android_kernel_xiaomi_sm8450

Author	SHA1	Message	Date
Kalesh Singh	09da1d141d	ANDROID: 16K: Handle pad VMA splits and merges In some cases a VMA with padding representation may be split, and therefore the padding flags must be updated accordingly. There are 3 cases to handle: Given: \| DDDDPPPP \| where: - D represents 1 page of data; - P represents 1 page of padding; - \| represents the boundaries (start/end) of the VMA 1) Split exactly at the padding boundary \| DDDDPPPP \| --> \| DDDD \| PPPP \| - Remove padding flags from the first VMA. - The second VMA is all padding 2) Split within the padding area \| DDDDPPPP \| --> \| DDDDPP \| PP \| - Subtract the length of the second VMA from the first VMA's padding. - The second VMA is all padding, adjust its padding length (flags) 3) Split within the data area \| DDDDPPPP \| --> \| DD \| DDPPPP \| - Remove padding flags from the first VMA. - The second VMA is has the same padding as from before the split. To simplify the semantics merging of padding VMAs is not allowed. If a split produces a VMA that is entirely padding, show_[s]maps() only outputs the padding VMA entry (as the data entry is of length 0). Bug: 330117029 Bug: 327600007 Bug: 330767927 Bug: 328266487 Bug: 329803029 Change-Id: Ie2628ced5512e2c7f8af25fabae1f38730c8bb1a Signed-off-by: Kalesh Singh <kaleshsingh@google.com>	2024-05-02 15:06:14 -07:00
Greg Kroah-Hartman	d0782c9411	Merge tag 'android12-5.10.160_r00' into android12-5.10 This is the merge of the upstream LTS release of 5.10.160 into the android12-5.10 branch. It contains the following commits: `003c389455` Merge 5.10.160 into android12-5.10-lts `a2428a8dcb` Linux 5.10.160 `54c15f67cb` ASoC: ops: Correct bounds check for second channel on SX controls `74b139c63f` nvme-pci: clear the prp2 field when not used `77ebf88e00` ASoC: cs42l51: Correct PGA Volume minimum value `4db1d19b74` can: mcba_usb: Fix termination command argument `683837f2f6` can: sja1000: fix size of OCR_MODE_MASK define `434b523671` pinctrl: meditatek: Startup with the IRQs disabled `5cb4abb0ca` libbpf: Use page size as max_entries when probing ring buffer map `50b5f6d4d9` ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() `344739dc56` ASoC: fsl_micfil: explicitly clear CHnF flags `a49c1a7307` ASoC: fsl_micfil: explicitly clear software reset bit `75454b4bbf` io_uring: add missing item types for splice request `17f386e6b7` fuse: always revalidate if exclusive create `eb6313c129` nfp: fix use-after-free in area_cache_get() `965d93fb39` vfs: fix copy_file_range() averts filesystem freeze protection `ed96733949` vfs: fix copy_file_range() regression in cross-fs copies `970862a96c` x86/smpboot: Move rcu_cpu_starting() earlier `32e45c58a0` Merge "Merge 5.10.159 into android12-5.10-lts" into android12-5.10-lts `d31626cbea` ANDROID: usb: gadget: uvc: remove duplicate code in unbind `01ef2d0b53` Merge 5.10.159 into android12-5.10-lts `931578be69` Linux 5.10.159 `4fd6f84e0a` can: esd_usb: Allow REC and TEC to return to zero `cf0e423106` macsec: add missing attribute validation for offload `6b03e41767` net: mvneta: Fix an out of bounds check `8208d7e56b` ipv6: avoid use-after-free in ip6_fragment() `3d59adad12` net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() `a00444e25b` xen/netback: fix build warning `87277bdf2c` ethernet: aeroflex: fix potential skb leak in greth_init_rings() `cc668fddde` tipc: call tipc_lxc_xmit without holding node_read_lock `4be43e46c3` net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() `8e3f9ac009` ipv4: Fix incorrect route flushing when table ID 0 is used `5211e5ff9d` ipv4: Fix incorrect route flushing when source address is deleted `36e248269a` tipc: Fix potential OOB in tipc_link_proto_rcv() `93aaa4bb72` net: hisilicon: Fix potential use-after-free in hix5hd2_rx() `296a50aa8b` net: hisilicon: Fix potential use-after-free in hisi_femac_rx() `8d1aed7a11` net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq `a5cfbc1995` ip_gre: do not report erspan version on GRE interface `696e34d54c` net: stmmac: fix "snps,axi-config" node property parsing `ca26f45083` nvme initialize core quirks before calling nvme_init_subsystem `27eb2d7a1b` NFC: nci: Bounds check struct nfc_target arrays `a2506b19d7` i40e: Disallow ip4 and ip6 l4_4_bytes `8329b65e34` i40e: Fix for VF MAC address 0 `215f3ac53b` i40e: Fix not setting default xps_cpus after reset `146ebee8fc` net: mvneta: Prevent out of bounds read in mvneta_config_rss() `e6860c889f` xen-netfront: Fix NULL sring after live migration `3d3b30718a` net: encx24j600: Fix invalid logic in reading of MISTAT register `51ba1820e7` net: encx24j600: Add parentheses to fix precedence `42c319635c` mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() `4c693330ce` selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload `bccda3ad07` net: dsa: ksz: Check return value `e7b9504581` Bluetooth: Fix not cleanup led when bt_init fails `1717354d77` Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() `80c69b31aa` vmxnet3: correctly report encapsulated LRO packet `575a6266f6` af_unix: Get user_ns from in_skb in unix_diag_get_exact(). `6c788c0a25` drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420 `de918d9738` igb: Allocate MSI-X vector when testing `6595c9208d` e1000e: Fix TX dispatch condition `5ee6413d3d` gpio: amd8111: Fix PCI device reference count leak `b9aca69a6c` drm/bridge: ti-sn65dsi86: Fix output polarity setting bug `b46e8c50c3` netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark `0a8e66e375` ca8210: Fix crash by zero initializing data `27c71825ff` ieee802154: cc2520: Fix error return code in cc2520_hw_init() `a0418d0a6b` netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one `cb283cca1d` rtc: mc146818-lib: fix signedness bug in mc146818_get_time() `5c432383b6` rtc: mc146818-lib: fix locking in mc146818_set_time `5e26531d81` rtc: cmos: Disable irq around direct invocation of cmos_interrupt() `fccee93eb2` mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page `c42221efb1` can: af_can: fix NULL pointer dereference in can_rcv_filter `bc03f809da` HID: core: fix shift-out-of-bounds in hid_report_raw_event `959a23a4d1` HID: hid-lg4ff: Add check for empty lbuf `4dde75945a` HID: usbhid: Add ALWAYS_POLL quirk for some mice `11e95d85c3` drm/shmem-helper: Avoid vm_open error paths `6a4da05acd` drm/shmem-helper: Remove errant put in error path `007f561f59` drm/vmwgfx: Don't use screen objects when SEV is active `3cb78c3925` KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field `549b46f813` Bluetooth: Fix crash when replugging CSR fake controllers `380d183e99` Bluetooth: btusb: Add debug message for CSR controllers `f1cf856123` mm/gup: fix gup_pud_range() for dax `f1f7f36cf6` memcg: fix possible use-after-free in memcg_write_event_control() `32f01f0306` media: v4l2-dv-timings.c: fix too strict blanking sanity checks `043b2bc96c` Revert "ARM: dts: imx7: Fix NAND controller size-cells" `abfb8ae69b` media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area() `83632fc414` xen/netback: don't call kfree_skb() with interrupts disabled `3eecd2bc10` xen/netback: do some code cleanup `49e07c0768` xen/netback: Ensure protocol headers don't fall in the non-linear area `db44a9443e` rtc: mc146818: Reduce spinlock section in mc146818_set_time() `17293d630f` rtc: cmos: Replace spin_lock_irqsave with spin_lock in hard IRQ `acfd8ef683` rtc: cmos: avoid UIP when reading alarm time `949bae0282` rtc: cmos: avoid UIP when writing alarm time `33ac73a41a` rtc: mc146818-lib: extract mc146818_avoid_UIP `8bb5fe5830` rtc: mc146818-lib: fix RTC presence check `775d4661f1` rtc: Check return value from mc146818_get_time() `b9a5c470e0` rtc: mc146818-lib: change return values of mc146818_get_time() `94eaf9966e` rtc: cmos: remove stale REVISIT comments `f5b51f8550` rtc: mc146818: Dont test for bit 0-5 in Register D `3736972360` rtc: mc146818: Detect and handle broken RTCs `7c7075c88d` rtc: mc146818: Prevent reading garbage `7f445ca2e0` mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths `4a1cdb49d0` mm/khugepaged: fix GUP-fast interaction by sending IPI `cdfd3739b2` mm/khugepaged: take the right locks for page table retraction `1c0eec6a1d` net: usb: qmi_wwan: add u-blox 0x1342 composition `a8c5ffb4df` 9p/xen: check logical size for buffer size `ec36ebae36` usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer `d9b53caf01` fbcon: Use kzalloc() in fbcon_prepare_logo() `8b130c770d` regulator: twl6030: fix get status of twl6032 regulators `f6f45e5383` ASoC: soc-pcm: Add NULL check in BE reparenting `688a45aff2` btrfs: send: avoid unaligned encoded writes when attempting to clone range `15c42ab8d4` ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event `d38e021416` regulator: slg51000: Wait after asserting CS pin `1331bcfcac` 9p/fd: Use P9_HDRSZ for header size `96b43f36a5` ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 `ddf58f5939` ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register `dbd78abd69` ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation `bb1866cf1e` ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels `b1f40a0cdf` ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name `5f9474d07b` arm64: dts: rockchip: fix ir-receiver node names `060d58924a` ARM: dts: rockchip: fix ir-receiver node names `3e0c466771` arm: dts: rockchip: fix node name for hym8563 rtc `3ada63a876` arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series `202ee06349` Revert "mmc: sdhci: Fix voltage switch delay" `0b0939466f` ANDROID: gki_defconfig: add CONFIG_FUNCTION_ERROR_INJECTION `5ab4c6b843` Merge 5.10.158 into android12-5.10-lts `592346d5dc` Linux 5.10.158 `cc1b4718cc` ipc/sem: Fix dangling sem_array access in semtimedop race `d072a10c81` v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails `9ba389863a` proc: proc_skip_spaces() shouldn't think it is working on C strings `4aa32aaef6` proc: avoid integer type confusion in get_proc_long `5f2f775605` block: unhash blkdev part inode when the part is deleted `a82869ac52` Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() `4e0d6c687c` char: tpm: Protect tpm_pm_suspend with locks `5a6f935ef3` Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend" `f075cf139f` ACPI: HMAT: Fix initiator registration for single-initiator systems `f3b76b4d38` ACPI: HMAT: remove unnecessary variable initialization `63e72417a1` i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set `df76136598` i2c: npcm7xx: Fix error handling in npcm_i2c_init() `7462cd2443` x86/pm: Add enumeration check before spec MSRs save/restore setup `5e3d4a68e2` x86/tsx: Add a feature bit for TSX control MSR support `b7f7a0402e` Revert "tty: n_gsm: avoid call of sleeping functions from atomic context" `481f9ed8eb` ipv4: Fix route deletion when nexthop info is not specified `0b5394229e` ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference `4919503426` selftests: net: fix nexthop warning cleanup double ip typo `7ca14c5f24` selftests: net: add delete nexthop route warning test `f09ac62f0e` Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled `19d91d3798` parisc: Increase FRAME_WARN to 2048 bytes on parisc `fcf20da099` xtensa: increase size of gcc stack frame check `a1877001ed` parisc: Increase size of gcc stack frame check `a5c65cd56a` iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() `10ed7655a1` iommu/vt-d: Fix PCI device refcount leak in has_external_pci() `302edce1dd` pinctrl: single: Fix potential division by zero `b50c964189` ASoC: ops: Fix bounds check for _sx controls `a2efc46524` io_uring: don't hold uring_lock when calling io_run_task_work* `be111ebd88` tracing: Free buffers when a used dynamic event is removed `648b92e576` drm/i915: Never return 0 if not all requests retired `8649c023c4` drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame `940b774069` mmc: sdhci: Fix voltage switch delay `ed19662453` mmc: sdhci-sprd: Fix no reset data and command after voltage switch `ef767907e7` mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check `46ee041cd6` mmc: core: Fix ambiguous TRIM and DISCARD arg `b79be962b5` mmc: mmc_test: Fix removal of debugfs file `d4fc344c0d` net: stmmac: Set MAC's flow control register to reflect current settings `549e24409a` pinctrl: intel: Save and restore pins in "direct IRQ" mode `471fb7b735` x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 `e858917ab7` nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() `6ddf788400` tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep" `c099d12c55` error-injection: Add prompt for function error injection `26b6f927bb` riscv: vdso: fix section overlapping under some conditions `2b1d8f27e2` net/mlx5: DR, Fix uninitialized var warning `c40db1e5f3` hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() `f06e0cd01e` hwmon: (coretemp) Check for null before removing sysfs attrs `d93522d04f` net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed `176ee6c673` sctp: fix memory leak in sctp_stream_outq_migrate() `1c38c88acc` packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE `5f442e1d40` net: tun: Fix use-after-free in tun_detach() `5fa0fc5876` afs: Fix fileserver probe RTT handling `7ca81a161e` net: hsr: Fix potential use-after-free `a1ba595e35` tipc: re-fetch skb cb after tipc_msg_validate `4621bdfff5` dsa: lan9303: Correct stat name `45752af024` net: ethernet: nixge: fix NULL dereference `e01c154237` net/9p: Fix a potential socket leak in p9_socket_open `b080d4668f` net: net_netdev: Fix error handling in ntb_netdev_init_module() `fe6bc99c27` net: phy: fix null-ptr-deref while probe() failed `0184ede0ec` wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration `e2ed90fd3a` wifi: cfg80211: don't allow multi-BSSID in S1G `9e6b79a3cd` wifi: cfg80211: fix buffer overflow in elem comparison `6922948c2e` aquantia: Do not purge addresses when setting the number of rings `fa59d49a49` qlcnic: fix sleep-in-atomic-context bugs caused by msleep `d753f554f2` can: cc770: cc770_isa_probe(): add missing free_cc770dev() `e74746bf04` can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() `0d2f9d95d9` net/mlx5e: Fix use-after-free when reverting termination table `2cb84ff349` net/mlx5: Fix uninitialized variable bug in outlen_write() `b775f37d94` e100: Fix possible use after free in e100_xmit_prepare `086f656e44` e100: switch from 'pci_' to 'dma_' API `971c55f076` iavf: Fix error handling in iavf_init_module() `d389a4c698` iavf: remove redundant ret variable `fd4960ea53` fm10k: Fix error handling in fm10k_init_module() `dd425cec79` i40e: Fix error handling in i40e_init_module() `f166c62cad` ixgbevf: Fix resource leak in ixgbevf_init_module() `8f7047f418` of: property: decrement node refcount in of_fwnode_get_reference_args() `be006212bd` bpf: Do not copy spin lock field from user in bpf_selem_alloc `90907cd4d1` hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails `7649bba263` hwmon: (i5500_temp) fix missing pci_disable_device() `dddfc03f04` hwmon: (ina3221) Fix shunt sum critical calculation `984fcd3ec1` hwmon: (ltc2947) fix temperature scaling `8a549ab672` libbpf: Handle size overflow for ringbuf mmap `cc140c729c` ARM: at91: rm9200: fix usb device clock id `592724b14d` scripts/faddr2line: Fix regression in name resolution on ppc64le `353c3aaaf3` bpf, perf: Use subprog name when reporting subprog ksymbol `d48f6a5784` iio: light: rpr0521: add missing Kconfig dependencies `5eb114f55b` iio: health: `afe4404`: Fix oob read in afe4404_[read\|write]_raw `b1756af172` iio: health: afe4403: Fix oob read in afe4403_read_raw `01d7c41eac` btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() `d3f5be8246` drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read" `00570fafc2` drm/amdgpu: update drm_display_info correctly when the edid is read `44b204730b` drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code `1faf21bdd1` btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker `6050872f9f` spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock `7b020665d4` btrfs: free btrfs_path before copying inodes to userspace `d5b7a34379` btrfs: sink iterator parameter to btrfs_ioctl_logical_to_ino `f3226d86f8` Revert "xfrm: fix "disable_policy" on ipv4 early demux" `982d7f3eb8` Merge 5.10.157 into android12-5.10-lts `37d3df60cb` ANDROID: CRC ABI fixups in ip.h and ipv6.h `f4245f0538` Linux 5.10.157 `4801672fb0` fuse: lock inode unconditionally in fuse_fallocate() `86f0082fb9` drm/i915: fix TLB invalidation for Gen12 video and compute engines `feb97cf45e` drm/amdgpu: always register an MMU notifier for userptr `596b7d55d7` drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN `c86c1a7037` btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs() `1581830c0e` btrfs: free btrfs_path before copying subvol info to userspace `0bdb8f7ef8` btrfs: free btrfs_path before copying fspath to userspace `24a37ba2cb` btrfs: free btrfs_path before copying root refs to userspace `b56d6e5585` genirq: Take the proposed affinity at face value if force==true `9d90a2b98e` irqchip/gic-v3: Always trust the managed affinity provided by the core code `e0d2c59ee9` genirq: Always limit the affinity to online CPUs `f8f80d532f` genirq/msi: Shutdown managed interrupts with unsatifiable affinities `3eb6b89a4e` wifi: wilc1000: validate number of channels `5a068535c0` wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute `905f886eae` wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute `7c6535fb4d` wifi: wilc1000: validate pairwise and authentication suite offsets `64b7f9a7dd` dm integrity: clear the journal on suspend `d306f73079` dm integrity: flush the journal on suspend `79d9a11679` gpu: host1x: Avoid trying to use GART on Tegra20 `a7f30b5b8d` net: usb: qmi_wwan: add Telit 0x103a composition `7e8eaa939e` tcp: configurable source port perturb table size `0acc008cf9` platform/x86: hp-wmi: Ignore Smart Experience App event `0964b77bab` zonefs: fix zone report size in __zonefs_io_error() `a5937dae66` platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) `52fb7bcea0` platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() `4fa717ba2d` xen/platform-pci: add missing free_irq() in error path `f45a5a6c9f` xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too `9bbb587472` Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[] `4ea4316dff` Input: soc_button_array - add use_low_level_irq module parameter `c1620e996d` Input: goodix - try resetting the controller when no config is set `f4db050958` serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios() `7c3e39ccf5` ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 `36e0b97619` Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode `ae9e0cc973` binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 `017de84253` binder: Address corner cases in deferred copy and fixup `2e3c27f241` binder: fix pointer cast warning `c9d3f25a7f` binder: defer copies of pre-patched txn data `5204296fc7` binder: read pre-translated fds from sender buffer `23e9d815fa` binder: avoid potential data leakage when copying txn `22870431cd` x86/ioremap: Fix page aligned size calculation in __ioremap_caller() `3fdeacf087` KVM: x86: remove exit_int_info warning in svm_handle_exit `7e5cb13091` KVM: x86: nSVM: leave nested mode on vCPU free `d925dd3e44` mm: vmscan: fix extreme overreclaim and swap floods `a4a62a23fa` gcov: clang: fix the buffer overflow issue `e7f21d10e9` nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty `f06b7e6a77` usb: dwc3: gadget: Clear ep descriptor last `cff7523ab8` usb: dwc3: gadget: Return -ESHUTDOWN on ep disable `a32635528d` usb: dwc3: gadget: conditionally remove requests `ca3a08e9d9` ceph: fix NULL pointer dereference for req->r_session `00c004c070` ceph: Use kcalloc for allocating multiple elements `69263bf781` ceph: fix possible NULL pointer dereference for req->r_session `8e137ace53` ceph: put the requests/sessions when it fails to alloc memory `38993788f4` ceph: fix off by one bugs in unsafe_request_wait() `8a31ae7f77` ceph: flush the mdlog before waiting on unsafe reqs `78b2f546f7` ceph: flush mdlog before umounting `d94ba7b3b7` ceph: make iterate_sessions a global symbol `9ac038d3c2` ceph: make ceph_create_session_msg a global symbol `8382cdf0ab` usb: cdns3: Add support for DRD CDNSP `57112da86b` mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI `b5d770977b` mmc: sdhci-brcmstb: Enable Clock Gating to save power `049194538c` mmc: sdhci-brcmstb: Re-organize flags `fbe955be26` nios2: add FORCE for vmlinuz.gz `c0a9c9973d` init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash `456e895fd0` iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails `fa9efcbfbf` iio: light: apds9960: fix wrong register for gesture gain `bd1b8041c2` arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency `86ba9c8595` ext4: fix use-after-free in ext4_ext_shift_extents `350e98a08a` usb: dwc3: exynos: Fix remove() function `d21d26e65b` lib/vdso: use "grep -E" instead of "egrep" `c0cf8bc259` net: enetc: preserve TX ring priority across reconfiguration `de4dd4f9b3` net: enetc: cache accesses to &priv->si->hw `1f080b8caa` net: enetc: manage ENETC_F_QBV in priv->active_offloads only when enabled `1d840c5d67` s390/crashdump: fix TOD programmable field size `11052f1188` net: thunderx: Fix the ACPI memory leak `b034fe2a08` nfc: st-nci: fix memory leaks in EVT_TRANSACTION `e14583073f` nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION `9cc863d523` arcnet: fix potential memory leak in com20020_probe() `4d2be0cf27` net: arcnet: Fix RESET flag handling `e61b00374a` s390/dasd: fix no record found for raw_track_access `aeebb07499` ipv4: Fix error return code in fib_table_insert() `c0af4d005a` dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). `b8e494240e` netfilter: flowtable_offload: add missing locking `af9de5cdcb` dma-buf: fix racing conflict of dma_heap_add() `c40b76dfa7` bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() `f81e9c0510` regulator: twl6030: re-add TWL6032_SUBCLASS `32b944b9c4` NFC: nci: fix memory leak in nci_rx_data_packet() `68a7aec3f4` net: sched: allow act_ct to be built without NF_NAT `8e2664e12b` sfc: fix potential memleak in __ef100_hard_start_xmit() `6b638a16ea` xfrm: Fix ignored return value in xfrm6_init() `c7788361a6` tipc: check skb_linearize() return value in tipc_disc_rcv() `4058e3b74a` tipc: add an extra conn_get in tipc_conn_alloc `e87a077d09` tipc: set con sock in tipc_conn_alloc `891daa95b0` net/mlx5: Fix handling of entry refcount when command is not issued to FW `e06ff9f8fe` net/mlx5: Fix FW tracer timestamp calculation `5689eba90a` netfilter: ipset: regression in ip_set_hash_ip.c `e62e62ea91` netfilter: ipset: Limit the maximal range of consecutive elements to add/delete `8dca384970` Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() `909186cf34` Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() `f42802e14a` macsec: Fix invalid error code set `72be055615` nfp: add port from netdev validation for EEPROM access `ce41e03cac` nfp: fill splittable of devlink_port_attrs correctly `0b553ded34` net: pch_gbe: fix pci device refcount leak while module exiting `2c59ef9ab6` net/qla3xxx: fix potential memleak in ql3xxx_send() `a24d5f6c8b` net/mlx4: Check retval of mlx4_bitmap_init `da86a63479` net: ethernet: mtk_eth_soc: fix error handling in mtk_open() `756534f7cf` ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties `290a71ff72` ARM: mxs: fix memory leak in mxs_machine_init() `5c97af75f5` netfilter: conntrack: Fix data-races around ct mark `459332f8db` 9p/fd: fix issue of list_del corruption in p9_fd_cancel() `26bb8f6aaa` net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() `398a860a44` nfc/nci: fix race with opening and closing `3535c632e6` rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] `23c03ee0ee` rxrpc: Use refcount_t rather than atomic_t `bddde342c6` rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc `a2d5dba2fc` net: liquidio: simplify if expression `8124a02e17` ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl `b547bf71fa` tee: optee: fix possible memory leak in optee_register_device() `b76c5a99f4` bus: sunxi-rsb: Support atomic transfers `0c059b7d2a` regulator: core: fix UAF in destroy_regulator() `fcb2d28636` spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld() `0b6441abfa` regulator: core: fix kobject release warning and memory leak in regulator_register() `26d3d3ffa8` scsi: storvsc: Fix handling of srb_status and capacity change events `c34db0d6b8` ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open() `4f6c7344ab` ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove `164a5b50d1` ASoC: hdac_hda: fix hda pcm buffer overflow issue `7cfb4b8579` ARM: dts: am335x-pcm-953: Define fixed regulators in root node `b7000254c1` af_key: Fix send_acquire race with pfkey_register `51969d679b` xfrm: replay: Fix ESN wrap around for GSO `497653f6d2` xfrm: fix "disable_policy" on ipv4 early demux `836bbdfcf8` MIPS: pic32: treat port as signed integer `c0bb600f07` RISC-V: vdso: Do not add missing symbols to version section in linker script `81cc6d8400` arm64/syscall: Include asm/ptrace.h in syscall_wrapper header. `fa5f2c72d3` block, bfq: fix null pointer dereference in bfq_bio_bfqg() `d29bde8689` drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) `f7ce6fb04e` scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC `2574903ee2` scsi: ibmvfc: Avoid path failures during live migration `7fc62181c1` platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1 `f54a11b6bf` Revert "net: macsec: report real_dev features when HW offloading is enabled" `f4b8c0710a` selftests/bpf: Add verifier test for release_reference() `361a165098` spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run `2c1ca23555` wifi: mac80211: Fix ack frame idr leak when mesh has no route `8d39913158` wifi: airo: do not assign -1 to unsigned char `8552e6048e` audit: fix undefined behavior in bit shift for AUDIT_BIT `1c9eb641d1` riscv: dts: sifive unleashed: Add PWM controlled LEDs `92ae6facd1` wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support `2fcc593b50` wifi: mac80211: fix memory free error when registering wiphy fail `044bc6d3c2` ceph: avoid putting the realm twice when decoding snaps fails `d43219bb33` ceph: do not update snapshot context when there is no new snapshot `49c71b6814` iio: pressure: ms5611: fixed value compensation bug `879139bc7a` iio: ms5611: Simplify IO callback parameters `80c825e1e3` nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro `f4066fb910` nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH `4f0cea018e` drm/display: Don't assume dual mode adaptors support i2c sub-addressing `347f1793b5` bridge: switchdev: Fix memory leaks when changing VLAN protocol `89a7f155e6` bridge: switchdev: Notify about VLAN protocol changes `f5cbd86ebf` ata: libata-core: do not issue non-internal commands once EH is pending `4034d06a4d` ata: libata-scsi: simplify __ata_scsi_queuecmd() `03aabcb88a` scsi: scsi_transport_sas: Fix error handling in sas_phy_add() `d9b90a99f3` Merge 5.10.156 into android12-5.10-lts `25af5a11f1` Merge 5.10.155 into android12-5.10-lts `e5d2cd6ad8` ANDROID: abi preservation for fscrypt change in 5.10.154 `5bc3ece380` Revert "serial: 8250: Let drivers request full 16550A feature probing" `f466ca1247` Merge 5.10.154 into android12-5.10-lts `6d46ef50b1` Linux 5.10.156 `7be134eb69` Revert "net: broadcom: Fix BCMGENET Kconfig" `957732a09c` ntfs: check overflow when iterating ATTR_RECORDs `6322dda483` ntfs: fix out-of-bounds read in ntfs_attr_find() `b825bfbbaa` ntfs: fix use-after-free in ntfs_attr_find() `294ef12dcc` mm: fs: initialize fsdata passed to write_begin/write_end interface `a8e2fc8f7b` 9p/trans_fd: always use O_NONBLOCK read/write `a5da76df46` gfs2: Switch from strlcpy to strscpy `5fa30be7ba` gfs2: Check sb_bsize_shift after reading superblock `f14858bc77` 9p: trans_fd/p9_conn_cancel: drop client lock earlier `4154b6afa2` kcm: close race conditions on sk_receive_queue `7deb7a9d33` kcm: avoid potential race in kcm_tx_work `35309be06b` tcp: cdg: allow tcp_cdg_release() to be called multiple times `e929ec98c0` macvlan: enforce a consistent minimal mtu `95ebea5a15` uapi/linux/stddef.h: Add include guards `3f25add5ec` Input: i8042 - fix leaking of platform device on module removal `7d606ae1ab` kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case `89ece5ff7d` scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper() `75205f1b47` scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() `6e9334436d` net: use struct_group to copy ip/ipv6 header addresses `9fd7bdaffe` stddef: Introduce struct_group() helper macro `47c3bdd955` usbnet: smsc95xx: Fix deadlock on runtime resume `8208c266fe` ring-buffer: Include dropped pages in counting dirty patches `36b5095b07` net: fix a concurrency bug in l2tp_tunnel_register() `023435a095` nvme: ensure subsystem reset is single threaded `b9a5ecf241` nvme: restrict management ioctls to admin `5e2f14d772` perf/x86/intel/pt: Fix sampling using single range output `62634b43d3` misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() `c1eb46a65b` docs: update mediator contact information in CoC doc `4423866d31` mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() `440653a180` mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout `8e70b14131` mmc: core: properly select voltage range without power cycle `05b0f6624d` firmware: coreboot: Register bus in module init `deda86a0d8` iommu/vt-d: Set SRE bit only when hardware has SRS cap `d2c7d8f58e` scsi: zfcp: Fix double free of FSF request when qdio send fails `db744288af` maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault() `24cc679abb` Input: iforce - invert valid length check when fetching device IDs `5f4611fe01` serial: 8250_lpss: Configure DMA also w/o DMA filter `8679087e93` serial: 8250: Flush DMA Rx on RLSI `a5eaad87bf` serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs `f59f5a269c` dm ioctl: fix misbehavior if list_versions races with module loading `67a75a9480` iio: pressure: ms5611: changed hardcoded SPI speed to value limited `d95b85c508` iio: adc: mp2629: fix potential array out of bound access `46b8bc62c5` iio: adc: mp2629: fix wrong comparison of channel `8dddf2699d` iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() `85d2a8b287` iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() `85cc1a2fd8` usb: typec: mux: Enter safe mode only when pins need to be reconfigured `efaab05520` usb: chipidea: fix deadlock in ci_otg_del_timer `143ba5c2d2` usb: add NO_LPM quirk for Realforce 87U Keyboard `249cef723f` USB: serial: option: add Fibocom FM160 0x0111 composition `5c44c60358` USB: serial: option: add u-blox LARA-L6 modem `0e88a3cfa6` USB: serial: option: add u-blox LARA-R6 00B modem `de707957d9` USB: serial: option: remove old LARA-R6 PID `878227a3dd` USB: serial: option: add Sierra Wireless EM9191 `25c652811d` USB: bcma: Make GPIO explicitly optional `eb3af3ea5b` speakup: fix a segfault caused by switching consoles `8cbaf4ed53` slimbus: stream: correct presence rate frequencies `15155f7c0e` Revert "usb: dwc3: disable USB core PHY management" `100d1e53bb` ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 `c7dcc89482` ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro `a80369c8ca` ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() `28a54854a9` tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() `bb70fcae41` tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() `315b149f08` tracing: Fix wild-memory-access in register_synth_event() `65ba7e7c24` tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() `5d4cc7bc1a` tracing/ring-buffer: Have polling block on watermark `5fdebbeca5` ring_buffer: Do not deactivate non-existant pages `6a14828cad` ftrace: Fix null pointer dereference in ftrace_add_mod() `6ed60c60ec` ftrace: Optimize the allocation for mcount entries `9569eed79b` ftrace: Fix the possible incorrect kernel message `5fc19c8313` cifs: add check for returning value of SMB2_set_info_init `0aeb0de528` net: thunderbolt: Fix error handling in tbnet_init() `e13ef43813` cifs: Fix wrong return value checking when GETFLAGS `9f00da9c86` net/x25: Fix skb leak in x25_lapb_receive_frame() `94822d2331` net: ag71xx: call phylink_disconnect_phy if ag71xx_hw_enable() fail in ag71xx_open() `3aeb13bc3d` cifs: add check for returning value of SMB2_close_init `c24013273e` platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized `9ed51414ae` drbd: use after free in drbd_create_device() `6b23a4b252` net: ena: Fix error handling in ena_init() `2d5a495501` net: ionic: Fix error handling in ionic_init_module() `bb9924a6ed` xen/pcpu: fix possible memory leak in register_pcpu() `d6a561bd4c` bnxt_en: Remove debugfs when pci_register_driver failed `389738f5db` net: caif: fix double disconnect client in chnl_net_open() `fb5ee1560b` net: macvlan: Use built-in RCU list checking `709aa1f73d` mISDN: fix misuse of put_device() in mISDN_register_device() `417f2d2edf` net: liquidio: release resources when liquidio driver open failed `4cba73f2d6` net: hinic: Fix error handling in hinic_module_init() `083a2c9ef8` mISDN: fix possible memory leak in mISDN_dsp_element_register() `6b23993d5b` net: bgmac: Drop free_netdev() from bgmac_enet_remove() `1f6a73b25d` bpf: Initialize same number of free nodes for each pcpu_freelist `ef2ac07ab8` ata: libata-transport: fix error handling in ata_tdev_add() `7377a14598` ata: libata-transport: fix error handling in ata_tlink_add() `b5362dc163` ata: libata-transport: fix error handling in ata_tport_add() `ac471468f7` ata: libata-transport: fix double ata_host_put() in ata_tport_add() `ac4f404c25` arm64: dts: imx8mn: Fix NAND controller size-cells `30ece7dbee` arm64: dts: imx8mm: Fix NAND controller size-cells `f68a9efd78` ARM: dts: imx7: Fix NAND controller size-cells `1d160dfb3f` drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() `c47a823ea1` drm/drv: Fix potential memory leak in drm_dev_init() `c776a49d09` drm/panel: simple: set bpc field for logic technologies displays `777430aa4d` pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map `bce3e6fe8b` parport_pc: Avoid FIFO port location truncation `a4b5423f88` siox: fix possible memory leak in siox_device_add() `0679f571d3` arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro `58636b5ff3` block: sed-opal: kmalloc the cmd/resp buffers `e27458b18b` sctp: clear out_curr if all frag chunks of current msg are pruned `0b4c259b63` sctp: remove the unnecessary sinfo_stream check in sctp_prsctp_prune_unsent `7360e7c29d` ASoC: soc-utils: Remove __exit for snd_soc_util_exit() `e60f37a1d3` bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() `b8fe1a5aa7` tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send `0a3160f4ff` serial: imx: Add missing .thaw_noirq hook `7e1f908e65` serial: 8250: omap: Flush PM QOS work on remove `d833cba201` serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() `b0b6ea651e` serial: 8250_omap: remove wait loop from Errata i202 workaround `f14c312c21` serial: 8250: omap: Fix missing PM runtime calls for omap8250_set_mctrl() `85cdbf04b4` serial: 8250: Remove serial_rs485 sanitization from em485 `f5dedad405` ASoC: tas2764: Fix set_tdm_slot in case of single slot `9e82d78fbe` ASoC: tas2770: Fix set_tdm_slot in case of single slot `8d21554ec7` ASoC: core: Fix use-after-free in snd_soc_exit() `38ca9bd336` spi: stm32: Print summary 'callbacks suppressed' message `a180da5564` drm/amdgpu: disable BACO on special BEIGE_GOBY card `f3adf0adf3` drm/amd/pm: disable BACO entry/exit completely on several sienna cichlid cards `b0faeff69a` drm/amd/pm: Read BIF STRAP also for BACO check `6958556285` drm/amd/pm: support power source switch on Sienna Cichlid `7daab001a6` mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA `65ac4d1807` spi: intel: Use correct mask for flash and protected regions `23793518a7` mtd: spi-nor: intel-spi: Disable write protection only if asked `a326fffdc7` ALSA: hda/realtek: fix speakers and micmute on HP 855 G8 `24839d027c` ASoC: codecs: jz4725b: Fix spelling mistake "Sourc" -> "Source", "Routee" -> "Route" `bd48793240` Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm `ce75e90859` btrfs: remove pointless and double ulist frees in error paths of qgroup tests `16743c4bf3` drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid `df2747f295` i2c: i801: add lis3lv02d's I2C address for Vostro 5568 `959cb0fd69` i2c: tegra: Allocate DMA memory for DMA engine `6cb657722e` NFSv4: Retry LOCK on OLD_STATEID during delegation return `f0187227e2` drm/amd/display: Remove wrong pipe control lock `bb3edbd092` ASoC: rt1308-sdw: add the default value of some registers `b1619f0307` selftests/intel_pstate: fix build for ARCH=x86_64 `fdf6807606` selftests/futex: fix build for clang `c1f0defecb` ASoC: codecs: jz4725b: fix capture selector naming `aeb7e8bc0d` ASoC: codecs: jz4725b: use right control for Capture Volume `c87945c173` ASoC: codecs: jz4725b: fix reported volume for Master ctl `9aae00961a` ASoC: codecs: jz4725b: add missed Line In power control bit `0b4d650f90` spi: intel: Fix the offset to get the 64K erase opcode `6910e7279f` ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK `c7432616f6` ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe `a47606064c` ASoC: wm8997: Revert "ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe" `f8f254c8b5` ASoC: wm5110: Revert "ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe" `c73aa2cc41` ASoC: wm5102: Revert "ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe" `673a7341bd` Merge 5.10.153 into android12-5.10-lts `27b36ba7c2` Merge 5.10.152 into android12-5.10-lts `bf759deb0f` Merge 5.10.151 into android12-5.10-lts `6b31c548a1` ANDROID: fix up struct sk_buf ABI breakage `bd66e91ad2` ANDROID: fix up CRC issue with struct tcp_sock `3905cfd1d6` Revert "serial: 8250: Toggle IER bits on only after irq has been set up" `41217963b1` Linux 5.10.155 `0f544353fe` io_uring: kill goto error handling in io_sqpoll_wait_sq() `154d744fbe` x86/cpu: Restore AMD's DE_CFG MSR after resume `e7294b01de` mmc: sdhci-esdhc-imx: Convert the driver to DT-only `534762e261` net: tun: call napi_schedule_prep() to ensure we own a napi `367bc0fa98` dmaengine: at_hdmac: Check return code of dma_async_device_register `85f97c97ef` dmaengine: at_hdmac: Fix impossible condition `f53a233eaa` dmaengine: at_hdmac: Don't allow CPU to reorder channel enable `f451285522` dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors `6be4ab08c8` dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware `a35dd5dd98` dmaengine: at_hdmac: Fix concurrency over the active list `0f603bf553` dmaengine: at_hdmac: Free the memset buf without holding the chan lock `7f07cecc74` dmaengine: at_hdmac: Fix concurrency over descriptor `1582cc3b48` dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all() `9b69060a72` dmaengine: at_hdmac: Protect atchan->status with the channel lock `ee35682261` dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all `7078e935b4` dmaengine: at_hdmac: Fix premature completion of desc in issue_pending `ad4cbe8e9c` dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending `24f9e93e50` dmaengine: at_hdmac: Don't start transactions at tx_submit level `4b51cce72a` dmaengine: at_hdmac: Fix at_lli struct definition `d37dfb9357` cert host tools: Stop complaining about deprecated OpenSSL functions `f8e0edeaa0` can: j1939: j1939_send_one(): fix missing CAN header initialization `0b692d41ee` mm/memremap.c: map FS_DAX device memory as decrypted `03f9582a6a` udf: Fix a slab-out-of-bounds write bug in udf_find_entry() `4ea3aa3b98` mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI `9c0accfa5a` btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() `8fa0c22ef8` platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi `b5ee579fcb` drm/i915/dmabuf: fix sg_table handling in map_dma_buf `4feedde548` nilfs2: fix use-after-free bug of ns_writer on remount `1d4ff73062` nilfs2: fix deadlock in nilfs_count_free_blocks() `344ddbd688` ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure `516f9f2300` vmlinux.lds.h: Fix placement of '.data..decrypted' section `f6896fb69d` ALSA: usb-audio: Add DSD support for Accuphase DAC-60 `2032c2d32b` ALSA: usb-audio: Add quirk entry for M-Audio Micro `a414a6d6ef` ALSA: hda/realtek: Add Positivo C6300 model quirk `3a79f9568d` ALSA: hda: fix potential memleak in 'add_widget_node' `380d64168d` ALSA: hda/ca0132: add quirk for EVGA Z390 DARK `181cfff57b` ALSA: hda/hdmi - enable runtime pm for more AMD display audio `ea6787e482` mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI `0a8d4531a0` mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI `3f558930ad` mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI `b55e64d0a3` mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI `4631cb0406` MIPS: jump_label: Fix compat branch range check `475fd3991a` arm64: efi: Fix handling of misaligned runtime regions and drop warning `94ab8f88fe` riscv: fix reserved memory setup `0cf9cb0614` riscv: Separate memory init from paging init `d7716240bc` riscv: Enable CMA support `ecf78af514` riscv: vdso: fix build with llvm `e56d18a976` riscv: process: fix kernel info leakage `956e0216a1` net: macvlan: fix memory leaks of macvlan_common_newlink `59ec132386` ethernet: tundra: free irq when alloc ring failed in tsi108_open() `dd7beaec8b` net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() `56d3b5531b` ethernet: s2io: disable napi when start nic failed in s2io_card_up() `05b2228434` net: atlantic: macsec: clear encryption keys from the stack `1a4e495edf` net: phy: mscc: macsec: clear encryption keys when freeing a flow `4ad684ba02` cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open() `38aa7ed8c2` net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() `fd52dd2d6e` net: cpsw: disable napi in cpsw_ndo_open() `3b27e20601` net/mlx5e: E-Switch, Fix comparing termination table instance `eb6fa0ac2a` net/mlx5: Allow async trigger completion execution on single CPU systems `bdd282bba7` net: nixge: disable napi when enable interrupts failed in nixge_open() `5333cf1b7f` net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init() `cf4853880e` perf stat: Fix printing os->prefix in CSV metrics output `3a4a3c3b1f` drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() `0b7ee3d50f` dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() `6e2ffae69d` dmaengine: pxa_dma: use platform_get_irq_optional `f31dd15858` tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header `fbb4e8e6dc` net: broadcom: Fix BCMGENET Kconfig `cb6d639bb1` net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable() `d68fa77ee3` can: af_can: fix NULL pointer dereference in can_rx_register() `a033b86c7f` ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network `02f8dfee75` tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent `f3aa8a7d95` drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() `bcb3bb1069` hamradio: fix issue of dev reference count leakage in bpq_device_event() `bc4591a86b` net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() `2bf8b1c111` KVM: s390: pv: don't allow userspace to set the clock under PV `a60cc64db7` KVM: s390x: fix SCK locking `fcbd2b3368` capabilities: fix undefined behavior in bit shift for CAP_TO_MASK `8aae24b0ed` net: fman: Unregister ethernet device on removal `e2c5ee3b62` bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer `38147073c9` bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() `3401f96402` net: tun: Fix memory leaks of napi_get_frags `adaa0f180d` macsec: clear encryption keys from the stack after setting up offload `9dc7503bae` macsec: fix detection of RXSCs when toggling offloading `7f4456f011` macsec: fix secy->n_rx_sc accounting `3b05d9073a` macsec: delete new rxsc when offload fails `50868de7dc` net: gso: fix panic on frag_list with mixed head alloc types `cedd4f01f6` bpf: Fix wrong reg type conversion in release_reference() `9069db2579` bpf: Add helper macro bpf_for_each_reg_in_vstate `95b6ec7337` bpf: Support for pointers beyond pkt_end. `8597b59e3d` HID: hyperv: fix possible memory leak in mousevsc_probe() `8c80b2fca4` bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE `cc21dc48a7` bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues `e1e1218032` wifi: cfg80211: fix memory leak in query_regdb_file() `914cb94e73` wifi: cfg80211: silence a sparse RCU warning `72ea2fc299` phy: stm32: fix an error code in probe `925bf1ba76` hwspinlock: qcom: correct MMIO max register for newer SoCs `76eba54f0d` fuse: fix readdir cache race `7bcea6c5c9` ANDROID: gki_defconfig: remove CONFIG_INIT_STACK_ALL_ZERO=y `d2bc3376cd` Revert "serial: 8250: Fix restoring termios speed after suspend" `0b500f5b16` Merge 5.10.150 into android12-5.10-lts `f5b40c0eb9` Linux 5.10.154 `bf506e366d` ipc: remove memcg accounting for sops objects in do_semtimedop() `c6678c8f4f` wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() `a6c57adec5` drm/i915/sdvo: Setup DDC fully before output init `b86830cc95` drm/i915/sdvo: Filter out invalid outputs more sensibly `9f3b867808` drm/rockchip: dsi: Force synchronous probe `23f1fc7ce5` ext4,f2fs: fix readahead of verity data `e5cef906cb` KVM: x86: emulator: update the emulation mode after CR0 write `ce9261accc` KVM: x86: emulator: introduce emulator_recalc_and_set_mode `c8a2fd7a71` KVM: x86: emulator: em_sysexit should update ctxt->mode `e0c7410378` KVM: x86: Mask off reserved bits in CPUID.80000001H `9302ebc1c2` KVM: x86: Mask off reserved bits in CPUID.80000008H `cc40c5f3e9` KVM: x86: Mask off reserved bits in CPUID.8000001AH `bd64a88f36` KVM: x86: Mask off reserved bits in CPUID.80000006H `156451a67b` ext4: fix BUG_ON() when directory entry has invalid rec_len `5370b965b7` ext4: fix warning in 'ext4_da_release_space' `c9598cf629` parisc: Avoid printing the hardware path twice `98f836e80d` parisc: Export iosapic_serial_irq() symbol for serial port driver `814af9a32b` parisc: Make 8250_gsc driver dependend on CONFIG_PARISC `29d106d086` perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[] `98f6e7c337` perf/x86/intel: Fix pebs event constraints for ICL `3be2d66822` efi: random: Use 'ACPI reclaim' memory for random seed `83294f7c77` efi: random: reduce seed size to 32 bytes `f8e8cda869` fuse: add file_modified() to fallocate `cdf01c807e` capabilities: fix potential memleak on error path from vfs_getxattr_alloc() `ff32d8a099` tracing/histogram: Update document for KEYS_MAX size `533bfacbac` tools/nolibc/string: Fix memcmp() implementation `f100a02748` kprobe: reverse kp->flags when arm_kprobe failed `bef08acbe5` tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() `2bf33b5ea4` tcp/udp: Make early_demux back namespacified. `ea5f2fd464` ftrace: Fix use-after-free for dynamic ftrace_ops `06de93a47c` btrfs: fix type of parameter generation in btrfs_get_dentry `e33ce54cef` coresight: cti: Fix hang in cti_disable_hw() `015ac18be7` binder: fix UAF of alloc->vma in race with munmap() `836686e1a0` memcg: enable accounting of ipc resources `e4e4b24b42` mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times `818c36b988` tcp/udp: Fix memory leak in ipv6_renew_options(). `29997a6fa6` fscrypt: fix keyring memory leak on mount failure `391cceee6d` fscrypt: stop using keyrings subsystem for fscrypt_master_key `092401142b` fscrypt: simplify master key locking `54c13d3520` ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices `a0e2577cf3` block, bfq: protect 'bfqd->queued' by 'bfqd->lock' `26ca2ac091` Bluetooth: L2CAP: Fix attempting to access uninitialized memory `6b6f94fb9a` Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM `bfd5e62f9a` i2c: piix4: Fix adapter not be removed in piix4_remove() `fc3e2fa0a5` arm64: dts: juno: Add thermal critical trip points `b743ecf29c` firmware: arm_scmi: Make Rx chan_setup fail on memory errors `29e8e9bfc2` firmware: arm_scmi: Suppress the driver's bind attributes `d7b1e2cbe0` ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset `160d8904b2` efi/tpm: Pass correct address to memblock_reserve `c40b4d604b` i2c: xiic: Add platform module alias `5bf8c7798b` drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case `496eb203d0` HID: saitek: add madcatz variant of MMO7 mouse device ID `ff06067b70` scsi: core: Restrict legal sdev_state transitions via sysfs `9edf20e5a1` ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() `be6e22f546` media: meson: vdec: fix possible refcount leak in vdec_probe() `c5fd54a65c` media: dvb-frontends/drxk: initialize err to 0 `7fdc58d8c2` media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE `1609231f86` media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE `c46759e370` media: rkisp1: Zero v4l2_subdev_format fields in when validating links `3144ce5574` media: rkisp1: Initialize color space on resizer sink and source pads `6b24d9c2ac` s390/boot: add secure boot trailer `efc6420d65` xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices `37bb57908d` mtd: parsers: bcm47xxpart: Fix halfblock reads `85e458369c` mtd: parsers: bcm47xxpart: print correct offset on read error `ec54104feb` fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards `f8c86d7829` video/fbdev/stifb: Implement the stifb_fillrect() function `e975d7aeca` mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake `afeae13b8a` mmc: sdhci-pci: Avoid comma separated statements `a06721767c` mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus `59400c9b0d` drm/msm/hdmi: fix IRQ lifetime `8225bdaec5` drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag `5dbb47ee89` ipv6: fix WARNING in ip6_route_net_exit_late() `1c89642e7f` net, neigh: Fix null-ptr-deref in neigh_table_clear() `634f066d02` net: mdio: fix undefined behavior in bit shift for __mdiobus_register `d9ec6e2fbd` Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() `cb1c012099` Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu `0a0dead4ad` btrfs: fix ulist leaks in error paths of qgroup self tests `61e0612811` btrfs: fix inode list leak during backref walking at find_parent_nodes() `a52e24c7fc` btrfs: fix inode list leak during backref walking at resolve_indirect_refs() `81204283ea` isdn: mISDN: netjet: fix wrong check of device registration `e77d213843` mISDN: fix possible memory leak in mISDN_register_device() `f06186e527` rose: Fix NULL pointer dereference in rose_send_frame() `2c8d81bdb2` ipvs: fix WARNING in ip_vs_app_net_cleanup() `931f56d59c` ipvs: fix WARNING in __ip_vs_cleanup_batch() `d69328cdb9` ipvs: use explicitly signed chars `b2d7a92aff` netfilter: nf_tables: release flow rule object from commit path `3583826b44` net: tun: fix bugs for oversize packet when napi frags enabled `5960b9081b` net: sched: Fix use after free in red_enqueue() `24f9c41435` ata: pata_legacy: fix pdc20230_set_piomode() `c85ee1c3cb` net: fec: fix improper use of NETDEV_TX_BUSY `52438e734c` nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() `0acfcd2aed` nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() `9ae2c9a91f` nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() `eecea068bf` NFC: nxp-nci: remove unnecessary labels `e8c11ee2d0` nfc: fdp: Fix potential memory leak in fdp_nci_send() `31b83d6990` nfc: fdp: drop ftrace-like debugging messages `4e1e4485b2` RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() `d360e875c0` RDMA/core: Fix null-ptr-deref in ib_core_cleanup() `37a098fc9b` net: dsa: Fix possible memory leaks in dsa_loop_init() `45aea4fbf6` nfs4: Fix kmemleak when allocate slot failed `f0f1c74fa6` NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot `10c554d722` NFSv4.1: Handle RECLAIM_COMPLETE trunking errors `4813dd737d` NFSv4: Fix a potential state reclaim deadlock `7c4260f8f1` IB/hfi1: Correctly move list in sc_disable() `87ac93c8dd` RDMA/cma: Use output interface for net_dev check `4dbb739eb2` KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER `bb584caee8` KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() `9faacf442d` KVM: x86: Protect the unused bits in MSR exiting flags `5bdbccc79c` x86/topology: Fix duplicated core ID within a package `6c31fc028a` x86/topology: Fix multiple packages shown on a single-package system `f5ad52da14` x86/topology: Set cpu_die_id only if DIE_TYPE found `570fa3bcd2` KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1) `e5d7c6786b` KVM: x86: Trace re-injected exceptions `8364786152` KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02 `523e1dd9f8` KVM: nVMX: Pull KVM L0's desired controls directly from vmcs01 `028fcabd8a` serial: ar933x: Deassert Transmit Enable on ->rs485_config() `e6da7808c9` serial: 8250: Let drivers request full 16550A feature probing `95aa34f721` Linux 5.10.153 `26a2b9c468` serial: Deassert Transmit Enable on probe in driver-specific way `4a230f65d6` serial: core: move RS485 configuration tasks from drivers into core `eb69c07eca` can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive `d5924531dd` arm64/kexec: Test page size support with new TGRAN range values `c911f03f8d` arm64/mm: Fix __enable_mmu() for new TGRAN range values `d523384766` scsi: sd: Revert "scsi: sd: Remove a local variable" `52a43b8200` arm64: Add AMPERE1 to the Spectre-BHB affected list `9889ca7efa` net: enetc: survive memory pressure without crashing `fdba224ab0` net/mlx5: Fix crash during sync firmware reset `bbcc06933f` net/mlx5: Fix possible use-after-free in async command interface `16376ba5cf` net/mlx5e: Do not increment ESN when updating IPsec ESN state `0d88359092` nh: fix scope used to find saddr when adding non gw nh `3519b5ddac` net: ehea: fix possible memory leak in ehea_register_port() `79631daa5a` openvswitch: switch from WARN to pr_warn `00d6f33f67` ALSA: aoa: Fix I2S device accounting `ce6fd1c382` ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() `97262705c0` net: fec: limit register access on i.MX6UL `df67a8e625` PM: domains: Fix handling of unavailable/disabled idle states `1f262d8088` net: ksz884x: fix missing pci_disable_device() on error in pcidev_init() `6170b4579f` i40e: Fix flow-type by setting GL_HASH_INSET registers `9abae363af` i40e: Fix VF hang when reset is triggered on another VF `23d5599058` i40e: Fix ethtool rx-flow-hash setting for X722 `44affe7ede` ipv6: ensure sane device mtu in tunnels `905f05c0ab` media: vivid: set num_in/outputs to 0 if not supported `b6c7446d0a` media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' `683015ae16` media: v4l2-dv-timings: add sanity checks for blanking values `147b8f1892` media: vivid: dev->bitmap_cap wasn't freed in all cases `1cf51d5158` media: vivid: s_fbuf: add more sanity checks `3221c2701d` PM: hibernate: Allow hybrid sleep to work with s2idle `0eb19ecbd0` can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error path `6b2d07fc0b` can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path `1634d5d39c` tcp: fix indefinite deferral of RTO with SACK reneging `4f23cb2be5` tcp: fix a signed-integer-overflow bug in tcp_add_backlog() `49713d7c38` tcp: minor optimization in tcp_add_backlog() `aab883bd60` net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY `c3edc6e808` net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed `e2a28807b1` kcm: annotate data-races around kcm->rx_wait `c325f92d8d` kcm: annotate data-races around kcm->rx_psock `af7879529e` atlantic: fix deadlock at aq_nic_stop `d7ccd49c4d` amd-xgbe: add the bit rate quirk for Molex cables `17350734fd` amd-xgbe: fix the SFP compliance codes check for DAC cables `b55d6ea965` x86/unwind/orc: Fix unreliable stack dump with gcov `0ce1ef3353` net: hinic: fix the issue of double release MBOX callback of VF `6603843c80` net: hinic: fix the issue of CMDQ memory leaks `bb01910763` net: hinic: fix memory leak when reading function table `ce605b68db` net: hinic: fix incorrect assignment issue in hinic_set_interrupt_cfg() `62f0a08e82` net: netsec: fix error handling in netsec_register_mdio() `32a3d4660b` tipc: fix a null-ptr-deref in tipc_topsrv_accept `fb94152aae` perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() `bfce730886` ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() `2663b16c76` ASoC: qcom: lpass-cpu: Mark HDMI TX parity register as volatile `a527557299` arc: iounmap() arg is volatile `648ac633e7` ASoC: qcom: lpass-cpu: mark HDMI TX registers as volatile `6571f6ca8a` drm/msm: Fix return type of mdp4_lvds_connector_mode_valid `4953a989b7` media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation `9d00384270` net: ieee802154: fix error return code in dgram_bind() `568e3812b1` mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages `935a8b6202` mm/memory: add non-anonymous page check in the copy_present_page() `49db6cb814` xen/gntdev: Prevent leaking grants `a3f2cc11d6` Xen/gntdev: don't ignore kernel unmapping error `467230b9ef` s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser() `fe187c801a` s390/futex: add missing EX_TABLE entry to __futex_atomic_op() `449070996c` perf auxtrace: Fix address filter symbol name match for modules `6f72a3977b` kernfs: fix use-after-free in __kernfs_remove `0bcd1ab3e8` counter: microchip-tcb-capture: Handle Signal1 read and Synapse `8bf037279b` mmc: core: Fix kernel panic when remove non-standard SDIO card `5684808b26` mmc: sdhci_am654: 'select', not 'depends' REGMAP_MMIO `b686ffc0ac` drm/msm/dp: fix IRQ lifetime `08c7375fa2` drm/msm/hdmi: fix memory corruption with too many bridges `21c4679af0` drm/msm/dsi: fix memory corruption with too many bridges `44a86d96fa` scsi: qla2xxx: Use transport-defined speed mask for supported_speeds `c368f751da` mac802154: Fix LQI recording `9ba2990f4e` exec: Copy oldsighand->action under spin-lock `7062153004` fs/binfmt_elf: Fix memory leak in load_elf_binary() `d9ddfeb01f` fbdev: smscufx: Fix several use-after-free bugs `f19f1a75d3` iio: temperature: ltc2983: allocate iio channels once `af236da855` iio: light: tsl2583: Fix module unloading `90ff5bef2b` tools: iio: iio_utils: fix digit calculation `678d2cc204` xhci: Remove device endpoints from bandwidth list when freeing the device `3b250824b6` xhci: Add quirk to reset host back to default state at shutdown `63c7df3c81` mtd: rawnand: marvell: Use correct logic for nand-keep-config `228101fc83` usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller `2bc4f99ee2` usb: bdc: change state when port disconnected `e440957f9c` usb: dwc3: gadget: Don't set IMI for no_interrupt `fb074d622c` usb: dwc3: gadget: Stop processing more requests on IMI `c29fcef579` USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM `4cc7a360ec` ALSA: rme9652: use explicitly signed char `8959092300` ALSA: au88x0: use explicitly signed char `2bf5b16315` ALSA: Use del_timer_sync() before freeing timer `ca1034bff8` can: kvaser_usb: Fix possible completions during init_completion `370be31cde` can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb() `7d51b4c67c` Linux 5.10.152 `43d5109296` udp: Update reuse->has_conns under reuseport_lock. `a50ed2d287` mm: /proc/pid/smaps_rollup: fix no vma's null-deref `31b1570677` blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() `e2f9b62ead` mmc: core: Add SD card quirk for broken discard `3a260e9844` Makefile.debug: re-enable debug info for .S files `6ab2287b26` x86/Kconfig: Drop check for -mabi=ms for CONFIG_EFI_STUB `67dafece56` ACPI: video: Force backlight native for more TongFang devices `dcaf631320` hv_netvsc: Fix race between VF offering and VF association message from host `da54c5f4b5` perf/x86/intel/pt: Relax address filter validation `79c3482fbe` riscv: topology: fix default topology reporting `a6e770733d` arm64: topology: move store_cpu_topology() to shared code `cb1024d8a4` arm64: dts: qcom: sc7180-trogdor: Fixup modem memory region `f687e2111b` fcntl: fix potential deadlocks for &fown_struct.lock `b1efc19644` fcntl: make F_GETOWN(EX) return 0 on dead owner task `ca4c498382` perf: Skip and warn on unknown format 'configN' attrs `dea47fefa6` perf pmu: Validate raw event with sysfs exported format bits `86e995f964` riscv: always honor the CONFIG_CMDLINE_FORCE when parsing dtb `0e4c06ae7c` riscv: Add machine name to kernel boot log and stack dump output `7fba4a389d` mmc: sdhci-tegra: Use actual clock rate for SW tuning correction `3c6a888e35` xen/gntdev: Accommodate VMA splitting `5232411f37` xen: assume XENFEAT_gnttab_map_avail_bits being set for pv guests `ea82edad0a` tracing: Do not free snapshot if tracer is on cmdline `bd6af07e79` tracing: Simplify conditional compilation code in tracing_set_tracer() `4e3a15ca24` dmaengine: mxs: use platform_driver_register `1da5d24970` dmaengine: mxs-dma: Remove the unused .id_table `1414e9bf3c` drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() `d74196bb27` iommu/vt-d: Clean up si_domain in the init_dmars() error path `ef11e8ec00` iommu/vt-d: Allow NVS regions in arch_rmrr_sanity_check() `35c92435be` net: phy: dp83822: disable MDI crossover status change interrupt `7aa3d623c1` net: sched: fix race condition in qdisc_graft() `2974f3b330` net: hns: fix possible memory leak in hnae_ae_register() `3032e316e0` sfc: include vport_id in filter spec hash and equal() `ded86c4191` net: sched: sfb: fix null pointer access issue when sfb_init() fails `305aa36b62` net: sched: delete duplicate cleanup of backlog and qlen `ae48bee283` net: sched: cake: fix null pointer access issue when cake_init() fails `2008ad08a2` nvme-hwmon: kmalloc the NVME SMART log buffer `770b7e3a2c` nvme-hwmon: consistently ignore errors from nvme_hwmon_init `67106ac272` nvme-hwmon: Return error code when registration fails `bc17f727b0` nvme-hwmon: rework to avoid devm allocation `191d71c635` ionic: catch NULL pointer issue on reconfig `ff7ba76675` net: hsr: avoid possible NULL deref in skb_clone() `7286f87551` cifs: Fix xid leak in cifs_ses_add_channel() `2d08311aa3` cifs: Fix xid leak in cifs_flock() `bf49d4fe4a` cifs: Fix xid leak in cifs_copy_file_range() `05cc22c008` net: phy: dp83867: Extend RX strap quirk for SGMII mode `118f412bed` net/atm: fix proc_mpc_write incorrect return value `c8310a99e7` sfc: Change VF mac via PF as first preference if available. `39d10f0dfb` HID: magicmouse: Do not set BTN_MOUSE on double report `ed5baf3d0a` i40e: Fix DMA mappings leak `e558e14893` tipc: fix an information leak in tipc_topsrv_kern_subscr `1f4ed95ce6` tipc: Fix recognition of trial period `fc8c6b8bb2` ACPI: extlog: Handle multiple records `57e157749a` btrfs: fix processing of delayed tree block refs during backref walking `590929ef69` btrfs: fix processing of delayed data refs during backref walking `cc841a8a70` r8152: add PID for the Lenovo OneLink+ Dock `51b96ecaed` arm64: errata: Remove AES hwcap for COMPAT tasks `910ba49b33` blk-wbt: call rq_qos_add() after wb_normal is initialized `392536023d` block: wbt: Remove unnecessary invoking of wbt_update_limits in wbt_init `ab6aaa8210` media: venus: dec: Handle the case where find_format fails `bce5808fc9` media: mceusb: set timeout to at least timeout provided `6d725672ce` KVM: arm64: vgic: Fix exit condition in scan_its_table() `34db701dc6` kvm: Add support for arch compat vm ioctls `e55feb31df` cpufreq: qcom: fix memory leak in error path `303d0f7614` ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS `6a2aadcb01` ata: ahci-imx: Fix MODULE_ALIAS `d9f0159da0` hwmon/coretemp: Handle large core ID value `0fb04676c4` x86/microcode/AMD: Apply the patch early on every logical thread `6dcf1f0802` i2c: qcom-cci: Fix ordering of pm_runtime_xx and i2c_add_adapter `794ded0bc4` cpufreq: qcom: fix writes in read-only memory region `2723875e9d` selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() `0d65f040fd` ocfs2: fix BUG when iput after ocfs2_mknod fails `b838dcfda1` ocfs2: clear dinode links count in case of error `c34d1b22fe` Linux 5.10.151 `ecad331211` kbuild: Add skip_encoding_btf_enum64 option to pahole `c5006abb80` kbuild: Unify options for BTF generation for vmlinux and modules `f5f413cb3e` kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21 `06481cd9f7` kbuild: Quote OBJCOPY var to avoid a pahole call break the build `bbaea0f1cd` bpf: Generate BTF_KIND_FLOAT when linking vmlinux `a10a57a224` Linux 5.10.150 `243c8f42ba` Revert "drm/amdgpu: make sure to init common IP before gmc" `8026d58b49` gcov: support GCC 12.1 and newer compilers `cbf2c43b36` f2fs: fix wrong condition to trigger background checkpoint correctly `7b19858803` thermal: intel_powerclamp: Use first online CPU as control_cpu `f039b43cba` inet: fully convert sk->sk_rx_dst to RCU rules `67de22cb0b` ext4: continue to expand file system when the target size doesn't reach `357db159e9` Revert "drm/amdgpu: use dirty framebuffer helper" `98ab15bfdc` Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega" `791489a5c5` net/ieee802154: don't warn zero-sized raw_sendmsg() `a96336a5f2` Revert "net/ieee802154: reject zero-sized raw_sendmsg()" `dc54ff9fc4` net: ieee802154: return -EINVAL for unknown addr type `45c3396675` mm: hugetlb: fix UAF in hugetlb_handle_userfault `c378c479c5` io_uring/af_unix: defer registered files gc to io_uring release `67cbc8865a` io_uring: correct pinned_vm accounting `904f881b57` arm64: topology: fix possible overflow in amu_fie_setup() `b5dc2f2578` perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc `9b4e849777` clk: bcm2835: Make peripheral PLLC critical `b8bbae3236` usb: idmouse: fix an uninit-value in idmouse_open `d5bb45f47b` nvmet-tcp: add bounds check on Transfer Tag `b79da0080d` nvme: copy firmware_rev on each init `e6cc39db24` staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() `3a5a34ed9d` Revert "usb: storage: Add quirk for Samsung Fit flash" `acf0006f2b` usb: musb: Fix musb_gadget.c rxstate overflow bug `91271a3e77` usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() `782b3e71c9` md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d `dbcca76435` HID: roccat: Fix use-after-free in roccat_read() `f00c049ede` soundwire: intel: fix error handling on dai registration issues `f04a673d4a` soundwire: cadence: Don't overwrite msg->buf during write commands `c263516c2c` bcache: fix set_at_max_writeback_rate() for multiple attached devices `fcad2ac863` ata: libahci_platform: Sanity check the DT child nodes number `19c010ae44` blk-throttle: prevent overflow while calculating wait time `1b3cebeca9` staging: vt6655: fix potential memory leak `89f305a714` power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() `b2700f98b3` nbd: Fix hung when signal interrupts nbd_start_device_ioctl() `5942e5c63d` scsi: 3w-9xxx: Avoid disabling device if failing to enable it `48727117bd` usb: host: xhci-plat: suspend/resume clks for brcm `c13d0d2f5a` usb: host: xhci-plat: suspend and resume clocks `12d31182de` clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate `c2257c8a50` media: cx88: Fix a null-ptr-deref bug in buffer_prepare() `d9e2585c3b` clk: zynqmp: Fix stack-out-of-bounds in strncpy` `70f8b48d0b` btrfs: scrub: try to fix super block errors `8f554dd23c` arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply `451ce2521c` kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT `017cabfb3f` ARM: dts: imx6sx: add missing properties for sram `9d3ca48722` ARM: dts: imx6sll: add missing properties for sram `9735f2b62b` ARM: dts: imx6sl: add missing properties for sram `2829b6ad30` ARM: dts: imx6qp: add missing properties for sram `0c3a0b3d5e` ARM: dts: imx6dl: add missing properties for sram `2763a3b43a` ARM: dts: imx6q: add missing properties for sram `82e0d91484` ARM: dts: imx7d-sdb: config the max pressure for tsc2046 `166feb964f` drm/amd/display: Remove interface for periodic interrupt 1 `1bb6f4a8db` drm/dp: Don't rewrite link config when setting phy test pattern `bb91c06b0b` mmc: sdhci-msm: add compatible string check for sdm670 `8a427a2283` drm/meson: explicitly remove aggregate driver at module unload time `1c7d957c5d` drm/amdgpu: fix initial connector audio value `69130888b2` ASoC: SOF: pci: Change DMI match info to support all Chrome platforms `54f2585e2d` platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading `a9d6a7c9b6` platform/chrome: cros_ec: Notify the PM of wake events during resume `e29d20deaf` drm: panel-orientation-quirks: Add quirk for Anbernic Win600 `bfdb391d57` drm/vc4: vec: Fix timings for VEC modes `b70f8abc1a` drm: bridge: dw_hdmi: only trigger hotplug event on link change `bbe2f6f903` udmabuf: Set ubuf->sg = NULL if the creation of sg table fails `0a4fddc95c` drm/amd/display: fix overflow on MIN_I64 definition `3959e8faf8` gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() `c28a8082b2` drm: Prevent drm_copy_field() to attempt copying a NULL pointer `e7d7018003` drm: Use size_t type for len variable in drm_copy_field() `3339a51bcd` drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() `484400d433` r8152: Rate limit overflow messages `0c108cf3ad` Bluetooth: L2CAP: Fix user-after-free `65029aaedd` net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory `4851303c85` wifi: rt2x00: correctly set BBP register 86 for MT7620 `a016144479` wifi: rt2x00: set SoC wmac clock register `5aa0461d11` wifi: rt2x00: set VGC gain for both chains of MT7620 `8d9c00979a` wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 `27ed98e8a9` wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 `3d67986e72` can: bcm: check the result of can_send() in bcm_can_tx() `7b674dce41` Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times `e25ca9af8a` Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() `b051d9bf98` regulator: core: Prevent integer underflow `e01d96494a` wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() `be81c44242` xfrm: Update ipcomp_scratches with NULL when freed `9661724f62` wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() `0958e487e8` tcp: annotate data-race around tcp_md5sig_pool_populated `129ca0db95` openvswitch: Fix overreporting of drops in dropwatch `4398e8a7fd` openvswitch: Fix double reporting of drops in dropwatch `e3c9b94734` bpftool: Clear errno after libcap's checks `50e45034c5` wifi: brcmfmac: fix invalid address access when enabling SCAN log level `bbacfcde5f` NFSD: fix use-after-free on source server when doing inter-server copy `3de402a524` NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data `1f730d4ae6` x86/entry: Work around Clang __bdos() bug `513943bf87` thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash `708b9abe1b` powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue `b434edb0e9` MIPS: BCM47XX: Cast memcmp() of function to (void ) `6c61a37ea7` ACPI: video: Add Toshiba Satellite/Portege Z830 quirk `0dd025483f` rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE() `36d4ffbedf` rcu: Back off upon fill_page_cache_func() allocation failure `278d8ba2b2` selftest: tpm2: Add Client.__del__() to close /dev/tpm handle `b60aa21e2f` f2fs: fix to account FS_CP_DATA_IO correctly `0b8230d44c` f2fs: fix to avoid REQ_TIME and CP_TIME collision `ecbd95958c` f2fs: fix race condition on setting FI_NO_EXTENT flag `110146ce8f` ACPI: APEI: do not add task_work to kernel thread to avoid memory leak `dce07e87ee` thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id `3a720eb890` crypto: cavium - prevent integer overflow loading firmware `7bfa7d6773` crypto: marvell/octeontx - prevent integer overflows `cdd42eb468` kbuild: rpm-pkg: fix breakage when V=1 is used `6d1aef17e7` kbuild: remove the target in signal traps when interrupted `8d76dd5080` tracing: kprobe: Make gen test module work in arm and riscv `c6512a6f0c` tracing: kprobe: Fix kprobe event gen test module on exit `9e6ba62d41` iommu/iova: Fix module config properly `426d5bc089` crypto: qat - fix DMA transfer direction `a43babc059` crypto: qat - use pre-allocated buffers in datapath `a91af50850` crypto: qat - fix use of 'dma_map_single' `8a4ed09ed8` crypto: inside-secure - Change swab to swab32 `d33935e666` crypto: ccp - Release dma channels before dmaengine unrgister `a1354bdd19` crypto: akcipher - default implementation for setting a private key `2fee0dbfae` iommu/omap: Fix buffer overflow in debugfs `cfde58a8e4` cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset `ab2485eb5d` hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear() `d88b88514e` crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr `25f1342473` crypto: sahara - don't sleep when in softirq `2d285164fb` powerpc: Fix SPE Power ISA properties for e500v1 platforms `2bde4e1e4f` powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 `7ae8bed908` x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition `6315998170` powerpc/powernv: add missing of_node_put() in opal_export_attrs() `434db6d17b` powerpc/pci_dn: Add missing of_node_put() `718e2d8023` powerpc/sysdev/fsl_msi: Add missing of_node_put() `592d283a65` powerpc/math_emu/efp: Include module.h `44c26ceffa` mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg `b1616599c9` clk: ast2600: BCLK comes from EPLL `6d01017247` clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe `9b65fd6513` clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration `9a6087a438` clk: baikal-t1: Add SATA internal ref clock buffer `5f143f3bc2` clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent `823fd52391` clk: baikal-t1: Fix invalid xGMAC PTP clock divider `2f19a1050e` clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD `92f52770a7` spmi: pmic-arb: correct duplicate APID to PPID mapping logic `a01c0c1600` dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() `1dd5148445` clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent `6e58f2469e` mfd: sm501: Add check for platform_driver_register() `3469dd8e22` mfd: fsl-imx25: Fix check for platform_get_irq() errors `b425e03c96` mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() `f7b4388636` mfd: lp8788: Fix an error handling path in lp8788_probe() `08d4051803` mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() `28868b940b` mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() `382a5fc49e` fsi: core: Check error number after calling ida_simple_get `ed8e6011b9` clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical `884a788f06` scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() `a9e5176ead` scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() `8f740c11d8` serial: 8250: Fix restoring termios speed after suspend `ab5a3e7144` firmware: google: Test spinlock on panic path to avoid lockups `95ac62e854` staging: vt6655: fix some erroneous memory clean-up loops `878f987166` phy: qualcomm: call clk_disable_unprepare in the error handling `9a56ade124` tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown `572fb97fce` serial: 8250: Toggle IER bits on only after irq has been set up `3fbfa5e3cc` serial: 8250: Add an empty line and remove some useless {} `71ffe5111f` drivers: serial: jsm: fix some leaks in probe `7efdd91d54` usb: gadget: function: fix dangling pnp_string in f_printer.c `cc952e3bf6` xhci: Don't show warning for reinit on known broken suspend `dac769dd7d` IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers `360386e11c` RDMA/cm: Use SLID in the work completion as the DLID in responder side `a1263294b5` md/raid5: Ensure stripe_fill happens on non-read IO with journal `76694e9ce0` md: Replace snprintf with scnprintf `7bd5f3b4a8` mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() `f5325f3202` ata: fix ata_id_has_dipm() `f5a6fa1877` ata: fix ata_id_has_ncq_autosense() `3c34a91c8a` ata: fix ata_id_has_devslp() `fc61a0c820` ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() `e3917c85f4` RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. `3a9d7d8dcf` mtd: rawnand: fsl_elbc: Fix none ECC mode `f87f720811` mtd: devices: docg3: check the return value of devm_ioremap() in the probe `d06cc0e11d` dyndbg: drop EXPORTed dynamic_debug_exec_queries `1d65985589` dyndbg: let query-modname override actual module name `c0e206da44` dyndbg: fix module.dyndbg handling `5047bd3bd7` dyndbg: fix static_branch manipulation `af12e209a9` dmaengine: hisilicon: Add multi-thread support for a DMA channel `d3fd838536` dmaengine: hisilicon: Fix CQ head update `d5065ca461` dmaengine: hisilicon: Disable channels when unregister hisi_dma `f59861946f` fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() `7ba19a60c7` misc: ocxl: fix possible refcount leak in afu_ioctl() `cf3bb86edd` RDMA/rxe: Fix the error caused by qp->sk `cdce36a88d` RDMA/rxe: Fix "kernel NULL pointer dereference" error `2630cc8832` media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init `40aa0999a3` media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start() `551b87976a` tty: xilinx_uartps: Fix the ignore_status `28cdf6c6fb` media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop `1f683bff1a` HSI: omap_ssi_port: Fix dma_map_sg error check `962f22e7f7` HSI: omap_ssi: Fix refcount leak in ssi_probe `70f0a0a27d` clk: tegra20: Fix refcount leak in tegra20_clock_init `c01bfd23cc` clk: tegra: Fix refcount leak in tegra114_clock_init `f487137a53` clk: tegra: Fix refcount leak in tegra210_clock_init `59e90c4d98` clk: sprd: Hold reference returned by of_get_parent() `57141b1dd6` clk: berlin: Add of_node_put() for of_get_parent() `dc190b46c6` clk: qoriq: Hold reference returned by of_get_parent() `baadc6f58f` clk: oxnas: Hold reference returned by of_get_parent() `b95f4f9054` clk: meson: Hold reference returned by of_get_parent() `beec2f0255` usb: common: debug: Check non-standard control requests `9d965a22f6` usb: common: move function's kerneldoc next to its definition `20b63631a3` usb: common: add function to get interval expressed in us unit `c1ef8c66a3` usb: common: Parse for USB SSP genXxY `ffffb159e1` usb: ch9: Add USB 3.2 SSP attributes `aa7aada4b7` iio: ABI: Fix wrong format of differential capacitance channel ABI. `b9a0526cd0` iio: inkern: only release the device node when done with it `44ec4b04fc` iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume `513c72d76d` iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq `d259b90f0c` iio: adc: at91-sama5d2_adc: check return status for pressure and touch `bc2b97e177` iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX `5b9bb0cbd9` ARM: dts: exynos: fix polarity of VBUS GPIO of Origen `657de36c72` arm64: ftrace: fix module PLTs with mcount `40e966a404` ARM: Drop CMDLINE_* dependency on ATAGS `477dbf9d1b` ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family `5bbd3dd7f9` soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA `09c35f1520` ia64: export memory_add_physaddr_to_nid to fix cxl build error `e31c0e14cf` ARM: dts: kirkwood: lsxl: remove first ethernet port `df4f05b356` ARM: dts: kirkwood: lsxl: fix serial line `43faaedf3a` ARM: dts: turris-omnia: Fix mpp26 pin name and comment `d5c2051898` soc: qcom: smem_state: Add refcounting for the 'state->of_node' `39781c98ad` soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() `1d312c12c9` memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() `daaec4b3fe` memory: of: Fix refcount leak bug in of_get_ddr_timings() `fde46754d5` memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() `2c442b0c06` ALSA: hda/hdmi: Don't skip notification handling during PM operation `f182de42d7` ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe `37e3e01c9a` ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe `fb23569699` ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe `c1b269dda1` ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe `71704c2e1b` mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() `c940636d9c` ALSA: dmaengine: increment buffer pointer atomically `4993c1511d` ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() `ef59819976` drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa() `598d8f7d86` drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx `a9a60d6405` ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API `ad0b8ed172` mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() `1f340e1c1c` drm/omap: dss: Fix refcount leak bugs `cbe37857dd` ALSA: hda: beep: Simplify keep-power-at-enable behavior `f0fb0817eb` ASoC: rsnd: Add check for rsnd_mod_power_on `877e92e9b1` drm/bridge: megachips: Fix a null pointer dereference bug `c577b4e972` drm: fix drm_mipi_dbi build errors `804d8e59f3` platform/x86: msi-laptop: Fix resource cleanup `c21c08fab7` platform/x86: msi-laptop: Fix old-ec check for backlight registering `b77755f58e` ASoC: tas2764: Fix mute/unmute `2e6b64df54` ASoC: tas2764: Drop conflicting set_bias_level power setting `c2c6022e10` ASoC: tas2764: Allow mono streams `868fc93b61` platform/chrome: fix memory corruption in ioctl `84da5cdf43` platform/chrome: fix double-free in chromeos_laptop_prepare() `5e25bfcd12` drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node() `ad06d6bed5` drm/dp_mst: fix drm_dp_dpcd_read return value checks `3f5889fd65` drm/bridge: parade-ps8640: Fix regulator supply order `45120fa5e5` drm/mipi-dsi: Detach devices when removing the host `050b650507` drm/bridge: Avoid uninitialized variable warning `7839f2b349` drm: bridge: adv7511: fix CEC power down control register offset `29f50bcf0f` net: mvpp2: fix mvpp2 debugfs leak `6cb54f2162` once: add DO_ONCE_SLOW() for sleepable contexts `67cb80a9d2` net/ieee802154: reject zero-sized raw_sendmsg() `6cc0e2afc6` bnx2x: fix potential memory leak in bnx2x_tpa_stop() `da349221c4` net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() `d9e25dc053` spi: Ensure that sg_table won't be used after being freed `96a3ddb870` tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited `f65955340e` sctp: handle the error returned from sctp_auth_asoc_init_active_key `2a1d036320` mISDN: fix use-after-free bugs in l1oip timer handlers `b4a5905fd2` vhost/vsock: Use kvmalloc/kvfree for larger packets. `d2b5dc3a53` wifi: rtl8xxxu: Fix AIFS written to REG_EDCA__PARAM `17196f2f98` spi: s3c64xx: Fix large transfers with DMA `b284e1fe15` netfilter: nft_fib: Fix for rpath check with VRF devices `b384e8fb16` Bluetooth: hci_core: Fix not handling link timeouts propertly `129f01116b` i2c: mlxbf: support lock mechanism `534909fe3c` spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe `9da61e7b59` spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe `1ef5798638` x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype `6ed7b05a35` x86/microcode/AMD: Track patch allocation size explicitly `07299e52e5` wifi: ath11k: fix number of VHT beamformee spatial streams `d7cc0d51ff` Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure `ed403bcd97` bpf: Ensure correct locking around vulnerable function find_vpid() `2a1c29dc9b` net: fs_enet: Fix wrong check in do_pd_setup `795954d751` wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask `226e6f2412` wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration `0a60ac7a0d` bpf: btf: fix truncated last_member_type_id in btf_struct_resolve `8398a45d3d` spi: meson-spicc: do not rely on busy flag in pow2 clk ops `351cf55595` wifi: rtl8xxxu: Fix skb misuse in TX queue selection `1e91179057` spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() `7b83d11d48` spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() `5576008305` selftests/xsk: Avoid use-after-free on ctx `c823df0679` wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() `ea1b6b5409` Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend `07194ccbb1` Bluetooth: btusb: fix excessive stack usage `cdadf95435` Bluetooth: btusb: Fine-tune mt7663 mechanism. `294395caac` x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register `029a1de92c` spi: mt7621: Fix an error message in mt7621_spi_probe() `2afb93e4e4` bpftool: Fix a wrong type cast in btf_dumper_int `61905bbb61` wifi: mac80211: allow bw change during channel switch in mesh `7565207066` leds: lm3601x: Don't use mutex after it was destroyed `08faf07717` wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() `e060c4b9f3` nfsd: Fix a memory leak in an error handling path `730191a098` objtool: Preserve special st_shndx indexes in elf_update_symbol `84837738d4` ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE `f1d6edeaa8` ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd() `da2aecef86` MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create() `0c667858c0` MIPS: SGI-IP27: Free some unused memory `3598445698` sh: machvec: Use char[] for section boundaries `6e4be747f1` userfaultfd: open userfaultfds with O_RDONLY `28d9b39733` selinux: use "grep -E" instead of "egrep" `d11e09953c` smb3: must initialize two ACL struct fields to zero `abd13b2100` drm/i915: Fix watermark calculations for gen12+ MC CCS modifier `fd37286f39` drm/i915: Fix watermark calculations for gen12+ RC CCS modifier `5d6093c49c` drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() `57f1a89a8e` drm/nouveau/kms/nv140-: Disable interlacing `d0febad83e` staging: greybus: audio_helper: remove unused and wrong debugfs usage `ceeb8d4a43` KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS `83fe0b009b` KVM: nVMX: Unconditionally purge queued/injected events on nested "exit" `085ca1d33b` KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility `bda8120e5b` media: cedrus: Set the platform driver data earlier `dbdd3b1448` efi: libstub: drop pointless get_memory_map() call `68158654b5` thunderbolt: Explicitly enable lane adapter hotplug events at startup `fc08f84381` tracing: Disable interrupt or preemption before acquiring arch_spinlock_t `0cf6c09daf` ring-buffer: Fix race between reset page and reading page `588f02f8b9` ring-buffer: Add ring_buffer_wake_waiters() `586f02c500` ring-buffer: Check pending waiters when doing wake ups as well `6617e5132c` ring-buffer: Have the shortest_full queue be the shortest not longest `4a3bbd40e4` ring-buffer: Allow splice to read previous partially read pages `f2ca4609d0` ftrace: Properly unset FTRACE_HASH_FL_MOD `846f041203` livepatch: fix race between fork and KLP transition `2189756eab` ext4: update 'state->fc_regions_size' after successful memory allocation `2cfb769d60` ext4: fix potential memory leak in ext4_fc_record_regions() `c9ce7766dc` ext4: fix potential memory leak in ext4_fc_record_modified_inode() `d575fb52c4` ext4: fix miss release buffer head in ext4_fc_write_inode `74d2a398d2` ext4: place buffer head allocation before handle start `fbb0e601bd` ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate `0e1764ad71` ext4: don't increase iversion counter for ea_inodes `483831ad04` ext4: fix check for block being out of directory size `ac66db1a43` ext4: make ext4_lazyinit_thread freezable `f34ab95162` ext4: fix null-ptr-deref in ext4_write_info `fb98cb61ef` ext4: avoid crash when inline data creation follows DIO write `e65506ff18` jbd2: add miss release buffer head in fc_do_one_pass() `1d4d16daec` jbd2: fix potential use-after-free in jbd2_fc_wait_bufs `7a33dde572` jbd2: fix potential buffer head reference count leak `eea3e455a3` jbd2: wake up journal waiters in FIFO order, not LIFO `ba52e685d2` hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero `bdcb1d7cf2` hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO `d621a87064` hardening: Clarify Kconfig text for auto-var-init `4a8e8bf280` f2fs: fix to do sanity check on summary info `73fb4bd2c0` f2fs: fix to do sanity check on destination blkaddr during recovery `12014eaf1b` f2fs: increase the limit for reserve_root `47b5ffe863` btrfs: fix race between quota enable and quota rescan ioctl `e504729496` fbdev: smscufx: Fix use-after-free in ufx_ops_open() `9931bd05bb` scsi: qedf: Populate sysfs attributes for vport `102c4b6e8c` powerpc/boot: Explicitly disable usage of SPE instructions `7db60fd46e` powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain `9119a92ad9` PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge `a3c08c0217` mm/mmap: undo ->mmap() when arch_validate_flags() fails `7d551b7d61` block: fix inflight statistics of part0 `0a12979089` drm/udl: Restore display mode on resume `f134f261d7` drm/virtio: Check whether transferred 2D BO is shmem `303436e301` nvme-pci: set min_align_mask before calculating max_hw_sectors `6a73e6edcb` UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK `1a053f597f` riscv: Pass -mno-relax only on lld < 15.0.0 `d15dca1d46` riscv: Make VM_WRITE imply VM_READ `d8c6f9b2e1` riscv: Allow PROT_WRITE-only mmap() `a6dcc6cfa2` parisc: fbdev/stifb: Align graphics memory size to 4MB `2ce9fab94b` RISC-V: Make port I/O string accessors actually work `ffb571e123` regulator: qcom_rpm: Fix circular deferral regression `85909424a1` hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API `8ef0e1c0ae` ASoC: wcd934x: fix order of Slimbus unprepare/disable `9b2c82af65` ASoC: wcd9335: fix order of Slimbus unprepare/disable `1c20d672e3` platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure `6b7ae4a904` quota: Check next/prev free block number after reading from quota file `5b1a56beb6` HID: multitouch: Add memory barriers `bfe60d7641` fs: dlm: handle -EBUSY first in lock arg validation `0b2d8e4db4` fs: dlm: fix race between test_bit() and queue_work() `057d5838c7` mmc: sdhci-sprd: Fix minimum clock limit `448fffc1ae` can: kvaser_usb_leaf: Fix CAN state after restart `a3776e09b3` can: kvaser_usb_leaf: Fix TX queue out of sync after restart `0f8c88978d` can: kvaser_usb_leaf: Fix overread with an invalid command `5d1cb7bfad` can: kvaser_usb: Fix use of uninitialized completion `b239a0993a` usb: add quirks for Lenovo OneLink+ Dock `afbbf305db` iio: pressure: dps310: Reset chip after timeout `9daadd1d10` iio: pressure: dps310: Refactor startup procedure `ae49d80400` iio: adc: ad7923: fix channel readings for some variants `ea4dcd3d6a` iio: ltc2497: Fix reading conversion results `30e1bd0d3e` iio: dac: ad5593r: Fix i2c read protocol requirements `9312e04b6c` cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message `64f23e5430` cifs: destage dirty pages before re-reading them for cache=none `50d3d89537` mtd: rawnand: atmel: Unmap streaming DMA mappings `e8eb44eeee` ALSA: hda/realtek: Add Intel Reference SSID to support headset keys `4491fbd0a7` ALSA: hda/realtek: Add quirk for ASUS GV601R laptop `4285d06d12` ALSA: hda/realtek: Correct pin configs for ASUS G533Z `768cd2cd1a` ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 `3e29645fba` ALSA: usb-audio: Fix NULL dererence at error path `bc1d16d282` ALSA: usb-audio: Fix potential memory leaks `ef1658bc48` ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() `026fcb6336` ALSA: oss: Fix potential deadlock at unregistration Also update the .xml file to handle the few ABI changes in this merge that required an update due to private pointers changing types and ABI padding structures being used to preserve the ABI: Leaf changes summary: 4 artifacts changed (1 filtered out) Changed leaf types summary: 4 (1 filtered out) leaf types changed Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 0 Added function Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 0 Added variable 'struct fscrypt_info at fscrypt_private.h:195:1' changed: type size hasn't changed there are data member changes: type 'key' of 'fscrypt_info::ci_master_key' changed: pointer type changed from: 'key' to: 'fscrypt_master_key' 5197 impacted interfaces 'struct sk_buff at skbuff.h:717:1' changed: type size hasn't changed there are data member changes: data member u64 android_kabi_reserved1 at offset 1472 (in bits) became anonymous data member 'union {struct {__u8 scm_io_uring; __u8 android_kabi_reserved1_padding1; __u16 android_kabi_reserved1_padding2; __u32 android_kabi_reserved1_padding3;}; struct {u64 android_kabi_reserved1;}; union {};}' 5197 impacted interfaces 'struct super_block at fs.h:1450:1' changed: type size hasn't changed there are data member changes: type 'key' of 'super_block::s_master_keys' changed: pointer type changed from: 'key' to: 'fscrypt_keyring*' 5197 impacted interfaces 'struct tcp_sock at tcp.h:146:1' changed: type size hasn't changed one impacted interface Change-Id: I6f2a7b91e1df96bede8aafa944a04b3e08ed33a1 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-01-21 12:06:54 +00:00
Kalesh Singh	529351c4c8	ANDROID: Re-enable fast mremap and fix UAF with SPF SPF attempts page faults without taking the mmap lock, but takes the PTL. If there is a concurrent fast mremap (at PMD/PUD level), this can lead to a UAF as fast mremap will only take the PTL locks at the PMD/PUD level. SPF cannot take the PTL locks at the larger subtree granularity since this introduces much contention in the page fault paths. To address the race: 1) Only try fast mremaps if there are no users of the VMA. Android is concerned with this optimization in the context of GC stop-the-world pause. So there are no other threads active and this should almost always succeed. 2) Speculative faults detect ongoing fast mremaps and fallback to conventional fault handling (taking mmap read lock). Bug: 263177905 Change-Id: I23917e493ddc8576de19883cac053dfde9982b7f Signed-off-by: Kalesh Singh <kaleshsingh@google.com>	2023-01-06 13:08:36 -08:00
Kalesh Singh	c67f268c84	Revert "ANDROID: Make SPF aware of fast mremaps" This reverts commit `134c1aae43`. Reason for revert: vts_linux_kselftest_arm_64 timeout Bug: 263479421 Bug: 263177905 Change-Id: I123c56741c982d1539ceebd8bfde2443871aa1de Signed-off-by: Kalesh Singh <kaleshsingh@google.com>	2023-01-06 13:07:18 -08:00
Kalesh Singh	134c1aae43	ANDROID: Make SPF aware of fast mremaps SPF attempts page faults without taking the mmap lock, but takes the PTL. If there is a concurrent fast mremap (at PMD/PUD level), this can lead to a UAF as fast mremap will only take the PTL locks at the PMD/PUD level. SPF cannot take the PTL locks at the larger subtree granularity since this introduces much contention in the page fault paths. To address the race: 1) Fast mremaps wait until there are no users of the VMA. 2) Speculative faults detect ongoing fast mremaps and fallback to conventional fault handling (taking mmap read lock). Since this race condition is very rare the performance impact is negligible. Bug: 263177905 Change-Id: If9755aa4261337fe180e3093a3cefaae8ac9ff1a Signed-off-by: Kalesh Singh <kaleshsingh@google.com>	2022-12-20 17:19:30 -08:00
Greg Kroah-Hartman	9ef4727680	Merge tag 'android12-5.10.149_r00' into android12-5.10 This is the merge of the upstream LTS release of 5.10.149 into the android12-5.10 branch. It contains the following commits: `0118fb827b` Merge branch 'android12-5.10' into branch 'android12-5.10-lts' `69a9a62c66` ANDROID: GKI: db845c: Update symbols list and ABI `2498b03977` Merge 5.10.149 into android12-5.10-lts `09be132bfe` Linux 5.10.149 `31ce5da48a` wifi: mac80211: fix MBSSID parsing use-after-free `353b5c8d4b` wifi: mac80211: don't parse mbssid in assoc response `66dacdbc2e` mac80211: mlme: find auth challenge directly `a07708a843` Revert "fs: check FMODE_LSEEK to control internal pipe splicing" `c1e111543d` Merge 5.10.148 into android12-5.10-lts `3783e64fee` Linux 5.10.148 `0df206bdc6` misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic `40a29e58f6` misc: pci_endpoint_test: Aggregate params checking for xfer `9c13b1a044` Input: xpad - fix wireless 360 controller breaking after suspend `19dba9c3b5` Input: xpad - add supported devices as contributed on github `b2b9386667` wifi: cfg80211: update hidden BSSes to avoid WARN_ON `58c0306d0b` wifi: mac80211: fix crash in beacon protection for P2P-device `3539e75abe` wifi: mac80211_hwsim: avoid mac80211 warning on bad rate `b0e5c5deb7` wifi: cfg80211: avoid nontransmitted BSS list corruption `6b94484503` wifi: cfg80211: fix BSS refcounting bugs `6144c97f96` wifi: cfg80211: ensure length byte is present before access `e7aa7fd10e` wifi: cfg80211/mac80211: reject bad MBSSID elements `a6408e0b69` wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() `b0c37581be` random: use expired timer rather than wq for mixing fast pool `c1a4423fd3` random: avoid reading two cache lines on irq randomness `638f84a718` USB: serial: qcserial: add new usb-id for Dell branded EM7455 `36b33c6351` scsi: stex: Properly zero out the passthrough command structure `438994b8cd` efi: Correct Macmini DMI match in uefi cert quirk `2fd1caa0c6` ALSA: hda: Fix position reporting on Poulsbo `011399a3f9` random: clamp credited irq bits to maximum mixed `fc87c413f2` random: restore O_NONBLOCK support `c04b67c544` Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5" `0a49bfa8f8` rpmsg: qcom: glink: replace strncpy() with strscpy_pad() `3451df3a51` USB: serial: ftdi_sio: fix 300 bps rate for SIO `1b257f97fe` usb: mon: make mmapped memory read only `3ba555d8e1` mmc: core: Terminate infinite loop in SD-UHS voltage switch `0684658366` mmc: core: Replace with already defined values for readability `4f32f266b1` drm/amd/display: skip audio setup when audio stream is enabled `a6fe179ba0` drm/amd/display: update gamut remap if plane has changed `73e1b27b58` net: atlantic: fix potential memory leak in aq_ndev_close() `3287f0d727` arch: um: Mark the stack non-executable to fix a binutils warning `aeb8315593` um: Cleanup compiler warning in arch/x86/um/tls_32.c `6d4deaba06` um: Cleanup syscall_handler_t cast in syscalls_32.h `6d7a47e849` ALSA: hda/hdmi: Fix the converter reuse for the silent stream `c1337f8ea8` net/ieee802154: fix uninit value bug in dgram_sendmsg `034b30c311` scsi: qedf: Fix a UAF bug in __qedf_probe() `29461bbe2d` ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer `dae0b77cb8` dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure `e0ca2998df` dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property `789e590cb8` dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling `64e240934c` firmware: arm_scmi: Add SCMI PM driver remove routine `6df7c6d141` compiler_attributes.h: move __compiletime_{error\|warning} `1e555c3ed1` fs: fix UAF/GPF bug in nilfs_mdt_destroy `acf05d61d3` powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush `377c60dd32` mm: gup: fix the fast GUP race against THP collapse `fce793a056` ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC `132590d776` xsk: Inherit need_wakeup flag for shared sockets `beffc38dc6` perf tools: Fixup get_current_dir_name() compilation `fb380f548c` docs: update mediator information in CoC docs `c7f4af575b` Makefile.extrawarn: Move -Wcast-function-type-strict to W=1 `b23b0cd57e` ceph: don't truncate file in atomic_open `8a18fdc5ae` nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure `aad4c99785` nilfs2: fix leak of nilfs_root in case of writer thread creation failure `21ee3cffed` nilfs2: fix use-after-free bug of struct nilfs_root `3f840480e3` nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() `bc7618b493` Merge 5.10.147 into android12-5.10-lts `014862eecf` Linux 5.10.147 `98f722cc24` ALSA: hda/hdmi: fix warning about PCM count when used with SOF `b12d0489e4` x86/alternative: Fix race in try_get_desc() `374d4c3075` KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest `a8e6cde506` clk: iproc: Do not rely on node name for correct PLL setup `cf41711aa4` clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks `83db457b41` selftests: Fix the if conditions of in test_extra_filter() `84cab3531f` net: stmmac: power up/down serdes in stmmac_open/release `743a6e53cf` nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices `469dc5fd9a` nvme: add new line after variable declatation `2c248c4681` cxgb4: fix missing unlock on ETHOFLD desc collect fail path `fde656dbc3` net: sched: act_ct: fix possible refcount leak in tcf_ct_init() `fa065e6081` usbnet: Fix memory leak in usbnet_disconnect() `57959392f7` Input: melfas_mip4 - fix return value check in mip4_probe() `330b775781` Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time" `359e73edd3` ASoC: tas2770: Reinit regcache on reset `8884a192f9` soc: sunxi: sram: Fix debugfs info for A64 SRAM C `4e2ede7cb9` soc: sunxi: sram: Fix probe function ordering issues `50fbc81f80` soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource() `0fdc3ab9b4` soc: sunxi: sram: Prevent the driver from being unbound `3e0405c69b` soc: sunxi: sram: Actually claim SRAM regions `a658f0bc72` reset: imx7: Fix the iMX8MP PCIe PHY PERST support `8934aea1a4` ARM: dts: am33xx: Fix MMCHS0 dma properties `cce5dc0333` scsi: hisi_sas: Revert "scsi: hisi_sas: Limit max hw sectors for v3 HW" `625899cd06` swiotlb: max mapping size takes min align mask into account `6f478fe8c3` media: rkvdec: Disable H.264 error detection `ac828e2416` media: dvb_vb2: fix possible out of bound access `be2cd261ca` mm: fix madivse_pageout mishandling on non-LRU page `1002d5fef4` mm/migrate_device.c: flush TLB while holding PTL `a54fc53691` mm: prevent page_frag_alloc() from corrupting the memory `466a26af2d` mm/page_alloc: fix race condition between build_all_zonelists and page allocation `9b751b4dc3` mmc: hsq: Fix data stomping during mmc recovery `36b10cde0c` mmc: moxart: fix 4-bit bus width and remove 8-bit bus width `02d55a837e` libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205 `e72a435fa3` net: mt7531: only do PLL once after the reset `a48daecd09` ntfs: fix BUG_ON in ntfs_lookup_inode_by_name() `1d71422bd4` ARM: dts: integrator: Tag PCI host with device_type `dab144c5dd` clk: ingenic-tcu: Properly enable registers before accessing timers `6c5742372b` Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address `8cf377baf0` net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 `0695e590de` thunderbolt: Explicitly reset plug events delay back to USB4 spec value `efdff53394` usb: typec: ucsi: Remove incorrect warning `e5ee7b77ac` uas: ignore UAS for Thinkplus chips `5f91ceea6c` usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS `1e4b856fc0` uas: add no-uas quirk for Hiksemi usb_disk `6ac5b52e3f` btrfs: fix hang during unmount when stopping a space reclaim worker `29d849c3de` ALSA: hda: Fix Nvidia dp infoframe `24070d32c6` ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically `c1256c531d` ALSA: hda/tegra: Reset hardware `ded9e8964d` ALSA: hda/tegra: Use clk_bulk helpers `b2ad53fbc0` thunderbolt: Add support for Intel Maple Ridge single port controller `53e6282dde` thunderbolt: Add support for Intel Maple Ridge `0e8dfc1216` Merge branch 'android12-5.10' into branch 'android12-5.10-lts' `391716695e` Revert "usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind" `1d17080edb` Merge 5.10.146 into android12-5.10-lts `62aea69444` Linux 5.10.146 `c18383218c` ext4: make directory inode spreading reflect flexbg size `a968542d7e` ext4: limit the number of retries after discarding preallocations blocks `958b0ee23f` ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 `2511726515` devdax: Fix soft-reservation memory description `0fa11239c4` i2c: mlxbf: Fix frequency calculation `48ee0a864d` i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() `4f6db1f921` i2c: mlxbf: incorrect base address passed during io write `2f58c47c36` i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible `90f1c0025b` workqueue: don't skip lockdep work dependency in cancel_work_sync() `4dfc96d8d7` drm/rockchip: Fix return type of cdn_dp_connector_mode_valid `58101a9cfc` drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage `3ae1dede22` drm/amd/display: Limit user regamma to a valid value `867b2b2b68` drm/amdgpu: use dirty framebuffer helper `c5812807e4` drm/gma500: Fix BUG: sleeping function called from invalid context errors `ec2bf249bd` Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region `2a2e503a62` cifs: always initialize struct msghdr smb_msg completely `877231b0e6` cifs: use discard iterator to discard unneeded network data more efficiently `09867977fc` drm/amdgpu: Fix check for RAS support `8c6fd05cf8` vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external() `f31ea57c11` usb: xhci-mtk: fix issue of out-of-bounds array access `f5fcc9d6d7` s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup `fb189aa1be` serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting `e1993864a9` serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting `7f11386733` serial: Create uart_xmit_advance() `fda04a0bab` drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV `4bc4b6419e` selftests: forwarding: add shebang for sch_red.sh `8844c750ee` net: sched: fix possible refcount leak in tc_new_tfilter() `75ca7f44da` net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD `d76151a813` net/smc: Stop the CLC flow if no link to map buffers on `fd938b4ce0` drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff() `c990621606` perf kcore_copy: Do not check /proc/modules is unchanged `28d185095e` perf jit: Include program header in ELF files `78926cf762` can: gs_usb: gs_can_open(): fix race dev->can.state condition `ebd97dbe3c` netfilter: ebtables: fix memory leak when blob is malformed `b043a525a3` netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain() `710e3f526b` netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain() `1e7e55374d` net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs `586def6ebe` net/sched: taprio: avoid disabling offload when it was never enabled `aa400ccadf` net: socket: remove register_gifconf `8bd98cfbfc` net: enetc: move enetc_set_psfp() out of the common enetc_set_features() `f0a057f49b` wireguard: netlink: avoid variable-sized memcpy on sockaddr `b7b3859598` wireguard: ratelimiter: disable timings test by default `ddd47f1cd6` net: ipa: properly limit modem routing table use `8c1454d549` net: ipa: kill IPA_TABLE_ENTRY_SIZE `53b1715e28` net: ipa: DMA addresses are nicely aligned `48afea293a` net: ipa: avoid 64-bit modulus `3ae25aca3f` net: ipa: fix table alignment requirement `c2cf0613d1` net: ipa: fix assumptions about DMA address size `d58815af89` of: mdio: Add of_node_put() when breaking out of for_each_xx `9101e54c95` drm/hisilicon: Add depends on MMU `bac7328fc0` drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled `b3b41d4d95` sfc: fix null pointer dereference in efx_hard_start_xmit `b4afd3878f` sfc: fix TX channel offset when using legacy interrupts `2dbf487d6b` i40e: Fix set max_tx_rate when it is lower than 1 Mbps `65ee2bcc89` i40e: Fix VF set max MTU size `15e9724f6b` iavf: Fix set max MTU size with port VLAN and jumbo frames `ccddb1db4b` iavf: Fix bad page state `21b535fe5e` MIPS: Loongson32: Fix PHY-mode being left unspecified `a4121785a3` MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko `1ac50c1ad4` drm/panel: simple: Fix innolux_g121i1_l01 bus_format `90fbcb26d6` net: team: Unsync device addresses on ndo_stop `e2b94a1122` net: bonding: Unsync device addresses on ndo_stop `dc209962c0` net: bonding: Share lacpdu_mcast_addr definition `2b9aba0c5d` scsi: mpt3sas: Fix return value check of dma_get_required_mask() `e7fafef983` scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region `351f2d2c35` net: phy: aquantia: wait for the suspend/resume operations to finish `d298fc2eef` net: core: fix flow symmetric hash `e90001e1dd` net: let flow have same hash in two directions `ab4a733874` ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header `14446a1bc2` iavf: Fix cached head and tail value for iavf_get_tx_pending `5d75fef3e6` netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() `9a5d7e0acb` netfilter: nf_conntrack_irc: Tighten matching on DCC message `369ec4dab0` netfilter: nf_conntrack_sip: fix ct_sip_walk_headers `66f9470ffe` arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma `aa11dae059` dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get() `1cc871fe6d` arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz `3ca272b231` drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks `39f97714f3` arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob `dce4662869` xfs: validate inode fork size against fork format `a6bfdc157f` xfs: reorder iunlink remove operation in xfs_ifree `e811a534ec` xfs: fix up non-directory creation in SGID directories `4e74179a16` interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate `a60babeb60` KVM: SEV: add cache flush to solve SEV cache incoherency issues `379ac7905f` mm/slub: fix to return errno if kmalloc() fails `fa57bb9b1a` can: flexcan: flexcan_mailbox_read() fix return value for drop = true `12fda27a41` riscv: fix a nasty sigreturn bug... `657803b918` gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully `bdea98b98f` gpio: mockup: fix NULL pointer dereference when removing debugfs `bd5958ccfc` wifi: mt76: fix reading current per-tid starting sequence number for aggregation `85f9a2d51e` efi: libstub: check Shim mode using MokSBStateRT `3490ebe435` efi: x86: Wipe setup_data on pure EFI boot `c5ee36018d` media: flexcop-usb: fix endpoint type check `0d99b180ce` iommu/vt-d: Check correct capability for sagaw determination `213cdb2901` ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop `10c7e52d95` ALSA: hda/realtek: Add quirk for ASUS GA503R laptop `4cd84a9518` ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack `2f7cad4ecd` ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack `62ce31979f` ALSA: hda/realtek: Re-arrange quirk table entries `d4bad13828` ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop `62b0824c2c` ALSA: hda/realtek: Add quirk for Huawei WRT-WX9 `c78bce842d` ALSA: hda: add Intel 5 Series / 3400 PCI DID `f109dd1607` ALSA: hda/tegra: set depop delay for tegra `a1926f11d9` USB: serial: option: add Quectel RM520N `4d1d91a634` USB: serial: option: add Quectel BG95 0x0203 composition `3a26651a78` USB: core: Fix RST error in hub.c `381f77b6a6` arm64/bti: Disable in kernel BTI when cross section thunks are broken `050de28980` arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer `561d86bd0e` Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio" `578d644edc` vfio/type1: Unpin zero pages `abb560abdf` vfio/type1: Prepare for batched pinning with struct vfio_batch `38cb9b8683` vfio/type1: Change success value of vaddr_get_pfn() `c4adbfa9ce` Revert "usb: add quirks for Lenovo OneLink+ Dock" `905e8be528` usb: cdns3: fix issue with rearming ISO OUT endpoint `8fcb5f027b` usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer `f457bb2198` usb: gadget: udc-xilinx: replace memcpy with memcpy_toio `b9e5c47e33` usb: add quirks for Lenovo OneLink+ Dock `345bdea212` tty: serial: atmel: Preserve previous USART mode if RS485 disabled `730f78c51b` serial: atmel: remove redundant assignment in rs485_config `b3f2adf426` mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure `7780b3dda2` usb: xhci-mtk: relax TT periodic bandwidth allocation `99f48a3a6e` usb: xhci-mtk: allow multiple Start-Split in a microframe `b19f9f4122` usb: xhci-mtk: add some schedule error number `402fa9214e` usb: xhci-mtk: add a function to (un)load bandwidth info `c2e7000b13` usb: xhci-mtk: use @sch_tt to check whether need do TT schedule `a2566a8dc5` usb: xhci-mtk: add only one extra CS for FS/LS INTR `b1e11bc66c` usb: xhci-mtk: get the microframe boundary for ESIT `9c28189bb6` usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop `ff23c7277f` usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup() `ab046365c9` usb: dwc3: gadget: Refactor pullup() `db27874477` usb: dwc3: gadget: Prevent repeat pullup() `6bd182beef` usb: dwc3: Issue core soft reset before enabling run/stop `b83692feb0` usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind `2a358ad19c` usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device `c267bb8334` usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake `7b0db849ea` drm/amdgpu: make sure to init common IP before gmc `9d18013dac` drm/amdgpu: Separate vf2pf work item init from virt data exchange `87a4e51fb8` drm/amdgpu: indirect register access for nv12 sriov `9f55f36f74` drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega `ef2aee5cec` Merge 5.10.145 into android12-5.10-lts `4a77e6ef20` Linux 5.10.145 `ca5539d421` ALSA: hda/sigmatel: Fix unused variable warning for beep power change `9f267393b0` cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() `06e194e113` video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write `3fefe614ed` mksysmap: Fix the mismatch of 'L0' symbols in System.map `3e6d2eff56` MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping() `72602bc620` afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked `517a0324db` net: usb: qmi_wwan: add Quectel RM520N `a36fd2d8d6` ALSA: hda/tegra: Align BDL entry to 4KB boundary `e41b97a277` ALSA: hda/sigmatel: Keep power up while beep is enabled `b95a5ef4c0` wifi: mac80211_hwsim: check length for virtio packets `c505fee07b` rxrpc: Fix calc of resend age `35da670ed1` rxrpc: Fix local destruction being repeated `891d5c46f2` regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe() `c2ef959e33` ASoC: nau8824: Fix semaphore unbalance at error paths `107c6b6058` Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field" `e00582a361` video: fbdev: i740fb: Error out if 'pixclock' equals zero `f63ddf62d0` tools/include/uapi: Fix <asm/errno.h> for parisc and xtensa `331eba80cb` cifs: don't send down the destination address to sendmsg for a SOCK_STREAM `f3fbd08e7c` cifs: revalidate mapping when doing direct writes `a9398cb81c` of/device: Fix up of_dma_configure_id() stub `6a27acda3d` tracing: hold caller_addr to hardirq_{enable,disable}_ip `65dd251c51` parisc: ccio-dma: Add missing iounmap in error path in ccio_probe() `1f24b0a7ca` drm/meson: Fix OSD1 RGB to YCbCr coefficient `4d3d2e384b` drm/meson: Correct OSD1 global alpha value `24196210b1` gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx `4d065f8356` NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0 `2f16f5b582` pinctrl: sunxi: Fix name for A100 R_PIO `ee4369260e` of: fdt: fix off-by-one error in unflatten_dt_nodes() `cae6172a94` net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports `4a6c6041e8` platform/x86/intel: hid: add quirk to support Surface Go 3 `8faabaf112` usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests `cd226d8c1b` powerpc/pseries/mobility: ignore ibm, platform-facilities updates `d5ee5a9e47` powerpc/pseries/mobility: refactor node lookup during DT update `4dbe84b9b6` dmaengine: bestcomm: fix system boot lockups `7bbdf49e26` parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page `b00a56e647` parisc: Optimize per-pagetable spinlocks `59819f0aaf` serial: 8250: Fix reporting real baudrate value in c_ospeed field `9230af9188` KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling `6bae475481` KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs `7474313da8` Merge 5.10.144 into android12-5.10-lts `3dbfa90b61` Merge 5.10.143 into android12-5.10-lts `51659937e3` Revert "USB: core: Prevent nested device-reset calls" `2e00a2dc61` Revert "xhci: Add grace period after xHC start to prevent premature runtime suspend." `e0f0b200a5` Merge 5.10.142 into android12-5.10-lts `e69a383052` Revert "mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse" `e4a7358455` Revert "io_uring: disable polling pollfree files" `99c2dfe47a` Linux 5.10.144 `744f98f71d` Input: goodix - add compatible string for GT1158 `c7f4c203d1` soc: fsl: select FSL_GUTS driver for DPIO `35371fd688` x86/ftrace: Use alternative RET encoding `4586df06a0` x86/ibt,ftrace: Make function-graph play nice `33015556a9` Revert "x86/ftrace: Use alternative RET encoding" `891f03f688` mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() `dd3aa77d5d` usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS `5ce017619c` platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes `fc2c14c2cd` perf/arm_pmu_platform: fix tests for platform_get_irq() failure `187908079d` drm/amd/amdgpu: skip ucode loading if ucode_size == 0 `c598e2704c` nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() `1cae6f8e17` Input: iforce - add support for Boeder Force Feedback Wheel `de2aa49523` ieee802154: cc2520: add rc code in cc2520_tx() `3815e66c21` gpio: mockup: remove gpio debugfs when remove device `1b8b5384e8` tg3: Disable tg3 device on system reboot to avoid triggering AER `704d1f2ac6` hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message `ef033e619e` HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo `cff2b3a50c` drm/msm/rd: Fix FIFO-full deadlock `fac2c299ef` Input: goodix - add support for GT1158 `218b71e32f` tracefs: Only clobber mode/uid/gid on remount if asked `0a81ddfc20` iommu/vt-d: Correctly calculate sagaw value of IOMMU `5ce1b0a0c2` ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible `a381cac2ab` ARM: dts: imx: align SPI NOR node name with dtschema `f1101295c1` Linux 5.10.143 `71d3adbb28` arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly `202341395c` hwmon: (mr75203) enable polling for all VM channels `c9da73ae78` hwmon: (mr75203) fix multi-channel voltage reading `19841592ae` hwmon: (mr75203) fix voltage equation for negative source input `8e8dc8fc53` hwmon: (mr75203) update pvt->v_num and vm_num to the actual number of used sensors `13521c94b9` hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined `5e17967c7e` iommu/amd: use full 64-bit value in build_completion_wait() `1a27425523` swiotlb: avoid potential left shift overflow `586f8c8330` MIPS: loongson32: ls1c: Fix hang during startup `a9453be390` ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion `9dacdc1d47` ASoC: mchp-spdiftx: remove references to mchp_i2s_caps `2ead78fbe6` sch_sfb: Also store skb len before calling child enqueue `d47475d4e5` tcp: fix early ETIMEDOUT after spurious non-SACK RTO `6a2a344844` nvme-tcp: fix regression that causes sporadic requests to time out `5914fa32ef` nvme-tcp: fix UAF when detecting digest errors `a00b1b10e0` RDMA/mlx5: Set local port to one when accessing counters `e8de6cb575` IB/core: Fix a nested dead lock as part of ODP flow `076f2479fc` ipv6: sr: fix out-of-bounds read when setting HMAC data. `047e66867e` RDMA/siw: Pass a pointer to virt_to_page() `0f1e7977e1` xen-netback: only remove 'hotplug-status' when the vif is actually destroyed `342d77769a` i40e: Fix kernel crash during module removal `9d11d06e50` ice: use bitmap_free instead of devm_kfree `22922da737` tipc: fix shift wrapping bug in map_get() `2ee85ac1b2` sch_sfb: Don't assume the skb is still around after enqueueing to child `63677a0923` afs: Use the operation issue time instead of the reply time for callbacks `fbbd5d05ea` rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() `6ccbb74801` ALSA: usb-audio: Register card again for iface over delayed_register option `1d29a63585` ALSA: usb-audio: Inform the delayed registration more properly `e12ce30fe5` netfilter: nf_conntrack_irc: Fix forged IP logic `910891a2a4` netfilter: nf_tables: clean up hook list when offload flags check fails `908180f633` netfilter: br_netfilter: Drop dst references before setting. `7d29f2bdd1` ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time `0796953300` ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time `360dd120eb` ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges `6bbef2694a` ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges `e198c08570` RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift `b2e82e325a` RDMA/hns: Fix supported page size `6dc0251638` soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs `e9ea271c2e` RDMA/cma: Fix arguments order in net device validation `465eecd2b3` tee: fix compiler warning in tee_shm_register() `75c961d011` regulator: core: Clean up on enable failure `bb4bee3eca` ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node `015c2ec053` smb3: missing inode locks in punch hole `98127f140b` cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() `dee1e2b18c` cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock `bfbacc2ef7` cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree `a5620d3e0c` scsi: lpfc: Add missing destroy_workqueue() in error path `ea10a652ad` scsi: mpt3sas: Fix use-after-free warning `de572edecc` drm/i915: Implement WaEdpLinkRateDataReload `be01f1c988` nvmet: fix a use-after-free `68f22c80c1` debugfs: add debugfs_lookup_and_remove() `ab60010225` kprobes: Prohibit probes in gate area `6123bec848` ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() `ab730d3c44` ALSA: aloop: Fix random zeros in capture data when using jiffies timer `39a90720f3` ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() `dfb27648ee` drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly `2078e326b6` fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() `9d040a629e` net/core/skbuff: Check the return value of skb_copy_bits() `43b9af7275` arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level `96d206d0a1` parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines `44739b5aae` parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() `826b46fd59` drm/radeon: add a force flush to delay work when radeon `0410256867` drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. `c19656cd95` drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini `67bf86ff81` drm/gem: Fix GEM handle release errors `a175aed83e` scsi: megaraid_sas: Fix double kfree() `004e26ef05` scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX `a14f1799ce` Revert "mm: kmemleak: take a full lowmem check in kmemleak__phys()" `13c8f561be` fs: only do a memory barrier for the first set_buffer_uptodate() `2946d2ae5a` wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() `918d9c4a4b` efi: capsule-loader: Fix use-after-free in efi_capsule_write `94f0f30b2d` efi: libstub: Disable struct randomization `eb75efdec8` tty: n_gsm: avoid call of sleeping functions from atomic context `fb6cadd2a3` tty: n_gsm: initialize more members at gsm_alloc_mux() `186cb020bd` xen-blkfront: Cache feature_persistent value before advertisement `d3d885507b` NFSD: Fix verifier returned in stable WRITEs `281e81a5e2` Linux 5.10.142 `2058aab4e3` USB: serial: ch341: fix disabled rx timer on older devices `2a4c619a87` USB: serial: ch341: fix lost character on LCR updates `06a84bda0a` usb: dwc3: disable USB core PHY management `451fa90150` usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup `8984ca41de` usb: dwc3: fix PHY disable sequence `cb27189360` mmc: core: Fix UHS-I SD 1.8V workaround branch `7f73a9dea0` btrfs: harden identification of a stale device `3c63a22d02` drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk `1079d09572` ALSA: seq: Fix data-race at module auto-loading `f19a209f61` ALSA: seq: oss: Fix data-race for max_midi_devs access `7565c15030` ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298 `ab9f890377` net: mac802154: Fix a condition in the receive path `d71a1c9fce` net: Use u64_stats_fetch_begin_irq() for stats fetch. `685f4e5671` ip: fix triggering of 'icmp redirect' `4abc8c07a0` wifi: mac80211: Fix UAF in ieee80211_scan_rx() `dd649b4921` wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected `742e222dd5` driver core: Don't probe devices after bus_type.match() probe deferral `6202637fde` usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS `abe3cfb7a7` USB: core: Prevent nested device-reset calls `b0d4993c4b` s390: fix nospec table alignments `0361d50e86` s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages `b9097c5e10` usb-storage: Add ignore-residue quirk for NXP PN7462AU `5f0d11796a` USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) `d608c131df` usb: dwc2: fix wrong order of phy_power_on and phy_init `95791d51f7` usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles `89b01a88ef` USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode `7f1f176715` USB: serial: option: add Quectel EM060K modem `efcc3e1e6a` USB: serial: option: add support for OPPO R11 diag port `e547c07c28` USB: serial: cp210x: add Decagon UCA device id `5a603f4c12` xhci: Add grace period after xHC start to prevent premature runtime suspend. `587f793c64` media: mceusb: Use new usb_control_msg_() routines `07fb6b10b6` thunderbolt: Use the actual buffer in tb_async_error() `f210912d1a` xen-blkfront: Advertise feature-persistent as user requested `aa45c50703` xen-blkback: Advertise feature-persistent as user requested `47a73e5e6b` mm: pagewalk: Fix race between unmap and page walker `5d0d46e625` xen/grants: prevent integer overflow in gnttab_dma_alloc_pages() `eb0c614c42` KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES `7efcbac55a` gpio: pca953x: Add mutex_lock for regcache sync in PM `517dba7987` hwmon: (gpio-fan) Fix array out of bounds access `a971343557` clk: bcm: rpi: Add missing newline `fcae47b2d2` clk: bcm: rpi: Prevent out-of-bounds access `8c90a3e0d3` clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc() `00d8bc0c16` clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate `e32982115d` Input: rk805-pwrkey - fix module autoloading `e2945f936c` clk: core: Fix runtime PM sequence in clk_core_unprepare() `4ff599df31` Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops" `c0f0ed9ef9` clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops `5f1aee7f05` drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported" `9629f2dfdb` binder: fix UAF of ref->proc caused by race condition `08fa8cb6df` USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id `5cf2a57c7a` misc: fastrpc: fix memory corruption on open `c99bc901d5` misc: fastrpc: fix memory corruption on probe `30fd0e23e3` iio: adc: mcp3911: use correct formula for AD conversion `89aa443437` iio: ad7292: Prevent regulator double disable `b271090eea` Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag `b202400c9c` tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete `989201bb8c` vt: Clear selection before changing the font `7fd8d33adb` powerpc: align syscall table for ppc32 `19e3f69d19` staging: rtl8712: fix use after free bugs `6ccd69141b` serial: fsl_lpuart: RS485 RTS polariy is inverse `e416fe7f16` net/smc: Remove redundant refcount increase `d73b89c3b3` Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb" `f3d1554d0f` tcp: annotate data-race around challenge_timestamp `870b6a1561` sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb `1b6666964c` kcm: fix strp_init() order and cleanup `406d554844` ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler `44dfa64589` net/sched: fix netdevice reference leaks in attach_default_qdiscs() `699d82e9a6` net: sched: tbf: don't call qdisc_put() while holding tree lock `c0cb63ee2e` Revert "xhci: turn off port power in shutdown" `6855efbaf5` wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() `ddcb56e841` ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array `9276eb98cd` ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg `23a2993271` ieee802154/adf7242: defer destroy_workqueue call `c5f975e3eb` bpf, cgroup: Fix kernel BUG in purge_effective_progs `e6aeb8be85` iio: adc: mcp3911: make use of the sign bit `b69e05b1e8` platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask `f040abf62e` drm/msm/dsi: Fix number of regulators for SDM660 `43e523a407` drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg `1487e8fc16` drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4 `631fbefd87` drm/msm/dsi: fix the inconsistent indenting `5d60de7a5f` Merge 5.10.141 into android12-5.10-lts `0b8e37cbaa` Linux 5.10.141 `bdc786d737` net: neigh: don't call kfree_skb() under spin_lock_irqsave() `4931af31c4` net/af_packet: check len when min_header_len equals to 0 `64f6da455b` xfs: revert "xfs: actually bump warning counts when we send warnings" `d34798d846` xfs: fix soft lockup via spinning in filestream ag selection loop `f168801da9` xfs: fix overfilling of reserve pool `72a259bdd5` xfs: always succeed at setting the reserve pool size `cb41f22df3` xfs: remove infinite loop when reserving free block pool `28d8d2737e` io_uring: disable polling pollfree files `744b0d3080` kprobes: don't call disarm_kprobe() for disabled kprobes `8c70cce892` lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline() `6ba9e8fb47` netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y `afa169f79d` drm/amdgpu: Increase tlb flush timeout for sriov `f08a3712ba` drm/amd/display: Fix pixel clock programming `60d522f317` drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid `f2b7b8b1c4` s390/hypfs: avoid error message under KVM `c35adafe42` neigh: fix possible DoS due to net iface start/stop loop `3c1dfeaeb3` drm/amd/display: clear optc underflow before turn off odm clock `4e5e67b13a` drm/amd/display: For stereo keep "FLIP_ANY_FRAME" `828b2a5399` drm/amd/display: Avoid MPC infinite loop `9d36e2c264` mmc: mtk-sd: Clear interrupts when cqe off/disable `98f401d363` mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse `6204bf78b2` bpf: Don't redirect packets with invalid pkt_len `dbd8c8fc60` ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead `8fc778ee2f` fbdev: fb_pm2fb: Avoid potential divide by zero error `61cc798591` net: fix refcount bug in sk_psock_get (2) `7e2fa79226` HID: hidraw: fix memory leak in hidraw_release() `bacb37bdc2` media: pvrusb2: fix memory leak in pvr_probe `872875c9ec` udmabuf: Set the DMA mask for the udmabuf device (v2) `dc81576194` HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report `412b844143` Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()" `38267d2663` Bluetooth: L2CAP: Fix build errors in some archs `ad697ade59` kbuild: Fix include path in scripts/Makefile.modpost `b9feeb6100` s390/mm: do not trigger write fault when vma does not allow VM_WRITE `0dea6b3e22` crypto: lib - remove unneeded selection of XOR_BLOCKS `e5796ff9ac` x86/nospec: Fix i386 RSB stuffing `adee8f3082` x86/nospec: Unwreck the RSB stuffing `895428ee12` mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() `5939035887` Merge 5.10.140 into android12-5.10-lts `18ed766f36` Linux 5.10.140 `e897980717` bpf: Don't use tnum_range on array range checking for poke descriptors `46fcb0fc88` scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq `8d5c106fe2` scsi: ufs: core: Enable link lost interrupt `c0ba9aa95b` perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU `5a768c9770` perf python: Fix build when PYTHON_CONFIG is user supplied `3ddbd0907f` blk-mq: fix io hung due to missing commit_rqs `7ca73d0a16` Documentation/ABI: Mention retbleed vulnerability info file for sysfs `1896232619` arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76 `a5a58fab55` md: call __md_stop_writes in md_stop `f68f025c7e` Revert "md-raid: destroy the bitmap after destroying the thread" `62af37c5cd` mm/hugetlb: fix hugetlb not supporting softdirty tracking `6de50db104` xen/privcmd: fix error exit of privcmd_ioctl_dm_op() `8d5f8a4f25` ACPI: processor: Remove freq Qos request for all CPUs `297ae7e87a` s390: fix double free of GS and RI CBs on fork() failure `c60ae87878` asm-generic: sections: refactor memory_intersects `6858933131` loop: Check for overflow while configuring loop `14cbbb9c99` x86/bugs: Add "unknown" reporting for MMIO Stale Data `e3e0d11729` x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry `090f0ac167` perf/x86/lbr: Enable the branch type for the Arch LBR by default `d2bd18d50c` btrfs: check if root is readonly while setting security xattr `dcac6293f5` btrfs: add info when mount fails due to stale replace target `b2d352ed4d` btrfs: replace: drop assert for suspended replace `2fc3c168d5` btrfs: fix silent failure when deleting root reference `3a351b567e` ionic: fix up issues with handling EAGAIN on FW cmds `79e2ca7aa9` rxrpc: Fix locking in rxrpc's sendmsg `c3a6e863d5` ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter `23cf93bb32` net: Fix a data-race around sysctl_somaxconn. `9fcc4f4066` net: Fix data-races around sysctl_devconf_inherit_init_net. `371a3bcf31` net: Fix data-races around sysctl_fb_tunnels_only_for_init_net. `c3bda708e9` net: Fix a data-race around netdev_budget_usecs. `12a34d7f04` net: Fix a data-race around netdev_budget. `410c88314c` net: Fix a data-race around sysctl_net_busy_read. `2c7dae6c45` net: Fix a data-race around sysctl_net_busy_poll. `8db070463e` net: Fix a data-race around sysctl_tstamp_allow_data. `ed48223f87` net: Fix data-races around sysctl_optmem_max. `27e8ade792` bpf: Folding omem_charge() into sk_storage_charge() `4d4e39245d` ratelimit: Fix data-races in ___ratelimit(). `e73009ebc1` net: Fix data-races around netdev_tstamp_prequeue. `3850060352` net: Fix data-races around netdev_max_backlog. `b498a1b017` net: Fix data-races around weight_p and dev_weight_[rt]x_bias. `fb442c72db` net: Fix data-races around sysctl_[rw]mem_(max\|default). `613fd02620` net: Fix data-races around sysctl_[rw]mem(_offset)?. `e73a29554f` tcp: tweak len/truesize ratio for coalesce candidates `c08a104a8b` netfilter: nf_tables: disallow binding to already bound chain `6301a73bd8` netfilter: nf_tables: disallow jump to implicit chain from set element `9882768759` netfilter: nf_tables: upfront validation of data via nft_data_init() `8790eecdea` netfilter: bitwise: improve error goto labels `2267d38520` netfilter: nft_cmp: optimize comparison for 16-bytes `1d7d74a824` netfilter: nf_tables: consolidate rule verdict trace call `cd962806c4` netfilter: nftables: remove redundant assignment of variable err `35519ce7ba` netfilter: nft_tunnel: restrict it to netdev family `9a67c2c89c` netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families `c907dfe4ea` netfilter: nf_tables: do not leave chain stats enabled on error `ea358cfc8e` netfilter: nft_payload: do not truncate csum_offset and csum_type `93a46d6c72` netfilter: nft_payload: report ERANGE for too long offset and length `e0f8cf0192` bnxt_en: fix NQ resource accounting during vf creation on 57500 chips `624c305212` netfilter: ebtables: reject blobs that don't provide all entry points `f82a6b85e0` net: ipvtap - add __init/__exit annotations to module init/exit funcs `7e7e88e8b5` bonding: 802.3ad: fix no transmission of LACPDUs `14ef913a95` net: moxa: get rid of asymmetry in DMA mapping/unmapping `faa8bf8451` net: ipa: don't assume SMEM is page-aligned `29accb2d96` net/mlx5e: Properly disable vlan strip on non-UL reps `1bfdcde723` ice: xsk: prohibit usage of non-balanced queue id `d29d7108e1` ice: xsk: Force rings to be sized to power of 2 `50403ee6da` nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout `de3deadd11` rose: check NULL rose_loopback_neigh->loopback `e9fe1283a8` mm/smaps: don't access young/dirty bit if pte unpresent `c7c77185fa` mm/huge_memory.c: use helper function migration_entry_to_page() `8be096f018` SUNRPC: RPC level errors should set task->tk_rpc_status `5e49ea0998` NFSv4.2 fix problems with __nfs42_ssc_open `23c6f25a60` NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open() `2761612bcd` xfrm: policy: fix metadata dst->dev xmit null pointer dereference `c5c4d4c980` af_key: Do not call xfrm_probe_algs in parallel `4379a10c1d` xfrm: clone missing x->lastused in xfrm_do_migrate `1305d7d4f3` xfrm: fix refcount leak in __xfrm_policy_check() `c30c0f7205` kernel/sched: Remove dl_boosted flag comment `70d560e2fb` xfs: only bother with sync_filesystem during readonly remount `37837bc3ef` xfs: return errors in xfs_fs_sync_fs `76a51e49da` vfs: make sync_filesystem return errors from ->sync_fs `9255a42fe7` fs: remove __sync_filesystem `1b9b4139d7` xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* `6a564bad3a` xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() `a5757df612` pinctrl: amd: Don't save/restore interrupt status and wake status bits `665433b5dd` kernel/sys_ni: add compat entry for fadvise64_64 `df1d445e7f` parisc: Fix exception handler for fldw and fstw instructions `e10bb2f2e9` audit: fix potential double free on error path from fsnotify_add_inode_mark `44cde61acc` Merge 5.10.139 into android12-5.10-lts `7a3ca8147f` Revert "ALSA: control: Use deferred fasync helper" `5597d5439f` Merge 5.10.138 into android12-5.10-lts `1e247e4040` Revert "block: remove the request_queue to argument request based tracepoints" `33d6fea819` Revert "blktrace: Trace remapped requests correctly" `eb5eb075d8` Revert "USB: HCD: Fix URB giveback issue in tasklet function" `fbe6a13851` Merge 5.10.137 into android12-5.10-lts `665ee74607` Linux 5.10.139 `37c7f25fe2` kbuild: dummy-tools: avoid tmpdir leak in dummy gcc `fa3303d70b` Linux 5.10.138 `606fe84a41` tee: fix memory leak in tee_shm_register() `3527e3cbb8` bpf: Fix KASAN use-after-free Read in compute_effective_progs `4f7286422a` qrtr: Convert qrtr_ports from IDR to XArray `1daa7629d2` PCI/ERR: Retain status from error notification `a220ff3433` can: j1939: j1939_session_destroy(): fix memory leak of skbs `05b9b0a7a7` can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() `184e73f12c` tracing/probes: Have kprobes and uprobes use $COMM too `3debec96ca` netfilter: nf_tables: fix audit memory leak in nf_tables_commit `f3d0db3b43` netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect() `059f47b3a4` MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 `4b20c61365` video: fbdev: i740fb: Check the argument of i740_calc_vclk() `dac28dff90` powerpc/64: Init jump labels before parse_early_param() `52a408548a` smb3: check xattr value length earlier `336936f72a` f2fs: fix to do sanity check on segment type in build_sit_entries() `800ba89791` f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() `857ccedcf5` ALSA: control: Use deferred fasync helper `658bc550a4` ALSA: timer: Use deferred fasync helper `be094c417a` ALSA: core: Add async signal helpers `6ed3e280c7` powerpc/32: Don't always pass -mcpu=powerpc to the compiler `63671b2bdf` watchdog: export lockup_detector_reconfigure `399d245775` RISC-V: Add fast call path of crash_kexec() `d881c98d0a` riscv: mmap with PROT_WRITE but no PROT_READ is invalid `333bdb72be` modules: Ensure natural alignment for .altinstructions and __bug_table sections `1e39037e44` mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start `5e034e03f4` vfio: Clear the caps->buf to NULL after free `81939c4fbc` tty: serial: Fix refcount leak bug in ucc_uart.c `58275db3c7` lib/list_debug.c: Detect uninitialized lists `8028888329` ext4: avoid resizing to a partial cluster size `285447b819` ext4: avoid remove directory when directory is corrupted `5d8325fd15` drivers:md:fix a potential use-after-free bug `534e96302a` nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown `6d7aabdba6` md: Notify sysfs sync_completed in md_reap_sync_thread() `f43a72d4da` dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed `b30aa4ff11` selftests/kprobe: Do not test for GRP/ without event failures `fa45327d8c` csky/kprobe: reclaim insn_slot on kprobe unregistration `18f62a453b` RDMA/rxe: Limit the number of calls to each tasklet `9a6178c225` um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups `e4c9f16219` PCI/ACPI: Guard ARM64-specific mcfg_quirks `4be138bcd6` cxl: Fix a memory leak in an error handling path `84d94619c7` pinctrl: intel: Check against matching data instead of ACPI companion `9ac14f973c` gadgetfs: ep_io - wait until IRQ finishes `c29a4baaad` scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input `eb01065fd3` clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description `56a4bccab9` zram: do not lookup algorithm in backends table `09c90f89b2` uacce: Handle parent device removal or parent driver module rmmod `6b90ab9524` clk: qcom: ipq8074: dont disable gcc_sleep_clk_src `eddb352a80` vboxguest: Do not use devm for irq `9a87f33f1d` usb: dwc2: gadget: remove D+ pull-up while no vbus with usb-role-switch `9790a5a4f0` usb: renesas: Fix refcount leak bug `cb5dd65e88` usb: host: ohci-ppc-of: Fix refcount leak bug `d86c6447ee` clk: ti: Stop using legacy clkctrl names for omap4 and 5 `152c94c10b` drm/meson: Fix overflow implicit truncation warnings `da6b37983a` irqchip/tegra: Fix overflow implicit truncation warnings `24304c6f9c` usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info `6d7ac60098` usb: cdns3 fix use-after-free at workaround 2 `0a0da5ef5b` platform/chrome: cros_ec_proto: don't show MKBP version if unsupported `e2ab7afe66` PCI: Add ACS quirk for Broadcom BCM5750x NICs `a1e7908f78` drm/sun4i: dsi: Prevent underflow when computing packet sizes `bd6165b802` netfilter: add helper function to set up the nfnetlink header and use it `06fde3cd0b` netfilter: nftables: add helper function to set the base sequence number `e2a49009ba` audit: log nftables configuration change events once per table `3aa710e967` drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() `1bfdb1912c` ASoC: SOF: intel: move sof_intel_dsp_desc() forward `823280a8fb` locking/atomic: Make test_and__bit() ordered on failure `0bd35968bc` gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file `9112826f28` kbuild: fix the modules order between drivers and libs `0f516dcd14` igb: Add lock to avoid data race `02f3642d8e` stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() `efae1735ff` fec: Fix timer capture timing in `fec_ptp_enable_pps()` `668f38fb9a` i40e: Fix to stop tx_timeout recovery if GLOBR fails `bbd6723d75` regulator: pca9450: Remove restrictions for regulator-name `b5ba5c3669` i2c: imx: Make sure to unregister adapter on remove() `19cb691faf` ice: Ignore EEXIST when setting promisc mode `7983e1e44c` net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() `83411c9f05` net: genl: fix error path memory leak in policy dumping `af1748ee51` net: dsa: felix: fix ethtool 256-511 and 512-1023 TX packet counters `9900af65f2` net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry `7d51385ae0` net: moxa: pass pdev instead of ndev to DMA functions `92dc64e8f5` net: dsa: mv88e6060: prevent crash on an unused port `aa16c8c4e8` spi: meson-spicc: add local pow2 clock ops to preserve rate between messages `a868f771ee` powerpc/pci: Fix get_phb_number() locking `3561f4d12f` netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified `01b0cae6b7` netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag `8d2fe4b9ed` netfilter: nf_tables: really skip inactive sets when allocating name `330f0a552b` ASoC: tas2770: Fix handling of mute/unmute `353cc4cb97` ASoC: tas2770: Drop conflicting set_bias_level power setting `dffe1c4780` ASoC: tas2770: Allow mono streams `fc57e3fde2` ASoC: tas2770: Set correct FSYNC polarity `4fe80492d5` iavf: Fix adminq error handling `63684e467b` nios2: add force_successful_syscall_return() `600ff4b13b` nios2: restarts apply only to the first sigframe we build... `f20bc59ccf` nios2: fix syscall restart checks `8d0118a027` nios2: traced syscall does need to check the syscall number `1d2c89dc48` nios2: don't leave NULLs in sys_call_table[] `d29cdf865a` nios2: page fault et.al. are not* restartable syscalls... `76be981882` dpaa2-eth: trace the allocated address instead of page struct `787511c768` perf probe: Fix an error handling path in 'parse_perf_probe_command()' `2c746ec91d` geneve: fix TOS inheriting for ipv4 `a0ae122e9a` atm: idt77252: fix use-after-free bugs caused by tst_timer `291cba960b` xen/xenbus: fix return type in xenbus_file_read() `3c555a0599` nfp: ethtool: fix the display error of `ethtool -m DEVNAME` `76f3b97e56` NTB: ntb_tool: uninitialized heap data in tool_fn_write() `7ef9f0efbe` tools build: Switch to new openssl API for test-libcrypto `7ef0645ebe` kbuild: dummy-tools: avoid tmpdir leak in dummy gcc `aee18421bd` ceph: don't leak snap_rwsem in handle_cap_grant `eea0d84a4f` tools/vm/slabinfo: use alphabetic order when two values are equal `97cea2cb7c` ceph: use correct index when encoding client supported features `7a327285a7` dt-bindings: clock: qcom,gcc-msm8996: add more GCC clock sources `87c4b359e3` dt-bindings: arm: qcom: fix MSM8916 MTP compatibles `55fdefcb52` vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() `38ddccbda5` vsock: Fix memory leak in vsock_connect() `549822e0dc` plip: avoid rcu debug splat `0c4542cb6a` ipv6: do not use RT_TOS for IPv6 flowlabel `38b83883ce` geneve: do not use RT_TOS for IPv6 flowlabel `b0c3eec4ac` ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool `cc0bfd933c` pinctrl: qcom: sm8250: Fix PDC map `d35d9bba29` pinctrl: sunxi: Add I/O bias setting for H6 R-PIO `e8f5699a82` pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed `78d0510389` pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map `ab2b55bb25` net: bgmac: Fix a BUG triggered by wrong bytes_compl `0e28678a77` devlink: Fix use-after-free after a failed reload `faafa2a87f` virtio_net: fix memory leak inside XPD_TX with mergeable `fd70ebf299` SUNRPC: Reinitialise the backchannel request buffers before reuse `59d2e8fa41` sunrpc: fix expiry of auth creds `df60c534d4` net: atlantic: fix aq_vec index out of range error `cc25abcec8` can: mcp251x: Fix race condition on receive interrupt `b9d9cf88c8` bpf: Check the validity of max_rdwr_access for sock local storage map iterator `f7d844df5e` bpf: Acquire map uref in .init_seq_private for sock{map,hash} iterator `d7ad7e65aa` bpf: Acquire map uref in .init_seq_private for sock local storage map iterator `bda6fe3ea8` bpf: Acquire map uref in .init_seq_private for hash map iterator `30d7198da8` bpf: Acquire map uref in .init_seq_private for array map iterator `76ffd20424` NFSv4/pnfs: Fix a use-after-free bug in open `f2bd1cc1fe` NFSv4.1: RECLAIM_COMPLETE must handle EACCES `cfde64bd31` NFSv4: Fix races in the legacy idmapper upcall `060c111373` NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly `a351a73d90` NFSv4.1: Don't decrease the value of seq_nr_highest_sent `a408f135c4` Documentation: ACPI: EINJ: Fix obsolete example `8aab429558` apparmor: Fix memleak in aa_simple_write_to_buffer() `2ceeb3296e` apparmor: fix reference count leak in aa_pivotroot() `2672f3eb7a` apparmor: fix overlapping attachment computation `1ac89741a2` apparmor: fix setting unconfined mode on a loaded profile `4188f91c82` apparmor: fix aa_label_asxprint return check `e0ca0156a7` apparmor: Fix failed mount permission check error message `08f8128bc9` apparmor: fix absroot causing audited secids to begin with = `bca03f0bbc` apparmor: fix quiet_denied for file rules `2b74344135` can: ems_usb: fix clang's -Wunaligned-access warning `7f06c78211` ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II `5d3b02b80d` tracing: Have filter accept "common_cpu" to be consistent `6359850f9d` btrfs: fix lost error handling when looking up extended ref on log replay `79895cefa4` mmc: meson-gx: Fix an error handling path in meson_mmc_probe() `13a497c3c5` mmc: pxamci: Fix an error handling path in pxamci_probe() `4a211dd485` mmc: pxamci: Fix another error handling path in pxamci_probe() `a785d84178` ata: libata-eh: Add missing command name `fb1857c2e4` rds: add missing barrier to release_refill `6876b4804b` x86/mm: Use proper mask when setting PUD mapping `b68e40b52f` ALSA: hda/realtek: Add quirk for Clevo NS50PU, NS70PU `e14e2fec35` ALSA: info: Fix llseek return value when using callback `a634d58881` Merge branch 'android12-5.10' into branch 'android12-5.10-lts' `74ded189e5` Linux 5.10.137 `fb4e220e1b` btrfs: raid56: don't trust any cached sector in __raid56_parity_recover() `1e1a039f44` btrfs: only write the sectors in the vertical stripe which has data stripes `8f317cd888` sched/fair: Fix fault in reweight_entity `aa318d35be` net_sched: cls_route: disallow handle of 0 `5a2a00b604` net/9p: Initialize the iounit field during fid creation `578c349570` tee: add overflow check in register_shm_helper() `98b20e1612` kvm: x86/pmu: Fix the compare function used by the pmu event filter `705dfc4575` mtd: rawnand: arasan: Prevent an unsupported configuration `c898e917d8` Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression `e81046da1d` Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP" `a60996dc02` drm/vc4: change vc4_dma_range_matches from a global to static `3422e24af9` drm/bridge: tc358767: Fix (e)DP bridge endpoint parsing in dedicated function `2223b35c57` Revert "mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv" `8338305317` tcp: fix over estimation in sk_forced_mem_schedule() `c35c01a7cb` mac80211: fix a memory leak where sta_info is not freed `ac7de8c2ba` KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() `4c85e207c1` KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq `a4c94205ba` KVM: Add infrastructure and macro to mark VM as bugged `7018f03d97` net_sched: cls_route: remove from list when handle is 0 `49dba30638` dm raid: fix address sanitizer warning in raid_status `c2d47bef93` dm raid: fix address sanitizer warning in raid_resume `d0b495aa26` ext4: correct the misjudgment in ext4_iget_extra_inode `603fb7bd74` ext4: correct max_inline_xattr_value_size computing `e8c747496f` ext4: fix extent status tree race in writeback error recovery path `ac8cc06114` ext4: update s_overhead_clusters in the superblock during an on-line resize `bb8592efcf` ext4: fix use-after-free in ext4_xattr_set_entry `69d1a36eb4` ext4: make sure ext4_append() always allocates new block `e1682c7171` ext4: fix warning in ext4_iomap_begin as race between bmap and write `2da44a2927` ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h `1571c46130` ext4: check if directory block is within i_size `e99da0f921` tracing: Use a struct alignof to determine trace event field alignment `35508b60b5` tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH `0e48eaf75d` KEYS: asymmetric: enforce SM2 signature use pkey algo `135d9e0710` xen-blkfront: Apply 'feature_persistent' parameter when connect `d4fb08e5a4` xen-blkback: Apply 'feature_persistent' parameter when connect `9e84088452` xen-blkback: fix persistent grants negotiation `b788508a09` KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU doesn't support global_ctrl `6b4addec2f` KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU `46ec3d8e90` KVM: x86/pmu: Introduce the ctrl_mask value for fixed counter `2ba1feb143` KVM: x86/pmu: Use different raw event masks for AMD and Intel `4bbfc055d3` KVM: x86/pmu: Use binary search to check filtered events `441726394e` KVM: x86/pmu: preserve IA32_PERF_CAPABILITIES across CPUID refresh `a7d0b21c6b` KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4 `c72a9b1d0d` KVM: x86: Move vendor CR4 validity check to dedicated kvm_x86_ops hook `2f04a04d06` KVM: SVM: Drop VMXE check from svm_set_cr4() `da7f731f2e` KVM: VMX: Drop explicit 'nested' check from vmx_set_cr4() `8b8b376903` KVM: VMX: Drop guest CPUID check for VMXE in vmx_set_cr4() `5f3c8352cc` ACPI: CPPC: Do not prevent CPPC from working in the future `40d28ae576` btrfs: reset block group chunk force if we have to wait `e2f1507303` btrfs: reject log replay if there is unsupported RO compat flag `b58294ce1a` um: Allow PM with suspend-to-idle `c6cf21d8d5` timekeeping: contribute wall clock to rng on time change `5e2cf70515` dm thin: fix use-after-free crash in dm_sm_register_threshold_callback `539c20ad26` kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification `782e73acdb` dm writecache: set a default MAX_WRITEBACK_JOBS `e41b3b8831` serial: 8250: Fold EndRun device support into OxSemi Tornado code `194dc559e6` serial: 8250_pci: Replace dev_() by pci_() macros `297e2fd08a` serial: 8250_pci: Refactor the loop in pci_ite887x_init() `3110e5a49b` serial: 8250: Correct the clock for OxSemi PCIe devices `3e9baedb32` serial: 8250: Dissociate 4MHz Titan ports from Oxford ports `85d6306a87` PCI/AER: Iterate over error counters instead of error strings `d83d886e69` PCI/ERR: Recover from RCEC AER errors `bb6990fd37` PCI/ERR: Add pci_walk_bridge() to pcie_do_recovery() `7730ba6151` PCI/ERR: Avoid negated conditional for clarity `078d79fad5` PCI/ERR: Use "bridge" for clarity in pcie_do_recovery() `2e3458b995` PCI/ERR: Simplify by computing pci_pcie_type() once `f236fa3850` PCI/ERR: Simplify by using pci_upstream_bridge() `de4534ac28` PCI/ERR: Rename reset_link() to reset_subordinates() `78d431e8a5` PCI/ERR: Bind RCEC devices to the Root Port driver `dce8d7427c` PCI/AER: Write AER Capability only when we control it `5659efdadf` iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) `e7ccee2f09` KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) `f5385a590d` KVM: set_msr_mce: Permit guests to ignore single-bit ECC errors `6a84dae3a7` intel_th: pci: Add Raptor Lake-S CPU support `581f7eb8ae` intel_th: pci: Add Raptor Lake-S PCH support `36f5ddde67` intel_th: pci: Add Meteor Lake-P support `08272646cd` firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails `bc945ca496` usbnet: smsc95xx: Avoid link settings race on interrupt reception `e9733561e9` usbnet: smsc95xx: Don't clear read-only PHY interrupt `04c9d23ac3` mtd: rawnand: arasan: Fix clock rate in NV-DDR `dc0e4a10b4` mtd: rawnand: arasan: Support NV-DDR interface `87d1266b4c` mtd: rawnand: arasan: Fix a macro parameter `d4f7bcce90` mtd: rawnand: Add NV-DDR timings `72fae7e7f7` mtd: rawnand: arasan: Check the proposed data interface is supported `c91e5215a4` mtd: rawnand: Add a helper to clarify the interface configuration `ae1e2bc7bf` drm/vc4: drv: Adopt the dma configuration from the HVS or V3D component `fe695a2b46` HID: hid-input: add Surface Go battery quirk `434c4aad53` HID: Ignore battery for Elan touchscreen on HP Spectre X360 15-df0xxx `2d05cf1069` drm/mediatek: Keep dsi as LP00 before dcs cmds transfer `3117287578` drm/mediatek: Allow commands to be sent during video mode `a3a85c045a` drm/i915/dg1: Update DMC_DEBUG3 register `dd02510fb4` spmi: trace: fix stack-out-of-bound access in SPMI tracing functions `bc8c5b3b3e` __follow_mount_rcu(): verify that mount_lock remains unchanged `bda7046d4d` Input: gscps2 - check return value of ioremap() in gscps2_probe() `541840859a` posix-cpu-timers: Cleanup CPU timers before freeing them during exec `ce19182b43` x86/olpc: fix 'logical not is only applied to the left hand side' `43e059d016` ftrace/x86: Add back ftrace_expected assignment `fd96b61389` x86/bugs: Enable STIBP for IBPB mitigated RETBleed `1118020b3b` scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests `912408ba0b` scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os `82cb0ebe5b` scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection `7941ca578c` scsi: qla2xxx: Turn off multi-queue for 8G adapters `2ffe5285ea` scsi: qla2xxx: Fix discovery issues in FC-AL topology `b8aad5eba7` scsi: zfcp: Fix missing auto port scan and thus missing target ports `5e0da18956` video: fbdev: s3fb: Check the size of screen before memset_io() `09e733d6ac` video: fbdev: arkfb: Check the size of screen before memset_io() `bd8269e576` video: fbdev: vt8623fb: Check the size of screen before memset_io() `a9943942a5` x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y `e6c228b950` sched: Fix the check of nr_running at queue wakelist `bd1ebcbbf0` tools/thermal: Fix possible path truncations `0288fa799e` video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() `94398c1fec` x86/numa: Use cpumask_available instead of hardcoded NULL check `336626564b` sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed `0039189a3b` sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() `e695256d46` scripts/faddr2line: Fix vmlinux detection on arm64 `232f4aca40` genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO `cadeb5186e` powerpc/pci: Fix PHB numbering when using opal-phbid `2a49b025c3` kprobes: Forbid probing on trampoline and BPF code areas `4296089f61` perf symbol: Fail to read phdr workaround `00dc7cbbb5` powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address `6d1e53f7f1` powerpc/xive: Fix refcount leak in xive_get_max_prio `85aff6a9b7` powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader `50e7896c8e` f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time `ec769406d0` f2fs: write checkpoint during FG_GC `d031105739` f2fs: don't set GC_FAILURE_PIN for background GC `47a8fe1b15` powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias `7ac58a83d8` powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32 `2d2b6adb22` ASoC: mchp-spdifrx: disable end of block interrupt on failures `ca326aff6b` video: fbdev: sis: fix typos in SiS_GetModeID() `da276dc288` video: fbdev: amba-clcd: Fix refcount leak bugs `345208581c` watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe() `d3e6460619` ASoC: audio-graph-card: Add of_node_put() in fail path `92644d505b` fuse: Remove the control interface for virtio-fs `60e494b4d5` ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp() `5682b4f84a` ASoC: fsl_easrc: use snd_pcm_format_t type for sample_format `9c2ad32ed9` s390/zcore: fix race when reading from hardware system area `ae921d176b` s390/dump: fix old lowcore virtual vs physical address confusion `b002a71d45` perf tools: Fix dso_id inode generation comparison `2ada6b4a80` iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop `afdbadbf18` mfd: max77620: Fix refcount leak in max77620_initialise_fps `52ae9c1599` mfd: t7l66xb: Drop platform disable callback `5a0e3350c2` remoteproc: sysmon: Wait for SSCTL service to come up `3487aa558a` lib/smp_processor_id: fix imbalanced instrumentation_end() call `483ad8a16f` kfifo: fix kfifo_to_user() return type `9715809b9e` rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge `0ce20194b4` iommu/exynos: Handle failed IOMMU device registration properly `8fd063a608` tty: n_gsm: fix missing corner cases in gsmld_poll() `01c8094bed` tty: n_gsm: fix DM command `6737d4f5f5` tty: n_gsm: fix wrong T1 retry count handling `b16d653bc7` vfio/ccw: Do not change FSM state in subchannel event `db574d3bb6` vfio/mdev: Make to_mdev_device() into a static inline `a2fbf4acd2` vfio: Split creation of a vfio_device into init and register ops `f54fa910e6` vfio: Simplify the lifetime logic for vfio_device `0abdb80e81` vfio: Remove extra put/gets around vfio_device->group `cb83b12320` remoteproc: qcom: wcnss: Fix handling of IRQs `2f735069cd` ASoC: qcom: Fix missing of_node_put() in asoc_qcom_lpass_cpu_platform_probe() `273d412177` tty: n_gsm: fix race condition in gsmld_write() `2466486cae` tty: n_gsm: fix packet re-transmission without open control channel `34c9fe392d` tty: n_gsm: fix non flow control frames during mux flow off `006e9d5a98` tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output() `c45b5d24fe` tty: n_gsm: fix user open not possible at responder until initiator open `9e38020f17` tty: n_gsm: Delete gsmtty open SABM frame when config requester `d94a552183` ASoC: samsung: change gpiod_speaker_power and rx1950_audio from global to static variables `875b2bf469` powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable `ba889da9a0` ASoC: samsung: h1940_uda1380: include proepr GPIO consumer header `4046f3ef3b` profiling: fix shift too large makes kernel panic `3bf64b9cc6` selftests/livepatch: better synchronize test_klp_callbacks_busy `75358732af` remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init `2aa8737d49` rpmsg: mtk_rpmsg: Fix circular locking dependency `1d5fc40382` ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV `4181b21418` ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV `4b171ac88c` serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() `d98dd16d3d` serial: 8250: Export ICR access helpers for internal use `403d469719` ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe `132b2757c5` ASoC: codecs: da7210: add check for i2c_add_driver `a0381a9f3e` ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe `aa1214ece3` ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe `ec0c272b18` ASoC: samsung: Fix error handling in aries_audio_probe `bae95c5aee` ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe `e2a4e46f52` opp: Fix error check in dev_pm_opp_attach_genpd() `3b97370322` usb: cdns3: Don't use priv_dev uninitialized in cdns3_gadget_ep_enable() `f7161d0da9` jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted `a6d7f22473` ext4: recover csum seed of tmp_inode after migrating to extents `914bf4aa2d` jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction() `706960d328` nvme: use command_id instead of req->tag in trace_nvme_complete_rq() `7a4b46784a` null_blk: fix ida error handling in null_add_dev() `3ef491b26c` RDMA/rxe: Fix error unwind in rxe_create_qp() `53da1f0fa0` RDMA/mlx5: Add missing check for return value in get namespace flow `c0ba87f3e7` selftests: kvm: set rax before vmcall `4ffa6cecb5` mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region `de95b52d9a` RDMA/srpt: Fix a use-after-free `d14a44cf29` RDMA/srpt: Introduce a reference count in struct srpt_device `204a8486d7` RDMA/srpt: Duplicate port name members `5ba56d9bd0` platform/olpc: Fix uninitialized data in debugfs write `7af83bb516` usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() `a916e80360` USB: serial: fix tty-port initialized comments `b1124a2f47` PCI: tegra194: Fix link up retry sequence `88a694d9c8` PCI: tegra194: Fix Root Port interrupt handling `e2d132ca7f` HID: alps: Declare U1_UNICORN_LEGACY support `74e57439e2` mmc: cavium-thunderx: Add of_node_put() when breaking out of loop `3bed7b9811` mmc: cavium-octeon: Add of_node_put() when breaking out of loop `66c8e816f2` HID: mcp2221: prevent a buffer overflow in mcp_smbus_write() `26975d8ea9` gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() `a85c7dd1ed` RDMA/hfi1: fix potential memory leak in setup_base_ctxt() `9ade92ddaf` RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event `0ecc91cf96` RDMA/hns: Fix incorrect clearing of interrupt status register `79ce50ddda` RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() `aaa1a81506` RDMA/qedr: Improve error logs for rdma_alloc_tid error return `84f83a2619` RDMA/rtrs-srv: Fix modinfo output for stringify `50a249ad1d` RDMA/rtrs: Avoid Wtautological-constant-out-of-range-compare `2b3dcfbece` RDMA/rtrs: Define MIN_CHUNK_SIZE `993cd16211` um: random: Don't initialise hwrng struct with zero `a6a7f80e62` interconnect: imx: fix max_node_id `5bcc37dc24` eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write() `4ab5662cc3` usb: dwc3: qcom: fix missing optional irq warnings `d376ca6716` usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup `251572a26d` usb: dwc3: core: Deprecate GCTL.CORESOFTRESET `e6db5780c2` usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() `c818fa991c` usb: gadget: udc: amd5536 depends on HAS_DMA `d6d344eeef` xtensa: iss: fix handling error cases in iss_net_configure() `fb4c1555f9` xtensa: iss/network: provide release() callback `2fe0b06c16` scsi: smartpqi: Fix DMA direction for RAID requests `7542130af1` PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks `ee70aa214a` PCI/portdrv: Don't disable AER reporting in get_port_device_capability() `9d216035d1` KVM: s390: pv: leak the topmost page table when destroy fails `59fd7c0b41` mmc: block: Add single read for 4k sector cards `2985acdaf2` mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R `9260a154b3` memstick/ms_block: Fix a memory leak `ae2369ac42` memstick/ms_block: Fix some incorrect memory allocation `b305475df7` mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch `028c8632a2` staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback `6ae2881c1d` intel_th: msu: Fix vmalloced buffers `81222cfda6` intel_th: msu-sink: Potential dereference of null pointer `a8f3b78b1f` intel_th: Fix a resource leak in an error handling path `ab3b82435f` PCI: endpoint: Don't stop controller when unbinding endpoint function `b9b4992f89` dmaengine: sf-pdma: Add multithread support for a DMA channel `37e1d474a3` dmaengine: sf-pdma: apply proper spinlock flags in sf_pdma_prep_dma_memcpy() `38715a0ccb` KVM: arm64: Don't return from void function `fbd7b564f9` soundwire: bus_type: fix remove and shutdown support `ed457b0029` PCI: dwc: Always enable CDM check if "snps,enable-cdm-check" exists `e7599a5974` PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors `80d9f6541e` PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu() `2293b23d27` clk: qcom: camcc-sdm845: Fix topology around titan_top power domain `b28ebe7d2f` clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks `b83af7b4ec` clk: qcom: ipq8074: fix NSS port frequency tables `58023f5291` clk: qcom: ipq8074: SW workaround for UBI32 PLL lock `e2330494f0` clk: qcom: ipq8074: fix NSS core PLL-s `b840c2926d` usb: host: xhci: use snprintf() in xhci_decode_trb() `42f1827096` clk: qcom: clk-krait: unlock spin after mux completion `a93f33aeef` driver core: fix potential deadlock in __driver_attach `2593f971f0` misc: rtsx: Fix an error handling path in rtsx_pci_probe() `267c5f17a0` dmaengine: dw-edma: Fix eDMA Rd/Wr-channels and DMA-direction semantics `956b79c206` mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv `803526555b` mwifiex: Ignore BTCOEX events from the 88W8897 firmware `dceedbb5ab` KVM: Don't set Accessed/Dirty bits for ZERO_PAGE `02d203f488` clk: mediatek: reset: Fix written reset bit offset `4f51a09f3d` iio: accel: bma400: Reordering of header files `ab831a12c8` platform/chrome: cros_ec: Always expose last resume result `366d0123c3` iio: accel: bma400: Fix the scale min and max macro values `edfa0851d8` netfilter: xtables: Bring SPDX identifier back `9feb3ecd07` usb: xhci: tegra: Fix error check `bb5e59f00f` usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init() `d35903e965` usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe `585d22a562` usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe `474f12deaa` fpga: altera-pr-ip: fix unsigned comparison with less than zero `175428c86f` mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path `55d0f7da66` mtd: partitions: Fix refcount leak in parse_redboot_of `b4e150d295` mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release `ebda3d6b00` HID: cp2112: prevent a buffer overflow in cp2112_xfer() `cdf92a0aee` PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep() `b0e82f95fd` mtd: rawnand: meson: Fix a potential double free issue `941ef6997f` mtd: maps: Fix refcount leak in ap_flash_init `52ae2b14f7` mtd: maps: Fix refcount leak in of_flash_probe_versatile `6471c83894` clk: renesas: r9a06g032: Fix UART clkgrp bitsel `38c9cc68e3` wireguard: allowedips: don't corrupt stack when detecting overflow `17541a4aab` wireguard: ratelimiter: use hrtimer in selftest `aa8f559336` dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock `5b69f34dac` net: ionic: fix error check for vlan flags in ionic_set_nic_features() `9a070a4417` net: rose: fix netdev reference changes `397e52dec1` netdevsim: Avoid allocation warnings triggered from user space `692751f260` iavf: Fix max_rate limiting `b0d67ef5b4` net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set `1d9c81833d` tcp: Fix data-races around sysctl_tcp_l3mdev_accept. `0de9b3f81e` ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH() `b7325b27d8` tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() `f7884d9500` inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH() `c206177ca8` crypto: hisilicon/sec - fix auth key size error `9524edb1a7` crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of `cb62775079` crypto: hisilicon/hpre - don't use GFP_KERNEL to alloc mem during softirq `e6cbd15950` net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS `1f7ffdea19` net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version `420cf3b781` media: cedrus: hevc: Add check for invalid timestamp `97e5d3e46a` wifi: libertas: Fix possible refcount leak in if_usb_probe() `38d71acc15` wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue `6c5fee83bd` wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` `c040a02e4c` i2c: mux-gpmux: Add of_node_put() when breaking out of loop `353d55ff1b` i2c: cadence: Support PEC for SMBus block read `0c5dbac1ce` Bluetooth: hci_intel: Add check for platform_driver_register `a7a7488cb1` can: pch_can: pch_can_error(): initialize errc before using it `4c036be757` can: error: specify the values of data[5..7] of CAN error frames `f0ef21b739` can: usb_8dev: do not report txerr and rxerr during bus-off `ca1a2c5388` can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off `9e6ceba6be` can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off `cddef4bbeb` can: sun4i_can: do not report txerr and rxerr during bus-off `22e382d47d` can: hi311x: do not report txerr and rxerr during bus-off `06e355b46c` can: sja1000: do not report txerr and rxerr during bus-off `6ec509679b` can: rcar_can: do not report txerr and rxerr during bus-off `5d85a89875` can: pch_can: do not report txerr and rxerr during bus-off `d2b9e664bb` selftests/bpf: fix a test for snprintf() overflow `a06c98c47e` wifi: p54: add missing parentheses in p54_flush() `56924fc19d` wifi: p54: Fix an error handling path in p54spi_probe() `05ceda14ef` wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() `36ba389960` fs: check FMODE_LSEEK to control internal pipe splicing `7430e58764` bpf: Fix subprog names in stack traces. `990ca39e78` selftests: timers: clocksource-switch: fix passing errors from child `ee3cc4c761` selftests: timers: valid-adjtimex: build fix for newer toolchains `f29cf37698` libbpf: Fix the name of a reused map `799cfed1b1` tcp: make retransmitted SKB fit into the send window `5713b0be6d` drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed. `9aa4ad5cca` mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() `3ad958bc48` mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg `b1812f6500` media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment `1008c6d98b` crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq `16e18a8ac7` crypto: hisilicon/sec - don't sleep when in softirq `1f697d7952` crypto: hisilicon/sec - fixes some coding style `bf386c955f` drm/msm/mdp5: Fix global state lock backoff `e74f3097a9` net: hinic: avoid kernel hung in hinic_get_stats64() `e286a882f2` net: hinic: fix bug that ethtool get wrong stats `8369a39b52` hinic: Use the bitmap API when applicable `26a10aef28` lib: bitmap: provide devm_bitmap_alloc() and devm_bitmap_zalloc() `1238da5f32` lib: bitmap: order includes alphabetically `7f29d75693` drm: bridge: sii8620: fix possible off-by-one `8bb0be3186` drm/mediatek: dpi: Only enable dpi after the bridge is enabled `c47d69ed56` drm/mediatek: dpi: Remove output format of YUV `fc85cb33f6` drm/rockchip: Fix an error handling path rockchip_dp_probe() `9f416e32ed` drm/rockchip: vop: Don't crash for invalid duplicate_state() `e2d2dcab19` selftests/xsk: Destroy BPF resources only when ctx refcount drops to 0 `64b1e3f904` crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE `2e306d74ad` drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes `36f797a10f` drm/vc4: hdmi: Fix timings for interlaced modes `717325e814` drm/vc4: hdmi: Limit the BCM2711 to the max without scrambling `c015d12317` drm/vc4: hdmi: Don't access the connector state in reset if kmalloc fails `ba8ffdb450` drm/vc4: hdmi: Avoid full hdmi audio fifo writes `b161b27067` drm/vc4: hdmi: Remove firmware logic for MAI threshold setting `cefc8e7e0e` drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration `acfca24ec0` drm/vc4: dsi: Fix dsi0 interrupt support `97c2fa3a7b` drm/vc4: dsi: Register dsi0 as the correct vc4 encoder type `6cc1edddcf` drm/vc4: dsi: Introduce a variant structure `79374da862` drm/vc4: dsi: Use snprintf for the PHY clocks instead of an array `1f98187a7c` drm/vc4: drv: Remove the DSI pointer in vc4_drv `ed2f42bd80` drm/vc4: dsi: Correct pixel order for DSI0 `ddf6af3b0b` drm/vc4: dsi: Correct DSI divider calculations `f517da5234` drm/vc4: plane: Fix margin calculations for the right/bottom edges `5aec7cb08b` drm/vc4: plane: Remove subpixel positioning check `611f86965d` media: tw686x: Fix memory leak in tw686x_video_init `7f7336ce35` media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set `bb480bffc1` media: hdpvr: fix error value returns in hdpvr_read `f57699a9b6` drm/mcde: Fix refcount leak in mcde_dsi_bind `6a43236ebc` drm: bridge: adv7511: Add check for mipi_dsi_driver_register `87af9b0b45` crypto: ccp - During shutdown, check SEV data pointer before using `5f8a6e8f14` test_bpf: fix incorrect netdev features `45e1dbe5f6` drm/radeon: fix incorrrect SPDX-License-Identifiers `e7d6cac696` wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() `eccd7c3e25` ath9k: fix use-after-free in ath9k_hif_usb_rx_cb `918f42ca1d` media: tw686x: Register the irq at the end of probe `d45eaf4114` crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs() `81cb317568` i2c: Fix a potential use after free `d0412d8f69` net: fix sk_wmem_schedule() and sk_rmem_schedule() errors `0e70bb9cdb` crypto: sun8i-ss - fix error codes in allocate_flows() `e8673fbc10` crypto: sun8i-ss - do not allocate memory when handling hash requests `648b1bb29a` drm: adv7511: override i2c address of cec before accessing it `259773fc87` virtio-gpu: fix a missing check to avoid NULL dereference `e28aa4f467` i2c: npcm: Correct slave role behavior `385f6ef4de` i2c: npcm: Remove own slave addresses 2:10 `5ce9cff371` drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function `b54bc0013d` drm/mediatek: Separate poweron/poweroff from enable/disable and define new funcs `0cb6589885` drm/mediatek: Modify dsi funcs to atomic operations `8508d6d23a` drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() `ac22537643` ath11k: Fix incorrect debug_mask mappings `648d3c8714` drm/mipi-dbi: align max_chunk to 2 in spi_transfer `a2c45f8c3d` ath11k: fix netdev open race `58fd794675` wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() `71426d31d0` drm/st7735r: Fix module autoloading for Okaya RH128128T `fd98ccda50` ath10k: do not enforce interrupt trigger type `bcc05372a2` drm/bridge: tc358767: Make sure Refclk clock are enabled `c038b9b733` drm/bridge: tc358767: Move (e)DP bridge endpoint parsing into dedicated function `f312bc33ca` pwm: lpc18xx-sct: Convert to devm_platform_ioremap_resource() `6aaac1d924` pwm: sifive: Shut down hardware only after pwmchip_remove() completed `9073dbec88` pwm: sifive: Ensure the clk is enabled exactly once per running PWM `47902de24a` pwm: sifive: Simplify offset calculation for PWMCMP registers `6d7f7ffbcd` pwm: sifive: Don't check the return code of pwmchip_remove() `b7e2d64d67` dm: return early from dm_pr_call() if DM device is suspended `b3f5cc0cc0` thermal/tools/tmon: Include pthread and time headers in tmon.h `7aa3a25599` selftests/seccomp: Fix compile warning when CC=clang `e06a31e61f` nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() `298417471e` drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX `a1891d3df7` arm64: dts: qcom: qcs404: Fix incorrect USB2 PHYs assignment `a7753a260e` soc: qcom: Make QCOM_RPMPD depend on PM `332e555dca` regulator: of: Fix refcount leak bug in of_get_regulation_constraints() `1ed71e6bce` blktrace: Trace remapped requests correctly `1cb3032406` block: remove the request_queue to argument request based tracepoints `d125b13a66` hwmon: (drivetemp) Add module alias `ed6ae23811` blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created `0ca556256f` erofs: avoid consecutive detection for Highmem memory `8dee22b457` arm64: tegra: Fix SDMMC1 CD on P2888 `a1e2386909` arm64: dts: mt7622: fix BPI-R64 WPS button `7eafa9a1aa` bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() `7fcf4401d5` ARM: dts: qcom: pm8841: add required thermal-sensor-cells `97713ed9b6` soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register `07aea6819d` soc: qcom: ocmem: Fix refcount leak in of_get_ocmem `71042279b1` ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP `5f29b045da` regulator: qcom_smd: Fix pm8916_pldo range `22e6d8bcde` cpufreq: zynq: Fix refcount leak in zynq_get_revision `d294d60dc6` ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init `14bac0c703` ARM: OMAP2+: Fix refcount leak in omapdss_init_of `fdcb1fdbdc` ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg `c32d5491c8` block: fix infinite loop for invalid zone append `2d9a1a96eb` soc: fsl: guts: machine variable might be unset `4cea839177` locking/lockdep: Fix lockdep_init_map_() confusion `87e415aec4` arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 `30119131e3` hexagon: select ARCH_WANT_LD_ORPHAN_WARN `9d744229cd` ARM: dts: ast2600-evb: fix board compatible `75a24da2b9` ARM: dts: ast2500-evb: fix board compatible `2c07688d3e` x86/pmem: Fix platform-device leak in error path `6a28f363d3` arm64: dts: renesas: Fix thermal-sensors on single-zone sensors `80c469e63b` soc: amlogic: Fix refcount leak in meson-secure-pwrc.c `6cd8ba0c0b` soc: renesas: r8a779a0-sysc: Fix A2DP1 and A2CV[2357] PDR values `6771609e19` Input: atmel_mxt_ts - fix up inverted RESET handler `11903c5457` ARM: dts: imx7d-colibri-emmc: add cpu1 supply `b8b1f0d74f` ACPI: processor/idle: Annotate more functions to live in cpuidle section `91e7f04f53` ARM: bcm: Fix refcount leak in bcm_kona_smc_init `f6a6cc6d57` arm64: dts: renesas: beacon: Fix regulator node names `2691b8780f` meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init `ccf56ea52b` ARM: findbit: fix overflowing offset `71fc6e0dca` spi: spi-rspi: Fix PIO fallback on RZ platforms `4234c5f34e` powerpc/64s: Disable stack variable initialisation for prom_init `adbfdaacde` selinux: Add boundary check in put_entry() `003a456ae6` PM: hibernate: defer device probing when resuming from hibernation `70bccff899` firmware: tegra: Fix error check return value of debugfs_create_file() `c2e53a1b07` ARM: shmobile: rcar-gen2: Increase refcount for new reference `f48cec5736` arm64: dts: allwinner: a64: orangepi-win: Fix LED node name `fcdc1e13e0` arm64: dts: qcom: ipq8074: fix NAND node name `931d0a574c` ACPI: LPSS: Fix missing check in register_device_clock() `d257d9b0a4` ACPI: PM: save NVS memory for Lenovo G40-45 `85bc8689a7` ACPI: EC: Drop the EC_FLAGS_IGNORE_DSDT_GPE quirk `def469523d` ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks `88d556029a` ARM: OMAP2+: display: Fix refcount leak bug `43157bc5f9` spi: synquacer: Add missing clk_disable_unprepare() `607570808a` ARM: dts: BCM5301X: Add DT for Meraki MR26 `9213e5a397` ARM: dts: imx6ul: fix qspi node compatible `976db15fee` ARM: dts: imx6ul: fix lcdif node compatible `6045ac40e3` ARM: dts: imx6ul: fix csi node compatible `c7ce841f48` ARM: dts: imx6ul: fix keypad compatible `15af2deb19` ARM: dts: imx6ul: change operating-points to uint32-matrix `278aa4c73d` ARM: dts: imx6ul: add missing properties for sram `695a3c2a82` wait: Fix __wait_event_hrtimeout for RT/DL tasks `2b8c55900d` irqchip/mips-gic: Check the return value of ioremap() in gic_of_init() `8dfb4a99b1` genirq: GENERIC_IRQ_IPI depends on SMP `f460141f29` irqchip/mips-gic: Only register IPI domain when SMP is enabled `4aba3247af` genirq: Don't return error on missing optional irq_request_resources() `d08bb199a4` ext2: Add more validity checks for inode counts `353b4673d0` arm64: fix oops in concurrently setting insn_emulation sysctls `913f173237` arm64: Do not forget syscall when starting a new thread. `fb086aea39` x86: Handle idle=nomwait cmdline properly for x86_idle `48c3900210` epoll: autoremove wakers even more aggressively `80977126bc` netfilter: nf_tables: fix null deref due to zeroed list head `0cc5c6b756` netfilter: nf_tables: do not allow RULE_ID to refer to another chain `9e7dcb88ec` netfilter: nf_tables: do not allow CHAIN_ID to refer to another table `1a4b18b1ff` netfilter: nf_tables: do not allow SET_ID to refer to another table `19bf7199c3` lockdep: Allow tuning tracing capacity constants. `f294829fb4` usb: dwc3: gadget: fix high speed multiplier setting `fc2a039cdb` usb: dwc3: gadget: refactor dwc3_repare_one_trb `9a3a61bd73` arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC `63228d8328` ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC `4d7da7e565` USB: HCD: Fix URB giveback issue in tasklet function `37c7fe9b31` usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion `847b9273dd` coresight: Clear the connection field properly `807adf6ffa` MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK `26d767990e` powerpc/powernv: Avoid crashing if rng is NULL `3db593ab8e` powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E `b326b8d6ae` powerpc/fsl-pci: Fix Class Code of PCIe Root Port `39c51471ef` PCI: Add defines for normal and subtractive PCI bridges `23c2f921f2` ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() `2f36ba13cb` media: [PATCH] pci: atomisp_cmd: fix three missing checks on list iterator `5fd4ffa237` md-raid10: fix KASAN warning `e0bdaed154` md-raid: destroy the bitmap after destroying the thread `3bdda8656a` serial: mvebu-uart: uart2 error bits clearing `cfe17ae313` fuse: limit nsec `e63ea5814b` scsi: qla2xxx: Zero undefined mailbox IN registers `6f18b5ad2d` scsi: qla2xxx: Fix incorrect display of max frame size `408bfa1489` scsi: sg: Allow waiting for commands to complete on removed device `fb1888205c` iio: light: isl29028: Fix the warning in isl29028_remove() `fb7eea3946` mtd: rawnand: arasan: Update NAND bus clock instead of system clock `15d0aeb017` drm/amdgpu: Check BO's requested pinning domains against its preferred_domains `55f5584427` drm/nouveau/acpi: Don't print error when we get -EINPROGRESS from pm_runtime `92050011e0` drm/nouveau: Don't pm_runtime_put_sync(), only pm_runtime_put_autosuspend() `ca0742a8ed` drm/nouveau: fix another off-by-one in nvbios_addr `de63dbc296` drm/vc4: hdmi: Disable audio if dmas property is present but empty `1ff71d4f53` drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error `043f4642c1` parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode `fc3918d70b` parisc: Check the return value of ioremap() in lba_driver_probe() `b0dfba6d3b` parisc: Fix device names in /proc/iomem `542d2e799d` ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() `135199a2ed` usbnet: Fix linkwatch use-after-free on disconnect `d65c3fcd6d` fbcon: Fix accelerated fbdev scrolling while logo is still shown `16badd9987` fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters `826955eebc` thermal: sysfs: Fix cooling_device_stats_setup() error code path `60a8f0e62a` fs: Add missing umask strip in vfs_tmpfile `cf65b5bfac` vfs: Check the truncate maximum size in inode_newsize_ok() `5c6c65681f` tty: vt: initialize unicode screen buffer `f9b244e541` ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED `7b9ee47c28` ALSA: hda/realtek: Add quirk for another Asus K42JZ model `c366ccad5b` ALSA: hda/cirrus - support for iMac 12,1 model `f2b72c51c2` ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model `2613baa3ab` mm/mremap: hold the rmap lock in write mode when moving page table entries. `0a69f1f842` xfs: fix I_DONTCACHE `e32bb24281` xfs: only set IOMAP_F_SHARED when providing a srcmap to a write `f5f3e54f81` mm: Add kvrealloc() `3ff605513f` riscv: set default pm_power_off to NULL `230e369d49` KVM: x86: Tag kvm_mmu_x86_module_init() with __init `0dd8ba6670` KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP `68ba319b88` KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks `b670a58549` KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value `e9c55562b3` KVM: s390: pv: don't present the ecall interrupt twice `8bb6834902` KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 `860e334395` KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case `ab4805c263` KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case `40593c5898` HID: wacom: Don't register pad_input for touch switch `0ba645def7` HID: wacom: Only report rotation for art pen `57f2ee517d` add barriers to buffer_uptodate and set_buffer_uptodate `6dece5ad6e` wifi: mac80211_hwsim: use 32-bit skb cookie `d400222f49` wifi: mac80211_hwsim: add back erroneously removed cast `eb8fc4277b` wifi: mac80211_hwsim: fix race condition in pending packet `9a22b1f7da` ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx `d909d9bdc8` ALSA: hda/realtek: Add quirk for Clevo NV45PZ `348620464a` ALSA: bcd2000: Fix a UAF bug on the error path of probing `101e0c052d` scsi: Revert "scsi: qla2xxx: Fix disk failure to rediscover" `14eb40fd79` Revert "pNFS: nfs3_set_ds_client should set NFS_CS_NOPING" `4ad6a94c68` x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments `8f4f2c9b98` Makefile: link with -z noexecstack --no-warn-rwx-segments Add the following symbol as needed by the -lts merge: Leaf changes summary: 1 artifact changed Changed leaf types summary: 0 leaf type changed Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 1 Added function Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 0 Added variable 1 Added function: [A] 'function ssize_t strscpy_pad(char, const char*, size_t)' Change-Id: I7b4e08152fafe9bf2285afd207af47481eb9c774 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2022-11-29 14:09:15 +00:00
Greg Kroah-Hartman	0b500f5b16	This is the 5.10.150 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmNZGa8ACgkQONu9yGCS aT48lBAA04ORlv/P+tkaLh7gkJjuvnbsemni3KXdpq0hcOfUIpdquUvU06tD7T/P cnM20NPgBR+IZ1sIcGWdPhTpIOEId9yxu84HQT5ctOjAZPuGg98s2JOQaXWD3Jh2 g88kbWgMeThfrJebPYZMofy5vRSZ5eMatAixhtjaM/2b/MXDSu2rIL4AoHZ99CKr wovy1r1bN2niJADu8DwC+jANrPTfStMsjJ9dcOpAqVt83EKz0j3ktCDfzcUftFIw z4y5leEx1qftUOWtY1DKPZEAhMZSpjZYLC1nldopwEl2JvZ7z9aGx3fFJyr/7zOt 4/mNWT2Ra4S9Tqn2RuFnCdWfqGBOmrE0AJf37IdEdpnlcXol6NaGu4LsQsQq4ffk DxPc6tN6BGY1XXh+pNSlSW7jsXx6jbJ+OnL8JpSXV49ZOofz3XPTHQ/8tJEttfO4 rURa3iMk4GFeORw+mrHKOVJuWcfpnjVoxStGv6XiKqPpHjwbtB8ZGBlr9pMDYDQP i2RBwkr/cz5JJzlaA4Q/n96nbZFAKpsiy0Vh1MWboxxlojIqLe3yIlZT6b2M3CFf jsoqlLfaBjBa7RGQP1rW/im2SqxG2ftTiRdGZXPvjEZKnfIpUZEFszD9TmSuIk8f uuJY2Tj6rSJ2nJPS0iui/KVQ78IWLz9PG3Xwm5E2A9QcPz1JAfk= =pfwB -----END PGP SIGNATURE----- Merge 5.10.150 into android12-5.10-lts Changes in 5.10.150 ALSA: oss: Fix potential deadlock at unregistration ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() ALSA: usb-audio: Fix potential memory leaks ALSA: usb-audio: Fix NULL dererence at error path ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 ALSA: hda/realtek: Correct pin configs for ASUS G533Z ALSA: hda/realtek: Add quirk for ASUS GV601R laptop ALSA: hda/realtek: Add Intel Reference SSID to support headset keys mtd: rawnand: atmel: Unmap streaming DMA mappings cifs: destage dirty pages before re-reading them for cache=none cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message iio: dac: ad5593r: Fix i2c read protocol requirements iio: ltc2497: Fix reading conversion results iio: adc: ad7923: fix channel readings for some variants iio: pressure: dps310: Refactor startup procedure iio: pressure: dps310: Reset chip after timeout usb: add quirks for Lenovo OneLink+ Dock can: kvaser_usb: Fix use of uninitialized completion can: kvaser_usb_leaf: Fix overread with an invalid command can: kvaser_usb_leaf: Fix TX queue out of sync after restart can: kvaser_usb_leaf: Fix CAN state after restart mmc: sdhci-sprd: Fix minimum clock limit fs: dlm: fix race between test_bit() and queue_work() fs: dlm: handle -EBUSY first in lock arg validation HID: multitouch: Add memory barriers quota: Check next/prev free block number after reading from quota file platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure ASoC: wcd9335: fix order of Slimbus unprepare/disable ASoC: wcd934x: fix order of Slimbus unprepare/disable hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API regulator: qcom_rpm: Fix circular deferral regression RISC-V: Make port I/O string accessors actually work parisc: fbdev/stifb: Align graphics memory size to 4MB riscv: Allow PROT_WRITE-only mmap() riscv: Make VM_WRITE imply VM_READ riscv: Pass -mno-relax only on lld < 15.0.0 UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK nvme-pci: set min_align_mask before calculating max_hw_sectors drm/virtio: Check whether transferred 2D BO is shmem drm/udl: Restore display mode on resume block: fix inflight statistics of part0 mm/mmap: undo ->mmap() when arch_validate_flags() fails PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain powerpc/boot: Explicitly disable usage of SPE instructions scsi: qedf: Populate sysfs attributes for vport fbdev: smscufx: Fix use-after-free in ufx_ops_open() btrfs: fix race between quota enable and quota rescan ioctl f2fs: increase the limit for reserve_root f2fs: fix to do sanity check on destination blkaddr during recovery f2fs: fix to do sanity check on summary info hardening: Clarify Kconfig text for auto-var-init hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero jbd2: wake up journal waiters in FIFO order, not LIFO jbd2: fix potential buffer head reference count leak jbd2: fix potential use-after-free in jbd2_fc_wait_bufs jbd2: add miss release buffer head in fc_do_one_pass() ext4: avoid crash when inline data creation follows DIO write ext4: fix null-ptr-deref in ext4_write_info ext4: make ext4_lazyinit_thread freezable ext4: fix check for block being out of directory size ext4: don't increase iversion counter for ea_inodes ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate ext4: place buffer head allocation before handle start ext4: fix miss release buffer head in ext4_fc_write_inode ext4: fix potential memory leak in ext4_fc_record_modified_inode() ext4: fix potential memory leak in ext4_fc_record_regions() ext4: update 'state->fc_regions_size' after successful memory allocation livepatch: fix race between fork and KLP transition ftrace: Properly unset FTRACE_HASH_FL_MOD ring-buffer: Allow splice to read previous partially read pages ring-buffer: Have the shortest_full queue be the shortest not longest ring-buffer: Check pending waiters when doing wake ups as well ring-buffer: Add ring_buffer_wake_waiters() ring-buffer: Fix race between reset page and reading page tracing: Disable interrupt or preemption before acquiring arch_spinlock_t thunderbolt: Explicitly enable lane adapter hotplug events at startup efi: libstub: drop pointless get_memory_map() call media: cedrus: Set the platform driver data earlier KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility KVM: nVMX: Unconditionally purge queued/injected events on nested "exit" KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS staging: greybus: audio_helper: remove unused and wrong debugfs usage drm/nouveau/kms/nv140-: Disable interlacing drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() drm/i915: Fix watermark calculations for gen12+ RC CCS modifier drm/i915: Fix watermark calculations for gen12+ MC CCS modifier smb3: must initialize two ACL struct fields to zero selinux: use "grep -E" instead of "egrep" userfaultfd: open userfaultfds with O_RDONLY sh: machvec: Use char[] for section boundaries MIPS: SGI-IP27: Free some unused memory MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create() ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd() ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE objtool: Preserve special st_shndx indexes in elf_update_symbol nfsd: Fix a memory leak in an error handling path wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() leds: lm3601x: Don't use mutex after it was destroyed wifi: mac80211: allow bw change during channel switch in mesh bpftool: Fix a wrong type cast in btf_dumper_int spi: mt7621: Fix an error message in mt7621_spi_probe() x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register Bluetooth: btusb: Fine-tune mt7663 mechanism. Bluetooth: btusb: fix excessive stack usage Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() selftests/xsk: Avoid use-after-free on ctx spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() wifi: rtl8xxxu: Fix skb misuse in TX queue selection spi: meson-spicc: do not rely on busy flag in pow2 clk ops bpf: btf: fix truncated last_member_type_id in btf_struct_resolve wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask net: fs_enet: Fix wrong check in do_pd_setup bpf: Ensure correct locking around vulnerable function find_vpid() Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure wifi: ath11k: fix number of VHT beamformee spatial streams x86/microcode/AMD: Track patch allocation size explicitly x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe i2c: mlxbf: support lock mechanism Bluetooth: hci_core: Fix not handling link timeouts propertly netfilter: nft_fib: Fix for rpath check with VRF devices spi: s3c64xx: Fix large transfers with DMA wifi: rtl8xxxu: Fix AIFS written to REG_EDCA__PARAM vhost/vsock: Use kvmalloc/kvfree for larger packets. mISDN: fix use-after-free bugs in l1oip timer handlers sctp: handle the error returned from sctp_auth_asoc_init_active_key tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited spi: Ensure that sg_table won't be used after being freed net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() bnx2x: fix potential memory leak in bnx2x_tpa_stop() net/ieee802154: reject zero-sized raw_sendmsg() once: add DO_ONCE_SLOW() for sleepable contexts net: mvpp2: fix mvpp2 debugfs leak drm: bridge: adv7511: fix CEC power down control register offset drm/bridge: Avoid uninitialized variable warning drm/mipi-dsi: Detach devices when removing the host drm/bridge: parade-ps8640: Fix regulator supply order drm/dp_mst: fix drm_dp_dpcd_read return value checks drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node() platform/chrome: fix double-free in chromeos_laptop_prepare() platform/chrome: fix memory corruption in ioctl ASoC: tas2764: Allow mono streams ASoC: tas2764: Drop conflicting set_bias_level power setting ASoC: tas2764: Fix mute/unmute platform/x86: msi-laptop: Fix old-ec check for backlight registering platform/x86: msi-laptop: Fix resource cleanup drm: fix drm_mipi_dbi build errors drm/bridge: megachips: Fix a null pointer dereference bug ASoC: rsnd: Add check for rsnd_mod_power_on ALSA: hda: beep: Simplify keep-power-at-enable behavior drm/omap: dss: Fix refcount leak bugs mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa() ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() ALSA: dmaengine: increment buffer pointer atomically mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe ALSA: hda/hdmi: Don't skip notification handling during PM operation memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() memory: of: Fix refcount leak bug in of_get_ddr_timings() memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() soc: qcom: smem_state: Add refcounting for the 'state->of_node' ARM: dts: turris-omnia: Fix mpp26 pin name and comment ARM: dts: kirkwood: lsxl: fix serial line ARM: dts: kirkwood: lsxl: remove first ethernet port ia64: export memory_add_physaddr_to_nid to fix cxl build error soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family ARM: Drop CMDLINE_ dependency on ATAGS arm64: ftrace: fix module PLTs with mcount ARM: dts: exynos: fix polarity of VBUS GPIO of Origen iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX iio: adc: at91-sama5d2_adc: check return status for pressure and touch iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume iio: inkern: only release the device node when done with it iio: ABI: Fix wrong format of differential capacitance channel ABI. usb: ch9: Add USB 3.2 SSP attributes usb: common: Parse for USB SSP genXxY usb: common: add function to get interval expressed in us unit usb: common: move function's kerneldoc next to its definition usb: common: debug: Check non-standard control requests clk: meson: Hold reference returned by of_get_parent() clk: oxnas: Hold reference returned by of_get_parent() clk: qoriq: Hold reference returned by of_get_parent() clk: berlin: Add of_node_put() for of_get_parent() clk: sprd: Hold reference returned by of_get_parent() clk: tegra: Fix refcount leak in tegra210_clock_init clk: tegra: Fix refcount leak in tegra114_clock_init clk: tegra20: Fix refcount leak in tegra20_clock_init HSI: omap_ssi: Fix refcount leak in ssi_probe HSI: omap_ssi_port: Fix dma_map_sg error check media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop tty: xilinx_uartps: Fix the ignore_status media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start() media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init RDMA/rxe: Fix "kernel NULL pointer dereference" error RDMA/rxe: Fix the error caused by qp->sk misc: ocxl: fix possible refcount leak in afu_ioctl() fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() dmaengine: hisilicon: Disable channels when unregister hisi_dma dmaengine: hisilicon: Fix CQ head update dmaengine: hisilicon: Add multi-thread support for a DMA channel dyndbg: fix static_branch manipulation dyndbg: fix module.dyndbg handling dyndbg: let query-modname override actual module name dyndbg: drop EXPORTed dynamic_debug_exec_queries mtd: devices: docg3: check the return value of devm_ioremap() in the probe mtd: rawnand: fsl_elbc: Fix none ECC mode RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() ata: fix ata_id_has_devslp() ata: fix ata_id_has_ncq_autosense() ata: fix ata_id_has_dipm() mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() md: Replace snprintf with scnprintf md/raid5: Ensure stripe_fill happens on non-read IO with journal RDMA/cm: Use SLID in the work completion as the DLID in responder side IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers xhci: Don't show warning for reinit on known broken suspend usb: gadget: function: fix dangling pnp_string in f_printer.c drivers: serial: jsm: fix some leaks in probe serial: 8250: Add an empty line and remove some useless {} serial: 8250: Toggle IER bits on only after irq has been set up tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown phy: qualcomm: call clk_disable_unprepare in the error handling staging: vt6655: fix some erroneous memory clean-up loops firmware: google: Test spinlock on panic path to avoid lockups serial: 8250: Fix restoring termios speed after suspend scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical fsi: core: Check error number after calling ida_simple_get mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() mfd: lp8788: Fix an error handling path in lp8788_probe() mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() mfd: fsl-imx25: Fix check for platform_get_irq() errors mfd: sm501: Add check for platform_driver_register() clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() spmi: pmic-arb: correct duplicate APID to PPID mapping logic clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD clk: baikal-t1: Fix invalid xGMAC PTP clock divider clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent clk: baikal-t1: Add SATA internal ref clock buffer clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe clk: ast2600: BCLK comes from EPLL mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg powerpc/math_emu/efp: Include module.h powerpc/sysdev/fsl_msi: Add missing of_node_put() powerpc/pci_dn: Add missing of_node_put() powerpc/powernv: add missing of_node_put() in opal_export_attrs() x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 powerpc: Fix SPE Power ISA properties for e500v1 platforms crypto: sahara - don't sleep when in softirq crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear() cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset iommu/omap: Fix buffer overflow in debugfs crypto: akcipher - default implementation for setting a private key crypto: ccp - Release dma channels before dmaengine unrgister crypto: inside-secure - Change swab to swab32 crypto: qat - fix use of 'dma_map_single' crypto: qat - use pre-allocated buffers in datapath crypto: qat - fix DMA transfer direction iommu/iova: Fix module config properly tracing: kprobe: Fix kprobe event gen test module on exit tracing: kprobe: Make gen test module work in arm and riscv kbuild: remove the target in signal traps when interrupted kbuild: rpm-pkg: fix breakage when V=1 is used crypto: marvell/octeontx - prevent integer overflows crypto: cavium - prevent integer overflow loading firmware thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id ACPI: APEI: do not add task_work to kernel thread to avoid memory leak f2fs: fix race condition on setting FI_NO_EXTENT flag f2fs: fix to avoid REQ_TIME and CP_TIME collision f2fs: fix to account FS_CP_DATA_IO correctly selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle rcu: Back off upon fill_page_cache_func() allocation failure rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE() ACPI: video: Add Toshiba Satellite/Portege Z830 quirk MIPS: BCM47XX: Cast memcmp() of function to (void *) powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash x86/entry: Work around Clang __bdos() bug NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data NFSD: fix use-after-free on source server when doing inter-server copy wifi: brcmfmac: fix invalid address access when enabling SCAN log level bpftool: Clear errno after libcap's checks openvswitch: Fix double reporting of drops in dropwatch openvswitch: Fix overreporting of drops in dropwatch tcp: annotate data-race around tcp_md5sig_pool_populated wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() xfrm: Update ipcomp_scratches with NULL when freed wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() regulator: core: Prevent integer underflow Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times can: bcm: check the result of can_send() in bcm_can_tx() wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 wifi: rt2x00: set VGC gain for both chains of MT7620 wifi: rt2x00: set SoC wmac clock register wifi: rt2x00: correctly set BBP register 86 for MT7620 net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory Bluetooth: L2CAP: Fix user-after-free r8152: Rate limit overflow messages drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() drm: Use size_t type for len variable in drm_copy_field() drm: Prevent drm_copy_field() to attempt copying a NULL pointer gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() drm/amd/display: fix overflow on MIN_I64 definition udmabuf: Set ubuf->sg = NULL if the creation of sg table fails drm: bridge: dw_hdmi: only trigger hotplug event on link change drm/vc4: vec: Fix timings for VEC modes drm: panel-orientation-quirks: Add quirk for Anbernic Win600 platform/chrome: cros_ec: Notify the PM of wake events during resume platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading ASoC: SOF: pci: Change DMI match info to support all Chrome platforms drm/amdgpu: fix initial connector audio value drm/meson: explicitly remove aggregate driver at module unload time mmc: sdhci-msm: add compatible string check for sdm670 drm/dp: Don't rewrite link config when setting phy test pattern drm/amd/display: Remove interface for periodic interrupt 1 ARM: dts: imx7d-sdb: config the max pressure for tsc2046 ARM: dts: imx6q: add missing properties for sram ARM: dts: imx6dl: add missing properties for sram ARM: dts: imx6qp: add missing properties for sram ARM: dts: imx6sl: add missing properties for sram ARM: dts: imx6sll: add missing properties for sram ARM: dts: imx6sx: add missing properties for sram kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply btrfs: scrub: try to fix super block errors clk: zynqmp: Fix stack-out-of-bounds in strncpy` media: cx88: Fix a null-ptr-deref bug in buffer_prepare() clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate usb: host: xhci-plat: suspend and resume clocks usb: host: xhci-plat: suspend/resume clks for brcm scsi: 3w-9xxx: Avoid disabling device if failing to enable it nbd: Fix hung when signal interrupts nbd_start_device_ioctl() power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() staging: vt6655: fix potential memory leak blk-throttle: prevent overflow while calculating wait time ata: libahci_platform: Sanity check the DT child nodes number bcache: fix set_at_max_writeback_rate() for multiple attached devices soundwire: cadence: Don't overwrite msg->buf during write commands soundwire: intel: fix error handling on dai registration issues HID: roccat: Fix use-after-free in roccat_read() md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() usb: musb: Fix musb_gadget.c rxstate overflow bug Revert "usb: storage: Add quirk for Samsung Fit flash" staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() nvme: copy firmware_rev on each init nvmet-tcp: add bounds check on Transfer Tag usb: idmouse: fix an uninit-value in idmouse_open clk: bcm2835: Make peripheral PLLC critical perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc arm64: topology: fix possible overflow in amu_fie_setup() io_uring: correct pinned_vm accounting io_uring/af_unix: defer registered files gc to io_uring release mm: hugetlb: fix UAF in hugetlb_handle_userfault net: ieee802154: return -EINVAL for unknown addr type Revert "net/ieee802154: reject zero-sized raw_sendmsg()" net/ieee802154: don't warn zero-sized raw_sendmsg() Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega" Revert "drm/amdgpu: use dirty framebuffer helper" ext4: continue to expand file system when the target size doesn't reach inet: fully convert sk->sk_rx_dst to RCU rules thermal: intel_powerclamp: Use first online CPU as control_cpu f2fs: fix wrong condition to trigger background checkpoint correctly gcov: support GCC 12.1 and newer compilers Revert "drm/amdgpu: make sure to init common IP before gmc" Linux 5.10.150 Change-Id: I54f32f1f0149ec614c8bc7944e15adb5d80cd51a Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2022-11-15 19:14:08 +00:00
Suren Baghdasaryan	f55885db0c	UPSTREAM: mm: fix use-after-free bug when mm->mmap is reused after being freed oom reaping (__oom_reap_task_mm) relies on a 2 way synchronization with exit_mmap. First it relies on the mmap_lock to exclude from unlock path[1], page tables tear down (free_pgtables) and vma destruction. This alone is not sufficient because mm->mmap is never reset. For historical reasons[2] the lock is taken there is also MMF_OOM_SKIP set for oom victims before. The oom reaper only ever looks at oom victims so the whole scheme works properly but process_mrelease can opearate on any task (with fatal signals pending) which doesn't really imply oom victims. That means that the MMF_OOM_SKIP part of the synchronization doesn't work and it can see a task after the whole address space has been demolished and traverse an already released mm->mmap list. This leads to use after free as properly caught up by KASAN report. Fix the issue by reseting mm->mmap so that MMF_OOM_SKIP synchronization is not needed anymore. The MMF_OOM_SKIP is not removed from exit_mmap yet but it acts mostly as an optimization now. [1] `27ae357fa8` ("mm, oom: fix concurrent munlock and oom reaper unmap, v3") [2] `2129258024` ("mm: oom: let oom_reap_task and exit_mmap run concurrently") [mhocko@suse.com: changelog rewrite] Bug: 254441685 Link: https://lore.kernel.org/all/00000000000072ef2c05d7f81950@google.com/ Link: https://lkml.kernel.org/r/20220215201922.1908156-1-surenb@google.com Fixes: 64591e8605d6 ("mm: protect free_pgtables with mmap_lock write lock in exit_mmap") Signed-off-by: Suren Baghdasaryan <surenb@google.com> Reported-by: syzbot+2ccf63a4bd07cf39cab0@syzkaller.appspotmail.com Suggested-by: Michal Hocko <mhocko@suse.com> Reviewed-by: Rik van Riel <riel@surriel.com> Reviewed-by: Yang Shi <shy828301@gmail.com> Acked-by: Michal Hocko <mhocko@suse.com> Cc: David Rientjes <rientjes@google.com> Cc: Matthew Wilcox <willy@infradead.org> Cc: Johannes Weiner <hannes@cmpxchg.org> Cc: Roman Gushchin <roman.gushchin@linux.dev> Cc: Rik van Riel <riel@surriel.com> Cc: Minchan Kim <minchan@kernel.org> Cc: Kirill A. Shutemov <kirill@shutemov.name> Cc: Andrea Arcangeli <aarcange@redhat.com> Cc: Christian Brauner <brauner@kernel.org> Cc: Christoph Hellwig <hch@infradead.org> Cc: Oleg Nesterov <oleg@redhat.com> Cc: David Hildenbrand <david@redhat.com> Cc: Jann Horn <jannh@google.com> Cc: Shakeel Butt <shakeelb@google.com> Cc: Andy Lutomirski <luto@kernel.org> Cc: Christian Brauner <christian.brauner@ubuntu.com> Cc: Florian Weimer <fweimer@redhat.com> Cc: Jan Engelhardt <jengelh@inai.de> Cc: Tim Murray <timmurray@google.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> (cherry picked from commit f798a1d4f94de9510e060d37b9b47721065a957c) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: Ief9a3aa104ff0aff20062eb4a874bd5495a124e5	2022-11-09 13:57:12 +00:00
Jann Horn	4e5c3aad56	UPSTREAM: mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() This is a stable-specific patch. I botched the stable-specific rewrite of commit b67fbebd4cf98 ("mmu_gather: Force tlb-flush VM_PFNMAP vmas"): As Hugh pointed out, unmap_region() actually operates on a list of VMAs, and the variable "vma" merely points to the first VMA in that list. So if we want to check whether any of the VMAs we're operating on is PFNMAP or MIXEDMAP, we have to iterate through the list and check each VMA. Bug: 245812080 Signed-off-by: Jann Horn <jannh@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 3998dc50ebdc127ae79b10992856fb76debc2005) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: Ib8ddb51815e53f42daec5d98a196866a078a7550	2022-11-02 18:07:44 +00:00
Jann Horn	89fc774058	UPSTREAM: mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() commit b67fbebd4cf980aecbcc750e1462128bffe8ae15 upstream. Some drivers rely on having all VMAs through which a PFN might be accessible listed in the rmap for correctness. However, on X86, it was possible for a VMA with stale TLB entries to not be listed in the rmap. This was fixed in mainline with commit b67fbebd4cf9 ("mmu_gather: Force tlb-flush VM_PFNMAP vmas"), but that commit relies on preceding refactoring in commit 18ba064e42df3 ("mmu_gather: Let there be one tlb_{start,end}_vma() implementation") and commit 1e9fdf21a4339 ("mmu_gather: Remove per arch tlb_{start,end}_vma()"). This patch provides equivalent protection without needing that refactoring, by forcing a TLB flush between removing PTEs in unmap_vmas() and the call to unlink_file_vma() in free_pgtables(). Bug: 245812080 [This is a stable-specific rewrite of the upstream commit!] Signed-off-by: Jann Horn <jannh@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: Ic29df5cfb76676aa87a14619dd19aba301580507	2022-11-02 15:35:39 +00:00
Carlos Llamas	a3c08c0217	mm/mmap: undo ->mmap() when arch_validate_flags() fails commit deb0f6562884b5b4beb883d73e66a7d3a1b96d99 upstream. Commit `c462ac288f` ("mm: Introduce arch_validate_flags()") added a late check in mmap_region() to let architectures validate vm_flags. The check needs to happen after calling ->mmap() as the flags can potentially be modified during this callback. If arch_validate_flags() check fails we unmap and free the vma. However, the error path fails to undo the ->mmap() call that previously succeeded and depending on the specific ->mmap() implementation this translates to reference increments, memory allocations and other operations what will not be cleaned up. There are several places (mainly device drivers) where this is an issue. However, one specific example is bpf_map_mmap() which keeps count of the mappings in map->writecnt. The count is incremented on ->mmap() and then decremented on vm_ops->close(). When arch_validate_flags() fails this count is off since bpf_map_mmap_close() is never called. One can reproduce this issue in arm64 devices with MTE support. Here the vm_flags are checked to only allow VM_MTE if VM_MTE_ALLOWED has been set previously. From userspace then is enough to pass the PROT_MTE flag to mmap() syscall to trigger the arch_validate_flags() failure. The following program reproduces this issue: #include <stdio.h> #include <unistd.h> #include <linux/unistd.h> #include <linux/bpf.h> #include <sys/mman.h> int main(void) { union bpf_attr attr = { .map_type = BPF_MAP_TYPE_ARRAY, .key_size = sizeof(int), .value_size = sizeof(long long), .max_entries = 256, .map_flags = BPF_F_MMAPABLE, }; int fd; fd = syscall(__NR_bpf, BPF_MAP_CREATE, &attr, sizeof(attr)); mmap(NULL, 4096, PROT_WRITE \| PROT_MTE, MAP_SHARED, fd, 0); return 0; } By manually adding some log statements to the vm_ops callbacks we can confirm that when passing PROT_MTE to mmap() the map->writecnt is off upon ->release(): With PROT_MTE flag: root@debian:~# ./bpf-test [ 111.263874] bpf_map_write_active_inc: map=9 writecnt=1 [ 111.288763] bpf_map_release: map=9 writecnt=1 Without PROT_MTE flag: root@debian:~# ./bpf-test [ 157.816912] bpf_map_write_active_inc: map=10 writecnt=1 [ 157.830442] bpf_map_write_active_dec: map=10 writecnt=0 [ 157.832396] bpf_map_release: map=10 writecnt=0 This patch fixes the above issue by calling vm_ops->close() when the arch_validate_flags() check fails, after this we can proceed to unmap and free the vma on the error path. Link: https://lkml.kernel.org/r/20220930003844.1210987-1-cmllamas@google.com Fixes: `c462ac288f` ("mm: Introduce arch_validate_flags()") Signed-off-by: Carlos Llamas <cmllamas@google.com> Reviewed-by: Catalin Marinas <catalin.marinas@arm.com> Acked-by: Andrii Nakryiko <andrii@kernel.org> Reviewed-by: Liam Howlett <liam.howlett@oracle.com> Cc: Christian Brauner (Microsoft) <brauner@kernel.org> Cc: Michal Hocko <mhocko@suse.com> Cc: Suren Baghdasaryan <surenb@google.com> Cc: <stable@vger.kernel.org> [5.10+] Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-10-26 13:25:11 +02:00
Greg Kroah-Hartman	7474313da8	This is the 5.10.144 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmMpmC4ACgkQONu9yGCS aT6Dmw/+ODARHbnaUN1M/E+xmzbU47SUtiZ5JLf15bTA0xrOKndSSl6dHa84AWNi hpcW25f3NBNHQITtLSTkWDyms9z7Mvx3wojzUoA5oB6eYh7o18eGTV/Y8dofqxcK akC4E3i84sZNuo2Z+uNf02zC5QPZ95A+1UMk9umHapOvaxQPLtulzRj+Eij3nx8m x3IFjDdxD4ZvtLUwgTCcMLNn8oxkzz/SeU39kpdpXxwrIW1ER1/RwvDtduZFpb/d YXq6axOjpToaPz4J9RXQqpscT3QxSyO+Pmk1IrDaLRA5YGJH12YaJBdcMNjIGEB3 /jHDoVYaI+DoHBcX2YqfIKhlDoW/ePwKFixQBqFPFQeBJyo6STV8NbtVx/wHQ37L dv8Mcsbxrc2U4ucsUOaY1y6UgJBgZRaNFAVtAbHjaUepp6XFEf250PzqllYEDbBh WBYvrjRJclijE1QtX51xGulbS5MKwKHgUazi0r1R4gjlkO32czg0BfCeqXvuWSh4 qUgqctUTiDD7dM91w9agalJ0IreCvAixO9jdHFcZaXulM/wHDfz3cx7s1MSQ2URi i3Zc+T4FQ8K/ZIh2IxgGqN8pDGKK2tG35DA3gDLPTrlIK3GgIxYUxfRfdnWP89OM auN9xcbTBLWphtZWu51xqm/a3omDgNVJcqJ0fMm2Xj9zeG2kPHM= =3cbn -----END PGP SIGNATURE----- Merge 5.10.144 into android12-5.10-lts Changes in 5.10.144 ARM: dts: imx: align SPI NOR node name with dtschema ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible iommu/vt-d: Correctly calculate sagaw value of IOMMU tracefs: Only clobber mode/uid/gid on remount if asked Input: goodix - add support for GT1158 drm/msm/rd: Fix FIFO-full deadlock HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message tg3: Disable tg3 device on system reboot to avoid triggering AER gpio: mockup: remove gpio debugfs when remove device ieee802154: cc2520: add rc code in cc2520_tx() Input: iforce - add support for Boeder Force Feedback Wheel nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() drm/amd/amdgpu: skip ucode loading if ucode_size == 0 perf/arm_pmu_platform: fix tests for platform_get_irq() failure platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() Revert "x86/ftrace: Use alternative RET encoding" x86/ibt,ftrace: Make function-graph play nice x86/ftrace: Use alternative RET encoding soc: fsl: select FSL_GUTS driver for DPIO Input: goodix - add compatible string for GT1158 Linux 5.10.144 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ie5222afc95240a8f4b6b4b42d249a8d00eaf661f	2022-09-22 14:50:45 +02:00
Jann Horn	891f03f688	mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() This is a stable-specific patch. I botched the stable-specific rewrite of commit b67fbebd4cf98 ("mmu_gather: Force tlb-flush VM_PFNMAP vmas"): As Hugh pointed out, unmap_region() actually operates on a list of VMAs, and the variable "vma" merely points to the first VMA in that list. So if we want to check whether any of the VMAs we're operating on is PFNMAP or MIXEDMAP, we have to iterate through the list and check each VMA. Signed-off-by: Jann Horn <jannh@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-09-20 12:38:32 +02:00
Greg Kroah-Hartman	5d60de7a5f	This is the 5.10.141 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmMVs1MACgkQONu9yGCS aT4dIA/+JYX/VG4PxtN3ndJGacUGTTxXf0fKn5TAPkJVKJ5Jt5zDuWbAA4+oLWym z8L7W2DQ8sdhWiKTSbQMUXWhzyMDyxmFED/J9sm9HXd4c1VbAaRroeViI26fcbxU ND5soyoTprxD2iwePmmxI7EKO2IIpqkw3hkcUS0XI6bLT2j8/zusEBHUP4RF8D9I +FCpE9miQZielOjeTLlCRiU5VlZDEg5FusTuy+EJlN4k1HJxiO/L31NVX3iG0xPs 2x4E0q5QT85xEQRwzJFUPU64hPzPFeSGENfAsiq0tzRdsqgOFuQulnp31Vt/nba3 D+D96/dRxo/OZ/s1o2zt08J9zI5tV64sdxrxXSni/+Pnc/qc2/ZrGM3pPIw4taUg /35orlmDqseNvPyZ5BKuHc68G+1Ma3uxQTbhGfcESvOEZ+T/Ezd6wL+BGMoL/jjq QKBrRDORAt2t4JmaNoq3t+LGyE4Kdi7RxUmnawYImwzmMKS+qAk0f9mTVcYST0BM DWFClp8FW4IAVzGX0AWw2uz6e0T/kSkI1xCT8dzXfM7GhAUF8LPJABgmlLJRm/0N HnzGRDwl0xPbbe9VNvhI+yCaI7HYkSuDlVHW1oujd/AoRcso5LV6TMAgnPUYyvm7 d1HZlbDP2G35Ypq+Z/EdQIb7kWvoDHd2Az3Hvslo5Chawx41S+s= =IQqi -----END PGP SIGNATURE----- Merge 5.10.141 into android12-5.10-lts Changes in 5.10.141 mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() x86/nospec: Unwreck the RSB stuffing x86/nospec: Fix i386 RSB stuffing crypto: lib - remove unneeded selection of XOR_BLOCKS s390/mm: do not trigger write fault when vma does not allow VM_WRITE kbuild: Fix include path in scripts/Makefile.modpost Bluetooth: L2CAP: Fix build errors in some archs Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()" HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report udmabuf: Set the DMA mask for the udmabuf device (v2) media: pvrusb2: fix memory leak in pvr_probe HID: hidraw: fix memory leak in hidraw_release() net: fix refcount bug in sk_psock_get (2) fbdev: fb_pm2fb: Avoid potential divide by zero error ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead bpf: Don't redirect packets with invalid pkt_len mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse mmc: mtk-sd: Clear interrupts when cqe off/disable drm/amd/display: Avoid MPC infinite loop drm/amd/display: For stereo keep "FLIP_ANY_FRAME" drm/amd/display: clear optc underflow before turn off odm clock neigh: fix possible DoS due to net iface start/stop loop s390/hypfs: avoid error message under KVM drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid drm/amd/display: Fix pixel clock programming drm/amdgpu: Increase tlb flush timeout for sriov netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline() kprobes: don't call disarm_kprobe() for disabled kprobes io_uring: disable polling pollfree files xfs: remove infinite loop when reserving free block pool xfs: always succeed at setting the reserve pool size xfs: fix overfilling of reserve pool xfs: fix soft lockup via spinning in filestream ag selection loop xfs: revert "xfs: actually bump warning counts when we send warnings" net/af_packet: check len when min_header_len equals to 0 net: neigh: don't call kfree_skb() under spin_lock_irqsave() Linux 5.10.141 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I8b6a1e0bd31df051b90433857f126c183771d367	2022-09-07 09:44:58 +02:00
Jann Horn	895428ee12	mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() commit b67fbebd4cf980aecbcc750e1462128bffe8ae15 upstream. Some drivers rely on having all VMAs through which a PFN might be accessible listed in the rmap for correctness. However, on X86, it was possible for a VMA with stale TLB entries to not be listed in the rmap. This was fixed in mainline with commit b67fbebd4cf9 ("mmu_gather: Force tlb-flush VM_PFNMAP vmas"), but that commit relies on preceding refactoring in commit 18ba064e42df3 ("mmu_gather: Let there be one tlb_{start,end}_vma() implementation") and commit 1e9fdf21a4339 ("mmu_gather: Remove per arch tlb_{start,end}_vma()"). This patch provides equivalent protection without needing that refactoring, by forcing a TLB flush between removing PTEs in unmap_vmas() and the call to unlink_file_vma() in free_pgtables(). [This is a stable-specific rewrite of the upstream commit!] Signed-off-by: Jann Horn <jannh@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-09-05 10:28:54 +02:00
Greg Kroah-Hartman	5939035887	This is the 5.10.140 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmMPexEACgkQONu9yGCS aT7SIg//QPmoJq2ho7oqDXzdxW67Eay3QZEPDoBol34RxEXoAUpxFB1nQlC3u1aI OyPNXqQSPkObkXRMAVYStTZWgN3iUngorbsDOM+svGpAxt9zC/6d7JGNdhstaQLG p/OoWaV7qwnNUsvndhohdmwU9TqjwpbvQwSa570uWQ47nIoxMyIz0iR80GjBSNGf a2QiJg4OsaVxqxoySB6I6qAceRMbLOZVxW6p963IYC9Fj4j1NmhsPDIy95aidEN5 RG+Ng9GnuYRo0ktlhSje9YKyE5bYhUNCi6GWsCyArAFo0db/2GzRFweZRy5w7MC/ IaFQf93pDZinIBfDJliXfFMBx4YLdI3IHdtILPJvF7d1U5n6pG44knrPkPHzNouf Ife8SckAPLzZeffobIcOXgoZqM3Xj/5mpHWffPQ2wIpL0ylf4bshPiC8mIRoyblh ufrzUV6r7uBesp18c6nhjwAKgNVaw4w9+CpDk0qLlDELKNfENJ9wMRAJpcifYJKL jJVWJh2wXG4kBWbp/2SetMkNNEeqn/PQUVY843uRE2iE76J2lzly5/+gI4DsSN6+ z2ZQL5tzguZvLw0s+si+doU+orbpzXluJncNdJyw8+1A7J2kxSn/Xfks9X3BKDyi 69pxUx627rMJZi4Pwsc1tyoeTVj32EAmUqronHD9tsQKsujIX0M= =DO69 -----END PGP SIGNATURE----- Merge 5.10.140 into android12-5.10-lts Changes in 5.10.140 audit: fix potential double free on error path from fsnotify_add_inode_mark parisc: Fix exception handler for fldw and fstw instructions kernel/sys_ni: add compat entry for fadvise64_64 pinctrl: amd: Don't save/restore interrupt status and wake status bits xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* fs: remove __sync_filesystem vfs: make sync_filesystem return errors from ->sync_fs xfs: return errors in xfs_fs_sync_fs xfs: only bother with sync_filesystem during readonly remount kernel/sched: Remove dl_boosted flag comment xfrm: fix refcount leak in __xfrm_policy_check() xfrm: clone missing x->lastused in xfrm_do_migrate af_key: Do not call xfrm_probe_algs in parallel xfrm: policy: fix metadata dst->dev xmit null pointer dereference NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open() NFSv4.2 fix problems with __nfs42_ssc_open SUNRPC: RPC level errors should set task->tk_rpc_status mm/huge_memory.c: use helper function migration_entry_to_page() mm/smaps: don't access young/dirty bit if pte unpresent rose: check NULL rose_loopback_neigh->loopback nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout ice: xsk: Force rings to be sized to power of 2 ice: xsk: prohibit usage of non-balanced queue id net/mlx5e: Properly disable vlan strip on non-UL reps net: ipa: don't assume SMEM is page-aligned net: moxa: get rid of asymmetry in DMA mapping/unmapping bonding: 802.3ad: fix no transmission of LACPDUs net: ipvtap - add __init/__exit annotations to module init/exit funcs netfilter: ebtables: reject blobs that don't provide all entry points bnxt_en: fix NQ resource accounting during vf creation on 57500 chips netfilter: nft_payload: report ERANGE for too long offset and length netfilter: nft_payload: do not truncate csum_offset and csum_type netfilter: nf_tables: do not leave chain stats enabled on error netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families netfilter: nft_tunnel: restrict it to netdev family netfilter: nftables: remove redundant assignment of variable err netfilter: nf_tables: consolidate rule verdict trace call netfilter: nft_cmp: optimize comparison for 16-bytes netfilter: bitwise: improve error goto labels netfilter: nf_tables: upfront validation of data via nft_data_init() netfilter: nf_tables: disallow jump to implicit chain from set element netfilter: nf_tables: disallow binding to already bound chain tcp: tweak len/truesize ratio for coalesce candidates net: Fix data-races around sysctl_[rw]mem(_offset)?. net: Fix data-races around sysctl_[rw]mem_(max\|default). net: Fix data-races around weight_p and dev_weight_[rt]x_bias. net: Fix data-races around netdev_max_backlog. net: Fix data-races around netdev_tstamp_prequeue. ratelimit: Fix data-races in ___ratelimit(). bpf: Folding omem_charge() into sk_storage_charge() net: Fix data-races around sysctl_optmem_max. net: Fix a data-race around sysctl_tstamp_allow_data. net: Fix a data-race around sysctl_net_busy_poll. net: Fix a data-race around sysctl_net_busy_read. net: Fix a data-race around netdev_budget. net: Fix a data-race around netdev_budget_usecs. net: Fix data-races around sysctl_fb_tunnels_only_for_init_net. net: Fix data-races around sysctl_devconf_inherit_init_net. net: Fix a data-race around sysctl_somaxconn. ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter rxrpc: Fix locking in rxrpc's sendmsg ionic: fix up issues with handling EAGAIN on FW cmds btrfs: fix silent failure when deleting root reference btrfs: replace: drop assert for suspended replace btrfs: add info when mount fails due to stale replace target btrfs: check if root is readonly while setting security xattr perf/x86/lbr: Enable the branch type for the Arch LBR by default x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry x86/bugs: Add "unknown" reporting for MMIO Stale Data loop: Check for overflow while configuring loop asm-generic: sections: refactor memory_intersects s390: fix double free of GS and RI CBs on fork() failure ACPI: processor: Remove freq Qos request for all CPUs xen/privcmd: fix error exit of privcmd_ioctl_dm_op() mm/hugetlb: fix hugetlb not supporting softdirty tracking Revert "md-raid: destroy the bitmap after destroying the thread" md: call __md_stop_writes in md_stop arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76 Documentation/ABI: Mention retbleed vulnerability info file for sysfs blk-mq: fix io hung due to missing commit_rqs perf python: Fix build when PYTHON_CONFIG is user supplied perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU scsi: ufs: core: Enable link lost interrupt scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq bpf: Don't use tnum_range on array range checking for poke descriptors Linux 5.10.140 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I29f4b4af2a584dc2f2789aac613583603002464a	2022-08-31 18:52:48 +02:00
David Hildenbrand	62af37c5cd	mm/hugetlb: fix hugetlb not supporting softdirty tracking commit f96f7a40874d7c746680c0b9f57cef2262ae551f upstream. Patch series "mm/hugetlb: fix write-fault handling for shared mappings", v2. I observed that hugetlb does not support/expect write-faults in shared mappings that would have to map the R/O-mapped page writable -- and I found two case where we could currently get such faults and would erroneously map an anon page into a shared mapping. Reproducers part of the patches. I propose to backport both fixes to stable trees. The first fix needs a small adjustment. This patch (of 2): Staring at hugetlb_wp(), one might wonder where all the logic for shared mappings is when stumbling over a write-protected page in a shared mapping. In fact, there is none, and so far we thought we could get away with that because e.g., mprotect() should always do the right thing and map all pages directly writable. Looks like we were wrong: -------------------------------------------------------------------------- #include <stdio.h> #include <stdlib.h> #include <string.h> #include <fcntl.h> #include <unistd.h> #include <errno.h> #include <sys/mman.h> #define HUGETLB_SIZE (2 * 1024 * 1024u) static void clear_softdirty(void) { int fd = open("/proc/self/clear_refs", O_WRONLY); const char ctrl = "4"; int ret; if (fd < 0) { fprintf(stderr, "open(clear_refs) failed\n"); exit(1); } ret = write(fd, ctrl, strlen(ctrl)); if (ret != strlen(ctrl)) { fprintf(stderr, "write(clear_refs) failed\n"); exit(1); } close(fd); } int main(int argc, char argv) { char map; int fd; fd = open("/dev/hugepages/tmp", O_RDWR \| O_CREAT); if (!fd) { fprintf(stderr, "open() failed\n"); return -errno; } if (ftruncate(fd, HUGETLB_SIZE)) { fprintf(stderr, "ftruncate() failed\n"); return -errno; } map = mmap(NULL, HUGETLB_SIZE, PROT_READ\|PROT_WRITE, MAP_SHARED, fd, 0); if (map == MAP_FAILED) { fprintf(stderr, "mmap() failed\n"); return -errno; } map = 0; if (mprotect(map, HUGETLB_SIZE, PROT_READ)) { fprintf(stderr, "mmprotect() failed\n"); return -errno; } clear_softdirty(); if (mprotect(map, HUGETLB_SIZE, PROT_READ\|PROT_WRITE)) { fprintf(stderr, "mmprotect() failed\n"); return -errno; } map = 0; return 0; } -------------------------------------------------------------------------- Above test fails with SIGBUS when there is only a single free hugetlb page. # echo 1 > /sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages # ./test Bus error (core dumped) And worse, with sufficient free hugetlb pages it will map an anonymous page into a shared mapping, for example, messing up accounting during unmap and breaking MAP_SHARED semantics: # echo 2 > /sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages # ./test # cat /proc/meminfo \| grep HugePages_ HugePages_Total: 2 HugePages_Free: 1 HugePages_Rsvd: 18446744073709551615 HugePages_Surp: 0 Reason in this particular case is that vma_wants_writenotify() will return "true", removing VM_SHARED in vma_set_page_prot() to map pages write-protected. Let's teach vma_wants_writenotify() that hugetlb does not support softdirty tracking. Link: https://lkml.kernel.org/r/20220811103435.188481-1-david@redhat.com Link: https://lkml.kernel.org/r/20220811103435.188481-2-david@redhat.com Fixes: `64e455079e` ("mm: softdirty: enable write notifications on VMAs after VM_SOFTDIRTY cleared") Signed-off-by: David Hildenbrand <david@redhat.com> Reviewed-by: Mike Kravetz <mike.kravetz@oracle.com> Cc: Peter Feiner <pfeiner@google.com> Cc: Kirill A. Shutemov <kirill.shutemov@linux.intel.com> Cc: Cyrill Gorcunov <gorcunov@openvz.org> Cc: Pavel Emelyanov <xemul@parallels.com> Cc: Jamie Liu <jamieliu@google.com> Cc: Hugh Dickins <hughd@google.com> Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com> Cc: Bjorn Helgaas <bhelgaas@google.com> Cc: Muchun Song <songmuchun@bytedance.com> Cc: Peter Xu <peterx@redhat.com> Cc: <stable@vger.kernel.org> [3.18+] Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: David Hildenbrand <david@redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-08-31 17:15:23 +02:00
Greg Kroah-Hartman	fbe6a13851	This is the 5.10.137 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmMCMDQACgkQONu9yGCS aT6TwRAAvj1dnV1nLVVNET3jcelTO65SVUUpQjiyGD1npZQaQdH5PoGR0VhMWk7y mLUIwJyp/rR7+OLD3BMFwxDimDWHviFGdbmm/8fsyDrARuOeRd/M1fvtHXjIRQdb nOvfo1yTQWp4xA1k/JwJZslkvRFDsofXWHCRf+ffEryTRanFAVc7u5aFIg92W0b/ JWYWEFe99C4TJ7LACpDoGaP9gE6WXsupaxSZBIu+Wxa+PfDmIeRRTkQn+j4Khn0h I6w+LkLd6ZP3l7sbe9KfS9ZGo1wWLgSng4zz742Z9IaFgxyj2ArS9tNsYCLkkhAM gLSXXkiPBAxUvAtDxR1tc0YROHc1bjAttSoxNXcaaacspSo/Vi0VAtp7t6boK0bI /8P3dh+Hq9u/Q1ClhZtVoFpp+GVj0fDbDd56qVcr2Cp6IokpqRJog1Jhgj0CVCoG iElr3n0+y7/IZfmE6/U1cK00SNcW86e2YduuIy4ifCawRT574zkRiSYZalpaO3qM z1lF9p+zUNq3v2q0wxXuBDLi/yPoJzbJgmCGScj4ryjjr6TOvR1udSVWkJ02dR4H s9km3lNLgoUPCYCLBMlZl7em4T49E09/+4YCrnj/Ezp+YdImf2+QzZyd/gG3ITl2 fW7lpbK1dx3d/19JFP6Xkj9PaIlMl9e8Ne04G+Dabv67uN+0U+g= =Z4rz -----END PGP SIGNATURE----- Merge 5.10.137 into android12-5.10-lts Changes in 5.10.137 Makefile: link with -z noexecstack --no-warn-rwx-segments x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments Revert "pNFS: nfs3_set_ds_client should set NFS_CS_NOPING" scsi: Revert "scsi: qla2xxx: Fix disk failure to rediscover" ALSA: bcd2000: Fix a UAF bug on the error path of probing ALSA: hda/realtek: Add quirk for Clevo NV45PZ ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx wifi: mac80211_hwsim: fix race condition in pending packet wifi: mac80211_hwsim: add back erroneously removed cast wifi: mac80211_hwsim: use 32-bit skb cookie add barriers to buffer_uptodate and set_buffer_uptodate HID: wacom: Only report rotation for art pen HID: wacom: Don't register pad_input for touch switch KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 KVM: s390: pv: don't present the ecall interrupt twice KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP KVM: x86: Tag kvm_mmu_x86_module_init() with __init riscv: set default pm_power_off to NULL mm: Add kvrealloc() xfs: only set IOMAP_F_SHARED when providing a srcmap to a write xfs: fix I_DONTCACHE mm/mremap: hold the rmap lock in write mode when moving page table entries. ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model ALSA: hda/cirrus - support for iMac 12,1 model ALSA: hda/realtek: Add quirk for another Asus K42JZ model ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED tty: vt: initialize unicode screen buffer vfs: Check the truncate maximum size in inode_newsize_ok() fs: Add missing umask strip in vfs_tmpfile thermal: sysfs: Fix cooling_device_stats_setup() error code path fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters fbcon: Fix accelerated fbdev scrolling while logo is still shown usbnet: Fix linkwatch use-after-free on disconnect ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() parisc: Fix device names in /proc/iomem parisc: Check the return value of ioremap() in lba_driver_probe() parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error drm/vc4: hdmi: Disable audio if dmas property is present but empty drm/nouveau: fix another off-by-one in nvbios_addr drm/nouveau: Don't pm_runtime_put_sync(), only pm_runtime_put_autosuspend() drm/nouveau/acpi: Don't print error when we get -EINPROGRESS from pm_runtime drm/amdgpu: Check BO's requested pinning domains against its preferred_domains mtd: rawnand: arasan: Update NAND bus clock instead of system clock iio: light: isl29028: Fix the warning in isl29028_remove() scsi: sg: Allow waiting for commands to complete on removed device scsi: qla2xxx: Fix incorrect display of max frame size scsi: qla2xxx: Zero undefined mailbox IN registers fuse: limit nsec serial: mvebu-uart: uart2 error bits clearing md-raid: destroy the bitmap after destroying the thread md-raid10: fix KASAN warning media: [PATCH] pci: atomisp_cmd: fix three missing checks on list iterator ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() PCI: Add defines for normal and subtractive PCI bridges powerpc/fsl-pci: Fix Class Code of PCIe Root Port powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E powerpc/powernv: Avoid crashing if rng is NULL MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK coresight: Clear the connection field properly usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion USB: HCD: Fix URB giveback issue in tasklet function ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC usb: dwc3: gadget: refactor dwc3_repare_one_trb usb: dwc3: gadget: fix high speed multiplier setting lockdep: Allow tuning tracing capacity constants. netfilter: nf_tables: do not allow SET_ID to refer to another table netfilter: nf_tables: do not allow CHAIN_ID to refer to another table netfilter: nf_tables: do not allow RULE_ID to refer to another chain netfilter: nf_tables: fix null deref due to zeroed list head epoll: autoremove wakers even more aggressively x86: Handle idle=nomwait cmdline properly for x86_idle arm64: Do not forget syscall when starting a new thread. arm64: fix oops in concurrently setting insn_emulation sysctls ext2: Add more validity checks for inode counts genirq: Don't return error on missing optional irq_request_resources() irqchip/mips-gic: Only register IPI domain when SMP is enabled genirq: GENERIC_IRQ_IPI depends on SMP irqchip/mips-gic: Check the return value of ioremap() in gic_of_init() wait: Fix __wait_event_hrtimeout for RT/DL tasks ARM: dts: imx6ul: add missing properties for sram ARM: dts: imx6ul: change operating-points to uint32-matrix ARM: dts: imx6ul: fix keypad compatible ARM: dts: imx6ul: fix csi node compatible ARM: dts: imx6ul: fix lcdif node compatible ARM: dts: imx6ul: fix qspi node compatible ARM: dts: BCM5301X: Add DT for Meraki MR26 spi: synquacer: Add missing clk_disable_unprepare() ARM: OMAP2+: display: Fix refcount leak bug ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks ACPI: EC: Drop the EC_FLAGS_IGNORE_DSDT_GPE quirk ACPI: PM: save NVS memory for Lenovo G40-45 ACPI: LPSS: Fix missing check in register_device_clock() arm64: dts: qcom: ipq8074: fix NAND node name arm64: dts: allwinner: a64: orangepi-win: Fix LED node name ARM: shmobile: rcar-gen2: Increase refcount for new reference firmware: tegra: Fix error check return value of debugfs_create_file() PM: hibernate: defer device probing when resuming from hibernation selinux: Add boundary check in put_entry() powerpc/64s: Disable stack variable initialisation for prom_init spi: spi-rspi: Fix PIO fallback on RZ platforms ARM: findbit: fix overflowing offset meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init arm64: dts: renesas: beacon: Fix regulator node names ARM: bcm: Fix refcount leak in bcm_kona_smc_init ACPI: processor/idle: Annotate more functions to live in cpuidle section ARM: dts: imx7d-colibri-emmc: add cpu1 supply Input: atmel_mxt_ts - fix up inverted RESET handler soc: renesas: r8a779a0-sysc: Fix A2DP1 and A2CV[2357] PDR values soc: amlogic: Fix refcount leak in meson-secure-pwrc.c arm64: dts: renesas: Fix thermal-sensors on single-zone sensors x86/pmem: Fix platform-device leak in error path ARM: dts: ast2500-evb: fix board compatible ARM: dts: ast2600-evb: fix board compatible hexagon: select ARCH_WANT_LD_ORPHAN_WARN arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 locking/lockdep: Fix lockdep_init_map_() confusion soc: fsl: guts: machine variable might be unset block: fix infinite loop for invalid zone append ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg ARM: OMAP2+: Fix refcount leak in omapdss_init_of ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init cpufreq: zynq: Fix refcount leak in zynq_get_revision regulator: qcom_smd: Fix pm8916_pldo range ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP soc: qcom: ocmem: Fix refcount leak in of_get_ocmem soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register ARM: dts: qcom: pm8841: add required thermal-sensor-cells bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() arm64: dts: mt7622: fix BPI-R64 WPS button arm64: tegra: Fix SDMMC1 CD on P2888 erofs: avoid consecutive detection for Highmem memory blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created hwmon: (drivetemp) Add module alias block: remove the request_queue to argument request based tracepoints blktrace: Trace remapped requests correctly regulator: of: Fix refcount leak bug in of_get_regulation_constraints() soc: qcom: Make QCOM_RPMPD depend on PM arm64: dts: qcom: qcs404: Fix incorrect USB2 PHYs assignment drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() selftests/seccomp: Fix compile warning when CC=clang thermal/tools/tmon: Include pthread and time headers in tmon.h dm: return early from dm_pr_call() if DM device is suspended pwm: sifive: Don't check the return code of pwmchip_remove() pwm: sifive: Simplify offset calculation for PWMCMP registers pwm: sifive: Ensure the clk is enabled exactly once per running PWM pwm: sifive: Shut down hardware only after pwmchip_remove() completed pwm: lpc18xx-sct: Convert to devm_platform_ioremap_resource() drm/bridge: tc358767: Move (e)DP bridge endpoint parsing into dedicated function drm/bridge: tc358767: Make sure Refclk clock are enabled ath10k: do not enforce interrupt trigger type drm/st7735r: Fix module autoloading for Okaya RH128128T wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() ath11k: fix netdev open race drm/mipi-dbi: align max_chunk to 2 in spi_transfer ath11k: Fix incorrect debug_mask mappings drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() drm/mediatek: Modify dsi funcs to atomic operations drm/mediatek: Separate poweron/poweroff from enable/disable and define new funcs drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function i2c: npcm: Remove own slave addresses 2:10 i2c: npcm: Correct slave role behavior virtio-gpu: fix a missing check to avoid NULL dereference drm: adv7511: override i2c address of cec before accessing it crypto: sun8i-ss - do not allocate memory when handling hash requests crypto: sun8i-ss - fix error codes in allocate_flows() net: fix sk_wmem_schedule() and sk_rmem_schedule() errors i2c: Fix a potential use after free crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs() media: tw686x: Register the irq at the end of probe ath9k: fix use-after-free in ath9k_hif_usb_rx_cb wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() drm/radeon: fix incorrrect SPDX-License-Identifiers test_bpf: fix incorrect netdev features crypto: ccp - During shutdown, check SEV data pointer before using drm: bridge: adv7511: Add check for mipi_dsi_driver_register drm/mcde: Fix refcount leak in mcde_dsi_bind media: hdpvr: fix error value returns in hdpvr_read media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set media: tw686x: Fix memory leak in tw686x_video_init drm/vc4: plane: Remove subpixel positioning check drm/vc4: plane: Fix margin calculations for the right/bottom edges drm/vc4: dsi: Correct DSI divider calculations drm/vc4: dsi: Correct pixel order for DSI0 drm/vc4: drv: Remove the DSI pointer in vc4_drv drm/vc4: dsi: Use snprintf for the PHY clocks instead of an array drm/vc4: dsi: Introduce a variant structure drm/vc4: dsi: Register dsi0 as the correct vc4 encoder type drm/vc4: dsi: Fix dsi0 interrupt support drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration drm/vc4: hdmi: Remove firmware logic for MAI threshold setting drm/vc4: hdmi: Avoid full hdmi audio fifo writes drm/vc4: hdmi: Don't access the connector state in reset if kmalloc fails drm/vc4: hdmi: Limit the BCM2711 to the max without scrambling drm/vc4: hdmi: Fix timings for interlaced modes drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE selftests/xsk: Destroy BPF resources only when ctx refcount drops to 0 drm/rockchip: vop: Don't crash for invalid duplicate_state() drm/rockchip: Fix an error handling path rockchip_dp_probe() drm/mediatek: dpi: Remove output format of YUV drm/mediatek: dpi: Only enable dpi after the bridge is enabled drm: bridge: sii8620: fix possible off-by-one lib: bitmap: order includes alphabetically lib: bitmap: provide devm_bitmap_alloc() and devm_bitmap_zalloc() hinic: Use the bitmap API when applicable net: hinic: fix bug that ethtool get wrong stats net: hinic: avoid kernel hung in hinic_get_stats64() drm/msm/mdp5: Fix global state lock backoff crypto: hisilicon/sec - fixes some coding style crypto: hisilicon/sec - don't sleep when in softirq crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed. tcp: make retransmitted SKB fit into the send window libbpf: Fix the name of a reused map selftests: timers: valid-adjtimex: build fix for newer toolchains selftests: timers: clocksource-switch: fix passing errors from child bpf: Fix subprog names in stack traces. fs: check FMODE_LSEEK to control internal pipe splicing wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() wifi: p54: Fix an error handling path in p54spi_probe() wifi: p54: add missing parentheses in p54_flush() selftests/bpf: fix a test for snprintf() overflow can: pch_can: do not report txerr and rxerr during bus-off can: rcar_can: do not report txerr and rxerr during bus-off can: sja1000: do not report txerr and rxerr during bus-off can: hi311x: do not report txerr and rxerr during bus-off can: sun4i_can: do not report txerr and rxerr during bus-off can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off can: usb_8dev: do not report txerr and rxerr during bus-off can: error: specify the values of data[5..7] of CAN error frames can: pch_can: pch_can_error(): initialize errc before using it Bluetooth: hci_intel: Add check for platform_driver_register i2c: cadence: Support PEC for SMBus block read i2c: mux-gpmux: Add of_node_put() when breaking out of loop wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue wifi: libertas: Fix possible refcount leak in if_usb_probe() media: cedrus: hevc: Add check for invalid timestamp net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS crypto: hisilicon/hpre - don't use GFP_KERNEL to alloc mem during softirq crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of crypto: hisilicon/sec - fix auth key size error inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH() tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH() tcp: Fix data-races around sysctl_tcp_l3mdev_accept. net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set iavf: Fix max_rate limiting netdevsim: Avoid allocation warnings triggered from user space net: rose: fix netdev reference changes net: ionic: fix error check for vlan flags in ionic_set_nic_features() dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock wireguard: ratelimiter: use hrtimer in selftest wireguard: allowedips: don't corrupt stack when detecting overflow clk: renesas: r9a06g032: Fix UART clkgrp bitsel mtd: maps: Fix refcount leak in of_flash_probe_versatile mtd: maps: Fix refcount leak in ap_flash_init mtd: rawnand: meson: Fix a potential double free issue PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep() HID: cp2112: prevent a buffer overflow in cp2112_xfer() mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release mtd: partitions: Fix refcount leak in parse_redboot_of mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path fpga: altera-pr-ip: fix unsigned comparison with less than zero usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init() usb: xhci: tegra: Fix error check netfilter: xtables: Bring SPDX identifier back iio: accel: bma400: Fix the scale min and max macro values platform/chrome: cros_ec: Always expose last resume result iio: accel: bma400: Reordering of header files clk: mediatek: reset: Fix written reset bit offset KVM: Don't set Accessed/Dirty bits for ZERO_PAGE mwifiex: Ignore BTCOEX events from the 88W8897 firmware mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv dmaengine: dw-edma: Fix eDMA Rd/Wr-channels and DMA-direction semantics misc: rtsx: Fix an error handling path in rtsx_pci_probe() driver core: fix potential deadlock in __driver_attach clk: qcom: clk-krait: unlock spin after mux completion usb: host: xhci: use snprintf() in xhci_decode_trb() clk: qcom: ipq8074: fix NSS core PLL-s clk: qcom: ipq8074: SW workaround for UBI32 PLL lock clk: qcom: ipq8074: fix NSS port frequency tables clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks clk: qcom: camcc-sdm845: Fix topology around titan_top power domain PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu() PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors PCI: dwc: Always enable CDM check if "snps,enable-cdm-check" exists soundwire: bus_type: fix remove and shutdown support KVM: arm64: Don't return from void function dmaengine: sf-pdma: apply proper spinlock flags in sf_pdma_prep_dma_memcpy() dmaengine: sf-pdma: Add multithread support for a DMA channel PCI: endpoint: Don't stop controller when unbinding endpoint function intel_th: Fix a resource leak in an error handling path intel_th: msu-sink: Potential dereference of null pointer intel_th: msu: Fix vmalloced buffers staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch memstick/ms_block: Fix some incorrect memory allocation memstick/ms_block: Fix a memory leak mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R mmc: block: Add single read for 4k sector cards KVM: s390: pv: leak the topmost page table when destroy fails PCI/portdrv: Don't disable AER reporting in get_port_device_capability() PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks scsi: smartpqi: Fix DMA direction for RAID requests xtensa: iss/network: provide release() callback xtensa: iss: fix handling error cases in iss_net_configure() usb: gadget: udc: amd5536 depends on HAS_DMA usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() usb: dwc3: core: Deprecate GCTL.CORESOFTRESET usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup usb: dwc3: qcom: fix missing optional irq warnings eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write() interconnect: imx: fix max_node_id um: random: Don't initialise hwrng struct with zero RDMA/rtrs: Define MIN_CHUNK_SIZE RDMA/rtrs: Avoid Wtautological-constant-out-of-range-compare RDMA/rtrs-srv: Fix modinfo output for stringify RDMA/qedr: Improve error logs for rdma_alloc_tid error return RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() RDMA/hns: Fix incorrect clearing of interrupt status register RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event RDMA/hfi1: fix potential memory leak in setup_base_ctxt() gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() HID: mcp2221: prevent a buffer overflow in mcp_smbus_write() mmc: cavium-octeon: Add of_node_put() when breaking out of loop mmc: cavium-thunderx: Add of_node_put() when breaking out of loop HID: alps: Declare U1_UNICORN_LEGACY support PCI: tegra194: Fix Root Port interrupt handling PCI: tegra194: Fix link up retry sequence USB: serial: fix tty-port initialized comments usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() platform/olpc: Fix uninitialized data in debugfs write RDMA/srpt: Duplicate port name members RDMA/srpt: Introduce a reference count in struct srpt_device RDMA/srpt: Fix a use-after-free mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region selftests: kvm: set rax before vmcall RDMA/mlx5: Add missing check for return value in get namespace flow RDMA/rxe: Fix error unwind in rxe_create_qp() null_blk: fix ida error handling in null_add_dev() nvme: use command_id instead of req->tag in trace_nvme_complete_rq() jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction() ext4: recover csum seed of tmp_inode after migrating to extents jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted usb: cdns3: Don't use priv_dev uninitialized in cdns3_gadget_ep_enable() opp: Fix error check in dev_pm_opp_attach_genpd() ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe ASoC: samsung: Fix error handling in aries_audio_probe ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe ASoC: codecs: da7210: add check for i2c_add_driver ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe serial: 8250: Export ICR access helpers for internal use serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV rpmsg: mtk_rpmsg: Fix circular locking dependency remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init selftests/livepatch: better synchronize test_klp_callbacks_busy profiling: fix shift too large makes kernel panic ASoC: samsung: h1940_uda1380: include proepr GPIO consumer header powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable ASoC: samsung: change gpiod_speaker_power and rx1950_audio from global to static variables tty: n_gsm: Delete gsmtty open SABM frame when config requester tty: n_gsm: fix user open not possible at responder until initiator open tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output() tty: n_gsm: fix non flow control frames during mux flow off tty: n_gsm: fix packet re-transmission without open control channel tty: n_gsm: fix race condition in gsmld_write() ASoC: qcom: Fix missing of_node_put() in asoc_qcom_lpass_cpu_platform_probe() remoteproc: qcom: wcnss: Fix handling of IRQs vfio: Remove extra put/gets around vfio_device->group vfio: Simplify the lifetime logic for vfio_device vfio: Split creation of a vfio_device into init and register ops vfio/mdev: Make to_mdev_device() into a static inline vfio/ccw: Do not change FSM state in subchannel event tty: n_gsm: fix wrong T1 retry count handling tty: n_gsm: fix DM command tty: n_gsm: fix missing corner cases in gsmld_poll() iommu/exynos: Handle failed IOMMU device registration properly rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge kfifo: fix kfifo_to_user() return type lib/smp_processor_id: fix imbalanced instrumentation_end() call remoteproc: sysmon: Wait for SSCTL service to come up mfd: t7l66xb: Drop platform disable callback mfd: max77620: Fix refcount leak in max77620_initialise_fps iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop perf tools: Fix dso_id inode generation comparison s390/dump: fix old lowcore virtual vs physical address confusion s390/zcore: fix race when reading from hardware system area ASoC: fsl_easrc: use snd_pcm_format_t type for sample_format ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp() fuse: Remove the control interface for virtio-fs ASoC: audio-graph-card: Add of_node_put() in fail path watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe() video: fbdev: amba-clcd: Fix refcount leak bugs video: fbdev: sis: fix typos in SiS_GetModeID() ASoC: mchp-spdifrx: disable end of block interrupt on failures powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32 powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias f2fs: don't set GC_FAILURE_PIN for background GC f2fs: write checkpoint during FG_GC f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader powerpc/xive: Fix refcount leak in xive_get_max_prio powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address perf symbol: Fail to read phdr workaround kprobes: Forbid probing on trampoline and BPF code areas powerpc/pci: Fix PHB numbering when using opal-phbid genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO scripts/faddr2line: Fix vmlinux detection on arm64 sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed x86/numa: Use cpumask_available instead of hardcoded NULL check video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() tools/thermal: Fix possible path truncations sched: Fix the check of nr_running at queue wakelist x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y video: fbdev: vt8623fb: Check the size of screen before memset_io() video: fbdev: arkfb: Check the size of screen before memset_io() video: fbdev: s3fb: Check the size of screen before memset_io() scsi: zfcp: Fix missing auto port scan and thus missing target ports scsi: qla2xxx: Fix discovery issues in FC-AL topology scsi: qla2xxx: Turn off multi-queue for 8G adapters scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests x86/bugs: Enable STIBP for IBPB mitigated RETBleed ftrace/x86: Add back ftrace_expected assignment x86/olpc: fix 'logical not is only applied to the left hand side' posix-cpu-timers: Cleanup CPU timers before freeing them during exec Input: gscps2 - check return value of ioremap() in gscps2_probe() __follow_mount_rcu(): verify that mount_lock remains unchanged spmi: trace: fix stack-out-of-bound access in SPMI tracing functions drm/i915/dg1: Update DMC_DEBUG3 register drm/mediatek: Allow commands to be sent during video mode drm/mediatek: Keep dsi as LP00 before dcs cmds transfer HID: Ignore battery for Elan touchscreen on HP Spectre X360 15-df0xxx HID: hid-input: add Surface Go battery quirk drm/vc4: drv: Adopt the dma configuration from the HVS or V3D component mtd: rawnand: Add a helper to clarify the interface configuration mtd: rawnand: arasan: Check the proposed data interface is supported mtd: rawnand: Add NV-DDR timings mtd: rawnand: arasan: Fix a macro parameter mtd: rawnand: arasan: Support NV-DDR interface mtd: rawnand: arasan: Fix clock rate in NV-DDR usbnet: smsc95xx: Don't clear read-only PHY interrupt usbnet: smsc95xx: Avoid link settings race on interrupt reception firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails intel_th: pci: Add Meteor Lake-P support intel_th: pci: Add Raptor Lake-S PCH support intel_th: pci: Add Raptor Lake-S CPU support KVM: set_msr_mce: Permit guests to ignore single-bit ECC errors KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) PCI/AER: Write AER Capability only when we control it PCI/ERR: Bind RCEC devices to the Root Port driver PCI/ERR: Rename reset_link() to reset_subordinates() PCI/ERR: Simplify by using pci_upstream_bridge() PCI/ERR: Simplify by computing pci_pcie_type() once PCI/ERR: Use "bridge" for clarity in pcie_do_recovery() PCI/ERR: Avoid negated conditional for clarity PCI/ERR: Add pci_walk_bridge() to pcie_do_recovery() PCI/ERR: Recover from RCEC AER errors PCI/AER: Iterate over error counters instead of error strings serial: 8250: Dissociate 4MHz Titan ports from Oxford ports serial: 8250: Correct the clock for OxSemi PCIe devices serial: 8250_pci: Refactor the loop in pci_ite887x_init() serial: 8250_pci: Replace dev_() by pci_*() macros serial: 8250: Fold EndRun device support into OxSemi Tornado code dm writecache: set a default MAX_WRITEBACK_JOBS kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification dm thin: fix use-after-free crash in dm_sm_register_threshold_callback timekeeping: contribute wall clock to rng on time change um: Allow PM with suspend-to-idle btrfs: reject log replay if there is unsupported RO compat flag btrfs: reset block group chunk force if we have to wait ACPI: CPPC: Do not prevent CPPC from working in the future KVM: VMX: Drop guest CPUID check for VMXE in vmx_set_cr4() KVM: VMX: Drop explicit 'nested' check from vmx_set_cr4() KVM: SVM: Drop VMXE check from svm_set_cr4() KVM: x86: Move vendor CR4 validity check to dedicated kvm_x86_ops hook KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4 KVM: x86/pmu: preserve IA32_PERF_CAPABILITIES across CPUID refresh KVM: x86/pmu: Use binary search to check filtered events KVM: x86/pmu: Use different raw event masks for AMD and Intel KVM: x86/pmu: Introduce the ctrl_mask value for fixed counter KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU doesn't support global_ctrl xen-blkback: fix persistent grants negotiation xen-blkback: Apply 'feature_persistent' parameter when connect xen-blkfront: Apply 'feature_persistent' parameter when connect KEYS: asymmetric: enforce SM2 signature use pkey algo tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH tracing: Use a struct alignof to determine trace event field alignment ext4: check if directory block is within i_size ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h ext4: fix warning in ext4_iomap_begin as race between bmap and write ext4: make sure ext4_append() always allocates new block ext4: fix use-after-free in ext4_xattr_set_entry ext4: update s_overhead_clusters in the superblock during an on-line resize ext4: fix extent status tree race in writeback error recovery path ext4: correct max_inline_xattr_value_size computing ext4: correct the misjudgment in ext4_iget_extra_inode dm raid: fix address sanitizer warning in raid_resume dm raid: fix address sanitizer warning in raid_status net_sched: cls_route: remove from list when handle is 0 KVM: Add infrastructure and macro to mark VM as bugged KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() mac80211: fix a memory leak where sta_info is not freed tcp: fix over estimation in sk_forced_mem_schedule() Revert "mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv" drm/bridge: tc358767: Fix (e)DP bridge endpoint parsing in dedicated function drm/vc4: change vc4_dma_range_matches from a global to static Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP" Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression mtd: rawnand: arasan: Prevent an unsupported configuration kvm: x86/pmu: Fix the compare function used by the pmu event filter tee: add overflow check in register_shm_helper() net/9p: Initialize the iounit field during fid creation net_sched: cls_route: disallow handle of 0 sched/fair: Fix fault in reweight_entity btrfs: only write the sectors in the vertical stripe which has data stripes btrfs: raid56: don't trust any cached sector in __raid56_parity_recover() Linux 5.10.137 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I5775ddfad6460c5a737b1ad3f8e0b8f798338786	2022-08-29 16:53:14 +02:00
Miaohe Lin	4ffa6cecb5	mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region [ Upstream commit 7f82f922319ede486540e8746769865b9508d2c2 ] Since the beginning, charged is set to 0 to avoid calling vm_unacct_memory twice because vm_unacct_memory will be called by above unmap_region. But since commit `4f74d2c8e8` ("vm: remove 'nr_accounted' calculations from the unmap_vmas() interfaces"), unmap_region doesn't call vm_unacct_memory anymore. So charged shouldn't be set to 0 now otherwise the calling to paired vm_unacct_memory will be missed and leads to imbalanced account. Link: https://lkml.kernel.org/r/20220618082027.43391-1-linmiaohe@huawei.com Fixes: `4f74d2c8e8` ("vm: remove 'nr_accounted' calculations from the unmap_vmas() interfaces") Signed-off-by: Miaohe Lin <linmiaohe@huawei.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-08-21 15:16:02 +02:00
Greg Kroah-Hartman	ca9b002a16	This is the 5.10.113 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmJpLt4ACgkQONu9yGCS aT5Wjg//dzSnqQoqXgMjLwSoMx15rfs/HjC8vgRUpdKctpzITabLc7ywdbcxuyQt it+tlQAFMIq2caH20M+u91zm1kre9f8ap5KnVEt+snkJK+mxWZ8u0uxgzGqRJV7w 1SX4lRCdbfT82T2qjlPFlLQ3bFlxy1nbYHJI1lOltl8JXgHEHuFDGH0oWr6QwdOu wAayeL5MmIpUqtLE7G5Jb9Yc1Hg+dCPHGjJNHbtR6URnVGNY664Moz/ij0qWA8RE Gaxxud677xEVoc3OVRS3r9CzEmhZGBeI0xwc9Gc8vGWaVkJGlS2/p/+M8mk75yKu gUpGZE2DNZ+8G0rs/9hs74nV01KpcOCJokLTqka+0MqKHalNVibkw8RPLThn30Ct JyK43veFQigd3WJULwvOaoM4YBzCishYQc2jvyftZRqb5rxRfTk62UoQoqNgmhyr 1MDUS8w741jF0qdH/v8Wgv7H64d4iilZV6VqVtWiyowPphHbd76qGpRSe42Xg/gY gL/xfjS17Uwid5es+wzIP4J9D3yxwwh3KZjgfAuaOVnMVCn2RqEjZyqQJSCAc8sF kCPMbXjAN9/5sGwidGGDf7ML67MIcIF6928pel95RU3lmz7X5cEzN2FCeAZg28rn W2iiSeWEh6XD7Pzbd+TYYftG3M2kGN6qzaKM2wOGNc6cK/dDROs= =NhyD -----END PGP SIGNATURE----- Merge 5.10.113 into android12-5.10-lts Changes in 5.10.113 etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead mm: page_alloc: fix building error on -Werror=array-compare tracing: Dump stacktrace trigger to the corresponding instance perf tools: Fix segfault accessing sample_id xyarray gfs2: assign rgrp glock before compute_bitstructs net/sched: cls_u32: fix netns refcount changes in u32_change() ALSA: usb-audio: Clear MIDI port active flag after draining ALSA: hda/realtek: Add quirk for Clevo NP70PNP dm: fix mempool NULL pointer race when completing IO ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component ASoC: codecs: wcd934x: do not switch off SIDO Buck when codec is in use dmaengine: imx-sdma: Fix error checking in sdma_event_remap dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources spi: spi-mtk-nor: initialize spi controller after resume esp: limit skb_page_frag_refill use to a single page igc: Fix infinite loop in release_swfw_sync igc: Fix BUG: scheduling while atomic rxrpc: Restore removed timer deletion net/smc: Fix sock leak when release after smc_shutdown() net/packet: fix packet_sock xmit return value checking ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit() ip6_gre: Fix skb_under_panic in __gre6_xmit() net/sched: cls_u32: fix possible leak in u32_init_knode() l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu ipv6: make ip6_rt_gc_expire an atomic_t netlink: reset network and mac headers in netlink_dump() net: stmmac: Use readl_poll_timeout_atomic() in atomic state dmaengine: idxd: add RO check for wq max_batch_size write dmaengine: idxd: add RO check for wq max_transfer_size write selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets arm64/mm: Remove [PUD\|PMD]_TABLE_BIT from [pud\|pmd]_bad() arm64: mm: fix p?d_leaf() ARM: vexpress/spc: Avoid negative array index when !SMP reset: tegra-bpmp: Restore Handle errors in BPMP response platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant arm64: dts: imx: Fix imx8*-var-som touchscreen property sizes vxlan: fix error return code in vxlan_fdb_append cifs: Check the IOCB_DIRECT flag, not O_DIRECT net: atlantic: Avoid out-of-bounds indexing mt76: Fix undefined behavior due to shift overflowing the constant brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info() drm/msm/mdp5: check the return of kzalloc() net: macb: Restart tx only if queue pointer is lagging scsi: qedi: Fix failed disconnect handling stat: fix inconsistency between struct stat and struct compat_stat nvme: add a quirk to disable namespace identifiers nvme-pci: disable namespace identifiers for Qemu controllers EDAC/synopsys: Read the error count from the correct register mm, hugetlb: allow for "high" userspace addresses oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() ata: pata_marvell: Check the 'bmdma_addr' beforing reading dma: at_xdmac: fix a missing check on list iterator net: atlantic: invert deep par in pm functions, preventing null derefs xtensa: patch_text: Fixup last cpu should be master xtensa: fix a7 clobbering in coprocessor context load/store openvswitch: fix OOB access in reserve_sfa_size() gpio: Request interrupts after IRQ is initialized ASoC: soc-dapm: fix two incorrect uses of list iterator e1000e: Fix possible overflow in LTR decoding ARC: entry: fix syscall_trace_exit argument arm_pmu: Validate single/group leader events sched/pelt: Fix attach_entity_load_avg() corner case perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare KVM: PPC: Fix TCE handling for VFIO drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage powerpc/perf: Fix power9 event alternatives perf report: Set PERF_SAMPLE_DATA_SRC bit for Arm SPE event ext4: fix fallocate to use file_modified to update permissions consistently ext4: fix symlink file size not match to file content ext4: fix use-after-free in ext4_search_dir ext4: limit length to bitmap_maxbytes - blocksize in punch_hole ext4, doc: fix incorrect h_reserved size ext4: fix overhead calculation to account for the reserved gdt blocks ext4: force overhead calculation if the s_overhead_cluster makes no sense can: isotp: stop timeout monitoring when no first frame was sent jbd2: fix a potential race while discarding reserved buffers after an abort spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller staging: ion: Prevent incorrect reference counting behavour block/compat_ioctl: fix range check in BLKGETSIZE Revert "net: micrel: fix KS8851_MLL Kconfig" Linux 5.10.113 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I4ed10699cbb32b89caf79b8b4a2a35b3d8824115	2022-05-12 11:23:35 +02:00
Christophe Leroy	6b932920b9	mm, hugetlb: allow for "high" userspace addresses commit 5f24d5a579d1eace79d505b148808a850b417d4c upstream. This is a fix for commit `f6795053da` ("mm: mmap: Allow for "high" userspace addresses") for hugetlb. This patch adds support for "high" userspace addresses that are optionally supported on the system and have to be requested via a hint mechanism ("high" addr parameter to mmap). Architectures such as powerpc and x86 achieve this by making changes to their architectural versions of hugetlb_get_unmapped_area() function. However, arm64 uses the generic version of that function. So take into account arch_get_mmap_base() and arch_get_mmap_end() in hugetlb_get_unmapped_area(). To allow that, move those two macros out of mm/mmap.c into include/linux/sched/mm.h If these macros are not defined in architectural code then they default to (TASK_SIZE) and (base) so should not introduce any behavioural changes to architectures that do not define them. For the time being, only ARM64 is affected by this change. Catalin (ARM64) said "We should have fixed hugetlb_get_unmapped_area() as well when we added support for 52-bit VA. The reason for commit `f6795053da` was to prevent normal mmap() from returning addresses above 48-bit by default as some user-space had hard assumptions about this. It's a slight ABI change if you do this for hugetlb_get_unmapped_area() but I doubt anyone would notice. It's more likely that the current behaviour would cause issues, so I'd rather have them consistent. Basically when arm64 gained support for 52-bit addresses we did not want user-space calling mmap() to suddenly get such high addresses, otherwise we could have inadvertently broken some programs (similar behaviour to x86 here). Hence we added commit `f6795053da`. But we missed hugetlbfs which could still get such high mmap() addresses. So in theory that's a potential regression that should have bee addressed at the same time as commit `f6795053da` (and before arm64 enabled 52-bit addresses)" Link: https://lkml.kernel.org/r/ab847b6edb197bffdfe189e70fb4ac76bfe79e0d.1650033747.git.christophe.leroy@csgroup.eu Fixes: `f6795053da` ("mm: mmap: Allow for "high" userspace addresses") Signed-off-by: Christophe Leroy <christophe.leroy@csgroup.eu> Reviewed-by: Catalin Marinas <catalin.marinas@arm.com> Cc: Steve Capper <steve.capper@arm.com> Cc: Will Deacon <will.deacon@arm.com> Cc: <stable@vger.kernel.org> [5.0.x] Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-04-27 13:53:54 +02:00
Greg Kroah-Hartman	95f4203fc9	This is the 5.10.110 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmJQLWwACgkQONu9yGCS aT4R2BAAr/cGnf2/BQ6+zNPW+LlfGn75803yd+oWNL8WzjNiQGrTsQavE1jL0LXP 45iPxvY6eOlP9oEoJGYyNYhzQfUM92Unysa/KemB/xUBsb2If0ZdWk1WB9Lnw0xq m65kACXovbcg4LsZGpgCv7ln1ykogo+bNMES9P6CLxwKR/DMKUeJxbRNKE/AkD5l DxF7IJEP+YRbKAtoLM2Xj4KdjVSfRIfs+Pf0A1t43GqAw6tt3beqmzeCwDzuzz5a DHpXS6PeJjTZOjz4LkuBSbyK5cKGFv1C6o7JVjWSZhDyI5E4OLdNDpNKqcjsXAN+ wMqS1eh4gYUBXmPE44BGwkkugPyaR0/KHUebfkFZG2/H/8DfvrGqlbvsGSFNXxsV jH2/AV/rOxAFeM/U0c1I4Ve42MU18kdf1MRBo0Dq5xSoN9HFQhNp+HE5jpppgsvi FYpMqZoQzH31GIjOq7g0zLdj4NTBrkO9dh7kbpH0Xay1yBmigvD2PA4qpsL1+VMI v73Iq/RJVGUJFAeiYFjn9IGs9EsiKNG08v9uoKS+1m1VLrpVdgwtzo+RjJ/E51Mt Nk4WK94MyoivkRFKulDasv9yBWdcZCfljc91271UCKCERlyO/bmsTqhffeATGGRh N/7oxa71BHvxp0VYqvKD6xFUs+jFt9DQmIX7Pl1/yLpaz+sN0no= =31mv -----END PGP SIGNATURE----- Merge 5.10.110 into android12-5.10-lts Changes in 5.10.110 swiotlb: fix info leak with DMA_FROM_DEVICE USB: serial: pl2303: add IBM device IDs USB: serial: simple: add Nokia phone driver hv: utils: add PTP_1588_CLOCK to Kconfig to fix build netdevice: add the case if dev is NULL HID: logitech-dj: add new lightspeed receiver id xfrm: fix tunnel model fragmentation behavior ARM: mstar: Select HAVE_ARM_ARCH_TIMER virtio_console: break out of buf poll on remove vdpa/mlx5: should verify CTRL_VQ feature exists for MQ tools/virtio: fix virtio_test execution ethernet: sun: Free the coherent when failing in probing gpio: Revert regression in sysfs-gpio (gpiolib.c) spi: Fix invalid sgs value net:mcf8390: Use platform_get_irq() to get the interrupt Revert "gpio: Revert regression in sysfs-gpio (gpiolib.c)" spi: Fix erroneous sgs value with min_t() Input: zinitix - do not report shadow fingers af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register net: dsa: microchip: add spi_device_id tables locking/lockdep: Avoid potential access of invalid memory in lock_class iommu/iova: Improve 32-bit free space estimate tpm: fix reference counting for struct tpm_chip virtio-blk: Use blk_validate_block_size() to validate block size USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c xhci: fix garbage USBSTS being logged in some cases xhci: fix runtime PM imbalance in USB2 resume xhci: make xhci_handshake timeout for xhci_reset() adjustable xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx() mei: me: add Alder Lake N device id. mei: avoid iterator usage outside of list_for_each_entry coresight: Fix TRCCONFIGR.QE sysfs interface iio: afe: rescale: use s64 for temporary scale calculations iio: inkern: apply consumer scale on IIO_VAL_INT cases iio: inkern: apply consumer scale when no channel scale is available iio: inkern: make a best effort on offset calculation greybus: svc: fix an error handling bug in gb_svc_hello() clk: uniphier: Fix fixed-rate initialization ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE KEYS: fix length validation in keyctl_pkey_params_get_2() Documentation: add link to stable release candidate tree Documentation: update stable tree link firmware: stratix10-svc: add missing callback parameter on RSU HID: intel-ish-hid: Use dma_alloc_coherent for firmware update SUNRPC: avoid race between mod_timer() and del_timer_sync() NFSD: prevent underflow in nfssvc_decode_writeargs() NFSD: prevent integer overflow on 32 bit systems f2fs: fix to unlock page correctly in error path of is_alive() f2fs: quota: fix loop condition at f2fs_quota_sync() f2fs: fix to do sanity check on .cp_pack_total_block_count remoteproc: Fix count check in rproc_coredump_write() pinctrl: samsung: drop pin banks references on error paths spi: mxic: Fix the transmit path mtd: rawnand: protect access to rawnand devices while in suspend can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path jffs2: fix use-after-free in jffs2_clear_xattr_subsystem jffs2: fix memory leak in jffs2_do_mount_fs jffs2: fix memory leak in jffs2_scan_medium mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node mm: invalidate hwpoison page cache page in fault path mempolicy: mbind_range() set_policy() after vma_merge() scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands qed: display VF trust config qed: validate and restrict untrusted VFs vlan promisc mode riscv: Fix fill_callchain return value riscv: Increase stack size under KASAN Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" cifs: prevent bad output lengths in smb2_ioctl_query_info() cifs: fix NULL ptr dereference in smb2_ioctl_query_info() ALSA: cs4236: fix an incorrect NULL check on list iterator ALSA: hda: Avoid unsol event during RPM suspending ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020 mm: madvise: skip unmapped vma holes passed to process_madvise mm: madvise: return correct bytes advised with process_madvise Revert "mm: madvise: skip unmapped vma holes passed to process_madvise" mm,hwpoison: unmap poisoned page before invalidation mm/kmemleak: reset tag when compare object pointer dm integrity: set journal entry unused when shrinking device drbd: fix potential silent data corruption can: isotp: sanitize CAN ID checks in isotp_bind() powerpc/kvm: Fix kvm_use_magic_page udp: call udp_encap_enable for v6 sockets when enabling encap arm64: signal: nofpsimd: Do not allocate fp/simd context when not available arm64: dts: ti: k3-am65: Fix gic-v3 compatible regs arm64: dts: ti: k3-j721e: Fix gic-v3 compatible regs arm64: dts: ti: k3-j7200: Fix gic-v3 compatible regs ACPI: properties: Consistently return -ENOENT if there are no more references coredump: Also dump first pages of non-executable ELF libraries ext4: fix ext4_fc_stats trace point ext4: fix fs corruption when tring to remove a non-empty directory with IO error drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() mailbox: tegra-hsp: Flush whole channel block: limit request dispatch loop duration block: don't merge across cgroup boundaries if blkcg is enabled drm/edid: check basic audio support on CEA extension block video: fbdev: sm712fb: Fix crash in smtcfb_read() video: fbdev: atari: Atari 2 bpp (STe) palette bugfix ARM: dts: at91: sama5d2: Fix PMERRLOC resource size ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 ARM: dts: exynos: add missing HDMI supplies on SMDK5250 ARM: dts: exynos: add missing HDMI supplies on SMDK5420 mgag200 fix memmapsl configuration in GCTL6 register carl9170: fix missing bit-wise or operator for tx_params pstore: Don't use semaphores in always-atomic-context code thermal: int340x: Increase bitmap size lib/raid6/test: fix multiple definition linking error exec: Force single empty string when argv is empty crypto: rsa-pkcs1pad - only allow with rsa crypto: rsa-pkcs1pad - correctly get hash from source scatterlist crypto: rsa-pkcs1pad - restore signature length check crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete() bcache: fixup multiple threads crash DEC: Limit PMAX memory probing to R3k systems media: gpio-ir-tx: fix transmit with long spaces on Orange Pi PC media: davinci: vpif: fix unbalanced runtime PM get media: davinci: vpif: fix unbalanced runtime PM enable xtensa: fix stop_machine_cpuslocked call in patch_text xtensa: fix xtensa_wsr always writing 0 brcmfmac: firmware: Allocate space for default boardrev in nvram brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio brcmfmac: pcie: Fix crashes due to early IRQs drm/i915/opregion: check port number bounds for SWSCI display power state drm/i915/gem: add missing boundary check in vm_access PCI: pciehp: Clear cmd_busy bit in polling mode PCI: xgene: Revert "PCI: xgene: Fix IB window setup" regulator: qcom_smd: fix for_each_child.cocci warnings selinux: check return value of sel_make_avc_files hwrng: cavium - Check health status while reading random data hwrng: cavium - HW_RANDOM_CAVIUM should depend on ARCH_THUNDER crypto: sun8i-ss - really disable hash on A80 crypto: authenc - Fix sleep in atomic context in decrypt_tail crypto: mxs-dcp - Fix scatterlist processing thermal: int340x: Check for NULL after calling kmemdup() spi: tegra114: Add missing IRQ check in tegra_spi_probe arm64/mm: avoid fixmap race condition when create pud mapping selftests/x86: Add validity check and allow field splitting crypto: rockchip - ECB does not need IV audit: log AUDIT_TIME_* records only from rules EVM: fix the evm= __setup handler return value crypto: ccree - don't attempt 0 len DMA mappings spi: pxa2xx-pci: Balance reference count for PCI DMA device hwmon: (pmbus) Add mutex to regulator ops hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING nvme: cleanup __nvme_check_ids block: don't delete queue kobject before its children PM: hibernate: fix __setup handler error handling PM: suspend: fix return value of __setup handler spi: spi-zynqmp-gqspi: Handle error for dma_set_mask hwrng: atmel - disable trng on failure path crypto: sun8i-ss - call finalize with bh disabled crypto: sun8i-ce - call finalize with bh disabled crypto: amlogic - call finalize with bh disabled crypto: vmx - add missing dependencies clocksource/drivers/timer-ti-dm: Fix regression from errata i940 fix clocksource/drivers/exynos_mct: Refactor resources allocation clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts clocksource/drivers/timer-microchip-pit64b: Use notrace clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init() ACPI: APEI: fix return value of __setup handlers crypto: ccp - ccp_dmaengine_unregister release dma channels crypto: ccree - Fix use after free in cc_cipher_exit() vfio: platform: simplify device removal amba: Make the remove callback return void hwrng: nomadik - Change clk_disable to clk_disable_unprepare hwmon: (pmbus) Add Vin unit off handling clocksource: acpi_pm: fix return value of __setup handler io_uring: terminate manual loop iterator loop correctly for non-vecs watch_queue: Fix NULL dereference in error cleanup watch_queue: Actually free the watch f2fs: fix to enable ATGC correctly via gc_idle sysfs interface sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa sched/core: Export pelt_thermal_tp rseq: Optimise rseq_get_rseq_cs() and clear_rseq_cs() rseq: Remove broken uapi field layout on 32-bit little endian perf/core: Fix address filter parser for multiple filters perf/x86/intel/pt: Fix address filter config for 32-bit kernel f2fs: fix missing free nid in f2fs_handle_failed_inode nfsd: more robust allocation failure handling in nfsd_file_cache_init f2fs: fix to avoid potential deadlock btrfs: fix unexpected error path when reflinking an inline extent f2fs: compress: remove unneeded read when rewrite whole cluster f2fs: fix compressed file start atomic write may cause data corruption selftests, x86: fix how check_cc.sh is being invoked kunit: make kunit_test_timeout compatible with comment media: staging: media: zoran: fix usage of vb2_dma_contig_set_max_seg_size media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls media: mtk-vcodec: potential dereference of null pointer media: bttv: fix WARNING regression on tunerless devices ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting ASoC: generic: simple-card-utils: remove useless assignment media: coda: Fix missing put_device() call in coda_get_vdoa_data media: meson: vdec: potential dereference of null pointer media: hantro: Fix overfill bottom register field name media: aspeed: Correct value for h-total-pixels video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to avoid black screen video: fbdev: controlfb: Fix set but not used warnings video: fbdev: controlfb: Fix COMPILE_TEST build video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe() video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() firmware: qcom: scm: Remove reassignment to desc following initializer ARM: dts: qcom: ipq4019: fix sleep clock soc: qcom: rpmpd: Check for null return of devm_kcalloc soc: qcom: ocmem: Fix missing put_device() call in of_get_ocmem soc: qcom: aoss: remove spurious IRQF_ONESHOT flags arm64: dts: qcom: sdm845: fix microphone bias properties and values arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc firmware: ti_sci: Fix compilation failure when CONFIG_TI_SCI_PROTOCOL is not defined soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe ARM: dts: sun8i: v3s: Move the csi1 block to follow address order ARM: dts: imx: Add missing LVDS decoder on M53Menlo media: video/hdmi: handle short reads of hdmi info frame. media: em28xx: initialize refcount before kref_get media: usb: go7007: s2250-board: fix leak in probe() media: cedrus: H265: Fix neighbour info buffer size media: cedrus: h264: Fix neighbour info buffer size ASoC: codecs: wcd934x: fix return value of wcd934x_rx_hph_mode_put uaccess: fix nios2 and microblaze get_user_8() ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() ASoC: ti: davinci-i2s: Add check for clk_enable() ALSA: spi: Add check for clk_enable() arm64: dts: ns2: Fix spi-cpol and spi-cpha property arm64: dts: broadcom: Fix sata nodename printk: fix return value of printk.devkmsg __setup handler ASoC: mxs-saif: Handle errors for clk_enable ASoC: atmel_ssc_dai: Handle errors for clk_enable ASoC: dwc-i2s: Handle errors for clk_enable ASoC: soc-compress: prevent the potentially use of null pointer memory: emif: Add check for setup_interrupts memory: emif: check the pointer temp in get_device_details() ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly m68k: coldfire/device.c: only build for MCF_EDMA when h/w macros are defined media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED media: vidtv: Check for null return of vzalloc ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe ASoC: wm8350: Handle error for wm8350_register_irq ASoC: fsi: Add check for clk_enable video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of media: saa7134: convert list_for_each to entry variant media: saa7134: fix incorrect use to determine if list is empty ivtv: fix incorrect device_caps for ivtvfb ASoC: rockchip: i2s: Use devm_platform_get_and_ioremap_resource() ASoC: rockchip: i2s: Fix missing clk_disable_unprepare() in rockchip_i2s_probe ASoC: SOF: Add missing of_node_put() in imx8m_probe ASoC: dmaengine: do not use a NULL prepare_slave_config() callback ASoC: mxs: Fix error handling in mxs_sgtl5000_probe ASoC: fsl_spdif: Disable TX clock when stop ASoC: imx-es8328: Fix error return code in imx_es8328_probe() ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe mmc: davinci_mmc: Handle error for clk_enable ASoC: atmel: sam9x5_wm8731: use devm_snd_soc_register_card() ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data ARM: configs: multi_v5_defconfig: re-enable CONFIG_V4L_PLATFORM_DRIVERS drm/meson: osd_afbcd: Add an exit callback to struct meson_afbcd_ops drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe drm/bridge: nwl-dsi: Fix PM disable depth imbalance in nwl_dsi_probe drm: bridge: adv7511: Fix ADV7535 HPD enablement ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern drm/panfrost: Check for error num after setting mask libbpf: Fix possible NULL pointer dereference when destroying skeleton udmabuf: validate ubuf->pagecount Bluetooth: hci_serdev: call init_rwsem() before p->open() mtd: onenand: Check for error irq mtd: rawnand: gpmi: fix controller timings setting drm/edid: Don't clear formats if using deep color ionic: fix type complaint in ionic_dev_cmd_clean() drm/nouveau/acr: Fix undefined behavior in nvkm_acr_hsfw_load_bl() drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() drm/amd/pm: return -ENOTSUPP if there is no get_dpm_ultimate_freq function ath9k_htc: fix uninit value bugs RDMA/core: Set MR type in ib_reg_user_mr KVM: PPC: Fix vmx/vsx mixup in mmio emulation i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb i40e: respect metadata on XSK Rx to skb power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe ray_cs: Check ioremap return value powerpc: dts: t1040rdb: fix ports names for Seville Ethernet switch KVM: PPC: Book3S HV: Check return value of kvmppc_radix_init powerpc/perf: Don't use perf_hw_context for trace IMC PMU mt76: mt7915: use proper aid value in mt7915_mcu_wtbl_generic_tlv in sta mode mt76: mt7915: use proper aid value in mt7915_mcu_sta_basic_tlv mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update net: dsa: mv88e6xxx: Enable port policy support on 6097 scripts/dtc: Call pkg-config POSIXly correct livepatch: Fix build failure on 32 bits processors PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge drm/bridge: dw-hdmi: use safe format when first in bridge chain power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports iommu/ipmmu-vmsa: Check for error num after setting mask drm/amd/pm: enable pm sysfs write for one VF mode drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug IB/cma: Allow XRC INI QPs to set their local ACK timeout dax: make sure inodes are flushed before destroy cache iwlwifi: Fix -EIO error code that is never returned iwlwifi: mvm: Fix an error code in iwl_mvm_up() drm/msm/dp: populate connector of struct dp_panel drm/msm/dpu: add DSPP blocks teardown drm/msm/dpu: fix dp audio condition dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS scsi: pm8001: Fix command initialization in pm80XX_send_read_log() scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() scsi: pm8001: Fix le32 values handling in pm80xx_set_sas_protocol_timer_config() scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update() scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req() scsi: pm8001: Fix le32 values handling in pm80xx_chip_sata_req() scsi: pm8001: Fix NCQ NON DATA command task initialization scsi: pm8001: Fix NCQ NON DATA command completion handling scsi: pm8001: Fix abort all task initialization RDMA/mlx5: Fix the flow of a miss in the allocation of a cache ODP MR drm/amd/display: Remove vupdate_int_entry definition TOMOYO: fix __setup handlers return values ext2: correct max file size computing drm/tegra: Fix reference leak in tegra_dsi_ganged_probe power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return scsi: hisi_sas: Change permission of parameter prot_mask drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt bpf, arm64: Call build_prologue() first in first JIT pass bpf, arm64: Feed byte-offset into bpf line info gpu: host1x: Fix a memory leak in 'host1x_remove()' libbpf: Skip forward declaration when counting duplicated type names powerpc/mm/numa: skip NUMA_NO_NODE onlining in parse_numa_properties() powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit KVM: x86: Fix emulation in writing cr8 KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() hv_balloon: rate-limit "Unhandled message" warning i2c: xiic: Make bus names unique power: supply: wm8350-power: Handle error for wm8350_register_irq power: supply: wm8350-power: Add missing free in free_charger_irq IB/hfi1: Allow larger MTU without AIP PCI: Reduce warnings on possible RW1C corruption net: axienet: fix RX ring refill allocation failure handling mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n powerpc/sysdev: fix incorrect use to determine if list is empty mfd: mc13xxx: Add check for mc13xxx_irq_request libbpf: Unmap rings when umem deleted selftests/bpf: Make test_lwt_ip_encap more stable and faster platform/x86: huawei-wmi: check the return value of device_create_file() powerpc: 8xx: fix a return value error in mpc8xx_pic_init vxcan: enable local echo for sent CAN frames ath10k: Fix error handling in ath10k_setup_msa_resources mips: cdmm: Fix refcount leak in mips_cdmm_phys_base MIPS: RB532: fix return value of __setup handler MIPS: pgalloc: fix memory leak caused by pgd_free() mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init RDMA/mlx5: Fix memory leak in error flow for subscribe event routine bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full bpf, sockmap: Fix more uncharged while msg has more_data bpf, sockmap: Fix double uncharge the mem of sk_msg samples/bpf, xdpsock: Fix race when running for fix duration of time USB: storage: ums-realtek: fix error code in rts51x_read_mem() can: isotp: return -EADDRNOTAVAIL when reading from unbound socket can: isotp: support MSG_TRUNC flag when reading from socket bareudp: use ipv6_mod_enabled to check if IPv6 enabled selftests/bpf: Fix error reporting from sock_fields programs Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt ipv4: Fix route lookups when handling ICMP redirects and PMTU updates af_netlink: Fix shift out of bounds in group mask calculation i2c: meson: Fix wrong speed use from probe i2c: mux: demux-pinctrl: do not deactivate a master that is not active selftests/bpf/test_lirc_mode2.sh: Exit with proper code PCI: Avoid broken MSI on SB600 USB devices net: bcmgenet: Use stronger register read/writes to assure ordering tcp: ensure PMTU updates are processed during fastopen openvswitch: always update flow key after nat tipc: fix the timer expires after interval 100ms mfd: asic3: Add missing iounmap() on error asic3_mfd_probe mxser: fix xmit_buf leak in activate when LSR == 0xff pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() fsi: aspeed: convert to devm_platform_ioremap_resource fsi: Aspeed: Fix a potential double free misc: alcor_pci: Fix an error handling path cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse soundwire: intel: fix wrong register name in intel_shim_wake clk: qcom: ipq8074: fix PCI-E clock oops iio: mma8452: Fix probe failing when an i2c_device_id is used staging:iio:adc:ad7280a: Fix handing of device address bit reversing. pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel pinctrl: renesas: checker: Fix miscalculation of number of states clk: qcom: ipq8074: Use floor ops for SDCC1 clock phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure}) serial: 8250_mid: Balance reference count for PCI DMA device serial: 8250_lpss: Balance reference count for PCI DMA device NFS: Use of mapping_set_error() results in spurious errors serial: 8250: Fix race condition in RTS-after-send handling iio: adc: Add check for devm_request_threaded_irq habanalabs: Add check for pci_enable_device NFS: Return valid errors from nfs2/3_decode_dirent() dma-debug: fix return value of __setup handlers clk: imx7d: Remove audio_mclk_root_clk clk: at91: sama7g5: fix parents of PDMCs' GCLK clk: qcom: clk-rcg2: Update logic to calculate D value for RCG clk: qcom: clk-rcg2: Update the frac table for pixel clock dmaengine: hisi_dma: fix MSI allocate fail when reload hisi_dma remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region nvdimm/region: Fix default alignment for small regions clk: actions: Terminate clk_div_table with sentinel element clk: loongson1: Terminate clk_div_table with sentinel element clk: clps711x: Terminate clk_div_table with sentinel element clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver NFS: remove unneeded check in decode_devicenotify_args() staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree staging: mt7621-dts: fix formatting staging: mt7621-dts: fix pinctrl properties for ethernet staging: mt7621-dts: fix GB-PC2 devicetree pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get() pinctrl: mediatek: paris: Fix pingroup pin config state readback pinctrl: mediatek: paris: Skip custom extra pin config dump for virtual GPIOs pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe tty: hvc: fix return value of __setup handler kgdboc: fix return value of __setup handler serial: 8250: fix XOFF/XON sending when DMA is used kgdbts: fix return value of __setup handler firmware: google: Properly state IOMEM dependency driver core: dd: fix return value of __setup handler jfs: fix divide error in dbNextAG netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error kdb: Fix the putarea helper function clk: qcom: gcc-msm8994: Fix gpll4 width clk: Initialize orphan req_rate xen: fix is_xen_pmu() net: enetc: report software timestamping via SO_TIMESTAMPING net: hns3: fix bug when PF set the duplicate MAC address for VFs net: phy: broadcom: Fix brcm_fet_config_init() selftests: test_vxlan_under_vrf: Fix broken test case qlcnic: dcb: default to returning -EOPNOTSUPP net/x25: Fix null-ptr-deref caused by x25_disconnect NFSv4/pNFS: Fix another issue with a list iterator pointing to the head net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator fs: fd tables have to be multiples of BITS_PER_LONG lib/test: use after free in register_test_dev_kmod() fs: fix fd table size alignment properly LSM: general protection fault in legacy_parse_param regulator: rpi-panel: Handle I2C errors/timing to the Atmel gcc-plugins/stackleak: Exactly match strings instead of prefixes pinctrl: npcm: Fix broken references to chip->parent_device block, bfq: don't move oom_bfqq selinux: use correct type for context length selinux: allow FIOCLEX and FIONCLEX with policy capability loop: use sysfs_emit() in the sysfs xxx show() Fix incorrect type in assignment of ipv6 port for audit irqchip/qcom-pdc: Fix broken locking irqchip/nvic: Release nvic_base upon failure fs/binfmt_elf: Fix AT_PHDR for unusual ELF files bfq: fix use-after-free in bfq_dispatch_request ACPICA: Avoid walking the ACPI Namespace if it is not there lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3 Revert "Revert "block, bfq: honor already-setup queue merges"" ACPI/APEI: Limit printable size of BERT table data PM: core: keep irq flags in device_pm_check_callbacks() parisc: Fix handling off probe non-access faults nvme-tcp: lockdep: annotate in-kernel sockets spi: tegra20: Use of_device_get_match_data() locking/lockdep: Iterate lock_classes directly when reading lockdep files ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit ext4: don't BUG if someone dirty pages without asking ext4 first f2fs: fix to do sanity check on curseg->alloc_type NFSD: Fix nfsd_breaker_owns_lease() return values f2fs: compress: fix to print raw data size in error path of lz4 decompression ntfs: add sanity check on allocation size media: staging: media: zoran: move videodev alloc media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com media: staging: media: zoran: fix various V4L2 compliance errors media: ir_toy: free before error exiting video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow video: fbdev: w100fb: Reset global state video: fbdev: cirrusfb: check pixclock to avoid divide by zero video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 ARM: dts: bcm2837: Add the missing L1/L2 cache information ASoC: madera: Add dependencies on MFD media: atomisp_gmin_platform: Add DMI quirk to not turn AXP ELDO2 regulator off on some boards media: atomisp: fix dummy_ptr check to avoid duplicate active_bo ARM: ftrace: avoid redundant loads or clobbering IP ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk arm64: defconfig: build imx-sdma as a module video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit ARM: dts: bcm2711: Add the missing L1/L2 cache information ASoC: soc-core: skip zero num_dai component in searching dai name media: cx88-mpeg: clear interrupt status register before streaming video uaccess: fix type mismatch warnings from access_ok() lib/test_lockup: fix kernel pointer check for separate address spaces ARM: tegra: tamonten: Fix I2C3 pad setting ARM: mmp: Fix failure to remove sram device video: fbdev: sm712fb: Fix crash in smtcfb_write() media: Revert "media: em28xx: add missing em28xx_close_extension" media: hdpvr: initialize dev->worker at hdpvr_register_videodev mmc: host: Return an error when ->enable_sdio_irq() ops is missing media: atomisp: fix bad usage at error handling logic ALSA: hda/realtek: Add alc256-samsung-headphone fixup KVM: x86/mmu: Check for present SPTE when clearing dirty bit in TDP MMU powerpc/kasan: Fix early region not updated correctly powerpc/lib/sstep: Fix 'sthcx' instruction powerpc/lib/sstep: Fix build errors with newer binutils powerpc: Fix build errors with newer binutils scsi: qla2xxx: Fix stuck session in gpdb scsi: qla2xxx: Fix scheduling while atomic scsi: qla2xxx: Fix wrong FDMI data for 64G adapter scsi: qla2xxx: Fix warning for missing error code scsi: qla2xxx: Fix device reconnect in loop topology scsi: qla2xxx: Add devids and conditionals for 28xx scsi: qla2xxx: Check for firmware dump already collected scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() scsi: qla2xxx: Fix disk failure to rediscover scsi: qla2xxx: Fix incorrect reporting of task management failure scsi: qla2xxx: Fix hang due to session stuck scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests scsi: qla2xxx: Fix N2N inconsistent PLOGI scsi: qla2xxx: Reduce false trigger to login scsi: qla2xxx: Use correct feature type field during RFF_ID processing platform: chrome: Split trace include file KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated KVM: Prevent module exit until all VMs are freed KVM: x86: fix sending PV IPI KVM: SVM: fix panic on out-of-bounds guest IRQ ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM ubifs: rename_whiteout: Fix double free for whiteout_ui->data ubifs: Fix deadlock in concurrent rename whiteout and inode writeback ubifs: Add missing iput if do_tmpfile() failed in rename whiteout ubifs: setflags: Make dirtied_ino_d 8 bytes aligned ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() ubifs: Fix to add refcount once page is set private ubifs: rename_whiteout: correct old_dir size computing wireguard: queueing: use CFI-safe ptr_ring cleanup function wireguard: socket: free skb in send6 when ipv6 is disabled wireguard: socket: ignore v6 endpoints when ipv6 is disabled XArray: Fix xas_create_range() when multi-order entry present can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path can: mcba_usb: properly check endpoint type can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix return of error value XArray: Update the LRU list in xas_split() rtc: check if __rtc_read_time was successful gfs2: Make sure FITRIM minlen is rounded up to fs block size net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware rxrpc: Fix call timer start racing with call destruction mailbox: imx: fix wakeup failure from freeze mode crypto: arm/aes-neonbs-cbc - Select generic cbc and aes watch_queue: Free the page array when watch_queue is dismantled pinctrl: pinconf-generic: Print arguments for bias-pull-* watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR() pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE() ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl ARM: iop32x: offset IRQ numbers by 1 io_uring: fix memory leak of uid in files registration riscv module: remove (NOLOAD) ACPI: CPPC: Avoid out of bounds access when parsing _CPC data platform/chrome: cros_ec_typec: Check for EC device can: isotp: restore accidentally removed MSG_PEEK feature proc: bootconfig: Add null pointer check staging: mt7621-dts: fix pinctrl-0 items to be size-1 items on ethernet ASoC: soc-compress: Change the check for codec_dai batman-adv: Check ptr for NULL before reducing its refcnt mm/mmap: return 1 from stack_guard_gap __setup() handler ARM: 9187/1: JIVE: fix return value of __setup handler mm/memcontrol: return 1 from cgroup.memory __setup() handler mm/usercopy: return 1 from hardened_usercopy __setup() handler bpf: Adjust BPF stack helper functions to accommodate skip > 0 bpf: Fix comment for helper bpf_current_task_under_cgroup() dt-bindings: mtd: nand-controller: Fix the reg property description dt-bindings: mtd: nand-controller: Fix a comment in the examples dt-bindings: spi: mxic: The interrupt property is not mandatory ubi: fastmap: Return error code if memory allocation fails in add_aeb() ASoC: topology: Allow TLV control to be either read or write ARM: dts: spear1340: Update serial node properties ARM: dts: spear13xx: Update SPI dma properties um: Fix uml_mconsole stop/go docs: sysctl/kernel: add missing bit to panic_print openvswitch: Fixed nd target mask field in the flow dump. KVM: x86/mmu: do compare-and-exchange of gPTE via the user address can: m_can: m_can_tx_handler(): fix use after free of skb can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path coredump: Snapshot the vmas in do_coredump coredump: Remove the WARN_ON in dump_vma_snapshot coredump/elf: Pass coredump_params into fill_note_info coredump: Use the vma snapshot in fill_files_note arm64: Do not defer reserve_crashkernel() for platforms with no DMA memory zones PCI: xgene: Revert "PCI: xgene: Use inbound resources for setup" Linux 5.10.110 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I12fbe227793dd40c0582588e1700cf88cafd0ac6	2022-04-18 17:41:18 +02:00
Randy Dunlap	d57feed3b1	mm/mmap: return 1 from stack_guard_gap __setup() handler commit e6d094936988910ce6e8197570f2753898830081 upstream. __setup() handlers should return 1 if the command line option is handled and 0 if not (or maybe never return 0; it just pollutes init's environment). This prevents: Unknown kernel command line parameters \ "BOOT_IMAGE=/boot/bzImage-517rc5 stack_guard_gap=100", will be \ passed to user space. Run /sbin/init as init process with arguments: /sbin/init with environment: HOME=/ TERM=linux BOOT_IMAGE=/boot/bzImage-517rc5 stack_guard_gap=100 Return 1 to indicate that the boot option has been handled. Note that there is no warning message if someone enters: stack_guard_gap=anything_invalid and 'val' and stack_guard_gap are both set to 0 due to the use of simple_strtoul(). This could be improved by using kstrtoxxx() and checking for an error. It appears that having stack_guard_gap == 0 is valid (if unexpected) since using "stack_guard_gap=0" on the kernel command line does that. Link: https://lkml.kernel.org/r/20220222005817.11087-1-rdunlap@infradead.org Link: lore.kernel.org/r/64644a2f-4a20-bab3-1e15-3b2cdd0defe3@omprussia.ru Fixes: `1be7107fbe` ("mm: larger stack guard gap, between vmas") Signed-off-by: Randy Dunlap <rdunlap@infradead.org> Reported-by: Igor Zhbanov <i.zhbanov@omprussia.ru> Cc: Hugh Dickins <hughd@google.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-04-08 14:40:43 +02:00
Suren Baghdasaryan	2452622293	FROMLIST: mm: protect free_pgtables with mmap_lock write lock in exit_mmap oom-reaper and process_mrelease system call should protect against races with exit_mmap which can destroy page tables while they walk the VMA tree. oom-reaper protects from that race by setting MMF_OOM_VICTIM and by relying on exit_mmap to set MMF_OOM_SKIP before taking and releasing mmap_write_lock. process_mrelease has to elevate mm->mm_users to prevent such race. Both oom-reaper and process_mrelease hold mmap_read_lock when walking the VMA tree. The locking rules and mechanisms could be simpler if exit_mmap takes mmap_write_lock while executing destructive operations such as free_pgtables. Change exit_mmap to hold the mmap_write_lock when calling free_pgtables. Operations like unmap_vmas() and unlock_range() are not destructive and could run under mmap_read_lock but for simplicity we take one mmap_write_lock during almost the entire operation. Note also that because oom-reaper checks VM_LOCKED flag, unlock_range() should not be allowed to race with it. In most cases this lock should be uncontended. Previously, Kirill reported ~4% regression caused by a similar change [1]. We reran the same test and although the individual results are quite noisy, the percentiles show lower regression with 1.6% being the worst case [2]. The change allows oom-reaper and process_mrelease to execute safely under mmap_read_lock without worries that exit_mmap might destroy page tables from under them. [1] https://lore.kernel.org/all/20170725141723.ivukwhddk2voyhuc@node.shutemov.name/ [2] https://lore.kernel.org/all/CAJuCfpGC9-c9P40x7oy=jy5SphMcd0o0G_6U1-+JAziGKG6dGA@mail.gmail.com/ Signed-off-by: Suren Baghdasaryan <surenb@google.com> Link: https://lore.kernel.org/all/20211124235906.14437-1-surenb@google.com/ Bug: 130172058 Bug: 189803002 Signed-off-by: Suren Baghdasaryan <surenb@google.com> Change-Id: Ic87272d09a0b68a1b0e968e8f1a1510fd6fc776a	2022-01-06 17:37:54 +00:00
Jiewen Wang	878e0caa77	ANDROID: vendor_hooks: Add hook in mmap_region() Add hook in mmap_region() to record the vma and address information of monitored processes. Bug: 198385827 Change-Id: I0bde29113b47ca7f4a9f5d42a54188e791ca3b7e Signed-off-by: Jiewen Wang <jiewen.wang@vivo.com>	2021-09-06 16:51:38 +08:00
xieliujie	c0efdc4a5e	ANDROID: android: export kernel function vm_unmapped_area In our vendor driver, we need to call the following function: mm/mmap.c : unsigned long vm_unmapped_area(struct vm_unmapped_area_info *info); Bug: 191439466 Signed-off-by: xieliujie <xieliujie@oppo.com> Change-Id: I8eb0f8cc80ab7a0ebc9db3e3b217be94843da3ed	2021-07-08 22:12:00 +00:00
xieliujie	0a24affb86	ANDROID: vendor_hooks: modify the function name int the commit: https://android-review.googlesource.com/c/kernel/common/+/1699406/ When we build our vendor driver, report two errors: 1) Symbol too long "trace_android_vh_get_unmapped_area_from_anti_fragment_pool" 2) Symbol too long "trace_android_vh_get_unmapped_area_include_reserved_zone" So, I shorten the function names: android_vh_get_unmapped_area_from_anti_fragment_pool --> android_vh_get_from_fragment_pool android_vh_get_unmapped_area_include_reserved_zone --> android_vh_include_reserved_zone Bug: 191439466 Signed-off-by: xieliujie <xieliujie@oppo.com> Change-Id: Icee4faa24df4fe1fc29434cd205c4dea82b4fba5	2021-07-02 20:42:14 +00:00
Liujie Xie	8c944335a3	ANDROID: Fix access invalid addr because it is not initialized The addr is not initialized, we may access a random value. Fixes: `dc5241048f` ("ANDROID: vendor_hooks: Add hooks for reducing virtual address fragmentation") Bug: 187259935 Signed-off-by: Liujie Xie <xieliujie@oppo.com> Change-Id: I770bf5e69e6fcd4e1ccd3987b4891156892de758	2021-05-26 18:00:01 +00:00
xieliujie	dc5241048f	ANDROID: vendor_hooks: Add hooks for reducing virtual address fragmentation When running 32-bit apps for a long time, virtual address becomes fragmented which can lead to allocation failures when a large virtually-contiguous area is requested. Add hooks to implement pools to cluster together small-sized virtual address mappings. Add hooks to implement reserved virtual address zone with usage restrictions controlled by vendor hooks. These hooks help in controlling virtual address space fragmentation. Bug: 187259935 Signed-off-by: xieliujie <xieliujie@oppo.com> Change-Id: I48c057041f9c7b8c5ab0af305f0cd87a039d0447	2021-05-20 19:36:17 +00:00
Vinayak Menon	c9201630e8	ANDROID: mm: use raw seqcount variants in vm_write_* write_seqcount_begin expects to be called from a non-preemptible context to avoid preemption by a read section that can spin due to an odd value. But the readers of vm_sequence never retries and thus writers need not disable preemption. Use the non-lockdep variant as lockdep checks are now in-built to write_seqcount_begin. Bug: 161210518 Signed-off-by: Vinayak Menon <vinmenon@codeaurora.org> Change-Id: If4f0cddd7f0a79136495060d4acc1702abb46817	2021-01-22 18:02:43 +00:00
Laurent Dufour	6d8fc36d9e	FROMLIST: mm: protect mm_rb tree with a rwlock This change is inspired by the Peter's proposal patch [1] which was protecting the VMA using SRCU. Unfortunately, SRCU is not scaling well in that particular case, and it is introducing major performance degradation due to excessive scheduling operations. To allow access to the mm_rb tree without grabbing the mmap_sem, this patch is protecting it access using a rwlock. As the mm_rb tree is a O(log n) search it is safe to protect it using such a lock. The VMA cache is not protected by the new rwlock and it should not be used without holding the mmap_sem. To allow the picked VMA structure to be used once the rwlock is released, a use count is added to the VMA structure. When the VMA is allocated it is set to 1. Each time the VMA is picked with the rwlock held its use count is incremented. Each time the VMA is released it is decremented. When the use count hits zero, this means that the VMA is no more used and should be freed. This patch is preparing for 2 kind of VMA access : - as usual, under the control of the mmap_sem, - without holding the mmap_sem for the speculative page fault handler. Access done under the control the mmap_sem doesn't require to grab the rwlock to protect read access to the mm_rb tree, but access in write must be done under the protection of the rwlock too. This affects inserting and removing of elements in the RB tree. The patch is introducing 2 new functions: - vma_get() to find a VMA based on an address by holding the new rwlock. - vma_put() to release the VMA when its no more used. These services are designed to be used when access are made to the RB tree without holding the mmap_sem. When a VMA is removed from the RB tree, its vma->vm_rb field is cleared and we rely on the WMB done when releasing the rwlock to serialize the write with the RMB done in a later patch to check for the VMA's validity. When free_vma is called, the file associated with the VMA is closed immediately, but the policy and the file structure remained in used until the VMA's use count reach 0, which may happens later when exiting an in progress speculative page fault. [1] https://patchwork.kernel.org/patch/5108281/ Change-Id: I9ecc922b8efa4b28975cc6a8e9531284c24ac14e Cc: Peter Zijlstra (Intel) <peterz@infradead.org> Cc: Matthew Wilcox <willy@infradead.org> Signed-off-by: Laurent Dufour <ldufour@linux.vnet.ibm.com> Link: https://lore.kernel.org/lkml/1523975611-15978-18-git-send-email-ldufour@linux.vnet.ibm.com/ Bug: 161210518 Signed-off-by: Vinayak Menon <vinmenon@codeaurora.org> Signed-off-by: Charan Teja Reddy <charante@codeaurora.org>	2021-01-22 18:00:57 +00:00
Laurent Dufour	0525756e6b	FROMLIST: mm: protect mremap() against SPF hanlder If a thread is remapping an area while another one is faulting on the destination area, the SPF handler may fetch the vma from the RB tree before the pte has been moved by the other thread. This means that the moved ptes will overwrite those create by the page fault handler leading to page leaked. CPU 1 CPU2 enter mremap() unmap the dest area copy_vma() Enter speculative page fault handler >> at this time the dest area is present in the RB tree fetch the vma matching dest area create a pte as the VMA matched Exit the SPF handler <data written in the new page> move_ptes() > it is assumed that the dest area is empty, > the move ptes overwrite the page mapped by the CPU2. To prevent that, when the VMA matching the dest area is extended or created by copy_vma(), it should be marked as non available to the SPF handler. The usual way to so is to rely on vm_write_begin()/end(). This is already in __vma_adjust() called by copy_vma() (through vma_merge()). But __vma_adjust() is calling vm_write_end() before returning which create a window for another thread. This patch adds a new parameter to vma_merge() which is passed down to vma_adjust(). The assumption is that copy_vma() is returning a vma which should be released by calling vm_raw_write_end() by the callee once the ptes have been moved. Change-Id: Icd338ad6e9b3c97b7334d3b8d30a8badfa2a4efa Signed-off-by: Laurent Dufour <ldufour@linux.vnet.ibm.com> Link: https://lore.kernel.org/lkml/1523975611-15978-11-git-send-email-ldufour@linux.vnet.ibm.com/ Bug: 161210518 Signed-off-by: Vinayak Menon <vinmenon@codeaurora.org>	2021-01-22 17:59:57 +00:00
Laurent Dufour	9cfe16897f	FROMLIST: mm: protect VMA modifications using VMA sequence count The VMA sequence count has been introduced to allow fast detection of VMA modification when running a page fault handler without holding the mmap_sem. This patch provides protection against the VMA modification done in : - madvise() - mpol_rebind_policy() - vma_replace_policy() - change_prot_numa() - mlock(), munlock() - mprotect() - mmap_region() - collapse_huge_page() - userfaultd registering services In addition, VMA fields which will be read during the speculative fault path needs to be written using WRITE_ONCE to prevent write to be split and intermediate values to be pushed to other CPUs. Change-Id: Ic36046b7254e538b6baf7144c50ae577ee7f2074 Signed-off-by: Laurent Dufour <ldufour@linux.vnet.ibm.com> Link: https://lore.kernel.org/lkml/1523975611-15978-10-git-send-email-ldufour@linux.vnet.ibm.com/ Bug: 161210518 Signed-off-by: Vinayak Menon <vinmenon@codeaurora.org> Signed-off-by: Charan Teja Reddy <charante@codeaurora.org>	2021-01-22 17:59:47 +00:00
Peter Zijlstra	2ce6b11ac3	FROMLIST: mm: VMA sequence count Wrap the VMA modifications (vma_adjust/unmap_page_range) with sequence counts such that we can easily test if a VMA is changed. The unmap_page_range() one allows us to make assumptions about page-tables; when we find the seqcount hasn't changed we can assume page-tables are still valid. The flip side is that we cannot distinguish between a vma_adjust() and the unmap_page_range() -- where with the former we could have re-checked the vma bounds against the address. Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org> [Port to 4.12 kernel] [Build depends on CONFIG_SPECULATIVE_PAGE_FAULT] [Introduce vm_write_* inline function depending on CONFIG_SPECULATIVE_PAGE_FAULT] [Fix lock dependency between mapping->i_mmap_rwsem and vma->vm_sequence by using vm_raw_write* functions] [Fix a lock dependency warning in mmap_region() when entering the error path] [move sequence initialisation INIT_VMA()] Signed-off-by: Laurent Dufour <ldufour@linux.vnet.ibm.com> Link: https://lore.kernel.org/lkml/1523975611-15978-9-git-send-email-ldufour@linux.vnet.ibm.com/ Bug: 161210518 Change-Id: Ibc23ef3b9dbb80323c0f24cb06da34b4c3a8fa71 Signed-off-by: Vinayak Menon <vinmenon@codeaurora.org> Signed-off-by: Charan Teja Reddy <charante@codeaurora.org>	2021-01-22 17:59:39 +00:00
Greg Kroah-Hartman	ca0c76873c	Merge 5.10-rc7 into android-mainline Linux 5.10-rc7 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ie61b3510311a825ee57bee12610e25bc1500b350	2020-12-09 08:09:26 +01:00
Liu Zixian	309d08d9b3	mm/mmap.c: fix mmap return value when vma is merged after call_mmap() On success, mmap should return the begin address of newly mapped area, but patch "mm: mmap: merge vma after call_mmap() if possible" set vm_start of newly merged vma to return value addr. Users of mmap will get wrong address if vma is merged after call_mmap(). We fix this by moving the assignment to addr before merging vma. We have a driver which changes vm_flags, and this bug is found by our testcases. Fixes: `d70cec8983` ("mm: mmap: merge vma after call_mmap() if possible") Signed-off-by: Liu Zixian <liuzixian4@huawei.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Reviewed-by: David Hildenbrand <david@redhat.com> Cc: Miaohe Lin <linmiaohe@huawei.com> Cc: Hongxiang Lou <louhongxiang@huawei.com> Cc: Hu Shiyuan <hushiyuan@huawei.com> Cc: Matthew Wilcox <willy@infradead.org> Link: https://lkml.kernel.org/r/20201203085350.22624-1-liuzixian4@huawei.com Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>	2020-12-06 10:19:07 -08:00
Greg Kroah-Hartman	b3dd1b5952	Merge `922a763ae1` ("Merge tag 'zonefs-5.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/dlemoal/zonefs") into android-mainline Steps on the way to 5.10-rc1 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I520719ae5e0d992c3756e393cb299d77d650622e	2020-10-26 10:08:43 +01:00
Greg Kroah-Hartman	05d2a661fd	Merge `54a4c789ca` ("Merge tag 'docs/v5.10-1' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media") into android-mainline Steps on the way to 5.10-rc1 Resolves conflicts in: fs/userfaultfd.c Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ie3fe3c818f1f6565cfd4fa551de72d2b72ef60af	2020-10-26 09:23:33 +01:00
Greg Kroah-Hartman	75c90a8c3a	Merge `d5660df4a5` ("Merge branch 'akpm' (patches from Andrew)") into android-mainline steps on the way to 5.10-rc1 Change-Id: Iddc84c25b6a9d71fa8542b927d6f69c364131c3d Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2020-10-25 11:57:29 +01:00
Greg Kroah-Hartman	c62fe038fe	Merge `3ad11d7ac8` ("Merge tag 'block-5.10-2020-10-12' of git://git.kernel.dk/linux-block") into android-mainline Steps on the way to 5.10-rc1 Resolves conflicts in: include/linux/blk-crypto.h Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I4012850c2e4b804d9e87e90b8e03a3b9ce21b5e7	2020-10-24 17:29:43 +02:00
Greg Kroah-Hartman	1c84293163	Merge `6734e20e39` ("Merge tag 'arm64-upstream' of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux") into android-mainline Tiny steps on the way to 5.10-rc1. Change-Id: I8ff6cb398ac1c0623bf2cefd29860616d05be107 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2020-10-20 19:15:03 +02:00
Liam R. Howlett	fb8090b699	mm/mmap: add inline munmap_vma_range() for code readability There are two locations that have a block of code for munmapping a vma range. Change those two locations to use a function and add meaningful comments about what happens to the arguments, which was unclear in the previous code. Signed-off-by: Liam R. Howlett <Liam.Howlett@Oracle.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Reviewed-by: Andrew Morton <akpm@linux-foundation.org> Link: http://lkml.kernel.org/r/20200818154707.2515169-2-Liam.Howlett@Oracle.com Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>	2020-10-18 09:27:09 -07:00
Liam R. Howlett	3903b55a61	mm/mmap: add inline vma_next() for readability of mmap code There are three places that the next vma is required which uses the same block of code. Replace the block with a function and add comments on what happens in the case where NULL is encountered. Signed-off-by: Liam R. Howlett <Liam.Howlett@Oracle.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Reviewed-by: Andrew Morton <akpm@linux-foundation.org> Link: http://lkml.kernel.org/r/20200818154707.2515169-1-Liam.Howlett@Oracle.com Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>	2020-10-18 09:27:09 -07:00
Jann Horn	4d45e75a99	mm: remove the now-unnecessary mmget_still_valid() hack The preceding patches have ensured that core dumping properly takes the mmap_lock. Thanks to that, we can now remove mmget_still_valid() and all its users. Signed-off-by: Jann Horn <jannh@google.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Acked-by: Linus Torvalds <torvalds@linux-foundation.org> Cc: Christoph Hellwig <hch@lst.de> Cc: Alexander Viro <viro@zeniv.linux.org.uk> Cc: "Eric W . Biederman" <ebiederm@xmission.com> Cc: Oleg Nesterov <oleg@redhat.com> Cc: Hugh Dickins <hughd@google.com> Link: http://lkml.kernel.org/r/20200827114932.3572699-8-jannh@google.com Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>	2020-10-16 11:11:22 -07:00
Miaohe Lin	73eb7f9a4f	mm: use helper function put_write_access() In commit `1da177e4c3` ("Linux-2.6.12-rc2"), the helper put_write_access() came with the atomic_dec operation of the i_writecount field. But it forgot to use this helper in __vma_link_file() and dup_mmap(). Signed-off-by: Miaohe Lin <linmiaohe@huawei.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Link: https://lkml.kernel.org/r/20200924115235.5111-1-linmiaohe@huawei.com Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>	2020-10-16 11:11:19 -07:00
Liao Pingfang	8332326e8e	mm/mmap.c: replace do_brk with do_brk_flags in comment of insert_vm_struct() Replace do_brk with do_brk_flags in comment of insert_vm_struct(), since do_brk was removed in following commit. Fixes: `bb177a732c` ("mm: do not bug_on on incorrect length in __mm_populate()") Signed-off-by: Liao Pingfang <liao.pingfang@zte.com.cn> Signed-off-by: Yi Wang <wang.yi59@zte.com.cn> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Link: https://lkml.kernel.org/r/1600650778-43230-1-git-send-email-wang.yi59@zte.com.cn Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>	2020-10-13 18:38:32 -07:00
Miaohe Lin	cb48841fbf	mm/mmap.c: use helper function allow_write_access() in __remove_shared_vm_struct() In commit `1da177e4c3` ("Linux-2.6.12-rc2"), the helper allow_write_access came with the atomic_inc operation of the i_writecount field in the func __remove_shared_vm_struct(). But it forgot to use this helper function. Signed-off-by: Miaohe Lin <linmiaohe@huawei.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Link: https://lkml.kernel.org/r/20200921115814.39680-1-linmiaohe@huawei.com Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>	2020-10-13 18:38:32 -07:00
Miaohe Lin	cf508b5845	mm: use helper function mapping_allow_writable() Commit `4bb5f5d939` ("mm: allow drivers to prevent new writable mappings") changed i_mmap_writable from unsigned int to atomic_t and add the helper function mapping_allow_writable() to atomic_inc i_mmap_writable. But it forgot to use this helper function in dup_mmap() and __vma_link_file(). Signed-off-by: Miaohe Lin <linmiaohe@huawei.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Cc: Christian Brauner <christian.brauner@ubuntu.com> Cc: Ingo Molnar <mingo@kernel.org> Cc: Peter Zijlstra <peterz@infradead.org> Cc: "Eric W. Biederman" <ebiederm@xmission.com> Cc: Christian Kellner <christian@kellner.me> Cc: Suren Baghdasaryan <surenb@google.com> Cc: Adrian Reber <areber@redhat.com> Cc: Shakeel Butt <shakeelb@google.com> Cc: Aleksa Sarai <cyphar@cyphar.com> Cc: Thomas Gleixner <tglx@linutronix.de> Link: https://lkml.kernel.org/r/20200917112736.7789-1-linmiaohe@huawei.com Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>	2020-10-13 18:38:31 -07:00
Wei Yang	0fc48a6e21	mm/mmap: check on file instead of the rb_root_cached of its address_space In __vma_adjust(), we do the check on root to decide whether to adjust the address_space. It seems to be more meaningful to do the check on file itself. This means we are adjusting some data because it is a file backed vma. Since we seem to assume the address_space is valid if it is a file backed vma, let's just replace root with file here. Signed-off-by: Wei Yang <richard.weiyang@linux.alibaba.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Reviewed-by: Andrew Morton <akpm@linux-foundation.org> Link: https://lkml.kernel.org/r/20200913133631.37781-2-richard.weiyang@linux.alibaba.com Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>	2020-10-13 18:38:31 -07:00
Wei Yang	808fbdbea0	mm/mmap: not necessary to check mapping separately root with type of struct rb_root_cached is an element of mapping with type of struct address_space. This implies when we have a valid root it must be a part of valid mapping. So we can merge these two checks together to make the code more easy to read and to save some cpu cycles. Signed-off-by: Wei Yang <richard.weiyang@linux.alibaba.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Reviewed-by: Andrew Morton <akpm@linux-foundation.org> Link: https://lkml.kernel.org/r/20200913133631.37781-1-richard.weiyang@linux.alibaba.com Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>	2020-10-13 18:38:31 -07:00

1 2 3 4 5 ...

580 Commits