possible infinite loop release semaphore
	mt76: mt7915: fix sta_rec_wtbl tag len
	mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
	rsi: stop thread firstly in rsi_91x_init() error handling
	mwifiex: Send DELBA requests according to spec
	net: enetc: unmap DMA in enetc_send_cmd()
	phy: micrel: ksz8041nl: do not use power down mode
	nvme-rdma: fix error code in nvme_rdma_setup_ctrl
	PM: hibernate: fix sparse warnings
	clocksource/drivers/timer-ti-dm: Select TIMER_OF
	x86/sev: Fix stack type check in vc_switch_off_ist()
	drm/msm: Fix potential NULL dereference in DPU SSPP
	smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
	KVM: selftests: Add operand to vmsave/vmload/vmrun in svm.c
	KVM: selftests: Fix nested SVM tests when built with clang
	bpftool: Avoid leaking the JSON writer prepared for program metadata
	libbpf: Fix BTF data layout checks and allow empty BTF
	libbpf: Allow loading empty BTFs
	libbpf: Fix overflow in BTF sanity checks
	libbpf: Fix BTF header parsing checks
	s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
	KVM: s390: pv: avoid double free of sida page
	KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
	irq: mips: avoid nested irq_enter()
	tpm: fix Atmel TPM crash caused by too frequent queries
	tpm_tis_spi: Add missing SPI ID
	libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
	tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
	spi: spi-rpc-if: Check return value of rpcif_sw_init()
	samples/kretprobes: Fix return value if register_kretprobe() failed
	KVM: s390: Fix handle_sske page fault handling
	libertas_tf: Fix possible memory leak in probe and disconnect
	libertas: Fix possible memory leak in probe and disconnect
	wcn36xx: add proper DMA memory barriers in rx path
	wcn36xx: Fix discarded frames due to wrong sequence number
	drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
	selftests: bpf: Convert sk_lookup ctx access tests to PROG_TEST_RUN
	selftests/bpf: Fix fd cleanup in sk_lookup test
	net: amd-xgbe: Toggle PLL settings during rate change
	net: phylink: avoid mvneta warning when setting pause parameters
	crypto: pcrypt - Delay write to padata->info
	selftests/bpf: Fix fclose/pclose mismatch in test_progs
	udp6: allow SO_MARK ctrl msg to affect routing
	ibmvnic: don't stop queue in xmit
	ibmvnic: Process crqs after enabling interrupts
	cgroup: Fix rootcg cpu.stat guest double counting
	bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.
	bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
	of: unittest: fix EXPECT text for gpio hog errors
	iio: st_sensors: Call st_sensors_power_enable() from bus drivers
	iio: st_sensors: disable regulators after device unregistration
	RDMA/rxe: Fix wrong port_cap_flags
	ARM: dts: BCM5301X: Fix memory nodes names
	clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
	ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
	arm64: dts: rockchip: Fix GPU register width for RK3328
	ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
	RDMA/bnxt_re: Fix query SRQ failure
	arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes
	arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe
	arm64: dts: meson-g12a: Fix the pwm regulator supply properties
	arm64: dts: meson-g12b: Fix the pwm regulator supply properties
	bus: ti-sysc: Fix timekeeping_suspended warning on resume
	ARM: dts: at91: tse850: the emac<->phy interface is rmii
	scsi: dc395: Fix error case unwinding
	MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
	JFS: fix memleak in jfs_mount
	arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock
	arm64: dts: renesas: beacon: Fix Ethernet PHY mode
	arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000
	ALSA: hda: Reduce udelay() at SKL+ position reporting
	ALSA: hda: Release controller display power during shutdown/reboot
	ALSA: hda: Fix hang during shutdown due to link reset
	ALSA: hda: Use position buffer for SKL+ again
	soundwire: debugfs: use controller id and link_id for debugfs
	scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
	driver core: Fix possible memory leak in device_link_add()
	arm: dts: omap3-gta04a4: accelerometer irq fix
	ASoC: SOF: topology: do not power down primary core during topology removal
	soc/tegra: Fix an error handling path in tegra_powergate_power_up()
	memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
	clk: at91: check pmc node status before registering syscore ops
	video: fbdev: chipsfb: use memset_io() instead of memset()
	powerpc: Refactor is_kvm_guest() declaration to new header
	powerpc: Rename is_kvm_guest() to check_kvm_guest()
	powerpc: Reintroduce is_kvm_guest() as a fast-path check
	powerpc: Fix is_kvm_guest() / kvm_para_available()
	powerpc: fix unbalanced node refcount in check_kvm_guest()
	serial: 8250_dw: Drop wrong use of ACPI_PTR()
	usb: gadget: hid: fix error code in do_config()
	power: supply: rt5033_battery: Change voltage values to µV
	power: supply: max17040: fix null-ptr-deref in max17040_probe()
	scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
	RDMA/mlx4: Return missed an error if device doesn't support steering
	usb: musb: select GENERIC_PHY instead of depending on it
	staging: most: dim2: do not double-register the same device
	staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
	pinctrl: renesas: checker: Fix off-by-one bug in drive register check
	ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz
	ARM: dts: stm32: fix SAI sub nodes register range
	ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
	ASoC: cs42l42: Correct some register default values
	ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
	soc: qcom: rpmhpd: Provide some missing struct member descriptions
	soc: qcom: rpmhpd: Make power_on actually enable the domain
	usb: typec: STUSB160X should select REGMAP_I2C
	iio: adis: do not disabe IRQs in 'adis_init()'
	scsi: ufs: Refactor ufshcd_setup_clocks() to remove skip_ref_clk
	scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer
	serial: imx: fix detach/attach of serial console
	usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
	usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled
	usb: dwc2: drd: reset current session before setting the new one
	firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()
	soc: qcom: apr: Add of_node_put() before return
	pinctrl: equilibrium: Fix function addition in multiple groups
	phy: qcom-qusb2: Fix a memory leak on probe
	phy: ti: gmii-sel: check of_get_address() for failure
	phy: qcom-snps: Correct the FSEL_MASK
	serial: xilinx_uartps: Fix race condition causing stuck TX
	clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL
	HID: u2fzero: clarify error check and length calculations
	HID: u2fzero: properly handle timeouts in usb_submit_urb
	powerpc/44x/fsp2: add missing of_node_put
	ASoC: cs42l42: Disable regulators if probe fails
	ASoC: cs42l42: Use device_property API instead of of_property
	ASoC: cs42l42: Correct configuring of switch inversion from ts-inv
	virtio_ring: check desc == NULL when using indirect with packed
	mips: cm: Convert to bitfield API to fix out-of-bounds access
	power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
	apparmor: fix error check
	rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
	nfsd: don't alloc under spinlock in rpc_parse_scope_id
	i2c: mediatek: fixing the incorrect register offset
	NFS: Fix dentry verifier races
	pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
	drm/plane-helper: fix uninitialized variable reference
	PCI: aardvark: Don't spam about PIO Response Status
	PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
	opp: Fix return in _opp_add_static_v2()
	NFS: Fix deadlocks in nfs_scan_commit_list()
	fs: orangefs: fix error return code of orangefs_revalidate_lookup()
	mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
	PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation
	mtd: core: don't remove debugfs directory if device is in use
	remoteproc: Fix a memory leak in an error handling path in 'rproc_handle_vdev()'
	rtc: rv3032: fix error handling in rv3032_clkout_set_rate()
	dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
	NFS: Fix up commit deadlocks
	NFS: Fix an Oops in pnfs_mark_request_commit()
	Fix user namespace leak
	auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
	auxdisplay: ht16k33: Connect backlight to fbdev
	auxdisplay: ht16k33: Fix frame buffer device blanking
	soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read
	netfilter: nfnetlink_queue: fix OOB when mac header was cleared
	dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
	signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
	m68k: set a default value for MEMORY_RESERVE
	watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
	ar7: fix kernel builds for compiler test
	scsi: qla2xxx: Changes to support FCP2 Target
	scsi: qla2xxx: Relogin during fabric disturbance
	scsi: qla2xxx: Fix gnl list corruption
	scsi: qla2xxx: Turn off target reset during issue_lip
	NFSv4: Fix a regression in nfs_set_open_stateid_locked()
	i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
	xen-pciback: Fix return in pm_ctrl_init()
	net: davinci_emac: Fix interrupt pacing disable
	ethtool: fix ethtool msg len calculation for pause stats
	openrisc: fix SMP tlb flush NULL pointer dereference
	net: vlan: fix a UAF in vlan_dev_real_dev()
	ice: Fix replacing VF hardware MAC to existing MAC filter
	ice: Fix not stopping Tx queues for VFs
	ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
	drm/nouveau/svm: Fix refcount leak bug and missing check against null bug
	net: phy: fix duplex out of sync problem while changing settings
	bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
	mfd: core: Add missing of_node_put for loop iteration
	can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for mcp251xfd_chip_rx_int_enable()
	mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
	zram: off by one in read_block_state()
	perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
	llc: fix out-of-bound array index in llc_sk_dev_hash()
	nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
	arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
	bpf, sockmap: Remove unhash handler for BPF sockmap usage
	bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
	gve: Fix off by one in gve_tx_timeout()
	seq_file: fix passing wrong private data
	net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
	net: hns3: fix kernel crash when unload VF while it is being reset
	net: hns3: allow configure ETS bandwidth of all TCs
	net: stmmac: allow a tc-taprio base-time of zero
	vsock: prevent unnecessary refcnt inc for nonblocking connect
	net/smc: fix sk_refcnt underflow on linkdown and fallback
	cxgb4: fix eeprom len when diagnostics not implemented
	selftests/net: udpgso_bench_rx: fix port argument
	ARM: 9155/1: fix early early_iounmap()
	ARM: 9156/1: drop cc-option fallbacks for architecture selection
	parisc: Fix backtrace to always include init funtion names
	MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
	x86/mce: Add errata workaround for Skylake SKX37
	posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
	irqchip/sifive-plic: Fixup EOI failed when masked
	f2fs: should use GFP_NOFS for directory inodes
	net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
	9p/net: fix missing error check in p9_check_errors
	memcg: prohibit unconditional exceeding the limit of dying tasks
	powerpc/lib: Add helper to check if offset is within conditional branch range
	powerpc/bpf: Validate branch ranges
	powerpc/security: Add a helper to query stf_barrier type
	powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
	mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
	mm, oom: do not trigger out_of_memory from the #PF
	mfd: dln2: Add cell for initializing DLN2 ADC
	video: backlight: Drop maximum brightness override for brightness zero
	s390/cio: check the subchannel validity for dev_busid
	s390/tape: fix timer initialization in tape_std_assign()
	s390/ap: Fix hanging ioctl caused by orphaned replies
	s390/cio: make ccw_device_dma_* more robust
	mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines
	mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines
	mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines
	mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines
	mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines
	mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines
	mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines
	mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines
	powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
	powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n
	drm/sun4i: Fix macros in sun8i_csc.h
	PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
	PCI: aardvark: Fix PCIe Max Payload Size setting
	SUNRPC: Partial revert of commit 6f9f17287e
	ath10k: fix invalid dma_addr_t token assignment
	mmc: moxart: Fix null pointer dereference on pointer host
	selftests/bpf: Fix also no-alu32 strobemeta selftest
	arch/cc: Introduce a function to check for confidential computing features
	x86/sev: Add an x86 version of cc_platform_has()
	x86/sev: Make the #VC exception stacks part of the default stacks storage
	soc/tegra: pmc: Fix imbalanced clock disabling in error code path
	Linux 5.10.80

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: I21c750863965fbf584251fa2de3c941ae5922d3f
 2021-11-19 11:50:41 +01:00
Michael Pratt
f67f6eb717 posix-cpu-timers: Clear task::posix_cputimers_work in copy_process() 
commit ca7752caeaa70bd31d1714af566c9809688544af upstream.

copy_process currently copies task_struct.posix_cputimers_work as-is. If a
timer interrupt arrives while handling clone and before dup_task_struct
completes then the child task will have:

1. posix_cputimers_work.scheduled = true
2. posix_cputimers_work.work queued.

copy_process clears task_struct.task_works, so (2) will have no effect and
posix_cpu_timers_work will never run (not to mention it doesn't make sense
for two tasks to share a common linked list).

Since posix_cpu_timers_work never runs, posix_cputimers_work.scheduled is
never cleared. Since scheduled is set, future timer interrupts will skip
scheduling work, with the ultimate result that the task will never receive
timer expirations.

Together, the complete flow is:

1. Task 1 calls clone(), enters kernel.
2. Timer interrupt fires, schedules task work on Task 1.
   2a. task_struct.posix_cputimers_work.scheduled = true
   2b. task_struct.posix_cputimers_work.work added to
       task_struct.task_works.
3. dup_task_struct() copies Task 1 to Task 2.
4. copy_process() clears task_struct.task_works for Task 2.
5. Future timer interrupts on Task 2 see
   task_struct.posix_cputimers_work.scheduled = true and skip scheduling
   work.

Fix this by explicitly clearing contents of task_struct.posix_cputimers_work
in copy_process(). This was never meant to be shared or inherited across
tasks in the first place.

Fixes: 1fb497dd00 ("posix-cpu-timers: Provide mechanisms to defer timer handling to task_work")
Reported-by: Rhys Hiltner <rhys@justin.tv>
Signed-off-by: Michael Pratt <mpratt@google.com>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Cc: <stable@vger.kernel.org>
Link: https://lore.kernel.org/r/20211101210615.716522-1-mpratt@google.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
 2021-11-18 14:04:29 +01:00
Zhang Qiao
c85c6fadbe kernel/sched: Fix sched_fork() access an invalid sched_task_group 
[ Upstream commit 4ef0c5c6b5ba1f38f0ea1cedad0cad722f00c14a ]

There is a small race between copy_process() and sched_fork()
where child->sched_task_group point to an already freed pointer.

	parent doing fork()      | someone moving the parent
				 | to another cgroup
  -------------------------------+-------------------------------
  copy_process()
      + dup_task_struct()<1>
				  parent move to another cgroup,
				  and free the old cgroup. <2>
      + sched_fork()
	+ __set_task_cpu()<3>
	+ task_fork_fair()
	  + sched_slice()<4>

In the worst case, this bug can lead to "use-after-free" and
cause panic as shown above:

  (1) parent copy its sched_task_group to child at <1>;

  (2) someone move the parent to another cgroup and free the old
      cgroup at <2>;

  (3) the sched_task_group and cfs_rq that belong to the old cgroup
      will be accessed at <3> and <4>, which cause a panic:

  [] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000
  [] PGD 8000001fa0a86067 P4D 8000001fa0a86067 PUD 2029955067 PMD 0
  [] Oops: 0000 [#1] SMP PTI
  [] CPU: 7 PID: 648398 Comm: ebizzy Kdump: loaded Tainted: G           OE    --------- -  - 4.18.0.x86_64+ #1
  [] RIP: 0010:sched_slice+0x84/0xc0

  [] Call Trace:
  []  task_fork_fair+0x81/0x120
  []  sched_fork+0x132/0x240
  []  copy_process.part.5+0x675/0x20e0
  []  ? __handle_mm_fault+0x63f/0x690
  []  _do_fork+0xcd/0x3b0
  []  do_syscall_64+0x5d/0x1d0
  []  entry_SYSCALL_64_after_hwframe+0x65/0xca
  [] RIP: 0033:0x7f04418cd7e1

Between cgroup_can_fork() and cgroup_post_fork(), the cgroup
membership and thus sched_task_group can't change. So update child's
sched_task_group at sched_post_fork() and move task_fork() and
__set_task_cpu() (where accees the sched_task_group) from sched_fork()
to sched_post_fork().

Fixes: 8323f26ce3 ("sched: Fix race in task_group")
Signed-off-by: Zhang Qiao <zhangqiao22@huawei.com>
Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>
Acked-by: Tejun Heo <tj@kernel.org>
Link: https://lkml.kernel.org/r/20210915064030.2231-1-zhangqiao22@huawei.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
 2021-11-18 14:04:07 +01:00
Greg Kroah-Hartman
08ed4cb090 Merge 5.10.67 into android12-5.10-lts 
Changes in 5.10.67
	rtc: tps65910: Correct driver module alias
	io_uring: limit fixed table size by RLIMIT_NOFILE
	io_uring: place fixed tables under memcg limits
	io_uring: add ->splice_fd_in checks
	io_uring: fail links of cancelled timeouts
	io-wq: fix wakeup race when adding new work
	btrfs: wake up async_delalloc_pages waiters after submit
	btrfs: reset replace target device to allocation state on close
	blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
	blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
	PCI/MSI: Skip masking MSI-X on Xen PV
	powerpc/perf/hv-gpci: Fix counter value parsing
	xen: fix setting of max_pfn in shared_info
	9p/xen: Fix end of loop tests for list_for_each_entry
	ceph: fix dereference of null pointer cf
	selftests/ftrace: Fix requirement check of README file
	tools/thermal/tmon: Add cross compiling support
	clk: socfpga: agilex: fix the parents of the psi_ref_clk
	clk: socfpga: agilex: fix up s2f_user0_clk representation
	clk: socfpga: agilex: add the bypass register for s2f_usr0 clock
	pinctrl: stmfx: Fix hazardous u8[] to unsigned long cast
	pinctrl: ingenic: Fix incorrect pull up/down info
	soc: qcom: aoss: Fix the out of bound usage of cooling_devs
	soc: aspeed: lpc-ctrl: Fix boundary check for mmap
	soc: aspeed: p2a-ctrl: Fix boundary check for mmap
	arm64: mm: Fix TLBI vs ASID rollover
	arm64: head: avoid over-mapping in map_memory
	iio: ltc2983: fix device probe
	wcn36xx: Ensure finish scan is not requested before start scan
	crypto: public_key: fix overflow during implicit conversion
	block: bfq: fix bfq_set_next_ioprio_data()
	power: supply: max17042: handle fails of reading status register
	dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
	crypto: ccp - shutdown SEV firmware on kexec
	VMCI: fix NULL pointer dereference when unmapping queue pair
	media: uvc: don't do DMA on stack
	media: rc-loopback: return number of emitters rather than error
	s390/qdio: fix roll-back after timeout on ESTABLISH ccw
	s390/qdio: cancel the ESTABLISH ccw after timeout
	Revert "dmaengine: imx-sdma: refine to load context only once"
	dmaengine: imx-sdma: remove duplicated sdma_load_context
	libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
	ARM: 9105/1: atags_to_fdt: don't warn about stack size
	f2fs: fix to do sanity check for sb/cp fields correctly
	PCI/portdrv: Enable Bandwidth Notification only if port supports it
	PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
	PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
	PCI: xilinx-nwl: Enable the clock through CCF
	PCI: aardvark: Configure PCIe resources from 'ranges' DT property
	PCI: Export pci_pio_to_address() for module use
	PCI: aardvark: Fix checking for PIO status
	PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
	HID: input: do not report stylus battery state as "full"
	f2fs: quota: fix potential deadlock
	pinctrl: remove empty lines in pinctrl subsystem
	pinctrl: armada-37xx: Correct PWM pins definitions
	scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND
	clk: rockchip: drop GRF dependency for rk3328/rk3036 pll types
	IB/hfi1: Adjust pkey entry in index 0
	RDMA/iwcm: Release resources if iw_cm module initialization fails
	docs: Fix infiniband uverbs minor number
	scsi: BusLogic: Use %X for u32 sized integer rather than %lX
	pinctrl: samsung: Fix pinctrl bank pin count
	vfio: Use config not menuconfig for VFIO_NOIOMMU
	scsi: ufs: Fix memory corruption by ufshcd_read_desc_param()
	cpuidle: pseries: Fixup CEDE0 latency only for POWER10 onwards
	powerpc/stacktrace: Include linux/delay.h
	RDMA/efa: Remove double QP type assignment
	RDMA/mlx5: Delete not-available udata check
	cpuidle: pseries: Mark pseries_idle_proble() as __init
	f2fs: reduce the scope of setting fsck tag when de->name_len is zero
	openrisc: don't printk() unconditionally
	dma-debug: fix debugfs initialization order
	NFSv4/pNFS: Fix a layoutget livelock loop
	NFSv4/pNFS: Always allow update of a zero valued layout barrier
	NFSv4/pnfs: The layout barrier indicate a minimal value for the seqid
	SUNRPC: Fix potential memory corruption
	SUNRPC/xprtrdma: Fix reconnection locking
	SUNRPC query transport's source port
	sunrpc: Fix return value of get_srcport()
	scsi: fdomain: Fix error return code in fdomain_probe()
	pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
	powerpc/numa: Consider the max NUMA node for migratable LPAR
	scsi: smartpqi: Fix an error code in pqi_get_raid_map()
	scsi: qedi: Fix error codes in qedi_alloc_global_queues()
	scsi: qedf: Fix error codes in qedf_alloc_global_queues()
	powerpc/config: Renable MTD_PHYSMAP_OF
	iommu/vt-d: Update the virtual command related registers
	HID: i2c-hid: Fix Elan touchpad regression
	clk: imx8m: fix clock tree update of TF-A managed clocks
	KVM: PPC: Book3S HV: Fix copy_tofrom_guest routines
	scsi: ufs: ufs-exynos: Fix static checker warning
	KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live
	platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call
	powerpc/smp: Update cpu_core_map on all PowerPc systems
	RDMA/hns: Fix QP's resp incomplete assignment
	fscache: Fix cookie key hashing
	clk: at91: clk-generated: Limit the requested rate to our range
	KVM: PPC: Fix clearing never mapped TCEs in realmode
	soc: mediatek: cmdq: add address shift in jump
	f2fs: fix to account missing .skipped_gc_rwsem
	f2fs: fix unexpected ENOENT comes from f2fs_map_blocks()
	f2fs: fix to unmap pages from userspace process in punch_hole()
	f2fs: deallocate compressed pages when error happens
	f2fs: should put a page beyond EOF when preparing a write
	MIPS: Malta: fix alignment of the devicetree buffer
	kbuild: Fix 'no symbols' warning when CONFIG_TRIM_UNUSD_KSYMS=y
	userfaultfd: prevent concurrent API initialization
	drm/vc4: hdmi: Set HD_CTL_WHOLSMP and HD_CTL_CHALIGN_SET
	drm/amdgpu: Fix amdgpu_ras_eeprom_init()
	ASoC: atmel: ATMEL drivers don't need HAS_DMA
	media: dib8000: rewrite the init prbs logic
	libbpf: Fix reuse of pinned map on older kernel
	x86/hyperv: fix for unwanted manipulation of sched_clock when TSC marked unstable
	crypto: mxs-dcp - Use sg_mapping_iter to copy data
	PCI: Use pci_update_current_state() in pci_enable_device_flags()
	tipc: keep the skb in rcv queue until the whole data is read
	net: phy: Fix data type in DP83822 dp8382x_disable_wol()
	iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
	iavf: do not override the adapter state in the watchdog task
	iavf: fix locking of critical sections
	ARM: dts: qcom: apq8064: correct clock names
	video: fbdev: kyro: fix a DoS bug by restricting user input
	netlink: Deal with ESRCH error in nlmsg_notify()
	Smack: Fix wrong semantics in smk_access_entry()
	drm: avoid blocking in drm_clients_info's rcu section
	drm: serialize drm_file.master with a new spinlock
	drm: protect drm_master pointers in drm_lease.c
	rcu: Fix macro name CONFIG_TASKS_RCU_TRACE
	igc: Check if num of q_vectors is smaller than max before array access
	usb: host: fotg210: fix the endpoint's transactional opportunities calculation
	usb: host: fotg210: fix the actual_length of an iso packet
	usb: gadget: u_ether: fix a potential null pointer dereference
	USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable()
	usb: gadget: composite: Allow bMaxPower=0 if self-powered
	staging: board: Fix uninitialized spinlock when attaching genpd
	tty: serial: jsm: hold port lock when reporting modem line changes
	bus: fsl-mc: fix mmio base address for child DPRCs
	selftests: firmware: Fix ignored return val of asprintf() warn
	drm/amd/display: Fix timer_per_pixel unit error
	media: hantro: vp8: Move noisy WARN_ON to vpu_debug
	media: platform: stm32: unprepare clocks at handling errors in probe
	media: atomisp: Fix runtime PM imbalance in atomisp_pci_probe
	media: atomisp: pci: fix error return code in atomisp_pci_probe()
	nfp: fix return statement in nfp_net_parse_meta()
	ethtool: improve compat ioctl handling
	drm/amdgpu: Fix a printing message
	drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex
	bpf/tests: Fix copy-and-paste error in double word test
	bpf/tests: Do not PASS tests without actually testing the result
	drm/bridge: nwl-dsi: Avoid potential multiplication overflow on 32-bit
	arm64: dts: allwinner: h6: tanix-tx6: Fix regulator node names
	video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
	video: fbdev: kyro: Error out if 'pixclock' equals zero
	video: fbdev: riva: Error out if 'pixclock' equals zero
	ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
	flow_dissector: Fix out-of-bounds warnings
	s390/jump_label: print real address in a case of a jump label bug
	s390: make PCI mio support a machine flag
	serial: 8250: Define RX trigger levels for OxSemi 950 devices
	xtensa: ISS: don't panic in rs_init
	hvsi: don't panic on tty_register_driver failure
	serial: 8250_pci: make setup_port() parameters explicitly unsigned
	staging: ks7010: Fix the initialization of the 'sleep_status' structure
	samples: bpf: Fix tracex7 error raised on the missing argument
	libbpf: Fix race when pinning maps in parallel
	ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
	Bluetooth: skip invalid hci_sync_conn_complete_evt
	workqueue: Fix possible memory leaks in wq_numa_init()
	ARM: dts: stm32: Set {bitclock,frame}-master phandles on DHCOM SoM
	ARM: dts: stm32: Set {bitclock,frame}-master phandles on ST DKx
	ARM: dts: stm32: Update AV96 adv7513 node per dtbs_check
	bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler()
	ARM: dts: at91: use the right property for shutdown controller
	arm64: tegra: Fix Tegra194 PCIe EP compatible string
	ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output
	ASoC: Intel: update sof_pcm512x quirks
	media: imx258: Rectify mismatch of VTS value
	media: imx258: Limit the max analogue gain to 480
	media: v4l2-dv-timings.c: fix wrong condition in two for-loops
	media: TDA1997x: fix tda1997x_query_dv_timings() return value
	media: tegra-cec: Handle errors of clk_prepare_enable()
	gfs2: Fix glock recursion in freeze_go_xmote_bh
	arm64: dts: qcom: sdm630: Rewrite memory map
	arm64: dts: qcom: sdm630: Fix TLMM node and pinctrl configuration
	serial: 8250_omap: Handle optional overrun-throttle-ms property
	ARM: dts: imx53-ppd: Fix ACHC entry
	arm64: dts: qcom: ipq8074: fix pci node reg property
	arm64: dts: qcom: sdm660: use reg value for memory node
	arm64: dts: qcom: ipq6018: drop '0x' from unit address
	arm64: dts: qcom: sdm630: don't use underscore in node name
	arm64: dts: qcom: msm8994: don't use underscore in node name
	arm64: dts: qcom: msm8996: don't use underscore in node name
	arm64: dts: qcom: sm8250: Fix epss_l3 unit address
	nvmem: qfprom: Fix up qfprom_disable_fuse_blowing() ordering
	net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
	drm/msm: mdp4: drop vblank get/put from prepare/complete_commit
	drm/msm/dsi: Fix DSI and DSI PHY regulator config from SDM660
	drm: xlnx: zynqmp_dpsub: Call pm_runtime_get_sync before setting pixel clock
	drm: xlnx: zynqmp: release reset to DP controller before accessing DP registers
	thunderbolt: Fix port linking by checking all adapters
	drm/amd/display: fix missing writeback disablement if plane is removed
	drm/amd/display: fix incorrect CM/TF programming sequence in dwb
	selftests/bpf: Fix xdp_tx.c prog section name
	drm/vmwgfx: fix potential UAF in vmwgfx_surface.c
	Bluetooth: schedule SCO timeouts with delayed_work
	Bluetooth: avoid circular locks in sco_sock_connect
	drm/msm/dp: return correct edid checksum after corrupted edid checksum read
	net/mlx5: Fix variable type to match 64bit
	gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
	drm/display: fix possible null-pointer dereference in dcn10_set_clock()
	mac80211: Fix monitor MTU limit so that A-MSDUs get through
	ARM: tegra: acer-a500: Remove bogus USB VBUS regulators
	ARM: tegra: tamonten: Fix UART pad setting
	arm64: tegra: Fix compatible string for Tegra132 CPUs
	arm64: dts: ls1046a: fix eeprom entries
	nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data
	nvme: code command_id with a genctr for use-after-free validation
	Bluetooth: Fix handling of LE Enhanced Connection Complete
	opp: Don't print an error if required-opps is missing
	serial: sh-sci: fix break handling for sysrq
	iomap: pass writeback errors to the mapping
	tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
	rpc: fix gss_svc_init cleanup on failure
	selftests/bpf: Fix flaky send_signal test
	hwmon: (pmbus/ibm-cffps) Fix write bits for LED control
	staging: rts5208: Fix get_ms_information() heap buffer size
	net: Fix offloading indirect devices dependency on qdisc order creation
	kselftest/arm64: mte: Fix misleading output when skipping tests
	kselftest/arm64: pac: Fix skipping of tests on systems without PAC
	gfs2: Don't call dlm after protocol is unmounted
	usb: chipidea: host: fix port index underflow and UBSAN complains
	lockd: lockd server-side shouldn't set fl_ops
	drm/exynos: Always initialize mapping in exynos_drm_register_dma()
	rtl8xxxu: Fix the handling of TX A-MPDU aggregation
	rtw88: use read_poll_timeout instead of fixed sleep
	rtw88: wow: build wow function only if CONFIG_PM is on
	rtw88: wow: fix size access error of probe request
	octeontx2-pf: Fix NIX1_RX interface backpressure
	m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch
	btrfs: tree-log: check btrfs_lookup_data_extent return value
	soundwire: intel: fix potential race condition during power down
	ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER
	ASoC: Intel: Skylake: Fix passing loadable flag for module
	of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
	mmc: sdhci-of-arasan: Modified SD default speed to 19MHz for ZynqMP
	mmc: sdhci-of-arasan: Check return value of non-void funtions
	mmc: rtsx_pci: Fix long reads when clock is prescaled
	selftests/bpf: Enlarge select() timeout for test_maps
	mmc: core: Return correct emmc response in case of ioctl error
	cifs: fix wrong release in sess_alloc_buffer() failed path
	Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
	usb: musb: musb_dsps: request_irq() after initializing musb
	usbip: give back URBs for unsent unlink requests during cleanup
	usbip:vhci_hcd USB port can get stuck in the disabled state
	ASoC: rockchip: i2s: Fix regmap_ops hang
	ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
	drm/amdkfd: Account for SH/SE count when setting up cu masks.
	nfsd: fix crash on LOCKT on reexported NFSv3
	iwlwifi: pcie: free RBs during configure
	iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed
	iwlwifi: mvm: avoid static queue number aliasing
	iwlwifi: mvm: fix access to BSS elements
	iwlwifi: fw: correctly limit to monitor dump
	iwlwifi: mvm: Fix scan channel flags settings
	net/mlx5: DR, fix a potential use-after-free bug
	net/mlx5: DR, Enable QP retransmission
	parport: remove non-zero check on count
	selftests/bpf: Fix potential unreleased lock
	wcn36xx: Fix missing frame timestamp for beacon/probe-resp
	ath9k: fix OOB read ar9300_eeprom_restore_internal
	ath9k: fix sleeping in atomic context
	net: fix NULL pointer reference in cipso_v4_doi_free
	fix array-index-out-of-bounds in taprio_change
	net: w5100: check return value after calling platform_get_resource()
	net: hns3: clean up a type mismatch warning
	fs/io_uring Don't use the return value from import_iovec().
	io_uring: remove duplicated io_size from rw
	parisc: fix crash with signals and alloca
	ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()
	scsi: BusLogic: Fix missing pr_cont() use
	scsi: qla2xxx: Changes to support kdump kernel
	scsi: qla2xxx: Sync queue idx with queue_pair_map idx
	cpufreq: powernv: Fix init_chip_info initialization in numa=off
	s390/pv: fix the forcing of the swiotlb
	hugetlb: fix hugetlb cgroup refcounting during vma split
	mm/hmm: bypass devmap pte when all pfn requested flags are fulfilled
	mm/hugetlb: initialize hugetlb_usage in mm_init
	mm,vmscan: fix divide by zero in get_scan_count
	memcg: enable accounting for pids in nested pid namespaces
	libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind
	platform/chrome: cros_ec_proto: Send command again when timeout occurs
	lib/test_stackinit: Fix static initializer test
	net: dsa: lantiq_gswip: fix maximum frame length
	drm/mgag200: Select clock in PLL update functions
	drm/msi/mdp4: populate priv->kms in mdp4_kms_init
	drm/dp_mst: Fix return code on sideband message failure
	drm/panfrost: Make sure MMU context lifetime is not bound to panfrost_priv
	drm/amdgpu: Fix BUG_ON assert
	drm/amd/display: Update number of DCN3 clock states
	drm/amd/display: Update bounding box states (v2)
	drm/panfrost: Simplify lock_region calculation
	drm/panfrost: Use u64 for size in lock_region
	drm/panfrost: Clamp lock region to Bifrost minimum
	fanotify: limit number of event merge attempts
	Linux 5.10.67

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: Ic8df59518265d0cdf724e93e8922cde48fc85ce9
 2021-09-30 12:21:03 +02:00
Liu Zixian
2d2d8b0eca mm/hugetlb: initialize hugetlb_usage in mm_init 
commit 13db8c50477d83ad3e3b9b0ae247e5cd833a7ae4 upstream.

After fork, the child process will get incorrect (2x) hugetlb_usage.  If
a process uses 5 2MB hugetlb pages in an anonymous mapping,

	HugetlbPages:	   10240 kB

and then forks, the child will show,

	HugetlbPages:	   20480 kB

The reason for double the amount is because hugetlb_usage will be copied
from the parent and then increased when we copy page tables from parent
to child.  Child will have 2x actual usage.

Fix this by adding hugetlb_count_init in mm_init.

Link: https://lkml.kernel.org/r/20210826071742.877-1-liuzixian4@huawei.com
Fixes: 5d317b2b65 ("mm: hugetlb: proc: add HugetlbPages field to /proc/PID/status")
Signed-off-by: Liu Zixian <liuzixian4@huawei.com>
Reviewed-by: Naoya Horiguchi <naoya.horiguchi@nec.com>
Reviewed-by: Mike Kravetz <mike.kravetz@oracle.com>
Cc: <stable@vger.kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
 2021-09-18 13:40:36 +02:00
Greg Kroah-Hartman
ae16b7c668 Revert "Add a reference to ucounts for each cred" 
This reverts commit b2c4d9a33c which is
commit 905ae01c4ae2ae3df05bb141801b1db4b7d83c61 upstream.

This commit should not have been applied to the 5.10.y stable tree, so
revert it.

Reported-by: "Eric W. Biederman" <ebiederm@xmission.com>
Link: https://lore.kernel.org/r/87v93k4bl6.fsf@disp2133
Cc: Alexey Gladkov <legion@kernel.org>
Cc: Sasha Levin <sashal@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
 2021-09-08 08:49:00 +02:00
Greg Kroah-Hartman
1328352dcd Merge branch 'android12-5.10' into android12-5.10-lts 
Sync up with android12-5.10 for the following commits:

870488eb07 ANDROID: GKI: 7/14/2021 KMI update
e9742a9ea5 ANDROID: Update the ABI symbol list
ec2190fd3f FROMLIST: arm64: avoid double ISB on kernel entry
98b2c1dd1c FROMLIST: arm64: mte: optimize GCR_EL1 modification on kernel entry/exit
a20103c331 BACKPORT: FROMLIST: arm64: mte: avoid TFSR related operations unless in async mode
3972be647a FROMLIST: Documentation: document the preferred tag checking mode feature
5adf29adb5 FROMLIST: arm64: mte: introduce a per-CPU tag checking mode preference
ce5ba15abc FROMLIST: arm64: move preemption disablement to prctl handlers
6c08feaa27 FROMLIST: arm64: mte: change ASYNC and SYNC TCF settings into bitfields
f438cf16cd FROMLIST: arm64: mte: rename gcr_user_excl to mte_ctrl
a4c9e551b6 BACKPORT: arm64: pac: Optimize kernel entry/exit key installation code paths
50829b8901 BACKPORT: arm64: Introduce prctl(PR_PAC_{SET,GET}_ENABLED_KEYS)
6119d18df7 ANDROID: cleancache: add oem data to cleancache_ops
a0c429e8e1 ANDROID: blkdev: add oem data to block_device_operations
26cd2564e1 FROMLIST: psi: stop relying on timer_pending for poll_work rescheduling
e85b291d7d ANDROID: GKI: Enable CONFIG_MEMCG
0ed7424fa0 ANDROID: GKI: net: add vendor hooks for 'struct sock' lifecycle
4d30956478 ANDROID: GKI: net: add vendor hooks for 'struct nf_conn' lifecycle
7786463e48 ANDROID: GKI: add vendor padding variable in struct sock
280c9b98aa ANDROID: GKI: add vendor padding variable in struct nf_conn
9d1b55d20a ANDROID: vendor_hooks: add a field in mem_cgroup
65115fdbf8 ANDROID: vendor_hooks: add a field in pglist_data
26920e0f3a FROMLIST: usb: dwc3: avoid NULL access of usb_gadget_driver
5bb2dd8d39 FROMGIT: usb: dwc3: dwc3-qcom: Enable tx-fifo-resize property by default
79274dbb00 FROMGIT: usb: dwc3: Resize TX FIFOs to meet EP bursting requirements
1e11f36199 FROMGIT: usb: gadget: configfs: Check USB configuration before adding
6da5e7afbf FROMGIT: usb: gadget: udc: core: Introduce check_config to verify USB configuration
2ed5fbf261 ANDROID: GKI: fscrypt: add OEM data to struct fscrypt_operations
194fd9239a ANDROID: GKI: fscrypt: add ABI padding to struct fscrypt_operations
8011eb2215 ANDROID: mm: provision to add shmem pages to inactive file lru head
9bb1247653 ANDROID: GKI: Enable CONFIG_CGROUP_NET_PRIO
a1ce719ca7 ANDROID: Delete the DMA-BUF attachment sysfs statistics
a2b3afb2f7 ANDROID: android: Add symbols to debug_symbols driver
914a7b14a0 UPSTREAM: USB: UDC core: Add udc_async_callbacks gadget op
9af9ef8dfa ANDROID: vendor_hooks: Add oem data to file struct
37485a3025 ANDROID: add kabi padding for structures for the android12 release
429c78f9b0 ANDROID: GKI: device.h: add Android ABI padding to some structures
aea5e1c230 ANDROID: GKI: elevator: add Android ABI padding to some structures
1b79ef2754 ANDROID: GKI: scsi: add Android ABI padding to some structures
33175403b9 ANDROID: GKI: workqueue.h: add Android ABI padding to some structures
d5c344a498 ANDROID: GKI: sched: add Android ABI padding to some structures
9c4854fa5a ANDROID: GKI: phy: add Android ABI padding to some structures
f4872b2353 ANDROID: GKI: fs.h: add Android ABI padding to some structures
48cddc7c42 ANDROID: GKI: dentry: add Android ABI padding to some structures
b9081a2925 ANDROID: GKI: bio: add Android ABI padding to some structures
99bf8cf8fa ANDROID: GKI: ufs: add Android ABI padding to some structures
9df147298f ANDROID: Update the generic symbol list
12f48605e8 ANDROID: mm: cma do not sleep for __GFP_NORETRY
0e688e972d ANDROID: mm: cma: skip problematic pageblock
9938b82be1 ANDROID: mm: bail out tlb free batching on page zapping when cma is going on
c8578a3e90 ANDROID: mm: lru_cache_disable skips lru cache drainnig
c01ce3b5ef ANDROID: mm: do not try test_page_isoalte if migration fails
675e504598 ANDROID: mm: add cma allocation statistics
b1e4543c27 UPSTREAM: mm, page_alloc: move draining pcplists to page isolation users
13bc06efd9 ANDROID: ALSA: compress: add vendor hook to support pause in draining
2faed77792 ANDROID: vendor_hooks: add vendor hook in blk_mq_rq_ctx_init()
292baba45a ANDROID: abi_gki_aarch64_qcom: Add I3C core symbols to qcom tree
eecc725a8e ANDROID: vendor_hooks: add vendor hook in blk_mq_alloc_rqs()
9c2958f454 ANDROID: GKI: Export put_task_stack symbol
288805c86a ANDROID: abi_gki_aarch64_qcom: Add idr_alloc_u32
e8516fd3af ANDROID: sound: usb: add vendor hook for cpu suspend support
d820d22b5d ANDROID: mm: page_pinner: use EXPORT_SYMBOL_GPL
efc09793ea ANDROID: GKI: update allowed GKI symbol for Exynosauto SoC
67e3e39eb1 ANDROID: GKI: sync allowed list for exynosauto SoC
d25e256373 ANDROID: ABI: add new symbols required by fips140.ko
50661975be ANDROID: fips140: add/update module help text
b7397e89db ANDROID: fips140: add power-up cryptographic self-tests
bd7d13c36e ANDROID: arm64: disable LSE when building the FIPS140 module
1061ef0493 ANDROID: jump_label: disable jump labels in fips140.ko
dcf509fea7 ANDROID: ipv6: add vendor hook for gen ipv6 link-local addr
018332e871 ANDROID: Revert "scsi: block: Do not accept any requests while suspended"
2ad2c3a25b ANDROID: abi_gki_aarch64_qcom: whitelist vm_event_states
7bcfde2601 ANDROID: ashmem: Export is_ashmem_file

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: I7d60121fa9f25f007dab97dd666adcdb1964afc8
 2021-07-15 17:17:09 +02:00
Greg Kroah-Hartman
11b396dfd9 Revert "Add a reference to ucounts for each cred" 
This reverts commit b2c4d9a33c.

It breaks the abi and is not needed on Android kernels.

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: I295a6c8088e4297400c1feebd78abd2f6c5edd7e
 2021-07-14 19:46:17 +02:00
Greg Kroah-Hartman
2df0fb4a4b This is the 5.10.50 stable release 
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmDu+1UACgkQONu9yGCS
 aT7jQRAAuLDi7ejk3JUameYFMzVXGAUE6yPs392/lWJzey7IBf+2uLqz4FzqqUHp
 U1GkEKJVaCacEfi0+rpi7BxNFljUdZdg/F/P68ARtAWPvwqAeJ4QIh5u3A682UUO
 1M5h6e5/oY9F4kQIb5Kot04avqOeR6lTqrkA8jeP5h43ngyLWuS2d+5oOGmbCukS
 UgEaCC6CiKjcN51UUTj/fXMQ0X4IDHP5pD8rWwH0IvK0i7gduvk744un8LVB6aW1
 rNV88C3BEFFtkPQh2XySnXM5Ok8kYlhFoTDsqlpeAX7pA8hiUPYBoRzTg0MJtPZn
 N1L/Yqhvxmn5xs9HAw7mDOo8E8NWXzsT5FvZVaBeiCgtdKmcPszylXqmSt1oiOb0
 /EmkCWmlbG/3qWql24+LU4XP36iVPx32HQxAgg2XbnlNU5o0E1y2F98p6p/3JSWX
 NAjHtmg/MxueFQ+w8bDzhO8YzYn1dIU3V3qaXRvtpODrmaSYW+bwCyPtSjXe3/vL
 604zb3dOg9+tD/gKqfRb/UPMu24nNll8M/gnSRci05/thmIxwtYudPwoLNSejDqr
 e+a8vejISfIyp41XrpYQbUeKs1WOA+A7vgx6CZrT791afiT+6UgC/ecQfg1NFxhs
 8ayWpocaIszxyXxVGro1rfwZeQmTlbTCZ5wVdpn9sDPZfI7epts=
 =FCrA
 -----END PGP SIGNATURE-----

Merge 5.10.50 into android12-5.10-lts

Changes in 5.10.50
	Bluetooth: hci_qca: fix potential GPF
	Bluetooth: btqca: Don't modify firmware contents in-place
	Bluetooth: Remove spurious error message
	ALSA: usb-audio: fix rate on Ozone Z90 USB headset
	ALSA: usb-audio: Fix OOB access at proc output
	ALSA: firewire-motu: fix stream format for MOTU 8pre FireWire
	ALSA: usb-audio: scarlett2: Fix wrong resume call
	ALSA: intel8x0: Fix breakage at ac97 clock measurement
	ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 450 G8
	ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 445 G8
	ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 630 G8
	ALSA: hda/realtek: Add another ALC236 variant support
	ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook x360 830 G8
	ALSA: hda/realtek: Improve fixup for HP Spectre x360 15-df0xxx
	ALSA: hda/realtek: Fix bass speaker DAC mapping for Asus UM431D
	ALSA: hda/realtek: Apply LED fixup for HP Dragonfly G1, too
	ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 830 G8 Notebook PC
	media: dvb-usb: fix wrong definition
	Input: usbtouchscreen - fix control-request directions
	net: can: ems_usb: fix use-after-free in ems_usb_disconnect()
	usb: gadget: eem: fix echo command packet response issue
	usb: renesas-xhci: Fix handling of unknown ROM state
	USB: cdc-acm: blacklist Heimann USB Appset device
	usb: dwc3: Fix debugfs creation flow
	usb: typec: Add the missed altmode_id_remove() in typec_register_altmode()
	xhci: solve a double free problem while doing s4
	gfs2: Fix underflow in gfs2_page_mkwrite
	gfs2: Fix error handling in init_statfs
	ntfs: fix validity check for file name attribute
	selftests/lkdtm: Avoid needing explicit sub-shell
	copy_page_to_iter(): fix ITER_DISCARD case
	iov_iter_fault_in_readable() should do nothing in xarray case
	Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl
	crypto: nx - Fix memcpy() over-reading in nonce
	crypto: ccp - Annotate SEV Firmware file names
	arm_pmu: Fix write counter incorrect in ARMv7 big-endian mode
	ARM: dts: ux500: Fix LED probing
	ARM: dts: at91: sama5d4: fix pinctrl muxing
	btrfs: send: fix invalid path for unlink operations after parent orphanization
	btrfs: compression: don't try to compress if we don't have enough pages
	btrfs: clear defrag status of a root if starting transaction fails
	ext4: cleanup in-core orphan list if ext4_truncate() failed to get a transaction handle
	ext4: fix kernel infoleak via ext4_extent_header
	ext4: fix overflow in ext4_iomap_alloc()
	ext4: return error code when ext4_fill_flex_info() fails
	ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit
	ext4: remove check for zero nr_to_scan in ext4_es_scan()
	ext4: fix avefreec in find_group_orlov
	ext4: use ext4_grp_locked_error in mb_find_extent
	can: bcm: delay release of struct bcm_op after synchronize_rcu()
	can: gw: synchronize rcu operations before removing gw job entry
	can: isotp: isotp_release(): omit unintended hrtimer restart on socket release
	can: j1939: j1939_sk_init(): set SOCK_RCU_FREE to call sk_destruct() after RCU is done
	can: peak_pciefd: pucan_handle_status(): fix a potential starvation issue in TX path
	mac80211: remove iwlwifi specific workaround that broke sta NDP tx
	SUNRPC: Fix the batch tasks count wraparound.
	SUNRPC: Should wake up the privileged task firstly.
	bus: mhi: Wait for M2 state during system resume
	mm/gup: fix try_grab_compound_head() race with split_huge_page()
	perf/smmuv3: Don't trample existing events with global filter
	KVM: nVMX: Handle split-lock #AC exceptions that happen in L2
	KVM: PPC: Book3S HV: Workaround high stack usage with clang
	KVM: x86/mmu: Treat NX as used (not reserved) for all !TDP shadow MMUs
	KVM: x86/mmu: Use MMU's role to detect CR4.SMEP value in nested NPT walk
	s390/cio: dont call css_wait_for_slow_path() inside a lock
	s390: mm: Fix secure storage access exception handling
	f2fs: Prevent swap file in LFS mode
	clk: agilex/stratix10/n5x: fix how the bypass_reg is handled
	clk: agilex/stratix10: remove noc_clk
	clk: agilex/stratix10: fix bypass representation
	rtc: stm32: Fix unbalanced clk_disable_unprepare() on probe error path
	iio: frequency: adf4350: disable reg and clk on error in adf4350_probe()
	iio: light: tcs3472: do not free unallocated IRQ
	iio: ltr501: mark register holding upper 8 bits of ALS_DATA{0,1} and PS_DATA as volatile, too
	iio: ltr501: ltr559: fix initialization of LTR501_ALS_CONTR
	iio: ltr501: ltr501_read_ps(): add missing endianness conversion
	iio: accel: bma180: Fix BMA25x bandwidth register values
	serial: mvebu-uart: fix calculation of clock divisor
	serial: sh-sci: Stop dmaengine transfer in sci_stop_tx()
	serial_cs: Add Option International GSM-Ready 56K/ISDN modem
	serial_cs: remove wrong GLOBETROTTER.cis entry
	ath9k: Fix kernel NULL pointer dereference during ath_reset_internal()
	ssb: sdio: Don't overwrite const buffer if block_write fails
	rsi: Assign beacon rate settings to the correct rate_info descriptor field
	rsi: fix AP mode with WPA failure due to encrypted EAPOL
	tracing/histograms: Fix parsing of "sym-offset" modifier
	tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing
	seq_buf: Make trace_seq_putmem_hex() support data longer than 8
	powerpc/stacktrace: Fix spurious "stale" traces in raise_backtrace_ipi()
	loop: Fix missing discard support when using LOOP_CONFIGURE
	evm: Execute evm_inode_init_security() only when an HMAC key is loaded
	evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loaded
	fuse: Fix crash in fuse_dentry_automount() error path
	fuse: Fix crash if superblock of submount gets killed early
	fuse: Fix infinite loop in sget_fc()
	fuse: ignore PG_workingset after stealing
	fuse: check connected before queueing on fpq->io
	fuse: reject internal errno
	thermal/cpufreq_cooling: Update offline CPUs per-cpu thermal_pressure
	spi: Make of_register_spi_device also set the fwnode
	Add a reference to ucounts for each cred
	staging: media: rkvdec: fix pm_runtime_get_sync() usage count
	media: marvel-ccic: fix some issues when getting pm_runtime
	media: mdk-mdp: fix pm_runtime_get_sync() usage count
	media: s5p: fix pm_runtime_get_sync() usage count
	media: am437x: fix pm_runtime_get_sync() usage count
	media: sh_vou: fix pm_runtime_get_sync() usage count
	media: mtk-vcodec: fix PM runtime get logic
	media: s5p-jpeg: fix pm_runtime_get_sync() usage count
	media: sunxi: fix pm_runtime_get_sync() usage count
	media: sti/bdisp: fix pm_runtime_get_sync() usage count
	media: exynos4-is: fix pm_runtime_get_sync() usage count
	media: exynos-gsc: fix pm_runtime_get_sync() usage count
	spi: spi-loopback-test: Fix 'tx_buf' might be 'rx_buf'
	spi: spi-topcliff-pch: Fix potential double free in pch_spi_process_messages()
	spi: omap-100k: Fix the length judgment problem
	regulator: uniphier: Add missing MODULE_DEVICE_TABLE
	sched/core: Initialize the idle task with preemption disabled
	hwrng: exynos - Fix runtime PM imbalance on error
	crypto: nx - add missing MODULE_DEVICE_TABLE
	media: sti: fix obj-$(config) targets
	media: cpia2: fix memory leak in cpia2_usb_probe
	media: cobalt: fix race condition in setting HPD
	media: hevc: Fix dependent slice segment flags
	media: pvrusb2: fix warning in pvr2_i2c_core_done
	media: imx: imx7_mipi_csis: Fix logging of only error event counters
	crypto: qat - check return code of qat_hal_rd_rel_reg()
	crypto: qat - remove unused macro in FW loader
	crypto: qce: skcipher: Fix incorrect sg count for dma transfers
	arm64: perf: Convert snprintf to sysfs_emit
	sched/fair: Fix ascii art by relpacing tabs
	media: i2c: ov2659: Use clk_{prepare_enable,disable_unprepare}() to set xvclk on/off
	media: bt878: do not schedule tasklet when it is not setup
	media: em28xx: Fix possible memory leak of em28xx struct
	media: hantro: Fix .buf_prepare
	media: cedrus: Fix .buf_prepare
	media: v4l2-core: Avoid the dangling pointer in v4l2_fh_release
	media: bt8xx: Fix a missing check bug in bt878_probe
	media: st-hva: Fix potential NULL pointer dereferences
	crypto: hisilicon/sec - fixup 3des minimum key size declaration
	Makefile: fix GDB warning with CONFIG_RELR
	media: dvd_usb: memory leak in cinergyt2_fe_attach
	memstick: rtsx_usb_ms: fix UAF
	mmc: sdhci-sprd: use sdhci_sprd_writew
	mmc: via-sdmmc: add a check against NULL pointer dereference
	spi: meson-spicc: fix a wrong goto jump for avoiding memory leak.
	spi: meson-spicc: fix memory leak in meson_spicc_probe
	crypto: shash - avoid comparing pointers to exported functions under CFI
	media: dvb_net: avoid speculation from net slot
	media: siano: fix device register error path
	media: imx-csi: Skip first few frames from a BT.656 source
	hwmon: (max31790) Report correct current pwm duty cycles
	hwmon: (max31790) Fix pwmX_enable attributes
	drivers/perf: fix the missed ida_simple_remove() in ddr_perf_probe()
	KVM: PPC: Book3S HV: Fix TLB management on SMT8 POWER9 and POWER10 processors
	btrfs: fix error handling in __btrfs_update_delayed_inode
	btrfs: abort transaction if we fail to update the delayed inode
	btrfs: sysfs: fix format string for some discard stats
	btrfs: don't clear page extent mapped if we're not invalidating the full page
	btrfs: disable build on platforms having page size 256K
	locking/lockdep: Fix the dep path printing for backwards BFS
	lockding/lockdep: Avoid to find wrong lock dep path in check_irq_usage()
	KVM: s390: get rid of register asm usage
	regulator: mt6358: Fix vdram2 .vsel_mask
	regulator: da9052: Ensure enough delay time for .set_voltage_time_sel
	media: Fix Media Controller API config checks
	ACPI: video: use native backlight for GA401/GA502/GA503
	HID: do not use down_interruptible() when unbinding devices
	EDAC/ti: Add missing MODULE_DEVICE_TABLE
	ACPI: processor idle: Fix up C-state latency if not ordered
	hv_utils: Fix passing zero to 'PTR_ERR' warning
	lib: vsprintf: Fix handling of number field widths in vsscanf
	Input: goodix - platform/x86: touchscreen_dmi - Move upside down quirks to touchscreen_dmi.c
	platform/x86: touchscreen_dmi: Add an extra entry for the upside down Goodix touchscreen on Teclast X89 tablets
	platform/x86: touchscreen_dmi: Add info for the Goodix GT912 panel of TM800A550L tablets
	ACPI: EC: Make more Asus laptops use ECDT _GPE
	block_dump: remove block_dump feature in mark_inode_dirty()
	blk-mq: grab rq->refcount before calling ->fn in blk_mq_tagset_busy_iter
	blk-mq: clear stale request in tags->rq[] before freeing one request pool
	fs: dlm: cancel work sync othercon
	random32: Fix implicit truncation warning in prandom_seed_state()
	open: don't silently ignore unknown O-flags in openat2()
	drivers: hv: Fix missing error code in vmbus_connect()
	fs: dlm: fix memory leak when fenced
	ACPICA: Fix memory leak caused by _CID repair function
	ACPI: bus: Call kobject_put() in acpi_init() error path
	ACPI: resources: Add checks for ACPI IRQ override
	block: fix race between adding/removing rq qos and normal IO
	platform/x86: asus-nb-wmi: Revert "Drop duplicate DMI quirk structures"
	platform/x86: asus-nb-wmi: Revert "add support for ASUS ROG Zephyrus G14 and G15"
	platform/x86: toshiba_acpi: Fix missing error code in toshiba_acpi_setup_keyboard()
	nvme-pci: fix var. type for increasing cq_head
	nvmet-fc: do not check for invalid target port in nvmet_fc_handle_fcp_rqst()
	EDAC/Intel: Do not load EDAC driver when running as a guest
	PCI: hv: Add check for hyperv_initialized in init_hv_pci_drv()
	cifs: improve fallocate emulation
	ACPI: EC: trust DSDT GPE for certain HP laptop
	clocksource: Retry clock read if long delays detected
	clocksource: Check per-CPU clock synchronization when marked unstable
	tpm_tis_spi: add missing SPI device ID entries
	ACPI: tables: Add custom DSDT file as makefile prerequisite
	HID: wacom: Correct base usage for capacitive ExpressKey status bits
	cifs: fix missing spinlock around update to ses->status
	mailbox: qcom: Use PLATFORM_DEVID_AUTO to register platform device
	block: fix discard request merge
	kthread_worker: fix return value when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync()
	ia64: mca_drv: fix incorrect array size calculation
	writeback, cgroup: increment isw_nr_in_flight before grabbing an inode
	spi: Allow to have all native CSs in use along with GPIOs
	spi: Avoid undefined behaviour when counting unused native CSs
	media: venus: Rework error fail recover logic
	media: s5p_cec: decrement usage count if disabled
	media: hantro: do a PM resume earlier
	crypto: ixp4xx - dma_unmap the correct address
	crypto: ixp4xx - update IV after requests
	crypto: ux500 - Fix error return code in hash_hw_final()
	sata_highbank: fix deferred probing
	pata_rb532_cf: fix deferred probing
	media: I2C: change 'RST' to "RSET" to fix multiple build errors
	sched/uclamp: Fix wrong implementation of cpu.uclamp.min
	sched/uclamp: Fix locking around cpu_util_update_eff()
	kbuild: Fix objtool dependency for 'OBJECT_FILES_NON_STANDARD_<obj> := n'
	pata_octeon_cf: avoid WARN_ON() in ata_host_activate()
	evm: fix writing <securityfs>/evm overflow
	x86/elf: Use _BITUL() macro in UAPI headers
	crypto: sa2ul - Fix leaks on failure paths with sa_dma_init()
	crypto: sa2ul - Fix pm_runtime enable in sa_ul_probe()
	crypto: ccp - Fix a resource leak in an error handling path
	media: rc: i2c: Fix an error message
	pata_ep93xx: fix deferred probing
	locking/lockdep: Reduce LOCKDEP dependency list
	media: rkvdec: Fix .buf_prepare
	media: exynos4-is: Fix a use after free in isp_video_release
	media: au0828: fix a NULL vs IS_ERR() check
	media: tc358743: Fix error return code in tc358743_probe_of()
	media: gspca/gl860: fix zero-length control requests
	m68k: atari: Fix ATARI_KBD_CORE kconfig unmet dependency warning
	media: siano: Fix out-of-bounds warnings in smscore_load_firmware_family2()
	regulator: fan53880: Fix vsel_mask setting for FAN53880_BUCK
	crypto: nitrox - fix unchecked variable in nitrox_register_interrupts
	crypto: omap-sham - Fix PM reference leak in omap sham ops
	crypto: x86/curve25519 - fix cpu feature checking logic in mod_exit
	crypto: sm2 - remove unnecessary reset operations
	crypto: sm2 - fix a memory leak in sm2
	mmc: usdhi6rol0: fix error return code in usdhi6_probe()
	arm64: consistently use reserved_pg_dir
	arm64/mm: Fix ttbr0 values stored in struct thread_info for software-pan
	media: subdev: remove VIDIOC_DQEVENT_TIME32 handling
	media: s5p-g2d: Fix a memory leak on ctx->fh.m2m_ctx
	hwmon: (lm70) Use device_get_match_data()
	hwmon: (lm70) Revert "hwmon: (lm70) Add support for ACPI"
	hwmon: (max31722) Remove non-standard ACPI device IDs
	hwmon: (max31790) Fix fan speed reporting for fan7..12
	KVM: nVMX: Sync all PGDs on nested transition with shadow paging
	KVM: nVMX: Ensure 64-bit shift when checking VMFUNC bitmap
	KVM: nVMX: Don't clobber nested MMU's A/D status on EPTP switch
	KVM: x86/mmu: Fix return value in tdp_mmu_map_handle_target_level()
	perf/arm-cmn: Fix invalid pointer when access dtc object sharing the same IRQ number
	KVM: arm64: Don't zero the cycle count register when PMCR_EL0.P is set
	regulator: hi655x: Fix pass wrong pointer to config.driver_data
	btrfs: clear log tree recovering status if starting transaction fails
	x86/sev: Make sure IRQs are disabled while GHCB is active
	x86/sev: Split up runtime #VC handler for correct state tracking
	sched/rt: Fix RT utilization tracking during policy change
	sched/rt: Fix Deadline utilization tracking during policy change
	sched/uclamp: Fix uclamp_tg_restrict()
	lockdep: Fix wait-type for empty stack
	lockdep/selftests: Fix selftests vs PROVE_RAW_LOCK_NESTING
	spi: spi-sun6i: Fix chipselect/clock bug
	crypto: nx - Fix RCU warning in nx842_OF_upd_status
	psi: Fix race between psi_trigger_create/destroy
	media: v4l2-async: Clean v4l2_async_notifier_add_fwnode_remote_subdev
	media: video-mux: Skip dangling endpoints
	PM / devfreq: Add missing error code in devfreq_add_device()
	ACPI: PM / fan: Put fan device IDs into separate header file
	block: avoid double io accounting for flush request
	nvme-pci: look for StorageD3Enable on companion ACPI device instead
	ACPI: sysfs: Fix a buffer overrun problem with description_show()
	mark pstore-blk as broken
	clocksource/drivers/timer-ti-dm: Save and restore timer TIOCP_CFG
	extcon: extcon-max8997: Fix IRQ freeing at error path
	ACPI: APEI: fix synchronous external aborts in user-mode
	blk-wbt: introduce a new disable state to prevent false positive by rwb_enabled()
	blk-wbt: make sure throttle is enabled properly
	ACPI: Use DEVICE_ATTR_<RW|RO|WO> macros
	ACPI: bgrt: Fix CFI violation
	cpufreq: Make cpufreq_online() call driver->offline() on errors
	blk-mq: update hctx->dispatch_busy in case of real scheduler
	ocfs2: fix snprintf() checking
	dax: fix ENOMEM handling in grab_mapping_entry()
	mm/debug_vm_pgtable/basic: add validation for dirtiness after write protect
	mm/debug_vm_pgtable/basic: iterate over entire protection_map[]
	mm/debug_vm_pgtable: ensure THP availability via has_transparent_hugepage()
	swap: fix do_swap_page() race with swapoff
	mm/shmem: fix shmem_swapin() race with swapoff
	mm: memcg/slab: properly set up gfp flags for objcg pointer array
	mm: page_alloc: refactor setup_per_zone_lowmem_reserve()
	mm/page_alloc: fix counting of managed_pages
	xfrm: xfrm_state_mtu should return at least 1280 for ipv6
	drm/bridge/sii8620: fix dependency on extcon
	drm/bridge: Fix the stop condition of drm_bridge_chain_pre_enable()
	drm/amd/dc: Fix a missing check bug in dm_dp_mst_detect()
	drm/ast: Fix missing conversions to managed API
	video: fbdev: imxfb: Fix an error message
	net: mvpp2: Put fwnode in error case during ->probe()
	net: pch_gbe: Propagate error from devm_gpio_request_one()
	pinctrl: renesas: r8a7796: Add missing bias for PRESET# pin
	pinctrl: renesas: r8a77990: JTAG pins do not have pull-down capabilities
	drm/vmwgfx: Mark a surface gpu-dirty after the SVGA3dCmdDXGenMips command
	drm/vmwgfx: Fix cpu updates of coherent multisample surfaces
	net: qrtr: ns: Fix error return code in qrtr_ns_init()
	clk: meson: g12a: fix gp0 and hifi ranges
	net: ftgmac100: add missing error return code in ftgmac100_probe()
	drm: rockchip: set alpha_en to 0 if it is not used
	drm/rockchip: cdn-dp-core: add missing clk_disable_unprepare() on error in cdn_dp_grf_write()
	drm/rockchip: dsi: move all lane config except LCDC mux to bind()
	drm/rockchip: lvds: Fix an error handling path
	drm/rockchip: cdn-dp: fix sign extension on an int multiply for a u64 result
	mptcp: fix pr_debug in mptcp_token_new_connect
	mptcp: generate subflow hmac after mptcp_finish_join()
	RDMA/srp: Fix a recently introduced memory leak
	RDMA/rtrs-clt: Check state of the rtrs_clt_sess before reading its stats
	RDMA/rtrs: Do not reset hb_missed_max after re-connection
	RDMA/rtrs-srv: Fix memory leak of unfreed rtrs_srv_stats object
	RDMA/rtrs-srv: Fix memory leak when having multiple sessions
	RDMA/rtrs-clt: Check if the queue_depth has changed during a reconnection
	RDMA/rtrs-clt: Fix memory leak of not-freed sess->stats and stats->pcpu_stats
	ehea: fix error return code in ehea_restart_qps()
	clk: tegra30: Use 300MHz for video decoder by default
	xfrm: remove the fragment check for ipv6 beet mode
	net/sched: act_vlan: Fix modify to allow 0
	RDMA/core: Sanitize WQ state received from the userspace
	drm/pl111: depend on CONFIG_VEXPRESS_CONFIG
	RDMA/rxe: Fix failure during driver load
	drm/pl111: Actually fix CONFIG_VEXPRESS_CONFIG depends
	drm/vc4: hdmi: Fix error path of hpd-gpios
	clk: vc5: fix output disabling when enabling a FOD
	drm: qxl: ensure surf.data is ininitialized
	tools/bpftool: Fix error return code in do_batch()
	ath10k: go to path err_unsupported when chip id is not supported
	ath10k: add missing error return code in ath10k_pci_probe()
	wireless: carl9170: fix LEDS build errors & warnings
	ieee802154: hwsim: Fix possible memory leak in hwsim_subscribe_all_others
	clk: imx8mq: remove SYS PLL 1/2 clock gates
	wcn36xx: Move hal_buf allocation to devm_kmalloc in probe
	ssb: Fix error return code in ssb_bus_scan()
	brcmfmac: fix setting of station info chains bitmask
	brcmfmac: correctly report average RSSI in station info
	brcmfmac: Fix a double-free in brcmf_sdio_bus_reset
	brcmsmac: mac80211_if: Fix a resource leak in an error handling path
	cw1200: Revert unnecessary patches that fix unreal use-after-free bugs
	ath11k: Fix an error handling path in ath11k_core_fetch_board_data_api_n()
	ath10k: Fix an error code in ath10k_add_interface()
	ath11k: send beacon template after vdev_start/restart during csa
	netlabel: Fix memory leak in netlbl_mgmt_add_common
	RDMA/mlx5: Don't add slave port to unaffiliated list
	netfilter: nft_exthdr: check for IPv6 packet before further processing
	netfilter: nft_osf: check for TCP packet before further processing
	netfilter: nft_tproxy: restrict support to TCP and UDP transport protocols
	RDMA/rxe: Fix qp reference counting for atomic ops
	selftests/bpf: Whitelist test_progs.h from .gitignore
	xsk: Fix missing validation for skb and unaligned mode
	xsk: Fix broken Tx ring validation
	bpf: Fix libelf endian handling in resolv_btfids
	RDMA/rtrs-srv: Set minimal max_send_wr and max_recv_wr
	samples/bpf: Fix Segmentation fault for xdp_redirect command
	samples/bpf: Fix the error return code of xdp_redirect's main()
	mt76: fix possible NULL pointer dereference in mt76_tx
	mt76: mt7615: fix NULL pointer dereference in tx_prepare_skb()
	net: ethernet: aeroflex: fix UAF in greth_of_remove
	net: ethernet: ezchip: fix UAF in nps_enet_remove
	net: ethernet: ezchip: fix error handling
	vrf: do not push non-ND strict packets with a source LLA through packet taps again
	net: sched: add barrier to ensure correct ordering for lockless qdisc
	tls: prevent oversized sendfile() hangs by ignoring MSG_MORE
	netfilter: nf_tables_offload: check FLOW_DISSECTOR_KEY_BASIC in VLAN transfer logic
	pkt_sched: sch_qfq: fix qfq_change_class() error path
	xfrm: Fix xfrm offload fallback fail case
	iwlwifi: increase PNVM load timeout
	rtw88: 8822c: fix lc calibration timing
	vxlan: add missing rcu_read_lock() in neigh_reduce()
	ip6_tunnel: fix GRE6 segmentation
	net/ipv4: swap flow ports when validating source
	net: ti: am65-cpsw-nuss: Fix crash when changing number of TX queues
	tc-testing: fix list handling
	ieee802154: hwsim: Fix memory leak in hwsim_add_one
	ieee802154: hwsim: avoid possible crash in hwsim_del_edge_nl()
	bpf: Fix null ptr deref with mixed tail calls and subprogs
	drm/msm: Fix error return code in msm_drm_init()
	drm/msm/dpu: Fix error return code in dpu_mdss_init()
	mac80211: remove iwlwifi specific workaround NDPs of null_response
	net: bcmgenet: Fix attaching to PYH failed on RPi 4B
	ipv6: exthdrs: do not blindly use init_net
	can: j1939: j1939_sk_setsockopt(): prevent allocation of j1939 filter for optlen == 0
	bpf: Do not change gso_size during bpf_skb_change_proto()
	i40e: Fix error handling in i40e_vsi_open
	i40e: Fix autoneg disabling for non-10GBaseT links
	i40e: Fix missing rtnl locking when setting up pf switch
	Revert "ibmvnic: remove duplicate napi_schedule call in open function"
	ibmvnic: set ltb->buff to NULL after freeing
	ibmvnic: free tx_pool if tso_pool alloc fails
	RDMA/cma: Protect RMW with qp_mutex
	net: macsec: fix the length used to copy the key for offloading
	net: phy: mscc: fix macsec key length
	net: atlantic: fix the macsec key length
	ipv6: fix out-of-bound access in ip6_parse_tlv()
	e1000e: Check the PCIm state
	net: dsa: sja1105: fix NULL pointer dereference in sja1105_reload_cbs()
	bpfilter: Specify the log level for the kmsg message
	RDMA/cma: Fix incorrect Packet Lifetime calculation
	gve: Fix swapped vars when fetching max queues
	Revert "be2net: disable bh with spin_lock in be_process_mcc"
	Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid
	Bluetooth: Fix not sending Set Extended Scan Response
	Bluetooth: Fix Set Extended (Scan Response) Data
	Bluetooth: Fix handling of HCI_LE_Advertising_Set_Terminated event
	clk: actions: Fix UART clock dividers on Owl S500 SoC
	clk: actions: Fix SD clocks factor table on Owl S500 SoC
	clk: actions: Fix bisp_factor_table based clocks on Owl S500 SoC
	clk: actions: Fix AHPPREDIV-H-AHB clock chain on Owl S500 SoC
	clk: qcom: clk-alpha-pll: fix CAL_L write in alpha_pll_fabia_prepare
	clk: si5341: Wait for DEVICE_READY on startup
	clk: si5341: Avoid divide errors due to bogus register contents
	clk: si5341: Check for input clock presence and PLL lock on startup
	clk: si5341: Update initialization magic
	writeback: fix obtain a reference to a freeing memcg css
	net: lwtunnel: handle MTU calculation in forwading
	net: sched: fix warning in tcindex_alloc_perfect_hash
	net: tipc: fix FB_MTU eat two pages
	RDMA/mlx5: Don't access NULL-cleared mpi pointer
	RDMA/core: Always release restrack object
	MIPS: Fix PKMAP with 32-bit MIPS huge page support
	staging: fbtft: Rectify GPIO handling
	staging: fbtft: Don't spam logs when probe is deferred
	ASoC: rt5682: Disable irq on shutdown
	rcu: Invoke rcu_spawn_core_kthreads() from rcu_spawn_gp_kthread()
	serial: fsl_lpuart: don't modify arbitrary data on lpuart32
	serial: fsl_lpuart: remove RTSCTS handling from get_mctrl()
	serial: 8250_omap: fix a timeout loop condition
	tty: nozomi: Fix a resource leak in an error handling function
	mwifiex: re-fix for unaligned accesses
	iio: adis_buffer: do not return ints in irq handlers
	iio: adis16400: do not return ints in irq handlers
	iio: adis16475: do not return ints in irq handlers
	iio: accel: bma180: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	iio: accel: bma220: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	iio: accel: hid: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	iio: accel: kxcjk-1013: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	iio: accel: mxc4005: Fix overread of data and alignment issue.
	iio: accel: stk8312: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	iio: accel: stk8ba50: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	iio: adc: ti-ads1015: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	iio: adc: vf610: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	iio: gyro: bmg160: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	iio: humidity: am2315: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	iio: prox: srf08: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	iio: prox: pulsed-light: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	iio: prox: as3935: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	iio: magn: hmc5843: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	iio: magn: bmc150: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	iio: light: isl29125: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	iio: light: tcs3414: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	iio: light: tcs3472: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	iio: chemical: atlas: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	iio: cros_ec_sensors: Fix alignment of buffer in iio_push_to_buffers_with_timestamp()
	iio: potentiostat: lmp91000: Fix alignment of buffer in iio_push_to_buffers_with_timestamp()
	ASoC: rk3328: fix missing clk_disable_unprepare() on error in rk3328_platform_probe()
	ASoC: hisilicon: fix missing clk_disable_unprepare() on error in hi6210_i2s_startup()
	backlight: lm3630a_bl: Put fwnode in error case during ->probe()
	ASoC: rsnd: tidyup loop on rsnd_adg_clk_query()
	Input: hil_kbd - fix error return code in hil_dev_connect()
	perf scripting python: Fix tuple_set_u64()
	mtd: partitions: redboot: seek fis-index-block in the right node
	mtd: rawnand: arasan: Ensure proper configuration for the asserted target
	staging: mmal-vchiq: Fix incorrect static vchiq_instance.
	char: pcmcia: error out if 'num_bytes_read' is greater than 4 in set_protocol()
	firmware: stratix10-svc: Fix a resource leak in an error handling path
	tty: nozomi: Fix the error handling path of 'nozomi_card_init()'
	leds: class: The -ENOTSUPP should never be seen by user space
	leds: lm3532: select regmap I2C API
	leds: lm36274: Put fwnode in error case during ->probe()
	leds: lm3692x: Put fwnode in any case during ->probe()
	leds: lm3697: Don't spam logs when probe is deferred
	leds: lp50xx: Put fwnode in error case during ->probe()
	scsi: FlashPoint: Rename si_flags field
	scsi: iscsi: Flush block work before unblock
	mfd: mp2629: Select MFD_CORE to fix build error
	mfd: rn5t618: Fix IRQ trigger by changing it to level mode
	fsi: core: Fix return of error values on failures
	fsi: scom: Reset the FSI2PIB engine for any error
	fsi: occ: Don't accept response from un-initialized OCC
	fsi/sbefifo: Clean up correct FIFO when receiving reset request from SBE
	fsi/sbefifo: Fix reset timeout
	visorbus: fix error return code in visorchipset_init()
	iommu/amd: Fix extended features logging
	s390/irq: select HAVE_IRQ_EXIT_ON_IRQ_STACK
	s390: enable HAVE_IOREMAP_PROT
	s390: appldata depends on PROC_SYSCTL
	selftests: splice: Adjust for handler fallback removal
	iommu/dma: Fix IOVA reserve dma ranges
	ASoC: max98373-sdw: use first_hw_init flag on resume
	ASoC: rt1308-sdw: use first_hw_init flag on resume
	ASoC: rt5682-sdw: use first_hw_init flag on resume
	ASoC: rt700-sdw: use first_hw_init flag on resume
	ASoC: rt711-sdw: use first_hw_init flag on resume
	ASoC: rt715-sdw: use first_hw_init flag on resume
	ASoC: rt5682: fix getting the wrong device id when the suspend_stress_test
	ASoC: rt5682-sdw: set regcache_cache_only false before reading RT5682_DEVICE_ID
	ASoC: mediatek: mtk-btcvsd: Fix an error handling path in 'mtk_btcvsd_snd_probe()'
	usb: gadget: f_fs: Fix setting of device and driver data cross-references
	usb: dwc2: Don't reset the core after setting turnaround time
	eeprom: idt_89hpesx: Put fwnode in matching case during ->probe()
	eeprom: idt_89hpesx: Restore printing the unsupported fwnode name
	thunderbolt: Bond lanes only when dual_link_port != NULL in alloc_dev_default()
	iio: adc: at91-sama5d2: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	iio: adc: hx711: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	iio: adc: mxs-lradc: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	iio: adc: ti-ads8688: Fix alignment of buffer in iio_push_to_buffers_with_timestamp()
	iio: magn: rm3100: Fix alignment of buffer in iio_push_to_buffers_with_timestamp()
	iio: light: vcnl4000: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	ASoC: fsl_spdif: Fix error handler with pm_runtime_enable
	staging: gdm724x: check for buffer overflow in gdm_lte_multi_sdu_pkt()
	staging: gdm724x: check for overflow in gdm_lte_netif_rx()
	staging: rtl8712: fix error handling in r871xu_drv_init
	staging: rtl8712: fix memory leak in rtl871x_load_fw_cb
	coresight: core: Fix use of uninitialized pointer
	staging: mt7621-dts: fix pci address for PCI memory range
	serial: 8250: Actually allow UPF_MAGIC_MULTIPLIER baud rates
	iio: light: vcnl4035: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	iio: prox: isl29501: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
	ASoC: cs42l42: Correct definition of CS42L42_ADC_PDN_MASK
	of: Fix truncation of memory sizes on 32-bit platforms
	mtd: rawnand: marvell: add missing clk_disable_unprepare() on error in marvell_nfc_resume()
	habanalabs: Fix an error handling path in 'hl_pci_probe()'
	scsi: mpt3sas: Fix error return value in _scsih_expander_add()
	soundwire: stream: Fix test for DP prepare complete
	phy: uniphier-pcie: Fix updating phy parameters
	phy: ti: dm816x: Fix the error handling path in 'dm816x_usb_phy_probe()
	extcon: sm5502: Drop invalid register write in sm5502_reg_data
	extcon: max8997: Add missing modalias string
	powerpc/powernv: Fix machine check reporting of async store errors
	ASoC: atmel-i2s: Fix usage of capture and playback at the same time
	configfs: fix memleak in configfs_release_bin_file
	ASoC: Intel: sof_sdw: add SOF_RT715_DAI_ID_FIX for AlderLake
	ASoC: fsl_spdif: Fix unexpected interrupt after suspend
	leds: as3645a: Fix error return code in as3645a_parse_node()
	leds: ktd2692: Fix an error handling path
	selftests/ftrace: fix event-no-pid on 1-core machine
	serial: 8250: 8250_omap: Disable RX interrupt after DMA enable
	serial: 8250: 8250_omap: Fix possible interrupt storm on K3 SoCs
	powerpc: Offline CPU in stop_this_cpu()
	powerpc/papr_scm: Properly handle UUID types and API
	powerpc/64s: Fix copy-paste data exposure into newly created tasks
	powerpc/papr_scm: Make 'perf_stats' invisible if perf-stats unavailable
	ALSA: firewire-lib: Fix 'amdtp_domain_start()' when no AMDTP_OUT_STREAM stream is found
	serial: mvebu-uart: do not allow changing baudrate when uartclk is not available
	serial: mvebu-uart: correctly calculate minimal possible baudrate
	arm64: dts: marvell: armada-37xx: Fix reg for standard variant of UART
	vfio/pci: Handle concurrent vma faults
	mm/pmem: avoid inserting hugepage PTE entry with fsdax if hugepage support is disabled
	mm/huge_memory.c: remove dedicated macro HPAGE_CACHE_INDEX_MASK
	mm/huge_memory.c: add missing read-only THP checking in transparent_hugepage_enabled()
	mm/huge_memory.c: don't discard hugepage if other processes are mapping it
	mm/hugetlb: use helper huge_page_order and pages_per_huge_page
	mm/hugetlb: remove redundant check in preparing and destroying gigantic page
	hugetlb: remove prep_compound_huge_page cleanup
	include/linux/huge_mm.h: remove extern keyword
	mm/z3fold: fix potential memory leak in z3fold_destroy_pool()
	mm/z3fold: use release_z3fold_page_locked() to release locked z3fold page
	lib/math/rational.c: fix divide by zero
	selftests/vm/pkeys: fix alloc_random_pkey() to make it really, really random
	selftests/vm/pkeys: handle negative sys_pkey_alloc() return code
	selftests/vm/pkeys: refill shadow register after implicit kernel write
	perf llvm: Return -ENOMEM when asprintf() fails
	csky: fix syscache.c fallthrough warning
	csky: syscache: Fixup duplicate cache flush
	exfat: handle wrong stream entry size in exfat_readdir()
	scsi: fc: Correct RHBA attributes length
	scsi: target: cxgbit: Unmap DMA buffer before calling target_execute_cmd()
	mailbox: qcom-ipcc: Fix IPCC mbox channel exhaustion
	fscrypt: don't ignore minor_hash when hash is 0
	fscrypt: fix derivation of SipHash keys on big endian CPUs
	tpm: Replace WARN_ONCE() with dev_err_once() in tpm_tis_status()
	erofs: fix error return code in erofs_read_superblock()
	block: return the correct bvec when checking for gaps
	io_uring: fix blocking inline submission
	mmc: block: Disable CMDQ on the ioctl path
	mmc: vub3000: fix control-request direction
	media: exynos4-is: remove a now unused integer
	scsi: core: Retry I/O for Notify (Enable Spinup) Required error
	crypto: qce - fix error return code in qce_skcipher_async_req_handle()
	s390: preempt: Fix preempt_count initialization
	cred: add missing return error code when set_cred_ucounts() failed
	iommu/dma: Fix compile warning in 32-bit builds
	powerpc/preempt: Don't touch the idle task's preempt_count during hotplug
	Linux 5.10.50

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: Iec4eab24ea8eb5a6d79739a1aec8432d93a8f82c
 2021-07-14 17:35:23 +02:00
Valentin Schneider
3c51d82d0b sched/core: Initialize the idle task with preemption disabled 
[ Upstream commit f1a0a376ca0c4ef1fc3d24e3e502acbb5b795674 ]

As pointed out by commit

  de9b8f5dcb ("sched: Fix crash trying to dequeue/enqueue the idle thread")

init_idle() can and will be invoked more than once on the same idle
task. At boot time, it is invoked for the boot CPU thread by
sched_init(). Then smp_init() creates the threads for all the secondary
CPUs and invokes init_idle() on them.

As the hotplug machinery brings the secondaries to life, it will issue
calls to idle_thread_get(), which itself invokes init_idle() yet again.
In this case it's invoked twice more per secondary: at _cpu_up(), and at
bringup_cpu().

Given smp_init() already initializes the idle tasks for all *possible*
CPUs, no further initialization should be required. Now, removing
init_idle() from idle_thread_get() exposes some interesting expectations
with regards to the idle task's preempt_count: the secondary startup always
issues a preempt_disable(), requiring some reset of the preempt count to 0
between hot-unplug and hotplug, which is currently served by
idle_thread_get() -> idle_init().

Given the idle task is supposed to have preemption disabled once and never
see it re-enabled, it seems that what we actually want is to initialize its
preempt_count to PREEMPT_DISABLED and leave it there. Do that, and remove
init_idle() from idle_thread_get().

Secondary startups were patched via coccinelle:

  @begone@
  @@

  -preempt_disable();
  ...
  cpu_startup_entry(CPUHP_AP_ONLINE_IDLE);

Signed-off-by: Valentin Schneider <valentin.schneider@arm.com>
Signed-off-by: Ingo Molnar <mingo@kernel.org>
Acked-by: Peter Zijlstra <peterz@infradead.org>
Link: https://lore.kernel.org/r/20210512094636.2958515-1-valentin.schneider@arm.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
 2021-07-14 16:55:50 +02:00
Alexey Gladkov
b2c4d9a33c Add a reference to ucounts for each cred 
[ Upstream commit 905ae01c4ae2ae3df05bb141801b1db4b7d83c61 ]

For RLIMIT_NPROC and some other rlimits the user_struct that holds the
global limit is kept alive for the lifetime of a process by keeping it
in struct cred. Adding a pointer to ucounts in the struct cred will
allow to track RLIMIT_NPROC not only for user in the system, but for
user in the user_namespace.

Updating ucounts may require memory allocation which may fail. So, we
cannot change cred.ucounts in the commit_creds() because this function
cannot fail and it should always return 0. For this reason, we modify
cred.ucounts before calling the commit_creds().

Changelog

v6:
* Fix null-ptr-deref in is_ucounts_overlimit() detected by trinity. This
  error was caused by the fact that cred_alloc_blank() left the ucounts
  pointer empty.

Reported-by: kernel test robot <oliver.sang@intel.com>
Signed-off-by: Alexey Gladkov <legion@kernel.org>
Link: https://lkml.kernel.org/r/b37aaef28d8b9b0d757e07ba6dd27281bbe39259.1619094428.git.legion@kernel.org
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
 2021-07-14 16:55:48 +02:00
chunhui.li
9c2958f454 ANDROID: GKI: Export put_task_stack symbol 
We need dump task->stack in kernel module for debug usage,
call try_get_task_stack to lock task->stack, and
try_get_task_stack/put_task_stack should call in pairs,
but put_task_stack is not exported

Bug: 192990535
Change-Id: Ifb2f3d16f93039bffeb3e822bc066e42e2d21d13
Signed-off-by: chunhui.li <chunhui.li@mediatek.com>
 2021-07-14 09:14:16 +00:00
Jing-Ting Wu
5c51579fde ANDROID: fork: Export task_newtask tracepoint 
android_rvh_sched_fork() and android_rvh_sched_fork_init()
already let us register probes during fork(), but those are
invoked *before* the new task is added to the tasklist, which
can lead to some undesired races when a module is trying to
initialize vendor-specific task_struct fields.

Export the task_newtask tracepoint to register probes to run
during fork() but *after* the task has been inserted into the
tasklist.

Bug: 192873984
Signed-off-by: Jing-Ting Wu <Jing-Ting.Wu@mediatek.com>
Cc: Valentin Schneider <valentin.schneider@arm.com>
Change-Id: Ifef14819264385b5e955a5966b4e4f66d50da5e3
 2021-07-06 21:24:20 +00:00
Liangliang Li
f66d96b14a ANDROID: vendor_hooks: Add hooks to dup_task_struct 
Add hook to dup_task_struct for vendor data fields initialisation.

Bug: 188004638

Change-Id: I4b58604ee822fb8d1e0cc37bec72e820e7318427
Signed-off-by: Liangliang Li <liliangliang@vivo.com>
 2021-05-13 16:47:48 +00:00
lijianzhong
54f66141a8 ANDROID: sched: Add vendor hooks for sched. 
Add vendor hooks in sched to support oem's feature.

Bug: 183674818

Signed-off-by: lijianzhong <lijianzhong@xiaomi.com>
Change-Id: I8415958749948b3702e411f835c227ad4f8d8e92
 2021-04-23 18:42:38 -07:00
Greg Kroah-Hartman
b9a61f9a56 Merge 5.10.27 into android12-5.10 
Changes in 5.10.27
	mm/memcg: rename mem_cgroup_split_huge_fixup to split_page_memcg and add nr_pages argument
	mm/memcg: set memcg when splitting page
	mt76: fix tx skb error handling in mt76_dma_tx_queue_skb
	net: stmmac: fix dma physical address of descriptor when display ring
	net: fec: ptp: avoid register access when ipg clock is disabled
	powerpc/4xx: Fix build errors from mfdcr()
	atm: eni: dont release is never initialized
	atm: lanai: dont run lanai_dev_close if not open
	Revert "r8152: adjust the settings about MAC clock speed down for RTL8153"
	ALSA: hda: ignore invalid NHLT table
	ixgbe: Fix memleak in ixgbe_configure_clsu32
	scsi: ufs: ufs-qcom: Disable interrupt in reset path
	blk-cgroup: Fix the recursive blkg rwstat
	net: tehuti: fix error return code in bdx_probe()
	net: intel: iavf: fix error return code of iavf_init_get_resources()
	sun/niu: fix wrong RXMAC_BC_FRM_CNT_COUNT count
	gianfar: fix jumbo packets+napi+rx overrun crash
	cifs: ask for more credit on async read/write code paths
	gfs2: fix use-after-free in trans_drain
	cpufreq: blacklist Arm Vexpress platforms in cpufreq-dt-platdev
	gpiolib: acpi: Add missing IRQF_ONESHOT
	nfs: fix PNFS_FLEXFILE_LAYOUT Kconfig default
	NFS: Correct size calculation for create reply length
	net: hisilicon: hns: fix error return code of hns_nic_clear_all_rx_fetch()
	net: wan: fix error return code of uhdlc_init()
	net: davicom: Use platform_get_irq_optional()
	net: enetc: set MAC RX FIFO to recommended value
	atm: uPD98402: fix incorrect allocation
	atm: idt77252: fix null-ptr-dereference
	cifs: change noisy error message to FYI
	irqchip/ingenic: Add support for the JZ4760
	kbuild: add image_name to no-sync-config-targets
	kbuild: dummy-tools: fix inverted tests for gcc
	umem: fix error return code in mm_pci_probe()
	sparc64: Fix opcode filtering in handling of no fault loads
	habanalabs: Call put_pid() when releasing control device
	staging: rtl8192e: fix kconfig dependency on CRYPTO
	u64_stats,lockdep: Fix u64_stats_init() vs lockdep
	kselftest: arm64: Fix exit code of sve-ptrace
	regulator: qcom-rpmh: Correct the pmic5_hfsmps515 buck
	block: Fix REQ_OP_ZONE_RESET_ALL handling
	drm/amd/display: Revert dram_clock_change_latency for DCN2.1
	drm/amdgpu: fb BO should be ttm_bo_type_device
	drm/radeon: fix AGP dependency
	nvme: simplify error logic in nvme_validate_ns()
	nvme: add NVME_REQ_CANCELLED flag in nvme_cancel_request()
	nvme-fc: set NVME_REQ_CANCELLED in nvme_fc_terminate_exchange()
	nvme-fc: return NVME_SC_HOST_ABORTED_CMD when a command has been aborted
	nvme-core: check ctrl css before setting up zns
	nvme-rdma: Fix a use after free in nvmet_rdma_write_data_done
	nvme-pci: add the DISABLE_WRITE_ZEROES quirk for a Samsung PM1725a
	nfs: we don't support removing system.nfs4_acl
	block: Suppress uevent for hidden device when removed
	mm/fork: clear PASID for new mm
	ia64: fix ia64_syscall_get_set_arguments() for break-based syscalls
	ia64: fix ptrace(PTRACE_SYSCALL_INFO_EXIT) sign
	static_call: Pull some static_call declarations to the type headers
	static_call: Allow module use without exposing static_call_key
	static_call: Fix the module key fixup
	static_call: Fix static_call_set_init()
	KVM: x86: Protect userspace MSR filter with SRCU, and set atomically-ish
	btrfs: fix sleep while in non-sleep context during qgroup removal
	selinux: don't log MAC_POLICY_LOAD record on failed policy load
	selinux: fix variable scope issue in live sidtab conversion
	netsec: restore phy power state after controller reset
	platform/x86: intel-vbtn: Stop reporting SW_DOCK events
	psample: Fix user API breakage
	z3fold: prevent reclaim/free race for headless pages
	squashfs: fix inode lookup sanity checks
	squashfs: fix xattr id and id lookup sanity checks
	hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings
	kasan: fix per-page tags for non-page_alloc pages
	gcov: fix clang-11+ support
	ACPI: video: Add missing callback back for Sony VPCEH3U1E
	ACPICA: Always create namespace nodes using acpi_ns_create_node()
	arm64: stacktrace: don't trace arch_stack_walk()
	arm64: dts: ls1046a: mark crypto engine dma coherent
	arm64: dts: ls1012a: mark crypto engine dma coherent
	arm64: dts: ls1043a: mark crypto engine dma coherent
	ARM: dts: at91: sam9x60: fix mux-mask for PA7 so it can be set to A, B and C
	ARM: dts: at91: sam9x60: fix mux-mask to match product's datasheet
	ARM: dts: at91-sama5d27_som1: fix phy address to 7
	integrity: double check iint_cache was initialized
	drm/etnaviv: Use FOLL_FORCE for userptr
	drm/amd/pm: workaround for audio noise issue
	drm/amdgpu/display: restore AUX_DPHY_TX_CONTROL for DCN2.x
	drm/amdgpu: Add additional Sienna Cichlid PCI ID
	drm/i915: Fix the GT fence revocation runtime PM logic
	dm verity: fix DM_VERITY_OPTS_MAX value
	dm ioctl: fix out of bounds array access when no devices
	bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD
	ARM: OMAP2+: Fix smartreflex init regression after dropping legacy data
	soc: ti: omap-prm: Fix occasional abort on reset deassert for dra7 iva
	veth: Store queue_mapping independently of XDP prog presence
	bpf: Change inode_storage's lookup_elem return value from NULL to -EBADF
	libbpf: Fix INSTALL flag order
	net/mlx5e: RX, Mind the MPWQE gaps when calculating offsets
	net/mlx5e: When changing XDP program without reset, take refs for XSK RQs
	net/mlx5e: Don't match on Geneve options in case option masks are all zero
	ipv6: fix suspecious RCU usage warning
	drop_monitor: Perform cleanup upon probe registration failure
	macvlan: macvlan_count_rx() needs to be aware of preemption
	net: sched: validate stab values
	net: dsa: bcm_sf2: Qualify phydev->dev_flags based on port
	igc: reinit_locked() should be called with rtnl_lock
	igc: Fix Pause Frame Advertising
	igc: Fix Supported Pause Frame Link Setting
	igc: Fix igc_ptp_rx_pktstamp()
	e1000e: add rtnl_lock() to e1000_reset_task
	e1000e: Fix error handling in e1000_set_d0_lplu_state_82571
	net/qlcnic: Fix a use after free in qlcnic_83xx_get_minidump_template
	net: phy: broadcom: Add power down exit reset state delay
	ftgmac100: Restart MAC HW once
	clk: qcom: gcc-sc7180: Use floor ops for the correct sdcc1 clk
	net: ipa: terminate message handler arrays
	net: qrtr: fix a kernel-infoleak in qrtr_recvmsg()
	flow_dissector: fix byteorder of dissected ICMP ID
	selftests/bpf: Set gopt opt_class to 0 if get tunnel opt failed
	netfilter: ctnetlink: fix dump of the expect mask attribute
	net: hdlc_x25: Prevent racing between "x25_close" and "x25_xmit"/"x25_rx"
	net: phylink: Fix phylink_err() function name error in phylink_major_config
	tipc: better validate user input in tipc_nl_retrieve_key()
	tcp: relookup sock for RST+ACK packets handled by obsolete req sock
	can: isotp: isotp_setsockopt(): only allow to set low level TX flags for CAN-FD
	can: isotp: TX-path: ensure that CAN frame flags are initialized
	can: peak_usb: add forgotten supported devices
	can: flexcan: flexcan_chip_freeze(): fix chip freeze for missing bitrate
	can: kvaser_pciefd: Always disable bus load reporting
	can: c_can_pci: c_can_pci_remove(): fix use-after-free
	can: c_can: move runtime PM enable/disable to c_can_platform
	can: m_can: m_can_do_rx_poll(): fix extraneous msg loss warning
	can: m_can: m_can_rx_peripheral(): fix RX being blocked by errors
	mac80211: fix rate mask reset
	mac80211: Allow HE operation to be longer than expected.
	selftests/net: fix warnings on reuseaddr_ports_exhausted
	nfp: flower: fix unsupported pre_tunnel flows
	nfp: flower: add ipv6 bit to pre_tunnel control message
	nfp: flower: fix pre_tun mask id allocation
	ftrace: Fix modify_ftrace_direct.
	drm/msm/dsi: fix check-before-set in the 7nm dsi_pll code
	ionic: linearize tso skb with too many frags
	net/sched: cls_flower: fix only mask bit check in the validate_ct_state
	netfilter: nftables: report EOPNOTSUPP on unsupported flowtable flags
	netfilter: nftables: allow to update flowtable flags
	netfilter: flowtable: Make sure GC works periodically in idle system
	libbpf: Fix error path in bpf_object__elf_init()
	libbpf: Use SOCK_CLOEXEC when opening the netlink socket
	ARM: dts: imx6ull: fix ubi filesystem mount failed
	ipv6: weaken the v4mapped source check
	octeontx2-af: Formatting debugfs entry rsrc_alloc.
	octeontx2-af: Modify default KEX profile to extract TX packet fields
	octeontx2-af: Remove TOS field from MKEX TX
	octeontx2-af: Fix irq free in rvu teardown
	octeontx2-pf: Clear RSS enable flag on interace down
	octeontx2-af: fix infinite loop in unmapping NPC counter
	net: check all name nodes in __dev_alloc_name
	net: cdc-phonet: fix data-interface release on probe failure
	igb: check timestamp validity
	r8152: limit the RX buffer size of RTL8153A for USB 2.0
	net: stmmac: dwmac-sun8i: Provide TX and RX fifo sizes
	selinux: vsock: Set SID for socket returned by accept()
	selftests: forwarding: vxlan_bridge_1d: Fix vxlan ecn decapsulate value
	libbpf: Fix BTF dump of pointer-to-array-of-struct
	bpf: Fix umd memory leak in copy_process()
	can: isotp: tx-path: zero initialize outgoing CAN frames
	drm/msm: fix shutdown hook in case GPU components failed to bind
	drm/msm: Fix suspend/resume on i.MX5
	arm64: kdump: update ppos when reading elfcorehdr
	PM: runtime: Defer suspending suppliers
	net/mlx5: Add back multicast stats for uplink representor
	net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP
	net/mlx5e: Offload tuple rewrite for non-CT flows
	net/mlx5e: Fix error path for ethtool set-priv-flag
	PM: EM: postpone creating the debugfs dir till fs_initcall
	net: bridge: don't notify switchdev for local FDB addresses
	octeontx2-af: Fix memory leak of object buf
	xen/x86: make XEN_BALLOON_MEMORY_HOTPLUG_LIMIT depend on MEMORY_HOTPLUG
	RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening server
	bpf: Don't do bpf_cgroup_storage_set() for kuprobe/tp programs
	net: Consolidate common blackhole dst ops
	net, bpf: Fix ip6ip6 crash with collect_md populated skbs
	igb: avoid premature Rx buffer reuse
	net: axienet: Properly handle PCS/PMA PHY for 1000BaseX mode
	net: axienet: Fix probe error cleanup
	net: phy: introduce phydev->port
	net: phy: broadcom: Avoid forward for bcm54xx_config_clock_delay()
	net: phy: broadcom: Set proper 1000BaseX/SGMII interface mode for BCM54616S
	net: phy: broadcom: Fix RGMII delays for BCM50160 and BCM50610M
	Revert "netfilter: x_tables: Switch synchronization to RCU"
	netfilter: x_tables: Use correct memory barriers.
	dm table: Fix zoned model check and zone sectors check
	mm/mmu_notifiers: ensure range_end() is paired with range_start()
	Revert "netfilter: x_tables: Update remaining dereference to RCU"
	ACPI: scan: Rearrange memory allocation in acpi_device_add()
	ACPI: scan: Use unique number for instance_no
	perf auxtrace: Fix auxtrace queue conflict
	perf synthetic events: Avoid write of uninitialized memory when generating PERF_RECORD_MMAP* records
	io_uring: fix provide_buffers sign extension
	block: recalculate segment count for multi-segment discards correctly
	scsi: Revert "qla2xxx: Make sure that aborted commands are freed"
	scsi: qedi: Fix error return code of qedi_alloc_global_queues()
	scsi: mpt3sas: Fix error return code of mpt3sas_base_attach()
	smb3: fix cached file size problems in duplicate extents (reflink)
	cifs: Adjust key sizes and key generation routines for AES256 encryption
	locking/mutex: Fix non debug version of mutex_lock_io_nested()
	x86/mem_encrypt: Correct physical address calculation in __set_clr_pte_enc()
	mm/memcg: fix 5.10 backport of splitting page memcg
	fs/cachefiles: Remove wait_bit_key layout dependency
	ch_ktls: fix enum-conversion warning
	can: dev: Move device back to init netns on owning netns delete
	r8169: fix DMA being used after buffer free if WoL is enabled
	net: dsa: b53: VLAN filtering is global to all users
	mac80211: fix double free in ibss_leave
	ext4: add reclaim checks to xattr code
	fs/ext4: fix integer overflow in s_log_groups_per_flex
	Revert "xen: fix p2m size in dom0 for disabled memory hotplug case"
	Revert "net: bonding: fix error return code of bond_neigh_init()"
	nvme: fix the nsid value to print in nvme_validate_or_alloc_ns
	can: peak_usb: Revert "can: peak_usb: add forgotten supported devices"
	xen-blkback: don't leak persistent grants from xen_blkbk_map()
	Linux 5.10.27

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: I7eafe976fd6bf33db6db4adb8ebf2ff087294a23
 2021-04-02 15:25:50 +02:00
Fenghua Yu
7077d5e7f0 mm/fork: clear PASID for new mm 
[ Upstream commit 82e69a121be4b1597ce758534816a8ee04c8b761 ]

When a new mm is created, its PASID should be cleared, i.e.  the PASID is
initialized to its init state 0 on both ARM and X86.

This patch was part of the series introducing mm->pasid, but got lost
along the way [1].  It still makes sense to have it, because each address
space has a different PASID.  And the IOMMU code in
iommu_sva_alloc_pasid() expects the pasid field of a new mm struct to be
cleared.

[1] https://lore.kernel.org/linux-iommu/YDgh53AcQHT+T3L0@otcwcpicx3.sc.intel.com/

Link: https://lkml.kernel.org/r/20210302103837.2562625-1-jean-philippe@linaro.org
Signed-off-by: Fenghua Yu <fenghua.yu@intel.com>
Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>
Reviewed-by: Tony Luck <tony.luck@intel.com>
Cc: Jacob Pan <jacob.jun.pan@intel.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
 2021-03-30 14:31:52 +02:00
Laurent Dufour
5eca9e121f FROMLIST: mm: protect against PTE changes done by dup_mmap() 
Vinayak Menon and Ganesh Mahendran reported that the following scenario may
lead to thread being blocked due to data corruption:

    CPU 1                   CPU 2                    CPU 3
    Process 1,              Process 1,               Process 1,
    Thread A                Thread B                 Thread C

    while (1) {             while (1) {              while(1) {
    pthread_mutex_lock(l)   pthread_mutex_lock(l)    fork
    pthread_mutex_unlock(l) pthread_mutex_unlock(l)  }
    }                       }

In the details this happens because :

    CPU 1                CPU 2                       CPU 3
    fork()
    copy_pte_range()
      set PTE rdonly
    got to next VMA...
     .                   PTE is seen rdonly          PTE still writable
     .                   thread is writing to page
     .                   -> page fault
     .                     copy the page             Thread writes to page
     .                      .                        -> no page fault
     .                     update the PTE
     .                     flush TLB for that PTE
   flush TLB                                        PTE are now rdonly

So the write done by the CPU 3 is interfering with the page copy operation
done by CPU 2, leading to the data corruption.

To avoid this we mark all the VMA involved in the COW mechanism as changing
by calling vm_write_begin(). This ensures that the speculative page fault
handler will not try to handle a fault on these pages.
The marker is set until the TLB is flushed, ensuring that all the CPUs will
now see the PTE as not writable.
Once the TLB is flush, the marker is removed by calling vm_write_end().

The variable last is used to keep tracked of the latest VMA marked to
handle the error path where part of the VMA may have been marked.

Change-Id: I3fe07109e27d8f77c9b435053567fe5c287703aa
Reported-by: Ganesh Mahendran <opensource.ganesh@gmail.com>
Reported-by: Vinayak Menon <vinmenon@codeaurora.org>
Signed-off-by: Laurent Dufour <ldufour@linux.ibm.com>
Link: https://www.spinics.net/lists/linux-mm/msg171207.html
Bug: 161210518
Signed-off-by: Charan Teja Reddy <charante@codeaurora.org>
Signed-off-by: Vinayak Menon <vinmenon@codeaurora.org>
 2021-01-22 18:02:09 +00:00
Laurent Dufour
6d8fc36d9e FROMLIST: mm: protect mm_rb tree with a rwlock 
This change is inspired by the Peter's proposal patch [1] which was
protecting the VMA using SRCU. Unfortunately, SRCU is not scaling well in
that particular case, and it is introducing major performance degradation
due to excessive scheduling operations.

To allow access to the mm_rb tree without grabbing the mmap_sem, this patch
is protecting it access using a rwlock.  As the mm_rb tree is a O(log n)
search it is safe to protect it using such a lock.  The VMA cache is not
protected by the new rwlock and it should not be used without holding the
mmap_sem.

To allow the picked VMA structure to be used once the rwlock is released, a
use count is added to the VMA structure. When the VMA is allocated it is
set to 1.  Each time the VMA is picked with the rwlock held its use count
is incremented. Each time the VMA is released it is decremented. When the
use count hits zero, this means that the VMA is no more used and should be
freed.

This patch is preparing for 2 kind of VMA access :
 - as usual, under the control of the mmap_sem,
 - without holding the mmap_sem for the speculative page fault handler.

Access done under the control the mmap_sem doesn't require to grab the
rwlock to protect read access to the mm_rb tree, but access in write must
be done under the protection of the rwlock too. This affects inserting and
removing of elements in the RB tree.

The patch is introducing 2 new functions:
 - vma_get() to find a VMA based on an address by holding the new rwlock.
 - vma_put() to release the VMA when its no more used.
These services are designed to be used when access are made to the RB tree
without holding the mmap_sem.

When a VMA is removed from the RB tree, its vma->vm_rb field is cleared and
we rely on the WMB done when releasing the rwlock to serialize the write
with the RMB done in a later patch to check for the VMA's validity.

When free_vma is called, the file associated with the VMA is closed
immediately, but the policy and the file structure remained in used until
the VMA's use count reach 0, which may happens later when exiting an
in progress speculative page fault.

[1] https://patchwork.kernel.org/patch/5108281/

Change-Id: I9ecc922b8efa4b28975cc6a8e9531284c24ac14e
Cc: Peter Zijlstra (Intel) <peterz@infradead.org>
Cc: Matthew Wilcox <willy@infradead.org>
Signed-off-by: Laurent Dufour <ldufour@linux.vnet.ibm.com>
Link: https://lore.kernel.org/lkml/1523975611-15978-18-git-send-email-ldufour@linux.vnet.ibm.com/
Bug: 161210518
Signed-off-by: Vinayak Menon <vinmenon@codeaurora.org>
Signed-off-by: Charan Teja Reddy <charante@codeaurora.org>
 2021-01-22 18:00:57 +00:00
Laurent Dufour
0076600734 FROMLIST: mm: introduce INIT_VMA() 
Some VMA struct fields need to be initialized once the VMA structure is
allocated.
Currently this only concerns anon_vma_chain field but some other will be
added to support the speculative page fault.

Instead of spreading the initialization calls all over the code, let's
introduce a dedicated inline function.

Change-Id: I9f6b29dc74055354318b548e2b6b22c37d4c61bb
Signed-off-by: Laurent Dufour <ldufour@linux.vnet.ibm.com>
Link: https://lore.kernel.org/lkml/1523975611-15978-8-git-send-email-ldufour@linux.vnet.ibm.com/
Bug: 161210518
Signed-off-by: Vinayak Menon <vinmenon@codeaurora.org>
Signed-off-by: Charan Teja Reddy <charante@codeaurora.org>
 2021-01-22 17:59:31 +00:00
Andrey Konovalov
37f77a6fb3 UPSTREAM: kasan: rename (un)poison_shadow to (un)poison_range 
[ Upstream commit cebd0eb29acdfc2f5e44e5f356ffcd0c44f16b4a ]

This is a preparatory commit for the upcoming addition of a new hardware
tag-based (MTE-based) KASAN mode.

The new mode won't be using shadow memory.  Rename external annotation
kasan_unpoison_shadow() to kasan_unpoison_range(), and introduce internal
functions (un)poison_range() (without kasan_ prefix).

Co-developed-by: Marco Elver <elver@google.com>
Link: https://lkml.kernel.org/r/fccdcaa13dc6b2211bf363d6c6d499279a54fe3a.1606161801.git.andreyknvl@google.com
Signed-off-by: Marco Elver <elver@google.com>
Signed-off-by: Andrey Konovalov <andreyknvl@google.com>
Signed-off-by: Vincenzo Frascino <vincenzo.frascino@arm.com>
Reviewed-by: Alexander Potapenko <glider@google.com>
Tested-by: Vincenzo Frascino <vincenzo.frascino@arm.com>
Cc: Andrey Ryabinin <aryabinin@virtuozzo.com>
Cc: Branislav Rankov <Branislav.Rankov@arm.com>
Cc: Catalin Marinas <catalin.marinas@arm.com>
Cc: Dmitry Vyukov <dvyukov@google.com>
Cc: Evgenii Stepanov <eugenis@google.com>
Cc: Kevin Brodsky <kevin.brodsky@arm.com>
Cc: Vasily Gorbik <gor@linux.ibm.com>
Cc: Will Deacon <will.deacon@arm.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Bug: 172318110
Signed-off-by: Andrey Konovalov <andreyknvl@google.com>
Change-Id: If25b1b58a3a38a2643367a165e1c9bbd69d42455
 2021-01-19 21:47:27 -08:00